Setup Toolchain Enforcement

What This Sets Up

• PreToolUse hooks block banned CLI commands, give actionable suggestions
• Destructive command guards prevent rm -rf (except safe targets like node_modules/.next/dist/build), git push --force, git reset --hard, git checkout . / git restore .
• SessionStart hook set env vars for LLM-friendly defaults
• Hooks in .claude/settings.json (project-level, committed to git)

Steps

1. Create hook scripts

Copy scripts/enforce-toolchain.sh and scripts/session-env.sh to .claude/hooks/. Make executable: chmod +x .claude/hooks/*.sh

2. Configure hooks in .claude/settings.json