Node REPL broken: sandboxPolicy missing in MCP request meta (version mismatch)

Open 💬 2 comments Opened Jun 20, 2026 by memeshe069-beep

Bug Description

Node REPL MCP server rejects all js calls with error:
Mcp error: -32602: js: codex/sandbox-state-meta: missing field sandboxPolicy

Environment

  • Codex App: 26.616.5445.0 (Windows Store)
  • Codex CLI: 26.616.41845
  • Node REPL runtime: a89897d3d9baa117
  • OS: Windows 10 x64
  • Node: v24.14.0

Root Cause

The node_repl.exe binary requires sandboxPolicy field in MCP request _meta.codex/sandbox-state-meta, but Codex CLI (26.616.41845) does not inject this field. This is a version mismatch between the App and CLI/runtime.

Attempted Fixes (all failed)

  1. Deleted and re-downloaded cua_node runtime (downloaded same broken version)
  2. Replaced entire runtime with App's bundled version (26.616.5445)
  3. Fixed @oai/sky package.json exports ("./dist/": "./dist/")
  4. Verified module imports work standalone, but MCP transport rejects before JS runs

Impact

  • Computer Use completely unusable
  • In-app Browser unusable
  • Chrome extension unusable
  • All Node REPL-dependent features broken

Workaround

WScript.Shell SendKeys works for basic Windows automation but lacks Computer Use capabilities.

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗