Codex 26.609.41114 + Computer Use 1.0.809: list_apps/get_app_state fail with app-server exited; helper entitlement/provisioning errors

Summary

Codex Desktop exposes the bundled Computer Use tools, but every read-only Computer Use call fails immediately with:

codex app-server exited before returning a response

This still reproduces after removing/reinstalling computer-use@openai-bundled with the Codex CLI and hard-restarting Codex.app, the main app-server, node_repl, SkyComputerUseClient mcp, and SkyComputerUseService.

The local evidence points away from plugin marketplace/cache/config and toward a Computer Use helper runtime / signing / entitlement / provisioning issue. At the same time as the failed tool calls, macOS unified logs repeatedly report:

• com.apple.security.application-groups for 2DC432GLL2.com.openai.sky.CUAService being ignored because of invalid application signature or incorrect provisioning profile
• kTCCServiceAppleEvents requiring com.apple.security.automation.apple-events, but the running SkyComputerUseService does not have that entitlement
• the Computer Use service XPC connection being invalidated because the client process exited

Full sanitized diagnostics bundle: https://gist.github.com/violet%2Dgo/812511d4338689e896977f6f8b9412cd

Environment

macOS: 27.0 (26A5353q), arm64
Codex.app: 26.609.41114, bundle version 3888
Computer Use plugin: computer-use@openai-bundled 1.0.809
Computer Use service bundle: com.openai.sky.CUAService, version 1.0 / 809
Computer Use client bundle: com.openai.sky.CUAService.cli, version 1.0 / 809

codex plugin list shows the plugin installed and enabled:

computer-use@openai-bundled  installed, enabled  1.0.809  ~/.codex/.tmp/bundled-marketplaces/openai-bundled/plugins/computer-use

codex mcp list shows the official bundled MCP bridge, not an external fallback:

computer-use  ./Codex Computer Use.app/Contents/SharedSupport/SkyComputerUseClient.app/Contents/MacOS/SkyComputerUseClient  mcp  cwd=~/.codex/plugins/cache/openai-bundled/computer-use/1.0.809/.  enabled

Actual behavior

After using tool_search, the current Codex thread exposes the Computer Use namespace, including mcp__computer_use.list_apps and mcp__computer_use.get_app_state.

Both read-only probes fail:

mcp__computer_use.list_apps
=> codex app-server exited before returning a response

mcp__computer_use.get_app_state({ app: "Finder" })
=> codex app-server exited before returning a response

A fresh thread after CLI reinstall + hard restart produces the same result:

list_apps:
codex app-server exited before returning a response

get_app_state({ app: "Finder" }):
codex app-server exited before returning a response

Expected behavior

list_apps should return the running/recent app list.

get_app_state({ app: "Finder" }) should return Finder app state, or at least a specific actionable Computer Use runtime error. It should not fail as a generic short-lived app-server exit when the plugin is installed, enabled, exposed in the thread, and the helper processes have been freshly restarted.

Reproduction / actions already tried

1. Verified the plugin is visible from Codex and the tools are exposed through tool_search.
2. Verified this is the official bundled computer-use@openai-bundled MCP bridge, not the external CUA Driver MCP.
3. Verified the bundled marketplace/cache/config layer is present and enabled.
4. Backed up ~/.codex/config.toml.
5. Ran:

codex plugin remove computer-use@openai-bundled --json
codex plugin add computer-use@openai-bundled --json

The reinstall result was:

{
  "pluginId": "computer-use@openai-bundled",
  "name": "computer-use",
  "marketplaceName": "openai-bundled",
  "version": "1.0.809",
  "installedPath": "~/.codex/plugins/cache/openai-bundled/computer-use/1.0.809",
  "authPolicy": "ON_INSTALL"
}

1. Hard-restarted:

• Codex.app
• /Applications/Codex.app/Contents/Resources/codex app-server
• cua_node/bin/node_repl
• SkyComputerUseClient mcp
• SkyComputerUseService

1. Opened a fresh Codex thread and re-ran list_apps and get_app_state({ app: "Finder" }).
2. The same failure reproduced.

Process age after the hard restart confirms this is not a stale app-server case:

Codex.app                       started Sun Jun 14 23:32:32 2026
codex app-server --analytics    started Sun Jun 14 23:32:33 2026
SkyComputerUseService           started Sun Jun 14 23:32:52 2026
SkyComputerUseClient mcp        started Sun Jun 14 23:34:50 2026

Permission / region checks

The observed TCC logs include successful authorization results for the standard permissions, so this does not look like a simple missing Accessibility / Screen Recording toggle:

kTCCServiceAccessibility ... authValue=2
kTCCServiceScreenCapture ... authValue=2
kTCCServiceListenEvent ... authValue=2

The egress sanity check was outside the documented launch-unavailable regions:

loc=SG

Codesign / entitlements observed locally

The helper app is signed by OpenAI:

Authority=Developer ID Application: OpenAI OpCo, LLC (2DC432GLL2)
TeamIdentifier=2DC432GLL2
Identifier=com.openai.sky.CUAService
Identifier=com.openai.sky.CUAService.cli

The installed entitlements show application groups and keychain access groups, but do not show com.apple.security.automation.apple-events:

com.openai.sky.CUAService entitlements:
  com.apple.application-identifier = 2DC432GLL2.com.openai.sky.CUAService
  com.apple.developer.team-identifier = 2DC432GLL2
  com.apple.security.application-groups = [2DC432GLL2.com.openai.sky.CUAService]
  keychain-access-groups = [2DC432GLL2.*]

com.openai.sky.CUAService.cli entitlements:
  com.apple.application-identifier = 2DC432GLL2.com.openai.sky.CUAService.cli
  com.apple.developer.team-identifier = 2DC432GLL2
  com.apple.security.application-groups = [2DC432GLL2.com.openai.sky.CUAService]
  keychain-access-groups = [2DC432GLL2.*]

macOS unified log evidence

Representative high-signal excerpts from the same reproduction window:

trustd: Entitlement com.apple.security.application-groups=(
    "2DC432GLL2.com.openai.sky.CUAService"
) is ignored because of invalid application signature or incorrect provisioning profile

tccd: Prompting policy for hardened runtime; service: kTCCServiceAppleEvents requires entitlement com.apple.security.automation.apple-events but it is missing for accessing={TCCDProcess: identifier=com.openai.sky.CUAService, pid=18955, ... binary_path=~/.codex/computer-use/Codex Computer Use.app/Contents/MacOS/SkyComputerUseService}, requesting={TCCDProcess: identifier=com.openai.sky.CUAService, pid=18955, ... binary_path=~/.codex/computer-use/Codex Computer Use.app/Contents/MacOS/SkyComputerUseService}

SkyComputerUseService: invalidated because the client process (...) either cancelled the connection or exited

The complete relevant sanitized log bundle is linked at the top of this issue.

Related issues found before filing

This appears related to, but not exactly the same as:

• #27891 — app-group entitlement/provisioning mismatch
• #21846 — Computer Use 1.0.809 / helper signing / launch-validation failures
• #23840 — Desktop MCP initialize/runtime discovery failure around the Computer Use client
• #22927 — downstream runtime app is missing / helper runtime discovery failures
• #18507 — AppleEvents / sender authentication / entitlement-adjacent failure mode

I filed a separate issue because the user-visible tool error here is different: both exposed MCP tools fail with codex app-server exited before returning a response after CLI reinstall and hard restart, while logs point to the same helper signing/entitlement/provisioning layer.