export default {
  async fetch(request) {
    const API_KEY = "5182c2ae153d224b9447d00x4856a7a16";

    const SAFE_PAGE  = "https://example.com";
    const BLOCK_PAGE = "https://www.google.com";

    const url = new URL(request.url);
    const ip = url.searchParams.get("ip") || request.headers.get("CF-Connecting-IP");
    const ua = url.searchParams.get("useragent") || request.headers.get("User-Agent");

    const apiUrl =
      "https://xantibot.pw/api/ip-antibot" +
      `?apikey=${API_KEY}` +
      `&ip=${encodeURIComponent(ip || "")}` +
      `&useragent=${encodeURIComponent(ua || "")}`;

    const res = await fetch(apiUrl);
    const json = await res.json();

    if (json?.status !== "success") {
      return new Response(
        JSON.stringify({
          status: "error",
          message: json?.message || "UNKNOWN ERROR"
        }, null, 2),
        {
          status: 403,
          headers: { "Content-Type": "application/json" }
        }
      );
    }
    if (json.data.is_blocked === 1) {
      return Response.redirect(BLOCK_PAGE, 302);
    }
    return Response.redirect(SAFE_PAGE, 302);
  }
};