feat: Add automatic backup to Google Drive and local disk

[amirbiron]

✨ תיאור קצר

הוספת מערכת גיבויים אוטומטיים מלאה לוובאפ:

• גיבוי אוטומטי ל-Google Drive עם OAuth flow
• גיבוי אוטומטי לדיסק המקומי של השרת
• Scheduler daemon שרץ ברקע וסורק כל 5 דקות
• שחזור אסינכרוני עם דיווח התקדמות real-time
• ממשק משתמש בעברית בעמוד ההגדרות

📦 שינויים עיקריים

Backend

• webapp/backup_scheduler.py (חדש): Daemon thread שמנהל גיבויים אוטומטיים

  • סריקה כל 5 דקות של משתמשים עם schedule פעיל
  • ביצוע גיבויים ל-Drive ולדיסק לפי תדירות (יומי, שבועי, חודשי וכו')
  • ניקוי אוטומטי של גיבויים ישנים (retention 30 ימים, max 10 לכל משתמש)

• webapp/drive_auth.py (חדש): Google Drive OAuth flow

  • /api/drive/auth - הפניה ל-Google consent screen
  • /api/drive/callback - קבלת authorization code והחלפה לטוקנים
  • /api/drive/status - בדיקת סטטוס חיבור
  • /api/drive/disconnect - ניתוק Drive

• webapp/drive_backup_api.py (חדש): API endpoints לניהול גיבויים

  • /api/drive/schedule - הגדרת תדירות גיבוי ל-Drive
  • /api/drive/backup-now - גיבוי מיידי ל-Drive
  • /api/disk-backup/schedule - הגדרת תדירות גיבוי לדיסק
  • /api/disk-backup/now - גיבוי מיידי לדיסק
  • /api/disk-backup/status - סטטוס גיבויים לדיסק

• webapp/backup_api.py (שונה):

  • הוספת /api/backup/restore-async - שחזור אסינכרוני עם דיווח התקדמות
  • הוספת /api/backup/restore-progress/<id> - polling על מצב השחזור
  • ThreadPoolExecutor לביצוע שחזור ברקע

• services/personal_backup_service.py (שונה):

  • הוספת progress_cb callback ל-restore_user_data() לדיווח התקדמות
  • דיווח שלבים: קריאת מטאדאטה, שחזור קבצים, שחזור מסדי נתונים וכו'

• webapp/app.py (שונה):

  • הפעלת backup scheduler daemon בעת startup
  • רישום blueprints: drive_auth_bp ו-drive_backup_bp

Frontend

• webapp/templates/settings.html (שונה):
  • הוספת סעיף "גיבוי אוטומטי ל-Drive" עם:
    • כפתור חיבור Google Drive
    • בחירת תדירות גיבוי (

https://claude.ai/code/session_019psqKqV6MhkHQRkqt8Szz5

[github-actions]

🧯 Dangerous deletes guard report

Policy: see .cursorrules — dangerous deletions are blocked unless wrapped safely.

Summary:

• Flagged findings (blocking): 0
  0
• Excluded matches (not blocking): 15
• Total matches (all files): 129

Flagged findings (file:line:snippet):
(none)

Excluded matches (by path pattern)

./Dockerfile:42:    rm -rf /var/lib/apt/lists/*
./Dockerfile:121:    rm -rf /var/lib/apt/lists/*
./node_modules/katex/src/fonts/Makefile:139:	rm -rf pfa ff otf ttf woff woff2
./node_modules/katex/package.json:153:    "build": "rimraf dist/ && mkdirp dist && cp README.md dist && rollup -c --failAfterWarnings && webpack && node update-sri.js package dist/README.md",
./node_modules/mermaid/dist/mermaid.min.js:1524:`,"getStyles"),c1e=RQe});var h1e={};dr(h1e,{diagram:()=>NQe});var NQe,f1e=N(()=>{"use strict";$ge();a1e();l1e();u1e();NQe={parser:Fge,db:n1e,renderer:o1e,styles:c1e}});var m1e,g1e=N(()=>{"use  … [truncated]
./node_modules/mermaid/dist/mermaid.min.js.map:4:  "sourcesContent": ["/**\n* Default values for dimensions\n*/\nconst defaultIconDimensions = Object.freeze({\n\tleft: 0,\n\ttop: 0,\n\twidth: 16,\n\theight: 16\n});\n/**\n* Default values fo … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm/chunk-2M32CCKP.mjs.map:4:  "sourcesContent": ["{\n  \"name\": \"mermaid\",\n  \"version\": \"11.12.0\",\n  \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequence d … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm.min/chunk-4HFYJGYH.mjs:1:var r={name:"mermaid",version:"11.12.0",description:"Markdown-ish syntax for generating flowcharts, mindmaps, sequence diagrams, class diagrams, gantt charts, git graph … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm.min/chunk-4HFYJGYH.mjs.map:4:  "sourcesContent": ["{\n  \"name\": \"mermaid\",\n  \"version\": \"11.12.0\",\n  \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequen … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.core/chunk-KS23V3DP.mjs.map:4:  "sourcesContent": ["{\n  \"name\": \"mermaid\",\n  \"version\": \"11.12.0\",\n  \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequence  … [truncated]
./node_modules/mermaid/dist/mermaid.js.map:4:  "sourcesContent": ["/**\n* Default values for dimensions\n*/\nconst defaultIconDimensions = Object.freeze({\n\tleft: 0,\n\ttop: 0,\n\twidth: 16,\n\theight: 16\n});\n/**\n* Default values for tr … [truncated]
./README.md:842:find . -name "__pycache__" -exec rm -rf {} +
./docs/DOCUMENTATION_GUIDE.md:453:rm -rf _build
./docs/Makefile:24:	rm -rf $(BUILDDIR)
./webapp/static/js/md_preview.bundle.js.map:4:  "sourcesContent": ["// Markdown-it plugin to render GitHub-style task lists; see\n//\n// https://github.com/blog/1375-task-lists-in-gfm-issues-pulls-comments\n// https://github.com/blog/1825-t … [truncated]

[github-actions]

⏱️ Performance report

• Run: https://github.com/amirbiron/CodeBot/actions/runs/23950115715
• Artifact: perf-durations

(No performance test durations collected. Mark tests with @pytest.mark.performance.)

General approach: Ensure that redirects never use an attacker-controlled host or scheme. Keep user input restricted to inert parts of the URL (like query parameters) and derive the redirect base from a trusted configuration value or from the current app context in a way that cannot be overridden by tampered headers.

Best concrete fix here:

• Make _settings_redirect build the target URL using url_for with _external=True so that the host/scheme come from Flask’s configuration rather than directly from request.url_root or environment variables that might be mis-set.
• Keep query strictly as part of the query string and do not allow it to alter the base path or host.
• To avoid changing external behavior, still redirect to /settings with #backup-section and arbitrary query parameters passed in as query.

A minimal change that achieves this:

1. Replace manual string concatenation of base and path with a call to url_for('settings', _external=True) (or if a specific endpoint name is not known, at least construct a relative path instead of absolute with request.url_root). However, we are constrained not to assume endpoints outside the snippet, so we should avoid introducing url_for('settings', ...) if we don't know that endpoint exists.
2. Instead, we can:
   • Always use a relative redirect path (/settings?...#backup-section) rather than a fully-qualified URL with host and scheme. Relative redirects are resolved by the browser against the current origin, so they can't redirect off-site.
   • Keep using WEBAPP_URL elsewhere if needed, but for _settings_redirect, we return redirect(f"/settings?{query}#backup-section").

This preserves the visible behavior (path /settings, same query, fragment #backup-section) but removes any dependence of the redirect URL on request.url_root or environment-based host, eliminating any open-redirect risk. No new imports are needed.

Concretely, in webapp/drive_auth.py, update _settings_redirect:

• Remove the logic building base from WEBAPP_URL or request.url_root.
• Return redirect(f"/settings?{query}#backup-section").

---

[github-actions]

📖 Documentation Preview

The documentation has been built successfully!

• 📦 Download Documentation Artifacts
• 🔍 Check the workflow summary for coverage report
• 📊 Build completed at: Fri, 03 Apr 2026 14:44:15 GMT

To view locally:

1. Download the artifacts
2. Extract the zip file
3. Open index.html in your browser

[sentry]

Codecov Report

❌ Patch coverage is 64.51613% with 11 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
services/personal_backup_service.py	68.96%	4 Missing and 5 partials ⚠️
database/bookmarks_manager.py	0.00%	2 Missing ⚠️

📢 Thoughts on this report? Let us know!

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}