@m13v/s4l 1.7.7-rc.4 → 1.7.7-rc.6

package/mcp/dist/index.js

@@ -131,10 +131,13 @@ const STALL_WATCH_INTERVAL_SECS = 120;
 // S4L_OVERLAY_WATCH=0.
 const OVERLAY_WATCH_LABEL = "com.m13v.social-overlay-watch";
 const OVERLAY_WATCH_PLIST = path.join(os.homedir(), "Library", "LaunchAgents", `${OVERLAY_WATCH_LABEL}.plist`);
-// Daily self-updater. Enabled alongside autopilot so a hands-free (headless)
-// install keeps itself current — the interactive `runtime` tool (action:'update')
-// only helps when
-// a human-facing agent session is open, which an autopilot box never has.
+// Legacy daily self-updater launchd job. BANNED (user decision 2026-07-31):
+// it ran s4l_box_update.sh unattended, which kills and relaunches Claude
+// Desktop with no human in the loop. Updates are user-initiated only (menubar
+// "Update now & restart Claude Desktop", the panel button, `runtime`
+// action:'update', or an operator running s4l_box_update.sh explicitly). The
+// label/plist constants survive so ensureUpdaterRemoved() can clean the job
+// off every box that got it from v1.7.1..v1.7.7-rc.4.
 const UPDATER_LABEL = "com.m13v.social-autoposter-update";
 const UPDATER_PLIST = path.join(os.homedir(), "Library", "LaunchAgents", `${UPDATER_LABEL}.plist`);
 // A sane PATH for launchd jobs (launchd starts with a bare PATH). Include the
@@ -4874,68 +4877,21 @@ async function ensureOverlayWatchInstalled() {
         return { ok: false, detail: e?.message || String(e) };
     }
 }
-// Install/refresh the daily self-updater launchd job. This used to be bundled
-// into the now-deleted `autopilot` MCP tool (removed 2026-06-19, 88bd1cb9):
-// calling `autopilot enable` installed this job as a side effect, so removing
-// the tool silently orphaned it — UPDATER_LABEL/UPDATER_PLIST and the
-// auto_update_on status check survived (buildSnapshot still reports them), but
-// nothing has installed the plist since, on ANY box provisioned after that
-// commit (auto_update_on reads false forever). Restored here as its own
-// deterministic boot-time job, same pattern as its five siblings above.
-//
-// Points at scripts/s4l_box_update.sh, NOT skill/social-autoposter-update.sh:
-// the latter is the npm-lane updater (npm view + npx update) and is a silent
-// no-op on a .mcpb box, which has no npm/npx on PATH (see version.ts). The
-// .mcpb-lane equivalent downloads the .mcpb directly from the channel-resolved
-// GitHub release and unpacks it over the extension dir — see that script's own
-// header for the channel/no-downgrade/retry guards. Default mode there
-// downloads + unpacks + restarts Claude Desktop with NO human in the loop,
-// matching the original bundled updater's intent ("keeps a headless install
-// current"); RunAtLoad so a box that boots already-behind checks promptly.
-async function ensureUpdaterInstalled() {
+// Remove the legacy daily self-updater launchd job (see UPDATER_LABEL's
+// comment). Boot-time, idempotent, best-effort: unload the job if launchd has
+// it and delete the plist so the daily silent Claude Desktop restart can never
+// fire again. Do NOT reintroduce an install path for this job — any future
+// auto-update mechanism must be user-visible and user-confirmed.
+async function ensureUpdaterRemoved() {
     try {
         if (process.platform !== "darwin")
-            return { ok: false, detail: "not macOS" };
-        if ((process.env.S4L_AUTO_UPDATE) === "0")
-            return { ok: false, detail: "disabled (S4L_AUTO_UPDATE=0)" };
-        const logDir = path.join(repoDir(), "skill", "logs");
-        try {
-            fs.mkdirSync(logDir, { recursive: true });
-        }
-        catch {
-            /* best-effort */
-        }
-        const xml = plistXml({
-            label: UPDATER_LABEL,
-            programArgs: ["/bin/bash", path.join(repoDir(), "scripts", "s4l_box_update.sh")],
-            intervalSecs: 86_400,
-            runAtLoad: true,
-            stdoutLog: path.join(logDir, "launchd-self-update-stdout.log"),
-            stderrLog: path.join(logDir, "launchd-self-update-stderr.log"),
-        });
+            return { ok: true, detail: "not macOS" };
         const uid = process.getuid ? process.getuid() : 0;
-        let cur = null;
-        try {
-            cur = fs.readFileSync(UPDATER_PLIST, "utf-8");
-        }
-        catch {
-            cur = null;
-        }
-        let detail;
-        if (cur === xml) {
-            const res = await loadPlist(UPDATER_LABEL, UPDATER_PLIST, uid);
-            detail = `current (load rc=${res.code})`;
-        }
-        else {
-            if (cur !== null) {
-                await unloadPlist(UPDATER_LABEL, UPDATER_PLIST, uid);
-            }
-            fs.mkdirSync(path.dirname(UPDATER_PLIST), { recursive: true });
-            fs.writeFileSync(UPDATER_PLIST, xml, "utf-8");
-            const res = await loadPlist(UPDATER_LABEL, UPDATER_PLIST, uid);
-            detail = cur === null ? "installed + loaded" : `rewritten + reloaded (rc=${res.code})`;
-        }
-        return { ok: true, detail };
+        const existed = fs.existsSync(UPDATER_PLIST);
+        await unloadPlist(UPDATER_LABEL, UPDATER_PLIST, uid);
+        if (existed)
+            fs.rmSync(UPDATER_PLIST, { force: true });
+        return { ok: true, detail: existed ? "removed" : "absent" };
     }
     catch (e) {
         return { ok: false, detail: e?.message || String(e) };
@@ -6134,13 +6090,12 @@ async function main() {
     void ensureOverlayWatchInstalled()
         .then((r) => console.error(`[overlay-watch] launchd supervisor: ${r.ok ? "ok" : "skip"} (${r.detail})`))
         .catch((e) => console.error("[overlay-watch] supervisor install failed:", e?.message || e));
-    // Daily self-updater: restored 2026-07-08 after 88bd1cb9 ("Remove autopilot
-    // tool") silently dropped its only install path (it used to be bundled into
-    // the deleted `autopilot enable` action). Best-effort; never blocks boot.
-    // Disable with S4L_AUTO_UPDATE=0.
-    void ensureUpdaterInstalled()
-        .then((r) => console.error(`[self-update] launchd updater: ${r.ok ? "ok" : "skip"} (${r.detail})`))
-        .catch((e) => console.error("[self-update] updater install failed:", e?.message || e));
+    // Silent daily self-updates are banned (user decision 2026-07-31): the job
+    // restarted Claude Desktop unattended. Clean it off every box that got it
+    // from v1.7.1..v1.7.7-rc.4. Best-effort; never blocks boot.
+    void ensureUpdaterRemoved()
+        .then((r) => console.error(`[self-update] legacy launchd updater: ${r.ok ? "ok" : "skip"} (${r.detail})`))
+        .catch((e) => console.error("[self-update] updater removal failed:", e?.message || e));
     // Heal installs onboarded before short_links_live defaulted to false: such a
     // project wraps short links against the customer's own domain, which has no
     // /r/[code] resolver, so every minted link 404s. Re-point them at the s4l.ai

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.7-rc.4",
-  "installedAt": "2026-07-30T23:35:31.407Z"
+  "version": "1.7.7-rc.6",
+  "installedAt": "2026-07-31T23:52:05.555Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.7-rc.4",
+  "version": "1.7.7-rc.6",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {

package/mcp/menubar/s4l_browser_foreground.py

@@ -156,9 +156,14 @@ class _Worker(threading.Thread):
         # the foreground, hide that specific Chrome process by pid, then force
         # focus back to the app the user was in. Screenshots/clicks are
         # unaffected (CDP is offscreen-raster + synthetic input; the occlusion
-        # flags keep hidden tabs painting). Escape hatch: S4L_NO_HARNESS_HIDE.
+        # flags keep hidden tabs painting).
+        # DEFAULT OFF (user decision 2026-07-30): only the telemetry above runs
+        # unless S4L_HARNESS_HIDE=1 opts in. S4L_NO_HARNESS_HIDE force-disables
+        # even when the opt-in is set.
         if os.environ.get("S4L_NO_HARNESS_HIDE"):
             return
+        if os.environ.get("S4L_HARNESS_HIDE") != "1":
+            return
         pos = details.get("window_position") or ""
         try:
             offscreen = any(int(float(v)) < 0 for v in pos.split(",")[:2])

package/mcp/menubar/s4l_card.py

@@ -464,12 +464,12 @@ def _compact_arm(variant):
 
 
 def _reply_heading_suffix(d):
-    """Concise 'project/lane · viral N · t v4' readout appended straight onto the
-    'Reply (editable):' heading (2026-07-07), so the two facts a reviewer
-    checks first don't require opening the details eye. Pulled from the same
+    """Concise 'project · viral N · t v4' readout appended straight onto the
+    'Reply (editable):' heading (2026-07-07), so the facts a reviewer checks
+    first don't require opening the details eye. Pulled from the same
     fields _details_lines used to render as 'Project:'/'Lane:'/'Virality
-    score:' rows; those three are omitted from the popover now to avoid
-    showing the same numbers twice. Empty string when neither is known."""
+    score:' rows; those are omitted from the popover now to avoid showing
+    the same numbers twice. Empty string when neither is known."""
     d = d or {}
     project = (d.get("project") or "").strip()
     lane = ((d.get("experiments") or {}).get("lane") or "").strip()
@@ -480,20 +480,11 @@ def _reply_heading_suffix(d):
         # approve_() blocks posting on these and the reviewer should know why
         # before clicking rather than after.
         bits.append("⚠ SANDBOX — not postable")
-    # Project and lane are independent concepts most of the time (project
-    # "fazm" drafted under lane "personal_brand"), but the operator's own
-    # PersonalBrand project IS the personal_brand lane, so project=="PersonalBrand"
-    # + lane=="personal_brand" is the SAME fact twice, not two facts — compare
-    # with punctuation/case stripped so "PersonalBrand" vs "personal_brand"
-    # collapses to one token instead of "PersonalBrand/personal_brand".
-    same = project and lane and re.sub(r"[^a-z0-9]", "", project.lower()) == re.sub(
-        r"[^a-z0-9]", "", lane.lower()
-    )
-    if same:
-        bits.append(project)
-    elif project and lane:
-        bits.append(f"{project}/{lane}")
-    elif project:
+    # Heading shows the project/lane name only, never a combined
+    # "project/lane" string (2026-07-31, user call: the "/promotion" suffix
+    # on cards was confusing). Lane is still stamped on the candidate and
+    # readable in the details popover; it's just not concatenated here.
+    if project:
         bits.append(project)
     elif lane:
         bits.append(lane)

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.7-rc.4",
+  "version": "1.7.7-rc.6",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.7-rc.4",
+  "version": "1.7.7-rc.6",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",

package/scripts/claude_job.py

@@ -76,6 +76,12 @@ TAG_TO_TYPE = {
     # Python and inlined; no Bash tools), mirroring the twitter Phase 2b
     # tool-free conversion, so it rides the same universal worker.
     "post-reddit-draft": "reddit-draft",
+    # Context mining (2026-07-31): scripts/context_mining.py inlines compacted
+    # transcripts + the corpus into one pure text->JSON turn. Execution
+    # guidance lives at the top of the prompt itself (not only in
+    # TYPE_TO_WORKER_NOTES) because an installed-package worker claims with
+    # ITS copy of this map, which may predate this type.
+    "context-mining": "context-mining",
 }
 
 # queue type -> (activity state, label) the menu bar shows while the job is in
@@ -92,6 +98,7 @@ TYPE_TO_ACTIVITY = {
     # must stay concise (user rule 2026-07-14); the platform shows on the
     # review card itself, not in the tray.
     "reddit-draft": ("drafting", "draft"),
+    "context-mining": ("learning", "mining context"),
 }
 
 # queue type -> execution notes PREPENDED to the prompt sidecar at claim time.
@@ -140,6 +147,13 @@ TYPE_TO_WORKER_NOTES = {
         "absent from posts (add a rejects entry only for the structural "
         "false-positive cases the prompt describes)."
     ),
+    "context-mining": (
+        "WORKER EXECUTION NOTES (queue metadata; follow while executing the "
+        "prompt below): single-turn, tool-free job. Everything you need is "
+        "inlined in the prompt (transcripts, corpus, prior decisions). Never "
+        "use tools. Read, then submit ONE result object matching the schema: "
+        "{\"proposals\": [...]}. An empty proposals list is a valid answer."
+    ),
 }
 
 

package/scripts/cleanup_harness_tabs.py

@@ -1,11 +1,21 @@
 #!/usr/bin/env python3
-"""Close every CDP "page" tab in harness Chrome except one.
+"""Close every CDP "page" tab in harness Chrome except one, and keep that one
+tab REAL (http/https).
 
-Called from skill/lib/twitter-backend.sh::ensure_twitter_browser_for_backend
-and skill/engage-twitter.sh's inline harness branch as part of pre-flight.
-Safe to call any time: exits 0 silently when harness Chrome is down. Workers
-and iframe targets are left alone; they auto-clean when their parent page
-closes.
+Called from skill/lib/harness-common.sh::hc_cleanup_tabs (all three platform
+backends) as part of pre-flight. Safe to call any time: exits 0 silently when
+harness Chrome is down. Workers and iframe targets are left alone; they
+auto-clean when their parent page closes.
+
+Revive (2026-07-31): when BH_REVIVE_URL is set to an http(s) url, a Chrome
+whose only tab is about:blank gets that tab navigated to the revive url, and
+a completely tabless Chrome (--no-startup-window launch) gets ONE background
+tab created there. This matters because the harness daemon's is_real_page()
+refuses about:/chrome: tabs — a blank-only browser used to trap it in a
+"stale session -> foreground createTarget(about:blank) -> still not real"
+loop, one macOS focus steal per iteration (30/day on reddit-harness).
+Both revive paths need websocket-client (present in the owned runtime venv,
+S4L_PYTHON); without it the script degrades to close-only, as before.
 
 The standalone-script form (vs an inline heredoc) is required because bash
 3.2 on macOS cannot parse a nested heredoc inside a function body inside a
@@ -24,6 +34,56 @@ import urllib.request
 # its own harness Chrome on 9556. Default 9555 keeps Twitter callers unchanged.
 CDP_PORT = int(os.environ.get("BH_CLEANUP_PORT", "9555"))
 CDP_URL = f"http://127.0.0.1:{CDP_PORT}"
+REVIVE_URL = os.environ.get("BH_REVIVE_URL", "")
+
+
+def _is_real(t) -> bool:
+    return (t.get("url") or "").startswith(("http://", "https://"))
+
+
+def _ws_call(ws_url: str, method: str, timeout: float = 8.0, **params):
+    # suppress_origin: Chrome 111+ rejects ws clients whose Origin header is
+    # not in --remote-allow-origins (same pattern as cdp_ready_check.py).
+    import websocket  # websocket-client; ImportError handled by callers
+
+    ws = websocket.create_connection(ws_url, timeout=timeout, suppress_origin=True)
+    try:
+        ws.send(json.dumps({"id": 1, "method": method, "params": params}))
+        import time
+
+        deadline = time.time() + timeout
+        while time.time() < deadline:
+            msg = json.loads(ws.recv())
+            if msg.get("id") == 1:
+                return msg
+        raise TimeoutError(f"no reply to {method}")
+    finally:
+        ws.close()
+
+
+def _revive(keep) -> None:
+    """Ensure one REAL tab exists: navigate a lone non-real tab (keep) to
+    REVIVE_URL, or create a background tab there when keep is None (tabless
+    Chrome). Best-effort; cleanup's exit code never depends on it."""
+    if not REVIVE_URL.startswith(("http://", "https://")):
+        return
+    try:
+        if keep is None:
+            # background=True: a foreground Target.createTarget raises the
+            # Chrome window and steals macOS app focus; revive must be silent.
+            info = json.loads(
+                urllib.request.urlopen(f"{CDP_URL}/json/version", timeout=2).read()
+            )
+            _ws_call(
+                info["webSocketDebuggerUrl"], "Target.createTarget",
+                url=REVIVE_URL, background=True,
+            )
+            print(f"[cleanup_harness_tabs] created background tab on {REVIVE_URL}")
+        elif not _is_real(keep) and keep.get("webSocketDebuggerUrl"):
+            _ws_call(keep["webSocketDebuggerUrl"], "Page.navigate", url=REVIVE_URL)
+            print(f"[cleanup_harness_tabs] revived blank tab -> {REVIVE_URL}")
+    except Exception as e:
+        print(f"[cleanup_harness_tabs] revive skipped ({type(e).__name__}: {e})")
 
 
 def main() -> int:
@@ -33,8 +93,13 @@ def main() -> int:
     except Exception:
         return 0
     pages = [t for t in tabs if t.get("type") == "page"]
-    if len(pages) <= 1:
-        print(f"[cleanup_harness_tabs] {len(pages)} page tab(s), no cleanup needed")
+    if not pages:
+        print("[cleanup_harness_tabs] 0 page tab(s)")
+        _revive(None)
+        return 0
+    if len(pages) == 1:
+        print("[cleanup_harness_tabs] 1 page tab(s), no cleanup needed")
+        _revive(pages[0])
         return 0
     # Keep a REAL (http/https) tab when one exists, not blindly pages[0]. The
     # /json order is roughly most-recently-active first, so a freshly-spawned
@@ -43,9 +108,6 @@ def main() -> int:
     # daemon's tab forces it to re-attach and re-spawn another about:blank, which
     # is exactly the orphan-tab churn this script is meant to clean up. Falling
     # back to pages[0] preserves the prior behavior when every tab is blank.
-    def _is_real(t):
-        return (t.get("url") or "").startswith(("http://", "https://"))
-
     keep = next((t for t in pages if _is_real(t)), pages[0])
     closed = 0
     for t in pages:
@@ -61,6 +123,7 @@ def main() -> int:
             pass
     kept_kind = "1 real" if _is_real(keep) else "1"
     print(f"[cleanup_harness_tabs] closed {closed}/{len(pages) - 1} extra page tabs (kept {kept_kind})")
+    _revive(keep)
     return 0