@m13v/s4l 1.7.4-rc.26 → 1.7.4-rc.28

package/mcp/dist/index.js

@@ -22,7 +22,7 @@ import fs from "node:fs";
 import { repoDir, runPython, run, readPlan, writePlan, planPath, } from "./repo.js";
 import { applySetup, resolveProject, hasReadyProject, personaReady, listManagedProjectStatus, listProjectSettings, ensureShortLinksDefault, ensurePersonaProject, findPersonaProject, REQUIRED_FIELDS, RECOMMENDED_FIELDS, configPath, normalizeStringList, } from "./setup.js";
 import { xStatus, xConnect, xDetectSources, xScanProfile, summarizeXAuth } from "./twitterAuth.js";
-import { startProvisioning, isProvisioning, readProgress, runtimeReady, readRuntime, resolvePython, resolveChrome, ensureMenubar, menubarRunning, clearMenubarStop, ensurePipelineCurrent, ensureRuntimeProvisioned, retryProvisionIfStalled, } from "./runtime.js";
+import { startProvisioning, isProvisioning, readProgress, runtimeReady, readRuntime, resolvePython, resolveChrome, ensureMenubar, menubarRunning, clearMenubarStop, ensurePipelineCurrent, ensureRuntimeProvisioned, ensureHarnessPatched, retryProvisionIfStalled, } from "./runtime.js";
 import { blockOnboardingMilestone, completeOnboardingMilestone, ensureDoctorPhase, onboardingLedger, onboardingSnapshot, recordOnboardingAttempt, runDoctorPhase, } from "./onboarding.js";
 import { VERSION, versionStatus, latestPublishedVersion } from "./version.js";
 import { initSentry, sendHeartbeat, sendStateSnapshot, captureError, captureMessage, flushSentry, startLogStreaming, flushLogs, logLine, checkVersionChange } from "./telemetry.js";
@@ -5107,6 +5107,17 @@ async function main() {
     if (ensureRuntimeProvisioned()) {
         console.error("[social-autoposter-mcp] owned runtime not ready; provisioning on boot");
     }
+    // Vendored harness patch for ALREADY-ready runtimes: provision() is skipped
+    // above when the runtime is ready, so a patch shipped in an rc would never
+    // reach an existing install's harness checkout without this. Idempotent
+    // (marker check) and best-effort; never blocks boot.
+    void ensureHarnessPatched()
+        .then((r) => {
+        if (!(r.ok && r.detail === "already patched")) {
+            console.error(`[social-autoposter-mcp] harness patch: ${r.ok ? "ok" : "skip"} (${r.detail})`);
+        }
+    })
+        .catch(() => { });
     // Queue-backed drafting (2026-06-23): keep the two worker-task prompts current,
     // pre-approve their tools EAGERLY (before onboarding even creates the tasks, so
     // the first unattended fire can't stall), and (re)install the launchd kicker

package/mcp/dist/runtime.js

@@ -589,6 +589,42 @@ export function ensureRuntimeProvisioned() {
         return false; // best-effort; a boot provision must never break startup
     }
 }
+// Boot hook closing the provisioning gap for ALREADY-ready runtimes: provision()
+// skips when runtimeReady(), so a vendored-patch update shipped in an rc never
+// reaches an existing install's harness checkout (proved on the QA box: rc.26
+// delivered scripts/patches/ but the checkout stayed unpatched, 2026-07-13).
+// This runs on every MCP boot: if the fix marker is absent and the patch
+// applies, apply it and reload the harness daemon so the running process picks
+// up the new source (the uv tool install is EDITABLE, so patched files are
+// live without a reinstall). Best-effort; never blocks startup.
+export async function ensureHarnessPatched() {
+    try {
+        const adminPy = path.join(HARNESS_DIR, "src", "browser_harness", "admin.py");
+        if (!fs.existsSync(adminPy))
+            return { ok: false, detail: "harness not installed yet" };
+        if (fs.readFileSync(adminPy, "utf-8").includes("cdp_urlopen")) {
+            return { ok: true, detail: "already patched" };
+        }
+        const harnessPatch = path.join(MATERIALIZED_REPO, "scripts", "patches", "browser-harness-loopback-cdp-proxy.patch");
+        if (!fs.existsSync(harnessPatch))
+            return { ok: false, detail: "patch file missing from package" };
+        const chk = await sh("git", ["-C", HARNESS_DIR, "apply", "--check", harnessPatch], {
+            timeoutMs: 30000,
+        });
+        if (chk.code !== 0) {
+            return { ok: false, detail: "patch does not apply (dirty or diverged checkout)" };
+        }
+        const app = await sh("git", ["-C", HARNESS_DIR, "apply", harnessPatch], { timeoutMs: 30000 });
+        if (app.code !== 0)
+            return { ok: false, detail: `git apply failed (exit ${app.code})` };
+        // Reload the daemon so the long-lived process re-imports the patched source.
+        await sh(HARNESS_BIN, ["--reload"], { timeoutMs: 30000 });
+        return { ok: true, detail: "patched + daemon reloaded" };
+    }
+    catch (e) {
+        return { ok: false, detail: String(e?.message || e) };
+    }
+}
 async function provision(progress) {
     const setStep = (id, status, detail) => {
         const st = progress.steps.find((s) => s.id === id);

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.4-rc.26",
-  "installedAt": "2026-07-13T16:27:04.389Z"
+  "version": "1.7.4-rc.28",
+  "installedAt": "2026-07-13T21:52:37.483Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.4-rc.26",
+  "version": "1.7.4-rc.28",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.4-rc.26",
+  "version": "1.7.4-rc.28",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.4-rc.26",
+  "version": "1.7.4-rc.28",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",

package/scripts/reddit_browser.py

@@ -1750,7 +1750,7 @@ def _log_dm_outbound(chat_url, content, dm_id=None, minted_codes=None):
         return False
 
 
-def send_dm(chat_url, message, dm_id=None):
+def send_dm(chat_url, message, dm_id=None, apply_campaigns=True):
     """Send a message in a Reddit chat or PM thread.
 
     For chat URLs (reddit.com/chat/...), navigates to the chat room and
@@ -1792,8 +1792,12 @@ def send_dm(chat_url, message, dm_id=None):
         minted_link_codes = wrap_res.get("minted_codes", [])
 
     # Tool-level campaign suffix injection (guaranteed delivery of literal text).
+    # apply_campaigns=False (via S4L_SKIP_CAMPAIGN_SUFFIX on the send-dm CLI)
+    # opts this DM out — set ONLY for human-drafted escalation replies
+    # (engage-dm-replies Phase 0); see twitter_browser.py send_dm for the
+    # incident rationale. The autopilot never sets it.
     applied_campaigns = []
-    for cid, suffix, sample_rate in _load_active_reddit_campaigns_for_dm():
+    for cid, suffix, sample_rate in (_load_active_reddit_campaigns_for_dm() if apply_campaigns else []):
         if random.random() < sample_rate:
             message = message + suffix
             applied_campaigns.append(cid)
@@ -2507,7 +2511,11 @@ def main():
                 dm_id_arg = int(sys.argv[4])
             except ValueError:
                 print(f"[send-dm] ignoring non-int dm_id arg: {sys.argv[4]!r}", file=sys.stderr)
-        result = send_dm(sys.argv[2], sys.argv[3], dm_id=dm_id_arg)
+        # S4L_SKIP_CAMPAIGN_SUFFIX=1 opts this DM out of campaign suffixes.
+        # Set ONLY by engage-dm-replies Phase 0 when delivering a human-drafted
+        # escalation reply — see send_dm's apply_campaigns comment.
+        _skip_camp = os.environ.get("S4L_SKIP_CAMPAIGN_SUFFIX", "").strip().lower() in ("1", "true", "yes")
+        result = send_dm(sys.argv[2], sys.argv[3], dm_id=dm_id_arg, apply_campaigns=not _skip_camp)
         print(json.dumps(result, indent=2))
 
     elif cmd == "compose-dm":

package/scripts/twitter_browser.py

@@ -2148,7 +2148,7 @@ def read_conversation(thread_url, max_messages=20):
                 browser.close()
 
 
-def send_dm(thread_url, message, dm_id=None):
+def send_dm(thread_url, message, dm_id=None, apply_campaigns=True):
     """Send a message in a Twitter/X DM conversation.
 
     Navigates to the thread URL, types the message in the compose box,
@@ -2186,8 +2186,16 @@ def send_dm(thread_url, message, dm_id=None):
         message = wrap_res["text"]
         minted_link_codes = wrap_res.get("minted_codes", [])
 
+    # apply_campaigns=False (via S4L_SKIP_CAMPAIGN_SUFFIX on the send-dm CLI)
+    # opts this DM out of active-campaign suffixes. Set ONLY when delivering a
+    # HUMAN-drafted escalation reply (engage-dm-replies Phase 0): a human
+    # answering an escalation — often an AI-callout — must not get a bot tell
+    # coin-flipped onto their words (2026-07-13: the ' written with ai' suffix
+    # landing on a hand-approved recovery DM to ngeloxyz helped burn the lead).
+    # The autopilot never sets it, so the A/B experiment continues everywhere
+    # else. Mirrors reply_to_tweet's apply_campaigns plumbing.
     applied_campaigns = []
-    for cid, suffix, sample_rate in _load_active_twitter_campaigns():
+    for cid, suffix, sample_rate in (_load_active_twitter_campaigns() if apply_campaigns else []):
         if random.random() < sample_rate:
             # Wrap any URLs in the suffix through dm_short_links (DM rail) so
             # clicks attribute to this DM. Falls back to raw suffix if dm_id
@@ -2927,7 +2935,11 @@ def main():
             except ValueError:
                 print(f"send-dm: dm_id must be int, got {sys.argv[4]!r}", file=sys.stderr)
                 sys.exit(1)
-        result = send_dm(sys.argv[2], sys.argv[3], dm_id=dm_id_arg)
+        # S4L_SKIP_CAMPAIGN_SUFFIX=1 opts this DM out of campaign suffixes.
+        # Set ONLY by engage-dm-replies Phase 0 when delivering a human-drafted
+        # escalation reply — see send_dm's apply_campaigns comment.
+        _skip_camp = os.environ.get("S4L_SKIP_CAMPAIGN_SUFFIX", "").strip().lower() in ("1", "true", "yes")
+        result = send_dm(sys.argv[2], sys.argv[3], dm_id=dm_id_arg, apply_campaigns=not _skip_camp)
         print(json.dumps(result, indent=2))
 
     elif cmd == "notifications":

package/skill/engage-dm-replies.sh

@@ -302,12 +302,25 @@ The \`public_target_url\` field is THEIR public comment that originally led to t
 
 ### Step C. If \`reply_channel\` is \`dm\` or \`both\`: deliver the DM
 
+**NO CAMPAIGN SUFFIX ON HUMAN REPLIES.** A row in this queue is a HUMAN answering
+an escalation (often an AI-callout), so the campaign suffix (e.g. ' written with
+ai') must NEVER be coin-flipped onto it — it re-burns the exact lead the human is
+trying to recover (2026-07-13: the suffix landed on the hand-approved ngeloxyz
+recovery DM and helped kill the thread). When sending via the python CLIs, ALWAYS
+prefix the env opt-out:
+\`\`\`bash
+S4L_SKIP_CAMPAIGN_SUFFIX=1 python3 scripts/twitter_browser.py send-dm THREAD_URL "MESSAGE" DM_ID
+S4L_SKIP_CAMPAIGN_SUFFIX=1 python3 scripts/reddit_browser.py send-dm CHAT_URL "MESSAGE" DM_ID
+\`\`\`
+This applies ONLY inside Phase 0 (human replies). Auto-replies in the later phases
+keep the normal campaign behavior — do NOT carry this env var forward.
+
 1. Craft a natural DM based on the human's instructions and the conversation context.
 2. Navigate to the conversation on the correct platform using \`chat_url\` (or find the conversation with their_author).
    - **Reddit Chat** (mcp__reddit-harness__bh_run tool, CDP-driven real Chrome on port 9557)
    - **LinkedIn Messages** (mcp__linkedin-harness__bh_run tool, CDP-driven real Chrome on port 9556)
    - **X/Twitter DMs** (mcp__twitter-harness__bh_run tool), if encrypted DM passcode dialog appears, enter: $TWITTER_DM_PASSCODE
-3. Type and send the crafted DM.
+3. Type and send the crafted DM (with the suffix opt-out env var when using the python send-dm CLIs, per the rule above).
 4. Log the outbound message (log what you ACTUALLY SENT, not the human's instructions). Pass --verified ONLY when the browser tool returned verified=true. If verification failed, log nothing and let the next cycle retry; never pass --verified speculatively:
    \`\`\`bash
    cd ~/social-autoposter && python3 scripts/dm_conversation.py log-outbound --dm-id DM_ID --content "THE_CRAFTED_DM_YOU_SENT" --verified