@m13v/s4l 1.7.7-rc.3 → 1.7.7-rc.4

package/mcp/dist/repo.js

@@ -71,6 +71,18 @@ export function run(cmd, args, opts = {}) {
         catch {
             /* a spawn observer must never break the run */
         }
+        if (opts.stdin != null) {
+            // Swallow async pipe errors (e.g. EPIPE when the child exits before
+            // reading) — an unhandled stream error would crash the whole process.
+            child.stdin.on("error", () => { });
+            try {
+                child.stdin.write(opts.stdin);
+                child.stdin.end();
+            }
+            catch {
+                /* a closed stdin must never break the run */
+            }
+        }
         let stdout = "";
         let stderr = "";
         // Per-stream partial-line buffers so onLine fires on whole lines only,

package/mcp/dist/version.js

@@ -195,16 +195,63 @@ async function latestFromGithubRedirect() {
         return null;
     }
 }
+// Optional GitHub token (2026-07-30): authenticated probes get 5000/h instead
+// of the anonymous 60/h-per-IP quota that silenced the staging update banner
+// on 2026-07-13 and again on 2026-07-30. Sources, in order: GITHUB_TOKEN /
+// GH_TOKEN env, then `gh auth token` when the gh CLI exists (dev/operator
+// machines; .mcpb boxes have neither and resolve to null instantly). The token
+// is only ever sent to api.github.com, always via stdin (curl -H @-) so it
+// never appears in argv/`ps`, and the `gh auth token` shell-out is noTee so it
+// never reaches the telemetry relay. Keep in lockstep with
+// scripts/snapshot.py::_github_token.
+let ghTokCache = { at: 0, tok: null };
+const GH_TOK_TTL_MS = 900_000;
+async function githubToken() {
+    const now = Date.now();
+    if (ghTokCache.at && now - ghTokCache.at < GH_TOK_TTL_MS)
+        return ghTokCache.tok;
+    let tok = process.env.GITHUB_TOKEN || process.env.GH_TOKEN || null;
+    if (!tok) {
+        for (const gh of ["/opt/homebrew/bin/gh", "/usr/local/bin/gh", "gh"]) {
+            const res = await run(gh, ["auth", "token"], { timeoutMs: 5000, noTee: true });
+            if (res.code === -1)
+                continue; // not spawnable at this path; try the next
+            const cand = (res.stdout || "").trim();
+            if (res.code === 0 && cand)
+                tok = cand;
+            break;
+        }
+    }
+    ghTokCache = { at: now, tok };
+    return tok;
+}
 // Conditional-request state lives in the SHARED cache file (latest-release.json)
 // so the ETag survives process boundaries: short-lived MCP respawns used to pay
 // a full 200 per process; now every probe sends If-None-Match and gets a free
-// 304 between releases.
+// 304 between releases. Probes authenticate when a GitHub token is available;
+// a 401 (revoked/expired token) retries anonymously so a bad token is never
+// worse than no token.
 async function curlConditional(url, etag) {
+    const tok = await githubToken();
+    const first = await curlOnce(url, etag, tok);
+    if (first.status === 401 && tok) {
+        ghTokCache = { at: Date.now(), tok: null }; // drop the dead token
+        return curlOnce(url, etag, null);
+    }
+    return first;
+}
+async function curlOnce(url, etag, token) {
     const args = ["-sS", "-m", "10", "-H", "Accept: application/vnd.github+json"];
+    if (token)
+        args.push("-H", "@-"); // Authorization arrives via stdin, never argv
     if (etag)
         args.push("-H", `If-None-Match: ${etag}`);
     args.push("-w", "\n__CURL_STATUS__:%{http_code}\n__CURL_ETAG__:%header{etag}", url);
-    const res = await run("curl", args, { timeoutMs: 12000, noTee: true });
+    const res = await run("curl", args, {
+        timeoutMs: 12000,
+        noTee: true,
+        stdin: token ? `Authorization: Bearer ${token}` : undefined,
+    });
     let status = 0;
     let newEtag = null;
     const body = [];

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.7-rc.3",
-  "installedAt": "2026-07-30T22:30:41.307Z"
+  "version": "1.7.7-rc.4",
+  "installedAt": "2026-07-30T23:35:31.407Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.7-rc.3",
+  "version": "1.7.7-rc.4",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.7-rc.3",
+  "version": "1.7.7-rc.4",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.7-rc.3",
+  "version": "1.7.7-rc.4",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",

package/scripts/s4l_box_update.sh

@@ -73,11 +73,36 @@ channel = ch if ch in ("stable", "staging") else "stable"
 REPO = "m13v/s4l"
 TAG_DL = "https://github.com/%s/releases/download/%s/social-autoposter.mcpb"
 
-def curl(url):
+# Optional GitHub token (2026-07-30): authenticated requests get 5000/h vs the
+# anonymous 60/h-per-IP quota (which, exhausted, makes this resolver fail
+# closed). Sources: GITHUB_TOKEN / GH_TOKEN env, then `gh auth token` when the
+# gh CLI exists (boxes have neither; resolves to None instantly). Sent via
+# stdin (-H @-), never argv. Keep in lockstep with snapshot.py::_github_token.
+def gh_token():
+    tok = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN") or None
+    if not tok:
+        for gh in ("/opt/homebrew/bin/gh", "/usr/local/bin/gh", "gh"):
+            try:
+                r = subprocess.run([gh, "auth", "token"],
+                                   capture_output=True, text=True, timeout=5)
+                cand = (r.stdout or "").strip()
+                if r.returncode == 0 and cand:
+                    tok = cand
+                break
+            except FileNotFoundError:
+                continue
+            except Exception:
+                break
+    return tok
+
+def curl(url, token=None):
     try:
-        r = subprocess.run(["/usr/bin/curl", "-fsSL", "-m", "15",
-                            "-H", "Accept: application/vnd.github+json", url],
-                           capture_output=True, text=True, timeout=20)
+        args = ["/usr/bin/curl", "-fsSL", "-m", "15",
+                "-H", "Accept: application/vnd.github+json"]
+        if token:
+            args += ["-H", "@-"]
+        r = subprocess.run(args + [url], capture_output=True, text=True, timeout=20,
+                           input=("Authorization: Bearer %s" % token) if token else None)
         return r.stdout if r.returncode == 0 else ""
     except Exception:
         return ""
@@ -93,8 +118,13 @@ def ver_key(v):
     m = re.findall(r"\d+", pre)
     return (nums[0], nums[1], nums[2], 0, int(m[-1]) if m else 0)
 
+_tok = gh_token()
+_url = "https://api.github.com/repos/%s/releases?per_page=30" % REPO
+_raw = curl(_url, _tok)
+if not _raw and _tok:
+    _raw = curl(_url)  # bad token must never be worse than anonymous
 try:
-    rels = json.loads(curl("https://api.github.com/repos/%s/releases?per_page=30" % REPO) or "[]")
+    rels = json.loads(_raw or "[]")
 except Exception:
     rels = []
 best = None

package/scripts/snapshot.py

@@ -482,18 +482,69 @@ def _latest_from_github_redirect():
         return None
 
 
+# ---- optional GitHub token (2026-07-30) -----------------------------------
+# Authenticated probes get a 5000/h quota instead of the anonymous 60/h-per-IP
+# quota that silenced the staging update banner on 2026-07-13 and again on
+# 2026-07-30 (rate-limited staging probe degraded to the prerelease-blind
+# releases/latest redirect, so a staging box resolved stable and never saw the
+# rc). Sources, in order: GITHUB_TOKEN / GH_TOKEN env, then `gh auth token`
+# when the gh CLI exists (dev/operator machines; .mcpb boxes have neither and
+# resolve to None instantly). The token is only ever sent to api.github.com,
+# always via stdin (-H @-) so it never appears in `ps` or logs. Keep in
+# lockstep with mcp/src/version.ts::githubToken.
+_gh_tok_cache = {"at": 0.0, "tok": None}
+_GH_TOK_TTL = 900.0
+
+
+def _github_token():
+    now = time.time()
+    if _gh_tok_cache["at"] and now - _gh_tok_cache["at"] < _GH_TOK_TTL:
+        return _gh_tok_cache["tok"]
+    tok = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN") or None
+    if not tok:
+        for gh in ("/opt/homebrew/bin/gh", "/usr/local/bin/gh", "gh"):
+            try:
+                res = subprocess.run([gh, "auth", "token"],
+                                     capture_output=True, text=True, timeout=5)
+                cand = (res.stdout or "").strip()
+                if res.returncode == 0 and cand:
+                    tok = cand
+                break
+            except FileNotFoundError:
+                continue
+            except Exception:
+                break
+    _gh_tok_cache.update(at=now, tok=tok)
+    return tok
+
+
 # Conditional-request state lives in the SHARED cache file (latest-release.json)
 # so the ETag survives process boundaries: short-lived shell-outs used to pay a
 # full 200 per process; now every probe sends If-None-Match and gets a free 304
 # between releases.
 def _curl_conditional(url, etag):
-    """GET url with optional If-None-Match. Returns (status, new_etag, body)."""
+    """GET url with optional If-None-Match, authenticated when a GitHub token
+    is available. Returns (status, new_etag, body). On 401 with a token
+    (revoked/expired) retries anonymously so a bad token is never worse than
+    no token."""
+    tok = _github_token()
+    status, new_etag, body = _curl_once(url, etag, tok)
+    if status == 401 and tok:
+        _gh_tok_cache.update(tok=None)  # drop the dead token for this process
+        status, new_etag, body = _curl_once(url, etag, None)
+    return status, new_etag, body
+
+
+def _curl_once(url, etag, token):
     args = ["/usr/bin/curl", "-sS", "-m", "10",
             "-H", "Accept: application/vnd.github+json"]
+    if token:
+        args += ["-H", "@-"]  # Authorization arrives via stdin, never argv
     if etag:
         args += ["-H", "If-None-Match: %s" % etag]
     args += ["-w", "\n__CURL_STATUS__:%{http_code}\n__CURL_ETAG__:%header{etag}", url]
-    res = subprocess.run(args, capture_output=True, text=True, timeout=12)
+    res = subprocess.run(args, capture_output=True, text=True, timeout=12,
+                         input=("Authorization: Bearer %s" % token) if token else None)
     status, new_etag, body = 0, None, []
     for line in (res.stdout or "").splitlines():
         if line.startswith("__CURL_STATUS__:"):