Codex Desktop Windows: node_repl/js fails before execution with missing sandboxPolicy metadata

What version of the Codex App are you using (From “About Codex” dialog)?

26.616.5445.0

What subscription do you have?

Plus

What platform is your computer?

Windows_NT, Windows PowerShell 5.1, x64

What issue are you seeing?

Codex Desktop Computer Use / browser tools fail on Windows before execution.

Error:

Mcp error: -32602:
js: codex/sandbox-state-meta: missing field `sandboxPolicy`

I also tested node_repl/js directly. The tool is exposed in the session, but execution fails before JavaScript runs because the required sandboxPolicy metadata is missing.

Environment:

Codex Desktop: 26.616.5445.0
Codex CLI: 0.141.0
OS: Windows_NT
Shell: Windows PowerShell 5.1
Mode: Windows native / PowerShell
WSL: disabled
runCodexInWindowsSubsystemForLinux = false
Windows sandbox = unelevated

What I verified:

[desktop]
runCodexInWindowsSubsystemForLinux = false

[windows]
sandbox = "unelevated"

[plugins."browser@openai-bundled"]
enabled = true

[plugins."chrome@openai-bundled"]
enabled = true

[plugins."computer-use@openai-bundled"]
enabled = true

I already tried:

- Updated Codex CLI to 0.141.0
- Ran Windows sandbox setup successfully
- Confirmed native Windows / PowerShell mode
- Confirmed WSL environment variables were empty
- Confirmed Codex sandbox files and logs exist under %USERPROFILE%\.codex
- Confirmed browser@openai-bundled, chrome@openai-bundled, and computer-use@openai-bundled are installed and enabled
- Confirmed openai-bundled plugin version is 26.616.41845
- Confirmed current Desktop package is OpenAI.Codex 26.616.5445.0

Diagnosis:

This does not appear to be a Chrome extension issue, LinkedIn issue, local config issue, plugin cache issue, or failed Windows sandbox installation.

The failure happens before Computer Use, Chrome, browser tools, or JavaScript execution begins. It appears that Codex Desktop exposes the node_repl/js tool, but the Desktop MCP/tool bridge does not pass the required sandboxPolicy metadata into the tool request.

Impact:

Computer Use, browser tools, and Chrome integration cannot start. sky.list_apps() cannot list visible apps. Chrome, LinkedIn, and websites were not opened.

What steps can reproduce the bug?

Feedback ID: 019ee5d8-d07b-7ba0-9ef9-abbfa7d3dc8d

What is the expected behavior?

Expected behavior:

Codex Desktop should pass the required sandboxPolicy metadata from the active Windows native sandbox session into the MCP / JavaScript / tool bridge request.

node_repl/js should execute normally when exposed in the session. Computer Use and browser tools should then be able to initialize normally, and a safe test such as listing available apps should work without failing at sandbox metadata validation.

The expected result is that JavaScript execution starts successfully, or Computer Use returns a normal available/unavailable result. It should not fail before execution with:

js: codex/sandbox-state-meta: missing field `sandboxPolicy`

Additional information

Additional information:

This appears to be a Codex Desktop app / MCP tool-bridge metadata issue, not a local setup issue.

Verified environment:

Codex Desktop: 26.616.5445.0
Codex CLI: 0.141.0
OS: Windows_NT
Shell: Windows PowerShell 5.1
Mode: Windows native / PowerShell
WSL: disabled
runCodexInWindowsSubsystemForLinux = false
Windows sandbox = unelevated

Verified checks:

- Native Windows / PowerShell mode works
- WSL environment variables are empty
- Windows sandbox config is present and valid
- Codex sandbox setup completed successfully
- Sandbox files/logs exist under %USERPROFILE%\.codex
- browser@openai-bundled is installed and enabled
- chrome@openai-bundled is installed and enabled
- computer-use@openai-bundled is installed and enabled
- openai-bundled plugin version is 26.616.41845
- Current Desktop package is OpenAI.Codex 26.616.5445.0
- Packaged marketplace and local plugin cache were checked

Diagnosis:

The tool is exposed, but the request fails before JavaScript execution because sandboxPolicy is missing from the metadata passed to the tool bridge. This suggests Codex Desktop is not forwarding required sandbox metadata into the JS / MCP tool request.

Impact:

Computer Use, browser tools, and Chrome integration cannot start. Chrome, LinkedIn, and websites were not opened.