Struct Tombstone 

pub struct Tombstone {
    pub deleted_at_unix_ms: i64,
    pub purge_after_unix_ms: Option<i64>,
    pub principal_id: String,
    pub reason: TombstoneReason,
    pub repo: Option<Repo>,
    pub note: String,
}

A dated tombstone: the record beside a repository whose catalog row is gone and whose bytes are not.

Written by ServerStores::soft_delete and by a failed ServerStores::purge_repo, read by ServerStores::refuse_stale_store (which is what makes the NAME unusable), by [ServerStores::undelete] and by the sweep.

Why the catalog row is copied in here

undelete has to restore what was there — the hash kind above all. A repository recreated --hash sha256 over a sha1 store serves sha1 refs to a client that asked for sha256 and answers fatal: protocol error; that is the 2026-08-30 resurrection this closed, and an undelete that guessed the defaults would re-open it from the other side. The store’s own OBJECT_FORMAT marker is the second opinion, and ServerStores::create_repo’s adopt path checks them against each other.

It is JSON, and it is read leniently

An earlier build wrote a free-text note here. A file that does not parse as JSON is therefore read as one of those: reason ReclaimFailed, no deadline, the text kept as the note. An old appliance’s tombstone keeps working, and a new one is never mistaken for a soft delete it was not.

Fields

deleted_at_unix_ms: i64

When the delete was asked for.

purge_after_unix_ms: Option<i64>

When a sweep may reclaim the bytes.

None means never on its own: a failed reclaim is owed to an operator, not scheduled, and a sweep that purged it would be doing the thing that already failed, unattended.

principal_id: String

Who asked. Empty when a local CLI did it with no principal.

reason: TombstoneReason

Held, or owed.

repo: Option<Repo>

The catalog row as it was, so undelete restores it rather than a default. None on a tombstone written before this existed.

note: String

A sentence a human reads.

Implementations

impl Tombstone

pub fn parse(text: &str) -> Tombstone

Read one, leniently. See the type docs on the free-text form.

pub fn is_expired_at(&self, now_unix_ms: i64) -> bool

Is the retention window over at now?

A tombstone with no deadline is never expired, whatever now is.

pub fn seconds_left(&self, now_unix_ms: i64) -> Option<i64>

How long is left, in whole seconds, or None when there is no deadline.

Trait Implementations

impl Clone for Tombstone

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Tombstone

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Tombstone

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Tombstone

impl PartialEq for Tombstone

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Tombstone

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Tombstone