parse-stack-next 5.5.3 → 5.5.5

data/lib/parse/webhooks/payload.rb

@@ -67,28 +67,28 @@ module Parse
       attr_accessor :query, :log, :objects
       attr_accessor :original, :update, :raw
       # @!attribute [rw] event
-      #   The LiveQuery event type for an +afterEvent+ trigger -- one of
-      #   +"create"+, +"enter"+, +"update"+, +"leave"+, or +"delete"+ -- or
-      #   +"connect"+ for a +beforeConnect+ trigger. +nil+ for every non-
+      #   The LiveQuery event type for an `afterEvent` trigger -- one of
+      #   `"create"`, `"enter"`, `"update"`, `"leave"`, or `"delete"` -- or
+      #   `"connect"` for a `beforeConnect` trigger. `nil` for every non-
       #   LiveQuery trigger. See {#after_event?} / {#before_connect?}.
       #   @return [String, nil]
       # @!attribute [rw] clients
-      #   Connection-global metadata sent on the LiveQuery +beforeConnect+ /
-      #   +afterEvent+ triggers: the number of currently-connected LiveQuery
-      #   clients. +nil+ for non-LiveQuery triggers.
+      #   Connection-global metadata sent on the LiveQuery `beforeConnect` /
+      #   `afterEvent` triggers: the number of currently-connected LiveQuery
+      #   clients. `nil` for non-LiveQuery triggers.
       #   @return [Integer, nil]
       # @!attribute [rw] subscriptions
-      #   Connection-global metadata sent on the LiveQuery +beforeConnect+ /
-      #   +afterEvent+ triggers: the number of active subscriptions. +nil+ for
+      #   Connection-global metadata sent on the LiveQuery `beforeConnect` /
+      #   `afterEvent` triggers: the number of active subscriptions. `nil` for
       #   non-LiveQuery triggers.
       #   @return [Integer, nil]
       attr_accessor :event, :clients, :subscriptions
       # @!attribute [rw] context
       #   The caller-supplied context object threaded from the originating REST
-      #   write or cloud-function call via the +X-Parse-Cloud-Context+ header.
-      #   Parse Server includes this as a top-level +context+ key in trigger
+      #   write or cloud-function call via the `X-Parse-Cloud-Context` header.
+      #   Parse Server includes this as a top-level `context` key in trigger
       #   payloads (beforeSave/afterSave/etc.). Returns a Hash when present, or
-      #   +nil+ when the originating request carried no context.
+      #   `nil` when the originating request carried no context.
       #   @return [Hash, nil]
       attr_accessor :context
       # @!attribute [r] session_token
@@ -96,7 +96,7 @@ module Parse
       #   webhook payload (`user.sessionToken`) before credentials are scrubbed
       #   from {#user} / {#object} / {#original} / {#update}. Present only when
       #   the originating request was made by a logged-in user -- a master-key
-      #   request carries no user and no token, so this is +nil+. It is
+      #   request carries no user and no token, so this is `nil`. It is
       #   intentionally NOT one of {ATTRIBUTES}, so it never appears in
       #   {#as_json} or in the redacted request log. Reach for it (or the
       #   higher-level {#user_client} / {#user_agent}) only when a handler
@@ -232,7 +232,7 @@ module Parse
       ].freeze
 
       # @!visibility private
-      # Returns a copy of +obj+ with only +WEBHOOK_TRIGGER_CREDENTIAL_KEYS+
+      # Returns a copy of `obj` with only `WEBHOOK_TRIGGER_CREDENTIAL_KEYS`
       # removed. Operates on string and symbol keys (Parse Server uses camelCase
       # strings on the wire; downstream code may have already symbolized).
       # Pass-through for non-Hash input.
@@ -274,7 +274,7 @@ module Parse
       end
 
       # @!visibility private
-      # Returns a copy of +obj+ with the model's declared `:vector`
+      # Returns a copy of `obj` with the model's declared `:vector`
       # columns removed. Embeddings are large dense float arrays that leak
       # ML signal; a webhook handler has no reason to receive them, and
       # leaving them in bloats logs and any object a handler re-persists.
@@ -302,10 +302,10 @@ module Parse
       end
 
       # @!visibility private
-      # Pulls the caller's session token out of the (unscrubbed) +user+ hash.
-      # Parse Server sends it as the camelCase string key +sessionToken+; this
+      # Pulls the caller's session token out of the (unscrubbed) `user` hash.
+      # Parse Server sends it as the camelCase string key `sessionToken`; this
       # tolerates a symbol key and the snake_case form too, mirroring the
-      # leniency in +scrub_credentials+. Returns +nil+ for a blank token or a
+      # leniency in `scrub_credentials`. Returns `nil` for a blank token or a
       # non-Hash / absent user (a master-key request has no user).
       def self.extract_session_token(user_hash)
         return nil unless user_hash.is_a?(Hash)
@@ -365,14 +365,14 @@ module Parse
 
       # An opt-in, user-scoped {Parse::Client} for acting on the server as the
       # webhook's calling user. It mirrors the default client's connection
-      # settings (+server_url+, +application_id+, +api_key+) but carries NO
+      # settings (`server_url`, `application_id`, `api_key`) but carries NO
       # master key and BINDS the caller's {#session_token}, so every request it
       # makes -- with no further ceremony -- is authorized by Parse Server as
-      # that user: ACL, CLP and +protectedFields+ are all enforced. (A
+      # that user: ACL, CLP and `protectedFields` are all enforced. (A
       # `Parse.with_session` block still overrides the bound token if you need
       # to act as someone else within a call.) Memoized per payload, since each
       # webhook delivery carries a distinct token.
-      # @return [Parse::Client, nil] +nil+ when the payload carried no token.
+      # @return [Parse::Client, nil] `nil` when the payload carried no token.
       def user_client
         return nil if @session_token.nil?
         @user_client ||= Parse::Client.client.become(@session_token)
@@ -380,15 +380,15 @@ module Parse
 
       # An opt-in, non-master {Parse::Agent} scoped to the webhook caller's
       # session token. Because its client has no master key and it is built
-      # with a non-empty +session_token:+, the agent runs in CLIENT MODE:
+      # with a non-empty `session_token:`, the agent runs in CLIENT MODE:
       # every tool/query routes through a path Parse Server (or the SDK's own
       # ACL/CLP enforcement layer) authorizes as the calling user, with no
       # master-key fallback to silently bypass row-level security. This is the
       # handle to use when a handler should read or act strictly within the
       # caller's permissions. Additional agent options (e.g.
-      # +permissions: :readwrite+) may be passed through.
+      # `permissions: :readwrite`) may be passed through.
       # @param opts [Hash] extra keyword args forwarded to {Parse::Agent#initialize}.
-      # @return [Parse::Agent, nil] +nil+ when the payload carried no token.
+      # @return [Parse::Agent, nil] `nil` when the payload carried no token.
       def user_agent(**opts)
         return nil if @session_token.nil?
         require_relative "../agent" unless defined?(Parse::Agent)
@@ -462,11 +462,11 @@ module Parse
 
       # true if this is a beforeLogin webhook trigger request.
       #
-      # NOTE: a +beforeLogin+ payload carries the user being authenticated as
-      # {#object} / {#parse_object} (a +_User+), NOT as {#user} -- the caller is
-      # not yet authenticated when the trigger fires, so {#user} is +nil+. (By
-      # +afterLogin+ both are populated and equal.) Reach for {#parse_object} to
-      # inspect the logging-in user during +beforeLogin+.
+      # NOTE: a `beforeLogin` payload carries the user being authenticated as
+      # {#object} / {#parse_object} (a `_User`), NOT as {#user} -- the caller is
+      # not yet authenticated when the trigger fires, so {#user} is `nil`. (By
+      # `afterLogin` both are populated and equal.) Reach for {#parse_object} to
+      # inspect the logging-in user during `beforeLogin`.
       def before_login?
         trigger? && @trigger_name.to_sym == :beforeLogin
       end
@@ -477,19 +477,19 @@ module Parse
       end
 
       # true if this is a afterLogout webhook trigger request. The logged-out
-      # session is carried as {#object} / {#parse_object} (a +_Session+).
+      # session is carried as {#object} / {#parse_object} (a `_Session`).
       def after_logout?
         trigger? && @trigger_name.to_sym == :afterLogout
       end
 
       # true if this is a beforePasswordResetRequest webhook trigger request.
-      # The target user is carried as {#object} / {#parse_object} (a +_User+).
+      # The target user is carried as {#object} / {#parse_object} (a `_User`).
       def before_password_reset_request?
         trigger? && @trigger_name.to_sym == :beforePasswordResetRequest
       end
 
       # true if this is a LiveQuery beforeConnect webhook trigger request.
-      # Connection-global: carries no {#object}; the className is the +@Connect+
+      # Connection-global: carries no {#object}; the className is the `@Connect`
       # sentinel and the caller's token (if any) is in {#session_token}.
       def before_connect?
         trigger? && @trigger_name.to_sym == :beforeConnect
@@ -510,10 +510,10 @@ module Parse
 
       # true if this is one of the authentication-side triggers
       # (beforeLogin / afterLogin / afterLogout / beforePasswordResetRequest).
-      # These carry a +_User+ / +_Session+ as {#object} but are NOT object
+      # These carry a `_User` / `_Session` as {#object} but are NOT object
       # save/delete triggers: no ActiveModel save/create/destroy callbacks run
       # for them, and Parse Server ignores the response body (the only way to
-      # affect a +before*+ one is to deny it -- see the webhook router).
+      # affect a `before*` one is to deny it -- see the webhook router).
       def auth_trigger?
         before_login? || after_login? || after_logout? || before_password_reset_request?
       end
@@ -521,7 +521,7 @@ module Parse
       # true if this is one of the LiveQuery triggers (beforeConnect /
       # beforeSubscribe / afterEvent). Parse Server delivers these over an HTTP
       # webhook only in a co-located single-process LiveQuery setup;
-      # +beforeConnect+ in particular carries a live client and is effectively
+      # `beforeConnect` in particular carries a live client and is effectively
       # in-process-only. See the webhooks guide.
       def live_query_trigger?
         before_connect? || before_subscribe? || after_event?
@@ -560,7 +560,7 @@ module Parse
       end
 
       # @!visibility private
-      # Returns +true+ when +@object+/+@original+ contain a className that
+      # Returns `true` when `@object`/`@original` contain a className that
       # disagrees with the trigger's expected class. Used to skip building
       # a typed object when the payload was clearly forged or routed
       # incorrectly.

data/lib/parse/webhooks/registration.rb

@@ -24,8 +24,8 @@ module Parse
       # Parse Server. Rejects non-http(s) schemes, embedded userinfo, and
       # hostnames that resolve to loopback, link-local, RFC1918, CGNAT,
       # multicast, or cloud-metadata addresses (covered by
-      # +Parse::File::BLOCKED_CIDRS+). Without these checks an attacker who
-      # can reach +register_webhook!+ could redirect Parse Server's trigger
+      # `Parse::File::BLOCKED_CIDRS`). Without these checks an attacker who
+      # can reach `register_webhook!` could redirect Parse Server's trigger
       # POSTs to an internal host (e.g. the cloud metadata service) and
       # exfiltrate request bodies. Returns the input URL unchanged on
       # success.

data/lib/parse/webhooks/replay_protection.rb

@@ -11,8 +11,8 @@ module Parse
     # NEW-EXT-4: webhook freshness and replay protection.
     #
     # Parse Server's default webhook delivery is authenticated only by the
-    # static +X-Parse-Webhook-Key+ header. A captured POST is therefore
-    # indefinitely replayable -- a Ruby-initiated save bearing an +_RB_+
+    # static `X-Parse-Webhook-Key` header. A captured POST is therefore
+    # indefinitely replayable -- a Ruby-initiated save bearing an `_RB_`
     # request id will continue to suppress server-side after_* callbacks
     # every time it is replayed, and a generic trigger payload can be
     # delivered repeatedly to fire double-charges or other side effects.
@@ -20,23 +20,23 @@ module Parse
     # This module adds two layers on top of the existing static-key check:
     #
     # 1. **Always-on body+request-id dedup.** A bounded LRU records a
-    #    SHA-256 of +(request_id || "")+ joined with the request body. A
-    #    duplicate seen within +replay_window_seconds+ is rejected with
-    #    +"Webhook replay detected."+. Cooperation with Parse Server is not
+    #    SHA-256 of `(request_id || "")` joined with the request body. A
+    #    duplicate seen within `replay_window_seconds` is rejected with
+    #    `"Webhook replay detected."`. Cooperation with Parse Server is not
     #    required; this protects against in-window replays only, but those
     #    are the cheapest attack to mount (proxy retries, captured fast
     #    loops, retransmits).
     #
-    # 2. **Opt-in HMAC freshness verification.** When a +signing_secret+ is
+    # 2. **Opt-in HMAC freshness verification.** When a `signing_secret` is
     #    configured (programmatically or via
-    #    +PARSE_WEBHOOK_SIGNING_SECRET+) the dispatcher requires two extra
+    #    `PARSE_WEBHOOK_SIGNING_SECRET`) the dispatcher requires two extra
     #    headers on every request:
     #
-    #    * +X-Parse-Webhook-Timestamp+ -- decimal Unix epoch seconds.
-    #    * +X-Parse-Webhook-Signature+ -- hex-encoded HMAC-SHA256 of the
-    #      bytes +"#{timestamp}.#{body}"+ keyed with the signing secret.
+    #    * `X-Parse-Webhook-Timestamp` -- decimal Unix epoch seconds.
+    #    * `X-Parse-Webhook-Signature` -- hex-encoded HMAC-SHA256 of the
+    #      bytes `"#{timestamp}.#{body}"` keyed with the signing secret.
     #
-    #    Requests outside +signing_max_skew_seconds+ (default 300) or with
+    #    Requests outside `signing_max_skew_seconds` (default 300) or with
     #    an invalid signature are rejected. Once enabled, this gives full
     #    binding between the body and the time of delivery and closes the
     #    replay window beyond the freshness skew.
@@ -61,9 +61,9 @@ module Parse
         attr_writer :signing_secret, :signing_max_skew_seconds,
                     :replay_window_seconds, :replay_cache_size
 
-        # Shared HMAC secret used to verify +X-Parse-Webhook-Signature+.
+        # Shared HMAC secret used to verify `X-Parse-Webhook-Signature`.
         # When nil/empty, signature verification is skipped (layer 1 still
-        # applies). Defaults to +ENV["PARSE_WEBHOOK_SIGNING_SECRET"]+.
+        # applies). Defaults to `ENV["PARSE_WEBHOOK_SIGNING_SECRET"]`.
         def signing_secret
           return @signing_secret if defined?(@signing_secret) && !@signing_secret.nil?
           ENV["PARSE_WEBHOOK_SIGNING_SECRET"]
@@ -71,12 +71,12 @@ module Parse
 
         # Maximum allowed clock skew (in seconds) between the timestamp
         # header and the receiver. Requests outside this window are
-        # rejected as stale when +signing_secret+ is set.
+        # rejected as stale when `signing_secret` is set.
         def signing_max_skew_seconds
           @signing_max_skew_seconds || DEFAULT_MAX_SKEW
         end
 
-        # How long a +(request_id, body)+ digest stays in the dedup cache.
+        # How long a `(request_id, body)` digest stays in the dedup cache.
         # Duplicates seen within this window are rejected.
         def replay_window_seconds
           @replay_window_seconds || DEFAULT_REPLAY_WINDOW
@@ -112,7 +112,7 @@ module Parse
         # @!visibility private
         # Returns nil when the request passes both replay and signature
         # checks; otherwise returns a short error string suitable for the
-        # webhook error response. The headers come from +env+ so this
+        # webhook error response. The headers come from `env` so this
         # works with any Rack request.
         def verify!(env, body_str, request_id)
           secret = signing_secret

data/lib/parse/webhooks.rb

@@ -85,7 +85,7 @@ module Parse
     class ResponseError < StandardError; end
 
     # The authentication-side triggers (local underscore form). These carry a
-    # +_User+ / +_Session+ as the payload object but are NOT object save/delete
+    # `_User` / `_Session` as the payload object but are NOT object save/delete
     # triggers: the router runs no ActiveModel save/create/destroy callbacks for
     # them, and Parse Server ignores their response body.
     AUTH_TRIGGERS = %i[
@@ -98,18 +98,18 @@ module Parse
     LIVE_QUERY_TRIGGERS = %i[before_connect before_subscribe after_event].freeze
 
     # Every trigger whose payload is not an object save/delete/find shape.
-    # Parse Server's webhook response handler resolves +{}+ for all of these
+    # Parse Server's webhook response handler resolves `{}` for all of these
     # (the body is ignored), so the router normalizes their handler result to a
     # success no-op rather than serializing a returned object into the response.
     NON_OBJECT_TRIGGERS = (AUTH_TRIGGERS + LIVE_QUERY_TRIGGERS).freeze
 
-    # The +before*+ subset of {NON_OBJECT_TRIGGERS} for which a handler can DENY
-    # the operation. Parse Server only treats an +{error}+ response as a
-    # rejection -- a +{success:false}+ body resolves and lets the login /
-    # connect / subscribe / reset proceed. So, mirroring the +before_save+
-    # convention, the router converts a +false+ return from one of these into a
-    # {ResponseError} (which serializes to +{error}+). +error!+ works for any
-    # trigger; the +after*+ variants fire after the fact and cannot undo it.
+    # The `before*` subset of {NON_OBJECT_TRIGGERS} for which a handler can DENY
+    # the operation. Parse Server only treats an `{error}` response as a
+    # rejection -- a `{success:false}` body resolves and lets the login /
+    # connect / subscribe / reset proceed. So, mirroring the `before_save`
+    # convention, the router converts a `false` return from one of these into a
+    # {ResponseError} (which serializes to `{error}`). `error!` works for any
+    # trigger; the `after*` variants fire after the fact and cannot undo it.
     REJECTABLE_NON_OBJECT_TRIGGERS = %i[
       before_login before_password_reset_request before_connect before_subscribe
     ].freeze
@@ -607,9 +607,9 @@ module Parse
       # skips the DNS resolution and private/internal CIDR refusal. Other
       # checks (scheme, userinfo, host presence) still apply. Intended for
       # integration tests that register webhooks at Docker bridge hosts
-      # (e.g. +host.docker.internal+) which only resolve from inside the
+      # (e.g. `host.docker.internal`) which only resolve from inside the
       # Parse Server container. May also be enabled via
-      # +PARSE_WEBHOOK_ALLOW_PRIVATE_URLS=true+. Do not enable in
+      # `PARSE_WEBHOOK_ALLOW_PRIVATE_URLS=true`. Do not enable in
       # production: the resolution guard is what blocks attacker-driven
       # webhook redirection to internal hosts.
       # @return [Boolean]

data/parse-stack-next.gemspec

@@ -23,7 +23,25 @@ Gem::Specification.new do |spec|
     "rubygems_mfa_required" => "true",
   }
 
-  spec.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  # Ship only what an SDK consumer needs: the library, executables, the
+  # rendered guides + copy-paste examples, the README banner asset, and the
+  # standard metadata files. Everything else that is tracked purely for
+  # development — .github/, .vscode/, .bundle/, .env.*, scripts/, config/,
+  # Makefile, Rakefile, Gemfile(.lock), and dotfiles — is intentionally
+  # excluded so ~1MB of packaging noise isn't shipped to every install.
+  spec.files = `git ls-files -z`.split("\x0").select do |f|
+    f.start_with?("lib/", "bin/", "docs/", "examples/", "assets/") ||
+      %w[
+        README.md
+        CHANGELOG.md
+        LICENSE.txt
+        SECURITY.md
+        parse-stack-next.gemspec
+      ].include?(f)
+  end.reject do |f|
+    # Internal dev docs that live under docs/ but aren't consumer-facing.
+    f == "docs/client_sdk_todo.md"
+  end
   spec.bindir = "bin"
   spec.executables = ["parse-console"] #spec.files.grep(%r{^bin/pstack/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: parse-stack-next
 version: !ruby/object:Gem::Version
-  version: 5.5.3
+  version: 5.5.5
 platform: ruby
 authors:
 - Adrian Curtin
@@ -208,28 +208,9 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
-- ".bundle/config"
-- ".env.sample"
-- ".env.test"
-- ".github/ISSUE_TEMPLATE/bug_report.yml"
-- ".github/ISSUE_TEMPLATE/feature_request.yml"
-- ".github/dependabot.yml"
-- ".github/workflows/codeql.yml"
-- ".github/workflows/docs.yml"
-- ".github/workflows/release.yml"
-- ".github/workflows/ruby.yml"
-- ".gitignore"
-- ".ruby-version"
-- ".solargraph.yml"
-- ".vscode/settings.json"
-- ".yardopts"
 - CHANGELOG.md
-- Gemfile
-- Gemfile.lock
 - LICENSE.txt
-- Makefile
 - README.md
-- Rakefile
 - SECURITY.md
 - assets/parse-stack-next-avatar.png
 - assets/parse-stack-next-avatar.svg
@@ -240,7 +221,6 @@ files:
 - bin/parse-console
 - bin/server
 - bin/setup
-- config/parse-config.json
 - docs/TEST_SERVER.md
 - docs/_config.yml
 - docs/acl_clp_guide.md
@@ -316,6 +296,7 @@ files:
 - lib/parse/client/protocol.rb
 - lib/parse/client/request.rb
 - lib/parse/client/response.rb
+- lib/parse/client/url_redaction.rb
 - lib/parse/clp_scope.rb
 - lib/parse/console.rb
 - lib/parse/embeddings.rb
@@ -438,23 +419,6 @@ files:
 - lib/parse/webhooks/replay_protection.rb
 - lib/parse/webhooks/trigger_audit.rb
 - parse-stack-next.gemspec
-- scripts/debug-ips.js
-- scripts/docker/Dockerfile.parse
-- scripts/docker/atlas-init.js
-- scripts/docker/docker-compose.atlas.yml
-- scripts/docker/docker-compose.test.yml
-- scripts/docker/docker-compose.verifyemail.yml
-- scripts/docker/mongo-init.js
-- scripts/docker/preflight.sh
-- scripts/eval_mcp_with_lm_studio.rb
-- scripts/start-parse.sh
-- scripts/start_mcp_server.rb
-- scripts/test_server_connection.rb
-- scripts/vector_prototype/create_vector_index.js
-- scripts/vector_prototype/fetch_embeddings.py
-- scripts/vector_prototype/fixture_manifest.json
-- scripts/vector_prototype/query_prototype.rb
-- scripts/vector_prototype/run.sh
 homepage: https://github.com/neurosynq/parse-stack-next
 licenses:
 - MIT

data/.bundle/config

@@ -1,5 +0,0 @@
----
-BUNDLE_FORCE_RUBY_PLATFORM: "true"
-BUNDLE_FROZEN: "false"
-BUNDLE_PATH: "/home/runner/work/parse-stack-next/parse-stack-next/vendor/bundle"
-BUNDLE_DEPLOYMENT: "true"

data/.env.sample

@@ -1,138 +0,0 @@
-# Sample environment configuration for parse-stack.
-#
-# Copy to `.env` and fill in real values. `.env` is gitignored;
-# this file (`.env.sample`) is committed as the reference.
-#
-# Loaded automatically by:
-#   - `ruby -rdotenv/load -Ilib:test path/to/test.rb`
-#   - Anything that requires `dotenv` at boot
-# Or pass values inline:
-#   LLM_PROVIDER=openai LLM_API_KEY=sk-... bundle exec rake test:foo
-
-# ===========================================================================
-# Test harness
-# ===========================================================================
-
-# Routes the test suite at the Docker Compose Parse Server + MongoDB defined
-# in scripts/docker/docker-compose.test.yml. Unset for in-process unit tests.
-PARSE_TEST_USE_DOCKER='true'
-
-# ===========================================================================
-# Parse client (test fixtures + Rake tasks that boot a Parse client)
-#
-# Defaults below match scripts/docker/docker-compose.test.yml.
-# Override for testing against a different Parse Server instance.
-# ===========================================================================
-
-PARSE_SERVER_URL=http://localhost:2337/parse
-PARSE_APP_ID=myAppId
-PARSE_API_KEY=myApiKey
-PARSE_MASTER_KEY=myMasterKey
-
-# Optional client tuning (read by Parse::Client.new):
-# PARSE_OPEN_TIMEOUT=5
-# PARSE_TIMEOUT=30
-# PARSE_REQUIRE_HTTPS=true
-
-# Optional service URLs (only if you split webhooks/hooks endpoints):
-# PARSE_LIVE_QUERY_URL=
-# HOOKS_URL=
-
-# ===========================================================================
-# Test harness — uses an ISOLATED stack (not the values above)
-#
-# The integration test suite does NOT connect with the defaults above. It runs
-# on a deliberately isolated Docker stack — a private 29xxx host-port block, a
-# dedicated Compose project `psnext-it`, and the `parse_stack_next_it` database
-# — so it never collides with another Parse system on the same host. The full
-# value set is listed in `.env.test` (a committed reference; nothing auto-loads
-# it — source it or export the vars). The full port map and override variables
-# are documented in the "Isolated test environment" section of CLAUDE.md.
-# ===========================================================================
-
-# ===========================================================================
-# Webhooks
-# ===========================================================================
-
-# Required for the Parse::Webhooks Rack endpoint to accept calls.
-# Without this, the endpoint fails closed (4.0.0+ behavior).
-# PARSE_WEBHOOK_KEY=
-# PARSE_SERVER_WEBHOOK_KEY=
-# PARSE_WEBHOOK_ALLOW_UNAUTHENTICATED=false
-
-# ===========================================================================
-# MCP Server
-# ===========================================================================
-
-# Required dual-gate for the standalone MCP server. Both this AND
-# `Parse.mcp_server_enabled = true` (in code) are required before
-# Parse::Agent.enable_mcp! will boot. Embedded MCPRackApp does NOT require
-# either flag.
-# PARSE_MCP_ENABLED=true
-
-# X-MCP-API-Key value used by MCPServer and the rake test:mcp_inspector task.
-# MCP_API_KEY=changeme-mcp-key
-
-# Override the inspector port (default 3099) and key when running
-# `rake test:mcp_inspector`:
-# MCP_INSPECTOR_PORT=3099
-# MCP_INSPECTOR_KEY=rake-inspector-key
-
-# ===========================================================================
-# LLM provider for `rake mcp:chat` / `rake mcp:console`
-# (also consumed by the LLM-driven integration test files under
-#  test/lib/parse/agent/mcp_real_llm_*_test.rb)
-#
-# Pick ONE provider stanza below and uncomment its block. The chat console
-# refuses to start without LLM_PROVIDER set.
-# ===========================================================================
-
-# --- Option A: LM Studio (free, local) -------------------------------------
-# Start the LM Studio HTTP server first (Server tab → Start Server), with a
-# tool-capable model loaded (Qwen2.5-7B-instruct, Llama-3.1-8B-instruct,
-# gpt-oss-20b, etc.). The API key value is ignored by LM Studio.
-#
-# LLM_PROVIDER=lmstudio
-# LLM_MODEL=qwen2.5-7b-instruct
-# LLM_BASE_URL=http://localhost:1234/v1
-# LLM_API_KEY=lm-studio
-
-# --- Option B: OpenAI gpt-4o-mini (~$0.0001 per run) -----------------------
-# Get a key at https://platform.openai.com/api-keys
-#
-# LLM_PROVIDER=openai
-# LLM_API_KEY=sk-proj-...
-# LLM_MODEL=gpt-4o-mini
-# LLM_BASE_URL=https://api.openai.com/v1   # default; override only if proxying
-
-# --- Option C: Anthropic Claude Haiku (~$0.001 per run) --------------------
-# Get a key at https://console.anthropic.com/settings/keys
-#
-# LLM_PROVIDER=anthropic
-# LLM_API_KEY=sk-ant-api03-...
-# LLM_MODEL=claude-haiku-4-5
-# LLM_BASE_URL=https://api.anthropic.com/v1
-
-# --- Legacy LLM endpoint (Parse::Agent#ask path, NOT the MCP smoke test) ---
-# Used by the in-process Parse::Agent#ask conversational path, separate from
-# the MCP smoke test above. Defaults to a local OpenAI-compatible endpoint.
-#
-# LLM_ENDPOINT=http://localhost:1234/v1
-# OPENAI_API_KEY=
-# ANTHROPIC_API_KEY=
-
-# ===========================================================================
-# Embedding providers (Parse::Embeddings)
-#
-# Used by `Parse::Embeddings.register(...)` in initializers / tests for the
-# text-only providers shipped in v5.0: OpenAI, Cohere, Voyage, Jina, Qwen.
-# LocalHTTP providers (Ollama, LM Studio, vLLM, self-hosted voyage-4-nano /
-# Qwen3-Embedding) read no env var by default — their api_key (if any) is
-# passed at registration time.
-# ===========================================================================
-
-# OPENAI_API_KEY=sk-...
-# COHERE_API_KEY=
-# VOYAGE_API_KEY=pa-...
-# JINA_API_KEY=jina_...
-# DASHSCOPE_API_KEY=sk-...   # Alibaba Cloud DashScope (Qwen 3 embeddings)

data/.env.test

@@ -1,10 +0,0 @@
-# Parse Server Test Configuration
-PARSE_TEST_SERVER_URL=http://localhost:29337/parse
-PARSE_TEST_APP_ID=psnextItAppId
-PARSE_TEST_API_KEY=psnext-it-rest-key
-PARSE_TEST_MASTER_KEY=psnextItMasterKey
-
-# Docker Configuration
-PARSE_TEST_USE_DOCKER=true
-PARSE_TEST_AUTO_START=false
-PARSE_TEST_AUTO_STOP=false