Node REPL broken: sandboxPolicy missing in MCP request meta (version mismatch)
Open 💬 2 comments Opened Jun 20, 2026 by memeshe069-beep
Bug Description
Node REPL MCP server rejects all js calls with error:
Mcp error: -32602: js: codex/sandbox-state-meta: missing field sandboxPolicy
Environment
- Codex App: 26.616.5445.0 (Windows Store)
- Codex CLI: 26.616.41845
- Node REPL runtime: a89897d3d9baa117
- OS: Windows 10 x64
- Node: v24.14.0
Root Cause
The node_repl.exe binary requires sandboxPolicy field in MCP request _meta.codex/sandbox-state-meta, but Codex CLI (26.616.41845) does not inject this field. This is a version mismatch between the App and CLI/runtime.
Attempted Fixes (all failed)
- Deleted and re-downloaded cua_node runtime (downloaded same broken version)
- Replaced entire runtime with App's bundled version (26.616.5445)
- Fixed @oai/sky package.json exports ("./dist/": "./dist/")
- Verified module imports work standalone, but MCP transport rejects before JS runs
Impact
- Computer Use completely unusable
- In-app Browser unusable
- Chrome extension unusable
- All Node REPL-dependent features broken
Workaround
WScript.Shell SendKeys works for basic Windows automation but lacks Computer Use capabilities.
This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗