| 方法 | 路径 | 摘要 | 认证 |
|---|---|---|---|
| GET | /v1/admin/control-backup | Signer fingerprint, freeze state, bundles, recent runs and redacted settings | 登录会话 |
| POST | /v1/admin/control-backup/backups | Queue an immediate backup | 登录会话 |
| DELETE | /v1/admin/control-backup/backups/{backup_id} | Queue deletion of a bundle and its remote copies; body confirm must equal backup_id | 登录会话 |
| GET | /v1/admin/control-backup/backups/{backup_id}/restore-commands | Text commands to restore a bundle onto an empty host (nothing is executed) | 登录会话 |
| POST | /v1/admin/control-backup/host-key | Read an SSH host key fingerprint to pin before a migration | 登录会话 |
| POST | /v1/admin/control-backup/migrations | Queue a migration to an empty new host; confirm must equal host. This control plane stays frozen after success. | 登录会话 |
| POST | /v1/admin/control-backup/recovery-kit | Download the backup identity sealed with a passphrase (scrypt) for off-host disaster recovery | 登录会话 |
| GET | /v1/admin/control-backup/runs/{run_id} | One agent run with its redacted log | 登录会话 |
| PUT | /v1/admin/control-backup/settings | Replace schedule, retention and off-host targets (empty secret fields keep the stored value) | 登录会话 |
| POST | /v1/admin/control-backup/targets/{name}/probe | Write, read back and delete a probe object on a configured target | 登录会话 |
契约文件：api/control-native-backup.openapi.yaml