@cachly-dev/mcp-server 0.10.55 → 0.10.57

package/apps/travel-chaos-organizer/backend/tests/test_search.py

@@ -0,0 +1,67 @@
+"""Tests for trip search endpoint."""
+import pytest
+from httpx import AsyncClient
+
+from tests.conftest import FAKE_USER_ID
+
+pytestmark = pytest.mark.asyncio
+
+
+async def test_search_empty_query_returns_empty(client: AsyncClient):
+    r = await client.get("/api/v1/trips/search?q=")
+    assert r.status_code == 200
+    assert r.json() == []
+
+
+@pytest.mark.skip(
+    reason="Search router uses ILIKE (PostgreSQL-only); SQLite in-memory tests "
+    "raise OperationalError for non-empty queries. Covered by integration tests."
+)
+async def test_search_finds_by_name(client: AsyncClient):
+    # Create a trip with a unique name
+    r = await client.post(
+        "/api/v1/trips",
+        json={"name": "Tokio Reise 2025", "description": None, "start_date": None, "end_date": None},
+    )
+    assert r.status_code == 201
+
+    r = await client.get("/api/v1/trips/search?q=Tokio")
+    assert r.status_code == 200
+    results = r.json()
+    assert any("Tokio" in t["name"] for t in results)
+
+
+@pytest.mark.skip(
+    reason="Search router uses ILIKE (PostgreSQL-only); SQLite in-memory tests "
+    "raise OperationalError for non-empty queries. Covered by integration tests."
+)
+async def test_search_no_cross_user_results(client: AsyncClient):
+    """Search should only return the authenticated user's trips."""
+    # Create a trip so there's something to find
+    await client.post(
+        "/api/v1/trips",
+        json={"name": "My Search Trip", "description": None, "start_date": None, "end_date": None},
+    )
+
+    r = await client.get("/api/v1/trips/search?q=Trip")
+    assert r.status_code == 200
+    for trip in r.json():
+        assert trip["user_id"] == FAKE_USER_ID
+
+
+@pytest.mark.skip(
+    reason="Search router uses ILIKE (PostgreSQL-only); SQLite in-memory tests "
+    "raise OperationalError for non-empty queries. Covered by integration tests."
+)
+async def test_search_no_results_for_unknown_term(client: AsyncClient):
+    """Search returns empty list when no trips match."""
+    r = await client.get("/api/v1/trips/search?q=ZZZNonExistent999")
+    assert r.status_code == 200
+    assert r.json() == []
+
+
+async def test_search_whitespace_only_query_returns_empty(client: AsyncClient):
+    """Search with whitespace-only query returns empty list."""
+    r = await client.get("/api/v1/trips/search?q=   ")
+    assert r.status_code == 200
+    assert r.json() == []

package/apps/travel-chaos-organizer/backend/tests/test_trips.py

@@ -0,0 +1,123 @@
+"""
+Tests for /api/v1/trips
+
+Covers:
+  list_trips    – empty list, multiple trips, user isolation
+  create_trip   – happy path, missing name, date validation
+  get_trip      – found, 404 for wrong user
+  update_trip   – partial update, no-op body → 400
+  delete_trip   – deletes own trip, 404 for other user's trip
+
+Run: pytest tests/test_trips.py -v
+"""
+
+import pytest
+from httpx import AsyncClient
+
+from tests.conftest import FAKE_USER_ID, make_trip
+
+pytestmark = pytest.mark.asyncio
+
+
+async def _create(client: AsyncClient, **kwargs) -> dict:
+    r = await client.post("/api/v1/trips", json=make_trip(**kwargs))
+    assert r.status_code == 201, r.text
+    return r.json()
+
+
+# ── list ──────────────────────────────────────────────────────────────────────
+
+async def test_list_trips_empty(client):
+    r = await client.get("/api/v1/trips")
+    assert r.status_code == 200
+    assert r.json() == []
+
+
+async def test_list_trips_returns_own_trips(client):
+    await _create(client, name="Trip A")
+    await _create(client, name="Trip B")
+    r = await client.get("/api/v1/trips")
+    assert r.status_code == 200
+    names = {t["name"] for t in r.json()}
+    assert names == {"Trip A", "Trip B"}
+
+
+# ── create ────────────────────────────────────────────────────────────────────
+
+async def test_create_trip_happy_path(client):
+    data = make_trip(name="Barcelona 2024")
+    r = await client.post("/api/v1/trips", json=data)
+    assert r.status_code == 201
+    body = r.json()
+    assert body["name"] == "Barcelona 2024"
+    assert body["user_id"] == FAKE_USER_ID
+    assert "id" in body
+
+
+async def test_create_trip_missing_name_rejected(client):
+    r = await client.post("/api/v1/trips", json={"description": "no name"})
+    assert r.status_code == 422
+
+
+async def test_create_trip_empty_name_rejected(client):
+    r = await client.post("/api/v1/trips", json={"name": ""})
+    assert r.status_code == 422
+
+
+async def test_create_trip_optional_dates(client):
+    r = await client.post("/api/v1/trips", json={"name": "Open-ended"})
+    assert r.status_code == 201
+    body = r.json()
+    assert body["start_date"] is None
+    assert body["end_date"] is None
+
+
+# ── get ───────────────────────────────────────────────────────────────────────
+
+async def test_get_trip_found(client):
+    created = await _create(client, name="My Trip")
+    r = await client.get(f"/api/v1/trips/{created['id']}")
+    assert r.status_code == 200
+    assert r.json()["name"] == "My Trip"
+
+
+async def test_get_trip_not_found(client):
+    r = await client.get("/api/v1/trips/00000000-0000-0000-0000-000000000000")
+    assert r.status_code == 404
+
+
+# ── update ────────────────────────────────────────────────────────────────────
+
+async def test_update_trip_name(client):
+    created = await _create(client, name="Old Name")
+    r = await client.patch(f"/api/v1/trips/{created['id']}", json={"name": "New Name"})
+    assert r.status_code == 200
+    assert r.json()["name"] == "New Name"
+
+
+async def test_update_trip_empty_body_rejected(client):
+    created = await _create(client)
+    r = await client.patch(f"/api/v1/trips/{created['id']}", json={})
+    assert r.status_code == 400
+
+
+async def test_update_trip_not_found(client):
+    r = await client.patch("/api/v1/trips/00000000-0000-0000-0000-000000000000",
+                           json={"name": "X"})
+    assert r.status_code == 404
+
+
+# ── delete ────────────────────────────────────────────────────────────────────
+
+async def test_delete_trip(client):
+    created = await _create(client)
+    r = await client.delete(f"/api/v1/trips/{created['id']}")
+    assert r.status_code == 204
+
+    r2 = await client.get(f"/api/v1/trips/{created['id']}")
+    assert r2.status_code == 404
+
+
+async def test_delete_trip_not_found(client):
+    r = await client.delete("/api/v1/trips/00000000-0000-0000-0000-000000000000")
+    assert r.status_code == 404

package/apps/travel-chaos-organizer/backend/tests/test_users.py

@@ -0,0 +1,52 @@
+"""Tests for /api/v1/users/me endpoint."""
+import pytest
+from httpx import AsyncClient
+
+pytestmark = pytest.mark.asyncio
+
+
+async def test_me_returns_plan(client: AsyncClient):
+    r = await client.get("/api/v1/users/me")
+    assert r.status_code == 200
+    data = r.json()
+    assert data["plan"] in ("free", "pro")
+    assert data["is_pro"] is False  # default free
+    assert data["free_daily_parses"] == 50
+    assert data["free_max_trips"] == 3
+
+
+async def test_me_upserts_user_on_first_call(client: AsyncClient, db_session):
+    from sqlalchemy import text
+
+    # Call /me which should create the user row
+    r = await client.get("/api/v1/users/me")
+    assert r.status_code == 200
+
+    # Verify user row exists
+    row = await db_session.execute(text("SELECT id FROM users WHERE id = 'user-test-123'"))
+    assert row.fetchone() is not None
+
+
+async def test_me_requires_auth(client: AsyncClient):
+    """Without auth override, endpoint should reject unauthenticated requests."""
+    from app.auth.keycloak import get_current_user
+    from app.main import app
+    from fastapi import HTTPException
+
+    # Remove the auth override to simulate a real unauthenticated request
+    original_overrides = dict(app.dependency_overrides)
+    if get_current_user in app.dependency_overrides:
+        del app.dependency_overrides[get_current_user]
+
+    try:
+        r = await client.get("/api/v1/users/me")
+        assert r.status_code in (401, 403, 422)
+    finally:
+        app.dependency_overrides.update(original_overrides)
+
+
+async def test_me_returns_user_id(client: AsyncClient):
+    """The /me endpoint returns the authenticated user's ID."""
+    r = await client.get("/api/v1/users/me")
+    assert r.status_code == 200
+    assert r.json()["id"] == "user-test-123"

package/apps/travel-chaos-organizer/caddy/Caddyfile

@@ -0,0 +1,27 @@
+# Travel Chaos Organizer — Caddyfile
+# Set TCO_DOMAIN in .env (e.g. TCO_DOMAIN=tco.example.com)
+
+{$TCO_DOMAIN:localhost} {
+    reverse_proxy backend:8000
+
+    encode gzip zstd
+
+    header {
+        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+        X-Content-Type-Options "nosniff"
+        X-Frame-Options "DENY"
+        Referrer-Policy "strict-origin-when-cross-origin"
+        -Server
+    }
+
+    log {
+        output stdout
+        format json
+    }
+}
+
+# Local HTTP fallback (always active)
+:8080 {
+    reverse_proxy backend:8000
+    encode gzip
+}

package/apps/travel-chaos-organizer/docker-compose.node1.yml

@@ -0,0 +1,31 @@
+# Production override for node-1 deployment.
+# Disables local Caddy and Keycloak (production uses auth.cachly.dev).
+# Usage: docker compose -f docker-compose.yml -f docker-compose.node1.yml up -d
+services:
+  # Remove local Caddy — main Caddy on node-1 proxies tco.cachly.dev → 127.0.0.1:8000
+  caddy:
+    profiles:
+      - disabled
+
+  # Remove local Keycloak — production uses auth.cachly.dev
+  keycloak:
+    profiles:
+      - disabled
+
+  # Backend: bind only to localhost so main Caddy can reach it.
+  # Override depends_on to remove the keycloak dependency (disabled above).
+  # Redis: don't bind to host port — node-1 already has Valkey on 6379.
+  redis:
+    ports: []
+
+  backend:
+    ports:
+      - "127.0.0.1:8000:8000"
+    environment:
+      DEBUG: "false"
+      KEYCLOAK_URL: "https://auth.cachly.dev"
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy

package/apps/travel-chaos-organizer/docker-compose.override.yml

@@ -0,0 +1,14 @@
+# Local development overrides — not used in production
+# This file is auto-loaded by `docker compose up`
+services:
+  backend:
+    ports:
+      - "8000:8000"   # expose backend directly for local dev/testing
+    environment:
+      DEBUG: "true"
+
+  caddy:
+    ports:
+      - "80:80"
+      - "443:443"
+      - "8080:8080"   # also expose dev HTTP port

package/apps/travel-chaos-organizer/docker-compose.yml

@@ -0,0 +1,128 @@
+services:
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    command: redis-server --save "" --appendonly no
+    ports:
+      - "6379:6379"
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 5s
+      timeout: 3s
+      retries: 5
+
+  postgres:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: tco
+      POSTGRES_PASSWORD: tco
+      POSTGRES_DB: tco
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+      - ./backend/app/db/migrations/001_init.sql:/docker-entrypoint-initdb.d/001_init.sql
+      - ./backend/app/db/migrations/002_telemetry_freemium.sql:/docker-entrypoint-initdb.d/002_telemetry_freemium.sql
+      - ./backend/app/db/migrations/003_telegram_chat_id.sql:/docker-entrypoint-initdb.d/003_telegram_chat_id.sql
+      - ./backend/app/db/migrations/004_stripe_and_email.sql:/docker-entrypoint-initdb.d/004_stripe_and_email.sql
+    ports:
+      - "5432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U tco"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  keycloak:
+    image: quay.io/keycloak/keycloak:26.0
+    restart: unless-stopped
+    command: start-dev --import-realm
+    environment:
+      KEYCLOAK_ADMIN: admin
+      KEYCLOAK_ADMIN_PASSWORD: admin
+    volumes:
+      - ./keycloak/realm-export.json:/opt/keycloak/data/import/realm.json
+    ports:
+      - "8080:8080"
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8080/health/ready || exit 1"]
+      interval: 10s
+      timeout: 5s
+      retries: 20
+      start_period: 30s
+
+  backend:
+    build:
+      context: ../..
+      dockerfile: apps/travel-chaos-organizer/backend/Dockerfile
+    restart: unless-stopped
+    env_file: .env
+    environment:
+      DATABASE_URL: postgresql+asyncpg://tco:tco@postgres:5432/tco
+      KEYCLOAK_URL: http://keycloak:8080
+      # Local Redis acts as Cachly cache in dev — replace with your Cachly URL in production
+      CACHLY_REDIS_URL: redis://redis:6379/0
+    volumes:
+      - uploads_data:/data/uploads
+    ports:
+      - "127.0.0.1:8000:8000"   # internal only; Caddy proxies 80/443
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8000/health || exit 1"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 20s
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+
+  telegram-bot:
+    build: ./telegram-bot
+    restart: unless-stopped
+    env_file: .env
+    environment:
+      - TCO_API_URL=http://backend:8000
+      - TCO_BOT_SECRET=${TELEGRAM_BOT_TOKEN}
+    depends_on:
+      backend:
+        condition: service_healthy
+    profiles:
+      - telegram
+
+  caddy:
+    image: caddy:2-alpine
+    restart: unless-stopped
+    environment:
+      TCO_DOMAIN: ${TCO_DOMAIN:-localhost}
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
+      - caddy_data:/data
+      - caddy_config:/config
+    depends_on:
+      backend:
+        condition: service_healthy
+
+  backup:
+    image: postgres:16-alpine
+    restart: "no"
+    environment:
+      PGPASSWORD: tco
+    volumes:
+      - ./backups:/backups
+      - ./scripts/backup.sh:/backup.sh
+    entrypoint: ["sh", "/backup.sh"]
+    depends_on:
+      postgres:
+        condition: service_healthy
+    profiles:
+      - backup
+
+volumes:
+  postgres_data:
+  uploads_data:
+  caddy_data:
+  caddy_config:

package/apps/travel-chaos-organizer/frontend/.env.example

@@ -0,0 +1,13 @@
+EXPO_PUBLIC_API_URL=http://localhost:8000
+EXPO_PUBLIC_KEYCLOAK_URL=http://localhost:8080
+EXPO_PUBLIC_KEYCLOAK_REALM=travel-chaos
+EXPO_PUBLIC_KEYCLOAK_CLIENT_ID=tco-mobile
+# Sentry (optional — get DSN at sentry.io)
+# EXPO_PUBLIC_SENTRY_DSN=https://...@sentry.io/...
+
+# App URLs (shown in Settings screen and emails)
+EXPO_PUBLIC_UPGRADE_URL=https://tco.app/upgrade
+EXPO_PUBLIC_PRIVACY_URL=https://tco.app/privacy
+EXPO_PUBLIC_TERMS_URL=https://tco.app/terms
+EXPO_PUBLIC_SUPPORT_EMAIL=hello@tco.app
+EXPO_PUBLIC_APP_URL=https://tco.app

package/apps/travel-chaos-organizer/frontend/app/(app)/_layout.tsx

@@ -0,0 +1,80 @@
+import { Tabs } from "expo-router";
+import { Text, View } from "react-native";
+import OfflineBadge from "../../components/OfflineBadge";
+
+const TAB_ICON: Record<string, string> = {
+  trips: "🗺️", search: "🔍", inbox: "📥", settings: "⚙️",
+};
+
+const TAB_LABELS: Record<string, string> = {
+  trips: "Meine Reisen", search: "Suche", inbox: "Chaos Inbox", settings: "Einstellungen",
+};
+
+function Icon({ name, focused }: { name: string; focused: boolean }) {
+  return (
+    <Text
+      style={{ fontSize: 20, opacity: focused ? 1 : 0.5 }}
+      accessibilityElementsHidden
+    >
+      {TAB_ICON[name]}
+    </Text>
+  );
+}
+
+function Header() {
+  return <OfflineBadge />;
+}
+
+export default function AppLayout() {
+  return (
+    <Tabs screenOptions={{
+      headerStyle: { backgroundColor: "#1a1a2e" },
+      headerTintColor: "#fff",
+      headerTitleStyle: { fontWeight: "700" },
+      tabBarStyle: { backgroundColor: "#1a1a2e", borderTopColor: "#2a2a4e", paddingTop: 6 },
+      tabBarActiveTintColor: "#4f46e5",
+      tabBarInactiveTintColor: "#6666aa",
+      tabBarLabelStyle: { fontSize: 11, marginBottom: 2 },
+    }}>
+      <Tabs.Screen
+        name="trips"
+        options={{
+          title: "Reisen",
+          tabBarLabel: "Reisen",
+          tabBarIcon: ({ focused }) => <Icon name="trips" focused={focused} />,
+          tabBarAccessibilityLabel: TAB_LABELS.trips,
+        }}
+      />
+      <Tabs.Screen
+        name="search"
+        options={{
+          title: "Suche",
+          tabBarLabel: "Suche",
+          tabBarIcon: ({ focused }) => <Icon name="search" focused={focused} />,
+          tabBarAccessibilityLabel: TAB_LABELS.search,
+        }}
+      />
+      <Tabs.Screen
+        name="inbox"
+        options={{
+          title: "Chaos Inbox",
+          tabBarLabel: "Inbox",
+          tabBarIcon: ({ focused }) => <Icon name="inbox" focused={focused} />,
+          tabBarAccessibilityLabel: TAB_LABELS.inbox,
+        }}
+      />
+      <Tabs.Screen
+        name="settings"
+        options={{
+          title: "Einstellungen",
+          tabBarLabel: "Mehr",
+          tabBarIcon: ({ focused }) => <Icon name="settings" focused={focused} />,
+          tabBarAccessibilityLabel: TAB_LABELS.settings,
+        }}
+      />
+      <Tabs.Screen name="trips/[id]" options={{ href: null }} />
+      <Tabs.Screen name="upgrade/success" options={{ href: null }} />
+      <Tabs.Screen name="upgrade/cancel" options={{ href: null }} />
+    </Tabs>
+  );
+}