Fusion - the Fusion 360 Bridge

@@ -3578,6 +3578,40 @@ def _orchestrate_fetch_optimized_glb(args: dict) -> dict:             "message": "Job %s still %s; re-call fusion_fetch_optimized_glb to finish." % (job_id, res.get("status") or "processing")}  +def _ad_call(verb: str, args: dict, timeout: int = 60) -> dict:+    """Call another AD verb (nbrowser_*, desktop_*) from inside this bridge.++    Prefers the in-process ad_client; falls back to the adom-desktop CLI (which joins the+    relay itself) so this still works on an unattended VM where ad_client is down. Never+    raises - returns {} on failure so callers can degrade to instructing the AI instead."""+    try:+        if ad_client.available():+            r = ad_client.call(verb, args)+            if isinstance(r, dict):+                return r+    except Exception:+        pass+    try:+        import subprocess as _sp, json as _j+        exe = _find_adom_desktop_cli()+        if not exe:+            return {}+        p = _sp.run([exe, verb, _j.dumps(args)], capture_output=True, text=True, timeout=timeout)+        out = (p.stdout or "").strip()+        if out.startswith("{"):+            d = _j.loads(out)+            inner = d.get("output")+            if isinstance(inner, str) and inner.strip().startswith("{"):+                try:+                    return _j.loads(inner)+                except Exception:+                    return d+            return d+    except Exception:+        pass+    return {}++ def _orchestrate_demo(args: dict) -> dict:     """FIRST-TIME-USER DEMO: take a brand-new user from nothing to "wow" in one verb. @@ -3640,26 +3674,59 @@ def _orchestrate_demo(args: dict) -> dict:      # ── 2. SIGN-IN: finish it, do not sit on it ─────────────────────────────────     if rd.get("needsSignin"):-        return _out("signin",-            "Fusion needs your Autodesk sign-in. I'll use your own browser - you're probably "-            "already signed in there, so this should take one click.",-            "FINISH THE SIGN-IN - do NOT leave the user staring at this screen. Use the NATIVE "-            "browser (ABE), never pup: pup is anonymous so Autodesk would demand a full login, "-            "while the user's real Chrome/Edge profile is typically ALREADY signed into Autodesk. "-            "SEQUENCE: (1) nbrowser_readiness - if state!='ready', offer the one-time extension "-            "install (installing-the-extension skill); ABE still exposes nb verbs meanwhile. "-            "(2) Click Fusion's 'Sign In' button in the BACKGROUND via desktop_find_control + "-            "desktop_ui_click (never a coordinate click, never steal focus). That fires the OAuth "-            "URL at the DEFAULT browser. (3) If their default browser is the signed-in profile, it "-            "completes itself - just poll fusion_readiness. If it lands logged-out, open the same "-            "auth URL in the signed-in profile with nbrowser_open_window {profile:'chrome:<their "-            "account>'} (nbrowser_profiles lists them) and click 'Allow'/'Open' there. (4) The "-            "handoff back to Fusion is the 'Autodesk Identity Manager' overlay - tick 'Always allow' "-            "+ 'Open'. (5) NEVER type their password or 2FA: if a secret is demanded, "-            "fusion_notify_owner toasts their machine so THEY type it. Sign-in codes expire in ~2 "-            "min - if it expires, click 'Sign In' again for a fresh one. Poll fusion_readiness until "-            "ready:true, then call fusion_demo again. FULL PLAYBOOK: fusion-autodesk-signin skill.",-            needsSignin=True)+        # DO IT, don't just describe it: open the Autodesk sign-in in the user's OWN browser,+        # in the BACKGROUND so we never yank them out of what they're doing. Then tell the AI+        # exactly WHERE it is waiting and offer the three ways forward.+        nb = _ad_call("nbrowser_readiness", {}, timeout=40)+        nb_data = nb.get("data", nb) if isinstance(nb, dict) else {}+        nb_state = nb_data.get("state")+        opened, where, profile_used = False, "", ""+        if nb_state == "ready":+            profs = _ad_call("nbrowser_profiles", {}, timeout=40)+            pdata = profs.get("data", profs) if isinstance(profs, dict) else {}+            plist = [p for p in (pdata.get("profiles") or []) if isinstance(p, str) and ":" in p]+            profile_used = plist[0] if plist else ""+            oa = {"sessionId": "fusion-signin", "url": "https://accounts.autodesk.com/",+                  "background": True, "thread": "fusion-demo", "purpose": "Autodesk sign-in for Fusion"}+            if profile_used:+                oa["profile"] = profile_used+            r = _ad_call("nbrowser_open_window", oa, timeout=60)+            opened = bool((r.get("data", r) if isinstance(r, dict) else {}).get("sessionId") or r.get("ok") or r.get("success"))+            where = (profile_used.split(":", 1)[0].title() if profile_used else "your browser")+            if profile_used and "@" in profile_used:+                where += " (%s)" % profile_used.split(":", 1)[1]+        steps.append("opened Autodesk sign-in in %s (background)" % (where or "browser") if opened+                     else "could not auto-open the browser sign-in")+        if opened:+            narrate = ("I've opened the Autodesk sign-in for you in %s - it's sitting in the "+                       "background so it won't interrupt what you're doing. Finish it whenever you "+                       "like, or say the word and I'll bring it up front, or I can just complete it "+                       "for you." % where)+        else:+            narrate = ("Fusion needs your Autodesk sign-in. I'd like to use your own browser - you're "+                       "probably already signed in there, so it should take one click.")+        return _out("signin", narrate,+            ("FINISH THE SIGN-IN - never leave a first-time user parked here. " ++             ("A background sign-in tab is ALREADY OPEN in %s (session 'fusion-signin'). " % where+              if opened else "Auto-open failed - open it yourself: nbrowser_open_window "+              "{sessionId:'fusion-signin', url:'https://accounts.autodesk.com/', background:true, "+              "profile:'<chrome:their-account>'}. ") ++             "TELL THE USER WHERE IT IS WAITING and OFFER ALL THREE: (a) they finish it themselves "+             "whenever they want, (b) you foreground that window for them "+             "(nbrowser_switch_window / browser window state), or (c) THEY LET YOU DRIVE IT - ask "+             "first (AskUserQuestion), then click through 'Continue with Google/Apple/Microsoft' "+             "using their warm session. Use the NATIVE browser (ABE), NEVER pup: pup is anonymous so "+             "Autodesk demands a full fresh login, while their real profile is usually already signed "+             "in. NEVER type their password or 2FA - if a secret is demanded, fusion_notify_owner "+             "toasts them to type it. Then click Fusion's own 'Sign In' (the webview exposes no UIA "+             "control, so use an image-space desktop_click on the button, or foreground + click) to "+             "fire the OAuth handoff; accept the 'Autodesk Identity Manager' overlay ('Always allow' "+             "+ 'Open'). Codes expire in ~2 min - if it expires, click Sign In again. Poll "+             "fusion_readiness until ready:true, then call fusion_demo again. Playbook: "+             "fusion-autodesk-signin."),+            needsSignin=True, signinOpened=opened, signinWhere=where,+            signinProfile=profile_used, signinSession="fusion-signin" if opened else None,+            nbState=nb_state)      if not rd.get("ready"):         return _out("waiting",