cdp-edge 1.2.0 → 1.3.0

package/server-edge-tracker/types.ts

@@ -0,0 +1,275 @@
+/**
+ * CDP Edge — Server Types
+ * Tipos para o Cloudflare Worker e bindings
+ */
+
+import { D1Database, KVNamespace, Queue, R2Bucket } from '@cloudflare/workers-types';
+
+// ── Environment Bindings ─────────────────────────────────────────────────────
+export interface Env {
+  // D1 Database
+  DB?: D1Database;
+
+  // KV Namespace
+  GEO_CACHE?: KVNamespace;
+
+  // R2 Bucket
+  AUDIT_LOGS?: R2Bucket;
+
+  // Workers AI
+  AI?: any;
+
+  // Rate Limiter
+  RATE_LIMITER?: any;
+
+  // Queue — Retry de eventos com falha de rede
+  RETRY_QUEUE?: Queue<QueueMessage>;
+
+  // Public Variables
+  META_PIXEL_ID?: string;
+  GA4_MEASUREMENT_ID?: string;
+  TIKTOK_PIXEL_ID?: string;
+  SITE_DOMAIN?: string;
+
+  // Secrets
+  META_ACCESS_TOKEN?: string;
+  GA4_API_SECRET?: string;
+  TIKTOK_ACCESS_TOKEN?: string;
+  WA_WEBHOOK_VERIFY_TOKEN?: string;
+  // WhatsApp Cloud API — nomes canônicos (Meta Cloud API v22.0)
+  WHATSAPP_ACCESS_TOKEN?: string;       // canonical: Bearer token do System User
+  WHATSAPP_PHONE_NUMBER_ID?: string;    // canonical: ID numérico do número no Meta Business
+  // WhatsApp Cloud API — nomes legados (backwards compat)
+  WA_ACCESS_TOKEN?: string;
+  WA_PHONE_ID?: string;
+  WA_NOTIFY_NUMBER?: string;
+  CALLMEBOT_PHONE?: string;
+  WEBHOOK_SECRET_TICTO?: string;
+  WEBHOOK_SECRET_HOTMART?: string;
+  WEBHOOK_SECRET_KIWIFY?: string;
+  META_TEST_CODE?: string;
+  META_AD_ACCOUNT_ID?: string;
+  META_AUDIENCE_ID?: string;
+  PINTEREST_ACCESS_TOKEN?: string;
+  PINTEREST_AD_ACCOUNT_ID?: string;
+  REDDIT_ACCESS_TOKEN?: string;
+  REDDIT_AD_ACCOUNT_ID?: string;
+  LINKEDIN_ACCESS_TOKEN?: string;
+  LINKEDIN_CONVERSION_ID?: string;
+  LINKEDIN_AD_ACCOUNT_ID?: string;
+  SPOTIFY_ACCESS_TOKEN?: string;
+  SPOTIFY_AD_ACCOUNT_ID?: string;
+
+  // Email and Notification
+  RESEND_API_KEY?: string;
+  RESEND_FROM_EMAIL?: string;
+  CALLMEBOT_APIKEY?: string;
+
+  // EVO CRM — OAuth2 client_credentials
+  EVO_CRM_BASE_URL?: string;        // URL base do EVO CRM (ex: https://api-evocrm.suaempresa.com)
+  EVO_CRM_CLIENT_ID?: string;       // OAuth client_id (Doorkeeper app)
+  EVO_CRM_CLIENT_SECRET?: string;   // OAuth client_secret
+  EVO_CRM_INBOX_ID?: string;        // ID do inbox onde as conversas serão criadas
+  EVO_CRM_DEFAULT_COUNTRY?: string; // Country dial code para phones locais (default "55" = Brasil)
+  EVO_CRM_LOCALE?: string;          // Locale da nota interna: "pt-BR" | "en-US" | "es-ES" (default "pt-BR")
+}
+
+// ── Event Payload Types ───────────────────────────────────────────────────────
+export interface TrackPayload {
+  eventName?: string;
+  eventId?: string;
+  event_id?: string;
+  userId?: string;
+  email?: string | null;
+  phone?: string | null;
+  firstName?: string | null;
+  lastName?: string | null;
+  city?: string | null;
+  state?: string | null;
+  zip?: string | null;
+  country?: string | null;
+  dob?: string | null;
+
+  // Identifiers
+  fbp?: string | null;
+  fbc?: string | null;
+  fbclid?: string | null;
+  ttp?: string | null;
+  gclid?: string | null;
+  wbraid?: string | null;
+  gbraid?: string | null;
+  ttclid?: string | null;
+  rclid?: string | null;
+  msclkid?: string | null;
+  li_fat_id?: string | null;
+  gaClientId?: string | null;
+  sessionId?: string | null;
+
+  // Parameters
+  value?: number | null;
+  currency?: string | null;
+  contentIds?: string[] | null;
+  contentName?: string | null;
+  contentType?: string | null;
+  pageUrl?: string | null;
+  orderId?: string | null;
+  productName?: string | null;
+
+  // Quantum Tracking Details
+  intent_score?: string | number | null;
+  intentScoreNum?: number | null;
+  intent_bucket?: string | null;
+  intent_penalized?: boolean;
+  metaSignal?: number | null;
+  metaSignalBucket?: string | null;
+  distanceBucket?: string | null;
+  distanceKm?: number | null;
+  funnel_stage?: string | null;
+  funnelDepth?: string | null;
+  funnelLevel?: string | null;
+  internalEvent?: string | null;
+  botScore?: number | null;
+
+  // Real Estate
+  property_lat?: string | number | null;
+  propertyLat?: string | number | null;
+  property_lng?: string | number | null;
+  propertyLng?: string | number | null;
+
+  // Engagement
+  engagementScore?: number | null;
+  intentionLevel?: string | null;
+  userScore?: number | null;
+  scrollScore?: number | null;
+  timeLevel?: string | null;
+
+  // UTM
+  utmSource?: string | null;
+  utmMedium?: string | null;
+  utmCampaign?: string | null;
+  utmContent?: string | null;
+  utmTerm?: string | null;
+  utmRestored?: boolean;
+
+  // LTV
+  ltvClass?: string | null;
+  ltvScore?: number | null;
+
+  // Additional fields
+  [key: string]: any;
+}
+
+export interface BehavioralData {
+  engagement_score?: number;
+  totalScore?: number;
+  intention_level?: string;
+  user_score?: number;
+  scroll_score?: number;
+  time_level?: string;
+  email?: string | null;
+  phone?: string | null;
+  first_name?: string | null;
+  firstName?: string | null;
+  last_name?: string | null;
+  lastName?: string | null;
+  city?: string | null;
+  state?: string | null;
+  zip?: string | null;
+  dob?: string | null;
+}
+
+// ── Webhook Types ─────────────────────────────────────────────────────────────
+export interface HotmartWebhook {
+  data?: {
+    buyer?: {
+      email?: string;
+      phone?: string;
+      name?: string;
+    };
+    purchase?: {
+      status?: string;
+      transaction?: string;
+      price?: {
+        value?: number;
+        currency_value?: string;
+      };
+    };
+    product?: {
+      id?: string;
+      ucode?: string;
+      name?: string;
+    };
+  };
+  [key: string]: any;
+}
+
+export interface KiwifyWebhook {
+  order_status?: string;
+  order_id?: string;
+  order_value?: string;
+  Customer?: {
+    email?: string;
+    mobile?: string;
+    full_name?: string;
+  };
+  Product?: {
+    product_id?: string;
+    product_name?: string;
+  };
+  [key: string]: any;
+}
+
+export interface TictoWebhook {
+  status?: string;
+  customer?: {
+    email?: string;
+    phone?: string;
+    name?: string;
+  };
+  order?: {
+    hash?: string;
+    transaction_hash?: string;
+    id?: string;
+    paid_amount?: number;
+    total?: number;
+    amount?: number;
+  };
+  item?: {
+    product_id?: string;
+    product_name?: string;
+  };
+  tracking?: {
+    user_id?: string;
+    fbclid?: string;
+    utm_source?: string;
+    src?: string;
+    utm_medium?: string;
+    utm_campaign?: string;
+    utm_content?: string;
+  };
+  url_params?: {
+    user_id?: string;
+    fbclid?: string;
+    utm_source?: string;
+    src?: string;
+    utm_medium?: string;
+    utm_campaign?: string;
+    utm_content?: string;
+  };
+  [key: string]: any;
+}
+
+// ── Queue Message Types ───────────────────────────────────────────────────────
+export interface QueueMessage {
+  eventType: string;
+  payload: TrackPayload;
+  platform: string;
+  attempt?: number;
+}
+
+// ── Promise Settled Result Helpers ─────────────────────────────────────────────
+export interface PromiseResult<T> {
+  status: 'fulfilled' | 'rejected';
+  value?: T;
+  reason?: Error | string;
+}

package/server-edge-tracker/wrangler.toml

@@ -1,85 +1,140 @@
-name = "server-edge-tracker"
-main = "worker.js"
-compatibility_date = "2025-01-01"
-compatibility_flags = ["nodejs_compat"]
-
-# ── Variáveis públicas (não são segredos) ─────────────────────────────────────
-[vars]
-META_PIXEL_ID      = "1583939052660159"
-GA4_MEASUREMENT_ID = "G-XXXXXXXXXX"
-TIKTOK_PIXEL_ID    = "CXXXXXXXXXXXXXXX"
-SITE_DOMAIN        = "server-edge-tracker.suporte-ed9.workers.dev"
-
-# ── Banco D1 ──────────────────────────────────────────────────────────────────
-# Após criar o banco com "wrangler d1 create cdp-edge-db",
-# substitua o database_id pelo ID retornado no terminal.
-[[d1_databases]]
-binding      = "DB"
-database_name = "cdp-edge-db"
-database_id  = "7867d38f-5fa8-4c17-b465-386211422c09"
-
-# ── Queues — Retry + Dead Letter Queue ───────────────────────────────────────
-# Produtor: worker envia eventos com falha para cdp-edge-retry
-# Consumidor: worker processa a fila e reaplica; falhas vão para cdp-edge-dlq
-# Criar com: wrangler queues create cdp-edge-retry
-#            wrangler queues create cdp-edge-dlq
-[[queues.producers]]
-binding   = "RETRY_QUEUE"
-queue     = "cdp-edge-retry"
-
-[[queues.consumers]]
-queue                    = "cdp-edge-retry"
-max_batch_size           = 10
-max_batch_timeout        = 30
-max_retries              = 3
-dead_letter_queue        = "cdp-edge-dlq"
-
-# ── KV Namespace — Geo/Session Cache ─────────────────────────────────────────
-# Cache de geolocalização e sessões recentes (TTL: 1h por padrão)
-# Criar com: wrangler kv namespace create GEO_CACHE
-#            wrangler kv namespace create GEO_CACHE --preview
-[[kv_namespaces]]
-binding    = "GEO_CACHE"
-id         = "821b6c1ccb4b475985439b801c1fdbe0"
-preview_id = "d2d9198f47e340ee905a8dc566b09e95"
-
-# ── R2 Bucket — Audit Logs ────────────────────────────────────────────────────
-# ⚠️  PENDENTE: Habilitar R2 no Cloudflare Dashboard antes de descomentar
-# Dashboard → R2 → Enable → depois: wrangler r2 bucket create cdp-edge-logs
-# [[r2_buckets]]
-# binding     = "AUDIT_LOGS"
-# bucket_name = "cdp-edge-logs"
-
-# ── Cron Triggers — Intelligence Agent ───────────────────────────────────────
-# Semanal: domingo 02:00 UTC — check de versões de API + relatório diário
-# Mensal:  1º do mês 03:00 UTC — auditoria de taxa de erro + alertas críticos
-[triggers]
-crons = ["0 2 * * 7", "0 3 1 * *"]
-
-# ── Cloudflare Workers AI ─────────────────────────────────────────────────────
-# Habilita env.AI para LTV Prediction (Fase 4)
-# Plano gratuito inclui 10.000 neurônios/dia — suficiente para enrichment
-[ai]
-binding = "AI"
-
-# ── Secrets (NÃO ficam aqui — configurar via CLI) ─────────────────────────────
-# wrangler secret put META_ACCESS_TOKEN     ← token Meta CAPI (obrigatório)
-# wrangler secret put GA4_API_SECRET        ← secret GA4 Measurement Protocol (obrigatório)
-# wrangler secret put TIKTOK_ACCESS_TOKEN   ← token TikTok Events API (opcional)
-# wrangler secret put META_TEST_CODE        ← só para testes (remover em produção)
-# wrangler secret put META_AD_ACCOUNT_ID        ← ID da conta de anúncios Meta (act_XXXXXXXXX) — Customer Match
-# wrangler secret put META_AUDIENCE_ID          ← ID da Custom Audience Meta — Customer Match automático
-# wrangler secret put WHATSAPP_TOKEN            ← Token WhatsApp Cloud API (Meta Business Suite)
-# wrangler secret put WHATSAPP_PHONE_NUMBER_ID  ← ID do número WhatsApp (Meta Business Suite → Phone Numbers)
-# wrangler secret put RESEND_API_KEY            ← API Key do Resend (resend.com)
-# wrangler secret put RESEND_FROM_EMAIL         ← Remetente verificado ex: "CDP Edge <noreply@seudominio.com.br>"
-# wrangler secret put WA_WEBHOOK_VERIFY_TOKEN   ← Token de verificação do webhook WhatsApp (você define — qualquer string segura)
-# wrangler secret put PINTEREST_ACCESS_TOKEN    ← Bearer token Pinterest Conversions API
-# wrangler secret put PINTEREST_AD_ACCOUNT_ID   ← ID da conta de anúncios Pinterest (ex: 549755813XXX)
-# wrangler secret put REDDIT_ACCESS_TOKEN       ← Bearer token Reddit Conversions API
-# wrangler secret put REDDIT_AD_ACCOUNT_ID      ← ID da conta de anúncios Reddit (ex: t2_XXXXXXX)
-# wrangler secret put LINKEDIN_ACCESS_TOKEN     ← OAuth2 Bearer token LinkedIn Marketing API
-# wrangler secret put LINKEDIN_CONVERSION_ID    ← ID da conversão LinkedIn (ex: 12345678)
-# wrangler secret put LINKEDIN_AD_ACCOUNT_ID    ← ID da conta de anúncios LinkedIn
-# wrangler secret put SPOTIFY_ACCESS_TOKEN      ← Bearer token Spotify Advertising API
-# wrangler secret put SPOTIFY_AD_ACCOUNT_ID     ← ID da conta de anúncios Spotify Ads
+name = "server-edge-tracker"
+# Entry point: worker.js (monólito original, 100% compatível)
+# Para usar a versão modular ES Modules: altere para main = "index.ts"
+main = "index.ts"
+compatibility_date = "2025-01-01"
+compatibility_flags = ["nodejs_compat"]
+workers_dev = true
+
+# ── Worker Routes — same-domain tracking (imune a bloqueios) ─────────────────
+# Substituir SEU_DOMINIO pelo domínio do cliente antes do deploy
+# [[routes]]
+# pattern  = "SEU_DOMINIO/track*"
+# zone_name = "SEU_DOMINIO"
+#
+# [[routes]]
+# pattern  = "*.SEU_DOMINIO/track*"
+# zone_name = "SEU_DOMINIO"
+
+# [[routes]]
+# pattern  = "SEU_DOMINIO/track*"
+# zone_name = "SEU_DOMINIO"
+#
+# [[routes]]
+# pattern  = "*.SEU_DOMINIO/track*"
+# zone_name = "SEU_DOMINIO"
+
+# ── Variáveis públicas (não são segredos) ─────────────────────────────────────
+[vars]
+META_PIXEL_ID      = ""
+GA4_MEASUREMENT_ID = ""
+TIKTOK_PIXEL_ID    = ""
+SITE_DOMAIN        = "SEU_DOMINIO"
+
+# ── Banco D1 ──────────────────────────────────────────────────────────────────
+# Após criar o banco com "wrangler d1 create cdp-edge-db",
+# substitua o database_id pelo ID retornado no terminal.
+[[d1_databases]]
+binding      = "DB"
+database_name = "cdp-edge-db"
+database_id  = "7867d38f-5fa8-4c17-b465-386211422c09"
+
+# ── Queues — Retry + Dead Letter Queue ───────────────────────────────────────
+# Produtor: worker envia eventos com falha para cdp-edge-retry
+# Consumidor: worker processa a fila e reaplica; falhas vão para cdp-edge-dlq
+# Criar com: wrangler queues create cdp-edge-retry
+#            wrangler queues create cdp-edge-dlq
+[[queues.producers]]
+binding   = "RETRY_QUEUE"
+queue     = "cdp-edge-retry"
+
+[[queues.consumers]]
+queue                    = "cdp-edge-retry"
+max_batch_size           = 10
+max_batch_timeout        = 30
+max_retries              = 3
+dead_letter_queue        = "cdp-edge-dlq"
+
+# ── KV Namespace — Geo/Session Cache ─────────────────────────────────────────
+# Cache de geolocalização e sessões recentes (TTL: 1h por padrão)
+# Criar com: wrangler kv namespace create GEO_CACHE
+#            wrangler kv namespace create GEO_CACHE --preview
+[[kv_namespaces]]
+binding    = "GEO_CACHE"
+id         = "821b6c1ccb4b475985439b801c1fdbe0"
+preview_id = "d2d9198f47e340ee905a8dc566b09e95"
+
+# ── R2 Bucket — Audit Logs ────────────────────────────────────────────────────
+# Logs imutáveis por evento: logs/YYYY/MM/DD/{timestamp}_{eventName}.json
+# Sem PII — apenas userId, eventId, ltvClass, UTMs, geo
+[[r2_buckets]]
+binding     = "AUDIT_LOGS"
+bucket_name = "cdp-edge-logs"
+
+# ── Cron Triggers — Intelligence Agent ───────────────────────────────────────
+# Semanal: domingo 02:00 UTC — check de versões de API + relatório diário
+# Mensal:  1º do mês 03:00 UTC — auditoria de taxa de erro + alertas críticos
+[triggers]
+crons = ["0 2 * * 7", "0 3 1 * *"]
+
+# ── Cloudflare Workers AI ─────────────────────────────────────────────────────
+# Habilita env.AI para LTV Prediction (Fase 4)
+# Plano gratuito inclui 10.000 neurônios/dia — suficiente para enrichment
+[ai]
+binding = "AI"
+
+# ── Rate Limiting — proteção do /track contra abuso de cota ──────────────────
+# Bloqueia na borda ANTES de qualquer processamento do Worker
+# Limite: 60 requisições por minuto por IP (generoso para usuário real)
+# Requer Workers Paid plan ($5/mês) — remover bloco se usar plano free
+[[unsafe.bindings]]
+name         = "RATE_LIMITER"
+type         = "ratelimit"
+namespace_id = "1001"
+
+[unsafe.bindings.simple]
+limit  = 60
+period = 60
+
+# ── Observabilidade — Logs + Traces persistidos no painel Cloudflare ─────────
+[observability]
+enabled            = false
+head_sampling_rate = 1
+
+[observability.logs]
+enabled            = true
+head_sampling_rate = 1
+persist            = true
+invocation_logs    = true
+
+[observability.traces]
+enabled            = false
+persist            = true
+head_sampling_rate = 1
+
+# ── Secrets (NÃO ficam aqui — configurar via CLI) ─────────────────────────────
+# wrangler secret put META_ACCESS_TOKEN     ← token Meta CAPI (obrigatório)
+# wrangler secret put GA4_API_SECRET        ← secret GA4 Measurement Protocol (obrigatório)
+# wrangler secret put TIKTOK_ACCESS_TOKEN   ← token TikTok Events API (opcional)
+# wrangler secret put META_TEST_CODE        ← só para testes (remover em produção)
+# wrangler secret put META_AD_ACCOUNT_ID        ← ID da conta de anúncios Meta (act_XXXXXXXXX) — Customer Match
+# wrangler secret put META_AUDIENCE_ID          ← ID da Custom Audience Meta — Customer Match automático
+# wrangler secret put WHATSAPP_TOKEN            ← Token WhatsApp Cloud API (Meta Business Suite)
+# wrangler secret put WHATSAPP_PHONE_NUMBER_ID  ← ID do número WhatsApp (Meta Business Suite → Phone Numbers)
+# wrangler secret put RESEND_API_KEY            ← API Key do Resend (resend.com)
+# wrangler secret put RESEND_FROM_EMAIL         ← Remetente verificado ex: "CDP Edge <noreply@seudominio.com.br>"
+# wrangler secret put WA_WEBHOOK_VERIFY_TOKEN   ← Token de verificação do webhook WhatsApp (você define — qualquer string segura)
+# wrangler secret put WEBHOOK_SECRET_TICTO      ← HMAC-SHA256 Ticto
+# wrangler secret put PINTEREST_ACCESS_TOKEN    ← Bearer token Pinterest Conversions API
+# wrangler secret put PINTEREST_AD_ACCOUNT_ID   ← ID da conta de anúncios Pinterest (ex: 549755813XXX)
+# wrangler secret put REDDIT_ACCESS_TOKEN       ← Bearer token Reddit Conversions API
+# wrangler secret put REDDIT_AD_ACCOUNT_ID      ← ID da conta de anúncios Reddit (ex: t2_XXXXXXX)
+# wrangler secret put LINKEDIN_ACCESS_TOKEN     ← OAuth2 Bearer token LinkedIn Marketing API
+# wrangler secret put LINKEDIN_CONVERSION_ID    ← ID da conversão LinkedIn (ex: 12345678)
+# wrangler secret put LINKEDIN_AD_ACCOUNT_ID    ← ID da conta de anúncios LinkedIn
+# wrangler secret put SPOTIFY_ACCESS_TOKEN      ← Bearer token Spotify Advertising API
+# wrangler secret put SPOTIFY_AD_ACCOUNT_ID     ← ID da conta de anúncios Spotify Ads
+# wrangler secret put EVO_CRM_BASE_URL          ← URL base do EVO CRM (ex: https://api-evocrm.suaempresa.com)
+# wrangler secret put EVO_CRM_CLIENT_ID         ← OAuth client_id (Doorkeeper app no CRM)
+# wrangler secret put EVO_CRM_CLIENT_SECRET     ← OAuth client_secret
+# wrangler secret put EVO_CRM_INBOX_ID          ← ID do inbox onde as conversas serão criadas