.claude/settings.json

@@ -1,8 +1,10 @@
 {
+  "permissions": {
+    "allow": [],
+    "defaultMode": "default"
+  },
   "sandbox": {
     "network": {
-            "allowLocalBinding": true,
-            "allowUnixSockets": ["/Users/id/.colima/default/docker.sock"],
       "allowedDomains": [
         "github.com",
         "registry.npmjs.org",
@@ -11,18 +13,11 @@
         "docker.io",
         "gcr.io",
         "*.golang.org"
-            ]
+      ],
-        }
+      "allowUnixSockets": [
-    },
+        "/var/run/docker.sock"
-    "enabledPlugins": {
+      ],
-        "gopls-lsp@claude-plugins-official": true,
+      "allowLocalBinding": true
-        "context7@claude-plugins-official": true
+    }
-    },
-    "permissions": {
-        "defaultMode": "plan",
-        "allow": [
-            "mcp__context7__resolve-library-id",
-            "mcp__context7__get-library-docs"
-        ]
   }
 }

.gitignore

@@ -2,6 +2,12 @@
 .vscode/
 artifacts/.claude/scheduled_tasks.lock
 
+# Per-developer Claude Code overrides. The committed
+# `.claude/settings.json` holds the shared project defaults;
+# `settings.local.json` is each developer's local override
+# (looser permissions, disabled sandbox) and must not be staged.
+.claude/settings.local.json
+
 # Per-developer Vite dotenv overrides. The committed
 # `ui/frontend/.env.development` ships sane defaults for the
 # `tools/local-dev/` stack; `.local` siblings stay personal and

tools/local-dev/README.md

@@ -223,8 +223,8 @@ make status         docker compose ps
   Application → Storage → Clear site data) and log in again.
 - **`make down` leaves a `galaxy-game-…` container behind** — fixed
   in this Makefile: `make down` and `make clean` now stop spawned
-  engine containers via the `org.opencontainers.image.title=
+  engine containers via the `galaxy.backend=1` label. To stop them by
-  galaxy-game-engine` label. To stop them by hand without touching
+    hand without touching
   the rest of the stack, `make stop-engines`.
 - **Engine container exits with `bind source path does not exist:
   /tmp/galaxy-game-state/<uuid>` after a host reboot** — macOS clears