1 question
Match `mcp__<server>__<tool>` on PreToolUse / PostToolUse, return structured JSON for clean permission decisions, and put logging or telemetry hooks in async mode so they never block the session.