Capxul Sandbox (@capxul/sandbox)

The published interactive CLI for two sandbox operator/developer tasks:

• key create mints a test publishable key for a local origin and writes the canonical Next.js environment names to .env.local.
• faucet send mints test USDX on Base Sepolia to a Capxul email, @org-handle, or an explicitly confirmed raw-address escape hatch.

npx @capxul/sandbox key create
npx @capxul/sandbox faucet send

# Repository development
vp run --filter @capxul/sandbox dev -- --help

key create uses the public quickstart endpoint and needs no operator secret. faucet send invokes the canonical Convex deployment and requires operator configuration from ~/.config/capxul/secrets.env; never print or commit those values.

Verify in the repository

vp run --filter @capxul/sandbox check-types
vp test run apps/sandbox
vp run --filter @capxul/sandbox build

These checks prove parsing, environment-file rewriting, bounded amount conversion, Convex command construction, and packing. They do not prove a live key mint, faucet transaction, or installed CLI artifact.

Repository Rule 4 names vp run --filter @capxul/sandbox proofs:live as the live-only ProofKit boundary, but that command does not exist yet. Keep live acceptance unproven until #920 lands. #922 tracks the separate packed-install/bin smoke gap.

Read CONTEXT.md before changing command, secret, deployment, or proof behavior.