{
  "permissions": {
    "deny": ["Read(.env)"]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Read|Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "python3 .claude/hooks/protect_secrets.py"
          }
        ]
      }
    ]
  }
}