{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "description": "Block destructive git and shell commands",
        "hooks": [
          {
            "type": "command",
            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/scripts/validate-bash.sh",
            "timeout": 5
          }
        ]
      },
      {
        "matcher": "Write|Edit",
        "description": "Warn when modifying sensitive files",
        "hooks": [
          {
            "type": "command",
            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/scripts/validate-file.sh",
            "timeout": 3
          }
        ]
      }
    ]
  }
}