Codex App workspace dependency reinstall fails with bubblewrap digest mismatch on WSL

What version of the Codex App are you using (From “About Codex” dialog)?

26.519.81530

What subscription do you have?

Plus plan

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What issue are you seeing?

I cannot reinstall the Codex workspace dependencies.

After the reinstall attempt, sandboxed commands fail with a bubblewrap digest mismatch error:

thread 'main' (...) panicked at linux-sandbox/src/bundled_bwrap.rs:44:35:
bundled bubblewrap digest mismatch for /mnt/c/Users/<user>/.codex/bin/wsl/codex-resources/bwrap:
expected sha256:90604f553d1fc200c6b23f53ef80a58f952e9b50e2716cb590f7e1bfa0f27b27,
got sha256:067a1289020a7398e71cf0cebbb057277b792831735da080f6cd88b8ec1237fa

The same command works when run outside the sandbox, so this appears related to the Codex App WSL sandbox/runtime resources rather than the project dependencies themselves.

What steps can reproduce the bug?

1. Open Codex App on Windows with WSL Debian.
2. Open a workspace under WSL, for example /home/<user>/code/yourproject.
3. Try to reinstall workspace dependencies in Codex.
4. Run a sandboxed command in the workspace.

Observed result: the command fails before running with a bubblewrap digest mismatch for:
/mnt/c/Users/<user>/.codex/bin/wsl/codex-resources/bwrap

I reproduced this with a simple read command, and then the same command succeeded when run outside the sandbox.

What is the expected behavior?

Codex should reinstall workspace dependencies successfully, and sandboxed commands should run normally afterward.

If the bundled WSL sandbox resource is corrupted or outdated, Codex should repair or redownload it automatically instead of failing with a digest mismatch.

Additional information

Feedback ID: no-active-thread-019e6c88-0789-79a3-9fde-b7dfea2477aa

WSL distro: Debian GNU/Linux 11 (bullseye)
WSL Kernel release: 6.6.114.1-microsoft-standard-WSL2
Workspace path: /home/<user>/code/bemstar

The failing resource path is inside:
~/.codex/bin/wsl/codex-resources/bwrap