Windows Computer Use fails: codex/sandbox-state-meta missing sandboxPolicy

Summary

On Windows, every node_repl/js call used by the bundled Computer Use plugin fails before executing any JavaScript:

Mcp error: -32602: js: codex/sandbox-state-meta: missing field `sandboxPolicy`

This prevents @Computer from listing apps, launching Calculator, or reading any window state.

Environment

• Codex Desktop package: 26.616.5445.0 (Microsoft Store, package status OK)
• Bundled Computer Use / Browser plugin: 26.616.41845
• Bundled Codex CLI: 0.142.0-alpha.6
• @oai/sky: 0.4.13
• OS: Windows 11 Pro, build 10.0.26200
• Session ID: 019ef261-b6a2-7fe2-a2c0-81cd72585ca3

Reproduction

1. Install and enable the bundled Computer Use plugin.
2. Start a new local Desktop thread.
3. Ask: @Computer open Calculator and read the current display.
4. The agent invokes the bundled node_repl/js tool.
5. The MCP server rejects the request with the missing sandboxPolicy error before user code runs.

A smaller reproduction is any call such as:

nodeRepl.write("node_repl_ok")

Checks already completed

• BIOS virtualization is enabled and a hypervisor is present.
• The AppX package reports Status: Ok and has a valid Store signature.
• Computer Use was removed and reinstalled through the supported plugin CLI.
• Codex Desktop was fully restarted and a new thread was used.
• Removing the obsolete [features] js_repl = false entry does not change the error; Desktop restores that entry on restart.
• No user-defined sandboxPolicy field was added because this appears to be internal request metadata, not a documented config key.
• The failure is deterministic and occurs before @oai/sky initialization.

Expected behavior

The Desktop/app-server should pass a valid codex/sandbox-state-meta object to node_repl/js, allowing the minimal call to return node_repl_ok and Computer Use to initialize.