# Add Clidash

Add clidash, a zero-dependency, read-only web dashboard that derives its tabs and...

- Repository: https://github.com/nanocoai/nanoclaw (31069 stars)
- Category: AI and agents
- License: MIT
- Last updated: 2026-10-30
- Runs scripts: yes, review before use

## Install

Claude Code: `npx skills add nanocoai/nanoclaw --skill add-clidash -g -a claude-code -y`
Codex: `npx skills add nanocoai/nanoclaw --skill add-clidash -g -a codex -y`
Cursor: `npx skills add nanocoai/nanoclaw --skill add-clidash -g -a cursor -y`
Gemini CLI: `npx skills add nanocoai/nanoclaw --skill add-clidash -g -a gemini-cli -y`

## Description

Add clidash, a zero-dependency, read-only web dashboard that derives its tabs and tables at runtime from any CLI that lists resources as JSON. Ships pre-wired for NanoClaw's ncl CLI (agent groups, sessions, channels, users, roles), plus message-activity charts, a log tail, and a read-only file viewer for group skills/CLAUDE.md/profiles.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# /add-clidash, CLI-derived read-only dashboard

clidash is a small, read-only web dashboard. You point it at any CLI that can
list resources as JSON (NanoClaw's `ncl`, `docker`, `kubectl`, …) and it builds
the dashboard at runtime: one tab per resource, a generic table over whatever
columns the rows have. A new `ncl` resource becomes a new tab and a new column
becomes a new table column with **zero code changes**.

It ships pre-wired for NanoClaw's `ncl` CLI and adds three NanoClaw-aware
panels driven entirely by config:

- **Agents overview**, status cards joining groups + sessions + messaging
  groups + wirings (green <15m / amber <2h / red older).
- **Activity**, per-session inbound/outbound message totals and a daily series,
  read directly from the session DBs (`ncl` has no messages resource).
- **Logs**, last N lines of allowlisted host log files.
- **Files**, a read-only viewer for group skills, `CLAUDE.md`, and profiles.

## Why it's safe

clidash is **read-only by construction**: the server can only `execFile` the
argv templates in its config. `{resource}` is the sole substitution and is
allowlist-validated against the discovered/static resource set before exec, never a shell, no free-form input reaches argv. There is no auth; **the network
is the auth boundary**, it binds `127.0.0.1` by default. Only ever bind a
private interface (e.g. a tailnet IP), never a public one.

It's distinct from `/add-dashboard` (which pushes JSON snapshots to a separate
`@nanoco/nanoclaw-dashboard` npm package): clidash has **zero dependencies**, no
build step, no push pipeline, and no edits to NanoClaw source, it just reads
`ncl` and the session DBs.

## Steps

### 1. Copy the tool into place

clidash is fully self-contained, copy the whole directory in:

`tools/` is not a standard NanoClaw directory and `cp -R` won't create it, so
make it first:

```bash
mkdir -p tools
cp -R .claude/skills/add-clidash/add/tools/clidash tools/clidash
```

The rest: https://github.com/nanocoai/nanoclaw/blob/HEAD/.claude/skills/add-clidash/SKILL.md