rails_nexus 2.0.6 → 2.1.0

data/app/javascript/controllers/rails_nexus_sidebar_controller.js

@@ -1,16 +1,84 @@
 import { Controller } from "@hotwired/stimulus"
 
 export default class extends Controller {
-  static targets = ["drawer", "overlay"]
+  static targets = ["drawer", "overlay", "sidebar", "toggleButton"]
+
+  connect() {
+    this.handleResize = this.syncButtonState.bind(this)
+    window.addEventListener("resize", this.handleResize)
+
+    if (this.desktop() && this.sidebarHidden()) {
+      this.sidebarTarget.classList.add("is-hidden")
+    }
+
+    this.syncButtonState()
+  }
+
+  disconnect() {
+    window.removeEventListener("resize", this.handleResize)
+  }
 
   toggle() {
-    this.drawerTarget.classList.toggle("open")
-    this.overlayTarget.classList.toggle("open")
+    if (this.desktop()) {
+      const hidden = this.sidebarTarget.classList.toggle("is-hidden")
+      this.storeSidebarState(hidden)
+    } else {
+      const opening = !this.drawerTarget.classList.contains("open")
+      this.drawerTarget.classList.toggle("open", opening)
+      this.overlayTarget.classList.toggle("open", opening)
+    }
+
+    this.syncButtonState()
   }
 
   close() {
     this.drawerTarget.classList.remove("open")
     this.overlayTarget.classList.remove("open")
+    this.syncButtonState()
+  }
+
+  desktop() {
+    return window.matchMedia("(min-width: 1024px)").matches
+  }
+
+  sidebarHidden() {
+    try {
+      return localStorage.getItem("rails_nexus-sidebar-hidden") === "true"
+    } catch (_error) {
+      return false
+    }
+  }
+
+  storeSidebarState(hidden) {
+    try {
+      localStorage.setItem("rails_nexus-sidebar-hidden", hidden.toString())
+    } catch (_error) {
+      // The toggle still works when storage is unavailable.
+    }
+  }
+
+  syncButtonState() {
+    if (!this.hasToggleButtonTarget) return
+
+    const expanded = this.desktop()
+      ? !this.sidebarTarget.classList.contains("is-hidden")
+      : this.drawerTarget.classList.contains("open")
+
+    this.toggleButtonTarget.setAttribute("aria-expanded", expanded.toString())
+    this.toggleButtonTarget.setAttribute("aria-label", expanded ? "Hide navigation" : "Show navigation")
+    this.toggleButtonTarget.title = expanded ? "Hide navigation" : "Show navigation"
+  }
+
+  closeOtherMenus(event) {
+    const currentMenu = event.currentTarget
+    if (!currentMenu.open) return
+
+    const navigation = currentMenu.closest(".rn-sidebar-nav")
+    if (!navigation) return
+
+    navigation.querySelectorAll("details.rn-nav-section[open]").forEach((menu) => {
+      if (menu !== currentMenu) menu.open = false
+    })
   }
 
   toggleShortcuts(event) {

data/app/jobs/rails_nexus/backup_job.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+module RailsNexus
+  class BackupJob < ApplicationJob
+    queue_as :rails_nexus_backups
+
+    # Accept either a BackupConfig record ID or a BackupConfig record
+    def perform(backup_config_id_or_record)
+      config = if backup_config_id_or_record.is_a?(RailsNexus::BackupConfig)
+        backup_config_id_or_record
+      else
+        RailsNexus::BackupConfig.find(backup_config_id_or_record)
+      end
+
+      RailsNexus::BackupService.run(config)
+    end
+  end
+end

data/app/models/rails_nexus/backup.rb

@@ -4,7 +4,7 @@ module RailsNexus
   class Backup < BaseRecord
     self.table_name = "rails_nexus_backups"
 
-    validates :model_name, presence: true
+    validates :config_name, presence: true
     validates :status, presence: true, inclusion: { in: %w[running success failed] }
     validates :started_at, presence: true
 
@@ -12,13 +12,13 @@ module RailsNexus
     scope :successful, -> { where(status: "success") }
     scope :failed, -> { where(status: "failed") }
     scope :running, -> { where(status: "running") }
-    scope :by_model, ->(name) { where(model_name: name) }
+    scope :by_config, ->(name) { where(config_name: name) }
     scope :latest_first, -> { order(started_at: :desc) }
 
     # Start tracking a backup run
-    def self.start!(model_name:, triggered_by: "system")
+    def self.start!(config_name:, triggered_by: "system")
       create!(
-        model_name: model_name,
+        config_name: config_name,
         status: "running",
         triggered_by: triggered_by,
         started_at: Time.current
@@ -47,25 +47,25 @@ module RailsNexus
     end
 
     # Get success rate for a model over the last N days
-    def self.success_rate(model_name:, days: 7)
-      records = by_model(model_name).where("started_at >= ?", days.days.ago).where.not(status: "running")
+    def self.success_rate(config_name:, days: 7)
+      records = by_config(config_name).where("started_at >= ?", days.days.ago).where.not(status: "running")
       return 0 if records.empty?
       (records.successful.count.to_f / records.count * 100).round(1)
     end
 
     # Get backup health summary
     def self.health_summary(alert_threshold_hours: 24)
-      models = RailsNexus.configuration.backup_models || []
-      results = models.map do |model_name|
-        latest = by_model(model_name).successful.latest_first.first
+      configs = RailsNexus::BackupConfig.pluck(:name)
+      results = configs.map do |config_name|
+        latest = by_config(config_name).successful.latest_first.first
         age_hours = latest ? ((Time.current - latest.started_at) / 3600).round(1) : nil
 
         {
-          model_name: model_name,
+          config_name: config_name,
           last_backup: latest&.started_at,
           age_hours: age_hours,
           status: age_hours.nil? ? "unknown" : (age_hours < alert_threshold_hours ? "healthy" : "stale"),
-          success_rate: success_rate(model_name: model_name),
+          success_rate: success_rate(config_name: config_name),
           last_file_size: latest&.file_size
         }
       end

data/app/models/rails_nexus/backup_config.rb

@@ -13,6 +13,7 @@ module RailsNexus
     attribute :enabled,            :boolean, default: true
     attribute :compress,           :boolean, default: true
     attribute :encrypted,          :boolean, default: false
+    attribute :encrypt_base64,     :boolean, default: false
     attribute :rsync_enabled,      :boolean, default: false
     attribute :rsync_mirror,       :boolean, default: false
     attribute :notify_on_success,  :boolean, default: true
@@ -113,11 +114,15 @@ module RailsNexus
 
     # ─── Stats ─────────────────────────────────────────────────────
     def recent_backups(limit: 10)
-      RailsNexus::Backup.where(model_name: name).order(started_at: :desc).limit(limit)
+      RailsNexus::Backup.where(config_name: name).order(started_at: :desc).limit(limit)
+    end
+
+    def last_failure
+      RailsNexus::Backup.where(config_name: name, status: "failed").order(started_at: :desc).first
     end
 
     def stats
-      backups = RailsNexus::Backup.where(model_name: name)
+      backups = RailsNexus::Backup.where(config_name: name)
       recent = backups.where("started_at >= ?", 7.days.ago)
       {
         total: backups.count,

data/app/services/rails_nexus/backup_service.rb

@@ -20,28 +20,33 @@ module RailsNexus
 
     def run
       @record = RailsNexus::Backup.start!(
-        model_name: @config.name,
+        config_name: @config.name,
         triggered_by: "service"
       )
 
       begin
+        @stage = "preparing storage"
         FileUtils.mkdir_p(@config.storage_path_expanded)
 
         # Step 1: Dump database
+        @stage = "database dump"
         dump_path = dump_database
         raise "Database dump failed" unless dump_path
 
         # Step 2: Create archive if enabled (tar additional files/dirs)
+        @stage = "archive creation"
         if @config.archive_enabled? && @config.archive_paths_list.any?
           dump_path = create_archive(dump_path)
         end
 
         # Step 3: Split into chunks if enabled
+        @stage = "file splitting"
         if @config.split_chunks? && File.size(dump_path) > 50_000_000 # 50MB
           dump_path = split_file(dump_path)
         end
 
         # Step 4: Compress
+        @stage = "compression"
         if @config.compress? && !@config.split_chunks?
           dump_path = compress(dump_path)
         elsif @config.bzip2_compress? && !@config.split_chunks?
@@ -49,6 +54,7 @@ module RailsNexus
         end
 
         # Step 5: Encrypt
+        @stage = "encryption"
         if @config.encrypted?
           dump_path = encrypt_openssl(dump_path)
         elsif @config.gpg_enabled?
@@ -56,26 +62,32 @@ module RailsNexus
         end
 
         # Step 6: Sync to S3
+        @stage = "S3 sync"
         sync_s3(dump_path) if @config.s3_enabled?
 
         # Step 7: Sync to remote
-        rsync_result = sync_remote(dump_path) if @config.rsync_enabled?
+        @stage = "remote sync"
+        sync_remote(dump_path) if @config.rsync_enabled?
 
         # Step 8: Cleanup old backups
+        @stage = "retention cleanup"
         cleanup_old_backups
 
         # Step 9: Record success
+        @stage = "recording success"
         file_size = calculate_size(dump_path)
         @record.succeed!(file_path: dump_path, file_size: file_size)
 
         # Step 10: Notify
+        @stage = "success notification"
         notify_success
 
         { success: true, record: @record, file_path: dump_path }
       rescue StandardError => e
-        @record&.fail!(error_message: e.message)
-        notify_failure(e.message)
-        { success: false, error: e.message, record: @record }
+        full_error = failure_message(e)
+        @record&.fail!(error_message: full_error)
+        notify_failure(full_error)
+        { success: false, error: full_error, record: @record }
       ensure
         cleanup_temp_files
       end
@@ -101,10 +113,11 @@ module RailsNexus
     # ─── MySQL ─────────────────────────────────────────────────────
     def dump_mysql
       raw_path = @config.dump_filepath.gsub(/\.(gz|bz2|enc)$/, "")
+      password = resolve_password(@config.password)
       cmd = ["mysqldump"]
-      cmd << "--user=#{@config.username}"  if @config.username.present?
-      cmd << "--password=#{@config.password}" if @config.password.present?
-      cmd << "--host=#{@config.host}"      if @config.host.present?
+      cmd << "--user=#{resolve_env(@config.username)}" if @config.username.present?
+      cmd << "--password=#{password}" if password.present?
+      cmd << "--host=#{resolve_env(@config.host)}"      if @config.host.present?
       cmd << "--port=#{@config.port}"      if @config.port.present?
       cmd << "--result-file=#{raw_path}"
       cmd << "--single-transaction"
@@ -112,16 +125,22 @@ module RailsNexus
       cmd << "--routines"
       cmd << "--triggers"
       cmd << "--events"
+      # Additional MySQL options (e.g. --defaults-extra-file)
+      additional_options = if @config.respond_to?(:mysql_additional_options)
+        @config.mysql_additional_options
+      end
+      if additional_options.present?
+        additional_options.split(" ").each { |opt| cmd << opt }
+      end
 
       # Skip tables
       @config.skip_tables_list.each { |t| cmd << "--ignore-table=#{@config.database_name}.#{t}" }
 
       cmd << @config.database_name
 
-      stdout, stderr, status = Open3.capture3(cmd.join(" "))
+      stdout, stderr, status = capture_command(cmd.join(" "))
       unless status.success?
-        @errors << "mysqldump failed: #{stderr}"
-        return nil
+        raise "mysqldump failed (exit #{status.exitstatus}):\n#{stderr}\n#{stdout}"
       end
       register_temp_file(raw_path)
       raw_path
@@ -130,9 +149,10 @@ module RailsNexus
     # ─── PostgreSQL ────────────────────────────────────────────────
     def dump_postgresql
       raw_path = @config.dump_filepath.gsub(/\.(gz|bz2|enc)$/, "")
+      password = resolve_password(@config.password)
       cmd = ["pg_dump"]
-      cmd << "--username=#{@config.username}" if @config.username.present?
-      cmd << "--host=#{@config.host}"         if @config.host.present?
+      cmd << "--username=#{resolve_env(@config.username)}" if @config.username.present?
+      cmd << "--host=#{resolve_env(@config.host)}"         if @config.host.present?
       cmd << "--port=#{@config.port}"         if @config.port.present?
       cmd << "--file=#{raw_path}"
       cmd << "--format=plain"
@@ -145,31 +165,32 @@ module RailsNexus
       cmd << @config.database_name
 
       env = {}
-      env["PGPASSWORD"] = @config.password if @config.password.present?
+      env["PGPASSWORD"] = password if password.present?
 
       stdout, stderr, status = Open3.capture3(env, cmd.join(" "))
       unless status.success?
-        @errors << "pg_dump failed: #{stderr}"
-        return nil
+        raise "pg_dump failed (exit #{status.exitstatus}):\n#{stderr}\n#{stdout}"
       end
       register_temp_file(raw_path)
       raw_path
     end
 
+    def capture_command(*command)
+      Open3.capture3(*command)
+    end
+
     # ─── SQLite ────────────────────────────────────────────────────
     def dump_sqlite
       raw_path = @config.dump_filepath.gsub(/\.(gz|bz2|enc)$/, "")
       db_path = @config.database_name
 
       unless File.exist?(db_path)
-        @errors << "SQLite database not found: #{db_path}"
-        return nil
+        raise "SQLite database not found: #{db_path}"
       end
 
       stdout, stderr, status = Open3.capture3("sqlite3 \"#{db_path}\" .dump")
       unless status.success?
-        @errors << "sqlite3 dump failed: #{stderr}"
-        return nil
+        raise "sqlite3 dump failed (exit #{status.exitstatus}):\n#{stderr}\n#{stdout}"
       end
 
       File.write(raw_path, stdout)
@@ -183,13 +204,14 @@ module RailsNexus
       dir_path = raw_path.gsub(/\.sql$/, "")
       FileUtils.mkdir_p(dir_path)
 
+      password = resolve_password(@config.password)
       cmd = ["mongodump"]
-      cmd << "--host=#{@config.host || 'localhost'}"
+      cmd << "--host=#{resolve_env(@config.host) || 'localhost'}"
       cmd << "--port=#{@config.port || 27017}"
       cmd << "--db=#{@config.database_name}"
       cmd << "--out=#{dir_path}"
-      cmd << "--username=#{@config.username}" if @config.username.present?
-      cmd << "--password=#{@config.password}" if @config.password.present?
+      cmd << "--username=#{resolve_env(@config.username)}" if @config.username.present?
+      cmd << "--password=#{password}" if password.present?
       cmd << "--authenticationDatabase=admin" if @config.username.present?
 
       # Skip collections
@@ -197,17 +219,15 @@ module RailsNexus
 
       stdout, stderr, status = Open3.capture3(cmd.join(" "))
       unless status.success?
-        @errors << "mongodump failed: #{stderr}"
         FileUtils.rm_rf(dir_path) if Dir.exist?(dir_path)
-        return nil
+        raise "mongodump failed (exit #{status.exitstatus}):\n#{stderr}\n#{stdout}"
       end
 
       # Tar the dump directory
       tar_path = "#{dir_path}.tar"
       stdout, stderr, status = Open3.capture3("tar -cf \"#{tar_path}\" -C \"#{File.dirname(dir_path)}\" \"#{File.basename(dir_path)}\"")
       unless status.success?
-        @errors << "tar failed: #{stderr}"
-        return nil
+        raise "tar failed (exit #{status.exitstatus}):\n#{stderr}\n#{stdout}"
       end
 
       FileUtils.rm_rf(dir_path)
@@ -222,7 +242,7 @@ module RailsNexus
 
       host = @config.host || "localhost"
       port = @config.port || 6379
-      password = @config.password
+      password = resolve_password(@config.password)
 
       # Trigger BGSAVE first
       cmd = "redis-cli -h #{host} -p #{port}"
@@ -353,11 +373,16 @@ module RailsNexus
 
     def encrypt_openssl(file_path)
       enc_path = "#{file_path}.enc"
-      password = @config.encryption_password
+      password = resolve_secret(@config.encryption_password)
 
-      cmd = "openssl aes-256-cbc -salt -pbkdf2 -iter 100000 " \
-            "-in \"#{file_path}\" -out \"#{enc_path}\" " \
-            "-pass pass:#{password}"
+      # Best practice: AES-256-CBC + PBKDF2 + 600K iterations + random salt
+      # (AES-GCM not available in all OpenSSL builds)
+      cmd = "openssl enc -aes-256-cbc"
+      cmd += " -pbkdf2 -iter 600000"
+      cmd += " -salt"
+      cmd += " -in \"#{file_path}\""
+      cmd += " -out \"#{enc_path}\""
+      cmd += " -pass pass:#{password}"
 
       stdout, stderr, status = Open3.capture3(cmd)
       unless status.success?
@@ -371,10 +396,13 @@ module RailsNexus
 
     def encrypt_gpg(file_path)
       enc_path = "#{file_path}.gpg"
-      password = @config.gpg_password
+      password = resolve_secret(@config.gpg_password)
 
-      cmd = "echo #{password} | gpg --batch --yes --symmetric " \
+      # Best practice: AES256 with s2k-mode=iter for key derivation
+      cmd = "echo #{password.shellescape} | gpg --batch --yes --symmetric " \
             "--cipher-algo AES256 " \
+            "--s2k-mode 3 " \
+            "--s2k-count 65011712 " \
             "--passphrase-fd 0 " \
             "-o \"#{enc_path}\" \"#{file_path}\""
 
@@ -419,16 +447,37 @@ module RailsNexus
 
       remote = "#{@config.rsync_user}@#{@config.rsync_host}:#{@config.rsync_path}/"
 
-      cmd = [
-        "rsync",
-        "-avz",
-        "--progress",
-        "-e", "ssh -p #{@config.rsync_port}",
-        "\"#{file_path}\"",
-        remote
-      ].join(" ")
+      # Build rsync command
+      cmd = ["rsync"]
+      cmd << "-a"
+      cmd << "-z"  # compress
+      cmd << "--progress"
+      cmd << "--archive" if @config.respond_to?(:rsync_archive?) && @config.rsync_archive?
+      cmd << "--delete" if @config.respond_to?(:rsync_mirror?) && @config.rsync_mirror?
+      cmd << "-e"
+      cmd << "ssh -p #{@config.rsync_port.presence || 22}"
+
+      # Add the dump file
+      cmd << file_path
+
+      # Add additional directories if configured
+      if @config.respond_to?(:rsync_directories) && @config.rsync_directories.present?
+        @config.rsync_directories.split(",").map(&:strip).reject(&:blank?).each do |dir|
+          expanded = dir.gsub("~", Dir.home)
+          cmd << expanded
+        end
+      end
 
-      stdout, stderr, status = Open3.capture3(cmd)
+      # Add excludes
+      if @config.respond_to?(:rsync_excludes) && @config.rsync_excludes.present?
+        @config.rsync_excludes.split(",").map(&:strip).reject(&:blank?).each do |excl|
+          cmd << "--exclude=#{excl}"
+        end
+      end
+
+      cmd << remote
+
+      stdout, stderr, status = capture_command(*cmd)
       unless status.success?
         @errors << "RSync failed: #{stderr}"
       end
@@ -588,8 +637,46 @@ module RailsNexus
       @temp_files << path unless @temp_files.include?(path)
     end
 
+    # ─── Password Resolution ──────────────────────────────────────
+    # Supports:
+    #   "plain_text"              → used as-is
+    #   "ENV[MY_VAR]"             → resolved from ENV
+    #   "${MY_VAR}"               → resolved from ENV
+    #   "credentials[:key]"       → from Rails encrypted credentials
+    #   "credentials[:a][:b]"     → nested credentials key
+    def resolve_password(value)
+      return nil if value.blank?
+      resolve_secret(value)
+    end
+
+    def resolve_env(value)
+      resolve_secret(value)
+    end
+
+    def resolve_secret(value)
+      return nil if value.blank?
+      case value
+      when /^ENV\[(.+?)\]$/
+        ENV[$1]
+      when /^\$\{(.+?)\}$/
+        ENV[$1]
+      when /^credentials\[/
+        # credentials[:key] or credentials[:key][:subkey]
+        keys = value.scan(/\[:([^\]]+)\]/).flatten.map(&:to_sym)
+        Rails.application.credentials.dig(*keys)
+      else
+        value
+      end
+    end
+
     def command_exists?(cmd)
       system("which #{cmd} > /dev/null 2>&1")
     end
+
+    def failure_message(exception)
+      heading = "#{@stage || 'backup'} failed: #{exception.class}: #{exception.message}"
+      trace = Array(exception.backtrace).first(5).join("\n")
+      [heading, trace.presence, @errors.join("\n").presence].compact.join("\n\n")
+    end
   end
 end

data/app/views/layouts/rails_nexus/_sidebar_navigation.html.erb

@@ -1,6 +1,13 @@
 <nav class="rn-sidebar-nav" aria-label="RailsNexus navigation">
-  <div class="rn-nav-section">
-    <span class="rn-nav-section-label">Monitor</span>
+  <details class="rn-nav-section" data-action="toggle->rails_nexus-sidebar#closeOtherMenus" <%= "open" if monitor_menu_active %>>
+    <summary class="rn-nav-section-toggle">
+      <span class="rn-nav-section-title">
+        <span class="rn-nav-section-icon"><svg width="15" height="15" fill="none" viewBox="0 0 24 24" stroke-width="1.75" stroke="currentColor" aria-hidden="true"><path stroke-linecap="round" stroke-linejoin="round" d="M3 12h3l2.25-6 4.5 12 2.25-6H21" /></svg></span>
+        <span>Monitor</span>
+      </span>
+      <svg class="rn-nav-section-chevron" width="14" height="14" fill="none" viewBox="0 0 24 24" stroke-width="1.75" stroke="currentColor" aria-hidden="true"><path stroke-linecap="round" stroke-linejoin="round" d="M8.25 4.5l7.5 7.5-7.5 7.5" /></svg>
+    </summary>
+    <div class="rn-nav-section-items">
 
     <%= link_to root_path,
       class: "rn-nav-item #{request.path == rails_nexus.root_path ? 'active' : ''}" do %>
@@ -34,10 +41,18 @@
       <svg class="w-4 h-4" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" d="M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 013 19.875v-6.75zM9.75 8.625c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125v11.25c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 01-1.125-1.125V8.625zM16.5 4.125c0-.621.504-1.125 1.125-1.125h2.25C20.496 3 21 3.504 21 4.125v15.75c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 01-1.125-1.125V4.125z" /></svg>
       Statistics
     <% end %>
-  </div>
+    </div>
+  </details>
 
-  <div class="rn-nav-section">
-    <span class="rn-nav-section-label">Operations</span>
+  <details class="rn-nav-section" data-action="toggle->rails_nexus-sidebar#closeOtherMenus" <%= "open" if operations_menu_active %>>
+    <summary class="rn-nav-section-toggle">
+      <span class="rn-nav-section-title">
+        <span class="rn-nav-section-icon"><svg width="15" height="15" fill="none" viewBox="0 0 24 24" stroke-width="1.75" stroke="currentColor" aria-hidden="true"><path stroke-linecap="round" stroke-linejoin="round" d="M4.5 6.75h15M7.5 12h9m-6 5.25h3" /></svg></span>
+        <span>Operations</span>
+      </span>
+      <svg class="rn-nav-section-chevron" width="14" height="14" fill="none" viewBox="0 0 24 24" stroke-width="1.75" stroke="currentColor" aria-hidden="true"><path stroke-linecap="round" stroke-linejoin="round" d="M8.25 4.5l7.5 7.5-7.5 7.5" /></svg>
+    </summary>
+    <div class="rn-nav-section-items">
 
     <%= link_to cron_jobs_path,
       class: "rn-nav-item #{request.path.start_with?(rails_nexus.cron_jobs_path) ? 'active' : ''}" do %>
@@ -46,20 +61,34 @@
     <% end %>
 
     <%= link_to backup_path,
-      class: "rn-nav-item #{request.path.start_with?(rails_nexus.backup_path) ? 'active' : ''}" do %>
+      class: "rn-nav-item #{controller_path == 'rails_nexus/backup' && !%w[all_history history].include?(action_name) ? 'active' : ''}" do %>
       <svg class="w-4 h-4" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" d="M20.25 6.375c0 2.278-3.694 4.125-8.25 4.125S3.75 8.653 3.75 6.375m16.5 0c0-2.278-3.694-4.125-8.25-4.125S3.75 4.097 3.75 6.375m16.5 0v11.25c0 2.278-3.694 4.125-8.25 4.125s-8.25-1.847-8.25-4.125V6.375m16.5 0v3.75m-16.5-3.75v3.75m16.5 0v3.75C20.25 16.153 16.556 18 12 18s-8.25-1.847-8.25-4.125v-3.75m16.5 0c0 2.278-3.694 4.125-8.25 4.125s-8.25-1.847-8.25-4.125" /></svg>
       Backups
     <% end %>
 
+    <%= link_to backup_history_path,
+      class: "rn-nav-item #{controller_path == 'rails_nexus/backup' && %w[all_history history].include?(action_name) ? 'active' : ''}" do %>
+      <svg class="w-4 h-4" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" d="M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z" /></svg>
+      Backup History
+    <% end %>
+
     <%= link_to settings_path,
       class: "rn-nav-item #{request.path == rails_nexus.settings_path ? 'active' : ''}" do %>
       <svg class="w-4 h-4" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" d="M9.594 3.94c.09-.542.56-.94 1.11-.94h2.593c.55 0 1.02.398 1.11.94l.213 1.281c.063.374.313.686.645.87.074.04.147.083.22.127.324.196.72.257 1.075.124l1.217-.456a1.125 1.125 0 011.37.49l1.296 2.247a1.125 1.125 0 01-.26 1.431l-1.003.827c-.293.24-.438.613-.431.992a6.759 6.759 0 010 .255c-.007.378.138.75.43.99l1.005.828c.424.35.534.954.26 1.43l-1.298 2.247a1.125 1.125 0 01-1.369.491l-1.217-.456c-.355-.133-.75-.072-1.076.124a6.57 6.57 0 01-.22.128c-.331.183-.581.495-.644.869l-.213 1.28c-.09.543-.56.941-1.11.941h-2.594c-.55 0-1.02-.398-1.11-.94l-.213-1.281c-.062-.374-.312-.686-.644-.87a6.52 6.52 0 01-.22-.127c-.325-.196-.72-.257-1.076-.124l-1.217.456a1.125 1.125 0 01-1.369-.49l-1.297-2.247a1.125 1.125 0 01.26-1.431l1.004-.827c.292-.24.437-.613.43-.992a6.932 6.932 0 010-.255c.007-.378-.138-.75-.43-.99l-1.004-.828a1.125 1.125 0 01-.26-1.43l1.297-2.247a1.125 1.125 0 011.37-.491l1.216.456c.356.133.751.072 1.076-.124.072-.044.146-.087.22-.128.332-.183.582-.495.644-.869l.214-1.281z" /><path stroke-linecap="round" stroke-linejoin="round" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z" /></svg>
       Settings
     <% end %>
-  </div>
+    </div>
+  </details>
 
-  <div class="rn-nav-section">
-    <span class="rn-nav-section-label">Resources</span>
+  <details class="rn-nav-section" data-action="toggle->rails_nexus-sidebar#closeOtherMenus" <%= "open" if resources_menu_active %>>
+    <summary class="rn-nav-section-toggle">
+      <span class="rn-nav-section-title">
+        <span class="rn-nav-section-icon"><svg width="15" height="15" fill="none" viewBox="0 0 24 24" stroke-width="1.75" stroke="currentColor" aria-hidden="true"><path stroke-linecap="round" stroke-linejoin="round" d="M10.5 6H6.75A3.75 3.75 0 003 9.75v7.5A3.75 3.75 0 006.75 21h7.5A3.75 3.75 0 0018 17.25V13.5m-6-1.5L21 3m0 0h-5.25M21 3v5.25" /></svg></span>
+        <span>Resources</span>
+      </span>
+      <svg class="rn-nav-section-chevron" width="14" height="14" fill="none" viewBox="0 0 24 24" stroke-width="1.75" stroke="currentColor" aria-hidden="true"><path stroke-linecap="round" stroke-linejoin="round" d="M8.25 4.5l7.5 7.5-7.5 7.5" /></svg>
+    </summary>
+    <div class="rn-nav-section-items">
 
     <% if main_app.respond_to?(:root_path) %>
       <%= link_to main_app.root_path, class: "rn-nav-item rn-nav-item--muted" do %>
@@ -79,5 +108,6 @@
         <%= link[:label] %>
       <% end %>
     <% end %>
-  </div>
+    </div>
+  </details>
 </nav>