Fusion - the Fusion 360 Bridge

@@ -198,6 +198,43 @@ def _resolve_seat_dialog(max_clicks: int = 8) -> dict:     return {"sawDialog": saw, "clicks": clicks, "verified": verified}  +def _handle_notify_owner(args: dict) -> dict:+    """LAST-RESORT: toast the user's MAIN desktop (cross-AD) to ask for a human step.++    John's standing rule (2026-07-07): the bridge/AI does EVERYTHING itself; the only+    legitimate uses are true human walls - password/2FA entry, UAC elevation, a physical+    action. When this bridge runs on an unattended VM, the toast must reach the machine+    the user is actually AT - ad_client.notify(reach_user=True) fans out to all peer ADs+    on the relay, so it lands on their main computer too. Returns which targets were hit."""+    title = args.get("title") or "Fusion bridge needs you"+    body = args.get("body") or args.get("message") or "A human step is required to continue."+    level = args.get("level") or "warning"+    if not ad_client.available():+        return {+            "success": False,+            "error": "AD direct API unavailable - cannot send a toast from the bridge.",+            "notifyUser": {"title": title, "body": body, "level": level},+            "_hint": ("Relay the included notifyUser payload yourself via AD's notify_user verb "+                      "(add a cross-AD `target` if this bridge runs on a VM and the user is elsewhere)."),+        }+    peers = []+    try:+        peers = ad_client.peers()+    except Exception:+        pass+    res = ad_client.notify(title, body, level=level, reach_user=True)+    ok = bool(res and (res.get("success") or res.get("status") == "ok"))+    return {+        "success": ok,+        "targets": (["self"] + peers) if peers else ["self"],+        "_hint": ("Toast sent" + (" to this machine AND all peer ADs (user may be on another computer)."+                  if peers else " to this machine (no peer ADs on the relay).")+                  + " This is the LAST RESORT - only use after exhausting programmatic options "+                  "(UIA background clicks, seat auto-resolve, warm-SSO sign-in). Now WAIT and poll "+                  "fusion_readiness for the state to clear; do not re-toast within a few minutes."),+    }++ def _handle_launch(fusion_info: dict, args: dict) -> dict:     """Launch Fusion 360 and optionally wait for the AdomBridge add-in."""     # LIVE detect (not the stale bridge-start fusion_info snapshot) so a launch right@@ -320,7 +357,10 @@ def _handle_launch(fusion_info: dict, args: dict) -> dict:                 "NOT a failure and NOT a retry-able timeout: do NOT re-call fusion_start. WHAT HAPPENS "                 "NEXT: POLL fusion_readiness every ~10s; it returns needsSignin/licensingDialog/updating "                 "if something is mid-flight (the bridge handles the seat dialog itself), and ready:true "-                "when it is drivable - then run your fusion_* verbs."+                "when it is drivable - then run your fusion_* verbs. NEVER poll blind past ~2 min: "+                "desktop_screenshot_window the Fusion hwnd and READ the response's screenshots[] array "+                "- every OWNED POPUP rides back as its own child shot (this is how you SEE a blocking "+                "dialog; never desktop_screenshot_screen, the user is doing other things)."             ),         } @@ -980,11 +1020,13 @@ def _handle_fusion_readiness(fusion_info: dict, args: dict) -> dict:     elif needs_signin:         hint = ("Fusion is RUNNING but stuck at the first-run Autodesk SIGN-IN (main UI blocked, "                 "add-in cannot serve) - NOT ready. AUTOMATE the sign-in (see the fusion-onboarding "-                "skill for the proven sequence: clear stale signin.autodesk.com tabs, 'Retry browser "-                "sign-in', click 'Open Product' via desktop_click/isTrusted, tick 'Always allow' + "-                "'Open' on the protocol overlay), then poll until ready:true. NEVER enter the "-                "password/2FA; to ask the user, notify_user works directly (add a cross-AD `target` "-                "if you're on a VM).")+                "skill for the proven sequence: desktop_screenshot_window the Fusion hwnd and READ "+                "its screenshots[] array - owned popups ride back as child shots; UIA-click 'Sign In', "+                "'Continue with Google' (warm SSO), then isTrusted-click 'Open Product' + 'Always "+                "allow'+'Open' on the protocol overlay), then poll until ready:true. NEVER enter the "+                "password/2FA yourself; if the flow truly needs the user (password/2FA prompt), call "+                "fusion_notify_owner {title, body} - it toasts their MAIN computer cross-AD. Last "+                "resort only.")     elif ready and stale_info.get("addinStale"):         hint = stale_info["_staleHint"]     elif ready:@@ -1227,6 +1269,12 @@ COMMAND_HANDLERS = {             "_hint": "No Fusion dialogs/owned popups are currently up."}     ),     "addin_status": lambda fi, args: _handle_addin_status(),+    # LAST-RESORT human escalation (John 2026-07-07): when the bridge is truly blocked+    # on the user (password/2FA, UAC), send an AD toast that reaches their MAIN machine+    # (reach_user=True fans out to peer ADs, so a bridge running on an unattended VM+    # still lands the toast where the user actually is). ALWAYS exhaust programmatic+    # options first - this exists so the AI has ONE deterministic call when it must ask.+    "notify_owner": lambda fi, args: _handle_notify_owner(args),     # APS cloud search (pure HTTPS, works with Fusion closed). Lives in     # COMMAND_HANDLERS so it returns BEFORE any Fusion-running gate.     "aps_status": lambda fi, args: aps.handle_status(args),@@ -1721,18 +1769,45 @@ def _orchestrate_open_lbr(args: dict) -> dict:     file_path = file_path.replace("\\", "/")     results = [] -    # Step 1: Open the .lbr via Document.newDesignFromLocal+    # Step 1: Open the .lbr via Document.newDesignFromLocal.+    # ⚠️ TIMEOUT + VERIFY-BY-STATE (fixed 2026-07-07, caught live on a GPU-less Azure+    # VM): the open can take 60s+ on slow/software-rendered machines, so a fixed 30s+    # read timeout expired mid-open and the canned proxy error claimed the ADD-IN was+    # "not running" while the document was actually opening fine (fusion_build_library_3d+    # then aborted all parts on a lie). Now: a generous timeout, AND on ANY failure we+    # poll get_app_state for the expected document name - the doc actually being open+    # outranks whatever the synchronous return claimed.     open_result = _proxy_to_addin("execute_text_command", {         "command": f"Document.newDesignFromLocal {file_path}",-    }, timeout=30)+    }, timeout=120)      if not open_result.get("success"):-        return {-            "success": False,-            "error": f"Document.newDesignFromLocal failed: {open_result.get('error', 'unknown')}",-            "data": {"filePath": file_path},-        }-    results.append("Document.newDesignFromLocal: ok")+        # Verify by STATE before failing: did the doc open anyway?+        expected = file_path.replace("\\", "/").rsplit("/", 1)[-1]+        expected = expected.rsplit(".", 1)[0].lower()+        opened_anyway = False+        for _ in range(20):  # up to ~60s of settling+            time.sleep(3)+            try:+                st = _proxy_to_addin("get_app_state", {}, timeout=8)+                active = str((st.get("data") or {}).get("activeDocument", "")).lower()+                if expected and expected in active:+                    opened_anyway = True+                    break+            except Exception:+                pass+        if not opened_anyway:+            return {+                "success": False,+                "error": f"Document.newDesignFromLocal failed: {open_result.get('error', 'unknown')}",+                "_hint": ("The open did not complete AND the document never became active. On slow/"+                          "software-rendered machines opens can take 60s+; this call already waited + "+                          "verified by state. Check fusion_check_dialogs for a blocking modal, then retry."),+                "data": {"filePath": file_path},+            }+        results.append("Document.newDesignFromLocal: ok (verified by app state after slow open)")+    else:+        results.append("Document.newDesignFromLocal: ok")      # Step 2: Navigate to symbol if requested     if symbol_name: