feat: add blockEnvFiles hook to prevent access to .env files

[timoconnellaus]

Summary

• Adds a new predefined hook blockEnvFiles that prevents reading or writing to .env files
• Allows access to example env files (.env.example, .env.sample, etc.)
• Provides clear error messages when access is blocked

Implementation Details

• Works with Read, Write, Edit, and MultiEdit tools
• Uses regex patterns to identify .env files and their variants
• Includes comprehensive test coverage (18 test cases, all passing)

Usage

import { defineHooks, blockEnvFiles } from '@timoaus/define-claude-code-hooks';

export default defineHooks({
  PreToolUse: [
    blockEnvFiles, // Protects sensitive .env files
  ],
});

Test Plan

• Blocks access to .env files
• Blocks access to .env variants (.env.local, .env.production, etc.)
• Allows access to example files (.env.example, .env.sample, etc.)
• Works with all file operation tools (Read, Write, Edit, MultiEdit)
• Ignores non-file tools (Bash, WebFetch, etc.)
• Provides clear error messages

🤖 Generated with Claude Code