feat(campaign): read-only campaign-cli ledger reporter (v5.7 Fase 2 Block 3b)

Read-only reporter over the durable campaign-ledger core (Block 3a). Mirrors
knowledge-refresh-cli: the deterministic, READ-ONLY half of the campaign motor.

- scanners/campaign-cli.mjs (-cli → not an orchestrated scanner): loadLedger +
  validateLedger + rollUp, emits {status, initialized, ledgerPath, schemaVersion,
  createdDate, updatedDate, repos, rollUp} JSON. NEVER writes — a missing ledger
  is reported gracefully (initialized:false), never created. init + status
  transitions belong to the Block 3c command layer (human-approved writes).
- --ledger-file overrides default path (deterministic testing); --output-file
  mirrors the sibling. Exit: 0 = initialized & valid, 1 = not initialized
  (advisory), 3 = error (parse/corrupt/invalid).
- 8 tests (tests/scanners/campaign-cli.test.mjs). Suite 1119→1127 green hermetic;
  scanner count stays 15 (-cli), SC-5 byte-stable.
- CLAUDE.md: §campaign-cli added; Testing badge corrected 1091/62 → 1127/64
  (fixes pre-existing Block 3a drift).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

scanners/campaign-cli.mjs

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+
+/**
+ * campaign-cli — read-only reporter for the durable machine-wide campaign ledger
+ * (v5.7 Fase 2, Block 3b).
+ *
+ * Mirrors the knowledge-refresh-cli precedent: it is the DETERMINISTIC, READ-ONLY half
+ * of the hybrid motor. It loads the campaign ledger (the durable file that sits ABOVE
+ * individual config-audit sessions), validates it, and emits the repo list + a
+ * machine-wide roll-up as JSON. It NEVER writes the ledger — initialization and every
+ * status transition belong to the command layer (Block 3c `/config-audit campaign`),
+ * which calls the lib's pure transforms + saveLedger only on explicit, human-approved
+ * action. A missing ledger file is reported gracefully (initialized:false), NEVER created.
+ *
+ * Naming: `-cli` suffix → NOT an orchestrated scanner (the scan-orchestrator only loads
+ * scanner modules), so the scanner count is unchanged and the snapshot suite stays
+ * byte-stable.
+ *
+ * Usage:
+ *   node campaign-cli.mjs [--ledger-file <path>] [--output-file <path>]
+ *
+ * Exit codes: 0 = initialized & valid, 1 = not initialized yet (advisory), 3 = error.
+ */
+
+import { resolve } from 'node:path';
+import { writeFile } from 'node:fs/promises';
+import {
+  loadLedger,
+  validateLedger,
+  rollUp,
+  defaultLedgerPath,
+} from './lib/campaign-ledger.mjs';
+
+function fail(message) {
+  process.stderr.write(`Error: ${message}\n`);
+  process.exit(3);
+}
+
+async function main() {
+  const args = process.argv.slice(2);
+  let ledgerFile = null;
+  let outputFile = null;
+
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (a === '--ledger-file' && args[i + 1]) ledgerFile = args[++i];
+    else if (a === '--output-file' && args[i + 1]) outputFile = args[++i];
+  }
+
+  const ledgerPath = resolve(ledgerFile || defaultLedgerPath());
+
+  let ledger;
+  try {
+    // loadLedger returns null on ENOENT (graceful first run) and throws on parse error.
+    ledger = await loadLedger(ledgerPath);
+  } catch (err) {
+    fail(`could not read ledger at ${ledgerPath}: ${err.message}`);
+  }
+
+  let payload;
+  let exitCode;
+
+  if (ledger === null) {
+    // Graceful first run — the ledger does not exist yet. We DO NOT create it; that is
+    // the command layer's job (Block 3c), on explicit human-approved action.
+    payload = {
+      status: 'ok',
+      initialized: false,
+      ledgerPath,
+      schemaVersion: null,
+      createdDate: null,
+      updatedDate: null,
+      repos: [],
+      rollUp: rollUp({ repos: [] }),
+    };
+    exitCode = 1; // advisory: there is no campaign to report yet
+  } else {
+    const { valid, errors } = validateLedger(ledger);
+    if (!valid) {
+      fail(`ledger at ${ledgerPath} is invalid:\n  - ${errors.join('\n  - ')}`);
+    }
+    payload = {
+      status: 'ok',
+      initialized: true,
+      ledgerPath,
+      schemaVersion: ledger.schemaVersion,
+      createdDate: ledger.createdDate,
+      updatedDate: ledger.updatedDate,
+      repos: ledger.repos,
+      rollUp: rollUp(ledger),
+    };
+    exitCode = 0;
+  }
+
+  const json = JSON.stringify(payload, null, 2);
+  if (outputFile) await writeFile(outputFile, json, 'utf-8');
+  else process.stdout.write(json + '\n');
+
+  process.exit(exitCode);
+}
+
+const isDirectRun =
+  process.argv[1] && resolve(process.argv[1]) === resolve(new URL(import.meta.url).pathname);
+if (isDirectRun) {
+  main().catch((err) => {
+    process.stderr.write(`Fatal: ${err.message}\n`);
+    process.exit(3);
+  });
+}