app-server panics in sandboxed environments (SCDynamicStore NULL object)

Resolved 💬 3 comments Opened Apr 1, 2026 by shimakazuhito-prog Closed Apr 11, 2026

Description

When running codex app-server inside a sandboxed environment (e.g., Claude Code sandbox on macOS), the process panics with the following error:

nice(5) failed: operation not permitted

thread 'main' panicked at system-configuration-0.6.1/src/dynamic_store.rs:154:1:
Attempted to create a NULL object.

Steps to Reproduce

  1. Install Claude Code CLI and the Codex plugin
  2. Run Claude Code inside Cursor IDE (or any sandboxed environment on macOS)
  3. Invoke a Codex command (e.g., /codex:rescue) which triggers codex app-server

Expected Behavior

app-server should gracefully handle restricted system API access (e.g., SCDynamicStore, nice()) instead of panicking, or provide a clear error message indicating sandbox incompatibility.

Actual Behavior

The process panics due to SCDynamicStore returning NULL when system configuration access is restricted by the sandbox. The nice(5) call also fails with "operation not permitted".

Environment

  • codex-cli 0.117.0
  • macOS Darwin 25.3.0 (Apple Silicon)
  • Running inside Claude Code (Cursor IDE integration) with sandbox enabled
  • Node.js v22.17.1

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗