Pup - the AI's own browser

@@ -250,6 +250,17 @@ let pupshotUrl = null; // looked wedged for minutes. This map lets concurrent callers JOIN the first launch instead of // racing a second Chrome onto the same dir. (Root cause of the 2026-07-19 cold-start wedge.) const _launchInFlight = new Map();+// v1.9.110 (issue #22, AdityaAngajala) — ADMISSION-TIME OWNERSHIP CLAIM.+// Two defects he measured: (a) `owner` is optional, so in practice sessions end up unowned and the guard+// that protects a busy window is opt-out by omission; (b) ownership was established when the BROWSER was+// acquired, not when the request was admitted, so two agents cold-starting the same sessionId were BOTH+// told to proceed and whichever launch landed first silently became the owner while the other believed it+// owned that window too. This map is claimed SYNCHRONOUSLY on the open path before any await, so the+// second differently-owned caller is refused immediately instead of receiving a provisioning hint that+// implies "retry and it's yours". Cleared on close. Ownership is still self-reported attribution, never+// authorization — it exists to stop threads trampling each other, not to secure anything.+const _sessionOwnerClaims = new Map();   // sessionId -> owner string+  // ── Tab helpers ──────────────────────────────────────────────────── function createSession(profileName) {@@ -5334,7 +5345,9 @@ async function addTabToSession(sessionId, url) {       } catch (e) {         console.log(`[creds] applyCredentialsToPage on new tab failed: ${e.message}`);       }-      await page.goto(url, { waitUntil: 'domcontentloaded', timeout: 30000 });+      // v1.9.110: keep the tab's own HTTP status so probeRender can report a 404 with certainty.+      const _tResp = await page.goto(url, { waitUntil: 'domcontentloaded', timeout: 30000 });+      try { page.__pupHttpStatus = _tResp && typeof _tResp.status === 'function' ? _tResp.status() : null; } catch (e) {}     }   } catch {} @@ -6296,6 +6309,32 @@ const server = http.createServer(async (req, res) => {           if (args.wikiView === 'authed' && isAdomUrl(args.url)) args.profile = WIKI_AUTH_PROFILE;           if (!args.profile) args.profile = args.sessionId;           const sessionId = args.sessionId;+          // v1.9.110 (issue #22): NEVER LEAVE A SESSION UNOWNED, and settle ownership at ADMISSION.+          // The owner is the explicit `owner` arg when given, else the calling AI thread's own name+          // (AD hands us that via X-Adom-Caller-Thread), so "unowned" stops being reachable for any+          // caller that identifies itself. The claim below is taken synchronously — no await between+          // the check and the set — which is what closes the cold-start race where two agents were+          // both admitted for the same sessionId.+          {+            const _wantOwner = (typeof args.owner === 'string' && args.owner.trim())+              ? args.owner.trim()+              : (_callerThread ? String(_callerThread).trim() : null);+            const _held = _sessionOwnerClaims.get(sessionId) || null;+            if (_held && _wantOwner && _held !== _wantOwner && !args.takeover && !sessions.has(sessionId)) {+              sendJSON(res, {+                success: false,+                errorCode: 'session_owned_by_another_thread',+                error: `Session "${sessionId}" was claimed by another thread ("${_held}") moments ago and is still being provisioned.`,+                sessionId, owner: _held, requestedBy: _wantOwner,+                _hint: `STOP — thread "${_held}" claimed sessionId "${sessionId}" first and its window is still opening, so this is a COLD-START RACE, not an available id. Do NOT retry this call: the window will belong to "${_held}". Open your OWN window with a unique task-prefixed sessionId (e.g. "${_wantOwner}-web") and owner:"${_wantOwner}". Pass takeover:true only if the user EXPLICITLY told you to repurpose that thread's window.`,+              });+              return;+            }+            if (_wantOwner && !_held) _sessionOwnerClaims.set(sessionId, _wantOwner);+            // Make the synthesized owner explicit for the rest of the pipeline, so launchSession's+            // existing cross-owner refusal and browser_status both see a real owner.+            if (_wantOwner && !(typeof args.owner === 'string' && args.owner.trim())) args.owner = _wantOwner;+          }           // v1.6.3+: optional downloadPath override. Defaults to the user's           // home Downloads dir, which is what desktop_watch_files polls by           // default — the two ends meet without configuration. Caller can@@ -6744,6 +6783,7 @@ const server = http.createServer(async (req, res) => {           session.tabs.length = 0;           session.activeTabId = null;           sessions.delete(sessionId);+          _sessionOwnerClaims.delete(sessionId);             // v1.9.110: the id is free again           deleteSessionFile(sessionId);           clearSessionBusy(sessionId);                       // v1.9.57: drop any pending progress timer           unregisterPupAumid(_closingAppId).catch(() => {}); // v1.9.2/#207 cleanup (appId captured pre-delete)@@ -7107,6 +7147,15 @@ const server = http.createServer(async (req, res) => {                 brandPupWindow(sessionId).then(ok => { if (ok) session._badgedAt = Date.now(); }).catch(() => {});               }             }+            // v1.9.110 (closing the set-enumeration gap): RENDER_VERBS has four members and I had wired+            // three. A tab is content on the user's screen exactly like a window, so it gets the same+            // verdict — otherwise "open it in a tab" silently skips the check that "open it in a window"+            // performs. When a behavior belongs to a declared SET, every member gets it.+            try { res._renderCheck = await probeRender(tab.page, tab.page.__pupHttpStatus); } catch (e) {}+            try {+              const _rc = res._renderCheck;+              if (_rc && _rc.ok === false) console.log(`[render] "${sessionId}" tab ${tabId} BROKEN: ${_rc.signals.join(', ')}`);+            } catch (e) {}             const info = await describeTab(tab, session.activeTabId);             // v1.8.23: return tabId + tabCount + activeTabId at the TOP level (was only inside `info`).             sendJSON(res, { success: true, output: JSON.stringify({ ok: true, sessionId, tabId, tabCount: session.tabs.length, activeTabId: session.activeTabId, ...info }) });@@ -8653,6 +8702,7 @@ const server = http.createServer(async (req, res) => {             try { if (s && s._curAppId && s._curAppId !== PUP_APP_ID) unregisterPupAumid(s._curAppId).catch(() => {}); } catch (e) {}           }           sessions.clear();+          _sessionOwnerClaims.clear();                       // v1.9.110           activeSessionId = null;           // Belt-and-braces: sweep any orphaned Adom.Pup.* keys now that nothing is live.           try { pruneStaleAumids(); } catch (e) {}