pub fn process(envelope: &str, mode: Mode) -> Option<Value>Expand description
Process a raw PreToolUse stdin envelope. Returns the decision JSON to
print, or None to allow silently. The Bash command is classified by
analyze; the harness’s own Grep / Glob / Read calls are steered
from their structured fields. Fail-open: any parse error, an
unhandled tool, or a missing field all yield None.