attend/Gemfile at main · hackclub/attend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
source "https://rubygems.org"

# Bundle edge Rails instead: gem "rails", github: "rails/rails", branch: "main"
gem "rails", "~> 8.1.1"
# The modern asset pipeline for Rails [https://github.com/rails/propshaft]
gem "propshaft"
# Use postgresql as the database for Active Record
gem "pg", "~> 1.6"
# Use the Puma web server [https://github.com/puma/puma]
gem "puma", ">= 5.0"
# Use JavaScript with ESM import maps [https://github.com/rails/importmap-rails]
gem "importmap-rails"
# Hotwire's SPA-like page accelerator [https://turbo.hotwired.dev]
gem "turbo-rails"
# Hotwire's modest JavaScript framework [https://stimulus.hotwired.dev]
gem "stimulus-rails"
# Use Tailwind CSS [https://github.com/rails/tailwindcss-rails]
gem "tailwindcss-rails"

# yay logging!
gem "appsignal"

# Distributed tracing
gem "opentelemetry-sdk"
gem "opentelemetry-exporter-otlp"
gem "opentelemetry-instrumentation-all"

# Authentication
gem "devise"
gem "omniauth"
gem "omniauth-oauth2"
gem "omniauth-rails_csrf_protection"

# Authorization
gem "pundit"

# MCP server — Rails-native (toolboxes are controllers, tools are actions)
gem "toolchest", "~> 0.3.7"
# mcp 0.23.0 is the first release with fixes for the five 2026 transport
# advisories (unbounded request body, SSE session poisoning, DNS rebinding,
# unbounded stdio line buffer, unbounded session retention). toolchest 0.3.x
# still targets the 0.11 signatures, so config/initializers/toolchest_mcp_compat.rb
# bridges the two — read it before bumping either gem.
gem "mcp", "~> 1.4.0"
gem "jb" # JSON view layer for toolbox actions

# Audit logging
gem "paper_trail"

# SQL query tool
gem "blazer"

# Console auditing - TEMPORARILY DISABLED
# gem "console1984"
# gem "audits1984"

# HTTP client for external APIs
gem "faraday"
gem "faraday-follow_redirects"
gem "faraday-retry"

# Transactional email via Postmark
gem "postmark-rails"

# Phone number validation and formatting
gem "phonelib"

# Twilio for SMS and WhatsApp
gem "twilio-ruby"

# Rate limiting
gem "rack-attack"

# Error monitoring
gem "sentry-ruby"
gem "sentry-rails"

# QR code generation
gem "rqrcode"

# Apple Wallet passes
gem "passkit", "~> 0.6"
gem "apnotic" # APNS HTTP/2 for push notifications to Apple Wallet

# Google Wallet passes
gem "google_wallet"

# PDF generation
gem "prawn"
gem "prawn-table"

# PDF parsing — validating uploaded template PDFs and photo-upload scans
gem "pdf-reader"

# Markdown processing
gem "kramdown"

# Use Active Model has_secure_password [https://guides.rubyonrails.org/active_model_basics.html#securepassword]
gem "bcrypt", "~> 3.1.21"

# Windows does not include zoneinfo files, so bundle the tzinfo-data gem
gem "tzinfo-data", platforms: %i[ windows jruby ]

# Use the database-backed adapters for Rails.cache, Active Job, and Action Cable
gem "solid_cache"
gem "solid_queue"
gem "solid_cable"

# Job monitoring dashboard
gem "mission_control-jobs"

# Reduces boot times through caching; required in config/boot.rb
gem "bootsnap", require: false

# Add HTTP asset caching/compression and X-Sendfile acceleration to Puma [https://github.com/basecamp/thruster/]
gem "thruster", require: false

# Use Active Storage variants [https://guides.rubyonrails.org/active_storage_overview.html#transforming-images]
gem "image_processing", "~> 2.0", ">= 2.0.1"
gem "mini_magick"
gem "ruby-vips"

# S3-compatible storage (Cloudflare R2)
gem "aws-sdk-s3", require: false

gem "dotenv-rails", groups: [ :development, :test ]

group :development, :test do
  # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem
  gem "debug", platforms: %i[ mri windows ], require: "debug/prelude"

  # Audits gems for known security defects (use config/bundler-audit.yml to ignore issues)
  gem "bundler-audit", require: false

  # Static analysis for security vulnerabilities [https://brakemanscanner.org/]
  gem "brakeman", require: false

  # Omakase Ruby styling [https://github.com/rails/rubocop-rails-omakase/]
  gem "rubocop-rails-omakase", require: false

  # Testing
  gem "rspec-rails"
  gem "factory_bot_rails"
  gem "faker"
  gem "webmock"
  gem "vcr"
  gem "capybara"
  gem "selenium-webdriver"
end

group :development do
  # Use console on exceptions pages [https://github.com/rails/web-console]
  gem "web-console"

  # Preview emails in browser via web UI
  gem "letter_opener_web"
end