.claude/settings.json

@@ -1,28 +1,23 @@
 {
-    "sandbox": {
-        "network": {
-            "allowLocalBinding": true,
-            "allowUnixSockets": ["/Users/id/.colima/default/docker.sock"],
-            "allowedDomains": [
-                "github.com",
-                "registry.npmjs.org",
-                "*.npmjs.org",
-                "docker.com",
-                "docker.io",
-                "gcr.io",
-                "*.golang.org"
-            ]
-        }
-    },
-    "enabledPlugins": {
-        "gopls-lsp@claude-plugins-official": true,
-        "context7@claude-plugins-official": true
-    },
-    "permissions": {
-        "defaultMode": "plan",
-        "allow": [
-            "mcp__context7__resolve-library-id",
-            "mcp__context7__get-library-docs"
-        ]
+  "permissions": {
+    "allow": [],
+    "defaultMode": "default"
+  },
+  "sandbox": {
+    "network": {
+      "allowedDomains": [
+        "github.com",
+        "registry.npmjs.org",
+        "*.npmjs.org",
+        "docker.com",
+        "docker.io",
+        "gcr.io",
+        "*.golang.org"
+      ],
+      "allowUnixSockets": [
+        "/var/run/docker.sock"
+      ],
+      "allowLocalBinding": true
     }
+  }
 }

.gitignore

@@ -2,6 +2,12 @@
 .vscode/
 artifacts/.claude/scheduled_tasks.lock
 
+# Per-developer Claude Code overrides. The committed
+# `.claude/settings.json` holds the shared project defaults;
+# `settings.local.json` is each developer's local override
+# (looser permissions, disabled sandbox) and must not be staged.
+.claude/settings.local.json
+
 # Per-developer Vite dotenv overrides. The committed
 # `ui/frontend/.env.development` ships sane defaults for the
 # `tools/local-dev/` stack; `.local` siblings stay personal and

tools/local-dev/README.md

@@ -223,8 +223,8 @@ make status         docker compose ps
   Application → Storage → Clear site data) and log in again.
 - **`make down` leaves a `galaxy-game-…` container behind** — fixed
   in this Makefile: `make down` and `make clean` now stop spawned
-  engine containers via the `org.opencontainers.image.title=
-  galaxy-game-engine` label. To stop them by hand without touching
+  engine containers via the `galaxy.backend=1` label. To stop them by
+    hand without touching
   the rest of the stack, `make stop-engines`.
 - **Engine container exits with `bind source path does not exist:
   /tmp/galaxy-game-state/<uuid>` after a host reboot** — macOS clears