cdp-edge 2.0.0 → 2.0.2

package/contracts/api-versions.json

@@ -212,10 +212,14 @@
         ]
       },
       "conversions_api": {
-        "current": "v2",
-        "minimum_supported": "v1",
-        "recommended": "v2",
-        "endpoint_pattern": "https://api.linkedin.com/rest/attributionConversions/{VERSION}",
+        "current": "202401",
+        "minimum_supported": "202401",
+        "recommended": "202401",
+        "endpoint_pattern": "https://api.linkedin.com/rest/conversionEvents",
+        "required_headers": {
+          "LinkedIn-Version": "202401",
+          "X-Restli-Protocol-Version": "2.0.0"
+        },
         "authentication": "Bearer token (LINKEDIN_ACCESS_TOKEN)",
         "rate_limits": {
           "requests_per_second": 10,
@@ -359,10 +363,10 @@
   },
 
   "last_updated_by": {
-    "agent": "Intelligence Agent",
-    "session_id": "CDP_2026-03-28_sync",
-    "timestamp": "2026-03-28T00:00:00.000Z"
+    "agent": "Audit — CDP Edge v2.0",
+    "session_id": "CDP_2026-04-10_audit",
+    "timestamp": "2026-04-10T00:00:00.000Z"
   },
 
-  "next_review_date": "2026-04-27T00:00:00.000Z"
+  "next_review_date": "2026-05-10T00:00:00.000Z"
 }

package/dist/commands/install.js

@@ -32,8 +32,7 @@ function printBanner() {
   console.log(chalk.cyan('╚██████╗██████╔╝██║         ███████╗██████╔╝╚██████╔╝███████╗'));
   console.log(chalk.cyan(' ╚═════╝╚═════╝ ╚═╝         ╚══════╝╚═════╝  ╚═════╝╚══════╝'));
   console.log('');
-  console.log(chalk.gray('  Customer Data Platform on the Edge · Quantum Tracking · Cloudflare Native'));
-  console.log(chalk.gray(`  Installer v2.0.0`));
+  console.log(chalk.gray('  Customer Data Platform on the Edge · Global Edge Tracking · v2.0.2'));
   console.log('');
   console.log(chalk.gray('═'.repeat(68)));
   console.log('');

package/dist/commands/setup.js

@@ -19,8 +19,7 @@ function printBanner() {
   console.log(chalk.cyan('╚██████╗██████╔╝██║         ███████╗██████╔╝╚██████╔╝███████╗'));
   console.log(chalk.cyan(' ╚═════╝╚═════╝ ╚═╝         ╚══════╝╚═════╝  ╚═════╝╚══════╝'));
   console.log('');
-  console.log(chalk.gray('  Customer Data Platform on the Edge · Quantum Tracking · Cloudflare Native'));
-  console.log(chalk.gray('  Setup Wizard v2.0.0'));
+  console.log(chalk.gray('  Customer Data Platform on the Edge · Global Edge Tracking · v2.0.2'));
   console.log('');
   console.log(chalk.gray('═'.repeat(68)));
   console.log('');

package/extracted-skill/tracking-events-generator/agents/attribution-agent.md

@@ -264,7 +264,7 @@ function wShapeAttribution(touchpoints) {
 
 ```javascript
 // Modelo Data-Driven simplificado
-async function dataDrivenAttribution(touchpoints, userJourneyHistory) {
+async function dataDrivenAttribution(touchpoints, userJourneyHistory, env) {
   if (!touchpoints || touchpoints.length === 0) return [];
 
   // 1. Calcular pesos baseados em dados históricos
@@ -297,14 +297,14 @@ async function dataDrivenAttribution(touchpoints, userJourneyHistory) {
 }
 
 // Calcular peso de canal baseado em conversão histórica
-async function calculateChannelWeights(touchpoints, history) {
+async function calculateChannelWeights(touchpoints, history, env) {
   const weights = {};
 
   for (const tp of touchpoints) {
     const channel = tp.utm_source;
 
     // Buscar conversões históricas deste canal
-    const historicalConversions = await DB.prepare(`
+    const historicalConversions = await env.DB.prepare(`
       SELECT
         COUNT(*) as total_conversions,
         AVG(value) as avg_value
@@ -325,14 +325,14 @@ async function calculateChannelWeights(touchpoints, history) {
 }
 
 // Calcular peso de posição baseado em conversão histórica
-async function calculatePositionWeights(touchpoints, history) {
+async function calculatePositionWeights(touchpoints, history, env) {
   const weights = {};
 
   for (const tp of touchpoints) {
     const position = tp.position; // 0 = first, 1 = second, etc.
 
     // Buscar conversões históricas nesta posição
-    const historicalConversions = await DB.prepare(`
+    const historicalConversions = await env.DB.prepare(`
       SELECT
         COUNT(*) as total_conversions
       FROM multi_touch_attribution
@@ -458,7 +458,7 @@ CREATE INDEX IF NOT EXISTS idx_channel_model ON channel_performance(attribution_
 
 ```javascript
 // Capturar touchpoint da jornada
-export async function captureTouchpoint(eventData, request) {
+export async function captureTouchpoint(eventData, request, env) {
   const {
     user_id,
     session_id,
@@ -485,7 +485,7 @@ export async function captureTouchpoint(eventData, request) {
   const position = await calculateJourneyPosition(user_id, event_timestamp);
 
   // Persistir touchpoint no D1
-  await DB.prepare(`
+  await env.DB.prepare(`
     INSERT INTO user_journeys
     (user_id, session_id, email, event_id, event_name,
      utm_source, utm_medium, utm_campaign, utm_content, utm_term,
@@ -512,8 +512,8 @@ export async function captureTouchpoint(eventData, request) {
 }
 
 // Calcular posição na jornada
-async function calculateJourneyPosition(userId, eventTimestamp) {
-  const result = await DB.prepare(`
+async function calculateJourneyPosition(userId, eventTimestamp, env) {
+  const result = await env.DB.prepare(`
     SELECT COUNT(*) as position
     FROM user_journeys
     WHERE user_id = ? AND event_timestamp < ?
@@ -523,7 +523,7 @@ async function calculateJourneyPosition(userId, eventTimestamp) {
 }
 
 // Agendar cálculo de atribuição (via Cloudflare Queue)
-async function scheduleAttributionCalculation(email, conversionId, eventName) {
+async function scheduleAttributionCalculation(email, conversionId, eventName, env) {
   await QUEUE.send('cdp-edge-attribution', {
     type: 'CALCULATE_ATTRIBUTION',
     email,
@@ -538,7 +538,7 @@ async function scheduleAttributionCalculation(email, conversionId, eventName) {
 
 ```javascript
 // Calcular atribuição multi-touch
-export async function calculateMultiTouchAttribution(conversionData) {
+export async function calculateMultiTouchAttribution(conversionData, env) {
   const {
     email,
     conversion_id,
@@ -548,7 +548,7 @@ export async function calculateMultiTouchAttribution(conversionData) {
   } = conversionData;
 
   // 1. Buscar jornada completa do usuário
-  const journey = await DB.prepare(`
+  const journey = await env.DB.prepare(`
     SELECT
       user_id,
       session_id,
@@ -594,7 +594,7 @@ export async function calculateMultiTouchAttribution(conversionData) {
   // 3. Persistir atribuição para cada modelo
   for (const [modelName, attribution] of Object.entries(attributionModels)) {
     for (const touchpoint of attribution) {
-      await DB.prepare(`
+      await env.DB.prepare(`
         INSERT OR REPLACE INTO multi_touch_attribution
         (conversion_id, user_id, email, attribution_model, touchpoint_index,
          utm_source, utm_medium, utm_campaign, event_name, event_timestamp,
@@ -628,7 +628,7 @@ export async function calculateMultiTouchAttribution(conversionData) {
 }
 
 // Atualizar performance de canal
-async function updateChannelPerformance(attributionModels, value, currency) {
+async function updateChannelPerformance(attributionModels, value, currency, env) {
   const today = new Date().toISOString().split('T')[0];
 
   for (const [modelName, attribution] of Object.entries(attributionModels)) {
@@ -660,7 +660,7 @@ async function updateChannelPerformance(attributionModels, value, currency) {
 
     // Atualizar tabela de performance
     for (const perf of Object.values(channelPerformance)) {
-      await DB.prepare(`
+      await env.DB.prepare(`
         INSERT OR REPLACE INTO channel_performance
         (utm_source, utm_medium, utm_campaign, attribution_model,
          total_attribution, total_conversions, total_value, avg_conversion_value, date)
@@ -685,7 +685,7 @@ async function updateChannelPerformance(attributionModels, value, currency) {
 
 ```javascript
 // Enviar Purchase com atribuição calculada
-export async function sendPurchaseWithAttribution(conversionData, attributionModel = 'U_SHAPE') {
+export async function sendPurchaseWithAttribution(conversionData, env, attributionModel = 'U_SHAPE') {
   const {
     email,
     conversion_id,
@@ -695,7 +695,7 @@ export async function sendPurchaseWithAttribution(conversionData, attributionMod
   } = conversionData;
 
   // 1. Buscar atribuição calculada
-  const attribution = await DB.prepare(`
+  const attribution = await env.DB.prepare(`
     SELECT
       utm_source,
       utm_medium,
@@ -773,7 +773,7 @@ async function sendMetaPurchaseWithAttribution(purchaseData, attribution) {
   const response = await fetch('https://graph.facebook.com/v22.0/events', {
     method: 'POST',
     headers: {
-      'Authorization': `Bearer ${META_ACCESS_TOKEN}`,
+      'Authorization': `Bearer ${env.META_ACCESS_TOKEN}`,
       'Content-Type': 'application/json'
     },
     body: JSON.stringify({ data: [payload] })
@@ -829,7 +829,7 @@ async function sendTikTokPurchaseWithAttribution(purchaseData, attribution) {
   const response = await fetch('https://business-api.tiktok.com/open_api/v1.3/pixel/conversion/', {
     method: 'POST',
     headers: {
-      'Authorization': `Bearer ${TIKTOK_ACCESS_TOKEN}`,
+      'Authorization': `Bearer ${env.TIKTOK_ACCESS_TOKEN}`,
       'Content-Type': 'application/json'
     },
     body: JSON.stringify(payload)
@@ -1036,7 +1036,7 @@ export async function getAttributionForConversion(request, env) {
   }
 
   // Buscar atribuição calculada
-  const attribution = await DB.prepare(`
+  const attribution = await env.DB.prepare(`
     SELECT
       utm_source,
       utm_medium,
@@ -1052,7 +1052,7 @@ export async function getAttributionForConversion(request, env) {
   `).bind(conversionId, model).all();
 
   // Buscar dados da conversão
-  const conversion = await DB.prepare(`
+  const conversion = await env.DB.prepare(`
     SELECT
       value,
       currency,
@@ -1096,7 +1096,7 @@ export async function compareAttributionModels(request, env) {
   const comparison = {};
 
   for (const model of ATTRIBUTION_CONFIG.available_models) {
-    const attribution = await DB.prepare(`
+    const attribution = await env.DB.prepare(`
       SELECT
         utm_source,
         credit_percentage
@@ -1136,7 +1136,7 @@ export async function getChannelPerformance(request, env) {
   const days = parseInt(url.searchParams.get('days') || '30');
   const groupBy = url.searchParams.get('group_by') || 'source'; // 'source' ou 'campaign'
 
-  const performance = await DB.prepare(`
+  const performance = await env.DB.prepare(`
     SELECT
       ${groupBy === 'source' ? 'utm_source' : 'utm_campaign'} as group_by,
       SUM(total_attribution) as total_attribution,

package/extracted-skill/tracking-events-generator/agents/browser-tracking.md

@@ -109,99 +109,199 @@ Implementado via `anti-blocking.js`:
 
 ## 💻 EXEMPLO DE CÓDIGO GERADO
 
-### `cdpTrack.js` (SDK Principal)
+### `cdpTrack.js` (SDK Principal — Padrão Multi-Plataforma)
+
+> Este é o padrão canônico do cdpTrack SDK para Meta, TikTok e GA4.
+> Cada agente de plataforma injeta seus eventos neste SDK via Browser Tracking Agent.
 
 ```javascript
 /**
  * cdpTrack SDK - CDP Edge Quantum Tier
  * Browser Tracking SDK Principal
+ * Suporta: Meta Pixel, TikTok Pixel, GA4, Pinterest Tag, Reddit Pixel, Spotify Pixel
  */
 
-(function(w, d, s, l) {
-  w._pbq = w._pbq || [];
-  w._pbq.push = w._pbq.push || [];
-  w._spotify = w._spotify || {};
-
-  // Carregar configuração
-  const config = window.cdpTrack?.config || {};
+(function(w) {
+  'use strict';
 
-  // Inicializar Spotify Pixel (se configurado)
-  if (config.spotifyPixelId) {
-    w._spotify.pixelId = config.spotifyPixelId;
-    w._spotify.currency = config.currency || 'USD';
+  // ──────────────────────────────────────────────
+  // CORE: Geração de event_id único (deduplicação)
+  // O mesmo event_id deve ser usado no browser E no servidor (CAPI)
+  // ──────────────────────────────────────────────
+  function generateEventId() {
+    return 'evt_' + Date.now() + '_' + Math.random().toString(36).substring(2, 11);
   }
 
-  // Função principal de envio
-  w._spotify.trackEvent = function(eventName, params) {
-    const eventId = cdpTrack.generateEventId();
-
-    // Track localmente
-    w._spq.push({
-      e: eventName,
-      params: params,
-      eventId: eventId,
-      platform: 'spotify'
-    });
-
-    // Enviar para servidor (via cdpTrack)
-    if (window.cdpTrack && window.cdpTrack.submit) {
-      window.cdpTrack.submit('spotify', {
-        event: eventName,
-        event_id: eventId,
-        ...params
+  // ──────────────────────────────────────────────
+  // CORE: Envio para Cloudflare Worker (same-domain)
+  // Usa /track no mesmo domínio — imune a ad-blockers
+  // ──────────────────────────────────────────────
+  async function sendToWorker(eventName, payload) {
+    const eventId = generateEventId();
+
+    const body = {
+      event:    eventName,
+      event_id: eventId,   // CRÍTICO: mesmo ID usado nas CAPIs
+      url:      window.location.href,
+      referrer: document.referrer,
+      timestamp: Date.now(),
+      ...payload
+    };
+
+    try {
+      // Tentativa primária: fetch
+      await fetch('/track', {
+        method:  'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body:    JSON.stringify(body),
+        keepalive: true
       });
+    } catch (_) {
+      // Fallback: Beacon API (funciona mesmo no unload da página)
+      navigator.sendBeacon('/track', JSON.stringify(body));
     }
-  };
 
-  // Eventos Padrão Spotify
-  w._spotify.Content = function(contentName, contentId, params) {
-    w._spotify.trackEvent('ViewContent', {
-      content_name: contentName,
-      content_id: contentId,
-      ...params
-    });
-  };
+    return eventId;
+  }
 
-  w._spotify.AddToCart = function(contentName, contentId, cartId, params) {
-    w._spotify.trackEvent('AddToCart', {
-      content_name: contentName,
-      content_id: contentId,
-      cart_id: cartId,
-      ...params
-    });
-  };
+  // ──────────────────────────────────────────────
+  // CORE: Captura de cookies first-party
+  // ──────────────────────────────────────────────
+  function getCookie(name) {
+    const match = document.cookie.match(new RegExp('(^| )' + name + '=([^;]+)'));
+    return match ? decodeURIComponent(match[2]) : null;
+  }
 
-  w._spotify.Purchase = function(contentName, contentId, value, currency, params) {
-    w._spotify.trackEvent('Purchase', {
-      content_name: contentName,
-      content_id: contentId,
-      value: value,
-      currency: currency,
-      ...params
-    });
-  };
+  // ──────────────────────────────────────────────
+  // CORE: Captura de click IDs da URL (Meta, TikTok, Google)
+  // ──────────────────────────────────────────────
+  function getClickIds() {
+    const params = new URLSearchParams(window.location.search);
+    return {
+      fbclid:  params.get('fbclid')  || getCookie('fbclid')  || null,
+      ttclid:  params.get('ttclid')  || getCookie('ttclid')  || null,
+      gclid:   params.get('gclid')   || null,
+      gbraid:  params.get('gbraid')  || null,
+      wbraid:  params.get('wbraid')  || null,
+      fbp:     getCookie('_fbp')     || null,
+      fbc:     getCookie('_fbc')     || null,
+      ttp:     getCookie('_ttp')     || null,
+      uid:     getCookie('_cdp_uid') || null   // Identity Graph first-party cookie
+    };
+  }
 
-  w._spotify.Lead = function(contentName, contentId, leadType, params) {
-    w._spotify.trackEvent('Lead', {
-      content_name: contentName,
-      content_id: contentId,
-      lead_type: leadType,
-      ...params
-    });
-  };
+  // ──────────────────────────────────────────────
+  // API PÚBLICA
+  // ──────────────────────────────────────────────
+  const cdpTrack = {
+    generateEventId,
+
+    /**
+     * Rastrear evento genérico — enviado para o Worker
+     * O Worker despacha para Meta CAPI, GA4 MP, TikTok Events API etc.
+     *
+     * @param {string} eventName  - Nome do evento (ex: 'Lead', 'Purchase', 'PageView')
+     * @param {Object} params     - Parâmetros adicionais do evento
+     */
+    track(eventName, params = {}) {
+      const clickIds = getClickIds();
+      return sendToWorker(eventName, { ...clickIds, ...params });
+    },
+
+    /**
+     * Rastrear Lead (captura de formulário)
+     * Enviar dados PII crus — o Worker faz SHA-256 no servidor
+     */
+    trackLead(userData = {}) {
+      const clickIds = getClickIds();
+      return sendToWorker('Lead', {
+        ...clickIds,
+        email:      userData.email      || null,   // Worker aplica SHA-256
+        phone:      userData.phone      || null,   // Worker aplica E.164 + SHA-256
+        first_name: userData.first_name || null,
+        last_name:  userData.last_name  || null,
+        city:       userData.city       || null,
+        state:      userData.state      || null,
+        zip:        userData.zip        || null,
+        country:    userData.country    || 'BR'
+      });
+    },
 
-  w._spotify.Signup = function(contentName, contentId, signupType, params) {
-    w._spotify.trackEvent('Signup', {
-      content_name: contentName,
-      content_id: contentId,
-      signup_type: signupType,
-      ...params
-    });
+    /**
+     * Rastrear Purchase (confirmação de compra)
+     */
+    trackPurchase(orderData = {}) {
+      const clickIds = getClickIds();
+      return sendToWorker('Purchase', {
+        ...clickIds,
+        value:        orderData.value    || 0,
+        currency:     orderData.currency || 'BRL',
+        order_id:     orderData.order_id || null,
+        content_name: orderData.product  || null
+      });
+    },
+
+    /**
+     * Rastrear PageView — chamar no load da página
+     */
+    trackPageView() {
+      const clickIds = getClickIds();
+      return sendToWorker('PageView', { ...clickIds });
+    },
+
+    /**
+     * Rastrear InitiateCheckout
+     */
+    trackInitiateCheckout(checkoutData = {}) {
+      const clickIds = getClickIds();
+      return sendToWorker('InitiateCheckout', {
+        ...clickIds,
+        value:    checkoutData.value    || 0,
+        currency: checkoutData.currency || 'BRL'
+      });
+    }
   };
 
-})(window, document, 'script', 'location');
+  // Expor no window
+  w.cdpTrack = cdpTrack;
+
+  // Auto page_view no load
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', () => cdpTrack.trackPageView());
+  } else {
+    cdpTrack.trackPageView();
+  }
+
+})(window);
 ```
 
+### Uso típico no HTML do cliente
+
+```html
+<!-- 1. Carregar o SDK -->
+<script src="/tracking/cdpTrack.js"></script>
+
+<!-- 2. Rastrear lead ao submeter formulário -->
+<script>
+document.getElementById('lead-form').addEventListener('submit', function(e) {
+  cdpTrack.trackLead({
+    email:      document.getElementById('email').value,
+    phone:      document.getElementById('phone').value,
+    first_name: document.getElementById('name').value
+  });
+});
+</script>
+
+<!-- 3. Rastrear checkout (botão de compra) -->
+<script>
+document.getElementById('buy-btn').addEventListener('click', function() {
+  cdpTrack.trackInitiateCheckout({ value: 97.00, currency: 'BRL' });
+});
+</script>
+```
+
+> **Nota:** O Worker recebe os dados crus, aplica SHA-256, e despacha para Meta CAPI v22.0, GA4 MP, TikTok Events API v1.3 e demais plataformas configuradas — tudo em paralelo via `Promise.allSettled`.
+
 ---
 
 ## 🔧 INTEGRAÇÃO COM OUTROS AGENTES

package/extracted-skill/tracking-events-generator/agents/compliance-agent.md

@@ -2044,6 +2044,26 @@ async function handleGetCurrentPolicy(request, env) {
 - **security-enterprise-agent.md**: Usa encryption de PII para LGPD/GDPR
 - **attribution-agent.md**: Respeita consentimento para analytics e marketing
 - **master-orchestrator.md**: Implementa middleware de consentimento antes de tracking
+- **validator-agent.md**: O Compliance Agent DEVE ser consultado pelo Validator Agent para verificar conformidade de PII. Fluxo:
+
+```
+validator-agent (auditoria do código gerado)
+    └─► checkComplianceCompliance(generatedCode)
+            ├─ Verificar: SHA-256 aplicado em todos os campos PII (em, ph, fn, ln)?
+            ├─ Verificar: Google Consent Mode v2 implementado (ad_storage, analytics_storage)?
+            ├─ Verificar: url_passthrough: true ativo?
+            ├─ Verificar: PII nunca logada em plaintext?
+            └─ Verificar: opt-in explícito antes de tracking de marketing?
+
+// No validator-agent, chamar:
+const complianceCheck = await validateComplianceRequirements(generatedBrowserCode, generatedWorkerCode);
+if (!complianceCheck.passed) {
+  // Bloquear entrega e reportar issues ao Master Orchestrator
+  return { status: 'BLOCKED', issues: complianceCheck.issues };
+}
+```
+
+- **google-agent.md**: Consent Mode v2 gerado por este agente valida conformidade detectada pelo Compliance Agent
 
 ---