fix: Codex 26.602+ pipe discovery (backslash separator)

Codex Desktop 26.602+ creates pipes as 'codex-browser-use\<uuid>'
instead of 'codex-browser-use-<uuid>'. PowerShell Get-ChildItem treats
backslash as a directory separator and silently skips these pipes,
causing 'no pipes found' or 'all pipes failed' errors.

- Switch to [System.IO.Directory]::GetFileSystemEntries + substring
  extraction to discover both old and new format pipes
- extractUUID handles both '-' and '\' separators
- Raise spurious warning threshold from >1 to >2 pipes (coexistence
  is normal during Codex upgrades)

Smoke tested: get_info, create_tab, navigate, screenshot, close_tab
all pass against Codex Desktop 26.602.3474.0.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: DeliciousBuding

CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.5.0] - 2026-06-05
+
+### Fixed
+
+- **Pipe discovery broken after Codex Desktop 26.602+**: Newer Codex versions create pipe names with backslash separators (`codex-browser-use\<uuid>`) which PowerShell's `Get-ChildItem` treats as directories and skips. Switched to `[System.IO.Directory]::GetFileSystemEntries` and manual prefix stripping to discover both formats.
+- **`extractUUID` updated** to strip both `-` and `\` separators after the `codex-browser-use` prefix.
+- **Pipe warning threshold** raised from >1 to >2, since old-format and new-format pipes legitimately coexist during Codex upgrades.
+
 ## [0.3.0] - 2026-05-19
 
 ### Fixed

ROADMAP.md

@@ -1,5 +1,21 @@
 # ROADMAP
 
+## v1.5.0 — Codex 26.602+ Pipe Discovery Fix (2026-06-05)
+
+Codex Desktop 26.602+ changed pipe naming from `codex-browser-use-<uuid>` to `codex-browser-use\<uuid>`. The old PowerShell `Get-ChildItem` discovery treated `\` as a directory separator and missed new-format pipes entirely.
+
+### Fixed
+- [x] **DISC-01** `discovery.go` — `Get-ChildItem` → `[System.IO.Directory]::GetFileSystemEntries` + substring extraction
+- [x] **DISC-02** `discovery.go` — `extractUUID` handles both `-` and `\` separators
+- [x] **DISC-03** `client.go` — Warning threshold `> 1` → `> 2` (old + new pipes coexist normally)
+
+### Verified
+- Smoke test: `get_info` ✅ `create_tab` ✅ `navigate` ✅ `screenshot` ✅ `close_tab` ✅
+- All existing unit tests pass (`go test ./...`)
+- go vet clean
+
+---
+
 ## v0.3.0 — Bug Fixes from Cross-Audit (2026-05-19)
 
 30 bugs found by parallel audit. Fixed in 4 batches.

internal/client/client.go

@@ -55,7 +55,7 @@ func Connect(pipeName string, logger *log.Logger) (*Client, error) {
 		// The pipe prefix namespace is flat: any local process can create pipes with
 		// the "codex-browser-use-" prefix. When multiple pipes exist, an attacker
 		// could register a fake pipe before the legitimate Codex Desktop starts.
-		if len(pipes) > 1 && logger != nil {
+		if len(pipes) > 2 && logger != nil {
 			logger.Printf("Warning: multiple codex-browser-use pipes found (%d). This may indicate stale or unauthorized pipes.", len(pipes))
 		}
 

internal/discovery/discovery.go

@@ -16,12 +16,15 @@ type PipeInfo struct {
 	UUID string
 }
 
-// DiscoverCodexPipes lists Windows named pipes matching codex-browser-use-*
+// DiscoverCodexPipes lists Windows named pipes matching codex-browser-use*
+// Uses [System.IO.Directory]::GetFiles instead of Get-ChildItem because newer
+// Codex versions create pipes with backslash separators (e.g. "codex-browser-use\<uuid>")
+// which Get-ChildItem treats as directories and skips.
 func DiscoverCodexPipes() ([]PipeInfo, error) {
 	ctx, cancel := context.WithTimeout(context.Background(), 15*time.Second)
 	defer cancel()
 	cmd := exec.CommandContext(ctx, "powershell", "-NoProfile", "-Command",
-		"Get-ChildItem '\\\\.\\pipe\\' | Select-Object -ExpandProperty Name")
+		"$d='\\\\.\\pipe\\'; [System.IO.Directory]::GetFileSystemEntries($d) | Where-Object { $_ -like '*codex-browser*' } | ForEach-Object { $_.Substring($d.Length) }")
 	out, err := cmd.Output()
 	if err != nil {
 		return nil, fmt.Errorf("enumerate pipes: %w", err)
@@ -41,8 +44,8 @@ func parsePipeList(output string) []PipeInfo {
 	return pipes
 }
 
-// extractUUID strips the "codex-browser-use-" prefix from a pipe name.
-// Returns "" if the name has no separator after the prefix.
+// extractUUID strips the "codex-browser-use" prefix (and separator) from a pipe name.
+// Handles both old format "codex-browser-use-<uuid>" and new format "codex-browser-use\<uuid>".
 func extractUUID(name string) string {
 	rest := strings.TrimPrefix(name, codexPipePrefix)
 	if len(rest) > 0 && (rest[0] == '-' || rest[0] == '\\') {

npm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@delicious233/codex-browser-bridge",
-  "version": "0.3.0",
+  "version": "1.5.0",
   "private": false,
   "description": "MCP server that exposes Codex Desktop's Chrome browser bridge for Claude Code and other agents.",
   "bin": {