@m13v/s4l 1.7.4-rc.31 → 1.7.4-rc.32

package/mcp/dist/index.js

@@ -2988,8 +2988,10 @@ function queueDir() {
 // routine is draining the queue — the worker would claim within a minute if it
 // were firing. This is the liveness signal that survives a Claude account switch
 // (which orphans the routines while their global SKILL.md files stay put, so the
-// SKILL.md-presence check in autopilotLoaded() reads a FALSE green). Mirrors the
-// menu bar's AUTOPILOT_STALL_SECONDS in mcp/menubar/s4l_menubar.py — keep in sync.
+// SKILL.md-presence check in autopilotLoaded() reads a FALSE green). Mirrors
+// HEALTHY_DRAIN_MAX_SECONDS in scripts/schedule_state.py, the single source of
+// truth every Python stall detector derives from; this TS constant can't import
+// it, so keep it in sync by hand when retuning there.
 const AUTOPILOT_STALL_MS = 1_200_000;
 // True when no scheduled-task routine is draining the draft queue. Two signals,
 // OR'd (keep in lockstep with mcp/menubar/s4l_menubar.py::_autopilot_stalled and

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.4-rc.31",
-  "installedAt": "2026-07-13T22:20:47.112Z"
+  "version": "1.7.4-rc.32",
+  "installedAt": "2026-07-13T22:36:08.709Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.4-rc.31",
+  "version": "1.7.4-rc.32",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {

package/mcp/menubar/s4l_menubar.py

@@ -398,32 +398,33 @@ DIAGNOSE_PROMPT_TEMPLATE = (
     "<that file>` so the report reaches the S4L developers. Keep replies short."
 )
 
-# A pending draft job older than this (seconds) with nothing claiming it means no
-# routine is draining the queue — the worker would claim within a minute if it
-# were firing. False-positive-free: an idle queue has no pending job at all, so a
-# quiet pipeline (no candidates) never trips this. Comfortably above the host
-# scheduler's per-minute cadence + a slow claim.
-AUTOPILOT_STALL_SECONDS = 1200
-
-# A job CLAIMED but never finished (sits in running/ this long) means a worker
-# picked it up and then wedged mid-run (the claude -p drafting child died / never
-# spawned). Generous enough that the longest real drafting turn never trips it.
-# Keep in sync with RUNNING_STALL_SECONDS (scripts/autopilot_stall_watch.py).
-AUTOPILOT_RUNNING_STALL_SECONDS = 1200
-
-# The "firing" window (how fresh lastRunAt must be) lives in the single source of
-# truth, scripts/schedule_state.py (FIRING_WINDOW there). _schedule_state delegates
-# to it, so it is intentionally NOT redefined here.
-
-# How long the producer can sit narrating "draft Nm" before we treat
-# the draft as STUCK rather than healthy. The producer writes that label the whole
-# time it blocks waiting for a worker to return a result (up to its 30-min queue
-# timeout). A healthy drain clears in ~1-2 min; if the label has been "drafting"
-# this long, the worker keeps dying mid-run (host inactivity-kill) or never claims,
-# and nothing is draining — so we flip the menu bar from a reassuring spinner to
-# ⚠ instead of letting the stale "drafting (8m)" lie persist. Well above any
-# healthy single drain (the worker itself dies at ~2 min today).
-DRAFT_STUCK_SECONDS = 300
+# Stall thresholds live in the single source of truth, scripts/schedule_state.py
+# (HEALTHY_DRAIN_MAX_SECONDS and the names derived from it) — retune there, not
+# here. Same module that owns FIRING_WINDOW; _schedule_state already delegates to
+# it. The three names cover three distinct failure modes:
+#   AUTOPILOT_STALL_SECONDS          pending job unclaimed → no routine draining
+#                                    (fix: Re-arm). Idle queue has no pending job,
+#                                    so a quiet pipeline never trips it.
+#   AUTOPILOT_RUNNING_STALL_SECONDS  job claimed but wedged in running/ → worker
+#                                    died mid-run (fix: Diagnose).
+#   DRAFT_STUCK_SECONDS              the producer's "draft Nm" label alive this
+#                                    long → end-to-end clock; the only timer that
+#                                    spans claim→die→requeue churn loops, which
+#                                    reset the two per-state timers on every
+#                                    transition while nothing ever completes.
+# The import is best-effort because the S4L_REPO_DIR sys.path insertion near the
+# top of this file is best-effort; the fallback literal mirrors
+# HEALTHY_DRAIN_MAX_SECONDS.
+try:
+    from schedule_state import (  # noqa: E402
+        STALL_SECONDS as AUTOPILOT_STALL_SECONDS,
+        RUNNING_STALL_SECONDS as AUTOPILOT_RUNNING_STALL_SECONDS,
+        DRAFT_STUCK_SECONDS,
+    )
+except Exception:
+    AUTOPILOT_STALL_SECONDS = 1200
+    AUTOPILOT_RUNNING_STALL_SECONDS = 1200
+    DRAFT_STUCK_SECONDS = 1200
 
 # A poll can read a transient "not stuck" moment (e.g. the activity file
 # between one dying worker attempt and the next claim on the same aged job)
@@ -2445,11 +2446,12 @@ class S4LMenuBar(rumps.App):
             self._stall_reason_info = ("", "")
         # Draft worker stuck/killed: the producer narrates "drafting replies (Nm)"
         # the whole time it blocks waiting for a worker to return a result, with NO
-        # idea the worker died. A healthy drain clears in ~1-2 min; once that label
-        # has been "drafting" past DRAFT_STUCK_SECONDS the worker keeps getting
-        # killed mid-run (or never claims) and nothing is draining — flip to ⚠
-        # instead of leaving the reassuring "drafting (8m)" spinner up. Skip when a
-        # more specific cause (rate limit) already owns the reason.
+        # idea the worker died. A healthy drain can run 8-10 min end to end (slot
+        # wait + the drafting turn); once that label has been "drafting" past
+        # DRAFT_STUCK_SECONDS the worker keeps getting killed mid-run (or never
+        # claims) and nothing is draining — flip to ⚠ instead of leaving the
+        # reassuring "drafting (25m)" spinner up. Skip when a more specific cause
+        # (rate limit) already owns the reason.
         #
         # Gated on schedule_state in ("ok", "stalled"), NOT missing/disabled: when
         # the schedule is missing/disabled (e.g. orphaned by an account switch),

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.4-rc.31",
+  "version": "1.7.4-rc.32",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.4-rc.31",
+  "version": "1.7.4-rc.32",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",

package/scripts/autopilot_stall_watch.py

@@ -14,7 +14,8 @@ autopilot" item). This watcher is the part the user can't see: a fleet-side aler
 so a sustained stall pages us even when nobody is looking at the menu bar.
 
 Design mirrors the stall signal in mcp/menubar/s4l_menubar.py (_autopilot_stalled)
-and mcp/src/index.ts (autopilotStalled) — keep the threshold in sync:
+and mcp/src/index.ts (autopilotStalled); the thresholds are shared via
+schedule_state.py (index.ts mirrors by hand):
   stalled = the autopilot is configured (a complete worker set's SKILL.md
             files present — see WORKER_TASK_SETS)
             AND a draft job has sat unclaimed in pending/ past STALL_SECONDS.
@@ -46,14 +47,10 @@ import identity  # noqa: E402  (lives next to this file in scripts/)
 
 s4l_env.mirror()
 
-# Keep in sync with AUTOPILOT_STALL_SECONDS (menubar) / AUTOPILOT_STALL_MS (index.ts).
-STALL_SECONDS = 1200
-# A job CLAIMED but never finished (sits in running/ this long) means a worker
-# picked it up and then died mid-run — the claude -p drafting child never came up
-# or crashed. Must be generous enough to clear the longest real drafting turn so a
-# healthy run never trips it. Keep in sync with AUTOPILOT_RUNNING_STALL_SECONDS
-# (menubar). See _oldest_running_age.
-RUNNING_STALL_SECONDS = 1200
+# Stall thresholds live in schedule_state.py (HEALTHY_DRAIN_MAX_SECONDS and the
+# names derived from it) — retune there, not here. STALL_SECONDS = pending job
+# unclaimed; RUNNING_STALL_SECONDS = claimed but wedged (see _oldest_running_age).
+from schedule_state import STALL_SECONDS, RUNNING_STALL_SECONDS  # noqa: E402
 # Require the stall to persist this many consecutive checks before paging, so a
 # transient slow claim (e.g. right after a Claude restart) doesn't false-alarm.
 # At StartInterval 120 that is ~6 min of continuous stall.

package/scripts/schedule_state.py

@@ -94,6 +94,29 @@ def _registry_worker_recs(by_id):
 # false "not scheduled".
 FIRING_WINDOW = 420
 
+# --- Stall thresholds (single source of truth) --------------------------------
+# The longest a fully healthy drain can take end to end: a draft job can wait
+# minutes for a worker slot (per-minute scheduler cadence, workers busy on other
+# jobs) and the drafting turn itself runs multiple minutes. Observed healthy
+# episodes reach 8-10 min (2026-07-13); alarm at 20 min for margin. Every stall
+# detector derives from this ONE number so they can't drift apart again (99e695bf
+# retuned the two per-state timers to 1200s but left the end-to-end DRAFT_STUCK
+# check at 300s, which then false-alarmed on healthy 8-minute drains). The Node
+# server can't import this module — mcp/src/index.ts::AUTOPILOT_STALL_MS must be
+# kept in sync by hand.
+HEALTHY_DRAIN_MAX_SECONDS = 1200
+
+# A pending draft job unclaimed this long: no routine is draining the queue
+# (an idle queue has no pending job at all, so a quiet pipeline never trips it).
+STALL_SECONDS = HEALTHY_DRAIN_MAX_SECONDS
+# A job claimed but still sitting in running/ this long: the worker picked it up
+# and then wedged mid-run (the claude -p drafting child died / never spawned).
+RUNNING_STALL_SECONDS = HEALTHY_DRAIN_MAX_SECONDS
+# The producer's "drafting Nm" label alive this long: the end-to-end clock. This
+# is the only timer that spans claim→die→requeue churn loops, which reset the two
+# per-state timers above on every transition while nothing ever completes.
+DRAFT_STUCK_SECONDS = HEALTHY_DRAIN_MAX_SECONDS
+
 # Grace for a JUST-scheduled task that hasn't fired yet. When the user runs
 # "Set up draft schedule", create_scheduled_task registers both worker tasks
 # (cron "* * * * *", enabled) but lastRunAt is null until the host fires them the

package/skill/audit-dm-staleness.sh

@@ -14,7 +14,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/audit-dm-staleness-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 # HTTP-only lane (2026-06-01): both staleness UPDATEs run server-side via the
 # s4l.ai API (POST /api/v1/dms/staleness-sweep). No DATABASE_URL, no psql.

package/skill/audit-linkedin.sh

@@ -6,7 +6,7 @@
 # State: ~/.claude/social-autoposter/linkedin.killswitch
 # Clear: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear
 if [ -f "$HOME/.claude/social-autoposter/linkedin.killswitch" ]; then
-    echo "[$(date +%H:%M:%S)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
     echo "  Re-auth LinkedIn in harness Chrome, then: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear"
     exit 0
 fi

package/skill/audit-reddit-resurrect.sh

@@ -38,7 +38,7 @@ AUDIT_HELPER="$REPO_DIR/scripts/audit_helper.py"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/audit-reddit-resurrect-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" >> "$LOG_FILE"; echo "[$(date +%H:%M:%S)] $*"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" >> "$LOG_FILE"; echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*"; }
 
 RUN_START=$(date +%s)
 log "=== Reddit resurrect audit: $(date) ==="

package/skill/audit.sh

@@ -62,10 +62,10 @@ case "${PLATFORM:-all}" in
         _LI_BOOT_RC=0
         ( source "$(dirname "$0")/lib/linkedin-backend.sh"; ensure_linkedin_browser_for_backend ) || _LI_BOOT_RC=$?
         if [ "$_LI_BOOT_RC" -eq 78 ]; then
-            echo "[$(date +%H:%M:%S)] linkedin-pipeline lock: peer pipeline is driving the 9556 Chrome; skipping this fire"
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock: peer pipeline is driving the 9556 Chrome; skipping this fire"
             exit 0
         elif [ "$_LI_BOOT_RC" -ne 0 ]; then
-            echo "[$(date +%H:%M:%S)] ERROR: linkedin browser bootstrap failed (rc=$_LI_BOOT_RC)"
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: linkedin browser bootstrap failed (rc=$_LI_BOOT_RC)"
             exit "$_LI_BOOT_RC"
         fi
         ;;
@@ -84,10 +84,10 @@ case "${PLATFORM:-all}" in
         _LI_BOOT_RC=0
         ( source "$(dirname "$0")/lib/linkedin-backend.sh"; ensure_linkedin_browser_for_backend ) || _LI_BOOT_RC=$?
         if [ "$_LI_BOOT_RC" -eq 78 ]; then
-            echo "[$(date +%H:%M:%S)] linkedin-pipeline lock: peer pipeline is driving the 9556 Chrome; skipping this fire (all-platform audit)"
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock: peer pipeline is driving the 9556 Chrome; skipping this fire (all-platform audit)"
             exit 0
         elif [ "$_LI_BOOT_RC" -ne 0 ]; then
-            echo "[$(date +%H:%M:%S)] ERROR: linkedin browser bootstrap failed (rc=$_LI_BOOT_RC)"
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: linkedin browser bootstrap failed (rc=$_LI_BOOT_RC)"
             exit "$_LI_BOOT_RC"
         fi
         python3 "$REPO_DIR_FOR_LOCK/scripts/reddit_browser_lock.py" acquire --timeout 3600 --ttl 90 2>&1 || \
@@ -113,7 +113,7 @@ mkdir -p "$LOG_DIR"
 LOG_TAG="${PLATFORM:-all}"
 LOG_FILE="$LOG_DIR/audit-${LOG_TAG}-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" >> "$LOG_FILE"; echo "[$(date +%H:%M:%S)] $*"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" >> "$LOG_FILE"; echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*"; }
 
 RUN_START=$(date +%s)
 log "=== Audit Pipeline Run (${LOG_TAG}): $(date) ==="

package/skill/dm-outreach-linkedin.sh

@@ -12,7 +12,7 @@ set -euo pipefail
 # State: ~/.claude/social-autoposter/linkedin.killswitch
 # Clear: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear
 if [ -f "$HOME/.claude/social-autoposter/linkedin.killswitch" ]; then
-    echo "[$(date +%H:%M:%S)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
     echo "  Re-auth LinkedIn in harness Chrome, then: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear"
     exit 0
 fi
@@ -37,10 +37,10 @@ acquire_lock "linkedin-browser" 3600
 _LI_BOOT_RC=0
 ensure_linkedin_browser_for_backend || _LI_BOOT_RC=$?
 if [ "$_LI_BOOT_RC" -eq 78 ]; then
-    echo "[$(date +%H:%M:%S)] linkedin-pipeline lock: peer pipeline is driving the 9556 Chrome; skipping this fire"
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock: peer pipeline is driving the 9556 Chrome; skipping this fire"
     exit 0
 elif [ "$_LI_BOOT_RC" -ne 0 ]; then
-    echo "[$(date +%H:%M:%S)] ERROR: linkedin browser bootstrap failed (rc=$_LI_BOOT_RC)"
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: linkedin browser bootstrap failed (rc=$_LI_BOOT_RC)"
     exit "$_LI_BOOT_RC"
 fi
 acquire_lock "dm-outreach-linkedin" 2700
@@ -56,7 +56,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/dm-outreach-linkedin-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== LinkedIn DM Outreach Run: $(date) ==="

package/skill/dm-outreach-reddit.sh

@@ -50,7 +50,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/dm-outreach-reddit-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== Reddit DM Outreach Run: $(date) ==="

package/skill/dm-outreach-twitter.sh

@@ -44,7 +44,7 @@ SKILL_FILE="$REPO_DIR/SKILL.md"
 # dm-outreach-linkedin.sh (migrated 2026-05-12).
 # (LOG_DIR/LOG_FILE bootstrapped at top of script.)
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== Twitter DM Outreach Run: $(date) ==="

package/skill/engage-dm-replies.sh

@@ -35,7 +35,7 @@ fi
 # State: ~/.claude/social-autoposter/linkedin.killswitch
 # Clear: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear
 if [ "$PLATFORM" = "linkedin" ] && [ -f "$HOME/.claude/social-autoposter/linkedin.killswitch" ]; then
-    echo "[$(date +%H:%M:%S)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn DM-replies pipeline."
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn DM-replies pipeline."
     echo "  Re-auth LinkedIn in harness Chrome, then: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear"
     exit 0
 fi
@@ -116,7 +116,7 @@ LOG_SUFFIX=""
 [ -n "$PLATFORM" ] && LOG_SUFFIX="-$PLATFORM"
 LOG_FILE="$LOG_DIR/engage-dm-replies${LOG_SUFFIX}-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== DM Reply Engagement Run: $(date) (platform: ${PLATFORM:-all}) ==="

package/skill/engage-linkedin.sh

@@ -17,7 +17,7 @@ set -euo pipefail
 # State: ~/.claude/social-autoposter/linkedin.killswitch
 # Clear: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear
 if [ -f "$HOME/.claude/social-autoposter/linkedin.killswitch" ]; then
-    echo "[$(date +%H:%M:%S)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
     echo "  Re-auth LinkedIn in harness Chrome, then: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear"
     exit 0
 fi
@@ -84,7 +84,7 @@ LOG_FILE="$LOG_DIR/engage-linkedin-$(date +%Y-%m-%d_%H%M%S).log"
 BATCH_ID="enli-$(date +%Y%m%d_%H%M%S)-$$"
 export SA_CYCLE_ID="$BATCH_ID"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== LinkedIn Engagement Run: $(date) ==="

package/skill/engage-moltbook.sh

@@ -23,7 +23,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/engage-moltbook-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== MoltBook Engage Run: $(date) ==="

package/skill/engage-twitter.sh

@@ -25,12 +25,12 @@ source "$(dirname "$0")/lock.sh"
 # Sets MCP_CONFIG_FILE, BROWSER_INSTRUCTIONS, exports TWITTER_CDP_URL=9555.
 source "$(dirname "$0")/lib/twitter-backend.sh"
 
-echo "[$(date +%H:%M:%S)] Acquiring twitter-browser lock (pid=$$)..." | tee -a "$LOG_FILE"
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Acquiring twitter-browser lock (pid=$$)..." | tee -a "$LOG_FILE"
 acquire_lock "twitter-browser" 3600 2>>"$LOG_FILE"
-echo "[$(date +%H:%M:%S)] twitter-browser lock held (pid=$$)" | tee -a "$LOG_FILE"
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] twitter-browser lock held (pid=$$)" | tee -a "$LOG_FILE"
 # Probe + launch harness Chrome on port 9555 if needed, then sweep leftover tabs.
 ensure_twitter_browser_for_backend 2>&1 | tee -a "$LOG_FILE"
-echo "[$(date +%H:%M:%S)] Acquiring twitter (pipeline) lock (pid=$$)..." | tee -a "$LOG_FILE"
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Acquiring twitter (pipeline) lock (pid=$$)..." | tee -a "$LOG_FILE"
 acquire_lock "twitter" 3600 2>>"$LOG_FILE"
 
 # Load secrets
@@ -47,7 +47,7 @@ BATCH_SIZE=500
 ENGAGE_TWITTER_HELPER="$REPO_DIR/scripts/engage_twitter_helper.py"
 # (LOG_DIR/LOG_FILE bootstrapped at top of script.)
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== Twitter Engagement Run: $(date) ==="

package/skill/github-engage.sh

@@ -20,7 +20,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/github-engage-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 # Per-cycle batch id stamped onto every claude_sessions row spawned by this
 # engagement run (via SA_CYCLE_ID env -> log_claude_session.py). 2026-05-10

package/skill/link-edit-github.sh

@@ -30,7 +30,7 @@ LE_HELPER="$REPO_DIR/scripts/link_edit_helper.py"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/link-edit-github-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== GitHub Link Edit Run: $(date) ==="

package/skill/link-edit-moltbook.sh

@@ -29,7 +29,7 @@ LE_HELPER="$REPO_DIR/scripts/link_edit_helper.py"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/link-edit-moltbook-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== Moltbook Link Edit Run: $(date) ==="

package/skill/link-edit-reddit.sh

@@ -38,7 +38,7 @@ LE_HELPER="$REPO_DIR/scripts/link_edit_helper.py"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/link-edit-reddit-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== Reddit Link Edit Run: $(date) ==="

package/skill/lock.sh

@@ -121,11 +121,11 @@ if [ -z "${_SA_LOCK_DIRS+x}" ]; then
       # is defect "owner=OTHER" (wipes a live peer's lock -> double-hold).
       if _sa_we_own_lock "$d"; then
         _sa_lock_event trap_rm "$_lname" "$(_sa_lock_owner_tag "$d")"
-        echo "[lock] trap-released $_lname pid=$$ at $(date +%H:%M:%S)" >&2
+        echo "[lock] trap-released $_lname pid=$$ at $(date -u +%Y-%m-%dT%H:%M:%SZ)" >&2
         rm -rf "$d"
       else
         _sa_lock_event trap_rm_skipped "$_lname" "$(_sa_lock_owner_tag "$d")"
-        echo "[lock] trap-release SKIPPED $_lname pid=$$ (not owner) at $(date +%H:%M:%S)" >&2
+        echo "[lock] trap-release SKIPPED $_lname pid=$$ (not owner) at $(date -u +%Y-%m-%dT%H:%M:%SZ)" >&2
       fi
     done
     for t in ${_SA_LOCK_TICKETS[@]+"${_SA_LOCK_TICKETS[@]}"}; do
@@ -149,7 +149,7 @@ if [ -z "${_SA_LOCK_DIRS+x}" ]; then
   _sa_exit_on_signal() {
     local _sig="$1" _code="$2"
     _sa_lock_event signal_exit "-" "signal=$_sig"
-    echo "[lock] caught SIG${_sig} pid=$$; releasing locks and exiting $_code at $(date +%H:%M:%S)" >&2
+    echo "[lock] caught SIG${_sig} pid=$$; releasing locks and exiting $_code at $(date -u +%Y-%m-%dT%H:%M:%SZ)" >&2
     _sa_release_locks
     trap - EXIT
     exit "$_code"
@@ -247,7 +247,7 @@ acquire_lock() {
           [ "$_existing" != "$ticket_file" ] && _new_t+=("$_existing")
         done
         _SA_LOCK_TICKETS=(${_new_t[@]+"${_new_t[@]}"})
-        echo "[lock] acquired $name pid=$$ at $(date +%H:%M:%S) waited=${waited}s" >&2
+        echo "[lock] acquired $name pid=$$ at $(date -u +%Y-%m-%dT%H:%M:%SZ) waited=${waited}s" >&2
         _sa_lock_event acquired "$name" "waited=${waited}s"
         break
       fi
@@ -694,10 +694,10 @@ release_lock() {
   if _sa_we_own_lock "$lock_dir"; then
     _sa_lock_event release "$name" "$(_sa_lock_owner_tag "$lock_dir")"
     rm -rf "$lock_dir"
-    echo "[lock] released $name pid=$$ at $(date +%H:%M:%S)" >&2
+    echo "[lock] released $name pid=$$ at $(date -u +%Y-%m-%dT%H:%M:%SZ)" >&2
   else
     _sa_lock_event release_skipped "$name" "$(_sa_lock_owner_tag "$lock_dir")"
-    echo "[lock] release SKIPPED $name pid=$$ (not owner) at $(date +%H:%M:%S)" >&2
+    echo "[lock] release SKIPPED $name pid=$$ (not owner) at $(date -u +%Y-%m-%dT%H:%M:%SZ)" >&2
   fi
   # Rebuild the lock stack without this entry so the EXIT trap doesn't try to
   # rm it again (harmless, but keeps the stack honest if release_lock is paired

package/skill/precompute-stats.sh

@@ -31,5 +31,5 @@ python3 "$REPO_DIR/scripts/precompute_dashboard_stats.py"
 EXIT_CODE=$?
 RUN_ELAPSED=$(( $(date +%s) - RUN_START ))
 
-echo "[$(date +%H:%M:%S)] === done in ${RUN_ELAPSED}s (exit=${EXIT_CODE}) ==="
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] === done in ${RUN_ELAPSED}s (exit=${EXIT_CODE}) ==="
 exit "$EXIT_CODE"

package/skill/run-instagram-render.sh

@@ -43,7 +43,7 @@ if [ -f "$REPO_DIR/.env" ]; then
   set +a
 fi
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 # Run accounting for dashboard Job History (Render · Instagram). Matches the
 # pattern in run-instagram-daily.sh / run-twitter-threads.sh / run-reddit-threads.sh:

package/skill/run-linkedin.sh

@@ -85,7 +85,7 @@ LINKEDIN_BACKEND="${LINKEDIN_BACKEND:-browser}"
 # Clear: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear
 # Only gates the browser backend — UniPile has no headed session to compromise.
 if [ "$LINKEDIN_BACKEND" = "browser" ] && [ -f "$HOME/.claude/social-autoposter/linkedin.killswitch" ]; then
-    echo "[$(date +%H:%M:%S)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
     echo "  Re-auth LinkedIn in harness Chrome, then: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear"
     exit 0
 fi

package/skill/run-reddit-search.sh

@@ -43,7 +43,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/run-reddit-search-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 log "=== Reddit Search Post Run: $(date) ==="
 
@@ -88,7 +88,7 @@ _parse_post_results() {
         # Bug observed 2026-05-08: a leaked "[14:57:04] Post phase: ..." line
         # produced "TOTAL_POSTED + [14:57:04]: syntax error" and `set -e` aborted
         # the script BEFORE the discover lane ran.
-        echo "[$(date +%H:%M:%S)] Post phase: exit code $rc; counting as failed." >> "$LOG_FILE"
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Post phase: exit code $rc; counting as failed." >> "$LOG_FILE"
         echo "0 1"
     fi
 }

package/skill/run-reddit-threads.sh

@@ -33,7 +33,7 @@ RUN_START_EPOCH=$(date +%s)
 # calls added in 5e41d96 (2026-05-10) fall through to macOS /usr/bin/log,
 # which barfs `Unknown subcommand` and ERR-traps the run at exit=64 before
 # the browser lease is ever acquired (silent kill since 2026-05-10).
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 # Diagnostic: log the failing line and command before set -e kills the script.
 # Without this, silent deaths (e.g., Claude exits non-zero inside the $() below)

package/skill/run-twitter-cycle.sh

@@ -174,7 +174,7 @@ if [ -f "$REPO_DIR/.env" ]; then
     set +a
 fi
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 log "=== Twitter Cycle (batch=$BATCH_ID): $(date) ==="
 log "Logic=D (no-ripen + 1h freshness + 2k_view_cap; experiment concluded 2026-05-31); discover_freshness=${FRESHNESS_HOURS_DISCOVER}h"

package/skill/stats-linkedin.sh

@@ -55,7 +55,7 @@ set -euo pipefail
 # State: ~/.claude/social-autoposter/linkedin.killswitch
 # Clear: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear
 if [ -f "$HOME/.claude/social-autoposter/linkedin.killswitch" ]; then
-    echo "[$(date +%H:%M:%S)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
     echo "  Re-auth LinkedIn in harness Chrome, then: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear"
     exit 0
 fi
@@ -85,7 +85,7 @@ SCRAPER_TIMEOUT_SEC=900   # 15min outer gtimeout. Inner JS deadline now defaults
 
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/stats-linkedin-$(date +%Y-%m-%d_%H%M%S).log"
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== LinkedIn Stats Run (unified): $(date) ==="

package/skill/stats.sh

@@ -87,7 +87,7 @@ mkdir -p "$LOG_DIR"
 LOG_TAG="${PLATFORM:-all}"
 LOGFILE="$LOG_DIR/stats-${LOG_TAG}-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" >> "$LOGFILE"; echo "[$(date +%H:%M:%S)] $*"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" >> "$LOGFILE"; echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*"; }
 
 RUN_START=$(date +%s)
 STEP1_EXIT=0; STEP2_EXIT=0; STEP3_EXIT=0; STEP4_EXIT=0