Guard ClawHub publish on private source

Author: romgenie

README.md

@@ -135,7 +135,9 @@ To publish after source visibility/review access is resolved and ClawHub login i
 npm run clawhub:publish
 ```
 
-Optional environment variables for publishing are `CLAWHUB_OWNER`, `CLAWHUB_CHANGELOG`, `CLAWHUB_SOURCE_REPO`, `CLAWHUB_SOURCE_REF`, and `CLAWHUB_CLAWSCAN_NOTE`.
+The publish wrapper refuses to publish while the source repository is private. Set `CLAWHUB_ALLOW_PRIVATE_SOURCE=1` only if ClawHub has approved a private-source review path for this package.
+
+Optional environment variables for publishing are `CLAWHUB_OWNER`, `CLAWHUB_CHANGELOG`, `CLAWHUB_SOURCE_REPO`, `CLAWHUB_SOURCE_REF`, `CLAWHUB_CLAWSCAN_NOTE`, and `CLAWHUB_ALLOW_PRIVATE_SOURCE`.
 
 ## Known Limits
 

docs/CLAWHUB_READINESS.md

@@ -88,3 +88,5 @@ Gateway auth rate limiting is configured:
 ## Deployment Decision
 
 Do not publish this package publicly to ClawHub while the repository remains private unless ClawHub has an approved private-source review workflow for this owner.
+
+`npm run clawhub:publish` enforces that decision by refusing private-source publishing unless `CLAWHUB_ALLOW_PRIVATE_SOURCE=1` is set after review access is approved.

docs/COMPLETION_AUDIT.md

@@ -40,6 +40,7 @@ Do not mark public ClawHub deployment complete until one of these is true:
 | Live smoke test script | `scripts/live-smoke.mjs`, run by `npm run live:smoke` | Complete |
 | CI workflow | `.github/workflows/ci.yml` runs lint, tests, and package validation | Complete |
 | ClawHub dry-run | `npm run clawhub:dry-run` passes from local folder with source metadata | Complete |
+| Accidental publish guard | `npm run clawhub:publish` refuses private source unless `CLAWHUB_ALLOW_PRIVATE_SOURCE=1` is set after private-source review approval | Complete |
 | Direct GitHub-source ClawHub dry-run | `clawhub package publish CompleteTech-LLC-AI-Research/openclaw-mautic-plugin --dry-run` fails because repo is private | Blocked |
 | Repo clean and pushed | `git status --short --branch` reports `main...origin/main` after latest push | Complete |
 

scripts/clawhub-package.mjs

@@ -6,6 +6,7 @@ const args = new Set(process.argv.slice(2));
 const publish = args.has("--publish");
 const allowDirty = args.has("--allow-dirty");
 const json = !args.has("--no-json");
+const allowPrivateSource = process.env.CLAWHUB_ALLOW_PRIVATE_SOURCE === "1";
 
 function run(command, commandArgs, options = {}) {
   return spawnSync(command, commandArgs, {
@@ -33,6 +34,12 @@ function sourceRepoFromPackage() {
   return match[1].replace(/^git\+/, "");
 }
 
+function repoVisibility(sourceRepo) {
+  const result = run("gh", ["repo", "view", sourceRepo, "--json", "visibility", "--jq", ".visibility"]);
+  if (result.status !== 0) return "UNKNOWN";
+  return result.stdout.trim().toUpperCase();
+}
+
 const status = requireSuccess(run("git", ["status", "--porcelain"]), "git status");
 if (status && !allowDirty) {
   throw new Error("Working tree is dirty. Commit changes first or pass --allow-dirty for a local dry-run only.");
@@ -46,6 +53,16 @@ const changelog = process.env.CLAWHUB_CHANGELOG;
 const clawscanNote = process.env.CLAWHUB_CLAWSCAN_NOTE
   || "Mautic plugin uses network access for Mautic REST API calls, an optional token-protected private console bridge, and opt-in workspace staging under a guarded root. Production defaults disable maintenance, automation, and workspace file access.";
 
+if (publish) {
+  const visibility = repoVisibility(sourceRepo);
+  if (visibility !== "PUBLIC" && !allowPrivateSource) {
+    throw new Error(
+      `Refusing to publish because source repo ${sourceRepo} visibility is ${visibility}. `
+      + "Make the repo public or set CLAWHUB_ALLOW_PRIVATE_SOURCE=1 only after ClawHub has approved a private-source review path.",
+    );
+  }
+}
+
 const command = [
   "exec",
   "--yes",