Till JS fd1ea47075 feat(backup): client-driven v2 snapshot export, drop server-side backup ... Replaces the mana-sync event-stream export (GET /backup/export) with a fully client-driven `.mana` v2 archive: webapp reads Dexie, decrypts per-field, packages JSONL + manifest, optionally PBKDF2+AES-GCM seals with a passphrase. - New: backup/v2/{format,passphrase,export,import}.ts + format.test.ts (10 tests: round-trip, sealed path, 3 failure modes incl. wrong- passphrase vs. tamper distinction). - UI: ExportImportPanel with module multi-select, optional passphrase, progress + sealed-file detection — replaces the old backup flow in Settings → MyData. - Removes services/mana-sync/internal/backup/ and the corresponding client helpers + v1 tests. No parallel paths, no legacy shim. - Why client-driven: zero-knowledge users hold their vault key only client-side, so a server exporter cannot produce plaintext archives; GDPR Art. 20 portability is better served by plaintext-by-default. - Cross-account restore works via re-encryption under the target vault key (no MK transfer needed). DATA_LAYER_AUDIT.md §8 rewritten to reflect the new architecture. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-22 18:46:29 +02:00
..
server	feat(backup): client-driven v2 snapshot export, drop server-side backup	2026-04-22 18:46:29 +02:00