resonate-basic-ephemeral-world-usage-go — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited resonate-basic-ephemeral-world-usage-go (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Version note. The Go SDK's first tagged release is0.1.0. The tag is0.1.0, notv0.1.0, sogo get …@latestdoes not resolve to it (it walksmaininstead and returns a newer pseudo-version). Pin the tag explicitly — see Install below. APIs may still change before a1.0. Every code block here is verified against the0.1.0tag source and theresonatehq-examples/*-gorepos.
The ephemeral world is wherever your Go program starts: main(), an HTTP handler, a CLI entry point, a background goroutine. You use a *resonate.Resonate instance to register durable functions and invoke them top-level. Once an invocation starts, it crosses into the durable world and Resonate guarantees its completion — retries on failure, resumes after crashes, continues across process restarts.
This skill covers the Client API surface only. The Durable World (Context APIs inside workflow functions) is covered in resonate-basic-durable-world-usage-go.
go get github.com/resonatehq/[email protected]The tag on GitHub is 0.1.0 (no v prefix), so this is not the same as go get …@latest — @latest walks main past the tag and resolves to a newer pseudo-version instead. Requesting the tag by name resolves correctly: the module proxy mints the pseudo-version pinned to that exact commit (verify with curl -s https://proxy.golang.org/github.com/resonatehq/resonate-sdk-go/@v/0.1.0.info). Pin a later commit the same way (@<short-sha>) for reproducible builds ahead of the next tag.
Core imports:
import (
resonate "github.com/resonatehq/resonate-sdk-go"
"github.com/resonatehq/resonate-sdk-go/localnet" // zero-dependency dev
"github.com/resonatehq/resonate-sdk-go/httpnet" // named worker groups
)A complete one-file program: register, run, read, stop.
package main
import (
"context"
"fmt"
"log"
"time"
resonate "github.com/resonatehq/resonate-sdk-go"
)
type GreetArgs struct {
Name string `json:"name"`
}
func greet(_ *resonate.Context, args GreetArgs) (string, error) {
return fmt.Sprintf("hello, %s!", args.Name), nil
}
func main() {
r, err := resonate.New(resonate.Config{URL: "http://localhost:8001"})
if err != nil {
log.Fatalf("resonate.New: %v", err)
}
defer func() { _ = r.Stop() }()
greetFn, err := resonate.Register(r, "greet", greet)
if err != nil {
log.Fatalf("Register: %v", err)
}
ctx := context.Background()
id := fmt.Sprintf("hello-%d", time.Now().UnixNano())
h, err := greetFn.Run(ctx, id, GreetArgs{Name: "world"})
if err != nil {
log.Fatalf("Run: %v", err)
}
out, err := h.Result(ctx)
if err != nil {
log.Fatalf("Result: %v", err)
}
fmt.Println(out) // hello, world!
}r, err := resonate.New(resonate.Config{URL: "http://localhost:8001"})Config fields:
| Field | Type | Default | Purpose |
|---|---|---|---|
URL | string | unset | Shorthand HTTP transport at this address (default group "default"). |
Network | Network | nil | Explicit transport — use when URL is empty. |
Heartbeat | Heartbeat | AsyncHeartbeat at TTL/2 | Keeps acquired task leases alive. |
Encryptor | Encryptor | NoopEncryptor | Codec encryption at the durability boundary. |
TTL | time.Duration | 60s | Per-task lease duration. |
Prefix | string | empty | Prepended (with :) to every promise/task ID. |
Token | string | unset | Sent as Bearer auth on every protocol request. |
Network precedence: Config.URL → Config.Network → RESONATE_URL env var → resonate.ErrNetworkRequired. The only env var the constructor reads is RESONATE_URL.
pid := "dev-worker"
r, err := resonate.New(resonate.Config{
Network: localnet.NewLocal("default", &pid),
Heartbeat: resonate.NoopHeartbeat{}, // required — localnet has no lease endpoint
})There is no Group field on Config. Pass the transport explicitly:
r, err := resonate.New(resonate.Config{
Network: httpnet.NewHTTP("http://localhost:8001", httpnet.HTTPOptions{
Group: "worker-group-a",
}),
})r, err := resonate.New(resonate.Config{
URL: "https://resonate.example.com",
Token: os.Getenv("RESONATE_TOKEN"),
})resonate.RegisterRegister is a package-level generic function (Go has no method-level generics). It takes the instance, a name, and the function; returns a typed *RegisteredFunc[A, R] and an error.
greetFn, err := resonate.Register(r, "greet", greet)
if err != nil {
log.Fatalf("Register: %v", err)
}Registered functions must have the canonical signature func(*resonate.Context, A) (R, error). Use struct{} for A or R when the function takes no input or produces no meaningful result.
RegisteredFunc.RunInvokes a registered function in the same process and returns a typed *TypedHandle[R]. The returned handle is durable — the function will complete even if the process crashes and another worker picks it up.
h, err := greetFn.Run(ctx, "greet-1", GreetArgs{Name: "world"})
if err != nil {
log.Fatalf("Run: %v", err)
}
result, err := h.Result(ctx) // returns (string, error) — typed
if err != nil {
log.Fatalf("Result: %v", err)
}Pass as a trailing argument to Run:
h, err := greetFn.Run(ctx, "greet-1", GreetArgs{Name: "world"}, resonate.RunOptions{
Timeout: 60 * time.Second,
Target: "poll://any@workers",
Tags: map[string]string{"team": "checkout"},
RetryPolicy: resonate.ConstantRetry{MaxAttempts: 3, Delay: time.Second},
})| Field | Purpose |
|---|---|
Timeout | Caps the root promise deadline. Zero uses DefaultTopLevelTimeout (24h). |
Target | Logical routing address (resonate:target tag). Empty falls back to the configured group. |
Tags | Merged into the root promise's tag set. |
RetryPolicy | Re-execution policy on error. Nil applies DefaultRetryPolicy (exponential, 3 attempts). Only takes effect when this worker wins the create-and-acquire race and runs the function locally; a task picked up by another worker via server push uses DefaultRetryPolicy. |
Version | Reserved — declared but not yet consumed (issue #5). |
Resonate.RPCInvokes a registered function in a remote process by name. Returns an untyped *Handle; the target function does not need to be registered locally.
h, err := r.RPC(ctx, "greet-1", "greet", GreetArgs{Name: "world"})
if err != nil {
log.Fatalf("RPC: %v", err)
}
var result string
if err := h.Result(ctx, &result); err != nil {
log.Fatalf("Result: %v", err)
}RPC accepts an optional resonate.RPCOptions{Timeout, Target, Tags, Version} as a trailing argument.
Resonate.GetGets a handle to an existing execution by promise ID. Returns *resonate.ServerError with Code: 404 when the promise does not exist.
h, err := r.Get(ctx, "greet-1")
if err != nil {
log.Fatalf("Get: %v", err)
}
var result string
if err := h.Result(ctx, &result); err != nil {
log.Fatalf("Result: %v", err)
}RegisteredFunc.Run returns *TypedHandle[R]; call h.Result(ctx) to get (R, error) directly.RPC and Get return *Handle; call h.Result(ctx, &out) and pass a pointer to the target variable.result, err := resonate.ResultOf[string](ctx, h)A rejected promise surfaces as *resonate.ApplicationError (or the deserialized concrete error where available).
0.1.0 shipped two sub-clients on *Resonate for working with durable promises and cron schedules outside the workflow machinery — no registered function, no dispatch tags, just a promise or a schedule you manage directly. Get them via r.Promises() / r.Schedules() (methods, not fields).
r.Promises() — create, get, resolve/reject/cancelctx := context.Background()
// Create a promise settled by some external party (a webhook, an operator).
rec, err := r.Promises().Create(ctx, "order-1", 24*time.Hour, resonate.PromiseCreateOptions{
Param: Order{Item: "book"},
Tags: map[string]string{"kind": "order"},
})
if err != nil {
log.Fatalf("Create: %v", err)
}
// Settle it from anywhere holding the ID.
rec, err = r.Promises().Resolve(ctx, "order-1", Receipt{Total: 42})
// ...or r.Promises().Reject(ctx, "order-1", err) / r.Promises().Cancel(ctx, "order-1", nil)
// Read it back; Value decodes directly into a Go value.
rec, err = r.Promises().Get(ctx, "order-1")
var receipt Receipt
err = rec.Value.Decode(&receipt)Resolve/Reject/Cancel handle the JSON → codec encoding for you (the same Codec the workflow machinery uses) — this is the fix for the old "manual base64 encoding" trap on the low-level Sender().PromiseSettle path (see resonate-human-in-the-loop-pattern-go and resonate-basic-debugging-go for that path, still useful for cross-process/non-Go settlement). Create's timeout is relative to now; <= 0 defaults to resonate.DefaultTopLevelTimeout (24h). Get returns *resonate.ServerError{Code: 404} when the promise does not exist.
r.Schedules() — create, get, delete// A cron schedule creates a fresh promise on every firing, from a promise ID
// template (may include placeholders like {{.timestamp}}).
s, err := r.Schedules().Create(ctx, "nightly", "0 0 * * *", "report-{{.timestamp}}", time.Hour,
resonate.ScheduleCreateOptions{PromiseParam: ReportArgs{Region: "us"}})
if err != nil {
log.Fatalf("Create: %v", err)
}
s, err = r.Schedules().Get(ctx, "nightly")
err = r.Schedules().Delete(ctx, "nightly")This creates the cron-fired promise directly — it is the Go equivalent of Python's resonate.schedules.create(...) sub-client, not the higher-level resonate.schedule(id, cron, fn, args) convenience wrapper that Python, TypeScript, and Rust also expose (which dispatches a registered function on the cron and wires the resonate:target/resonate:origin tags for you). Go's 0.1.0 tag does not have that convenience wrapper yet — to fire a registered function on a schedule, set PromiseTags: map[string]string{"resonate:target": <group>} and shape PromiseParam as map[string]any{"func": "your-fn-name", "args": args} by hand, matching what RegisteredFunc.Run and Resonate.RPC build internally.
defer func() { _ = r.Stop() }()Stop closes the network connection, stops the heartbeat loop, and cancels the background subscription-refresh goroutine. It is idempotent.
Call Stop from processes that should exit after their work finishes: demo binaries, one-shot jobs, CI tasks, examples. Without it, background goroutines keep the process alive after main would otherwise return.
Do not call `Stop` on a long-running worker. Calling it tears down the channels a worker uses to receive and hold work:
The worker process keeps running but silently stops processing. Let SIGINT / SIGTERM end a worker's lifecycle instead.
resonate.New, resonate.Register, Run, RPC, Get, and Result return errors. Use explicit checks; no method chaining.RunOptions, RPCOptions, RunOpts, RPCOpts are plain structs with exported fields. Pass them as trailing arguments; zero values mean "use the default."greetFn carries the type parameters, not r.context.Context (cancellation, deadlines), not the *resonate.Context inside a workflow._ assignment at the call site.60 * time.Second, not raw integers. Durations are native time.Duration throughout the SDK.resonate.New with neither URL nor Network and without RESONATE_URL set — returns ErrNetworkRequired at startup.localnet without Heartbeat: resonate.NoopHeartbeat{} — the default AsyncHeartbeat issues HTTP keep-alive requests that localnet cannot serve; the heartbeat loop errors.Group on Config — there is no Group field. Use httpnet.NewHTTP(..., httpnet.HTTPOptions{Group: "..."}) via Config.Network.r.RPC, greetFn.Run) inside a durable function — those belong to the Ephemeral World. Use ctx.RPC and ctx.Run inside workflows.Stop on a long-running worker (see Stop Semantics above).Config.Version in RunOptions / RPCOptions — the field is declared but not yet consumed.resonate-basic-durable-world-usage-go — Context APIs: ctx.Run, ctx.RPC, ctx.Sleep, ctx.Promise, ctx.Detached, fan-out patterns, retry policies, context accessorsresonate-human-in-the-loop-pattern-go — Promises().Resolve/Reject/Cancel in the human-in-the-loop context, plus the CLI and low-level fallback pathsresonate-durable-sleep-scheduled-work-go — Schedules() in the recurring-work context, and the workaround for dispatching a registered function on a crondurable-execution — foundational concepts; read this first if new to Resonateresonate-defaults — SDK-wide defaults reference (TTL, retry policy, top-level timeout, child timeout)resonate-basic-ephemeral-world-usage-typescript — TypeScript sibling for comparisonresonate-basic-ephemeral-world-usage-rust — Rust sibling for comparison~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.