Track social engagement for partner platforms

apps/web/.env.example

@@ -169,6 +169,9 @@ YOUTUBE_API_KEY=
 # Scrape Creators
 SCRAPECREATORS_API_KEY=
 
+# X API (Twitter) - for social engagement tracking
+X_API_BEARER_TOKEN=
+
 # Paypal
 PAYPAL_CLIENT_ID=
 PAYPAL_CLIENT_SECRET=

apps/web/app/(ee)/api/bounties/[bountyId]/sync-social-metrics/route.ts

@@ -2,6 +2,7 @@ import { DubApiError } from "@/lib/api/errors";
 import { getDefaultProgramIdOrThrow } from "@/lib/api/programs/get-default-program-id-or-throw";
 import { parseRequestBody } from "@/lib/api/utils";
 import { withWorkspace } from "@/lib/auth";
+import { detectBountySubmissionFraud } from "@/lib/bounty/api/detect-bounty-submission-fraud";
 import { getBountyOrThrow } from "@/lib/bounty/api/get-bounty-or-throw";
 import { getSocialMetricsUpdates } from "@/lib/bounty/api/get-social-metrics-updates";
 import { resolveBountyDetails } from "@/lib/bounty/utils";
@@ -51,6 +52,7 @@ export const POST = withWorkspace(
                 id: true,
                 urls: true,
                 status: true,
+                partnerId: true,
                 partner: true,
               },
             },
@@ -142,6 +144,34 @@ export const POST = withWorkspace(
         socialMetricsLastSyncedAt,
       };
 
+      if (socialMetricCount != null) {
+        const partnerPlatformBaseline = await prisma.partnerPlatform.findUnique(
+          {
+            where: {
+              partnerId_type: {
+                partnerId: submission.partnerId,
+                type: bountyInfo.socialPlatform!.value,
+              },
+            },
+            select: {
+              medianViews: true,
+              medianLikes: true,
+              medianComments: true,
+              medianEngagementRate: true,
+              subscribers: true,
+            },
+          },
+        );
+
+        const fraudResult = detectBountySubmissionFraud({
+          socialMetricCount,
+          bountyMetric: bountyInfo.socialMetrics!.metric,
+          partnerPlatform: partnerPlatformBaseline,
+        });
+        updateData.fraudRiskLevel = fraudResult.fraudRiskLevel;
+        updateData.fraudFlags = fraudResult.fraudFlags;
+      }
+
       const hasMetCriteria =
         socialMetricCount != null &&
         bountyInfo.socialMetrics?.minCount != null &&

apps/web/app/(ee)/api/cron/bounties/sync-social-metrics/route.ts

@@ -1,3 +1,4 @@
+import { detectBountySubmissionFraud } from "@/lib/bounty/api/detect-bounty-submission-fraud";
 import { getSocialMetricsUpdates } from "@/lib/bounty/api/get-social-metrics-updates";
 import { resolveBountyDetails } from "@/lib/bounty/utils";
 import { qstash } from "@/lib/cron";
@@ -70,6 +71,7 @@ export const POST = withCron(async ({ rawBody }) => {
       urls: true,
       socialMetricCount: true,
       status: true,
+      partnerId: true,
       partner: {
         select: {
           email: true,
@@ -99,6 +101,31 @@ export const POST = withCron(async ({ rawBody }) => {
     submissions,
   });
 
+  // Batch-fetch partner platform baselines for fraud detection
+  const partnerIds = [...new Set(submissions.map((s) => s.partnerId))];
+  const partnerPlatforms = await prisma.partnerPlatform.findMany({
+    where: {
+      partnerId: {
+        in: partnerIds,
+      },
+      type: bountyInfo.socialPlatform!.value,
+      verifiedAt: {
+        not: null,
+      },
+    },
+    select: {
+      partnerId: true,
+      medianViews: true,
+      medianLikes: true,
+      medianComments: true,
+      medianEngagementRate: true,
+      subscribers: true,
+    },
+  });
+  const baselineByPartnerId = new Map(
+    partnerPlatforms.map((p) => [p.partnerId, p]),
+  );
+
   const minCount = bountyInfo.socialMetrics?.minCount;
 
   if (!minCount) {
@@ -134,6 +161,16 @@ export const POST = withCron(async ({ rawBody }) => {
       socialMetricsLastSyncedAt,
     };
 
+    if (socialMetricCount != null) {
+      const fraudResult = detectBountySubmissionFraud({
+        socialMetricCount,
+        bountyMetric: bountyInfo.socialMetrics!.metric,
+        partnerPlatform: baselineByPartnerId.get(submission.partnerId) ?? null,
+      });
+      updateData.fraudRiskLevel = fraudResult.fraudRiskLevel;
+      updateData.fraudFlags = fraudResult.fraudFlags;
+    }
+
     if (shouldTransitionToSubmitted) {
       updateData.status = "submitted";
       updateData.completedAt = now;

apps/web/app/(ee)/api/cron/partner-platforms/route.ts

@@ -1,9 +1,9 @@
+import { qstash } from "@/lib/cron";
+import { withCron } from "@/lib/cron/with-cron";
 import {
   AccountNotFoundError,
   getSocialProfile,
-} from "@/lib/api/scrape-creators/get-social-profile";
-import { qstash } from "@/lib/cron";
-import { withCron } from "@/lib/cron/with-cron";
+} from "@/lib/social-platforms/get-social-profile";
 import { prisma } from "@dub/prisma";
 import { APP_DOMAIN_WITH_NGROK } from "@dub/utils";
 import { subDays } from "date-fns";
@@ -89,6 +89,9 @@ export const POST = withCron(async ({ rawBody }) => {
         });
 
         const newStats = {
+          ...(socialProfile.platformId && {
+            platformId: socialProfile.platformId,
+          }),
           subscribers: socialProfile.subscribers,
           posts: socialProfile.posts,
           avatarUrl: socialProfile.avatarUrl,

apps/web/app/(ee)/api/cron/queue-sync-social-engagement/route.ts

@@ -0,0 +1,45 @@
+import { enqueueBatchJobs } from "@/lib/cron/enqueue-batch-jobs";
+import { withCron } from "@/lib/cron/with-cron";
+import { prisma } from "@dub/prisma";
+import { APP_DOMAIN_WITH_NGROK } from "@dub/utils";
+import { logAndRespond } from "../utils";
+
+export const dynamic = "force-dynamic";
+
+// GET /api/cron/queue-sync-social-engagement
+// Runs daily at 07:00 UTC. Queues one sync job per eligible partner platform.
+export const GET = withCron(async () => {
+  const partnerPlatforms = await prisma.partnerPlatform.findMany({
+    where: {
+      verifiedAt: {
+        not: null,
+      },
+      platformId: {
+        not: null,
+      },
+      type: {
+        in: ["twitter"],
+      },
+    },
+    select: {
+      id: true,
+    },
+  });
+
+  if (partnerPlatforms.length === 0) {
+    return logAndRespond("No eligible partner platforms for engagement sync.");
+  }
+
+  const jobs = await enqueueBatchJobs(
+    partnerPlatforms.map((pp) => ({
+      queueName: "sync-social-engagement",
+      url: `${APP_DOMAIN_WITH_NGROK}/api/cron/sync-social-engagement`,
+      deduplicationId: pp.id,
+      body: {
+        partnerPlatformId: pp.id,
+      },
+    })),
+  );
+
+  return logAndRespond(`Queued ${jobs.length} social engagement sync jobs.`);
+});