Why does login work locally but fail in the sandbox?

The sandbox has a separate CLI home and only selected configuration and credentials are migrated. Local authentication stored in an OS credential store may not be directly portable.

Before you begin

A work engine is the CLI process that performs the task. OfficeCubs supplies the task context and records its progress, while authentication, model availability and usage charges come from your chosen provider. Successful detection is a setup check, not proof that every model or task will work.

Steps

1. Check which tool failed inside the sandbox.
2. Read the authentication error rather than changing workspace mode blindly.
3. Use a supported key, token or interactive login for that sandbox tool.

Example

A Claude login held in the macOS keychain cannot simply be copied as a normal credential file into a Linux container.

Check the result

Run a small sandbox task after authorization and verify that it remains in the intended environment.

Limits and troubleshooting

OfficeCubs does not copy the entire host environment or all CLI hooks and plugins. Do not assume every local setup will transfer unchanged.