Experimental Claw packages

A Claw is a versioned package that describes one complete OpenClaw agent and the reusable resources it needs. ClawHub stores and scans the package; OpenClaw owns local preview, consent, apply, update, and removal.

Claw publication is experimental. The ClawHub deployment must set CLAWHUB_EXPERIMENTAL_CLAWS=1; otherwise the server rejects publication.

Package shape

A publishable Claw is a normal package directory with a package.json that points to its manifest:

{  "name": "@acme/github-triage",  "version": "1.0.0",  "openclaw": {    "claw": "CLAW.md"  }}

CLAW.md starts with the grouped Claw manifest as YAML frontmatter. Its non-empty Markdown body becomes the managed SOUL.md for the new agent, so do not also declare an explicit SOUL.md bootstrap or supporting-file destination.

---schemaVersion: 1agent:  id: github-triage  name: GitHub Triage  description: Reviews incoming issues.workspace:  files:    - source: workspace/reference.md      path: reference.mdpackages:  - kind: skill    source: clawhub    ref: "@acme/triage"    version: 1.2.0mcpServers: {}cronJobs: []--- # GitHub Triage Reviews and classifies incoming GitHub issues.

JSON manifests remain compatible. Set openclaw.claw to a package-relative JSON file such as openclaw.claw.json. JSON has no implicit body file and may declare an explicit SOUL.md source.

Every workspace.*.source must name a file in the same package. Package names and versions must match package.json, dependency versions must be exact, and MCP environment values must remain unresolved ${ENV_VAR} references.

Validate and publish

Preview the package without uploading it:

clawhub package publish . --family claw --dry-run

When the target ClawHub deployment has experimental Claws enabled, publish through the existing authenticated package flow:

clawhub package publish . --family claw

The CLI detects family: claw when package.json contains openclaw.claw, so --family claw is optional for a well-formed package.

Publication rejects:

• a missing, invalid, or escaping openclaw.claw path;
• package identity or version mismatches;
• malformed CLAW.md frontmatter or manifest fields;
• an empty CLAW.md body or simultaneous explicit SOUL.md destination;
• missing workspace source files or portable path collisions;
• floating skill/plugin versions and resolved MCP credentials.

Accepted packages continue through ClawHub's existing ownership, moderation, static scanning, release, and artifact storage pipeline. The stored release retains the exact artifact plus a non-sensitive summary for later search and detail surfaces; it does not duplicate the full manifest into Convex storage.

Discover published Claws

Enabled deployments expose Claws through the existing package API:

curl "https://clawhub.ai/api/v1/packages?family=claw"curl "https://clawhub.ai/api/v1/packages/search?q=triage&family=claw"curl "https://clawhub.ai/api/v1/packages/@acme%2Fgithub-triage"

List and search results use the normal package summary fields. Package and version detail responses may also include clawManifestSummary, which reports the agent identity and resource counts without exposing the full manifest.

When CLAWHUB_EXPERIMENTAL_CLAWS is disabled, explicit family=claw filters are rejected, unscoped list and search results omit Claws, and named Claw reads return not found. Full manifests remain in exact artifacts and are never projected through public release responses.

Consume the experimental feed

Enabled deployments publish eligible official Claws as a separate hosted feed:

curl "https://clawhub.ai/v1/feeds/claws"

This uses a dedicated experimental Claw feed contract rather than extending the stable plugin/skill catalog feed v1 schema.

Each entry provides the exact package version, artifact SHA-256, publisher trust, and clawManifestSummary. Consumers resolve and verify that artifact, unpack it as a normal Claw package directory, and pass the directory to OpenClaw for local inspection or claws add --dry-run. ClawHub does not bypass OpenClaw's preview or consent boundary.

The route returns 404 while CLAWHUB_EXPERIMENTAL_CLAWS is disabled and is not advertised in the registry discovery document until the experimental gate is removed.

Run the repeatable registry-to-OpenClaw proof against an OpenClaw Claws checkout with:

OPENCLAW_CLAWS_CHECKOUT=/path/to/openclaw \  bunx vitest run scripts/claws-feed-openclaw-e2e.test.ts --maxWorkers=1

The proof serves a deterministic hosted feed and package artifact, verifies the feed and downloaded digests, extracts the package, and invokes the actual OpenClaw source CLI with claws add --dry-run --json in an isolated state directory.