@sellable/mcp 0.1.415 → 0.1.417

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/mcp",
-  "version": "0.1.415",
+  "version": "0.1.417",
   "type": "module",
   "description": "Sellable MCP server for Claude Code and Codex campaign workflows",
   "main": "dist/index.js",

package/skills/create-evergreen-campaigns/SKILL.md

@@ -1024,16 +1024,31 @@ artifact path, allowed repair side effects, failed sample snippets, failed
 quality codes, and the banned phrase list. The repair prompt must say
 `Do not include existing receipt JSON; load current product state through
 Sellable MCP readbacks and rewrite the durable receipt from fresh readbacks`.
+It must also say that the worker should verify the packaged Sellable MCP
+surface is loaded before declaring MCP unavailable, including `get_auth_status`,
+`get_subskill_prompt`, and the campaign readback tools. If a repair worker still
+cannot access Sellable MCP, it must write a separate repair-blocked artifact
+under `repair-blocked/` or its repair final file and must not overwrite the
+canonical lane receipt. Repair workers must stage successful repaired receipts
+under `repair-staged/` first; only after fresh MCP readbacks, improved current
+samples, exactly one approved generated route-proof row, and a local JSON
+self-check pass may the worker atomically replace the canonical lane receipt.
 After the repair worker completes the final product readbacks
 (`get_campaign_messages_preview`, `get_campaign`, navigation/table readback),
-it must rewrite the durable receipt immediately before any extended narration,
-analysis, or final answer. If the repair worker cannot rewrite the durable
-receipt in one bounded pass, it must exit with
-`blocked: repair_receipt_write_timeout`. The parent must treat an unchanged
-receipt mtime, missing repair final file, or missing updated
+it must stage and then rewrite the durable receipt immediately before any
+extended narration, analysis, or final answer. If the repair worker cannot
+rewrite the durable receipt in one bounded pass, it must exit with
+`blocked: repair_receipt_write_timeout` without modifying the canonical lane
+receipt. The parent must treat an unchanged receipt mtime, missing repair final
+file, missing staged success artifact, or missing updated
 `messageDraftingReceipt.sampleMessages` after repair as blocked, never success.
+The parent must also treat a repair-blocked artifact as a failed run, but it
+must keep the pre-repair canonical receipt available for diagnostics and must
+not promote the blocked repair artifact as the lane receipt.
 Short form: repair prompts use compact repair packets, not full receipt JSON.
 Short form: Do not include existing receipt JSON in repair prompts.
+Short form: repair workers stage repaired receipts before replacing canonical receipts.
+Short form: repair blockers never overwrite canonical success receipts.
 Short form: repair workers write the durable receipt immediately after final readbacks.
 Short form: missing repair receipt rewrite is `blocked: repair_receipt_write_timeout`.