## Environment

- Root password: `$SANDBOX_PASSWORD`, already exported from `~/.env.claude` in every shell. Use `printf '%s\n' "$SANDBOX_PASSWORD" | sudo -S <command>`. Never echo or print the value.
- Can install packages as needed using sudo
- This machine communicates with external services — treat it as a networked environment
- **This is a VM accessed from other devices.** When starting any dev server / web service / preview, always bind to `0.0.0.0` (e.g. `vite --host 0.0.0.0`, `--host`, `HOST=0.0.0.0`) — never localhost-only — so it's reachable. Report the LAN-IP URL, not the `localhost` one.

## Persistent Configuration

- Environment file: `~/.env.claude` (auto-loaded in shell sessions)
- For Claude sessions, source it manually if needed: `source ~/.env.claude`