"""BCS Pro Middleware — pip install requests"""
import requests

BCS_API_KEY = "YOUR_API_KEY"
BCS_URL = "https://botconduct.org/api/score"

def bcs_check(request):
    try:
        r = requests.post(BCS_URL, json={
            "ua": request.headers.get("User-Agent", ""),
            "ip": request.remote_addr,
            "path": request.path,
            "api_key": BCS_API_KEY
        }, timeout=0.2)
        return r.json()
    except:
        return {"action": "allow"}  # fail open

# Flask example:
# @app.before_request
# def check_bots():
#     verdict = bcs_check(request)
#     if verdict["action"] == "block":
#         return "Access denied", 403
#     if verdict["action"] == "throttle":
#         return "Rate limited", 429
