cdp-edge 1.23.2 → 1.24.0

package/server-edge-tracker/modules/ml/{fraud.js → fraud.ts}

@@ -4,31 +4,32 @@
  */
 
 import { sha256, tryParseJson } from '../utils.js';
-
-// ── Listas de detecção ────────────────────────────────────────────────────────
-export const DISPOSABLE_EMAIL_DOMAINS = new Set([
-  'mailinator.com','guerrillamail.com','tempmail.com','throwaway.email',
-  'yopmail.com','sharklasers.com','guerrillamailblock.com','spam4.me',
-  '10minutemail.com','trashmail.com','maildrop.cc','fakeinbox.com',
-  'dispostable.com','getairmail.com','mailnull.com',
-]);
+import { Env, TrackPayload } from '../../types.js';
+
+// ── Tipos ───────────────────────────────────────────────────────────────────────
+export interface FraudResult {
+  allowed: boolean;
+  score: number;
+  reasons: string[];
+  action: 'allowed' | 'flagged' | 'dropped';
+}
 
 export const DATACENTER_PATTERNS = /amazon|google|microsoft|digitalocean|linode|ovh|vultr|hetzner|contabo|cloudflare|packet|rackspace|leaseweb/i;
 
 // ── checkFraudGate — roda ANTES de qualquer processamento de evento ────────────
 // Retorna { allowed, score, reasons, action }
 // Falhas no gate = fail-safe (deixa passar)
-export async function checkFraudGate(env, request, payload) {
-  const result = { allowed: true, score: 0, reasons: [], action: 'allowed' };
+export async function checkFraudGate(env: Env, request: Request, payload: TrackPayload): Promise<FraudResult> {
+  const result: FraudResult = { allowed: true, score: 0, reasons: [], action: 'allowed' };
 
   try {
     const ip          = request.headers.get('CF-Connecting-IP') || '';
     const ua          = request.headers.get('User-Agent')        || '';
-    const fingerprint = payload.fingerprint                       || '';
+    const fingerprint = (payload as any).fingerprint                       || '';
     const email       = payload.email                             || '';
-    const botScore    = parseInt(payload.botScore || payload.bot_score || 0);
-    const asn         = String(request.cf?.asOrganization || '').toLowerCase();
-    const country     = (request.cf?.country || '').toUpperCase();
+    const botScore    = parseInt(String(payload.botScore || (payload as any).bot_score || 0));
+    const asn         = String((request as any).cf?.asOrganization || '').toLowerCase();
+    const country     = ((request as any).cf?.country || '').toUpperCase();
     const acceptLang  = request.headers.get('Accept-Language');
 
     // 1. KV blocklist check — instantâneo (~0ms)
@@ -64,15 +65,7 @@ export async function checkFraudGate(env, request, payload) {
       result.score += 20; result.reasons.push('no_accept_language');
     }
 
-    // 6. Email descartável
-    if (email) {
-      const domain = email.split('@')[1]?.toLowerCase();
-      if (domain && DISPOSABLE_EMAIL_DOMAINS.has(domain)) {
-        result.score += 25; result.reasons.push('disposable_email');
-      }
-    }
-
-    // 7. Velocity check via KV
+    // 6. Velocity check via KV
     if (env.GEO_CACHE && ip) {
       const velKey1h = `fraud_velocity:${ip}:h`;
       const velStr   = await env.GEO_CACHE.get(velKey1h);
@@ -96,22 +89,22 @@ export async function checkFraudGate(env, request, payload) {
 
     return result;
 
-  } catch (err) {
-    console.error('[Fraud] checkFraudGate error:', err.message);
+  } catch (err: any) {
+    console.error('[Fraud] checkFraudGate error:', err?.message || String(err));
     return { allowed: true, score: 0, reasons: ['gate_error_fallback'], action: 'allowed' };
   }
 }
 
 // ── logFraudSignal — persiste no D1 em background ────────────────────────────
-export async function logFraudSignal(env, request, payload, fraudResult) {
+export async function logFraudSignal(env: Env, request: Request, payload: TrackPayload, fraudResult: FraudResult): Promise<void> {
   if (!env.DB || fraudResult.action === 'allowed') return;
   try {
     const ip          = request.headers.get('CF-Connecting-IP') || '';
     const ua          = request.headers.get('User-Agent')        || '';
-    const fingerprint = payload.fingerprint                       || '';
-    const botScore    = parseInt(payload.botScore || payload.bot_score || 0);
-    const asn         = String(request.cf?.asOrganization || '');
-    const country     = (request.cf?.country              || '');
+    const fingerprint = (payload as any).fingerprint                       || '';
+    const botScore    = parseInt(String(payload.botScore || (payload as any).bot_score || 0));
+    const asn         = String((request as any).cf?.asOrganization || '');
+    const country     = (request as any).cf?.country              || '';
     const velKey1h    = `fraud_velocity:${ip}:h`;
     const vel1h       = env.GEO_CACHE ? parseInt(await env.GEO_CACHE.get(velKey1h) || '0') : 0;
 
@@ -145,13 +138,13 @@ export async function logFraudSignal(env, request, payload, fraudResult) {
           updated_at     = datetime('now')
       `).bind(ip, fraudResult.score, JSON.stringify(fraudResult.reasons)).run().catch(() => {});
     }
-  } catch (err) {
-    console.error('[Fraud] logFraudSignal error:', err.message);
+  } catch (err: any) {
+    console.error('[Fraud] logFraudSignal error:', err?.message || String(err));
   }
 }
 
 // ── GET /api/fraud/alerts ─────────────────────────────────────────────────────
-export async function handleFraudAlerts(env, request, headers) {
+export async function handleFraudAlerts(env: Env, request: Request, headers: Headers): Promise<Response> {
   if (!env.DB) return new Response(JSON.stringify({ error: 'DB não configurado' }), { status: 503, headers });
 
   const url    = new URL(request.url);
@@ -173,18 +166,18 @@ export async function handleFraudAlerts(env, request, headers) {
       LIMIT ?
     `).bind(...bindings).all();
 
-    const signals = (result.results || []).map(s => ({ ...s, reasons: tryParseJson(s.reasons, []) }));
+    const signals = (result.results || []).map((s: any) => ({ ...s, reasons: tryParseJson(s.reasons, []) }));
     const stats = await env.DB.prepare(`SELECT * FROM v_fraud_dashboard`).first().catch(() => null);
 
     return new Response(JSON.stringify({ success: true, period_hours: hours, total: signals.length, stats, alerts: signals }), { status: 200, headers });
-  } catch (err) {
-    console.error('[Fraud] alerts error:', err.message);
-    return new Response(JSON.stringify({ error: err.message }), { status: 500, headers });
+  } catch (err: any) {
+    console.error('[Fraud] alerts error:', err?.message || String(err));
+    return new Response(JSON.stringify({ error: err?.message || String(err) }), { status: 500, headers });
   }
 }
 
 // ── GET /api/fraud/blocklist ──────────────────────────────────────────────────
-export async function handleFraudBlocklist(env, request, headers) {
+export async function handleFraudBlocklist(env: Env, request: Request, headers: Headers): Promise<Response> {
   if (!env.DB) return new Response(JSON.stringify({ error: 'DB não configurado' }), { status: 503, headers });
 
   try {
@@ -194,19 +187,19 @@ export async function handleFraudBlocklist(env, request, headers) {
       FROM fraud_alerts WHERE is_blocked = 1 ORDER BY events_dropped DESC LIMIT 100
     `).all();
 
-    const blocklist = (result.results || []).map(r => ({ ...r, top_reasons: tryParseJson(r.top_reasons, []) }));
+    const blocklist = (result.results || []).map((r: any) => ({ ...r, top_reasons: tryParseJson(r.top_reasons, []) }));
     return new Response(JSON.stringify({ success: true, total: blocklist.length, blocklist }), { status: 200, headers });
-  } catch (err) {
-    console.error('[Fraud] blocklist error:', err.message);
-    return new Response(JSON.stringify({ error: err.message }), { status: 500, headers });
+  } catch (err: any) {
+    console.error('[Fraud] blocklist error:', err?.message || String(err));
+    return new Response(JSON.stringify({ error: err?.message || String(err) }), { status: 500, headers });
   }
 }
 
 // ── POST /api/fraud/blocklist/add ─────────────────────────────────────────────
-export async function handleFraudBlocklistAdd(env, request, headers) {
+export async function handleFraudBlocklistAdd(env: Env, request: Request, headers: Headers): Promise<Response> {
   if (!env.DB) return new Response(JSON.stringify({ error: 'DB não configurado' }), { status: 503, headers });
 
-  let body;
+  let body: any;
   try { body = await request.json(); }
   catch { return new Response(JSON.stringify({ error: 'JSON inválido' }), { status: 400, headers }); }
 
@@ -237,17 +230,17 @@ export async function handleFraudBlocklistAdd(env, request, headers) {
       success: true, entity_type, entity_value, kv_key: kvKey, ttl_hours, expires_at: expiresAt,
       message: `${entity_type} '${entity_value}' bloqueado por ${ttl_hours}h. Efeito imediato via KV.`,
     }), { status: 200, headers });
-  } catch (err) {
-    console.error('[Fraud] blocklist add error:', err.message);
-    return new Response(JSON.stringify({ error: err.message }), { status: 500, headers });
+  } catch (err: any) {
+    console.error('[Fraud] blocklist add error:', err?.message || String(err));
+    return new Response(JSON.stringify({ error: err?.message || String(err) }), { status: 500, headers });
   }
 }
 
 // ── DELETE /api/fraud/blocklist/remove ───────────────────────────────────────
-export async function handleFraudBlocklistRemove(env, request, headers) {
+export async function handleFraudBlocklistRemove(env: Env, request: Request, headers: Headers): Promise<Response> {
   if (!env.DB) return new Response(JSON.stringify({ error: 'DB não configurado' }), { status: 503, headers });
 
-  let body;
+  let body: any;
   try { body = await request.json(); }
   catch { return new Response(JSON.stringify({ error: 'JSON inválido' }), { status: 400, headers }); }
 
@@ -265,14 +258,14 @@ export async function handleFraudBlocklistRemove(env, request, headers) {
       success: true, entity_type, entity_value,
       message: `${entity_type} '${entity_value}' removido do blocklist. Efeito imediato via KV.`,
     }), { status: 200, headers });
-  } catch (err) {
-    console.error('[Fraud] blocklist remove error:', err.message);
-    return new Response(JSON.stringify({ error: err.message }), { status: 500, headers });
+  } catch (err: any) {
+    console.error('[Fraud] blocklist remove error:', err?.message || String(err));
+    return new Response(JSON.stringify({ error: err?.message || String(err) }), { status: 500, headers });
   }
 }
 
 // ── GET /api/fraud/stats ──────────────────────────────────────────────────────
-export async function handleFraudStats(env, request, headers) {
+export async function handleFraudStats(env: Env, request: Request, headers: Headers): Promise<Response> {
   if (!env.DB) return new Response(JSON.stringify({ error: 'DB não configurado' }), { status: 503, headers });
 
   try {
@@ -294,8 +287,8 @@ export async function handleFraudStats(env, request, headers) {
       top_attacking_ips: topIps.results || [],
       by_action: topReasons.results || [],
     }), { status: 200, headers });
-  } catch (err) {
-    console.error('[Fraud] stats error:', err.message);
-    return new Response(JSON.stringify({ error: err.message }), { status: 500, headers });
+  } catch (err: any) {
+    console.error('[Fraud] stats error:', err?.message || String(err));
+    return new Response(JSON.stringify({ error: err?.message || String(err) }), { status: 500, headers });
   }
 }

package/server-edge-tracker/modules/ml/{logistic.js → logistic.ts}

@@ -1,5 +1,5 @@
 /**
- * CDP Edge — Logistic Regression (pure JS, sem deps externas)
+ * CDP Edge — Logistic Regression (pure TS, sem deps externas)
  * Treina modelo de predição de conversão com dados reais do D1.
  *
  * Features usadas (todas normalizadas 0-1):
@@ -7,9 +7,40 @@
  *   has_email, has_phone, is_br, hour_normalized
  */
 
+import { Env } from '../../types.js';
+import { D1Database, KVNamespace } from '@cloudflare/workers-types';
+
+// ── Tipos ───────────────────────────────────────────────────────────────────────
+export interface DatasetRow {
+  features: number[];
+  label: number;
+}
+
+export interface LogisticModel {
+  bias: number;
+  weights: number[];
+  accuracy: number;
+  positiveRate: number;
+  sampleSize: number;
+  threshold: number;
+  featureNames: string[];
+  trainedAt: string;
+}
+
+export interface ExtractedFeatures {
+  utm_score: number;
+  engagement: number;
+  intention: number;
+  recency: number;
+  has_email: number;
+  has_phone: number;
+  is_br: number;
+  hour: number;
+}
+
 // ── Feature Engineering ───────────────────────────────────────────────────────
 
-const UTM_SCORES = {
+const UTM_SCORES: Record<string, number> = {
   facebook: 0.90, instagram: 0.90, meta: 0.90,
   google:   0.82, youtube:   0.82,
   tiktok:   0.75,
@@ -18,14 +49,14 @@ const UTM_SCORES = {
   direct:   0.20,
 };
 
-const INTENTION_SCORES = {
+const INTENTION_SCORES: Record<string, number> = {
   comprador:   1.00, high_intent: 1.00,
   interessado: 0.60,
   nurture:     0.30,
   curioso:     0.15,
 };
 
-export function extractFeatures(row) {
+export function extractFeatures(row: any): number[] {
   const src       = (row.utm_source || '').toLowerCase().trim();
   const intention = (row.intention_level || '').toLowerCase().trim();
   const daysSince = row.days_since_lead || 0;
@@ -44,13 +75,13 @@ export function extractFeatures(row) {
 
 // ── Sigmoid ───────────────────────────────────────────────────────────────────
 
-function sigmoid(z) {
+function sigmoid(z: number): number {
   if (z > 20)  return 1;
   if (z < -20) return 0;
   return 1 / (1 + Math.exp(-z));
 }
 
-function dot(weights, features) {
+function dot(weights: number[], features: number[]): number {
   return features.reduce((sum, f, i) => sum + (weights[i] || 0) * f, 0);
 }
 
@@ -58,11 +89,8 @@ function dot(weights, features) {
 
 /**
  * Treina regressão logística com gradiente descendente.
- * @param {Array<{features: number[], label: number}>} dataset
- * @param {{ iterations?, learningRate?, lambda? }} opts
- * @returns {{ bias, weights, accuracy, positiveRate }}
  */
-export function trainLogisticRegression(dataset, opts = {}) {
+export function trainLogisticRegression(dataset: DatasetRow[], opts: { iterations?: number; learningRate?: number; lambda?: number } = {}): LogisticModel | null {
   if (!dataset || dataset.length < 50) {
     return null; // dados insuficientes
   }
@@ -132,11 +160,8 @@ export function trainLogisticRegression(dataset, opts = {}) {
 
 /**
  * Prediz score de conversão (0-100) usando pesos treinados.
- * @param {{ bias, weights, threshold }} model
- * @param {number[]} features
- * @returns {number} score 0-100
  */
-export function predictWithWeights(model, features) {
+export function predictWithWeights(model: LogisticModel, features: number[]): number {
   const z    = dot(model.weights, features) + model.bias;
   const prob = sigmoid(z);
   return Math.round(prob * 100);
@@ -146,11 +171,11 @@ export function predictWithWeights(model, features) {
 
 export const LTV_WEIGHTS_KV_KEY = 'ltv_weights_active';
 
-export async function loadActiveWeights(env) {
+export async function loadActiveWeights(env: Env): Promise<LogisticModel | null> {
   // 1. Tentar KV (cache ~7 dias)
   if (env.GEO_CACHE) {
     try {
-      const cached = await env.GEO_CACHE.get(LTV_WEIGHTS_KV_KEY, 'json');
+      const cached = await env.GEO_CACHE.get(LTV_WEIGHTS_KV_KEY, 'json') as LogisticModel | null;
       if (cached?.weights?.length) return cached;
     } catch {}
   }
@@ -161,8 +186,8 @@ export async function loadActiveWeights(env) {
     const row = await env.DB.prepare(
       `SELECT weights_json FROM ltv_model_weights WHERE is_active = 1 ORDER BY trained_at DESC LIMIT 1`
     ).first();
-    if (!row?.weights_json) return null;
-    const model = JSON.parse(row.weights_json);
+    if (!row || !(row as any).weights_json) return null;
+    const model = JSON.parse((row as any).weights_json) as LogisticModel;
 
     // Popular KV para próximas requests
     if (env.GEO_CACHE && model?.weights?.length) {
@@ -174,7 +199,7 @@ export async function loadActiveWeights(env) {
   }
 }
 
-export async function saveWeights(DB, model) {
+export async function saveWeights(DB: D1Database, model: LogisticModel): Promise<void> {
   if (!DB || !model) return;
   const now = new Date().toISOString();