social-autoposter 1.6.53 → 1.6.56

package/bin/cli.js

@@ -1205,6 +1205,24 @@ function doctor() {
   }
 }
 
+// Provision the owned Python/Chromium runtime from the terminal. This is the
+// panel-free path: it runs the EXACT same provisioning logic the panel's
+// "Install runtime" button and the install_runtime MCP tool use (mcp/src/
+// runtime.ts -> dist/runtime.js), via the thin ESM wrapper mcp/install-runtime.mjs.
+// Use it when the UI panel can't render (Claude Code/Cowork), on a bare VM, or
+// when an agent wants to install head-less. Idempotent: re-running repairs.
+function installRuntime() {
+  const wrapper = path.join(__dirname, '..', 'mcp', 'install-runtime.mjs');
+  if (!fs.existsSync(wrapper)) {
+    console.error(`Cannot find ${wrapper}. Re-run \`npx social-autoposter update\` to repair the install.`);
+    process.exit(1);
+  }
+  // process.execPath is the Node already running this CLI, so we reuse it
+  // rather than hunting for a node on PATH.
+  const res = spawnSync(process.execPath, [wrapper], { stdio: 'inherit' });
+  process.exit(res.status == null ? 1 : res.status);
+}
+
 const cmd = process.argv[2];
 if (cmd === 'init') {
   init();
@@ -1214,6 +1232,8 @@ if (cmd === 'init') {
   doctor();
 } else if (cmd === 'bootstrap-vm') {
   bootstrapVm();
+} else if (cmd === 'install-runtime') {
+  installRuntime();
 } else if (cmd === 'export-cookies') {
   // Forward to cookie-helper with 'export' + remaining args
   process.argv = [process.argv[0], process.argv[1], 'export', ...process.argv.slice(3)];
@@ -1243,6 +1263,7 @@ if (cmd === 'init') {
   console.log('  npx social-autoposter update        update scripts, preserve config');
   console.log('  npx social-autoposter doctor        probe install health (#6, 1.6.34+)');
   console.log('  npx social-autoposter bootstrap-vm  AppMaker VM self-bootstrap (DB-driven)');
+  console.log('  npx social-autoposter install-runtime  provision owned Python + Chromium (panel-free)');
   console.log('  npx social-autoposter export-cookies [dir]  export browser cookies');
   console.log('  npx social-autoposter import-cookies [dir]  import browser cookies');
 }

package/mcp/dist/index.js

@@ -16,9 +16,10 @@ import { z } from "zod";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs";
-import { REPO_DIR, runPython, run, readPlan, writePlan, planPath, } from "./repo.js";
-import { applySetup, resolveProject, hasReadyProject, listManagedProjectStatus, REQUIRED_FIELDS, RECOMMENDED_FIELDS, CONFIG_PATH, } from "./setup.js";
+import { repoDir, runPython, run, readPlan, writePlan, planPath, } from "./repo.js";
+import { applySetup, resolveProject, hasReadyProject, listManagedProjectStatus, REQUIRED_FIELDS, RECOMMENDED_FIELDS, configPath, } from "./setup.js";
 import { xStatus, xConnect, summarizeXAuth } from "./twitterAuth.js";
+import { startProvisioning, isProvisioning, readProgress, runtimeReady, readRuntime, resolvePython, } from "./runtime.js";
 import { VERSION, versionStatus, latestPublishedVersion } from "./version.js";
 import { registerAppTool, registerAppResource, RESOURCE_MIME_TYPE, } from "@modelcontextprotocol/ext-apps/server";
 import { fileURLToPath } from "node:url";
@@ -69,7 +70,9 @@ ${args}
 \t\t<key>HOME</key>
 \t\t<string>${os.homedir()}</string>
 \t\t<key>SAPS_REPO_DIR</key>
-\t\t<string>${REPO_DIR}</string>
+\t\t<string>${repoDir()}</string>
+\t\t<key>SAPS_PYTHON</key>
+\t\t<string>${resolvePython()}</string>
 \t</dict>
 \t<key>RunAtLoad</key>
 \t<${opts.runAtLoad ? "true" : "false"}/>
@@ -225,7 +228,7 @@ async function produceDrafts(project, onProgress) {
     // It lives right next to the cycle's own twitter-cycle-*.log. We append the
     // full live cycle output here (not just milestones) plus a clear run banner.
     // Best-effort: a logging failure must never break the cycle.
-    const mcpLog = path.join(REPO_DIR, "skill", "logs", "draft_cycle-mcp.log");
+    const mcpLog = path.join(repoDir(), "skill", "logs", "draft_cycle-mcp.log");
     const appendLog = (s) => {
         try {
             fs.appendFileSync(mcpLog, s);
@@ -526,6 +529,7 @@ server.registerTool("setup", {
             projects,
             x_connected: x.connected,
             x_state: x.state,
+            x_handle: x.handle ?? null,
             mcp_version: ver.installed,
             latest_version: ver.latest,
             update_available: ver.update_available,
@@ -536,7 +540,7 @@ server.registerTool("setup", {
                 : undefined,
             required_fields: REQUIRED_FIELDS,
             recommended_fields: RECOMMENDED_FIELDS,
-            config_path: CONFIG_PATH,
+            config_path: configPath(),
             next_step: projects.length === 0
                 ? "No projects yet. Ask the user about a product (website, what it does, who to target, " +
                     "brand voice), then call setup with a short name plus those fields. Repeat per product." +
@@ -576,6 +580,30 @@ server.registerTool("setup", {
                 const tail = (seed.stderr || seed.stdout).trim().split("\n").slice(-1)[0] || "unknown error";
                 seedNote = ` (Heads up: couldn't seed search topics into the DB yet — ${tail}. draft_cycle will tell you clearly if topics are missing.)`;
             }
+            // Cold-start QUERY supply: fan the seeded topics out into >=30 real X
+            // search queries (project_search_queries) so the deterministic Phase 1
+            // bank (qualified_query_bank.py) has something to run on day one.
+            // Without this, a freshly-configured project's bank is empty and the
+            // cycle falls back to ONE crude topic-as-query. Best-effort: a failure
+            // here never fails setup; the topic-as-query fallback still works, just
+            // narrower. Supply-test is auto (only if the harness is up), so this
+            // stays fast when X isn't connected yet. (2026-06-04)
+            if (seed.code === 0) {
+                try {
+                    const qseed = await runPython("scripts/seed_search_queries.py", ["--project", result.project, "--supply-test", "auto"], { timeoutMs: 600_000 });
+                    const qm = /seeded=(\d+)\s+inserted=(\d+)\s+updated=(\d+)/.exec(qseed.stdout);
+                    if (qseed.code === 0 && qm) {
+                        seedNote += ` Expanded them into ${qm[1]} search quer${qm[1] === "1" ? "y" : "ies"} so the cycle can fan out instead of running a single query.`;
+                    }
+                    else if (qseed.code !== 0) {
+                        const qtail = (qseed.stderr || qseed.stdout).trim().split("\n").slice(-1)[0] || "unknown error";
+                        seedNote += ` (Search queries not expanded yet — ${qtail}. The cycle still runs off the seeded topics.)`;
+                    }
+                }
+                catch (e) {
+                    seedNote += ` (Search-query expansion skipped — ${e.message}.)`;
+                }
+            }
         }
         return jsonContent({
             ok: true,
@@ -584,7 +612,7 @@ server.registerTool("setup", {
             ready: result.ready,
             missing_required: result.missing_required,
             topics_seeded: result.ready,
-            config_path: CONFIG_PATH,
+            config_path: configPath(),
             note: result.ready
                 ? `Project '${result.project}' is fully set up.${seedNote} Next: connect X so the autoposter can post — ` +
                     `call setup with action:'connect_x' (it explains itself, then run again with confirm:true). ` +
@@ -803,7 +831,7 @@ server.registerTool("autopilot", {
             "not scoped to one project.");
     }
     const uid = process.getuid ? process.getuid() : 0;
-    const logDir = path.join(REPO_DIR, "skill", "logs");
+    const logDir = path.join(repoDir(), "skill", "logs");
     if (action === "status") {
         const res = await run("launchctl", ["list"], { timeoutMs: 10_000 });
         const lines = res.stdout.split("\n");
@@ -821,7 +849,7 @@ server.registerTool("autopilot", {
         //    plist exists yet; never overwrite a hand-tuned/dev plist.
         const createdCycle = ensurePlist(TWITTER_AUTOPILOT_PLIST, plistXml({
             label: TWITTER_AUTOPILOT_LABEL,
-            programArgs: ["/bin/bash", path.join(REPO_DIR, "skill", "run-cycle-update-guard.sh")],
+            programArgs: ["/bin/bash", path.join(repoDir(), "skill", "run-cycle-update-guard.sh")],
             intervalSecs: 60,
             runAtLoad: false,
             stdoutLog: path.join(logDir, "launchd-twitter-cycle-stdout.log"),
@@ -832,7 +860,7 @@ server.registerTool("autopilot", {
         //    in the loop. RunAtLoad so it also checks shortly after enable.
         const createdUpdater = ensurePlist(UPDATER_PLIST, plistXml({
             label: UPDATER_LABEL,
-            programArgs: ["/bin/bash", path.join(REPO_DIR, "skill", "social-autoposter-update.sh")],
+            programArgs: ["/bin/bash", path.join(repoDir(), "skill", "social-autoposter-update.sh")],
             intervalSecs: 86_400,
             runAtLoad: true,
             stdoutLog: path.join(logDir, "launchd-self-update-stdout.log"),
@@ -950,6 +978,113 @@ server.registerTool("version", {
                 : "You are on the latest published version.",
     });
 });
+// ---- runtime installer ----------------------------------------------------
+// The pipeline runs Python locally. Rather than depend on the user's system
+// Python (the #1 source of install failures), the first run provisions a fully
+// OWNED uv runtime: standalone CPython + owned venv + deps + Chromium. These two
+// tools drive it. They are plain (non-UI) tools so EVERY host can install — the
+// panel's Install card is just a skin that calls install_runtime then polls
+// install_status. See runtime.ts for the provisioning + progress contract.
+function runtimeSnapshot() {
+    const rt = readRuntime();
+    const progress = readProgress();
+    return {
+        runtime_ready: runtimeReady(),
+        provisioning: isProvisioning(),
+        python: rt?.python ?? null,
+        python_version: rt?.python_version ?? null,
+        progress: progress ?? null,
+    };
+}
+server.registerTool("install_runtime", {
+    title: "Install the Python runtime",
+    description: "One-time setup that provisions the self-contained runtime the autoposter needs: a private " +
+        "Python (via uv, not your system Python), its dependencies, and the Chromium browser. Runs in " +
+        "the background and returns immediately; poll `install_status` for progress. Safe to call " +
+        "repeatedly; it resumes/repairs and is a no-op once everything is installed. Use this the " +
+        "first time the user sets up, or if other tools report the runtime isn't ready.",
+    inputSchema: {},
+}, async () => {
+    if (runtimeReady()) {
+        return jsonContent({ already_installed: true, ...runtimeSnapshot() });
+    }
+    const progress = startProvisioning();
+    return jsonContent({
+        started: true,
+        runtime_ready: false,
+        note: "Runtime install started. Poll install_status every ~1.5s for progress.",
+        progress,
+    });
+});
+server.registerTool("install_status", {
+    title: "Runtime install status",
+    description: "Report whether the self-contained Python/Chromium runtime is installed and, if an install is " +
+        "in progress, the per-step progress (uv, Python, venv, dependencies, Chromium). Poll this after " +
+        "install_runtime to follow the install to completion.",
+    inputSchema: {},
+}, async () => jsonContent(runtimeSnapshot()));
+// ---- config: read / edit the raw config.json ------------------------------
+// The panel renders the full config and lets the user edit it. Writing is
+// guarded: the new content must parse as JSON, and we always drop a timestamped
+// backup next to config.json before overwriting, so a bad paste is recoverable.
+server.registerTool("config", {
+    title: "View or edit config.json",
+    description: "Read or update the autoposter's config.json (the source of truth for every project, the X/" +
+        "Reddit/LinkedIn account handles, topics, and exclusions). action:'get' (default) returns the " +
+        "full raw JSON; action:'save' validates the supplied `content` as JSON, writes a timestamped " +
+        "backup, then overwrites config.json. Use when the user asks to see, edit, or fix their config.",
+    inputSchema: {
+        action: z.enum(["get", "save"]).optional(),
+        content: z.string().optional(),
+    },
+}, async (args) => {
+    const action = args.action || "get";
+    const cfgPath = configPath();
+    if (action === "get") {
+        try {
+            const content = fs.readFileSync(cfgPath, "utf-8");
+            return jsonContent({ ok: true, path: cfgPath, bytes: content.length, content });
+        }
+        catch (e) {
+            return jsonContent({ ok: false, path: cfgPath, error: String(e?.message || e) });
+        }
+    }
+    // save
+    const content = args.content;
+    if (typeof content !== "string" || content.trim() === "") {
+        return jsonContent({ ok: false, error: "Nothing to save: `content` was empty." });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch (e) {
+        // Don't write a config that won't parse — every pipeline reads this file.
+        return jsonContent({ ok: false, error: "Invalid JSON, not saved: " + String(e?.message || e) });
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return jsonContent({ ok: false, error: "Top level of config.json must be a JSON object." });
+    }
+    try {
+        const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+        const backup = `${cfgPath}.bak-panel-${stamp}`;
+        try {
+            fs.copyFileSync(cfgPath, backup);
+        }
+        catch {
+            /* first-write / missing original is non-fatal */
+        }
+        // Re-serialize the parsed object so what lands on disk is canonical,
+        // 2-space-indented JSON with a trailing newline (matches the Python
+        // writers), regardless of how the user formatted their paste.
+        const out = JSON.stringify(parsed, null, 2) + "\n";
+        fs.writeFileSync(cfgPath, out, "utf-8");
+        return jsonContent({ ok: true, path: cfgPath, bytes: out.length, backup });
+    }
+    catch (e) {
+        return jsonContent({ ok: false, error: "Write failed: " + String(e?.message || e) });
+    }
+});
 // ---- panel: MCP Apps control surface --------------------------------------
 // A self-contained HTML view rendered by hosts that support MCP Apps (Claude
 // desktop/web, etc.). It duplicates NO pipeline logic: each button calls one of
@@ -990,11 +1125,16 @@ async function buildSnapshot() {
         projects_ready: projects.filter((p) => p.ready).length,
         x_connected: !!x.connected,
         x_state: x.state || "",
+        x_handle: x.handle ?? null,
         autopilot_on: ap.autopilot_on,
         auto_update_on: ap.auto_update_on,
         version: ver.installed || VERSION,
         latest_version: ver.latest ?? null,
         update_available: !!ver.update_available,
+        // Runtime install gate: the panel shows the Install card (and disables the
+        // action buttons) until the owned Python/Chromium runtime is provisioned.
+        runtime_ready: runtimeReady(),
+        runtime_provisioning: isProvisioning(),
     };
 }
 registerAppTool(server, "panel", {
@@ -1030,7 +1170,7 @@ registerAppResource(server, "Social Autoposter panel", PANEL_URI, { mimeType: RE
 async function main() {
     const transport = new StdioServerTransport();
     await server.connect(transport);
-    console.error(`[social-autoposter-mcp] connected. v=${VERSION} repo=${REPO_DIR}`);
+    console.error(`[social-autoposter-mcp] connected. v=${VERSION} repo=${repoDir()}`);
 }
 main().catch((err) => {
     console.error("[social-autoposter-mcp] fatal:", err);