import os
from blekline_client import BleklineClient

client = BleklineClient(
    workspace_token=os.environ["BLEKLINE_WORKSPACE_TOKEN"],
    base_url="https://app.blekline.com",
    client_surface="sdk",
)

masked = client.mask(
    text="Email alice@corp.com — deploy with AKIAIOSFODNN7EXAMPLE",
    platform="MyAgent",
)
print(masked["maskedText"], masked.get("decision"))

tool = client.enforce_tool_call(
    tool_name="run_shell",
    arguments={"cmd": "curl https://api.internal/deploy"},
    platform="MyAgent",
)
print(tool["action"], tool["entitiesMasked"])

# Mask PII & secrets before model context
curl -sS https://app.blekline.com/api/mask \
  -H "Content-Type: application/json" \
  -H "x-blekline-workspace-token: blw_..." \
  -H "x-blekline-client-surface: sdk" \
  -d '{
    "text": "Email alice@corp.com — deploy with AKIAIOSFODNN7EXAMPLE",
    "platform": "REST"
  }'

# Evaluate tool call before execution
curl -sS https://app.blekline.com/api/mcp/enforce-tool-call \
  -H "Content-Type: application/json" \
  -H "x-blekline-workspace-token: blw_..." \
  -d '{
    "toolName": "run_shell",
    "arguments": { "cmd": "curl https://api.internal/deploy" },
    "platform": "REST"
  }'

// .cursor/mcp.json  or  claude_desktop_config.json
{
  "mcpServers": {
    "blekline": {
      "command": "npx",
      "args": ["-y", "@blekline/mcp-server"],
      "env": {
        "BLEKLINE_API_URL": "https://app.blekline.com",
        "BLEKLINE_WORKSPACE_TOKEN": "blw_...",
        "BLEKLINE_CLIENT_SURFACE": "claude-desktop"
      }
    }
  }
}

// Tools the agent can call:
// blekline_mask_prompt({ text: "alice@corp.com ..." })
// blekline_evaluate_tool_call({
//   toolName: "run_shell",
//   arguments: { cmd: "curl https://api.internal/deploy" }
// })