@bunbase-ae/js 2.10.1-next.252.6c5a17b → 2.10.1-next.253.19f24dd

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bunbase-ae/js",
-  "version": "2.10.1-next.252.6c5a17b",
+  "version": "2.10.1-next.253.19f24dd",
   "type": "module",
   "description": "TypeScript/JavaScript SDK for BunBase",
   "license": "UNLICENSED",

package/src/admin.ts

@@ -301,14 +301,25 @@ export interface ServerSettings {
   // storage tiers handled out-of-band (e.g. S3 versioning).
   backup_include_storage?: boolean;
   // Phase 2 (#350): when true, every backup also captures an AES-256-GCM
-  // encrypted bundle of secret env vars under `backup_env_passphrase`.
-  // Default false — opt-in. Passphrase loss is unrecoverable for the env
-  // restore path; DB+storage still restore without it.
+  // encrypted bundle of secret env vars. The passphrase used to encrypt the
+  // bundle is sourced from the `BACKUP_ENV_PASSPHRASE` environment variable
+  // on the BunBase host (see `backup_env_passphrase_source` below for the
+  // read-only set/unset indicator). Default false — opt-in. Passphrase loss
+  // is unrecoverable for the env restore path; DB+storage still restore
+  // without it.
   backup_include_env?: boolean;
-  // Operator-provided passphrase for `backup_include_env`. Must be at least
-  // 32 chars. Returned as the redacted sentinel ("********") on read once
-  // #379 lands.
+  /**
+   * @deprecated Removed in #402. The env-bundle passphrase is sourced from
+   * the `BACKUP_ENV_PASSPHRASE` environment variable only — never from
+   * `_settings`, never via this API. Setting this field via the admin API
+   * is silently ignored. Use `backup_env_passphrase_source` to read whether
+   * the env var is set on the BunBase host.
+   */
   backup_env_passphrase?: string;
+  // Read-only indicator (#402). `"env_set"` means BACKUP_ENV_PASSPHRASE is
+  // present in the BunBase host's process environment; `"env_unset"` means
+  // it is missing — encrypted env-bundle capture will skip with a warn log.
+  backup_env_passphrase_source?: "env_set" | "env_unset";
   server_timezone?: string;
   server_locale?: string;
   access_log_level?: "info" | "warn" | "error";