@m13v/s4l 1.7.1-rc.7 → 1.7.1-rc.9

package/bin/cli.js

@@ -823,6 +823,29 @@ function installMcp() {
   } catch (e) {
     console.warn('  WARNING: could not stamp MCP version:', e && e.message);
   }
+  // Auto-opt a fresh install into the staging channel when the version being
+  // installed is itself a pre-release (-rc.N) — e.g. `npx social-autoposter@
+  // X.Y.Z-rc.N init`. Without this, channel.json stays absent, which
+  // scripts/s4l_channel.py's fail-safe default reads as "stable", so the box
+  // would install this one rc and then silently stop tracking staging (never
+  // pick up the next rc). Mirrors the same one-time write in
+  // mcp/src/runtime.ts's provision() for the .mcpb (Desktop) install path.
+  // Only writes when no channel marker exists yet — never overrides an
+  // existing preference (e.g. a user who already opted back out).
+  try {
+    const pkgVersion = require('../package.json').version;
+    if (pkgVersion.includes('-rc.')) {
+      const stateDir = process.env.S4L_STATE_DIR || path.join(os.homedir(), '.social-autoposter-mcp');
+      const channelPath = path.join(stateDir, 'channel.json');
+      if (!fs.existsSync(channelPath)) {
+        fs.mkdirSync(stateDir, { recursive: true });
+        fs.writeFileSync(channelPath, JSON.stringify({ channel: 'staging' }, null, 2) + '\n');
+        console.log('  pre-release install detected -> opted into the staging channel');
+      }
+    }
+  } catch (e) {
+    console.warn('  WARNING: could not set staging channel:', e && e.message);
+  }
   console.log('  installing MCP runtime deps (npm install --omit=dev in mcp/)');
   const npmRes = spawnSync('npm', ['install', '--omit=dev', '--no-audit', '--no-fund'], {
     cwd: mcpDest,

package/mcp/dist/runtime.js

@@ -676,6 +676,29 @@ async function provision(progress) {
             /* best effort; S4L_REPO_DIR + the run-*.sh fallback also resolve the repo */
         }
         setStep("repo", "done", `unpacked to ${resolvedRepo}`);
+        // Auto-opt a bare .mcpb FIRST install into the staging channel when the
+        // shipped build is itself a pre-release (-rc.N) — e.g. downloaded from
+        // the staging-latest alias link (scripts/release-mcpb.sh step 7b).
+        // Without this, channel.json stays absent, which releaseChannel()'s
+        // fail-safe default reads as "stable" (mcp/src/version.ts), so the box
+        // would install this one rc and then silently stop tracking staging
+        // (never pick up the next rc). Mirrors the same one-time write in
+        // bin/cli.js's installMcp() for the npx install path. Gated to this
+        // `else` branch (genuine bare-.mcpb unpack, not envClone) so a
+        // developer's own npm/git clone is never auto-enrolled. Only writes when
+        // no channel marker exists yet — never overrides an existing preference.
+        try {
+            const bv = bundledVersion();
+            const channelPath = path.join(STATE_DIR, "channel.json");
+            if (bv && bv.includes("-rc.") && !fs.existsSync(channelPath)) {
+                fs.mkdirSync(STATE_DIR, { recursive: true });
+                fs.writeFileSync(channelPath, JSON.stringify({ channel: "staging" }, null, 2) + "\n", "utf-8");
+                console.error(`[runtime] first install of a staging build (${bv}) — opted into the staging channel`);
+            }
+        }
+        catch {
+            /* best effort; worst case the box just tracks stable */
+        }
     }
     // --- Step 1: uv -----------------------------------------------------------
     setStep("uv", "running");

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.1-rc.7",
-  "installedAt": "2026-07-07T23:08:38.967Z"
+  "version": "1.7.1-rc.9",
+  "installedAt": "2026-07-08T00:22:25.267Z"
 }

package/mcp/install.mjs

@@ -14,8 +14,6 @@ import path from "node:path";
 
 const SERVER_KEY = "social-autoposter";
 const UNINSTALL = process.argv.includes("--uninstall");
-const CHANNEL_STAGING = process.argv.includes("--channel-staging");
-const CHANNEL_STABLE = process.argv.includes("--channel-stable");
 
 // ---- resolve the absolute paths we want pinned into the spawn env ----------
 const here = path.dirname(new URL(import.meta.url).pathname);
@@ -137,19 +135,6 @@ for (const t of targets) {
   }
 }
 
-// Set release channel if requested
-if (!UNINSTALL && (CHANNEL_STAGING || CHANNEL_STABLE)) {
-  const stateDir = path.join(home, ".social-autoposter-mcp");
-  const channel = CHANNEL_STAGING ? "staging" : "stable";
-  try {
-    fs.mkdirSync(stateDir, { recursive: true });
-    writeJson(path.join(stateDir, "channel.json"), { channel });
-    console.log(`✓ Release channel set to: ${channel}`);
-  } catch (err) {
-    console.error(`✗ Failed to set channel: ${err.message}`);
-  }
-}
-
 console.log("");
 if (ok === targets.length) {
   if (UNINSTALL) {

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.1-rc.7",
+  "version": "1.7.1-rc.9",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {

package/mcp/menubar/s4l_menubar.py

@@ -132,20 +132,24 @@ except Exception as _import_err:
 import s4l_state as st  # noqa: E402
 
 # AppKit is available in the owned venv (PyObjC is a rumps dependency). We use it
-# only to pull the accessory (LSUIElement) app to the front before showing an
-# NSAlert: an agent app that isn't the active app has its rumps.alert appear
-# BEHIND the frontmost window ("modal doesn't show on top"), because runModal
-# doesn't activate the app for us. Guarded so a missing AppKit never breaks the
-# menu bar — the alert still shows, just possibly not front-most.
+# to pull the accessory (LSUIElement) app to the front AND to force the alert
+# window itself above whatever else is on screen. Guarded so a missing AppKit
+# never breaks the menu bar — the alert still shows, just possibly not
+# front-most.
 try:
-    from AppKit import NSApplication  # noqa: E402
+    from AppKit import NSApplication, NSAlert, NSFloatingWindowLevel  # noqa: E402
 except Exception:
     NSApplication = None
+    NSAlert = None
+    NSFloatingWindowLevel = None
 
 
 def _activate_front():
-    """Bring this accessory app to the front so the next NSAlert (rumps.alert)
-    opens on top of whatever was frontmost, instead of behind it. Best-effort."""
+    """Bring this accessory app to the front so the next alert opens on top of
+    whatever was frontmost, instead of behind it. Best-effort; kept as a
+    belt-and-suspenders call alongside _show_alert's own window-level fix
+    below, since activation also affects which app is "key" for keyboard
+    input on the alert's buttons."""
     try:
         if NSApplication is not None:
             NSApplication.sharedApplication().activateIgnoringOtherApps_(True)
@@ -153,6 +157,44 @@ def _activate_front():
         pass
 
 
+def _show_alert(title=None, message='', ok=None, cancel=None, other=None):
+    """Like rumps.alert(), but actually shows up on top.
+
+    rumps.alert() builds an NSAlert and immediately calls runModal() with no
+    window-level or ordering call at all — it just assumes the app is already
+    active. activateIgnoringOtherApps_ (_activate_front, above) is async, so
+    it can lose the race against runModal()'s own (assumed-active) window
+    presentation: the alert window is created at the default level and never
+    explicitly raised, so when this accessory app ISN'T active (e.g. Claude
+    Desktop is frontmost), it renders BEHIND Claude's window instead of on
+    top of it. Confirmed recurring 2026-07-07 (uninstall modal hidden behind
+    Claude Desktop) despite the activation call landing 2026-06-30.
+
+    Fix: build the NSAlert ourselves (same call rumps.alert uses) and force
+    its window to NSFloatingWindowLevel + orderFrontRegardless() BEFORE
+    runModal(), mirroring the pattern s4l_card.py's review panel already uses
+    successfully (see _ReviewPanel._build: setLevel_(NSFloatingWindowLevel) +
+    orderFrontRegardless()). Floating level sits above normal app windows in
+    the window server's global z-order regardless of app-activation state,
+    so it doesn't depend on the activation race resolving in time."""
+    _activate_front()
+    if NSAlert is None:
+        # AppKit unavailable in this venv: fall back to rumps' plain alert.
+        return rumps.alert(title=title, message=message, ok=ok, cancel=cancel, other=other)
+    msg = str(message).replace('%', '%%')
+    if not isinstance(cancel, str):
+        cancel = 'Cancel' if cancel else None
+    alert = NSAlert.alertWithMessageText_defaultButton_alternateButton_otherButton_informativeTextWithFormat_(
+        title, ok, cancel, other, msg)
+    alert.setAlertStyle_(0)  # same style rumps.alert() uses
+    try:
+        alert.window().setLevel_(NSFloatingWindowLevel)
+        alert.window().orderFrontRegardless()
+    except Exception:
+        pass
+    return alert.runModal()
+
+
 CLAUDE_APP = "Claude"
 
 
@@ -595,7 +637,7 @@ class S4LMenuBar(rumps.App):
             msg = "Click OK, then open Claude and ask it to " + action_desc + "."
         try:
             _activate_front()
-            rumps.alert(title=title, message=msg, ok="OK")
+            _show_alert(title=title, message=msg, ok="OK")
         except Exception:
             self._notify("S4L · prompt copied" if copied else "S4L",
                          "Paste the prompt into Claude (Cmd+V) and press Enter.")
@@ -666,7 +708,7 @@ class S4LMenuBar(rumps.App):
         also run the registry self-heal, which additionally repairs the
         account-switch orphan case, so this one click covers both known causes."""
         _activate_front()
-        choice = rumps.alert(
+        choice = _show_alert(
             title="Restart Claude Desktop?",
             message=(
                 "Claude’s scheduler stopped running the draft tasks (a known "
@@ -994,7 +1036,7 @@ class S4LMenuBar(rumps.App):
         # ok=1 (plugin reset, keeps X login + browser layer), other=-1 (deep wipe),
         # cancel=0. See rumps.alert: default=1, alternate=0, other=-1.
         _activate_front()
-        choice = rumps.alert(
+        choice = _show_alert(
             title="Uninstall S4L?",
             message=(
                 "This quits Claude Desktop, removes the S4L extension + its "
@@ -1037,7 +1079,7 @@ class S4LMenuBar(rumps.App):
     def _alert(self, title, message):
         try:
             _activate_front()
-            rumps.alert(title=title, message=message, ok="OK")
+            _show_alert(title=title, message=message, ok="OK")
         except Exception:
             pass
 
@@ -1072,7 +1114,7 @@ class S4LMenuBar(rumps.App):
         modal FIRST that Claude Desktop will restart, since the app window will
         close and reopen under them."""
         _activate_front()
-        choice = rumps.alert(
+        choice = _show_alert(
             title="Quit the S4L autoposter?",
             message=(
                 "Quitting stops the autoposter completely: the draft + query "
@@ -1758,16 +1800,14 @@ class S4LMenuBar(rumps.App):
             self._cwd_healed = True
             return
         _activate_front()
-        choice = rumps.alert(
-            title="Tidy the S4L background tasks?",
+        choice = _show_alert(
+            title="Tidy S4L background tasks?",
             message=(
-                "S4L can tidy its background tasks: merge the old draft + query "
-                "tasks into ONE universal worker (s4l-worker) and make sure "
-                "their once-a-minute runs stay in a dedicated folder instead of "
-                "cluttering your `claude --resume` history.\n\n"
-                "Claude Desktop will restart once to apply — its window will "
-                "close and reopen in a moment. Your X login, drafts, and config "
-                "all stay."
+                "Move the background worker to a dedicated folder so its "
+                "once-a-minute runs stop cluttering your `claude --resume` "
+                "history.\n\n"
+                "Claude Desktop will restart once to apply. Your X login, "
+                "drafts, and config all stay."
             ),
             ok="Tidy & restart Claude", cancel="Later",
         )

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.1-rc.7",
+  "version": "1.7.1-rc.9",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/mcp/shared/doctor.cjs

@@ -149,6 +149,14 @@ function runDoctorSync(options = {}) {
         "deferred until X connection to avoid an unexpected keychain prompt"
       );
     }
+    // Once the durable cookie mirror is populated, the X session no longer
+    // depends on this keychain item (see twitter_cookie_mirror.py — it exists
+    // precisely so a locked/missing Safe Storage key isn't fatal). Skip the
+    // probe instead of re-triggering + re-failing it on every doctor run;
+    // same mirrorCount() gate keychain_autolock already uses below.
+    if (mirrorCount() > 0) {
+      return result("pass", "skipped — durable cookie mirror already covers this");
+    }
     const r = spawnSync(
       "security",
       [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.1-rc.7",
+  "version": "1.7.1-rc.9",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",

package/scripts/get-latest-staging-mcpb.sh

@@ -1,67 +1,50 @@
 #!/bin/bash
-# Get the permanent download URL for the latest S4L staging release (.mcpb).
+# Print (or download) the permanent download link for the latest S4L staging
+# release (.mcpb).
+#
 # Usage:
-#   bash scripts/get-latest-staging-mcpb.sh [--download] [--channel] [--path]
+#   bash scripts/get-latest-staging-mcpb.sh [--download] [--channel]
 #
 # Options:
-#   --download    Download the .mcpb to current directory (instead of just printing URL)
-#   --channel     Also set the local channel to staging after download
-#   --path        Print the download path instead of the URL (for scripts)
+#   --download    Download the .mcpb to the current directory (instead of
+#                 just printing the URL)
+#   --channel     After downloading, opt this machine into the staging
+#                 channel (delegates to scripts/s4l_channel.py, the single
+#                 source of truth for the channel marker)
+#
+# The link below is a FIXED URL, not a live GitHub API lookup: every
+# `bash scripts/release-mcpb.sh --staging` run mirrors its .mcpb onto a
+# separate, non-version-tagged release ("staging-latest") so this exact URL
+# always serves whatever's newest — see scripts/release-mcpb.sh step 7b. That
+# means this script needs zero network calls to resolve anything; it only
+# hits the network when actually downloading.
 
 set -euo pipefail
 
+STAGING_MCPB_URL="https://github.com/m13v/s4l/releases/download/staging-latest/social-autoposter.mcpb"
+
 DO_DOWNLOAD=0
 DO_CHANNEL=0
-DO_PATH=0
 
 while [[ $# -gt 0 ]]; do
   case "$1" in
     --download) DO_DOWNLOAD=1; shift ;;
     --channel) DO_CHANNEL=1; shift ;;
-    --path) DO_PATH=1; shift ;;
-    *) echo "Unknown option: $1"; exit 1 ;;
+    *) echo "Unknown option: $1" >&2; exit 1 ;;
   esac
 done
 
-# Fetch the latest pre-release from GitHub API (first page, per_page=1 for speed)
-# Response is a JSON array; use python to extract the first object
-RELEASE_DATA=$(curl -fsS "https://api.github.com/repos/m13v/s4l/releases?per_page=1&pre_release=true" 2>/dev/null | python3 -c "import sys, json; data=json.load(sys.stdin); r=data[0] if data else {}; print(json.dumps(r))")
-
-# Extract version and download URL using python for reliable JSON parsing
-LATEST_TAG=$(echo "$RELEASE_DATA" | python3 -c "import sys, json; data=json.load(sys.stdin); print(data.get('tag_name', ''))" 2>/dev/null)
-MCPB_URL=$(echo "$RELEASE_DATA" | python3 -c "
-import sys, json
-data = json.load(sys.stdin)
-for asset in data.get('assets', []):
-    if 'social-autoposter.mcpb' in asset.get('name', ''):
-        print(asset.get('browser_download_url', ''))
-        break
-" 2>/dev/null)
-
-if [ -z "$LATEST_TAG" ] || [ -z "$MCPB_URL" ]; then
-  echo "Error: Could not find latest staging release" >&2
-  exit 1
-fi
-
-if [ "$DO_PATH" -eq 1 ]; then
-  # Return the tag only (for scripting)
-  echo "$LATEST_TAG"
+if [ "$DO_DOWNLOAD" -eq 0 ]; then
+  echo "$STAGING_MCPB_URL"
   exit 0
 fi
 
-if [ "$DO_DOWNLOAD" -eq 1 ]; then
-  FILENAME="social-autoposter-${LATEST_TAG}.mcpb"
-  echo "Downloading $FILENAME from $MCPB_URL" >&2
-  curl -fL "$MCPB_URL" -o "$FILENAME"
-  echo "$FILENAME"
+FILENAME="social-autoposter-staging.mcpb"
+echo "Downloading $FILENAME from $STAGING_MCPB_URL" >&2
+curl -fL "$STAGING_MCPB_URL" -o "$FILENAME"
+echo "$FILENAME"
 
-  if [ "$DO_CHANNEL" -eq 1 ]; then
-    STATE_DIR="${S4L_STATE_DIR:-$HOME/.social-autoposter-mcp}"
-    mkdir -p "$STATE_DIR"
-    echo '{"channel":"staging"}' > "$STATE_DIR/channel.json"
-    echo "✓ Channel set to staging" >&2
-  fi
-else
-  # Just print the URL
-  echo "$MCPB_URL"
+if [ "$DO_CHANNEL" -eq 1 ]; then
+  REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+  python3 "$REPO_ROOT/scripts/s4l_channel.py" set staging >&2
 fi

package/scripts/release-mcpb.sh

@@ -45,6 +45,16 @@
 # the EXACT tested artifact ships to everyone. Nothing can drift between test and
 # ship because there is no repack.
 #
+# FIXED STAGING DOWNLOAD LINK (2026-07-07, step 7b): stable has a permanent
+# "latest" URL (releases/latest/download/social-autoposter.mcpb); staging did
+# not, because GitHub's releases/latest hard-excludes prereleases with no
+# override. Every --staging run now also mirrors the .mcpb onto a separate,
+# non-version-tagged release ("staging-latest") so this URL never changes:
+#   https://github.com/m13v/s4l/releases/download/staging-latest/social-autoposter.mcpb
+# The tag deliberately isn't semver-shaped, so version.ts/snapshot.py's real
+# "newest rc" resolution (which requires a ^\d+\.\d+\.\d+ tag) ignores it —
+# it is a convenience download link only, never a candidate update source.
+#
 # Usage:
 #   bash scripts/release-mcpb.sh                 # patch bump, npm + .mcpb + GitHub (STABLE)
 #   bash scripts/release-mcpb.sh --bump minor
@@ -68,6 +78,12 @@ MCP_DIR="$REPO_ROOT/mcp"
 BUNDLE="$MCP_DIR/social-autoposter.mcpb"
 GH_REPO="m13v/s4l"
 SIZE_CAP_MB=180
+# Floating alias release for a fixed "always the newest staging build" download
+# link, mirroring what releases/latest/download/<asset> already gives stable.
+# GitHub's own releases/latest excludes prereleases with no override, so there is
+# no built-in equivalent for the rc channel — see step 7b below for why a
+# non-semver tag here is safe (never confuses the real update-detection code).
+STAGING_ALIAS_TAG="staging-latest"
 
 TAG_OVERRIDE=""
 VERSION_OVERRIDE=""
@@ -496,6 +512,38 @@ say "Released $TAG"
 echo "  asset: social-autoposter.mcpb (${MB}MB)"
 [[ -n "$URL" ]] && echo "  $URL"
 
+# ---- 7b. Fixed "always latest staging" download link ------------------------
+# Mirrors the asset just uploaded above onto a SEPARATE release tagged
+# "$STAGING_ALIAS_TAG" (not a version), so the download URL never changes:
+#   https://github.com/$GH_REPO/releases/download/$STAGING_ALIAS_TAG/social-autoposter.mcpb
+# Safe by construction: latestFromGithubListStaging() (mcp/src/version.ts) and
+# _latest_from_github_list_staging() (scripts/snapshot.py) both require
+# tag_name to match ^\d+\.\d+\.\d+ before treating a release as a candidate
+# "newest" build; a tag literally named "staging-latest" fails that check and
+# is silently skipped by both, so this alias can never get mistaken for a real
+# rc and can never confuse which build a box installs. It exists ONLY to give
+# humans (and scripts) one fixed bookmark — actual boxes still resolve "newest"
+# from the real per-release rc tags via the releases LIST endpoint, unchanged.
+if [[ "$DO_STAGING" == "1" ]]; then
+  say "Mirroring asset onto the fixed staging-latest alias"
+  ALIAS_NOTES="Always mirrors the newest staging pre-release's .mcpb asset (currently $TAG).
+
+Fixed download link (never changes): https://github.com/$GH_REPO/releases/download/$STAGING_ALIAS_TAG/social-autoposter.mcpb
+
+Not a real release — do not install from the tag page; use the asset link above. Actual per-build releases are tagged by version (e.g. $TAG)."
+  if gh release view "$STAGING_ALIAS_TAG" -R "$GH_REPO" >/dev/null 2>&1; then
+    gh release upload "$STAGING_ALIAS_TAG" "$BUNDLE" -R "$GH_REPO" --clobber
+    gh release edit "$STAGING_ALIAS_TAG" -R "$GH_REPO" --notes "$ALIAS_NOTES" >/dev/null
+  else
+    gh release create "$STAGING_ALIAS_TAG" "$BUNDLE" \
+      -R "$GH_REPO" \
+      --title "social-autoposter (staging — always latest)" \
+      --notes "$ALIAS_NOTES" \
+      --prerelease
+  fi
+  echo "  https://github.com/$GH_REPO/releases/download/$STAGING_ALIAS_TAG/social-autoposter.mcpb"
+fi
+
 # ---- 8. Verify the update banner will fire ---------------------------------
 # The menu-bar "⬆ Update available" banner (mcp/src/version.ts::versionStatus)
 # resolves "latest" from GitHub releases/latest, which is what .mcpb boxes (no

package/scripts/set-channel.sh

@@ -1,29 +0,0 @@
-#!/bin/bash
-# Set the S4L release channel (stable or staging).
-# Usage:
-#   bash scripts/set-channel.sh stable   # track stable releases only (default)
-#   bash scripts/set-channel.sh staging  # track staging releases (pre-releases)
-
-set -euo pipefail
-
-if [ $# -lt 1 ]; then
-  echo "Usage: bash scripts/set-channel.sh <stable|staging>" >&2
-  exit 1
-fi
-
-CHANNEL="$1"
-if [ "$CHANNEL" != "stable" ] && [ "$CHANNEL" != "staging" ]; then
-  echo "Error: channel must be 'stable' or 'staging'" >&2
-  exit 1
-fi
-
-STATE_DIR="${S4L_STATE_DIR:-$HOME/.social-autoposter-mcp}"
-mkdir -p "$STATE_DIR"
-echo "{\"channel\":\"$CHANNEL\"}" > "$STATE_DIR/channel.json"
-
-echo "✓ Release channel set to: $CHANNEL"
-if [ "$CHANNEL" = "staging" ]; then
-  echo "  Will now track pre-releases (rc.N builds). Next update check pulls the latest staging release."
-else
-  echo "  Will now track stable releases only. Next update check pulls the latest stable release."
-fi