@goodandready/dsh-cron 0.2.50 → 0.2.52

package/lib/client.js

@@ -6,20 +6,14 @@ window.__ModuleLoader__.load({
     const React = window.React || require('react');
     const ReactDOM = window.ReactDOM || require('react-dom/client');
 
-    // Settings namespace, locale namespace and plugin marker share the same
-    // canonical identifier — the settings.plugin.item slot key MUST match the
-    // namespace registered on the server ('dsh-cron', Issue #85).
     const PLUGIN_ID = '@goodandready/dsh-cron';
     const NS = 'dsh-cron';
-    // Plugins page row seat (DSH 0.1.6-alpha.2): key = '<package name>#<row id>'.
     const ROW_ID = 'dsh-cron';
     const ROW_CONFIG_KEY = PLUGIN_ID + '#' + ROW_ID;
     const PANEL = 'cron';
     const ACTIVATE_EVENT = 'dsh-panel-activate';
     const ACTIVE_ATTR = 'data-dsh-cron-active';
     const ENTRY_ATTR = 'data-dsh-cron-entry';
-    // Set by the sidebar job list (#34) so the panel can highlight the task the
-    // user clicked; cleared once the panel has scrolled to it.
     let pendingTaskHighlight = null;
     const VIEW_ATTR = 'data-dsh-cron-view';
     const COLUMN_SELECTOR = '[data-pane=conversation], [class*=centerCol]';
@@ -44,10 +38,6 @@ window.__ModuleLoader__.load({
     const ICON_UPLOAD = '<svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"></path><polyline points="17 8 12 3 7 8"></polyline><line x1="12" y1="3" x2="12" y2="15"></line></svg>';
     const ICON_TELEGRAM = '<svg viewBox="0 0 24 24" width="16" height="16" fill="currentColor" aria-hidden="true"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm4.64 6.8-1.7 8.01c-.13.58-.47.72-.95.45l-2.6-1.92-1.25 1.21c-.14.14-.26.26-.53.26l.19-2.64 4.81-4.35c.21-.19-.05-.29-.32-.11L8.34 13.5 5.78 12.7c-.56-.17-.57-.56.12-.83l10-3.86c.46-.17.87.11.74.79z"/></svg>';
 
-    // Locale dictionary: English is the canonical source language (Issue #87).
-    // Russian and other languages are provided at runtime by the translation
-    // plugin; no per-language duplicates are stored here.
-    // Core chevron primitive when the build ships it; own SVG fallback otherwise.
     let CoreChevron = null;
     try {
       const primitives = require('@deepseek-ai/dsh-client-ui-primitives');
@@ -57,9 +47,6 @@ window.__ModuleLoader__.load({
     }
     const chevronNode = () => (CoreChevron ? React.createElement(CoreChevron) : React.createElement('span', { style: { display: 'flex', alignItems: 'center' }, dangerouslySetInnerHTML: { __html: ICON_CHEVRON_DOWN } }));
 
-    // Own React error boundary (#106): the core's SlotErrorBoundary renders an
-    // empty div on crash, so a slot failure would silently vanish. Ours keeps
-    // the failure visible with a retry.
     const STRINGS = {
       en: {
         'sidebar.label': 'Scheduled tasks',
@@ -143,7 +130,17 @@ window.__ModuleLoader__.load({
         'modal.close': 'Close',
         'history.loading': 'Loading history...',
         'history.empty': 'No runs recorded yet',
+        'history.stoppedReasonTitle': 'Stopped reason:',
+        'history.retryDelivery': 'Retry delivery',
+        'history.retryingDelivery': 'Retrying...',
+        'history.statusValidationFailed': 'validation failed',
+        'history.stage_queue': 'Queue',
+        'history.stage_preflight': 'Preflight',
+        'history.stage_execution': 'Execution',
+        'history.stage_validation': 'Validation',
+        'history.stage_delivery': 'Delivery',
         'history.refresh': 'Refresh history',
+        'history.stage_delivery': '推送',
         'history.statusSuccess': 'Success',
         'history.statusSkipped': 'Skipped',
         'history.statusMissed': 'Missed',
@@ -362,6 +359,14 @@ window.__ModuleLoader__.load({
         'form.targetSessionResetDaily': 'Daily rotation (new session each day)',
         'form.targetSessionResetWeekly': 'Weekly rotation (new session each week)',
         'form.targetSessionResetHint': 'Automatically rotates the session identifier to prevent context window explosion over long periods.',
+                'form.requireApprovalLabel': 'Require human approval before execution',
+        'form.requireApprovalHint': 'When enabled, the task will not execute until an authorized user approves the run proposal (#318).',
+        'actions.approve': 'Approve',
+        'actions.reject': 'Reject',
+        'approval.waiting': 'Awaiting human approval',
+        'approval.approved': 'Approved',
+        'approval.rejected': 'Rejected',
+        'recipe.dependenciesMissing': 'Missing required integrations or credentials',
         'form.previewSchedule': 'Preview next runs',
         'form.previewScheduleTitle': 'Next 5 scheduled runs:',
       },
@@ -611,12 +616,18 @@ window.__ModuleLoader__.load({
         'dsh.startFailed': '启动智能体对话失败: {error}',
         'dsh.launchError': '执行错误: {error}',
         'confirm.delete': '确定删除该任务吗？',
+                'form.requireApprovalLabel': '执行前需人工确认审批',
+        'form.requireApprovalHint': '开启后，任务执行前将挂起并等待授权用户批准提议 (#318)。',
+        'actions.approve': '批准',
+        'actions.reject': '拒绝',
+        'approval.waiting': '等待人工审批',
+        'approval.approved': '已批准',
+        'approval.rejected': '已拒绝',
+        'recipe.dependenciesMissing': '缺少必要集成服务或凭据',
         'list.loadErrorPrefix': '加载任务列表失败'
       }
     };
 
-    // Module-level translator. apply() rebinds it to the DSH locale service so
-    // the active language and live language switches are honored.
     let translate = (key, vars) => {
       let s = (STRINGS.en && STRINGS.en[key]) || key;
       if (vars) {
@@ -774,6 +785,12 @@ window.__ModuleLoader__.load({
       .dsh-cron-history-head { display: flex; justify-content: space-between; align-items: center; margin-bottom: 6px; }
       .dsh-cron-history-status { font-weight: 500; font-size: 11px; text-transform: uppercase; padding: 2px 8px; border-radius: 999px; border: 1px solid var(--dsw-alias-border-l2); }
       .dsh-cron-history-status[data-status="success"] { background: var(--dsh-cron-success-bg); color: var(--dsh-cron-success); border-color: var(--dsh-cron-success); }
+      .dsh-cron-history-status[data-status="validation_failed"] { background: var(--dsh-cron-danger-bg); color: var(--dsh-cron-danger); border-color: var(--dsh-cron-danger); }
+      .dsh-cron-stage-pill { font-size: 10.5px; padding: 1px 7px; border-radius: 4px; border: 1px solid var(--dsw-alias-border-l2); color: var(--dsw-alias-label-secondary); }
+      .dsh-cron-stage-pill[data-status="success"], .dsh-cron-stage-pill[data-status="delivered"] { background: var(--dsh-cron-success-bg); color: var(--dsh-cron-success); border-color: var(--dsh-cron-success); }
+      .dsh-cron-stage-pill[data-status="failed"], .dsh-cron-stage-pill[data-status="error"] { background: var(--dsh-cron-danger-bg); color: var(--dsh-cron-danger); border-color: var(--dsh-cron-danger); }
+      .dsh-cron-stage-pill[data-status="partial"] { background: var(--dsh-cron-warning-bg); color: var(--dsh-cron-warning); border-color: var(--dsh-cron-warning); }
+      .dsh-cron-stage-pill[data-status="skipped"] { opacity: 0.6; }
       .dsh-cron-history-status[data-status="error"], .dsh-cron-history-status[data-status="timeout"] { background: var(--dsh-cron-danger-bg); color: var(--dsh-cron-danger); border-color: var(--dsh-cron-danger); }
       .dsh-cron-history-status[data-status="skipped"], .dsh-cron-history-status[data-status="missed"] { background: var(--dsh-cron-warning-bg); color: var(--dsh-cron-warning); border-color: var(--dsh-cron-warning); }
       .dsh-cron-history-time { color: var(--dsw-alias-label-tertiary); font-size: 12px; }
@@ -861,7 +878,6 @@ window.__ModuleLoader__.load({
         if (!head) return null;
         el = document.createElement('style');
         el.id = STYLE_ID;
-        // Mark ownership before insertion so neighbor cleanups leave it alone (#91)
         el.dataset.dshPlugin = 'dsh-cron';
         el.textContent = STYLES;
         head.appendChild(el);
@@ -871,8 +887,6 @@ window.__ModuleLoader__.load({
       return el;
     }
 
-    // Registry is shared across hot reloads so the newest instance owns exactly
-    // one watcher instead of stacking one per module evaluation.
     const STYLE_HEAL_KEY = '__dshCronStyleHeal';
     const STYLE_HEAL_INTERVAL_MS = 2000;
 
@@ -947,7 +961,6 @@ window.__ModuleLoader__.load({
     const AGENT_FORM_TYPES = ['llm', 'skill', 'workflow'];
     const CODE_FORM_TYPES = ['script', 'node', 'python', 'ssh', 'docker'];
 
-    // Delivery channels (#26) — must stay in sync with lib/channels.js.
     const DELIVERY_CHANNELS = ['telegram', 'kanban', 'discord', 'slack', 'ntfy', 'bark', 'pushplus', 'tts', 'gitea'];
     const CHANNEL_LABEL_KEYS = {
       telegram: 'form.channelTelegram',
@@ -961,15 +974,11 @@ window.__ModuleLoader__.load({
       gitea: 'form.channelGitea',
     };
 
-    // Non-secret delivery settings shown in the settings panel. Secrets are
-    // referenced by credential name only (#51) — never typed as values.
     const DELIVERY_SETTING_FIELDS = [
       { key: 'botTokenRef', labelKey: 'settings.botTokenRefLabel', placeholderKey: 'settings.botTokenRefPlaceholder', group: 'secrets' },
       { key: 'ntfyTokenRef', labelKey: 'settings.ntfyTokenRefLabel', group: 'secrets' },
       { key: 'pushplusTokenRef', labelKey: 'settings.pushplusTokenRefLabel', group: 'secrets' },
       { key: 'giteaTokenRef', labelKey: 'settings.giteaTokenRefLabel', group: 'secrets' },
-      // The external API is the one surface where a typed secret is the point:
-      // a CI job cannot present a credential reference (#54).
       { key: 'apiToken', labelKey: 'settings.apiTokenLabel', placeholderKey: 'settings.apiTokenPlaceholder', group: 'secrets' },
       { key: 'discordWebhookUrl', labelKey: 'settings.discordLabel', group: 'channels' },
       { key: 'slackWebhookUrl', labelKey: 'settings.slackLabel', group: 'channels' },
@@ -986,7 +995,6 @@ window.__ModuleLoader__.load({
       { key: 'inspectorModel', labelKey: 'settings.inspectorModelLabel', group: 'automation' },
     ];
     const DELIVERY_SETTING_KEYS = DELIVERY_SETTING_FIELDS.map((f) => f.key);
-    // The global template plus the per-channel override map (server model).
     const TEMPLATE_SETTING_KEYS = ['template', 'channelTemplates'];
 
     /** Collect every delivery key the settings endpoints may return. */
@@ -1009,8 +1017,6 @@ window.__ModuleLoader__.load({
       return Object.entries(env).map(([k, v]) => `${k}=${v}`).join('\n');
     }
 
-    // Status colors: core semantic state tokens first (same set dsh-clinebot
-    // uses), plugin fallbacks as a single point of change (#105).
     function createToggle() {
       let open = false;
       const listeners = new Set();
@@ -1037,7 +1043,6 @@ window.__ModuleLoader__.load({
       const getSessions = () => (ctx && typeof ctx.get === 'function' ? ctx.get('sessions') : (ctx && ctx.sessions));
       let sessions = getSessions();
 
-      // 1. Try sessions.open(sessionId) immediately
       if (sessions && typeof sessions.open === 'function') {
         try {
           sessions.open(sessionId);
@@ -1047,7 +1052,6 @@ window.__ModuleLoader__.load({
         }
       }
 
-      // 2. If the session is not in manager.summaries yet, refresh from the backend
       if (sessions && typeof sessions.refresh === 'function') {
         try {
           await sessions.refresh();
@@ -1058,7 +1062,6 @@ window.__ModuleLoader__.load({
         }
       }
 
-      // 3. Async retries until the WebSocket/SSE event adds the session to the list
       for (let i = 0; i < 15; i++) {
         await new Promise(resolve => setTimeout(resolve, 120));
         sessions = getSessions();
@@ -1070,7 +1073,6 @@ window.__ModuleLoader__.load({
             /* retry polling sessions.open threw */
           }
         }
-        // DOM fallback: click the session in the sidebar if it has rendered
         if (typeof document !== 'undefined') {
           const domItem = document.querySelector('[data-session-id="' + sessionId + '"], [role="treeitem"][data-id="' + sessionId + '"], [data-id="' + sessionId + '"]');
           if (domItem) {
@@ -1085,6 +1087,7 @@ window.__ModuleLoader__.load({
 
     function statusLabel(t, status) {
       if (status === 'success') return T_KEY(t, 'history.statusSuccess');
+      if (status === 'validation_failed') return T_KEY(t, 'history.statusValidationFailed');
       if (status === 'skipped') return T_KEY(t, 'history.statusSkipped');
       if (status === 'missed') return T_KEY(t, 'history.statusMissed');
       if (status === 'timeout') return T_KEY(t, 'history.statusTimeout');
@@ -1178,9 +1181,6 @@ window.__ModuleLoader__.load({
           step: 1000,
           value: val(f.key),
           placeholder: String(f.defaultValue !== undefined ? f.defaultValue : 15000),
-          // #115: clearing the field must send the explicit default. Deleting the
-          // key would leave the previously stored value in place (the settings
-          // scope skips absent keys), so the field would silently keep 1 ms.
           onChange: (e) => onChange(f.key, e.target.value === ''
             ? (f.defaultValue !== undefined ? f.defaultValue : 15000)
             : Number(e.target.value)),
@@ -1253,8 +1253,6 @@ window.__ModuleLoader__.load({
       const t = props.t || translate;
       const [tab, setTab] = React.useState('all');
       const [query, setQuery] = React.useState('');
-      // Facet filters (#40): applied client-side over the already-loaded list so
-      // toggling them is instant and does not touch the polling request.
       const [filterType, setFilterType] = React.useState('');
       const [filterModel, setFilterModel] = React.useState('');
       const [filterChannel, setFilterChannel] = React.useState('');
@@ -1265,14 +1263,12 @@ window.__ModuleLoader__.load({
       const [fetchError, setFetchError] = React.useState(null);
       const [dropdownOpen, setDropdownOpen] = React.useState(false);
 
-      // Export/import state (#42)
       const [transferBusy, setTransferBusy] = React.useState(false);
       const [importDoc, setImportDoc] = React.useState(null);
       const [importSummary, setImportSummary] = React.useState(null);
       const [importStrategy, setImportStrategy] = React.useState('skip');
       const importFileRef = React.useRef(null);
 
-      // Manual / Edit modal state
       const [manualModalOpen, setManualModalOpen] = React.useState(false);
       const [formId, setFormId] = React.useState(null);
       const [formTitle, setFormTitle] = React.useState('');
@@ -1284,11 +1280,13 @@ window.__ModuleLoader__.load({
       const [formFallbackModel, setFormFallbackModel] = React.useState('');
       const [formSilentRule, setFormSilentRule] = React.useState('');
       const [formInspectOnFailure, setFormInspectOnFailure] = React.useState(false);
+      const [formRequireApproval, setFormRequireApproval] = React.useState(false);
       const [formDelivery, setFormDelivery] = React.useState('isolated');
       const [selectedTaskMeta, setSelectedTaskMeta] = React.useState(null);
       const [modalTab, setModalTab] = React.useState('params');
       const [taskHistory, setTaskHistory] = React.useState([]);
       const [historyLoading, setHistoryLoading] = React.useState(false);
+      const [retryingDeliveryId, setRetryingDeliveryId] = React.useState(null);
       const [formNotifyTelegram, setFormNotifyTelegram] = React.useState(false);
       const [formChannels, setFormChannels] = React.useState([]);
       const [formTemplate, setFormTemplate] = React.useState('');
@@ -1352,6 +1350,7 @@ window.__ModuleLoader__.load({
         fallbackModel: String(formFallbackModel || ''),
         silentRule: String(formSilentRule || ''),
         inspectOnFailure: Boolean(formInspectOnFailure),
+        requireApproval: Boolean(formRequireApproval),
         delivery: String(formDelivery || 'isolated'),
         notifyTelegram: Boolean(formNotifyTelegram),
         channels: Array.isArray(formChannels) ? [...formChannels].sort() : [],
@@ -1414,8 +1413,6 @@ window.__ModuleLoader__.load({
         setManualModalOpen(false);
       };
 
-      // Live execution indicator (#35): a light 1s tick only while some task
-      // is actually running.
       const tasksRef = React.useRef([]);
       const [nowTick, setNowTick] = React.useState(0);
       React.useEffect(() => {
@@ -1428,7 +1425,6 @@ window.__ModuleLoader__.load({
         return () => clearInterval(tick);
       }, []);
 
-      // Settings modal state
       const [settingsModalOpen, setSettingsModalOpen] = React.useState(false);
       const [settingsBotToken, setSettingsBotToken] = React.useState('');
       const [settingsChatId, setSettingsChatId] = React.useState('');
@@ -1441,12 +1437,10 @@ window.__ModuleLoader__.load({
       const [settingsHasCustomBotToken, setSettingsHasCustomBotToken] = React.useState(false);
       const [testStatus, setTestStatus] = React.useState(null);
 
-      // DSH dialog state
       const [dshModalOpen, setDshModalOpen] = React.useState(false);
       const [dshPrompt, setDshPrompt] = React.useState('');
       const [dshLoading, setDshLoading] = React.useState(false);
 
-      // Models list state
       const [providers, setProviders] = React.useState([]);
       const [models, setModels] = React.useState([]);
       const [defaultModelInfo, setDefaultModelInfo] = React.useState(null);
@@ -1593,7 +1587,6 @@ window.__ModuleLoader__.load({
             .then(res => {
               if (isDestroyed || pollGen !== fetchGenRef.current) return null;
               if (res.status === 304) {
-                // Not modified: skip parsing JSON
                 return null;
               }
               const etag = res.headers.get('ETag');
@@ -1614,13 +1607,11 @@ window.__ModuleLoader__.load({
             .finally(() => {
               if (pollTimer) clearTimeout(pollTimer);
               if (isDestroyed) return;
-              // Adaptive interval: 30s when tab is hidden, 8s when active (#134)
               const intervalMs = (typeof document !== 'undefined' && document.hidden) ? 30000 : 8000;
               timerId = setTimeout(doPoll, intervalMs);
             });
         };
 
-        // Trigger immediate fetch when visibility returns
         const onVisibilityChange = () => {
           if (typeof document !== 'undefined' && !document.hidden) {
             if (timerId) clearTimeout(timerId);
@@ -1666,7 +1657,6 @@ window.__ModuleLoader__.load({
           try {
             data = await res.json();
           } catch (jsonErr) {
-            // Re-throw if body reading aborted/timed out (#242)
             if (jsonErr && (jsonErr.name === 'AbortError' || controller?.signal.aborted)) {
               throw jsonErr;
             }
@@ -1781,8 +1771,6 @@ window.__ModuleLoader__.load({
             return;
           }
           await fetchTasks();
-          // A one-shot copy keeps its original schedule string, so warn instead
-          // of letting the user resume a task pointing at a past moment.
           alert(task.oneShot ? T_KEY(t, 'duplicate.oneShotHint') : T_KEY(t, 'duplicate.done'));
         } catch (err) {
           alert(T_KEY(t, 'duplicate.failed', { error: err.message }));
@@ -1929,6 +1917,42 @@ window.__ModuleLoader__.load({
         }
       };
 
+      const handleApproveProposal = async (taskId, proposalId) => {
+        try {
+          const { res, data } = await fetchJsonWithTimeout('/dsh-cron/tasks/' + encodeURIComponent(taskId) + '/approve', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ proposalId, decidedBy: 'web-user' })
+          });
+          if (data && data.ok) {
+            alert(T_KEY(t, 'approval.approved') || 'Approved');
+            setTimeout(() => fetchTasks(), 1000);
+          } else {
+            alert('Approval failed: ' + ((data && data.error) || ''));
+          }
+        } catch (err) {
+          alert('Approval request failed: ' + err.message);
+        }
+      };
+
+      const handleRejectProposal = async (taskId, proposalId) => {
+        try {
+          const { res, data } = await fetchJsonWithTimeout('/dsh-cron/tasks/' + encodeURIComponent(taskId) + '/reject', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ proposalId, decidedBy: 'web-user' })
+          });
+          if (data && data.ok) {
+            alert(T_KEY(t, 'approval.rejected') || 'Rejected');
+            setTimeout(() => fetchTasks(), 1000);
+          } else {
+            alert('Rejection failed: ' + ((data && data.error) || ''));
+          }
+        } catch (err) {
+          alert('Rejection request failed: ' + err.message);
+        }
+      };
+
       const handleDelete = async (id) => {
         if (!confirm(T_KEY(t, 'confirm.delete'))) return;
         try {
@@ -2068,20 +2092,20 @@ window.__ModuleLoader__.load({
         setFormPythonPath('');
         setFormSkillName('');
         setFormWorkflowName('');
-        // Reset before the preset branch, so a recipe keeps what it sets.
         setFormFallbackModel('');
         setFormSilentRule('');
         setFormInspectOnFailure(false);
+        setFormRequireApproval(false);
         if (preset) {
           setFormTitle(preset.title || '');
           setFormSchedule(preset.schedule || '');
           setFormPrompt(preset.prompt || '');
-          // #48: a recipe preset also carries its runtime and delivery shape.
           if (preset.type) setFormType(preset.type);
           if (Array.isArray(preset.channels) && preset.channels.length) setFormChannels(preset.channels.filter((c) => DELIVERY_CHANNELS.includes(c)));
           if (preset.silentRule !== undefined) setFormSilentRule(preset.silentRule || '');
           if (preset.fallbackModel !== undefined) setFormFallbackModel(preset.fallbackModel || '');
           if (preset.inspectOnFailure !== undefined) setFormInspectOnFailure(Boolean(preset.inspectOnFailure));
+          if (preset.requireApproval !== undefined) setFormRequireApproval(Boolean(preset.requireApproval));
           setFormOnlyOnFailure(Boolean(preset.onlyOnFailure));
           setFormProvider(defaultModelInfo?.provider || '');
           setFormModel(defaultModelInfo?.model || '');
@@ -2104,6 +2128,7 @@ window.__ModuleLoader__.load({
           fallbackModel: String((preset && preset.fallbackModel) || '').trim(),
           silentRule: String((preset && preset.silentRule) || '').trim(),
           inspectOnFailure: Boolean(preset && preset.inspectOnFailure),
+          requireApproval: Boolean(preset && preset.requireApproval),
           delivery: 'isolated',
           notifyTelegram: false,
           channels: Array.isArray(preset && preset.channels) ? [...preset.channels].filter((c) => DELIVERY_CHANNELS.includes(c)).sort() : [],
@@ -2150,6 +2175,26 @@ window.__ModuleLoader__.load({
         setManualModalOpen(true);
       };
 
+      const handleRetryDelivery = async (taskId, runId) => {
+        setRetryingDeliveryId(runId);
+        try {
+          const { res, data } = await fetchJsonWithTimeout('/dsh-cron/tasks/' + encodeURIComponent(taskId) + '/retry-delivery', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ runId }),
+          });
+          if (data && data.ok) {
+            await loadTaskHistory(taskId);
+          } else {
+            alert(data?.error || 'Failed to retry delivery');
+          }
+        } catch (e) {
+          alert(e.message || 'Error retrying delivery');
+        } finally {
+          setRetryingDeliveryId(null);
+        }
+      };
+
       const loadTaskHistory = async (taskId) => {
         setHistoryLoading(true);
         try {
@@ -2178,6 +2223,7 @@ window.__ModuleLoader__.load({
         setFormFallbackModel(task.fallbackModel || '');
         setFormSilentRule(task.silentRule || '');
         setFormInspectOnFailure(Boolean(task.inspectOnFailure));
+        setFormRequireApproval(Boolean(task.requireApproval));
         setFormDelivery(task.delivery || 'isolated');
         setFormNotifyTelegram(Boolean(task.notifyTelegram));
         setFormChannels(Array.isArray(task.channels) ? task.channels.filter((c) => DELIVERY_CHANNELS.includes(c)) : []);
@@ -2275,6 +2321,7 @@ window.__ModuleLoader__.load({
             concurrencyGroup: formConcurrencyGroup.trim() || 'default',
             selfHealingCommand: formSelfHealingCommand.trim() || undefined,
             autoDiagnose: Boolean(formAutoDiagnose),
+            requireApproval: Boolean(formRequireApproval),
             env: parseEnvText(formEnv),
             cwd: formCwd.trim(),
             workspaceId: formWorkspaceId.trim(),
@@ -2293,8 +2340,6 @@ window.__ModuleLoader__.load({
             skillName: formSkillName.trim(),
             workflowName: formWorkflowName.trim(),
           };
-          // Cross-origin hardening: every code-executing type needs the explicit
-          // confirm header, which forged cross-site posts cannot attach (#86)
           const headers = { 'Content-Type': 'application/json' };
           const hasCodeExec = CODE_FORM_TYPES.includes(formType) ||
             Boolean(payload.command && payload.command.trim()) ||
@@ -2391,7 +2436,6 @@ window.__ModuleLoader__.load({
                   React.createElement('button', { className: 'dsh-cron-dropdown-item', onClick: () => openManualModal(null) }, T_KEY(t, 'actions.setupManually'))
                 )
               ),
-              // #42: export/import as a small pair of icon buttons.
               React.createElement('button', {
                 type: 'button',
                 className: 'dsh-cron-icon-btn',
@@ -2460,7 +2504,6 @@ window.__ModuleLoader__.load({
                       : T_KEY(t, 'tabs.completed'))
             )
           ),
-          // #40: facet filters over the loaded list.
           React.createElement('div', { className: 'dsh-cron-filters' },
             React.createElement('button', {
               type: 'button',
@@ -2692,7 +2735,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-        // 1. Manual creation / Edit modal
         manualModalOpen && React.createElement('div', {
           className: 'dsh-cron-modal-overlay',
           onClick: (e) => {
@@ -2753,8 +2795,39 @@ window.__ModuleLoader__.load({
                           React.createElement('span', { style: { color: 'var(--dsw-alias-label-tertiary, #888)', fontSize: '11.5px' } }, (run.durationMs || 0) + ' ms')
                         )
                       ),
-                      // #43: a diagnosed failure shows what went wrong and
-                      // offers to prefill the prompt with the suggestion.
+                      run.stoppedReason && React.createElement('div', {
+                        className: 'dsh-cron-hint',
+                        style: { display: 'flex', gap: '6px', alignItems: 'center', marginTop: '6px' }
+                      },
+                        React.createElement('span', { className: 'dsh-cron-badge-ref' }, T_KEY(t, 'history.stoppedReasonTitle')),
+                        React.createElement('span', null, run.stoppedReason)
+                      ),
+                      Array.isArray(run.stages) && run.stages.length > 0 && React.createElement('div', {
+                        className: 'dsh-cron-stages-flow',
+                        style: { display: 'flex', gap: '6px', flexWrap: 'wrap', marginTop: '6px' }
+                      },
+                        run.stages.map((st) => React.createElement('span', {
+                          key: st.name,
+                          className: 'dsh-cron-stage-pill',
+                          'data-status': st.status || 'unknown',
+                          title: st.error ? (st.name + ': ' + st.error) : (st.name + (st.durationMs !== undefined ? ' (' + st.durationMs + 'ms)' : ''))
+                        }, (T_KEY(t, 'history.stage_' + st.name) || st.name) + (st.durationMs !== undefined ? ' ' + st.durationMs + 'ms' : '')))
+                      ),
+                      run.delivery && React.createElement('div', {
+                        style: { display: 'flex', alignItems: 'center', gap: '8px', marginTop: '6px' }
+                      },
+                        React.createElement('span', {
+                          className: 'dsh-cron-badge-ref',
+                          'data-status': run.delivery.status
+                        }, 'Delivery: ' + run.delivery.status),
+                        (run.delivery.status === 'failed' || run.delivery.status === 'partial') && React.createElement('button', {
+                          type: 'button',
+                          className: 'dsh-cron-btn-secondary',
+                          style: { padding: '2px 8px', fontSize: '11px' },
+                          disabled: retryingDeliveryId === run.id,
+                          onClick: () => handleRetryDelivery(formId, run.id)
+                        }, retryingDeliveryId === run.id ? T_KEY(t, 'history.retryingDelivery') : T_KEY(t, 'history.retryDelivery'))
+                      ),
                       run.diagnosis && React.createElement('div', {
                         className: 'dsh-cron-status-banner',
                         'data-type': 'info',
@@ -2774,7 +2847,6 @@ window.__ModuleLoader__.load({
                           }, T_KEY(t, 'history.applySuggestion'))
                         )
                       ),
-                      // #44: a run suppressed by its silent rule says why.
                       run.silentSkip && React.createElement('div', {
                         className: 'dsh-cron-hint',
                         style: { display: 'flex', gap: '6px', alignItems: 'center' }
@@ -3018,7 +3090,6 @@ window.__ModuleLoader__.load({
                       models.map((m) => React.createElement('option', { key: m.id, value: m.id }, m.name || m.id))
                     )
                   ),
-                  // #45: one retry on a stronger model when the cheap one fails.
                   React.createElement('div', { className: 'dsh-cron-form-group' },
                     React.createElement('label', null, T_KEY(t, 'form.fallbackModelLabel')),
                     React.createElement('input', {
@@ -3029,7 +3100,6 @@ window.__ModuleLoader__.load({
                     }),
                     React.createElement('div', { className: 'dsh-cron-hint' }, T_KEY(t, 'form.fallbackModelHint'))
                   ),
-                  // #43: diagnose failures with a model.
                   React.createElement('label', { className: 'dsh-cron-checkbox-row', style: { marginTop: '4px' } },
                     React.createElement('input', {
                       type: 'checkbox',
@@ -3038,7 +3108,16 @@ window.__ModuleLoader__.load({
                     }),
                     React.createElement('span', null, T_KEY(t, 'form.inspectOnFailureLabel'))
                   ),
-                  formInspectOnFailure && React.createElement('div', { className: 'dsh-cron-hint' }, T_KEY(t, 'form.inspectOnFailureHint'))
+                  formInspectOnFailure && React.createElement('div', { className: 'dsh-cron-hint' }, T_KEY(t, 'form.inspectOnFailureHint')),
+                  React.createElement('label', { className: 'dsh-cron-checkbox-row', style: { marginTop: '8px' } },
+                    React.createElement('input', {
+                      type: 'checkbox',
+                      checked: formRequireApproval,
+                      onChange: (e) => setFormRequireApproval(e.target.checked)
+                    }),
+                    React.createElement('span', null, T_KEY(t, 'form.requireApprovalLabel'))
+                  ),
+                  formRequireApproval && React.createElement('div', { className: 'dsh-cron-hint' }, T_KEY(t, 'form.requireApprovalHint'))
                 ),
                 formType === 'http' && React.createElement('div', { className: 'dsh-cron-form-row' },
                   React.createElement('div', { className: 'dsh-cron-form-group' },
@@ -3261,7 +3340,6 @@ window.__ModuleLoader__.load({
                     }),
                     React.createElement('div', { className: 'dsh-cron-hint' }, T_KEY(t, 'form.templateHint'))
                   ),
-                  // #44: output-producing runtimes may stay silent by rule.
                   !AGENT_FORM_TYPES.includes(formType) && React.createElement('div', { className: 'dsh-cron-form-group', style: { marginTop: '12px', marginBottom: 0 } },
                     React.createElement('label', null, T_KEY(t, 'form.silentRuleLabel')),
                     React.createElement('input', {
@@ -3274,7 +3352,6 @@ window.__ModuleLoader__.load({
                   )
                 ),
                 
-                  // Reliability, Heartbeat & Self-Healing section
                   React.createElement('div', {
                     style: {
                       marginTop: '16px',
@@ -3409,7 +3486,6 @@ window.__ModuleLoader__.load({
         ),
 
 
-        // Dry Run simulation modal
         dryRunResult && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => setDryRunResult(null) },
           React.createElement('div', {
             className: 'dsh-cron-modal',
@@ -3456,7 +3532,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-        // Archive runs modal
         archiveModalOpen && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => setArchiveModalOpen(false) },
           React.createElement('div', {
             className: 'dsh-cron-modal',
@@ -3524,7 +3599,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-                // 2. Settings modal
         settingsModalOpen && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => setSettingsModalOpen(false) },
           React.createElement('div', { className: 'dsh-cron-modal dsh-cron-modal-scroll', role: 'dialog', 'aria-modal': 'true', onClick: (e) => e.stopPropagation() },
             React.createElement('div', { className: 'dsh-cron-modal-head', style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: '18px' } },
@@ -3611,7 +3685,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-        // 3. Import modal (#42) — summary first, then an explicit strategy.
         importDoc && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => !transferBusy && setImportDoc(null) },
           React.createElement('div', { className: 'dsh-cron-modal', role: 'dialog', 'aria-modal': 'true', onClick: (e) => e.stopPropagation() },
             React.createElement('div', { className: 'dsh-cron-modal-title' }, T_KEY(t, 'transfer.importTitleModal')),
@@ -3654,7 +3727,6 @@ window.__ModuleLoader__.load({
           )
         ),
 
-        // 4. "Create with DSH" modal
         dshModalOpen && React.createElement('div', { className: 'dsh-cron-modal-overlay', onClick: () => !dshLoading && setDshModalOpen(false) },
           React.createElement('div', { className: 'dsh-cron-modal', role: 'dialog', 'aria-modal': 'true', onClick: (e) => e.stopPropagation() },
             React.createElement('div', { className: 'dsh-cron-modal-title' }, T_KEY(t, 'dsh.modalTitle')),
@@ -3717,7 +3789,6 @@ window.__ModuleLoader__.load({
       const [hasDefault, setHasDefault] = React.useState(false);
       const [saved, setSaved] = React.useState(false);
       const [testInfo, setTestInfo] = React.useState(null);
-      // Collapsed by default, head is the toggle (canonical card contract, #100)
       const [cardOpen, setCardOpen] = React.useState(false);
       const [updateState, setUpdateState] = React.useState({
         checking: false,
@@ -3777,8 +3848,6 @@ window.__ModuleLoader__.load({
         }
       };
 
-      // Settings snapshot status (#102): never render phantom inputs before
-      // the snapshot arrives; offer a retry when it is unavailable.
       const [loadState, setLoadState] = React.useState('loading');
       const [reloadTick, setReloadTick] = React.useState(0);
 
@@ -3887,8 +3956,6 @@ window.__ModuleLoader__.load({
         );
       }
 
-      // Row seat (plugins.row.config): the host page draws title/icon/crumb and the
-      // padding, so the summary is a one-liner and the page drops our card chrome.
       if (props && props.view === 'summary') {
         return React.createElement('span', { className: 'dsh-cron-card-desc' }, T_KEY(t, 'settings.cardDesc'));
       }
@@ -4116,8 +4183,6 @@ window.__ModuleLoader__.load({
       const row = document.createElement('button');
       row.type = 'button';
       row.className = 'dsh-cron-sidebar-job';
-      // A distinct attribute: the panel uses data-task-id, and the highlight
-      // lookup must never pick a sidebar row instead of a task card.
       row.setAttribute('data-sidebar-task-id', task.id);
       row.setAttribute('aria-label', task.title || task.id);
 
@@ -4218,7 +4283,6 @@ window.__ModuleLoader__.load({
         entry.insertAdjacentElement('afterend', buildSidebarJobsRoot(state, label));
       } else {
         entry.insertAdjacentElement('afterend', state.root);
-        // Re-query the refs: the previous nodes may belong to a detached tree.
         state.root = document.querySelector('[data-dsh-part="sidebar-jobs"]') || state.root;
         state.listEl = state.root.querySelector('.dsh-cron-sidebar-jobs-list');
         state.headEl = state.root.querySelector('.dsh-cron-sidebar-jobs-head');
@@ -4335,8 +4399,6 @@ window.__ModuleLoader__.load({
 
       const applyActive = () => {
         if (toggle.isOpen()) {
-          // Repair a dropped stylesheet before the panel paints, so opening the
-          // screen never shows an unstyled page (see startStyleSelfHeal).
           ensureStyles();
           document.documentElement.setAttribute(ACTIVE_ATTR, '');
           document.dispatchEvent(new CustomEvent(ACTIVATE_EVENT, { detail: PANEL }));
@@ -4396,14 +4458,12 @@ window.__ModuleLoader__.load({
     function apply(ctx) {
       const stopStyleSelfHeal = startStyleSelfHeal();
 
-      // Register the English canonical strings; rebinding the translator lets
-      // the translation plugin drive the active language at runtime (#87).
       try {
         if (ctx.locale && typeof ctx.locale.register === 'function') {
           ctx.locale.register(NS, STRINGS);
         }
       } catch (e) {
-        // Re-registration in the same session throws — the dictionary is live already.
+        void e;
       }
       try {
         if (ctx.locale && typeof ctx.locale.bind === 'function') {
@@ -4415,16 +4475,9 @@ window.__ModuleLoader__.load({
 
       const toggle = createToggle();
 
-      // The settings card lives ONLY in the plugins settings tab (#102): no
-      // top-level section fallback — the flat sidebar list is a shared core
-      // resource, and the card slot is proven on current builds (#85).
       function SettingsCardWithBoundary(props) {
         return React.createElement(ErrorBoundary, null, CronSettingsCard(props));
       }
-      // List seat (plugins.item): the seat the Plugins page renders as the plugin's own
-      // page with its configuration. The label is a static string on purpose — it is
-      // resolved while the page renders, and a locale lookup there would take the whole
-      // client batch down with it.
       const itemOk = registerIntoMount(ctx, 'plugins.item', {
         name: 'plugins.item',
         id: ROW_ID,
@@ -4436,8 +4489,6 @@ window.__ModuleLoader__.load({
       if (!itemOk) {
         console.warn('[dsh-cron] plugins.item slot unavailable — plugin page card not registered');
       }
-      // Row seat and the legacy settings.plugin.item seat stay as fallbacks
-      // (#102: still no top-level section fallback).
       const rowOk = registerIntoMount(ctx, 'plugins.row.config', {
         name: 'plugins.row.config',
         key: ROW_CONFIG_KEY,