Skip to content

The Browser plugin does not work in the Codex desktop app on Windows. #29199

Open

Description

@moonselt

Environment:

  • Codex version: 26.616.5445.0
  • Browser plugin: Installed and enabled
  • Already tried: Reinstalling the plugin, restarting Codex, and starting a new conversation
  • The issue is consistently reproducible

Steps to reproduce:

  1. Start a new conversation.
  2. Ask Codex to use the Browser plugin.
  3. Browser initialization fails.

Error:
Mcp error: -32602: js: codex/sandbox-state-meta: missing field sandboxPolicy

Expected behavior:
The Browser plugin should connect successfully and control the in-app browser.

It appears that the sandbox-state metadata passed from the Codex desktop app to Browser/node_repl is missing the sandboxPolicy field.

Activity

  1. added
    bugSomething isn't working
    appIssues related to the Codex desktop app
    windows-osIssues related to Codex on Windows systems
    mcpIssues related to the use of model context protocol (MCP) servers
    sandboxIssues related to permissions or sandboxing
    on Jun 20, 2026
  2. github-actions commented on Jun 20, 2026

    @github-actions
    Contributor
  3. ElierHG commented on Jun 20, 2026

    @ElierHG

    I am seeing the same failure on Windows with Codex Desktop / bundled browser runtime 26.616.41845.

    Environment/details from this repro:

    • Platform: Windows / PowerShell
    • Browser plugin path/version: openai-bundled/browser/26.616.41845
    • Node REPL runtime path class: %LOCALAPPDATA%\OpenAI\Codex\runtimes\cua_node\<hash>\bin\node_repl.exe
    • Local config includes:
    approval_policy = "never"
    sandbox_mode = "danger-full-access"
    
    [mcp_servers.node_repl]
    args = []
    command = 'C:\Users\<user>\AppData\Local\OpenAI\Codex\runtimes\cua_node\<hash>\bin\node_repl.exe'
    startup_timeout_sec = 120
    
    [windows]
    sandbox = "unelevated"

    Minimal failing call after exposing node_repl/js:

    nodeRepl.write(JSON.stringify({ ok: true }))

    Actual result:

    tool call error: tool call failed for `node_repl/js`
    
    Caused by:
        Mcp error: -32602: js: codex/sandbox-state-meta: missing field `sandboxPolicy`
    

    Observed impact:

    • The failure happens before any JavaScript executes, so the Browser client bootstrap never starts.
    • The in-app Browser tool cannot be used at all from the agent.
    • Each failed bridge attempt spawned node_repl.exe plus paired node.exe ./mcp/server.mjs --stdio / server.cjs --stdio helper processes; these had to be cleaned up manually.
    • Local .codex-global-state.json permission records were checked and all existing heartbeat permission records had a sandboxPolicy, so the missing field appears to be in the live MCP tool-call metadata for this session rather than an obvious saved-state JSON omission.

    This looks consistent with the Desktop/app-server path sending a codex/sandbox-state-meta shape that no longer matches what the bundled node_repl runtime expects.

  4. chaozhouchen commented on Jun 20, 2026

    @chaozhouchen

    I can reproduce this on Windows 10.

    Version: 26.616.41845
    Browser extension installed
    New conversations also fail

    Error:
    MCP error: -32602: js: codex/sandbox-state-meta: missing field sandboxPolicy

  5. mingmingluo01 commented on Jun 20, 2026

    @mingmingluo01

    Please treat this as user feedback on update stability and regression risk, not just a one-off bug.

    After recent Codex Desktop updates, a previously working browser-control / Chrome-control setup broke again. I had spent several days diagnosing and fixing Codex browser control on Windows; after another update, the same class of workflow became unusable again.

    For users who rely on Codex for local automation, this is very costly: stable workflows, local preflight rules, plugin configurations, and workarounds can become invalid overnight after an auto-update. The purpose of an update should be to improve reliability. When an update breaks core automation capabilities without a rollback path or compatibility guidance, it wastes user time and reduces trust.

    Suggestions:

    1. Add stronger regression tests for Browser plugin / Chrome extension / node_repl / MCP / Windows sandbox metadata before desktop releases.
    2. Provide a stable compatibility contract for plugins and local tools, especially metadata fields such as sandboxPolicy.
    3. Add an easy rollback path or “stay on current version” option when an update breaks local workflows.
    4. Show release notes with known breaking changes and recovery steps before forced or automatic updates.
    5. Add a built-in “Test Browser Tool” diagnostic that reports browser/plugin compatibility and exact failure reasons.
    6. Preserve known working plugin settings and local configurations across updates, or warn clearly when migration is required.

    This is a reliability/regression concern. Please prioritize update stability and recovery tooling for users who depend on Codex in production-like local workflows.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    appIssues related to the Codex desktop appbrowserbugSomething isn't workingmcpIssues related to the use of model context protocol (MCP) serverssandboxIssues related to permissions or sandboxingwindows-osIssues related to Codex on Windows systems

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions