@m13v/s4l 1.7.4-rc.4 → 1.7.4

package/skill/engage-linkedin.sh

@@ -17,7 +17,7 @@ set -euo pipefail
 # State: ~/.claude/social-autoposter/linkedin.killswitch
 # Clear: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear
 if [ -f "$HOME/.claude/social-autoposter/linkedin.killswitch" ]; then
-    echo "[$(date +%H:%M:%S)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LINKEDIN_KILLSWITCH active. Aborting LinkedIn pipeline."
     echo "  Re-auth LinkedIn in harness Chrome, then: python3 ~/social-autoposter/scripts/linkedin_killswitch.py clear"
     exit 0
 fi
@@ -84,7 +84,7 @@ LOG_FILE="$LOG_DIR/engage-linkedin-$(date +%Y-%m-%d_%H%M%S).log"
 BATCH_ID="enli-$(date +%Y%m%d_%H%M%S)-$$"
 export SA_CYCLE_ID="$BATCH_ID"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== LinkedIn Engagement Run: $(date) ==="

package/skill/engage-moltbook.sh

@@ -23,7 +23,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/engage-moltbook-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== MoltBook Engage Run: $(date) ==="

package/skill/engage-twitter.sh

@@ -25,12 +25,12 @@ source "$(dirname "$0")/lock.sh"
 # Sets MCP_CONFIG_FILE, BROWSER_INSTRUCTIONS, exports TWITTER_CDP_URL=9555.
 source "$(dirname "$0")/lib/twitter-backend.sh"
 
-echo "[$(date +%H:%M:%S)] Acquiring twitter-browser lock (pid=$$)..." | tee -a "$LOG_FILE"
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Acquiring twitter-browser lock (pid=$$)..." | tee -a "$LOG_FILE"
 acquire_lock "twitter-browser" 3600 2>>"$LOG_FILE"
-echo "[$(date +%H:%M:%S)] twitter-browser lock held (pid=$$)" | tee -a "$LOG_FILE"
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] twitter-browser lock held (pid=$$)" | tee -a "$LOG_FILE"
 # Probe + launch harness Chrome on port 9555 if needed, then sweep leftover tabs.
 ensure_twitter_browser_for_backend 2>&1 | tee -a "$LOG_FILE"
-echo "[$(date +%H:%M:%S)] Acquiring twitter (pipeline) lock (pid=$$)..." | tee -a "$LOG_FILE"
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Acquiring twitter (pipeline) lock (pid=$$)..." | tee -a "$LOG_FILE"
 acquire_lock "twitter" 3600 2>>"$LOG_FILE"
 
 # Load secrets
@@ -47,7 +47,7 @@ BATCH_SIZE=500
 ENGAGE_TWITTER_HELPER="$REPO_DIR/scripts/engage_twitter_helper.py"
 # (LOG_DIR/LOG_FILE bootstrapped at top of script.)
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== Twitter Engagement Run: $(date) ==="

package/skill/github-engage.sh

@@ -20,7 +20,7 @@ LOG_DIR="$REPO_DIR/skill/logs"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/github-engage-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 # Per-cycle batch id stamped onto every claude_sessions row spawned by this
 # engagement run (via SA_CYCLE_ID env -> log_claude_session.py). 2026-05-10

package/skill/lib/browser-launch.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+# browser-launch.sh — the ONE way any backend spawns a harness Chrome.
+#
+# Consolidates what twitter-backend.sh and linkedin-backend.sh grew as
+# hand-rolled near-duplicates on 2026-07-13 (and reddit-backend.sh never got
+# at all). Source this from a backend lib and call:
+#
+#     launch_harness_chrome "$_chrome_bin" "$_prof_dir" <chrome arg>...
+#
+# What every launch gets, uniformly:
+#   1. CLEAN-EXIT STAMP: mark the profile's last exit as clean first, so a
+#      SIGKILLed Chrome (wedge heal, stall abort) doesn't session-restore a
+#      crashed "Aw, Snap" corpse tab on relaunch.
+#   2. NO FOCUS STEAL (macOS + .app bundle): `open -n -g` launches a NEW
+#      instance (-n: the user's personal Chrome may already be running;
+#      without it LaunchServices pokes that instance and drops our --args)
+#      without activation (-g). A directly-exec'd Chrome always activates
+#      itself and planted a window over the user's work on every relaunch.
+#      LaunchServices also parents the process outside the caller's launchd
+#      job process group — independent cover for the pgroup-reaping bug.
+#      (Tested alternatives that DON'T work: `-j` — Chrome unhides and
+#      activates itself anyway; `--no-startup-window` — the activation just
+#      moves to first-tab creation.)
+#   3. DETACHED FALLBACK (Linux / bare chromium binaries): direct exec in a
+#      NEW SESSION via os.setsid, so a transient launchd job's exit can't
+#      SIGKILL Chrome with the job's process group (2026-07-12 root cause of
+#      the kill-relaunch-foreground loop).
+launch_harness_chrome() {
+    local _bl_chrome_bin="$1"; shift
+    local _bl_prof_dir="$1"; shift
+    "${S4L_PYTHON:-python3}" -c 'import json, os, sys
+p = os.path.join(sys.argv[1], "Default", "Preferences")
+try:
+    d = json.load(open(p))
+except Exception:
+    raise SystemExit(0)
+prof = d.setdefault("profile", {})
+prof["exit_type"] = "Normal"
+prof["exited_cleanly"] = True
+json.dump(d, open(p, "w"))' "$_bl_prof_dir" 2>/dev/null || true
+    local _bl_app_bundle=""
+    case "$_bl_chrome_bin" in
+        *.app/Contents/MacOS/*) _bl_app_bundle="${_bl_chrome_bin%%/Contents/MacOS/*}" ;;
+    esac
+    if [ "$(uname -s)" = "Darwin" ] && [ -n "$_bl_app_bundle" ] && [ -d "$_bl_app_bundle" ]; then
+        open -n -g -a "$_bl_app_bundle" --args "$@" >/dev/null 2>&1 || true
+    else
+        "${S4L_PYTHON:-python3}" -c 'import os,sys
+os.setsid()
+os.execv(sys.argv[1], sys.argv[1:])' \
+            "$_bl_chrome_bin" "$@" >/dev/null 2>&1 &
+        disown
+    fi
+}

package/skill/lib/linkedin-backend.sh

@@ -154,7 +154,7 @@ cleanup_harness_tabs() {
     if ! $_probe 2>/dev/null; then
         sleep 1
         if ! $_probe 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] cleanup_harness_tabs: SKIPPED (linkedin-harness CDP /json/version unreachable after 10s+retry)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] cleanup_harness_tabs: SKIPPED (linkedin-harness CDP /json/version unreachable after 10s+retry)" >&2
             return 0
         fi
     fi
@@ -221,7 +221,7 @@ _acquire_linkedin_pipeline_lock() {
             echo "$$" > "$_LI_PIPELINE_LOCK_DIR/pid"
             echo "$_who" > "$_LI_PIPELINE_LOCK_DIR/holder"
             export _LI_PIPELINE_LOCK_HELD=1
-            echo "[$(date +%H:%M:%S)] linkedin-pipeline lock ACQUIRED by $_who (pid $$)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock ACQUIRED by $_who (pid $$)" >&2
             return 0
         fi
         local _h_pid _h_who
@@ -236,11 +236,11 @@ _acquire_linkedin_pipeline_lock() {
             return 0
         fi
         if [ -z "$_h_pid" ] || ! kill -0 "$_h_pid" 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] linkedin-pipeline lock: reclaiming stale lock (dead holder ${_h_who} pid ${_h_pid:-unknown})" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock: reclaiming stale lock (dead holder ${_h_who} pid ${_h_pid:-unknown})" >&2
             rm -rf "$_LI_PIPELINE_LOCK_DIR"
             continue
         fi
-        echo "[$(date +%H:%M:%S)] linkedin-pipeline lock: held by ${_h_who} (pid ${_h_pid}); ${_who} skipping this fire (rc=78) to avoid two drivers on the 9556 Chrome" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] linkedin-pipeline lock: held by ${_h_who} (pid ${_h_pid}); ${_who} skipping this fire (rc=78) to avoid two drivers on the 9556 Chrome" >&2
         return 78
     done
 }
@@ -271,10 +271,10 @@ ensure_linkedin_browser_for_backend() {
     if [ "${LINKEDIN_CDP_URL:-$_BH_LINKEDIN_DEFAULT_URL}" != "$_BH_LINKEDIN_DEFAULT_URL" ]; then
         local _ext_url="${LINKEDIN_CDP_URL}"
         if curl -sf --max-time 2 -o /dev/null "${_ext_url}/json/version" 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
             return 0
         fi
-        echo "[$(date +%H:%M:%S)] ERROR: LINKEDIN_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: LINKEDIN_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host." >&2
         return 1
     fi
     # Cross-pipeline whole-run lock: only one LinkedIn browser pipeline drives
@@ -288,11 +288,14 @@ ensure_linkedin_browser_for_backend() {
     _acquire_linkedin_pipeline_lock || return $?
     # Probe + launch harness Chrome on port 9556 if needed.
     if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9556/json/version 2>/dev/null; then
-        echo "[$(date +%H:%M:%S)] LinkedIn harness Chrome down on port 9556, launching..." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LinkedIn harness Chrome down on port 9556, launching..." >&2
+        # Dated relaunch stamp for central observability (see twitter-backend.sh).
+        echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) port=9556" \
+            >> "$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/logs/chrome-relaunch-events.log" 2>/dev/null || true
         local _chrome_bin
         _chrome_bin=$(_resolve_chrome_bin)
         if [ -z "$_chrome_bin" ]; then
-            echo "[$(date +%H:%M:%S)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
             return 1
         fi
         # On Linux + no display, run headless. On root, add --no-sandbox.
@@ -320,7 +323,7 @@ ensure_linkedin_browser_for_backend() {
         local _stale_pids
         _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
         if [ -n "$_stale_pids" ] && ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9556/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
             kill $_stale_pids 2>/dev/null || true
             sleep 2
             _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
@@ -330,7 +333,12 @@ ensure_linkedin_browser_for_backend() {
         # The occlusion/backgrounding flags matter: the window sits offscreen,
         # and without them Chrome stops laying out SPA-rendered content, so
         # every element measures 0x0 and clicks become impossible (2026-07-03).
-        "$_chrome_bin" \
+        # Spawn via the SHARED launcher (skill/lib/browser-launch.sh) — see
+        # that file for the clean-exit stamp + no-focus-steal + detach
+        # rationale. Do NOT hand-roll launch logic per backend.
+        # shellcheck disable=SC1091
+        source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/browser-launch.sh"
+        launch_harness_chrome "$_chrome_bin" "$_prof_dir" \
             --remote-debugging-port=9556 \
             --user-data-dir="$HOME/.claude/browser-profiles/browser-harness-linkedin" \
             --no-first-run --no-default-browser-check \
@@ -339,17 +347,16 @@ ensure_linkedin_browser_for_backend() {
             --disable-renderer-backgrounding \
             --disable-background-timer-throttling \
             "${_extra[@]}" \
-            about:blank >/dev/null 2>&1 &
-        disown
+            about:blank
         for _i in 1 2 3 4 5 6 7 8 9 10 11 12; do
             curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9556/json/version 2>/dev/null && break
             sleep 1
         done
         if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9556/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] ERROR: LinkedIn harness Chrome failed to start within 12s" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: LinkedIn harness Chrome failed to start within 12s" >&2
             return 1
         fi
-        echo "[$(date +%H:%M:%S)] LinkedIn harness Chrome up on port 9556" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] LinkedIn harness Chrome up on port 9556" >&2
     fi
     # Always close leftover tabs from prior runs. Safe under acquire_lock
     # "linkedin-browser" serialization.
@@ -384,7 +391,7 @@ _linkedin_session_detect_gate() {
     "$_py" "$HOME/social-autoposter/scripts/linkedin_killswitch.py" detect-gate \
         --cdp-url "${LINKEDIN_CDP_URL:-$_BH_LINKEDIN_DEFAULT_URL}" >&2 || _rc=$?
     if [ "$_rc" = "2" ]; then
-        echo "[$(date +%H:%M:%S)] detect-gate tripped the LinkedIn killswitch; aborting this fire" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] detect-gate tripped the LinkedIn killswitch; aborting this fire" >&2
         return 1
     fi
     return 0

package/skill/lib/reddit-backend.sh

@@ -123,7 +123,7 @@ cleanup_harness_tabs() {
     if ! $_probe 2>/dev/null; then
         sleep 1
         if ! $_probe 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] cleanup_harness_tabs: SKIPPED (reddit-harness CDP /json/version unreachable after 10s+retry)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] cleanup_harness_tabs: SKIPPED (reddit-harness CDP /json/version unreachable after 10s+retry)" >&2
             return 0
         fi
     fi
@@ -156,19 +156,19 @@ ensure_reddit_browser_for_backend() {
     if [ "${REDDIT_CDP_URL:-$_BH_REDDIT_DEFAULT_URL}" != "$_BH_REDDIT_DEFAULT_URL" ]; then
         local _ext_url="${REDDIT_CDP_URL}"
         if curl -sf --max-time 2 -o /dev/null "${_ext_url}/json/version" 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
             return 0
         fi
-        echo "[$(date +%H:%M:%S)] ERROR: REDDIT_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: REDDIT_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host." >&2
         return 1
     fi
     # Probe + launch harness Chrome on port 9557 if needed.
     if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9557/json/version 2>/dev/null; then
-        echo "[$(date +%H:%M:%S)] Reddit harness Chrome down on port 9557, launching..." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Reddit harness Chrome down on port 9557, launching..." >&2
         local _chrome_bin
         _chrome_bin=$(_resolve_chrome_bin)
         if [ -z "$_chrome_bin" ]; then
-            echo "[$(date +%H:%M:%S)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
             return 1
         fi
         # On Linux + no display, run headless. On root, add --no-sandbox.
@@ -196,30 +196,36 @@ ensure_reddit_browser_for_backend() {
         local _stale_pids
         _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
         if [ -n "$_stale_pids" ] && ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9557/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
             kill $_stale_pids 2>/dev/null || true
             sleep 2
             _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
             [ -n "$_stale_pids" ] && { kill -9 $_stale_pids 2>/dev/null || true; sleep 1; }
             rm -f "$_prof_dir/SingletonLock" "$_prof_dir/SingletonSocket" "$_prof_dir/SingletonCookie" 2>/dev/null || true
         fi
-        "$_chrome_bin" \
+        # Spawn via the SHARED launcher (skill/lib/browser-launch.sh): clean-
+        # exit stamp (no Aw-Snap restore), `open -n -g` on macOS (no focus
+        # steal, out of this job's pgroup), setsid exec fallback elsewhere.
+        # This backend previously used a bare exec and had NONE of those
+        # protections (2026-07-13 consolidation).
+        # shellcheck disable=SC1091
+        source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/browser-launch.sh"
+        launch_harness_chrome "$_chrome_bin" "$_prof_dir" \
             --remote-debugging-port=9557 \
             --user-data-dir="$HOME/.claude/browser-profiles/reddit-harness" \
             --no-first-run --no-default-browser-check \
             --disable-features=ChromeWhatsNewUI \
             "${_extra[@]}" \
-            about:blank >/dev/null 2>&1 &
-        disown
+            about:blank
         for _i in 1 2 3 4 5 6 7 8 9 10 11 12; do
             curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9557/json/version 2>/dev/null && break
             sleep 1
         done
         if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9557/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] ERROR: Reddit harness Chrome failed to start within 12s" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: Reddit harness Chrome failed to start within 12s" >&2
             return 1
         fi
-        echo "[$(date +%H:%M:%S)] Reddit harness Chrome up on port 9557" >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Reddit harness Chrome up on port 9557" >&2
     fi
     # Always close leftover tabs from prior runs. Safe under acquire_lock
     # "reddit-browser" serialization.

package/skill/lib/twitter-backend.sh

@@ -31,6 +31,14 @@
 
 MCP_CONFIG_FILE="$HOME/.claude/browser-agent-configs/twitter-harness-mcp.json"
 
+# Repo root for the helper scripts this file shells out to, resolved from this
+# file's own location (skill/lib/ -> two up), honoring S4L_REPO_DIR when the
+# caller sets it. The old $HOME/social-autoposter hardcodes ran code OUTSIDE
+# the managed package on customer boxes (unreachable by auto-update) and
+# silently no-op'd where that directory didn't exist, so session restore and
+# tab cleanup never actually ran on such installs (S4L-4H triage 2026-07-12).
+_BH_REPO_DIR="${S4L_REPO_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)}"
+
 # Per-host env override (written by bin/cli.js when installing on an AppMaker
 # VM, where the canonical browser is Chromium on port 9222 behind the SOAX
 # residential proxy at 127.0.0.1:3003, NOT the harness Chrome on 9555). On a
@@ -130,11 +138,34 @@ cleanup_harness_tabs() {
     if ! $_probe 2>/dev/null; then
         sleep 1
         if ! $_probe 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] cleanup_harness_tabs: SKIPPED (harness CDP /json/version unreachable after 10s+retry)" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] cleanup_harness_tabs: SKIPPED (harness CDP /json/version unreachable after 10s+retry)" >&2
             return 0
         fi
     fi
-    python3 "$HOME/social-autoposter/scripts/cleanup_harness_tabs.py" 2>/dev/null || true
+    python3 "$_BH_REPO_DIR/scripts/cleanup_harness_tabs.py" 2>/dev/null || true
+}
+
+_bh_cdp_ready() {
+    # Real CDP readiness: complete an actual connect_over_cdp handshake against
+    # the harness. /json/version alone is a liveness probe that a WEDGED Chrome
+    # still passes (S4L-4H); see scripts/cdp_ready_check.py. Prints the probe's
+    # one-line JSON verdict on stdout; exit status is the verdict.
+    "${S4L_PYTHON:-python3}" "$_BH_REPO_DIR/scripts/cdp_ready_check.py" \
+        "${1:-$_BH_DEFAULT_URL}" 8000 2>/dev/null
+}
+
+_bh_record_cdp_health() {
+    # Persist the latest readiness verdict where memory_snapshot.py picks it up
+    # (cdp_health block on the per-minute heartbeat sample), so a wedge and its
+    # restart are visible centrally in installation_resource_samples without
+    # SSHing the box. $1 = action tag, $2 = the probe's JSON verdict (may be
+    # empty). Best effort, never fails the caller.
+    printf '{"ts":"%s","url":"%s","action":"%s","verdict":%s}\n' \
+        "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+        "${TWITTER_CDP_URL:-$_BH_DEFAULT_URL}" \
+        "$1" \
+        "${2:-null}" \
+        > "$_BH_REPO_DIR/skill/logs/cdp-health.json" 2>/dev/null || true
 }
 
 _resolve_chrome_bin() {
@@ -165,25 +196,96 @@ ensure_twitter_browser_for_backend() {
     if [ "${TWITTER_CDP_URL:-$_BH_DEFAULT_URL}" != "$_BH_DEFAULT_URL" ]; then
         local _ext_url="${TWITTER_CDP_URL}"
         if curl -sf --max-time 2 -o /dev/null "${_ext_url}/json/version" 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
+            # HTTP answers; verify the CDP handshake actually completes before
+            # handing this browser to the pipeline. We do NOT restart an
+            # externally-managed Chrome; fail fast so the cycle doesn't burn
+            # 180s per downstream attach against a wedged browser.
+            local _ext_verdict
+            if ! _ext_verdict=$(_bh_cdp_ready "$_ext_url"); then
+                echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: external Chrome at ${_ext_url} is WEDGED (/json/version answers but the CDP handshake never completes). Host must restart it (AppMaker /opt/startup.sh, etc)." >&2
+                echo "twitter_cdp_wedge: detected url=${_ext_url} action=none-external" >&2
+                _bh_record_cdp_health external_wedged "$_ext_verdict"
+                return 1
+            fi
+            _bh_record_cdp_health ok-external "$_ext_verdict"
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Using externally-managed Chrome at ${_ext_url} (skipping harness launch + tab cleanup)" >&2
             # Restore the Twitter login if the sandbox was substituted. AppMaker
             # Hobby-tier sandboxes have a 1h TTL; on substitution /root is reseeded
             # from /etc/skel-root and the harness profile (cookies) is wiped. This
             # re-injects the stored session from social_accounts via the HTTP API.
             # No-op when already logged in. Never blocks the cycle on failure.
-            python3 "$HOME/social-autoposter/scripts/restore_twitter_session.py" 2>&1 | sed 's/^/[restore] /' >&2 || true
+            python3 "$_BH_REPO_DIR/scripts/restore_twitter_session.py" 2>&1 | sed 's/^/[restore] /' >&2 || true
             return 0
         fi
-        echo "[$(date +%H:%M:%S)] ERROR: TWITTER_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host (AppMaker /opt/startup.sh, etc)." >&2
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: TWITTER_CDP_URL=${_ext_url} not reachable. External Chrome must be managed by host (AppMaker /opt/startup.sh, etc)." >&2
         return 1
     fi
-    # Probe + launch harness Chrome on port 9555 if needed.
+    # Probe + launch harness Chrome on port 9555 if needed. Two-stage probe:
+    # /json/version (liveness) then a real CDP handshake (readiness). A wedged
+    # Chrome passes the first and fails the second; handing it downstream made
+    # every attach eat Playwright's 180s default while holding the browser lock
+    # (S4L-4H), so it gets killed and relaunched here instead.
+    local _need_launch=0 _launch_reason=""
+    local _bh_prof_dir="$HOME/.claude/browser-profiles/browser-harness"
     if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9555/json/version 2>/dev/null; then
-        echo "[$(date +%H:%M:%S)] Harness Chrome down on port 9555, launching..." >&2
+        _need_launch=1; _launch_reason="http_down"
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Harness Chrome down on port 9555, launching..." >&2
+    else
+        local _ready_verdict
+        # TWO-STRIKE gate (2026-07-13): one failed handshake is NOT proof of a
+        # wedge. Under heavy system load (observed at loadavg ~18) a perfectly
+        # healthy Chrome blows the 8s Playwright attach budget, and a
+        # single-failure kill produced 3 false wedge-kills in one day on the
+        # operator Mac — each one a relaunch flash plus an "Aw, Snap" corpse
+        # tab from the SIGKILLed renderer. First failure: stamp a strike file
+        # and proceed WITHOUT killing (a truly wedged Chrome makes the cycle's
+        # own pre-flight fail loudly right after, so nothing silently hangs).
+        # Second consecutive failure within 30 minutes: genuinely wedged, kill
+        # + relaunch. A passing check clears any stale strike.
+        local _strike="/tmp/s4l_cdp_wedge_strike_9555"
+        if ! _ready_verdict=$(_bh_cdp_ready "$_BH_DEFAULT_URL"); then
+            if [ -z "$(find "$_strike" -mmin -30 2>/dev/null)" ]; then
+                touch "$_strike"
+                echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Harness Chrome failed the CDP handshake check (${_ready_verdict:-no verdict}); first strike — NOT killing (loaded-machine tolerance). Second consecutive failure within 30m triggers the wedge heal." >&2
+                echo "twitter_cdp_wedge: detected url=$_BH_DEFAULT_URL action=first_strike" >&2
+                _bh_record_cdp_health wedge_first_strike "$_ready_verdict"
+                # Fall through WITHOUT killing: session restore + tab cleanup
+                # below still run.
+            else
+                rm -f "$_strike" 2>/dev/null || true
+                _need_launch=1; _launch_reason="cdp_wedge"
+                echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Harness Chrome WEDGED on port 9555 (second consecutive handshake failure: ${_ready_verdict:-no verdict}); killing and relaunching..." >&2
+                # Machine-greppable marker (same stderr-marker convention as
+                # twitter_access_gate; bin/server.js parses these).
+                echo "twitter_cdp_wedge: detected url=$_BH_DEFAULT_URL action=restart" >&2
+                _bh_record_cdp_health wedge_restart "$_ready_verdict"
+                local _wedge_pids
+                _wedge_pids=$(pgrep -f -- "--user-data-dir=$_bh_prof_dir " 2>/dev/null || true)
+                if [ -n "$_wedge_pids" ]; then
+                    kill $_wedge_pids 2>/dev/null || true
+                    sleep 2
+                    _wedge_pids=$(pgrep -f -- "--user-data-dir=$_bh_prof_dir " 2>/dev/null || true)
+                    [ -n "$_wedge_pids" ] && { kill -9 $_wedge_pids 2>/dev/null || true; sleep 1; }
+                    rm -f "$_bh_prof_dir/SingletonLock" "$_bh_prof_dir/SingletonSocket" "$_bh_prof_dir/SingletonCookie" 2>/dev/null || true
+                fi
+            fi
+        else
+            # Healthy handshake — clear any earlier strike so isolated blips
+            # never accumulate into a kill.
+            rm -f "$_strike" 2>/dev/null || true
+        fi
+    fi
+    if [ "$_need_launch" = 1 ]; then
+        # Dated relaunch stamp for central observability: memory_snapshot.py
+        # counts these (chrome_relaunches block) so a kill-respawn loop like
+        # 2026-07-12's launchd pgroup reaping is visible per-install in Cloud
+        # Logging without depending on the menubar foreground observer.
+        echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) port=9555 reason=${_launch_reason}" \
+            >> "$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/logs/chrome-relaunch-events.log" 2>/dev/null || true
         local _chrome_bin
         _chrome_bin=$(_resolve_chrome_bin)
         if [ -z "$_chrome_bin" ]; then
-            echo "[$(date +%H:%M:%S)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: no Chrome/Chromium binary found. Set BH_CHROME_BIN." >&2
             return 1
         fi
         # On Linux + no display, run headless. On root, add --no-sandbox.
@@ -225,14 +327,20 @@ ensure_twitter_browser_for_backend() {
         local _stale_pids
         _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
         if [ -n "$_stale_pids" ] && ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9555/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] CDP down but Chrome still holds $_prof_dir (pids: $(echo $_stale_pids | tr '\n' ' ')); reaping stale profile owner before relaunch" >&2
             kill $_stale_pids 2>/dev/null || true
             sleep 2
             _stale_pids=$(pgrep -f -- "--user-data-dir=$_prof_dir " 2>/dev/null || true)
             [ -n "$_stale_pids" ] && { kill -9 $_stale_pids 2>/dev/null || true; sleep 1; }
             rm -f "$_prof_dir/SingletonLock" "$_prof_dir/SingletonSocket" "$_prof_dir/SingletonCookie" 2>/dev/null || true
         fi
-        "$_chrome_bin" \
+        # Spawn via the SHARED launcher (skill/lib/browser-launch.sh): clean-
+        # exit stamp (no Aw-Snap restore), `open -n -g` on macOS (no focus
+        # steal, out of this job's pgroup), setsid exec fallback elsewhere.
+        # Do NOT hand-roll launch logic per backend.
+        # shellcheck disable=SC1091
+        source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/browser-launch.sh"
+        launch_harness_chrome "$_chrome_bin" "$_prof_dir" \
             --remote-debugging-port=9555 \
             --user-data-dir="$HOME/.claude/browser-profiles/browser-harness" \
             --no-first-run --no-default-browser-check \
@@ -240,17 +348,30 @@ ensure_twitter_browser_for_backend() {
             --disable-features=ChromeWhatsNewUI,CalculateNativeWinOcclusion \
             --disable-backgrounding-occluded-windows \
             "${_extra[@]}" \
-            "${BH_LAUNCH_URL:-https://x.com}" >/dev/null 2>&1 &
-        disown
+            "${BH_LAUNCH_URL:-https://x.com}"
         for _i in 1 2 3 4 5 6 7 8 9 10 11 12; do
             curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9555/json/version 2>/dev/null && break
             sleep 1
         done
         if ! curl -sf --max-time 2 -o /dev/null http://127.0.0.1:9555/json/version 2>/dev/null; then
-            echo "[$(date +%H:%M:%S)] ERROR: harness Chrome failed to start within 12s" >&2
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: harness Chrome failed to start within 12s" >&2
+            _bh_record_cdp_health launch_failed null
+            return 1
+        fi
+        # Verify the fresh Chrome actually completes a CDP handshake before
+        # declaring victory; a relaunch that comes up wedged again should fail
+        # the cycle loudly, not feed 180s hangs downstream.
+        local _post_verdict
+        if ! _post_verdict=$(_bh_cdp_ready "$_BH_DEFAULT_URL"); then
+            echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ERROR: harness Chrome answers HTTP after relaunch but the CDP handshake is STILL failing: ${_post_verdict:-no verdict}" >&2
+            echo "twitter_cdp_wedge: detected url=$_BH_DEFAULT_URL action=relaunch_failed" >&2
+            _bh_record_cdp_health relaunch_failed "$_post_verdict"
             return 1
         fi
-        echo "[$(date +%H:%M:%S)] Harness Chrome up on port 9555" >&2
+        _bh_record_cdp_health relaunched "$_post_verdict"
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Harness Chrome up on port 9555" >&2
+    else
+        _bh_record_cdp_health ok "${_ready_verdict:-null}"
     fi
     # Re-inject the stored X session if the harness Chrome is logged out — e.g. a
     # keychain re-lock wiped Chrome's encrypted Cookies SQLite on this launch
@@ -259,7 +380,7 @@ ensure_twitter_browser_for_backend() {
     # No-op when already logged in; never blocks the cycle on failure. Runs on
     # both the freshly-launched and already-up paths so a mid-life logout heals.
     TWITTER_CDP_URL="http://127.0.0.1:9555" \
-        python3 "$HOME/social-autoposter/scripts/restore_twitter_session.py" 2>&1 \
+        python3 "$_BH_REPO_DIR/scripts/restore_twitter_session.py" 2>&1 \
         | sed 's/^/[restore] /' >&2 || true
     # Always close leftover tabs from prior runs. Safe under acquire_lock
     # "twitter-browser" serialization (every caller of this function holds
@@ -290,7 +411,7 @@ defer_if_foreign_for_backend() {
 _sa_harness_log() {
     # Use the caller's log() FUNCTION when present; `declare -F` matches only a
     # shell function, never the macOS /usr/bin/log binary (command -v would).
-    if declare -F log >/dev/null 2>&1; then log "$*"; else echo "[$(date +%H:%M:%S)] $*" >&2; fi
+    if declare -F log >/dev/null 2>&1; then log "$*"; else echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" >&2; fi
 }
 _sa_resolve_uv() {
     local c

package/skill/link-edit-github.sh

@@ -30,7 +30,7 @@ LE_HELPER="$REPO_DIR/scripts/link_edit_helper.py"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/link-edit-github-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== GitHub Link Edit Run: $(date) ==="

package/skill/link-edit-moltbook.sh

@@ -29,7 +29,7 @@ LE_HELPER="$REPO_DIR/scripts/link_edit_helper.py"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/link-edit-moltbook-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== Moltbook Link Edit Run: $(date) ==="

package/skill/link-edit-reddit.sh

@@ -38,7 +38,7 @@ LE_HELPER="$REPO_DIR/scripts/link_edit_helper.py"
 mkdir -p "$LOG_DIR"
 LOG_FILE="$LOG_DIR/link-edit-reddit-$(date +%Y-%m-%d_%H%M%S).log"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 RUN_START=$(date +%s)
 log "=== Reddit Link Edit Run: $(date) ==="

package/skill/linkedin-cadence.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+# linkedin-cadence.sh — enforce the 4-active-day / 2-day-break LinkedIn
+# posting schedule (user instruction, 2026-07-11). Fired every 15 minutes by
+# launchd (com.m13v.social-linkedin-cadence). All logic lives in
+# scripts/linkedin_cadence.py; this wrapper just logs the tick.
+
+set -uo pipefail
+export PATH="/opt/homebrew/bin:$PATH"
+
+REPO_DIR="$HOME/social-autoposter"
+LOG_DIR="$REPO_DIR/skill/logs"
+mkdir -p "$LOG_DIR"
+LOG="$LOG_DIR/linkedin-cadence.log"
+
+log() { echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*" | tee -a "$LOG" >&2; }
+
+PY="/opt/homebrew/bin/python3"
+[ -x "$PY" ] || PY="/usr/bin/python3"
+
+"$PY" "$REPO_DIR/scripts/linkedin_cadence.py" enforce >>"$LOG" 2>&1

package/skill/linkedin-presence.sh

@@ -25,7 +25,7 @@ BATCH_ID="lipres-$(date +%Y%m%d_%H%M%S)-$$"
 export SA_CYCLE_ID="$BATCH_ID"
 export S4L_PIPELINE_NAME="linkedin-presence"
 
-log() { echo "[$(date +%H:%M:%S)] $*" | tee -a "$LOG_FILE"; }
+log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] $*" | tee -a "$LOG_FILE"; }
 
 DRY_RUN="${LINKEDIN_PRESENCE_DRY_RUN:-0}"