Repository navigation
Fixes #83: registered PreToolUse hooks now show their original blocking reason in Codex and Claude. Governed and legacy paths retain their existing stdout JSON, exit code 2, and admission policy.
Shell denials include supported single-command read alternatives. Regression coverage includes malformed input, internal failures, unchanged allows, and the native Windows adapter.