Browser control fails on macOS 14.1.2: sandbox-exec: unbound variable: TIOCSTI
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.4k
- PR merge metrics
- PR metrics pending
Description
What version of the Codex App are you using (From “About Codex” dialog)?
26.915.31029 (build 9771), installed as ChatGPT.app
What subscription do you have?
Plus
What platform is your computer?
Darwin 23.1.0 arm64 arm macOS 14.1.2 (23B92)
What issue are you seeing?
Browser control fails before the automation runtime can connect to the in-app browser. The browser itself opens and displays websites, but the assistant cannot inspect or interact with pages.
The tool returned these errors:
trusted Node process exited unexpectedly; kernel reset, rerun your request
node_repl kernel exited unexpectedly
kernel_status: exited(code=65)
kernel_stderr_tail:
sandbox-exec: unbound variable: TIOCSTI at , line 144, column 33
Backtrace:
:144:33:
TIOCSTI
This blocks browser automation across tasks. Repeated app restarts and a JavaScript runtime reset did not resolve the issue.
What steps can reproduce the bug?
- Open the desktop app on macOS 14.1.2.
- Open a website in the in-app browser.
- Ask the assistant to inspect or control the browser using @Browser.
- The browser automation runtime exits before returning browser state.
The assistant reproduced the failure using the supported cua_repl tool with:
await cua.getState();
An earlier attempt to open a website using cua.createBrowserTab(...) also failed during runtime startup.
The failure persisted after multiple app restarts and a runtime reset.
What is the expected behavior?
The browser automation runtime should initialize successfully, discover the open browser tab, and allow the assistant to inspect and interact with websites.
Additional information
Unified computer use plugin version: 26.915.31029.
Bundled app-server reported version: 0.155.0-alpha.9.
Read-only inspection found this literal sandbox rule in the bundled executable /Applications/ChatGPT.app/Contents/Resources/codex:
(deny file-ioctl (ioctl-command TIOCSTI))
This suggests a sandbox policy compatibility problem, but the underlying cause has not been confirmed.
App logs recorded an update download while running build 9647. The installed app now reports build 9771, and browser control continued to fail.
No application binaries or sandbox protections were modified.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the failure with the supported cua_repl call await cua.getState() and inspect the bundled /Applications/ChatGPT.app/Contents/Resources/codex sandbox rule and browser-runtime-diagnostic.md. Trace the macOS sandbox startup failure around the TIOCSTI rule; done means the automation runtime initializes, discovers the open tab, and permits browser inspection and interaction.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- macos, node.js, rust
- Domain
- desktop, security, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 42/100