#3782·clawhub

Official multi-platform plugin cannot publish under ClawPack unpacked-size limit

Author: shalim786Created Sep 18, 2026Updated Sep 18, 2026
LabelsP2clawsweeper:source-reproclawsweeper:no-new-fix-prclawsweeper:needs-product-decisionclawsweeper:needs-security-reviewimpact:securityissue-rating: 🦞 diamond lobster

AgentMail’s official OpenClaw plugin (@agentmail/agentmail) currently publishes a small compressed npm artifact containing verified AgentMail CLI binaries for eight supported OS/architecture targets. The existing official 0.2.1 artifact is 4.3 MB compressed, but its unpacked payload is roughly 96 MB.

With ClawHub CLI 0.23.3, a 0.2.2 publish dry run now fails before upload:

Error: ClawPack unpacked archive exceeds 64MB limit

The parser also enforces MAX_UNPACKED_BYTES = 50 * 1024 * 1024, so increasing only the tar ceiling would not be sufficient. There is no documented override for an official package.

Repository: https://github.com/agentmail-to/openclaw-plugin Existing package: @agentmail/agentmail (official channel)

The binaries are intentionally bundled so installation does not run lifecycle scripts or download executables, and so all target artifacts can be checksum-verified before release. Removing platforms would regress existing support; downloading an executable during installation/runtime would weaken the current supply-chain model.

Could ClawHub provide one of the following supported paths?

  1. A reviewed size exception for official/source-linked packages.
  2. Platform-specific artifacts selected by the host.
  3. A documented mechanism for nested compressed, checksummed runtime assets that remains compatible with package scanning.

We have a validated 0.2.2 compatibility fix ready, but are holding publication rather than bypassing these checks.