tide-commander 1.65.0 → 1.66.0

package/dist/assets/{web-BnX_BsjB.js → web-DffxvD3t.js}

@@ -1 +1 @@
-import{bI as a}from"./main-BNhrjJHj.js";import{ImpactStyle as i,NotificationType as r}from"./index-Yy2LrlI7.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class h extends a{constructor(){super(...arguments),this.selectionStarted=!1}async impact(t){const e=this.patternForImpact(t==null?void 0:t.style);this.vibrateWithPattern(e)}async notification(t){const e=this.patternForNotification(t==null?void 0:t.type);this.vibrateWithPattern(e)}async vibrate(t){const e=(t==null?void 0:t.duration)||300;this.vibrateWithPattern([e])}async selectionStart(){this.selectionStarted=!0}async selectionChanged(){this.selectionStarted&&this.vibrateWithPattern([70])}async selectionEnd(){this.selectionStarted=!1}patternForImpact(t=i.Heavy){return t===i.Medium?[43]:t===i.Light?[20]:[61]}patternForNotification(t=r.Success){return t===r.Warning?[30,40,30,50,60]:t===r.Error?[27,45,50]:[35,65,21]}vibrateWithPattern(t){if(navigator.vibrate)navigator.vibrate(t);else throw this.unavailable("Browser does not support the vibrate API")}}export{h as HapticsWeb};
+import{bI as a}from"./main-BzSUj-VM.js";import{ImpactStyle as i,NotificationType as r}from"./index-D9NmRir8.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class h extends a{constructor(){super(...arguments),this.selectionStarted=!1}async impact(t){const e=this.patternForImpact(t==null?void 0:t.style);this.vibrateWithPattern(e)}async notification(t){const e=this.patternForNotification(t==null?void 0:t.type);this.vibrateWithPattern(e)}async vibrate(t){const e=(t==null?void 0:t.duration)||300;this.vibrateWithPattern([e])}async selectionStart(){this.selectionStarted=!0}async selectionChanged(){this.selectionStarted&&this.vibrateWithPattern([70])}async selectionEnd(){this.selectionStarted=!1}patternForImpact(t=i.Heavy){return t===i.Medium?[43]:t===i.Light?[20]:[61]}patternForNotification(t=r.Success){return t===r.Warning?[30,40,30,50,60]:t===r.Error?[27,45,50]:[35,65,21]}vibrateWithPattern(t){if(navigator.vibrate)navigator.vibrate(t);else throw this.unavailable("Browser does not support the vibrate API")}}export{h as HapticsWeb};

package/dist/assets/{web-CyBgxhK2.js → web-y3e1lmyW.js}

@@ -1 +1 @@
-import{bI as s}from"./main-BNhrjJHj.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class l extends s{constructor(){super(...arguments),this.pending=[],this.deliveredNotifications=[],this.hasNotificationSupport=()=>{if(!("Notification"in window)||!Notification.requestPermission)return!1;if(Notification.permission!=="granted")try{new Notification("")}catch(i){if(i instanceof Error&&i.name==="TypeError")return!1}return!0}}async getDeliveredNotifications(){const i=[];for(const t of this.deliveredNotifications){const e={title:t.title,id:parseInt(t.tag),body:t.body};i.push(e)}return{notifications:i}}async removeDeliveredNotifications(i){for(const t of i.notifications){const e=this.deliveredNotifications.find(n=>n.tag===String(t.id));e==null||e.close(),this.deliveredNotifications=this.deliveredNotifications.filter(()=>!e)}}async removeAllDeliveredNotifications(){for(const i of this.deliveredNotifications)i.close();this.deliveredNotifications=[]}async createChannel(){throw this.unimplemented("Not implemented on web.")}async deleteChannel(){throw this.unimplemented("Not implemented on web.")}async listChannels(){throw this.unimplemented("Not implemented on web.")}async schedule(i){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");for(const t of i.notifications)this.sendNotification(t);return{notifications:i.notifications.map(t=>({id:t.id}))}}async getPending(){return{notifications:this.pending}}async registerActionTypes(){throw this.unimplemented("Not implemented on web.")}async cancel(i){this.pending=this.pending.filter(t=>!i.notifications.find(e=>e.id===t.id))}async areEnabled(){const{display:i}=await this.checkPermissions();return{value:i==="granted"}}async changeExactNotificationSetting(){throw this.unimplemented("Not implemented on web.")}async checkExactNotificationSetting(){throw this.unimplemented("Not implemented on web.")}async requestPermissions(){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");return{display:this.transformNotificationPermission(await Notification.requestPermission())}}async checkPermissions(){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");return{display:this.transformNotificationPermission(Notification.permission)}}transformNotificationPermission(i){switch(i){case"granted":return"granted";case"denied":return"denied";default:return"prompt"}}sendPending(){var i;const t=[],e=new Date().getTime();for(const n of this.pending)!((i=n.schedule)===null||i===void 0)&&i.at&&n.schedule.at.getTime()<=e&&(this.buildNotification(n),t.push(n));this.pending=this.pending.filter(n=>!t.find(o=>o===n))}sendNotification(i){var t;if(!((t=i.schedule)===null||t===void 0)&&t.at){const e=i.schedule.at.getTime()-new Date().getTime();this.pending.push(i),setTimeout(()=>{this.sendPending()},e);return}this.buildNotification(i)}buildNotification(i){const t=new Notification(i.title,{body:i.body,tag:String(i.id)});return t.addEventListener("click",this.onClick.bind(this,i),!1),t.addEventListener("show",this.onShow.bind(this,i),!1),t.addEventListener("close",()=>{this.deliveredNotifications=this.deliveredNotifications.filter(()=>!this)},!1),this.deliveredNotifications.push(t),t}onClick(i){const t={actionId:"tap",notification:i};this.notifyListeners("localNotificationActionPerformed",t)}onShow(i){this.notifyListeners("localNotificationReceived",i)}}export{l as LocalNotificationsWeb};
+import{bI as s}from"./main-BzSUj-VM.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";class l extends s{constructor(){super(...arguments),this.pending=[],this.deliveredNotifications=[],this.hasNotificationSupport=()=>{if(!("Notification"in window)||!Notification.requestPermission)return!1;if(Notification.permission!=="granted")try{new Notification("")}catch(i){if(i instanceof Error&&i.name==="TypeError")return!1}return!0}}async getDeliveredNotifications(){const i=[];for(const t of this.deliveredNotifications){const e={title:t.title,id:parseInt(t.tag),body:t.body};i.push(e)}return{notifications:i}}async removeDeliveredNotifications(i){for(const t of i.notifications){const e=this.deliveredNotifications.find(n=>n.tag===String(t.id));e==null||e.close(),this.deliveredNotifications=this.deliveredNotifications.filter(()=>!e)}}async removeAllDeliveredNotifications(){for(const i of this.deliveredNotifications)i.close();this.deliveredNotifications=[]}async createChannel(){throw this.unimplemented("Not implemented on web.")}async deleteChannel(){throw this.unimplemented("Not implemented on web.")}async listChannels(){throw this.unimplemented("Not implemented on web.")}async schedule(i){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");for(const t of i.notifications)this.sendNotification(t);return{notifications:i.notifications.map(t=>({id:t.id}))}}async getPending(){return{notifications:this.pending}}async registerActionTypes(){throw this.unimplemented("Not implemented on web.")}async cancel(i){this.pending=this.pending.filter(t=>!i.notifications.find(e=>e.id===t.id))}async areEnabled(){const{display:i}=await this.checkPermissions();return{value:i==="granted"}}async changeExactNotificationSetting(){throw this.unimplemented("Not implemented on web.")}async checkExactNotificationSetting(){throw this.unimplemented("Not implemented on web.")}async requestPermissions(){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");return{display:this.transformNotificationPermission(await Notification.requestPermission())}}async checkPermissions(){if(!this.hasNotificationSupport())throw this.unavailable("Notifications not supported in this browser.");return{display:this.transformNotificationPermission(Notification.permission)}}transformNotificationPermission(i){switch(i){case"granted":return"granted";case"denied":return"denied";default:return"prompt"}}sendPending(){var i;const t=[],e=new Date().getTime();for(const n of this.pending)!((i=n.schedule)===null||i===void 0)&&i.at&&n.schedule.at.getTime()<=e&&(this.buildNotification(n),t.push(n));this.pending=this.pending.filter(n=>!t.find(o=>o===n))}sendNotification(i){var t;if(!((t=i.schedule)===null||t===void 0)&&t.at){const e=i.schedule.at.getTime()-new Date().getTime();this.pending.push(i),setTimeout(()=>{this.sendPending()},e);return}this.buildNotification(i)}buildNotification(i){const t=new Notification(i.title,{body:i.body,tag:String(i.id)});return t.addEventListener("click",this.onClick.bind(this,i),!1),t.addEventListener("show",this.onShow.bind(this,i),!1),t.addEventListener("close",()=>{this.deliveredNotifications=this.deliveredNotifications.filter(()=>!this)},!1),this.deliveredNotifications.push(t),t}onClick(i){const t={actionId:"tap",notification:i};this.notifyListeners("localNotificationActionPerformed",t)}onShow(i){this.notifyListeners("localNotificationReceived",i)}}export{l as LocalNotificationsWeb};

package/dist/index.html

@@ -22,10 +22,10 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/assets/icons/favicon-16x16.png" />
     <link rel="apple-touch-icon" sizes="180x180" href="/assets/icons/apple-touch-icon.png" />
     <title>Tide Commander</title>
-    <script type="module" crossorigin src="/assets/main-BNhrjJHj.js"></script>
+    <script type="module" crossorigin src="/assets/main-BzSUj-VM.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/vendor-react--Eh9ivFN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-three-Chj50gSY.js">
-    <link rel="stylesheet" crossorigin href="/assets/main-4iQEaD98.css">
+    <link rel="stylesheet" crossorigin href="/assets/main-B3L4mgQ4.css">
   </head>
   <body>
     <div id="app"></div>

package/dist/src/packages/server/data/builtin-skills/backup-restore.js

@@ -0,0 +1,242 @@
+export const backupRestore = {
+    slug: 'backup-restore',
+    name: 'Backup & Restore',
+    description: 'Use this skill to list, inspect, or restore Tide Commander data backups. Covers reviewing available backup snapshots, comparing them, and restoring specific config files or the full data directory from a backup.',
+    allowedTools: ['Bash(ls:*)', 'Bash(tar:*)', 'Bash(cp:*)', 'Bash(mv:*)', 'Bash(mkdir:*)', 'Bash(sqlite3:*)', 'Bash(sha256sum:*)', 'Bash(diff:*)', 'Bash(date:*)', 'Bash(stat:*)', 'Bash(bash:*)', 'Bash(curl:*)', 'Read', 'Grep', 'Glob'],
+    content: `# Backup & Restore
+
+Tide Commander automatically backs up its data directory every hour using an in-process scheduler. This skill documents how backups work, where they live, and how to review or restore them.
+
+## How Backups Work
+
+- The scheduler runs inside the Commander node process (no cron or external deps).
+- It calls \`scripts/backup-data.sh\` which stages all top-level JSON configs and safely copies the SQLite database using \`sqlite3 .backup\`.
+- A **content signature** (sha256, 16 chars) is computed from the staged files. If a backup with the same signature already exists, the run is skipped (no duplicate backups for unchanged data).
+- Backups are compressed tarballs named \`backup-<YYYYMMDDThhmmss>-<signature>.tar.gz\`.
+
+## Rotation Policy
+
+- The **8 newest** hourly backups are always kept.
+- Plus the **most recent backup from each of the 2 most recent prior days** that have backups.
+- Up to ~10 backups total.
+
+## Key Paths
+
+| Item | Path |
+|------|------|
+| Live data directory | \`~/.local/share/tide-commander/\` |
+| Backup directory | \`~/.local/share/tide-commander-backups/\` |
+| Backup script | \`scripts/backup-data.sh\` (relative to project root) |
+| Backup log | \`~/.local/share/tide-commander-backups/backup.log\` |
+| Scheduler settings | \`~/.local/share/tide-commander/backup-settings.json\` |
+
+## What Is Backed Up
+
+All top-level files in the data directory:
+
+| File | Contents |
+|------|----------|
+| \`agents.json\` | Agent configurations, positions, session IDs |
+| \`skills.json\` | Skill registry and assignments |
+| \`triggers.json\` | Workflow trigger definitions |
+| \`workflow-definitions.json\` | Workflow state machines |
+| \`buildings.json\` | Database building configs |
+| \`secrets.json\` | Encrypted API keys (AES-256-GCM) |
+| \`custom-agent-classes.json\` | Custom agent class definitions |
+| \`delegation-history.json\` | Boss agent delegation history |
+| \`areas.json\` | Area/zone layouts |
+| \`slack-config.json\` | Slack integration config |
+| \`calendar-config.json\` | Google Calendar config |
+| \`drive-config.json\` | Google Drive config |
+| \`system-prompt.json\` | Global system prompt |
+| \`session-history.json\` | Session history metadata |
+| \`running-processes.json\` | Active process records |
+| \`events.db\` | SQLite event store (trigger events, audit log, workflow instances, etc.) |
+| \`*.json.bak\` | Atomic-write backup copies of each JSON file |
+
+Subdirectories like \`query-history/\`, \`generated/\`, \`snapshots/\`, and \`templates/\` are **not** included (considered derivable).
+
+## Common Tasks
+
+### Check Backup Scheduler Status
+
+\`\`\`bash
+curl -s -H "X-Auth-Token: YOUR_TOKEN" http://localhost:5174/api/agents/system-settings/backup | python3 -m json.tool
+\`\`\`
+
+Returns: \`enabled\`, \`running\`, \`scriptPath\`, \`scriptExists\`, \`backupDir\`, \`lastRunAt\`, \`lastRunOk\`, \`lastRunError\`.
+
+### Enable / Disable Backups
+
+\`\`\`bash
+# Enable
+curl -s -X POST -H "Content-Type: application/json" -H "X-Auth-Token: YOUR_TOKEN" http://localhost:5174/api/agents/system-settings/backup -d '{"enabled":true}'
+
+# Disable
+curl -s -X POST -H "Content-Type: application/json" -H "X-Auth-Token: YOUR_TOKEN" http://localhost:5174/api/agents/system-settings/backup -d '{"enabled":false}'
+\`\`\`
+
+### Run a Manual Backup Now
+
+\`\`\`bash
+bash scripts/backup-data.sh
+\`\`\`
+
+Or from the project root if running a compiled install, the script is at the same relative path.
+
+### List Available Backups
+
+\`\`\`bash
+ls -lhtr ~/.local/share/tide-commander-backups/backup-*.tar.gz
+\`\`\`
+
+Filenames sort chronologically. The signature suffix lets you see which backups have identical content.
+
+### Inspect a Backup (List Contents)
+
+\`\`\`bash
+tar -tzf ~/.local/share/tide-commander-backups/backup-<TIMESTAMP>-<SIG>.tar.gz
+\`\`\`
+
+### Extract a Backup to a Temp Directory for Review
+
+\`\`\`bash
+REVIEW_DIR=$(mktemp -d)
+tar -xzf ~/.local/share/tide-commander-backups/backup-<TIMESTAMP>-<SIG>.tar.gz -C "$REVIEW_DIR"
+ls -la "$REVIEW_DIR"
+\`\`\`
+
+Then inspect individual files:
+\`\`\`bash
+# View agents config from the backup
+cat "$REVIEW_DIR/agents.json" | python3 -m json.tool | head -60
+
+# Compare a file between backup and live
+diff <(python3 -m json.tool "$REVIEW_DIR/agents.json") <(python3 -m json.tool ~/.local/share/tide-commander/agents.json)
+\`\`\`
+
+### Compare Two Backups
+
+\`\`\`bash
+DIR_A=$(mktemp -d)
+DIR_B=$(mktemp -d)
+tar -xzf ~/.local/share/tide-commander-backups/backup-OLDER.tar.gz -C "$DIR_A"
+tar -xzf ~/.local/share/tide-commander-backups/backup-NEWER.tar.gz -C "$DIR_B"
+diff -rq "$DIR_A" "$DIR_B"
+\`\`\`
+
+### Query the SQLite Database from a Backup
+
+\`\`\`bash
+REVIEW_DIR=$(mktemp -d)
+tar -xzf ~/.local/share/tide-commander-backups/backup-<TIMESTAMP>-<SIG>.tar.gz -C "$REVIEW_DIR"
+sqlite3 "$REVIEW_DIR/events.db" ".tables"
+sqlite3 "$REVIEW_DIR/events.db" "SELECT COUNT(*) FROM workflow_instances;"
+\`\`\`
+
+## Restore Procedures
+
+### IMPORTANT: Safety Rules
+
+1. **Always stop Commander before restoring** to avoid write conflicts.
+2. **Back up the current live state first** before overwriting anything.
+3. **Prefer selective restore** (single files) over full restore when possible.
+4. **Never restore running-processes.json** — it tracks ephemeral PIDs that won't be valid after restart.
+
+### Restore a Single JSON Config File
+
+This is the safest approach. Use when one specific config got corrupted or lost.
+
+\`\`\`bash
+# 1. Pick the backup to restore from
+ls -lhtr ~/.local/share/tide-commander-backups/backup-*.tar.gz
+
+# 2. Extract just the file you need
+tar -xzf ~/.local/share/tide-commander-backups/backup-<TIMESTAMP>-<SIG>.tar.gz -C /tmp ./agents.json
+
+# 3. Back up the current live file
+cp ~/.local/share/tide-commander/agents.json ~/.local/share/tide-commander/agents.json.pre-restore
+
+# 4. Copy the restored file into place
+cp /tmp/agents.json ~/.local/share/tide-commander/agents.json
+
+# 5. Restart Commander to pick up the change
+\`\`\`
+
+Replace \`agents.json\` with whichever file you need to restore.
+
+### Restore the Full Data Directory
+
+Use when the entire data directory is corrupted or missing.
+
+\`\`\`bash
+# 1. Stop Commander first
+
+# 2. Back up whatever is currently there (even if broken)
+mv ~/.local/share/tide-commander ~/.local/share/tide-commander-broken-$(date +%Y%m%d)
+
+# 3. Create fresh data directory
+mkdir -p ~/.local/share/tide-commander
+
+# 4. Pick the backup to restore from
+ls -lhtr ~/.local/share/tide-commander-backups/backup-*.tar.gz
+
+# 5. Extract the chosen backup into the data directory
+tar -xzf ~/.local/share/tide-commander-backups/backup-<TIMESTAMP>-<SIG>.tar.gz -C ~/.local/share/tide-commander
+
+# 6. Remove running-processes.json (stale PIDs)
+rm -f ~/.local/share/tide-commander/running-processes.json
+rm -f ~/.local/share/tide-commander/running-processes.json.bak
+
+# 7. Remove .bak files (they'll be recreated on first write)
+rm -f ~/.local/share/tide-commander/*.json.bak
+
+# 8. Start Commander
+\`\`\`
+
+### Restore Only the SQLite Event Database
+
+\`\`\`bash
+# 1. Extract the database from the backup
+tar -xzf ~/.local/share/tide-commander-backups/backup-<TIMESTAMP>-<SIG>.tar.gz -C /tmp ./events.db
+
+# 2. Back up the current one
+cp ~/.local/share/tide-commander/events.db ~/.local/share/tide-commander/events.db.pre-restore
+
+# 3. Replace it (Commander should be stopped or at minimum idle)
+cp /tmp/events.db ~/.local/share/tide-commander/events.db
+
+# 4. Remove WAL files so SQLite starts fresh
+rm -f ~/.local/share/tide-commander/events.db-wal
+rm -f ~/.local/share/tide-commander/events.db-shm
+\`\`\`
+
+## Troubleshooting
+
+### Backups Not Being Created
+
+1. Check scheduler status via the API (see above).
+2. Check if the script exists: \`ls -la scripts/backup-data.sh\`
+3. Check the backup log: \`tail -20 ~/.local/share/tide-commander-backups/backup.log\`
+4. Run the script manually to see errors: \`bash scripts/backup-data.sh\`
+5. Ensure \`sqlite3\` is installed: \`which sqlite3\`
+
+### All Backups Have the Same Signature
+
+This means data hasn't changed between runs. This is expected behavior — the dedup is working correctly. Backups are only created when content actually changes.
+
+### Backup Directory Growing Too Large
+
+Check total size:
+\`\`\`bash
+du -sh ~/.local/share/tide-commander-backups/
+\`\`\`
+
+The rotation policy (8 hourly + 2 prior days) should keep it bounded. If backups are unusually large, the SQLite database may have grown. Consider running \`VACUUM\` on the live database:
+\`\`\`bash
+sqlite3 ~/.local/share/tide-commander/events.db "VACUUM;"
+\`\`\`
+
+Then the next backup will pick up the smaller database.
+`,
+};

package/dist/src/packages/server/data/builtin-skills/index.js

@@ -21,6 +21,7 @@ import { bossInstructions } from './boss-instructions.js';
 import { workflowDesigner } from './workflow-designer.js';
 import { triggerDesigner } from './trigger-designer.js';
 import { workflowBuilder } from './workflow-builder.js';
+import { backupRestore } from './backup-restore.js';
 /**
  * All built-in skills that ship with Tide Commander
  */
@@ -41,6 +42,7 @@ export const BUILTIN_SKILLS = [
     workflowDesigner,
     triggerDesigner,
     workflowBuilder,
+    backupRestore,
 ];
 /**
  * Get the ID for a built-in skill based on its slug

package/dist/src/packages/server/index.js

@@ -15,6 +15,7 @@ import * as eventQueries from './data/event-queries.js';
 import { logger, closeFileLogging, getLogFilePath, createLogger } from './utils/logger.js';
 import { setupTerminalWsProxy } from './services/terminal-proxy.js';
 import { initIntegrations, shutdownIntegrations, getIntegrationTriggerHandlers } from './integrations/integration-registry.js';
+import { initBackupService, shutdownBackupService } from './services/backup-service.js';
 // Configuration
 const PORT = process.env.PORT || 6200;
 const HOST = process.env.HOST || (process.env.LISTEN_ALL_INTERFACES ? '::' : '127.0.0.1');
@@ -138,6 +139,8 @@ async function main() {
     for (const handler of getIntegrationTriggerHandlers()) {
         triggerService.registerHandler(handler);
     }
+    // Start hourly backup scheduler (reads persisted enabled/disabled setting)
+    initBackupService();
     logger.server.log(`Data directory: ${getDataDir()}`);
     logger.server.log(`Log file: ${getLogFilePath()}`);
     // Create Express app and HTTP server
@@ -199,6 +202,7 @@ async function main() {
         }, FORCE_SHUTDOWN_TIMEOUT_MS);
         forceShutdownTimer.unref();
         try {
+            shutdownBackupService();
             triggerService.shutdown();
             workflowService.shutdown();
             await shutdownIntegrations();

package/dist/src/packages/server/routes/agents.js

@@ -17,6 +17,7 @@ import { buildCustomAgentConfig } from '../websocket/handlers/command-handler.js
 import { clearDelegation, getBossForSubordinate } from '../websocket/handlers/boss-response-handler.js';
 import { OpencodeBackend } from '../opencode/backend.js';
 import { getSystemPrompt, setSystemPrompt, clearSystemPrompt, isEchoPromptEnabled, setEchoPromptEnabled, getCodexBinaryPath, setCodexBinaryPath, isTmuxModeEnabled, setTmuxModeEnabled } from '../services/system-prompt-service.js';
+import { getBackupStatus, setBackupEnabled } from '../services/backup-service.js';
 const log = createLogger('Routes');
 const router = Router();
 // Store for broadcasting via WebSocket
@@ -1050,4 +1051,30 @@ router.post('/system-settings/tmux-mode', (req, res) => {
         res.status(500).json({ error: err.message });
     }
 });
+// GET /api/system-settings/backup - Get hourly backup scheduler status
+router.get('/system-settings/backup', (_req, res) => {
+    try {
+        res.json(getBackupStatus());
+    }
+    catch (err) {
+        log.error(' Failed to get backup status:', err);
+        res.status(500).json({ error: err.message });
+    }
+});
+// POST /api/system-settings/backup - Enable or disable the hourly backup scheduler
+router.post('/system-settings/backup', (req, res) => {
+    try {
+        const { enabled } = req.body;
+        if (typeof enabled !== 'boolean') {
+            res.status(400).json({ error: 'enabled must be a boolean' });
+            return;
+        }
+        const status = setBackupEnabled(enabled);
+        res.json({ success: true, ...status });
+    }
+    catch (err) {
+        log.error(' Failed to set backup enabled:', err);
+        res.status(500).json({ error: err.message });
+    }
+});
 export default router;

package/dist/src/packages/server/services/backup-service.js

@@ -0,0 +1,148 @@
+/**
+ * Backup Service
+ *
+ * In-process hourly backup scheduler. Runs inside the Commander node process
+ * (no cron, no external deps). When Commander is down the data files can't
+ * change, so there's no downside to coupling the backup lifecycle to the
+ * server process.
+ *
+ * The actual backup work is done by scripts/backup-data.sh (shipped with the
+ * package). This service calls it via child_process.execFile on a setInterval.
+ */
+import { execFile } from 'child_process';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import { fileURLToPath } from 'url';
+import { createLogger } from '../utils/logger.js';
+const log = createLogger('BackupService');
+const INTERVAL_MS = 60 * 60 * 1000; // 1 hour
+// ── Paths ────────────────────────────────────────────────────────────────────
+const DATA_DIR = path.join(process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share'), 'tide-commander');
+const SETTINGS_FILE = path.join(DATA_DIR, 'backup-settings.json');
+const BACKUP_DIR = path.join(process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share'), 'tide-commander-backups');
+function findProjectRoot() {
+    let dir = path.dirname(fileURLToPath(import.meta.url));
+    while (dir !== '/' && dir !== '') {
+        if (fs.existsSync(path.join(dir, 'package.json'))) {
+            return dir;
+        }
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return process.cwd();
+}
+const PROJECT_ROOT = findProjectRoot();
+export function getBackupScriptPath() {
+    return path.join(PROJECT_ROOT, 'scripts', 'backup-data.sh');
+}
+function readSettings() {
+    try {
+        if (fs.existsSync(SETTINGS_FILE)) {
+            const data = JSON.parse(fs.readFileSync(SETTINGS_FILE, 'utf-8'));
+            return { enabled: !!data.enabled };
+        }
+    }
+    catch (err) {
+        log.error(`Failed to read backup settings: ${err.message}`);
+    }
+    // Default: enabled — backups are on for everyone out of the box.
+    return { enabled: true };
+}
+function writeSettings(settings) {
+    if (!fs.existsSync(DATA_DIR)) {
+        fs.mkdirSync(DATA_DIR, { recursive: true });
+    }
+    fs.writeFileSync(SETTINGS_FILE, JSON.stringify(settings, null, 2), 'utf-8');
+}
+// ── In-process scheduler ─────────────────────────────────────────────────────
+let timer = null;
+let lastRunAt = null;
+let lastRunOk = null;
+let lastRunError = null;
+function runBackupScript() {
+    const scriptPath = getBackupScriptPath();
+    if (!fs.existsSync(scriptPath)) {
+        log.error(`Backup script not found at ${scriptPath} — skipping`);
+        lastRunAt = new Date().toISOString();
+        lastRunOk = false;
+        lastRunError = 'Script not found';
+        return;
+    }
+    log.log('Starting hourly backup…');
+    execFile('bash', [scriptPath], { timeout: 120_000 }, (err, stdout, stderr) => {
+        lastRunAt = new Date().toISOString();
+        if (err) {
+            lastRunOk = false;
+            lastRunError = stderr?.trim() || err.message;
+            log.error(`Backup failed: ${lastRunError}`);
+        }
+        else {
+            lastRunOk = true;
+            lastRunError = null;
+            const msg = stdout?.trim();
+            if (msg)
+                log.log(msg);
+        }
+    });
+}
+function startScheduler() {
+    if (timer)
+        return; // already running
+    timer = setInterval(runBackupScript, INTERVAL_MS);
+    timer.unref(); // don't hold the process open
+    log.log('Backup scheduler started (every 1 h)');
+    // Run immediately on first start so the first backup doesn't wait an hour.
+    runBackupScript();
+}
+function stopScheduler() {
+    if (!timer)
+        return;
+    clearInterval(timer);
+    timer = null;
+    log.log('Backup scheduler stopped');
+}
+export function getBackupStatus() {
+    const settings = readSettings();
+    return {
+        enabled: settings.enabled,
+        running: timer !== null,
+        scriptPath: getBackupScriptPath(),
+        scriptExists: fs.existsSync(getBackupScriptPath()),
+        backupDir: BACKUP_DIR,
+        lastRunAt,
+        lastRunOk,
+        lastRunError,
+    };
+}
+export function setBackupEnabled(enabled) {
+    writeSettings({ enabled });
+    if (enabled) {
+        startScheduler();
+    }
+    else {
+        stopScheduler();
+    }
+    return getBackupStatus();
+}
+/**
+ * Called once at server boot. Reads persisted setting and starts the
+ * scheduler if backups are enabled.
+ */
+export function initBackupService() {
+    const { enabled } = readSettings();
+    if (enabled) {
+        startScheduler();
+    }
+    else {
+        log.log('Backups disabled — scheduler not started');
+    }
+}
+/**
+ * Called on graceful shutdown to clear the interval timer cleanly.
+ */
+export function shutdownBackupService() {
+    stopScheduler();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tide-commander",
-  "version": "1.65.0",
+  "version": "1.66.0",
   "description": "Visual multi-agent orchestrator and manager for Claude Code with 3D/2D interface",
   "repository": {
     "type": "git",
@@ -12,6 +12,7 @@
   },
   "files": [
     "dist",
+    "scripts",
     "README.md",
     "LICENSE"
   ],

package/scripts/backup-data.sh

@@ -0,0 +1,116 @@
+#!/usr/bin/env bash
+# Tide Commander data backup script.
+#
+# - Backs up ~/.local/share/tide-commander (SQLite + JSON configs).
+# - Uses sqlite3 .backup to avoid corruption from concurrent writes.
+# - Names backups with a content signature so unchanged state does not
+#   create a new copy.
+# - Rotation: keeps the 8 newest hourly backups, plus the most recent
+#   backup from each of the 2 most recent prior days.
+
+set -euo pipefail
+
+DATA_DIR="${TIDE_COMMANDER_DATA_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/tide-commander}"
+BACKUP_DIR="${TIDE_COMMANDER_BACKUP_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/tide-commander-backups}"
+HOURLY_KEEP=8
+PRIOR_DAYS_KEEP=2
+
+log() { printf '[tide-backup %s] %s\n' "$(date -Iseconds)" "$*"; }
+
+if [[ ! -d "$DATA_DIR" ]]; then
+  log "data dir not found: $DATA_DIR (nothing to back up)"
+  exit 0
+fi
+
+mkdir -p "$BACKUP_DIR"
+
+STAGE_DIR="$(mktemp -d)"
+trap 'rm -rf "$STAGE_DIR"' EXIT
+
+# Stage JSON / text config files (top-level only; subdirs like query-history
+# and generated are considered derivable and skipped to keep backups small).
+shopt -s nullglob
+for f in "$DATA_DIR"/*.json "$DATA_DIR"/*.json.bak; do
+  [[ -f "$f" ]] && cp -p "$f" "$STAGE_DIR/"
+done
+shopt -u nullglob
+
+# Safe SQLite backup. Requires sqlite3 on PATH; if missing, fall back to a
+# plain copy of the main db file.
+if [[ -f "$DATA_DIR/events.db" ]]; then
+  if command -v sqlite3 >/dev/null 2>&1; then
+    sqlite3 "$DATA_DIR/events.db" ".backup '$STAGE_DIR/events.db'"
+  else
+    log "sqlite3 not found, using plain copy (may be inconsistent if written during copy)"
+    cp -p "$DATA_DIR/events.db" "$STAGE_DIR/events.db"
+  fi
+fi
+
+# Compute signature: deterministic hash of staged file contents + names.
+# (Mtimes intentionally excluded so identical content skips new backup.)
+SIGNATURE=$(
+  cd "$STAGE_DIR" && \
+  find . -type f -print0 | LC_ALL=C sort -z | \
+  xargs -0 sha256sum | sha256sum | cut -c1-16
+)
+
+# Skip if a backup with this signature already exists.
+if compgen -G "$BACKUP_DIR/backup-*-$SIGNATURE.tar.gz" >/dev/null; then
+  log "no changes since last backup (sig=$SIGNATURE), skipping"
+  exit 0
+fi
+
+TS="$(date +%Y%m%dT%H%M%S)"
+OUT="$BACKUP_DIR/backup-${TS}-${SIGNATURE}.tar.gz"
+tar -C "$STAGE_DIR" -czf "$OUT" .
+log "created $OUT"
+
+# Rotation: files are named backup-YYYYMMDDThhmmss-<sig>.tar.gz, which sorts
+# correctly lexicographically (newest last when sorted ascending).
+rotate() {
+  local today
+  today="$(date +%Y%m%d)"
+
+  mapfile -t files < <(ls -1 "$BACKUP_DIR"/backup-*.tar.gz 2>/dev/null | sort -r) || return 0
+  [[ ${#files[@]} -eq 0 ]] && return 0
+
+  declare -A keep=()
+
+  # Keep newest $HOURLY_KEEP regardless of day.
+  local i=0
+  for f in "${files[@]}"; do
+    if (( i < HOURLY_KEEP )); then
+      keep["$f"]=1
+      i=$((i + 1))
+    else
+      break
+    fi
+  done
+
+  # Keep the newest backup from each of the most recent prior days.
+  declare -A seen_days=()
+  local prior=0
+  for f in "${files[@]}"; do
+    local name day
+    name="$(basename "$f")"
+    # Strip "backup-" (7 chars), take the next 8 (YYYYMMDD).
+    day="${name:7:8}"
+    [[ "$day" == "$today" ]] && continue
+    [[ -n "${seen_days[$day]:-}" ]] && continue
+    seen_days["$day"]=1
+    keep["$f"]=1
+    prior=$((prior + 1))
+    (( prior >= PRIOR_DAYS_KEEP )) && break
+  done
+
+  for f in "${files[@]}"; do
+    if [[ -z "${keep[$f]:-}" ]]; then
+      rm -f "$f"
+      log "rotated out $(basename "$f")"
+    fi
+  done
+}
+
+rotate
+
+log "done (kept $(ls -1 "$BACKUP_DIR"/backup-*.tar.gz 2>/dev/null | wc -l) backup(s))"