@m13v/s4l 1.7.6-rc.26 → 1.7.6-rc.28

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.6-rc.26",
-  "installedAt": "2026-07-17T23:10:55.248Z"
+  "version": "1.7.6-rc.28",
+  "installedAt": "2026-07-17T23:30:24.991Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.6-rc.26",
+  "version": "1.7.6-rc.28",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.6-rc.26",
+  "version": "1.7.6-rc.28",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.6-rc.26",
+  "version": "1.7.6-rc.28",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",

package/scripts/amplitude_24h_signups.py

@@ -80,7 +80,13 @@ import zipfile
 from datetime import datetime, timedelta, timezone
 
 REPO_ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-CONFIG_PATH = os.path.join(REPO_ROOT, "config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 ENV_PATH = os.path.join(REPO_ROOT, ".env")
 CACHE_DIR = os.path.join(REPO_ROOT, "skill", "cache")
 CACHE_PATH = os.path.join(CACHE_DIR, "amplitude_24h_signups.json")
@@ -110,9 +116,6 @@ def load_env():
                 os.environ.setdefault(k.strip(), v.strip())
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def keychain_get(name):

package/scripts/amplitude_signups.py

@@ -29,7 +29,13 @@ import urllib.request
 from datetime import datetime, timedelta, timezone
 
 REPO_ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-CONFIG_PATH = os.path.join(REPO_ROOT, "config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 ENV_PATH = os.path.join(REPO_ROOT, ".env")
 API_BASE = "https://amplitude.com/api/2/events/segmentation"
 
@@ -45,9 +51,6 @@ def load_env():
                 os.environ.setdefault(k.strip(), v.strip())
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def fetch_signup_series(api_key, secret_key, signup_event, attribution_filter, start, end):

package/scripts/dm_conversation.py

@@ -42,7 +42,13 @@ import sys
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 import db as dbmod
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 
 
 def _valid_chat_url(platform, url):
@@ -76,11 +82,6 @@ def _valid_chat_url(platform, url):
     return u
 
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 def get_our_account(config, platform):

package/scripts/engage_github.py

@@ -40,7 +40,13 @@ except Exception:  # never let a missing module break the engage lane
         return ""
 
 REPO_DIR = os.path.expanduser("~/social-autoposter")
-CONFIG_PATH = os.path.join(REPO_DIR, "config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 REPLY_DB = os.path.join(REPO_DIR, "scripts", "reply_db.py")
 SKILL_FILE = os.path.join(REPO_DIR, "SKILL.md")
 
@@ -60,9 +66,6 @@ os.environ["S4L_PYTHON"] = PYTHON
 THREAD_CHAR_CAP = 12000
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def get_next_pending():

package/scripts/engage_reddit.py

@@ -27,7 +27,13 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from http_api import api_get, api_post
 
 REPO_DIR = os.path.expanduser("~/social-autoposter")
-CONFIG_PATH = os.path.join(REPO_DIR, "config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 REPLY_DB = os.path.join(REPO_DIR, "scripts", "reply_db.py")
 CAMPAIGN_BUMP = os.path.join(REPO_DIR, "scripts", "campaign_bump.py")
 REDDIT_MCP_CONFIG = os.path.expanduser("~/.claude/browser-agent-configs/reddit-agent-mcp.json")
@@ -110,9 +116,6 @@ def _release_browser_lease() -> None:
         pass
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def load_active_reddit_campaigns():

package/scripts/feedback_digest.py

@@ -312,29 +312,29 @@ CURRENT learned_preferences (shared by every project):
 CURRENT voice.never: {json.dumps(voice_never)}
 CURRENT content_guardrails.do_not: {json.dumps(guard_do_not)}{edit_examples_block}
 
-NEW REVIEW EVENTS since the last digest ({len(rejected)} rejected, {len(no_reason)} of the rejects without a stated reason, {len(approved)} approved, {len(loved)} of the approvals loved, {len(plat_removed)} platform moderation strikes):
+NEW REVIEW EVENTS since the last digest ({len(rejected)} rejected, {len(approved)} approved, {len(loved)} of the approvals loved, {len(plat_removed)} platform moderation strikes):
 {ev_lines}{overall_block}{platform_block}
 
-Categories: wrong_author = the thread's author/audience was a bad fit; off_topic = the thread itself was a bad fit; bad_draft = thread was fine but the written reply was off; other = see the note. "no_reason_given" means the user rejected without picking a category or typing a note: the rejection itself is real, but WHY is your inference from the author/thread/draft context alone, so treat it as weak evidence. It can corroborate a pattern that reasoned events already show, but a no_reason_given reject never justifies a new entry or an author block on its own, and 2+ of them agreeing still only justify an entry when the shared pattern in their context is unmistakable. "edited_before_approving" with an ORIGINAL/REWROTE pair means the user hand-corrected our draft before posting: the rewrite is a direct statement of the voice they want. Diff the pair; even a single edit that shows a clear correction (a phrase type removed, a structure replaced, tone shifted, length cut) is enough to distill into draft_style_notes, and several agreeing only make it stronger. Ignore edit content that is lead-specific or cosmetic (typo fixes, one-off facts); learn only what generalizes. "user_checked=profile_click" means the user opened the author's profile before deciding (a strong author-quality signal even without a note). "[approved+loved]" means the user picked the heart in the approve row ("this was a really good one"; approve_level_N in interactions carries the strength, 2 = best of the best): strong positive evidence for audience_prefer and thread selection, worth roughly two plain approvals.
+Categories: wrong_author = the thread's author/audience was a bad fit; off_topic = the thread itself was a bad fit; bad_draft = thread was fine but the written reply was off; other = see the note. (Rejects with no category and no note are filtered out before this prompt, so every reject below carries a real reason.) "edited_before_approving" with an ORIGINAL/REWROTE pair means the user hand-corrected our draft before posting: the rewrite is a direct statement of the voice they want. Diff the pair; even a single edit that shows a clear correction (a phrase type removed, a structure replaced, tone shifted, length cut) is enough to distill into draft_style_notes, and several agreeing only make it stronger. Ignore edit content that is lead-specific or cosmetic (typo fixes, one-off facts); learn only what generalizes. "user_checked=profile_click" means the user opened the author's profile before deciding (a strong author-quality signal even without a note). "[approved+loved]" means the user picked the heart in the approve row ("this was a really good one"; approve_level_N in interactions carries the strength, 2 = best of the best): strong positive evidence for audience_prefer and thread selection, worth roughly two plain approvals.
 
-Two-draft cards show a "did NOT pick" pair. "picked_draft_b_over_default_a" means the card offered two drafts with A preselected and the user deliberately clicked into B and approved it: a direct head-to-head preference for the picked draft over the shown alternative, evidence on par with a hand rewrite. "chose_default_a_after_trying_b" means they clicked into B (trying it as the selection) and then came back and approved A: equally explicit, the same head-to-head strength as a switch, just with the default as the winner. "kept_default_a_after_reading_b=Xs" means they kept the preselected A but spent Xs with the pointer over B first: an informed keep, weaker than either explicit choice (reading B does not prove they weighed it; treat like no_reason_given, corroborating a pattern that stronger events already show rather than founding one). "second_draft_not_read" means they approved the default without touching or reading the alternative: NO pairwise signal, never infer anything against the unread draft. A single pairwise choice is enough: diff the picked text against the not-picked one and distill WHAT differs (tone, structure, length, opener type, directness) into draft_style_notes, and several agreeing only make it stronger; the "styles:" line names each side's engagement style, useful when the same style keeps winning or losing.
+Two-draft cards show a "did NOT pick" pair. "picked_draft_b_over_default_a" means the card offered two drafts with A preselected and the user deliberately clicked into B and approved it: a direct head-to-head preference for the picked draft over the shown alternative, evidence on par with a hand rewrite. "chose_default_a_after_trying_b" means they clicked into B (trying it as the selection) and then came back and approved A: equally explicit, the same head-to-head strength as a switch, just with the default as the winner. "kept_default_a_after_reading_b=Xs" means they kept the preselected A but spent Xs with the pointer over B first: an informed keep, weaker than either explicit choice (reading B does not prove they weighed it; treat it as weak, corroborating a pattern that stronger events already show rather than founding one on its own). "second_draft_not_read" means they approved the default without touching or reading the alternative: NO pairwise signal, never infer anything against the unread draft. A single pairwise choice is enough: diff the picked text against the not-picked one and distill WHAT differs (tone, structure, length, opener type, directness) into draft_style_notes, and several agreeing only make it stronger; the "styles:" line names each side's engagement style, useful when the same style keeps winning or losing.
 
-"[platform_removed]" and "[platform_banned]" events are MACHINE-DERIVED moderation outcomes, not human card decisions; weigh them on their own track, never as a statement of the reviewer's taste. platform_removed means a moderator or platform filter removed one of our posts: the lesson is the CONTENT pattern (what reads as promotional, off-topic, or AI-written in that kind of venue), feeding thread_avoid or draft_style_notes. One removal is one community's judgment: treat it like a reasoned reject (it may justify one narrowly-scoped entry since the moderation context states the venue and outcome explicitly), and generalize only when 2+ removals share a pattern. platform_banned means a community blocked our account outright: the strongest platform-side evidence, but the specific venue is ALREADY hard-blocked by the pipeline, so never spend an entry naming an individual community; the only lesson worth an entry is a venue TYPE pattern (e.g. what kinds of communities keep rejecting us) once 2+ bans or removals show it. Platform events never justify block_authors (there is no author at fault) and never touch audience_prefer.
+"[platform_removed]" and "[platform_banned]" events are MACHINE-DERIVED moderation outcomes, not human card decisions; weigh them on their own track, never as a statement of the reviewer's taste. platform_removed means a moderator or platform filter removed one of our posts: the lesson is the CONTENT pattern (what reads as promotional, off-topic, or AI-written in that kind of venue), feeding thread_avoid or draft_style_notes. A removal is a hard, machine-known fact (not an inferred taste signal), so a SINGLE removal is enough: treat it like a reasoned reject and distill the content-pattern lesson right away, since the moderation context states the venue and outcome explicitly; more removals sharing a pattern only make it stronger. platform_banned means a community blocked our account outright: the strongest platform-side evidence, but the specific venue is ALREADY hard-blocked by the pipeline, so never spend an entry naming an individual community; the only lesson worth an entry is a venue TYPE pattern (e.g. what kinds of communities keep rejecting us), and a single ban or removal is enough to name that TYPE. Platform events never justify block_authors (there is no author at fault) and never touch audience_prefer.
 
 You can also block SPECIFIC authors via the plan's block_authors list. A block is a permanent hard exclusion of that one handle from all future thread selection, so it is YOUR judgment call, never automatic. Block when the evidence is strong: a wrong_author reject IS a direct human statement about that author (especially with profile_click), and the author context (author_followers, their post, found_via_topic) or the user's note confirms the account itself was the problem rather than the topic. Do NOT block when the reject looks topic-driven (off_topic/bad_draft on a reasonable account) or when you are unsure; the generalizable TYPE entry in audience_avoid is the softer tool for that.
 
 Propose changes to the block. RULES, in priority order:
 1. Be conservative. Prefer NO changes over speculative ones. An empty plan is a good plan when the evidence is thin.
-2. A SINGLE reasoned event is enough to justify an entry; you do NOT need multiple events agreeing. When a reject carries a category, a note, a profile-click, or clear author/thread context, or an approval is loved, or the user edited the draft, or they made an explicit two-draft choice, distill the lesson right away into the most fitting list, generalized to the TYPE (never an individual handle or a one-off fact). More events agreeing only make the pattern stronger; they are not a precondition. OVERALL FEEDBACK lines are explicit user instructions that outrank inferred signals; reflect each one even from a single line, rewritten as a standing preference. The one exception is no_reason_given rejects, which stay weak (see below), because there the WHY is unknown, not because the count is low.
+2. A SINGLE reasoned event is enough to justify an entry; you do NOT need multiple events agreeing. When a reject carries a category, a note, a profile-click, or clear author/thread context, or an approval is loved, or the user edited the draft, or they made an explicit two-draft choice, distill the lesson right away into the most fitting list, generalized to the TYPE (never an individual handle or a one-off fact). More events agreeing only make the pattern stronger; they are not a precondition. OVERALL FEEDBACK lines are explicit user instructions that outrank inferred signals; reflect each one even from a single line, rewritten as a standing preference.
 3. Describe author/audience TYPES, never individual handles. "crypto/web3-native accounts shilling tokens" is right; "@someguy" is wrong. Preferences must generalize.
 4. Approvals are counter-evidence. If approvals contradict an existing entry, propose removing or narrowing it. Also propose removing entries that events show are stale.
-5. bad_draft events feed draft_style_notes (or, ONLY for a clearly recurring phrasing complaint, voice_never_add / guardrails_do_not_add; use those sparingly, they touch curated fields).
+5. bad_draft events feed draft_style_notes (or, for a clearly recurring phrasing complaint, voice_never_add / guardrails_do_not_add). voice.never and content_guardrails.do_not are the CURRENT project's curated fields, shown above; you may ADD to them and also REMOVE entries (voice_never_remove / guardrails_do_not_remove) when an approval or the user's feedback shows an entry is now wrong or stale. There is no cap. remove values must match an existing entry exactly.
 6. Keep each entry plain language, no em dashes, no hashtags, understandable a month from now without these events. There is NO length or per-list count cap. A draft_style_notes entry SHOULD embed a short before/after fragment from the edit examples when one fits (e.g. rewrote 'X' to 'Y'); that anchor is the only way the concrete rewrite reaches the drafting model. audience_avoid, audience_prefer, and thread_avoid stay short type descriptions with no example.
 7. Never propose a note that tells the writer to drop, strip, omit, or leave out the product link or url, or to remove trailing punctuation. Those contradict the tail-link bridge feature and are auto-rejected on write, so spend no entry on them even if an edit example shows the user deleting a link.
 8. Scope check (this block is shared across every project): before proposing an entry, ask whether it would still make sense read from a totally different product's cards. If it only makes sense for "{project.get('name')}" specifically, don't add it.
 
 OUTPUT: a single JSON object, nothing else. Schema:
-{{"changes": {{"audience_avoid": {{"add": [], "remove": []}}, "audience_prefer": {{"add": [], "remove": []}}, "thread_avoid": {{"add": [], "remove": []}}, "draft_style_notes": {{"add": [], "remove": []}}}}, "voice_never_add": [], "guardrails_do_not_add": [], "block_authors": [{{"handle": "somehandle", "reason": "one short sentence citing the evidence"}}], "rationale": "one short sentence"}}
+{{"changes": {{"audience_avoid": {{"add": [], "remove": []}}, "audience_prefer": {{"add": [], "remove": []}}, "thread_avoid": {{"add": [], "remove": []}}, "draft_style_notes": {{"add": [], "remove": []}}}}, "voice_never_add": [], "voice_never_remove": [], "guardrails_do_not_add": [], "guardrails_do_not_remove": [], "block_authors": [{{"handle": "somehandle", "reason": "one short sentence citing the evidence"}}], "rationale": "one short sentence"}}
 "remove" values must match existing entries EXACTLY. Omit empty keys if you like; an all-empty plan means "no changes"."""
 
 
@@ -492,6 +492,24 @@ def digest_project(project: dict, platform: str, dry_run: bool,
             f"count={len(no_reason)} threshold={BULK_NO_REASON_THRESHOLD} "
             f"event_ids=[{ids}] (volume signal, logged regardless of whether "
             "the digest model finds a shared textual pattern below)")
+    # no_reason_given rejects (no category, no note): the user rejected but left
+    # no learnable reason, so DROP them from the digest entirely (2026-07-17 user
+    # rule). Mark them processed so they never clog the small fetch window, then
+    # remove them from the working set before any actionability / prompt logic.
+    if no_reason:
+        nr_ids = [int(e["id"]) for e in no_reason
+                  if isinstance(e.get("id"), int) or str(e.get("id", "")).isdigit()]
+        if nr_ids and not dry_run:
+            try:
+                api_patch("/api/v1/review-events",
+                          {"ids": nr_ids, "action": "mark_processed",
+                           "processed_batch": f"digest-noreason-{_now_stamp()}"})
+            except Exception as e:
+                log(f"project={name} no_reason_mark_processed_failed={e}")
+        log(f"project={name} platform={platform} ignored_no_reason={len(no_reason)} "
+            "(not processed into learnings)")
+        _drop = {id(e) for e in no_reason}
+        events = [e for e in events if id(e) not in _drop]
     if not overall_events and not platform_events and not any(_is_actionable(e) for e in events):
         log(f"project={name} platform={platform} events={len(events)} "
             "plain_approvals_only, no digest (they ride along with the next actionable event)")

package/scripts/find_threads.py

@@ -29,14 +29,15 @@ except Exception:
     def _resolve_account(_platform):  # type: ignore[unused-arg]
         return None
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 def fetch_json(url, headers=None, user_agent="social-autoposter/1.0"):

package/scripts/github_tools.py

@@ -36,12 +36,15 @@ def _github_account_filter():
         return (" AND our_account = %s", [h])
     return ("", [])
 
-CONFIG_PATH = os.path.join(os.path.dirname(os.path.abspath(__file__)), "..", "config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config as _load_config
+CONFIG_PATH = _canonical_config_path()
 
 
-def _load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def _excluded_repos_and_authors(config):

package/scripts/learned_preferences.py

@@ -26,10 +26,13 @@ The feedback loop:
      GLOBAL_LEARNED_PREFS_JSON (the 'Global learned preferences' line under
      PROJECT ROUTING; per-project stamping retired 2026-07-14), so the block
      (with its self-describing _instruction) reaches the judging/drafting
-     model automatically. `history` is stripped at prompt-build time: it is
-     a config.json-only audit changelog with no reader in any prompt.
-     prompt_block() renders the same content for callers that want an
-     explicit section instead of the raw embed.
+     model automatically. prompt_block() renders the same content for callers
+     that want an explicit section instead of the raw embed.
+
+     Audit history is NOT in the block: it lives in the sidecar JSONL at
+     history_path() (next to config.json), append-only, with no reader in any
+     prompt. Legacy in-config `history` is auto-migrated to the sidecar by the
+     write paths on the first mutation after upgrade, then dropped from config.
 
 Block shape (config.json top-level key `learned_preferences_global`):
 
@@ -41,12 +44,12 @@ Block shape (config.json top-level key `learned_preferences_global`):
     "thread_avoid":      ["engagement-bait question threads ..."],
     "draft_style_notes": [],
     "edit_examples":     [{"original", "final", "ts"}],
-    "updated_at": "...",
-    "history": [{"ts", "change", "rationale", "source_events": [ids]}]
+    "updated_at": "..."
   }
+  # audit changelog -> sidecar learned_preferences_history.jsonl (not here)
 
 WHITELIST: this module writes ONLY learned_preferences_global plus
-(append-only, still per-project) voice.never and content_guardrails.do_not.
+(add + remove, still per-project) voice.never and content_guardrails.do_not.
 Nothing else in a project entry is touchable through this path; unknown keys
 in a mutation plan are dropped and counted, never applied. Facts
 (content_angle, links, identity fields) are deliberately unreachable so a
@@ -65,10 +68,7 @@ from pathlib import Path
 
 # Lists the digest may fully manage inside learned_preferences.
 MANAGED_LISTS = ("audience_avoid", "audience_prefer", "thread_avoid", "draft_style_notes")
-# Existing config fields the digest may APPEND to (never remove from).
-APPEND_ONLY_FIELDS = ("voice_never_add", "guardrails_do_not_add")
 
-MAX_HISTORY = 1000
 
 # Edit examples: (original, final) pairs from the user's own card rewrites,
 # recorded DETERMINISTICALLY by feedback_digest via record_edit_examples()
@@ -138,6 +138,31 @@ def _now_iso() -> str:
     return datetime.datetime.now(datetime.timezone.utc).isoformat()
 
 
+def history_path(cfg_path: str | None = None) -> str:
+    """Sidecar audit log for learned_preferences mutations (2026-07-17). Lives
+    next to config.json as an append-only JSONL so the hot config file stays
+    lean; nothing reads it back into any prompt, it is purely a changelog."""
+    cfg_path = cfg_path or config_path()
+    return str(Path(cfg_path).with_name("learned_preferences_history.jsonl"))
+
+
+def _append_history(entries, cfg_path: str | None = None) -> None:
+    """Append audit entries to the sidecar JSONL. Best-effort: never raises into
+    the caller (a failed audit write must never fail a real mutation). Callers
+    already hold the config flock, so appends are serialized."""
+    entries = [e for e in (entries or []) if isinstance(e, dict)]
+    if not entries:
+        return
+    hp = history_path(cfg_path)
+    try:
+        Path(hp).parent.mkdir(parents=True, exist_ok=True)
+        with open(hp, "a") as f:
+            for e in entries:
+                f.write(json.dumps(e) + "\n")
+    except Exception:
+        pass
+
+
 def normalized(block) -> dict:
     """Coerce whatever is in config into the canonical block shape."""
     b = block if isinstance(block, dict) else {}
@@ -165,8 +190,9 @@ def normalized(block) -> dict:
         if isinstance(e, dict) and str(e.get("original") or "").strip() and str(e.get("final") or "").strip()
     ][:MAX_EDIT_EXAMPLES]
     out["updated_at"] = b.get("updated_at")
-    hist = b.get("history")
-    out["history"] = list(hist)[-MAX_HISTORY:] if isinstance(hist, list) else []
+    # history no longer lives in the block: it moved to the sidecar JSONL
+    # (history_path). Any legacy history still in config is flushed to the
+    # sidecar by the write paths, then dropped here on the next normalized write.
     return out
 
 
@@ -298,15 +324,18 @@ def record_edit_examples(project_name: str, pairs, cfg_path: str | None = None)
             return {"ok": True, "recorded": 0}
         block["edit_examples"] = (fresh + existing)[:MAX_EDIT_EXAMPLES]
         block["updated_at"] = _now_iso()
-        block["history"] = (block["history"] + [
-            {
-                "ts": _now_iso(),
-                "change": f"edit_examples recorded: {len(fresh)}",
-                "rationale": "user rewrote the draft on the review card",
-                "source_events": [],
-                "project": project_name,
-            }
-        ])[-MAX_HISTORY:]
+        entry = {
+            "ts": _now_iso(),
+            "change": f"edit_examples recorded: {len(fresh)}",
+            "rationale": "user rewrote the draft on the review card",
+            "source_events": [],
+            "project": project_name,
+        }
+        # Flush any legacy in-config history to the sidecar once (pre-sidecar
+        # installs), then append this entry. `block` is normalized (no history
+        # key), so the write below drops history from config.json for good.
+        legacy = (cfg.get("learned_preferences_global") or {}).get("history")
+        _append_history((legacy or []) + [entry], cfg_path)
         cfg["learned_preferences_global"] = block
 
         stamp = _now_iso().replace(":", "-").replace(".", "-")
@@ -393,35 +422,48 @@ def apply_mutations(project_name: str, plan: dict, source_event_ids=None, cfg_pa
                 applied.append(f"{key} added: {v}")
 
         # Append-only extensions of existing curated fields.
-        for v in _validate_add_list(plan.get("voice_never_add"), cap=3):
+        for v in _validate_add_list(plan.get("voice_never_add")):
             voice = proj.setdefault("voice", {})
             never = voice.setdefault("never", [])
             if isinstance(never, list) and v not in never:
                 never.append(v)
                 applied.append(f"voice.never added: {v}")
-        for v in _validate_add_list(plan.get("guardrails_do_not_add"), cap=3):
+        for v in _validate_add_list(plan.get("voice_never_remove")):
+            never = (proj.get("voice") or {}).get("never")
+            if isinstance(never, list) and v in never:
+                never.remove(v)
+                applied.append(f"voice.never removed: {v}")
+        for v in _validate_add_list(plan.get("guardrails_do_not_add")):
             guard = proj.setdefault("content_guardrails", {})
             do_not = guard.setdefault("do_not", [])
             if isinstance(do_not, list) and v not in do_not:
                 do_not.append(v)
                 applied.append(f"content_guardrails.do_not added: {v}")
+        for v in _validate_add_list(plan.get("guardrails_do_not_remove")):
+            do_not = (proj.get("content_guardrails") or {}).get("do_not")
+            if isinstance(do_not, list) and v in do_not:
+                do_not.remove(v)
+                applied.append(f"content_guardrails.do_not removed: {v}")
 
-        for key in set(plan.keys()) - {"changes", "voice_never_add", "guardrails_do_not_add", "rationale", "project"}:
+        for key in set(plan.keys()) - {"changes", "voice_never_add", "voice_never_remove", "guardrails_do_not_add", "guardrails_do_not_remove", "rationale", "project"}:
             dropped.append(f"unknown top-level key '{key}'")
 
         if not applied:
             return {"ok": True, "applied": [], "dropped": dropped, "project_found": True}
 
         block["updated_at"] = _now_iso()
-        block["history"] = (block["history"] + [
-            {
-                "ts": _now_iso(),
-                "change": "; ".join(applied)[:1000],
-                "rationale": rationale,
-                "source_events": list(source_event_ids or [])[:100],
-                "project": project_name,
-            }
-        ])[-MAX_HISTORY:]
+        entry = {
+            "ts": _now_iso(),
+            "change": "; ".join(applied)[:1000],
+            "rationale": rationale,
+            "source_events": list(source_event_ids or [])[:100],
+            "project": project_name,
+        }
+        # Flush any legacy in-config history to the sidecar once (pre-sidecar
+        # installs), then append this entry. `block` is normalized (no history
+        # key), so the write below drops history from config.json for good.
+        legacy = (cfg.get("learned_preferences_global") or {}).get("history")
+        _append_history((legacy or []) + [entry], cfg_path)
         cfg["learned_preferences_global"] = block
 
         # Backup + atomic replace (same shape as setup.ts applySetup).
@@ -503,7 +545,8 @@ def migrate_to_global(cfg_path: str | None = None) -> dict:
             return {"ok": True, "migrated": False, "projects_merged": [], "excluded": [], "dropped_at_cap": []}
 
         global_block = normalized(cfg.get("learned_preferences_global"))
-        merged_history = list(global_block["history"])
+        # legacy history still in raw config gets flushed to the sidecar below.
+        merged_history = list((cfg.get("learned_preferences_global") or {}).get("history") or [])
         excluded = []
         dropped_at_cap = []
         projects_merged = []
@@ -532,7 +575,7 @@ def migrate_to_global(cfg_path: str | None = None) -> dict:
                     global_block["edit_examples"].append(e)
                     existing_finals.add(e["final"])
                     touched = True
-            for h in block["history"]:
+            for h in (raw.get("history") or []) if isinstance(raw, dict) else []:
                 merged_history.append({**h, "project": pname})
                 touched = True
             if touched:
@@ -556,7 +599,7 @@ def migrate_to_global(cfg_path: str | None = None) -> dict:
             "excluded": excluded,
             "dropped_at_cap": dropped_at_cap,
         })
-        global_block["history"] = merged_history[-MAX_HISTORY:]
+        _append_history(merged_history, cfg_path)
         global_block["updated_at"] = _now_iso()
         cfg["learned_preferences_global"] = global_block
 

package/scripts/pick_project.py

@@ -25,15 +25,18 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 
 from project_topics import topics_for_project  # noqa: E402
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 
 # Rolling window (days) for inverse-recent-share weighting in pick_projects().
 RECENT_WINDOW_DAYS = 7
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def _counts_via_api(platform=None):

package/scripts/pick_thread_target.py

@@ -29,14 +29,17 @@ from datetime import datetime, timezone
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from http_api import api_get
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 DEFAULT_OWN_FLOOR_DAYS = 1
 DEFAULT_EXTERNAL_FLOOR_DAYS = 3
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def _parse_dt(s):

package/scripts/pick_twitter_thread_target.py

@@ -31,14 +31,17 @@ import sys
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from http_api import api_get  # noqa: E402
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 DEFAULT_TOPIC_FLOOR_DAYS = 2
 TWITTER_DAILY_CAP = 3      # hard global cap. user requirement, do not raise without explicit ask.
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def _fetch_picker_context(angle_window_days=14, counts_window_days=7):

package/scripts/post_github.py

@@ -146,7 +146,13 @@ except Exception:  # never let a missing module break the poster
 
 REPO_DIR = os.path.expanduser("~/social-autoposter")
 SCRIPTS = os.path.join(REPO_DIR, "scripts")
-CONFIG_PATH = os.path.join(REPO_DIR, "config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 SKILL_FILE = os.path.join(REPO_DIR, "SKILL.md")
 GITHUB_TOOLS = os.path.join(SCRIPTS, "github_tools.py")
 RUN_CLAUDE = os.path.join(SCRIPTS, "run_claude.sh")
@@ -186,9 +192,6 @@ def log(msg):
     print(f"[{datetime.now().strftime('%H:%M:%S')}] [post_github] {msg}", flush=True)
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 # ---------- Project picking & context ---------------------------------------

package/scripts/post_reddit.py

@@ -42,7 +42,13 @@ import draft_prompt_core as _dpc
 # the package instead of a nonexistent ~/social-autoposter (the same $HOME
 # hardcode class that silently no-op'd session restore on customer boxes).
 REPO_DIR = os.path.expanduser(os.environ.get("S4L_REPO_DIR") or "~/social-autoposter")
-CONFIG_PATH = os.path.join(REPO_DIR, "config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 REDDIT_BROWSER = os.path.join(REPO_DIR, "scripts", "reddit_browser.py")
 REDDIT_BROWSER_LOCK = os.path.join(REPO_DIR, "scripts", "reddit_browser_lock.py")
 REDDIT_TOOLS = os.path.join(REPO_DIR, "scripts", "reddit_tools.py")
@@ -729,9 +735,6 @@ def mark_thread_blocked(subreddit: str, abort_reason: str = "",
         print(f"[post_reddit] WARNING: could not persist thread-blocked sub r/{sub}: {e}")
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def pick_project(platform="reddit", exclude=None):

package/scripts/project_stats.py

@@ -22,7 +22,13 @@ from http_api import api_get  # noqa: E402
 from project_slugs import get_client_slug, get_booking_table  # noqa: E402
 
 ENV_PATH = os.path.expanduser("~/social-autoposter/.env")
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 
 
 def load_env():
@@ -35,9 +41,6 @@ def load_env():
                     os.environ.setdefault(k.strip(), v.strip())
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def posthog_query(api_key, project_id, event, host_filter, after_date):

package/scripts/run_moltbook_cycle.py

@@ -35,7 +35,13 @@ from project_topics import topics_for_project
 
 REPO_DIR = os.path.expanduser("~/social-autoposter")
 SCRIPTS = os.path.join(REPO_DIR, "scripts")
-CONFIG_PATH = os.path.join(REPO_DIR, "config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 SKILL_FILE = os.path.join(REPO_DIR, "SKILL.md")
 MOLTBOOK_POST = os.path.join(SCRIPTS, "moltbook_post.py")
 RUN_CLAUDE = os.path.join(SCRIPTS, "run_claude.sh")
@@ -53,9 +59,6 @@ def log(msg):
     print(f"[{datetime.now().strftime('%H:%M:%S')}] {msg}", flush=True)
 
 
-def load_config():
-    with open(CONFIG_PATH) as f:
-        return json.load(f)
 
 
 def api_key():

package/scripts/scan_dm_candidates.py

@@ -25,7 +25,13 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 import db as dbmod
 from project_topics import topics_for_project
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 # Min-word floor to promote a public reply into a DM candidate.
 # X replies are natively shorter (quote-tweets, @-mentions), so the bar is lower.
 # Reddit floor lowered to 4 on 2026-04-21 after data showed 4-9 word Reddit
@@ -114,11 +120,6 @@ TRANSIENT_SKIP_REASON_PATTERNS = (
     "%transient_browser_failure%",
 )
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 def word_count(text):

package/scripts/scan_github_replies.py

@@ -18,7 +18,13 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from http_api import api_get, api_post
 
 MIN_WORDS = 5
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 
 # NOTE: posts/replies for GitHub live under platform='github' in the DB; the
 # 'github_issues' value used here matches zero rows, so Phase A has long been a
@@ -29,11 +35,6 @@ CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
 SCAN_PLATFORM = "github_issues"
 
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 def word_count(text):

package/scripts/scan_moltbook_replies.py

@@ -35,7 +35,13 @@ from moltbook_tools import (
     MoltbookRateLimitedError,
 )
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 
 PAGE_LIMIT = 100
 MAX_PAGES = 20  # caps pagination at ~2000 items per run
@@ -46,11 +52,6 @@ MIN_WORDS = 5
 PAGE_PAUSE_SECONDS = 1.0
 
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 def word_count(text):

package/scripts/scan_reddit_replies.py

@@ -37,7 +37,13 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from http_api import api_get
 from reply_insert import insert_reply as _insert_reply
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 COOKIES_PATH = os.path.expanduser("~/.config/social-autoposter/reddit-cookies.json")
 ENGAGE_SCRIPT = os.path.expanduser("~/social-autoposter/scripts/engage_reddit.py")
 
@@ -53,11 +59,6 @@ OWN_COMMENTS_LOOKBACK_DAYS = 30  # stop once we pass this many days back
 THREAD_ID_RE = re.compile(r"/comments/([a-z0-9]+)/")
 
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 def load_cookies():

package/scripts/scan_twitter_mentions_browser.py

@@ -42,7 +42,13 @@ except Exception:
     def _resolve_account(_platform):  # type: ignore[unused-arg]
         return None
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 MIN_WORDS = 3
 OUR_HANDLE = _resolve_account("twitter")
 if not OUR_HANDLE:
@@ -61,11 +67,6 @@ REPLY_PAGE_LIMIT = 500
 REPLY_MAX_PAGES = 200  # 100k rows of headroom; plenty for the dedup cache.
 
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 def word_count(text):

package/scripts/scan_twitter_thread_followups.py

@@ -50,7 +50,13 @@ except Exception:
     def _resolve_account(_platform):  # type: ignore[unused-arg]
         return None
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 OUR_HANDLE = _resolve_account("twitter")
 if not OUR_HANDLE:
     # No hardcoded fallback: scanning/attributing under a default handle silently
@@ -72,11 +78,6 @@ REPLY_PAGE_LIMIT = 500
 PYTHON = os.environ.get("S4L_PYTHON") or sys.executable
 
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 def fetch_our_recent_x_replies(days, max_urls):

package/scripts/stats.py

@@ -337,14 +337,15 @@ from moltbook_tools import (
     MoltbookRateLimitedError,
 )
 
-CONFIG_PATH = os.path.expanduser("~/social-autoposter/config.json")
+# THE canonical config loader (scripts/config.py): S4L_CONFIG_PATH / state-dir /
+# S4L_REPO_DIR aware, mtime-cached. Replaces this file's hand-rolled loader and
+# its hardcoded config path (the S4L-4H dead-path class on customer boxes).
+import os as _cfg_os, sys as _cfg_sys
+_cfg_sys.path.insert(0, _cfg_os.path.dirname(_cfg_os.path.abspath(__file__)))
+from config import config_path as _canonical_config_path, load_config
+CONFIG_PATH = _canonical_config_path()
 
 
-def load_config():
-    if os.path.exists(CONFIG_PATH):
-        with open(CONFIG_PATH) as f:
-            return json.load(f)
-    return {}
 
 
 class HttpNotFoundError(Exception):