Claude Code
Note
Guide: draft. The source build implements the current behavior below; remaining design work is marked explicitly.
Enforcement level
L1 Cooperative.
The host honors the decision through its hook mechanism, which can be disabled with --bare or disableAllHooks.
Interception
Shiin uses Claude Code’s PreToolUse hook.
The hook receives the tool payload and returns allow, deny, or ask.
What it cannot see
- Actions that do not pass through the hook.
- Code run by an allowed command.
Setup
- Install Shiin.
- Run
shiin init. - Configure the host using the quickstart.
shiin hook claude-codereads one JSON payload from standard input; it is not an interactive setup command.