@vxil/config 0.9.0 → 0.10.0

package/dist/index.d.ts

@@ -129,14 +129,22 @@ export type AuthHookEvent = 'user.created' | 'session.created' | 'session.revoke
  *  jobs retry ladder instead (60 s, 120 s, … backoff) and the last failed
  *  attempt dead-letters the run (`job.dead_lettered`, replayable from the
  *  Jobs page). Each attempt is a billed invocation and carries the SAME
- *  `idempotency_key` — dedupe on it. Effective attempts =
- *  min(maxAttempts, the project's `jobs.retry.defaultMaxAttempts`, default 5).
+ *  `idempotency_key` — dedupe on it. Effective attempts on queue / webhook /
+ *  cmsHook / authHook = min(maxAttempts, the project's
+ *  `jobs.retry.defaultMaxAttempts`, default 5); on `cron` and the async `http`
+ *  lane the binding's maxAttempts IS the budget (it becomes the schedule's /
+ *  the async run's own max_attempts), whatever the project default.
  *  A handler that partially writes and then fails re-fires its downstream
  *  events on EVERY attempt, so the chain is a tree (up to maxAttempts children
  *  per hop): the causal-depth guard bounds its length (32 hops), not its size —
  *  the breaker, the loop guard, the dead-letter quota and the daily share do.
- *  Write only once you will return 2xx, or dedupe on idempotency_key. Not accepted on `http` (it returns its
- *  real status to its caller) or `cron` (a retry would overlap the next tick). */
+ *  Write only once you will return 2xx, or dedupe on idempotency_key.
+ *  On `cron` (2026-10-03) a failed tick is re-delivered the same way — set
+ *  `overlap: 'skip'` beside it so a tick that is still retrying never runs
+ *  next to the following one. On `http` it applies to the ASYNC lane only
+ *  (`X-Vxil-Async: 1`): a 408 / 429 / 5xx answer is re-delivered up to
+ *  maxAttempts; a synchronous invoke always returns the function's own status
+ *  to its caller and is never retried. */
 export interface FunctionTriggerRetry {
     /** 1–5 attempts in all (1 = a failed attempt dead-letters at once, no re-delivery) */
     maxAttempts: number;
@@ -147,6 +155,7 @@ export interface FunctionTriggerRetry {
 export type FunctionTrigger = {
     kind: 'http';
     path?: string;
+    retry?: FunctionTriggerRetry;
 }
 /** `overlap: 'skip'` (2026-10-01): a due tick fires nothing while the
  *  previous tick's run is still open (queued / running / retrying / waiting /
@@ -156,6 +165,7 @@ export type FunctionTrigger = {
     kind: 'cron';
     schedule: string;
     overlap?: 'allow' | 'skip';
+    retry?: FunctionTriggerRetry;
 } | {
     kind: 'queue';
     source: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vxil/config",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Typed vxil.config.ts authoring for the vxil backend platform — defineConfig, feature and cms field definitions (published for @vxil/cli).",
   "license": "MIT",
   "homepage": "https://vxil.com",
@@ -23,7 +23,7 @@
     "!src/**/*.test.ts"
   ],
   "dependencies": {
-    "@vxil/feature-configs": "0.8.0"
+    "@vxil/feature-configs": "0.9.0"
   },
   "publishConfig": {
     "access": "public"

package/src/index.ts

@@ -170,14 +170,22 @@ export type AuthHookEvent = 'user.created' | 'session.created' | 'session.revoke
  *  jobs retry ladder instead (60 s, 120 s, … backoff) and the last failed
  *  attempt dead-letters the run (`job.dead_lettered`, replayable from the
  *  Jobs page). Each attempt is a billed invocation and carries the SAME
- *  `idempotency_key` — dedupe on it. Effective attempts =
- *  min(maxAttempts, the project's `jobs.retry.defaultMaxAttempts`, default 5).
+ *  `idempotency_key` — dedupe on it. Effective attempts on queue / webhook /
+ *  cmsHook / authHook = min(maxAttempts, the project's
+ *  `jobs.retry.defaultMaxAttempts`, default 5); on `cron` and the async `http`
+ *  lane the binding's maxAttempts IS the budget (it becomes the schedule's /
+ *  the async run's own max_attempts), whatever the project default.
  *  A handler that partially writes and then fails re-fires its downstream
  *  events on EVERY attempt, so the chain is a tree (up to maxAttempts children
  *  per hop): the causal-depth guard bounds its length (32 hops), not its size —
  *  the breaker, the loop guard, the dead-letter quota and the daily share do.
- *  Write only once you will return 2xx, or dedupe on idempotency_key. Not accepted on `http` (it returns its
- *  real status to its caller) or `cron` (a retry would overlap the next tick). */
+ *  Write only once you will return 2xx, or dedupe on idempotency_key.
+ *  On `cron` (2026-10-03) a failed tick is re-delivered the same way — set
+ *  `overlap: 'skip'` beside it so a tick that is still retrying never runs
+ *  next to the following one. On `http` it applies to the ASYNC lane only
+ *  (`X-Vxil-Async: 1`): a 408 / 429 / 5xx answer is re-delivered up to
+ *  maxAttempts; a synchronous invoke always returns the function's own status
+ *  to its caller and is never retried. */
 export interface FunctionTriggerRetry {
   /** 1–5 attempts in all (1 = a failed attempt dead-letters at once, no re-delivery) */
   maxAttempts: number;
@@ -187,12 +195,12 @@ export interface FunctionTriggerRetry {
  * authHook fires on ONE auth lifecycle event (default `user.created` — the
  * post-signup hook; at-least-once, ~1min fanout latency). */
 export type FunctionTrigger =
-  | { kind: 'http'; path?: string }
+  | { kind: 'http'; path?: string; retry?: FunctionTriggerRetry }
   /** `overlap: 'skip'` (2026-10-01): a due tick fires nothing while the
    *  previous tick's run is still open (queued / running / retrying / waiting /
    *  delayed) — the slot is counted, never caught up. Default `'allow'`. Every
    *  cron envelope carries `scheduled_for`, the slot it was due for. */
-  | { kind: 'cron'; schedule: string; overlap?: 'allow' | 'skip' }
+  | { kind: 'cron'; schedule: string; overlap?: 'allow' | 'skip'; retry?: FunctionTriggerRetry }
   | { kind: 'queue'; source: string; retry?: FunctionTriggerRetry }
   /** `webhook`: the function is woken by a webhook_subscription fan-out whose
    *  target_url is `<edge>/v1/internal/fn/trigger/<name>?tenant=<id>`. That