claude is now aware that its in a container

entrypoint.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+# Prepend the sandbox system prompt so Claude knows it is containerised and asks
+# the user to run host-side commands. Skipped for subcommands and for
+# --help/--version, which do not take the flag.
+set -e
+
+PROMPT_FILE=/etc/ccc/sandbox-prompt.md
+
+case "$1" in
+  agents|attach|auth|auto-mode|doctor|gateway|import|install|logs|mcp|plugin|plugins|project|respawn|rm|setup-token|stop|kill|ultrareview|update|upgrade|-h|--help|-v|--version)
+    exec claude "$@"
+    ;;
+esac
+
+if [ -r "$PROMPT_FILE" ]; then
+  exec claude --append-system-prompt "$(cat "$PROMPT_FILE")" "$@"
+fi
+
+exec claude "$@"