Data-plane API reference

import { signRequest } from "@openchildsafety/ocss"

const BASE = "https://phosra-api-sandbox-production.up.railway.app/api/v1"

// Your Trust-List key. In the sandbox, the seeded emitter "loopline" signs with a
// deterministic test seed (slug bytes right-padded 0x01 to 32 B); in production this
// is your real Ed25519 seed, kept server-side only.
const seed  = new Uint8Array(Buffer.from("bG9vcGxpbmUBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE", "base64url"))
const keyID = "did:ocss:loopline#2026-06"

export async function signedPost(path: string, body: unknown) {
  const targetURI = BASE + path
  const bodyText  = JSON.stringify(body)
  const headers   = signRequest({
    method: "POST",
    targetURI,
    body: new TextEncoder().encode(bodyText),
    keyID, seed,
    created: Math.floor(Date.now() / 1000),
  })
  headers["Content-Type"] = "application/json"
  return fetch(targetURI, { method: "POST", headers, body: bodyText })
}

export async function signedGet(path: string) {
  const targetURI = BASE + path
  const headers   = signRequest({ method: "GET", targetURI, keyID, seed, created: Math.floor(Date.now() / 1000) })
  return fetch(targetURI, { method: "GET", headers })
}