social-autoposter 1.3.7 → 1.3.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "social-autoposter",
-  "version": "1.3.7",
+  "version": "1.3.9",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js"

package/scripts/post_reddit.py

@@ -449,13 +449,27 @@ def _ban_entries_to_subs(entries) -> set[str]:
 
 
 def _make_ban_entry(sub: str, reason: str | None, project: str | None) -> dict:
-    """Build a new ban-list entry with the current UTC timestamp."""
+    """Build a new ban-list entry with the current UTC timestamp.
+
+    Stamps the current Reddit account (top-level config.json reddit_account
+    .username) so per-account scoping in reddit_tools._load_comment_blocked_subs
+    can ignore this entry on other machines posting as a different account.
+    Returns account=None if the config has no reddit_account, in which case
+    the reader treats the entry as global (back-compat with pre-2026-05-15).
+    """
     from datetime import datetime, timezone
+    account = None
+    try:
+        with open(CONFIG_PATH) as _f:
+            account = (json.load(_f).get("reddit_account") or {}).get("username") or None
+    except Exception:
+        pass
     return {
         "sub": sub.strip().lower(),
         "added_at": datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ"),
         "reason": reason or None,
         "project": project or None,
+        "account": account,
     }
 
 

package/scripts/reddit_browser.py

@@ -295,22 +295,52 @@ def _refresh_browser_lock():
 
 
 def get_browser_and_page(playwright):
-    """Connect to the reddit-agent MCP browser via CDP with a fresh logged-in context.
-
-    Creates a NEW browser context with storageState cookies (the logged-in session)
-    rather than reusing contexts[0] (the default context, which is NOT logged in).
-    The MCP's isolated context is invisible to CDP connections, so we must create
-    our own context with the same storageState.
-
-    Returns (browser, page, is_cdp). When is_cdp=True, `page` is in a new context
-    on the CDP browser. When is_cdp=False, it's a new headless page.
+    """Get a logged-in Reddit page, preferring CDP-attach over launch_persistent_context.
+
+    Two paths:
+      1. CDP-attach (preferred on appmaker/e2b VM and any host running a visible
+         logged-in Chromium): connect to the existing browser, find a context with
+         a live reddit_session cookie, open a NEW PAGE on that context.
+      2. launch_persistent_context fallback: when CDP isn't available OR contexts
+         have no reddit_session (laptop where reddit-agent MCP isolates its session
+         in an invisible context).
+
+    Why CDP-attach matters: appmaker's visible Chromium permanently holds
+    /root/.chromium-profile. launch_persistent_context collides on profile leveldb
+    locks, loads a partial session, and EVERY post returns account_blocked_in_sub
+    because the comment form never renders. Attaching to the live context dodges
+    the collision entirely.
+
+    Returns (browser, page, is_cdp). When is_cdp=True, callers must close ONLY
+    the page (not page.context) and NOT the browser; closing context[0] or the
+    CDP browser would kill the user's visible session.
     """
     _acquire_browser_lock()
     cdp_port = find_reddit_cdp_port()
 
-    # Always use the persistent profile directly. CDP connections to the MCP
-    # browser expose a default context that is NOT logged in (the MCP's logged-in
-    # context is isolated/invisible to CDP), causing auth failures.
+    if cdp_port:
+        try:
+            cdp_browser = playwright.chromium.connect_over_cdp(f"http://localhost:{cdp_port}")
+            for ctx in cdp_browser.contexts:
+                try:
+                    cookies = ctx.cookies("https://www.reddit.com/")
+                except Exception:
+                    cookies = []
+                has_session = any(
+                    c.get("name") == "reddit_session" and c.get("value")
+                    for c in cookies
+                )
+                if has_session:
+                    page = ctx.new_page()
+                    return cdp_browser, page, True
+            try:
+                cdp_browser.close()
+            except Exception:
+                pass
+        except Exception:
+            pass
+
+    # Fallback: launch our own persistent context against PROFILE_DIR.
     # Retry on Chromium SingletonLock collisions (MCP holds the OS-level profile
     # lock for its entire server lifetime; the JSON lock can expire while the
     # OS lock is still held).
@@ -496,9 +526,18 @@ def post_comment(thread_url, text):
             }
 
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def reply_to_comment(comment_permalink, text, dm_id=None):
@@ -736,9 +775,18 @@ def reply_to_comment(comment_permalink, text, dm_id=None):
             }
 
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def edit_comment(comment_permalink, new_text):
@@ -859,9 +907,18 @@ def edit_comment(comment_permalink, new_text):
             }
 
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def edit_thread(thread_permalink, new_body):
@@ -956,9 +1013,18 @@ def edit_thread(thread_permalink, new_body):
             }
 
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def unread_dms():
@@ -1135,9 +1201,18 @@ def unread_dms():
             return unique
 
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def read_conversation(chat_url, max_messages=20):
@@ -1293,9 +1368,18 @@ def read_conversation(chat_url, max_messages=20):
                 return result
 
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def _load_active_reddit_campaigns_for_dm():
@@ -1564,9 +1648,18 @@ def send_dm(chat_url, message, dm_id=None):
                 }
 
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def compose_dm(recipient, subject, body):
@@ -1859,9 +1952,18 @@ def compose_dm(recipient, subject, body):
                 return {"ok": True, "thread_url": page.url}
 
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def scrape_views(username, max_scrolls=300):
@@ -2022,9 +2124,18 @@ def scrape_views(username, max_scrolls=300):
         except Exception as e:
             return {"ok": False, "error": str(e)}
         finally:
-            page.context.close()
+            try:
+                if is_cdp:
+                    page.close()
+                else:
+                    page.context.close()
+            except Exception:
+                pass
             if not is_cdp:
-                browser.close()
+                try:
+                    browser.close()
+                except Exception:
+                    pass
 
 
 def main():

package/scripts/reddit_tools.py

@@ -190,6 +190,13 @@ def _load_comment_blocked_subs(project_name=None):
         config_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), "..", "config.json")
         with open(config_path) as f:
             config = json.load(f)
+        # Per-account scoping (2026-05-15): a ban applies only to the account
+        # that triggered it. Different machines may post the same project as
+        # different accounts (laptop=Deep_Ad1959, sandbox VM=StreetRefuse7512);
+        # without this filter, account A's real ban would suppress a sub for
+        # account B that has no such ban. Entries with account=null are
+        # treated as global (apply regardless), preserving pre-2026-05-15 data.
+        current_account = (config.get("reddit_account") or {}).get("username") or None
         blocked = set()
         bans = config.get("subreddit_bans") or {}
         if isinstance(bans, dict):
@@ -198,8 +205,15 @@ def _load_comment_blocked_subs(project_name=None):
                 if not slug:
                     continue
                 entry_project = None
+                entry_account = None
                 if isinstance(entry, dict):
                     entry_project = entry.get("project") or None
+                    entry_account = entry.get("account") or None
+                # Account filter first: if entry is tagged with a specific
+                # account and it's not the current one, this ban doesn't apply.
+                if (entry_account is not None and current_account is not None
+                        and entry_account.lower() != current_account.lower()):
+                    continue
                 if entry_project is None:
                     blocked.add(slug)
                 elif project_name and entry_project.lower() == project_name.lower():

package/scripts/score_twitter_candidates.py

@@ -214,7 +214,16 @@ def upsert_candidates(tweets, config, batch_id=None):
                     bookmarks_t1 = NULL,
                     t1_checked_at = NULL,
                     delta_score = NULL,
-                    batch_id = COALESCE(EXCLUDED.batch_id, twitter_candidates.batch_id)
+                    batch_id = COALESCE(twitter_candidates.batch_id, EXCLUDED.batch_id)
+                WHERE NOT (
+                    twitter_candidates.status = 'pending'
+                    AND twitter_candidates.batch_id IS DISTINCT FROM EXCLUDED.batch_id
+                    AND EXISTS (
+                        SELECT 1 FROM twitter_batches tb
+                        WHERE tb.batch_id = twitter_candidates.batch_id
+                          AND tb.phase_started_at > NOW() - INTERVAL '20 minutes'
+                    )
+                )
                 """,
                 [
                     url,

package/scripts/twitter_post_plan.py

@@ -117,7 +117,7 @@ def update_candidate(cid: int, status: str) -> None:
         return
     cmd = [
         "psql", DATABASE_URL, "-c",
-        f"UPDATE twitter_candidates SET status='{sql_status}' WHERE id={cid}",
+        f"UPDATE twitter_candidates SET status='{sql_status}' WHERE id={cid} AND status != 'posted'",
     ]
     rc, out, err = run_subprocess(cmd, timeout_sec=30)
     if rc != 0: