SessionStart Context Injector

Block Force Push

PreToolUse hook that blocks any Bash tool call matching `git push --force` or `git push -f`. Prevents accidental history rewrite on shared branches.

PostToolUse Audit Log

PostToolUse hook that appends every tool call + result to a local audit log. Useful for compliance-heavy environments where you need a paper trail of what the agent did.