I noticed that fly.io’s sprite video demonstrated that they somehow forwarded xdg-open calls and your local browser would open when Claude Code auth was requested even though it was running on a remote firecracker vm. I found this post that describes how to implement this. I ending porting this to my devcontainer setup and even got it to work even when I ssh into a linux box running devcontainers from my Mac.