alt Hacker NewsDispatch/Cowork is basically claude code in a container. The section "Why not run it in a container?" would address your question in the post. One example I run into is that Cowork won't download and fill out or read pdfs or other files due to container permissions. Vanilla claude code has no problem using curl and wget.
Cowork gets tangled with git as well. Fails, and then can't delete lock files.
Running a helper from the terminal, making Claude work in a working directory, and then create a .commit file has been my workaround for this for a while now.
Imagine there's a better solution nowadays, but this allows me to use dispatch building on Vercel, so I can check it out from wherever, without too much pain.