Pup - the AI's own browser

@@ -6686,6 +6686,49 @@ const PUP_ISSUES_REF = 'adom/adom-desktop-puppeteer-bridge'; function urlLint(u, callerContainer) {   try {     if (!u || typeof u !== 'string') return null;++    // ── file:// — v1.9.195 (John, 2026-07-29: a thread opened+    // file:///home/adom/project/hd-launcher-mockup/publish/orbital-lab-helium/helium-lab.html and pup+    // said NOTHING; it just rendered Chrome's ERR_FILE_NOT_FOUND). pup drives Chrome on the USER'S+    // DESKTOP, so a file:// URL resolves against THEIR filesystem, never the caller's container. A+    // container-shaped path (/home/, /root/, /workspace/, /tmp/) can NEVER exist there — that is a+    // guaranteed-broken open and must be reprimanded before it wastes a window. Any other file://+    // path gets an EXISTENCE PRE-FLIGHT below (the bridge runs on the desktop, so it can just look).+    if (/^file:/i.test(u)) {+      let fpath = '';+      try { fpath = decodeURIComponent(new URL(u).pathname || ''); } catch (e) { fpath = ''; }+      const winPath = fpath.replace(/^\/([A-Za-z]:)/, '$1').replace(/\//g, path.sep);+      const containerish = /^\/(home|root|workspace|tmp|usr|var|opt|mnt)\//i.test(fpath);+      if (containerish) {+        return {+          code: 'url_file_container_path',+          message: `CONTAINER PATH HANDED TO PUP. You passed "${u}", but pup drives Chrome on the USER'S DESKTOP `+            + `(Windows/macOS) — a file:// URL resolves against THEIR filesystem, not your container's. "${fpath}" is a `+            + `container path, so it can never exist there and this open is guaranteed to render Chrome's `+            + `ERR_FILE_NOT_FOUND page. Do ONE of these instead: (1) SERVE it and open the public proxy URL — run a `+            + `static server in your container (e.g. \`python3 -m http.server <port>\` in that directory) and open `+            + `https://<your-container>.adom.cloud/proxy/<port>/<file> ; or (2) PUSH it to the user's machine first `+            + `with adom-desktop push_file, then open the file:// path it actually landed at on THEIR disk. Never `+            + `assume your container's paths exist on the user's computer — they are different machines.`,+        };+      }+      // Not container-shaped: it MIGHT be a real path on this desktop. The bridge runs on the desktop,+      // so pre-flight it rather than letting Chrome render an error page the caller may misread.+      try {+        if (winPath && !fs.existsSync(winPath)) {+          return {+            code: 'url_file_not_found',+            message: `FILE DOES NOT EXIST ON THE USER'S MACHINE. pup pre-flighted "${winPath}" on the desktop before `+              + `opening it and there is no such file, so this would have rendered Chrome's ERR_FILE_NOT_FOUND page. `+              + `Check the path, or push the file to the desktop first with adom-desktop push_file and open the path it `+              + `reports back. (Remember: pup's Chrome runs on the USER'S computer, so file:// is THEIR filesystem, `+              + `not your container's.)`,+          };+        }+      } catch (e) {}+      return null;+    }+     const url = new URL(u);     const host = url.hostname.toLowerCase(); @@ -7282,6 +7325,19 @@ const server = http.createServer(async (req, res) => {         }         // --- Session management commands ---         case 'browser_open_window': {+          // v1.9.195 (John: "you're supposed to pre-emptively catch stupid urls the ai tells you to+          // open"). REFUSE a URL that CANNOT work, before spending a window on it. A container path+          // handed to pup (file:///home/...) or a file:// path that does not exist on the desktop is+          // a guaranteed ERR_FILE_NOT_FOUND — previously pup opened a window, rendered Chrome's error+          // page, and said NOTHING, so the calling AI had to guess (and often misdiagnosed it).+          {+            const _pre = urlLint(args.url, res && res._callerContainer);+            if (_pre && (_pre.code === 'url_file_container_path' || _pre.code === 'url_file_not_found')) {+              console.log(`[urlLint] REFUSED open of "${args.url}" — ${_pre.code}`);+              sendJSON(res, { success: false, errorCode: _pre.code, error: _pre.message, _urlLint: _pre.message, urlLintCode: _pre.code });+              return;+            }+          }           // v1.9.147: sessionId is OPTIONAL when the caller identifies its thread — the thread gets           // its own keyed window (see the thread-default block below). Only the fully anonymous           // no-id no-thread case is refused, down there, with a teaching error.@@ -9728,6 +9784,16 @@ const server = http.createServer(async (req, res) => {           return;         }         case 'browser_navigate': {+          {+            // v1.9.195: same pre-flight as open — never navigate a window to a guaranteed-broken+            // file:// URL (container path, or missing on the desktop) and leave the caller guessing.+            const _pre = urlLint(args.url, res && res._callerContainer);+            if (_pre && (_pre.code === 'url_file_container_path' || _pre.code === 'url_file_not_found')) {+              console.log(`[urlLint] REFUSED navigate to "${args.url}" — ${_pre.code}`);+              sendJSON(res, { success: false, errorCode: _pre.code, error: _pre.message, _urlLint: _pre.message, urlLintCode: _pre.code });+              return;+            }+          }           let session, resolvedId;           // v1.6.1+: auto-recover (reconnect or relaunch) before surfacing           // any error. The Docker container should never see "Session