@replit/protocol 0.4.32 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,475 @@
1
+ import type { RpcTransport } from "@protobuf-ts/runtime-rpc";
2
+ import type { ServiceInfo } from "@protobuf-ts/runtime-rpc";
3
+ import type { SourceDeleteResponse } from "./transfer.js";
4
+ import type { SourceDeleteRequest } from "./transfer.js";
5
+ import type { SourceCleanUpTransferDataResponse } from "./transfer.js";
6
+ import type { SourceCleanUpTransferDataRequest } from "./transfer.js";
7
+ import type { DestinationAbortResponse } from "./transfer.js";
8
+ import type { DestinationAbortRequest } from "./transfer.js";
9
+ import type { SourceAbortResponse } from "./transfer.js";
10
+ import type { SourceAbortRequest } from "./transfer.js";
11
+ import type { DestinationRemoveTombstoneResponse } from "./transfer.js";
12
+ import type { DestinationRemoveTombstoneRequest } from "./transfer.js";
13
+ import type { DestinationAddTombstoneResponse } from "./transfer.js";
14
+ import type { DestinationAddTombstoneRequest } from "./transfer.js";
15
+ import type { DestinationTransferInResponse } from "./transfer.js";
16
+ import type { DestinationTransferInRequest } from "./transfer.js";
17
+ import type { TransferStatusRequest } from "./transfer.js";
18
+ import type { SourceTransferOutResponse } from "./transfer.js";
19
+ import type { SourceTransferOutRequest } from "./transfer.js";
20
+ import type { SourceRemoveTombstoneResponse } from "./transfer.js";
21
+ import type { SourceRemoveTombstoneRequest } from "./transfer.js";
22
+ import type { IsSourceFullyDrainedResponse } from "./transfer.js";
23
+ import type { IsSourceFullyDrainedRequest } from "./transfer.js";
24
+ import type { SourceStopAndDrainResponse } from "./transfer.js";
25
+ import type { SourceStopAndDrainRequest } from "./transfer.js";
26
+ import type { DstAbortDiscardImportRequest } from "./transfer.js";
27
+ import type { TransferRequest } from "./transfer.js";
28
+ import type { DstTransferInRequest } from "./transfer.js";
29
+ import type { SrcTransferOutResponse } from "./transfer.js";
30
+ import type { SrcTransferOutRequest } from "./transfer.js";
31
+ import type { PhaseResponse } from "./transfer.js";
32
+ import type { SrcStopAndDrainRequest } from "./transfer.js";
33
+ import type { UnaryCall } from "@protobuf-ts/runtime-rpc";
34
+ import type { RpcOptions } from "@protobuf-ts/runtime-rpc";
35
+ /**
36
+ * @generated from protobuf service replit.goval.api.lore.transfer.TransferResourceGroup
37
+ */
38
+ export interface ITransferResourceGroupClient {
39
+ /**
40
+ * Jetplane returns synchronously after fencing and draining the source.
41
+ * Lore must bound the transfer and recovery window within the fence TTL.
42
+ *
43
+ * @generated from protobuf rpc: SrcStopAndDrain
44
+ */
45
+ srcStopAndDrain(input: SrcStopAndDrainRequest, options?: RpcOptions): UnaryCall<SrcStopAndDrainRequest, PhaseResponse>;
46
+ /**
47
+ * Upload the service's existing opaque payload to temporary storage.
48
+ * Jetplane uses indented protojson for its existing google.protobuf.Any,
49
+ * retaining the type URL and expanding the payload into readable JSON.
50
+ * Nested manifest URLs are unchanged; refreshing access does not renew them.
51
+ * Lore verifies the receipt over the uploaded bytes and pins the generation.
52
+ *
53
+ * @generated from protobuf rpc: SrcTransferOut
54
+ */
55
+ srcTransferOut(input: SrcTransferOutRequest, options?: RpcOptions): UnaryCall<SrcTransferOutRequest, SrcTransferOutResponse>;
56
+ /**
57
+ * Download the payload and run the service's existing import operation.
58
+ * SUCCESS means import completed behind the arrival fence.
59
+ *
60
+ * @generated from protobuf rpc: DstTransferIn
61
+ */
62
+ dstTransferIn(input: DstTransferInRequest, options?: RpcOptions): UnaryCall<DstTransferInRequest, PhaseResponse>;
63
+ /**
64
+ * Preserve source data and the fence without resuming serving. Jetplane's
65
+ * synchronous exporter has no background job; Lore cancels its RPC context.
66
+ *
67
+ * @generated from protobuf rpc: SrcCancelExport
68
+ */
69
+ srcCancelExport(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
70
+ /**
71
+ * Pre-activation only, after all destination discards and source
72
+ * cancellations succeed. Reopen the source; never revive a retired or
73
+ * superseded transfer.
74
+ *
75
+ * @generated from protobuf rpc: SrcResume
76
+ */
77
+ srcResume(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
78
+ /**
79
+ * Pre-activation only, after import has stopped. Preserve unrelated data
80
+ * while removing this transfer's artifacts using the original import payload.
81
+ *
82
+ * @generated from protobuf rpc: DstAbortDiscardImport
83
+ */
84
+ dstAbortDiscardImport(input: DstAbortDiscardImportRequest, options?: RpcOptions): UnaryCall<DstAbortDiscardImportRequest, PhaseResponse>;
85
+ /**
86
+ * One-way activation after all imports succeed, Jetplane last. Retrying
87
+ * resumes/observes activation; import/discard cannot undo it. After the first
88
+ * activation attempt Lore recovers forward only, even on an ambiguous
89
+ * timeout.
90
+ *
91
+ * @generated from protobuf rpc: DstActivate
92
+ */
93
+ dstActivate(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
94
+ /**
95
+ * After verified cutover/routing, retire the source without deleting backing
96
+ * data referenced by the destination. Never reopen the retired source.
97
+ *
98
+ * @generated from protobuf rpc: SrcDelete
99
+ */
100
+ srcDelete(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
101
+ /**
102
+ * SourceStopAndDrain blocks the resource group on the source cell for
103
+ * the duration of a transfer and starts quiescing it. SUCCESS means the
104
+ * group now rejects new writes and placement AND that a stop has been
105
+ * submitted for every member; it does NOT mean in-flight mutations have
106
+ * finished. The call returns promptly rather than waiting out arbitrarily
107
+ * long shutdowns, so it never outlives a coordinator activity timeout.
108
+ * The coordinator MUST poll IsSourceFullyDrained (exponential backoff)
109
+ * and wait for fully_drained before SourceTransferOut; only then is the
110
+ * snapshot guaranteed to observe every mutation that ever committed on
111
+ * the source, so cutover cannot silently drop a late write. The group
112
+ * stays blocked until SourceRemoveTombstone or until the tombstone
113
+ * expires. Expiry is the disaster backstop that unbricks a group when the
114
+ * coordinator dies: the coordinator supplies the ttl, comfortably longer
115
+ * than its maximum workflow duration so a live transfer never lapses.
116
+ * Idempotent: re-tombstoning an already tombstoned group extends the
117
+ * expiry and re-submits the stop.
118
+ *
119
+ * @generated from protobuf rpc: SourceStopAndDrain
120
+ */
121
+ sourceStopAndDrain(input: SourceStopAndDrainRequest, options?: RpcOptions): UnaryCall<SourceStopAndDrainRequest, SourceStopAndDrainResponse>;
122
+ /**
123
+ * IsSourceFullyDrained reports whether every mutation admitted before the
124
+ * tombstone has committed or can no longer commit. It is the
125
+ * authoritative quiescence signal and a precondition the coordinator
126
+ * polls after SourceStopAndDrain returns SUCCESS and before
127
+ * SourceTransferOut. fully_drained reads false while any member workload
128
+ * is still terminating or a create admitted before the fence has not yet
129
+ * settled, and stays false whenever the group is not fenced by an active
130
+ * source transfer. Read-only: does not mutate the group or its tombstone.
131
+ *
132
+ * @generated from protobuf rpc: IsSourceFullyDrained
133
+ */
134
+ isSourceFullyDrained(input: IsSourceFullyDrainedRequest, options?: RpcOptions): UnaryCall<IsSourceFullyDrainedRequest, IsSourceFullyDrainedResponse>;
135
+ /**
136
+ * SourceRemoveTombstone lifts the source group's tombstone, restoring
137
+ * the group to service. It is the rollback path, valid only while
138
+ * rollback to the source is still safe — before cutover, or after a
139
+ * transfer that never cut over. The coordinator must not call it once
140
+ * the destination has been opened: the retired source must then be
141
+ * retired with SourceDelete, never reopened, so the source and
142
+ * destination can never both serve the group. Idempotent: removing a
143
+ * tombstone that does not exist returns success.
144
+ *
145
+ * @generated from protobuf rpc: SourceRemoveTombstone
146
+ */
147
+ sourceRemoveTombstone(input: SourceRemoveTombstoneRequest, options?: RpcOptions): UnaryCall<SourceRemoveTombstoneRequest, SourceRemoveTombstoneResponse>;
148
+ /**
149
+ * SourceTransferOut exports the group without mutating it. When the export
150
+ * completes synchronously, the response has SUCCESS and a payload. When it
151
+ * continues asynchronously, the response has REQUEST_STARTED and no payload.
152
+ * The coordinator then polls IsSourceTransferOutDone.
153
+ *
154
+ * @generated from protobuf rpc: SourceTransferOut
155
+ */
156
+ sourceTransferOut(input: SourceTransferOutRequest, options?: RpcOptions): UnaryCall<SourceTransferOutRequest, SourceTransferOutResponse>;
157
+ /**
158
+ * IsSourceTransferOutDone reports the export state after a prior
159
+ * SourceTransferOut returned REQUEST_STARTED.
160
+ *
161
+ * @generated from protobuf rpc: IsSourceTransferOutDone
162
+ */
163
+ isSourceTransferOutDone(input: TransferStatusRequest, options?: RpcOptions): UnaryCall<TransferStatusRequest, SourceTransferOutResponse>;
164
+ /**
165
+ * DestinationTransferIn registers the group from a SourceTransferOut
166
+ * payload. A SUCCESS response means the import is complete. A
167
+ * REQUEST_STARTED response means the import continues asynchronously. The
168
+ * coordinator then polls IsDestinationTransferInDone.
169
+ *
170
+ * @generated from protobuf rpc: DestinationTransferIn
171
+ */
172
+ destinationTransferIn(input: DestinationTransferInRequest, options?: RpcOptions): UnaryCall<DestinationTransferInRequest, DestinationTransferInResponse>;
173
+ /**
174
+ * IsDestinationTransferInDone reports the import state after a prior
175
+ * DestinationTransferIn returned REQUEST_STARTED.
176
+ *
177
+ * @generated from protobuf rpc: IsDestinationTransferInDone
178
+ */
179
+ isDestinationTransferInDone(input: TransferStatusRequest, options?: RpcOptions): UnaryCall<TransferStatusRequest, DestinationTransferInResponse>;
180
+ /**
181
+ * DestinationAddTombstone re-blocks an imported group without deleting
182
+ * what was imported. It is the forward-recovery primitive for partial
183
+ * activation: if DestinationRemoveTombstone succeeds on some services
184
+ * but not all, the coordinator re-tombstones the opened ones and retries
185
+ * removal, rather than aborting (which would delete writes the opened
186
+ * services already accepted). Idempotent: re-tombstoning extends the
187
+ * expiry.
188
+ *
189
+ * @generated from protobuf rpc: DestinationAddTombstone
190
+ */
191
+ destinationAddTombstone(input: DestinationAddTombstoneRequest, options?: RpcOptions): UnaryCall<DestinationAddTombstoneRequest, DestinationAddTombstoneResponse>;
192
+ /**
193
+ * DestinationRemoveTombstone lifts the imported group's tombstone on
194
+ * the destination cell, opening it for traffic after cutover.
195
+ * Idempotent: removing a tombstone that does not exist returns success.
196
+ * The arrival tombstone also expires on its own ttl, so a coordinator
197
+ * that dies after cutover but before removal cannot leave the group
198
+ * permanently blocked.
199
+ *
200
+ * @generated from protobuf rpc: DestinationRemoveTombstone
201
+ */
202
+ destinationRemoveTombstone(input: DestinationRemoveTombstoneRequest, options?: RpcOptions): UnaryCall<DestinationRemoveTombstoneRequest, DestinationRemoveTombstoneResponse>;
203
+ /**
204
+ * SourceAbort abandons a failed transfer on the source cell: the
205
+ * service discards any in-progress export state and staged artifacts
206
+ * belonging to this transfer. It never touches the group's own data —
207
+ * SourceRemoveTombstone separately restores the group to service.
208
+ * Idempotent: aborting a transfer with no state returns SUCCESS.
209
+ *
210
+ * @generated from protobuf rpc: SourceAbort
211
+ */
212
+ sourceAbort(input: SourceAbortRequest, options?: RpcOptions): UnaryCall<SourceAbortRequest, SourceAbortResponse>;
213
+ /**
214
+ * DestinationAbort abandons a failed transfer on the destination cell,
215
+ * valid only before any DestinationRemoveTombstone has opened the group:
216
+ * the service deletes whatever this transfer imported — data registered
217
+ * under this transfer_id and its arrival tombstone — restoring the
218
+ * destination to its pre-transfer state. Once the group has been opened
219
+ * it may hold new writes, so recovery is forward via DestinationAddTombstone,
220
+ * never DestinationAbort. It never touches state that predates the
221
+ * transfer or belongs to another transfer. Idempotent: aborting a
222
+ * transfer that imported nothing returns SUCCESS.
223
+ *
224
+ * @generated from protobuf rpc: DestinationAbort
225
+ */
226
+ destinationAbort(input: DestinationAbortRequest, options?: RpcOptions): UnaryCall<DestinationAbortRequest, DestinationAbortResponse>;
227
+ /**
228
+ * SourceCleanUpTransferData deletes whatever artifacts the service
229
+ * staged for one transfer operation (staged exports, temporary
230
+ * objects) — never the group's own data. Called after cutover, or when
231
+ * a transfer is abandoned. Idempotent: a transfer with nothing staged
232
+ * returns SUCCESS.
233
+ *
234
+ * @generated from protobuf rpc: SourceCleanUpTransferData
235
+ */
236
+ sourceCleanUpTransferData(input: SourceCleanUpTransferDataRequest, options?: RpcOptions): UnaryCall<SourceCleanUpTransferDataRequest, SourceCleanUpTransferDataResponse>;
237
+ /**
238
+ * SourceDelete permanently retires the source copy: the group can never
239
+ * be placed or served on this cell again. The coordinator calls it only
240
+ * after a verified cutover; there is no undo. Idempotent: an already
241
+ * retired group returns SUCCESS.
242
+ *
243
+ * A service may delete source indexes and metadata during retirement, but
244
+ * backing data referenced by the destination must remain readable. For
245
+ * example, jetplane can delete source manifest indexes and member rows, but
246
+ * must retain blocks referenced by the destination's copied manifests.
247
+ *
248
+ * @generated from protobuf rpc: SourceDelete
249
+ */
250
+ sourceDelete(input: SourceDeleteRequest, options?: RpcOptions): UnaryCall<SourceDeleteRequest, SourceDeleteResponse>;
251
+ }
252
+ /**
253
+ * @generated from protobuf service replit.goval.api.lore.transfer.TransferResourceGroup
254
+ */
255
+ export declare class TransferResourceGroupClient implements ITransferResourceGroupClient, ServiceInfo {
256
+ private readonly _transport;
257
+ typeName: string;
258
+ methods: import("@protobuf-ts/runtime-rpc").MethodInfo<any, any>[];
259
+ options: {
260
+ [extensionName: string]: import("@protobuf-ts/runtime").JsonValue;
261
+ };
262
+ constructor(_transport: RpcTransport);
263
+ /**
264
+ * Jetplane returns synchronously after fencing and draining the source.
265
+ * Lore must bound the transfer and recovery window within the fence TTL.
266
+ *
267
+ * @generated from protobuf rpc: SrcStopAndDrain
268
+ */
269
+ srcStopAndDrain(input: SrcStopAndDrainRequest, options?: RpcOptions): UnaryCall<SrcStopAndDrainRequest, PhaseResponse>;
270
+ /**
271
+ * Upload the service's existing opaque payload to temporary storage.
272
+ * Jetplane uses indented protojson for its existing google.protobuf.Any,
273
+ * retaining the type URL and expanding the payload into readable JSON.
274
+ * Nested manifest URLs are unchanged; refreshing access does not renew them.
275
+ * Lore verifies the receipt over the uploaded bytes and pins the generation.
276
+ *
277
+ * @generated from protobuf rpc: SrcTransferOut
278
+ */
279
+ srcTransferOut(input: SrcTransferOutRequest, options?: RpcOptions): UnaryCall<SrcTransferOutRequest, SrcTransferOutResponse>;
280
+ /**
281
+ * Download the payload and run the service's existing import operation.
282
+ * SUCCESS means import completed behind the arrival fence.
283
+ *
284
+ * @generated from protobuf rpc: DstTransferIn
285
+ */
286
+ dstTransferIn(input: DstTransferInRequest, options?: RpcOptions): UnaryCall<DstTransferInRequest, PhaseResponse>;
287
+ /**
288
+ * Preserve source data and the fence without resuming serving. Jetplane's
289
+ * synchronous exporter has no background job; Lore cancels its RPC context.
290
+ *
291
+ * @generated from protobuf rpc: SrcCancelExport
292
+ */
293
+ srcCancelExport(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
294
+ /**
295
+ * Pre-activation only, after all destination discards and source
296
+ * cancellations succeed. Reopen the source; never revive a retired or
297
+ * superseded transfer.
298
+ *
299
+ * @generated from protobuf rpc: SrcResume
300
+ */
301
+ srcResume(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
302
+ /**
303
+ * Pre-activation only, after import has stopped. Preserve unrelated data
304
+ * while removing this transfer's artifacts using the original import payload.
305
+ *
306
+ * @generated from protobuf rpc: DstAbortDiscardImport
307
+ */
308
+ dstAbortDiscardImport(input: DstAbortDiscardImportRequest, options?: RpcOptions): UnaryCall<DstAbortDiscardImportRequest, PhaseResponse>;
309
+ /**
310
+ * One-way activation after all imports succeed, Jetplane last. Retrying
311
+ * resumes/observes activation; import/discard cannot undo it. After the first
312
+ * activation attempt Lore recovers forward only, even on an ambiguous
313
+ * timeout.
314
+ *
315
+ * @generated from protobuf rpc: DstActivate
316
+ */
317
+ dstActivate(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
318
+ /**
319
+ * After verified cutover/routing, retire the source without deleting backing
320
+ * data referenced by the destination. Never reopen the retired source.
321
+ *
322
+ * @generated from protobuf rpc: SrcDelete
323
+ */
324
+ srcDelete(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
325
+ /**
326
+ * SourceStopAndDrain blocks the resource group on the source cell for
327
+ * the duration of a transfer and starts quiescing it. SUCCESS means the
328
+ * group now rejects new writes and placement AND that a stop has been
329
+ * submitted for every member; it does NOT mean in-flight mutations have
330
+ * finished. The call returns promptly rather than waiting out arbitrarily
331
+ * long shutdowns, so it never outlives a coordinator activity timeout.
332
+ * The coordinator MUST poll IsSourceFullyDrained (exponential backoff)
333
+ * and wait for fully_drained before SourceTransferOut; only then is the
334
+ * snapshot guaranteed to observe every mutation that ever committed on
335
+ * the source, so cutover cannot silently drop a late write. The group
336
+ * stays blocked until SourceRemoveTombstone or until the tombstone
337
+ * expires. Expiry is the disaster backstop that unbricks a group when the
338
+ * coordinator dies: the coordinator supplies the ttl, comfortably longer
339
+ * than its maximum workflow duration so a live transfer never lapses.
340
+ * Idempotent: re-tombstoning an already tombstoned group extends the
341
+ * expiry and re-submits the stop.
342
+ *
343
+ * @generated from protobuf rpc: SourceStopAndDrain
344
+ */
345
+ sourceStopAndDrain(input: SourceStopAndDrainRequest, options?: RpcOptions): UnaryCall<SourceStopAndDrainRequest, SourceStopAndDrainResponse>;
346
+ /**
347
+ * IsSourceFullyDrained reports whether every mutation admitted before the
348
+ * tombstone has committed or can no longer commit. It is the
349
+ * authoritative quiescence signal and a precondition the coordinator
350
+ * polls after SourceStopAndDrain returns SUCCESS and before
351
+ * SourceTransferOut. fully_drained reads false while any member workload
352
+ * is still terminating or a create admitted before the fence has not yet
353
+ * settled, and stays false whenever the group is not fenced by an active
354
+ * source transfer. Read-only: does not mutate the group or its tombstone.
355
+ *
356
+ * @generated from protobuf rpc: IsSourceFullyDrained
357
+ */
358
+ isSourceFullyDrained(input: IsSourceFullyDrainedRequest, options?: RpcOptions): UnaryCall<IsSourceFullyDrainedRequest, IsSourceFullyDrainedResponse>;
359
+ /**
360
+ * SourceRemoveTombstone lifts the source group's tombstone, restoring
361
+ * the group to service. It is the rollback path, valid only while
362
+ * rollback to the source is still safe — before cutover, or after a
363
+ * transfer that never cut over. The coordinator must not call it once
364
+ * the destination has been opened: the retired source must then be
365
+ * retired with SourceDelete, never reopened, so the source and
366
+ * destination can never both serve the group. Idempotent: removing a
367
+ * tombstone that does not exist returns success.
368
+ *
369
+ * @generated from protobuf rpc: SourceRemoveTombstone
370
+ */
371
+ sourceRemoveTombstone(input: SourceRemoveTombstoneRequest, options?: RpcOptions): UnaryCall<SourceRemoveTombstoneRequest, SourceRemoveTombstoneResponse>;
372
+ /**
373
+ * SourceTransferOut exports the group without mutating it. When the export
374
+ * completes synchronously, the response has SUCCESS and a payload. When it
375
+ * continues asynchronously, the response has REQUEST_STARTED and no payload.
376
+ * The coordinator then polls IsSourceTransferOutDone.
377
+ *
378
+ * @generated from protobuf rpc: SourceTransferOut
379
+ */
380
+ sourceTransferOut(input: SourceTransferOutRequest, options?: RpcOptions): UnaryCall<SourceTransferOutRequest, SourceTransferOutResponse>;
381
+ /**
382
+ * IsSourceTransferOutDone reports the export state after a prior
383
+ * SourceTransferOut returned REQUEST_STARTED.
384
+ *
385
+ * @generated from protobuf rpc: IsSourceTransferOutDone
386
+ */
387
+ isSourceTransferOutDone(input: TransferStatusRequest, options?: RpcOptions): UnaryCall<TransferStatusRequest, SourceTransferOutResponse>;
388
+ /**
389
+ * DestinationTransferIn registers the group from a SourceTransferOut
390
+ * payload. A SUCCESS response means the import is complete. A
391
+ * REQUEST_STARTED response means the import continues asynchronously. The
392
+ * coordinator then polls IsDestinationTransferInDone.
393
+ *
394
+ * @generated from protobuf rpc: DestinationTransferIn
395
+ */
396
+ destinationTransferIn(input: DestinationTransferInRequest, options?: RpcOptions): UnaryCall<DestinationTransferInRequest, DestinationTransferInResponse>;
397
+ /**
398
+ * IsDestinationTransferInDone reports the import state after a prior
399
+ * DestinationTransferIn returned REQUEST_STARTED.
400
+ *
401
+ * @generated from protobuf rpc: IsDestinationTransferInDone
402
+ */
403
+ isDestinationTransferInDone(input: TransferStatusRequest, options?: RpcOptions): UnaryCall<TransferStatusRequest, DestinationTransferInResponse>;
404
+ /**
405
+ * DestinationAddTombstone re-blocks an imported group without deleting
406
+ * what was imported. It is the forward-recovery primitive for partial
407
+ * activation: if DestinationRemoveTombstone succeeds on some services
408
+ * but not all, the coordinator re-tombstones the opened ones and retries
409
+ * removal, rather than aborting (which would delete writes the opened
410
+ * services already accepted). Idempotent: re-tombstoning extends the
411
+ * expiry.
412
+ *
413
+ * @generated from protobuf rpc: DestinationAddTombstone
414
+ */
415
+ destinationAddTombstone(input: DestinationAddTombstoneRequest, options?: RpcOptions): UnaryCall<DestinationAddTombstoneRequest, DestinationAddTombstoneResponse>;
416
+ /**
417
+ * DestinationRemoveTombstone lifts the imported group's tombstone on
418
+ * the destination cell, opening it for traffic after cutover.
419
+ * Idempotent: removing a tombstone that does not exist returns success.
420
+ * The arrival tombstone also expires on its own ttl, so a coordinator
421
+ * that dies after cutover but before removal cannot leave the group
422
+ * permanently blocked.
423
+ *
424
+ * @generated from protobuf rpc: DestinationRemoveTombstone
425
+ */
426
+ destinationRemoveTombstone(input: DestinationRemoveTombstoneRequest, options?: RpcOptions): UnaryCall<DestinationRemoveTombstoneRequest, DestinationRemoveTombstoneResponse>;
427
+ /**
428
+ * SourceAbort abandons a failed transfer on the source cell: the
429
+ * service discards any in-progress export state and staged artifacts
430
+ * belonging to this transfer. It never touches the group's own data —
431
+ * SourceRemoveTombstone separately restores the group to service.
432
+ * Idempotent: aborting a transfer with no state returns SUCCESS.
433
+ *
434
+ * @generated from protobuf rpc: SourceAbort
435
+ */
436
+ sourceAbort(input: SourceAbortRequest, options?: RpcOptions): UnaryCall<SourceAbortRequest, SourceAbortResponse>;
437
+ /**
438
+ * DestinationAbort abandons a failed transfer on the destination cell,
439
+ * valid only before any DestinationRemoveTombstone has opened the group:
440
+ * the service deletes whatever this transfer imported — data registered
441
+ * under this transfer_id and its arrival tombstone — restoring the
442
+ * destination to its pre-transfer state. Once the group has been opened
443
+ * it may hold new writes, so recovery is forward via DestinationAddTombstone,
444
+ * never DestinationAbort. It never touches state that predates the
445
+ * transfer or belongs to another transfer. Idempotent: aborting a
446
+ * transfer that imported nothing returns SUCCESS.
447
+ *
448
+ * @generated from protobuf rpc: DestinationAbort
449
+ */
450
+ destinationAbort(input: DestinationAbortRequest, options?: RpcOptions): UnaryCall<DestinationAbortRequest, DestinationAbortResponse>;
451
+ /**
452
+ * SourceCleanUpTransferData deletes whatever artifacts the service
453
+ * staged for one transfer operation (staged exports, temporary
454
+ * objects) — never the group's own data. Called after cutover, or when
455
+ * a transfer is abandoned. Idempotent: a transfer with nothing staged
456
+ * returns SUCCESS.
457
+ *
458
+ * @generated from protobuf rpc: SourceCleanUpTransferData
459
+ */
460
+ sourceCleanUpTransferData(input: SourceCleanUpTransferDataRequest, options?: RpcOptions): UnaryCall<SourceCleanUpTransferDataRequest, SourceCleanUpTransferDataResponse>;
461
+ /**
462
+ * SourceDelete permanently retires the source copy: the group can never
463
+ * be placed or served on this cell again. The coordinator calls it only
464
+ * after a verified cutover; there is no undo. Idempotent: an already
465
+ * retired group returns SUCCESS.
466
+ *
467
+ * A service may delete source indexes and metadata during retirement, but
468
+ * backing data referenced by the destination must remain readable. For
469
+ * example, jetplane can delete source manifest indexes and member rows, but
470
+ * must retain blocks referenced by the destination's copied manifests.
471
+ *
472
+ * @generated from protobuf rpc: SourceDelete
473
+ */
474
+ sourceDelete(input: SourceDeleteRequest, options?: RpcOptions): UnaryCall<SourceDeleteRequest, SourceDeleteResponse>;
475
+ }