diff --git a/src/main/services/infrastructure/TriggerManager.ts b/src/main/services/infrastructure/TriggerManager.ts
index 4dd0a658..b1ad8961 100644
--- a/src/main/services/infrastructure/TriggerManager.ts
+++ b/src/main/services/infrastructure/TriggerManager.ts
@@ -33,9 +33,7 @@ export const DEFAULT_TRIGGERS: NotificationTrigger[] = [
     name: '.env File Access Alert',
     enabled: true,
     contentType: 'tool_use',
-    toolName: 'Any Tool',
     mode: 'content_match',
-    matchField: 'command',
     matchPattern: '/.env',
     isBuiltin: true,
     color: 'red',
diff --git a/src/renderer/components/settings/NotificationTriggerSettings/utils/trigger.ts b/src/renderer/components/settings/NotificationTriggerSettings/utils/trigger.ts
index fb9803ae..e0d42b77 100644
--- a/src/renderer/components/settings/NotificationTriggerSettings/utils/trigger.ts
+++ b/src/renderer/components/settings/NotificationTriggerSettings/utils/trigger.ts
@@ -76,7 +76,8 @@ export function getAvailableMatchFields(
           { value: 'args', label: 'Arguments' },
         ];
       default:
-        return [];
+        // "Any Tool" - match against the entire JSON-serialized input
+        return [{ value: '', label: 'Full Input (JSON)' }];
     }
   }