ClawHub Production Release

ClawHub production changes are manual-only. Merging to main does not deploy the app or publish the CLI.

Safety Rules

• Run production workflows from main.
• Re-read the workflow and exact main SHA immediately before dispatch.
• Require a successful Deploy Test workflow for that exact SHA before dispatching an app production deploy. This is an operator check until the production workflow enforces the gate directly.
• Do not treat a green workflow alone as proof. Record the workflow URL, exact deployed SHA, and live-surface verification.
• Do not add one-off migrations or repairs to the deploy workflow. Run operator-controlled data changes separately with clawhub-convex and create-and-cleanup-migration.
• Never start a production deploy or npm publish unless the user explicitly asked for that release action.