async function solveToken() {
  const res = await fetch("https://fuck.netanyahu.my.id/", {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({
      secret: "-",
      type: "turnstile",
      websiteURL: "https://izen.lol",
      websiteKey: "0x4AAAAAADNEi_2N24gpQqY0"
    })
  });
  const data = await res.json();
  if (!data.status || !data.token) throw new Error("solver failed: " + JSON.stringify(data));
  return data.token;
}

export async function izen(req) {
  const { searchParams: sp } = new URL(req.url);
  const url = sp.get('url');
  if (!url) return { error: "no url provided, /izen?url=https://izen.lol/xxx" };

  try {
    const captchaToken = await solveToken();
    const res = await fetch("https://izen.lol/api/bypass", {
      method: 'POST',
      headers: {
        "Content-Type": "application/json",
        "Referer": "https://izen.lol/",
        "User-Agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36"
      },
      body: JSON.stringify({ url, captchaToken })
    });
    return res.json();
  } catch (err) {
    return { error: err.message };
  }
}