feat: squashed routes branch with secrets removed

Co-authored-by: od-hunter <146340502+od-hunter@users.noreply.github.com>
Co-authored-by: abimbolaalabi <ibrahimade92@gmail.com>

Includes all changes from the routes branch history:
- Redis distributed cache for plan metadata
- All previous features, fixes, and optimizations
- Hardcoded secrets replaced with environment variables

Author: abimbolaalabi

.detoxrc.js

@@ -7,6 +7,7 @@ module.exports = {
     args: {
       $0: 'jest',
       config: 'e2e/jest.config.js',
+      maxWorkers: process.env.E2E_MAX_WORKERS || 1,
     },
     jest: {
       setupTimeout: 120000,
@@ -17,13 +18,13 @@ module.exports = {
       type: 'ios.app',
       binaryPath: 'ios/build/Build/Products/Debug-iphonesimulator/SubTrackr.app',
       build:
-        'xcodebuild -workspace ios/subtrackr.xcworkspace -scheme subtrackr -configuration Debug -sdk iphonesimulator -derivedDataPath ios/build',
+        'xcodebuild -workspace ios/SubTrackr.xcworkspace -scheme SubTrackr -configuration Debug -sdk iphonesimulator -derivedDataPath ios/build',
     },
     'ios.release': {
       type: 'ios.app',
       binaryPath: 'ios/build/Build/Products/Release-iphonesimulator/SubTrackr.app',
       build:
-        'xcodebuild -workspace ios/subtrackr.xcworkspace -scheme subtrackr -configuration Release -sdk iphonesimulator -derivedDataPath ios/build',
+        'xcodebuild -workspace ios/SubTrackr.xcworkspace -scheme SubTrackr -configuration Release -sdk iphonesimulator -derivedDataPath ios/build',
     },
     'android.debug': {
       type: 'android.apk',
@@ -83,6 +84,15 @@ module.exports = {
       app: 'android.release',
     },
   },
+  behavior: {
+    init: {
+      exposeGlobals: true,
+      reinstallApp: true,
+    },
+    cleanup: {
+      shutdownDevice: false,
+    },
+  },
   artifacts: {
     rootDir: 'artifacts',
     plugins: {

.env.example

@@ -0,0 +1,19 @@
+# SubTrackr Backend - Environment Variables
+# Copy this file to .env and fill in your values.
+
+# PostgreSQL
+DB_HOST=localhost
+DB_PORT=5432
+DB_NAME=subtrackr
+DB_USER=postgres
+# Required: set a strong password
+DB_PASSWORD=
+
+# Redis
+REDIS_HOST=localhost
+REDIS_PORT=6379
+# Optional: set if Redis requires authentication
+REDIS_PASSWORD=
+REDIS_DB=0
+REDIS_DEFAULT_TTL_SECONDS=3600
+REDIS_CONNECT_TIMEOUT_MS=5000

.eslintrc.json

@@ -11,10 +11,32 @@
   },
   "rules": {
     "prettier/prettier": "error",
-    "@typescript-eslint/no-unused-vars": ["error", { "argsIgnorePattern": "^_" }],
+    "@typescript-eslint/no-unused-vars": [
+      "error",
+      {
+        "argsIgnorePattern": "^_",
+        "varsIgnorePattern": "^_",
+        "caughtErrorsIgnorePattern": "^_",
+        "destructuredArrayIgnorePattern": "^_"
+      }
+    ],
     "@typescript-eslint/explicit-function-return-type": "off",
     "@typescript-eslint/no-explicit-any": "warn",
-    "no-console": ["warn", { "allow": ["warn", "error"] }]
+    "no-console": ["warn", { "allow": ["warn", "error"] }],
+    "import/no-unresolved": [
+      "error",
+      {
+        "ignore": [
+          "@sentry/react-native",
+          "bcryptjs",
+          "expo-image",
+          "expo-linking",
+          "expo-local-authentication",
+          "react-native-performance",
+          "../../backend/services/shared/monitoring"
+        ]
+      }
+    ]
   },
   "ignorePatterns": [
     "node_modules/",
@@ -28,7 +50,8 @@
     "acbu-backend/",
     "src/animations/",
     "stellarlend/",
-    "stellarlend-pr282/"
+    "stellarlend-pr282/",
+    "vscode-extension/"
   ],
   "settings": {
     "import/resolver": {

.github/workflows/bundle-analysis.yml

@@ -0,0 +1,21 @@
+name: Bundle Size Analysis
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: '20'
+          cache: npm
+      - run: npm ci
+      - run: npx expo export --platform web --output-dir dist
+      - name: Analyze bundle
+        run: |
+          npx size-limit
+          echo "Bundle size analysis complete"

.github/workflows/cdn-deploy.yml

@@ -0,0 +1,103 @@
+name: CDN Configuration Deploy
+
+on:
+  push:
+    branches: [main, develop]
+    paths:
+      - 'infra/fastly/**'
+      - '.github/workflows/cdn-deploy.yml'
+  workflow_dispatch:
+    inputs:
+      provider:
+        description: 'CDN provider'
+        required: true
+        default: 'fastly'
+        type: choice
+        options:
+          - fastly
+          - cloudflare
+
+env:
+  NODE_VERSION: '20'
+
+jobs:
+  validate-vcl:
+    name: Validate Fastly VCL
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Check VCL syntax (basic)
+        run: |
+          test -f infra/fastly/snippets/recv.vcl
+          test -f infra/fastly/snippets/fetch.vcl
+          grep -q "s-maxage" infra/fastly/snippets/fetch.vcl
+          grep -q "/plans" infra/fastly/snippets/recv.vcl
+          echo "VCL snippet validation passed"
+
+  deploy-fastly:
+    name: Deploy Fastly VCL Snippet
+    needs: validate-vcl
+    if: >
+      github.event_name == 'push' ||
+      (github.event_name == 'workflow_dispatch' && github.event.inputs.provider == 'fastly')
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Deploy VCL snippet to Fastly
+        env:
+          FASTLY_API_TOKEN: ${{ secrets.FASTLY_API_TOKEN }}
+          FASTLY_SERVICE_ID: ${{ secrets.FASTLY_SERVICE_ID }}
+        run: |
+          if [ -z "$FASTLY_API_TOKEN" ] || [ -z "$FASTLY_SERVICE_ID" ]; then
+            echo "Fastly credentials not configured — skipping deploy (CI validation only)"
+            exit 0
+          fi
+          chmod +x scripts/deploy-fastly-vcl.sh
+          ./scripts/deploy-fastly-vcl.sh infra/fastly/snippets
+
+  deploy-cloudflare:
+    name: Deploy Cloudflare Cache Rules
+    needs: validate-vcl
+    if: github.event_name == 'workflow_dispatch' && github.event.inputs.provider == 'cloudflare'
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Verify Cloudflare cache tag support
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CLOUDFLARE_ZONE_ID: ${{ secrets.CLOUDFLARE_ZONE_ID }}
+        run: |
+          if [ -z "$CLOUDFLARE_API_TOKEN" ] || [ -z "$CLOUDFLARE_ZONE_ID" ]; then
+            echo "Cloudflare credentials not configured — skipping deploy"
+            exit 0
+          fi
+          echo "Cloudflare purge-by-tag configured via CDN_PROVIDER=cloudflare"
+          echo "Origin sets Cache-Tag header alongside Surrogate-Key"
+
+  run-cache-tests:
+    name: CDN Cache Unit Tests
+    needs: validate-vcl
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps
+
+      - name: Run CDN cache tests
+        run: npm run test:cdn