0fbb5ba87b
* fix(tier): lock tier config mutations Co-Authored-By: heihutu <[email protected]> * fix(tier): add mutation RPC auth contract (#5082) Co-authored-by: heihutu <[email protected]> * fix(tier): add peer mutation handler core (#5084) Co-authored-by: heihutu <[email protected]> * fix(tier): add mutation control rpc service (#5087) Co-authored-by: heihutu <[email protected]> * fix(tier): recover prepared mutation drains (#5093) Recover prepared tier mutation intent records into the local tier runtime so a restarted peer fails closed before issuing new remote-tier operation leases or conflicting admin publishes. Reconcile the recovered block map on each scan so committed, aborted, or removed intents clear stale local blocks instead of wedging the peer until process restart. Co-authored-by: heihutu <[email protected]> * fix(tier): prove zero references before tier removal (#5092) Signed-off-by: houseme <[email protected]> Co-authored-by: heihutu <[email protected]> * fix(tier): clear peer mutation runtime blocks (#5094) Install prepared mutation runtime blocks when peer prepare requests are applied or replayed so followers fail closed immediately before restart recovery. Clear the in-memory block once peer commit or abort reaches a durable terminal state, including delayed duplicate prepare requests that observe a committed or aborted record. Co-authored-by: heihutu <[email protected]> * fix(tier): add peer mutation control client Add signed tier mutation prepare, commit, and abort client calls for peer fanout while preserving the existing protobuf and RPC contract. Verify response proofs before interpreting peer outcomes, fail closed on invalid states, and reject oversized payloads before dialing peers. Co-Authored-By: heihutu <[email protected]> --------- Signed-off-by: houseme <[email protected]> Co-authored-by: heihutu <[email protected]>