[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_159":160,"_161":162},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":53,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":58,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",7,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","6ee5aa3a-a268-11f1-9d53-1607ee4eb77e","name","fileType","http","content","// BarryGuard — application complète en un seul fichier, pour Val Town.\n//\n// Secrets nécessaires (menu \"Env vars\" de ton compte Val Town) :\n// SIGHTENGINE_API_USER (déjà configuré)\n// SIGHTENGINE_API_SECRET (déjà configuré)\n// CINETPAY_API_KEY (optionnel — sans ça, les abonnements payants\n// CINETPAY_SITE_ID renvoient une erreur explicite, jamais un faux paiement)\n// STRIPE_SECRET_KEY (optionnel — carte bancaire, même logique)\n// STRIPE_WEBHOOK_SECRET (optionnel — vérification du webhook Stripe)\n// PAYDUNYA_MASTER_KEY (pour activer PayDunya)\n// PAYDUNYA_PRIVATE_KEY\n// PAYDUNYA_TOKEN\n// PUBLIC_APP_URL (obligatoire pour activer un moyen de paiement)\n\nimport sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ---------------------------------------------------------------------------\n// BASE DE DONNÉES\n// ---------------------------------------------------------------------------\n\nasync function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n email TEXT UNIQUE NOT NULL,\n password_hash TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n expires_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS subscriptions (\n user_id TEXT PRIMARY KEY,\n plan TEXT NOT NULL DEFAULT 'FREE',\n status TEXT NOT NULL DEFAULT 'ACTIVE',\n analyses_used INTEGER NOT NULL DEFAULT 0,\n period_start TEXT NOT NULL,\n period_end TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS analyses (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n content_type TEXT NOT NULL,\n verdict TEXT,\n confidence_score INTEGER,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS payments (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n provider TEXT NOT NULL,\n provider_ref TEXT UNIQUE NOT NULL,\n plan TEXT NOT NULL,\n amount INTEGER NOT NULL,\n status TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n}\n\n// ---------------------------------------------------------------------------\n// PLANS D'ABONNEMENT (modifiables ici uniquement)\n// ---------------------------------------------------------------------------\n\nconst PLANS = {\n FREE: { label: \"Gratuit\", priceAmount: 0, priceXOF: 0, currency: \"USD\", periodDays: 30, quota: 5 },\n PRO_MONTHLY: { label: \"Pro Mensuel\", priceAmount: 15, priceXOF: 9000, currency: \"USD\", periodDays: 30, quota: -1 },\n PRO_YEARLY: { label: \"Pro Annuel\", priceAmount: 140, priceXOF: 84000, currency: \"USD\", periodDays: 365, quota: -1 },\n} as const;\ntype PlanId = keyof typeof PLANS;\n\n// ---------------------------------------------------------------------------\n// AUTHENTIFICATION (mots de passe hashés, sessions par cookie)\n// ---------------------------------------------------------------------------\n\nasync function hashPassword(password: string): Promise {\n const salt = crypto.getRandomValues(new Uint8Array(16));\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const derived = await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt, iterations: 100000, hash: \"SHA-256\" }, key, 256);\n return btoa(String.fromCharCode(...salt)) + \":\" + btoa(String.fromCharCode(...new Uint8Array(derived)));\n}\n\nasync function verifyPassword(password: string, stored: string): Promise {\n const [saltB64, hashB64] = stored.split(\":\");\n const salt = Uint8Array.from(atob(saltB64), (c) => c.charCodeAt(0));\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const derived = await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt, iterations: 100000, hash: \"SHA-256\" }, key, 256);\n return btoa(String.fromCharCode(...new Uint8Array(derived))) === hashB64;\n}\n\nfunction newId(): string {\n return crypto.randomUUID();\n}\n\nfunction parseCookies(req: Request): Record {\n const header = req.headers.get(\"cookie\") ?? \"\";\n const out: Record = {};\n for (const part of header.split(\";\")) {\n const [k, ...v] = part.trim().split(\"=\");\n if (k) out[k] = v.join(\"=\");\n }\n return out;\n}\n\nasync function getCurrentUserId(req: Request): Promise {\n const token = parseCookies(req)[\"session\"];\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"SELECT user_id, expires_at FROM sessions WHERE token = ?\",\n args: [token],\n });\n const row = result.rows[0] as any;\n if (!row) return null;\n if (new Date(row.expires_at) < new Date()) return null;\n return row.user_id as string;\n}\n\nfunction sessionCookieHeader(token: string): string {\n return `session=${token}; HttpOnly; Path=/; Max-Age=2592000; SameSite=Lax`;\n}\n\n// ---------------------------------------------------------------------------\n// ABONNEMENT — récupération + application du quota\n// ---------------------------------------------------------------------------\n\nasync function getOrCreateSubscription(userId: string) {\n let result = await sqlite.execute({\n sql: \"SELECT plan, status, analyses_used, period_start, period_end FROM subscriptions WHERE user_id = ?\",\n args: [userId],\n });\n\n if (!result.rows[0]) {\n const now = new Date();\n const periodEnd = new Date(now.getTime() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"INSERT INTO subscriptions (user_id, plan, status, analyses_used, period_start, period_end) VALUES (?, 'FREE', 'ACTIVE', 0, ?, ?)\",\n args: [userId, now.toISOString(), periodEnd.toISOString()],\n });\n return { plan: \"FREE\" as PlanId, status: \"ACTIVE\", analysesUsed: 0, periodEnd };\n }\n\n const row = result.rows[0] as any;\n let plan = row.plan as PlanId;\n let status = row.status as string;\n let analysesUsed = row.analyses_used as number;\n const periodEnd = new Date(row.period_end as string);\n\n if (plan !== \"FREE\" && periodEnd < new Date()) {\n plan = \"FREE\";\n status = \"EXPIRED\";\n analysesUsed = 0;\n const newPeriodEnd = new Date(Date.now() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET plan = 'FREE', status = 'EXPIRED', analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [new Date().toISOString(), newPeriodEnd.toISOString(), userId],\n });\n return { plan, status, analysesUsed, periodEnd: newPeriodEnd };\n }\n\n if (plan === \"FREE\" && periodEnd < new Date()) {\n analysesUsed = 0;\n const newPeriodEnd = new Date(Date.now() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [new Date().toISOString(), newPeriodEnd.toISOString(), userId],\n });\n return { plan, status, analysesUsed: 0, periodEnd: newPeriodEnd };\n }\n\n return { plan, status, analysesUsed, periodEnd };\n}\n\nasync function incrementUsage(userId: string) {\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET analyses_used = analyses_used + 1 WHERE user_id = ?\",\n args: [userId],\n });\n}\n\n// ---------------------------------------------------------------------------\n// MOTEURS DE DÉTECTION — appels réels à Sightengine (image / vidéo / audio)\n// ---------------------------------------------------------------------------\n\nfunction scoreToVerdict(maxScore: number): string {\n if (maxScore >= 0.5) return \"AI_GENERATED\";\n if (maxScore >= 0.3) return \"SUSPICIOUS\";\n return \"AUTHENTIC\";\n}\n\nasync function analyzeImage(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"genai,deepfake\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/check.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const aiScore = data.type?.ai_generated ?? 0;\n const deepfakeScore = data.type?.deepfake ?? 0;\n const maxScore = Math.max(aiScore, deepfakeScore);\n\n return {\n verdict: deepfakeScore >= 0.5 ? \"MANIPULATED\" : scoreToVerdict(maxScore),\n confidenceScore: Math.round(maxScore * 100),\n details: { ai_generated: Math.round(aiScore * 100), deepfake: Math.round(deepfakeScore * 100) },\n };\n}\n\nasync function analyzeVideo(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"genai\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/video/check-sync.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const frames = data.data?.frames ?? [];\n const scores = frames.map((f: any) => f.type?.ai_generated ?? 0);\n const maxScore = scores.length ? Math.max(...scores) : 0;\n\n return {\n verdict: scoreToVerdict(maxScore),\n confidenceScore: Math.round(maxScore * 100),\n details: { framesAnalyzed: frames.length, max_ai_generated: Math.round(maxScore * 100) },\n };\n}\n\nasync function analyzeAudio(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"ai_speech\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/audio/check.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const speechScore = data.type?.ai_speech ?? 0;\n\n return {\n verdict: scoreToVerdict(speechScore),\n confidenceScore: Math.round(speechScore * 100),\n details: { ai_speech: Math.round(speechScore * 100) },\n };\n}\n\n// ---------------------------------------------------------------------------\n// PAIEMENT — CinetPay et Stripe réels (architecture prête, désactivée tant\n// que les identifiants ne sont pas fournis). Jamais simulé.\n// ---------------------------------------------------------------------------\n\nasync function initiateCinetPayPayment(userId: string, plan: PlanId, email: string) {\n const apiKey = Deno.env.get(\"CINETPAY_API_KEY\");\n const siteId = Deno.env.get(\"CINETPAY_SITE_ID\");\n const appUrl = Deno.env.get(\"PUBLIC_APP_URL\");\n\n if (!apiKey || !siteId || !appUrl) {\n throw new Error(\"PAYMENT_PROVIDER_NOT_CONFIGURED\");\n }\n\n const planDef = PLANS[plan];\n const transactionId = `bg_${userId}_${Date.now()}`;\n\n const res = await fetch(\"https://api-checkout.cinetpay.com/v2/payment\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n apikey: apiKey,\n site_id: siteId,\n transaction_id: transactionId,\n amount: planDef.priceAmount,\n currency: planDef.currency,\n description: `BarryGuard - ${planDef.label}`,\n notify_url: `${appUrl}/api/payments/webhook/cinetpay`,\n return_url: `${appUrl}/`,\n customer_email: email,\n }),\n });\n const data = await res.json();\n\n if (!data.data?.payment_url) {\n throw new Error(\"CINETPAY_ERROR: \" + JSON.stringify(data));\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO payments (id, user_id, provider, provider_ref, plan, amount, status, created_at) VALUES (?, 'cinetpay', ?, ?, ?, ?, 'PENDING', ?)\",\n args: [newId(), transactionId, transactionId, plan, planDef.priceAmount, new Date().toISOString()],\n });\n\n return data.data.payment_url as string;\n}\n\nasync function initiateStripePayment(userId: string, plan: PlanId, email: string) {\n const secretKey = Deno.env.get(\"STRIPE_SECRET_KEY\");\n const appUrl = Deno.env.get(\"PUBLIC_APP_URL\");\n\n if (!secretKey || !appUrl) {\n throw new Error(\"PAYMENT_PROVIDER_NOT_CONFIGURED\");\n }\n\n const planDef = PLANS[plan];\n const transactionId = `bg_${userId}_${Date.now()}`;\n\n const body = new URLSearchParams({\n mode: \"payment\",\n \"line_items[0][price_data][currency]\": planDef.currency.toLowerCase(),\n \"line_items[0][price_data][product_data][name]\": `BarryGuard - ${planDef.label}`,\n \"line_items[0][price_data][unit_amount]\": String(planDef.priceAmount * 100),\n \"line_items[0][quantity]\": \"1\",\n success_url: `${appUrl}/`,\n cancel_url: `${appUrl}/`,\n customer_email: email,\n client_reference_id: userId,\n });\n\n const res = await fetch(\"https://api.stripe.com/v1/checkout/sessions\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${secretKey}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body,\n });\n const data = await res.json();\n\n if (!data.url) {\n throw new Error(\"STRIPE_ERROR: \" + JSON.stringify(data));\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO payments (id, user_id, provider, provider_ref, plan, amount, status, created_at) VALUES (?, 'stripe', ?, ?, ?, ?, 'PENDING', ?)\",\n args: [newId(), transactionId, data.id, plan, planDef.priceAmount, new Date().toISOString()],\n });\n\n return data.url as string;\n}\nasync function initiatePayDunyaPayment(userId: string, plan: PlanId, email: string) {\n const masterKey = Deno.env.get(\"PAYDUNYA_MASTER_KEY\");\n const privateKey = Deno.env.get(\"PAYDUNYA_PRIVATE_KEY\");\n const publicToken = Deno.env.get(\"PAYDUNYA_TOKEN\");\n const appUrl = Deno.env.get(\"PUBLIC_APP_URL\");\n\n if (!masterKey || !privateKey || !publicToken || !appUrl) {\n throw new Error(\"PAYMENT_PROVIDER_NOT_CONFIGURED\");\n }\n\n const planDef = PLANS[plan];\n\n const res = await fetch(\"https://app.paydunya.com/api/v1/checkout-invoice/create\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"PAYDUNYA-MASTER-KEY\": masterKey,\n \"PAYDUNYA-PRIVATE-KEY\": privateKey,\n \"PAYDUNYA-TOKEN\": publicToken,\n },\n body: JSON.stringify({\n invoice: {\n total_amount: planDef.priceXOF,\n description: `BarryGuard - ${planDef.label}`,\n customer: { email },\n },\n store: { name: \"BarryGuard\", website_url: appUrl },\n actions: {\n cancel_url: `${appUrl}/`,\n return_url: `${appUrl}/`,\n callback_url: `${appUrl}/api/payments/webhook/paydunya`,\n },\n }),\n });\n const data = await res.json();\n\n if (data.response_code !== \"00\") {\n throw new Error(\"PAYDUNYA_ERROR: \" + JSON.stringify(data));\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO payments (id, user_id, provider, provider_ref, plan, amount, status, created_at) VALUES (?, 'paydunya', ?, ?, ?, ?, 'PENDING', ?)\",\n args: [newId(), data.token, plan, planDef.priceXOF, new Date().toISOString()],\n });\n\n return data.response_text as string;\n}\n\nfunction parseNestedFormBody(text: string): any {\n const params = new URLSearchParams(text);\n const result: any = {};\n for (const [key, value] of params) {\n const path = key.replace(/\\]/g, \"\").split(\"[\");\n let obj = result;\n for (let i = 0; i < path.length - 1; i++) {\n obj[path[i]] = obj[path[i]] ?? {};\n obj = obj[path[i]];\n }\n obj[path[path.length - 1]] = value;\n }\n return result;\n}\n\nasync function sha512Hex(input: string): Promise {\n const data = new TextEncoder().encode(input);\n const hashBuffer = await crypto.subtle.digest(\"SHA-512\", data);\n return Array.from(new Uint8Array(hashBuffer)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function handlePaymentWebhook(providerRef: string, success: boolean, providerFilter?: string) {\nasync function handlePaymentWebhook(providerRef: string, success: boolean, providerFilter?: string) {\n const paymentRow = await sqlite.execute({\n sql: providerFilter\n ? \"SELECT user_id, plan FROM payments WHERE provider_ref = ? AND provider = ?\"\n : \"SELECT user_id, plan FROM payments WHERE provider_ref = ?\",\n args: providerFilter ? [providerRef, providerFilter] : [providerRef],\n });\n const row = paymentRow.rows[0] as any;\n if (!row) return Response.json({ error: \"PAYMENT_NOT_FOUND\" }, { status: 404 });\n\n const userId = row.user_id as string;\n const plan = row.plan as PlanId;\n\n await sqlite.execute({ sql: \"UPDATE payments SET status = ? WHERE provider_ref = ?\", args: [success ? \"SUCCESS\" : \"FAILED\", providerRef] });\n\n if (success) {\n const periodEnd = new Date(Date.now() + PLANS[plan].periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET plan = ?, status = 'ACTIVE', analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [plan, new Date().toISOString(), periodEnd.toISOString(), userId],\n });\n }\n\n return Response.json({ received: true });\n}\n\n// ---------------------------------------------------------------------------\n// SERVEUR HTTP\n// ---------------------------------------------------------------------------\n\nexport default async function (req: Request): Promise {\n await initDb();\n const url = new URL(req.url);\n const path = url.pathname;\n\n if (req.method === \"GET\" && path === \"/\") {\n return new Response(HTML, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\nif (req.method === \"GET\" && path === \"/sitemap.xml\") {\n const baseUrl = `${url.protocol}//${url.host}`;\n const sitemap = `\n\n \n ${baseUrl}/\n weekly\n 1.0\n \n`;\n return new Response(sitemap, { headers: { \"content-type\": \"application/xml; charset=utf-8\" } });\n }\n if (req.method === \"POST\" && path === \"/api/register\") {\n const { email, password } = await req.json();\n if (!email || !password || password.length < 8) {\n return Response.json({ error: \"VALIDATION_ERROR\", message: \"Email invalide ou mot de passe trop court (8 caractères min).\" }, { status: 400 });\n }\n const existing = await sqlite.execute({ sql: \"SELECT id FROM users WHERE email = ?\", args: [email] });\n if (existing.rows[0]) {\n return Response.json({ error: \"EMAIL_ALREADY_USED\" }, { status: 409 });\n }\n const userId = newId();\n await sqlite.execute({\n sql: \"INSERT INTO users (id, email, password_hash, created_at) VALUES (?, ?, ?, ?)\",\n args: [userId, email, await hashPassword(password), new Date().toISOString()],\n });\n await getOrCreateSubscription(userId);\n\n const token = newId() + newId();\n const expiresAt = new Date(Date.now() + 30 * 86400000);\n await sqlite.execute({ sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\", args: [token, userId, expiresAt.toISOString()] });\n\n return Response.json({ email }, { headers: { \"Set-Cookie\": sessionCookieHeader(token) } });\n }\n\n if (req.method === \"POST\" && path === \"/api/login\") {\n const { email, password } = await req.json();\n const result = await sqlite.execute({ sql: \"SELECT id, password_hash FROM users WHERE email = ?\", args: [email] });\n const row = result.rows[0] as any;\n if (!row || !(await verifyPassword(password, row.password_hash as string))) {\n return Response.json({ error: \"INVALID_CREDENTIALS\" }, { status: 401 });\n }\n const userId = row.id as string;\n const token = newId() + newId();\n const expiresAt = new Date(Date.now() + 30 * 86400000);\n await sqlite.execute({ sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\", args: [token, userId, expiresAt.toISOString()] });\n\n return Response.json({ email }, { headers: { \"Set-Cookie\": sessionCookieHeader(token) } });\n }\n\n if (req.method === \"POST\" && path === \"/api/logout\") {\n const token = parseCookies(req)[\"session\"];\n if (token) await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n return Response.json({ ok: true }, { headers: { \"Set-Cookie\": \"session=; HttpOnly; Path=/; Max-Age=0\" } });\n }\n\n if (req.method === \"GET\" && path === \"/api/me\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const userRow = await sqlite.execute({ sql: \"SELECT email FROM users WHERE id = ?\", args: [userId] });\n const sub = await getOrCreateSubscription(userId);\n const quota = PLANS[sub.plan].quota;\n\n return Response.json({\n email: (userRow.rows[0] as any)?.email,\n plan: sub.plan,\n planLabel: PLANS[sub.plan].label,\n analysesUsed: sub.analysesUsed,\n analysesQuota: quota,\n quotaRemaining: quota === -1 ? -1 : Math.max(0, quota - sub.analysesUsed),\n periodEnd: sub.periodEnd,\n });\n }\n\n if (req.method === \"POST\" && path === \"/api/analyze\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const sub = await getOrCreateSubscription(userId);\n const quota = PLANS[sub.plan].quota;\n if (quota !== -1 && sub.analysesUsed >= quota) {\n return Response.json({\n error: \"QUOTA_EXCEEDED\",\n message: \"Quota d'analyses atteint pour votre plan. Passez en Pro pour continuer.\",\n }, { status: 403 });\n }\n\n const form = await req.formData();\n const file = form.get(\"file\");\n if (!file || !(file instanceof File)) {\n return Response.json({ error: \"NO_FILE_PROVIDED\" }, { status: 400 });\n }\n\n let contentType: string;\n if (file.type.startsWith(\"image/\")) contentType = \"IMAGE\";\n else if (file.type.startsWith(\"video/\")) contentType = \"VIDEO\";\n else if (file.type.startsWith(\"audio/\")) contentType = \"AUDIO\";\n else return Response.json({ error: \"UNSUPPORTED_FILE_TYPE\" }, { status: 415 });\n\n if (contentType === \"VIDEO\" || contentType === \"AUDIO\") {\n return Response.json({\n error: \"FEATURE_UNAVAILABLE\",\n message: \"Cette fonctionnalité sera bientôt disponible. Merci de votre patience !\",\n }, { status: 503 });\n }\n\n const MAX_SIZE = 100 * 1024 * 1024;\n if (file.size > MAX_SIZE) {\n return Response.json({ error: \"FILE_TOO_LARGE\" }, { status: 413 });\n }\n\n try {\n let result;\n if (contentType === \"IMAGE\") result = await analyzeImage(file);\n else if (contentType === \"VIDEO\") result = await analyzeVideo(file);\n else result = await analyzeAudio(file);\n\n await incrementUsage(userId);\n\n const analysisId = newId();\n await sqlite.execute({\n sql: \"INSERT INTO analyses (id, user_id, content_type, verdict, confidence_score, created_at) VALUES (?, ?, ?, ?, ?, ?)\",\n args: [analysisId, userId, contentType, result.verdict, result.confidenceScore, new Date().toISOString()],\n });\n\n return Response.json({\n contentType,\n verdict: result.verdict,\n confidenceScore: result.confidenceScore,\n details: result.details,\n disclaimer: \"Ce résultat est une estimation probabiliste, pas une certitude absolue.\",\n analyzedAt: new Date().toISOString(),\n });\n } catch (err) {\n return Response.json({ error: \"ANALYSIS_FAILED\", message: err instanceof Error ? err.message : String(err) }, { status: 500 });\n }\n }\n\n if (req.method === \"GET\" && path === \"/api/history\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const result = await sqlite.execute({\n sql: \"SELECT id, content_type, verdict, confidence_score, created_at FROM analyses WHERE user_id = ? ORDER BY created_at DESC LIMIT 50\",\n args: [userId],\n });\n\n return Response.json({\n analyses: result.rows.map((r: any) => ({\n id: r.id, contentType: r.content_type, verdict: r.verdict, confidenceScore: r.confidence_score, createdAt: r.created_at,\n })),\n });\n }\n\n if (req.method === \"POST\" && path === \"/api/subscribe\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const { plan, provider } = await req.json();\n if (plan !== \"PRO_MONTHLY\" && plan !== \"PRO_YEARLY\") {\n return Response.json({ error: \"INVALID_PLAN\" }, { status: 400 });\n }\n\n const userRow = await sqlite.execute({ sql: \"SELECT email FROM users WHERE id = ?\", args: [userId] });\n const email = (userRow.rows[0] as any)?.email as string;\n\n try {\n const checkoutUrl =\n provider === \"stripe\"\n ? await initiateStripePayment(userId, plan, email)\n : provider === \"paydunya\"\n ? await initiatePayDunyaPayment(userId, plan, email)\n : await initiateCinetPayPayment(userId, plan, email);\n return Response.json({ checkoutUrl });\n } catch (err) {\n if (err instanceof Error && err.message === \"PAYMENT_PROVIDER_NOT_CONFIGURED\") {\n return Response.json({\n error: \"PAYMENT_PROVIDER_NOT_CONFIGURED\",\n message: \"Le paiement réel n'est pas encore configuré pour ce moyen de paiement.\",\n }, { status: 503 });\n }\n return Response.json({ error: \"PAYMENT_INITIATION_FAILED\", message: String(err) }, { status: 500 });\n }\n }\n\n if (req.method === \"POST\" && path === \"/api/payments/webhook/cinetpay\") {\n const body = await req.json();\n const providerRef = body.cpm_trans_id;\n const success = body.cpm_result === \"00\";\n return await handlePaymentWebhook(providerRef, success);\n }\n\n if (req.method === \"POST\" && path === \"/api/payments/webhook/stripe\") {\n const event = await req.json();\n const success = event.type === \"checkout.session.completed\";\n const providerRef = event.data?.object?.id;\n return await handlePaymentWebhook(providerRef, success, \"stripe\");\n }\nif (req.method === \"POST\" && path === \"/api/payments/webhook/stripe\") {\n const event = await req.json();\n const success = event.type === \"checkout.session.completed\";\n const providerRef = event.data?.object?.id;\n return await handlePaymentWebhook(providerRef, success, \"stripe\");\n }\n\n if (req.method === \"POST\" && path === \"/api/payments/webhook/paydunya\") {\n const masterKey = Deno.env.get(\"PAYDUNYA_MASTER_KEY\") ?? \"\";\n const rawBody = await req.text();\n const parsed = parseNestedFormBody(rawBody);\n const paymentData = parsed.data ?? {};\n\n const expectedHash = await sha512Hex(masterKey);\n if (paymentData.hash !== expectedHash) {\n return Response.json({ error: \"INVALID_SIGNATURE\" }, { status: 400 });\n }\n\n const providerRef = paymentData.invoice?.token ?? paymentData.token;\n const success = paymentData.status === \"completed\";\n return await handlePaymentWebhook(providerRef, success, \"paydunya\");\n }\n return new Response(\"Not found\", { status: 404 });\n}\n\n// ---------------------------------------------------------------------------\n// INTERFACE (une seule page, plusieurs vues gérées en JS)\n// ---------------------------------------------------------------------------\n\nconst HTML = `\n\n\n\n\nBarryGuard — Détecteur de contenu généré par IA\n\n\n\n\n\n

\n\n

🛡️ BarryGuard

Vérifiez si votre contenu est authentique.

Connexion

\n \n \n \n

\n Pas de compte ? Inscrivez-vous\n

\n\n

🛡️ BarryGuard

Vérifiez si votre contenu est authentique.

\n\n

\n \n \n \n

\n\n \n

Choisir un fichier

\n \n \n \n\n \n

🔍 Analyse en cours...

\n\n \n

\n\n

Historique

\n ← Retour\n

\n\n

Abonnement

\n\n

🆓 Gratuit

5 analyses / mois

Historique limité (5 dernières)

\n\n

⭐ Pro Mensuel — 15 $/mois

✅ Analyses illimitées

✅ Historique complet, jamais limité

✅ Résultats détaillés (scores complets)

✅ Accès prioritaire aux nouvelles fonctions (vidéo, audio)

✅ Support par email prioritaire

\n \n \n \n

\n\n

👑 Pro Annuel — 140 $/an

✅ Tous les avantages du Pro Mensuel

✅ Équivalent à 2 mois offerts (140$ au lieu de 180$)

✅ Badge \"Membre Fondateur\" sur votre profil

✅ Accès en avant-première à la vidéo dès son lancement

\n \n \n \n

\n\n

\n ← Retour\n

\n\n

\n\n\n\n`;","// BarryGuard — application complète en un seul fichier, pour Val Town.\n//\n// Secrets nécessaires (menu \"Env vars\" de ton compte Val Town) :\n// SIGHTENGINE_API_USER (déjà configuré)\n// SIGHTENGINE_API_SECRET (déjà configuré)\n// CINETPAY_API_KEY (optionnel — sans ça, les abonnements payants\n// CINETPAY_SITE_ID renvoient une erreur explicite, jamais un faux paiement)\n// STRIPE_SECRET_KEY (optionnel — carte bancaire, même logique)\n// STRIPE_WEBHOOK_SECRET (optionnel — vérification du webhook Stripe)\n// PAYDUNYA_MASTER_KEY (pour activer PayDunya)\n// PAYDUNYA_PRIVATE_KEY\n// PAYDUNYA_TOKEN\n// PUBLIC_APP_URL (obligatoire pour activer un moyen de paiement)\n\nimport sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ---------------------------------------------------------------------------\n// BASE DE DONNÉES\n// ---------------------------------------------------------------------------\n\nasync function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n email TEXT UNIQUE NOT NULL,\n password_hash TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n expires_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS subscriptions (\n user_id TEXT PRIMARY KEY,\n plan TEXT NOT NULL DEFAULT 'FREE',\n status TEXT NOT NULL DEFAULT 'ACTIVE',\n analyses_used INTEGER NOT NULL DEFAULT 0,\n period_start TEXT NOT NULL,\n period_end TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS analyses (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n content_type TEXT NOT NULL,\n verdict TEXT,\n confidence_score INTEGER,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS payments (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n provider TEXT NOT NULL,\n provider_ref TEXT UNIQUE NOT NULL,\n plan TEXT NOT NULL,\n amount INTEGER NOT NULL,\n status TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n}\n\n// ---------------------------------------------------------------------------\n// PLANS D'ABONNEMENT (modifiables ici uniquement)\n// ---------------------------------------------------------------------------\n\nconst PLANS = {\n FREE: { label: \"Gratuit\", priceAmount: 0, priceXOF: 0, currency: \"USD\", periodDays: 30, quota: 5 },\n PRO_MONTHLY: { label: \"Pro Mensuel\", priceAmount: 15, priceXOF: 9000, currency: \"USD\", periodDays: 30, quota: -1 },\n PRO_YEARLY: { label: \"Pro Annuel\", priceAmount: 140, priceXOF: 84000, currency: \"USD\", periodDays: 365, quota: -1 },\n} as const;\ntype PlanId = keyof typeof PLANS;\n\n// ---------------------------------------------------------------------------\n// AUTHENTIFICATION (mots de passe hashés, sessions par cookie)\n// ---------------------------------------------------------------------------\n\nasync function hashPassword(password: string): Promise {\n const salt = crypto.getRandomValues(new Uint8Array(16));\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const derived = await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt, iterations: 100000, hash: \"SHA-256\" }, key, 256);\n return btoa(String.fromCharCode(...salt)) + \":\" + btoa(String.fromCharCode(...new Uint8Array(derived)));\n}\n\nasync function verifyPassword(password: string, stored: string): Promise {\n const [saltB64, hashB64] = stored.split(\":\");\n const salt = Uint8Array.from(atob(saltB64), (c) => c.charCodeAt(0));\n const key = await crypto.subtle.importKey(\"raw\", new TextEncoder().encode(password), \"PBKDF2\", false, [\"deriveBits\"]);\n const derived = await crypto.subtle.deriveBits({ name: \"PBKDF2\", salt, iterations: 100000, hash: \"SHA-256\" }, key, 256);\n return btoa(String.fromCharCode(...new Uint8Array(derived))) === hashB64;\n}\n\nfunction newId(): string {\n return crypto.randomUUID();\n}\n\nfunction parseCookies(req: Request): Record {\n const header = req.headers.get(\"cookie\") ?? \"\";\n const out: Record = {};\n for (const part of header.split(\";\")) {\n const [k, ...v] = part.trim().split(\"=\");\n if (k) out[k] = v.join(\"=\");\n }\n return out;\n}\n\nasync function getCurrentUserId(req: Request): Promise {\n const token = parseCookies(req)[\"session\"];\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"SELECT user_id, expires_at FROM sessions WHERE token = ?\",\n args: [token],\n });\n const row = result.rows[0] as any;\n if (!row) return null;\n if (new Date(row.expires_at) < new Date()) return null;\n return row.user_id as string;\n}\n\nfunction sessionCookieHeader(token: string): string {\n return `session=${token}; HttpOnly; Path=/; Max-Age=2592000; SameSite=Lax`;\n}\n\n// ---------------------------------------------------------------------------\n// ABONNEMENT — récupération + application du quota\n// ---------------------------------------------------------------------------\n\nasync function getOrCreateSubscription(userId: string) {\n let result = await sqlite.execute({\n sql: \"SELECT plan, status, analyses_used, period_start, period_end FROM subscriptions WHERE user_id = ?\",\n args: [userId],\n });\n\n if (!result.rows[0]) {\n const now = new Date();\n const periodEnd = new Date(now.getTime() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"INSERT INTO subscriptions (user_id, plan, status, analyses_used, period_start, period_end) VALUES (?, 'FREE', 'ACTIVE', 0, ?, ?)\",\n args: [userId, now.toISOString(), periodEnd.toISOString()],\n });\n return { plan: \"FREE\" as PlanId, status: \"ACTIVE\", analysesUsed: 0, periodEnd };\n }\n\n const row = result.rows[0] as any;\n let plan = row.plan as PlanId;\n let status = row.status as string;\n let analysesUsed = row.analyses_used as number;\n const periodEnd = new Date(row.period_end as string);\n\n if (plan !== \"FREE\" && periodEnd < new Date()) {\n plan = \"FREE\";\n status = \"EXPIRED\";\n analysesUsed = 0;\n const newPeriodEnd = new Date(Date.now() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET plan = 'FREE', status = 'EXPIRED', analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [new Date().toISOString(), newPeriodEnd.toISOString(), userId],\n });\n return { plan, status, analysesUsed, periodEnd: newPeriodEnd };\n }\n\n if (plan === \"FREE\" && periodEnd < new Date()) {\n analysesUsed = 0;\n const newPeriodEnd = new Date(Date.now() + PLANS.FREE.periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [new Date().toISOString(), newPeriodEnd.toISOString(), userId],\n });\n return { plan, status, analysesUsed: 0, periodEnd: newPeriodEnd };\n }\n\n return { plan, status, analysesUsed, periodEnd };\n}\n\nasync function incrementUsage(userId: string) {\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET analyses_used = analyses_used + 1 WHERE user_id = ?\",\n args: [userId],\n });\n}\n\n// ---------------------------------------------------------------------------\n// MOTEURS DE DÉTECTION — appels réels à Sightengine (image / vidéo / audio)\n// ---------------------------------------------------------------------------\n\nfunction scoreToVerdict(maxScore: number): string {\n if (maxScore >= 0.5) return \"AI_GENERATED\";\n if (maxScore >= 0.3) return \"SUSPICIOUS\";\n return \"AUTHENTIC\";\n}\n\nasync function analyzeImage(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"genai,deepfake\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/check.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const aiScore = data.type?.ai_generated ?? 0;\n const deepfakeScore = data.type?.deepfake ?? 0;\n const maxScore = Math.max(aiScore, deepfakeScore);\n\n return {\n verdict: deepfakeScore >= 0.5 ? \"MANIPULATED\" : scoreToVerdict(maxScore),\n confidenceScore: Math.round(maxScore * 100),\n details: { ai_generated: Math.round(aiScore * 100), deepfake: Math.round(deepfakeScore * 100) },\n };\n}\n\nasync function analyzeVideo(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"genai\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/video/check-sync.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const frames = data.data?.frames ?? [];\n const scores = frames.map((f: any) => f.type?.ai_generated ?? 0);\n const maxScore = scores.length ? Math.max(...scores) : 0;\n\n return {\n verdict: scoreToVerdict(maxScore),\n confidenceScore: Math.round(maxScore * 100),\n details: { framesAnalyzed: frames.length, max_ai_generated: Math.round(maxScore * 100) },\n };\n}\n\nasync function analyzeAudio(file: File) {\n const apiUser = Deno.env.get(\"SIGHTENGINE_API_USER\")!;\n const apiSecret = Deno.env.get(\"SIGHTENGINE_API_SECRET\")!;\n\n const form = new FormData();\n form.append(\"media\", file, file.name);\n form.append(\"models\", \"ai_speech\");\n form.append(\"api_user\", apiUser);\n form.append(\"api_secret\", apiSecret);\n\n const res = await fetch(\"https://api.sightengine.com/1.0/audio/check.json\", { method: \"POST\", body: form });\n const data = await res.json();\n if (data.status !== \"success\") throw new Error(\"SIGHTENGINE_ERROR: \" + JSON.stringify(data));\n\n const speechScore = data.type?.ai_speech ?? 0;\n\n return {\n verdict: scoreToVerdict(speechScore),\n confidenceScore: Math.round(speechScore * 100),\n details: { ai_speech: Math.round(speechScore * 100) },\n };\n}\n\n// ---------------------------------------------------------------------------\n// PAIEMENT — CinetPay et Stripe réels (architecture prête, désactivée tant\n// que les identifiants ne sont pas fournis). Jamais simulé.\n// ---------------------------------------------------------------------------\n\nasync function initiateCinetPayPayment(userId: string, plan: PlanId, email: string) {\n const apiKey = Deno.env.get(\"CINETPAY_API_KEY\");\n const siteId = Deno.env.get(\"CINETPAY_SITE_ID\");\n const appUrl = Deno.env.get(\"PUBLIC_APP_URL\");\n\n if (!apiKey || !siteId || !appUrl) {\n throw new Error(\"PAYMENT_PROVIDER_NOT_CONFIGURED\");\n }\n\n const planDef = PLANS[plan];\n const transactionId = `bg_${userId}_${Date.now()}`;\n\n const res = await fetch(\"https://api-checkout.cinetpay.com/v2/payment\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n apikey: apiKey,\n site_id: siteId,\n transaction_id: transactionId,\n amount: planDef.priceAmount,\n currency: planDef.currency,\n description: `BarryGuard - ${planDef.label}`,\n notify_url: `${appUrl}/api/payments/webhook/cinetpay`,\n return_url: `${appUrl}/`,\n customer_email: email,\n }),\n });\n const data = await res.json();\n\n if (!data.data?.payment_url) {\n throw new Error(\"CINETPAY_ERROR: \" + JSON.stringify(data));\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO payments (id, user_id, provider, provider_ref, plan, amount, status, created_at) VALUES (?, 'cinetpay', ?, ?, ?, ?, 'PENDING', ?)\",\n args: [newId(), transactionId, transactionId, plan, planDef.priceAmount, new Date().toISOString()],\n });\n\n return data.data.payment_url as string;\n}\n\nasync function initiateStripePayment(userId: string, plan: PlanId, email: string) {\n const secretKey = Deno.env.get(\"STRIPE_SECRET_KEY\");\n const appUrl = Deno.env.get(\"PUBLIC_APP_URL\");\n\n if (!secretKey || !appUrl) {\n throw new Error(\"PAYMENT_PROVIDER_NOT_CONFIGURED\");\n }\n\n const planDef = PLANS[plan];\n const transactionId = `bg_${userId}_${Date.now()}`;\n\n const body = new URLSearchParams({\n mode: \"payment\",\n \"line_items[0][price_data][currency]\": planDef.currency.toLowerCase(),\n \"line_items[0][price_data][product_data][name]\": `BarryGuard - ${planDef.label}`,\n \"line_items[0][price_data][unit_amount]\": String(planDef.priceAmount * 100),\n \"line_items[0][quantity]\": \"1\",\n success_url: `${appUrl}/`,\n cancel_url: `${appUrl}/`,\n customer_email: email,\n client_reference_id: userId,\n });\n\n const res = await fetch(\"https://api.stripe.com/v1/checkout/sessions\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${secretKey}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body,\n });\n const data = await res.json();\n\n if (!data.url) {\n throw new Error(\"STRIPE_ERROR: \" + JSON.stringify(data));\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO payments (id, user_id, provider, provider_ref, plan, amount, status, created_at) VALUES (?, 'stripe', ?, ?, ?, ?, 'PENDING', ?)\",\n args: [newId(), transactionId, data.id, plan, planDef.priceAmount, new Date().toISOString()],\n });\n\n return data.url as string;\n}\nasync function initiatePayDunyaPayment(userId: string, plan: PlanId, email: string) {\n const masterKey = Deno.env.get(\"PAYDUNYA_MASTER_KEY\");\n const privateKey = Deno.env.get(\"PAYDUNYA_PRIVATE_KEY\");\n const publicToken = Deno.env.get(\"PAYDUNYA_TOKEN\");\n const appUrl = Deno.env.get(\"PUBLIC_APP_URL\");\n\n if (!masterKey || !privateKey || !publicToken || !appUrl) {\n throw new Error(\"PAYMENT_PROVIDER_NOT_CONFIGURED\");\n }\n\n const planDef = PLANS[plan];\n\n const res = await fetch(\"https://app.paydunya.com/api/v1/checkout-invoice/create\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"PAYDUNYA-MASTER-KEY\": masterKey,\n \"PAYDUNYA-PRIVATE-KEY\": privateKey,\n \"PAYDUNYA-TOKEN\": publicToken,\n },\n body: JSON.stringify({\n invoice: {\n total_amount: planDef.priceXOF,\n description: `BarryGuard - ${planDef.label}`,\n customer: { email },\n },\n store: { name: \"BarryGuard\", website_url: appUrl },\n actions: {\n cancel_url: `${appUrl}/`,\n return_url: `${appUrl}/`,\n callback_url: `${appUrl}/api/payments/webhook/paydunya`,\n },\n }),\n });\n const data = await res.json();\n\n if (data.response_code !== \"00\") {\n throw new Error(\"PAYDUNYA_ERROR: \" + JSON.stringify(data));\n }\n\n await sqlite.execute({\n sql: \"INSERT INTO payments (id, user_id, provider, provider_ref, plan, amount, status, created_at) VALUES (?, 'paydunya', ?, ?, ?, ?, 'PENDING', ?)\",\n args: [newId(), data.token, plan, planDef.priceXOF, new Date().toISOString()],\n });\n\n return data.response_text as string;\n}\n\nfunction parseNestedFormBody(text: string): any {\n const params = new URLSearchParams(text);\n const result: any = {};\n for (const [key, value] of params) {\n const path = key.replace(/\\]/g, \"\").split(\"[\");\n let obj = result;\n for (let i = 0; i < path.length - 1; i++) {\n obj[path[i]] = obj[path[i]] ?? {};\n obj = obj[path[i]];\n }\n obj[path[path.length - 1]] = value;\n }\n return result;\n}\n\nasync function sha512Hex(input: string): Promise {\n const data = new TextEncoder().encode(input);\n const hashBuffer = await crypto.subtle.digest(\"SHA-512\", data);\n return Array.from(new Uint8Array(hashBuffer)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function handlePaymentWebhook(providerRef: string, success: boolean, providerFilter?: string)}\n const paymentRow = await sqlite.execute({\n sql: providerFilter\n ? \"SELECT user_id, plan FROM payments WHERE provider_ref = ? AND provider = ?\"\n : \"SELECT user_id, plan FROM payments WHERE provider_ref = ?\",\n args: providerFilter ? [providerRef, providerFilter] : [providerRef],\n });\n const row = paymentRow.rows[0] as any;\n if (!row) return Response.json({ error: \"PAYMENT_NOT_FOUND\" }, { status: 404 });\n\n const userId = row.user_id as string;\n const plan = row.plan as PlanId;\n\n await sqlite.execute({ sql: \"UPDATE payments SET status = ? WHERE provider_ref = ?\", args: [success ? \"SUCCESS\" : \"FAILED\", providerRef] });\n\n if (success) {\n const periodEnd = new Date(Date.now() + PLANS[plan].periodDays * 86400000);\n await sqlite.execute({\n sql: \"UPDATE subscriptions SET plan = ?, status = 'ACTIVE', analyses_used = 0, period_start = ?, period_end = ? WHERE user_id = ?\",\n args: [plan, new Date().toISOString(), periodEnd.toISOString(), userId],\n });\n }\n\n return Response.json({ received: true });\n}\n\n// ---------------------------------------------------------------------------\n// SERVEUR HTTP\n// ---------------------------------------------------------------------------\n\nexport default async function (req: Request): Promise {\n await initDb();\n const url = new URL(req.url);\n const path = url.pathname;\n\n if (req.method === \"GET\" && path === \"/\") {\n return new Response(HTML, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n }\nif (req.method === \"GET\" && path === \"/sitemap.xml\") {\n const baseUrl = `${url.protocol}//${url.host}`;\n const sitemap = `\n\n \n ${baseUrl}/\n weekly\n 1.0\n \n`;\n return new Response(sitemap, { headers: { \"content-type\": \"application/xml; charset=utf-8\" } });\n }\n if (req.method === \"POST\" && path === \"/api/register\") {\n const { email, password } = await req.json();\n if (!email || !password || password.length < 8) {\n return Response.json({ error: \"VALIDATION_ERROR\", message: \"Email invalide ou mot de passe trop court (8 caractères min).\" }, { status: 400 });\n }\n const existing = await sqlite.execute({ sql: \"SELECT id FROM users WHERE email = ?\", args: [email] });\n if (existing.rows[0]) {\n return Response.json({ error: \"EMAIL_ALREADY_USED\" }, { status: 409 });\n }\n const userId = newId();\n await sqlite.execute({\n sql: \"INSERT INTO users (id, email, password_hash, created_at) VALUES (?, ?, ?, ?)\",\n args: [userId, email, await hashPassword(password), new Date().toISOString()],\n });\n await getOrCreateSubscription(userId);\n\n const token = newId() + newId();\n const expiresAt = new Date(Date.now() + 30 * 86400000);\n await sqlite.execute({ sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\", args: [token, userId, expiresAt.toISOString()] });\n\n return Response.json({ email }, { headers: { \"Set-Cookie\": sessionCookieHeader(token) } });\n }\n\n if (req.method === \"POST\" && path === \"/api/login\") {\n const { email, password } = await req.json();\n const result = await sqlite.execute({ sql: \"SELECT id, password_hash FROM users WHERE email = ?\", args: [email] });\n const row = result.rows[0] as any;\n if (!row || !(await verifyPassword(password, row.password_hash as string))) {\n return Response.json({ error: \"INVALID_CREDENTIALS\" }, { status: 401 });\n }\n const userId = row.id as string;\n const token = newId() + newId();\n const expiresAt = new Date(Date.now() + 30 * 86400000);\n await sqlite.execute({ sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\", args: [token, userId, expiresAt.toISOString()] });\n\n return Response.json({ email }, { headers: { \"Set-Cookie\": sessionCookieHeader(token) } });\n }\n\n if (req.method === \"POST\" && path === \"/api/logout\") {\n const token = parseCookies(req)[\"session\"];\n if (token) await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n return Response.json({ ok: true }, { headers: { \"Set-Cookie\": \"session=; HttpOnly; Path=/; Max-Age=0\" } });\n }\n\n if (req.method === \"GET\" && path === \"/api/me\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const userRow = await sqlite.execute({ sql: \"SELECT email FROM users WHERE id = ?\", args: [userId] });\n const sub = await getOrCreateSubscription(userId);\n const quota = PLANS[sub.plan].quota;\n\n return Response.json({\n email: (userRow.rows[0] as any)?.email,\n plan: sub.plan,\n planLabel: PLANS[sub.plan].label,\n analysesUsed: sub.analysesUsed,\n analysesQuota: quota,\n quotaRemaining: quota === -1 ? -1 : Math.max(0, quota - sub.analysesUsed),\n periodEnd: sub.periodEnd,\n });\n }\n\n if (req.method === \"POST\" && path === \"/api/analyze\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const sub = await getOrCreateSubscription(userId);\n const quota = PLANS[sub.plan].quota;\n if (quota !== -1 && sub.analysesUsed >= quota) {\n return Response.json({\n error: \"QUOTA_EXCEEDED\",\n message: \"Quota d'analyses atteint pour votre plan. Passez en Pro pour continuer.\",\n }, { status: 403 });\n }\n\n const form = await req.formData();\n const file = form.get(\"file\");\n if (!file || !(file instanceof File)) {\n return Response.json({ error: \"NO_FILE_PROVIDED\" }, { status: 400 });\n }\n\n let contentType: string;\n if (file.type.startsWith(\"image/\")) contentType = \"IMAGE\";\n else if (file.type.startsWith(\"video/\")) contentType = \"VIDEO\";\n else if (file.type.startsWith(\"audio/\")) contentType = \"AUDIO\";\n else return Response.json({ error: \"UNSUPPORTED_FILE_TYPE\" }, { status: 415 });\n\n if (contentType === \"VIDEO\" || contentType === \"AUDIO\") {\n return Response.json({\n error: \"FEATURE_UNAVAILABLE\",\n message: \"Cette fonctionnalité sera bientôt disponible. Merci de votre patience !\",\n }, { status: 503 });\n }\n\n const MAX_SIZE = 100 * 1024 * 1024;\n if (file.size > MAX_SIZE) {\n return Response.json({ error: \"FILE_TOO_LARGE\" }, { status: 413 });\n }\n\n try {\n let result;\n if (contentType === \"IMAGE\") result = await analyzeImage(file);\n else if (contentType === \"VIDEO\") result = await analyzeVideo(file);\n else result = await analyzeAudio(file);\n\n await incrementUsage(userId);\n\n const analysisId = newId();\n await sqlite.execute({\n sql: \"INSERT INTO analyses (id, user_id, content_type, verdict, confidence_score, created_at) VALUES (?, ?, ?, ?, ?, ?)\",\n args: [analysisId, userId, contentType, result.verdict, result.confidenceScore, new Date().toISOString()],\n });\n\n return Response.json({\n contentType,\n verdict: result.verdict,\n confidenceScore: result.confidenceScore,\n details: result.details,\n disclaimer: \"Ce résultat est une estimation probabiliste, pas une certitude absolue.\",\n analyzedAt: new Date().toISOString(),\n });\n } catch (err) {\n return Response.json({ error: \"ANALYSIS_FAILED\", message: err instanceof Error ? err.message : String(err) }, { status: 500 });\n }\n }\n\n if (req.method === \"GET\" && path === \"/api/history\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const result = await sqlite.execute({\n sql: \"SELECT id, content_type, verdict, confidence_score, created_at FROM analyses WHERE user_id = ? ORDER BY created_at DESC LIMIT 50\",\n args: [userId],\n });\n\n return Response.json({\n analyses: result.rows.map((r: any) => ({\n id: r.id, contentType: r.content_type, verdict: r.verdict, confidenceScore: r.confidence_score, createdAt: r.created_at,\n })),\n });\n }\n\n if (req.method === \"POST\" && path === \"/api/subscribe\") {\n const userId = await getCurrentUserId(req);\n if (!userId) return Response.json({ error: \"UNAUTHENTICATED\" }, { status: 401 });\n\n const { plan, provider } = await req.json();\n if (plan !== \"PRO_MONTHLY\" && plan !== \"PRO_YEARLY\") {\n return Response.json({ error: \"INVALID_PLAN\" }, { status: 400 });\n }\n\n const userRow = await sqlite.execute({ sql: \"SELECT email FROM users WHERE id = ?\", args: [userId] });\n const email = (userRow.rows[0] as any)?.email as string;\n\n try {\n const checkoutUrl =\n provider === \"stripe\"\n ? await initiateStripePayment(userId, plan, email)\n : provider === \"paydunya\"\n ? await initiatePayDunyaPayment(userId, plan, email)\n : await initiateCinetPayPayment(userId, plan, email);\n return Response.json({ checkoutUrl });\n } catch (err) {\n if (err instanceof Error && err.message === \"PAYMENT_PROVIDER_NOT_CONFIGURED\") {\n return Response.json({\n error: \"PAYMENT_PROVIDER_NOT_CONFIGURED\",\n message: \"Le paiement réel n'est pas encore configuré pour ce moyen de paiement.\",\n }, { status: 503 });\n }\n return Response.json({ error: \"PAYMENT_INITIATION_FAILED\", message: String(err) }, { status: 500 });\n }\n }\n\n if (req.method === \"POST\" && path === \"/api/payments/webhook/cinetpay\") {\n const body = await req.json();\n const providerRef = body.cpm_trans_id;\n const success = body.cpm_result === \"00\";\n return await handlePaymentWebhook(providerRef, success);\n }\n\n if (req.method === \"POST\" && path === \"/api/payments/webhook/stripe\") {\n const event = await req.json();\n const success = event.type === \"checkout.session.completed\";\n const providerRef = event.data?.object?.id;\n return await handlePaymentWebhook(providerRef, success, \"stripe\");\n }\nif (req.method === \"POST\" && path === \"/api/payments/webhook/stripe\") {\n const event = await req.json();\n const success = event.type === \"checkout.session.completed\";\n const providerRef = event.data?.object?.id;\n return await handlePaymentWebhook(providerRef, success, \"stripe\");\n }\n\n if (req.method === \"POST\" && path === \"/api/payments/webhook/paydunya\") {\n const masterKey = Deno.env.get(\"PAYDUNYA_MASTER_KEY\") ?? \"\";\n const rawBody = await req.text();\n const parsed = parseNestedFormBody(rawBody);\n const paymentData = parsed.data ?? {};\n\n const expectedHash = await sha512Hex(masterKey);\n if (paymentData.hash !== expectedHash) {\n return Response.json({ error: \"INVALID_SIGNATURE\" }, { status: 400 });\n }\n\n const providerRef = paymentData.invoice?.token ?? paymentData.token;\n const success = paymentData.status === \"completed\";\n return await handlePaymentWebhook(providerRef, success, \"paydunya\");\n }\n return new Response(\"Not found\", { status: 404 });\n}\n\n// ---------------------------------------------------------------------------\n// INTERFACE (une seule page, plusieurs vues gérées en JS)\n// ---------------------------------------------------------------------------\n\nconst HTML = `\n\n\n\n\nBarryGuard — Détecteur de contenu généré par IA\n\n\n\n\n\n

\n\n

🛡️ BarryGuard

Vérifiez si votre contenu est authentique.

Connexion

\n \n \n \n

\n Pas de compte ? Inscrivez-vous\n

\n\n

🛡️ BarryGuard

Vérifiez si votre contenu est authentique.

\n\n

\n \n \n \n

\n\n \n

Choisir un fichier

\n \n \n \n\n \n

🔍 Analyse en cours...

\n\n \n

\n\n

Historique

\n ← Retour\n

\n\n

Abonnement

\n\n

🆓 Gratuit

5 analyses / mois

Historique limité (5 dernières)

\n\n

⭐ Pro Mensuel — 15 $/mois

✅ Analyses illimitées

✅ Historique complet, jamais limité

✅ Résultats détaillés (scores complets)

✅ Accès prioritaire aux nouvelles fonctions (vidéo, audio)

✅ Support par email prioritaire

\n \n \n \n

\n\n

👑 Pro Annuel — 140 $/an

✅ Tous les avantages du Pro Mensuel

✅ Équivalent à 2 mois offerts (140$ au lieu de 180$)

✅ Badge \"Membre Fondateur\" sur votre profil

✅ Accès en avant-première à la vidéo dès son lancement

\n \n \n \n

\n\n

\n ← Retour\n

\n\n

\n\n\n\n`;","createdAt",["D",1788013067036],"branchVersion","branchId","21aa02ca-6b5b-4096-aafe-16ae6890a0f2","id","46aa5063-36b0-413a-8fde-eccb242e8aad","Barryguards",["D",1787870484569],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","6cd6fa32-657a-4e6c-8286-f11d6768a000","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03cc6-58cc-7079-9401-47abc1d72e62","tursoName","46aa506336b0413a8fdeeccb242e8aad","tursoHostname","46aa506336b0413a8fdeeccb242e8aad-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789526460011],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",11,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Barrosky","handle","displayName","Barrosky Djaz","avatar","https://lh3.googleusercontent.com/a/ACg8ocI8wrFOzxLLX33x85dq9c9HF0ZG_4h-qaUXrsijP9E7DymaIQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":154,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":155,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":156,"_83":157,"_85":158,"_87":25},"tree",[149],"files",[149],"counts",{"_137":62,"_138":139,"_140":62,"_141":142,"_143":144},"contents",[129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":133,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_27":136},"0838f078-39ff-48cf-8c81-839255d50d8b","parentId","latest",["D",1788013067036],6,"label",[28],"pulls","branches",1,"forks","envVars",{"_145":147,"_148":62},"connections",{"_145":62,"_146":62},"count","unfilledCount",5,"emptyCount",{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":150,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_151":152,"_27":153},["D",1788013067036],"children",[],[28],["D",1787870484569],["D",1789526460011],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_126":192,"_193":194,"_195":196,"_197":25,"_198":25,"_199":25,"_200":58,"_201":-5,"_202":-7,"_203":-7,"_204":62,"_205":25,"_206":25,"_207":-5,"_208":25,"_209":25,"_210":25,"_211":-5},"ENV",{"_163":164,"_165":166,"_167":89,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v7