@bunbase-ae/js 2.9.1-next.225.44112ee → 2.9.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bunbase-ae/js",
-  "version": "2.9.1-next.225.44112ee",
+  "version": "2.9.1",
   "type": "module",
   "description": "TypeScript/JavaScript SDK for BunBase",
   "license": "UNLICENSED",

package/src/admin.ts

@@ -296,6 +296,19 @@ export interface ServerSettings {
   // a destinations list from the legacy fields at runtime — the Studio UI uses
   // this to drive a per-destination editor with explicit retention.
   backup_destinations?: BackupDestinationConfig[];
+  // Phase 1 (#350): when true, every backup also captures `_files` blobs as a
+  // content-addressed sibling tree. Default true — disable for very large
+  // storage tiers handled out-of-band (e.g. S3 versioning).
+  backup_include_storage?: boolean;
+  // Phase 2 (#350): when true, every backup also captures an AES-256-GCM
+  // encrypted bundle of secret env vars under `backup_env_passphrase`.
+  // Default false — opt-in. Passphrase loss is unrecoverable for the env
+  // restore path; DB+storage still restore without it.
+  backup_include_env?: boolean;
+  // Operator-provided passphrase for `backup_include_env`. Must be at least
+  // 32 chars. Returned as the redacted sentinel ("********") on read once
+  // #379 lands.
+  backup_env_passphrase?: string;
   server_timezone?: string;
   server_locale?: string;
   access_log_level?: "info" | "warn" | "error";
@@ -340,6 +353,12 @@ export interface BackupFile {
   sha256?: string;
   /** Per-destination push results. Only populated for newly-created backups. */
   destinations?: Array<{ id: string; type: string; ok: boolean; error?: string }>;
+  /**
+   * Whether an encrypted env bundle sidecar (`<filename>.env.json.enc`) is
+   * present alongside the dump. When true, the Studio Restore flow prompts
+   * for the env passphrase before calling restore. (#350 Phase 2)
+   */
+  has_env_bundle?: boolean;
 }
 
 export interface HealthResponse {
@@ -941,11 +960,11 @@ class AdminBackupsClient {
     await this.http.request("DELETE", `/api/v1/admin/backups/${encodeURIComponent(filename)}`);
   }
 
-  async restore(filename: string): Promise<void> {
+  async restore(filename: string, opts?: { env_passphrase?: string }): Promise<void> {
     await this.http.request(
       "POST",
       `/api/v1/admin/backups/${encodeURIComponent(filename)}/restore`,
-      { body: {} },
+      { body: opts ?? {} },
     );
   }