Runtime behavioral monitoring for Claude Code on developer workstations.

This plugin bridges Claude Code transcripts (reasoning plane) to the EDAMAME Security system-plane observer, enabling two-plane divergence detection on developer machines.

1. Claude Code produces session transcripts while you code.
2. This plugin parses transcripts and forwards them to EDAMAME via MCP.
3. EDAMAME evaluates behavioral intent against live system telemetry.
4. Divergence verdicts surface through the control center or health checks.

EDAMAME's host-side transcript observer is the security control of record -- it runs divergence detection against Claude Code as soon as Claude Code is discovered on disk, with zero plugin installed, and a compromised agent cannot pause or silence it. This package is a cooperative enhancement: it adds off-host coverage (when Claude Code runs where the host observer cannot read its transcripts -- remote box, SSH, container, CI, VM) and turnkey onboarding/UX (MCP discovery, pairing, in-agent posture/verdict views, health checks). It never provides -- and can never weaken -- the guarantee. See Observer vs plugin: the value boundary.

• Node.js 18+
• EDAMAME Security running on the same machine:
  • macOS / Windows: EDAMAME Security app
  • Linux: edamame_posture CLI

Add the EDAMAME marketplace and install the plugin:

/plugin marketplace add edamametechnologies/edamame_claude_code
/plugin install edamame@edamame-security

The plugin automatically registers the MCP server, skills, agents, and commands. After installation, run /edamame:healthcheck to verify the connection.

Load the plugin directly from the repo for testing:

claude --plugin-dir ./edamame_claude_code

For environments where the marketplace is not available:

1. Clone the repo and run the installer:

git clone https://github.com/edamametechnologies/edamame_claude_code.git
cd edamame_claude_code
bash setup/install.sh [/path/to/your/workspace]

The workspace argument is optional. It seeds transcript_project_hints and agent_instance_id. When omitted, the plugin monitors transcripts from all workspaces. The install is global per-user -- no need to reinstall when switching projects.

2. Restart Claude Code, then run /edamame:healthcheck to verify.

The installer automatically registers the edamame MCP server entry in Claude Code's global configuration (~/.claude.json). When installing via the EDAMAME app or edamame-posture install-agent-plugin claude_code, the same automatic registration is performed by the provisioning engine. If the global config already contains other servers, they are preserved.

See Setup Guide for detailed config paths per platform.

• macOS / Windows: Start the EDAMAME Security app, enable MCP on port 3000. Use the control center to request pairing from the app, or paste a PSK.
• Linux: Run edamame-posture mcp-generate-psk then edamame-posture mcp-start 3000 "<PSK>", and paste the PSK into the control center. Or run edamame_claude_code_control_center and use "Generate, start, and pair automatically".

Claude Code may not inherit your shell's PATH. If node is installed via Homebrew or nvm and the MCP server fails to start, ensure node is on the system PATH or configure the MCP entry with the absolute path to node. The manual installer resolves this automatically.

bash setup/healthcheck.sh --strict --json

edamame_claude is a sibling repository that holds shared copies of bridge/edamame_client.mjs, bridge/control_center_app.html, service/posture_facade.mjs, and the security-posture and divergence-monitor skills. This plugin still ships those files in-tree; consolidating on imports from the shared library (npm package or relative symlinks) is planned as a follow-up.

edamame_claude_desktop is the Claude Desktop integration package built on the same shared surface.

• Setup Guide -- install, config paths, pairing, health checks
• Architecture -- component mapping and runtime flow
• Validation Matrix -- local, CI, and E2E verification coverage

• service/claude_code_extrapolator.mjs forwards raw reasoning sessions to EDAMAME via upsert_behavioral_model_from_raw_sessions.
• agent_type defaults to claude_code.
• agent_instance_id is stable per workstation/workspace unless overridden.
• EDAMAME uses its configured LLM provider to convert raw transcripts into a contributor slice, then evaluates the merged model.
• Refresh is driven by the Claude Code MCP lifecycle; no OS scheduler required.

node --test tests/*.test.mjs

Intent injection E2E test: see E2E_TESTS.md for details.

bash tests/e2e_inject_intent.sh

The full cross-agent E2E harness (intent + CVE/divergence) lives in agent_security/tests/e2e/.

Apache License 2.0 -- see LICENSE.