@m13v/s4l 1.7.8 → 1.7.9-rc.1

package/mcp/dist/index.js

@@ -3636,14 +3636,27 @@ function writeDraftProvider(provider, setBy) {
     console.error(`[draft-provider] ${provider} (${setBy})`);
 }
 tool("queue_setup", {
-    title: "Get autopilot scheduled-task specs",
-    description: "Returns the scheduled task that runs the hands-free draft autopilot on this machine " +
-        "(s4l-worker, the universal queue worker). For EACH returned task, call the host tool " +
-        "create_scheduled_task with its taskId, cronExpression, prompt, and notifyOnCompletion " +
-        "VERBATIM (do not edit the prompt — it contains exact local paths; notifyOnCompletion MUST be " +
-        "false or the per-minute worker spams a notification every run). The task drains the local job queue that the " +
-        "real pipeline feeds (all job types); the pipeline itself is kicked by launchd jobs this server " +
-        "installs. Use this as the final onboarding step instead of the old per-type worker tasks.",
+    // Title/description are host-aware (2026-08-06): an agent reads the tool
+    // description FIRST, so it must tell the truth for the host it's on.
+    // Historic name kept for fleet compatibility; conceptually this tool is
+    // "arm the drafting engine" — Claude hosts get queue-worker task specs,
+    // Codex/ChatGPT hosts get the provider stamped with nothing to schedule.
+    title: s4lHost() === "codex"
+        ? "Arm the draft autopilot"
+        : "Get autopilot scheduled-task specs",
+    description: s4lHost() === "codex"
+        ? "Arms the hands-free draft autopilot on this machine. On this host there is NOTHING to " +
+            "schedule: drafting runs inline through this app's engine, so ONE call completes autopilot " +
+            "setup (it records the draft engine choice and returns no tasks). Do NOT create any " +
+            "scheduled task or automation. The pipeline itself is kicked by launchd jobs this server " +
+            "installs. Use this as the final onboarding step."
+        : "Returns the scheduled task that runs the hands-free draft autopilot on this machine " +
+            "(s4l-worker, the universal queue worker). For EACH returned task, call the host tool " +
+            "create_scheduled_task with its taskId, cronExpression, prompt, and notifyOnCompletion " +
+            "VERBATIM (do not edit the prompt — it contains exact local paths; notifyOnCompletion MUST be " +
+            "false or the per-minute worker spams a notification every run). The task drains the local job queue that the " +
+            "real pipeline feeds (all job types); the pipeline itself is kicked by launchd jobs this server " +
+            "installs. Use this as the final onboarding step instead of the old per-type worker tasks.",
     inputSchema: {},
 }, async () => {
     // Codex/ChatGPT host: there is no scheduled-task worker at all. Drafting

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.7.8",
-  "installedAt": "2026-08-07T17:57:02.547Z"
+  "version": "1.7.9-rc.1",
+  "installedAt": "2026-08-07T20:23:25.293Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.7.8",
+  "version": "1.7.9-rc.1",
   "description": "Draft, review, approve, and autopilot X/Twitter posts.",
   "long_description": "## **⚠️ The disclaimer above is generic Claude boilerplate.** Anthropic shows the same warning on every plugin regardless of what it does; any plugin has the same level of access as any app you download from the internet.\n\nS4L is an open source product developed by Mediar.ai Incorporated, a VC-backed San Francisco-based startup.\n\nTo get started:\n\n1\\. Copy this prompt: **Set me up on S4L plugin end to end**\n\n2\\. Quit with CMD+Q, reopen Claude, paste into a new chat.\n\nWhat happens next:\n\n* About every 5 minutes S4L scans X for posts that match your topics and drafts replies in your voice.\n* Drafts show up as review cards, usually the first within a few minutes. Nothing is posted automatically; you approve each one.\n* Posting autopilot stays off until you explicitly turn it on.",
   "author": {
@@ -72,10 +72,6 @@
       "name": "client_event",
       "description": "Log a lightweight client UI event"
     },
-    {
-      "name": "queue_setup",
-      "description": "Get autopilot scheduled-task specs"
-    },
     {
       "name": "dashboard",
       "description": "S4L dashboard"

package/mcp/menubar/s4l_browser_foreground.py

@@ -157,12 +157,16 @@ class _Worker(threading.Thread):
         # focus back to the app the user was in. Screenshots/clicks are
         # unaffected (CDP is offscreen-raster + synthetic input; the occlusion
         # flags keep hidden tabs painting).
-        # DEFAULT OFF (user decision 2026-07-30): only the telemetry above runs
-        # unless S4L_HARNESS_HIDE=1 opts in. S4L_NO_HARNESS_HIDE force-disables
-        # even when the opt-in is set.
+        # DEFAULT ON (user decision 2026-08-07, reverses the 2026-07-30 default-off
+        # call): the guard hides an offscreen harness that steals the foreground
+        # unless explicitly opted out. Two knobs, by design:
+        #   S4L_NO_HARNESS_HIDE  -> HARD override, force off, checked FIRST so it
+        #       always wins (this is the one-time interactive-login escape hatch).
+        #   S4L_HARNESS_HIDE=0   -> SOFT opt-out for a machine that wants it off.
+        # Unset or any non-"0" value => hide is active (the new default).
         if os.environ.get("S4L_NO_HARNESS_HIDE"):
             return
-        if os.environ.get("S4L_HARNESS_HIDE") != "1":
+        if os.environ.get("S4L_HARNESS_HIDE", "1") == "0":
             return
         pos = details.get("window_position") or ""
         try:

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l-mcp",
-  "version": "1.7.8",
+  "version": "1.7.9-rc.1",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/s4l",
-  "version": "1.7.8",
+  "version": "1.7.9-rc.1",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js",

package/scripts/claude_job.py

@@ -1,8 +1,27 @@
 #!/usr/bin/env python3
 """
-claude_job.py — queue-backed substitute for `claude -p` for the pipeline's
-pure text->JSON turns, on every machine (operator Macs and customer .mcpb
-boxes alike).
+claude_job.py — THE DRAFT-ENGINE SEAM: every pure text->JSON drafting turn in
+the pipeline lands here, and <state_dir>/draft-provider.json decides which
+engine answers it (see scripts/draft_provider.py; design + verified facts in
+docs/codex-port-design.md):
+
+  claude-desktop-queue  (default) enqueue to a file queue drained by the
+                        Claude Desktop s4l-worker scheduled task — the
+                        original design, and the only option when Claude
+                        Desktop is the box's sole authenticated engine.
+  claude-p              answer inline via the real `claude -p` (_run_claude_p;
+                        schema INLINED — the CLI parses --json-schema as JSON,
+                        a file path breaks it).
+  codex-exec            answer inline via the ChatGPT-app-bundled `codex exec`
+                        (_run_codex_exec; gpt-5.6-sol default, schema rides
+                        the prompt — OpenAI strict schema mode rejects our
+                        lenient schemas).
+
+All three return byte-identical claude `--output-format json` envelopes and
+the same 0/1/79 exit semantics, so callers can't tell them apart. The queue
+machinery below (next/result, worker notes, heartbeats) only runs for the
+default provider; the inline providers skip it entirely, which also means no
+warm-session leaks and no app-open requirement on those paths.
 
 The deterministic pipeline never calls `claude` directly; every invocation goes
 through scripts/run_claude.sh. For script tags mapped in TAG_TO_TYPE below,
@@ -461,19 +480,22 @@ def _bump_drain_timeout() -> None:
 
 
 # --------------------------------------------------------------------------- #
-# Opt-in worker self-reap (2026-06-27)                                         #
+# Worker self-reap (2026-06-27; DEFAULT ON since 2026-07-04 / v1.6.202)        #
 # --------------------------------------------------------------------------- #
 # A scheduled-task worker turn finishes its one queue iteration but Claude
 # Desktop keeps the agent-mode `claude` process warm (`--input-format
 # stream-json`), so finished workers pile up and leak RAM. The launchd reaper
-# (reap_stale_claude_sessions.py) is the GUARANTEE that bounds this. This opt-in
+# (reap_stale_claude_sessions.py) is the GUARANTEE that bounds this. This
 # path is a faster, source-side trim: once THIS worker is provably done (no work
 # to do, or its result is already on disk), terminate OUR OWN session so it never
-# becomes part of the standing pool. Strictly off unless S4L_WORKER_SELF_REAP is
-# set, so it ships dormant and cannot destabilize the default behaviour.
+# becomes part of the standing pool. It shipped opt-in (dormant unless
+# S4L_WORKER_SELF_REAP was set), which meant it ran nowhere; when Desktop
+# 1.18286.0 changed the cmdline shape the signature-fragile reaper missed too
+# and boxes leaked (Karol, 53 piled workers). Since 2026-07-04 it is ON by
+# default; opt OUT with S4L_WORKER_SELF_REAP=0 (see _self_reap_enabled).
 #
 # Safety properties:
-#   * No-op unless the env flag is set.
+#   * Respects the env kill switch (S4L_WORKER_SELF_REAP=0 disables it).
 #   * Only ever targets a process in OUR OWN ancestry that matches the reaper's
 #     worker signature (claude-code agent-mode session). The producer side
 #     (run-twitter-cycle.sh -> python) has no such ancestor, so a misplaced call