🦀 NanoClaw - OpenClaw in Just 500 lines of Code 😍

🔥

Built by a developer who refused to run code he couldn't audit, the project strips OpenClaw down to ~500 lines handling everything.

Agents execute inside Apple Container sandboxes (or Docker on Linux), with filesystem isolation enforced at the OS level rather than through application permissions.

Setup happens through Claude Code itself - no installation wizard, no configuration files to learn, just run /setup and the AI handles dependencies, authentication, container configuration, and service deployment.

Highlights:

Container-Level Security - Agents run in lightweight Linux VMs where only mounted directories are visible. Bash access is safe because commands execute inside the sandbox, not on your host. Mount allowlist validation sits at ~/.config/nanoclaw/ where agents can't reach it.
Skills-Based Customization - Contributors write skills like /add-telegram that teach Claude Code how to transform your fork. No PRs adding features to core—users run skills and get clean code matching their exact needs without bloat.
Memory Hierarchy - Global memory in groups/CLAUDE.md gets read by all conversations but only written by main channel, while each group maintains isolated memory in its own folder. Claude Agent SDK automatically loads both levels when agents run.
Scheduled Task System - Groups schedule recurring or one-time tasks that run as full agents with complete tool access, optionally messaging results back. Main channel manages all tasks across groups, others manage only their own.

Nanoclaw is open source ❤️

Clone the repo, run Claude Code, execute /setup, and you have a working assistant.

*Requires macOS or Linux and Claude Code installed.

2 comments