Claude VM
c9f1219eaa
After 327649 hit a transient ANCPI 500 on download (succeeded immediately on manual retry), make the pipeline self-heal instead of marking the row failed: 1. downloadDocument retries transient failures (5xx, network/timeout, empty body, non-PDF error page) up to 4 attempts with linear backoff (3/6/9s); a 4xx is permanent and stops immediately. The %PDF guard stays — a bad body is now retried rather than thrown on the first try. 2. pollUntilComplete tolerates a transient error on a single poll: it logs and continues to the next cycle instead of throwing out of the whole batch (one ANCPI blip during polling no longer fails a paid order). 3. finalizeOrder runs a final retry sweep: any row still failed after the parallel pass is re-attempted once more after a short pause (covers a longer ANCPI blip or a MinIO hiccup). No new charge — the order is already paid. Same downloadDocument + pollUntilComplete hardening ported to eterra-live. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>