Computer Use native pipe fails and plugin disables itself after restart on macOS

Summary

Computer Use intermittently works once, then subsequent attempts time out or fail with:

Sky Computer Use native pipe startup failed

The Computer Use plugin also became disabled again after restarting/rebooting, even though it had previously been enabled.

Environment

• Codex desktop app: 26.730.61639 (build 6234)
• Codex CLI bundled with app: 0.147.0-alpha.1.2
• macOS: 26.6 (build 25G72)
• Computer Use plugin: 1.0.1000621
• Target application tested: Microsoft Outlook for Mac

Steps to reproduce

1. Install and enable the bundled Computer Use plugin.
2. Confirm both the Computer Use MCP server and Computer Use skill toggles are on.
3. Grant Screen Recording and Accessibility permissions to Codex Computer Use in macOS Privacy & Security.
4. Open Microsoft Outlook.
5. Ask Codex to inspect Outlook using Computer Use.
6. Restart Codex and, when the problem persists, reboot macOS.
7. Reopen Codex and check the plugin.

Actual behavior

• Computer Use successfully accessed Outlook once and returned its accessibility tree.
• Later attempts timed out and reset the session.
• Retrying then returned Sky Computer Use native pipe startup failed.
• After restarting/rebooting, the Computer Use plugin was disabled again.
• Re-enabling both the MCP server and skill did not resolve the native-pipe failure.
• Codex application logs show the managed Computer Use service being refreshed, but the Computer Use connection still does not start.

Expected behavior

• The plugin’s enabled state should persist across application and system restarts.
• The Computer Use native service should start reliably.
• Repeated read-only get_app_state requests should continue working without requiring plugin toggling or reboots.

Troubleshooting already attempted

• Restarted Microsoft Outlook.
• Fully quit and reopened Codex.
• Rebooted the Mac.
• Verified macOS Screen Recording and Accessibility permissions.
• Verified both the Computer Use MCP server and skill toggles are enabled.
• Retried using both the Outlook display name and bundle identifier.

No email contents, credentials, or other private data are included in this report.