[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_105":106,"_107":108},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","Barrosky","name","Barryguard-B","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/Barrosky/Barryguard-B/code/main.ts","extension","id","aa53b0be-bc01-4c14-9522-87a9c46a57cf","fileId","5f54e816-a1e0-11f1-b238-1607ee4eb77e","parentId","branchId","8c9ea12b-935d-44c6-8c54-e0ab52d18cda","branchVersion",6,"latest",true,"createdAt",["D",1787833771084],"version",5,"fileType","http","content","// BarryGuard — application complète en un seul fichier, pour Val Town.\n//\n// Secrets nécessaires (menu \"Env vars\" de ton compte Val Town) :\n// SIGHTENGINE_API_USER (déjà configuré)\n// SIGHTENGINE_API_SECRET (déjà configuré)\n// CINETPAY_API_KEY (optionnel — sans ça, les abonnements payants\n// CINETPAY_SITE_ID renvoient une erreur explicite, jamais un faux paiement)\n// STRIPE_SECRET_KEY (optionnel — carte bancaire, même logique)\n// STRIPE_WEBHOOK_SECRET (optionnel — vérification du webhook Stripe)\n// PUBLIC_APP_URL (optionnel — l'URL de ton val, ex: https://xxx.val.run,\n// nécessaire uniquement pour les webhooks CinetPay/Stripe)\n\nimport sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ---------------------------------------------------------------------------\n// BASE DE DONNÉES\n// ---------------------------------------------------------------------------\n\nasync function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n email TEXT UNIQUE NOT NULL,\n password_hash TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n expires_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS subscriptions (\n user_id TEXT PRIMARY KEY,\n plan TEXT NOT NULL DEFAULT 'FREE',\n status TEXT NOT NULL DEFAULT 'ACTIVE',\n analyses_used INTEGER NOT NULL DEFAULT 0,\n period_start TEXT NOT NULL,\n period_end TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS analyses (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n content_type TEXT NOT NULL,\n verdict TEXT,\n confidence_score INTEGER,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS payments (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n provider TEXT NOT NULL,\n provider_ref TEXT UNIQUE NOT NULL,\n plan TEXT NOT NULL,\n amount INTEGER NOT NULL,\n status TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n}\n\n// ---------------------------------------------------------------------------\n// PLANS D'ABONNEMENT (modifiables ici uniquement)\n// ---------------------------------------------------------------------------\n\nconst PLANS = {\n FREE: { label: \"Gratuit\", priceAmount: 0, currency: \"USD\", periodDays: 30, quota: 5 },\n PRO_MONTHLY: { label: \"Pro Mensuel\", priceAmount: 15, currency: \"USD\", periodDays: 30, quota: -1 },\n PRO_YEARLY: { label: \"Pro Annuel\", priceAmount: 140, currency: \"USD\", periodDays: 365, quota: -1 },\n} as const;\ntype PlanId = keyof typeof PLANS;\n\n// ---------------------------------------------------------------------------\n// AUTHENTIFICATION (mots de passe hashés, sessions par cookie)\n// ---------------------------------------------------------------------------\n\nasync function hashPassword(password: string): Promise {\n const salt = crypto.getRandomValues(new Uint8Array(16));\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const derived = await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt, iterations: 100000, hash: \"SHA-256\" }, key, 256);\n return btoa(String.fromCharCode(...salt)) + \":\" + btoa(String.fromCharCode(...new Uint8Array(derived)));\n}\n\nasync function verifyPassword(password: string, stored: string): Promise {\n const [saltB64, hashB64] = stored.split(\":\");\n const salt = Uint8Array.from(atob(saltB64), (c) => c.charCodeAt(0));\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const derived = await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt, iterations: 100000, hash: \"SHA-256\" }, key, 256);\n return btoa(String.fromCharCode(...new Uint8Array(derived))) === hashB64;\n}\n\nfunction newId(): string {\n return crypto.randomUUID();\n}\n\nfunction parseCookies(req: Request): Record {\n const header = req.headers.get(\"cookie\") ?? \"\";\n const out: Record = {};\n for (const part of header.split(\";\")) {\n const [k, ...v] = part.trim().split(\"=\");\n if (k) out[k] = v.join(\"=\");\n }\n return out;\n}\n\nasync function getCurrentUserId(req: Request): Promise {\n const token = parseCookies(req)[\"session\"];\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"SELECT user_id, expires_at FROM sessions WHERE token = ?\",\n args: [token],\n });\n const row = result.rows[0] as any;\nif (!row) return null;\nif (new Date(row.expires_at) < new Date()) return null;\nreturn row.user_id as string;\n\n}\n\nfunction sessionCookieHeader(token: string): string {\n return `session=${token}; HttpOnly; Path=/; Max-Age=2592000; SameSite=Lax`;\n}\n\n// ---------------------------------------------------------------------------\n// ABONNEMENT — récupération + application du quota\n// ---------------------------------------------------------------------------\n\nasync function getOrCreateSubscription(userId: string) {\n let result = await sqlite.execute({\n sql: \"SELECT plan, status, analyses_used, period_start, period_end FROM subscriptions WHERE user_id = ?\",\n args: [userId],\n });\n\n if (!result.rows[0]) {\n const now = new Date();\n const periodEnd = new Date(now.getTime() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"INSERT INTO subscriptions (user_id, plan, status, analyses_used, period_start, period_end) VALUES (?, 'FREE', 'ACTIVE', 0, ?, ?)\",\n args: [userId, now.toISOString(), periodEnd.toISOString()],\n });\n return { plan: \"FREE\" as PlanId, status: \"ACTIVE\", analysesUsed: 0, periodEnd \nconst row = result.rows[0] as any;\nlet plan = row.plan as PlanId;\nlet status = row.status as string;\nlet analysesUsed = row.analyses_used as number;\nconst periodEnd = new Date(row.period_end as string);\n if (plan !== \"FREE\" && periodEnd < new Date()) {\n plan = \"FREE\";\n status = \"EXPIRED\";\n analysesUsed = 0;\n const newPeriodEnd = new Date(Date.now() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET plan = 'FREE', status = 'EXPIRED', analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [new Date().toISOString(), newPeriodEnd.toISOString(), userId],\n });\n return { plan, status, analysesUsed, periodEnd: newPeriodEnd };\n }\n\n if (plan === \"FREE\" && periodEnd < new Date()) {\n analysesUsed = 0;\n const newPeriodEnd = new Date(Date.now() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [new Date().toISOString(), newPeriodEnd.toISOString(), userId],\n });\n return { plan, status, analysesUsed: 0, periodEnd: newPeriodEnd };\n }\n\n return { plan, status, analysesUsed, periodEnd };\n}\n\nasync function incrementUsage(userId: string) {\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET analyses_used = analyses_used + 1 WHERE user_id = ?\",\n args: [userId],\n });\n}\n\n// ---------------------------------------------------------------------------\n// MOTEURS DE DÉTECTION — appels réels à Sightengine (image / vidéo / audio)\n// ---------------------------------------------------------------------------\n\nfunction scoreToVerdict(maxScore: number): string {\n if (maxScore >= 0.5) return \"AI_GENERATED\";\n if (maxScore >= 0.3) return \"SUSPICIOUS\";\n return \"AUTHENTIC\";\n}\n\nasync function analyzeImage(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"genai,deepfake\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/check.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const aiScore = data.type?.ai_generated ?? 0;\n const deepfakeScore = data.type?.deepfake ?? 0;\n const maxScore = Math.max(aiScore, deepfakeScore);\n\n return {\n verdict: deepfakeScore >= 0.5 ? \"MANIPULATED\" : scoreToVerdict(maxScore),\n confidenceScore: Math.round(maxScore * 100),\n details: { ai_generated: Math.round(aiScore * 100), deepfake: Math.round(deepfakeScore * 100) },\n };\n}\n\nasync function analyzeVideo(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"genai\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/video/check-sync.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const frames = data.data?.frames ?? [];\n const scores = frames.map((f: any) => f.type?.ai_generated ?? 0);\n const maxScore = scores.length ? Math.max(...scores) : 0;\n\n return {\n verdict: scoreToVerdict(maxScore),\n confidenceScore: Math.round(maxScore * 100),\n details: { framesAnalyzed: frames.length, max_ai_generated: Math.round(maxScore * 100) },\n };\n}\n\nasync function analyzeAudio(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"ai_speech\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/audio/check.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const speechScore = data.type?.ai_speech ?? 0;\n\n return {\n verdict: scoreToVerdict(speechScore),\n confidenceScore: Math.round(speechScore * 100),\n details: { ai_speech: Math.round(speechScore * 100) },\n };\n}\n\n// ---------------------------------------------------------------------------\n// PAIEMENT — CinetPay et Stripe réels (architecture prête, désactivée tant\n// que les identifiants ne sont pas fournis). Jamais simulé.\n// ---------------------------------------------------------------------------\n\nasync function initiateCinetPayPayment(userId: string, plan: PlanId, email: string) {\n const apiKey = Deno.env.get(\"CINETPAY_API_KEY\");\n const siteId = Deno.env.get(\"CINETPAY_SITE_ID\");\n const appUrl = Deno.env.get(\"PUBLIC_APP_URL\");\n\n if (!apiKey || !siteId || !appUrl) {\n throw new Error(\"PAYMENT_PROVIDER_NOT_CONFIGURED\");\n }\n\n const planDef = PLANS[plan];\n const transactionId = `bg_${userId}_${Date.now()}`;\n\n const res = await fetch(\"https://api-checkout.cinetpay.com/v2/payment\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n apikey: apiKey,\n site_id: siteId,\n transaction_id: transactionId,\n amount: planDef.priceAmount,\n currency: planDef.currency,\n description: `BarryGuard - ${planDef.label}`,\n notify_url: `${appUrl}/api/payments/webhook/cinetpay`,\n return_url: `${appUrl}/`,\n customer_email: email,\n }),\n });\n const data = await res.json();\n\n if (!data.data?.payment_url) {\n throw new Error(\"CINETPAY_ERROR: \" + JSON.stringify(data));\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO payments (id, user_id, provider, provider_ref, plan, amount, status, created_at) VALUES (?, 'cinetpay', ?, ?, ?, ?, 'PENDING', ?)\",\n args: [newId(), transactionId, transactionId, plan, planDef.priceAmount, new Date().toISOString()],\n });\n\n return data.data.payment_url as string;\n}\n\nasync function initiateStripePayment(userId: string, plan: PlanId, email: string) {\n const secretKey = Deno.env.get(\"STRIPE_SECRET_KEY\");\n const appUrl = Deno.env.get(\"PUBLIC_APP_URL\");\n\n if (!secretKey || !appUrl) {\n throw new Error(\"PAYMENT_PROVIDER_NOT_CONFIGURED\");\n }\n\n const planDef = PLANS[plan];\n const transactionId = `bg_${userId}_${Date.now()}`;\n\n const body = new URLSearchParams({\n mode: \"payment\",\n \"line_items[0][price_data][currency]\": planDef.currency.toLowerCase(),\n \"line_items[0][price_data][product_data][name]\": `BarryGuard - ${planDef.label}`,\n \"line_items[0][price_data][unit_amount]\": String(planDef.priceAmount * 100),\n \"line_items[0][quantity]\": \"1\",\n success_url: `${appUrl}/`,\n cancel_url: `${appUrl}/`,\n customer_email: email,\n client_reference_id: userId,\n });\n\n const res = await fetch(\"https://api.stripe.com/v1/checkout/sessions\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${secretKey}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body,\n });\n const data = await res.json();\n\n if (!data.url) {\n throw new Error(\"STRIPE_ERROR: \" + JSON.stringify(data));\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO payments (id, user_id, provider, provider_ref, plan, amount, status, created_at) VALUES (?, 'stripe', ?, ?, ?, ?, 'PENDING', ?)\",\n args: [newId(), transactionId, data.id, plan, planDef.priceAmount, new Date().toISOString()],\n });\n\n return data.url as string;\n}\n\nasync function handlePaymentWebhook(providerRef: string, success: boolean, providerFilter?: string) {\n const paymentRow = await sqlite.execute({\n sql: providerFilter\n ? \"SELECT user_id, plan FROM payments WHERE provider_ref = ? AND provider = ?\"\n : \"SELECT user_id, plan FROM payments WHERE provider_ref = ?\",\n args: providerFilter ? [providerRef, providerFilter] : [providerRef],\n });\n const row = paymentRow.rows[0] as any;\nif (!row) return Response.json({ error: \"PAYMENT_NOT_FOUND\" }, { status: 404 });\n\nconst userId = row.user_id as string;\nconst plan = row.plan as PlanId;\n\n\n\n await sqlite.execute({ sql: \"UPDATE payments SET status = ? WHERE provider_ref = ?\", args: [success ? \"SUCCESS\" : \"FAILED\", providerRef] });\n\n if (success) {\n const periodEnd = new Date(Date.now() + PLANS[plan].periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET plan = ?, status = 'ACTIVE', analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [plan, new Date().toISOString(), periodEnd.toISOString(), userId],\n });\n }\n\n return Response.json({ received: true });\n}\n\n// ---------------------------------------------------------------------------\n// SERVEUR HTTP\n// ---------------------------------------------------------------------------\n\nexport default async function (req: Request): Promise {\n await initDb();\n const url = new URL(req.url);\n const path = url.pathname;\n\n if (req.method === \"GET\" && path === \"/\") {\n return new Response(HTML, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\n\n if (req.method === \"POST\" && path === \"/api/register\") {\n const { email, password } = await req.json();\n if (!email || !password || password.length < 8) {\n return Response.json({ error: \"VALIDATION_ERROR\", message: \"Email invalide ou mot de passe trop court (8 caractères min).\" }, { status: 400 });\n }\n const existing = await sqlite.execute({ sql: \"SELECT id FROM users WHERE email = ?\", args: [email] });\n if (existing.rows[0]) {\n return Response.json({ error: \"EMAIL_ALREADY_USED\" }, { status: 409 });\n }\n const userId = newId();\n await sqlite.execute({\n sql: \"INSERT INTO users (id, email, password_hash, created_at) VALUES (?, ?, ?, ?)\",\n args: [userId, email, await hashPassword(password), new Date().toISOString()],\n });\n await getOrCreateSubscription(userId);\n\n const token = newId() + newId();\n const expiresAt = new Date(Date.now() + 30 * 86400000);\n await sqlite.execute({ sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\", args: [token, userId, expiresAt.toISOString()] });\n\n return Response.json({ email }, { headers: { \"Set-Cookie\": sessionCookieHeader(token) } });\n }\n\n if (req.method === \"POST\" && path === \"/api/login\") {\n const { email, password } = await req.json();\n const result = await sqlite.execute({ sql: \"SELECT id, password_hash FROM users WHERE email = ?\", args: [email] });\n const row = result.rows[0] as any;\nif (!row || !(await verifyPassword(password, row.password_hash as string))) {\n return Response.json({ error: \"INVALID_CREDENTIALS\" }, { status: 401 });\n}\nconst userId = row.id as string;\n const token = newId() + newId();\n const expiresAt = new Date(Date.now() + 30 * 86400000);\n await sqlite.execute({ sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\", args: [token, userId, expiresAt.toISOString()] });\n\n return Response.json({ email }, { headers: { \"Set-Cookie\": sessionCookieHeader(token) } });\n }\n\n if (req.method === \"POST\" && path === \"/api/logout\") {\n const token = parseCookies(req)[\"session\"];\n if (token) await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n return Response.json({ ok: true }, { headers: { \"Set-Cookie\": \"session=; HttpOnly; Path=/; Max-Age=0\" } });\n }\n\n if (req.method === \"GET\" && path === \"/api/me\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const userRow = await sqlite.execute({ sql: \"SELECT email FROM users WHERE id = ?\", args: [userId] });\n const sub = await getOrCreateSubscription(userId);\n const quota = PLANS[sub.plan].quota;\n\n return Response.json({\n email: (userRow.rows[0] as any)?.email,\n plan: sub.plan,\n planLabel: PLANS[sub.plan].label,\n analysesUsed: sub.analysesUsed,\n analysesQuota: quota,\n quotaRemaining: quota === -1 ? -1 : Math.max(0, quota - sub.analysesUsed),\n periodEnd: sub.periodEnd,\n });\n }\n\n if (req.method === \"POST\" && path === \"/api/analyze\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const sub = await getOrCreateSubscription(userId);\n const quota = PLANS[sub.plan].quota;\n if (quota !== -1 && sub.analysesUsed >= quota) {\n return Response.json({\n error: \"QUOTA_EXCEEDED\",\n message: \"Quota d'analyses atteint pour votre plan. Passez en Pro pour continuer.\",\n }, { status: 403 });\n }\n\n const form = await req.formData();\n const file = form.get(\"file\");\n if (!file || !(file instanceof File)) {\n return Response.json({ error: \"NO_FILE_PROVIDED\" }, { status: 400 });\n }\n\n let contentType: string;\n if (file.type.startsWith(\"image/\")) contentType = \"IMAGE\";\n else if (file.type.startsWith(\"video/\")) contentType = \"VIDEO\";\n else if (file.type.startsWith(\"audio/\")) contentType = \"AUDIO\";\n else return Response.json({ error: \"UNSUPPORTED_FILE_TYPE\" }, { status: 415 });\n\n if (contentType === \"VIDEO\" || contentType === \"AUDIO\") {\n return Response.json({\n error: \"FEATURE_UNAVAILABLE\",\n message: \"Cette fonctionnalité sera bientôt disponible. Merci de votre patience !\",\n }, { status: 503 });\n }\n\n const MAX_SIZE = 100 * 1024 * 1024;\n if (file.size > MAX_SIZE) {\n return Response.json({ error: \"FILE_TOO_LARGE\" }, { status: 413 });\n }\n\n try {\n let result;\n if (contentType === \"IMAGE\") result = await analyzeImage(file);\n else if (contentType === \"VIDEO\") result = await analyzeVideo(file);\n else result = await analyzeAudio(file);\n\n await incrementUsage(userId);\n\n const analysisId = newId();\n await sqlite.execute({\n sql: \"INSERT INTO analyses (id, user_id, content_type, verdict, confidence_score, created_at) VALUES (?, ?, ?, ?, ?, ?)\",\n args: [analysisId, userId, contentType, result.verdict, result.confidenceScore, new Date().toISOString()],\n });\n\n return Response.json({\n contentType,\n verdict: result.verdict,\n confidenceScore: result.confidenceScore,\n details: result.details,\n disclaimer: \"Ce résultat est une estimation probabiliste, pas une certitude absolue.\",\n analyzedAt: new Date().toISOString(),\n });\n } catch (err) {\n return Response.json({ error: \"ANALYSIS_FAILED\", message: err instanceof Error ? err.message : String(err) }, { status: 500 });\n }\n }\n\n if (req.method === \"GET\" && path === \"/api/history\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const result = await sqlite.execute({\n sql: \"SELECT id, content_type, verdict, confidence_score, created_at FROM analyses WHERE user_id = ? ORDER BY created_at DESC LIMIT 50\",\n args: [userId],\n });\n\n return Response.json({\n analyses: result.rows.map((r: any) => ({\n id: r.id, contentType: r.content_type, verdict: r.verdict, confidenceScore: r.confidence_score, createdAt: r.created_at,\n})),\n });\n }\n\n if (req.method === \"POST\" && path === \"/api/subscribe\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const { plan, provider } = await req.json();\n if (plan !== \"PRO_MONTHLY\" && plan !== \"PRO_YEARLY\") {\n return Response.json({ error: \"INVALID_PLAN\" }, { status: 400 });\n }\n\n const userRow = await sqlite.execute({ sql: \"SELECT email FROM users WHERE id = ?\", args: [userId] });\n const email = (userRow.rows[0] as any)?.email as string;\n\n try {\n const checkoutUrl =\n provider === \"stripe\"\n ? await initiateStripePayment(userId, plan, email)\n : await initiateCinetPayPayment(userId, plan, email);\n return Response.json({ checkoutUrl });\n } catch (err) {\n if (err instanceof Error && err.message === \"PAYMENT_PROVIDER_NOT_CONFIGURED\") {\n return Response.json({\n error: \"PAYMENT_PROVIDER_NOT_CONFIGURED\",\n message: \"Le paiement réel n'est pas encore configuré pour ce moyen de paiement.\",\n }, { status: 503 });\n }\n return Response.json({ error: \"PAYMENT_INITIATION_FAILED\", message: String(err) }, { status: 500 });\n }\n }\n\n if (req.method === \"POST\" && path === \"/api/payments/webhook/cinetpay\") {\n const body = await req.json();\n const providerRef = body.cpm_trans_id;\n const success = body.cpm_result === \"00\";\n return await handlePaymentWebhook(providerRef, success);\n }\n\n if (req.method === \"POST\" && path === \"/api/payments/webhook/stripe\") {\n const event = await req.json();\n const success = event.type === \"checkout.session.completed\";\n const providerRef = event.data?.object?.id;\n return await handlePaymentWebhook(providerRef, success, \"stripe\");\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n\n// ---------------------------------------------------------------------------\n// INTERFACE (une seule page, plusieurs vues gérées en JS)\n// ---------------------------------------------------------------------------\n\nconst HTML = `\n\n\n\n\nBarryGuard — Détecteur de contenu généré par IA\n\n\n\n\n\n

\n\n

🛡️ BarryGuard

Vérifiez si votre contenu est authentique.

Connexion

\n \n \n \n

\n Pas de compte ? Inscrivez-vous\n

\n\n

🛡️ BarryGuard

Vérifiez si votre contenu est authentique.

\n\n

\n \n \n \n

\n\n \n

Choisir un fichier

\n \n \n \n\n \n

🔍 Analyse en cours...

\n\n \n

\n\n

Historique

\n ← Retour\n

\n\n

Abonnement

\n\n

🆓 Gratuit

5 analyses / mois

Historique limité (5 dernières)

\n\n

⭐ Pro Mensuel — 15 $/mois

✅ Analyses illimitées

✅ Historique complet, jamais limité

✅ Résultats détaillés (scores complets)

✅ Accès prioritaire aux nouvelles fonctions (vidéo, audio)

✅ Support par email prioritaire

\n \n \n

\n\n

👑 Pro Annuel — 140 $/an

✅ Tous les avantages du Pro Mensuel

✅ Équivalent à 2 mois offerts (140$ au lieu de 180$)

✅ Badge \"Membre Fondateur\" sur votre profil

✅ Accès en avant-première à la vidéo dès son lancement

\n \n \n

\n\n

\n ← Retour\n

\n\n

\n\n\n\n`;","deleted",false,"label",[14],"ce3d1efa-d12c-42cb-b27b-ec6a7e764d55",["D",1787812046908],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","6cd6fa32-657a-4e6c-8286-f11d6768a000","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03cc6-58cc-7079-9401-47abc1d72e62","tursoName","ce3d1efad12c42cbb27bec6a7e764d55","tursoHostname","ce3d1efad12c42cbb27bec6a7e764d55-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789474235934],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_104":100},"org",{"_9":10,"_97":98,"_99":100,"_55":56,"_101":102,"_103":42},"branch",{"_35":30,"_11":88,"_22":28,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":12,"_96":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Barrosky Djaz","avatar","https://lh3.googleusercontent.com/a/ACg8ocI8wrFOzxLLX33x85dq9c9HF0ZG_4h-qaUXrsijP9E7DymaIQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_138":139,"_140":141,"_142":143,"_144":42,"_145":42,"_146":42,"_147":32,"_148":-5,"_149":-7,"_150":-7,"_151":62,"_152":42,"_153":42,"_154":-5,"_155":42,"_156":42,"_157":42,"_158":-5},"ENV",{"_109":110,"_111":112,"_113":88,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]