From a291d4b4bd82bc274ed08a49890ecc0b41fcdfa1 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 28 Feb 2026 18:02:32 +0000 Subject: [PATCH 1/2] Add default Claude Code project config Allow WebFetch and WebSearch tools, enable sandbox with autoAllowBashIfSandboxed. https://claude.ai/code/session_012Zf75Rf7DY5bKkLk6xCGFL --- .claude/settings.json | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 .claude/settings.json diff --git a/.claude/settings.json b/.claude/settings.json new file mode 100644 index 0000000..3e9870d --- /dev/null +++ b/.claude/settings.json @@ -0,0 +1,12 @@ +{ + "permissions": { + "allow": [ + "WebFetch", + "WebSearch" + ] + }, + "sandbox": { + "autoAllowBashIfSandboxed": true, + "enabled": true + } +} From d457b1e754bf0b70cfbe7af4f5cc531d3bc753fa Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 28 Feb 2026 18:03:46 +0000 Subject: [PATCH 2/2] Add default Claude Code project config MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Allow all bash commands sandboxed to the working directory and all network requests (WebFetch, WebSearch). This is a good balance between security and velocity — override in .claude/settings.local.json if needed. https://claude.ai/code/session_012Zf75Rf7DY5bKkLk6xCGFL --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 2e3defb..ca5773a 100644 --- a/README.md +++ b/README.md @@ -91,6 +91,10 @@ ninja # builds figures and the paper git commit # checks format, lints, and type checks ``` +### Claude Code + +Default project settings in `.claude/settings.json` allow all bash commands sandboxed to the working directory and all network requests (`WebFetch`, `WebSearch`). This is a good balance between security and velocity. Override these in `.claude/settings.local.json` if you like. + ### Files to know - `flake.nix` defines system dependencies like `texlive`