@cachly-dev/mcp-server 0.10.65 → 0.10.67

package/apps/travel-chaos-organizer/backend/tests/test_payments.py

@@ -1,163 +0,0 @@
-"""Tests for Stripe webhook handling (signature bypassed, event structure tested)."""
-import json
-from unittest.mock import patch, MagicMock
-import pytest
-from httpx import AsyncClient
-
-# All webhook tests use client fixture from conftest
-# Stripe signature verification is mocked
-
-CHECKOUT_EVENT = {
-    "type": "checkout.session.completed",
-    "data": {"object": {
-        "metadata": {"user_id": "user-test-123"},
-        "client_reference_id": "user-test-123",
-        "customer": "cus_test123",
-        "amount_total": 999,
-        "currency": "eur",
-    }},
-}
-
-SUBSCRIPTION_DELETED_EVENT = {
-    "type": "customer.subscription.deleted",
-    "data": {"object": {"customer": "cus_test123"}},
-}
-
-PAYMENT_SUCCEEDED_EVENT = {
-    "type": "invoice.payment_succeeded",
-    "data": {"object": {"subscription": "sub_123", "customer": "cus_test123"}},
-}
-
-PAYMENT_FAILED_EVENT_ATTEMPT1 = {
-    "type": "invoice.payment_failed",
-    "data": {"object": {"customer": "cus_test123", "attempt_count": 1}},
-}
-
-PAYMENT_FAILED_EVENT_ATTEMPT3 = {
-    "type": "invoice.payment_failed",
-    "data": {"object": {"customer": "cus_test123", "attempt_count": 3}},
-}
-
-
-def mock_stripe_webhook(event_dict):
-    """Patch stripe to bypass signature verification and return our event dict."""
-    mock_event = MagicMock()
-    mock_event.__getitem__ = lambda self, key: event_dict[key]
-    mock_event.get = lambda key, default=None: event_dict.get(key, default)
-    mock_event["type"] = event_dict["type"]
-    mock_event["data"] = event_dict["data"]
-    return mock_event
-
-
-@pytest.mark.asyncio
-async def test_webhook_no_stripe_configured_returns_ok(client: AsyncClient):
-    """When stripe not configured, webhook returns 200 immediately."""
-    with patch("app.routers.payments.get_settings") as mock_settings:
-        mock_settings.return_value.stripe_secret_key = ""
-        r = await client.post("/api/v1/payments/webhook",
-                              content=b"{}",
-                              headers={"stripe-signature": "test"})
-    assert r.status_code == 200
-
-
-@pytest.mark.asyncio
-async def test_webhook_missing_signature_returns_400(client: AsyncClient):
-    """Missing Stripe-Signature header returns 400."""
-    with patch("app.routers.payments.get_settings") as mock_settings:
-        mock_settings.return_value.stripe_secret_key = "sk_test_123"
-        mock_settings.return_value.stripe_webhook_secret = "whsec_test"
-        r = await client.post("/api/v1/payments/webhook", content=b"{}")
-    assert r.status_code == 400
-    assert "Stripe-Signature" in r.json()["detail"]
-
-
-@pytest.mark.asyncio
-async def test_checkout_completed_upgrades_user(client: AsyncClient):
-    """checkout.session.completed sets user to pro and stores customer_id."""
-    from unittest.mock import AsyncMock
-    import stripe as stripe_mod
-    mock_event = {
-        "type": "checkout.session.completed",
-        "data": {"object": {
-            "metadata": {"user_id": "user-test-123"},
-            "client_reference_id": "user-test-123",
-            "customer": "cus_test123",
-            "amount_total": 999,
-            "currency": "eur",
-        }},
-    }
-    with patch("app.config.get_settings") as ms, \
-         patch("stripe.Webhook.construct_event") as mock_construct, \
-         patch("app.services.telemetry.track", new_callable=AsyncMock), \
-         patch("app.services.notifier.notify", new_callable=AsyncMock):
-        ms.return_value.stripe_secret_key = "sk_test"
-        ms.return_value.stripe_webhook_secret = "whsec_test"
-        mock_construct.return_value = mock_event
-        r = await client.post("/api/v1/payments/webhook",
-                               content=b"{}",
-                               headers={"stripe-signature": "t=1,v1=abc"})
-    assert r.status_code == 200
-    assert r.json() == {"ok": True}
-
-
-@pytest.mark.asyncio
-async def test_subscription_deleted_downgrades_user(client: AsyncClient):
-    """customer.subscription.deleted downgrades user to free."""
-    from sqlalchemy import text
-    from unittest.mock import AsyncMock
-    mock_event = {
-        "type": "customer.subscription.deleted",
-        "data": {"object": {"customer": "cus_test999"}},
-    }
-    with patch("app.config.get_settings") as ms, \
-         patch("stripe.Webhook.construct_event") as mock_construct, \
-         patch("app.services.telemetry.track", new_callable=AsyncMock), \
-         patch("app.services.notifier.notify", new_callable=AsyncMock):
-        ms.return_value.stripe_secret_key = "sk_test"
-        ms.return_value.stripe_webhook_secret = "whsec_test"
-        mock_construct.return_value = mock_event
-        r = await client.post("/api/v1/payments/webhook",
-                               content=b"{}",
-                               headers={"stripe-signature": "t=1,v1=abc"})
-    assert r.status_code == 200
-
-
-@pytest.mark.asyncio
-async def test_invoice_payment_failed_attempt1_no_downgrade(client: AsyncClient):
-    """invoice.payment_failed attempt 1: grace period, no downgrade."""
-    from unittest.mock import AsyncMock
-    mock_event = {
-        "type": "invoice.payment_failed",
-        "data": {"object": {"customer": "cus_test123", "attempt_count": 1}},
-    }
-    with patch("app.config.get_settings") as ms, \
-         patch("stripe.Webhook.construct_event") as mock_construct, \
-         patch("app.services.telemetry.track", new_callable=AsyncMock), \
-         patch("app.services.notifier.notify", new_callable=AsyncMock):
-        ms.return_value.stripe_secret_key = "sk_test"
-        ms.return_value.stripe_webhook_secret = "whsec_test"
-        mock_construct.return_value = mock_event
-        r = await client.post("/api/v1/payments/webhook",
-                               content=b"{}",
-                               headers={"stripe-signature": "t=1,v1=abc"})
-    assert r.status_code == 200
-
-
-@pytest.mark.asyncio
-async def test_unknown_event_type_returns_ok(client: AsyncClient):
-    """Unknown event type is ignored and returns 200."""
-    from unittest.mock import AsyncMock
-    mock_event = {
-        "type": "customer.created",
-        "data": {"object": {}},
-    }
-    with patch("app.config.get_settings") as ms, \
-         patch("stripe.Webhook.construct_event") as mock_construct:
-        ms.return_value.stripe_secret_key = "sk_test"
-        ms.return_value.stripe_webhook_secret = "whsec_test"
-        mock_construct.return_value = mock_event
-        r = await client.post("/api/v1/payments/webhook",
-                               content=b"{}",
-                               headers={"stripe-signature": "t=1,v1=abc"})
-    assert r.status_code == 200
-    assert r.json() == {"ok": True}

package/apps/travel-chaos-organizer/backend/tests/test_quota.py

@@ -1,46 +0,0 @@
-"""Tests for freemium quota enforcement."""
-import pytest
-from httpx import AsyncClient
-
-pytestmark = pytest.mark.asyncio
-
-
-async def test_free_trip_limit_enforced(client: AsyncClient):
-    """Free plan blocks trip creation after 3 trips."""
-    # Create 3 trips (should succeed)
-    for i in range(3):
-        r = await client.post(
-            "/api/v1/trips",
-            json={"name": f"Trip {i}", "description": None, "start_date": None, "end_date": None},
-        )
-        assert r.status_code == 201, f"Trip {i} creation failed: {r.text}"
-
-    # 4th trip should be blocked (402)
-    r = await client.post(
-        "/api/v1/trips",
-        json={"name": "Trip 4", "description": None, "start_date": None, "end_date": None},
-    )
-    assert r.status_code == 402
-    assert "Free plan" in r.json()["detail"]
-
-
-async def test_pro_plan_bypasses_trip_limit(client: AsyncClient, db_session):
-    """Pro users can create more than 3 trips."""
-    from sqlalchemy import text
-
-    # Upgrade user to pro
-    await db_session.execute(
-        text(
-            "INSERT INTO users (id, plan) VALUES (:uid, 'pro')"
-            " ON CONFLICT (id) DO UPDATE SET plan='pro'"
-        ),
-        {"uid": "user-test-123"},
-    )
-    await db_session.commit()
-
-    for i in range(5):
-        r = await client.post(
-            "/api/v1/trips",
-            json={"name": f"Pro Trip {i}", "description": None, "start_date": None, "end_date": None},
-        )
-        assert r.status_code == 201

package/apps/travel-chaos-organizer/backend/tests/test_search.py

@@ -1,67 +0,0 @@
-"""Tests for trip search endpoint."""
-import pytest
-from httpx import AsyncClient
-
-from tests.conftest import FAKE_USER_ID
-
-pytestmark = pytest.mark.asyncio
-
-
-async def test_search_empty_query_returns_empty(client: AsyncClient):
-    r = await client.get("/api/v1/trips/search?q=")
-    assert r.status_code == 200
-    assert r.json() == []
-
-
-@pytest.mark.skip(
-    reason="Search router uses ILIKE (PostgreSQL-only); SQLite in-memory tests "
-    "raise OperationalError for non-empty queries. Covered by integration tests."
-)
-async def test_search_finds_by_name(client: AsyncClient):
-    # Create a trip with a unique name
-    r = await client.post(
-        "/api/v1/trips",
-        json={"name": "Tokio Reise 2025", "description": None, "start_date": None, "end_date": None},
-    )
-    assert r.status_code == 201
-
-    r = await client.get("/api/v1/trips/search?q=Tokio")
-    assert r.status_code == 200
-    results = r.json()
-    assert any("Tokio" in t["name"] for t in results)
-
-
-@pytest.mark.skip(
-    reason="Search router uses ILIKE (PostgreSQL-only); SQLite in-memory tests "
-    "raise OperationalError for non-empty queries. Covered by integration tests."
-)
-async def test_search_no_cross_user_results(client: AsyncClient):
-    """Search should only return the authenticated user's trips."""
-    # Create a trip so there's something to find
-    await client.post(
-        "/api/v1/trips",
-        json={"name": "My Search Trip", "description": None, "start_date": None, "end_date": None},
-    )
-
-    r = await client.get("/api/v1/trips/search?q=Trip")
-    assert r.status_code == 200
-    for trip in r.json():
-        assert trip["user_id"] == FAKE_USER_ID
-
-
-@pytest.mark.skip(
-    reason="Search router uses ILIKE (PostgreSQL-only); SQLite in-memory tests "
-    "raise OperationalError for non-empty queries. Covered by integration tests."
-)
-async def test_search_no_results_for_unknown_term(client: AsyncClient):
-    """Search returns empty list when no trips match."""
-    r = await client.get("/api/v1/trips/search?q=ZZZNonExistent999")
-    assert r.status_code == 200
-    assert r.json() == []
-
-
-async def test_search_whitespace_only_query_returns_empty(client: AsyncClient):
-    """Search with whitespace-only query returns empty list."""
-    r = await client.get("/api/v1/trips/search?q=   ")
-    assert r.status_code == 200
-    assert r.json() == []

package/apps/travel-chaos-organizer/backend/tests/test_trips.py

@@ -1,123 +0,0 @@
-"""
-Tests for /api/v1/trips
-
-Covers:
-  list_trips    – empty list, multiple trips, user isolation
-  create_trip   – happy path, missing name, date validation
-  get_trip      – found, 404 for wrong user
-  update_trip   – partial update, no-op body → 400
-  delete_trip   – deletes own trip, 404 for other user's trip
-
-Run: pytest tests/test_trips.py -v
-"""
-
-import pytest
-from httpx import AsyncClient
-
-from tests.conftest import FAKE_USER_ID, make_trip
-
-pytestmark = pytest.mark.asyncio
-
-
-async def _create(client: AsyncClient, **kwargs) -> dict:
-    r = await client.post("/api/v1/trips", json=make_trip(**kwargs))
-    assert r.status_code == 201, r.text
-    return r.json()
-
-
-# ── list ──────────────────────────────────────────────────────────────────────
-
-async def test_list_trips_empty(client):
-    r = await client.get("/api/v1/trips")
-    assert r.status_code == 200
-    assert r.json() == []
-
-
-async def test_list_trips_returns_own_trips(client):
-    await _create(client, name="Trip A")
-    await _create(client, name="Trip B")
-    r = await client.get("/api/v1/trips")
-    assert r.status_code == 200
-    names = {t["name"] for t in r.json()}
-    assert names == {"Trip A", "Trip B"}
-
-
-# ── create ────────────────────────────────────────────────────────────────────
-
-async def test_create_trip_happy_path(client):
-    data = make_trip(name="Barcelona 2024")
-    r = await client.post("/api/v1/trips", json=data)
-    assert r.status_code == 201
-    body = r.json()
-    assert body["name"] == "Barcelona 2024"
-    assert body["user_id"] == FAKE_USER_ID
-    assert "id" in body
-
-
-async def test_create_trip_missing_name_rejected(client):
-    r = await client.post("/api/v1/trips", json={"description": "no name"})
-    assert r.status_code == 422
-
-
-async def test_create_trip_empty_name_rejected(client):
-    r = await client.post("/api/v1/trips", json={"name": ""})
-    assert r.status_code == 422
-
-
-async def test_create_trip_optional_dates(client):
-    r = await client.post("/api/v1/trips", json={"name": "Open-ended"})
-    assert r.status_code == 201
-    body = r.json()
-    assert body["start_date"] is None
-    assert body["end_date"] is None
-
-
-# ── get ───────────────────────────────────────────────────────────────────────
-
-async def test_get_trip_found(client):
-    created = await _create(client, name="My Trip")
-    r = await client.get(f"/api/v1/trips/{created['id']}")
-    assert r.status_code == 200
-    assert r.json()["name"] == "My Trip"
-
-
-async def test_get_trip_not_found(client):
-    r = await client.get("/api/v1/trips/00000000-0000-0000-0000-000000000000")
-    assert r.status_code == 404
-
-
-# ── update ────────────────────────────────────────────────────────────────────
-
-async def test_update_trip_name(client):
-    created = await _create(client, name="Old Name")
-    r = await client.patch(f"/api/v1/trips/{created['id']}", json={"name": "New Name"})
-    assert r.status_code == 200
-    assert r.json()["name"] == "New Name"
-
-
-async def test_update_trip_empty_body_rejected(client):
-    created = await _create(client)
-    r = await client.patch(f"/api/v1/trips/{created['id']}", json={})
-    assert r.status_code == 400
-
-
-async def test_update_trip_not_found(client):
-    r = await client.patch("/api/v1/trips/00000000-0000-0000-0000-000000000000",
-                           json={"name": "X"})
-    assert r.status_code == 404
-
-
-# ── delete ────────────────────────────────────────────────────────────────────
-
-async def test_delete_trip(client):
-    created = await _create(client)
-    r = await client.delete(f"/api/v1/trips/{created['id']}")
-    assert r.status_code == 204
-
-    r2 = await client.get(f"/api/v1/trips/{created['id']}")
-    assert r2.status_code == 404
-
-
-async def test_delete_trip_not_found(client):
-    r = await client.delete("/api/v1/trips/00000000-0000-0000-0000-000000000000")
-    assert r.status_code == 404

package/apps/travel-chaos-organizer/backend/tests/test_users.py

@@ -1,52 +0,0 @@
-"""Tests for /api/v1/users/me endpoint."""
-import pytest
-from httpx import AsyncClient
-
-pytestmark = pytest.mark.asyncio
-
-
-async def test_me_returns_plan(client: AsyncClient):
-    r = await client.get("/api/v1/users/me")
-    assert r.status_code == 200
-    data = r.json()
-    assert data["plan"] in ("free", "pro")
-    assert data["is_pro"] is False  # default free
-    assert data["free_daily_parses"] == 50
-    assert data["free_max_trips"] == 3
-
-
-async def test_me_upserts_user_on_first_call(client: AsyncClient, db_session):
-    from sqlalchemy import text
-
-    # Call /me which should create the user row
-    r = await client.get("/api/v1/users/me")
-    assert r.status_code == 200
-
-    # Verify user row exists
-    row = await db_session.execute(text("SELECT id FROM users WHERE id = 'user-test-123'"))
-    assert row.fetchone() is not None
-
-
-async def test_me_requires_auth(client: AsyncClient):
-    """Without auth override, endpoint should reject unauthenticated requests."""
-    from app.auth.keycloak import get_current_user
-    from app.main import app
-    from fastapi import HTTPException
-
-    # Remove the auth override to simulate a real unauthenticated request
-    original_overrides = dict(app.dependency_overrides)
-    if get_current_user in app.dependency_overrides:
-        del app.dependency_overrides[get_current_user]
-
-    try:
-        r = await client.get("/api/v1/users/me")
-        assert r.status_code in (401, 403, 422)
-    finally:
-        app.dependency_overrides.update(original_overrides)
-
-
-async def test_me_returns_user_id(client: AsyncClient):
-    """The /me endpoint returns the authenticated user's ID."""
-    r = await client.get("/api/v1/users/me")
-    assert r.status_code == 200
-    assert r.json()["id"] == "user-test-123"

package/apps/travel-chaos-organizer/caddy/Caddyfile

@@ -1,27 +0,0 @@
-# Travel Chaos Organizer — Caddyfile
-# Set TCO_DOMAIN in .env (e.g. TCO_DOMAIN=tco.example.com)
-
-{$TCO_DOMAIN:localhost} {
-    reverse_proxy backend:8000
-
-    encode gzip zstd
-
-    header {
-        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
-        X-Content-Type-Options "nosniff"
-        X-Frame-Options "DENY"
-        Referrer-Policy "strict-origin-when-cross-origin"
-        -Server
-    }
-
-    log {
-        output stdout
-        format json
-    }
-}
-
-# Local HTTP fallback (always active)
-:8080 {
-    reverse_proxy backend:8000
-    encode gzip
-}

package/apps/travel-chaos-organizer/docker-compose.node1.yml

@@ -1,31 +0,0 @@
-# Production override for node-1 deployment.
-# Disables local Caddy and Keycloak (production uses auth.cachly.dev).
-# Usage: docker compose -f docker-compose.yml -f docker-compose.node1.yml up -d
-services:
-  # Remove local Caddy — main Caddy on node-1 proxies tco.cachly.dev → 127.0.0.1:8000
-  caddy:
-    profiles:
-      - disabled
-
-  # Remove local Keycloak — production uses auth.cachly.dev
-  keycloak:
-    profiles:
-      - disabled
-
-  # Backend: bind only to localhost so main Caddy can reach it.
-  # Override depends_on to remove the keycloak dependency (disabled above).
-  # Redis: don't bind to host port — node-1 already has Valkey on 6379.
-  redis:
-    ports: []
-
-  backend:
-    ports:
-      - "127.0.0.1:8000:8000"
-    environment:
-      DEBUG: "false"
-      KEYCLOAK_URL: "https://auth.cachly.dev"
-    depends_on:
-      postgres:
-        condition: service_healthy
-      redis:
-        condition: service_healthy

package/apps/travel-chaos-organizer/docker-compose.override.yml

@@ -1,14 +0,0 @@
-# Local development overrides — not used in production
-# This file is auto-loaded by `docker compose up`
-services:
-  backend:
-    ports:
-      - "8000:8000"   # expose backend directly for local dev/testing
-    environment:
-      DEBUG: "true"
-
-  caddy:
-    ports:
-      - "80:80"
-      - "443:443"
-      - "8080:8080"   # also expose dev HTTP port

package/apps/travel-chaos-organizer/docker-compose.yml

@@ -1,128 +0,0 @@
-services:
-  redis:
-    image: redis:7-alpine
-    restart: unless-stopped
-    command: redis-server --save "" --appendonly no
-    ports:
-      - "6379:6379"
-    healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
-      interval: 5s
-      timeout: 3s
-      retries: 5
-
-  postgres:
-    image: postgres:16-alpine
-    restart: unless-stopped
-    environment:
-      POSTGRES_USER: tco
-      POSTGRES_PASSWORD: tco
-      POSTGRES_DB: tco
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-      - ./backend/app/db/migrations/001_init.sql:/docker-entrypoint-initdb.d/001_init.sql
-      - ./backend/app/db/migrations/002_telemetry_freemium.sql:/docker-entrypoint-initdb.d/002_telemetry_freemium.sql
-      - ./backend/app/db/migrations/003_telegram_chat_id.sql:/docker-entrypoint-initdb.d/003_telegram_chat_id.sql
-      - ./backend/app/db/migrations/004_stripe_and_email.sql:/docker-entrypoint-initdb.d/004_stripe_and_email.sql
-    ports:
-      - "5432:5432"
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U tco"]
-      interval: 5s
-      timeout: 5s
-      retries: 10
-
-  keycloak:
-    image: quay.io/keycloak/keycloak:26.0
-    restart: unless-stopped
-    command: start-dev --import-realm
-    environment:
-      KEYCLOAK_ADMIN: admin
-      KEYCLOAK_ADMIN_PASSWORD: admin
-    volumes:
-      - ./keycloak/realm-export.json:/opt/keycloak/data/import/realm.json
-    ports:
-      - "8080:8080"
-    healthcheck:
-      test: ["CMD-SHELL", "curl -sf http://localhost:8080/health/ready || exit 1"]
-      interval: 10s
-      timeout: 5s
-      retries: 20
-      start_period: 30s
-
-  backend:
-    build:
-      context: ../..
-      dockerfile: apps/travel-chaos-organizer/backend/Dockerfile
-    restart: unless-stopped
-    env_file: .env
-    environment:
-      DATABASE_URL: postgresql+asyncpg://tco:tco@postgres:5432/tco
-      KEYCLOAK_URL: http://keycloak:8080
-      # Local Redis acts as Cachly cache in dev — replace with your Cachly URL in production
-      CACHLY_REDIS_URL: redis://redis:6379/0
-    volumes:
-      - uploads_data:/data/uploads
-    ports:
-      - "127.0.0.1:8000:8000"   # internal only; Caddy proxies 80/443
-    healthcheck:
-      test: ["CMD-SHELL", "curl -sf http://localhost:8000/health || exit 1"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-      start_period: 20s
-    depends_on:
-      postgres:
-        condition: service_healthy
-      redis:
-        condition: service_healthy
-
-  telegram-bot:
-    build: ./telegram-bot
-    restart: unless-stopped
-    env_file: .env
-    environment:
-      - TCO_API_URL=http://backend:8000
-      - TCO_BOT_SECRET=${TELEGRAM_BOT_TOKEN}
-    depends_on:
-      backend:
-        condition: service_healthy
-    profiles:
-      - telegram
-
-  caddy:
-    image: caddy:2-alpine
-    restart: unless-stopped
-    environment:
-      TCO_DOMAIN: ${TCO_DOMAIN:-localhost}
-    ports:
-      - "80:80"
-      - "443:443"
-    volumes:
-      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
-      - caddy_data:/data
-      - caddy_config:/config
-    depends_on:
-      backend:
-        condition: service_healthy
-
-  backup:
-    image: postgres:16-alpine
-    restart: "no"
-    environment:
-      PGPASSWORD: tco
-    volumes:
-      - ./backups:/backups
-      - ./scripts/backup.sh:/backup.sh
-    entrypoint: ["sh", "/backup.sh"]
-    depends_on:
-      postgres:
-        condition: service_healthy
-    profiles:
-      - backup
-
-volumes:
-  postgres_data:
-  uploads_data:
-  caddy_data:
-  caddy_config:

package/apps/travel-chaos-organizer/frontend/.env.example

@@ -1,13 +0,0 @@
-EXPO_PUBLIC_API_URL=http://localhost:8000
-EXPO_PUBLIC_KEYCLOAK_URL=http://localhost:8080
-EXPO_PUBLIC_KEYCLOAK_REALM=travel-chaos
-EXPO_PUBLIC_KEYCLOAK_CLIENT_ID=tco-mobile
-# Sentry (optional — get DSN at sentry.io)
-# EXPO_PUBLIC_SENTRY_DSN=https://...@sentry.io/...
-
-# App URLs (shown in Settings screen and emails)
-EXPO_PUBLIC_UPGRADE_URL=https://tco.app/upgrade
-EXPO_PUBLIC_PRIVACY_URL=https://tco.app/privacy
-EXPO_PUBLIC_TERMS_URL=https://tco.app/terms
-EXPO_PUBLIC_SUPPORT_EMAIL=hello@tco.app
-EXPO_PUBLIC_APP_URL=https://tco.app