Pup - the AI's own browser

@@ -95,3 +95,22 @@ videos) collapsed into one. Now a new tab opens only in the window pup names (a window id) and the extension refuses with window_not_found rather than guess; duplicates are exact URLs only. Proven on CRR: a 4-tab window and a 1-tab window from another thread both came back complete and separate. +## The user's close is final, even during a restart or an upgrade (2.0.684)++On 2026-09-23 John closed the NSF thread's taskbar icon on his laptop and it reopened, twice, and pup-bridge's+icon came back too. An upgrade had ended pup's browser and was relaunching his windows one at a time; each close+landed between two relaunches, so the thread's next window came back 13 to 28 s later. The rules now:++- pup relaunches a missing window ONLY when it knows that window's browser died for this pass: pup ended it (an+  upgrade or pup_restart_browser), it crashed, or it was already dead when pup booted. Those windows are marked+  lost before anything relaunches.+- Any other missing window, one whose browser is running without it, was CLOSED. pup forgets it and never brings+  it back. This covers a close that happens while pup itself is restarting and cannot hear the extension.+- Closing a window while a relaunch queue runs cancels every queued relaunch of the same thread (its taskbar icon),+  and each relaunch first picks up closes reported since the previous one.++Do not decide "closed vs lost" from whether a browser is running NOW: the first relaunch of an upgrade restarts the+browser, and 2.0.681, which did exactly that, dropped every window after the first on every upgrade (caught on CRR+before it went public). Proven on CRR with three windows of one thread: an upgrade brings all three back, closing+the first mid-queue cancels the other two, and a window closed during a restart stays closed.+