Summary

• Adds NanoClaw as the eighth aimx agents setup agent. NanoClaw is a Claude-Agent-SDK-based container-isolated personal AI agent forked per-user from qwibitai/nanoclaw, so the integration target is the fork directory (default ~/nanoclaw, override via $NANOCLAW_HOME) instead of a global $HOME config dir.
• Auto-merges an mcpServers.aimx entry into <fork>/.mcp.json via temp-file + atomic rename, preserving any other servers. NanoClaw exposes no mcp add CLI and the file is JSON5-flavoured, so this is the one supported agent where aimx mutates the agent's primary config — --print is a dry-run, --force overwrites an existing aimx entry, and the trade-off is documented next to the helper and in book/agent-integration.md.
• Documents NanoClaw's scheduled-job pull model in the bundled SKILL.md.header. NanoClaw is a long-running daemon, so on_receive hook recipes don't fit; the recommendation is to add a NanoClaw scheduled job that polls email_list on a cadence, with a one-line escape hatch for operators who need sub-second latency (wire a different agent as the hook).
• Fork-dir existence precheck before write_files so a host without a NanoClaw clone can never end up with a stub ~/nanoclaw/ that a follow-up git clone would conflict with; error names $NANOCLAW_HOME so users can fix the misconfig.
• Removal flow updated symmetrically — aimx agents remove nanoclaw deletes the skill bundle and prints a hint pointing at <fork>/.mcp.json. The .mcp.json itself is preserved, matching the behaviour for every other agent.

Test plan

• cargo build (clean)
• cargo test --bin aimx — 1052 unit tests pass (118 agents_setup::tests::*, 14 of them new for NanoClaw)
• cargo test --test integration agents_ — 4 integration tests pass, including the new agents_setup_list_includes_nanoclaw
• cargo clippy -- -D warnings (clean)
• cargo fmt -- --check (clean)
• Verifier crate: cd services/verifier && cargo clippy -- -D warnings (clean)
• Banned-tokens guard from CLAUDE.local.md returns zero hits
• End-to-end smoke under NANOCLAW_HOME=/tmp/fake-nanoclaw: --print prints proposed JSON without writing; real install lays out skills/aimx/{SKILL.md,references/*.md} and creates .mcp.json; merge into a pre-seeded .mcp.json preserves a someone-else server and an unrelated top-level field; fork-missing case fails fast with a message naming $NANOCLAW_HOME; aimx agents remove nanoclaw deletes the skill dir and prints the cleanup hint