@nextcommerce/campaigns-os 1.43.1 → 1.43.2

package/contracts/release-ledger.json

@@ -6898,6 +6898,678 @@
         }
       ],
       "entry_sha256": "7c851b671eb1a3d07f92dc44f66e0ff9d5001905479ad70118c7a025e677f8af"
+    },
+    {
+      "id": "RL-0148",
+      "sequence": 148,
+      "date": "2026-09-25",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.1",
+      "changelog_sha256": "03f39b019de9fde6d2247e4cb057a305baa3b11b8809bfe9c2e8ebbfb27ecc03",
+      "agent_impact": "Doctor recognizes finite numeric commerce references in Map exports. Declared package, shipping and offer IDs no longer produce false undeclared-reference or demo-placeholder findings.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "doctor",
+          "summary": "Normalize commerce references as non-empty strings or finite numbers without widening general text-field handling."
+        }
+      ],
+      "entry_sha256": "39c0c107c2fe1a8faad0dd61b1a5d04f17f4f29ad31ed794f74bd97ebe24693a"
+    },
+    {
+      "id": "RL-0149",
+      "sequence": 149,
+      "date": "2026-09-26",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.2",
+      "changelog_sha256": "4fe10d6b45c14c6bf2b0683955a42a52cd77e8518452852e64575c4035116739",
+      "agent_impact": "A refused valued --dry-run on run end leaves stale sessions intact and performs no closeout writes or remit.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "run",
+          "summary": "Skip the stale-session sweep when a supporting command receives any dry-run flag, including a value its handler refuses."
+        },
+        {
+          "class": "documentation",
+          "path": "AGENTS.md",
+          "surface_entry": "AGENTS.md",
+          "summary": "Document the dry-run exception to pre-refusal stale-session closeout."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/effects.md",
+          "surface_entry": "docs/effects.md",
+          "summary": "Clarify that a valued dry-run flag suppresses stale closeout before refusal."
+        }
+      ],
+      "entry_sha256": "1e2836aecf0e9ee37473bf77d20427d7e57a632ba1adb67774e4a4498d3a7927"
+    },
+    {
+      "id": "RL-0150",
+      "sequence": 150,
+      "date": "2026-09-26",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.3",
+      "changelog_sha256": "d99684d3a0040d82cfa0f4452f2a6b4522709b2d66eed334abfc13625924a459",
+      "agent_impact": "Malformed legacy direct-API QA carts and modes are refused before input resolution and append no lifecycle entry. Browser precedence and legacy credential checks are unchanged.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/effects.md",
+          "surface_entry": "docs/effects.md",
+          "summary": "Document legacy API cart and mode argv refusals and the unchanged credential failure boundary."
+        }
+      ],
+      "entry_sha256": "011853957b11b9bf964487dbd8d17dbe2164deb2c0f82133de1720a5aaab675a"
+    },
+    {
+      "id": "RL-0151",
+      "sequence": 151,
+      "date": "2026-09-26",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.4",
+      "changelog_sha256": "173ee29da0a362831460bffb96d40683a84b0a790c8570d6f100ef23d76a029d",
+      "agent_impact": "Packet QA excludes recorded unbuilt out-of-scope pages; stock materialization now requires per-page operator opt-in.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "next",
+          "summary": "Keep out-of-scope routes unbuilt by default; require explicit opt-in before materializing stock stand-ins."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/design-source-package.md",
+          "surface_entry": "docs/design-source-package.md",
+          "summary": "Distinguish source-scope stock classification from permission to publish stock pages."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/qa-and-test-orders.md",
+          "surface_entry": "docs/qa-and-test-orders.md",
+          "summary": "Document recorded partial scope, skipped evidence, entry selection and materialized-page QA."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance bundle revision and skill versions so installed agents detect the changed build-scope instructions."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Carry the advanced bundle revision and matching per-skill version."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Carry the advanced bundle revision and matching per-skill version."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Require explicit per-page opt-in before publishing out-of-scope stock pages."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Carry the advanced bundle revision and matching per-skill version."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Carry the advanced bundle revision and matching per-skill version."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Carry the advanced bundle revision and matching per-skill version."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Carry the advanced bundle revision and matching per-skill version."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Carry the advanced bundle revision and matching per-skill version."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Carry the advanced bundle revision and matching per-skill version."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Update current bundle revision examples to 1.43.1+skills.2."
+        }
+      ],
+      "entry_sha256": "27d696ec2cfae34a6ecb95432d8e15971c7234668d7430b87b5dade3e092836a"
+    },
+    {
+      "id": "RL-0152",
+      "sequence": 152,
+      "date": "2026-09-26",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.5",
+      "changelog_sha256": "2abbb4fca524e64ac46bccf1f11044fdd921db5af73eb4c194e73be0d2bdfafa",
+      "agent_impact": "Doctor and browser QA no longer report hidden starter payment-logos.html logos as payment-method residue; a forced-on logo warning now names the payment_flags.show_<method> frontmatter flag.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "next",
+          "summary": "Skip hidden payment-logos.html logos in the built-checkout payment scan and name the frontmatter flag when a logo is forced on."
+        }
+      ],
+      "entry_sha256": "9c7500519109ff5b96d1131f3b3589c6cf291ca47ce7a6f720fb46d8ff96b795"
+    },
+    {
+      "id": "RL-0153",
+      "sequence": 153,
+      "date": "2026-09-26",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.8",
+      "changelog_sha256": "cb96fb1e0376e4d47fa7b09b7f3cf0300be82b70a471f1670706dd855f828767",
+      "agent_impact": "A stale Design Source Package that an earlier prepare-build synthesized, unchanged since, is regenerated by prepare-build/start/build --force instead of refused; the Assembly Report's design_source_package reference gains origin (synthesized or adopted). Any other stale package is still refused, and every refusal names the file and its recovery.",
+      "compatibility": "additive",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "prepare-build",
+          "summary": "--force regenerates a stale producer-synthesized Design Source Package (mode regenerated); the Assembly Report records design_source_package.origin; stale-package refusals name the file and the recovery (--force, or reconcile/delete and rerun)."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/design-source-package.md",
+          "surface_entry": "docs/design-source-package.md",
+          "summary": "Document report origin, which stale packages --force regenerates, which it still refuses, and the --force alternative to deleting a blocked run's package."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/build-packet.md",
+          "surface_entry": "docs/build-packet.md",
+          "summary": "State up front that a manifest pages[] entry with both path and skip_reason is invalid, and note the --force regeneration exception."
+        }
+      ],
+      "entry_sha256": "35a5cc66c5100d0fd1d44a63daf19bc66d23d4d2998a15ddf90b7193dbd7b1f3"
+    },
+    {
+      "id": "RL-0154",
+      "sequence": 154,
+      "date": "2026-09-26",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.9",
+      "changelog_sha256": "1be8f8385cb6853eaf084747203e96f5a93136914d6f0fba7dd6a70226d8a0d5",
+      "agent_impact": "Doctor now blocks under built_output.script_syntax.parse_failure when a campaign-owned script a built page loads by a local <script src> does not parse, naming the file, line and column; QA adds a script-parse:<page_id> blocker instead of reading an unparsable page script as dynamic.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "doctor",
+          "summary": "Add the unwaivable built_output.script_syntax gate to doctor --built and the packet doctor registry."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/build-packet.md",
+          "surface_entry": "docs/build-packet.md",
+          "summary": "Document the built-output script syntax gate, its scope and its evidence."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/campaigns-os-build-flow.md",
+          "surface_entry": "docs/campaigns-os-build-flow.md",
+          "summary": "State that campaign scripts must parse and that doctor blocks when one does not."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/qa-and-test-orders.md",
+          "surface_entry": "docs/qa-and-test-orders.md",
+          "summary": "Document that QA reports an unparsable page script as a script-parse blocker, not as dynamic."
+        }
+      ],
+      "entry_sha256": "81273fac2c4938401143c5236dadae04c1e805e499a4163ab370e4e50a2e02a0"
+    },
+    {
+      "id": "RL-0155",
+      "sequence": 155,
+      "date": "2026-09-26",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.11",
+      "changelog_sha256": "41d14d94c974d6b4bb2924429c7ca26685d38be1d5a9e6fead8e347960c08cb3",
+      "agent_impact": "start, prepare-build and build refuse a bare, empty or whitespace --template-family, --allow-uncertified-template, --theme-policy or --brief, and an out-of-vocabulary --theme-policy, before any spec read, Map fetch or cache write, with no journal entry. A blank value is no longer silently ignored. Certification and brief-file failures are still journaled handler failures.",
+      "compatibility": "compatible",
+      "migration": "Pass a value to each of these flags or omit the flag; a blank value that used to be ignored is now refused.",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "prepare-build",
+          "summary": "The intake dispatch refuses blank --template-family, --allow-uncertified-template, --theme-policy and --brief values and an unknown --theme-policy before resolveSpecPath, on the --spec, --map-id and --map-id --cached-spec paths, for start, prepare-build and build."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/effects.md",
+          "surface_entry": "docs/effects.md",
+          "summary": "List the four late intake flags and the --theme-policy vocabulary among the argv-only refusals, and state that certification and brief-file checks stay journaled."
+        }
+      ],
+      "entry_sha256": "f2be3f58c79afb40343b1dc3b6baa8a8065be0a93b04c45ec870e5f91b7a49d1"
+    },
+    {
+      "id": "RL-0157",
+      "sequence": 156,
+      "date": "2026-09-27",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.15",
+      "changelog_sha256": "d78eb0be3faaada970e67f8e659164b4e080c07a404d057e79dbff37b505156f",
+      "agent_impact": "Doctor now warns under built_output.script_syntax.missing_script when a built page loads a local script that is not in the built output; it does not block. The script syntax gate resolves each script src against the <base href> in effect when the script is prepared, and falls back to the page URL for a data:, javascript: or unparsable base.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "doctor",
+          "summary": "Surface the script syntax gate's missing-script findings as doctor warnings on doctor --built and the packet doctor registry, unless a parse failure blocks the gate."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/build-packet.md",
+          "surface_entry": "docs/build-packet.md",
+          "summary": "Document base-element ordering (parse order, HTML namespace, URL-parser whitespace) and the rejected-base fallback for script resolution, and the missing-script warning and warned[] evidence."
+        }
+      ],
+      "entry_sha256": "b704d4bd6f9e83e090200742dd4057d3b263d9884e09b506053b6cb6cd18ad24"
+    },
+    {
+      "id": "RL-0158",
+      "sequence": 157,
+      "date": "2026-09-27",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.16",
+      "changelog_sha256": "e6e03aea1c1cb3bb84827e584e7f3cf849eec5ff7e0d14c4aca5c7aa9b3fbe3f",
+      "agent_impact": "QA's opt-in analytics parity leg now picks its candidate page the way the correctness inventory does on a partial build (the root when in scope and answering, else the first built entry), records capture_page and root_fallback, and reports no_in_scope_page_captured (skipped) or no_capture_page_answered (blocker) without loading the baseline. A topology entry that differs from the root only by its own query string is no longer merged into the root. docs/qa-and-test-orders.md documents the capture fallback, both outcomes, path-based step routing and the local-serve manual_review exception.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/qa-and-test-orders.md",
+          "surface_entry": "docs/qa-and-test-orders.md",
+          "summary": "Document the partial-scope analytics capture fallback for the correctness and parity legs, the no_in_scope_page_captured and no_capture_page_answered outcomes, path-based step routing with query-routed entries kept apart from the root, and the local-serve manual_review exception with data-layer-purchase still blocking."
+        }
+      ],
+      "entry_sha256": "36fe47ebc1bd791d6017e5a50a2112597392222419883993eaca378c03a45996"
+    },
+    {
+      "id": "RL-0159",
+      "sequence": 158,
+      "date": "2026-09-27",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.17",
+      "changelog_sha256": "c479b34451dfed258ce2b0a27606a77ab74ffc80bac67def6a53ed6dd1209148",
+      "agent_impact": "prepare-build refuses any configurable output path inside its target lock directory or the staging and tomb directories the lock creates beside it, directly or through a directory alias. The per-target and progress allocation locks publish their owner with the directory and refuse an ownerless lock after about a second, naming it; stage producers that edit the Assembly Report wait for a prepare-build holding the target lock, and waiver --dry-run previews take no lock.",
+      "compatibility": "compatible",
+      "migration": "Choose output paths outside .campaign-runtime/input/.design-source-package.json.lock. A lock directory without owner.json, left by an older release, is no longer recovered after ten seconds: confirm no campaigns-os process is working on the target, then remove it.",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "prepare-build",
+          "summary": "Take the per-target lock through the shared target-lock module and reserve the lock directory, its .lock.* siblings and their aliases in the output-collision checks."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/design-source-package.md",
+          "surface_entry": "docs/design-source-package.md",
+          "summary": "State that stage producers take the target lock, that an ownerless lock is never taken over, and that outputs inside the lock directory are refused."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/progress-snapshots.md",
+          "surface_entry": "docs/progress-snapshots.md",
+          "summary": "Replace the ten-second ownerless recovery with the atomic owner publication, the ownerless refusal and the offline procedure, and name the lock in the warning."
+        }
+      ],
+      "entry_sha256": "6e01214c091eea12b92e18880aad38911c2c093d6e1554da21b90eff3fe62e32"
+    },
+    {
+      "id": "RL-0160",
+      "sequence": 159,
+      "date": "2026-09-27",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.18",
+      "changelog_sha256": "9d67f3051f960cbf01912f4138482cfecf25b2f6ece64ab4f0f14eb975e982e7",
+      "agent_impact": "prepare-build keeps a Design Source Package it synthesized recorded as synthesized across a failure or kill between package and report publication (a pending provenance record beside the package), records the hash of the exact source-html manifest bytes it parsed, and with --map-id writes the fetched spec to the shared cache only under the per-target lock.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "prepare-build",
+          "summary": "Write and consult a pending Design Source Package provenance record around package publication, hash the manifest bytes intake parsed, and defer the --map-id cache write into the prepare-build lock."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/design-source-package.md",
+          "surface_entry": "docs/design-source-package.md",
+          "summary": "Document the pending provenance record, the lock-held --map-id cache write, and the single-read manifest hash."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/build-packet.md",
+          "surface_entry": "docs/build-packet.md",
+          "summary": "State that the fetched-spec cache is written only under the per-target prepare-build lock."
+        }
+      ],
+      "entry_sha256": "6e0890174577dcc2eca884e5321d163a012ca50ccec56276557133296772b042"
+    },
+    {
+      "id": "RL-0161",
+      "sequence": 160,
+      "date": "2026-09-27",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.19",
+      "changelog_sha256": "48dbf60f2eb321f33e6aaf78206c06ab58107e4b295b2981a9b8d81849a08598",
+      "agent_impact": "No command behaves differently: invocation policy (session-recovery bypasses, where the stale run-session closeout runs and what suppresses it, lifecycle journal exemptions, the --dry-run implementers and the qa run session auto-end) now has one owner in the CLI, and the did-you-mean command list derives from it.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "start",
+          "summary": "Every command, start included, runs the same steps in the same order as before; the rules for which steps run now live in one declaration instead of in each step."
+        }
+      ],
+      "entry_sha256": "b07d6b3c6871a4c32c913cde03e4f7612359332a82d23b132cfe178509645a76"
+    },
+    {
+      "id": "RL-0162",
+      "sequence": 161,
+      "date": "2026-09-27",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.20",
+      "changelog_sha256": "b504e2a11e3506ff186f434b113a3c3f461d66611a997e3cf5d6ecddb491d2ff",
+      "agent_impact": "No command behaves differently. The doctor checks, packet inspection and next-step picker moved under src/doctor/, and the agent-relevant change policy now classifies a change there as a CLI-surface change, so doctor check changes keep appearing in this ledger.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/agent-relevant-change-policy.v1.json",
+          "surface_entry": "contracts/agent-relevant-change-policy.v1.json",
+          "summary": "Classify a change under src/doctor/ as a CLI-surface change, ahead of the broad src/ ignore."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "doctor",
+          "summary": "The CLI imports the doctor checks, packet inspection, next-step picker and shared helpers from their new modules; every command behaves as before."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/checks.mjs",
+          "surface_entry": "doctor",
+          "summary": "The doctor check registries, packet validation and every check they run, moved unchanged out of the CLI module."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/inspect.mjs",
+          "surface_entry": "doctor",
+          "summary": "The doctor command, packet inspection and built-output inspection, moved unchanged out of the CLI module."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/next-step.mjs",
+          "surface_entry": "next",
+          "summary": "The next-step picker and the gate issues next reads from doctor, moved unchanged out of the CLI module."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/release-ledger-authoring-guide.md",
+          "surface_entry": "docs/release-ledger-authoring-guide.md",
+          "summary": "Name src/agent/ and src/doctor/ alongside src/cli.mjs as the classified paths inside src/."
+        }
+      ],
+      "entry_sha256": "365537b5c46368048f99250ef3b794beb170a06cd0b8e7bdfa6e44a99eddd023"
+    },
+    {
+      "id": "RL-0163",
+      "sequence": 162,
+      "date": "2026-09-27",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.21",
+      "changelog_sha256": "6e4df1a341d47dce5e71e045cb0c182400ea4abaf57d5fbe61b39d8cdb3be4f8",
+      "agent_impact": "No command behaves differently: prepare-build, start and build publish the Design Source Package, its pending provenance record and their JSON outputs exactly as before, with that publication now owned by one module instead of restated in prepare-build.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "prepare-build",
+          "summary": "prepare-build names its outputs and hands Design Source Package publication (lock, collision checks, evidence re-checks, pending provenance record, publication order) to its one owner; every on-disk name and message is unchanged."
+        }
+      ],
+      "entry_sha256": "0b4d674dd8df3355b63f63afb8a66a6a57e6c13ee237bebacacf13a1b3317a8d"
+    },
+    {
+      "id": "RL-0164",
+      "sequence": 163,
+      "date": "2026-09-28",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.22",
+      "changelog_sha256": "07ef03ec9df3d1b56fae28b712eef11374e6990282b03ce0f56ea6531eafcfb7",
+      "agent_impact": "None. doctor, next, prepare-build, start and build behave exactly as before; a shared path-identity helper moved out of src/doctor/ into the shared helper module, stale lock-holder comments were reworded, a private clone helper was renamed, and unused CLI imports were removed.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "prepare-build",
+          "summary": "The CLI drops three imports nothing used; every command behaves as before."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/next-step.mjs",
+          "surface_entry": "next",
+          "summary": "The next-step picker imports the filesystem path-identity helper from the shared helper module instead of defining it; every check and message is unchanged."
+        }
+      ],
+      "entry_sha256": "ace0043152c12322dcb17f29b86c44ca09083f4e425460eda4034cc5020068ba"
+    },
+    {
+      "id": "RL-0165",
+      "sequence": 164,
+      "date": "2026-09-28",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.43.1+agent.23",
+      "changelog_sha256": "c6406bad6b7c425016e5c2944b3a6134564089364f99082adbdb63eb6792b040",
+      "agent_impact": "None. doctor behaves exactly as before; a code comment in the route_root declaration check was reworded to use a neutral placeholder.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/checks.mjs",
+          "surface_entry": "doctor",
+          "summary": "A comment in the route_root declaration check now uses a neutral placeholder for its near-miss examples; every check and message is unchanged."
+        }
+      ],
+      "entry_sha256": "54a238fae479cad0e0ccc56eee0bb82246d73b8f30e588872e5dccfe46c2904f"
+    },
+    {
+      "id": "RL-0166",
+      "sequence": 165,
+      "date": "2026-09-28",
+      "kind": "release",
+      "surface_version": "1.43.2",
+      "changelog_section": "1.43.2",
+      "changelog_sha256": "86a252e790db16c68334bb38f994da664e960b3e00512522d46cc9faf95506c5",
+      "agent_impact": "None beyond the version. The 1.43.2 package ships the same-surface changes recorded as 1.43.1+agent.1 through 1.43.1+agent.23; effects.v1.json notes for the eight --dry-run invocations now point at the dryRun declaration in src/invocation.mjs instead of the removed DRY_RUN_COMMANDS set, with every declared effect unchanged.",
+      "compatibility": "compatible",
+      "migration": "Update to the exact 1.43.2 package and refresh bundled skills to 1.43.2+skills.1 before starting a new agent session.",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Advance the supported surface to 1.43.2 and record the new effects.v1.json hash."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/effects.v1.json",
+          "surface_entry": "contracts/effects.v1.json",
+          "summary": "Reword eight --dry-run notes to name the dryRun declaration in src/invocation.mjs instead of the removed DRY_RUN_COMMANDS set; declared effects are unchanged."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/local-setup.md",
+          "surface_entry": "docs/local-setup.md",
+          "summary": "Pin the copy-paste local setup install command to the 1.43.2 package release."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Restamp the generated orientation reference for surface 1.43.2."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Restamp the generated runtime reference for surface 1.43.2."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Update displayed bundle revision examples to 1.43.2+skills.1."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Stamp package version 1.43.2 without changing dependency resolutions."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Release package version 1.43.2 without changing exports or dependencies."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance bundle revision to 1.43.2+skills.1 and every skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Stamp bundle revision 1.43.2+skills.1 and advance the skill version one patch."
+        }
+      ],
+      "entry_sha256": "7aa355a3a9aa0b93c526eb1fe426db0fa13fbdb920b96edef93fe62d49d848d6"
     }
   ]
 }