Windows app: Sites update_site_access fails with AttributeError and UI fallback is unauthenticated

Summary

Changing an existing OpenAI Sites project from custom access to public repeatedly fails in the Codex Windows app. The connector returns the same internal Python AttributeError every time, and the in-app browser fallback opens https://chatgpt.com/sites without the user's authenticated session.

Environment

• OS: Windows 11, build 26200.2
• Codex Windows app package: 26.707.8479.0
• Sites plugin: 0.1.27
• Browser plugin: 26.707.72221
• Site is already deployed and currently uses custom access
• available_access_modes includes public

Steps to reproduce

1. Open an existing deployed Sites project whose access mode is custom.
2. Call the Sites access update action with:

• access_mode: "public"
• the exact existing project id

1. Repeating with or without empty user/group allowlists produces the same result.
2. Try the UI fallback by opening https://chatgpt.com/sites in the Codex in-app browser.

Actual result

The access update action returns:

AttributeError: 'str' object has no attribute 'value'

The site remains owner-only. A subsequent get_site call also intermittently returned HTTP 520. The in-app browser opened a logged-out ChatGPT page, so the UI fallback could not access Sites settings.

Expected result

The access policy should change to public, allowing anyone with the URL to visit, while the application-level admin PIN remains unchanged.

Additional diagnostic

Windows Error Reporting recorded RADAR_PRE_LEAK_64 for ChatGPT.exe on the same machine. The app has also restarted or lost browser state during repeated attempts, but the deterministic connector error above is the primary blocker.

No project identifiers, customer data, or reservation data are included in this report.