@m13v/s4l 1.6.203 → 1.6.204-rc.10

package/mcp/dist/index.js

@@ -42,13 +42,15 @@ const REVIEW_QUEUE_ID = "review-queue";
 // ---- Queue-backed drafting (2026-06-23) -----------------------------------
 // Customer .mcpb boxes have no `claude` CLI, so the deterministic pipeline can't
 // run its `claude -p` steps directly. Instead a launchd job kicks the REAL
-// pipeline (run-twitter-cycle.sh in DRAFT_ONLY mode with S4L_CLAUDE_PROVIDER=
-// queue); each `claude -p` call enqueues onto scripts/claude_job.py's file queue
-// and blocks. Two Claude Desktop scheduled tasks — one per job type — drain that
-// queue, run the pipeline's own prompt as a Claude turn, and write the result
-// back, unblocking the cycle. This reuses the entire pipeline (styles, voice,
+// pipeline (run-twitter-cycle.sh in DRAFT_ONLY mode); its `claude -p` steps
+// carry queue-mapped script tags, so run_claude.sh routes each one onto
+// scripts/claude_job.py's file queue and blocks (routing is by tag via
+// claude_job.py TAG_TO_TYPE — the S4L_CLAUDE_PROVIDER env var was removed
+// 2026-07-06). Claude Desktop scheduled tasks drain that queue, run the
+// pipeline's own prompt as a Claude turn, and write the result back,
+// unblocking the cycle. This reuses the entire pipeline (styles, voice,
 // top-performers, em-dash rules). See scripts/claude_job.py + run_claude.sh's
-// provider seam.
+// routing seam.
 // Universal type-blind queue worker (2026-07-02): ONE scheduled task drains
 // EVERY job type (`claude_job.py next --type any`). Per-type execution notes
 // ride in the job's prompt sidecar (claude_job.py TYPE_TO_WORKER_NOTES), so
@@ -169,7 +171,7 @@ function plistXml(opts) {
     const chromeEnv = chrome
         ? `\n\t\t<key>BH_CHROME_BIN</key>\n\t\t<string>${chrome}</string>`
         : "";
-    // Caller-supplied env (e.g. the queue kicker's DRAFT_ONLY / S4L_CLAUDE_PROVIDER).
+    // Caller-supplied env (e.g. the queue kicker's DRAFT_ONLY).
     // Rendered after the baked-in vars so a caller can also override S4L_STATE_DIR.
     const extraEnv = opts.extraEnv
         ? Object.entries(opts.extraEnv)
@@ -336,8 +338,11 @@ const server = new McpServer({
         "onboarding does NOT need to wait for or verify a draft. Steps, in order: " +
         "(1) call `queue_setup` — it pre-writes the worker task prompt and returns the task spec " +
         "(s4l-worker, the universal queue worker); " +
-        "(2) for EACH returned spec, call the HOST tool `create_scheduled_task` with its taskId, cronExpression, and " +
-        "prompt VERBATIM (if it says the task already exists, that's fine — move on, do not recreate); " +
+        "(2) for EACH returned spec, call the HOST tool `create_scheduled_task` with its taskId, cronExpression, " +
+        "prompt, and notifyOnCompletion VERBATIM — notifyOnCompletion MUST be false, or the per-minute worker " +
+        "pops a 'no jobs' notification every run (if it says the task already exists, that's fine — do not " +
+        "recreate, but DO call `update_scheduled_task` with the same taskId and notifyOnCompletion:false to " +
+        "silence an older install's per-run notifications, then move on); " +
         "(3) the launchd kicker + scheduled tasks now run the pipeline on their own — call the `dashboard` " +
         "tool to confirm the schedule is firing (schedule_state 'ok'), then summarize. Do NOT create the " +
         "old 'social-autoposter-autopilot' task — it is deprecated. Do NOT ask the user to review drafts " +
@@ -861,6 +866,38 @@ async function ensureTwitterBrowserForPost() {
     });
 }
 async function postApproved(batchId, plan) {
+    // Drain serialization (2026-07-06 incident). Every call drains the WHOLE
+    // approved backlog, so overlapping drains are pure waste and actively harmful:
+    // a Claude restart mid-drain at 00:25Z left 10 landed replies unstamped, then
+    // restart recovery + per-approval calls launched 8 concurrent approved=14
+    // drains that re-attempted already-replied threads, fought over the browser
+    // lock, and clobbered each other's posted stamps. Wait for any in-flight drain
+    // (ours via `postingActive`, a sibling MCP's via the posting flag on disk)
+    // instead of stacking a new one. 8-minute cap: comfortably above a normal
+    // drain, comfortably below the menu bar's 900s loopback timeout so a waiting
+    // call still returns to its caller. After a wait, RE-READ the plan so the
+    // peer's posted/terminal stamps shrink our backlog before we attempt anything.
+    {
+        const gateDeadline = Date.now() + 8 * 60_000;
+        let waited = false;
+        while ((postingActive || isPeerDrainActive()) && Date.now() < gateDeadline) {
+            waited = true;
+            await sleepMs(5000);
+        }
+        if (postingActive || isPeerDrainActive()) {
+            return {
+                attempted: 0,
+                exit_code: 0,
+                summary: "another posting drain has been running for 8+ minutes; approved cards stay " +
+                    "queued in the review store — re-run post_drafts once it finishes",
+            };
+        }
+        if (waited) {
+            const fresh = readPlan(batchId);
+            if (fresh)
+                plan = fresh;
+        }
+    }
     // Post every card the user APPROVED that hasn't already landed or been ruled out.
     // `approved` is now a DURABLE decision (sticky, never cleared by a later call), so
     // filtering out posted/terminal here makes this idempotent: re-running it only
@@ -1063,10 +1100,52 @@ async function postApproved(batchId, plan) {
     }
     if (touchedPlan) {
         try {
-            writePlan(batchId, plan);
+            // Merge our stamps into a FRESH read of the store instead of rewriting the
+            // whole plan from the copy we took minutes ago. The old whole-file write
+            // was last-writer-wins: while this batch posted, the menubar (decision
+            // re-stamps) and any peer drain also wrote the store, and whichever run
+            // finished last erased the others' posted flags (2026-07-06: card 344877
+            // posted at 00:29Z ended `posted=None, terminal=duplicate_thread_pre_post`
+            // after a later run's stale write). Merge rules: `posted` is sticky and
+            // wins over terminal; `terminal` never overwrites a fresh `posted=true`.
+            // Fallback: candidates without a candidate_id can't be matched into the
+            // fresh copy, so keep the legacy whole-plan write for those older plans.
+            const mergeable = approved.every((c) => c.candidate_id !== undefined && c.candidate_id !== null);
+            const fresh = mergeable ? readPlan(batchId) : null;
+            if (fresh && Array.isArray(fresh.candidates)) {
+                const freshById = new Map();
+                fresh.candidates.forEach((c) => {
+                    if (c.candidate_id !== undefined && c.candidate_id !== null)
+                        freshById.set(String(c.candidate_id), c);
+                });
+                for (const c of approved) {
+                    const f = freshById.get(String(c.candidate_id));
+                    if (!f)
+                        continue;
+                    if (c.posted === true) {
+                        f.posted = true;
+                        f.terminal = false;
+                        if (c.our_url)
+                            f.our_url = c.our_url;
+                    }
+                    else if (c.terminal === true && f.posted !== true) {
+                        f.terminal = true;
+                        f.terminal_reason = c.terminal_reason;
+                    }
+                }
+                writePlan(batchId, fresh);
+            }
+            else {
+                writePlan(batchId, plan);
+            }
         }
         catch {
-            /* best effort */
+            try {
+                writePlan(batchId, plan);
+            }
+            catch {
+                /* best effort */
+            }
         }
     }
     // Post failures are HANDLED in the pipeline (it returns a count, never throws),
@@ -1241,7 +1320,8 @@ async function seedSearchQueriesForProject(project, rawQueries) {
 tool("engagement_mode", {
     title: "Choose engagement lanes (personal brand + optional product promotion)",
     description: "Set or read the engagement LANES the autopilot drafts in. There are TWO independent lanes that " +
-        "can BOTH be on (the cycle then splits 50/50): PERSONAL BRAND (organic, link-free engagement in " +
+        "can BOTH be on (the cycle then splits per the configurable lane split, default 50/50 — see " +
+        "action:'split'): PERSONAL BRAND (organic, link-free engagement in " +
         "the user's own voice — ON by default) and PRODUCT PROMOTION (the marketing pipeline, link " +
         "replies — OFF by default, opt-in). This is a SETUP step: AFTER X is connected, the profile " +
         "is scanned (for VOICE), and the user has answered the DICTATION interview (for TOPICS + corpus), " +
@@ -1256,9 +1336,9 @@ tool("engagement_mode", {
         "project_config afterward. The user flips either lane any time from the menu-bar checkmarks.",
     inputSchema: {
         action: z
-            .enum(["get", "set", "toggle"])
+            .enum(["get", "set", "toggle", "split"])
             .optional()
-            .describe("get = read current lane flags + persona status. set = record the user's chosen lanes (provisions the persona). toggle = lightweight flip of ONE lane (pass `lane`); mode.json only, no persona work — the dashboard/menu-bar quick toggle."),
+            .describe("get = read current lane flags + persona status + lane split. set = record the user's chosen lanes (provisions the persona). toggle = lightweight flip of ONE lane (pass `lane`); mode.json only, no persona work — the dashboard/menu-bar quick toggle. split = set the personal-brand share of both-lanes-on cycles (pass `split`); mode.json only — the dashboard slider."),
         personal_brand: z
             .boolean()
             .optional()
@@ -1271,6 +1351,12 @@ tool("engagement_mode", {
             .enum(["personal_brand", "promotion"])
             .optional()
             .describe("action:'toggle' — which single lane to flip."),
+        split: z
+            .union([z.number(), z.string()])
+            .optional()
+            .describe("action:'split' (or alongside action:'set') — the personal-brand SHARE of cycles when both " +
+            "lanes are on: 0.7, 70, or '70%' all mean 70% personal brand / 30% promotion. Clamped to " +
+            "0..1; ignored while only one lane is on (single-lane states run that lane every cycle)."),
         mode: z
             .enum(["personal_brand", "promotion"])
             .optional()
@@ -1320,11 +1406,47 @@ tool("engagement_mode", {
             return { personal_brand: true, promotion: false };
         }
     };
+    const readSplit = async () => {
+        const r = await runPython("scripts/s4l_mode.py", ["split"], { timeoutMs: 15_000 });
+        try {
+            const v = Number(JSON.parse((r.stdout || "").trim()).personal_brand_share);
+            return Number.isFinite(v) ? v : 0.5;
+        }
+        catch {
+            return 0.5;
+        }
+    };
     if (action === "get") {
         const flags = await readFlags();
         const persona = findPersonaProject();
         const mode = flags.personal_brand ? "personal_brand" : "promotion";
-        return jsonContent({ flags, mode, persona: persona ? persona.name : null });
+        return jsonContent({
+            flags,
+            mode,
+            personal_brand_share: await readSplit(),
+            persona: persona ? persona.name : null,
+        });
+    }
+    // Set the both-lanes-on split (the dashboard slider): just rewrite
+    // mode.json via s4l_mode.py — NO persona provisioning, same weight class
+    // as action:'toggle'.
+    if (action === "split") {
+        if (args.split === undefined || args.split === null || args.split === "") {
+            return jsonContent({ personal_brand_share: await readSplit() });
+        }
+        const res = await runPython("scripts/s4l_mode.py", ["split", String(args.split)], {
+            timeoutMs: 15_000,
+        });
+        if (res.code !== 0) {
+            const tail = (res.stderr || res.stdout).trim().split("\n").slice(-1)[0] || "unknown error";
+            return textContent(`Could not set the lane split: ${tail}`);
+        }
+        try {
+            return jsonContent(JSON.parse((res.stdout || "").trim()));
+        }
+        catch {
+            return jsonContent({ personal_brand_share: await readSplit() });
+        }
     }
     // Lightweight flip of ONE lane (the dashboard/menu-bar quick toggle): just
     // rewrite mode.json via s4l_mode.py — NO persona provisioning. Mirrors the
@@ -1357,7 +1479,7 @@ tool("engagement_mode", {
     }
     if (!personalBrand && !promotion) {
         return textContent("At least one lane must be on. personal_brand is the default; set promotion:true if the user " +
-            "also wants product promotion (both on -> the cycle splits 50/50).");
+            "also wants product promotion (both on -> the cycle splits per the lane split, default 50/50).");
     }
     const mode = personalBrand ? "personal_brand" : "promotion";
     recordOnboardingAttempt("mode_chosen", { personal_brand: personalBrand, promotion });
@@ -1367,6 +1489,11 @@ tool("engagement_mode", {
         blockOnboardingMilestone("mode_chosen", "mode_set_failed", tail, { personal_brand: personalBrand, promotion });
         return textContent(`Couldn't save the engagement lanes: ${tail}`);
     }
+    // Optional lane split rider on 'set' (best-effort: the lanes are saved
+    // either way, and the split keeps its previous/default value on failure).
+    if (args.split !== undefined && args.split !== null && args.split !== "") {
+        await runPython("scripts/s4l_mode.py", ["split", String(args.split)], { timeoutMs: 15_000 });
+    }
     // NOTE (2026-07-06): the draft-only flag (mode.json {"draft_only": false} —
     // promotion cycles POST autonomously instead of drafting cards) is
     // DELIBERATELY NOT exposed on this tool or any user surface. It is an
@@ -1449,7 +1576,8 @@ tool("engagement_mode", {
     const bothOn = personalBrand && promotion;
     const next_step = promotion
         ? (bothOn
-            ? "Personal brand + product promotion are BOTH on (the cycle splits 50/50), and the persona " +
+            ? "Personal brand + product promotion are BOTH on (the cycle splits per the lane split, " +
+                "default 50/50 — adjustable via action:'split' or the dashboard slider), and the persona " +
                 "is provisioned + topic-seeded. "
             : "Product promotion is on and the persona is provisioned. ") +
             "NOW CONTINUE SETUP: configure the product project with project_config (research the product " +
@@ -1458,8 +1586,10 @@ tool("engagement_mode", {
             ? `Personal-brand lane is on (the default); the persona is provisioned, topic-seeded, and ${personaQueryCount} search quer${personaQueryCount === 1 ? "y" : "ies"} seeded, so there `
             : "Personal-brand lane is on (the default); the persona is provisioned + topic-seeded (but NO search_queries were supplied, so it will run one topic-as-query at a time — re-call engagement_mode action:'set' with a search_queries array of ~30 X search strings expanded from the persona topics to fan out). There ") +
             "is nothing more to configure (no product project is needed). NOW SCHEDULE THE AUTOPILOT: call " +
-            "queue_setup and create each returned task with create_scheduled_task (prompt verbatim; " +
-            "'already exists' is fine), then call the dashboard tool to confirm the schedule is firing. " +
+            "queue_setup and create each returned task with create_scheduled_task (prompt and " +
+            "notifyOnCompletion verbatim — notifyOnCompletion must be false; 'already exists' is fine, but then " +
+            "call update_scheduled_task with notifyOnCompletion:false to silence per-run notifications), " +
+            "then call the dashboard tool to confirm the schedule is firing. " +
             "That is the final setup step — do NOT stop before the autopilot is scheduled.";
     return jsonContent({
         ok: true,
@@ -1747,9 +1877,12 @@ tool("project_config", {
                 "a phrase bank + things they avoid, and their icp. The scan is BACKWARD-LOOKING (only what " +
                 "they already posted) so it is the source for VOICE, not the primary source for topics. " +
                 "SECOND (the DICTATION interview — this is where TOPICS + grounding corpus come from, do NOT " +
-                "skip it and do NOT infer topics from the scan alone): tell the user to answer ALL of the " +
+                "skip it and do NOT infer topics from the scan alone): invite the user to answer the " +
                 "following in ONE spoken dictation (the Claude input box already supports dictation, so they " +
-                "just talk once and you split the answers into fields). Ask verbatim, as a single numbered " +
+                "just talk once and you split the answers into fields). KEEP THE FRAMING CHILL: this is a " +
+                "casual brain-dump, not a form. No pressure; they can answer as much or as little as they " +
+                "like, skip anything, and come back to the rest whenever they feel like it. Preface the list " +
+                "with one short low-key line saying exactly that, then ask verbatim, as a single numbered " +
                 "list:\n" +
                 "  1. Who are you, and what do you want to be known for? (-> description)\n" +
                 "  2. What subjects could you talk about for an hour, work and non-work? (-> search_topics: " +
@@ -1768,12 +1901,15 @@ tool("project_config", {
                 "Then SYNTHESIZE the fields from their dictation: search_topics comes PRIMARILY from answer 2 " +
                 "(fold in recurring scan themes only as reinforcement); description/content_angle/voice from " +
                 "the rest. Keep their RAW transcript VERBATIM as content_corpus (do NOT paraphrase; their " +
-                "actual numbers, opinions, and phrasing are what make drafts sound like them). If the user " +
-                "declines or gives nothing usable, fall back to scan-derived topics. " +
+                "actual numbers, opinions, and phrasing are what make drafts sound like them). If they " +
+                "answer only some questions, take what they gave, continue without nagging, and mention once " +
+                "that they can answer the rest any time later to make drafts sound more like them. If the " +
+                "user declines or gives nothing usable, fall back to scan-derived topics. " +
                 "THIRD (engagement lanes — ASK THE USER, do not infer): the PERSONAL BRAND lane (organic, " +
                 "link-free engagement in their own voice) is ON by default, so ask the ONE question — do they " +
                 "ALSO want to PROMOTE a PRODUCT (the marketing lane, link replies)? Both lanes can run (the " +
-                "cycle splits 50/50). Call the `engagement_mode` tool action:'set' with personal_brand:true, " +
+                "cycle splits per the configurable lane split, default 50/50). Call the `engagement_mode` tool " +
+                "action:'set' with personal_brand:true, " +
                 "promotion:true|false AND the voice/description/search_topics you synthesized PLUS the raw " +
                 "dictation transcript as content_corpus (this provisions the persona and seeds topics). Only " +
                 "NOW are topics seeded — postponed until the dictation is in. " +
@@ -1812,6 +1948,7 @@ tool("project_config", {
             update_available: !!snap.update_available,
             mode: snap.mode,
             flags: snap.flags,
+            personal_brand_share: snap.personal_brand_share,
             update_hint: snap.update_available
                 ? `A newer version (${snap.latest_version}) is available — you're on ${snap.version}. ` +
                     `Tell the user and offer to run the \`runtime\` tool with action:'update' ` +
@@ -1829,7 +1966,7 @@ tool("project_config", {
                         (xConnected ? "" : " X is not connected yet either — detect_x_sources, warn about keychain prompts, then run connect_x with confirm:true without a separate permission turn.")
                     : projects.every((p) => p.ready)
                         ? (xConnected
-                            ? "All configured projects are ready and X is connected. SCHEDULE THE AUTOPILOT: (1) call queue_setup and create each returned task with create_scheduled_task (prompt verbatim; 'already exists' is fine); (2) the autopilot then runs on its own (launchd kicker + queue worker). Call the `dashboard` tool to confirm the schedule is firing (schedule_state 'ok') — that is the terminal step; do NOT wait for or verify a draft card. Do NOT pause to ask the user to review drafts."
+                            ? "All configured projects are ready and X is connected. SCHEDULE THE AUTOPILOT: (1) call queue_setup and create each returned task with create_scheduled_task (prompt and notifyOnCompletion verbatim — notifyOnCompletion must be false; 'already exists' is fine, but then call update_scheduled_task with notifyOnCompletion:false to silence per-run notifications); (2) the autopilot then runs on its own (launchd kicker + queue worker). Call the `dashboard` tool to confirm the schedule is firing (schedule_state 'ok') — that is the terminal step; do NOT wait for or verify a draft card. Do NOT pause to ask the user to review drafts."
                             : "All configured projects are ready, but X is NOT connected — posting needs a logged-in " +
                                 "x.com session. Detect sources and run project_config action:'connect_x', confirm:true; do not ask whether to proceed.")
                         : "Some projects are missing required fields (see each project's missing_required). Derive them from config, context, profile_scan, and website research, then call project_config again. Ask only if a required field is genuinely unknowable." +
@@ -1952,7 +2089,8 @@ tool("project_config", {
                     ? `Project '${result.project}' is fully configured.${seedNote} Next: if X is not connected, ` +
                         `detect sources, warn about keychain prompts, and call project_config with ` +
                         `action:'connect_x', confirm:true immediately. Once X is connected, schedule the autopilot ` +
-                        `(queue_setup + create_scheduled_task per task); the autopilot then drafts on its own. Call the ` +
+                        `(queue_setup + create_scheduled_task per task, passing each spec's fields verbatim including ` +
+                        `notifyOnCompletion:false); the autopilot then drafts on its own. Call the ` +
                         `dashboard to confirm the schedule is firing (schedule_state 'ok') — that is the final step, ` +
                         `no need to wait for or verify a draft card.`
                     : `Saved what you provided for '${result.project}'. Still need: ${result.missing_required.join(", ")}. ` +
@@ -2348,8 +2486,9 @@ tool("queue_setup", {
     title: "Get autopilot scheduled-task specs",
     description: "Returns the scheduled task that runs the hands-free draft autopilot on this machine " +
         "(s4l-worker, the universal queue worker). For EACH returned task, call the host tool " +
-        "create_scheduled_task with its taskId, cronExpression, and prompt VERBATIM (do not edit the " +
-        "prompt — it contains exact local paths). The task drains the local job queue that the " +
+        "create_scheduled_task with its taskId, cronExpression, prompt, and notifyOnCompletion " +
+        "VERBATIM (do not edit the prompt — it contains exact local paths; notifyOnCompletion MUST be " +
+        "false or the per-minute worker spams a notification every run). The task drains the local job queue that the " +
         "real pipeline feeds (all job types); the pipeline itself is kicked by launchd jobs this server " +
         "installs. Use this as the final onboarding step instead of the old per-type worker tasks.",
     inputSchema: {},
@@ -2394,6 +2533,11 @@ tool("queue_setup", {
         cronExpression: "* * * * *",
         folder: workerFolder,
         prompt: queueWorkerBody(spec),
+        // The host defaults notifyOnCompletion to TRUE, which fires a Notification
+        // Center toast after EVERY run — for a per-minute worker whose normal
+        // report is "no jobs", that's up to 60 "couldn't find anything" popups an
+        // hour. A customer disabled the autopilot over exactly this (2026-07-06).
+        notifyOnCompletion: false,
     }));
     return jsonContent({
         tasks,
@@ -2410,11 +2554,15 @@ tool("queue_setup", {
             "- One helper job (s4l-worker) runs every minute to drain the background work queue. Leave it enabled; it only drafts, it never posts.",
             "- You can edit your voice, topics, or the drafts themselves at any time, and check status on the dashboard.",
         ],
-        next_step: "For EACH task, call the host tool create_scheduled_task (taskId, cronExpression, prompt " +
-            "verbatim) to register its schedule — the prompt file is already written, so creating it just " +
-            "wires up the cron. If create_scheduled_task reports a task already exists, that is FINE — the " +
-            "schedule is registered and the prompt is current; do NOT delete/recreate, do NOT investigate, " +
-            "just move on. It fires every minute and only drafts — it never posts. The pipeline that feeds " +
+        next_step: "For EACH task, call the host tool create_scheduled_task (taskId, cronExpression, prompt, " +
+            "notifyOnCompletion verbatim) to register its schedule — the prompt file is already written, so creating it just " +
+            "wires up the cron. notifyOnCompletion:false is REQUIRED: the host default is true, and a " +
+            "per-minute worker whose normal result is 'no jobs' would otherwise pop a notification every " +
+            "run. If create_scheduled_task reports a task already exists, that is FINE — the " +
+            "schedule is registered and the prompt is current; do NOT delete/recreate, do NOT investigate — " +
+            "but DO silence its run notifications once: call the host tool update_scheduled_task with the " +
+            "same taskId and notifyOnCompletion:false (existing installs were created before this default " +
+            "was overridden), then move on. It fires every minute and only drafts — it never posts. The pipeline that feeds " +
             "it runs from launchd jobs this server installs. Do NOT create the old " +
             "'social-autoposter-autopilot' task; it is deprecated. If the older per-type tasks " +
             "(saps-phase1-query / saps-phase2b-draft) exist from a previous version, LEAVE them — they are " +
@@ -2936,8 +3084,9 @@ function ensureCoworkMcpRegistered() {
 // ---- launchd kicker: run the REAL pipeline in queue mode ---------------------
 // Reinstates com.m13v.social-twitter-cycle as the customer-box kicker. It runs
 // run-twitter-cycle.sh straight through (scan -> score -> draft -> link-gen); its
-// `claude -p` steps route through the job queue (S4L_CLAUDE_PROVIDER=queue) for
-// the scheduled-task workers to service. The per-cycle DRAFT_ONLY value is NOT
+// `claude -p` steps carry queue-mapped tags, so run_claude.sh routes them through
+// the job queue (claude_job.py TAG_TO_TYPE) for the scheduled-task workers to
+// service. The per-cycle DRAFT_ONLY value is NOT
 // baked here anymore: run-draft-and-publish.sh decides it from mode.json
 // (draft-only flag, 2026-07-06) — while draft-only is ON (default) cycles stop
 // before posting and merge into review cards; with draft-only OFF (operator
@@ -2951,7 +3100,8 @@ const QUEUE_KICKER_INTERVAL_SECS = 60;
 function kickerEnv() {
     return {
         DRAFT_ONLY: "1",
-        S4L_CLAUDE_PROVIDER: "queue",
+        // S4L_CLAUDE_PROVIDER is gone (2026-07-06): queue routing is by script tag
+        // (claude_job.py TAG_TO_TYPE), so the plist carries no routing switch.
         S4L_STATE_DIR: s4lStateDir(),
         TWITTER_PAGE_GEN_RATE: "0",
         // Thread-media context for the drafter (2026-07-06): parity with the
@@ -3722,6 +3872,22 @@ function isPostingFlagFresh() {
         return false;
     }
 }
+// True when a DIFFERENT process holds a fresh posting flag — i.e. a sibling MCP
+// instance is mid-drain. Our own fresh flag doesn't count: same-process
+// re-entrancy is covered by the in-memory `postingActive`, and a leftover flag
+// from our own earlier drain (a crash before the finally cleared it) must not
+// deadlock us against ourselves.
+function isPeerDrainActive() {
+    try {
+        const j = JSON.parse(fs.readFileSync(postingFlagPath(), "utf-8"));
+        if (typeof j?.expires_at !== "number" || j.expires_at <= Date.now())
+            return false;
+        return typeof j?.pid === "number" && j.pid !== process.pid;
+    }
+    catch {
+        return false;
+    }
+}
 // activity.json: a tiny "what's running right now" signal the menu bar reads to
 // show a loading spinner + label (scanning / drafting / posting / …). Written by
 // long-running tools, cleared when they finish. Best-effort; absence == idle.