Pup - Puppeteer Bridge

Fresh-user defaults now match Johns working config, since the AUMID crash concern that kept them off is resolved and John confirmed they work great. A new user now gets per-window taskbar identity (aumidIcons on), jump lists (jumpLists on), the category icon style, and split taskbar grouping by default, instead of the old all-windows-stacked-under-one-Chrome-button mode. Existing users explicit choices are untouched via the _chosen tracking, so this only moves users who never set these keys

Credential hints surface on any verb, not just render verbs: the anti-phishing auto-fill note (which regurgitates the live domain) and the login-capture note now drain unconditionally so the caller sees them on its very next call whatever it is

Fixes login capture missing form submits that navigate: capture now fires through a synchronous Puppeteer binding at submit time, reaching the keychain vault BEFORE the navigation wipes the page, with the sweep-harvested global kept only as the fallback for SPA logins that never navigate. Same keychain-only, never-logged storage

pup-native credential manager (John authorized), so the AI manages logins without Chromes foreground picker. Auto-capture: as any login is submitted in a pup window, the username and password are recorded into the OS keychain vault (encrypted at rest, never in the index, never logged, never echoed) and the owning thread is hinted that its adom-you identity just grew. Auto-fill on return: matching pages fill in the background over CDP, no Chrome dropdown, no foregrounding. Submit is REASON-GATED and domain-confirmed per John: pup never auto-submits; the AI must call pup_login submit true with a submitReason, and the refusal regurgitates the exact live host so a lookalike or phishing domain is caught before the secret is sent. New pup_credentials verb lists saved logins host and username only; captureLogins and the richer autoLogin modes are dashboard settings and pup_configure keys

The anonymous identity tile is recut per John: it no longer wears the pup four-dot mark, which read as pup-again rather than nobody. It is now the universal empty-avatar signal, a muted blank head-and-shoulders silhouette inside the same dark avatar disc on the family tile, so the identity slot reads avatar equals you, blank head equals no identity. Popup card mark updated to match, anon extension 0.1.1

One pup logo, finally. John picked the four-dot mark; until now pup wore three unrelated identities that accreted feature by feature: the borrowed two-lobe adom mark on the extension tile and legacy icos, a one-off two-windows-and-pulse dashboard favicon, and the four-dot mark only in the popup header and the anonymous tile. The canonical mark is now the teal rounded tile with the adom four offset dots in dark logo teal, worn by the pup toolbar extension icon set at 0.2.5 and the dashboard favicon; the purpose-variants stay because they carry meaning: pen for annotate, avatar for signed-in-as-you, dots-on-dark-disc for anonymous, category glyphs on taskbar tiles

pup_my_windows stops lying by omission during recovery: for about 90 seconds after a bridge restart an empty listing now says the bridge is still re-adopting surviving windows and to retry, instead of letting a thread conclude its window is gone. Found by hitting exactly that window myself while verifying the ai-thread rename

The thread-addressing parameter is spelled ai-thread, exactly like the CLI flag, per John; the camelCase forms from earlier today remain silent aliases. Docs and describe updated

Teaching refinement to the next-steps block after Johns question about screenshots: pup_screenshot is the loudly-stated default, page-perfect over CDP with zero ids, and the one legitimate reason to touch a desktop verb, needing the browser chrome itself in frame, now comes with its rail: pup_window_info hands the caller its own windows hwnd so nothing is ever searched for

The thread-name addressing parameter is aiThread, matching abs own --ai-thread vocabulary exactly per John; aiThreadName from an hour ago stays as a silent alias. Docs, describe, and the my-windows payload all speak aiThread

AI-thread ergonomics overhaul after John watched the ah-build thread hwnd-hunt its own window. New pup_my_windows verb: zero args, everything the calling thread owns with ready-to-run next steps. Thread-name addressing: any targeting verb accepts aiThreadName in place of sessionId, resolving to that threads window, first step of retiring sessionId from the public surface. And every open and navigate response now carries a _next block teaching the caller to keep driving its window with zero ids, screenshot via pup_screenshot, reload via pup_reload, and never to hunt hwnds with desktop verbs for a pup window. SKILL.md gains the addressing section as the second thing a reader sees

The owner-in-tab-title experiment is removed outright. John: stop mangling the title of the page. The page title belongs to the page; attach and the 10s sweep now inject only the cleanup build that strips any prefix an elder keeper still applies and kills its interval, the settings row is retired, and the doctrine is written down in the new dev-skills pup-page-integrity skill so it never comes back. Ownership signals stay on pup-owned surfaces only: taskbar tooltip, dashboard, extension hover, identity tile. Also replaces the dashboard header close-all icon, a bare X that read as close-this-dashboard, with a stacked-windows-with-x glyph and a tooltip spelling out that it closes every pup window, not the dashboard

Profile-consistency doctrine from John: every pup window ALWAYS opens on the shared adom-you profile, and isolation becomes reason-gated exactly like foregrounding — an explicit isolated:true without an isolationReason is refused with a teaching hint, while the two definitional cases, webSecurity false and the wiki public view, carry their own built-in reason. And a window that does run on an alternate profile now still shows an identity tile: a new anonymous variant with the pup four-dot mark set in the circular avatar inset, whose popup card explains the window is not signed in as you, so a not-you window is visible at a glance instead of just missing an avatar

Immediate relief for the initials badge John kept seeing over the pup toolbar icon. Investigation found the adom-you Chrome stays warm across bridge restarts, never reloads staged extensions, and currently hosts other AI threads windows, so it must not be relaunched; the new pup_quit_idle_browsers verb correctly refused. Instead the health endpoint renames the session owner field to ownerThread: the stale worker paints its badge from that field every 30 seconds, so the rename starves the retired badge within one sweep with zero disruption to running windows. Extension 0.2.4 readers use the new field; ownership itself now lives directly visible in the tab title prefix

Adds the pup_quit_idle_browsers maintenance verb: gracefully Browser.close every profile browser carrying zero live sessions, pup-native and never an OS process kill. Needed because pup keeps Chrome warm across window closes and bridge restarts, and a warm browser never reloads its staged extensions, so extension updates could not actually land without it. Rides with the 2.0.98 sweep title re-assert

The owner-in-tab-title keeper now re-asserts from the periodic sweep. Root cause found while chasing why the thread name did not appear after the last bridge restart: pup deliberately keeps Chrome alive across bridge restarts and re-adopts it, and adoption attaches tabs BEFORE the session files restore ownership, so the attach-time injection saw no owner and skipped. The sweep now stamps every owned window; the versioned owner-keyed guard makes repeat passes no-ops. Same investigation also explains why the retired badge kept appearing: a surviving Chrome never reloads its extensions, so the badge-free worker only arrives with a true relaunch

Two dashboard polish items from John. The stock browser scrollbar in the settings dialog is replaced by the brand one everywhere on the dashboard: thin, rounded, invisible track, thumb on the border token. And the double-tooltip bug is gone: several controls carried a raw title attribute alongside the designed tooltip, so both rendered; any title attribute is now absorbed into the tooltip system on first hover before the native delay can fire, so every hint renders through the one clamped 600ms tooltip

Follow-through on the owner-in-tab-title change. The thread name now rides as a PREFIX because Chrome ellipsizes tabs at a fixed width and the suffix form truncated out of sight, defeating the directly-visible goal. Also fixes extension staging: the stager compared file size only, so a same-length edit like the manifest version bump 0.2.2 to 0.2.3 was silently never copied to the desktop; it now also compares mtime, which is why the retired owner badge could still appear after the last cycle

Two John asks from live use. One: the corner floaty pencil is now OFF by default and its hover zone no longer exists unless enabled in Settings, because the invisible corner target was fighting real buttons in app headers; the toolbar pen button now carries discovery, the Alt Shift A hotkey survives independently of the pencil via its own setting, and flipping the setting live now genuinely tears the pencil out of every open page instead of only affecting future loads. Two: the owner-initials badge overlay on the toolbar icon is retired as too disruptive; Chrome allows an extension one icon plus a four-character overlay and no toolbar text, so the owning AI thread now rides the tab title as a plain visible suffix, kept idempotently as pages rewrite their titles, live-applied both ways from Settings. Extension worker 0.2.3 clears old badges and keeps the hover title. The floaty ralph harness enables the pencil for its run and restores the prior setting after

The dashboard err chip stops counting its own plumbing (John saw a red 10 err chip on a healthy dashboard after the window reopen). Both sources were self-inflicted 404s on the dashboard page: the badge preview endpoint now answers a transparent pixel while a freshly opened window has no composed overlay yet, and the bridge answers Chromes automatic favicon.ico probe with a redirect to the dashboard icon instead of a 404. The chip now only fires on real page errors