{
  "permissions": {
    "allow": [
      "Bash(python run_checks.py)"
    ],
    "ask": [
      "Bash(git push *)"
    ],
    "deny": [
      "Edit(./protected/**)"
    ]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "python -c \"import os,runpy,sys; p=os.environ.get('CLAUDE_PROJECT_DIR'); (print('WRITE_DENIED: CLAUDE_PROJECT_DIR is required',file=sys.stderr),sys.exit(2)) if not p else runpy.run_path(os.path.join(p,'hooks','guard_write.py'),run_name='__main__')\"",
            "timeout": 10
          }
        ]
      }
    ]
  }
}