Pup - the AI's own browser

@@ -1,10 +1,10 @@ {   "manifest_version": 1,   "name": "puppeteer",-  "version": "2.0.24",-  "url": "https://wiki.adom.inc/download/adom/pup-bridge/2.0.24/adom-bridge-puppeteer-v2.0.24.zip",-  "sha256": "3e9d052d9db9b50febbeed86262a7af3374c6238f3ade3eb58d7f081133814fe",-  "size": 646981,+  "version": "2.0.25",+  "url": "https://wiki.adom.inc/download/adom/pup-bridge/2.0.25/adom-bridge-puppeteer-v2.0.25.zip",+  "sha256": "2882a0d80d5498cbaff3ad89c09dde6d27ca22df2a6776696c0e1de44e8d42c0",+  "size": 647596,   "verbPrefixes": [     "browser_",     "desktop_recorder_",

@@ -1 +1 @@-2.0.24+2.0.25

@@ -2,7 +2,7 @@   "manifest_version": 1,   "name": "puppeteer",   "displayName": "Puppeteer (Chrome for Testing + Native)",-  "version": "2.0.24",+  "version": "2.0.25",   "description": "Drives a browser ALREADY on the machine \u2014 installed Chrome, else Microsoft Edge (every Windows PC ships with Edge) \u2014 launched with a FRESH isolated profile, so the common case has NO ~150 MB Chrome-for-Testing download and it never touches the user's real tabs/logins. Binds its local server to LOOPBACK (127.0.0.1) only, so no Windows Firewall 'allow Node through the firewall' prompt ever pops. Chrome for Testing is fetched only as a LAST RESORT if the machine has no Chromium browser at all. SPAWN-VERIFIED fallback: pup tries each detected browser (Chrome \u2192 Edge \u2192 CfT) and actually launches it, falling through to the next if one won't start (and handling browsers like Edge that relaunch onto another PID), so a corrupt/partial install never hard-fails an open. The browser that launches is cached as the default (persisted across restarts) so it isn't re-probed each time. On spawn the bridge SELF-WARMS: detects browsers + disk, and only if the box has no Chrome/Edge and no cached CfT does it background-fetch CfT so the first open is instant. pup_use pins a specific browser (chrome | edge | cft | auto); {browser:'chrome',install:true} downloads & installs REAL Google Chrome (user-scoped, no admin) on an Edge-only box. pup_readiness (READ-ONLY) reports which browser will be used + the full candidate list + the default + free disk. Every failure returns a specific errorCode + _hint (chrome_install_no_disk, chrome_download_network, chrome_install_permission, chrome_stable_not_detected, \u2026). Launches with FULL browser permissions by default for full debug (strictPermissions:true opts out). Headful automation: open/close windows+tabs, navigate, screenshot, eval JS, record. pup is a GENERIC, non-profile browser only \u2014 every session is a fresh isolated Chrome/Edge process, never the user's real signed-in browser; profile defaults to sessionId. To drive the user's REAL Chrome/Edge (their profile, cookies, SSO), use the Adom browser EXTENSION's nbrowser_* verbs \u2014 a separate bridge, not pup's job. macOS (v1.9.74+): full parity with mac-native mechanics \u2014 background-by-default is the app-level hide (windows stay drivable/screenshottable while hidden), raise/lower map to unhide+activate/hide, pup_alert_window posts a native toast whose click focuses the window, pup_use {browser:'chrome',install:true} installs Chrome from the official dmg, and taskbar identity/badging remains Windows-only.",   "homepage": "https://wiki.adom.inc/adom/adom-bridge",   "author": "Adom Inc.",

@@ -3360,6 +3360,12 @@ async function ensurePupIdentityRegistered() {     return true;   } catch (e) { console.log(`[identity] register threw: ${e.message}`); return false; } }+// v2.0.25 (John watched the button mutate 3x on open: overlay-on-chrome-icon, then AUMID recreate,+// then overlay again): the create-time stamp fires BEFORE the session registers, so its result had+// nowhere to be recorded — the later re-brand then re-committed the SAME appId (visible button+// recreate #2). Remember pre-registration stamps here; launchSession copies them onto the session+// at registration so the idempotence gate makes the second stamp a true no-op.+const _earlyStamped = new Map();   // sessionId -> appId stamped before session registration async function stampPupIdentity(sessionId, opts) {   // v1.9.271: the dashboard must never gang onto the shared button. v1.9.272 (John: "if we're in   // aumid mode then the pup dashboard should be in that mode too. right now you're being@@ -3525,6 +3531,7 @@ async function stampPupIdentity(sessionId, opts) {     if (!ok) console.log(`[identity] "${sessionId}" stamp NOT applied (appId=${appId}): ${(raw || '').slice(0, 140)}`);     if (ok) {       console.log(`[identity] "${sessionId}" stamped appId=${appId}: ${(data.applied || []).join(',') || 'ok'}`);+      if (!sess) _earlyStamped.set(sessionId, appId);   // v2.0.25: pre-registration stamp — see above       if (sess && prevAppId !== appId) {         sess._curAppId = appId;         // v2.0.7: freeze the identity at this first real stamp — no re-stamp on later category changes.@@ -4781,6 +4788,14 @@ async function applyAppOverlay(session, sessionId) {   // stale paint immediately recreated it, forever. Refuse to paint a session that is no longer live   // (dropped from the map, or all its windows closed). This is the choke point that kills the ghost.   if (!sessions.has(sessionId)) return false;+  // v2.0.25 ORDERING (John watched it live: overlay landed on the still-Chrome button, then the+  // identity stamp RECREATED the button — wiping the badge — then the overlay painted again; three+  // visible mutations for one open). When AUMID identity is on, a YOUNG window's overlay defers+  // until the identity stamp has landed (the stamp marks the fresh button bare, which re-triggers+  // this paint), so the sequence is stamp-once -> overlay-once. After a 30s grace the overlay paints+  // regardless, so a window whose stamp cannot land (unresolvable hwnd) is never left bare forever.+  if (pupSettings().aumidIcons === 'on' && session && !session._curAppId && !_earlyStamped.has(sessionId)+      && session.createdAt && (Date.now() - session.createdAt) < 30000) return false;   { const _live = sessions.get(sessionId); let _open = false; for (const t of ((_live && _live.tabs) || [])) { try { if (t && t.page && !t.page.isClosed()) { _open = true; break; } } catch (e) {} } if (!_open) return false; }   try {     // v1.9.0: reflect the ACTIVE tab (John: favicons are more useful than counts — show what@@ -8307,6 +8322,12 @@ async function launchSession(sessionId, url, { freshProfile = false, profile, st   // orange really fired (John's audit column caught it). Credit it here, where the session exists.   if (_flashState.has(sessionId) && Date.now() - _flashState.get(sessionId) < 60000) session._flashCount = (session._flashCount || 0) + 1;   sessions.set(sessionId, session);+  // v2.0.25: adopt the create-time identity stamp so the post-park re-brand no-ops instead of+  // recreating the taskbar button a second time with the identical appId.+  try {+    const _ea = _earlyStamped.get(sessionId);+    if (_ea) { session._curAppId = _ea; session._frozenAppId = _ea; _earlyStamped.delete(sessionId); }+  } catch (e) {}   activeSessionId = sessionId;    // Track refCount