Codex Desktop macOS: bundled Computer Use plugin skipped as missing after update

Summary

After updating Codex Desktop for macOS to 26.601.21317, the bundled computer-use plugin cannot be loaded. In the plugin UI it reports as unavailable / unable to load, and after restart/reconcile the plugin disappears or becomes disabled again.

This does not appear to be a macOS TCC permissions issue. Screen capture and Accessibility/System Events both work, and the Computer Use helper binaries are present and runnable. The failure appears to be in the bundled plugin reconcile/install flow.

Environment

• App: Codex Desktop for macOS
• Bundle ID: com.openai.codex
• Codex version: 26.601.21317
• Codex build: 3511
• Computer Use helper bundle ID: com.openai.sky.CUAService
• Computer Use helper version/build: 1.0 / 799
• Architecture: Apple Silicon / arm64

Observed Behavior

1. The Computer Use plugin is unavailable or reports that it cannot be loaded in the Codex plugin UI.
2. If the plugin is manually added to config/cache, Codex later removes or ignores it during plugin reconcile.
3. computer-use exists in the bundled marketplace directory, but is not installed into the active plugin cache.
4. The active bundled plugin cache only contains browser and chrome.

Expected Behavior

The bundled computer-use@openai-bundled plugin should install/register normally and expose its MCP tools to Codex when enabled.

Local Evidence

The bundled plugin package exists locally:

~/.codex/.tmp/bundled-marketplaces/openai-bundled/plugins/computer-use

Its plugin manifest declares:

name: computer-use
version: 1.0.799
description: Control desktop apps on macOS from Codex through Computer Use.
mcpServers: ./.mcp.json

The MCP config points to:

./Codex Computer Use.app/Contents/SharedSupport/SkyComputerUseClient.app/Contents/MacOS/SkyComputerUseClient mcp

The Computer Use client binary starts and shows the expected MCP subcommand:

USAGE: cua <subcommand>

SUBCOMMANDS:
  mcp                     Runs the Computer Use client as an MCP server
  turn-ended              Handles a Codex turn-ended notification

macOS permissions appear to be working:

screencapture -x /tmp/codex_screen_probe_final.png
osascript -e 'tell application "System Events" to count processes'

Both commands succeed.

Key Log Evidence

The Codex logs show that computer-use is recognized in the bundled marketplace:

bundled_plugins_marketplace_added marketplaceName=openai-bundled marketplacePluginNames=["browser","chrome","computer-use","latex"]

But the install step skips it as missing:

bundled_plugin_install_skipped_missing pluginName=computer-use

There are also log entries where Codex explicitly requests uninstall of the plugin:

bundled_plugin_uninstall_requested pluginId=computer-use@openai-bundled pluginName=computer-use reason=not_in_bundled_marketplace_plugin_names

This suggests a reconcile/state bug: computer-use appears in the marketplace plugin list at one point, but another reconcile pass treats it as absent and removes/skips it.

Reproduction Pattern

1. Start Codex Desktop.
2. Open the plugin UI.
3. Attempt to enable/load Computer Use.
4. UI reports the plugin cannot load, or the plugin disappears/gets disabled.
5. Restart Codex.
6. Logs show computer-use is present in the marketplace list, but install is skipped as missing or the plugin is uninstalled because it is allegedly not in the marketplace plugin names.

Why This Looks Like An Update Regression

The current Codex app has a recent signed build:

CFBundleShortVersionString: 26.601.21317
CFBundleVersion: 3511
Signature timestamp: Jun 3, 2026

After the update, Codex still contains/bundles the computer-use plugin package, but the plugin manager no longer registers it into:

~/.codex/plugins/cache/openai-bundled/

Only browser and chrome are installed there.

Request

Please investigate whether Codex Desktop 26.601.21317 has a bundled plugin reconcile bug, feature flag mismatch, or account/workspace policy issue causing computer-use@openai-bundled to be treated as missing/unloadable on macOS.

The desired outcome is for the bundled Computer Use plugin to load normally again, or for the UI/logs to clearly explain if this account/region/workspace is no longer eligible.