{
  "version": "1",
  "name": "protect-secrets",
  "rules": [
    {
      "agent": "*",
      "tools": ["write", "edit"],
      "files": [".env", ".env.*", "*.key", "*.pem", "*.p12"],
      "action": "deny"
    },
    {
      "agent": "*",
      "tools": ["read"],
      "files": [".env", ".env.*", "*.key", "*.pem"],
      "action": "ask"
    },
    {
      "agent": "*",
      "tools": ["write", "edit"],
      "files": ["**/node_modules/**"],
      "action": "deny"
    }
  ]
}