The Dapr SDKs are the easiest way for you to get Dapr into your application. Choose your favorite language and get up and running with Dapr in minutes.
SDK packages
Select your preferred language below to learn more about client, server, actor, and workflow packages.
Client: The Dapr client allows you to invoke Dapr building block APIs and perform each building block’s actions
Server extensions: The Dapr service extensions allow you to create services that can be invoked by other services and subscribe to topics
Actor: The Dapr Actor SDK allows you to build virtual actors with methods, state, timers, and persistent reminders
Workflow: Dapr Workflow makes it easy for you to write long running business logic and integrations in a reliable way
A framework for building LLM-powered autonomous agents that leverages Dapr’s distributed systems capabilities for durable execution, with built-in security, observability, and state management.
.NET SDK packages for developing Dapr applications
Dapr offers a variety of packages to help with the development of .NET applications. Using them you can create .NET clients, servers, and virtual actors with Dapr.
The Dapr .NET SDK supports .NET 8, .NET 9, .NET 10, and .NET 11. Be advised that .NET 8 and .NET 9
reach end of support in November 2026. Support for both will be dropped in Dapr v1.20; only .NET 10 and
.NET 11 will be supported through the end of 2027.
Installation
For the package/API coverage in SDK 1.19.0, see
.NET building block support. Use that release or a later compatible
release for the 1.19 features in these guides.
To get started with the Client .NET SDK, install the Dapr .NET SDK package:
dotnet add package Dapr.Client
Try it out
Put the Dapr .NET SDK to the test. Walk through the .NET quickstarts and tutorials to see Dapr in action:
Choose .NET SDK packages and APIs for Dapr building blocks in SDK 1.19
This guide describes the .NET SDK surface in
v1.19.0.
Use that release or a later compatible release when following these guides. Runtime and component support are
separate from SDK support: installing a package does not enable a runtime API or add capabilities to a component.
Use a Dapr 1.19 runtime for the complete 1.19 API surface, including binary store and newer management operations.
Install the package for the building block you need, for example:
dotnet add package Dapr.Client
Keep Dapr package versions aligned. Experimental APIs can produce compiler diagnostics such as
DAPR_CONVERSATION, DAPR_CRYPTOGRAPHY, and DAPR_DISTRIBUTEDLOCK; see
experimental attributes before opting in.
HTTP verbs, JSON or arbitrary content, headers and query parameters, response/status inspection, generated gRPC clients through the Dapr proxy, and legacy InvokeMethodGrpcAsync protobuf calls. Prefer native HTTP/gRPC clients for new applications.
Single and bulk reads/writes/deletes, ETags, consistency/concurrency options, transactions, metadata/TTL, and component-dependent queries. Dapr.Client additionally exposes byte-state methods and StateEntry<T>.
Stream or memory uploads, overwrite control, chunked or stream downloads, buffered byte downloads, and deletion. No public list, range-read, or file-metadata API is exposed by this SDK release.
Dapr.Client: InvokeBindingAsync; ASP.NET Core or gRPC callbacks for input
Output operations with typed JSON requests/responses or raw bytes and metadata; input events through app callbacks. Operations and payload formats are component-specific.
Dapr.Actors.Next and the original Dapr.Actors package family
Generated proxies/dispatch, dynamic invocation, state/cache management, lifecycle and turn hooks, reentrancy, timers/reminders and their management APIs, pub/sub streams, state migration, state machines, and in-memory testing. The original SDK retains its distinct remoting/JSON proxy and HTTP hosting APIs; it is not API-compatible with Actors Next.
Single and bulk reads with metadata, generated startup-loaded secret properties, and secret-backed IConfiguration. There are no create, update, delete, or secret-watch methods.
Fetch selected/all keys, subscribe to updates, unsubscribe by ID, and snapshot or streaming IConfiguration providers with optional non-blocking startup. These APIs read/watch configuration; they do not write it.
Attempt acquisition with an owner and expiry, automatic unlock through IAsyncDisposable, and explicit unlock with status reporting. No wait-until-acquired or lease-renewal API. Legacy DaprClient.Lock/Unlock have different response shapes.
Buffered and streaming encryption/decryption, key-wrap and data-cipher selection, decryption-key override, and configurable streaming block size. The SDK does not expose the runtime’s subtle key/sign/verify APIs.
Role-based text messages, tools/tool choices and returned tool calls, context IDs, metadata/parameters, PII scrubbing, temperature, response schema, prompt cache retention, and model/token usage results. IChatClient maps a subset of these features. Neither client provides token streaming in this release.
Durable orchestration, activities/children/detached workflows, timers/events, retries, bounded parallelism, continuation, custom status, multi-app routing, patch/name versioning, custom serialization, history propagation/caching, alpha binary payload references, and instance management including waits, listing, history, and rerun.
Shared client behavior
Reuse long-lived clients, preferably through their dependency injection registration extensions. Most dedicated
clients default to singleton registration and inherit common endpoint, API token, JSON and gRPC channel settings.
Pass cancellation tokens to network operations and asynchronous stream enumeration; an HTTP timeout setting is
not a deadline for every gRPC operation.
Do not assume all clients have identical failure behavior. In particular, see the
state client’s release-specific cancellation behavior,
inspect bulk publishing failures, observe dynamic subscription completion, and check explicit unlock status.
The SDK source at the version linked above is the reference for public signatures. The task-focused guides linked
in the table distinguish SDK functionality from runtime/component requirements and identify APIs that remain
available only on the older DaprClient surface.
1.2 - Getting started with the Dapr client .NET SDK
How to get up and running with the Dapr .NET SDK
The Dapr client package allows you to interact with other Dapr applications from a .NET application.
Note
If you haven’t already, try out one of the quickstarts for a quick walk-through on how to use the Dapr .NET SDK with an API building block.
We will only include the dependency injection registration for the DaprClient in the first example
(service invocation). In nearly all other examples, it’s assumed you’ve already registered the DaprClient in your
application in the latter examples and have injected an instance of DaprClient into your code as an instance named
client.
Invoke a service
HTTP
You can either use the DaprClient or System.Net.Http.HttpClient to invoke your services.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprClient();varapp=builder.Build();usingvarscope=app.Services.CreateScope();varclient=scope.ServiceProvider.GetRequiredService<DaprClient>();// Invokes a POST method named "deposit" that takes input of type "Transaction"vardata=new{id="17",amount=99m};varaccount=awaitclient.InvokeMethodAsync<Account>("routing","deposit",data,cancellationToken);Console.WriteLine("Returned: id:{0} | Balance:{1}",account.Id,account.Balance);
usingMicrosoft.Extensins.Hosting;usingMicrosoft.Extensions.DependencyInjection;varbuilder=Host.CreateApplicationBuilder(args);builder.Services.AddDaprClient();varapp=builder.Build();usingvarscope=app.Services.CreateScope();varclient=scope.ServiceProvider.GetRequiredService<DaprClient>();// Invokes a POST method named "deposit" that takes input of type "Transaction"vardata=new{id="17",amount=99m};varaccount=awaitclient.InvokeMethodAsync<Account>("routing","deposit",data,cancellationToken);Console.WriteLine("Returned: id:{0} | Balance:{1}",account.Id,account.Balance);
varclient=DaprClient.CreateInvokeHttpClient(appId:"routing");// To set a timeout on the HTTP client:client.Timeout=TimeSpan.FromSeconds(2);vardeposit=newTransaction{Id="17",Amount=99m};varresponse=awaitclient.PostAsJsonAsync("/deposit",deposit,cancellationToken);varaccount=awaitresponse.Content.ReadFromJsonAsync<Account>(cancellationToken:cancellationToken);Console.WriteLine("Returned: id:{0} | Balance:{1}",account.Id,account.Balance);
gRPC
You can use the DaprClient to invoke your services over gRPC.
Visit .NET SDK examples for code samples and instructions to try out pub/sub
Interact with output bindings
When calling InvokeBindingAsync, you have the option to handle serialization and encoding yourself,
or to have the SDK serialize it to JSON and then encode it to bytes for you.
Important
Bindings differ in the shape of data they expect, take special note and ensure that the data you
are sending is handled accordingly. If you are authoring both an output and an input, make sure
that they both follow the same conventions for serialization.
Manual serialization
For most scenarios, you’re advised to use this overload of InvokeBindingAsync as it gives you clarity and control over
how the data is being handled.
In this example, the data is sent as the UTF-8 byte representation of the string.
usingvarclient=newDaprClientBuilder().Build();varrequest=newBindingRequest("send-email","create"){// note: This is an example payload for the Twilio SendGrid binding Data=Encoding.UTF8.GetBytes("<h1>Testing Dapr Bindings</h1>This is a test.<br>Bye!"),Metadata={{"emailTo","customer@example.com"},{"subject","An email from Dapr SendGrid binding"},},}awaitclient.InvokeBindingAsync(request);
Automatic serialzation and encoding
In this example, the data is sent as a UTF-8 encoded byte representation of the value serialized to JSON.
usingvarclient=newDaprClientBuilder().Build();varemail=new{// note: This is an example payload for the Twilio SendGrid binding data="<h1>Testing Dapr Bindings</h1>This is a test.<br>Bye!",metadata=new{emailTo="customer@example.com",subject="An email from Dapr SendGrid binding",},};awaitclient.InvokeBindingAsync("send-email","create",email);
Prior to retrieving secrets, it’s important that the outbound channel be registered and ready or the SDK will be unable
to communicate bidirectionally with the Dapr sidecar. The SDK provides a helper method intended to be used for this
purpose called CheckOutboundHealthAsync. This isn’t referring to outbound from the SDK to the runtime, so much as
outbound from the Dapr runtime back into the client application using the SDK.
It’s important to note that this and the WaitForSidecarAsync methods perform nearly identical operations; WaitForSidecarAsync
polls the CheckOutboundHealthAsync endpoint indefinitely until it returns a healthy status value. They are intended
exclusively for situations like secrets or configuration retrieval. Using them in other scenarios will result in
unintended behavior (e.g., the endpoint never being ready because there are no registered components that use an
“outbound” channel).
This behavior will be changed in a future release and should only be relied on sparingly.
// Get an instance of the DaprClient from DIvarclient=scope.GetRequiredService<DaprClient>();// Wait for the outbound channel to be established - only use for this scenario and not generallyawaitclient.WaitForOutboundHealthAsync();// Retrieve a key-value-pair-based secret - returns a Dictionary<string, string>varsecrets=awaitclient.GetSecretAsync("mysecretstore","key-value-pair-secret");Console.WriteLine($"Got secret keys: {string.Join(",", secrets.Keys)}");
// Get an instance of the DaprClient from DIvarclient=scope.GetRequiredService<DaprClient>();// Wait for the outbound channel to be established - only use for this scenario and not generallyawaitclient.WaitForOutboundHealthAsync();// Retrieve a key-value-pair-based secret - returns a Dictionary<string, string>varsecrets=awaitclient.GetSecretAsync("mysecretstore","key-value-pair-secret");Console.WriteLine($"Got secret keys: {string.Join(",", secrets.Keys)}");// Retrieve a single-valued secret - returns a Dictionary<string, string>// containing a single value with the secret name as the keyvardata=awaitclient.GetSecretAsync("mysecretstore","single-value-secret");varvalue=data["single-value-secret"]Console.WriteLine("Got a secret value, I'm not going to be print it, it's a secret!");
// Retrieve a specific set of keys.varspecificItems=awaitclient.GetConfiguration("configstore",newList<string>(){"key1","key2"});Console.WriteLine($"Here are my values:\n{specificItems[0].Key} -> {specificItems[0].Value}\n{specificItems[1].Key} -> {specificItems[1].Value}");// Retrieve all configuration items by providing an empty list.varspecificItems=awaitclient.GetConfiguration("configstore",newList<string>());Console.WriteLine($"I got {configItems.Count} entires!");foreach(variteminconfigItems){Console.WriteLine($"{item.Key} -> {item.Value}")}
Subscribe to Configuration Keys
// The Subscribe Configuration API returns a wrapper around an IAsyncEnumerable<IEnumerable<ConfigurationItem>>.// Iterate through it by accessing its Source in a foreach loop. The loop will end when the stream is severed// or if the cancellation token is cancelled.varsubscribeConfigurationResponse=awaitdaprClient.SubscribeConfiguration(store,keys,metadata,cts.Token);awaitforeach(varitemsinsubscribeConfigurationResponse.Source.WithCancellation(cts.Token)){foreach(variteminitems){Console.WriteLine($"{item.Key} -> {item.Value}")}}
Distributed lock (Alpha)
Acquire a lock
usingSystem;usingDapr.Client;usingMicrosoft.Extensions.Hosting;usingMicrosoft.Extensions.DependencyInjection;namespaceLockService{classProgram{ [Obsolete("Distributed Lock API is in Alpha, this can be removed once it is stable.")]staticasyncTaskMain(string[]args){conststringdaprLockName="lockstore";conststringfileName="my_file_name";varbuilder=Host.CreateDefaultBuilder();builder.ConfigureServices(services=>{services.AddDaprClient();});varapp=builder.Build();usingvarscope=app.Services.CreateScope();varclient=scope.ServiceProvider.GetRequiredService<DaprClient>();// Locking with this approach will also unlock it automatically, as this is a disposable objectawaitusing(varfileLock=awaitclient.Lock(DAPR_LOCK_NAME,fileName,"random_id_abc123",60)){if(fileLock.Success){Console.WriteLine("Success");}else{Console.WriteLine($"Failed to lock {fileName}.");}}}}}
While the .NET SDK provides a way to poll for the sidecar health, it is not generally recommended that developer
utilize this functionality unless they are explicitly using Dapr to also retrieve secrets or configuration values.
WaitForSidecarAsync continuously polls CheckOutboundHealthAsync until it returns a successful status code.
The “outbound” direction refers to the communication outbound from the Dapr runtime to your application. If your
application doesn’t use actors, secret management, configuration retrieval or workflows, the runtime will not attempt
to create an outbound connection. This means that if your application takes a dependency on WaitForSidecarAsync
without using any of these Dapr components, it will indefinitely lock up during startup as the endpoint will never be established.
A future release will remove these methods altogether and perform this as an internal SDK operation, so neither
method should be relied on in general. Reach out in the Discord #dotnet-sdk channel for more clarification as
to whether your scenario may necessitate using this, but in most situations, these methods should not be required.
A DaprClient holds access to networking resources in the form of TCP sockets used to communicate with the Dapr sidecar. DaprClient implements IDisposable to support eager cleanup of resources.
Dependency Injection
To get started with ASP.NET Core dependency injection, install the Dapr.AspNetCore package from NuGet:
dotnet add package Dapr.AspNetCore
The AddDaprClient() method will register the Dapr client with ASP.NET Core dependency injection. This method accepts an optional
options delegate for configuring the DaprClient and an ServiceLifetime argument, allowing you to specify a different lifetime
for the registered resources instead of the default Singleton value.
The following example assumes all default values are acceptable and is sufficient to register the DaprClient.
services.AddDaprClient();
The optional configuration delegates are used to configure DaprClient by specifying options on the provided DaprClientBuilder
as in the following example:
The another optional configuration delegate overload provides access to both the DaprClientBuilder as well as an IServiceProvider
allowing for more advanced configurations that may require injecting services from the dependency injection container.
Rather than using dependency injection, a DaprClient can also be built using the static client builder.
For best performance, create a single long-lived instance of DaprClient and provide access to that shared instance throughout your application. DaprClient instances are thread-safe and intended to be shared.
Avoid creating a DaprClient per-operation and disposing it when the operation is complete.
Configuring DaprClient
A DaprClient can be configured by invoking methods on DaprClientBuilder class before calling .Build() to create the client. The settings for each DaprClient object are separate and cannot be changed after calling .Build().
By default, the DaprClientBuilder will prioritize the following locations, in the following order, to source the configuration
values:
The value provided to a method on the DaprClientBuilder (e.g. UseTimeout(TimeSpan.FromSeconds(30)))
The value pulled from an optionally injected IConfiguration matching the name expected in the associated environment variable
The value pulled from the associated environment variable
Default values
Configuring on DaprClientBuilder
The DaprClientBuilder contains the following methods to set configuration options:
UseHttpEndpoint(string): The HTTP endpoint of the Dapr sidecar
UseGrpcEndpoint(string): Sets the gRPC endpoint of the Dapr sidecar
UseGrpcChannelOptions(GrpcChannelOptions): Sets the gRPC channel options used to connect to the Dapr sidecar
UseHttpClientFactory(IHttpClientFactory): Configures the DaprClient to use a registered IHttpClientFactory when building HttpClient instances
UseJsonSerializationOptions(JsonSerializerOptions): Used to configure JSON serialization
UseDaprApiToken(string): Adds the provided token to every request to authenticate to the Dapr sidecar
UseTimeout(TimeSpan): Specifies a timeout value used by the HttpClient when communicating with the Dapr sidecar
Configuring From IConfiguration
Rather than rely on sourcing configuration values directly from environment variables or because the values are sourced
from dependency injected services, another options is to make these values available on IConfiguration.
For example, you might be registering your application in a multi-tenant environment and need to prefix the environment
variables used. The following example shows how these values can be sourced from the environment variables to your
IConfiguration when their keys are prefixed with test_;
varbuilder=WebApplication.CreateBuilder(args);builder.Configuration.AddEnvironmentVariables("test_");//Retrieves all environment variables that start with "test_" and removes the prefix when sourced from IConfigurationbuilder.Services.AddDaprClient();
Configuring From Environment Variables
The SDK will read the following environment variables to configure the default values:
DAPR_HTTP_ENDPOINT: used to find the HTTP endpoint of the Dapr sidecar, example: https://dapr-api.mycompany.com
DAPR_GRPC_ENDPOINT: used to find the gRPC endpoint of the Dapr sidecar, example: https://dapr-grpc-api.mycompany.com
DAPR_HTTP_PORT: if DAPR_HTTP_ENDPOINT is not set, this is used to find the HTTP local endpoint of the Dapr sidecar assuming ‘127.0.0.1’
DAPR_GRPC_PORT: if DAPR_GRPC_ENDPOINT is not set, this is used to find the gRPC local endpoint of the Dapr sidecar assuming ‘127.0.0.1’
DAPR_API_TOKEN: used to set the API Token
Note
If both DAPR_HTTP_ENDPOINT and DAPR_HTTP_PORT are specified, the port value from DAPR_HTTP_PORT will be ignored in favor of the port
implicitly or explicitly defined on DAPR_HTTP_ENDPOINT. The same is true of both DAPR_GRPC_ENDPOINT and DAPR_GRPC_PORT.
As a general rule, either both the HTTP and gRPC ports or both the HTTP and gRPC endpoints should be specified.
Practically speaking, whether HTTP or gRPC is used depends on the specific Dapr services you’re using and whether the .NET
SDK supports an HTTP or gRPC protocol. Over time, the vast majority of the .NET SDK will support gRPC exclusively, but
this will never be the case for all services, so it’s a better practice to future-proof your application and always
specify both values.
Configuring gRPC channel options
Dapr’s use of CancellationToken for cancellation relies on the configuration of the gRPC channel options and this is enabled by default. If you need to configure these options yourself, make sure to enable the ThrowOperationCanceledOnCancellation setting.
The APIs on DaprClient that perform asynchronous operations accept an optional CancellationToken parameter. This follows a standard .NET idiom for cancellable operations. Note that when cancellation occurs, there is no guarantee that the remote endpoint stops processing the request, only that the client has stopped waiting for completion.
When an operation is canceled, it can throw an OperationCanceledException. A canceled request does not imply
that a remote write or external side effect was rolled back.
Understanding DaprClient JSON serialization
Many methods on DaprClient perform JSON serialization using the System.Text.Json serializer. Methods that accept an application data type as an argument will JSON serialize it, unless the documentation clearly states otherwise.
It is worth reading the System.Text.Json documentation if you have advanced requirements. The Dapr .NET SDK provides no unique serialization behavior or customizations - it relies on the underlying serializer to convert data to and from the application’s .NET types.
DaprClient is configured to use a serializer options object configured from JsonSerializerDefaults.Web. This means that DaprClient will use camelCase for property names, allow reading quoted numbers ("10.99"), and will bind properties case-insensitively. These are the same settings used with ASP.NET Core and the System.Text.Json.Http APIs, and are designed to follow interoperable web conventions.
System.Text.Json does not have built-in support for all F# language features. If you are using F# you may want to use one of the converter packages that add support for F#’s features such as FSharp.SystemTextJson.
Simple guidance for JSON serialization
Your experience using JSON serialization and DaprClient will be smooth if you use a feature set that maps to JSON’s type system. These are general guidelines that will simplify your code where they can be applied.
Avoid inheritance and polymorphism
Do not attempt to serialize data with cyclic references
Do not put complex or expensive logic in constructors or property accessors
Use .NET types that map cleanly to JSON types (numeric types, strings, DateTime)
Create your own classes for top-level messages, events, or state values so you can add properties in the future
Design types with get/set properties OR use the supported pattern for immutable types with JSON
Polymorphism and serialization
The System.Text.Json serializer used by DaprClient uses the declared type of values when performing serialization.
This section will use DaprClient.SaveStateAsync<TValue>(...) in examples, but the advice is applicable to any Dapr building block exposed by the SDK.
publicclassWidget{publicstringColor{get;set;}}...// Storing a Widget value as JSON in the state storewidgetwidget=newWidget(){Color="Green",};awaitclient.SaveStateAsync("mystatestore","mykey",widget);
In the example above, the type parameter TValue has its type argument inferred from the type of the widget variable. This is important because the System.Text.Json serializer will perform serialization based on the declared type of the value. The result is that the JSON value { "color": "Green" } will be stored.
Consider what happens when you try to use derived type of Widget:
publicclassWidget{publicstringColor{get;set;}}publicclassSuperWidget:Widget{publicboolHasSelfCleaningFeature{get;set;}}...// Storing a SuperWidget value as JSON in the state storeWidgetwidget=newSuperWidget(){Color="Green",HasSelfCleaningFeature=true,};awaitclient.SaveStateAsync("mystatestore","mykey",widget);
In this example we’re using a SuperWidget but the variable’s declared type is Widget. Since the JSON serializer’s behavior is determined by the declared type, it only sees a simple Widget and will save the value { "color": "Green" } instead of { "color": "Green", "hasSelfCleaningFeature": true }.
If you want the properties of SuperWidget to be serialized, then the best option is to override the type argument with object. This will cause the serializer to include all data as it knows nothing about the type.
Methods on DaprClient will throw DaprException or a subclass when a failure is encountered.
try{varwidget=newWidget(){Color="Green",};awaitclient.SaveStateAsync("mystatestore","mykey",widget);}catch(DaprExceptionex){// handle the exception, log, retry, etc.}
The most common cases of failure will be related to:
Incorrect configuration of Dapr component
Transient failures such as a networking problem
Invalid data, such as a failure to deserialize JSON
In any of these cases you can examine more exception details through the .InnerException property.
1.3 - Dapr Workflow .NET SDK
Get up and running with Dapr Workflow and the Dapr .NET SDK
The Dapr.Workflow package provides typed workflows and activities, a hosted worker, and DaprWorkflowClient
for managing durable instances. These guides describe SDK 1.19.0 or later; use Dapr runtime 1.19 for the full
feature set. Installing the package does not configure a workflow state store or start the required runtime services.
dotnet add package Dapr.Workflow
Task
Guide
Register the worker/client, discover types, and configure transport or history caching
Workflow code must remain deterministic during replay. Keep I/O and other nondeterministic work in activities,
make external side effects idempotent, and preserve compatible code and payloads for retained workflow histories.
1.3.1 - DaprWorkflowClient lifetime management and registration
Configure workflow hosting, discovery, client lifetime, transport limits, and history caching
Install and register
Use Dapr.Workflow 1.19.0 or a later compatible release:
dotnet add package Dapr.Workflow
AddDaprWorkflow registers the workflow worker as a hosted service, its dependencies, and a
DaprWorkflowClient. It works with ASP.NET Core and the .NET Generic Host. Start the host to process work items;
building a service provider alone does not start the worker.
Configure a workflow-compatible state store and the Dapr runtime services described in
Author workflows. Use Dapr runtime 1.19 for the full SDK 1.19 surface.
Automatic discovery and explicit registration
The included source generator discovers accessible, concrete classes deriving from Workflow<TInput, TOutput>
and WorkflowActivity<TInput, TOutput> in the project being compiled. An options delegate is not required.
Abstract classes and open generic types are not registered.
Explicit registration is supported for custom names, delegate implementations, or types not discovered by the
generator. Explicit registrations take precedence over generated registrations:
To scan accessible workflow and activity types in referenced assemblies, add both the property value and
compiler-visible property to the host project’s .csproj. Reference scanning is disabled by default to limit
build overhead:
Discovery does not require opting into name-based workflow versioning.
Avoid colliding simple type names, or register distinct explicit names.
Client lifetime and dependency injection
The client defaults to a singleton. Reuse it instead of constructing a client for every operation, and let the
container manage disposal of injected instances. DaprWorkflowClient implements both IDisposable and
IAsyncDisposable; the DI-registered gRPC transport is managed by the client factory.
The overload with an options delegate accepts lifetime to change the client lifetime:
Use ServiceLifetime.Transient for a new client on each resolution. This does not change the singleton runtime
options/factory or turn the hosted worker into a scoped service.
Inject the concrete DaprWorkflowClient into an ASP.NET Core endpoint:
The public DaprWorkflowClientBuilder in Dapr.Workflow.Registration can also construct a management client
without hosting a worker. Dispose clients you construct yourself. AddDaprWorkflowClient is not a public
registration extension in this release; use AddDaprWorkflow when hosting workflows.
Transport configuration
The hosted worker and DI client resolve their sidecar gRPC address through Dapr configuration, including
DAPR_GRPC_ENDPOINT / DAPR_GRPC_PORT. Configure DAPR_API_TOKEN when the sidecar requires authentication.
Workflow operations use gRPC; changing an HTTP timeout is not a workflow execution deadline.
The DI transport defaults to no SDK send/receive size limit. Explicit limits must be positive byte counts.
Sidecar, scheduler, and state-store limits still apply independently. Consider
data references rather than increasing limits for large payloads.
WorkflowRuntimeOptions.UseGrpcChannelOptions also supports setting the send/receive limits; the registration
does not copy every property of that GrpcChannelOptions object.
Worker history caching
The worker enables stateful history by default: the sidecar can send new events rather than the complete history
on every turn. A cache miss is recovered through the history RPC; the cache is not durable application state.
false; set true to always receive full history and ignore cache settings.
HistoryCacheTtl
null uses a one-hour sliding TTL. Explicit values must be positive.
HistoryCacheMaxInstances
0 uses the built-in limit of 100,000 instances per work-item stream.
HistoryCacheMaxBytes
0 means no byte budget; instance count and TTL still apply.
Capacity values cannot be negative. Entries are evicted using least-recently-used ordering when a capacity limit
is exceeded. This cache does not eliminate workflow replay or automatically cache resolved binary payloads.
MaxConcurrentWorkflows and MaxConcurrentActivities on WorkflowRuntimeOptions are obsolete and have no
effect. Configure dispatch concurrency in the Dapr runtime instead. For concurrency within one workflow, see
bounded parallel processing.
Inject services into activities
Activities are activated through dependency injection in a scope for each activity invocation. Register their
dependencies normally:
WorkflowActivityContext exposes Identifier, InstanceId, TaskExecutionKey (not TaskExecutionId), and
ScheduledEventId, the ID of the TaskScheduled history event for the activity attempt.
The worker uses the runtime’s task execution ID when available, falling back to the numeric task ID otherwise.
SDK activity retries preserve the task execution ID. Combine the key with the workflow instance/app identity when
designing an idempotency key, and persist deduplication atomically with the side effect. The identifier alone does
not make an activity exactly-once. ScheduledEventId can be recorded alongside the instance ID and later passed
to RerunWorkflowFromEventAsync to rerun the workflow from that activity (see
Rerun from a history event).
Replay-safe logging
Use context.CreateReplaySafeLogger<T>() inside workflows. It suppresses log writes during replay. Although
the current factory can activate workflow constructors through DI, the included DAPR1305 analyzer warns against
workflow constructor injection. Keep injected I/O dependencies in activities; they do not make nondeterministic
operations safe during workflow replay.
Use deterministic workflow APIs, activities, retries, timers, events, parallelism, and continuation
This guide covers the authoring APIs in Dapr.Workflow 1.19.0. For runtime prerequisites and the underlying
execution model, see Author workflows. Register the host as described in
client registration.
Define a workflow and activity
Derive from Workflow<TInput, TOutput> and WorkflowActivity<TInput, TOutput>. Workflow input, activity input and
output, custom status, and workflow output are serialized and retained in durable state.
The source generator discovers these classes. You can also explicitly register class or delegate implementations.
Changing a name or payload contract can break replay: keep compatible implementations available or use
workflow versioning.
Keep orchestration deterministic
The worker replays workflow code against recorded history after durable operations complete. Use only durable
workflow tasks inside orchestration:
Need
Workflow API
Current time
context.CurrentUtcDateTime, not DateTime.UtcNow or DateTime.Now.
Unique identifier
context.NewGuid(), not Guid.NewGuid() or random values.
Delay
context.CreateTimer(...), not Task.Delay or thread sleeps.
I/O, remote APIs, mutable configuration, or nondeterministic computation
Put it in an activity and call CallActivityAsync.
Logging
context.CreateReplaySafeLogger<T>() to suppress replay duplicates.
Progress visible to clients
context.SetCustomStatus(value) and state.ReadCustomStatusAs<T>().
Do not use Task.Run, perform network/file access directly, or escape the workflow synchronization context with
ConfigureAwait(false). Task.WhenAll and Task.WhenAny are appropriate for tasks created by workflow APIs.
Use context.IsReplaying for diagnostic suppression, not to change the sequence of durable operations.
Activities may perform I/O and use injected services. They have at-least-once execution semantics, so implement
idempotent side effects even when no explicit retry policy is configured.
Retry activities and child workflows
Attach WorkflowRetryPolicy through WorkflowTaskOptions or ChildWorkflowTaskOptions:
The attempt count includes the first invocation. Retry delays use durable timers. A retry timeout limits further
retry attempts; it is not a hard cancellation deadline for a running activity. With no policy, no SDK retry chain
is configured, but runtime redelivery can still repeat execution.
After retries are exhausted, activity/child failures surface as WorkflowTaskFailedException. Its FailureDetails
contains ErrorType, ErrorMessage, and optional StackTrace; IsCausedBy<TException>() can match resolvable
exception types. Catch this exception to implement explicit compensation, or let the workflow fail. Compensation
is application code, not an automatic rollback of external effects.
Durable timers and external events
Use CreateTimer(TimeSpan, CancellationToken) or CreateTimer(DateTime, CancellationToken) for durable delays.
Derive absolute deadlines from CurrentUtcDateTime. Cancel timers that lose a race with another durable task.
The timeout overload uses a durable timer and cancels the losing wait. Events arriving before a matching wait are
buffered; each event completes one waiter. The .NET worker matches event names case-insensitively, but use consistent
casing across senders and SDKs. A cancellation token on a wait cancels that wait, not the workflow or event producer.
External applications send events using client.RaiseEventAsync. A workflow can send an event to another instance
in its own app without calling a client or performing direct I/O:
SendEvent records a durable action, not a confirmation that the recipient processed the event, and has no
TargetAppId option. Do not assume that signaling a missing or completed instance succeeded at the application level.
Fan-out and bounded parallel processing
For a small, bounded batch, create activity or child-workflow tasks and await Task.WhenAll. For a sliding window,
use the SDK’s ProcessInParallelAsync:
The default concurrency is five and must be positive. Results preserve input order. Failures are collected into
an AggregateException after processing; this is not fail-fast cancellation of other activities.
This bounds outstanding tasks in one workflow, not total worker/runtime concurrency. The helper materializes
the input collection and allocates a result array, so it is not constant-memory processing of an unbounded stream.
Use bounded batches, child workflows, or continuation to limit history growth.
Child and detached workflows
CallChildWorkflowAsync<T> waits for the child’s output and propagates failures. Use ChildWorkflowTaskOptions
to set InstanceId, RetryPolicy, or TargetAppId. Child execution has its own history; recursively terminating a
parent also terminates its children.
Use ScheduleNewDetachedWorkflowAsync for independent work instead:
The returned ID is available when the action is recorded, not when the new workflow completes. The generated ID is
replay-safe if omitted. Detached failures do not fail the originating workflow, and terminating that workflow does
not recursively terminate detached instances. The options overload supports app routing and payload-reference
permission, but rejects retry policies and history propagation.
Return immediately after requesting continuation; the next execution uses the new input rather than completing
the instance with the returned value. Do not schedule more work after the call. Incomplete task results are
discarded; buffered unprocessed external events are preserved by default. Set preserveUnprocessedEvents: false
to discard those events too.
Testing boundaries
The package includes compiler analyzers: DAPR1303 and DAPR1304 warn about input/output mismatches when an
activity or workflow type can be resolved from nameof(...); DAPR1305 warns about workflow constructor
injection. Prefer nameof for local concrete types, but use the registered/canonical string when routing requires
it. Analyzers cannot validate every dynamic name or remote contract, and a warning-free build does not prove
determinism.
Unit-test activity logic and its injected dependencies normally. Workflow unit tests can supply a test double for
the abstract WorkflowContext to check decisions, scheduled calls, and outputs, but do not prove replay or runtime
durability. Exercise replay, failures/redelivery, durable event timeouts, cross-app routing, version upgrades, and
history/payload limits with a running sidecar and representative durable stores.
Configure workflow serialization for the Dapr .NET SDK
Overview
Starting with Dapr .NET SDK v1.17.0, Dapr.Workflow supports pluggable serialization. The SDK continues to use
System.Text.Json by default, but you can now:
Override the default System.Text.Json settings.
Register a custom serializer (for example, MessagePack or BSON).
Serialization configuration is entirely client-side and does not require a specific Dapr runtime version.
For large payloads, workflow data references (alpha) can store
serialized data in a binary store instead of inline in history. Offloading is separate from serializer selection
and happens after serialization. Unlike serializer configuration alone, it requires a runtime with binary-store
support. Registration alone preserves ordinary inline values; select PayloadWritePreference.PreferReference to
enable automatic offloading. Cross-app call inputs remain inline unless the call explicitly allows references.
Forwarding references requires compatible, payload-aware destinations with access to the same referenced
objects. The JavaScript SDK also supports the version-1
reference envelope from @dapr/dapr 3.19.0, provided serialization and storage access are compatible
and payload stages do not require reversal. Do not assume other language SDKs support data references.
Note
This feature requires Dapr .NET SDK v1.17.0 or later.
Compatibility and breaking changes
Warning
Changing serialization can be a breaking change for existing workflows. There is no supported migration path between serialization implementations.
All Dapr SDKs use a standard JSON convention by default. If you change the serialization settings or switch to a custom serializer in your .NET workflows and activities, cross-SDK workflows may fail because other SDKs might not support your custom serialization format.
“camelCase” formatting is used for property names.
Quoted numbers (JSON strings for number properties) are allowed when reading.
This default convention is designed to be compatible with other Dapr language SDKs for multi-app workflows.
Override System.Text.Json defaults
To override the default JSON settings, register the workflow client using the workflow builder so you can provide custom JsonSerializerOptions:
builder.Services.AddDaprWorkflowBuilder(options=>{// Explicit registration is optional.options.RegisterWorkflow<MyWorkflow>();options.RegisterActivity<MyActivity>();}).WithJsonSerializer(newJsonSerializerOptions{PropertyNamingPolicy=null});
The DI-registered client and worker use these settings for payloads. Independently constructed clients must use
compatible settings too. Serializer instances are shared, so custom implementations must be safe for concurrent use.
Custom serialization providers
In SDK 1.19.0, serializers implement IDaprSerializer from Dapr.Common.Serialization.
IWorkflowSerializer from Dapr.Workflow.Serialization extends that shared interface and remains supported,
including by the factory-based registration overload. Registering an IWorkflowSerializer directly in DI is
marked [Obsolete] and will be removed in the SDK release coinciding with Dapr v1.20; prefer implementing
IDaprSerializer for new code. Implement all four methods, including Serialize<T>.
The following example shows a MessagePack-based implementation that encodes data as Base64 strings for transport.
It also requires the MessagePack NuGet package; choose serialization options compatible with your DTO contracts:
usingDapr.Workflow.Serialization;usingMessagePack;publicsealedclassMessagePackWorkflowSerializer:IWorkflowSerializer{privatereadonlyMessagePackSerializerOptions_options;publicMessagePackWorkflowSerializer(MessagePackSerializerOptionsoptions){_options=options;}publicstringSerialize<T>(Tvalue)=>Serialize(value,typeof(T));/// <inheritdoc/>publicstringSerialize(object?value,Type?inputType=null){if(value==null){returnstring.Empty;}vartargetType=inputType??value.GetType();varbytes=MessagePackSerializer.Serialize(targetType,value,_options);returnConvert.ToBase64String(bytes);}/// <inheritdoc/>publicT?Deserialize<T>(string?data){return(T?)Deserialize(data,typeof(T));}/// <inheritdoc/>publicobject?Deserialize(string?data,TypereturnType){if(returnType==null){thrownewArgumentNullException(nameof(returnType));}if(string.IsNullOrEmpty(data)){returndefault;}try{varbytes=Convert.FromBase64String(data);returnMessagePackSerializer.Deserialize(returnType,bytes,_options);}catch(FormatExceptionex){thrownewInvalidOperationException("Failed to decode Base64 data. The input may not be valid MessagePack-serialized data.",ex);}catch(MessagePackSerializationExceptionex){thrownewInvalidOperationException($"Failed to deserialize data to type {returnType.FullName}.",ex);}}}
Register a custom serializer
Register the serializer with the workflow builder:
builder.Services.AddDaprWorkflowBuilder(options=>{// Explicit registration is optional.options.RegisterWorkflow<MyWorkflow>();options.RegisterActivity<MyActivity>();}).WithSerializer(newMessagePackWorkflowSerializer(MessagePackSerializerOptions.Standard));
If you need DI-provided configuration, use the overload that receives an IServiceProvider:
builder.Services.AddDaprWorkflowBuilder(options=>{// Explicit registration is optional.options.RegisterWorkflow<MyWorkflow>();options.RegisterActivity<MyActivity>();}).WithSerializer(serviceProvider=>{varoptions=serviceProvider.GetRequiredService<IOptions<MessagePackSerializerOptions>>().Value;returnnewMessagePackWorkflowSerializer(options);});
Offload large workflow payloads to a binary store and defer reading them with explicit data references
Workflow data references let you keep large payloads out of workflow history. The .NET SDK stores the serialized
payload in a Dapr binary store and records a small reference instead. You can either keep your existing workflow
and activity types and let the SDK retrieve the data automatically, or pass PayloadReference<T> values and read
the data only where it is needed.
Alpha feature
The binary store is an alpha building block and is subject to change. The .NET SDK’s workflow data-reference
implementation is also alpha; its APIs and behavior are subject to change.
These APIs are available from Dapr.Workflow 1.19.0. Earlier packages do not include them.
Cross-app SDK compatibility
Cross-app activity and workflow call inputs are inline by default. When using cross-app workflows with other .NET
applications, register WithBinaryStorePayloads(...) on every participating .NET application (with access to the
same binary store) to preserve compatibility across return values, propagated history, and forwarded references—and
never unregister it once enabled. The JavaScript SDK also
supports the version-1 reference envelope from @dapr/dapr 3.19.0, with compatible serialization and
storage access, but does not implement payload-stage reversal. Do not assume other SDKs support this scheme. See
Cross-app input handling for requirements and limits.
Use this guide in the order that fits your application:
Full serialized values stay in history. No binary-store registration or access.
Small payloads that fit comfortably in workflow history.
Automatic offloading (PreferReference)
DocumentPayload
Eligible large values are stored externally. The SDK downloads and deserializes them wherever an ordinary value is required, including each workflow execution that receives the document. Cross-app inputs remain inline unless explicitly allowed.
Stepping-stone migrations toward explicit references, or ensuring compatibility with other .NET apps that already use data references without immediately changing local signatures.
Explicit references
PayloadReference<DocumentPayload>
The workflow can forward a reference without downloading the document. An activity or client explicitly resolves it to an object or opens a stream.
Workflows that coordinate steps without inspecting the payload themselves (deferring data access to the specific activities that need it), especially in single-app workflows or multi-app topologies where all participating applications use .NET and can be updated to support binary-store payloads.
Performance and memory tradeoffs
Both offloading modes shrink workflow history traffic: in the SDK benchmark (a 2 MB
document across nine activities), both modes reduced workflow protobuf traffic by ~99.9%.
Automatic offloading does not eliminate repeated materialization: because the workflow signature still takes
DocumentPayload, the SDK downloads and deserializes the payload on every replay. Automatic offloading
allocated 1.39x as many managed bytes as inline processing in this
benchmark. Enable automatic offloading primarily when you are migrating toward explicit data
references or when you need cross-app compatibility with another .NET application that already uses data
references, even if this application only uses automatic offloading for now.
Explicit references defer materialization: passing PayloadReference<T> avoids downloading or deserializing the
payload until an activity explicitly resolves or streams it, reducing both execution time and managed allocations.
This is the best fit when you do not use multi-app workflows, or when all participating applications use .NET and
can be updated to support binary-store payloads.
How references work
Offloading happens after serialization, based on the UTF-8 byte count of the serialized value. The reference
envelope contains the store name, key, size, SHA-256 hash, and format version. Stored keys are content-addressed and
scoped to a workflow instance. Existing references pass through under Preserve and PreferReference, except
when a cross-app input requires inlining. PreferInline resolves outgoing references instead.
Set up payload support
Prerequisites
Dapr.Workflow 1.19.0 or later. Payload support is included in Dapr.Workflow.
Dapr runtime 1.19.0 or later.
A configured binary-store component, in addition to the workflow’s usual actor state store, placement, and scheduler.
Payload support registered on every client and worker that writes or reads these workflows, with access to the
referenced component and compatible serialization settings.
The SDK manages the references; the workflow runtime protocol does not need native data-reference support.
Adding a component alone does not enable offloading.
Configure a binary-store component
For a disposable local experiment, add this component to the sidecar’s resources directory:
This component loses all payloads when the sidecar stops, even if workflow history remains in a durable state store, and
is strictly intended for ephemeral testing. Those histories can no longer resolve their references. Use durable
binary storage for workflows that must survive restarts, and retain payloads for as long as any history or
consumer needs them.
Register payload support
Chain WithBinaryStorePayloads from AddDaprWorkflow or AddDaprWorkflowBuilder. For example, in an application’s
startup code, register the workflow and activity types used below:
StoreName and endpoints:StoreName must match the component name. If you use a non-default sidecar gRPC
endpoint, configure DAPR_GRPC_ENDPOINT consistently for the workflow and binary-store clients.
Builder chaining:WithBinaryStorePayloads extends the workflow builder, not IServiceCollection. For
subsequent service registrations, use builder.Services or the returned workflow builder’s Services property.
Host-wide scope: Offloading is configured for the host, not per workflow. Do not mix payload-aware and
payload-unaware workers for the same app ID while offloaded workflows are running.
Keep payload support registered indefinitely
Once you opt into WithBinaryStorePayloads(...) in any .NET application—including any application that participates
in multi-app workflows with it—never unregister it, even if you later opt out of creating references. Retained
workflow histories, results, and events can still contain data references that require the registered services to
read. Instead, opt out of future offloading by setting WritePreference = PayloadWritePreference.PreferInline while
keeping WithBinaryStorePayloads(...) registered; see Switch back to inline payloads.
Use payloads
The examples below use the registration above, which selects PreferReference. For other write behaviors and limits,
see Configuration and policy reference.
Use automatic offloading
Keep ordinary input and output types. The SDK stores values that meet OffloadThreshold and resolves them before
passing them to your application code. These types work with or without WithBinaryStorePayloads:
With the registration above, the document exceeds 64 KiB and is offloaded at the workflow and activity input
boundaries, while the small integer result stays inline. Without payload registration—or with the default Preserve
preference and an ordinary input—the same document stays inline. You can safely change OffloadThreshold between
builds or deployments: it only affects whether newly written workflow history items are inlined or offloaded, and has
no impact on automatic resolution for existing workflows. (By contrast, changing MaxInMemoryRehydrationSize is not
safe without planning because it applies to all existing references; see
Size and change MaxInMemoryRehydrationSize safely.)
Because DocumentWorkflow accepts DocumentPayload, the SDK still downloads and deserializes the payload each time
the workflow replays; previously downloaded documents are not cached across executions.
Pass explicit references
To avoid materializing the document in the workflow itself, change the workflow and activity inputs to
PayloadReference<DocumentPayload> and inject IWorkflowPayloadResolver into the activity that consumes it.
(For existing workflows, introduce contract changes in a new version; see
Adopt data references in existing workflows.)
Creating references: Call StoreAsync in client or activity code, never in replayed workflow code.
StoreAsync writes the value regardless of WritePreference or OffloadThreshold.
Write preference: Use Preserve or PreferReference for reference-typed workflows; PreferInline would
convert the outgoing reference back into inline document content and fail the receiving contract.
Retries: Activity retries can download the payload again; explicit references do not guarantee an
exactly-once download.
In-workflow resolution: If the workflow itself must read the value, call
await context.ResolvePayloadAsync(reference) rather than calling the binary-store client directly.
context.HasPayloadResolver() reports whether support is registered. Resolved values are cached only for the
current workflow execution (up to ResolutionCacheSize), not across replays.
Stream large payloads
ResolveAsync<T> buffers the serialized payload before deserialization and is subject to
MaxInMemoryRehydrationSize. A typed reference alone does not remove that limit. For larger data, use
IWorkflowPayloadResolver.OpenAsync(reference) in an activity or client (or context.OpenPayloadAsync(reference) in
a workflow, though activity processing is preferred to avoid replay overhead) and consume the stream
incrementally with asynchronous reads and await using:
Serialized content: The stream contains the full serialized bytes, not just a document’s inner property.
Write buffering: Streaming avoids buffering the whole payload on read, but StoreAsync still serializes the
value in memory on write.
Manual integrity check: Streaming does not automatically verify the content hash. Consumers must check the
bytes against reference.ContentHash and, where appropriate, reference.Size. See the
streaming activity example
for bounded-buffer reads and SHA-256 verification.
Configuration and policy reference
Configure offloading and read limits
Configure BinaryStorePayloadOptions in WithBinaryStorePayloads(...):
Option
Default
Purpose
StoreName
Required
Binary-store component name.
KeyPrefix
"workflow-payloads"
Prefix for instance-scoped, content-addressed keys.
WritePreference
PayloadWritePreference.Preserve
Choose Preserve, PreferReference, or PreferInline for future writes, including events. Cross-app activity and workflow call inputs require inline data unless explicitly allowed per call.
OffloadThreshold
64 * 1024 bytes
Under PreferReference, offload serialized values at or above this size. null offloads every non-empty payload at enabled boundaries; numeric values must be positive.
OffloadSites
PayloadKind.All
Select which boundaries can automatically create references under PreferReference. Does not restrict inlining or reads.
MaxInMemoryRehydrationSize
16 * 1024 * 1024 bytes
Maximum serialized payload size for buffered resolution, including ResolveAsync<T> and outbound inlining. This is not a transport limit or a limit on total process memory.
VerifyIntegrityOnRead
true
Verify SHA-256 for buffered reads. Does not verify streams returned by OpenAsync.
ResolutionCacheSize
128
Maximum resolved entries cached by the workflow context resolver per execution. 0 disables this cache.
SkipWriteIfExists
true
Treat an already-existing content-addressed object as a successful write. Does not guarantee that a duplicate upload attempt transfers no bytes.
PayloadKind flags cover workflow and activity inputs/outputs, external events, continue-as-new input, custom
status, and child workflow inputs/outputs (detached workflow inputs and rerun overrides use PayloadKind.WorkflowInput;
termination outputs use PayloadKind.WorkflowOutput). Combine flags to restrict automatic offloading:
Buffered reads throw PayloadRehydrationLimitException when exceeding MaxInMemoryRehydrationSize,
PayloadNotFoundException when the object is missing, or PayloadIntegrityException when hash verification fails.
Retain compatible payload readers and serialization settings for existing histories; changing the serializer does
not migrate stored data.
Size and change MaxInMemoryRehydrationSize safely
Unlike OffloadThreshold (which only affects future writes), MaxInMemoryRehydrationSize is not safe to change
casually. It is enforced on every buffered read and inlining operation—including references already recorded in
workflow history. Lowering it below an existing payload’s declared or actual size can cause:
Ordinary T inputs and outputs to throw PayloadRehydrationLimitException during materialization.
Cross-app boundary inlining to fail before the call is sent.
PreferInline conversion of existing references to fail.
Running workflows to fail when replay or a later turn encounters an older reference.
Sizing best practices
Keep the 16 MiB default unless measured requirements justify changing it.
Allow modest headroom: Set the limit above your expected serialized payload size with room for natural growth.
Account for concurrent memory pressure: Keep the limit below a size that would cause excessive memory usage when
multiplied by concurrent resolutions. For example, a 32 MiB limit with 20 concurrent materializations can require
roughly 640 MiB for payload buffers alone, plus additional allocations during UTF-8 conversion and deserialization.
Prefer streaming for larger documents: Use PayloadReference<T> and stream via OpenAsync rather than raising
the in-memory limit indefinitely.
Align with transport limits: If cross-app inlining is expected, ensure materialized payloads also fit the
configured Dapr runtime and gRPC transport limits, including message overhead. Raising MaxInMemoryRehydrationSize
does not raise transport limits.
Test boundary behavior: Exercise payloads near and just above the configured limit in load and integration tests.
Changing MaxInMemoryRehydrationSize later
Treat MaxInMemoryRehydrationSize as a host compatibility and memory-safety boundary: keep it consistent across all
workers that can process the same workflow versions, and change it only through a reviewed deployment rather than
runtime mutation.
Increasing the limit is generally backward-compatible, but requires reassessing memory concurrency and transport
limits.
Lowering the limit can break existing workflows whose histories contain references larger than the new value
(failing during replay, typed state reads, automatic deserialization, PreferInline conversion, or cross-app
inlining). Before lowering it:
Identify the largest referenced payloads used by active workflow instances.
Change large-payload consumers to accept PayloadReference<T> and stream content via OpenAsync.
Version workflow and activity contracts when changing ordinary T inputs to PayloadReference<T> inputs.
Keep old workflow versions and their previous limit available until existing instances complete or are retired.
Roll out the lower limit gradually and monitor for PayloadRehydrationLimitException.
Choose a write preference
BinaryStorePayloadOptions.WritePreference controls conversion of future outgoing top-level payloads.
It defaults to PayloadWritePreference.Preserve; registration alone does not enable automatic payload offloading.
Preference
Ordinary outgoing value
Outgoing reference
Preserve (default)
Serialize inline; no automatic upload.
Keep the reference.
PreferReference
Upload if the serialized value meets OffloadThreshold at an enabled OffloadSites boundary. Otherwise keep inline.
Keep the reference; do not upload it again.
PreferInline
Serialize inline; no automatic upload.
Resolve to its original serialized content and write that content inline. Fail if resolution cannot complete safely.
Important policy rules:
Future writes only: Write preferences affect future writes from both new and running workflows. They do not
rewrite retained history, persist an instance-level setting, infer policy from a workflow’s input, or automatically
version workflows or activities.
No object provenance under Preserve:Preserve means no automatic outbound conversion. If the SDK resolves a
reference to an ordinary T and your code later returns that T, the output is serialized inline as a new value.
Histories can legitimately contain both inline values and references.
Stopping automatic offloading: Set WritePreference = PayloadWritePreference.Preserve (or
OffloadSites = PayloadKind.None under PreferReference) to stop automatic reference creation while keeping
reference reads and explicit StoreAsync writes active. To convert outgoing references back to inline data, see
Switch back to inline payloads.
Inbound handling preserves the recorded representation
Inbound handling is independent of WritePreference and works the same for local, cross-app, and event inputs:
Received payload
Receiving contract
Behavior
Inline data
Ordinary T
Deserialize normally.
Reference envelope
Ordinary T
Resolve and deserialize using registered payload support.
Reference envelope
PayloadReference<T>
Pass the reference through without automatically materializing it.
Inline data
PayloadReference<T>
Report a contract mismatch; do not upload data to manufacture a reference.
Resolving a reference for application code does not rewrite workflow history or mutate retained wire metadata.
Received data also does not establish an outbound preference or prove the sender can consume reference-valued
responses. Unsupported envelope versions, missing data, integrity failures, and buffering-limit violations surface
as errors rather than falling back to ordinary application data.
Cross-app and external boundaries
Cross-app input handling
An automatic boundary switch makes binary-store payloads compatible with multi-app workflow calls by default for
top-level inputs. When an activity, child workflow, or detached workflow targets another app (TargetAppId differs
from the current app), the SDK marks the boundary as requiring inline data, overriding a host’s PreferReference
setting:
An ordinary input is kept inline.
Any top-level PayloadReference<T> is resolved by the source app (after replay filters out already-recorded calls,
so storage I/O does not run directly inside the deterministic workflow body) and its original serialized payload is
sent inline before Dapr routes the call, without another deserialize/serialize cycle.
Key scope of the cross-app boundary switch:
Top-level cross-app inputs only: Nested references inside DTO properties, return values/outputs, and propagated
history are not automatically converted. Because those paths can still carry references, every .NET application
participating in a multi-app workflow should register WithBinaryStorePayloads(...) (and never unregister it once
enabled) to preserve compatibility.
Source app read access required: The source app must have payload support registered and access to the referenced
object in the binary store.
Transport limits still apply: Normal Dapr, gRPC, scheduler, and state-store message-size limits apply after the
payload is materialized inline.
Per-call opt-out: Set AllowPayloadReferences: true when both apps support references and share access to the
underlying binary store.
Configure the source app ID correctly: if it is unavailable, any non-empty TargetAppId is treated as cross-app and
inlined by default. Explicit same-app targets follow the normal host preference.
Use the inline default
For a top-level cross-app input, the sender resolves reference and sends ordinary T data inline (the sender still
needs WithBinaryStorePayloads(...) and storage access to resolve reference; if the destination is another .NET
application, register WithBinaryStorePayloads(...) there as well to preserve compatibility across return values and
propagated history):
Explicitly allow references for a known destination
Opt out per call with AllowPayloadReferences: true only when all of the following hold:
The destination supports the version-1 envelope with compatible payload contracts and serialization settings.
The JavaScript SDK supports unstaged references from @dapr/dapr 3.19.0; it does not implement
payload-stage reversal. Do not assume other language SDKs support this scheme.
The destination registers WithBinaryStorePayloads(...) in .NET, or a
payload resolver in JavaScript
(upgrading the SDK alone is not enough).
Both apps can access the same underlying storage objects via the named binary-store component in their respective
sidecars (matching component names pointing to separate in-memory stores do not share data).
The sending host uses Preserve or PreferReference (PreferInline still forces inline content).
AllowPayloadReferences applies only to that call’s input and is retained across SDK retries. Detached workflow
options support routing and payload permission only; retry policies and history propagation are rejected.
Limits and scope
Cross-app inlining and PreferInline are inline-or-error, not best-effort fallbacks:
Strict validation: Resolution checks MaxInMemoryRehydrationSize (against both declared size and bytes read)
and verifies the SHA-256 hash when VerifyIntegrityOnRead is enabled. Missing storage, unsupported envelopes, or
limit/integrity failures prevent the call from being submitted; the SDK never silently falls back to sending a
reference.
No recursive or return-path rewriting: Because only top-level call inputs are converted, plan compatible
contracts, write preferences, and storage access independently for nested PayloadReference<T> properties, return
values, and propagated history.
Event payload handling
Event APIs do not expose TargetAppId or AllowPayloadReferences and instead follow the sender’s WritePreference:
Event path
Outgoing policy
context.SendEvent
Uses the workflow host’s WritePreference. The target instance is in the current app; local events are not forced inline.
Client RaiseEventAsync
Uses the publishing client’s configured WritePreference. The destination is determined by the sidecar endpoint configured for that client.
Under PreferReference, automatic event offloading is controlled by PayloadKind.ExternalEvent in OffloadSites
and OffloadThreshold. Inbound events follow the standard
inbound handling rules.
Because an external application can point a client at a destination’s sidecar and call RaiseEventAsync, same-app
routing does not guarantee compatible SDK support. When publishing from an external client to an app with unknown
reference support, configure WritePreference = PayloadWritePreference.PreferInline on that client (noting that
this applies to all payload writes from that client and follows the same inline-or-error limits).
Migration, rollback, and lifecycle
Adopt data references in existing workflows
Automatic offloading is a storage-format change; explicit references are an application-contract change.
Approach
Compatibility with existing workflows
Inline
Unchanged by default. AddDaprWorkflow(...) alone does not enable payload offloading.
Automatic offloading
Safe to enable for in-flight workflows without versioning. Existing T contracts stay unchanged; the SDK reads both historical inline values and new reference envelopes.
Explicit references
Changing T to PayloadReference<T> is a breaking contract change for histories containing inline T. Preserve the old contract and introduce PayloadReference<T> in a new workflow version.
Enable automatic offloading safely
Enable WritePreference = PayloadWritePreference.PreferReference in WithBinaryStorePayloads(...). Historical
inline values remain untouched, and outbound offloading applies only to newly emitted payloads after replay has
consumed recorded actions. Adjusting OffloadThreshold between builds is also safe—it only governs newly written
history items and does not affect how existing inline or referenced payloads are resolved. By contrast, do not lower
MaxInMemoryRehydrationSize below existing referenced payload sizes; see
Size and change MaxInMemoryRehydrationSize safely.
Introduce explicit references with file-based versioning
Use name-based workflow versioning by copying the
workflow to a new file and giving the class a versioned name (such as DocumentWorkflowV2; renaming the file alone
does not create a version):
Add new activities and the V2 workflow. Create distinctly named activities for any changed PayloadReference<T>
input or output contracts while keeping the original activities registered.
Route new instances to V2. Configure name-based versioning and keep both workflow versions registered (manual
registration is no longer needed for workflows as of SDK v1.17.0 or activities as of v1.18.0). V2 can keep the
original workflow input type T and obtain references from its new activities, unless V2 also changes its
entry-point input to PayloadReference<T> (in which case clients must call StoreAsync before scheduling V2).
Note that automatic offloading remains host-wide: enabling PreferReference on a shared host affects eligible
payloads emitted by both V1 and V2.
When patch-based versioning is appropriate
context.IsPatched(...) can guard a new branch that calls reference-producing activities while keeping the
workflow’s original entry-point input type T. It cannot guard a change to the workflow’s entry-point input
type because the worker deserializes the input before invoking the workflow body.
Switch back to inline payloads
Never unregister WithBinaryStorePayloads(...), either in the primary application or in any .NET application that
participates with it in multi-app workflows. Instead, keep WithBinaryStorePayloads(...) and your binary-store
configuration in place so historical workflows that used data references remain readable, and opt out of future
offloading by preferring inline payloads:
From automatic offloading (ordinary T contracts): Set WritePreference = PayloadWritePreference.PreferInline:
PreferInline keeps future ordinary values inline and resolves any outgoing references before writing, without
rewriting existing history or disabling reference reads.
From explicit references (PayloadReference<T> contracts): Introduce a new workflow version and separately
named activities that accept ordinary T contracts, and stop calling StoreAsync in the new path. While old and
new versions share a host, use Preserve (not PreferInline, which would inline references still expected by
the old version’s PayloadReference<T> receivers) and keep AllowPayloadReferences: true on any old cross-app
calls that still expect references.
Operate workflows with stored payloads
Reading workflow metadata can download payloads
Client methods that fetch inputs and outputs attempt to resolve references before returning, while ReadInputAs<T>,
ReadOutputAs<T>, and ReadCustomStatusAs<T> remain synchronous:
state.ReadOutputAs<DocumentPayload>() returns the deserialized document.
state.ReadOutputAs<PayloadReference<DocumentPayload>>() exposes the retained reference (if the recorded value was
offloaded), though requesting the reference after fetching metadata does not undo the download already performed by
the fetch.
If a payload exceeds MaxInMemoryRehydrationSize during metadata fetch, the state retains the reference so you
can still read PayloadReference<T> and stream it via OpenAsync, whereas calling ReadOutputAs<T>() throws
PayloadRehydrationLimitException. Other read errors (missing objects, integrity failures) fail the metadata fetch
immediately.
When you only need completion status, avoid downloading inputs and outputs (and keep custom status small, as it is
resolved unconditionally):
varstate=awaitclient.WaitForWorkflowCompletionAsync(instanceId,getInputsAndOutputs:false);if(state.RuntimeStatus!=WorkflowRuntimeStatus.Completed){thrownewInvalidOperationException($"Workflow {instanceId} ended with {state.RuntimeStatus}.");}
Retain and clean up payloads
Workflow completion and history purging do not automatically delete binary objects, and deleting objects still
referenced by any history, result, child workflow, or rerun will break replay or inspection:
Register a durable manifest: The default IWorkflowPayloadManifest is a no-op. To track objects for cleanup
across restarts, implement a durable IWorkflowPayloadManifest and register it afterWithBinaryStorePayloads via builder.Services.WithPayloadManifest<YourDurableManifest>().
Purge after history deletion: Only after the owning workflow history is purged and no other workflow shares
its references (forwarding a reference does not transfer ownership or reference-count it), resolve
WorkflowPayloadCleaner and call PurgeAsync(instanceId). Also account for orphaned payloads uploaded via
StoreAsync when a subsequent scheduling call fails.
Benchmark comparison
The SDK benchmark
compares three ways to process the same 2,000,000-byte serialized document through nine sequential
activities. The first eight activities coordinate work using small values. Only activity nine needs the document,
and all three modes compute the same checksum.
Case
Workflow input
Storage and materialization
Inline
BenchmarkDocument
No payload registration. Full document in workflow history; deserialize at each workflow execution.
Automatic
BenchmarkDocument
Data in the binary store, references in history. Automatically retrieve and deserialize for each execution and the processing activity.
References
PayloadReference<BenchmarkDocument>
Replay only the reference. Retrieve and deserialize once, in activity nine.
The current benchmark explicitly selects PreferReference for Automatic and Preserve for References.
The following sample results are not a latency or throughput guarantee:
Mode
Median total ms
Median execution ms
Min..max total ms
Workflow protobuf bytes
Binary download bytes
Document deserializations
Allocated bytes
Total speedup
Inline
302.9
302.9
269.0..370.2
12,010,505
0
11
74,661,448
1.00x
Automatic
224.9
202.9
175.2..769.2
12,254
22,000,000
11
103,614,880
1.35x
References
122.7
113.4
109.6..204.6
12,288
2,000,000
1
14,869,544
2.47x
Except for the min/max range, the measurements shown are medians. Total time includes preparation and execution.
Both offloaded cases explicitly store the initial document before scheduling so that preparation
(serialization/upload) can be measured separately. Execution time covers scheduling through completion, including
any subsequent offloading. Total speedup is the inline median total time divided by the mode’s median total time.
What the results justify
Smaller workflow traffic with either offloading approach: measured workflow protobuf bytes fell by about
99.9%, from 12.01 MB to about 12.3 KB. This is workflow message traffic, not the persisted history size or total
network traffic.
Automatic offloading allocates more than inline: it was 1.35x faster in this run (25.8% less
total time), but deserialized the document 11 times, downloaded 22 MB, and allocated 1.39x as many managed
bytes as inline processing.
Deferring materialization matters: explicit references were 2.47x faster than inline processing (59.5%
less total time) and allocated 80.1% fewer managed bytes. Compared with automatic offloading, document
deserializations dropped from 11 to 1 and binary downloads dropped by 90.9%, from 22 MB to 2 MB.
Median speedups do not eliminate timing variability: the total-time ranges for automatic offloading
(175.2..769.2 ms) overlap those for both inline (269.0..370.2 ms) and explicit references (109.6..204.6 ms).
Median speedups do not imply that every run is faster than another mode.
These results support using explicit references when most workflow steps do not need the document. Automatic
offloading can reduce history pressure with less application change, but moves repeated reads to the binary store
rather than eliminating them.
Measurement scope and limitations
Workflow protobuf bytes count serialized message bodies sent and received for scheduling, work items, completions,
and history fetches. They exclude status queries, health pings, transport framing, headers, TLS, and backend traffic.
Binary download bytes count file content returned to the SDK; the table does not include binary upload bytes.
Do not interpret the 99.9% reduction as an equivalent reduction in total network traffic.
“Document deserializations” is the benchmark’s Doc reads count, not a count of storage calls: inline mode also has
11 deserializations despite making no binary-store reads. Allocated bytes are process-wide managed allocations
in the measurement window, not peak memory or sidecar allocations.
Connection warmup, dataset generation, host startup/shutdown, result inspection, and cleanup are outside the timed
window. Completion waits do not request inputs or outputs, avoiding an extra metadata download. Instrumentation,
including protobuf sizing and UTF-8 byte counting, adds work and contributes to the measured timings and allocations.
The benchmark’s supplied component is an in-memory binary store, which minimizes backend latency. The summary above
does not specify hardware, runtime version, iteration count, or history-cache setting; those details should accompany
results used for capacity planning. The benchmark can run with history caching enabled or disabled. Cached history
can reduce repeated inline transfers without eliminating document deserialization; do not generalize full-history
results to cached-history deployments.
Before choosing a mode for production, repeat the benchmark with representative payloads, replay patterns, and
durable storage. Follow the benchmark README to capture both history-cache configurations and the JSON report of
individual samples. Small payloads or workflows that need the document on every execution may not benefit from
external storage.
1.3.5 - Multi-application workflows in the .NET SDK
Call activities, children, and detached workflows hosted in another Dapr application
Overview
Dapr workflows can call activities or child workflows that are hosted in a different Dapr application. In .NET,
multi-application workflows are supported starting with:
The target app ID must exist and must register the activity or workflow you invoke.
All participating app IDs must be in the same namespace.
All participating app IDs must use the same workflow (actor) state store.
Data-reference compatibility
With the workflow data-reference implementation (alpha),
cross-app activity, child workflow, and detached workflow inputs are inline by default, even when the sending
host uses PayloadWritePreference.PreferReference. The sender resolves a top-level PayloadReference<T> before
submitting the call, so the destination should accept ordinary T and need not enable payload support for that input.
The sender needs registered payload support and storage access to inline a reference; resolution errors prevent
submission rather than falling back to sending the reference.
Set AllowPayloadReferences: true on the call’s WorkflowTaskOptions or ChildWorkflowTaskOptions only for a
compatible, payload-aware destination. This permits the host’s write preference; it does not force offloading
or override PreferInline. Each reader must resolve the reference’s store name and key to the same binary object
through its own sidecar, with compatible serialization and contracts. Separate in-memory stores do not share objects.
The JavaScript SDK also supports the version-1 envelope from
@dapr/dapr 3.19.0 with compatible serialization and storage access, but does not implement payload-stage
reversal. Do not assume other language SDKs support data references. The inline default covers only top-level call
inputs, not nested references, results, or propagated history. See
Cross-app input handling for examples and limits.
Call an activity in another application
Set TargetAppId on WorkflowTaskOptions when calling an activity to execute it in another app:
When calling a workflow in another application, you are responsible for using the workflow name expected by that app.
If the target application is a .NET app that uses named workflow versioning, you can call it by its canonical (unversioned)
workflow name and the target app will route it to the latest version. Named workflow versioning requires Dapr runtime
v1.17.0 or later (multi-app workflows only require v1.16.0+).
Schedule a detached workflow in another application
SDK/runtime 1.19 also support independent, replay-safe detached workflow scheduling from the workflow context:
Unlike CallChildWorkflowAsync, this returns the scheduled ID without waiting for output. The detached instance
has independent failure and termination semantics: terminating the source workflow does not terminate it.
The options overload allows TargetAppId and AllowPayloadReferences, but rejects RetryPolicy and any
PropagationScope other than None.
Events and client targeting
WorkflowContext.SendEvent does not accept TargetAppId; it signals an instance in the current application.
For external event submission, DaprWorkflowClient.RaiseEventAsync targets the application associated with the
client’s sidecar, not an arbitrary app ID argument. Do not call a management client directly from deterministic
workflow code to bypass that restriction; put external I/O in an activity.
1.3.6 - Workflow history propagation in the .NET SDK
Share ancestor workflow execution history with child workflows and activities using the .NET SDK
Overview
Workflow history propagation allows a parent workflow to share its execution history — and optionally its full ancestor chain —
with child workflows. Call options also expose propagation scopes for activities, but the public .NET reader is
WorkflowContext.GetPropagatedHistory() on a workflow, not a method on WorkflowActivityContext.
Common use cases include:
Audit trails: Verifying a chain of custody across a multi-step workflow
Fraud detection: Inspecting upstream decisions before committing a transaction
AI agent orchestration: Passing context through hierarchical agent workflows
This feature requires Dapr .NET SDK v1.18.0 or later and Dapr runtime v1.18.0 or later.
Propagation scopes
Propagation is opt-in and per-call. Each call to CallActivityAsync or CallChildWorkflowAsync can independently specify a HistoryPropagationScope:
Scope
Description
None
Default. No history is propagated to the callee.
OwnHistory
Propagates the calling workflow’s own events only. Ancestor history is dropped, acting as a trust boundary.
Lineage
Propagates the calling workflow’s events plus the full ancestor chain it inherited from its own parent.
Propagate history to a child workflow
Use WithHistoryPropagation on ChildWorkflowTaskOptions to opt a child workflow into receiving the parent’s history:
publicsealedclassMerchantCheckoutWorkflow:Workflow<Order,CheckoutResult>{publicoverrideasyncTask<CheckoutResult>RunAsync(WorkflowContextcontext,Orderorder){// Activity without propagation — default behavior, no opt-inawaitcontext.CallActivityAsync(nameof(ValidateMerchantActivity),order.MerchantId);// Child workflow with full lineage propagationvaroptions=newChildWorkflowTaskOptions().WithHistoryPropagation(HistoryPropagationScope.Lineage);varresult=awaitcontext.CallChildWorkflowAsync<PaymentResult>(nameof(ProcessPaymentWorkflow),order,options);returnnewCheckoutResult(result);}}
Calls that do not specify a propagation scope receive no history — other calls in the same workflow are unaffected by opt-ins.
Propagate history to an activity
The same WithHistoryPropagation extension is available on WorkflowTaskOptions for activity calls:
In SDK 1.19.0, the activity scheduling action carries this scope, but WorkflowActivityContext exposes only
Identifier, InstanceId, TaskExecutionKey, and ScheduledEventId. It has no public history reader, and the worker does not
populate an activity history property. Use a child workflow when application code needs to inspect propagated
history; do not assume the activity above can call GetPropagatedHistory().
Read propagated history
Inside a child workflow, call GetPropagatedHistory() on WorkflowContext to retrieve the history passed by the parent. The method returns null if propagation was not requested for this invocation.
publicsealedclassProcessPaymentWorkflow:Workflow<Order,PaymentResult>{publicoverrideasyncTask<PaymentResult>RunAsync(WorkflowContextcontext,Orderorder){varhistory=context.GetPropagatedHistory();if(history!=null){foreach(varevtinhistory.Events){// evt.Name, evt.InstanceId, evt.AppId// evt.Activities — activity results for this ancestor// evt.Workflows — child workflow results for this ancestor}}returnawaitcontext.CallActivityAsync<PaymentResult>(nameof(ChargeCardActivity),order);}}
PropagatedHistory type
GetPropagatedHistory() returns a PropagatedHistory object (or null). Its Events property is an ordered list of PropagatedHistoryEvent values — one per ancestor workflow, in execution order (oldest ancestor first, immediate parent last).
Each PropagatedHistoryEvent represents a single ancestor workflow’s contribution to the propagated history:
Member
Type
Description
AppId
string
Dapr app ID that ran this workflow
InstanceId
string
Workflow instance ID
Name
string
The name of the workflow
Activities
IReadOnlyList<PropagatedHistoryActivityResult>
Activity results for this workflow, in execution order
Workflows
IReadOnlyList<PropagatedHistoryWorkflowResult>
Child workflow results for this workflow, in execution order
PropagatedHistoryActivityResult type
Each PropagatedHistoryActivityResult is a sealed record describing a single activity invocation:
Member
Type
Description
Name
string
The scheduled name of the activity
Status
PropagatedHistoryStatus
Lifecycle status — Pending, Completed, or Failed
Input
string?
Serialized input payload, or null when unset
Output
string?
Serialized output payload, or null when the activity has not completed
FailureDetails
WorkflowTaskFailureDetails?
Failure details when Status is Failed, otherwise null
PropagatedHistoryWorkflowResult type
Each PropagatedHistoryWorkflowResult is a sealed record describing a single child workflow invocation:
Member
Type
Description
Name
string
The scheduled name of the child workflow
Status
PropagatedHistoryStatus
Lifecycle status — Pending, Completed, or Failed
Output
string?
Serialized output payload, or null when the workflow has not completed
FailureDetails
WorkflowTaskFailureDetails?
Failure details when Status is Failed, otherwise null
Input/output strings retain the configured serialization format; they are JSON only with a JSON serializer.
With binary payload support they can also contain reference envelopes. Propagation does not automatically
materialize all ancestor payloads; apply compatible serialization and
data-reference handling.
PropagatedHistoryStatus enum
PropagatedHistoryStatus reflects how far a task progressed past scheduling:
Value
Description
Pending
The task was scheduled but has not yet completed or failed
Completed
The task completed successfully
Failed
The task failed
Query propagated history
PropagatedHistory query methods
PropagatedHistory provides Get methods that return lists and TryGet methods that return a single match (the most recent) via an out parameter. All Get methods return an empty list when no match is found.
Method
Return type
Description
GetByAppId(string)
IReadOnlyList<PropagatedHistoryEvent>
All events from the given Dapr app ID
GetByInstanceId(string)
IReadOnlyList<PropagatedHistoryEvent>
All events from the given workflow instance ID
GetEventsByWorkflowName(string)
IReadOnlyList<PropagatedHistoryEvent>
All events with the given workflow name
TryGetLastWorkflowEventByName(string, out PropagatedHistoryEvent?)
bool
Gets the most recent event matching the workflow name
GetAppIds()
IReadOnlyList<string>
Ordered, deduplicated list of app IDs in the history
PropagatedHistoryEvent query methods
Each PropagatedHistoryEvent also provides query methods to inspect the activities and child workflows within that ancestor:
Method
Return type
Description
GetActivitiesByName(string)
IReadOnlyList<PropagatedHistoryActivityResult>
All activities matching the given name
TryGetLastActivityByName(string, out PropagatedHistoryActivityResult?)
bool
Gets the most recent activity matching the name
GetWorkflowsByName(string)
IReadOnlyList<PropagatedHistoryWorkflowResult>
All child workflows matching the given name
TryGetLastWorkflowByName(string, out PropagatedHistoryWorkflowResult?)
bool
Gets the most recent child workflow matching the name
Example
varhistory=context.GetPropagatedHistory();if(history!=null){// By app ID — useful in multi-app workflowsvarfromOrderApp=history.GetByAppId("order-app");// By workflow instance IDvarfromSpecificRun=history.GetByInstanceId("checkout-abc123");// By workflow name — returns all matches (e.g. recursion or ContinueAsNew)varcheckoutEvents=history.GetEventsByWorkflowName(nameof(MerchantCheckoutWorkflow));// TryGet for a single match — avoids null ambiguityif(history.TryGetLastWorkflowEventByName(nameof(MerchantCheckoutWorkflow),outvarparentEvent)){// Inspect the parent's activitiesvarfailedActivities=parentEvent.Activities.Where(a=>a.Status==PropagatedHistoryStatus.Failed).ToList();// Or look up a specific activity by nameif(parentEvent.TryGetLastActivityByName(nameof(ValidateMerchantActivity),outvarvalidation)){// validation.Status, validation.Output, validation.FailureDetails}}}
Security considerations
By default, Dapr uses mutual TLS (mTLS) between sidecars for all cross-app communication, providing transport-layer protection for propagated history in multi-app workflow scenarios.
For stronger guarantees in production, enable WorkflowHistorySigning. This feature uses SPIFFE identity to cryptographically sign each history chunk, so the receiving workflow can verify the integrity and origin of the propagated history. Without signing enabled, Dapr emits a warning that propagated chunks lack cryptographic verification.
1.3.7 - Workflow management operations with DaprWorkflowClient
Schedule, inspect, wait for, signal, rerun, and manage workflow instances
DaprWorkflowClient provides the following operations in SDK 1.19.0. Use a Dapr 1.19 runtime for the complete
surface, particularly listing, history inspection, and rerunning from an event. Register or construct a client as
described in client registration.
Schedule a new workflow instance
ScheduleNewWorkflowAsync returns an instance ID, not the workflow result. Provide a registered workflow name and
optional input. Omitting instanceId generates a GUID. A scheduled start in the future delays execution; a past
or omitted start time starts it immediately.
The cancellation-capable overload takes name, instanceId, input, DateTimeOffset? startTime, and
cancellation. The three-argument convenience overload and legacy DateTime? overload do not take a token.
Cancellation stops the client request; it does not terminate an instance that was already scheduled.
When name-based versioning is enabled, prefer the canonical name for
new instances so the target app can choose its latest registered version.
Retrieve the status of a workflow instance
GetWorkflowStateAsync returns a WorkflowState snapshot:
varstate=awaitclient.GetWorkflowStateAsync(instanceId,getInputsAndOutputs:true,cancellation:cancellationToken);if(!state.Exists){thrownewInvalidOperationException($"Workflow {instanceId} does not exist.");}varstatus=state.RuntimeStatus;
Member
Meaning
Exists, WorkflowName
Whether an instance was found and its workflow name.
RuntimeStatus
Current WorkflowRuntimeStatus, including pending, running, suspended, terminal, or unknown state.
IsWorkflowRunning
True only for Running, not for pending or suspended instances.
IsWorkflowCompleted
True for any terminal state: completed, failed, or terminated. It does not imply success.
CreatedAt, LastUpdatedAt
UTC timestamps exposed as DateTimeOffset.
FailureDetails
Failure type, message, and optional stack trace when available.
Deserialize captured values using the configured workflow serializer.
Set getInputsAndOutputs: false to avoid fetching input/output data when polling status. Keep custom status small;
the SDK processes custom status returned by the runtime even when this flag is false. Typed readers do not fetch
missing data later. With data references, metadata reads can also
download binary objects.
A missing instance, including gRPC NotFound, produces Exists == false. Other gRPC failures propagate as
RpcException; do not treat transport failures as missing workflows. Access to failure details depends on the
data included in the runtime response.
Wait for start or completion
WaitForWorkflowStartAsync waits until the instance leaves pending state. WaitForWorkflowCompletionAsync waits
for completed, failed, or terminated state. Both return WorkflowState, can return immediately when the target
state was already reached, and throw InvalidOperationException when the runtime reports no instance.
usingvartimeout=CancellationTokenSource.CreateLinkedTokenSource(cancellationToken);timeout.CancelAfter(TimeSpan.FromMinutes(10));varfinalState=awaitclient.WaitForWorkflowCompletionAsync(instanceId,getInputsAndOutputs:true,cancellation:timeout.Token);if(finalState.RuntimeStatus!=WorkflowRuntimeStatus.Completed){thrownewInvalidOperationException($"Workflow ended with {finalState.RuntimeStatus}: {finalState.FailureDetails?.ErrorMessage}");}varresult=finalState.ReadOutputAs<string>();
Waits retry gRPC Unavailable and DeadlineExceeded with backoff until they succeed or the caller cancels.
Always set a cancellation/deadline appropriate to the application: an eternal workflow might never finish.
Canceling a wait does not cancel the workflow.
The workflow receives the value through WaitForExternalEventAsync<T>("Approval"). Events can be buffered before
the workflow starts waiting. Submission does not acknowledge application processing; do not rely on this call to
confirm that a missing or already-completed target consumed an event.
awaitclient.TerminateWorkflowAsync(instanceId,output:new{Reason="Canceled by operator"},cancellation:cancellationToken);
output is an optional serializable object, not just a string. The request recursively terminates child
workflows, but does not stop in-flight activity executions or independent detached workflows. Request completion
does not mean every affected workflow has already transitioned; query or wait for the resulting state.
Purge a workflow instance
The public method is PurgeInstanceAsync, not PurgeWorkflowAsync:
Only terminal instances can be purged. The SDK requests recursive deletion of child instances and their histories;
the Boolean result reports whether the runtime deleted any instances. Runtime errors still propagate.
Purging is irreversible and does not delete binary payload objects. Follow the
payload retention and cleanup guidance.
List instance IDs with pagination
ListInstanceIdsAsync returns a WorkflowInstancePage containing InstanceIds and an optional
ContinuationToken. Pass the token back unchanged to obtain the next page:
pageSize, when supplied, must be greater than zero. This API lists IDs, not full states; it does not expose
status/date/name filters. Fetch individual states as needed and bound request concurrency for large listings.
Inspect execution history
varevents=awaitclient.GetInstanceHistoryAsync(instanceId,cancellation:cancellationToken);foreach(varhistoryEventinevents){Console.WriteLine($"{historyEvent.EventId}: {historyEvent.EventType} at {historyEvent.Timestamp:O}");}
The returned IReadOnlyList<WorkflowHistoryEvent> contains event ID, event type, and timestamp. It does not
expose raw serialized inputs, outputs, or the full protobuf history. Event types distinguish activity scheduling,
completion/failure, child workflows, timers, events, suspension/resumption, continuation, and detached creation.
Rerun from a history event
RerunWorkflowFromEventAsync creates a new workflow instance from a source history and event ID. It does not
reset the source instance. Select a runtime-supported rerun point from history; an event ID is not a list index,
and not every event is a valid rerun boundary.
usingDapr.Workflow.Client;// Pick a rerun point: the first scheduled activity in the source history.varhistory=awaitclient.GetInstanceHistoryAsync(instanceId,cancellationToken);varscheduledEvent=history.First(e=>e.EventType==WorkflowHistoryEventType.TaskScheduled);varrerunId=awaitclient.RerunWorkflowFromEventAsync(sourceInstanceId:instanceId,eventId:(uint)scheduledEvent.EventId,options:newRerunWorkflowFromEventOptions{NewInstanceId=null,OverwriteInput=true,Input=new{Quantity=3}},cancellation:cancellationToken);
The eventId argument is uint, while WorkflowHistoryEvent.EventId is int, so cast when passing an ID from
history. An activity can also capture its own rerun point via WorkflowActivityContext.ScheduledEventId.
Omit options to retain recorded input and let the runtime allocate an ID.
NewInstanceId optionally chooses the new ID. Set OverwriteInput = true when supplying Input; otherwise a
non-null input is rejected. The override is applied at the next activity event at the rerun point, not as a
general replacement for all earlier history.
Keep the workflow/activity implementations and any referenced payload objects needed by the copied history.
Rerunning is not compensation: earlier external side effects remain, and executing work again still requires
idempotent activities.
Learn how to use patch-based and name-based workflow versioning in the Dapr .NET SDK
Overview
Dapr Workflow versioning lets you evolve workflows without breaking deterministic execution for in-flight instances. The .NET SDK supports two approaches:
Patch-based versioning: introduce conditional branches guarded by context.IsPatched("patch-name").
Name-based versioning: create a new workflow type name and let a versioning strategy select the newest version.
Use patch-based versioning for small, in-place changes. Use name-based versioning for larger refactors where you want a clean new workflow type.
Note
Workflow versioning requires Dapr .NET SDK v1.17.0 or later and Dapr runtime v1.17.0 or later.
When to use each approach
Patch-based versioning is a good fit when:
You need small, incremental changes in an existing workflow.
You want existing instances to keep deterministic behavior after deployment.
You want to avoid introducing a new workflow type yet.
Name-based versioning is a good fit when:
You want a clean, new workflow type without accumulated patches.
You are ready to remove old patch blocks and refactor more freely.
You want version selection to be automatic based on naming conventions.
Patch-based versioning
Patch-based versioning relies on a deterministic switch inside the workflow. Use WorkflowContext.IsPatched to guard
new behavior:
Patch names can appear multiple times in the same workflow and can be nested.
Keep an existing patch identifier for the same change across deployments. Do not reuse that identifier for a
different change; introduce a new identifier instead. Names are case-sensitive and must not be blank.
On replay, a patch recorded in history returns true; an unrecorded patch returns false while replaying.
When execution advances beyond recorded history, a new patch can return true. Do not assume every existing
instance stays on the old branch forever.
Retain the old branch and patch checks while retained histories still need them. Removing or reordering durable
calls without a compatible versioning transition can stall replay.
IsPatched is available on WorkflowContext; no additional setup is required.
Tip
Keep patch names simple and monotonic (for example, "v2", "v3") so it is clear which deployment introduced each change.
Name-based versioning
Name-based versioning lets you create a new workflow version by changing the workflow type name. The recommended pattern is to copy the existing workflow to a new file, rename the class, refactor as needed, and then start patching again if necessary.
For example, if you had OrderWorkflow, create OrderWorkflowV2 and refactor it. Older versions can remain for in-flight instances while new instances use the latest version.
Default naming behavior
By default, name-based versioning uses NumericVersionStrategy with the case-sensitive prefix V:
MyWorkflow (treated as version 0)
MyWorkflowV2
MyWorkflowV10
Higher numeric values are newer (MyWorkflowV10 is newer than MyWorkflowV2). A raw suffix such as MyWorkflow2
requires NumericVersionStrategyOptions.SuffixPrefix = ""; it is not accepted by the default configuration.
The SDK also includes Date and SemVer strategies and supports custom strategies/selectors.
Built-in strategies and options
The .NET SDK ships with several built-in name-based strategies. Each strategy supports options that let you tune how the suffix is parsed and what to do when no suffix is present.
DateVersionStrategy: Derives a date-based version from a trailing suffix (for example, MyWorkflow20220611).
Options include:
Date format: Uses standard C# date formatting rules; defaults to yyyyMMdd.
Default version: Used when no suffix is provided; defaults to 0.
Prefix: Optional prefix to match before the date suffix, with optional case-sensitivity.
SemVerVersionStrategy: Parses SemVer versions, including explicit [WorkflowVersion(Version = "1.2.3")]
metadata. Use the attribute for dotted versions, prerelease identifiers, and build metadata that cannot appear
in a C# class name.
Options include:
Prefix: Optional prefix to match before the SemVer suffix, with optional case-sensitivity.
Prerelease/build support: Can parse prerelease annotations and build metadata.
Default version: Optional default when no suffix is provided, if configured to allow missing suffixes.
NumericVersionStrategy: Derives a numeric version from a trailing suffix (for example, MyWorkflow42 or
MyWorkflowV42).
Options include:
Prefix: Optional prefix to match before the numeric suffix, with optional case-sensitivity.
Zero-padding width: Optional width to allow fixed-width numbers with leading zeroes.
Default version: Used when no suffix is provided.
Configure name-based versioning
1. Install the versioning package
If you haven’t already added it, you need to add the Dapr.Workflow package to your project. No additional packages are required.
The option key strings must match exactly or the options will not be applied.
5. Register workflows and activities
With the source generator included in Dapr.Workflow, both workflows and activities are discovered and registered automatically at build time. You do not need to opt into named workflow versioning to benefit from this automatic registration.
The AddDaprWorkflow() call is still required to wire up Dapr workflow services, but the options delegate is now optional:
builder.Services.AddDaprWorkflow();
Explicit registrations remain supported if you prefer them:
Once configured, named workflow versioning is applied automatically at runtime.
Cross-assembly workflow discovery
By default, the workflow versioning source generator only scans the executing assembly. If you keep workflows in a separate referenced assembly, those implementations are not discovered unless you opt in to reference scanning.
Reference scanning is disabled by default because it can increase build times (the generator must inspect all referenced assemblies for workflow and activity implementations). To enable it, add the following to the executing application’s .csproj file:
When enabled, the source generator adds any discovered workflow and activity types from all referenced assemblies and registers them automatically. This applies regardless of whether you used named workflow versioning - it is a general-purpose discovery mechanism.
Override name and version
If you need to override the canonical name or version detected from the workflow type, apply the [WorkflowVersion]
attribute to the class implementing your workflow and specify values explicitly:
usingDapr.Workflow;usingDapr.Workflow.Versioning;[WorkflowVersion(
CanonicalName = "OrderWorkflow",
Version = "2",
StrategyType = typeof(NumericVersionStrategy))]publicsealedclassRevisedOrderWorkflow:Workflow<string,string>{publicoverrideTask<string>RunAsync(WorkflowContextcontext,stringinput)=>context.CallActivityAsync<string>("ProcessOrder",input);}
StrategyType overrides the default per type; OptionsName selects named strategy options for that override.
Different workflow families can use different strategies. All overrides in one canonical family must agree on
strategy and options, and its versions must be comparable by that strategy. Ambiguous latest versions or
conflicting configuration fail registration rather than silently picking a candidate.
The default selector is MaxVersionSelector. Advanced registrations can supply DefaultStrategy and
DefaultSelector factories in AddDaprWorkflowVersioning, or use UseDefaultWorkflowSelector<TSelector>().
Generated contributions from loaded assemblies are combined before version selection. Explicit workflow
registrations take precedence, so an explicit canonical alias can intentionally override automatic routing.
Best practices
Schedule by canonical name: When scheduling a new workflow instance, use the canonical workflow name (the
unversioned name). The SDK discovers versioned types and maps the canonical name to the latest version automatically.
Use a concrete versioned name only when intentionally pinning a caller to that version; concrete registrations
remain available for replay. Fully qualified concrete names disambiguate colliding simple names.
Keep old versions: Preserve older workflow types indefinitely. You can remove them only after you are certain
no in-flight instances reference them. Removing old versions too early can stall long-running workflows.
Version in one direction: Always move versions forward. Avoid renaming or reusing older version identifiers.
Current limitations
There is no automatic migration from one versioning strategy to another.
Version selection is configured by the destination application, not negotiated across apps. Multi-app callers
can use the destination’s canonical name when it enables name-based routing; otherwise use its registered name.
Name-based routing does not migrate running histories or incompatible activity contracts. Keep the concrete
versions and activity names required by retained histories.
Workflow tutorials in the Dapr Quickstarts repository
The Dapr Quickstarts repository on GitHub includes many workflow tutorials that showcase the various workflow patterns and how to use the workflow management operations. You can find these tutorials in the quickstarts/tutorials/workflow/csharp folder.
Workflow examples in the .NET SDK repository
The Dapr .NET SDK repository on GitHub contains several examples demonstrating how to use Dapr Workflows with .NET. You can find these examples in the examples/Workflow folder.
For large payloads, see Workflow data references (alpha) for
automatic offloading, explicit references, a streaming example, and a benchmark comparison. The binary store and
this SDK integration are alpha. Cross-app call inputs are inline by default; explicitly allowing references requires
compatible, payload-aware destinations with access to the same referenced objects. The
JavaScript SDK also supports the version-1 envelope from
@dapr/dapr 3.19.0 with compatible serialization and no payload-stage reversal.
Do not assume other language SDKs support data references.
Overview of the Dapr virtual actors building block for .NET
The Dapr.Actors package enables you to interact with Dapr virtual actors from a .NET application. Actors are virtual, addressed by type and id, with support for state management, reminders, timers, and both strongly-typed and weakly-typed proxy clients. The actor pattern is suited to scenarios where you need single-threaded, instance-based concurrency for stateful objects.
Status of Dapr.Actors
Active development on Dapr.Actors has stopped; this package now receives security fixes only, and all new actor development happens in Dapr.Actors.Next. There is no deprecation date for Dapr.Actors but it’s considered to be in a maintenance-only mode.
Dapr.Actors.Next is expected to be released as a stable package alongside the v1.19 Dapr runtime and SDK release.
Author & run actors: authoring actors with ActorHost, dependency injection, disposal, logging, and custom type names; hosting actors in ASP.NET Core with AddActors, JSON options, endpoint routing via MapActorsHandlers, and middleware pitfalls.
Actor serialization: the two serialization models — the weakly-typed client (System.Text.Json, JSON output) and the strongly-typed client (Data Contract Serializer, XML output) — and the rules for configuring types in each.
The IActorProxyFactory interface: creating actor clients with the strongly-typed (CreateActorProxy<>) and weakly-typed (Create) proxy styles, and reading exception details from method invocations.
Dapr actors encapsulate business logic, state transitions, and inter-actor communication. Unit testing catches bugs early before deploying to a Dapr-enabled cluster.
This guide covers practical patterns for testing actors without a running Dapr sidecar, using standard .NET test frameworks.
Prerequisites
.NET 8, .NET 9, .NET 10, or .NET 11 project with Dapr.Actors package
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
An actor class inherits from Actor (namespace Dapr.Actors.Runtime). Key members available for testing:
Member
Role
StateManager
Typed key-value state store (IActorStateManager)
Id
The actor unique identifier (ActorId)
Host
The ActorHost with registered type info
RegisterTimerAsync()
Register a periodic callback
RegisterReminderAsync()
Register a persistent reminder
Unit testing with ActorHost
The simplest unit test creates an actor with a lightweight ActorHost:
If your actor uses the base class StateManager property directly, test state persistence via TrySaveStateAsync() or verify behavior through public methods.
Mocking cross-actor calls
Actors call other actors through IActorProxyFactory. Inject the factory via constructor for testability:
In this guide, you will learn how to use IActorProxyFactory.
Tip
For a non-dependency-injected application, you can use the static methods on ActorProxy. Since the ActorProxy methods are error prone, try to avoid using them when configuring custom settings.
Identifying an actor
All of the APIs on IActorProxyFactory will require an actor type and actor id to communicate with an actor. For strongly-typed clients, you also need one of its interfaces.
Actor type uniquely identifies the actor implementation across the whole application.
Actor id uniquely identifies an instance of that type.
If you don’t have an actor id and want to communicate with a new instance, create a random id with ActorId.CreateRandom(). Since the random id is a cryptographically strong identifier, the runtime will create a new actor instance when you interact with it.
You can use the type ActorReference to exchange an actor type and actor id with other actors as part of messages.
Two styles of actor client
The actor client supports two different styles of invocation:
Actor client style
Description
Strongly-typed
Strongly-typed clients are based on .NET interfaces and provide the typical benefits of strong-typing. They don’t work with non-.NET actors.
Weakly-typed
Weakly-typed clients use the ActorProxy class. It is recommended to use these only when required for interop or other advanced reasons.
Using a strongly-typed client
The following example uses the CreateActorProxy<> method to create a strongly-typed client. CreateActorProxy<> requires an actor interface type, and will return an instance of that interface.
// Create a proxy for IOtherActor to type OtherActor with a random idvarproxy=this.ProxyFactory.CreateActorProxy<IOtherActor>(ActorId.CreateRandom(),"OtherActor");// Invoke a method defined by the interface to invoke the actor//// proxy is an implementation of IOtherActor so we can invoke its methods directlyawaitproxy.DoSomethingGreat();
Using a weakly-typed client
The following example uses the Create method to create a weakly-typed client. Create returns an instance of ActorProxy.
// Create a proxy for type OtherActor with a random idvarproxy=this.ProxyFactory.Create(ActorId.CreateRandom(),"OtherActor");// Invoke a method by name to invoke the actor//// proxy is an instance of ActorProxy.awaitproxy.InvokeMethodAsync("DoSomethingGreat");
Since ActorProxy is a weakly-typed proxy, you need to pass in the actor method name as a string.
You can also use ActorProxy to invoke methods with both a request and a response message. Request and response messages will be serialized using the System.Text.Json serializer.
// Create a proxy for type OtherActor with a random idvarproxy=this.ProxyFactory.Create(ActorId.CreateRandom(),"OtherActor");// Invoke a method on the proxy to invoke the actor//// proxy is an instance of ActorProxy.varrequest=newMyRequest(){Message="Hi, it's me.",};varresponse=awaitproxy.InvokeMethodAsync<MyRequest,MyResponse>("DoSomethingGreat",request);
When using a weakly-typed proxy, you must proactively define the correct actor method names and message types. When using a strongly-typed proxy, these names and types are defined for you as part of the interface definition.
Actor method invocation exception details
The actor method invocation exception details are surfaced to the caller and the callee, providing an entry point to track down the issue. Exception details include:
Method name
Line number
Exception type
UUID
You use the UUID to match the exception on the caller and callee side. Below is an example of exception details:
Dapr.Actors.ActorMethodInvocationException: Remote Actor Method Exception, DETAILS: Exception: NotImplementedException, Method Name: ExceptionExample, Line Number: 14, Exception uuid: d291a006-84d5-42c4-b39e-d6300e9ac38b
Learn all about authoring and running actors with the .NET SDK
Author actors
ActorHost
The ActorHost:
Is a required constructor parameter of all actors
Is provided by the runtime
Must be passed to the base class constructor
Contains all of the state that allows that actor instance to communicate with the runtime
internalclassMyActor:Actor,IMyActor,IRemindable{publicMyActor(ActorHosthost)// Accept ActorHost in the constructor:base(host)// Pass ActorHost to the base class constructor{}}
Since the ActorHost contains state unique to the actor, you don’t need to pass the instance into other parts of your code. It’s recommended only create your own instances of ActorHost in tests.
Dependency injection
Actors support dependency injection of additional parameters into the constructor. Any other parameters you define will have their values satisfied from the dependency injection container.
internalclassMyActor:Actor,IMyActor,IRemindable{publicMyActor(ActorHosthost,BankServicebank)// Accept BankService in the constructor:base(host){...}}
An actor type should have a single public constructor. The actor infrastructure uses the ActivatorUtilities pattern for constructing actor instances.
// In Startup.cspublicvoidConfigureServices(IServiceCollectionservices){...// Register additional types with dependency injection.services.AddSingleton<BankService>();}
Each actor instance has its own dependency injection scope and remains in memory for some time after performing an operation. During that time, the dependency injection scope associated with the actor is also considered live. The scope will be released when the actor is deactivated.
If an actor injects an IServiceProvider in the constructor, the actor will receive a reference to the IServiceProvider associated with its scope. The IServiceProvider can be used to resolve services dynamically in the future.
internalclassMyActor:Actor,IMyActor,IRemindable{publicMyActor(ActorHosthost,IServiceProviderservices)// Accept IServiceProvider in the constructor:base(host){...}}
When using this pattern, avoid creating many instances of transient services which implement IDisposable. Since the scope associated with an actor could be considered valid for a long time, you can accumulate many services in memory. See the dependency injection guidelines for more information.
IDisposable and actors
Actors can implement IDisposable or IAsyncDisposable. It’s recommended that you rely on dependency injection for resource management rather than implementing dispose functionality in application code. Dispose support is provided in the rare case where it is truly necessary.
Logging
Inside an actor class, you have access to an ILogger instance through a property on the base Actor class. This instance is connected to the ASP.NET Core logging system and should be used for all logging inside an actor. Read more about logging. You can configure a variety of different logging formats and output sinks.
Use structured logging with named placeholders like the example below:
publicTask<MyData>GetDataAsync(){this.Logger.LogInformation("Getting state at {CurrentTime}",DateTime.UtcNow);returnthis.StateManager.GetStateAsync<MyData>("my_data");}
When logging, avoid using format strings like: $"Getting state at {DateTime.UtcNow}"
Logging should use the named placeholder syntax which offers better performance and integration with logging systems.
Using an explicit actor type name
By default, the type of the actor, as seen by clients, is derived from the name of the actor implementation class. The default name will be the class name (without namespace).
If desired, you can specify an explicit type name by attaching an ActorAttribute attribute to the actor implementation class.
In the example above, the name will be MyCustomActorTypeName.
No change is needed to the code that registers the actor type with the runtime, providing the value via the attribute is all that is required.
Host actors on the server
Registering actors
Actor registration is part of ConfigureServices in Startup.cs. You can register services with dependency injection via the ConfigureServices method. Registering the set of actor types is part of the registration of actor services.
Inside ConfigureServices you can:
Register the actor runtime (AddActors)
Register actor types (options.Actors.RegisterActor<>)
Configure actor runtime settings options
Register additional service types for dependency injection into actors (services)
// In Startup.cspublicvoidConfigureServices(IServiceCollectionservices){// Register actor runtime with DIservices.AddActors(options=>{// Register actor types and configure actor settingsoptions.Actors.RegisterActor<MyActor>();// Configure default settingsoptions.ActorIdleTimeout=TimeSpan.FromMinutes(10);options.ActorScanInterval=TimeSpan.FromSeconds(35);options.DrainOngoingCallTimeout=TimeSpan.FromSeconds(5);options.DrainRebalancedActors=true;});// Register additional services for use with actorsservices.AddSingleton<BankService>();}
You can configure the JsonSerializerOptions as part of ConfigureServices:
// In Startup.cspublicvoidConfigureServices(IServiceCollectionservices){services.AddActors(options=>{...// Customize JSON optionsoptions.JsonSerializerOptions=...});}
Actors and routing
The ASP.NET Core hosting support for actors uses the endpoint routing system. The .NET SDK provides no support hosting actors with the legacy routing system from early ASP.NET Core releases.
Since actors uses endpoint routing, the actors HTTP handler is part of the middleware pipeline. The following is a minimal example of a Configure method setting up the middleware pipeline with actors.
// in Startup.cspublicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){if(env.IsDevelopment()){app.UseDeveloperExceptionPage();}app.UseRouting();app.UseEndpoints(endpoints=>{// Register actors handlers that interface with the Dapr runtime.endpoints.MapActorsHandlers();});}
The UseRouting and UseEndpoints calls are necessary to configure routing. Configure actors as part of the pipeline by adding MapActorsHandlers inside the endpoint middleware.
This is a minimal example, it’s valid for Actors functionality to existing alongside:
Controllers
Razor Pages
Blazor
gRPC Services
Dapr pub/sub handler
other endpoints such as health checks
Problematic middleware
Certain middleware may interfere with the routing of Dapr requests to the actors handlers. In particular, the UseHttpsRedirection is problematic for Dapr’s default configuration. Dapr sends requests over unencrypted HTTP by default, which the UseHttpsRedirection middleware will block. This middleware cannot be used with Dapr at this time.
// in Startup.cspublicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){if(env.IsDevelopment()){app.UseDeveloperExceptionPage();}// INVALID - this will block non-HTTPS requestsapp.UseHttpsRedirection();// INVALID - this will block non-HTTPS requestsapp.UseRouting();app.UseEndpoints(endpoints=>{// Register actors handlers that interface with the Dapr runtime.endpoints.MapActorsHandlers();});}
Necessary steps to serialize your types remoted and non-remoted Actors in .NET
The Dapr actor package enables you to use Dapr virtual actors within a .NET application with either a weakly- or strongly-typed client. Each utilizes a different serialization approach. This document will review the differences and convey a few key ground rules to understand in either scenario.
Please be advised that it is not a supported scenario to use the weakly- or strongly typed actor clients interchangeably because of these different serialization approaches. The data persisted using one Actor client will not be accessible using the other Actor client, so it is important to pick one and use it consistently throughout your application.
Weakly-typed Dapr Actor client
In this section, you will learn how to configure your C# types so they are properly serialized and deserialized at runtime when using a weakly-typed actor client. These clients use string-based names of methods with request and response payloads that are serialized using the System.Text.Json serializer. Please note that this serialization framework is not specific to Dapr and is separately maintained by the .NET team within the .NET GitHub repository.
When using the weakly-typed Dapr Actor client to invoke methods from your various actors, it’s not necessary to independently serialize or deserialize the method payloads as this will happen transparently on your behalf by the SDK.
The client will use the latest version of System.Text.Json available for the version of .NET you’re building against and serialization is subject to all the inherent capabilities provided in the associated .NET documentation.
The serializer will be configured to use the JsonSerializerOptions.Webdefault options unless overridden with a custom options configuration which means the following are applied:
Deserialization of the property name is performed in a case-insensitive manner
Serialization of the property name is performed using camel casing unless the property is overridden with a [JsonPropertyName] attribute
Deserialization will read numeric values from number and/or string values
Basic Serialization
In the following example, we present a simple class named Doodad though it could just as well be a record as well.
The default property names can be overridden by applying the [JsonPropertyName] attribute to desired properties.
Generally, this isn’t going to be necessary for types you’re persisting to the actor state as you’re not intended to read or write them independent of Dapr-associated functionality, but
the following is provided just to clearly illustrate that it’s possible.
Override Property Names on Classes
Here’s an example demonstrating the use of JsonPropertyName to change the name for the first property following serialization. Note that the last usage of JsonPropertyName on the Count property
matches what it would be expected to serialize to. This is largely just to demonstrate that applying this attribute won’t negatively impact anything - in fact, it might be preferable if you later
decide to change the default serialization options but still need to consistently access the properties previously serialized before that change as JsonPropertyName will override those options.
Because the argument passed in a primary constructor (introduced in C# 12) can be applied to either a property or field within a record, using the [JsonPropertyName] attribute may
require specifying that you intend the attribute to apply to a property and not a field in some ambiguous cases. Should this be necessary, you’d indicate as much in the primary constructor with:
If [property: ] is applied to the [JsonPropertyName] attribute where it’s not necessary, it will not negatively impact serialization or deserialization as the operation will
proceed normally as though it were a property (as it typically would if not marked as such).
Enumeration types
Enumerations, including flat enumerations are serializable to JSON, but the value persisted may surprise you. Again, it’s not expected that the developer should ever engage
with the serialized data independently of Dapr, but the following information may at least help in diagnosing why a seemingly mild version migration isn’t working as expected.
Take the following enum type providing the various seasons in the year:
publicenumSeason{Spring,Summer,Fall,Winter}
We’ll go ahead and use a separate demonstration type that references our Season and simultaneously illustrate how this works with records:
That might be unexpected that our Season.Winter value was represented as a 3, but this is because the serializer is going to automatically use numeric representations
of the enum values starting with zero for the first value and incrementing the numeric value for each additional value available. Again, if a migration were taking place and
a developer had flipped the order of the enums, this would affect a breaking change in your solution as the serialized numeric values would point to different values when deserialized.
Rather, there is a JsonConverter available with System.Text.Json that will instead opt to use a string-based value instead of the numeric value. The [JsonConverter] attribute needs
to be applied to be enum type itself to enable this, but will then be realized in any downstream serialization or deserialization operation that references the enum.
Using the same values from our myEngagement instance above, this would produce the following JSON instead:
{"name":"Ski Trip","season":"Winter"}
As a result, the enum members can be shifted around without fear of introducing errors during deserialization.
Custom Enumeration Values
The System.Text.Json serialization platform doesn’t, out of the box, support the use of [EnumMember] to allow you to change the value of enum that’s used during serialization or deserialization, but
there are scenarios where this could be useful. Again, assume that you’re tasking with refactoring the solution to apply some better names to your various
enums. You’re using the JsonStringEnumConverter<TType> detailed above so you’re saving the name of the enum to value instead of a numeric value, but if you change
the enum name, that will introduce a breaking change as the name will no longer match what’s in state.
Do note that if you opt into using this approach, you should decorate all your enum members with the [EnumMember] attribute so that the values are consistently applied for each enum value instead
of haphazardly. Nothing will validate this at build or runtime, but it is considered a best practice operation.
How can you specify the precise value persisted while still changing the name of the enum member in this scenario? Use a custom JsonConverter with an extension method that can pull the value
out of the attached [EnumMember] attributes where provided. Add the following to your solution:
publicsealedclassEnumMemberJsonConverter<T>:JsonConverter<T>whereT:struct,Enum{/// <summary>Reads and converts the JSON to type <typeparamref name="T" />.</summary>/// <param name="reader">The reader.</param>/// <param name="typeToConvert">The type to convert.</param>/// <param name="options">An object that specifies serialization options to use.</param>/// <returns>The converted value.</returns>publicoverrideTRead(refUtf8JsonReaderreader,TypetypeToConvert,JsonSerializerOptionsoptions){// Get the string value from the JSON readervarvalue=reader.GetString();// Loop through all the enum valuesforeach(varenumValueinEnum.GetValues<T>()){// Get the value from the EnumMember attribute, if anyvarenumMemberValue=GetValueFromEnumMember(enumValue);// If the values match, return the enum valueif(value==enumMemberValue){returnenumValue;}}// If no match found, throw an exceptionthrownewJsonException($"Invalid value for {typeToConvert.Name}: {value}");}/// <summary>Writes a specified value as JSON.</summary>/// <param name="writer">The writer to write to.</param>/// <param name="value">The value to convert to JSON.</param>/// <param name="options">An object that specifies serialization options to use.</param>publicoverridevoidWrite(Utf8JsonWriterwriter,Tvalue,JsonSerializerOptionsoptions){// Get the value from the EnumMember attribute, if anyvarenumMemberValue=GetValueFromEnumMember(value);// Write the value to the JSON writerwriter.WriteStringValue(enumMemberValue);}privatestaticstringGetValueFromEnumMember(Tvalue){MemberInfo[]member=typeof(T).GetMember(value.ToString(),BindingFlags.DeclaredOnly|BindingFlags.Static|BindingFlags.Public);if(member.Length==0)returnvalue.ToString();object[]customAttributes=member.GetCustomAttributes(typeof(EnumMemberAttribute),false);if(customAttributes.Length!=0){EnumMemberAttributeenumMemberAttribute=(EnumMemberAttribute)customAttributes;if(enumMemberAttribute!=null&&enumMemberAttribute.Value!=null)returnenumMemberAttribute.Value;}returnvalue.ToString();}}
Now let’s add a sample enumerator. We’ll set a value that uses the lower-case version of each enum member to demonstrate this. Don’t forget to decorate the enum with the JsonConverter
attribute and reference our custom converter in place of the numeral-to-string converter used in the last section.
This time, serialization will take into account the values from the attached [EnumMember] attribute providing us a mechanism to refactor our application without necessitating
a complex versioning scheme for our existing enum values in the state.
{"event":"Conference","season":"fall"}
Polymorphic Serialization
When working with polymorphic types in Dapr Actor clients, it is essential to handle serialization and deserialization correctly to ensure that the appropriate
derived types are instantiated. Polymorphic serialization allows you to serialize objects of a base type while preserving the specific derived type information.
To enable polymorphic deserialization, you must use the [JsonPolymorphic] attribute on your base type. Additionally,
it is crucial to include the [AllowOutOfOrderMetadataProperties] attribute to ensure that metadata properties, such as $type
can be processed correctly by System.Text.Json even if they are not the first properties in the JSON object.
In this example, the SampleValueBase class is marked with both [JsonPolymorphic] and [AllowOutOfOrderMetadataProperties]
attributes. This setup ensures that the $type metadata property can be correctly identified and processed during
deserialization, regardless of its position in the JSON object.
By following this approach, you can effectively manage polymorphic serialization and deserialization in your Dapr Actor
clients, ensuring that the correct derived types are instantiated and used.
Strongly-typed Dapr Actor client
In this section, you will learn how to configure your classes and records so they are properly serialized and deserialized at runtime when using a strongly-typed actor client. These clients are implemented using .NET interfaces and are not compatible with Dapr Actors written using other languages.
This actor client serializes data using an engine called the Data Contract Serializer which converts your C# types to and from XML documents. This serialization framework is not specific to Dapr and is separately maintained by the .NET team within the .NET GitHub repository.
When sending or receiving primitives (like strings or ints), this serialization happens transparently and there’s no requisite preparation needed on your part. However, when working with complex types such as those you create, there are some important rules to take into consideration so this process works smoothly.
Serializable Types
There are several important considerations to keep in mind when using the Data Contract Serializer:
By default, all types, read/write properties (after construction) and fields marked as publicly visible are serialized
All types must either expose a public parameterless constructor or be decorated with the DataContractAttribute attribute
Init-only setters are only supported with the use of the DataContractAttribute attribute
Read-only fields, properties without a Get and Set method and internal or properties with private Get and Set methods are ignored during serialization
Serialization is supported for types that use other complex types that are not themselves marked with the DataContractAttribute attribute through the use of the KnownTypesAttribute attribute
If a type is marked with the DataContractAttribute attribute, all members you wish to serialize and deserialize must be decorated with the DataMemberAttribute attribute as well or they’ll be set to their default values
How does deserialization work?
The approach used for deserialization depends on whether or not the type is decorated with the DataContractAttribute attribute. If this attribute isn’t present, an instance of the type is created using the parameterless constructor. Each of the properties and fields are then mapped into the type using their respective setters and the instance is returned to the caller.
If the type is marked with [DataContract], the serializer instead uses reflection to read the metadata of the type and determine which properties or fields should be included based on whether or not they’re marked with the DataMemberAttribute attribute as it’s performed on an opt-in basis. It then allocates an uninitialized object in memory (avoiding the use of any constructors, parameterless or not) and then sets the value directly on each mapped property or field, even if private or uses init-only setters. Serialization callbacks are invoked as applicable throughout this process and then the object is returned to the caller.
Use of the serialization attributes is highly recommended as they grant more flexibility to override names and namespaces and generally use more of the modern C# functionality. While the default serializer can be relied on for primitive types, it’s not recommended for any of your own types, whether they be classes, structs or records. It’s recommended that if you decorate a type with the DataContractAttribute attribute, you also explicitly decorate each of the members you want to serialize or deserialize with the DataMemberAttribute attribute as well.
.NET Classes
Classes are fully supported in the Data Contract Serializer provided that that other rules detailed on this page and the Data Contract Serializer documentation are also followed.
The most important thing to remember here is that you must either have a public parameterless constructor or you must decorate it with the appropriate attributes. Let’s review some examples to really clarify what will and won’t work.
In the following example, we present a simple class named Doodad. We don’t provide an explicit constructor here, so the compiler will provide an default parameterless constructor. Because we’re using supported primitive types (Guid, string and int32) and all our members have a public getter and setter, no attributes are required and we’ll be able to use this class without issue when sending and receiving it from a Dapr actor method.
So let’s tweak it - let’s add our own constructor and only use init-only setters on the members. This will fail to serialize and deserialize not because of the use of the init-only setters, but because there’s no parameterless constructors.
// WILL NOT SERIALIZE PROPERLY!publicclassDoodad{publicDoodad(stringname,intcount){Id=Guid.NewGuid();Name=name;Count=count;}publicGuidId{get;set;}publicstringName{get;init;}publicintCount{get;init;}}
If we add a public parameterless constructor to the type, we’re good to go and this will work without further annotations.
But what if we don’t want to add this constructor? Perhaps you don’t want your developers to accidentally create an instance of this Doodad using an unintended constructor. That’s where the more flexible attributes are useful. If you decorate your type with a DataContractAttribute attribute, you can drop your parameterless constructor and it will work once again.
In the above example, we don’t need to also use the DataMemberAttribute attributes because again, we’re using built-in primitives that the serializer supports. But, we do get more flexibility if we use the attributes. From the DataContractAttribute attribute, we can specify our own XML namespace with the Namespace argument and, via the Name argument, change the name of the type as used when serialized into the XML document.
It’s a recommended practice to append the DataContractAttribute attribute to the type and the DataMemberAttribute attributes to all the members you want to serialize anyway - if they’re not necessary and you’re not changing the default values, they’ll just be ignored, but they give you a mechanism to opt into serializing members that wouldn’t otherwise have been included such as those marked as private or that are themselves complex types or collections.
Note that if you do opt into serializing your private members, their values will be serialized into plain text - they can very well be viewed, intercepted and potentially manipulated based on how you’re handing the data once serialized, so it’s an important consideration whether you want to mark these members or not in your use case.
In the following example, we’ll look at using the attributes to change the serialized names of some of the members as well as introduce the IgnoreDataMemberAttribute attribute. As the name indicates, this tells the serializer to skip this property even though it’d be otherwise eligible to serialize. Further, because I’m decorating the type with the DataContractAttribute attribute, it means that I can use init-only setters on the properties.
When this is serialized, because we’re changing the names of the serialized members, we can expect a new instance of Doodad using the default values this to be serialized as:
C# 12 brought us primary constructors on classes. Use of a primary constructor means the compiler will be prevented from creating the default implicit parameterless constructor. While a primary constructor on a class doesn’t generate any public properties, it does mean that if you pass this primary constructor any arguments or have non-primitive types in your class, you’ll either need to specify your own parameterless constructor or use the serialization attributes.
Here’s an example where we’re using the primary constructor to inject an ILogger to a field and add our own parameterless constructor without the need for any attributes.
Structs are supported by the Data Contract serializer provided that they are marked with the DataContractAttribute attribute and the members you wish to serialize are marked with the DataMemberAttribute attribute. Further, to support deserialization, the struct will also need to have a parameterless constructor. This works even if you define your own parameterless constructor as enabled in C# 10.
Records were introduced in C# 9 and follow precisely the same rules as classes when it comes to serialization. We recommend that you should decorate all your records with the DataContractAttribute attribute and members you wish to serialize with DataMemberAttribute attributes so you don’t experience any deserialization issues using this or other newer C# functionalities. Because record classes use init-only setters for properties by default and encourage the use of the primary constructor, applying these attributes to your types ensures that the serializer can properly otherwise accommodate your types as-is.
Typically records are presented as a simple one-line statement using the new primary constructor concept:
publicrecordDoodad(GuidId,stringName,intCount);
This will throw an error encouraging the use of the serialization attributes as soon as you use it in a Dapr actor method invocation because there’s no parameterless constructor available nor is it decorated with the aforementioned attributes.
Here we add an explicit parameterless constructor and it won’t throw an error, but none of the values will be set during deserialization since they’re created with init-only setters. Because this doesn’t use the DataContractAttribute attribute or the DataMemberAttribute attribute on any members, the serializer will be unable to map the target members correctly during deserialization.
This approach does without the additional constructor and instead relies on the serialization attributes. Because we mark the type with the DataContractAttribute attribute and decorate each member with its own DataMemberAttribute attribute, the serialization engine will be able to map from the XML document to our type without issue.
There are several types built into .NET that are considered primitive and eligible for serialization without additional effort on the part of the developer:
Again, if you want to pass these types around via your actor methods, no additional consideration is necessary as they’ll be serialized and deserialized without issue. Further, types that are themselves marked with the SerializableAttribute attribute will be serialized.
Enumeration Types
Enumerations, including flag enumerations are serializable if appropriately marked. The enum members you wish to be serialized must be marked with the EnumMemberAttribute attribute in order to be serialized. Passing a custom value into the optional Value argument on this attribute will allow you to specify the value used for the member in the serialized document instead of having the serializer derive it from the name of the member.
The enum type does not require that the type be decorated with the DataContractAttribute attribute - only that the members you wish to serialize be decorated with the EnumMemberAttribute attributes.
publicenumColors{ [EnumMember]Red, [EnumMember(Value="g")]Green,Blue,//Even if used by a type, this value will not be serialized as it's not decorated with the EnumMember attribute}
Collection Types
With regards to the data contact serializer, all collection types that implement the IEnumerable interface including arays and generic collections are considered collections. Those types that implement IDictionary or the generic IDictionary<TKey, TValue> are considered dictionary collections; all others are list collections.
Not unlike other complex types, collection types must have a parameterless constructor available. Further, they must also have a method called Add so they can be properly serialized and deserialized. The types used by these collection types must themselves be marked with the DataContractAttribute attribute or otherwise be serializable as described throughout this document.
Data Contract Versioning
As the data contract serializer is only used in Dapr with respect to serializing the values in the .NET SDK to and from the Dapr actor instances via the proxy methods, there’s little need to consider versioning of data contracts as the data isn’t being persisted between application versions using the same serializer. For those interested in learning more about data contract versioning visit here.
Known Types
Nesting your own complex types is easily accommodated by marking each of the types with the DataContractAttribute attribute. This informs the serializer as to how deserialization should be performed.
But what if you’re working with polymorphic types and one of your members is a base class or interface with derived classes or other implementations? Here, you’ll use the KnownTypeAttribute attribute to give a hint to the serializer about how to proceed.
When you apply the KnownTypeAttribute attribute to a type, you are informing the data contract serializer about what subtypes it might encounter allowing it to properly handle the serialization and deserialization of these types, even when the actual type at runtime is different from the declared type.
[DataContract][KnownType(typeof(DerivedClass))]publicclassBaseClass{//Members of the base class}[DataContract]publicclassDerivedClass:BaseClass{//Additional members of the derived class}
In this example, the BaseClass is marked with [KnownType(typeof(DerivedClass))] which tells the data contract serializer that DerivedClass is a possible implementation of BaseClass that it may need to serialize or deserialize. Without this attribute, the serialize would not be aware of the DerivedClass when it encounters an instance of BaseClass that is actually of type DerivedClass and this could lead to a serialization exception because the serializer would not know how to handle the derived type. By specifying all possible derived types as known types, you ensure that the serializer can process the type and its members correctly.
For more information and examples about using [KnownType], please refer to the official documentation.
1.4.5 - How to: Run and use virtual actors in the .NET SDK
Try out .NET Dapr virtual actors with this example
The Dapr actor package allows you to interact with Dapr virtual actors from a .NET application. In this guide, you learn how to:
The interface project (\MyActor\MyActor.Interfaces)
This project contains the interface definition for the actor. Actor interfaces can be defined in any project with any name. The interface defines the actor contract shared by:
The actor implementation
The clients calling the actor
Because client projects may depend on it, it’s better to define it in an assembly separate from the actor implementation.
The actor service project (\MyActor\MyActorService)
This project implements the ASP.Net Core web service that hosts the actor. It contains the implementation of the actor, MyActor.cs. An actor implementation is a class that:
Derives from the base type Actor
Implements the interfaces defined in the MyActor.Interfaces project.
An actor class must also implement a constructor that accepts an ActorService instance and an ActorId, and passes them to the base Actor class.
The actor client project (\MyActor\MyActorClient)
This project contains the implementation of the actor client which calls MyActor’s method defined in Actor Interfaces.
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
Step 0: Prepare
Since we’ll be creating 3 projects, choose an empty directory to start from, and open it in your terminal of choice.
Step 1: Create actor interfaces
Actor interface defines the actor contract that is shared by the actor implementation and the clients calling the actor.
Actor interface is defined with the below requirements:
Actor interface must inherit Dapr.Actors.IActor interface
The return type of Actor method must be Task or Task<object>
Actor method can have one argument at a maximum
Create interface project and add dependencies
# Create Actor Interfacesdotnet new classlib -o MyActor.Interfaces
cd MyActor.Interfaces
# Add Dapr.Actors nuget package. Please use the latest package version from nuget.orgdotnet add package Dapr.Actors
cd ..
Implement IMyActor interface
Define IMyActor interface and MyData data object. Paste the following code into MyActor.cs in the MyActor.Interfaces project.
Dapr uses ASP.NET web service to host Actor service. This section will implement IMyActor actor interface and register Actor to Dapr Runtime.
Create actor service project and add dependencies
# Create ASP.Net Web service to host Dapr actordotnet new web -o MyActorService
cd MyActorService
# Add Dapr.Actors.AspNetCore nuget package. Please use the latest package version from nuget.orgdotnet add package Dapr.Actors.AspNetCore
# Add Actor Interface referencedotnet add reference ../MyActor.Interfaces/MyActor.Interfaces.csproj
cd ..
Add actor implementation
Implement IMyActor interface and derive from Dapr.Actors.Actor class. Following example shows how to use Actor Reminders as well. For Actors to use Reminders, it must derive from IRemindable. If you don’t intend to use Reminder feature, you can skip implementing IRemindable and reminder specific methods which are shown in the code below.
Paste the following code into MyActor.cs in the MyActorService project:
usingDapr.Actors;usingDapr.Actors.Runtime;usingMyActor.Interfaces;usingSystem;usingSystem.Threading.Tasks;namespaceMyActorService{internalclassMyActor:Actor,IMyActor,IRemindable{// The constructor must accept ActorHost as a parameter, and can also accept additional// parameters that will be retrieved from the dependency injection container///// <summary>/// Initializes a new instance of MyActor/// </summary>/// <param name="host">The Dapr.Actors.Runtime.ActorHost that will host this actor instance.</param>publicMyActor(ActorHosthost):base(host){}/// <summary>/// This method is called whenever an actor is activated./// An actor is activated the first time any of its methods are invoked./// </summary>protectedoverrideTaskOnActivateAsync(){// Provides opportunity to perform some optional setup.Console.WriteLine($"Activating actor id: {this.Id}");returnTask.CompletedTask;}/// <summary>/// This method is called whenever an actor is deactivated after a period of inactivity./// </summary>protectedoverrideTaskOnDeactivateAsync(){// Provides Opporunity to perform optional cleanup.Console.WriteLine($"Deactivating actor id: {this.Id}");returnTask.CompletedTask;}/// <summary>/// Set MyData into actor's private state store/// </summary>/// <param name="data">the user-defined MyData which will be stored into state store as "my_data" state</param>publicasyncTask<string>SetDataAsync(MyDatadata){// Data is saved to configured state store implicitly after each method execution by Actor's runtime.// Data can also be saved explicitly by calling this.StateManager.SaveStateAsync();// State to be saved must be DataContract serializable.awaitthis.StateManager.SetStateAsync<MyData>("my_data",// state namedata);// data saved for the named state "my_data"return"Success";}/// <summary>/// Get MyData from actor's private state store/// </summary>/// <return>the user-defined MyData which is stored into state store as "my_data" state</return>publicTask<MyData>GetDataAsync(){// Gets state from the state store.returnthis.StateManager.GetStateAsync<MyData>("my_data");}/// <summary>/// Register MyReminder reminder with the actor/// </summary>publicasyncTaskRegisterReminder(){awaitthis.RegisterReminderAsync("MyReminder",// The name of the remindernull,// User state passed to IRemindable.ReceiveReminderAsync()TimeSpan.FromSeconds(5),// Time to delay before invoking the reminder for the first timeTimeSpan.FromSeconds(5));// Time interval between reminder invocations after the first invocation}/// <summary>/// Get MyReminder reminder details with the actor/// </summary>publicasyncTask<IActorReminder>GetReminder(){awaitthis.GetReminderAsync("MyReminder");}/// <summary>/// Unregister MyReminder reminder with the actor/// </summary>publicTaskUnregisterReminder(){Console.WriteLine("Unregistering MyReminder...");returnthis.UnregisterReminderAsync("MyReminder");}// <summary>// Implement IRemindeable.ReceiveReminderAsync() which is call back invoked when an actor reminder is triggered.// </summary>publicTaskReceiveReminderAsync(stringreminderName,byte[]state,TimeSpandueTime,TimeSpanperiod){Console.WriteLine("ReceiveReminderAsync is called!");returnTask.CompletedTask;}/// <summary>/// Register MyTimer timer with the actor/// </summary>publicTaskRegisterTimer(){returnthis.RegisterTimerAsync("MyTimer",// The name of the timernameof(this.OnTimerCallBack),// Timer callbacknull,// User state passed to OnTimerCallback()TimeSpan.FromSeconds(5),// Time to delay before the async callback is first invokedTimeSpan.FromSeconds(5));// Time interval between invocations of the async callback}/// <summary>/// Unregister MyTimer timer with the actor/// </summary>publicTaskUnregisterTimer(){Console.WriteLine("Unregistering MyTimer...");returnthis.UnregisterTimerAsync("MyTimer");}/// <summary>/// Timer callback once timer is expired/// </summary>privateTaskOnTimerCallBack(byte[]data){Console.WriteLine("OnTimerCallBack is called!");returnTask.CompletedTask;}}}
Register actor runtime with ASP.NET Core startup
The Actor runtime is configured through ASP.NET Core Startup.cs.
The runtime uses the ASP.NET Core dependency injection system to register actor types and essential services. This integration is provided through the AddActors(...) method call in ConfigureServices(...). Use the delegate passed to AddActors(...) to register actor types and configure actor runtime settings. You can register additional types for dependency injection inside ConfigureServices(...). These will be available to be injected into the constructors of your Actor types.
Actors are implemented via HTTP calls with the Dapr runtime. This functionality is part of the application’s HTTP processing pipeline and is registered inside UseEndpoints(...) inside Configure(...).
Paste the following code into Startup.cs in the MyActorService project:
usingMicrosoft.AspNetCore.Builder;usingMicrosoft.AspNetCore.Hosting;usingMicrosoft.Extensions.DependencyInjection;usingMicrosoft.Extensions.Hosting;namespaceMyActorService{publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){services.AddActors(options=>{// Register actor types and configure actor settingsoptions.Actors.RegisterActor<MyActor>();});}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){if(env.IsDevelopment()){app.UseDeveloperExceptionPage();}app.UseRouting();// Register actors handlers that interface with the Dapr runtime.app.MapActorsHandlers();}}}
Step 3: Add a client
Create a simple console app to call the actor service. Dapr SDK provides Actor Proxy client to invoke actor methods defined in Actor Interface.
Create actor client project and add dependencies
# Create Actor's Clientdotnet new console -o MyActorClient
cd MyActorClient
# Add Dapr.Actors nuget package. Please use the latest package version from nuget.orgdotnet add package Dapr.Actors
# Add Actor Interface referencedotnet add reference ../MyActor.Interfaces/MyActor.Interfaces.csproj
cd ..
Invoke actor methods with strongly-typed client
You can use ActorProxy.Create<IMyActor>(..) to create a strongly-typed client and invoke methods on the actor.
Paste the following code into Program.cs in the MyActorClient project:
usingSystem;usingSystem.Threading.Tasks;usingDapr.Actors;usingDapr.Actors.Client;usingMyActor.Interfaces;namespaceMyActorClient{classProgram{staticasyncTaskMainAsync(string[]args){Console.WriteLine("Startup up...");// Registered Actor Type in Actor ServicevaractorType="MyActor";// An ActorId uniquely identifies an actor instance// If the actor matching this id does not exist, it will be createdvaractorId=newActorId("1");// Create the local proxy by using the same interface that the service implements.//// You need to provide the type and id so the actor can be located. varproxy=ActorProxy.Create<IMyActor>(actorId,actorType);// Now you can use the actor interface to call the actor's methods.Console.WriteLine($"Calling SetDataAsync on {actorType}:{actorId}...");varresponse=awaitproxy.SetDataAsync(newMyData(){PropertyA="ValueA",PropertyB="ValueB",});Console.WriteLine($"Got response: {response}");Console.WriteLine($"Calling GetDataAsync on {actorType}:{actorId}...");varsavedData=awaitproxy.GetDataAsync();Console.WriteLine($"Got response: {savedData}");}}}
Running the code
The projects that you’ve created can now to test the sample.
Run MyActorService
Since MyActorService is hosting actors, it needs to be run with the Dapr CLI.
cd MyActorService
dapr run --app-id myapp --app-port 5000 --dapr-http-port 3500 -- dotnet run
You will see commandline output from both daprd and MyActorService in this terminal. You should see something like the following, which indicates that the application started successfully.
...
ℹ️ Updating metadata for app command: dotnet run
✅ You're up and running! Both Dapr and your app logs will appear here.
== APP == info: Microsoft.Hosting.Lifetime[0]
== APP == Now listening on: https://localhost:5001
== APP == info: Microsoft.Hosting.Lifetime[0]
== APP == Now listening on: http://localhost:5000
== APP == info: Microsoft.Hosting.Lifetime[0]
== APP == Application started. Press Ctrl+C to shut down.
== APP == info: Microsoft.Hosting.Lifetime[0]
== APP == Hosting environment: Development
== APP == info: Microsoft.Hosting.Lifetime[0]
== APP == Content root path: /Users/ryan/actortest/MyActorService
Run MyActorClient
MyActorClient is acting as the client, and it can be run normally with dotnet run.
Open a new terminal an navigate to the MyActorClient directory. Then run the project with:
dotnet run
You should see commandline output like:
Startup up...
Calling SetDataAsync on MyActor:1...
Got response: Success
Calling GetDataAsync on MyActor:1...
Got response: PropertyA: ValueA, PropertyB: ValueB
💡 This sample relies on a few assumptions. The default listening port for an ASP.NET Core web project is 5000, which is being passed to dapr run as --app-port 5000. The default HTTP port for the Dapr sidecar is 3500. We’re telling the sidecar for MyActorService to use 3500 so that MyActorClient can rely on the default value.
Now you have successfully created an actor service and client. See the related links section to learn more.
Overview of the modernized Dapr Actors implementation for .NET (Dapr.Actors.Next)
Dapr.Actors.Next is a reimplementation of the Dapr Actors building block for .NET. The original Dapr.Actors package has been in service for a long time and predates much of what the modern Dapr .NET SDK now relies on, so this package updates the actor experience to match: it talks to the runtime over the bidirectional gRPC streaming introduced in Dapr 1.18, removes reflection from the actor path, and brings actors in line with the dependency injection, options, serialization, and source generator patterns used elsewhere in the SDK.
The actor model itself is unchanged. Actors are still virtual, addressed by type and id, with reentrancy, timers, reminders, and proxying. Dapr.Actors.Next is a separate package family and is not API-compatible with Dapr.Actors, but it is fully wire-compatible with the Dapr runtime, so adopting it requires no runtime changes except that this will only work with the Dapr runtime v1.18 or later.
Runtime requirement and connectivity
Dapr.Actors.Next requires Dapr runtime v1.18.0 or later. It hosts actors over persistent, app-initiated SubscribeActorEvents gRPC streams, so actor callbacks arrive over that stream rather than as inbound HTTP requests to mapped actor-handler endpoints, which is what Dapr.Actors required. The application still exposes its gRPC server port, which the runtime uses for its precondition checks; what changes is how actor callbacks are delivered, not whether the app runs a gRPC server.
Status of Dapr.Actors
Active development on Dapr.Actors has stopped; this package now receives security fixes only, and all new actor development happens in Dapr.Actors.Next. There is no deprecation date for Dapr.Actors but it’s considered to be in a maintenance-only mode.
Moving from Dapr.Actors is incremental, not necessarily all at once
Dapr.Actors.Next is a new package family with a different API, so adopting it is a rewrite of your actor layer rather than an in-place upgrade. It is wire-compatible with the runtime and addresses actors by the same type name, so you can migrate one actor type at a time rather than in a single big-bang cutover. We recommend performing that migration across separate projects or services rather than hosting both SDKs in the same one: Dapr.Actors and Dapr.Actors.Next have meaningfully different behaviors — around hosting, dispatch, and serialization — and mixing them in a single project invites confusion about which SDK owns a given actor. We also have no testing that conclusively demonstrates the two packages running side-by-side in the same project, so while it is technically possible, we don’t recommend it. Cross-SDK calling works where the payload serialization matches: the new SDK uses System.Text.Json by default, which lines up with the old non-remoting (JSON) proxy but not with the old DataContract remoting path. The highest-stakes thing to verify before moving a type is that its existing persisted state remains readable under the new serializer. See the migration guide for more information.
What changed
This rewrite was born out of the two core ideas:
The first is how the SDK interfaces with the runtime. Actor callbacks (invoke, reminder, timer, and deactivate) now arrive over a long-lived bidirectional gRPC stream rather than per-call requests into a hosted actor endpoint, which lowers per-call overhead and removes the need to map inbound actor handlers. This is the same streaming pattern Dapr already uses for pub/sub subscriptions and workflow dispatch.
The second is the amount of work the SDK now does locally, on your side of that connection (both at build and runtime), to make actor code easier and safer to write. Source generators replace the reflection-based proxy and dispatch machinery, which both removes a runtime cost and enables Native AOT. Serialization moves to the same pluggable IDaprSerializer used by State management and Workflows. State migration, a state machine programming model, pub/sub-driven actors, and a deterministic in-memory test runtime are all provided in the box. The result is meant to make it straightforward to build high-performance actor applications using the rest of the modern Dapr .NET SDK rather than a separate set of actor-specific conventions.
Source generators and compile-time checks
Source generators do most of the wiring that you used to write or that the old SDK did with reflection. From your actor interface and implementation, the generator produces the client proxy, the server-side dispatcher, the activation factory, the registration, and an actor registry describing every actor and its method signatures. None of this is hand-written, and none of it runs through reflection at call time, which is what keeps the path AOT-friendly.
Alongside the generators, the package ships analyzers and code fixes that catch actor-specific mistakes while you type: methods that aren’t serializable or don’t return a task type, blocking calls or thread escapes inside a turn, time read from the clock instead of an injected TimeProvider, a state change that would break deserialization of existing data, or a gap in a state migration chain. Where a fix is mechanical, the analyzer offers one. The full set is listed in the diagnostics reference.
How it differs from Dapr.Actors
Concern
Dapr.Actors (original)
Dapr.Actors.Next
Runtime connectivity
Inbound actor-handler endpoints the runtime calls into per invocation
Actor callbacks over an outbound persistent SubscribeActorEvents stream; no actor endpoints to map (the app’s gRPC server port remains)
Proxies and dispatch
Reflection (DispatchProxy, runtime IL)
Source-generated; no reflection on the hot path
Native AOT and trimming
Not supported
Supported; runtime packages are trim/AOT clean
Nullable reference types
Partial
Enabled across the public surface
Registration
Manual RegisterActor<T>() per type
Source-generated discovery; actors are not registered by hand
Hosting setup
app.MapActorsHandlers() endpoint mapping
AddDaprActors() only; the host dials the runtime
Dependency injection
Bespoke
Per-activation DI scope; constructor injection of registered services
Proxy flavors
Remoting proxy (.NET-to-.NET) and non-remoting proxy (cross-app)
One proxy; no remoting/non-remoting distinction
Serialization
DataContract via the remoting proxy, or System.Text.Json via the non-remoting proxy
Pluggable IDaprSerializer (default System.Text.Json) for every call; no DataContract built in
Configuration
Bespoke
Options pattern (IOptions<DaprActorsOptions>)
Testing
Integration tests against a sidecar
In-memory deterministic runtime plus optional Coyote deep testing
State versioning
Manual
State-envelope schema versioning with upcaster chains
State machines
Not provided
First-class StateMachineActor<TState, TData> model
Pub/sub integration
Not provided
Built-in [Subscribe] subscription streams
Per-actor state cache
Yes
Yes (retained)
Serialization is a clean break from Dapr.Actors
In Dapr.Actors the serialization format was tied to the proxy you chose. The remoting proxy used DataContract and worked only between .NET actors, while the non-remoting proxy used System.Text.Json and supported cross-app calls. Dapr.Actors.Next removes that split. There is a single serialization path, IDaprSerializer (System.Text.Json by default), used for every call regardless of how you invoke the actor, and DataContract is not supported out of the box. If you need DataContract, supply it through a custom IDaprSerializer implementation. The strongly-typed proxy resembles the former remoting client in calling syntax only; that resemblance does not imply DataContract, and the way you invoke an actor has nothing to do with how its payloads are serialized.
Nullability and modernization
The public surface is annotated for nullable reference types, so the compiler distinguishes an actor method that may return no value from one that always returns a result, and flags the difference at build time rather than at call time. Combined with source-generated proxies and serialization, this removes a category of error the reflection-based SDK could only surface at runtime.
The modernization is functional rather than cosmetic. Removing reflection is what makes Native AOT possible and lowers startup and memory cost. The options pattern replaces bespoke configuration. A real per-activation DI scope means an actor’s dependencies are resolved and disposed on the same lifecycle as the actor. A single pluggable serializer means actors, state management, and workflows serialize the same way.
Core concepts
Each concept has its own page:
Author, register, and call actors: attributes, what the source generator produces, the minimum you must register, and cross-assembly and cross-app scenarios.
Serialization: the pluggable serializer, and the per-actor cache.
State migration: The state envelope and versioning state with upcasters.
State machine actors: the StateMachineActor model, when to choose it over a workflow, and how to test it.
Subscription streams: driving actors from pub/sub topics with [Subscribe] metadata and explicit stream registration.
Dynamic invocation: calling actors by type, id, and method with no compile-time contract, for gateways, tooling, and cross-language callers.
Testing: the in-memory test runtime, remote-call simulation, paused state writes and deactivation races, virtual timers/reminders, callback-stream fault injection, and optional Coyote integration.
Per-type runtime options are supported through options.Actors.RegisterActor<TActor>(...), including idle timeout, reentrancy, draining, and state-migration overrides.
Learn by example
If you would rather see the improvements one at a time with runnable code, the tutorial walks through six worked examples, each paired with its test. The solution also includes a seventh per-type options example under /examples/Actor.Next/. It is the fastest way to understand what changed and why.
1.5.1 - Migrating from Dapr.Actors to Dapr.Actors.Next
A concept-by-concept guide for moving an existing Dapr.Actors (and Dapr.Actors.AspNetCore) actor layer to Dapr.Actors.Next
This guide is for developers who already run actors on Dapr.Actors (typically hosted with Dapr.Actors.AspNetCore) and want to move to Dapr.Actors.Next. It walks each concept you use today, shows the equivalent in the new SDK, explains how the concept itself changed, calls out those opportunities to make impactful mistakes, and gives before/after code. This document assumes you know how Dapr.Actors works; it does not re-teach the actor model, and it deliberately skips features that have no analog in the old SDK (state machines, subscription streams, the in-memory test runtime, and state migration each have their own page).
Dapr.Actors.Next is a new package family with a different API. Adopting it is a rewrite of your actor layer, not an in-place package bump. The good news is that it is wire-compatible with the Dapr runtime and addresses actors by the same type name, so the old and new SDKs can coexist and you can move one actor type at a time rather than all at once.
Runtime requirement
Dapr.Actors.Next requires Dapr runtime v1.18.0 or later. It hosts actors over persistent, app-initiated SubscribeActorEvents gRPC streams rather than inbound HTTP actor-handler endpoints. Confirm your clusters are on 1.18+ before you begin; there is no supported way to run the new SDK against an older sidecar. While the Dapr.Actors and Dapr.Actors.AspNetCore packages will work against all supported versions of the Dapr runtime, they will not use any of the gRPC functionality and an app using both the old and new Actors SDKs will need a second port opened for both the HTTP and gRPC callbacks from the runtime.
Before you start: the two things most likely to bite
Read these first. Everything else in the migration is mechanical by comparison.
Persisted state must remain readable. This is the highest-stakes item, because existing actors already have state in your store. The good news is that Dapr.Actors already serializes actor state with System.Text.Json by default, and so does Dapr.Actors.Next, so state is broadly compatible. What can still break you is a difference in JsonSerializerOptions (property naming policy, enum-as-string versus number, how nulls and defaults are emitted) or a custom state serializer you configured on the old side. Treat the serializer configuration as part of your at-rest contract, verify it lines up, and where a shape genuinely changes, use the built-in state migration rather than hoping the bytes match.
Live cross-SDK calls only line up on the JSON path. During coexistence, a call from a Dapr.Actors.Next proxy is serialized with System.Text.Json. That matches the old non-remoting proxy (also JSON) but not the old remoting proxy (DataContract). If you have a mixed fleet mid-migration where one app calls another over the actor protocol, the two ends must agree on the wire format. A clean way to avoid this class of problem is to move an actor type and its callers together, so you are never straddling two serialization formats for the same type.
Move one actor type at a time
Because both SDKs address actors by the same type name and are wire-compatible with the runtime, you do not need a full-scale cutover. Stand up the new host (or a new mode in an existing app), migrate a single actor type and the code that calls it, verify state reads and behavior, then move the next. Keep Dapr.Actors installed for the types you have not moved yet. You might also keep the full namespaces attached to types to help distinguish which is used for which to avoid mid-migration conflicts.
IActorReminderScheduler.ScheduleAsync(…) routed to a named actor method
Options
ActorRuntimeOptions / ActorReentrancyConfig
DaprActorsOptions (options pattern)
DI
Scope-per-activation via the AspNetCore DI activator; ctor takes ActorHost
Per-activation scope; plain constructor injection
Testing
Integration tests against a sidecar
In-memory deterministic runtime (own page)
One interface, many actor types
Not practical
Supported
One actor type, many interfaces
Not supported
Supported
Multi-parameter non-remoting methods
Not possible (single payload arg)
Supported
Packages and hosting
In the old world you referenced Dapr.Actors for the client and runtime types and Dapr.Actors.AspNetCore for hosting, then mapped actor endpoints on an HTTP port so the sidecar could call into your app over HTTP. In the new world you reference a single Dapr.Actors.Next package and map a gRPC endpoint; at application startup, the host opens a persistent stream with the runtime through which all callbacks are received instead.
<!-- Before --><ItemGroup><PackageReferenceInclude="Dapr.Actors"Version="…"/><PackageReferenceInclude="Dapr.Actors.AspNetCore"Version="…"/></ItemGroup>
<!-- After: one reference brings the runtime, source generators, and analyzers --><ItemGroup><PackageReferenceInclude="Dapr.Actors.Next"Version="…"/></ItemGroup>
// Before (Program.cs): register, then map the actor HTTP endpoints.varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddActors(options=>{options.Actors.RegisterActor<CartActor>();options.ActorIdleTimeout=TimeSpan.FromMinutes(30);});varapp=builder.Build();app.MapActorsHandlers();// maps dapr/config, deactivation, method, remind, timer, healthzapp.Run();
// After: no endpoint mapping. AddDaprActors starts the host that streams from the runtime.varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprActors(options=>{options.ActorIdleTimeout=TimeSpan.FromMinutes(30);});varapp=builder.Build();app.Run();
How this changed: callbacks (invoke, reminder, timer, deactivate) used to arrive as inbound HTTP requests to endpoints you mapped with MapActorsHandlers(). Now they arrive over a long-lived bidirectional gRPC stream the app opens to the runtime. There is nothing equivalent to MapActorsHandlers().
Your app still runs a gRPC server
Removing the actor HTTP handlers does not mean your app stops listening. The application still exposes its gRPC server port, which the runtime uses for its precondition checks (e.g. in case you’re using other Dapr functionality that requires a gRPC endpoint on your app). What changed is only how actor callbacks are delivered. See Author, register, and call actors for the host setup in full.
Registration and discovery
Dapr.Actors required you to enumerate every actor type by hand inside the options delegate. Dapr.Actors.Next discovers them at build time with a source generator, so the per-type call disappears for the common case.
// Before: register each actor explicitly.builder.Services.AddActors(options=>{options.Actors.RegisterActor<CartActor>();options.Actors.RegisterActor<OrderActor>();});
// After: discovery is automatic; AddDaprActors wires up every [DaprActor] in scope.builder.Services.AddDaprActors();
You can still register a type under an explicit name (for example, sourced from configuration) with options.Actors.RegisterActor<T>(name), and you can turn automatic hosting off with EnableAutoActorRegistration = false in the registration options to build a gateway that calls actors without hosting any. Those are covered under Controlling automatic registration.
If actors live in a referenced project, opt in to reference scanning
By default, the generator scans only the executing assembly. If your [DaprActor] types (or state upcasters) live in a class library the host references, add <CompilerVisibleProperty Include="DaprActorsScanReferences" /> to the host .csproj so they are discovered. This better facilitates those that want to colocate actor types in a shared project and then reference them specifically in their apps. Especially if your app doesn’t intend to host all possible discoverable actor types, you should set EnableAutoActorRegistration to false and manually register them yourself. See Cross-assembly discovery.
Defining an actor
The two-part shape (a contract interface plus an implementation) is unchanged, but both parts now carry an attribute, and the implementation gets its identity and state from an injected context object instead of an ActorHost passed to the base constructor.
// BeforepublicinterfaceICartActor:IActor// derives from Dapr.Actors.IActor, no attribute{TaskAddItem(CartItemitem);Task<CartSummary>GetSummary();}[Actor(TypeName = "CartActor")]publicclassCartActor:Actor,ICartActor{publicCartActor(ActorHosthost):base(host){}// required base ctorpublicasyncTaskAddItem(CartItemitem){varcart=awaitStateManager.GetOrAddStateAsync("cart",newCartState());cart.Items.Add(item);awaitStateManager.SetStateAsync("cart",cart);// and/or rely on end-of-turn save}publicasyncTask<CartSummary>GetSummary(){varcart=awaitStateManager.GetOrAddStateAsync("cart",newCartState());returnnewCartSummary(cart.Items.Count);}}
// AfterusingDapr.Actors.Next;[GenerateActorClient]// required marker on the contractpublicinterfaceICartActor:IActor{TaskAddItem(CartItemitem,CancellationTokenct=default);Task<CartSummary>GetSummary(CancellationTokenct=default);}[DaprActor]// required marker on the implementation, optional name argument, supports more than one IActor interfacepublicsealedclassCartActor(ActorActivationContextcontext):Actor,ICartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;publicasyncTaskAddItem(CartItemitem,CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);cart.Value.Items.Add(item);// mutate through .Value; saved at end of turn}publicasyncTask<CartSummary>GetSummary(CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);returnnewCartSummary(cart.Value.Items.Count);}}
What changed and why:
[Actor(TypeName = "…")] becomes [DaprActor("…")]. The name argument is optional in both; if you omit it, the type name is used. The actor type name is still the durable address the runtime routes on, so keep it identical to what your existing instances were created under.
The interface now needs [GenerateActorClient]. Without it, the generator does not see the contract, and an implementation that references no decorated interface generates nothing at all (no proxy, no dispatcher, no registration) with no error to point at. This is the single most common “my actor silently does nothing” cause.
Actor(ActorHost host) is gone. Inject an ActorActivationContext and override Id and State from it. There is no Host, no ProxyFactory property on the base, and no Logger property; inject IActorProxyFactory and ILogger<T> if you need them.
Both attributes are required, and they are a pair
[GenerateActorClient] on the interface and [DaprActor] on the class are not interchangeable and neither is optional. The generator builds actors only from [DaprActor] classes that implement a [GenerateActorClient] interface. If an actor “compiles but is never called,” the first thing to check is that its interface derives from IActor and carries [GenerateActorClient] (the DAPR1421 analyzer flags a [DaprActor] with no decorated contract).
Lifecycle hooks
The hooks map almost one-to-one, with two differences: they return ValueTask and take a CancellationToken, and the separate OnActorMethodFailedAsync is folded into OnPostActorMethodAsync, which now receives a nullable Exception.
// AfterprotectedoverrideValueTaskOnActivateAsync(CancellationTokenct=default){…}protectedoverrideValueTaskOnDeactivateAsync(CancellationTokenct=default){…}protectedoverrideValueTaskOnPreActorMethodAsync(ActorMethodContextcontext,CancellationTokenct=default){…}protectedoverrideValueTaskOnPostActorMethodAsync(ActorMethodContextcontext,Exception?exception,CancellationTokenct=default){…}// no separate OnActorMethodFailedAsync — inspect the exception parameter above
State management
State is the part that most deserves your attention, both because it is where your durable data lives and because the shape of the API changed. IActorStateManager becomes IActorStateAccessor, exposed as State rather than StateManager. A read now returns an IActorState<T> wrapper whose value you reach and mutate through .Value; pending changes are saved automatically at the end of each turn, and State.SaveStateAsync() is available when you need to persist them earlier.
// Beforevarcart=awaitStateManager.GetOrAddStateAsync("cart",newCartState());cart.Items.Add(item);awaitStateManager.SetStateAsync("cart",cart);// explicit set; save happens at end of turn
// Aftervarcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);cart.Value.Items.Add(item);// mutate .Value; no set needed
Method mapping:
IActorStateManager (old)
IActorStateAccessor (new)
Notes
GetStateAsync<T>(name) (throws if missing)
TryGetAsync<T>(name) then check, or GetOrCreateAsync<T>(name, factory)
New read is null-returning or create-on-miss; there is no throw-on-missing read
TryGetStateAsync<T>(name) → ConditionalValue<T>
TryGetAsync<T>(name) → IActorState<T>? (null if absent)
.Value on the wrapper holds the value
GetOrAddStateAsync<T>(name, value)
GetOrCreateAsync<T>(name, () => value)
Factory is a delegate, evaluated only on miss
SetStateAsync<T>(name, value)
SetAsync<T>(name, value), or mutate .Value
Prefer mutating .Value inside a turn
AddStateAsync / TryAddStateAsync
GetOrCreateAsync / SetAsync
No dedicated add-only method
AddOrUpdateStateAsync<T>(…)
Mutate .Value (or SetAsync)
The add/update dance is unnecessary with the wrapper
RemoveStateAsync / TryRemoveStateAsync
RemoveAsync(name)
—
ContainsStateAsync(name)
TryGetAsync<T>(name) is not null
—
SaveStateAsync()
SaveStateAsync()
Optional; use only when you need a mid-turn write. End-of-turn save is still automatic
ClearCacheAsync()
EvictCacheAsync()
Drops cached entries without persisting them so the next read hits the store
How this changed: the old cache was also saved at the end of a turn, so auto-save is not new. What is new is the ergonomics (mutate .Value instead of get-mutate-set). You usually do not call save explicitly; call State.SaveStateAsync() only when later work in the same method depends on the state already being durable. A successful explicit save marks the cache clean, so the end-of-turn save does not write the same data again unless the actor changes it afterward. Multiple mutations before a save still collapse into a single write.
Do not use EvictCacheAsync as a save operation. It removes entries from the current activation’s cache and causes later reads to re-read durable state. By default it refuses to evict dirty entries; with EvictOnDirtyState = true, dirty entries are discarded rather than persisted.
State serialization is System.Text.Json on both sides — but verify the options
Dapr.Actors serialized actor state with System.Text.Json by default (Web defaults), and Dapr.Actors.Next serializes through IDaprSerializer, whose default is also System.Text.Json. So existing state is generally readable. The risk is a mismatch in JsonSerializerOptions (naming policy, enum handling, null/default emission) or a custom IActorStateSerializer you registered on the old side. If you changed a state type’s shape, do not try to make the bytes line up by hand — use the built-in state migration, which reads legacy plain values and folds them forward on read. See also Serialization.
Records and primary-constructor types just work as payloads now
Under Dapr.Actors, the remoting proxy used the Data Contract Serializer for method payloads, which required a public parameterless constructor or [DataContract]/[DataMember] annotations — so records and primary-constructor classes needed a redundant constructor or attributes to travel as arguments. Dapr.Actors.Next uses System.Text.Json for every call, so those types work as written with no serialization attributes. (Actor state was already JSON in the old SDK, so this specifically removes the friction the remoting proxy imposed on argument and return types.)
Calling actors: one proxy, no remoting split
Dapr.Actors gave you two ways to call an actor: a strongly-typed remoting proxy (ActorProxy.Create<T>), which used DataContract and only worked .NET-to-.NET, and a non-remoting proxy (ActorProxy.Create returning ActorProxy, then InvokeMethodAsync<TRequest, TResponse>(method, data)), which used JSON and could cross app boundaries. Dapr.Actors.Next collapses this into a single proxy obtained from IActorProxyFactory, serialized through IDaprSerializer for every call.
// Before — remoting (DataContract, .NET-to-.NET only)varcart=ActorProxy.Create<ICartActor>(ActorId.Create(userId),"CartActor");awaitcart.AddItem(item);// Before — non-remoting (JSON, cross-app; single payload argument)varcart=ActorProxy.Create(ActorId.Create(userId),"CartActor");awaitcart.InvokeMethodAsync<CartItem>("AddItem",item);varsummary=awaitcart.InvokeMethodAsync<CartSummary>("GetSummary");
// After — one proxy, injected factory, strongly typed, works cross-app toopublicsealedclassCheckoutService(IActorProxyFactoryproxies){publicasyncTaskAdd(stringuserId,CartItemitem){varcart=proxies.Create<ICartActor>(ActorId.Create(userId),"CartActor");awaitcart.AddItem(item);}}
How this changed:
The strongly-typed proxy here resembles the old remoting client in calling syntax only. It does not use DataContract. Every call, typed or dynamic, serializes with System.Text.Json.
Prefer the injected IActorProxyFactory over the static ActorProxy.Create<T>(…) facade. The static facade still exists (and keeps the familiar shape for people coming from Dapr.Actors.Client.ActorProxy.Create), but it relies on process-wide mutable state; see Avoid the static ActorProxy facade.
Both the generic interface and the actor type name are required on Create<T>(id, type), because one interface can back several actor types (see below). The interface names the contract; the type name selects which registered actor you mean.
For calls without a compile-time contract, there is a dynamic client
The old non-remoting InvokeMethodAsync("MethodName", …) by string maps to IDynamicActorClient.InvokeAsync(type, id, method, argsJson), paired with IActorRegistry for discovery. If you used the non-remoting proxy specifically because you did not have the contract at compile time (a gateway, tooling, a cross-language caller), that is now a first-class, documented path rather than an overload of the proxy. See Dynamic invocation.
Timers
Timers move from a method on the actor base (RegisterTimerAsync) to an injected IActorTimerScheduler. The old API took the name of a callback method as a string plus a byte[] state blob; the new API takes the target operation name and either a typed argument serialized by the configured actor wire serializer or a caller-provided byte[], and routes the callback to that operation.
// Before — callback is a method name string; state is a byte[]; validated by reflectionprotectedoverrideasyncTaskOnActivateAsync(){awaitRegisterTimerAsync(timerName:"refresh-prices",callback:nameof(RefreshPrices),callbackParams:Encoding.UTF8.GetBytes(sku),dueTime:TimeSpan.FromMinutes(1),period:TimeSpan.FromMinutes(5));}publicTaskRefreshPrices(byte[]data){…}// 0 or 1 param, must return Task
// After — inject the scheduler; route to a named operation with a typed argument[DaprActor("Cart")]publicsealedclassCartActor(ActorActivationContextcontext,IActorTimerSchedulertimers):Actor,ICartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;publicasyncTaskAddItem(CartItemitem,CancellationTokenct=default){awaittimers.RescheduleAsync(actorType:"Cart",actorId:Id,name:"refresh-prices",dueTime:TimeSpan.FromMinutes(1),operationName:nameof(RefreshPrices),arguments:item.Sku,period:TimeSpan.FromMinutes(5),cancellationToken:ct);}publicTaskRefreshPrices(stringsku,CancellationTokenct=default)=>Task.CompletedTask;}
Notes: dueTime still controls the first firing. Omitting period (or setting it to TimeSpan.Zero / Timeout.InfiniteTimeSpan) makes it one-shot; a positive period makes it periodic. ttl is optional and, when supplied, must be at least dueTime. Cancel with timers.CancelAsync(actorType, id, name, ct). The durability caveat is unchanged: a timer is in-memory and tied to the activation, so it does not survive deactivation or restart.
Reminders
Reminders are the callback shape that changed the most. In Dapr.Actors you implemented IRemindable.ReceiveReminderAsync — a single method that received every reminder and had to branch on reminderName to decide what to do, with the payload as a byte[]. In Dapr.Actors.Next a reminder is scheduled through IActorReminderScheduler and routes directly to a named actor method; there is no IRemindable and no central dispatch switch.
// Before — implement IRemindable and branch on the name[Actor(TypeName = "Cart")]publicclassCartActor:Actor,ICartActor,IRemindable{publicCartActor(ActorHosthost):base(host){}publicasyncTaskStartAbandonWatch(){awaitRegisterReminderAsync(reminderName:"abandon-cart",state:Array.Empty<byte>(),dueTime:TimeSpan.FromMinutes(30),period:TimeSpan.Zero);}publicasyncTaskReceiveReminderAsync(stringreminderName,byte[]state,TimeSpandueTime,TimeSpanperiod){switch(reminderName)// one method fans out to many reminders{case"abandon-cart":varcart=awaitStateManager.GetOrAddStateAsync("cart",newCartState());cart.Abandoned=true;awaitStateManager.SetStateAsync("cart",cart);break;}}}
// After — schedule through the injected scheduler; the reminder name IS the operation[DaprActor("Cart")]publicsealedclassCartActor(ActorActivationContextcontext,IActorReminderSchedulerreminders):Actor,ICartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;publicasyncTaskStartAbandonWatch(CancellationTokenct=default){awaitreminders.ScheduleAsync(actorType:"Cart",actorId:Id,name:nameof(AbandonCart),// the reminder name routes to this methoddueTime:TimeSpan.FromMinutes(30),period:TimeSpan.Zero,arguments:Array.Empty<byte>(),ttl:TimeSpan.FromDays(1),overwrite:true,cancellationToken:ct);}publicasyncTaskAbandonCart(CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);cart.Value.Abandoned=true;// no IRemindable, no switch, no explicit save}}
How this changed and what to watch for:
There is no IRemindable. Delete the interface and the central ReceiveReminderAsync switch; each reminder targets its own method.
The reminder name is both the durable reminder identity and the operation routed on callback. Choose a stable name and do not rename it casually. If you rename the method, already-registered reminders keep calling the old operation name until they are re-registered or cancelled.
Reminder payloads use the same overload pattern as timers: pass a typed value to serialize through the actor wire serializer, or pass byte[] when you have already serialized the payload yourself.
overwrite controls whether re-registering an existing name replaces the prior registration; Dapr defaults to overwrite, and overwrite: false lets a duplicate registration fail instead.
Durability is unchanged: reminders survive deactivation and restart and are delivered by the Dapr scheduler.
Options and reentrancy
ActorRuntimeOptions becomes DaprActorsOptions, configured through the standard options pattern in the AddDaprActors delegate. Most knobs carry over by name; reentrancy is the notable reshape.
// Afterbuilder.Services.AddDaprActors(options=>{options.ActorIdleTimeout=TimeSpan.FromMinutes(30);options.DrainRebalancedActorsTimeout=TimeSpan.FromSeconds(5);options.DrainRebalancedActors=true;options.EnableReentrancy=true;// was ReentrancyConfig.Enabledoptions.MaxReentrantDepth=32;// was ReentrancyConfig.MaxStackDepth});
Two things to know about reentrancy beyond the renamed properties. First, Dapr.Actors.Next propagates the call-chain metadata for you — actor authors no longer touch reentrancy headers (ActorReentrancyContextAccessor has no equivalent you call). Second, enabling reentrancy is deliberate: with it off, a call that loops back into an actor already in the chain blocks on the lock the first turn still holds. See Reentrancy is automatic, but must be enabled.
Options that no longer exist as such: UseJsonSerialization and JsonSerializerOptions on the runtime options are gone, because serialization is now the injected IDaprSerializer — configure it there instead (Serialization). DaprApiToken and HttpEndpoint are not actor-options concerns in the new model, which talks to the runtime over the gRPC stream.
Delivery semantics are the same contract — now stated plainly
Dapr.Actors actor calls were already at-least-once, and reminders already re-fired until acknowledged; many teams simply did not design for it. Dapr.Actors.Next does not change the contract, but it makes failure paths testable: an invoke can be redelivered, and a reminder can re-fire if its acknowledgment is lost, even after the handling turn commits. Every actor method, reminder, and subscription handler must be safe to run more than once. Both state mutations and external side effects (publishing, calling another actor, charging a card) require idempotency or deduplication; using actor state alone does not make an increment or append safe to repeat. Use a decorated callback transport to inject response loss after commit, then explicitly exercise redelivery. See Delivery guarantees you must design for.
Testing
This is less a migration step than an opportunity. On Dapr.Actors, exercising an actor meant an integration test against a running sidecar, which made reentrancy, timer-versus-call races, redelivery, and mid-save failures effectively untestable. Dapr.Actors.Next ships an in-memory, deterministic ActorTestRuntime that drives your real actors through the same generated dispatchers used in production, with virtual time and fault injection, no sidecar required. When you move an actor type, this is the moment to add the unit tests you could not write before. See Testing.
Limits that are lifted
Three constraints you may have designed around in Dapr.Actors are gone. You do not have to use these, but knowing they exist can simplify a migration and remove old workarounds.
Multiple parameters on a JSON-invoked method. The old non-remoting path took a single payload argument (InvokeMethodAsync<TRequest, TResponse>(method, data)), so multi-argument operations had to be packed into a wrapper type to be callable that way. In Dapr.Actors.Next there is no non-remoting/remoting distinction, and a strongly-typed method may take multiple parameters directly.
// Previously often forced into a single wrapper payload; now a natural signature.Task<Quote>PriceItem(stringsku,intquantity,stringcurrency,CancellationTokenct=default);
One interface backing several actor types. The actor type name, not the interface, is the identity of a registered actor, so more than one [DaprActor] class may implement the same [GenerateActorClient] interface, each its own actor type with its own state and placement. This makes a shared contract across specialized actors practical.
[GenerateActorClient]publicinterfaceIQueueActor:IActor{TaskEnqueue(WorkItemitem,CancellationTokenct=default);}[DaprActor]// actor type "OrdersQueueActor"publicsealedclassOrdersQueueActor:Actor,IQueueActor{/* … */}[DaprActor]// actor type "EmailsQueueActor", same contractpublicsealedclassEmailsQueueActor:Actor,IQueueActor{/* … */}
One actor type implementing several interfaces. The relationship also runs the other way: a single implementation may implement several [GenerateActorClient] interfaces — a read side and a write side, or a public contract and an admin one — all served by one actor type with one identity and one set of state. The only rule is that method names must be unique across the contracts, since the runtime routes by method name.
[DaprActor("Document")]publicsealedclassDocumentActor(ActorActivationContextcontext):Actor,IDocumentReader,IDocumentWriter{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;// Read() and Write() on the two contracts share one activation and one state.}
Confirm the runtime is on 1.18+ everywhere the actor will run.
Pick one actor type to move first — ideally one with modest state and few callers.
Create the contract with [GenerateActorClient]. If callers live in other apps, put the interface in a shared assembly both reference.
Rewrite the implementation: [DaprActor], inject ActorActivationContext, override Id/State, translate StateManager calls to State, convert timers to IActorTimerScheduler, convert reminders to IActorReminderScheduler + named methods, drop IRemindable, and keep SaveStateAsync only where you need a mid-turn durable write.
Verify state readability with a test that seeds an old-shaped value and reads it under the new code; introduce an upcaster if the shape changed.
Move the callers of that type to IActorProxyFactory so the call and the actor share one serialization format, avoiding a remoting/JSON straddle.
Add unit tests with ActorTestRuntime for the paths you could not test before.
Repeat for the next type. Keep Dapr.Actors referenced for types not yet moved.
Red-flag checklist
Missing attributes. A [DaprActor] with no [GenerateActorClient] interface generates nothing, silently. (DAPR1421)
Changed actor type name. The type name is part of the durable address; changing it strands existing instances. Keep it identical.
Serializer option drift. State is JSON on both sides, but a different naming policy, enum handling, or a custom old-side serializer can make existing state unreadable. Verify, and use state migration for real shape changes.
Remoting/JSON straddle during coexistence. A Next proxy (JSON) does not line up with an old remoting caller (DataContract). Move an actor type and its callers together.
Reminder method renames. The reminder name is the routed operation; renaming a method leaves registered reminders pointing at the old name.
Assuming exactly-once. Handlers must be safe to run more than once; make state updates and external side effects idempotent or deduplicate requests.
Static ActorProxy facade. It works, but its process-wide mutable state is a footgun; inject IActorProxyFactory instead.
Actors in a referenced project. Discovery scans only the executing assembly unless you set DaprActorsScanReferences.
1.5.2 - How to: Author, register, and call actors with the .NET SDK
Define actors, let the source generator wire them up, and call them with Dapr.Actors.Next
This article shows how to define an actor, what attributes drive the source generator, the minimum you must register, and how to call actors, including cross-assembly and cross-app scenarios.
Prerequisites
Dapr runtime v1.18.0 or later, a port on your application for gRPC inbound connections, and the Dapr.Actors.Next package. Dapr.Actors.Next is a meta-package that brings the runtime, source generators, and analyzers in one reference.
Unlike Dapr.Actors, you do not map actor handler endpoints for the runtime to call into per invocation. The host opens a persistent gRPC connection to the runtime and receives actor callbacks over that stream, so there is nothing like MapActorsHandlers() to wire up. The application still exposes its gRPC server port as usual; the runtime continues to use it for its gRPC precondition checks. What changes is how actor callbacks are delivered, not whether the app runs a gRPC server.
Package references
All projects within the Dapr .NET SDK repository are referenced using relative paths. As meta-packages like Dapr.Workflows or Dapr.Actors.Next are only an artifact of the build pipeline, the individual projects in the source code refernce each of the individual projects within the repository (e.g. Dapr.Actors.Next.SourceGenerators or Dapr.Actors.Next.Abstractions). These packages are not intended to be published to NuGet and only for local SDK experimentation and development. When using this package in your own projects, whether host or test projects, it is intended that you install Dapr.Actors.Next from NuGet.
Define an actor
An actor has two parts: a contract interface that derives from IActor and is decorated with [GenerateActorClient], and an implementation that derives from Actor and is decorated with [DaprActor].
usingDapr.Actors.Next;[GenerateActorClient]publicinterfaceICartActor:IActor{TaskAddItem(CartItemitem,CancellationTokenct=default);Task<CartSummary>GetSummary(CancellationTokenct=default);}[DaprActor]publicsealedclassCartActor(ActorActivationContextcontext,IPricingClientpricing):Actor,ICartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;publicasyncTaskAddItem(CartItemitem,CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);cart.Value.Items.Add(item);// mutate through .Value; saved at end of turn}publicasyncTask<CartSummary>GetSummary(CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);returnnew(cart.Value.Items.Count,awaitpricing.Total(cart.Value,ct));}}
On the Actor base, Id and State are abstract, so each actor supplies them. The established pattern is to inject an ActorActivationContext and override the two from it, as shown above. State is accessed by name through IActorStateAccessor: a read returns an IActorState<T> wrapper whose value you reach through .Value, and mutations to .Value are saved once at the end of the turn unless you explicitly call State.SaveStateAsync() earlier.
Both attributes are required, and they work together
The two attributes are not interchangeable, and neither is optional.
[GenerateActorClient] on the interface is what selects it for the generator. The generator builds its set of actor contracts only from interfaces that both derive from IActor and carry [GenerateActorClient]; an interface that derives from IActor alone is invisible to it. The attribute takes no arguments; it is purely the marker that says “generate a client for this contract.”
[DaprActor] on the implementation is discovered separately, but a [DaprActor] class only becomes a generated actor if it implements one of those [GenerateActorClient] interfaces. This is the part that may come as a surprise:
A [DaprActor] with no decorated interface produces nothing
If a [DaprActor] class does not implement an interface marked with [GenerateActorClient], the generator emits nothing for it: no client proxy, no dispatcher, no activation factory, and no registration. The class compiles and looks like an actor, but it is never hosted and cannot be called, with no error to point at. If an actor you defined is simply not working, the first thing to check is that its interface derives from IActor and carries [GenerateActorClient]. The two attributes are a pair; [DaprActor] alone is not enough.
What the source generator produces
You write the decorated interface and the decorated implementation; the source generator produces everything needed to host and call the actor, with no reflection at call time.
You write
The source generator produces
[GenerateActorClient] on interface ICartActor : IActor
A strongly-typed client proxy for calling the actor, and the contract’s entry in the interface manifest
[DaprActor] on an implementation of a decorated interface
A dispatcher that routes incoming invocations to your methods
[DaprActor] on an implementation of a decorated interface
A typed activation factory that constructs the actor from DI
[DaprActor] on an implementation of a decorated interface
An entry in the generated registration and the actor registry (its type, methods, and signatures)
You do not implement proxies, dispatchers, or factories, and you do not write registration code per actor.
One interface can back several actor types
The actor type name, not the interface, is the identity of a registered actor. More than one [DaprActor] class may implement the same [GenerateActorClient] interface, and each becomes its own distinct actor type with its own name, its own state, its own placement, and its own registration. The shared interface is only the callable shape they have in common.
[GenerateActorClient]publicinterfaceIQueueActor:IActor{TaskEnqueue(WorkItemitem,CancellationTokenct=default);}[DaprActor]// actor type "OrdersQueue"publicsealedclassOrdersQueueActor:Actor,IQueueActor{/* ... */}[DaprActor]// actor type "EmailsQueue", same contract, different actorpublicsealedclassEmailsQueueActor:Actor,IQueueActor{/* ... */}
This is why creating a proxy takes the actor type name as well as the interface (see Call an actor): the interface names the contract, and the type name selects which registered actor you mean. When several actor types implement one interface, the type name is what chooses among them; a lookup by interface returns all the actor types that implement it, and you pick the one you intend by its type name.
Because the type name is the identity, the implementations that share an interface must each resolve to a distinct name. An analyzer (DAPR1420) flags the collision when two actors implementing the same contract would register under the same actor type name, and points you to fix it by giving them distinct [DaprActor] names or explicit registration aliases.
One actor can implement several contracts
The relationship also runs the other way: a single [DaprActor] implementation may implement more than one [GenerateActorClient] interface, and all of them are served by that one actor type. This is useful when a single entity has distinct facets you would rather express as separate contracts — a read side and a write side, or a public contract and an administrative one — without splitting the entity into separate actors.
The generator produces one strongly-typed proxy per interface (IDocumentReader and IDocumentWriter each get their own), but the actor is hosted as a single actor type with one registration and one dispatcher that covers the union of every implemented contract’s methods. Because there is one actor type, there is one identity, one activation, and one set of state; the interfaces are just different callable shapes over the same actor.
Call it by creating whichever proxy you need, each addressed with the same actor type name:
Both proxies route to the same activation, so a write through IDocumentWriter is visible to a subsequent read through IDocumentReader on the same id.
Method names must be unique across the contracts
The runtime routes an incoming call to an actor by its method name, so the methods across the interfaces a single actor implements must have distinct names. Two contracts on the same actor that both declare a method with the same name collide on the wire, and only one is dispatched. Keep the method names distinct, or, when the two contracts genuinely share an operation, declare it on a common base interface both derive from so it is one method rather than two.
Method signatures
Actor interface methods must return Task, Task<T>, ValueTask, ValueTask<T>, or IAsyncEnumerable<T>, and their parameters and return types must be serializable by the configured serializer. An analyzer (DAPR1417) flags methods that don’t comply.
Register at startup, the minimum
The only required call is AddDaprActors. The options delegate is optional.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprActors();// discovers and wires every [DaprActor] in this assemblyvarapp=builder.Build();app.Run();
That single call starts the actor host (the persistent SubscribeActorEvents streams to the runtime) as a hosted service, registers every discovered actor’s proxy, dispatcher, and factory, registers any state upcasters (see State migration), and populates the actor registry.
Actors are no longer registered by hand
There is no RegisterActor<T>() call and no app.MapActorsHandlers(). Actors are discovered by the source generator at build time, and the host connects to the runtime over the stream rather than exposing an endpoint. Calling AddDaprActors() is enough.
Use options.Actors.RegisterActor<TActor>(...) when one actor type needs a different runtime profile from the app-wide defaults. Only values set in the per-type delegate override the app-wide options; unset values inherit them.
The idle timeout, draining settings, and reentrancy settings are advertised to the Dapr sidecar for the registered actor type. DisableStateMigration is applied locally by the SDK when that actor’s state is persisted and is not advertised to the sidecar. The complete runnable version is in examples/Actor.Next/07-PerTypeOptions.
The SDK also enforces EnableReentrancy and MaxReentrantDepth when admitting a matching call chain locally, using per-type values before application-wide values. Configure these explicitly to match your application’s call graph.
There is no lifetime parameter
AddDaprActors does not accept a ServiceLifetime. An actor’s lifetime is its activation, which the runtime owns: it is keyed by id, spans many turns, and ends on deactivation. That is not a DI lifetime, so it is not configurable. The actor instance is constructed per activation in a dedicated DI scope, cached across turns, and disposed together with its scope on deactivation. Your actor’s dependencies keep whatever lifetimes you registered them with.
Deactivation is serialized with actor work: an external request waits behind active work, while one requested by the active call chain is deferred until the turn and its admitted reentrant children finish. The activation and its scope are not disposed underneath an in-flight turn.
Controlling automatic registration
By default, AddDaprActors() discovers every [DaprActor] in scope and registers it for hosting: it wires the dispatcher and activation factory and advertises the type to the runtime so the runtime delivers callbacks for it. It also discovers and registers every state upcaster. Two options let you turn those automatic behaviors off independently:
The distinction that matters is hosting versus calling. Calling an actor uses a source-generated proxy, obtained from IActorProxyFactory (or the static ActorProxy.Create<T>() facade), and does not depend on registration; it and IDynamicActorClient work as long as the contract is referenced. Registration is what makes this app host a type: advertise it, receive its callbacks, and construct instances. Turning EnableAutoActorRegistration off gives you an app that can still call actors but hosts none automatically, which is the gateway half of a dual-mode app.
A single app that runs as a gateway in one mode and hosts actors in another installs Dapr.Actors.Next once (both modes need the proxy hardware) and chooses per mode:
// Gateway mode: forward calls to actors hosted elsewhere; host nothing here.builder.Services.AddDaprActors(options=>{options.EnableAutoActorRegistration=false;options.EnableAutoStateMigrationRegistration=false;// hosting nothing, so no state migrations run});// Hosted mode: host the discovered actors and receive their callbacks from the runtime.builder.Services.AddDaprActors();// defaults: both on
In gateway mode no streams are opened to the runtime for hosting, because no type is advertised; the app holds only the calling infrastructure.
Registering an actor under a custom name
The actor type name is the address the runtime routes on. To choose it explicitly, for example from configuration, register the actor by name in the options:
[DaprActor]// attribute required; the name argument is optionalpublicsealedclassQueueActor:Actor,IQueueActor{/* ... */}// ...varqueueActorTypeName=builder.Configuration.GetValue("QUEUE_ACTOR_TYPE_NAME","QueueActor");builder.Services.AddDaprActors(options=>{options.Actors.RegisterActor<QueueActor>(queueActorTypeName);// this is what the type is hosted under});
The hosted name resolves by precedence: an explicit alias from RegisterActor<T>(name) if you give one, otherwise the name on the [DaprActor] attribute if you set one, otherwise the actor implementation’s type name. An explicit alias always wins over the other two, and it wins whether or not EnableAutoActorRegistration is enabled. With auto-registration off, only the types you register explicitly are hosted; RegisterActor<T>() with no name registers the type under its resolved default, which is the attribute name or, failing that, the type-name fallback.
Keep the [DaprActor] attribute; its name is optional
Aliasing changes the name a type is hosted under; it does not replace the [DaprActor] attribute. The attribute is what the source generator uses to produce the proxy, dispatcher, and activation factory, so the type must still carry [DaprActor] even when you supply the name elsewhere. The name argument on the attribute is optional, though: if you omit it or leave it blank, the generator falls back to the actor implementation’s type name. So when you intend to alias from configuration you can leave the attribute bare, as [DaprActor], and let the alias supply the name. What you must not do is remove the attribute, which would stop the generator from producing anything for that type.
A custom name is still a durable address
Choosing the actor type name from configuration is supported, but the name is part of the durable address: state and placement are keyed by it. Changing the name that a set of existing instances was created under makes those instances unreachable under the new name. Treat a configuration-driven name as fixed for the lifetime of the data behind it, and change it only with the same care you would give a data migration.
Cross-assembly discovery
By default the generator scans only the executing assembly. If your actors or their state upcasters live in a referenced project, opt in to reference scanning by adding the following to the host application’s .csproj:
When enabled, the generator discovers and registers [DaprActor] types and IActorStateUpcaster<,> implementations from referenced assemblies as well, not just from the executing assembly. It is off by default because scanning references increases build time. Note that upcaster discovery is also subject to EnableAutoStateMigrationRegistration: if you have turned automatic migration registration off, the scan will not auto-register upcasters, whether they are local or in a referenced project.
Inject dependencies
Registering the actor infrastructure requires only AddDaprActors(), optionally with the options overload. Nothing else is needed to host and run actors:
builder.Services.AddDaprActors();
Constructor injection into an actor is supported, and any injected service resolves from the actor’s per-activation scope and is disposed with it. Injection does require that you register the service yourself: AddDaprActors() wires up the actor infrastructure only, and does not register any Dapr building-block clients on your behalf.
For example, to use the state management client inside an actor for application state stores (which are separate from the actor’s own State), add the Dapr.StateManagement package, register DaprStateManagementClient, and inject it:
builder.Services.AddDaprActors();builder.Services.AddDaprStateManagementClient();// from the Dapr.StateManagement package
[DaprActor]publicsealedclassCartActor(ActorActivationContextcontext,IPricingClientpricing,DaprStateManagementClientstateStores):Actor,ICartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;// pricing and stateStores resolve per activation, provided you registered them, and are disposed on deactivation}
Avoid mutable shared state in fields
Because an actor instance is cached across turns, anything captured in a field lives for the whole activation. Holding mutable shared state in a field, especially a captured singleton, breaks turn isolation. Keep per-actor state in State, and keep injected services stateless. An analyzer (DAPR1419) flags non-readonly fields whose type is not turn-safe.
Lifecycle hooks
Override the per-actor lifecycle hooks for setup and teardown. These run on the actor’s own turns and are separate from the cross-cutting filter pipeline.
[DaprActor]publicsealedclassCartActor(ActorActivationContextcontext):Actor,ICartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;protectedoverrideValueTaskOnActivateAsync(CancellationTokenct=default)=>/* runs when the instance is activated */;protectedoverrideValueTaskOnDeactivateAsync(CancellationTokenct=default)=>/* runs before deactivation */;protectedoverrideValueTaskOnPreActorMethodAsync(ActorMethodContextcontext,CancellationTokenct=default)=>/* before each method */;protectedoverrideValueTaskOnPostActorMethodAsync(ActorMethodContextcontext,Exception?exception,CancellationTokenct=default)=>/* after each method */;}
For cross-cutting concerns that span many actor types, you can implement an IActorTurnFilter, but it is rarely the right tool; see the next section.
Cross-cutting turn filters
An IActorTurnFilter wraps every actor turn, across every actor type, as a middleware pipeline around invocation. It applies to a narrow category of work, and most applications never need one.
Reserve a turn filter for concerns that are infrastructural rather than behavioral, and that must apply uniformly across many actor types: enforcing that a tenant or auth header is present before any turn runs, or enriching every turn’s trace and metrics. These are things you would otherwise copy into every actor, and that genuinely belong outside any single actor.
Avoid a turn filter for anything else, for several reasons:
It runs on every turn of every actor type, so it sits on the hot path globally; logic placed there is paid for everywhere, whether or not it is relevant.
It moves behavior away from the actor. You can no longer read a single actor and understand what a turn does, because part of the behavior lives in a filter the actor never mentions.
Ordering across multiple filters becomes a subtle, global concern that is easy to get wrong and hard to see.
Business logic in a filter is harder to discover and harder to test than the same logic in the actor, which you can drive directly with the test runtime.
The turn pipeline also performs framework work such as context restore and the end-of-turn state save. Heavy or failure-prone logic in a filter shares a lifecycle with that work and can put the integrity of the turn at risk.
For concerns specific to one actor, use that actor’s lifecycle hooks (OnPreActorMethodAsync, OnPostActorMethodAsync, OnActivateAsync, OnDeactivateAsync) instead; they are discoverable on the actor and testable in isolation. For behavior shared by several actors, prefer composing it into the actors through injected services rather than intercepting their turns.
An analyzer (DAPR1416, informational) flags when an IActorTurnFilter appears to contain business logic, to keep filters thin and infrastructural.
Timers and reminders
Register timers and reminders from inside the actor by injecting the scheduler you need. Timers use IActorTimerScheduler; durable reminders use IActorReminderScheduler.
usingDapr.Actors.Next;usingDapr.Actors.Next.Core.Timers;[DaprActor("Cart")]publicsealedclassCartActor(ActorActivationContextcontext,IActorTimerSchedulertimers,IActorReminderSchedulerreminders):Actor,ICartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;publicasyncTaskAddItem(CartItemitem,CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);cart.Value.Items.Add(item);// One-shot activation-local timer. If the activation goes away before// this fires, the callback is lost.awaittimers.RescheduleAsync(actorType:"Cart",actorId:Id,name:"refresh-prices-once",dueTime:TimeSpan.FromMinutes(1),operationName:nameof(RefreshPrices),arguments:item.Sku,cancellationToken:ct);// Periodic activation-local timer, limited by TTL.awaittimers.RescheduleAsync(actorType:"Cart",actorId:Id,name:"refresh-prices-periodic",dueTime:TimeSpan.FromMinutes(1),operationName:nameof(RefreshPrices),arguments:item.Sku,period:TimeSpan.FromMinutes(5),ttl:TimeSpan.FromMinutes(30),cancellationToken:ct);awaitreminders.ScheduleAsync(actorType:"Cart",actorId:Id,name:nameof(AbandonCart),dueTime:TimeSpan.FromMinutes(30),period:TimeSpan.Zero,arguments:Array.Empty<byte>(),ttl:TimeSpan.FromDays(1),overwrite:true,cancellationToken:ct);}publicTaskRefreshPrices(stringsku,CancellationTokenct=default){returnTask.CompletedTask;}publicasyncTaskAbandonCart(CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);cart.Value.Abandoned=true;}}
The durability difference is the thing to design around. A timer is in-memory and tied to the activation: it does not survive deactivation or a process restart, so treat it as a best-effort convenience within a live activation, not a durable schedule. A reminder is durable and delivered by the Dapr scheduler, so it fires even if the actor was idle and had to be reactivated. Use a reminder whenever the wake-up must happen regardless of activation state, and a timer only for work that is fine to lose when the actor deactivates.
A timer registration has both a timer name and an operationName; the runtime routes the callback to operationName. A reminder registration has no separate callback field. The reminder name is both the durable reminder identity and the actor operation routed on callback, so choose a stable operation name and do not rename it casually. If the actor method is renamed, any already-registered durable reminders using the old name will continue to call the old operation name until they are updated or canceled. It’s recommended to keep the original callback method and have it replace the reminder to directly register the new method.
Callback names are validated at build time
Because a callback is a string, a typo or a stale name after a rename would otherwise only surface when the timer or reminder fires. Analyzers catch this while you type. A callback must resolve to a method the runtime can dispatch, which means a method on an interface that both derives from IActor and carries [GenerateActorClient] (a method that exists only on the class, or on an actor interface without [GenerateActorClient], is never dispatched). When the target actor type is defined in this application (or a referenced project), DAPR1429 flags a callback that matches no dispatchable method (with a code fix that suggests the closest match), and DAPR1431 flags one that names a method which exists but is not exposed through a [GenerateActorClient] contract. When the actor type string cannot be found in this application, DAPR1430 warns that it may be hosted by another Dapr app and cannot be verified here. All three apply to the timer operationName and the reminder name.
Timer and reminder payloads can be scheduled as typed values or as raw byte[]. Passing a typed value uses the configured actor wire serializer, so the callback method can declare the matching typed argument. Use the byte[] overload when you have already serialized the payload yourself or when the callback takes no payload and you want to pass Array.Empty<byte>().
For timers, dueTime controls the first firing. If you omit period, or set it to Timeout.InfiniteTimeSpan or TimeSpan.Zero, the SDK treats the timer as one-shot and cancels it after the callback turn commits. Set a positive period to create a periodic timer. ttl is optional and limits how long the timer can live; when supplied, it must be greater than or equal to dueTime. Cancel a timer with the same actor type, actor id, and timer name:
For reminders, dueTime controls the first firing and period controls repeat firing; use TimeSpan.Zero for a one-shot reminder. ttl is optional and limits how long the reminder can live. overwrite controls whether registering an existing reminder name replaces the previous registration; Dapr defaults this to overwrite, and setting overwrite: false lets duplicate registration fail instead. Cancel a durable reminder with the same actor type, actor id, and name:
Timer and reminder callbacks arrive over the same actor event stream as normal invokes. The SDK acks the callback only after the actor turn commits and pending state has been saved. For one-shot timers, a successful ack includes cancel: true so the runtime does not fire the timer again. Periodic timers and reminders continue according to their registration until canceled, expired by TTL, or replaced. If the handler throws or the stream drops before the ack reaches the runtime, the runtime can redeliver the callback. Keep handlers idempotent, especially when they perform external side effects.
Timer and reminder callbacks are independent actor turns, not reentrant continuations of the registering turn. They wait for an in-flight turn on the same actor to finish. Canceling a registration does not undo a callback that has already been admitted for execution, so a callback already in progress may still finish.
Inspect and manage registrations
SDK 1.19.0 or later also exposes timer/reminder inspection and reminder bulk cancellation:
GetAsync returns null when the registration does not exist. List operations return named registration
records. Timers are host-local: inspect them through the sidecar hosting that actor, not an arbitrary
sidecar in the cluster. Reminder listing can be scoped to an actor ID or to the whole actor type.
To cancel all reminders for one actor:
awaitreminders.CancelAllAsync("Cart",Id,ct);
Omitting actorId cancels reminders for every actor of the given type. Use that broader operation only
when intentionally managing the whole type.
Reminder failure policy
Supply failurePolicy when registering a reminder to override the runtime default for failed ticks:
ActorReminderFailurePolicy.Drop drops a failed tick. Constant retries at the specified interval; an
unset MaxRetries permits indefinite retries. This affects failed reminder delivery, not timer durability,
the recurring period, or the actor’s own application retry logic.
Saving actor state
Actor state uses an activation-scoped write-behind cache. In the common case, mutate state through .Value or SetAsync, return from the actor method, and let the runtime save pending changes at the end of the turn:
Call State.SaveStateAsync(ct) only when you need the current changes to reach the underlying state store before the method continues, for example before making an external call that must observe durable actor state:
After SaveStateAsync succeeds, the saved cache entries are marked clean. The end-of-turn save does not write them again unless the actor changes them after the explicit save. Multiple changes before a save still collapse into one write.
EvictCacheAsync is different: it evicts cached entries from the current actor activation so the next read goes back to durable state. It does not persist dirty values. By default it rejects dirty cache entries; if you pass new DaprEvictStateOptions { EvictOnDirtyState = true }, those dirty in-memory values are discarded.
Delivery guarantees you must design for
Actor callbacks are at-least-once, and this shapes how you write actor methods. It is worth understanding before you build anything non-trivial, because it is the assumption most likely to be wrong if you carry a mental model of a method that runs exactly once.
An invoke can be redelivered. If the runtime delivered a call but did not receive the response (for example the stream dropped after commit), the caller can observe a failure even though the state change succeeded. Depending on the configured retry policy, the invocation may run again. Pending actor state is saved before the response is sent, and those steps are not atomic.
Your actor methods must therefore be safe to run more than once, including their state mutations. Incrementing a counter or appending an item is not automatically idempotent merely because it uses actor State; a retry against committed state can apply the mutation again. Use naturally idempotent updates or persist a stable request identity and its result with the state change so duplicates can be recognized. External side effects (publishing an event, calling another actor, charging a card) also require an idempotency strategy. A lost response does not imply rollback.
A reminder can be redelivered until it is acknowledged, subject to its runtime failure policy. A configured
constant policy changes the retry interval/limit, while a drop policy can stop retries for that tick.
Reminder handlers must therefore be idempotent, and repeated failures must be surfaced rather than swallowed.
The practical rule
Design every actor method, reminder, and subscription handler to be safe to run more than once. Both state changes and external side effects need idempotency. Treat a missing response as an uncertain outcome, not evidence that the operation never ran or that its state changes were rolled back.
Call an actor
Calling an actor has two independent questions: what you know at compile time (which decides between the strongly-typed proxy and the dynamic client), and where you are calling from (a client, or another actor). The actor type name is the addressing key the runtime uses for placement in every case, and serialization is the same IDaprSerializer path regardless.
Use the strongly-typed proxy when you have the actor’s contract interface available at compile time, which is the common case in application code. It gives you compile-time signature checking and editor completion. Use the dynamic client when the actor type or method exists in another app or not known until run time, for example in a gateway or a tool that calls actors it doesn’t reference.
No remoting/non-remoting proxies, and no DataContract
If you are coming from Dapr.Actors, note that the strongly-typed proxy here is not the old remoting client. There is no remoting versus non-remoting distinction, and the form of invocation you choose does not change serialization. Every call, strongly-typed or dynamic, serializes through IDaprSerializer (System.Text.Json by default). DataContract is not supported unless you provide a custom IDaprSerializer. Pick the proxy or the dynamic client based only on whether you have the contract at compile time; the two are interchangeable from the runtime’s point of view.
Get a proxy from IActorProxyFactory
The DI-friendly way to obtain a proxy is to inject IActorProxyFactory and call Create<TActor>(id, actorType):
The generic argument is the contract interface; the string is the actor type name you are addressing. Both are needed because a single interface can back more than one actor type (see One interface can back several actor types), so the interface alone does not identify which registered actor you mean. Pass the type name of the specific actor you intend to call.
There is also a static ActorProxy.Create<TActor>(...), backed by ActorProxy.Configure(...) and ActorProxy.Reset(), but prefer the injected IActorProxyFactory in essentially all application and test code.
Avoid the static ActorProxy facade
The static ActorProxy.Create, Configure, and Reset are a convenience over process-wide mutable state: Create<T>() uses whichever factory was last passed to Configure(...), and Reset() clears it. That global state is a footgun. It can leak between tests, bind proxies to the wrong service provider, silently paper over a missing DI registration, and behave unpredictably in a process that runs more than one host or test runtime. Because it is shared and mutable, its behavior depends on call order across your whole process, which is exactly what you do not want from something on the call path.
Inject IActorProxyFactory instead. It is scoped to the container that created it, so there is no ambient state to leak or misconfigure, and a missing registration fails loudly rather than resolving to a stale global. The static facade exists for two narrow reasons: an easy entry point when you are genuinely outside DI (a tiny sample, or a spot with no container), and preserving the familiar shape for users coming from Dapr.Actors.Client.ActorProxy.Create. The test runtime’s ActorTestRuntime.CreateActor<T>() is a legitimate controlled use, because it configures the generated factory itself before using it. Outside of cases like those, reach for the injected factory.
Call an actor from inside an actor
An actor calls another actor the same way, by injecting IActorProxyFactory into its constructor. An actor reads its own identity from the protected ActorId Id supplied by activation, which is useful for deriving a target id or passing a correlation:
[DaprActor]publicsealedclassCartActor(ActorActivationContextcontext,IActorProxyFactoryproxies,IPricingClientpricing):Actor,ICartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;publicasyncTaskCheckout(CancellationTokenct=default){varorders=proxies.Create<IOrderActor>(ActorId.Create($"order-{Id}"),"OrderActor");awaitorders.Place(Id,ct);// Id is this cart's own actor id}}
Three things are true of a call made from inside a turn, and two are easy to miss:
Awaiting the call does not release your turn. The runtime holds this actor’s lock for the whole turn, including while you await a call to another actor. The other actor runs its own turn; yours stays open until your method returns.
The call is at-least-once, like any invoke. If your turn is redelivered (see delivery guarantees), the outbound call runs again, so the target must be idempotent or the call must be safe to repeat.
Reentrancy is handled for you when it is enabled. Actor authors do not manually supply reentrancy headers. When reentrancy is enabled for the actor runtime, Dapr.Actors.Next automatically propagates the call-chain metadata across actor calls made during an actor turn, so a chain that re-enters an actor already in the chain (A calls B, B calls back into A) is recognized as reentrant rather than blocking on the lock the first turn still holds.
Configure reentrancy explicitly
Set DaprActorsOptions.EnableReentrancy and bound the depth with DaprActorsOptions.MaxReentrantDepth. Per-type settings override application settings. The SDK admits a reentrant invocation only when it matches the occupied actor’s active call chain; it rejects such admission with ActorInvocationException when reentrancy is explicitly disabled or the depth limit would be exceeded. Dapr separately controls reentrant delivery according to the advertised actor configuration, so do not rely on a cyclic call graph progressing when it is disabled.
The canonical propagated header is Dapr-Reentrancy-Id. The SDK accepts it case-insensitively, also recognizes dapr-reentrant-id and x-dapr-reentrant-id, and prefers the canonical name if multiple aliases are present. For custom invocation infrastructure, ActorHeaders.WithCurrentReentrancy(headers) captures the active chain without mutating the supplied collection; explicit call-chain headers take precedence over ambient context. Normal actor proxy calls handle this for you.
Await nested actor calls rather than launching parallel or fire-and-forget branches over mutable actor state. Reentrant admission is not a general thread-safety guarantee.
Call an actor in another Dapr app
From the caller’s side, calling an actor hosted by a different app looks identical to calling one in your own app. You create the same proxy with the same type name and await it; placement routes the call to whichever app hosts that type, and there is no special cross-app client, no endpoint, and no app id to manage in the common case.
// Same call, whether "CartActor" is hosted here or in another app:varcart=proxies.Create<ICartActor>(ActorId.Create(userId),"CartActor");awaitcart.AddItem(item);// placement routes it to wherever "CartActor" lives
What makes this work across app boundaries is only how you share the contract:
Put the actor contract interface, with its [GenerateActorClient] attribute, in a shared assembly that both apps reference. Because the attribute travels with the interface, the calling app’s own build generates the client proxy from it, even though that app has no implementation.
The hosting app references the implementation and calls AddDaprActors().
The calling app references only the contract; it does not host the actor and does not need EnableAutoActorRegistration.
Because serialization is the same IDaprSerializer path on both sides and not tied to the proxy, the strongly-typed proxy works for cross-app calls too, which the old remoting proxy did not.
Keep the type name stable
The actor type name is part of the durable address; state and placement are both keyed by it. Choose it deliberately and do not change it, or existing instances become unreachable. To evolve behavior or state, version the state rather than the type name. See State migration.
Dynamic invocation
The less common case is calling without a compile-time contract at all. When the actor type or method is not known until run time, such as in a gateway, in admin tooling, in a cross-language caller, or in an agent, call through IDynamicActorClient and discover what is callable at runtime through IActorRegistry, instead of the strongly-typed proxy. This is a distinct, language-agnostic capability with its own page: see Dynamic invocation.
Analyzers and diagnostics
The package ships analyzers that catch actor-specific mistakes at build time, several with code fixes. They use the DAPR14xx range.
ID
Flags
Category
Severity
DAPR1410
A state shape change that breaks deserialization of shipped state
Compatibility
Warning
DAPR1411
Work that escapes the actor scheduler, such as Task.Run
Concurrency
Warning
DAPR1412
A blocking call inside an actor turn
Concurrency
Warning
DAPR1413
Reading wall-clock time instead of an injected TimeProvider
Determinism
Warning
DAPR1414
An unseeded nondeterministic source, such as Guid.NewGuid() or Random
Determinism
Warning
DAPR1415
A state migration target that is unreachable because no upcaster migrates to it
Compatibility
Warning
DAPR1416
Business logic inside an IActorTurnFilter
Design
Info
DAPR1417
An actor interface method with an unsupported return type
Usage
Warning
DAPR1418
An in-place change to a shipped actor interface wire contract
Compatibility
Warning
DAPR1419
Mutable shared state held in an actor instance field
Concurrency
Warning
DAPR1420
Multiple actors that share a contract register the same actor type name
Usage
Warning
DAPR1421
A [DaprActor] implementation that does not expose a [GenerateActorClient] contract
Usage
Warning
DAPR1423
A state type that looks like part of a migration family but is not connected to it
Compatibility
Warning
DAPR1424
A gap between ordered fragments in an actor state migration chain
Compatibility
Warning
DAPR1425
A non-additive state migration step that requires a hand-authored upcaster
Compatibility
Warning
DAPR1426
An actor state migration family with more than one fold path to a target
Compatibility
Warning
DAPR1427
One persisted actor state name used with multiple migration families
Usage
Warning
DAPR1428
Actor code that targets an older state type while a later reachable version exists
Usage
Info
DAPR1429
A scheduled reminder/timer callback that matches no dispatchable actor method
Usage
Error
DAPR1430
A scheduled reminder/timer that targets an actor type not found in this application
Usage
Warning
DAPR1431
A scheduled reminder/timer callback method that is not exposed through a generated actor client
Usage
Error
Best practices
Add only AddDaprActors() and let the generator do the rest; register building-block clients such as DaprStateManagementClient separately if you use them.
Keep actor state in State, keep fields immutable, and keep injected services stateless.
Use the strongly-typed proxy when you have the contract at compile time via IActorProxyFactory, and reserve IDynamicActorClient for gateways and tools that genuinely need late binding.
Pick the actor type name once and never change it.
Put [DaprActor] on the implementation and derive the contract from IActor; do not hand-write proxies or registration.
Pluggable serialization, modern C# type support, and the per-actor state cache
Dapr.Actors.Next uses the same pluggable serializer as Dapr State management and Workflows, works with modern C# types out of the box, and retains the per-actor state cache. This page covers those. Evolving state shapes across releases is a separate, deeper topic with its own page: see State migration.
Pluggable serialization
Actor payloads and state are serialized through IDaprSerializer, resolved from dependency injection. The default implementation is JsonDaprSerializer (System.Text.Json), and you can replace it without changing any actor code.
// Default: System.Text.Json, no configuration required.builder.Services.AddDaprActors();
To plug in a custom serializer, register your own IDaprSerializer before AddDaprActors(). The actor infrastructure registers the default with TryAdd, so an implementation you register first is the one that is used:
To keep the actor path trim- and AOT-safe, register an IDaprSerializer backed by a source-generated JsonSerializerContext rather than relying on the reflection-based default. Configuring JsonSerializerOptions with Configure<JsonSerializerOptions>(...) does not reach the actor serializer, because the default JsonDaprSerializer is constructed with its own options; register the serializer yourself instead:
For a fully ahead-of-time-compiled host, also register a matching IActorWireSerializer, which serializes at the invocation wire boundary, so no reflection-based path remains.
Why System.Text.Json by default
The generated proxies and dispatchers serialize using only the strongly-typed generic paths with concrete compile-time types, which keeps the whole actor path trim- and AOT-safe. This is the same serializer abstraction used by Dapr State and Workflows, so an application serializes consistently across building blocks.
Modern C# types work as written
With the default System.Text.Json serializer, the C# shapes you most likely reach for as payload and state types work with no serialization-specific attributes: records, and classes with a primary constructor, are both fine as-is.
This is a real change from Dapr.Actors, whose strongly-typed client uses the Data Contract Serializer. That serializer requires every type to have a public parameterless constructor or be explicitly decorated with [DataContract] and [DataMember], and init-only setters need the contract attributes too. A record or a primary-constructor class has no parameterless constructor, so under Dapr.Actors you had to add a redundant one or annotate the type. Here you do not:
// Works as-is as an actor method payload or state type under the default serializer:publicrecordCartItem(stringSku,intQuantity);publicsealedclassCartState(stringownerId){publicstringOwnerId{get;}=ownerId;publicList<CartItem>Items{get;}=[];}
You still reach for a serializer-specific attribute when you want a specific serializer feature, for example [JsonPolymorphic] and [JsonDerivedType] for a polymorphic hierarchy, or [JsonConverter] for a custom conversion. The point is that you add those to opt into a feature, not to satisfy a constructor requirement the language no longer wants you to meet.
This guarantee is the default serializer's, not the abstraction's
The compatibility above is a property of System.Text.Json, which is the default IDaprSerializer. If you replace the serializer with your own IDaprSerializer implementation, these guarantees no longer apply and depend entirely on what your implementation supports: a custom serializer may impose its own constructor, attribute, or type-shape requirements. What holds for everyone is the abstraction; what holds for records and primary constructors specifically is the behavior of the System.Text.Json default. If you swap the serializer, validate your payload and state types against the rules of the serializer you chose.
The per-actor state cache
State reads are served from an in-memory, write-behind cache scoped to the activation. Mutations are not written through on every change; instead pending state is saved once at the end of each turn, which minimizes calls to the state store.
publicasyncTaskAddItem(CartItemitem,CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);// cache hit after first loadcart.Value.Items.Add(item);// mutate through .Value within the turn// no Save() needed; the turn saves once when it completes}
You rarely call save explicitly, and multiple mutations in a single method (or across a reentrant call chain within the same turn) collapse into a single write.
The end-of-turn save interacts with retries
The save is what makes a turn’s state changes durable, and the response the SDK sends afterward signals completion. Those two steps are not a single atomic operation, so a turn can be retried after its state was already committed (see delivery guarantees). State-only changes are not automatically safe under a re-run: incrementing a counter or appending an item can apply twice. Make both state updates and external side effects idempotent, or deduplicate using a stable request identity persisted with the change. Callback-stream fault injection can test response loss after commit; it does not roll state back.
The serializer is part of your at-rest contract
State is stored using whatever serializer and settings are configured, so those settings are part of the durability contract, not just a runtime detail. Changing the serializer, or a setting that changes the output shape (enum-as-string versus number, a property naming policy, how nullability or defaults are emitted), can make existing state unreadable even though the CLR type did not change. Treat serializer configuration for state types as a versioned decision: change it deliberately, and if a change would alter the persisted shape, handle it the same way you would a state-shape change, with an upcaster (noting that upcasters do not migrate between serialization configurations) or a compatibility setting. Actor state also lives in a state store with its own value-size limits, so keep per-actor state reasonably sized; the whole state saves as one value per turn.
Evolving state shapes: see State migration
When a state type’s shape changes between releases, older persisted data must still load under the new code. That is a first-class, opt-in feature with its own page rather than a subsection here, because it carries real depth: upcaster chains, additive auto-generation, a graduation off-ramp, and build-time and run-time integrity guarantees. The short version is that you write one small upcaster per shape change (or none, for additive changes), and the runtime folds stored data up to the shape your code asks for on read, re-persisting lazily. For the full model and best practices, see State migration.
Best practices
Register a JsonSerializerContext for your actor payloads to stay on the AOT-safe path.
Keep serializer configuration for state types stable, and treat a change that alters the persisted shape as a versioning decision (see State migration).
Keep per-actor state reasonably sized, since the whole state saves as one value per turn.
Make state mutations and external side effects idempotent, or deduplicate requests, so a re-run turn stays safe under at-least-once delivery.
Evolve actor state safely across releases with upcaster chains, additive auto-generation, and a graduation offramp
Actors have no replay, so they have no code-versioning problem: a new deployment simply is the new behavior. The only thing that must survive a deploy is the actor’s persisted state, so migration here means one specific thing, keeping state written under an older shape loadable and usable under newer code. It is deserialization compatibility on read, not a workflow-style code-version system.
The feature is opt-in by default. If a state type’s shape does not change, there is nothing to migrate and no machinery to configure; the type behaves exactly as it does today. You enroll a type in migration only by authoring an upcaster that touches it, or by letting the generator synthesize a trivial additive upcaster.
The mental model
Five ideas carry the whole feature.
Nodes: each versioned shape of a state type is a node, such as CartState, CartStateV2, CartStateV3.
Hops: an IActorStateUpcaster<TFrom, TTo> is a directed edge from one node to the next. Hops are the only migration code you write, and additive hops can be generated for you.
Families: a family is the connected set of nodes reachable from each other through hops (the CartState family is {CartState, CartStateV2, CartStateV3}). An actor can persist several independent named entries, each its own family; families never collide.
Current is the type your code asks for: when you read GetOrCreateAsync<CartStateV3>("cart", ...), the runtime discovers whatever is stored, folds it up to CartStateV3, and hands you that.
Lazy re-persist: folding happens on read, in memory. The migrated value is written back only on the next save, the actor’s normal end-of-turn state save. Over time the store heals to the current shape with no bulk migration job.
Authoring: write the hops, nothing else
You write one upcaster per shape change. Upcasters are resolved from dependency injection, so a hop may take an injected service as a constructor parameter, and they are async (UpcastAsync returns a ValueTask).
// The shapes.publicsealedclassCartStateV1{publicList<string>Skus{get;init;}=[];}publicsealedclassCartStateV2{publicList<CartLine>Lines{get;init;}=[];}publicsealedclassCartStateV3{publicList<CartLine>Lines{get;init;}=[];publicintTotalQuantity{get;init;}}publicsealedrecordCartLine(stringSku,intQuantity);// The hops: the only migration code you write.publicsealedclassCartStateV1ToV2:IActorStateUpcaster<CartStateV1,CartStateV2>{publicValueTask<CartStateV2>UpcastAsync(CartStateV1s,CancellationTokenct=default)=>ValueTask.FromResult(newCartStateV2{Lines=s.Skus.GroupBy(x=>x,StringComparer.Ordinal).Select(g=>newCartLine(g.Key,g.Count())).ToList(),});}publicsealedclassCartStateV2ToV3:IActorStateUpcaster<CartStateV2,CartStateV3>{publicValueTask<CartStateV3>UpcastAsync(CartStateV2s,CancellationTokenct=default)=>ValueTask.FromResult(newCartStateV3{Lines=s.Lines.ToList(),TotalQuantity=s.Lines.Sum(l=>l.Quantity)});}
The actor contains no migration logic. It reads and writes the current shape, and the folding happens underneath:
[DaprActor("MigratingCart")]publicsealedclassMigratingCartActor(ActorActivationContextcontext):Actor,IMigratingCartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;// Whatever version is stored (V1/V2/V3) folds up to CartStateV3 transparently,// and re-persists at the current shape on the next save.publicasyncTask<CartStateV3>GetState(CancellationTokenct=default)=>(awaitState.GetOrCreateAsync("cart",()=>newCartStateV3(),ct)).Value;publicTaskClear(CancellationTokenct=default)=>State.RemoveAsync("cart",ct).AsTask();}
Upcasters are discovered and registered for you by the source generator (subject to EnableAutoStateMigrationRegistration, see Author, register, and call actors); you do not register them by hand.
Keep upcasters pure and deterministic
An upcaster may take injected dependencies, but its body must be pure and deterministic: no wall-clock time, no randomness, no external side effects. This is not stylistic. Invokes are at-least-once, so a turn that folds-and-saves can be re-run after a mid-flight failure, and only a deterministic upcaster produces the identical result on a re-run, which is what makes re-migration idempotent. The determinism analyzers (DAPR1413 for wall-clock time, DAPR1414 for unseeded randomness) apply to upcaster bodies for exactly this reason. Ensuring that non-deterministic functionality is not injected and used in the upcaster is ultimately the responsibility of the developer; by making injection available, the SDK cannot detect all non-deterministic usage.
Additive changes need no upcaster
If a new version only adds members, and those new members are all defaultable, the generator synthesizes the hop for you: it copies the shared members and defaults the new ones. You write the new shape and nothing else.
publicsealedclassMyState{publicstringName{get;init;}="";}publicsealedclassMyStateV2{publicstringName{get;init;}="";publicintAge{get;init;}}publicsealedclassMyStateV3{publicstringName{get;init;}="";publicintAge{get;init;}publicboolActive{get;init;}}// No upcasters authored. The generator slots MyState as the origin, orders the chain, and emits// MyState -> MyStateV2 and MyStateV2 -> MyStateV3 automatically.
Non-additive changes (renames, removals, restructures, or a cross-name shift like CartStateV3 to ShoppingCartV4) cannot be synthesized. You author those hops, and an analyzer offers a scaffold when one is missing.
Reading and writing state
The state accessor migrates by default; the ordinary read and write methods do the folding and enrollment for you.
Method
Behavior
TryGetAsync<T>(name, ct)
Reads and folds stored data up to T. Legacy or plain bytes are returned as T. Returns null when nothing is stored.
GetOrCreateAsync<T>(name, factory, ct)
As above, or creates a new value from factory when nothing is stored.
SetAsync<T>(name, value, ct)
Writes value and auto-enrolls it at T’s node. There is no schema-version parameter; the discriminator is derived from the graph.
GraduateAsync<T>(name, ct)
The offramp: folds to T, writes it plain, and stops enrolling this entry. Works even when migration is disabled.
RemoveAsync(name, ct)
Deletes the entry.
Actor code never sees the stored version
Reads surface only the migrated value. There is deliberately no SchemaVersion on the returned state, because version-conditional branching in actor code is the anti-pattern migration exists to remove; that logic belongs in an upcaster. If you need to confirm that a fold happened, assert it in a test with the state snapshot API (see Testing) rather than reading a discriminator at run time. Writing branchy if (version == 2) code against your state is a sign a hop is missing.
Importing external legacy data
To seed a legacy-shaped value that arrived from outside the store (an HTTP body, a bulk import, another system), write it with SetAsync, which accepts any node type in a family, not only the latest:
awaitState.SetAsync("cart",legacyV1Value,ct);// enrolls at V1's node// the next read folds it forward to the current shape, lazily.
Naming and ordering: the versioning strategy
How a type name maps to a family and an order is a compile-time concern, used by the generator and the analyzer. It is pluggable and configured application-wide, and follows the same version-naming conventions used elsewhere in Dapr for consistency.
// Program.cs: pick how version names are parsed and ordered, app-wide.builder.Services.UseActorStateVersioning<NumericVersionStrategy>();// "V{N}" suffix, the default
The strategy parses a type name into a canonical family name plus a version and orders versions; the built-in NumericVersionStrategy maps CartStateV3 to family CartState at version 3, and treats an unnumbered origin like CartState as version 0 that sorts first. SemVerVersionStrategy and DateVersionStrategy are also provided, and you can write your own.
Edges win. An explicit upcaster edge is authoritative for family membership; the strategy is only the convention used to derive families, order, and additive hops when edges are absent. So names that follow the convention need nothing, and if two types should be one family but their names would split them, authoring a hop between them connects them regardless of naming. You almost never need an explicit override; the rare case is supplying a version for a name the strategy cannot parse, or selecting a different strategy for one family.
Opt-outs and the off-ramp
There are three levels of control, from letting the SDK do everything to leaving the feature entirely.
Full auto is opting out of authoring: for additive-only families, write no upcasters and let the generator synthesize them. You are still using migration.
Full disable is opting out of migration: a switch on DaprActorsOptions turns the feature off, so values are stored plain with no envelope enrichment and no auto-generation. Reads stay tolerant, so they can still read anything already written, which makes the switch safe to flip.
Graduation is the per-entry offramp. GraduateAsync<T>(name, ct) folds the entry to T, writes it plain (no discriminator), and stops enrolling that entry. It is per state name, not all-or-nothing, and it always works, even when migration is globally disabled, because it is the reliable way to leave the feature. Once every instance of an entry has graduated, you can delete its upcasters.
Graduation is reversible
The plain form is pinned to the CLR type you graduated to, so re-enrolling later is just adding a new version and an upcaster from that type (CartStateV3 to CartStateV4): reads deserialize the plain bytes as the graduated type and resume the chain, with that type as the new origin. A store holding a mix of plain and re-enveloped instances is read correctly with no extra work, so graduating is not a one-way door.
Safety: what the SDK guarantees, and what you must not do
The single rule you must follow is append-only: you add new nodes and hops to a chain and never re-edit one that has already shipped. A hop may do anything internally (add, rename, remove, retype, restructure); what must not change is a node or hop that already shipped, because persisted instances may already have been written under it.
The SDK backs that rule with two lines of defense.
At build time, the generator fingerprints every node shape and every upcaster into the project baseline (the committed DaprActorsNext.Shipped.txt and DaprActorsNext.Unshipped.txt files that the DAPR1410 shape guard reads). If a superseded node or an already-used upcaster diverges from the committed baseline, you get a warning that you modified something already participating in migration, which risks corrupting persisted state. Updating the committed baseline is your deliberate acknowledgment that you meant to. The check is intentionally conservative, since the generator cannot see the dev/production boundary, so it treats any change to a node as risky.
At run time, each stored value carries a structural fingerprint of its node’s shape. If the stored fingerprint no longer matches the current build’s shape for that node, the value was written under a different shape of that node, and the runtime throws rather than silently deserializing stale data into a mismatched shape. Failing loud is the correct outcome here: silent partial deserialization is precisely the production incident this feature exists to prevent.
Renames are caught from the other direction. Renaming an older type does not change its shape, so it does not trip the fingerprint guard; instead it breaks graph connectivity, the renamed type is no longer reachable to the target, which the analyzer surfaces as a missing hop or an unconnected type.
Rollback is safe-fail, not first-class
Rolling an older build back onto newer state it cannot interpret is safe but not supported as a working path: the read fails loud and the turn does not persist, so you get a safe, non-corrupting failure rather than a silent downgrade. If you need to support running an older build against newer data, plan for it explicitly (for example by keeping changes additive) rather than assuming a rollback will transparently read forward-written state.
Analyzers
Migration correctness is enforced primarily at build time, and the diagnostics live in the actors DAPR14xx range alongside the shape-baseline (DAPR1410), broken-chain (DAPR1415), and determinism (DAPR1413, DAPR1414) analyzers. See the diagnostics reference for the assigned IDs.
Build-time guidance covers the situations you will actually hit: a missing hop to a target you use in state (with a code fix that scaffolds the upcaster, pre-filling shared and additive members), a type that looks like it belongs to a family but is not fully connected, a gap in the middle of a chain, a non-additive step that cannot be auto-generated, an ambiguous fold path where several origins or a diamond make the path non-unique, and the corruption guard described above. Because the analyzer and the generator share the same version-parsing and fingerprinting helpers, build-time guidance and generated output never disagree, and IDE hints show which family a type participates in so the (now implicit) migration behavior stays discoverable.
Testing
Migration is deterministically testable in-memory with ActorTestRuntime, with no sidecar and no state store.
SeedStateAsync plants either enveloped or plain forms directly in the in-memory store, so you can seed a “V1” instance and assert the actor reads it back at the current shape. The fault injector adds hooks during a migrating read and between hops (FailNextMigration<T>(), FailNextUpcastHop<TFrom, TTo>()) so the failure paths through the fold are unit-testable, and the state snapshot API handles both enveloped and graduated forms so a test can assert the store healed to the current node after a migrating read and save. A useful test matrix is fold-by-default, an auto-generated additive chain, the corruption guard, multi-family isolation within one actor, exactly-one re-persist at the target, a SetAsync import that then folds, graduation followed by re-import, a fault during migration, and the full-disable opt-out. See Testing for the runtime surface.
Interpreted actors
Interpreted (runtime-defined) actors carry a dynamic state bag rather than typed CLR shapes, so typed upcasters do not apply to them. Their state travels the plain path and is versioned, if at all, as the version of the machine-definition document. The migration system never assumes all state is typed, so this composes without special handling; see the tutorial’s runtime-defined state machines part.
Best practices
Prefer additive changes (new defaultable members), which need no upcaster at all.
When a change is not additive, add one hop per shape change and let the chain compose; keep each hop small.
Keep upcasters pure and deterministic, and let them take injected dependencies rather than reaching for ambient state.
Never re-edit a node or hop that has shipped; add a new node and a new hop instead, and commit the updated baseline deliberately when the analyzer flags a change.
Keep version-conditional logic out of actor code; a branch on version is a missing hop.
Retire an old version only after its instances have been read forward (and so re-persisted) or drained; keep older shapes and their hops as long as instances written under them may still exist.
Use graduation to take an entry off the feature cleanly, and remember it is reversible if you need to re-enroll later.
Remember that upcasting exclusively happens lazily - state is only migrated when it is retrieved by an actor; migration never runs against the entirely of state written by the actor in its state store.
Author long-lived reactive entities as state machines with StateMachineActor, and test them deterministically
Some actors are genuinely state machines: a connection, a device, an auction, a subscription, a lease. Each is a long-lived, addressable entity that reacts to events and moves through explicit states over an indefinite lifetime. Dapr.Actors.Next provides a first-class model for these, StateMachineActor<TState, TData>, that stays an ordinary strongly-typed Dapr actor on the outside while letting you author the behavior as an explicit state machine on the inside.
When to use a state machine actor
Reach for this model when an actor has a small number of distinct states and the rules for what it may do depend on which state it is in. Encoding those states and transitions explicitly makes the rules visible, keeps illegal transitions from happening by accident, and (because the machine is a table rather than scattered if statements) lets the test runtime check the structure for you.
If an actor is a simple data holder, or its methods do not depend on an explicit lifecycle state, a plain [DaprActor] actor is the better choice; the state machine model adds structure you would not be using.
How it relates to Dapr Workflows
State machine actors and Dapr Workflows solve different problems, and confusing the two is the most common modeling mistake, because a stateful, multi-step thing can look like either at first glance. The distinction is what the unit of work actually is.
A workflow instance is an orchestration: code whose progress is durably tracked by replaying its recorded history. Workflows are strong at orchestrating multiple steps and services, with retries, timeouts, fan-out and fan-in, and potentially compensation when something fails partway. An orchestration can be short- or long-lived; it may loop indefinitely and continue as a new execution to keep its history bounded, so it is not required to run to a single completion.
A state machine actor is an entity: a single addressable thing that lives indefinitely and that many short executions act on. It is strong at holding current state, answering synchronous reads of that state immediately, and reacting to a stream of events over its lifetime.
Aspect
State machine actor
Dapr Workflow
Unit of work
A long-lived, addressable entity
An orchestration of steps across services
Lifetime
Indefinite; transitions and persists across activations
Long-lived; can loop indefinitely and continue as new executions, so it is not required to terminate
Execution
Turn-based, single-threaded turns over persisted state
Code replayed against recorded history, compacted by continuing as new
Reading current state
Synchronous, from memory in one turn
Queryable orchestration status
Event rate
Handles high-frequency events as cheap turns
Frequent external events grow replay history, mitigated by compaction
Orientation
Is the thing others interact with
Orchestrates other work
The auction is the canonical example of something that looks like a process but is really an entity. It receives a high rate of bids, every bidder needs an instant read of the current high bid, and a last-second bid that extends the deadline races the close timer. A workflow would grow a large replay history under that bid rate, could not answer the synchronous reads cleanly, and would model the timer-versus-bid race awkwardly. A state machine actor handles all of it as ordinary turns.
How they complement one another
The two compose, and a well-designed system often uses both together, each doing what it is good at.
An entity hands off to a workflow when it enters a state that begins a finite process. When the auction transitions to Sold, its entry action starts a fulfillment workflow to charge the winner, notify the losers, and arrange shipping, with compensation if a payment fails. The actor remains the live, addressable entity; the workflow runs the bounded, multi-step orchestration and then ends.
A workflow drives entities as part of its orchestration. A provisioning or order workflow can call actor methods to reserve inventory or update a device, and signal an actor when it completes. The workflow coordinates the steps; the actors are the addressable things those steps act on.
A useful rule of thumb: the reactive, addressable, indefinitely-living thing is a state machine actor, and the finite multi-step process that it launches, or that coordinates it, is a workflow. Named states make the boundary between them clear, because the transition into a state is the natural place to start the workflow that state implies.
The model
A state-machine actor has a discrete state (TState, an enum) and extended state (TData, your typed data), both persisted together. You describe the machine in Configure, which builds a transition table; that is, a data structure rather than control flow, which the runtime executes.
publicenumAuctionState{Open,Sold,Expired}publicsealedrecordAuctionData{publicdecimalHighBid{get;init;}publicstring?HighBidder{get;init;}}[DaprActor("Auction")]publicsealedclassAuctionActor(ActorActivationContextcontext,IActorTimerSchedulertimers):StateMachineActor<AuctionState,AuctionData>(context,timers,"Auction",newAuctionData()),IAuctionActor{protectedoverridevoidConfigure(IStateMachine<AuctionState,AuctionData>sm){sm.InitialState(AuctionState.Open);sm.In(AuctionState.Open).OnEntry(ScheduleSoftClose)// fires only on a live transition into Open.On<Bid>().When((d,e)=>e.Amount>d.HighBid).Do(AcceptBid)// internal: stays Open.Otherwise().Reply(BidResult.TooLow)// guard fallthrough, no transition.On<StateMachineTimerFired>().When(ctx=>ctx.Event.Name=="soft-close").GoTo(AuctionState.Sold)// timer fired: OnExit(Open) then OnEntry(Sold).OnExit(CancelSoftClose);sm.In(AuctionState.Sold).OnEntry(StartFulfillment)// begins fulfillment (see below).Ignore<Bid>();// late bids dropped, not erroredsm.OnUnhandled(ctx=>thrownewInvalidActorEventException(ctx.State,ctx.Event));}// A command method reifies its payload as an event; the return comes from the matched handler's Reply.publicTask<BidResult>PlaceBid(Bidbid,CancellationTokenct=default)=>Raise<BidResult>(bid,ct);privatevoidScheduleSoftClose(IEffectContext<AuctionState,AuctionData,object>ctx)=>ctx.Timers.Schedule("soft-close",TimeSpan.FromSeconds(30));privatevoidCancelSoftClose(IEffectContext<AuctionState,AuctionData,object>ctx)=>ctx.Timers.Cancel("soft-close");privatevoidAcceptBid(IEffectContext<AuctionState,AuctionData,Bid>ctx){ctx.Update(d=>dwith{HighBid=ctx.Event.Amount,HighBidder=ctx.Event.Bidder});ctx.Timers.Reschedule("soft-close",TimeSpan.FromSeconds(30));// resets the soft-close on each bidctx.Reply(BidResult.Accepted);}privatevoidStartFulfillment(IEffectContext<AuctionState,AuctionData,object>ctx){// Where a real deployment starts the fulfillment workflow (charge, notify, ship).}}
Method invocations are events
A command method on the actor interface reifies its payload as an event into the machine; the method’s return value is whatever the matched handler replies. Query methods that only read CurrentState or Data bypass the machine. This is what lets a state-machine actor remain a normal Dapr actor: proxies, the registry, dynamic invocation, and subscription streams all work unchanged.
Driving timed transitions
A state-machine actor has two ways to fire a transition on a timer, and both are durable across deactivation.
In-machine timers (used above). Schedule from inside an effect with ctx.Timers.Schedule, Reschedule, or Cancel (each takes a name and a due time). When the timer comes due it re-enters the machine as a StateMachineTimerFired event carrying that name, which you handle like any other event:
For a plain state timeout, .After(timeout) arms one declaratively; it arrives as StateTimeout<TState>, and you re-arm it from an effect with ctx.Timers.Reschedule(StateMachineConstants.StateTimeoutTimerName, timeout):
Injected schedulers. Inject IActorTimerScheduler (or, for a durable retry-until-ack reminder, IActorReminderScheduler) and schedule a callback that targets one of the actor’s own methods, which raises a domain event:
// inside an effect, using the injected scheduler instead of ctx.Timers:awaittimers.RescheduleAsync("Auction",Id,"soft-close",TimeSpan.FromSeconds(30),nameof(Close),arguments:Array.Empty<byte>());publicTaskClose(CancellationTokenct=default)=>Raise<object?>(newCloseAuction(),ct);// handled by: sm.In(AuctionState.Open).On<CloseAuction>().GoTo(AuctionState.Sold);
Reach for the injected scheduler when you want the timer to raise a specific domain event of your own (rather than the framework’s StateMachineTimerFired/StateTimeout), when you need a durable reminder, or when you share a scheduling path with non-state-machine code. The auction tutorial uses this second style. Either way, the actor injects an IActorTimerScheduler and passes it to the base constructor, because ctx.Timers is backed by it.
DSL reference
Verb
Meaning
InitialState(s)
The state a freshly created instance starts in.
In(state)
Begin configuring a state.
OnEntry(a) / OnExit(a)
Actions run on a live transition into or out of the state.
On<TEvent>()
Handle an event in this state.
.When(pred) / .Otherwise()
Guard chain; first match wins; Otherwise is the fallthrough.
.GoTo(state)
External transition: OnExit(current), then effect, then OnEntry(target).
.Do(effect)
Run an effect; with no GoTo it is an internal transition (stay, no entry/exit).
.Reply(value)
Supply the invoking method’s return value.
.Raise<TEvent>(e)
Queue an internal event, processed within the same turn.
.Ignore<TEvent>()
Drop the event with no error and no transition.
.Defer<TEvent>()
Durable deferral (see below).
.After(timeout)
Declarative state timeout, delivered as StateTimeout<TState> (a named ctx.Timers timer instead fires as StateMachineTimerFired).
SubstateOf(parent)
Hierarchy: events unhandled by the child bubble to the parent.
OnUnhandled(h)
Global fallback for an event no state handles.
OnEntry, OnExit, Do, and OnUnhandled each accept an inline lambda or a method-group delegate over IEffectContext<…>. They also accept a string effect name, but that form resolves through an ICapabilityRegistry and applies to interpreted (data-defined) machines; a compiled StateMachineActor throws if it reaches a named effect or guard with no registry.
Semantics you must know
These three rules are the difference between a correct state-machine actor and a subtly broken one.
Run-to-completion: an event, plus any internally raised events, is processed to a stable state before the next event is accepted. This maps directly onto Dapr’s turn-based guarantee.
Silent rehydration: when an idle actor is reactivated, CurrentState and Data are restored without running OnEntry or OnExit. Entry and exit actions fire only on live transitions. Anything that must run on every activation belongs in OnActivateAsync, not in OnEntry; otherwise side effects such as re-arming timers or re-emitting events would fire every time the actor wakes.
Durable deferral: because an incoming event is a method call that must return, Defer cannot hold a turn open waiting for a future message, which would deadlock. Defer<TEvent>() instead persists the event into the actor’s state, returns an accepted or deferred acknowledgment, and re-raises it on the next transition that no longer defers it.
Effects run inside an at-least-once turn
A method invocation is an event, and like any actor invoke it can be redelivered after its state commits if the response is lost (see delivery guarantees). A transition is safe to repeat only if the machine is designed to handle that event idempotently from the committed state. A self-transition, a repeated effect that mutates Data, or another transition accepting the same event can apply changes again. Test duplicate events explicitly and deduplicate where needed. Effects and entry actions that publish events or start workflows also need idempotency, for example by keying a started workflow on a deterministic instance id derived from the actor and the transition rather than a fresh one each time.
Hierarchical states
Declare a parent state to share handlers across several states. An event unhandled by the child bubbles to the parent.
sm.In(AuctionState.Open).SubstateOf(AuctionState.Live);sm.In(AuctionState.Paused).SubstateOf(AuctionState.Live);sm.In(AuctionState.Live).On<Cancel>().GoTo(AuctionState.Expired);// applies to Open and Paused
Versioning a state machine
CurrentState and Data persist together. Data evolves through the same upcaster chains described in Serialization and state migration. If a deploy removes or renames an enum value that a persisted instance currently occupies, map the stranded state to a legal one in an upcaster on activation; the state-version hook does double duty for the machine’s logical position.
Testing state machine actors
Because the machine is a table, the test runtime can both exercise its behavior deterministically and validate its structure without running it.
Behavioral testing
Drive events and advance virtual time to test transitions and the order in which turns run, with no sidecar. The soft-close race, where a last-second bid extends the deadline, becomes a plain, repeatable test. The bid and the close-timer firing are two separate turns whose arrival order is not fixed; the runtime never overlaps them, it runs one then the other, and the test asserts the outcome is correct whichever order they run in.
[Fact]publicasyncTaskLast_second_bid_extends_close_and_is_not_lost(){awaitusingvarrt=newActorTestRuntime();varauction=rt.CreateActor<IAuctionActor>(ActorId.Create("a1"),"AuctionActor");awaitauction.PlaceBid(newBid(100m,"alice"));rt.Time.Advance(TimeSpan.FromSeconds(29));// just before soft-closevarlate=auction.PlaceBid(newBid(110m,"bob"));// a bid turn and a close-timer turn are now both pendingrt.Time.Advance(TimeSpan.FromSeconds(2));awaitrt.RunToIdle();// scheduler explores the order of the two turnsAssert.Equal(BidResult.Accepted,awaitlate);Assert.Equal(AuctionState.Open,rt.StateOf(auction).CurrentState<AuctionState>());// not prematurely Sold}
Structural validation
The transition table can be analyzed directly, so you can catch defects in the machine’s shape before it ever runs. ActorStateMachine.Analyze<TActor>() inspects the table and reports states no transition can reach, states with no way out, guard branches that can never be selected, and entry/exit ordering problems across hierarchy. AssertNoStructuralDefects() turns any finding into a test failure, so a refactor that strands a state breaks the build rather than surfacing in production.
Analyze also returns the full report if you would rather inspect or assert on specific findings than fail on any. Structural analysis is part of the in-memory test runtime; see Testing for how it sits alongside the behavioral, concurrency, and fault-injection tools.
Best practices
Use a state machine actor when state-dependent rules are the point; use a plain actor otherwise.
Put reactivation logic in OnActivateAsync, never in OnEntry.
Keep effects small and deterministic; use IEffectContext.Update to evolve Data and ctx.Timers for time.
Use Ignore for events that are legitimately irrelevant in a state, and OnUnhandled to make true protocol violations loud.
Start a workflow from a state’s entry action when that state begins a finite, multi-step process; keep the entity itself in the actor.
Run ActorStateMachine.Analyze<T>().AssertNoStructuralDefects() as a unit test so structural regressions fail the build.
Drive actors from pub/sub topics with [Subscribe] using Dapr.Actors.Next
Subscription streams let an actor react to messages from an existing Dapr pub/sub component. You annotate an actor method with [Subscribe], and a delivered topic event wakes the actor and invokes that method, much like a timer or reminder firing.
Package
Subscription streams ship in the Dapr.Actors.Next.Streams namespace, included in the Dapr.Actors.Next meta-package. It uses Dapr pub/sub and actor invocation as they exist today, so it works against the current runtime with no runtime changes.
How it works
The subscription lives at the host, not in the actor body. The package opens a streaming subscription to the topic, receives filtered events, and forwards each one to the target actor as a normal, placement-routed proxy invocation. That invocation is what wakes the actor, wherever placement has put it, and runs it turn-based with all the usual guarantees.
Because the forward is an ordinary invocation, the instance that receives the topic event does not need to host the target actor. An event delivered to one replica can drive an actor placed on another.
Usage
Annotate an actor method with [Subscribe], naming the pub/sub component, the topic, and how to extract the routing key, which is the actor id that should receive the event.
The routing key determines the actor id that gets the event. The streaming service opens the subscription, deserializes the event, and forwards the invocation; the application supplies the subscription metadata through the registry. The routing key can be a property of the event, a CloudEvents attribute such as subject, or a content path.
[Subscribe] documents the actor method’s subscription target, but the current implementation does not discover that attribute automatically. The application must add the corresponding ActorStreamSubscription to the stream registry. The streaming host that opens the subscriptions is a separate service you opt into:
The registry entry supplies the pub/sub component, topic, actor type, dispatch method, and routing key. The attribute and registry entry should describe the same subscription; the registry is the configuration that the hosted subscriber uses.
Delivery semantics
The subscription’s acknowledgment is gated on the outcome of the forward invocation, so a message is not acknowledged before the actor has processed it.
Actor turn succeeds: ack.
Transient failure: retry.
Poison message: drop or dead-letter, per the component’s configuration.
Single delivery across replicas is provided by the pub/sub component’s own consumer and queue semantics; the package does not reinvent fan-out. Each event is delivered to one application instance, which performs one placement-routed invocation to the one target actor.
Order and hosting are the component's, not the actor's
Two things follow from the subscription living at the host and delivery coming from the pub/sub component. First, ordering is whatever the component provides, which is generally not a total order across events, and the forward-invoke plus placement adds no ordering of its own, so do not assume a handler sees events in publish order. Where order matters, carry a sequence or timestamp in the event and let the actor reconcile, rather than relying on arrival order. Second, an event is only consumed if an instance of the hosting app is running to receive it; the subscription is not durable in the actor. If no host is up, delivery follows the component’s retention and redelivery behavior, not the actor’s. Combined with at-least-once delivery, this is why [Subscribe] handlers must be idempotent and order-tolerant.
Tracing
The CloudEvents traceparent is extracted from the event and attached to the forward invocation, so the inbound delivery and the actor wake-up appear as a single trace rather than two disjoint ones. The host hop is abstracted away in a trace view as well as in code.
Testing subscription streams
There is no fake broker to stand up. You drive the subscription runner directly against the in-memory runtime, which exercises the same forward-invoke and Ack/Retry/Drop path the streaming host uses. Describe the subscription, build a runner over the runtime’s invocation client, and feed it ActorStreamEvents:
privatestaticreadonlyActorStreamSubscriptionSubscription=new("orders-pubsub","inventory-restocked","CartActor",nameof(ICartActor.OnRestock),nameof(RestockEvent.CartId));privatestaticreadonlyJsonSerializerOptionsWebJson=new(JsonSerializerDefaults.Web);// The runner forwards a delivered event to the placement-routed actor. It needs the// runtime's invocation client, which the in-memory runtime exposes internally.privatestaticActorStreamSubscriptionRunnerRunner(ActorTestRuntimert){varinvocationClient=(IActorInvocationClient)rt.GetType().GetProperty("Runtime",BindingFlags.Instance|BindingFlags.NonPublic)!.GetValue(rt)!;returnnewActorStreamSubscriptionRunner(newActorStreamForwarder(invocationClient,newActorStreamRoutingKeyExtractor()),newDefaultActorStreamFailureClassifier());}privatestaticActorStreamEventEvent(RestockEventevt)=>new("event-1","orders-pubsub","inventory-restocked",Encoding.UTF8.GetBytes(JsonSerializer.Serialize(evt,WebJson)),newDictionary<string,string>());
[Fact]publicasyncTaskRestock_event_routes_to_the_cart_in_its_route_key(){awaitusingvarrt=newActorTestRuntime(services=>services.AddDaprActors(_=>{}));varcart=rt.CreateActor<ICartActor>(ActorId.Create("u1"),"CartActor");vardelivery=Runner(rt).ProcessEventAsync(Subscription,Event(newRestockEvent{CartId="u1",Sku="sku-1"}));awaitrt.RunToIdle();Assert.Equal(ActorStreamDeliveryAction.Ack,awaitdelivery);Assert.Contains("sku-1",(awaitcart.GetSummary()).Available);}[Fact]publicasyncTaskTransient_failure_is_retried_not_acked(){awaitusingvarrt=newActorTestRuntime(services=>services.AddDaprActors(_=>{}));_=rt.CreateActor<ICartActor>(ActorId.Create("u1"),"CartActor");rt.Faults.FailNextStateWrite<CartState>();// first delivery fails mid-turnvardelivery=Runner(rt).ProcessEventAsync(Subscription,Event(newRestockEvent{CartId="u1",Sku="sku-1"}));awaitrt.RunToIdle();Assert.Equal(ActorStreamDeliveryAction.Retry,awaitdelivery);// retried, not acked}
The types used here (ActorStreamSubscription, ActorStreamSubscriptionRunner, ActorStreamForwarder, ActorStreamRoutingKeyExtractor, DefaultActorStreamFailureClassifier, ActorStreamEvent, and the ActorStreamDeliveryAction result) live in the Dapr.Actors.Next.Streams namespace.
End-to-end behavior against a real component is validated with the Testcontainers integration suite; see Testing.
Best practices
Choose a routing key that is stable and present on every event for the topic; an event with no resolvable key cannot be routed.
Keep [Subscribe] handlers idempotent. Delivery is at-least-once, and a retried message may be reprocessed.
Treat a subscription handler like any other turn: keep it short and let it transition state. For state-machine actors the event flows into the machine exactly like any other event.
Rely on the component’s delivery and ordering guarantees rather than building your own fan-out.
Call actors by type, id, and method with no compile-time contract, for gateways, tooling, and cross-language callers
Most application code calls actors through the strongly-typed proxy, which needs the actor’s contract interface at compile time. Dynamic invocation is the other path: call an actor by its type name, id, and method with a serialized payload, without a compile-time contract. This is the actor protocol itself rather than a .NET authoring feature, which is what makes it the language-agnostic way to call actors and a distinctly different capability from the rest of the SDK.
Calling is not hosting
The most important thing to understand first: calling an actor does not require hosting, registering, or referencing it. A caller supplies a type name, an id, a method name, and a payload, and the runtime routes the call to whichever app in the cluster hosts that type. The caller does not implement the actor, does not call AddDaprActors() to call, and does not need the actor’s assembly.
This is the inverse of the advertisement requirement on the hosting side. An app that hosts actors advertises the types it hosts so the runtime can route inbound calls to it. A caller advertises nothing; it just calls. The strongly-typed proxy and the dynamic client are both callers, and neither hosts anything by virtue of calling.
The .NET surface
Two pieces, discovery and invocation.
IActorRegistry is discovery. The source generator emits it from the actors this app hosts, carrying each type, its methods, and their parameter and return types. This is genuinely new: the Dapr runtime metadata lists only actor type names, while the generated registry carries full signatures, so code in this app can enumerate what it exposes and how to call it.
Note the scope of each: IActorRegistry reflects the types this app hosts, so it is discovery of what this app exposes. IDynamicActorClient can call any type the cluster hosts, whether or not this app hosts it and whether or not it appears in this app’s registry. When you call a type hosted by another app, you supply its type and method from a contract you already know, not from local discovery.
Cross-language calling
Because a call is a type name, an id, a method name, and a serialized payload with a content type, a .NET app can dynamically invoke an actor implemented in another language, and be invoked from one, over the same protocol. This is the strongest reason dynamic invocation exists as its own capability.
The .NET SDK controls only the .NET side of that exchange. It serializes and deserializes the .NET payloads it sends and receives through IDaprSerializer and sets and reads the content type. It has no control over how another language serializes its payloads, names its methods, or marshals its errors. Cross-language interop is therefore a payload-schema coordination problem that you own: agree on a wire format (JSON is the natural default for the dynamic path), agree on the content type, and validate what arrives. Treat the other side’s conventions as an external contract, not something the SDK settles.
Everything below this point is about what the .NET SDK does on its own side of the call.
Serialization is the same wire, without a proxy in between
The payload on the wire is identical to the strongly-typed path: serialized bytes plus a content type, with no remoting-versus-non-remoting distinction. The difference is only where serialization happens on the calling side. The strongly-typed proxy serializes your typed arguments for you through IDaprSerializer; the dynamic client takes arguments you have already serialized to JSON and sends them as-is. On the receiving side there is no difference at all: the hosting actor’s dispatcher deserializes the payload into the method’s parameter type through IDaprSerializer exactly as it would for a strongly-typed call.
The result model still applies
A dynamically invoked method that raises an application error returns that error the same way a strongly-typed call does, as an error payload the runtime passes back to the caller verbatim. The difference is reconstruction. The strongly-typed proxy rebuilds and rethrows the error as its CLR exception type, because it knows the contract. The dynamic client has no contract to rebuild against, so it surfaces the raw error payload and its content type and leaves interpretation to you. Plan to inspect the returned error rather than to catch a typed exception.
The delivery contract still applies
Dynamic invocation does not change delivery semantics, because those are a property of the invoke path, not of how you called it. A dynamically invoked method is at-least-once: a call the runtime pulled but could not confirm is retried, so the actor method must be safe to run more than once. This is the same contract that governs the strongly-typed path, reminders, and subscription deliveries. If you expose dynamic invocation through a gateway, the actors behind it still need idempotent handlers.
When to use it
A gateway or API layer that forwards calls to actors it does not reference at compile time.
Admin or operational tooling that invokes actors generically by type and method.
A cross-language caller, where a compile-time .NET contract does not exist by definition.
An agent that discovers callable actors from the registry and invokes them, one consumer of this surface among the others.
For actors whose behavior is defined at runtime rather than compiled, dynamic invocation is how you call them, but hosting them is a separate feature; see the agentic material in the overview and the interpreted state machine model. This page is about calling, not about runtime-defined hosting.
Testing
A dynamic call is drivable in the in-memory test runtime the same way a strongly-typed call is, so you can test a gateway or a generic router without a sidecar.
// IDynamicActorClient and IActorRegistry are resolved from the runtime's service// provider, which the in-memory runtime holds in a private field.privatestaticIServiceProviderProvider(ActorTestRuntimert)=>(IServiceProvider)rt.GetType().GetField("provider",BindingFlags.Instance|BindingFlags.NonPublic)!.GetValue(rt)!;[Fact]publicasyncTaskGateway_forwards_a_dynamic_call_to_the_actor(){awaitusingvarrt=newActorTestRuntime(services=>services.AddDaprActors(_=>{}));rt.CreateActor<ICartActor>(ActorId.Create("u1"),"CartActor");// host the target in the runtimevarclient=Provider(rt).GetRequiredService<IDynamicActorClient>();varjson=awaitclient.InvokeAsync("CartActor","u1","GetSummary","{}");Assert.NotNull(json);}[Fact]publicasyncTaskRegistry_exposes_hosted_types_and_their_signatures(){awaitusingvarrt=newActorTestRuntime(services=>services.AddDaprActors(_=>{}));varregistry=Provider(rt).GetRequiredService<IActorRegistry>();Assert.True(registry.TryGet("CartActor",outvarcart));Assert.Contains(cart.Methods,m=>m.Name==nameof(ICartActor.GetSummary));}
The first test proves the forward path end to end without infrastructure; the second proves discovery returns the signatures a gateway or agent would route on. See Testing for the full runtime.
Boundaries to keep in mind
There is no compile-time signature checking. A wrong method name or a malformed argsJson fails at runtime, not at build time, which is the cost of not having a contract.
Contract drift is not caught for you. Because the caller holds no compile-time reference to the target, a change to the target actor’s method signature will not break the caller’s build; it will surface as a runtime failure or, worse, a silently mismatched payload. Coordinate contract changes out of band, and use the ContractVersion on the registry descriptor (where the target is one you host) to detect drift deliberately rather than relying on the compiler to.
The delivery contract still applies. A dynamically invoked method is at-least-once like any invoke, so the target handler must be re-run-safe; calling dynamically does not opt out of that (see delivery guarantees).
The payload is only as safe as your validation. A gateway or agent that accepts a type, method, and JSON from outside must validate and authorize before invoking; dynamic invocation is a general capability with no built-in allow-list.
Application errors come back as raw payloads, not reconstructed CLR exceptions (see the result model above).
Discovery is local. IActorRegistry lists the types this app hosts; calling a type hosted elsewhere is by a contract you already know, not by discovery.
Deterministically test actor concurrency, timers, reminders, and failures with the in-memory runtime, xUnit v3, and Coyote
Testing is the headline capability of Dapr.Actors.Next. The hard parts of actors, including reentrancy, a timer that comes due while a call is in progress, duplicate or out-of-order delivery, and a failure in the middle of a state write, are normally only reachable with a running sidecar and wall-clock timing, which makes them effectively untestable. This SDK makes them deterministic, fast, and reproducible by isolating the three sources of nondeterminism (transport, scheduling, and time) behind abstractions, so the same actor code runs against either the real runtime or an in-memory test runtime.
This page covers what is available at development time, how to write tests with xUnit v3, how to add Coyote for deeper exploration, and how to run integration tests against a real sidecar.
.NET framework support
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
Package
The in-memory runtime is in the Dapr.Actors.Next.Testing namespace. It is one of the packages that make up the Dapr.Actors.Next meta-package, and it is also published to NuGet on its own, so you install it directly into your test project rather than pulling the full meta-package there. It drives your real actors through the same generated dispatchers used in production, so there are no test-only actor implementations.
What is available at development time
ActorTestRuntime gives you a controlled scheduler that explores the ordering of whole turns across actor ids, and reentrancy within a single call chain, from a seed, with strategies that include a seeded random walk and a priority-based strategy. Independent turns for a single actor id never overlap; the runtime holds the actor lock and delivers at most one non-reentrant callback per id at a time. StepAsync starts one runnable turn; RunToIdle drives scheduled work until no runnable or in-flight turns remain.
The runtime also provides virtual time through TimeProvider, production in-process timer/reminder adapters, and introspection of persisted state and the scheduling transcript. Remote-call simulation checks call chains without ambient execution-context propagation. State-write pauses let you hold a turn at a known persistence boundary while testing competing work. Fault injection covers state writes, migration, and invocation; callback-stream faults additionally require a decorated transport and a running stream manager. For state-machine actors, structural analysis detects defects in the transition table.
None of this requires a sidecar, a state store, or Docker.
A set of analyzers keeps actors inside the model the controlled scheduler can explore exhaustively. They flag work that escapes the scheduler such as Task.Run (DAPR1411), blocking calls (DAPR1412), wall-clock time used instead of TimeProvider (DAPR1413), and unseeded nondeterministic sources such as Guid.NewGuid() or Random (DAPR1414). Staying clean against these is what makes the in-memory exploration complete rather than best-effort; see the diagnostics reference.
Testing with xUnit v3
The Dapr .NET SDK tests with xUnit v3, and these examples assume it. Add the Dapr .NET Actors SDK and xUnit v3 packages to your test project:
Create a runtime with your application’s actor and dependency registrations, create an actor proxy, drive the scheduler, and assert. The examples assume the illustrated actor contracts and implementations are discoverable by AddDaprActors; include any dependencies they require in the service configuration. The [Fact] and Assert surface is the same as earlier xUnit versions.
Start each call before advancing the scheduler, and await its result afterward. Awaiting a queued call before RunToIdle can leave the test waiting indefinitely. Use StepAsync instead when a test intentionally pauses a turn: RunToIdle cannot finish while that turn remains paused.
CreateActor always takes the actor type name
CreateActor<TActor>(actorId, actorType) requires the actor type name; there is no overload that infers it from TActor. Pass the name the actor is hosted under: its [DaprActor] name (or the type-name fallback), or the alias you registered it with (see registering an actor under a custom name). Requiring the name also removes any ambiguity when one interface backs several actor types.
Because an alias is often sourced from configuration, and it is common to keep separate Debug and Release (or other environment) configuration profiles, resolve the alias in the test from the same source the host uses, or from a single shared constant, rather than hard-coding a literal. If the host reads QUEUE_ACTOR_TYPE_NAME from configuration, a test that hard-codes "OrdersQueue" may match the profile where that value happens to line up and then silently address the default or a different name under another profile. Reading the name the same way the host does keeps the test consistent with whatever profile it runs under.
// Resolve the alias the same way the host does, so the test tracks the active profile.varactorType=configuration.GetValue("QUEUE_ACTOR_TYPE_NAME","QueueActor");varqueue=rt.CreateActor<IQueueActor>(ActorId.Create("q1"),actorType);
Injecting dependencies
Configure services on the runtime the same way you would in your host. Test doubles are injected into the actor’s per-activation scope.
The runtime injects CoreActorTimerScheduler and CoreActorReminderScheduler, the production in-process adapters, backed by rt.Time. Run the turn that registers a timer or reminder, advance the clock to admit due callbacks, and then drive their mailbox turns:
[Fact]publicasyncTaskAbandoned_cart_reminder_fires_after_thirty_minutes(){awaitusingvarrt=newActorTestRuntime(services=>services.AddDaprActors());varcart=rt.CreateActor<ICartActor>(ActorId.Create("u1"),"CartActor");varadd=cart.AddItem(newCartItem("sku-1",1));awaitrt.RunToIdle();awaitadd;rt.Time.Advance(TimeSpan.FromMinutes(30));// admits the registered abandon-cart reminderawaitrt.RunToIdle();varsummary=cart.GetSummary();awaitrt.RunToIdle();Assert.True((awaitsummary).IsAbandoned);}
The example assumes AddItem registers the reminder. Callbacks are independent turns, not reentrant continuations of the turn that registered them. The adapters suppress execution-context capture, so a timer or reminder does not inherit that turn’s call chain.
Test replacement and cancellation by registering the same timer or reminder name again, canceling it, and advancing time. Cancellation prevents future callback admission; a callback already admitted may still complete. VirtualActorTimeProvider implements TimeProvider.CreateTimer, including change, disposal, and execution-context capture; its direct ScheduleTimer and ScheduleReminder helpers remain available. Calls to Time.Advance must not overlap or recurse.
The provider visits each due time in order, breaking ties by registration order, and invokes timer callbacks synchronously outside its registration lock. Those callbacks can change or cancel timers. If a timer callback throws, advancement stops at that due time. Actor callback admission is separate from executing the queued actor turn, which still requires the controlled scheduler.
Virtual time does not advance a real sidecar’s clock or reproduce durable scheduler delivery. Keep those checks in integration tests.
State-write failure
A state-write fault fails the matching persistence attempt; it does not automatically retry the invocation. Inspect persisted state with StateOf rather than issuing a read turn that could flush dirty cached state:
This checks a previously unpersisted "cart" entry. It does not assert rollback of actor fields or cached mutations, or of writes that already succeeded. Test recovery explicitly according to your application’s retry and idempotency policy.
Turn ordering: a reminder runs after the in-flight turn, not during it
Independent turns for a single actor id never overlap. A method call is one turn and a reminder is another; if a reminder becomes due while a method turn is in progress, it waits for that turn to finish and then runs as its own turn. Use a state-write pause to ensure the method is actually in flight before advancing time, rather than relying on how quickly an asynchronous call starts. This example assumes AddItem registers the abandon-cart reminder:
[Fact]publicasyncTaskReminder_due_during_a_turn_runs_after_it_and_sees_committed_state(){awaitusingvarrt=newActorTestRuntime(services=>services.AddDaprActors());varcart=rt.CreateActor<ICartActor>(ActorId.Create("u1"),"CartActor");usingvartimeout=newCancellationTokenSource(TimeSpan.FromSeconds(10));usingvarpause=rt.Faults.PauseNextStateWrite<CartState>(stateName:"cart");varadd=cart.AddItem(newCartItem("sku-1",1));awaitrt.StepAsync(timeout.Token);awaitpause.Reached.WaitAsync(timeout.Token);try{rt.Time.Advance(TimeSpan.FromMinutes(30));Assert.False(awaitrt.StepAsync(timeout.Token));// this actor is still occupiedAssert.Null(rt.StateOf(cart).Get<CartState>("cart"));}finally{pause.Release();}awaitrt.RunToIdle(timeout.Token);awaitadd;varsummary=cart.GetSummary();awaitrt.RunToIdle(timeout.Token);varresult=awaitsummary;Assert.Equal(1,result.ItemCount);Assert.True(result.IsAbandoned);}
Only an invocation in the active, matching call chain can be admitted as reentrant, subject to EnableReentrancy and MaxReentrantDepth. The canonical header is Dapr-Reentrancy-Id. The SDK also accepts the legacy dapr-reentrant-id and x-dapr-reentrant-id aliases case-insensitively, preferring the canonical name.
A legitimate race does exist, but it is a race over the order of two whole turns, not two turns overlapping. In the auction (see State machine actors), a late bid and the close-timer firing are two separate turns whose arrival order is not fixed, so the scheduler explores which turn runs first. Each still runs to completion on its own; the test asserts the outcome is correct whichever order they run in.
Testing reentrancy across a remote boundary
Set ActorTestRuntimeOptions.SimulateRemoteCalls to remove the caller’s ambient ExecutionContext from invocations through the test invocation client while preserving propagated headers. This exercises self-calls and A-to-B-to-A callbacks without relying on AsyncLocal state surviving a transport boundary:
Unmatched invocations do not consume this one-shot control. Simulation still uses in-memory serialization and dispatch; it does not test network routing, placement, authentication, or the real wire protocol.
Set reentrancy options explicitly when comparing in-memory and sidecar behavior. The SDK enforces an explicit EnableReentrancy = false and the maximum depth; per-type settings override application settings. When unset, the in-process runtime retains its historical local-reentrancy behavior, while Dapr separately enforces the advertised configuration.
Await nested calls. Reentrant admission does not make actor fields or cached state safe for arbitrary parallel branches or fire-and-forget work. A scheduler seed reproduces its ordering decisions, not every thread-pool interleaving introduced by remote-call simulation; use explicit pauses to pin boundaries and Coyote where deeper exploration is needed.
Reproducing a failure from a seed
When a scheduled exploration finds a failing ordering, it reports the seed. Pin the seed to replay it exactly.
awaitusingvarrt=newActorTestRuntime(services=>services.AddDaprActors(),options:newActorTestRuntimeOptions{// Replay the exact ordering by re-seeding the scheduler the failing run reported.Scheduler=newPriorityActorScheduler(seed:1234567),});
Running many orderings
Run a scenario across many seeds to surface order-dependent bugs. Rebuild the runtime with a fresh SeededRandomActorScheduler(seed) each iteration; the two bids below are issued concurrently by their callers, but they run as two serialized turns on the auction, and each seed explores a different order for those turns. When an assertion fails, the seed that produced it is the reproduction.
[Fact]publicasyncTaskConcurrent_bids_never_lose_the_high_bid(){for(varseed=0;seed<1000;seed++){awaitusingvarrt=newActorTestRuntime(services=>services.AddDaprActors(_=>{}),newActorTestRuntimeOptions{Scheduler=newSeededRandomActorScheduler(seed)});varauction=rt.CreateActor<IAuctionActor>(ActorId.Create("a1"),"Auction");vara=auction.PlaceBid(newBid(100m,"alice"));varb=auction.PlaceBid(newBid(110m,"bob"));awaitrt.RunToIdle();awaitTask.WhenAll(a,b);Assert.Equal(110m,rt.StateOf(auction).Data<AuctionData>()!.HighBid);// the seed pins the failing order}}
Fault injection
rt.Faults queues controls for the next matching operation. Every FailNext... control is one-shot, including when transient: false is passed. transient: true (the default) selects ActorInjectedTransientException; false selects ActorInjectedPermanentException. It changes the exception classification, not how many operations fail. Queue another fault for each additional failure you want to exercise. Nonmatching operations do not consume a fault.
Control
Boundary and filters
FailNextStateWrite<TState>()
Before persisting a value of that type, including an explicit save or end-of-turn save. Optional stateName: limits it to one entry.
FailNextMigration<TState>()
Before a migrating read targeting that type. Optional stateName:.
FailNextUpcastHop<TFrom, TTo>()
Before a specific migration hop. Optional stateName:.
FailNextInvocation()
Before dispatch at the test invocation boundary. Optional actorType: and methodName:.
PauseNextStateWrite<TState>()
Pauses before persistence and returns an ActorFaultPause. Optional stateName:.
SimulateNextRemoteInvocation()
Removes ambient execution context from the next matching invocation through the test invocation client, preserving headers. Optional actorType: and methodName:.
FailNextStreamRead()
After receiving an inbound frame but before delivering it to the runtime. Optional frame kind:; requires a decorated callback transport.
FailNextStreamWrite()
Before forwarding an outbound frame. Optional frame kind:; requires a decorated callback transport.
Fault injection does not install an automatic invocation retry policy. Assert the failed attempt, then explicitly exercise recovery or redelivery. A state-write failure and a response lost after a successful commit are different scenarios: neither provides a general rollback or exactly-once guarantee. See delivery guarantees and state migration.
Pause a state write and race deactivation
PauseNextStateWrite<TState> stops the next matching write immediately before persistence. Start the call, use StepAsync to let it reach the boundary, and await ActorFaultPause.Reached before introducing competing work:
External deactivation is queued behind active work, so drive the scheduler before awaiting it. A deactivation requested by the active call chain is deferred until the turn and its admitted children finish. The activation is not disposed while that work is still using it.
Release() allows the write to continue; calling it before the boundary is reached is safe. Disposing the pause also releases it. A paused write honors its own cancellation token. Canceling RunToIdle cancels the scheduler wait, not an already-running turn; always release the pause during cleanup. You can also advance virtual time while paused to test callback ordering, or run a call to another actor to verify independent progress.
Inject callback-stream failures
These controls target the actor-hosting SubscribeActorEvents stream, not a pub/sub subscription stream. ActorTestRuntime does not open that transport. Run a SubscribeActorEventsStreamManager over a fake transport for a protocol-level unit test, or use a real actor host for an integration test, and decorate its transport with FaultInjectingActorEventsTransport.
Register the decorator after actor services in the test host:
createTransport is your existing factory for the underlying fake transport or DaprActorEventsTransport; preserve its endpoint and API-token configuration. Do not resolve ISubscribeActorEventsTransport inside that factory, which would recursively resolve the decorator. The IActorStateFaultInjector registration is needed only if this host also uses state-write or migration faults.
Resolve the same ActorFaults instance from the test host and arm a fault before sending the request under test:
A read fault consumes the selected inbound frame without dispatching it. A write fault prevents the selected response from being forwarded; for a successful invoke response, actor state has already committed. Omitting kind selects the next frame in that direction, which may be the initial registration frame rather than an invoke. Both controls leave nonmatching frames untouched and throw the selected injected exception once.
Assert reconnection, re-advertisement of the actor type, and subsequent progress. Allow for the stream manager’s five-second reconnect delay; a fake-transport test can drive its injected TimeProvider, while rt.Time does not control a real host automatically. The decorator does not redeliver a request for you. Explicitly resend it in a fake-transport test or exercise your configured retry path with a real sidecar, and assert that an idempotent operation does not duplicate state changes or external effects after response loss.
The stream reader continues admitting callbacks while earlier calls are suspended, so nested callbacks are not blocked behind a fixed worker limit. Outstanding calls still consume memory proportional to admitted load. Disconnects cancel accepted work; actor code must honor cancellation, and code that ignores it may outlive the failed stream.
The SDK’s testing guide describes regression coverage in RuntimeConcurrencyTests, TimerConcurrencyTests, StreamConcurrencyTests, ActorStreamFaultTests, VirtualTimerConcurrencyTests, and RealSidecarConcurrencyTests.
Structural analysis for state machines
State machine actors built on StateMachineActor<TState, TData> carry their transitions as a table, so the test runtime can check the machine’s structure without executing it. ActorStateMachine.Analyze<TActor>() inspects the table and reports defects: states no transition can reach, states with no way out, guard branches that can never be selected, and entry/exit ordering problems across hierarchy. AssertNoStructuralDefects() turns any finding into a test failure.
Run it as a unit test so a refactor that strands a state fails the build instead of surfacing in production. See State machine actors for authoring detail.
Deep testing with Coyote
The built-in scheduler explores the structured nondeterminism of the actor model: message order, reentrancy, and timer-versus-message races. That covers the large majority of actor bugs with no extra tooling. For the remainder, such as handlers that perform complex in-process async or whole-program data-race detection, you can run the same tests under Microsoft Coyote, which takes systematic control of Task, await, and locks across the entire call graph.
Install Coyote
Add the Coyote packages to your test project and install the CLI tool:
The testing apparatus in Dapr.Actors.Next includes an opt-in Coyote bridge that routes the runtime’s scheduling decisions through Coyote’s systematic engine. It is compiled in through the DAPR_ACTORS_NEXT_COYOTE build constant rather than toggled per test, so a dedicated test configuration turns it on for the whole assembly:
When the constant is set, CoyoteBridge.IsEnabled is true and the runtime’s scheduling flows through Coyote; otherwise the built-in scheduler is used. A test can assert which mode it is running under with CoyoteBridge.IsEnabled.
Run the suite under systematic exploration
For the deepest mode, where Coyote also controls in-handler async and locks, rewrite the compiled test assembly and run it under the Coyote tester. Tests run on the JIT, so this never conflicts with your AOT production build.
# Rewrite the test assembly so Coyote controls all concurrencycoyote rewrite ./bin/Debug/net10.0/MyActors.Tests.dll
# Systematically explore a test entry point for N iterationscoyote test ./bin/Debug/net10.0/MyActors.Tests.dll \
--method CartActorTests.Concurrent_bids_never_lose_the_high_bid \
--iterations 10000
You can also drive Coyote in-process from a test with Microsoft.Coyote.SystematicTesting.TestingEngine if you prefer to keep everything inside dotnet test.
When to reach for Coyote
Start with the built-in runtime; it requires no rewriting and covers the actor model’s nondeterminism out of the box. Add Coyote when an actor’s handlers legitimately do complex in-process asynchrony you want explored, or when you want data-race detection across code the SDK does not own.
Integration testing with Testcontainers
The in-memory runtime proves your actor logic. Integration tests prove the real protocol: the SubscribeActorEvents streams, serialization against a real sidecar, reminders through the real scheduler, and placement. Use the Dapr.Testcontainers package to stand these up.
What unit tests prove, and what they do not
The in-memory runtime is a faithful model of the SDK’s own scheduler, time, and delivery behavior, so it proves your logic, your ordering assumptions, your fault handling, and your migrations. It is not the real runtime. It does not prove that your serialized payloads deserialize against a live daprd, that placement and reminders behave as configured, that a real stream reconnect re-advertises correctly, or that wall-clock timing holds under load. Keep the bulk of your coverage in the fast in-memory tests, and use a small number of integration tests to prove the parts only a real sidecar can. A green unit suite is necessary but not sufficient for the protocol edges.
An actor integration fixture is multi-container by necessity. Actors require the placement service, reminders require the scheduler service, and you need a state store in addition to the sidecar and the app under test.
publicsealedclassDaprActorFixture:IAsyncLifetime{// Inspect the Dapr.Testcontainers API in your solution to compose:// redis (state store) + placement + scheduler + daprd + the actor-hosting app,// on a shared network, with readiness gating.publicasyncValueTaskInitializeAsync(){/* start containers */}publicasyncValueTaskDisposeAsync(){/* stop containers */}}publicclassCartActorIntegrationTests(DaprActorFixturefixture):IClassFixture<DaprActorFixture>{ [Fact]publicasyncTaskReminder_fires_through_the_real_scheduler(){varcart=ActorProxy.Create<ICartActor>(ActorId.Create("u1"),"CartActor");awaitcart.AddItem(newCartItem("sku-1",1));// ... wait for the real scheduler to deliver the reminder, then assert}}
Reserve integration tests for what only a real sidecar can prove, such as stream round-trip, real serialization, reminder and placement behavior, and end-to-end subscription delivery. Keep the bulk of your coverage in the fast in-memory tests.
Coverage
Because the hard paths are reachable in-memory, high coverage is practical. Keep the bulk of coverage in fast unit tests against ActorTestRuntime, with integration tests on top for the protocol. Exclude generated files and the source-generator and analyzer assemblies from the coverage denominator; generators are covered by snapshot and run tests, and analyzers by analyzer tests.
Best practices
Default to the in-memory runtime, and add Coyote only for the remaining deep cases.
Drive timers and reminders with rt.Time.Advance(...); never use real delays in tests.
When a scheduled exploration fails, capture the reported seed and add a pinned-seed regression test.
Test failure paths explicitly with rt.Faults, not just the happy path.
For state-machine actors, assert Analyze<T>().AssertNoStructuralDefects() as a test so structural regressions fail the build.
Keep integration tests few and focused on real-protocol behavior, and keep unit tests many and fast.
A six-part, example-driven tour of what changed in the modernized Dapr Actors implementation, with the testing for each
This tutorial walks through six worked examples, one improvement at a time, and treats the test for each as a first-class part rather than an afterthought. The cleaner authoring is worth seeing, but for several of these the headline is that you can now write the test at all.
The runnable code lives in the solution under /examples/Actor.Next/, one folder per part, each with its actor code and its xUnit v3 tests. You can clone and run them, then come back here for the what and the why. Each part below links to its example folder. It’s recommended that you install your local Dapr instance using dapr init so you get the sample state store and PubSub components created and to make sure you’re on the latest v1.18 runtime version.
Package references
All projects within the Dapr .NET SDK repository are referenced using relative paths. Meta-packages like Dapr.Actors.Next are comprised of all their individual projects (e.g. Dapr.Actors.Next.Streams, Dapr.Actors.Next.Testing, etc.) and are combined only an artifact of the build pipeline. As such, the individual projects in the examples below refernce each of these individual projects within the repository. These packages are not intended to be published to NuGet and only for local SDK experimentation and development. When using this package in your own projects, whether host or test projects, it is intended that you install Dapr.Actors.Next from NuGet. When cloning this repository, they’ll build and run using these local references, but there are no corresponding packages for each in NuGet - only Dapr.Actors.Next.
Temporarily placed in `feature-actors-next` branch
The Dapr.Actors.Next package has been released as a preview and is subject to change. It has not yet been merged into the master branch of the Dapr .NET SDK repository, but if you’d like to clone the branch to contribute or experiment with the examples, you can find it here. This is expected to be released as stable alongside the v1.19 release of the Dapr runtime at this point it will be merged into master and easily accessible.
Tutorial content
The first three parts build on one shopping-cart scenario so the story is continuous; the last three stand on their own. Read top to bottom and the authoring gets a little more ambitious each time, while the testing is the consistent payoff: it needs less infrastructure and reaches further at every step.
Part 1: The cart, the modern baseline. The actor you already know, with the ceremony removed. The reminder test that used to need a sidecar now needs nothing.
The single idea underneath the whole set: the old SDK could run actors, and the new one lets you prove they are correct. The tests are where that stops being a slogan.
Prerequisites
The .NET 8, 9, 10, or 11 SDK (the examples target .NET 10).
The Dapr.Actors.Next package (or the solution’s project references) and, for the test projects, Dapr.Actors.Next.Testing.
If you’re building against this solution directly, you can use the referenced packages the examples use, but otherwise use the combined package on NuGet.
At least v1.18 of the Dapr runtime as it’s required for the Dapr.Actors.Next implementation. Every unit test in this tutorial runs with no sidecar, no state store, and no Docker (testing using the built-in test functionality), but in a real-world environment you’d be expected to supplement with your own integration and E2E testing against the Dapr runtime and components.
.NET framework support
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
If you are new to the SDK, skim the overview first; each part links to the relevant concept page for reference detail.
The actor you already know, with the ceremony removed, and the timer test that no longer needs a sidecar
The first example is the smallest real actor: a cart that adds items, returns a summary, and abandons itself after twenty minutes idle via a timer. It does nothing exotic, and that is the point. It is the side-by-side against Dapr.Actors that makes the modernization legible.
Code for this part: /examples/Actor.Next/01-Cart/.
What you build
[GenerateActorClient]publicinterfaceICartActor:IActor{TaskAddItem(CartItemitem,CancellationTokenct=default);Task<CartSummary>GetSummary(CancellationTokenct=default);TaskAbandonCart(CancellationTokenct=default);}publicsealedrecordCartItem(stringSku,intQuantity);publicsealedrecordCartSummary(intItemCount,decimalTotal,boolAbandoned);publicinterfaceIPricingClient{ValueTask<decimal>GetPriceAsync(stringsku,CancellationTokencancellationToken=default);}publicsealedclassCartState{publicDictionary<string,int>Items{get;set;}=[];publicDictionary<string,decimal>Prices{get;set;}=[];publicboolAbandoned{get;set;}}[DaprActor("Cart")]publicsealedclassCartActor(ActorActivationContextcontext,IPricingClientpricing,IActorTimerSchedulertimers):Actor,ICartActor{privatestaticreadonlyTimeSpanAbandonAfter=TimeSpan.FromMinutes(20);protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State;publicasyncTaskAddItem(CartItemitem,CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);cart.Value.Items[item.Sku]=cart.Value.Items.GetValueOrDefault(item.Sku)+item.Quantity;// mutate through .Valuecart.Value.Prices[item.Sku]=awaitpricing.GetPriceAsync(item.Sku,ct);// injected per activationcart.Value.Abandoned=false;// Re-arm the idle timer on every add; its callback is the AbandonCart method.awaittimers.RescheduleAsync("Cart",Id,"abandon-cart",AbandonAfter,nameof(AbandonCart),string.Empty,cancellationToken:ct);}publicasyncTask<CartSummary>GetSummary(CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);varitemCount=cart.Value.Items.Values.Sum();vartotal=cart.Value.Items.Sum(entry=>entry.Value*cart.Value.Prices.GetValueOrDefault(entry.Key));returnnewCartSummary(itemCount,total,cart.Value.Abandoned);}publicasyncTaskAbandonCart(CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newCartState(),ct);cart.Value.Abandoned=true;// saved once at end of turn}}
Startup is one line, with no endpoint mapping and no per-actor registration:
builder.Services.AddDaprActors();
Why this is the baseline
This carries the whole spine at once. The contract derives from IActor and carries [GenerateActorClient], which is what marks it for the generator; [DaprActor] on the implementation then produces the proxy and dispatcher with no reflection; the dependency is constructor-injected into a per-activation scope; state is read through the per-actor cache and saved once at end of turn; and actor callbacks arrive over a persistent stream to the runtime rather than through mapped actor-handler endpoints. Nullable annotations are doing real work in the signatures. None of this is new behavior for the actor model; it is the same actor you would write against Dapr.Actors with the registration boilerplate, the endpoint mapping, and the reflection-based proxy removed, which is also what makes Native AOT targeting possible.
[Fact]publicasyncTaskAdvancing_virtual_time_fires_the_abandon_timer(){awaitusingvarruntime=CreateRuntime();varcart=runtime.CreateActor<ICartActor>(ActorId.Create("idle-cart"),"Cart");varadd=cart.AddItem(newCartItem("sku-1",1));awaitruntime.RunToIdle();awaitadd;runtime.Time.Advance(TimeSpan.FromMinutes(20));// fires the abandon timer; no real waitawaitruntime.RunToIdle();varsummaryTask=cart.GetSummary();awaitruntime.RunToIdle();Assert.True((awaitsummaryTask).Abandoned);}privatestaticActorTestRuntimeCreateRuntime(){_=typeof(CartActor);returnnewActorTestRuntime(services=>{services.AddSingleton<IPricingClient,FakePricingClient>();services.AddDaprActors(_=>{});});}privatesealedclassFakePricingClient:IPricingClient{publicValueTask<decimal>GetPriceAsync(stringsku,CancellationTokencancellationToken=default)=>ValueTask.FromResult(sku=="sku-1"?12.50m:1.00m);}
Why the test is the headline
The Dapr.Actors version of this test is an integration test: it stands up a sidecar and a state store, registers the actor over HTTP, and then either sleeps twenty minutes or, far more commonly, gives up and never tests the timer at all. The timer path is exactly the kind of thing teams leave untested because the wall clock makes it impractical.
The new version is a sub-second unit test with no infrastructure. The fake IPricingClient is injected through the same dependency injection you use in production, and the clock is yours to advance, so the timer fires on demand. A path most teams never test is now trivial to test, and the test has nothing to stand up or tear down so it runs much faster and with lower resource consumption.
A breaking state change becomes a build error and a unit-testable migration, with no database
The second example continues the same cart across a breaking state change. CartStateV1 stored a flat list of SKUs; CartStateV2 groups them into line items with quantities, and CartStateV3 adds a cached total. You ship each new shape with one small upcaster, and old carts fold forward on read with no data backfill.
Code for this part: /examples/Actor.Next/02-Migration/.
That is the entire migration: one small upcaster per shape change, and the chain composes. The source generator discovers and registers the upcasters; on read the runtime discovers whatever version is stored, folds it up to the shape your code asks for, and re-persists at the current shape lazily on the next save. Nothing in the actor branches on a version.
Why this is a good example
Two things Dapr.Actors had no clean answer for show up here. First, serialization is a single pluggable IDaprSerializer path (System.Text.Json by default) rather than the remoting-versus-non-remoting DataContract split, so there is one way data is written regardless of how the actor is called. Second, and more important, the breaking change is caught at build time. The DAPR1410 analyzer reports a state-type change that would break deserialization of already-persisted data, with a code fix that scaffolds the upcaster or suggests making the change additive, and a missing hop in a longer chain is flagged too (DAPR1415).
Migration is opt-in by silence: if you never change a state shape, there is no version to bump and no upcaster to write. You author one only when you actually make a breaking change, and the compiler tells you exactly when that is. Additive changes (new defaultable members) need no upcaster at all, since the generator synthesizes the hop.
For the full model, including the graduation offramp and the integrity guarantees, see State migration.
The migration test is the proof that the thing you are most afraid of, old data not loading after a deploy, actually loads. You seed the old shape directly into the runtime’s store, read it under the current build, and assert the migrated result, all without a real state store and without any production data to be nervous about. The test above already folds the full V1 -> V2 -> V3 chain in a single read; add cases for an additive change or a graduated entry and the rest of the surface is covered too.
In the old SDK, proving a production data migration was correct meant a staging environment with representative data. Here it is a unit test that runs before any production data is touched. The build-time guard itself is verified as well: the DAPR1410 analyzer is tested with the analyzer testing harness, so the squiggle you rely on is covered.
Dynamic pub/sub in one attribute, and an event-driven flow proven without a broker
The third example continues the cart. An inventory service publishes inventory-restocked events, and a cart waiting on an out-of-stock item should wake and mark it available. The subscription is declared on the actor method, and the event names which cart gets it.
Code for this part: /examples/Actor.Next/03-PubSub/.
What you build
[DaprActor("RestockingCart")]publicsealedclassRestockingCartActor(ActorActivationContextcontext):Actor,IRestockingCartActor{protectedoverrideActorIdId=>context.ActorId;protectedoverrideIActorStateAccessorState=>context.State; [Subscribe("orders-pubsub", "inventory-restocked", RouteBy = nameof(RestockEvent.CartId))]publicasyncTaskOnRestock(RestockEventevt,CancellationTokenct=default){varcart=awaitState.GetOrCreateAsync("cart",()=>newRestockingCartState(),ct);// Delivery is at-least-once, so this must be safe to run more than once:// removing first makes a duplicate delivery a no-op after the first success.if(cart.Value.WaitingForStock.Remove(evt.Sku)){cart.Value.Available.Add(evt.Sku);}}}
The host wires these subscriptions from [Subscribe] when you register the streams host alongside actors:
builder.Services.AddDaprActors();builder.Services.AddDaprActorStreams();// Available in `Dapr.Actors.Next` NuGet package
Why the dynamism matters
There is one declarative subscription, but it fans out to whichever cart instance the event’s CartId names, across the whole cluster, with no per-instance wiring. The host owns the subscription; the routing key picks the actor id at delivery time; and placement routes the wake-up to wherever that cart lives, so an event received on one replica can drive a cart on another. The delivery edges come along for free: the acknowledgment is gated on the turn outcome, so a successful turn acks, a transient failure retries, and a poison message deadletters, and the CloudEvents traceparent is joined onto the wake-up invoke so the inbound event and the actor turn appear as one trace.
In Dapr.Actors there was no answer for this at all. You stood up a separate subscriber service, received the event there, looked up the right actor id by hand, called the proxy yourself, and owned retry and idempotency on your own. Here it is one attribute and the field that names the target.
The one caveat to state plainly: delivery is at-least-once, so the handler must be idempotent, which is why OnRestock is written to be safe to apply twice. That is the same contract that governs reminders and retried invokes, surfaced again here.
There is no fake broker to stand up: Runner drives the same forward-invoke and Ack/Retry/Drop path the streaming host uses, built over the runtime’s internal invocation client. AddUnavailableSku and IsAvailable are ordinary actor methods; the helpers just call them and drain the turn with RunToIdle. The stream types (ActorStreamSubscription, ActorStreamSubscriptionRunner, ActorStreamForwarder, ActorStreamRoutingKeyExtractor, DefaultActorStreamFailureClassifier, ActorStreamEvent, and the ActorStreamDeliveryAction result) live in Dapr.Actors.Next.Streams.
Why the tests matter
Pub/sub-driven behavior is exactly the kind of thing that, in the old SDK, you could only exercise with a real broker in an integration test, slow enough that most teams test the handler in isolation and never test that the wiring routes and retries correctly. The glue between an event arriving and the right actor reacting once is the part most likely to be wrong, and it was the part hardest to test.
Here both halves are plain unit tests. The first proves the dynamic routing is precise: one event wakes only the cart it names. The second proves the delivery edge teams almost never test: a failed turn retries the delivery instead of acking it, and the redelivery then acks once the write succeeds. The runtime stands in for the broker, so you feed an event through the subscription runner and inspect the delivery action it returns, with no Redis, no Kafka, and no Docker.
A state machine, and the previously untestable timer-versus-message race written as a deterministic unit test
The fourth example is the live auction: open and accepting bids, with a soft-close timer that each accepted bid resets; when it fires the auction transitions to sold and marks fulfillment as started. It looks like a workflow and is not, which is exactly what we’re seeking to illustrate. This is the example where the test is unambiguously the headline.
Code for this part: /examples/Actor.Next/04-Auction/.
An auction is a long-lived, addressable entity with explicit states, not a finite process, so it belongs in a state-machine actor rather than a workflow. A high rate of bids would grow a workflow’s replay history without bound, every bidder needs an instant synchronous read of the current high bid, and the soft-close behavior is a race. The transition to Sold is where it hands off: its entry action marks fulfillment started, which is the point where a real deployment kicks off a fulfillment workflow for the finite, multi-step process (charge the winner, notify losers, arrange shipping), so the entity stays in the actor and the bounded orchestration goes to a workflow. That boundary is the thing to take away; the two compose rather than compete.
For the authoring detail and the full when-to-use comparison, see State machine actors.
The tests
[Fact]publicasyncTaskLast_second_bid_wins_race_with_close_timer(){awaitusingvarruntime=CreateRuntime(newPriorityActorScheduler(7));varauction=runtime.CreateActor<IAuctionActor>(ActorId.Create("auction-1"),"Auction");awaitPlaceBid(runtime,auction,newBid(100,"alice"));runtime.Time.Advance(TimeSpan.FromSeconds(29));varlateBid=auction.PlaceBid(newBid(110,"bob"));awaitruntime.RunToIdle();Assert.Equal(BidResult.Accepted,awaitlateBid);runtime.Time.Advance(TimeSpan.FromSeconds(2));awaitruntime.RunToIdle();Assert.Equal(AuctionState.Open,awaitReadState(runtime,auction));Assert.Equal("bob",(awaitReadData(runtime,auction)).HighBidder);}[Fact]publicvoidState_machine_has_no_structural_defects(){ActorStateMachine.Analyze<AuctionActor>().AssertNoStructuralDefects();Assert.Contains(ActorStateMachine.Analyze<BadAuctionActor>().StructuralDefects,defect=>defect.Contains("unreachable",StringComparison.Ordinal));// For deeper exploration, run the same test body under the optional Coyote bridge when enabled.Assert.False(CoyoteBridge.IsEnabled);}privatestaticActorTestRuntimeCreateRuntime(ControlledActorScheduler?scheduler=null){_=typeof(AuctionActor);returnnewActorTestRuntime(services=>services.AddDaprActors(_=>{}),newActorTestRuntimeOptions{Scheduler=scheduler});}privatestaticasyncTask<BidResult>PlaceBid(ActorTestRuntimeruntime,IAuctionActorauction,Bidbid){varplaced=auction.PlaceBid(bid);awaitruntime.RunToIdle();returnawaitplaced;}privatestaticasyncTask<AuctionState>ReadState(ActorTestRuntimeruntime,IAuctionActorauction){varread=auction.GetState();awaitruntime.RunToIdle();returnawaitread;}privatestaticasyncTask<AuctionData>ReadData(ActorTestRuntimeruntime,IAuctionActorauction){varread=auction.GetData();awaitruntime.RunToIdle();returnawaitread;}
BadAuctionActor is a deliberately-broken variant in the example project (it leaves a state unreachable); the second assertion proves the analyzer catches it. The soft-close is scheduled inside the accepted-bid effect, so each accepted bid reschedules the soft-close timer, whose callback invokes Close and raises CloseAuction to move the auction to Sold.
Why the tests matter
The first test is a genuine race condition, the kind that ships, survives code review, and reproduces once a week in production. In the old SDK this is not merely a hard test to write; it is a test you cannot write reliably at all, because you cannot make a timer and a message race on demand against a real sidecar. Here the bid and the close-timer firing are two separate turns whose order is not fixed, and the scheduler explores that order rather than depending on timing, so the test passes or fails deterministically every run. The two turns never overlap; whichever runs first runs to completion before the other starts. If you want to go further, the same test runs under the Coyote bridge for exhaustive exploration.
The second test analyzes the machine’s structure directly: AuctionActor must have no defects, while the deliberately-broken BadAuctionActor surfaces an unreachable state. Because the machine is a transition table, the runtime can turn “did my refactor strand a state” from a production surprise into a build failure. This example alone justifies the rewrite.
For the test runtime and the structural analysis, see Testing.
State machines supplied as data at runtime, verified before they go live, and driven dynamically
The fifth example is the destination the first four were building toward: state machines that are not compiled into your app at all, but supplied as data at runtime, verified before they go live, and driven without a compile-time contract.
The scenario is a device-management platform. You manage many kinds of devices, a smart lock, a thermostat, a valve, and each device type has its own state machine: a lock moves from Locked to Unlocking to Unlocked to Locking and back, driven by commands and sensor events. New device types are onboarded through configuration, not a code deploy, and each physical device is a long-lived, addressable entity, exactly the kind of thing Part 4 argued belongs in a state-machine actor. The difference here is that the machine is data, so one compiled actor runs every device type.
Code for this part: /examples/Actor.Next/05-Interpreted/.
What you build
Three capabilities, each reusing machinery built for an earlier, compile-time purpose.
Runtime-defined behavior. Because a state machine’s configuration is a transition table (data, not code), a single compiled InterpretedStateMachineActor runs a machine supplied as data. A device type’s states, transitions, guards, and effects are a definition document; each physical device is an instance of the interpreter running its type’s definition. Guards and effects (actuate the motor, check the battery, publish a telemetry event) resolve by name from a capability registry of vetted, compiled actions rather than arbitrary code, so a new device type composes only from safe building blocks.
// A device-type definition, authored as data rather than compiled. The optional// includeUnlockingCompletion flag lets a test build a deliberately-stranded machine.publicstaticclassDeviceManagementDemo{publicstaticInterpretedMachineDefinitionSmartLockDefinition(boolincludeUnlockingCompletion=true,stringmotorEffect="ActuateMotor")=>new(){DocumentVersion=1,InitialState="Locked",States= [
new InterpretedStateDefinition { Name = "Locked" },
new InterpretedStateDefinition { Name = "Unlocking" },
new InterpretedStateDefinition { Name = "Unlocked" },
new InterpretedStateDefinition { Name = "Locking" },
],Transitions=Transitions(includeUnlockingCompletion,motorEffect),};publicstaticInterpretedMachineVerificationResultVerify(IInterpretedMachineVerifierverifier,InterpretedMachineDefinitiondefinition)=>verifier.Verify(definition);privatestaticIReadOnlyList<InterpretedTransitionDefinition>Transitions(boolincludeUnlockingCompletion,stringmotorEffect){vartransitions=newList<InterpretedTransitionDefinition>{new(){Source="Locked",Event="Unlock",Branches=[newInterpretedBranchDefinition{Guards=["CheckBattery"],Target="Unlocking",Effects=[motorEffect]}],},new(){Source="Unlocked",Event="Lock",Branches=[newInterpretedBranchDefinition{Otherwise=true,Target="Locking",Effects=[motorEffect]}],},new(){Source="Locking",Event="MotorStopped",Branches=[newInterpretedBranchDefinition{Otherwise=true,Target="Locked"}],},};if(includeUnlockingCompletion){transitions.Add(newInterpretedTransitionDefinition{Source="Unlocking",Event="MotorStopped",Branches=[newInterpretedBranchDefinition{Otherwise=true,Target="Unlocked"}],});}returntransitions;}}
Verification before rollout. Before a device type reaches real hardware, run its definition through the interpreted machine verifier. A machine with an unreachable state or a dead end is a device that can get stuck in a state it can never leave, a field failure you want caught at onboarding, not after firmware ships. The loop is author the definition, verify it deterministically, then deploy it.
Dynamic invocation. A single control plane drives every device regardless of type. Because device types are onboarded at runtime and their command sets are not known at compile time, the control plane uses IActorRegistry to discover what a device accepts and IDynamicActorClient to send a command, with no per-type compiled contract. This calling half is a general capability; see Dynamic invocation.
Why this was impossible before
Every earlier decision compounds here. The manifest built for state versioning becomes the description of what a device accepts; the declarative state machine built for the auction becomes the format a device type is authored in; the test runtime built for deterministic testing becomes the gate that keeps a broken device type off real hardware; and one stream per type is what lets a device type onboarded at runtime be hosted at all.
It’s important to be candid about the boundary: interpreted actors carry a dynamic state bag, so the typed migration story from Part 2 deliberately does not apply. Versioning a device type means versioning its definition document as data, not writing an IActorStateUpcaster.
The test
The gate is testable: a bad definition is rejected before it can be activated, and a good one passes.
[Fact]publicvoidVerification_rejects_device_type_that_can_strand_a_lock(){varverifier=newInterpretedMachineVerifier(newDeviceCapabilityRegistry());varstranded=DeviceManagementDemo.SmartLockDefinition(includeUnlockingCompletion:false);varresult=DeviceManagementDemo.Verify(verifier,stranded);Assert.False(result.IsValid);Assert.Contains(result.Defects,defect=>defect.Contains("State 'Unlocking' is a dead end",StringComparison.Ordinal));}[Fact]publicasyncTaskDefinition_with_unregistered_effect_is_rejected_before_rollout(){varregistry=newDeviceCapabilityRegistry();varverifier=newInterpretedMachineVerifier(registry);varstore=newInMemoryInterpretedMachineStore();vardeployer=newInterpretedMachineDeployer(verifier,store);vardefinition=DeviceManagementDemo.SmartLockDefinition(motorEffect:"UnknownMotor");Assert.False(registry.TryGetEffect("UnknownMotor",out_));varex=awaitAssert.ThrowsAsync<InvalidOperationException>(()=>deployer.DeployAsync("SmartLock",FrontDoor,definition).AsTask());Assert.Contains("Effect 'UnknownMotor'",ex.Message,StringComparison.Ordinal);Assert.Null(awaitstore.GetAsync("SmartLock",FrontDoor));}
FrontDoor is ActorId.Create("front-door"), and DeviceCapabilityRegistry is the example’s ICapabilityRegistry that registers the vetted CheckBattery guard and ActuateMotor effect by name; an effect that isn’t registered (like UnknownMotor) fails verification, so the deploy is rejected before anything is stored.
Why the test is the gate
Verification is not a nice-to-have; it is what makes running a definition you did not compile safe, and you can test the gate itself. The same kind of structural checking that validates a compiled state machine in Part 4, here run through the interpreted machine verifier, validates a device-type definition expressed as data, so you can refuse to roll out a device type that can strand a device before any hardware runs it. The capability registry test proves the other half of the safety story: a definition can reference only actions you have vetted and registered, so a typo or an unsupported effect fails at validation, not on a device in the field.
It should be noted that behavioral testing of a fully dynamic machine is shallower than for a typed one, since there is no compile-time contract to assert against. Structural verification plus the vetted capability registry carry the safety weight here, rather than rich behavioral assertions.
1.5.9.6 - Part 6: Composing interpreted actors with workflows
Runtime-defined approval machines that hand off to a settlement workflow, with retry and compensation, tested without a sidecar
The sixth example puts the interpreted runtime from Part 5 next to a Dapr Workflow and shows the two composing. An approval document is a long-lived, addressable entity, so it is an interpreted state-machine actor whose behavior is authored as data. Settling an approved document is a finite, failure-prone process, so it is a workflow. The entity starts the workflow, and the workflow drives the entity back; each does what it is good at.
The scenario is a document-routing platform. Each document type, an expense report or a contract, is a state machine supplied at runtime, and one compiled InterpretedStateMachineActor runs every one of them, so a new document type is configuration rather than a code deploy. When a document reaches Approved, a vetted effect starts a settlement workflow that notifies parties, charges under a retry policy, and compensates if the charge cannot be made good.
Code for this part: /examples/Actor.Next/06-Approvals/.
Two layers: one compiled runtime, many dynamic behaviors
This example is built from two layers that never mix, and keeping them apart is the whole point.
The compiled layer ships in the assembly and is registered once at startup: the single InterpretedStateMachineActor type, the ICapabilityRegistry of vetted guards and effects (WithinApprovalLimit, StartSettlement, and the rest), the InterpretedMachineVerifier, the InterpretedMachineDeployer, the definition store, and the SettlementWorkflow. None of it knows an expense report from a contract; it is generic machinery that never has to be re-registered when a new document type appears.
The dynamic layer is the InterpretedMachineDefinition itself (its states, transitions, branches, and the guard and effect names it composes from) authored as data and deployed per document type at onboarding time. The ExpenseReport() and Contract() builders look like logic, but they are data factories: their output is the dynamic part, and in a real system that same definition could arrive as JSON from a database or an HTTP body with no recompile. Two genuinely different machines — one with a LegalReview stage, one without — run on the one compiled actor precisely because the difference lives in data, not in code.
The two layers meet by name, never by reference. Exactly as invoking an actor requires its name, a definition never holds a compiled guard or effect; it holds a string like "StartSettlement" that binds to the compiled IActorEffect at runtime through the capability registry. Verification is the single checkpoint that guarantees the binding will succeed: InterpretedMachineVerifier runs inside InterpretedMachineDeployer.DeployAsync, right before a definition is stored, and rejects any definition whose shape is unsound (a dead-end or unreachable state) or that names a guard or effect the registry does not vet. A broken document type is caught at onboarding, not on a live document.
Because behavior is data and the runtime is compiled, adding a new document type is configuration rather than a code deploy. The sections that follow are just this split in motion: a document type authored as data, a compiled effect that is the seam to the workflow, and a compiled workflow that drives the data-defined document back — none of the compiled pieces naming a single document type.
What you build
A document type, authored as data
The expense-report machine is an InterpretedMachineDefinition document. Its Approved state carries an entry effect, StartSettlement, that is the seam to the workflow. The optional flag builds a deliberately-stranded machine for a test, and the effect name is a parameter so a test can reference an unregistered effect.
publicstaticInterpretedMachineDefinitionExpenseReport(boolincludeSettlementCompletion=true,stringsettlementEffect=StartSettlementEffect)=>new(){DocumentVersion=1,InitialState="Draft",InitialData=InitialData("ExpenseReport"),States= [
new InterpretedStateDefinition { Name = "Draft" },
new InterpretedStateDefinition { Name = "Submitted" },
new InterpretedStateDefinition { Name = "InReview" },
new InterpretedStateDefinition { Name = "Escalated" },
new InterpretedStateDefinition { Name = "Approved", EntryEffects = [settlementEffect]},newInterpretedStateDefinition{Name="Rejected",Terminal=true},newInterpretedStateDefinition{Name="Archived",Terminal=true},newInterpretedStateDefinition{Name="SettlementFailed",Terminal=true},],Transitions=[/* Submit, BeginReview, and the shared review/approve/settle tail */],};
The InReview transition uses a named guard: amounts at or below the auto-approval limit go straight to Approved, everything else escalates to a manager. The contract type reuses the same tail but inserts a LegalReview stage, so the two document types are genuinely different machines running on the same compiled actor.
new(){Source="InReview",Event="Approve",Branches= [
new InterpretedBranchDefinition { Guards = ["WithinApprovalLimit"],Target="Approved",Effects=["RecordDecision"]},newInterpretedBranchDefinition{Otherwise=true,Target="Escalated",Effects=["NotifyManager"]},],}
The composition seam: actor to workflow
StartSettlement is a compiled IActorEffect in the capability registry, constructed with an injected IDaprWorkflowClient. On entry into Approved it schedules the workflow with a deterministic instance id derived from the actor type and document id. A method invocation is an event, and like any actor invocation it is at-least-once, so a re-run of the approving turn re-schedules the same instance rather than starting a second workflow. That deterministic id is the re-run-safety rule from State machine actors applied to a real external side effect.
The settlement workflow: retry, compensate, and drive the entity back
The workflow fans out notifications, charges under a retry policy, and if the charge exhausts its retries it compensates and drives the document to SettlementFailed; on success it drives it to Archived. Driving the document back uses IDynamicActorClient, the workflow-to-actor half of the composition, with no compiled document contract.
publicoverrideasyncTask<SettlementResult>RunAsync(WorkflowContextcontext,SettlementInputinput){// 1. Fan out: notify every party in parallel.awaitTask.WhenAll(input.Parties.Select(party=>context.CallActivityAsync(nameof(NotifyPartiesActivity),newPartyNotification(input.DocumentId,party))));// 2. Retry: charge under a backoff policy.try{awaitcontext.CallActivityAsync(nameof(ChargeOrProvisionActivity),newChargeRequest(input.DocumentId,input.Amount,input.SimulateChargeFailure),ChargeRetry);}catch(WorkflowTaskFailedException){// 3. Compensate, then report the failure back to the document entity.awaitcontext.CallActivityAsync(nameof(ReleaseReservationActivity),newReleaseRequest(input.DocumentId,input.Amount));awaitcontext.CallActivityAsync(nameof(SignalDocumentActivity),newDocumentSignal(input.DocumentId,"SettlementFailed"));returnnewSettlementResult(Settled:false,FinalState:"SettlementFailed");}// 4. Success: drive the document to its archived outcome.awaitcontext.CallActivityAsync(nameof(SignalDocumentActivity),newDocumentSignal(input.DocumentId,"SettlementCompleted"));returnnewSettlementResult(Settled:true,FinalState:"Archived");}
SignalDocumentActivity calls back into the interpreted actor over the dynamic path, client.InvokeAsync("ApprovalDocument", documentId, "Raise", ...), raising SettlementCompleted or SettlementFailed. The document’s turn runs after the approving turn has already committed, so this is a well-ordered follow-up rather than a re-entrant call.
The tests
The composition is testable with no sidecar and no workflow engine, from both sides of the seam.
The actor starts the workflow, re-run safely
Driving a document to Approved through the interpreted machine (with a fake workflow client) proves the entry effect schedules the workflow, and running the entry effect twice proves it does not start a second one, because the instance id is deterministic.
[Fact]publicasyncTaskApproving_schedules_settlement_with_a_deterministic_id_and_does_not_double_schedule(){varscheduled=newList<string>();varworkflowClient=newMock<IDaprWorkflowClient>();workflowClient.Setup(client=>client.ScheduleNewWorkflowAsync(It.IsAny<string>(),It.IsAny<string?>(),It.IsAny<object?>())).Returns((string_,string?instanceId,object?_)=>{scheduled.Add(instanceId!);returnTask.FromResult(instanceId!);});vareffect=newStartSettlementEffect(workflowClient.Object,NullLogger.Instance);varcontext=ApprovedContext("exp-9",amount:250m,parties:["finance","alice"]);awaiteffect.ExecuteAsync(context);awaiteffect.ExecuteAsync(context);// simulate an at-least-once re-run of the approving turnvarexpected=StartSettlementEffect.InstanceIdFor("ApprovalDocument","exp-9");Assert.All(scheduled,id=>Assert.Equal(expected,id));Assert.Single(scheduled.Distinct());// Dapr dedups by instance id, so a single workflow runs}
The workflow retries and compensates
The workflow runs directly against a mocked WorkflowContext, the same technique the testing tools use for actors. One test makes the charge succeed and asserts the document is archived; the other makes the charge exhaust its retries (a WorkflowTaskFailedException) and asserts compensation runs and the document is driven to SettlementFailed.
[Fact]publicasyncTaskCharge_that_exhausts_its_retries_compensates_and_fails_the_document(){varinput=newSettlementInput("exp-2","ExpenseReport","carol",8500m,["finance","carol","vendor"],SimulateChargeFailure:true);varcontext=MockContext();context.Setup(ctx=>ctx.CallActivityAsync(nameof(ChargeOrProvisionActivity),It.IsAny<ChargeRequest>(),It.IsAny<WorkflowTaskOptions>())).Returns(Task.FromException(newWorkflowTaskFailedException("charge failed",newWorkflowTaskFailureDetails("Declined","Charge was declined"))));varresult=awaitnewSettlementWorkflow().RunAsync(context.Object,input);Assert.False(result.Settled);Assert.Equal("SettlementFailed",result.FinalState);context.Verify(ctx=>ctx.CallActivityAsync(nameof(ReleaseReservationActivity),It.IsAny<ReleaseRequest>(),It.IsAny<WorkflowTaskOptions>()),Times.Once());context.Verify(ctx=>ctx.CallActivityAsync(nameof(SignalDocumentActivity),It.Is<DocumentSignal>(s=>s.EventName=="SettlementFailed"),It.IsAny<WorkflowTaskOptions>()),Times.Once());}
A verification test rounds it out: a stranded definition (an Approved state with no way out) and a definition referencing an unregistered effect are both rejected before rollout, exactly as in Part 5, so a broken document type cannot be onboarded.
Why this composition is the point
A state machine actor and a workflow are easy to confuse, and this example demonstrates a more concrete boundary. The document is reactive, addressable, and long-lived: it answers where a document is right now and reacts to submit, review, and decision events over an indefinite life, which is what a state-machine actor is good at. Settlement is a bounded sequence with retries, a compensating undo, and a definite end, which is what a workflow is good at and what would bloat an actor turn. Named states make the seam obvious, because the transition into Approved is the natural place to start the workflow that state implies, and the workflow’s terminal outcome is the natural event to raise back.
Authoring and testing arc
Each tutorial grew a little more ambitious than the last, but the testing is the throughline: Minimal testing was necessary in part 1, then the testing proved a state migration without a database. Then we validated an event flow without a PubSub broker, made a race condition repeatable, and finally saw the state machine verifier implemented as a deployment gate. The takeaway: The old SDK could run actors; the new one lets you prove they are correct, including behavior that does not exist until runtime.
Dapr.AI provides a dedicated client for interacting with Dapr’s AI workloads from a .NET application. Today, Dapr provides the Conversational API to engage with large language models, and the DaprConversationClient is the entry point for sending prompts, configuring response formats, managing prompt cache retention, and reading token usage statistics.
For developers already working with the Microsoft.Extensions.AI ecosystem, the Dapr.AI.Microsoft.Extensions package implements IChatClient on top of the Dapr Conversation building block, so you can use Dapr as a backend for any IChatClient-compatible code, including tool and function calling.
Runtime requirements
The Dapr Conversation building block requires Dapr runtime v1.16.0 or later. Response format, prompt cache retention,
and token usage statistics require Dapr runtime v1.17.0 or later.
The Dapr AI client package allows you to interact with the AI capabilities provided by the Dapr sidecar.
Note
The Dapr Conversation building block requires Dapr runtime v1.16.0 or later. Response format, prompt cache retention,
and token usage statistics require Dapr runtime v1.17.0 or later.
Lifetime management
A DaprConversationClient is a version of the Dapr client that is dedicated to interacting with the Dapr Conversation
API. It can be registered alongside a DaprClient and other Dapr clients without issue.
It maintains access to networking resources in the form of TCP sockets used to communicate with the Dapr sidecar.
For best performance, create a single long-lived instance of DaprConversationClient and provide access to that shared
instance throughout your application. DaprConversationClient instances are thread-safe and intended to be shared.
This can be aided by utilizing the dependency injection functionality. The registration method supports registration
as a singleton, a scoped instance or as transient (meaning it’s recreated every time it’s injected), but also enables
registration to utilize values from an IConfiguration or other injected services in a way that’s impractical when
creating the client from scratch in each of your classes.
Avoid creating a DaprConversationClient for each operation.
Configuring DaprConversationClient via DaprConversationClientBuilder
A DaprConversationClient can be configured by invoking methods on the DaprConversationClientBuilder class before
calling .Build() to create the client itself. The settings for each DaprConversationClient are separate
and cannot be changed after calling .Build().
vardaprConversationClient=newDaprConversationClientBuilder().UseDaprApiToken("abc123")// Specify the API token used to authenticate to other Dapr sidecars.Build();
The DaprConversationClientBuilder contains settings for:
The HTTP endpoint of the Dapr sidecar
The gRPC endpoint of the Dapr sidecar
The JsonSerializerOptions object used to configure JSON serialization
The GrpcChannelOptions object used to configure gRPC
The API token used to authenticate requests to the sidecar
The factory method used to create the HttpClient instance used by the SDK
The timeout used for the HttpClient instance when making requests to the sidecar
The SDK will read the following environment variables to configure the default values:
DAPR_HTTP_ENDPOINT: used to find the HTTP endpoint of the Dapr sidecar, example: https://dapr-api.mycompany.com
DAPR_GRPC_ENDPOINT: used to find the gRPC endpoint of the Dapr sidecar, example: https://dapr-grpc-api.mycompany.com
DAPR_HTTP_PORT: if DAPR_HTTP_ENDPOINT is not set, this is used to find the HTTP local endpoint of the Dapr sidecar
DAPR_GRPC_PORT: if DAPR_GRPC_ENDPOINT is not set, this is used to find the gRPC local endpoint of the Dapr sidecar
DAPR_API_TOKEN: used to set the API token
Configuring gRPC channel options
Dapr’s use of CancellationToken for cancellation relies on the configuration of the gRPC channel options. If you need
to configure these options yourself, make sure to enable the ThrowOperationCanceledOnCancellation setting.
The APIs on DaprConversationClient perform asynchronous operations and accept an optional CancellationToken parameter. This
follows a standard .NET practice for cancellable operations. Note that when cancellation occurs, there is no guarantee that
the remote endpoint stops processing the request, only that the client has stopped waiting for completion.
When an operation is canceled, it can throw an OperationCanceledException.
Configuring DaprConversationClient via dependency injection
Using the built-in extension methods for registering the DaprConversationClient in a dependency injection container can
provide the benefit of registering the long-lived service a single time, centralize complex configuration and improve
performance by ensuring similarly long-lived resources are re-purposed when possible (e.g. HttpClient instances).
There are three overloads available to give the developer the greatest flexibility in configuring the client for their
scenario. Each of these will register the IHttpClientFactory on your behalf if not already registered, and configure
the DaprConversationClientBuilder to use it when creating the HttpClient instance in order to re-use the same instance as
much as possible and avoid socket exhaustion and other issues.
In the first approach, there’s no configuration done by the developer and the DaprConversationClient is configured with the
default settings.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprConversationClient();//Registers the `DaprConversationClient` to be injected as neededvarapp=builder.Build();
Sometimes the developer will need to configure the created client using the various configuration options detailed
above. This is done through an overload that passes in the DaprConversationClientBuilder and exposes methods for configuring
the necessary options.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprConversationClient((_,daprConversationClientBuilder)=>{//Set the API tokendaprConversationClientBuilder.UseDaprApiToken("abc123");//Specify a non-standard HTTP endpointdaprConversationClientBuilder.UseHttpEndpoint("http://dapr.my-company.com");});varapp=builder.Build();
Finally, it’s possible that the developer may need to retrieve information from another service in order to populate
these configuration values. That value may be provided from a DaprClient instance, a vendor-specific SDK or some
local service, but as long as it’s also registered in DI, it can be injected into this configuration operation via the
last overload:
varbuilder=WebApplication.CreateBuilder(args);//Register a fictional service that retrieves secrets from somewherebuilder.Services.AddSingleton<SecretService>();builder.Services.AddDaprConversationClient((serviceProvider,daprConversationClientBuilder)=>{//Retrieve an instance of the `SecretService` from the service providervarsecretService=serviceProvider.GetRequiredService<SecretService>();vardaprApiToken=secretService.GetSecret("DaprApiToken").Value;//Configure the `DaprConversationClientBuilder`daprConversationClientBuilder.UseDaprApiToken(daprApiToken);});varapp=builder.Build();
Sending a conversation request
Use ConversationInput and ConversationOptions to send prompts to your conversation component:
usingDapr.AI.Conversation;usingDapr.AI.Conversation.ConversationRoles;varinputs=new[]{newConversationInput(newIConversationMessage[]{newSystemMessage{Content=[newMessageContent("You are a helpful assistant.")]},newUserMessage{Content=[newMessageContent("Explain Dapr service invocation briefly.")]}})};varoptions=newConversationOptions("my-conversation-component"){Temperature=0.2};varresponse=awaitdaprConversationClient.ConverseAsync(inputs,options);foreach(varoutputinresponse.Outputs){foreach(varchoiceinoutput.Choices){Console.WriteLine($"{choice.Index}: {choice.Message.Content} ({choice.FinishReason})");}}
Each ConversationInput contains a list of role-specific messages. The SDK supports SystemMessage,
DeveloperMessage, UserMessage, AssistantMessage, and ToolMessage. Content consists of text
MessageContent entries; this API does not expose image/audio message parts.
Each response output contains Choices, optional Model, and optional Usage. Each choice has an
Index, nullable FinishReason, and a Message with text and a list of tool calls. Do not assume the
response always contains a single text choice.
Request options and conversation context
Option
Behavior
ConversationComponentId
Required component name supplied to the ConversationOptions constructor.
ContextId
Optional existing conversation context. A returned context is available as ConversationResponse.ConversationId; retention depends on the runtime/component.
Requests scrubbing of response data. ConversationInput.ScrubPII separately requests scrubbing of input data.
Metadata
Component-specific string key/value metadata.
Parameters
Custom parameters represented as Google.Protobuf.WellKnownTypes.Any values.
Tools, ToolChoice
Per-request tool declarations and selection policy; see tool calling.
ResponseFormat
Optional protobuf Struct describing the requested response schema.
PromptCacheRetention
Optional cache-retention duration where supported.
The client sends these options to the runtime; provider support varies. A context ID is not a client-side
message history store. Keep/send any history your provider requires. ConverseAsync returns a complete
response; this client has no token-streaming API in this release.
Response format (JSON schema)
You can provide a JSON schema to coerce responses into a specific format using ConversationOptions.ResponseFormat.
This feature requires Dapr runtime v1.17.0 or later.
If your conversation component supports prompt caching, you can request a cache retention window using
ConversationOptions.PromptCacheRetention. This feature requires Dapr runtime v1.17.0 or later.
The response includes optional token usage statistics when supported by the component and runtime. Usage data is
available on ConversationResponseResult.Usage and includes both totals and detailed breakdowns:
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
To get started with the Dapr AI .NET SDK client, install the Dapr.AI package from NuGet:
dotnet add package Dapr.AI
These guides target SDK 1.19.0 or later. Configure a conversation component and credentials for its
model provider. Import Dapr.AI.Conversation and Dapr.AI.Conversation.Extensions.
The API is experimental (DAPR_CONVERSATION).
A DaprConversationClient maintains access to networking resources in the form of TCP sockets used to communicate with the Dapr sidecar.
Dependency Injection
The AddDaprConversationClient() method registers the client with dependency injection and is the recommended approach
for using this package. This method accepts an optional options delegate for configuring the DaprConversationClient and a
ServiceLifetime argument, allowing you to specify a different lifetime for the registered services instead of the default Singleton
value.
The following example assumes all default values are acceptable and is sufficient to register the DaprConversationClient:
services.AddDaprConversationClient();
The optional configuration delegate is used to configure the DaprConversationClient by specifying options on the
DaprConversationClientBuilder as in the following example:
services.AddSingleton<DefaultOptionsProvider>();services.AddDaprConversationClient((serviceProvider,clientBuilder)=>{//Inject a service to source a value fromvaroptionsProvider=serviceProvider.GetRequiredService<DefaultOptionsProvider>();varstandardTimeout=optionsProvider.GetStandardTimeout();//Configure the value on the client builderclientBuilder.UseTimeout(standardTimeout);});
Manual Instantiation
Rather than using dependency injection, a DaprConversationClient can also be built using the static client builder.
For best performance, create a single long-lived instance of DaprConversationClient and provide access to that shared instance throughout
your application. DaprConversationClient instances are thread-safe and intended to be shared.
Avoid creating a DaprConversationClient per-operation.
A DaprConversationClient can be configured by invoking methods on the DaprConversationClientBuilder class before calling .Build()
to create the client. The settings for each DaprConversationClient are separate and cannot be changed after calling .Build().
1.6.3 - How to: Handle conversation tool calls in .NET
Declare conversation tools, inspect model requests, and return tool results to the model
The conversation client in SDK 1.19.0 or later can declare function tools and return model-requested
tool calls. Declaring a tool does not execute it. Your application validates the request, invokes an allowed
operation, and sends the result back.
Declare a function
usingDapr.AI.Conversation;usingDapr.AI.Conversation.ConversationRoles;usingDapr.AI.Conversation.Tools;varmessages=newList<IConversationMessage>{newUserMessage{Content=[newMessageContent("What time is it in UTC?")]}};varoptions=newConversationOptions("conversation"){Tools= [
new ToolFunction("get_utc_time")
{
Description = "Returns the current UTC time.",
Parameters = new Dictionary<string, object?>
{
["type"]="object", ["properties"]=newDictionary<string,object?>()}}],ToolChoice=ToolChoice.Auto};varresponse=awaitconversationClient.ConverseAsync( [new ConversationInput(messages)],options,cancellationToken);
ToolFunction.Parameters describes a JSON schema, not a dictionary of argument values to execute.
ToolChoice.None, Auto, and Required select a policy, or new ToolChoice("get_utc_time") requests a
particular function by its case-sensitive name. Runtime/provider support for these policies can vary.
Return tool results
Select a response choice according to your application policy. Preserve its assistant tool calls in the next
request, and correlate each result with the returned tool-call ID:
if(response.Outputs.Count==0||response.Outputs[0].Choices.Count==0){thrownewInvalidOperationException("The model returned no conversation choices.");}varchoice=response.Outputs[0].Choices[0];if(choice.Message.ToolCalls.Count==0){Console.WriteLine(choice.Message.Content);return;}messages.Add(newAssistantMessage{Content=[newMessageContent(choice.Message.Content)],ToolCalls=choice.Message.ToolCalls});foreach(vartoolCallinchoice.Message.ToolCalls){if(toolCallisnotCalledToolFunctioncall||call.Name!="get_utc_time"){thrownewInvalidOperationException("The model requested an unsupported tool.");}messages.Add(newToolMessage{Name=call.Name,Id=call.Id,Content=[newMessageContent(DateTimeOffset.UtcNow.ToString("O"))]});}varfollowUp=awaitconversationClient.ConverseAsync( [new ConversationInput(messages)],optionswith{ContextId=response.ConversationId,ToolChoice=ToolChoice.None},cancellationToken);
For tools with arguments, CalledToolFunction.JsonArguments contains the model’s JSON. Parse it into a
known schema and validate values and authorization before executing anything. Never dispatch arbitrary
method names or commands directly from model output. Put a limit on tool-call rounds and make side-effecting
tools idempotent. The example disables further tool calls in the follow-up request.
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
The DaprChatClient is a Dapr-based implementation of the IChatClient interface provided in the
Microsoft.Extensions.AI.Abstractions package using Dapr’s conversation building block. It allows
developers to build against the types provided by Microsoft’s abstraction while providing the greatest conformity to the
Dapr conversation building block available. As both approaches adopt OpenAI’s API approach, these are expected to increasingly
converge over time.
Dapr Conversation Building Block
Do note that Dapr’s conversation building block is still in an alpha state, meaning that the shape of the API
is likely to change future releases. It’s the intent of this SDK package to provide an API that’s aligned with
Microsoft’s AI extensions that also maps to and conforms with the Dapr API, but the names of types and properties
may change from one release to the next, so please be aware of this possibility when using this SDK.
About Microsoft.Extensions.AI
The Dapr.AI.Microsoft.Extensions package implements the Microsoft.Extensions.AI abstractions, providing a unified API for
AI services in .NET applications. Microsoft.Extensions.AI is designed to offer a consistent programming model across
different AI providers and scenarios. For detailed information about Microsoft.Extensions.AI, refer to the
official documentation.
Limited Support
Note that Microsoft’s AI extension provide many more properties and methods than Dapr’s conversation building block currently
supports. This package will only map those properties that have Dapr support and will ignore the others, so just because
it’s available in the Microsoft.Extensions.AI package doesn’t mean it’s supported by Dapr. Rely on this documentation
and the exposed XML documentation in the package to understand what is and isn’t supported.
Service Registration
The DaprChatClient can be registered with the dependency injection container using several extension methods. First,
import Dapr.AI.Conversation.Extensions, Dapr.AI.Microsoft.Extensions, and Microsoft.Extensions.AI.
Register the DaprConversationClient that’s part of the Dapr.AI package from NuGet:
services.AddDaprConversationClient();
Then register the DaprChatClient with your conversation component name:
Pass configure: null explicitly in 1.19.0 to disambiguate overloads with optional parameters.
Configuration Options
You can confiugre the DaprChatClient using the DaprChatClientOptions though the current implementation only
provides configuration for the component name itself. This is expected to change in future releases.
services.AddDaprChatClient("my-conversation-component",options=>{// Configure additional options here });
You can also configure the service lifetime (this defaults to ServiceLifetime.Scoped):
Resolve them with [FromKeyedServices("support")] IChatClient or
GetRequiredKeyedService<IChatClient>("support"). The component-name-only overload also registers a keyed
client using the component name as its key.
Usage
Once registered, you can inject and use IChatClient in your services:
publicclassChatService(IChatClientchatClient){publicasyncTask<IReadOnlyList<string>>GetResponseAsync(stringmessage){varresponse=awaitchatClient.GetResponseAsync([newChatMessage(ChatRole.User,"Please write me a poem in iambic pentameter about the joys of using Dapr to develop distributed applications with .NET")]);returnresponse.Messages.Select(msg=>msg.Text).ToList();}}
Streaming Conversations
The DaprChatClient does not support streaming responses in SDK 1.19.0.
GetStreamingResponseAsync throws NotImplementedException.
Tool Integration
The client maps tool declarations to the model and returns requested calls as FunctionCallContent.
Calling GetResponseAsync does not automatically execute a function. An application-owned tool loop or
function-invocation middleware must execute allowed functions and return results.
stringGetCurrentWeather()=>Random.Shared.NextDouble()>0.5?"It's sunny today!":"It's raining today!";vartoolChatOptions=newChatOptions{Tools=[AIFunctionFactory.Create(GetCurrentWeather,"weather")]};vartoolResponse=awaitchatClient.GetResponseAsync("What's the weather like today?",toolChatOptions);foreach(vartoolRespintoolResponse.Messages){Console.WriteLine(toolResp);}
Error Handling
The DaprChatClient integrates with Dapr’s error handling and will throw appropriate exceptions when issues occur.
Configuration and Metadata
The underlying Dapr conversation component can be configured with metadata and parameters through the Dapr conversation
building block configuration. The DaprChatClient will respect these settings when making calls to the conversation component.
Mapping in SDK 1.19.0
The adapter implements a subset of IChatClient, not the complete ConversationOptions surface:
Microsoft.Extensions.AI surface
Dapr mapping
User, assistant, system, and tool roles
Text-only conversation messages. Other roles throw ArgumentOutOfRangeException; non-text parts and structured tool-result/call history are not preserved by the input mapping.
ChatOptions.Temperature
ConversationOptions.Temperature
ChatOptions.ConversationId
ConversationOptions.ContextId
ChatOptions.ToolMode
None, auto, required, or a named required function
ChatOptions.Tools
Tool name, description, and AdditionalProperties mapped to function parameters; validate the schema actually sent for your tool.
ChatOptions.AdditionalProperties
Stringified component metadata, not protobuf Parameters.
Response
Conversation ID, finish reason, text, returned function calls, and each raw choice in RawRepresentation. Token usage and model are not mapped to ChatResponse in this release.
Options such as response format, prompt cache retention, and PII scrubbing are not mapped by this adapter.
Use DaprConversationClient directly when you need those capabilities or full control over the
tool-call conversation history.
Best Practices
Service Lifetime: Use ServiceLifetime.Scoped or ServiceLifetime.Singleton for the DaprChatClient registration to avoid creating multiple instances unnecessarily.
Error Handling: Always wrap calls in appropriate try-catch blocks to handle both Dapr-specific and general exceptions.
Resource Management: DaprChatClient.Dispose is a no-op in this release. DI manages the separately
registered DaprConversationClient; manually constructed applications must keep that client alive and dispose it themselves.
Configuration: Configure your Dapr conversation component properly to ensure optimal performance and reliability.
Dapr.Jobs provides a dedicated client for interacting with the Dapr Job APIs from a .NET application. With DaprJobsClient you can schedule future operations to run according to a predefined schedule with an optional payload. Three scheduling modes are supported: one-time jobs that fire at a specific point in time, interval-based jobs that recur on a fixed TimeSpan, and Cron-based jobs that use a Cron expression for calendar-aware scheduling. The SDK also provides minimal-API endpoint mapping so your application receives trigger invocations when a job fires.
The client is registered with dependency injection via AddDaprJobsClient() and can be configured from IConfiguration, environment variables, or a DaprJobsClientBuilder for advanced scenarios.
Core concepts
How to: Author and manage Dapr Jobs in the .NET SDK: client registration with dependency injection, IConfiguration, and manual instantiation; mapping job trigger endpoints in minimal APIs; scheduling one-time, interval-based, and Cron-based jobs; retrieving and deleting jobs.
DaprJobsClient usage: lifetime management, builder configuration, environment variables, gRPC channel options, cancellation, the three dependency injection overloads, payload serialization with JSON helper extensions, and error handling.
1.7.1 - How to: Author and manage Dapr Jobs in the .NET SDK
Schedule jobs, receive HTTP or gRPC callbacks, and manage job registrations in .NET
Use Dapr.Jobs version 1.19.0 or later with a running Dapr sidecar and Scheduler. The complete
management surface described here requires a runtime that supports the corresponding operations; use
Dapr 1.19 for the 1.19 features. All client operations use version-aware stable/alpha API fallback, but that
does not make newer management operations available on an older runtime.
dotnet add package Dapr.Jobs
Jobs are scoped to the scheduling application’s Dapr app ID. The client does not accept a different target
app ID when scheduling a trigger. See the
Jobs sample.
Register the client and callback handler
Register the client before building the host, and map one handler for dynamically named jobs:
HandleJobAsync represents your application logic. The callback receives the job name and original payload
bytes; additional services can be resolved from request DI. Its cancellation token includes the configured
handler timeout. Handlers must observe that token themselves; a timeout does not forcibly stop arbitrary code.
Return a Task for asynchronous work so the callback waits for it before acknowledging the trigger.
For HTTP callbacks, the mapper registers POST /job/{jobName}. Start the application with a matching app port:
dapr run --app-id jobsapp --app-port 5000 -- dotnet run --urls http://localhost:5000
gRPC callbacks
AddDaprJobsClient and MapDaprScheduledJobHandler also register the gRPC callback path. Choose it with
--app-protocol grpc. For plaintext gRPC, configure a dedicated HTTP/2 listener before builder.Build():
An HTTP/1-only listener, or plaintext Http1AndHttp2 without protocol negotiation, cannot serve this gRPC
callback. Use separate listeners if the same app must also accept HTTP/1 traffic.
Register the job
Resolve DaprJobsClient and use ScheduleJobAsync for every schedule type:
The builder also supports WithTimeZone(string) and WithTimeZone(TimeZoneInfo). DaprJobSchedule.TimeZone exposes an embedded CRON_TZ
identifier. Use valid IANA time-zone IDs and account for daylight-saving changes when choosing calendar schedules.
JSON and string payload helpers
ScheduleJobWithPayloadAsync from Dapr.Jobs.Extensions accepts the same schedule:
The object overload JSON-serializes with web defaults unless you pass jsonSerializerOptions. The string
overload encodes UTF-8 text without JSON quoting. Deserialize callback bytes with the matching convention.
There are no separate ScheduleCronJobAsync or ScheduleOneTimeJobWithPayloadAsync helpers in this release.
JobFailurePolicyConstantOptions retries at the specified interval; an unset MaxRetries allows indefinite
retries. JobFailurePolicyDropOptions drops a failed trigger. An omitted policy leaves runtime defaults in
effect. This policy is separate from the job’s recurring schedule and repeat count. Make callback side effects
idempotent because triggers can be delivered more than once.
DaprJobDetails exposes Name, Schedule, DueTime, Ttl, RepeatCount, Payload, FailurePolicy, and Overwrite.
Name can be null for manually constructed or older-runtime results. Inspect
details.Schedule.ExpressionValue and schedule classification properties such as IsCronExpression and
IsPointInTimeExpression. The response does not expose top-level Interval or CronExpression properties.
The result is an IReadOnlyList<DaprJobDetails> scoped to the current app ID. An empty list normally means
there are no jobs; also consider the release-specific cancellation behavior described below.
The prefix match is case-sensitive. A null, empty, or whitespace prefix deletes all jobs for this app ID.
Validate a user-supplied prefix before calling this operation.
This explicitly requests deletion of every job associated with the current app ID, not every job in the cluster.
Errors and cancellation
Runtime failures are wrapped in DaprException; inspect InnerException. Invalid arguments can throw standard
argument exceptions. In 1.19.0, several Jobs methods catch caller cancellation instead of throwing
OperationCanceledException: writes/deletes can return without confirmation and listing can return empty.
GetJobAsync reports a missing expected result as DaprException after cancellation. See
DaprJobsClient usage for client configuration and payload conventions.
Analyzer
The Dapr.Jobs.Analyzers package ships diagnostic DAPR1501 (warning, category Usage). It fires when
ScheduleJobAsync is called with a literal job name and no MapDaprScheduledJobHandler call exists in the same
source file, with the message “Job invocations require the MapDaprScheduledJobHandler be set and configured for
job name ‘{name}’ on IEndpointRouteBuilder”. Add the handler mapping, or suppress the diagnostic with
#pragma warning disable DAPR1501 or an .editorconfig rule if the handler is intentionally mapped elsewhere.
1.7.2 - DaprJobsClient usage
Essential tips and advice for using DaprJobsClient
Lifetime management
A DaprJobsClient is a version of the Dapr client that is dedicated to interacting with the Dapr Jobs API. It can be
registered alongside a DaprClient and other Dapr clients without issue.
It maintains access to networking resources in the form of TCP sockets used to communicate with the Dapr sidecar and
implements IDisposable to support the eager cleanup of resources.
For best performance, create a single long-lived instance of DaprJobsClient and provide access to that shared instance
throughout your application. DaprJobsClient instances are thread-safe and intended to be shared.
This can be aided by utilizing the dependency injection functionality. The registration method supports registration using
as a singleton, a scoped instance or as transient (meaning it’s recreated every time it’s injected), but also enables
registration to utilize values from an IConfiguration or other injected service in a way that’s impractical when
creating the client from scratch in each of your classes.
Avoid creating a DaprJobsClient for each operation and disposing it when the operation is complete.
Configuring DaprJobsClient via the DaprJobsClientBuilder
A DaprJobsClient can be configured by invoking methods on the DaprJobsClientBuilder class before calling .Build()
to create the client itself. The settings for each DaprJobsClient are separate
and cannot be changed after calling .Build().
vardaprJobsClient=newDaprJobsClientBuilder().UseDaprApiToken("abc123")// Specify the API token used to authenticate to other Dapr sidecars.Build();
The DaprJobsClientBuilder contains settings for:
The HTTP endpoint of the Dapr sidecar
The gRPC endpoint of the Dapr sidecar
The JsonSerializerOptions object used to configure JSON serialization
The GrpcChannelOptions object used to configure gRPC
The API token used to authenticate requests to the sidecar
The factory method used to create the HttpClient instance used by the SDK
The timeout used for the HttpClient instance when making requests to the sidecar
The SDK will read the following environment variables to configure the default values:
DAPR_HTTP_ENDPOINT: used to find the HTTP endpoint of the Dapr sidecar, example: https://dapr-api.mycompany.com
DAPR_GRPC_ENDPOINT: used to find the gRPC endpoint of the Dapr sidecar, example: https://dapr-grpc-api.mycompany.com
DAPR_HTTP_PORT: if DAPR_HTTP_ENDPOINT is not set, this is used to find the HTTP local endpoint of the Dapr sidecar
DAPR_GRPC_PORT: if DAPR_GRPC_ENDPOINT is not set, this is used to find the gRPC local endpoint of the Dapr sidecar
DAPR_API_TOKEN: used to set the API token
Configuring gRPC channel options
Dapr’s use of CancellationToken for cancellation relies on the configuration of the gRPC channel options. If you need
to configure these options yourself, make sure to enable the ThrowOperationCanceledOnCancellation setting.
The APIs on DaprJobsClient perform asynchronous operations and accept an optional CancellationToken parameter. This
follows a standard .NET practice for cancellable operations. Note that when cancellation occurs, there is no guarantee that
the remote endpoint stops processing the request, only that the client has stopped waiting for completion.
Pass cancellation tokens to bound calls. In SDK 1.19.0, scheduling, deletion, and listing catch
caller-initiated cancellation: write methods can complete without confirming a change and listing can return
an empty list. GetJobAsync can surface a DaprException after cancellation. Do not rely on an
OperationCanceledException being thrown by every Jobs operation, or interpret a canceled call as confirmation
that a job was created/deleted. Check the token and reconcile with the runtime when the outcome matters.
Configuring DaprJobsClient via dependency injection
Using the built-in extension methods for registering the DaprJobsClient in a dependency injection container can
provide the benefit of registering the long-lived service a single time, centralize complex configuration and improve
performance by ensuring similarly long-lived resources are re-purposed when possible (e.g. HttpClient instances).
There are three overloads available to give the developer the greatest flexibility in configuring the client for their
scenario. Each of these will register the IHttpClientFactory on your behalf if not already registered, and configure
the DaprJobsClientBuilder to use it when creating the HttpClient instance in order to re-use the same instance as
much as possible and avoid socket exhaustion and other issues.
In the first approach, there’s no configuration done by the developer and the DaprJobsClient is configured with the
default settings.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprJobsClient();//Registers the `DaprJobsClient` to be injected as neededvarapp=builder.Build();
AddDaprJobsClient() also registers the gRPC AppCallbackAlpha callback service and configures Kestrel for HTTP/1 + HTTP/2, enabling the sidecar to deliver job triggers over either HTTP or gRPC without any additional setup.
Sometimes the developer will need to configure the created client using the various configuration options detailed
above. This is done through an overload that passes in the DaprJobsClientBuilder and exposes methods for configuring
the necessary options.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprJobsClient((_,daprJobsClientBuilder)=>{//Set the API tokendaprJobsClientBuilder.UseDaprApiToken("abc123");//Specify a non-standard HTTP endpointdaprJobsClientBuilder.UseHttpEndpoint("http://dapr.my-company.com");});varapp=builder.Build();
Finally, it’s possible that the developer may need to retrieve information from another service in order to populate
these configuration values. That value may be provided from a DaprClient instance, a vendor-specific SDK or some
local service, but as long as it’s also registered in DI, it can be injected into this configuration operation via the
last overload:
varbuilder=WebApplication.CreateBuilder(args);//Register a fictional service that retrieves secrets from somewherebuilder.Services.AddSingleton<SecretService>();builder.Services.AddDaprJobsClient((serviceProvider,daprJobsClientBuilder)=>{//Retrieve an instance of the `SecretService` from the service providervarsecretService=serviceProvider.GetRequiredService<SecretService>();vardaprApiToken=secretService.GetSecret("DaprApiToken").Value;//Configure the `DaprJobsClientBuilder`daprJobsClientBuilder.UseDaprApiToken(daprApiToken);});varapp=builder.Build();
Understanding payload serialization on DaprJobsClient
While there are many methods on the DaprClient that automatically serialize and deserialize data using the
System.Text.Json serializer, this SDK takes a different philosophy. Instead, the relevant methods accept an optional
payload of ReadOnlyMemory<byte> meaning that serialization is an exercise left to the developer and is not
generally handled by the SDK.
For JSON-serializable values, use ScheduleJobWithPayloadAsync from Dapr.Jobs.Extensions. It accepts a
DaprJobSchedule, an object payload, and optional JsonSerializerOptions.
This will convert the value to UTF-8 encoded bytes for you as a convenience. Here’s an example of what this might
look like when scheduling a Cron expression:
In the same vein, if you have a plain string value, you can use an overload of the same method to serialize a
string-typed payload and the JSON serialization step will be skipped and it’ll only be encoded to an array of
UTF-8 encoded bytes. Here’s an example of what this might look like when scheduling a one-time job:
varnow=DateTimeOffset.UtcNow;varoneWeekFromNow=now.AddDays(7);awaitdaprJobsClient.ScheduleJobWithPayloadAsync("myOtherJob",DaprJobSchedule.FromDateTime(oneWeekFromNow),"This is a test!");
The delegate handling the job invocation expects at least two arguments to be present:
A string that is populated with the jobName, providing the name of the invoked job
A ReadOnlyMemory<byte> that is populated with the bytes originally provided during the job registration.
Deserialize with the same format used when scheduling. For JSON, use
JsonSerializer.Deserialize<T>(jobPayload.Span, options) with matching serializer options; for UTF-8 text,
use Encoding.UTF8.GetString. The client does not infer the payload’s type or encoding.
To deserialize the bytes to a string, the following helper method can be used:
varpayloadAsString=Encoding.UTF8.GetString(jobPayload.Span);//If successful, returns a string with the value
Error handling
DaprJobsClient wraps runtime/gRPC failures in DaprException. Invalid argument values raise standard
exceptions such as ArgumentOutOfRangeException or ArgumentNullException.
The most common cases of failure will be related to:
Incorrect argument formatting while engaging with the Jobs API
Transient failures such as a networking problem
Invalid data, such as a failure to deserialize a value into a type it wasn’t originally serialized from
In any of these cases, you can examine more exception details through the .InnerException property.
1.8 - Dapr Cryptography .NET SDK
Overview of the Dapr Cryptography building block for .NET
Dapr.Cryptography provides a dedicated client for performing high-performance encryption and decryption operations with Dapr. The DaprEncryptionClient supports streaming operations that can handle data of any size, offloading the cryptographic work to the Dapr runtime and its configured cryptography components.
The client is registered with dependency injection via AddDaprEncryptionClient() and can be configured from IConfiguration, environment variables, or a DaprEncryptionClientBuilder for advanced scenarios.
The Dapr Cryptography package allows you to perform encryption and decryption operations provided by the Dapr sidecar.
Lifetime management
A DaprEncryptionClient is a version of the Dapr client that is dedicated to interacting with the Dapr Cryptography API.
It can be registered alongside a DaprClient and other Dapr clients without issue.
It maintains access to networking resources in the form of TCP sockets used to communicate with the Dapr sidecar.
For best performance, create a single long-lived instance of DaprEncryptionClient and provide access to that shared
instance throughout your application. DaprEncryptionClient instances are thread-safe and intended to be shared.
This can be aided by utilizing the dependency injection functionality. The registration method supports registration
as a singleton, a scoped instance, or as a transient (meaning it’s recreated every time it’s injected), but also enables
registration to utilize values from an IConfiguration or other injected service in a way that’s impractical when creating
the client from scratch in each of your classes.
Avoid creating a DaprEncryptionClient for each operation.
Configuring DaprEncryptionClient via DaprEncryptionClientBuilder
A DaprEncryptionClient can be configured by invoking methods on the DaprEncryptionClientBuilder class before calling
.Build() to create the client itself. The settings for each DaprEncryptionClientBuilder are separate can cannot be
changed after calling .Build().
vardaprEncryptionClient=newDaprEncryptionClientBuilder().UseDaprApiToken("abc123")//Specify the API token used to authenticate to the Dapr sidecar.Build();
The DaprEncryptionClientBuilder contains settings for:
The HTTP endpoint of the Dapr sidecar
The gRPC endpoint of the Dapr sidecar
The JsonSerializerOptions object used to configure JSON serialization
The GrpcChannelOptions object used to configure gRPC
The API token used to authenticate requests to the sidecar
The factory method used to create the HttpClient instance used by the SDK
The timeout used for the HttpClient instance when making requests to the sidecar
The SDK will read the following environment variables to configure the default values:
DAPR_HTTP_ENDPOINT: used to find the HTTP endpoint of the Dapr sidecar, example: https://dapr-api.mycompany.com
DAPR_GRPC_ENDPOINT: used to find the gRPC endpoint of the Dapr sidecar, example: https://dapr-grpc-api.mycompany.com
DAPR_HTTP_PORT: if DAPR_HTTP_ENDPOINT is not set, this is used to find the HTTP local endpoint of the Dapr sidecar
DAPR_GRPC_PORT: if DAPR_GRPC_ENDPOINT is not set, this is used to find the gRPC local endpoint of the Dapr sidecar
DAPR_API_TOKEN: used to set the API token
Configuring gRPC channel options
Dapr’s use of CancellationToken for cancellation relies on the configuration of the gRPC channel options. If you need
to configure these options yourself, make sure to enable the ThrowOperationCanceledOnCancellation setting.
The APIs on DaprEncryptionClient perform asynchronous operations and accept an optional CancellationToken parameter. This
follows a standard .NET practice for cancellable operations. Note that when cancellation occurs, there is no guarantee that
the remote endpoint stops processing the request, only that the client has stopped waiting for completion.
When an operation is canceled, it can throw an OperationCanceledException. Stream failures are surfaced while
enumerating results; see streaming and operation options.
Configuring DaprEncryptionClient via dependency injection
Using the built-in extension methods for registering the DaprEncryptionClient in a dependency injection container can
provide the benefit of registering the long-lived service a single time, centralize complex configuration and improve
performance by ensuring similarly long-lived resources are re-purposed when possible (e.g. HttpClient instances).
There are three overloads available to give the developer the greatest flexibility in configuring the client for their
scenario. Each of these will register the IHttpClientFactory on your behalf if not already registered, and configure
the DaprEncryptionClientBuilder to use it when creating the HttpClient instance in order to re-use the same instance as
much as possible and avoid socket exhaustion and other issues.
In the first approach, there’s no configuration done by the developer and the DaprEncryptionClient is configured with the
default settings.
Sometimes the developer will need to configure the created client using the various configuration options detailed
above. This is done through an overload that passes in the DaprEncryptionClientBuiler and exposes methods for configuring
the necessary options.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprEncryptionClient((_,daprEncryptionClientBuilder)=>{//Set the API tokendaprEncryptionClientBuilder.UseDaprApiToken("abc123");//Specify a non-standard HTTP endpointdaprEncryptionClientBuilder.UseHttpEndpoint("http://dapr.my-company.com");});varapp=builder.Build();
Finally, it’s possible that the developer may need to retrieve information from another service in order to populate
these configuration values. That value may be provided from a DaprClient instance, a vendor-specific SDK or some
local service, but as long as it’s also registered in DI, it can be injected into this configuration operation via the
last overload:
varbuilder=WebApplication.CreateBuilder(args);//Register a fictional service that retrieves secrets from somewherebuilder.Services.AddSingleton<SecretService>();builder.Services.AddDaprEncryptionClient((serviceProvider,daprEncryptionClientBuilder)=>{//Retrieve an instance of the `SecretService` from the service providervarsecretService=serviceProvider.GetRequiredService<SecretService>();vardaprApiToken=secretService.GetSecret("DaprApiToken").Value;//Configure the `DaprEncryptionClientBuilder`daprEncryptionClientBuilder.UseDaprApiToken(daprApiToken);});varapp=builder.Build();
1.8.2 - How to: Create and use Dapr Cryptography in the .NET SDK
Learn how to create and use the Dapr Cryptography client using the .NET SDK
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
These examples target SDK 1.19.0 or later. Configure a cryptography component and a key supported by
that component before running them. Import Dapr.Cryptography.Encryption,
Dapr.Cryptography.Encryption.Models, and Dapr.Cryptography.Encryption.Extensions.
The client is experimental (DAPR_CRYPTOGRAPHY).
A DaprEncryptionClient maintains access to networking resources in the form of TCP sockets used to communicate with
the Dapr sidecar.
Dependency Injection
The AddDaprEncryptionClient() method will register the Dapr client with dependency injection and is the recommended approach
for using this package. This method accepts an optional options delegate for configuring the DaprEncryptionClient and a
ServiceLifetime argument, allowing you to specify a different lifetime for the registered services instead of the default Singleton
value.
The following example assumes all default values are acceptable and is sufficient to register the DaprEncryptionClient:
services.AddDaprEncryptionClient();
The optional configuration delegate is used to configure the DaprEncryptionClient by specifying options on the
DaprEncryptionClientBuilder as in the following example:
services.AddSingleton<DefaultOptionsProvider>();services.AddDaprEncryptionClient((serviceProvider,clientBuilder)=>{//Inject a service to source a value fromvaroptionsProvider=serviceProvider.GetRequiredService<DefaultOptionsProvider>();varstandardTimeout=optionsProvider.GetStandardTimeout();//Configure the value on the client builderclientBuilder.UseTimeout(standardTimeout);});
Manual Instantiation
Rather than using dependency injection, a DaprEncryptionClient can also be built using the static client builder.
For best performance, create a single long-lived instance of DaprEncryptionClient and provide access to that shared instance throughout
your application. DaprEncryptionClient instances are thread-safe and intended to be shared.
Avoid creating a DaprEncryptionClient per-operation.
A DaprEncryptionClient can be configured by invoking methods on the DaprEncryptionClientBuilder class before calling .Build()
to create the client. The settings for each DaprEncryptionClient are separate and cannot be changed after calling .Build().
Choose a key-wrap algorithm supported by your configured key and component. The SDK exposes AES key-wrap
(Aes, A256kw), AES-CBC (A128cbc, A192cbc, A256cbc), and RSA (Rsa, RsaOaep256) choices;
exposing an enum value does not guarantee that every cryptography component supports it.
Encrypt and decrypt streams
The stream overloads return IAsyncEnumerable<ReadOnlyMemory<byte>>. Consume all output chunks and write
them to your destination instead of buffering the file:
The caller owns the input and destination streams. Enumeration completes after both request and response
processing finish. Errors can occur while enumerating, not just when obtaining the enumerable. Disposing the
enumerator early cancels processing and waits for it to stop; do not treat a partial output file as a complete
encrypted or decrypted document.
Encryption and decryption options
Setting
Behavior
EncryptionOptions.KeyWrapAlgorithm
Required constructor argument; selects the key-wrap algorithm.
EncryptionOptions.EncryptionCipher
AesGcm by default, or ChaCha20Poly1305.
EncryptionOptions.DecryptionKeyName
Optional key name/version to record for decryption. If omitted, the SDK asks the runtime to omit the decryption key name from the encrypted header. Supply the key when decrypting.
EncryptionOptions.StreamingBlockSizeInBytes
Upload block size, 4 KiB by default; must be positive and generally should not exceed 64 KiB.
DecryptionOptions.StreamingBlockSizeInBytes
Decryption upload block size, also 4 KiB by default and required to be positive.
DecryptAsync accepts optional DecryptionOptions. Cryptography operates on bytes, not JSON, regardless
of the shared builder’s JSON serialization options. The dedicated client implements streaming encryption
and decryption; it does not expose key retrieval, signing, verification, or the runtime’s other subtle APIs.
Errors and cancellation
Pass a cancellation token through both client calls and destination writes. gRPC and stream-processing failures
must be observed while awaiting or enumerating the result; they are not successful empty outputs. Cancellation
or a failed stream does not remove any partial destination file your application has already written.
1.9 - Dapr Secrets Management .NET SDK
Overview of the Dapr Secrets Management building block for .NET
Dapr.SecretsManagement provides a dedicated client for retrieving secrets from the Dapr Secrets API in a .NET application. With DaprSecretsManagementClient you can retrieve individual or bulk secrets from configured secret store components, pass metadata to requests, and take advantage of a source generator that provides strongly-typed access to your secrets through dependency injection using [SecretStore] and [Secret] attributes.
The client is registered with dependency injection via AddDaprSecretsManagement() and can be configured from IConfiguration, environment variables, or a DaprSecretsManagementClientBuilder for advanced scenarios.
1.9.1 - How to: Manage secrets with the Dapr Secrets Management .NET SDK
Learn how to retrieve and manage secrets using the Dapr Secrets Management .NET SDK
Let’s walk through how to retrieve secrets from a Dapr secret store using the Dapr.SecretsManagement package. We’ll
use the sample project provided here for
the following demonstration, covering direct secret retrieval, bulk secret retrieval, and strongly-typed access via the
included source generator. In this guide, you will:
Utilize the Dapr .NET Secrets Management SDK to retrieve individual and bulk secrets
Use the source generator to create a strongly-typed interface for your secret store
In the .NET example project:
The main Program.cs contains all three usage patterns.
The IMyVaultSecrets.cs file demonstrates the typed secret store interface.
Prerequisites
These examples target SDK 1.19.0 or later. This is a read API: there are no SDK operations to create,
rotate, update, delete, or watch secrets in a Dapr secret store.
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
From the .NET SDK root directory, navigate to the Dapr Secrets Management example.
cd examples/SecretManagement
Run the application locally
To run the Dapr application, you need to start the .NET program and a Dapr sidecar. Navigate to the SecretManagementSample directory.
cd SecretManagementSample
We’ll run a command that starts both the Dapr sidecar and the .NET program at the same time.
dapr run --app-id secretsapp --app-port 6543 --dapr-grpc-port 4001 --dapr-http-port 3500 -- dotnet run
Dapr listens for HTTP requests at http://localhost:3500 and internal gRPC requests at http://localhost:4001.
Register the Dapr Secrets Management client with dependency injection
The Dapr Secrets Management SDK provides an extension method to simplify the registration of the client. Before completing the dependency injection registration in Program.cs, add the following line:
varbuilder=WebApplication.CreateBuilder(args);//Add anywhere between these two linesbuilder.Services.AddDaprSecretsManagementClient();varapp=builder.Build();
Import Dapr.SecretsManagement for the client and Dapr.SecretsManagement.Extensions for registration.
It’s possible that you may want to provide some configuration options to the client that should be present with each call to the sidecar, such as a Dapr API token or a non-standard HTTP or gRPC endpoint. This is possible through use of an overload of the registration method that allows configuration of a DaprSecretsManagementClientBuilder instance:
Still, it’s possible that whatever values you wish to inject need to be retrieved from some other source, itself registered as a dependency. There’s one more overload you can use to inject an IServiceProvider into the configuration action method. In the following example, we register a fictional singleton that can retrieve configuration values from somewhere and pass it into the configuration method for AddDaprSecretsManagementClient so we can retrieve our Dapr API token from somewhere else for registration here:
Use the Dapr Secrets Management client using IConfiguration
It’s possible to configure the Dapr Secrets Management client using the values in your registered IConfiguration as well without explicitly specifying each of the value overrides using the DaprSecretsManagementClientBuilder as demonstrated in the previous section. Rather, by populating an IConfiguration made available through dependency
injection the AddDaprSecretsManagementClient() registration will automatically use these values over their respective defaults.
Start by populating the values in your configuration. This can be done in several different ways as demonstrated below.
Configuration via ConfigurationBuilder
Application settings can be configured without using a configuration source and by instead populating the value in-memory using a ConfigurationBuilder instance:
varbuilder=WebApplication.CreateBuilder();//Create the configurationvarconfiguration=newConfigurationBuilder().AddInMemoryCollection(newDictionary<string,string>{{"DAPR_HTTP_ENDPOINT","http://localhost:54321"},{"DAPR_API_TOKEN","abc123"}}).Build();builder.Configuration.AddConfiguration(configuration);builder.Services.AddDaprSecretsManagementClient();//This will automatically populate the HTTP and gRPC endpoints and API token values from the IConfiguration
Configuration via Environment Variables
Application settings can be accessed from environment variables available to your application.
The following environment variables will be used to populate both the HTTP endpoint and API token used to register the Dapr Secrets Management client.
The Dapr Secrets Management client will be configured to use both the HTTP endpoint http://localhost:54321 and populate
all outbound requests with the API token header abc123.
Retrieve a single secret
To retrieve a single secret from a Dapr secret store, use the GetSecretAsync method on the
DaprSecretsManagementClient. The method accepts the name of the secret store component, the secret key, and an
optional metadata dictionary.
The result is a IReadOnlyDictionary<string, string>. Some secret stores (such as Kubernetes) can store multiple values
per key — each entry in the dictionary represents one such value.
Retrieve bulk secrets
To retrieve all secrets that the application is allowed to access from a secret store, use the GetBulkSecretAsync
method:
The result is a nested IReadOnlyDictionary<string, IReadOnlyDictionary<string, string>>. The outer key is the secret
name; the inner dictionary contains one or more key-value pairs representing the secret data.
Passing metadata
Both GetSecretAsync and GetBulkSecretAsync accept an optional metadata parameter. This allows you to pass
additional context to the secret store component. The valid metadata keys and values are determined by the type of
secret store in use.
Use the source generator for strongly-typed secrets
The Dapr.SecretsManagement package includes an incremental source generator that produces strongly-typed access to
your secret store via a simple interface definition. This eliminates the need to pass store names and key strings
throughout your codebase.
Define a typed secret store interface
Create a partial interface decorated with the [SecretStore] attribute, specifying the Dapr secret store component
name. Each property maps to a single secret key.
usingDapr.SecretsManagement.Abstractions;[SecretStore("my-vault")]publicpartialinterfaceIMyVaultSecrets{ [Secret("db-connection-string")]stringDatabaseConnection{get;}stringApiKey{get;}// Uses the property name "ApiKey" as the secret key}
The [Secret] attribute is optional. When applied, it overrides the secret key to the specified value. When omitted,
the property name is used as the secret key.
Register the typed secret store
The source generator produces a DI registration extension method named after your interface (e.g., AddMyVaultSecrets()).
Chain it after AddDaprSecretsManagementClient():
A concrete implementation of your interface that is backed by DaprSecretsManagementClient.GetBulkSecretAsync.
An IHostedService that pre-loads all mapped secrets at application startup.
A typed DI registration extension method on IDaprSecretsManagementBuilder.
Because secrets are loaded in bulk at startup, properties are synchronous and available immediately after host startup
without requiring callers to manage async flows.
Consume the typed secrets
Once registered, inject your interface anywhere via standard dependency injection:
DaprSecretsManagementClient is abstract, but has no parameterless constructor. Supply its gRPC client and HTTP
client constructor dependencies when creating a test double. Alternatively, isolate direct access behind an
application-owned interface. The generated property interface below is a simpler seam for most consumer tests.
Unit testing with the source generator
The generated implementation wraps a plain interface with get-only properties, so you can mock it directly:
For integration tests, register via AddDaprSecretsManagementClient() and configure the builder to point at a
real or test sidecar. The generated IHostedService will pre-load secrets at startup using the real client, testing
the full end-to-end flow.
1.9.2 - DaprSecretsManagementClient usage
Essential tips and advice for using DaprSecretsManagementClient
Lifetime management
A DaprSecretsManagementClient is a subset of the Dapr client that is dedicated to interacting with the Dapr Secrets
API. It can be registered alongside a DaprClient and other Dapr clients without issue.
It maintains access to networking resources in the form of TCP sockets used to communicate with the Dapr sidecar and
implements IDisposable to support the eager cleanup of resources.
For best performance, create a single long-lived instance of DaprSecretsManagementClient and provide access to that
shared instance throughout your application. DaprSecretsManagementClient instances are thread-safe and intended to be
shared.
This can be aided by utilizing the dependency injection functionality. The registration method supports registration
as a singleton, a scoped instance or as transient (meaning it’s recreated every time it’s injected), but also enables
registration to utilize values from an IConfiguration or other injected service in a way that’s impractical when
creating the client from scratch in each of your classes.
Avoid creating a DaprSecretsManagementClient for each operation and disposing it when the operation is complete.
Configuring DaprSecretsManagementClient via the DaprSecretsManagementClientBuilder
A DaprSecretsManagementClient can be configured by invoking methods on the DaprSecretsManagementClientBuilder class
before calling .Build() to create the client itself. The settings for each DaprSecretsManagementClient are separate
and cannot be changed after calling .Build().
vardaprSecretsClient=newDaprSecretsManagementClientBuilder().UseDaprApiToken("abc123")// Specify the API token used to authenticate to other Dapr sidecars.Build();
The DaprSecretsManagementClientBuilder contains settings for:
The HTTP endpoint of the Dapr sidecar
The gRPC endpoint of the Dapr sidecar
The JsonSerializerOptions object used to configure JSON serialization
The GrpcChannelOptions object used to configure gRPC
The API token used to authenticate requests to the sidecar
The factory method used to create the HttpClient instance used by the SDK
The timeout used for the HttpClient instance when making requests to the sidecar
The SDK will read the following environment variables to configure the default values:
DAPR_HTTP_ENDPOINT: used to find the HTTP endpoint of the Dapr sidecar, example: https://dapr-api.mycompany.com
DAPR_GRPC_ENDPOINT: used to find the gRPC endpoint of the Dapr sidecar, example: https://dapr-grpc-api.mycompany.com
DAPR_HTTP_PORT: if DAPR_HTTP_ENDPOINT is not set, this is used to find the HTTP local endpoint of the Dapr sidecar
DAPR_GRPC_PORT: if DAPR_GRPC_ENDPOINT is not set, this is used to find the gRPC local endpoint of the Dapr sidecar
DAPR_API_TOKEN: used to set the API token
Configuring gRPC channel options
Dapr’s use of CancellationToken for cancellation relies on the configuration of the gRPC channel options. If you need
to configure these options yourself, make sure to enable the ThrowOperationCanceledOnCancellation setting.
Using cancellation with DaprSecretsManagementClient
The APIs on DaprSecretsManagementClient perform asynchronous operations and accept an optional CancellationToken
parameter. This follows a standard .NET practice for cancellable operations. Note that when cancellation occurs, there
is no guarantee that the remote endpoint stops processing the request, only that the client has stopped waiting for
completion.
When an operation is canceled, it throws an OperationCanceledException.
Configuring DaprSecretsManagementClient via dependency injection
Using the built-in extension methods for registering the DaprSecretsManagementClient in a dependency injection
container can provide the benefit of registering the long-lived service a single time, centralize complex configuration
and improve performance by ensuring similarly long-lived resources are re-purposed when possible (e.g. HttpClient
instances).
There are three overloads available to give the developer the greatest flexibility in configuring the client for their
scenario. Each of these will register the IHttpClientFactory on your behalf if not already registered, and configure
the DaprSecretsManagementClientBuilder to use it when creating the HttpClient instance in order to re-use the same
instance as much as possible and avoid socket exhaustion and other issues.
In the first approach, there’s no configuration done by the developer and the DaprSecretsManagementClient is
configured with the default settings.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprSecretsManagementClient();//Registers the `DaprSecretsManagementClient` to be injected as neededvarapp=builder.Build();
Sometimes you need to configure the created client using the various configuration options detailed
above. This is done through an overload that passes in the DaprSecretsManagementClientBuilder and exposes methods
for configuring the necessary options.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprSecretsManagementClient((_,daprSecretsClientBuilder)=>{//Set the API tokendaprSecretsClientBuilder.UseDaprApiToken("abc123");//Specify a non-standard HTTP endpointdaprSecretsClientBuilder.UseHttpEndpoint("http://dapr.my-company.com");});varapp=builder.Build();
Finally, it’s possible that the developer may need to retrieve information from another service in order to populate
these configuration values. That value may be provided from a DaprClient instance, a vendor-specific SDK or some
local service, but as long as it’s also registered in DI, it can be injected into this configuration operation via the
last overload:
varbuilder=WebApplication.CreateBuilder(args);//Register a fictional service that retrieves secrets from somewherebuilder.Services.AddSingleton<SecretService>();builder.Services.AddDaprSecretsManagementClient((serviceProvider,daprSecretsClientBuilder)=>{//Retrieve an instance of the `SecretService` from the service providervarsecretService=serviceProvider.GetRequiredService<SecretService>();vardaprApiToken=secretService.GetSecret("DaprApiToken").Value;//Configure the `DaprSecretsManagementClientBuilder`daprSecretsClientBuilder.UseDaprApiToken(daprApiToken);});varapp=builder.Build();
Chaining the source generator registration
The AddDaprSecretsManagementClient() method returns an IDaprSecretsManagementBuilder that enables chaining of
source-generator-produced registration methods. First, you need to create an appropriately decorated interface:
[SecretStore("my-vault")]publicpartialinterfaceIMyVaultSecrets{/// <summary>/// The database connection string, retrieved from the "db-connection-string" secret key./// </summary> [Secret("db-connection-string")]stringDatabaseConnection{get;}/// <summary>/// The API key. Uses the property name "ApiKey" as the secret name./// </summary>stringApiKey{get;}}
Because this interface is decorated with the [SecretStore] attribute specifying the name of the secret store component it should use, the source generator emits an extension method you can chain directly (replacing the conventional “I” prefix with “Add” from your interface type name):
builder.Services.AddDaprSecretsManagementClient().AddMyVaultSecrets()// Generated from [SecretStore("my-vault")] on IMyVaultSecrets.AddPaymentSecrets();// Generated from another typed interface
Each call registers the typed interface, its concrete implementation, and an IHostedService that pre-loads the secrets at startup.
This is a startup snapshot, not a secret rotation subscription. Do not resolve the generated interface before
the host has started: its loader rejects access before loading. A missing mapped key throws
KeyNotFoundException when the property is read.
The generator flattens inner dictionary keys returned by bulk retrieval into its property lookup.
For multi-value secrets, [Secret("...")] must therefore name the desired inner value key, not necessarily the
outer secret name. Duplicate inner keys across secrets collide in the flattened snapshot; use the direct API
when the outer/inner hierarchy matters.
From there, simply inject your IMyVaultSecrets into a type and the properties will be populated with the values from your secret store via Dapr.
Understanding the API response shapes
GetSecretAsync
GetSecretAsync returns an IReadOnlyDictionary<string, string>. Most secret stores return a single key-value pair,
but some (like Kubernetes) can store multiple values per secret key. Each entry in the dictionary represents one such
value.
GetBulkSecretAsync
GetBulkSecretAsync returns an IReadOnlyDictionary<string, IReadOnlyDictionary<string, string>>. The outer key is
the secret name; the inner dictionary contains one or more key-value pairs representing the secret data for that key.
Error handling
Methods on DaprSecretsManagementClient will throw a DaprException if an issue is encountered when communicating
with the Dapr sidecar. In case of illegal argument values, the appropriate standard exception will be thrown
(e.g. ArgumentNullException or ArgumentException) with the name of the offending argument. When an operation is
canceled via a CancellationToken, an OperationCanceledException will be thrown.
The most common cases of failure will be related to:
Incorrect argument formatting (e.g. an empty store name or key)
Transient failures such as a networking problem
The specified secret store component not being configured or available
In any of these cases, you can examine more exception details through the .InnerException property.
1.10 - Dapr State Management .NET SDK
Overview of the Dapr State Management building block for .NET
Dapr.StateManagement provides a dedicated client for interacting with the Dapr State Management API from a .NET application. With DaprStateManagementClient you can save, retrieve, delete, and query key/value state entries in configured state store components. The package supports single-key and bulk operations, optimistic concurrency control via ETags, state transactions, and state queries. It also includes a source generator that provides strongly-typed, store-scoped access through dependency injection using [StateStore] and [State] attributes.
The client is registered with dependency injection via AddDaprStateManagement() and can be configured from IConfiguration, environment variables, or a DaprStateManagementClientBuilder for advanced scenarios.
Core concepts
How to: Manage state with the Dapr State Management .NET SDK: end-to-end walkthrough covering save, retrieve, delete, and query operations, ETags, bulk operations, state transactions, the source generator for typed state store access, and testing.
DaprStateManagementClient usage: lifetime management, builder configuration, environment variables, gRPC channel options, dependency injection overloads, JSON serialization defaults, API response shapes, StateOptions for consistency and concurrency, error handling, and migration from DaprClient.
1.10.1 - How to: Manage state with the Dapr State Management .NET SDK
Learn how to save, retrieve, delete, and query state using the Dapr State Management .NET SDK
Let’s walk through how to manage state using the Dapr.StateManagement package. We’ll use the
sample project provided here for the following demonstration, covering typed state store clients via the source generator, direct client usage for bulk operations and transactions, and optimistic concurrency control with ETags. In this guide, you will:
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
From the .NET SDK root directory, navigate to the Dapr State Management example.
cd examples/StateManagement
Run the application locally
To run the Dapr application, you need to start the .NET program and a Dapr sidecar. Navigate to the StateManagementExample directory.
cd StateManagementExample
We’ll run a command that starts both the Dapr sidecar and the .NET program at the same time.
dapr run --app-id statemanagement-example --dapr-grpc-port 50001 -- dotnet run
Dapr listens for gRPC requests at http://localhost:50001.
Register the client
These examples target Dapr.StateManagement1.19.0 or later. Import Dapr.StateManagement,
Dapr.StateManagement.Extensions, and System.Text.Json for the client, registration, and serialization.
State option and operation models are in Dapr.StateManagement.
The DaprStateManagementClient is registered through the AddDaprStateManagementClient() extension method on IServiceCollection. This returns an IDaprStateManagementBuilder that can be used to further register source-generated typed state store clients.
Default registration
Register the client with default settings. The Dapr endpoint and API token will be read from environment variables or IConfiguration automatically.
The client builder inherits from DaprGenericClientBuilder<T>, which supports reading configuration values from IConfiguration. The following configuration keys are recognized:
Key
Description
DAPR_GRPC_ENDPOINT
The gRPC endpoint for the Dapr sidecar
DAPR_HTTP_ENDPOINT
The HTTP endpoint for the Dapr sidecar
DAPR_API_TOKEN
The API token for authenticating with the Dapr sidecar
These values can be provided via environment variables, appsettings.json, or any other IConfiguration source.
builder.Configuration.AddEnvironmentVariables(prefix:"MYAPP_");// MYAPP_DAPR_GRPC_ENDPOINT will be read automaticallybuilder.Services.AddDaprStateManagementClient();
Save and retrieve state
Use GetStateAsync<TValue> to retrieve a single value and SaveStateAsync<TValue> to save one:
varclient=app.Services.GetRequiredService<DaprStateManagementClient>();// Save a widgetvarwidget=newWidget("medium","blue");awaitclient.SaveStateAsync("statestore","my-widget",widget);// Retrieve itvarloaded=awaitclient.GetStateAsync<Widget>("statestore","my-widget");Console.WriteLine($"Widget: {loaded?.Size} / {loaded?.Color}");
Use GetStateAndETagAsync to retrieve a value along with its ETag, then use TrySaveStateAsync or TryDeleteStateAsync to conditionally write only if the value hasn’t changed:
// Read the value and its ETagvar(existingValue,etag)=awaitclient.GetStateAndETagAsync<Widget>("statestore","my-widget");if(etagisnotnull){// Modify the valuevarupdated=existingValue!with{Color="green"};// Save only if nobody else has modified it since our readboolsaved=awaitclient.TrySaveStateAsync("statestore","my-widget",updated,etag);Console.WriteLine(saved?"ETag save succeeded.":"ETag mismatch — concurrent modification.");}
Execute multiple upsert and delete operations atomically within a single transaction. Not all state stores support transactions — check the Dapr documentation for your specific store.
Upserts use serialized bytes in StateTransactionRequest, rather than the generic save method’s automatic
object serialization. Use matching serializer settings:
StateTransactionRequest can carry per-operation ETags, options, and metadata. Request-level metadata is
passed separately to ExecuteStateTransactionAsync. A bulk save is not a substitute for an atomic transaction.
Query state
If the underlying state store supports queries, you can use QueryStateAsync with a JSON query expression:
Query support depends on the state store component. Refer to the Dapr state store query API documentation for query syntax and limitations. Follow response.Token in the next query’s pagination fields when paging; do not assume all results fit in one response.
Query fields refer to the stored JSON document. The example uses the client’s default web JSON settings,
which serialize Widget.Color and Widget.Size as color and size; adapt the query to your serializer and
component’s indexing requirements.
Pass metadata to requests
Most state management operations accept an optional metadata parameter. Metadata is a dictionary of string key-value pairs whose valid keys and values depend on the state store component being used:
Use the source generator for typed state store access
For a cleaner, more maintainable, and testable approach, use the source generator to create a strongly-typed interface bound to a specific state store. This eliminates repeated store name strings throughout your code.
Step 1: Define the interface
Create a partial interface that extends IDaprStateStoreClient and annotate it with [StateStore("storeName")]:
A sealed internal implementation class that forwards all IDaprStateStoreClient calls to
DaprStateManagementClient with the store name "statestore" pre-filled.
A DI registration extension method on IDaprStateManagementBuilder named WithWidgetStore() (the leading I is stripped from the interface name).
Step 2: Register the typed store
Chain the generated extension method onto AddDaprStateManagementClient():
Essential tips and advice for using DaprStateManagementClient
Lifetime management
A DaprStateManagementClient holds long-lived network resources (gRPC channels, HTTP connections). For best performance:
Register a single shared instance and reuse it for the lifetime of the application.
Avoid creating and disposing a client per operation — this can lead to socket exhaustion.
The DI registration via AddDaprStateManagementClient() defaults to ServiceLifetime.Singleton, which is the recommended approach for most applications.
The client is thread-safe and can be shared across concurrent requests.
Client builder configuration
DaprStateManagementClientBuilder inherits from DaprGenericClientBuilder<DaprStateManagementClient> and supports the same configuration surface as the other Dapr .NET client builders.
All asynchronous methods on DaprStateManagementClient and IDaprStateStoreClient accept a CancellationToken parameter. Passing a token allows you to cancel long-running operations in response to timeouts or user cancellation:
This release catches caller-initiated cancellation in the state gRPC client. Single reads can return default
values, bulk/query reads can return empty results, conditional writes/deletes can return false, and other
writes can complete without confirming a remote change. These outcomes are not sufficient evidence that a
key is absent, an ETag conflicted, or a write succeeded. Check the caller’s token after an operation if you need
to distinguish cancellation, and reconcile uncertain writes with the store. Cancellation never guarantees
rollback of a request already accepted by the runtime.
Dependency injection registration
Registration overloads
The AddDaprStateManagementClient method has the following signature:
Each [StateStore]-annotated interface generates an extension method on IDaprStateManagementBuilder. The methods return IDaprStateManagementBuilder, so they chain naturally:
Note: Changing serializer settings can break compatibility with data previously written using default settings. Test thoroughly when customizing.
API response shapes
GetStateAsync
GetStateAsync<TValue> returns TValue?. If the key does not exist in the store, default(T) is returned (i.e., null for reference types).
GetStateAndETagAsync
GetStateAndETagAsync<TValue> returns (TValue? Value, string? ETag). The ETag can be passed to TrySaveStateAsync or TryDeleteStateAsync for optimistic concurrency control.
GetBulkStateAsync
GetBulkStateAsync<TValue> returns IReadOnlyList<BulkStateItem<TValue>>. Each BulkStateItem<TValue> contains:
Property
Type
Description
Key
string
The state key
Value
TValue?
The deserialized value, or null if the key was not found
ETag
string
The ETag for optimistic concurrency control
TrySaveStateAsync / TryDeleteStateAsync
Both return bool — true if the operation succeeded, false on an ETag conflict. In 1.19.0,
caller cancellation can also return false; check cancellation before treating it as a concurrency conflict.
QueryStateAsync
QueryStateAsync<TValue> returns StateQueryResponse<TValue>, which contains:
Property
Type
Description
Results
IReadOnlyList<StateQueryItem<TValue>>
The list of matching items
Token
string?
Pagination token for continuing the query, or null if no more results
Metadata
IReadOnlyDictionary<string, string>
Additional metadata returned by the state store
Each StateQueryItem<TValue> contains:
Property
Type
Description
Key
string
The state key
Data
TValue?
The deserialized value
ETag
string?
The ETag for the item
Error
string?
An error message if the item could not be retrieved, or null on success
Although StateQueryItem<TValue> has an Error property, the 1.19.0 client throws DaprException
when the runtime returns per-item query errors, rather than returning a successful response containing those
failed items. Do not rely on partial results being returned in that case.
StateOptions
The StateOptions class controls consistency and concurrency behavior for individual operations:
Controls whether reads reflect the latest write. null uses the store default.
Concurrency
FirstWrite, LastWrite
Controls conflict resolution. FirstWrite fails on ETag mismatch; LastWrite always overwrites. null uses the store default.
Error handling
Methods on DaprStateManagementClient throw DaprException for runtime failures. Invalid argument values
raise standard exceptions such as ArgumentNullException or ArgumentException. Caller cancellation has
the release-specific behavior described above.
The most common cases of failure will be related to:
Incorrect argument formatting (e.g. an empty store name or key)
Transient failures such as a networking problem
The specified state store component not being configured or available
ETag mismatches when using optimistic concurrency (for TrySaveStateAsync and TryDeleteStateAsync, these return
false rather than throwing)
In any of these cases, you can examine more exception details through the .InnerException property.
Migration from DaprClient
If you are migrating from the DaprClient state management methods to the new Dapr.StateManagement package, note
the following:
The API surface is very similar. Methods like GetStateAsync, SaveStateAsync, DeleteStateAsync, GetBulkStateAsync, and ExecuteStateTransactionAsync are all present with the same semantics.
The default JSON serialization settings (JsonSerializerDefaults.Web) are identical, so data written by DaprClient is fully compatible with DaprStateManagementClient and vice versa.
The new package additionally provides IDaprStateStoreClient and the [StateStore] source generator for strongly-typed, store-scoped access. This reduces boilerplate and eliminating store name strings at call sites.
DaprStateManagementClient is registered independently from DaprClient. Both can coexist in the same application during a gradual migration.
APIs that remain on DaprClient
The dedicated client’s public surface is typed state access. It does not expose these DaprClient helpers:
Legacy method
Purpose
SaveByteStateAsync, TrySaveByteStateAsync
Save already-encoded bytes, optionally conditional on an ETag.
GetByteStateAsync, GetByteStateAndETagAsync
Retrieve raw state bytes, optionally with an ETag.
Non-generic GetBulkStateAsync
Retrieve bulk entries without deserializing values to an application type.
GetStateEntryAsync<T>
Return a StateEntry<T> tracking value, key/store, and ETag for save/delete helper operations.
Use DaprClient where these APIs are needed; do not assume substituting byte[] into a JSON generic
method preserves raw bytes. JSON serialization encodes a byte array rather than bypassing serialization.
For large files and chunked streaming, use the separate binary store building
block instead of buffering file content in state.
The two client families also use types in different namespaces. Dedicated state operations use
Dapr.StateManagement option/operation models; older APIs use their Dapr.Client counterparts.
Check types as well as method names when migrating, and qualify overlapping names when using both.
1.11 - Dapr Binary Store .NET SDK
Store and retrieve binary files using the Dapr Binary Store .NET SDK
The Dapr Binary Store package lets .NET applications store, retrieve, stream, and delete binary files in a configured Dapr binary store component. It supports stream-based uploads and downloads for large files, as well as byte-array access for files that fit in memory. A source generator can also create a strongly typed client bound to a specific store.
1.11.1 - How to: Manage binary files with the Dapr Binary Store .NET SDK
Learn how to store, retrieve, stream, and delete binary files using the Dapr Binary Store .NET SDK
Use the Dapr.BinaryStore package to store and retrieve files using a Dapr binary store component. The client streams file content in chunks, so you can work with large files without loading the entire file into memory. In this guide, you will:
Register and configure DaprBinaryStoreClient
Upload and download files using streams
Choose between streaming and in-memory operations
Bind a typed client to a store with the source generator
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
Install the package in your project:
dotnet add package Dapr.BinaryStore
Configure an in-memory binary store
For local development, create a components directory in your application directory and save the following component as components\filestore.yaml:
This component stores files in the Dapr sidecar’s memory without requiring an external storage service. It allows files up to 4 MiB and a combined total of 512 MiB. Data is lost when the sidecar stops and is not shared across sidecars, so use it for local development and testing rather than durable storage.
The component’s metadata.name, filestore, is the store name supplied to the client methods or the [BinaryStore] attribute in the examples below.
Register the client
Register the client in dependency injection. By default, it reads the Dapr endpoint and API token from the environment or IConfiguration.
Resolve the registered client and pass the binary store component name, a file name, and a stream. The example uses the filestore component configured above. Place a report.pdf file no larger than 4 MiB in your application’s working directory before running the example. Add the following code after var app = builder.Build(); in Program.cs, with the using directives at the top of the file.
The example uploads report.pdf to the in-memory store as uploads/report.pdf and downloads it to downloaded-report.pdf. Run the remaining examples against the same sidecar to use the uploaded file before deleting it.
The Stream overload of SetBinaryFileAsync reads the input stream from its current position and sends it to the runtime in chunks. The default upload chunk size is 32 KiB; pass chunkSize to choose another positive size. Set overwrite: true to replace an existing file. By default, an upload fails if the file already exists.
File names can include nested paths such as uploads/report.pdf. Avoid a leading or trailing slash, empty path segments, . or .. segments, and the characters \, *, ?, [, ], and #; the Dapr runtime rejects these names.
Work with in-memory content
For content that already fits in memory, pass ReadOnlyMemory<byte> to upload or use GetBinaryFileBytesAsync to retrieve the complete file:
The package includes a source generator for a typed client that is bound to one component. Define a partial interface that extends IDaprBinaryStoreClient and use [BinaryStore] to specify the component name:
The generated WithFileStore method registers an implementation of IFileStore. Inject that interface where it is needed; its methods are the same as IDaprBinaryStoreClient but do not take a store name:
Essential guidance for configuring and using DaprBinaryStoreClient
The operations on this page target SDK 1.19.0. Use that release or later with
Dapr runtime 1.19 or later.
Operation surface
Operation
API
Upload
SetBinaryFileAsync with a Stream or ReadOnlyMemory<byte>, optionally overwriting an existing file.
Download
GetBinaryFileChunksAsync, GetBinaryFileAsync into a destination stream, or GetBinaryFileBytesAsync to buffer the complete file.
Delete
DeleteBinaryFileAsync.
Store-bound access
[BinaryStore] on a partial IDaprBinaryStoreClient interface and the generated With... DI registration.
This SDK release does not expose list-files, file metadata, conditional/ETag writes, or range-read methods.
Binary store files are not state entries; state transactions and state query APIs do not apply to them.
Client lifetime
DaprBinaryStoreClient uses network resources and implements IDisposable. Reuse a long-lived client rather than creating one for each operation. The dependency injection registration uses ServiceLifetime.Singleton by default; use the optional lifetime argument to select another lifetime when needed.
DaprBinaryStoreClientBuilder inherits the common Dapr client builder configuration. The client reads these values from environment variables or IConfiguration:
Setting
Description
DAPR_GRPC_ENDPOINT
gRPC endpoint address for the Dapr sidecar
DAPR_HTTP_ENDPOINT
HTTP endpoint address for the Dapr sidecar
DAPR_API_TOKEN
API token used to authenticate with the Dapr sidecar
DAPR_GRPC_PORT
gRPC port used if DAPR_GRPC_ENDPOINT is not set
DAPR_HTTP_PORT
HTTP port used if DAPR_HTTP_ENDPOINT is not set
Values explicitly set on the builder take precedence over values from configuration:
The builder also supports UseHttpEndpoint, UseDaprApiToken, UseGrpcChannelOptions, and UseTimeout for applications that need to customize the common Dapr client settings.
Streaming and memory use
Use the Stream overload of SetBinaryFileAsync and GetBinaryFileAsync for large files. Uploads use a 32 KiB chunk size by default; specify chunkSize on upload to tune this, and ensure it is greater than zero. GetBinaryFileChunksAsync returns an asynchronous sequence of chunks chosen by the runtime.
The ReadOnlyMemory<byte> overload of SetBinaryFileAsync and GetBinaryFileBytesAsync are convenient for small files already held in memory. GetBinaryFileBytesAsync buffers the complete download in a byte array.
The caller owns the streams. Downloads write at the destination’s current position and do not rewind or
truncate it; uploads read at the source’s current position. Chunk enumeration is lazy, and runtime errors
can be thrown during enumeration. A failed download can leave partial bytes in the destination, which your
application must not treat as a complete file.
Cancellation
All asynchronous operations accept a CancellationToken. Pass the token through uploads, downloads, chunk enumeration, and deletes so the operation can be canceled when the caller no longer needs it:
The client throws DaprException when the Dapr runtime reports a failure. For example, a file that does not exist cannot be retrieved or deleted, and an upload without overwrite: true fails if a file with the same name already exists. Inspect InnerException for details from the runtime. Invalid client arguments, such as an empty store or file name or a non-positive upload chunk size, result in standard argument exceptions.
1.12 - Dapr Search .NET SDK
Index and query JSON documents using the Dapr Search .NET SDK
The Dapr.Search package provides a dedicated .NET client for Dapr’s Search building block. It supports index management, typed document upserts and retrieval, full-text and provider-native queries, filters, sorting, projection, highlighting, and continuation-token pagination. A bundled source generator can create a typed client bound to a component, index, and document type.
These guides target Dapr .NET SDK 1.19.0 or later and Dapr runtime 1.19 or later.
Search accepts index-ready JSON objects; it does not extract text, chunk documents, or generate embeddings. For similarity search over embeddings, use the Vector .NET SDK.
1.12.1 - How to: Index and search documents with the Dapr .NET SDK
Create indexes, write typed documents, search, and retrieve documents using Dapr.Search
Use DaprSearchClient to index JSON documents and run full-text queries through a Dapr search component. In this guide, you will configure a local store, create an index, write and search typed documents, and delete them.
The Dapr.Search NuGet package, version 1.19.0 or later
.NET framework support
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
The in-memory component needs no external service. Data is lost when the sidecar stops and is not shared between sidecars. Use it for local development and testing, not durable storage.
For production, configure a supported search component. Component capabilities differ: for example, the in-memory component does not support highlighting or native queries.
Register and resolve the client
Add the following to Program.cs. The client reads the sidecar endpoint and API token from configuration or the environment.
Run the application with a sidecar that loads the component:
dapr run --app-id search-example --resources-path .\components -- dotnet run
The .NET Search client uses gRPC; it is separate from DaprClient and does not require AddDaprClient().
Create and inspect an index
conststringstoreName="searchstore";conststringindexName="articles";awaitclient.CreateIndexAsync(storeName,indexName);varinfo=awaitclient.GetIndexAsync(storeName,indexName);Console.WriteLine($"{info.Index}: approximately {info.DocumentCount} documents");varindexes=awaitclient.ListIndexesAsync(storeName);Console.WriteLine(string.Join(", ",indexes));
Creating an existing index fails with AlreadyExists; it does not update the index settings. If you keep the sidecar running between executions, delete the example index before creating it again.
CreateIndexAsync accepts component-specific settings in its metadata argument. For example, the Meilisearch component requires filterableAttributes and sortableAttributes to declare fields used for filtering and sorting. These settings are not needed for the in-memory example.
Index typed documents
varwriteOptions=newIndexingOptions{Mode=IndexingMode.WaitForCompletion,WaitTimeout=TimeSpan.FromSeconds(10),OnWaitTimeout=IndexingWaitTimeoutAction.FailRequest};varwrite=awaitclient.IndexDocumentsAsync<Article>(storeName,indexName, [
new("doc-1", new Article("Getting started with Dapr", "guide", 10),
new Dictionary<string, string> { ["author"]="alice"}),new("doc-2",newArticle("Dapr pub/sub deep dive","guide",25)),new("doc-3",newArticle("Search API reference","reference",30))],writeOptions);foreach(varfailureinwrite.FailedItems){Console.Error.WriteLine($"{failure.Id}: {failure.ErrorCode} {failure.ErrorMessage}");}if(write.FailedItems.Count!=0||write.Ack!=IndexAck.Completed){thrownewInvalidOperationException("Not all documents were confirmed indexed.");}
SearchDocument<T> contains an ID, typed content, and optional string metadata. The SDK serializes content to UTF-8 JSON using the client’s JSON options. Content must serialize to a JSON object; invalid content is reported as an item failure by the runtime. IDs must be non-empty and unique within a write request. Writing an existing ID upserts that document.
Document metadata is stored and returned unchanged, but is not indexed or filterable. Filters address fields of Content, not SearchDocument<T>.Metadata.
Without writeOptions, a write returns on acceptance and can return IndexAck.Queued. An empty FailedItems list at that boundary does not guarantee eventual indexing success. The explicit wait above lets the following reads observe completed writes. See write acknowledgement guidance.
Search and paginate
Add using System.Text.Json; at the top of Program.cs, then search for guides sorted by price:
The default JSON naming policy is camelCase, so field names use title, category, and price, not the .NET property names. A continuation token belongs to the query that produced it: keep the text, filter, sort, page size, and field options unchanged between pages.
SearchAsync<T> returns one page, not an automatically enumerated stream. Content is omitted unless IncludeContent is true. Omit the query, or omit both Text and Native, to match all documents, subject to any filter.
Found documents are returned in request order; missing IDs are omitted. Without includeContent: true, Content is default(T).
Delete documents and the index
varack=awaitclient.DeleteDocumentsAsync(storeName,indexName,["doc-2"],writeOptions);if(ack!=IndexAck.Completed){thrownewInvalidOperationException("Document deletion was not confirmed complete.");}awaitclient.DeleteIndexAsync(storeName,indexName);
Deleting a missing document ID is not an error. Deleting an index removes its documents as well.
Configure DaprSearchClient, shape queries, manage write acknowledgements, and generate typed index clients
DaprSearchClient in Dapr.Search implements the alpha Search API through gRPC. Use .NET SDK 1.19.0 or later with a Dapr runtime and component that support Search. See the overview for release requirements and the how-to for a complete document lifecycle.
Client lifetime and configuration
Reuse a long-lived client rather than creating one per operation. Dependency injection registers a singleton by default and owns its disposal:
The callback can resolve configuration or other services through serviceProvider. Use the optional lifetime argument to choose another ServiceLifetime when required.
For applications without dependency injection, create and dispose a client yourself:
The builder accepts an optional IConfiguration. Defaults resolve DAPR_GRPC_ENDPOINT, or fall back to the local endpoint using DAPR_GRPC_PORT (50001 by default); DAPR_API_TOKEN supplies sidecar authentication. Explicit builder settings override defaults; use UseDaprApiToken to override the token.
Use UseJsonSerializationOptions for document serialization and UseGrpcChannelOptions for gRPC settings. When supplying channel options, retain ThrowOperationCanceledOnCancellation = true. Although the shared builder also exposes HTTP endpoint, HTTP client factory, and HTTP timeout settings, Search operations use gRPC; changing the HTTP endpoint does not switch their transport, and UseTimeout is not a per-RPC deadline. Pass a time-limited CancellationToken to bound how long the caller waits.
API coverage
All operations accept optional component-specific request metadata (IReadOnlyDictionary<string, string>) and a CancellationToken.
Operation
Result
CreateIndexAsync, DeleteIndexAsync
Create or remove an index. Creation metadata supplies provider-specific settings.
GetIndexAsync
SearchIndex with Index, approximate DocumentCount, and component Properties.
ListIndexesAsync
Index names in the component.
IndexDocumentsAsync<T>
IndexDocumentsResult with Ack and FailedItems.
GetDocumentsAsync<T>
Found SearchDocument<T> entries in request order.
DeleteDocumentsAsync
IndexAck for the deletion.
SearchAsync<T>
One SearchResult<T> page.
Request metadata configures an operation; it is separate from each document’s stored, opaque Metadata.
Query options and results
SearchQuery is a record, so use with expressions when changing only the continuation token.
Property
Behavior
Text
Portable full-text query. Mutually exclusive with Native; neither means match all.
Native
Provider-native query represented by a JSON object (JsonElement).
Filter
Portable JSON-object filter addressing content fields, including dotted nested paths.
TopK
Nullable uint page size; null or zero selects the component default.
ContinuationToken
Opaque token from the previous response. Keep the rest of the query unchanged.
SearchFields
Content fields to search.
Sort
Ordered SortClause entries with Ascending, Descending, or provider-default Unspecified order.
IncludeContent
Null or false omits content; returned Content is default(T).
ReturnFields
Fields projected into returned content. Use with IncludeContent = true.
HighlightFields
Fields for which highlighted fragments are requested, if the component supports them.
Filters support $eq, $ne, $gt, $gte, $lt, $lte, $in, $nin, $exists, $and, $or, and $not. Multiple conditions in an object are ANDed, and a direct field value is an equality test. Use serialized JSON field names, which are camelCase by default. See the portable filter language and your component’s requirements for filterable and sortable fields.
SearchResult<T>.Hits contains SearchHit<T> entries with a Document, unnormalized provider-specific Score, and a Highlights dictionary keyed by field. Higher scores indicate greater relevance within that result set; do not compare them across providers. TotalHits is nullable, and TotalHitsRelation is Unspecified, Exact, LowerBound, or Estimate. Stop paging when ContinuationToken is null or empty.
Projection and highlighting
Using the Article type and client from the how-to, the following query requires a component that supports highlighting, such as Meilisearch:
Projection can omit members expected by your model. Choose a compatible result type or JsonElement for partial documents. Highlight fragments can contain provider-generated markup; treat them as untrusted content when rendering a UI.
Provider-native queries
Pass a JSON object in Native rather than Text for provider-specific features:
This example uses Meilisearch syntax and will not work with the in-memory component. Meilisearch pagination and sorting must still use the portable TopK, ContinuationToken, and Sort properties. Setting both Text and Native, or supplying a non-object Native or Filter, throws ArgumentException before sending an RPC.
Write acknowledgements
IndexDocumentsAsync<T> and DeleteDocumentsAsync accept Dapr.Search.IndexingOptions.
Setting
Behavior
Omitted options, ReturnOnAcceptance, or Unspecified mode
Return after acceptance. IndexAck.Queued means background work was accepted, not that indexing succeeded. Synchronous components can return Completed.
WaitForCompletion
Requires a positive WaitTimeout and explicit OnWaitTimeout. Completed means the final write result is available, including any item failures.
OnWaitTimeout = ContinueAsync
Return Queued if the wait expires; requires component support for queued acknowledgement.
OnWaitTimeout = FailRequest
Fail with DeadlineExceeded if the wait expires. Provider-side work may still complete.
Do not supply WaitTimeout or OnWaitTimeout with acceptance mode. WaitTimeout must be shorter than any remaining RPC deadline and must leave headroom below the store resiliency timeout of at least 10% of that timeout and at least 100 ms. See the runtime acknowledgement rules.
Always inspect both IndexDocumentsResult.Ack and FailedItems. A completed batch can contain failed documents without throwing for the whole request. Each SearchFailedItem includes Id, canonical numeric ErrorCode, ErrorMessage, and Details preserving protobuf TypeUrl and raw Value bytes. At a queued boundary, only failures already known can be reported; there is no client API to poll for a final indexing result.
Serialization
Content uses System.Text.Json with JsonSerializerDefaults.Web by default. Pass .NET objects to SearchDocument<T>; do not manually base64-encode them or pass an already serialized JSON string, which would serialize as a string rather than an object. Use JsonElement for document shapes without a fixed .NET model.
For source-generated JSON serialization, configure the client with a context covering the content type:
The generated index client below does not generate JSON serialization metadata. Configure JSON options separately when reflection-free serialization is required.
Generate a typed index client
The Dapr.Search package bundles a source generator. Declare a top-level, non-generic, non-file-local partial interface, extending exactly one IDaprSearchIndex<T>, without additional abstract members:
The generated wrapper exposes the index-scoped operations in the API table, but not store-wide ListIndexesAsync. It forwards options, request metadata, and cancellation unchanged, inherits the registered client’s lifetime, and does not own or dispose that client. Registration does not create the index; call CreateIndexAsync explicitly.
Invalid declarations, bindings, or contracts produce build errors DAPR1801, DAPR1802, or DAPR1803, respectively.
Cancellation and errors
Invalid client arguments throw argument exceptions before an RPC. RPC failures throw DaprException with the original Grpc.Core.RpcException as InnerException, preserving its status and trailers:
usingDapr;usingGrpc.Core;try{awaitclient.CreateIndexAsync("searchstore","articles");}catch(DaprExceptionex)when(ex.InnerExceptionisRpcException{StatusCode:StatusCode.AlreadyExists}){Console.Error.WriteLine("The index already exists; its settings were not changed.");}
This is distinct from item failures returned by a successful indexing call. Caller cancellation can throw OperationCanceledException and does not guarantee that the provider stopped processing a write. Retry and timeout policies are configured through Dapr resiliency, not by this client.
1.13 - Dapr Vector .NET SDK
Store embeddings and run similarity queries using the Dapr Vector .NET SDK
The Dapr.Vector package provides a dedicated .NET client for Dapr’s Vector building block. It supports collection management, vector upserts and retrieval, typed or opaque payloads, metadata filters, query-by-vector or query-by-ID, score thresholds, and ordered batch query results. A bundled source generator can create a typed client bound to a component, collection, and payload type.
These guides target Dapr .NET SDK 1.19.0 or later and Dapr runtime 1.19 or later.
Your application must supply precomputed embeddings; this client does not generate them. For lexical/full-text search over JSON documents, use the Search .NET SDK.
1.13.1 - How to: Store and query vectors with the Dapr .NET SDK
Create collections, store typed vector records, query embeddings, and handle batch results using Dapr.Vector
Use DaprVectorClient to store precomputed embeddings and retrieve similar records through a Dapr vector component. This guide uses three-dimensional vectors for readability; real embeddings must match your model’s dimensions.
The Dapr.Vector NuGet package, version 1.19.0 or later
.NET framework support
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
The in-memory component needs no external database. Data is lost when the sidecar stops and is not shared between sidecars. Use a supported durable vector component for production.
Place the remaining operation snippets after this code, then call app.Run(); at the end of Program.cs. Create the payload type in Product.cs:
publicsealedrecordProduct(stringTitle);
Run the application with a sidecar:
dapr run --app-id vector-example --resources-path .\components -- dotnet run
The client reads its endpoint and API token from configuration or the environment and uses gRPC. It is separate from DaprClient and does not require AddDaprClient().
Dimensions must be positive and match every stored embedding. Creating an existing collection fails with AlreadyExists; it does not reconfigure the collection. Delete the example collection before rerunning against a sidecar that still holds it.
Upsert records with typed payloads
varwriteOptions=newIndexingOptions{Mode=IndexingMode.WaitForCompletion,WaitTimeout=TimeSpan.FromSeconds(10),OnWaitTimeout=IndexingWaitTimeoutAction.FailRequest};varattributes=JsonSerializer.Deserialize<JsonElement>("""{"category":"books"}""");varwrite=awaitclient.UpsertVectorsAsync<Product>(storeName,collectionName, [
new("dapr", [1, 0, 0],newProduct("Dapr guide"),attributes),new("distributed",[0.8f,0.6f,0],newProduct("Distributed systems"),attributes),new("other",[0,1,0],newProduct("Other topics"),attributes)],writeOptions);foreach(varfailureinwrite.FailedItems){Console.Error.WriteLine($"{failure.Id}: {failure.ErrorCode} {failure.ErrorMessage}");}if(write.FailedItems.Count!=0||write.Ack!=IndexAck.Completed){thrownewInvalidOperationException("Not all vector records were confirmed written.");}
VectorRecord<T> has an Id, IReadOnlyList<float> embedding Values, optional typed Payload, and optional JSON-object Metadata. IDs must be non-empty and unique within the request. Upserting an existing ID replaces the stored record.
Metadata is structured and filterable; payloads are opaque to the vector component and are not filterable. This differs from Search document metadata, which is not indexed. Other than byte[], payload types are serialized with the client’s JSON options.
Without explicit options, writes can return IndexAck.Queued before records are queryable. Waiting for completion makes the following queries see completed writes, but you must still check FailedItems. Invalid vector dimensions or values can fail individual records while the rest succeed.
VectorQuery.Vector is directly a list of floats, not a VectorRecord<T>. For cosine similarity, higher scores are closer, and the inclusive threshold keeps scores at least 0.75. See the metric guidance for dot product and Euclidean semantics.
Values and payloads are omitted by default on queries. Set IncludeValues and IncludePayload separately as needed.
Query by stored ID and in batches
Use ById instead of Vector to reuse an existing record’s embedding:
With the in-memory component, the missing ID produces an error in that query’s slot without discarding the successful results. Invalid client-side query arguments, such as setting neither Vector nor ById, throw before any query in the batch is sent. Request-wide RPC failures also throw instead of producing per-query errors.
Retrieve and delete records
varrecords=awaitclient.GetVectorsAsync<Product>(storeName,collectionName,["dapr","missing"],includeValues:true);foreach(varrecordinrecords){Console.WriteLine($"{record.Id}: {record.Payload?.Title}, {record.Values.Count} values");}varack=awaitclient.DeleteVectorsAsync(storeName,collectionName,["distributed"],writeOptions);if(ack!=IndexAck.Completed){thrownewInvalidOperationException("Vector deletion was not confirmed complete.");}awaitclient.DeleteCollectionAsync(storeName,collectionName);
Get returns found records in request order and omits missing IDs. Payloads are returned when present; values are omitted unless includeValues is true. There is no includePayload argument on GetVectorsAsync<T>. Deleting a missing record ID is not an error. Deleting a collection removes all its records.
DaprVectorClient in Dapr.Vector implements the alpha Vector API through gRPC. Use .NET SDK 1.19.0 or later with a Dapr runtime and component that support Vector. See the overview for release requirements and the how-to for a complete collection lifecycle.
Client lifetime and configuration
Reuse a long-lived client. Dependency injection registers a singleton by default and disposes it when the container is disposed:
The callback can resolve configuration or other services through serviceProvider. The optional lifetime argument supports other ServiceLifetime values.
Without dependency injection, create and dispose your own instance:
The builder accepts an optional IConfiguration. Defaults use DAPR_GRPC_ENDPOINT, or the local endpoint with DAPR_GRPC_PORT (50001 by default), and DAPR_API_TOKEN for sidecar authentication. Explicit builder settings override defaults; use UseDaprApiToken to override the token.
Use UseJsonSerializationOptions for payload serialization and UseGrpcChannelOptions for gRPC settings. Retain ThrowOperationCanceledOnCancellation = true when replacing channel options. Shared HTTP endpoint, HTTP client factory, and HTTP timeout settings do not switch Vector operations to HTTP or establish a per-RPC deadline. Bound caller wait time with a time-limited CancellationToken, not UseTimeout.
API coverage
Every operation accepts optional component-specific request metadata (IReadOnlyDictionary<string, string>) and a CancellationToken.
Operation
Result
CreateCollectionAsync
Create a collection with positive uint dimensions and an optional distance metric.
GetCollectionAsync
VectorCollection with Collection, approximate RecordCount, Properties, Dimensions, and effective Metric.
ListCollectionsAsync
Collection names in the component.
DeleteCollectionAsync
Delete the collection and its records.
UpsertVectorsAsync<T>
UpsertVectorsResult with Ack and FailedItems.
GetVectorsAsync<T>
Found VectorRecord<T> entries in request order; includeValues defaults to false.
DeleteVectorsAsync
IndexAck for the deletion.
QueryVectorsAsync<T>
VectorQueryResult<T> with Matches (a list of VectorMatch<T>, each exposing the Record and its Score) and the effective Metric.
BatchQueryVectorsAsync<T>
Ordered VectorBatchQueryResult<T> entries, each containing a response or error.
Request metadata configures an operation and is separate from each record’s structured, filterable Metadata. There is no embedding-generation API, hybrid lexical/vector query, or continuation-token pagination in this alpha client. Generate embeddings in your application and use Search separately for lexical queries.
Distance metrics and query options
DistanceMetric
Interpretation
Unspecified
Component default at collection creation; collection metric when querying.
Cosine
Cosine similarity in [-1, 1]; higher is closer.
DotProduct
Unnormalized dot product; higher is closer.
Euclidean
Euclidean distance; lower is closer.
ScoreThreshold is inclusive: cosine and dot-product matches must score at least the threshold; Euclidean matches must score at most it. Scores are not converted to a normalized relevance percentage. Interpret each response using its effective Metric. A query can request a metric override where the component supports it; unsupported metrics are rejected rather than silently substituted.
VectorQuery property
Behavior
Vector
Non-empty IReadOnlyList<float> query embedding. Mutually exclusive with ById.
ById
Non-empty stored record ID whose embedding is used as the query. Exactly one query source is required.
TopK
Nullable uint maximum match count; null or zero uses the component default.
Filter
Portable JSON-object filter addressing record metadata, including dotted paths.
IncludeValues
Null or false omits embedding values; returned Values is empty.
IncludePayload
Null or false omits payloads; returned Payload is default(T).
Metric
Requested metric, defaulting to Unspecified.
ScoreThreshold
Optional inclusive cutoff in the metric’s own scale.
Filters support $eq, $ne, $gt, $gte, $lt, $lte, $in, $nin, $exists, $and, $or, and $not. Multiple conditions in the same object are ANDed. For example:
The filter addresses record metadata, not payload properties. Metadata and filters must be JSON objects. See the component specifications for restrictions and the filter language.
Payload serialization
VectorRecord<T> stores an optional payload separately from its embedding and metadata. Most payload types use System.Text.Json with JsonSerializerDefaults.Web by default; the client deserializes returned payloads to the T selected by your read or query call. Use a compatible type, or JsonElement for variable JSON shapes.
For opaque binary payloads, use byte[] as the generic type. The SDK transfers these bytes unchanged instead of JSON/base64-serializing them:
varwrite=awaitclient.UpsertVectorsAsync<byte[]>("vectorstore","products", [new("binary", [1, 0, 0],newbyte[]{0,255,128})],newIndexingOptions{Mode=IndexingMode.WaitForCompletion,WaitTimeout=TimeSpan.FromSeconds(10),OnWaitTimeout=IndexingWaitTimeoutAction.FailRequest});foreach(varfailureinwrite.FailedItems){Console.Error.WriteLine($"{failure.Id}: {failure.ErrorMessage}");}if(write.FailedItems.Count!=0||write.Ack!=IndexAck.Completed){thrownewInvalidOperationException("The binary record was not confirmed written.");}varrecords=awaitclient.GetVectorsAsync<byte[]>("vectorstore","products",["binary"],includeValues:true);
Read the bytes back with GetVectorsAsync<byte[]> or QueryVectorsAsync<byte[]> (with IncludePayload = true). An absent binary payload is null, while a present empty payload remains an empty byte array. This raw-byte behavior applies specifically to T = byte[], not arbitrary memory types or a byte[] passed as object.
For source-generated JSON serialization, configure a context covering your payload type, such as the Product record from the how-to:
The typed collection generator does not generate JSON serialization metadata. Configure it separately for reflection-free payload serialization; opaque byte[] payloads bypass the JSON serializer.
Write acknowledgements and partial failures
Vector upserts and record deletions accept Dapr.Vector.IndexingOptions. These have the same behavior as the Search write options, but are distinct types in the Dapr.Vector namespace.
Omitted options use ReturnOnAcceptance. IndexAck.Queued means work was accepted, not that it succeeded or is queryable. WaitForCompletion requires a positive WaitTimeout and explicit OnWaitTimeout. ContinueAsync returns Queued if the wait expires and requires queued-ack support; FailRequest raises DeadlineExceeded, but provider work may still complete. Wait fields are invalid with acceptance mode.
The wait timeout must fit below any remaining RPC deadline and leave at least 10% and at least 100 ms of headroom below the store resiliency timeout. It is a provider wait limit, not a cancellation deadline for your application.
Inspect both UpsertVectorsResult.Ack and FailedItems. Each VectorFailedItem includes Id, canonical numeric ErrorCode, ErrorMessage, and raw protobuf error Details (TypeUrl and Value). A completed batch can have individual failures. The SDK leaves dimension and value validation to the runtime/component so invalid records can fail individually without discarding valid records. At a queued boundary only known failures are returned, and this client has no final-result polling API.
If you use Search and Vector together, qualify or alias IndexingOptions, IndexingMode, IndexingWaitTimeoutAction, and IndexAck to avoid ambiguous names.
Batch query errors
BatchQueryVectorsAsync<T> submits queries against one component and collection with shared request metadata. Results preserve query order and have exactly one populated property:
Response: a VectorQueryResult<T> with matches and effective metric.
Error: a VectorQueryError with canonical numeric Code, Message, and preserved protobuf Details.
Check each outcome, even if other queries succeeded. The batch example demonstrates both outcomes.
Local argument validation occurs for the entire batch before sending the RPC. A query with neither source, both sources, an empty vector, a blank ID, a non-object filter, or an invalid metric throws instead of becoming a per-query result. A valid query that fails during runtime evaluation, such as a missing stored ID, can return an error in its own slot. Request-wide RPC failures throw DaprException.
Generate a typed collection client
The Dapr.Vector package bundles a source generator. Define a top-level, non-generic, non-file-local partial interface extending exactly one IDaprVectorCollection<T> with no additional abstract members:
AddProductVectors is named after the interface with the leading I removed. Inject the interface to query without repeating the component, collection, or payload type:
The wrapper exposes all collection-scoped operations, including creation (which still requires dimensions and accepts an optional metric), writes, reads, single/batch queries, and deletion. Store-wide ListCollectionsAsync remains on DaprVectorClient. The wrapper forwards metadata, options, and cancellation, inherits the client’s registered lifetime, and does not dispose that client. Registration alone does not create a collection.
Invalid declarations, bindings, or contracts produce build errors DAPR1901, DAPR1902, or DAPR1903, respectively.
Cancellation and errors
RPC failures throw DaprException whose InnerException is the original Grpc.Core.RpcException; inspect its StatusCode and trailers for provider/runtime errors. Argument validation and JSON serialization errors are distinct from RPC failures. Batch query errors and upsert item failures are returned in their result models, not thrown as request-wide errors.
Every operation accepts a CancellationToken. Caller cancellation can throw OperationCanceledException, but does not guarantee the database stopped processing a write. Configure retries and timeout policies through Dapr resiliency.
1.14 - Dapr Metadata .NET SDK
Overview of the Dapr Metadata building block for .NET
Dapr.Metadata provides typed access to Dapr runtime metadata from a .NET application. The package registers a hosted service that fetches sidecar metadata at startup and exposes it through the .NET options pattern as DaprMetadata. You can inject it via IOptions<DaprMetadata>, IOptionsSnapshot<DaprMetadata>, or IOptionsMonitor<DaprMetadata>, giving you access to the components, subscriptions, app connection properties, and other metadata the runtime reports about itself.
The client is registered with dependency injection via AddDaprMetadata() and can be configured from IConfiguration or environment variables.
1.14.1 - How to: Retrieve Dapr runtime metadata with the .NET SDK
Learn how to retrieve Dapr runtime metadata using the Dapr Metadata .NET SDK
Let’s walk through how to retrieve Dapr runtime metadata using the Dapr.Metadata package. The package registers a
hosted service that retrieves metadata from the Dapr sidecar during application startup, then exposes the typed
DaprMetadata value through the .NET options pattern. In this guide, you will:
Install and register the Dapr Metadata .NET SDK
Inject metadata through IOptions<DaprMetadata>, IOptionsSnapshot<DaprMetadata>, or IOptionsMonitor<DaprMetadata>
Dapr.Metadata NuGet package installed to your project
Install the package
.NET framework support
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
Install the Dapr Metadata package:
dotnet add package Dapr.Metadata
Register Dapr Metadata with dependency injection
Register the metadata service during application startup with AddDaprMetadata():
The registration adds the metadata options type and an internal hosted service that retrieves metadata from the Dapr
runtime when the application starts.
Inject metadata with the options pattern
The Dapr.Metadata package exposes runtime metadata as DaprMetadata through the .NET options pattern. Choose the
options interface that matches the lifetime of the service consuming the metadata.
Use IOptions<DaprMetadata>
Use IOptions<DaprMetadata> when a singleton-style view of the metadata is sufficient:
Use IOptionsMonitor<DaprMetadata> when your application uses configuration hot reload, or when you want to ensure
the consumer reads the latest metadata values in case they have changed since application startup. This is the preferred
approach when freshness matters, with the tradeoff that retrieving the current value can introduce a brief delay while
the metadata value is loaded:
The metadata service retrieves metadata from the Dapr HTTP endpoint. By default, it uses the same Dapr configuration
values used by other .NET SDK clients:
Key
Description
DAPR_HTTP_ENDPOINT
The HTTP endpoint for the Dapr sidecar.
DAPR_HTTP_PORT
The HTTP port for the local Dapr sidecar when DAPR_HTTP_ENDPOINT is not set.
DAPR_API_TOKEN
The API token for authenticating with the Dapr sidecar.
These values can come from environment variables or any registered IConfiguration source.
Start the application with a Dapr sidecar. The sidecar HTTP port must match your configured endpoint or port:
dapr run --app-id metadata-example --dapr-http-port 3500 -- dotnet run
Dapr listens for HTTP requests at http://localhost:3500.
When the application starts, the metadata service retrieves metadata from the sidecar and makes the typed value available
through the registered options interfaces.
1.15 - Dapr Messaging in the .NET SDK
Overview of the unified Dapr Messaging SDK for .NET (Dapr.Messaging)
Dapr.Messaging is the unified Dapr Publish/Subscribe messaging SDK for .NET. It brings all Dapr pub/sub functional modes—event publishing, streaming pull subscriptions, programmatic gRPC push subscriptions, and HTTP subscriptions—together into a single, modern package family.
Rather than fragmenting pub/sub across Dapr.Client and Dapr.AspNetCore, Dapr.Messaging provides a clean, cohesive programming model built on top of modern .NET fundamentals: Roslyn source generators for reflection-free dispatch, compile-time Roslyn analyzers, and the standard Microsoft.Extensions.Options pattern.
Unified package architecture
Dapr.Messaging is a meta-package that brings the runtime client (Dapr.Messaging.Runtime), core abstractions (Dapr.Messaging.Abstractions), source generators (Dapr.Messaging.Generators), and Roslyn analyzers (Dapr.Messaging.Analyzers) in a single package reference:
The Dapr .NET SDK originally distributed messaging capabilities across multiple packages: Dapr.Client provided basic publish and dynamic streaming pull methods, while Dapr.AspNetCore handled controller-based and minimal API push subscriptions via HTTP endpoints.
Dapr.Messaging unifies and modernizes this architecture:
Unified publishing and subscribing: Publish events with IDaprPublishSubscribeClient (including single events, raw byte streams, and bulk publishing) and author subscribers using a single ITopicHandler<TMessage> interface.
Three unified delivery modes: Subscriptions support DeliveryMode.Streaming (streaming subscriptions via gRPC), DeliveryMode.Programmatic (programmatic subscriptions via gRPC push), and DeliveryMode.Http (declarative subscriptions via /dapr/subscribe), all configured through the same [DaprTopic] attribute.
Source generators eliminate reflection: The Dapr.Messaging.Generators source generator inspects [DaprTopic] handlers at compile time and emits typed dispatchers, subscriber registries, and dependency injection wiring. No runtime reflection or runtime code generation is performed on the invocation path.
AOT and trimming considerations: Handler discovery and dispatch registration are generated at compile time, but the current generated subscriber dispatchers use runtime System.Text.Json metadata. Native AOT and trimming scenarios require explicit validation with the target SDK version.
Roslyn analyzers and diagnostics: The SDK includes compile-time analyzers (DAPR1610–DAPR1617) that catch misconfigurations directly in your IDE as you write code:
DAPR1610 (Warning): Conflicting delivery modes on the same topic.
DAPR1611 (Error): [DaprTopic] class not implementing ITopicHandler<TMessage>.
DAPR1612 (Warning): Unregistered message type in Native AOT compilation.
DAPR1613 (Warning): Missing app.MapDaprMessaging() for programmatic subscriptions (with CodeFix).
DAPR1614 (Warning): Direct invocation of internal DaprMessagingRegistration.
DAPR1615 (Warning): Endpoint mapping present without matching topic subscribers.
DAPR1616 (Warning): [DaprTopic] feature enabled without companion properties.
DAPR1617 (Warning): Ignored [DaprTopic] properties for the selected delivery mode or feature.
Standard options and simplified DI: Uses IOptions<DaprMessagingOptions> and a single services.AddDaprMessaging() method that registers options, the publishing client, source-generated subscriber dispatchers, and required hosting services in a single atomic operation.
Built-in Roslyn analyzers and code fixes (DAPR16xx)
Configuration
Custom builder methods
Standard Microsoft.Extensions.Options pattern (DaprMessagingOptions)
CloudEvents support
Manual deserialization or controller bindings
Strongly-typed CloudEvent, CloudEvent<TData>, and TopicContext.CloudEvent
Core concepts
Tutorial: Dapr.Messaging by example: Seven runnable examples covering publishing, streaming, routing, bulk subscriptions, gRPC push, HTTP push, dynamic streaming, and their unit and integration testing patterns.
Publish events how-to: Step-by-step guide to publishing JSON events, CloudEvents, raw payloads, and bulk message batches using IDaprPublishSubscribeClient.
Subscribe to topics how-to: Step-by-step guide to authoring ITopicHandler<TMessage> subscribers, choosing delivery modes with [DaprTopic], compile-time source generation, dynamic streaming subscriptions, and compiler diagnostics.
Configuration and usage guide: Lifetime management, DI options configuration, advanced features (bulk pub/sub, dead-letter topics, CEL routing), and AOT/trimming considerations.
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
Register Dapr messaging services and the pub/sub client using dependency injection:
varbuilder=WebApplication.CreateBuilder(args);// Register Dapr Messaging services and the publish/subscribe clientbuilder.Services.AddDaprMessaging(options=>{// Optional: configure sidecar connection endpoints or serializeroptions.DaprGrpcEndpoint="http://localhost:50001";});varapp=builder.Build();
Singleton client lifetime
IDaprPublishSubscribeClient is thread-safe and registered as a Singleton. It maintains persistent gRPC/HTTP channel resources to the Dapr sidecar and should be reused across your application rather than instantiated per operation.
Publish events
Inject IDaprPublishSubscribeClient (or DaprPublishSubscribeClient) into your controllers, minimal API route handlers, or background services.
1. Publish standard JSON events
To publish a serialized object to a topic, call PublishEventAsync<TData>:
publicrecordOrder(stringId,decimalTotal,stringCustomerEmail);publicsealedclassOrderService(IDaprPublishSubscribeClientpubsub,ILogger<OrderService>logger){publicasyncTaskPlaceOrderAsync(Orderorder,CancellationTokencancellationToken=default){logger.LogInformation("Publishing order {OrderId} to 'orders' topic",order.Id);// Publishes the order object serialized as JSON with Content-Type: application/jsonawaitpubsub.PublishEventAsync(pubsubName:"pubsub",topicName:"orders",data:order,cancellationToken:cancellationToken);}}
2. Publish with custom CloudEvent metadata and PublishOptions
You can attach custom CloudEvent properties (such as event type, subject, traceparent, or component TTL metadata) using PublishOptions:
PublishOptions also exposes Source (Uri), ContentType, TraceParent, and TraceState. Component
metadata and CloudEvent overrides are different concepts: use metadata such as ttlInSeconds only with
components that support it. Byte publishing and bulk publishing also accept PublishOptions.
Setting a content type does not change how a typed object is serialized. Use PublishByteEventAsync when
you already have encoded bytes. A successful publish confirms acceptance by the runtime/component, not
successful processing by every subscriber.
3. Publish strongly-typed CloudEvents
When you want complete control over the CloudEvent envelope, wrap your payload in CloudEvent<TData>:
varcloudEvent=newCloudEvent<Order>(order){Id=Guid.NewGuid().ToString(),Source=newUri("urn:service:checkout"),Type="com.myapp.order.created",Subject=$"orders/{order.Id}",Time=DateTimeOffset.UtcNow,TraceId=Activity.Current?.TraceId.ToString()};// Publishes with Content-Type: application/cloudevents+jsonawaitpubsub.PublishEventAsync("pubsub","orders",cloudEvent,cancellationToken);
4. Publish raw byte payloads
If you are transmitting binary data, pre-serialized payloads, or proprietary encodings, use PublishByteEventAsync:
1.15.2 - How to: Author subscriptions and handle topic messages with the Dapr Messaging .NET SDK
Learn how to author topic handlers, configure streaming, programmatic, and HTTP delivery modes, and wire up reflection-free dispatchers with Dapr.Messaging
This guide demonstrates how to author and manage Dapr topic subscriptions using the modern Dapr.Messaging SDK for .NET. You will learn how to author strongly-typed topic handlers with ITopicHandler<TMessage>, configure delivery modes and routing rules with [DaprTopic], leverage compile-time source generation, and manage dynamic streaming subscriptions.
Dapr.Messaging is a meta-package that bundles the abstractions, runtime client, source generators, and Roslyn analyzers in a single package reference. Installing Dapr.Messaging automatically enables compile-time source generation and diagnostic analysis for your project.
Define a topic handler
.NET framework support
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
Topic subscribers implement the strongly-typed ITopicHandler<TMessage> interface (or its generic variant ITopicHandler<TMessage, TResult>) and are decorated with the [DaprTopic] attribute.
Why use ITopicHandler?
Strongly-typed payloads: Automatically deserializes incoming JSON or CloudEvent payloads into strongly-typed .NET models (TMessage) without manual boilerplate.
Explicit message disposition: The HandleAsync method returns a TopicResponseAction (Success, Retry, or Drop), giving you precise control over acknowledgment, retries, and dead-letter queue routing.
Scoped dependency injection: Handlers are resolved from an isolated IServiceScope for each message delivery, enabling clean constructor injection for scoped dependencies like Entity Framework DbContext, repositories, or loggers.
Compile-time source generation: Annotated handlers are discovered at build time for reflection-free registration and dispatch. Validate Native AOT separately because generated message deserialization still uses runtime JSON metadata.
Analyzer Validation
DAPR1611 (Error): If a class decorated with [DaprTopic] does not implement ITopicHandler<TMessage> or ITopicHandler<TMessage, TResult>, DAPR1611 triggers a build error.
DAPR1612 (Warning): If a handler’s message type is not registered in a source-generated JsonSerializerContext during Native AOT compilation, DAPR1612 warns that AOT deserialization may fail.
Dapr pub/sub delivery protocol
In accordance with the Dapr runtime specification (gRPC AppCallback.OnTopicEvent and HTTP topic endpoints), topic delivery handlers return message acknowledgment status (TopicResponseAction.Success, Retry, or Drop). The Dapr pub/sub runtime does not accept arbitrary business data payloads in response to event delivery.
Example: Topic handler with ITopicHandler<TMessage>
usingDapr.Messaging;usingDapr.Messaging.PublishSubscribe;publicrecordOrder(stringId,decimalTotal,stringCustomerEmail);[DaprTopic("pubsub", "orders")]publicsealedclassOrderHandler(ILogger<OrderHandler>logger,IInventoryServiceinventory):ITopicHandler<Order>{publicasyncTask<TopicResponseAction>HandleAsync(Ordermessage,TopicContextcontext,CancellationTokencancellationToken){logger.LogInformation("Processing order {OrderId} from pubsub {PubSub}",message.Id,context.PubsubName);try{awaitinventory.ReserveStockAsync(message.Id,cancellationToken);returnTopicResponseAction.Success;}catch(InventoryUnavailableExceptionex){logger.LogWarning(ex,"Insufficient inventory for order {OrderId}; dropping message",message.Id);returnTopicResponseAction.Drop;}catch(Exceptionex){logger.LogError(ex,"Transient error processing order {OrderId}; retrying",message.Id);returnTopicResponseAction.Retry;}}}
Response actions
The HandleAsync method returns a TopicResponseAction that tells the Dapr runtime how to acknowledge the message:
Response Action
Description
TopicResponseAction.Success
The message was processed successfully and should be acknowledged (deleted) from the pub/sub component.
TopicResponseAction.Retry
Processing failed due to a transient error; Dapr will redeliver the message according to the component’s retry policy.
TopicResponseAction.Drop
Processing failed permanently; Dapr will delete the message or route it to a configured dead-letter topic without further retries.
Accessing delivery context with TopicContext
The TopicContext passed to HandleAsync provides rich metadata about the delivery:
publicasyncTask<TopicResponseAction>HandleAsync(Ordermessage,TopicContextcontext,CancellationTokencancellationToken){varpubsubName=context.PubsubName;// Name of the Dapr pub/sub componentvartopicName=context.TopicName;// Name of the topicvarmessageId=context.MessageId;// Unique message identifiervarmetadata=context.Metadata;// Additional component-specific metadatavarheaders=context.Headers;// CloudEvent headers forwarded with the deliveryvarrawBytes=context.RawPayload;// Raw payload bytes (when EnableRawPayload is true)varcloudEvent=context.CloudEvent;// Strongly-typed CloudEvent envelopereturnTopicResponseAction.Success;}
Configure subscriptions with [DaprTopic]
The [DaprTopic] attribute specifies which topic to subscribe to and how messages are delivered.
Positional constructor arguments
The [DaprTopic] constructor requires two positional string arguments:
pubsubName (1st argument): The name of the Dapr pub/sub component (as defined in your component YAML’s metadata.name, e.g., "pubsub" or "messagebus").
topicName (2nd argument): The name of the topic or queue to subscribe to (e.g., "orders" or "orders.us").
// Subscribes to the "orders" topic on the "pubsub" component[DaprTopic("pubsub", "orders")]publicclassOrderHandler:ITopicHandler<Order>{/* ... */}
Not all properties on [DaprTopic] are relevant to every delivery mode. The table below outlines which properties apply to each mode:
Property
Description
DeliveryMode.Streaming
DeliveryMode.Programmatic
DeliveryMode.Http
PubsubName
Name of the Dapr pub/sub component
Required
Required
Required
TopicName
Name of the topic
Required
Required
Required
Delivery
Delivery mode (Streaming, Programmatic, Http)
Optional (Default)
Optional
Optional
Route
Target HTTP path for event dispatching
Ignored
Ignored
Applicable
Match
CEL expression for content-based routing
Ignored
Applicable
Applicable
Priority
Priority order for matching CEL rules
Ignored
Applicable
Applicable
DeadLetterTopic
Fallback topic for dropped/failed messages
Applicable
Applicable
Applicable
EnableRawPayload
Forward raw bytes without CloudEvent parsing
Applicable
Applicable
Applicable
BulkSubscribe
Enable batch message delivery
Ignored
Applicable
Applicable
MaxMessagesCount
Maximum batch size for bulk subscriptions
Ignored
Applicable
Applicable
MaxAwaitDurationMs
Maximum wait duration (ms) for batch assembly
Ignored
Applicable
Applicable
MetadataKeys
Keys linking [DaprTopicMetadata] to this topic
Applicable
Applicable
Applicable
Property scope rules & analyzer validation
Route: Only used when Delivery = DeliveryMode.Http. In Streaming and Programmatic modes, events are delivered directly over gRPC streams or gRPC services rather than HTTP routes, so setting Route has no effect.
Routing Rules (Match / Priority): CEL rule evaluation is handled by the Dapr runtime when pushing events via Programmatic (gRPC) or Http. In Streaming mode, the client initiates the stream directly for the topic without server-side HTTP/gRPC routing rules.
Bulk Subscriptions (BulkSubscribe, MaxMessagesCount, MaxAwaitDurationMs): Configures server-side batch aggregation when Dapr pushes events via Programmatic or Http.
Compile-time property validation (DAPR1616 & DAPR1617): Roslyn analyzers inspect [DaprTopic] configurations at build time. DAPR1616 warns if you opt into a feature (like BulkSubscribe = true) without setting required companion properties (MaxMessagesCount, MaxAwaitDurationMs). DAPR1617 warns if you populate properties that are ignored for the selected delivery mode or feature set (such as setting Route or Match on non-HTTP topics).
The three delivery modes
DeliveryMode controls the communication protocol between the Dapr sidecar and your application:
DeliveryMode.Streaming (Default):
The application initiates a persistent bidirectional gRPC stream (SubscribeTopicEventsAlpha1) to the Dapr sidecar.
Messages are pulled by the application with client-side backpressure buffering.
No inbound HTTP or gRPC endpoints need to be mapped for streaming subscriptions.
DAPR1610 (Warning): Ensures the same pub/sub component and topic are not registered with conflicting delivery modes across different handlers.
DAPR1613 (Warning): Warns when programmatic subscriptions are declared but endpoint mapping (app.MapDaprMessaging()) is omitted from the application pipeline. Includes an automated IDE Code Fix.
DAPR1615 (Warning): Warns when endpoint mapping or subscriber registration methods are called without matching topic subscribers in the application.
Content-based routing with CEL
You can filter and route messages based on Common Expression Language (CEL) expressions using the Match and Priority properties:
Dead-letter topic: Set DeadLetterTopic = "orders-dlq" to route dropped messages to a dead-letter queue.
Bulk subscription: Select HTTP or programmatic delivery and set BulkSubscribe = true, MaxMessagesCount, and MaxAwaitDurationMs to receive batches of messages.
Raw payloads: Set EnableRawPayload = true to receive the unparsed event payload without CloudEvent envelope parsing.
Topic metadata with [DaprTopicMetadata]
You can attach key-value metadata to your topic subscription using the [DaprTopicMetadata] attribute:
[DaprTopic] allows multiple attributes on a single handler class. The handler processes messages from each configured topic:
[DaprTopic("pubsub", "orders.us")][DaprTopic("pubsub", "orders.eu")][DaprTopic("pubsub", "orders.asia")]publicsealedclassMultiRegionOrderHandler:ITopicHandler<Order>{publicTask<TopicResponseAction>HandleAsync(Ordermessage,TopicContextcontext,CancellationTokencancellationToken){Console.WriteLine($"Received order from topic: {context.TopicName}");returnTask.FromResult(TopicResponseAction.Success);}}
What the source generator produces
When you build your project, the Dapr.Messaging.Generators Roslyn source generator discovers all [DaprTopic] classes implementing ITopicHandler<TMessage> and emits:
Generated Artifact
Purpose
Typed Dispatchers
Direct, strongly-typed invokers that deserialize message payloads with System.Text.Json and invoke HandleAsync without reflection-based handler discovery.
IDaprMessagingSubscriberRegistry
A centralized registry containing TopicSubscriptionDescriptor definitions for all discovered topics.
AddDaprMessaging()
An IServiceCollection extension method generated into your assembly that automatically registers options, the publishing client, handlers, dispatchers, subscriber registries, and required hosting services into your DI container.
Handler discovery and dispatch registration are generated at compile time. Message
deserialization currently uses runtime System.Text.Json metadata, so Native AOT and
trimming scenarios require additional validation and an application-owned
JsonSerializerContext.
Register at startup
Register Dapr messaging services in Program.cs using builder.Services.AddDaprMessaging():
varbuilder=WebApplication.CreateBuilder(args);// Register the complete Dapr messaging stack (options, publisher client, and source-generated subscribers)builder.Services.AddDaprMessaging(options=>{// Optional: configure Dapr sidecar connection optionsoptions.DaprGrpcEndpoint="http://localhost:50001";});varapp=builder.Build();// Automatically map the endpoints required by the discovered delivery modesapp.MapDaprMessaging();app.Run();
Registration & endpoint analyzer validation
DAPR1614 (Warning): Emitted if application code attempts to invoke the internal DaprMessagingRegistration class directly instead of using the source-generated builder.Services.AddDaprMessaging() extension.
DAPR1613 (Warning): Triggers if programmatic topic subscriptions are registered but app.MapDaprMessaging() (or app.MapDaprAppCallback()) is missing from Program.cs.
DAPR1615 (Warning): Triggers if app.MapDaprMessaging() or subscriber registration endpoints are present when no corresponding HTTP or programmatic topic handlers exist.
Dynamic streaming subscriptions
In addition to declarative [DaprTopic] handlers, DaprPublishSubscribeClient allows creating imperative, dynamic streaming subscriptions at runtime:
varmessagingClient=app.Services.GetRequiredService<DaprPublishSubscribeClient>();// Configure subscription optionsvaroptions=newDaprSubscriptionOptions(newMessageHandlingPolicy(TimeoutDuration:TimeSpan.FromSeconds(10),DefaultResponseAction:TopicResponseAction.Retry)){DeadLetterTopic="orders-dlq",MaximumQueuedMessages=500,MaximumCleanupTimeout=TimeSpan.FromSeconds(15),ErrorHandler=async(DaprExceptionex)=>{Console.WriteLine($"Subscription error: {ex.Message}");}};// Start the dynamic subscriptionawaitusingvarsubscription=awaitmessagingClient.SubscribeAsync("pubsub","dynamic-orders",options,async(TopicMessagemessage,CancellationTokenct)=>{varpayload=Encoding.UTF8.GetString(message.Data.Span);Console.WriteLine($"Received dynamic message: {payload}");returnTopicResponseAction.Success;});// SubscribeAsync is typed as IAsyncDisposable; the runtime handle also exposes completion.await((IDaprSubscription)subscription).Completion;
Analyzers and diagnostics
Dapr.Messaging ships with Roslyn analyzers that enforce correct messaging practices at build time:
ID
Title
Severity
Description
DAPR1610
Duplicate topic with conflicting delivery modes
Warning
Triggered when the same (pubsubName, topicName) is configured with different DeliveryMode values across [DaprTopic] attributes.
DAPR1611
Handler must implement ITopicHandler<T>
Error
Triggered when [DaprTopic] is placed on a class that does not implement ITopicHandler<TMessage> or ITopicHandler<TMessage, TResult>.
DAPR1612
Message type not registered in JsonSerializerContext
Warning
Warns when a message type is not covered by [JsonSerializable] in a Native AOT compilation.
DAPR1613
Map endpoints for programmatic subscriptions
Warning
Warns when programmatic subscriptions are configured without app.MapDaprAppCallback() or app.MapDaprMessaging(). Includes an automated Code Fix.
DAPR1614
Do not call DaprMessagingRegistration directly
Warning
Warns when DaprMessagingRegistration is called directly from application code instead of calling services.AddDaprMessaging().
DAPR1615
Remove unused subscriber registration
Warning
Warns when subscriber registration or endpoint mapping is present without matching HTTP or programmatic topic subscribers.
DAPR1616
Incomplete [DaprTopic] configuration
Warning
Warns when [DaprTopic] opts into a feature (like BulkSubscribe = true) without setting its required companion properties (MaxMessagesCount, MaxAwaitDurationMs).
DAPR1617
Ignored [DaprTopic] configuration
Warning
Warns when [DaprTopic] sets a property that is ignored for the selected delivery mode or feature set (e.g., Route or Match on non-HTTP topics).
For a complete reference of all Roslyn analyzers, diagnostic severities, and available automated code fixes across the Dapr .NET SDK, see Dapr source code analyzers and generators.
Best practices
Prefer DeliveryMode.Streaming for background workers, console apps, and services where you want bidirectional streaming and client-side backpressure without hosting an inbound HTTP or gRPC server.
Prefer DeliveryMode.Programmatic for high-throughput gRPC services where the Dapr sidecar pushes events directly into ASP.NET Core gRPC endpoints.
Always handle transient vs permanent errors: Return TopicResponseAction.Retry for transient errors (network timeouts, database locks) and TopicResponseAction.Drop for unrecoverable errors (poison messages, schema violations) to route them to a dead-letter topic.
Inject scoped services: ITopicHandler<TMessage> instances are resolved per message within an isolated IServiceScope, ensuring safe resolution of scoped dependencies like Entity Framework DbContext.
Validate Native AOT explicitly: Generated dispatchers currently use runtime System.Text.Json metadata; test Native AOT and trimming with your target SDK version and message types.
Configuration, options, lifetime management, delivery modes, and advanced features for Dapr.Messaging in .NET
This guide covers advanced configuration, service lifetimes, delivery mode trade-offs, serialization, Native AOT support, and resilience patterns when working with the Dapr.Messaging SDK.
The API coverage on this page targets SDK 1.19.0 or later.
Lifetime management and thread safety
Understanding the lifetime of messaging services ensures optimal performance and prevents socket exhaustion or memory leaks.
Client lifetime (IDaprPublishSubscribeClient)
IDaprPublishSubscribeClient (and its underlying implementation DaprPublishSubscribeClient) manages persistent TCP and gRPC channel resources to communicate with the Dapr sidecar.
Singleton registration: The client is thread-safe and designed to be registered as a Singleton in your dependency injection container.
Connection pooling: Reuses underlying HttpClient and GrpcChannel instances across requests.
Do not create per operation: Avoid instantiating or disposing DaprPublishSubscribeClient per operation. A single shared client should serve your entire application.
// Registers the Dapr Messaging stack, including IDaprPublishSubscribeClient and DaprPublishSubscribeClient as a Singletonbuilder.Services.AddDaprMessaging();
Handler lifetime (ITopicHandler<TMessage>)
When messages are delivered to an ITopicHandler<TMessage>:
Scoped execution: The source-generated dispatcher resolves the topic handler from an isolated IServiceScope on every message delivery.
Constructor injection: Handlers can safely inject transient or scoped dependencies (such as Entity Framework Core DbContext instances, repositories, or tenant context providers).
Automatic disposal: Any disposable dependencies resolved by the handler are automatically disposed when the message handling turn completes.
The SDK uses the standard Microsoft.Extensions.Options pattern. You can configure DaprMessagingOptions in code or bind it directly from IConfiguration.
The API token forwarded in outbound Dapr requests for sidecar authentication.
StreamingReconnectDelay
5 seconds
The delay interval applied before attempting to reconnect a dropped streaming subscription.
JsonSerializerOptions
JsonSerializerDefaults.Web
Options used by the messaging publishing client. Generated subscriber dispatchers currently use their generated default options.
Endpoint and environment precedence
The underlying builder understands the standard Dapr endpoint/port and API-token environment variables.
However, in SDK 1.19.0, AddDaprMessaging applies the nonempty
DaprMessagingOptions.DaprGrpcEndpointafter creating the builder. Its default
http://localhost:50001 therefore overrides the environment-derived gRPC address even when you did not
explicitly configure it.
Bind the correct endpoint when the sidecar uses another port:
An explicitly configured DaprApiToken overrides the builder’s environment-derived token. Do not hard-code
production tokens in source; obtain them from your deployment’s configuration or secret mechanism.
Choosing the right delivery mode
Dapr.Messaging unifies three delivery modes under a single [DaprTopic] attribute. Choose the mode that fits your architectural requirements:
Dimension
Streaming (DeliveryMode.Streaming)
Programmatic (DeliveryMode.Programmatic)
HTTP (DeliveryMode.Http)
Direction
Outbound from App (App dials sidecar via gRPC stream)
Inbound to App (Sidecar dials app’s gRPC server)
Inbound to App (Sidecar dials app’s HTTP port)
Endpoint Required
None
gRPC AppCallback service
HTTP endpoint (/dapr/subscribe)
App Configuration
Works with sidecar alone (no app-port required)
Requires app gRPC port configured on sidecar
Requires app HTTP port configured on sidecar
Backpressure
Client-side buffered queue
Runtime-managed concurrency
Web server / ASP.NET pipeline
Best Used For
Workers, console apps, microservices without inbound listeners
High-throughput gRPC services, low latency
Traditional web APIs, existing HTTP routing setups
Endpoint Registration
None
app.MapDaprMessaging()
app.MapDaprMessaging()
Advanced messaging patterns
Bulk publish and subscribe
Bulk operations allow publishing and consuming multiple events in batches, reducing network round-trips to the sidecar:
Bulk publishing
varorders=newList<Order>{new("101",49.99m,"user1@example.com"),new("102",99.50m,"user2@example.com")};varresponse=awaitpubsubClient.BulkPublishEventAsync("pubsub","orders",orders);foreach(varfailedinresponse.FailedEntries){logger.LogError("Failed to publish order {OrderId}: {Error}",failed.Entry.EventData.Id,failed.ErrorMessage);}
Bulk subscribing
Configure bulk consumption by enabling BulkSubscribe = true on the [DaprTopic] attribute:
[DaprTopic("pubsub", "orders", Delivery = DeliveryMode.Http,
BulkSubscribe = true, MaxMessagesCount = 50, MaxAwaitDurationMs = 500)]publicsealedclassBulkOrderHandler:ITopicHandler<Order>{publicasyncTask<TopicResponseAction>HandleAsync(Ordermessage,TopicContextcontext,CancellationTokencancellationToken){logger.LogInformation("Processing order {OrderId}",message.Id);// Process one message from the runtime-delivered batch.returnTopicResponseAction.Success;}}
Bulk delivery batches messages at the Dapr protocol level, but the current SDK dispatches
each entry to the handler separately. The handler therefore implements ITopicHandler<Order>,
not ITopicHandler<IReadOnlyList<Order>>.
Bulk subscription requires HTTP or programmatic push delivery and app.MapDaprMessaging().
Leaving the default streaming delivery mode would ignore the bulk settings.
Dead-letter topics
Configure a dead-letter topic to capture unprocessable or poison messages:
[DaprTopic("pubsub", "orders", DeadLetterTopic = "orders-poison")]publicsealedclassResilientOrderHandler:ITopicHandler<Order>{publicTask<TopicResponseAction>HandleAsync(Ordermessage,TopicContextcontext,CancellationTokencancellationToken){if(string.IsNullOrEmpty(message.CustomerEmail)){// Dropping routes the message to 'orders-poison' because DeadLetterTopic is configuredreturnTask.FromResult(TopicResponseAction.Drop);}returnTask.FromResult(TopicResponseAction.Success);}}
Working with CloudEvents
You can publish typed CloudEvents and inspect the exposed CloudEvent headers on delivery:
publicTask<TopicResponseAction>HandleAsync(Ordermessage,TopicContextcontext,CancellationTokencancellationToken){if(context.CloudEventisnotnull){varcorrelationId=context.CloudEvent.TraceId;vareventSource=context.CloudEvent.Source;logger.LogInformation("Processing CloudEvent {Id} from {Source}",context.CloudEvent.Id,eventSource);}returnTask.FromResult(TopicResponseAction.Success);}
Native AOT and trimming considerations
The Dapr.Messaging.Generators source generator produces dispatch logic and subscriber
registries at build time, avoiding reflection for handler discovery and registration.
Generated subscriber dispatchers currently deserialize messages with runtime
System.Text.Json metadata. Native AOT and trimming scenarios therefore require
explicit validation with the target SDK version; configuring DaprMessagingOptions.JsonSerializerOptions
does not currently replace the generated subscriber deserializer.
AOT Analyzer warning DAPR1612
If a message type used with ITopicHandler<TMessage> is not included in a source-generated
JsonSerializerContext, analyzer DAPR1612 emits a build warning. The analyzer warning
does not by itself make the generated subscriber deserialization trim-safe.
Resiliency and error handling
Backpressure management in streaming mode
When using DeliveryMode.Streaming or dynamic streaming subscriptions, the SDK queues incoming messages in
application memory. MaximumQueuedMessages is nullable and defaults to an unbounded queue; set a positive
limit to bound client buffering and apply backpressure.
You can tune the queue size and cleanup timeout in DaprSubscriptionOptions:
varoptions=newDaprSubscriptionOptions(newMessageHandlingPolicy(TimeoutDuration:TimeSpan.FromSeconds(15),DefaultResponseAction:TopicResponseAction.Retry)){MaximumQueuedMessages=1000,// Max backlog held in-memoryMaximumCleanupTimeout=TimeSpan.FromSeconds(30),// Max wait to flush ACKs on shutdownErrorHandler=async(exception)=>{// Invoked on sidecar streaming or connection faultslogger.LogError(exception,"Streaming subscription encountered an error");}};
Graceful shutdown
Streaming subscriptions attempt to flush pending acknowledgments within MaximumCleanupTimeout (30 seconds
by default). This is a bounded, best-effort shutdown, not a zero-loss or exactly-once guarantee. Delivery can be
repeated when an acknowledgment is not received, including after processing succeeded. Make handlers idempotent.
Observe background subscription failures
SubscribeAsync returns IAsyncDisposable, but its runtime handle implements IDaprSubscription.
Observe IDaprSubscription.Completion to detect a stream or acknowledgment-loop failure after startup.
ErrorHandler is a notification callback, not a recovery mechanism: the original fault still completes the
subscription exceptionally. If that callback also throws, the completion task reports both failures through
an AggregateException. Recreate a failed dynamic subscription according to an application-owned retry policy.
Generated streaming subscribers use the configured reconnect delay. Do not assume that an arbitrary dynamic
subscription automatically reconnects because generated hosting does.
Existing DaprClient and ASP.NET integrations
DaprClient.PublishEventAsync and BulkPublishEventAsync, as well as Dapr.AspNetCore[Topic],
CloudEvents middleware, and subscription endpoint mapping, remain separate supported API surfaces.
The generated [DaprTopic]/ITopicHandler<T> model does not require a wholesale migration of existing
subscribers. The dedicated publisher uses PublishOptions; the older client uses metadata dictionaries.
Avoid registering duplicate subscriptions while migrating a topic.
A seven-part tutorial for publishing and subscribing with the Dapr.Messaging .NET SDK, including unit and integration testing
This tutorial uses the runnable examples in the .NET SDK repository to demonstrate the main capabilities of Dapr.Messaging. Each part includes the implementation pattern and the corresponding unit and integration testing approach.
The examples support .NET 8, .NET 9, .NET 10, or .NET 11 and require Dapr runtime 1.18 or later. The unit tests run without Dapr, Docker, or a message broker. The integration tests use Dapr.Testcontainers to run a real Dapr sidecar and Redis pub/sub component, which is the recommended way to verify delivery behavior in an application.
.NET framework support
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
Tutorial content
Part 1: Publish events: Typed events, CloudEvent metadata, bulk publishing, and raw payloads.
Keep message-handling decisions in ordinary C# handlers so they can be tested directly. The example unit tests construct a TopicContext, invoke HandleAsync, and assert the returned TopicResponseAction for valid, invalid, and transient inputs.
Add integration tests for the infrastructure boundary. The examples create a PubSubHarness, configure the application with the harness’s dynamically assigned Dapr endpoints, publish real events, and wait for observable processing results. Use bounded timeouts, IAsyncLifetime cleanup, and a test log sink rather than sleeps alone when validating asynchronous delivery.
Dapr runtime 1.18 or later for streaming subscriptions
Docker or another container runtime for integration tests
The Dapr.Messaging package
When using the SDK repository directly, the examples reference the local SDK projects. In an application, install the published Dapr.Messaging package instead.
1.15.4.1 - Part 1: Publish events with Dapr.Messaging
Publish typed, bulk, metadata-rich, and raw events with IDaprPublishSubscribeClient
The publishing example introduces IDaprPublishSubscribeClient, the publishing API in Dapr.Messaging.
Register the client
AddDaprMessaging() registers the client with dependency injection:
Inject IDaprPublishSubscribeClient into an endpoint, service, or background worker. The client is intended to be reused rather than created for every message.
The unit tests use Moq to verify that the client receives the expected topic, payload, options, and content type. They do not start Dapr. The integration tests use DaprHarnessBuilder.BuildPubSub(), connect a real client to the harness’s dynamic gRPC and HTTP ports, and verify typed, bulk, and raw publishing against the sidecar and Redis.
Success acknowledges the message, Retry requests redelivery for a transient failure, and Drop rejects an invalid or poison message. The handler also receives TopicContext, which contains the pub/sub name, topic, message ID, headers, and metadata.
Configure the application
builder.Services.AddDaprMessaging();
The source generator discovers the attributed handlers, registers them in DI, and starts the streaming subscriber hosted service. Streaming is application-initiated, so the application does not need an inbound HTTP or gRPC endpoint for delivery. The SDK manages the stream and reconnects when the connection drops.
Test the handler and the stream
Unit tests construct handlers with mocked loggers and a small TopicContext, then assert Success, Retry, and Drop for representative inputs. This keeps validation and acknowledgement logic fast and independent of infrastructure.
The integration test uses DaprTestApplicationBuilder and configures AddDaprMessaging with the harness’s gRPC endpoint. It publishes through the sidecar and waits on a test log sink for successful processing, inventory handling, and dropping an invalid order. This verifies the hosted service and real streaming delivery without requiring an application ingress port.
The example adds an international rule using event.data.destinationCountry != 'US' and a priority-10 catch-all handler for standard domestic shipments. DaprTopicMetadata adds custom key-value data to the generated subscription manifest.
Handle the dead-letter topic
Subscribe to the configured dead-letter topic like any other topic:
[DaprTopic("pubsub", "deadletter-shipments")]publicsealedclassDeadLetterShipmentHandler:ITopicHandler<ShipmentPackage>{publicTask<TopicResponseAction>HandleAsync(ShipmentPackageshipment,TopicContextcontext,CancellationTokencancellationToken){// Record or alert on the rejected message.returnTask.FromResult(TopicResponseAction.Success);}}
Messages can reach the dead-letter topic after a handler returns Drop or after retry delivery is exhausted according to the component configuration.
Test routing decisions
The unit tests invoke each handler directly and cover an express shipment, an invalid weight, an international destination, a standard fallback, and a dead-letter message. These tests prove business decisions without pretending to validate CEL evaluation.
The integration tests are the place to validate the generated subscription manifest, CEL evaluation, priority ordering, and dead-letter forwarding against a real Dapr sidecar and broker.
MaxMessagesCount bounds the batch size and MaxAwaitDurationMs bounds how long Dapr waits before delivering a partial batch. Choose values based on throughput, latency, and broker behavior. The handler remains responsible for the individual message decision.
Inspect response.FailedEntries when bulk publishing because a batch can contain partial failures.
Test batching-related behavior
The unit tests cover valid telemetry and invalid temperature and humidity values. The integration tests publish readings and batches through a real Dapr pub/sub harness to validate the generated bulk subscription configuration and delivery semantics.
In this mode Dapr initiates the gRPC call to the application’s AppCallback service. Unlike streaming subscriptions, the app must expose a reachable gRPC port.
MapDaprMessaging() exposes the generated AppCallback gRPC service used by the sidecar
to list subscriptions and deliver events. Run the application with an app port and gRPC
protocol, for example:
The unit tests verify that valid payments succeed and zero or negative amounts are dropped. The integration tests configure the test application with a gRPC server, start the harness, publish real payments, and observe the handler result. This distinction is important: unit tests validate business rules; integration tests validate AppCallback registration, reachability, and delivery.
The generated mapping exposes GET /dapr/subscribe for Dapr to discover subscriptions and maps POST /api/events/invoices for the topic’s CloudEvents. The route is generated from the Route property; it does not need a separate controller or action.
Inspect the generated manifest with curl http://localhost:5000/dapr/subscribe.
Test HTTP delivery
The unit tests invoke the invoice handler directly for valid, zero, and negative amounts. The integration tests use the test application and a real Dapr sidecar to verify subscription discovery and HTTP push delivery. This lets the test cover route mapping and CloudEvent dispatch without coupling business-rule tests to ASP.NET hosting.
SubscribeAsync returns an async-disposable subscription and an IDaprSubscription.Completion task. A supervisor can await completion, log faults, delay, and open a new subscription. Always dispose the subscription and honor the host cancellation token.
Handle untyped messages safely
Dynamic subscriptions receive TopicMessage, so the handler is responsible for decoding and validating the payload:
Malformed JSON is a permanent input problem and is dropped; transient processing errors should request retry.
Test the supervisor and handler
The unit tests create TopicMessage instances with serialized valid, retry, invalid, and malformed payloads and assert the response action. The integration test registers the worker with DaprTestApplicationBuilder, publishes real tenant events, and waits on a concurrent log sink for processing and drop results. This pattern tests asynchronous background work without relying on arbitrary sleeps.
Overview of the Dapr Distributed Lock building block for .NET
With the Dapr Distributed Lock package, you can create and remove locks on resources to manage exclusivity across
your distributed applications. The DaprDistributedLockClient provides a dedicated client for interacting with Dapr’s
distributed lock API, supporting lock acquisition with automatic release on disposal, configurable timeouts, and
cancellation.
Package guidance
While this capability is implemented in both the Dapr.Client and Dapr.DistributedLock packages, the approach differs
slightly between them. It’s recommended that new
implementations use the Dapr.DistributedLock package.
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
To get started with the Dapr Distributed lock .NET SDK client, install the Dapr.Distributed Lock package from NuGet:
dotnet add package Dapr.DistributedLock
The examples below target SDK 1.19.0 or later and require a configured distributed lock component,
such as a Redis lock store named lockstore. Import Dapr.DistributedLock and
Dapr.DistributedLock.Extensions. This API is experimental (DAPR_DISTRIBUTEDLOCK).
A DaprDistributedLockClient maintains access to networking resources in the form of TCP sockets used to communicate with the Dapr sidecar.
Dependency Injection
The AddDaprDistributedLock() method will register the Dapr client ASP.NET Core dependency injection and is the recommended approach
for using this package. This method accepts an optional options delegate for configuring the DaprDistributedLockClient and a
ServiceLifetime argument, allowing you to specify a different lifetime for the registered services instead of the default Scoped
value.
The following example assumes all default values are acceptable and is sufficient to register the DaprDistributedLockClient:
services.AddDaprDistributedLock();
The optional configuration delegate is used to configure the DaprDistributedLockClient by specifying options on the
DaprDistributedLockBuilder as in the following example:
services.AddSingleton<DefaultOptionsProvider>();services.AddDaprDistributedLock((serviceProvider,clientBuilder)=>{//Inject a service to source a value fromvaroptionsProvider=serviceProvider.GetRequiredService<DefaultOptionsProvider>();varstandardTimeout=optionsProvider.GetStandardTimeout();//Configure the value on the client builderclientBuilder.UseTimeout(standardTimeout);});
Manual Instantiation
Rather than using dependency injection, a DaprDistributedLockClient can also be built using the static client builder.
For best performance, create a single long-lived instance of DaprDistributedLockClient and provide access to that shared instance throughout
your application. DaprDistributedLockClient instances are thread-safe and intended to be shared.
Avoid creating a DaprDistributedLockClient per-operation.
A DaprDistributedLockClient can be configured by invoking methods on the DaprDistributedLockBuilder class before calling .Build()
to create the client. The settings for each DaprDistributedLockClient are separate and cannot be changed after calling .Build().
Clone the SDK repo to try out some examples and get started.
Building Blocks
This part of the .NET SDK allows you to interface with the Distributed Lock API to place and remove locks for managing
resource exclusivity across your distributed applications.
Acquire and automatically release a lock
TryLockAsync makes one acquisition attempt. It returns a LockResponse when acquired and null when
the resource could not be locked. It does not wait until another owner releases the lock.
varowner=Guid.NewGuid().ToString("N");awaitusingvarresourceLock=awaitdaprDistributedLockClient.TryLockAsync("lockstore","orders/42",owner,expiryInSeconds:60,cancellationToken:cancellationToken);if(resourceLockisnull){Console.WriteLine("The resource is already locked; work was not started.");}else{awaitProcessOrderAsync(cancellationToken);}
LockResponse contains StoreName, ResourceId, and LockOwner and implements IAsyncDisposable.
At the end of the scope, disposal attempts to unlock with that identity. It does not expose the unlock
status to the caller. Use explicit unlock when you need to inspect the result, rather than assuming
disposal confirms successful release.
Choose an owner unique to the acquisition attempt, not just a shared app ID. The expiry must be a positive
number of seconds. Ensure protected work finishes before expiry; this client does not renew leases or
provide fencing tokens. Cancellation of the caller does not extend a lease or undo completed work.
Explicit unlock and status
Pass the same component, resource, and owner values to TryUnlockAsync:
usingDapr.DistributedLock.Models;varresult=awaitdaprDistributedLockClient.TryUnlockAsync("lockstore","orders/42",owner,cancellationToken);if(result.Status!=LockStatus.Success){thrownewInvalidOperationException($"Unlock did not succeed: {result.Status}");}
LockStatus
Meaning
Success
The lock was released.
LockDoesNotExist
The lock no longer exists, for example because it expired.
LockBelongsToOthers
The supplied owner does not own this lock.
InternalError
The runtime/component reported an unlock error.
Invalid arguments raise standard argument exceptions. gRPC failures are wrapped in DaprException;
inspect InnerException. A normal acquisition conflict is null, not a transport exception.
Migration from DaprClient
The older DaprClient.Lock returns TryLockResponse with a Success property, whereas
DaprDistributedLockClient.TryLockAsync returns a nullable disposable handle. Likewise, use
TryUnlockAsync rather than DaprClient.Unlock and inspect the dedicated client’s LockStatus.
The two response models are not interchangeable.
1.16.2 - DaprDistributedLockClient usage
Essential tips and advice for using DaprDistributedLockClient
Lifetime management
A DaprDistributedLockClient is a version of the Dapr client that is dedicated to interacting with Dapr’s distributed
lock API. It can be registered alongside a DaprClient and other Dapr clients without issue.
It maintains access to networking resources in the form of TCP sockets used to communicate with the Dapr sidecar runtime.
For best performance, it is recommended that you utilize the dependency injection container mechanisms provided with the
Dapr.DistributedLock package to provide easy access to an injected instance throughout your application. These injected
instances are thread-safe and intended to be used across different types within your application. Registration via
dependency injection can utilize values from an IConfiguration or other injected services in a way that’s impractical
when creating the client from scratch in each of your classes.
If you manually create a DaprDistributedLockClient, use DaprDistributedLockBuilder.
Configuring a DaprDistributedLockClient via DaprDistributedLockBuilder
A DaprDistributedLockClient can be configured by invoking methods on the DaprDistributedLockBuilder class before calling
.Build() to create the client itself. The settings for each DaprDistributedLockClient are separate and cannot be changed
after calling .Build().
vardaprDistributedLockClient=newDaprDistributedLockBuilder().UseDaprApiToken("abc123")// Optionally specify the API token used to authenticate to other Dapr sidecars.Build();
The DaprDistributedLockBuilder contains settings for:
The HTTP endpoint of the Dapr sidecar
The gRPC endpoint of the Dapr sidecar
The JsonSerializerOptions object used to configure JSON serialization
The GrpcChannelOptions object used to configure gRPC
The API token used to authenticate requests to the sidecar
The factory method used to create the HttpClient instance used by the SDK
The timeout used for the HttpClient instance when making requests to the sidecar
The SDK will read the following environment variables to configure the default values:
DAPR_HTTP_ENDPOINT: used to find the HTTP endpoint of the Dapr sidecar, example: https://dapr-api.mycompany.com
DAPR_GRPC_ENDPOINT: used to find the gRPC endpoint of the Dapr sidecar, example: https://dapr-grpc-api.mycompany.com
DAPR_HTTP_PORT: if DAPR_HTTP_ENDPOINT is not set, this is used to find the HTTP local endpoint of the Dapr sidecar
DAPR_GRPC_PORT: if DAPR_GRPC_ENDPOINT is not set, this is used to find the gRPC local endpoint of the Dapr sidecar
DAPR_API_TOKEN: used to set the API token
Configuring gRPC channel options
Dapr’s use of CancellationToken for cancellation relies on the configuration of the gRPC channel options. If you need
to configure these options yourself, make sure to enable the ThrowOperationCanceledOnCancellation setting.
The APIs on DaprDistributedLockClient perform asynchronous operations and accept an optional CancellationToken parameter. This
follows a standard .NET practice for cancellable operations. Note that when cancellation occurs, there is no guarantee that
the remote endpoint stops processing the request, only that the client has stopped waiting for completion.
Cancellation can surface as OperationCanceledException or a DaprException wrapping a gRPC cancellation,
depending on the channel configuration. Inspect the inner exception rather than treating cancellation as a lock conflict.
Configuring DaprDistributedLockClient via dependency injection
Using the built-in extension methods for registering the DaprDistributedLockClient in a dependency injection container can
provide the benefit of registering the long-lived service a single time, centralize complex configuration and improve
performance by ensuring similarly long-lived resources are re-purposed when possible (e.g. HttpClient instances).
There are three overloads available to give the developer the greatest flexibility in configuring the client for their
scenario. Each of these will register the IHttpClientFactory on your behalf if not already registered, and configure
the DaprDistributedLockBuilder to use it when creating the HttpClient instance in order to re-use the same instance as
much as possible and avoid socket exhaustion and other issues.
In the first approach, there’s no configuration done by the developer and the DaprDistributedLockClient is configured with the
default settings.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprDistributedLock();//Registers the `DaprDistributedLockClient` to be injected as neededvarapp=builder.Build();
Sometimes the developer will need to configure the created client using the various configuration options detailed
above. This is done through an overload that passes in the DaprDistributedLockBuilder and exposes methods for configuring
the necessary options.
varbuilder=WebApplication.CreateBuilder(args);builder.Services.AddDaprDistributedLock((_,daprDistributedLockBuilder)=>{//Set the API tokendaprDistributedLockBuilder.UseDaprApiToken("abc123");//Specify a non-standard HTTP endpointdaprDistributedLockBuilder.UseHttpEndpoint("http://dapr.my-company.com");});varapp=builder.Build();
Finally, it’s possible that the developer may need to retrieve information from another service in order to populate
these configuration values. That value may be provided from a DaprClient instance, a vendor-specific SDK or some
local service, but as long as it’s also registered in DI, it can be injected into this configuration operation via the
last overload:
varbuilder=WebApplication.CreateBuilder(args);//Register a fictional service that retrieves secrets from somewherebuilder.Services.AddSingleton<SecretService>();builder.Services.AddDaprDistributedLock((serviceProvider,daprDistributedLockBuilder)=>{//Retrieve an instance of the `SecretService` from the service providervarsecretService=serviceProvider.GetRequiredService<SecretService>();vardaprApiToken=secretService.GetSecret("DaprApiToken").Value;//Configure the `DaprDistributedLockBuilder`daprDistributedLockBuilder.UseDaprApiToken(daprApiToken);});varapp=builder.Build();
1.17 - Developing applications with the Dapr .NET SDK
Deployment integrations with the Dapr .NET SDK
Thinking more than one at a time
Using your favorite IDE or editor to launch an application typically assumes that you only need to run one thing:
the application you’re debugging. However, developing microservices challenges you to think about your local
development process for more than one at a time. A microservices application has multiple services that you might
need running simultaneously, and dependencies (like state stores) to manage.
Adding Dapr to your development process means you need to manage the following concerns:
Each service you want to run
A Dapr sidecar for each service
Dapr component and configuration manifests
Additional dependencies such as state stores
optional: the Dapr placement service for actors
This document assumes that you’re building a production application and want to create a repeatable and robust set of
development practices. The guidance here is generalized, and applies to any .NET server application using
Dapr (including actors).
Managing components
You have two primary methods of storing component definitions for local development with Dapr:
Use the default location (~/.dapr/components)
Use your own location
Creating a folder within your source code repository to store components and configuration will give you a way to
version and share these definitions. The guidance provided here will assume you created a folder next to the
application source code to store these files.
Development options
Choose one of these approaches to learn about tools you can use in local development scenarios. It’s suggested that
you familiarize yourself with each of them to get a sense of the options provided by the .NET SDK.
Developing with the Dapr CLI: run each service and its sidecar with dapr run, the lightest-weight approach for getting started.
Developing with .NET Aspire: integrate Dapr sidecars into an Aspire AppHost using the CommunityToolkit.Aspire.Hosting.Dapr package and WithDaprSidecar().
The Dapr CLI provides you with a good base to work from by initializing a local redis container, zipkin container, the placement service, and component manifests for redis. This will enable you to work with the following building blocks on a fresh install with no additional setup:
You can run .NET services with dapr run as your strategy for developing locally. Plan on running one of these commands per-service in order to launch your application.
Pro: this is easy to set up since its part of the default Dapr installation
Con: this uses long-running docker containers on your machine, which might not be desirable
Con: the scalability of this approach is poor since it requires running a separate command per-service
Using the Dapr CLI
For each service you need to choose:
A unique app-id for addressing (app-id)
A unique listening port for HTTP (port)
You also should have decided on where you are storing components (components-path).
The following command can be run from multiple terminals to launch each service, with the respective values substituted.
dapr run --app-id <app-id> --app-port <port> --components-path <components-path> -- dotnet run -p <project> --urls http://localhost:<port>
Explanation: this command will use dapr run to launch each service and its sidecar. The first half of the command (before --) passes required configuration to the Dapr CLI. The second half of the command (after --) passes required configuration to the dotnet run command.
💡 Ports
Since you need to configure a unique port for each service, you can use this command to pass that port value to both Dapr and the service. --urls http://localhost:<port> will configure ASP.NET Core to listen for traffic on the provided port. Using configuration at the commandline is a more flexible approach than hardcoding a listening port elsewhere.
If any of your services do not accept HTTP traffic, then modify the command above by removing the --app-port and --urls arguments.
Next steps
If you need to debug, then use the attach feature of your debugger to attach to one of the running processes.
If you want to scale up this approach, then consider building a script which automates this process for your whole application.
1.17.2 - Dapr .NET SDK Development with Docker-Compose
docker-compose is a CLI tool included with Docker Desktop that you can use to run multiple containers at a time. It is a way to automate the lifecycle of multiple containers together, and offers a development experience similar to a production environment for applications targeting Kubernetes.
Pro: Since docker-compose manages containers for you, you can make dependencies part of the application definition and stop the long-running containers on your machine.
Con: most investment required, services need to be containerized to get started.
Con: can be difficult to debug and troubleshoot if you are unfamilar with Docker.
Using docker-compose
From the .NET perspective, there is no specialized guidance needed for docker-compose with Dapr. docker-compose runs containers, and once your service is in a container, configuring it similar to any other programming technology.
💡 App Port
In a container, an ASP.NET Core app will listen on port 80 by default. Remember this for when you need to configure the --app-port later.
To summarize the approach:
Create a Dockerfile for each service
Create a docker-compose.yaml and place check it in to the source code repository
Similar to running locally with dapr run for each service you need to choose a unique app-id. Choosing the container name as the app-id will make this simple to remember.
The compose file will contain at a minimum:
A network that the containers use to communicate
Each service’s container
A <service>-daprd sidecar container with the service’s port and app-id specified
Additional dependencies that run in containers (redis for example)
optional: Dapr placement container (for actors)
You can also view a larger example from the eShopOnContainers sample application.
1.17.3 - Dapr .NET SDK Development with .NET Aspire
Learn about local development with .NET Aspire
.NET Aspire
.NET Aspire is a development tool
designed to make it easier to include external software into .NET applications by providing a framework that allows
third-party services to be readily integrated, observed and provisioned alongside your own software.
Aspire simplifies local development by providing rich integration with popular IDEs including
Microsoft Visual Studio,
Visual Studio Code,
JetBrains Rider and others
to launch your application with the debugger while automatically launching and provisioning access to other
integrations as well, including Dapr.
While Aspire also assists with deployment of your application to various cloud hosts like Microsoft Azure and
Amazon AWS, deployment is currently outside the scope of this guide. More information can be found in Aspire’s
documentation here.
An end-to-end demonstration featuring the following and demonstrating service invocation between multiple Dapr-enabled
services can be found here.
Prerequisites
The Dapr .NET SDK supports .NET 8,
.NET 9,
.NET 10, and
.NET 11. Use a .NET Aspire version that supports the runtime you choose.
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
We’ll start by creating a brand new .NET application. Open your preferred CLI and navigate to the directory you wish
to create your new .NET solution within. Start by using the following command to install a template that will create
an empty Aspire application:
dotnet new install Aspire.ProjectTemplates
Once that’s installed, proceed to create an empty .NET Aspire application in your current directory. The -n argument
allows you to specify the name of the output solution. If it’s excluded, the .NET CLI will instead use the name
of the output directory, e.g. C:\source\aspiredemo will result in the solution being named aspiredemo. The rest
of this tutorial will assume a solution named aspiredemo.
dotnet new aspire -n aspiredemo
This will create two Aspire-specific directories and one file in your directory:
aspiredemo.AppHost/ contains the Aspire orchestration project that is used to configure each of the integrations
used in your application(s).
aspiredemo.ServiceDefaults/ contains a collection of extensions meant to be shared across your solution to aid in
resilience, service discovery and telemetry capabilities offered by Aspire (these are distinct from the capabilities
offered in Dapr itself).
aspiredemo.sln is the file that maintains the layout of your current solution
We’ll next create twp projects that’ll serve as our Dapr application and demonstrate Dapr functionality. From the same
directory, use the following to create an empty ASP.NET Core project called FrontEndApp and another called
‘BackEndApp’. Either one will be created relative to your current directory in
FrontEndApp\FrontEndApp.csproj and BackEndApp\BackEndApp.csproj, respectively.
dotnet new web --name FrontEndApp
Next we’ll configure the AppHost project to add the necessary package to support local Dapr development. Navigate
into the AppHost directory with the following and install the CommunityToolkit.Aspire.Hosting.Dapr package from NuGet into the project.
We’ll also add a reference to our FrontEndApp project so we can reference it during the registration process.
This package was previously called Aspire.Hosting.Dapr, which has been marked as deprecated.
Next, we need to configure Dapr as a resource to be loaded alongside your project. Open the Program.cs file in that
project within your preferred IDE. It should look similar to the following:
If you’re familiar with the dependency injection approach used in ASP.NET Core projects or others utilizing the
Microsoft.Extensions.DependencyInjection functionality, you’ll find that this will be a familiar experience.
Because we’ve already added a project reference to MyApp, we need to start by adding a reference in this configuration
as well. Add the following before the builder.Build().Run() line:
Because the project reference has been added to this solution, your project shows up as a type within the Projects.
namespace for our purposes here. The name of the variable you assign the project to doesn’t much matter in this tutorial
but would be used if you wanted to create a reference between this project and another using Aspire’s service discovery
functionality.
Adding .WithDaprSidecar() configures Dapr as a .NET Aspire resource so that when the project runs, the sidecar will be
deployed alongside your application. This accepts a number of different options and could optionally be configured as in
the following example:
DaprSidecarOptionssidecarOptions=new(){AppId="how-dapr-identifies-your-app",AppPort=8080,//Note that this argument is required if you intend to configure pubsub, actors or workflows as of Aspire v9.0 DaprGrpcPort=50001,DaprHttpPort=3500,MetricsPort=9090};builder.AddProject<Projects.BackEndApp>("be").WithReference(myApp).WithDaprSidecar(sidecarOptions);
As indicated in the example above, as of .NET Aspire 9.0, if you intend to use any functionality in which Dapr needs to
call into your application such as pubsub, actors or workflows, you will need to specify your AppPort as
a configured option as Aspire will not automatically pass it to Dapr at runtime. It’s expected that this behavior will
change in a future release as a fix has been merged and can be tracked here.
Finally, let’s add an endpoint to the back-end app that we can invoke using Dapr’s service invocation to display to a
page to demonstrate that Dapr is working as expected.
When you open the solution in your IDE, ensure that the aspiredemo.AppHost is configured as your startup project, but
when you launch it in a debug configuration, you’ll note that your integrated console should reflect your expected Dapr
logs and it will be available to your application.
1.18 - Best Practices for the Dapr .NET SDK
Using Dapr .NET SDK effectively
Building with confidence
The Dapr .NET SDK offers a rich set of capabilities for building distributed applications. This section provides
practical guidance for using the SDK effectively in production scenarios—focusing on reliability, maintainability, and
developer experience.
Topics covered include:
Error handling strategies across Dapr building blocks
Managing experimental features and suppressing related warnings
Leveraging source analyzers and generators to reduce boilerplate and catch issues early
Running integration tests with Dapr.Testcontainers
General .NET development practices in Dapr-based applications
Error model guidance
Dapr operations can fail for many reasons—network issues, misconfigured components, or transient faults. The SDK
provides structured error types to help you distinguish between retryable and fatal errors.
Learn how to use DaprException and its derived types effectively here.
Experimental attributes
Some SDK features are marked as experimental and may change in future releases. These are annotated with
[Experimental] and generate build-time warnings by default. You can:
Suppress warnings selectively using #pragma warning disable
Use SuppressMessage attributes for finer control
Track experimental usage across your codebase
Learn more about our use of the [Experimenta] attribute here.
Source tooling
The SDK includes Roslyn-based analyzers and source generators to help you write better code with less effort. These tools:
Warn about common misuses of the SDK
Generate boilerplate for actor registration and invocation
Support IDE integration for faster feedback
Read more about how to install and use these analyzers here.
Additional guidance
This section is designed to support a wide range of development scenarios. As your applications grow in complexity, you’ll find increasingly relevant practices and patterns for working with Dapr in .NET—from actor lifecycle management to configuration strategies and performance tuning.
Learn how to run integration tests with Dapr.Testcontainershere.
1.18.1 - Error Model in the Dapr .NET SDK
Learn how to use the richer error model in the .NET SDK.
The Dapr .NET SDK supports the richer error model, implemented by the Dapr runtime. This model provides a way for applications to enrich their errors with added context,
allowing consumers of the application to better understand the issue and resolve it faster. You can read more about the richer error model here, and you
can find the Dapr proto file implementing these errors here.
The Dapr .NET SDK implements all details supported by the Dapr runtime, implemented in the Dapr.Common.Exceptions namespace, and is accessible through
the DaprException extension method TryGetExtendedErrorInfo. Currently, this detail extraction is only supported for
RpcExceptions where the details are present.
// Example usage of ExtendedErrorInfotry{// Perform some action with the Dapr client that throws a DaprException.}catch(DaprExceptiondaprEx){if(daprEx.TryGetExtendedErrorInfo(outDaprExtendedErrorInfoerrorInfo)){Console.WriteLine(errorInfo.Code);Console.WriteLine(errorInfo.Message);foreach(DaprExtendedErrorDetaildetailinerrorInfo.Details){Console.WriteLine(detail.ErrorType);switch(detail.ErrorType){caseExtendedErrorType.ErrorInfo:Console.WriteLine(detail.Reason);Console.WriteLine(detail.Domain);break;default:Console.WriteLine(detail.TypeUrl);break;}}}}
DaprExtendedErrorInfo
Contains Code (the status code) and Message (the error message) associated with the error, parsed from an inner RpcException.
Also contains a collection of DaprExtendedErrorDetails parsed from the details in the exception.
DaprExtendedErrorDetail
All details implement the abstract DaprExtendedErrorDetail and have an associated DaprExtendedErrorType.
Information notifying the client how long to wait before they should retry. Provides a DaprRetryDelay with the properties
Second (offset in seconds) and Nano (offset in nanoseconds).
DebugInfo
Debugging information offered by the server. Contains StackEntries (a collection of strings containing the stack trace), and
Detail (further debugging information).
QuotaFailure
Information relating to some quota that may have been reached, such as a daily usage limit on an API. It has one property Violations,
a collection of DaprQuotaFailureViolation, which each contain a Subject (the subject of the request) and Description (further information regarding the failure).
PreconditionFailure
Information informing the client that some required precondition was not met. Has one property Violations, a collection of
DaprPreconditionFailureViolation, which each has Subject (subject where the precondition failure occured, e.g. “Azure”),
Type (representation of the precondition type, e.g. “TermsOfService”), and Description (further description e.g. “ToS must be accepted.”).
RequestInfo
Information returned by the server that can be used by the server to identify the client’s request. Contains
RequestId and ServingData properties, RequestId being some string (such as a UID) the server can interpret,
and ServingData being some arbitrary data that made up part of the request.
LocalizedMessage
Contains a localized message, along with the locale of the message. Contains Locale (the locale e.g. “en-US”) and Message (the localized message).
BadRequest
Describes a bad request field. Contains collection of DaprBadRequestDetailFieldViolation, which each has Field (the offending field in request, e.g. ‘first_name’) and
Description (further information detailing the reason, e.g. “first_name cannot contain special characters”).
ErrorInfo
Details the cause of an error. Contains three properties, Reason (the reason for the error, which should take the form of UPPER_SNAKE_CASE, e.g. DAPR_INVALID_KEY),
Domain (domain the error belongs to, e.g. ‘dapr.io’), and Metadata, a key/value-based collection with further information.
Help
Provides resources for the client to perform further research into the issue. Contains a collection of DaprHelpDetailLink,
which provides Url (a url to help or documentation), and Description (a description of what the link provides).
ResourceInfo
Provides information relating to an accessed resource. Provides three properties ResourceType (type of the resource being access e.g. “Azure service bus”),
ResourceName (the name of the resource e.g. “my-configured-service-bus”), Owner (the owner of the resource e.g. “subscriptionowner@dapr.io”),
and Description (further information on the resource relating to the error, e.g. “missing permissions to use this resource”).
Unknown
Returned when the detail type url cannot be mapped to the correct DaprExtendedErrorDetail implementation.
Provides one property TypeUrl (the type url that could not be parsed, e.g. “type.googleapis.com/Google.rpc.UnrecognizedType”).
1.18.2 - Experimental Attributes
Learn about why we mark some methods with the [Experimental] attribute
Experimental Attributes
Introduction to Experimental Attributes
With the release of .NET 8, C# 12 introduced the [Experimental] attribute, which provides a standardized way to mark
APIs that are still in development or experimental. This attribute is defined in the System.Diagnostics.CodeAnalysis
namespace and requires a diagnostic ID parameter used to generate compiler warnings when the experimental API
is used.
.NET framework support
Be advised that .NET 8 and .NET 9 reach end of support in November 2026. Support for both will be dropped
in Dapr v1.20; only .NET 10 and .NET 11 will be supported through the end of 2027.
In the Dapr .NET SDK, we now use the [Experimental] attribute instead of [Obsolete] to mark building blocks and
components that have not yet passed the stable lifecycle certification. This approach provides a clearer distinction
between:
Experimental APIs - Features that are available but still evolving and have not yet been certified as stable
according to the Dapr Component Certification Lifecycle.
Obsolete APIs - Features that are truly deprecated and will be removed in a future release.
Usage in the Dapr .NET SDK
In the Dapr .NET SDK, we apply the [Experimental] attribute at the class level for building blocks that are still in
the Alpha or Beta stages of the Component Certification Lifecycle.
The attribute includes:
A diagnostic ID that identifies the experimental building block
A URL that points to the relevant documentation for that block
The diagnostic IDs follow a naming convention of DAPR_[BUILDING_BLOCK_NAME], such as:
DAPR_CONVERSATION - For the Conversation building block
DAPR_CRYPTOGRAPHY - For the Cryptography building block
DAPR_DISTRIBUTEDLOCK - For the Distributed Lock building block
Suppressing Experimental Warnings
When you use APIs marked with the [Experimental] attribute, the compiler will generate errors.
To build your solution without marking your own code as experimental, you will need to suppress these errors. Here are
several approaches to do this:
Option 1: Using #pragma directive
You can use the #pragma warning directive to suppress the warning for specific sections of code:
// Disable experimental warning #pragmawarningdisableDAPR_CRYPTOGRAPHY// Your code using the experimental API varclient=newDaprEncryptionClient();// Re-enable the warning #pragmawarningrestoreDAPR_CRYPTOGRAPHY
This approach is useful when you want to suppress warnings only for specific sections of your code.
Option 2: Project-level suppression
To suppress warnings for an entire project, add the following to your .csproj file.
file.
This file should be placed in the root directory of your test projects. You can learn more about using
Directory.Build.props files in the
MSBuild documentation.
Lifecycle of Experimental APIs
As building blocks move through the certification lifecycle and reach the “Stable” stage, the [Experimental] attribute will be removed. No migration or code changes will be required from users when this happens, except for the removal of any warning suppressions if they were added.
Conversely, the [Obsolete] attribute will now be reserved exclusively for APIs that are truly deprecated and scheduled for removal. When you see a method or class marked with [Obsolete], you should plan to migrate away from it according to the migration guidance provided in the attribute message.
Best Practices
In application code:
Be cautious when using experimental APIs, as they may change in future releases
Consider isolating usage of experimental APIs to make future updates easier
Document your use of experimental APIs for team awareness
In test code:
Use project-level suppression to avoid cluttering test code with warning suppressions
Regularly review which experimental APIs you’re using and check if they’ve been stabilized
When contributing to the SDK:
Use [Experimental] for new building blocks that haven’t completed certification
Use [Obsolete] only for truly deprecated APIs
Provide clear documentation links in the UrlFormat parameter
1.18.3 - Integration testing with Dapr.Testcontainers
Use Dapr.Testcontainers to run Dapr integration tests with real infrastructure
Overview
Dapr.Testcontainers is a helper package for writing integration tests against real Dapr runtime components using
containers. It wraps the Testcontainers library to spin up Dapr sidecars, control plane services (placement and
scheduler), and the infrastructure needed by specific Dapr building blocks.
Important
Dapr.Testcontainers is an initial release. The API is still evolving and may change in future versions. We aim to
keep changes minimal, but you should expect potential breaking changes while the package matures.
Packages
Dapr.Testcontainers (core harnesses and infrastructure)
A container runtime (Docker Desktop, Podman, or equivalent).
Network access to pull Dapr and dependency images.
Core concepts
Dapr.Testcontainers models tests around environments and harnesses:
DaprTestEnvironment: Shared infrastructure (network, placement, scheduler, optional Redis). Use this when you
need multiple apps to share a Dapr control plane or when running multi-app tests.
DaprHarnessBuilder: Creates a harness for a specific building block (workflow, jobs, distributed locks, or
conversation).
DaprTestApplicationBuilder: Starts your test app with the harness and wires Dapr endpoints into configuration.
Basic workflow test example
The example below mirrors the workflow integration tests in the .NET SDK test suite and shows a typical setup:
Review the integration test projects in the Dapr .NET SDK repo (for example,
test/Dapr.IntegrationTest.Workflow).
Use the harness that matches the building block you are testing (workflow, jobs, distributed locks, conversation).
1.18.4 - Dapr source code analyzers and generators
Code analyzers and fixes for common Dapr issues
Dapr supports a growing collection of optional Roslyn analyzers and code fix providers that inspect your code for
code quality issues. Starting with the release of v1.16, developers have the opportunity to install additional projects
from NuGet alongside each of the standard capability packages to enable these analyzers in their solutions.
Note
A future release of the Dapr .NET SDK will include these analyzers by default without requiring a separate package
install.
Rule violations will typically be marked as Info or Warning so that if the analyzer identifies an issue, it won’t
necessarily break builds. All code analysis violations appear with the prefix “DAPR” and are uniquely distinguished
by a number following this prefix.
Note
At this time, the first two digits of the diagnostic identifier map one-to-one to distinct Dapr packages, but this
is subject to change in the future as more analyzers are developed.
Install and configure analyzers
The following packages provide Roslyn analyzers:
Dapr.Actors.Analyzers
Dapr.Jobs.Analyzers
Dapr.Messaging.Analyzers (bundled automatically in Dapr.Messaging)
Dapr.Workflow.Analyzers
Install each NuGet package on every project where you want the analyzers to run. For meta-packages like Dapr.Messaging or Dapr.Actors.Next, the analyzers and source generators are included automatically with the package. The package will be installed as a
project dependency and analyzers will run as you write your code or as part of a CI/CD build. The analyzers will flag
issues in your existing code and warn you about new issues as you build your project.
Many of our analyzers have associated code fixes that can be applied to automatically correct the problem. If your IDE
supports this capability, any available code fixes will show up as an inline menu option in your code.
Further, most of our analyzers should also report a specific line and column number in your code of the syntax that’s
been identified as a key aspect of the rule. If your IDE supports it, double clicking any of the analyzer warnings
should jump directly to the part of your code responsible for the violating the analyzer’s rule.
Suppress specific analyzers
If you wish to keep an analyzer from firing against some particular piece of your project, their outputs can be
individually targeted for suppression through a number of ways. Read more about suppressing analyzers in projects
or files in the associated .NET documentation.
Disable all analyzers
If you wish to disable all analyzers in your project without removing any packages providing them, set
the EnableNETAnalyzers property to false in your csproj file.
Available Analyzers
Diagnostic ID
Dapr Package
Category
Severity
Version Added
Description
Code Fix Available
DAPR1001
Dapr.Common
Compatibility
Warning
1.18
API requires a newer Dapr runtime than the configured target.
No
DAPR1002
Dapr.Common
Compatibility
Warning
1.18
Unable to parse the Configured Dapr runtime target version
No
DAPR1003
Dapr.Common
Compatibility
Warning
1.18
Unable to parse the minimum Dapr runtime version declared on an API
No
DAPR1301
Dapr.Workflow
Usage
Warning
1.16
The workflow type is not registered with the dependency injection provider. Note: Not applied when Dapr.Workflow.Versioning installed.
Yes
DAPR1302
Dapr.Workflow
Usage
Warning
1.16
The workflow activity type is not registered with the dependency injection provider
Yes
DAPR1401
Dapr.Actors
Usage
Warning
1.16
Actor timer method invocations require the named callback method to exist on type
No
DAPR1402
Dapr.Actors
Usage
Warning
1.16
The actor type is not registered with dependency injection
Yes
DAPR1403
Dapr.Actors
Interoperability
Info
1.16
Set options.UseJsonSerialization to true to support interoperability with non-.NET actors
Yes
DAPR1404
Dapr.Actors
Usage
Warning
1.16
Call app.MapActorsHandlers to map endpoints for Dapr actors
Yes
DAPR1410
Dapr.Actors.Next
Compatibility
Warning
1.18
Actor state shape change breaks shipped serialization
Yes
DAPR1411
Dapr.Actors.Next
Concurrency
Warning
1.18
Actor turn must not escape the scheduler
Yes
DAPR1412
Dapr.Actors.Next
Concurrency
Warning
1.18
Actor turn must not block
Yes
DAPR1413
Dapr.Actors.Next
Determinism
Warning
1.18
Actor turn must use TimeProvider
Yes
DAPR1414
Dapr.Actors.Next
Determinism
Warning
1.18
Actor turn must use a scheduler-aware seeded source
Yes
DAPR1415
Dapr.Actors.Next
Compatibility
Warning
1.18
Actor state migration target is unreachable
Yes
DAPR1416
Dapr.Actors.Next
Design
Info
1.18
Actor turn filter should stay cross-cutting
Yes
DAPR1417
Dapr.Actors.Next
Usage
Warning
1.18
Actor interface method must return an asynchronous type
No
DAPR1418
Dapr.Actors.Next
Compatibility
Warning
1.18
Actor interface change breaks shipped wire contract
Yes
DAPR1419
Dapr.Actors.Next
Concurrency
Warning
1.18
Actor field should not hold mutable shared state
No
DAPR1420
Dapr.Actors.Next
Usage
Warning
1.18
Actor type name must disambiguate shared actor contracts
No
DAPR1421
Dapr.Actors.Next
Usage
Warning
1.18
Actor implementation must expose a generated client contract
Yes
DAPR1423
Dapr.Actors.Next
Compatibility
Warning
1.18
Actor state type is not connected to its migration family
Yes
DAPR1424
Dapr.Actors.Next
Compatibility
Warning
1.18
Actor state migration chain has a gap
No
DAPR1425
Dapr.Actors.Next
Compatibility
Warning
1.18
Actor state migration step requires an upcaster
Yes
DAPR1426
Dapr.Actors.Next
Compatibility
Warning
1.18
Actor state migration fold path is ambiguous
No
DAPR1427
Dapr.Actors.Next
Usage
Warning
1.18
Actor state name maps to multiple migration families
No
DAPR1428
Dapr.Actors.Next
Usage
Info
1.18
Actor state usage should target the latest state version
No
DAPR1429
Dapr.Actors.Next
Usage
Error
1.18
Scheduled actor reminder/timer callback does not match a dispatchable actor method
Yes
DAPR1430
Dapr.Actors.Next
Usage
Warning
1.18
Scheduled actor reminder/timer targets an actor type not found in this application
No
DAPR1431
Dapr.Actors.Next
Usage
Error
1.18
Scheduled actor reminder/timer callback method is not exposed through a generated actor client
No
DAPR1501
Dapr.Jobs
Usage
Warning
1.16
Job invocations require the MapDaprScheduledJobHandler to be set and configured for each anticipated job on IEndpointRouteBuilder
No
DAPR1610
Dapr.Messaging
Usage
Warning
1.18
Topic registered for both Streaming and Programmatic delivery modes
No
DAPR1611
Dapr.Messaging
Usage
Error
1.18
[DaprTopic] applied to a class that does not implement ITopicHandler or ITopicHandler<T, TResult>
No
DAPR1612
Dapr.Messaging
Compatibility
Warning
1.18
Message type is not registered in a source-generated JsonSerializerContext for Native AOT compatibility
No
DAPR1613
Dapr.Messaging
Usage
Warning
1.18
Programmatic topic subscriptions require app.MapDaprAppCallback() or the unified app.MapDaprMessaging() endpoint mapping
Yes
DAPR1614
Dapr.Messaging
Usage
Warning
1.18
DaprMessagingRegistration is called directly instead of using generated services.AddDaprMessaging()
No
DAPR1615
Dapr.Messaging
Usage
Warning
1.18
Subscriber registration or endpoint mapping is present without matching topic subscribers
No
DAPR1616
Dapr.Messaging
Usage
Warning
1.18
[DaprTopic] opts into a feature without populating required companion properties
No
DAPR1617
Dapr.Messaging
Usage
Warning
1.18
[DaprTopic] sets a property that is ignored for the selected feature or delivery mode
No
Analyzer Categories
The following are each of the eligible categories that an analyzer can be assigned to and are modeled after the
standard categories used by the .NET analyzers:
Design
Documentation
Globalization
Interoperability
Maintainability
Naming
Performance
Reliability
Security
Usage
Compatibility
1.19 - How to troubleshoot and debug with the Dapr .NET SDK
Tips, tricks, and guides for troubleshooting and debugging with the Dapr .NET SDKs
1.19.1 - Troubleshoot Pub/Sub with the .NET SDK
Troubleshoot Pub/Sub with the .NET SDK
The most common problem with pub/sub is that the pub/sub endpoint in your application is not being called.
There are a few layers to this problem with different solutions:
The application is not receiving any traffic from Dapr
The application is not registering pub/sub endpoints with Dapr
The pub/sub endpoints are registered with Dapr, but the request is not reaching the desired endpoint
Step 1: Turn up the logs
This is important. Future steps will depend on your ability to see logging output. ASP.NET Core logs almost nothing with the default log settings, so you will need to change it.
Adjust the logging verbosity to include Information logging for ASP.NET Core as described here. Set the Microsoft key to Information.
Step 2: Verify you can receive traffic from Dapr
Start the application as you would normally (dapr run ...). Make sure that you’re including an --app-port argument in the commandline. Dapr needs to know that your application is listening for traffic. By default an ASP.NET Core application will listen for HTTP on port 5000 in local development.
Wait for Dapr to finish starting
Examine the logs
You should see a log entry like:
info: Microsoft.AspNetCore.Hosting.Diagnostics[1]
Request starting HTTP/1.1 GET http://localhost:5000/.....
During initialization Dapr will make some requests to your application for configuration. If you can’t find these then it means that something has gone wrong. Please ask for help either via an issue or in Discord (include the logs). If you see requests made to your application, then continue to step 3.
Step 3: Verify endpoint registration
Start the application as you would normally (dapr run ...).
Use curl at the command line (or another HTTP testing tool) to access the /dapr/subscribe endpoint.
Here’s an example command assuming your application’s listening port is 5000:
curl http://localhost:5000/dapr/subscribe -v
For a correctly configured application the output should look like the following:
* Trying ::1...
* TCP_NODELAY set
* Connected to localhost (::1) port 5000 (#0)
> GET /dapr/subscribe HTTP/1.1
> Host: localhost:5000
> User-Agent: curl/7.64.1
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Fri, 15 Jan 2021 22:31:40 GMT
< Content-Type: application/json
< Server: Kestrel
< Transfer-Encoding: chunked
<
* Connection #0 to host localhost left intact
[{"topic":"deposit","route":"deposit","pubsubName":"pubsub"},{"topic":"withdraw","route":"withdraw","pubsubName":"pubsub"}]* Closing connection 0
Pay particular attention to the HTTP status code, and the JSON output.
< HTTP/1.1 200 OK
A 200 status code indicates success.
The JSON blob that’s included near the end is the output of /dapr/subscribe that’s processed by the Dapr runtime. In this case it’s using the ControllerSample in this repo - so this is an example of correct output.
With the output of this command in hand, you are ready to diagnose a problem or move on to the next step.
Option 0: The response was a 200 included some pub/sub entries
If you have entries in the JSON output from this test then the problem lies elsewhere, move on to step 4.
Option 1: The response was not a 200, or didn’t contain JSON
If the response was not a 200 or did not contain JSON, then the MapSubscribeHandler() endpoint was not reached.
Make sure you have some code like the following in Startup.cs and repeat the test.
app.UseRouting();app.UseCloudEvents();app.UseEndpoints(endpoints=>{endpoints.MapSubscribeHandler();// This is the Dapr subscribe handlerendpoints.MapControllers();});
If adding the subscribe handler did not resolve the problem, please open an issue on this repo and include the contents of your Startup.cs file.
Option 2: The response contained JSON but it was empty (like [])
If the JSON output was an empty array (like []) then the subscribe handler is registered, but no topic endpoints were registered.
If you’re using a controller for pub/sub you should have a method like:
[Topic("pubsub", "deposit")][HttpPost("deposit")]publicasyncTask<ActionResult>Deposit(...)// Using Pub/Sub routing[Topic("pubsub", "transactions", "event.type == \"withdraw.v2\"", 1)][HttpPost("withdraw")]publicasyncTask<ActionResult>Withdraw(...)
In this example the Topic and HttpPost attributes are required, but other details might be different.
If you’re using routing for pub/sub you should have an endpoint like:
In this example the call to WithTopic(...) is required but other details might be different.
After correcting this code and re-testing if the JSON output is still the empty array (like []) then please open an issue on this repository and include the contents of Startup.cs and your pub/sub endpoint.
Step 4: Verify endpoint reachability
In this step we’ll verify that the entries registered with pub/sub are reachable. The last step should have left you with some JSON output like the following:
If after doing this you still don’t understand the problem please open an issue on this repo and include the contents of your Startup.cs.
Option 1: Routing did not execute
If you don’t see an entry for Microsoft.AspNetCore.Routing.EndpointMiddleware in the logs, then it means that the request was handled by something other than routing. Usually the problem in this case is a misbehaving middleware. Other logs from the request might give you a clue to what’s happening.
If you need help understanding the problem please open an issue on this repo and include the contents of your Startup.cs.
Option 2: Routing chose the wrong endpoint
If you see an entry for Microsoft.AspNetCore.Routing.EndpointMiddleware in the logs, but it contains the wrong endpoint then it means that you’ve got a routing conflict. The endpoint that was chosen will appear in the logs so that should give you an idea of what’s causing the conflict.
If you need help understanding the problem please open an issue on this repo and include the contents of your Startup.cs.
2 - Dapr Go SDK
Go SDK packages for developing Dapr applications
A client library to help build Dapr applications in Go. This client supports all public Dapr APIs while focusing on idiomatic Go experiences and developer productivity.
Client
Use the Go Client SDK for invoking public Dapr APIs
Workflows and their activities can be authored and managed using the Dapr Go SDK like so:
import("context""fmt""log""github.com/dapr/durabletask-go/workflow"dapr"github.com/dapr/go-sdk/client")funcExampleWorkflow(ctx*workflow.WorkflowContext)(any,error){varoutputstringinput:="world"iferr:=ctx.CallActivity(ExampleActivity,workflow.WithActivityInput(input)).Await(&output);err!=nil{returnnil,err}// Print output - "hello world"fmt.Println(output)returnnil,nil}funcExampleActivity(ctxworkflow.ActivityContext)(any,error){varinputintiferr:=ctx.GetInput(&input);err!=nil{return"",err}returnfmt.Sprintf("hello %s",input),nil}funcmain(){r:=workflow.NewRegistry()// Register the workflowr.AddWorkflow(ExampleWorkflow)// Register the activityr.AddActivity(ExampleActivity)client,err:=dapr.NewWorkflowClient()iferr!=nil{log.Fatal(err)}ctx,cancel:=context.WithCancel(context.Background())defercancel()iferr:=client.StartWorker(ctx,r);err!=nil{log.Fatal(err)}// Start a new workflowid,err:=client.ScheduleWorkflow(ctx,"ExampleWorkflow")iferr!=nil{log.Fatal(err)}// Wait for the workflow to completemetadata,err:=client.WaitForWorkflowCompletion(ctx,id)iferr!=nil{log.Fatal(err)}// Print workflow status post-completionfmt.Println(metadata.String())}
Managing workflows
The workflow client returned by dapr.NewWorkflowClient() also exposes the
management operations: SuspendWorkflow, ResumeWorkflow, TerminateWorkflow,
PurgeWorkflowState, RaiseEvent and FetchWorkflowMetadata, plus the advanced
operations below.
Listing workflow instances
ListInstanceIDs returns the workflow instance IDs belonging to the app. Results
are paginated: the page size is an upper bound on how many IDs a page carries, and
you keep calling with the continuation token from the previous response until it
comes back nil.
This requires a state store with actor support that can list keys.
Reading a workflow’s history
GetInstanceHistory returns the full execution history of an instance, which is
useful for auditing a run or for finding an event to rerun from.
hist,err:=client.GetInstanceHistory(ctx,id)iferr!=nil{log.Fatal(err)}varrerunFromuint32for_,event:=rangehist.Events{ifts:=event.GetTaskScheduled();ts!=nil{fmt.Printf("event %d scheduled activity %s\n",event.GetEventId(),ts.GetName())// History event IDs are int32 and some event types carry -1, while// RerunWorkflowFromEvent takes a uint32, so narrow before reusing it.ifid:=event.GetEventId();id>=0{rerunFrom=uint32(id)}}}
The call returns NotFound if the instance does not exist or its state has been
purged.
Rerunning a workflow from an event
RerunWorkflowFromEvent reruns (“rewinds”) a completed workflow from one of its
history events into a new instance. The source instance is left untouched.
Work that had already completed and been recorded before the target event is
replayed from history rather than executed again. Everything else from before the
target event is re-executed in the new instance: activities that were still
in flight, timers that had not fired, and child workflows that had not finished.
Note that in a parallel workflow this includes an activity that succeeded but
whose completion was recorded after the target event — so a fan-out reruns more
than you might expect. Plan for re-execution if your activities are not
idempotent.
The source instance must be in a terminal state. Rerunning a running instance
fails with InvalidArgument.
The source cannot itself be a child workflow — that also fails with
InvalidArgument.
Only three event types can be rerun: TaskScheduled (a scheduled activity),
TimerCreated and ChildWorkflowInstanceCreated. Any other event is rejected
with NotFound.
eventID is the event’s own ID, not its index in the history slice.
WithRerunInput replaces the input of the target event only. It is invalid on
a timer event.
WithRerunNewChildInstanceID is only valid on a child-workflow event.
If WithRerunNewInstanceID is omitted, the runtime generates a new instance ID.
If it is given, it must differ from the source ID and must not already have
state, otherwise the call fails with InvalidArgument or AlreadyExists.
For a more comprehensive guide on workflows visit these How-To guides:
For simple use-cases, Dapr client provides easy to use Save, Get, Delete methods:
ctx:=context.Background()data:=[]byte("hello")store:="my-store"// defined in the component YAML// save state with the key key1, default options: strong, last-writeiferr:=client.SaveState(ctx,store,"key1",data,nil);err!=nil{panic(err)}// get state for key key1item,err:=client.GetState(ctx,store,"key1",nil)iferr!=nil{panic(err)}fmt.Printf("data [key:%s etag:%s]: %s",item.Key,item.Etag,string(item.Value))// delete state for key key1iferr:=client.DeleteState(ctx,store,"key1",nil);err!=nil{panic(err)}
For more granular control, the Dapr Go client exposes SetStateItem type, which can be use to gain more control over the state operations and allow for multiple items to be saved at once:
You can create workflows using the Go SDK. For example, start with a simple workflow activity:
funcTestActivity(ctxworkflow.ActivityContext)(any,error){varinputintiferr:=ctx.GetInput(&input);err!=nil{return"",err}// Do something herereturn"result",nil}
To wait for the first of several tasks to complete, use ctx.Select. It returns the index of the task that completed first. For example, an approval gate waits for an Approve event, a Reject event or a timeout, whichever comes first:
funcApprovalWorkflow(ctx*workflow.WorkflowContext)(any,error){// A negative timeout waits for the event without a time limitapprove:=ctx.WaitForExternalEvent("Approve",-1)reject:=ctx.WaitForExternalEvent("Reject",-1)timeout:=ctx.CreateTimer(24*time.Hour)winner,err:=ctx.Select(approve,reject,timeout)iferr!=nil{returnnil,err}switchwinner{case0:varapproverstringiferr:=approve.Await(&approver);err!=nil{returnnil,err}return"approved by "+approver,nilcase1:return"rejected",nildefault:return"timed out",nil}}
Without Select, a workflow has to poll each event with short WaitForExternalEvent timeouts, and every poll adds a timer and a history entry. Select itself adds no timers or history entries, so a workflow that waits at a gate does not grow its history. The tasks that lose stay pending, and you can await them or pass them to a later Select. When you select on the same event name in a loop, pass the pending task to the next Select instead of calling WaitForExternalEvent again for that name. Select needs Go SDK v1.16.0 or later, which uses durabletask-go v0.15.0 or later.
The Dapr client Go SDK allows you to schedule, get, and delete jobs. Jobs enable you to schedule work to be executed at specific times or intervals.
Scheduling a Job
To schedule a new job, use the ScheduleJob method:
import("google.golang.org/protobuf/types/known/anypb")// Create job datadata,err:=anypb.New(&YourDataStruct{Message:"Hello, Job!"})iferr!=nil{panic(err)}// Create a simple job using the builder patternjob:=client.NewJob("my-scheduled-job",client.WithJobData(data),client.WithJobDueTime("10s"),// Execute in 10 seconds)// Schedule the joberr=client.ScheduleJob(ctx,job)iferr!=nil{panic(err)}
Job with Schedule and Repeats
You can create recurring jobs using the Schedule field with cron expressions:
job:=client.NewJob("recurring-job",client.WithJobData(data),client.WithJobSchedule("0 9 * * *"),// Run at 9 AM every dayclient.WithJobRepeats(10),// Repeat 10 timesclient.WithJobTTL("1h"),// Job expires after 1 hour)err=client.ScheduleJob(ctx,job)
Job with Failure Policy
Configure how jobs should handle failures using failure policies:
// Constant retry policy with max retries and intervaljob:=client.NewJob("resilient-job",client.WithJobData(data),client.WithJobDueTime("2024-01-01T10:00:00Z"),client.WithJobConstantFailurePolicy(),client.WithJobConstantFailurePolicyMaxRetries(3),client.WithJobConstantFailurePolicyInterval(30*time.Second),)err=client.ScheduleJob(ctx,job)
For jobs that should not be retried on failure, use the drop policy:
// MyActor represents an example actor type.typeMyActorstruct{actors.Actor}// MyActorMethod is a method that can be invoked on MyActor.func(a*MyActor)MyActorMethod(ctxcontext.Context,req*actors.Message)(string,error){log.Printf("Received message: %s",req.Data)return"Hello from MyActor!",nil}funcmain(){// Create a Dapr clientdaprClient,err:=client.NewClient()iferr!=nil{log.Fatal("Error creating Dapr client: ",err)}// Register the actor type with Dapractors.RegisterActor(&MyActor{})// Create an actor clientactorClient:=actors.NewClient(daprClient)// Create an actor IDactorID:=actors.NewActorID("myactor")// Get or create the actorerr=actorClient.SaveActorState(context.Background(),"myactorstore",actorID,map[string]interface{}{"data":"initial state"})iferr!=nil{log.Fatal("Error saving actor state: ",err)}// Invoke a method on the actorresp,err:=actorClient.InvokeActorMethod(context.Background(),"myactorstore",actorID,"MyActorMethod",&actors.Message{Data:[]byte("Hello from client!")})iferr!=nil{log.Fatal("Error invoking actor method: ",err)}log.Printf("Response from actor: %s",resp.Data)// Wait for a few seconds before terminatingtime.Sleep(5*time.Second)// Delete the actorerr=actorClient.DeleteActor(context.Background(),"myactorstore",actorID)iferr!=nil{log.Fatal("Error deleting actor: ",err)}// Close the Dapr clientdaprClient.Close()}
From Go SDK v1.16.0, the app can host actors over gRPC instead of an HTTP callback server. SubscribeActorEvents registers the actor types of the actor runtime with the Dapr sidecar and receives actor method invocations, reminders, timers and deactivations on one bidirectional stream (SubscribeActorEventsAlpha1). It reconnects and registers the actor types again when the stream fails. Use it when the app should not expose HTTP endpoints for actor callbacks. If the sidecar has an app port, run it with --app-protocol grpc: the sidecar rejects the stream when the app channel is HTTP.
// MyActor embeds actor.ServerImplBaseCtx and implements Type().// Register the actor types on the actor runtime, as for HTTP hosting.rt:=runtime.GetActorRuntimeInstanceContext()rt.RegisterActorFactory(func()actor.ServerContext{return&MyActor{}})// Receive the actor callbacks over the actor event stream.stop,err:=daprClient.SubscribeActorEvents(ctx,rt,client.ActorEventSubscriptionOptions{ActorIdleTimeout:time.Hour,})iferr!=nil{log.Fatal("Error subscribing to actor events: ",err)}deferstop()
The Dapr client also provides access to the runtime secrets that can be backed by any number of secrete stores (e.g. Kubernetes Secrets, HashiCorp Vault, or Azure KeyVault):
By default, Dapr relies on the network boundary to limit access to its API. If however the target Dapr API is configured with token-based authentication, users can configure the Go Dapr client with that token in two ways:
Environment Variable
If the DAPR_API_TOKEN environment variable is defined, Dapr will automatically use it to augment its Dapr API invocations to ensure authentication.
Explicit Method
In addition, users can also set the API token explicitly on any Dapr client instance. This approach is helpful in cases when the user code needs to create multiple clients for different Dapr API endpoints.
With the Dapr client Go SDK, you can consume configuration items that are returned as read-only key/value pairs, and subscribe to configuration item changes.
With the Dapr client Go SDK, you can use the high-level Encrypt and Decrypt cryptography APIs to encrypt and decrypt files while working on a stream of data.
To encrypt:
// Encrypt the data using Daprout,err:=client.Encrypt(context.Background(),rf,dapr.EncryptOptions{// These are the 3 required parametersComponentName:"mycryptocomponent",KeyName:"mykey",Algorithm:"RSA",})iferr!=nil{panic(err)}
To decrypt:
// Decrypt the data using Daprout,err:=client.Decrypt(context.Background(),rf,dapr.EncryptOptions{// Only required option is the component nameComponentName:"mycryptocomponent",})
2.2 - Getting started with the Dapr Service (Callback) SDK for Go
How to get up and running with the Dapr Service (Callback) SDK for Go
In addition to this Dapr API client, Dapr Go SDK also provides service package to bootstrap your Dapr callback services. These services can be developed in either gRPC or HTTP:
Once you create a service instance, you can “attach” to that service any number of event, binding, and service invocation logic handlers as shown below. Onces the logic is defined, you are ready to start the service:
The handler method itself can be any method with the expected signature:
funceventHandler(ctxcontext.Context,e*common.TopicEvent)(retrybool,errerror){log.Printf("event - PubsubName:%s, Topic:%s, ID:%s, Data: %v",e.PubsubName,e.Topic,e.ID,e.Data)// do something with the eventreturntrue,nil}
Optionally, you can use routing rules to send messages to different handlers based on the contents of the CloudEvent.
You can also create a custom type that implements the TopicEventSubscriber interface to handle your events:
typeEventHandlerstruct{// any data or references that your event handler needs.}func(h*EventHandler)Handle(ctxcontext.Context,e*common.TopicEvent)(retrybool,errerror){log.Printf("event - PubsubName:%s, Topic:%s, ID:%s, Data: %v",e.PubsubName,e.Topic,e.ID,e.Data)// do something with the eventreturntrue,nil}
The EventHandler can then be added using the AddTopicEventSubscriber method:
sub:=&common.Subscription{PubsubName:"messages",Topic:"topic1",}eventHandler:=&EventHandler{// initialize any fields}iferr:=s.AddTopicEventSubscriber(sub,eventHandler);err!=nil{log.Fatalf("error adding topic subscription: %v",err)}
Service Invocation Handler
To handle service invocations you will need to add at least one service invocation handler before starting the service:
The handler method itself can be any method with the expected signature:
funcechoHandler(ctxcontext.Context,in*common.InvocationEvent)(out*common.Content,errerror){log.Printf("echo - ContentType:%s, Verb:%s, QueryString:%s, %+v",in.ContentType,in.Verb,in.QueryString,string(in.Data))// do something with the invocation here out=&common.Content{Data:in.Data,ContentType:in.ContentType,DataTypeURL:in.DataTypeURL,}return}
The handler method itself can be any method with the expected signature:
funcrunHandler(ctxcontext.Context,in*common.BindingEvent)(out[]byte,errerror){log.Printf("binding - Data:%v, Meta:%v",in.Data,in.Metadata)// do something with the invocation here returnnil,nil}
Once you create a service instance, you can “attach” to that service any number of event, binding, and service invocation logic handlers as shown below. Onces the logic is defined, you are ready to start the service:
The handler method itself can be any method with the expected signature:
funceventHandler(ctxcontext.Context,e*common.TopicEvent)(retrybool,errerror){log.Printf("event - PubsubName:%s, Topic:%s, ID:%s, Data: %v",e.PubsubName,e.Topic,e.ID,e.Data)// do something with the eventreturntrue,nil}
Optionally, you can use routing rules to send messages to different handlers based on the contents of the CloudEvent.
You can also create a custom type that implements the TopicEventSubscriber interface to handle your events:
typeEventHandlerstruct{// any data or references that your event handler needs.}func(h*EventHandler)Handle(ctxcontext.Context,e*common.TopicEvent)(retrybool,errerror){log.Printf("event - PubsubName:%s, Topic:%s, ID:%s, Data: %v",e.PubsubName,e.Topic,e.ID,e.Data)// do something with the eventreturntrue,nil}
The EventHandler can then be added using the AddTopicEventSubscriber method:
sub:=&common.Subscription{PubsubName:"messages",Topic:"topic1",}eventHandler:=&EventHandler{// initialize any fields}iferr:=s.AddTopicEventSubscriber(sub,eventHandler);err!=nil{log.Fatalf("error adding topic subscription: %v",err)}
Service Invocation Handler
To handle service invocations you will need to add at least one service invocation handler before starting the service:
The handler method itself can be any method with the expected signature:
funcechoHandler(ctxcontext.Context,in*common.InvocationEvent)(out*common.Content,errerror){log.Printf("echo - ContentType:%s, Verb:%s, QueryString:%s, %+v",in.ContentType,in.Verb,in.QueryString,string(in.Data))// do something with the invocation here out=&common.Content{Data:in.Data,ContentType:in.ContentType,DataTypeURL:in.DataTypeURL,}return}
Binding Invocation Handler
To handle binding invocations you will need to add at least one binding invocation handler before starting the service:
The handler method itself can be any method with the expected signature:
funcrunHandler(ctxcontext.Context,in*common.BindingEvent)(out[]byte,errerror){log.Printf("binding - Data:%v, Meta:%v",in.Data,in.Metadata)// do something with the invocation here returnnil,nil}
Java SDK packages for developing Dapr applications
Dapr offers a variety of packages to help with the development of Java applications. Using them you can create Java clients, servers, and virtual actors with Dapr.
Next, import the Java SDK packages to get started. Select your preferred build tool to learn how to import.
For a Maven project, add the following to your pom.xml file:
<project> ...
<dependencies> ...
<!-- Dapr's core SDK with all features, except Actors. --><dependency><groupId>io.dapr</groupId><artifactId>dapr-sdk</artifactId><version>1.19.0</version></dependency><!-- Dapr's SDK for Actors (optional). --><dependency><groupId>io.dapr</groupId><artifactId>dapr-sdk-actors</artifactId><version>1.19.0</version></dependency><!-- Dapr's SDK integration with SpringBoot (optional). --><dependency><groupId>io.dapr</groupId><artifactId>dapr-sdk-springboot</artifactId><version>1.19.0</version></dependency> ...
</dependencies> ...
</project>
For a Gradle project, add the following to your build.gradle file:
dependencies{...// Dapr's core SDK with all features, except Actors.compile('io.dapr:dapr-sdk:1.19.0')// Dapr's SDK for Actors (optional).compile('io.dapr:dapr-sdk-actors:1.19.0')// Dapr's SDK integration with SpringBoot (optional).compile('io.dapr:dapr-sdk-springboot:1.19.0')}
Spring Boot compatibility
The Spring Boot integration modules (dapr-sdk-springboot and the dapr-spring-* modules) require Spring Boot 4.0 from SDK 1.19. To use Spring Boot 3.5, stay on SDK 1.18.x. Learn more in Spring Boot integration.
Netty version
The Dapr Java SDK uses gRPC with Netty. From SDK 1.19, the SDK pulls Netty 4.2.x transitively. A project that pins Netty 4.1.x directly, or that uses a dependency management file that manages Netty 4.1.x, can get a dependency conflict.
You can fix this by removing the Netty 4.1.x pin. You can also import the dapr-sdk-bom, which manages the Netty version that matches the gRPC version the SDK uses:
Clone the SDK repo to try out some examples and get started.
importio.dapr.client.DaprClient;importio.dapr.client.DaprClientBuilder;try(DaprClientclient=(newDaprClientBuilder()).build()){// sending a class with message; BINDING_OPERATION="create"client.invokeBinding(BINDING_NAME,BINDING_OPERATION,myClass).block();// sending a plain stringclient.invokeBinding(BINDING_NAME,BINDING_OPERATION,message).block();}
Visit Java SDK examples for code samples and instructions to try out output bindings.
Available packages
Client
Create Java clients that interact with a Dapr sidecar and other Dapr applications.
Workflow
Create and manage workflows that work with other Dapr APIs in Java.
3.1 - AI
With the Dapr Conversation AI package, you can interact with the Dapr AI workloads from a Java application. To get started, walk through the Dapr AI how-to guide.
3.1.1 - How to: Author and manage Dapr Conversation AI in the Java SDK
How to get up and running with Conversation AI using the Dapr Java SDK
As part of this demonstration, we will look at how to use the Conversation API to converse with a Large Language Model (LLM). The API
will return the response from the LLM for the given prompt. With the provided conversation ai example, you will:
git clone https://github.com/dapr/java-sdk.git
cd java-sdk
Run the following command to install the requirements for running the Conversation AI example with the Dapr Java SDK.
mvn clean install -DskipTests
From the Java SDK root directory, navigate to the examples’ directory.
cd examples
Run the Dapr sidecar.
dapr run --app-id conversationapp --dapr-grpc-port 51439 --dapr-http-port 3500 --app-port 8080
Now, Dapr is listening for HTTP requests at http://localhost:3500 and gRPC requests at http://localhost:51439.
Send a prompt with Personally identifiable information (PII) to the Conversation AI API
In the DemoConversationAI there are steps to send a prompt using the converse method under the DaprPreviewClient.
publicclassDemoConversationAI{/**
* The main method to start the client.
*
* @param args Input arguments (unused).
*/publicstaticvoidmain(String[]args){try(DaprPreviewClientclient=newDaprClientBuilder().buildPreviewClient()){System.out.println("Sending the following input to LLM: Hello How are you? This is the my number 672-123-4567");ConversationInputdaprConversationInput=newConversationInput("Hello How are you? "+"This is the my number 672-123-4567");// Component name is the name provided in the metadata block of the conversation.yaml file.Mono<ConversationResponse>responseMono=client.converse(newConversationRequest("echo",List.of(daprConversationInput)).setContextId("contextId").setScrubPii(true).setTemperature(1.1d));ConversationResponseresponse=responseMono.block();System.out.printf("Conversation output: %s",response.getConversationOutputs().get(0).getResult());}catch(Exceptione){thrownewRuntimeException(e);}}}
Run the DemoConversationAI with the following command.
== APP == Conversation output: Hello How are you? This is the my number <ISBN>
As shown in the output, the number sent to the API is obfuscated and returned in the form of .
The example above uses an “echo”
component for testing, which simply returns the input message.
When integrated with LLMs like OpenAI or Claude, you’ll receive meaningful responses instead of echoed input.
This will connect to the default Dapr gRPC endpoint localhost:50001. For information about configuring the client using environment variables and system properties, see Properties.
Error Handling
Initially, errors in Dapr followed the Standard gRPC error model. However, to provide more detailed and informative error
messages, in version 1.13 an enhanced error model has been introduced which aligns with the gRPC Richer error model. In
response, the Java SDK extended the DaprException to include the error details that were added in Dapr.
Example of handling the DaprException and consuming the error details when using the Dapr Java SDK:
...try{client.publishEvent("unknown_pubsub","mytopic","mydata").block();}catch(DaprExceptionexception){System.out.println("Dapr exception's error code: "+exception.getErrorCode());System.out.println("Dapr exception's message: "+exception.getMessage());// DaprException now contains `getStatusDetails()` to include more details about the error from Dapr runtime.System.out.println("Dapr exception's reason: "+exception.getStatusDetails().get(DaprErrorDetails.ErrorDetailType.ERROR_INFO,"reason",TypeRef.STRING));}...
The DaprClient.invokeMethod wrappers for service invocation are deprecated. Use the SDK’s DaprClient.invokeHttpClient(appId) helper described below, or any native HTTP (or gRPC) client against the Dapr sidecar.
The SDK provides a pre-configured HTTP client wrapper bound to the target app’s invoke prefix. Relative paths resolve against {daprHttpEndpoint}/v1.0/invoke/{appId}/method/, and the dapr-api-token header is attached automatically when one is configured:
DaprBodyPublishers.json(...) serializes the payload using the SDK’s default Jackson serializer, matching the JSON encoding the deprecated invokeMethod APIs applied internally. For raw payloads use any HttpRequest.BodyPublisher (for example HttpRequest.BodyPublishers.ofString(...)).
newRequestBuilder(relativePath) resolves the path as-is without encoding it for you. If a path segment may contain characters that are illegal in a URI (for example spaces), encode it first with io.dapr.utils.UriUtils.encodePath(...) method. Without this encoding, passing such characters directly throws an IllegalArgumentException. The encodePath method percent-encodes each forward-slash delimited segment (/), preserving the separators and any leading slashes, and appends the query string unchanged. This behavior mirrors the per-segment encoding that the deprecated invokeMethod APIs applied automatically:
importio.dapr.utils.UriUtils;// "Name With Spaces" -> "Name%20With%20Spaces"HttpRequestrequest=invoker.newRequestBuilder(UriUtils.encodePath("orders/Name With Spaces")).GET().build();
The table below summarizes which concerns DaprInvokeHttpClient handles for you (when configured with DaprClientBuilder) and which belong to the user:
Concern
Handled by the SDK
User’s responsibility
Invoke URL (/v1.0/invoke/{appId}/method/...)
✓ — resolved against the sidecar endpoint, which defaults to http://localhost:3500 (override via DAPR_HTTP_ENDPOINT, or DAPR_SIDECAR_IP + DAPR_HTTP_PORT)
dapr-api-token header
✓ — attached only when configured via the dapr.api.token system property or DAPR_API_TOKEN environment variable
HTTP read timeout
✓ — defaults to 60 seconds; override via the dapr.http.client.readTimeoutSeconds system property or DAPR_HTTP_CLIENT_READ_TIMEOUT_SECONDS environment variable
User-Agent: dapr-sdk-java/<version> header
✓ — value tracks the SDK version automatically
URL path encoding
Encode path segments that may contain characters illegal in a URI (e.g. spaces) with UriUtils.encodePath(...). The newRequestBuilder method resolves the path unchanged and throws IllegalArgumentException on illegal characters.
Content-Type header
Set via .header("Content-Type", "...")
Request body serialization
Use DaprBodyPublishers.json(...) for default JSON, or any HttpRequest.BodyPublisher
Response body deserialization
Pick an HttpResponse.BodyHandler (ofString, ofByteArray, custom)
Response status / error handling
Inspect HttpResponse.statusCode() and react to non-2xx responses
Attach custom headers from your own OpenTelemetry context unless you want to use the Dapr defaults
Request body framing (Content-Length vs Transfer-Encoding: chunked)
Use a known-length BodyPublisher. See warning below.
Prefer length-known body publishers
The JDK HttpClient emits Transfer-Encoding: chunked header whenever a BodyPublisher reports an unknown content length (for example when using BodyPublishers.fromInputStream). Chunked requests can interact poorly with downstream HTTP servers under high concurrency, so its recommended to use known-length publishers such as DaprBodyPublishers.json(...), BodyPublishers.ofByteArray(...), BodyPublishers.ofString(...), or BodyPublishers.ofFile(...). These produce Content-Length framing and match the wire format the deprecated invokeMethod APIs used.
Alternatively, you can use a raw java.net.http.HttpClient against the sidecar with the dapr-app-id header — no SDK dependency required for the call itself:
importio.dapr.client.DaprClient;importio.dapr.client.DaprClientBuilder;importio.dapr.client.domain.State;importreactor.core.publisher.Mono;try(DaprClientclient=(newDaprClientBuilder()).build()){// Save stateclient.saveState(STATE_STORE_NAME,FIRST_KEY_NAME,myClass).block();// Get stateState<MyClass>retrievedMessage=client.getState(STATE_STORE_NAME,FIRST_KEY_NAME,MyClass.class).block();// Delete stateclient.deleteState(STATE_STORE_NAME,FIRST_KEY_NAME).block();}
importio.dapr.client.DaprClient;importio.dapr.client.DaprClientBuilder;importio.dapr.client.domain.BulkPublishResponse;importio.dapr.client.domain.BulkPublishResponseFailedEntry;importjava.util.ArrayList;importjava.util.List;classSolution{publicvoidpublishMessages(){try(DaprClientclient=(newDaprClientBuilder()).build()){// Create a list of messages to publishList<String>messages=newArrayList<>();for(inti=0;i<NUM_MESSAGES;i++){Stringmessage=String.format("This is message #%d",i);messages.add(message);System.out.println("Going to publish message : "+message);}// Publish list of messages using the bulk publish APIBulkPublishResponse<String>res=client.publishEvents(PUBSUB_NAME,TOPIC_NAME,"text/plain",messages).block()}}}
Visit Java SDK examples for code samples and instructions to try out pub/sub
Interact with output bindings
importio.dapr.client.DaprClient;importio.dapr.client.DaprClientBuilder;try(DaprClientclient=(newDaprClientBuilder()).build()){// sending a class with message; BINDING_OPERATION="create"client.invokeBinding(BINDING_NAME,BINDING_OPERATION,myClass).block();// sending a plain stringclient.invokeBinding(BINDING_NAME,BINDING_OPERATION,message).block();}
Visit Java SDK examples for code samples and instructions to try out retrieving secrets
Actors
An actor is an isolated, independent unit of compute and state with single-threaded execution. Dapr provides an actor implementation based on the Virtual Actor pattern, which provides a single-threaded programming model and where actors are garbage collected when not in use. With Dapr’s implementaiton, you write your Dapr actors according to the Actor model, and Dapr leverages the scalability and reliability that the underlying platform provides.
From Dapr 1.19, an actor that extends AbstractActor can limit a timer or reminder to a number of repetitions, a time to live (TTL), or both, so it stops by itself and you do not need to unregister it. Pass ActorTimerOptions to registerActorTimer or ActorReminderOptions to registerReminder. Repetitions need a period in whole seconds, and a TTL needs a positive period.
// Inside the actor implementation: fire 5 times, every 10 secondsregisterReminder("myreminder","reminder state",ActorReminderOptions.builder().setDueTime(Duration.ofSeconds(5)).setPeriod(Duration.ofSeconds(10)).setRepetitions(5).build()).block();// Fire every second, and expire after 1 minuteregisterActorTimer(null,"clock","ping!",ActorTimerOptions.builder().setPeriod(Duration.ofSeconds(1)).setTtl(Duration.ofMinutes(1)).build()).block();
Visit Java SDK examples for code samples and instructions to try actors
Get & Subscribe to application configurations
Note this is a preview API and thus will only be accessible via the DaprPreviewClient interface and not the normal DaprClient interface
importio.dapr.client.DaprClientBuilder;importio.dapr.client.DaprPreviewClient;importio.dapr.client.domain.ConfigurationItem;importio.dapr.client.domain.GetConfigurationRequest;importio.dapr.client.domain.SubscribeConfigurationRequest;importreactor.core.publisher.Flux;importreactor.core.publisher.Mono;try(DaprPreviewClientclient=(newDaprClientBuilder()).buildPreviewClient()){// Get configuration for a single keyMono<ConfigurationItem>item=client.getConfiguration(CONFIG_STORE_NAME,CONFIG_KEY).block();// Get configurations for multiple keysMono<Map<String,ConfigurationItem>>items=client.getConfiguration(CONFIG_STORE_NAME,CONFIG_KEY_1,CONFIG_KEY_2);// Subscribe to configuration changesFlux<SubscribeConfigurationResponse>outFlux=client.subscribeConfiguration(CONFIG_STORE_NAME,CONFIG_KEY_1,CONFIG_KEY_2);outFlux.subscribe(configItems->configItems.forEach(...));// Unsubscribe from configuration changesMono<UnsubscribeConfigurationResponse>unsubscribe=client.unsubscribeConfiguration(SUBSCRIPTION_ID,CONFIG_STORE_NAME)}
Visit Java SDK examples for code samples and instructions to try out different configuration operations.
Query saved state
Note this is a preview API and thus will only be accessible via the DaprPreviewClient interface and not the normal DaprClient interface
importio.dapr.client.DaprClient;importio.dapr.client.DaprClientBuilder;importio.dapr.client.DaprPreviewClient;importio.dapr.client.domain.QueryStateItem;importio.dapr.client.domain.QueryStateRequest;importio.dapr.client.domain.QueryStateResponse;importio.dapr.client.domain.query.Query;importio.dapr.client.domain.query.Sorting;importio.dapr.client.domain.query.filters.EqFilter;try(DaprClientclient=builder.build();DaprPreviewClientpreviewClient=builder.buildPreviewClient()){StringsearchVal=args.length==0?"searchValue":args[0];// Create JSON dataListingfirst=newListing();first.setPropertyType("apartment");first.setId("1000");...Listingsecond=newListing();second.setPropertyType("row-house");second.setId("1002");...Listingthird=newListing();third.setPropertyType("apartment");third.setId("1003");...Listingfourth=newListing();fourth.setPropertyType("apartment");fourth.setId("1001");...Map<String,String>meta=newHashMap<>();meta.put("contentType","application/json");// Save stateSaveStateRequestrequest=newSaveStateRequest(STATE_STORE_NAME).setStates(newState<>("1",first,null,meta,null),newState<>("2",second,null,meta,null),newState<>("3",third,null,meta,null),newState<>("4",fourth,null,meta,null));client.saveBulkState(request).block();// Create query and query state requestQueryquery=newQuery().setFilter(newEqFilter<>("propertyType","apartment")).setSort(Arrays.asList(newSorting("id",Sorting.Order.DESC)));QueryStateRequestrequest=newQueryStateRequest(STATE_STORE_NAME).setQuery(query);// Use preview client to call query state APIQueryStateResponse<MyData>result=previewClient.queryState(request,MyData.class).block();// View Query state response System.out.println("Found "+result.getResults().size()+" items.");for(QueryStateItem<Listing>item:result.getResults()){System.out.println("Key: "+item.getKey());System.out.println("Data: "+item.getValue());}}
packageio.dapr.examples.lock.grpc;importio.dapr.client.DaprClientBuilder;importio.dapr.client.DaprPreviewClient;importio.dapr.client.domain.LockRequest;importio.dapr.client.domain.UnlockRequest;importio.dapr.client.domain.UnlockResponseStatus;importreactor.core.publisher.Mono;publicclassDistributedLockGrpcClient{privatestaticfinalStringLOCK_STORE_NAME="lockstore";/**
* Executes various methods to check the different apis.
*
* @param args arguments
* @throws Exception throws Exception
*/publicstaticvoidmain(String[]args)throwsException{try(DaprPreviewClientclient=(newDaprClientBuilder()).buildPreviewClient()){System.out.println("Using preview client...");tryLock(client);unlock(client);}}/**
* Trying to get lock.
*
* @param client DaprPreviewClient object
*/publicstaticvoidtryLock(DaprPreviewClientclient){System.out.println("*******trying to get a free distributed lock********");try{LockRequestlockRequest=newLockRequest(LOCK_STORE_NAME,"resouce1","owner1",5);Mono<Boolean>result=client.tryLock(lockRequest);System.out.println("Lock result -> "+(Boolean.TRUE.equals(result.block())?"SUCCESS":"FAIL"));}catch(Exceptionex){System.out.println(ex.getMessage());}}/**
* Unlock a lock.
*
* @param client DaprPreviewClient object
*/publicstaticvoidunlock(DaprPreviewClientclient){System.out.println("*******unlock a distributed lock********");try{UnlockRequestunlockRequest=newUnlockRequest(LOCK_STORE_NAME,"resouce1","owner1");Mono<UnlockResponseStatus>result=client.unlock(unlockRequest);System.out.println("Unlock result ->"+result.block().name());}catch(Exceptionex){System.out.println(ex.getMessage());}}}
packageio.dapr.examples.workflows;importio.dapr.workflows.client.DaprWorkflowClient;importio.dapr.workflows.client.WorkflowState;importjava.time.Duration;importjava.util.concurrent.TimeUnit;importjava.util.concurrent.TimeoutException;/**
* For setup instructions, see the README.
*/publicclassDemoWorkflowClient{/**
* The main method.
*
* @param args Input arguments (unused).
* @throws InterruptedException If program has been interrupted.
*/publicstaticvoidmain(String[]args)throwsInterruptedException{DaprWorkflowClientclient=newDaprWorkflowClient();try(client){StringseparatorStr="*******";System.out.println(separatorStr);StringinstanceId=client.scheduleNewWorkflow(DemoWorkflow.class,"input data");System.out.printf("Started new workflow instance with random ID: %s%n",instanceId);System.out.println(separatorStr);System.out.println("**GetWorkflowMetadata:Running Workflow**");WorkflowStateworkflowMetadata=client.getWorkflowState(instanceId,true);System.out.printf("Result: %s%n",workflowMetadata);System.out.println(separatorStr);System.out.println("**WaitForWorkflowStart**");try{WorkflowStatewaitForWorkflowStartResult=client.waitForWorkflowStart(instanceId,Duration.ofSeconds(60),true);System.out.printf("Result: %s%n",waitForWorkflowStartResult);}catch(TimeoutExceptionex){System.out.printf("waitForWorkflowStart has an exception:%s%n",ex);}System.out.println(separatorStr);System.out.println("**SendExternalMessage**");client.raiseEvent(instanceId,"TestEvent","TestEventPayload");System.out.println(separatorStr);System.out.println("** Registering parallel Events to be captured by allOf(t1,t2,t3) **");client.raiseEvent(instanceId,"event1","TestEvent 1 Payload");client.raiseEvent(instanceId,"event2","TestEvent 2 Payload");client.raiseEvent(instanceId,"event3","TestEvent 3 Payload");System.out.printf("Events raised for workflow with instanceId: %s\n",instanceId);System.out.println(separatorStr);System.out.println("** Registering Event to be captured by anyOf(t1,t2,t3) **");client.raiseEvent(instanceId,"e2","event 2 Payload");System.out.printf("Event raised for workflow with instanceId: %s\n",instanceId);System.out.println(separatorStr);System.out.println("**waitForWorkflowCompletion**");try{WorkflowStatewaitForWorkflowCompletionResult=client.waitForWorkflowCompletion(instanceId,Duration.ofSeconds(60),true);System.out.printf("Result: %s%n",waitForWorkflowCompletionResult);}catch(TimeoutExceptionex){System.out.printf("waitForWorkflowCompletion has an exception:%s%n",ex);}System.out.println(separatorStr);System.out.println("**purgeWorkflow**");booleanpurgeResult=client.purgeWorkflow(instanceId);System.out.printf("purgeResult: %s%n",purgeResult);System.out.println(separatorStr);System.out.println("**raiseEvent**");StringeventInstanceId=client.scheduleNewWorkflow(DemoWorkflow.class);System.out.printf("Started new workflow instance with random ID: %s%n",eventInstanceId);client.raiseEvent(eventInstanceId,"TestException",null);System.out.printf("Event raised for workflow with instanceId: %s\n",eventInstanceId);System.out.println(separatorStr);StringinstanceToTerminateId="terminateMe";client.scheduleNewWorkflow(DemoWorkflow.class,null,instanceToTerminateId);System.out.printf("Started new workflow instance with specified ID: %s%n",instanceToTerminateId);TimeUnit.SECONDS.sleep(5);System.out.println("Terminate this workflow instance manually before the timeout is reached");client.terminateWorkflow(instanceToTerminateId,null);System.out.println(separatorStr);StringrestartingInstanceId="restarting";client.scheduleNewWorkflow(DemoWorkflow.class,null,restartingInstanceId);System.out.printf("Started new workflow instance with ID: %s%n",restartingInstanceId);System.out.println("Sleeping 30 seconds to restart the workflow");TimeUnit.SECONDS.sleep(30);System.out.println("**SendExternalMessage: RestartEvent**");client.raiseEvent(restartingInstanceId,"RestartEvent","RestartEventPayload");System.out.println("Sleeping 30 seconds to terminate the eternal workflow");TimeUnit.SECONDS.sleep(30);client.terminateWorkflow(restartingInstanceId,null);}System.out.println("Exiting DemoWorkflowClient.");System.exit(0);}}
The DaprClient also provides a helper method to wait for the sidecar to become healthy (components only). When using
this method, be sure to specify a timeout in milliseconds and block() to wait for the result of a reactive operation.
// Wait for the Dapr sidecar to report healthy before attempting to use Dapr components.try(DaprClientclient=newDaprClientBuilder().build()){System.out.println("Waiting for Dapr sidecar ...");client.waitForSidecar(10000).block();// Specify the timeout in millisecondsSystem.out.println("Dapr sidecar is ready.");...}// Perform Dapr component operations here i.e. fetching secrets or saving state.
Shutdown the sidecar
try(DaprClientclient=newDaprClientBuilder().build()){logger.info("Sending shutdown request.");client.shutdown().block();logger.info("Ensuring dapr has stopped.");...}
The building blocks like pubsub, input bindings, or jobs require Dapr to make incoming calls to your application, you can secure these requests using Dapr App API Token Authentication. This ensures that only Dapr can invoke your application’s endpoints.
Understanding the two tokens
Dapr uses two different tokens for securing communication. See Properties for detailed information about both tokens:
DAPR_API_TOKEN (Your app → Dapr sidecar): Automatically handled by the Java SDK when using DaprClient
APP_API_TOKEN (Dapr → Your app): Requires server-side validation in your application
The examples below show how to implement server-side validation for APP_API_TOKEN.
Implementing server-side token validation
When using gRPC protocol, implement a server interceptor to capture the metadata.
importio.grpc.Context;importio.grpc.Contexts;importio.grpc.Metadata;importio.grpc.ServerCall;importio.grpc.ServerCallHandler;importio.grpc.ServerInterceptor;publicclassSubscriberGrpcServiceextendsAppCallbackGrpc.AppCallbackImplBase{publicstaticfinalContext.Key<Metadata>METADATA_KEY=Context.key("grpc-metadata");// gRPC interceptor to capture metadatapublicstaticclassMetadataInterceptorimplementsServerInterceptor{@Overridepublic<ReqT,RespT>ServerCall.Listener<ReqT>interceptCall(ServerCall<ReqT,RespT>call,Metadataheaders,ServerCallHandler<ReqT,RespT>next){ContextcontextWithMetadata=Context.current().withValue(METADATA_KEY,headers);returnContexts.interceptCall(contextWithMetadata,call,headers,next);}}// Your service methods go here...}
Register the interceptor when building your gRPC server:
Then, in your service methods, extract the token from metadata:
@OverridepublicvoidonTopicEvent(DaprAppCallbackProtos.TopicEventRequestrequest,StreamObserver<DaprAppCallbackProtos.TopicEventResponse>responseObserver){try{// Extract metadata from contextContextcontext=Context.current();Metadatametadata=METADATA_KEY.get(context);if(metadata!=null){StringapiToken=metadata.get(Metadata.Key.of("dapr-api-token",Metadata.ASCII_STRING_MARSHALLER));// Validate token accordingly}// Process the request// ...}catch(Throwablee){responseObserver.onError(e);}}
Using with HTTP endpoints
For HTTP-based endpoints, extract the token from the headers:
@RestControllerpublicclassSubscriberController{@PostMapping(path="/endpoint")publicMono<Void>handleRequest(@RequestBody(required=false)byte[]body,@RequestHeaderMap<String,String>headers){returnMono.fromRunnable(()->{try{// Extract the token from headersStringapiToken=headers.get("dapr-api-token");// Validate token accordingly// Process the request}catch(Exceptione){thrownewRuntimeException(e);}});}}
Examples
For working examples with pubsub, bindings, and jobs:
For a full list of SDK properties and how to configure them, visit Properties.
3.2.1 - Properties
SDK-wide properties for configuring the Dapr Java SDK using environment variables and system properties
Properties
The Dapr Java SDK provides a set of global properties that control the behavior of the SDK. These properties can be configured using environment variables or system properties. System properties can be set using the -D flag when running your Java application.
These properties affect the entire SDK, including clients and runtime. They control aspects such as:
Sidecar connectivity (endpoints, ports)
Security settings (TLS, API tokens)
Performance tuning (timeouts, connection pools)
Protocol settings (gRPC, HTTP)
String encoding
Environment Variables
The following environment variables are available for configuring the Dapr Java SDK:
Sidecar Endpoints
When these variables are set, the client will automatically use them to connect to the Dapr sidecar.
Environment Variable
Description
Default
DAPR_GRPC_ENDPOINT
The gRPC endpoint for the Dapr sidecar
localhost:50001
DAPR_HTTP_ENDPOINT
The HTTP endpoint for the Dapr sidecar
localhost:3500
DAPR_GRPC_PORT
The gRPC port for the Dapr sidecar (legacy, DAPR_GRPC_ENDPOINT takes precedence)
50001
DAPR_HTTP_PORT
The HTTP port for the Dapr sidecar (legacy, DAPR_HTTP_ENDPOINT takes precedence)
3500
API Tokens
Dapr supports two types of API tokens for securing communication:
Environment Variable
Description
Default
DAPR_API_TOKEN
API token for authenticating requests from your app to the Dapr sidecar. The Java SDK automatically includes this token in requests when using DaprClient.
null
APP_API_TOKEN
API token for authenticating requests from Dapr to your app. When set, Dapr includes this token in the dapr-api-token header/metadata when calling your application (for pubsub subscribers, input bindings, or job triggers). Your application must validate this token.
For secure gRPC communication, you can configure TLS settings using the following environment variables:
Environment Variable
Description
Default
DAPR_GRPC_TLS_INSECURE
When set to “true”, enables insecure TLS mode which still uses TLS but doesn’t verify certificates. This uses InsecureTrustManagerFactory to trust all certificates. This should only be used for testing or in secure environments.
false
DAPR_GRPC_TLS_CA_PATH
Path to the CA certificate file. This is used for TLS connections to servers with self-signed certificates.
null
DAPR_GRPC_TLS_CERT_PATH
Path to the TLS certificate file for client authentication.
null
DAPR_GRPC_TLS_KEY_PATH
Path to the TLS private key file for client authentication.
null
Keepalive Settings
Configure gRPC keepalive behavior using these environment variables:
Environment Variable
Description
Default
DAPR_GRPC_ENABLE_KEEP_ALIVE
Whether to enable gRPC keepalive
false
DAPR_GRPC_KEEP_ALIVE_TIME_SECONDS
gRPC keepalive time in seconds
10
DAPR_GRPC_KEEP_ALIVE_TIMEOUT_SECONDS
gRPC keepalive timeout in seconds
5
DAPR_GRPC_KEEP_ALIVE_WITHOUT_CALLS
Whether to keep gRPC connection alive without calls
true
Workflow Keepalive Settings
While the workflow runtime runs, the SDK calls the sidecar’s Hello RPC at a fixed interval, so that load balancers that do not count HTTP/2 PING frames as activity, such as AWS Application Load Balancers, do not close the idle work-item stream:
Environment Variable
Description
Default
DAPR_WORKFLOWS_RUNTIME_APP_KEEP_ALIVE_ENABLED
Whether the workflow runtime sends the keepalive Hello calls
true
DAPR_WORKFLOWS_APP_KEEP_ALIVE_INTERVAL_SECONDS
Interval between the keepalive Hello calls, in seconds
30
Inbound Message Settings
Configure gRPC inbound message settings using these environment variables:
Environment Variable
Description
Default
DAPR_GRPC_MAX_INBOUND_MESSAGE_SIZE_BYTES
Dapr’s maximum inbound message size for gRPC in bytes. This value sets the maximum size of a gRPC message that can be received by the application
4194304
DAPR_GRPC_MAX_INBOUND_METADATA_SIZE_BYTES
Dapr’s maximum inbound metadata size for gRPC in bytes
8192
HTTP Client Configuration
These properties control the behavior of the HTTP client used for communication with the Dapr sidecar:
Environment Variable
Description
Default
DAPR_HTTP_CLIENT_READ_TIMEOUT_SECONDS
Timeout in seconds for HTTP client read operations. This is the maximum time to wait for a response from the Dapr sidecar.
60
DAPR_HTTP_CLIENT_MAX_REQUESTS
Maximum number of concurrent HTTP requests that can be executed. Above this limit, requests will queue in memory waiting for running calls to complete.
1024
DAPR_HTTP_CLIENT_MAX_IDLE_CONNECTIONS
Maximum number of idle connections in the HTTP connection pool. This is the maximum number of connections that can remain idle in the pool.
128
API Configuration
These properties control the behavior of API calls made through the SDK:
Environment Variable
Description
Default
DAPR_API_MAX_RETRIES
Maximum number of retries for retriable exceptions when making API calls to the Dapr sidecar
0
DAPR_API_TIMEOUT_MILLISECONDS
Timeout in milliseconds for API calls to the Dapr sidecar. A value of 0 means no timeout.
0
String Encoding
Environment Variable
Description
Default
DAPR_STRING_CHARSET
Character set used for string encoding/decoding in the SDK. Must be a valid Java charset name.
UTF-8
System Properties
All environment variables can be set as system properties using the -D flag. Here is the complete list of available system properties:
System Property
Description
Default
dapr.sidecar.ip
IP address for the Dapr sidecar
localhost
dapr.http.port
HTTP port for the Dapr sidecar
3500
dapr.grpc.port
gRPC port for the Dapr sidecar
50001
dapr.grpc.tls.cert.path
Path to the gRPC TLS certificate
null
dapr.grpc.tls.key.path
Path to the gRPC TLS key
null
dapr.grpc.tls.ca.path
Path to the gRPC TLS CA certificate
null
dapr.grpc.tls.insecure
Whether to use insecure TLS mode
false
dapr.grpc.endpoint
gRPC endpoint for remote sidecar
null
dapr.grpc.enable.keep.alive
Whether to enable gRPC keepalive
false
dapr.grpc.keep.alive.time.seconds
gRPC keepalive time in seconds
10
dapr.grpc.keep.alive.timeout.seconds
gRPC keepalive timeout in seconds
5
dapr.grpc.keep.alive.without.calls
Whether to keep gRPC connection alive without calls
true
dapr.workflows.runtime.app.keep.alive.enabled
Whether the workflow runtime sends keepalive Hello calls to the sidecar
true
dapr.workflows.app.keep.alive.interval.seconds
Interval between the workflow keepalive Hello calls, in seconds
30
dapr.http.endpoint
HTTP endpoint for remote sidecar
null
dapr.api.maxRetries
Maximum number of retries for API calls
0
dapr.api.timeoutMilliseconds
Timeout for API calls in milliseconds
0
dapr.api.token
API token for authentication
null
dapr.string.charset
String encoding used in the SDK
UTF-8
dapr.http.client.readTimeoutSeconds
Timeout in seconds for HTTP client reads
60
dapr.http.client.maxRequests
Maximum number of concurrent HTTP requests
1024
dapr.http.client.maxIdleConnections
Maximum number of idle HTTP connections
128
Property Resolution Order
Properties are resolved in the following order:
Override values (if provided when creating a Properties instance)
System properties (set via -D)
Environment variables
Default values
The SDK checks each source in order. If a value is invalid for the property type (e.g., non-numeric for a numeric property), the SDK will log a warning and try the next source. For example:
# Invalid boolean value - will be ignoredjava -Ddapr.grpc.enable.keep.alive=not-a-boolean -jar myapp.jar
# Valid boolean value - will be usedexportDAPR_GRPC_ENABLE_KEEP_ALIVE=false
In this case, the environment variable is used because the system property value is invalid. However, if both values are valid, the system property takes precedence:
# Valid boolean value - will be usedjava -Ddapr.grpc.enable.keep.alive=true -jar myapp.jar
# Valid boolean value - will be ignoredexportDAPR_GRPC_ENABLE_KEEP_ALIVE=false
Override values can be set using the DaprClientBuilder in two ways:
Using individual property overrides (recommended for most cases):
importio.dapr.config.Properties;// Set a single property overrideDaprClientclient=newDaprClientBuilder().withPropertyOverride(Properties.GRPC_ENABLE_KEEP_ALIVE,"true").build();// Or set multiple property overridesDaprClientclient=newDaprClientBuilder().withPropertyOverride(Properties.GRPC_ENABLE_KEEP_ALIVE,"true").withPropertyOverride(Properties.HTTP_CLIENT_READ_TIMEOUT_SECONDS,"120").build();
Using a Properties instance (useful when you have many properties to set at once):
// Create a map of property overridesMap<String,String>overrides=newHashMap<>();overrides.put("dapr.grpc.enable.keep.alive","true");overrides.put("dapr.http.client.readTimeoutSeconds","120");// Create a Properties instance with overridesPropertiesproperties=newProperties(overrides);// Use these properties when creating a clientDaprClientclient=newDaprClientBuilder().withProperties(properties).build();
For most use cases, you’ll use system properties or environment variables. Override values are primarily used when you need different property values for different instances of the SDK in the same application.
Proxy Configuration
You can configure proxy settings for your Java application using system properties. These are standard Java system properties that are part of Java’s networking layer (java.net package), not specific to Dapr. They are used by Java’s networking stack, including the HTTP client that Dapr’s SDK uses.
For detailed information about Java’s proxy configuration, including all available properties and their usage, see the Java Networking Properties documentation.
For example, here’s how to configure a proxy:
# Configure HTTP proxy - replace with your actual proxy server detailsjava -Dhttp.proxyHost=your-proxy-server.com -Dhttp.proxyPort=8080 -jar myapp.jar
# Configure HTTPS proxy - replace with your actual proxy server detailsjava -Dhttps.proxyHost=your-proxy-server.com -Dhttps.proxyPort=8443 -jar myapp.jar
Replace your-proxy-server.com with your actual proxy server hostname or IP address, and adjust the port numbers to match your proxy server configuration.
These proxy settings will affect all HTTP/HTTPS connections made by your Java application, including connections to the Dapr sidecar.
3.3 - Jobs
With the Dapr Jobs package, you can interact with the Dapr Jobs APIs from a Java application to trigger future operations to run according to a predefined schedule with an optional payload. To get started, walk through the Dapr Jobs how-to guide.
3.3.1 - How to: Author and manage Dapr Jobs in the Java SDK
How to get up and running with Jobs using the Dapr Java SDK
As part of this demonstration we will schedule a Dapr Job. The scheduled job will trigger an endpoint registered in the
same app. With the provided jobs example, you will:
git clone https://github.com/dapr/java-sdk.git
cd java-sdk
Run the following command to install the requirements for running the jobs example with the Dapr Java SDK.
mvn clean install -DskipTests
From the Java SDK root directory, navigate to the examples’ directory.
cd examples
Run the Dapr sidecar.
dapr run --app-id jobsapp --dapr-grpc-port 51439 --dapr-http-port 3500 --app-port 8080
Now, Dapr is listening for HTTP requests at http://localhost:3500 and internal Jobs gRPC requests at http://localhost:51439.
Schedule and Get a job
In the DemoJobsClient there are steps to schedule a job. Calling scheduleJob using the DaprPreviewClient
will schedule a job with the Dapr Runtime.
publicclassDemoJobsClient{/**
* The main method of this app to schedule and get jobs.
*/publicstaticvoidmain(String[]args)throwsException{try(DaprPreviewClientclient=newDaprClientBuilder().withPropertyOverrides(overrides).buildPreviewClient()){// Schedule a job.System.out.println("**** Scheduling a Job with name dapr-jobs-1 *****");ScheduleJobRequestscheduleJobRequest=newScheduleJobRequest("dapr-job-1",JobSchedule.fromString("* * * * * *")).setData("Hello World!".getBytes());client.scheduleJob(scheduleJobRequest).block();System.out.println("**** Scheduling job dapr-jobs-1 completed *****");}}}
Call getJob to retrieve the job details that were previously created and scheduled.
**** Scheduling a Job with name dapr-jobs-1 *****
**** Scheduling job dapr-jobs-1 completed *****
**** Retrieving a Job with name dapr-jobs-1 *****
Set up an endpoint to be invoked when the job is triggered
The DemoJobsSpringApplication class starts a Spring Boot application that registers the endpoints specified in the JobsController
This endpoint acts like a callback for the scheduled job requests.
@RestControllerpublicclassJobsController{/**
* Handles jobs callback from Dapr.
*
* @param jobName name of the job.
* @param payload data from the job if payload exists.
* @return Empty Mono.
*/@PostMapping("/job/{jobName}")publicMono<Void>handleJob(@PathVariable("jobName")StringjobName,@RequestBody(required=false)byte[]payload){System.out.println("Job Name: "+jobName);System.out.println("Job Payload: "+newString(payload));returnMono.empty();}}
Parameters:
jobName: The name of the triggered job.
payload: Optional payload data associated with the job (as a byte array).
Run the Spring Boot application with the following command.
publicclassDemoJobsClient{/**
* The main method of this app deletes a job that was previously scheduled.
*/publicstaticvoidmain(String[]args)throwsException{try(DaprPreviewClientclient=newDaprClientBuilder().buildPreviewClient()){// Delete a job.System.out.println("**** Delete a Job with name dapr-jobs-1 *****");client.deleteJob(newDeleteJobRequest("dapr-job-1")).block();}}}
git clone https://github.com/dapr/java-sdk.git
cd java-sdk
Run the following command to install the requirements for running this workflow sample with the Dapr Java SDK.
mvn clean install
From the Java SDK root directory, navigate to the Dapr Workflow example.
cd examples
Run the DemoWorkflowWorker
The DemoWorkflowWorker class registers an implementation of DemoWorkflow in Dapr’s workflow runtime engine. In the DemoWorkflowWorker.java file, you can find the DemoWorkflowWorker class and the main method:
publicclassDemoWorkflowWorker{publicstaticvoidmain(String[]args)throwsException{// Register the Workflow with the runtime.WorkflowRuntime.getInstance().registerWorkflow(DemoWorkflow.class);System.out.println("Start workflow runtime");WorkflowRuntime.getInstance().startAndBlock();System.exit(0);}}
In the code above:
WorkflowRuntime.getInstance().registerWorkflow() registers DemoWorkflow as a workflow in the Dapr Workflow runtime.
WorkflowRuntime.getInstance().start() builds and starts the engine within the Dapr Workflow runtime.
In the terminal, execute the following command to kick off the DemoWorkflowWorker:
You're up and running! Both Dapr and your app logs will appear here.
...
== APP == Start workflow runtime
== APP == Sep 13, 2023 9:02:03 AM com.microsoft.durabletask.DurableTaskGrpcWorker startAndBlock
== APP == INFO: Durable Task worker is connecting to sidecar at 127.0.0.1:50001.
Run the DemoWorkflowClient
The DemoWorkflowClient starts instances of workflows that have been registered with Dapr.
publicclassDemoWorkflowClient{// ...publicstaticvoidmain(String[]args)throwsInterruptedException{DaprWorkflowClientclient=newDaprWorkflowClient();try(client){StringseparatorStr="*******";System.out.println(separatorStr);StringinstanceId=client.scheduleNewWorkflow(DemoWorkflow.class,"input data");System.out.printf("Started new workflow instance with random ID: %s%n",instanceId);System.out.println(separatorStr);System.out.println("**GetInstanceMetadata:Running Workflow**");WorkflowStateworkflowMetadata=client.getWorkflowState(instanceId,true);System.out.printf("Result: %s%n",workflowMetadata);System.out.println(separatorStr);System.out.println("**WaitForWorkflowStart**");try{WorkflowStatewaitForWorkflowStartResult=client.waitForWorkflowStart(instanceId,Duration.ofSeconds(60),true);System.out.printf("Result: %s%n",waitForWorkflowStartResult);}catch(TimeoutExceptionex){System.out.printf("waitForWorkflowStart has an exception:%s%n",ex);}System.out.println(separatorStr);System.out.println("**SendExternalMessage**");client.raiseEvent(instanceId,"TestEvent","TestEventPayload");System.out.println(separatorStr);System.out.println("** Registering parallel Events to be captured by allOf(t1,t2,t3) **");client.raiseEvent(instanceId,"event1","TestEvent 1 Payload");client.raiseEvent(instanceId,"event2","TestEvent 2 Payload");client.raiseEvent(instanceId,"event3","TestEvent 3 Payload");System.out.printf("Events raised for workflow with instanceId: %s\n",instanceId);System.out.println(separatorStr);System.out.println("** Registering Event to be captured by anyOf(t1,t2,t3) **");client.raiseEvent(instanceId,"e2","event 2 Payload");System.out.printf("Event raised for workflow with instanceId: %s\n",instanceId);System.out.println(separatorStr);System.out.println("**waitForWorkflowCompletion**");try{WorkflowStatewaitForWorkflowCompletionResult=client.waitForWorkflowCompletion(instanceId,Duration.ofSeconds(60),true);System.out.printf("Result: %s%n",waitForWorkflowCompletionResult);}catch(TimeoutExceptionex){System.out.printf("waitForWorkflowCompletion has an exception:%s%n",ex);}System.out.println(separatorStr);System.out.println("**purgeWorkflow**");booleanpurgeResult=client.purgeWorkflow(instanceId);System.out.printf("purgeResult: %s%n",purgeResult);System.out.println(separatorStr);System.out.println("**raiseEvent**");StringeventInstanceId=client.scheduleNewWorkflow(DemoWorkflow.class);System.out.printf("Started new workflow instance with random ID: %s%n",eventInstanceId);client.raiseEvent(eventInstanceId,"TestException",null);System.out.printf("Event raised for workflow with instanceId: %s\n",eventInstanceId);System.out.println(separatorStr);StringinstanceToTerminateId="terminateMe";client.scheduleNewWorkflow(DemoWorkflow.class,null,instanceToTerminateId);System.out.printf("Started new workflow instance with specified ID: %s%n",instanceToTerminateId);TimeUnit.SECONDS.sleep(5);System.out.println("Terminate this workflow instance manually before the timeout is reached");client.terminateWorkflow(instanceToTerminateId,null);System.out.println(separatorStr);StringrestartingInstanceId="restarting";client.scheduleNewWorkflow(DemoWorkflow.class,null,restartingInstanceId);System.out.printf("Started new workflow instance with ID: %s%n",restartingInstanceId);System.out.println("Sleeping 30 seconds to restart the workflow");TimeUnit.SECONDS.sleep(30);System.out.println("**SendExternalMessage: RestartEvent**");client.raiseEvent(restartingInstanceId,"RestartEvent","RestartEventPayload");System.out.println("Sleeping 30 seconds to terminate the eternal workflow");TimeUnit.SECONDS.sleep(30);client.terminateWorkflow(restartingInstanceId,null);}System.out.println("Exiting DemoWorkflowClient.");System.exit(0);}}
In a second terminal window, start the workflow by running the following command:
*******
Started new workflow instance with random ID: 0b4cc0d5-413a-4c1c-816a-a71fa24740d4
*******
**GetInstanceMetadata:Running Workflow**
Result: [Name: 'io.dapr.examples.workflows.DemoWorkflow', ID: '0b4cc0d5-413a-4c1c-816a-a71fa24740d4', RuntimeStatus: RUNNING, CreatedAt: 2023-09-13T13:02:30.547Z, LastUpdatedAt: 2023-09-13T13:02:30.699Z, Input: '"input data"', Output: '']
*******
**WaitForWorkflowStart**
Result: [Name: 'io.dapr.examples.workflows.DemoWorkflow', ID: '0b4cc0d5-413a-4c1c-816a-a71fa24740d4', RuntimeStatus: RUNNING, CreatedAt: 2023-09-13T13:02:30.547Z, LastUpdatedAt: 2023-09-13T13:02:30.699Z, Input: '"input data"', Output: '']
*******
**SendExternalMessage**
*******
** Registering parallel Events to be captured by allOf(t1,t2,t3) **
Events raised for workflow with instanceId: 0b4cc0d5-413a-4c1c-816a-a71fa24740d4
*******
** Registering Event to be captured by anyOf(t1,t2,t3) **
Event raised for workflow with instanceId: 0b4cc0d5-413a-4c1c-816a-a71fa24740d4
*******
**WaitForWorkflowCompletion**
Result: [Name: 'io.dapr.examples.workflows.DemoWorkflow', ID: '0b4cc0d5-413a-4c1c-816a-a71fa24740d4', RuntimeStatus: FAILED, CreatedAt: 2023-09-13T13:02:30.547Z, LastUpdatedAt: 2023-09-13T13:02:55.054Z, Input: '"input data"', Output: '']
*******
**purgeWorkflow**
purgeResult: true
*******
**raiseEvent**
Started new workflow instance with random ID: 7707d141-ebd0-4e54-816e-703cb7a52747
Event raised for workflow with instanceId: 7707d141-ebd0-4e54-816e-703cb7a52747
*******
Started new workflow instance with specified ID: terminateMe
Terminate this workflow instance manually before the timeout is reached
*******
Started new workflow instance with ID: restarting
Sleeping 30 seconds to restart the workflow
**SendExternalMessage: RestartEvent**
Sleeping 30 seconds to terminate the eternal workflow
Exiting DemoWorkflowClient.
What happened?
When you ran dapr run, the workflow worker registered the workflow (DemoWorkflow) and its actvities to the Dapr Workflow engine.
When you ran java, the workflow client started the workflow instance with the following activities. You can follow along with the output in the terminal where you ran dapr run.
The workflow is started, raises three parallel tasks, and waits for them to complete.
The workflow client calls the activity and sends the “Hello Activity” message to the console.
The workflow times out and is purged.
The workflow client starts a new workflow instance with a random ID, uses another workflow instance called terminateMe to terminate it, and restarts it with the workflow called restarting.
Task execution keys are unique identifiers generated by the durabletask-java library. They are stored in the WorkflowActivityContext and can be used to track and manage the execution of workflow activities. They are particularly useful for:
Idempotency: Ensuring activities are not executed multiple times for the same task
State Management: Tracking the state of activity execution
Error Handling: Managing retries and failures in a controlled manner
Here’s an example of how to use task execution keys in your workflow activities:
publicclassTaskExecutionKeyActivityimplementsWorkflowActivity{@OverridepublicObjectrun(WorkflowActivityContextctx){// Get the task execution key for this activityStringtaskExecutionKey=ctx.getTaskExecutionKey();// Use the key to implement idempotency or state management// For example, check if this task has already been executedif(isTaskAlreadyExecuted(taskExecutionKey)){returngetPreviousResult(taskExecutionKey);}// Execute the activity logicObjectresult=executeActivityLogic();// Store the result with the task execution keystoreResult(taskExecutionKey,result);returnresult;}}
Stateful workflow history
From Dapr 1.19, the workflow worker keeps the history of each workflow instance in memory, so the Dapr sidecar sends only the new events on each turn. This is on by default. To turn it off, for example when worker memory is limited, call withStatefulHistoryDisabled(true) on the WorkflowRuntimeBuilder:
The builder also has withHistoryCacheTtl, withHistoryCacheMaxInstances and withHistoryCacheMaxBytes methods to tune the history cache. Learn more in Stateful workflow client.
Handling duplicate workflow instance IDs
From Dapr 1.19, DaprWorkflowClient.scheduleNewWorkflow throws WorkflowInstanceAlreadyExistsException when the runtime rejects an instance ID because a workflow instance with that ID already exists.
Which existing instances cause the rejection depends on NewWorkflowOptions.setEnforceUniqueInstanceId(boolean):
By default (the option disabled), the runtime only rejects an instance ID that belongs to an active instance. Scheduling with the instance ID of a workflow that already reached a terminal state (completed, failed, or terminated) succeeds and re-runs the workflow with fresh state.
When the option is enabled, the runtime rejects the instance ID if an instance with that ID exists in any status, including terminal ones. The existing instance is left untouched.
From Dapr 1.19, DaprWorkflowClient can list the workflow instance IDs of the app, read the history of an instance, and rerun a finished instance from one of its history events. Use them to find instances without storing their IDs yourself, to see where a failed instance stopped, and to retry it from that step with a new input instead of from the start.
// List the first page of instance IDs, up to 100 per page.// Pass page.getContinuationToken() to listInstanceIds to read the next page.WorkflowInstancePagepage=client.listInstanceIds(null,100);for(Stringid:page.getInstanceIds()){System.out.println(id);}// Read the full history of an instanceList<WorkflowHistoryEvent>history=client.getInstanceHistory(instanceId);for(WorkflowHistoryEventevent:history){System.out.printf("eventId=%d type=%s%n",event.getEventId(),event.getEventType());}// Rerun from the first scheduled activity, with a new inputinteventId=history.stream().filter(event->event.getEventType()==WorkflowHistoryEventType.TASK_SCHEDULED).mapToInt(WorkflowHistoryEvent::getEventId).findFirst().orElseThrow();StringnewInstanceId=client.rerunWorkflowFromEvent(instanceId,eventId,newRerunWorkflowFromEventOptions().setInput("new input").setOverwriteInput(true));
rerunWorkflowFromEvent creates a new workflow instance, returns its ID, and leaves the source instance unchanged. The source instance must be in a terminal state and must not be a child workflow. The event must be the scheduling of an activity, the creation of a timer or the creation of a child workflow. To replace the input, call setOverwriteInput(true) together with setInput. To choose the ID of the new instance, call setNewInstanceId.
3.5 - Getting started with the Dapr and Spring Boot
How to get started with Dapr and Spring Boot
By combining Dapr and Spring Boot, we can create infrastructure independent Java applications that can be deployed across different environments, supporting a wide range of on-premises and cloud provider services.
First, we will start with a simple integration covering the DaprClient and the Testcontainers integration, to then use Spring and Spring Boot mechanisms and programming model to leverage the Dapr APIs under the hood. This helps teams to remove dependencies such as clients and drivers required to connect to environment-specific infrastructure (databases, key-value stores, message brokers, configuration/secret stores, etc)
Note
From Dapr Java SDK 1.19, the Spring Boot integration requires Spring Boot 4.0. It does not work with Spring Boot 3.x or 2.x.
If you use Spring Boot 3.5, stay on Dapr Java SDK 1.18.x. The two combinations are not binary compatible and fail at runtime, for example with a NoClassDefFoundError or a NoSuchMethodError.
The Spring Boot integration remains in alpha. We need your help and feedback to graduate it.
Please join the #java-sdk discord channel discussion or open issues in the dapr/java-sdk.
Adding the Dapr and Spring Boot integration to your project
If you already have a Spring Boot application, you can directly add the following dependencies to your project:
SDK 1.19 removes the separate Spring Boot 4 artifacts, because the main artifacts now target Spring Boot 4.0. If you used these artifacts, change your dependencies and imports:
Before
From SDK 1.19
dapr-spring-boot-4-starter
dapr-spring-boot-starter
dapr-spring-boot-4-starter-test
dapr-spring-boot-starter-test
dapr-spring-boot-4-autoconfigure
dapr-spring-boot-autoconfigure
dapr-spring-6-data
dapr-spring-data
io.dapr.spring6.data (imports)
io.dapr.spring.data
By adding these dependencies, you can:
Autowire a DaprClient to use inside your applications
Use the Spring Data and Messaging abstractions and programming model that uses the Dapr APIs under the hood
Improve your inner-development loop by relying on Testcontainers to bootstrap Dapr Control plane services and default components
Once these dependencies are in your application, you can rely on Spring Boot autoconfiguration to autowire a DaprClient instance:
@AutowiredprivateDaprClientdaprClient;
This will connect to the default Dapr gRPC endpoint localhost:50001, requiring you to start Dapr outside of your application.
Note
By default, the following properties are preconfigured for DaprClient and DaprWorkflowClient:
dapr.client.httpEndpoint=http://localhostdapr.client.httpPort=3500dapr.client.grpcEndpoint=localhostdapr.client.grpcPort=50001dapr.client.apiToken=<your remote api token>
These values are used by default, but you can override them in your application.properties file to suit your environment. Please note that both kebab case and camel case are supported.
You can use the DaprClient to interact with the Dapr APIs anywhere in your application, for example from inside a REST endpoint:
If you want to avoid managing Dapr outside of your Spring Boot application, you can rely on Testcontainers to bootstrap Dapr beside your application for development purposes.
To do this we can create a test configuration that uses Testcontainers to bootstrap all we need to develop our applications using the Dapr APIs.
Using Testcontainers and Dapr integrations, we let the @TestConfiguration bootstrap Dapr for our applications.
Notice that for this example, we are configuring Dapr with a Statestore component called kvstore that connects to an instance of PostgreSQL also bootstrapped by Testcontainers.
Running this command will start the application, using the provided test configuration that includes the Testcontainers and Dapr integration. In the logs you should be able to see that the daprd and the placement service containers were started for your application.
Besides the previous configuration (DaprTestContainersConfig) your tests shouldn’t be testing Dapr itself, just the REST endpoints that your application is exposing.
Leveraging Spring & Spring Boot programming model with Dapr
The Java SDK allows you to interface with all of the Dapr building blocks.
But if you want to leverage the Spring and Spring Boot programming model you can use the dapr-spring-boot-starter integration.
This includes implementations of Spring Data (KeyValueTemplate and CrudRepository) as well as a DaprMessagingTemplate for producing and consuming messages
(similar to Spring Kafka, Spring Pulsar and Spring AMQP for RabbitMQ) and Dapr workflows.
Using Spring Data CrudRepository and KeyValueTemplate
You can use well known Spring Data constructs relying on a Dapr-based implementation.
With Dapr, you don’t need to add any infrastructure-related driver or client, making your Spring application lighter and decoupled from the environment where it is running.
Under the hood these implementations use the Dapr Statestore and Binding APIs.
Configuration parameters
With Spring Data abstractions you can configure which statestore and bindings will be used by Dapr to connect to the available infrastructure.
This can be done by setting the following properties:
Notice that the @EnableDaprRepositories annotation does all the magic of wiring the Dapr APIs under the CrudRespository interface.
Because Dapr allow users to interact with different StateStores from the same application, as a user you need to provide the following beans as a Spring Boot @Configuration:
Using Spring Messaging for producing and consuming events
Similar to Spring Kafka, Spring Pulsar and Spring AMQP you can use the DaprMessagingTemplate to publish messages to the configured infrastructure. To consume messages you can use the @Topic annotation (soon to be renamed to @DaprListener).
To publish events/messages you can @Autowired the DaprMessagingTemplate in your Spring application.
For this example we will be publishing Order events and we are sending messages to the topic named topic.
Similarly to the CrudRepository we need to specify which PubSub broker do we want to use to publish and consume our messages.
dapr.pubsub.name=pubsub
Because with Dapr you can connect to multiple PubSub brokers you need to provide the following bean to let Dapr know which PubSub broker your DaprMessagingTemplate will use:
Finally, because Dapr PubSub requires a bidirectional connection between your application and Dapr you need to expand your Testcontainers configuration with a few parameters:
Now, in the Dapr configuration we have included a pubsub component that will connect to an instance of RabbitMQ started by Testcontainers.
We have also set two important parameters .withAppPort(8080) and .withAppChannelAddress("host.testcontainers.internal") which allows Dapr to
contact back to the application when a message is published in the broker.
To listen to events/messages you need to expose an endpoint in the application that will be responsible to receive the messages.
If you expose a REST endpoint you can use the @Topic annotation to let Dapr know where it needs to forward the events/messages too:
Upon bootstrapping your application, Dapr will register the subscription to messages to be forwarded to the subscribe endpoint exposed by your application.
If you are writing tests for these subscribers you need to ensure that Testcontainers knows that your application will be running on port 8080,
so containers started with Testcontainers know where your application is:
From Dapr 1.19, the testcontainers-dapr module’s Configuration class accepts additional settings objects, so you can build a Dapr Configuration resource in Java instead of YAML and attach it to the container with daprContainer.withConfiguration(configuration):
MtlsConfigurationSettings — the mtls block.
LoggingConfigurationSettings — the logging block.
MetricsConfigurationSettings — the metrics block.
NameResolutionConfigurationSettings — the nameResolution block.
ComponentsConfigurationSettings — the components block (for example, denying component types).
SecretsConfigurationSettings — the secrets block (secret store access scoping).
HttpPipeline — the httpPipeline block (middleware handlers for incoming HTTP requests to the Dapr sidecar). The Configuration class already accepted an AppHttpPipeline for the appHttpPipeline block.
Each settings class mirrors the matching field on the Configuration resource; see Configuration overview for what each field does.
For example, this configuration adds a uppercase and a ratelimit middleware handler to the httpPipeline. The httpPipeline is the last argument of the Configuration constructor, so pass null for the settings that you don’t use:
The handler name must match the name of a middleware component that you add to the container.
Separately, Subscription now accepts a scopes list (the app IDs allowed to use the subscription), matching the scopes field on a declarative subscription.
3.5.1 - How to: Author and manage Dapr Workflow with Spring Boot
How to get up and running with workflows using the Spring Boot integration
Following the same approach that we used for Spring Data and Spring Messaging, the dapr-spring-boot-starter brings Dapr Workflow integration for Spring Boot users.
With Dapr Workflows you define complex orchestrations (workflows) in Java code. The Dapr Spring Boot Starter makes your development easier by managing Workflows and WorkflowActivitys as Spring Beans.
In order to enable the automatic bean discovery you annotate your @SpringBootApplication with the @EnableDaprWorkflows annotation:
@SpringBootApplication
@EnableDaprWorkflows
public class MySpringBootApplication {
...
}
By adding this annotation, all the Workflows and WorkflowActivitys beans are automatically discovered by Spring and registered to the workflow engine.
Creating Workflows and Activities
Inside your Spring Boot application you can define as many workflows as you want. You do that by creating new implementations of the Workflow interface.
@Component
public class MyWorkflow implements Workflow {
@Override
public WorkflowStub create() {
return ctx -> {
<WORKFLOW LOGIC>
};
}
}
From inside your workflow definitions, you can perform service to service interactions, schedule timers or receive external events.
By having all WorkflowActivitys as managed beans you can use the Spring @Autowired mechanism to inject any bean that the workflow activity might need to implement its functionality. For example the @RestTemplate:
@Component
public class MyWorkflowActivity implements WorkflowActivity {
@Autowired
private RestTemplate restTemplate;
Creating and interacting with Workflows
To create and interact with Workflow instances you use the DaprWorkflowClient that you can also @Autowired.
JavaScript SDK packages for developing Dapr applications
A client library for building Dapr apps in JavaScript and TypeScript. This client abstracts the public Dapr APIs like service to service invocation, state management, pub/sub, secrets, and much more, and provides a simple, intuitive API for building applications.
Installation
To get started with the JavaScript SDK, install the Dapr JavaScript SDK package from NPM:
npm install --save @dapr/dapr
Conversation
Converse with LLMs using DaprClient.conversation over HTTP or gRPC, including tool calling, structured output, PII scrubbing, prompt cache retention, and token usage statistics. These guides target JavaScript SDK 3.19.0 or later.
Schedule one-time, interval-based, or cron-based jobs and receive their callbacks using DaprClient.jobs and DaprServer.jobs. Jobs requires JavaScript SDK 3.19.0 or later, Dapr runtime 1.16 or later, and a running Scheduler service.
Read application settings and subscribe to changes with DaprClient.configuration. The configuration how-to guide and client usage guidance cover selected or all keys, store-specific metadata, response handling, and subscription cleanup using @dapr/dapr 3.19.0 or later. Configuration operations require gRPC in the JavaScript SDK.
State Management
Save, retrieve, and delete application state with DaprClient.state. The SDK supports bulk operations, ETags, consistency options, transactions, TTL metadata, custom serialization, and state queries over HTTP or gRPC.
Publish single events or batches over HTTP or gRPC, receive programmatic server callbacks, or subscribe through a client-initiated gRPC stream without an application server.
The publish and subscribe guide covers JavaScript SDK 3.19.0 or later, including routing, acknowledgements, dead-letter topics, serialization, error handling, and subscription cleanup.
Service invocation
Call services over HTTP or gRPC and receive invocations through DaprServer or an existing HTTP application.
The service invocation guide covers JavaScript SDK 3.19.0 or later, including headers, query parameters, callback responses, serialization, error handling, and transport limitations.
Secrets
Retrieve individual and bulk secrets with DaprClient.secret. Follow the Secrets how-to guide for setup, or read the client usage guidance for metadata, response shapes, and HTTP/gRPC differences. The guides target JavaScript SDK 3.19.0 or later.
Binary Store
Store, retrieve, stream, and delete binary files with DaprClient.binaryStore over HTTP or gRPC. Binary Store requires Dapr runtime 1.19 or later and JavaScript SDK 3.19.0 or later.
Encrypt and decrypt messages and files with DaprClient.crypto over HTTP or gRPC in @dapr/dapr 3.19.0 or later. Prefer gRPC for large payloads and production streaming.
Follow the Cryptography how-to guide to configure a component and encrypt data. Read the client usage guidance for supported inputs, ciphers, key references, streaming, and limitations.
Search
Manage indexes and index, retrieve, delete, and query JSON documents with DaprClient.search over HTTP or gRPC. Search requires Dapr runtime 1.19 or later and JavaScript SDK 3.19.0 or later.
Follow the Search how-to guide to get started, or read the client usage guidance for query options, pagination, write acknowledgements, cancellation, and errors.
Vector
Store precomputed embeddings and run similarity searches with DaprClient.vector over HTTP or gRPC. Vector requires a Vector-capable Dapr runtime from the 1.19 release line or later and JavaScript SDK 3.19.0 or later.
Follow the Vector how-to guide to get started, or read the client usage guidance for configuration, indexing acknowledgements, cancellation, and error handling.
Structure
The Dapr JavaScript SDK contains two major components:
DaprServer: to manage all Dapr sidecar to application communication.
DaprClient: to manage all application to Dapr sidecar communication.
The above communication can be configured to use either of the gRPC or HTTP protocols.
Getting Started
To help you get started, check out the resources below:
Client
Create a JavaScript client and interact with the Dapr sidecar and other Dapr applications (e.g., publishing events, output binding support, etc.).
Server
Create a JavaScript server and let the Dapr sidecar interact with your application (e.g., subscribing to events, input binding support, etc.).
Actors
Create virtual actors with state, reminders/timers, and methods.
Logging
Configure and customize the SDK logging.
Examples
Clone the JavaScript SDK source code and try out some of the examples to get started quickly.
4.1 - JavaScript Client SDK
JavaScript Client SDK for developing Dapr applications
Introduction
The Dapr Client allows you to communicate with the Dapr Sidecar and get access to its client facing features such as Publishing Events, Invoking Output Bindings, State Management, Secret Management, and much more.
For LLM interactions, use client.conversation.converse(request). The Conversation guides cover setup, message history, structured output, caching, token usage, and tool calling with JavaScript SDK 3.19.0 or later.
import{DaprClient,DaprServer,HttpMethod,CommunicationProtocolEnum}from"@dapr/dapr";constdaprHost="127.0.0.1";// Dapr Sidecar Host
constdaprPort="3500";// Dapr Sidecar Port of this Example Server
constserverHost="127.0.0.1";// App Host of this Example Server
constserverPort="50051";// App Port of this Example Server
// HTTP Example
constclient=newDaprClient({daprHost,daprPort});// GRPC Example
constclient=newDaprClient({daprHost,daprPort,communicationProtocol: CommunicationProtocolEnum.GRPC});
Running
To run the examples, you can use two different protocols to interact with the Dapr sidecar: HTTP (default) or gRPC.
# Using dapr rundapr run --app-id example-sdk --app-protocol http -- npm run start
# or, using npm scriptnpm run start:dapr-http
Using gRPC
Since HTTP is the default, you will have to adapt the communication protocol to use gRPC. You can do this by passing an extra argument to the client or server constructor.
# Using dapr rundapr run --app-id example-sdk --app-protocol grpc -- npm run start
# or, using npm scriptnpm run start:dapr-grpc
Environment Variables
Dapr Sidecar Endpoints
You can use the DAPR_HTTP_ENDPOINT and DAPR_GRPC_ENDPOINT environment variables to set the Dapr
Sidecar’s HTTP and gRPC endpoints respectively. When these variables are set, the daprHost
and daprPort don’t have to be set in the options argument of the constructor, the client will parse them automatically
out of the provided endpoints.
import{DaprClient,CommunicationProtocolEnum}from"@dapr/dapr";// Using HTTP, when DAPR_HTTP_ENDPOINT is set
constclient=newDaprClient();// Using gRPC, when DAPR_GRPC_ENDPOINT is set
constclient=newDaprClient({communicationProtocol: CommunicationProtocolEnum.GRPC});
If the environment variables are set, but daprHost and daprPort values are passed to the
constructor, the latter will take precedence over the environment variables.
Dapr API Token
You can use the DAPR_API_TOKEN environment variable to set the Dapr API token. When this variable
is set, the daprApiToken doesn’t have to be set in the options argument of the constructor,
the client will get it automatically.
General
Increasing Body Size
You can increase the body size that is used by the application to communicate with the sidecar by using aDaprClient’s option.
import{DaprClient,CommunicationProtocolEnum}from"@dapr/dapr";// Allow a body size of 10Mb to be used
// The default is 4Mb
constclient=newDaprClient({daprHost,daprPort,communicationProtocol: CommunicationProtocolEnum.HTTP,maxBodySizeMb: 10,});
Proxying Requests
In JavaScript SDK 3.19.0, client.proxy.create() is unsupported for both HTTP and the gRPC ConnectRPC transport and rejects when called. Use client.invoker.invoke() for Dapr service invocation.
The JavaScript Client SDK allows you to interface with all of the Dapr building blocks focusing on Client to Sidecar features.
Search API
Use client.search to manage indexes and index, retrieve, delete, and query JSON documents over HTTP or gRPC. Requires Dapr runtime 1.19 or later and JavaScript SDK 3.19.0 or later.
See the Search how-to guide for a complete example, and Search client usage for method signatures, query options, write acknowledgements, cancellation, and errors.
Jobs API
Use client.jobs to schedule, retrieve, and delete jobs with JavaScript SDK 3.19.0 or later. See the Jobs how-to guide and client usage guidance for scheduling options, payloads, runtime compatibility, and error handling.
Follow calling services for a runnable client and server setup, other verbs, query parameters, namespaces, and non-Dapr endpoints. See configuration and usage for serialization and errors. Custom request headers are forwarded by the HTTP invoker, not the gRPC invoker.
State Management API
Use client.state to access configured state stores over HTTP or gRPC. The state management guides cover JavaScript SDK 3.19.0 or later, including bulk deletion, ETags, state options, TTL, transactions, serialization, and protocol-specific errors.
Save, Get and Delete application state
Follow How to: Manage state for a runnable example with component configuration, save/get/delete, bulk reads and deletes, conditional updates, and transactions.
HTTP save, delete, and deleteBulk can return { error } instead of rejecting. Check that field and also handle promise rejections; gRPC RPC failures reject. See state client usage for the complete method and response reference.
Query State API
The alpha query API supports filtering, sorting, and pagination on query-capable stores over HTTP and gRPC. Follow How to: Query state for query expressions, continuation tokens, and result decoding.
See publishing events for bulk operations, metadata, CloudEvents, raw payloads, and transport-specific error handling. See configuration and usage for client lifetime and serialization.
Streaming message subscriptions
With a gRPC client, client.pubsub.subscribeStream() receives messages without DaprServer or an application callback port. Follow the streaming subscription guide for a complete worker, runtime requirements, acknowledgements, cancellation, and failure supervision.
import{DaprClient}from"@dapr/dapr";constdaprHost="127.0.0.1";constdaprPort="3500";asyncfunctionstart() {constclient=newDaprClient({daprHost,daprPort});constsecretStoreName="my-secret-store";constsecretKey="secret-key";// Retrieve a single secret; the result is the secret's key-value data
constsecret=awaitclient.secret.get(secretStoreName,secretKey);// Retrieve all accessible secrets, nested by secret name
constsecrets=awaitclient.secret.getBulk(secretStoreName);}start().catch((e)=>{console.error(e);process.exit(1);});
For JavaScript SDK 3.19.0 or later, follow the Secrets how-to guide for a runnable example, or read the Secrets client usage guidance for configuration, TypeScript response validation, and error handling.
In 3.19.0, HTTP get accepts metadata as a query-string string and preserves all values in a multi-valued secret. gRPC get ignores metadata and returns only the first key-value pair. Bulk retrieval preserves nested values with either protocol, but neither exposes bulk metadata.
Use client.configuration to read application settings and subscribe to changes. The JavaScript SDK requires gRPC for every configuration method; the HTTP client is not supported.
The configuration how-to guide provides runnable examples for @dapr/dapr 3.19.0 or later. The client usage guidance covers all methods, metadata, response shapes, and subscription error limitations.
import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constdaprHost="127.0.0.1";asyncfunctionstart() {constclient=newDaprClient({daprHost,daprPort: process.env.DAPR_GRPC_PORT??"50001",communicationProtocol: CommunicationProtocolEnum.GRPC,});try{conststream=awaitclient.configuration.subscribeWithKeys("config-store",["key1","key2"],async(data)=>{console.log("Subscribe received updates from config store: ",data);});try{awaitnewPromise((resolve)=>setTimeout(resolve,60000));}finally{awaitstream.stop();}}finally{awaitclient.stop();}}start().catch((e)=>{console.error(e);process.exit(1);});
To watch all keys, use subscribe(storeName, callback). To include store-specific metadata, use subscribeWithMetadata(storeName, keys, metadata, callback). All-key behavior depends on the component. See subscription lifetime and callbacks before relying on a subscription for configuration freshness.
Cryptography API
In @dapr/dapr 3.19.0 or later, client.crypto supports encryption and decryption over both HTTP and gRPC. Pass data and options to receive a Buffer, or pass only options to receive a Node.js Duplex stream.
Prefer gRPC for large payloads and production streaming. Dapr buffers HTTP cryptography output until the request is fully consumed.
import{DaprClient,CommunicationProtocolEnum}from"@dapr/dapr";asyncfunctionstart() {constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"50001",communicationProtocol: CommunicationProtocolEnum.GRPC,});try{constciphertext=awaitclient.crypto.encrypt("A message to encrypt",{componentName:"crypto-local",keyName:"symmetric256",keyWrapAlgorithm:"A256KW",});constplaintext=awaitclient.crypto.decrypt(ciphertext,{componentName:"crypto-local",});console.log("Decrypted bytes:",plaintext.length);}finally{awaitclient.stop();}}start().catch((e)=>{console.error(e);process.exit(1);});
This example requires a configured crypto-local component and a compatible symmetric256 key. Follow the JavaScript Cryptography how-to guide for complete setup and file-stream examples. See the client usage guidance for ciphers, key references, errors, and runtime limitations.
Distributed Lock API
Try Lock and Unlock APIs
import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";import{LockStatus}from"@dapr/dapr/types/lock/UnlockResponse";constdaprHost="127.0.0.1";constdaprPortDefault="3500";asyncfunctionstart() {constclient=newDaprClient({daprHost,daprPort});conststoreName="redislock";constresourceId="resourceId";constlockOwner="owner1";letexpiryInSeconds=1000;console.log(`Acquiring lock on ${storeName}, ${resourceId} as owner: ${lockOwner}`);constlockResponse=awaitclient.lock.lock(storeName,resourceId,lockOwner,expiryInSeconds);console.log(lockResponse);console.log(`Unlocking on ${storeName}, ${resourceId} as owner: ${lockOwner}`);constunlockResponse=awaitclient.lock.unlock(storeName,resourceId,lockOwner);console.log("Unlock API response: "+getResponseStatus(unlockResponse.status));}functiongetResponseStatus(status: LockStatus){switch(status){caseLockStatus.Success:
return"Success";caseLockStatus.LockDoesNotExist:
return"LockDoesNotExist";caseLockStatus.LockBelongsToOthers:
return"LockBelongsToOthers";default:return"InternalError";}}start().catch((e)=>{console.error(e);process.exit(1);});
DaprClient.workflow exposes the basic workflow management API over HTTP or gRPC. For
@dapr/dapr3.19.0 or later, use scheduleNewWorkflow, getWorkflowState, and raiseEvent;
the older start, get, and raise names are deprecated aliases.
For authoring workers, durable waits, listing, history retrieval, reruns, and binary-store payload references,
use the separate workflow SDK guides. DaprWorkflowClient uses
gRPC and returns WorkflowState, not the basic API’s response object shown below.
Workflow management
import{DaprClient}from"@dapr/dapr";asyncfunctionstart() {constclient=newDaprClient();// Start a new workflow instance
constinstanceId=awaitclient.workflow.scheduleNewWorkflow("OrderProcessingWorkflow",{Name:"Paperclips",TotalCost: 99.95,Quantity: 4,});console.log(`Started workflow instance ${instanceId}`);// Get a workflow instance
constworkflow=awaitclient.workflow.getWorkflowState(instanceId);console.log(`Workflow ${workflow.workflowName}, created at ${workflow.createdAt.toUTCString()}, has status ${workflow.runtimeStatus}`,);console.log(`Additional properties: ${JSON.stringify(workflow.properties)}`);// Pause a workflow instance
awaitclient.workflow.pause(instanceId);console.log(`Paused workflow instance ${instanceId}`);// Resume a workflow instance
awaitclient.workflow.resume(instanceId);console.log(`Resumed workflow instance ${instanceId}`);// Terminate a workflow instance
awaitclient.workflow.terminate(instanceId);console.log(`Terminated workflow instance ${instanceId}`);// Purge a workflow instance
awaitclient.workflow.purge(instanceId);console.log(`Purged workflow instance ${instanceId}`);}start().catch((e)=>{console.error(e);process.exit(1);});
4.2 - State management with the Dapr JavaScript SDK
Save, retrieve, delete, transact, and query application state with the Dapr JavaScript SDK
Use DaprClient.state to access configured Dapr state store components from JavaScript or TypeScript. The client supports single-key reads and deletes, bulk saves, bulk reads and deletes, optimistic concurrency with ETags, multi-key transactions, and state queries over HTTP or gRPC.
These guides target @dapr/dapr 3.19.0 or later. State management is part of this package; there is no separate state management package or client registration.
Filter, sort, and paginate state using the alpha query API.
Not every state store supports ETags, transactions, TTL, or queries. Check the supported state stores and your component’s reference before depending on these features. Bulk save and bulk delete are not substitutes for an atomic transaction.
This section covers application state, not the actor state manager. The JavaScript SDK does not provide the .NET SDK’s source-generated, store-scoped state interfaces; pass the component name to each client.state operation.
4.2.1 - How to: Manage state with the Dapr JavaScript SDK
Learn how to save, retrieve, and delete state, use ETags, and execute bulk operations and transactions
Use DaprClient.state to manage key/value application state without depending on a particular database client. This guide uses Redis and covers basic operations, optimistic concurrency, bulk operations, TTL, and transactions.
Adjust the connection settings for your Redis instance. See the Redis component reference for authentication and production configuration.
The component’s metadata.name, statestore, is the store name used in client calls. It is not the component type or the file name. Keep the same Dapr application ID between runs to read previously saved state; Dapr prefixes keys with the application ID by default.
To use gRPC, change communicationProtocol to CommunicationProtocolEnum.GRPC and daprPort to "50001". The explicit JsonSerializer makes value serialization consistent across the examples, including object-valued transactions and query results. It is optional, but opting in can change how existing values are interpreted. Read the serialization guidance before changing an existing application’s configuration.
The remaining examples reuse client and storeName. Place them inside the try block before the client is stopped. They assume the initial save has completed.
Read multiple entries
save already accepts an array for bulk writes. Use getBulk to read multiple keys:
constitems=awaitclient.state.getBulk(storeName,["widget-a","widget-b"],{parallelism:4},);for(constitemofitems){if(item.error){thrownewError(`Unable to read ${item.key}: ${item.error}`);}console.log(item.key,item.data,item.etag);}
Each result is an item with key, data, and an optional etag, not just the saved value. Match results by key rather than relying on array order. In this example, widget-b has already been deleted; missing values differ between protocols. See response shapes for details.
Optimistic concurrency with ETags
get returns only the value, not the response ETag. To read a value and its ETag, use getBulk with one key. Pass the returned ETag to a subsequent save or delete to detect concurrent changes.
Keep this import at module scope. Inside the try block:
constitemsWithEtags=awaitclient.state.getBulk(storeName,["widget-a"]);constcurrent=itemsWithEtags.find((item)=>item.key==="widget-a");if(!current||current.error||!current.etag){thrownewError("Could not read widget-a with an ETag");}constupdated=awaitclient.state.save(storeName,[{key:"widget-a",value:{...current.data,color:"green"},etag:current.etag,options:{concurrency:StateConcurrencyEnum.CONCURRENCY_FIRST_WRITE,consistency:StateConsistencyEnum.CONSISTENCY_STRONG,},},]);if(updated.error){throwupdated.error;}
The state store must support ETags. With first-write concurrency, an ETag mismatch indicates that another writer changed the value. Handle the conflict according to your application’s rules, for example by reading the latest value and recomputing the update. Do not blindly retry a stale ETag.
For a conditional delete, read a fresh ETag after any successful update:
constlatestItems=awaitclient.state.getBulk(storeName,["widget-a"]);constlatest=latestItems.find((item)=>item.key==="widget-a");if(!latest||latest.error||!latest.etag){thrownewError("Could not read widget-a with an ETag");}constremoved=awaitclient.state.delete(storeName,"widget-a",{etag:latest.etag,concurrency:StateConcurrencyEnum.CONCURRENCY_FIRST_WRITE,consistency:StateConsistencyEnum.CONSISTENCY_STRONG,});if(removed.error){throwremoved.error;}
HTTP write failures can be returned in result.error, while gRPC failures reject the promise. The examples check the result and also have an outer error handler so neither path is ignored.
Delete multiple entries
deleteBulk accepts key-only items, with optional ETags, per-item metadata, and state options. It does not require or serialize values:
An empty array succeeds without contacting the sidecar. Over HTTP, the SDK issues individual deletes and waits for all of them; over gRPC, it sends one bulk-delete RPC. Neither is atomic, and a failure can leave some entries deleted. Use a transaction when all-or-nothing behavior is required.
Execute a state transaction
Use transaction to perform multiple upsert and delete operations atomically in a store that supports transactions:
This example uses the JsonSerializer configured above. Without an explicit serializer, the gRPC transaction implementation expects an already encoded string or bytes rather than serializing object values as save does.
The optional third argument is transaction-wide metadata:
Metadata and transaction constraints depend on the component. For example, a store may require all operations to use the same partition. See the client usage limitations before using per-operation metadata or ETags in a transaction.
Set a time to live
For a store that supports TTL, pass ttlInSeconds as metadata. This saves an entry that expires after 60 seconds:
Metadata can also be supplied on individual save items. Shared save metadata overrides matching per-item metadata keys. See state store TTL for component support and expiration semantics.
Next steps
State client usage: options, serialization, metadata, response shapes, and errors.
Query state: filtering, sorting, and pagination with a query-capable store.
4.2.2 - State client usage
Configuration, options, serialization, response shapes, and protocol-specific behavior of the JavaScript state client
State management is available through DaprClient.state. This page describes the implementation in 3.19.0 and the behavior to account for when using that package or a later compatible release.
Client lifetime and configuration
Reuse a long-lived DaprClient instead of constructing one per operation. Await outstanding requests before calling await client.stop() during shutdown.
For HTTP, use CommunicationProtocolEnum.HTTP and the sidecar’s HTTP port, normally "3500". Port options are strings.
When explicit host and port options are omitted, the client can read DAPR_HTTP_ENDPOINT or DAPR_GRPC_ENDPOINT for the selected protocol. Otherwise it uses host/port options with defaults of 127.0.0.1 and DAPR_HTTP_PORT or DAPR_GRPC_PORT (normally 3500 and 50001). The API token defaults to DAPR_API_TOKEN.
Choose an operation
Every method takes a state store component name as its first argument.
Method
Purpose
Successful result
save(storeName, items, options?)
Save one or more key/value items.
{}
get(storeName, key, options?)
Read a single value.
The value, not an item containing an ETag.
getBulk(storeName, keys, options?)
Read values and ETags for multiple keys.
Array of result items.
delete(storeName, key, options?)
Delete one key, optionally checking an ETag.
{}
deleteBulk(storeName, items, options?)
Delete multiple keys without supplying values.
{}
transaction(storeName, operations?, metadata?)
Atomically execute upserts and deletes in a supporting store.
undefined (Promise<void>).
query(storeName, query)
Filter, sort, and paginate a supporting store.
{ results, token? }
The SDK does not expose a separate single-item save, a getWithETag method, a boolean-returning conditional write, or a generic get<T> method. Use a one-element array for single saves and bulk reads that need an ETag. The broadly typed read results do not perform runtime schema validation.
State options
Import StateConsistencyEnum and StateConcurrencyEnum from @dapr/dapr rather than passing the HTTP wire-format strings:
Select the store default, detect conflicting writes with ETags, or use last-write-wins behavior.
These are members of the corresponding enum. Support depends on the state store. ETags are opaque version strings; do not invent or increment them.
Options have different locations depending on the operation:
Operation
Where to put options
save
Each item’s options: { concurrency, consistency } and optional string etag. The final argument accepts shared metadata only.
get
Final argument: { consistency, metadata }, with either field optional.
getBulk
Final argument: { parallelism, metadata }. There is no consistency option.
delete
Final argument: { concurrency, consistency, etag, metadata }, with fields optional.
deleteBulk
Each item’s options, etag, and metadata; final argument accepts shared metadata only.
transaction
Each operation’s request.options; transaction-wide metadata is the third argument. See the limitations below.
When supplying an item’s options from TypeScript, its IStateOptions type requires both concurrency and consistency. Use the respective UNSPECIFIED enum member when you want the store default for one of them.
Metadata and TTL
Use string key/value metadata supported by the component, such as ttlInSeconds, partitionKey, or contentType. State metadata is not an arbitrary HTTP header collection.
Operation
HTTP behavior
gRPC behavior
save
Sends item metadata in the body and shared metadata as query parameters.
Merges shared metadata into each item, overriding duplicate keys.
get
Forwards options.metadata.
Does not forward options.metadata in this implementation.
getBulk
Forwards options.metadata.
Forwards options.metadata.
delete
Forwards options.metadata.
Does not forward options.metadata in this implementation.
deleteBulk
Merges shared metadata over item metadata, then forwards it in individual deletes.
Merges shared metadata over item metadata in one bulk-delete RPC.
transaction
Forwards transaction-wide metadata and each request’s metadata.
Forwards transaction-wide metadata, but not each request’s metadata.
query
No separate metadata argument.
No separate metadata argument.
For saves, shared metadata takes precedence over matching item metadata keys. TTL values belong in metadata, not in state options. See state store TTL.
If a component requires per-request metadata to locate an entry, do not assume single-key reads and deletes behave identically across protocols. Use HTTP for those calls, or use getBulk and deleteBulk with metadata where appropriate.
Response shapes
Single read
get returns the deserialized value, or text if the default JSON parse fails. It does not return the HTTP headers or the gRPC response envelope. A missing key returns an empty string in the standard no-data response, not a guaranteed undefined or null.
Do not use a truthiness check to distinguish a missing key from a legitimate stored value such as false, 0, or "". If your application needs an unambiguous presence check, store a document envelope and use a bulk read to examine the item and ETag, taking the component’s capabilities into account.
Bulk read
Items contain key, data, and an optional etag. HTTP returns the runtime’s item objects, which may also include error and metadata. A missing HTTP item’s data can be absent or null; gRPC maps empty data to "".
Without a configured serializer, gRPC bulk reads return only key, data, and etag; per-item error and metadata are not preserved by that mapping. With a serializer configured, gRPC preserves those fields as well. Where available, inspect each item’s error even when the overall request succeeded. Match items by key, not array position.
Set parallelism explicitly if your application needs a particular concurrency limit for bulk reads. When it is omitted, the protocols differ in this implementation: gRPC sends the SDK default of 10, while HTTP omits the field and the runtime default applies.
Writes and deletes
save, delete, and deleteBulk return a StateSaveResponseType: an empty object on success, with an optional error on HTTP failure. They do not return a new ETag. Read it again before the next conditional update.
Query
query returns results and an optional pagination token. Each result has key, data, and optional etag and error. Data decoding depends on protocol and serializer configuration; see query guidance.
Bulk deletion
deleteBulk accepts a readonly array of items shaped like save items without the required value. Existing key/value arrays are also accepted; their values are ignored and the serializer is not invoked.
HTTP sends individual deletes concurrently and waits for all requests to finish. It returns the first error in input order, not necessarily the first request to fail. gRPC sends one DeleteBulkState RPC and rejects on RPC failure. An empty batch returns {} without initializing the sidecar connection.
Bulk deletion is not atomic on either protocol. A reported failure does not mean no keys were deleted, and the response does not provide a complete per-key outcome list. Reconcile partial completion if your application needs to retry safely.
Transactions
Use upsert and delete operation names. The underlying component must support transactions; save and deleteBulk do not provide equivalent atomicity.
There are important differences in this implementation:
Without an explicit serializer, gRPC transaction upserts pass the supplied value to Buffer.from rather than applying save’s object serialization. Configure JsonSerializer for object-valued transactions, or supply appropriately encoded data for that protocol.
gRPC does not forward individual request.metadata fields. Use transaction-wide metadata where the component supports it.
The transaction request type declares etag as { value: string }, but the gRPC implementation calls toString() on that object rather than reading its value. Do not rely on transaction ETags for portable conditional writes in this release. Use the documented single-item save/delete pattern when atomic multi-key conditions are not required, or verify a later SDK fix before relying on conditional transactions.
Serialization
With no serializer configured, the SDK retains its legacy behavior:
Operation
HTTP
gRPC
Save
Values are part of a JSON request body.
Objects are JSON-stringified; primitives are converted to strings.
Get
Parses JSON when possible, otherwise returns text.
Parses JSON when possible, otherwise returns text.
Bulk get
Returns the runtime’s JSON item data.
Parses each item’s bytes as JSON when possible, otherwise returns text.
Query
Returns the runtime’s JSON item data.
Returns raw Uint8Array item data.
For consistent JSON value encoding, explicitly configure the exported JsonSerializer:
The serializer is a client-wide setting, not a per-state-call option. For state, it serializes saved values and transaction upsert values, and deserializes values returned by single reads, bulk reads, and queries. It does not serialize keys, ETags, metadata, delete values, or query filter expressions.
TypeScript applications can implement the exported IDaprSerializer interface, with synchronous serialize<T>(value): string and deserialize<T>(data: string): T methods and an optional contentType. A JSON media type (the default, application/json, or a +json media type) must produce valid JSON. A non-JSON serializer’s output is stored as a JSON string inside the Dapr envelope; encode binary formats as text, for example using base64. This does not turn state management into a streaming file API.
The serializer’s contentType controls SDK encoding; it does not automatically add state component contentType metadata. Supply that metadata explicitly when required by the store, such as when storing queryable JSON documents.
All readers and writers must agree on the stored representation. Opting in to JsonSerializer can change existing string behavior, especially gRPC values previously stored as unquoted text. Test old data and cross-protocol readers before migrating. Custom serializers can also change which document fields are available to state queries. Type parameters do not supply runtime schema validation or automatically restore class instances.
Error handling
Await operations and handle both returned write errors and promise rejections:
try{constresult=awaitclient.state.save("statestore",[{key:"widget-a",value:{color:"blue"}},]);if(result.error){throwresult.error;}}catch(error){console.error("Could not save widget-a:",error);throwerror;}
This snippet assumes an existing client and an async function or ES module.
Failure path
Behavior
HTTP save and delete request failures
Logged by the SDK and returned as { error }.
HTTP deleteBulk request failures
Individual deletes log failures; the bulk call returns the first error in input order after all deletes finish.
HTTP get, getBulk, transaction, and query request failures
Reject the promise.
gRPC state RPC failures
Reject the promise, preserving the transport error, normally a ConnectError.
Serialization or local request construction failures
Can reject before a request is sent, including on write operations.
HTTP runtime errors normally have a JSON-encoded Error.message with status, error, and error_msg. Transport errors can have other shapes; do not unconditionally parse every error message as JSON. Do not interpret gRPC error codes as HTTP status codes.
An ETag conflict is an error, not a false result. Read or query calls can also succeed at the request level while containing item-level errors. Avoid retrying a whole non-atomic batch without considering partial completion.
Cancellation
The state methods in this release do not accept an AbortSignal, cancellation token, or per-operation deadline. Do not copy the Binary Store client’s signal option into state calls. Racing a promise against a timer does not cancel the underlying state request. Use runtime resiliency policies where appropriate for component timeouts and retries, accounting for the semantics of the operation.
4.2.3 - How to: Query state with the Dapr JavaScript SDK
Filter, sort, and paginate state with the JavaScript SDK’s alpha state query API
Use client.state.query to query JSON documents in a state store that supports the state query API. Both HTTP and gRPC are implemented in 3.19.0. This is the alpha state query API, not a general-purpose SQL or native database query interface.
Prerequisites
Follow the state management how-to to install the SDK and run an application with a sidecar. For this guide, configure a query-capable component named state-mongodb, following the MongoDB state store reference. The basic Redis component in the how-to does not by itself configure query support.
Use a JSON-compatible stored document representation. Some components require additional query configuration or metadata; check the component reference.
Configure the client
Use the following client configuration inside an ES module, and wrap application operations in an error boundary with await client.stop() in finally, as shown in the state management how-to:
For gRPC, change the protocol to CommunicationProtocolEnum.GRPC and the port to "50001". The explicit serializer deserializes query result values on either protocol. Without a serializer, gRPC query results contain raw Uint8Array data rather than parsed documents.
Save queryable documents
Supply contentType metadata when the store requires it to retain JSON documents:
The SDK accepts an object with filter, sort, and page fields. The TypeScript StateQueryType requires all three. The following query finds blue widgets in either region and sorts by size:
constquery={filter:{AND:[{EQ:{color:"blue"}},{IN:{"warehouse.region":["west","east"]}},],},sort:[{key:"size",order:"ASC"}],page:{limit:10},};constresponse=awaitclient.state.query("state-mongodb",query);for(constitemofresponse.results){if(item.error){thrownewError(`Unable to read query result ${item.key}: ${item.error}`);}console.log(item.key,item.data,item.etag);}
Use field paths into the stored document. The SDK does not translate filter paths through a custom serializer. For example, a serializer that wraps each value in a payload property requires filter paths matching that representation.
The SDK’s declared filter surface includes EQ, IN, AND, and OR. Sort entries accept ASC or DESC, with ascending order as the runtime default when omitted. The runtime query API documents additional operators, but do not assume they are represented in this SDK version’s top-level filter type.
For an unfiltered, unsorted page, use filter: {}, sort: [], and page: { limit: 10 }. A SQL string or an object containing language and query is not the StateQueryType accepted by this API.
In TypeScript, preserve literal sort orders when extracting a query into a variable, for example with order: "ASC" as const, or pass the query object directly to client.state.query.
Retrieve another page
The response contains results and an optional token. Treat the token as opaque and pass it back in page.token, retaining the original filter, sort, and page size:
if(response.token){constnextPage=awaitclient.state.query("state-mongodb",{...query,page:{...query.page,token:response.token},});for(constitemofnextPage.results){if(item.error){thrownewError(`Unable to read query result ${item.key}: ${item.error}`);}console.log(item.key,item.data);}}
Continue until no continuation token is returned. There is no automatic paginator; an empty results array should not replace the token check.
Response and protocol considerations
Each query result has key, data, and optional etag and error. Check item errors as well as catching promise rejections.
With a configured serializer, the SDK deserializes successful, non-empty result values. Without one, HTTP returns the runtime’s JSON result data, while gRPC returns bytes. For known JSON data on gRPC without a serializer, explicitly decode a successful item’s data with JSON.parse(Buffer.from(item.data).toString("utf8")); do not apply that conversion to HTTP results that are already objects.
The declared response exposes results and token, not a portable response metadata map. query has no separate request metadata parameter. Store support, indexes, filter behavior, and pagination semantics remain component-dependent.
See state client usage for configuration, serialization compatibility, and error handling.
4.3 - JavaScript Server SDK
JavaScript Server SDK for developing Dapr applications
Introduction
The Dapr Server will allow you to receive communication from the Dapr Sidecar and get access to its server facing features such as: Subscribing to Events, Receiving Input Bindings, and much more.
With JavaScript SDK 3.19.0 or later, register scheduled job callbacks through server.jobs.listen(name, callback). See the Jobs how-to guide for a runnable example and the callback usage guidance for acknowledgments, retries, and protocol requirements.
import{DaprServer,CommunicationProtocolEnum}from"@dapr/dapr";constdaprHost="127.0.0.1";// Dapr Sidecar Host
constdaprPort="3500";// Dapr Sidecar Port of this Example Server
constserverHost="127.0.0.1";// App Host of this Example Server
constserverPort="50051";// App Port of this Example Server
// HTTP Example
constserver=newDaprServer({serverHost,serverPort,communicationProtocol: CommunicationProtocolEnum.HTTP,// DaprClient to use same communication protocol as DaprServer, in case DaprClient protocol not mentioned explicitly
clientOptions:{daprHost,daprPort,},});// GRPC Example
constserver=newDaprServer({serverHost,serverPort,communicationProtocol: CommunicationProtocolEnum.GRPC,clientOptions:{daprHost,daprPort,},});
Running
To run the examples, you can use two different protocols to interact with the Dapr sidecar: HTTP (default) or gRPC.
Using HTTP (built-in express webserver)
import{DaprServer}from"@dapr/dapr";constserver=newDaprServer({serverHost: appHost,serverPort: appPort,clientOptions:{daprHost,daprPort,},});// initialize subscribtions, ... before server start
// the dapr sidecar relies on these
awaitserver.start();
# Using dapr rundapr run --app-id example-sdk --app-port 50051 --app-protocol http -- npm run start
# or, using npm scriptnpm run start:dapr-http
ℹ️ Note: The app-port is required here, as this is where our server will need to bind to. Dapr will check for the application to bind to this port, before finishing start-up.
Using HTTP (bring your own express webserver)
Instead of using the built-in web server for Dapr sidecar to application communication, you can also bring your own instance. This is helpful in scenarios like when you are building a REST API back-end and want to integrate Dapr directly in it.
Note, this is currently available for express only.
💡 Note: when using a custom web-server, the SDK will configure server properties like max body size, and add new routes to it. The routes are unique on their own to avoid any collisions with your application, but it’s not guaranteed to not collide.
import{DaprServer,CommunicationProtocolEnum}from"@dapr/dapr";importexpressfrom"express";constmyApp=express();myApp.get("/my-custom-endpoint",(req,res)=>{res.send({msg:"My own express app!"});});constdaprServer=newDaprServer({serverHost:"127.0.0.1",// App Host
serverPort:"50002",// App Port
serverHttp: myApp,clientOptions:{daprHostdaprPort}});// Initialize subscriptions before the server starts, the Dapr sidecar uses it.
// This will also initialize the app server itself (removing the need for `app.listen` to be called).
awaitdaprServer.start();
After configuring the above, you can call your custom endpoint as you normally would:
Since HTTP is the default, you will have to adapt the communication protocol to use gRPC. You can do this by passing an extra argument to the client or server constructor.
import{DaprServer,CommunicationProtocolEnum}from"@dapr/dapr";constserver=newDaprServer({serverHost: appHost,serverPort: appPort,communicationProtocol: CommunicationProtocolEnum.GRPC,clientOptions:{daprHost,daprPort,},});// initialize subscribtions, ... before server start
// the dapr sidecar relies on these
awaitserver.start();
# Using dapr rundapr run --app-id example-sdk --app-port 50051 --app-protocol grpc -- npm run start
# or, using npm scriptnpm run start:dapr-grpc
ℹ️ Note: The app-port is required here, as this is where our server will need to bind to. Dapr will check for the application to bind to this port, before finishing start-up.
Building blocks
The JavaScript Server SDK allows you to interface with all of the Dapr building blocks focusing on Sidecar to App features.
import{DaprServer,HttpMethod}from"@dapr/dapr";importtype{DaprInvokerCallbackContent}from"@dapr/dapr";constdaprHost="127.0.0.1";// Dapr Sidecar Host
constdaprPort="3500";// Dapr Sidecar Port of this Example Server
constserverHost="127.0.0.1";// App Host of this Example Server
constserverPort="50051";// App Port of this Example Server "
asyncfunctionstart() {constserver=newDaprServer({serverHost,serverPort,clientOptions:{daprHost,daprPort,},});constcallbackFunction=async(data: DaprInvokerCallbackContent)=>{console.log("Received body: ",data.body);console.log("Received metadata: ",data.metadata);console.log("Received query: ",data.query);console.log("Received headers: ",data.headers);// only available in HTTP
return{received: true};};awaitserver.invoker.listen("hello-world",callbackFunction,{method: HttpMethod.GET});// You can now invoke the service with your app id and method "hello-world"
awaitserver.start();}start().catch((e)=>{console.error(e);process.exit(1);});
Follow receiving invocations for matching startup commands, callback field shapes, response behavior, and existing Express applications. See configuration and usage for custom serialization and failure handling.
Follow the server subscription guide for the matching dapr run command, gRPC configuration, registration methods, and callback data and headers. See configuration and usage for serialization and shutdown.
Subscribe with SUCCESS/RETRY/DROP status
Return DaprPubSubStatusEnum values rather than response objects. See acknowledgements and retries for status precedence, thrown errors, and an inbound resiliency policy.
Subscribe to messages rule based
Use subscribeWithOptions() to declare routes and subscribeToRoute() to attach handlers. See the content-based routing example.
Subscribe with Wildcards
See wildcard topics for MQTT-style # and + examples and component requirements.
Bulk Subscribe to messages
subscribeBulk() delivers one entry at a time to your callback and builds per-entry acknowledgements. See bulk subscriptions for batching options and HTTP payload limitations.
Dead Letter Topics
Set deadLetterTopic on the source subscription and register a separate consumer for failed messages. See dead-letter topics for the complete example and the limitations of deadLetterCallback.
Configuration is a client-side building block, including in applications that also run a DaprServer. Use a gRPC DaprClient to read settings or subscribe to updates. A configuration subscription receives updates over the client’s gRPC stream; it does not require a server callback route.
Getting a configuration value
Use client.configuration.get(storeName, keys?, metadata?). Follow the configuration how-to guide for client setup and examples using @dapr/dapr 3.19.0 or later.
Subscribing to Key Changes
Use subscribe, subscribeWithKeys, or subscribeWithMetadata on client.configuration. Retain each returned handle and call await subscription.stop() during shutdown, not close(). See the subscription example and client usage guidance for callback behavior, cleanup, and stream failure limitations.
Call services and receive invocations over HTTP or gRPC with the JavaScript SDK
Use DaprClient.invoker.invoke() to call another application through your local Dapr sidecar, and DaprServer.invoker.listen() to receive invocations. The target can also be an existing HTTP application without the JavaScript SDK.
These guides describe @dapr/dapr 3.19.0 or later, including API and transport limitations.
A supported Node.js LTS release. The package requires Node.js 18 or later.
A target application running with a Dapr app ID and application port. No state store or pub/sub component is required.
Install the 3.19.0 release:
npm install @dapr/dapr@3.19.0
For a later release, substitute its version. Examples use ES module imports; run snippets containing await inside an async function or an ES module.
Choose the protocol
The client’s communicationProtocol selects application-to-sidecar communication. The receiving application’s --app-protocol selects sidecar-to-application communication. These are independent: a gRPC client can invoke an HTTP application and an HTTP client can invoke a DaprServer configured for gRPC.
Capability
HTTP client or server
gRPC client or server
client.invoker.invoke()
Calls the HTTP invocation API
Calls Dapr’s unary InvokeService API
server.invoker.listen()
Registers an HTTP route
Registers an AppCallback.OnInvoke handler
Request verbs
GET, POST, PUT, PATCH, DELETE
Same verbs, carried in the HTTP extension
Custom request headers
options.headers is forwarded
Not forwarded as invocation metadata
Query parameters from the SDK client
Append an encoded query string to methodName
No separate query-string option
Default response decoding
JSON when parseable; otherwise text
JSON required; text or empty responses cause a parse error
Custom application serializer
Supported
Supported
Response status and headers through invoke()
Not exposed
Not exposed
Streaming through invoke()
Not supported; responses are buffered
Not supported; unary request/response
client.proxy.create()
Not supported
Not supported with the SDK’s ConnectRPC transport
Selecting gRPC does not turn invoke() into a client for arbitrary protobuf services. For native gRPC services, use your generated client with Dapr’s gRPC proxying protocol.
4.4.1 - How to: Call services with the JavaScript SDK
Invoke application methods with HTTP or gRPC clients, headers, and query parameters
DaprClient.invoker.invoke() sends a request through the caller’s sidecar to a target application. These examples use @dapr/dapr 3.19.0 or later. Follow the receiving invocations guide to start the invocation-service target used below.
Target Dapr app ID, not the caller’s app ID or host address.
methodName
Target method or relative HTTP path, for example orders or orders/101. Use no leading slash.
method
HttpMethod.GET, POST, PUT, PATCH, or DELETE. Supply it explicitly; the implementations default to GET, but the public TypeScript interface requires it.
data
Optional payload. Objects and arrays use JSON by default.
options
An InvokerOptions object containing optional headers. It has no per-call timeout, cancellation, or retry fields.
The result is the decoded response body, not a response envelope. Although the public return type is object, HTTP may return text and a serializer may return other JavaScript values. There is no invoke<T>() overload and TypeScript types do not validate the response at runtime.
Select a verb
These snippets assume an existing client and matching routes on the target:
Encode individual dynamic path segments with encodeURIComponent() and query values with URLSearchParams. The SDK interpolates methodName into the HTTP invocation URL; it does not encode it for you.
Custom headers are supported by the HTTP implementation. The gRPC implementation does not forward options.headers as request metadata. With a configured serializer, it only uses headers["Content-Type"] to override the payload content type. It also does not populate the request’s separate gRPC HTTP-extension query-string field, so do not use the HTTP query-string example with a gRPC client.
Invoke through a gRPC sidecar endpoint
Replace the client construction in client.mjs with:
Keep the HttpMethod import and invoke() call from the original example, but omit the HTTP headers option. Use the same caller startup command: it exposes both sidecar endpoints. The receiving application can remain HTTP.
By default, the gRPC client decodes the response bytes as UTF-8 and parses them as JSON. An empty body or plain-text response rejects with COULD_NOT_PARSE_RESULT, even if the remote operation succeeded. Return a JSON value from the target, or configure a compatible serializer.
Call across namespaces
Where supported by Dapr’s name-resolution configuration, qualify the target app ID with its namespace:
These are alternative examples: configure external-orders or replace the illustrative URL before running them. The target does not need a Dapr sidecar. See invoking non-Dapr endpoints for resource configuration, authentication, and runtime requirements.
4.4.2 - How to: Receive service invocations with the JavaScript SDK
Register HTTP or gRPC invocation handlers and understand callback requests and responses
Use DaprServer.invoker.listen(methodName, callback, options?) to register an invocation handler. These examples use @dapr/dapr 3.19.0 or later.
Start an HTTP service
Save this complete example as server.mjs:
import{DaprServer,HttpMethod}from"@dapr/dapr";asyncfunctionmain(){constserver=newDaprServer({serverHost:"127.0.0.1",serverPort:"3000",clientOptions:{daprHost:"127.0.0.1",daprPort:"3500",},});awaitserver.invoker.listen("orders",async(request)=>{if(!request.body){thrownewError("An order request body is required");}constorder=JSON.parse(request.body);console.log("Received order:",order);console.log("Correlation ID:",request.headers?.["x-correlation-id"]);return{orderId:order.orderId,status:"accepted"};},{method:HttpMethod.POST},);awaitserver.invoker.listen("health",async()=>({healthy:true}));awaitserver.start();asyncfunctionstop(){awaitserver.stop();awaitserver.client.stop();}process.once("SIGINT",()=>{stop().catch((error)=>{console.error(error);process.exitCode=1;});});}main().catch((error)=>{console.error(error);process.exitCode=1;});
Register handlers before server.start(). The listen() method defaults to GET; explicitly set { method: HttpMethod.POST } for the orders handler. The caller must use the same method name and verb. The health route is a regular example invocation route, not a configuration of Dapr’s application health checks.
Use the client example to call the service, or invoke it through the CLI:
dapr invoke --app-id invocation-service --method health --verb GET
Receive over gRPC
To use Dapr’s gRPC application callback API, add CommunicationProtocolEnum to the imports and replace the server construction with:
Unless overridden in clientOptions, the embedded client’s protocol follows the server protocol. serverPort is the application listener, while clientOptions.daprPort is the sidecar endpoint; do not interchange them. An HTTP caller can still invoke this gRPC callback service.
Understand the callback request
TypeScript handlers receive DaprInvokerCallbackContent, exported from @dapr/dapr. The callback is asynchronous and returns a promise for the response value.
Field
HTTP callback
gRPC callback
body
Normally JSON.stringify(req.body) after the HTTP body parser; undefined when no body was parsed
UTF-8 decoding of the request data bytes; "" when no data was sent
metadata.contentType
Incoming content-type header
Invocation request’s content type
query
The original URL, including path and query string
The HTTP extension’s query-string field
headers
Incoming HTTP headers; names are normally lowercase
Not populated
For a JSON request, explicitly parse request.body as in the example. Invocation handlers do not receive an automatically deserialized domain object, even when a custom serializer is configured.
For an HTTP callback, parse query parameters as a URL, not as a query string alone:
For gRPC callbacks, query contains only the extension’s query string and can be read with URLSearchParams. The JavaScript gRPC invoker does not itself populate that field.
By default, the SDK JSON-encodes truthy return values. There is no special { status, headers, body } response envelope: returning such an object sends those properties as application data. The callback API does not expose an HTTP response object or gRPC response metadata.
Without a custom serializer, undefined, null, false, 0, and "" do not produce their corresponding JSON values. An HTTP handler instead responds with {"closed":true}; a gRPC handler returns no data. A default gRPC client cannot parse that empty response. Prefer an object response such as { accepted: false }.
With a custom serializer, every return value except undefined is serialized, including falsy values. For undefined, HTTP still returns the closure object and gRPC still returns no data. See serialization guidance.
Thrown handler errors propagate to the underlying HTTP error middleware or gRPC transport; they are not successful application response objects. If callers need specific HTTP status codes, headers, or streaming responses, use a regular HTTP framework route instead.
Use an existing HTTP application
Dapr can invoke existing HTTP routes without DaprServer. Run that application with --app-port and --app-protocol http, and use its route path as methodName from a Dapr client.
To share an Express application with SDK callbacks, pass the Express instance as serverHttp:
Install express as an application dependency for this alternative example. Use the HTTP startup command above. server.start() starts the listener, so do not also call app.listen(). The SDK adds middleware and routes to the supplied app; avoid conflicting route names. Use your application’s shutdown handling to call server.stop() and then server.client.stop().
4.4.3 - Service invocation configuration and usage
Configure clients, serialization, authentication, and failure handling for JavaScript service invocation
Reuse a long-lived DaprClient instead of creating one per invocation. Await outstanding work before calling await client.stop() during application shutdown. If using DaprServer, call await server.stop() to stop its listener, then await server.client.stop() to close its embedded client’s resources. Stopping the server alone does not stop that client.
The client initializes its connection and waits for the sidecar when first used. You can call await client.start() to check readiness before accepting application traffic. This connects to an existing sidecar; it does not launch the Dapr runtime process.
Endpoints and authentication
HTTP is the default protocol. Use the sidecar’s HTTP port for HTTP clients and its gRPC port for gRPC clients. Port options are strings:
When neither host nor port is supplied, the SDK uses DAPR_HTTP_ENDPOINT or DAPR_GRPC_ENDPOINT for the selected protocol if set. Otherwise it uses the configured host and port, falling back to 127.0.0.1 and DAPR_HTTP_PORT or DAPR_GRPC_PORT (defaults: 3500 and 50001). Supplying either host or port bypasses the endpoint environment variable.
daprApiToken defaults to DAPR_API_TOKEN. This authenticates the caller to its sidecar; it is not an application authorization header for the destination service. For HTTP destination authorization, supply the appropriate application header through InvokerOptions.headers. See Dapr API token authentication and service invocation access control.
Both transports propagate baggage from an active OpenTelemetry context to the sidecar. This built-in propagation does not mean the gRPC invoker supports arbitrary options.headers metadata.
Payload limits
The gRPC client uses maxBodySizeMb for its transport’s send and receive limits (default: 4 MiB). The HTTP client accepts the same option but does not currently enforce it; HTTP requests are limited by the sidecar and the target application. DaprServer.maxBodySizeMb controls the HTTP listener’s body-parser limit (4 MiB by default). These are separate settings; the client’s option is not an HTTP upload-size limit.
Configure the Dapr sidecar’s request body limit and the target application’s own limits as needed. Increasing a limit does not enable streaming or remove the invoker’s response buffering.
Serialization
Default behavior
Objects and arrays use JSON. The underlying serialization helpers also support text and binary request data, including Buffer, with inferred content types. The public invoke() TypeScript signature accepts data?: object, so primitive payloads are not part of that typed contract.
For HTTP, options.headers["Content-Type"] overrides the inferred request content type. Use that exact casing for the SDK’s serializer selection. Successful HTTP responses are read completely as text and parsed as JSON when possible, regardless of response content type; otherwise the text is returned.
For gRPC, the default request serializer infers the content type and does not use the headers option. Responses are decoded as UTF-8 and must contain JSON. Sending binary data does not make this a binary response API: neither invoker exposes response bytes or a response stream.
Configure an application serializer
Set serializer on DaprClient and clientOptions.serializer on DaprServer. IDaprSerializer is exported as a type from @dapr/dapr and defines:
The SDK also exports JsonSerializer. For example, this opt-in JSON configuration ensures that falsy server return values other than undefined are serialized:
This configuration snippet does not start the server. For a custom encoding, implement IDaprSerializer and configure compatible serializers on both ends. Its wire representation is a string; binary formats must use a string-safe representation such as base64. Serialization errors reject the operation.
On invocation, the client serializes the request and deserializes the response. HTTP skips custom response deserialization for an empty response; gRPC passes even an empty response string to the deserializer.
Server invocation callbacks still receive a string body. Deserialize it explicitly:
import{HttpMethod}from"@dapr/dapr";awaitserver.invoker.listen("echo",async(request)=>{// HTTP passes undefined for a missing body; gRPC passes an empty string.
if(!request.body){thrownewError("An invocation body is required");}returnserializer.deserialize(request.body);},{method:HttpMethod.POST});
With a custom serializer, HTTP preserves non-JSON text or buffer request bodies as strings before invoking the handler. JSON bodies still pass through the HTTP JSON parser and are re-stringified. The server serializes the callback’s returned value using its configured serializer.
The serializer’s contentType defaults to application/json. Both clients can override it with headers["Content-Type"] when using a custom serializer, but the gRPC client still does not forward other custom headers. Changing the content type does not change the serializer implementation.
Errors and response information
Await invocations and handle failures at your application’s error boundary. Do not treat a rejected promise as proof that the target did not execute the operation.
Failure
Behavior
HTTP sidecar or application error response
Rejects with an Error whose message is a JSON string containing status, error (status text), and error_msg (response body). The HTTP helper accepts statuses 200 through 399; redirect handling follows its underlying HTTP client.
HTTP connection or serialization error
Rejects with the underlying error, which need not have a JSON message.
gRPC transport or runtime failure
Rejects with the transport error; ConnectRPC failures use ConnectError codes, not HTTP status numbers.
gRPC non-JSON or empty response without a custom serializer
Rejects with an Error whose JSON message contains error: "COULD_NOT_PARSE_RESULT" and error_msg.
Custom response deserialization failure
Rejects with the serializer error.
invoke() returns only the decoded response body. It does not expose successful status codes, response headers, trailers, or structured per-call response metadata.
A missing gRPC callback registration currently logs a warning and returns an empty invocation response rather than a not-found application payload. The default gRPC client then fails to parse it. Check both the target’s logs and the caller’s error when diagnosing method or verb mismatches.
Timeouts, cancellation, and resiliency
InvokerOptions only contains headers. invoke() does not expose an AbortSignal, timeout, deadline, retry policy, or arbitrary gRPC call options. Do not copy timeout options from other SDKs or rely on illustrative API comments that show unsupported options.
Configure runtime timeouts, retries, and circuit breakers through Dapr resiliency policies. Policies apply in the runtime and do not add client-side cancellation to the JavaScript method. A local Promise.race() timeout only stops the caller waiting; it does not cancel the request or remote processing.
Design state-changing handlers to tolerate retries, for example by using an application request ID and deduplication. A timeout or response decoding failure can occur after the target has committed its work.
Native gRPC services and streaming
client.proxy.create() is not a working alternative in this version. HTTP rejects with HTTPNotSupportedError, and gRPC rejects because GRPCClientProxy is not supported with the ConnectRPC transport.
For a native protobuf service, create a generated gRPC client connected to the caller’s sidecar and attach dapr-app-id metadata as described in invoking services using gRPC. That is runtime gRPC proxying, separate from the SDK’s unary invoke() and DaprServer callback APIs.
For large HTTP requests or responses requiring streaming, use the runtime’s HTTP streaming support with an HTTP client and server that expose streams. The JavaScript invoker buffers the complete response and has no streaming overload.
4.5 - JavaScript SDK for Actors
Author, host, and call virtual actors with the Dapr JavaScript SDK
The Dapr JavaScript SDK lets Node.js applications host virtual actors, call actors through proxies or by method name, manage actor state, and schedule timers and durable reminders.
These guides target @dapr/dapr 3.19.0 or later. Use a supported Node.js LTS release and a Dapr runtime that supports the APIs you use. The how-to guide uses HTTP actor hosting and a local Dapr environment.
Schedule callbacks, retrieve and list reminders, and perform scoped or type-wide cleanup
Protocol and runtime support
The application protocol and the protocol used to call the sidecar are separate choices.
Capability
HTTP
gRPC
Host JavaScript actors with DaprServer
Supported
Not implemented
Invoke actor methods through a proxy or the lower-level actor client
Supported
Supported
Read and transact actor state; register and unregister timers and individual reminders
Supported
Supported
Retrieve an individual reminder with getActorReminder
Supported
Supported
List reminders for one actor with listActorReminders
Dapr 1.19+
Dapr 1.17+
List reminders for every instance of an actor type
Not supported
Dapr 1.17+
Delete reminders in bulk with unregisterActorRemindersByType
Not supported
Dapr 1.17+
A gRPC client can call actors hosted by an HTTP application. It does not require a gRPC actor host. JavaScript actor hosting does not implement the runtime’s app-initiated actor streams.
The SDK does not expose every feature of the runtime’s Actors API. For example, this SDK version has no high-level timer retrieval/listing methods or reminder overwrite and failurePolicy options. See the individual guides for serialization and reentrancy limitations.
Registering actors
Call await server.actor.init() and await server.actor.registerActor(YourActor) before await server.start(). Registration advertises an actor type; it does not create every actor instance. Dapr activates instances on demand.
4.5.1 - How to: Run and use virtual actors with the JavaScript SDK
Create an actor contract, host a stateful actor, and call it from a Node.js client
This guide creates a counter actor whose state survives deactivation. The host and client share a TypeScript contract and use @dapr/dapr 3.19.0 or later.
An interface supplies compile-time checking; it is not a runtime registration or access-control boundary. JavaScript applications can omit TypeScript interfaces.
Step 3: Implement the actor
Create CounterActor.ts:
import{AbstractActor}from"@dapr/dapr";importtype{CounterActorContract,CounterState}from"./CounterActorContract";exportclassCounterActorextendsAbstractActorimplementsCounterActorContract{asyncadd(amount: number):Promise<CounterState>{if(!Number.isFinite(amount)){thrownewTypeError("amount must be a finite number");}constmanager=this.getStateManager<CounterState>();constcurrent=awaitmanager.getOrAddState("counter",{value: 0});constnext={value:(current?.value??0)+amount};awaitmanager.setState("counter",next);returnnext;}asyncget():Promise<CounterState>{conststate=awaitthis.getStateManager<CounterState>().getOrAddState("counter",{value: 0},);returnstate??{value: 0};}}
The runtime saves tracked state changes after a successful method and post-method hook. You do not need to call saveState() in every method. See manage actor state for explicit saves and failure handling.
Step 4: Configure the state store
Create a components directory and save the following as components\statestore.yaml:
This uses Redis from the local Dapr initialization. In production, configure an actor-compatible state store with the required transactional support. Only one component per application can be marked as the actor state store.
Step 5: Register and start the host
Create server.ts:
import{CommunicationProtocolEnum,DaprServer}from"@dapr/dapr";import{CounterActor}from"./CounterActor";asyncfunctionmain():Promise<void>{constserver=newDaprServer({serverHost:"127.0.0.1",serverPort:"3001",communicationProtocol: CommunicationProtocolEnum.HTTP,clientOptions:{daprHost:"127.0.0.1",daprPort:"3500",communicationProtocol: CommunicationProtocolEnum.HTTP,},});awaitserver.actor.init();awaitserver.actor.registerActor(CounterActor);awaitserver.start();console.log("Registered actor types:",awaitserver.actor.getRegisteredActors());}main().catch((error: unknown)=>{console.error(error);process.exitCode=1;});
For a new actor, both calls print { value: 2 }. Run the client again to increment the same actor to 4. The client uses the host’s sidecar for this local example; a separate application can use its own sidecar.
The actor’s identity is the pair CounterActor and counter-1. Creating a proxy does not activate the actor; invoking a method does.
4.5.2 - Author and host actors with the JavaScript SDK
Register actor types, use lifecycle hooks, and configure the JavaScript actor host
JavaScript actors derive from AbstractActor. The SDK constructs an instance with a DaprClient and an ActorId when Dapr activates it. See the how-to guide for a complete application using @dapr/dapr 3.19.0 or later.
Actor construction and identity
If you define a constructor, accept the two runtime arguments and pass them to the base constructor:
You can omit the constructor when no additional initialization is needed. The built-in registration API accepts a class, not a dependency-injection factory, and supplies only those two arguments. It does not provide the .NET SDK’s constructor dependency injection or actor-scoped service container.
The registered actor type is the implementation class’s name, such as DeviceActor. There is no separate type-name option on registerActor. Keep class names stable across deployments and configure bundlers/minifiers to preserve them. Renaming a class changes the actor type and therefore its identity and state namespace.
Lifecycle and method hooks
Override these async methods as needed:
Hook
When it runs
onActivate()
Once per activation, before dispatching the first method or callback
onDeactivate()
When Dapr requests deactivation, for example after an idle timeout
onActorMethodPre()
Before each dispatched actor method, timer callback, or reminder callback
onActorMethodPost()
After a dispatched call completes successfully, before saving tracked state
For a successful call, the order is activation if needed, pre-method hook, method, post-method hook, and state save. Activation and deactivation hooks also have their tracked changes saved. The SDK clears the state cache before the activation and deactivation hooks.
import{AbstractActor}from"@dapr/dapr";exportclassLifecycleActorextendsAbstractActor{asynconActivate():Promise<void>{console.log("Activating",this.getActorId().getId());}asynconDeactivate():Promise<void>{console.log("Deactivating",this.getActorId().getId());}asynconActorMethodPre():Promise<void>{console.log("Starting a call");}asynconActorMethodPost():Promise<void>{console.log("Completed a call");}}
Do not depend on deactivation for guaranteed cleanup after a process crash. A thrown method skips the post-method hook and automatic state save; see state failure handling.
Use getDaprClient() inside an actor to access other Dapr building blocks. Await the resulting operations. External side effects, such as publishing messages, are not part of the actor state transaction.
Register actors and configure the runtime
The actor host must use HTTP. Initialize the callback routes and await all actor registrations before starting the server:
This fragment uses the CounterActor from the how-to guide and runs inside an async function. Set options on DaprServer.clientOptions.actor, because its embedded client supplies the actor runtime configuration. Setting actor options on an unrelated client does not configure the host.
The host exposes /healthz, /dapr/config, and the actor invocation, deactivation, timer, and reminder routes. getRegisteredActors() returns registered type names, not active instance counts. Actor runtime registration is process-wide in this SDK; do not treat multiple DaprServer instances in one process as independent actor runtimes.
Timeouts and scan intervals use Go duration strings, such as "30s" and "1h", rather than Temporal.Duration. Omitted settings are left to the runtime. See actor runtime configuration for defaults and runtime-version-specific behavior. remindersStoragePartitions concerns legacy state-store reminder storage, not Scheduler partitioning.
Reentrancy limitation
The configuration type accepts reentrancy: { enabled: true, maxStackDepth: 32 } and advertises it to Dapr. However, the JavaScript actor dispatcher and proxy do not implement reentrancy-context propagation. Do not assume that enabling the option makes actor call cycles, including an actor calling itself, safe. Prefer acyclic actor-to-actor calls and leave reentrancy disabled unless you provide and verify the required integration.
Application boundaries and shutdown
Keep the HTTP callback routes reachable by the sidecar. In container deployments, configure the sidecar’s application-channel address and container networking so that callbacks reach the application. Loopback addresses refer to the sidecar’s own network namespace unless it shares one with the application.
The TypeScript contract does not restrict method dispatch: the dispatcher looks up a callable property on the actor instance by name. Do not rely on omitted interface members or TypeScript private modifiers to protect sensitive operations. Keep internal operations outside remotely callable actor methods and use appropriate application and sidecar access controls.
On orderly shutdown, stop accepting new work and await in-flight operations. await server.stop() closes the application listener; it does not stop its embedded client. Stop separately owned clients with await client.stop() and the embedded client with await server.client.stop() when they are no longer needed. Do not assume shutdown invokes every actor’s deactivation hook.
4.5.3 - Call actors with the JavaScript SDK
Use actor identities, typed proxies, dynamic invocations, and the lower-level actor client
Use a long-lived DaprClient and reuse an ActorProxyBuilder to call actors. These examples target @dapr/dapr 3.19.0 or later and use the counter contract and implementation from the how-to guide.
Run the statements inside an async function. Await every remote call and handle failures at your application’s error boundary.
ActorId requires a non-empty string. Use a stable ID, such as an order or device ID, to return to the same actor. ActorId.createRandomId() generates a new identity. getId() and toString() return the raw ID; getURLSafeId() returns its URI-encoded form. Pass ActorId objects to the SDK rather than pre-encoding their contents. Runtime APIs can impose additional identifier restrictions.
The builder uses the class’s runtime name as the actor type. It does not instantiate that class locally. A separate client does not have to import the host implementation: it can use a client-side contract class with the same runtime name and method shape. Alternatively, use a dynamic invocation with the exact registered type name.
The generic interface checks calls at compile time only. The SDK creates a JavaScript Proxy that forwards property calls to the sidecar; it does not validate the remote contract or hydrate a local actor instance. Do not await the proxy itself or treat it as a local data object; await its method calls.
Create a proxy with a random identity
For cases where you do not need a predetermined ID:
Each create() call selects a new random actor ID. Use builder.build(actorId) when callers must reconnect to the same actor.
Choose HTTP or gRPC
The caller can use either sidecar API, regardless of the actor host’s HTTP application protocol. For gRPC, create the client using the sidecar’s gRPC port:
Use string port values. Configure daprApiToken or DAPR_API_TOKEN when the sidecar requires API-token authentication. Proxy builders inherit the client’s resolved options.
Access the lower-level actor API
DaprClient.actor exposes create(), not the individual invocation, state, and reminder methods. Those methods are available through the builder’s actor client:
The lower-level interface also declares getActors(), but it is not a portable discovery API: gRPC returns active actor counts from sidecar metadata, while the HTTP implementation does not target a valid discovery endpoint in this release. Use server.actor.getRegisteredActors() for local registration information and client.metadata.get() for sidecar metadata instead.
Arguments and serialization
Proxies send supplied method arguments as a JSON array; a call without arguments sends null. The host spreads a top-level array into positional arguments, so JavaScript actor methods can accept multiple arguments:
// A proxy call:
awaitcounter.add(3);// The equivalent lower-level invocation body:
awaitactors.invoke("CounterActor",newActorId("counter-1"),"add",[3]);
For a method accepting one array argument, send an outer argument array: [[1, 2, 3]]. A non-array object body is passed as one argument. For cross-SDK calls, agree on the actor type, method name, JSON shape, and argument convention explicitly; the JavaScript positional-array convention is not a universal actor contract.
Use argument arrays for scalar values as well: pass [false], [0], or [""], rather than the scalar itself. The lower-level invocation paths can omit falsy scalar bodies.
Use JSON-compatible data-transfer objects. TypeScript types do not restore class prototypes or Date instances after deserialization. Avoid BigInt, circular references, functions, and relying on undefined surviving a JSON round trip.
The actor host uses its built-in BufferSerializer and HTTP response handling. gRPC invocations encode arguments with JSON.stringify and parse response bytes as JSON when possible, otherwise returning text. HTTP responses depend on the response content type. In particular, primitive and void responses need not have identical JavaScript types over both transports. Prefer object-shaped responses, such as { value: 3 }, when callers need a predictable contract.
Setting DaprClientOptions.serializer does not replace the actor host serializer or supply a custom actor serialization pipeline. Actor paths do not wire this option through as the general-purpose application payload APIs do.
Errors and client lifetime
Transport failures, missing actor types or methods, and actor exceptions reject the awaited call. Do not assume a rejected call means no side effect occurred; design commands and retries to be idempotent where needed.
HTTP runtime failures are Error instances whose messages include a JSON envelope with status, error, and error_msg; network failures can have other shapes. gRPC failures preserve Connect RPC error codes. Do not parse every error message as JSON or compare gRPC codes to HTTP status numbers.
After outstanding calls finish, call await client.stop() for clients your application owns. Do not stop a shared client after each actor method.
4.5.4 - Manage actor state with the JavaScript SDK
Use the actor state manager, understand automatic persistence, and handle cache consistency
Actors access named state through this.getStateManager<T>(). State is scoped to an actor’s type and ID, and is persisted through the configured actor state store. Ordinary fields on the actor instance are not durable. These examples target @dapr/dapr 3.19.0 or later.
Read and update state
Call setState to mark a value as changed, even when you have modified an object returned from the cache:
The generic parameter describes the values managed through that reference; it is not a runtime schema or serializer. Use separate typed references for differently shaped state values and validate data at application boundaries. The removal example loads the value into the cache first to avoid the uncached object-existence limitation described below.
Choose a state operation
Method
Behavior
setState(name, value)
Track an upsert
getState(name)
Read cached or persisted state; throws when the state is not found
tryGetState(name)
Return [found, value]; check the flag before using the value
getOrAddState(name, initialValue)
Return existing state or track the supplied initial value
Add an initial value or compute a replacement from (name, currentValue)
containsState(name)
Check the cache or state provider for existence, subject to the limitations below
removeState(name)
Track a deletion; throws if no state is found
tryRemoveState(name)
Track a deletion and report whether state was found
saveState()
Submit tracked changes to the actor state provider
clearCache()
Discard cached values and pending changes without deleting persisted state
Although getState() is typed as Promise<T | null>, absence throws rather than returning null. With tryGetState(), check the found flag rather than treating the value as a presence indicator. The provider can return undefined for an absent value even though the declared tuple uses T | null.
State-manager limitations in this release
The state provider uses truthiness and a value’s length to infer existence. Persisted falsy values, empty strings/arrays, and object values do not behave consistently across existence checks. Prefer object-shaped state with getOrAddState or tryGetState for reads, and verify absence/deletion behavior for your data shape.
addState and tryAddState are present, but the uncached existence check in tryAddState is inverted; do not rely on them as create-only operations. getStateNames() only examines selected entries in the local change tracker, including pending deletions; it does not enumerate persisted keys. Use known state keys rather than treating it as a state-store query.
Automatic and explicit persistence
After a dispatched actor method succeeds, the SDK runs onActorMethodPost() and then saves tracked changes. The same path is used for timer and reminder callbacks. Activation and deactivation hooks also save their tracked changes on successful completion.
saveState() batches tracked additions, updates, and removals into an actor state transaction. Configure a store with the required actor and transaction support. This transaction does not include external side effects.
Save explicitly when an intermediate persistence point is required:
This fragment belongs inside an actor method. A later exception does not undo an explicit save.
The state manager caches values across calls on an active actor. Calling clearCache() forces subsequent reads to consult persisted state, but also discards unsaved changes. It is not a deletion API.
Failures and cache consistency
A thrown method or pre/post hook prevents the normal end-of-call save. The current dispatcher does not automatically roll back or clear cached changes after a failed call, so a later successful call can save changes left by the failed one. The state manager also marks changes as unmodified before awaiting the provider’s transaction; do not assume calling saveState() again will replay a failed write.
Treat state-save errors as operation failures and reconcile with persisted state before continuing. Where appropriate, use clearCache() to discard uncommitted local changes and reload, accounting for the fact that a timed-out transaction might already have committed. Avoid promising application-level rollback or exactly-once effects.
Lower-level state operations
The lower-level actor client supports stateGet(type, id, key) and stateTransaction(type, id, operations). They address the actor state store, not an arbitrary named state component.
For example, with the HTTP actors client from that guide:
Keep writes inside actor methods whenever possible. Direct transactions do not update an active instance’s state-manager cache or provide an actor method’s serialized turn. They can race with actor calls or be overwritten by later cached writes. The gRPC transaction implementation stringifies values rather than applying the HTTP JSON encoding; do not assume structured state has transport parity.
4.5.5 - Use actor timers and reminders with the JavaScript SDK
Schedule actor callbacks, inspect reminders, and safely remove reminders in bulk
Timers schedule work during an actor’s activation. Reminders are durable and can reactivate an actor after deactivation or failover. Dapr runs the scheduling; the SDK registers callbacks and dispatches them to your actor. These examples target @dapr/dapr 3.19.0 or later.
See actor timers and reminders for runtime scheduling and retry semantics. Modern Dapr runtimes persist reminders in the Scheduler service, not in the actor’s in-memory fields.
Register callbacks inside an actor
Use the AbstractActor helpers from an application method. Import Temporal from @dapr/dapr:
Register ScheduledActor on the HTTP host just like the actor in the how-to guide, then call start() through a proxy. Both callbacks participate in the usual pre/post method hooks and successful state-save path.
The required helper dueTime is a Temporal.Duration. period and ttl are optional durations. Omit period for a one-shot callback; use undefined placeholders when supplying later optional arguments. For example:
Keep the TTL long enough for the first due time and any desired repetitions. The runtime validates scheduling values. Prefer time-based durations such as seconds, minutes, and hours: the HTTP registration implementation converts the Temporal string to a Go-style duration and does not correctly encode calendar/day duration strings. These helpers do not accept absolute timestamps, cron expressions, or repetition-count strings.
Timer callbacks use the method name supplied as callback. Every reminder calls receiveReminder(data). The JavaScript callback does not receive the reminder name, due time, or period as separate arguments. Include a discriminator in the data when sharing one callback between several reminders. The inherited receiveReminder only logs a warning; override it to perform work.
The callback data is decoded by the built-in buffer serializer. Prefer simple string payloads or explicitly serialized JSON that you validate in the callback. Do not assume arbitrary objects and arrays round-trip unchanged through every timer/reminder registration path; arrays are also spread into positional arguments by the dispatcher. Make durable callback processing idempotent because retries can cause repeated delivery.
Manage schedules from a client
Use the lower-level actor API. The following setup uses a name-only class: it selects the registered actor type without importing its server implementation.
Run this and subsequent client fragments inside an async function. This example assumes ScheduledActor is registered on the host. DaprClient.actor itself only exposes create(); calls such as client.actor.getActorReminder() are not supported.
Ensure the actor is active before registering a timer externally, and send timer operations to the sidecar that owns that actor. Registering timers inside an actor method avoids selecting the wrong host. Timers disappear on deactivation; re-register them during a later activation if the application requires them.
The HTTP registration path sends data as JSON. gRPC reminder registration uses data.toString(), while gRPC timer registration expects data accepted by Buffer.from; neither JSON-serializes arbitrary objects. Do not rely on falsy gRPC payloads being transmitted.
Registration and retrieval are not symmetric across protocols. A runtime can store the bytes sent by gRPC registration as a base64-encoded JSON string, and the SDK’s reminder queries preserve that string without automatically decoding it. For example, a gRPC registration with data: "hello" can be retrieved as "aGVsbG8=". Calling JSON.stringify before gRPC registration does not by itself restore a JSON round trip. Prefer HTTP registration for JSON payloads, even when querying over gRPC. If you must register over gRPC, define and verify an explicit encoding contract with your runtime and consumers; do not guess whether arbitrary returned strings are base64.
The returned configuration has optional dueTime, period, ttl, and data fields. Timing fields are normalized to Temporal.Duration, not raw runtime strings.
ISO 8601 and Go-style durations, including subsecond units, are normalized. A period beginning with @every is also accepted.
Absolute due-time and expiration timestamps become durations relative to retrieval time. ttl is the remaining lifetime, not necessarily the originally registered TTL.
Missing or empty timing fields remain undefined. Some Scheduler-backed runtimes omit ttl even for expiring reminders. Do not interpret an absent field as proof that no expiration was configured.
A cron expression or repetition-count period such as R3/PT1M cannot be represented by Temporal.Duration; retrieval rejects rather than returning a lossy schedule.
HTTP retrieval preserves the runtime’s JSON data. gRPC retrieval unwraps a protobuf BytesValue and parses its bytes as JSON; unsupported envelopes or invalid JSON reject the operation. A missing reminder rejects rather than returning an empty configuration.
Keep the type import at module scope. NamedActorReminderType contains name, actorType, and the raw string actorId, together with the normalized fields returned by getActorReminder. It does not expose HTTP’s actorID spelling or a nested protobuf reminder.
Operation
Runtime requirement
HTTP listing with an exact actor ID
Dapr 1.19+
gRPC listing with an exact actor ID
Dapr 1.17+
gRPC listing without an actor ID, across the actor type
Dapr 1.17+
The actor ID is an exact filter, not a prefix. HTTP requires it and rejects an omitted ID before sending a request. With a gRPC-configured lower-level client, omit it to list every instance of that type:
Here grpcActors is configured as shown in the next section. Ordering is not guaranteed; an empty successful result is []. Malformed entries, unrepresentable timing values, unsupported runtime APIs, and transport errors reject the list operation rather than returning a partial or empty success.
Keep the import at module scope. Passing an actor ID deletes reminders only for that exact instance and leaves other instances and actor types unaffected.
Type-wide deletion is destructive
Omitting the second argument to unregisterActorRemindersByType("ScheduledActor") deletes all reminders for all instances of that actor type in the sidecar’s application scope. Deleted reminders cannot be recovered by this operation. Do not turn a missing user-supplied actor ID into undefined unless type-wide deletion is explicitly intended.
The HTTP implementation throws HTTPNotSupportedError for bulk deletion without sending a request. There is no automatic per-reminder HTTP fallback. Both instance-scoped and type-wide gRPC deletion return Promise<void>; RPC errors propagate.
This release does not expose timer get/list operations or reminder overwrite and failurePolicy registration options, even when the runtime supports them. Use the Actors API reference for those runtime capabilities rather than adding unsupported properties to SDK calls.
Do not assume registering an existing reminder name replaces its configuration. Runtimes with create-only reminder registration reject duplicates unless overwrite is requested, which these SDK helpers cannot express. The start() example therefore is not an idempotent scheduling operation. Use the runtime API when replacement is required, or explicitly unregister before recreating the reminder, accounting for the gap and reset schedule.
After administrative work completes, stop clients your application owns with await client.stop() and await grpcClient.stop().
4.6 - Publish and subscribe with the JavaScript SDK
Choose a pub/sub delivery mode and get started with publishing, server subscriptions, or gRPC streaming
The JavaScript SDK supports publishing events over HTTP or gRPC, programmatic subscriptions through DaprServer, and client-initiated streaming subscriptions through DaprClient. These guides describe @dapr/dapr 3.19.0 or later.
A supported Node.js LTS release. The package requires Node.js 18 or later.
A configured pub/sub component. The examples use the component name pubsub and topic orders.
Installation
Install the 3.19.0 release:
npm install @dapr/dapr@3.19.0
For a later release, substitute its version.
Code snippets use ES module imports. Run statements containing await in an async function or an ES module. Each guide identifies the client or server configuration used by its examples.
Choose a delivery mode
Capability
HTTP
gRPC
client.pubsub.publish()
Supported
Supported
client.pubsub.publishBulk()
Supported
Supported
server.pubsub.subscribe() and subscribeWithOptions()
Inbound HTTP callbacks
Inbound gRPC callbacks
Content-based routing and subscribeToRoute()
Supported
Supported
server.pubsub.subscribeBulk()
Per-message callback from each batch
Per-message callback from each batch
client.pubsub.subscribeStream()
Not supported
Client-initiated stream; no application server
Choose server subscriptions when Dapr should deliver events to your application’s HTTP or gRPC listener. Subscriptions are discovered at application startup. Choose streaming subscriptions for workers that initiate the connection to Dapr and do not need an application callback listener. Streams can be created and closed at runtime, but do not support routing rules or bulk subscription options.
Runtime compatibility
Bulk publishing uses the stable API on Dapr 1.17 or later, with automatic fallback to the deprecated alpha1 API on older runtimes.
Streaming subscriptions use SubscribeTopicEventsAlpha1, an alpha gRPC API. Use a runtime that implements this API; installing the JavaScript package alone does not enable it. API availability and broker-specific features depend on the Dapr runtime and component.
Publish single events and batches, configure metadata and CloudEvents, and handle publication failures
Use DaprClient.pubsub to publish events over HTTP or gRPC with @dapr/dapr 3.19.0 or later. Complete the pub/sub prerequisites before following this guide.
Configure a publisher
The examples use this HTTP client, component pubsub, and topic orders:
For gRPC, select CommunicationProtocolEnum.GRPC and port "50001". Run statements containing await in an async function or an ES module. Reuse the client and stop it during application shutdown; see configuration and usage.
Without a custom serializer or explicit contentType, the SDK infers application/json for objects and arrays, text/plain for strings, and application/cloudevents+json for recognized CloudEvents.
metadata carries Dapr publish options and component-specific settings, such as message TTL or partition keys. It is not a general-purpose mechanism for adding CloudEvent attributes or arbitrary subscriber headers. Supported keys depend on the component.
Publish CloudEvents
Dapr normally wraps published data in a CloudEvent. To supply your own event attributes, publish a CloudEvent explicitly:
Configure the receiving subscription with metadata: { rawPayload: true } for server subscriptions, or metadata: { rawPayload: "true" } for streaming subscriptions. Server subscription metadata values are JSON-stringified before discovery; streaming metadata is sent directly as a string map. This distinction matters for boolean options such as rawPayload.
Raw payloads do not provide the same CloudEvent attributes as enveloped events. See raw payloads.
Bulk publishing
publishBulk(pubSubName, topic, messages, metadata?) accepts strings, objects, or explicit entries with event, optional entryID, and optional contentType. Missing entry IDs are generated as UUIDs:
constresponse=awaitclient.pubsub.publishBulk("pubsub","orders",[{entryID:"order-101",event:{orderId:"101"},contentType:"application/json"},{entryID:"order-102",event:{orderId:"102"},contentType:"application/json"},],{ttlInSeconds:"60"},);for(constfailureofresponse.failedMessages){console.error("Publish failed:",failure.message.entryID,failure.error);}if(response.failedMessages.length>0){thrownewError(`Failed to publish ${response.failedMessages.length} orders`);}
Bulk publishing is not transactional. A resolved promise can contain failures; always inspect failedMessages. Each failure contains the original normalized message and an error. Request-level failures are generally represented as failures for every entry, while argument processing, serialization, or client initialization can still reject.
Bulk publishing uses the stable API on Dapr 1.17 or later, with automatic fallback to the deprecated alpha1 API on older runtimes. HTTP selects the API using sidecar metadata; gRPC falls back when the stable RPC is unsupported.
Use the fourth argument for request metadata on either transport. Although the explicit entry type exposes metadata, this SDK version does not forward per-entry metadata in the gRPC bulk request. Also, without a custom serializer, the gRPC bulk path infers content types from each event rather than honoring explicit entry content types. Avoid relying on those fields for cross-protocol behavior.
Single-message publishing has different failure behavior by transport in this version:
Operation
Failure behavior
HTTP publish()
Normally resolves with { error } for request failures.
gRPC publish()
Rejects with an object containing error for RPC failures.
publishBulk()
Normally resolves with failedMessages; preprocessing/setup failures can reject.
Await calls inside your application’s error boundary and inspect their response fields. Do not assume that resolution means publication succeeded, or that every rejection is an Error instance. Publisher success means Dapr accepted the publish request, not that all subscribers processed the event.
4.6.2 - Receive events with a JavaScript application server
Register HTTP or gRPC subscriptions, handle acknowledgements, route events, and configure bulk and dead-letter delivery
Use DaprServer.pubsub to receive events through HTTP or gRPC callbacks with @dapr/dapr 3.19.0 or later. Complete the pub/sub prerequisites before following this guide. For workers without an application callback listener, use streaming subscriptions instead.
Register subscriptions before startup
Save the following as subscriber.js in an ES module application:
For a gRPC server, select CommunicationProtocolEnum.GRPC, set the client port to "50001", and run Dapr with --app-protocol grpc --dapr-grpc-port 50001.
The remaining examples assume this server and enum import. Add their subscription registrations beforeserver.start().
HTTP subscriptions are exposed through /dapr/subscribe; gRPC subscriptions use ListTopicSubscriptions. Configure each component/topic pair once. Repeating subscribe() or subscribeWithOptions() for an already registered pair throws. Use subscribeToRoute() to add another handler to an existing route instead.
Register bulk delivery with a callback invoked once per entry.
getSubscriptions()
Inspect local registrations grouped by component and topic, including routes and Dapr discovery configuration.
Handlers can be attached to existing routes after startup, but adding a handler does not cause Dapr to rediscover new topics or routes. There is no server-side unsubscribe method in this interface. Stop the application listener with await server.stop() during shutdown. See configuration and usage for client lifetime and serialization.
Callback data and headers
Callbacks receive (data, headers) and should be async. data is normally the deserialized event payload, not the full CloudEvent envelope.
Delivery
Callback headers
HTTP server, single message
Incoming HTTP request headers.
HTTP server, bulk
Per-entry metadata.
gRPC server, single or bulk
Incoming gRPC request metadata converted to an object.
Do not assume that server callbacks expose CloudEvent attributes in headers. If your application requires these attributes, the streaming callback explicitly provides them.
To consume raw payloads, use subscribeWithOptions() with metadata: { rawPayload: true }. Server subscription metadata values are JSON-stringified before discovery. See publishing raw payloads for publisher settings and the different streaming metadata representation.
Acknowledge, retry, or drop
Handler outcome
Acknowledgement
Return DaprPubSubStatusEnum.SUCCESS, or complete without a value
Successfully processed.
Return DaprPubSubStatusEnum.RETRY
Request redelivery.
Return DaprPubSubStatusEnum.DROP
Discard the message.
Throw or reject
Log the error and request redelivery.
Return the enum value, not an object such as { status: "RETRY" }. When multiple server handlers share a route, all run sequentially and their combined status has priority RETRY > DROP > SUCCESS.
Retries and dead-letter forwarding are controlled by Dapr resiliency policies and the pub/sub component, not by an SDK retry loop. Configure an inbound retry policy appropriate to your broker. For example, save the following in components/resiliency.yaml, targeting the component name pubsub:
Make handlers idempotent: Dapr pub/sub is at-least-once, and a message can be delivered again after processing.
Content-based routing
Use subscribeWithOptions() to declare the routes, then attach handlers with subscribeToRoute(). Dapr evaluates the CEL expressions against the CloudEvent:
Route names are logical identifiers: the SDK generates unique callback paths from the component, topic, and route. A callback supplied alongside a route object is attached to all its declared routes, not just its default route.
Wildcard support depends on the broker and component. For MQTT-style subscriptions, the SDK recognizes # for multiple levels and + for one level when dispatching gRPC callbacks:
Use a component that supports these topic patterns; they are not a general wildcard facility for every pub/sub broker.
Bulk subscriptions
Bulk delivery batches messages between Dapr and the application. The SDK still invokes your callback for one entry at a time, not for an array. It constructs the per-entry acknowledgement response:
awaitserver.pubsub.subscribeBulk("pubsub","bulk-orders",async(data)=>{console.log("Order from batch:",data);returnDaprPubSubStatusEnum.SUCCESS;},{maxMessagesCount:100,maxAwaitDurationMs:40},);
The options also accept route and metadata. Omitted batching limits use runtime/component defaults. For routing or dead-letter configuration combined with bulk delivery, use subscribeWithOptions() with bulkSubscribe: { enabled: true, maxMessagesCount: 100, maxAwaitDurationMs: 40 }.
In this version, the HTTP bulk handler without a custom serializer extracts CloudEvent data and decodes application/octet-stream entries, but does not populate callback data for direct application/json or text/plain entries. Prefer the normal Dapr CloudEvent envelope for HTTP bulk delivery, or use a custom serializer or gRPC when consuming those direct entry formats.
Dapr controls forwarding after processing fails and the configured retry policy is exhausted.
Although the SDK exposes deadLetterCallback, it only registers an additional local route on the source subscription. It does not create a subscription to the dead-letter topic, and specifying the callback alone does not configure runtime dead-letter forwarding. Do not use it as a substitute for the separate subscription above.
4.6.3 - Receive events with JavaScript streaming subscriptions
Subscribe without an application server using gRPC streaming, with cancellation, acknowledgements, and failure supervision
Use DaprClient.pubsub.subscribeStream() to open a bidirectional gRPC stream from your application to the sidecar with @dapr/dapr 3.19.0 or later. It does not require DaprServer, an application callback port, or subscription discovery.
Complete the pub/sub prerequisites first. Streaming uses SubscribeTopicEventsAlpha1, an alpha gRPC API; your Dapr runtime must implement it. HTTP clients reject this operation with HTTPNotSupportedError. Streaming subscriptions do not support routing rules or bulk subscription options.
Run a streaming worker
Save the following as worker.js in an ES module application. The worker runs until SIGINT or SIGTERM, or until the stream fails:
The subscription promise resolves only after Dapr confirms setup. Setup failures reject. See configuration and usage for connection settings, authentication, and custom serialization.
Callback data and acknowledgements
Callbacks receive deserialized payload data and CloudEvent attributes in headers. Attributes include id, source, type, specversion, datacontenttype, topic, pubsubname, and path, together with flattened extensions. Unlike server callback headers, these explicitly expose CloudEvent attributes.
Callbacks run sequentially within a stream and use the client’s serializer. Return DaprPubSubStatusEnum.SUCCESS, RETRY, DROP, or no value; completing without a value means success. Callback exceptions, deserialization errors, and invalid return values are logged and acknowledged as RETRY.
Retry and dead-letter behavior depends on the runtime resiliency policy and component. Make handlers idempotent because a message can be delivered more than once.
Streaming options and lifecycle
Member
Behavior
options.metadata
Subscription metadata sent as a string map.
options.deadLetterTopic
Topic for runtime dead-letter forwarding; consume it separately.
options.signal
Cancels setup or an active stream.
subscription.close()
Idempotently cancels the stream; safe to call from its callback. Does not wait for an in-flight callback.
subscription.closed
Resolves after cancellation and completion of any in-flight callback. Rejects on transport/protocol failure or unexpected stream termination.
For raw payloads, pass metadata: { rawPayload: "true" } in the subscription options. See publishing raw payloads. To consume failed messages, create a separate subscription to deadLetterTopic; setting the option does not register a consumer for that topic.
TypeScript applications can import PubSubStreamingSubscription and PubSubStreamingSubscriptionOptions as types from @dapr/dapr.
Supervise failures and shut down
Observe closed throughout the subscription lifetime. The SDK logs stream failures but does not reconnect automatically. If reconnecting is appropriate, implement a supervised retry policy that creates a new subscription and respects application shutdown.
client.stop() does not close these subscriptions. Explicitly close every subscription and await its closed promise before stopping the client. Cancellation during a callback leaves that event unacknowledged, so it may be redelivered. The API does not expose .NET-style queue capacity, per-message timeout, or automatic reconnect options.
4.6.4 - JavaScript pub/sub configuration and usage
This guide covers shared configuration and operational guidance for pub/sub with @dapr/dapr 3.19.0 or later. See the overview to choose between server callbacks and streaming subscriptions.
Client lifetime
Reuse a long-lived DaprClient rather than creating one per message. Await outstanding operations before calling await client.stop() at shutdown.
For server subscriptions, stop the application listener with await server.stop(). For streaming subscriptions, close each subscription and await its closed promise before stopping the client; client.stop() does not close streams. See streaming lifecycle guidance.
Endpoints and authentication
The default protocol is HTTP. To explicitly configure a gRPC connection:
For HTTP, select CommunicationProtocolEnum.HTTP and port "3500". Port options are strings. The application callback protocol and port are configured separately on DaprServer; see server subscriptions.
When explicit connection settings are omitted, the SDK uses the environment settings for the selected protocol:
Setting
Behavior
DAPR_HTTP_ENDPOINT / DAPR_GRPC_ENDPOINT
Supply the sidecar endpoint for the selected protocol when explicit host and port settings are omitted.
DAPR_HTTP_PORT / DAPR_GRPC_PORT
Supply the sidecar port when not otherwise configured; defaults are 3500 and 50001.
DAPR_API_TOKEN
Supplies the authentication token when daprApiToken is omitted.
Custom serialization
Configure an IDaprSerializer using DaprClient’s serializer option. It converts application payloads to and from strings and can supply a contentType. It applies to single and bulk publishing and streaming callbacks. For server callbacks, configure it through DaprServer’s clientOptions.serializer.
Use compatible serializers on both ends. A custom serializer replaces the default payload encoding; it does not automatically preserve a supplied CloudEvent envelope. TypeScript type parameters do not provide runtime validation or recreate class instances. TypeScript applications can import IDaprSerializer as a type from @dapr/dapr.
Await SDK operations inside your application’s error boundary. Publication failure behavior differs by transport, and bulk publishing can partially fail even when its promise resolves; see publish error handling.
Make subscribers idempotent and await all processing before returning an acknowledgement. Dapr pub/sub is at-least-once, so successfully processed messages can still be redelivered. Configure retries through Dapr resiliency policies and component settings, not by assuming that the SDK retries every failure.
The JavaScript SDK comes with a out-of-box Console based logger. The SDK emits various internal logs to help users understand the chain of events and troubleshoot problems. A consumer of this SDK can customize the verbosity of the log, as well as provide their own implementation for the logger.
Configure log level
There are five levels of logging in descending order of importance - error, warn, info, verbose, and debug. Setting the log to a level means that the logger will emit all the logs that are at least as important as the mentioned level. For example, setting to verbose log means that the SDK will not emit debug level logs. The default log level is info.
Dapr Client
import{CommunicationProtocolEnum,DaprClient,LogLevel}from"@dapr/dapr";// create a client instance with log level set to verbose.
constclient=newDaprClient({daprHost,daprPort,communicationProtocol:CommunicationProtocolEnum.HTTP,logger:{level:LogLevel.Verbose},});
import{CommunicationProtocolEnum,DaprServer,LogLevel}from"@dapr/dapr";// create a server instance with log level set to error.
constserver=newDaprServer({serverHost,serverPort,clientOptions:{daprHost,daprPort,logger:{level: LogLevel.Error},},});
import{CommunicationProtocolEnum,DaprClient,LogLevel}from"@dapr/dapr";import{WinstonLoggerService}from"./WinstonLoggerService";constwinstonLoggerService=newWinstonLoggerService();// create a client instance with log level set to verbose and logger service as winston.
constclient=newDaprClient({daprHost,daprPort,communicationProtocol: CommunicationProtocolEnum.HTTP,logger:{level: LogLevel.Verbose,service: winstonLoggerService},});
4.8 - JavaScript Examples
Get started with the Dapr JavaScript SDK through some of our examples!
Quickstarts
State Management: Learn the concept of state management with Dapr
Pub Sub: Create your own Publish / Subscribe system
Author, run, and manage durable workflows with the Dapr JavaScript SDK
Use the Dapr JavaScript SDK to coordinate activities, durable timers, external events, and other workflows.
WorkflowRuntime registers and executes your application code; DaprWorkflowClient schedules instances and
manages their lifecycle. Both use the Dapr sidecar’s gRPC endpoint, independently of the protocol you select
for a DaprClient.
These guides target @dapr/dapr 3.19.0 or later. The examples use Dapr runtime 1.19 or later so
that all documented capabilities are available, including detached workflows, management operations, and
the alpha binary-store building block. Use Node.js 18 or later.
Offload large payloads to a binary store, forward explicit references, and stream data only where needed.
Runtime configuration
WorkflowRuntime and DaprWorkflowClient accept an options object:
Option
Behavior
daprHost, daprPort
Sidecar host and gRPC port. Defaults come from SDK settings, normally 127.0.0.1:50001. Without explicit host or port options, DAPR_GRPC_ENDPOINT is honored.
daprApiToken
Dapr API token; otherwise uses DAPR_API_TOKEN.
logger
SDK logging options. Use ctx.logger inside workflow code to suppress replayed messages.
serializer
Payload serializer. Defaults to JSON; if omitted with payloads configured, uses the resolver’s serializer.
payloads
Optional BinaryStoreWorkflowPayloadResolver. Register on every client and worker that reads or writes references.
grpcOptions
Supports grpc.max_receive_message_length and grpc.max_send_message_length, each defaulting to 128 MiB, and Connect-compatible interceptors. Other legacy grpc-js channel settings, such as keepalive, credentials, or compression, are not applied.
maxConcurrentActivities
Worker-only positive integer limiting simultaneous activity executions. Additional activities queue locally; workflow work items are not limited. Omit to leave concurrency to the Dapr runtime’s workflow.maxConcurrentActivityInvocations.
Await runtime.start() before scheduling work. It resolves when the worker connects and is ready, and rejects
if the initial connection fails. runtime.isReady reports current connection readiness; the worker reconnects
after a lost connection. Call runtime.stop() and client.stop() during application shutdown.
The SDK propagates W3C trace context when scheduling workflows and creates WorkflowActivity <name> spans
under the Dapr.Workflow tracer when an activity has a parent trace context. Configure an OpenTelemetry
provider and exporter in your application to collect these spans.
Upgrade considerations
This SDK uses its own workflow engine rather than the shared DurableTask client library. Re-test existing
workflows when upgrading, including replay, status comparisons, serializers, and transport options.
Compare statuses with WorkflowRuntimeStatus members instead of hard-coded strings or numeric values.
The engine does not support the stateful workflow client;
propagated ancestor history and
getWorkflowHistory are separate capabilities.
4.9.1 - How to: Author and run workflows with the JavaScript SDK
Register workflows and activities, coordinate durable tasks, and handle retries and events
Workflows are generator functions that yield SDK tasks. The runtime records task results in history and
replays the generator to reconstruct its state. Activities are ordinary functions, optionally asynchronous,
that perform I/O or other work outside the deterministic workflow.
Prerequisites
Node.js 18 or later and @dapr/dapr3.19.0 or later.
Workflow infrastructure: an actor state store, placement, and scheduler. The default dapr init environment
provides these for local development.
Register and run a workflow
Install the package in your application directory:
npm init -y
npm install @dapr/dapr@3.19.0
Save this complete example as app.mjs. It uses JavaScript ES modules; the same APIs are available in TypeScript.
import{DaprWorkflowClient,WorkflowRuntime,WorkflowRuntimeStatus,}from"@dapr/dapr";asyncfunctionhello(_ctx,name){return`Hello ${name}!`;}function*sequence(ctx){constcities=[];for(constcityof["Tokyo","Seattle","London"]){cities.push(yieldctx.callActivity(hello,city));}ctx.logger.info("Greeting sequence completed");returncities;}constoptions={daprHost:"127.0.0.1",daprPort:"50001"};construntime=newWorkflowRuntime(options);constclient=newDaprWorkflowClient(options);runtime.registerWorkflow(sequence).registerActivity(hello);try{awaitruntime.start();constid=awaitclient.scheduleNewWorkflow(sequence);conststate=awaitclient.waitForWorkflowCompletion(id,true,30);if(!state||state.runtimeStatus!==WorkflowRuntimeStatus.COMPLETED){thrownewError(state?.workflowFailureDetails?.getErrorMessage()??"Workflow did not complete successfully",);}console.log(state.getOutput());}finally{awaitruntime.stop();awaitclient.stop();}
Run it with a sidecar:
dapr run --app-id sequence-workflow --dapr-grpc-port 50001 -- node app.mjs
The output includes ["Hello Tokyo!", "Hello Seattle!", "Hello London!"].
Registration names
registerWorkflow(fn) and registerActivity(fn) use the function name as the durable registration name.
For explicit, stable names, use:
Call these registrations by string, for example ctx.callActivity("hello-v1", city) or
client.scheduleNewWorkflow("greeting-v1"). Keep names stable across deployments and minification.
registerWorkflowWithName is a deprecated alias of registerWorkflowByName.
Keep workflow execution deterministic
Put network calls, database operations, filesystem access, and nondeterministic computation in activities.
Use yield with ctx.callActivity, timers, event waits, and task-composition helpers; do not substitute
await or Promise.all for durable tasks. Both synchronous and async generators are supported, but an
async generator does not make arbitrary I/O replay-safe.
Need
Workflow API
Current time
ctx.getCurrentUtcDateTime(), not new Date() or Date.now()
ctx.logger.info(...), .warn(...), .error(...), or .debug(...)
Conditional replay handling
ctx.isReplaying()
Externally visible progress
ctx.setCustomStatus({ step: "processing" })
Activities can be delivered more than once. Make external side effects idempotent. An activity receives
WorkflowActivityContext with getWorkflowInstanceId(), getWorkflowActivityId(), and
getTaskExecutionId(). The execution ID is a persisted activity key, also exposed as task.executionId
on the workflow’s activity task, and is reused across SDK retry attempts. It can be undefined for legacy
history or runtimes that do not supply it; do not assume it is always present or that it guarantees exactly-once delivery.
whenAll returns results in input order and fails if a task fails. whenAny returns the first completed
task, not its result, and does not cancel the other tasks. Yield the winning task or call its getResult()
to observe its result or error.
Retry activities and child workflows
Pass retryPolicy in activity or child-workflow options:
All intervals are in seconds. maxNumberOfAttempts includes the initial call; backoffCoefficient
defaults to 1. The first interval and optional limits must be positive and finite; attempts must be a
positive integer and the coefficient must be at least 1. A non-retriable failure stops retries.
retryTimeout limits scheduling further attempts; it is not a timeout that interrupts a running activity.
Failures are thrown into the generator at yield, where you can catch them and schedule compensating activities.
Wait for external events
An external event lets another process signal an instance. The SDK matches event names case-insensitively
and buffers events that arrive before their wait is created.
From a client, call await client.raiseEvent(instanceId, "approval", { approved: true }).
From another workflow in the same app, use ctx.sendEvent(instanceId, "approval", { approved: true });
sendEvent does not return a task and is not yielded. Do not expose the client or make client RPCs inside
workflow code.
Use durable timers and cancellation
ctx.createTimer(60) waits 60 seconds of workflow time. You can also supply an absolute Date computed
from ctx.getCurrentUtcDateTime(). Do not use setTimeout for a durable delay.
Timers and event waits implement CancellableTask, exposing cancel() and isCanceled. Canceling stops
the SDK’s local wait and rejects it with TaskCanceledError; it does not cancel runtime-side work,
an activity, or an entire workflow. Cancel unused waits explicitly after a race.
Continue as new
For long-running loops, start a fresh history generation under the same instance ID:
Return immediately after continueAsNew. The second argument, saveEvents, defaults to true and retains
unconsumed external events; set it to false to discard them. Do not schedule more work after requesting
continuation. Register the activity used by this example before starting the worker.
4.9.2 - Manage workflow instances with the JavaScript SDK
Schedule, inspect, control, list, and rerun workflow instances with DaprWorkflowClient
Use DaprWorkflowClient from application or administrative code, not inside a workflow generator.
This guide targets @dapr/dapr3.19.0 or later and runtime 1.19 or later.
The following snippets reuse client. The workflow name must be registered on the destination worker.
Call await client.stop() when the application shuts down.
Choose the management client
DaprWorkflowClient is separate from DaprClient.workflow, the
basic workflow API.
The basic API supports HTTP or gRPC with scheduleNewWorkflow, getWorkflowState, raiseEvent, pause,
resume, terminate, and purge. Its old start, get, and raise names are deprecated aliases.
It returns a plain WorkflowGetResponseType with properties, rather than the WorkflowState described here.
Use DaprWorkflowClient for durable start/completion waits, listing, history retrieval, reruns, and integrated
payload-reference handling. Its methods and options are not interchangeable with the basic API:
for example, it uses suspendWorkflow rather than pause, and getWorkflowState requires the
getInputsAndOutputs argument.
Schedule and wait
constinstanceId=awaitclient.scheduleNewWorkflow("orderWorkflow",{orderId:"order-123"},"order-123",newDate(Date.now()+60_000),);awaitclient.waitForWorkflowStart(instanceId,false,120);conststate=awaitclient.waitForWorkflowCompletion(instanceId,true,300);if(!state)thrownewError(`Workflow ${instanceId} was not found`);if(state.runtimeStatus===WorkflowRuntimeStatus.COMPLETED){console.log(state.getOutput());}else{console.error(state.runtimeStatus,state.workflowFailureDetails);}
The positional scheduling arguments are (workflow, input?, instanceId?, startAt?, signal?).
workflow can be a registered name or a function; omitted instance IDs are generated. startAt is an optional
absolute Date. Using wall-clock time here is safe because this is client code, not replayed workflow code.
Both wait methods accept (instanceId, fetchPayloads = true, timeoutInSeconds = 60, signal?).
A wait deadline or RPC failure rejects the promise. A workflow that reaches a failed or terminated state
can return a state rather than throw: check runtimeStatus, not just whether the wait resolved.
Inspect state and failure details
await client.getWorkflowState(instanceId, true) returns a WorkflowState snapshot, or undefined for a
missing instance. Pass false to omit inputs and outputs when only metadata is needed.
Member
Meaning
name, instanceId, exists
Registration name, instance ID, and existence (true for a returned state).
runtimeStatus
Compare with WorkflowRuntimeStatus.RUNNING, COMPLETED, CONTINUED_AS_NEW, FAILED, CANCELED, TERMINATED, PENDING, SUSPENDED, or STALLED.
createdAt, lastUpdatedAt
JavaScript Date values.
getInput(), getOutput(), getCustomStatus()
Deserialize with the client’s configured serializer; TypeScript callers can provide a generic result type.
serializedInput, serializedOutput, customStatus
Serialized strings, not already-parsed objects. With payload support, resolved strings are prepared where possible.
workflowFailureDetails
getErrorType(), getErrorMessage(), getStackTrace(), isNonRetriable, and getInnerFailure() for nested details. innerFailure exposes the raw nested protobuf value.
Original top-level binary-store reference, if present. See data references.
Typed getters do not validate application schemas or reconstruct class instances automatically. Missing payload
fields return undefined. Missing binary-store objects or integrity failures are errors, not “workflow not found.”
Send events and control execution
Method
Behavior
raiseEvent(id, eventName, payload?, signal?)
Deliver an event to a workflow’s durable event wait.
suspendWorkflow(id, reason?, signal?)
Suspend instance execution.
resumeWorkflow(id, reason?, signal?)
Resume a suspended instance.
terminateWorkflow(id, output?, signal?)
Request termination with optional output; does not execute application compensation logic.
purgeWorkflow(id, signal?)
Purge retained instance state/history; returns whether an instance was deleted. Subject to runtime eligibility checks.
For example:
awaitclient.suspendWorkflow(instanceId,"Investigating an order");awaitclient.resumeWorkflow(instanceId,"Investigation complete");awaitclient.raiseEvent(instanceId,"approval",{approved:true});
Do not use suspension or termination as a way to undo activity side effects. A canceled client request also
does not terminate the instance. Purging history does not delete binary-store payloads.
Cancel client requests
Scheduling, state reads, waits, event delivery, suspend/resume, termination, and purge accept an optional
AbortSignal in their final argument:
Aborting stops the request and associated payload I/O where supported, not the durable workflow. A request
may already have been accepted by the runtime before cancellation. Listing, history retrieval, and rerun
do not expose an AbortSignal parameter in this release.
List instances
listWorkflowInstanceIds(continuationToken?, pageSize?) returns { instanceIds, continuationToken }.
Continue until no token remains:
The SDK validates pageSize as an integer from 1 to 4294967295; the runtime may impose additional limits.
The response contains IDs, not state snapshots or filtered query results.
This returns the complete HistoryEvent[] using the SDK’s protobuf types. Payload fields remain serialized
wire data, including any reference envelopes; retrieving history is not automatic payload hydration.
Missing-instance and other runtime errors are propagated.
Rerun from an event
Inspect the source history to choose the event ID accepted by the runtime, then create a new instance:
eventId is a history event ID, not the array index, and must be an unsigned 32-bit integer. This operation
creates a new instance; it does not modify the source instance. Replacement input applies to the
activity targeted by the event, not the original workflow input.
newInstanceId is optional but must not be empty. overwriteInput defaults to true when input is supplied;
set it to false to preserve the original activity input. The runtime decides which histories and events are
eligible and propagates errors for missing instances or invalid events. Reruns can repeat side effects:
review idempotency and retain any binary objects still referenced by the copied history.
4.9.3 - Multi-app workflows and history propagation in the JavaScript SDK
Coordinate remote activities, child workflows, and detached workflows and inspect ancestor history
Use targetAppId to route activity and workflow calls to another Dapr application. This guide uses
@dapr/dapr3.19.0 or later and Dapr runtime 1.19 or later.
See Multi Application Workflows for runtime architecture and constraints.
Requirements
Participating apps must run in the same namespace and use the same workflow actor state store. Each destination
must register the name being called and run a workflow worker. Omit targetAppId for a local call.
For cross-language calls, agree on names, input/output schemas, and serialization.
An activity call returns the activity result; a child call waits for the child and returns its output.
Failures are thrown at the corresponding yield. callSubWorkflow is an alias of callChildWorkflow.
The positional child arguments are (workflow, input?, instanceId?, options?); omit the child ID to let the
SDK derive it. A retry policy can retry a child workflow as well as an activity. A custom child ID applies
to the first attempt; later retry attempts receive generated child IDs.
Schedule an independent, detached workflow
Detached workflows require Dapr runtime 1.19 or later:
The task returns the detached workflow’s instance ID, not its output. The workflow runs independently:
its completion or failure does not flow back to the caller. Use a client to inspect the returned ID through
the destination app’s sidecar. The arguments are (workflow, input?, instanceId?, startAt?, options?).
Detached options support targetAppId and allowPayloadReferences, but not retries or history propagation.
Always yield the scheduling task so the workflow can record the scheduling action.
Inspect propagated history
Activity and child-workflow options accept:
HistoryPropagationScope
History shared with the callee
NONE
No history propagation; the default.
OWN_HISTORY
The calling workflow’s own history.
LINEAGE
The caller’s history together with its inherited ancestor history.
From a workflow or activity, call ctx.getPropagatedHistory(). It returns undefined when no history was
supplied, otherwise a read-only PropagatedHistoryView:
Requested scope and ancestor chunks, oldest ancestor first and immediate parent last.
events, appIDs
Flattened events and distinct app IDs across chunks.
workflows
Chunks with startEventIndex and eventCount in the flattened view.
getWorkflowByName(name)
Oldest matching ancestor, or null.
getEventsByAppID(id), getEventsByInstanceID(id)
Events matching an app or instance.
getEventsByWorkflowName(name)
Events from every matching workflow instance, not just the first match.
Each chunk contains appId, instanceId, workflowName, decoded events, and original rawEvents,
rawSignatures, and signingCertChains. The SDK preserves these bytes but does not verify signatures.
Do not treat this view as SDK-verified evidence. Payloads in history remain serialized; reference envelopes
are not automatically resolved in this view.
History propagation increases data transferred to callees and can expose ancestor inputs, outputs, and
events. Select the narrowest scope needed. This is distinct from the unsupported stateful workflow client.
Cross-app data references
With binary-store payload support, cross-app activity, child,
and detached workflow inputs are inline by default. Set allowPayloadReferences: true only when the
destination understands the reference contract and can access the same stored objects.
The JavaScript SDK shares the version-1 reference envelope with the .NET SDK. Interoperation requires
compatible serializers, contracts, and storage access; JavaScript does not implement .NET payload-stage
reversal. Inlining only applies to the top-level call input: results, events, nested references, and
propagated history are not made compatible by that default. See
cross-app reference handling
before enabling offloading in a multi-app topology.
4.9.4 - Workflow versioning in the JavaScript SDK
Evolve workflow code with replay-safe named patches
Workflow code must reproduce the task sequence recorded in history when replaying an existing instance.
Changing activity order, adding durable tasks, or changing branches without a migration strategy can cause
nondeterministic replay failures.
With @dapr/dapr3.19.0 or later, use ctx.isPatched(patchName) for named code changes.
Patch evaluation is validated by the Dapr runtime; the examples in this documentation use runtime 1.19 or later.
See Workflow versioning for the runtime-level concepts.
Introduce a patch
Suppose an existing workflow calls chargePayment directly, and a new deployment must validate the order first:
When an unrecorded patch is first encountered during replay, isPatched returns false so the old execution
path remains intact. Outside replay, or when the patch is already recorded, it returns true. The SDK
records evaluated patches for runtime version validation.
Names are case-sensitive and must not be empty or whitespace. Use a distinct name for each logical change;
never reuse a name for an unrelated change or compute it from nondeterministic values.
Keep old execution paths available
Keep the original branch and patch check until every instance that needs that history has finished and is
no longer eligible for replay or rerun. Do not reorder patch checks or remove them merely because a new
deployment has started. Account for retained histories, suspended instances, child workflows, and
administrative reruns when planning retirement.
For a larger contract change, register a new workflow name and send new instances to it while keeping the
old implementation available for existing instances. Patching does not convert persisted serialized data
or turn an incompatible payload schema into a compatible one.
4.9.5 - Workflow serialization in the JavaScript SDK
Configure payload serialization consistently across JavaScript workflow clients and workers
The JavaScript SDK uses JSON by default. With @dapr/dapr3.19.0 or later, clients and workers can
share a custom IDaprSerializer through their serializer option. Serializer selection is client-side;
it does not by itself require binary-store support.
Default JSON behavior
Workflow payloads use JSON.stringify and JSON.parse. Use JSON-compatible application contracts:
dates deserialize as strings, prototypes are not reconstructed, BigInt requires explicit handling,
and cyclic values cannot be serialized. TypeScript generics describe the expected result but do not
validate or instantiate that type at runtime.
WorkflowState.getInput<T>(), getOutput<T>(), and getCustomStatus<T>() use the client’s serializer.
Their serialized counterparts are strings, not parsed application values.
Configure a serializer
The serializer contract converts values to and from strings:
For a custom format, implement serialize<T>(value: T): string and
deserialize<T = unknown>(data: string): T. An optional contentType identifies the media type for
SDK APIs that use it; it is not a workflow wire-format negotiation mechanism. Binary formats can use
Base64 to satisfy the string contract, at the cost of added size. Serialize deterministically and throw
on invalid input rather than silently returning defaults.
Persisted-history compatibility
Deploy compatible serializers to every client, activity worker, and workflow worker that participates in
the workflow. Changing the encoding or schema can break existing histories, results, events, and reruns.
The SDK does not automatically migrate persisted data or negotiate formats across apps. Keep the old
decoder available or introduce a separate workflow contract and registration name.
For cross-language workflows, agree on the wire format and property names. The default JavaScript JSON
behavior is not a replacement for the .NET SDK’s case-insensitive deserialization or other language-specific
conversion rules.
Combine serialization with data references
Workflow data references offload the serialized UTF-8 string to
a binary store. Offloading is separate from choosing a serializer and is evaluated after serialization.
The reference envelope itself is versioned JSON, independent of the application serializer.
Supply the same serializer to the BinaryStoreWorkflowPayloadResolver and all clients and workers.
When a workflow client or runtime has payloads but no explicit serializer, it uses payloads.serializer.
An explicit serializer overrides that choice; do not configure incompatible serializers in those two places.
Only top-level PayloadReference objects receive special envelope handling, not references nested within
an application object.
4.9.6 - Workflow data references in the JavaScript SDK
Offload large workflow payloads to a binary store and defer materialization with explicit references
Workflow data references keep large payloads out of inline workflow history. The JavaScript SDK stores the
serialized value in a Dapr binary store and records a small, versioned reference envelope instead. You can
keep ordinary workflow inputs and let the SDK retrieve data automatically, or forward explicit
PayloadReference values without downloading the document in the workflow.
Alpha feature
The binary-store building block and this SDK integration are alpha and subject to change.
These APIs require @dapr/dapr 3.19.0 or later, Dapr runtime 1.19 or later, and a binary-store
component in addition to the normal workflow infrastructure.
Choose how to handle payloads
Approach
Behavior
Best for
Inline (default)
Serialized values travel in workflow history. No binary-store access is required.
Small payloads.
Automatic offloading
PreferReference stores eligible large values. Ordinary input/result contracts trigger automatic download and deserialization.
Reducing history size while preserving existing application contracts.
Explicit references
Register reference inputs and request reference results; forward envelopes without downloading the data. Resolve or stream only where needed.
Workflows that coordinate large documents but do not inspect their contents.
Performance and memory tradeoffs
Offloading replaces repeated large history values with small references, reducing history storage and
workflow protocol traffic. It does not make storage I/O free:
Automatic offloading still materializes values. An ordinary workflow input, activity result, or event
must be downloaded and deserialized when consumed. Replays repeat those reads; the cache is scoped to
a single orchestrator execution, not shared across replays.
Explicit references avoid unnecessary reads. A workflow can pass the same reference through several
activities without loading the document itself. Only consumers that need the content resolve or stream it.
Streaming avoids full buffering. It trades the convenience of a deserialized object for incremental
access to the raw serialized bytes.
For a document of size S forwarded through multiple steps, inline history repeatedly carries data on the
order of S; reference-based history repeatedly carries the much smaller envelope. This is a traffic model,
not a JavaScript latency or allocation benchmark. Actual performance depends on document size, replay
frequency, store latency, and how many consumers materialize the data. Small values may be faster inline.
Do not apply the .NET benchmark results
to JavaScript; measure your own workload.
Set up payload support
Configure a binary-store component
For a disposable local experiment, save this as components\workflow-payloads.yaml:
In-memory payloads disappear when the sidecar stops and are not shared between sidecars. Durable workflow
history can outlive those objects and become unreadable. Use durable binary storage for workflows that must
survive restarts, and retain objects for as long as histories or downstream consumers reference them.
See the binary-store guide for component and transport details.
Adding a component alone does not enable workflow offloading.
The resolver uses DaprClient.binaryStore, which supports HTTP or gRPC; the workflow transport itself
still uses gRPC. Configure endpoints and API tokens consistently if the clients connect to different endpoints.
storeName must match the component name. All readers need access to the referenced store/key and compatible
serialization. Merely constructing a resolver uses Preserve, not automatic offloading; the example
explicitly selects PreferReference.
Use automatic offloading
With the registration above, keep ordinary inputs:
The document exceeds the threshold and is offloaded at eligible boundaries. The workflow still receives an
ordinary object and downloads it on replay; the small numeric result stays inline.
Pass explicit references
JavaScript types are erased at runtime. A TypeScript annotation such as PayloadReference<DocumentPayload>
alone does not change how inputs are read. Register each workflow and activity that accepts an envelope
with { inputAsReference: true }.
Use this alternative to the automatic example, with the same resolver setup:
store(value, instanceId, signal?) explicitly stores the serialized value, independently of the automatic
threshold or write preference. The workflow only forwards its reference; the activity downloads the document.
A reference-input contract rejects an inline value instead of silently storing or converting it.
Keep activity and child results as references
Activities can return a reference created by ctx.payloads.store(value, ctx.getWorkflowInstanceId()).
Request resultAsReference: true on ctx.callActivity or ctx.callChildWorkflow to receive that reference
without automatically resolving it:
The producing activity must actually return a reference, or its result must be offloaded by policy.
An inline result fails a reference-result contract, including a small result below the offload threshold.
resultAsReference does not force a write. Forward PayloadReference objects directly, not a plain object
containing one: nested references are not recursively converted or resolved.
Resolve inside a workflow only when necessary
ctx.hasPayloadResolver() reports whether payload support is configured.
yield ctx.resolvePayload(reference) downloads and deserializes the data through an SDK task.
yield ctx.openPayload(reference) obtains a raw Node.js readable stream; consuming it asynchronously requires
an async generator. These read-only APIs are supported, but repeat during replay and sacrifice the principal
benefit of keeping the document out of the orchestrator. Prefer resolving or streaming in activities.
Do not perform arbitrary storage writes from workflow code.
Stream payloads in activities
ctx.payloads.open(reference, signal?) returns a Node.js Readable over the raw stored UTF-8 serialized bytes.
It does not deserialize the document:
Streaming bypasses maxInMemoryRehydrationSize, but also bypasses buffered SHA-256 verification and
payload-stage reversal. If needed, compute and verify a hash while consuming the stream.
Destroy streams on early exit and handle stream errors. Creating the stream alone does not download all data.
The byte count includes JSON syntax and encoding, not just the length of an application string.
Configuration and policy reference
Offloading uses the serialized value’s UTF-8 byte count, not JavaScript string length. Keys have the form
<keyPrefix>/<instanceId>/<sha256>. References contain the store, key, size, SHA-256 hash, format version,
and optional stage metadata. The version-1 wire envelope uses the reserved $daprRef property.
Resolver option
Default and behavior
storeName
Required binary-store component name. Reads use the store recorded in each reference.
keyPrefix
"workflow-payloads"; prefix for new content-addressed keys.
writePreference
PayloadWritePreference.Preserve. See the policy table below.
offloadSites
PayloadKind.All; bitwise combination of eligible boundary kinds.
offloadThreshold
64 * 1024 bytes, inclusive. Positive integer; null offloads every nonempty serialized snapshot eligible under PreferReference.
skipWriteIfExists
true; tolerates an already-existing content-addressed object rather than overwriting it. Does not mean the SDK skips every upload attempt.
maxInMemoryRehydrationSize
16 * 1024 * 1024 bytes. Enforced against both the envelope size and actual buffered bytes.
verifyIntegrityOnRead
true; buffered reads verify the SHA-256 hash.
resolutionCacheSize
128 entries per orchestrator execution. 0 disables caching.
resolutionCacheBytes
64 * 1024 * 1024 summed envelope bytes per execution. 0 disables caching; values exceeding the budget are read without being cached.
manifest
Optional durable, idempotent IWorkflowPayloadManifest implementation for explicit cleanup.
The cache retains serialized reads, not a durable cross-replay object cache. Both the entry and byte bounds apply.
Write preference
Ordinary values
Existing top-level references
Preserve
Stay inline.
Pass through, except where a cross-app input requires inlining.
PreferReference
Offload if the site and threshold allow it.
Pass through, except where a cross-app input requires inlining.
PreferInline
Stay inline.
Resolve before writing the outgoing value.
offloadSites combines PayloadKind.WorkflowInput, WorkflowOutput, ActivityInput, ActivityOutput,
ExternalEvent, ContinueAsNewInput, CustomStatus, ChildWorkflowInput, and ChildWorkflowOutput.
For example, PayloadKind.ActivityInput | PayloadKind.ActivityOutput limits automatic offloading to activity
boundaries. PayloadKind.None disables new automatic offloading without disabling reads or forwarding.
Detached inputs use WorkflowInput, termination output uses WorkflowOutput, and rerun replacement input
uses WorkflowInput.
Read limits and errors
Buffered resolution rejects staged references because JavaScript does not implement stage reversal.
It also throws PayloadRehydrationLimitError above the configured limit, PayloadNotFoundError for a
missing object, and PayloadIntegrityError for a hash mismatch when verification is enabled.
PayloadNotResolvableError indicates missing resolver support. Invalid or unsupported reserved reference
envelopes throw rather than being treated as ordinary application data.
Changing the write threshold affects new writes only. Lowering the rehydration limit can break existing
ordinary-value consumers and PreferInline conversions. Plan that change against all retained payloads;
use explicit references and streaming for values that must not be fully buffered.
Read client results
getWorkflowState and the wait methods prepare referenced input, output, and custom status before returning.
With a compatible resolver, the ordinary getters use the resolved serialized data. This means fetching
payloads can trigger downloads even when you intend to inspect a reference.
state.getInputReference(), getOutputReference(), and getCustomStatusReference() expose the original
reference. If buffered resolution was refused because the resolver is absent or the size exceeds its limit,
the reference remains accessible, while the corresponding typed getter throws the preparation error:
Use an appropriate rehydration limit on clients intended to stream large results.
Missing objects and integrity failures reject the state request instead of being deferred.
Serialized getters can still contain the raw envelope when preparation could not resolve it; do not treat
that envelope as an application object. Metadata-only state reads omit input/output fields.
History retrieval and propagated-history views preserve their wire payloads and do not hydrate them.
Cross-app and cross-language calls
Cross-app activity, child, and detached workflow inputs are inline by default, even under
PreferReference. The sender resolves an existing top-level reference before submission; a failed read
prevents submission. The destination should accept an ordinary value for that input.
To forward references, explicitly allow them on the call:
This permits the resolver’s write policy; it does not force offloading or override PreferInline.
Every reader must resolve the recorded store and key to the same binary object through its own sidecar.
Separate in-memory components do not meet that requirement.
The JavaScript and .NET SDKs share a version-1 envelope, but cross-language use also requires compatible
serialization and contracts. JavaScript buffered reads do not reverse .NET payload stages. Use unstaged,
compatible payloads for such calls; other SDKs must not be assumed to support this scheme.
The inline default protects only top-level call inputs. It does not inline nested references, return
values, external events, or references in propagated ancestor history. Coordinate payload support across
the entire topology before enabling it; do not mix payload-aware and payload-unaware workers for one app ID.
Events and continuation
client.raiseEvent and workflow ctx.sendEvent apply the ExternalEvent write policy.
ctx.waitForExternalEvent(name) resolves an offloaded event as an ordinary value; use
ctx.waitForExternalEvent(name, { asReference: true }) to receive an envelope without downloading.
The sender must actually supply a reference or produce an offloaded event for that contract.
continueAsNew applies the ContinueAsNewInput policy. Unconsumed reference events preserved with
saveEvents: true are carried forward without being materialized. Ensure the next generation’s input
contract is compatible with the new input.
Adopt references in existing applications
First deploy resolver support with Preserve everywhere that may read the histories. This keeps ordinary
new values inline while allowing existing references to be read. Next, enable PreferReference at selected
sites after assessing storage durability, read limits, and every downstream consumer.
Moving from ordinary input to inputAsReference: true is a contract change: old inline histories cannot
satisfy it. Introduce a new registration name/version and route new instances to that contract, keeping the
old implementation for existing instances. Likewise, resultAsReference and asReference must not be
introduced into histories that still contain inline results or events.
To stop creating new automatic references, use Preserve; to inline outgoing references as well, use
PreferInline. Keep the resolver registered while any history, result, event, or consumer can still
contain a reference. Switching write policy does not rewrite retained history.
Retention and cleanup
Neither workflow completion nor purgeWorkflow deletes binary-store objects. A failed scheduling request can
also leave an uploaded object behind. Retain objects for suspended workflows, replay, reruns, descendants,
and forwarded references; deleting a source instance’s objects can break another instance that still uses them.
For explicit cleanup, supply a durable IWorkflowPayloadManifest with asynchronous
record(instanceId, reference, signal?), list(instanceId, signal?), and clear(instanceId, signal?)
methods, then call await payloads.deletePayloads(instanceId) only when no consumer needs those objects.
The resolver records writes in the manifest; it does not discover every forwarded-reference consumer.
Cleanup without a manifest throws. Missing objects are tolerated during deletion; other errors propagate,
and the manifest is cleared only after deletions succeed.
Use application-level retention and access control appropriate to the data. A reference is a locator,
not authorization or a substitute for protecting the binary-store component.
4.10 - Dapr Configuration JavaScript SDK
Read application configuration and subscribe to changes with the Dapr JavaScript SDK
Use DaprClient.configuration to retrieve application configuration from a configured store and subscribe to changes. You can read selected keys or all keys, watch selected keys or the whole store, and pass store-specific request metadata.
These guides target @dapr/dapr 3.19.0 or later. Configuration operations in the JavaScript SDK require gRPC; the HTTP client throws HTTPNotSupportedError for both reads and subscriptions, even though the Dapr runtime exposes an HTTP Configuration API.
The client reads and watches configuration; it does not create, update, or delete configuration items. Make those changes directly in the backing store using its own tools or API. This building block manages application settings, not the Dapr runtime’s Configuration resource.
Start with the configuration how-to guide for a runnable example. Refer to the client usage guidance for the complete method surface, metadata, response shapes, subscription lifetime, and error handling.
4.10.1 - How to: Manage configuration with the Dapr JavaScript SDK
Retrieve application settings and subscribe to configuration changes using the Dapr JavaScript SDK
Use DaprClient.configuration to read application settings and react to changes without calling the configuration store directly. This guide uses Redis for local development.
In your application directory, initialize an npm project if needed and install the SDK:
npm init -y
npm install @dapr/dapr@3.19.0
The examples use JavaScript ES modules saved as .mjs files and do not require a TypeScript compiler. The same APIs are available in TypeScript.
Configure a store
Start a dedicated local Redis instance on port 6380 to avoid conflicting with Redis started by dapr init:
docker run --name js-config-redis -p 127.0.0.1:6380:6379 -d redis:7
The Redis configuration component enables the keyspace notifications it needs when a subscription starts, so no extra Redis flags are required. This example has no authentication and binds Redis to loopback for local development only. For production, configure authentication and TLS as described in the Redis configuration store reference.
Create a components directory in your application directory and save the following as components\configstore.yaml:
The component’s metadata.name, configstore, is the store name supplied to each SDK method. A Redis state store component is not a configuration store; the component type must be configuration.redis.
This example uses Redis configuration values in value||version format. The SDK returns the value and version as separate strings.
Retrieve configuration items
Save the following as get-configuration.mjs:
import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:process.env.DAPR_GRPC_PORT??"50001",communicationProtocol:CommunicationProtocolEnum.GRPC,});try{constconfig=awaitclient.configuration.get("configstore",["orderId1","orderId2"],);for(const[key,item]ofObject.entries(config.items)){console.log(`${key}: ${item.value} (version ${item.version})`);}constorder=config.items["orderId1"];if(order===undefined){thrownewError("Required configuration key orderId1 was not returned");}}finally{awaitclient.stop();}
An empty key list is sent to the component. Whether it can return all keys, and which keys are included, depends on the store. Check required keys explicitly rather than assuming every requested key is present.
Subscribe to configuration changes
Save the following as watch-configuration.mjs:
import{setTimeout}from"node:timers/promises";import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:process.env.DAPR_GRPC_PORT??"50001",communicationProtocol:CommunicationProtocolEnum.GRPC,});letsubscription;try{subscription=awaitclient.configuration.subscribeWithKeys("configstore",["orderId1","orderId2"],async(changes)=>{for(const[key,item]ofObject.entries(changes.items)){console.log(`${key}: ${item.value} (version ${item.version})`);}},);console.log("Subscription requested; watching for 60 seconds");awaitsetTimeout(60_000);}finally{try{if(subscription){awaitsubscription.stop();}}finally{awaitclient.stop();}}
In a separate terminal, change a watched key while the subscriber is running:
docker exec js-config-redis redis-cli SET orderId1 "103||2"
Once the subscription is established, the callback prints orderId1: 103 (version 2). The subscribe promise returns a local handle, not a server-readiness acknowledgment. If you update the store immediately after starting the application, the subscription might not yet be active.
To watch the whole store, replace the subscribeWithKeys call with:
All-key subscription behavior, including whether keys added later are watched, depends on the component. Each subscription has its own handle; stop every subscription during shutdown. No DaprServer, application callback route, or --app-port is required: updates arrive on the client’s gRPC stream.
Next steps
Read the client usage guidance for request metadata, response handling, and important subscription failure and cleanup limitations.
4.10.2 - Configuration client usage
Guidance for configuration reads, metadata, subscriptions, client lifetime, and error handling in JavaScript
Configuration is available through DaprClient.configuration. This guide targets @dapr/dapr 3.19.0 or later and describes the implementation details and limitations to account for when using this release.
Client lifetime and configuration
Reuse a long-lived DaprClient for configuration operations rather than creating one for each read or subscription. Configuration requires gRPC; the SDK’s default protocol is HTTP and is not supported for these methods.
Port values are strings. When you omit explicit host and port options, the SDK can resolve the sidecar address from DAPR_GRPC_ENDPOINT. Otherwise, it falls back to the configured host and port, with defaults of 127.0.0.1 and DAPR_GRPC_PORT (or 50001). Explicit host and port options take precedence over endpoint settings.
The API token defaults to DAPR_API_TOKEN; you can also supply daprApiToken in the client options. Request metadata described below is passed to the configuration component and is not a substitute for sidecar authentication.
Stop all subscriptions before calling await client.stop() at application shutdown. Do not rely on client shutdown to explicitly unsubscribe each handle.
Choose an operation
All methods take the configuration component’s name, not its type or YAML file name.
Method
Purpose
Result
get(storeName, keys?, metadata?)
Read selected keys, or request all keys when keys are omitted or empty
The gRPC implementation removes empty strings ("") from key arrays. If the resulting array is empty, it sends an all-key request; it does not mean “read or watch nothing.” Use explicit nonempty keys when you need a bounded selection. Support for all-key requests is component-specific.
There are no configuration write or delete methods and no public client.configuration.unsubscribe(...) method. Update the backing store directly and use the returned handle’s stop() to stop a subscription.
Understand response shapes
Both get and subscription callbacks expose an items object indexed by configuration key:
Each item’s key repeats its map key. value and version are strings; versions are store-specific and may be empty. metadata contains the response metadata supplied by the component.
The SDK does not deserialize values into numbers, booleans, or application objects. Parse and validate them in application code. For example, a JSON setting requires JSON.parse(item.value), with appropriate error handling.
Handle missing keys explicitly. A successful response can have an empty items object; do not assume a missing key causes the read to reject.
Subscription callbacks receive the items in each update, not a guaranteed full-store snapshot. Empty-item stream messages are skipped. The SDK keeps the runtime subscription ID internally and does not expose it in the handle or callback response.
Pass request metadata
get accepts metadata as its third argument. subscribeWithMetadata accepts metadata before the callback. Use the component’s documented metadata keys and string values, without an HTTP metadata. prefix.
constconfig=awaitclient.configuration.get("appconfig",["application:theme"],{label:"production"},);console.log(config.items);constsubscription=awaitclient.configuration.subscribeWithMetadata("appconfig",["application:theme"],{label:"production"},async(changes)=>{console.log("Updated settings:",changes.items);},);// Later, during shutdown:
awaitsubscription.stop();
This snippet assumes an existing gRPC client. Pass [] as the keys argument to request an all-key subscription with metadata, subject to component support.
Metadata is passed through to the store. It is not automatically copied into each returned item’s metadata. Supported fields, filtering, polling intervals, and change-notification behavior depend on the component; Redis, for example, does not implement the Azure label selector.
Subscription lifetime and callbacks
Each subscribe call starts an independent background stream and returns a handle with stop(). Multiple subscriptions can share one client, including subscriptions for the same keys. Retain and stop each handle separately.
Provide an async callback, or a function returning Promise<void>. The SDK awaits each callback before consuming the next message on that subscription. Keep callbacks short; a slow callback delays subsequent updates. Handle processing failures explicitly inside the callback and report them through your application’s logging or monitoring.
Do not assume that subscribing immediately provides current values. Initial-value delivery depends on the runtime and component, and the SDK does not perform an initial get for you. Read required values with get and reconcile subsequent updates according to your application’s consistency needs. Separate reads and subscriptions are not an atomic snapshot-and-watch operation.
Awaiting a subscribe method only returns the local handle; it does not wait for a server acknowledgment or first update. There is no readiness promise, completion promise, or error callback on the handle.
Stop a subscription
Use the handle returned by the subscribe method:
awaitsubscription.stop();
In the reviewed versions, stop() aborts the local stream and, if a runtime subscription ID has arrived, attempts an explicit unsubscribe request. The implementation is asynchronous even though the published SubscribeConfigurationStream type declares stop: () => void; using await waits for that implementation’s cleanup.
Cleanup is best-effort: unsubscribe failures are suppressed, and stopping before an ID arrives cannot issue an ID-based unsubscribe. A resolved stop() is not confirmation of server-side removal. Stopping also does not wait for an already-running callback to finish or cancel application work started by that callback.
The configuration methods do not accept an AbortSignal or a per-call timeout option. Use stop() to cancel a subscription; do not pass binary-store-style cancellation options to configuration methods.
Error handling and recovery
Await reads and subscription creation at your application’s error boundary. A failed get rejects, for example when the component is missing, the store cannot be reached, or the sidecar returns an error. gRPC runtime errors use the Connect transport’s error codes rather than HTTP status codes. Calling configuration methods on an HTTP client rejects with HTTPNotSupportedError.
Subscription error limitations
In 3.19.0, unexpected errors while consuming the background subscription stream are caught without being logged or propagated. This includes a callback rejection, which exits the consumption loop. A try/catch around await subscribe... cannot observe those later failures. The implementation does not automatically reconnect or resubscribe when the stream ends.
Report callback errors within the callback itself. For applications that require fresh settings, add independent freshness checks or periodic reads and an application-level recovery policy; do not treat possession of a subscription handle, or a lack of updates, as proof that the watch is healthy. If you recreate subscriptions, stop the previous handles and reconcile current values.
Converse with large language models using the Dapr JavaScript SDK
Use DaprClient.conversation to send messages to a large language model through a Dapr conversation component. The JavaScript SDK supports the Conversation Alpha2 API over HTTP and gRPC, including message history, function tool calls, structured output, PII scrubbing, prompt cache retention, and token usage statistics.
These guides target @dapr/dapr 3.19.0 or later. The underlying Conversation API is alpha. Basic Alpha2 requests require Dapr runtime 1.16 or later; some options require newer runtimes and support from the selected component and model.
Define functions, validate model-generated arguments, and return tool results to the model.
4.11.1 - How to: Converse with an LLM using the Dapr JavaScript SDK
Configure a conversation component and send messages using the Dapr JavaScript SDK
Use client.conversation.converse(request) to send role-based messages to a configured conversation component. You do not need a DaprServer or a provider-specific JavaScript SDK.
In your application directory, initialize an npm project if you do not already have one, then install the SDK:
npm init -y
npm install @dapr/dapr@3.19.0
The examples use JavaScript ES modules and run as .mjs files without a TypeScript compiler. The same APIs are available in TypeScript, with request and response types exported from @dapr/dapr.
Configure a conversation component
Create a components directory and save the following as components\conversation.yaml:
The echo component returns the input text without calling an LLM. Use it to check local connectivity, not to test model reasoning, structured output, or tool calling.
The component’s metadata.name, echo, is the name passed in a conversation request. It is not the component type or the YAML file name.
Send a message
Save the following as app.mjs:
import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"3500",communicationProtocol:CommunicationProtocolEnum.HTTP,});try{constresponse=awaitclient.conversation.converse({name:"echo",inputs:[{messages:[{ofUser:{content:[{text:"What is Dapr?"}]}},],},],});for(constoutputofresponse.outputs){for(constchoiceofoutput.choices){console.log("Finish reason:",choice.finishReason);if(choice.message){console.log("Conversation output:",choice.message.content);}}}}finally{awaitclient.stop();}
The echoed message is available at response.outputs[0].choices[0].message.content. Unlike Alpha1 examples in other SDKs, the JavaScript Alpha2 response does not have an output.result property.
To use gRPC, change communicationProtocol to CommunicationProtocolEnum.GRPC and daprPort to "50001". The request and response objects are the same for both protocols.
Set OPENAI_API_KEY in the environment inherited by dapr run, restart the sidecar, and change the request’s name to "llm". Do not put provider credentials in request metadata or commit them to a component file. See the OpenAI component reference for provider settings and model support.
Next steps
Read the client usage guidance for message history, structured output, caching, token limits, and errors. Follow the tool-calling guide to let a model request application-defined functions.
Import these types, and the other Conversation* types used below, from @dapr/dapr. This guidance targets 3.19.0 or later.
Runtime and provider support
Capability
Minimum Dapr runtime
Alpha2 messages, tool calling, temperature, and PII scrubbing
1.16
responseFormat, promptCacheRetention, and token usage statistics
1.17
Model name in the response
1.18
maxTokens
1.19
Availability also depends on the conversation component and model. An SDK option does not make an unsupported provider feature available. See the Conversation API reference and your component reference.
Client configuration and lifetime
Create a long-lived DaprClient and reuse it across requests. Call await client.stop() when the application shuts down, not after each operation on a shared client.
Use CommunicationProtocolEnum.HTTP with the sidecar’s HTTP port for HTTP requests. The SDK calls /v1.0-alpha2/conversation/{name}/converse over HTTP and ConverseAlpha2 over gRPC. You pass plain JavaScript objects, not protobuf messages or provider-native request objects.
The client also supports DAPR_HTTP_ENDPOINT and DAPR_GRPC_ENDPOINT for endpoint configuration. DAPR_API_TOKEN authenticates to the sidecar; it is separate from the provider API key configured on the component. See JavaScript client configuration for shared client options.
Messages and conversation history
A request contains one or more inputs, each with a nonempty messages array. Each message must contain exactly one role property:
Role property
Content
ofDeveloper
Developer instructions, with optional participant name.
ofSystem
System instructions, with optional participant name.
ofUser
User input, with optional participant name.
ofAssistant
Previous assistant text and/or toolCalls, with optional participant name. Content can be omitted for a tool-only message.
ofTool
Function result with required nonempty name, text content, and toolId to correlate with the assistant’s tool call.
Message content is an array of { text: string } objects, not a single string. The SDK’s conversation message types support text, not image or audio content parts.
The following example reuses a configured client and an LLM component named llm:
constmessages=[{ofSystem:{content:[{text:"Give concise, factual answers."}]}},{ofUser:{name:"reader",content:[{text:"What is Dapr?"}]}},];constresponse=awaitclient.conversation.converse({name:"llm",contextId:"chat-123",inputs:[{messages}],});constchoice=response.outputs[0]?.choices[0];if(!choice?.message||choice.finishReason!=="stop"){thrownewError("Expected a completed text response before continuing the chat");}messages.push({ofAssistant:{content:[{text:choice.message.content}]}},{ofUser:{content:[{text:"How does it help with pub/sub?"}]}},);constfollowup=awaitclient.conversation.converse({name:"llm",contextId:response.contextId||"chat-123",inputs:[{messages}],});
contextId is a correlation value, not server-side chat memory. Retain the history in your application and resend the messages needed for every turn. Choose one assistant choice when continuing a conversation; do not merge alternative choices into the same history.
Request options
Property
Description
name
Required, nonempty component name.
inputs
Required, nonempty array of conversation inputs.
contextId
Optional correlation value.
temperature
Optional finite number controlling randomness. The component and model determine the accepted range. Explicit 0 is preserved.
scrubPii
Optional boolean enabling PII obfuscation in response text. Set inputs[].scrubPii independently for input text.
metadata
Optional string-to-string conversation tags, not provider configuration or credentials.
tools, toolChoice
Optional function definitions and tool selection policy. See tool calling.
responseFormat
Optional JSON Schema object for structured output.
promptCacheRetention
Optional nonnegative Temporal.Duration for prompt cache retention.
maxTokens
Optional integer from 1 through 2147483647 limiting generated completion tokens.
parameters
Optional JSON object reserved by Dapr. It is not a general-purpose provider options bag. The SDK encodes its values internally.
PII scrubbing and metadata
Input and output scrubbing are separate settings:
constresponse=awaitclient.conversation.converse({name:"llm",inputs:[{scrubPii:true,messages:[{ofUser:{content:[{text:"Contact me at reader@example.com."}]}},],},],scrubPii:true,temperature:0,metadata:{user_id:"user-123",session_id:"chat-123"},});
Metadata supports up to 16 pairs, with keys up to 64 characters and values up to 512 characters. Keep API keys and component connection settings in component configuration or referenced secrets.
Structured output
Pass the JSON Schema directly as responseFormat, not an OpenAI response_format wrapper or a JSON-encoded string:
constresponse=awaitclient.conversation.converse({name:"llm",inputs:[{messages:[{ofUser:{content:[{text:"Answer with the name of Dapr's pub/sub building block."}]}},],},],responseFormat:{type:"object",properties:{answer:{type:"string"}},required:["answer"],additionalProperties:false,},});constchoice=response.outputs[0]?.choices[0];if(!choice?.message||choice.finishReason!=="stop"){thrownewError("Expected a completed structured response");}constvalue=JSON.parse(choice.message.content);if(value===null||typeofvalue!=="object"||Array.isArray(value)||typeofvalue.answer!=="string"||Object.keys(value).length!==1){thrownewError("Response does not match the expected answer schema");}console.log(value.answer);
The SDK returns content as a string; it does not parse or validate the generated JSON against your schema. Handle JSON parsing failures and validate the result before using it. A truncated or filtered response might not contain complete JSON.
Prompt cache retention and token limits
Import Temporal from the SDK to construct the retention duration:
import{Temporal}from"@dapr/dapr";constresponse=awaitclient.conversation.converse({name:"llm",inputs:[{messages:[{ofUser:{content:[{text:"Explain Dapr in one paragraph."}]}},],},],promptCacheRetention:Temporal.Duration.from({minutes:30}),maxTokens:200,});
promptCacheRetention must be a fixed, nonnegative duration. Days, hours, minutes, seconds, and subsecond fields are supported; calendar years, months, and weeks are not. Fields must be safe integers and the total must fit the protobuf duration range. Do not pass milliseconds as a number or a duration string instead of a Temporal.Duration.
Retention is a request to the component/provider, not a guarantee of a cache hit or stored conversation history. Provider-specific caching limits still apply.
Some components also expose responseCacheTTL in their YAML metadata to cache complete responses. This is component configuration, separate from promptCacheRetention; do not try to configure it through request metadata.
maxTokens requires Dapr 1.19 or later and overrides the component’s token cap where supported. Check finishReason for "length" rather than treating a capped answer as complete.
Responses and token usage
The SDK returns ConversationResponseAlpha2 with an optional contextId and an outputs array. Each output contains choices, an optional model, and optional usage. Each choice contains index, finishReason, and an optional message. A message has string content and a toolCalls array.
Do not assume there is only one output or choice, or that every choice has text. Common finish reasons are "stop", "length", "tool_calls", and "content_filter"; handle other provider values too.
Prompt token details also include audioTokens. Completion token details include acceptedPredictionTokens, rejectedPredictionTokens, audioTokens, and reasoningTokens. These are provider-reported statistics, not evidence that the SDK accepts audio input. Usage and detail objects can be absent; some components return zero counts when the provider omits usage.
Token counts and choice indexes are JavaScript numbers. The SDK rejects values outside the safe-integer range instead of silently losing precision.
Errors and API limits
converse rejects its promise for invalid local input, sidecar errors, provider failures, or response conversion failures. Invalid message roles or content and invalid JSON objects produce TypeError; invalid numeric limits and durations can produce RangeError. Schema and parameter objects must contain only finite JSON values, without cycles, undefined, BigInt, or class instances.
Catch errors at your application’s error boundary and report or propagate them. Do not turn a failed request into a successful empty answer. Provider errors can include rate limits, invalid tool histories, unsupported options, and authentication failures; their representation can differ between HTTP and gRPC.
The exposed method returns a complete response. It does not expose streaming completions, automatic tool execution, or a per-request AbortSignal, timeout, or cancellation parameter. Configure Dapr resiliency policies for sidecar-to-provider timeouts and retries. A JavaScript Promise.race timeout alone does not cancel the underlying request.
4.11.3 - How to: Call tools with the Dapr Conversation JavaScript SDK
Define conversation tools, validate function arguments, and send tool results back to an LLM in JavaScript
Tool calling lets a model request an application-defined function. Dapr and the JavaScript SDK transport tool definitions and calls; your application validates arguments, authorizes and executes the function, and sends the result back.
Prerequisites
Complete the conversation setup guide using @dapr/dapr3.19.0 or later, Dapr runtime 1.16 or later, and a component/model that supports tool calling. The echo component is not sufficient.
Define a tool and handle its result
The following example uses the llm component configured in the setup guide. Save it as tools.mjs and run it with the same dapr run command, replacing app.mjs with tools.mjs.
import{DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"3500"});constmessages=[{ofUser:{content:[{text:"Look up the description of Dapr."}]}},];consttools=[{function:{name:"lookupProject",description:"Look up a project description by its exact name.",parameters:{type:"object",properties:{name:{type:"string",enum:["Dapr"]}},required:["name"],additionalProperties:false,},},},];try{constfirst=awaitclient.conversation.converse({name:"llm",inputs:[{messages}],tools,toolChoice:"lookupProject",});constchoice=first.outputs[0]?.choices[0];constcalls=choice?.message?.toolCalls;if(choice?.finishReason!=="tool_calls"||!calls?.length){thrownewError("Expected the model to request a tool");}messages.push({ofAssistant:{content:[{text:choice.message.content}],toolCalls:calls,},});constseenIds=newSet();for(constcallofcalls){if(!call.id||seenIds.has(call.id)){thrownewError("Missing or duplicate tool call ID");}seenIds.add(call.id);if(call.function.name!=="lookupProject"){thrownewError("Unexpected tool function");}constargs=JSON.parse(call.function.arguments);if(args===null||typeofargs!=="object"||Array.isArray(args)||args.name!=="Dapr"||Object.keys(args).length!==1){thrownewError("Invalid lookupProject arguments");}constresult={name:args.name,description:"Dapr provides APIs for building distributed applications.",};messages.push({ofTool:{toolId:call.id,name:call.function.name,content:[{text:JSON.stringify(result)}],},});}constfinal=awaitclient.conversation.converse({name:"llm",contextId:first.contextId,inputs:[{messages}],tools,toolChoice:"none",});constanswer=final.outputs[0]?.choices[0];if(!answer?.message||answer.finishReason!=="stop"){thrownewError("Expected a completed answer after the tool results");}console.log(answer.message.content);}finally{awaitclient.stop();}
Tool definitions use { function: { name, description, parameters } }. Do not add a provider-native type: "function" wrapper. parameters is a JSON Schema object; the function’s name must be nonempty.
Returned call.function.arguments is model-generated string data, not a parsed object or trusted instruction. The example allowlists one read-only function and validates its exact arguments. For real tools, also enforce authorization, input limits, and any required confirmation before side effects. Never use eval or dispatch arbitrary function names supplied by the model.
Preserve the tool-call history
For each selected assistant choice, append the assistant message containing the original tool calls, followed by a tool result for every call. Preserve each call’s id, function name, and arguments. Set the tool result’s toolId to that call’s ID, not its function name.
Tool-only assistant messages can omit content. Tool result messages require a nonempty name and a content array. An assistant can request multiple calls in one turn, so do not process only toolCalls[0]. Alternative response choices are separate conversation branches.
Resend the original messages, assistant tool calls, and tool results in order on the next request. Passing only contextId does not preserve that history.
Choose a tool policy
toolChoice
Behavior
"auto"
The model can answer directly or request tools.
"none"
The model must answer without calling tools.
"required"
The model must request one or more tools.
An exact function name, such as "lookupProject"
Request that specific function.
The chosen component and model must support the policy. A named choice must match a declared tool; requiring tools without providing definitions is invalid.
The example forces a named tool on the first request and disables tools on the second, bounding the interaction to two requests. If you use "auto" for a repeated tool loop, handle direct text responses, limit the number of turns and calls, and surface failures rather than retrying indefinitely.
4.12 - Dapr Jobs JavaScript SDK
Schedule, retrieve, delete, and handle Dapr Jobs using the JavaScript SDK
Use the Dapr JavaScript SDK to schedule future operations in Node.js applications. Jobs can run once, at a fixed interval, or on a calendar-based schedule, with an optional payload and failure policy.
This documentation targets @dapr/dapr 3.19.0 or later and Dapr runtime 1.16 or later, with a running Scheduler service.
The SDK exposes Jobs through the existing client and server:
API
Purpose
DaprClient.jobs.schedule(name, options)
Create a job or explicitly overwrite an existing job.
DaprClient.jobs.get(name)
Retrieve a job’s schedule, payload, and other settings.
DaprClient.jobs.delete(name)
Delete a job by name.
DaprServer.jobs.listen(name, callback)
Register an asynchronous handler for a named job.
CronExpressionBuilder
Build a six-field cron expression with optional time zone.
Both HTTP and gRPC support job management and JSON callbacks. Opaque binary payloads require gRPC for scheduling, retrieval, and callbacks. The SDK automatically selects the stable or Alpha1 Jobs API for the connected runtime.
These are the JavaScript SDK’s Jobs APIs in this package version. It does not expose job listing, bulk deletion, deletion by prefix, or per-operation cancellation options. Do not assume that all management methods in another language SDK are available in JavaScript.
4.12.1 - How to: Author and manage Dapr Jobs using the JavaScript SDK
Learn how to schedule one-time and recurring jobs and handle their callbacks using JavaScript
Let’s register an endpoint to receive a job notification, then schedule the job from the same application. This guide uses DaprServer.jobs for callbacks and its embedded DaprClient.jobs for job management. There is no separate Jobs client package to install.
In your application directory, initialize an npm project if needed and install the SDK:
npm init -y
npm install @dapr/dapr@3.19.0
The examples use JavaScript ES modules in a .mjs file, so no TypeScript compiler is required. The same APIs are available in TypeScript.
Register a handler and schedule a recurring job
Save the following as app.mjs:
import{CommunicationProtocolEnum,DaprServer}from"@dapr/dapr";constserver=newDaprServer({serverHost:"127.0.0.1",serverPort:"50002",communicationProtocol:CommunicationProtocolEnum.GRPC,clientOptions:{daprHost:"127.0.0.1",daprPort:"50001",communicationProtocol:CommunicationProtocolEnum.GRPC,},});constjobName="daily-report";try{awaitserver.jobs.listen(jobName,async(data)=>{console.log(`Received ${jobName}:`,data);});awaitserver.start();awaitserver.client.jobs.schedule(jobName,{schedule:"@every 10s",repeats:3,data:{report:"daily",format:"csv"},failurePolicy:{type:"constant",interval:"1s",maxRetries:3},overwrite:true,});constjob=awaitserver.client.jobs.get(jobName);console.log("Scheduled:",job.name,job.schedule,job.data);console.log("Waiting for callbacks. Press Ctrl+C to stop.");awaitnewPromise((resolve)=>{process.once("SIGINT",resolve);process.once("SIGTERM",resolve);});}finally{try{awaitserver.stop();}finally{awaitserver.client.stop();}}
The application listens on port 50002; its client sends management requests to the sidecar on port 50001. The job triggers three times at ten-second intervals. The callback receives the payload itself, not a job envelope or the job name. Capture the name in the handler’s closure if needed.
Register handlers before calling server.start(). Await all work in the handler; throw an error or reject its promise when processing fails so Dapr can apply the job’s failure policy. Delivery is at least once, so make handlers idempotent.
The example deliberately uses overwrite: true so it can be rerun while a job with the same name still exists. Without this option, scheduling an existing name fails. Overwriting replaces the existing job, including its timing and repeat settings; do not blindly reset a production schedule whenever a replica starts.
Jobs belong to the scheduling sidecar’s application ID and namespace. Callbacks go to that application, not to an arbitrary target application. Register the handler on every replica that can receive a callback. A handler can use other Dapr APIs to invoke another service or publish an event.
Stopping the Node.js server does not delete jobs stored in the Scheduler. The example also stops the embedded client explicitly because server.stop() only stops the callback server.
Use HTTP instead
For JSON payloads, you can use HTTP for both management requests and callbacks. Change the server’s communicationProtocol to CommunicationProtocolEnum.HTTP, and change its clientOptions to:
The SDK registers the HTTP callback route POST /job/:name; you do not need to implement this route yourself. Client and callback protocols can also differ. See the protocol guidance.
Schedule a one-time job
For a one-time job, supply dueTime without schedule:
These snippets reuse the running server from the example. To receive these additional jobs, register a matching server.jobs.listen(...) handler for each name before starting the server. The remaining scheduling examples follow the same pattern.
Limit a recurring job’s lifetime
Combine schedule with dueTime to delay when a recurring job becomes active. Use repeats to limit the number of scheduled triggers, ttl to set expiration, or both:
Omitting repeats leaves a recurring job running until it expires or is deleted. Relative dueTime and ttl values are calculated from job creation, not from the previous callback. See the option reference for accepted time formats.
For calendar-based scheduling, use a six-field cron string or a CronExpressionBuilder:
Deletion does not cancel callback work that is already running. It also does not unregister the application’s in-memory handler. To change a stored job instead, call schedule with its name, the replacement options, and overwrite: true.
4.12.2 - Build cron schedules using the JavaScript SDK
Use raw cron expressions, descriptors, time zones, and CronExpressionBuilder to schedule Dapr Jobs
Use a cron schedule for calendar-based jobs, such as a report at 09:30 every weekday. The JavaScript SDK accepts a raw schedule string or a CronExpressionBuilder directly in JobOptions.schedule. These examples target @dapr/dapr 3.19.0 or later.
Provide a schedule string
Dapr cron expressions use six fields, including seconds, not the five fields used by many Unix cron tools:
second minute hour dayOfMonth month dayOfWeek
For example, "0 30 9 * * 1-5" runs at 09:30 on weekdays. Sunday is 0 and Saturday is 6.
All fields initially contain *. An untouched builder produces "* * * * * *", which matches every second, not once per minute. Set the seconds field explicitly when you want minute-level or less frequent execution.
Periods and bounds
The exported TypeScript CronPeriod type accepts these names:
Period
Integer values
second
0-59
minute
0-59
hour
0-23
dayOfMonth
1-31
month
1-12
dayOfWeek
0-6, starting with Sunday
Builder operations
Method
Result
on(period, ...values)
Select values, such as on("hour", 9, 17). Values are sorted and deduplicated. At least one is required.
through(period, from, to)
Select an inclusive range, such as through("dayOfWeek", 1, 5). from must be less than to.
each(period)
Reset a field to *.
every(period, interval)
Set a step expression, such as every("minute", 15) producing */15.
withTimeZone(timeZone)
Prefix the expression with CRON_TZ= using a validated IANA time zone.
toString()
Return the six-field expression as a string, including its time zone if set.
Each fluent method mutates and returns the same builder. A later call for a period replaces that field; it does not append another constraint. For example, on("hour", 9).on("hour", 17) selects only 17, while on("hour", 9, 17) selects both.
Values and range endpoints must be integers within the period’s bounds. A step must be a positive integer no larger than the number of values in that field: up to 60 for seconds or minutes, 24 for hours, 31 for days of the month, 12 for months, and 7 for days of the week. Invalid fields or values throw RangeError.
Steps are cron field steps, not elapsed-time intervals. For example, every("hour", 2) selects every second hour of the day; it does not mean two hours after registration. Use "@every 2h" for an elapsed interval.
toString() can be used independently of the Jobs client. Passing the builder to schedule takes its current string value; mutating the builder afterward does not update an already stored job. Reschedule with overwrite: true to change the stored schedule.
Specify a time zone
By default, Dapr evaluates a cron schedule in the Scheduler service’s local time zone, not necessarily the Node.js process’s time zone. Use an explicit IANA zone for a predictable wall-clock schedule:
The builder validates the time zone using Node.js Intl.DateTimeFormat. Empty, whitespace-containing, or unrecognized names are rejected. A subsequent withTimeZone call replaces the previous zone.
You can also pass the runtime’s time zone prefix in a raw string, for example "CRON_TZ=Europe/Rome 0 0 9 * * *" or "CRON_TZ=Europe/Rome @daily". Use "UTC" when daylight saving changes are not desired. With a regional zone, Dapr evaluates the local wall-clock schedule across daylight saving transitions.
Do not combine a time zone prefix with @every: fixed-duration intervals do not have a wall-clock time zone and the runtime rejects that combination. See the Jobs API reference for runtime schedule syntax.
4.12.3 - JavaScript Jobs client and callback usage
Configure the JavaScript Jobs client and understand scheduling options, payloads, failure policies, and errors
Jobs is part of DaprClient and DaprServer in @dapr/dapr 3.19.0 or later. Use client.jobs to manage scheduled jobs and server.jobs to register callbacks. The how-to guide contains a complete runnable application.
Client configuration and lifetime
Create a long-lived DaprClient rather than a new client for every operation. Jobs uses the client’s existing sidecar connection and API token:
For HTTP, use CommunicationProtocolEnum.HTTP and the sidecar’s HTTP port, normally "3500". Client-only management does not require an app listener, but the target application must expose its callback server when the job fires.
When using DaprServer, configure its embedded client through clientOptions and reuse server.client.jobs. server.start() starts both the callback server and the embedded client. server.stop() stops only the server; also call server.client.stop() during application shutdown. Neither operation deletes stored jobs.
Client protocol and callback protocol
The two connections are configured independently:
Connection
SDK setting
Dapr CLI setting
Application to sidecar
DaprClient.communicationProtocol, or DaprServer.clientOptions.communicationProtocol, with the corresponding daprPort
--dapr-http-port or --dapr-grpc-port
Sidecar to application
DaprServer.communicationProtocol and serverPort
Matching --app-protocol and --app-port
JSON payloads support any combination of HTTP and gRPC. For arbitrary bytes, use gRPC on both connections. Selecting gRPC for the client alone does not change the sidecar’s callback protocol.
Runtime compatibility and API selection
Jobs requires Dapr runtime 1.16 or later and a running Scheduler service. Before making a Jobs request, the SDK reads the sidecar’s metadata to select the API:
Runtime version
HTTP API prefix
gRPC management methods
1.16 and 1.17
v1.0-alpha1
ScheduleJobAlpha1, GetJobAlpha1, DeleteJobAlpha1
1.18 prereleases
v1.0-alpha1
Alpha1 methods
1.18 stable and later releases
v1.0
ScheduleJob, GetJob, DeleteJob
Prereleases after 1.18 and the edge runtime identifier select the stable API. Both stable and Alpha1 gRPC callback services are registered by DaprServer.
The SDK caches successful API selection per client. Metadata lookup failures, missing or unrecognized versions, and unsupported runtime versions reject the operation rather than guessing an API. A subsequent call can retry a failed metadata lookup. A Jobs request that fails is not automatically replayed against a different API version.
The SDK package version and runtime version are separate requirements: using SDK 3.19.0 does not require runtime 1.19 merely to use Jobs.
Scheduling options
schedule(name, options) returns Promise<void>. Supply at least one of schedule or dueTime; both may be supplied together.
Option
Type
Behavior
schedule
string or CronExpressionBuilder
A six-field cron expression, a descriptor such as @daily, or an interval such as @every 5m. The builder is converted to a string.
dueTime
string
When the job becomes active, or the trigger time for a one-time job without schedule.
ttl
string
Job expiration. Relative values are calculated from job creation.
repeats
number
Limits scheduled triggers. Omit for unlimited recurrence; zero is passed to the runtime, not converted to an omitted value.
data
JSON value or Uint8Array
Optional callback payload. Node.js Buffer is also accepted by gRPC.
overwrite
boolean
Defaults to false. Set to true to replace an existing job with the same name.
failurePolicy
JobFailurePolicy
Controls retries when callback processing fails. Omit to use the runtime default.
dueTime and ttl accept RFC3339 timestamps, Go duration strings such as "30s" or "1h30m", and non-repeating ISO8601 durations such as "PT30M". Pass strings, not JavaScript Date objects. For an absolute time, use date.toISOString() or an RFC3339 timestamp with an explicit offset.
The runtime validates raw cron expressions, time strings, and scheduling combinations. Jobs is a durable scheduler, not a precision timer: a trigger will not arrive before its due time, but may arrive later.
Job names and input validation
Names are case-sensitive. Pass a plain name, not a URL-encoded value; the HTTP client encodes the path segment.
The SDK rejects empty names, surrounding whitespace, . and .., control characters, and the characters /, \, ?, #, %, and |. Internal spaces are supported. These SDK restrictions also apply with a newer runtime that allows additional characters, such as |.
The SDK also validates:
schedule, dueTime, and ttl, when present, must be nonempty strings after converting a builder.
repeats and failurePolicy.maxRetries must be integers between 0 and 4294967295.
overwrite, when present, must be a boolean.
Payloads and failure policies must have supported values.
Invalid options reject the asynchronous operation before a Jobs request is sent. The cron builder performs additional local validation of its fields.
Retrieving and deleting jobs
get(name) returns Promise<Job> containing name and the optional schedule, dueTime, ttl, repeats, data, and failurePolicy properties. The SDK exports the related types for TypeScript callers:
JobOptions describes scheduling input, and Job describes retrieved configuration. overwrite is a scheduling option, not a returned job property. Returned timing strings use the runtime’s representation, which may differ from the input, and a builder’s schedule is returned as a string.
Retrieval returns configuration, not execution history, a next-run calculation, or a count of completed callbacks. A missing job causes get to reject, rather than returning undefined. delete(name) returns Promise<void>; deleting an already absent job is accepted by supported runtimes, while transport and service errors still propagate.
Payload serialization
JSON payloads
Both client transports and both callback protocols support JSON values: plain objects, arrays, strings, finite numbers, booleans, and null. Pass the value directly rather than manually JSON-stringifying it:
get(name).data and the callback argument expose the decoded value. Values such as false, 0, "", and null are preserved rather than treated as missing payloads.
The SDK rejects non-JSON data such as Date instances, BigInt, non-finite numbers, nested undefined values, and circular references. Convert such values to a JSON-compatible representation first.
Jobs uses its own payload encoding, not the client’s custom serializer. JSON payloads are packed as google.protobuf.Value for gRPC; the decoder also understands google.protobuf.Struct payloads from other clients. You do not need to construct protobuf envelopes yourself.
Omitting data is not identical across transports. HTTP scheduling sends JSON null for compatibility with older runtimes; gRPC leaves the payload absent. Do not rely on distinguishing an omitted payload from null across protocols.
Opaque binary payloads
Use gRPC to schedule and retrieve raw Uint8Array or Node.js Buffer payloads, including empty buffers:
For this example, configure client with gRPC. Use a gRPC DaprServer and --app-protocol grpc to receive the same bytes in a callback. Dapr’s HTTP app channel treats job callback bodies as JSON and is not suitable for arbitrary bytes.
HTTP scheduling rejects byte payloads rather than converting them to JSON. Opaque gRPC payloads are returned as Node.js buffers. The SDK uses the dapr.io/schedule/jobpayload type URL also used by the .NET Jobs SDK; it does not JSON-serialize or text-encode these bytes. For cross-language interoperability, agree on whether the payload is protobuf-wrapped JSON or raw bytes and decode accordingly.
Failure policies
The SDK accepts the following policies:
Policy
Behavior
Omitted
Leave Dapr’s default policy in control. The runtime default retries up to three times with a one-second delay.
Retry with a constant delay, up to the specified number of retries after the initial attempt.
For a constant policy, omitting maxRetries allows unlimited retries. Setting maxRetries: 0 disables retries. Omitting interval, or setting it to "0s", requests immediate retries.
Unlike dueTime and ttl, the retry interval uses protobuf duration JSON syntax: seconds with an s suffix and up to nine fractional digits. Use "0.2s" for 200 milliseconds, "60s" for a minute, or "0.000000001s" for a nanosecond. Go-style strings such as "200ms" and "1m" are rejected here, as are negative durations.
This policy permits the initial attempt plus two retries. repeats controls scheduled triggers; it is not a retry limit.
Callback behavior
server.jobs.listen(name, callback) returns Promise<void> and registers an asynchronous (data) => Promise<void> handler. Registration does not schedule a job. Register before starting the server, using exactly the same name as the scheduled job.
The SDK waits for the handler’s promise before acknowledging delivery. A resolved handler means success; its return value is not a response payload or retry instruction. Throw or reject to signal failure. Do not start unawaited background work and return early, or catch processing errors without propagating them if you want Dapr to retry.
Duplicate registration for a name rejects instead of replacing the existing handler. The SDK does not provide a handler removal API.
Situation
HTTP callback response
gRPC callback response
Handler completes
200
Successful JobEventResponse
No matching handler
404
NotFound
Handler throws or rejects
500
Internal
Missing handlers and failed handlers are logged and reported as errors, not acknowledged as successful deliveries. Design handlers for at-least-once delivery and use application-level deduplication when processing has non-idempotent side effects.
Error handling
All Jobs methods return promises. Await them so validation errors, metadata failures, sidecar errors, and Scheduler errors reach your application’s error handling.
Input validation can produce TypeError or RangeError; malformed runtime responses also reject. Remote failures propagate through the selected transport. HTTP failures include status and response details in the error message; gRPC failures use the gRPC transport’s error information. There is no Jobs-specific exception class shared across transports.
Do not assume an unsuccessful scheduling request proves that nothing was stored: a response can be lost after the server accepts a request. Reconcile by name before retrying, and choose overwrite deliberately. Failure policies govern callback delivery, not retries of client management requests.
These Jobs methods do not accept an AbortSignal, timeout argument, or cancellation token. Rejecting a local wait does not cancel a job; use delete(name) to remove its future schedule.
4.13 - Dapr Cryptography JavaScript SDK
Encrypt and decrypt data using the Dapr JavaScript SDK
The Dapr JavaScript SDK lets Node.js applications encrypt and decrypt messages and files through a configured cryptography component. Use DaprClient.crypto with either HTTP or gRPC, passing data directly or working with Node.js streams.
These guides target @dapr/dapr version 3.19.0 or later. The underlying Cryptography API is alpha. Prefer gRPC for large payloads and production streaming: Dapr buffers HTTP cryptography output until the request is fully consumed.
The client implements encryption and decryption using the Dapr Crypto Scheme v1. It does not expose general-purpose signing, signature verification, hashing, or key-management methods. Provision keys through your component’s backing store; the application passes key references, not key material, to client.crypto.
4.13.1 - How to: Encrypt and decrypt data with the Dapr JavaScript SDK
Configure a cryptography component and encrypt and decrypt messages and files using the Dapr JavaScript SDK
Use DaprClient.crypto to encrypt and decrypt data without passing cryptographic keys to your application. This guide uses a local key for development, then shows how to work with buffers and files.
Run this command only for initial setup. Rerunning it replaces the key, preventing you from decrypting data encrypted with the previous key unless you retained a copy.
Create a separate components directory and save the following as components\crypto.yaml:
The path is resolved from the sidecar’s working directory. Run the commands below from your application directory; for other deployments, set the path to a directory accessible to the sidecar.
The component name, crypto-local, is the componentName used by the client. The key name, symmetric256, is the file name in the key directory. This example pairs a 256-bit symmetric key with A256KW key wrapping.
Local development only
The local storage component gives the sidecar access to raw key material. Restrict access to the key directory and never commit keys to source control. For production, consider a supported key vault component and provision keys using that provider’s tools. See the local storage component reference for supported key formats.
Encrypt and decrypt a message
Save the following as app.mjs:
import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"3500",communicationProtocol:CommunicationProtocolEnum.HTTP,});try{constplaintext=Buffer.from("A message to encrypt","utf8");constciphertext=awaitclient.crypto.encrypt(plaintext,{componentName:"crypto-local",keyName:"symmetric256",keyWrapAlgorithm:"A256KW",});constdecrypted=awaitclient.crypto.decrypt(ciphertext,{componentName:"crypto-local",});if(!decrypted.equals(plaintext)){thrownewError("Decrypted bytes do not match the original message");}console.log("Message round-trip succeeded");}finally{awaitclient.stop();}
Start the application with a sidecar that loads the component:
Passing data and options returns a Promise<Buffer> for both encryption and decryption. Encryption also accepts a string, encoded as UTF-8. Decryption uses the key reference embedded in the encrypted document by default, so this example does not need to supply keyName again.
To run the same example over gRPC, change communicationProtocol to CommunicationProtocolEnum.GRPC and daprPort to "50001".
Encrypt and decrypt files with streams
For files, pass only the options object to obtain a Node.js Duplex. Write plaintext into an encryption stream and read ciphertext from it; a decryption stream accepts ciphertext and emits plaintext.
Create a nonempty plaintext.txt in your application directory and save this example as files.mjs. It uses gRPC, the recommended protocol for large payloads and production streaming:
import{createReadStream,createWriteStream}from"node:fs";import{pipeline}from"node:stream/promises";import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"50001",communicationProtocol:CommunicationProtocolEnum.GRPC,});try{awaitpipeline(createReadStream("plaintext.txt"),awaitclient.crypto.encrypt({componentName:"crypto-local",keyName:"symmetric256",keyWrapAlgorithm:"A256KW",}),createWriteStream("ciphertext.out"),);awaitpipeline(createReadStream("ciphertext.out"),awaitclient.crypto.decrypt({componentName:"crypto-local"}),createWriteStream("plaintext.out"),);console.log("Encrypted ciphertext.out and decrypted plaintext.out");}finally{awaitclient.stop();}
Await each pipeline so failures propagate and encryption finishes before decryption starts. Use new streams for each operation. Do not combine encryption and decryption in one pipeline on runtimes affected by the concurrent cryptography limitation.
The stream overloads also work over HTTP, but the runtime buffers HTTP output until the entire input has arrived. A stream-shaped API does not remove that runtime memory cost.
Next steps
Read the client usage guidance for choosing ciphers, controlling embedded key references, preserving binary ciphertext, and handling errors. See the cryptography quickstart for additional examples.
4.13.2 - Cryptography client usage
Configure and use JavaScript cryptography operations, encryption options, and streams
Cryptography is available through DaprClient.crypto. This page describes @dapr/dapr version 3.19.0 or later, which supports both HTTP and gRPC. Both transports use the alpha Cryptography API.
Client lifetime and configuration
Reuse a long-lived DaprClient rather than creating one for each operation. Await outstanding operations and stream pipelines before calling await client.stop() during application shutdown.
HTTP is the default protocol and uses sidecar port "3500" by default. For gRPC, configure the protocol and its port explicitly:
Use CommunicationProtocolEnum.HTTP and the sidecar’s HTTP port for HTTP. Port options are strings. If you omit explicit host and port options, the SDK can resolve the selected protocol’s endpoint from DAPR_HTTP_ENDPOINT or DAPR_GRPC_ENDPOINT. The API token defaults to DAPR_API_TOKEN when it is not supplied explicitly. See the JavaScript client configuration for more information.
Choose an overload
The argument count selects whether an operation returns a stream or buffers its output:
Method
Input
Result
encrypt(data, options)
Buffer, ArrayBuffer, ArrayBufferView, or string
Promise<Buffer> containing ciphertext
decrypt(data, options)
Buffer, ArrayBuffer, or ArrayBufferView
Promise<Buffer> containing plaintext
encrypt(options)
Write plaintext to the returned stream
Promise<Duplex> emitting ciphertext
decrypt(options)
Write ciphertext to the returned stream
Promise<Duplex> emitting plaintext
An ArrayBufferView includes typed arrays such as Uint8Array and DataView. The SDK uses the view’s byte offset and byte length, not the entire backing buffer.
Encryption converts strings to UTF-8. Decryption expects binary input, not a string. To decrypt ciphertext stored as base64, decode it first:
This snippet assumes an existing client and a savedBase64 string previously produced with ciphertext.toString("base64"). Keep ciphertext as bytes unless you deliberately encode it; converting arbitrary ciphertext with .toString("utf8") corrupts it. Convert decrypted bytes to UTF-8 only if the original plaintext was UTF-8 text.
Encryption options
Pass the same encryption options with either overload:
Option
Required
Behavior
componentName
Yes
Name of the configured Dapr cryptography component, not its component type.
keyName
Yes
Key reference in the component’s backing store, optionally including a version where the provider supports it.
keyWrapAlgorithm
Yes
Algorithm used to wrap the data-encryption key. Must be compatible with the referenced key and component.
dataEncryptionCipher
No
"aes-gcm" (default) or "chacha20-poly1305" for encrypting the payload.
omitDecryptionKeyName
No
Defaults to false. Set to true to omit the key reference from the encrypted document; decryption must then supply keyName.
decryptionKeyName
No
Alternate key reference to embed in the document. Defaults to the encryption key reference and is ignored when omitDecryptionKeyName is true.
The SDK’s keyWrapAlgorithm type accepts "A256KW", "A128CBC", "A192CBC", "A256CBC", "RSA-OAEP-256", "AES", and "RSA". This list describes the SDK type, not a guarantee that every component, key, or runtime accepts every value. Choose a value supported by your provider; for example, the setup guide uses A256KW with a 256-bit symmetric key. The wrapping algorithm and payload cipher are separate settings.
TypeScript applications can import the request types from the package’s type module:
These request types are not exported from the package root in 3.19.0.
Decryption and key references
Decryption takes a required componentName and an optional keyName. The runtime reads the cipher and wrapped key information from the encrypted document; do not pass encryption options such as keyWrapAlgorithm to decrypt.
By default, the document contains the encryption key reference. An explicit decryption keyName overrides that embedded reference. The component must have access to the corresponding decryption key; overriding the name does not make an unrelated key valid.
To keep the key reference out of the document:
constciphertext=awaitclient.crypto.encrypt("A message to encrypt",{componentName:"crypto-local",keyName:"symmetric256",keyWrapAlgorithm:"A256KW",omitDecryptionKeyName:true,});constplaintext=awaitclient.crypto.decrypt(ciphertext,{componentName:"crypto-local",keyName:"symmetric256",});
Run this snippet with an existing client inside an async function or an ES module. Without an explicit decryption keyName, this document cannot be decrypted.
Use decryptionKeyName instead when the recipient knows the same key under a different reference, such as an alias or a key in another configured component:
constciphertext=awaitclient.crypto.encrypt("A message for a recipient",{componentName:"sender-crypto",keyName:"sender-key",keyWrapAlgorithm:"RSA",decryptionKeyName:"recipient-key",});constplaintext=awaitclient.crypto.decrypt(ciphertext,{componentName:"recipient-crypto",});
This example requires separately configured components and a matching RSA key pair: the sender must be able to wrap with the public key, and the recipient must be able to unwrap with the corresponding private key. decryptionKeyName only changes the embedded reference; it does not create, copy, or rotate keys.
Streams and memory use
Calling encrypt(options) or decrypt(options) resolves to a Duplex, not the completed operation. Its writable side receives input; its readable side emits output. Consume the output while supplying input and end the writable side when input is complete. Prefer await pipeline(source, cryptoStream, destination) from node:stream/promises to propagate errors and close participating streams.
The file example demonstrates this pattern. Stream in binary mode when handling ciphertext. Do not set a text encoding on a ciphertext source or treat encrypted output as text.
The data overloads accumulate the complete result in memory, even when gRPC streams internally. Use them only when input and output fit comfortably in memory.
HTTP: The SDK supports both overloads and sends raw bytes, but Dapr buffers cryptography output until it has consumed the request. Do not wait for output before finishing input. Prefer gRPC for large payloads and production streaming.
gRPC: Uses bidirectional streaming and splits writes into 2 KiB request chunks. The crypto API has no configurable chunkSize. The current stream implementation can queue input and output internally; do not assume that using streams guarantees bounded memory at arbitrary producer or consumer speeds.
Empty input: HTTP supports empty plaintext with either overload. In the 3.19.0 gRPC implementation, options are sent with the first nonempty input chunk, so an empty input does not send an initial options frame. Use HTTP for empty plaintext rather than relying on gRPC empty-input behavior.
Ciphertext produced over HTTP can be decrypted over gRPC and vice versa, provided the component can access the correct key. The document uses Dapr’s encryption format, not a bare AES or RSA ciphertext.
Cancellation and errors
EncryptRequest and DecryptRequest have no AbortSignal, timeout, or cancellation-token option. Do not assume cancellation support from other building blocks applies to cryptography. Destroying an HTTP crypto Duplex aborts its underlying request; the gRPC crypto overloads do not expose an equivalent request-cancellation option. A timeout implemented by racing promises alone does not cancel the operation.
Await buffer operations and handle their rejected promises. For streams, errors can occur after the promise has returned the Duplex, so awaiting client.crypto.encrypt(options) alone is not sufficient. Await the pipeline and handle its rejection.
Missing components, missing or incompatible keys, unsupported algorithms, malformed ciphertext, and authentication failures during decryption cause operations to fail rather than returning an empty successful result. HTTP runtime errors are Error instances whose message contains JSON with status, error, and error_msg; network and stream errors can have different shapes. gRPC errors come from the Connect transport and should not be interpreted as HTTP status codes.
A failed or cancelled file pipeline may leave a partial output file. Remove or otherwise handle that file, and do not treat decrypted output as complete until the whole operation succeeds.
Concurrent operations
Runtimes affected by dapr/kit#170 can fail when decryption overlaps other cryptography operations. On affected sidecars, serialize decryption with all other cryptography work, including encryption, across callers sharing that sidecar. Serializing only within one function or one client does not protect against other callers.
In particular, finish encryption before starting decryption rather than chaining them in one pipeline or using Promise.all for round-trips. Check the issue and your runtime version before enabling overlapping operations.
Store and retrieve binary files using the Dapr JavaScript SDK
The Dapr JavaScript SDK lets Node.js applications store, retrieve, stream, and delete binary files in a configured Dapr binary store component. Use DaprClient.binaryStore with either HTTP or gRPC to stream large files or work with bytes already held in memory.
Binary Store requires Dapr runtime 1.19 or later and JavaScript SDK 3.19.0 or later. The underlying Binary Store API is alpha.
4.14.1 - How to: Manage binary files with the Dapr JavaScript SDK
Learn how to store, retrieve, stream, and delete binary files using the Dapr JavaScript SDK
Use DaprClient.binaryStore to store and retrieve files through a Dapr binary store component. The client supports binary streams so you can transfer large files without loading the entire file into your application’s memory. This guide covers component configuration, uploads, downloads, overwrites, and deletes.
This component stores files in the sidecar’s memory, with a per-file limit of 4 MiB and a combined capacity of 512 MiB. Files are lost when the sidecar stops and are not shared across sidecars. Use it for local development and testing, not durable storage. See the in-memory component reference for capacity settings.
The component’s metadata.name, filestore, is the store name passed to every client operation. It is not the component’s type or the YAML file name.
Upload and download a file
Place a report.pdf file no larger than 4 MiB in your application’s working directory. Save the following as app.mjs:
import{createReadStream,createWriteStream}from"node:fs";import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"3500",communicationProtocol:CommunicationProtocolEnum.HTTP,});conststoreName="filestore";constfileName="uploads/report.pdf";try{awaitclient.binaryStore.setBinaryFile(storeName,fileName,createReadStream("report.pdf"),);awaitclient.binaryStore.getBinaryFile(storeName,fileName,createWriteStream("downloaded-report.pdf"),);console.log("Downloaded report.pdf to downloaded-report.pdf");}finally{awaitclient.stop();}
Start the application with a Dapr sidecar, loading the component from components:
The example uploads report.pdf under the store-relative name uploads/report.pdf and downloads it to downloaded-report.pdf. getBinaryFile waits for the destination stream to finish and ends it on success.
To use gRPC instead, change communicationProtocol to CommunicationProtocolEnum.GRPC and daprPort to "50001". All binary store methods work with either protocol.
The examples below reuse client, storeName, and fileName. Add them inside the try block, after the download and before the client is stopped. Run the delete example last. If you rerun the application against a sidecar that still holds the file, delete it first or explicitly enable overwriting.
Replace an existing file
Uploads do not overwrite existing files by default. To replace a file, pass overwrite: true in the options object:
Uploads use a maximum chunk size of 32 KiB by default. Set chunkSize to another positive safe integer, in bytes, to tune upload chunking. This does not change the component’s per-file or total-capacity limits.
File names can include nested paths such as uploads/report.pdf. Do not use a leading or trailing slash, empty path segments, . or .. segments, or the characters \, *, ?, [, ], and #. Pass the name as plain text, not a URL or a pre-encoded value; the HTTP client URL-encodes it.
Work with in-memory content
For small files already held in memory, upload a Uint8Array or Node.js Buffer. Use getBinaryFileBytes to retrieve the complete file as a Buffer:
The SDK transfers raw bytes without JSON serialization or text encoding. Empty files are supported; for example, upload Buffer.alloc(0) to create an empty file.
getBinaryFileBytes buffers the entire download in memory. Prefer getBinaryFile or getBinaryFileChunks for large files.
Read a file in chunks
getBinaryFileChunks returns an AsyncIterable<Buffer>. Consume it with for await...of to process the bytes in order without buffering the entire file:
A missing file causes downloads and deletes to fail rather than returning empty content or silently succeeding.
Next steps
Read the client usage guidance for cancellation, stream ownership, client configuration, and error handling.
4.14.2 - Binary Store client usage
Essential guidance for configuring and using the JavaScript Binary Store client
Binary Store is available through DaprClient.binaryStore in JavaScript SDK 3.19.0 or later and requires Dapr runtime 1.19 or later. Both HTTP and gRPC use the alpha Binary Store API.
Client lifetime and configuration
Reuse a long-lived DaprClient rather than creating a client for each operation. Await outstanding operations before calling await client.stop() during application shutdown.
The default protocol is HTTP. To explicitly configure a gRPC connection:
Use CommunicationProtocolEnum.HTTP and the sidecar’s HTTP port (by default "3500") for HTTP. Supply port values as strings.
When you omit explicit host and port options, the SDK can use DAPR_HTTP_ENDPOINT or DAPR_GRPC_ENDPOINT for the selected protocol. Otherwise, it uses the configured host and port, falling back to 127.0.0.1 and DAPR_HTTP_PORT or DAPR_GRPC_PORT (defaults: 3500 and 50001). The API token defaults to DAPR_API_TOKEN if daprApiToken is not supplied. Binary store requests use the same authentication settings as other client operations.
Choose an operation
All methods take a component name and a store-relative file name. The optional options object is the last argument.
TypeScript applications can import IClientBinaryStore, BinaryStoreOptions, and BinaryStoreSetOptions as types from @dapr/dapr. BinaryStoreOptions contains signal?: AbortSignal. Uploads accept BinaryStoreSetOptions, which also provides overwrite?: boolean and chunkSize?: number.
Streaming and memory use
Use a binary Readable, such as createReadStream, for large uploads. The stream must emit Uint8Array or Buffer chunks, not strings. Do not set a text encoding on the source stream. Once initial validation succeeds, the client consumes the source from its current position and destroys it when the upload finishes or fails. If validation fails or the signal is already aborted before the transfer starts, the caller remains responsible for closing the source. Create a new source stream for each attempt.
The upload chunk size defaults to 32 KiB. A custom chunkSize must be a positive safe integer. Smaller chunks do not bypass the component’s file-size or total-capacity limits.
getBinaryFile uses a stream pipeline that respects destination backpressure. It ends the destination on success and destroys it on failure. Do not reuse that destination for another download. A failed download may leave a partial local file; your application should remove or otherwise handle it.
getBinaryFileChunks lets you process each Buffer as it arrives. Consume it with for await...of; breaking out of the loop closes the response stream. Download chunk sizes are determined by the runtime and transport, not by the upload’s chunkSize.
Use getBinaryFileBytes only when the entire file fits comfortably in memory. It accumulates all chunks and concatenates them into a Buffer, so peak memory use can exceed the size of the file.
Cancellation
Every binary store operation accepts signal in its options object. Pass an AbortSignal to cancel work when the caller disconnects or an application deadline expires. For example, add a 30-second deadline to a download:
This snippet assumes an existing client. Keep the import at module scope and run the remaining code inside an async function or an ES module. Cancellation rejects the operation and can destroy the associated streams. Do not assume every protocol reports cancellation using the same error class.
For chunk enumeration, pass the signal to getBinaryFileChunks itself. This example creates a fresh 30-second timeout signal:
Await each operation and handle failures at your application’s error boundary. For getBinaryFileChunks, errors surface while iterating, so error handling must surround the for await...of loop.
Runtime failures reject rather than returning success-shaped defaults. Examples include an upload to an existing file without overwrite: true, downloading or deleting a missing file, a missing component, and exceeding component capacity.
HTTP: Runtime errors are JavaScript Error instances whose message is a JSON string containing status (HTTP status code), error (status text), and error_msg (runtime response body). Transport and stream errors can have different shapes; do not assume every error message is JSON.
gRPC: Runtime errors preserve the ConnectError codes from @connectrpc/connect. Do not handle them as HTTP status codes.
Invalid arguments: Empty store or file names, invalid file path segments or characters, unsupported content types, or a destination that is not a Writable result in a TypeError. Invalid upload chunk sizes result in a RangeError. Non-binary source chunks are rejected during the transfer; the transport may wrap the underlying TypeError.
Index, retrieve, and query documents using the Dapr JavaScript SDK
The Dapr JavaScript SDK lets Node.js applications manage indexes and index, retrieve, delete, and query JSON documents in a configured Dapr search component. Use DaprClient.search with either HTTP or gRPC for full-text search, filters, sorting, highlighting, and pagination.
Search requires Dapr runtime 1.19 or later and JavaScript SDK 3.19.0 or later. The underlying Search API is alpha. Available query features depend on the search component.
4.15.1 - How to: Index and search documents with the Dapr JavaScript SDK
Learn how to configure a search component and manage and query documents using the Dapr JavaScript SDK
Use DaprClient.search to manage indexes and search JSON documents through a Dapr search component. This guide uses Meilisearch and covers index creation, document writes, full-text search, filtering, sorting, pagination, retrieval, and deletion. All examples work over HTTP or gRPC.
This configuration uses a plain-text key for local development. Use a secret store reference for production credentials.
The component’s metadata.name, mysearch, is the store name passed to every client operation. It is not the component type or the YAML file name. See the Meilisearch component reference for settings and provider restrictions.
Create an index and search documents
Save the following as app.mjs:
import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"3500",communicationProtocol:CommunicationProtocolEnum.HTTP,});conststoreName="mysearch";constindexName="articles";constwaitOptions={mode:"waitForCompletion",waitTimeout:"10s",onWaitTimeout:"failRequest",};try{awaitclient.search.createIndex(storeName,indexName,{metadata:{filterableAttributes:"category,price",sortableAttributes:"price",searchableAttributes:"title",},});constindexed=awaitclient.search.indexDocuments(storeName,indexName,[{id:"doc-1",content:{title:"Getting started with Dapr",category:"guide",price:10},metadata:{author:"alice"},},{id:"doc-2",content:{title:"Dapr pub/sub deep dive",category:"guide",price:25},},{id:"doc-3",content:{title:"Search API reference",category:"reference",price:30},},],waitOptions,);if(indexed.failedItems.length>0){console.error("Documents not indexed:",indexed.failedItems);thrownewError("Document indexing had item failures");}console.log("Write acknowledgement:",indexed.ack);constquery={text:"dapr",filter:{category:{$eq:"guide"}},sort:[{field:"price",order:"asc"}],highlightFields:["title"],includeContent:true,topK:1,};letcontinuationToken;do{constpage=awaitclient.search.search(storeName,indexName,{...query,continuationToken,});for(consthitofpage.hits){console.log(hit.document.id,hit.document.content,hit.score,hit.highlights);}continuationToken=page.continuationToken;}while(continuationToken);}finally{awaitclient.stop();}
Start the application with a Dapr sidecar, loading the component from components:
To use gRPC instead, change communicationProtocol to CommunicationProtocolEnum.GRPC and daprPort to "50001". No other search code changes are required.
The example waits for indexing to complete before searching, then returns doc-1 and doc-2 in ascending price order across two pages. Meilisearch highlights matches with <em> tags. Scores and total-hit estimates are provider dependent; do not depend on a particular score value.
Creating an existing index fails with ALREADY_EXISTS and does not update its settings. Before rerunning this application against the same Meilisearch instance, delete the example index using deleteIndex below, or choose a new index name. Unlike an in-memory store, Meilisearch can retain documents across sidecar restarts.
The following snippets reuse client, storeName, indexName, and waitOptions. Add them inside the try block after the search loop and before the client is stopped. Run the deletion examples last.
documentCount is an approximate count, or 0 if the provider cannot supply one efficiently. For Meilisearch, properties includes primaryKey and the configured attribute settings. Meilisearch requires filter and sort attributes to be declared at index creation; the component adds id as a sortable tie-breaker for pagination.
Retrieve and update documents
constdocuments=awaitclient.search.getDocuments(storeName,indexName,["doc-2","missing","doc-1"],{includeContent:true},);console.log(documents);constupdated=awaitclient.search.indexDocuments(storeName,indexName,[{id:"doc-1",content:{title:"Updated Dapr guide",category:"guide",price:12},metadata:{author:"alice",revision:"2"},},],waitOptions,);if(updated.failedItems.length>0){console.error("Documents not updated:",updated.failedItems);thrownewError("Document update had item failures");}
Retrieval returns found documents in request order and omits missing IDs. Without includeContent: true, it returns IDs and stored metadata, with content undefined. Indexing uses keyed upserts: submit an existing ID to update that document. Supply the complete intended content and metadata rather than assuming a partial-patch operation.
Pass ordinary JSON objects as content; the SDK serializes them and handles transport encoding, including base64 for HTTP. Do not base64-encode or stringify content yourself. Stored document metadata is opaque and is not searchable or filterable. Fields to search, filter, or sort must be in content.
For Meilisearch, document IDs must be 1 to 511 bytes of ASCII letters, digits, hyphens, and underscores. Content must not contain the reserved top-level keys id, daprMetadata, daprPayload, or keys beginning with _. Invalid content is reported in failedItems, while valid documents in the batch can still be indexed.
Shape search results
Restrict full-text search to selected fields and return only the content fields you need:
returnFields alone does not request content; set includeContent: true as well. Omit the query to match all documents, or specify only a filter to browse a subset:
Each call returns one page, not necessarily every match. Follow continuationToken as in the complete example. Keep all query fields, including topK, unchanged between pages; only change the token. Tokens are opaque: do not decode, edit, or URL-encode them.
Use a provider-native query
Use native instead of text for provider-specific search features:
text and native are mutually exclusive. For Meilisearch, native queries must not set offset, limit, page, hitsPerPage, or sort; use the portable topK, continuationToken, and sort fields instead. A native filter is ANDed with the portable filter.
Deleting missing document IDs is not an error. Document deletion uses the same write acknowledgement options as indexing, but returns the acknowledgement string directly. Deleting an index removes the index and all of its documents.
Essential guidance for configuring and using the JavaScript Search client
Search is available through DaprClient.search in JavaScript SDK 3.19.0 or later and requires Dapr runtime 1.19 or later. HTTP and gRPC use the alpha Search API and expose the same methods and JavaScript result shapes.
Client lifetime and configuration
Reuse a long-lived DaprClient. Await outstanding operations before calling await client.stop() during application shutdown.
HTTP is the default protocol. To explicitly configure gRPC:
For HTTP, use CommunicationProtocolEnum.HTTP and the sidecar’s HTTP port (default "3500"). Port values are strings. When host and port are not explicitly supplied, the SDK can use DAPR_HTTP_ENDPOINT or DAPR_GRPC_ENDPOINT for the selected protocol, or fall back to the host and port defaults and DAPR_HTTP_PORT or DAPR_GRPC_PORT. The API token defaults to DAPR_API_TOKEN. See client configuration.
Choose an operation
storeName is the search component’s metadata.name. All methods except listIndexes also take an index name. The optional options object is the last argument.
TypeScript applications can import IClientSearch, SearchOptions, IndexingOptions, SearchDocument, SearchIndex, SearchQuery, SearchResult, IndexAck, and IndexDocumentsResult as types from @dapr/dapr.
Every operation accepts SearchOptions: metadata?: Readonly<Record<string, string>> and signal?: AbortSignal. This metadata is component-specific request metadata, separate from stored document metadata. For example, createIndex uses it for provider-specific index settings. The SDK handles HTTP body or query-string placement and gRPC request fields.
indexDocuments and deleteDocuments accept IndexingOptions, which extends those options with write acknowledgement controls. getDocuments also accepts includeContent?: boolean.
Document content and TypeScript types
SearchDocument<T> contains id: string, optional content: T, and optional string-map metadata. Content must serialize to a JSON object for indexing. The SDK uses JSON serialization independently of the application’s custom DaprClient serializer, converts content to UTF-8 bytes, and decodes returned content automatically. Do not pass pre-encoded base64 or JSON text as content.
Returned content is undefined unless requested with includeContent: true on getDocuments or on the search query. Stored metadata defaults to an empty object when absent. It is returned unchanged and is never indexed, searched, or filtered.
Generics describe the returned content at compile time; they do not validate documents at runtime. Content defaults to unknown when a type is not supplied. In TypeScript, annotate reusable option objects to retain their string-literal types:
importtype{IndexingOptions,SearchDocument,SearchQuery}from"@dapr/dapr";typeArticle={title: string;category: string;price: number};constdocuments: SearchDocument<Article>[]=[{id:"doc-1",content:{title:"Dapr guide",category:"guide",price: 10}},];constwaitOptions: IndexingOptions={mode:"waitForCompletion",waitTimeout:"10s",onWaitTimeout:"failRequest",};constquery: SearchQuery={text:"dapr",includeContent: true,returnFields:["title","price"],};constindexed=awaitclient.search.indexDocuments(storeName,indexName,documents,waitOptions);if(indexed.failedItems.length>0){console.error("Documents not indexed:",indexed.failedItems);thrownewError("Document indexing had item failures");}constresult=awaitclient.search.search<Pick<Article,"title"|"price">>(storeName,indexName,query,);for(consthitofresult.hits){console.log(hit.document.content?.title);}
This snippet assumes an existing client, storeName, and indexName. Use a content type that reflects the selected returnFields, not the complete stored document type, when projecting fields.
Write acknowledgements and partial failures
Indexing documents and deleting documents can be asynchronous. IndexAck is "queued" or "completed"; these are SDK strings, not the protobuf enum names used by raw HTTP requests.
Options
Behavior
Omitted, or mode: "returnOnAcceptance"
Return when the provider accepts the write. "queued" does not mean the documents are searchable or deleted yet. A provider can return "completed" if work is already finished.
mode: "waitForCompletion"
Wait for completion up to waitTimeout. Requires both a positive protobuf duration, such as "10s" or "0.250s", and an explicit onWaitTimeout.
onWaitTimeout: "continueAsync"
On wait timeout, return "queued" and let provider-side work continue. Requires a provider that supports queued acknowledgement.
onWaitTimeout: "failRequest"
On wait timeout, reject with DEADLINE_EXCEEDED. Provider-side work may still complete.
Do not supply waitTimeout or onWaitTimeout without mode: "waitForCompletion". Keep waitTimeout shorter than the request deadline. If a component resiliency timeout is configured, leave a margin of at least 10% of that timeout and at least 100 ms, as described in the Search API overview.
indexDocuments resolves to { ack, failedItems }. Always inspect failedItems, even when the promise resolves and ack is "completed". Each failure contains id, numeric errorCode (a canonical non-OK google.rpc.Code), errorMessage, and details. For example, non-object content can produce an item failure with code 3 (INVALID_ARGUMENT) while valid documents in the same batch are indexed.
Only failures known at the acknowledgement boundary are returned. Queued work can fail later, and this API does not provide an operation handle or a method to retrieve its eventual outcome. Use completion mode when subsequent operations depend on write visibility. deleteDocuments returns the acknowledgement string directly, not { ack }.
Document IDs must be non-empty and unique within a write request. Duplicate IDs reject the request rather than producing partial item failures. Upserting the same IDs allows idempotent retries, but do not assume a timeout, cancellation, or failed wait means the provider rolled back the write.
Query options
Pass SearchQuery directly as the third argument of client.search.search, not inside a { query: ... } wrapper.
Field
Behavior
text
Portable full-text search string. Mutually exclusive with native.
native
Provider-native JSON query object. Mutually exclusive with text.
Page size. Omitted or 0 uses the provider default. Must be an integer from 0 to 4294967295; providers can impose smaller limits.
continuationToken
Opaque token from the previous page. Pass it unchanged with the same query shape.
includeContent
Defaults to false. Set to true to return document content.
returnFields
Content fields to project. Does not implicitly enable includeContent.
searchFields
Fields to search with the portable text query.
sort
Ordered { field, order?: "asc" | "desc" } clauses. Omitted order means ascending.
highlightFields
Fields for which to return highlighted fragments.
Omitting both text and native, or omitting the query entirely, matches all documents subject to filter. A field assigned directly to a value in a filter is an equality test; conditions in the same object are ANDed. See the portable filter language.
Provider capabilities determine supported query options and field restrictions. Meilisearch requires filterable and sortable attributes to be declared at index creation. Native query syntax is provider specific and is not portable between components.
Results and pagination
SearchResult<T> has the following fields:
Field
Meaning
hits
Array of { document: SearchDocument<T>, score: number, highlights: Record<string, string> }. Empty when there are no matches.
totalHits
Optional best-effort count. Undefined when unavailable, not necessarily 0.
totalHitsRelation
"exact", "lowerBound", "estimate", or "unspecified". Describes the accuracy of totalHits.
continuationToken
Optional token for the next page. Stop paginating when no token is returned.
Scores are provider-specific, unnormalized values. Compare them only within the same result set. Highlight fragments are provider-generated strings, not a substitute for content; handle them appropriately before rendering in an application.
For each subsequent page, copy the original query and change only continuationToken. Changing text or native queries, page size, filters, sort, or field options invalidates the token. If a provider cursor expires, the runtime reports FAILED_PRECONDITION with reason SEARCH_CONTINUATION_EXPIRED; start a new query rather than editing the token.
Unlike raw HTTP responses, the SDK returns documentCount and totalHits as JavaScript numbers. Values beyond Number.MAX_SAFE_INTEGER reject with RangeError rather than silently losing precision. SearchIndex contains index, documentCount, and provider-specific string-map properties.
Cancellation
Every search method accepts an AbortSignal in its final options argument. For example, cancel a search after 30 seconds:
This snippet assumes an existing client and index. For writes, include signal alongside mode, waitTimeout, and onWaitTimeout in the same options object. An already-aborted signal rejects without sending the search operation. Cancellation is distinct from the provider’s waitTimeout and does not guarantee cancellation of provider-side writes. Error shapes can differ by protocol.
Errors
Await each operation and handle rejected promises at your application’s error boundary, in addition to checking resolved indexing results for failedItems.
HTTP: Runtime failures are JavaScript Error instances whose message is a JSON string containing status (HTTP status), error (status text), and error_msg (runtime response body). Transport, cancellation, and local validation failures can have different shapes; do not assume every error message is JSON.
gRPC: Runtime failures preserve ConnectError codes from @connectrpc/connect, not HTTP status codes.
Invalid arguments: Empty store, index, or document IDs, store or index names equal to . or .., non-string metadata values, conflicting text and native, or invalid option types reject locally. Invalid topK values and non-positive wait durations are rejected; invalid protobuf duration syntax also rejects. Provider-specific validation still happens at the runtime or component.
Creating an existing index fails with ALREADY_EXISTS; missing stores or indexes and unsupported queries also reject. Missing IDs in getDocuments are omitted, and deleting missing document IDs is not an error.
Per-item details are protobuf JSON objects over HTTP. Over gRPC, each detail is represented as { "@type": typeUrl, value: base64ProtobufBytes }, because provider-specific schemas might not be available to decode it. Do not assume identical detail payloads across protocols.
Store embeddings and query similar vectors using the Dapr JavaScript SDK
The Dapr JavaScript SDK lets Node.js applications manage collections, store precomputed dense vectors, and run similarity searches through a configured Dapr vector store component. Use DaprClient.vector with either HTTP or gRPC.
Vector requires JavaScript SDK 3.19.0 or later and a Vector-capable Dapr runtime from the 1.19 release line or later.
The SDK accepts embeddings you generate elsewhere; it does not generate embeddings from text, images, or payloads. Records can also carry opaque payload bytes and structured, filterable metadata.
To get started, follow the Vector how-to guide. See the client usage guidance for method signatures, indexing behavior, query semantics, cancellation, and errors.
4.16.1 - How to: Store and query vectors with the Dapr JavaScript SDK
Learn how to manage collections, store embeddings, and query similar vectors using the Dapr JavaScript SDK
Use DaprClient.vector to store precomputed embeddings and find similar records through a Dapr vector store component. This guide covers collection configuration, upserts, retrieval, similarity queries, batch queries, and deletes.
This component stores collections and records in the sidecar’s memory. Data is lost when the sidecar stops and is not shared across sidecars. Use it for local development and testing, not durable storage.
The component’s metadata.name, vectorstore, is the store name passed to every client operation. It is not the component’s type or the YAML file name. A collection is a separate, named group of records within that store.
Create a collection and query vectors
Save the following as app.mjs:
import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"3500",communicationProtocol:CommunicationProtocolEnum.HTTP,});conststoreName="vectorstore";constcollection="documents";constwriteOptions={mode:"waitForCompletion",waitTimeout:"10s",onWaitTimeout:"failRequest",};try{awaitclient.vector.createCollection(storeName,collection,{dimensions:3,metric:"cosine",});constwrite=awaitclient.vector.upsertVectors(storeName,collection,[{id:"doc-1",values:[1,0,0],payload:Buffer.from("Introduction to Dapr"),metadata:{category:"guide",details:{language:"en"}},},{id:"doc-2",values:[0.8,0.6,0],payload:Buffer.from("Building applications with Dapr"),metadata:{category:"guide",details:{language:"en"}},},{id:"doc-3",values:[0,1,0],metadata:{category:"reference",details:{language:"en"}},},],writeOptions,);if(write.failedItems.length>0){console.error("Vector upsert failures:",write.failedItems);thrownewError("Not all vector records were stored");}if(write.ack!=="completed"){thrownewError("Vector indexing has not completed");}constresult=awaitclient.vector.queryVectors(storeName,collection,{vector:[1,0,0],topK:2,includePayload:true,filter:{category:{$eq:"guide"}},});console.log("Metric:",result.metric);for(constmatchofresult.matches){console.log(match.record.id,match.score,match.record.payload===undefined?"(no payload)":Buffer.from(match.record.payload).toString("utf8"),);}}finally{awaitclient.stop();}
Start the application with a Dapr sidecar, loading the component from components:
The example creates a three-dimensional cosine collection, waits for indexing, and finds the two closest guide records. With the in-memory component, doc-1 has a score of approximately 1 and doc-2 approximately 0.8. These illustrative vectors are supplied directly; the SDK does not generate embeddings.
To use gRPC instead, change communicationProtocol to CommunicationProtocolEnum.GRPC and daprPort to "50001". All vector methods work with either protocol.
The examples below reuse client, storeName, collection, and writeOptions. Add them inside the try block, after the query and before the client is stopped. Run the delete examples last. Creating a collection that already exists fails; if you rerun against the same sidecar, reuse the existing collection or explicitly delete it first.
getCollection returns the collection name, dimensions, effective metric, approximate record count, and component-specific properties. The count is 0 when unavailable.
getVectors omits missing IDs and retains request order for records it finds. It always retrieves payloads and record metadata, but returns values: [] unless includeValues is true. Payloads are returned as Uint8Array, not automatically decoded text or JSON.
Query by an existing record and filter metadata
Instead of supplying a vector, use byId to search using a stored record’s vector:
Supply exactly one of vector or byId. A missing source record causes a single query to fail. Whether a byId query includes the source record among its matches depends on the component.
Filters apply to record metadata, not payload bytes. The portable filter DSL supports $eq, $ne, $gt, $gte, $lt, $lte, $in, $nin, $exists, and the boolean operators $and, $or, and $not. Use dotted paths for nested metadata fields.
For cosine and dot product, higher scores are better; for Euclidean distance, lower scores are better. scoreThreshold is inclusive on the metric’s raw scale: a minimum score for cosine or dot product, or a maximum distance for Euclidean. It is not a normalized probability.
Run multiple queries
batchQueryVectors runs queries against the same store and collection and returns one result per query in request order:
An individual runtime or provider failure stays in that query’s result slot. Request-wide failures reject the whole call. Do not treat a resolved batch promise as proof that every query succeeded.
Deleting missing record IDs is not an error. Deleting a collection removes the collection and its records; operations against a missing collection fail.
Next steps
Read the client usage guidance for indexing acknowledgements, record replacement, query defaults, cancellation, and error handling.
4.16.2 - Vector client usage
Essential guidance for configuring and using the JavaScript Vector client
Vector is available through DaprClient.vector in JavaScript SDK 3.19.0 or later. Both HTTP and gRPC use the alpha Vector API and require a Vector-capable Dapr runtime from the 1.19 release line or later. Installing the JavaScript SDK alone does not enable the Vector API.
Client lifetime and configuration
Reuse a long-lived DaprClient rather than creating a client for each operation. Await outstanding operations before calling await client.stop() during application shutdown.
The default protocol is HTTP. To explicitly configure a gRPC connection:
Use CommunicationProtocolEnum.HTTP and the sidecar’s HTTP port (by default "3500") for HTTP. Supply port values as strings.
When you omit explicit host and port options, the SDK can use DAPR_HTTP_ENDPOINT or DAPR_GRPC_ENDPOINT for the selected protocol. Otherwise, it uses the configured host and port, falling back to 127.0.0.1 and DAPR_HTTP_PORT or DAPR_GRPC_PORT (defaults: 3500 and 50001). The API token defaults to DAPR_API_TOKEN if daprApiToken is not supplied. Vector requests use the same authentication settings as other client operations.
Choose an operation
Every method takes a component name. Collection-bound operations also take a collection name. The options object is the last argument.
TypeScript applications can import these result types, IClientVector, VectorRecord, VectorQuery, VectorDistanceMetric, VectorOptions, VectorCreateCollectionOptions, VectorIndexingOptions, VectorError, and VectorErrorDetail as types from @dapr/dapr.
VectorOptions provides metadata?: Readonly<Record<string, string>> and signal?: AbortSignal. Request metadata is component-specific and string-valued; it is separate from the structured, filterable metadata attached to each record.
Collections and records
Creating a collection requires dimensions, a positive integer no greater than 4294967295. Supported metric names are "cosine", "dotProduct", and "euclidean". Omitting metric selects the component’s documented default; a metric the component does not support is rejected by the runtime as an invalid argument. The metadata passed to createCollection carries component-specific collection settings, such as index parameters. getCollection returns the collection’s dimensions, its effective metric, an approximate recordCount (which some components report as 0), and component-specific properties. Component capabilities and limits can be narrower than the SDK’s accepted inputs.
The alpha API covers dense vectors only. Sparse or named vectors, hybrid fusion, and result pagination are not available.
A VectorRecord contains a nonempty string id, a values array of numbers, optional payload bytes, and optional structured JSON metadata. IDs are scoped to a collection. Upserting an existing ID replaces its record rather than merging individual fields; supply all values, payload, and metadata you want to retain.
Provide dense embeddings as ordinary number arrays, not Float32Array. Coordinates must be finite and within the finite float32 range; float32 serialization can round them. Vector lengths must match the collection’s dimensions, and components typically reject zero-magnitude vectors for cosine similarity. Dimension mismatches and other runtime record validation failures can appear in failedItems rather than rejecting the upsert.
Payloads accept Uint8Array or Node.js Buffer and are returned as Uint8Array. The SDK does not apply a custom serializer or generate embeddings from payloads. Encode and decode application content explicitly. Record metadata and query filters must be JSON objects.
getVectors always retrieves payloads and metadata. Set { includeValues: true } to retrieve embeddings; otherwise values is an empty array. Missing IDs are omitted, and found records retain request order. Deleting missing IDs succeeds.
Indexing acknowledgements and partial failures
upsertVectors and deleteVectors accept VectorIndexingOptions. The default mode, "returnOnAcceptance", allows a write to return before indexing completes. An acknowledgement of "queued" means work was accepted, not that it succeeded or is queryable. Queued work can still fail later; this API does not expose its eventual result.
For a read-after-write flow, explicitly wait for completion:
constwrite=awaitclient.vector.upsertVectors("vectorstore","documents",[{id:"doc-1",values:[1,0,0],metadata:{category:"guide"}}],{mode:"waitForCompletion",waitTimeout:"10s",onWaitTimeout:"failRequest",},);if(write.failedItems.length>0){console.error("Failed records:",write.failedItems);thrownewError("Vector upsert had partial failures");}if(write.ack!=="completed"){thrownewError("Vector indexing has not completed");}
This snippet assumes an existing client and collection. Run it inside an async function or an ES module.
Waiting requires a positive protobuf duration string, such as "10s" or "0.250s", and an explicit timeout action. waitTimeout must be shorter than the remaining request deadline. When the store has a resiliency timeout policy, it must be shorter than that timeout by at least a tenth of the timeout and by no less than 100 milliseconds.
onWaitTimeout
Behavior
"continueAsync"
Return a "queued" acknowledgement if the wait expires; work can continue asynchronously. Invalid when the component has no queued acknowledgement.
"failRequest"
Fail the request with a deadline-exceeded error (HTTP 504, gRPC DeadlineExceeded) if the wait expires. Provider-side work is not guaranteed to be cancelled.
Do not supply waitTimeout or onWaitTimeout with "returnOnAcceptance" or without explicitly selecting "waitForCompletion"; the SDK rejects these combinations before sending the request.
upsertVectors returns { ack, failedItems }. Inspect failedItems even when the promise resolves and ack is "completed": completion does not mean every record succeeded. Each failed item contains its id and a structured error. Failures reported are those known at the acknowledgement boundary; a queued acknowledgement is not a final per-record report.
deleteVectors returns only "queued" or "completed". Empty upsert and delete arrays are supported. Duplicate IDs in an upsert request are rejected by the runtime; do not rely on last-write-wins ordering within a batch.
Queries, scores, and inclusion flags
A VectorQuery requires exactly one source: vector: number[] or byId: string. A vector array must be nonempty; the runtime rejects an empty array as an invalid argument. The remaining fields are optional:
Field
Behavior
topK
Nonnegative uint32. Omitted or 0 uses the component’s default match count.
filter
Portable filter DSL applied to record metadata, including dotted paths. Payloads are not filterable.
includeValues
Defaults to false; omitted embeddings are returned as values: [].
includePayload
Defaults to false; omitted payloads are returned as undefined.
metric
Omission uses the collection’s metric. Unsupported overrides fail explicitly.
scoreThreshold
Finite, inclusive cutoff on the metric’s unnormalized scale.
Record metadata is returned with query matches independently of the values and payload flags. The result is { matches, metric }; each match contains { record, score }, and metric identifies the effective metric even when the query omitted it.
Cosine and dot product scores are higher-is-better; Euclidean distances are lower-is-better. Thresholds are minimum scores for cosine and dot product, and maximum distances for Euclidean. Do not treat scores as normalized probabilities or compare scores across different metrics as though they shared a scale. Whether a byId query returns the source record itself is component-dependent.
All queries in batchQueryVectors target the same store and collection, with their own query fields. Results preserve request order and contain exactly one of { response: VectorQueryResult } or { error: VectorError }. An empty query array returns an empty result array. Inspect every slot; individual runtime/provider failures do not reject the entire batch, but request-wide failures do.
Cancellation
Every vector operation accepts signal in its options object. Pass an AbortSignal to cancel a request when an application deadline expires or a caller disconnects:
This snippet assumes an existing client and collection. Run it inside an async function or an ES module. Cancellation rejects the request but does not guarantee cancellation or rollback of provider-side indexing work. Do not assume both protocols report cancellation with the same error class.
Errors
Await each operation and handle request failures at your application’s error boundary. Check both upsertVectors().failedItems and each batchQueryVectors() result for failures that do not reject the call.
HTTP request failures: Runtime failures are JavaScript Error instances whose message is a JSON string containing status (HTTP status code), error (status text), and error_msg (runtime response body). Transport and cancellation errors can have different shapes; do not assume every error message is JSON.
gRPC request failures: Runtime failures preserve ConnectError codes from @connectrpc/connect. Do not handle them as HTTP status codes.
Structured item/query failures:VectorError contains a canonical non-OK google.rpc.Code number (1 through 16), a message, and details. These codes are not HTTP status codes. Each detail contains typeUrl and value: HTTP preserves protobuf JSON fields without @type, while gRPC preserves the original protobuf bytes as Uint8Array.
Invalid arguments: Empty store/collection names or record IDs, store/collection names equal to . or .., invalid payload types, unsupported metric names, nonfinite numbers, invalid JSON, and ambiguous query sources are rejected before the request is sent. Invalid dimensions, topK, or coordinates outside the finite float32 range are also rejected. Type and range failures use TypeError or RangeError; malformed protobuf duration strings can produce parser errors.
Creating an existing collection (HTTP 409, gRPC AlreadyExists), accessing a missing collection or querying by a missing ID (HTTP 404, gRPC NotFound), unsupported component capabilities, and invalid filters (HTTP 400, gRPC InvalidArgument) cause runtime failures. In a batch, a missing byId source fails only that slot with VectorError code 5. A valid query with no matches instead returns an empty matches array. Collection counts exceeding JavaScript’s safe integer range and malformed responses are rejected rather than silently losing precision or substituting defaults.
Retrieve individual and bulk secrets using the Dapr JavaScript SDK
Use DaprClient.secret to retrieve secrets from a configured Dapr secret store in JavaScript or TypeScript. The SDK provides single-secret and bulk retrieval over HTTP and gRPC. It does not provide methods to create, update, delete, or watch secrets.
These guides target @dapr/dapr 3.19.0 or later. Secrets use the stable Dapr Secrets API; this is not a new building block introduced in SDK 3.19.
Follow the how-to guide for local setup and retrieval. Read the client usage guidance for configuration, response shapes, metadata, protocol limitations, and errors.
HTTP and gRPC differences
In SDK 3.19.0, the gRPC single-secret implementation ignores metadata and returns only the first key-value pair from a multi-valued secret. Use HTTP when you need per-request metadata or all values from an individual secret. Bulk retrieval preserves nested values with either protocol, but neither protocol accepts bulk metadata through the SDK.
4.17.1 - How to: Retrieve secrets with the Dapr JavaScript SDK
Configure a secret store and retrieve individual and bulk secrets with the Dapr JavaScript SDK
This guide uses DaprClient.secret to retrieve a single secret and all accessible secrets from a local secret store. The examples use JavaScript ES modules; the same methods are available in TypeScript.
The component’s metadata.name, local-secret-store, is the store name passed to the SDK. The secretsFile path is relative to the directory where you run dapr run, not the component file. Setting multiValued to "true" lets the database secret contain both username and password.
Development only
The local file component reads plaintext secrets without authentication. Use only dummy values for this example, do not commit real secrets, and configure a production secret store for deployed applications.
Save the following as app.mjs. Using .mjs lets Node.js run the ES module without changing your project’s package configuration.
import{CommunicationProtocolEnum,DaprClient}from"@dapr/dapr";constclient=newDaprClient({daprHost:"127.0.0.1",daprPort:"3500",communicationProtocol:CommunicationProtocolEnum.HTTP,});conststoreName="local-secret-store";try{constapiKey=awaitclient.secret.get(storeName,"api-key");if(typeofapiKey["api-key"]!=="string"){thrownewError("The required api-key secret was not returned");}constdatabase=awaitclient.secret.get(storeName,"database");if(typeofdatabase.username!=="string"||typeofdatabase.password!=="string"){thrownewError("The required database credentials were not returned");}constsecrets=awaitclient.secret.getBulk(storeName);if(typeofsecrets.database?.username!=="string"||typeofsecrets.database?.password!=="string"){thrownewError("Bulk retrieval did not return the database credentials");}console.log("Retrieved the required secrets without logging their values");}finally{awaitclient.stop();}
Start the application and its sidecar from the directory containing secrets.json:
This is a client-only application; it does not need a DaprServer, an application port, or an inbound secrets handler.
Single-secret responses
get(storeName, key) returns the secret’s key-value data directly. For a name/value secret, the only key is the secret name itself; for a multi-valued secret, the keys are its fields and the secret name is not included. With the sample data, get(storeName, "api-key") returns:
{"api-key":"development-api-key"}
Over HTTP, get(storeName, "database") returns both values:
Bulk retrieval is not an array or a paginated iterator. It loads the full response into memory. Use it only when the application needs all accessible secrets and the component supports bulk retrieval.
Use gRPC
Configure CommunicationProtocolEnum.GRPC and the sidecar’s gRPC port, "50001", instead of HTTP and "3500". The same get and getBulk methods are available.
Multi-valued single-secret limitation
In SDK 3.19.0, gRPC get returns only the first entry from the runtime’s secret data map. It never returns both database fields in this example, so changing only the protocol causes the database validation to fail. Keep HTTP for individual multi-valued secrets. gRPC getBulk preserves all nested values, but retrieves all accessible secrets rather than just one.
Pass store-specific metadata over HTTP
The third argument to get is a query-string string, not a metadata object. Include the metadata. prefix on each parameter and omit the leading ?. Use URLSearchParams to encode values.
For example, with an AWS Secrets Manager component named aws-secrets, retrieve a particular version:
This snippet assumes an existing HTTP client and a separately configured AWS component; it is not needed for the local file example. Supported metadata depends on the secret store component. For example, Kubernetes supports metadata.namespace, while some cloud stores support version selection.
The gRPC implementation ignores this argument in SDK 3.19.0. getBulk has no metadata argument with either protocol. See the client usage guidance for the complete API surface and error behavior.
4.17.2 - Secrets client usage
Configure the JavaScript secrets client and understand metadata, response shapes, protocol differences, and errors
Secrets are available through DaprClient.secret; there is no separate secrets client package or builder. This guidance targets @dapr/dapr 3.19.0 or later.
Client lifetime and configuration
Reuse a long-lived DaprClient across operations. Its secrets client shares the parent client’s connection and authentication settings. Await outstanding operations before calling await client.stop() during application shutdown; do not stop a shared client after each secret lookup.
HTTP is the default protocol. To explicitly configure gRPC:
Use CommunicationProtocolEnum.HTTP with the HTTP port (default "3500") for HTTP. Port values are strings. Selecting the SDK protocol controls client-to-sidecar communication; it does not require an application server.
If neither daprHost nor daprPort is supplied, the SDK can use DAPR_HTTP_ENDPOINT or DAPR_GRPC_ENDPOINT for the selected protocol. Explicit host or port options take precedence over the endpoint environment variable. Otherwise, the SDK defaults to 127.0.0.1 and DAPR_HTTP_PORT or DAPR_GRPC_PORT, falling back to 3500 or 50001. The token defaults to DAPR_API_TOKEN when daprApiToken is omitted.
The API token authenticates to the Dapr sidecar, not directly to the secret store provider. Configure provider credentials and access in the secret store component. Use secret scopes to restrict which secrets an application can retrieve, and component scopes to restrict which applications can use a component.
Call these as client.secret.get(...) and client.secret.getBulk(...).
Capability
HTTP
gRPC in 3.19.0
Retrieve a single secret
Returns the full data map
Returns only the first key-value pair, or {} for an empty data map
Per-request metadata on get
Query string with metadata.-prefixed keys
Argument is accepted but ignored
Bulk retrieval
Nested secret data maps
Nested secret data maps, preserving all values
Per-request metadata on getBulk
Not exposed
Not exposed
These limitations are present in both the 3.19.0 HTTP implementation and gRPC implementation, and remain in the latest source reviewed for this guide. Check the implementation and release notes when upgrading.
The SDK does not expose secret writes, deletes, subscriptions, typed secret generation, or automatic secret refresh. Manage secret creation and rotation in the underlying provider. If your application caches retrieved values, it must decide when to fetch them again.
Metadata and names
HTTP get appends the metadata string directly to the request URL after ?. Do not include a leading ?, pass an object, or omit the metadata. prefixes. For example:
This requires a Kubernetes secret store and an existing HTTP client. Metadata keys are component-specific; see the Secrets API reference and component reference.
Store names and secret names are case-sensitive. The HTTP implementation interpolates them into URL paths without encoding them. If a secret name contains URL-reserved characters, encode the secret name with encodeURIComponent before passing it to HTTP get. Do not encode gRPC secret names, which are sent as protobuf fields.
Response shapes and TypeScript
For a successful single-secret request, the data is a map of string keys to string values. Some stores return the secret name as the only key; others, such as Kubernetes, return several fields without the secret name as a wrapper. HTTP preserves all these fields. Do not rely on gRPC’s first-entry selection to choose a particular field from a multi-valued secret.
A successful bulk response is a map from secret names to their data maps. It is not a flat map, and the field names inside each secret are determined by the component. Bulk availability and the returned secrets depend on the component and access configuration.
Both methods are declared as Promise<object>, not as generic or strongly typed dictionaries. TypeScript callers should validate a response before indexing it, rather than assuming the declaration guarantees string-valued fields:
functionisStringMap(value: unknown):valueisRecord<string,string>{return(typeofvalue==="object"&&value!==null&&!Array.isArray(value)&&Object.values(value).every((entry)=>typeofentry==="string"));}constsecret=awaitclient.secret.get("local-secret-store","api-key");if(!isStringMap(secret)||typeofsecret["api-key"]!=="string"){thrownewError("The required api-key secret was not returned");}constapiKey=secret["api-key"];
This snippet assumes an existing client and runs inside an async function or an ES module. For bulk responses, first validate the outer object, then validate the data map for each secret your application requires. Checking only that the response is an object does not guarantee that a required secret exists.
Errors and missing secrets
Await each operation and handle failures at your application’s error boundary. Missing components, denied access, unsupported bulk retrieval, provider failures, and sidecar connection failures can reject the promise.
HTTP runtime errors: Non-success responses become JavaScript Error instances whose message is a JSON string containing status (HTTP status), error (status text), and error_msg (runtime response body). Network and startup errors can have different shapes; do not assume every error message is JSON.
gRPC runtime errors: RPC failures use ConnectError from @connectrpc/connect, with a gRPC/Connect error code rather than an HTTP status.
Missing or empty secrets: Do not assume a missing secret always rejects. Behavior depends on the component and runtime response. HTTP 204 No Content resolves to an empty string in this SDK, despite the Promise<object> declaration. gRPC resolves an empty data map to {}. Validate required fields and report their absence explicitly.
See the Secrets API reference for runtime status codes. Avoid logging returned secrets or raw error payloads that might contain sensitive provider information.
Cancellation and bulk retrieval limits
Neither method exposes an AbortSignal, per-call timeout, or request options argument. Do not assume cancellation support from another SDK building block also applies to secrets. Racing a request against a timer only limits how long your application waits; it does not cancel the underlying request.
getBulk returns the entire response in memory, without pagination, streaming, or a key filter. Prefer individual requests when you need only a few secrets. Using bulk retrieval to work around the gRPC multi-value limitation may retrieve more secrets than your application needs; HTTP get is usually the narrower choice.
Testing your application
Keep secret access behind an application-owned interface or inject the methods your code needs. Test single-value and multi-valued responses, nested bulk responses, missing required fields, and rejected promises. Use the actual object return type rather than assuming a typed secret model.
For integration tests, run a sidecar with a development secret store such as the local file example. Test HTTP and gRPC separately if your application supports both; a single-value success case does not exercise metadata or multi-valued response differences.
5 - Dapr PHP SDK
PHP SDK packages for developing Dapr applications
Dapr offers an SDK to help with the development of PHP applications. Using it, you can create PHP clients, servers, and virtual actors with Dapr.
In a directory where you want to create your service, run composer init and answer the questions.
Install with composer require dapr/php-sdk and any other dependencies you may wish to use.
Configure your service
Create a config.php, copying the contents below:
<?phpuseDapr\Actors\Generators\ProxyFactory;useDapr\Middleware\Defaults\{Response\ApplicationJson,Tracing};usePsr\Log\LogLevel;usefunctionDI\{env,get};return[// set the log level
'dapr.log.level'=>LogLevel::WARNING,// Generate a new proxy on each request - recommended for development
'dapr.actors.proxy.generation'=>ProxyFactory::GENERATED,// put any subscriptions here
'dapr.subscriptions'=>[],// if this service will be hosting any actors, add them here
'dapr.actors'=>[],// if this service will be hosting any actors, configure how long until dapr should consider an actor idle
'dapr.actors.idle_timeout'=>null,// if this service will be hosting any actors, configure how often dapr will check for idle actors
'dapr.actors.scan_interval'=>null,// if this service will be hosting any actors, configure how long dapr will wait for an actor to finish during drains
'dapr.actors.drain_timeout'=>null,// if this service will be hosting any actors, configure if dapr should wait for an actor to finish
'dapr.actors.drain_enabled'=>null,// you shouldn't have to change this, but the setting is here if you need to
'dapr.port'=>env('DAPR_HTTP_PORT','3500'),// add any custom serialization routines here
'dapr.serializers.custom'=>[],// add any custom deserialization routines here
'dapr.deserializers.custom'=>[],// the following has no effect, as it is the default middlewares and processed in order specified
'dapr.http.middleware.request'=>[get(Tracing::class)],'dapr.http.middleware.response'=>[get(ApplicationJson::class),get(Tracing::class)],];
If you’re new to the actor pattern, the best place to learn about the actor pattern is in
the Actor Overview.
In the PHP SDK, there are two sides to an actor, the Client, and the Actor (aka, the Runtime). As a client of an actor,
you’ll interact with a remote actor via the ActorProxy class. This class generates a proxy class on-the-fly using one
of several configured strategies.
When writing an actor, state can be managed for you. You can hook into the actor lifecycle, and define reminders and
timers. This gives you considerable power for handling all types of problems that the actor pattern is suited for.
The Actor Proxy
Whenever you want to communicate with an actor, you’ll need to get a proxy object to do so. The proxy is responsible for
serializing your request, deserializing the response, and returning it to you, all while obeying the contract defined by
the specified interface.
In order to create the proxy, you’ll first need an interface to define how and what you send and receive from an actor.
For example, if you want to communicate with a counting actor that solely keeps track of counts, you might define the
interface as follows:
It’s a good idea to put this interface in a shared library that the actor and clients can both access (if both are written in PHP). The DaprType
attribute tells the DaprClient the name of the actor to send to. It should match the implementation’s DaprType, though
you can override the type if needed.
To create an actor, you need to implement the interface you defined earlier and also add the DaprType attribute. All
actors must implement IActor, however there’s an Actor base class that implements the boilerplate making your
implementation much simpler.
The most important bit is the constructor. It takes at least one argument with the name of id which is the id of the
actor. Any additional arguments are injected by the DI container, including any ActorState you want to use.
Actor Lifecycle
An actor is instantiated via the constructor on every request targeting that actor type. You can use it to calculate
ephemeral state or handle any kind of request-specific startup you require, such as setting up other clients or
connections.
After the actor is instantiated, the on_activation() method may be called. The on_activation() method is called any
time the actor “wakes up” or when it is created for the first time. It is not called on every request.
Next, the actor method is called. This may be from a timer, reminder, or from a client. You may perform any work that
needs to be done and/or throw an exception.
Finally, the result of the work is returned to the caller. After some time (depending on how you’ve configured the
service), the actor will be deactivated and on_deactivation() will be called. This may not be called if the host dies,
daprd crashes, or some other error occurs which prevents it from being called successfully.
Actor State
Actor state is a “Plain Old PHP Object” (POPO) that extends ActorState. The ActorState base class provides a couple
of useful methods. Here’s an example implementation:
There are four different modes actor proxies are handled. Each mode presents different trade-offs that you’ll need to
weigh during development and in production.
It can be set with dapr.actors.proxy.generation configuration key.
This is the default mode. In this mode, a class is generated and eval’d on every request. It’s mostly for development
and shouldn’t be used in production.
This is the same as ProxyModes::GENERATED except the class is stored in a tmp file so it doesn’t need to be
regenerated on every request. It doesn’t know when to update the cached class, so using it in development is discouraged
but is offered for when manually generating the files isn’t possible.
In this mode, an exception is thrown if the proxy class doesn’t exist. This is useful for when you don’t want to
generate code in production. You’ll have to make sure the class is generated and pre-/autoloaded.
Generating proxies
You can create a composer script to generate proxies on demand to take advantage of the ONLY_EXISTING mode.
Create a ProxyCompiler.php
<?phpclassProxyCompiler{privateconstPROXIES=[MyActorInterface::class,MyOtherActorInterface::class,];privateconstPROXY_LOCATION=__DIR__.'/proxies/';publicstaticfunctioncompile(){try{$app=\Dapr\App::create();foreach(self::PROXIESas$interface){$output=$app->run(function(\DI\FactoryInterface$factory)use($interface){return\Dapr\Actors\Generators\FileGenerator::generate($interface,$factory);});$reflection=newReflectionClass($interface);$dapr_type=$reflection->getAttributes(\Dapr\Actors\Attributes\DaprType::class)[0]->newInstance()->type;$filename='dapr_proxy_'.$dapr_type.'.php';file_put_contents(self::PROXY_LOCATION.$filename,$output);echo"Compiled: $interface";}}catch(Exception$ex){echo"Failed to generate proxy for $interface\n{$ex->getMessage()} on line {$ex->getLine()} in {$ex->getFile()}\n";}}}
Then add a psr-4 autoloader for the generated proxies and a script in composer.json:
And finally, configure dapr to only use the generated proxies:
<?php// in config.php
return['dapr.actors.proxy.generation'=>ProxyFactory::ONLY_EXISTING,];
In this mode, the proxy satisfies the interface contract, however, it does not actually implement the interface itself
(meaning instanceof will be false). This mode takes advantage of a few quirks in PHP to work and exists for cases
where code cannot be eval’d or generated.
Requests
Creating an actor proxy is very inexpensive for any mode. There are no requests made when creating an actor proxy object.
When you call a method on a proxy object, only methods that you implemented are serviced by your actor implementation.
get_id() is handled locally, and get_reminder(), delete_reminder(), etc. are handled by the daprd.
Actor implementation
Every actor implementation in PHP must implement \Dapr\Actors\IActor and use the \Dapr\Actors\ActorTrait trait. This
allows for fast reflection and some shortcuts. Using the \Dapr\Actors\Actor abstract base class does this for you, but
if you need to override the default behavior, you can do so by implementing the interface and using the trait.
Activation and deactivation
When an actor activates, a token file is written to a temporary directory (by default this is in
'/tmp/dapr_' + sha256(concat(Dapr type, id)) in linux and '%temp%/dapr_' + sha256(concat(Dapr type, id)) on Windows).
This is persisted until the actor deactivates, or the host shuts down. This allows for on_activation to be called once
and only once when Dapr activates the actor on the host.
Performance
Actor method invocation is very fast on a production setup with php-fpm and nginx, or IIS on Windows. Even though
the actor is constructed on every request, actor state keys are only loaded on-demand and not during each request.
However, there is some overhead in loading each key individually. This can be mitigated by storing an array of data in
state, trading some usability for speed. It is not recommended doing this from the start, but as an optimization when
needed.
Versioning state
The names of the variables in the ActorState object directly correspond to key names in the store. This means that if
you change the type or name of a variable, you may run into errors. To get around this, you may need to version your state
object. In order to do this, you’ll need to override how state is loaded and stored. There are many ways to approach this,
one such solution might be something like this:
<?phpclassVersionedStateextends\Dapr\Actors\ActorState{/**
* @var int The current version of the state in the store. We give a default value of the current version.
* However, it may be in the store with a different value.
*/publicint$state_version=self::VERSION;/**
* @var int The current version of the data
*/privateconstVERSION=3;/**
* Call when your actor activates.
*/publicfunctionupgrade(){if($this->state_version<self::VERSION){$value=parent::__get($this->get_versioned_key('key',$this->state_version));// update the value after updating the data structure
parent::__set($this->get_versioned_key('key',self::VERSION),$value);$this->state_version=self::VERSION;$this->save_state();}}// if you upgrade all keys as needed in the method above, you don't need to walk the previous
// keys when loading/saving and you can just get the current version of the key.
privatefunctionget_previous_version(int$version):int{return$this->has_previous_version($version)?$version-1:$version;}privatefunctionhas_previous_version(int$version):bool{return$version>=0;}privatefunctionwalk_versions(int$version,callable$callback,callable$predicate):mixed{$value=$callback($version);if($predicate($value)||!$this->has_previous_version($version)){return$value;}return$this->walk_versions($this->get_previous_version($version),$callback,$predicate);}privatefunctionget_versioned_key(string$key,int$version){return$this->has_previous_version($version)?$version.$key:$key;}publicfunction__get(string$key):mixed{return$this->walk_versions(self::VERSION,fn($version)=>parent::__get($this->get_versioned_key($key,$version)),fn($value)=>isset($value));}publicfunction__isset(string$key):bool{return$this->walk_versions(self::VERSION,fn($version)=>parent::__isset($this->get_versioned_key($key,$version)),fn($isset)=>$isset);}publicfunction__set(string$key,mixed$value):void{// optional: you can unset previous versions of the key
parent::__set($this->get_versioned_key($key,self::VERSION),$value);}publicfunction__unset(string$key):void{// unset this version and all previous versions
$this->walk_versions(self::VERSION,fn($version)=>parent::__unset($this->get_versioned_key($key,$version)),fn()=>false);}}
There’s a lot to be optimized, and it wouldn’t be a good idea to use this verbatim in production, but you can get the
gist of how it would work. A lot of it will depend on your use case which is why there’s not something like this in
the SDK. For instance, in this example implementation, the previous value is kept for where there may be a bug during an upgrade;
keeping the previous value allows for running the upgrade again, but you may wish to delete the previous value.
5.2 - The App
Using the App Class
In PHP, there is no default router. Thus, the \Dapr\App class is provided. It uses
Nikic’s FastRoute under the hood. However, you are free to use any router or
framework that you’d like. Just check out the add_dapr_routes() method in the App class to see how actors and
subscriptions are implemented.
Every app should start with App::create() which takes two parameters, the first is an existing DI container, if you
have one, and the second is a callback to hook into the ContainerBuilder and add your own configuration.
From there, you should define your routes and then call $app->start() to execute the route on the current request.
<?php// app.php
require_once__DIR__.'/vendor/autoload.php';$app=\Dapr\App::create(configure:fn(\DI\ContainerBuilder$builder)=>$builder->addDefinitions('config.php'));// add a controller for GET /test/{id} that returns the id
$app->get('/test/{id}',fn(string$id)=>$id);$app->start();
Returning from a controller
You can return anything from a controller, and it will be serialized into a json object. You can also request the
Psr Response object and return that instead, allowing you to customize headers, and have control over the entire response:
<?php$app=\Dapr\App::create(configure:fn(\DI\ContainerBuilder$builder)=>$builder->addDefinitions('config.php'));// add a controller for GET /test/{id} that returns the id
$app->get('/test/{id}',fn(string$id,\Psr\Http\Message\ResponseInterface$response,\Nyholm\Psr7\Factory\Psr17Factory$factory)=>$response->withBody($factory->createStream($id)));$app->start();
Using the app as a client
When you just want to use Dapr as a client, such as in existing code, you can call $app->run(). In these cases, there’s
usually no need for a custom configuration, however, you may want to use a compiled DI container, especially in production:
A DaprClient object is provided, in fact, all the sugar used by the App object is built on the DaprClient.
<?phprequire_once__DIR__.'/vendor/autoload.php';$clientBuilder=\Dapr\Client\DaprClient::clientBuilder();// you can customize (de)serialization or comment out to use the default JSON serializers.
$clientBuilder=$clientBuilder->withSerializationConfig($yourSerializer)->withDeserializationConfig($yourDeserializer);// you can also pass it a logger
$clientBuilder=$clientBuilder->withLogger($myLogger);// and change the url of the sidecar, for example, using https
$clientBuilder=$clientBuilder->useHttpClient('https://localhost:3800')
There are several functions you can call before
5.2.1 - Unit Testing
Unit Testing
Unit and integration tests are first-class citizens with the PHP SDK. Using the DI container, mocks, stubs,
and the provided \Dapr\Mocks\TestClient allows you to have very fine-grained tests.
Testing Actors
With actors, there are two things we’re interested in while the actor is under test:
The returned result based on an initial state
The resulting state based on the initial state
Here’s an example test a very simple actor that updates its state and returns a specific value:
<?php// TestState.php
classTestStateextends\Dapr\Actors\ActorState{publicint$number;}// TestActor.php
#[\Dapr\Actors\Attributes\DaprType('TestActor')]
classTestActorextends\Dapr\Actors\Actor{publicfunction__construct(string$id,privateTestState$state){parent::__construct($id);}publicfunctionoddIncrement():bool{if($this->state->number%2===0){returnfalse;}$this->state->number+=1;returntrue;}}// TheTest.php
classTheTestextends\PHPUnit\Framework\TestCase{private\DI\Container$container;publicfunctionsetUp():void{parent::setUp();// create a default app and extract the DI container from it
$app=\Dapr\App::create(configure:fn(\DI\ContainerBuilder$builder)=>$builder->addDefinitions(['dapr.actors'=>[TestActor::class]],[\Dapr\DaprClient::class=>\DI\autowire(\Dapr\Mocks\TestClient::class)]));$app->run(fn(\DI\Container$container)=>$this->container=$container);}publicfunctiontestIncrementsWhenOdd(){$id=uniqid();$runtime=$this->container->get(\Dapr\Actors\ActorRuntime::class);$client=$this->getClient();// return the current state from http://localhost:1313/reference/api/actors_api/
$client->register_get("/actors/TestActor/$id/state/number",code:200,data:3);// ensure it increments from http://localhost:1313/reference/api/actors_api/
$client->register_post("/actors/TestActor/$id/state",code:204,response_data:null,expected_request:[['operation'=>'upsert','request'=>['key'=>'number','value'=>4,],],]);$result=$runtime->resolve_actor('TestActor',$id,fn($actor)=>$runtime->do_method($actor,'oddIncrement',null));$this->assertTrue($result);}privatefunctiongetClient():\Dapr\Mocks\TestClient{return$this->container->get(\Dapr\DaprClient::class);}}
When building on transactions, you’ll likely want to test how a failed transaction is handled. In order to do that, you
need to inject failures and ensure the transaction matches what you expect.
<?php// MyState.php
#[\Dapr\State\Attributes\StateStore('statestore', \Dapr\consistency\EventualFirstWrite::class)]
classMyStateextends\Dapr\State\TransactionalState{publicstring$value='';}// SomeService.php
classSomeService{publicfunction__construct(privateMyState$state){}publicfunctiondoWork(){$this->state->begin();$this->state->value="hello world";$this->state->commit();}}// TheTest.php
classTheTestextends\PHPUnit\Framework\TestCase{private\DI\Container$container;publicfunctionsetUp():void{parent::setUp();$app=\Dapr\App::create(configure:fn(\DI\ContainerBuilder$builder)=>$builder->addDefinitions([\Dapr\DaprClient::class=>\DI\autowire(\Dapr\Mocks\TestClient::class)]));$this->container=$app->run(fn(\DI\Container$container)=>$container);}privatefunctiongetClient():\Dapr\Mocks\TestClient{return$this->container->get(\Dapr\DaprClient::class);}publicfunctiontestTransactionFailure(){$client=$this->getClient();// create a response from https://v1-19.docs.dapr.io/reference/api/state_api/
$client->register_post('/state/statestore/bulk',code:200,response_data:[['key'=>'value',// no previous value
],],expected_request:['keys'=>['value'],'parallelism'=>10]);$client->register_post('/state/statestore/transaction',code:200,response_data:null,expected_request:['operations'=>[['operation'=>'upsert','request'=>['key'=>'value','value'=>'hello world']]]]);$state=newMyState($this->container,$this->container);$service=newSomeService($state);$service->doWork();$this->assertSame('hello world',$state->value);}}
Dapr uses JSON serialization and thus (complex) type information is lost when sending/receiving data.
Serialization
When returning an object from a controller, passing an object to the DaprClient, or storing an object in a state store,
only public properties are scanned and serialized. You can customize this behavior by implementing \Dapr\Serialization\ISerialize.
For example, if you wanted to create an ID type that serialized to a string, you may implement it like so:
This works for any type that we have full ownership over, however, it doesn’t work for classes from libraries or PHP itself.
For that, you need to register a custom serializer with the DI container:
<?php// in config.php
classSerializeSomeClassimplements\Dapr\Serialization\Serializers\ISerialize{publicfunctionserialize(mixed$value,\Dapr\Serialization\ISerializer$serializer):mixed{// serialize $value and return the result
}}return['dapr.serializers.custom'=>[SomeClass::class=>newSerializeSomeClass()],];
Deserialization
Deserialization works exactly the same way, except the interface is \Dapr\Deserialization\Deserializers\IDeserialize.
5.4 - Publish and Subscribe with PHP
How to use
With Dapr, you can publish anything, including cloud events. The SDK contains a simple cloud event implementation, but
you can also just pass an array that conforms to the cloud event spec or use another library.
Only <code>application/octet-steam</code> is supported for binary data.
Receiving cloud events
In your subscription handler, you can have the DI Container inject either a Dapr\PubSub\CloudEvent or an array into
your controller. The former does some validation to ensure you have a proper event. If you need direct access to the
data, or the events do not conform to the spec, use an array.
5.5 - State Management with PHP
How to use
Dapr offers a great modular approach to using state in your application. The best way to learn the basics is to visit
the howto.
Metadata
Many state components allow you to pass metadata to the component to control specific aspects of the component’s
behavior. The PHP SDK allows you to pass that metadata through:
<?php// using the state manager
$app->run(fn(\Dapr\State\StateManager$stateManager)=>$stateManager->save_state('statestore',new\Dapr\State\StateItem('key','value',metadata:['port'=>'112'])));// using the DaprClient
$app->run(fn(\Dapr\Client\DaprClient$daprClient)=>$daprClient->saveState(storeName:'statestore',key:'key',value:'value',metadata:['port'=>'112']))
This is an example of how you might pass the port metadata to Cassandra.
Every state operation allows passing metadata.
Consistency/concurrency
In the PHP SDK, there are four classes that represent the four different types of consistency and concurrency in Dapr:
Passing one of them to a StateManager method or using the StateStore() attribute allows you to define how the state
store should handle conflicts.
Parallelism
When doing a bulk read or beginning a transaction, you can specify the amount of parallelism. Dapr will read “at most”
that many keys at a time from the underlying store if it has to read one key at a time. This can be helpful to control
the load on the state store at the expense of performance. The default is 10.
Prefix
Hardcoded key names are useful, but why not make state objects more reusable? When committing a transaction or saving an
object to state, you can pass a prefix that is applied to every key in the object.
<?phpclassTransactionObjectextends\Dapr\State\TransactionalState{publicstring$key;}$app->run(function(TransactionObject$object){$object->begin(prefix:'my-prefix-');$object->key='value';// commit to key `my-prefix-key`
$object->commit();});
<?phpclassStateObject{publicstring$key;}$app->run(function(\Dapr\State\StateManager$stateManager){$stateManager->load_object($obj=newStateObject(),prefix:'my-prefix-');// original value is from `my-prefix-key`
$obj->key='value';// save to `my-prefix-key`
$stateManager->save_object($obj,prefix:'my-prefix-');});
6 - Dapr Python SDK
Python SDK packages for developing Dapr applications
Dapr offers a variety of subpackages to help with the development of Python applications. Using them you can create Python clients, servers, and virtual actors with Dapr.
To get started with the Python SDK, install the main Dapr Python SDK package.
pip install dapr
Note: The development version will contain features and behavior that will be compatible with the pre-release version of the Dapr runtime. Only tagged releases are published to PyPI, so install the development version from the GitHub repository. Make sure to uninstall any stable versions of the Python SDK before installing it.
The SDK requires protobuf 6.33.5 or later and grpcio and grpcio-status 1.81.1 or later. pip installs matching versions automatically. If your project pins protobuf, grpcio or grpcio-status to an earlier version, update the pins before you upgrade the SDK.
Install extensions
From Dapr 1.19, the SDK extensions are optional extras of the dapr package. Install the extras that you need in the same command as the SDK, for example:
To install every extension, use pip install "dapr[all]".
Upgrading from Dapr 1.18 or earlier
The dapr-ext-fastapi, dapr-ext-grpc, dapr-ext-langgraph, dapr-ext-strands, dapr-ext-workflow and flask-dapr packages are no longer published. The extension code now ships inside the dapr package, and the import paths under dapr.ext.* do not change.
If you have any of the old packages installed, run these commands in order. Uninstalling an old package removes the extension files that the new dapr package installs, so you must reinstall dapr afterwards:
Replace the extras in the last command with the extras your application uses. If you skip these steps, import dapr emits a FutureWarning with the recovery command. You can silence the warning by setting DAPR_SKIP_LEGACY_CHECK=1.
Available subpackages
SDK imports
Python SDK imports are subpackages included with the main SDK install, but need to be imported when used. The most common imports provided by the Dapr Python SDK are:
Client
Write Python applications to interact with a Dapr sidecar and other Dapr applications, including stateful virtual actors in Python
Actors
Create and interact with Dapr's Actor framework.
Conversation
Use the Dapr Conversation API (Alpha) for LLM interactions, tools, and multi-turn flows.
SDK extensions mainly work as utilities for receiving pub/sub events, programatically creating pub/sub subscriptions, and handling input binding events. While you can acheive all of these tasks without an extension, using a Python SDK extension proves convenient.
gRPC
Create Dapr services with the gRPC server extension.
FastAPI
Integrate with Dapr Python virtual actors and pub/sub using the Dapr FastAPI extension.
Flask
Integrate with Dapr Python virtual actors using the Dapr Flask extension.
Workflow
Author workflows that work with other Dapr APIs in Python.
Databricks
Turn Databricks Lakeflow streaming records into durable Dapr Workflow executions.
The dapr package contains the DaprClient, which is used to create and use a client.
fromdapr.clientsimportDaprClient
Initialising the client
You can initialise a Dapr client in multiple ways:
Default values:
When you initialise the client without any parameters it will use the default values for a Dapr
sidecar instance (127.0.0.1:50001).
fromdapr.clientsimportDaprClientwithDaprClient()asd:# use the client
Specifying an endpoint on initialisation:
When passed as an argument in the constructor, the gRPC endpoint takes precedence over any
configuration or environment variable.
fromdapr.clientsimportDaprClientwithDaprClient("mydomain:50051?tls=true")asd:# use the client
Use the host:port?tls=true or host:port?tls=false form to set the endpoint and whether the connection uses TLS.
Deprecated
A gRPC endpoint that starts with http:// or https://, for example https://mydomain:443, still works but emits a DeprecationWarning that names the equivalent endpoint. Replace it with mydomain:443?tls=true (for https://) or mydomain:443?tls=false (for http://). Python hides a DeprecationWarning in many cases, so run with -W default to see it.
Configuration options:
Dapr Sidecar Endpoints
You can use the standardised DAPR_GRPC_ENDPOINT environment variable to
specify the gRPC endpoint. When this variable is set, the client can be initialised
without any arguments:
fromdapr.clientsimportDaprClientwithDaprClient()asd:# the client will use the endpoint specified in the environment variables
To connect to the sidecar over a Unix domain socket, give the absolute socket path after three slashes, for example unix:///tmp/dapr.sock. DaprClient, WorkflowRuntime and DaprWorkflowClient all accept this form. An endpoint with a host part after unix://, such as unix://dapr.sock, raises ValueError when the client is created. For a relative path, use unix:dapr.sock.
The legacy environment variables DAPR_RUNTIME_HOST, DAPR_HTTP_PORT and DAPR_GRPC_PORT are
also supported, but DAPR_GRPC_ENDPOINT takes precedence.
The http:// and https:// prefixes are deprecated for DAPR_GRPC_ENDPOINT too. Use host:port?tls=true or host:port?tls=false instead.
Dapr API Token
If your Dapr instance is configured to require the DAPR_API_TOKEN environment variable, you can
set it in the environment and the client will use it automatically. You can read more about Dapr API token authentication here.
Health timeout
On client initialisation, a health check is performed against the Dapr sidecar (/healthz/outbound).
The client will wait for the sidecar to be up and running before proceeding.
The default healthcheck timeout is 60 seconds, but it can be overridden by setting the DAPR_HEALTH_TIMEOUT
environment variable. Each healthcheck attempt is also limited by this timeout, so a sidecar that accepts the
connection but does not answer cannot block the client forever.
Retries and timeout
The Dapr client can retry a request if a specific error code is received from the sidecar. This is
configurable through the DAPR_API_MAX_RETRIES environment variable and is picked up automatically,
not requiring any code changes.
The default value for DAPR_API_MAX_RETRIES is 0, which means no retries will be made.
You can fine-tune more retry parameters by creating a dapr.clients.retry.RetryPolicy object and
passing it to the DaprClient constructor:
Timeout can be set for all calls through the environment variable DAPR_API_TIMEOUT_SECONDS. By default, no timeout is set, so calls wait without a time limit.
Note: DAPR_API_TIMEOUT_SECONDS does not apply to the workflow client methods wait_for_workflow_start and wait_for_workflow_completion. Without their own timeout_in_seconds argument, they wait with no time limit. Pass timeout_in_seconds to limit the wait. See Dapr Workflow extension.
Note: You can control timeouts on service invocation separately, by passing a timeout parameter to the invoke_method method.
DNS resolution on macOS
On macOS, the client sets the GRPC_DNS_RESOLVER environment variable to native when it is not already set, so gRPC uses the operating system resolver. The resolver that ships with gRPC can fail with DNS query cancelled for host names that resolve on the system. To use a different resolver, set GRPC_DNS_RESOLVER before you create the client. The variable applies to the whole process.
Error handling
Initially, errors in Dapr followed the Standard gRPC error model. However, to provide more detailed and informative error messages, in version 1.13 an enhanced error model has been introduced which aligns with the gRPC Richer error model. In response, the Python SDK implemented DaprGrpcError, a custom exception class designed to improve the developer experience. It’s important to note that the transition to using DaprGrpcError for all gRPC status exceptions is a work in progress. As of now, not every API call in the SDK has been updated to leverage this custom exception. We are actively working on this enhancement and welcome contributions from the community.
Example of handling DaprGrpcError exceptions when using the Dapr python-SDK:
The Dapr Python SDK provides a simple API for invoking services via either HTTP or gRPC (deprecated). The protocol can be selected by setting the DAPR_API_METHOD_INVOCATION_PROTOCOL environment variable, defaulting to HTTP when unset. GRPC service invocation in Dapr is deprecated and GRPC proxying is recommended as an alternative.
fromdapr.clientsimportDaprClientwithDaprClient()asd:# invoke a method (gRPC or HTTP GET) resp=d.invoke_method('service-to-invoke','method-to-invoke',data='{"message":"Hello World"}')# for other HTTP verbs the verb must be specified# invoke a 'POST' method (HTTP only) resp=d.invoke_method('service-to-invoke','method-to-invoke',data='{"id":"100", "FirstName":"Value", "LastName":"Value"}',http_verb='post')
The base endpoint for HTTP api calls is specified in the DAPR_HTTP_ENDPOINT environment variable.
If this variable is not set, the endpoint value is derived from the DAPR_RUNTIME_HOST and DAPR_HTTP_PORT variables, whose default values are 127.0.0.1 and 3500 accordingly.
The base endpoint for gRPC calls is the one used for the client initialisation (explained above).
Visit Python SDK examples for code samples and instructions to try out service invocation.
Save & get application state
fromdapr.clientsimportDaprClientwithDaprClient()asd:# Save stated.save_state(store_name="statestore",key="key1",value="value1")# Get statedata=d.get_state(store_name="statestore",key="key1").data# Delete stated.delete_state(store_name="statestore",key="key1")
fromdapr.clientsimportDaprClientimportjsonwithDaprClient()asd:cloud_event={'specversion':'1.0','type':'com.example.event','source':'my-service','id':'myid','data':{'id':1,'message':'hello world'},'datacontenttype':'application/json',}# Set the data content type to 'application/cloudevents+json'resp=d.publish_event(pubsub_name='pubsub',topic_name='TOPIC_CE',data=json.dumps(cloud_event),data_content_type='application/cloudevents+json',)
Publish CloudEvents messages with plain text payload:
fromdapr.clientsimportDaprClientimportjsonwithDaprClient()asd:cloud_event={'specversion':'1.0','type':'com.example.event','source':'my-service','id':"myid",'data':'hello world','datacontenttype':'text/plain',}# Set the data content type to 'application/cloudevents+json'resp=d.publish_event(pubsub_name='pubsub',topic_name='TOPIC_CE',data=json.dumps(cloud_event),data_content_type='application/cloudevents+json',)
Publish several messages in one call with publish_events. Each item in data can be a str, bytes, or a BulkPublishEntry. Use BulkPublishEntry to set metadata, a content type, or an entry ID on one message. The publish_metadata applies to every message, and individual entry metadata overrides it:
fromdapr.ext.grpcimportApp,Rule,SubscriptionMessageapp=App()# Default subscription for a topic@app.subscribe(pubsub_name='pubsub',topic='TOPIC_A')defmytopic(event:SubscriptionMessage)->None:data=event.data()print(f'Received: id={data["id"]}, message="{data["message"]}"'f' content_type="{event.data_content_type()}"',flush=True)# Specific handler using Pub/Sub routing@app.subscribe(pubsub_name='pubsub',topic='TOPIC_A',rule=Rule("event.type == \"important\"",1))defmytopic_important(event:SubscriptionMessage)->None:data=event.data()print(f'Received: id={data["id"]}, message="{data["message"]}"'f' content_type="{event.data_content_type()}"',flush=True)
Annotate the event parameter with SubscriptionMessage, the same type that streaming subscriptions deliver. data() returns the payload parsed by content type, for example a dict for JSON. Handlers that are not annotated, or that are annotated with cloudevents.sdk.event.v1.Event, receive the deprecated CloudEvents-based event, and subscribe() emits a DeprecationWarning. See Python gRPC extension for the deprecation timeline.
Visit Python SDK examples for code samples and instructions to try out pub/sub.
Streaming message subscription
You can create a streaming subscription to a PubSub topic using either the subscribe
or subscribe_handler methods.
The subscribe method returns an iterable Subscription object, which allows you to pull messages from the
stream by using a for loop (ex. for message in subscription) or by
calling the next_message method. This will block on the main thread while waiting for messages.
When done, you should call the close method to terminate the
subscription and stop receiving messages.
If the stream fails with a transient error or the sidecar ends it, the subscription reconnects and returns the next message. Before Python SDK 1.19, the subscription returned None after a reconnect, so you no longer need to check for None.
After five failed reconnect attempts, next_message() and the for loop raise StreamReconnectError. Catch this error to decide whether to create a new subscription or to stop the application.
The subscribe_with_handler method accepts a callback function that is executed for each message
received from the stream.
It runs in a separate thread, so it doesn’t block the main thread. The callback should return a
TopicEventResponse (ex. TopicEventResponse('success')), indicating whether the message was
processed successfully, should be retried, or should be discarded. The method will automatically
manage message acknowledgements based on the returned status. The call to subscribe_with_handler
method returns a close function, which should be called to terminate the subscription when you’re
done.
Here’s an example of using the subscribe method:
importtimefromdapr.clientsimportDaprClientfromdapr.clients.grpc.subscriptionimport(StreamCancelledError,StreamInactiveError,StreamReconnectError,)counter=0defprocess_message(message):globalcountercounter+=1# Process the message hereprint(f'Processing message: {message.data()} from {message.topic()}...')return'success'defmain():withDaprClient()asclient:globalcountersubscription=client.subscribe(pubsub_name='pubsub',topic='TOPIC_A',dead_letter_topic='TOPIC_A_DEAD')try:formessageinsubscription:try:response_status=process_message(message)ifresponse_status=='success':subscription.respond_success(message)elifresponse_status=='retry':subscription.respond_retry(message)elifresponse_status=='drop':subscription.respond_drop(message)ifcounter>=5:breakexceptStreamInactiveError:print('Stream is inactive. Retrying...')time.sleep(1)continueexceptStreamCancelledError:print('Stream was cancelled')breakexceptExceptionase:print(f'Error occurred during message processing: {e}')exceptStreamReconnectError:print('Stream could not be reconnected after 5 attempts')finally:print('Closing subscription...')subscription.close()if__name__=='__main__':main()
And here’s an example of using the subscribe_with_handler method:
importtimefromdapr.clientsimportDaprClientfromdapr.clients.grpc._responseimportTopicEventResponsecounter=0defprocess_message(message):# Process the message hereglobalcountercounter+=1print(f'Processing message: {message.data()} from {message.topic()}...')returnTopicEventResponse('success')defmain():with(DaprClient()asclient):# This will start a new thread that will listen for messages# and process them in the `process_message` functionclose_fn=client.subscribe_with_handler(pubsub_name='pubsub',topic='TOPIC_A',handler_fn=process_message,dead_letter_topic='TOPIC_A_DEAD')whilecounter<5:time.sleep(1)print("Closing subscription...")close_fn()if__name__=='__main__':main()
Visit Python SDK examples for code samples and instructions to try out streaming pub/sub.
Conversation (Alpha)
Note
The Dapr Conversation API is currently in alpha.
Since version 1.15 Dapr offers developers the capability to securely and reliably interact with Large Language Models (LLM) through the Conversation API.
fromdapr.clientsimportDaprClientfromdapr.clients.grpc.conversationimportConversationInputwithDaprClient()asd:inputs=[ConversationInput(content="What's Dapr?",role='user',scrub_pii=True),ConversationInput(content='Give a brief overview.',role='user',scrub_pii=True),]metadata={'model':'foo','key':'authKey','cacheTTL':'10m',}response=d.converse_alpha1(name='echo',inputs=inputs,temperature=0.7,context_id='chat-123',metadata=metadata)foroutputinresponse.outputs:print(f'Result: {output.result}')
Visit Python SDK examples for code samples and instructions to try out retrieving secrets
Configuration
Get configuration
fromdapr.clientsimportDaprClientwithDaprClient()asd:# Get Configurationconfiguration=d.get_configuration(store_name='configurationstore',keys=['orderId'],config_metadata={})
Subscribe to configuration
importasynciofromtimeimportsleepfromdapr.clientsimportDaprClientasyncdefexecuteConfiguration():withDaprClient()asd:storeName='configurationstore'key='orderId'# Wait for sidecar to be up within 20 seconds.d.wait(20)# Subscribe to configuration by key.configuration=awaitd.subscribe_configuration(store_name=storeName,keys=[key],config_metadata={})whileTrue:ifconfiguration!=None:items=configuration.get_items()forkey,iteminitems:print(f"Subscribe key={key} value={item.value} version={item.version}",flush=True)else:print("Nothing yet")sleep(5)asyncio.run(executeConfiguration())
Visit Python SDK examples for code samples and instructions to try out configuration.
Distributed Lock
fromdapr.clientsimportDaprClientdefmain():# Lock parametersstore_name='lockstore'# as defined in components/lockstore.yamlresource_id='example-lock-resource'client_id='example-client-id'expiry_in_seconds=60withDaprClient()asdapr:print('Will try to acquire a lock from lock store named [%s]'%store_name)print('The lock is for a resource named [%s]'%resource_id)print('The client identifier is [%s]'%client_id)print('The lock will will expire in %s seconds.'%expiry_in_seconds)withdapr.try_lock(store_name,resource_id,client_id,expiry_in_seconds)aslock_result:assertlock_result.success,'Failed to acquire the lock. Aborting.'print('Lock acquired successfully!!!')# At this point the lock was released - by magic of the `with` clause ;)unlock_result=dapr.unlock(store_name,resource_id,client_id)print('We already released the lock so unlocking will not work.')print('We tried to unlock it anyway and got back [%s]'%unlock_result.status)
Visit Python SDK examples for code samples and instructions to try out distributed lock.
Cryptography
fromdapr.clientsimportDaprClientmessage='The secret is "passw0rd"'defmain():withDaprClient()asd:resp=d.encrypt(data=message.encode(),options=EncryptOptions(component_name='crypto-localstorage',key_name='rsa-private-key.pem',key_wrap_algorithm='RSA',),)encrypt_bytes=resp.read()resp=d.decrypt(data=encrypt_bytes,options=DecryptOptions(component_name='crypto-localstorage',key_name='rsa-private-key.pem',),)decrypt_bytes=resp.read()print(decrypt_bytes.decode())# The secret is "passw0rd"
The interface defines the actor contract that is shared between the actor implementation and the clients calling the actor. Because a client may depend on it, it typically makes sense to define it in an assembly that is separate from the actor implementation.
An actor service hosts the virtual actor. It is implemented a class that derives from the base type Actor and implements the interfaces defined in the actor interface.
Actors can be created using one of the Dapr actor extensions:
Mock actors are created by passing your actor class and an actor ID (a string) to the create_mock_actor function. This function returns an instance of the actor with many internal methods overridden. Instead of interacting with Dapr for tasks like saving state or managing timers, the mock actor uses in-memory state to simulate these behaviors.
This state can be accessed through the following variables:
IMPORTANT NOTE: Due to type hinting issues as discussed further down, these variables will not be visible to type hinters/linters/etc, who will think they are invalid variables. You will need to use them with #type: ignore in order to satisfy any such systems.
_state_manager._mock_state() A [str, object] dict where all the actor state is stored. Any variable saved via _state_manager.save_state(key, value), or any other statemanager method is stored in the dict as that key, value pair. Any value loaded via try_get_state or any other statemanager method is taken from this dict.
_state_manager._mock_timers() A [str, ActorTimerData] dict which holds the active actor timers. Any actor method which would add or remove a timer adds or pops the appropriate ActorTimerData object from this dict.
_state_manager._mock_reminders() A [str, ActorReminderData] dict which holds the active actor reminders. Any actor method which would add or remove a timer adds or pops the appropriate ActorReminderData object from this dict.
Note: The timers and reminders will never actually trigger. The dictionaries exist only so methods that should add or remove timers/reminders can be tested. If you need to test the callbacks they should activate, you should call them directly with the appropriate values:
result = await mock_actor.recieve_reminder(name, state, due_time, period, _ttl)
# Test the result directly or test for side effects (like changing state) by querying `_state_manager._mock_state`
Usage and Limitations
To allow for more fine-grained control, the _on_activate method will not be called automatically the way it is when Dapr initializes a new Actor instance. You should call it manually as needed as part of your tests.
A current limitation of the mock actor system is that it does not call the _on_pre_actor_method and _on_post_actor_method methods. You can always call these methods manually as part of a test.
The __init__, register_timer, unregister_timer, register_reminder, unregister_reminder methods are all overwritten by the MockActor class that gets applied as a mixin via create_mock_actor. If your actor itself overwrites these methods, those modifications will themselves be overwritten and the actor will likely not behave as you expect.
note: __init__ is a special case where you are expected to define it as
Mock actors work fine with this, but if you have added any extra logic into __init__, it will be overwritten. It is worth noting that the correct way to apply logic on initialization is via _on_activate (which can also be safely used with mock actors) instead of __init__.
If you have an actor which does override default Dapr actor methods, you can create a custom subclass of the MockActor class (from MockActor.py) which implements whatever custom logic you have along with interacting with _mock_state, _mock_timers, and _mock_reminders as normal, and then applying that custom class as a mixin via a create_mock_actor function you define yourself.
The actor _runtime_ctx variable is set to None. All the normal actor methods have been overwritten such as to not call it, but if your code itself interacts directly with _runtime_ctx, tests may fail.
The actor _state_manager is overwritten with an instance of MockStateManager. This has all the same methods and functionality of the base ActorStateManager, except for using the various _mock variables for storing data instead of the _runtime_ctx. If your code implements its own custom state manager it will be overwritten and tests will likely fail.
Type Hinting
Because of Python’s lack of a unified method for type hinting type intersections (see: python/typing #213), type hinting unfortunately doesn’t work with Mock Actors. The return type is type hinted as “instance of Actor subclass T” when it should really be type hinted as “instance of MockActor subclass T” or “instance of type intersection [Actor subclass T, MockActor]” (where, it is worth noting, MockActor is itself a subclass of Actor).
This means that, for example, if you hover over mockactor._state_manager in a code editor, it will come up as an instance of ActorStateManager (instead of MockStateManager), and various IDE helper functions (like VSCode’s Go to Definition, which will bring you to the definition of ActorStateManager instead of MockStateManager) won’t work properly.
For now, this issue is unfixable, so it’s merely something to be noted because of the confusion it might cause. If in the future it becomes possible to accurately type hint cases like this feel free to open an issue about implementing it.
6.3 - Dapr Python SDK extensions
Python SDK for developing Dapr applications
6.3.1 - Getting started with the Dapr Python gRPC service extension
How to get up and running with the Dapr Python gRPC extension
The Dapr Python SDK provides a built in gRPC server extension, dapr.ext.grpc, for creating Dapr services.
Installation
You can download and install the Dapr gRPC server extension with:
pip install "dapr[grpc]"
Note
The development version will contain features and behavior that will be compatible with the pre-release version of the Dapr runtime. Only tagged releases are published to PyPI, so install the development version from the GitHub repository. Make sure to uninstall any stable versions of the Python SDK before installing it.
Starting with Dapr 1.19, this extension is an extra of the dapr package. The dapr-ext-grpc package is no longer published. If you installed it before, follow the upgrade steps to move to the extra. The import path does not change.
Examples
The App object can be used to create a server.
Listen for service invocation requests
The InvokeMethodReqest and InvokeMethodResponse objects can be used to handle incoming requests.
A simple service that will listen and respond to requests will look like:
When subscribing to a topic, you can instruct dapr whether the event delivered has been accepted, or whether it should be dropped, or retried later.
Annotate the event parameter of each handler with SubscriptionMessage, the same type that streaming subscriptions deliver. It gives you the parsed payload (data()), the delivery metadata (metadata()) and the CloudEvent fields, such as id(), type() and extensions().
fromtypingimportOptionalfromdapr.ext.grpcimportApp,Rule,SubscriptionMessagefromdapr.clients.grpc._responseimportTopicEventResponseapp=App()# Default subscription for a topic@app.subscribe(pubsub_name='pubsub',topic='TOPIC_A')defmytopic(event:SubscriptionMessage)->Optional[TopicEventResponse]:print(event.data(),flush=True)# Returning None (or not doing a return explicitly) is equivalent# to returning a TopicEventResponse("success").# You can also return TopicEventResponse("retry") for dapr to log# the message and retry delivery later, or TopicEventResponse("drop")# for it to drop the messagereturnTopicEventResponse("success")# Specific handler using Pub/Sub routing@app.subscribe(pubsub_name='pubsub',topic='TOPIC_A',rule=Rule("event.type == \"important\"",1))defmytopic_important(event:SubscriptionMessage)->None:print(event.data(),flush=True)# Handler with disabled topic validation@app.subscribe(pubsub_name='pubsub-mqtt',topic='topic/#',disable_topic_validation=True,)defmytopic_wildcard(event:SubscriptionMessage)->None:print(event.data(),flush=True)app.run(50051)
Handlers that are not annotated, or that are annotated with cloudevents.sdk.event.v1.Event, receive the CloudEvents-based event, and subscribe() emits a DeprecationWarning when it registers them. Annotate them with SubscriptionMessage before the type is removed:
In 1.20, handlers that are not annotated receive SubscriptionMessage. Only handlers annotated with the CloudEvents type still receive it.
In 1.21, the dapr[grpc] extra no longer installs cloudevents.
How to create Dapr Python virtual actors and pubsub with the FastAPI extension
The Dapr Python SDK provides integration with FastAPI using the dapr.ext.fastapi extension.
Installation
You can download and install the Dapr FastAPI extension with:
pip install "dapr[fastapi]"
Note
The development version will contain features and behavior that will be compatible with the pre-release version of the Dapr runtime. Only tagged releases are published to PyPI, so install the development version from the GitHub repository. Make sure to uninstall any stable versions of the Python SDK before installing it.
Starting with Dapr 1.19, this extension is an extra of the dapr package. The dapr-ext-fastapi package is no longer published. If you installed it before, follow the upgrade steps to move to the extra. The import path does not change.
Example
Subscribing to events of different types
importuvicornfromfastapiimportBody,FastAPIfromdapr.ext.fastapiimportDaprAppfrompydanticimportBaseModelclassRawEventModel(BaseModel):body:strclassUser(BaseModel):id:intname:strclassCloudEventModel(BaseModel):data:Userdatacontenttype:strid:strpubsubname:strsource:strspecversion:strtopic:strtraceid:strtraceparent:strtracestate:strtype:strapp=FastAPI()dapr_app=DaprApp(app)# Allow handling event with any structure (Easiest, but least robust)# dapr publish --publish-app-id sample --topic any_topic --pubsub pubsub --data '{"id":"7", "desc": "good", "size":"small"}'@dapr_app.subscribe(pubsub='pubsub',topic='any_topic')defany_event_handler(event_data=Body()):print(event_data)# For robustness choose one of the below based on if publisher is using CloudEvents# Handle events sent with CloudEvents# dapr publish --publish-app-id sample --topic cloud_topic --pubsub pubsub --data '{"id":"7", "name":"Bob Jones"}'@dapr_app.subscribe(pubsub='pubsub',topic='cloud_topic')defcloud_event_handler(event_data:CloudEventModel):print(event_data)# Handle raw events sent without CloudEvents# curl -X "POST" http://localhost:3500/v1.0/publish/pubsub/raw_topic?metadata.rawPayload=true -H "Content-Type: application/json" -d '{"body": "345"}'@dapr_app.subscribe(pubsub='pubsub',topic='raw_topic')defraw_event_handler(event_data:RawEventModel):print(event_data)if__name__=="__main__":uvicorn.run(app,host="0.0.0.0",port=30212)
Creating an actor
fromfastapiimportFastAPIfromdapr.ext.fastapiimportDaprActorfromdemo_actorimportDemoActorapp=FastAPI(title=f'{DemoActor.__name__}Service')# Add Dapr Actor Extensionactor=DaprActor(app)@app.on_event("startup")asyncdefstartup_event():# Register DemoActorawaitactor.register_actor(DemoActor)@app.get("/GetMyData")defget_my_data():return"{'message': 'myData'}"
6.3.3 - Dapr Python SDK integration with Flask
How to create Dapr Python virtual actors with the Flask extension
The Dapr Python SDK provides integration with Flask using the dapr.ext.flask extension.
Installation
You can download and install the Dapr Flask extension with:
pip install "dapr[flask]"
Note
The development version will contain features and behavior that will be compatible with the pre-release version of the Dapr runtime. Only tagged releases are published to PyPI, so install the development version from the GitHub repository. Make sure to uninstall any stable versions of the Python SDK before installing it.
Starting with Dapr 1.19, this extension is an extra of the dapr package. The flask-dapr package is no longer published. If you installed it before, follow the upgrade steps to move to the extra.
Note
The flask_dapr import path still works as a thin compatibility shim, but it emits a FutureWarning. Import from dapr.ext.flask instead.
6.3.4 - Dapr Python SDK integration with Dapr Workflow extension
How to get up and running with the Dapr Workflow extension
The Dapr Python SDK provides a built-in Dapr Workflow extension, dapr.ext.workflow, for creating Dapr services.
Installation
You can download and install the Dapr Workflow extension with:
pip install "dapr[workflow]"
Note
The development version will contain features and behavior that will be compatible with the pre-release version of the Dapr runtime. Only tagged releases are published to PyPI, so install the development version from the GitHub repository. Make sure to uninstall any stable versions of the Python SDK before installing it.
Starting with Dapr 1.19, this extension is an extra of the dapr package. The dapr-ext-workflow package is no longer published. If you installed it before, follow the upgrade steps to move to the extra. The import path does not change.
Example
fromtimeimportsleepimportdapr.ext.workflowaswfwfr=wf.WorkflowRuntime()@wfr.workflow(name='random_workflow')deftask_chain_workflow(ctx:wf.DaprWorkflowContext,wf_input:int):try:result1=yieldctx.call_activity(step1,input=wf_input)result2=yieldctx.call_activity(step2,input=result1)exceptExceptionase:yieldctx.call_activity(error_handler,input=str(e))raisereturn[result1,result2]@wfr.activity(name='step1')defstep1(ctx,activity_input):print(f'Step 1: Received input: {activity_input}.')# Do some workreturnactivity_input+1@wfr.activitydefstep2(ctx,activity_input):print(f'Step 2: Received input: {activity_input}.')# Do some workreturnactivity_input*2@wfr.activitydeferror_handler(ctx,error):print(f'Executing error handler: {error}.')# Do some compensating workif__name__=='__main__':wfr.start()sleep(10)# wait for workflow runtime to startwf_client=wf.DaprWorkflowClient()instance_id=wf_client.schedule_new_workflow(workflow=task_chain_workflow,input=42)print(f'Workflow started. Instance ID: {instance_id}')state=wf_client.wait_for_workflow_completion(instance_id,timeout_in_seconds=60)print(f'Workflow completed! Status: {state.runtime_status}')wfr.shutdown()
Learn more about authoring and managing workflows:
From Dapr 1.19, the workflow worker keeps the history of each workflow instance in memory, so the Dapr sidecar sends only the new events on each turn. This is on by default. To turn it off, for example when worker memory is limited, set disable_stateful_history=True on WorkflowRuntime:
wait_for_workflow_start and wait_for_workflow_completion ignore the DAPR_API_TIMEOUT_SECONDS environment variable. Without the timeout_in_seconds argument, they wait with no time limit. Pass timeout_in_seconds to limit how long the call waits. When the time limit passes, the call raises TimeoutError:
Note: Since Python3.exe is not defined in Windows, you may need to use python simple.py instead of python3 simple.py.
Expected output
- "== APP == Hi Counter!"
- "== APP == New counter value is: 1!"
- "== APP == New counter value is: 11!"
- "== APP == Retry count value is: 0!"
- "== APP == Retry count value is: 1! This print statement verifies retry"
- "== APP == Appending 1 to child_orchestrator_string!"
- "== APP == Appending a to child_orchestrator_string!"
- "== APP == Appending a to child_orchestrator_string!"
- "== APP == Appending 2 to child_orchestrator_string!"
- "== APP == Appending b to child_orchestrator_string!"
- "== APP == Appending b to child_orchestrator_string!"
- "== APP == Appending 3 to child_orchestrator_string!"
- "== APP == Appending c to child_orchestrator_string!"
- "== APP == Appending c to child_orchestrator_string!"
- "== APP == Get response from hello_world_wf after pause call: Suspended"
- "== APP == Get response from hello_world_wf after resume call: Running"
- "== APP == New counter value is: 111!"
- "== APP == New counter value is: 1111!"
- "== APP == Workflow completed! Result: "Completed"
What happened?
When you run the application, several key workflow features are shown:
Workflow and Activity Registration: The application uses Python decorators to automatically register workflows and activities with the runtime. This decorator-based approach provides a clean, declarative way to define your workflow components:
Workflow Lifecycle Management: The example demonstrates how to pause and resume the workflow:
wf_client.pause_workflow(instance_id=instance_id)metadata=wf_client.get_workflow_state(instance_id=instance_id)# ... check status ...wf_client.resume_workflow(instance_id=instance_id)
Event Raising: After resuming, the workflow raises an event:
From Dapr 1.19, DaprWorkflowClient and the async client in dapr.ext.workflow.aio can list the workflow instances of the app, read the history of an instance, and rerun a finished instance from one of its history events. Use them to find instances without storing their IDs yourself, to see where a failed instance stopped, and to retry it from that step with a corrected input instead of from the start.
importdapr.ext.workflowaswfwf_client=wf.DaprWorkflowClient()# Page through the instance IDs of this app, 100 IDs per requestforinstance_idinwf_client.iter_workflow_instance_ids(page_size=100):print(instance_id)# Read the history of an instance, oldest event firsthistory=wf_client.get_workflow_history('order-123')foreventinhistory:print(event.event_id,event.event_type.name,event.name)# Rerun from the scheduling of the charge_order activity, with a new inputevent_id=next(e.event_idforeinhistoryife.is_rerunnableande.name=='charge_order')new_instance_id=wf_client.rerun_workflow_from_event('order-123',event_id,input=25)
list_workflow_instance_ids(page_size=..., continuation_token=...) returns one page with instance_ids and continuation_token. iter_workflow_instance_ids() fetches the pages for you. Listing needs an actor state store that can list keys. Otherwise the call raises NotImplementedError.
rerun_workflow_from_event starts a new instance and leaves the source instance unchanged. The source instance must be in a terminal state and must not be a child workflow. The event must be the scheduling of an activity, the creation of a timer or the creation of a child workflow, which is_rerunnable reports. Omit input to keep the recorded input, and pass new_instance_id to choose the ID of the new instance.
By default, the workflow gRPC channel receives messages of up to 4 MiB, the gRPC default, so a larger message, for example a large workflow input or output, fails with RESOURCE_EXHAUSTED. To raise the limit for sending and receiving, pass max_grpc_message_length in bytes to WorkflowRuntime, DaprWorkflowClient and the async DaprWorkflowClient, or set the DAPR_GRPC_MAX_INBOUND_MESSAGE_SIZE_BYTES environment variable. The argument takes precedence over the environment variable.
wfr.start() waits until the worker has opened its work-item stream to the Dapr sidecar, for 30 seconds by default (worker_ready_timeout on WorkflowRuntime). After that, wfr.wait_for_worker_ready(timeout=30.0) returns True when the stream is open, and False if the stream does not open again within the timeout, for example while the worker reconnects after a sidecar restart. Use it in a readiness check, so that the app reports not ready while its worker cannot receive work. Before Python SDK 1.19, it kept returning True after the first connection.
6.3.5 - Dapr Python SDK integration with Databricks Lakeflow
How to turn Databricks Lakeflow streaming records into durable Dapr Workflow executions
The Dapr Python SDK provides a Databricks Lakeflow integration, dapr.ext.databricks, that turns
records emitted by a Lakeflow streaming pipeline into durable Dapr Workflow
executions.
External side effects — freezing a card, calling a partner API, opening a case for a human to
review — have fundamentally different reliability requirements than transformations inside a data
pipeline. Instead of writing that business logic directly inside Lakeflow’s foreach_batch_sink,
hand the record to a Dapr Workflow and let it continue independently, with retries, timers,
human-in-the-loop waits, and crash recovery, all outside the streaming query’s lifetime.
register_workflow_sink registers the foreach_batch_sink for you — you do not write one by hand
for the standard case. Every workflow instance ID is derived deterministically from
namespace/name/generation and the record’s own business key (id_field, never a random
UUID), so a Lakeflow retry of the same micro-batch never starts a second workflow execution for the
same record.
Dapr Workflow, which every scheduled instance runs on
6.3.5.1 - Getting started with the Dapr Databricks Python SDK extension
How to turn Databricks Lakeflow streaming records into durable Dapr Workflow executions
Let’s run a fraud-remediation example that turns simulated Databricks Lakeflow records into durable
Dapr Workflow executions. With the
provided example, you will:
Run a Dapr Workflow (fraud_remediation) that freezes a card, notifies the customer, opens an
investigation, waits for an analyst decision, and resolves the case
Feed it two simulated Lakeflow micro-batches through dapr.ext.databricks’s batch handler — no
Databricks workspace or pyspark required for this part
See a retried micro-batch schedule zero duplicate workflow executions, because every instance ID
is derived deterministically from the record’s own business key
Databricks Lakeflow identifies a suspicious transaction
|
dapr.ext.databricks sink
|
FraudRemediationWorkflow
|
freeze card -> notify customer -> open investigation
|
wait for analyst decision
|
resolve case
This example uses the default configuration from dapr init in
self-hosted mode.
fraud_remediation_workflow.py — the Dapr Workflow side: the fraud_remediation workflow and
its activities. Its __main__ block simulates a small Lakeflow micro-batch in-process using
DaprWorkflowBatchHandler directly — the same building block register_workflow_sink uses
internally — then retries the identical batch to demonstrate that no duplicate workflow
executions are created. This is the file you’ll run below.
fraud_remediation_pipeline.py — the Databricks Lakeflow side: register_workflow_sink plus
the @dp.append_flow that feeds it. This file is illustrative only — it depends on
pyspark.pipelines (provided by the Databricks Lakeflow runtime, not pip install pyspark) and a
Unity Catalog table, so it can’t run locally. Copy its pattern into an actual Databricks Lakeflow
pipeline to wire the integration up for real.
Run the application locally
To run the example, start the Python program and a Dapr sidecar together:
dapr run --app-id fraud-remediation-demo -- python3 fraud_remediation_workflow.py
Expected output (interleaved with Dapr/durabletask log lines):
*** Lakeflow micro-batch 1: scheduling fraud remediation workflows
*** Micro-batch 1 handed off; each workflow now runs independently
*** Simulating a Lakeflow retry of the same micro-batch
*** Retry complete: no duplicate workflow executions were created
*** Triggered by sink 'fraud_actions', batch 1
*** Freezing card for transaction T-1001 (customer C-1)
*** Notifying customer C-1 about the frozen card
*** Opened investigation CASE-T-1001
*** Resolved CASE-T-1001: CONFIRMED_FRAUD
*** Workflow fraud-fraud_actions-v1-T-1001 completed: {"case_id": "CASE-T-1001", "decision": "CONFIRMED_FRAUD"}
... (and the same for T-1002)
Look for the structured dapr.ext.databricks: sink=... outcome=... log lines: the first
micro-batch reports outcome=newly_scheduled for both transactions, and the simulated retry
reports outcome=already_existed for both — the same transaction never starts a second
remediation workflow.
When you’re done:
dapr stop --app-id fraud-remediation-demo
What happened?
register_workflow_sink (used inside the example’s batch handler, and the function you’d
call from a real @dp.append_flow pipeline) computes a deterministic workflow instance ID for
every record — <namespace>-<sink>-<generation>-<business_key> — never a random UUID.
For each record, the handler checks whether a workflow instance with that ID already exists. If
not, it schedules one; if so, it treats the record as already handled. Both the first micro-batch
and the simulated retry go through this same check, which is why the retry logs
outcome=already_existed instead of starting a second fraud_remediation execution.
Once scheduled, each workflow instance runs independently of the Lakeflow batch that created
it — freeze card -> notify customer -> open investigation -> wait for an analyst decision -> resolve case continues even after the streaming micro-batch has moved on.
If neither the “does it exist” check nor the schedule call can complete (Dapr unavailable, a
timeout, an auth failure), the whole micro-batch fails so Lakeflow retries it — the sink never
reports success while a record’s fate is unknown.
This is retry-safe, not exactly-once: it depends on Dapr retaining that instance’s
history/state. See the
delivery semantics and full-refresh section
of the extension’s reference docs for what that means for your workflow-history retention, and how
generation lets you deliberately replay business actions after a full Lakeflow pipeline refresh.
Next steps
Copy fraud_remediation_pipeline.py’s pattern into a real Databricks Lakeflow pipeline to wire
this up against real streaming data.
See the
full configuration reference —
composite business keys, custom input mapping, bounded concurrency, and observability.
Learn more about authoring the workflow side: Dapr Workflow.
6.4 -
title: “Conversation API (Python) – Recommended Usage”
linkTitle: “Conversation”
weight: 11000
type: docs
description: Recommended patterns for using Dapr Conversation API in Python with and without tools, including multi‑turn flows and safety guidance.
The Dapr Conversation API is currently in alpha. This page presents the recommended, minimal patterns to use it effectively with the Python SDK:
fromdapr.clientsimportDaprClientfromdapr.clients.grpcimportconversation# Build a single‑turn Alpha2 inputuser_msg=conversation.create_user_message("What's Dapr?")alpha2_input=conversation.ConversationInputAlpha2(messages=[user_msg])withDaprClient()asclient:resp=client.converse_alpha2(name="echo",# replace with your LLM component nameinputs=[alpha2_input],temperature=1,)formsginresp.to_assistant_messages():ifmsg.of_assistant.content:print(msg.of_assistant.content[0].text)
Key points:
Use conversation.create_user_message to build messages.
Wrap into ConversationInputAlpha2(messages=[...]) and pass to converse_alpha2.
Use response.to_assistant_messages() to iterate assistant outputs.
Tools: decorator‑based (recommended)
Decorator-based tools offer a clean, ergonomic approach. Define a function with clear type hints and detail docstring, this is important for the LLM to understand how or when to invoke the tool;
decorate it with @conversation.tool. Registered tools can be passed to the LLM and invoked via tool calls.
fromdapr.clientsimportDaprClientfromdapr.clients.grpcimportconversation@conversation.tooldefget_weather(location:str,unit:str='fahrenheit')->str:"""Get current weather for a location."""# Replace with a real implementationreturnf"Weather in {location} (unit={unit})"user_msg=conversation.create_user_message("What's the weather in Paris?")alpha2_input=conversation.ConversationInputAlpha2(messages=[user_msg])withDaprClient()asclient:response=client.converse_alpha2(name="openai",# your LLM componentinputs=[alpha2_input],tools=conversation.get_registered_tools(),# tools registered by @conversation.tooltool_choice='auto',temperature=1,)# Inspect assistant messages, including any tool callsformsginresponse.to_assistant_messages():ifmsg.of_assistant.tool_calls:fortcinmsg.of_assistant.tool_calls:print(f"Tool call: {tc.function.name} args={tc.function.arguments}")elifmsg.of_assistant.content:print(msg.of_assistant.content[0].text)
Notes:
Use conversation.get_registered_tools() to collect all @conversation.tool decorated functions.
The binder validates/coerces params using your function signature. Keep annotations accurate.
Minimal multi‑turn with tools
This is the go‑to loop for tool‑using conversations:
Warning
Do not blindly auto‑execute tool calls returned by the LLM unless you trust all tools registered. Treat tool names and arguments as untrusted input.
For async or I/O‑bound tools, prefer conversation.execute_registered_tool_async(..., timeout=...) and set conservative timeouts.
Consider adding a policy layer or a user confirmation step before execution in sensitive contexts.
Log and monitor tool usage; fail closed when validation fails.
fromdapr.clientsimportDaprClientfromdapr.clients.grpcimportconversation@conversation.tooldefget_weather(location:str,unit:str='fahrenheit')->str:returnf"Weather in {location} (unit={unit})"history:list[conversation.ConversationMessage]=[conversation.create_user_message("What's the weather in San Francisco?")]withDaprClient()asclient:# Turn 1resp1=client.converse_alpha2(name="openai",inputs=[conversation.ConversationInputAlpha2(messages=history)],tools=conversation.get_registered_tools(),tool_choice='auto',temperature=1,)# Append assistant messages; execute tool calls; append tool resultsformsginresp1.to_assistant_messages():history.append(msg)fortcinmsg.of_assistant.tool_calls:# IMPORTANT: validate inputs and enforce guardrails in productiontool_output=conversation.execute_registered_tool(tc.function.name,tc.function.arguments)history.append(conversation.create_tool_message(tool_id=tc.id,name=tc.function.name,content=str(tool_output)))# Turn 2 (LLM sees tool result)history.append(conversation.create_user_message("Should I bring an umbrella?"))resp2=client.converse_alpha2(name="openai",inputs=[conversation.ConversationInputAlpha2(messages=history)],tools=conversation.get_registered_tools(),temperature=1,)formsginresp2.to_assistant_messages():history.append(msg)ifnotmsg.of_assistant.tool_callsandmsg.of_assistant.content:print(msg.of_assistant.content[0].text)
Tips:
Always append assistant messages to history.
Execute each tool call (with validation) and append a tool message with the tool output.
The next turn includes these tool results so the LLM can reason with them.
Functions as tools: alternatives
When decorators aren’t practical, two options exist.
A) Automatic schema from a typed function:
fromenumimportEnumfromdapr.clients.grpcimportconversationclassUnits(Enum):CELSIUS='celsius'FAHRENHEIT='fahrenheit'defget_weather(location:str,unit:Units=Units.FAHRENHEIT)->str:returnf"Weather in {location}"fn=conversation.ConversationToolsFunction.from_function(get_weather)weather_tool=conversation.ConversationTools(function=fn)
B) Manual JSON Schema (fallback):
fromdapr.clients.grpcimportconversationfn=conversation.ConversationToolsFunction(name='get_weather',description='Get current weather',parameters={'type':'object','properties':{'location':{'type':'string'},'unit':{'type':'string','enum':['celsius','fahrenheit']},},'required':['location'],},)weather_tool=conversation.ConversationTools(function=fn)
Async variant
Use the asynchronous client and async tool execution helpers as needed.
importasynciofromdapr.aio.clientsimportDaprClientasAsyncDaprClientfromdapr.clients.grpcimportconversation@conversation.tooldefget_time()->str:return'2025-01-01T12:00:00Z'asyncdefmain():asyncwithAsyncDaprClient()asclient:msg=conversation.create_user_message('What time is it?')inp=conversation.ConversationInputAlpha2(messages=[msg])resp=awaitclient.converse_alpha2(name='openai',inputs=[inp],tools=conversation.get_registered_tools())forminresp.to_assistant_messages():ifm.of_assistant.content:print(m.of_assistant.content[0].text)asyncio.run(main())
If you need to execute tools asynchronously (e.g., network I/O), implement async functions and use conversation.execute_registered_tool_async with timeouts.
Safety and validation (must‑read)
An LLM may suggest tool calls. Treat all model‑provided parameters as untrusted input.
Recommendations:
Register only trusted functions as tools. Prefer the @conversation.tool decorator for clarity and automatic schema generation.
Use precise type annotations and docstrings. The SDK converts function signatures to JSON schema and binds parameters with type coercion and rejection of unexpected/invalid fields.
Add guardrails for tools that can cause side effects (filesystem, network, subprocess). Consider allow‑lists, sandboxing, and limits.
Validate arguments before execution. For example, sanitize file paths or restrict URLs/domains.
Consider timeouts and concurrency controls. For async tools, pass a timeout to execute_registered_tool_async(..., timeout=...).
Log and monitor tool usage. Fail closed: if validation fails, avoid executing the tool and inform the user safely.
See also inline notes in dapr/clients/grpc/conversation.py (e.g., tool(), ConversationTools, execute_registered_tool) for parameter binding and error handling details.
Key helper methods (quick reference)
This section summarizes helper utilities available in dapr.clients.grpc.conversation used throughout the examples.
Manually manage the tool registry (e.g., advanced scenarios, tests, cleanup).
Names must be unique; unregister to avoid collisions in long-lived processes.
execute_registered_tool(name: str, params: Mapping|Sequence|str|None) -> Any
Synchronously executes a registered tool by name.
params accepts kwargs (mapping), args (sequence), JSON string, or None. If a JSON string is provided (as commonly returned by LLMs), it is parsed for you.
Parameters are validated and coerced against the function signature/schema; unexpected or invalid fields raise errors.
Security: treat params as untrusted; add guardrails for side effects.
execute_registered_tool_async(name: str, params: Mapping|Sequence|str|None, *, timeout: float|None=None) -> Any
Async counterpart. Supports timeouts, which are recommended for I/O-bound tools.
Prefer this for async tools or when using the aio client.
Derives a JSON schema from a typed Python function (annotations + optional docstring) and optionally registers a tool.
Typical usage: spec = conversation.ConversationToolsFunction.from_function(my_func); then either rely on auto-registration or wrap with ConversationTools(function=spec) and call register_tool(spec.name, tool) or pass [tool] directly to tools=.
Convenience to transform the response outputs into assistant ConversationMessage objects you can append to history directly (including tool_calls when present).
Tip: The @conversation.tool decorator is the easiest way to create a tool. It auto-generates the schema from your function, allows an optional namespace/name override, and auto-registers the tool (you can set register=False to defer registration).
7 - Dapr Rust SDK
Rust SDK packages for developing Dapr applications
Note
The Dapr Rust-SDK is currently in Alpha. Work is underway to bring it to a stable release and will likely involve breaking changes.
A client library to help build Dapr applications using Rust. This client is targeting support for all public Dapr APIs while focusing on idiomatic Rust experiences and developer productivity.
Client
Use the Rust Client SDK for invoking public Dapr APIs
The Dapr Client provides access to these state management methods: save_state
, get_state, delete_state that can be used like so:
letstore_name=String::from("statestore");letkey=String::from("hello");letval=String::from("world").into_bytes();// save key-value pair in the state store
client.save_state(store_name,key,val,None,None,None).await?;letget_response=client.get_state("statestore","hello",None).await?;// delete a value from the state store
client.delete_state("statestore","hello",None).await?;
Multiple states can be sent with the save_bulk_states method.