social-autoposter 1.6.93 → 1.6.95

package/mcp/dist/index.js

@@ -18,7 +18,7 @@ import os from "node:os";
 import path from "node:path";
 import fs from "node:fs";
 import { repoDir, runPython, run, readPlan, writePlan, planPath, scanResultPath, } from "./repo.js";
-import { applySetup, resolveProject, listManagedProjectStatus, REQUIRED_FIELDS, RECOMMENDED_FIELDS, configPath, } from "./setup.js";
+import { applySetup, resolveProject, listManagedProjectStatus, ensureShortLinksDefault, REQUIRED_FIELDS, RECOMMENDED_FIELDS, configPath, } from "./setup.js";
 import { xStatus, xConnect, xDetectSources, xScanProfile, summarizeXAuth } from "./twitterAuth.js";
 import { startProvisioning, isProvisioning, readProgress, runtimeReady, readRuntime, resolvePython, resolveChrome, ensureMenubar, ensurePipelineCurrent, } from "./runtime.js";
 import { blockOnboardingMilestone, completeOnboardingMilestone, ensureDoctorPhase, onboardingLedger, onboardingSnapshot, recordOnboardingAttempt, runDoctorPhase, } from "./onboarding.js";
@@ -655,6 +655,7 @@ async function postApproved(batchId, plan) {
     // the post for the browser. Reset is guaranteed by scheduleShellLockRelease()
     // in the finally below, so an early/failed post can't wedge scanning.
     postingActive = true;
+    startPostingFlagHeartbeat(); // cross-instance: a sibling MCP's scan defers too
     // Posting is a priority over scanning: abort any in-flight plugin scan so the
     // approved post takes the browser immediately instead of waiting on the lock.
     // Plugin pipeline only — never affects the plist autopilot.
@@ -2020,6 +2021,64 @@ function sapsStateDir() {
     return (process.env.SAPS_STATE_DIR ||
         path.join(process.env.HOME || os.homedir(), ".social-autoposter-mcp"));
 }
+// ---- Cross-instance "posting active" flag ----------------------------------
+// posting-active.json in the shared state dir is the CROSS-MCP-INSTANCE version
+// of the in-process `postingActive` flag. The autopilot scan and the post
+// sometimes run in the SAME MCP (the in-process flag covers that) and sometimes
+// in TWO SEPARATE MCP instances (different agent sessions each spawn their own).
+// A file every instance's scan_candidates reads makes the mutual exclusion hold
+// regardless of which topology Claude Desktop happens to use. Heartbeat'd with a
+// short TTL so a crashed poster's flag self-clears and never wedges scanning.
+const POSTING_FLAG_TTL_MS = 45_000;
+let postingFlagHeartbeat = null;
+function postingFlagPath() {
+    return path.join(sapsStateDir(), "posting-active.json");
+}
+function writePostingFlag() {
+    try {
+        fs.mkdirSync(sapsStateDir(), { recursive: true });
+        fs.writeFileSync(postingFlagPath(), JSON.stringify({ pid: process.pid, expires_at: Date.now() + POSTING_FLAG_TTL_MS }) + "\n", "utf-8");
+    }
+    catch {
+        /* best effort */
+    }
+}
+function startPostingFlagHeartbeat() {
+    writePostingFlag();
+    if (postingFlagHeartbeat)
+        return;
+    // Refresh well within the TTL so a long batch stays flagged, but a dead poster
+    // expires within POSTING_FLAG_TTL_MS.
+    postingFlagHeartbeat = setInterval(() => {
+        if (postingActive)
+            writePostingFlag();
+    }, Math.floor(POSTING_FLAG_TTL_MS / 2));
+    if (typeof postingFlagHeartbeat.unref === "function")
+        postingFlagHeartbeat.unref();
+}
+function stopPostingFlagHeartbeat() {
+    if (postingFlagHeartbeat) {
+        clearInterval(postingFlagHeartbeat);
+        postingFlagHeartbeat = null;
+    }
+    try {
+        fs.rmSync(postingFlagPath(), { force: true });
+    }
+    catch {
+        /* best effort */
+    }
+}
+// True when ANY MCP instance has a FRESH posting flag on disk. Absent or expired
+// == not posting. This is what makes a sibling instance's scan_candidates defer.
+function isPostingFlagFresh() {
+    try {
+        const j = JSON.parse(fs.readFileSync(postingFlagPath(), "utf-8"));
+        return typeof j?.expires_at === "number" && j.expires_at > Date.now();
+    }
+    catch {
+        return false;
+    }
+}
 // activity.json: a tiny "what's running right now" signal the menu bar reads to
 // show a loading spinner + label (scanning / drafting / posting / …). Written by
 // long-running tools, cleared when they finish. Best-effort; absence == idle.
@@ -2327,6 +2386,7 @@ function scheduleShellLockRelease() {
     shellLockReleaseTimer = setTimeout(() => {
         shellLockReleaseTimer = null;
         postingActive = false; // posting drained -> the autopilot may scan again
+        stopPostingFlagHeartbeat(); // clear the cross-instance flag too
         releaseShellBrowserLock();
     }, SHELL_LOCK_GRACE_MS);
 }
@@ -2573,7 +2633,7 @@ tool("scan_candidates", {
     // post are children of THIS MCP, so this in-process gate is exact — the
     // autopilot never even starts a scan to interrupt a post. Posting always wins;
     // the autopilot just re-calls and runs once the batch drains.
-    if (postingActive)
+    if (postingActive || isPostingFlagFresh())
         return scanDeferredForPost();
     // Long-poll the single in-flight scan job (see the ScanJob registry above).
     // A finished-but-unconsumed job: hand back its result and clear the slot so a
@@ -2927,6 +2987,19 @@ async function main() {
     // scan -> submit path never stalls on an "Ask mode" permission prompt (see the
     // helper's note). Best-effort, allow-only, gated on the task existing.
     ensureAutopilotToolsAllowed();
+    // Heal installs onboarded before short_links_live defaulted to false: such a
+    // project wraps short links against the customer's own domain, which has no
+    // /r/[code] resolver, so every minted link 404s. Re-point them at the s4l.ai
+    // resolver. Idempotent, scoped to managed projects, best-effort.
+    try {
+        const r = ensureShortLinksDefault();
+        if (r.healed.length) {
+            console.error(`[social-autoposter-mcp] short-links heal: routed ${r.healed.join(", ")} through s4l.ai (short_links_live=false)`);
+        }
+    }
+    catch (e) {
+        console.error("[social-autoposter-mcp] short-links heal failed:", e?.message || e);
+    }
     const transport = new StdioServerTransport();
     await server.connect(transport);
     console.error(`[social-autoposter-mcp] connected. v=${VERSION} repo=${repoDir()}`);

package/mcp/dist/setup.js

@@ -158,6 +158,16 @@ export function buildProjectEntry(input) {
         weight: 10,
         platform: "twitter",
         voice_relationship: "first_party",
+        // A freshly onboarded customer has NOT shipped the @m13v/seo-components
+        // /r/[code] resolver on their own domain, so a wrapped short link minted
+        // against project.website would 404 ("this link doesn't exist"). Default
+        // new projects to route /r/<code> through the social-autoposter-owned
+        // resolver at https://s4l.ai instead: short_links_live=false makes
+        // _project_short_links_host / getProjectWrapperHost fall back to
+        // DEFAULT_FALLBACK_HOST. The customer flips this to true (or removes it)
+        // only AFTER they ship their own /r/[code] handler. See the "URL wrapping"
+        // section in CLAUDE.md.
+        short_links_live: false,
         ...userFields(input),
     };
     // Generic fields can override the defaults above (e.g. platform/weight) and
@@ -211,6 +221,52 @@ export function applySetup(input) {
         fields_removed,
     };
 }
+// Heal installs that onboarded BEFORE short_links_live defaulted to false.
+// Such a project has neither short_links_host nor an explicit short_links_live,
+// so the wrapper host resolves to project.website — but the customer never
+// shipped a /r/[code] resolver there, so every minted short link 404s. Set
+// short_links_live=false (route /r/<code> through s4l.ai) for those projects.
+//
+// Scoped to projects this install actually manages, so a hand-maintained dev
+// config with branded-resolver projects isn't rewritten. Idempotent: a project
+// that already has either short-link field set is left untouched (someone made
+// a deliberate choice). Best-effort; never throws.
+export function ensureShortLinksDefault() {
+    const healed = [];
+    try {
+        const cfg = readConfig();
+        const projects = cfg.projects || [];
+        if (!projects.length)
+            return { healed };
+        const managed = new Set(managedProjects());
+        let changed = false;
+        for (const p of projects) {
+            const name = typeof p.name === "string" ? p.name : "";
+            if (!name || !managed.has(name))
+                continue;
+            const hasHost = typeof p.short_links_host === "string" && p.short_links_host.trim() !== "";
+            const hasLiveFlag = p.short_links_live === true || p.short_links_live === false;
+            if (hasHost || hasLiveFlag)
+                continue; // deliberate config: leave it.
+            p.short_links_live = false;
+            healed.push(name);
+            changed = true;
+        }
+        if (changed) {
+            const cfgPath = configPath();
+            if (fs.existsSync(cfgPath)) {
+                const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+                fs.copyFileSync(cfgPath, `${cfgPath}.bak-${stamp}`);
+            }
+            fs.mkdirSync(path.dirname(cfgPath), { recursive: true });
+            fs.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2) + "\n", "utf-8");
+        }
+    }
+    catch {
+        // best-effort heal; a failure here must never block boot.
+    }
+    return { healed };
+}
 // ---------------------------------------------------------------------------
 // Readiness (derived from config.json, never stored).
 // ---------------------------------------------------------------------------

package/mcp/dist/version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.6.93",
-  "installedAt": "2026-06-23T20:32:39.303Z"
+  "version": "1.6.95",
+  "installedAt": "2026-06-24T00:44:52.989Z"
 }

package/mcp/manifest.json

@@ -2,7 +2,7 @@
   "dxt_version": "0.1",
   "name": "social-autoposter",
   "display_name": "S4L",
-  "version": "1.6.93",
+  "version": "1.6.95",
   "description": "Draft, review, approve, and autopilot X/Twitter posts. Thin desktop client over the S4L pipeline.",
   "long_description": "A guided assistant that drafts, reviews, and autopilots X/Twitter posts.\nTo get started:\n1. Click **Configure** and set every tool permission to **Always Allow**.\n2. Copy this prompt: **Set me up on S4L end to end**.\n3. Quit fully with CMD+Q, restart Claude, and paste the prompt into a new chat.",
   "author": {

package/mcp/menubar/s4l_card.py

@@ -17,6 +17,7 @@ run loop, so that holds).
 import objc
 from Foundation import NSObject, NSMakeRect
 from AppKit import (
+    NSApp,
     NSPanel,
     NSButton,
     NSTextField,
@@ -108,8 +109,23 @@ class _ReviewController(NSObject):
         panel.setDelegate_(self)
         self._panel = panel
         self._render()
+        # The menu bar app runs as an accessory (LSUIElement, no dock icon), so
+        # ordering the panel front is NOT enough to type into the reply field:
+        # keystrokes only route to a text view when the OWNING APP is the active
+        # application. Without this activation the cursor appears in the field but
+        # every keypress goes to whatever app is actually frontmost, which is the
+        # "editable field that isn't editable at all" bug. Activate the app, make
+        # the panel key, then drop the caret into the reply text view.
+        try:
+            NSApp.activateIgnoringOtherApps_(True)
+        except Exception:
+            pass
         panel.makeKeyAndOrderFront_(None)
         panel.orderFrontRegardless()
+        # _render() already seated the caret in the reply field; re-seat once more
+        # after the panel is key so the very first card is editable immediately.
+        if self._textview is not None:
+            panel.makeFirstResponder_(self._textview)
 
     @objc.python_method
     def _render(self):
@@ -182,6 +198,10 @@ class _ReviewController(NSObject):
         self._panel.setContentView_(content)
         # Counter lives in the native title bar, not inside the content.
         self._panel.setTitle_(f"Review draft {self._idx + 1} of {len(self._drafts)}")
+        # setContentView_ rebuilds the view tree, so the caret would otherwise
+        # default to the Approve button. Re-seat it in the reply field for every
+        # card (not just the first) so each one is immediately editable.
+        self._panel.makeFirstResponder_(tv)
 
     @objc.python_method
     def _current_text(self):

package/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m13v/social-autoposter-mcp",
-  "version": "1.6.93",
+  "version": "1.6.95",
   "private": true,
   "description": "Desktop MCP client for social-autoposter (X/Twitter rail): manual draft/review/approve loop, autopilot control, and stats. Thin wrapper over the existing pipeline scripts.",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "social-autoposter",
-  "version": "1.6.93",
+  "version": "1.6.95",
   "description": "Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.",
   "bin": {
     "social-autoposter": "bin/cli.js"