DubixGuardDubixGuard
Updates

Release notes

Platform improvements, new features, and enhancements.

v4.2.0minor

Ghost Click Protection & Zero-Downtime Tracking Template Integration

Zero-downtime architecture: account-level tracking template injection, self-healing state reconciliation, and useAdvancedTracking feature flag.

  • TenantSettings.useAdvancedTracking flag (default off — existing 30s recon preserved)
  • Account-level Final URL suffix: utm_campaign={campaignid}
  • State Reconciliation worker — auto-repair for removed templates and new campaigns
  • Parallel BullMQ queue: tracking-template-reconciliation (independent from gclid-reconciliation)
  • Automatic initial injection after OAuth connect and admin toggle
v4.0.0major

Super Admin Panel & System Telemetry

Phase 18: Enterprise super admin panel, tenant telemetry, funnel analysis, and secure impersonation.

  • admin-panel Next.js app (port 3003)
  • JWT-based SUPER_ADMIN authentication
  • Tenant list, system health, BullMQ queue metrics
  • Audit-logged tenant impersonation for support
  • Funnel drop-off analysis
v3.6.0minor

Consent Layer & SDK v2.3

GDPR-compliant consent banner, opt-out API, and Customer Match allowlist preparation.

  • SDK v2.3 integrated consent banner
  • ConsentRecord table and opt-out endpoint
  • Customer Match upload for consented users only
  • Dashboard Customer Match readiness checklist
v3.5.0minor

DataCenter Export & Positive Customer Match

Phase 16: Central intelligence export and positive audience seed upload.

  • Anomaly + blacklist bulk export to DataCenter API
  • Hashed email/phone → positive UserList
  • Payment webhook → ConversionContact queue
  • Batch size 50, exponential backoff workers
v3.4.0major

Campaign Cross-Check & Attack Monitor

Hot-path cross-check against parameter campaign attacks and live attack metrics.

  • evaluateCampaignCrossCheck hot-path layer
  • CAMPAIGN_ID_MISMATCH / CAMPAIGN_ATTRIBUTION_MISMATCH signals
  • campaignAliasMap Redis cache
  • Attack Monitor: ghost gclid, 403, mismatch counters
  • gclid reconciliation worker improvements
v3.3.0minor

Mobile-Only Defense Matrix

Phase 15: Hardware mobile verification for local service campaigns.

  • MISSING_TOUCH_ENTROPY signal
  • DESKTOP_EMULATING_MOBILE detection
  • Tenant opt-in mobileOnlyDefense setting
  • Portrait and connectionType entropy checks
v3.2.0minor

Landing Beacon & Live Logs

Phase 9: Landing beacon requirement for gclid security and real-time dashboard.

  • SDK landing + interaction beacon separation
  • MISSING_LANDING_BEACON zero-tolerance 403
  • Live activity logs (3s polling)
  • Overview 5s polling + cross-browser profiles
v3.1.0minor

Layered Threat Engine

Phase 8: Cross-browser abuse, hardware profile, and strict bot rules.

  • Hardware profile hash (cross-browser)
  • COORDINATE_REPEAT behavior signal
  • IP rotation + cross-browser burst detection
  • Trust score EWMA and daily device limit
  • BlockRule manual IP/CIDR/fingerprint rules
v3.0.0major

MySQL 8.0 Migration

Phase 11: Production database migrated from PostgreSQL to MySQL 8.0.

  • Prisma MySQL provider
  • Docker compose MySQL 8.0 service
  • Hot-path Redis-only preserved
v2.8.0minor

Refund Reports & IP Rotation

Phase 12-13: Evidence-based refund export and 500 IP LRU rotation.

  • Weekly/monthly fraud refund reports (JSON/CSV)
  • Google Invalid Click Investigation ready format
  • 500 IP exclusion LRU eviction