Function process 

pub fn process(envelope: &str, mode: Mode) -> Option<Value>

Process a raw PreToolUse stdin envelope. Returns the decision JSON to print, or None to allow silently. Fail-open: any parse error, a non-Bash tool, or a missing command all yield None.