heimdall

Audit a project's secrets/conceal posture — config, file ownership/mode, broker presence, .mcp.json wiring, and whether the agent uid is actually denied. Use when the user says "audit secrets", "secrets status", "is my secrets safe set up", "check the conceal boundary", or asks whether the secrets are actually protected.

Conceal a file or folder behind the Heimdall read-deny guard. Use when the user says "conceal <path>", "hide <path> from the agent", "block agent reads of <path>", "make <path> unreadable", or wants a path the agent cannot read OR write. Adds an anchored deny pattern to .claude/heimdall-conceal.json so the agent's Read/Grep/Glob/Edit/Write/MultiEdit and Bash references to the path (or anything under a folder) are HARD-denied — there is no unlock phrase. Layer-2 only (no sudo), active immediately. For an OS-level secrets boundary use /heimdall:harden. This is distinct from /heimdall:protect, which only blocks writes and is liftable by an unlock phrase.

Harden a project's MCP secrets behind a setuid OS boundary (Layer 1). Use when the user says "harden secrets", "set up the secrets safe", "lock my mcp secrets at the OS level", "install the setuid broker", or asks for a real (not just hook-level) boundary around a credentials file. Creates/uses .claude/heimdall-conceal.json, then guides the privileged setup (creates a runner uid, locks the file, installs the setuid broker, rewrites .mcp.json). This is the OS-level companion to /heimdall:conceal (which is hook-only, no sudo).

Configure Heimdall file/directory protection storage and scan for paths to protect. Use when the user says "install heimdall", "set up heimdall", "set up protection", "configure heimdall", "create lock store", "initialize heimdall", or asks to start guarding files. Picks local (./.claude/heimdall), worktree (../.claude/heimdall), global (~/.claude/heimdall/<project>), or shared (~/.claude/heimdall-shared, user-wide across every project), then suggests protectable paths.

List Heimdall lock blocks. Use when the user says "list locks", "show protected files", "what's protected", "what is heimdall guarding", "show heimdall config", "list protection", or asks to inspect or audit what's locked. Displays each store, its lock blocks, unlock phrases, and the resolved file/dir targets.

4 hooks across 1 event