qwibitai/nanoclaw

Implements per-group filesystem isolation and credential injection through OneCLI's Agent Vault, preventing agents from accessing raw API keys or other groups' data. Built as a single Node.js process with self-registering channel adapters that route messages through a per-group queue into containerized Claude agents via stdio transport. Designed for direct code modification over configuration—users fork the repo and ask Claude Code to customize behavior rather than manage sprawling config files.

22,150 stars. Actively maintained with 409 commits in the last 30 days.