Pup - the AI's own browser

@@ -1,10 +1,10 @@ {   "manifest_version": 1,   "name": "puppeteer",-  "version": "2.0.377",-  "url": "https://wiki.adom.inc/download/adom/pup-bridge/2.0.377/adom-bridge-puppeteer-v2.0.377.zip",-  "sha256": "c7291b39c3b956dd0ab2c1496635bc294f1b907dfd33c66943864bc36323c650",-  "size": 1545954,+  "version": "2.0.378",+  "url": "https://wiki.adom.inc/download/adom/pup-bridge/2.0.378/adom-bridge-puppeteer-v2.0.378.zip",+  "sha256": "be24bc2a60ab4b6c278fb78762bb235634d7012c36e49329b01d1d6a6b2bdedf",+  "size": 1546833,   "verbPrefixes": [     "browser_",     "desktop_recorder_",@@ -12,5 +12,5 @@   ],   "healthEndpoint": "/status",   "statusVerb": "browser_readiness",-  "released_at": "2026-09-02T15:47:32.688657Z"+  "released_at": "2026-09-02T16:14:34.285423Z" }

@@ -1,6 +1,6 @@ {   "slug": "pup-bridge",-  "version": "2.0.377",+  "version": "2.0.378",   "type": "app",   "description": "The pup SKILL PACK \u2014 the AI skills that teach a cloud/container AI how to drive the Adom Desktop Puppeteer (pup) bridge (browser_* verbs): the everyday `pup` skill plus focused sub-skills for windows/sessions/tabs, screenshots+recording, browsers+Chrome install, and driving the Adom wiki. Installs into ~/.claude/skills + ~/.codex/skills. DOCS ONLY \u2014 this is NOT the bridge runtime. The bridge itself (the Node program that drives the browser) runs on the DESKTOP: Adom Desktop bundles it and auto-installs/updates it, and it's published separately on the Releases tab as adom-bridge-puppeteer-v<ver>.zip. The pkg version is kept in lockstep with the Release version so the page's max version row always carries BOTH a pkg tarball (skills) and a runtime zip (bridge) \u2014 a skills-only or runtime-only bump on the top row breaks constraint installs. TL;DR: pkg install = the skills for your AI; the bridge = the Release zip, which Adom Desktop manages for you.",   "keywords": [

@@ -1 +1 @@-2.0.377\ No newline at end of file+2.0.378\ No newline at end of file

@@ -2,7 +2,7 @@   "manifest_version": 1,   "name": "puppeteer",   "displayName": "Puppeteer (Chrome for Testing + Native)",-  "version": "2.0.377",+  "version": "2.0.378",   "description": "Drives a browser ALREADY on the machine \u2014 installed Chrome, else Microsoft Edge (every Windows PC ships with Edge) \u2014 launched with a FRESH isolated profile, so the common case has NO ~150 MB Chrome-for-Testing download and it never touches the user's real tabs/logins. Binds its local server to LOOPBACK (127.0.0.1) only, so no Windows Firewall 'allow Node through the firewall' prompt ever pops. Chrome for Testing is fetched only as a LAST RESORT if the machine has no Chromium browser at all. SPAWN-VERIFIED fallback: pup tries each detected browser (Chrome \u2192 Edge \u2192 CfT) and actually launches it, falling through to the next if one won't start (and handling browsers like Edge that relaunch onto another PID), so a corrupt/partial install never hard-fails an open. The browser that launches is cached as the default (persisted across restarts) so it isn't re-probed each time. On spawn the bridge SELF-WARMS: detects browsers + disk, and only if the box has no Chrome/Edge and no cached CfT does it background-fetch CfT so the first open is instant. pup_use pins a specific browser (chrome | edge | cft | auto); {browser:'chrome',install:true} downloads & installs REAL Google Chrome (user-scoped, no admin) on an Edge-only box. pup_readiness (READ-ONLY) reports which browser will be used + the full candidate list + the default + free disk. Every failure returns a specific errorCode + _hint (chrome_install_no_disk, chrome_download_network, chrome_install_permission, chrome_stable_not_detected, \u2026). Launches with FULL browser permissions by default for full debug (strictPermissions:true opts out). Headful automation: open/close windows+tabs, navigate, screenshot, eval JS, record. pup is a GENERIC, non-profile browser only \u2014 every session is a fresh isolated Chrome/Edge process, never the user's real signed-in browser; profile defaults to sessionId. To drive the user's REAL Chrome/Edge (their profile, cookies, SSO), use the Adom browser EXTENSION's nbrowser_* verbs \u2014 a separate bridge, not pup's job. macOS (v1.9.74+): full parity with mac-native mechanics \u2014 background-by-default is the app-level hide (windows stay drivable/screenshottable while hidden), raise/lower map to unhide+activate/hide, pup_alert_window posts a native toast whose click focuses the window, pup_use {browser:'chrome',install:true} installs Chrome from the official dmg, and taskbar identity/badging remains Windows-only.",   "homepage": "https://wiki.adom.inc/adom/adom-bridge",   "author": "Adom Inc.",

@@ -251,11 +251,19 @@ function resolveBrowser() { //   browser: 'auto' | 'chrome' | 'edge' | 'cft' | 'chrome-for-testing'  (or pass executablePath) // 'cft' installs Chrome for Testing in the background if it isn't cached, and pins it // as the default so once it lands every open uses it. Returns a pickSummary.-function setDefaultBrowser({ browser, executablePath, install, elevate } = {}) {+// v2.0.378 (#81 ask 3): a TEMPORARY pin (a comparison/spike) expires at the next bridge boot so a+// forgotten pup_use can never strip the toolbar from every later launch the way the WHY-CFT work did.+function expireTemporaryDefault() {+  const d = readDefault();+  if (d && d.temporary) { clearDefault(); return d.kind || true; }+  return false;+}+function setDefaultBrowser({ browser, executablePath, install, elevate, temporary } = {}) {+  const _tmp = !!temporary;   const b = String(browser || '').toLowerCase().replace(/[\s_-]/g, '');   if (executablePath) {     if (!fileExists(executablePath)) return { ok: false, errorCode: 'pup_not_found', error: `No executable at ${executablePath}.`, ...pickSummary() };-    writeDefault({ kind: 'custom', executablePath, source: 'explicit', forced: true, verifiedAt: Date.now() });+    writeDefault({ kind: 'custom', executablePath, source: 'explicit', forced: true, temporary: _tmp, verifiedAt: Date.now() });     return { ok: true, ...pickSummary() };   }   if (b === 'auto' || b === 'clear' || b === 'reset' || b === 'default' || b === '') {@@ -265,7 +273,7 @@ function setDefaultBrowser({ browser, executablePath, install, elevate } = {}) {   if (b === 'chrome' || b === 'edge') {     const cand = listSystemBrowsers().find(c => c.kind === b);     if (cand) {-      writeDefault({ kind: cand.kind, executablePath: cand.executablePath, source: 'system', forced: true, verifiedAt: Date.now() });+      writeDefault({ kind: cand.kind, executablePath: cand.executablePath, source: 'system', forced: true, temporary: _tmp, verifiedAt: Date.now() });       return { ok: true, ...pickSummary() };     }     // Not installed. For Chrome we can download+install the REAL browser on request.@@ -289,7 +297,7 @@ function setDefaultBrowser({ browser, executablePath, install, elevate } = {}) {   if (b === 'cft' || b === 'chromefortesting') {     const det = detectChrome();     if (det.installed) {-      writeDefault({ kind: 'chrome-for-testing', executablePath: det.executablePath, source: 'cache', buildId: det.buildId, forced: true, verifiedAt: Date.now() });+      writeDefault({ kind: 'chrome-for-testing', executablePath: det.executablePath, source: 'cache', buildId: det.buildId, forced: true, temporary: _tmp, verifiedAt: Date.now() });       return { ok: true, ...pickSummary() };     }     // Not cached — pin the intent and start the download; once it lands it becomes default.@@ -1045,6 +1053,6 @@ module.exports = {   detectChrome, detectSystemBrowser, listSystemBrowsers, launchCandidates, resolveBrowser,   installChrome, ensureChromeReady, readiness, expectedBuildId, cacheDir, diskFreeMb,   setDefaultBrowser, readDefault, clearDefault, markVerified, pickSummary,-  installChromeStable, chromeStableStatus, warmup, setPreferCft,+  installChromeStable, chromeStableStatus, warmup, setPreferCft, expireTemporaryDefault,   abCommand, // v1.8.40: reused by server.js to call AD verbs (e.g. desktop_taskbar) via the direct-API };

@@ -4424,7 +4424,23 @@ async function stampPupIdentity(sessionId, opts) {     // desktop_set_window_identity RECREATES the taskbar button every call, so firing it when nothing     // changed is exactly the churn/flicker (and suspected crash pressure) we must never cause. Equal     // desired-vs-current appId => no-op. This is what lets reconcileModel run every sweep safely.-    if (prevAppId === appId) return true;+    if (prevAppId === appId) {+      // v2.0.378 (#83, the blank-button ghost): a RECOVERED window arrives with _curAppId restored,+      // so this gate made its whole identity a no-op — but the shell state behind that id was built+      // by a Chrome relaunch that could precede the registration being readable (or the key could be+      // gone), and nothing ever rebuilt the button: a badge floating on an empty tile. Once per+      // recovered session: re-assert the registration and rebuild the button, then trust the gate.+      if (sess && sess._recovered && !sess._recoveryIdentityVerified) {+        sess._recoveryIdentityVerified = true;+        try { await registerPupAumid(appId, sessionId); } catch (e) {}+        try {+          if (!sess._hwnd) await resolveSessionHwndByBounds(sess, sessionId);+          const _rh = (sess._hwnd && await hwndBelongsToPup(sess._hwnd, sess)) ? sess._hwnd : null;+          if (_rh) { console.log(`[identity] "${sessionId}" recovered window: re-asserted ${appId} + one button rebuild (#83)`); nudgeTaskbarButton(_rh, sessionId); }+        } catch (e) {}+      }+      return true;+    }     // v2.0.2 COALESCE THE CATEGORY-SETTLE CHURN (John: "why did i see the AUMID applied 3x when i     // opened that window?"). A freshly-opened window's category refines as it loads and authenticates     // (loading -> web -> wiki-signed-in), and every change re-stamps, which RECREATES the taskbar@@ -15452,6 +15468,10 @@ const server = http.createServer(async (req, res) => {               downloadPath,               // v1.4.0: which browser pup drove + the full fallback picture.               browser: brep.browser,+              // v2.0.378 (#81 ask 2): say it in the open response when a window CANNOT carry the toolbar.+              _toolbarNotice: (brep.browser && brep.browser.kind && brep.browser.kind !== 'chrome-for-testing' && pupSettings().toolbarExtension !== 'off')+                ? `This window launched on ${brep.browser.kind}: the Adom toolbar (pen/dots/identity tiles) rides ONLY Chrome for Testing, so it has NO toolbar. pup_readiness shows why that browser was picked; pup_use {browser:"auto"} plus a browser relaunch converges to CfT.`+                : undefined,               // Same treatment: the full browser inventory is a one-time discovery fact, not something a               // caller re-reads on every open. The chosen browser is already reported in `browser`.               availableBrowsers: (() => {@@ -19240,7 +19260,7 @@ const server = http.createServer(async (req, res) => {           // for Testing in the background if not cached, then pins it. Persists across           // bridge restarts. The launch path still spawn-verifies + falls back, so a           // pinned browser that later breaks won't hard-fail an open.-          const result = chrome.setDefaultBrowser({ browser: args && args.browser, executablePath: args && args.executablePath, install: !!(args && args.install), elevate: args ? args.elevate : undefined });+          const result = chrome.setDefaultBrowser({ browser: args && args.browser, executablePath: args && args.executablePath, install: !!(args && args.install), elevate: args ? args.elevate : undefined, temporary: !!(args && args.temporary) });           const rd = chrome.readiness();           const availTxt = (result.candidates || []).map(c => `${c.kind}(${c.source})`).join(', ') || 'none';           let hint;@@ -19265,8 +19285,9 @@ const server = http.createServer(async (req, res) => {             // every later launch (--load-extension rides ONLY CfT). Say so at pin time.             const _pk = result.defaultBrowser ? result.defaultBrowser.kind : args.browser;             if (_pk && _pk !== 'chrome-for-testing' && _pk !== 'cft' && pupSettings().toolbarExtension !== 'off') {-              hint += ` ⚠ WARNING: the Adom toolbar (pen/dots/identity tiles) rides ONLY Chrome for Testing — windows launched on ${_pk} will have NO toolbar. If this pin is temporary (a comparison/spike), revert to auto when done or the user loses the toolbar on every relaunch.`;+              hint += ` ⚠ WARNING: the Adom toolbar (pen/dots/identity tiles) rides ONLY Chrome for Testing — windows launched on ${_pk} will have NO toolbar. If this pin is temporary (a comparison/spike), pass {temporary:true} so it expires at the next bridge boot, or revert to auto when done.`;             }+            if (args && args.temporary) hint += ' This pin is TEMPORARY: it expires automatically at the next bridge boot (back to auto).';           }           sendJSON(res, {             success: !!result.ok,@@ -20127,6 +20148,8 @@ const _onPupBound = async () => {     // v2.0.369: tell chrome.js whether the toolbar family is wanted BEFORE warmup, so a fresh     // Edge-only box background-fetches CfT at install time and converges onto the toolbar-capable     // browser with zero pinning (the Azure-VM Edge regression).+    // v2.0.378 (#81): a pup_use {temporary:true} pin lives only until this boot.+    try { const _exp = chrome && chrome.expireTemporaryDefault && chrome.expireTemporaryDefault(); if (_exp) console.log(`[launch] temporary browser pin (${_exp}) expired at boot → auto`); } catch (e) {}     try { if (chrome && chrome.setPreferCft) chrome.setPreferCft(pupSettings().toolbarExtension !== 'off'); } catch (e) {}     try { if (chrome && chrome.warmup) chrome.warmup(); } catch (e) { console.error('warmup failed:', e.message); }     // Recover sessions from disk (reconnect to Chrome windows that survived a bridge restart).