By highflame-ai
Highflame Overwatch — Claude Code hook adapter for macOS/Linux. Routes hook events to Cerberus.
Routes Claude Code hook events directly to the Highflame Cerberus security backend for real-time evaluation (prompt-injection detection, tool-call gating, session auditing).
This is the daemon-less install path: no local process, no background service — just the plugin and an API key. If you want the local-daemon path instead, install @highflame/overwatch from npm.
| Plugin | Platform |
|---|---|
overwatch-mac | macOS / Linux |
overwatch-windows | Windows |
Each plugin wires the same Claude Code hook events and forwards them to POST /v1/hooks/evaluate?format=ide on Cerberus:
PreToolUse (matcher .*) — gate tool calls before executionPostToolUse (matcher .*) — audit after tool completesUserPromptSubmit — inspect user promptsSessionStart — session-level contextStop — agent stop signalNotification — Claude Code notifications (e.g. permission prompts)Cerberus responds in Claude Code's native hook JSON format (via ?format=ide), so blocking / allow decisions are handled end-to-end.
From the Claude Code CLI:
/plugin marketplace add highflame/overwatch-claude-code
/plugin install overwatch-mac # or overwatch-windows
For local development, point the marketplace at this checkout:
/plugin marketplace add file:///absolute/path/to/overwatch-claude-code
/plugin install overwatch-mac
Set these in your shell environment (the Claude Code process must inherit them):
| Variable | Required | Default | Purpose |
|---|---|---|---|
HIGHFLAME_API_KEY | yes | — | Your Highflame API key |
HIGHFLAME_URL | no | https://cerberus.highflame.ai | Cerberus endpoint (override for self-hosted or local dev) |
If HIGHFLAME_API_KEY is not set, the hook exits 0 silently (fail-open). Claude Code is never blocked by a missing key or a network failure.
@highflame/overwatch (npm) and use ~/.overwatch/universal-hook.sh. The daemon listens on 127.0.0.1:17580 and auto-starts.~/.claude/settings.json directly using the templates in highflame-ramparts/packages/guardian/hooks/claudecode/.Apache-2.0.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub highflame-ai/overwatch-claude-code --plugin overwatch-macHighflame Overwatch — Claude Code hook adapter for Windows. Routes hook events to Cerberus.
Ultra-compressed communication mode. Cuts ~75% of tokens while keeping full technical accuracy by speaking like a caveman.
Memory compression system for Claude Code - persist context across sessions
Multi-model consensus engine integrating OpenAI Codex CLI, Gemini CLI, and Claude CLI for collaborative code review and problem-solving.
Curate auto-memory, promote learnings to CLAUDE.md and rules, extract proven patterns into reusable skills.