@swarmclawai/swarmclaw 1.9.10 → 1.9.11

package/README.md

@@ -399,6 +399,15 @@ Operational docs: https://swarmclaw.ai/docs/observability
 
 ## Releases
 
+### v1.9.11 Highlights
+
+Task execution policy release: operators can attach ordered review, approval, and verification stages to board tasks, record decisions, and block premature completion until required stages clear.
+
+- **Task execution policies.** Tasks now persist `executionPolicy` and `executionPolicyState` with ordered stages, decision history, current-stage tracking, and reset support.
+- **Completion guardrails.** `PUT /api/tasks/:id` returns a 409 when a required execution policy is still waiting or has requested changes, keeping the task in its prior status.
+- **Policy API and CLI.** `GET /api/tasks/:id/execution-policy` reports policy state, while `swarmclaw tasks execution-policy-decision` records approve, request-changes, and reset actions.
+- **Operator UI and handoffs.** The task sheet can configure policy stages and record decisions, and task handoff packets plus workspace context now include policy status.
+
 ### v1.9.10 Highlights
 
 Task handoff release: operators can package task state, readiness, workspace context, dependencies, outputs, and resume handles into a shareable packet before continuing work.

package/electron-dist/main.js

@@ -0,0 +1,218 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const electron_1 = require("electron");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const paths_1 = require("./paths");
+const server_lifecycle_1 = require("./server-lifecycle");
+const menu_1 = require("./menu");
+const DEV_URL_DEFAULT = 'http://127.0.0.1:3456';
+const LOG_TAIL_BYTES = 1500;
+let mainWindow = null;
+let serverHandle = null;
+let serverLogFile = null;
+let isQuitting = false;
+const gotLock = electron_1.app.requestSingleInstanceLock();
+if (!gotLock) {
+    electron_1.app.quit();
+}
+else {
+    electron_1.app.on('second-instance', () => {
+        if (mainWindow) {
+            if (mainWindow.isMinimized())
+                mainWindow.restore();
+            mainWindow.focus();
+        }
+    });
+    electron_1.app.on('ready', () => void onReady());
+    electron_1.app.on('window-all-closed', () => {
+        if (process.platform !== 'darwin')
+            electron_1.app.quit();
+    });
+    electron_1.app.on('activate', () => {
+        if (mainWindow !== null)
+            return;
+        if (serverHandle) {
+            createMainWindow(serverHandle.url);
+        }
+        else if (!electron_1.app.isPackaged) {
+            createMainWindow(process.env.SWARMCLAW_DEV_URL || DEV_URL_DEFAULT);
+        }
+    });
+    electron_1.app.on('before-quit', () => {
+        isQuitting = true;
+    });
+    electron_1.app.on('will-quit', async (event) => {
+        if (!serverHandle)
+            return;
+        event.preventDefault();
+        try {
+            await serverHandle.stop();
+        }
+        finally {
+            serverHandle = null;
+            electron_1.app.exit(0);
+        }
+    });
+}
+async function onReady() {
+    const paths = (0, paths_1.resolveRuntimePaths)();
+    (0, menu_1.buildAppMenu)(paths, () => mainWindow);
+    const iconPath = resolveIconPath();
+    if (process.platform === 'darwin' && iconPath && electron_1.app.dock) {
+        const img = electron_1.nativeImage.createFromPath(iconPath);
+        if (!img.isEmpty())
+            electron_1.app.dock.setIcon(img);
+    }
+    if (!electron_1.app.isPackaged) {
+        const devUrl = process.env.SWARMCLAW_DEV_URL || DEV_URL_DEFAULT;
+        console.log(`[swarmclaw] dev mode, loading ${devUrl}`);
+        createMainWindow(devUrl);
+        return;
+    }
+    serverLogFile = node_path_1.default.join(electron_1.app.getPath('userData'), 'logs', 'server.log');
+    node_fs_1.default.mkdirSync(node_path_1.default.dirname(serverLogFile), { recursive: true });
+    try {
+        serverHandle = await (0, server_lifecycle_1.startEmbeddedServer)({
+            paths,
+            logFile: serverLogFile,
+            onStdout: (c) => process.stdout.write(`[swarmclaw] ${c}`),
+            onStderr: (c) => process.stderr.write(`[swarmclaw] ${c}`),
+            onExit: (code, signal) => {
+                if (!isQuitting) {
+                    console.error(`[swarmclaw] server exited unexpectedly (code=${code}, signal=${signal ?? 'none'})`);
+                    void showServerCrashDialog(code, signal);
+                }
+            },
+        });
+    }
+    catch (err) {
+        await showStartupFailureDialog(err, paths);
+        electron_1.app.exit(1);
+        return;
+    }
+    createMainWindow(serverHandle.url);
+    void Promise.resolve().then(() => __importStar(require('./updater'))).then((m) => m.initAutoUpdater());
+}
+function resolveIconPath() {
+    const candidate = electron_1.app.isPackaged
+        ? node_path_1.default.join(process.resourcesPath, 'icon.png')
+        : node_path_1.default.join(__dirname, '..', 'resources', 'icon.png');
+    return node_fs_1.default.existsSync(candidate) ? candidate : undefined;
+}
+function createMainWindow(startUrl) {
+    const iconPath = resolveIconPath();
+    mainWindow = new electron_1.BrowserWindow({
+        width: 1440,
+        height: 900,
+        minWidth: 1024,
+        minHeight: 640,
+        backgroundColor: '#0b0b0f',
+        show: true,
+        ...(iconPath ? { icon: iconPath } : {}),
+        webPreferences: {
+            contextIsolation: true,
+            nodeIntegration: false,
+            sandbox: false,
+        },
+    });
+    const wc = mainWindow.webContents;
+    if (!electron_1.app.isPackaged)
+        wc.openDevTools({ mode: 'detach' });
+    wc.on('did-start-loading', () => console.log('[swarmclaw] did-start-loading'));
+    wc.on('did-finish-load', () => console.log('[swarmclaw] did-finish-load'));
+    wc.on('did-fail-load', (_e, code, desc, url) => console.error(`[swarmclaw] did-fail-load code=${code} desc=${desc} url=${url}`));
+    wc.on('render-process-gone', (_e, details) => console.error(`[swarmclaw] render-process-gone reason=${details.reason}`));
+    wc.on('unresponsive', () => console.error('[swarmclaw] webContents unresponsive'));
+    mainWindow.on('closed', () => {
+        mainWindow = null;
+    });
+    mainWindow.webContents.setWindowOpenHandler(({ url }) => {
+        if (url.startsWith(startUrl))
+            return { action: 'allow' };
+        void electron_1.shell.openExternal(url);
+        return { action: 'deny' };
+    });
+    void mainWindow.loadURL(startUrl).catch((err) => {
+        console.error('[swarmclaw] loadURL rejected:', err);
+    });
+}
+async function showServerCrashDialog(code, signal) {
+    const buttons = serverLogFile ? ['Open Logs Folder', 'Quit'] : ['Quit'];
+    const quitButtonId = buttons.length - 1;
+    const detail = buildLogDetail(`code=${code ?? 'null'} signal=${signal ?? 'none'}`);
+    const res = await electron_1.dialog.showMessageBox({
+        type: 'error',
+        buttons,
+        defaultId: quitButtonId,
+        cancelId: quitButtonId,
+        title: 'SwarmClaw stopped',
+        message: 'The SwarmClaw server exited unexpectedly.',
+        detail,
+    });
+    if (serverLogFile && res.response === 0)
+        electron_1.shell.showItemInFolder(serverLogFile);
+    electron_1.app.exit(1);
+}
+async function showStartupFailureDialog(err, paths) {
+    const message = err instanceof Error ? err.message : String(err);
+    const base = `${message}\n\nStandalone entry: ${paths.standaloneEntry}\nData dir: ${paths.dataDir}`;
+    const detail = buildLogDetail(base);
+    const buttons = serverLogFile ? ['Open Logs Folder', 'Quit'] : ['Quit'];
+    const quitButtonId = buttons.length - 1;
+    const res = await electron_1.dialog.showMessageBox({
+        type: 'error',
+        buttons,
+        defaultId: quitButtonId,
+        cancelId: quitButtonId,
+        title: 'SwarmClaw failed to start',
+        message: 'The embedded server did not start.',
+        detail,
+    });
+    if (serverLogFile && res.response === 0)
+        electron_1.shell.showItemInFolder(serverLogFile);
+}
+function buildLogDetail(base) {
+    if (!serverLogFile)
+        return base;
+    const tail = (0, server_lifecycle_1.tailLogFile)(serverLogFile, LOG_TAIL_BYTES).trim();
+    if (!tail)
+        return `${base}\n\nLog file: ${serverLogFile}\n(no output captured yet)`;
+    return `${base}\n\nLog tail (${serverLogFile}):\n${tail}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swarmclawai/swarmclaw",
-  "version": "1.9.10",
+  "version": "1.9.11",
   "description": "Build and run autonomous AI agents with OpenClaw, Hermes, multiple model providers, orchestration, delegation, memory, skills, schedules, and chat connectors.",
   "main": "electron-dist/main.js",
   "license": "MIT",
@@ -87,7 +87,7 @@
     "test:cli": "node --test src/cli/*.test.js bin/*.test.js scripts/electron-after-pack.test.mjs scripts/ensure-sandbox-browser-image.test.mjs scripts/postinstall.test.mjs scripts/run-next-build.test.mjs scripts/run-next-typegen.test.mjs",
     "test:setup": "tsx --test src/app/api/setup/check-provider/route.test.ts src/lib/server/provider-model-discovery.test.ts src/components/auth/setup-wizard/utils.test.ts src/components/auth/setup-wizard/types.test.ts src/hooks/setup-done-detection.test.ts src/lib/setup-defaults.test.ts src/lib/server/storage-auth.test.ts src/lib/server/storage-auth-docker.test.ts",
     "test:openclaw": "tsx --test src/lib/openclaw/openclaw-agent-id.test.ts src/lib/openclaw/openclaw-endpoint.test.ts src/lib/server/agents/agent-runtime-config.test.ts src/lib/server/build-llm.test.ts src/lib/server/connectors/connector-routing.test.ts src/lib/server/connectors/openclaw.test.ts src/lib/server/connectors/swarmdock.test.ts src/lib/server/gateway/protocol.test.ts src/lib/server/gateways/gateway-topology.test.ts src/lib/server/llm-response-cache.test.ts src/lib/server/mcp-conformance.test.ts src/lib/server/openclaw/agent-resolver.test.ts src/lib/server/openclaw/deploy.test.ts src/lib/server/openclaw/skills-normalize.test.ts src/lib/server/session-tools/openclaw-nodes.test.ts src/lib/server/session-tools/swarmdock.test.ts src/lib/server/tasks/task-quality-gate.test.ts src/lib/server/tasks/task-validation.test.ts src/lib/server/tool-capability-policy.test.ts src/lib/providers/openai.test.ts src/lib/providers/openclaw-exports.test.ts src/app/api/gateways/topology-route.test.ts src/app/api/openclaw/dashboard-url/route.test.ts",
-    "test:runtime": "tsx --test src/lib/a2a/agent-card.test.ts src/lib/strip-internal-metadata.test.ts src/lib/provider-sets.test.ts src/lib/providers/opencode-cli.test.ts src/lib/providers/cli-provider-metadata.test.ts src/lib/providers/cli-utils.test.ts src/lib/providers/generic-cli.test.ts src/lib/server/agents/delegation-advisory.test.ts src/lib/server/cli-provider-readiness.test.ts src/lib/server/provider-health.test.ts src/lib/server/mcp-gateway-runtime.test.ts src/lib/server/mcp-connection-pool.test.ts src/lib/server/knowledge-sources.test.ts src/lib/server/extension-managed-resources.test.ts src/lib/server/eval/baseline.test.ts src/lib/server/eval/environment-plan.test.ts src/lib/server/chat-execution/chat-execution-grounding.test.ts src/lib/server/chat-execution/chat-turn-preparation.test.ts src/lib/server/chat-execution/iteration-timers.test.ts src/lib/server/chat-execution/post-stream-finalization.test.ts src/lib/server/chat-execution/reasoning-tag-scrubber.test.ts src/lib/server/chats/clear-undo-snapshots.test.ts src/lib/server/connectors/email.test.ts src/lib/server/protocols/protocol-service.test.ts src/lib/server/runtime/run-ledger.test.ts src/lib/server/runtime/queue-retry-policy.test.ts src/lib/server/runs/run-brief.test.ts src/lib/server/operations/operation-pulse.test.ts src/lib/server/schedules/schedule-history.test.ts src/lib/quality/release-readiness.test.ts src/lib/server/artifacts/artifact-resolver.test.ts src/lib/server/observability/otel-config.test.ts src/lib/server/safe-parse-body.test.ts src/lib/server/missions/mission-templates.test.ts src/lib/server/sharing/share-link-repository.test.ts src/lib/server/sharing/share-resolver.test.ts src/lib/server/tasks/task-execution-workspace.test.ts src/lib/server/tasks/task-handoff.test.ts src/lib/server/tasks/task-service.test.ts src/lib/server/session-tools/execute.test.ts src/lib/server/session-tools/manage-tasks.test.ts src/lib/app/view-constants.test.ts src/lib/quality/quality-summary.test.ts src/app/api/approvals/route.test.ts src/app/api/agents/agents-route.test.ts src/app/api/tasks/tasks-route.test.ts src/app/api/tasks/task-workspace-route.test.ts src/app/api/chats/chat-route.test.ts src/app/api/chats/clear-route.test.ts src/app/api/chats/compact-route.test.ts src/app/api/chats/context-status-route.test.ts src/app/api/connectors/connector-doctor-route.test.ts src/app/api/extensions/managed-resources/route.test.ts src/app/api/healthz/route.test.ts src/app/api/logs/route.test.ts src/app/api/portability/export/route.test.ts src/app/api/portability/import/route.test.ts src/app/api/providers/[id]/route.test.ts src/app/api/schedules/schedule-history-route.test.ts src/app/api/tts/route.test.ts",
+    "test:runtime": "tsx --test src/lib/a2a/agent-card.test.ts src/lib/strip-internal-metadata.test.ts src/lib/provider-sets.test.ts src/lib/providers/opencode-cli.test.ts src/lib/providers/cli-provider-metadata.test.ts src/lib/providers/cli-utils.test.ts src/lib/providers/generic-cli.test.ts src/lib/server/agents/delegation-advisory.test.ts src/lib/server/cli-provider-readiness.test.ts src/lib/server/provider-health.test.ts src/lib/server/mcp-gateway-runtime.test.ts src/lib/server/mcp-connection-pool.test.ts src/lib/server/knowledge-sources.test.ts src/lib/server/extension-managed-resources.test.ts src/lib/server/eval/baseline.test.ts src/lib/server/eval/environment-plan.test.ts src/lib/server/chat-execution/chat-execution-grounding.test.ts src/lib/server/chat-execution/chat-turn-preparation.test.ts src/lib/server/chat-execution/iteration-timers.test.ts src/lib/server/chat-execution/post-stream-finalization.test.ts src/lib/server/chat-execution/reasoning-tag-scrubber.test.ts src/lib/server/chats/clear-undo-snapshots.test.ts src/lib/server/connectors/email.test.ts src/lib/server/protocols/protocol-service.test.ts src/lib/server/runtime/run-ledger.test.ts src/lib/server/runtime/queue-retry-policy.test.ts src/lib/server/runs/run-brief.test.ts src/lib/server/operations/operation-pulse.test.ts src/lib/server/schedules/schedule-history.test.ts src/lib/quality/release-readiness.test.ts src/lib/server/artifacts/artifact-resolver.test.ts src/lib/server/observability/otel-config.test.ts src/lib/server/safe-parse-body.test.ts src/lib/server/missions/mission-templates.test.ts src/lib/server/sharing/share-link-repository.test.ts src/lib/server/sharing/share-resolver.test.ts src/lib/server/tasks/task-execution-workspace.test.ts src/lib/server/tasks/task-execution-policy.test.ts src/lib/server/tasks/task-handoff.test.ts src/lib/server/tasks/task-service.test.ts src/lib/server/session-tools/execute.test.ts src/lib/server/session-tools/manage-tasks.test.ts src/lib/app/view-constants.test.ts src/lib/quality/quality-summary.test.ts src/app/api/approvals/route.test.ts src/app/api/agents/agents-route.test.ts src/app/api/tasks/tasks-route.test.ts src/app/api/tasks/task-workspace-route.test.ts src/app/api/chats/chat-route.test.ts src/app/api/chats/clear-route.test.ts src/app/api/chats/compact-route.test.ts src/app/api/chats/context-status-route.test.ts src/app/api/connectors/connector-doctor-route.test.ts src/app/api/extensions/managed-resources/route.test.ts src/app/api/healthz/route.test.ts src/app/api/logs/route.test.ts src/app/api/portability/export/route.test.ts src/app/api/portability/import/route.test.ts src/app/api/providers/[id]/route.test.ts src/app/api/schedules/schedule-history-route.test.ts src/app/api/tts/route.test.ts",
     "test:builder": "tsx --test src/features/protocols/builder/utils/nodes-to-template.test.ts src/features/protocols/builder/utils/template-to-nodes.test.ts src/features/protocols/builder/validators/dag-validator.test.ts",
     "test:e2e": "node --import tsx scripts/browser-e2e-smoke.ts",
     "test:mcp:conformance": "node --import tsx ./scripts/mcp-conformance-check.ts",

package/src/app/api/tasks/[id]/execution-policy/route.ts

@@ -0,0 +1,46 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { notFound } from '@/lib/server/collection-helpers'
+import { loadTask } from '@/lib/server/tasks/task-repository'
+import { safeParseBody } from '@/lib/server/safe-parse-body'
+import {
+  describeTaskExecutionPolicy,
+  normalizeTaskExecutionPolicy,
+  syncTaskExecutionPolicyState,
+} from '@/lib/server/tasks/task-execution-policy'
+import { decideTaskExecutionPolicyFromRoute } from '@/lib/server/tasks/task-route-service'
+import { formatZodError } from '@/lib/validation/schemas'
+
+const TaskExecutionPolicyDecisionSchema = z.object({
+  action: z.enum(['approve', 'request_changes', 'reset']).optional().default('approve'),
+  stageId: z.string().optional(),
+  actor: z.string().optional(),
+  note: z.string().optional(),
+})
+
+export async function GET(_req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const task = loadTask(id)
+  if (!task) return notFound()
+  const policy = normalizeTaskExecutionPolicy(task.executionPolicy)
+  const state = syncTaskExecutionPolicyState(policy, task.executionPolicyState)
+  return NextResponse.json({
+    taskId: id,
+    policy,
+    state,
+    summary: describeTaskExecutionPolicy({ executionPolicy: policy, executionPolicyState: state }),
+  })
+}
+
+export async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const { data: raw, error } = await safeParseBody<Record<string, unknown>>(req)
+  if (error) return error
+  const parsed = TaskExecutionPolicyDecisionSchema.safeParse(raw || {})
+  if (!parsed.success) return NextResponse.json(formatZodError(parsed.error), { status: 400 })
+  const result = decideTaskExecutionPolicyFromRoute(id, parsed.data)
+  if (!result.ok && result.status === 404) return notFound()
+  return result.ok
+    ? NextResponse.json(result.payload)
+    : NextResponse.json(result.payload, { status: result.status })
+}

package/src/app/api/tasks/task-workspace-route.test.ts

@@ -17,6 +17,8 @@ let tempDir = ''
 let putTask: typeof import('./[id]/route')['PUT']
 let getTaskHandoff: typeof import('./[id]/handoff/route')['GET']
 let postTaskHandoff: typeof import('./[id]/handoff/route')['POST']
+let getTaskExecutionPolicy: typeof import('./[id]/execution-policy/route')['GET']
+let postTaskExecutionPolicy: typeof import('./[id]/execution-policy/route')['POST']
 let getTaskHandoffs: typeof import('./handoffs/route')['GET']
 let getTasks: typeof import('./route')['GET']
 let storage: typeof import('@/lib/server/storage')
@@ -52,6 +54,9 @@ before(async () => {
   const handoffRoute = await import('./[id]/handoff/route')
   getTaskHandoff = handoffRoute.GET
   postTaskHandoff = handoffRoute.POST
+  const policyRoute = await import('./[id]/execution-policy/route')
+  getTaskExecutionPolicy = policyRoute.GET
+  postTaskExecutionPolicy = policyRoute.POST
   getTaskHandoffs = (await import('./handoffs/route')).GET
   getTasks = (await import('./route')).GET
 })
@@ -166,6 +171,90 @@ test('GET /api/tasks/:id/handoff returns readiness and markdown packets', async
   assert.match(markdown, /Readiness: blocked/)
 })
 
+test('PUT /api/tasks/:id blocks completion until execution policy stages are approved', async () => {
+  seedTask('task-policy-complete', {
+    title: 'Policy Completion Task',
+    result: 'Implemented the requested feature, updated src/app/example.ts, and verified with npm run test.',
+    executionPolicy: {
+      enabled: true,
+      mode: 'before_completion',
+      stages: [{ id: 'review', title: 'Review', kind: 'review', requiredDecisions: 1 }],
+    },
+  })
+
+  const blocked = await putTask(new Request('http://local/api/tasks/task-policy-complete', {
+    method: 'PUT',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ status: 'completed' }),
+  }), routeParams('task-policy-complete'))
+
+  assert.equal(blocked.status, 409)
+  assert.equal(storage.loadTasks()['task-policy-complete']?.status, 'backlog')
+
+  const policyResponse = await postTaskExecutionPolicy(new Request('http://local/api/tasks/task-policy-complete/execution-policy', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ action: 'approve', actor: 'QA' }),
+  }), routeParams('task-policy-complete'))
+  assert.equal(policyResponse.status, 200)
+  const policyBody = await policyResponse.json()
+  assert.equal(policyBody.state.status, 'completed')
+
+  const completed = await putTask(new Request('http://local/api/tasks/task-policy-complete', {
+    method: 'PUT',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ status: 'completed' }),
+  }), routeParams('task-policy-complete'))
+
+  assert.equal(completed.status, 200)
+  const body = await completed.json() as BoardTask
+  assert.equal(body.status, 'completed')
+})
+
+test('PUT /api/tasks/:id allows edits to already completed tasks without re-requesting completion', async () => {
+  seedTask('task-policy-completed-edit', {
+    title: 'Completed Policy Edit Task',
+    status: 'completed',
+    result: 'Completed with tests passed and build passed.',
+    executionPolicy: {
+      enabled: true,
+      mode: 'before_completion',
+      stages: [{ id: 'review', title: 'Review', kind: 'review', requiredDecisions: 1 }],
+    },
+  })
+
+  const response = await putTask(new Request('http://local/api/tasks/task-policy-completed-edit', {
+    method: 'PUT',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ title: 'Completed Policy Edit Task Updated' }),
+  }), routeParams('task-policy-completed-edit'))
+
+  assert.equal(response.status, 200)
+  const body = await response.json() as BoardTask
+  assert.equal(body.status, 'completed')
+  assert.equal(body.title, 'Completed Policy Edit Task Updated')
+})
+
+test('GET /api/tasks/:id/execution-policy returns policy summary', async () => {
+  seedTask('task-policy-summary', {
+    title: 'Policy Summary Task',
+    executionPolicy: {
+      enabled: true,
+      mode: 'before_completion',
+      stages: [{ id: 'review', title: 'Review', kind: 'review' }],
+    },
+  })
+
+  const response = await getTaskExecutionPolicy(
+    new Request('http://local/api/tasks/task-policy-summary/execution-policy'),
+    routeParams('task-policy-summary'),
+  )
+  assert.equal(response.status, 200)
+  const body = await response.json()
+  assert.equal(body.summary.enabled, true)
+  assert.equal(body.summary.status, 'waiting')
+})
+
 test('POST /api/tasks/:id/handoff saves markdown and JSON snapshots into the workspace', async () => {
   seedTask('task-handoff-save', {
     title: 'Saved Handoff Task',

package/src/cli/index.js

@@ -738,6 +738,8 @@ const COMMAND_GROUPS = [
       cmd('handoff', 'GET', '/tasks/:id/handoff', 'Get task handoff packet'),
       cmd('handoff-save', 'POST', '/tasks/:id/handoff', 'Save task handoff packet into the task workspace', { expectsJsonBody: true }),
       cmd('handoffs', 'GET', '/tasks/handoffs', 'List task handoff readiness packets'),
+      cmd('execution-policy', 'GET', '/tasks/:id/execution-policy', 'Get task execution policy state'),
+      cmd('execution-policy-decision', 'POST', '/tasks/:id/execution-policy', 'Approve, request changes, or reset a task policy stage', { expectsJsonBody: true }),
       cmd('create', 'POST', '/tasks', 'Create task', { expectsJsonBody: true }),
       cmd('bulk', 'POST', '/tasks/bulk', 'Bulk update tasks (status/agent/project)', { expectsJsonBody: true }),
       cmd('update', 'PUT', '/tasks/:id', 'Update task', { expectsJsonBody: true }),

package/src/cli/index.test.js

@@ -12,7 +12,7 @@ const {
   getApiCoveragePairs,
   parseArgv,
   runCli,
-} = require('./index')
+} = require('./index.js')
 
 function collectApiRoutePairs() {
   const root = path.join(process.cwd(), 'src', 'app', 'api')
@@ -195,6 +195,36 @@ test('tasks handoff command can request markdown packets', async () => {
   assert.equal(stderr.toString(), '')
 })
 
+test('tasks execution-policy-decision posts policy decisions', async () => {
+  const stdout = makeWritable()
+  const stderr = makeWritable()
+  const calls = []
+
+  const fetchImpl = async (url, init) => {
+    calls.push({ url: String(url), init })
+    return jsonResponse({ state: { status: 'completed' } })
+  }
+
+  const exitCode = await runCli(
+    ['tasks', 'execution-policy-decision', 'task-1', '--data', '{"action":"approve","actor":"QA"}', '--json'],
+    {
+      fetchImpl,
+      stdout,
+      stderr,
+      env: {},
+      cwd: process.cwd(),
+    }
+  )
+
+  assert.equal(exitCode, 0)
+  assert.equal(calls.length, 1)
+  assert.match(calls[0].url, /\/api\/tasks\/task-1\/execution-policy$/)
+  assert.equal(calls[0].init.method, 'POST')
+  assert.deepEqual(JSON.parse(calls[0].init.body), { action: 'approve', actor: 'QA' })
+  assert.match(stdout.toString(), /"completed"/)
+  assert.equal(stderr.toString(), '')
+})
+
 test('openclaw deploy bundle command merges action with provided JSON body', async () => {
   const stdout = makeWritable()
   const stderr = makeWritable()

package/src/cli/spec.js

@@ -532,6 +532,8 @@ const COMMAND_GROUPS = {
       handoff: { description: 'Get task handoff packet', method: 'GET', path: '/tasks/:id/handoff', params: ['id'] },
       'handoff-save': { description: 'Save task handoff packet into the task workspace', method: 'POST', path: '/tasks/:id/handoff', params: ['id'] },
       handoffs: { description: 'List task handoff readiness packets', method: 'GET', path: '/tasks/handoffs' },
+      'execution-policy': { description: 'Get task execution policy state', method: 'GET', path: '/tasks/:id/execution-policy', params: ['id'] },
+      'execution-policy-decision': { description: 'Approve, request changes, or reset a task policy stage', method: 'POST', path: '/tasks/:id/execution-policy', params: ['id'] },
       create: { description: 'Create task', method: 'POST', path: '/tasks' },
       bulk: { description: 'Bulk update tasks (status/agent/project)', method: 'POST', path: '/tasks/bulk' },
       update: { description: 'Update task', method: 'PUT', path: '/tasks/:id', params: ['id'] },