Sandbox available · Production unavailable
SDK compatibility
The first package line is built and tested from its packed artifacts. Registry publication is a separate availability claim.
| Package | Support floor | Purpose |
|---|---|---|
@headless-bid/canon | Node.js 22 | Deterministic canonicalization and protocol digests. |
@headless-bid/verifier | Node.js 22 | Independent evidence and record verification. |
@headless-bid/server | Node.js 22 | Tenant backend, webhook and administrative helpers. |
@headless-bid/client | ES2022 browsers | Framework-free bidder session core. |
@headless-bid/client-react | ES2022 browsers · React 18/19 | Hooks-only binding with React as a peer. |
@headless-bid/cli | Node.js 22 · macOS arm64, Linux x64 and Windows x64 | OAuth PKCE login and scriptable Sandbox operations through the headless binary, with native credential write/read/delete gated on every supported host. |
Browser floor
The browser artifacts are bundle-checked at Chromium 120+, Firefox 121+ and Safari 17.4+. They contain no visual components or styles. Cloudflare Workers and Deno remain best-effort, not supported runtimes for @headless-bid/server 0.1.x.
License and package boundary
All six release-candidate packages carry Apache-2.0, typed dist exports and no unpublished workspace dependency. @headless-bid/cli stores grants only in the native OS credential store.