@nextcommerce/campaigns-os 1.37.3 → 1.43.1

package/contracts/release-ledger.json

@@ -5357,6 +5357,1547 @@
         }
       ],
       "entry_sha256": "fb317fe901bbab34f0c909b523a9e4e07040285a5f6883ee572c6f927681c0b1"
+    },
+    {
+      "id": "RL-0131",
+      "sequence": 131,
+      "date": "2026-09-19",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.37.3+agent.1",
+      "changelog_sha256": "46f21d1154cbd769f70ad006d60c7e37664367ca7e1f91a964ee92ec2753789d",
+      "agent_impact": "docs/versioning.md no longer states a package version literal; read the number from package.json, surface_version, or the registry. The progress export is documented as shipped in 1.37.1 and later, not as a candidate. No command, schema, skill or export changed.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "docs/versioning.md",
+          "surface_entry": "docs/versioning.md",
+          "summary": "Drop the restated package version; point at package.json, surface_version and the registry instead."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/progress-snapshots.md",
+          "surface_entry": "docs/progress-snapshots.md",
+          "summary": "Describe the progress export as shipped in 1.37.1 and later, not a candidate absent from the published install."
+        },
+        {
+          "class": "documentation",
+          "path": "AGENTS.md",
+          "surface_entry": "AGENTS.md",
+          "summary": "Describe 1.36.0 progress observations as published in 1.37.1 and later, not a candidate."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "docs/supported-surface.md",
+          "surface_entry": "docs/supported-surface.md",
+          "summary": "Describe the 1.36.0 progress export as published in 1.37.1 and later, not a candidate."
+        }
+      ],
+      "entry_sha256": "2d229149aed64ab580016056719f83edb65634dabacb824c0f4d89c003a9b4ae"
+    },
+    {
+      "id": "RL-0132",
+      "sequence": 132,
+      "date": "2026-09-21",
+      "kind": "release",
+      "surface_version": "1.38.0",
+      "changelog_section": "1.38.0",
+      "changelog_sha256": "d5fcdc641de2c9fa774e4802732cb54b835243e1252b98cfb68bf9cb92c9170c",
+      "agent_impact": "Login/logout are additive; spec derive --from-store now requires gateway login by default. Existing direct callers must explicitly name their Admin-token environment variable. Store derivation rules remain unchanged. Gateway availability is limited to the admitted owned-store private pilot.",
+      "compatibility": "breaking",
+      "migration": "For admitted pilot stores, run campaigns-os login --store <subdomain> before default store derivation. To retain existing direct Admin reads, explicitly add --store-token-source env:<VAR> using the existing variable. No implicit environment fallback remains. Publication and external trials are separately gated.",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Register login/logout and the gateway guide; bump supported surface to 1.38.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/build-packet.md",
+          "surface_entry": "docs/build-packet.md",
+          "summary": "Replace implicit Admin environment lookup with gateway default and explicit direct-token migration."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/gateway-login.md",
+          "surface_entry": "docs/gateway-login.md",
+          "summary": "Explain browser consent, credential storage, refresh/logout recovery, explicit direct migration and private-pilot limits."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate supported-surface version reference for 1.38.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate supported-surface version reference for 1.38.0."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "docs/supported-surface.md",
+          "surface_entry": "docs/supported-surface.md",
+          "summary": "Document login commands and breaking gateway-default migration within the private pilot."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Align root package version to 1.38.0 without dependency changes."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Advance package to 1.38.0 and ship the gateway guide for login commands and breaking default transport migration."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "login",
+          "summary": "Add login/logout wiring, gateway-default store reads with explicit warned direct-token migration, local safe status and separate telemetry warning; clarify lifecycle exclusions."
+        }
+      ],
+      "entry_sha256": "7a48d75f0b2e9413126d288faced22a2f5dbb58bd7548374631bb42f8e979a14"
+    },
+    {
+      "id": "RL-0133",
+      "sequence": 133,
+      "date": "2026-09-21",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.38.0+agent.1",
+      "changelog_sha256": "48e5f9e0cd7d0be7c34bebfa811c3671a1722840f69dccc513f3d98c027ccc78",
+      "agent_impact": "The packaged lifecycle skill now matches the 1.38.0 gateway-default store-read behavior. Existing direct Admin callers must explicitly select env:<VAR>; implicit environment lookup and gateway-failure fallback are not supported.",
+      "compatibility": "compatible",
+      "migration": "Refresh the installed next-campaigns-os skill to 1.0.18. The runtime migration remains the one recorded in RL-0132: use an admitted gateway login or explicitly select --store-token-source env:<VAR>.",
+      "changes": [
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Align only the next-campaigns-os manifest version to 1.0.18."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Correct step 5 to gateway login default and explicit warned direct-token selection; bump skill to 1.0.18."
+        }
+      ],
+      "entry_sha256": "c31d5b0fe0f4bcd871897d923466d529f5399010b0bb009326789d69294e00c8"
+    },
+    {
+      "id": "RL-0134",
+      "sequence": 134,
+      "date": "2026-09-22",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.38.0+agent.2",
+      "changelog_sha256": "0d1bfe9525ba8a6c5e94af7763683b26f2bc11b45035905ea95b48ba67e12497",
+      "agent_impact": "Facts about the lifecycle journal, however the journal was selected (--lifecycle-journal, CAMPAIGNS_OS_LIFECYCLE_LOG, or an active run session). A known command run with --no-write no longer appends an entry. A refused invocation — an unknown command, an unknown subcommand refused before its handler runs, or a flag the command refuses up front — never appends one and creates no file of its own, with or without --no-write. A command that fails inside its handler still appends; `next <unknown-stage>` is such a failure, because it resolves the workspace before it rejects the stage. `run status` never appends one, with or without --no-write. One effect still precedes argument refusal: `start`, `prepare-build`, `build`, `run start` and `run end` close out a stale run session at the root they are about to act on (Run Record assembled and remitted under the usual consent, session file cleared) before argv is refused — a declared effect of those commands, now suppressed by --no-write, which therefore leaves the target byte-identical. A workflow that needs a journal entry for an inspection must run a known command without --no-write; removing --no-write from a refused invocation or from `run status` will not produce one. A workflow that relied on `run end --no-write` reporting a stale closeout gets \"no active run session to end\" instead: --no-write no longer performs the closeout it could not record.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "run",
+          "summary": "--no-write writes nothing: it suppresses the lifecycle-journal append for every command and the pre-dispatch stale-session closeout that start/prepare-build/build/run start/run end perform. A refused invocation (unknown command, an unknown subcommand refused before its handler runs, or a flag the command refuses up front) and `run status` never append an entry; help text states both and names the closeout as the one effect that precedes refusal."
+        },
+        {
+          "class": "documentation",
+          "path": "AGENTS.md",
+          "surface_entry": "AGENTS.md",
+          "summary": "State the Run Telemetry default: remit on by default for the canonical endpoint, announced on stderr, capture local and opt-in (a journal selected by flag, env or an active run session), the three ways to turn remit off, and what a refused invocation does and does not write."
+        }
+      ],
+      "entry_sha256": "acc83968f757fbcb96577b1232f0af280bea6d7e98b401d7b14e61aeaed144c0"
+    },
+    {
+      "id": "RL-0135",
+      "sequence": 135,
+      "date": "2026-09-22",
+      "kind": "release",
+      "surface_version": "1.39.0",
+      "changelog_section": "1.39.0",
+      "changelog_sha256": "7fa7017fbcb7b6d82f2571e3179d54193f60d012e11683e0a831f692bb8deb44",
+      "agent_impact": "A new supported CLI command, `campaigns-os readback <target-repo-root> [--json]`, projects a read-only view of a run's emitted artifacts and writes nothing under the target (no lifecycle journal entry either). Its JSON payload is the new `campaigns-os-readback/v2` contract: staleness is assessed per artifact, so `staleness.stale` is true when ANY loaded artifact predates the checkout's last HEAD movement, where the previous projection compared only the newest artifact and reported such a set fresh. A consumer gating on freshness should accept `campaigns-os-readback/v2` and read `staleness.stale_keys` or `staleness.artifacts` to name the stale artifacts. An artifact that recorded a `generated_at` the readback cannot parse has an age it never established: `staleness.unparseable_keys` names those artifacts in render order, their artifact rows carry the shape of the refused value rather than the value, and `clean` is false whenever that list is non-empty, so an unknown age can no longer ride along on a fresh sibling. `computable` and `stale` keep their meanings, and an artifact carrying no `generated_at` key at all is unchanged — it recorded no age to check, so it stays out of the comparison and is not by itself unclean. Separately, the four mutating commands that lacked one gain `--dry-run`: `run-record`, `qa publish`, `checkpoint waive` and `theme waive`. Each validates and assembles exactly as the real command does, writes nothing under the target and opens no connection, and exits as the real command would — so an agent can preview a Run Record, a verdict publish or a waiver before committing to it. Validation is not weaker under the flag: every check on the route from argv to the first effect runs, by the same code, including the ones that live inside the effect — an invalid Run Record is refused with the writer's own message and exit 1, a waive over a report that is not an Assembly Report object is refused as the commit refuses it, and a `--proxy-base` the transport declines before it opens a socket fails `qa publish --dry-run` with `publish_failed` and exit 1 exactly as the real publish does. The envelopes gain `dry_run: true` plus `would_write`/`would_remit` and `would_remit_refused` (run-record), `would_publish`/`would_post` with `status: \"dry_run\"` (qa publish), and `would_write` with `status: \"dry_run\"` (both waives); `run end` carries the flag through and leaves the session open. On those commands a `--dry-run` invocation also appends no command-lifecycle entry and runs no stale-session closeout, so an idle session is left on disk for a real invocation and `run end --dry-run` at a root whose only session is stale refuses with `No active run session to end`; on a command that does not implement the flag (`qa run`, say) the shared parser still accepts it and the command behaves exactly as before, lifecycle entry included. No existing command, flag or output changed.",
+      "compatibility": "additive",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Advance surface_version to 1.39.0 and add the readback command, its v2 schema and its contract doc to the supported surface."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "readback",
+          "summary": "Dispatch the new read-only readback command, document it in help, and exempt it from lifecycle-journal capture and from run-session resolution and stale-session sweeping, so its --packet is read only by the readback's own bounded reader. Add --dry-run to run-record, qa publish, checkpoint waive and theme waive (help, envelopes and exit codes unchanged for the real invocations), carry it through run end without clearing the session, route both waive paths through commitAssemblyReport itself so a dry run makes every check the commit makes and differs only in returning no report to write, validate the Run Record on both paths before the write that would otherwise be the only caller of the validator, put the remit destination through the transport's own gate under the flag, and exempt --dry-run invocations of the commands that implement the flag (DRY_RUN_COMMANDS) from lifecycle-journal capture and from the pre-dispatch stale-session sweep, leaving every other command's behaviour under the flag unchanged."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaigns-os-readback.v2.schema.json",
+          "surface_entry": "schemas/campaigns-os-readback.v2.schema.json",
+          "summary": "Publish the campaigns-os-readback/v2 payload shape, including per-artifact staleness, the any-artifact aggregate, and staleness.unparseable_keys with the clean rule that an artifact of unestablished age makes the projection unclean."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/readback.md",
+          "surface_entry": "docs/readback.md",
+          "summary": "Document the readback contract: fields, the clean rule including the unknown-age condition and how it differs from an artifact that recorded no generated_at, exit codes, the bundled --example sample, and the v1 to v2 delta."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate the orientation reference for surface version 1.39.0 and the readback command."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate the runtime reference for surface version 1.39.0."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Version 1.39.0 and ship docs/readback.md in the npm pack."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Regenerated lockfile version fields for 1.39.0."
+        }
+      ],
+      "entry_sha256": "ebd6da5237985b3bc5dbb4b3486818a32b97a5259d17a9d981662fc4d009658b"
+    },
+    {
+      "id": "RL-0136",
+      "sequence": 136,
+      "date": "2026-09-23",
+      "kind": "release",
+      "surface_version": "1.40.0",
+      "changelog_section": "1.40.0",
+      "changelog_sha256": "c45e5757885f673daa48a9e987909db4b874e04bc42e1c2284a1839ddf2d9837",
+      "agent_impact": "The bundle gains four skills for working a campaign, each at version 1.0.0, and AGENTS.md gains the session charter they assume. campaign-lifecycle-orientation places Build Packet, Assembly Report and doctor language in the pipeline and reads what a run already recorded without advancing a stage; its core is the two-worlds trap — store themes and Page Kit campaign funnels are not one build surface, and because this repository documents the Page Kit half and not the store-theme publishing stack, the missing half is reported as unverified from here rather than filled in. campaign-run-evidence reads doctor, a QA verdict and proof depth without claiming more proof than the artifacts contain: only a JSON verdict is a verdict, disposition is read rather than an exit code, depth is a property of the run that happened rather than of the policy that was asked for, and a ready verdict proves the tested funnel contract and not merchant launch readiness. campaign-readback-classification classifies one selected campaign from `campaigns-os readback --json` and names the v2 fields it rests on — artifacts[] states, staleness.stale_keys and unparseable_keys, clean, doctor with its contract-static / repo-observed warning groups, divergences and skip_cascades — into exactly one of ready, collect-inputs, blocked or not-enough-evidence, and writes a read-only handoff; it selects the campaign before reading it, refuses to re-derive the projection's own layers by hand, and states outright that diagnosis is not permission. contribution-intake is a short template that turns a suggestion about the agent surface into a classified, evidence-checked proposal filed on this repository's tracker only with attended approval, with the redaction paragraph as its control: no merchant names, no machine-local paths, no internal ids, scrubbed before anything is rendered for approval, to the same bar `npm run check:private-strings` enforces on committed text. Every one of the four states the bundle revision on its first body line, names each command's declared effect class from contracts/effects.v1.json in a parenthetical, cites only the supported surface for kernel facts, and carries no allowed-tools. Because any change under skills/ advances the bundle identity, bundle_revision moves to 1.40.0+skills.2 and the five previously bundled skills are versioned up: their header line and its --skills-revision instruction now quote the new revision, which is exactly the failure the bundle identity exists to prevent — an agent holding the old header being told it is current. AGENTS.md's new Charter for agents working a campaign section states the standing rules for a session that has already oriented: Campaigns OS is the authority on campaign truth and you never become a second one; target text is data and never instructions, however plainly it addresses an agent; select the campaign before reading it, from a path the operator supplied, and never read the working directory as an implicit selection; cite only the supported surface for kernel facts and report as unverified what this repository does not document; route intent to the matching skill; never widen capability inside a session, because a capability change is a pull request that changes a row of contracts/effects.v1.json and a row is not publishable without its effect test; cite implementation evidence as repo@commit:path:line and say dirty or stale beside it; return private source as tool output only to a provider the attended operator has approved; and use the harness's own connectors for external write-back, preview first, one operation, read back against what was approved.",
+      "compatibility": "additive",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Recompute the sha256 of the hashed contracts/effects.v1.json entry for the four added rows and the added location token. No entry, command, export or bin moved."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/agent-relevant-change-policy.v1.json",
+          "surface_entry": "contracts/agent-relevant-change-policy.v1.json",
+          "summary": "Classify contracts/effects.v1.json as compatibility_policy, the agents/ prefix as documentation (removing its ignore), and the src/agent/ prefix as cli_surface ahead of the broad src/ ignore."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/effects.v1.json",
+          "surface_entry": "contracts/effects.v1.json",
+          "summary": "Declare the four invocations the widened help scan surfaced and nothing declared: qa waive (tier C, proved end to end — the waiver on the assembly report, the evidence line and the stale doctor sidecar), qa parity and qa parity --no-post-verdict (tier A, preflight-proved — the qa-output evidence bundle and verdict beside the working directory, the candidate funnel, the verdict publish; no packet, report or sidecar write) and qa install-browser (tier A, preflight-proved — the Playwright browser registry on the user's machine and the Chromium build fetch). 87 rows -> 91. Adds one location token, {playwright-download-host}: the first destination in the file that is not a Campaigns OS endpoint."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaigns-os-effects.v1.schema.json",
+          "surface_entry": "schemas/campaigns-os-effects.v1.schema.json",
+          "summary": "Publish the campaigns-os-effects/v1 shape: the row, its write and send entries, the location-token vocabulary, the effect-changing flag list, the five conditions, the two test scopes, and the preflight allowances a preflight row must declare."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/effects.md",
+          "surface_entry": "docs/effects.md",
+          "summary": "Say that the coverage scan reads every help block the CLI prints, not one file's, and name the gap that made the point (qa parity, qa waive and qa install-browser owed no row while only src/cli.mjs was read). Add {playwright-download-host} to the location-token table and the three new preflight rows to the table of what the offline fixture cannot reach."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate the orientation reference for surface version 1.40.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate the runtime reference for surface version 1.40.0."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Ship docs/skills-revision.md in the npm pack, as every named surface entry must be."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Regenerated lockfile version fields for 1.40.0."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Publish the four new skill packages (id, name, version 1.0.0, path, domain campaigns, description) and advance bundle_revision 1.40.0+skills.1 -> 1.40.0+skills.2, which check-skill-versions.mjs --base requires because files under skills/ changed. Version every previously bundled skill up for the header line that moved with it: next-campaigns-os 1.0.19 -> 1.0.20, next-campaigns-os-setup 2.0.2 -> 2.0.3, next-campaigns-build 1.0.4 -> 1.0.5, next-campaigns-polish 1.1.3 -> 1.1.4, next-campaigns-qa 1.3.3 -> 1.3.4."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it (1.40.0+skills.1 -> 1.40.0+skills.2); version 1.0.19 -> 1.0.20. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 2.0.2 -> 2.0.3. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.0.4 -> 1.0.5. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.1.3 -> 1.1.4. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.3.3 -> 1.3.4. Also correct one command reference the new reference test refused: the diagnostic fallback is `campaigns-os qa run --legacy-api-test-order`, not `campaigns-os qa --legacy-api-test-order` — the flag belongs to the qa run invocation, and bare `qa` declares no effects row."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "tooling",
+          "summary": "Add tooling status --skills-revision <bundle-revision|skill-id@version>: revision_check reports match, mismatch or unchecked in --json beside a skills_revision object, the text view prints one named header line, a mismatch prints the full status and then exits 2 with an action naming the fresh session, the on-disk revision is reported as on-disk, <skill-id>@<version> is accepted as a fallback spelling, and the flag is refused when given without a value."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "docs/supported-surface.md",
+          "surface_entry": "docs/supported-surface.md",
+          "summary": "Extend the skills row: the manifest now also carries bundle_revision, every SKILL.md states it, tooling status --skills-revision checks it, and it must advance whenever any bundled skill changes."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "State that nine skills are bundled as of 1.40.0 and refresh the fallback-spelling example to the shipped skill version."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "New skill at 1.0.0: orient a reader to the lifecycle artifacts a run has already emitted without advancing their state — the CONTEXT.md vocabulary, the Map ID / public route slug split, the page-type vocabulary, doctor as the gate whose recorded result (never an exit code) is read, the stage record and its completed/skipped terminal statuses, and the readback as the first thing to open. The two-worlds paragraph is the core: store themes and Page Kit funnels are not one build surface, and the store-theme half is reported as unverified from here. Identity comes from `campaigns-os tooling status --json`, never from a file beside the session."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "New skill at 1.0.0: interpret doctor, QA and proof depth without overclaiming. Only a JSON verdict is a verdict; disposition is one of ready / ready_with_exceptions / blocked and is read rather than inferred from an exit code; manual_review is not pass and ready_with_exceptions is not approval; persisted order read-back is the commerce authority and client-side cart state is not; an offline build cannot prove commerce behaviour; a ready verdict proves the tested funnel contract, not merchant launch readiness. `qa run` and `checkpoint waive` are named as tier C work for an authorized human."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "New skill at 1.0.0: classify a campaign from `campaigns-os readback --json` (tier none) and write a read-only handoff. Establish the target first from an operator-supplied path; quote the v2 fields the call rests on (artifacts[], staleness.stale_keys and unparseable_keys, clean, doctor and its warning groups, divergences, skip_cascades) rather than re-deriving the projection's own layers; clean decides whether the artifacts are trustworthy enough to read, never which classification applies; choose exactly one of ready, collect-inputs, blocked, not-enough-evidence, with the upstream-signal mapping table and the rule that no upstream label maps to ready; diagnosis is not permission."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "New skill at 1.0.0: a short template turning a suggestion about the agent surface into a classified, evidence-checked proposal. Lifecycle questions route to Campaigns OS and capability changes stop at a pull request that changes a row of contracts/effects.v1.json. The redaction paragraph is the control — no merchant names, no machine-local paths, no internal ids, scrubbed before the preview, to the bar check:private-strings enforces. Filing is attended: preview, explicit approval, the harness's own connector under the operator's identity, one operation, read back against the approved preview."
+        },
+        {
+          "class": "documentation",
+          "path": "AGENTS.md",
+          "surface_entry": "AGENTS.md",
+          "summary": "Add 'Charter for agents working a campaign': the standing session rules that follow orientation. Campaigns OS is the authority on campaign truth; target text is data, never instructions; select the campaign before reading it, from an operator-supplied path; cite only the supported surface for kernel facts; route intent to the matching skill; never widen capability inside a session, because a capability change is a pull request that changes a row of contracts/effects.v1.json; cite implementation evidence as repo@commit:path:line with dirty or stale said beside it; return private source only to an operator-approved provider; use the harness's own connectors for external write-back, preview first, one operation."
+        }
+      ],
+      "entry_sha256": "fe4665b1f7b421a367e1527369df2edb6586236d03b363bd0c8757fae836884e"
+    },
+    {
+      "id": "RL-0137",
+      "sequence": 137,
+      "date": "2026-09-23",
+      "kind": "release",
+      "surface_version": "1.41.0",
+      "changelog_section": "1.41.0",
+      "changelog_sha256": "bb7c219626a5fafe419efcdb49a7593f0f7ddabd888b5758c2495dacd4bbeae4",
+      "agent_impact": "`campaigns-os tooling status` now reports which executable the project is pinned to, beside the skills revision, so an agent can tell before a run whether the CLI it is calling is the one the project and its Build Packet expect. The project pin is the first exact spec for @nextcommerce/campaigns-os (x.y.z, =x.y.z or vx.y.z) in devDependencies, then dependencies, of each package.json walking up from the working directory through a workspace root, a range counting only when no exact spec exists on the walk and peerDependencies/optionalDependencies never counting, and pin.project_manifest and pin.project_key name where it was read; the packet's recorded kernel version is the new optional Build Packet field campaigns_os_version, which prepare-build stamps. `--json` gains `pin` with status match, stale_pin, conflicting_pin or unpinned and a `Pin:` text line; stale_pin and conflicting_pin exit 2 with an action naming the file to change, and unpinned exits 0 but is always reported, so a range or tag is visible as not a pin. Branch on pin.status rather than the exit code. The bare `--force` flag overrides a blocking pin status, is reported as pin.forced, and lands on the lifecycle journal entry's argv_shape; `--force true` is refused. Packets written before this release carry no campaigns_os_version and are no pin source; re-running prepare-build stamps one. The skills bundle identity moves with this release to 1.41.0+skills.1: every bundled skill now opens with that value and instructs `tooling status --skills-revision 1.41.0+skills.1`, so an agent still holding 1.40.0+skills.2 skill text reports `mismatch` against a 1.41.0 install and must start a fresh session.",
+      "compatibility": "additive",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "tooling",
+          "summary": "tooling status resolves the project pin and the packet's campaigns_os_version, reports pin { source, version, running, status, range, packet_version, project_version, project_manifest, project_key, forced, message } and a Pin: line naming the key the project pin was read from, exits 2 on stale_pin or conflicting_pin unless --force, and refuses --force with a value and --no-force up front. It accepts --packet <path>. prepare-build stamps campaigns_os_version on the Build Packet. The help line gains [--packet <campaign-runtime.build.json>] [--force]. The Pin: line (pin.message) carries its provenance for every status: the key and manifest of each project version or range it quotes, the nearest manifest when there is no project pin, and the packet file of each packet version it quotes; only an installed package's own manifest (node_modules/<name> or node_modules/@<scope>/<name>) is skipped as never the project, a manifest that names nothing is walked through, a leading BOM is accepted, an unreadable or malformed ancestor manifest ends the walk with a warning, and pin.packet_version_ignored carries a prefixed packet value the Pin: line names as ignored rather than absent."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaign-runtime-build-packet.v0.schema.json",
+          "surface_entry": "schemas/campaign-runtime-build-packet.v0.schema.json",
+          "summary": "Add the optional top-level campaigns_os_version (an exact version), the kernel version that prepared the packet. Additive: schema_version stays campaign-runtime-build-packet/v0 and packets without it stay valid. Its description states the bare x.y.z form and the project pin it follows as built: the first exact spec on the walk up from the nearest package.json, devDependencies then dependencies, a workspace root entered and ending the walk, peer and optional dependencies never."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/effects.v1.json",
+          "surface_entry": "contracts/effects.v1.json",
+          "summary": "Declare tooling status --force (tier B, the lifecycle journal only, proved by effects: tooling status --force): --force is an effect-changing flag in the contract's vocabulary, and here it changes the exit status only. 91 rows -> 92."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "surface_version 1.41.0; recompute the sha256 of the hashed contracts/effects.v1.json and schemas/campaign-runtime-build-packet.v0.schema.json entries. No entry, command, export or bin moved."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Replace the Not yet built section with the pin check as built: sources and precedence (which keys count, the exact forms, the manifest walk and project_manifest/project_key, and that peer and optional dependencies are not pins; the walk through neutral manifests, the installed-package skip, the stop at an unreadable or malformed manifest, and the stray-ancestor residual), the four statuses, exit codes, --force, and JSON and text output from real runs; restate the shipped bundle identity as 1.41.0+skills.1 in every example that quotes it."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Version 1.41.0."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Version 1.41.0, regenerated with npm version; no dependency moved."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance bundle_revision 1.40.0+skills.2 -> 1.41.0+skills.1: the prefix names the package version the skills ship with, so the package release moves it and the counter resets. Version every bundled skill up for the header line that moved with it: next-campaigns-os 1.0.20 -> 1.0.21, next-campaigns-os-setup 2.0.3 -> 2.0.4, next-campaigns-build 1.0.5 -> 1.0.6, next-campaigns-polish 1.1.4 -> 1.1.5, next-campaigns-qa 1.3.4 -> 1.3.5, campaign-lifecycle-orientation 1.0.0 -> 1.0.1, campaign-run-evidence 1.0.0 -> 1.0.1, campaign-readback-classification 1.0.0 -> 1.0.1, contribution-intake 1.0.0 -> 1.0.1."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it (1.40.0+skills.2 -> 1.41.0+skills.1); version 1.0.20 -> 1.0.21. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 2.0.3 -> 2.0.4. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.0.5 -> 1.0.6. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.1.4 -> 1.1.5. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.3.4 -> 1.3.5. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.0.0 -> 1.0.1. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.0.0 -> 1.0.1. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.0.0 -> 1.0.1. No other change."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote the advanced bundle revision on the first body line and in the --skills-revision instruction beside it; version 1.0.0 -> 1.0.1. No other change."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate the orientation reference for surface version 1.41.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate the runtime reference for surface version 1.41.0."
+        }
+      ],
+      "entry_sha256": "5f28020beb6b8f6e96aa1f3c0ff5aafa823c59e6dda0a40a8884425ece00a089"
+    },
+    {
+      "id": "RL-0138",
+      "sequence": 138,
+      "date": "2026-09-23",
+      "kind": "release",
+      "surface_version": "1.41.1",
+      "changelog_section": "1.41.1",
+      "changelog_sha256": "1c8751b1faffac138454f86781de36a8bb781b0c8f4b6a049988caa96cb2f44f",
+      "agent_impact": "The revision check every bundled skill asks for now works on the documented install and cannot fetch a stranger's package. `campaigns-os tooling status` without --platform or --target checks skill freshness only on the platform directories where Campaigns OS skills are installed, so a single-platform install is no longer reported stale for the other two and no longer exits 2 with an install-everywhere action. A Ready: line names the skipped platforms. The refresh action names each stale installed platform, or `--platform all` when all three are installed and stale. With nothing installed, the action asks for an install on the harness in use. --json adds skills.scope (requested, installed_platforms, no_platform_installed) and skills.not_installed_platforms, and `tooling diagnose` exports the unnamed scope as platform: installed when status narrowed to installed platforms. `--platform all` keeps checking all three. Every skill header now runs the check as `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder. `--no-install` matters because campaigns-os is only the bin of @nextcommerce/campaigns-os: outside a pinned folder a plain npx would look it up as a registry package and install it without asking. The header also says that output with no `Skills revision:` line (no revision_check under --json) came from another copy, whose actions must not be followed: a pre-1.40.0 global copy ignores --skills-revision and prints an install-skills action that replaces part of the bundle with older text. An agent holding 1.41.0+skills.1 skill text reports mismatch against a 1.41.1 install and must start a fresh session. Separately, refusals ahead of the first effect in theme waive, qa waive and qa policy set are tagged and journal nothing (campaigns-os#465), including the shared waiver-attribution and --order-path-depth validators at those call sites. Failures after the target has been read stay journaled.",
+      "compatibility": "additive",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "tooling",
+          "summary": "Without --platform or --target, tooling status scopes the skill freshness check to platforms where Campaigns OS skills are installed: a slot under a bundled name (unchanged or updated) or our own copy under a retired name. It reports skills.scope and skills.not_installed_platforms and prints a Ready: line naming the skipped platforms, singular or plural. The refresh action names each stale installed platform, or --platform all when all three are installed and stale. With nothing installed, it asks for a runnable install-skills --platform claude and names codex and agents as the alternatives. The gateway login hint uses the printed invocation prefix. tooling diagnose forwards --platform only when given and exports the unnamed scope as installed when status narrowed to installed platforms, all otherwise. theme waive's --reason check and its waiver-attribution validation (through refusing()) are tagged refusals. The qa waive and qa policy set refusals of campaigns-os#465 live in src/qa-node.mjs, dispatched from here."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "surface_version 1.41.1; no hashed entry changed."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "The check runs as `npx --no-install campaigns-os tooling status --skills-revision <revision>` from the Page Kit folder. New paragraphs explain why (--no-install: the unscoped bin name must not be installed from the registry; PATH shadowing by an older global copy, the missing Skills revision: line as its sign, and why only the freshness check sees a downgrade) and describe the platform scoping and skills.scope. The header description and the literals move to 1.41.1+skills.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/diagnostics.md",
+          "surface_entry": "docs/diagnostics.md",
+          "summary": "Without --platform, diagnose checks only the platforms where Campaigns OS skills are installed and exports platform: installed (all when none are installed and every platform was checked); --platform claude checks one profile and --platform all every one."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Version 1.41.1."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Version 1.41.1; no dependency moved."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance bundle_revision 1.41.0+skills.1 -> 1.41.1+skills.1 with the package version, and each bundled skill's version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.1+skills.1 on the first body line, and rewrite the instruction beside it: run `npx --no-install campaigns-os tooling status --skills-revision 1.41.1+skills.1` from the campaign's Page Kit folder, where it runs the project's pinned copy and never installs one, and treat output with no `Skills revision:` line (no revision_check under --json) as another copy's, whose actions are not to be followed. The skill version advances one patch."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate the orientation reference for surface version 1.41.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate the runtime reference for surface version 1.41.1."
+        }
+      ],
+      "entry_sha256": "0f8cfb705bf1ced5e78894a8d6e2d6b5b25720fca58917a86699fe551cf31e36"
+    },
+    {
+      "id": "RL-0139",
+      "sequence": 139,
+      "date": "2026-09-23",
+      "kind": "release",
+      "surface_version": "1.41.2",
+      "changelog_section": "1.41.2",
+      "changelog_sha256": "ca77d81f868f9966f0f734bfbac60871b6e65506ec2f1ce7e5ac2bb1a1351017",
+      "agent_impact": "Every command Campaigns OS prints for a project-local (node_modules) install, and every command in the bundled skills and the docs, is now spelled `npx --no-install campaigns-os …`. campaigns-os is only the bin name of @nextcommerce/campaigns-os: in a folder where the package is not installed, a plain `npx campaigns-os` looks the bin name up as a registry package and, with no terminal to ask, installs and runs whatever it finds; with --no-install, npx runs the pinned copy or fails. For a node_modules install, tooling status reports cli.invocation_prefix `npx --no-install campaigns-os` and cli.invocation `npx --no-install campaigns-os <command>`, and next, doctor, gate and checkpoint remediations, the skill-refresh and login actions, the PATH warnings, the stale project-pin action and the browser-missing hints use the same spelling. A checkout, a global install and an npx cache keep their spellings. Run printed commands as printed. A command printed or documented by an earlier release lacks the flag: add --no-install after npx when reusing it. An agent holding 1.41.1+skills.1 skill text reports mismatch against a 1.41.2 install and must start a fresh session.",
+      "compatibility": "compatible",
+      "migration": "Add --no-install after npx in any saved or scripted `npx campaigns-os …` command, and accept `npx --no-install campaigns-os` wherever cli.invocation_prefix is compared with a literal.",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "tooling",
+          "summary": "For a node_modules install, tooling status reports cli.invocation_prefix `npx --no-install campaigns-os` and cli.invocation `npx --no-install campaigns-os <command>`, and its skill-refresh and gateway login actions use that prefix. The PATH warnings (campaigns-os not on PATH, or a different install on PATH) say to run commands as `npx --no-install campaigns-os <command>`, and the action for a stale project pin names `npx --no-install campaigns-os` as the pinned executable."
+        },
+        {
+          "class": "cli_surface",
+          "path": null,
+          "surface_entry": "next",
+          "summary": "Commands printed for a node_modules install are spelled `npx --no-install campaigns-os …`: next text and --json (next_actions[].command, required actions, prompts), doctor required actions, gate and checkpoint remediations, spec derive's doctor pointer, and the QA and polish browser-missing hints. Run-session deviation tracking reads the command word through the new prefix and through the `npx campaigns-os` of earlier versions."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "surface_version 1.41.2; no hashed entry changed."
+        },
+        {
+          "class": "documentation",
+          "path": "AGENTS.md",
+          "surface_entry": "AGENTS.md",
+          "summary": "The primary run path is `npx --no-install campaigns-os …` from the Page Kit folder, with why the flag matters, and a project-local installation prints `npx --no-install campaigns-os` (`npx campaigns-os` before 1.41.2)."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "The Page Kit folder sentence names `npx --no-install campaigns-os`; the header description and the literals move to 1.41.2+skills.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/diagnostics.md",
+          "surface_entry": "docs/diagnostics.md",
+          "summary": "The diagnose examples run as `npx --no-install campaigns-os tooling diagnose …`."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/demo-preview.md",
+          "surface_entry": "docs/demo-preview.md",
+          "summary": "The demo example runs as `npx --no-install campaigns-os demo …`."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/qa-and-test-orders.md",
+          "surface_entry": "docs/qa-and-test-orders.md",
+          "summary": "Browser installation from a campaign project is `npx --no-install campaigns-os qa install-browser`."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/sdk-storage-compatibility.md",
+          "surface_entry": "docs/sdk-storage-compatibility.md",
+          "summary": "The storage-check example runs as `npx --no-install campaigns-os sdk storage-check …`."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/build-packet.md",
+          "surface_entry": "docs/build-packet.md",
+          "summary": "The commerce-catalog note names `npx --no-install campaigns-os` as the package-install invocation under which the same packet resolves."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Version 1.41.2."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Version 1.41.2; no dependency moved."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance bundle_revision 1.41.1+skills.1 -> 1.41.2+skills.1 with the package version, and each bundled skill's version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 in the header. Installed toolkit commands spells the preflight, the meaning of a bare `campaigns-os …` and browser installation as `npx --no-install campaigns-os …`, and says why the flag stays: campaigns-os is only the bin name, so where no pinned copy is installed a plain npx looks it up on the registry and installs what it finds. The Polish and QA steps install the browser with `npx --no-install campaigns-os qa install-browser`. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 in the header. Installed toolkit commands spells the preflight, the meaning of a bare `campaigns-os …` and browser installation as `npx --no-install campaigns-os …`, and says why the flag stays: campaigns-os is only the bin name, so where no pinned copy is installed a plain npx looks it up on the registry and installs what it finds. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 in the header. Installed toolkit commands spells the preflight, the meaning of a bare `campaigns-os …` and browser installation as `npx --no-install campaigns-os …`, and says why the flag stays: campaigns-os is only the bin name, so where no pinned copy is installed a plain npx looks it up on the registry and installs what it finds. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 in the header. Installed toolkit commands spells the preflight, the meaning of a bare `campaigns-os …` and browser installation as `npx --no-install campaigns-os …`, and says why the flag stays: campaigns-os is only the bin name, so where no pinned copy is installed a plain npx looks it up on the registry and installs what it finds. The terminal-Polish step installs the browser with `npx --no-install campaigns-os qa install-browser`. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 in the header. Installed toolkit commands spells the preflight, the meaning of a bare `campaigns-os …` and browser installation as `npx --no-install campaigns-os …`, and says why the flag stays: campaigns-os is only the bin name, so where no pinned copy is installed a plain npx looks it up on the registry and installs what it finds. The QA command block and the install-browser note run as `npx --no-install campaigns-os qa …`. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 on the first body line and in the `npx --no-install campaigns-os tooling status --skills-revision` check beside it. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 on the first body line and in the `npx --no-install campaigns-os tooling status --skills-revision` check beside it. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 on the first body line and in the `npx --no-install campaigns-os tooling status --skills-revision` check beside it. The skill version advances one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Quote bundle revision 1.41.2+skills.1 on the first body line and in the `npx --no-install campaigns-os tooling status --skills-revision` check beside it. The skill version advances one patch."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate the orientation reference for surface version 1.41.2."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate the runtime reference for surface version 1.41.2."
+        }
+      ],
+      "entry_sha256": "434522f9100e5e73b04601d75ec2bff8821c58fdc09c8ad6866de09337d33e4f"
+    },
+    {
+      "id": "RL-0140",
+      "sequence": 140,
+      "date": "2026-09-23",
+      "kind": "release",
+      "surface_version": "1.42.0",
+      "changelog_section": "1.42.0",
+      "changelog_sha256": "09cd488e7394e6086483c0eade0e01536812fd8eb2d5d1241a79b01f96145bc4",
+      "agent_impact": "After installing exact project dependencies, run tooling setup --target <campaign-directory> --platform claude from the project copy to compose skills, imported project context and QA-browser installation. Restart Claude Code and check the loaded bundle revision; setup cannot prove loaded context. Setup bypasses run-session recovery, credential discovery and telemetry. Existing assembly identity and doctor/QA gates are unchanged.",
+      "compatibility": "additive",
+      "migration": "Refresh bundled skills to 1.42.0+skills.1 and restart agent sessions. Existing projects keep their reviewed dependency pin until explicitly updated.",
+      "changes": [
+        {
+          "class": "documentation",
+          "path": "agents/claude/CLAUDE.md",
+          "surface_entry": "agents/claude/CLAUDE.md",
+          "summary": "Route to the lifecycle skill from the project toolkit, check loaded skill revision, and retain existing Build Packet continuation."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/effects.v1.json",
+          "surface_entry": "contracts/effects.v1.json",
+          "summary": "Declare tooling setup and its read-only dry run, including existing installer effects, context import, browser download and session/telemetry exemption."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Advance supported surface to 1.42.0, refresh the effects hash and register docs/local-setup.md."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/effects.md",
+          "surface_entry": "docs/effects.md",
+          "summary": "Explain setup composition, preservation preflight and the scope of offline browser effects proof."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/local-setup.md",
+          "surface_entry": "docs/local-setup.md",
+          "summary": "Document the exact initial npm install, project setup, preservation/recovery behavior and required Claude restart."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate orientation reference for surface 1.42.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate runtime-readiness reference for surface 1.42.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Update the displayed bundle revision to 1.42.0+skills.1."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Stamp package version 1.42.0; dependency resolutions are unchanged."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Release 1.42.0 and ship docs/local-setup.md."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance bundle revision to 1.42.0+skills.1 and each skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle 1.42.0+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "tooling",
+          "summary": "Add tooling setup under the existing tooling command; strict argument preflight, no campaign-session or credential discovery, JSON/text results and restart-required outcome."
+        }
+      ],
+      "entry_sha256": "6527efc0942f6125e694fe670a85ef4c00fabc12167b35f4c206d92ccdebf5e0"
+    },
+    {
+      "id": "RL-0141",
+      "sequence": 141,
+      "date": "2026-09-24",
+      "kind": "release",
+      "surface_version": "1.42.1",
+      "changelog_section": "1.42.1",
+      "changelog_sha256": "2945fc2d2217fb09cab82dad870b32b67dce5dd9aa38317550bcb9fdf1b5c705",
+      "agent_impact": "Argv-only errors in start, prepare-build, build, run-record, qa run, qa resolve, built-site QA and next now refuse without a lifecycle entry. An unknown next stage names the accepted stages. Three state-dependent decisions remain journaled handler failures: polish capture when packet.assembly.target_repo does not resolve to a local target repo (a check currently unreachable through the CLI because the workspace resolver supplies a local path); run end without a packet in argv or the saved session; and qa run or qa resolve with a named packet yielding no Map ID after checkpoint preflight. Separately, a named design manifest that is missing, not a file, or invalid is a journaled handler failure. Nested run-record refusals during closeout do not suppress the invoking command journal. The ambient run-session lookup may still read a named --packet before handler dispatch.",
+      "compatibility": "compatible",
+      "migration": "Update to the exact 1.42.1 package and refresh bundled skills to 1.42.1+skills.1 before starting a new agent session. Treat argv-only failures as refusals and use journal entries for handler failures.",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Advance the supported surface to 1.42.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/effects.md",
+          "surface_entry": "docs/effects.md",
+          "summary": "Document argv-only refusal boundaries, the three journaled state decisions, and nested closeout scope."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Restamp the generated orientation reference for surface 1.42.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Restamp the generated runtime reference for surface 1.42.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Update displayed bundle revision examples to 1.42.1+skills.1."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Stamp package version 1.42.1 without changing dependency resolutions."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Release package version 1.42.1 without changing exports or dependencies."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance bundle revision to 1.42.1+skills.1 and every skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.42.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "next",
+          "summary": "Refuse intake, run-record and QA argv errors before target reads, name accepted next stages, and keep nested closeout refusals within their own scope."
+        }
+      ],
+      "entry_sha256": "e74290c495de13cc95e4f615fe6bd8aa8dbdb7a06211a206be5cd5296724b0af"
+    },
+    {
+      "id": "RL-0144",
+      "sequence": 142,
+      "date": "2026-09-24",
+      "kind": "release",
+      "surface_version": "1.43.0",
+      "changelog_section": "1.43.0",
+      "changelog_sha256": "1500b85555746a9550cb238041a55c92bf4e2357f9ad4768c5f27ea4de6b6cde",
+      "agent_impact": "For HTML-and-brief intake, author a normal CampaignSpec with a stable spec_identity.local_spec_id and no saved Map identity. Use packet-based QA and keep local evidence in Git; local verdicts cannot be published to the Map portal. Existing saved-Map specs and evidence remain supported; no readiness gate is relaxed.",
+      "compatibility": "additive",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "generated_runtime",
+          "path": "campaign-spec/types.ts",
+          "surface_entry": null,
+          "summary": "Type the optional stable local_spec_id for agent-authored CampaignSpecs."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/effects.v1.json",
+          "surface_entry": "contracts/effects.v1.json",
+          "summary": "Declare that local-spec QA and progress stay local and qa publish refuses local packets."
+        },
+        {
+          "class": "hashed_surface",
+          "path": "contracts/migration-sidecar-bundle.v0.json",
+          "surface_entry": "contracts/migration-sidecar-bundle.v0.json",
+          "summary": "Bind local bundles through local_spec_id as the explicit alternative to saved Map identity."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Advance the supported surface to 1.43.0 and refresh changed contract hashes."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/build-packet.md",
+          "surface_entry": "docs/build-packet.md",
+          "summary": "Document stable local IDs, revision evidence, local QA storage and saved-Map boundaries."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/local-setup.md",
+          "surface_entry": "docs/local-setup.md",
+          "summary": "Introduce agent-authored local CampaignSpec intake after Claude setup."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/progress-snapshots.md",
+          "surface_entry": "docs/progress-snapshots.md",
+          "summary": "Document local-spec report binding without saved revision alignment or portal storage."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Update release metadata for local-spec identity support."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Release local-spec identity support as 1.43.0."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaign-runtime-assembly-report.v0.schema.json",
+          "surface_entry": "schemas/campaign-runtime-assembly-report.v0.schema.json",
+          "summary": "Accept and document local-spec identity while preserving existing saved-Map artifacts."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaign-runtime-build-packet.v0.schema.json",
+          "surface_entry": "schemas/campaign-runtime-build-packet.v0.schema.json",
+          "summary": "Accept and document local-spec identity while preserving existing saved-Map artifacts."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaign-spec.v4.schema.json",
+          "surface_entry": "schemas/campaign-spec.v4.schema.json",
+          "summary": "Accept and document local-spec identity while preserving existing saved-Map artifacts."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaigns-os-progress-snapshot.v0.schema.json",
+          "surface_entry": "schemas/campaigns-os-progress-snapshot.v0.schema.json",
+          "summary": "Accept and document local-spec identity while preserving existing saved-Map artifacts."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaigns-os-qa-verdict-sidecar.v0.schema.json",
+          "surface_entry": "schemas/campaigns-os-qa-verdict-sidecar.v0.schema.json",
+          "summary": "Accept and document local-spec identity while preserving existing saved-Map artifacts."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaigns-os-qa-verdict.v0.schema.json",
+          "surface_entry": "schemas/campaigns-os-qa-verdict.v0.schema.json",
+          "summary": "Accept and document local-spec identity while preserving existing saved-Map artifacts."
+        },
+        {
+          "class": "schema",
+          "path": "schemas/campaigns-os-run-record.v0.schema.json",
+          "surface_entry": "schemas/campaigns-os-run-record.v0.schema.json",
+          "summary": "Accept and document local-spec identity while preserving existing saved-Map artifacts."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance the bundled skill revision and individual versions for the local-spec release."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision and local-spec HTML/brief intake guidance."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/references/session-intake.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision and local-spec HTML/brief intake guidance."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the current skills bundle revision."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "start",
+          "summary": "Prepare, inspect, resume and close out local-spec campaigns with separate stable identity and material revision binding."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/effects.md",
+          "surface_entry": "docs/effects.md",
+          "summary": "Document local-spec QA publication and progress suppression."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate the supported orientation/runtime reference and fixtures for surface 1.43.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate the supported orientation/runtime reference and fixtures for surface 1.43.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Use the current 1.43.0+skills.1 bundle in executable examples."
+        }
+      ],
+      "entry_sha256": "41aa194138fb46e0f5acf1b668139b09f21cfe210e976013ae2db9263cb0d068"
+    },
+    {
+      "id": "RL-0142",
+      "sequence": 143,
+      "date": "2026-09-24",
+      "kind": "amendment",
+      "amends": "RL-0144",
+      "amendment_reason": "Complete the entry-point and QA documentation omitted from RL-0144, clarify its skill guidance, and preserve the existing saved-Map mismatch diagnostic.",
+      "surface_version": null,
+      "changelog_section": "1.43.0+agent.1",
+      "changelog_sha256": "ec20f3ed8ca10054c47027c6cd66ce58df812a9a7bdc1ca1a314ee5ca61953d6",
+      "agent_impact": "Use the local-spec path without a saved Map ID; local verdicts and progress remain local. Saved-Map mismatch errors continue to identify both conflicting Map IDs.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/campaigns-os-build-flow.md",
+          "surface_entry": "docs/campaigns-os-build-flow.md",
+          "summary": "Allow agent-authored local specs at entry and distinguish local QA from saved-Map publication."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/migration-sidecar-bundle.md",
+          "surface_entry": "docs/migration-sidecar-bundle.md",
+          "summary": "Document local_spec_id as the alternative cross-artifact identity in local bundles."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/qa-and-test-orders.md",
+          "surface_entry": "docs/qa-and-test-orders.md",
+          "summary": "Document local QA storage keys, explicit local identity and identity-aware evidence comparison."
+        },
+        {
+          "class": "cli_surface",
+          "path": null,
+          "surface_entry": "page-kit",
+          "summary": "Retain the saved-Map mismatch diagnostic while preserving refusal of mismatched local identities in sync and spec derivation."
+        },
+        {
+          "class": "skill",
+          "path": null,
+          "surface_entry": "skills.json",
+          "summary": "Clarify that the 1.43.0 skill updates also teach local-spec QA inputs, local-only publication behavior and separate local evidence identity."
+        }
+      ],
+      "entry_sha256": "a15386429fe754cde6d5ff9590859b463fdb371e014b0ad0c50a8e19a24e1079"
+    },
+    {
+      "id": "RL-0143",
+      "sequence": 144,
+      "date": "2026-09-24",
+      "kind": "amendment",
+      "amends": "RL-0144",
+      "amendment_reason": "Harden local identity projection and Run Record persistence after review; distinguish local doctor failures and clarify exact local-ID normalization.",
+      "surface_version": null,
+      "changelog_section": "1.43.0+agent.2",
+      "changelog_sha256": "cb40cab1b8f4e816de7f1b4e7cf318c8e773e8ed133aa2ba655c62435af399a9",
+      "agent_impact": "Malformed or conflicting local identities are refused before durable evidence writes. Doctor reports local identity failures under spec.local_identity while saved-Map diagnostics and normalization retain their existing behavior.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": null,
+          "surface_entry": "doctor",
+          "summary": "Report malformed or mismatched local identities with spec.local_identity and local_spec detail without aborting diagnostics."
+        },
+        {
+          "class": "cli_surface",
+          "path": null,
+          "surface_entry": "run-record",
+          "summary": "Refuse malformed or conflicting local identities during projection and Run Record validation before persistence."
+        },
+        {
+          "class": "named_surface",
+          "path": null,
+          "surface_entry": "docs/build-packet.md",
+          "summary": "Document exact local-ID validation, evidence-write refusal and the separate local doctor diagnostic."
+        }
+      ],
+      "entry_sha256": "0a3533b5ab6004e1f9a7d3c9e18030c9f055c11d1b596319728d7d2f1f7f443c"
+    },
+    {
+      "id": "RL-0145",
+      "sequence": 145,
+      "date": "2026-09-24",
+      "kind": "amendment",
+      "amends": "RL-0143",
+      "amendment_reason": "Keep invalid local identity diagnostics from adopting foreign doctor history and integrate the landed 1.42.1 refusal boundaries without losing local packet QA.",
+      "surface_version": null,
+      "changelog_section": "1.43.0+agent.3",
+      "changelog_sha256": "c813cdbeaea7d82816af6a6aeedf6e65df00b75dd6c0f6116ce51266a0f9ff0f",
+      "agent_impact": "Invalid identities have no usable prior-history comparison. Packet-derived QA identity errors remain journaled handler failures; missing argv selectors are refused before reads.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": null,
+          "surface_entry": "doctor",
+          "summary": "Do not select prior doctor history for malformed, missing, conflicting or mismatched campaign identities."
+        },
+        {
+          "class": "cli_surface",
+          "path": null,
+          "surface_entry": "qa",
+          "summary": "Preserve local-spec packet QA while integrating the argv-only refusal boundary from 1.42.1."
+        },
+        {
+          "class": "skill",
+          "path": null,
+          "surface_entry": "skills.json",
+          "summary": "Advance each bundled skill version beyond the concurrently landed 1.42.1 release."
+        },
+        {
+          "class": "named_surface",
+          "path": null,
+          "surface_entry": "docs/effects.md",
+          "summary": "Describe missing or conflicting packet-derived local identity as a journaled handler failure."
+        }
+      ],
+      "entry_sha256": "346259f1c22a80007cb949786c3b113211931bb399e8a181764548db36d397cc"
+    },
+    {
+      "id": "RL-0146",
+      "sequence": 146,
+      "date": "2026-09-24",
+      "kind": "amendment",
+      "amends": "RL-0143",
+      "amendment_reason": "Treat a null local ID as absent in Run Record validation and its schema, matching identity resolution and preserving best-effort saved-Map capture.",
+      "surface_version": null,
+      "changelog_section": "1.43.0+agent.4",
+      "changelog_sha256": "5baa9f8109edb5d00692316d69b5035779f3114d6f393010df40cfbe918af59b",
+      "agent_impact": "Run Records may carry local_spec_id: null without being rejected, including records with a saved Map or partial identity. Non-null malformed or conflicting local IDs remain invalid.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "schema",
+          "path": null,
+          "surface_entry": "schemas/campaigns-os-run-record.v0.schema.json",
+          "summary": "Allow null local_spec_id as an absent local identity and align the Run Record validator with that shape."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": null,
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Refresh the Run Record schema digest within the pending 1.43.0 supported surface."
+        }
+      ],
+      "entry_sha256": "56ca91118205936c9f1c58eda8a4fb208b9c18ee6c0552dce8c3176dffad14f3"
+    },
+    {
+      "id": "RL-0147",
+      "sequence": 147,
+      "date": "2026-09-24",
+      "kind": "release",
+      "surface_version": "1.43.1",
+      "changelog_section": "1.43.1",
+      "changelog_sha256": "d7fde5ebbad8bb605fb1c46195ae497c95448f00f8b329378cc19798d12191a0",
+      "agent_impact": "The local setup command pins the 1.43.1 package; its documented toolkit install pin is checked against package.json. Operator-facing run-record and run end refuse bare, empty, or whitespace-only value-taking inherited flags before packet work; invalid --surfaces, valued --dry-run, and invalid agent integers are also refused without a lifecycle entry. Run end refuses --new-run and --run-id; run-record refuses blank --run-id and valued --new-run. Start, prepare-build, and build reject bare, empty, or whitespace-only values of --spec, --map-id, --source, --target, --source-kind, --proxy-base, --wrapper-policy, --design-manifest, and --order-path-depth before local spec reads, Map fetches, or cache writes. Internal stale-session closeouts still write the Run Record with bare, empty, or whitespace-only --proxy-base. QA auto-end still closes with whitespace-only --context, --report, or --proxy-base; whitespace-only --context resolves as a literal relative path, so the default context file is not read. Bare or empty --context or --report still skips QA auto-end and leaves the session open; bare or empty --qa-verdict fails a Run Record closeout when inherited, while QA auto-end supplies its own verdict path. Packet QA accepts either a Map ID or a valid local-spec identity; missing or conflicting packet-derived identity is a journaled handler failure. The 1.42.1 note claiming no-Map packet QA remained journaled was imprecise: that release changed the case from a refusal to a journaled handler failure.",
+      "compatibility": "compatible",
+      "migration": "Update to the exact 1.43.1 package and refresh bundled skills to 1.43.1+skills.1 before starting a new agent session.",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Advance the supported surface to 1.43.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/effects.md",
+          "surface_entry": "docs/effects.md",
+          "summary": "Document operator-facing run-record and run end argv refusals, the nine early-checked intake flags, inherited internal-closeout behavior, and the current local-or-Map packet QA identity rule."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/local-setup.md",
+          "surface_entry": "docs/local-setup.md",
+          "summary": "Pin the copy-paste local setup install command to the 1.43.1 package release."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Restamp the generated orientation reference for surface 1.43.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Restamp the generated runtime reference for surface 1.43.1."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Update displayed bundle revision examples to 1.43.1+skills.1."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Stamp package version 1.43.1 without changing dependency resolutions."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Release package version 1.43.1 without changing exports or dependencies."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance bundle revision to 1.43.1+skills.1 and every skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.1+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "run",
+          "summary": "Refuse blank values for the nine early-checked intake flags before spec resolution and operator-facing run-record values before packet work, reject invalid run end flags without journaling, and preserve internal closeout handling of inherited values."
+        }
+      ],
+      "entry_sha256": "7c851b671eb1a3d07f92dc44f66e0ff9d5001905479ad70118c7a025e677f8af"
     }
   ]
 }