feat: Add automated bookmark backup feature (#2182)

* feat: Add automated bookmark backup system

Implements a comprehensive automated backup feature for user bookmarks with the following capabilities:

Database Schema:
- Add backupSettings table to store user backup preferences (enabled, frequency, retention)
- Add backups table to track backup records with status and metadata
- Add BACKUP asset type for storing compressed backup files
- Add migration 0066_add_backup_tables.sql

Background Workers:
- Implement BackupSchedulingWorker cron job (runs daily at midnight UTC)
- Create BackupWorker to process individual backup jobs
- Deterministic scheduling spreads backup jobs across 24 hours based on user ID hash
- Support for daily and weekly backup frequencies
- Automated retention cleanup to delete old backups based on user settings

Export & Compression:
- Reuse existing export functionality for bookmark data
- Compress exports using Node.js built-in zlib (gzip level 9)
- Store compressed backups as assets with proper metadata
- Track backup size and bookmark count for statistics

tRPC API:
- backups.getSettings - Retrieve user backup configuration
- backups.updateSettings - Update backup preferences
- backups.list - List all user backups with metadata
- backups.get - Get specific backup details
- backups.delete - Delete a backup
- backups.download - Download backup file (base64 encoded)
- backups.triggerBackup - Manually trigger backup creation

UI Components:
- BackupSettings component with configuration form
- Enable/disable automatic backups toggle
- Frequency selection (daily/weekly)
- Retention period configuration (1-365 days)
- Backup list table with download and delete actions
- Manual backup trigger button
- Display backup stats (size, bookmark count, status)
- Added backups page to settings navigation

Technical Details:
- Uses Restate queue system for distributed job processing
- Implements idempotency keys to prevent duplicate backups
- Background worker concurrency: 2 jobs at a time
- 10-minute timeout for large backup exports
- Proper error handling and logging throughout
- Type-safe implementation with Zod schemas

* refactor: simplify backup settings and asset handling

- Move backup settings from separate table to user table columns
- Update BackupSettings model to use static methods with users table
- Remove download mutation in favor of direct asset links
- Implement proper quota checks using QuotaService.checkStorageQuota
- Update UI to use new property names and direct asset downloads
- Update shared types to match new schema

Key changes:
- backupSettingsTable removed, settings now in users table
- Backup downloads use direct /api/assets/{id} links
- Quota properly validated before creating backup assets
- Cleaner separation of concerns in tRPC models

* migration

* use zip instead of gzip

* fix drizzle

* fix settings

* streaming json

* remove more dead code

* add e2e tests

* return backup

* poll for backups

* more fixes

* more fixes

* fix test

* fix UI

* fix delete asset

* fix ui

* redirect for backup download

* cleanups

* fix idempotency

* fix tests

* add ratelimit

* add error handling for background backups

* i18n

* model changes

---------

Co-authored-by: Claude <noreply@anthropic.com>

2 files changed, 47 insertions, 1 deletions

diff --git a/packages/api/index.ts b/packages/api/index.ts
index 7bf9084d..3df7b429 100644
--- a/packages/api/index.ts
+++ b/packages/api/index.ts
@@ -10,6 +10,7 @@ import { Context } from "@karakeep/trpc";
 import trpcAdapter from "./middlewares/trpcAdapter";
 import admin from "./routes/admin";
 import assets from "./routes/assets";
+import backups from "./routes/backups";
 import bookmarks from "./routes/bookmarks";
 import health from "./routes/health";
 import highlights from "./routes/highlights";
@@ -37,7 +38,8 @@ const v1 = new Hono<{
   .route("/users", users)
   .route("/assets", assets)
   .route("/admin", admin)
-  .route("/rss", rss);
+  .route("/rss", rss)
+  .route("/backups", backups);
 
 const app = new Hono<{
   Variables: {
diff --git a/packages/api/routes/backups.ts b/packages/api/routes/backups.ts
new file mode 100644
index 00000000..949c826f
--- /dev/null
+++ b/packages/api/routes/backups.ts
@@ -0,0 +1,44 @@
+import { Hono } from "hono";
+
+import { authMiddleware } from "../middlewares/auth";
+
+const app = new Hono()
+  .use(authMiddleware)
+
+  // GET /backups
+  .get("/", async (c) => {
+    const backups = await c.var.api.backups.list();
+    return c.json(backups, 200);
+  })
+
+  // POST /backups
+  .post("/", async (c) => {
+    const backup = await c.var.api.backups.triggerBackup();
+    return c.json(backup, 201);
+  })
+
+  // GET /backups/[backupId]
+  .get("/:backupId", async (c) => {
+    const backupId = c.req.param("backupId");
+    const backup = await c.var.api.backups.get({ backupId });
+    return c.json(backup, 200);
+  })
+
+  // GET /backups/[backupId]/download
+  .get("/:backupId/download", async (c) => {
+    const backupId = c.req.param("backupId");
+    const backup = await c.var.api.backups.get({ backupId });
+    if (!backup.assetId) {
+      return c.json({ error: "Backup not found" }, 404);
+    }
+    return c.redirect(`/api/assets/${backup.assetId}`);
+  })
+
+  // DELETE /backups/[backupId]
+  .delete("/:backupId", async (c) => {
+    const backupId = c.req.param("backupId");
+    await c.var.api.backups.delete({ backupId });
+    return c.body(null, 204);
+  });
+
+export default app;