@swarmclawai/swarmclaw 1.9.9 → 1.9.11

package/README.md

@@ -399,6 +399,24 @@ Operational docs: https://swarmclaw.ai/docs/observability
 
 ## Releases
 
+### v1.9.11 Highlights
+
+Task execution policy release: operators can attach ordered review, approval, and verification stages to board tasks, record decisions, and block premature completion until required stages clear.
+
+- **Task execution policies.** Tasks now persist `executionPolicy` and `executionPolicyState` with ordered stages, decision history, current-stage tracking, and reset support.
+- **Completion guardrails.** `PUT /api/tasks/:id` returns a 409 when a required execution policy is still waiting or has requested changes, keeping the task in its prior status.
+- **Policy API and CLI.** `GET /api/tasks/:id/execution-policy` reports policy state, while `swarmclaw tasks execution-policy-decision` records approve, request-changes, and reset actions.
+- **Operator UI and handoffs.** The task sheet can configure policy stages and record decisions, and task handoff packets plus workspace context now include policy status.
+
+### v1.9.10 Highlights
+
+Task handoff release: operators can package task state, readiness, workspace context, dependencies, outputs, and resume handles into a shareable packet before continuing work.
+
+- **Task handoff packets.** `GET /api/tasks/:id/handoff` returns a structured packet with owner, liveness, workspace, runtime links, dependencies, quality checks, outputs, run summary, and recommended actions.
+- **Workspace snapshots.** `POST /api/tasks/:id/handoff` prepares a workspace when needed and writes `handoff.md` plus `handoff.json` beside the task context files.
+- **Board-level triage.** `GET /api/tasks/handoffs` lists readiness packets with ready, needs-attention, and blocked counts so operators can scan handoff risk across the board.
+- **CLI and UI access.** `swarmclaw tasks handoff`, `swarmclaw tasks handoff-save`, and `swarmclaw tasks handoffs` expose the workflow for scripts, while the task sheet can copy, open, or save packets.
+
 ### v1.9.9 Highlights
 
 Schedule revision timeline release: schedule edits, lifecycle changes, and run evidence now stay inspectable from UI, API, and CLI surfaces.

package/electron-dist/main.js

@@ -0,0 +1,218 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const electron_1 = require("electron");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const paths_1 = require("./paths");
+const server_lifecycle_1 = require("./server-lifecycle");
+const menu_1 = require("./menu");
+const DEV_URL_DEFAULT = 'http://127.0.0.1:3456';
+const LOG_TAIL_BYTES = 1500;
+let mainWindow = null;
+let serverHandle = null;
+let serverLogFile = null;
+let isQuitting = false;
+const gotLock = electron_1.app.requestSingleInstanceLock();
+if (!gotLock) {
+    electron_1.app.quit();
+}
+else {
+    electron_1.app.on('second-instance', () => {
+        if (mainWindow) {
+            if (mainWindow.isMinimized())
+                mainWindow.restore();
+            mainWindow.focus();
+        }
+    });
+    electron_1.app.on('ready', () => void onReady());
+    electron_1.app.on('window-all-closed', () => {
+        if (process.platform !== 'darwin')
+            electron_1.app.quit();
+    });
+    electron_1.app.on('activate', () => {
+        if (mainWindow !== null)
+            return;
+        if (serverHandle) {
+            createMainWindow(serverHandle.url);
+        }
+        else if (!electron_1.app.isPackaged) {
+            createMainWindow(process.env.SWARMCLAW_DEV_URL || DEV_URL_DEFAULT);
+        }
+    });
+    electron_1.app.on('before-quit', () => {
+        isQuitting = true;
+    });
+    electron_1.app.on('will-quit', async (event) => {
+        if (!serverHandle)
+            return;
+        event.preventDefault();
+        try {
+            await serverHandle.stop();
+        }
+        finally {
+            serverHandle = null;
+            electron_1.app.exit(0);
+        }
+    });
+}
+async function onReady() {
+    const paths = (0, paths_1.resolveRuntimePaths)();
+    (0, menu_1.buildAppMenu)(paths, () => mainWindow);
+    const iconPath = resolveIconPath();
+    if (process.platform === 'darwin' && iconPath && electron_1.app.dock) {
+        const img = electron_1.nativeImage.createFromPath(iconPath);
+        if (!img.isEmpty())
+            electron_1.app.dock.setIcon(img);
+    }
+    if (!electron_1.app.isPackaged) {
+        const devUrl = process.env.SWARMCLAW_DEV_URL || DEV_URL_DEFAULT;
+        console.log(`[swarmclaw] dev mode, loading ${devUrl}`);
+        createMainWindow(devUrl);
+        return;
+    }
+    serverLogFile = node_path_1.default.join(electron_1.app.getPath('userData'), 'logs', 'server.log');
+    node_fs_1.default.mkdirSync(node_path_1.default.dirname(serverLogFile), { recursive: true });
+    try {
+        serverHandle = await (0, server_lifecycle_1.startEmbeddedServer)({
+            paths,
+            logFile: serverLogFile,
+            onStdout: (c) => process.stdout.write(`[swarmclaw] ${c}`),
+            onStderr: (c) => process.stderr.write(`[swarmclaw] ${c}`),
+            onExit: (code, signal) => {
+                if (!isQuitting) {
+                    console.error(`[swarmclaw] server exited unexpectedly (code=${code}, signal=${signal ?? 'none'})`);
+                    void showServerCrashDialog(code, signal);
+                }
+            },
+        });
+    }
+    catch (err) {
+        await showStartupFailureDialog(err, paths);
+        electron_1.app.exit(1);
+        return;
+    }
+    createMainWindow(serverHandle.url);
+    void Promise.resolve().then(() => __importStar(require('./updater'))).then((m) => m.initAutoUpdater());
+}
+function resolveIconPath() {
+    const candidate = electron_1.app.isPackaged
+        ? node_path_1.default.join(process.resourcesPath, 'icon.png')
+        : node_path_1.default.join(__dirname, '..', 'resources', 'icon.png');
+    return node_fs_1.default.existsSync(candidate) ? candidate : undefined;
+}
+function createMainWindow(startUrl) {
+    const iconPath = resolveIconPath();
+    mainWindow = new electron_1.BrowserWindow({
+        width: 1440,
+        height: 900,
+        minWidth: 1024,
+        minHeight: 640,
+        backgroundColor: '#0b0b0f',
+        show: true,
+        ...(iconPath ? { icon: iconPath } : {}),
+        webPreferences: {
+            contextIsolation: true,
+            nodeIntegration: false,
+            sandbox: false,
+        },
+    });
+    const wc = mainWindow.webContents;
+    if (!electron_1.app.isPackaged)
+        wc.openDevTools({ mode: 'detach' });
+    wc.on('did-start-loading', () => console.log('[swarmclaw] did-start-loading'));
+    wc.on('did-finish-load', () => console.log('[swarmclaw] did-finish-load'));
+    wc.on('did-fail-load', (_e, code, desc, url) => console.error(`[swarmclaw] did-fail-load code=${code} desc=${desc} url=${url}`));
+    wc.on('render-process-gone', (_e, details) => console.error(`[swarmclaw] render-process-gone reason=${details.reason}`));
+    wc.on('unresponsive', () => console.error('[swarmclaw] webContents unresponsive'));
+    mainWindow.on('closed', () => {
+        mainWindow = null;
+    });
+    mainWindow.webContents.setWindowOpenHandler(({ url }) => {
+        if (url.startsWith(startUrl))
+            return { action: 'allow' };
+        void electron_1.shell.openExternal(url);
+        return { action: 'deny' };
+    });
+    void mainWindow.loadURL(startUrl).catch((err) => {
+        console.error('[swarmclaw] loadURL rejected:', err);
+    });
+}
+async function showServerCrashDialog(code, signal) {
+    const buttons = serverLogFile ? ['Open Logs Folder', 'Quit'] : ['Quit'];
+    const quitButtonId = buttons.length - 1;
+    const detail = buildLogDetail(`code=${code ?? 'null'} signal=${signal ?? 'none'}`);
+    const res = await electron_1.dialog.showMessageBox({
+        type: 'error',
+        buttons,
+        defaultId: quitButtonId,
+        cancelId: quitButtonId,
+        title: 'SwarmClaw stopped',
+        message: 'The SwarmClaw server exited unexpectedly.',
+        detail,
+    });
+    if (serverLogFile && res.response === 0)
+        electron_1.shell.showItemInFolder(serverLogFile);
+    electron_1.app.exit(1);
+}
+async function showStartupFailureDialog(err, paths) {
+    const message = err instanceof Error ? err.message : String(err);
+    const base = `${message}\n\nStandalone entry: ${paths.standaloneEntry}\nData dir: ${paths.dataDir}`;
+    const detail = buildLogDetail(base);
+    const buttons = serverLogFile ? ['Open Logs Folder', 'Quit'] : ['Quit'];
+    const quitButtonId = buttons.length - 1;
+    const res = await electron_1.dialog.showMessageBox({
+        type: 'error',
+        buttons,
+        defaultId: quitButtonId,
+        cancelId: quitButtonId,
+        title: 'SwarmClaw failed to start',
+        message: 'The embedded server did not start.',
+        detail,
+    });
+    if (serverLogFile && res.response === 0)
+        electron_1.shell.showItemInFolder(serverLogFile);
+}
+function buildLogDetail(base) {
+    if (!serverLogFile)
+        return base;
+    const tail = (0, server_lifecycle_1.tailLogFile)(serverLogFile, LOG_TAIL_BYTES).trim();
+    if (!tail)
+        return `${base}\n\nLog file: ${serverLogFile}\n(no output captured yet)`;
+    return `${base}\n\nLog tail (${serverLogFile}):\n${tail}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swarmclawai/swarmclaw",
-  "version": "1.9.9",
+  "version": "1.9.11",
   "description": "Build and run autonomous AI agents with OpenClaw, Hermes, multiple model providers, orchestration, delegation, memory, skills, schedules, and chat connectors.",
   "main": "electron-dist/main.js",
   "license": "MIT",
@@ -87,7 +87,7 @@
     "test:cli": "node --test src/cli/*.test.js bin/*.test.js scripts/electron-after-pack.test.mjs scripts/ensure-sandbox-browser-image.test.mjs scripts/postinstall.test.mjs scripts/run-next-build.test.mjs scripts/run-next-typegen.test.mjs",
     "test:setup": "tsx --test src/app/api/setup/check-provider/route.test.ts src/lib/server/provider-model-discovery.test.ts src/components/auth/setup-wizard/utils.test.ts src/components/auth/setup-wizard/types.test.ts src/hooks/setup-done-detection.test.ts src/lib/setup-defaults.test.ts src/lib/server/storage-auth.test.ts src/lib/server/storage-auth-docker.test.ts",
     "test:openclaw": "tsx --test src/lib/openclaw/openclaw-agent-id.test.ts src/lib/openclaw/openclaw-endpoint.test.ts src/lib/server/agents/agent-runtime-config.test.ts src/lib/server/build-llm.test.ts src/lib/server/connectors/connector-routing.test.ts src/lib/server/connectors/openclaw.test.ts src/lib/server/connectors/swarmdock.test.ts src/lib/server/gateway/protocol.test.ts src/lib/server/gateways/gateway-topology.test.ts src/lib/server/llm-response-cache.test.ts src/lib/server/mcp-conformance.test.ts src/lib/server/openclaw/agent-resolver.test.ts src/lib/server/openclaw/deploy.test.ts src/lib/server/openclaw/skills-normalize.test.ts src/lib/server/session-tools/openclaw-nodes.test.ts src/lib/server/session-tools/swarmdock.test.ts src/lib/server/tasks/task-quality-gate.test.ts src/lib/server/tasks/task-validation.test.ts src/lib/server/tool-capability-policy.test.ts src/lib/providers/openai.test.ts src/lib/providers/openclaw-exports.test.ts src/app/api/gateways/topology-route.test.ts src/app/api/openclaw/dashboard-url/route.test.ts",
-    "test:runtime": "tsx --test src/lib/a2a/agent-card.test.ts src/lib/strip-internal-metadata.test.ts src/lib/provider-sets.test.ts src/lib/providers/opencode-cli.test.ts src/lib/providers/cli-provider-metadata.test.ts src/lib/providers/cli-utils.test.ts src/lib/providers/generic-cli.test.ts src/lib/server/agents/delegation-advisory.test.ts src/lib/server/cli-provider-readiness.test.ts src/lib/server/provider-health.test.ts src/lib/server/mcp-gateway-runtime.test.ts src/lib/server/mcp-connection-pool.test.ts src/lib/server/knowledge-sources.test.ts src/lib/server/extension-managed-resources.test.ts src/lib/server/eval/baseline.test.ts src/lib/server/eval/environment-plan.test.ts src/lib/server/chat-execution/chat-execution-grounding.test.ts src/lib/server/chat-execution/chat-turn-preparation.test.ts src/lib/server/chat-execution/iteration-timers.test.ts src/lib/server/chat-execution/post-stream-finalization.test.ts src/lib/server/chat-execution/reasoning-tag-scrubber.test.ts src/lib/server/chats/clear-undo-snapshots.test.ts src/lib/server/connectors/email.test.ts src/lib/server/protocols/protocol-service.test.ts src/lib/server/runtime/run-ledger.test.ts src/lib/server/runtime/queue-retry-policy.test.ts src/lib/server/runs/run-brief.test.ts src/lib/server/operations/operation-pulse.test.ts src/lib/server/schedules/schedule-history.test.ts src/lib/quality/release-readiness.test.ts src/lib/server/artifacts/artifact-resolver.test.ts src/lib/server/observability/otel-config.test.ts src/lib/server/safe-parse-body.test.ts src/lib/server/missions/mission-templates.test.ts src/lib/server/sharing/share-link-repository.test.ts src/lib/server/sharing/share-resolver.test.ts src/lib/server/tasks/task-execution-workspace.test.ts src/lib/server/tasks/task-service.test.ts src/lib/server/session-tools/execute.test.ts src/lib/server/session-tools/manage-tasks.test.ts src/lib/app/view-constants.test.ts src/lib/quality/quality-summary.test.ts src/app/api/approvals/route.test.ts src/app/api/agents/agents-route.test.ts src/app/api/tasks/tasks-route.test.ts src/app/api/tasks/task-workspace-route.test.ts src/app/api/chats/chat-route.test.ts src/app/api/chats/clear-route.test.ts src/app/api/chats/compact-route.test.ts src/app/api/chats/context-status-route.test.ts src/app/api/connectors/connector-doctor-route.test.ts src/app/api/extensions/managed-resources/route.test.ts src/app/api/healthz/route.test.ts src/app/api/logs/route.test.ts src/app/api/portability/export/route.test.ts src/app/api/portability/import/route.test.ts src/app/api/providers/[id]/route.test.ts src/app/api/schedules/schedule-history-route.test.ts src/app/api/tts/route.test.ts",
+    "test:runtime": "tsx --test src/lib/a2a/agent-card.test.ts src/lib/strip-internal-metadata.test.ts src/lib/provider-sets.test.ts src/lib/providers/opencode-cli.test.ts src/lib/providers/cli-provider-metadata.test.ts src/lib/providers/cli-utils.test.ts src/lib/providers/generic-cli.test.ts src/lib/server/agents/delegation-advisory.test.ts src/lib/server/cli-provider-readiness.test.ts src/lib/server/provider-health.test.ts src/lib/server/mcp-gateway-runtime.test.ts src/lib/server/mcp-connection-pool.test.ts src/lib/server/knowledge-sources.test.ts src/lib/server/extension-managed-resources.test.ts src/lib/server/eval/baseline.test.ts src/lib/server/eval/environment-plan.test.ts src/lib/server/chat-execution/chat-execution-grounding.test.ts src/lib/server/chat-execution/chat-turn-preparation.test.ts src/lib/server/chat-execution/iteration-timers.test.ts src/lib/server/chat-execution/post-stream-finalization.test.ts src/lib/server/chat-execution/reasoning-tag-scrubber.test.ts src/lib/server/chats/clear-undo-snapshots.test.ts src/lib/server/connectors/email.test.ts src/lib/server/protocols/protocol-service.test.ts src/lib/server/runtime/run-ledger.test.ts src/lib/server/runtime/queue-retry-policy.test.ts src/lib/server/runs/run-brief.test.ts src/lib/server/operations/operation-pulse.test.ts src/lib/server/schedules/schedule-history.test.ts src/lib/quality/release-readiness.test.ts src/lib/server/artifacts/artifact-resolver.test.ts src/lib/server/observability/otel-config.test.ts src/lib/server/safe-parse-body.test.ts src/lib/server/missions/mission-templates.test.ts src/lib/server/sharing/share-link-repository.test.ts src/lib/server/sharing/share-resolver.test.ts src/lib/server/tasks/task-execution-workspace.test.ts src/lib/server/tasks/task-execution-policy.test.ts src/lib/server/tasks/task-handoff.test.ts src/lib/server/tasks/task-service.test.ts src/lib/server/session-tools/execute.test.ts src/lib/server/session-tools/manage-tasks.test.ts src/lib/app/view-constants.test.ts src/lib/quality/quality-summary.test.ts src/app/api/approvals/route.test.ts src/app/api/agents/agents-route.test.ts src/app/api/tasks/tasks-route.test.ts src/app/api/tasks/task-workspace-route.test.ts src/app/api/chats/chat-route.test.ts src/app/api/chats/clear-route.test.ts src/app/api/chats/compact-route.test.ts src/app/api/chats/context-status-route.test.ts src/app/api/connectors/connector-doctor-route.test.ts src/app/api/extensions/managed-resources/route.test.ts src/app/api/healthz/route.test.ts src/app/api/logs/route.test.ts src/app/api/portability/export/route.test.ts src/app/api/portability/import/route.test.ts src/app/api/providers/[id]/route.test.ts src/app/api/schedules/schedule-history-route.test.ts src/app/api/tts/route.test.ts",
     "test:builder": "tsx --test src/features/protocols/builder/utils/nodes-to-template.test.ts src/features/protocols/builder/utils/template-to-nodes.test.ts src/features/protocols/builder/validators/dag-validator.test.ts",
     "test:e2e": "node --import tsx scripts/browser-e2e-smoke.ts",
     "test:mcp:conformance": "node --import tsx ./scripts/mcp-conformance-check.ts",

package/src/app/api/tasks/[id]/execution-policy/route.ts

@@ -0,0 +1,46 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { notFound } from '@/lib/server/collection-helpers'
+import { loadTask } from '@/lib/server/tasks/task-repository'
+import { safeParseBody } from '@/lib/server/safe-parse-body'
+import {
+  describeTaskExecutionPolicy,
+  normalizeTaskExecutionPolicy,
+  syncTaskExecutionPolicyState,
+} from '@/lib/server/tasks/task-execution-policy'
+import { decideTaskExecutionPolicyFromRoute } from '@/lib/server/tasks/task-route-service'
+import { formatZodError } from '@/lib/validation/schemas'
+
+const TaskExecutionPolicyDecisionSchema = z.object({
+  action: z.enum(['approve', 'request_changes', 'reset']).optional().default('approve'),
+  stageId: z.string().optional(),
+  actor: z.string().optional(),
+  note: z.string().optional(),
+})
+
+export async function GET(_req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const task = loadTask(id)
+  if (!task) return notFound()
+  const policy = normalizeTaskExecutionPolicy(task.executionPolicy)
+  const state = syncTaskExecutionPolicyState(policy, task.executionPolicyState)
+  return NextResponse.json({
+    taskId: id,
+    policy,
+    state,
+    summary: describeTaskExecutionPolicy({ executionPolicy: policy, executionPolicyState: state }),
+  })
+}
+
+export async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const { data: raw, error } = await safeParseBody<Record<string, unknown>>(req)
+  if (error) return error
+  const parsed = TaskExecutionPolicyDecisionSchema.safeParse(raw || {})
+  if (!parsed.success) return NextResponse.json(formatZodError(parsed.error), { status: 400 })
+  const result = decideTaskExecutionPolicyFromRoute(id, parsed.data)
+  if (!result.ok && result.status === 404) return notFound()
+  return result.ok
+    ? NextResponse.json(result.payload)
+    : NextResponse.json(result.payload, { status: result.status })
+}

package/src/app/api/tasks/[id]/handoff/route.ts

@@ -0,0 +1,73 @@
+import { NextResponse } from 'next/server'
+import fs from 'fs'
+import path from 'path'
+import { buildTaskHandoffPacket, formatTaskHandoffMarkdown } from '@/lib/server/tasks/task-handoff'
+import { prepareTaskExecutionWorkspace } from '@/lib/server/tasks/task-execution-workspace'
+import { loadTasks, saveTask } from '@/lib/server/tasks/task-repository'
+
+export const dynamic = 'force-dynamic'
+
+export async function GET(req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const tasks = loadTasks()
+  const task = tasks[id]
+  if (!task) return NextResponse.json({ error: 'Task not found' }, { status: 404 })
+
+  const packet = buildTaskHandoffPacket(task, tasks)
+  const { searchParams } = new URL(req.url)
+  if (searchParams.get('format') === 'markdown') {
+    return new Response(formatTaskHandoffMarkdown(packet), {
+      headers: {
+        'content-type': 'text/markdown; charset=utf-8',
+      },
+    })
+  }
+
+  return NextResponse.json(packet)
+}
+
+export async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const tasks = loadTasks()
+  const task = tasks[id]
+  if (!task) return NextResponse.json({ error: 'Task not found' }, { status: 404 })
+
+  let body: Record<string, unknown> = {}
+  try {
+    body = await req.json() as Record<string, unknown>
+  } catch {
+    body = {}
+  }
+
+  if (!task.executionWorkspace || body.prepareWorkspace !== false) {
+    Object.assign(task, prepareTaskExecutionWorkspace(task, {
+      now: Date.now(),
+      actor: 'user',
+      tasks,
+    }))
+    task.updatedAt = Date.now()
+    tasks[id] = task
+    saveTask(id, task)
+  }
+
+  const workspacePath = task.executionWorkspace?.path
+  if (!workspacePath) {
+    return NextResponse.json({ error: 'Task workspace is not available' }, { status: 409 })
+  }
+
+  fs.mkdirSync(workspacePath, { recursive: true })
+  const packet = buildTaskHandoffPacket(task, tasks)
+  const markdown = formatTaskHandoffMarkdown(packet)
+  const markdownPath = path.join(workspacePath, 'handoff.md')
+  const jsonPath = path.join(workspacePath, 'handoff.json')
+  fs.writeFileSync(markdownPath, markdown, 'utf8')
+  fs.writeFileSync(jsonPath, `${JSON.stringify(packet, null, 2)}\n`, 'utf8')
+
+  return NextResponse.json({
+    packet,
+    files: {
+      markdownPath,
+      jsonPath,
+    },
+  })
+}

package/src/app/api/tasks/handoffs/route.ts

@@ -0,0 +1,50 @@
+import { NextResponse } from 'next/server'
+import { buildTaskHandoffPacket } from '@/lib/server/tasks/task-handoff'
+import { loadTasks } from '@/lib/server/tasks/task-repository'
+import type { TaskHandoffReadinessStatus } from '@/types'
+
+export const dynamic = 'force-dynamic'
+
+const READINESS_STATUSES: TaskHandoffReadinessStatus[] = ['ready', 'needs_attention', 'blocked']
+
+function normalizeLimit(value: string | null): number {
+  const parsed = value ? Number.parseInt(value, 10) : 50
+  if (!Number.isFinite(parsed)) return 50
+  return Math.max(1, Math.min(200, Math.trunc(parsed)))
+}
+
+export async function GET(req: Request) {
+  const { searchParams } = new URL(req.url)
+  const status = searchParams.get('status') as TaskHandoffReadinessStatus | null
+  const includeArchived = searchParams.get('includeArchived') === 'true'
+  const limit = normalizeLimit(searchParams.get('limit'))
+  const now = Date.now()
+  const tasks = loadTasks()
+  const packets = Object.values(tasks)
+    .filter((task) => includeArchived || task.status !== 'archived')
+    .map((task) => buildTaskHandoffPacket(task, tasks, { now, runBrief: null }))
+    .sort((left, right) => {
+      const statusRank: Record<TaskHandoffReadinessStatus, number> = {
+        blocked: 0,
+        needs_attention: 1,
+        ready: 2,
+      }
+      return statusRank[left.readiness.status] - statusRank[right.readiness.status] || right.updatedAt - left.updatedAt
+    })
+
+  const filtered = status && READINESS_STATUSES.includes(status)
+    ? packets.filter((packet) => packet.readiness.status === status)
+    : packets
+  const counts: Record<TaskHandoffReadinessStatus, number> = {
+    ready: 0,
+    needs_attention: 0,
+    blocked: 0,
+  }
+  for (const packet of packets) counts[packet.readiness.status] += 1
+
+  return NextResponse.json({
+    generatedAt: now,
+    counts,
+    items: filtered.slice(0, limit),
+  })
+}

package/src/app/api/tasks/task-workspace-route.test.ts

@@ -15,6 +15,11 @@ const originalEnv = {
 
 let tempDir = ''
 let putTask: typeof import('./[id]/route')['PUT']
+let getTaskHandoff: typeof import('./[id]/handoff/route')['GET']
+let postTaskHandoff: typeof import('./[id]/handoff/route')['POST']
+let getTaskExecutionPolicy: typeof import('./[id]/execution-policy/route')['GET']
+let postTaskExecutionPolicy: typeof import('./[id]/execution-policy/route')['POST']
+let getTaskHandoffs: typeof import('./handoffs/route')['GET']
 let getTasks: typeof import('./route')['GET']
 let storage: typeof import('@/lib/server/storage')
 
@@ -46,6 +51,13 @@ before(async () => {
   process.env.SWARMCLAW_DAEMON_AUTOSTART = '0'
   storage = await import('@/lib/server/storage')
   putTask = (await import('./[id]/route')).PUT
+  const handoffRoute = await import('./[id]/handoff/route')
+  getTaskHandoff = handoffRoute.GET
+  postTaskHandoff = handoffRoute.POST
+  const policyRoute = await import('./[id]/execution-policy/route')
+  getTaskExecutionPolicy = policyRoute.GET
+  postTaskExecutionPolicy = policyRoute.POST
+  getTaskHandoffs = (await import('./handoffs/route')).GET
   getTasks = (await import('./route')).GET
 })
 
@@ -114,3 +126,178 @@ test('GET /api/tasks returns computed blocked liveness without persisting a task
   assert.equal(body['task-blocked']?.liveness?.state, 'blocked')
   assert.deepEqual(body['task-blocked']?.liveness?.blockerTaskIds, ['dep-route'])
 })
+
+test('GET /api/tasks/:id/handoff returns readiness and markdown packets', async () => {
+  seedTask('task-handoff', {
+    title: 'Handoff Route Task',
+    description: 'Prepare a packet.',
+    blockedBy: ['dep-handoff'],
+    qualityGate: {
+      enabled: true,
+      minResultChars: 50,
+      minEvidenceItems: 1,
+    },
+  })
+  const tasks = storage.loadTasks()
+  tasks['dep-handoff'] = {
+    id: 'dep-handoff',
+    title: 'Dependency',
+    description: '',
+    status: 'running',
+    agentId: 'agent-1',
+    createdAt: Date.now(),
+    updatedAt: Date.now(),
+  } as BoardTask
+  storage.saveTasks(tasks)
+
+  const jsonResponse = await getTaskHandoff(
+    new Request('http://local/api/tasks/task-handoff/handoff'),
+    routeParams('task-handoff'),
+  )
+  assert.equal(jsonResponse.status, 200)
+  const packet = await jsonResponse.json()
+  assert.equal(packet.taskId, 'task-handoff')
+  assert.equal(packet.readiness.status, 'blocked')
+  assert.equal(packet.dependencies.blockedBy[0]?.id, 'dep-handoff')
+
+  const markdownResponse = await getTaskHandoff(
+    new Request('http://local/api/tasks/task-handoff/handoff?format=markdown'),
+    routeParams('task-handoff'),
+  )
+  assert.equal(markdownResponse.status, 200)
+  assert.match(markdownResponse.headers.get('content-type') || '', /text\/markdown/)
+  const markdown = await markdownResponse.text()
+  assert.match(markdown, /# Task Handoff: Handoff Route Task/)
+  assert.match(markdown, /Readiness: blocked/)
+})
+
+test('PUT /api/tasks/:id blocks completion until execution policy stages are approved', async () => {
+  seedTask('task-policy-complete', {
+    title: 'Policy Completion Task',
+    result: 'Implemented the requested feature, updated src/app/example.ts, and verified with npm run test.',
+    executionPolicy: {
+      enabled: true,
+      mode: 'before_completion',
+      stages: [{ id: 'review', title: 'Review', kind: 'review', requiredDecisions: 1 }],
+    },
+  })
+
+  const blocked = await putTask(new Request('http://local/api/tasks/task-policy-complete', {
+    method: 'PUT',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ status: 'completed' }),
+  }), routeParams('task-policy-complete'))
+
+  assert.equal(blocked.status, 409)
+  assert.equal(storage.loadTasks()['task-policy-complete']?.status, 'backlog')
+
+  const policyResponse = await postTaskExecutionPolicy(new Request('http://local/api/tasks/task-policy-complete/execution-policy', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ action: 'approve', actor: 'QA' }),
+  }), routeParams('task-policy-complete'))
+  assert.equal(policyResponse.status, 200)
+  const policyBody = await policyResponse.json()
+  assert.equal(policyBody.state.status, 'completed')
+
+  const completed = await putTask(new Request('http://local/api/tasks/task-policy-complete', {
+    method: 'PUT',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ status: 'completed' }),
+  }), routeParams('task-policy-complete'))
+
+  assert.equal(completed.status, 200)
+  const body = await completed.json() as BoardTask
+  assert.equal(body.status, 'completed')
+})
+
+test('PUT /api/tasks/:id allows edits to already completed tasks without re-requesting completion', async () => {
+  seedTask('task-policy-completed-edit', {
+    title: 'Completed Policy Edit Task',
+    status: 'completed',
+    result: 'Completed with tests passed and build passed.',
+    executionPolicy: {
+      enabled: true,
+      mode: 'before_completion',
+      stages: [{ id: 'review', title: 'Review', kind: 'review', requiredDecisions: 1 }],
+    },
+  })
+
+  const response = await putTask(new Request('http://local/api/tasks/task-policy-completed-edit', {
+    method: 'PUT',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ title: 'Completed Policy Edit Task Updated' }),
+  }), routeParams('task-policy-completed-edit'))
+
+  assert.equal(response.status, 200)
+  const body = await response.json() as BoardTask
+  assert.equal(body.status, 'completed')
+  assert.equal(body.title, 'Completed Policy Edit Task Updated')
+})
+
+test('GET /api/tasks/:id/execution-policy returns policy summary', async () => {
+  seedTask('task-policy-summary', {
+    title: 'Policy Summary Task',
+    executionPolicy: {
+      enabled: true,
+      mode: 'before_completion',
+      stages: [{ id: 'review', title: 'Review', kind: 'review' }],
+    },
+  })
+
+  const response = await getTaskExecutionPolicy(
+    new Request('http://local/api/tasks/task-policy-summary/execution-policy'),
+    routeParams('task-policy-summary'),
+  )
+  assert.equal(response.status, 200)
+  const body = await response.json()
+  assert.equal(body.summary.enabled, true)
+  assert.equal(body.summary.status, 'waiting')
+})
+
+test('POST /api/tasks/:id/handoff saves markdown and JSON snapshots into the workspace', async () => {
+  seedTask('task-handoff-save', {
+    title: 'Saved Handoff Task',
+    cwd: '/source/repo',
+    result: 'Ready for the next operator.',
+  })
+
+  const response = await postTaskHandoff(
+    new Request('http://local/api/tasks/task-handoff-save/handoff', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ prepareWorkspace: true }),
+    }),
+    routeParams('task-handoff-save'),
+  )
+
+  assert.equal(response.status, 200)
+  const body = await response.json()
+  assert.equal(body.packet.taskId, 'task-handoff-save')
+  assert.equal(fs.existsSync(body.files.markdownPath), true)
+  assert.equal(fs.existsSync(body.files.jsonPath), true)
+  assert.match(fs.readFileSync(body.files.markdownPath, 'utf8'), /# Task Handoff: Saved Handoff Task/)
+})
+
+test('GET /api/tasks/handoffs lists board-level readiness packets with counts', async () => {
+  seedTask('task-ready', {
+    title: 'Ready Task',
+    executionWorkspace: {
+      path: '/tmp/ready',
+      mode: 'task',
+      preparedAt: Date.now(),
+      previewLinks: [],
+      runtimeServices: [],
+    },
+  })
+  seedTask('task-needs-attention', {
+    title: 'Needs Workspace',
+  })
+
+  const response = await getTaskHandoffs(new Request('http://local/api/tasks/handoffs?status=needs_attention&limit=10'))
+  assert.equal(response.status, 200)
+  const body = await response.json()
+  assert.equal(body.counts.ready >= 1, true)
+  assert.equal(body.counts.needs_attention >= 1, true)
+  assert.equal(body.items.every((packet: { readiness: { status: string } }) => packet.readiness.status === 'needs_attention'), true)
+})

package/src/cli/index.js

@@ -735,6 +735,11 @@ const COMMAND_GROUPS = [
     commands: [
       cmd('list', 'GET', '/tasks', 'List tasks'),
       cmd('get', 'GET', '/tasks/:id', 'Get task'),
+      cmd('handoff', 'GET', '/tasks/:id/handoff', 'Get task handoff packet'),
+      cmd('handoff-save', 'POST', '/tasks/:id/handoff', 'Save task handoff packet into the task workspace', { expectsJsonBody: true }),
+      cmd('handoffs', 'GET', '/tasks/handoffs', 'List task handoff readiness packets'),
+      cmd('execution-policy', 'GET', '/tasks/:id/execution-policy', 'Get task execution policy state'),
+      cmd('execution-policy-decision', 'POST', '/tasks/:id/execution-policy', 'Approve, request changes, or reset a task policy stage', { expectsJsonBody: true }),
       cmd('create', 'POST', '/tasks', 'Create task', { expectsJsonBody: true }),
       cmd('bulk', 'POST', '/tasks/bulk', 'Bulk update tasks (status/agent/project)', { expectsJsonBody: true }),
       cmd('update', 'PUT', '/tasks/:id', 'Update task', { expectsJsonBody: true }),