Adom Bridge

⋯ 1 unchanged line ⋯

@@ -60,7 +60,7 @@ case "$OS" in       *":$HOME/.local/bin:"*) ;;       *) echo "[adom-bridge] NOTE: $HOME/.local/bin is not on PATH — add it to your shell rc." ;;     esac-    echo "[adom-bridge] CLI -> $("$HOME/.local/bin/adom-bridge-cli" --version 2>/dev/null || echo installed)"+    echo "[adom-bridge] CLI -> $("$HOME/.local/bin/adom-bridge" --version 2>/dev/null || echo installed)"     ;;   *mingw*|*msys*|*cygwin*)     echo "[adom-bridge] On Windows, install the GUI from https://wiki.adom.inc/adom/adom-bridge (Download box). It bundles adom-bridge-cli.exe."

@@ -1,6 +1,6 @@ {
   "slug": "adom-bridge",
-  "version": "2.0.63",
+  "version": "2.0.65",
   "type": "app",
   "brief": "Adom Bridge unleashes your AI onto your full PC: full power, full safety. The AI breaks out of the container it runs in and onto your real machine, managing and running your entire laptop as you: launch apps, move files, drive any window, control KiCad, Fusion 360 or your real signed-in browser. Works with any AI, cloud or local (Claude Desktop, Claude Code, Codex), no Hydrogen required. Bridge and its bridges are an operating system for AI, with managed Node and Python runtimes, and a human-only permission system keeps you in charge of every side-effecting command.",
   "description": "Install this package in a cloud or Hydrogen Desktop container, not on the PC. It delivers two things: the Linux adom-bridge-cli (linked onto PATH) and the Claude skill set that teaches an AI every desktop verb (shell, files, screenshots, windows, notifications, KiCad, Fusion 360, browser automation). The CLI drives the Adom Bridge app running on your Windows PC over the relay; the Windows app itself is the separate installer in the Download box, not part of this package. Run adom-wiki pkg update to keep the CLI and skills current.",

@@ -1,6 +1,6 @@ {   "slug": "adom-bridge",-  "version": "2.0.63",+  "version": "2.0.65",   "type": "app",   "description": "Install this package in a cloud or Hydrogen Desktop container, not on the PC. It delivers two things: the Linux adom-bridge-cli (linked onto PATH) and the Claude skill set that teaches an AI every desktop verb (shell, files, screenshots, windows, notifications, KiCad, Fusion 360, browser automation). The CLI drives the Adom Bridge app running on your Windows PC over the relay; the Windows app itself is the separate installer in the Download box, not part of this package. Run adom-wiki pkg update to keep the CLI and skills current.",   "keywords": [

@@ -1,16 +1,16 @@ {   "manifest_version": 1,-  "version": "2.0.63",-  "released_at": "2026-08-19T20:49:00Z",+  "version": "2.0.65",+  "released_at": "2026-08-19T22:27:24Z",   "windows": {-    "installer_url": "https://wiki.adom.inc/download/adom/adom-bridge/2.0.63/Adom.Bridge_2.0.63_windows_x64-setup.exe",-    "installer_filename": "Adom.Bridge_2.0.63_windows_x64-setup.exe",-    "installer_sha256": "82a996685a35e7e4a064b229bc9221b3ab8ee5f497aa7d386838f8a760486227",-    "installer_size": 17844912+    "installer_url": "https://wiki.adom.inc/download/adom/adom-bridge/2.0.65/Adom.Bridge_2.0.65_windows_x64-setup.exe",+    "installer_filename": "Adom.Bridge_2.0.65_windows_x64-setup.exe",+    "installer_sha256": "85a5a8b885d30c7277b6b092f07e62000008936c5425c771d84aebc77e8a1eca",+    "installer_size": 17851048   },   "changelog_url": "https://wiki.adom.inc/adom/adom-bridge",   "minimum_required": "1.3.30",-  "note": "Adom Bridge 2.0.63. Security: web commands from an OPAQUE origin (Origin: null, which every sandboxed iframe and file:/data: document sends) are now refused outright, before any consent prompt. Such an origin names no page, so a human cannot meaningfully approve it, and because grants were keyed on the origin string a single Allow-1-hour would have silently covered every other unrelated opaque document for that hour. Reads (/health, /status) stay open so detection is unaffected. Named origins are unchanged and still reach the consent prompt.",+  "note": "Adom Bridge 2.0.65. Security: a cross-origin GET /status now returns a minimal projection (service, version, webControl enabled/requireHandshake) instead of the full document. CORS reflects any origin so a page can DETECT the bridge, which also meant any site could read the machine name, the install path containing the username, the permissions state and the list of every other origin the user had approved - all with no consent step. Local callers send no Origin and still receive the complete document. Also: approval banners muted by Do Not Disturb are now visible and one click from fixed, and the CLI's own help output teaches the adom-bridge command name.",   "macos": {     "installer_url": "https://wiki.adom.inc/download/adom/adom-bridge-macos/1.9.162/Adom.Desktop_1.9.162_macos_aarch64.dmg",     "installer_filename": "Adom.Desktop_1.9.162_macos_aarch64.dmg",