fix: align publisher lifecycle permissions

docs/cli.md

@@ -240,6 +240,9 @@ clawhub skill rescan suspicious-skill --yes
 ### `transfer`
 
 - Ownership transfer workflow.
+- Transfers to user handles create a pending request that the recipient accepts.
+- Transfers to org/publisher handles apply immediately only when the actor has
+  admin access to both the current owner and destination publisher.
 - Subcommands:
   - `transfer request <slug> <handle> [--message "..."] [--yes]`
   - `transfer list [--outgoing]`
@@ -353,6 +356,40 @@ Example:
 clawhub package delete @openclaw/example-plugin --yes
 ```
 
+### `package undelete <name>`
+
+- Restores a soft-deleted package and releases.
+- Requires the package owner, an org publisher owner/admin, platform moderator,
+  or platform admin.
+- Calls `POST /api/v1/packages/{name}/undelete`.
+- Flags:
+  - `--yes`: skip confirmation.
+  - `--json`: machine-readable output.
+
+Example:
+
+```bash
+clawhub package undelete @openclaw/example-plugin --yes
+```
+
+### `package transfer <name>`
+
+- Transfers a package to another publisher.
+- Requires admin access to both the current package owner and destination
+  publisher, unless performed by a platform admin.
+- Scoped package names must transfer to the matching scope owner.
+- Calls `POST /api/v1/packages/{name}/transfer`.
+- Flags:
+  - `--to <owner>`: destination publisher handle.
+  - `--reason <text>`: optional audit reason.
+  - `--json`: machine-readable output.
+
+Example:
+
+```bash
+clawhub package transfer @openclaw/example-plugin --to openclaw
+```
+
 ### `package rescan <name>`
 
 - Request a security rescan for the latest published package release.