@nextcommerce/campaigns-os 1.37.2 → 1.37.3

package/AGENTS.md

@@ -97,7 +97,7 @@ The portable `./progress` contract preserves separate saved Map, semantic spec
 and output identities, and grants no orientation or deployment trust. See
 [progress snapshots](docs/progress-snapshots.md).
 
-Candidate 1.37.0 adds `demo --target <new-directory>`, an offline visual sample
+1.37.0 adds `demo --target <new-directory>`, an offline visual sample
 that copies a pinned inert Apollo bundle and prints its landing/index.html path.
 It bypasses session recovery and creates no campaign evidence or telemetry.
 Unsupported flags, including no-write and dry-run, are rejected before writes.

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 Notable supported-surface changes are recorded here.
 
+## [1.37.3] - 2026-09-19
+
+### Changed
+
+- Publish the corrected install documentation. The README and quick start in
+  the 1.37.2 tarball still pinned `@nextcommerce/campaigns-os@1.34.1` and called
+  `demo` a candidate feature; this release carries the 1.37.2+agent.1 wording
+  (install examples at the current release, `demo` documented as shipped in
+  1.37.0 and later) so the npm package page matches the portal. No command,
+  schema, skill or export changes.
+
+## [1.37.2+agent.1] - 2026-09-19
+
+### Changed
+
+- Point the install examples at the published 1.37.2 release. `README.md` and
+  `docs/quickstart.md` still pinned `@nextcommerce/campaigns-os@1.34.1`, three
+  releases behind the tag they ship in, so a reader following the GitHub or npm
+  README installed a toolkit without `demo` or `tooling diagnose`. The
+  minimum-version notes for those commands stay; the
+  "not published yet" caveats and their full-SHA workarounds are gone.
+- Stop calling 1.37.0 a candidate. `AGENTS.md`, `docs/supported-surface.md`,
+  `docs/activation-and-evidence.md`, `docs/demo-preview.md` and the quick starts
+  described `demo` as a "candidate 1.37.0" feature; 1.37.0 through 1.37.2 are
+  published releases and the wording now says so.
+
 ## [1.37.2] - 2026-09-18
 
 ### Fixed

package/README.md

@@ -43,7 +43,7 @@ order:
 mkdir "<route>" && cd "<route>"
 npm init -y && npm i next-campaign-page-kit
 npx campaign-init --non-interactive --template <family> --slug "<route>" --name "<campaign name>"
-npm install --save-dev --save-exact @nextcommerce/campaigns-os@1.34.1
+npm install --save-dev --save-exact @nextcommerce/campaigns-os@1.37.3
 npx campaigns-os tooling status --platform claude
 npx campaigns-os install-skills --platform claude
 mkdir -p source
@@ -53,7 +53,7 @@ The toolkit is also published to npm as `@nextcommerce/campaigns-os`, so the
 CLI can be installed once, globally, instead of pinned per campaign:
 
 ```bash
-npm install -g @nextcommerce/campaigns-os@1.34.1
+npm install -g @nextcommerce/campaigns-os@1.37.3
 campaigns-os tooling status --platform claude
 campaigns-os install-skills --platform claude
 ```
@@ -69,20 +69,16 @@ runs the full check in an unprivileged job and publishes the verified tarball
 with provenance from a second, environment-gated job.
 
 For an existing page-kit campaign, skip the first three lines and `cd` into it
-(its `package.json` already declares `next-campaign-page-kit`). `1.34.1` is
+(its `package.json` already declares `next-campaign-page-kit`). `1.37.3` is
 an exact published example; choose the release you reviewed, never a floating
 dist-tag for a reproducible build. Commit `package.json` and `package-lock.json`.
-The new `tooling diagnose` command requires 1.35.0 or later. When that release
-is not published yet, use the reviewed full-SHA source pin below; the 1.34.1
-example does not include diagnostics or the global invocation rendering fix.
+`tooling diagnose` requires 1.35.0 or later and `demo` requires 1.37.0 or later.
 A Git source pin remains supported when using an unreleased reviewed commit:
 `npm install --save-dev --save-exact "github:NextCommerceCo/campaigns-os#<full-sha>"`.
 
-For a visual sample, candidate 1.37.0 adds
-`npx campaigns-os demo --target ./apollo-sample`. Open the printed
-`landing/index.html` directly to explore four inert Apollo pages. This command
-requires a reviewed candidate or a published release at least 1.37.0; the 1.34.1
-example above does not include it. It downloads nothing and creates no campaign
+For a visual sample, `npx campaigns-os demo --target ./apollo-sample`
+(1.37.0 or later) copies four inert Apollo pages; open the printed
+`landing/index.html` directly. It downloads nothing and creates no campaign
 evidence. Keep sample edits and start a real campaign in a separate new Page Kit
 folder. See [offline sample preview](docs/demo-preview.md).
 The lockfile records the resolved source and integrity; `tooling status` reports

package/contracts/release-ledger.json

@@ -5273,6 +5273,90 @@
         }
       ],
       "entry_sha256": "174e0bac2ba34b94fbb7b30257d0baf4e417440cdbcfdc5685b9f48fa565ce26"
+    },
+    {
+      "id": "RL-0129",
+      "sequence": 129,
+      "date": "2026-09-19",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.37.2+agent.1",
+      "changelog_sha256": "602403245b293dc362ed28275ecfc1bc7d08e49f83be43cabdc5a91559ccd1f5",
+      "agent_impact": "Install examples in README.md and docs/quickstart.md now name the published 1.37.2 release instead of 1.34.1; demo is documented as shipped in 1.37.0 and later rather than as a candidate. No command, schema, skill or export changed.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "documentation",
+          "path": "AGENTS.md",
+          "surface_entry": "AGENTS.md",
+          "summary": "Describe demo as shipped in 1.37.0, not a candidate."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "docs/supported-surface.md",
+          "surface_entry": "docs/supported-surface.md",
+          "summary": "Describe the demo CLI command as shipped in 1.37.0, not a candidate."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/activation-and-evidence.md",
+          "surface_entry": "docs/activation-and-evidence.md",
+          "summary": "Describe demo --target as available in 1.37.0 and later."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/demo-preview.md",
+          "surface_entry": "docs/demo-preview.md",
+          "summary": "Drop the 1.34.1 caveat; demo ships in 1.37.0 and later."
+        }
+      ],
+      "entry_sha256": "7d7c4900e75bcb51f771416ce8c87e2e88111e184a5485fc6b7ac6634152241c"
+    },
+    {
+      "id": "RL-0130",
+      "sequence": 130,
+      "date": "2026-09-19",
+      "kind": "release",
+      "surface_version": "1.37.3",
+      "changelog_section": "1.37.3",
+      "changelog_sha256": "4fa53214f29b66d2dfff6011aaa373455e0d44d3cb1c5021cd867b473737fd08",
+      "agent_impact": "Install from 1.37.3 to get README and quick-start install examples that name the current release; demo is documented as shipped in 1.37.0 and later. Commands, schemas, skills and exports are unchanged from 1.37.2.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Advance the compatible package patch to 1.37.3."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Ship the corrected install documentation as package 1.37.3."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Keep the exact lockfile package identity at 1.37.3."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate the orientation reference for surface version 1.37.3."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate the runtime reference for package version 1.37.3."
+        }
+      ],
+      "entry_sha256": "fb317fe901bbab34f0c909b523a9e4e07040285a5f6883ee572c6f927681c0b1"
     }
   ]
 }

package/contracts/supported-surface.json

@@ -1,6 +1,6 @@
 {
   "_note": "The downstream contract manifest. Everything listed here is SUPPORTED SURFACE: consumers (campaigns-agent, campaign-builder, the private ops repo, page-kit campaign repos) may depend on it, and changing it is a deliberate act \u2014 hashed entries require a surface_version bump in the same change (check-supported-surface.mjs --base, mirroring the skills.json bump gate), named entries must keep existing at their path, cli_commands must keep resolving in the CLI dispatch, package_exports must stay exported, and every entry must ship in the npm pack (files[] coverage). Anything NOT listed here \u2014 src/** internals, scripts/** checkers, examples/**, prompts/**, contracts/** other than this file and the entries named[] below (the orientation contract, the release ledger, and the consumer-facing orientation fixtures) \u2014 is implementation: consumers may read it for context but must not build on it, and it can change without notice. Rationale and the compatibility promise: docs/supported-surface.md.",
-  "surface_version": "1.37.2",
+  "surface_version": "1.37.3",
   "package_exports": [
     "./commercial-journey",
     "./commercial-parity",

package/docs/activation-and-evidence.md

@@ -9,7 +9,7 @@ milestones below describe evidence, not a second state machine.
 | Milestone | What it establishes | What is still needed |
 |---|---|---|
 | Toolkit installed | The selected package can run and its agent skills can be checked with `tooling status`. | Campaign inputs and workflow evidence. Installation needs npm access; it does not grant store, Map, deploy, or QA access. |
-| Demo preview | Pinned sample pages can be opened locally for a visual walkthrough; candidate 1.37.0 provides `demo --target <new-directory>`. | A separate real campaign folder, configuration, replaced demo values, and the ordinary build and proof gates. Demo behavior is not live commerce proof. |
+| Demo preview | Pinned sample pages can be opened locally for a visual walkthrough; 1.37.0 and later provide `demo --target <new-directory>`. | A separate real campaign folder, configuration, replaced demo values, and the ordinary build and proof gates. Demo behavior is not live commerce proof. |
 | Map saved | Campaign Map Builder has retained the authored campaign plan. A local export is an alternative build input. | Export/revision agreement and resolution of live campaign data. Saving a Map does not establish Campaigns App or store access. |
 | Campaign resolved | The package-owned resolver has read the campaign's live configuration and produced resolution evidence. | Build, preview, and runtime proof. Confirm Campaigns App keys and allowed domains; store Admin API reads need their own read token. |
 | Preview observed | A browser has inspected the served current build at the tested URL. | Retained package-owned Polish capture and QA evidence tied to that build. A deployed URL alone is not an observation. |

package/docs/demo-preview.md

@@ -1,8 +1,7 @@
 # Offline sample preview
 
-Candidate 1.37.0 adds `campaigns-os demo`. The published 1.34.1 installation
-example does not contain this command; install a reviewed full-SHA candidate
-or an exact release at least 1.37.0 after publication.
+`campaigns-os demo` ships in 1.37.0 and later; install an exact published
+release at least 1.37.0 (or a reviewed full-SHA source pin).
 
 From the folder containing your exact project-local toolkit installation:
 

package/docs/orientation-contract-reference.md

@@ -25,7 +25,7 @@ Ledger schema id: `campaigns-os-release-ledger/v1`
 Change policy version: `1.0.0`  
 Reason-code vocabulary version: `1.0.0`  
 Limits version: `1.0.0`  
-Supported surface at generation time: `1.37.2`
+Supported surface at generation time: `1.37.3`
 
 ## Forward compatibility
 

package/docs/runtime-readiness.md

@@ -8,7 +8,7 @@
 
 How a checkout of this repository at one commit becomes a usable installed runtime, and how a consumer decides whether a prepared one is still trustworthy. Everything below is generated from `contracts/runtime-recipe.campaigns-os-node-v1.json`, which is the only authority for these values.
 
-Recipe kind `campaigns-os-node-v1`, revision `1.0.2`, validated by `schemas/campaigns-os-runtime-recipe.v1.schema.json` (`Campaigns OS Runtime Recipe v1`). Supported surface at generation time: `1.37.2`.
+Recipe kind `campaigns-os-node-v1`, revision `1.0.2`, validated by `schemas/campaigns-os-runtime-recipe.v1.schema.json` (`Campaigns OS Runtime Recipe v1`). Supported surface at generation time: `1.37.3`.
 
 ## What this is
 

package/docs/supported-surface.md

@@ -89,7 +89,7 @@ fixture. Observations preserve canonical continuation and separate Map/spec/buil
 identities; consumers must not treat history presence or scope-key matching as
 readiness or trust.
 
-Candidate 1.37.0 adds the `demo` CLI command, [offline sample reference](demo-preview.md),
+1.37.0 adds the `demo` CLI command, [offline sample reference](demo-preview.md),
 a hashed `demo/apollo-v0/provenance.json` and named attribution notice. The command
 exclusively creates a new target with validated inert pages. Its internal static
 files are covered by the provenance output hashes; they are not independent

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextcommerce/campaigns-os",
-  "version": "1.37.2",
+  "version": "1.37.3",
   "description": "Toolkit for agent-assisted NEXT campaign builds.",
   "license": "Apache-2.0",
   "repository": {