feat(service): campaign routes — GET /amicode/campaigns + /amicode/campaign over the session ledgers (#658)

packages/app-bundle/manifest.json

@@ -1339,7 +1339,7 @@
     "packages/ui/src/amicode/vaults.ts": "6250b08a8d6493bd42c5407bfcb581a300757b273a587247e3666ddbe25c00af",
     "packages/ui/src/amicode/wave-geometry.test.ts": "3a89a89310b8c9ce15b402ced6dec83d691bc4ccf50448f2a89e4c0ff1c80cc7",
     "packages/ui/src/amicode/wave-geometry.ts": "79fcd8ce75e280f6de3fae108ae5db4b992e28a8826735a33dbbbebfa68c8f24",
-    "packages/ui/src/amicode/widget-allowlist.ts": "53c6554561fc694756cac154e1db5520e806dfe6dfb2ffa41ee77bafd18536fe",
+    "packages/ui/src/amicode/widget-allowlist.ts": "7f982150123113c248ef315b5bec39c85c0b7969de94855de39cc67f74d15938",
     "packages/ui/src/amicode/widget-bridge.test.ts": "67ef016e90aef247c16b5dea1362a549f36a5ec44faa5457357b4646d57ff110",
     "packages/ui/src/amicode/widget-bridge.ts": "91f5949af16ae3d6c3e5acf3e6853518b9cf7cec19a2534c3636e30270d1e536",
     "packages/ui/src/amicode/widget-config-form.tsx": "b62f99deed3abebf14e17788218e9583d277e759f01721d9c7ec9b1377b3c04d",
@@ -1348,7 +1348,7 @@
     "packages/ui/src/amicode/widget-preview-card.tsx": "ed022fda6f0e4838d8d8e98680ac6b77979fa8e0987becac1c0d8ad35bf22ecd",
     "packages/ui/src/amicode/widget-preview.test.ts": "3ba95ada8fa9ce742a3246c52e1b1f5b4df1a9e0d8ad453f41e4468fec3b7e54",
     "packages/ui/src/amicode/widget-preview.ts": "21fa605139b96f45675b11a73fa0e8e974be3444feed0f024b8003e96e44927b",
-    "packages/ui/src/amicode/widget-schema.test.ts": "b24049aeeda3fd2a922b5ce6601d99df9c8d3aa44b3e69dc8510a13120c7353a",
+    "packages/ui/src/amicode/widget-schema.test.ts": "fd6c1ab0c5e56c2d7eeae605d67a8de8b250aaa6553beea2f80a742c4a1d4ecb",
     "packages/ui/src/amicode/widget-schema.ts": "e8a0efa3c86ccfae34d2a6feead87b556a2030c1a4e1bbd4b7c5839e116376a6",
     "packages/ui/src/amicode/widget-tokens.test.ts": "426064638b322a421f794bedf5dbf41ad75fc30b3da6e2d02dcf6ed2f85d5f45",
     "packages/ui/src/amicode/widget-tokens.ts": "397edcfa18882b2b6b6abef0a8783d72323f793e974d0bd440ca240a10b2f737",

packages/app-bundle/overlay/packages/ui/src/amicode/widget-allowlist.ts

@@ -7,6 +7,8 @@ const FETCH_ROUTES = [
   "/amicode/profile",
   "/amicode/problems",
   "/amicode/problem",
+  "/amicode/campaigns",
+  "/amicode/campaign",
   "/amicode/run-status",
   "/amicode/run-series",
   "/amicode/run-cards",

packages/app-bundle/overlay/packages/ui/src/amicode/widget-schema.test.ts

@@ -95,9 +95,16 @@ describe("allowFetch", () => {
     expect(allowFetch("/amicode/run-series?run=r1&lab=default")).toBe(true)
     expect(allowFetch("/amicode/dashboard")).toBe(true)
   })
+  test("campaign routes pass (list + drill-down with query)", () => {
+    expect(allowFetch("/amicode/campaigns")).toBe(true)
+    expect(allowFetch("/amicode/campaign?slug=session-20260830-skill-health")).toBe(true)
+  })
   test("prefix rides and foreign paths rejected", () => {
     expect(allowFetch("/amicode/problem-x")).toBe(false)
     expect(allowFetch("/amicode/problemx?slug=s")).toBe(false)
+    expect(allowFetch("/amicode/campaign-x")).toBe(false)
+    expect(allowFetch("/amicode/campaignx?slug=s")).toBe(false)
+    expect(allowFetch("/amicode/campaigns-extra")).toBe(false)
     expect(allowFetch("/session")).toBe(false)
     expect(allowFetch("http://evil.example/amicode/profile")).toBe(false)
     expect(allowFetch(42)).toBe(false)

packages/extension/src/amicode_service/index.ts

@@ -27,6 +27,7 @@ import {
   runSeriesResponse,
   runStatusResponse,
 } from "./problems";
+import { campaignResponse, campaignsResponse } from "./campaign_ledger";
 import { libraryBody, saveLibraryFile } from "./library";
 import { widgetsResponse, widgetCodeResponse, forkWidgetResponse, loadRegistry } from "./widgets";
 import { dashboardResponse, saveDashboardResponse } from "./dashboard";
@@ -122,6 +123,19 @@ export function registerLibraryRoutes(server: AmicodeServiceServer): AmicodeServ
   return server;
 }
 
+// Campaign routes (issue #658): read-only projections of the personal vault's
+// session ledgers — the Campaign Inspector's data path. Same family pattern
+// as the problem routes: one success shape per route, slug rides the query.
+export function registerCampaignRoutes(server: AmicodeServiceServer): AmicodeServiceServer {
+  server.add("GET", "/amicode/campaigns", () => ({ body: campaignsResponse() }));
+
+  server.add("GET", "/amicode/campaign", ({ url }) => ({
+    body: campaignResponse(url.searchParams.get("slug") ?? undefined),
+  }));
+
+  return server;
+}
+
 export function registerWidgetRoutes(server: AmicodeServiceServer): AmicodeServiceServer {
   server.add("GET", "/amicode/widgets", () => ({ body: widgetsResponse() }));
 
@@ -201,6 +215,7 @@ export function createAmicodeService(opts: { password?: string } = {}): AmicodeS
   registerProfileRoutes(server);
   registerVaultRoutes(server);
   registerProblemRoutes(server);
+  registerCampaignRoutes(server);
   registerLibraryRoutes(server);
   registerWidgetRoutes(server);
   registerProjectRoutes(server);