[kasvith]

Roadmap items 1, 2 (phase 1 and design) and 5. Each commit is one changelog entry and passes the suite on its own.

Changes

Timeouts

• A step's timeout: is now enforced. It was documented but never applied. A slower attempt is stopped and fails with a "timeout" error, which is retried like any other error.
• The workflow timeout: stops a step that's still running. Before, it was only checked between steps. The run fails without a retry and runs its compensations. Parallel branches inherit the run's deadline.
• Steps with a time limit run in a task. That's a step with its own timeout:, or any step in a workflow with one. The task gets a copy of the worker's process dictionary and returns its own, so context, put_context and log capture work as before. Only self() differs. Steps without a limit still run in the worker.
• wait_for_input(..., on_timeout: :fail) now ends the run failed, not cancelled. The timeout worker used to write cancelled straight to the row. That skipped compensations, never notified a parent run, and could overwrite a run that had already moved on. Now it resumes the run with the error, and the executor fails it like any other failure.

Step options

• Time helpers in step options now work. retry: [base: seconds(1)] used to reach the backoff as quoted code. Step options are now evaluated the way workflow options already were.

Versioning, phase 1

• A run no longer completes silently after a deploy removes its step. Before, a run resumed at a step that no longer existed was marked completed and every remaining step was skipped. It now fails with definition_changed and doesn't compensate, so restoring the step and calling Durable.retry/2 finishes it.
• Design doc for phase 2: agents/milestones/M08-workflow-versioning.md covers version pinning. It has three open questions:
  • API shape: several version: blocks in one module, or one module per version.
  • Whether to ship the required migration in 1.2 or wait for 2.0.
  • What happens to a run whose version was deleted.

Formatter

• Follow-up to Add export locals_without_parens option #10: durable now applies its own locals_without_parens, and the dashboard and Phoenix demo import them.

Behaviour changes

These need a note in the 1.2.0 release:

• on_timeout: :fail runs end failed (or compensated), not cancelled.
• A workflow timeout: now interrupts a running step.
• A step timeout: is now enforced.
• Steps with a time limit run in a separate process, so code that relies on self() being the worker behaves differently.

Testing

• Core: 492 tests pass. Credo strict and compile --warnings-as-errors are clean.
• Dashboard: 237 tests pass against the local durable.
• New tests:
  • The deadline stops a running step and the run compensates.
  • A step timeout stops the attempt and it's retried, with put_context and logs kept.
  • on_timeout: :fail fails the run, and a retry waits for the input again.
  • Step options are evaluated.
  • A renamed current step fails the run, and a retry recovers it.