# Use the full download_url from GET /bots/:id/backups
curl -L "https://api.phanomcloud.online/backups/c1a2b3d4.../download?token=HMAC_TOKEN&user=USER_UUID" \
  -o backup.zip

// Get the URL from the list endpoint first
const { data } = await (await fetch("/bots/BOT_ID/backups", {
  headers: { Authorization: "Bearer sess_..." }
})).json();

const downloadUrl = data.backups[0].download_url;
window.location.href = downloadUrl; // triggers browser download

HTTP/1.1 200 OK
Content-Type: application/zip
Content-Disposition: attachment; filename="before-v2-update.zip"
Content-Length: 45678

[binary zip data]

{
  "success": false,
  "error": "Token expired or invalid"
}