from qnsp import QnspClient
import os, base64, json

qnsp = QnspClient(api_key=os.environ["QNSP_API_KEY"])

# Vault PHI under per-patient key (ML-KEM-768-wrapped AES-256-GCM)
secret = qnsp.vault.create_secret(
    name=f"phi:{patient_mrn}",
    payload_b64=base64.b64encode(json.dumps(phi_record).encode()).decode(),
    metadata={"pqcAlgorithm": "ml-kem-768"},
)

# Cohort search: index a de-identified embedding for cohort discovery
qnsp.search.upsert_vectors(
    index_name="cohorts",
    vectors=[{
        "id": patient_mrn,
        "vector": deidentified_embedding,
        "metadata": {"age_band": "60-70", "icd10_prefix": "E11"},
    }],
)

qnsp.audit.log_event(
    event_type="phi.created",
    payload={"mrn": patient_mrn, "secret_id": secret["id"]},
)