app
Pup - Puppeteer Bridge
Public Made by Adomby adom
pup is the AI's own browser: a real, full Chrome on the user's desktop that the AI fully controls (a sandbox, not the user's signed-in browser). Rides Bridge; pup_* verbs open windows and tabs, navigate, screenshot, and eval JS.
Reconcile the repo/release divergence (issue #19): merge Kyle's ten unreleased macOS fixes onto the true 1.9.90 tree. Takes his win32 self-guards on the three powershell.exe spawn primitives (removes a latent mac trap), the desktop_taskbar mac-gating rationale, platform-accurate describe hints for browser_wiki_set_view / browser_alert_window / browser_close / browser_configure, browser_configure now reporting platform + taskbarSupported, and the mac-aware Chrome .dmg install hint (no UAC/awaiting_uac phase on darwin). Reconciles his local _isWin against the module-level one added in 1.9.89. Also fixes bridge.json platforms.macos.supported, which had declared FALSE since the macOS port actually shipped in 1.9.74 and is the machine-read manifest a host reads to decide platform support. All 1.9.86-1.9.90 work verified intact (reap fix, wiki auto-sign, native-first).
John Lauer
·
a8e4849
·
18d ago
browser_close: name the {} exception in both surfaces
Kyle Bergstedt
·
08c06ff
·
18d ago
record why the desktop_taskbar gates stay
Kyle Bergstedt
·
26d3918
·
18d ago
describe catalog + install hint: mac-accurate
Kyle Bergstedt
·
8024ba5
·
18d ago
scope windows-only behavioural claims in shipped skills
Kyle Bergstedt
·
934a861
·
18d ago
frontmatter + readme: finish the windows-claim pass
Kyle Bergstedt
·
52e2ef9
·
18d ago
shipped skills: windows-only assertions made false by the mac port
Kyle Bergstedt
·
8c66285
·
18d ago
browser_configure: platform-accurate hint, taskbar is windows-only
Kyle Bergstedt
·
31dabd8
·
18d ago
install the main skill as pup, not the repo name
Kyle Bergstedt
·
0d0d572
·
18d ago
harden: build Windows browser candidates only on win32 (cwd-relative path class)
Kyle Bergstedt
·
d3d7c39
·
18d ago
fix: re-discover the AD base after a connection failure (stale port after AD self-update)
Kyle Bergstedt
·
06e4aed
·
18d ago
harden: self-guard the three powershell primitives (unreleased; rides next version)
Kyle Bergstedt
·
f3d454a
·
18d ago
Decision doc: flip pup to native-first (John, 2026-07-24). Record that the identity-dialog reason for CfT-first is dead (flags fix it on any Chromium), the freeze was the reap bug not CfT, native works with all taskbar branding, and CfT is now the last resort + the managed-box escape hatch via browser_use.
John Lauer
·
b8d6a38
·
18d ago
Flip pup's default browser to NATIVE-FIRST. launchCandidates() now orders the user's installed Chrome, then Edge (ships on every Windows PC), FIRST, driven with a fresh isolated profile PLUS the noBrowserIdentityFlags that suppress Chrome's sign-in / set-up-a-work-profile merge dialog. Chrome-for-Testing is now the genuine LAST RESORT, fetched only when the box has no installed Chromium at all; warmup() no longer force-downloads CfT when a native browser is present. This makes native as clean as CfT (the identity-dialog reason for CfT-first was already invalidated: CfT shows the same dialog, the flags are the real fix and apply to any Chromium), with no 150MB download, always the user's current battle-tested build, and all taskbar identity overrides work identically. browser_use {browser:cft} still pins CfT for a managed/enterprise box whose policies interfere. Cold-start gate + hints updated; decision doc flipped.
John Lauer
·
8f85e8e
·
18d ago
Fix browser_close leaving core-pegging renderer orphans that froze the desktop. The teardown reap was fire-and-forget with an 8s full-Win32_Process enumeration that TIMED OUT exactly when the box was CPU-pegged by the runaway renderers it existed to kill (AdomLapper: 88-98% CPU, dwm starved, forced reboot; 6 CfT procs survived a close, 4 renderers near 100%). Now the reap is AWAITED, VERIFIED, and load-tolerant: WMI image-name filter is pushed server-side so only chrome/msedge rows materialize (fast at 98% CPU), close() awaits the profile-scoped kill of the parent tree PLUS any reparented renderer orphans, and every close response returns chromeProcsRemaining (should be 0). Adds a boot + periodic orphan sweep (reaps pup chrome whose profile has no live session, spared by profile) and a verified close-all sweep.
John Lauer
·
8f6e8a8
·
18d ago
Wiki auto-sign: pup now signs its wiki window in AUTOMATICALLY from the user's identity that AD already stores at ~/.adom/session.json on the same desktop (mints a single-use browser-session magic link server-side from that bearer token and navigates the vault window to it), instead of ever making the user hand-type a login into pup's no-memory browser. Applies to BOTH the jump-list logged-in-view toggle and the AI wikiView:authed open path; manual /login is now only the fallback when AD itself is signed out or the session expired.
John Lauer
·
bc46537
·
18d ago
dev skill: add the cross-repo issue-filing rule (AD-core bugs go on adom/adom-desktop, not the pup page) after mis-filing issue #18; record the AD #28/#29 destinations and the global-id gotcha for close/comment.
John Lauer
·
729d98e
·
18d ago
Restore full src/ HEAD to the unified 1.9.87 tree (Kyle's 1.9.85 base + puppeteer 24.43.1 bump). The 1.9.86 subset-push had left git HEAD with Windows-only server.js and missing recorder-icon.ico + mac icons; this makes HEAD match the shipped 1.9.87 zip exactly.
John Lauer
·
e9325cb
·
18d ago
Recover from the 1.9.86 mac-parity regression: rebase onto Kyle's 1.9.85 unified base and re-apply only the puppeteer 24.43.1 / CfT 148 bump. Restores darwin support, recorder-icon.ico, and the AD-base resolver that 1.9.86 dropped.
John Lauer
·
6c6d596
·
18d ago
Document the three ship verification gates (served-zip hash via plain download, gate on install result, on-disk version) and the dependency-bump node_modules refresh
John Lauer
·
5a5e602
·
18d ago
Ship 1.9.86 (cache-bust of the CfT 148 puppeteer bump)
John Lauer
·
2171418
·
18d ago
Bump bundled puppeteer 24.39.1 -> 24.43.1 so the fleet's pinned Chrome-for-Testing moves from the stale 146 to 148 (via @puppeteer/browsers 2.13.2). Keeps CfT-first; stays in the 24.x line (Node >=18, no API breaks) rather than 25.x (needs Node >=22.12)
John Lauer
·
ee61df7
·
18d ago
Round out the CfT-vs-native decision record: the binary-not-isolation framing, the policy-free-binary reason, the honest bottom line, and flag the resource-limits claim as an unverified hypothesis
John Lauer
·
d9929e7
·
18d ago
Document the CfT-over-native design decision: the original profile-poisoning reason is now handled by launch flags (CfT showed the same dialog), the reasons that still hold, the costs (staleness/limits/download), and when native is right
John Lauer
·
3c00e97
·
18d ago
v1.9.85: three-way merge of mac-parity + Windows 1.9.76-84 lines; restore pup-cat icons to the repo
Kyle Bergstedt
·
fc5fa00
·
18d ago
REVERT manifest to 1.9.84 (concurrent-release incident: 1.9.75 push unknowingly rolled back John's 1.9.76-84 line; mac merge lands as 1.9.85)
Kyle Bergstedt
·
c4cc68d
·
18d ago
v1.9.75: verified-AD-base resolver (HD-hosting env fix) + recorder icons in the release zip
Kyle Bergstedt
·
1a4475c
·
18d ago
Publish 1.9.84 manifest (prior push served stale)
John Lauer
·
0c1a856
·
18d ago
Wiki sign-in: after navigating to the login page, re-check auth in the background and flip the glyph/tab-label/category-icon to logged-in when the hydrogen SSO auto-completes (an already-alive SSO session lands back signed in with no form to fill)
John Lauer
·
0fd1c97
·
18d ago
Wiki logged-in toggle: when no wiki session exists yet, navigate THIS window to the sign-in page and raise it, instead of showing a dead-end sign-in-in-this-window toast on the public page
John Lauer
·
9e58cc0
·
18d ago
Document the frozen-event-loop bridge restart: never run synchronous exec on a verb or close path, and how to burst-test for it
John Lauer
·
c9b30ce
·
18d ago
Make the orphan-renderer reap NON-BLOCKING: the v1.9.78 reap ran a synchronous 8s PowerShell CIM query on the close path, freezing the event loop and making the bridge unresponsive to AD's health check (self-inflicted restart). Fire-and-forget async instead
John Lauer
·
702c0b5
·
18d ago
Document the issue-16 renderer-crash survival fixes (detect, fast-fail, reclassify, profile-scoped reap)
John Lauer
·
9a4096b
·
18d ago
Reclassify a timed-out/detached tab op as the structured renderer-crashed error at the dispatch catch (first-verb fast-fail for issue #16)
John Lauer
·
51fa8fd
·
18d ago
Reclassify a timed-out/detached tab op as the structured renderer-crashed error at the dispatch catch, so even the first verb that discovers a crash returns the reload-to-recover hint instead of a generic 20s timeout
John Lauer
·
065b3e6
·
18d ago
Survive renderer crashes (issue #16): detect a crashed tab renderer (page error + Inspector.targetCrashed), fast-fail its verbs with a reload-to-recover hint instead of hanging the window, clear the flag when reload/navigate respawns it, and reap orphaned/crashed renderers scoped to the session profile on close
John Lauer
·
d704de4
·
18d ago
Never block browser_open_window on a Chrome-for-Testing download when a system browser is available (issue #15): a machine with working Edge and Chrome could not open a window because the gate ignored system candidates, contradicting the documented last-resort behaviour
John Lauer
·
de6ff2f
·
18d ago
Teach the highFps decision in the pup skill and record the issue-14 root cause (global power flags, not un-reaped sessions) in the maintainer skill
John Lauer
·
5284639
·
19d ago
Fold the high-FPS section under the existing Recording heading and link out to RECORDING.md
John Lauer
·
c18b064
·
19d ago
Add RECORDING.md sub-readme for background recording + the leased highFps window mode, linked from a short section in the main README
John Lauer
·
0e7eca8
·
19d ago
Power fix: Chrome power-saving flags are now OPT-IN via highFps instead of applied to every window forever (issue #14 battery drain). A highFps window holds a lease (default 20 min, max 120), an active recording holds it open indefinitely so a take is never cut off, and on lapse the window is DOWNGRADED by relaunch carrying its tabs rather than closed. Adds browser_highfps_extend, plus hints on every open so an AI discovers the capability
John Lauer
·
22b76f6
·
19d ago
Self-heal a half-populated Chrome-for-Testing cache dir: delete the versioned folder when it exists without its executable, so a partial or interrupted download stops failing every later install attempt
John Lauer
·
8fb5505
·
19d ago
Publish 1.9.74
Kyle Bergstedt
·
0196b60
·
19d ago
v1.9.74: macOS parity — hidden-app background-by-default, mac lower/raise/alert, dmg Chrome install, mac ffmpeg + process-scan fixes
Kyle Bergstedt
·
accc00c
·
19d ago
Whitelist assets/pup-icons/*.png so the consumer icon PNGs ship to the wiki repo (were skipped by the *.png gitignore rule)
John Lauer
·
ef0e1f4
·
19d ago
Publish canonical pup icon asset set (SVG+PNG+ICO+manifest) at assets/pup-icons/ and add an author-facing README section so tools like the HD browser picker can use the real pup icon (recommend pup-cat-default for launchers)
John Lauer
·
43c449d
·
19d ago
Keep the log janitor (dedupe plus quieter drag and overlay lines) and record why the bridge owns log VOLUME while AD owns the file and its rotation
John Lauer
·
4b7d495
·
20d ago
Log the missing-favicon case once per session instead of on every tab-badge update
John Lauer
·
036a403
·
20d ago
Log janitor: collapse consecutive identical lines into one plus a repeat count, and stop the drag check emitting one line per tab when nothing moved
John Lauer
·
c6300c4
·
20d ago
Document the reboot foreground bug (recovery and reclaim never parked) and the new per-verb audit log
John Lauer
·
b9df391
·
20d ago