{
  "_comentariu": "Sablon pentru ~/.claude-discord/bot-settings.json, pasat cu --settings. Copiaza-l si ajusteaza calea absoluta a hook-ului daca repo-ul nu e in /workspace/romfastsql.",
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "python3 /workspace/romfastsql/proxmox/lxc171-claude-agent/discord-bridge/security/confirm_hook.py",
            "timeout": 330
          }
        ]
      }
    ]
  },
  "permissions": {
    "_comentariu": "NU pune aici Bash(ssh:*) / Bash(scp:*): regulile deny au precedenta peste --permission-mode bypassPermissions si blocheaza turul INAINTE de hook, taind accesul la infrastructura (incident 2026-08-30, puntea nu putea ajunge la moltbot). Bariera reala e hook-ul PreToolUse de mai sus, plus wrapper-ul `infra`.",
    "deny": [
      "Bash(pct destroy:*)",
      "Bash(qm destroy:*)",
      "Bash(zfs destroy:*)"
    ]
  }
}