@temporalio/core-bridge 1.8.5 → 1.9.0-rc.0

package/sdk-core/{protos → sdk-core-protos/protos}/api_upstream/temporal/api/workflowservice/v1/service.proto

@@ -33,6 +33,7 @@ option csharp_namespace = "Temporalio.Api.WorkflowService.V1";
 
 
 import "temporal/api/workflowservice/v1/request_response.proto";
+import "google/api/annotations.proto";
 
 // WorkflowService API defines how Temporal SDKs and other clients interact with the Temporal server
 // to create and interact with workflows and activities.
@@ -54,24 +55,33 @@ service WorkflowService {
     // isolation for all resources within the namespace. All resources belongs to exactly one
     // namespace.
     rpc RegisterNamespace (RegisterNamespaceRequest) returns (RegisterNamespaceResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces"
+            body: "*"
+        };
     }
 
     // DescribeNamespace returns the information and configuration for a registered namespace.
     rpc DescribeNamespace (DescribeNamespaceRequest) returns (DescribeNamespaceResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}"
+        };
     }
 
     // ListNamespaces returns the information and configuration for all namespaces.
     rpc ListNamespaces (ListNamespacesRequest) returns (ListNamespacesResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces"
+        };
     }
 
     // UpdateNamespace is used to update the information and configuration of a registered
     // namespace.
-    //
-    // (-- api-linter: core::0134::method-signature=disabled
-    //     aip.dev/not-precedent: UpdateNamespace RPC doesn't follow Google API format. --)
-    // (-- api-linter: core::0134::response-message-name=disabled
-    //     aip.dev/not-precedent: UpdateNamespace RPC doesn't follow Google API format. --)
     rpc UpdateNamespace (UpdateNamespaceRequest) returns (UpdateNamespaceResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/update"
+            body: "*"
+        };
     }
 
     // DeprecateNamespace is used to update the state of a registered namespace to DEPRECATED.
@@ -79,6 +89,9 @@ service WorkflowService {
     // Once the namespace is deprecated it cannot be used to start new workflow executions. Existing
     // workflow executions will continue to run on deprecated namespaces.
     // Deprecated.
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: Deprecated --)
     rpc DeprecateNamespace (DeprecateNamespaceRequest) returns (DeprecateNamespaceResponse) {
     }
 
@@ -88,17 +101,27 @@ service WorkflowService {
     // also schedule the first workflow task. Returns `WorkflowExecutionAlreadyStarted`, if an
     // instance already exists with same workflow id.
     rpc StartWorkflowExecution (StartWorkflowExecutionRequest) returns (StartWorkflowExecutionResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/workflows/{workflow_id}"
+            body: "*"
+        };
     }
 
     // GetWorkflowExecutionHistory returns the history of specified workflow execution. Fails with
     // `NotFound` if the specified workflow execution is unknown to the service.
     rpc GetWorkflowExecutionHistory (GetWorkflowExecutionHistoryRequest) returns (GetWorkflowExecutionHistoryResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/workflows/{execution.workflow_id}/history"
+        };
     }
     
     // GetWorkflowExecutionHistoryReverse returns the history of specified workflow execution in reverse 
     // order (starting from last event). Fails with`NotFound` if the specified workflow execution is 
     // unknown to the service.
     rpc GetWorkflowExecutionHistoryReverse (GetWorkflowExecutionHistoryReverseRequest) returns (GetWorkflowExecutionHistoryReverseResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/workflows/{execution.workflow_id}/history-reverse"
+        };
     }
 
     // PollWorkflowTaskQueue is called by workers to make progress on workflows.
@@ -107,6 +130,9 @@ service WorkflowService {
     // tasks. The worker is expected to call `RespondWorkflowTaskCompleted` when it is done
     // processing the task. The service will create a `WorkflowTaskStarted` event in the history for
     // this task before handing it to the worker.
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do not expose worker API to HTTP. --)
     rpc PollWorkflowTaskQueue (PollWorkflowTaskQueueRequest) returns (PollWorkflowTaskQueueResponse) {
     }
 
@@ -116,6 +142,9 @@ service WorkflowService {
     // Completing a WorkflowTask will write a `WORKFLOW_TASK_COMPLETED` event to the workflow's
     // history, along with events corresponding to whatever commands the SDK generated while
     // executing the task (ex timer started, activity task scheduled, etc).
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do not expose worker API to HTTP. --)
     rpc RespondWorkflowTaskCompleted (RespondWorkflowTaskCompletedRequest) returns (RespondWorkflowTaskCompletedResponse) {
     }
 
@@ -128,6 +157,9 @@ service WorkflowService {
     //
     // Temporal will only append first WorkflowTaskFailed event to the history of workflow execution
     // for consecutive failures.
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do not expose worker API to HTTP. --)
     rpc RespondWorkflowTaskFailed (RespondWorkflowTaskFailedRequest) returns (RespondWorkflowTaskFailedResponse) {
     }
 
@@ -143,6 +175,9 @@ service WorkflowService {
     // (`ACTIVITY_TASK_COMPLETED` / `ACTIVITY_TASK_FAILED` / `ACTIVITY_TASK_TIMED_OUT`) will both be
     // written permanently to Workflow execution history when Activity is finished. This is done to
     // avoid writing many events in the case of a failure/retry loop.
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do not expose worker API to HTTP. --)
     rpc PollActivityTaskQueue (PollActivityTaskQueueRequest) returns (PollActivityTaskQueueResponse) {
     }
 
@@ -153,6 +188,10 @@ service WorkflowService {
     // the workflow history. Calling `RecordActivityTaskHeartbeat` will fail with `NotFound` in
     // such situations, in that event, the SDK should request cancellation of the activity.
     rpc RecordActivityTaskHeartbeat (RecordActivityTaskHeartbeatRequest) returns (RecordActivityTaskHeartbeatResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/activities/heartbeat"
+            body: "*"
+        };
     }
 
     // See `RecordActivityTaskHeartbeat`. This version allows clients to record heartbeats by
@@ -161,6 +200,10 @@ service WorkflowService {
     // (-- api-linter: core::0136::prepositions=disabled
     //     aip.dev/not-precedent: "By" is used to indicate request type. --)
     rpc RecordActivityTaskHeartbeatById (RecordActivityTaskHeartbeatByIdRequest) returns (RecordActivityTaskHeartbeatByIdResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/activities/heartbeat-by-id"
+            body: "*"
+        };
     }
 
     // RespondActivityTaskCompleted is called by workers when they successfully complete an activity
@@ -170,6 +213,10 @@ service WorkflowService {
     // and a new workflow task created for the workflow. Fails with `NotFound` if the task token is
     // no longer valid due to activity timeout, already being completed, or never having existed.
     rpc RespondActivityTaskCompleted (RespondActivityTaskCompletedRequest) returns (RespondActivityTaskCompletedResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/activities/complete"
+            body: "*"
+        };
     }
 
     // See `RecordActivityTaskCompleted`. This version allows clients to record completions by
@@ -178,6 +225,10 @@ service WorkflowService {
     // (-- api-linter: core::0136::prepositions=disabled
     //     aip.dev/not-precedent: "By" is used to indicate request type. --)
     rpc RespondActivityTaskCompletedById (RespondActivityTaskCompletedByIdRequest) returns (RespondActivityTaskCompletedByIdResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/activities/complete-by-id"
+            body: "*"
+        };
     }
 
     // RespondActivityTaskFailed is called by workers when processing an activity task fails.
@@ -186,6 +237,10 @@ service WorkflowService {
     // a new workflow task created for the workflow. Fails with `NotFound` if the task token is no
     // longer valid due to activity timeout, already being completed, or never having existed.
     rpc RespondActivityTaskFailed (RespondActivityTaskFailedRequest) returns (RespondActivityTaskFailedResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/activities/fail"
+            body: "*"
+        };
     }
 
     // See `RecordActivityTaskFailed`. This version allows clients to record failures by
@@ -194,6 +249,10 @@ service WorkflowService {
     // (-- api-linter: core::0136::prepositions=disabled
     //     aip.dev/not-precedent: "By" is used to indicate request type. --)
     rpc RespondActivityTaskFailedById (RespondActivityTaskFailedByIdRequest) returns (RespondActivityTaskFailedByIdResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/activities/fail-by-id"
+            body: "*"
+        };
     }
 
     // RespondActivityTaskFailed is called by workers when processing an activity task fails.
@@ -202,6 +261,10 @@ service WorkflowService {
     // and a new workflow task created for the workflow. Fails with `NotFound` if the task token is
     // no longer valid due to activity timeout, already being completed, or never having existed.
     rpc RespondActivityTaskCanceled (RespondActivityTaskCanceledRequest) returns (RespondActivityTaskCanceledResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/activities/cancel"
+            body: "*"
+        };
     }
 
     // See `RecordActivityTaskCanceled`. This version allows clients to record failures by
@@ -210,6 +273,10 @@ service WorkflowService {
     // (-- api-linter: core::0136::prepositions=disabled
     //     aip.dev/not-precedent: "By" is used to indicate request type. --)
     rpc RespondActivityTaskCanceledById (RespondActivityTaskCanceledByIdRequest) returns (RespondActivityTaskCanceledByIdResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/activities/cancel-by-id"
+            body: "*"
+        };
     }
 
     // RequestCancelWorkflowExecution is called by workers when they want to request cancellation of
@@ -219,6 +286,10 @@ service WorkflowService {
     // workflow history and a new workflow task created for the workflow. It returns success if the requested
     // workflow is already closed. It fails with 'NotFound' if the requested workflow doesn't exist.
     rpc RequestCancelWorkflowExecution (RequestCancelWorkflowExecutionRequest) returns (RequestCancelWorkflowExecutionResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/workflows/{workflow_execution.workflow_id}/cancel"
+            body: "*"
+        };
     }
 
     // SignalWorkflowExecution is used to send a signal to a running workflow execution.
@@ -226,6 +297,10 @@ service WorkflowService {
     // This results in a `WORKFLOW_EXECUTION_SIGNALED` event recorded in the history and a workflow
     // task being created for the execution.
     rpc SignalWorkflowExecution (SignalWorkflowExecutionRequest) returns (SignalWorkflowExecutionResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/workflows/{workflow_execution.workflow_id}/signal/{signal_name}"
+            body: "*"
+        };
     }
 
     // SignalWithStartWorkflowExecution is used to ensure a signal is sent to a workflow, even if
@@ -241,6 +316,10 @@ service WorkflowService {
     // (-- api-linter: core::0136::prepositions=disabled
     //     aip.dev/not-precedent: "With" is used to indicate combined operation. --)
     rpc SignalWithStartWorkflowExecution (SignalWithStartWorkflowExecutionRequest) returns (SignalWithStartWorkflowExecutionResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/workflows/{workflow_id}/signal-with-start/{signal_name}"
+            body: "*"
+        };
     }
 
     // ResetWorkflowExecution will reset an existing workflow execution to a specified
@@ -248,60 +327,86 @@ service WorkflowService {
     // execution instance.
     // TODO: Does exclusive here mean *just* the completed event, or also WFT started? Otherwise the task is doomed to time out?
     rpc ResetWorkflowExecution (ResetWorkflowExecutionRequest) returns (ResetWorkflowExecutionResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/workflows/{workflow_execution.workflow_id}/reset"
+            body: "*"
+        };
     }
 
     // TerminateWorkflowExecution terminates an existing workflow execution by recording a
     // `WORKFLOW_EXECUTION_TERMINATED` event in the history and immediately terminating the
     // execution instance.
     rpc TerminateWorkflowExecution (TerminateWorkflowExecutionRequest) returns (TerminateWorkflowExecutionResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/workflows/{workflow_execution.workflow_id}/terminate"
+            body: "*"
+        };
     }
 
     // DeleteWorkflowExecution asynchronously deletes a specific Workflow Execution (when
     // WorkflowExecution.run_id is provided) or the latest Workflow Execution (when
     // WorkflowExecution.run_id is not provided). If the Workflow Execution is Running, it will be
     // terminated before deletion.
-    // (-- api-linter: core::0135::method-signature=disabled
-    //     aip.dev/not-precedent: DeleteNamespace RPC doesn't follow Google API format. --)
-    // (-- api-linter: core::0135::response-message-name=disabled
-    //     aip.dev/not-precedent: DeleteNamespace RPC doesn't follow Google API format. --)
-    rpc DeleteWorkflowExecution (DeleteWorkflowExecutionRequest) returns (DeleteWorkflowExecutionResponse) {
-    }
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: Workflow deletion not exposed to HTTP, users should use cancel or terminate. --)
+    rpc DeleteWorkflowExecution (DeleteWorkflowExecutionRequest) returns (DeleteWorkflowExecutionResponse) {}
 
     // ListOpenWorkflowExecutions is a visibility API to list the open executions in a specific namespace.
-    rpc ListOpenWorkflowExecutions (ListOpenWorkflowExecutionsRequest) returns (ListOpenWorkflowExecutionsResponse) {
-    }
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: HTTP users should use ListWorkflowExecutions instead. --)
+    rpc ListOpenWorkflowExecutions (ListOpenWorkflowExecutionsRequest) returns (ListOpenWorkflowExecutionsResponse) {}
 
     // ListClosedWorkflowExecutions is a visibility API to list the closed executions in a specific namespace.
-    rpc ListClosedWorkflowExecutions (ListClosedWorkflowExecutionsRequest) returns (ListClosedWorkflowExecutionsResponse) {
-    }
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: HTTP users should use ListWorkflowExecutions instead. --)
+    rpc ListClosedWorkflowExecutions (ListClosedWorkflowExecutionsRequest) returns (ListClosedWorkflowExecutionsResponse) {}
 
     // ListWorkflowExecutions is a visibility API to list workflow executions in a specific namespace.
     rpc ListWorkflowExecutions (ListWorkflowExecutionsRequest) returns (ListWorkflowExecutionsResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/workflows"
+        };
     }
 
     // ListArchivedWorkflowExecutions is a visibility API to list archived workflow executions in a specific namespace.
     rpc ListArchivedWorkflowExecutions (ListArchivedWorkflowExecutionsRequest) returns (ListArchivedWorkflowExecutionsResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/archived-workflows"
+        };
     }
 
     // ScanWorkflowExecutions is a visibility API to list large amount of workflow executions in a specific namespace without order.
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: HTTP users should use ListWorkflowExecutions instead. --)
     rpc ScanWorkflowExecutions (ScanWorkflowExecutionsRequest) returns (ScanWorkflowExecutionsResponse) {
     }
 
     // CountWorkflowExecutions is a visibility API to count of workflow executions in a specific namespace.
     rpc CountWorkflowExecutions (CountWorkflowExecutionsRequest) returns (CountWorkflowExecutionsResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/workflow-count"
+        };
     }
 
     // GetSearchAttributes is a visibility API to get all legal keys that could be used in list APIs
-    rpc GetSearchAttributes (GetSearchAttributesRequest) returns (GetSearchAttributesResponse) {
-    }
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do not expose this search attribute API to HTTP (but may expose on OperatorService). --)
+    rpc GetSearchAttributes (GetSearchAttributesRequest) returns (GetSearchAttributesResponse) {}
 
     // RespondQueryTaskCompleted is called by workers to complete queries which were delivered on
     // the `query` (not `queries`) field of a `PollWorkflowTaskQueueResponse`.
     //
     // Completing the query will unblock the corresponding client call to `QueryWorkflow` and return
     // the query result a response.
-    rpc RespondQueryTaskCompleted (RespondQueryTaskCompletedRequest) returns (RespondQueryTaskCompletedResponse) {
-    }
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do not expose worker API to HTTP. --)
+    rpc RespondQueryTaskCompleted (RespondQueryTaskCompletedRequest) returns (RespondQueryTaskCompletedResponse) {}
 
     // ResetStickyTaskQueue resets the sticky task queue related information in the mutable state of
     // a given workflow. This is prudent for workers to perform if a workflow has been paged out of
@@ -310,74 +415,103 @@ service WorkflowService {
     // Things cleared are:
     // 1. StickyTaskQueue
     // 2. StickyScheduleToStartTimeout
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do not expose worker API to HTTP. --)
     rpc ResetStickyTaskQueue (ResetStickyTaskQueueRequest) returns (ResetStickyTaskQueueResponse) {
     }
 
     // QueryWorkflow requests a query be executed for a specified workflow execution.
     rpc QueryWorkflow (QueryWorkflowRequest) returns (QueryWorkflowResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/workflows/{execution.workflow_id}/query/{query.query_type}"
+            body: "*"
+        };
     }
 
     // DescribeWorkflowExecution returns information about the specified workflow execution.
     rpc DescribeWorkflowExecution (DescribeWorkflowExecutionRequest) returns (DescribeWorkflowExecutionResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/workflows/{execution.workflow_id}"
+        };
     }
 
     // DescribeTaskQueue returns information about the target task queue.
     rpc DescribeTaskQueue (DescribeTaskQueueRequest) returns (DescribeTaskQueueResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/task-queues/{task_queue.name}"
+        };
     }
 
     // GetClusterInfo returns information about temporal cluster
-    rpc GetClusterInfo(GetClusterInfoRequest) returns (GetClusterInfoResponse){
+    rpc GetClusterInfo(GetClusterInfoRequest) returns (GetClusterInfoResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/cluster-info"
+        };
     }
 
     // GetSystemInfo returns information about the system.
     rpc GetSystemInfo(GetSystemInfoRequest) returns (GetSystemInfoResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/system-info"
+        };
     }
 
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do not expose this low-level API to HTTP. --)
     rpc ListTaskQueuePartitions(ListTaskQueuePartitionsRequest) returns (ListTaskQueuePartitionsResponse) {
     }
 
     // Creates a new schedule.
-    // (-- api-linter: core::0133::method-signature=disabled
-    //     aip.dev/not-precedent: CreateSchedule doesn't follow Google API format --)
-    // (-- api-linter: core::0133::response-message-name=disabled
-    //     aip.dev/not-precedent: CreateSchedule doesn't follow Google API format --)
-    // (-- api-linter: core::0133::http-uri-parent=disabled
-    //     aip.dev/not-precedent: CreateSchedule doesn't follow Google API format --)
     rpc CreateSchedule (CreateScheduleRequest) returns (CreateScheduleResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/schedules/{schedule_id}"
+            body: "*"
+        };
     }
 
     // Returns the schedule description and current state of an existing schedule.
     rpc DescribeSchedule (DescribeScheduleRequest) returns (DescribeScheduleResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/schedules/{schedule_id}"
+        };
     }
 
     // Changes the configuration or state of an existing schedule.
-    // (-- api-linter: core::0134::response-message-name=disabled
-    //     aip.dev/not-precedent: UpdateSchedule RPC doesn't follow Google API format. --)
-    // (-- api-linter: core::0134::method-signature=disabled
-    //     aip.dev/not-precedent: UpdateSchedule RPC doesn't follow Google API format. --)
     rpc UpdateSchedule (UpdateScheduleRequest) returns (UpdateScheduleResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/schedules/{schedule_id}/update"
+            body: "*"
+        };
     }
 
     // Makes a specific change to a schedule or triggers an immediate action.
-    // (-- api-linter: core::0134::synonyms=disabled
-    //     aip.dev/not-precedent: we have both patch and update. --)
     rpc PatchSchedule (PatchScheduleRequest) returns (PatchScheduleResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/schedules/{schedule_id}/patch"
+            body: "*"
+        };
     }
 
     // Lists matching times within a range.
     rpc ListScheduleMatchingTimes (ListScheduleMatchingTimesRequest) returns (ListScheduleMatchingTimesResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/schedules/{schedule_id}/matching-times"
+        };
     }
 
     // Deletes a schedule, removing it from the system.
-    // (-- api-linter: core::0135::method-signature=disabled
-    //     aip.dev/not-precedent: DeleteSchedule doesn't follow Google API format --)
-    // (-- api-linter: core::0135::response-message-name=disabled
-    //     aip.dev/not-precedent: DeleteSchedule doesn't follow Google API format --)
     rpc DeleteSchedule (DeleteScheduleRequest) returns (DeleteScheduleResponse) {
+        option (google.api.http) = {
+            delete: "/api/v1/namespaces/{namespace}/schedules/{schedule_id}"
+        };
     }
 
     // List all schedules in a namespace.
     rpc ListSchedules (ListSchedulesRequest) returns (ListSchedulesResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/schedules"
+        };
     }
 
     // Allows users to specify sets of worker build id versions on a per task queue basis. Versions
@@ -393,13 +527,16 @@ service WorkflowService {
     // NOTE: The number of task queues mapped to a single build id is limited by the `limit.taskQueuesPerBuildId`
     // (default is 20), if this limit is exceeded this API will error with a FailedPrecondition.
     //
-    // (-- api-linter: core::0134::response-message-name=disabled
-    //     aip.dev/not-precedent: UpdateWorkerBuildIdCompatibility RPC doesn't follow Google API format. --)
-    // (-- api-linter: core::0134::method-signature=disabled
-    //     aip.dev/not-precedent: UpdateWorkerBuildIdCompatibility RPC doesn't follow Google API format. --)
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We do yet expose versioning API to HTTP. --)
     rpc UpdateWorkerBuildIdCompatibility (UpdateWorkerBuildIdCompatibilityRequest) returns (UpdateWorkerBuildIdCompatibilityResponse) {}
+
     // Fetches the worker build id versioning sets for a task queue.
-    rpc GetWorkerBuildIdCompatibility (GetWorkerBuildIdCompatibilityRequest) returns (GetWorkerBuildIdCompatibilityResponse) {}
+    rpc GetWorkerBuildIdCompatibility (GetWorkerBuildIdCompatibilityRequest) returns (GetWorkerBuildIdCompatibilityResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/task-queues/{task_queue}/worker-build-id-compatibility"
+        };
+    }
 
     // Fetches task reachability to determine whether a worker may be retired.
     // The request may specify task queues to query for or let the server fetch all task queues mapped to the given
@@ -413,36 +550,57 @@ service WorkflowService {
     //
     // Open source users can adjust this limit by setting the server's dynamic config value for
     // `limit.reachabilityTaskQueueScan` with the caveat that this call can strain the visibility store.
-    rpc GetWorkerTaskReachability (GetWorkerTaskReachabilityRequest) returns (GetWorkerTaskReachabilityResponse) {}
+    rpc GetWorkerTaskReachability (GetWorkerTaskReachabilityRequest) returns (GetWorkerTaskReachabilityResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/worker-task-reachability"
+        };
+    }
 
     // Invokes the specified update function on user workflow code.
-    // (-- api-linter: core::0134=disabled
-    //     aip.dev/not-precedent: UpdateWorkflowExecution doesn't follow Google API format --)
     rpc UpdateWorkflowExecution(UpdateWorkflowExecutionRequest) returns (UpdateWorkflowExecutionResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/workflows/{workflow_execution.workflow_id}/update/{request.input.name}"
+            body: "*"
+        };
     }
 
     // Polls a workflow execution for the outcome of a workflow execution update
     // previously issued through the UpdateWorkflowExecution RPC. The effective
     // timeout on this call will be shorter of the the caller-supplied gRPC
     // timeout and the server's configured long-poll timeout.
-    // (-- api-linter: core::0134=disabled
-    //     aip.dev/not-precedent: UpdateWorkflowExecution doesn't follow Google API format --)
-    rpc PollWorkflowExecutionUpdate(PollWorkflowExecutionUpdateRequest) returns (PollWorkflowExecutionUpdateResponse){
+    //
+    // (-- api-linter: core::0127::http-annotation=disabled
+    //     aip.dev/not-precedent: We don't expose update polling API to HTTP in favor of a potential future non-blocking form. --)
+    rpc PollWorkflowExecutionUpdate(PollWorkflowExecutionUpdateRequest) returns (PollWorkflowExecutionUpdateResponse) {
     }
 
     // StartBatchOperation starts a new batch operation
     rpc StartBatchOperation(StartBatchOperationRequest) returns (StartBatchOperationResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/batch-operations/{job_id}"
+            body: "*"
+        };
     }
 
     // StopBatchOperation stops a batch operation
     rpc StopBatchOperation(StopBatchOperationRequest) returns (StopBatchOperationResponse) {
+        option (google.api.http) = {
+            post: "/api/v1/namespaces/{namespace}/batch-operations/{job_id}/stop"
+            body: "*"
+        };
     }
 
     // DescribeBatchOperation returns the information about a batch operation
     rpc DescribeBatchOperation(DescribeBatchOperationRequest) returns (DescribeBatchOperationResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/batch-operations/{job_id}"
+        };
     }
 
     // ListBatchOperations returns a list of batch operations
     rpc ListBatchOperations(ListBatchOperationsRequest) returns (ListBatchOperationsResponse) {
+        option (google.api.http) = {
+            get: "/api/v1/namespaces/{namespace}/batch-operations"
+        };
     }
 }

package/sdk-core/{protos → sdk-core-protos/protos}/local/temporal/sdk/core/workflow_activation/workflow_activation.proto

@@ -10,6 +10,7 @@ option ruby_package = "Temporalio::Bridge::Api::WorkflowActivation";
 import "google/protobuf/timestamp.proto";
 import "google/protobuf/duration.proto";
 import "temporal/api/failure/v1/message.proto";
+import "temporal/api/update/v1/message.proto";
 import "temporal/api/common/v1/message.proto";
 import "temporal/api/enums/v1/workflow.proto";
 import "temporal/sdk/core/activity_result/activity_result.proto";
@@ -18,6 +19,33 @@ import "temporal/sdk/core/common/common.proto";
 
 // An instruction to the lang sdk to run some workflow code, whether for the first time or from
 // a cached state.
+//
+// ## Job ordering guarantees and semantics
+//
+// Core will, by default, order jobs within the activation as follows:
+// `patches -> signals/updates -> other -> queries -> evictions`
+//
+// This is because:
+// * Patches are expected to apply to the entire activation
+// * Signal and update handlers should be invoked before workflow routines are iterated. That is to
+//   say before the users' main workflow function and anything spawned by it is allowed to continue.
+// * Queries always go last (and, in fact, always come in their own activation)
+//
+// The downside of this reordering is that a signal or update handler may not observe that some
+// other event had already happened (ex: an activity completed) when it is first invoked, though it
+// will subsequently when workflow routines are driven. Core only does this reordering to make life
+// easier for languages that cannot explicitly control when workflow routines are iterated.
+// Languages that can explicitly control such iteration should prefer to apply all the jobs to state
+// (by resolving promises/futures, invoking handlers, etc as they iterate over the jobs) and then
+// only *after* that is done, drive the workflow routines.
+//
+// ## Evictions
+//
+// Activations that contain only a `remove_from_cache` job should not cause the workflow code
+// to be invoked and may be responded to with an empty command list. Eviction jobs may also
+// appear with other jobs, but will always appear last in the job list. In this case it is
+// expected that the workflow code will be invoked, and the response produced as normal, but
+// the caller should evict the run after doing so.
 message WorkflowActivation {
     // The id of the currently active run of the workflow. Also used as a cache key. There may
     // only ever be one active workflow task (and hence activation) of a run at one time.
@@ -39,6 +67,10 @@ message WorkflowActivation {
     uint64 history_size_bytes = 7;
     // Set true if the most recent WFT started event had this suggestion
     bool continue_as_new_suggested = 8;
+    // Set to the Build ID of the worker that processed this task, which may be empty. During replay
+    // this id may not equal the id of the replaying worker. If not replaying and this worker has
+    // a defined Build ID, it will equal that ID. It will also be empty for evict-only activations.
+    string build_id_for_current_task = 9;
 }
 
 message WorkflowActivationJob {
@@ -69,6 +101,8 @@ message WorkflowActivationJob {
         ResolveSignalExternalWorkflow resolve_signal_external_workflow = 12;
         // An attempt to cancel an external workflow resolved
         ResolveRequestCancelExternalWorkflow resolve_request_cancel_external_workflow = 13;
+        // A request to handle a workflow update.
+        DoUpdate do_update = 14;
         // Remove the workflow identified by the [WorkflowActivation] containing this job from the cache
         // after performing the activation.
         //
@@ -242,6 +276,29 @@ message ResolveRequestCancelExternalWorkflow {
     temporal.api.failure.v1.Failure failure = 2;
 }
 
+// Lang is requested to invoke an update handler on the workflow. Lang should invoke the update
+// validator first (if requested). If it accepts the update, immediately invoke the update handler.
+// Lang must reply to the activation containing this job with an `UpdateResponse`.
+message DoUpdate {
+    // A workflow-unique identifier for this update
+    string id = 1;
+    // The protocol message instance ID - this is used to uniquely track the ID server side and
+    // internally.
+    string protocol_instance_id = 2;
+    // The name of the update handler
+    string name = 3;
+    // The input to the update
+    repeated temporal.api.common.v1.Payload input = 4;
+    // Headers attached to the update
+    map<string, temporal.api.common.v1.Payload> headers = 5;
+    // Remaining metadata associated with the update. The `update_id` field is stripped from here
+    // and moved to `id`, since it is guaranteed to be present.
+    temporal.api.update.v1.Meta meta = 6;
+    // If set true, lang must run the update's validator before running the handler. This will be
+    // set false during replay, since validation is not re-run during replay.
+    bool run_validator = 7;
+}
+
 message RemoveFromCache {
     string message = 1;