@eigenpal/cli 0.10.19 → 0.10.21

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @eigenpal/cli
 
+## 0.10.20
+
+### Minor Changes
+
+- 28f2e84: The bundled workflow reference now documents durable retry policies, inheritance, supported step types, and retry safety limits.
+
 ## 0.10.19
 
 ### Minor Changes

package/dist/cli.js

@@ -17159,6 +17159,10 @@ var init_common = __esm(() => {
     AGENT_EMAIL_INVOCATION: "aei",
     AUTOMATION_TRIGGER: "atr",
     FILE_SOURCE_CONFIG: "fsc",
+    WEBHOOK_ENDPOINT: "whep",
+    WEBHOOK_EVENT: "whev",
+    WEBHOOK_DELIVERY: "whdl",
+    WEBHOOK_ATTEMPT: "what",
     SANDBOX_WS_TOKEN: "sws"
   };
   TimestampSchema = exports_external.union([exports_external.date(), exports_external.string().datetime()]).transform((val) => {
@@ -64455,6 +64459,123 @@ function script(${typedParams}): StepOutput {
 }
 var SCRIPT_FN_MAX_BYTES = 50000;
 
+// ../types/src/workflow/retry.ts
+function normalizePolicy(policy) {
+  if (policy === undefined || policy === "inherit")
+    return policy;
+  if (policy === "automatic")
+    return { mode: "automatic" };
+  if (policy === "never")
+    return { mode: "never" };
+  return policy;
+}
+function resolveRetryPolicy(args) {
+  const step = normalizePolicy(args.step);
+  const workflow = normalizePolicy(args.workflow);
+  let policy;
+  let source;
+  if (step && step !== "inherit") {
+    policy = policyForCapability(step, args.capability);
+    source = "step";
+  } else if (workflow && workflow !== "inherit") {
+    policy = policyForCapability(workflow, args.capability);
+    source = "workflow";
+  } else {
+    policy = { mode: "never" };
+    source = "step_type";
+  }
+  const ceilings = args.ceilings ?? { maxAttempts: 10, maxElapsedMs: 86400000 };
+  if (policy.mode === "never")
+    return { policy, source, capped: false };
+  const maxAttempts = Math.min(policy.maxAttempts ?? 3, ceilings.maxAttempts);
+  const capped = maxAttempts !== (policy.maxAttempts ?? 3);
+  return {
+    policy: { ...policy, maxAttempts },
+    source: capped ? "tenant_ceiling" : source,
+    capped
+  };
+}
+function policyForCapability(policy, capability) {
+  if (policy.mode === "never")
+    return policy;
+  if (capability.replaySafety === "never")
+    return { mode: "never" };
+  if (capability.hasProviderRequestRetries || capability.automaticCategories.length === 0 || capability.replaySafety === "requires-idempotency") {
+    return { mode: "automatic", maxAttempts: 1 };
+  }
+  return policy;
+}
+var RetryCategorySchema, AutomaticRetryPolicySchema, NeverRetryPolicySchema, ResolvedRetryPolicySchema, StepRetryPolicySchema, WorkflowRetryPolicySchema, RetryPolicySourceSchema, RetryTerminalReasonSchema, ExecutionFailureSchema, RetryDecisionSchema, StepRetryCapabilitySchema;
+var init_retry = __esm(() => {
+  init_zod();
+  RetryCategorySchema = exports_external.enum([
+    "timeout",
+    "rate_limited",
+    "temporarily_unavailable",
+    "invalid_provider_output",
+    "validation",
+    "authentication",
+    "authorization",
+    "not_found",
+    "business",
+    "cancelled",
+    "unknown"
+  ]);
+  AutomaticRetryPolicySchema = exports_external.object({
+    mode: exports_external.literal("automatic"),
+    maxAttempts: exports_external.number().int().min(1).max(10).optional()
+  });
+  NeverRetryPolicySchema = exports_external.object({
+    mode: exports_external.literal("never")
+  });
+  ResolvedRetryPolicySchema = exports_external.discriminatedUnion("mode", [
+    AutomaticRetryPolicySchema,
+    NeverRetryPolicySchema
+  ]);
+  StepRetryPolicySchema = exports_external.union([
+    exports_external.literal("inherit"),
+    exports_external.literal("automatic"),
+    exports_external.literal("never"),
+    ResolvedRetryPolicySchema
+  ]);
+  WorkflowRetryPolicySchema = exports_external.union([
+    exports_external.literal("automatic"),
+    exports_external.literal("never"),
+    ResolvedRetryPolicySchema
+  ]);
+  RetryPolicySourceSchema = exports_external.enum(["step", "workflow", "step_type", "tenant_ceiling"]);
+  RetryTerminalReasonSchema = exports_external.enum([
+    "non_retryable",
+    "unsafe_to_replay",
+    "cancelled",
+    "attempts_exhausted",
+    "elapsed_time_exhausted",
+    "retry_after_exceeds_budget",
+    "operator_ceiling"
+  ]);
+  ExecutionFailureSchema = exports_external.object({
+    code: exports_external.string().min(1),
+    category: RetryCategorySchema,
+    message: exports_external.string(),
+    transient: exports_external.boolean(),
+    retryAfterMs: exports_external.number().int().nonnegative().optional(),
+    httpStatus: exports_external.number().int().min(100).max(599).optional(),
+    provider: exports_external.string().optional()
+  });
+  RetryDecisionSchema = exports_external.object({
+    retry: exports_external.boolean(),
+    delayMs: exports_external.number().int().nonnegative().optional(),
+    nextAttemptAt: exports_external.coerce.date().optional(),
+    policySource: RetryPolicySourceSchema,
+    terminalReason: RetryTerminalReasonSchema.optional()
+  });
+  StepRetryCapabilitySchema = exports_external.object({
+    replaySafety: exports_external.enum(["safe", "requires-idempotency", "never"]),
+    automaticCategories: exports_external.array(RetryCategorySchema),
+    hasProviderRequestRetries: exports_external.boolean().optional()
+  });
+});
+
 // ../types/src/workflow/steps.ts
 function parseStepType(type) {
   const [category, operation] = type.split(".");
@@ -64463,9 +64584,10 @@ function parseStepType(type) {
 function isStepCategory(type, category) {
   return type.startsWith(`${category}.`);
 }
-var AI_STEP_TYPES, TRANSFORM_STEP_TYPES, ACTION_STEP_TYPES, CONTROL_STEP_TYPES, STEP_TYPES, StepTypeValue, StepTypeSchema, BaseStepSchema, AIStepSchema, TransformStepSchema, HttpMethodSchema, ActionStepSchema, WaitStepSchema, FailStepSchema, LegacyBlockStepSchemaInner, IfStepSchemaInner, SwitchCaseSchemaInner, SwitchStepSchemaInner, ParallelBranchSchemaInner, ParallelStepSchemaInner, ForeachStepSchemaInner, ParallelMapStepSchemaInner, StepSchema, LegacyBlockStepSchema, IfStepSchema, SwitchStepSchema, ParallelBranchSchema, ParallelStepSchema, ForeachStepSchema, ParallelMapStepSchema;
+var AI_STEP_TYPES, TRANSFORM_STEP_TYPES, ACTION_STEP_TYPES, CONTROL_STEP_TYPES, STEP_TYPES, StepTypeValue, StepTypeSchema, BaseStepSchema, ControlContainerBaseStepSchema, AIStepSchema, TransformStepSchema, HttpMethodSchema, ActionStepSchema, WaitStepSchema, FailStepSchema, LegacyBlockStepSchemaInner, IfStepSchemaInner, SwitchCaseSchemaInner, SwitchStepSchemaInner, ParallelBranchSchemaInner, ParallelStepSchemaInner, ForeachStepSchemaInner, ParallelMapStepSchemaInner, StepSchema, LegacyBlockStepSchema, IfStepSchema, SwitchStepSchema, ParallelBranchSchema, ParallelStepSchema, ForeachStepSchema, ParallelMapStepSchema;
 var init_steps = __esm(() => {
   init_zod();
+  init_retry();
   AI_STEP_TYPES = [
     "ai.parse",
     "ai.extract",
@@ -64541,17 +64663,19 @@ var init_steps = __esm(() => {
     description: exports_external.string().optional(),
     if: exports_external.string().optional(),
     timeout: exports_external.number().positive().optional(),
+    retry: StepRetryPolicySchema.optional(),
     retries: exports_external.number().int().min(0).optional(),
     retryDelay: exports_external.number().positive().optional(),
     with: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
-  });
+  }).strict();
+  ControlContainerBaseStepSchema = BaseStepSchema.omit({ retry: true });
   AIStepSchema = BaseStepSchema.extend({
     type: exports_external.enum(AI_STEP_TYPES)
   });
   TransformStepSchema = BaseStepSchema.extend({
     type: exports_external.enum(TRANSFORM_STEP_TYPES)
   });
-  HttpMethodSchema = exports_external.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]);
+  HttpMethodSchema = exports_external.enum(["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE"]);
   ActionStepSchema = BaseStepSchema.extend({
     type: exports_external.enum(ACTION_STEP_TYPES)
   });
@@ -64567,10 +64691,12 @@ var init_steps = __esm(() => {
   });
   LegacyBlockStepSchemaInner = BaseStepSchema.extend({
     type: exports_external.literal("control.block"),
+    retries: exports_external.number().int().min(0).optional(),
+    retryDelay: exports_external.number().positive().optional(),
     blockName: exports_external.string().min(1),
     inputs: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
   });
-  IfStepSchemaInner = BaseStepSchema.extend({
+  IfStepSchemaInner = ControlContainerBaseStepSchema.extend({
     type: exports_external.literal("control.if"),
     condition: exports_external.string(),
     then: exports_external.lazy(() => exports_external.array(StepSchema)),
@@ -64580,7 +64706,7 @@ var init_steps = __esm(() => {
     when: exports_external.union([exports_external.string(), exports_external.number(), exports_external.boolean()]),
     steps: exports_external.lazy(() => exports_external.array(StepSchema))
   });
-  SwitchStepSchemaInner = BaseStepSchema.extend({
+  SwitchStepSchemaInner = ControlContainerBaseStepSchema.extend({
     type: exports_external.literal("control.switch"),
     on: exports_external.string(),
     cases: exports_external.array(SwitchCaseSchemaInner),
@@ -64590,18 +64716,18 @@ var init_steps = __esm(() => {
     name: exports_external.string().min(1),
     steps: exports_external.lazy(() => exports_external.array(StepSchema))
   });
-  ParallelStepSchemaInner = BaseStepSchema.extend({
+  ParallelStepSchemaInner = ControlContainerBaseStepSchema.extend({
     type: exports_external.literal("control.parallel"),
     branches: exports_external.array(ParallelBranchSchemaInner)
   });
-  ForeachStepSchemaInner = BaseStepSchema.extend({
+  ForeachStepSchemaInner = ControlContainerBaseStepSchema.extend({
     type: exports_external.literal("control.foreach"),
     items: exports_external.string(),
     as: exports_external.string(),
     indexAs: exports_external.string().optional(),
     steps: exports_external.lazy(() => exports_external.array(StepSchema))
   });
-  ParallelMapStepSchemaInner = BaseStepSchema.extend({
+  ParallelMapStepSchemaInner = ControlContainerBaseStepSchema.extend({
     type: exports_external.literal("control.parallel_map"),
     items: exports_external.string(),
     as: exports_external.string(),
@@ -64632,6 +64758,9 @@ var init_steps = __esm(() => {
 });
 
 // ../types/src/workflow/step-configs.ts
+function getStepRetryCapability(stepType) {
+  return STEP_RETRY_CAPABILITIES[stepType];
+}
 function getStepSchema(stepType) {
   return STEP_SCHEMAS[stepType];
 }
@@ -64704,7 +64833,7 @@ function isOutputSchemaUnknown(stepType) {
   const def = schema._def;
   return def?.typeName === "ZodUnknown";
 }
-var AiParseConfigSchema, AiParseOutputSchema, AiExtractConfigSchema, AiExtractOutputSchema, AiSplitConfigSchema, AiSplitOutputSchema, AiSegmentConfigSchema, AiSegmentOutputSchema, AiClassifyConfigSchema, AiClassifyOutputSchema, TransformSetConfigSchema, TransformSetOutputSchema, TransformRemoveConfigSchema, TransformRemoveOutputSchema, TransformCombineConfigSchema, TransformCombineOutputSchema, TransformSplitConfigSchema, TransformSplitOutputSchema, TransformMergeConfigSchema, TransformMergeOutputSchema, TransformTemplateConfigSchema, TransformTemplateOutputSchema, TransformPdfEmbedConfigSchema, TransformPdfEmbedOutputSchema, TransformXlsxToJsonConfigSchema, TransformXlsxToJsonOutputSchema, TransformScriptConfigSchema, TransformScriptOutputSchema, ParsedDocPageSchema, TransformTextChunkerConfigSchema, TransformTextChunkerOutputSchema, RegexNormalizerSchema, RegexFormatSchema, REGEX_FLAGS, RegexFieldSchema, TransformRegexExtractConfigSchema, TransformRegexExtractOutputSchema, ActionHttpConfigSchema, ActionHttpOutputSchema, ActionInvokeWorkflowConfigSchema, ActionInvokeWorkflowOutputSchema, ActionWebsiteReaderConfigSchema, ActionWebsiteReaderOutputSchema, ControlIfConfigSchema, ControlIfOutputSchema, ControlSwitchConfigSchema, ControlSwitchOutputSchema, ControlForeachConfigSchema, ControlForeachOutputSchema, ControlParallelMapConfigSchema, ControlParallelMapOutputSchema, ControlParallelConfigSchema, ControlParallelOutputSchema, ControlWaitConfigSchema, ControlWaitOutputSchema, ControlFailConfigSchema, ControlFailOutputSchema, STEP_SCHEMAS;
+var AiParseConfigSchema, AiParseOutputSchema, AiExtractConfigSchema, AiExtractOutputSchema, AiSplitConfigSchema, AiSplitOutputSchema, AiSegmentConfigSchema, AiSegmentOutputSchema, AiClassifyConfigSchema, AiClassifyOutputSchema, TransformSetConfigSchema, TransformSetOutputSchema, TransformRemoveConfigSchema, TransformRemoveOutputSchema, TransformCombineConfigSchema, TransformCombineOutputSchema, TransformSplitConfigSchema, TransformSplitOutputSchema, TransformMergeConfigSchema, TransformMergeOutputSchema, TransformTemplateConfigSchema, TransformTemplateOutputSchema, TransformPdfEmbedConfigSchema, TransformPdfEmbedOutputSchema, TransformXlsxToJsonConfigSchema, TransformXlsxToJsonOutputSchema, TransformScriptConfigSchema, TransformScriptOutputSchema, ParsedDocPageSchema, TransformTextChunkerConfigSchema, TransformTextChunkerOutputSchema, RegexNormalizerSchema, RegexFormatSchema, REGEX_FLAGS, RegexFieldSchema, TransformRegexExtractConfigSchema, TransformRegexExtractOutputSchema, ActionHttpConfigSchema, ActionHttpOutputSchema, ActionInvokeWorkflowConfigSchema, ActionInvokeWorkflowOutputSchema, ActionWebsiteReaderConfigSchema, ActionWebsiteReaderOutputSchema, ControlIfConfigSchema, ControlIfOutputSchema, ControlSwitchConfigSchema, ControlSwitchOutputSchema, ControlForeachConfigSchema, ControlForeachOutputSchema, ControlParallelMapConfigSchema, ControlParallelMapOutputSchema, ControlParallelConfigSchema, ControlParallelOutputSchema, ControlWaitConfigSchema, ControlWaitOutputSchema, ControlFailConfigSchema, ControlFailOutputSchema, AI_RETRY_CAPABILITY, DETERMINISTIC_RETRY_CAPABILITY, CONTROL_RETRY_CAPABILITY, FILE_OUTPUT_RETRY_CAPABILITY, STEP_RETRY_CAPABILITIES, STEP_SCHEMAS;
 var init_step_configs = __esm(() => {
   init_zod();
   init_common();
@@ -65030,7 +65159,7 @@ var init_step_configs = __esm(() => {
   TransformRegexExtractOutputSchema = exports_external.record(exports_external.string(), exports_external.unknown()).describe("Field name → extracted value (or default), plus `_evidence: { [field]: { pageIndex, matchOffset, raw } }` and `_unmatched: string[]`.");
   ActionHttpConfigSchema = exports_external.object({
     url: exports_external.string().min(1, "URL is required").describe("Request URL (supports template expressions)"),
-    method: exports_external.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).default("GET").optional(),
+    method: exports_external.enum(["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE"]).default("GET").optional(),
     headers: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("HTTP headers"),
     body: exports_external.unknown().optional().describe("Request body (JSON or string)"),
     timeout: exports_external.number().positive().default(30000).optional().describe("Timeout in milliseconds"),
@@ -65162,6 +65291,65 @@ var init_step_configs = __esm(() => {
     message: exports_external.string().min(1).describe('Human-readable failure message. Supports template expressions, e.g. "Document classified as {{ steps.classify.output.label }}".')
   });
   ControlFailOutputSchema = exports_external.never().describe("control.fail never produces output — it terminates the workflow when triggered.");
+  AI_RETRY_CAPABILITY = {
+    replaySafety: "safe",
+    automaticCategories: [
+      "timeout",
+      "rate_limited",
+      "temporarily_unavailable",
+      "invalid_provider_output"
+    ],
+    hasProviderRequestRetries: true
+  };
+  DETERMINISTIC_RETRY_CAPABILITY = {
+    replaySafety: "safe",
+    automaticCategories: []
+  };
+  CONTROL_RETRY_CAPABILITY = {
+    replaySafety: "never",
+    automaticCategories: []
+  };
+  FILE_OUTPUT_RETRY_CAPABILITY = {
+    replaySafety: "never",
+    automaticCategories: []
+  };
+  STEP_RETRY_CAPABILITIES = {
+    "ai.parse": AI_RETRY_CAPABILITY,
+    "ai.extract": AI_RETRY_CAPABILITY,
+    "ai.split": AI_RETRY_CAPABILITY,
+    "ai.segment": AI_RETRY_CAPABILITY,
+    "ai.classify": AI_RETRY_CAPABILITY,
+    "transform.set": DETERMINISTIC_RETRY_CAPABILITY,
+    "transform.remove": DETERMINISTIC_RETRY_CAPABILITY,
+    "transform.combine": DETERMINISTIC_RETRY_CAPABILITY,
+    "transform.split": DETERMINISTIC_RETRY_CAPABILITY,
+    "transform.merge": DETERMINISTIC_RETRY_CAPABILITY,
+    "transform.template": FILE_OUTPUT_RETRY_CAPABILITY,
+    "transform.pdf-embed": FILE_OUTPUT_RETRY_CAPABILITY,
+    "transform.xlsx-to-json": FILE_OUTPUT_RETRY_CAPABILITY,
+    "transform.script": DETERMINISTIC_RETRY_CAPABILITY,
+    "transform.text-chunker": DETERMINISTIC_RETRY_CAPABILITY,
+    "transform.regex-extract": DETERMINISTIC_RETRY_CAPABILITY,
+    "action.http": {
+      replaySafety: "requires-idempotency",
+      automaticCategories: ["timeout", "rate_limited", "temporarily_unavailable"]
+    },
+    "action.invoke-workflow": {
+      replaySafety: "requires-idempotency",
+      automaticCategories: ["timeout", "temporarily_unavailable"]
+    },
+    "action.website-reader": {
+      replaySafety: "safe",
+      automaticCategories: ["timeout", "rate_limited", "temporarily_unavailable"]
+    },
+    "control.if": CONTROL_RETRY_CAPABILITY,
+    "control.switch": CONTROL_RETRY_CAPABILITY,
+    "control.foreach": CONTROL_RETRY_CAPABILITY,
+    "control.parallel": CONTROL_RETRY_CAPABILITY,
+    "control.parallel_map": CONTROL_RETRY_CAPABILITY,
+    "control.wait": CONTROL_RETRY_CAPABILITY,
+    "control.fail": CONTROL_RETRY_CAPABILITY
+  };
   STEP_SCHEMAS = {
     "ai.parse": {
       type: "ai.parse",
@@ -65435,6 +65623,7 @@ var WORKFLOW_NAME_PATTERN, WorkflowNameSchema, WorkflowInputDefSchema, ManualTri
 var init_workflow = __esm(() => {
   init_zod();
   init_common();
+  init_retry();
   init_steps();
   WORKFLOW_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/;
   WorkflowNameSchema = exports_external.string().min(1).max(64).regex(WORKFLOW_NAME_PATTERN, 'Workflow name must start with a lowercase letter or digit and contain only lowercase letters, digits, "_" or "-".');
@@ -65514,9 +65703,10 @@ var init_workflow = __esm(() => {
   TriggerMethodsSchema = exports_external.array(TriggerMethodSchema).default([{ type: "manual" }]);
   WorkflowSettingsSchema = exports_external.object({
     timeout: exports_external.number().positive().optional(),
+    retry: WorkflowRetryPolicySchema.optional(),
     retries: exports_external.number().int().min(0).optional(),
     retryDelay: exports_external.number().positive().optional()
-  });
+  }).strict();
   WorkflowDefinitionSchema = exports_external.object({
     name: WorkflowNameSchema,
     kind: exports_external.enum(["workflow"]).default("workflow").optional(),
@@ -65719,11 +65909,12 @@ function isFileOutput(value) {
 function isWorkflowResult(value) {
   return value != null && typeof value === "object" && "files" in value && Array.isArray(value.files);
 }
-var WorkflowExecutionStatusSchema2, StepExecutionStatusSchema2, ScopeEntryTypeSchema, ScopeEntrySchema, ScopeStackSchema, StepResultSchema, ExecutionContextSchema, StepInputReferenceSchema, WorkflowExecutionSchema, StepExecutionSchema, ConnectorSchema, WorkflowFileOutputSchema, WorkflowResultSchema;
+var WorkflowExecutionStatusSchema2, StepExecutionStatusSchema2, ScopeEntryTypeSchema, ScopeEntrySchema, ScopeStackSchema, StepResultSchema, ExecutionContextSchema, StepInputReferenceSchema, WorkflowExecutionSchema, StepExecutionSchema, StepExecutionAttemptSchema, ConnectorSchema, WorkflowFileOutputSchema, WorkflowResultSchema;
 var init_execution2 = __esm(() => {
   init_zod();
   init_common();
   init_execution();
+  init_retry();
   init_workflow();
   WorkflowExecutionStatusSchema2 = WorkflowExecutionStatusSchema;
   StepExecutionStatusSchema2 = StepExecutionStatusSchema;
@@ -65784,6 +65975,7 @@ var init_execution2 = __esm(() => {
     result: exports_external.unknown().nullable(),
     error: exports_external.string().nullable(),
     priority: exports_external.number().default(50),
+    availableAt: TimestampSchema,
     leaseId: exports_external.string().nullable(),
     leaseExpiresAt: TimestampSchema.nullable(),
     workerId: exports_external.string().nullable(),
@@ -65808,6 +66000,11 @@ var init_execution2 = __esm(() => {
     scopeHash: exports_external.string(),
     executionOrder: exports_external.number(),
     stepAttempt: exports_external.number().default(0),
+    stepPath: exports_external.string().nullable().optional(),
+    effectiveRetryPolicy: ResolvedRetryPolicySchema.nullable().optional(),
+    retryPolicySource: RetryPolicySourceSchema.nullable().optional(),
+    latestAttempt: exports_external.number().default(0),
+    nextAttemptAt: TimestampSchema.nullable().optional(),
     inputData: exports_external.unknown().nullable(),
     outputData: exports_external.unknown().nullable(),
     status: StepExecutionStatusSchema2,
@@ -65817,6 +66014,21 @@ var init_execution2 = __esm(() => {
     startedAt: TimestampSchema.nullable(),
     completedAt: TimestampSchema.nullable()
   });
+  StepExecutionAttemptSchema = exports_external.object({
+    id: exports_external.string(),
+    stepExecutionId: exports_external.string(),
+    executionId: exports_external.string(),
+    tenantId: exports_external.string(),
+    attemptNumber: exports_external.number().int().min(1),
+    status: exports_external.enum(["running", "success", "failure", "cancelled"]),
+    resolvedConfig: exports_external.unknown().nullable(),
+    failure: ExecutionFailureSchema.nullable(),
+    retryDecision: RetryDecisionSchema.nullable(),
+    replaySafe: exports_external.boolean().nullable(),
+    startedAt: TimestampSchema,
+    completedAt: TimestampSchema.nullable(),
+    durationMs: exports_external.number().nullable()
+  });
   ConnectorSchema = exports_external.object({
     id: exports_external.string(),
     tenantId: exports_external.string(),
@@ -66000,6 +66212,7 @@ var init_workflow2 = __esm(() => {
   init_step_configs();
   init_actions();
   init_steps();
+  init_retry();
   init_workflow();
   init_expected_output();
   init_local_meta();
@@ -68274,6 +68487,216 @@ var init_sample_rank = __esm(() => {
   UNIT_INTERVAL_DENOMINATOR = BigInt(1) << BigInt(53);
 });
 
+// ../types/src/webhooks.ts
+function serializeWebhookEvent(event) {
+  return JSON.stringify(WebhookEventEnvelopeSchema.parse(event));
+}
+function boundWebhookEventOutput(event, maxBytes) {
+  const parsed = WebhookEventEnvelopeSchema.parse(event);
+  if (new TextEncoder().encode(JSON.stringify(parsed)).byteLength <= maxBytes)
+    return parsed;
+  const run = { ...parsed.data.run };
+  delete run.output;
+  run.outputOmitted = true;
+  const bounded = { ...parsed, data: { ...parsed.data, run } };
+  const serialized = JSON.stringify(bounded);
+  if (new TextEncoder().encode(serialized).byteLength > maxBytes) {
+    throw new Error("Webhook envelope exceeds payload limit without output");
+  }
+  return WebhookEventEnvelopeSchema.parse(bounded);
+}
+function getWebhookDestinationUrlError(raw) {
+  const trimmed = raw.trim();
+  if (!trimmed)
+    return "Enter a valid HTTPS URL.";
+  const result = WebhookDestinationUrlSchema.safeParse(trimmed);
+  if (result.success)
+    return null;
+  return result.error.issues[0]?.message ?? "Enter a valid HTTPS URL.";
+}
+function validateWebhookHeaderCollection(input, ctx) {
+  if (input.customHeaders) {
+    const seen = new Set;
+    let bytes = 0;
+    input.customHeaders.forEach((header, index) => {
+      const normalized = header.name.toLowerCase();
+      if (seen.has(normalized)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["customHeaders", index, "name"],
+          message: "Duplicate webhook header"
+        });
+      }
+      seen.add(normalized);
+      bytes += new TextEncoder().encode(header.name + ("value" in header ? header.value : "")).byteLength;
+    });
+    if (bytes > WEBHOOK_MAX_HEADER_BYTES) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["customHeaders"],
+        message: "Custom webhook headers are too large"
+      });
+    }
+  }
+}
+var WEBHOOK_API_VERSION = "2026-07-01", WEBHOOK_NOTIFY_CHANNEL = "eigenpal:webhooks", WEBHOOK_MAX_PAYLOAD_BYTES, WEBHOOK_MAX_HEADERS = 20, WEBHOOK_MAX_HEADER_BYTES, WEBHOOK_EVENT_TYPES, WEBHOOK_DELIVERY_STATES, WEBHOOK_RESERVED_HEADERS, RESERVED_HEADER_SET, WebhookEventTypeSchema, WebhookDeliveryStateSchema, WebhookEndpointIdSchema, WebhookEventIdSchema, WebhookDeliveryIdSchema, WebhookAttemptIdSchema, HeaderNameSchema, WebhookCustomHeaderSchema, RetainedWebhookCustomHeaderSchema, RedactedWebhookCustomHeaderSchema, PublicWebhookRunSchema, EnvelopeBaseSchema, RunCreatedWebhookEventSchema, RunStatusChangedWebhookEventSchema, WebhookEventEnvelopeSchema, WebhookEndpointSchema, WebhookDestinationUrlSchema, CreateWebhookEndpointSchema, UpdateWebhookEndpointSchema, CreateWebhookEndpointResponseSchema, WebhookDeliverySchema, WebhookDeliveryAttemptSchema;
+var init_webhooks = __esm(() => {
+  init_zod();
+  init_execution_row();
+  WEBHOOK_MAX_PAYLOAD_BYTES = 1024 * 1024;
+  WEBHOOK_MAX_HEADER_BYTES = 16 * 1024;
+  WEBHOOK_EVENT_TYPES = ["run.created", "run.status_changed"];
+  WEBHOOK_DELIVERY_STATES = [
+    "pending",
+    "processing",
+    "succeeded",
+    "failed",
+    "cancelled"
+  ];
+  WEBHOOK_RESERVED_HEADERS = [
+    "connection",
+    "content-length",
+    "content-type",
+    "host",
+    "keep-alive",
+    "proxy-authenticate",
+    "proxy-authorization",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade",
+    "user-agent",
+    "webhook-id",
+    "webhook-signature",
+    "webhook-timestamp"
+  ];
+  RESERVED_HEADER_SET = new Set(WEBHOOK_RESERVED_HEADERS);
+  WebhookEventTypeSchema = exports_external.enum(WEBHOOK_EVENT_TYPES);
+  WebhookDeliveryStateSchema = exports_external.enum(WEBHOOK_DELIVERY_STATES);
+  WebhookEndpointIdSchema = exports_external.string().regex(/^whep_[A-Za-z0-9_-]+$/);
+  WebhookEventIdSchema = exports_external.string().regex(/^whev_[A-Za-z0-9_-]+$/);
+  WebhookDeliveryIdSchema = exports_external.string().regex(/^whdl_[A-Za-z0-9_-]+$/);
+  WebhookAttemptIdSchema = exports_external.string().regex(/^what_[A-Za-z0-9_-]+$/);
+  HeaderNameSchema = exports_external.string().min(1).max(128).regex(/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/);
+  WebhookCustomHeaderSchema = exports_external.object({
+    name: HeaderNameSchema.refine((name) => !RESERVED_HEADER_SET.has(name.toLowerCase()) && !name.toLowerCase().startsWith("webhook-"), { message: "Reserved webhook header" }),
+    value: exports_external.string().min(1).max(8192).refine((value) => !/[\r\n]/.test(value), {
+      message: "Header values cannot contain CR or LF"
+    })
+  });
+  RetainedWebhookCustomHeaderSchema = exports_external.object({
+    name: WebhookCustomHeaderSchema.shape.name,
+    retained: exports_external.literal(true)
+  });
+  RedactedWebhookCustomHeaderSchema = exports_external.object({
+    name: HeaderNameSchema,
+    configured: exports_external.literal(true)
+  });
+  PublicWebhookRunSchema = exports_external.object({
+    id: exports_external.string().min(1),
+    automationId: exports_external.string().min(1),
+    type: exports_external.enum(["workflow", "agent"]),
+    status: exports_external.enum(EXECUTION_STATUSES),
+    triggerType: exports_external.string(),
+    createdAt: exports_external.string().datetime(),
+    startedAt: exports_external.string().datetime().nullable(),
+    completedAt: exports_external.string().datetime().nullable(),
+    output: exports_external.unknown().optional(),
+    outputOmitted: exports_external.boolean().optional()
+  });
+  EnvelopeBaseSchema = exports_external.object({
+    id: WebhookEventIdSchema,
+    apiVersion: exports_external.literal(WEBHOOK_API_VERSION),
+    createdAt: exports_external.string().datetime(),
+    test: exports_external.boolean().default(false)
+  });
+  RunCreatedWebhookEventSchema = EnvelopeBaseSchema.extend({
+    type: exports_external.literal("run.created"),
+    data: exports_external.object({ run: PublicWebhookRunSchema })
+  });
+  RunStatusChangedWebhookEventSchema = EnvelopeBaseSchema.extend({
+    type: exports_external.literal("run.status_changed"),
+    data: exports_external.object({
+      run: PublicWebhookRunSchema,
+      previousStatus: exports_external.enum(EXECUTION_STATUSES),
+      currentStatus: exports_external.enum(EXECUTION_STATUSES)
+    })
+  });
+  WebhookEventEnvelopeSchema = exports_external.discriminatedUnion("type", [
+    RunCreatedWebhookEventSchema,
+    RunStatusChangedWebhookEventSchema
+  ]);
+  WebhookEndpointSchema = exports_external.object({
+    id: WebhookEndpointIdSchema,
+    tenantId: exports_external.string(),
+    name: exports_external.string().min(1).max(200),
+    url: exports_external.string().url(),
+    eventTypes: exports_external.array(WebhookEventTypeSchema).min(1),
+    enabled: exports_external.boolean(),
+    signingConfigured: exports_external.literal(true),
+    customHeaders: exports_external.array(RedactedWebhookCustomHeaderSchema),
+    createdBy: exports_external.string().nullable(),
+    createdAt: exports_external.coerce.date(),
+    updatedAt: exports_external.coerce.date(),
+    deletedAt: exports_external.coerce.date().nullable()
+  });
+  WebhookDestinationUrlSchema = exports_external.string().url().superRefine((raw, ctx) => {
+    if (!URL.canParse(raw))
+      return;
+    const url2 = new URL(raw);
+    if (url2.protocol !== "https:") {
+      ctx.addIssue({ code: "custom", message: "Webhook URLs must use HTTPS" });
+    }
+    if (url2.username || url2.password) {
+      ctx.addIssue({ code: "custom", message: "Webhook URLs cannot contain credentials" });
+    }
+    if (url2.hash) {
+      ctx.addIssue({ code: "custom", message: "Webhook URLs cannot contain fragments" });
+    }
+  });
+  CreateWebhookEndpointSchema = exports_external.object({
+    name: exports_external.string().trim().min(1).max(200),
+    url: WebhookDestinationUrlSchema,
+    eventTypes: exports_external.array(WebhookEventTypeSchema).min(1),
+    customHeaders: exports_external.array(WebhookCustomHeaderSchema).max(WEBHOOK_MAX_HEADERS).default([])
+  }).superRefine(validateWebhookHeaderCollection);
+  UpdateWebhookEndpointSchema = exports_external.object({
+    name: exports_external.string().trim().min(1).max(200).optional(),
+    url: WebhookDestinationUrlSchema.optional(),
+    eventTypes: exports_external.array(WebhookEventTypeSchema).min(1).optional(),
+    customHeaders: exports_external.array(exports_external.union([WebhookCustomHeaderSchema, RetainedWebhookCustomHeaderSchema])).max(WEBHOOK_MAX_HEADERS).optional(),
+    enabled: exports_external.boolean().optional()
+  }).superRefine(validateWebhookHeaderCollection);
+  CreateWebhookEndpointResponseSchema = exports_external.object({
+    endpoint: WebhookEndpointSchema,
+    signingSecret: exports_external.string().regex(/^whsec_[A-Za-z0-9_-]+$/)
+  });
+  WebhookDeliverySchema = exports_external.object({
+    id: WebhookDeliveryIdSchema,
+    tenantId: exports_external.string(),
+    endpointId: WebhookEndpointIdSchema,
+    eventId: WebhookEventIdSchema,
+    state: WebhookDeliveryStateSchema,
+    attemptCount: exports_external.number().int().nonnegative(),
+    nextAttemptAt: exports_external.coerce.date().nullable(),
+    latestStatusCode: exports_external.number().int().nullable(),
+    latestErrorCategory: exports_external.string().nullable(),
+    createdAt: exports_external.coerce.date(),
+    completedAt: exports_external.coerce.date().nullable()
+  });
+  WebhookDeliveryAttemptSchema = exports_external.object({
+    id: WebhookAttemptIdSchema,
+    deliveryId: WebhookDeliveryIdSchema,
+    attemptNumber: exports_external.number().int().positive(),
+    startedAt: exports_external.coerce.date(),
+    completedAt: exports_external.coerce.date(),
+    latencyMs: exports_external.number().int().nonnegative(),
+    statusCode: exports_external.number().int().nullable(),
+    errorCategory: exports_external.string().nullable(),
+    responseExcerpt: exports_external.string().nullable()
+  });
+});
+
 // ../types/src/storage/s3-paths.ts
 function assertSegment(name, value) {
   if (!value || !SEGMENT_RX.test(value)) {
@@ -68645,6 +69068,7 @@ __export(exports_src, {
   stripTenantPrefix: () => stripTenantPrefix,
   stringToUnitInterval: () => stringToUnitInterval,
   sourceLockfileInputHash: () => sourceLockfileInputHash,
+  serializeWebhookEvent: () => serializeWebhookEvent,
   scriptParamTypeAlias: () => scriptParamTypeAlias,
   schemaFileUploadMatchesField: () => schemaFileUploadMatchesField,
   s3PathFilename: () => s3PathFilename,
@@ -68658,6 +69082,7 @@ __export(exports_src, {
   runExpandErrorMessage: () => runExpandErrorMessage,
   rootS3Path: () => rootS3Path,
   resolveWorkflowPassThreshold: () => resolveWorkflowPassThreshold,
+  resolveRetryPolicy: () => resolveRetryPolicy,
   resolveEffectiveMimeType: () => resolveEffectiveMimeType,
   resolveAgentOriginalSourceRef: () => resolveAgentOriginalSourceRef,
   requiresSpecializedParser: () => requiresSpecializedParser,
@@ -68713,9 +69138,11 @@ __export(exports_src, {
   hasTriggerMethod: () => hasTriggerMethod,
   hasDeclaredOutput: () => hasDeclaredOutput,
   goldenFileSatisfiedInResult: () => goldenFileSatisfiedInResult,
+  getWebhookDestinationUrlError: () => getWebhookDestinationUrlError,
   getTriggerMethods: () => getTriggerMethods,
   getSupportedFormatsLabel: () => getSupportedFormatsLabel,
   getStepSchema: () => getStepSchema,
+  getStepRetryCapability: () => getStepRetryCapability,
   getStepOutputSchema: () => getStepOutputSchema,
   getStepConfigSchema: () => getStepConfigSchema,
   getRequiredOutputKeys: () => getRequiredOutputKeys,
@@ -68769,6 +69196,7 @@ __export(exports_src, {
   buildS3Path: () => buildS3Path,
   buildDiscreteJudgeSystemPrompt: () => buildDiscreteJudgeSystemPrompt,
   buildContinuousJudgeSystemPrompt: () => buildContinuousJudgeSystemPrompt,
+  boundWebhookEventOutput: () => boundWebhookEventOutput,
   assertS3PathSegment: () => assertS3PathSegment,
   aliasReplyConfigSchema: () => aliasReplyConfigSchema,
   aggregateEvaluatorCompositionScore: () => aggregateEvaluatorCompositionScore,
@@ -68780,6 +69208,7 @@ __export(exports_src, {
   WorkspaceDependencySchema: () => WorkspaceDependencySchema,
   WorkspaceDependencyNameSchema: () => WorkspaceDependencyNameSchema,
   WorkflowSettingsSchema: () => WorkflowSettingsSchema,
+  WorkflowRetryPolicySchema: () => WorkflowRetryPolicySchema,
   WorkflowResultSchema: () => WorkflowResultSchema,
   WorkflowPackageManifestSchema: () => WorkflowPackageManifestSchema,
   WorkflowNameSchema: () => WorkflowNameSchema,
@@ -68790,11 +69219,31 @@ __export(exports_src, {
   WorkflowExecutionStatusSchema: () => WorkflowExecutionStatusSchema,
   WorkflowExecutionSchema: () => WorkflowExecutionSchema,
   WorkflowDefinitionSchema: () => WorkflowDefinitionSchema,
+  WebhookEventTypeSchema: () => WebhookEventTypeSchema,
+  WebhookEventIdSchema: () => WebhookEventIdSchema,
+  WebhookEventEnvelopeSchema: () => WebhookEventEnvelopeSchema,
+  WebhookEndpointSchema: () => WebhookEndpointSchema,
+  WebhookEndpointIdSchema: () => WebhookEndpointIdSchema,
+  WebhookDeliveryStateSchema: () => WebhookDeliveryStateSchema,
+  WebhookDeliverySchema: () => WebhookDeliverySchema,
+  WebhookDeliveryIdSchema: () => WebhookDeliveryIdSchema,
+  WebhookDeliveryAttemptSchema: () => WebhookDeliveryAttemptSchema,
+  WebhookCustomHeaderSchema: () => WebhookCustomHeaderSchema,
+  WebhookAttemptIdSchema: () => WebhookAttemptIdSchema,
   WaitStepSchema: () => WaitStepSchema,
   WORKFLOW_TOOL_METADATA: () => WORKFLOW_TOOL_METADATA,
   WORKFLOW_NAME_PATTERN: () => WORKFLOW_NAME_PATTERN,
   WORKFLOW_FILE_REF_JSON_SCHEMA: () => WORKFLOW_FILE_REF_JSON_SCHEMA,
   WORKFLOW_EXECUTION_STATUSES: () => WORKFLOW_EXECUTION_STATUSES,
+  WEBHOOK_RESERVED_HEADERS: () => WEBHOOK_RESERVED_HEADERS,
+  WEBHOOK_NOTIFY_CHANNEL: () => WEBHOOK_NOTIFY_CHANNEL,
+  WEBHOOK_MAX_PAYLOAD_BYTES: () => WEBHOOK_MAX_PAYLOAD_BYTES,
+  WEBHOOK_MAX_HEADER_BYTES: () => WEBHOOK_MAX_HEADER_BYTES,
+  WEBHOOK_MAX_HEADERS: () => WEBHOOK_MAX_HEADERS,
+  WEBHOOK_EVENT_TYPES: () => WEBHOOK_EVENT_TYPES,
+  WEBHOOK_DELIVERY_STATES: () => WEBHOOK_DELIVERY_STATES,
+  WEBHOOK_API_VERSION: () => WEBHOOK_API_VERSION,
+  UpdateWebhookEndpointSchema: () => UpdateWebhookEndpointSchema,
   UNSUPPORTED_SOURCE_MANIFEST_FILENAME: () => UNSUPPORTED_SOURCE_MANIFEST_FILENAME,
   TriggerTypeValue: () => TriggerTypeValue,
   TriggerTypeSchema: () => TriggerTypeSchema,
@@ -68833,11 +69282,14 @@ __export(exports_src, {
   StepTypeValue: () => StepTypeValue,
   StepTypeSchema: () => StepTypeSchema,
   StepSchema: () => StepSchema,
+  StepRetryPolicySchema: () => StepRetryPolicySchema,
+  StepRetryCapabilitySchema: () => StepRetryCapabilitySchema,
   StepResultSchema: () => StepResultSchema,
   StepInputReferenceSchema: () => StepInputReferenceSchema,
   StepExecutionStatusValue: () => StepExecutionStatusValue,
   StepExecutionStatusSchema: () => StepExecutionStatusSchema,
   StepExecutionSchema: () => StepExecutionSchema,
+  StepExecutionAttemptSchema: () => StepExecutionAttemptSchema,
   SplitOutputSchema: () => SplitOutputSchema,
   SplitInputSchema: () => SplitInputSchema,
   SplitConfigSchema: () => SplitConfigSchema,
@@ -68867,6 +69319,7 @@ __export(exports_src, {
   ScopeEntrySchema: () => ScopeEntrySchema,
   STEP_TYPES: () => STEP_TYPES,
   STEP_SCHEMAS: () => STEP_SCHEMAS,
+  STEP_RETRY_CAPABILITIES: () => STEP_RETRY_CAPABILITIES,
   STEP_EXECUTION_STATUSES: () => STEP_EXECUTION_STATUSES,
   SOURCE_VERSION_RANGE_PATTERN: () => SOURCE_VERSION_RANGE_PATTERN,
   SOURCE_SEMVER_PATTERN: () => SOURCE_SEMVER_PATTERN,
@@ -68883,14 +69336,23 @@ __export(exports_src, {
   RunTargetStringSchema: () => RunTargetStringSchema,
   RunTargetSchema: () => RunTargetSchema,
   RunTargetObjectSchema: () => RunTargetObjectSchema,
+  RunStatusChangedWebhookEventSchema: () => RunStatusChangedWebhookEventSchema,
+  RunCreatedWebhookEventSchema: () => RunCreatedWebhookEventSchema,
   RootSourceManifestSchema: () => RootSourceManifestSchema,
+  RetryTerminalReasonSchema: () => RetryTerminalReasonSchema,
+  RetryPolicySourceSchema: () => RetryPolicySourceSchema,
+  RetryDecisionSchema: () => RetryDecisionSchema,
+  RetryCategorySchema: () => RetryCategorySchema,
+  ResolvedRetryPolicySchema: () => ResolvedRetryPolicySchema,
   ResolvedProcessorFileSchema: () => ResolvedProcessorFileSchema,
   ReleaseTagSchema: () => ReleaseTagSchema,
+  RedactedWebhookCustomHeaderSchema: () => RedactedWebhookCustomHeaderSchema,
   RUN_TARGET_SEGMENT_PATTERN: () => RUN_TARGET_SEGMENT_PATTERN,
   RUN_EXPAND_SECTIONS: () => RUN_EXPAND_SECTIONS,
   RUN_DETAIL_EXPAND_PRESET: () => RUN_DETAIL_EXPAND_PRESET,
   RUNS_TRIGGERED_BY_SYSTEM: () => RUNS_TRIGGERED_BY_SYSTEM,
   RERUN_ORIGINAL_VERSION: () => RERUN_ORIGINAL_VERSION,
+  PublicWebhookRunSchema: () => PublicWebhookRunSchema,
   ProcessorPortSchema: () => ProcessorPortSchema,
   ProcessorExecutionContextSchema: () => ProcessorExecutionContextSchema,
   ProcessorDefinitionSchema: () => ProcessorDefinitionSchema,
@@ -68967,6 +69429,7 @@ __export(exports_src, {
   ExpectedDocumentRefSchema: () => ExpectedDocumentRefSchema,
   ExecutionTypeValue: () => ExecutionTypeValue,
   ExecutionTypeSchema: () => ExecutionTypeSchema,
+  ExecutionFailureSchema: () => ExecutionFailureSchema,
   ExecutionContextSchema: () => ExecutionContextSchema,
   ExactDiffConfigSchema: () => ExactDiffConfigSchema,
   EvaluatorsImportRequestSchema: () => EvaluatorsImportRequestSchema,
@@ -69022,6 +69485,8 @@ __export(exports_src, {
   DATASET_NAME_PATTERN: () => DATASET_NAME_PATTERN,
   CustomScriptConfigSchema: () => CustomScriptConfigSchema,
   CreateWorkflowDefinitionSchema: () => CreateWorkflowDefinitionSchema,
+  CreateWebhookEndpointSchema: () => CreateWebhookEndpointSchema,
+  CreateWebhookEndpointResponseSchema: () => CreateWebhookEndpointResponseSchema,
   CoordinateUnitSchema: () => CoordinateUnitSchema,
   ControlWaitOutputSchema: () => ControlWaitOutputSchema,
   ControlWaitConfigSchema: () => ControlWaitConfigSchema,
@@ -69083,6 +69548,7 @@ var init_src = __esm(() => {
   init_eval();
   init_git_source();
   init_triggers();
+  init_webhooks();
   init_typed_script();
 });
 
@@ -183799,7 +184265,7 @@ import { fileURLToPath as fileURLToPath8 } from "url";
 // package.json
 var package_default = {
   name: "@eigenpal/cli",
-  version: "0.10.19",
+  version: "0.10.21",
   description: "Eigenpal CLI — author and run document workflows from your terminal. Agent-ready.",
   keywords: [
     "eigenpal",

package/dist/skill/reference/step-types.md

@@ -358,6 +358,8 @@ _Generated from `STEP_SCHEMAS` in `@eigenpal/types/src/workflow/step-configs.ts`
 
 Extract text from documents (PDF, DOCX, images) using OCR or vision models
 
+**Durable retry:** Provider request retries are separate; the workflow engine does not durably retry this step.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -386,6 +388,8 @@ Extract text from documents (PDF, DOCX, images) using OCR or vision models
 
 Extract structured data from text using AI with a JSON schema
 
+**Durable retry:** Provider request retries are separate; the workflow engine does not durably retry this step.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -409,6 +413,8 @@ Extract structured data from text using AI with a JSON schema
 
 Split a parsed document into named sections using an LLM. Consumes ai.parse output; emits per-section page ranges and text ready for downstream ai.extract via control.parallel_map.
 
+**Durable retry:** Provider request retries are separate; the workflow engine does not durably retry this step.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -429,6 +435,8 @@ Split a parsed document into named sections using an LLM. Consumes ai.parse outp
 
 Separate a concatenated batch (one big scan) into typed document instances using an LLM. Consumes ai.parse output and a type taxonomy; discovers an unknown number of documents in any order and emits per-document page ranges + text + type, ready for type-specific ai.extract via control.parallel_map. The inverse of ai.split.
 
+**Durable retry:** Provider request retries are separate; the workflow engine does not durably retry this step.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -450,6 +458,8 @@ Separate a concatenated batch (one big scan) into typed document instances using
 
 Classify a document or text into one of a fixed label set using an LLM. Output exposes the picked label (constrained to the configured names), a coarse confidence, and a short justification. Pair with control.fail to reject documents that match an undesired label.
 
+**Durable retry:** Provider request retries are separate; the workflow engine does not durably retry this step.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -475,6 +485,8 @@ Classify a document or text into one of a fixed label set using an LLM. Output e
 
 Set key-value pairs in the output object
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -490,6 +502,8 @@ Set key-value pairs in the output object
 
 Remove specified fields from an object
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -505,6 +519,8 @@ Remove specified fields from an object
 
 Merge multiple objects or concatenate arrays
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -521,6 +537,8 @@ Merge multiple objects or concatenate arrays
 
 Split a string by delimiter or extract keys from an object
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -540,6 +558,8 @@ Split a string by delimiter or extract keys from an object
 
 Merge multiple named inputs into a single output
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -559,6 +579,8 @@ Merge multiple named inputs into a single output
 
 Fill a DOCX template with data from previous steps. Select a template in the workflow builder or provide a template ID from your workspace.
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -579,6 +601,8 @@ Fill a DOCX template with data from previous steps. Select a template in the wor
 
 Embed OCR text layer into scanned PDFs/images to make them searchable
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -601,6 +625,8 @@ Embed OCR text layer into scanned PDFs/images to make them searchable
 
 Convert XLSX spreadsheet to JSON array of row objects for use in scripts or downstream steps
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -621,6 +647,8 @@ Convert XLSX spreadsheet to JSON array of row objects for use in scripts or down
 
 Execute a TypeScript function in a QuickJS sandbox. Input keys become the function's parameter list, in declaration order, and the required `: R` return-type annotation IS this step's output schema: `inputs: { items, taxRate }` ⇒ `function script(items: …, taxRate: …): R { … }`.
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -638,6 +666,8 @@ Execute a TypeScript function in a QuickJS sandbox. Input keys become the functi
 
 Split long text into chunks with regex-anchored boundaries, overlap, and header preservation. Accepts raw text or a parsed-document object; chunks carry source page indexes when pages are provided.
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -661,6 +691,8 @@ Split long text into chunks with regex-anchored boundaries, overlap, and header
 
 Pull named fields from text via regex patterns (deterministic counterpart to ai.extract). Accepts raw text or a parsed-document object; matches carry `_evidence.pageIndex` when pages are provided.
 
+**Durable retry:** Transforms, including those that write files, are not durably retried.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -680,12 +712,14 @@ Pull named fields from text via regex patterns (deterministic counterpart to ai.
 
 Make an HTTP request to an external API
 
+**Durable retry:** HTTP `GET` and `HEAD` can durably retry transient timeout, rate limits, selected retryable server failures failures. Other methods are not replayed.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
 | --- | --- | --- | --- | --- |
 | `url` | string | yes |  | Request URL (supports template expressions) |
-| `method` | `"GET"` \| `"POST"` \| `"PUT"` \| `"PATCH"` \| `"DELETE"` | no | `"GET"` |  |
+| `method` | `"GET"` \| `"HEAD"` \| `"POST"` \| `"PUT"` \| `"PATCH"` \| `"DELETE"` | no | `"GET"` |  |
 | `headers` | record<string, string> | no |  | HTTP headers |
 | `body` | unknown | no |  | Request body (JSON or string) |
 | `timeout` | number | no | `30000` | Timeout in milliseconds |
@@ -705,6 +739,8 @@ Make an HTTP request to an external API
 
 Execute another workflow and return its output
 
+**Durable retry:** Invoked workflows are not replayed as durable leaf attempts.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -725,6 +761,8 @@ Execute another workflow and return its output
 
 Fetch a webpage and convert content to markdown
 
+**Durable retry:** Supported for transient timeout, rate limits, selected retryable server failures failures.
+
 **Config** (in `step.with`):
 
 | Field | Type | Required | Default | Description |
@@ -751,6 +789,8 @@ Fetch a webpage and convert content to markdown
 
 Branch execution based on a condition expression
 
+**Durable retry:** The control container itself is not retried, but eligible leaves inside its sequential scope may retry durably.
+
 **Config** (at step level):
 
 | Field | Type | Required | Default | Description |
@@ -769,6 +809,8 @@ Branch execution based on a condition expression
 
 Multi-way routing: resolve an expression and run the first case whose value matches (else default). Cleaner than a nested control.if chain for routing an item to one of N pipelines by a discriminator field like a document type.
 
+**Durable retry:** The control container itself is not retried, but eligible leaves inside its sequential scope may retry durably.
+
 **Config** (at step level):
 
 | Field | Type | Required | Default | Description |
@@ -788,6 +830,8 @@ Multi-way routing: resolve an expression and run the first case whose value matc
 
 Loop over an array and execute steps for each item
 
+**Durable retry:** The control container itself is not retried, but eligible leaves inside its sequential scope may retry durably.
+
 **Config** (at step level):
 
 | Field | Type | Required | Default | Description |
@@ -808,6 +852,8 @@ Loop over an array and execute steps for each item
 
 Iterate over an array with concurrent execution up to a limit
 
+**Durable retry:** The control container and leaves inside its concurrent branches do not retry durably.
+
 **Config** (at step level):
 
 | Field | Type | Required | Default | Description |
@@ -829,6 +875,8 @@ Iterate over an array with concurrent execution up to a limit
 
 Execute multiple branches concurrently
 
+**Durable retry:** The control container and leaves inside its concurrent branches do not retry durably.
+
 **Config** (at step level):
 
 _No fields._
@@ -841,6 +889,8 @@ _No fields._
 
 Pause workflow execution for a specified duration
 
+**Durable retry:** This control step is not retried durably.
+
 **Config** (at step level):
 
 | Field | Type | Required | Default | Description |
@@ -857,6 +907,8 @@ Pause workflow execution for a specified duration
 
 Terminate the workflow with a typed status code + message. With an optional condition, only fails when the condition is truthy; otherwise always fails when reached. Pair with ai.classify or any prior step to fail fast on bad inputs.
 
+**Durable retry:** This control step is not retried durably.
+
 **Config** (at step level):
 
 | Field | Type | Required | Default | Description |

package/dist/skill/reference/workflow-yaml.md

@@ -127,6 +127,44 @@ Step references resolve via Liquid template expressions:
 `steps[].name` is the only handle into the step from later steps. Use
 short, descriptive names (`parse`, `extract`, `score`).
 
+<!-- GENERATED:RETRY_REFERENCE START -->
+## Durable retry policies
+
+_Policy syntax is generated from `WorkflowRetryPolicySchema` and `StepRetryPolicySchema`; step capability notes are generated from `STEP_RETRY_CAPABILITIES` in `@eigenpal/types`._
+
+- Workflow policy values: `automatic`, `never` or an object with `mode` and `maxAttempts`.
+- Step policy values: `inherit`, `automatic`, `never`. `automatic` supports object form with `mode` and `maxAttempts`; `never` supports `{ mode: 'never' }`; `inherit` is string-only.
+- The schema accepts `maxAttempts` from 1 through 10. Studio offers 2-3 total attempts, and the current worker ceiling is 3.
+- `maxAttempts` includes the first attempt. If no policy is set, durable retries are off.
+
+```yaml
+settings:
+  retry:
+    mode: automatic
+    maxAttempts: 3
+
+steps:
+  - name: fetch-catalog
+    type: action.http
+    retry: inherit
+    with:
+      method: GET
+      url: 'https://api.example.com/catalog'
+
+  - name: read-product-page
+    type: action.website-reader
+    retry: never
+    with:
+      url: '{{ input.url }}'
+```
+
+`automatic` retries transient timeouts, rate limits, and selected retryable server failures. Delays use bounded exponential backoff, honor `Retry-After`, and stop after a five-minute elapsed budget.
+
+Durable leaf retries are supported for Website Reader and HTTP `GET`/`HEAD`. Unsafe HTTP methods, Invoke Workflow, AI steps (which may have separate provider request retries), and transforms or file outputs are not durably replayed. Control containers are not attempts themselves; eligible leaves inside sequential If, Switch, and For Each scopes may retry, while concurrent Parallel and Parallel Map branches do not. See each generated step entry for its capability.
+
+Legacy whole-run retry counts are accepted for compatibility but no longer restart failed runs. Move retry intent to the workflow retry default or an eligible step.
+<!-- GENERATED:RETRY_REFERENCE END -->
+
 ### `output`
 
 ```yaml

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eigenpal/cli",
-  "version": "0.10.19",
+  "version": "0.10.21",
   "description": "Eigenpal CLI — author and run document workflows from your terminal. Agent-ready.",
   "keywords": [
     "eigenpal",