U

uze-sh/hook-plugin

Copy page

Conformance portable hooks: one group whose first handler denies the shell tool when the call mentions secrets, and whose second handler denies with its own marker — so the deny scenario proves first-deny-wins by that marker's absence. A parallel native-matcher group intercepts the conformance MCP tool for the OpenCode vertical, whose runtime exposes no shell tool.