Files

gavrielc 05a29d562f Security improvements: per-group session isolation, remove built-in Gmail

- Isolate Claude sessions per-group (data/sessions/{group}/.claude/)
  to prevent cross-group access to conversation history
- Remove Gmail MCP from built-in (now available via /add-gmail skill)
- Add SECURITY.md documenting the security model
- Move docs to docs/ folder (SPEC.md, REQUIREMENTS.md, SECURITY.md)
- Update documentation to reflect changes

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-02 00:07:59 +02:00

1.4 KiB

Raw Blame History

NanoClaw

Personal Claude assistant. See README.md for philosophy and setup. See docs/REQUIREMENTS.md for architecture decisions.

Quick Context

Single Node.js process that connects to WhatsApp, routes messages to Claude Agent SDK running in Apple Container (Linux VMs). Each group has isolated filesystem and memory.

Key Files

File	Purpose
`src/index.ts`	Main app: WhatsApp connection, message routing, IPC
`src/config.ts`	Trigger pattern, paths, intervals
`src/container-runner.ts`	Spawns agent containers with mounts
`src/task-scheduler.ts`	Runs scheduled tasks
`src/db.ts`	SQLite operations
`groups/{name}/CLAUDE.md`	Per-group memory (isolated)

Skills

Skill	When to Use
`/setup`	First-time installation, authentication, service configuration
`/customize`	Adding channels, integrations, changing behavior
`/debug`	Container issues, logs, troubleshooting

Development

Run commands directly—don't tell the user to run them.

npm run dev          # Run with hot reload
npm run build        # Compile TypeScript
./container/build.sh # Rebuild agent container

Service management:

launchctl load ~/Library/LaunchAgents/com.nanoclaw.plist
launchctl unload ~/Library/LaunchAgents/com.nanoclaw.plist