{ "permissions": { "allow": [ ], "deny": ["Read(./.env)", "Read(./.env.*)", "Read(./secrets/**)"] }, "hooks": { "PostToolUse": [ { "matcher": "Write(lessons/**/*.json)", "hooks": [ { "type": "command", "command": "npm run format.lessons 2>/dev/null || true" } ] } ] } }