From b8e78a78b3b9d0590d232bc801fee716ca515db0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= <mbombeck@gmail.com>
Date: Sun, 27 Sep 2026 10:21:48 +0200
Subject: [PATCH] chore(openapi): regenerate for the practitioner backup
 ciphertext fields

The practitioner entry of the backup payload gains the optional
locationEncrypted and phoneEncrypted fields. The rotation script names each
new column once, at its call, so a dropped call is noticed rather than
covered by a comment.
---
 docs/api/openapi.yaml            | 10 ++++++++++
 scripts/rotate-encryption-key.ts |  1 -
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/docs/api/openapi.yaml b/docs/api/openapi.yaml
index 824b25a94..3f1f82806 100644
--- a/docs/api/openapi.yaml
+++ b/docs/api/openapi.yaml
@@ -36886,6 +36886,16 @@ components:
                 anyOf:
                   - type: string
                   - type: "null"
+              locationEncrypted:
+                anyOf:
+                  - type: string
+                    minLength: 1
+                  - type: "null"
+              phoneEncrypted:
+                anyOf:
+                  - type: string
+                    minLength: 1
+                  - type: "null"
               noteEncrypted:
                 anyOf:
                   - type: string
diff --git a/scripts/rotate-encryption-key.ts b/scripts/rotate-encryption-key.ts
index c007fa0d7..db3ef9348 100644
--- a/scripts/rotate-encryption-key.ts
+++ b/scripts/rotate-encryption-key.ts
@@ -703,7 +703,6 @@ async function main() {
   // v1.39.4 — the practice's phone number and address. NULL on a field the
   // person left empty and on a row the free-text backfill has not reached
   // yet; `rotateBytesColumn` skips both.
-  // "phoneEncrypted" "locationEncrypted"
   results.push(
     await rotateBytesColumn(
       "Practitioner",