@m13v/s4l 1.7.4-rc.30 → 1.7.4-rc.31

package/mcp/dist/runtime.js

@@ -599,15 +599,28 @@ export function ensureRuntimeProvisioned() {
 // live without a reinstall). Best-effort; never blocks startup.
 export async function ensureHarnessPatched() {
     try {
-        const adminPy = path.join(HARNESS_DIR, "src", "browser_harness", "admin.py");
-        if (!fs.existsSync(adminPy))
+        // Version marker of the CURRENT vendored patch: a symbol that exists only
+        // in its newest revision (v2 added the daemon.py websocket-proxy
+        // neutralization after v1's cdp_urlopen alone proved insufficient — the
+        // WS dial still routed through the macOS system proxy and died with
+        // "proxy rejected connection: HTTP 503"). Bump this string whenever the
+        // patch gains a new hunk, or upgraded installs will silently keep the
+        // previous revision.
+        const daemonPy = path.join(HARNESS_DIR, "src", "browser_harness", "daemon.py");
+        if (!fs.existsSync(daemonPy))
             return { ok: false, detail: "harness not installed yet" };
-        if (fs.readFileSync(adminPy, "utf-8").includes("cdp_urlopen")) {
+        if (fs.readFileSync(daemonPy, "utf-8").includes("s4l_no_proxy_ws")) {
             return { ok: true, detail: "already patched" };
         }
         const harnessPatch = path.join(MATERIALIZED_REPO, "scripts", "patches", "browser-harness-loopback-cdp-proxy.patch");
         if (!fs.existsSync(harnessPatch))
             return { ok: false, detail: "patch file missing from package" };
+        // Discard any PRIOR vendored-patch revision (e.g. v1) so the cumulative
+        // patch applies onto pristine pinned sources. Only src/ is touched; the
+        // checkout is a managed artifact, never a place for local edits.
+        await sh("git", ["-C", HARNESS_DIR, "checkout", "--", "src/browser_harness"], {
+            timeoutMs: 30000,
+        });
         const chk = await sh("git", ["-C", HARNESS_DIR, "apply", "--check", harnessPatch], {
             timeoutMs: 30000,
         });

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.4-rc.30",
-  "installedAt": "2026-07-13T22:13:17.873Z"
+  "version": "1.7.4-rc.31",
+  "installedAt": "2026-07-13T22:20:47.112Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.4-rc.30",
+  "version": "1.7.4-rc.31",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.4-rc.30",
+  "version": "1.7.4-rc.31",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.4-rc.30",
+  "version": "1.7.4-rc.31",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",

package/scripts/patches/browser-harness-loopback-cdp-proxy.patch

@@ -1,23 +1,3 @@
-From a97b7cdae960813f13af39ef99ce878426008dcc Mon Sep 17 00:00:00 2001
-From: m13v <i@m13v.com>
-Date: Mon, 13 Jul 2026 08:48:50 -0700
-Subject: [PATCH] Never route loopback CDP requests through a proxy
-
-urllib's default opener honors proxy env vars and macOS system proxy
-settings (scutil --proxy). On a machine with a system-wide proxy (e.g. a
-local gost/ISP forwarder), every 127.0.0.1 CDP probe is sent to the proxy
-and returns 403 Forbidden, so Chrome looks unreachable while curl (env
-proxies only) and Playwright (own websocket stack) work fine. Route all
-loopback CDP HTTP calls through a proxy-free opener; non-loopback CDP
-URLs keep default proxy behavior.
-
-Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
----
- src/browser_harness/admin.py  | 24 +++++++++++++++++++++++-
- src/browser_harness/daemon.py |  7 ++++---
- src/browser_harness/run.py    |  3 ++-
- 3 files changed, 29 insertions(+), 5 deletions(-)
-
 diff --git a/src/browser_harness/admin.py b/src/browser_harness/admin.py
 index c72a8fb..64addee 100644
 --- a/src/browser_harness/admin.py
@@ -62,18 +42,33 @@ index c72a8fb..64addee 100644
  
  def _has_local_gui():
 diff --git a/src/browser_harness/daemon.py b/src/browser_harness/daemon.py
-index 0f0f255..ceb08b9 100644
+index 0f0f255..de51934 100644
 --- a/src/browser_harness/daemon.py
 +++ b/src/browser_harness/daemon.py
-@@ -5,6 +5,7 @@ from collections import deque
+@@ -5,8 +5,22 @@ from collections import deque
  from pathlib import Path
  
  from . import _ipc as ipc
 +from .admin import cdp_urlopen
  from cdp_use.client import CDPClient
  
++# s4l_no_proxy_ws: the daemon's CDP traffic is loopback; never let ANY client
++# in this process route it through a proxy. websockets>=14 autodetects proxies
++# at dial time via urllib.request.proxy_bypass()/getproxies() (which on macOS
++# include SYSTEM proxy settings from scutil --proxy), so a box-wide forwarder
++# turns the CDP WS dial into a proxied CONNECT that fails ("proxy rejected
++# connection: HTTP 503") — same failure class as the urllib 403 that
++# cdp_urlopen fixes for the HTTP lookup. Neutralize resolution process-wide:
++# the daemon's only non-loopback traffic (browser-use cloud API) works direct.
++# Both lookups happen at call time via module attributes, so this holds
++# regardless of import order.
++urllib.request.getproxies = lambda: {}  # type: ignore[assignment]
++urllib.request.proxy_bypass = lambda host: 1  # type: ignore[assignment]
++
  
-@@ -113,7 +114,7 @@ def get_ws_url():
+ def _load_env():
+     repo_root = Path(__file__).resolve().parents[2]
+@@ -113,7 +127,7 @@ def get_ws_url():
          base_url = url.rstrip("/")
          while time.time() < deadline:
              try:
@@ -82,7 +77,7 @@ index 0f0f255..ceb08b9 100644
              except urllib.error.HTTPError as e:
                  last_err = e
                  if e.code == 404 and (ws := _ws_from_devtools_active_port(url)):
-@@ -139,7 +140,7 @@ def get_ws_url():
+@@ -139,7 +153,7 @@ def get_ws_url():
          deadline = time.time() + 30
          while time.time() < deadline:
              try:
@@ -91,7 +86,7 @@ index 0f0f255..ceb08b9 100644
              except urllib.error.HTTPError as e:
                  # Chrome 147+ disables /json/* HTTP discovery on the default user-data-dir;
                  # the ws path Chrome wrote to DevToolsActivePort still works.
-@@ -153,7 +154,7 @@ def get_ws_url():
+@@ -153,7 +167,7 @@ def get_ws_url():
          )
      for probe_port in (9222, 9223):
          try:
@@ -121,6 +116,3 @@ index 8ab1f0f..cbd3835 100644
              return True
          except OSError: pass
      return False
--- 
-2.43.0
-

package/skill/amplitude-24h-signups.sh

@@ -34,5 +34,5 @@ RUN_START=$(date +%s)
 EXIT_CODE=$?
 RUN_ELAPSED=$(( $(date +%s) - RUN_START ))
 
-echo "[$(date +%H:%M:%S)] === done in ${RUN_ELAPSED}s (exit=${EXIT_CODE}) ==="
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] === done in ${RUN_ELAPSED}s (exit=${EXIT_CODE}) ==="
 exit "$EXIT_CODE"

package/skill/check-web-chats.sh

@@ -35,7 +35,7 @@ mkdir -p "$LOG_DIR"
 PYTHON_BIN="${PYTHON_BIN:-/opt/homebrew/bin/python3.11}"
 [ -x "$PYTHON_BIN" ] || PYTHON_BIN="/usr/bin/python3"
 
-log() { echo "[$(date +%H:%M:%S)] $*" >> "$LOG_DIR/web-chat.log"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" >> "$LOG_DIR/web-chat.log"; }
 
 # Step 1: query Postgres for unread threads.
 CHATS=$("$PYTHON_BIN" "$SCRIPTS_DIR/check_unread_web_chats.py" 2>>"$LOG_DIR/web-chat.log")

package/skill/lib/linkedin-backend.sh

@@ -154,7 +154,7 @@ cleanup_harness_tabs() {
     if ! $_probe 2>/dev/null; then
         sleep 1
         if ! $_probe 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] cleanup_harness_tabs: SKIPPED (linkedin-harness CDP /json/version unreachable after 10s+retry)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] cleanup_harness_tabs: SKIPPED (linkedin-harness CDP /json/version unreachable after 10s+retry)" >&2
             return 0
         fi
     fi
@@ -221,7 +221,7 @@ _acquire_linkedin_pipeline_lock() {
             echo "$$" > "$_LI_PIPELINE_LOCK_DIR/pid"
             echo "$_who" > "$_LI_PIPELINE_LOCK_DIR/holder"
             export _LI_PIPELINE_LOCK_HELD=1
-            echo "[$(date +%H:%M:%S)] linkedin-pipeline lock ACQUIRED by $_who (pid $$)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock ACQUIRED by $_who (pid $$)" >&2
             return 0
         fi
         local _h_pid _h_who
@@ -236,11 +236,11 @@ _acquire_linkedin_pipeline_lock() {
             return 0
         fi
         if [ -z "$_h_pid" ] || ! kill -0 "$_h_pid" 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] linkedin-pipeline lock: reclaiming stale lock (dead holder ${_h_who} pid ${_h_pid:-unknown})" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock: reclaiming stale lock (dead holder ${_h_who} pid ${_h_pid:-unknown})" >&2
             rm -rf "$_LI_PIPELINE_LOCK_DIR"
             continue
         fi
-        echo "[$(date +%H:%M:%S)] linkedin-pipeline lock: held by ${_h_who} (pid ${_h_pid}); ${_who} skipping this fire (rc=78) to avoid two drivers on the 9556 Chrome" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock: held by ${_h_who} (pid ${_h_pid}); ${_who} skipping this fire (rc=78) to avoid two drivers on the 9556 Chrome" >&2
         return 78
     done
 }
@@ -271,10 +271,10 @@ ensure_linkedin_browser_for_backend() {
     if [ "${LINKEDIN_CDP_URL:-$_BH_LINKEDIN_DEFAULT_URL}" != "$_BH_LINKEDIN_DEFAULT_URL" ]; then
         local _ext_url="${LINKEDIN_CDP_URL}"
         if curl -sf --max-time 2 -o /dev/null "${_ext_url}/json/version" 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
             return 0
         fi
-        echo "[$(date +%H:%M:%S)] ERROR: LINKEDIN_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: LINKEDIN_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host." >&2
         return 1
     fi
     # Cross-pipeline whole-run lock: only one LinkedIn browser pipeline drives
@@ -288,14 +288,14 @@ ensure_linkedin_browser_for_backend() {
     _acquire_linkedin_pipeline_lock || return $?
     # Probe + launch harness Chrome on port 9556 if needed.
     if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9556/json/version 2>/dev/null; then
-        echo "[$(date +%H:%M:%S)] LinkedIn harness Chrome down on port 9556, launching..." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LinkedIn harness Chrome down on port 9556, launching..." >&2
         # Dated relaunch stamp for central observability (see twitter-backend.sh).
         echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) port=9556" \
             >> "$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/logs/chrome-relaunch-events.log" 2>/dev/null || true
         local _chrome_bin
         _chrome_bin=$(_resolve_chrome_bin)
         if [ -z "$_chrome_bin" ]; then
-            echo "[$(date +%H:%M:%S)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
             return 1
         fi
         # On Linux + no display, run headless. On root, add --no-sandbox.
@@ -323,7 +323,7 @@ ensure_linkedin_browser_for_backend() {
         local _stale_pids
         _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
         if [ -n "$_stale_pids" ] && ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9556/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
             kill $_stale_pids 2>/dev/null || true
             sleep 2
             _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
@@ -357,10 +357,10 @@ os.execv(sys.argv[1], sys.argv[1:])' \
             sleep 1
         done
         if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9556/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] ERROR: LinkedIn harness Chrome failed to start within 12s" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: LinkedIn harness Chrome failed to start within 12s" >&2
             return 1
         fi
-        echo "[$(date +%H:%M:%S)] LinkedIn harness Chrome up on port 9556" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LinkedIn harness Chrome up on port 9556" >&2
     fi
     # Always close leftover tabs from prior runs. Safe under acquire_lock
     # "linkedin-browser" serialization.
@@ -395,7 +395,7 @@ _linkedin_session_detect_gate() {
     "$_py" "$HOME/social-autoposter/scripts/linkedin_killswitch.py" detect-gate \
         --cdp-url "${LINKEDIN_CDP_URL:-$_BH_LINKEDIN_DEFAULT_URL}" >&2 || _rc=$?
     if [ "$_rc" = "2" ]; then
-        echo "[$(date +%H:%M:%S)] detect-gate tripped the LinkedIn killswitch; aborting this fire" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] detect-gate tripped the LinkedIn killswitch; aborting this fire" >&2
         return 1
     fi
     return 0

package/skill/lib/reddit-backend.sh

@@ -123,7 +123,7 @@ cleanup_harness_tabs() {
     if ! $_probe 2>/dev/null; then
         sleep 1
         if ! $_probe 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] cleanup_harness_tabs: SKIPPED (reddit-harness CDP /json/version unreachable after 10s+retry)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] cleanup_harness_tabs: SKIPPED (reddit-harness CDP /json/version unreachable after 10s+retry)" >&2
             return 0
         fi
     fi
@@ -156,19 +156,19 @@ ensure_reddit_browser_for_backend() {
     if [ "${REDDIT_CDP_URL:-$_BH_REDDIT_DEFAULT_URL}" != "$_BH_REDDIT_DEFAULT_URL" ]; then
         local _ext_url="${REDDIT_CDP_URL}"
         if curl -sf --max-time 2 -o /dev/null "${_ext_url}/json/version" 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
             return 0
         fi
-        echo "[$(date +%H:%M:%S)] ERROR: REDDIT_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: REDDIT_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host." >&2
         return 1
     fi
     # Probe + launch harness Chrome on port 9557 if needed.
     if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9557/json/version 2>/dev/null; then
-        echo "[$(date +%H:%M:%S)] Reddit harness Chrome down on port 9557, launching..." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Reddit harness Chrome down on port 9557, launching..." >&2
         local _chrome_bin
         _chrome_bin=$(_resolve_chrome_bin)
         if [ -z "$_chrome_bin" ]; then
-            echo "[$(date +%H:%M:%S)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
             return 1
         fi
         # On Linux + no display, run headless. On root, add --no-sandbox.
@@ -196,7 +196,7 @@ ensure_reddit_browser_for_backend() {
         local _stale_pids
         _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
         if [ -n "$_stale_pids" ] && ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9557/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
             kill $_stale_pids 2>/dev/null || true
             sleep 2
             _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
@@ -216,10 +216,10 @@ ensure_reddit_browser_for_backend() {
             sleep 1
         done
         if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9557/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] ERROR: Reddit harness Chrome failed to start within 12s" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: Reddit harness Chrome failed to start within 12s" >&2
             return 1
         fi
-        echo "[$(date +%H:%M:%S)] Reddit harness Chrome up on port 9557" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Reddit harness Chrome up on port 9557" >&2
     fi
     # Always close leftover tabs from prior runs. Safe under acquire_lock
     # "reddit-browser" serialization.

package/skill/lib/twitter-backend.sh

@@ -138,7 +138,7 @@ cleanup_harness_tabs() {
     if ! $_probe 2>/dev/null; then
         sleep 1
         if ! $_probe 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] cleanup_harness_tabs: SKIPPED (harness CDP /json/version unreachable after 10s+retry)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] cleanup_harness_tabs: SKIPPED (harness CDP /json/version unreachable after 10s+retry)" >&2
             return 0
         fi
     fi
@@ -202,13 +202,13 @@ ensure_twitter_browser_for_backend() {
             # 180s per downstream attach against a wedged browser.
             local _ext_verdict
             if ! _ext_verdict=$(_bh_cdp_ready "$_ext_url"); then
-                echo "[$(date +%H:%M:%S)] ERROR: external Chrome at ${_ext_url} is WEDGED (/json/version answers but the CDP handshake never completes). Host must restart it (AppMaker /opt/startup.sh, etc)." >&2
+                echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: external Chrome at ${_ext_url} is WEDGED (/json/version answers but the CDP handshake never completes). Host must restart it (AppMaker /opt/startup.sh, etc)." >&2
                 echo "twitter_cdp_wedge: detected url=${_ext_url} action=none-external" >&2
                 _bh_record_cdp_health external_wedged "$_ext_verdict"
                 return 1
             fi
             _bh_record_cdp_health ok-external "$_ext_verdict"
-            echo "[$(date +%H:%M:%S)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
             # Restore the Twitter login if the sandbox was substituted. AppMaker
             # Hobby-tier sandboxes have a 1h TTL; on substitution /root is reseeded
             # from /etc/skel-root and the harness profile (cookies) is wiped. This
@@ -217,7 +217,7 @@ ensure_twitter_browser_for_backend() {
             python3 "$_BH_REPO_DIR/scripts/restore_twitter_session.py" 2>&1 | sed 's/^/[restore] /' >&2 || true
             return 0
         fi
-        echo "[$(date +%H:%M:%S)] ERROR: TWITTER_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host (AppMaker /opt/startup.sh, etc)." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: TWITTER_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host (AppMaker /opt/startup.sh, etc)." >&2
         return 1
     fi
     # Probe + launch harness Chrome on port 9555 if needed. Two-stage probe:
@@ -229,12 +229,12 @@ ensure_twitter_browser_for_backend() {
     local _bh_prof_dir="$HOME/.claude/browser-profiles/browser-harness"
     if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9555/json/version 2>/dev/null; then
         _need_launch=1; _launch_reason="http_down"
-        echo "[$(date +%H:%M:%S)] Harness Chrome down on port 9555, launching..." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Harness Chrome down on port 9555, launching..." >&2
     else
         local _ready_verdict
         if ! _ready_verdict=$(_bh_cdp_ready "$_BH_DEFAULT_URL"); then
             _need_launch=1; _launch_reason="cdp_wedge"
-            echo "[$(date +%H:%M:%S)] Harness Chrome WEDGED on port 9555 (/json/version answers but the CDP handshake never completes: ${_ready_verdict:-no verdict}); killing and relaunching..." >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Harness Chrome WEDGED on port 9555 (/json/version answers but the CDP handshake never completes: ${_ready_verdict:-no verdict}); killing and relaunching..." >&2
             # Machine-greppable marker (same stderr-marker convention as
             # twitter_access_gate; bin/server.js parses these).
             echo "twitter_cdp_wedge: detected url=$_BH_DEFAULT_URL action=restart" >&2
@@ -260,7 +260,7 @@ ensure_twitter_browser_for_backend() {
         local _chrome_bin
         _chrome_bin=$(_resolve_chrome_bin)
         if [ -z "$_chrome_bin" ]; then
-            echo "[$(date +%H:%M:%S)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
             return 1
         fi
         # On Linux + no display, run headless. On root, add --no-sandbox.
@@ -302,7 +302,7 @@ ensure_twitter_browser_for_backend() {
         local _stale_pids
         _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
         if [ -n "$_stale_pids" ] && ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9555/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
             kill $_stale_pids 2>/dev/null || true
             sleep 2
             _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
@@ -335,7 +335,7 @@ os.execv(sys.argv[1], sys.argv[1:])' \
             sleep 1
         done
         if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9555/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] ERROR: harness Chrome failed to start within 12s" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: harness Chrome failed to start within 12s" >&2
             _bh_record_cdp_health launch_failed null
             return 1
         fi
@@ -344,13 +344,13 @@ os.execv(sys.argv[1], sys.argv[1:])' \
         # the cycle loudly, not feed 180s hangs downstream.
         local _post_verdict
         if ! _post_verdict=$(_bh_cdp_ready "$_BH_DEFAULT_URL"); then
-            echo "[$(date +%H:%M:%S)] ERROR: harness Chrome answers HTTP after relaunch but the CDP handshake is STILL failing: ${_post_verdict:-no verdict}" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: harness Chrome answers HTTP after relaunch but the CDP handshake is STILL failing: ${_post_verdict:-no verdict}" >&2
             echo "twitter_cdp_wedge: detected url=$_BH_DEFAULT_URL action=relaunch_failed" >&2
             _bh_record_cdp_health relaunch_failed "$_post_verdict"
             return 1
         fi
         _bh_record_cdp_health relaunched "$_post_verdict"
-        echo "[$(date +%H:%M:%S)] Harness Chrome up on port 9555" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Harness Chrome up on port 9555" >&2
     else
         _bh_record_cdp_health ok "${_ready_verdict:-null}"
     fi
@@ -392,7 +392,7 @@ defer_if_foreign_for_backend() {
 _sa_harness_log() {
     # Use the caller's log() FUNCTION when present; `declare -F` matches only a
     # shell function, never the macOS /usr/bin/log binary (command -v would).
-    if declare -F log >/dev/null 2>&1; then log "$*"; else echo "[$(date +%H:%M:%S)] $*" >&2; fi
+    if declare -F log >/dev/null 2>&1; then log "$*"; else echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" >&2; fi
 }
 _sa_resolve_uv() {
     local c

package/skill/linkedin-presence.sh

@@ -25,7 +25,7 @@ BATCH_ID="lipres-$(date +%Y%m%d_%H%M%S)-$$"
 export SA_CYCLE_ID="$BATCH_ID"
 export S4L_PIPELINE_NAME="linkedin-presence"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 DRY_RUN="${LINKEDIN_PRESENCE_DRY_RUN:-0}"
 

package/skill/refresh-instagram-tokens.sh

@@ -19,7 +19,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/refresh-instagram-tokens-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 log "=== refresh-instagram-tokens fire: $(date) ==="
 
 RUN_START=$(date +%s)

package/skill/refresh-twitter-following.sh

@@ -16,7 +16,7 @@ set -uo pipefail
 LOG_DIR="$HOME/social-autoposter/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/refresh-twitter-following-$(date +%Y-%m-%d_%H%M%S).log"
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 REPO_DIR="$HOME/social-autoposter"
 

package/skill/run-generate-daily-style.sh

@@ -36,7 +36,7 @@ if [ -f "$REPO_DIR/.env" ]; then
   set +a
 fi
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 log "starting daily human-style synthesizer"
 

package/skill/run-instagram-daily.sh

@@ -36,7 +36,7 @@ if [ -f "$REPO_DIR/.env" ]; then
   set +a
 fi
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 # Run accounting for dashboard Job History (Post Threads · Instagram).
 # Each exit site updates POSTED_CT / SKIPPED_CT / FAILED_CT; the EXIT trap

package/skill/run-linkedin-launchd.sh

@@ -40,7 +40,7 @@ mkdir -p "$LOG_DIR"
 # State: ~/.claude/social-autoposter/linkedin.killswitch
 # Clear: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear
 if [ -f "$HOME/.claude/social-autoposter/linkedin.killswitch" ]; then
-    echo "[$(date +%H:%M:%S)] LINKEDIN_KILLSWITCH active. Skipping run-linkedin." \
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LINKEDIN_KILLSWITCH active. Skipping run-linkedin." \
         >> "$LOG_DIR/launchd-linkedin-stderr.log"
     exit 0
 fi

package/skill/run-linkedin-unipile.sh

@@ -45,7 +45,7 @@ SOCIAL_ID=""
 REPLY_TO=""
 DO_POST=0
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 while [ $# -gt 0 ]; do
     case "$1" in

package/skill/scan-instagram-replies.sh

@@ -16,7 +16,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/scan-instagram-replies-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 log "=== scan-instagram-replies fire: $(date) ==="
 
 RUN_START=$(date +%s)

package/skill/sentry-digest.sh

@@ -37,7 +37,7 @@ LOG_FILE="$LOG_DIR/sentry-digest-$TS.log"
 SCAN_FILE="$LOG_DIR/sentry-digest-scan-$TS.json"
 OUTCOME_FILE="$LOG_DIR/outcome-sentry-digest-$TS.json"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 cd "$REPO_DIR"
 

package/skill/stats-instagram.sh

@@ -15,7 +15,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/stats-instagram-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 log "=== stats-instagram fire: $(date) ==="
 
 RUN_START=$(date +%s)

package/skill/sweep-link-clicks.sh

@@ -36,5 +36,5 @@ RUN_START=$(date +%s)
 EXIT_CODE=$?
 RUN_ELAPSED=$(( $(date +%s) - RUN_START ))
 
-echo "[$(date +%H:%M:%S)] === done in ${RUN_ELAPSED}s (exit=${EXIT_CODE}) ==="
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] === done in ${RUN_ELAPSED}s (exit=${EXIT_CODE}) ==="
 exit "$EXIT_CODE"