External storage

Author: jmaeagle99

README.md

@@ -54,6 +54,7 @@ informal introduction to the features and their implementation.
       - [Data Conversion](#data-conversion)
         - [Pydantic Support](#pydantic-support)
         - [Custom Type Data Conversion](#custom-type-data-conversion)
+        - [External Storage](#external-storage)
     - [Workers](#workers)
     - [Workflows](#workflows)
       - [Definition](#definition)
@@ -309,8 +310,9 @@ other_ns_client = Client(**config)
 
 Data converters are used to convert raw Temporal payloads to/from actual Python types. A custom data converter of type
 `temporalio.converter.DataConverter` can be set via the `data_converter` parameter of the `Client` constructor. Data
-converters are a combination of payload converters, payload codecs, and failure converters. Payload converters convert
-Python values to/from serialized bytes. Payload codecs convert bytes to bytes (e.g. for compression or encryption).
+converters are a combination of payload converters, external storage, payload codecs, and failure converters. Payload
+converters convert Python values to/from serialized bytes. External storage optionally stores and retrieves payloads
+to/from external storage services using drivers. Payload codecs convert bytes to bytes (e.g. for compression or encryption).
 Failure converters convert exceptions to/from serialized failures.
 
 The default data converter supports converting multiple types including:
@@ -455,6 +457,119 @@ my_data_converter = dataclasses.replace(
 
 Now `IPv4Address` can be used in type hints including collections, optionals, etc.
 
+##### External Storage
+
+⚠️ **External storage support is currently at an experimental release stage.** ⚠️
+
+External storage allows large payloads to be offloaded to an external storage service (such as Amazon S3) rather than stored inline in workflow history. This is useful when workflows or activities work with data that would otherwise exceed Temporal's payload size limits.
+
+External storage is configured via the `external_storage` parameter on `DataConverter`, which accepts a `temporalio.extstore.Options` instance. Any driver used to store payloads must also be configured on the component that retrieves them — for example, if the client stores workflow inputs using a driver, the worker must include that driver in its `Options.drivers` list to retrieve them.
+
+The simplest setup uses a single storage driver:
+
+```python
+import dataclasses
+from temporalio.client import Client
+from temporalio.converter import DataConverter
+from temporalio.extstore import Options
+
+driver = MyDriver()
+
+client = await Client.connect(
+    "localhost:7233",
+    data_converter=dataclasses.replace(
+        DataConverter.default,
+        external_storage=Options(drivers=[driver]),
+    ),
+)
+```
+
+Some things to note about external storage:
+
+* Only payloads that meet or exceed `Options.payload_size_threshold` (default 256 KiB) are offloaded. Smaller payloads are stored inline as normal.
+* External storage applies transparently to workflow inputs/outputs, activity inputs/outputs, signals, updates, queries, and failure details.
+* The `DataConverter`'s `payload_codec` (if configured) is applied to the *reference* payload stored in workflow history, not to the externally stored bytes. To encrypt or compress the bytes handed to a driver, use `Options.external_converter`.
+* Setting `Options.payload_size_threshold` to `None` causes every payload to be considered for external storage regardless of size.
+
+###### Multiple Drivers and Driver Selection
+
+When multiple storage backends are needed, list all drivers in `Options.drivers` and provide a `driver_selector` to control which driver stores new payloads. Any driver in the list not chosen for storing is still available for retrieval, which is useful when migrating between storage backends.
+
+```python
+from temporalio.extstore import Options
+
+options = Options(
+    drivers=[hot_driver, cold_driver],
+    driver_selector=lambda context, payload: (
+        hot_driver if payload.ByteSize() < 5 * 1024 * 1024 else cold_driver
+    ),
+)
+```
+
+For stateful or class-based selection logic, implement `temporalio.extstore.DriverSelector`:
+
+```python
+from temporalio.extstore import Driver, DriverContext, DriverSelector
+from temporalio.api.common.v1 import Payload
+
+class MyDriverSelector(DriverSelector):
+    def select_driver(self, context: DriverContext, payload: Payload) -> Driver | None:
+        # Return None to store the payload inline rather than externally
+        if payload.ByteSize() < 256 * 1024:
+            return None
+        return hot_driver
+```
+
+Some things to note about driver selection:
+
+* When no `driver_selector` is set, the first driver in `Options.drivers` is always used for storing.
+* Returning `None` from a selector leaves the payload stored inline in workflow history rather than offloading it.
+* The driver returned by the selector must be registered in `Options.drivers`. If it is not, a `DriverNotFoundError` is raised.
+
+###### Custom Drivers
+
+Implement `temporalio.extstore.Driver` to integrate with any external storage system:
+
+```python
+from collections.abc import Sequence
+from temporalio.extstore import Driver, DriverClaim, DriverContext
+from temporalio.api.common.v1 import Payload
+
+class MyDriver(Driver):
+    def name(self) -> str:
+        return "my-org:driver:custom"
+
+    def type(self) -> str:
+        return "my-org:driver:custom"
+
+    async def store(
+        self, context: DriverContext, payloads: Sequence[Payload]
+    ) -> list[DriverClaim]:
+        claims = []
+        for payload in payloads:
+            key = await my_storage.put(payload.SerializeToString())
+            claims.append(DriverClaim(data={"key": key}))
+        return claims
+
+    async def retrieve(
+        self, context: DriverContext, claims: Sequence[DriverClaim]
+    ) -> list[Payload]:
+        payloads = []
+        for claim in claims:
+            data = await my_storage.get(claim.data["key"])
+            p = Payload()
+            p.ParseFromString(data)
+            payloads.append(p)
+        return payloads
+```
+
+Some things to note about implementing a custom driver:
+
+* `store` and `retrieve` must return lists of the same length as their respective input sequences.
+* `Driver.name()` must return a string that is unique among all drivers in `Options.drivers`. This name is embedded in the reference payload stored in workflow history and used to look up the correct driver during retrieval — changing it after payloads have been stored will break retrieval.
+* `Driver.type()` should be consistent across all instances of the same driver class.
+* Implement `temporalio.converter.WithSerializationContext` on your driver to receive workflow or activity context (namespace, workflow ID, activity ID, etc.) at serialization time.
+
 ### Workers
 
 Workers host workflows and/or activities. Here's how to run a worker:

temporalio/bridge/worker.py

@@ -303,10 +303,9 @@ async def decode_activation(
     decode_headers: bool,
 ) -> None:
     """Decode all payloads in the activation."""
-    if data_converter._decode_payload_has_effect:
-        await CommandAwarePayloadVisitor(
-            skip_search_attributes=True, skip_headers=not decode_headers
-        ).visit(_Visitor(data_converter._decode_payload_sequence), activation)
+    await CommandAwarePayloadVisitor(
+        skip_search_attributes=True, skip_headers=not decode_headers
+    ).visit(_Visitor(data_converter._decode_payload_sequence), activation)
 
 
 async def encode_completion(

temporalio/converter.py

@@ -21,6 +21,7 @@
 from itertools import zip_longest
 from logging import getLogger
 from typing import (
+    TYPE_CHECKING,
     Any,
     ClassVar,
     Literal,
@@ -44,6 +45,9 @@
 import temporalio.exceptions
 import temporalio.types
 
+if TYPE_CHECKING:
+    from temporalio.extstore import StorageOptions, _ExternalStorageMiddleware
+
 if sys.version_info < (3, 11):
     # Python's datetime.fromisoformat doesn't support certain formats pre-3.11
     from dateutil import parser  # type: ignore
@@ -922,11 +926,42 @@ def to_failure(
         failure: temporalio.api.failure.v1.Failure,
     ) -> None:
         """See base class."""
+        from temporalio.extstore import (
+            DriverError,
+            PayloadNotFoundError,
+        )
+
         # If already a failure error, use that
         if isinstance(exception, temporalio.exceptions.FailureError):
             self._error_to_failure(exception, payload_converter, failure)
         elif isinstance(exception, nexusrpc.HandlerError):
             self._nexus_handler_error_to_failure(exception, payload_converter, failure)
+        elif isinstance(exception, PayloadNotFoundError):
+            # Convert to failure error
+            failure_error = temporalio.exceptions.ApplicationError(
+                str(exception),
+                {
+                    "driver_name": exception.driver_name,
+                    "driver_claim": exception.driver_claim,
+                },
+                type=exception.__class__.__name__,
+                non_retryable=True,
+            )
+            failure_error.__traceback__ = exception.__traceback__
+            failure_error.__cause__ = exception.__cause__
+            self._error_to_failure(failure_error, payload_converter, failure)
+        elif isinstance(exception, DriverError):
+            # Convert to failure error
+            failure_error = temporalio.exceptions.ApplicationError(
+                str(exception),
+                {
+                    "driver_name": exception.driver_name,
+                },
+                type=exception.__class__.__name__,
+            )
+            failure_error.__traceback__ = exception.__traceback__
+            failure_error.__cause__ = exception.__cause__
+            self._error_to_failure(failure_error, payload_converter, failure)
         else:
             # Convert to failure error
             failure_error = temporalio.exceptions.ApplicationError(
@@ -1289,15 +1324,27 @@ class DataConverter(WithSerializationContext):
     payload_limits: PayloadLimitsConfig = PayloadLimitsConfig()
     """Settings for payload size limits."""
 
+    external_storage: StorageOptions | None = None
+    """Options for external storage. If None, external storage is disabled.
+    
+    .. warning::
+           This API is experimental.
+    """
+
     default: ClassVar[DataConverter]
     """Singleton default data converter."""
 
+    _external_storage_middleware: "_ExternalStorageMiddleware" = dataclasses.field(
+        init=False
+    )
+
     _payload_error_limits: _ServerPayloadErrorLimits | None = None
     """Server-reported limits for payloads."""
 
     def __post_init__(self) -> None:  # noqa: D105
         object.__setattr__(self, "payload_converter", self.payload_converter_class())
         object.__setattr__(self, "failure_converter", self.failure_converter_class())
+        self._reset_external_storage_middleware()
 
     async def encode(
         self, values: Sequence[Any]
@@ -1375,27 +1422,45 @@ def with_context(self, context: SerializationContext) -> Self:
         payload_converter = self.payload_converter
         payload_codec = self.payload_codec
         failure_converter = self.failure_converter
+        external_storage = self.external_storage
         if isinstance(payload_converter, WithSerializationContext):
             payload_converter = payload_converter.with_context(context)
         if isinstance(payload_codec, WithSerializationContext):
             payload_codec = payload_codec.with_context(context)
         if isinstance(failure_converter, WithSerializationContext):
             failure_converter = failure_converter.with_context(context)
+        if isinstance(external_storage, WithSerializationContext):
+            external_storage = external_storage.with_context(context)
         if all(
             new is orig
             for new, orig in [
                 (payload_converter, self.payload_converter),
                 (payload_codec, self.payload_codec),
                 (failure_converter, self.failure_converter),
+                (external_storage, self.external_storage),
             ]
         ):
             return self
         cloned = dataclasses.replace(self)
         object.__setattr__(cloned, "payload_converter", payload_converter)
         object.__setattr__(cloned, "payload_codec", payload_codec)
         object.__setattr__(cloned, "failure_converter", failure_converter)
+        object.__setattr__(cloned, "external_storage", external_storage)
+        cloned._reset_external_storage_middleware(context)
         return cloned
 
+    def _reset_external_storage_middleware(
+        self, context: SerializationContext | None = None
+    ) -> None:
+        # Lazy import to avoid circular dependency
+        from temporalio.extstore import _ExternalStorageMiddleware
+
+        object.__setattr__(
+            self,
+            "_external_storage_middleware",
+            _ExternalStorageMiddleware(self.external_storage, context),
+        )
+
     def _with_payload_error_limits(
         self, limits: _ServerPayloadErrorLimits | None
     ) -> DataConverter:
@@ -1453,48 +1518,47 @@ async def _encode_memo_existing(
     async def _encode_payload(
         self, payload: temporalio.api.common.v1.Payload
     ) -> temporalio.api.common.v1.Payload:
+        payload = await self._external_storage_middleware.store_payload(payload)
         if self.payload_codec:
             payload = (await self.payload_codec.encode([payload]))[0]
         self._validate_payload_limits([payload])
         return payload
 
     async def _encode_payloads(self, payloads: temporalio.api.common.v1.Payloads):
-        if self.payload_codec:
-            await self.payload_codec.encode_wrapper(payloads)
-        self._validate_payload_limits(payloads.payloads)
+        encoded_payloads = await self._encode_payload_sequence(payloads.payloads)
+        del payloads.payloads[:]
+        payloads.payloads.extend(encoded_payloads)
 
     async def _encode_payload_sequence(
         self, payloads: Sequence[temporalio.api.common.v1.Payload]
     ) -> list[temporalio.api.common.v1.Payload]:
-        encoded_payloads = list(payloads)
+        result = await self._external_storage_middleware.store_payloads(payloads)
         if self.payload_codec:
-            encoded_payloads = await self.payload_codec.encode(encoded_payloads)
-        self._validate_payload_limits(encoded_payloads)
-        return encoded_payloads
+            result = await self.payload_codec.encode(result)
+        self._validate_payload_limits(result)
+        return result
 
     async def _decode_payload(
         self, payload: temporalio.api.common.v1.Payload
     ) -> temporalio.api.common.v1.Payload:
         if self.payload_codec:
             payload = (await self.payload_codec.decode([payload]))[0]
+        payload = await self._external_storage_middleware.retrieve_payload(payload)
         return payload
 
     async def _decode_payloads(self, payloads: temporalio.api.common.v1.Payloads):
-        if self.payload_codec:
-            await self.payload_codec.decode_wrapper(payloads)
+        decoded_payloads = await self._decode_payload_sequence(payloads.payloads)
+        del payloads.payloads[:]
+        payloads.payloads.extend(decoded_payloads)
 
     async def _decode_payload_sequence(
         self, payloads: Sequence[temporalio.api.common.v1.Payload]
     ) -> list[temporalio.api.common.v1.Payload]:
-        if not self.payload_codec:
-            return list(payloads)
-        return await self.payload_codec.decode(payloads)
-
-    # Temporary shortcircuit detection while the _decode_* methods may no-op if
-    # a payload codec is not configured. Remove once those paths have more to them.
-    @property
-    def _decode_payload_has_effect(self) -> bool:
-        return self.payload_codec is not None
+        result = list(payloads)
+        if self.payload_codec:
+            result = await self.payload_codec.decode(result)
+        result = await self._external_storage_middleware.retrieve_payloads(result)
+        return result
 
     @staticmethod
     async def _apply_to_failure_payloads(