Capxul Sandbox (@capxul/sandbox)

The published interactive CLI for two sandbox operator/developer tasks:

• key create mints a test publishable key for a local origin and writes the canonical Next.js environment names to .env.local.
• faucet send mints test USDX on Base Sepolia to a Capxul email, @org-handle, or an explicitly confirmed raw-address escape hatch.

npx @capxul/sandbox key create
npx @capxul/sandbox faucet send

# Repository development
vp run --filter @capxul/sandbox dev -- --help

key create uses the Railway public staging Site endpoint and needs no operator secret. APP_ENV does not retarget this public command; use the returned key only with the staging tuple. faucet send invokes the canonical Convex deployment and requires operator access in the process environment: inside the infrastructure repository, run it through the one env entry point (APP_ENV=staging vp exec bash scripts/capxul-env.sh npx @capxul/sandbox faucet send); outside it, supply the self-hosted admin key directly (CONVEX_SELF_HOSTED_ADMIN_KEY=… npx @capxul/sandbox faucet send). Never print or commit that value.

Verify in the repository

vp run --filter @capxul/sandbox check-types
vp test run apps/sandbox
vp run --filter @capxul/sandbox build

These checks prove parsing, environment-file rewriting, bounded amount conversion, Convex command construction, and packing. They do not prove a live key mint, faucet transaction, or installed CLI artifact.

Repository Rule 4 names vp run --filter @capxul/sandbox proofs:live as the live-only ProofKit boundary, but that command does not exist yet. Keep live acceptance unproven until #920 lands. #922 tracks the separate packed-install/bin smoke gap.

Read CONTEXT.md before changing command, secret, deployment, or proof behavior.