feat(api): POST retry from published tepp-retry CLI

ARCHITECTURE.md

@@ -69,7 +69,7 @@ boundaries above remain the target modular MSA architecture.
 | `corpus_split` | cutoff-safe, relation-aware partitioning |
 | `tepp_simulation` | known-truth temporal/event data generation |
 | `validation_core` | RMSE, bias, coverage, graph, Monte Carlo, and exact-head claim-promotion metrics |
-| `tepp_api` | versioned DTO, schema, terminal-result, and export contracts |
+| `tepp_api` | versioned DTO, schema, terminal-result, export contracts, and published `tepp-retry` loopback CLI |
 | `analysis_engine` | bounded cutoff-safe temporal evidence readiness execution and digest-bound terminal artifacts |
 | `episode_membership` | event-time episode membership containment gate |
 | `prompt_source` | prompt boilerplate is not unique latent content and not stopword deletion |

CHANGELOG.d/analysis-run-retry-cli.md

@@ -0,0 +1,3 @@
+### Added
+
+- `tepp_api` GAP-003A retry CLI slice (ADR 0043, active-PR, not implemented-main): naruon and `LineageWeave` mint credential-free `POST /v1/analysis-runs/{run_id}/retry` through the published `tepp-retry` CLI onto spawned `tepp-loopback` TCP. Child `202 Accepted` stays metric-free. Persistence remains GAP-003B.

CHANGELOG.md

@@ -38,6 +38,8 @@ All notable changes to TEPP are documented here. The format follows Keep a Chang
 
 ## [Unreleased]
 
+- `tepp_api` GAP-003A retry CLI slice (ADR 0043, active-PR, not implemented-main): published `tepp-retry` mints typed naruon and `LineageWeave` `POST /v1/analysis-runs/{run_id}/retry` exchanges onto spawned `tepp-loopback` TCP so operators clone a failed or cancelled run without hand-rolled HTTP. Public bind hosts, `localhost`, and non-`https` origins fail closed. Child `202 Accepted` stays metric-free. This does not duplicate retry HTTP (#369), retry consumer parity (#393), execute CLI (#390), cancel CLI (#378), create CLI (#385), status CLI (#392), collection CLI (#371), or lifecycle CLI (#362); persistence remains GAP-003B.
+
 - `tepp_api` adds `lineageweave_analysis_run_retry_exchange`, Naruon compatibility-listener `POST /v1/analysis-runs/{run_id}/retry`, and a `tepp-loopback` TCP retry proof (ADR 0033). Failed and cancelled Naruon runs clone into a metric-free child `202 Accepted`. LineageWeave remains refused on `NaruonLiveService`. GET remains refused there. Not GET-by-id, not lifecycle POST, not an ADR 0014 claim.
 
 - `tepp_api` serves `GET /v1/analysis-runs` on the shared loopback listener (ADR 0031). Operators enumerate accepted, running, cancelled, and terminal runs as metric-free collection rows. Collection bodies refuse RMSE/bias/coverage/SE-gate/scientific-acceptance/`terminal_result` keys. GET-by-id and running/terminal POST remain later GAP-003A slices; this is not an ADR 0014 claim.

DOCUMENTATION.md

@@ -17,6 +17,7 @@ TEPP's approved PRD v0.4 and implementation plan are the primary product baselin
 | Analysis-run collection HTTP doctoring | [`docs/research/analysis-run-collection-http.md`](docs/research/analysis-run-collection-http.md) |
 | Analysis-run retry HTTP doctoring | [`docs/research/analysis-run-retry-http.md`](docs/research/analysis-run-retry-http.md) |
 | Analysis-run retry consumer-parity doctoring | [`docs/research/analysis-run-retry-consumer-parity.md`](docs/research/analysis-run-retry-consumer-parity.md) |
+| Analysis-run retry CLI doctoring | [`docs/research/analysis-run-retry-cli.md`](docs/research/analysis-run-retry-cli.md) |
 | UML/runtime/scientific flows | [`docs/UML.md`](docs/UML.md) |
 | Logical/physical ERD | [`docs/ERD.md`](docs/ERD.md) |
 | Security policy | [`SECURITY.md`](SECURITY.md) |

crates/tepp_api/Cargo.toml

@@ -29,5 +29,11 @@ path = "src/bin/tepp_loopback.rs"
 test = false
 bench = false
 
+[[bin]]
+name = "tepp-retry"
+path = "src/bin/tepp_retry.rs"
+test = false
+bench = false
+
 [lints]
 workspace = true