Fusion - the Fusion 360 Bridge

@@ -1 +1 @@-1.10.32\ No newline at end of file+1.10.33\ No newline at end of file

@@ -2,7 +2,7 @@   "manifest_version": 1,   "name": "fusion360",   "displayName": "Autodesk Fusion 360",-  "version": "1.10.32",+  "version": "1.10.33",   "description": "Drive Autodesk Fusion 360 from the cloud: launch Fusion, electronics board layout, design rules, exports (STEP/IGES/STL/3MF/USDZ/OBJ/DXF/DWG/Gerbers/BOM/CPL), fast APS server-indexed cloud search plus browse/recent/file-info/versions, cloud file download/upload and folder creation, and in-app parametric modeling (fusion_run_modeling_script). Never-charge: APS calls are capped to the free tier.",   "homepage": "https://wiki.adom.inc/adom/fusion-bridge",   "author": "Adom Inc.",

@@ -4,7 +4,7 @@ version = 4  [[package]] name = "fusion-dashboard"-version = "1.10.32"+version = "1.10.33" dependencies = [  "serde_json", ]

@@ -1,6 +1,6 @@ [package] name = "fusion-dashboard"-version = "1.10.32"+version = "1.10.33" edition = "2021"  [dependencies]

@@ -21,7 +21,7 @@ echo "Installed fusion-bridge skills: $(ls "$PKG_DIR/skills" 2>/dev/null | tr '\ # binary (the three-artifact pattern: bridge zip -> ab, THIS pkg -> container skills + # this download, page media -> wiki). Per the wiki's PKG_VS_RELEASE policy, binaries are # platform-tagged RELEASE assets, never tarball content - the installer fetches them.-DASH_VERSION="1.10.32"+DASH_VERSION="1.10.33" DASH_URL="https://wiki.adom.inc/download/adom/fusion-bridge/${DASH_VERSION}/fusion-dashboard" DEST="" if [ -w /usr/local/bin ]; then DEST=/usr/local/bin

@@ -1,6 +1,6 @@ {   "slug": "fusion-bridge",-  "version": "1.10.32",+  "version": "1.10.33",   "type": "app",   "description": "This package installs the bridge's SKILLS into your container so your AI knows how to drive it; Adom Bridge loads the bridge runtime itself from the release zip.",   "dependencies": {

@@ -1,6 +1,6 @@ {   "slug": "fusion-bridge",-  "version": "1.10.32",+  "version": "1.10.33",   "type": "app",   "description": "This package installs the bridge's SKILLS into your container so your AI knows how to drive it; Adom Bridge loads the bridge runtime itself from the release zip.",   "dependencies": {@@ -11,6 +11,10 @@     "uninstall": "./uninstall.sh"   },   "tags": [+    "ab",+    "bridge",+    "fusion",+    "desktop-app",     "fusion360",     "autodesk",     "cad",@@ -76,6 +80,9 @@     "add a 3d model to a component",     "make a fusion 360 library with 3d",     "set up the fusion bridge",+    "fusion dashboard",+    "fusion status page",+    "open the fusion launch page",     "aps not configured",     "share aps client id across my org",     "set up fusion cloud search for my company",@@ -108,28 +115,5 @@       "label": "Part volume",       "prompt": "How much material does each printed part in this assembly use?"     }-  ],-  "agent_permissions": {-    "allow_bash": [],-    "allow": [-      "adom-desktop-fusion-bridge read-only verbs (via the adom-bridge CLI): fusion_readiness, fusion_get_app_state, fusion_addin_status, fusion_check_dialogs - state queries; they change nothing.",-      "adom-desktop-fusion-bridge read-only verbs: fusion_alerts (reads Fusion's own log for toasts), fusion_document_info, fusion_window_info, fusion_board_info, fusion_library_parts - inspect only.",-      "adom-desktop-fusion-bridge read-only verbs: fusion_prove_result (a persisted run report), fusion_plan_library_import (report-only preflight), fusion_list_cloud_projects, fusion_describe.",-      "adom-desktop-fusion-bridge evidence captures fusion_screenshot_fusion and fusion_capture_library_views read pixels and write local image files only."-    ],-    "soft_deny": [-      "adom-desktop-fusion-bridge lifecycle verbs fusion_stop, fusion_kill, fusion_restart_for_addin close or kill the Fusion application - keep the human prompt.",-      "adom-desktop-fusion-bridge fusion_install_fusion silently installs Autodesk Fusion on the user's machine.",-      "adom-desktop-fusion-bridge fusion_cleanup_cloud_files deletes files from the user's Autodesk cloud hub.",-      "adom-desktop-fusion-bridge managed-library verbs (fusion_managed_library_push/pull/create/link/unlink) publish to or overwrite the user's library.io libraries."-    ],-    "environment": [-      "adom-desktop-fusion-bridge is the Fusion 360 bridge for Adom Bridge; its fusion_* verbs are invoked through the adom-bridge CLI and drive Autodesk Fusion on the user's own desktop.",-      "adom-desktop-fusion-bridge desktop actions also pass Adom Bridge's own human-approval gate (caller identity, per-call reason, Activity Log) - a container approval is the first of two gates."-    ]-  },-  "author": {-    "name": "John Lauer",-    "email": "[email protected]"-  }-}\ No newline at end of file+  ]+}

@@ -4,7 +4,7 @@ members = ["core", "lbr", "os-win", "os-mac", "bridge"]  # One version for the whole bridge, in lockstep with BRIDGE_VERSION (tools/release.sh bumps both). [workspace.package]-version = "1.10.32"+version = "1.10.33" edition = "2021" license = "MIT" 

@@ -84,6 +84,13 @@ fn launch_url_in_browser(pref: &Value, url: &str) -> bool {     #[cfg(windows)] { use std::os::windows::process::CommandExt; cmd.creation_flags(0x0800_0000); }     cmd.spawn().is_ok() }+/// A consent page only a HUMAN can finish must be where a human can see it: on the primary+/// monitor and in front. One sentence of `reason` is what ab's permission gate asks for.+fn surface_consent_window(ctx: &Ctx, hwnd: i64) {+    let why = "the Autodesk sign-in page needs the person at this machine to sign in, so it has to be visible";+    let _ = ab_call(ctx, "desktop_set_window_bounds", json!({"hwnd": hwnd, "x": 80, "y": 60, "w": 1200, "h": 900, "reason": why}), 15);+    let _ = ab_call(ctx, "desktop_bring_to_front", json!({"hwnd": hwnd, "reason": why}), 15);+} /// `_open_os_window_extension_free`: the user's REAL browser profile, no extension required. fn open_os_window_extension_free(ctx: &Ctx, url: &str, profile: Option<&str>) -> Value {     let profile = profile.map(str::to_string).or_else(crate::signin::remembered_signin_profile_pub);@@ -98,12 +105,29 @@ fn open_os_window_extension_free(ctx: &Ctx, url: &str, profile: Option<&str>) ->         // on either monitor (arav-rog, 2026-09-20). Open it visible and pull it onto the primary.         a["background"] = json!(false);         r = ab_call(ctx, "nbrowser_open_os_window", a.clone(), 60);-        if let Some(h) = r["hwnd"].as_i64() { let _ = ab_call(ctx, "desktop_set_window_bounds", json!({"hwnd": h, "x": 80, "y": 60, "w": 1200, "h": 900, "reason": "the Autodesk consent page needs the user to click in it, so it has to be on screen"}), 15); }+    }+    // Whichever path opened it, ab parks the window off-screen (-32000) and may return no hwnd+    // (1.10.32 proved both). Find it and decide: a page titled "Sign in" wants CREDENTIALS, which+    // only the person at the machine may type, so it must be visible. With no extension nobody can+    // drive even the Allow click, so that window is surfaced too. A warm session under the+    // extension stays in the background, where the AI finishes it.+    for _ in 0..10 {+        std::thread::sleep(Duration::from_millis(1000));+        let lw = ab_call(ctx, "desktop_list_windows", json!({}), 15);+        let rows = lw["windows"].as_array().or_else(|| lw["data"]["windows"].as_array()).cloned().unwrap_or_default();+        let hit = rows.iter().find(|w| {+            let img = w["image"].as_str().unwrap_or("").to_ascii_lowercase();+            let t = w["title"].as_str().unwrap_or("");+            (img == "chrome.exe" || img == "msedge.exe" || img == "firefox.exe" || img == "brave.exe")+                && t.contains("Autodesk") && (!owned || t.contains("Sign in"))+                && w["rect"]["left"].as_i64().unwrap_or(0) <= -30000+        }).and_then(|w| w["hwnd"].as_i64());+        if let Some(h) = hit { surface_consent_window(ctx, h); r["hwnd"] = json!(h); r["surfaced"] = json!(true); break; }     }     if !r["_adCallError"].is_null() { return json!({"launched": false, "profile": profile, "error": r["_adCallError"]}); }     let launched = r["ok"].as_bool() == Some(true) || !r["hwnd"].is_null() || !r["sessionId"].is_null() || r["_hint"].as_str().unwrap_or("").contains("Launch fired");     if launched { crate::signin::track_signin_window(&sess, profile.as_deref().unwrap_or(""), "aps"); }-    json!({"launched": launched, "agentOwned": owned, "where": r["displayName"].as_str().or(r["profile"].as_str()).map(str::to_string).or(profile.clone()), "profile": r["profile"].as_str().map(str::to_string).or(profile), "hwnd": r["hwnd"], "extensionInstalled": r["extensionInstalled"],+    json!({"launched": launched, "agentOwned": owned, "surfaced": r["surfaced"].as_bool().unwrap_or(false), "where": r["displayName"].as_str().or(r["profile"].as_str()).map(str::to_string).or(profile.clone()), "profile": r["profile"].as_str().map(str::to_string).or(profile), "hwnd": r["hwnd"], "extensionInstalled": r["extensionInstalled"],         "error": if launched { Value::Null } else { json!(r["error"].as_str().or(r["_hint"].as_str()).unwrap_or("").chars().take(200).collect::<String>()) }}) } fn abe_state(ctx: &Ctx) -> Value {

@@ -24,7 +24,7 @@ adom-bridge --target <box> fusion_aps_status '{}'  # poll until signedIn:true  - The wiki read uses YOUR wiki token inside the container. The desktop box never needs a wiki token. - Sign-in opens a browser window on the box. With a warm Autodesk session it completes by itself. Otherwise the person signs in there: never type their password or 2FA code for them.-- Since 1.10.32 a consent window that needs a human is opened VISIBLE on the primary monitor. On older bridges it could be parked off-screen at -32000: `desktop_list_windows`, find "Sign in - Autodesk", then `desktop_set_window_bounds {hwnd,x,y,w,h}` and `desktop_bring_to_front {hwnd, reason}`.+- Since 1.10.33 the bridge finds a sign-in window that needs a human and puts it on the primary monitor, in front. On older bridges it could be parked off-screen at -32000: `desktop_list_windows`, find "Sign in - Autodesk", then `desktop_set_window_bounds {hwnd,x,y,w,h}` and `desktop_bring_to_front {hwnd, reason}`. - Whose Autodesk login? The same account Fusion uses on that box is the natural choice: search then sees exactly what that person sees in Fusion.  **Never** read another machine's `~/.adom/fusion-aps/config.json` to find the ID. It looks like credential hunting, permission systems block it, and the wiki page exists so you do not have to.