resonate-bash — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited resonate-bash (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
resonate-bash is a Resonate MCP tool that runs shell scripts as durable, asynchronous tasks. An agent submits a script, gets a promise ID back immediately, and is notified when the command terminates. The script runs in the background — on the local host, inside a Docker container, or in a remote sandbox — and outlives the session it was submitted from.
The polling loop runs in the shell, not in the model. The model is not invoked during the wait. That is the entire point.
Reach for resonate-bash when any of the following is true:
Keep regular Bash (foreground or run_in_background: true) for fast commands, single-session work where survival doesn't matter, or non-idempotent fire-then-poll patterns the durable runtime would amplify (the script restarts from the top on crash — guard with check-then-trigger if a side effect must not double-fire).
resonate-bash is good atLong-running polling loops. Waiting for an external system to reach a state — a CI run finishes, a deploy goes live, DNS propagates, an image-generation job completes, a Tensorlake sandbox returns, a BigQuery export job finishes. The until X; sleep N; done loop runs in the shell, not in the model.
{
"id": "ci-watch-2026-05-21",
"script": "until gh run view 12345 --json status -q .status | grep -q completed; do sleep 60; done",
"timeout_ms": 3600000
}Operations that need to outlive the current session. Promises live on the Resonate server, not in the calling Claude Code session. If the laptop closes, the host hiccups, or a new conversation starts tomorrow, the work continues. A later session can look up the promise ID and read the result via promise-get or promise-search.
Named, queryable state. Promise IDs are durable identifiers. Prefix them by project and date (ci-watch-2026-05-21, dns-propagation-2026-05-21, image-gen-2026-05-21), then filter promise-search later via the tags parameter to audit what fired across days. Cross-conversation lookup isn't automatic — a later session only finds the ID if it was recorded somewhere that session reads (a handoff note, the prompt the operator provides).
Fire-and-watch coordination with external systems. Most CI tools, deploy platforms, image-generation APIs, and data-export jobs expose a status endpoint but no webhook. resonate-bash is the right shape for that: submit the work, poll in the shell, get notified on completion.
Composable with the other Resonate promise primitives. The same promise IDs work with promise-create, promise-listen, and promise-settle. A one-off script can be promoted into a multi-step durable workflow later without re-architecture.
| Parameter | Required | Default | Description |
|---|---|---|---|
script | yes | — | Inline bash script. Base64-encoded into param.data for you. |
target | no | bash:// | Where the script runs. See target addresses. |
timeout_ms | no | 5 min | Promise deadline relative to now. |
id | no | bash-<millis>-<nanos> | Deterministic promise id for idempotency. Always set this for queryability. |
tags | no | — | JSON object merged into promise tags. resonate:target is set automatically. |
The tool registers a listener and resolves via channel notification when the script terminates, returning {exit_code, stdout, stderr}.
| Address | Where it runs | Notes |
|---|---|---|
bash:// | Local shell on the resonate host | Default if target omitted |
bash://docker/<image> | docker run --rm <image> bash -c <script> | Image required; the resonate host must have Docker |
bash://tensorlake/<image> | Tensorlake Sandboxes API | <image> optional — empty path uses Tensorlake's default sandbox. Requires TENSORLAKE_API_KEY on the resonate process |
| Variable | Meaning |
|---|---|
RESONATE_PROMISE_ID | The promise/task id |
RESONATE_PROMISE_CREATED_AT | ms since epoch — stable across retries |
RESONATE_PROMISE_TIMEOUT_AT | ms since epoch — stable across retries |
Loop until `$RESONATE_PROMISE_TIMEOUT_AT`, not for a fixed duration. That's what keeps a restart-from-top retry idempotent.
signaled) → treated as infrastructure failure: the lease expires and the message is redispatched to a fresh worker. Don't rely on signals to short-circuit a workflow.check-then-trigger + poll so a restart does not double-fire.id. Auto-generated IDs are unqueryable and hostile to handoffs.ci-watch-2026-05-21, dns-propagation-2026-05-21, image-gen-2026-05-21.tags: { project: "<name>" } so promise-search can filter cleanly.resonate-bash is delivered through the Resonate MCP. The setup is the same regardless of the IDE — a local Resonate server, a Claude Code MCP entry, and (today) one preview-channel flag on the claude CLI.
$PATH.Intel Mac and Linux note: paths below assume/opt/homebrew/bin/resonate(Apple Silicon Homebrew). On Intel Mac use/usr/local/bin/resonate; on Linux, the path the package manager / installer chose.
brew install resonatehq/tap/resonate
resonate --version # expect 0.9.7 or newerA single binary serves both as the server (resonate dev / resonate serve) and as the MCP shim Claude talks to (resonate mcp).
Two options. Start with 2a to confirm everything works, then switch to 2b for a persistent install.
Port 8888 is used throughout this guide to avoid colliding with resonate dev's default port 8001 (some users already have a server on that port). Pick whatever you want — just keep it consistent across the server, the plist, and the MCP --server URL in step 3.
2a. Foreground (temporary):
# Only if you'll target bash://tensorlake/...
export TENSORLAKE_API_KEY="tl_apiKey_REPLACE_ME"
resonate dev \
--server-port 8888 \
--transports-bash-exec-enabled trueThe --transports-bash-exec-enabled flag requires an explicit true / false — a bare flag will error with a value is required for '--transports-bash-exec-enabled <BOOL>'.
Verify in another shell:
curl -s http://localhost:8888/health # → 200 OK2b. Background via launchd (macOS persistent install):
Write ~/Library/LaunchAgents/io.resonatehq.resonate.dev.plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>io.resonatehq.resonate.dev</string>
<key>ProgramArguments</key>
<array>
<string>/opt/homebrew/bin/resonate</string>
<string>dev</string>
<string>--server-port</string>
<string>8888</string>
<string>--transports-bash-exec-enabled</string>
<string>true</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>StandardOutPath</key>
<string>/tmp/resonate-dev.log</string>
<key>StandardErrorPath</key>
<string>/tmp/resonate-dev.log</string>
</dict>
</plist>If you target bash://tensorlake/..., add an EnvironmentVariables block to the <dict> above so the API key is visible to the resonate process (not just your shell):
<key>EnvironmentVariables</key>
<dict>
<key>TENSORLAKE_API_KEY</key>
<string>tl_apiKey_REPLACE_ME</string>
</dict>Load it:
launchctl load ~/Library/LaunchAgents/io.resonatehq.resonate.dev.plist
launchctl list | grep resonate # expect PID, exit code 0
curl -s http://localhost:8888/health # → 200 OKRestart cheat-sheet:
| When | Command |
|---|---|
| Changed the binary or want a clean restart | launchctl kickstart -k gui/$(id -u)/io.resonatehq.resonate.dev |
Changed EnvironmentVariables or ProgramArguments in the plist | launchctl unload <plist> && launchctl load <plist> (kickstart will not pick up new env vars) |
Logs: tail -f /tmp/resonate-dev.log.
The plist stores any API keys in plaintext under your home directory. For a hardened setup, source them from Keychain in a wrapper script and exec resonate from there.Edit ~/.claude.json. The file has many top-level keys and may already contain other MCP servers under mcpServers — merge in the resonate entry, don't replace the file or the mcpServers block:
{
"mcpServers": {
// ...existing entries stay here...
"resonate": {
"type": "stdio",
"command": "/opt/homebrew/bin/resonate",
"args": ["mcp", "--server", "http://localhost:8888"],
"env": {}
}
}
}If you used a non-8888 port in step 2, update the --server URL here to match.
The mcp__resonate__resonate-bash tool ships behind a Claude Code preview channel. Add the flag to your claude alias in ~/.zshrc (or ~/.bashrc):
alias claude='claude --dangerously-load-development-channels server:resonate'Reload the shell: source ~/.zshrc.
Open a fresh claude session and run:
/mcpresonate should be listed and connected. Then exercise the tool with a real durable promise:
Please watch my desktop for a file Resonate.md to appear, with resonate.Claude should call mcp__resonate__resonate-bash with a poll-until-exists script. Touch the file in another shell — Claude will be notified the moment the promise resolves.
Follow-ups that exercise more of the surface:
How did you do that? Show me the promise. And show me the script.
What else can you use resonate for? Give me three examples.
Run echo hello from $RESONATE_PROMISE_ID on tensorlake.resonate-bash lives in the same promise namespace as the other MCP tools. Once a script is submitted you can:
promise-get { id } — read state and value at any time, from any session.promise-listen { id } — block on resolution (useful for cross-session "wait for the thing the previous session started").promise-search { tags: { project: "..." } } — audit what fired and when.promise-settle { id, state: "resolved" | "rejected", value } — externally resolve a coordination promise. Pair a resonate-bash poll loop with an externally-settled promise for human-in-the-loop checkpoints.A one-off durable script that earns reuse (3+ uses, or it encodes a hard-won gotcha) is the right candidate for promotion into a registered workflow via one of the per-SDK skills.
| Symptom | Likely cause | Fix | |||
|---|---|---|---|---|---|
/mcp doesn't show resonate | MCP entry missing from ~/.claude.json, or the server isn't running | curl http://localhost:8888/health; check the JSON entry | |||
mcp__resonate__resonate-bash tool absent in Claude | Missing --dangerously-load-development-channels server:resonate flag | Re-check the alias; restart claude | |||
Promise resolves with TENSORLAKE_API_KEY env var not set | Env var not in resonate process env | For launchd: unload then load (kickstart won't pick up new env). Verify with `ps eww $(launchctl list \ | awk '/resonate/{print $1}') \ | tr ' ' '\n' \ | grep TENSORLAKE` |
Promises stuck pending forever | Bash exec transport not enabled | Confirm --transports-bash-exec-enabled is in the resonate launch args | |||
| Tensorlake sandbox creation hangs | Sandbox readiness timeout (120s) exceeded; bad image name | Check /tmp/resonate-dev.log for tensorlake create errors |
TENSORLAKE_API_KEY is read directly from the resonate process env via std::env::var (not from RESONATE_* config). It must be visible to the resonate process, not just your interactive shell.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.