@replit/protocol 0.4.32 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,477 @@
1
+ import type { RpcTransport } from "@protobuf-ts/runtime-rpc";
2
+ import type { ServiceInfo } from "@protobuf-ts/runtime-rpc";
3
+ import type { SourceDeleteResponse } from "./transfer.js";
4
+ import type { SourceDeleteRequest } from "./transfer.js";
5
+ import type { SourceCleanUpTransferDataResponse } from "./transfer.js";
6
+ import type { SourceCleanUpTransferDataRequest } from "./transfer.js";
7
+ import type { DestinationAbortResponse } from "./transfer.js";
8
+ import type { DestinationAbortRequest } from "./transfer.js";
9
+ import type { SourceAbortResponse } from "./transfer.js";
10
+ import type { SourceAbortRequest } from "./transfer.js";
11
+ import type { DestinationRemoveTombstoneResponse } from "./transfer.js";
12
+ import type { DestinationRemoveTombstoneRequest } from "./transfer.js";
13
+ import type { DestinationAddTombstoneResponse } from "./transfer.js";
14
+ import type { DestinationAddTombstoneRequest } from "./transfer.js";
15
+ import type { DestinationTransferInResponse } from "./transfer.js";
16
+ import type { DestinationTransferInRequest } from "./transfer.js";
17
+ import type { TransferStatusRequest } from "./transfer.js";
18
+ import type { SourceTransferOutResponse } from "./transfer.js";
19
+ import type { SourceTransferOutRequest } from "./transfer.js";
20
+ import type { SourceRemoveTombstoneResponse } from "./transfer.js";
21
+ import type { SourceRemoveTombstoneRequest } from "./transfer.js";
22
+ import type { IsSourceFullyDrainedResponse } from "./transfer.js";
23
+ import type { IsSourceFullyDrainedRequest } from "./transfer.js";
24
+ import type { SourceStopAndDrainResponse } from "./transfer.js";
25
+ import type { SourceStopAndDrainRequest } from "./transfer.js";
26
+ import type { DstAbortDiscardImportRequest } from "./transfer.js";
27
+ import type { TransferRequest } from "./transfer.js";
28
+ import type { DstTransferInRequest } from "./transfer.js";
29
+ import type { SrcTransferOutResponse } from "./transfer.js";
30
+ import type { SrcTransferOutRequest } from "./transfer.js";
31
+ import type { PhaseResponse } from "./transfer.js";
32
+ import type { SrcStopAndDrainRequest } from "./transfer.js";
33
+ import type { UnaryCall } from "@protobuf-ts/runtime-rpc";
34
+ import type { RpcOptions } from "@protobuf-ts/runtime-rpc";
35
+ /**
36
+ * @generated from protobuf service replit.goval.api.lore.transfer.TransferResourceGroup
37
+ */
38
+ export interface ITransferResourceGroupClient {
39
+ /**
40
+ * Jetplane returns synchronously after fencing the source and requesting
41
+ * eviction. Lore must bound the transfer and recovery window within the fence
42
+ * TTL.
43
+ *
44
+ * @generated from protobuf rpc: SrcStopAndDrain
45
+ */
46
+ srcStopAndDrain(input: SrcStopAndDrainRequest, options?: RpcOptions): UnaryCall<SrcStopAndDrainRequest, PhaseResponse>;
47
+ /**
48
+ * Upload the service's existing opaque payload to temporary storage.
49
+ * Jetplane uses indented protojson for its existing google.protobuf.Any,
50
+ * retaining the type URL and expanding the payload into readable JSON.
51
+ * Nested manifest URLs are unchanged; refreshing access does not renew them.
52
+ * Lore verifies the receipt over the uploaded bytes and pins the generation.
53
+ *
54
+ * @generated from protobuf rpc: SrcTransferOut
55
+ */
56
+ srcTransferOut(input: SrcTransferOutRequest, options?: RpcOptions): UnaryCall<SrcTransferOutRequest, SrcTransferOutResponse>;
57
+ /**
58
+ * Download the payload and run the service's existing import operation.
59
+ * SUCCESS means import completed behind the arrival fence.
60
+ *
61
+ * @generated from protobuf rpc: DstTransferIn
62
+ */
63
+ dstTransferIn(input: DstTransferInRequest, options?: RpcOptions): UnaryCall<DstTransferInRequest, PhaseResponse>;
64
+ /**
65
+ * Preserve source data and the fence without resuming serving. Jetplane's
66
+ * synchronous exporter has no background job; Lore cancels its RPC context.
67
+ *
68
+ * @generated from protobuf rpc: SrcCancelExport
69
+ */
70
+ srcCancelExport(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
71
+ /**
72
+ * Pre-activation only, after all destination discards and source
73
+ * cancellations succeed. Reopen the source; never revive a retired or
74
+ * superseded transfer.
75
+ *
76
+ * @generated from protobuf rpc: SrcResume
77
+ */
78
+ srcResume(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
79
+ /**
80
+ * Pre-activation only, after import has stopped. Preserve unrelated data
81
+ * while removing this transfer's artifacts using the original import payload.
82
+ *
83
+ * @generated from protobuf rpc: DstAbortDiscardImport
84
+ */
85
+ dstAbortDiscardImport(input: DstAbortDiscardImportRequest, options?: RpcOptions): UnaryCall<DstAbortDiscardImportRequest, PhaseResponse>;
86
+ /**
87
+ * One-way activation after all imports succeed, Jetplane last. Retrying
88
+ * resumes/observes activation; import/discard cannot undo it. After the first
89
+ * activation attempt Lore recovers forward only, even on an ambiguous
90
+ * timeout.
91
+ *
92
+ * @generated from protobuf rpc: DstActivate
93
+ */
94
+ dstActivate(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
95
+ /**
96
+ * After verified cutover/routing, retire the source without deleting backing
97
+ * data referenced by the destination. Never reopen the retired source.
98
+ *
99
+ * @generated from protobuf rpc: SrcDelete
100
+ */
101
+ srcDelete(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
102
+ /**
103
+ * SourceStopAndDrain blocks the resource group on the source cell for
104
+ * the duration of a transfer and starts quiescing it. SUCCESS means the
105
+ * group now rejects new writes and placement AND that a stop has been
106
+ * submitted for every member; it does NOT mean in-flight mutations have
107
+ * finished. The call returns promptly rather than waiting out arbitrarily
108
+ * long shutdowns, so it never outlives a coordinator activity timeout.
109
+ * The coordinator MUST poll IsSourceFullyDrained (exponential backoff)
110
+ * and wait for fully_drained before SourceTransferOut; only then is the
111
+ * snapshot guaranteed to observe every mutation that ever committed on
112
+ * the source, so cutover cannot silently drop a late write. The group
113
+ * stays blocked until SourceRemoveTombstone or until the tombstone
114
+ * expires. Expiry is the disaster backstop that unbricks a group when the
115
+ * coordinator dies: the coordinator supplies the ttl, comfortably longer
116
+ * than its maximum workflow duration so a live transfer never lapses.
117
+ * Idempotent: re-tombstoning an already tombstoned group extends the
118
+ * expiry and re-submits the stop.
119
+ *
120
+ * @generated from protobuf rpc: SourceStopAndDrain
121
+ */
122
+ sourceStopAndDrain(input: SourceStopAndDrainRequest, options?: RpcOptions): UnaryCall<SourceStopAndDrainRequest, SourceStopAndDrainResponse>;
123
+ /**
124
+ * IsSourceFullyDrained reports whether every mutation admitted before the
125
+ * tombstone has committed or can no longer commit. It is the
126
+ * authoritative quiescence signal and a precondition the coordinator
127
+ * polls after SourceStopAndDrain returns SUCCESS and before
128
+ * SourceTransferOut. fully_drained reads false while any member workload
129
+ * is still terminating or a create admitted before the fence has not yet
130
+ * settled, and stays false whenever the group is not fenced by an active
131
+ * source transfer. Read-only: does not mutate the group or its tombstone.
132
+ *
133
+ * @generated from protobuf rpc: IsSourceFullyDrained
134
+ */
135
+ isSourceFullyDrained(input: IsSourceFullyDrainedRequest, options?: RpcOptions): UnaryCall<IsSourceFullyDrainedRequest, IsSourceFullyDrainedResponse>;
136
+ /**
137
+ * SourceRemoveTombstone lifts the source group's tombstone, restoring
138
+ * the group to service. It is the rollback path, valid only while
139
+ * rollback to the source is still safe — before cutover, or after a
140
+ * transfer that never cut over. The coordinator must not call it once
141
+ * the destination has been opened: the retired source must then be
142
+ * retired with SourceDelete, never reopened, so the source and
143
+ * destination can never both serve the group. Idempotent: removing a
144
+ * tombstone that does not exist returns success.
145
+ *
146
+ * @generated from protobuf rpc: SourceRemoveTombstone
147
+ */
148
+ sourceRemoveTombstone(input: SourceRemoveTombstoneRequest, options?: RpcOptions): UnaryCall<SourceRemoveTombstoneRequest, SourceRemoveTombstoneResponse>;
149
+ /**
150
+ * SourceTransferOut exports the group without mutating it. When the export
151
+ * completes synchronously, the response has SUCCESS and a payload. When it
152
+ * continues asynchronously, the response has REQUEST_STARTED and no payload.
153
+ * The coordinator then polls IsSourceTransferOutDone.
154
+ *
155
+ * @generated from protobuf rpc: SourceTransferOut
156
+ */
157
+ sourceTransferOut(input: SourceTransferOutRequest, options?: RpcOptions): UnaryCall<SourceTransferOutRequest, SourceTransferOutResponse>;
158
+ /**
159
+ * IsSourceTransferOutDone reports the export state after a prior
160
+ * SourceTransferOut returned REQUEST_STARTED.
161
+ *
162
+ * @generated from protobuf rpc: IsSourceTransferOutDone
163
+ */
164
+ isSourceTransferOutDone(input: TransferStatusRequest, options?: RpcOptions): UnaryCall<TransferStatusRequest, SourceTransferOutResponse>;
165
+ /**
166
+ * DestinationTransferIn registers the group from a SourceTransferOut
167
+ * payload. A SUCCESS response means the import is complete. A
168
+ * REQUEST_STARTED response means the import continues asynchronously. The
169
+ * coordinator then polls IsDestinationTransferInDone.
170
+ *
171
+ * @generated from protobuf rpc: DestinationTransferIn
172
+ */
173
+ destinationTransferIn(input: DestinationTransferInRequest, options?: RpcOptions): UnaryCall<DestinationTransferInRequest, DestinationTransferInResponse>;
174
+ /**
175
+ * IsDestinationTransferInDone reports the import state after a prior
176
+ * DestinationTransferIn returned REQUEST_STARTED.
177
+ *
178
+ * @generated from protobuf rpc: IsDestinationTransferInDone
179
+ */
180
+ isDestinationTransferInDone(input: TransferStatusRequest, options?: RpcOptions): UnaryCall<TransferStatusRequest, DestinationTransferInResponse>;
181
+ /**
182
+ * DestinationAddTombstone re-blocks an imported group without deleting
183
+ * what was imported. It is the forward-recovery primitive for partial
184
+ * activation: if DestinationRemoveTombstone succeeds on some services
185
+ * but not all, the coordinator re-tombstones the opened ones and retries
186
+ * removal, rather than aborting (which would delete writes the opened
187
+ * services already accepted). Idempotent: re-tombstoning extends the
188
+ * expiry.
189
+ *
190
+ * @generated from protobuf rpc: DestinationAddTombstone
191
+ */
192
+ destinationAddTombstone(input: DestinationAddTombstoneRequest, options?: RpcOptions): UnaryCall<DestinationAddTombstoneRequest, DestinationAddTombstoneResponse>;
193
+ /**
194
+ * DestinationRemoveTombstone lifts the imported group's tombstone on
195
+ * the destination cell, opening it for traffic after cutover.
196
+ * Idempotent: removing a tombstone that does not exist returns success.
197
+ * The arrival tombstone also expires on its own ttl, so a coordinator
198
+ * that dies after cutover but before removal cannot leave the group
199
+ * permanently blocked.
200
+ *
201
+ * @generated from protobuf rpc: DestinationRemoveTombstone
202
+ */
203
+ destinationRemoveTombstone(input: DestinationRemoveTombstoneRequest, options?: RpcOptions): UnaryCall<DestinationRemoveTombstoneRequest, DestinationRemoveTombstoneResponse>;
204
+ /**
205
+ * SourceAbort abandons a failed transfer on the source cell: the
206
+ * service discards any in-progress export state and staged artifacts
207
+ * belonging to this transfer. It never touches the group's own data —
208
+ * SourceRemoveTombstone separately restores the group to service.
209
+ * Idempotent: aborting a transfer with no state returns SUCCESS.
210
+ *
211
+ * @generated from protobuf rpc: SourceAbort
212
+ */
213
+ sourceAbort(input: SourceAbortRequest, options?: RpcOptions): UnaryCall<SourceAbortRequest, SourceAbortResponse>;
214
+ /**
215
+ * DestinationAbort abandons a failed transfer on the destination cell,
216
+ * valid only before any DestinationRemoveTombstone has opened the group:
217
+ * the service deletes whatever this transfer imported — data registered
218
+ * under this transfer_id and its arrival tombstone — restoring the
219
+ * destination to its pre-transfer state. Once the group has been opened
220
+ * it may hold new writes, so recovery is forward via DestinationAddTombstone,
221
+ * never DestinationAbort. It never touches state that predates the
222
+ * transfer or belongs to another transfer. Idempotent: aborting a
223
+ * transfer that imported nothing returns SUCCESS.
224
+ *
225
+ * @generated from protobuf rpc: DestinationAbort
226
+ */
227
+ destinationAbort(input: DestinationAbortRequest, options?: RpcOptions): UnaryCall<DestinationAbortRequest, DestinationAbortResponse>;
228
+ /**
229
+ * SourceCleanUpTransferData deletes whatever artifacts the service
230
+ * staged for one transfer operation (staged exports, temporary
231
+ * objects) — never the group's own data. Called after cutover, or when
232
+ * a transfer is abandoned. Idempotent: a transfer with nothing staged
233
+ * returns SUCCESS.
234
+ *
235
+ * @generated from protobuf rpc: SourceCleanUpTransferData
236
+ */
237
+ sourceCleanUpTransferData(input: SourceCleanUpTransferDataRequest, options?: RpcOptions): UnaryCall<SourceCleanUpTransferDataRequest, SourceCleanUpTransferDataResponse>;
238
+ /**
239
+ * SourceDelete permanently retires the source copy: the group can never
240
+ * be placed or served on this cell again. The coordinator calls it only
241
+ * after a verified cutover; there is no undo. Idempotent: an already
242
+ * retired group returns SUCCESS.
243
+ *
244
+ * A service may delete source indexes and metadata during retirement, but
245
+ * backing data referenced by the destination must remain readable. For
246
+ * example, jetplane can delete source manifest indexes and member rows, but
247
+ * must retain blocks referenced by the destination's copied manifests.
248
+ *
249
+ * @generated from protobuf rpc: SourceDelete
250
+ */
251
+ sourceDelete(input: SourceDeleteRequest, options?: RpcOptions): UnaryCall<SourceDeleteRequest, SourceDeleteResponse>;
252
+ }
253
+ /**
254
+ * @generated from protobuf service replit.goval.api.lore.transfer.TransferResourceGroup
255
+ */
256
+ export declare class TransferResourceGroupClient implements ITransferResourceGroupClient, ServiceInfo {
257
+ private readonly _transport;
258
+ typeName: string;
259
+ methods: import("@protobuf-ts/runtime-rpc").MethodInfo<any, any>[];
260
+ options: {
261
+ [extensionName: string]: import("@protobuf-ts/runtime").JsonValue;
262
+ };
263
+ constructor(_transport: RpcTransport);
264
+ /**
265
+ * Jetplane returns synchronously after fencing the source and requesting
266
+ * eviction. Lore must bound the transfer and recovery window within the fence
267
+ * TTL.
268
+ *
269
+ * @generated from protobuf rpc: SrcStopAndDrain
270
+ */
271
+ srcStopAndDrain(input: SrcStopAndDrainRequest, options?: RpcOptions): UnaryCall<SrcStopAndDrainRequest, PhaseResponse>;
272
+ /**
273
+ * Upload the service's existing opaque payload to temporary storage.
274
+ * Jetplane uses indented protojson for its existing google.protobuf.Any,
275
+ * retaining the type URL and expanding the payload into readable JSON.
276
+ * Nested manifest URLs are unchanged; refreshing access does not renew them.
277
+ * Lore verifies the receipt over the uploaded bytes and pins the generation.
278
+ *
279
+ * @generated from protobuf rpc: SrcTransferOut
280
+ */
281
+ srcTransferOut(input: SrcTransferOutRequest, options?: RpcOptions): UnaryCall<SrcTransferOutRequest, SrcTransferOutResponse>;
282
+ /**
283
+ * Download the payload and run the service's existing import operation.
284
+ * SUCCESS means import completed behind the arrival fence.
285
+ *
286
+ * @generated from protobuf rpc: DstTransferIn
287
+ */
288
+ dstTransferIn(input: DstTransferInRequest, options?: RpcOptions): UnaryCall<DstTransferInRequest, PhaseResponse>;
289
+ /**
290
+ * Preserve source data and the fence without resuming serving. Jetplane's
291
+ * synchronous exporter has no background job; Lore cancels its RPC context.
292
+ *
293
+ * @generated from protobuf rpc: SrcCancelExport
294
+ */
295
+ srcCancelExport(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
296
+ /**
297
+ * Pre-activation only, after all destination discards and source
298
+ * cancellations succeed. Reopen the source; never revive a retired or
299
+ * superseded transfer.
300
+ *
301
+ * @generated from protobuf rpc: SrcResume
302
+ */
303
+ srcResume(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
304
+ /**
305
+ * Pre-activation only, after import has stopped. Preserve unrelated data
306
+ * while removing this transfer's artifacts using the original import payload.
307
+ *
308
+ * @generated from protobuf rpc: DstAbortDiscardImport
309
+ */
310
+ dstAbortDiscardImport(input: DstAbortDiscardImportRequest, options?: RpcOptions): UnaryCall<DstAbortDiscardImportRequest, PhaseResponse>;
311
+ /**
312
+ * One-way activation after all imports succeed, Jetplane last. Retrying
313
+ * resumes/observes activation; import/discard cannot undo it. After the first
314
+ * activation attempt Lore recovers forward only, even on an ambiguous
315
+ * timeout.
316
+ *
317
+ * @generated from protobuf rpc: DstActivate
318
+ */
319
+ dstActivate(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
320
+ /**
321
+ * After verified cutover/routing, retire the source without deleting backing
322
+ * data referenced by the destination. Never reopen the retired source.
323
+ *
324
+ * @generated from protobuf rpc: SrcDelete
325
+ */
326
+ srcDelete(input: TransferRequest, options?: RpcOptions): UnaryCall<TransferRequest, PhaseResponse>;
327
+ /**
328
+ * SourceStopAndDrain blocks the resource group on the source cell for
329
+ * the duration of a transfer and starts quiescing it. SUCCESS means the
330
+ * group now rejects new writes and placement AND that a stop has been
331
+ * submitted for every member; it does NOT mean in-flight mutations have
332
+ * finished. The call returns promptly rather than waiting out arbitrarily
333
+ * long shutdowns, so it never outlives a coordinator activity timeout.
334
+ * The coordinator MUST poll IsSourceFullyDrained (exponential backoff)
335
+ * and wait for fully_drained before SourceTransferOut; only then is the
336
+ * snapshot guaranteed to observe every mutation that ever committed on
337
+ * the source, so cutover cannot silently drop a late write. The group
338
+ * stays blocked until SourceRemoveTombstone or until the tombstone
339
+ * expires. Expiry is the disaster backstop that unbricks a group when the
340
+ * coordinator dies: the coordinator supplies the ttl, comfortably longer
341
+ * than its maximum workflow duration so a live transfer never lapses.
342
+ * Idempotent: re-tombstoning an already tombstoned group extends the
343
+ * expiry and re-submits the stop.
344
+ *
345
+ * @generated from protobuf rpc: SourceStopAndDrain
346
+ */
347
+ sourceStopAndDrain(input: SourceStopAndDrainRequest, options?: RpcOptions): UnaryCall<SourceStopAndDrainRequest, SourceStopAndDrainResponse>;
348
+ /**
349
+ * IsSourceFullyDrained reports whether every mutation admitted before the
350
+ * tombstone has committed or can no longer commit. It is the
351
+ * authoritative quiescence signal and a precondition the coordinator
352
+ * polls after SourceStopAndDrain returns SUCCESS and before
353
+ * SourceTransferOut. fully_drained reads false while any member workload
354
+ * is still terminating or a create admitted before the fence has not yet
355
+ * settled, and stays false whenever the group is not fenced by an active
356
+ * source transfer. Read-only: does not mutate the group or its tombstone.
357
+ *
358
+ * @generated from protobuf rpc: IsSourceFullyDrained
359
+ */
360
+ isSourceFullyDrained(input: IsSourceFullyDrainedRequest, options?: RpcOptions): UnaryCall<IsSourceFullyDrainedRequest, IsSourceFullyDrainedResponse>;
361
+ /**
362
+ * SourceRemoveTombstone lifts the source group's tombstone, restoring
363
+ * the group to service. It is the rollback path, valid only while
364
+ * rollback to the source is still safe — before cutover, or after a
365
+ * transfer that never cut over. The coordinator must not call it once
366
+ * the destination has been opened: the retired source must then be
367
+ * retired with SourceDelete, never reopened, so the source and
368
+ * destination can never both serve the group. Idempotent: removing a
369
+ * tombstone that does not exist returns success.
370
+ *
371
+ * @generated from protobuf rpc: SourceRemoveTombstone
372
+ */
373
+ sourceRemoveTombstone(input: SourceRemoveTombstoneRequest, options?: RpcOptions): UnaryCall<SourceRemoveTombstoneRequest, SourceRemoveTombstoneResponse>;
374
+ /**
375
+ * SourceTransferOut exports the group without mutating it. When the export
376
+ * completes synchronously, the response has SUCCESS and a payload. When it
377
+ * continues asynchronously, the response has REQUEST_STARTED and no payload.
378
+ * The coordinator then polls IsSourceTransferOutDone.
379
+ *
380
+ * @generated from protobuf rpc: SourceTransferOut
381
+ */
382
+ sourceTransferOut(input: SourceTransferOutRequest, options?: RpcOptions): UnaryCall<SourceTransferOutRequest, SourceTransferOutResponse>;
383
+ /**
384
+ * IsSourceTransferOutDone reports the export state after a prior
385
+ * SourceTransferOut returned REQUEST_STARTED.
386
+ *
387
+ * @generated from protobuf rpc: IsSourceTransferOutDone
388
+ */
389
+ isSourceTransferOutDone(input: TransferStatusRequest, options?: RpcOptions): UnaryCall<TransferStatusRequest, SourceTransferOutResponse>;
390
+ /**
391
+ * DestinationTransferIn registers the group from a SourceTransferOut
392
+ * payload. A SUCCESS response means the import is complete. A
393
+ * REQUEST_STARTED response means the import continues asynchronously. The
394
+ * coordinator then polls IsDestinationTransferInDone.
395
+ *
396
+ * @generated from protobuf rpc: DestinationTransferIn
397
+ */
398
+ destinationTransferIn(input: DestinationTransferInRequest, options?: RpcOptions): UnaryCall<DestinationTransferInRequest, DestinationTransferInResponse>;
399
+ /**
400
+ * IsDestinationTransferInDone reports the import state after a prior
401
+ * DestinationTransferIn returned REQUEST_STARTED.
402
+ *
403
+ * @generated from protobuf rpc: IsDestinationTransferInDone
404
+ */
405
+ isDestinationTransferInDone(input: TransferStatusRequest, options?: RpcOptions): UnaryCall<TransferStatusRequest, DestinationTransferInResponse>;
406
+ /**
407
+ * DestinationAddTombstone re-blocks an imported group without deleting
408
+ * what was imported. It is the forward-recovery primitive for partial
409
+ * activation: if DestinationRemoveTombstone succeeds on some services
410
+ * but not all, the coordinator re-tombstones the opened ones and retries
411
+ * removal, rather than aborting (which would delete writes the opened
412
+ * services already accepted). Idempotent: re-tombstoning extends the
413
+ * expiry.
414
+ *
415
+ * @generated from protobuf rpc: DestinationAddTombstone
416
+ */
417
+ destinationAddTombstone(input: DestinationAddTombstoneRequest, options?: RpcOptions): UnaryCall<DestinationAddTombstoneRequest, DestinationAddTombstoneResponse>;
418
+ /**
419
+ * DestinationRemoveTombstone lifts the imported group's tombstone on
420
+ * the destination cell, opening it for traffic after cutover.
421
+ * Idempotent: removing a tombstone that does not exist returns success.
422
+ * The arrival tombstone also expires on its own ttl, so a coordinator
423
+ * that dies after cutover but before removal cannot leave the group
424
+ * permanently blocked.
425
+ *
426
+ * @generated from protobuf rpc: DestinationRemoveTombstone
427
+ */
428
+ destinationRemoveTombstone(input: DestinationRemoveTombstoneRequest, options?: RpcOptions): UnaryCall<DestinationRemoveTombstoneRequest, DestinationRemoveTombstoneResponse>;
429
+ /**
430
+ * SourceAbort abandons a failed transfer on the source cell: the
431
+ * service discards any in-progress export state and staged artifacts
432
+ * belonging to this transfer. It never touches the group's own data —
433
+ * SourceRemoveTombstone separately restores the group to service.
434
+ * Idempotent: aborting a transfer with no state returns SUCCESS.
435
+ *
436
+ * @generated from protobuf rpc: SourceAbort
437
+ */
438
+ sourceAbort(input: SourceAbortRequest, options?: RpcOptions): UnaryCall<SourceAbortRequest, SourceAbortResponse>;
439
+ /**
440
+ * DestinationAbort abandons a failed transfer on the destination cell,
441
+ * valid only before any DestinationRemoveTombstone has opened the group:
442
+ * the service deletes whatever this transfer imported — data registered
443
+ * under this transfer_id and its arrival tombstone — restoring the
444
+ * destination to its pre-transfer state. Once the group has been opened
445
+ * it may hold new writes, so recovery is forward via DestinationAddTombstone,
446
+ * never DestinationAbort. It never touches state that predates the
447
+ * transfer or belongs to another transfer. Idempotent: aborting a
448
+ * transfer that imported nothing returns SUCCESS.
449
+ *
450
+ * @generated from protobuf rpc: DestinationAbort
451
+ */
452
+ destinationAbort(input: DestinationAbortRequest, options?: RpcOptions): UnaryCall<DestinationAbortRequest, DestinationAbortResponse>;
453
+ /**
454
+ * SourceCleanUpTransferData deletes whatever artifacts the service
455
+ * staged for one transfer operation (staged exports, temporary
456
+ * objects) — never the group's own data. Called after cutover, or when
457
+ * a transfer is abandoned. Idempotent: a transfer with nothing staged
458
+ * returns SUCCESS.
459
+ *
460
+ * @generated from protobuf rpc: SourceCleanUpTransferData
461
+ */
462
+ sourceCleanUpTransferData(input: SourceCleanUpTransferDataRequest, options?: RpcOptions): UnaryCall<SourceCleanUpTransferDataRequest, SourceCleanUpTransferDataResponse>;
463
+ /**
464
+ * SourceDelete permanently retires the source copy: the group can never
465
+ * be placed or served on this cell again. The coordinator calls it only
466
+ * after a verified cutover; there is no undo. Idempotent: an already
467
+ * retired group returns SUCCESS.
468
+ *
469
+ * A service may delete source indexes and metadata during retirement, but
470
+ * backing data referenced by the destination must remain readable. For
471
+ * example, jetplane can delete source manifest indexes and member rows, but
472
+ * must retain blocks referenced by the destination's copied manifests.
473
+ *
474
+ * @generated from protobuf rpc: SourceDelete
475
+ */
476
+ sourceDelete(input: SourceDeleteRequest, options?: RpcOptions): UnaryCall<SourceDeleteRequest, SourceDeleteResponse>;
477
+ }