feat: add support for single SAA operator actions by spkane31 · Pull Request #1092 · temporalio/cli

spkane31 · 2026-06-18T15:23:00Z

What changed?

Add standalone activity support for pause, unpause, reset, update-options.

Combinations, Results, and Changes

`activity-id`	`workflow-id`	`run-id`	`query`	Current Result	Result w/ SAA single operation support	Change
NO	NO	NO	NO	Invalid	Invalid	—
NO	NO	NO	YES	All workflows matching the visibility query	All workflows matching the visibility query	—
NO	NO	YES	NO	Invalid	Invalid	—
NO	NO	YES	YES	Invalid	Invalid	—
NO	YES	NO	NO	Invalid (requires activity-id)		—
NO	YES	NO	YES	Invalid	Invalid	—
NO	YES	YES	NO	Invalid (requires activity-id)	Invalid (requires activity-id)	—
NO	YES	YES	YES	Invalid	Invalid	—
YES	NO	NO	NO	Invalid	The most recent activity with a given ID	New (standalone)
YES	NO	NO	YES	Batch of workflows matching the query, `--activity-id` is ignored	Batch of workflows matching the query, `--activity-id` is ignored	—
YES	NO	YES	NO	Invalid	A specific standalone activity	New (standalone)
YES	NO	YES	YES	Invalid	Invalid	—
YES	YES	NO	NO	A specific activity in the latest run of a workflow	A specific activity in a workflow	—
YES	YES	YES	NO	Specific activity ID for a workflow ID	Specific activity ID for a workflow ID	—
YES	YES	NO	YES	Invalid	Invalid	—
YES	YES	YES	YES	Invalid	Invalid	—

Checklist

Design

This feature does not depend on Cloud-only APIs or behavior (it works against an OSS server)
Experimental features are marked with (Experimental) in commands.yaml

Help text (see style guide at the top of commands.yaml)

All flags shown in help text and examples are implemented and functional
Summaries use sentence case and have no trailing period
Long descriptions end with a period and include at least one example invocation
Examples use long flags (--namespace, not -n), one flag per line
Placeholder values use YourXxx form (YourWorkflowId, YourNamespace)

Behavior

Error messages are lowercase with no trailing punctuation

Tests

Added functional test(s) (SharedServerSuite)

Manual tests

Setup

temporal server start-dev --headless
temporal workflow start \
    --type YourWorkflowType \
    --task-queue YourTaskQueue \
    --workflow-id YourWorkflowId

Happy path

$ temporal <command> \
    --flag value
<expected output>

Error case

$ temporal <command> \
    --invalid-combination
Error: <expected error message>
$ echo $?
1

Composition

$ temporal <command-one> ...
$ temporal <command-two> --flag <value-from-above>
<expected output>

spkane31 · 2026-06-18T15:57:14Z

 	go.temporal.io/sdk v1.44.1
 	go.temporal.io/sdk/contrib/envconfig v1.0.2
-	go.temporal.io/server v1.32.0-157.0
+	go.temporal.io/server v1.29.0-135.0.0.20260616172559-0f70f6096799


NOTE: this is on the feature/activity-operator-cmds branch in temporalio/temporal, once that PR merges this can be updated to latest main.

fretz12 · 2026-07-31T20:44:55Z

+				UpdateMask: &fieldmaskpb.FieldMask{
+					Paths: updatePath,
+				},
+				Identity: c.Parent.Identity,


I think we need to take in --restore-original-options?

fretz12 · 2026-07-31T20:50:01Z

+			ActivityId: c.ActivityId,
+			RunId:      c.RunId,
+			Identity:   c.Parent.Identity,
+			KeepPaused: c.KeepPaused,


Same thing, take in restore orig options

fretz12 · 2026-07-31T21:04:28Z

+        short: w
+        type: string
+        description: |
+          Workflow ID. Set to target a workflow Activity. Omit to target a


Do we need these desc updates for single-activity-or-batch as well?

dandavison

ResourceID is missing in a couple of places. I think that's a genuine omission that needs to be fixed. Otherwise LGTM

dandavison · 2026-08-03T14:56:20Z

+		exec, batchReq, err = opts.workflowExecOrBatch(cctx, c.Parent.Namespace, cl, singleOrBatchOverrides{})
+		if err != nil {
+			return err
+		}


Not blocking but it feels like there should be a way to express this more clearly, here and in the other functions. common.WorkflowExecution seems to be set on an SAA path.

dandavison · 2026-08-03T15:04:32Z

+		ActivityId: c.ActivityId,
+		RunId:      c.RunId,
+		Identity:   c.Identity,
+		Reason:     c.Reason,


Missing resourceID here.

dandavison · 2026-08-03T15:05:06Z

 			ResetHeartbeat: c.ResetHeartbeats,
 			Jitter:         durationpb.New(c.Jitter.Duration()),
 			Identity:       c.Parent.Identity,
-			Activity:       &workflowservice.UnpauseActivityRequest_Id{Id: c.ActivityId},


Missing ResourceID

# Backport for CLI v1.8.3 (monthly public/latest) Cuts the scheduled monthly public/latest release onto `release/1.8.x`, which was sitting exactly on `v1.8.2` with nothing backported since 2026-07-31. **The governing constraint:** this release keeps the embedded dev server on OSS Server **v1.31.2**. Everything below follows from that. `main` has moved to server `v1.32.0-162.0` (a Cloud tag) and `go.temporal.io/api` v1.63.x, so `main` is not publicly releasable and a large share of recent work cannot ship here. ## Summary Of the 29 commits on `main` since `v1.8.2`: | | Count | |---|---| | Cherry-picked as-is | 13 | | Dependency bumps folded into one commit | 5 | | New commits authored for this backport | 2 | | Excluded | 11 | Verified: `go build ./...` and `cliext` build clean, `make gen` produces no diff, full `go test ./...` green, binary reports `Server 1.31.2, UI 2.50.1`. ## Included ### Cherry-picked from `main` | Commit | Change | |---|---| | #1153 | test: fix concurrent start test assertions | | #1140 | Gate AWS Lambda role/external-id behind `--aws-lambda-skip-role-and-external-id` | | #1137 | Delegate help and completion to extensions when applicable | | #1167 | Add `--gcp-cloud-run-scale-down-stabilization-duration` | | #1176 | Fix cliext build, add it to CI workflow | | #1149 | chore(deps): bump the github-actions group with 3 updates | | #1162 | chore(deps): bump docker/login-action 4.4.0 → 4.5.2 | | #1166 | chore(deps): bump docker/login-action 4.5.2 → 4.6.0 | | #1156 | fix(activity): remove no-op `reset-attempts` flag — **adjusted, see below** | | #1061 | feat: add `temporal options` command and declutter help output | | #1171 | test: stabilize activity list pagination | | #1186 | fix: document `start-dev` `--log-level` default | | #1177 | Support AWS AgentCore compute provider | The last three merged to `main` on 2026-09-01, after the initial backport set was assembled, and all three cherry-pick cleanly with no dependency movement. **#1177 (AgentCore)** is a new feature rather than a fix, so it warrants a deliberate look. It carries no api v1.63.x dependency: the provider type is the plain string `"aws-agentcore"` and the provider details are an opaque `map[string]any` encoded to a `commonpb.Payload`. Server v1.31.2 does not validate the provider type — it forwards it as `wciiface.ComputeProviderType` — so acceptance is decided by Cloud-side WCI, not by anything this release pins. Its functional test is `t.Skip`-ed pending AWS fixtures, which matches the existing Lambda and GCP Cloud Run compute-provider tests. **#1171** needed one addition on this line: its new `TestActivity_List_Pagination` calls `activity.GetInfo(ctx)`, and the `go.temporal.io/sdk/activity` import is present on `main` but not in this file on `release/1.8.x`. The import is folded into the #1171 pick so each commit builds standalone. ### New commits **`backport: pin compatible dependency set and adjust #1156 for 1.8.x`** Dependency bumps are applied directly rather than cherry-picked, because taking them as-is pulls `go.temporal.io/api` past what server v1.31.2 can compile against (see *Dependency ceiling* below). Covers the isatty, x/tools, grpc, echo and testify bumps (#1145, #1148, #1132, #1175, #1174). Also pins `cliext` to a **tagged** SDK. `main` currently pins `go.temporal.io/sdk v1.46.1-0.20260720184640-f34dc3da35ab` — a commit SHA — in `cliext/go.mod`, which reaches the root build through `replace github.com/temporalio/cli/cliext => ./cliext`. That violates the tagged-dependencies rule for a public release. **`main` should be fixed separately.** **`fix(activity): use correct update-mask path for --task-queue`** Fixes a real, currently-shipping bug. `v1.8.2` sends update-mask path `task_queue_name`, which the server's `ParseFieldMask` normalizes to `taskQueueName` and which never matches its `taskQueue.name` key — so `temporal activity update-options --task-queue` **silently does nothing**. Verified A/B against the embedded server v1.31.2: - with `task_queue.name` → task queue updates as expected - with `task_queue_name` (what v1.8.2 ships) → unchanged The fix exists upstream only inside #1092, which cannot be backported, so it is extracted here as a one-liner. ## Dependency ceiling `server v1.31.2` **does not compile** against `go.temporal.io/api` ≥ **v1.62.10**: that release adds `CountNexusOperationExecutions` to the `WorkflowServiceClient` interface, which v1.31.2's `clientImpl`, `metricClient` and `retryableClient` do not implement. Because api is a transitive dependency, Go's minimal version selection drags it upward whenever anything that depends on it is bumped. That caps everything: | Dependency | Ceiling | Reason | |---|---|---| | `go.temporal.io/api` | v1.62.9 | v1.62.10 breaks server v1.31.2 | | `github.com/temporalio/ui-server/v2` | v2.50.1 | v2.51.0 → api v1.62.13; v2.53.x → api v1.63.x | | `go.temporal.io/sdk` | v1.42.0 | v1.43.1 → api v1.62.12; v1.46.0 → api v1.63.x | | `go.temporal.io/sdk/contrib/envconfig` | v1.0.0 | v1.0.1 changed `DefaultConfigFilePath` to one return value; `cliext/config.oauth.go` expects two | Resulting set — every Temporal direct dependency unchanged from `v1.8.2` except an api patch bump: ``` go.temporal.io/api v1.62.9 (was v1.62.8) go.temporal.io/server v1.31.2 unchanged go.temporal.io/sdk v1.41.1 unchanged go.temporal.io/sdk/contrib/envconfig v1.0.0 unchanged github.com/temporalio/ui-server/v2 v2.50.1 unchanged ``` **Note for the UI team:** this release ships **UI Server v2.50.1, unchanged**. The natural assumption would be v2.53.3, but that requires api v1.63.5. ## Excluded, and why ### Requires OSS Server v1.32.x / api v1.63.x | Commit | Reason | |---|---| | #1172 bump server for Nexus Query support | The server bump itself — out of scope for this line | | #1092 single SAA operator actions | Uses `Pause/Unpause/Reset ActivityExecutionRequest` and `UpdateActivityExecutionOptionsRequest`, absent from api v1.62.x | | #1152 enable SAA operator and batch commands in dev server | Needs `activity.EnableStandaloneActivityOperatorCommands` and `dynamicconfig.FrontendEnableBatchOperationsForStandaloneActivities`, absent from server v1.31.2 | | #1159 drop `activity unpause --reset-attempts`/`--reset-heartbeats` | Authored on top of #1092; its diff context already uses the new RPC names | | #1150 reject `update-options --start-delay` for workflow Activities | Needs `ActivityOptions.StartDelay`, new in api v1.63.5, via unbackported prerequisite #1113 | | #1131 render links on activity describe | Needs `ActivityExecutionInfo.GetLinks` and `DescribeActivityExecutionResponse.GetCallbacks`, new in api v1.63.5 | | #1151 bump UI server v2.53.1 | Requires api v1.63.4 | | #1164 bump UI server v2.53.3 | Requires api v1.63.5 | ### Excluded for other reasons **#1114 — staged connection diagnosis for opaque dial failures.** Depends on #1017 (*Unwrap System Nexus Operations in event history*), which introduced `dialClientWithCodec` and was never backported. On `release/1.8.x` only the two-value `dialClient` exists, and git silently misapplies #1114's hunks into it, producing three-value returns from a two-value function. Pulling in #1017 is too large for a patch release. **#1158 — docs: clarify `--query` targets Workflow Activities.** Pure documentation describing Standalone Activity semantics ("Omit `--workflow-id` to target a Standalone Activity…"). That behavior does not exist on this line, so backporting it would ship misleading help text. **#1155 — fix(activity): include options in batch `update-options`.** The change itself is correct, but batch `update-options` applies **nothing** on server v1.31.2. Probed directly: after a batch run, task queue is unchanged and `schedule_to_close_timeout` is still `0s`. Its new test `TestActivityOptionsUpdate_BatchMatchAll` fails consistently (3/3). Deferred to the release that carries the server bump. ## Reviewer notes **#1156 was adjusted rather than taken verbatim.** Upstream, `activity reset` had already lost `--reset-heartbeats` to an earlier SAA commit, so taking `main`'s version would have removed both flags at once. Only `--reset-attempts` is a no-op, the surviving help text still documents `--reset-heartbeats`, and its removal belongs to #1159 (excluded). This backport therefore removes only `--reset-attempts` and keeps the batch path on `c.ResetHeartbeats` rather than hardcoding `true`. Worth a careful look. **Known flaky test.** `TestHelp_AllFlag_ShorterCommandPathWinsi` failed on one full-suite run and passed on the next; it passes 5/5 in isolation. It arrives with #1137 and exists identically on `main`, so it is inherited rather than introduced — but expect occasional red CI. **Pre-existing `go vet` findings** (two lock-copy, one context leak) are byte-identical to the `v1.8.2` baseline. Not introduced here. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Alex Stanfield <13949480+chaptersix@users.noreply.github.com> Co-authored-by: Nanook <nanookclaw@users.noreply.github.com> Co-authored-by: mani-j9 <mani.janumpally@temporal.io> Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com> Co-authored-by: Jeri Lane <jeri.lane@temporal.io> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Sean Bollin <sean@sean-bollin.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Sean Kane <spkane31@gmail.com> Co-authored-by: Ross Nelson <axcess1@me.com> Co-authored-by: dryrun <dryrun@local> Co-authored-by: justinschoeff <justin.schoeff@temporal.io>

spkane31 force-pushed the spk/activity-operator-cmds branch from f0e1ce7 to 1f84c0e Compare June 18, 2026 15:49

spkane31 commented Jun 18, 2026

View reviewed changes

spkane31 requested review from chaptersix, dandavison and fretz12 June 18, 2026 16:00

spkane31 force-pushed the spk/activity-operator-cmds branch from 66bef63 to 0c93fc7 Compare July 20, 2026 22:21

spkane31 force-pushed the spk/activity-operator-cmds branch from 95ab46c to 807db98 Compare July 29, 2026 18:48

spkane31 marked this pull request as ready for review July 29, 2026 18:48

spkane31 requested a review from a team as a code owner July 29, 2026 18:48

Sean Kane added 8 commits July 31, 2026 13:23

feat: add support for single SAA operator actions

efcef0c

code gen and improved documentation of flags

95b03aa

refining

ed31767

remove the reset-heartbeats flag

f0142e3

fixing tests

0d2176c

wrong name

9e99c57

enable saa operator commands by DC

57ad7a9

add update-options, correct some documentation strings

b72bb14

spkane31 force-pushed the spk/activity-operator-cmds branch from 0386151 to b72bb14 Compare July 31, 2026 19:32

fretz12 reviewed Jul 31, 2026

View reviewed changes

some missing options in cli commands and better documentation

6a4abd9

dandavison approved these changes Aug 3, 2026

View reviewed changes

missing ResourceId

d445850

spkane31 added this pull request to the merge queue Aug 3, 2026

Merged via the queue into main with commit 7d504fa Aug 3, 2026
11 checks passed

spkane31 deleted the spk/activity-operator-cmds branch August 3, 2026 15:47

ks-temporal mentioned this pull request Aug 31, 2026

Backport for CLI v1.8.3 (monthly public/latest) #1185

Merged

Navigation Menu

Uh oh!

feat: add support for single SAA operator actions - #1092

feat: add support for single SAA operator actions#1092
spkane31 merged 10 commits into
mainfrom
spk/activity-operator-cmds

spkane31 commented Jun 18, 2026 •

edited

Loading

Uh oh!

spkane31 Jun 18, 2026

Uh oh!

fretz12 Jul 31, 2026

Uh oh!

fretz12 Jul 31, 2026

Uh oh!

fretz12 Jul 31, 2026

Uh oh!

dandavison left a comment

Uh oh!

dandavison Aug 3, 2026

Uh oh!

dandavison Aug 3, 2026

Uh oh!

dandavison Aug 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

spkane31 commented Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What changed?

Combinations, Results, and Changes

Checklist

Manual tests

Uh oh!

spkane31 Jun 18, 2026

Choose a reason for hiding this comment

Uh oh!

fretz12 Jul 31, 2026

Choose a reason for hiding this comment

Uh oh!

fretz12 Jul 31, 2026

Choose a reason for hiding this comment

Uh oh!

fretz12 Jul 31, 2026

Choose a reason for hiding this comment

Uh oh!

dandavison left a comment

Choose a reason for hiding this comment

Uh oh!

dandavison Aug 3, 2026

Choose a reason for hiding this comment

Uh oh!

dandavison Aug 3, 2026

Choose a reason for hiding this comment

Uh oh!

dandavison Aug 3, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

spkane31 commented Jun 18, 2026 •

edited

Loading