Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

github.com

Post reply on HN
Print view View original

1–10 of 239 posts

Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

#1

Post by jimminyx »

I’ve been running Clawdbot for the last couple weeks and have genuinely found it useful but running it scares the crap out of me.

OpenClaw has 52+ modules and runs agents with near-unlimited permissions in a single Node process. NanoClaw is ~500 lines of core code, agents run in actual Apple containers with filesystem isolation. Each chat gets its own sandboxed context.

This is not a swiss army knife. It’s built to match my exact needs. Fork it and make it yours.

Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation
github.com

Re: Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

#4

Post by avaer » 

  Quick Start
  git clone https://github.com/anthropics/nanoclaw.git
Is this an official Anthropic project? Because that repo doesn't exist.

Or is this just so hastily thrown together that the Quick Start is a hallucination?

That's not a facetious question, given this project's declared raison d'etre is security and the subtle implication that OpenClaw is an insecure unreviewed pile of slop.

Re: Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

#5

Post by raybb »

avaer wrote: post #4

Quick Start git clone https://github.com/anthropics/nanoclaw.git Is this an official Anthropic project? Because that repo doesn't exist. Or is this just so hastily thrown together that the Quick Start is a hallucination? That's not a facetious question, given this project's declared raison d'etre is security and the subtle implication that OpenClaw is an insecure unreviewed pile of slop.

Seems to be fixed now

Re: Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

#6

Post by thepoet »

One of the things that makes Clawdbot great is the allow all permissions to do anything. Not sure how those external actions with damaging consequences get sandboxed with this.

Apple containers have been great especially that each of them maps 1:1 to a dedicated lightweight VM. Except for a bug or two that appeared in the early releases, things seem to be working out well. I believe not a lot of projects are leveraging it.

A general code execution sandbox for AI code or otherwise that used Apple containers is https://github.com/instavm/coderunner It can be hooked to Claude code and others.

Re: Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

#7

Post by kklisura »

avaer wrote: post #4

Quick Start git clone https://github.com/anthropics/nanoclaw.git Is this an official Anthropic project? Because that repo doesn't exist. Or is this just so hastily thrown together that the Quick Start is a hallucination? That's not a facetious question, given this project's declared raison d'etre is security and the subtle implication that OpenClaw is an insecure unreviewed pile of slop.

Claude hallucinated that repo here in this commit https://github.com/gavrielc/nanoclaw/commit/dbf39a9484d9c66b...

Re: Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

#8

Post by treelover »

Interesting choice to use native Apple Containers over Docker.

I assume this is to keep the footprint minimal on a Mac Mini without the overhead of the Docker VM, but does this limit the agent's ability to run standard Linux tooling? Or are you relying on the AI to just figure out the BSD/macOS equivalents of standard commands?

Re: Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

#9

Post by jimminyx »

avaer wrote: post #4

Quick Start git clone https://github.com/anthropics/nanoclaw.git Is this an official Anthropic project? Because that repo doesn't exist. Or is this just so hastily thrown together that the Quick Start is a hallucination? That's not a facetious question, given this project's declared raison d'etre is security and the subtle implication that OpenClaw is an insecure unreviewed pile of slop.

Fixed, thanks. Claude Code likes to insert itself and anthropic everywhere.

If it somehow wasn't abundantly clear: this is a vibe coded weekend project by a single developer (me).

It's rough around the edges but it fits my needs (talking with claude code that's mounted on my obsidian vault and easily scheduling cron jobs through whatsapp). And I feel a lot better running this than a +350k LOC project that I can't even begin to wrap my head around how it works.

This is not supposed to be something other people run as is, but hopefully a solid starting point for creating your own custom setup.

Re: Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation

#10

Post by mcintyre1994 »

kklisura wrote: post #7
avaer wrote: post #4

Quick Start git clone https://github.com/anthropics/nanoclaw.git Is this an official Anthropic project? Because that repo doesn't exist. Or is this just so hastily thrown together that the Quick Start is a hallucination? That's not a facetious question, given this project's declared raison d'etre is security and the subtle implication that OpenClaw is an insecure unreviewed pile of slop.

Claude hallucinated that repo here in this commit https://github.com/gavrielc/nanoclaw/commit/dbf39a9484d9c66b...

I like that Claude's hypothesis was that Anthropic created openclaw and this anti-openclaw :)

> This is the anti-[OpenClaw](https://github.com/anthropics/openclaw).

Post reply on HN