https://avo.cool logo
Powered by
Hi folks! Hope you're well. I have a question a...
# avo-3
s
Hi folks! Hope you're well. I have a question about gem server auth. We use AI tools, including cloud environments like Claude Code for Web, Cursor Web, etc. But we often run into the issue that our test suite can't run because 
bundle install
fails without the gem server auth token. Your [docs page](https://docs.avohq.io/3.0/gem-server-authentication.html#Forbidden%20403%20in%20a%20sandboxed%20or%20cloud%20environment%20(Cursor%20Cloud)) mentions cursor cloud which suggests it's acceptable to put our packager.dev token in the environment secrets. Claude Code for Web has something similar, though advises against putting secrets there. Just thought I'd check, given how popular these tools are these days, whether you've run into this one before and have a particular recommendation for enabling cloud/web agents to run 
bundle install
? https://cdn.discordapp.com/attachments/1138182212655788054/1531328644470013962/Screenshot_2026-07-27_at_16.50.30.png?ex=6a68d06f&is=6a677eef&hm=cd08700c94b5342c46c5789f5996add0cf4a90e9ae3b22a1a1c1fba58a58b158&
m
Thread automatically created by timwis in #1138182212655788054
l
> Claude Code for Web has something similar, though advises against putting secrets there. Hi @sparse-hair-56061 , I'm curious, how do you handle other secret envs in Claude Code for Web? Or you're still figuring out?
From here: https://code.claude.com/docs/en/claude-code-on-the-web > A dedicated secrets store is not yet available. Both environment variables and setup scripts are stored in the environment configuration, visible to anyone who can edit that environment. If you need secrets in a cloud session, add them as environment variables with that visibility in mind.
From the "not yet available" I guess is something that is work in progress on them side?
But since the "leak" is to "anyone who can edit that environment." I think it is safe to add the packager env there assuming your environment is accessible only by you and your team
s
@loud-jewelry-99127 Actually our test suite doesn't rely on any other secrets. We're not using it to run the full app in a way that we'd test out in the browser or anything; just for claude to be able to build something and run the test suite to verify it passes.
But thanks, I had a feeling that was the case, but thought it best to check!
l
Anytime!
2 Views
PreviousNext
Powered by