example/entrypoint.sh.example

@@ -47,7 +47,12 @@ fi
 if [ -f "/code/Gemfile" ]; then
   echo "Gemfile found — running bundle install..."
   pushd /code
-  BUNDLE_GEMS__GRAPHQL__PRO="gql_2e0_d66f5103067:70c113ba329" bundle install
+  # TODO: Elaborate or expand — wire secrets (e.g. a private gem registry token)
+  # in from the environment instead of hardcoding. Compose's auto-loaded .env only
+  # does YAML interpolation (next to the compose file), not container injection;
+  # injecting needs `environment:`/`env_file:`. In the project-local model, point
+  # this at the mounted project's .safeclaude/.env so secrets live with the project.
+  BUNDLE_GEMS__GRAPHQL__PRO="${BUNDLE_GEMS__GRAPHQL__PRO:-}" bundle install
   popd
 fi