DuDuClaw

DuDuClaw

English · 繁體中文 · 日本語

DuDuClaw turns AI command-line tools such as Claude Code and Codex into AI employees who actually deliver: they staff eleven messaging apps like Telegram, LINE, and Discord, an independent judge reviews their work before it ships, and every dollar they spend gets logged.

All you need is one Rust binary. Channel routing, conversation memory, multi-account rotation, behavioral guardrails, local inference, and a web dashboard are built in; swap the AI brain between ten CLI backends (Claude Code, Codex, Grok and others) or any OpenAI-compatible API whenever you like, and your config and memory stay on your own machine. The core is Apache 2.0.

The task board in the v1.74.0 dashboard. The staff and tasks are demo data.

Quick start (needs Node.js 20+; prefer a desktop app? see Install):

npm install -g duduclaw

duduclaw run # then open http://localhost:18889

Table of contents

• Why DuDuClaw?
• Architecture at a glance
• Prerequisites
• Install
• Quick start
• Feature overview
• CLI commands
• Trust and security
• Comparison
• Documentation
• License

Why DuDuClaw?

If you run claude or gemini in a terminal now and then, the native CLIs are all you need. The moment you want an AI staffing your LINE official account, covering your team's Discord, or running several agents with different jobs, you end up building a whole infrastructure layer yourself. DuDuClaw ships that layer:

v1.76.0: scheduled assignments let you hand work to an AI employee for later or on a repeat, from chat or the dashboard. Each run checks the creator's current permission.

Architecture at a glance

The AI runtime is the brain, DuDuClaw is the plumbing, and MCP (JSON-RPC 2.0) is the bridge. Swap the brain, keep the plumbing:

AI Runtime (brain) — Claude Code / Codex / Grok / … (10 CLIs) / OpenAI-compat

↕ MCP Protocol (JSON-RPC 2.0, stdin/stdout) DuDuClaw (plumbing) ├─ Channel Router — Telegram / LINE / Discord / Slack / WhatsApp / Feishu │ / Google Chat / Microsoft Teams / WeCom / DingTalk / WebChat ├─ Multi-Runtime — 11 runtime ids (10 CLIs + OpenAI-compat), auto-detected, per agent ├─ Session Memory — native --resume + temporal memory + key facts + layered wiki ├─ MCP Server — 253 tools (channels, memory, agents, skills, tasks, wiki, ERP) ├─ Evolution Engine — prediction-driven + AEE playbook rules + MistakeNotebook ├─ Security — PolicyKernel reference monitor + OS sandbox + redaction vault ├─ Inference Engine — OpenAI-compatible local server (llama-server / Ollama / vLLM) / llamafile ├─ Account Rotator — OAuth + API key rotation, budgets, health checks └─ Web Dashboard — React 19 SPA, embedded via rust-embed

The Rust workspace is 24 crates: the duduclaw-core foundation, the duduclaw-gateway service layer, the duduclaw-llm unified API layer, duduclaw-inference for local models, duduclaw-memory for cognitive memory, duduclaw-security, and more. Full design in ARCHITECTURE.md.

Experimental calibrated local routing uses Varun Kotte's UCCI (arXiv:2605.18796). See UCCI calibrated cascade for configuration and data preparation.

The same gateway + dashboard also ships as a whole machine: DuDuClaw OS is a Yocto-built appliance image. Its Yocto layer and release pipeline live in their own repo and vendor this repo's Rust workspace as a trimmed snapshot; see the Install section below.

Prerequisites

DuDuClaw doesn't ship its own LLM — you need an AI brain first. Pick one (you can also set this up later in the browser wizard):

• Install one of the supported AI CLIs, such as Claude Code or Codex (the full list is in multi-runtime); Gemini CLI is no longer a DuDuClaw runtime. Anthropic's policy does not permit third-party products to offer Claude.ai login, route requests through Free/Pro/Max plan credentials on their users' behalf, or store those credentials, and Anthropic may enforce this without notice (users have reported suspended accounts). An API key is the supported path; subscription sign-in stays available behind a risk notice you have to accept
• Bring an API key for any OpenAI-compatible provider
• Or run a local model behind an OpenAI-compatible server (llama-server, Ollama, vLLM, llamafile) — no cloud account needed

In the Dashboard, one-click login supports Claude, Codex, Grok, Kimi, Copilot, Kiro and OpenCode when the CLI is installed. Codex uses codex login --device-auth: open the verification page shown by the CLI, enter its device code, and wait for completion. The browser does not need access to a Docker callback port, and pasting a callback URL code into the Dashboard does not authenticate. On the Accounts page, the API Token card can delete a saved account after you confirm its account id; revoke the key separately at its provider if needed.

Install

Desktop app (recommended for personal use)

A native Tauri build that starts the local gateway automatically when you launch it — no terminal required — and shares ~/.duduclaw with the CLI. Download from Releases:

The macOS desktop build is available again from v1.68.1 (signed and notarized). v1.67.0 through v1.68.0 have no macOS build; Windows and Linux builds exist for those versions.

Open it and you're done — the in-app wizard walks you through picking an AI backend and creating your first agent, no commands needed.

npm (advanced / server use, all platforms including Windows)

For running on a server, scripting automation, or if you just prefer the command line. The only prerequisite is Node.js 20+:

npm install -g duduclaw

This installs a prebuilt binary for your platform (macOS ARM64/x64, Linux x64/ARM64, Windows x64). No compiler, no Rust.

⚠️ If the install asks you for Rust / MSVC Build Tools and a 1.5-hour compile, you took a wrong turn. That path is "build from source" for contributors; regular users should use the npm command above.

DuDuClaw OS (appliance image, pre-GA)

If you would rather not dedicate a computer, get a box that runs the moment you plug it in: DuDuClaw OS is a Yocto-built Linux operating system in which the AI agent is a native resident: it boots into its own desktop (compositor / shell, lock screen, Cmd+K delegation bar), so a person and the AI share one x86-64 box without getting in each other's way — the agent's GUI work runs in a shadow workspace by default, and the moment you touch the keyboard or mouse, whatever it was driving on your desktop yields. The desktop edition ships with A/B atomic updates and rollback, a read-only root, and preloaded Chromium / LibreOffice (Steam installs from Flathub) plus a Chinese IME; Secure Boot signing, dm-verity and TPM2 are build-time overlay options that remain disabled as of the current v0.4.0 release, so boot with Secure Boot turned off in the BIOS/UEFI.

The current release is v0.4.0 (embedding platform v1.73.4). The gateway now runs as a non-root user with its containers on rootless Podman, SSH is off by default, and the base image gets the same firewall as the desktop edition. The upgrade is one-way: once v0.4.0 has booted successfully, a device cannot roll back to v0.3.0 or earlier, which stay on the Releases page only as older releases. Download the whole-disk .wic.zst (desktop edition), the installer-desktop installer .iso (writes the desktop edition), or the plain installer .iso (writes the base image, without the app layer) from DuDuClaw-OS Releases; every file comes with a .sha256 and a minisign signature, and the verification commands are on the OS README on the docs site. This is a bring-up line (0.x): QEMU-verified, not yet booted on real hardware, and upgrading an existing v0.3.0 box through the A/B update has not been verified yet. Hardware requirements and compatible machines: docs/guides/hardware-requirements.md; product overview: docs/features/50-duduclaw-os-appliance.md.

Build from source

Prerequisites: Rust 1.85+, Node.js 20+.

git clone https://github.com/zhixuli0406/DuDuClaw.git

cd DuDuClaw cd web && npm ci --legacy-peer-deps && npm run build && cd .. cargo build --release -p duduclaw-cli -p duduclaw-gateway --features duduclaw-gateway/dashboard ./target/release/duduclaw run

Python SDK (optional library)

The core