Skip to main content

Durability & Sandboxing

The runtime-first features you only discover you need after you ship: durable work that survives crashes, human-in-the-loop resume, and sandboxed execution of untrusted commands. All run with no API key.

go run ./examples/<name>/

durable_queue​

Durable work queue with leased workers, durable sleep, park/signal human-in-the-loop, and orphan recovery — so a crashed worker's job is picked up and finished, not lost.

go run ./examples/durable_queue/

Demonstrates:

  • Leased workers with heartbeats and lease TTLs
  • Sleep — durable reschedule after a delay without holding a goroutine
  • Park/signal pattern for human-in-the-loop pauses
  • Orphan recovery: reclaiming runs whose worker died mid-lease

Source: examples/durable_queue

durable_hitl​

Human-in-the-loop approval with checkpoint and resume: the graph pauses at an interrupt node, persists a checkpoint, and resumes from exactly that point once a human approves.

go run ./examples/durable_hitl/

Demonstrates:

  • AddInterruptNode pausing execution with a durable checkpoint
  • Resuming a run from its last checkpoint after an out-of-band approval
  • State survives process restarts

Source: examples/durable_hitl

sandbox_execution​

Process sandbox for running untrusted commands with timeouts and output capture.

go run ./examples/sandbox_execution/

Demonstrates:

  • sandbox.NewProcessSandbox(workDir) — isolated execution environment
  • Stdout/stderr capture
  • Exit code handling
  • Timeout enforcement (10s command killed after 500ms)
  • File I/O within the sandbox working directory
  • Environment variable access
note

Beyond the process backend shown here, Chronos also ships container, Kubernetes-job, and WASM sandbox backends — see the sandbox package.