SDK Versioning & Upgrades

// URL is the private repo Phosra provides; the version is a semver Git tag.
.package(url: "<private PhosraSDK repo URL>", exact: "1.0.0"),
// …then add "PhosraSDK" to your target's dependencies.

dependencies {
    implementation("com.phosra:sdk:1.0.0") // exact coordinate, never "1.0.+" or "latest.release"
}

import { createGatekeeper } from "@phosra/gatekeeper";
import type { GatekeeperConfig } from "@phosra/gatekeeper";
import type { SenderKey } from "@openchildsafety/ocss";

// Your platform's Ed25519 signing key, minted at endpoint-bind time. Never inline it —
// load from a secret store. See /sdks/link for how to obtain one.
declare const platformSigningKey: SenderKey;

// 0.1.0 config: note there is NO profileMaxAgeMs and NO onRevoked in this version.
const config: GatekeeperConfig = {
  platformDid:          "did:ocss:your-platform",
  platformKeyId:        "did:ocss:your-platform#key-2026",
  gatekeeperSigningKey: platformSigningKey,
  censusBaseUrl:        "https://phosra-api-sandbox-production.up.railway.app",
  trustRootXB64Url:     process.env.PHOSRA_TRUST_ROOT_X!,   // public root pubkey X
  endpointId:           "endpoint-mia-01",                  // the §9.3(b) bound label
  ratingMappings:       [{ ocssCategory: "content_rating", myField: "maturity", vocabulary: "mpaa" }],
};

const gk = createGatekeeper(config);

// isAllowed is synchronous and returns a Verdict; branch on verdict.decision.
function guard(maturity: string): boolean {
  const verdict = gk.isAllowed({ category: "content_rating", signal: { maturity } });
  return verdict.decision !== "block";
  // 0.1.0 has no endpointState()/onRevoked, so a census outage and a real
  // disconnect are indistinguishable here — the gap 0.2.x closes.
}

import { createGatekeeper } from "@phosra/gatekeeper";
import type { GatekeeperConfig } from "@phosra/gatekeeper";
import type { SenderKey } from "@openchildsafety/ocss";

declare const platformSigningKey: SenderKey;

// Your release-to-native handler: drop the tighten-only overlay / "Managed via Phosra"
// badge. Safe by construction — the overlay only tightens, so lifting it never loosens.
function releaseToNative(childRef?: string, endpointLabel?: string): void {
  /* remove the OCSS overlay for this (child, endpoint) */
}

const config: GatekeeperConfig = {
  platformDid:          "did:ocss:your-platform",
  platformKeyId:        "did:ocss:your-platform#key-2026",
  gatekeeperSigningKey: platformSigningKey,
  censusBaseUrl:        "https://phosra-api-sandbox-production.up.railway.app",
  trustRootXB64Url:     process.env.PHOSRA_TRUST_ROOT_X!,
  endpointId:           "endpoint-mia-01",
  ratingMappings:       [{ ocssCategory: "content_rating", myField: "maturity", vocabulary: "mpaa" }],

  // NEW in 0.2.x — adopt the bounded-staleness floor explicitly (default 60_000ms).
  // A cached profile older than this fail-closed blocks, independent of the census window.
  profileMaxAgeMs: 60_000,

  // NEW in 0.2.2 — fired once on the terminal transition to revoked.
  onRevoked: ({ childRef, endpointLabel }) => releaseToNative(childRef, endpointLabel),
};

const gk = createGatekeeper(config);

// Keep the cached profile fresh INSIDE the floor so a tightened rule always propagates.
setInterval(() => { void gk.refreshProfile(); }, 30_000); // < profileMaxAgeMs

function guard(maturity: string): boolean {
  const verdict = gk.isAllowed({ category: "content_rating", signal: { maturity } });
  return verdict.decision !== "block";
}

// NEW in 0.2.2 — tell a disconnect ("revoked") apart from an outage ("stale") before
// releasing. NEVER release on "stale".
if (gk.endpointState() === "revoked") releaseToNative();

{
  "mcpServers": {
    "phosra": {
      "command": "npx",
      "args": ["-y", "@phosra/mcp@0.2.0", "--api-key", "phomcp_…"]
    }
  }
}

{
  "mcpServers": {
    "phosra": {
      "command": "npx",
      "args": ["-y", "@phosra/mcp@0.4.0", "--api-key", "phomcp_…"]
    }
  }
}