permissionDecision: "deny" - Provides permissionDecisionReason with clear alternatives - Creates a self-correcting feedback loop ## Return structured feedback Use HookJSONOutput to deny with guidance: https://egghead.io/lessons/guide-claude-code-with-rich-pre-tool-use-feedback~ex177