From 70da1ede64aea5f633768415d8bff164a0ce9e6e Mon Sep 17 00:00:00 2001
From: Jannis Braun <151788261+TheZwiss@users.noreply.github.com>
Date: Sat, 20 Jun 2026 02:34:30 +0200
Subject: [PATCH] feat(backup): manual-snapshot CLI + host-side backup.sh and
 restore.sh (safe restore)

---
 backup.sh                               | 12 +++++
 packages/server/src/scripts/snapshot.ts |  6 +++
 restore.sh                              | 59 +++++++++++++++++++++++++
 3 files changed, 77 insertions(+)
 create mode 100755 backup.sh
 create mode 100644 packages/server/src/scripts/snapshot.ts
 create mode 100755 restore.sh

diff --git a/backup.sh b/backup.sh
new file mode 100755
index 00000000..b6ddf7b9
--- /dev/null
+++ b/backup.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+# Trigger a manual DB snapshot inside the running Backspace container.
+set -euo pipefail
+cd "$(dirname "$0")"
+
+if ! docker ps --format '{{.Names}}' | grep -q '^backspace$'; then
+  echo "Error: backspace container is not running." >&2
+  exit 1
+fi
+
+docker exec -w /app/packages/server backspace \
+  node --import tsx/esm src/scripts/snapshot.ts
diff --git a/packages/server/src/scripts/snapshot.ts b/packages/server/src/scripts/snapshot.ts
new file mode 100644
index 00000000..b094a8b7
--- /dev/null
+++ b/packages/server/src/scripts/snapshot.ts
@@ -0,0 +1,6 @@
+import { getRawDb } from '../db/index.js';
+import { createSnapshot, pruneSnapshots } from '../utils/backup.js';
+
+const p = createSnapshot(getRawDb(), 'manual');
+pruneSnapshots();
+console.log('Manual snapshot written: ' + p);
diff --git a/restore.sh b/restore.sh
new file mode 100755
index 00000000..8068405b
--- /dev/null
+++ b/restore.sh
@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+# Restore the Backspace SQLite DB from a snapshot in data/backups/.
+# Usage:
+#   ./restore.sh                 List available snapshots.
+#   ./restore.sh <snapshot.db>   Restore the named snapshot (path or basename).
+set -euo pipefail
+cd "$(dirname "$0")"
+
+BACKUP_DIR="data/backups"
+DB="data/backspace.db"
+
+if [[ ! -d "$BACKUP_DIR" ]]; then
+  echo "No backups directory at $BACKUP_DIR." >&2
+  exit 1
+fi
+
+# No arg: list snapshots newest-first and exit.
+if [[ $# -eq 0 ]]; then
+  echo "Available snapshots (newest first):"
+  ls -1t "$BACKUP_DIR"/*.db 2>/dev/null | while read -r f; do
+    printf "  %s  (%s)\n" "$(basename "$f")" "$(du -h "$f" | cut -f1)"
+  done
+  echo ""
+  echo "Restore with: ./restore.sh <snapshot-filename>"
+  exit 0
+fi
+
+# Resolve the snapshot to a basename inside BACKUP_DIR (restore is always from data/backups/).
+SNAP_NAME="$(basename "$1")"
+if [[ ! -f "$BACKUP_DIR/$SNAP_NAME" ]]; then
+  echo "Snapshot not found in $BACKUP_DIR: $SNAP_NAME" >&2
+  exit 1
+fi
+
+echo "About to restore: $BACKUP_DIR/$SNAP_NAME"
+echo "This will REPLACE $DB. The current DB is saved first as a pre-restore snapshot."
+read -rp "Continue? [y/N] " yn
+[[ "${yn,,}" == "y" ]] || { echo "Aborted."; exit 0; }
+
+echo "[1/3] Stopping backspace container..."
+docker compose stop backspace
+
+# data/backspace.db and data/backups/ are container-owned (root). The host user cannot
+# cp/rm them directly, so do the swap inside a throwaway root container that mounts data/.
+# (youruser is in the docker group on both boxes — no sudo prompt.)
+TS="$(date -u +%Y%m%dT%H%M%S)"
+echo "[2/3] Swapping DB inside a root container (pre-restore copy + WAL clear + install)..."
+docker run --rm -v "$(pwd)/data:/data" alpine sh -c "
+  set -e
+  if [ -f /data/backspace.db ]; then
+    cp /data/backspace.db /data/backups/backspace-${TS}-pre-restore.db
+  fi
+  rm -f /data/backspace.db-wal /data/backspace.db-shm
+  cp /data/backups/${SNAP_NAME} /data/backspace.db
+"
+
+echo "[3/3] Starting backspace container..."
+docker compose start backspace
+echo "Done. Watch health: docker compose logs -f backspace"