template-root/.claude/settings.local.json

.jsonc

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",

  // ====================== PERMISSIONS (Core for independence) ======================
  "permissions": {
    "defaultMode": "bypassPermissions",   // ← This eliminates almost ALL prompts (websearch, bash, edits, etc.)
    
    // Deny list = your safety net (these ALWAYS block, even in bypass mode)
    "deny": [
      "Read(./.env*)",
      "Read(./.env.local*)",
      "Read(./.env.*)",
      "Read(./secrets/**)",
      "Read(~/.ssh/**)",
      "Read(*/id_rsa*)",
      "Read(*/.npmrc)",
      "Bash(rm -rf *)",
      "Bash(rm -r *)",
      "Bash(curl *)",
      "Bash(wget *)",
      "Bash(ssh *)",
      "Bash(git push --force*)",
      "Bash(sudo *)"
    ],

    // (Optional) Explicit allow list for documentation / future use
    // With bypassPermissions these are not strictly needed, but useful if you switch modes
    "allow": [
      "WebSearch",                  // ← Explicit web search (the one you asked about)
      "WebFetch(*)",                // ← All web fetching / research
      "Bash(**)",
      "Read(**)",
      "Edit(**)",
      "MultiEdit(**)",
      "Write(**)",
      "Grep(**)",
      "Glob(**)",
      "LS(**)",
      "Task(**)",
      "mcp__*"                      // All MCP tools (browser, github, etc.)
    ]
  },

  // ====================== SAFETY & EXECUTION ======================
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true
  },

  // ====================== AUTONOMY FEATURES ======================
  "enableAllProjectMcpServers": true,     // Auto-approve all local MCP tools
  "alwaysThinkingEnabled": true,          // Claude thinks harder by default (better research & code)

  // ====================== UX / OUTPUT ======================
  "outputStyle": "compact",               // Much less verbose — fewer unnecessary comments

  // ====================== ENVIRONMENT ======================
  "env": {
    "CLAUDE_CODE_ENABLE_TELEMETRY": "0"   // Disable tracking (privacy)
    // Add any project-specific env vars here, e.g.:
    // "NODE_ENV": "development"
  }

  // ====================== OPTIONAL EXTRAS (uncomment if you want them) ======================
  // "teammateMode": "in-process",        // Faster sub-agents (or "tmux" for parallel)
  // "language": "en",                    // Force language if needed
  // "fileSuggestion": {                  // Custom @file autocomplete script
  //   "type": "command",
  //   "command": "~/.claude/file-suggestion.sh"
  // }
}

settings.local.json

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "permissions": {
    "defaultMode": "bypassPermissions",
    "deny": [
      "Read(./.env*)",
      "Read(./.env.local*)",
      "Read(./.env.*)",
      "Read(./secrets/**)",
      "Read(~/.ssh/**)",
      "Read(*/id_rsa*)",
      "Read(*/.npmrc)",
      "Bash(rm -rf *)",
      "Bash(rm -r *)",
      "Bash(curl *)",
      "Bash(wget *)",
      "Bash(ssh *)",
      "Bash(git push --force*)",
      "Bash(sudo *)"
    ],
    "allow": [
      "WebSearch",
      "WebFetch(*)",
      "Bash(**)",
      "Read(**)",
      "Edit(**)",
      "MultiEdit(**)",
      "Write(**)",
      "Grep(**)",
      "Glob(**)",
      "LS(**)",
      "Task(**)",
      "mcp__*"
    ]
  },
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true
  },
  "enableAllProjectMcpServers": true,
  "alwaysThinkingEnabled": true,
  "outputStyle": "compact",
  "env": {
    "CLAUDE_CODE_ENABLE_TELEMETRY": "0"
  }
}