@m13v/s4l 1.7.1-rc.3 → 1.7.1-rc.4

package/mcp/dist/index.js

@@ -1835,6 +1835,18 @@ tool("project_config", {
             // as expected. Once connect_x succeeds, run the full phase immediately
             // to verify persistence, CDP, and the durable cookie mirror.
             doctorReport = await runDoctorPhase("full");
+            // Only mark x_verified once doctor confirms all X checks pass (session valid,
+            // cookies persisted, CDP responding, keychain accessible). This prevents the
+            // autopilot from starting if X connection didn't actually persist.
+            if (doctorReport?.ok) {
+                completeOnboardingMilestone("x_verified", {
+                    x_session: doctorReport.checks?.find(c => c.id === "x_session")?.status,
+                    x_cookies: doctorReport.checks?.find(c => c.id === "x_cookie_sqlite")?.status,
+                });
+            }
+            else {
+                recordOnboardingAttempt("x_verified", { doctor_ok: false });
+            }
         }
         else {
             blockOnboardingMilestone("x_connected", `x_${r.state || "not_connected"}`, r.error || r.note || summarizeXAuth(r), { state: r.state || "not_connected" });
@@ -3225,6 +3237,18 @@ async function ensureQueueKickerInstalled() {
                 detail: "no ready project or active persona yet",
             };
         }
+        // Additional gate: X must be connected and verified before autopilot starts.
+        // This prevents wasted cycles against a logged-out x.com if X connection didn't
+        // persist after import/login. x_verified milestone only completes after doctor
+        // confirms X session and cookies are valid.
+        const onboardingState = onboardingSnapshot();
+        const xVerified = onboardingState?.milestones?.some((m) => m.id === "x_verified" && m.status === "complete");
+        if (!xVerified) {
+            return {
+                ok: false,
+                detail: "X not yet verified (awaiting explicit pre-flight confirmation)",
+            };
+        }
         const logDir = path.join(repoDir(), "skill", "logs");
         try {
             fs.mkdirSync(logDir, { recursive: true });

package/mcp/dist/onboarding.js

@@ -14,6 +14,7 @@ export const ONBOARDING_MILESTONES = [
     "environment_checked",
     "runtime_ready",
     "x_connected",
+    "x_verified",
     "profile_scanned",
     "mode_chosen",
     "project_ready",

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.1-rc.3",
-  "installedAt": "2026-07-07T20:42:48.680Z"
+  "version": "1.7.1-rc.4",
+  "installedAt": "2026-07-07T21:09:29.839Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.1-rc.3",
+  "version": "1.7.1-rc.4",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {

package/mcp/menubar/s4l_menubar.py

@@ -479,7 +479,11 @@ class S4LMenuBar(rumps.App):
         # occlusion probe also reads not-visible during fullscreen apps and the
         # locked screen, so acting on it would false-fire; the remote fix is the
         # restart_menubar MCP tool.
-        self._icon_check_due_at = 0.0
+        # First probe at +60s, not immediately: the window server takes a few
+        # seconds to place a fresh status item (occlusion reads not-visible and
+        # the frame sits at x=0 until then — measured 2026-07-07), so an eager
+        # probe would log a false "hidden" on every single process start.
+        self._icon_check_due_at = time.monotonic() + 60.0
         self._icon_hidden_since = None
         self._icon_last_on_screen = "unprobed"
         self._icon_watch_started = time.monotonic()

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.1-rc.3",
+  "version": "1.7.1-rc.4",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.1-rc.3",
+  "version": "1.7.1-rc.4",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",