Terminal troubleshooting

Linux

If Bubblewrap is missing or unusable, RepoTunnel blocks AI terminal execution rather than falling back to an unrestricted shell. Install/fix Bubblewrap and restart RepoTunnel.

Credential access

A sandboxed shell not seeing a GitHub token does not mean RepoTunnel's trusted GitHub connection is disconnected. The trusted GitHub broker intentionally keeps credentials out of the AI shell.

Distinguish policy denial from a crash

An unavailable native sandbox is an intentional fail-closed refusal. RepoTunnel does not run AI commands on the unrestricted host simply because Bubblewrap, Windows AppContainer or the macOS backend cannot be initialized.

Read the exact error, inspect configured command policy and compare host-vs-sandbox tool visibility using environment diagnostics.

Understand hidden credentials

Sandboxed AI terminal sessions intentionally omit many credential files and sensitive environment variables. A trusted RepoTunnel GitHub connection can support allowlisted GitHub operations without giving the AI shell direct access to the credential.

Do not work around missing credentials by copying your token into the workspace or exporting it in terminal output.