ccchainClaude Code Chain

Structural permission control for Claude Code

Structural Context

Tracks commands inside pipes, redirects, and subshells — not just the first word.

Block messages tell Claude why and what to do instead — enabling autonomous self-correction.

Commands separated by && or ; are evaluated independently, matching shell execution semantics.

Share common rules across find, xargs, grep via reusable templates with extends and next.

Flat expansion of all rules shows exactly what passes and what gets blocked.

Go single binary with only one dependency (mvdan.cc/sh). No runtime, no config daemon.