The data/ directory (services.json, config.json, credentials, TOTP config, notifications) was never included in the update backup. Every update wiped user data — services, licenses, credentials — requiring manual restore. Now the host-side updater: - Backs up data/ alongside code files before any update - Restores data/ on rollback (build failure, restart failure, or health-check failure)