openai / openai/codex

Browser control fails on macOS 14.1.2: sandbox-exec: unbound variable: TIOCSTI

Open
#46,576 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

app browser bug sandbox
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

What version of the Codex App are you using (From “About Codex” dialog)?

26.915.31029 (build 9771), installed as ChatGPT.app

What subscription do you have?

Plus

What platform is your computer?

Darwin 23.1.0 arm64 arm macOS 14.1.2 (23B92)

What issue are you seeing?

Browser control fails before the automation runtime can connect to the in-app browser. The browser itself opens and displays websites, but the assistant cannot inspect or interact with pages.

The tool returned these errors:

trusted Node process exited unexpectedly; kernel reset, rerun your request

node_repl kernel exited unexpectedly

kernel_status: exited(code=65)
kernel_stderr_tail:
sandbox-exec: unbound variable: TIOCSTI at , line 144, column 33
Backtrace:
:144:33:
TIOCSTI

This blocks browser automation across tasks. Repeated app restarts and a JavaScript runtime reset did not resolve the issue.

What steps can reproduce the bug?
  1. Open the desktop app on macOS 14.1.2.
  2. Open a website in the in-app browser.
  3. Ask the assistant to inspect or control the browser using @Browser.
  4. The browser automation runtime exits before returning browser state.

The assistant reproduced the failure using the supported cua_repl tool with:

await cua.getState();

An earlier attempt to open a website using cua.createBrowserTab(...) also failed during runtime startup.

The failure persisted after multiple app restarts and a runtime reset.

What is the expected behavior?

The browser automation runtime should initialize successfully, discover the open browser tab, and allow the assistant to inspect and interact with websites.

Additional information

Unified computer use plugin version: 26.915.31029.
Bundled app-server reported version: 0.155.0-alpha.9.

Read-only inspection found this literal sandbox rule in the bundled executable /Applications/ChatGPT.app/Contents/Resources/codex:

(deny file-ioctl (ioctl-command TIOCSTI))

This suggests a sandbox policy compatibility problem, but the underlying cause has not been confirmed.

App logs recorded an update download while running build 9647. The installed app now reports build 9771, and browser control continued to fail.

No application binaries or sandbox protections were modified.

browser-runtime-diagnostic.md

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the failure with the supported cua_repl call await cua.getState() and inspect the bundled /Applications/ChatGPT.app/Contents/Resources/codex sandbox rule and browser-runtime-diagnostic.md. Trace the macOS sandbox startup failure around the TIOCSTI rule; done means the automation runtime initializes, discovers the open tab, and permits browser inspection and interaction.

Written by the indexing model from the issue text.

Assessment

Tech stack
macos, node.js, rust
Domain
desktop, security, web-dev
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.