Pup - the AI's own browser

@@ -1575,6 +1575,66 @@ function pupBadgeB64() {   catch (e) { _pupBadgeB64 = ''; }   return _pupBadgeB64; }+// v1.8.73: FULL WINDOW-IDENTITY TAKEOVER (AD >=1.9.134, built to pup's spec). Two halves:+// registration (once per bridge run: HKCU AUMID + Start Menu shortcut whose pin launches a REAL+// pup window via adom-desktop-cli) and per-window stamping (AUMID + WM_SETICON, done by AD-core+// because icon HICONs are process-owned USER objects that must outlive the caller — AD holds+// them in a process-lifetime cache; see dev skill "Full icon/identity takeover"). The bridge+// registers ITSELF over the loopback direct-API (trusted transport, Tier-2 verb is ungated+// there) and owns its icon in its install dir — change branding = ship a new pup release with a+// NEW icon FILENAME (Windows caches decoded icons by path). Self-gating: on AD <1.9.134 the+// verbs are unknown -> _identitySupported=false -> the overlay badge fallback keeps working.+const PUP_APP_ID = 'Adom.Pup';+const PUP_DISPLAY_NAME = 'Adom Pup';+let _identitySupported = null;   // null = unprobed+let _identityRegistered = false;+function pupIconPath() { return path.join(__dirname, 'icons', 'adom-pup.ico'); }+function _isUnknownVerb(r, raw) { return /unknown (desktop )?command|unknown verb/i.test(((r && r.error) || '') + ' ' + (raw || '')); }+async function ensurePupIdentityRegistered() {+  if (process.platform !== 'win32' || _identitySupported === false) return false;+  if (_identityRegistered) return true;+  try {+    const r = await chrome.adCommand('desktop_register_app_identity', {+      appId: PUP_APP_ID, displayName: PUP_DISPLAY_NAME, iconPath: pupIconPath(),+      args: 'browser_open_window {"sessionId":"pinned","owner":"pinned-launch","url":"https://wiki.adom.inc"}',+    }, { timeoutMs: 8000 });+    const raw = r && (typeof r.output === 'string' ? r.output : JSON.stringify(r.output || ''));+    if ((r && r.success === false) || _isUnknownVerb(r, raw)) {+      if (_isUnknownVerb(r, raw)) { _identitySupported = false; console.log('[identity] AD lacks register_app_identity (needs >=1.9.134) — overlay badge stays'); }+      else console.log(`[identity] register failed: ${((r && r.error) || raw || '').slice(0, 140)}`);+      return false;+    }+    _identitySupported = true; _identityRegistered = true;+    console.log('[identity] Adom.Pup registered (HKCU AUMID + Start Menu pin -> managed pup window)');+    return true;+  } catch (e) { console.log(`[identity] register threw: ${e.message}`); return false; }+}+async function stampPupIdentity(sessionId) {+  if (process.platform !== 'win32' || !sessionId || _identitySupported === false) return false;+  if (!_identityRegistered) { await ensurePupIdentityRegistered(); if (_identitySupported === false) return false; }+  try {+    const r = await chrome.adCommand('desktop_set_window_identity', {+      titleContains: `(session: ${sessionId}`, cacheKey: `pup-${sessionId}`,+      appId: PUP_APP_ID, displayName: PUP_DISPLAY_NAME, iconPath: pupIconPath(),+    }, { timeoutMs: 6000 });+    const raw = r && (typeof r.output === 'string' ? r.output : JSON.stringify(r.output || ''));+    if ((r && r.success === false) || _isUnknownVerb(r, raw)) {+      if (_isUnknownVerb(r, raw)) _identitySupported = false;+      return false;+    }+    const o = raw ? JSON.parse(raw) : {};+    const data = o.data || o;+    const ok = !!(data.ok || (data.applied && data.applied.length));+    if (ok) console.log(`[identity] "${sessionId}" stamped: ${(data.applied || []).join(',') || 'ok'}`);+    return ok;+  } catch (e) { return false; }+}+// Brand a pup window: full identity on capable AD, overlay badge fallback on older AD.+async function brandPupWindow(sessionId) {+  const stamped = await stampPupIdentity(sessionId);+  if (stamped) return true;+  return badgePupTaskbar(sessionId);+} async function badgePupTaskbar(sessionId) {   if (process.platform !== 'win32') return false;   const icon = pupBadgeB64();@@ -2186,7 +2246,7 @@ async function healOffscreenWindow(session, sessionId) {     if (!b || (b.left > -1000 && b.top > -1000)) return null; // on-screen — healthy, hands off (v1.8.64: catches the -1310 staging spot too)     console.log(`[heal] "${sessionId}" window stranded off-screen (${b.left},${b.top}) — re-parking + re-badging`);     const r = await parkSessionWindowDirect(page, sessionId);-    badgePupTaskbar(sessionId).catch(() => {});+    brandPupWindow(sessionId).catch(() => {});     return r;   } catch (e) { return null; } }@@ -2923,6 +2983,12 @@ async function launchSession(sessionId, url, { freshProfile = false, profile, st     console.log(`Welcome page failed to load (non-fatal): ${e.message}`);   } +  // v1.8.73: stamp the window IDENTITY at CREATE (per the AD contract: identity is per-HWND —+  // stamping only at park would leave the window reading "Google Chrome for Testing" during its+  // whole load). The welcome page just set the "(session: <id>)" title, so AD can resolve it.+  // Fire-and-forget; the park re-brands (with badge fallback) as belt-and-suspenders.+  if (process.platform === 'win32') { stampPupIdentity(sessionId).catch(() => {}); }+   // v1.8.68: the park is DEFINED here but KICKED OFF only after the real URL's navigation has   // SETTLED (below). Rationale: the first cross-origin paint RAISES the window; if the window   // is already placed on-screen (even at z-bottom), the user sees a blip on top of their work@@ -2943,8 +3009,8 @@ async function launchSession(sessionId, url, { freshProfile = false, profile, st             console.log(`[park] "${sessionId}": ${r}`);             // v1.8.53: badge IMMEDIATELY after the park (the title suffix already exists —             // no more blind 1.5s/3.5s waits John noticed) + one safety retry.-            badgePupTaskbar(sessionId).catch(() => {});-            setTimeout(() => { badgePupTaskbar(sessionId).catch(() => {}); }, 1200);+            brandPupWindow(sessionId).catch(() => {});+            setTimeout(() => { brandPupWindow(sessionId).catch(() => {}); }, 1200);             return r;           })           .catch(e => (be.browser._bgResult = 'error'));@@ -3894,7 +3960,7 @@ const server = http.createServer(async (req, res) => {           // park verdict lands instead of blind 1.5s/3.5s timers. This is only a fallback for           // the REUSED-window path (no park runs there, but the badge may have been cleared).           if (process.platform === 'win32') {-            setTimeout(() => { badgePupTaskbar(sessionId).catch(() => {}); }, 300);+            setTimeout(() => { brandPupWindow(sessionId).catch(() => {}); }, 300);           }           // Verbose browser report: which browser we actually drove, what else is available.           const brep = browserPickReport();@@ -4085,7 +4151,7 @@ const server = http.createServer(async (req, res) => {               healOffscreenWindow(session, sessionId).catch(() => {});               const now = Date.now();               if (!session._badgedAt || now - session._badgedAt > 600000) {-                badgePupTaskbar(sessionId).then(ok => { if (ok) session._badgedAt = Date.now(); }).catch(() => {});+                brandPupWindow(sessionId).then(ok => { if (ok) session._badgedAt = Date.now(); }).catch(() => {});               }             }             const info = await describeTab(tab, session.activeTabId);@@ -4145,7 +4211,7 @@ const server = http.createServer(async (req, res) => {             const now = Date.now();             if (!session._badgedAt || now - session._badgedAt > 600000) {               // v1.8.58: only debounce on SUCCESS — a failed badge retries on the next call.-              badgePupTaskbar(sessionId).then(ok => { if (ok) session._badgedAt = Date.now(); }).catch(() => {});+              brandPupWindow(sessionId).then(ok => { if (ok) session._badgedAt = Date.now(); }).catch(() => {});             }           }           const info = await describeTab(tab, session.activeTabId);@@ -5850,6 +5916,10 @@ server.listen(PORT, BIND_HOST, async () => {   // installs/updates it), so the FIRST open is instant. Only fetches CfT if the box   // has literally no Chrome/Edge and no cached CfT — otherwise it's a cheap no-op.   try { chrome.warmup(); } catch (e) { console.error('warmup failed:', e.message); }+  // v1.8.73: register the Adom.Pup app identity once per bridge run (HKCU AUMID + Start Menu+  // shortcut whose pin launches a managed pup window). Loopback call from the bridge itself —+  // trusted transport, no relay gating. Self-gates on AD <1.9.134 (unknown verb).+  setTimeout(() => { ensurePupIdentityRegistered().catch(() => {}); }, 2500);    // Recover sessions from disk (reconnect to Chrome windows that survived bridge restart)   try {