@goodandready/dsh-cron 0.2.50 → 0.2.51

package/lib/api.js

@@ -1,3 +1,4 @@
+import { sanitizeValidators } from './validators.js';
 /**
  * REST surface of the plugin: the /dsh-cron/tasks and /dsh-cron/action route
  * families. Extracted from index.js and split into per-scope handlers so each
@@ -266,6 +267,7 @@ function buildTaskRecord(store, body, taskType, parsed) {
     maxRetries: body.maxRetries !== undefined ? Math.max(0, Number(body.maxRetries) || 0) : (current ? (Number(current.maxRetries) || 0) : 0),
     retryBackoffMs: body.retryBackoffMs !== undefined ? Math.max(1000, Number(body.retryBackoffMs) || 30000) : (current ? (Number(current.retryBackoffMs) || 30000) : 30000),
     permissionPreset: !EXTERNAL_RUNTIMES.includes(taskType) && ['default', 'read-only', 'workspace-write', 'full'].includes(body.permissionPreset) ? body.permissionPreset : (current && !EXTERNAL_RUNTIMES.includes(taskType) ? (current.permissionPreset || 'default') : 'default'),
+    validators: Array.isArray(body.validators) ? sanitizeValidators(body.validators) : (current ? current.validators : undefined),
     ...mergeExecutionFields(current, body, parsed),
   };
 }
@@ -341,6 +343,34 @@ async function handleTaskItem({ store, scheduler, req, res, url, id, action, api
 
 /** Task actions that are plain POSTs. Returns true when one matched. */
 async function handleItemPost({ store, scheduler, req, res, url, id, action }) {
+  if (action === 'retry-delivery') {
+    const task = store.get(id);
+    if (!task) {
+      sendJson(res, 404, NOT_FOUND);
+      return true;
+    }
+    const body = await readBodyJson(req).catch(() => ({}));
+    const runId = body.runId || url.searchParams.get('runId');
+    const runs = store.history.get(id) || [];
+    const run = runId ? runs.find(r => r.id === runId) : runs[0];
+    if (!run) {
+      sendJson(res, 404, { ok: false, error: 'Run not found' });
+      return true;
+    }
+    const delivery = await scheduler.deliverNotifications(task, run);
+    run.delivery = delivery;
+    if (Array.isArray(run.stages)) {
+      const deliveryStage = run.stages.find(s => s.name === 'delivery');
+      if (deliveryStage) {
+        deliveryStage.status = delivery?.status || 'delivered';
+        deliveryStage.delivered = delivery?.delivered;
+        deliveryStage.failures = delivery?.failures;
+      }
+    }
+    store.scheduleSave();
+    sendJson(res, 200, { ok: true, delivery, run });
+    return true;
+  }
   if (action === 'run') {
     if (!store.get(id)) {
       sendJson(res, 404, NOT_FOUND);

package/lib/channels.js

@@ -15,7 +15,7 @@ export const CHANNEL_IDS = ['telegram', 'kanban', 'discord', 'slack', 'ntfy', 'b
 
 // CHANNEL_LABELS removed (#155) — localized via lib/client.js
 
-export const isFailureStatus = (status) => status === 'error' || status === 'timeout' || status === 'missed';
+export const isFailureStatus = (status) => status === 'error' || status === 'timeout' || status === 'missed' || status === 'validation_failed' || status === 'validator_error';
 export const isFailed = (status) => isFailureStatus(status);
 
 /** The message text for a channel: task template -> channel template -> global template -> built-in defaults (#233). */
@@ -362,7 +362,9 @@ const CHANNEL_HANDLERS = {
   },
 
   async tts({ task, runInfo, settings, http, signal, timeoutMs }) {
-    const base = String(settings.ttsBaseUrl || 'http://127.0.0.1:3080').replace(/\/+$/, '');
+    const defaultPort = settings._webServerPort || settings.webServerPort || (settings.webServer && settings.webServer.port) || 3080;
+    const rawBase = String(settings.ttsBaseUrl || '').trim();
+    const base = (rawBase ? rawBase : `http://127.0.0.1:${defaultPort}`).replace(/\/+$/, '');
     const payload = { text: truncateText(messageTextFor('tts', task, runInfo, settings), 600) };
     const data = await postJson(http, `${base}/dsh-tts/speak`, { 'Content-Type': 'application/json' }, JSON.stringify(payload), 'tts', signal, timeoutMs);
     return { provider: data.provider || 'dsh-tts', tookMs: data.tookMs || null };

package/lib/client.js

@@ -6,20 +6,14 @@ window.__ModuleLoader__.load({
     const React = window.React || require('react');
     const ReactDOM = window.ReactDOM || require('react-dom/client');
 
-    // Settings namespace, locale namespace and plugin marker share the same
-    // canonical identifier — the settings.plugin.item slot key MUST match the
-    // namespace registered on the server ('dsh-cron', Issue #85).
     const PLUGIN_ID = '@goodandready/dsh-cron';
     const NS = 'dsh-cron';
-    // Plugins page row seat (DSH 0.1.6-alpha.2): key = '<package name>#<row id>'.
     const ROW_ID = 'dsh-cron';
     const ROW_CONFIG_KEY = PLUGIN_ID + '#' + ROW_ID;
     const PANEL = 'cron';
     const ACTIVATE_EVENT = 'dsh-panel-activate';
     const ACTIVE_ATTR = 'data-dsh-cron-active';
     const ENTRY_ATTR = 'data-dsh-cron-entry';
-    // Set by the sidebar job list (#34) so the panel can highlight the task the
-    // user clicked; cleared once the panel has scrolled to it.
     let pendingTaskHighlight = null;
     const VIEW_ATTR = 'data-dsh-cron-view';
     const COLUMN_SELECTOR = '[data-pane=conversation], [class*=centerCol]';
@@ -44,10 +38,6 @@ window.__ModuleLoader__.load({
     const ICON_UPLOAD = '<svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"></path><polyline points="17 8 12 3 7 8"></polyline><line x1="12" y1="3" x2="12" y2="15"></line></svg>';
     const ICON_TELEGRAM = '<svg viewBox="0 0 24 24" width="16" height="16" fill="currentColor" aria-hidden="true"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm4.64 6.8-1.7 8.01c-.13.58-.47.72-.95.45l-2.6-1.92-1.25 1.21c-.14.14-.26.26-.53.26l.19-2.64 4.81-4.35c.21-.19-.05-.29-.32-.11L8.34 13.5 5.78 12.7c-.56-.17-.57-.56.12-.83l10-3.86c.46-.17.87.11.74.79z"/></svg>';
 
-    // Locale dictionary: English is the canonical source language (Issue #87).
-    // Russian and other languages are provided at runtime by the translation
-    // plugin; no per-language duplicates are stored here.
-    // Core chevron primitive when the build ships it; own SVG fallback otherwise.
     let CoreChevron = null;
     try {
       const primitives = require('@deepseek-ai/dsh-client-ui-primitives');
@@ -57,9 +47,6 @@ window.__ModuleLoader__.load({
     }
     const chevronNode = () => (CoreChevron ? React.createElement(CoreChevron) : React.createElement('span', { style: { display: 'flex', alignItems: 'center' }, dangerouslySetInnerHTML: { __html: ICON_CHEVRON_DOWN } }));
 
-    // Own React error boundary (#106): the core's SlotErrorBoundary renders an
-    // empty div on crash, so a slot failure would silently vanish. Ours keeps
-    // the failure visible with a retry.
     const STRINGS = {
       en: {
         'sidebar.label': 'Scheduled tasks',
@@ -143,7 +130,25 @@ window.__ModuleLoader__.load({
         'modal.close': 'Close',
         'history.loading': 'Loading history...',
         'history.empty': 'No runs recorded yet',
+        'history.stoppedReasonTitle': 'Stopped reason:',
+        'history.retryDelivery': 'Retry delivery',
+        'history.retryingDelivery': 'Retrying...',
+        'history.statusValidationFailed': 'validation failed',
+        'history.stage_queue': 'Queue',
+        'history.stage_preflight': 'Preflight',
+        'history.stage_execution': 'Execution',
+        'history.stage_validation': 'Validation',
+        'history.stage_delivery': 'Delivery',
         'history.refresh': 'Refresh history',
+        'history.stoppedReasonTitle': '停止原因:',
+        'history.retryDelivery': '重试推送',
+        'history.retryingDelivery': '重试中...',
+        'history.statusValidationFailed': '校验未通过',
+        'history.stage_queue': '排队',
+        'history.stage_preflight': '前置检查',
+        'history.stage_execution': '执行',
+        'history.stage_validation': '校验',
+        'history.stage_delivery': '推送',
         'history.statusSuccess': 'Success',
         'history.statusSkipped': 'Skipped',
         'history.statusMissed': 'Missed',
@@ -615,8 +620,6 @@ window.__ModuleLoader__.load({
       }
     };
 
-    // Module-level translator. apply() rebinds it to the DSH locale service so
-    // the active language and live language switches are honored.
     let translate = (key, vars) => {
       let s = (STRINGS.en && STRINGS.en[key]) || key;
       if (vars) {
@@ -774,6 +777,12 @@ window.__ModuleLoader__.load({
       .dsh-cron-history-head { display: flex; justify-content: space-between; align-items: center; margin-bottom: 6px; }
       .dsh-cron-history-status { font-weight: 500; font-size: 11px; text-transform: uppercase; padding: 2px 8px; border-radius: 999px; border: 1px solid var(--dsw-alias-border-l2); }
       .dsh-cron-history-status[data-status="success"] { background: var(--dsh-cron-success-bg); color: var(--dsh-cron-success); border-color: var(--dsh-cron-success); }
+      .dsh-cron-history-status[data-status="validation_failed"] { background: var(--dsh-cron-danger-bg); color: var(--dsh-cron-danger); border-color: var(--dsh-cron-danger); }
+      .dsh-cron-stage-pill { font-size: 10.5px; padding: 1px 7px; border-radius: 4px; border: 1px solid var(--dsw-alias-border-l2); color: var(--dsw-alias-label-secondary); }
+      .dsh-cron-stage-pill[data-status="success"], .dsh-cron-stage-pill[data-status="delivered"] { background: var(--dsh-cron-success-bg); color: var(--dsh-cron-success); border-color: var(--dsh-cron-success); }
+      .dsh-cron-stage-pill[data-status="failed"], .dsh-cron-stage-pill[data-status="error"] { background: var(--dsh-cron-danger-bg); color: var(--dsh-cron-danger); border-color: var(--dsh-cron-danger); }
+      .dsh-cron-stage-pill[data-status="partial"] { background: var(--dsh-cron-warning-bg); color: var(--dsh-cron-warning); border-color: var(--dsh-cron-warning); }
+      .dsh-cron-stage-pill[data-status="skipped"] { opacity: 0.6; }
       .dsh-cron-history-status[data-status="error"], .dsh-cron-history-status[data-status="timeout"] { background: var(--dsh-cron-danger-bg); color: var(--dsh-cron-danger); border-color: var(--dsh-cron-danger); }
       .dsh-cron-history-status[data-status="skipped"], .dsh-cron-history-status[data-status="missed"] { background: var(--dsh-cron-warning-bg); color: var(--dsh-cron-warning); border-color: var(--dsh-cron-warning); }
       .dsh-cron-history-time { color: var(--dsw-alias-label-tertiary); font-size: 12px; }
@@ -861,7 +870,6 @@ window.__ModuleLoader__.load({
         if (!head) return null;
         el = document.createElement('style');
         el.id = STYLE_ID;
-        // Mark ownership before insertion so neighbor cleanups leave it alone (#91)
         el.dataset.dshPlugin = 'dsh-cron';
         el.textContent = STYLES;
         head.appendChild(el);
@@ -871,8 +879,6 @@ window.__ModuleLoader__.load({
       return el;
     }
 
-    // Registry is shared across hot reloads so the newest instance owns exactly
-    // one watcher instead of stacking one per module evaluation.
     const STYLE_HEAL_KEY = '__dshCronStyleHeal';
     const STYLE_HEAL_INTERVAL_MS = 2000;
 
@@ -947,7 +953,6 @@ window.__ModuleLoader__.load({
     const AGENT_FORM_TYPES = ['llm', 'skill', 'workflow'];
     const CODE_FORM_TYPES = ['script', 'node', 'python', 'ssh', 'docker'];
 
-    // Delivery channels (#26) — must stay in sync with lib/channels.js.
     const DELIVERY_CHANNELS = ['telegram', 'kanban', 'discord', 'slack', 'ntfy', 'bark', 'pushplus', 'tts', 'gitea'];
     const CHANNEL_LABEL_KEYS = {
       telegram: 'form.channelTelegram',
@@ -961,15 +966,11 @@ window.__ModuleLoader__.load({
       gitea: 'form.channelGitea',
     };
 
-    // Non-secret delivery settings shown in the settings panel. Secrets are
-    // referenced by credential name only (#51) — never typed as values.
     const DELIVERY_SETTING_FIELDS = [
       { key: 'botTokenRef', labelKey: 'settings.botTokenRefLabel', placeholderKey: 'settings.botTokenRefPlaceholder', group: 'secrets' },
       { key: 'ntfyTokenRef', labelKey: 'settings.ntfyTokenRefLabel', group: 'secrets' },
       { key: 'pushplusTokenRef', labelKey: 'settings.pushplusTokenRefLabel', group: 'secrets' },
       { key: 'giteaTokenRef', labelKey: 'settings.giteaTokenRefLabel', group: 'secrets' },
-      // The external API is the one surface where a typed secret is the point:
-      // a CI job cannot present a credential reference (#54).
       { key: 'apiToken', labelKey: 'settings.apiTokenLabel', placeholderKey: 'settings.apiTokenPlaceholder', group: 'secrets' },
       { key: 'discordWebhookUrl', labelKey: 'settings.discordLabel', group: 'channels' },
       { key: 'slackWebhookUrl', labelKey: 'settings.slackLabel', group: 'channels' },
@@ -986,7 +987,6 @@ window.__ModuleLoader__.load({
       { key: 'inspectorModel', labelKey: 'settings.inspectorModelLabel', group: 'automation' },
     ];
     const DELIVERY_SETTING_KEYS = DELIVERY_SETTING_FIELDS.map((f) => f.key);
-    // The global template plus the per-channel override map (server model).
     const TEMPLATE_SETTING_KEYS = ['template', 'channelTemplates'];
 
     /** Collect every delivery key the settings endpoints may return. */
@@ -1009,8 +1009,6 @@ window.__ModuleLoader__.load({
       return Object.entries(env).map(([k, v]) => `${k}=${v}`).join('\n');
     }
 
-    // Status colors: core semantic state tokens first (same set dsh-clinebot
-    // uses), plugin fallbacks as a single point of change (#105).
     function createToggle() {
       let open = false;
       const listeners = new Set();
@@ -1037,7 +1035,6 @@ window.__ModuleLoader__.load({
       const getSessions = () => (ctx && typeof ctx.get === 'function' ? ctx.get('sessions') : (ctx && ctx.sessions));
       let sessions = getSessions();
 
-      // 1. Try sessions.open(sessionId) immediately
       if (sessions && typeof sessions.open === 'function') {
         try {
           sessions.open(sessionId);
@@ -1047,7 +1044,6 @@ window.__ModuleLoader__.load({
         }
       }
 
-      // 2. If the session is not in manager.summaries yet, refresh from the backend
       if (sessions && typeof sessions.refresh === 'function') {
         try {
           await sessions.refresh();
@@ -1058,7 +1054,6 @@ window.__ModuleLoader__.load({
         }
       }
 
-      // 3. Async retries until the WebSocket/SSE event adds the session to the list
       for (let i = 0; i < 15; i++) {
         await new Promise(resolve => setTimeout(resolve, 120));
         sessions = getSessions();
@@ -1070,7 +1065,6 @@ window.__ModuleLoader__.load({
             /* retry polling sessions.open threw */
           }
         }
-        // DOM fallback: click the session in the sidebar if it has rendered
         if (typeof document !== 'undefined') {
           const domItem = document.querySelector('[data-session-id="' + sessionId + '"], [role="treeitem"][data-id="' + sessionId + '"], [data-id="' + sessionId + '"]');
           if (domItem) {
@@ -1085,6 +1079,7 @@ window.__ModuleLoader__.load({
 
     function statusLabel(t, status) {
       if (status === 'success') return T_KEY(t, 'history.statusSuccess');
+      if (status === 'validation_failed') return T_KEY(t, 'history.statusValidationFailed');
       if (status === 'skipped') return T_KEY(t, 'history.statusSkipped');
       if (status === 'missed') return T_KEY(t, 'history.statusMissed');
       if (status === 'timeout') return T_KEY(t, 'history.statusTimeout');
@@ -1178,9 +1173,6 @@ window.__ModuleLoader__.load({
           step: 1000,
           value: val(f.key),
           placeholder: String(f.defaultValue !== undefined ? f.defaultValue : 15000),
-          // #115: clearing the field must send the explicit default. Deleting the
-          // key would leave the previously stored value in place (the settings
-          // scope skips absent keys), so the field would silently keep 1 ms.
           onChange: (e) => onChange(f.key, e.target.value === ''
             ? (f.defaultValue !== undefined ? f.defaultValue : 15000)
             : Number(e.target.value)),
@@ -1253,8 +1245,6 @@ window.__ModuleLoader__.load({
       const t = props.t || translate;
       const [tab, setTab] = React.useState('all');
       const [query, setQuery] = React.useState('');
-      // Facet filters (#40): applied client-side over the already-loaded list so
-      // toggling them is instant and does not touch the polling request.
       const [filterType, setFilterType] = React.useState('');
       const [filterModel, setFilterModel] = React.useState('');
       const [filterChannel, setFilterChannel] = React.useState('');
@@ -1265,14 +1255,12 @@ window.__ModuleLoader__.load({
       const [fetchError, setFetchError] = React.useState(null);
       const [dropdownOpen, setDropdownOpen] = React.useState(false);
 
-      // Export/import state (#42)
       const [transferBusy, setTransferBusy] = React.useState(false);
       const [importDoc, setImportDoc] = React.useState(null);
       const [importSummary, setImportSummary] = React.useState(null);
       const [importStrategy, setImportStrategy] = React.useState('skip');
       const importFileRef = React.useRef(null);
 
-      // Manual / Edit modal state
       const [manualModalOpen, setManualModalOpen] = React.useState(false);
       const [formId, setFormId] = React.useState(null);
       const [formTitle, setFormTitle] = React.useState('');
@@ -1289,6 +1277,7 @@ window.__ModuleLoader__.load({
       const [modalTab, setModalTab] = React.useState('params');
       const [taskHistory, setTaskHistory] = React.useState([]);
       const [historyLoading, setHistoryLoading] = React.useState(false);
+      const [retryingDeliveryId, setRetryingDeliveryId] = React.useState(null);
       const [formNotifyTelegram, setFormNotifyTelegram] = React.useState(false);
       const [formChannels, setFormChannels] = React.useState([]);
       const [formTemplate, setFormTemplate] = React.useState('');
@@ -1414,8 +1403,6 @@ window.__ModuleLoader__.load({
         setManualModalOpen(false);
       };
 
-      // Live execution indicator (#35): a light 1s tick only while some task
-      // is actually running.
       const tasksRef = React.useRef([]);
       const [nowTick, setNowTick] = React.useState(0);
       React.useEffect(() => {
@@ -1428,7 +1415,6 @@ window.__ModuleLoader__.load({
         return () => clearInterval(tick);
       }, []);
 
-      // Settings modal state
       const [settingsModalOpen, setSettingsModalOpen] = React.useState(false);
       const [settingsBotToken, setSettingsBotToken] = React.useState('');
       const [settingsChatId, setSettingsChatId] = React.useState('');
@@ -1441,12 +1427,10 @@ window.__ModuleLoader__.load({
       const [settingsHasCustomBotToken, setSettingsHasCustomBotToken] = React.useState(false);
       const [testStatus, setTestStatus] = React.useState(null);
 
-      // DSH dialog state
       const [dshModalOpen, setDshModalOpen] = React.useState(false);
       const [dshPrompt, setDshPrompt] = React.useState('');
       const [dshLoading, setDshLoading] = React.useState(false);
 
-      // Models list state
       const [providers, setProviders] = React.useState([]);
       const [models, setModels] = React.useState([]);
       const [defaultModelInfo, setDefaultModelInfo] = React.useState(null);
@@ -1593,7 +1577,6 @@ window.__ModuleLoader__.load({
             .then(res => {
               if (isDestroyed || pollGen !== fetchGenRef.current) return null;
               if (res.status === 304) {
-                // Not modified: skip parsing JSON
                 return null;
               }
               const etag = res.headers.get('ETag');
@@ -1614,13 +1597,11 @@ window.__ModuleLoader__.load({
             .finally(() => {
               if (pollTimer) clearTimeout(pollTimer);
               if (isDestroyed) return;
-              // Adaptive interval: 30s when tab is hidden, 8s when active (#134)
               const intervalMs = (typeof document !== 'undefined' && document.hidden) ? 30000 : 8000;
               timerId = setTimeout(doPoll, intervalMs);
             });
         };
 
-        // Trigger immediate fetch when visibility returns
         const onVisibilityChange = () => {
           if (typeof document !== 'undefined' && !document.hidden) {
             if (timerId) clearTimeout(timerId);
@@ -1666,7 +1647,6 @@ window.__ModuleLoader__.load({
           try {
             data = await res.json();
           } catch (jsonErr) {
-            // Re-throw if body reading aborted/timed out (#242)
             if (jsonErr && (jsonErr.name === 'AbortError' || controller?.signal.aborted)) {
               throw jsonErr;
             }
@@ -1781,8 +1761,6 @@ window.__ModuleLoader__.load({
             return;
           }
           await fetchTasks();
-          // A one-shot copy keeps its original schedule string, so warn instead
-          // of letting the user resume a task pointing at a past moment.
           alert(task.oneShot ? T_KEY(t, 'duplicate.oneShotHint') : T_KEY(t, 'duplicate.done'));
         } catch (err) {
           alert(T_KEY(t, 'duplicate.failed', { error: err.message }));
@@ -2068,7 +2046,6 @@ window.__ModuleLoader__.load({
         setFormPythonPath('');
         setFormSkillName('');
         setFormWorkflowName('');
-        // Reset before the preset branch, so a recipe keeps what it sets.
         setFormFallbackModel('');
         setFormSilentRule('');
         setFormInspectOnFailure(false);
@@ -2076,7 +2053,6 @@ window.__ModuleLoader__.load({
           setFormTitle(preset.title || '');
           setFormSchedule(preset.schedule || '');
           setFormPrompt(preset.prompt || '');
-          // #48: a recipe preset also carries its runtime and delivery shape.
           if (preset.type) setFormType(preset.type);
           if (Array.isArray(preset.channels) && preset.channels.length) setFormChannels(preset.channels.filter((c) => DELIVERY_CHANNELS.includes(c)));
           if (preset.silentRule !== undefined) setFormSilentRule(preset.silentRule || '');
@@ -2150,6 +2126,26 @@ window.__ModuleLoader__.load({
         setManualModalOpen(true);
       };
 
+      const handleRetryDelivery = async (taskId, runId) => {
+        setRetryingDeliveryId(runId);
+        try {
+          const { res, data } = await fetchJsonWithTimeout('/dsh-cron/tasks/' + encodeURIComponent(taskId) + '/retry-delivery', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ runId }),
+          });
+          if (data && data.ok) {
+            await loadTaskHistory(taskId);
+          } else {
+            alert(data?.error || 'Failed to retry delivery');
+          }
+        } catch (e) {
+          alert(e.message || 'Error retrying delivery');
+        } finally {
+          setRetryingDeliveryId(null);
+        }
+      };
+
       const loadTaskHistory = async (taskId) => {
         setHistoryLoading(true);
         try {
@@ -2293,8 +2289,6 @@ window.__ModuleLoader__.load({
             skillName: formSkillName.trim(),
             workflowName: formWorkflowName.trim(),
           };
-          // Cross-origin hardening: every code-executing type needs the explicit
-          // confirm header, which forged cross-site posts cannot attach (#86)
           const headers = { 'Content-Type': 'application/json' };
           const hasCodeExec = CODE_FORM_TYPES.includes(formType) ||
             Boolean(payload.command && payload.command.trim()) ||
@@ -2391,7 +2385,6 @@ window.__ModuleLoader__.load({
                   React.createElement('button', { className: 'dsh-cron-dropdown-item', onClick: () => openManualModal(null) }, T_KEY(t, 'actions.setupManually'))
                 )
               ),
-              // #42: export/import as a small pair of icon buttons.
               React.createElement('button', {
                 type: 'button',
                 className: 'dsh-cron-icon-btn',
@@ -2460,7 +2453,6 @@ window.__ModuleLoader__.load({
                       : T_KEY(t, 'tabs.completed'))
             )
           ),
-          // #40: facet filters over the loaded list.
           React.createElement('div', { className: 'dsh-cron-filters' },
             React.createElement('button', {
               type: 'button',
@@ -2692,7 +2684,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-        // 1. Manual creation / Edit modal
         manualModalOpen && React.createElement('div', {
           className: 'dsh-cron-modal-overlay',
           onClick: (e) => {
@@ -2753,8 +2744,39 @@ window.__ModuleLoader__.load({
                           React.createElement('span', { style: { color: 'var(--dsw-alias-label-tertiary, #888)', fontSize: '11.5px' } }, (run.durationMs || 0) + ' ms')
                         )
                       ),
-                      // #43: a diagnosed failure shows what went wrong and
-                      // offers to prefill the prompt with the suggestion.
+                      run.stoppedReason && React.createElement('div', {
+                        className: 'dsh-cron-hint',
+                        style: { display: 'flex', gap: '6px', alignItems: 'center', marginTop: '6px' }
+                      },
+                        React.createElement('span', { className: 'dsh-cron-badge-ref' }, T_KEY(t, 'history.stoppedReasonTitle')),
+                        React.createElement('span', null, run.stoppedReason)
+                      ),
+                      Array.isArray(run.stages) && run.stages.length > 0 && React.createElement('div', {
+                        className: 'dsh-cron-stages-flow',
+                        style: { display: 'flex', gap: '6px', flexWrap: 'wrap', marginTop: '6px' }
+                      },
+                        run.stages.map((st) => React.createElement('span', {
+                          key: st.name,
+                          className: 'dsh-cron-stage-pill',
+                          'data-status': st.status || 'unknown',
+                          title: st.error ? (st.name + ': ' + st.error) : (st.name + (st.durationMs !== undefined ? ' (' + st.durationMs + 'ms)' : ''))
+                        }, (T_KEY(t, 'history.stage_' + st.name) || st.name) + (st.durationMs !== undefined ? ' ' + st.durationMs + 'ms' : '')))
+                      ),
+                      run.delivery && React.createElement('div', {
+                        style: { display: 'flex', alignItems: 'center', gap: '8px', marginTop: '6px' }
+                      },
+                        React.createElement('span', {
+                          className: 'dsh-cron-badge-ref',
+                          'data-status': run.delivery.status
+                        }, 'Delivery: ' + run.delivery.status),
+                        (run.delivery.status === 'failed' || run.delivery.status === 'partial') && React.createElement('button', {
+                          type: 'button',
+                          className: 'dsh-cron-btn-secondary',
+                          style: { padding: '2px 8px', fontSize: '11px' },
+                          disabled: retryingDeliveryId === run.id,
+                          onClick: () => handleRetryDelivery(formId, run.id)
+                        }, retryingDeliveryId === run.id ? T_KEY(t, 'history.retryingDelivery') : T_KEY(t, 'history.retryDelivery'))
+                      ),
                       run.diagnosis && React.createElement('div', {
                         className: 'dsh-cron-status-banner',
                         'data-type': 'info',
@@ -2774,7 +2796,6 @@ window.__ModuleLoader__.load({
                           }, T_KEY(t, 'history.applySuggestion'))
                         )
                       ),
-                      // #44: a run suppressed by its silent rule says why.
                       run.silentSkip && React.createElement('div', {
                         className: 'dsh-cron-hint',
                         style: { display: 'flex', gap: '6px', alignItems: 'center' }
@@ -3018,7 +3039,6 @@ window.__ModuleLoader__.load({
                       models.map((m) => React.createElement('option', { key: m.id, value: m.id }, m.name || m.id))
                     )
                   ),
-                  // #45: one retry on a stronger model when the cheap one fails.
                   React.createElement('div', { className: 'dsh-cron-form-group' },
                     React.createElement('label', null, T_KEY(t, 'form.fallbackModelLabel')),
                     React.createElement('input', {
@@ -3029,7 +3049,6 @@ window.__ModuleLoader__.load({
                     }),
                     React.createElement('div', { className: 'dsh-cron-hint' }, T_KEY(t, 'form.fallbackModelHint'))
                   ),
-                  // #43: diagnose failures with a model.
                   React.createElement('label', { className: 'dsh-cron-checkbox-row', style: { marginTop: '4px' } },
                     React.createElement('input', {
                       type: 'checkbox',
@@ -3261,7 +3280,6 @@ window.__ModuleLoader__.load({
                     }),
                     React.createElement('div', { className: 'dsh-cron-hint' }, T_KEY(t, 'form.templateHint'))
                   ),
-                  // #44: output-producing runtimes may stay silent by rule.
                   !AGENT_FORM_TYPES.includes(formType) && React.createElement('div', { className: 'dsh-cron-form-group', style: { marginTop: '12px', marginBottom: 0 } },
                     React.createElement('label', null, T_KEY(t, 'form.silentRuleLabel')),
                     React.createElement('input', {
@@ -3274,7 +3292,6 @@ window.__ModuleLoader__.load({
                   )
                 ),
                 
-                  // Reliability, Heartbeat & Self-Healing section
                   React.createElement('div', {
                     style: {
                       marginTop: '16px',
@@ -3409,7 +3426,6 @@ window.__ModuleLoader__.load({
         ),
 
 
-        // Dry Run simulation modal
         dryRunResult && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => setDryRunResult(null) },
           React.createElement('div', {
             className: 'dsh-cron-modal',
@@ -3456,7 +3472,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-        // Archive runs modal
         archiveModalOpen && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => setArchiveModalOpen(false) },
           React.createElement('div', {
             className: 'dsh-cron-modal',
@@ -3524,7 +3539,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-                // 2. Settings modal
         settingsModalOpen && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => setSettingsModalOpen(false) },
           React.createElement('div', { className: 'dsh-cron-modal dsh-cron-modal-scroll', role: 'dialog', 'aria-modal': 'true', onClick: (e) => e.stopPropagation() },
             React.createElement('div', { className: 'dsh-cron-modal-head', style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: '18px' } },
@@ -3611,7 +3625,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-        // 3. Import modal (#42) — summary first, then an explicit strategy.
         importDoc && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => !transferBusy && setImportDoc(null) },
           React.createElement('div', { className: 'dsh-cron-modal', role: 'dialog', 'aria-modal': 'true', onClick: (e) => e.stopPropagation() },
             React.createElement('div', { className: 'dsh-cron-modal-title' }, T_KEY(t, 'transfer.importTitleModal')),
@@ -3654,7 +3667,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-        // 4. "Create with DSH" modal
         dshModalOpen && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => !dshLoading && setDshModalOpen(false) },
           React.createElement('div', { className: 'dsh-cron-modal', role: 'dialog', 'aria-modal': 'true', onClick: (e) => e.stopPropagation() },
             React.createElement('div', { className: 'dsh-cron-modal-title' }, T_KEY(t, 'dsh.modalTitle')),
@@ -3717,7 +3729,6 @@ window.__ModuleLoader__.load({
       const [hasDefault, setHasDefault] = React.useState(false);
       const [saved, setSaved] = React.useState(false);
       const [testInfo, setTestInfo] = React.useState(null);
-      // Collapsed by default, head is the toggle (canonical card contract, #100)
       const [cardOpen, setCardOpen] = React.useState(false);
       const [updateState, setUpdateState] = React.useState({
         checking: false,
@@ -3777,8 +3788,6 @@ window.__ModuleLoader__.load({
         }
       };
 
-      // Settings snapshot status (#102): never render phantom inputs before
-      // the snapshot arrives; offer a retry when it is unavailable.
       const [loadState, setLoadState] = React.useState('loading');
       const [reloadTick, setReloadTick] = React.useState(0);
 
@@ -3887,8 +3896,6 @@ window.__ModuleLoader__.load({
         );
       }
 
-      // Row seat (plugins.row.config): the host page draws title/icon/crumb and the
-      // padding, so the summary is a one-liner and the page drops our card chrome.
       if (props && props.view === 'summary') {
         return React.createElement('span', { className: 'dsh-cron-card-desc' }, T_KEY(t, 'settings.cardDesc'));
       }
@@ -4116,8 +4123,6 @@ window.__ModuleLoader__.load({
       const row = document.createElement('button');
       row.type = 'button';
       row.className = 'dsh-cron-sidebar-job';
-      // A distinct attribute: the panel uses data-task-id, and the highlight
-      // lookup must never pick a sidebar row instead of a task card.
       row.setAttribute('data-sidebar-task-id', task.id);
       row.setAttribute('aria-label', task.title || task.id);
 
@@ -4218,7 +4223,6 @@ window.__ModuleLoader__.load({
         entry.insertAdjacentElement('afterend', buildSidebarJobsRoot(state, label));
       } else {
         entry.insertAdjacentElement('afterend', state.root);
-        // Re-query the refs: the previous nodes may belong to a detached tree.
         state.root = document.querySelector('[data-dsh-part="sidebar-jobs"]') || state.root;
         state.listEl = state.root.querySelector('.dsh-cron-sidebar-jobs-list');
         state.headEl = state.root.querySelector('.dsh-cron-sidebar-jobs-head');
@@ -4335,8 +4339,6 @@ window.__ModuleLoader__.load({
 
       const applyActive = () => {
         if (toggle.isOpen()) {
-          // Repair a dropped stylesheet before the panel paints, so opening the
-          // screen never shows an unstyled page (see startStyleSelfHeal).
           ensureStyles();
           document.documentElement.setAttribute(ACTIVE_ATTR, '');
           document.dispatchEvent(new CustomEvent(ACTIVATE_EVENT, { detail: PANEL }));
@@ -4396,14 +4398,12 @@ window.__ModuleLoader__.load({
     function apply(ctx) {
       const stopStyleSelfHeal = startStyleSelfHeal();
 
-      // Register the English canonical strings; rebinding the translator lets
-      // the translation plugin drive the active language at runtime (#87).
       try {
         if (ctx.locale && typeof ctx.locale.register === 'function') {
           ctx.locale.register(NS, STRINGS);
         }
       } catch (e) {
-        // Re-registration in the same session throws — the dictionary is live already.
+        void e;
       }
       try {
         if (ctx.locale && typeof ctx.locale.bind === 'function') {
@@ -4415,16 +4415,9 @@ window.__ModuleLoader__.load({
 
       const toggle = createToggle();
 
-      // The settings card lives ONLY in the plugins settings tab (#102): no
-      // top-level section fallback — the flat sidebar list is a shared core
-      // resource, and the card slot is proven on current builds (#85).
       function SettingsCardWithBoundary(props) {
         return React.createElement(ErrorBoundary, null, CronSettingsCard(props));
       }
-      // List seat (plugins.item): the seat the Plugins page renders as the plugin's own
-      // page with its configuration. The label is a static string on purpose — it is
-      // resolved while the page renders, and a locale lookup there would take the whole
-      // client batch down with it.
       const itemOk = registerIntoMount(ctx, 'plugins.item', {
         name: 'plugins.item',
         id: ROW_ID,
@@ -4436,8 +4429,6 @@ window.__ModuleLoader__.load({
       if (!itemOk) {
         console.warn('[dsh-cron] plugins.item slot unavailable — plugin page card not registered');
       }
-      // Row seat and the legacy settings.plugin.item seat stay as fallbacks
-      // (#102: still no top-level section fallback).
       const rowOk = registerIntoMount(ctx, 'plugins.row.config', {
         name: 'plugins.row.config',
         key: ROW_CONFIG_KEY,

package/lib/cron-tool.js

@@ -152,6 +152,26 @@ export const cronToolParameters = {
     enum: ['default', 'read-only', 'workspace-write', 'full'],
     description: 'Permission preset applied to the task session (only used for agent session tasks: llm, skill, workflow)',
   },
+  validators: {
+    type: 'array',
+    description: 'Declarative post-execution validation checks (json, regex, text, exitCode, file)',
+    items: {
+      type: 'object',
+      properties: {
+        type: { type: 'string', enum: ['json', 'regex', 'text', 'exitCode', 'file'] },
+        pattern: { type: 'string' },
+        text: { type: 'string' },
+        negate: { type: 'boolean' },
+        statusKey: { type: 'string' },
+        expected: { type: 'string' },
+        path: { type: 'string' },
+        mustExist: { type: 'boolean' },
+        minBytes: { type: 'number' },
+        target: { type: 'string' },
+      },
+      additionalProperties: true,
+    },
+  },
   kanbanMode: {
     type: 'string',
     enum: ['none', 'on_failure', 'always'],

package/lib/index.js

@@ -165,7 +165,10 @@ export function apply(ctx, rawConfig) {
     deliver: (task, runInfo, settings) => deliverRun({
       task,
       runInfo,
-      settings,
+      settings: {
+        ...settings,
+        _webServerPort: ctx.webServer?.port || 3080,
+      },
       secrets: {
         botToken: settings.botToken || '',
         resolveSecret: (ref) => resolveCredentialValue(ctx, ref),

package/lib/scheduler-execution.js

@@ -1,3 +1,4 @@
+import { validateRunResult } from './validators.js';
 import { logger } from './logger.js';
 import { checkAndApplyBurnGuard, checkTaskBudgetLimits } from './burn-guard.js';
 import { resolveTaskForExecution } from './prompt-interpolation.js';
@@ -327,7 +328,9 @@ export async function executeTask(scheduler, taskId, options = {}) {
   const currentRun = scheduler.beginRun(task, taskId, options);
   if (currentRun === null) return null;
 
+  const preflightStart = Date.now();
   const preflight = await executePreflight(task);
+  const preflightDurationMs = Date.now() - preflightStart;
   if (!preflight.ok) {
     logger.info(`[dsh-cron] task "${task.title}" (${taskId}) skipped: ${preflight.reason}`);
     scheduler.running.delete(taskId);
@@ -337,7 +340,10 @@ export async function executeTask(scheduler, taskId, options = {}) {
 
   const start = Date.now();
   const outcome = await scheduler.executeWithFallback(task, currentRun.controller.signal, options);
-  await scheduler.completeRun(task, taskId, currentRun, outcome, start, options);
+  await scheduler.completeRun(task, taskId, currentRun, outcome, start, {
+    ...options,
+    preflightDurationMs,
+  });
   return outcome;
 }
 
@@ -429,7 +435,7 @@ export async function deliverNotifications(task, runInfo, { store, resolveSecret
         logger.warn('[dsh-cron] credential resolution failed:', secErr.message);
       }
     }
-    if (typeof deliver !== 'function') return;
+    if (typeof deliver !== 'function') return { status: 'skipped', delivered: [], failures: [] };
     const result = await deliver(task, runInfo, settings);
     if (result && Array.isArray(result.delivered) && result.delivered.length) {
       logger.info(`[dsh-cron] delivered "${task.title}" to: ${result.delivered.map((d) => d.channel).join(', ')}`);
@@ -437,8 +443,16 @@ export async function deliverNotifications(task, runInfo, { store, resolveSecret
     if (result && Array.isArray(result.failures) && result.failures.length) {
       logger.warn(`[dsh-cron] delivery failures for "${task.title}": ${result.failures.map((f) => `${f.channel}: ${f.error}`).join('; ')}`);
     }
+    const delivered = Array.isArray(result?.delivered) ? result.delivered : [];
+    const failures = Array.isArray(result?.failures) ? result.failures : [];
+    let status = 'skipped';
+    if (delivered.length > 0 && failures.length === 0) status = 'delivered';
+    else if (delivered.length > 0 && failures.length > 0) status = 'partial';
+    else if (delivered.length === 0 && failures.length > 0) status = 'failed';
+    return { status, delivered, failures };
   } catch (notifyErr) {
     logger.error('[dsh-cron] notification error:', notifyErr.message);
+    return { status: 'failed', delivered: [], failures: [{ channel: 'all', error: notifyErr.message }] };
   }
 }
 
@@ -522,13 +536,41 @@ export function finishRun(scheduler, taskSnapshot, taskId, status, queuedCount,
 /**
  * Handle complete run lifecycle: metrics, self-healing, diagnosis, silent rule, storage, delivery, chaining.
  */
+function computeStoppedReason(status, valRes, error) {
+  if (status === 'validation_failed') return `Validation failed: ${valRes?.error || 'Check failed'}`;
+  if (status === 'validator_error') return `Validator configuration error: ${valRes?.error || 'Check failed'}`;
+  if (status === 'timeout') return 'Execution timed out';
+  if (status === 'error') return error ? `Execution error: ${error}` : 'Execution error';
+  if (status === 'success') return 'Completed successfully';
+  if (status === 'skipped') return error || 'Run skipped';
+  return null;
+}
+
 export async function handleCompleteRun(scheduler, task, taskId, currentRun, outcome, start, options = {}) {
+  // Post-execution declarative validation (#316)
+  let valRes = { ok: true, skipped: true };
+  let valDurationMs = 0;
+  if (outcome.status === 'success' && Array.isArray(task.validators) && task.validators.length > 0) {
+    const vStart = Date.now();
+    valRes = validateRunResult(task, outcome, { cwd: task.cwd });
+    valDurationMs = Date.now() - vStart;
+    if (!valRes.ok) {
+      outcome.status = valRes.status === 'error' ? 'validator_error' : 'validation_failed';
+      outcome.error = valRes.error || 'Validation failed';
+    }
+  }
+
   const isSuccess = outcome.status === 'success';
-  const isFailure = outcome.status === 'error' || outcome.status === 'timeout';
+  const isFailure = outcome.status === 'error' || outcome.status === 'timeout' || outcome.status === 'validation_failed' || outcome.status === 'validator_error';
+  const executionMs = Date.now() - start;
+  const queueWaitMs = (currentRun && currentRun.startedAt && currentRun.queuedAt) ? (currentRun.startedAt - currentRun.queuedAt) : 0;
+  const preflightMs = options.preflightDurationMs || 0;
+
   const runInfo = {
+    runId: currentRun?.id || ('run_' + Math.random().toString(36).slice(2, 9) + '_' + Date.now()),
     at: start,
     status: outcome.status,
-    durationMs: Date.now() - start,
+    durationMs: executionMs,
     output: outcome.output,
     error: outcome.error,
     usage: outcome.usage,
@@ -536,6 +578,7 @@ export async function handleCompleteRun(scheduler, task, taskId, currentRun, out
     sessionId: outcome.sessionId,
     model: outcome.model || task.model || '',
     fallback: Boolean(outcome.fallback),
+    validation: valRes.skipped ? null : valRes,
   };
 
   if (isFailure && task.selfHealingCommand) {
@@ -573,6 +616,58 @@ export async function handleCompleteRun(scheduler, task, taskId, currentRun, out
 
   const silent = await scheduler.applyModelAssists(task, runInfo);
 
+  let deliveryResult = { status: 'skipped', delivered: [], failures: [] };
+  let delivStart = Date.now();
+  if (!silent.skipped) {
+    deliveryResult = (await scheduler.deliverNotifications(task, runInfo)) || deliveryResult;
+  }
+  const delivDurationMs = Date.now() - delivStart;
+
+  const stages = [
+    {
+      name: 'queue',
+      status: 'success',
+      durationMs: queueWaitMs,
+    },
+    {
+      name: 'preflight',
+      status: 'success',
+      durationMs: preflightMs,
+      error: null,
+    },
+    {
+      name: 'execution',
+      status: (outcome.status === 'error' || outcome.status === 'timeout') ? 'failed' : 'success',
+      durationMs: executionMs,
+      error: (outcome.status === 'error' || outcome.status === 'timeout') ? (outcome.error || null) : null,
+    },
+    {
+      name: 'validation',
+      status: valRes.skipped ? 'skipped' : (valRes.ok ? 'success' : 'failed'),
+      durationMs: valDurationMs,
+      error: valRes.ok ? null : (valRes.error || null),
+    },
+    {
+      name: 'delivery',
+      status: deliveryResult?.status || 'skipped',
+      durationMs: delivDurationMs,
+      error: (deliveryResult?.failures && deliveryResult.failures.length > 0)
+        ? deliveryResult.failures.map(f => `${f.channel}: ${f.error}`).join('; ')
+        : null,
+      delivered: deliveryResult?.delivered || [],
+      failures: deliveryResult?.failures || [],
+    },
+  ];
+
+  runInfo.stages = stages;
+  runInfo.delivery = deliveryResult;
+  runInfo.cost = {
+    amount: Number(outcome.costUsd) || 0,
+    currency: 'USD',
+    kind: (Number(outcome.costUsd) > 0) ? 'exact' : ((task.type === 'llm' || task.type === 'skill' || task.type === 'workflow') ? 'unknown' : 'exact'),
+  };
+  runInfo.stoppedReason = computeStoppedReason(outcome.status, valRes, outcome.error);
+
   try {
     scheduler.store.recordRun(taskId, runInfo);
   } catch (recordErr) {
@@ -585,7 +680,6 @@ export async function handleCompleteRun(scheduler, task, taskId, currentRun, out
   const queuedRuns = isCurrentRun ? (finishedRun?.queuedRuns || []) : [];
   const queuedCount = isCurrentRun ? (finishedRun?.queueCount || 0) : 0;
 
-  if (!silent.skipped) await scheduler.deliverNotifications(task, runInfo);
   scheduler.finishRun(task, taskId, outcome.status, queuedCount, {
     isCurrentRun,
     runId: currentRun?.id,

package/lib/scheduler.js

@@ -548,7 +548,9 @@ export class TaskScheduler {
 
   recordSkipped(taskId, reason) {
     this.countRun('skipped');
+    const runId = 'run_' + Math.random().toString(36).slice(2, 9) + '_' + Date.now();
     this.store.recordRun(taskId, {
+      runId,
       at: Date.now(),
       status: 'skipped',
       durationMs: 0,
@@ -556,6 +558,16 @@ export class TaskScheduler {
       error: null,
       usage: { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0 },
       costUsd: 0,
+      stoppedReason: reason,
+      stages: [
+        { name: 'queue', status: 'skipped', durationMs: 0 },
+        { name: 'preflight', status: 'skipped', durationMs: 0, error: reason },
+        { name: 'execution', status: 'skipped', durationMs: 0 },
+        { name: 'validation', status: 'skipped', durationMs: 0 },
+        { name: 'delivery', status: 'skipped', durationMs: 0 },
+      ],
+      cost: { amount: 0, currency: 'USD', kind: 'exact' },
+      delivery: { status: 'skipped', delivered: [], failures: [] },
     });
   }
 

package/lib/settings.js

@@ -40,7 +40,7 @@ export const Config = z.object({
   barkKey: z.string().default('').description('Bark device key').volatile(),
   pushplusTokenRef: z.string().default('').description('Credential name for the PushPlus token').volatile(),
   pushplusUrl: z.string().default('https://www.pushplus.plus/send').description('PushPlus send endpoint (override for a self-hosted proxy)').volatile(),
-  ttsBaseUrl: z.string().default('http://127.0.0.1:3080').description('Base URL of the harness used to reach the dsh-tts speak route').volatile(),
+  ttsBaseUrl: z.string().default('').description('Base URL of the harness used to reach the dsh-tts speak route (empty = auto-resolved from webServer port or http://127.0.0.1:3080)').volatile(),
   giteaBaseUrl: z.string().default('').description('Gitea base URL for alert issues').volatile(),
   giteaRepo: z.string().default('').description('Gitea repository (owner/name) for alert issues').volatile(),
   giteaTokenRef: z.string().default('').description('Credential name for the Gitea API token').volatile(),

package/lib/store.js

@@ -689,7 +689,7 @@ export class TaskStore {
     const prevRuns = this.history.get(id) || [];
     const runs = [
       {
-        id: 'run_' + Math.random().toString(36).slice(2, 9),
+        id: runInfo.runId || runInfo.id || ('run_' + Math.random().toString(36).slice(2, 9)),
         at: task.lastRunAt,
         status: task.lastStatus,
         durationMs: task.lastDurationMs,
@@ -697,6 +697,15 @@ export class TaskStore {
         error: runInfo.error ? String(runInfo.error).slice(0, 1000) : null,
         usage,
         costUsd,
+        stages: Array.isArray(runInfo.stages) ? runInfo.stages : null,
+        stoppedReason: runInfo.stoppedReason || null,
+        cost: runInfo.cost || {
+          amount: costUsd,
+          currency: 'USD',
+          kind: costUsd > 0 ? 'exact' : ((task.type === 'llm' || task.type === 'skill' || task.type === 'workflow') ? 'unknown' : 'exact')
+        },
+        delivery: runInfo.delivery || null,
+        validation: runInfo.validation || null,
         sessionId: runInfo.sessionId || null,
         // #45: which model produced the run, and whether it only finished thanks
         // to the configured fallback.

package/lib/task-create.js

@@ -1,3 +1,4 @@
+import { sanitizeValidators } from './validators.js';
 import { normalizeTaskType, EXTERNAL_RUNTIMES } from './runtimes.js';
 import { validateTaskType } from './task-transfer.js';
 import { parseScheduleExpression } from './scheduler.js';
@@ -72,6 +73,7 @@ export function executeCreateTask(store, scheduler, args) {
     costLimitUsd: Number(args.costLimitUsd) > 0 ? Number(args.costLimitUsd) : undefined,
     dailyCostLimitUsd: Number(args.dailyCostLimitUsd) > 0 ? Number(args.dailyCostLimitUsd) : undefined,
     tokenLimit: Number(args.tokenLimit) > 0 ? Number(args.tokenLimit) : undefined,
+    validators: Array.isArray(args.validators) ? sanitizeValidators(args.validators) : undefined,
   };
   // Issue #310 / GH #5: strip any undefined properties before store.set()
   for (const k of Object.keys(taskData)) {

package/lib/task-patch.js

@@ -1,3 +1,4 @@
+import { sanitizeValidators } from './validators.js';
 /**
  * Partial task updates, shared by the HTTP PATCH route and the cron tool (action: 'update')
  * tool (#49).
@@ -86,6 +87,9 @@ export function buildTaskPatch(current, body) {
       return { ok: false, error: err.message };
     }
   }
+  if (patch.validators !== undefined) {
+    patch.validators = Array.isArray(patch.validators) ? sanitizeValidators(patch.validators) : [];
+  }
   if (patch.costLimitUsd !== undefined) {
     patch.costLimitUsd = patch.costLimitUsd === null ? null : (Number(patch.costLimitUsd) > 0 ? Number(patch.costLimitUsd) : null);
   }

package/lib/task-transfer.js

@@ -74,6 +74,7 @@ export const PATCHABLE_TASK_FIELDS = [
   'dailyCostLimitUsd',
   'tokenLimit',
   'pausedReason',
+  'validators',
 ];
 
 /** Fields a duplicate inherits; anything else is runtime state, not config. */

package/lib/telegram.js

@@ -210,7 +210,7 @@ export function shouldNotifyTask(task, runInfo, globalSettings = {}) {
   const isEnabled = task.notifyTelegram ?? globalSettings.notifyTelegram ?? false;
   if (!isEnabled) return false;
 
-  const failed = runInfo.status === 'error' || runInfo.status === 'timeout' || runInfo.status === 'missed';
+  const failed = runInfo.status === 'error' || runInfo.status === 'timeout' || runInfo.status === 'missed' || runInfo.status === 'validation_failed' || runInfo.status === 'validator_error';
   const onlyOnFail = task.onlyOnFailure ?? globalSettings.onlyOnFailure ?? false;
   if (onlyOnFail && !failed) {
     return false;

package/lib/validators.js

@@ -0,0 +1,192 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+export const VALIDATOR_TYPES = ['json', 'regex', 'text', 'exitCode', 'file'];
+
+/**
+ * Validates run output/result against declarative task validators.
+ * Pure and deterministic: never uses eval or dynamic code execution (#316).
+ *
+ * @param {object} task Task record (may have task.validators)
+ * @param {object} runInfo Run result ({ output, stdout, stderr, exitCode, error, status })
+ * @param {object} [options] Context options ({ cwd, workspaceDir })
+ * @returns {{ ok: boolean, status: 'passed' | 'failed' | 'error' | 'skipped', error?: string, details: Array<{ type: string, passed: boolean, message: string }> }}
+ */
+export function validateRunResult(task, runInfo, options = {}) {
+  const validators = Array.isArray(task?.validators) ? task.validators : [];
+  if (validators.length === 0) {
+    return { ok: true, status: 'skipped', details: [] };
+  }
+
+  const details = [];
+  const baseDir = options.workspaceDir || options.cwd || task?.cwd || process.cwd();
+
+  for (let i = 0; i < validators.length; i++) {
+    const v = validators[i];
+    if (!v || typeof v !== 'object') continue;
+    const type = String(v.type || '').trim().toLowerCase();
+
+    try {
+      if (type === 'exitCode') {
+        const expected = Number(v.expected !== undefined ? v.expected : 0);
+        const actual = Number(runInfo.exitCode !== undefined ? runInfo.exitCode : 0);
+        const passed = actual === expected;
+        const message = passed
+          ? `Exit code matches expected (${expected})`
+          : `Expected exit code ${expected}, got ${actual}`;
+        details.push({ type: 'exitCode', passed, message });
+        if (!passed) {
+          return { ok: false, status: 'failed', error: message, details };
+        }
+      } else if (type === 'json') {
+        const text = String(runInfo.output || runInfo.stdout || '').trim();
+        let parsed = null;
+        try {
+          parsed = JSON.parse(text);
+        } catch (jsonErr) {
+          const message = `Output is not valid JSON: ${jsonErr.message}`;
+          details.push({ type: 'json', passed: false, message });
+          return { ok: false, status: 'failed', error: message, details };
+        }
+
+        if (v.statusKey) {
+          const val = parsed[v.statusKey];
+          const expected = v.expected;
+          const passed = expected !== undefined ? String(val) === String(expected) : Boolean(val);
+          const message = passed
+            ? `JSON field "${v.statusKey}" matches expected (${String(expected)})`
+            : `JSON field "${v.statusKey}" value (${JSON.stringify(val)}) does not match expected (${JSON.stringify(expected)})`;
+          details.push({ type: 'json', passed, message });
+          if (!passed) {
+            return { ok: false, status: 'failed', error: message, details };
+          }
+        }
+
+        if (v.path) {
+          const parts = String(v.path).split('.');
+          let cur = parsed;
+          let found = true;
+          for (const p of parts) {
+            if (cur && typeof cur === 'object' && p in cur) {
+              cur = cur[p];
+            } else {
+              found = false;
+              break;
+            }
+          }
+          if (v.mustExist && !found) {
+            const message = `JSON path "${v.path}" not found in output`;
+            details.push({ type: 'json', passed: false, message });
+            return { ok: false, status: 'failed', error: message, details };
+          }
+          if (v.minCount !== undefined && Array.isArray(cur) && cur.length < Number(v.minCount)) {
+            const message = `JSON path "${v.path}" array length (${cur.length}) is less than minCount (${v.minCount})`;
+            details.push({ type: 'json', passed: false, message });
+            return { ok: false, status: 'failed', error: message, details };
+          }
+        }
+
+        details.push({ type: 'json', passed: true, message: 'Valid JSON output' });
+      } else if (type === 'text') {
+        const targetStr = getTargetText(runInfo, v.target);
+        const sub = String(v.text || '');
+        const contains = targetStr.includes(sub);
+        const passed = v.negate ? !contains : contains;
+        const message = passed
+          ? `Text check passed for "${sub}"`
+          : (v.negate ? `Output unexpectedly contains forbidden text "${sub}"` : `Output does not contain required text "${sub}"`);
+        details.push({ type: 'text', passed, message });
+        if (!passed) {
+          return { ok: false, status: 'failed', error: message, details };
+        }
+      } else if (type === 'regex') {
+        const targetStr = getTargetText(runInfo, v.target);
+        const pattern = String(v.pattern || '');
+        let reg;
+        try {
+          reg = new RegExp(pattern, v.flags || 'i');
+        } catch (regErr) {
+          const message = `Invalid regex pattern "${pattern}": ${regErr.message}`;
+          details.push({ type: 'regex', passed: false, message });
+          return { ok: false, status: 'error', error: message, details };
+        }
+        const matches = reg.test(targetStr);
+        const passed = v.negate ? !matches : matches;
+        const message = passed
+          ? `Regex match passed for /${pattern}/`
+          : (v.negate ? `Output matches forbidden pattern /${pattern}/` : `Output does not match required pattern /${pattern}/`);
+        details.push({ type: 'regex', passed, message });
+        if (!passed) {
+          return { ok: false, status: 'failed', error: message, details };
+        }
+      } else if (type === 'file') {
+        const relPath = String(v.path || '').trim();
+        if (!relPath) {
+          details.push({ type: 'file', passed: false, message: 'File path cannot be empty' });
+          return { ok: false, status: 'failed', error: 'File path cannot be empty', details };
+        }
+        // Guard against directory traversal escaping baseDir
+        const resolvedPath = path.resolve(baseDir, relPath);
+        const resolvedBase = path.resolve(baseDir);
+        if (!resolvedPath.startsWith(resolvedBase)) {
+          const message = `File path "${relPath}" escapes allowed directory boundary`;
+          details.push({ type: 'file', passed: false, message });
+          return { ok: false, status: 'failed', error: message, details };
+        }
+
+        const exists = fs.existsSync(resolvedPath);
+        if (v.mustExist !== false && !exists) {
+          const message = `Required file not found: "${relPath}"`;
+          details.push({ type: 'file', passed: false, message });
+          return { ok: false, status: 'failed', error: message, details };
+        }
+
+        if (exists && v.minBytes !== undefined) {
+          const stats = fs.statSync(resolvedPath);
+          if (stats.size < Number(v.minBytes)) {
+            const message = `File "${relPath}" size (${stats.size} bytes) is below minimum (${v.minBytes} bytes)`;
+            details.push({ type: 'file', passed: false, message });
+            return { ok: false, status: 'failed', error: message, details };
+          }
+        }
+        details.push({ type: 'file', passed: true, message: `File check passed for "${relPath}"` });
+      } else {
+        const message = `Unknown validator type "${type}"`;
+        details.push({ type: 'unknown', passed: false, message });
+        return { ok: false, status: 'failed', error: message, details };
+      }
+    } catch (valErr) {
+      const message = `Validator error in ${type}: ${valErr.message}`;
+      details.push({ type, passed: false, message });
+      return { ok: false, status: 'error', error: message, details };
+    }
+  }
+
+  return { ok: true, status: 'passed', details };
+}
+
+function getTargetText(runInfo, target) {
+  if (target === 'stdout') return String(runInfo.stdout ?? runInfo.output ?? '');
+  if (target === 'stderr') return String(runInfo.stderr ?? '');
+  return String(runInfo.output ?? '');
+}
+
+/**
+ * Sanitize and validate validator list for persistence.
+ */
+export function sanitizeValidators(validators) {
+  if (!Array.isArray(validators)) return [];
+  return validators.filter((v) => v && typeof v === 'object' && VALIDATOR_TYPES.includes(String(v.type).toLowerCase())).map((v) => ({
+    type: String(v.type).toLowerCase(),
+    ...(v.pattern !== undefined ? { pattern: String(v.pattern) } : {}),
+    ...(v.text !== undefined ? { text: String(v.text) } : {}),
+    ...(v.flags !== undefined ? { flags: String(v.flags) } : {}),
+    ...(v.negate !== undefined ? { negate: Boolean(v.negate) } : {}),
+    ...(v.statusKey !== undefined ? { statusKey: String(v.statusKey) } : {}),
+    ...(v.expected !== undefined ? { expected: v.expected } : {}),
+    ...(v.path !== undefined ? { path: String(v.path) } : {}),
+    ...(v.mustExist !== undefined ? { mustExist: Boolean(v.mustExist) } : {}),
+    ...(v.minBytes !== undefined ? { minBytes: Number(v.minBytes) } : {}),
+    ...(v.target !== undefined ? { target: String(v.target) } : {}),
+  }));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-cron",
-  "version": "0.2.50",
+  "version": "0.2.51",
   "description": "Background automation runner for DSH: isolated agent runs, script/HTTP/SSH/Docker runtimes, cost guard, notifications, heartbeats.",
   "type": "module",
   "main": "lib/index.js",