@temporalio/proto 1.13.2 → 1.14.0

package/{LICENSE.md → LICENSE}

@@ -1,8 +1,6 @@
-Temporal TypeScript SDK
+The MIT License
 
-MIT License
-
-Copyright (c) 2021 Temporal Technologies Inc. All Rights Reserved
+Copyright (c) 2021-2025 Temporal Technologies Inc. All rights reserved.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -11,13 +9,13 @@ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@temporalio/proto",
-  "version": "1.13.2",
+  "version": "1.14.0",
   "description": "Temporal.io SDK compiled protobuf definitions",
   "main": "protos/index.js",
   "types": "protos/index.d.ts",
@@ -42,5 +42,5 @@
   "engines": {
     "node": ">= 18.0.0"
   },
-  "gitHead": "524b1bcf72b36fbf3148fe5adb0ddbe036293f6d"
+  "gitHead": "eb428ac36568b48be67fdba662c38631867b932d"
 }

package/protos/json-module.js

@@ -16293,6 +16293,22 @@ var $root = ($protobuf.roots.__temporal || ($protobuf.roots.__temporal = new $pr
                               }
                             ]
                           },
+                          SetServiceAccountNamespaceAccess: {
+                            requestType: "SetServiceAccountNamespaceAccessRequest",
+                            responseType: "SetServiceAccountNamespaceAccessResponse",
+                            options: {
+                              "(google.api.http).post": "/cloud/namespaces/{namespace}/service-accounts/{service_account_id}/access",
+                              "(google.api.http).body": "*"
+                            },
+                            parsedOptions: [
+                              {
+                                "(google.api.http)": {
+                                  post: "/cloud/namespaces/{namespace}/service-accounts/{service_account_id}/access",
+                                  body: "*"
+                                }
+                              }
+                            ]
+                          },
                           DeleteServiceAccount: {
                             requestType: "DeleteServiceAccountRequest",
                             responseType: "DeleteServiceAccountResponse",
@@ -16514,6 +16530,22 @@ var $root = ($protobuf.roots.__temporal || ($protobuf.roots.__temporal = new $pr
                                 }
                               }
                             ]
+                          },
+                          ValidateAccountAuditLogSink: {
+                            requestType: "ValidateAccountAuditLogSinkRequest",
+                            responseType: "ValidateAccountAuditLogSinkResponse",
+                            options: {
+                              "(google.api.http).post": "/cloud/account/audit-logs/sink/validate",
+                              "(google.api.http).body": "*"
+                            },
+                            parsedOptions: [
+                              {
+                                "(google.api.http)": {
+                                  post: "/cloud/account/audit-logs/sink/validate",
+                                  body: "*"
+                                }
+                              }
+                            ]
                           }
                         }
                       },
@@ -17574,6 +17606,38 @@ var $root = ($protobuf.roots.__temporal || ($protobuf.roots.__temporal = new $pr
                           }
                         }
                       },
+                      SetServiceAccountNamespaceAccessRequest: {
+                        fields: {
+                          serviceAccountId: {
+                            type: "string",
+                            id: 1
+                          },
+                          namespace: {
+                            type: "string",
+                            id: 2
+                          },
+                          access: {
+                            type: "temporal.api.cloud.identity.v1.NamespaceAccess",
+                            id: 3
+                          },
+                          resourceVersion: {
+                            type: "string",
+                            id: 4
+                          },
+                          asyncOperationId: {
+                            type: "string",
+                            id: 5
+                          }
+                        }
+                      },
+                      SetServiceAccountNamespaceAccessResponse: {
+                        fields: {
+                          asyncOperation: {
+                            type: "temporal.api.cloud.operation.v1.AsyncOperation",
+                            id: 1
+                          }
+                        }
+                      },
                       DeleteServiceAccountRequest: {
                         fields: {
                           serviceAccountId: {
@@ -17932,6 +17996,17 @@ var $root = ($protobuf.roots.__temporal || ($protobuf.roots.__temporal = new $pr
                             id: 1
                           }
                         }
+                      },
+                      ValidateAccountAuditLogSinkRequest: {
+                        fields: {
+                          spec: {
+                            type: "temporal.api.cloud.account.v1.AuditLogSinkSpec",
+                            id: 1
+                          }
+                        }
+                      },
+                      ValidateAccountAuditLogSinkResponse: {
+                        fields: {}
                       }
                     }
                   }
@@ -18926,6 +19001,38 @@ var $root = ($protobuf.roots.__temporal || ($protobuf.roots.__temporal = new $pr
                             id: 4
                           }
                         }
+                      },
+                      KinesisSpec: {
+                        fields: {
+                          roleName: {
+                            type: "string",
+                            id: 1
+                          },
+                          destinationUri: {
+                            type: "string",
+                            id: 2
+                          },
+                          region: {
+                            type: "string",
+                            id: 3
+                          }
+                        }
+                      },
+                      PubSubSpec: {
+                        fields: {
+                          serviceAccountId: {
+                            type: "string",
+                            id: 1
+                          },
+                          topicName: {
+                            type: "string",
+                            id: 2
+                          },
+                          gcpProjectId: {
+                            type: "string",
+                            id: 3
+                          }
+                        }
                       }
                     }
                   }
@@ -19267,6 +19374,34 @@ var $root = ($protobuf.roots.__temporal || ($protobuf.roots.__temporal = new $pr
                             id: 6
                           }
                         }
+                      },
+                      AuditLogSinkSpec: {
+                        oneofs: {
+                          sinkType: {
+                            oneof: [
+                              "kinesisSink",
+                              "pubSubSink"
+                            ]
+                          }
+                        },
+                        fields: {
+                          name: {
+                            type: "string",
+                            id: 1
+                          },
+                          kinesisSink: {
+                            type: "api.cloud.sink.v1.KinesisSpec",
+                            id: 2
+                          },
+                          pubSubSink: {
+                            type: "api.cloud.sink.v1.PubSubSpec",
+                            id: 3
+                          },
+                          enabled: {
+                            type: "bool",
+                            id: 4
+                          }
+                        }
                       }
                     }
                   }

package/protos/root.d.ts

@@ -73312,6 +73312,20 @@ export namespace temporal {
                          */
                         public updateServiceAccount(request: temporal.api.cloud.cloudservice.v1.IUpdateServiceAccountRequest): Promise<temporal.api.cloud.cloudservice.v1.UpdateServiceAccountResponse>;
 
+                        /**
+                         * Set a service account's access to a namespace.
+                         * @param request SetServiceAccountNamespaceAccessRequest message or plain object
+                         * @param callback Node-style callback called with the error, if any, and SetServiceAccountNamespaceAccessResponse
+                         */
+                        public setServiceAccountNamespaceAccess(request: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessRequest, callback: temporal.api.cloud.cloudservice.v1.CloudService.SetServiceAccountNamespaceAccessCallback): void;
+
+                        /**
+                         * Set a service account's access to a namespace.
+                         * @param request SetServiceAccountNamespaceAccessRequest message or plain object
+                         * @returns Promise
+                         */
+                        public setServiceAccountNamespaceAccess(request: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessRequest): Promise<temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse>;
+
                         /**
                          * Delete a service account.
                          * @param request DeleteServiceAccountRequest message or plain object
@@ -73525,6 +73539,22 @@ export namespace temporal {
                          * @returns Promise
                          */
                         public deleteConnectivityRule(request: temporal.api.cloud.cloudservice.v1.IDeleteConnectivityRuleRequest): Promise<temporal.api.cloud.cloudservice.v1.DeleteConnectivityRuleResponse>;
+
+                        /**
+                         * Validate customer audit log sink is accessible from Temporal's workflow by delivering an empty file to the specified sink.
+                         * The operation verifies that the sink is correctly configured, accessible and ready to receive audit logs.
+                         * @param request ValidateAccountAuditLogSinkRequest message or plain object
+                         * @param callback Node-style callback called with the error, if any, and ValidateAccountAuditLogSinkResponse
+                         */
+                        public validateAccountAuditLogSink(request: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkRequest, callback: temporal.api.cloud.cloudservice.v1.CloudService.ValidateAccountAuditLogSinkCallback): void;
+
+                        /**
+                         * Validate customer audit log sink is accessible from Temporal's workflow by delivering an empty file to the specified sink.
+                         * The operation verifies that the sink is correctly configured, accessible and ready to receive audit logs.
+                         * @param request ValidateAccountAuditLogSinkRequest message or plain object
+                         * @returns Promise
+                         */
+                        public validateAccountAuditLogSink(request: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkRequest): Promise<temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse>;
                     }
 
                     namespace CloudService {
@@ -73816,6 +73846,13 @@ export namespace temporal {
                          */
                         type UpdateServiceAccountCallback = (error: (Error|null), response?: temporal.api.cloud.cloudservice.v1.UpdateServiceAccountResponse) => void;
 
+                        /**
+                         * Callback as used by {@link temporal.api.cloud.cloudservice.v1.CloudService#setServiceAccountNamespaceAccess}.
+                         * @param error Error, if any
+                         * @param [response] SetServiceAccountNamespaceAccessResponse
+                         */
+                        type SetServiceAccountNamespaceAccessCallback = (error: (Error|null), response?: temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse) => void;
+
                         /**
                          * Callback as used by {@link temporal.api.cloud.cloudservice.v1.CloudService#deleteServiceAccount}.
                          * @param error Error, if any
@@ -73920,6 +73957,13 @@ export namespace temporal {
                          * @param [response] DeleteConnectivityRuleResponse
                          */
                         type DeleteConnectivityRuleCallback = (error: (Error|null), response?: temporal.api.cloud.cloudservice.v1.DeleteConnectivityRuleResponse) => void;
+
+                        /**
+                         * Callback as used by {@link temporal.api.cloud.cloudservice.v1.CloudService#validateAccountAuditLogSink}.
+                         * @param error Error, if any
+                         * @param [response] ValidateAccountAuditLogSinkResponse
+                         */
+                        type ValidateAccountAuditLogSinkCallback = (error: (Error|null), response?: temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse) => void;
                     }
 
                     /** Properties of a GetUsersRequest. */
@@ -82303,6 +82347,216 @@ export namespace temporal {
                         public static getTypeUrl(typeUrlPrefix?: string): string;
                     }
 
+                    /** Properties of a SetServiceAccountNamespaceAccessRequest. */
+                    interface ISetServiceAccountNamespaceAccessRequest {
+
+                        /** The ID of the service account to update. */
+                        serviceAccountId?: (string|null);
+
+                        /** The namespace to set permissions for. */
+                        namespace?: (string|null);
+
+                        /** The namespace access to assign the service account. */
+                        access?: (temporal.api.cloud.identity.v1.INamespaceAccess|null);
+
+                        /**
+                         * The version of the service account for which this update is intended for.
+                         * The latest version can be found in the GetServiceAccount response.
+                         */
+                        resourceVersion?: (string|null);
+
+                        /** The ID to use for this async operation - optional. */
+                        asyncOperationId?: (string|null);
+                    }
+
+                    /** Represents a SetServiceAccountNamespaceAccessRequest. */
+                    class SetServiceAccountNamespaceAccessRequest implements ISetServiceAccountNamespaceAccessRequest {
+
+                        /**
+                         * Constructs a new SetServiceAccountNamespaceAccessRequest.
+                         * @param [properties] Properties to set
+                         */
+                        constructor(properties?: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessRequest);
+
+                        /** The ID of the service account to update. */
+                        public serviceAccountId: string;
+
+                        /** The namespace to set permissions for. */
+                        public namespace: string;
+
+                        /** The namespace access to assign the service account. */
+                        public access?: (temporal.api.cloud.identity.v1.INamespaceAccess|null);
+
+                        /**
+                         * The version of the service account for which this update is intended for.
+                         * The latest version can be found in the GetServiceAccount response.
+                         */
+                        public resourceVersion: string;
+
+                        /** The ID to use for this async operation - optional. */
+                        public asyncOperationId: string;
+
+                        /**
+                         * Creates a new SetServiceAccountNamespaceAccessRequest instance using the specified properties.
+                         * @param [properties] Properties to set
+                         * @returns SetServiceAccountNamespaceAccessRequest instance
+                         */
+                        public static create(properties?: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessRequest): temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessRequest;
+
+                        /**
+                         * Encodes the specified SetServiceAccountNamespaceAccessRequest message. Does not implicitly {@link temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessRequest.verify|verify} messages.
+                         * @param message SetServiceAccountNamespaceAccessRequest message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encode(message: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessRequest, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Encodes the specified SetServiceAccountNamespaceAccessRequest message, length delimited. Does not implicitly {@link temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessRequest.verify|verify} messages.
+                         * @param message SetServiceAccountNamespaceAccessRequest message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encodeDelimited(message: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessRequest, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Decodes a SetServiceAccountNamespaceAccessRequest message from the specified reader or buffer.
+                         * @param reader Reader or buffer to decode from
+                         * @param [length] Message length if known beforehand
+                         * @returns SetServiceAccountNamespaceAccessRequest
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessRequest;
+
+                        /**
+                         * Decodes a SetServiceAccountNamespaceAccessRequest message from the specified reader or buffer, length delimited.
+                         * @param reader Reader or buffer to decode from
+                         * @returns SetServiceAccountNamespaceAccessRequest
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessRequest;
+
+                        /**
+                         * Creates a SetServiceAccountNamespaceAccessRequest message from a plain object. Also converts values to their respective internal types.
+                         * @param object Plain object
+                         * @returns SetServiceAccountNamespaceAccessRequest
+                         */
+                        public static fromObject(object: { [k: string]: any }): temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessRequest;
+
+                        /**
+                         * Creates a plain object from a SetServiceAccountNamespaceAccessRequest message. Also converts values to other types if specified.
+                         * @param message SetServiceAccountNamespaceAccessRequest
+                         * @param [options] Conversion options
+                         * @returns Plain object
+                         */
+                        public static toObject(message: temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessRequest, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                        /**
+                         * Converts this SetServiceAccountNamespaceAccessRequest to JSON.
+                         * @returns JSON object
+                         */
+                        public toJSON(): { [k: string]: any };
+
+                        /**
+                         * Gets the default type url for SetServiceAccountNamespaceAccessRequest
+                         * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                         * @returns The default type url
+                         */
+                        public static getTypeUrl(typeUrlPrefix?: string): string;
+                    }
+
+                    /** Properties of a SetServiceAccountNamespaceAccessResponse. */
+                    interface ISetServiceAccountNamespaceAccessResponse {
+
+                        /** The async operation. */
+                        asyncOperation?: (temporal.api.cloud.operation.v1.IAsyncOperation|null);
+                    }
+
+                    /** Represents a SetServiceAccountNamespaceAccessResponse. */
+                    class SetServiceAccountNamespaceAccessResponse implements ISetServiceAccountNamespaceAccessResponse {
+
+                        /**
+                         * Constructs a new SetServiceAccountNamespaceAccessResponse.
+                         * @param [properties] Properties to set
+                         */
+                        constructor(properties?: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessResponse);
+
+                        /** The async operation. */
+                        public asyncOperation?: (temporal.api.cloud.operation.v1.IAsyncOperation|null);
+
+                        /**
+                         * Creates a new SetServiceAccountNamespaceAccessResponse instance using the specified properties.
+                         * @param [properties] Properties to set
+                         * @returns SetServiceAccountNamespaceAccessResponse instance
+                         */
+                        public static create(properties?: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessResponse): temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse;
+
+                        /**
+                         * Encodes the specified SetServiceAccountNamespaceAccessResponse message. Does not implicitly {@link temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse.verify|verify} messages.
+                         * @param message SetServiceAccountNamespaceAccessResponse message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encode(message: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessResponse, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Encodes the specified SetServiceAccountNamespaceAccessResponse message, length delimited. Does not implicitly {@link temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse.verify|verify} messages.
+                         * @param message SetServiceAccountNamespaceAccessResponse message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encodeDelimited(message: temporal.api.cloud.cloudservice.v1.ISetServiceAccountNamespaceAccessResponse, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Decodes a SetServiceAccountNamespaceAccessResponse message from the specified reader or buffer.
+                         * @param reader Reader or buffer to decode from
+                         * @param [length] Message length if known beforehand
+                         * @returns SetServiceAccountNamespaceAccessResponse
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse;
+
+                        /**
+                         * Decodes a SetServiceAccountNamespaceAccessResponse message from the specified reader or buffer, length delimited.
+                         * @param reader Reader or buffer to decode from
+                         * @returns SetServiceAccountNamespaceAccessResponse
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse;
+
+                        /**
+                         * Creates a SetServiceAccountNamespaceAccessResponse message from a plain object. Also converts values to their respective internal types.
+                         * @param object Plain object
+                         * @returns SetServiceAccountNamespaceAccessResponse
+                         */
+                        public static fromObject(object: { [k: string]: any }): temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse;
+
+                        /**
+                         * Creates a plain object from a SetServiceAccountNamespaceAccessResponse message. Also converts values to other types if specified.
+                         * @param message SetServiceAccountNamespaceAccessResponse
+                         * @param [options] Conversion options
+                         * @returns Plain object
+                         */
+                        public static toObject(message: temporal.api.cloud.cloudservice.v1.SetServiceAccountNamespaceAccessResponse, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                        /**
+                         * Converts this SetServiceAccountNamespaceAccessResponse to JSON.
+                         * @returns JSON object
+                         */
+                        public toJSON(): { [k: string]: any };
+
+                        /**
+                         * Gets the default type url for SetServiceAccountNamespaceAccessResponse
+                         * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                         * @returns The default type url
+                         */
+                        public static getTypeUrl(typeUrlPrefix?: string): string;
+                    }
+
                     /** Properties of a DeleteServiceAccountRequest. */
                     interface IDeleteServiceAccountRequest {
 
@@ -85292,6 +85546,180 @@ export namespace temporal {
                          */
                         public static getTypeUrl(typeUrlPrefix?: string): string;
                     }
+
+                    /** Properties of a ValidateAccountAuditLogSinkRequest. */
+                    interface IValidateAccountAuditLogSinkRequest {
+
+                        /** The audit log sink spec that will be validated */
+                        spec?: (temporal.api.cloud.account.v1.IAuditLogSinkSpec|null);
+                    }
+
+                    /** Represents a ValidateAccountAuditLogSinkRequest. */
+                    class ValidateAccountAuditLogSinkRequest implements IValidateAccountAuditLogSinkRequest {
+
+                        /**
+                         * Constructs a new ValidateAccountAuditLogSinkRequest.
+                         * @param [properties] Properties to set
+                         */
+                        constructor(properties?: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkRequest);
+
+                        /** The audit log sink spec that will be validated */
+                        public spec?: (temporal.api.cloud.account.v1.IAuditLogSinkSpec|null);
+
+                        /**
+                         * Creates a new ValidateAccountAuditLogSinkRequest instance using the specified properties.
+                         * @param [properties] Properties to set
+                         * @returns ValidateAccountAuditLogSinkRequest instance
+                         */
+                        public static create(properties?: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkRequest): temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkRequest;
+
+                        /**
+                         * Encodes the specified ValidateAccountAuditLogSinkRequest message. Does not implicitly {@link temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkRequest.verify|verify} messages.
+                         * @param message ValidateAccountAuditLogSinkRequest message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encode(message: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkRequest, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Encodes the specified ValidateAccountAuditLogSinkRequest message, length delimited. Does not implicitly {@link temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkRequest.verify|verify} messages.
+                         * @param message ValidateAccountAuditLogSinkRequest message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encodeDelimited(message: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkRequest, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Decodes a ValidateAccountAuditLogSinkRequest message from the specified reader or buffer.
+                         * @param reader Reader or buffer to decode from
+                         * @param [length] Message length if known beforehand
+                         * @returns ValidateAccountAuditLogSinkRequest
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkRequest;
+
+                        /**
+                         * Decodes a ValidateAccountAuditLogSinkRequest message from the specified reader or buffer, length delimited.
+                         * @param reader Reader or buffer to decode from
+                         * @returns ValidateAccountAuditLogSinkRequest
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkRequest;
+
+                        /**
+                         * Creates a ValidateAccountAuditLogSinkRequest message from a plain object. Also converts values to their respective internal types.
+                         * @param object Plain object
+                         * @returns ValidateAccountAuditLogSinkRequest
+                         */
+                        public static fromObject(object: { [k: string]: any }): temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkRequest;
+
+                        /**
+                         * Creates a plain object from a ValidateAccountAuditLogSinkRequest message. Also converts values to other types if specified.
+                         * @param message ValidateAccountAuditLogSinkRequest
+                         * @param [options] Conversion options
+                         * @returns Plain object
+                         */
+                        public static toObject(message: temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkRequest, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                        /**
+                         * Converts this ValidateAccountAuditLogSinkRequest to JSON.
+                         * @returns JSON object
+                         */
+                        public toJSON(): { [k: string]: any };
+
+                        /**
+                         * Gets the default type url for ValidateAccountAuditLogSinkRequest
+                         * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                         * @returns The default type url
+                         */
+                        public static getTypeUrl(typeUrlPrefix?: string): string;
+                    }
+
+                    /** Properties of a ValidateAccountAuditLogSinkResponse. */
+                    interface IValidateAccountAuditLogSinkResponse {
+                    }
+
+                    /** Represents a ValidateAccountAuditLogSinkResponse. */
+                    class ValidateAccountAuditLogSinkResponse implements IValidateAccountAuditLogSinkResponse {
+
+                        /**
+                         * Constructs a new ValidateAccountAuditLogSinkResponse.
+                         * @param [properties] Properties to set
+                         */
+                        constructor(properties?: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkResponse);
+
+                        /**
+                         * Creates a new ValidateAccountAuditLogSinkResponse instance using the specified properties.
+                         * @param [properties] Properties to set
+                         * @returns ValidateAccountAuditLogSinkResponse instance
+                         */
+                        public static create(properties?: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkResponse): temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse;
+
+                        /**
+                         * Encodes the specified ValidateAccountAuditLogSinkResponse message. Does not implicitly {@link temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse.verify|verify} messages.
+                         * @param message ValidateAccountAuditLogSinkResponse message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encode(message: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkResponse, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Encodes the specified ValidateAccountAuditLogSinkResponse message, length delimited. Does not implicitly {@link temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse.verify|verify} messages.
+                         * @param message ValidateAccountAuditLogSinkResponse message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encodeDelimited(message: temporal.api.cloud.cloudservice.v1.IValidateAccountAuditLogSinkResponse, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Decodes a ValidateAccountAuditLogSinkResponse message from the specified reader or buffer.
+                         * @param reader Reader or buffer to decode from
+                         * @param [length] Message length if known beforehand
+                         * @returns ValidateAccountAuditLogSinkResponse
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse;
+
+                        /**
+                         * Decodes a ValidateAccountAuditLogSinkResponse message from the specified reader or buffer, length delimited.
+                         * @param reader Reader or buffer to decode from
+                         * @returns ValidateAccountAuditLogSinkResponse
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse;
+
+                        /**
+                         * Creates a ValidateAccountAuditLogSinkResponse message from a plain object. Also converts values to their respective internal types.
+                         * @param object Plain object
+                         * @returns ValidateAccountAuditLogSinkResponse
+                         */
+                        public static fromObject(object: { [k: string]: any }): temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse;
+
+                        /**
+                         * Creates a plain object from a ValidateAccountAuditLogSinkResponse message. Also converts values to other types if specified.
+                         * @param message ValidateAccountAuditLogSinkResponse
+                         * @param [options] Conversion options
+                         * @returns Plain object
+                         */
+                        public static toObject(message: temporal.api.cloud.cloudservice.v1.ValidateAccountAuditLogSinkResponse, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                        /**
+                         * Converts this ValidateAccountAuditLogSinkResponse to JSON.
+                         * @returns JSON object
+                         */
+                        public toJSON(): { [k: string]: any };
+
+                        /**
+                         * Gets the default type url for ValidateAccountAuditLogSinkResponse
+                         * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                         * @returns The default type url
+                         */
+                        public static getTypeUrl(typeUrlPrefix?: string): string;
+                    }
                 }
             }
 
@@ -90076,6 +90504,210 @@ export namespace temporal {
                          */
                         public static getTypeUrl(typeUrlPrefix?: string): string;
                     }
+
+                    /** Properties of a KinesisSpec. */
+                    interface IKinesisSpec {
+
+                        /** The role Temporal Cloud assumes when writing records to Kinesis */
+                        roleName?: (string|null);
+
+                        /** Destination Kinesis endpoint arn for temporal to send data to. */
+                        destinationUri?: (string|null);
+
+                        /** The sink's region. */
+                        region?: (string|null);
+                    }
+
+                    /** Represents a KinesisSpec. */
+                    class KinesisSpec implements IKinesisSpec {
+
+                        /**
+                         * Constructs a new KinesisSpec.
+                         * @param [properties] Properties to set
+                         */
+                        constructor(properties?: temporal.api.cloud.sink.v1.IKinesisSpec);
+
+                        /** The role Temporal Cloud assumes when writing records to Kinesis */
+                        public roleName: string;
+
+                        /** Destination Kinesis endpoint arn for temporal to send data to. */
+                        public destinationUri: string;
+
+                        /** The sink's region. */
+                        public region: string;
+
+                        /**
+                         * Creates a new KinesisSpec instance using the specified properties.
+                         * @param [properties] Properties to set
+                         * @returns KinesisSpec instance
+                         */
+                        public static create(properties?: temporal.api.cloud.sink.v1.IKinesisSpec): temporal.api.cloud.sink.v1.KinesisSpec;
+
+                        /**
+                         * Encodes the specified KinesisSpec message. Does not implicitly {@link temporal.api.cloud.sink.v1.KinesisSpec.verify|verify} messages.
+                         * @param message KinesisSpec message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encode(message: temporal.api.cloud.sink.v1.IKinesisSpec, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Encodes the specified KinesisSpec message, length delimited. Does not implicitly {@link temporal.api.cloud.sink.v1.KinesisSpec.verify|verify} messages.
+                         * @param message KinesisSpec message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encodeDelimited(message: temporal.api.cloud.sink.v1.IKinesisSpec, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Decodes a KinesisSpec message from the specified reader or buffer.
+                         * @param reader Reader or buffer to decode from
+                         * @param [length] Message length if known beforehand
+                         * @returns KinesisSpec
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): temporal.api.cloud.sink.v1.KinesisSpec;
+
+                        /**
+                         * Decodes a KinesisSpec message from the specified reader or buffer, length delimited.
+                         * @param reader Reader or buffer to decode from
+                         * @returns KinesisSpec
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): temporal.api.cloud.sink.v1.KinesisSpec;
+
+                        /**
+                         * Creates a KinesisSpec message from a plain object. Also converts values to their respective internal types.
+                         * @param object Plain object
+                         * @returns KinesisSpec
+                         */
+                        public static fromObject(object: { [k: string]: any }): temporal.api.cloud.sink.v1.KinesisSpec;
+
+                        /**
+                         * Creates a plain object from a KinesisSpec message. Also converts values to other types if specified.
+                         * @param message KinesisSpec
+                         * @param [options] Conversion options
+                         * @returns Plain object
+                         */
+                        public static toObject(message: temporal.api.cloud.sink.v1.KinesisSpec, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                        /**
+                         * Converts this KinesisSpec to JSON.
+                         * @returns JSON object
+                         */
+                        public toJSON(): { [k: string]: any };
+
+                        /**
+                         * Gets the default type url for KinesisSpec
+                         * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                         * @returns The default type url
+                         */
+                        public static getTypeUrl(typeUrlPrefix?: string): string;
+                    }
+
+                    /** Properties of a PubSubSpec. */
+                    interface IPubSubSpec {
+
+                        /** The customer service account id that Temporal Cloud impersonates for writing records to customer's pubsub topic */
+                        serviceAccountId?: (string|null);
+
+                        /** Destination pubsub topic name for us */
+                        topicName?: (string|null);
+
+                        /** The gcp project id of pubsub topic and service account */
+                        gcpProjectId?: (string|null);
+                    }
+
+                    /** Represents a PubSubSpec. */
+                    class PubSubSpec implements IPubSubSpec {
+
+                        /**
+                         * Constructs a new PubSubSpec.
+                         * @param [properties] Properties to set
+                         */
+                        constructor(properties?: temporal.api.cloud.sink.v1.IPubSubSpec);
+
+                        /** The customer service account id that Temporal Cloud impersonates for writing records to customer's pubsub topic */
+                        public serviceAccountId: string;
+
+                        /** Destination pubsub topic name for us */
+                        public topicName: string;
+
+                        /** The gcp project id of pubsub topic and service account */
+                        public gcpProjectId: string;
+
+                        /**
+                         * Creates a new PubSubSpec instance using the specified properties.
+                         * @param [properties] Properties to set
+                         * @returns PubSubSpec instance
+                         */
+                        public static create(properties?: temporal.api.cloud.sink.v1.IPubSubSpec): temporal.api.cloud.sink.v1.PubSubSpec;
+
+                        /**
+                         * Encodes the specified PubSubSpec message. Does not implicitly {@link temporal.api.cloud.sink.v1.PubSubSpec.verify|verify} messages.
+                         * @param message PubSubSpec message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encode(message: temporal.api.cloud.sink.v1.IPubSubSpec, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Encodes the specified PubSubSpec message, length delimited. Does not implicitly {@link temporal.api.cloud.sink.v1.PubSubSpec.verify|verify} messages.
+                         * @param message PubSubSpec message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encodeDelimited(message: temporal.api.cloud.sink.v1.IPubSubSpec, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Decodes a PubSubSpec message from the specified reader or buffer.
+                         * @param reader Reader or buffer to decode from
+                         * @param [length] Message length if known beforehand
+                         * @returns PubSubSpec
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): temporal.api.cloud.sink.v1.PubSubSpec;
+
+                        /**
+                         * Decodes a PubSubSpec message from the specified reader or buffer, length delimited.
+                         * @param reader Reader or buffer to decode from
+                         * @returns PubSubSpec
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): temporal.api.cloud.sink.v1.PubSubSpec;
+
+                        /**
+                         * Creates a PubSubSpec message from a plain object. Also converts values to their respective internal types.
+                         * @param object Plain object
+                         * @returns PubSubSpec
+                         */
+                        public static fromObject(object: { [k: string]: any }): temporal.api.cloud.sink.v1.PubSubSpec;
+
+                        /**
+                         * Creates a plain object from a PubSubSpec message. Also converts values to other types if specified.
+                         * @param message PubSubSpec
+                         * @param [options] Conversion options
+                         * @returns Plain object
+                         */
+                        public static toObject(message: temporal.api.cloud.sink.v1.PubSubSpec, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                        /**
+                         * Converts this PubSubSpec to JSON.
+                         * @returns JSON object
+                         */
+                        public toJSON(): { [k: string]: any };
+
+                        /**
+                         * Gets the default type url for PubSubSpec
+                         * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                         * @returns The default type url
+                         */
+                        public static getTypeUrl(typeUrlPrefix?: string): string;
+                    }
                 }
             }
 
@@ -91739,6 +92371,117 @@ export namespace temporal {
                          */
                         public static getTypeUrl(typeUrlPrefix?: string): string;
                     }
+
+                    /** Properties of an AuditLogSinkSpec. */
+                    interface IAuditLogSinkSpec {
+
+                        /** Name of the sink e.g. "audit_log_01" */
+                        name?: (string|null);
+
+                        /** The KinesisSpec when destination_type is Kinesis */
+                        kinesisSink?: (temporal.api.cloud.sink.v1.IKinesisSpec|null);
+
+                        /** The PubSubSpec when destination_type is PubSub */
+                        pubSubSink?: (temporal.api.cloud.sink.v1.IPubSubSpec|null);
+
+                        /** Enabled indicates whether the sink is enabled or not. */
+                        enabled?: (boolean|null);
+                    }
+
+                    /** AuditLogSinkSpec is only used by Audit Log */
+                    class AuditLogSinkSpec implements IAuditLogSinkSpec {
+
+                        /**
+                         * Constructs a new AuditLogSinkSpec.
+                         * @param [properties] Properties to set
+                         */
+                        constructor(properties?: temporal.api.cloud.account.v1.IAuditLogSinkSpec);
+
+                        /** Name of the sink e.g. "audit_log_01" */
+                        public name: string;
+
+                        /** The KinesisSpec when destination_type is Kinesis */
+                        public kinesisSink?: (temporal.api.cloud.sink.v1.IKinesisSpec|null);
+
+                        /** The PubSubSpec when destination_type is PubSub */
+                        public pubSubSink?: (temporal.api.cloud.sink.v1.IPubSubSpec|null);
+
+                        /** Enabled indicates whether the sink is enabled or not. */
+                        public enabled: boolean;
+
+                        /** AuditLogSinkSpec sinkType. */
+                        public sinkType?: ("kinesisSink"|"pubSubSink");
+
+                        /**
+                         * Creates a new AuditLogSinkSpec instance using the specified properties.
+                         * @param [properties] Properties to set
+                         * @returns AuditLogSinkSpec instance
+                         */
+                        public static create(properties?: temporal.api.cloud.account.v1.IAuditLogSinkSpec): temporal.api.cloud.account.v1.AuditLogSinkSpec;
+
+                        /**
+                         * Encodes the specified AuditLogSinkSpec message. Does not implicitly {@link temporal.api.cloud.account.v1.AuditLogSinkSpec.verify|verify} messages.
+                         * @param message AuditLogSinkSpec message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encode(message: temporal.api.cloud.account.v1.IAuditLogSinkSpec, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Encodes the specified AuditLogSinkSpec message, length delimited. Does not implicitly {@link temporal.api.cloud.account.v1.AuditLogSinkSpec.verify|verify} messages.
+                         * @param message AuditLogSinkSpec message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encodeDelimited(message: temporal.api.cloud.account.v1.IAuditLogSinkSpec, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Decodes an AuditLogSinkSpec message from the specified reader or buffer.
+                         * @param reader Reader or buffer to decode from
+                         * @param [length] Message length if known beforehand
+                         * @returns AuditLogSinkSpec
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): temporal.api.cloud.account.v1.AuditLogSinkSpec;
+
+                        /**
+                         * Decodes an AuditLogSinkSpec message from the specified reader or buffer, length delimited.
+                         * @param reader Reader or buffer to decode from
+                         * @returns AuditLogSinkSpec
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): temporal.api.cloud.account.v1.AuditLogSinkSpec;
+
+                        /**
+                         * Creates an AuditLogSinkSpec message from a plain object. Also converts values to their respective internal types.
+                         * @param object Plain object
+                         * @returns AuditLogSinkSpec
+                         */
+                        public static fromObject(object: { [k: string]: any }): temporal.api.cloud.account.v1.AuditLogSinkSpec;
+
+                        /**
+                         * Creates a plain object from an AuditLogSinkSpec message. Also converts values to other types if specified.
+                         * @param message AuditLogSinkSpec
+                         * @param [options] Conversion options
+                         * @returns Plain object
+                         */
+                        public static toObject(message: temporal.api.cloud.account.v1.AuditLogSinkSpec, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                        /**
+                         * Converts this AuditLogSinkSpec to JSON.
+                         * @returns JSON object
+                         */
+                        public toJSON(): { [k: string]: any };
+
+                        /**
+                         * Gets the default type url for AuditLogSinkSpec
+                         * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                         * @returns The default type url
+                         */
+                        public static getTypeUrl(typeUrlPrefix?: string): string;
+                    }
                 }
             }