@sellable/install 0.1.87 → 0.1.89

package/bin/sellable-install.mjs

@@ -614,11 +614,12 @@ copy.
 ## Codex Watch Browser Handoff
 
 When a campaign tool returns \`watchUrl\`, treat it as an active browser handoff,
-not only a URL to print. A valid handoff link must be a signed
-\`/auth/continue?token=...&redirect=/campaign-builder/{campaignId}?mode=claude\`
+not only a URL to print. A valid handoff link must be a safe direct
+\`/campaign-builder/{campaignId}?mode=claude\`
 URL. \`create_campaign.watchUrl\`, \`create_campaign({ campaignId }).watchUrl\`,
-and \`get_campaign.watchUrl\` are all acceptable only when they return that signed
-shape.
+and \`get_campaign.watchUrl\` are all acceptable only when they return that direct
+campaign-builder shape, with \`workspaceId\` used only as a safe routing hint when
+needed.
 
 In Codex Desktop, when in-app browser control is available, open the returned watch link on the user's behalf. After opening it, inspect the browser-visible campaign state, then explain what the user is seeing before continuing with more campaign tools. Use customer language such as:
 
@@ -627,7 +628,7 @@ I’ll open the campaign view and keep it in sync as I build.
 \`\`\`
 
 If browser control is unavailable, provide the watch link without discussing the
-runtime limitation. In off-desktop Codex runs, make the signed link easy to
+runtime limitation. In off-desktop Codex runs, make the direct watch link easy to
 copy/open, then continue with explicit customer-facing campaign progress and
 \`get_campaign_navigation_state\` orientation checks.
 Use this fallback shape:
@@ -640,7 +641,7 @@ here as I build.
 \`\`\`
 
 If opening the watch link lands on an auth, 404, permission, blank, or visible
-error state, report only what is visible, recover a fresh signed watch link once
+error state, report only what is visible, recover a fresh watch link once
 with \`create_campaign({ campaignId })\` or \`get_campaign\`, and try that link.
 Do not claim the browser was opened, inspected, or synchronized unless the
 visible browser state was actually observed. Do not claim the browser was opened

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.87",
+  "version": "0.1.89",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code and Codex",
   "bin": {

package/skill-templates/create-campaign.md

@@ -162,11 +162,11 @@ copy.
 ## Codex Watch Browser Handoff
 
 When a campaign tool returns `watchUrl`, treat it as an active browser handoff,
-not only a URL to print. A valid handoff link must be a signed
-`/auth/continue?token=...&redirect=/campaign-builder/{campaignId}?mode=claude`
-URL. `create_campaign.watchUrl`, `create_campaign({ campaignId }).watchUrl`,
-and `get_campaign.watchUrl` are all acceptable only when they return that signed
-shape.
+not only a URL to print. A valid handoff link must be a safe direct
+`/campaign-builder/{campaignId}?mode=claude` URL. `create_campaign.watchUrl`,
+`create_campaign({ campaignId }).watchUrl`, and `get_campaign.watchUrl` are all
+acceptable only when they return that direct campaign-builder shape, with
+`workspaceId` used only as a safe routing hint when needed.
 
 In Codex Desktop, when in-app browser control is available, open the returned watch link on the user's behalf. After opening it, inspect the browser-visible campaign state, then explain what the user is seeing before continuing with more campaign tools. Use customer language such as:
 
@@ -175,8 +175,8 @@ I’ll open the campaign view and keep it in sync as I build.
 ```
 
 If browser control is unavailable, provide the watch link without discussing the
-runtime limitation. In off-desktop Codex runs, make the signed link easy to
-copy/open, then continue with explicit customer-facing campaign progress and
+runtime limitation. In off-desktop Codex runs, make the direct watch link easy
+to copy/open, then continue with explicit customer-facing campaign progress and
 `get_campaign_navigation_state` orientation checks.
 Use this fallback shape:
 
@@ -188,9 +188,9 @@ here as I build.
 ```
 
 If opening the watch link lands on an auth, 404, permission, blank, or visible
-error state, report only what is visible, recover a fresh signed watch link once
-with `create_campaign({ campaignId })` or `get_campaign`, and try that link. Do
-not claim the browser was opened, inspected, or synchronized unless the visible
+error state, report only what is visible, recover a fresh watch link once with
+`create_campaign({ campaignId })` or `get_campaign`, and try that link. Do not
+claim the browser was opened, inspected, or synchronized unless the visible
 browser state was actually observed. Do not claim the browser was opened unless
 it was opened and observed.