dbsc-toolkit 2.9.11 → 2.9.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +8 -0
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -191,6 +191,14 @@ Every session carries a `tier`. You don't gate on it directly — `requireProof(
191
191
  import { dbsc } from "@dbsc-toolkit/better-auth" // auth.ts → plugins: [dbsc()]
192
192
  ```
193
193
 
194
+ ## Protocol & spec
195
+
196
+ The wire protocol is documented as a language-neutral spec in [`spec/`](./spec/): header formats, JWS and JSON shapes, the storage and cookie contracts, error codes, and real test vectors. `dbsc-toolkit` is the reference implementation — the spec is what lets a conforming DBSC server be built in any language, not just Node.
197
+
198
+ - [`spec/README.md`](./spec/README.md) — start here
199
+ - [`spec/02-native-protocol.md`](./spec/02-native-protocol.md) — the native Chromium flow on the wire
200
+ - [`spec/09-conformance.md`](./spec/09-conformance.md) — what "conforming" means and how to verify it
201
+
194
202
  ## Roadmap
195
203
 
196
204
  - [x] Express, Fastify, Hono, Next.js adapters
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "dbsc-toolkit",
3
- "version": "2.9.11",
3
+ "version": "2.9.12",
4
4
  "description": "Server-side Device Bound Session Credentials (DBSC) for Node.js plus a Web Crypto polyfill for Firefox, Safari, and older Chromium. Cookie-theft protection on every modern browser.",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",