Admin database backup management

Manage database backups from the dashboard in 1.0.12

Add Admin > Backups for superadmins to inspect automatic pre-update copies, create labelled online SQLite backups, download database files and delete older copies after confirmation. Show dates, version/commit metadata, sizes and protected recovery copies. Metadata-only entries can also be cleaned up.

Manual snapshots include committed WAL data while the site stays online. Creation and deletion share the updater lock; update, recovery and unknown state block operations. Retain the latest completed automatic copy and the latest update's backup, including when a failed snapshot leaves a newer partial file.

Repeat live superadmin checks in every API handler, require same-origin mutations, validate labels and identifiers, keep private server paths out of catalog responses, stream downloads with no-store headers and reject unsafe linked files. Management is limited to database copies; it does not restore the site or expose uploads, keys, root deployment snapshots or arbitrary files.

Validated with npm run check, npm run build, SQLite/WAL and protection regressions, and a disposable production-server test of the dashboard, all roles and revocation, CSRF/input limits, creation, streamed download, deletion, updater locks and unchanged live data.