release: v1.9.0

docs: update windows arm download link
feat: add anonymous analytics (#1254 )
2026-11-10 10:30:28 +00:00 · 2026-01-23 22:38:11 +08:00 · 2026-01-23 22:33:00 +08:00 · 2026-01-23 22:29:15 +08:00 · 2026-01-23 21:28:13 +08:00 · 2026-01-22 22:18:34 +08:00
165 changed files with 21401 additions and 2459 deletions
@@ -40,24 +40,40 @@ template: |
  <table>
    <tbody>
      <tr>
-        <td rowspan="2">🪟 Windows</td>
-        <td><code>EXE</code></td>
+        <td rowspan="4">🪟 Windows</td>
+        <td rowspan="2"><code>EXE</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-windows-amd64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-windows-amd64.zip">📥</a></td>
      </tr>
      <tr>
-        <td><code>Portable</code></td>
-        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-windows-amd64-portable.zip">📥</a></td>
+        <td>arm64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-windows-arm64.zip">📥</a></td>
      </tr>
      <tr>
-        <td>🍎 MacOS</td>
-        <td><code>DMG</code></td>
+        <td rowspan="2"><code>Portable</code></td>
+        <td>amd64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-windows-amd64-portable.zip">📥</a></td>
+      </tr>
+      <tr>
+        <td>arm64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-windows-arm64-portable.zip">📥</a></td>
+      </tr>
+      <tr>
+        <td rowspan="3">🍎 MacOS</td>
+        <td rowspan="3"><code>DMG</code></td>
        <td>universal</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-macos.dmg">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-macos.dmg">📥</a></td>
      </tr>
      <tr>
-        <td rowspan="4">🐧 Linux</td>
+        <td>amd64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-macos-amd64.dmg">📥</a></td>
+      </tr>
+      <tr>
+        <td>arm64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-macos-arm64.dmg">📥</a></td>
+      </tr>
+      <tr>
+        <td rowspan="6">🐧 Linux</td>
        <td><code>Flathub</code></td>
        <td>amd64</td>
        <td><a href="https://flathub.org/apps/com.gopeed.Gopeed">📥</a></td>
@@ -68,26 +84,46 @@ template: |
        <td><a href="https://snapcraft.io/gopeed">📥</a></td>
      </tr>
      <tr>
-        <td><code>DEB</code></td>
+        <td rowspan="2"><code>DEB</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-linux-amd64.deb">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-linux-amd64.deb">📥</a></td>
      </tr>
      <tr>
-        <td><code>AppImage</code></td>
-        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-linux-x86_64.AppImage">📥</a></td>
+        <td>arm64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-linux-arm64.deb">📥</a></td>
      </tr>
      <tr>
-        <td>🤖 Android</td>
-        <td><code>APK</code></td>
+        <td rowspan="2"><code>AppImage</code></td>
+        <td>amd64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-linux-amd64.AppImage">📥</a></td>
+      </tr>
+      <tr>
+        <td>arm64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-linux-arm64.AppImage">📥</a></td>
+      </tr>
+      <tr>
+        <td rowspan="4">🤖 Android</td>
+        <td rowspan="4"><code>APK</code></td>
        <td>universal</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-android.apk">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-android.apk">📥</a></td>
+      </tr>
+      <tr>
+        <td>armeabi-v7a</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-android-armeabi-v7a.apk">📥</a></td>
+      </tr>
+      <tr>
+        <td>arm64-v8a</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-android-arm64-v8a.apk">📥</a></td>
+      </tr>
+      <tr>
+        <td>x86_64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-android-x86_64.apk">📥</a></td>
      </tr>
      <tr>
        <td>📱 iOS</td>
        <td><code>IPA</code></td>
        <td>universal</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-ios.ipa">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-ios.ipa">📥</a></td>
      </tr>
      <tr>
        <td>🐳 Docker</td>
@@ -99,47 +135,47 @@ template: |
        <td rowspan="2">💾 Qnap</td>
        <td rowspan="2"><code>QPKG</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-v$NEXT_PATCH_VERSION-qnap-amd64.qpkg">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-v$NEXT_PATCH_VERSION-qnap-amd64.qpkg">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-v$NEXT_PATCH_VERSION-qnap-arm64.qpkg">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-v$NEXT_PATCH_VERSION-qnap-arm64.qpkg">📥</a></td>
      </tr>
      <tr>
        <td rowspan="8">🌐 Web</td>
        <td rowspan="3"><code>Windows</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-windows-amd64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-windows-amd64.zip">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-windows-arm64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-windows-arm64.zip">📥</a></td>
      </tr>
      <tr>
        <td>386</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-windows-386.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-windows-386.zip">📥</a></td>
      </tr>
      <tr>
        <td rowspan="2"><code>MacOS</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-macos-amd64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-macos-amd64.zip">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-macos-arm64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-macos-arm64.zip">📥</a></td>
      </tr>
      <tr>
        <td rowspan="3"><code>Linux</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-linux-amd64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-linux-amd64.zip">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-linux-arm64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-linux-arm64.zip">📥</a></td>
      </tr>
      <tr>
        <td>386</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-linux-386.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-linux-386.zip">📥</a></td>
      </tr>
    </tbody>
  </table>
@@ -13,8 +13,10 @@ on:
        default: "false"

 env:
-  GO_VERSION: "1.23"
-  FLUTTER_VERSION: "3.24.5"
+  GO_VERSION: "1.24"
+  FLUTTER_VERSION: "3.38.7"
+  GA4_MEASUREMENT_ID: ${{ secrets.GA4_MEASUREMENT_ID }}
+  GA4_API_SECRET: ${{ secrets.GA4_API_SECRET }}

 permissions:
  contents: write
@@ -34,41 +36,92 @@ jobs:

  build-windows:
    if: ${{ github.event.inputs.platform == 'all' || github.event.inputs.platform == 'windows' }}
-    runs-on: windows-latest
    needs: [get-release]
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - arch: arm64
+            os: windows-11-arm
+            llvm_ver: "20251202" # Only ARM64
+            flutter_channel: "master"
+            flutter_version: "8817d45220d" # Only ARM64
+          - arch: amd64
+            os: windows-2022
+            flutter_channel: "stable"
+    runs-on: ${{ matrix.os }}
+
    steps:
      - uses: actions/checkout@v3
+
+      # Install LLVM environment only on ARM64
+      - name: Install llvm-mingw-ucrt-aarch64 (ARM64 only)
+        if: matrix.arch == 'arm64'
+        run: |
+          $ver = "${{ matrix.llvm_ver }}"
+          $url = "https://github.com/mstorsjo/llvm-mingw/releases/download/$ver/llvm-mingw-$ver-ucrt-aarch64.zip"
+          $zip = "$env:RUNNER_TEMP\\llvm.zip"
+          $extract = "$env:RUNNER_TEMP\\extract"
+          $target = "C:\\clangarm64"
+
+          curl -L $url -o $zip
+          rm -r -fo $extract,$target -ea Ignore
+          mkdir $extract | Out-Null
+
+          tar -xf $zip -C $extract
+          mv (Get-ChildItem $extract)[0].FullName $target
+
+          $b = "$target\\bin"
+          "CC=$b\\clang.exe"        >> $env:GITHUB_ENV
+          "CXX=$b\\clang++.exe"     >> $env:GITHUB_ENV
+          "CLANGARM64_BIN=$b"       >> $env:GITHUB_ENV
+          "CGO_ENABLED=1"           >> $env:GITHUB_ENV
+          "CLANGARM64_ROOT=$target" >> $env:GITHUB_ENV
+          $b >> $env:GITHUB_PATH
+
      - uses: actions/setup-go@v4
        with:
          go-version: ${{ env.GO_VERSION }}
      - uses: subosito/flutter-action@v2
        with:
-          flutter-version: ${{ env.FLUTTER_VERSION }}
+          channel: ${{ matrix.flutter_channel }}
+          flutter-version: ${{ matrix.flutter_version || env.FLUTTER_VERSION }}
      - name: Build
        env:
          VERSION: ${{ needs.get-release.outputs.version }}
+          GOARCH: ${{ matrix.arch }}
        run: |
          Invoke-WebRequest -Uri "https://github.com/jrsoftware/issrc/raw/main/Files/Languages/Unofficial/ChineseSimplified.isl" -OutFile "ChineseSimplified.isl"
          mv ChineseSimplified.isl "C:\Program Files (x86)\Inno Setup 6\Languages\"

          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$env:VERSION" -buildmode=c-shared -o ui/flutter/windows/libgopeed.dll github.com/GopeedLab/gopeed/bind/desktop
-          go build -ldflags="-w -s" -o ui/flutter/assets/host/host.exe github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/host.exe github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/updater.exe github.com/GopeedLab/gopeed/cmd/updater
          cd ui/flutter
          $TAG = "v$env:VERSION"
-          flutter build windows
-          $mingw = "C:\Program Files\Git\mingw64\bin"
+          flutter build windows --dart-define="UPDATE_CHANNEL=windowsPortable" --dart-define="GA4_MEASUREMENT_ID=${{ env.GA4_MEASUREMENT_ID }}" --dart-define="GA4_API_SECRET=${{ env.GA4_API_SECRET }}"
          $system = "C:\Windows\System32"
-          $release = "build\windows\x64\runner\Release\"
-          cp $mingw\libstdc++-6.dll $release
-          cp $mingw\libgcc_s_seh-1.dll $release
+          if ("${{ matrix.arch }}" -eq "amd64") {
+              # for amd64
+              $release = "build\windows\x64\runner\Release\"
+              $mingw = "C:\Program Files\Git\mingw64\bin"
+              cp $mingw\libstdc++-6.dll $release
+              cp $mingw\libgcc_s_seh-1.dll $release
+          } else {
+              # for ARM64
+              $release = "build\windows\arm64\runner\Release\"
+              $mingw = "$env:CLANGARM64_ROOT\aarch64-w64-mingw32\bin"
+              cp $mingw\libc++.dll $release
+          }
          cp $mingw\libwinpthread-1.dll $release
          cp $system\msvcp140.dll $release
          cp $system\vcruntime140.dll $release
          cp $system\vcruntime140_1.dll $release

          New-Item -Path build\windows\Output -ItemType Directory
-          Compress-Archive -Path "$release*" -DestinationPath "build\windows\Output\Gopeed-$TAG-windows-amd64-portable.zip"
+          Compress-Archive -Path "$release*" -DestinationPath "build\windows\Output\Gopeed-$TAG-windows-${{ matrix.arch }}-portable.zip"

+          flutter build windows --dart-define="UPDATE_CHANNEL=windowsInstaller" --dart-define="GA4_MEASUREMENT_ID=${{ env.GA4_MEASUREMENT_ID }}" --dart-define="GA4_API_SECRET=${{ env.GA4_API_SECRET }}"
          cd build/windows
          echo @"
          ; Script generated by the Inno Setup Script Wizard.
@@ -114,7 +167,7 @@ jobs:
          Name: "desktopicon"; Description: "{cm:CreateDesktopIcon}"; GroupDescription: "{cm:AdditionalIcons}"; Flags: unchecked

          [Files]
-          Source: ".\x64\runner\Release\*"; DestDir: "{app}"; Flags: ignoreversion recursesubdirs;
+          Source: ".\${{ matrix.arch == 'amd64' && 'x64' || 'arm64' }}\runner\Release\*"; DestDir: "{app}"; Flags: ignoreversion recursesubdirs;
          ; NOTE: Don't use "Flags: ignoreversion" on any shared system files

          [UninstallDelete]
@@ -128,18 +181,17 @@ jobs:
          Filename: "{app}\{#MyAppExeName}"; Description: "{cm:LaunchProgram,{#StringChange(MyAppName, '&', '&&')}}"; Flags: nowait postinstall skipifsilent
          "@ > setup.iss
          iscc.exe setup.iss
-          mv "Output\gopeed.exe" "Output\Gopeed-$TAG-windows-amd64.exe"
-          Compress-Archive -Path "Output\Gopeed-$TAG-windows-amd64.exe" -DestinationPath "Output\Gopeed-$TAG-windows-amd64.zip"
-          Remove-Item -Path "Output\Gopeed-$TAG-windows-amd64.exe"
+          mv "Output\gopeed.exe" "Output\Gopeed-$TAG-windows-${{ matrix.arch }}.exe"
+          Compress-Archive -Path "Output\Gopeed-$TAG-windows-${{ matrix.arch }}.exe" -DestinationPath "Output\Gopeed-$TAG-windows-${{ matrix.arch }}.zip"
      - name: Upload
        uses: shogo82148/actions-upload-release-asset@v1
        with:
          upload_url: ${{ needs.get-release.outputs.upload_url }}
          asset_path: ui/flutter/build/windows/Output/*
          overwrite: true
-  build-macos-arm64-lib:
+  build-macos-amd64-lib:
    if: ${{ github.event.inputs.platform == 'all' || github.event.inputs.platform == 'macos' }}
-    runs-on: macos-latest
+    runs-on: macos-15-intel
    needs: [get-release]
    steps:
      - uses: actions/checkout@v3
@@ -152,16 +204,21 @@ jobs:
        run: |
          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o libgopeed.dylib github.com/GopeedLab/gopeed/bind/desktop
          go build -ldflags="-w -s" github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" github.com/GopeedLab/gopeed/cmd/updater
      - uses: actions/upload-artifact@v4
        with:
-          name: macos-arm64-lib
+          name: macos-amd64-lib
          path: |
            libgopeed.dylib
            host
+            updater
  build-macos:
    if: ${{ github.event.inputs.platform == 'all' || github.event.inputs.platform == 'macos' }}
-    runs-on: macos-13
-    needs: [get-release, build-macos-arm64-lib]
+    runs-on: macos-latest
+    strategy:
+      matrix:
+        channel: [arm64, amd64, universal]
+    needs: [get-release, build-macos-amd64-lib]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -179,31 +236,47 @@ jobs:
          npm install -g appdmg
      - uses: actions/download-artifact@v4
        with:
-          name: macos-arm64-lib
-          path: ui/flutter/lib-arm64
+          name: macos-amd64-lib
+          path: ui/flutter/lib-amd64
+      - if: ${{ matrix.channel == 'arm64' }}
+        name: Build Arm64 Libraries
+        run: |
+          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/macos/Frameworks/libgopeed.dylib github.com/GopeedLab/gopeed/bind/desktop
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/host github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/updater github.com/GopeedLab/gopeed/cmd/updater
+      - if: ${{ matrix.channel == 'amd64' }}
+        name: Build Amd64 Libraries
+        run: |
+          mkdir -p ui/flutter/macos/Frameworks
+
+          cp ui/flutter/lib-amd64/libgopeed.dylib ui/flutter/macos/Frameworks/libgopeed.dylib
+          cp ui/flutter/lib-amd64/host ui/flutter/assets/exec/host
+          cp ui/flutter/lib-amd64/updater ui/flutter/assets/exec/updater
+      - if: ${{ matrix.channel == 'universal' }}
+        name: Build Universal Libraries
+        run: |
+          mkdir -p ui/flutter/macos/Frameworks
+
+          # arm64 lib
+          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/.temp/libgopeed.dylib.arm64 github.com/GopeedLab/gopeed/bind/desktop
+          go build -ldflags="-w -s" -o ui/flutter/.temp/host.arm64 github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/.temp/updater.arm64 github.com/GopeedLab/gopeed/cmd/updater
+
+          # amd64 lib
+          cp ui/flutter/lib-amd64/libgopeed.dylib ui/flutter/.temp/libgopeed.dylib.amd64
+          cp ui/flutter/lib-amd64/host ui/flutter/.temp/host.amd64
+          cp ui/flutter/lib-amd64/updater ui/flutter/.temp/updater.amd64
+
+          # universal lib
+          lipo -create -output ui/flutter/macos/Frameworks/libgopeed.dylib ui/flutter/.temp/libgopeed.dylib.arm64 ui/flutter/.temp/libgopeed.dylib.amd64
+          lipo -create -output ui/flutter/assets/exec/host ui/flutter/.temp/host.arm64 ui/flutter/.temp/host.amd64
+          lipo -create -output ui/flutter/assets/exec/updater ui/flutter/.temp/updater.arm64 ui/flutter/.temp/updater.amd64
      - name: Build
        env:
          VERSION: ${{ needs.get-release.outputs.version }}
        run: |
-          PROJECT_DIR=$(pwd)
-
-          # amd64 lib
-          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/lib-amd64/libgopeed.dylib github.com/GopeedLab/gopeed/bind/desktop
-          go build -ldflags="-w -s" -o ui/flutter/lib-amd64/host github.com/GopeedLab/gopeed/cmd/host
-          # universal binary
-          mkdir -p ui/flutter/macos/Frameworks
-          cp ui/flutter/lib-amd64/libgopeed.dylib ui/flutter/macos/Frameworks/amd64-lib
-          cp ui/flutter/lib-arm64/libgopeed.dylib ui/flutter/macos/Frameworks/arm64-lib
-          cp ui/flutter/lib-amd64/host ui/flutter/macos/Frameworks/amd64-host
-          cp ui/flutter/lib-arm64/host ui/flutter/macos/Frameworks/arm64-host
-          cd ui/flutter/macos/Frameworks
-          lipo -create -output libgopeed.dylib amd64-lib arm64-lib
-          lipo -create -output host amd64-host arm64-host
-          rm -rf amd64-lib arm64-lib amd64-host arm64-host
-          mv host ../../assets/host/host
-
-          cd $PROJECT_DIR/ui/flutter
-          flutter build macos
+          cd ui/flutter
+          flutter build macos --dart-define="UPDATE_CHANNEL=macosDmg" --dart-define="GA4_MEASUREMENT_ID=${{ env.GA4_MEASUREMENT_ID }}" --dart-define="GA4_API_SECRET=${{ env.GA4_API_SECRET }}"
          cd build/macos/Build/Products/Release
          cat>appdmg.json<<EOF
          {
@@ -217,6 +290,13 @@ jobs:
          EOF
          mkdir dist
          appdmg appdmg.json dist/Gopeed-v$VERSION-macos.dmg
+
+          if [[ "${{ matrix.channel }}" == "arm64" ]]; then
+            mv dist/Gopeed-v$VERSION-macos.dmg dist/Gopeed-v$VERSION-macos-arm64.dmg
+          fi
+          if [[ "${{ matrix.channel }}" == "amd64" ]]; then
+            mv dist/Gopeed-v$VERSION-macos.dmg dist/Gopeed-v$VERSION-macos-amd64.dmg
+          fi
      - name: Upload
        uses: shogo82148/actions-upload-release-asset@v1
        with:
@@ -225,7 +305,10 @@ jobs:
          overwrite: true
  build-linux:
    if: ${{ github.event.inputs.platform == 'all' || github.event.inputs.platform == 'linux' }}
-    runs-on: ubuntu-22.04
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-22.04, ubuntu-22.04-arm]
    needs: [get-release]
    steps:
      - uses: actions/checkout@v3
@@ -235,13 +318,12 @@ jobs:
      - uses: subosito/flutter-action@v2
        with:
          flutter-version: ${{ env.FLUTTER_VERSION }}
+          channel: master
      - run: |
          sudo apt update -y
-          # flutter build dependencies
-          sudo apt install -y ninja-build libgtk-3-dev libayatana-appindicator3-1 libayatana-appindicator3-dev
-          # appimage build dependencies
-          sudo apt install -y libfuse2 locate
-          wget -O appimagetool "https://github.com/AppImage/AppImageKit/releases/download/continuous/appimagetool-x86_64.AppImage"
+          sudo apt install -y ninja-build libgtk-3-dev libayatana-appindicator3-1 libayatana-appindicator3-dev rpm patchelf libfuse2 locate imagemagick potrace libkeybinder-3.0-dev
+          arch=$(uname -m)
+          wget -O appimagetool "https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-${arch}.AppImage"
          chmod +x appimagetool
          sudo mv appimagetool /usr/local/bin/
      - name: Build
@@ -249,13 +331,78 @@ jobs:
          VERSION: ${{ needs.get-release.outputs.version }}
        run: |
          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/linux/bundle/lib/libgopeed.so github.com/GopeedLab/gopeed/bind/desktop
-          go build -ldflags="-w -s" -o ui/flutter/assets/host/host github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/host github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/updater github.com/GopeedLab/gopeed/cmd/updater
+
          cd ui/flutter
+
+          ICON_PATH=$(find assets -name "logo.png" -o -name "icon.png" | head -n 1)
+          [ -z "$ICON_PATH" ] && ICON_PATH="assets/icon.png" && touch assets/icon.png
+
+          convert "$ICON_PATH" assets/icon.svg
+          ICON_PATH="assets/icon.svg"
+
+          RPM_ARCH=$(uname -m)
+
+          mkdir -p linux/packaging/rpm
+          cat << EOF > linux/packaging/rpm/make_config.yaml
+          display_name: Gopeed
+          icon: $ICON_PATH
+          summary: High speed downloader.
+          description: A high speed downloader that supports all platforms.
+          group: Applications/Internet
+          license: GPL-3.0
+          url: https://github.com/GopeedLab/gopeed
+          vendor: GopeedLab
+          maintainer: GopeedLab <[email protected]>
+          build_arch: $RPM_ARCH
+          EOF
+
+          cat << EOF > distribute_options.yaml
+          output: dist/
+          releases:
+            - name: linux
+              jobs:
+                - name: appimage
+                  package:
+                    platform: linux
+                    target: appimage
+                    build_args:
+                      dart-define:
+                        UPDATE_CHANNEL: linuxAppImage
+                        GA4_MEASUREMENT_ID: ${{ env.GA4_MEASUREMENT_ID }}
+                        GA4_API_SECRET: ${{ env.GA4_API_SECRET }}
+                - name: deb
+                  package:
+                    platform: linux
+                    target: deb
+                    build_args:
+                      dart-define:
+                        UPDATE_CHANNEL: linuxDeb
+                        GA4_MEASUREMENT_ID: ${{ env.GA4_MEASUREMENT_ID }}
+                        GA4_API_SECRET: ${{ env.GA4_API_SECRET }}
+                - name: rpm
+                  package:
+                    platform: linux
+                    target: rpm
+                    build_args:
+                      dart-define:
+                        UPDATE_CHANNEL: linuxRpm
+                        GA4_MEASUREMENT_ID: ${{ env.GA4_MEASUREMENT_ID }}
+                        GA4_API_SECRET: ${{ env.GA4_API_SECRET }}
+          EOF
          dart pub global activate -sgit https://github.com/GopeedLab/flutter_distributor.git --git-path packages/flutter_distributor
-          flutter_distributor package --platform linux --targets appimage,deb
+          flutter_distributor release --name linux
          cd dist/*
-          mv gopeed-*-linux.AppImage Gopeed-v${VERSION}-linux-x86_64.AppImage
-          mv gopeed-*-linux.deb Gopeed-v${VERSION}-linux-amd64.deb
+
+          ARCH="amd64"
+          if [[ "${{ matrix.os }}" == *-arm ]]; then
+            ARCH="arm64"
+          fi
+
+          mv gopeed-*-linux.AppImage Gopeed-v${VERSION}-linux-${ARCH}.AppImage
+          mv gopeed-*-linux.deb Gopeed-v${VERSION}-linux-${ARCH}.deb
+          mv gopeed-*-linux.rpm Gopeed-v${VERSION}-linux-${ARCH}.rpm
      - name: Upload
        uses: shogo82148/actions-upload-release-asset@v1
        with:
@@ -280,7 +427,8 @@ jobs:
          VERSION: ${{ needs.get-release.outputs.version }}
        run: |
          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/linux/bundle/lib/libgopeed.so github.com/GopeedLab/gopeed/bind/desktop
-          go build -ldflags="-w -s" -o ui/flutter/assets/host/host github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/host github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/updater github.com/GopeedLab/gopeed/cmd/updater
          cd ui/flutter

          sudo snap install snapcraft --classic
@@ -336,6 +484,7 @@ jobs:
                - cmake
                - curl
                - libgtk-3-dev
+                - libkeybinder-3.0-dev
                - ninja-build
                - unzip
                - xz-utils
@@ -351,13 +500,14 @@ jobs:
              plugin: nil
              stage-packages:
                - libgtk-3-dev
+                - libkeybinder-3.0-dev
                - libappindicator3-dev
              override-build: |
                # work around pub get stack overflow # https://github.com/dart-lang/sdk/issues/51068#issuecomment-1396588253
                set +e
                dart pub get
                set -eux
-                flutter build linux --release -v
+                flutter build linux --dart-define="UPDATE_CHANNEL=linuxSnap" --dart-define="GA4_MEASUREMENT_ID=$GA4_MEASUREMENT_ID" --dart-define="GA4_API_SECRET=$GA4_API_SECRET"
                mkdir -p \$CRAFT_PART_INSTALL/bin/
                cp -r build/linux/*/release/bundle/* \$CRAFT_PART_INSTALL/bin/
            gpu-2404:
@@ -422,9 +572,13 @@ jobs:
          gomobile bind -tags nosqlite -ldflags="-w -s -checklinkname=0 -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -o ui/flutter/android/app/libs/libgopeed.aar -target=android -androidapi 21 -javapkg=com.gopeed github.com/GopeedLab/gopeed/bind/mobile
          cd ui/flutter
          echo $APK_KEYSTORE | base64 -di > android/app/upload-keystore.jks
-          flutter build apk
+          flutter build apk --dart-define="UPDATE_CHANNEL=androidApk" --dart-define="GA4_MEASUREMENT_ID=${{ env.GA4_MEASUREMENT_ID }}" --dart-define="GA4_API_SECRET=${{ env.GA4_API_SECRET }}"
+          flutter build apk --split-per-abi --dart-define="UPDATE_CHANNEL=androidApk" --dart-define="GA4_MEASUREMENT_ID=${{ env.GA4_MEASUREMENT_ID }}" --dart-define="GA4_API_SECRET=${{ env.GA4_API_SECRET }}"
          mkdir dist
          cp build/app/outputs/flutter-apk/app-release.apk dist/Gopeed-v$VERSION-android.apk
+          cp build/app/outputs/flutter-apk/app-armeabi-v7a-release.apk dist/Gopeed-v$VERSION-android-armeabi-v7a.apk
+          cp build/app/outputs/flutter-apk/app-arm64-v8a-release.apk dist/Gopeed-v$VERSION-android-arm64-v8a.apk
+          cp build/app/outputs/flutter-apk/app-x86_64-release.apk dist/Gopeed-v$VERSION-android-x86_64.apk
      - name: Upload
        uses: shogo82148/actions-upload-release-asset@v1
        with:
@@ -433,7 +587,7 @@ jobs:
          overwrite: true
  build-ios:
    if: ${{ github.event.inputs.platform == 'all' || github.event.inputs.platform == 'ios' }}
-    runs-on: macos-latest
+    runs-on: macos-14
    needs: [get-release]
    steps:
      - uses: actions/checkout@v3
@@ -452,7 +606,7 @@ jobs:
          gomobile init
          gomobile bind -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -o ui/flutter/ios/Frameworks/Libgopeed.xcframework -target=ios github.com/GopeedLab/gopeed/bind/mobile
          cd ui/flutter
-          flutter build ios --no-codesign
+          flutter build ios --no-codesign --dart-define="UPDATE_CHANNEL=iosIpa" --dart-define="GA4_MEASUREMENT_ID=${{ env.GA4_MEASUREMENT_ID }}" --dart-define="GA4_API_SECRET=${{ env.GA4_API_SECRET }}"
          mkdir Payload
          cp -r build/ios/iphoneos/Runner.app Payload
          zip -r -y Payload.zip Payload/Runner.app
@@ -480,9 +634,9 @@ jobs:
        env:
          VERSION: ${{ needs.get-release.outputs.version }}
        run: |
-          VERSION=${VERSION:-$(date +%y%m%d%H%M)} # Use current time as version if not specified
          cd ui/flutter
-          flutter build web --no-web-resources-cdn
+          flutter build web --no-web-resources-cdn --dart-define="GA4_MEASUREMENT_ID=${{ env.GA4_MEASUREMENT_ID }}" --dart-define="GA4_API_SECRET=${{ env.GA4_API_SECRET }}"
+          dart ../../.github/workflows/scripts/flutter_local_font.dart
          cd ../../
          cp -r ui/flutter/build/web cmd/web/dist
          mkdir -p dist/zip
@@ -598,7 +752,8 @@ jobs:
      - name: Build flutter web
        run: |
          cd ui/flutter
-          flutter build web --no-web-resources-cdn
+          flutter build web --no-web-resources-cdn --dart-define="UPDATE_CHANNEL=docker" --dart-define="GA4_MEASUREMENT_ID=${{ env.GA4_MEASUREMENT_ID }}" --dart-define="GA4_API_SECRET=${{ env.GA4_API_SECRET }}"
+          dart ../../.github/workflows/scripts/flutter_local_font.dart
          cd ../../
          rm -rf cmd/web/dist
          cp -r ui/flutter/build/web cmd/web/dist
@@ -17,7 +17,7 @@ on:
      - "Dockerfile"

 env:
-  GO_VERSION: "1.23"
+  GO_VERSION: "1.24"

 permissions:
  contents: write
@@ -0,0 +1,412 @@
+// Localize external Google Fonts (fonts.gstatic.com) references in Flutter Web build output.
+//
+// Usage (post-build):
+//   # Run AFTER: flutter build web --no-web-resources-cdn
+//   dart ../../.github/workflows/scripts/flutter_local_font.dart
+//
+// What it does:
+// In main.dart.js:
+//    - Find any referenced resources under: https://fonts.gstatic.com/s/
+//      (including the common pattern where Flutter concatenates the base URL with a relative path)
+//    - Download them into: build/web/assets/gstatic/<path>
+//    - Rewrite "https://fonts.gstatic.com/s/" -> "assets/gstatic/" so runtime loads locally
+//    - Only download font subsets needed by supported locales (parsed from message.dart)
+//
+// Notes:
+// - This script DOES NOT call `flutter build web`. It only patches the output.
+// - This is a best-effort post-process. Always verify in browser devtools.
+
+import 'dart:async';
+import 'dart:io';
+
+/// Get font families required for a specific locale based on language/script.
+/// Uses language code prefix to automatically detect the script system.
+/// Returns empty set if base fonts (Latin/Cyrillic/Greek) are sufficient.
+Set<String> _getFontFamiliesForLocale(String locale) {
+  final lang = locale.toLowerCase().split('_').first;
+
+  // CJK languages - need specific large font files
+  if (lang == 'zh') {
+    // Simplified vs Traditional Chinese
+    if (locale.contains('cn') || locale.contains('sg')) {
+      return {'notosanssc'}; // Simplified Chinese
+    }
+    return {'notosanstc', 'notosanshk'}; // Traditional Chinese (TW, HK, MO)
+  }
+  if (lang == 'ja') return {'notosansjp'}; // Japanese
+  if (lang == 'ko') return {'notosanskr'}; // Korean
+
+  // Arabic script languages
+  if (lang == 'ar') return {'notosansarabic'}; // Arabic
+  if (lang == 'fa') return {'notosansarabic'}; // Persian/Farsi
+  if (lang == 'ur') return {'notosansarabic'}; // Urdu
+  if (lang == 'ps') return {'notosansarabic'}; // Pashto
+  if (lang == 'ku') return {'notosansarabic'}; // Kurdish (Arabic script)
+
+  // Hebrew script
+  if (lang == 'he' || lang == 'yi') return {'notosanshebrew'};
+
+  // South Asian scripts
+  if (lang == 'hi' || lang == 'mr' || lang == 'ne' || lang == 'sa') {
+    return {'notosansdevanagari'}; // Hindi, Marathi, Nepali, Sanskrit
+  }
+  if (lang == 'bn' || lang == 'as')
+    return {'notosansbengali'}; // Bengali, Assamese
+  if (lang == 'ta')
+    return {'notosanstamil', 'notosanstamilsupplement'}; // Tamil
+  if (lang == 'te') return {'notosanstelugu'}; // Telugu
+  if (lang == 'kn') return {'notosanskannada'}; // Kannada
+  if (lang == 'ml') return {'notosansmalayalam'}; // Malayalam
+  if (lang == 'gu') return {'notosansgujarati'}; // Gujarati
+  if (lang == 'pa') return {'notosansgurmukhi'}; // Punjabi (Gurmukhi)
+  if (lang == 'or') return {'notosansoriya'}; // Odia/Oriya
+  if (lang == 'si') return {'notosanssinhala'}; // Sinhala
+
+  // Southeast Asian scripts
+  if (lang == 'th') return {'notosansthai'}; // Thai
+  if (lang == 'lo') return {'notosanslao'}; // Lao
+  if (lang == 'my') return {'notosansmyanmar'}; // Myanmar/Burmese
+  if (lang == 'km') return {'notosanskhmer'}; // Khmer/Cambodian
+  if (lang == 'jv') return {'notosansjavanese'}; // Javanese
+
+  // Other scripts
+  if (lang == 'ka') return {'notosansgeorgian'}; // Georgian
+  if (lang == 'hy') return {'notosansarmenian'}; // Armenian
+  if (lang == 'am' || lang == 'ti')
+    return {'notosansethiopic'}; // Amharic, Tigrinya
+  if (lang == 'mn') return {'notosansmongolian'}; // Mongolian
+
+  // Latin/Cyrillic/Greek based languages - base notosans is sufficient
+  // Includes: English, German, French, Spanish, Italian, Portuguese,
+  // Russian, Ukrainian, Polish, Turkish, Vietnamese, Greek, etc.
+  return {};
+}
+
+/// Base font families that are always included regardless of locale.
+/// These provide core functionality and are relatively small.
+const _baseFontFamilies = <String>{
+  'notosans', // Base Latin/Cyrillic/Greek/Vietnamese
+  'roboto', // Material Design default font
+  'notosanssymbols', // Common symbols
+  'notosanssymbols2', // Additional symbols
+  'notosansmath', // Math symbols
+  'notomusic', // Music notation symbols
+  // Note: notocoloremoji (~24MB) and notoemoji (~860KB) are excluded
+  // to reduce bundle size. Add them back if emoji support is needed.
+};
+
+/// Parse supported locales from message.dart file.
+/// Reads the import statements and extracts locale codes like 'zh_cn', 'en_us', etc.
+Set<String> _parseSupportedLocales(File messageFile) {
+  final locales = <String>{};
+
+  if (!messageFile.existsSync()) {
+    _fail('Warning: message.dart not found, only base fonts will be used');
+  }
+
+  final content = messageFile.readAsStringSync();
+
+  // Match import statements like: import 'langs/zh_cn.dart';
+  final importRegex = RegExp(r"import\s+'langs/(\w+)\.dart'");
+  for (final match in importRegex.allMatches(content)) {
+    final locale = match.group(1);
+    if (locale != null) {
+      locales.add(locale);
+    }
+  }
+
+  if (locales.isEmpty) {
+    _fail(
+        'Warning: No locales found in message.dart, only base fonts will be used');
+  }
+
+  return locales;
+}
+
+/// Get required font families for the given locales.
+/// Returns a set of font family names that should be included.
+/// Automatically detects required fonts based on language code prefix.
+Set<String> _getRequiredFontFamilies(Set<String> locales) {
+  final families = <String>{..._baseFontFamilies};
+  for (final locale in locales) {
+    final localeFamilies = _getFontFamiliesForLocale(locale);
+    families.addAll(localeFamilies);
+  }
+  return families;
+}
+
+/// Check if a font file path should be included based on required font families.
+/// Font paths have the format: "fontfamily/version/filename.ext"
+/// Example: "notosanssc/v36/xxx.ttf" -> font family is "notosanssc"
+bool _fontMatchesRequiredFamilies(
+    String fontPath, Set<String> requiredFamilies) {
+  // Extract font family from path (first segment before '/')
+  final slashIndex = fontPath.indexOf('/');
+  if (slashIndex == -1) {
+    // No slash found, include by default (unusual path format)
+    return true;
+  }
+
+  final fontFamily = fontPath.substring(0, slashIndex).toLowerCase();
+  return requiredFamilies.contains(fontFamily);
+}
+
+Future<void> main(List<String> args) async {
+  try {
+    // This script is intentionally argument-free for CI convenience.
+    // It assumes it is executed from the Flutter project directory (ui/flutter),
+    // but will also try to locate pubspec.yaml by walking up.
+    final flutterDir = _findFlutterProjectRoot(Directory.current);
+
+    // Parse supported locales from message.dart
+    final messageFile =
+        File(_join(flutterDir.path, 'lib', 'i18n', 'message.dart'));
+    final supportedLocales = _parseSupportedLocales(messageFile);
+    stdout.writeln('Supported locales: ${supportedLocales.join(', ')}');
+
+    // Get required font families based on supported locales
+    final requiredFamilies = _getRequiredFontFamilies(supportedLocales);
+    stdout.writeln('Required font families: ${requiredFamilies.join(', ')}');
+
+    final webDir = Directory(_join(flutterDir.path, 'build', 'web'));
+    if (!webDir.existsSync()) {
+      _fail(
+        'Web build directory not found: ${webDir.path}\n'
+        'Did you run: flutter build web --no-web-resources-cdn ?',
+      );
+    }
+
+    final mainJs = File(_join(webDir.path, 'main.dart.js'));
+    if (!mainJs.existsSync()) {
+      _fail('main.dart.js not found at: ${mainJs.path}');
+    }
+
+    final gstaticRoot = Directory(_join(webDir.path, 'assets', 'gstatic'));
+    if (!gstaticRoot.existsSync()) gstaticRoot.createSync(recursive: true);
+
+    const gstaticSPrefix = 'https://fonts.gstatic.com/s/';
+    final original = mainJs.readAsStringSync();
+
+    // Relative font asset paths which Flutter's loader typically concatenates with:
+    //   https://fonts.gstatic.com/s/
+    // Keep this as a best-effort heuristic to cover the common concatenation pattern.
+    // Some gstatic assets include extra dot segments like: notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2
+    // Allow dots in the path, while still restricting to font-like extensions.
+    final relAssetRegex = RegExp(
+      r"""["']([a-zA-Z0-9/_\.-]+\.(?:woff2|woff|ttf|otf|eot|svg))["']""",
+      caseSensitive: false,
+    );
+    final relAssetsUnderS = <String>{};
+    for (final m in relAssetRegex.allMatches(original)) {
+      final p = m.group(1);
+      if (p == null || p.isEmpty) continue;
+      if (p.contains('://') || p.startsWith('data:')) continue;
+      if (p.startsWith('/') ||
+          p.startsWith('assets/') ||
+          p.startsWith('packages/')) continue;
+      if (p.contains('..')) continue;
+      relAssetsUnderS.add(p);
+    }
+
+    if (relAssetsUnderS.isEmpty) {
+      _fail('No fonts.gstatic.com assets found in main.dart.js.');
+    }
+
+    // Build a download plan: dest relative path (under assets/gstatic/) -> URL.
+    // Filter fonts based on required font families to reduce package size.
+    final downloads = <String, Uri>{};
+    final skippedFonts = <String, Set<String>>{};
+
+    for (final rel in relAssetsUnderS) {
+      if (_fontMatchesRequiredFamilies(rel, requiredFamilies)) {
+        downloads[rel] = Uri.parse('$gstaticSPrefix$rel');
+      } else {
+        // Track skipped fonts and their paths for fallback generation
+        final slashIndex = rel.indexOf('/');
+        final family = slashIndex > 0 ? rel.substring(0, slashIndex) : rel;
+        skippedFonts.putIfAbsent(family, () => <String>{}).add(rel);
+      }
+    }
+
+    if (skippedFonts.isNotEmpty) {
+      stdout.writeln(
+        'Skipped ${skippedFonts.length} font families not required by supported locales:',
+      );
+      stdout.writeln('  ${skippedFonts.keys.join(', ')}');
+    }
+
+    if (downloads.isNotEmpty) {
+      stdout.writeln(
+        'Found ${downloads.length} fonts.gstatic.com assets to download...',
+      );
+
+      // Reuse a single HttpClient to avoid creating hundreds of short-lived
+      // connections (can be flaky on some environments).
+      final httpClient = HttpClient()
+        ..connectionTimeout = const Duration(seconds: 30)
+        ..idleTimeout = const Duration(seconds: 30)
+        ..maxConnectionsPerHost = 6;
+      try {
+        for (final entry in downloads.entries) {
+          final relPath = entry.key;
+          final url = entry.value;
+          final destPath = relPath.replaceAll('/', Platform.pathSeparator);
+          final dest = File(_join(gstaticRoot.path, destPath));
+          await _downloadIfMissing(httpClient, url, dest);
+        }
+      } finally {
+        httpClient.close(force: true);
+      }
+    }
+
+    // Generate empty fallback font files for skipped fonts to prevent infinite loading
+    // Empty files will cause browsers to fail fast instead of retrying indefinitely
+    if (skippedFonts.isNotEmpty) {
+      var fallbackCount = 0;
+      for (final entry in skippedFonts.entries) {
+        for (final relPath in entry.value) {
+          final destPath = relPath.replaceAll('/', Platform.pathSeparator);
+          final dest = File(_join(gstaticRoot.path, destPath));
+          if (!dest.existsSync()) {
+            dest.parent.createSync(recursive: true);
+            // Create an empty file - browsers will recognize it as invalid and skip
+            dest.writeAsBytesSync([]);
+            fallbackCount++;
+          }
+        }
+      }
+      if (fallbackCount > 0) {
+        stdout.writeln(
+          'Generated $fallbackCount empty fallback font files to prevent infinite loading',
+        );
+      }
+    }
+
+    // Rewrite remote prefix so requests become:
+    //   <origin>/assets/gstatic/<...>.woff2
+    final replacedGstatic = original.replaceAll(
+      gstaticSPrefix,
+      'assets/gstatic/',
+    );
+
+    if (replacedGstatic == original && downloads.isEmpty) {
+      stdout.writeln(
+        'No changes applied (no fonts.gstatic.com references found).',
+      );
+      exitCode = 0;
+      return;
+    }
+
+    mainJs.writeAsStringSync(replacedGstatic);
+
+    stdout.writeln('Patched: ${mainJs.path}');
+    if (downloads.isNotEmpty) {
+      stdout.writeln(
+        ' - downloaded ${downloads.length} files into: ${gstaticRoot.path}',
+      );
+    }
+    stdout.writeln(' - fonts.gstatic.com rewritten -> assets/gstatic/');
+  } catch (e, st) {
+    stderr.writeln('ERROR: $e');
+    stderr.writeln(st);
+    exitCode = 1;
+  }
+}
+
+Future<void> _downloadIfMissing(HttpClient client, Uri url, File dest) async {
+  if (dest.existsSync() && dest.lengthSync() > 0) return;
+
+  dest.parent.createSync(recursive: true);
+
+  // Network can be flaky in CI. Retry a few times on transient errors.
+  const maxAttempts = 4;
+
+  for (var attempt = 1; attempt <= maxAttempts; attempt++) {
+    final tmp = File('${dest.path}.tmp');
+    try {
+      try {
+        final req = await client.getUrl(url);
+
+        final resp = await req.close().timeout(const Duration(seconds: 60));
+        if (resp.statusCode != 200) {
+          // 404 is not transient in practice - fail fast with a clear message.
+          if (resp.statusCode == 404) {
+            _fail('Missing gstatic asset (404): $url');
+          }
+          throw HttpException('HTTP ${resp.statusCode}', uri: url);
+        }
+
+        // Stream to temp file first, then rename to avoid leaving partial files.
+        if (tmp.existsSync()) tmp.deleteSync();
+        final sink = tmp.openWrite();
+        await resp.pipe(sink).timeout(const Duration(seconds: 120));
+
+        if (!tmp.existsSync() || tmp.lengthSync() == 0) {
+          throw const FormatException('Downloaded asset is empty');
+        }
+        if (dest.existsSync()) dest.deleteSync();
+        tmp.renameSync(dest.path);
+        return;
+      } finally {
+        // no-op: HttpClient lifecycle managed by the caller
+      }
+    } on TimeoutException {
+      if (tmp.existsSync()) tmp.deleteSync();
+      if (attempt == maxAttempts) {
+        _fail('Timeout downloading asset: $url');
+      }
+    } on SocketException catch (e) {
+      if (tmp.existsSync()) tmp.deleteSync();
+      if (attempt == maxAttempts) {
+        _fail('Socket error downloading asset: $url ($e)');
+      }
+    } on HttpException catch (e) {
+      if (tmp.existsSync()) tmp.deleteSync();
+      if (attempt == maxAttempts) {
+        _fail('HTTP error downloading asset: $url ($e)');
+      }
+    } on FileSystemException catch (e) {
+      if (tmp.existsSync()) tmp.deleteSync();
+      _fail('File write error downloading asset: $url ($e)');
+    } catch (e) {
+      if (tmp.existsSync()) tmp.deleteSync();
+      if (attempt == maxAttempts) {
+        _fail('Unexpected error downloading asset: $url ($e)');
+      }
+    }
+
+    // Backoff before retrying.
+    final backoffSeconds = 1 << (attempt - 1);
+    stdout.writeln(
+      'Retrying (${attempt + 1}/$maxAttempts) for: $url (wait ${backoffSeconds}s)',
+    );
+    await Future.delayed(Duration(seconds: backoffSeconds));
+  }
+}
+
+Directory _findFlutterProjectRoot(Directory start) {
+  var dir = start;
+  for (var i = 0; i < 10; i++) {
+    final pubspec = File(_join(dir.path, 'pubspec.yaml'));
+    if (pubspec.existsSync()) return dir;
+    final parent = dir.parent;
+    if (parent.path == dir.path) break;
+    dir = parent;
+  }
+  // Fallback: use current directory, error messages will explain what is missing.
+  return start;
+}
+
+Never _fail(String msg) {
+  throw FormatException(msg);
+}
+
+String _join(String a, [String? b, String? c, String? d]) {
+  final parts = <String>[
+    a,
+    if (b != null) b,
+    if (c != null) c,
+    if (d != null) d,
+  ];
+  return parts.join(Platform.pathSeparator);
+}
@@ -25,10 +25,11 @@ on:
      - ".github/workflows/test.yml"
      - "go.mod"
      - "go.sum"
+  workflow_dispatch:

 env:
-  GO_VERSION: "1.23"
-  FLUTTER_VERSION: "3.24.5"
+  GO_VERSION: "1.24"
+  FLUTTER_VERSION: "3.38.7"

 jobs:
  #  lint:
@@ -53,7 +54,13 @@ jobs:
        with:
          go-version: ${{ env.GO_VERSION }}
      - name: Run Unit tests.
-        run: go test $(go list ./... | grep -v /cmd/ | grep -v /bind/ ) -v -covermode=count -coverprofile=coverage.txt
+        run: |
+          # Get packages for testing and coverage (including cmd/web for flags_test.go)
+          PACKAGES=$(go list ./... | grep -v /bind/ | grep -v -E '/cmd/(?!web)')
+          go test -v -coverpkg=$(echo "$PACKAGES" | paste -sd "," -) -covermode=count -coverprofile=coverage.txt $PACKAGES
+          # Filter out main.go from coverage report to avoid lowering coverage percentage
+          grep -v "main.go" coverage.txt > coverage_filtered.txt || true
+          mv coverage_filtered.txt coverage.txt
      - uses: codecov/codecov-action@v4
        with:
          files: ./coverage.txt
@@ -63,8 +70,8 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        os: [ windows-latest, macos-latest, ubuntu-22.04 ]
-    needs: [ test ]
+        os: [windows-2022, macos-latest, ubuntu-22.04, ubuntu-22.04-arm]
+    needs: [test]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -73,6 +80,7 @@ jobs:
      - uses: subosito/flutter-action@v2
        with:
          flutter-version: ${{ env.FLUTTER_VERSION }}
+          channel: master
      - if: runner.os == 'Windows'
        run: |
          go build -tags nosqlite -ldflags="-w -s" -buildmode=c-shared -o ui/flutter/windows/libgopeed.dll github.com/GopeedLab/gopeed/bind/desktop
@@ -86,7 +94,7 @@ jobs:
      - if: runner.os == 'Linux'
        run: |
          sudo apt-get update -y
-          sudo apt-get install -y ninja-build libgtk-3-dev libayatana-appindicator3-dev
+          sudo apt-get install -y ninja-build libgtk-3-dev libayatana-appindicator3-dev libkeybinder-3.0-dev
          go build -tags nosqlite -ldflags="-w -s" -buildmode=c-shared -o ui/flutter/linux/bundle/lib/libgopeed.so github.com/GopeedLab/gopeed/bind/desktop
          cd ui/flutter
          flutter build linux
@@ -95,8 +103,8 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        os: [ macos-latest, ubuntu-latest ]
-    needs: [ test ]
+        os: [macos-14, ubuntu-latest]
+    needs: [test]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -128,7 +136,7 @@ jobs:
  build-web:
    name: Build web check
    runs-on: ubuntu-latest
-    needs: [ test ]
+    needs: [test]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -141,6 +149,7 @@ jobs:
        run: |
          cd ui/flutter
          flutter build web --no-web-resources-cdn
+          dart ../../.github/workflows/scripts/flutter_local_font.dart
          cd ../../
          rm -rf cmd/web/dist
          cp -r ui/flutter/build/web cmd/web/dist
@@ -148,7 +157,7 @@ jobs:
  build-docker:
    name: Build docker check
    runs-on: ubuntu-latest
-    needs: [ test ]
+    needs: [test]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -164,4 +173,4 @@ jobs:
          cd ../../
          rm -rf cmd/web/dist
          cp -r ui/flutter/build/web cmd/web/dist
-          docker build -t gopeed .
+          docker build -t gopeed .
@@ -1,4 +1,4 @@
-FROM golang:1.23.3 AS go
+FROM golang:1.24.11 AS go
 WORKDIR /app
 COPY ./go.mod ./go.sum ./
 RUN go mod download
@@ -5,6 +5,7 @@
 [![Release](https://img.shields.io/github/release/GopeedLab/gopeed.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Download](https://img.shields.io/github/downloads/GopeedLab/gopeed/total.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Donate](https://img.shields.io/badge/%24-donate-ff69b4.svg)](https://docs.gopeed.com/donate.html)
+[![WeChat](https://img.shields.io/badge/WeChat%20Official%20Account-07C160?logo=wechat&logoColor=white)](https://raw.githubusercontent.com/GopeedLab/gopeed/main/_docs/img/weixin.png)
 [![Discord](https://img.shields.io/discord/1037992631881449472?label=Discord&logo=discord&style=social)](https://discord.gg/ZUJqJrwCGB)

 <a href="https://trendshift.io/repositories/7953" target="_blank"><img src="https://trendshift.io/api/badge/repositories/7953" alt="GopeedLab%2Fgopeed | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
@@ -24,24 +25,40 @@ Visit ✈ [Official Website](https://gopeed.com) | 📖 [Official Docs](https://
 <table>
  <tbody>
    <tr>
-      <td rowspan="2">🪟 Windows</td>
-      <td><code>EXE</code></td>
+      <td rowspan="4">🪟 Windows</td>
+      <td rowspan="2"><code>EXE</code></td>
      <td>amd64</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64.zip">📥</a></td>
    </tr>
    <tr>
-      <td><code>Portable</code></td>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-arm64.zip">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="2"><code>Portable</code></td>
      <td>amd64</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-arm64-portable.zip">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
    <tr>
-      <td rowspan="4">🐧 Linux</td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
      <td>amd64</td>
      <td><a href="https://flathub.org/apps/com.gopeed.Gopeed">📥</a></td>
@@ -52,20 +69,40 @@ Visit ✈ [Official Website](https://gopeed.com) | 📖 [Official Docs](https://
      <td><a href="https://snapcraft.io/gopeed">📥</a></td>
    </tr>
    <tr>
-      <td><code>DEB</code></td>
+      <td rowspan="2"><code>DEB</code></td>
      <td>amd64</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.deb">📥</a></td>
    </tr>
    <tr>
-      <td><code>AppImage</code></td>
-      <td>amd64</td>
-      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-x86_64.AppImage">📥</a></td>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.deb">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="2"><code>AppImage</code></td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -142,6 +179,12 @@ go install github.com/GopeedLab/gopeed/cmd/gopeed@latest

 Gopeed also provides a browser extension to take over browser downloads, supporting browsers such as Chrome, Edge, Firefox, etc., please refer to: [https://github.com/GopeedLab/browser-extension](https://github.com/GopeedLab/browser-extension)

+## 📱 WeChat Official Account
+
+Follow our WeChat Official Account to get the latest updates and news.
+
+<img src="_docs/img/weixin.png" width="200" />
+
 ## 💝 Donate

 If you like this project, please consider [donating](https://docs.gopeed.com/donate.html) to support the development of this project, thank you!
@@ -158,8 +201,8 @@ This project is divided into two parts, the front end uses `flutter`, the back e

 ### 🌍 Environment

-1. Golang 1.23+
-2. Flutter 3.24+
+1. Golang 1.24+
+2. Flutter 3.38+

 ### 📋 Clone

@@ -5,6 +5,7 @@
 [![Release](https://img.shields.io/github/release/GopeedLab/gopeed.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Download](https://img.shields.io/github/downloads/GopeedLab/gopeed/total.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Donate](https://img.shields.io/badge/%24-donate-ff69b4.svg)](https://docs.gopeed.com/donate.html)
+[![WeChat](https://img.shields.io/badge/WeChat%20Official%20Account-07C160?logo=wechat&logoColor=white)](https://raw.githubusercontent.com/GopeedLab/gopeed/main/_docs/img/weixin.png)
 [![Discord](https://img.shields.io/discord/1037992631881449472?label=Discord&logo=discord&style=social)](https://discord.gg/ZUJqJrwCGB)

 <a href="https://trendshift.io/repositories/7953" target="_blank"><img src="https://trendshift.io/api/badge/repositories/7953" alt="GopeedLab%2Fgopeed | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
@@ -35,13 +36,21 @@ Gopeed (正式名 Go Speed) は `Golang` + `Flutter` によって開発された
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
    <tr>
-      <td rowspan="4">🐧 Linux</td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
      <td>amd64</td>
      <td><a href="https://flathub.org/apps/com.gopeed.Gopeed">📥</a></td>
@@ -52,20 +61,40 @@ Gopeed (正式名 Go Speed) は `Golang` + `Flutter` によって開発された
      <td><a href="https://snapcraft.io/gopeed">📥</a></td>
    </tr>
    <tr>
-      <td><code>DEB</code></td>
+      <td rowspan="2"><code>DEB</code></td>
      <td>amd64</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.deb">📥</a></td>
    </tr>
    <tr>
-      <td><code>AppImage</code></td>
-      <td>amd64</td>
-      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-x86_64.AppImage">📥</a></td>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.deb">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="2"><code>AppImage</code></td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -127,11 +156,16 @@ Gopeed (正式名 Go Speed) は `Golang` + `Flutter` によって開発された
    </tr>
  </tbody>
 </table>
-
 インストールについての詳細は、[インストール](https://docs.gopeed.com/install.html)を参照してください。

 ### 🛠️ コマンドツール

+## 📱 WeChat 公式アカウント
+
+公式アカウントをフォローして、最新のアップデートやニュースを入手してください。
+
+<img src="_docs/img/weixin.png" width="200" />
+
 ## 💝 寄付

 もしこのプロジェクトがお気に召しましたら、このプロジェクトの発展を支援するために[寄付](https://docs.gopeed.com/donate.html)をご検討ください！
@@ -148,8 +182,8 @@ Gopeed (正式名 Go Speed) は `Golang` + `Flutter` によって開発された

 ### 🌍 環境

-1. Go 言語 1.23+
-2. Flutter 3.24+
+1. Go 言語 1.24+
+2. Flutter 3.38+

 ### 📋 クローン

@@ -5,6 +5,7 @@
 [![Phiên bản](https://img.shields.io/github/release/GopeedLab/gopeed.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Tải về](https://img.shields.io/github/downloads/GopeedLab/gopeed/total.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Ủng hộ](https://img.shields.io/badge/%24-ủng%20hộ-ff69b4.svg)](https://docs.gopeed.com/donate.html)
+[![WeChat](https://img.shields.io/badge/WeChat%20Official%20Account-07C160?logo=wechat&logoColor=white)](https://raw.githubusercontent.com/GopeedLab/gopeed/main/_docs/img/weixin.png)
 [![Discord](https://img.shields.io/discord/1037992631881449472?label=Discord&logo=discord&style=social)](https://discord.gg/ZUJqJrwCGB)

 <a href="https://trendshift.io/repositories/7953" target="_blank"><img src="https://trendshift.io/api/badge/repositories/7953" alt="GopeedLab%2Fgopeed | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
@@ -35,13 +36,21 @@ Truy cập ✈ [Trang web chính thức](https://gopeed.com) | 📖 [Tài liệu
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
    <tr>
-      <td rowspan="4">🐧 Linux</td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
      <td>amd64</td>
      <td><a href="https://flathub.org/apps/com.gopeed.Gopeed">📥</a></td>
@@ -52,20 +61,40 @@ Truy cập ✈ [Trang web chính thức](https://gopeed.com) | 📖 [Tài liệu
      <td><a href="https://snapcraft.io/gopeed">📥</a></td>
    </tr>
    <tr>
-      <td><code>DEB</code></td>
+      <td rowspan="2"><code>DEB</code></td>
      <td>amd64</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.deb">📥</a></td>
    </tr>
    <tr>
-      <td><code>AppImage</code></td>
-      <td>amd64</td>
-      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-x86_64.AppImage">📥</a></td>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.deb">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="2"><code>AppImage</code></td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -127,7 +156,6 @@ Truy cập ✈ [Trang web chính thức](https://gopeed.com) | 📖 [Tài liệu
    </tr>
  </tbody>
 </table>
-
 Thêm thông tin về cài đặt, vui lòng tham khảo [Cài đặt](https://docs.gopeed.com/install.html)

 ### 🛠️ Công cụ lệnh
@@ -138,6 +166,12 @@ Sử dụng `go install`:
 go install github.com/GopeedLab/gopeed/cmd/gopeed@latest
 ```

+## 📱 WeChat Official Account
+
+Theo dõi tài khoản chính thức để nhận các cập nhật và tin tức mới nhất.
+
+<img src="_docs/img/weixin.png" width="200" />
+
 ## 💝 Quyên góp

 Nếu bạn thích dự án này, xin vui lòng xem xét [quyên góp](https://docs.gopeed.com/donate.html) để hỗ trợ phát triển dự án này, cảm ơn bạn!
@@ -154,8 +188,8 @@ Dự án này được chia thành hai phần, phần giao diện sử dụng `f

 ### 🌍 Environment

-1. Golang 1.23+
-2. Flutter 3.24+
+1. Golang 1.24+
+2. Flutter 3.38+

 ### 📋 Clone

@@ -5,6 +5,7 @@
 [![Release](https://img.shields.io/github/release/GopeedLab/gopeed.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Download](https://img.shields.io/github/downloads/GopeedLab/gopeed/total.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Donate](https://img.shields.io/badge/%24-donate-ff69b4.svg)](https://docs.gopeed.com/zh/donate.html)
+[![WeChat](https://img.shields.io/badge/%E5%BE%AE%E4%BF%A1%E5%85%AC%E4%BC%97%E5%8F%B7-07C160?logo=wechat&logoColor=white)](https://raw.githubusercontent.com/GopeedLab/gopeed/main/_docs/img/weixin.png)
 [![Discord](https://img.shields.io/discord/1037992631881449472?label=Discord&logo=discord&style=social)](https://discord.gg/ZUJqJrwCGB)

 <a href="https://trendshift.io/repositories/7953" target="_blank"><img src="https://trendshift.io/api/badge/repositories/7953" alt="GopeedLab%2Fgopeed | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
@@ -35,13 +36,21 @@ Gopeed（全称 Go Speed），直译过来中文名叫做`够快下载器`（不
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
    <tr>
-      <td rowspan="4">🐧 Linux</td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
      <td>amd64</td>
      <td><a href="https://flathub.org/apps/com.gopeed.Gopeed">📥</a></td>
@@ -52,20 +61,40 @@ Gopeed（全称 Go Speed），直译过来中文名叫做`够快下载器`（不
      <td><a href="https://snapcraft.io/gopeed">📥</a></td>
    </tr>
    <tr>
-      <td><code>DEB</code></td>
+      <td rowspan="2"><code>DEB</code></td>
      <td>amd64</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.deb">📥</a></td>
    </tr>
    <tr>
-      <td><code>AppImage</code></td>
-      <td>amd64</td>
-      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-x86_64.AppImage">📥</a></td>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.deb">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="2"><code>AppImage</code></td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -127,7 +156,6 @@ Gopeed（全称 Go Speed），直译过来中文名叫做`够快下载器`（不
    </tr>
  </tbody>
 </table>
-
 更多关于安装的内容请参考[安装文档](https://docs.gopeed.com/zh/install.html)

 ### 🛠️ 命令行工具
@@ -142,6 +170,12 @@ go install github.com/GopeedLab/gopeed/cmd/gopeed@latest

 Gopeed 还提供了浏览器扩展用于接管浏览器下载，支持 Chrome、Edge、Firefox 等浏览器，具体请参考：[https://github.com/GopeedLab/browser-extension](https://github.com/GopeedLab/browser-extension)

+## 📱 微信公众号
+
+关注公众号获取项目最新动态和资讯。
+
+<img src="_docs/img/weixin.png" width="200" />
+
 ## 💝 赞助

 如果觉得项目对你有帮助，请考虑[赞助](https://docs.gopeed.com/zh/donate)以支持这个项目的发展，非常感谢！
@@ -158,8 +192,8 @@ Gopeed 还提供了浏览器扩展用于接管浏览器下载，支持 Chrome、

 ### 🌍 环境要求

-1. Golang 1.23+
-2. Flutter 3.24+
+1. Golang 1.24+
+2. Flutter 3.38+

 ### 📋 克隆项目

@@ -5,6 +5,7 @@
 [![Release](https://img.shields.io/github/release/GopeedLab/gopeed.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Download](https://img.shields.io/github/downloads/GopeedLab/gopeed/total.svg)](https://github.com/GopeedLab/gopeed/releases)
 [![Donate](https://img.shields.io/badge/%24-donate-ff69b4.svg)](https://docs.gopeed.com/donate.html)
+[![WeChat](https://img.shields.io/badge/%E5%BE%AE%E4%BF%A1%E5%85%AC%E4%BC%97%E5%8F%B7-07C160?logo=wechat&logoColor=white)](https://raw.githubusercontent.com/GopeedLab/gopeed/main/_docs/img/weixin.png)
 [![Discord](https://img.shields.io/discord/1037992631881449472?label=Discord&logo=discord&style=social)](https://discord.gg/ZUJqJrwCGB)

 <a href="https://trendshift.io/repositories/7953" target="_blank"><img src="https://trendshift.io/api/badge/repositories/7953" alt="GopeedLab%2Fgopeed | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a>
@@ -35,13 +36,21 @@ Gopeed（全稱 Go Speed），是一款使用`Golang`+`Flutter`編寫的高速
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
    <tr>
-      <td rowspan="4">🐧 Linux</td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
      <td>amd64</td>
      <td><a href="https://flathub.org/apps/com.gopeed.Gopeed">📥</a></td>
@@ -52,20 +61,40 @@ Gopeed（全稱 Go Speed），是一款使用`Golang`+`Flutter`編寫的高速
      <td><a href="https://snapcraft.io/gopeed">📥</a></td>
    </tr>
    <tr>
-      <td><code>DEB</code></td>
+      <td rowspan="2"><code>DEB</code></td>
      <td>amd64</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.deb">📥</a></td>
    </tr>
    <tr>
-      <td><code>AppImage</code></td>
-      <td>amd64</td>
-      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-x86_64.AppImage">📥</a></td>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.deb">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="2"><code>AppImage</code></td>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-amd64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
+    </tr>
+    <tr>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -138,6 +167,12 @@ Gopeed（全稱 Go Speed），是一款使用`Golang`+`Flutter`編寫的高速
 go install github.com/GopeedLab/gopeed/cmd/gopeed@latest
 ```

+## 📱 微信公眾號
+
+關注公眾號獲取項目最新動態和資訊。
+
+<img src="_docs/img/weixin.png" width="200" />
+
 ## 💝 贊助

 如果你認為該項目對你有所幫助，請考慮[贊助](https://docs.gopeed.com/zh/donate)以支持該項目的持續發展，謝謝！
@@ -154,8 +189,8 @@ go install github.com/GopeedLab/gopeed/cmd/gopeed@latest

 ### 🌍 開發環境

-1. Golang 1.23+
-2. Flutter 3.24+
+1. Golang 1.24+
+2. Flutter 3.38+

 ### 📋 克隆項目

@@ -2,6 +2,7 @@ package main

 import (
 	"fmt"
+
 	"github.com/GopeedLab/gopeed/pkg/base"
 	"github.com/GopeedLab/gopeed/pkg/download"
 	"github.com/GopeedLab/gopeed/pkg/protocol/http"
@@ -2,13 +2,14 @@ package main

 import (
 	"fmt"
+	"strings"
+	"sync"
+
 	"github.com/GopeedLab/gopeed/internal/fetcher"
 	"github.com/GopeedLab/gopeed/pkg/base"
 	"github.com/GopeedLab/gopeed/pkg/download"
 	"github.com/GopeedLab/gopeed/pkg/protocol/http"
 	"github.com/GopeedLab/gopeed/pkg/util"
-	"strings"
-	"sync"
 )

 const progressWidth = 20
@@ -0,0 +1,19 @@
+//go:build !windows
+// +build !windows
+
+package main
+
+import (
+	"net"
+	"os"
+	"path/filepath"
+)
+
+func Dial() (net.Conn, error) {
+	// Get binary path
+	exe, err := os.Executable()
+	if err != nil {
+		return nil, err
+	}
+	return net.Dial("unix", filepath.Join(filepath.Dir(exe), "gopeed_host.sock"))
+}
@@ -0,0 +1,11 @@
+package main
+
+import (
+	"net"
+
+	"github.com/Microsoft/go-winio"
+)
+
+func Dial() (net.Conn, error) {
+	return winio.DialPipe(`\\.\pipe\gopeed_host`, nil)
+}
@@ -1,22 +1,24 @@
 package main

 import (
+	"bytes"
+	"context"
 	"encoding/binary"
 	"encoding/json"
 	"errors"
 	"fmt"
 	"io"
+	"net"
+	"net/http"
 	"os"
-	"strings"
+	"time"

 	"github.com/pkg/browser"
-	"github.com/shirou/gopsutil/v4/process"
 )

-const identifier = "gopeed"
-
 type Message struct {
 	Method string          `json:"method"`
+	Meta   map[string]any  `json:"meta"`
 	Params json.RawMessage `json:"params"`
 }

@@ -26,42 +28,127 @@ type Response struct {
 	Message string `json:"message,omitempty"`
 }

-var apiMap = map[string]func(params json.RawMessage) (data any, err error){
-	"ping": func(params json.RawMessage) (data any, err error) {
-		processes, err := process.Processes()
-		if err != nil {
-			return false, err
-		}
+func check() (data bool, err error) {
+	conn, err := Dial()
+	if err != nil {
+		return false, err
+	}
+	defer conn.Close()
+	return true, nil
+}

-		for _, p := range processes {
-			name, err := p.Name()
-			if err != nil {
-				continue
-			}
+func wakeup(hidden bool) error {
+	running, _ := check()
+	if running {
+		return nil
+	}

-			if strings.Contains(strings.ToLower(name), strings.ToLower(identifier)) {
-				return true, nil
-			}
+	uri := "gopeed:"
+	if hidden {
+		uri = uri + "?hidden=true"
+	}
+	if err := browser.OpenURL(uri); err != nil {
+		return err
+	}
+
+	for i := 0; i < 10; i++ {
+		if ok, _ := check(); ok {
+			return nil
 		}
-		return false, nil
+		time.Sleep(1 * time.Second)
+	}
+	return fmt.Errorf("start gopeed failed")
+}
+
+// postToFlutter sends a POST request to Flutter RPC server
+func postToFlutter(path string, body []byte, headers map[string]string, timeout time.Duration) (*http.Response, error) {
+	client := &http.Client{
+		Transport: &http.Transport{
+			DialContext: func(ctx context.Context, network, addr string) (net.Conn, error) {
+				return Dial()
+			},
+		},
+		Timeout: timeout,
+	}
+	req, err := http.NewRequest("POST", "http://127.0.0.1"+path, bytes.NewBuffer(body))
+	if err != nil {
+		return nil, err
+	}
+	req.Header.Set("Content-Type", "application/json")
+	for k, v := range headers {
+		req.Header.Set(k, v)
+	}
+	return client.Do(req)
+}
+
+var apiMap = map[string]func(message *Message) (data any, err error){
+	"ping": func(message *Message) (data any, err error) {
+		return check()
 	},
-	"create": func(params json.RawMessage) (data any, err error) {
-		var strParams string
-		if err = json.Unmarshal(params, &strParams); err != nil {
-			return
+	"wakeup": func(message *Message) (data any, err error) {
+		silent := false
+		if v, ok := message.Meta["silent"]; ok {
+			silent, _ = v.(bool)
 		}
-		err = browser.OpenURL(fmt.Sprintf("%s:///create?params=%s", identifier, strParams))
+		err = wakeup(silent)
 		return
 	},
+	"create": func(message *Message) (data any, err error) {
+		buf, err := message.Params.MarshalJSON()
+		if err != nil {
+			return
+		}
+
+		silent := false
+		if v, ok := message.Meta["silent"]; ok {
+			silent, _ = v.(bool)
+		}
+
+		if err := wakeup(silent); err != nil {
+			return nil, err
+		}
+
+		headers := make(map[string]string)
+		if message.Meta != nil {
+			metaJson, _ := json.Marshal(message.Meta)
+			headers["X-Gopeed-Host-Meta"] = string(metaJson)
+		}
+		_, err = postToFlutter("/create", buf, headers, 10*time.Second)
+		return
+	},
+	"forward": func(message *Message) (data any, err error) {
+		buf, err := message.Params.MarshalJSON()
+		if err != nil {
+			return
+		}
+
+		resp, err := postToFlutter("/forward", buf, nil, 60*time.Second)
+		if err != nil {
+			return
+		}
+		defer resp.Body.Close()
+
+		respBody, err := io.ReadAll(resp.Body)
+		if err != nil {
+			return nil, err
+		}
+
+		var respData map[string]json.RawMessage
+		if err := json.Unmarshal(respBody, &respData); err != nil {
+			return nil, err
+		}
+		return respData, nil
+	},
 }

+// go build -ldflags="-s -w" -o ui/flutter/assets/exec/ github.com/GopeedLab/gopeed/cmd/host
+
 func main() {
 	for {
 		// Read message length (first 4 bytes)
 		var length uint32
 		if err := binary.Read(os.Stdin, binary.NativeEndian, &length); err != nil {
 			if err == io.EOF {
-				// Connection closed by Chrome
 				return
 			}
 			sendError("Failed to read message length: " + err.Error())
@@ -86,7 +173,7 @@ func main() {
 		var data any
 		var err error
 		if handler, ok := apiMap[message.Method]; ok {
-			data, err = handler(message.Params)
+			data, err = handler(&message)
 		} else {
 			err = errors.New("Unknown method: " + message.Method)
 		}
@@ -0,0 +1,115 @@
+package main
+
+import (
+	"flag"
+	"fmt"
+	"log"
+	"os"
+	"syscall"
+	"time"
+
+	"github.com/pkg/browser"
+	"github.com/pkg/errors"
+)
+
+// go build -ldflags="-s -w" -o ui/flutter/assets/exec/ github.com/GopeedLab/gopeed/cmd/updater
+
+func main() {
+	pid := flag.Int("pid", 0, "PID of the process to update")
+	updateChannel := flag.String("channel", "", "Update channel")
+	packagePath := flag.String("asset", "", "Path to the package asset")
+	exeDir := flag.String("exeDir", "", "Directory of the entry executable")
+	logPath := flag.String("log", "", "Log file path")
+	flag.Parse()
+
+	if *pid == 0 {
+		log.Println("Invalid PID")
+		os.Exit(1)
+	}
+	if *updateChannel == "" {
+		log.Println("Invalid update channel")
+		os.Exit(1)
+	}
+
+	if *logPath != "" {
+		logFile, err := os.OpenFile(*logPath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0666)
+		if err == nil {
+			defer logFile.Close()
+			log.SetOutput(logFile)
+		}
+	}
+
+	var (
+		restart bool
+		err     error
+	)
+	if restart, err = update(*pid, *updateChannel, *packagePath, *exeDir); err != nil {
+		log.Printf("Update failed: %v\n", err)
+		os.Exit(1)
+	}
+
+	// Restart the application
+	if restart {
+		browser.OpenURL("gopeed:///")
+	}
+
+	// Delete package asset
+	if *packagePath != "" {
+		os.Remove(*packagePath)
+	}
+
+	os.Exit(0)
+}
+
+func update(pid int, updateChannel, packagePath, exeDir string) (restart bool, err error) {
+	killSignalChan := make(chan any, 1)
+
+	go func() {
+		<-killSignalChan
+
+		if err = killProcess(pid); err != nil {
+			log.Printf("Failed to kill process: %v\n", err)
+		}
+
+		if err = waitForProcessExit(pid); err != nil {
+			log.Printf("Failed to wait for process exit: %v\n", err)
+		}
+	}()
+
+	log.Printf("Updating process updateChannel=%s packagePath=%s exeDir=%s\n", updateChannel, packagePath, exeDir)
+	if restart, err = install(killSignalChan, updateChannel, packagePath, exeDir); err != nil {
+		return false, errors.Wrap(err, "failed to install package")
+	}
+
+	return
+}
+
+func waitForProcessExit(pid int) error {
+	deadline := time.Now().Add(10 * time.Second)
+	for time.Now().Before(deadline) {
+		process, err := os.FindProcess(pid)
+		if err != nil {
+			// On some systems, error is returned if process doesn't exist
+			return nil
+		}
+
+		// Send null signal to test if process exists
+		err = process.Signal(syscall.Signal(0))
+		if err != nil {
+			// If error occurs, the process no longer exists
+			return nil
+		}
+
+		time.Sleep(100 * time.Millisecond)
+	}
+	return fmt.Errorf("process %d still running after timeout", pid)
+}
+
+func killProcess(pid int) error {
+	process, err := os.FindProcess(pid)
+	if err != nil {
+		return err
+	}
+
+	return process.Kill()
+}
@@ -0,0 +1,72 @@
+//go:build darwin
+
+package main
+
+import (
+	"fmt"
+	"os/exec"
+	"path/filepath"
+	"strings"
+)
+
+func install(killSignalChan chan<- any, updateChannel, packagePath, destDir string) (bool, error) {
+	return true, installByDmg(killSignalChan, packagePath, destDir)
+}
+
+// installByDmg handles macOS dmg package installation
+func installByDmg(killSignalChan chan<- any, packagePath, destDir string) error {
+	// /Applications/Gopeed.app/Contents/MacOS -> /Applications
+	appPath := getParentDir(getParentDir(getParentDir(destDir)))
+	output, err := exec.Command("hdiutil", "attach", packagePath, "-nobrowse").Output()
+	if err != nil {
+		return err
+	}
+
+	mountPoint := ""
+	for _, line := range strings.Split(string(output), "\n") {
+		if strings.Contains(line, "/Volumes/") {
+			// Find the /Volumes/ path in the line
+			// hdiutil output format: /dev/disk4s1  Apple_HFS  /Volumes/Gopeed
+			// or with sequence number: /dev/disk4s1  Apple_HFS  /Volumes/Gopeed 1
+			idx := strings.Index(line, "/Volumes/")
+			if idx != -1 {
+				// Extract everything from /Volumes/ onwards and trim whitespace
+				mountPoint = strings.TrimSpace(line[idx:])
+				break
+			}
+		}
+	}
+
+	if mountPoint == "" {
+		return fmt.Errorf("failed to get mount point from hdiutil output: %s", string(output))
+	}
+
+	// Detach the mounted DMG
+	defer exec.Command("hdiutil", "detach", mountPoint, "-quiet").Run()
+
+	matches, err := filepath.Glob(filepath.Join(mountPoint, "*.app"))
+	if err != nil {
+		return err
+	}
+	if len(matches) == 0 {
+		return fmt.Errorf("no .app found in dmg, mountPoint: %s", mountPoint)
+	}
+
+	killSignalChan <- nil
+
+	// Copy the new app to the destination
+	// cp -Rf /Volumes/GoPeed/GoPeed.app /Applications
+	if err := exec.Command("cp", "-Rf", matches[0], appPath).Run(); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// Get parent directory safely, handling trailing separators
+func getParentDir(path string) string {
+	// Remove trailing separators if they exist
+	path = strings.TrimRight(path, string(filepath.Separator))
+	// Now get the parent directory
+	return filepath.Dir(path)
+}
@@ -0,0 +1,72 @@
+//go:build linux
+
+package main
+
+import (
+	"fmt"
+	"os/exec"
+)
+
+func install(killSignalChan chan<- any, updateChannel, packagePath, destDir string) (bool, error) {
+	killSignalChan <- nil
+	switch updateChannel {
+	case "linuxDeb":
+		return true, installByDeb(packagePath)
+	case "linuxFlathub":
+		return true, installByFlathub()
+	case "linuxSnap":
+		return true, installBySnap()
+	default:
+		return false, fmt.Errorf("unsupported update channel for Linux: %s", updateChannel)
+	}
+}
+
+// executeInTerminal tries to execute a command in one of several common terminal emulators
+func executeInTerminal(command string) error {
+	terminals := []string{
+		"gnome-terminal", // GNOME
+		"konsole",        // KDE
+		"xfce4-terminal", // XFCE
+		"xterm",          // X11
+	}
+
+	command = fmt.Sprintf(`echo "Starting update..." && echo "[CMD] %s" && %s`, command, command)
+
+	for _, term := range terminals {
+		if _, err := exec.LookPath(term); err == nil {
+			var cmd *exec.Cmd
+			switch term {
+			case "gnome-terminal", "xfce4-terminal":
+				cmd = exec.Command(term, "--", "bash", "-c", command)
+			case "konsole":
+				cmd = exec.Command(term, "-e", "bash", "-c", command)
+			case "xterm":
+				cmd = exec.Command(term, "-e", command)
+			}
+
+			if err := cmd.Start(); err == nil {
+				return nil
+			}
+		}
+	}
+
+	return fmt.Errorf("no suitable terminal emulator found. Please install gnome-terminal, konsole, xfce4-terminal or xterm")
+}
+
+// installByDeb installs the .deb package
+func installByDeb(packagePath string) error {
+	command := fmt.Sprintf(`sudo dpkg -i "%s"`, packagePath)
+	return executeInTerminal(command)
+}
+
+// installByFlathub updates the application via Flathub
+func installByFlathub() error {
+	command := "flatpak update com.gopeed.Gopeed -y"
+	return executeInTerminal(command)
+}
+
+// installBySnap updates the application via Snap
+func installBySnap() error {
+	command := "sudo snap refresh gopeed"
+	return executeInTerminal(command)
+}
@@ -0,0 +1,134 @@
+//go:build windows
+
+package main
+
+import (
+	"archive/zip"
+	"fmt"
+	"io"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strings"
+)
+
+func install(killSignalChan chan<- any, updateChannel, packagePath, destDir string) (bool, error) {
+	switch updateChannel {
+	case "windowsInstaller":
+		return false, installByInstaller(killSignalChan, packagePath, destDir)
+	default:
+		return true, installByPortable(killSignalChan, packagePath, destDir)
+	}
+}
+
+// installByInstaller extracts the installer from the zip file and runs it
+func installByInstaller(killSignalChan chan<- any, packagePath, destDir string) error {
+	// Create a temp directory for extraction
+	tempDir, err := os.MkdirTemp("", "gopeed_update")
+	if err != nil {
+		return err
+	}
+	defer os.RemoveAll(tempDir)
+
+	// Extract the zip file
+	reader, err := zip.OpenReader(packagePath)
+	if err != nil {
+		return err
+	}
+	defer reader.Close()
+
+	// Find the installer file
+	var installerPath string
+	for _, file := range reader.File {
+		if file.FileInfo().IsDir() {
+			continue
+		}
+
+		// Extract file
+		path := filepath.Join(tempDir, file.Name)
+
+		if err := os.MkdirAll(filepath.Dir(path), os.ModePerm); err != nil {
+			return err
+		}
+
+		dstFile, err := os.OpenFile(path, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, file.Mode())
+		if err != nil {
+			return err
+		}
+
+		srcFile, err := file.Open()
+		if err != nil {
+			dstFile.Close()
+			return err
+		}
+
+		_, err = io.Copy(dstFile, srcFile)
+		srcFile.Close()
+		dstFile.Close()
+		if err != nil {
+			return err
+		}
+
+		// If this is likely an installer (.exe, .msi), save its path
+		ext := strings.ToLower(filepath.Ext(file.Name))
+		if ext == ".exe" || ext == ".msi" {
+			installerPath = path
+		}
+	}
+
+	if installerPath == "" {
+		return fmt.Errorf("no installer found in the update package")
+	}
+
+	// Run the installer
+	cmd := exec.Command(installerPath)
+	if err := cmd.Start(); err != nil {
+		return err
+	}
+
+	killSignalChan <- nil
+	return nil
+}
+
+// installByPortable extracts the portable version to the destination directory
+func installByPortable(killSignalChan chan<- any, packagePath, destDir string) error {
+	killSignalChan <- nil
+
+	reader, err := zip.OpenReader(packagePath)
+	if err != nil {
+		return err
+	}
+	defer reader.Close()
+
+	for _, file := range reader.File {
+		path := filepath.Join(destDir, file.Name)
+
+		if file.FileInfo().IsDir() {
+			os.MkdirAll(path, file.Mode())
+			continue
+		}
+
+		if err := os.MkdirAll(filepath.Dir(path), os.ModePerm); err != nil {
+			return err
+		}
+
+		dstFile, err := os.OpenFile(path, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, file.Mode())
+		if err != nil {
+			return err
+		}
+
+		srcFile, err := file.Open()
+		if err != nil {
+			dstFile.Close()
+			return err
+		}
+
+		_, err = io.Copy(dstFile, srcFile)
+		srcFile.Close()
+		dstFile.Close()
+		if err != nil {
+			return err
+		}
+	}
+	return nil
+}
@@ -3,19 +3,23 @@ package main
 import (
 	"encoding/json"
 	"flag"
-	"fmt"
-	"github.com/GopeedLab/gopeed/pkg/base"
 	"os"
 	"path/filepath"
+	"reflect"
+	"strconv"
+	"strings"
+
+	"github.com/GopeedLab/gopeed/pkg/base"
 )

 type args struct {
-	Address    *string `json:"address"`
-	Port       *int    `json:"port"`
-	Username   *string `json:"username"`
-	Password   *string `json:"password"`
-	ApiToken   *string `json:"apiToken"`
-	StorageDir *string `json:"storageDir"`
+	Address           *string  `json:"address"`
+	Port              *int     `json:"port"`
+	Username          *string  `json:"username"`
+	Password          *string  `json:"password"`
+	ApiToken          *string  `json:"apiToken"`
+	StorageDir        *string  `json:"storageDir"`
+	WhiteDownloadDirs []string `json:"whiteDownloadDirs"`
 	// DownloadConfig when the first time to start the server, it will be configured as initial value
 	DownloadConfig *base.DownloaderStoreConfig `json:"downloadConfig"`

@@ -23,62 +27,173 @@ type args struct {
 }

 func parse() *args {
-	var cliArgs args
-	cliArgs.Address = flag.String("A", "0.0.0.0", "Bind Address")
-	cliArgs.Port = flag.Int("P", 9999, "Bind Port")
-	cliArgs.Username = flag.String("u", "gopeed", "HTTP Basic Auth Username")
-	cliArgs.Password = flag.String("p", "", "HTTP Basic Auth Pwd")
-	cliArgs.ApiToken = flag.String("T", "", "API token, it must be configured when using HTTP API in the case of enabling basic authentication")
-	cliArgs.StorageDir = flag.String("d", "", "Storage directory")
-	cliArgs.configPath = flag.String("c", "./config.json", "Config file path")
+	cfg := &args{}
+
+	cliConfig := loadCliArgs()
+	loadConfigFile(cfg, *cliConfig.configPath)
+	loadEnvVars(cfg)
+	// override with non-default command line arguments
+	overrideWithCliArgs(cfg, cliConfig)
+	// set default values
+	setDefaults(cfg, cliConfig)
+	return cfg
+}
+
+// loadCliArgs parses command line arguments and returns initial config
+func loadCliArgs() *args {
+	cfg := &args{}
+	cfg.Address = flag.String("A", "0.0.0.0", "Bind Address")
+	cfg.Port = flag.Int("P", 9999, "Bind Port")
+	cfg.Username = flag.String("u", "gopeed", "Web Authentication Username")
+	cfg.Password = flag.String("p", "", "Web Authentication Password, if no password is set, web authentication will not be enabled")
+	cfg.ApiToken = flag.String("T", "", "API token, it must be configured when using HTTP API in the case of enabling web authentication")
+	cfg.StorageDir = flag.String("d", "", "Storage directory")
+	whiteDownloadDirs := flag.String("w", "", "White download directories, comma-separated")
+	cfg.configPath = flag.String("c", "./config.json", "Config file path")
 	flag.Parse()

-	// args priority: config file > cli args
-	cfgArgs := loadConfig(*cliArgs.configPath)
-	if cfgArgs.Address == nil {
-		cfgArgs.Address = cliArgs.Address
+	// Parse white download directories from comma-separated string
+	if whiteDownloadDirs != nil && *whiteDownloadDirs != "" {
+		dirs := strings.Split(*whiteDownloadDirs, ",")
+		for i := range dirs {
+			dirs[i] = strings.TrimSpace(dirs[i])
+		}
+		cfg.WhiteDownloadDirs = dirs
 	}
-	if cfgArgs.Port == nil {
-		cfgArgs.Port = cliArgs.Port
-	}
-	if cfgArgs.Username == nil {
-		cfgArgs.Username = cliArgs.Username
-	}
-	if cfgArgs.Password == nil {
-		cfgArgs.Password = cliArgs.Password
-	}
-	if cfgArgs.ApiToken == nil {
-		cfgArgs.ApiToken = cliArgs.ApiToken
-	}
-	if cfgArgs.StorageDir == nil {
-		cfgArgs.StorageDir = cliArgs.StorageDir
-	}
-	return cfgArgs
+
+	return cfg
 }

-func loadConfig(path string) *args {
-	var args args
+// overrideWithCliArgs overrides config with non-empty command line arguments
+func overrideWithCliArgs(cfg *args, cliConfig *args) {
+	flag.Visit(func(f *flag.Flag) {
+		switch f.Name {
+		case "A":
+			cfg.Address = cliConfig.Address
+		case "P":
+			cfg.Port = cliConfig.Port
+		case "u":
+			cfg.Username = cliConfig.Username
+		case "p":
+			cfg.Password = cliConfig.Password
+		case "T":
+			cfg.ApiToken = cliConfig.ApiToken
+		case "d":
+			cfg.StorageDir = cliConfig.StorageDir
+		case "w":
+			cfg.WhiteDownloadDirs = cliConfig.WhiteDownloadDirs
+		case "c":
+			cfg.configPath = cliConfig.configPath
+		}
+	})
+}

-	if !filepath.IsAbs(path) {
+// setDefaults sets default values for any unset configuration fields
+func setDefaults(cfg *args, cliConfig *args) {
+	if cfg.Address == nil {
+		cfg.Address = cliConfig.Address
+	}
+	if cfg.Port == nil {
+		cfg.Port = cliConfig.Port
+	}
+	if cfg.Username == nil {
+		cfg.Username = cliConfig.Username
+	}
+	if cfg.Password == nil {
+		cfg.Password = cliConfig.Password
+	}
+	if cfg.ApiToken == nil {
+		cfg.ApiToken = cliConfig.ApiToken
+	}
+	if cfg.StorageDir == nil {
+		cfg.StorageDir = cliConfig.StorageDir
+	}
+}
+
+// loadConfigFile loads configuration from file
+func loadConfigFile(cfg *args, configPath string) {
+	if !filepath.IsAbs(configPath) {
 		dir, err := os.Getwd()
 		if err != nil {
-			fmt.Println("config dir get failed, reason:" + err.Error())
-			return &args
+			return
 		}
-		path = filepath.Join(dir, path)
+		configPath = filepath.Join(dir, configPath)
 	}
-	file, err := os.ReadFile(path)
+
+	file, err := os.ReadFile(configPath)
 	if err != nil {
 		if os.IsNotExist(err) {
-			return &args
+			return
 		}
-		fmt.Println("config file read failed, reason:" + err.Error())
-		return &args
+		return
 	}
-	if err = json.Unmarshal(file, &args); err != nil {
-		fmt.Println("config file parse failed, reason:" + err.Error())
-		return &args
+
+	if err = json.Unmarshal(file, cfg); err != nil {
+		return
+	}
+}
+
+// loadEnvVars loads configuration from environment variables with prefix GOPEED_
+func loadEnvVars(cfg *args) {
+	v := reflect.ValueOf(cfg).Elem()
+	t := reflect.TypeOf(cfg).Elem()
+
+	for i := 0; i < v.NumField(); i++ {
+		field := v.Field(i)
+		fieldType := t.Field(i)
+
+		// Get json tag as environment variable suffix
+		jsonTag := fieldType.Tag.Get("json")
+		if jsonTag == "" || jsonTag == "-" {
+			continue
+		}
+
+		// Remove options like omitempty
+		if commaIdx := strings.Index(jsonTag, ","); commaIdx != -1 {
+			jsonTag = jsonTag[:commaIdx]
+		}
+
+		// Convert to uppercase and add GOPEED_ prefix
+		envKey := "GOPEED_" + strings.ToUpper(jsonTag)
+		envValue := os.Getenv(envKey)
+
+		if envValue == "" {
+			continue
+		}
+
+		// Set value based on field type
+		if field.Kind() == reflect.Ptr {
+			if field.IsNil() {
+				// Create new pointer instance
+				newVal := reflect.New(field.Type().Elem())
+				field.Set(newVal)
+			}
+
+			switch field.Type().Elem().Kind() {
+			case reflect.String:
+				field.Elem().SetString(envValue)
+			case reflect.Int:
+				if intVal, err := strconv.Atoi(envValue); err == nil {
+					field.Elem().SetInt(int64(intVal))
+				}
+			default:
+				// For complex types like DownloadConfig, try JSON unmarshaling
+				if field.Type().Elem() == reflect.TypeOf(base.DownloaderStoreConfig{}) {
+					var config base.DownloaderStoreConfig
+					if err := json.Unmarshal([]byte(envValue), &config); err == nil {
+						field.Set(reflect.ValueOf(&config))
+					}
+				}
+			}
+		} else if field.Kind() == reflect.Slice {
+			// Handle non-pointer slice types (like []string for WhiteDownloadDirs)
+			if field.Type().Elem().Kind() == reflect.String {
+				dirs := strings.Split(envValue, ",")
+				for i := range dirs {
+					dirs[i] = strings.TrimSpace(dirs[i])
+				}
+				field.Set(reflect.ValueOf(dirs))
+			}
+		}
 	}
-	fmt.Printf("config file loaded: %s\n", path)
-	return &args
 }
@@ -6,11 +6,12 @@ package main
 import (
 	"embed"
 	"fmt"
-	"github.com/GopeedLab/gopeed/cmd"
-	"github.com/GopeedLab/gopeed/pkg/rest/model"
 	"io/fs"
 	"os"
 	"path/filepath"
+
+	"github.com/GopeedLab/gopeed/cmd"
+	"github.com/GopeedLab/gopeed/pkg/rest/model"
 )

 //go:embed dist/*
@@ -23,36 +24,37 @@ func main() {
 	}

 	args := parse()
-	var webBasicAuth *model.WebBasicAuth
+	var webAuth *model.WebAuth
 	if isNotBlank(args.Username) && isNotBlank(args.Password) {
-		webBasicAuth = &model.WebBasicAuth{
+		webAuth = &model.WebAuth{
 			Username: *args.Username,
 			Password: *args.Password,
 		}
 	}

-	var dir string
+	var storageDir string
 	if args.StorageDir != nil && *args.StorageDir != "" {
-		dir = *args.StorageDir
+		storageDir = *args.StorageDir
 	} else {
 		exe, err := os.Executable()
 		if err != nil {
 			panic(err)
 		}
-		dir = filepath.Dir(exe)
+		storageDir = filepath.Join(filepath.Dir(exe), "storage")
 	}

 	cfg := &model.StartConfig{
-		Network:        "tcp",
-		Address:        fmt.Sprintf("%s:%d", *args.Address, *args.Port),
-		Storage:        model.StorageBolt,
-		StorageDir:     filepath.Join(dir, "storage"),
-		ApiToken:       *args.ApiToken,
-		DownloadConfig: args.DownloadConfig,
-		ProductionMode: true,
-		WebEnable:      true,
-		WebFS:          sub,
-		WebBasicAuth:   webBasicAuth,
+		Network:           "tcp",
+		Address:           fmt.Sprintf("%s:%d", *args.Address, *args.Port),
+		Storage:           model.StorageBolt,
+		StorageDir:        storageDir,
+		WhiteDownloadDirs: args.WhiteDownloadDirs,
+		ApiToken:          *args.ApiToken,
+		DownloadConfig:    args.DownloadConfig,
+		ProductionMode:    true,
+		WebEnable:         true,
+		WebFS:             sub,
+		WebAuth:           webAuth,
 	}
 	cmd.Start(cfg)
 }
@@ -1,139 +1,164 @@
 module github.com/GopeedLab/gopeed

-go 1.23.0
+go 1.24.9

-toolchain go1.23.1
+toolchain go1.24.11

 require (
-	github.com/anacrolix/missinggo/v2 v2.8.0
-	github.com/anacrolix/torrent v1.57.2-0.20241017235801-4d8437a05621
+	github.com/anacrolix/torrent v1.60.1-0.20251217073903-486bcbe758e0
 	github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5
-	github.com/dop251/goja v0.0.0-20240919115326-6c7d1df7ff05
+	github.com/bodgit/sevenzip v1.6.1
+	github.com/dop251/goja v0.0.0-20260106131823-651366fbe6e3
 	github.com/dop251/goja_nodejs v0.0.0-20240728170619-29b559befffc
 	github.com/go-git/go-git/v5 v5.8.1
 	github.com/gorilla/handlers v1.5.1
 	github.com/gorilla/mux v1.8.0
+	github.com/imroc/req/v3 v3.52.2
 	github.com/matoous/go-nanoid/v2 v2.0.0
 	github.com/mattn/go-ieproxy v0.0.12
+	github.com/mholt/archives v0.1.5
 	github.com/pkg/errors v0.9.1
 	github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529
 	github.com/rs/zerolog v1.31.0
 	github.com/xiaoqidun/setft v0.0.0-20220310121541-be86327699ad
-	go.etcd.io/bbolt v1.3.11
-	golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f
-	golang.org/x/sync v0.9.0
+	go.etcd.io/bbolt v1.4.3
+	golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93
 )

 require (
-	github.com/ebitengine/purego v0.8.1 // indirect
-	github.com/go-ole/go-ole v1.2.6 // indirect
-	github.com/lufia/plan9stats v0.0.0-20220913051719-115f729f3c8c // indirect
-	github.com/power-devops/perfstat v0.0.0-20220216144756-c35f1ee13d7c // indirect
-	github.com/tklauser/go-sysconf v0.3.12 // indirect
-	github.com/tklauser/numcpus v0.6.1 // indirect
-	github.com/yusufpapurcu/wmi v1.2.4 // indirect
+	github.com/STARRY-S/zip v0.2.3 // indirect
+	github.com/anacrolix/btree v0.1.1 // indirect
+	github.com/anacrolix/missinggo/v2 v2.10.0 // indirect
+	github.com/andybalholm/brotli v1.2.0 // indirect
+	github.com/bodgit/plumbing v1.3.0 // indirect
+	github.com/bodgit/windows v1.0.1 // indirect
+	github.com/cespare/xxhash/v2 v2.3.0 // indirect
+	github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707 // indirect
+	github.com/felixge/fgprof v0.9.5 // indirect
+	github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
+	github.com/hashicorp/errwrap v1.1.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
+	github.com/icholy/digest v1.1.0 // indirect
+	github.com/klauspost/compress v1.18.0 // indirect
+	github.com/klauspost/pgzip v1.2.6 // indirect
+	github.com/mikelolasagasti/xz v1.0.1 // indirect
+	github.com/minio/minlz v1.0.1 // indirect
+	github.com/nwaples/rardecode/v2 v2.2.0 // indirect
+	github.com/onsi/ginkgo/v2 v2.23.4 // indirect
+	github.com/pierrec/lz4/v4 v4.1.22 // indirect
+	github.com/pion/transport/v4 v4.0.1 // indirect
+	github.com/quic-go/qpack v0.5.1 // indirect
+	github.com/quic-go/quic-go v0.51.0 // indirect
+	github.com/refraction-networking/utls v1.6.7 // indirect
+	github.com/sorairolake/lzip-go v0.3.8 // indirect
+	github.com/spf13/afero v1.15.0 // indirect
+	github.com/ulikunitz/xz v0.5.15 // indirect
+	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
+	go.uber.org/automaxprocs v1.6.0 // indirect
+	go.uber.org/mock v0.5.1 // indirect
+	go4.org v0.0.0-20230225012048-214862532bf5 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 )

 require (
 	dario.cat/mergo v1.0.0 // indirect
-	github.com/Microsoft/go-winio v0.6.1 // indirect
+	github.com/Microsoft/go-winio v0.6.1
 	github.com/ProtonMail/go-crypto v0.0.0-20230717121422-5aa5874ade95 // indirect
 	github.com/RoaringBitmap/roaring v1.9.4 // indirect
 	github.com/acomagu/bufpipe v1.0.4 // indirect
-	github.com/ajwerner/btree v0.0.0-20211221152037-f427b3e689c0 // indirect
 	github.com/alecthomas/atomic v0.1.0-alpha2 // indirect
-	github.com/anacrolix/chansync v0.6.0 // indirect
-	github.com/anacrolix/dht/v2 v2.22.0 // indirect
-	github.com/anacrolix/envpprof v1.4.0 // indirect
-	github.com/anacrolix/generics v0.0.3-0.20240902042256-7fb2702ef0ca // indirect
-	github.com/anacrolix/go-libutp v1.3.1 // indirect
-	github.com/anacrolix/log v0.16.0 // indirect
+	github.com/anacrolix/chansync v0.7.0 // indirect
+	github.com/anacrolix/dht/v2 v2.23.0 // indirect
+	github.com/anacrolix/envpprof v1.5.0 // indirect
+	github.com/anacrolix/generics v0.2.0 // indirect
+	github.com/anacrolix/go-libutp v1.3.2 // indirect
+	github.com/anacrolix/log v0.17.1-0.20251118025802-918f1157b7bb // indirect
 	github.com/anacrolix/missinggo v1.3.0 // indirect
 	github.com/anacrolix/missinggo/perf v1.0.0 // indirect
 	github.com/anacrolix/mmsg v1.1.1 // indirect
 	github.com/anacrolix/multiless v0.4.0 // indirect
 	github.com/anacrolix/stm v0.5.0 // indirect
-	github.com/anacrolix/sync v0.5.3 // indirect
+	github.com/anacrolix/sync v0.6.0 // indirect
 	github.com/anacrolix/upnp v0.1.4 // indirect
 	github.com/anacrolix/utp v0.2.0 // indirect
 	github.com/bahlo/generic-list-go v0.2.0 // indirect
 	github.com/benbjohnson/immutable v0.4.3 // indirect
-	github.com/bits-and-blooms/bitset v1.15.0 // indirect
+	github.com/bits-and-blooms/bitset v1.24.4 // indirect
 	github.com/bradfitz/iter v0.0.0-20191230175014-e8f45d346db8 // indirect
 	github.com/cespare/xxhash v1.1.0 // indirect
-	github.com/cloudflare/circl v1.3.3 // indirect
+	github.com/cloudflare/circl v1.6.1 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/dlclark/regexp2 v1.11.4 // indirect
+	github.com/dlclark/regexp2 v1.11.5 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/edsrzf/mmap-go v1.2.0 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/felixge/httpsnoop v1.0.1 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
 	github.com/go-git/go-billy/v5 v5.4.1 // indirect
-	github.com/go-llsqlite/adapter v0.1.0 // indirect
-	github.com/go-llsqlite/crawshaw v0.5.5 // indirect
-	github.com/go-logr/logr v1.4.2 // indirect
+	github.com/go-llsqlite/adapter v0.2.0 // indirect
+	github.com/go-llsqlite/crawshaw v0.6.0 // indirect
+	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-sourcemap/sourcemap v2.1.4+incompatible // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/google/btree v1.1.3 // indirect
-	github.com/google/pprof v0.0.0-20240910150728-a0b0bb1d4134 // indirect
+	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/websocket v1.5.3 // indirect
 	github.com/huandu/xstrings v1.5.0 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
 	github.com/kevinburke/ssh_config v1.2.0 // indirect
-	github.com/klauspost/cpuid/v2 v2.2.9 // indirect
+	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/minio/sha256-simd v1.0.1 // indirect
 	github.com/mr-tron/base58 v1.2.0 // indirect
 	github.com/mschoch/smat v0.2.0 // indirect
 	github.com/multiformats/go-multihash v0.2.3 // indirect
-	github.com/multiformats/go-varint v0.0.7 // indirect
-	github.com/ncruces/go-strftime v0.1.9 // indirect
-	github.com/pion/datachannel v1.5.9 // indirect
-	github.com/pion/dtls/v3 v3.0.4 // indirect
-	github.com/pion/ice/v4 v4.0.2 // indirect
-	github.com/pion/interceptor v0.1.37 // indirect
-	github.com/pion/logging v0.2.2 // indirect
-	github.com/pion/mdns/v2 v2.0.7 // indirect
+	github.com/multiformats/go-varint v0.1.0 // indirect
+	github.com/ncruces/go-strftime v1.0.0 // indirect
+	github.com/pion/datachannel v1.6.0 // indirect
+	github.com/pion/dtls/v3 v3.0.10 // indirect
+	github.com/pion/ice/v4 v4.2.0 // indirect
+	github.com/pion/interceptor v0.1.42 // indirect
+	github.com/pion/logging v0.2.4 // indirect
+	github.com/pion/mdns/v2 v2.1.0 // indirect
 	github.com/pion/randutil v0.1.0 // indirect
-	github.com/pion/rtcp v1.2.14 // indirect
-	github.com/pion/rtp v1.8.9 // indirect
-	github.com/pion/sctp v1.8.33 // indirect
-	github.com/pion/sdp/v3 v3.0.9 // indirect
-	github.com/pion/srtp/v3 v3.0.4 // indirect
-	github.com/pion/stun/v3 v3.0.0 // indirect
-	github.com/pion/transport/v3 v3.0.7 // indirect
-	github.com/pion/turn/v4 v4.0.0 // indirect
-	github.com/pion/webrtc/v4 v4.0.2 // indirect
+	github.com/pion/rtcp v1.2.16 // indirect
+	github.com/pion/rtp v1.10.0 // indirect
+	github.com/pion/sctp v1.9.1 // indirect
+	github.com/pion/sdp/v3 v3.0.17 // indirect
+	github.com/pion/srtp/v3 v3.0.10 // indirect
+	github.com/pion/stun/v3 v3.1.1 // indirect
+	github.com/pion/turn/v4 v4.1.4 // indirect
+	github.com/pion/webrtc/v4 v4.2.2-0.20260109001657-a5962f314db7 // indirect
 	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
 	github.com/protolambda/ctxlock v0.1.0 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
 	github.com/sergi/go-diff v1.1.0 // indirect
-	github.com/shirou/gopsutil/v4 v4.24.12
 	github.com/skeema/knownhosts v1.2.0 // indirect
 	github.com/spaolacci/murmur3 v1.1.0 // indirect
-	github.com/tidwall/btree v1.7.0 // indirect
+	github.com/tidwall/btree v1.8.1 // indirect
 	github.com/wlynxg/anet v0.0.5 // indirect
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
-	go.opentelemetry.io/otel v1.32.0 // indirect
-	go.opentelemetry.io/otel/metric v1.32.0 // indirect
-	go.opentelemetry.io/otel/trace v1.32.0 // indirect
-	golang.org/x/crypto v0.29.0 // indirect
-	golang.org/x/mod v0.22.0 // indirect
-	golang.org/x/net v0.31.0 // indirect
-	golang.org/x/sys v0.28.0 // indirect
-	golang.org/x/text v0.20.0 // indirect
-	golang.org/x/time v0.8.0 // indirect
-	golang.org/x/tools v0.27.0 // indirect
+	go.opentelemetry.io/otel v1.39.0 // indirect
+	go.opentelemetry.io/otel/metric v1.39.0 // indirect
+	go.opentelemetry.io/otel/trace v1.39.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
+	golang.org/x/mod v0.31.0 // indirect
+	golang.org/x/net v0.48.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/text v0.33.0
+	golang.org/x/time v0.14.0 // indirect
+	golang.org/x/tools v0.40.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
-	lukechampine.com/blake3 v1.3.0 // indirect
-	modernc.org/libc v1.61.0 // indirect
-	modernc.org/mathutil v1.6.0 // indirect
-	modernc.org/memory v1.8.0 // indirect
-	modernc.org/sqlite v1.33.1 // indirect
-	zombiezen.com/go/sqlite v1.4.0 // indirect
+	lukechampine.com/blake3 v1.4.1 // indirect
+	modernc.org/libc v1.67.4 // indirect
+	modernc.org/mathutil v1.7.1 // indirect
+	modernc.org/memory v1.11.0 // indirect
+	modernc.org/sqlite v1.43.0 // indirect
+	zombiezen.com/go/sqlite v1.4.2 // indirect
 )
@@ -24,8 +24,10 @@ type DefaultFileController struct {

 func NewController() *Controller {
 	return &Controller{
-		GetConfig:      func(v any) {},
-		GetProxy:       func(requestProxy *base.RequestProxy) func(*http.Request) (*url.URL, error) { return nil },
+		GetConfig: func(v any) {},
+		GetProxy: func(requestProxy *base.RequestProxy) func(*http.Request) (*url.URL, error) {
+			return requestProxy.ToHandler()
+		},
 		FileController: &DefaultFileController{},
 	}
 }
@@ -1,20 +1,18 @@
 package fetcher

 import (
-	"github.com/GopeedLab/gopeed/internal/controller"
-	"github.com/GopeedLab/gopeed/pkg/base"
 	"path"
 	"strings"
+
+	"github.com/GopeedLab/gopeed/internal/controller"
+	"github.com/GopeedLab/gopeed/pkg/base"
 )

 // Fetcher defines the interface for a download protocol.
 // Each download task will have a corresponding Fetcher instance for the management of the download task
 type Fetcher interface {
 	Setup(ctl *controller.Controller)
-	// Resolve resource info from request
-	Resolve(req *base.Request) error
-	// Create ready to download, but not started
-	Create(opts *base.Options) error
+	Resolve(req *base.Request, opts *base.Options) error
 	Start() error
 	Pause() error
 	Close() error
@@ -4,7 +4,7 @@ type config struct {
 	ListenPort int      `json:"listenPort"`
 	Trackers   []string `json:"trackers"`
 	// SeedKeep is always keep seeding after downloading is complete, unless manually stopped.
-	SeedKeep bool `json:"seedKeep`
+	SeedKeep bool `json:"seedKeep"`
 	// SeedRatio is the ratio of uploaded data to downloaded data to seed.
 	SeedRatio float64 `json:"seedRatio"`
 	// SeedTime is the time in seconds to seed after downloading is complete.
@@ -4,13 +4,6 @@ import (
 	"bytes"
 	"context"
 	"fmt"
-	"github.com/GopeedLab/gopeed/internal/controller"
-	"github.com/GopeedLab/gopeed/internal/fetcher"
-	"github.com/GopeedLab/gopeed/pkg/base"
-	"github.com/GopeedLab/gopeed/pkg/protocol/bt"
-	"github.com/GopeedLab/gopeed/pkg/util"
-	"github.com/anacrolix/torrent"
-	"github.com/anacrolix/torrent/metainfo"
 	"io"
 	"net/url"
 	"os"
@@ -19,15 +12,23 @@ import (
 	"sync"
 	"sync/atomic"
 	"time"
+
+	"github.com/GopeedLab/gopeed/internal/controller"
+	"github.com/GopeedLab/gopeed/internal/fetcher"
+	"github.com/GopeedLab/gopeed/pkg/base"
+	"github.com/GopeedLab/gopeed/pkg/protocol/bt"
+	"github.com/GopeedLab/gopeed/pkg/util"
+	"github.com/anacrolix/torrent"
+	"github.com/anacrolix/torrent/metainfo"
+	"github.com/anacrolix/torrent/storage"
 )

 var (
-	client        *torrent.Client
-	lock          sync.Mutex
-	torrentDirMap = make(map[string]string)
-	ftMap         = make(map[string]*fileTorrentImpl)
-	closeCtx      context.Context
-	closeFunc     func()
+	cfg       *torrent.ClientConfig
+	client    *torrent.Client
+	lock      sync.Mutex
+	closeCtx  context.Context
+	closeFunc func()
 )

 type Fetcher struct {
@@ -70,21 +71,12 @@ func (f *Fetcher) initClient() (err error) {
 		closeCtx, closeFunc = context.WithCancel(context.Background())
 	}

-	cfg := torrent.NewDefaultClientConfig()
+	cfg = torrent.NewDefaultClientConfig()
 	cfg.Seed = true
 	cfg.Bep20 = fmt.Sprintf("-GP%s-", parseBep20())
 	cfg.ExtendedHandshakeClientVersion = fmt.Sprintf("Gopeed %s", base.Version)
 	cfg.ListenPort = f.config.ListenPort
 	cfg.HTTPProxy = f.ctl.GetProxy(f.meta.Req.Proxy)
-	cfg.DefaultStorage = newFileOpts(newFileClientOpts{
-		ClientBaseDir: cfg.DataDir,
-		HandleFileTorrent: func(infoHash metainfo.Hash, ft *fileTorrentImpl) {
-			if dir, ok := torrentDirMap[infoHash.String()]; ok {
-				ft.setTorrentDir(dir)
-			}
-			ftMap[infoHash.String()] = ft
-		},
-	})
 	dnsResolver := &DnsCacheResolver{RefreshTimeout: 5 * time.Minute}
 	cfg.TrackerDialContext = dnsResolver.DialContext
 	client, err = torrent.NewClient(cfg)
@@ -99,11 +91,12 @@ func (f *Fetcher) initClient() (err error) {
 	return
 }

-func (f *Fetcher) Resolve(req *base.Request) error {
-	if err := base.ParseReqExtra[bt.ReqExtra](req); err != nil {
-		return err
-	}
+func (f *Fetcher) Resolve(req *base.Request, opts *base.Options) error {
 	f.meta.Req = req
+	f.meta.Opts = opts
+	if f.meta.Opts == nil {
+		f.meta.Opts = &base.Options{}
+	}
 	if err := f.addTorrent(req, false); err != nil {
 		return err
 	}
@@ -111,23 +104,13 @@ func (f *Fetcher) Resolve(req *base.Request) error {
 	return nil
 }

-func (f *Fetcher) Create(opts *base.Options) (err error) {
-	f.meta.Opts = opts
-	if f.meta.Res != nil {
-		torrentDirMap[f.meta.Res.Hash] = opts.Path
-	}
-	return nil
-}
-
 func (f *Fetcher) Start() (err error) {
 	if !f.torrentReady.Load() {
 		if err = f.addTorrent(f.meta.Req, false); err != nil {
 			return
 		}
 	}
-	if ft, ok := ftMap[f.meta.Res.Hash]; ok {
-		ft.setTorrentDir(f.meta.Opts.Path)
-	}
+
 	files := f.torrent.Files()
 	// If the user does not specify the file to download, all files will be downloaded by default
 	if f.data.Progress == nil {
@@ -147,12 +130,12 @@ func (f *Fetcher) Start() (err error) {
 			file.Download()
 		}
 	}
+	f.torrent.AllowDataDownload()
 	return
 }

 func (f *Fetcher) Pause() (err error) {
-	f.torrentReady.Store(false)
-	f.safeDrop()
+	f.torrent.DisallowDataDownload()
 	return
 }

@@ -355,12 +338,20 @@ func (f *Fetcher) WaitUpload() (err error) {
 }

 func (f *Fetcher) addTorrent(req *base.Request, fromUpload bool) (err error) {
+	if err = base.ParseReqExtra[bt.ReqExtra](req); err != nil {
+		return
+	}
 	if err = f.initClient(); err != nil {
 		return
 	}
 	schema := util.ParseSchema(req.URL)
+	privateTorrent := false
+	var spec *torrent.TorrentSpec
 	if schema == "MAGNET" {
-		f.torrent, err = client.AddMagnet(req.URL)
+		spec, err = torrent.TorrentSpecFromMagnetUri(req.URL)
+		if err != nil {
+			return
+		}
 	} else {
 		var reader io.Reader
 		if schema == "FILE" {
@@ -388,34 +379,56 @@ func (f *Fetcher) addTorrent(req *base.Request, fromUpload bool) (err error) {
 		if err != nil && !strings.Contains(err.Error(), "expected EOF") {
 			return err
 		}
-		f.torrent, err = client.AddTorrent(metaInfo)
+
+		info, er := metaInfo.UnmarshalInfo()
+		if er != nil {
+			return er
+		}
+
+		if info.Private != nil && *info.Private {
+			privateTorrent = true
+		}
+		spec, err = torrent.TorrentSpecFromMetaInfoErr(metaInfo)
+		if err != nil {
+			return
+		}
 	}
+	spec.Storage = storage.NewFileOpts(storage.NewFileClientOpts{
+		ClientBaseDir: cfg.DataDir,
+		TorrentDirMaker: func(baseDir string, info *metainfo.Info, infoHash metainfo.Hash) string {
+			return f.meta.Opts.Path
+		},
+	})
+	f.torrent, _, err = client.AddTorrentSpec(spec)
 	if err != nil {
 		return
 	}

-	// use map to deduplicate
-	trackers := make(map[string]bool)
-	if req.Extra != nil {
-		extra := req.Extra.(*bt.ReqExtra)
-		if len(extra.Trackers) > 0 {
-			for _, tracker := range extra.Trackers {
+	// Do not add external tracker to a private torrent.
+	if !privateTorrent {
+		// use map to deduplicate
+		trackers := make(map[string]bool)
+		if req.Extra != nil {
+			extra := req.Extra.(*bt.ReqExtra)
+			if len(extra.Trackers) > 0 {
+				for _, tracker := range extra.Trackers {
+					trackers[tracker] = true
+				}
+			}
+		}
+		if len(f.config.Trackers) > 0 {
+			for _, tracker := range f.config.Trackers {
 				trackers[tracker] = true
 			}
 		}
-	}
-	if len(f.config.Trackers) > 0 {
-		for _, tracker := range f.config.Trackers {
-			trackers[tracker] = true
+		if len(trackers) > 0 {
+			announceList := make([][]string, 0)
+			for tracker := range trackers {
+				announceList = append(announceList, []string{tracker})
+			}
+			f.torrent.AddTrackers(announceList)
 		}
 	}
-	if len(trackers) > 0 {
-		announceList := make([][]string, 0)
-		for tracker := range trackers {
-			announceList = append(announceList, []string{tracker})
-		}
-		f.torrent.AddTrackers(announceList)
-	}
 	<-f.torrent.GotInfo()
 	f.torrentReady.Store(true)

@@ -3,17 +3,18 @@ package bt
 import (
 	"encoding/base64"
 	"encoding/json"
-	"github.com/GopeedLab/gopeed/internal/controller"
-	"github.com/GopeedLab/gopeed/internal/fetcher"
-	"github.com/GopeedLab/gopeed/internal/test"
-	"github.com/GopeedLab/gopeed/pkg/base"
-	"github.com/GopeedLab/gopeed/pkg/protocol/bt"
 	gohttp "net/http"
 	"net/url"
 	"os"
 	"path/filepath"
 	"reflect"
 	"testing"
+
+	"github.com/GopeedLab/gopeed/internal/controller"
+	"github.com/GopeedLab/gopeed/internal/fetcher"
+	"github.com/GopeedLab/gopeed/internal/test"
+	"github.com/GopeedLab/gopeed/pkg/base"
+	"github.com/GopeedLab/gopeed/pkg/protocol/bt"
 )

 func TestFetcher_Resolve_Torrent(t *testing.T) {
@@ -30,7 +31,7 @@ func TestFetcher_Resolve_DataUri_Torrent(t *testing.T) {
 	dataUri := "data:application/x-bittorrent;base64," + base64.StdEncoding.EncodeToString(buf)
 	err = fetcher.Resolve(&base.Request{
 		URL: dataUri,
-	})
+	}, nil)
 	if err != nil {
 		panic(err)
 	}
@@ -80,7 +81,7 @@ func doResolve(t *testing.T, fetcher fetcher.Fetcher) {
 					"udp://tracker.bitsearch.to:1337/announce",
 				},
 			},
-		})
+		}, nil)
 		if err != nil {
 			panic(err)
 		}
@@ -110,7 +111,7 @@ func doResolve(t *testing.T, fetcher fetcher.Fetcher) {
 					"udp://tracker.bitsearch.to:1337/announce",
 				},
 			},
-		})
+		}, nil)
 		if err != nil {
 			panic(err)
 		}
@@ -144,7 +145,7 @@ func doResolve(t *testing.T, fetcher fetcher.Fetcher) {
 	t.Run("Resolve Unclean Torrent", func(t *testing.T) {
 		err := fetcher.Resolve(&base.Request{
 			URL: "./testdata/test.unclean.torrent",
-		})
+		}, nil)
 		if err != nil {
 			t.Errorf("Resolve Unclean Torrent Resolve() got = %v, want nil", err)
 		}
@@ -155,7 +156,7 @@ func doResolve(t *testing.T, fetcher fetcher.Fetcher) {
 		uri := "file:///" + file
 		err := fetcher.Resolve(&base.Request{
 			URL: uri,
-		})
+		}, nil)
 		if err != nil {
 			t.Errorf("Resolve file scheme Torrent Resolve() got = %v, want nil", err)
 		}
@@ -1,215 +0,0 @@
-// modify from github.com/anacrolix/torrent/storage/file.go
-
-package bt
-
-import (
-	"context"
-	"fmt"
-	"github.com/anacrolix/torrent/storage"
-	"io"
-	"os"
-	"path/filepath"
-
-	"github.com/anacrolix/missinggo/v2"
-
-	"github.com/anacrolix/torrent/common"
-	"github.com/anacrolix/torrent/metainfo"
-	"github.com/anacrolix/torrent/segments"
-)
-
-// File-based storage for torrents, that isn't yet bound to a particular torrent.
-type fileClientImpl struct {
-	opts newFileClientOpts
-}
-
-type newFileClientOpts struct {
-	// The base directory for all downloads.
-	ClientBaseDir     string
-	HandleFileTorrent func(infoHash metainfo.Hash, ft *fileTorrentImpl)
-	FilePathMaker     storage.FilePathMaker
-	PieceCompletion   storage.PieceCompletion
-}
-
-func newFileOpts(opts newFileClientOpts) storage.ClientImplCloser {
-	if opts.FilePathMaker == nil {
-		opts.FilePathMaker = func(opts storage.FilePathMakerOpts) string {
-			var parts []string
-			if opts.Info.Name != metainfo.NoName {
-				parts = append(parts, opts.Info.Name)
-			}
-			return filepath.Join(append(parts, opts.File.Path...)...)
-		}
-	}
-	if opts.PieceCompletion == nil {
-		ret, err := storage.NewDefaultPieceCompletionForDir(opts.ClientBaseDir)
-		if err != nil {
-			ret = storage.NewMapPieceCompletion()
-		}
-		opts.PieceCompletion = ret
-	}
-	return fileClientImpl{opts}
-}
-
-func (fs fileClientImpl) Close() error {
-	return fs.opts.PieceCompletion.Close()
-}
-
-func (fs fileClientImpl) OpenTorrent(ctx context.Context, info *metainfo.Info, infoHash metainfo.Hash) (_ storage.TorrentImpl, err error) {
-	upvertedFiles := info.UpvertedFiles()
-	files := make([]file, 0, len(upvertedFiles))
-	for _, fileInfo := range upvertedFiles {
-		filePath := filepath.Join("", fs.opts.FilePathMaker(storage.FilePathMakerOpts{
-			Info: info,
-			File: &fileInfo,
-		}))
-		f := file{
-			rawPath: filePath,
-			path:    filePath,
-			length:  fileInfo.Length,
-		}
-		if f.length == 0 {
-			err = CreateNativeZeroLengthFile(f.path)
-			if err != nil {
-				err = fmt.Errorf("creating zero length file: %w", err)
-				return
-			}
-		}
-		files = append(files, f)
-	}
-	t := &fileTorrentImpl{
-		files,
-		segments.NewIndex(common.LengthIterFromUpvertedFiles(upvertedFiles)),
-		infoHash,
-		fs.opts.PieceCompletion,
-	}
-	fs.opts.HandleFileTorrent(infoHash, t)
-	return storage.TorrentImpl{
-		Piece: t.Piece,
-		Close: t.Close,
-	}, nil
-}
-
-type file struct {
-	// The safe, OS-local file path.
-	rawPath string
-	path    string
-	length  int64
-}
-
-type fileTorrentImpl struct {
-	files          []file
-	segmentLocater segments.Index
-	infoHash       metainfo.Hash
-	completion     storage.PieceCompletion
-}
-
-func (fts *fileTorrentImpl) Piece(p metainfo.Piece) storage.PieceImpl {
-	// Create a view onto the file-based torrent storage.
-	_io := fileTorrentImplIO{fts}
-	// Return the appropriate segments of this.
-	return &filePieceImpl{
-		fts,
-		p,
-		missinggo.NewSectionWriter(_io, p.Offset(), p.Length()),
-		io.NewSectionReader(_io, p.Offset(), p.Length()),
-	}
-}
-
-func (fts *fileTorrentImpl) Close() error {
-	return nil
-}
-
-func (fts *fileTorrentImpl) setTorrentDir(dir string) {
-	for i, f := range fts.files {
-		fts.files[i].path = filepath.Join(dir, f.rawPath)
-	}
-}
-
-// A helper to create zero-length files which won't appear for file-orientated storage since no
-// writes will ever occur to them (no torrent data is associated with a zero-length file). The
-// caller should make sure the file name provided is safe/sanitized.
-func CreateNativeZeroLengthFile(name string) error {
-	os.MkdirAll(filepath.Dir(name), 0o777)
-	var f io.Closer
-	f, err := os.Create(name)
-	if err != nil {
-		return err
-	}
-	return f.Close()
-}
-
-// Exposes file-based storage of a torrent, as one big ReadWriterAt.
-type fileTorrentImplIO struct {
-	fts *fileTorrentImpl
-}
-
-// Returns EOF on short or missing file.
-func (fst *fileTorrentImplIO) readFileAt(file file, b []byte, off int64) (n int, err error) {
-	f, err := os.Open(file.path)
-	if os.IsNotExist(err) {
-		// File missing is treated the same as a short file.
-		err = io.EOF
-		return
-	}
-	if err != nil {
-		return
-	}
-	defer f.Close()
-	// Limit the read to within the expected bounds of this file.
-	if int64(len(b)) > file.length-off {
-		b = b[:file.length-off]
-	}
-	for off < file.length && len(b) != 0 {
-		n1, err1 := f.ReadAt(b, off)
-		b = b[n1:]
-		n += n1
-		off += int64(n1)
-		if n1 == 0 {
-			err = err1
-			break
-		}
-	}
-	return
-}
-
-// Only returns EOF at the end of the torrent. Premature EOF is ErrUnexpectedEOF.
-func (fst fileTorrentImplIO) ReadAt(b []byte, off int64) (n int, err error) {
-	fst.fts.segmentLocater.Locate(segments.Extent{off, int64(len(b))}, func(i int, e segments.Extent) bool {
-		n1, err1 := fst.readFileAt(fst.fts.files[i], b[:e.Length], e.Start)
-		n += n1
-		b = b[n1:]
-		err = err1
-		return err == nil // && int64(n1) == e.Length
-	})
-	if len(b) != 0 && err == nil {
-		err = io.EOF
-	}
-	return
-}
-
-func (fst fileTorrentImplIO) WriteAt(p []byte, off int64) (n int, err error) {
-	// log.Printf("write at %v: %v bytes", off, len(p))
-	fst.fts.segmentLocater.Locate(segments.Extent{off, int64(len(p))}, func(i int, e segments.Extent) bool {
-		name := fst.fts.files[i].path
-		os.MkdirAll(filepath.Dir(name), 0o777)
-		var f *os.File
-		f, err = os.OpenFile(name, os.O_WRONLY|os.O_CREATE, 0o666)
-		if err != nil {
-			return false
-		}
-		var n1 int
-		n1, err = f.WriteAt(p[:e.Length], e.Start)
-		// log.Printf("%v %v wrote %v: %v", i, e, n1, err)
-		closeErr := f.Close()
-		n += n1
-		p = p[n1:]
-		if err == nil {
-			err = closeErr
-		}
-		if err == nil && int64(n1) != e.Length {
-			err = io.ErrShortWrite
-		}
-		return err == nil
-	})
-	return
-}
@@ -1,36 +0,0 @@
-// modify from github.com/anacrolix/torrent/storage/file_misc.go
-
-package bt
-
-import "github.com/anacrolix/torrent/metainfo"
-
-type requiredLength struct {
-	fileIndex int
-	length    int64
-}
-
-func extentCompleteRequiredLengths(info *metainfo.Info, off, n int64) (ret []requiredLength) {
-	if n == 0 {
-		return
-	}
-	for i, fi := range info.UpvertedFiles() {
-		if off >= fi.Length {
-			off -= fi.Length
-			continue
-		}
-		n1 := n
-		if off+n1 > fi.Length {
-			n1 = fi.Length - off
-		}
-		ret = append(ret, requiredLength{
-			fileIndex: i,
-			length:    off + n1,
-		})
-		n -= n1
-		if n == 0 {
-			return
-		}
-		off = 0
-	}
-	return
-}
@@ -1,61 +0,0 @@
-// modify from github.com/anacrolix/torrent/storage/file_piece.go
-
-package bt
-
-import (
-	"github.com/anacrolix/torrent/metainfo"
-	"github.com/anacrolix/torrent/storage"
-	"io"
-	"log"
-	"os"
-)
-
-type filePieceImpl struct {
-	*fileTorrentImpl
-	p metainfo.Piece
-	io.WriterAt
-	io.ReaderAt
-}
-
-var _ storage.PieceImpl = (*filePieceImpl)(nil)
-
-func (fs *filePieceImpl) pieceKey() metainfo.PieceKey {
-	return metainfo.PieceKey{InfoHash: fs.infoHash, Index: fs.p.Index()}
-}
-
-func (fs *filePieceImpl) Completion() storage.Completion {
-	c, err := fs.completion.Get(fs.pieceKey())
-	if err != nil {
-		log.Printf("error getting piece completion: %s", err)
-		c.Ok = false
-		return c
-	}
-
-	verified := true
-	if c.Complete {
-		// If it's allegedly complete, check that its constituent files have the necessary length.
-		for _, fi := range extentCompleteRequiredLengths(fs.p.Info, fs.p.Offset(), fs.p.Length()) {
-			s, err := os.Stat(fs.files[fi.fileIndex].path)
-			if err != nil || s.Size() < fi.length {
-				verified = false
-				break
-			}
-		}
-	}
-
-	if !verified {
-		// The completion was wrong, fix it.
-		c.Complete = false
-		fs.completion.Set(fs.pieceKey(), false)
-	}
-
-	return c
-}
-
-func (fs *filePieceImpl) MarkComplete() error {
-	return fs.completion.Set(fs.pieceKey(), true)
-}
-
-func (fs *filePieceImpl) MarkNotComplete() error {
-	return fs.completion.Set(fs.pieceKey(), false)
-}
@@ -0,0 +1,96 @@
+package http
+
+import (
+	"net/url"
+	"path"
+
+	"github.com/GopeedLab/gopeed/internal/fetcher"
+	"github.com/GopeedLab/gopeed/pkg/base"
+	fhttp "github.com/GopeedLab/gopeed/pkg/protocol/http"
+)
+
+// ============================================================================
+// Fetcher Data (for Store/Restore)
+// ============================================================================
+
+type fetcherData struct {
+	Connections []*connection
+}
+
+// ============================================================================
+// Fetcher Manager
+// ============================================================================
+
+type FetcherManager struct {
+}
+
+func (fm *FetcherManager) Name() string {
+	return "http"
+}
+
+func (fm *FetcherManager) Filters() []*fetcher.SchemeFilter {
+	return []*fetcher.SchemeFilter{
+		{
+			Type:    fetcher.FilterTypeUrl,
+			Pattern: "HTTP",
+		},
+		{
+			Type:    fetcher.FilterTypeUrl,
+			Pattern: "HTTPS",
+		},
+	}
+}
+
+func (fm *FetcherManager) Build() fetcher.Fetcher {
+	return &Fetcher{}
+}
+
+func (fm *FetcherManager) ParseName(u string) string {
+	var name string
+	url, err := url.Parse(u)
+	if err != nil {
+		return ""
+	}
+	name = path.Base(url.Path)
+	if name == "" || name == "/" || name == "." {
+		name = url.Hostname()
+	}
+	return name
+}
+
+func (fm *FetcherManager) AutoRename() bool {
+	return true
+}
+
+func (fm *FetcherManager) DefaultConfig() any {
+	return &config{
+		UserAgent:   "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36",
+		Connections: 16,
+	}
+}
+
+func (fm *FetcherManager) Store(f fetcher.Fetcher) (data any, err error) {
+	_f := f.(*Fetcher)
+	return &fetcherData{
+		Connections: _f.connections,
+	}, nil
+}
+
+func (fm *FetcherManager) Restore() (v any, f func(meta *fetcher.FetcherMeta, v any) fetcher.Fetcher) {
+	return &fetcherData{}, func(meta *fetcher.FetcherMeta, v any) fetcher.Fetcher {
+		fd := v.(*fetcherData)
+		fb := &FetcherManager{}
+		fetcher := fb.Build().(*Fetcher)
+		fetcher.meta = meta
+		base.ParseReqExtra[fhttp.ReqExtra](fetcher.meta.Req)
+		base.ParseOptExtra[fhttp.OptsExtra](fetcher.meta.Opts)
+		if len(fd.Connections) > 0 {
+			fetcher.connections = fd.Connections
+		}
+		return fetcher
+	}
+}
+
+func (fm *FetcherManager) Close() error {
+	return nil
+}
@@ -3,100 +3,279 @@ package http
 import (
 	"encoding/json"
 	"fmt"
+	"net"
+	gohttp "net/http"
+	"net/url"
+	"os"
+	"strings"
+	"testing"
+	"time"
+
 	"github.com/GopeedLab/gopeed/internal/controller"
 	"github.com/GopeedLab/gopeed/internal/fetcher"
 	"github.com/GopeedLab/gopeed/internal/test"
 	"github.com/GopeedLab/gopeed/pkg/base"
 	"github.com/GopeedLab/gopeed/pkg/protocol/http"
-	"net"
-	gohttp "net/http"
-	"net/url"
-	"strings"
-	"testing"
-	"time"
 )

 func TestFetcher_Resolve(t *testing.T) {
-	testResolve(test.StartTestFileServer, test.BuildName, &base.Resource{
-		Size:  test.BuildSize,
-		Range: true,
-		Files: []*base.FileInfo{
-			{
-				Name: test.BuildName,
-				Size: test.BuildSize,
+	testResolve(test.StartTestFileServer, test.BuildName, t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: true,
+			Files: []*base.FileInfo{
+				{
+					Name: test.BuildName,
+					Size: test.BuildSize,
+				},
 			},
-		},
-	}, t)
-	testResolve(test.StartTestCustomServer, "disposition", &base.Resource{
-		Size:  test.BuildSize,
-		Range: false,
-		Files: []*base.FileInfo{
-			{
-				Name: test.BuildName,
-				Size: test.BuildSize,
-			},
-		},
-	}, t)
-	testResolve(test.StartTestCustomServer, "encoded-word", &base.Resource{
-		Size:  test.BuildSize,
-		Range: false,
-		Files: []*base.FileInfo{
-			{
-				Name: "测试.zip",
-				Size: test.BuildSize,
-			},
-		},
-	}, t)
-	testResolve(test.StartTestCustomServer, test.BuildName, &base.Resource{
-		Size:  0,
-		Range: false,
-		Files: []*base.FileInfo{
-			{
-				Name: test.BuildName,
-				Size: 0,
-			},
-		},
-	}, t)
-
-	fetcher := buildFetcher()
-	err := fetcher.Resolve(&base.Request{
-		URL: "http://github.com",
+		}, nil
+	})
+	testResolve(test.StartTestCustomServer, "disposition", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: test.BuildName,
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	testResolve(test.StartTestCustomServer, "encoded-word", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: test.TestChineseFileName,
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	testResolve(test.StartTestCustomServer, "no-encode", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: test.TestChineseFileName,
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	testResolve(test.StartTestCustomServer, "%E6%B5%8B%E8%AF%95.zip", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  0,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: test.TestChineseFileName,
+					Size: 0,
+				},
+			},
+		}, nil
+	})
+	testResolve(test.StartTestCustomServer, test.BuildName, t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  0,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: test.BuildName,
+					Size: 0,
+				},
+			},
+		}, nil
+	})
+	// Test mixed encoding Content-Disposition where mime.ParseMediaType fails
+	// due to invalid characters, but filename*= contains the correct UTF-8 encoded name
+	testResolve(test.StartTestCustomServer, "mixed-encoding", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: test.TestChineseFileName,
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	// Test filename*= only (RFC 5987 format)
+	testResolve(test.StartTestCustomServer, "filename-star", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: test.TestChineseFileName,
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	// Test GBK-encoded filename (common on Chinese Windows servers)
+	// Before fix: "测试.zip" sent as GBK bytes -> parsed as "²âÊÔ.zip" (garbled)
+	// After fix: correctly decoded back to "测试.zip"
+	testResolve(test.StartTestCustomServer, "gbk-encoded", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: test.TestChineseFileName,
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	// Test filename with plus signs (e.g., C++ Primer)
+	// Before fix: %2B decoded to space -> "C++ Primer" became "C  Primer"
+	// After fix: %2B correctly decoded to + -> "C++  Primer  Plus.mobi"
+	testResolve(test.StartTestCustomServer, "plus-sign-encoded", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: "C++  Primer  Plus.mobi",
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	// Test filename with plus sign in URL path
+	// Before fix: %2B decoded to space
+	// After fix: %2B correctly decoded to +
+	testResolve(test.StartTestCustomServer, "C%2B%2B%20Primer.txt", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  0,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: "C++ Primer.txt",
+					Size: 0,
+				},
+			},
+		}, nil
+	})
+	// Test filename with HTML-encoded ampersand (fixes issue with & being truncated)
+	// Before fix: "查询处理&amp;优化.pptx" -> "查询处理&amp" (truncated at semicolon)
+	// After fix: correctly decoded to "查询处理&优化.pptx"
+	testResolve(test.StartTestCustomServer, "ampersand-encoded", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: "查询处理&优化.pptx",
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	// Test unquoted filename with HTML-encoded ampersand
+	testResolve(test.StartTestCustomServer, "ampersand-unquoted", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  test.BuildSize,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: "test&file.txt",
+					Size: test.BuildSize,
+				},
+			},
+		}, nil
+	})
+	// Test URL without file path - should use domain/host as filename
+	testResolve(test.StartTestCustomServer, "", t, func(err error) (*base.Resource, error) {
+		return &base.Resource{
+			Size:  0,
+			Range: false,
+			Files: []*base.FileInfo{
+				{
+					Name: "127.0.0.1",
+					Size: 0,
+				},
+			},
+		}, nil
+	})
+	// Test 403 Forbidden response handling
+	testResolve(test.StartTestCustomServer, "forbidden", t, func(err error) (*base.Resource, error) {
+		requestError := extractRequestError(err)
+		if requestError != nil && requestError.Code == 403 {
+			return nil, nil
+		}
+		return nil, err
 	})
-	if err != nil {
-		t.Fatal(err)
-	}
-	if fetcher.Meta().Res.Files[0].Name != "github.com" {
-		t.Errorf("Resolve() got = %v, want %v", fetcher.Meta().Res, "github.com")
-	}
 }

 func TestFetcher_ResolveWithHostHeader(t *testing.T) {
+	listener := test.StartTestHostHeaderServer()
+	defer listener.Close()
+
 	fetcher := buildFetcher()
 	err := fetcher.Resolve(&base.Request{
-		URL: "https://bing.com",
+		URL: "http://" + listener.Addr().String() + "/",
 		Extra: &http.ReqExtra{
 			Header: map[string]string{
 				"Host": "test",
 			},
 		},
+	}, &base.Options{
+		Name: test.DownloadName,
+		Path: test.Dir,
 	})
+	// The server should return 400 for invalid Host header
 	if err == nil || !strings.Contains(err.Error(), "400") {
-		t.Errorf("Resolve() got = %v, want %v", err, "400")
+		t.Errorf("Resolve() got = %v, want error containing 400", err)
 	}
 }

-func testResolve(startTestServer func() net.Listener, path string, want *base.Resource, t *testing.T) {
+func TestFetcher_ResolveWithInvalidHeader(t *testing.T) {
+	listener := test.StartTestCustomServer()
+	defer listener.Close()
+
+	fetcher := buildFetcher()
+	defer fetcher.Pause() // Close the resolve response to allow server shutdown
+	err := fetcher.Resolve(&base.Request{
+		URL: "http://" + listener.Addr().String() + "/",
+		Extra: &http.ReqExtra{
+			Header: map[string]string{
+				"Referer": "\rtest",
+			},
+		},
+	}, &base.Options{
+		Name: test.DownloadName,
+		Path: test.Dir,
+	})
+	// Invalid header with \r should be sanitized by Go's http client, allowing the request to succeed
+	if err != nil {
+		t.Errorf("Resolve() got = %v, want nil (invalid headers should be sanitized)", err)
+	}
+}
+
+func testResolve(startTestServer func() net.Listener, path string, t *testing.T, wantFn func(error) (*base.Resource, error)) {
 	listener := startTestServer()
 	defer listener.Close()
 	fetcher := buildFetcher()
+	defer fetcher.Pause() // Close the resolve response to allow server shutdown
 	err := fetcher.Resolve(&base.Request{
 		URL: "http://" + listener.Addr().String() + "/" + path,
+	}, &base.Options{
+		Name: test.DownloadName,
+		Path: test.Dir,
 	})
+	want, err := wantFn(err)
 	if err != nil {
 		t.Fatal(err)
 	}
-	if !test.AssertResourceEqual(want, fetcher.meta.Res) {
-		t.Errorf("Resolve() got = %v, want %v", fetcher.meta.Res, want)
+	if want != nil && !test.AssertResourceEqual(want, fetcher.meta.Res) {
+		t.Errorf("Resolve() got = %+v, want %+v", fetcher.meta.Res, want)
 	}
 }

@@ -159,11 +338,82 @@ func TestFetcher_DownloadLimit(t *testing.T) {
 }

 func TestFetcher_DownloadResponseBodyReadTimeout(t *testing.T) {
-	listener := test.StartTestLimitServer(16, readTimeout.Milliseconds()+5000)
+	// Server will timeout once (first request delays longer than readTimeout),
+	// then subsequent requests work normally
+	listener := test.StartTestTimeoutOnceServer(readTimeout.Milliseconds() + 5000)
 	defer listener.Close()

-	downloadError(listener, 1, t)
-	downloadError(listener, 4, t)
+	for _, connections := range []int{1, 4} {
+		os.Remove(test.DownloadFile)
+
+		fetcher := downloadReady(listener, connections, t)
+		if err := fetcher.Start(); err != nil {
+			t.Fatal(err)
+		}
+		if err := fetcher.Wait(); err != nil {
+			t.Fatal(err)
+		}
+
+		stats := fetcher.Stats().(*http.Stats)
+		if len(stats.Connections) == 0 {
+			t.Fatalf("expected connections stats for timeout test")
+		}
+
+		// Verify successful download after timeout recovery
+		want := test.FileMd5(test.BuildFile)
+		got := test.FileMd5(test.DownloadFile)
+		if want != got {
+			t.Errorf("Download() got = %v, want %v", got, want)
+		}
+
+		// Verify timeouts don't count as failures (retryTimes should be 0)
+		for _, conn := range stats.Connections {
+			if conn.Failed {
+				t.Fatalf("expected no counted failures after timeout recovery, got retries=%d", conn.RetryTimes)
+			}
+			if conn.RetryTimes != 0 {
+				t.Fatalf("expected retryTimes to stay zero for non-counted timeouts, got %d", conn.RetryTimes)
+			}
+		}
+	}
+}
+
+func TestFetcher_Download500Recovery(t *testing.T) {
+	// Server returns 500 for 15 seconds, then recovers
+	listener := test.StartTestTemporary500Server(15 * time.Second)
+	defer listener.Close()
+
+	os.Remove(test.DownloadFile)
+	fetcher := downloadReady(listener, 4, t)
+	if err := fetcher.Start(); err != nil {
+		t.Fatal(err)
+	}
+	if err := fetcher.Wait(); err != nil {
+		t.Fatal(err)
+	}
+
+	// Verify successful download after 500 errors
+	want := test.FileMd5(test.BuildFile)
+	got := test.FileMd5(test.DownloadFile)
+	if want != got {
+		t.Errorf("Download() got = %v, want %v", got, want)
+	}
+
+	// Verify 500 errors don't count as failures (retryTimes should be 0)
+	stats := fetcher.Stats().(*http.Stats)
+	for _, conn := range stats.Connections {
+		if conn.RetryTimes != 0 {
+			t.Errorf("Expected retryTimes to be 0 for 500 errors (exempt), got %d", conn.RetryTimes)
+		}
+	}
+}
+
+func TestFetcher_DownloadOnBugFileServer(t *testing.T) {
+	listener := test.StartTestRangeBugServer()
+	defer listener.Close()
+
+	downloadNormal(listener, 1, t)
+	downloadNormal(listener, 4, t)
 }

 func TestFetcher_DownloadResume(t *testing.T) {
@@ -228,6 +478,306 @@ func TestFetcher_ConfigUseServerCtime(t *testing.T) {
 	}
 }

+func TestFetcher_Stats(t *testing.T) {
+	listener := test.StartTestFileServer()
+	defer listener.Close()
+	fetcher := doDownloadReady(buildConfigFetcher(config{
+		Connections: 16,
+	}), listener, 0, t)
+	err := fetcher.Start()
+	if err != nil {
+		t.Fatal(err)
+	}
+	err = fetcher.Wait()
+	if err != nil {
+		t.Fatal(err)
+	}
+	stats := fetcher.Stats().(*http.Stats)
+	// With slow-start strategy, connection count may be less than max if download is fast
+	// Just verify we have at least 1 connection and no more than max
+	if len(stats.Connections) < 1 || len(stats.Connections) > 16 {
+		t.Errorf("Stats() connection count got = %v, want between 1 and 16", len(stats.Connections))
+	}
+	totalDownloaded := int64(0)
+	for i, conn := range stats.Connections {
+		t.Logf("Connection %d: Downloaded=%d, Completed=%v", i, conn.Downloaded, conn.Completed)
+		totalDownloaded += conn.Downloaded
+	}
+	if totalDownloaded != test.BuildSize {
+		t.Errorf("Stats() got = %v, want %v", totalDownloaded, test.BuildSize)
+	}
+}
+
+// TestFetcher_DownloadOneTimeURL tests downloading from a URL that can only be accessed once
+// This simulates signed URLs or one-time download links that expire after first use
+func TestFetcher_DownloadOneTimeURL(t *testing.T) {
+	listener := test.StartTestOneTimeServer()
+	defer listener.Close()
+
+	fetcher := buildFetcher()
+	err := fetcher.Resolve(&base.Request{
+		URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
+	}, &base.Options{
+		Name: test.DownloadName,
+		Path: test.Dir,
+		Extra: &http.OptsExtra{
+			Connections: 4, // Try to use multiple connections, but only first should work
+		},
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	err = fetcher.Start()
+	if err != nil {
+		t.Fatal(err)
+	}
+	err = fetcher.Wait()
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	// Verify file content
+	want := test.FileMd5(test.BuildFile)
+	got := test.FileMd5(test.DownloadFile)
+	if want != got {
+		t.Errorf("Download() got = %v, want %v", got, want)
+	}
+}
+
+// TestFetcher_SlowStartExpansion tests slow-start connection expansion edge cases
+// Tests that slow-start expansion reaches exactly maxConns
+// Expansion pattern: 1 -> 2 -> 4 -> 8 -> 16...
+// For max=5: 1 -> 2 -> 4 -> 5 (capped)
+// For max=9: 1 -> 2 -> 4 -> 8 -> 9 (capped)
+func TestFetcher_SlowStartExpansion(t *testing.T) {
+	testCases := []struct {
+		name     string
+		maxConns int
+	}{
+		{"MaxConns5", 5}, // 1->2->4->5
+		{"MaxConns9", 9}, // 1->2->4->8->9
+		{"MaxConns8", 8}, // 1->2->4->8
+	}
+
+	for _, tc := range testCases {
+		tc := tc // capture range variable
+		t.Run(tc.name, func(t *testing.T) {
+			// Clean up any leftover files from previous tests
+			os.Remove(test.DownloadFile)
+
+			// Use 100ns delay per byte for faster test (~10MB/s theoretical)
+			listener := test.StartTestSlowStartServer(100 * time.Nanosecond)
+
+			// Ensure cleanup happens before next subtest
+			cleanup := func() {
+				listener.Close()
+				os.Remove(test.DownloadFile)
+				// Wait for server to fully stop
+				time.Sleep(50 * time.Millisecond)
+			}
+
+			fetcher := buildConfigFetcher(config{
+				Connections: tc.maxConns,
+			})
+
+			err := fetcher.Resolve(&base.Request{
+				URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
+			}, &base.Options{
+				Name: test.DownloadName,
+				Path: test.Dir,
+				Extra: &http.OptsExtra{
+					Connections: tc.maxConns,
+				},
+			})
+			if err != nil {
+				cleanup()
+				t.Fatal(err)
+			}
+
+			err = fetcher.Start()
+			if err != nil {
+				cleanup()
+				t.Fatal(err)
+			}
+
+			err = fetcher.Wait()
+			if err != nil {
+				t.Logf("Wait() returned error: %v", err)
+				cleanup()
+				t.Fatal(err)
+			}
+
+			// Check final connection count equals maxConns exactly
+			stats := fetcher.Stats().(*http.Stats)
+			finalConns := len(stats.Connections)
+
+			// Debug: show connection details and metadata
+			httpFetcher := fetcher.(*Fetcher)
+			t.Logf("Resource: Size=%d, Range=%v", httpFetcher.Meta().Res.Size, httpFetcher.Meta().Res.Range)
+			for i, conn := range stats.Connections {
+				t.Logf("Connection %d: Downloaded=%d, Completed=%v", i, conn.Downloaded, conn.Completed)
+			}
+
+			if finalConns != tc.maxConns {
+				t.Errorf("Expected exactly %d connections, got %d", tc.maxConns, finalConns)
+			}
+
+			// Verify file content before cleanup
+			want := test.FileMd5(test.BuildFile)
+			got := test.FileMd5(test.DownloadFile)
+			if want != got {
+				t.Errorf("Download() got = %v, want %v", got, want)
+			}
+
+			cleanup()
+		})
+	}
+}
+
+// TestFetcher_AsyncPrefetch tests the async prefetch functionality
+// where data is downloaded in background during resolve phase and reused in start
+func TestFetcher_AsyncPrefetch(t *testing.T) {
+	// Test 1: Prefetch completes entire file before Start is called
+	t.Run("PrefetchComplete", func(t *testing.T) {
+		listener := test.StartTestFileServer()
+		defer listener.Close()
+
+		fetcher := buildFetcher()
+		err := fetcher.Resolve(&base.Request{
+			URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
+		}, &base.Options{
+			Name: test.DownloadName,
+			Path: test.Dir,
+			Extra: &http.OptsExtra{
+				Connections: 4,
+			},
+		})
+		if err != nil {
+			t.Fatal(err)
+		}
+
+		// Poll until prefetch completes the entire file (with timeout)
+		timeout := time.After(30 * time.Second)
+		ticker := time.NewTicker(100 * time.Millisecond)
+		defer ticker.Stop()
+	pollLoop:
+		for {
+			select {
+			case <-timeout:
+				t.Fatal("Timeout waiting for prefetch to complete")
+			case <-ticker.C:
+				if fetcher.prefetchSize.Load() >= test.BuildSize {
+					break pollLoop
+				}
+			}
+		}
+
+		prefetchedBefore := fetcher.prefetchSize.Load()
+		t.Logf("Prefetched bytes before Start: %d (%.2f MB)", prefetchedBefore, float64(prefetchedBefore)/(1024*1024))
+
+		// Should have prefetched the entire file
+		if prefetchedBefore != test.BuildSize {
+			t.Errorf("Prefetch should complete entire file, got %d, want %d", prefetchedBefore, test.BuildSize)
+		}
+
+		// Now start the download
+		err = fetcher.Start()
+		if err != nil {
+			t.Fatal(err)
+		}
+
+		// Wait for download to complete
+		err = fetcher.Wait()
+		if err != nil {
+			t.Fatal(err)
+		}
+
+		// Check how much was utilized from prefetch
+		prefetchedUsed := fetcher.resolveDataPos.Load()
+		t.Logf("Prefetched bytes used: %d (%.2f MB)", prefetchedUsed, float64(prefetchedUsed)/(1024*1024))
+
+		// Verify file is correct
+		want := test.FileMd5(test.BuildFile)
+		got := test.FileMd5(test.DownloadFile)
+		if want != got {
+			t.Errorf("Download() got = %v, want %v", got, want)
+		}
+
+		os.Remove(test.DownloadFile)
+	})
+
+	// Test 2: Prefetch only downloads partial data before Start is called
+	t.Run("PrefetchPartial", func(t *testing.T) {
+		// Use slow server with 100 nanosecond delay per byte
+		// This means ~10MB/s speed, so 100ms should download ~1MB
+		listener := test.StartTestSlowStartServer(100 * time.Nanosecond)
+		defer listener.Close()
+
+		fetcher := buildFetcher()
+		err := fetcher.Resolve(&base.Request{
+			URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
+		}, &base.Options{
+			Name: test.DownloadName,
+			Path: test.Dir,
+			Extra: &http.OptsExtra{
+				Connections: 4,
+			},
+		})
+		if err != nil {
+			t.Fatal(err)
+		}
+
+		// Wait only 100ms - should only prefetch a small portion
+		time.Sleep(100 * time.Millisecond)
+
+		prefetchedBefore := fetcher.prefetchSize.Load()
+		t.Logf("Prefetched bytes before Start: %d (%.2f KB)", prefetchedBefore, float64(prefetchedBefore)/1024)
+
+		// Verify we have partial data (not zero, but not complete)
+		if prefetchedBefore == 0 {
+			t.Log("Warning: No data prefetched, may be too slow")
+		}
+		if prefetchedBefore >= test.BuildSize {
+			t.Log("Warning: Prefetch completed entire file, test may not be valid")
+		}
+
+		// Now start the download
+		err = fetcher.Start()
+		if err != nil {
+			t.Fatal(err)
+		}
+
+		// Wait for download to complete
+		err = fetcher.Wait()
+		if err != nil {
+			t.Fatal(err)
+		}
+
+		// Check stats - should have connections that downloaded remaining data
+		stats := fetcher.Stats().(*http.Stats)
+		t.Logf("Final connections: %d", len(stats.Connections))
+
+		prefetchedUsed := fetcher.resolveDataPos.Load()
+		t.Logf("Prefetched bytes used: %d (%.2f KB)", prefetchedUsed, float64(prefetchedUsed)/1024)
+
+		// Verify connections picked up where prefetch left off
+		if len(stats.Connections) > 0 {
+			firstConn := stats.Connections[0]
+			t.Logf("First connection downloaded: %d bytes", firstConn.Downloaded)
+		}
+
+		// Verify file is correct
+		want := test.FileMd5(test.BuildFile)
+		got := test.FileMd5(test.DownloadFile)
+		if want != got {
+			t.Errorf("Download() got = %v, want %v", got, want)
+		}
+
+		os.Remove(test.DownloadFile)
+	})
+}
+
 func TestFetcherManager_ParseName(t *testing.T) {
 	type args struct {
 		u string
@@ -281,15 +831,9 @@ func downloadReady(listener net.Listener, connections int, t *testing.T) fetcher
 }

 func doDownloadReady(f fetcher.Fetcher, listener net.Listener, connections int, t *testing.T) fetcher.Fetcher {
-	err := f.Resolve(&base.Request{
-		URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
-	})
-	if err != nil {
-		t.Fatal(err)
-	}
 	var extra any = nil
 	if connections > 0 {
-		extra = http.OptsExtra{
+		extra = &http.OptsExtra{
 			Connections: connections,
 		}
 	}
@@ -298,7 +842,9 @@ func doDownloadReady(f fetcher.Fetcher, listener net.Listener, connections int,
 		Path:  test.Dir,
 		Extra: extra,
 	}
-	err = f.Create(opts)
+	err := f.Resolve(&base.Request{
+		URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
+	}, opts)
 	if err != nil {
 		t.Fatal(err)
 	}
@@ -323,19 +869,39 @@ func downloadNormal(listener net.Listener, connections int, t *testing.T) {
 }

 func downloadPost(listener net.Listener, connections int, t *testing.T) {
-	fetcher := downloadReady(listener, connections, t)
-	fetcher.Meta().Req.Extra = &http.ReqExtra{
-		Method: "POST",
-		Header: map[string]string{
-			"Authorization": "Bearer 123456",
-		},
-		Body: fmt.Sprintf(`{"name":"%s"}`, test.BuildName),
+	// POST parameters must be set before Resolve since the new design
+	// starts downloading during Resolve phase
+	f := buildFetcher()
+	var extra any = nil
+	if connections > 0 {
+		extra = &http.OptsExtra{
+			Connections: connections,
+		}
 	}
-	err := fetcher.Start()
+	opts := &base.Options{
+		Name:  test.DownloadName,
+		Path:  test.Dir,
+		Extra: extra,
+	}
+	req := &base.Request{
+		URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
+		Extra: &http.ReqExtra{
+			Method: "POST",
+			Header: map[string]string{
+				"Authorization": "Bearer 123456",
+			},
+			Body: fmt.Sprintf(`{"name":"%s"}`, test.BuildName),
+		},
+	}
+	err := f.Resolve(req, opts)
 	if err != nil {
 		t.Fatal(err)
 	}
-	err = fetcher.Wait()
+	err = f.Start()
+	if err != nil {
+		t.Fatal(err)
+	}
+	err = f.Wait()
 	if err != nil {
 		t.Fatal(err)
 	}
@@ -372,14 +938,30 @@ func downloadContinue(listener net.Listener, connections int, t *testing.T) {
 }

 func downloadError(listener net.Listener, connections int, t *testing.T) {
-	fetcher := downloadReady(listener, connections, t)
-	err := fetcher.Start()
+	fetcher := buildFetcher()
+	err := fetcher.Resolve(&base.Request{
+		URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
+	}, &base.Options{
+		Name: test.DownloadName,
+		Path: test.Dir,
+	})
+	// With the new async design, Resolve may succeed (HTTP response received)
+	// but errors occur during async download or Start/Wait
 	if err != nil {
-		t.Fatal(err)
+		// Error detected in Resolve - this is fine
+		return
 	}
+
+	// Resolve succeeded, error should occur during Start/Wait
+	err = fetcher.Start()
+	if err != nil {
+		// Error detected in Start - this is fine
+		return
+	}
+
 	err = fetcher.Wait()
 	if err == nil {
-		t.Errorf("Download() got = %v, want %v", err, nil)
+		t.Errorf("Expected error during download, but got none")
 	}
 }

@@ -0,0 +1,138 @@
+package http
+
+import (
+	"testing"
+)
+
+// TestParseFilenameWithAmpersand tests the fix for filenames containing & character
+// Issue: filenames with & are HTML-encoded as &amp; and then truncated at the semicolon
+func TestParseFilenameWithAmpersand(t *testing.T) {
+	tests := []struct {
+		name        string
+		disposition string
+		want        string
+	}{
+		{
+			name:        "quoted filename with &amp;",
+			disposition: `attachment; filename="查询处理&amp;优化.pptx"`,
+			want:        "查询处理&优化.pptx",
+		},
+		{
+			name:        "unquoted filename with &amp;",
+			disposition: `attachment; filename=test&amp;file.txt`,
+			want:        "test&file.txt",
+		},
+		{
+			name:        "quoted filename with &amp; and extra params",
+			disposition: `attachment; filename="test&amp;file.txt"; charset=utf-8`,
+			want:        "test&file.txt",
+		},
+		{
+			name:        "filename with multiple HTML entities",
+			disposition: `attachment; filename="test&amp;&lt;&gt;.txt"`,
+			want:        "test&<>.txt",
+		},
+		{
+			name:        "normal filename without entities",
+			disposition: `attachment; filename="normal.txt"`,
+			want:        "normal.txt",
+		},
+		{
+			name:        "filename with actual ampersand (no encoding)",
+			disposition: `attachment; filename="test&file.txt"`,
+			want:        "test&file.txt",
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := parseFilename(tt.disposition)
+			if got != tt.want {
+				t.Errorf("parseFilename() = %q, want %q", got, tt.want)
+			}
+		})
+	}
+}
+
+// TestFindParamValueEnd tests the helper function for finding parameter value boundaries
+func TestFindParamValueEnd(t *testing.T) {
+	tests := []struct {
+		name  string
+		value string
+		want  int
+	}{
+		{
+			name:  "quoted value with semicolon inside",
+			value: `"test&amp;file.txt"; charset=utf-8`,
+			want:  19, // Position of semicolon after closing quote
+		},
+		{
+			name:  "quoted value without semicolon after",
+			value: `"test.txt"`,
+			want:  -1,
+		},
+		{
+			name:  "unquoted value with semicolon",
+			value: `test.txt; charset=utf-8`,
+			want:  8,
+		},
+		{
+			name:  "unquoted value without semicolon",
+			value: `test.txt`,
+			want:  -1,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := findParamValueEnd(tt.value)
+			if got != tt.want {
+				t.Errorf("findParamValueEnd() = %d, want %d", got, tt.want)
+			}
+		})
+	}
+}
+
+// TestUnescapeHTMLEntities tests HTML entity unescaping
+func TestUnescapeHTMLEntities(t *testing.T) {
+	tests := []struct {
+		name string
+		in   string
+		want string
+	}{
+		{
+			name: "ampersand",
+			in:   "test&amp;file.txt",
+			want: "test&file.txt",
+		},
+		{
+			name: "less than and greater than",
+			in:   "&lt;test&gt;.txt",
+			want: "<test>.txt",
+		},
+		{
+			name: "quote",
+			in:   "test&quot;file.txt",
+			want: "test\"file.txt",
+		},
+		{
+			name: "multiple entities",
+			in:   "a&amp;b&lt;c&gt;d&quot;e",
+			want: "a&b<c>d\"e",
+		},
+		{
+			name: "no entities",
+			in:   "normal.txt",
+			want: "normal.txt",
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := unescapeHTMLEntities(tt.in)
+			if got != tt.want {
+				t.Errorf("unescapeHTMLEntities() = %q, want %q", got, tt.want)
+			}
+		})
+	}
+}
@@ -0,0 +1,406 @@
+package http
+
+import (
+	"bytes"
+	"context"
+	"crypto/tls"
+	"errors"
+	"fmt"
+	"io"
+	"mime"
+	"net"
+	"net/http"
+	"net/http/cookiejar"
+	"net/url"
+	"strings"
+	"time"
+	"unicode/utf8"
+
+	"github.com/GopeedLab/gopeed/pkg/base"
+	fhttp "github.com/GopeedLab/gopeed/pkg/protocol/http"
+	"github.com/GopeedLab/gopeed/pkg/util"
+	"golang.org/x/text/encoding/simplifiedchinese"
+)
+
+type RequestError struct {
+	Code int
+}
+
+func NewRequestError(code int) *RequestError {
+	return &RequestError{Code: code}
+}
+
+func (re *RequestError) Error() string {
+	return fmt.Sprintf("http request fail, code:%d", re.Code)
+}
+
+func isFailureExemptHTTPCode(code int) bool {
+	if code >= 500 && code <= 599 {
+		return true
+	}
+
+	switch code {
+	case 429, 408, 440, 499:
+		return true
+	default:
+		return false
+	}
+}
+
+func shouldCountHTTPFailure(err error) bool {
+	var re *RequestError
+	if !errors.As(err, &re) {
+		return false
+	}
+
+	return !isFailureExemptHTTPCode(re.Code)
+}
+
+func extractRequestError(err error) *RequestError {
+	var re *RequestError
+	if errors.As(err, &re) {
+		return re
+	}
+
+	return nil
+}
+
+// ============================================================================
+// HTTP Request/Client Building
+// ============================================================================
+
+func (f *Fetcher) buildRequest(ctx context.Context, req *base.Request) (httpReq *http.Request, err error) {
+	var reqUrl string
+	f.redirectLock.Lock()
+	if f.redirectURL != "" {
+		reqUrl = f.redirectURL
+	} else {
+		reqUrl = req.URL
+	}
+	f.redirectLock.Unlock()
+
+	var (
+		method string
+		body   io.Reader
+	)
+	headers := http.Header{}
+	if req.Extra == nil {
+		method = http.MethodGet
+	} else {
+		extra := req.Extra.(*fhttp.ReqExtra)
+		if extra.Method != "" {
+			method = extra.Method
+		} else {
+			method = http.MethodGet
+		}
+		if len(extra.Header) > 0 {
+			for k, v := range extra.Header {
+				headers.Set(k, strings.TrimSpace(v))
+			}
+		}
+		if extra.Body != "" {
+			body = bytes.NewBufferString(extra.Body)
+		}
+	}
+	if _, ok := headers[base.HttpHeaderUserAgent]; !ok {
+		headers.Set(base.HttpHeaderUserAgent, strings.TrimSpace(f.config.UserAgent))
+	}
+
+	if ctx != nil {
+		httpReq, err = http.NewRequestWithContext(ctx, method, reqUrl, body)
+	} else {
+		httpReq, err = http.NewRequest(method, reqUrl, body)
+	}
+	if err != nil {
+		return
+	}
+	httpReq.Header = headers
+	if host := headers.Get(base.HttpHeaderHost); host != "" {
+		httpReq.Host = host
+	}
+	return httpReq, nil
+}
+
+// buildClient creates an HTTP client with the default connection timeout.
+// Used for resolve phase where we don't have connection time data yet.
+func (f *Fetcher) buildClient() *http.Client {
+	return f.buildClientWithTimeout(connectTimeout)
+}
+
+// buildFastFailClient creates an HTTP client with fast-fail timeout.
+// Uses max(minFastFailTimeout, maxConnTime) for fast-fail retry during download phase.
+func (f *Fetcher) buildFastFailClient() *http.Client {
+	maxConn := f.maxConnTime.Load()
+	if maxConn == 0 {
+		// No successful connection yet, use default timeout
+		return f.buildClientWithTimeout(connectTimeout)
+	}
+
+	timeout := maxConn
+	if timeout >= minFastFailTimeout {
+		// If greater than minFastFailTimeout, increase by 50% for safety margin
+		timeout = int64(float64(timeout) * 1.5)
+	} else {
+		timeout = minFastFailTimeout
+	}
+	return f.buildClientWithTimeout(time.Duration(timeout))
+}
+
+// buildClientWithTimeout creates an HTTP client with the specified connection timeout.
+func (f *Fetcher) buildClientWithTimeout(timeout time.Duration) *http.Client {
+	transport := &http.Transport{
+		DialContext: (&net.Dialer{
+			Timeout: timeout,
+		}).DialContext,
+		Proxy: f.ctl.GetProxy(f.meta.Req.Proxy),
+		TLSClientConfig: &tls.Config{
+			InsecureSkipVerify: f.meta.Req.SkipVerifyCert,
+		},
+		TLSHandshakeTimeout: timeout,
+	}
+	jar, _ := cookiejar.New(nil)
+	return &http.Client{
+		Transport: transport,
+		Jar:       jar,
+	}
+}
+
+// ============================================================================
+// Filename Parsing
+// ============================================================================
+
+// parseFilename extracts filename from Content-Disposition header
+func parseFilename(contentDisposition string) string {
+	// Try RFC 5987 extended notation first (filename*=)
+	if filename := parseFilenameExtended(contentDisposition); filename != "" {
+		return filename
+	}
+
+	// Try standard MIME parsing
+	_, params, err := mime.ParseMediaType(contentDisposition)
+	if err == nil {
+		if filename := params["filename"]; filename != "" {
+			return decodeFilenameParam(filename)
+		}
+	}
+
+	// Fallback to manual parsing
+	return parseFilenameFallback(contentDisposition)
+}
+
+// parseFilenameExtended handles RFC 5987 extended notation (filename*=)
+// Format: filename*=charset'language'value (e.g., UTF-8”%E6%B5%8B%E8%AF%95.zip)
+func parseFilenameExtended(cd string) string {
+	lower := strings.ToLower(cd)
+	idx := strings.Index(lower, "filename*=")
+	if idx == -1 {
+		return ""
+	}
+
+	value := cd[idx+len("filename*="):]
+
+	// Find the end of the value using proper quote handling
+	endIdx := findParamValueEnd(value)
+	if endIdx != -1 {
+		value = value[:endIdx]
+	}
+	value = strings.TrimSpace(value)
+
+	// Try charset''encoded format (e.g., UTF-8''%E4%B8%AD%E6%96%87.txt)
+	parts := strings.SplitN(value, "''", 2)
+	if len(parts) == 2 {
+		// Use PathUnescape to handle %2B correctly (should decode to +, not space)
+		decoded, err := url.PathUnescape(parts[1])
+		if err == nil {
+			return decoded
+		}
+	}
+
+	// Try charset'language'encoded format
+	parts = strings.SplitN(value, "'", 3)
+	if len(parts) >= 3 {
+		// Use PathUnescape to handle %2B correctly (should decode to +, not space)
+		decoded, err := url.PathUnescape(parts[2])
+		if err == nil {
+			return decoded
+		}
+	}
+
+	return ""
+}
+
+// decodeFilenameParam decodes filename parameter value
+// Handles HTML entities, MIME encoded-word, URL encoding, and GBK encoding fallback
+func decodeFilenameParam(filename string) string {
+	// First, unescape HTML entities (e.g., &amp; -> &, &lt; -> <, &gt; -> >)
+	// This must be done before other decoding to handle cases where servers
+	// HTML-encode special characters in filenames
+	filename = unescapeHTMLEntities(filename)
+
+	// Handle RFC 2047 encoded word (=?charset?encoding?text?=)
+	if strings.HasPrefix(filename, "=?") {
+		decoder := new(mime.WordDecoder)
+		normalizedFilename := strings.Replace(filename, "UTF8", "UTF-8", 1)
+		if decoded, err := decoder.Decode(normalizedFilename); err == nil {
+			return decoded
+		}
+	}
+
+	// Try URL decoding - use PathUnescape for filenames to handle %2B correctly
+	decoded := util.TryUrlPathUnescape(filename)
+
+	// If not valid UTF-8, try GBK decoding (common for Chinese websites)
+	if !utf8.ValidString(decoded) {
+		if gbkDecoded := tryDecodeGBK(decoded); gbkDecoded != "" {
+			return gbkDecoded
+		}
+	}
+
+	return decoded
+}
+
+// unescapeHTMLEntities unescapes common HTML entities in filenames
+// This handles cases where servers HTML-encode special characters like & to &amp;
+func unescapeHTMLEntities(s string) string {
+	// Common HTML entities that might appear in filenames
+	replacements := map[string]string{
+		"&amp;":  "&",
+		"&lt;":   "<",
+		"&gt;":   ">",
+		"&quot;": "\"",
+		"&#39;":  "'",
+		"&apos;": "'",
+	}
+
+	result := s
+	for entity, char := range replacements {
+		result = strings.ReplaceAll(result, entity, char)
+	}
+	return result
+}
+
+// tryDecodeGBK attempts to decode string as GBK encoding
+func tryDecodeGBK(s string) string {
+	if len(s) == 0 {
+		return ""
+	}
+
+	decoder := simplifiedchinese.GBK.NewDecoder()
+	decoded, err := decoder.Bytes([]byte(s))
+	if err != nil {
+		return ""
+	}
+	result := string(decoded)
+	if utf8.ValidString(result) {
+		return result
+	}
+	return ""
+}
+
+// parseFilenameFallback is a fallback parser for non-standard Content-Disposition
+func parseFilenameFallback(cd string) string {
+	lower := strings.ToLower(cd)
+	idx := strings.Index(lower, "filename=")
+	if idx == -1 {
+		return ""
+	}
+
+	value := cd[idx+len("filename="):]
+
+	// Find the end of the value using proper quote handling
+	endIdx := findParamValueEnd(value)
+	if endIdx != -1 {
+		value = value[:endIdx]
+	}
+	value = strings.TrimSpace(value)
+
+	// Remove surrounding quotes
+	if len(value) >= 2 {
+		if (value[0] == '"' && value[len(value)-1] == '"') ||
+			(value[0] == '\'' && value[len(value)-1] == '\'') {
+			value = value[1 : len(value)-1]
+		}
+	}
+
+	return decodeFilenameParam(value)
+}
+
+// findParamValueEnd finds the end position of a parameter value in a Content-Disposition header.
+// It correctly handles quoted values where semicolons inside quotes should not be treated as delimiters.
+// It also handles HTML entities in unquoted values (e.g., &amp; should not be split at the semicolon).
+// Returns the end index (exclusive) of the value, or -1 if it extends to the end of the string.
+func findParamValueEnd(value string) int {
+	value = strings.TrimSpace(value)
+	if len(value) == 0 {
+		return 0
+	}
+
+	// If the value starts with a quote, find the matching closing quote
+	if value[0] == '"' || value[0] == '\'' {
+		quote := value[0]
+		// Find the closing quote, handling escaped quotes
+		for i := 1; i < len(value); i++ {
+			if value[i] == quote {
+				// Check if it's escaped
+				if i > 0 && value[i-1] == '\\' {
+					continue
+				}
+				// Found closing quote, now look for ; after it
+				remaining := value[i+1:]
+				if semiIdx := strings.Index(remaining, ";"); semiIdx != -1 {
+					return i + 1 + semiIdx
+				}
+				return -1 // No semicolon after closing quote
+			}
+		}
+		// No closing quote found, treat rest of string as value
+		return -1
+	}
+
+	// Unquoted value - find the next semicolon that's not part of an HTML entity
+	// HTML entities have the pattern &...;  (e.g., &amp; &lt; &gt; &quot; &#39;)
+	for i := 0; i < len(value); i++ {
+		if value[i] == ';' {
+			// Check if this semicolon is part of an HTML entity
+			// Look backwards for an & character
+			isEntity := false
+			if i > 0 {
+				// Look for & before this semicolon (within reasonable distance, max 10 chars)
+				for j := i - 1; j >= 0 && j >= i-10; j-- {
+					if value[j] == '&' {
+						// Found &, this semicolon might be part of an HTML entity
+						// Check if there are only alphanumeric or # between & and ;
+						entityChars := value[j+1 : i]
+						if len(entityChars) > 0 && isValidHTMLEntityChars(entityChars) {
+							isEntity = true
+						}
+						break
+					}
+					// If we hit whitespace or another special char, stop looking
+					if value[j] == ' ' || value[j] == '"' || value[j] == '\'' {
+						break
+					}
+				}
+			}
+
+			if !isEntity {
+				return i
+			}
+		}
+	}
+	return -1 // No semicolon, extends to end
+}
+
+// isValidHTMLEntityChars checks if a string contains only valid HTML entity characters
+// (alphanumeric and #, typically for entities like &amp; &lt; &#39; etc.)
+func isValidHTMLEntityChars(s string) bool {
+	if len(s) == 0 {
+		return false
+	}
+	for _, c := range s {
+		if !((c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z') || (c >= '0' && c <= '9') || c == '#') {
+			return false
+		}
+	}
+	return true
+}
@@ -6,8 +6,6 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
-	"github.com/GopeedLab/gopeed/pkg/base"
-	"github.com/armon/go-socks5"
 	"io"
 	"net"
 	"net/http"
@@ -17,6 +15,10 @@ import (
 	"strings"
 	"sync/atomic"
 	"time"
+
+	"github.com/GopeedLab/gopeed/pkg/base"
+	"github.com/armon/go-socks5"
+	"golang.org/x/text/encoding/simplifiedchinese"
 )

 const (
@@ -34,6 +36,10 @@ const (
 	DownloadRename     = "download (1).data"
 	DownloadFile       = Dir + DownloadName
 	DownloadRenameFile = Dir + DownloadRename
+
+	// TestChineseFileName is a common test filename with Chinese characters
+	// Used to test Content-Disposition parsing with various encodings
+	TestChineseFileName = "测试.zip"
 )

 func StartTestFileServer() net.Listener {
@@ -64,6 +70,9 @@ func StartTestSlowFileServer(delay time.Duration) net.Listener {
 func StartTestCustomServer() net.Listener {
 	return startTestServer(func(sl *shutdownListener) http.Handler {
 		mux := http.NewServeMux()
+		mux.HandleFunc("/", func(writer http.ResponseWriter, request *http.Request) {
+			writer.WriteHeader(200)
+		})
 		mux.HandleFunc("/"+BuildName, func(writer http.ResponseWriter, request *http.Request) {
 			file, err := os.Open(BuildFile)
 			if err != nil {
@@ -94,6 +103,150 @@ func StartTestCustomServer() net.Listener {
 			defer file.Close()
 			io.Copy(writer, file)
 		})
+		mux.HandleFunc("/%E6%B5%8B%E8%AF%95.zip", func(writer http.ResponseWriter, request *http.Request) {
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		mux.HandleFunc("/no-encode", func(writer http.ResponseWriter, request *http.Request) {
+			writer.Header().Set("Content-Disposition", "attachment; filename="+TestChineseFileName)
+			writer.Header().Set("Content-Type", "application/octet-stream")
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		// Test endpoint for mixed encoding: filename= with garbled characters (including special chars)
+		// and filename*= with proper UTF-8. This tests the case where mime.ParseMediaType fails
+		// due to invalid characters like <a> tags in the filename.
+		mux.HandleFunc("/mixed-encoding", func(writer http.ResponseWriter, request *http.Request) {
+			// This simulates a server that sends a garbled filename= with special chars that cause
+			// mime.ParseMediaType to fail, plus a proper filename*=UTF-8''...
+			// The filename*= should be preferred and correctly parsed.
+			writer.Header().Set("Content-Disposition", `attachment;filename="garbled<invalid>chars.zip";filename*=UTF-8''%E6%B5%8B%E8%AF%95.zip`)
+			writer.Header().Set("Content-Type", "application/octet-stream")
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		// Test endpoint for filename*= only (RFC 5987 format)
+		mux.HandleFunc("/filename-star", func(writer http.ResponseWriter, request *http.Request) {
+			// URL-encoded TestChineseFileName: 测试.zip -> %E6%B5%8B%E8%AF%95.zip
+			writer.Header().Set("Content-Disposition", `attachment; filename*=UTF-8''%E6%B5%8B%E8%AF%95.zip`)
+			writer.Header().Set("Content-Type", "application/octet-stream")
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		// Test endpoint for GBK-encoded filename (common on Chinese Windows servers)
+		// This simulates the case where Chinese characters are sent as GBK bytes
+		// which appear as garbled characters when interpreted as UTF-8.
+		// For example, "测试" in GBK is [B2 E2 CA D4] which is invalid UTF-8.
+		// Our fix detects invalid UTF-8 and attempts GBK decoding.
+		mux.HandleFunc("/gbk-encoded", func(writer http.ResponseWriter, request *http.Request) {
+			// Encode TestChineseFileName as GBK
+			gbkEncoder := simplifiedchinese.GBK.NewEncoder()
+			gbkBytes, _ := gbkEncoder.Bytes([]byte(TestChineseFileName))
+			// Send GBK bytes directly in filename (simulating broken server behavior)
+			writer.Header().Set("Content-Disposition", `attachment; filename="`+string(gbkBytes)+`"`)
+			writer.Header().Set("Content-Type", "application/octet-stream")
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		// Test endpoint for filenames with plus signs (C++ files, etc.)
+		// This tests that %2B decodes to + not space
+		mux.HandleFunc("/plus-sign-encoded", func(writer http.ResponseWriter, request *http.Request) {
+			// Use filename*= format with %2B encoding for plus signs
+			writer.Header().Set("Content-Disposition", `attachment; filename*=UTF-8''C%2B%2B%20%20Primer%20%20Plus.mobi`)
+			writer.Header().Set("Content-Type", "application/octet-stream")
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		// Test endpoint for plus sign in URL path
+		mux.HandleFunc("/C%2B%2B%20Primer.txt", func(writer http.ResponseWriter, request *http.Request) {
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		// Test endpoint for filename with HTML-encoded ampersand (&amp;)
+		// This tests the case from the bug report where filenames containing & are
+		// HTML-encoded as &amp; by the server, causing truncation at the semicolon.
+		// Example: "查询处理&优化.pptx" -> "查询处理&amp;优化.pptx"
+		mux.HandleFunc("/ampersand-encoded", func(writer http.ResponseWriter, request *http.Request) {
+			// Simulate server sending filename with HTML-encoded ampersand
+			writer.Header().Set("Content-Disposition", `attachment; filename="查询处理&amp;优化.pptx"`)
+			writer.Header().Set("Content-Type", "application/octet-stream")
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		// Test endpoint for unquoted filename with HTML-encoded ampersand
+		// Some servers might send unquoted filenames with HTML entities
+		mux.HandleFunc("/ampersand-unquoted", func(writer http.ResponseWriter, request *http.Request) {
+			writer.Header().Set("Content-Disposition", `attachment; filename=test&amp;file.txt`)
+			writer.Header().Set("Content-Type", "application/octet-stream")
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		// Test 403 Forbidden endpoint
+		mux.HandleFunc("/forbidden", func(writer http.ResponseWriter, request *http.Request) {
+			writer.WriteHeader(403)
+		})
+		return mux
+	})
+}
+
+// StartTestHostHeaderServer starts a server that validates the Host header
+// Returns 400 Bad Request if the Host header value equals "test"
+func StartTestHostHeaderServer() net.Listener {
+	return startTestServer(func(sl *shutdownListener) http.Handler {
+		mux := http.NewServeMux()
+		mux.HandleFunc("/", func(writer http.ResponseWriter, request *http.Request) {
+			// If the Host header is "test", return 400 (simulating server that validates Host)
+			if request.Host == "test" {
+				writer.WriteHeader(400)
+				writer.Write([]byte("Bad Request: Invalid Host header"))
+				return
+			}
+			writer.WriteHeader(200)
+			writer.Write([]byte("OK"))
+		})
 		return mux
 	})
 }
@@ -143,23 +296,100 @@ func StartTestPostServer() net.Listener {
 }

 func StartTestErrorServer() net.Listener {
-	counter := 0
 	return startTestServer(func(sl *shutdownListener) http.Handler {
 		mux := http.NewServeMux()
 		mux.HandleFunc("/"+BuildName, func(writer http.ResponseWriter, request *http.Request) {
-			counter++
-			if counter != 1 {
-				writer.WriteHeader(500)
-				return
-			}
+			// Always return 404 error to test error handling
+			writer.WriteHeader(404)
+			return
 		})
 		return mux
 	})
 }

+// StartTestOneTimeServer creates a server where the URL can only be downloaded once
+// The first non-probe request succeeds, all subsequent requests return 404
+// This simulates one-time download URLs (e.g., signed URLs that expire after first use)
+func StartTestOneTimeServer() net.Listener {
+	var accessed atomic.Bool
+
+	return startTestServer(func(sl *shutdownListener) http.Handler {
+		mux := http.NewServeMux()
+		mux.HandleFunc("/"+BuildName, func(writer http.ResponseWriter, request *http.Request) {
+			// First full download request succeeds, subsequent requests fail
+			if accessed.Swap(true) {
+				writer.WriteHeader(404)
+				return
+			}
+
+			// First request - return full file without Range support
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				return
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
+		return mux
+	})
+}
+
+// StartTestSlowStartServer creates a server with configurable delay per request
+// This allows testing slow-start connection expansion to reach max connections
+func StartTestSlowStartServer(delayPerByte time.Duration) net.Listener {
+	return startTestServer(func(sl *shutdownListener) http.Handler {
+		mux := http.NewServeMux()
+		mux.HandleFunc("/"+BuildName, func(writer http.ResponseWriter, request *http.Request) {
+			rangeFileHandle(
+				writer,
+				request,
+				nil,
+				func(file *os.File, n int64) {
+					slowCopyNWithDelay(sl, writer, file, n, delayPerByte)
+				},
+			)
+		})
+		return mux
+	})
+}
+
+// slowCopyNWithDelay copies n bytes from src to dst with a delay per byte
+func slowCopyNWithDelay(sl *shutdownListener, dst io.Writer, src io.Reader, n int64, delayPerByte time.Duration) {
+	buf := make([]byte, 32*1024)
+	remaining := n
+	for remaining > 0 {
+		if sl.isShutdown {
+			return
+		}
+		toRead := int64(len(buf))
+		if toRead > remaining {
+			toRead = remaining
+		}
+		nr, er := src.Read(buf[:toRead])
+		if nr > 0 {
+			nw, ew := dst.Write(buf[0:nr])
+			if nw > 0 {
+				remaining -= int64(nw)
+				// Add delay based on bytes written
+				if delayPerByte > 0 {
+					time.Sleep(delayPerByte * time.Duration(nw))
+				}
+			}
+			if ew != nil {
+				break
+			}
+		}
+		if er != nil {
+			break
+		}
+	}
+}
+
 // StartTestLimitServer connections limit server
 func StartTestLimitServer(maxConnections int32, delay int64) net.Listener {
 	var connections atomic.Int32
+	var slowOnce atomic.Bool

 	return startTestServer(func(sl *shutdownListener) http.Handler {
 		mux := http.NewServeMux()
@@ -173,67 +403,200 @@ func StartTestLimitServer(maxConnections int32, delay int64) net.Listener {
 				return
 			}

-			r := request.Header.Get("Range")
-			if r == "" {
-				writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
-				writer.WriteHeader(200)
-				(writer.(http.Flusher)).Flush()
-
-				file, err := os.Open(BuildFile)
-				if err != nil {
-					panic(err)
-				}
-				defer file.Close()
-				slowCopy(sl, writer, file, delay)
-			} else {
-				// split range
-				s := strings.Split(r, "=")
-				if len(s) != 2 {
-					writer.WriteHeader(400)
-					return
-				}
-				s = strings.Split(s[1], "-")
-				if len(s) != 2 {
-					writer.WriteHeader(400)
-					return
-				}
-				start, err := strconv.ParseInt(s[0], 10, 64)
-				if err != nil {
-					writer.WriteHeader(400)
-					return
-				}
-				end, err := strconv.ParseInt(s[1], 10, 64)
-				if err != nil {
-					writer.WriteHeader(400)
-					return
-				}
-				if start < 0 || end < 0 || start > end {
-					writer.WriteHeader(400)
-					return
-				}
-				if end >= BuildSize {
-					end = BuildSize - 1
-				}
-				writer.Header().Set("Content-Length", fmt.Sprintf("%d", end-start+1))
-				writer.Header().Set("Content-Range", fmt.Sprintf("bytes %d-%d/%d", start, end, BuildSize))
-				writer.Header().Set("Accept-Ranges", "bytes")
-				writer.WriteHeader(206)
-				(writer.(http.Flusher)).Flush()
-
-				file, err := os.Open(BuildFile)
-				if err != nil {
-					writer.WriteHeader(500)
-					return
-				}
-				defer file.Close()
-				file.Seek(start, 0)
-				slowCopyN(sl, writer, file, end-start+1, delay)
-			}
+			// First request intentionally delays the first write to trigger a single read timeout,
+			// subsequent requests respond at normal speed.
+			useInitialDelay := delay > 0 && !slowOnce.Swap(true)
+			rangeFileHandle(
+				writer,
+				request,
+				nil,
+				func(file *os.File, n int64) {
+					if useInitialDelay {
+						slowCopyAfterDelay(sl, writer, file, n, delay)
+						return
+					}
+					slowCopyN(sl, writer, file, n, 0)
+				},
+			)
 		})
 		return mux
 	})
 }

+// StartTestTimeoutOnceServer creates a server that times out on first request, then works normally
+func StartTestTimeoutOnceServer(delay int64) net.Listener {
+	var timeoutOnce atomic.Bool
+
+	return startTestServer(func(sl *shutdownListener) http.Handler {
+		mux := http.NewServeMux()
+		mux.HandleFunc("/"+BuildName, func(writer http.ResponseWriter, request *http.Request) {
+			// First request delays to trigger timeout, subsequent requests respond normally
+			useInitialDelay := delay > 0 && !timeoutOnce.Swap(true)
+			rangeFileHandle(
+				writer,
+				request,
+				nil,
+				func(file *os.File, n int64) {
+					if useInitialDelay {
+						slowCopyAfterDelay(sl, writer, file, n, delay)
+						return
+					}
+					slowCopyN(sl, writer, file, n, 0)
+				},
+			)
+		})
+		return mux
+	})
+}
+
+// StartTestTemporary500Server creates a server that returns 500 for a duration, then recovers
+// Uses slow transfer to ensure the file isn't fully downloaded during resolve phase
+func StartTestTemporary500Server(errorDuration time.Duration) net.Listener {
+	startTime := time.Now()
+	var requestCount atomic.Int32
+
+	return startTestServer(func(sl *shutdownListener) http.Handler {
+		mux := http.NewServeMux()
+		mux.HandleFunc("/"+BuildName, func(writer http.ResponseWriter, request *http.Request) {
+			reqNum := requestCount.Add(1)
+
+			// First request (Resolve) succeeds with slow transfer to prevent full download
+			// Subsequent requests return 500 for the specified duration, then recover
+			if reqNum == 1 {
+				// Slow transfer for resolve: 50 microsecond per byte (~20MB/s)
+				// This ensures resolve doesn't complete the full 200MB file
+				rangeFileHandle(
+					writer,
+					request,
+					nil,
+					func(file *os.File, n int64) {
+						slowCopyNWithDelay(sl, writer, file, n, 50*time.Microsecond)
+					},
+				)
+				return
+			}
+
+			// Subsequent requests: return 500 for errorDuration, then normal
+			if time.Since(startTime) < errorDuration {
+				writer.WriteHeader(500)
+				writer.Write([]byte("Internal Server Error"))
+				return
+			}
+
+			rangeFileHandle(
+				writer,
+				request,
+				nil,
+				func(file *os.File, n int64) {
+					slowCopyN(sl, writer, file, n, 0)
+				},
+			)
+		})
+		return mux
+	})
+}
+
+// StartTestRangeBugServer simulate bug server:
+// Don't follow Range request rules, always return more data than range, e.g. Range: bytes=0-100, return 150 bytes
+func StartTestRangeBugServer() net.Listener {
+	return startTestServer(func(sl *shutdownListener) http.Handler {
+		mux := http.NewServeMux()
+		mux.HandleFunc("/"+BuildName, func(writer http.ResponseWriter, request *http.Request) {
+			rangeFileHandle(
+				writer,
+				request,
+				func(end int64) int64 {
+					var bugEnd = end
+					if end != 0 {
+						bugEnd = end + 50
+						if bugEnd >= BuildSize {
+							bugEnd = end
+						}
+					}
+					return bugEnd
+				},
+				func(file *os.File, n int64) {
+					io.CopyN(writer, file, n)
+				},
+			)
+		})
+		return mux
+	})
+}
+
+func rangeFileHandle(writer http.ResponseWriter, request *http.Request, modifyEnd func(end int64) int64, iocpN func(file *os.File, n int64)) {
+	r := request.Header.Get("Range")
+
+	// If no Range header, return full file with Accept-Ranges header
+	if r == "" {
+		// Open file first to ensure it exists
+		file, err := os.Open(BuildFile)
+		if err != nil {
+			writer.WriteHeader(500)
+			return
+		}
+		defer file.Close()
+
+		writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+		writer.Header().Set("Accept-Ranges", "bytes")
+		writer.WriteHeader(200)
+		(writer.(http.Flusher)).Flush()
+
+		iocpN(file, BuildSize)
+		return
+	}
+
+	// split range
+	s := strings.Split(r, "=")
+	if len(s) != 2 {
+		writer.WriteHeader(400)
+		return
+	}
+	s = strings.Split(s[1], "-")
+	if len(s) != 2 {
+		writer.WriteHeader(400)
+		return
+	}
+	start, err := strconv.ParseInt(s[0], 10, 64)
+	if err != nil {
+		writer.WriteHeader(400)
+		return
+	}
+	end, err := strconv.ParseInt(s[1], 10, 64)
+	if err != nil {
+		writer.WriteHeader(400)
+		return
+	}
+	if start < 0 || end < 0 || start > end {
+		writer.WriteHeader(400)
+		return
+	}
+	if end >= BuildSize {
+		end = BuildSize - 1
+	}
+
+	if modifyEnd != nil {
+		end = modifyEnd(end)
+	}
+
+	// Open file before sending headers to ensure it exists
+	file, err := os.Open(BuildFile)
+	if err != nil {
+		writer.WriteHeader(500)
+		return
+	}
+	defer file.Close()
+	file.Seek(start, 0)
+
+	writer.Header().Set("Content-Length", fmt.Sprintf("%d", end-start+1))
+	writer.Header().Set("Content-Range", fmt.Sprintf("bytes %d-%d/%d", start, end, BuildSize))
+	writer.Header().Set("Accept-Ranges", "bytes")
+	writer.WriteHeader(206)
+	(writer.(http.Flusher)).Flush()
+
+	iocpN(file, end-start+1)
+}
+
 // slowCopyN copies n bytes from src to dst, speed limit is bytes per second
 func slowCopy(sl *shutdownListener, dst io.Writer, src io.Reader, delay int64) (written int64, err error) {
 	buf := make([]byte, 32*1024)
@@ -281,6 +644,14 @@ func slowCopyN(sl *shutdownListener, dst io.Writer, src io.Reader, n int64, dela
 	return
 }

+// slowCopyAfterDelay sleeps once before performing a normal copy to simulate a single timeout.
+func slowCopyAfterDelay(sl *shutdownListener, dst io.Writer, src io.Reader, n int64, delay int64) (written int64, err error) {
+	if delay > 0 {
+		time.Sleep(time.Millisecond * time.Duration(delay))
+	}
+	return slowCopyN(sl, dst, src, n, 0)
+}
+
 func startTestServer(serverHandle func(sl *shutdownListener) http.Handler) net.Listener {
 	listener, err := net.Listen("tcp", "127.0.0.1:0")
 	if err != nil {
@@ -325,8 +696,9 @@ type shutdownListener struct {
 }

 func (c *shutdownListener) Close() error {
-	c.isShutdown = true
+	// Shutdown server first (waits for in-flight requests), then set isShutdown
 	closeErr := c.server.Shutdown(context.Background())
+	c.isShutdown = true
 	if err := ifExistAndRemove(BuildFile); err != nil {
 		fmt.Println(err)
 	}
@@ -2,13 +2,14 @@ package base

 import (
 	"fmt"
-	"github.com/GopeedLab/gopeed/pkg/util"
-	"github.com/mattn/go-ieproxy"
-	"golang.org/x/exp/slices"
 	"net/http"
 	"net/url"
 	"sync"
 	"time"
+
+	"github.com/GopeedLab/gopeed/pkg/util"
+	"github.com/mattn/go-ieproxy"
+	"golang.org/x/exp/slices"
 )

 // Request download request
@@ -148,7 +149,7 @@ func ParseReqExtra[E any](req *Request) error {
 	return nil
 }

-func ParseOptsExtra[E any](opts *Options) error {
+func ParseOptExtra[E any](opts *Options) error {
 	if opts.Extra == nil {
 		return nil
 	}
@@ -163,15 +164,29 @@ func ParseOptsExtra[E any](opts *Options) error {
 	return nil
 }

+type CreateTaskBatch struct {
+	Reqs []*CreateTaskBatchItem `json:"reqs"`
+	Opts *Options               `json:"opts"`
+}
+
+type CreateTaskBatchItem struct {
+	Req  *Request `json:"req"`
+	Opts *Options `json:"opts"`
+}
+
 // DownloaderStoreConfig is the config that can restore the downloader.
 type DownloaderStoreConfig struct {
 	FirstLoad bool `json:"-"` // FirstLoad is the flag that the config is first time init and not from store

-	DownloadDir    string                 `json:"downloadDir"`    // DownloadDir is the default directory to save the downloaded files
-	MaxRunning     int                    `json:"maxRunning"`     // MaxRunning is the max running download count
-	ProtocolConfig map[string]any         `json:"protocolConfig"` // ProtocolConfig is special config for each protocol
-	Extra          map[string]any         `json:"extra"`
-	Proxy          *DownloaderProxyConfig `json:"proxy"`
+	DownloadDir                string                 `json:"downloadDir"`    // DownloadDir is the default directory to save the downloaded files
+	MaxRunning                 int                    `json:"maxRunning"`     // MaxRunning is the max running download count
+	ProtocolConfig             map[string]any         `json:"protocolConfig"` // ProtocolConfig is special config for each protocol
+	Extra                      map[string]any         `json:"extra"`
+	Proxy                      *DownloaderProxyConfig `json:"proxy"`
+	Webhook                    *WebhookConfig         `json:"webhook"`                    // Webhook is the webhook configuration
+	AutoTorrent                *AutoTorrentConfig     `json:"autoTorrent"`                // AutoTorrent is the auto torrent task creation configuration
+	Archive                    *ArchiveConfig         `json:"archive"`                    // Archive is the archive extraction configuration
+	AutoDeleteMissingFileTasks bool                   `json:"autoDeleteMissingFileTasks"` // AutoDeleteMissingFileTasks enables automatic deletion of tasks with missing files
 }

 func (cfg *DownloaderStoreConfig) Init() *DownloaderStoreConfig {
@@ -184,6 +199,21 @@ func (cfg *DownloaderStoreConfig) Init() *DownloaderStoreConfig {
 	if cfg.Proxy == nil {
 		cfg.Proxy = &DownloaderProxyConfig{}
 	}
+	if cfg.Webhook == nil {
+		cfg.Webhook = &WebhookConfig{}
+	}
+	if cfg.AutoTorrent == nil {
+		cfg.AutoTorrent = &AutoTorrentConfig{
+			Enable:              false,
+			DeleteAfterDownload: false,
+		}
+	}
+	if cfg.Archive == nil {
+		cfg.Archive = &ArchiveConfig{
+			AutoExtract:        false,
+			DeleteAfterExtract: false,
+		}
+	}
 	return cfg
 }

@@ -206,9 +236,36 @@ func (cfg *DownloaderStoreConfig) Merge(beforeCfg *DownloaderStoreConfig) *Downl
 	if cfg.Proxy == nil {
 		cfg.Proxy = beforeCfg.Proxy
 	}
+	if cfg.Webhook == nil {
+		cfg.Webhook = beforeCfg.Webhook
+	}
+	if cfg.AutoTorrent == nil {
+		cfg.AutoTorrent = beforeCfg.AutoTorrent
+	}
+	if cfg.Archive == nil {
+		cfg.Archive = beforeCfg.Archive
+	}
 	return cfg
 }

+// WebhookConfig is the webhook configuration
+type WebhookConfig struct {
+	Enable bool     `json:"enable"` // Enable is the flag to enable/disable webhooks
+	URLs   []string `json:"urls"`   // URLs is the list of webhook URLs
+}
+
+// AutoTorrentConfig is the auto torrent task creation configuration
+type AutoTorrentConfig struct {
+	Enable              bool `json:"enable"`              // Enable enables automatic BT task creation when downloading .torrent files
+	DeleteAfterDownload bool `json:"deleteAfterDownload"` // DeleteAfterDownload deletes the .torrent file after BT task creation
+}
+
+// ArchiveConfig is the archive extraction configuration
+type ArchiveConfig struct {
+	AutoExtract        bool `json:"autoExtract"`        // AutoExtract enables automatic extraction of archives after download
+	DeleteAfterExtract bool `json:"deleteAfterExtract"` // DeleteAfterExtract deletes the archive after successful extraction
+}
+
 type DownloaderProxyConfig struct {
 	Enable bool `json:"enable"`
 	// System is the flag that use system proxy
@@ -18,6 +18,15 @@ func TestDownloaderStoreConfig_Init(t *testing.T) {
 				MaxRunning:     5,
 				ProtocolConfig: map[string]any{},
 				Proxy:          &DownloaderProxyConfig{},
+				Webhook:        &WebhookConfig{},
+				AutoTorrent: &AutoTorrentConfig{
+					Enable:              false,
+					DeleteAfterDownload: false,
+				},
+				Archive: &ArchiveConfig{
+					AutoExtract:        false,
+					DeleteAfterExtract: false,
+				},
 			},
 		},
 		{
@@ -29,6 +38,15 @@ func TestDownloaderStoreConfig_Init(t *testing.T) {
 				MaxRunning:     10,
 				ProtocolConfig: map[string]any{},
 				Proxy:          &DownloaderProxyConfig{},
+				Webhook:        &WebhookConfig{},
+				AutoTorrent: &AutoTorrentConfig{
+					Enable:              false,
+					DeleteAfterDownload: false,
+				},
+				Archive: &ArchiveConfig{
+					AutoExtract:        false,
+					DeleteAfterExtract: false,
+				},
 			},
 		},
 		{
@@ -43,7 +61,16 @@ func TestDownloaderStoreConfig_Init(t *testing.T) {
 				ProtocolConfig: map[string]any{
 					"key": "value",
 				},
-				Proxy: &DownloaderProxyConfig{},
+				Proxy:   &DownloaderProxyConfig{},
+				Webhook: &WebhookConfig{},
+				AutoTorrent: &AutoTorrentConfig{
+					Enable:              false,
+					DeleteAfterDownload: false,
+				},
+				Archive: &ArchiveConfig{
+					AutoExtract:        false,
+					DeleteAfterExtract: false,
+				},
 			},
 		},
 		{
@@ -59,6 +86,61 @@ func TestDownloaderStoreConfig_Init(t *testing.T) {
 				Proxy: &DownloaderProxyConfig{
 					Enable: true,
 				},
+				Webhook: &WebhookConfig{},
+				AutoTorrent: &AutoTorrentConfig{
+					Enable:              false,
+					DeleteAfterDownload: false,
+				},
+				Archive: &ArchiveConfig{
+					AutoExtract:        false,
+					DeleteAfterExtract: false,
+				},
+			},
+		},
+		{
+			"Init AutoTorrent",
+			&DownloaderStoreConfig{
+				AutoTorrent: &AutoTorrentConfig{
+					Enable:              true,
+					DeleteAfterDownload: true,
+				},
+			},
+			&DownloaderStoreConfig{
+				MaxRunning:     5,
+				ProtocolConfig: map[string]any{},
+				Proxy:          &DownloaderProxyConfig{},
+				Webhook:        &WebhookConfig{},
+				AutoTorrent: &AutoTorrentConfig{
+					Enable:              true,
+					DeleteAfterDownload: true,
+				},
+				Archive: &ArchiveConfig{
+					AutoExtract:        false,
+					DeleteAfterExtract: false,
+				},
+			},
+		},
+		{
+			"Init Archive",
+			&DownloaderStoreConfig{
+				Archive: &ArchiveConfig{
+					AutoExtract:        true,
+					DeleteAfterExtract: false,
+				},
+			},
+			&DownloaderStoreConfig{
+				MaxRunning:     5,
+				ProtocolConfig: map[string]any{},
+				Proxy:          &DownloaderProxyConfig{},
+				Webhook:        &WebhookConfig{},
+				AutoTorrent: &AutoTorrentConfig{
+					Enable:              false,
+					DeleteAfterDownload: false,
+				},
+				Archive: &ArchiveConfig{
+					AutoExtract:        true,
+					DeleteAfterExtract: false,
+				},
 			},
 		},
 	}
@@ -71,6 +153,9 @@ func TestDownloaderStoreConfig_Init(t *testing.T) {
 				ProtocolConfig: tt.fields.ProtocolConfig,
 				Extra:          tt.fields.Extra,
 				Proxy:          tt.fields.Proxy,
+				Webhook:        tt.fields.Webhook,
+				AutoTorrent:    tt.fields.AutoTorrent,
+				Archive:        tt.fields.Archive,
 			}
 			if got := cfg.Init(); !reflect.DeepEqual(got, tt.want) {
 				t.Errorf("Init() = %v, want %v", got, tt.want)
@@ -245,6 +330,84 @@ func TestDownloaderStoreConfig_Merge(t *testing.T) {
 				},
 			},
 		},
+		{
+			"Merge AutoTorrent No Override",
+			&DownloaderStoreConfig{
+				AutoTorrent: &AutoTorrentConfig{
+					Enable: true,
+				},
+			},
+			args{
+				beforeCfg: &DownloaderStoreConfig{
+					AutoTorrent: &AutoTorrentConfig{
+						Enable:              false,
+						DeleteAfterDownload: false,
+					},
+				},
+			},
+			&DownloaderStoreConfig{
+				AutoTorrent: &AutoTorrentConfig{
+					Enable: true,
+				},
+			},
+		},
+		{
+			"Merge AutoTorrent Override",
+			&DownloaderStoreConfig{},
+			args{
+				beforeCfg: &DownloaderStoreConfig{
+					AutoTorrent: &AutoTorrentConfig{
+						Enable:              true,
+						DeleteAfterDownload: true,
+					},
+				},
+			},
+			&DownloaderStoreConfig{
+				AutoTorrent: &AutoTorrentConfig{
+					Enable:              true,
+					DeleteAfterDownload: true,
+				},
+			},
+		},
+		{
+			"Merge Archive No Override",
+			&DownloaderStoreConfig{
+				Archive: &ArchiveConfig{
+					AutoExtract: true,
+				},
+			},
+			args{
+				beforeCfg: &DownloaderStoreConfig{
+					Archive: &ArchiveConfig{
+						AutoExtract:        false,
+						DeleteAfterExtract: false,
+					},
+				},
+			},
+			&DownloaderStoreConfig{
+				Archive: &ArchiveConfig{
+					AutoExtract: true,
+				},
+			},
+		},
+		{
+			"Merge Archive Override",
+			&DownloaderStoreConfig{},
+			args{
+				beforeCfg: &DownloaderStoreConfig{
+					Archive: &ArchiveConfig{
+						AutoExtract:        false,
+						DeleteAfterExtract: false,
+					},
+				},
+			},
+			&DownloaderStoreConfig{
+				Archive: &ArchiveConfig{
+					AutoExtract:        false,
+					DeleteAfterExtract: false,
+				},
+			},
+		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
@@ -255,6 +418,9 @@ func TestDownloaderStoreConfig_Merge(t *testing.T) {
 				ProtocolConfig: tt.fields.ProtocolConfig,
 				Extra:          tt.fields.Extra,
 				Proxy:          tt.fields.Proxy,
+				Webhook:        tt.fields.Webhook,
+				AutoTorrent:    tt.fields.AutoTorrent,
+				Archive:        tt.fields.Archive,
 			}
 			if got := cfg.Merge(tt.args.beforeCfg); !reflect.DeepEqual(got, tt.want) {
 				t.Errorf("Merge() = %v, want %v", got, tt.want)
@@ -2,15 +2,7 @@ package download

 import (
 	"errors"
-	"github.com/GopeedLab/gopeed/internal/controller"
-	"github.com/GopeedLab/gopeed/internal/fetcher"
-	"github.com/GopeedLab/gopeed/internal/logger"
-	"github.com/GopeedLab/gopeed/pkg/base"
-	"github.com/GopeedLab/gopeed/pkg/protocol/http"
-	"github.com/GopeedLab/gopeed/pkg/util"
-	gonanoid "github.com/matoous/go-nanoid/v2"
-	"github.com/rs/zerolog"
-	"github.com/rs/zerolog/pkgerrors"
+	"fmt"
 	"math"
 	gohttp "net/http"
 	"net/url"
@@ -22,6 +14,16 @@ import (
 	"sync"
 	"sync/atomic"
 	"time"
+
+	"github.com/GopeedLab/gopeed/internal/controller"
+	"github.com/GopeedLab/gopeed/internal/fetcher"
+	"github.com/GopeedLab/gopeed/internal/logger"
+	"github.com/GopeedLab/gopeed/pkg/base"
+	"github.com/GopeedLab/gopeed/pkg/protocol/http"
+	"github.com/GopeedLab/gopeed/pkg/util"
+	gonanoid "github.com/matoous/go-nanoid/v2"
+	"github.com/rs/zerolog"
+	"github.com/rs/zerolog/pkgerrors"
 )

 const (
@@ -44,6 +46,24 @@ var (

 type Listener func(event *Event)

+// ExtractStatus represents the current status of archive extraction
+type ExtractStatus string
+
+const (
+	// ExtractStatusNone indicates extraction has not started
+	ExtractStatusNone ExtractStatus = ""
+	// ExtractStatusQueued indicates extraction is waiting in the queue
+	ExtractStatusQueued ExtractStatus = "queued"
+	// ExtractStatusWaitingParts indicates waiting for other multi-part archive parts to complete
+	ExtractStatusWaitingParts ExtractStatus = "waitingParts"
+	// ExtractStatusExtracting indicates extraction is in progress
+	ExtractStatusExtracting ExtractStatus = "extracting"
+	// ExtractStatusDone indicates extraction completed successfully
+	ExtractStatusDone ExtractStatus = "done"
+	// ExtractStatusError indicates extraction failed
+	ExtractStatusError ExtractStatus = "error"
+)
+
 type Progress struct {
 	// Total download time(ns)
 	Used int64 `json:"used"`
@@ -55,6 +75,16 @@ type Progress struct {
 	UploadSpeed int64 `json:"uploadSpeed"`
 	// Uploaded size(bytes)
 	Uploaded int64 `json:"uploaded"`
+	// ExtractStatus indicates the current status of archive extraction
+	ExtractStatus ExtractStatus `json:"extractStatus"`
+	// ExtractProgress is the percentage of extraction completed (0-100)
+	ExtractProgress int `json:"extractProgress"`
+	// MultiPartBaseName is set for multi-part archives to group related parts
+	MultiPartBaseName string `json:"multiPartBaseName,omitempty"`
+	// MultiPartNumber is the part number for multi-part archives (1-indexed)
+	MultiPartNumber int `json:"multiPartNumber,omitempty"`
+	// MultiPartIsFirst indicates if this is the first part of a multi-part archive
+	MultiPartIsFirst bool `json:"multiPartIsFirst,omitempty"`
 }

 type Downloader struct {
@@ -74,6 +104,10 @@ type Downloader struct {
 	checkDuplicateLock *sync.Mutex
 	closed             atomic.Bool

+	// claimedExtractions tracks which multi-part archives have been claimed for extraction
+	// Key: fullBaseName (e.g., "/path/archive.7z"), Value: taskID that claimed it
+	claimedExtractions sync.Map
+
 	extensions []*Extension
 }

@@ -148,6 +182,7 @@ func (d *Downloader) Setup() error {
 				tasks = append(tasks[:i], tasks[i+1:]...)
 				continue
 			}
+			d.assignFetcherManager(task)
 			initTask(task)
 			if task.Status != base.DownloadStatusDone && task.Status != base.DownloadStatusError {
 				task.Status = base.DownloadStatusPause
@@ -170,6 +205,9 @@ func (d *Downloader) Setup() error {
 	}
 	d.extensions = extensions

+	// Auto-cleanup non-existing tasks on startup
+	d.cleanupNonExistingTasks()
+
 	// handle upload
 	go func() {
 		for _, task := range d.tasks {
@@ -208,7 +246,7 @@ func (d *Downloader) Setup() error {
 						if task.Status == base.DownloadStatusRunning {
 							downloadDataChanged = current != task.Progress.Downloaded
 							task.Progress.Used = task.timer.Used()
-							task.Progress.Speed = task.calcSpeed(task.speedArr, current-task.Progress.Downloaded, tick)
+							task.Progress.Speed = task.updateSpeed(current-task.Progress.Downloaded, tick)
 							task.Progress.Downloaded = current
 						}

@@ -217,7 +255,7 @@ func (d *Downloader) Setup() error {
 							uploader := task.fetcher.(fetcher.Uploader)
 							currentUploaded := uploader.UploadedBytes()
 							uploadDataChanged = currentUploaded != task.Progress.Uploaded
-							task.Progress.UploadSpeed = task.calcSpeed(task.uploadSpeedArr, currentUploaded-task.Progress.Uploaded, tick)
+							task.Progress.UploadSpeed = task.updateUploadSpeed(currentUploaded-task.Progress.Uploaded, tick)
 							task.Progress.Uploaded = currentUploaded
 						}
 						d.emit(EventKeyProgress, task)
@@ -236,6 +274,51 @@ func (d *Downloader) Setup() error {
 	return nil
 }

+// cleanupNonExistingTasks checks for tasks whose files are missing on disk
+// and removes them if the AutoCleanMissingFiles config is enabled.
+func (d *Downloader) cleanupNonExistingTasks() {
+	cfg, err := d.GetConfig()
+	if err != nil {
+		return
+	}
+
+	// If the feature is disabled, do nothing
+	if !cfg.AutoDeleteMissingFileTasks {
+		return
+	}
+
+	var tasksToDelete []string
+
+	for _, task := range d.tasks {
+		if task.Meta == nil || task.Meta.Res == nil {
+			continue
+		}
+
+		var targetPath string
+		// Determine if it is a single file or a directory (multi-file torrent)
+		if task.Meta.Res.Name != "" {
+			targetPath = task.Meta.FolderPath()
+		} else {
+			targetPath = task.Meta.SingleFilepath()
+		}
+
+		// Skip if path is empty
+		if targetPath == "" {
+			continue
+		}
+
+		// Check if file/folder exists
+		if _, err := os.Stat(targetPath); os.IsNotExist(err) {
+			d.Logger.Info().Msgf("Auto-cleanup: task %s file not found at %s, removing from list", task.ID, targetPath)
+			tasksToDelete = append(tasksToDelete, task.ID)
+		}
+	}
+
+	if len(tasksToDelete) > 0 {
+		d.Delete(&TaskFilter{IDs: tasksToDelete}, false)
+	}
+}
+
 func (d *Downloader) parseFm(url string) (fetcher.FetcherManager, error) {
 	for _, fm := range d.cfg.FetchManagers {
 		for _, filter := range fm.Filters() {
@@ -286,7 +369,7 @@ func (d *Downloader) saveTask(task *Task) error {
 	return nil
 }

-func (d *Downloader) Resolve(req *base.Request) (rr *ResolveResult, err error) {
+func (d *Downloader) Resolve(req *base.Request, opts *base.Options) (rr *ResolveResult, err error) {
 	rrId, err := gonanoid.New()
 	if err != nil {
 		return
@@ -307,7 +390,11 @@ func (d *Downloader) Resolve(req *base.Request) (rr *ResolveResult, err error) {
 	if err != nil {
 		return
 	}
-	err = fetcher.Resolve(req)
+	initOpt, err := d.initOptions(opts)
+	if err != nil {
+		return
+	}
+	err = fetcher.Resolve(req, initOpt)
 	if err != nil {
 		return
 	}
@@ -355,13 +442,21 @@ func (d *Downloader) CreateDirect(req *base.Request, opts *base.Options) (taskId
 		return
 	}
 	fetcher.Meta().Req = req
-	return d.doCreate(fetcher, opts)
+	initOpt, err := d.initOptions(opts)
+	if err != nil {
+		return
+	}
+	return d.doCreate(fetcher, initOpt)
 }

-func (d *Downloader) CreateDirectBatch(reqs []*base.Request, opts *base.Options) (taskId []string, err error) {
+func (d *Downloader) CreateDirectBatch(req *base.CreateTaskBatch) (taskId []string, err error) {
 	taskIds := make([]string, 0)
-	for _, req := range reqs {
-		taskId, err := d.CreateDirect(req, opts.Clone())
+	for _, ir := range req.Reqs {
+		opts := ir.Opts
+		if opts == nil {
+			opts = req.Opts
+		}
+		taskId, err := d.CreateDirect(ir.Req, opts.Clone())
 		if err != nil {
 			return nil, err
 		}
@@ -370,7 +465,7 @@ func (d *Downloader) CreateDirectBatch(reqs []*base.Request, opts *base.Options)
 	return taskIds, nil
 }

-func (d *Downloader) Create(rrId string, opts *base.Options) (taskId string, err error) {
+func (d *Downloader) Create(rrId string) (taskId string, err error) {
 	d.fetcherMapLock.RLock()
 	fetcher, ok := d.fetcherCache[rrId]
 	d.fetcherMapLock.RUnlock()
@@ -382,7 +477,7 @@ func (d *Downloader) Create(rrId string, opts *base.Options) (taskId string, err
 		delete(d.fetcherCache, rrId)
 		d.fetcherMapLock.Unlock()
 	}()
-	return d.doCreate(fetcher, opts)
+	return d.doCreate(fetcher, nil)
 }

 func (d *Downloader) Pause(filter *TaskFilter) (err error) {
@@ -527,7 +622,7 @@ func (d *Downloader) ContinueBatch(filter *TaskFilter) (err error) {

 func (d *Downloader) Delete(filter *TaskFilter, force bool) (err error) {
 	if filter == nil || filter.IsEmpty() {
-		return d.deleteAll()
+		return d.deleteAll(force)
 	}

 	deleteTasks := d.GetTasksByFilter(filter)
@@ -572,17 +667,21 @@ func (d *Downloader) Delete(filter *TaskFilter, force bool) (err error) {
 	return
 }

-func (d *Downloader) deleteAll() (err error) {
+func (d *Downloader) deleteAll(force bool) (err error) {
+	var deleteTasksTemp []*Task
 	func() {
 		d.lock.Lock()
 		defer d.lock.Unlock()

+		for _, task := range d.tasks {
+			deleteTasksTemp = append(deleteTasksTemp, task)
+		}
 		d.tasks = make([]*Task, 0)
 		d.waitTasks = make([]*Task, 0)
 	}()

-	for _, task := range d.tasks {
-		if err = d.doDelete(task, true); err != nil {
+	for _, task := range deleteTasksTemp {
+		if err = d.doDelete(task, force); err != nil {
 			return
 		}
 	}
@@ -699,6 +798,9 @@ func (d *Downloader) emit(eventKey EventKey, task *Task, errs ...error) {
 }

 func (d *Downloader) GetTask(id string) *Task {
+	d.lock.Lock()
+	defer d.lock.Unlock()
+
 	for _, task := range d.tasks {
 		if task.ID == id {
 			return task
@@ -708,12 +810,18 @@ func (d *Downloader) GetTask(id string) *Task {
 }

 func (d *Downloader) GetTasks() []*Task {
+	d.lock.Lock()
+	defer d.lock.Unlock()
+
 	return d.tasks
 }

 // GetTasksByFilter get tasks by filter, if filter is nil, return all tasks
 // return tasks and if match all tasks
 func (d *Downloader) GetTasksByFilter(filter *TaskFilter) []*Task {
+	d.lock.Lock()
+	defer d.lock.Unlock()
+
 	if filter == nil || filter.IsEmpty() {
 		return d.tasks
 	}
@@ -803,8 +911,6 @@ func (d *Downloader) watch(task *Task) {
 				if err != nil {
 					d.Logger.Warn().Err(err).Msgf("task wait upload failed, task id: %s", task.ID)
 				}
-				d.lock.Lock()
-				defer d.lock.Unlock()

 				// Check if the task is deleted
 				if d.GetTask(task.ID) != nil {
@@ -847,10 +953,30 @@ func (d *Downloader) watch(task *Task) {
 	d.emit(EventKeyFinally, task, err)
 	d.notifyRunning()
 	d.triggerOnDone(task)
+	d.triggerWebhooks(WebhookEventDownloadDone, task, nil)

 	if e, ok := task.Meta.Opts.Extra.(*http.OptsExtra); ok {
 		downloadFilePath := task.Meta.SingleFilepath()
-		if e.AutoTorrent && strings.HasSuffix(downloadFilePath, ".torrent") {
+
+		cfg, _ := d.GetConfig()
+
+		// Determine if auto-torrent is enabled (use global config if not explicitly set)
+		autoTorrentEnabled := false
+		if e.AutoTorrent != nil {
+			autoTorrentEnabled = *e.AutoTorrent
+		} else if cfg != nil && cfg.AutoTorrent != nil {
+			autoTorrentEnabled = cfg.AutoTorrent.Enable
+		}
+
+		if autoTorrentEnabled && strings.HasSuffix(downloadFilePath, ".torrent") {
+			// Determine if should delete torrent file after creating BT task
+			shouldDelete := false
+			if e.DeleteTorrentAfterDownload != nil {
+				shouldDelete = *e.DeleteTorrentAfterDownload
+			} else if cfg != nil && cfg.AutoTorrent != nil {
+				shouldDelete = cfg.AutoTorrent.DeleteAfterDownload
+			}
+
 			go func() {
 				_, err2 := d.CreateDirect(
 					&base.Request{
@@ -862,10 +988,28 @@ func (d *Downloader) watch(task *Task) {
 					})
 				if err2 != nil {
 					d.Logger.Error().Err(err2).Msgf("auto create torrent task failed, task id: %s", task.ID)
+					return
 				}

+				if shouldDelete {
+					d.Delete(&TaskFilter{IDs: []string{task.ID}}, true)
+				}
 			}()
 		}
+
+		// Determine if auto-extract is enabled (use global config if not explicitly set)
+		autoExtractEnabled := false
+		if e.AutoExtract != nil {
+			autoExtractEnabled = *e.AutoExtract
+		} else if cfg != nil && cfg.Archive != nil {
+			autoExtractEnabled = cfg.Archive.AutoExtract
+		}
+
+		// Auto-extract archive files using the extraction queue
+		// This ensures only one extraction runs at a time to prevent resource exhaustion
+		if autoExtractEnabled && isArchiveFile(downloadFilePath) {
+			d.enqueueExtraction(task, downloadFilePath, e)
+		}
 	}
 }

@@ -877,6 +1021,7 @@ func (d *Downloader) doOnError(task *Task, err error) {
 		d.emit(EventKeyError, task, err)
 		d.emit(EventKeyFinally, task, err)
 		d.notifyRunning()
+		d.triggerWebhooks(WebhookEventDownloadError, task, err)
 	}
 }

@@ -887,23 +1032,11 @@ func (d *Downloader) restoreTask(task *Task) error {
 		}
 	}
 	go d.watch(task)
-	task.fetcher.Create(task.Meta.Opts)
 	return nil
 }

 func (d *Downloader) restoreFetcher(task *Task) error {
-	var fm fetcher.FetcherManager
-	for _, f := range d.cfg.FetchManagers {
-		if f.Name() == task.Protocol {
-			fm = f
-			break
-		}
-	}
-	if fm == nil {
-		return ErrUnSupportedProtocol
-	}
-	task.fetcherManager = fm
-	v, f := fm.Restore()
+	v, f := task.fetcherManager.Restore()
 	if v != nil {
 		err := d.storage.Pop(bucketSave, task.ID, v)
 		if err != nil {
@@ -921,39 +1054,15 @@ func (d *Downloader) restoreFetcher(task *Task) error {
 	if task.fetcher.Meta().Res == nil {
 		task.fetcher.Meta().Res = task.Meta.Res
 	}
+	if task.fetcher.Meta().Opts == nil {
+		task.fetcher.Meta().Opts = task.Meta.Opts
+	}
 	return nil
 }

 func (d *Downloader) doCreate(f fetcher.Fetcher, opts *base.Options) (taskId string, err error) {
-	if opts == nil {
-		opts = &base.Options{}
-	}
-	if opts.SelectFiles == nil {
-		opts.SelectFiles = make([]int, 0)
-	}
-
-	meta := f.Meta()
-	meta.Opts = opts
-	if opts.Path == "" {
-		storeConfig, err := d.GetConfig()
-		if err != nil {
-			return "", err
-		}
-		opts.Path = storeConfig.DownloadDir
-	}
-
-	// if enable white download directory, check if the download directory is in the white list
-	if len(d.cfg.DownloadDirWhiteList) > 0 {
-		inWhiteList := false
-		for _, dir := range d.cfg.DownloadDirWhiteList {
-			if match, err := filepath.Match(dir, opts.Path); match && err == nil {
-				inWhiteList = true
-				break
-			}
-		}
-		if !inWhiteList {
-			return "", errors.New("download directory is not in white list")
-		}
+	if f.Meta().Opts == nil {
+		f.Meta().Opts = opts
 	}

 	fm, err := d.parseFm(f.Meta().Req.URL)
@@ -969,9 +1078,6 @@ func (d *Downloader) doCreate(f fetcher.Fetcher, opts *base.Options) (taskId str
 	task.Progress = &Progress{}
 	_, task.Uploading = f.(fetcher.Uploader)
 	initTask(task)
-	if err = f.Create(opts); err != nil {
-		return
-	}
 	if err = d.storage.Put(bucketTask, task.ID, task.clone()); err != nil {
 		return
 	}
@@ -997,6 +1103,39 @@ func (d *Downloader) doCreate(f fetcher.Fetcher, opts *base.Options) (taskId str
 	return
 }

+func (d *Downloader) initOptions(opts *base.Options) (*base.Options, error) {
+	if opts == nil {
+		opts = &base.Options{}
+	}
+	if opts.SelectFiles == nil {
+		opts.SelectFiles = make([]int, 0)
+	}
+	if opts.Path == "" {
+		storeConfig, err := d.GetConfig()
+		if err != nil {
+			return nil, err
+		}
+		opts.Path = storeConfig.DownloadDir
+	}
+	// Replace placeholders in download path (e.g., %year%, %month%, %day%, %date%)
+	opts.Path = util.ReplacePathPlaceholders(opts.Path)
+
+	// if enable white download directory, check if the download directory is in the white list
+	if len(d.cfg.WhiteDownloadDirs) > 0 {
+		inWhiteList := false
+		for _, dir := range d.cfg.WhiteDownloadDirs {
+			if match, err := filepath.Match(dir, opts.Path); match && err == nil {
+				inWhiteList = true
+				break
+			}
+		}
+		if !inWhiteList {
+			return nil, errors.New("download directory is not in white list")
+		}
+	}
+	return opts, nil
+}
+
 func (d *Downloader) statusMut(task *Task, fn func() (bool, error)) (bool, error) {
 	task.statusLock.Lock()
 	defer task.statusLock.Unlock()
@@ -1036,7 +1175,7 @@ func (d *Downloader) doStart(task *Task) (err error) {

 		d.triggerOnStart(task)
 		if task.Meta.Res == nil {
-			err := task.fetcher.Resolve(task.Meta.Req)
+			err := task.fetcher.Resolve(task.Meta.Req, task.Meta.Opts)
 			if err != nil {
 				return err
 			}
@@ -1047,10 +1186,10 @@ func (d *Downloader) doStart(task *Task) (err error) {
 			if task.fetcherManager.AutoRename() {
 				d.checkDuplicateLock.Lock()
 				defer d.checkDuplicateLock.Unlock()
-				task.Meta.Opts.Name = util.ReplaceInvalidFilename(task.Meta.Opts.Name)
+				task.Meta.Opts.Name = util.SafeFilename(task.Meta.Opts.Name)
 				// check if the download file is duplicated and rename it automatically.
 				if task.Meta.Res.Name != "" {
-					task.Meta.Res.Name = util.ReplaceInvalidFilename(task.Meta.Res.Name)
+					task.Meta.Res.Name = util.SafeFilename(task.Meta.Res.Name)
 					fullDirPath := task.Meta.FolderPath()
 					newName, err := util.CheckDuplicateAndRename(fullDirPath)
 					if err != nil {
@@ -1058,7 +1197,7 @@ func (d *Downloader) doStart(task *Task) (err error) {
 					}
 					task.Meta.Opts.Name = newName
 				} else {
-					task.Meta.Res.Files[0].Name = util.ReplaceInvalidFilename(task.Meta.Res.Files[0].Name)
+					task.Meta.Res.Files[0].Name = util.SafeFilename(task.Meta.Res.Files[0].Name)
 					fullFilePath := task.Meta.SingleFilepath()
 					newName, err := util.CheckDuplicateAndRename(fullFilePath)
 					if err != nil {
@@ -1145,6 +1284,15 @@ func logPanic(logDir string) {
 	debug.SetCrashOutput(f, debug.CrashOptions{})
 }

+func (d *Downloader) assignFetcherManager(task *Task) error {
+	fm, err := d.parseFm(task.Meta.Req.URL)
+	if err != nil {
+		return err
+	}
+	task.fetcherManager = fm
+	return nil
+}
+
 func (d *Downloader) buildFetcher(url string) (fetcher.Fetcher, error) {
 	fm, err := d.parseFm(url)
 	if err != nil {
@@ -1155,6 +1303,384 @@ func (d *Downloader) buildFetcher(url string) (fetcher.Fetcher, error) {
 	return fetcher, nil
 }

+// enqueueExtraction adds an extraction job to the global extraction queue
+// This ensures only one extraction (or one multi-part archive extraction) runs at a time
+// to prevent resource exhaustion
+func (d *Downloader) enqueueExtraction(task *Task, downloadFilePath string, opts *http.OptsExtra) {
+	partInfo := getArchivePartInfo(downloadFilePath)
+
+	if partInfo.IsMultiPart {
+		// For multi-part archives, handle specially
+		d.enqueueMultiPartExtraction(task, downloadFilePath, partInfo, opts)
+	} else {
+		// For single archives, queue immediately
+		d.enqueueSingleExtraction(task, downloadFilePath, opts)
+	}
+}
+
+// enqueueSingleExtraction queues extraction for a single (non-multi-part) archive
+func (d *Downloader) enqueueSingleExtraction(task *Task, downloadFilePath string, opts *http.OptsExtra) {
+	jobID := "single:" + task.ID
+
+	// Set extraction status to queued
+	task.Progress.ExtractStatus = ExtractStatusQueued
+	d.emit(EventKeyProgress, task)
+	d.storage.Put(bucketTask, task.ID, task.clone())
+	d.Logger.Info().Msgf("extraction queued, task id: %s, job id: %s", task.ID, jobID)
+
+	// Create and enqueue the extraction job
+	job := NewExtractionJob(jobID, func() {
+		d.performExtraction(task, downloadFilePath, task.Meta.Opts.Path, opts)
+	})
+
+	go func() {
+		GetExtractionQueue().Enqueue(job)
+	}()
+}
+
+// enqueueMultiPartExtraction handles queueing for multi-part archives
+// It ensures only ONE extraction job is queued when ALL parts are ready
+func (d *Downloader) enqueueMultiPartExtraction(task *Task, downloadFilePath string, partInfo ArchivePartInfo, opts *http.OptsExtra) {
+	// Set multi-part info on the task
+	task.Progress.MultiPartBaseName = partInfo.BaseName
+	task.Progress.MultiPartNumber = partInfo.PartNumber
+	task.Progress.MultiPartIsFirst = isFirstPart(downloadFilePath)
+
+	// Check if all parts are downloaded
+	destDir := task.Meta.Opts.Path
+	allPartsReady, missingParts := d.checkMultiPartArchiveReady(downloadFilePath, destDir, partInfo)
+
+	if !allPartsReady {
+		// Not all parts are ready yet - just set status to waiting, don't queue anything
+		task.Progress.ExtractStatus = ExtractStatusWaitingParts
+		d.emit(EventKeyProgress, task)
+		d.storage.Put(bucketTask, task.ID, task.clone())
+		d.Logger.Info().Msgf("multi-part archive waiting for other parts, task id: %s, missing: %v", task.ID, missingParts)
+		return
+	}
+
+	// All parts are ready! Atomically check if extraction has already been started/queued
+	// and if not, mark this task as the one that will handle it
+	// Use GetMultiPartArchiveBaseName to get the full path for comparison
+	fullBaseName := GetMultiPartArchiveBaseName(downloadFilePath)
+	shouldQueue := d.tryClaimMultiPartExtraction(task, fullBaseName)
+
+	if !shouldQueue {
+		// Another part already started/queued extraction, mark this task as done
+		task.Progress.ExtractStatus = ExtractStatusDone
+		task.Progress.ExtractProgress = 100
+		d.emit(EventKeyProgress, task)
+		d.storage.Put(bucketTask, task.ID, task.clone())
+		d.Logger.Info().Msgf("multi-part archive extraction already handled by another part, task id: %s", task.ID)
+		return
+	}
+
+	// This task claimed the extraction - status already set to queued in tryClaimMultiPartExtraction
+	d.emit(EventKeyProgress, task)
+	d.storage.Put(bucketTask, task.ID, task.clone())
+
+	jobID := "multipart:" + fullBaseName
+	d.Logger.Info().Msgf("multi-part extraction queued, task id: %s, job id: %s", task.ID, jobID)
+
+	// Create and enqueue the extraction job
+	job := NewExtractionJob(jobID, func() {
+		d.performMultiPartExtraction(task, partInfo.FirstPartPath, destDir, opts)
+	})
+
+	go func() {
+		GetExtractionQueue().Enqueue(job)
+	}()
+}
+
+// checkMultiPartArchiveReady checks if all parts of a multi-part archive are downloaded
+// by examining task status rather than file existence
+func (d *Downloader) checkMultiPartArchiveReady(filePath string, destDir string, partInfo ArchivePartInfo) (bool, []string) {
+	// Use task-based checking - find all tasks with the same MultiPartBaseName
+	// and verify they are all in Done status
+	baseName := GetMultiPartArchiveBaseName(filePath)
+	if baseName == "" {
+		return true, nil
+	}
+
+	return d.checkAllMultiPartTasksDone(baseName)
+}
+
+// checkAllMultiPartTasksDone checks if all tasks belonging to a multi-part archive are done
+func (d *Downloader) checkAllMultiPartTasksDone(baseName string) (bool, []string) {
+	var notDoneParts []string
+
+	d.lock.Lock()
+	defer d.lock.Unlock()
+
+	// Find all tasks that belong to this multi-part archive
+	var relatedTasks []*Task
+	for _, task := range d.tasks {
+		taskBaseName := ""
+		if task.Meta != nil && task.Meta.Res != nil && len(task.Meta.Res.Files) > 0 {
+			taskBaseName = GetMultiPartArchiveBaseName(task.Meta.SingleFilepath())
+		}
+		if taskBaseName == baseName {
+			relatedTasks = append(relatedTasks, task)
+		}
+	}
+
+	// If we found no related tasks, we can't determine readiness
+	if len(relatedTasks) == 0 {
+		return false, []string{"no related tasks found for " + baseName}
+	}
+
+	// Check if all related tasks are done
+	for _, task := range relatedTasks {
+		if task.Status != base.DownloadStatusDone {
+			notDoneParts = append(notDoneParts, task.Meta.SingleFilepath())
+		}
+	}
+
+	return len(notDoneParts) == 0, notDoneParts
+}
+
+// tryClaimMultiPartExtraction atomically checks if extraction can be claimed for a multi-part archive
+// and if so, marks the task as queued. Returns true if this task should proceed with queueing.
+// This uses sync.Map.LoadOrStore for atomic claim to prevent race conditions.
+func (d *Downloader) tryClaimMultiPartExtraction(task *Task, baseName string) bool {
+	// Use LoadOrStore for atomic claim - if another goroutine already stored a value, we get that value back
+	_, alreadyClaimed := d.claimedExtractions.LoadOrStore(baseName, task.ID)
+	if alreadyClaimed {
+		return false // Another task already claimed it
+	}
+
+	// This task successfully claimed it
+	task.Progress.ExtractStatus = ExtractStatusQueued
+	return true
+}
+
+// releaseMultiPartExtractionClaim releases the extraction claim for a multi-part archive
+// This is primarily used for testing purposes
+func (d *Downloader) releaseMultiPartExtractionClaim(baseName string) {
+	d.claimedExtractions.Delete(baseName)
+}
+
+// performExtraction performs extraction for a regular (non-multi-part) archive
+func (d *Downloader) performExtraction(task *Task, archivePath string, destDir string, opts *http.OptsExtra) {
+	// Set extraction status to extracting
+	task.Progress.ExtractStatus = ExtractStatusExtracting
+	task.Progress.ExtractProgress = 0
+	d.emit(EventKeyProgress, task)
+	d.storage.Put(bucketTask, task.ID, task.clone())
+
+	// Extract the archive
+	extractErr := extractArchive(archivePath, destDir, opts.ArchivePassword, func(extractedFiles int, totalFiles int, progress int) {
+		task.Progress.ExtractProgress = progress
+		d.emit(EventKeyProgress, task)
+	})
+
+	d.handleExtractionResult(task, extractErr, []string{archivePath}, opts.DeleteAfterExtract)
+}
+
+// performMultiPartExtraction performs extraction for a multi-part archive
+func (d *Downloader) performMultiPartExtraction(task *Task, firstPartPath string, destDir string, opts *http.OptsExtra) {
+	// Get the baseName for releasing the claim later
+	fullBaseName := GetMultiPartArchiveBaseName(firstPartPath)
+
+	// Set extraction status to extracting
+	task.Progress.ExtractStatus = ExtractStatusExtracting
+	task.Progress.ExtractProgress = 0
+	d.emit(EventKeyProgress, task)
+	d.storage.Put(bucketTask, task.ID, task.clone())
+
+	d.Logger.Info().Msgf("starting multi-part archive extraction, first part: %s, task id: %s", firstPartPath, task.ID)
+
+	// Extract the multi-part archive
+	extractErr := extractMultiPartArchive(firstPartPath, destDir, opts.ArchivePassword, func(extractedFiles int, totalFiles int, progress int) {
+		task.Progress.ExtractProgress = progress
+		d.emit(EventKeyProgress, task)
+	})
+
+	// Collect all part files for potential deletion
+	partFiles := d.collectMultiPartFiles(firstPartPath)
+
+	d.handleExtractionResult(task, extractErr, partFiles, opts.DeleteAfterExtract)
+
+	// Update status for all related multi-part tasks
+	d.updateMultiPartTasksStatus(task, extractErr)
+
+	// Release the claim so future downloads of the same archive can be extracted
+	d.releaseMultiPartExtractionClaim(fullBaseName)
+}
+
+// collectMultiPartFiles collects all files belonging to a multi-part archive
+func (d *Downloader) collectMultiPartFiles(firstPartPath string) []string {
+	var files []string
+	partInfo := getArchivePartInfo(firstPartPath)
+	dir := filepath.Dir(firstPartPath)
+
+	switch {
+	case strings.Contains(partInfo.Pattern, ".7z)"):
+		// 7z: .7z.001, .7z.002, etc.
+		files = d.collectSequentialFiles(dir, partInfo.BaseName, ".%03d")
+	case strings.Contains(partInfo.Pattern, ".part"):
+		// RAR new style
+		files = d.collectRarNewStyleFiles(dir, partInfo.BaseName)
+	case partInfo.Pattern == "rar-old-style" || strings.Contains(partInfo.Pattern, ".r("):
+		// RAR old style
+		files = d.collectRarOldStyleFiles(dir, partInfo.BaseName)
+	case strings.Contains(partInfo.Pattern, ".zip)"):
+		// ZIP multi-part
+		files = d.collectSequentialFiles(dir, partInfo.BaseName, ".%03d")
+	case strings.Contains(partInfo.Pattern, ".z("):
+		// ZIP split
+		files = d.collectZipSplitFiles(dir, partInfo.BaseName)
+	}
+
+	return files
+}
+
+// collectSequentialFiles collects sequential numbered files
+func (d *Downloader) collectSequentialFiles(dir, baseName, format string) []string {
+	var files []string
+	suffix := filepath.Ext(baseName)
+	nameWithoutExt := strings.TrimSuffix(baseName, suffix)
+	partNum := 1
+
+	for {
+		partPath := filepath.Join(dir, nameWithoutExt+suffix+fmt.Sprintf(format, partNum))
+		if _, err := os.Stat(partPath); os.IsNotExist(err) {
+			break
+		}
+		files = append(files, partPath)
+		partNum++
+	}
+
+	return files
+}
+
+// collectRarNewStyleFiles collects RAR new style part files
+func (d *Downloader) collectRarNewStyleFiles(dir, baseName string) []string {
+	var files []string
+	partNum := 1
+
+	for {
+		singleDigitPath := filepath.Join(dir, baseName+fmt.Sprintf(".part%d.rar", partNum))
+		doubleDigitPath := filepath.Join(dir, baseName+fmt.Sprintf(".part%02d.rar", partNum))
+
+		if _, err := os.Stat(singleDigitPath); err == nil {
+			files = append(files, singleDigitPath)
+		} else if _, err := os.Stat(doubleDigitPath); err == nil {
+			files = append(files, doubleDigitPath)
+		} else {
+			break
+		}
+		partNum++
+	}
+
+	return files
+}
+
+// collectRarOldStyleFiles collects RAR old style part files
+func (d *Downloader) collectRarOldStyleFiles(dir, baseName string) []string {
+	var files []string
+
+	// .rar file
+	rarPath := filepath.Join(dir, baseName+".rar")
+	if _, err := os.Stat(rarPath); err == nil {
+		files = append(files, rarPath)
+	}
+
+	// .r00, .r01, etc.
+	partNum := 0
+	for {
+		partPath := filepath.Join(dir, baseName+fmt.Sprintf(".r%02d", partNum))
+		if _, err := os.Stat(partPath); os.IsNotExist(err) {
+			break
+		}
+		files = append(files, partPath)
+		partNum++
+	}
+
+	return files
+}
+
+// collectZipSplitFiles collects ZIP split files
+func (d *Downloader) collectZipSplitFiles(dir, baseName string) []string {
+	var files []string
+
+	// .z01, .z02, etc.
+	partNum := 1
+	for {
+		partPath := filepath.Join(dir, baseName+fmt.Sprintf(".z%02d", partNum))
+		if _, err := os.Stat(partPath); os.IsNotExist(err) {
+			break
+		}
+		files = append(files, partPath)
+		partNum++
+	}
+
+	// .zip file
+	zipPath := filepath.Join(dir, baseName+".zip")
+	if _, err := os.Stat(zipPath); err == nil {
+		files = append(files, zipPath)
+	}
+
+	return files
+}
+
+// handleExtractionResult handles the result of an extraction operation
+func (d *Downloader) handleExtractionResult(task *Task, extractErr error, archiveFiles []string, deleteAfterExtract bool) {
+	if extractErr != nil {
+		d.Logger.Error().Err(extractErr).Msgf("auto extract archive failed, task id: %s", task.ID)
+		task.Progress.ExtractStatus = ExtractStatusError
+		d.emit(EventKeyProgress, task)
+		d.storage.Put(bucketTask, task.ID, task.clone())
+	} else {
+		d.Logger.Info().Msgf("auto extract archive completed, task id: %s", task.ID)
+		task.Progress.ExtractStatus = ExtractStatusDone
+		task.Progress.ExtractProgress = 100
+		d.emit(EventKeyProgress, task)
+		d.storage.Put(bucketTask, task.ID, task.clone())
+
+		// Delete archive files after successful extraction if enabled
+		if deleteAfterExtract {
+			for _, archiveFile := range archiveFiles {
+				deleteErr := os.Remove(archiveFile)
+				if deleteErr != nil {
+					d.Logger.Error().Err(deleteErr).Msgf("delete archive after extraction failed: %s", archiveFile)
+				} else {
+					d.Logger.Info().Msgf("archive deleted after extraction: %s", archiveFile)
+				}
+			}
+		}
+	}
+}
+
+// updateMultiPartTasksStatus updates the extraction status for all tasks that belong to the same multi-part archive
+func (d *Downloader) updateMultiPartTasksStatus(sourceTask *Task, extractErr error) {
+	if sourceTask.Progress.MultiPartBaseName == "" {
+		return
+	}
+
+	status := ExtractStatusDone
+	progress := 100
+	if extractErr != nil {
+		status = ExtractStatusError
+		progress = 0
+	}
+
+	d.lock.Lock()
+	defer d.lock.Unlock()
+
+	for _, task := range d.tasks {
+		if task.ID == sourceTask.ID {
+			continue
+		}
+		if task.Progress.MultiPartBaseName == sourceTask.Progress.MultiPartBaseName {
+			task.Progress.ExtractStatus = status
+			task.Progress.ExtractProgress = progress
+			d.emit(EventKeyProgress, task)
+			d.storage.Put(bucketTask, task.ID, task.clone())
+		}
+	}
+}
+
 func initTask(task *Task) {
 	task.timer = util.NewTimer(task.Progress.Used)

@@ -1182,13 +1708,6 @@ func (b *boot) Extra(extra interface{}) *boot {
 	return b
 }

-func (b *boot) Resolve() (*ResolveResult, error) {
-	return defaultDownloader.Resolve(&base.Request{
-		URL:   b.url,
-		Extra: b.extra,
-	})
-}
-
 func (b *boot) Listener(listener Listener) *boot {
 	b.listener = listener
 	return b
@@ -205,6 +205,31 @@ function testTimeout(){
 		xhr.send();
 	});
 }
+
+async function testFingerprint(fingerprint,ua){
+	__gopeed_setFingerprint(fingerprint);
+	const resp = await fetch(host+'/ua');
+	const data = await resp.json();
+	if(!data.user_agent.includes(ua)){
+		throw new Error('fingerprint test failed, user agent: ' + data.user_agent);
+	}
+}
+
+async function testFingerprintDefault(){
+	await testFingerprint('none', 'Go')
+}
+
+async function testFingerprintChrome(){
+	await testFingerprint('chrome', 'Chrome')
+}
+
+async function testFingerprintFirefox(){
+	await testFingerprint('firefox', 'Firefox')
+}
+
+async function testFingerprintSafari(){
+	await testFingerprint('safari', 'Safari')
+}
 `)
 	if err != nil {
 		t.Fatal(err)
@@ -288,6 +313,19 @@ function testTimeout(){
 	if err == nil || err.Error() != "timeout" {
 		t.Fatalf("timeout test failed, want %s, got %s", "timeout", err)
 	}
+
+	_, err = callTestFun(engine, "testFingerprintChrome")
+	if err != nil {
+		t.Fatal("testFingerprintChrome test failed", err)
+	}
+	_, err = callTestFun(engine, "testFingerprintFirefox")
+	if err != nil {
+		t.Fatal("testFingerprintFirefox test failed", err)
+	}
+	_, err = callTestFun(engine, "testFingerprintSafari")
+	if err != nil {
+		t.Fatal("testFingerprintSafari test failed", err)
+	}
 }

 func TestFetchWithProxy(t *testing.T) {
@@ -470,6 +508,15 @@ func startServer() net.Listener {
 			w.Write([]byte("ok"))
 		}
 	})
+	mux.HandleFunc("/ua", func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		data := map[string]any{
+			"user_agent": r.UserAgent(),
+		}
+		buf, _ := json.Marshal(data)
+		w.WriteHeader(http.StatusOK)
+		w.Write(buf)
+	})
 	server.Handler = mux
 	go server.Serve(listener)
 	return listener
@@ -15,6 +15,7 @@ import (
 	"github.com/GopeedLab/gopeed/pkg/download/engine/inject/formdata"
 	"github.com/GopeedLab/gopeed/pkg/download/engine/util"
 	"github.com/dop251/goja"
+	"github.com/imroc/req/v3"
 )

 const (
@@ -129,7 +130,8 @@ type XMLHttpRequest struct {
 	requestHeaders  http.Header
 	responseHeaders http.Header
 	aborted         bool
-	proxyHandler    func(r *http.Request) (*url.URL, error)
+	client          *req.Client
+	fingerprint     string

 	WithCredentials bool                  `json:"withCredentials"`
 	Upload          *XMLHttpRequestUpload `json:"upload"`
@@ -163,25 +165,39 @@ func (xhr *XMLHttpRequest) SetRequestHeader(key, value string) {
 }

 func (xhr *XMLHttpRequest) Send(data goja.Value) {
-	var req *http.Request
-	var err error
+	setFingerprint(xhr.client, xhr.fingerprint)
+
 	d := xhr.parseData(data)
 	var (
 		contentType   string
 		contentLength int64
 		isStringBody  bool
 	)
-	if d == nil || xhr.method == "GET" || xhr.method == "HEAD" {
-		req, err = http.NewRequest(xhr.method, xhr.url, nil)
-	} else {
+
+	// Create request using req library
+	reqBuilder := xhr.client.R()
+
+	// Set headers first
+	if xhr.requestHeaders != nil {
+		for key, values := range xhr.requestHeaders {
+			if len(values) > 0 {
+				// Merge multiple values with comma separator (HTTP standard)
+				mergedValue := strings.Join(values, ", ")
+				reqBuilder.SetHeader(key, mergedValue)
+			}
+		}
+	}
+
+	// Handle request body
+	if d != nil && xhr.method != "GET" && xhr.method != "HEAD" {
 		switch v := d.(type) {
 		case string:
-			req, err = http.NewRequest(xhr.method, xhr.url, bytes.NewBufferString(v))
+			reqBuilder.SetBody(v)
 			contentType = "text/plain;charset=UTF-8"
 			contentLength = int64(len(v))
 			isStringBody = true
 		case *file.File:
-			req, err = http.NewRequest(xhr.method, xhr.url, v.Reader)
+			reqBuilder.SetBody(v.Reader)
 			contentType = "application/octet-stream"
 			contentLength = v.Size
 		case *formdata.FormData:
@@ -203,43 +219,38 @@ func (xhr *XMLHttpRequest) Send(data goja.Value) {
 				defer mw.Close()
 				mw.Send()
 			}()
-			req, err = http.NewRequest(xhr.method, xhr.url, pr)
+			reqBuilder.SetBody(pr)
 			contentType = mw.FormDataContentType()
 			contentLength = mw.Size()
 		}
 	}
-	if err != nil {
-		xhr.callOnerror()
-		return
-	}
-	req.Header = xhr.requestHeaders
+
 	// Only string body can specify Content-Type header by user
-	if contentType != "" && (!isStringBody || req.Header.Get("Content-Type") == "") {
-		req.Header.Set("Content-Type", contentType)
+	if contentType != "" && (!isStringBody || xhr.requestHeaders.Get("Content-Type") == "") {
+		reqBuilder.SetHeader("Content-Type", contentType)
 	}
-	if contentLength > 0 {
-		req.ContentLength = contentLength
+
+	// Set timeout
+	if xhr.Timeout > 0 {
+		xhr.client.SetTimeout(time.Duration(xhr.Timeout) * time.Millisecond)
 	}
-	transport := &http.Transport{
-		Proxy: xhr.proxyHandler,
-	}
-	client := &http.Client{
-		Transport: transport,
-		Timeout:   time.Duration(xhr.Timeout) * time.Millisecond,
-		CheckRedirect: func(req *http.Request, via []*http.Request) error {
-			if xhr.Redirect == redirectManual {
-				return http.ErrUseLastResponse
-			}
-			if xhr.Redirect == redirectError {
-				return errors.New("redirect failed")
-			}
-			if len(via) > 20 {
-				return errors.New("too many redirects")
-			}
-			return nil
-		},
-	}
-	resp, err := client.Do(req)
+
+	// Configure redirect behavior
+	xhr.client.SetRedirectPolicy(func(req *http.Request, via []*http.Request) error {
+		if xhr.Redirect == redirectManual {
+			return http.ErrUseLastResponse
+		}
+		if xhr.Redirect == redirectError {
+			return errors.New("redirect failed")
+		}
+		if len(via) > 20 {
+			return errors.New("too many redirects")
+		}
+		return nil
+	})
+
+	// Execute request
+	resp, err := reqBuilder.Send(xhr.method, xhr.url)
 	if err != nil {
 		// handle timeout error
 		var ne net.Error
@@ -254,35 +265,37 @@ func (xhr *XMLHttpRequest) Send(data goja.Value) {
 		xhr.callOnerror()
 		return
 	}
-	defer resp.Body.Close()
+
 	xhr.Upload.callOnprogress(contentLength, contentLength)
 	if !xhr.aborted {
 		xhr.Upload.callOnload()
 	}

-	responseUrl := resp.Request.URL
-	responseUrl.Fragment = ""
-	xhr.ResponseUrl = responseUrl.String()
+	// Set response URL (final URL after redirects)
+	if resp.Response != nil && resp.Response.Request != nil && resp.Response.Request.URL != nil {
+		responseUrl := resp.Response.Request.URL
+		responseUrl.Fragment = ""
+		xhr.ResponseUrl = responseUrl.String()
+	} else {
+		xhr.ResponseUrl = xhr.url
+	}

+	// Set response headers
 	xhr.responseHeaders = resp.Header
 	xhr.Status = resp.StatusCode
 	xhr.StatusText = resp.Status
 	xhr.doReadystatechange(2)
-	buf, err := io.ReadAll(resp.Body)
-	if err != nil {
-		xhr.callOnerror()
-		return
-	}
+
+	bodyBytes := resp.Bytes()
 	xhr.doReadystatechange(3)
-	xhr.Response = string(buf)
+	xhr.Response = string(bodyBytes)
 	xhr.ResponseText = xhr.Response
 	xhr.doReadystatechange(4)
-	respBodyLen := int64(len(buf))
+	respBodyLen := int64(len(bodyBytes))
 	xhr.callOnprogress(respBodyLen, respBodyLen)
 	if !xhr.aborted {
 		xhr.callOnload()
 	}
-	return
 }

 func (xhr *XMLHttpRequest) Abort() {
@@ -293,6 +306,9 @@ func (xhr *XMLHttpRequest) Abort() {
 }

 func (xhr *XMLHttpRequest) GetResponseHeader(key string) string {
+	if xhr.responseHeaders == nil {
+		return ""
+	}
 	return strings.Join(xhr.responseHeaders.Values(key), ", ")
 }

@@ -359,8 +375,15 @@ func Enable(runtime *goja.Runtime, proxyHandler func(r *http.Request) (*url.URL,
 		return instanceValue
 	})
 	xhr := runtime.ToValue(func(call goja.ConstructorCall) *goja.Object {
+		// Create req client with proxy support
+		client := req.C()
+		if proxyHandler != nil {
+			client.SetProxy(proxyHandler)
+		}
+
 		instance := &XMLHttpRequest{
-			proxyHandler: proxyHandler,
+			client:      client,
+			fingerprint: util.SafeGet[string](runtime, FingerprintMagicKey),
 			Upload: &XMLHttpRequestUpload{
 				EventProp: &EventProp{
 					eventListeners: make(map[string]func(event *ProgressEvent)),
@@ -374,6 +397,9 @@ func Enable(runtime *goja.Runtime, proxyHandler func(r *http.Request) (*url.URL,
 		instanceValue.SetPrototype(call.This.Prototype())
 		return instanceValue
 	})
+	runtime.Set("__gopeed_setFingerprint", func(fingerprint string) {
+		runtime.Set(FingerprintMagicKey, fingerprint)
+	})
 	if err := runtime.Set("ProgressEvent", progressEvent); err != nil {
 		return err
 	}
@@ -0,0 +1,24 @@
+package xhr
+
+import "github.com/imroc/req/v3"
+
+type Fingerprint string
+
+const (
+	FingerprintMagicKey = "__gopeed_xhr_fingerprint"
+
+	fingerprintChrome  = "chrome"
+	fingerprintFirefox = "firefox"
+	fingerprintSafari  = "safari"
+)
+
+func setFingerprint(client *req.Client, fingerprint string) {
+	switch fingerprint {
+	case fingerprintChrome:
+		client.ImpersonateChrome()
+	case fingerprintFirefox:
+		client.ImpersonateFirefox()
+	case fingerprintSafari:
+		client.ImpersonateSafari()
+	}
+}
@@ -217,7 +217,7 @@
        "@webassemblyjs/helper-wasm-bytecode": "1.11.1",
        "@webassemblyjs/helper-wasm-section": "1.11.1",
        "@webassemblyjs/wasm-gen": "1.11.1",
-        "@webassemblyjs/wasm-opt": "1.11.1",
+        "@webassemblyjs/wasm-opts": "1.11.1",
        "@webassemblyjs/wasm-parser": "1.11.1",
        "@webassemblyjs/wast-printer": "1.11.1"
      }
@@ -235,9 +235,9 @@
        "@webassemblyjs/utf8": "1.11.1"
      }
    },
-    "node_modules/@webassemblyjs/wasm-opt": {
+    "node_modules/@webassemblyjs/wasm-opts": {
      "version": "1.11.1",
-      "resolved": "https://registry.npmmirror.com/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.1.tgz",
+      "resolved": "https://registry.npmmirror.com/@webassemblyjs/wasm-opts/-/wasm-opts-1.11.1.tgz",
      "integrity": "sha512-VqnkNqnZlU5EB64pp1l7hdm3hmQw7Vgqa0KF/KCNO9sIpI6Fk6brDEiX+iCOYrvMuBWDws0NkTOxYEb85XQHHw==",
      "dev": true,
      "dependencies": {
@@ -2114,7 +2114,7 @@
        "@webassemblyjs/helper-wasm-bytecode": "1.11.1",
        "@webassemblyjs/helper-wasm-section": "1.11.1",
        "@webassemblyjs/wasm-gen": "1.11.1",
-        "@webassemblyjs/wasm-opt": "1.11.1",
+        "@webassemblyjs/wasm-opts": "1.11.1",
        "@webassemblyjs/wasm-parser": "1.11.1",
        "@webassemblyjs/wast-printer": "1.11.1"
      }
@@ -2132,9 +2132,9 @@
        "@webassemblyjs/utf8": "1.11.1"
      }
    },
-    "@webassemblyjs/wasm-opt": {
+    "@webassemblyjs/wasm-opts": {
      "version": "1.11.1",
-      "resolved": "https://registry.npmmirror.com/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.1.tgz",
+      "resolved": "https://registry.npmmirror.com/@webassemblyjs/wasm-opts/-/wasm-opts-1.11.1.tgz",
      "integrity": "sha512-VqnkNqnZlU5EB64pp1l7hdm3hmQw7Vgqa0KF/KCNO9sIpI6Fk6brDEiX+iCOYrvMuBWDws0NkTOxYEb85XQHHw==",
      "dev": true,
      "requires": {
@@ -22,3 +22,16 @@ func AssertError[T error](err error) (t T, r bool) {
 	}
 	return
 }
+
+func SafeGet[T any](vm *goja.Runtime, name string) T {
+	v := vm.Get(name)
+	if v == nil {
+		var init T
+		return init
+	}
+	if e, ok := v.Export().(T); ok {
+		return e
+	}
+	var init T
+	return init
+}
@@ -3,6 +3,14 @@ package download
 import (
 	"encoding/json"
 	"fmt"
+	"io"
+	"os"
+	"path"
+	"path/filepath"
+	"strconv"
+	"strings"
+	"time"
+
 	"github.com/GopeedLab/gopeed/internal/logger"
 	"github.com/GopeedLab/gopeed/pkg/base"
 	"github.com/GopeedLab/gopeed/pkg/download/engine"
@@ -12,13 +20,6 @@ import (
 	"github.com/dop251/goja"
 	"github.com/go-git/go-git/v5"
 	"github.com/go-git/go-git/v5/plumbing/transport"
-	"io"
-	"os"
-	"path"
-	"path/filepath"
-	"strconv"
-	"strings"
-	"time"
 )

 var (
@@ -200,10 +201,14 @@ func (d *Downloader) fetchExtensionByGit(url string, handler func(tempExtPath st
 		subPath = pathArr[1]
 	}

-	tempExtDir := filepath.Join(d.cfg.StorageDir, tempExtensionsDir, projectPath)
-	if err := util.RmAndMkDirAll(tempExtDir); err != nil {
+	// Use unique suffix to avoid concurrent conflicts when multiple git operations
+	// target the same extension (e.g., install and update check happening simultaneously)
+	tempExtDir := filepath.Join(d.cfg.StorageDir, tempExtensionsDir, fmt.Sprintf("%s_%d", projectPath, time.Now().UnixNano()))
+	if err := os.MkdirAll(tempExtDir, 0755); err != nil {
 		return nil, err
 	}
+	defer os.RemoveAll(tempExtDir)
+
 	proxyOptions := transport.ProxyOptions{}
 	proxyUrl := d.cfg.DownloaderStoreConfig.Proxy.ToUrl()
 	if proxyUrl != nil {
@@ -220,7 +225,6 @@ func (d *Downloader) fetchExtensionByGit(url string, handler func(tempExtPath st
 	}); err != nil {
 		return nil, err
 	}
-	defer os.RemoveAll(tempExtDir)

 	return handler(filepath.Join(tempExtDir, subPath), false)
 }
@@ -260,9 +264,9 @@ func (d *Downloader) triggerOnResolve(req *base.Request) (res *base.Resource, er
 					gopeed.Logger.logger.Warn().Err(err).Msgf("[%s] resource invalid", ext.buildIdentity())
 					return
 				}
-				ctx.Res.Name = util.ReplaceInvalidFilename(ctx.Res.Name)
+				ctx.Res.Name = util.SafeFilename(ctx.Res.Name)
 				for _, file := range ctx.Res.Files {
-					file.Name = util.ReplaceInvalidFilename(file.Name)
+					file.Name = util.SafeFilename(file.Name)
 				}
 				ctx.Res.CalcSize(nil)
 			}
@@ -2,13 +2,14 @@ package download

 import (
 	"errors"
+	"os"
+	"testing"
+	"time"
+
 	"github.com/GopeedLab/gopeed/internal/logger"
 	"github.com/GopeedLab/gopeed/pkg/base"
 	gojaerror "github.com/GopeedLab/gopeed/pkg/download/engine/inject/error"
 	"github.com/dop251/goja"
-	"os"
-	"testing"
-	"time"
 )

 func TestDownloader_InstallExtensionByFolder(t *testing.T) {
@@ -18,7 +19,7 @@ func TestDownloader_InstallExtensionByFolder(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/test",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -35,7 +36,7 @@ func TestDownloader_InstallExtensionByFolderDevMode(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/test",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -52,7 +53,7 @@ func TestDownloader_InstallExtensionByGit(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/GopeedLab/gopeed/releases",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -69,7 +70,7 @@ func TestDownloader_InstallExtensionByGitSimple(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/GopeedLab/gopeed/releases",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -86,7 +87,7 @@ func TestDownloader_InstallExtensionByGitFull(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/GopeedLab/gopeed/releases",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -156,7 +157,7 @@ func TestDownloader_UpgradeExtension(t *testing.T) {

 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://test.com",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -185,7 +186,7 @@ func TestDownloader_Extension_OnStart(t *testing.T) {
 			select {
 			case err = <-errCh:
 				break
-			case <-time.After(time.Second * 10):
+			case <-time.After(time.Second * 30): // Increased timeout for real network requests
 				err = errors.New("timeout")
 			}
 			if err != nil {
@@ -238,7 +239,7 @@ func TestDownloader_Extension_OnError(t *testing.T) {
 		select {
 		case err = <-errCh:
 			break
-		case <-time.After(time.Second * 10):
+		case <-time.After(time.Second * 30): // Increased timeout for real network requests
 			err = errors.New("timeout")
 		}

@@ -273,7 +274,7 @@ func TestDownloader_Extension_OnDone(t *testing.T) {
 		select {
 		case err = <-errCh:
 			break
-		case <-time.After(time.Second * 10):
+		case <-time.After(time.Second * 30): // Increased timeout for real network requests
 			err = errors.New("timeout")
 		}
 		// wait for script execution
@@ -300,7 +301,7 @@ func TestDownloader_Extension_Errors(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/test",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -315,7 +316,7 @@ func TestDownloader_Extension_Errors(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/test",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -330,7 +331,7 @@ func TestDownloader_Extension_Errors(t *testing.T) {
 		}
 		_, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/test",
-		})
+		}, nil)
 		if err == nil {
 			t.Fatalf("except error, but got nil")
 		}
@@ -352,7 +353,7 @@ func TestDownloader_Extension_Settings(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/test",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -373,7 +374,7 @@ func TestDownloader_Extension_Settings(t *testing.T) {
 		})
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/test",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -390,7 +391,7 @@ func TestDownloader_ExtensionStorage(t *testing.T) {
 		}
 		rr, err := downloader.Resolve(&base.Request{
 			URL: "https://github.com/test",
-		})
+		}, nil)
 		if err != nil {
 			t.Fatal(err)
 		}
@@ -0,0 +1,461 @@
+package download
+
+import (
+	"context"
+	"io"
+	"math"
+	"os"
+	"path/filepath"
+	"regexp"
+	"slices"
+	"strings"
+	"sync/atomic"
+
+	"github.com/mholt/archives"
+)
+
+// supportedArchiveExtensions contains file extensions supported by mholt/archives library
+var supportedArchiveExtensions = []string{
+	// Archive formats
+	".zip",
+	".tar",
+	".tar.gz", ".tgz",
+	".tar.bz2", ".tbz2",
+	".tar.xz", ".txz",
+	".tar.lz4", ".tlz4",
+	".tar.sz", ".tsz",
+	".tar.zst", ".tzst",
+	".rar",
+	".7z",
+	// Compression formats
+	".gz",
+	".bz2",
+	".xz",
+	".lz4",
+	".sz",
+	".zst",
+	".br",
+	".lz",
+}
+
+// multiPartArchivePatterns contains regex patterns for multi-part archive detection
+// Each pattern should have a capture group for the base name and part number
+var multiPartArchivePatterns = []*regexp.Regexp{
+	// 7z multi-part: file.7z.001, file.7z.002, etc.
+	regexp.MustCompile(`(?i)^(.+\.7z)\.(\d{3})$`),
+	// RAR multi-part (new style): file.part01.rar, file.part02.rar, etc.
+	regexp.MustCompile(`(?i)^(.+)\.part(\d+)\.rar$`),
+	// RAR multi-part (old style): file.rar, file.r00, file.r01, etc. (first file is .rar)
+	regexp.MustCompile(`(?i)^(.+)\.r(\d{2})$`),
+	// ZIP multi-part: file.zip.001, file.zip.002, etc.
+	regexp.MustCompile(`(?i)^(.+\.zip)\.(\d{3})$`),
+	// ZIP split: file.z01, file.z02, ... file.zip (last file is .zip)
+	regexp.MustCompile(`(?i)^(.+)\.z(\d{2})$`),
+}
+
+// ArchivePartInfo contains information about a multi-part archive
+type ArchivePartInfo struct {
+	// IsMultiPart indicates if this file is part of a multi-part archive
+	IsMultiPart bool
+	// BaseName is the common base name for all parts (without part number extension)
+	BaseName string
+	// PartNumber is the part number (1-indexed)
+	PartNumber int
+	// FirstPartPath is the path to the first part of the archive
+	FirstPartPath string
+	// Pattern indicates which pattern matched (for determining extraction method)
+	Pattern string
+}
+
+// ExtractProgressCallback is called to report extraction progress
+type ExtractProgressCallback func(extractedFiles int, totalFiles int, progress int)
+
+// isArchiveFile checks if a file is a supported archive format
+func isArchiveFile(filename string) bool {
+	lowerName := strings.ToLower(filename)
+	// Check for multi-part archive first
+	if isMultiPartArchive(filename) {
+		return true
+	}
+	return slices.ContainsFunc(supportedArchiveExtensions, func(ext string) bool {
+		return strings.HasSuffix(lowerName, ext)
+	})
+}
+
+// archiveInfo holds information about an opened archive
+type archiveInfo struct {
+	file   *os.File
+	stat   os.FileInfo
+	format archives.Format
+	input  io.Reader
+}
+
+// openArchive opens an archive file and identifies its format
+func openArchive(archivePath string, password string) (*archiveInfo, error) {
+	file, err := os.Open(archivePath)
+	if err != nil {
+		return nil, err
+	}
+
+	stat, err := file.Stat()
+	if err != nil {
+		file.Close()
+		return nil, err
+	}
+
+	format, input, err := archives.Identify(context.Background(), archivePath, file)
+	if err != nil {
+		file.Close()
+		return nil, err
+	}
+
+	// Handle password-protected archives
+	if password != "" {
+		if rar, ok := format.(archives.Rar); ok {
+			rar.Password = password
+			format = rar
+		}
+		if sz, ok := format.(archives.SevenZip); ok {
+			sz.Password = password
+			format = sz
+		}
+	}
+
+	return &archiveInfo{
+		file:   file,
+		stat:   stat,
+		format: format,
+		input:  input,
+	}, nil
+}
+
+// createExtractionHandler creates a handler function for extracting files with progress tracking
+func createExtractionHandler(destDir string, totalFiles int, progressCallback ExtractProgressCallback) func(ctx context.Context, fileInfo archives.FileInfo) error {
+	var extractedFiles atomic.Int32
+	return func(ctx context.Context, fileInfo archives.FileInfo) error {
+		err := extractFile(ctx, fileInfo, destDir)
+		if err == nil && !fileInfo.IsDir() {
+			extracted := int(extractedFiles.Add(1))
+			if progressCallback != nil && totalFiles > 0 {
+				progress := int(math.Min(float64((extracted*100)/totalFiles), 100))
+				progressCallback(extracted, totalFiles, progress)
+			}
+		}
+		return err
+	}
+}
+
+// extractArchive extracts an archive file to a destination directory
+func extractArchive(archivePath string, destDir string, password string, progressCallback ExtractProgressCallback) error {
+	// Open the archive file
+	info, err := openArchive(archivePath, password)
+	if err != nil {
+		return err
+	}
+	defer info.file.Close()
+
+	// Create destination directory if it doesn't exist
+	if err := os.MkdirAll(destDir, 0755); err != nil {
+		return err
+	}
+
+	// Handle extraction based on format type
+	switch f := info.format.(type) {
+	case archives.Extractor:
+		// For archive formats (zip, rar, 7z, tar, etc.)
+		// First, count total files for progress tracking
+		totalFiles, err := countArchiveFiles(archivePath, password)
+		if err != nil {
+			// If counting fails, proceed without progress reporting
+			totalFiles = 0
+		}
+		return f.Extract(context.Background(), info.input, createExtractionHandler(destDir, totalFiles, progressCallback))
+	case archives.Decompressor:
+		// For single-file compression formats (gz, bz2, xz, etc.)
+		// Decompress to a file without the compression extension
+		baseName := filepath.Base(archivePath)
+		lowerBaseName := strings.ToLower(baseName)
+		for _, ext := range supportedArchiveExtensions {
+			if strings.HasSuffix(lowerBaseName, ext) {
+				// Get the actual suffix from the original filename (preserving case)
+				actualSuffix := baseName[len(baseName)-len(ext):]
+				baseName = strings.TrimSuffix(baseName, actualSuffix)
+				break
+			}
+		}
+		destPath := filepath.Join(destDir, baseName)
+
+		reader, err := f.OpenReader(info.input)
+		if err != nil {
+			return err
+		}
+		defer reader.Close()
+
+		destFile, err := os.Create(destPath)
+		if err != nil {
+			return err
+		}
+		defer destFile.Close()
+
+		// Report progress at start and end for decompression
+		if progressCallback != nil {
+			progressCallback(0, 1, 0)
+		}
+		_, err = io.Copy(destFile, reader)
+		if err == nil && progressCallback != nil {
+			progressCallback(1, 1, 100)
+		}
+		return err
+	case archives.Archiver:
+		// This format is an archiver, try to extract using the extractor interface
+		if ext, ok := info.format.(archives.Extractor); ok {
+			// Reset file position
+			if seeker, ok := info.input.(io.Seeker); ok {
+				seeker.Seek(0, io.SeekStart)
+			}
+			// Count total files for progress tracking
+			totalFiles, err := countArchiveFiles(archivePath, password)
+			if err != nil {
+				totalFiles = 0
+			}
+			return ext.Extract(context.Background(), io.NewSectionReader(info.file, 0, info.stat.Size()), createExtractionHandler(destDir, totalFiles, progressCallback))
+		}
+	}
+
+	return nil
+}
+
+// createCountingHandler creates a handler function for counting files in an archive
+func createCountingHandler(count *int) func(ctx context.Context, fileInfo archives.FileInfo) error {
+	return func(ctx context.Context, fileInfo archives.FileInfo) error {
+		if !fileInfo.IsDir() {
+			(*count)++
+		}
+		return nil
+	}
+}
+
+// countArchiveFiles counts the number of files in an archive for progress calculation
+func countArchiveFiles(archivePath string, password string) (int, error) {
+	info, err := openArchive(archivePath, password)
+	if err != nil {
+		return 0, err
+	}
+	defer info.file.Close()
+
+	count := 0
+	switch f := info.format.(type) {
+	case archives.Extractor:
+		err = f.Extract(context.Background(), info.input, createCountingHandler(&count))
+	case archives.Archiver:
+		if ext, ok := info.format.(archives.Extractor); ok {
+			if seeker, ok := info.input.(io.Seeker); ok {
+				seeker.Seek(0, io.SeekStart)
+			}
+			err = ext.Extract(context.Background(), io.NewSectionReader(info.file, 0, info.stat.Size()), createCountingHandler(&count))
+		}
+	case archives.Decompressor:
+		// Single file compression, count as 1
+		return 1, nil
+	}
+
+	return count, err
+}
+
+// extractFile handles extracting a single file from an archive
+func extractFile(ctx context.Context, fileInfo archives.FileInfo, destDir string) error {
+	// Skip directories, they will be created when extracting files
+	if fileInfo.IsDir() {
+		destPath := filepath.Join(destDir, fileInfo.NameInArchive)
+		return os.MkdirAll(destPath, fileInfo.Mode())
+	}
+
+	// Sanitize the path to prevent path traversal attacks
+	cleanPath := filepath.Clean(fileInfo.NameInArchive)
+	if strings.HasPrefix(cleanPath, "..") || filepath.IsAbs(cleanPath) {
+		// Skip files with suspicious paths
+		return nil
+	}
+
+	destPath := filepath.Join(destDir, cleanPath)
+
+	// Create parent directories
+	if err := os.MkdirAll(filepath.Dir(destPath), 0755); err != nil {
+		return err
+	}
+
+	// Open the file from the archive
+	reader, err := fileInfo.Open()
+	if err != nil {
+		return err
+	}
+	defer reader.Close()
+
+	// Create the destination file
+	destFile, err := os.Create(destPath)
+	if err != nil {
+		return err
+	}
+	defer destFile.Close()
+
+	// Copy the contents
+	_, err = io.Copy(destFile, reader)
+	if err != nil {
+		return err
+	}
+
+	// Set file permissions
+	return os.Chmod(destPath, fileInfo.Mode())
+}
+
+// isMultiPartArchive checks if a file is part of a multi-part archive
+func isMultiPartArchive(filename string) bool {
+	info := getArchivePartInfo(filename)
+	return info.IsMultiPart
+}
+
+// getArchivePartInfo returns detailed information about a multi-part archive file
+func getArchivePartInfo(filename string) ArchivePartInfo {
+	baseName := filepath.Base(filename)
+
+	for _, pattern := range multiPartArchivePatterns {
+		matches := pattern.FindStringSubmatch(baseName)
+		if len(matches) >= 3 {
+			partNum := 0
+			_, err := parsePartNumber(matches[2], &partNum)
+			if err != nil {
+				continue
+			}
+
+			info := ArchivePartInfo{
+				IsMultiPart: true,
+				BaseName:    matches[1],
+				PartNumber:  partNum,
+				Pattern:     pattern.String(),
+			}
+
+			// Determine the first part path based on pattern
+			dir := filepath.Dir(filename)
+			info.FirstPartPath = determineFirstPartPath(dir, info.BaseName, pattern.String())
+
+			return info
+		}
+	}
+
+	// Check for .rar files that might be the first part of old-style multi-part RAR
+	if strings.HasSuffix(strings.ToLower(baseName), ".rar") && !strings.Contains(strings.ToLower(baseName), ".part") {
+		// Check if there are .r00, .r01 files in the same directory
+		dir := filepath.Dir(filename)
+		nameWithoutExt := strings.TrimSuffix(baseName, filepath.Ext(baseName))
+		r00Path := filepath.Join(dir, nameWithoutExt+".r00")
+		if _, err := os.Stat(r00Path); err == nil {
+			return ArchivePartInfo{
+				IsMultiPart:   true,
+				BaseName:      nameWithoutExt,
+				PartNumber:    1, // .rar is the first part in old-style
+				FirstPartPath: filename,
+				Pattern:       "rar-old-style",
+			}
+		}
+	}
+
+	return ArchivePartInfo{IsMultiPart: false}
+}
+
+// parsePartNumber parses a part number string and stores it in the provided pointer
+// Returns the parsed number and nil error on success
+func parsePartNumber(s string, partNum *int) (int, error) {
+	n := 0
+	for _, c := range s {
+		if c >= '0' && c <= '9' {
+			n = n*10 + int(c-'0')
+		}
+	}
+	// For .001, .002 style, part number is the value itself
+	// For .part01 style, part number is the value itself
+	// For .r00, .r01 style: r00=2 (since .rar is part 1), r01=3, etc.
+	// However, for consistency, we return the raw number and handle the offset elsewhere
+	*partNum = n
+	// Treat 00 as part 0, let callers handle the semantics
+	if n == 0 {
+		*partNum = 1 // For .001 format, 001 should be 1
+	}
+	return *partNum, nil
+}
+
+// determineFirstPartPath determines the path to the first part of a multi-part archive
+func determineFirstPartPath(dir, baseName, pattern string) string {
+	switch {
+	case strings.Contains(pattern, `.7z)`):
+		// 7z multi-part: first part is .7z.001
+		return filepath.Join(dir, baseName+".001")
+	case strings.Contains(pattern, `.part`):
+		// RAR new style: first part is .part01.rar or .part1.rar
+		// Try both single and double digit formats
+		if _, err := os.Stat(filepath.Join(dir, baseName+".part1.rar")); err == nil {
+			return filepath.Join(dir, baseName+".part1.rar")
+		}
+		return filepath.Join(dir, baseName+".part01.rar")
+	case strings.Contains(pattern, `.r(`):
+		// RAR old style: first part is .rar (not .r00)
+		return filepath.Join(dir, baseName+".rar")
+	case strings.Contains(pattern, `.zip)`):
+		// ZIP multi-part: first part is .zip.001
+		return filepath.Join(dir, baseName+".001")
+	case strings.Contains(pattern, `.z(`):
+		// ZIP split: last part is .zip, but extraction should start from .z01
+		return filepath.Join(dir, baseName+".z01")
+	default:
+		return ""
+	}
+}
+
+// isFirstPart checks if the given file is the first part of a multi-part archive
+func isFirstPart(filename string) bool {
+	info := getArchivePartInfo(filename)
+	if !info.IsMultiPart {
+		return false
+	}
+
+	// For most formats, part 1 is the first part
+	// For old-style RAR, check if this is the .rar file
+	if info.Pattern == "rar-old-style" {
+		return strings.HasSuffix(strings.ToLower(filename), ".rar")
+	}
+
+	return info.PartNumber == 1
+}
+
+// GetMultiPartArchiveBaseName returns the base name for a multi-part archive
+// This is used to group related parts together
+func GetMultiPartArchiveBaseName(filename string) string {
+	info := getArchivePartInfo(filename)
+	if !info.IsMultiPart {
+		return ""
+	}
+	return filepath.Join(filepath.Dir(filename), info.BaseName)
+}
+
+// extractMultiPartArchive extracts a multi-part archive starting from the first part
+func extractMultiPartArchive(firstPartPath string, destDir string, password string, progressCallback ExtractProgressCallback) error {
+	info := getArchivePartInfo(firstPartPath)
+
+	// For 7z multi-part archives, the bodgit/sevenzip library handles multi-volume automatically
+	// when using OpenReader with a .001 file
+	if strings.Contains(info.Pattern, `\.7z\)`) || strings.HasSuffix(strings.ToLower(firstPartPath), ".7z.001") {
+		return extractSevenZipMultiPart(firstPartPath, destDir, password, progressCallback)
+	}
+
+	// For RAR multi-part archives, use the archives library with Name and FS fields
+	if strings.Contains(info.Pattern, "rar") || info.Pattern == "rar-old-style" {
+		return extractRarMultiPart(firstPartPath, destDir, password, progressCallback)
+	}
+
+	// For ZIP multi-part archives (.zip.001, .zip.002, etc.), concatenate parts and extract
+	if strings.Contains(info.Pattern, `\.zip\)`) || strings.HasSuffix(strings.ToLower(firstPartPath), ".zip.001") {
+		return extractZipMultiPart(firstPartPath, destDir, password, progressCallback)
+	}
+
+	// For other formats, try standard extraction (may not work for all multi-part formats)
+	return extractArchive(firstPartPath, destDir, password, progressCallback)
+}
@@ -0,0 +1,92 @@
+package download
+
+import (
+	"io"
+	"os"
+	"path/filepath"
+
+	"github.com/bodgit/sevenzip"
+)
+
+// extractSevenZipMultiPart extracts a multi-part 7z archive using bodgit/sevenzip directly
+// The mholt/archives wrapper doesn't properly handle multi-part 7z files because it uses
+// io.SectionReader which can only see the first part. The bodgit/sevenzip library's
+// OpenReaderWithPassword function handles multi-part files automatically when given the .001 file path.
+func extractSevenZipMultiPart(firstPartPath string, destDir string, password string, progressCallback ExtractProgressCallback) error {
+	// Use bodgit/sevenzip directly - it automatically handles .001, .002, etc. files
+	var reader *sevenzip.ReadCloser
+	var err error
+
+	if password != "" {
+		reader, err = sevenzip.OpenReaderWithPassword(firstPartPath, password)
+	} else {
+		reader, err = sevenzip.OpenReader(firstPartPath)
+	}
+	if err != nil {
+		return err
+	}
+	defer reader.Close()
+
+	// Create destination directory
+	if err := os.MkdirAll(destDir, 0755); err != nil {
+		return err
+	}
+
+	// Count total files for progress
+	totalFiles := 0
+	for _, f := range reader.File {
+		if !f.FileInfo().IsDir() {
+			totalFiles++
+		}
+	}
+
+	// Extract files with progress tracking
+	extractedFiles := 0
+	for _, f := range reader.File {
+		destPath := filepath.Join(destDir, f.Name)
+
+		if f.FileInfo().IsDir() {
+			if err := os.MkdirAll(destPath, f.Mode()); err != nil {
+				return err
+			}
+			continue
+		}
+
+		// Ensure parent directory exists
+		if err := os.MkdirAll(filepath.Dir(destPath), 0755); err != nil {
+			return err
+		}
+
+		// Extract file - open, copy, close immediately (as recommended by bodgit/sevenzip)
+		if err := extractSevenZipFile(f, destPath); err != nil {
+			return err
+		}
+
+		extractedFiles++
+		if progressCallback != nil && totalFiles > 0 {
+			progress := int(float64(extractedFiles) / float64(totalFiles) * 100)
+			progressCallback(extractedFiles, totalFiles, progress)
+		}
+	}
+
+	return nil
+}
+
+// extractSevenZipFile extracts a single file from a 7z archive
+// This follows the bodgit/sevenzip recommended pattern of closing rc before processing the next file
+func extractSevenZipFile(f *sevenzip.File, destPath string) error {
+	rc, err := f.Open()
+	if err != nil {
+		return err
+	}
+	defer rc.Close()
+
+	outFile, err := os.OpenFile(destPath, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, f.Mode())
+	if err != nil {
+		return err
+	}
+	defer outFile.Close()
+
+	_, err = io.Copy(outFile, rc)
+	return err
+}
@@ -0,0 +1,199 @@
+package download
+
+import (
+	"sync"
+)
+
+// ExtractionJob represents a single extraction job in the queue
+type ExtractionJob struct {
+	// ID is a unique identifier for this job (usually task ID or multi-part base name)
+	ID string
+	// Execute is the function that performs the actual extraction
+	Execute func()
+	// done channel is signaled when the job has been executed
+	done chan struct{}
+}
+
+// NewExtractionJob creates a new extraction job
+func NewExtractionJob(id string, execute func()) *ExtractionJob {
+	return &ExtractionJob{
+		ID:      id,
+		Execute: execute,
+		done:    make(chan struct{}),
+	}
+}
+
+// Wait blocks until the job has been executed
+func (j *ExtractionJob) Wait() {
+	<-j.done
+}
+
+// ExtractionQueue manages a queue of extraction jobs to prevent resource exhaustion
+// by ensuring only one extraction (or one multi-part archive extraction) runs at a time
+type ExtractionQueue struct {
+	mu       sync.Mutex
+	cond     *sync.Cond
+	jobs     []*ExtractionJob
+	running  bool
+	shutdown bool
+	wg       sync.WaitGroup
+}
+
+// NewExtractionQueue creates a new extraction queue
+func NewExtractionQueue() *ExtractionQueue {
+	q := &ExtractionQueue{
+		jobs: make([]*ExtractionJob, 0),
+	}
+	q.cond = sync.NewCond(&q.mu)
+	return q
+}
+
+// Start starts the queue worker that processes jobs sequentially
+func (q *ExtractionQueue) Start() {
+	q.mu.Lock()
+	if q.running {
+		q.mu.Unlock()
+		return
+	}
+	q.running = true
+	q.shutdown = false
+	q.mu.Unlock()
+
+	q.wg.Add(1)
+	go q.worker()
+}
+
+// Stop stops the queue worker gracefully
+// It waits for the current job to complete but discards pending jobs
+func (q *ExtractionQueue) Stop() {
+	q.mu.Lock()
+	if !q.running {
+		q.mu.Unlock()
+		return
+	}
+	q.shutdown = true
+	q.cond.Signal()
+	q.mu.Unlock()
+
+	q.wg.Wait()
+}
+
+// Enqueue adds a new extraction job to the queue
+// The job will be executed when its turn comes (FIFO order)
+// Returns the job so the caller can wait for completion if needed
+func (q *ExtractionQueue) Enqueue(job *ExtractionJob) *ExtractionJob {
+	q.mu.Lock()
+	defer q.mu.Unlock()
+
+	if q.shutdown {
+		// Queue is shutting down, signal done immediately without executing
+		close(job.done)
+		return job
+	}
+
+	q.jobs = append(q.jobs, job)
+	q.cond.Signal()
+	return job
+}
+
+// EnqueueAndWait adds a new extraction job to the queue and waits for it to complete
+func (q *ExtractionQueue) EnqueueAndWait(job *ExtractionJob) {
+	q.Enqueue(job)
+	job.Wait()
+}
+
+// QueueLength returns the current number of pending jobs in the queue
+func (q *ExtractionQueue) QueueLength() int {
+	q.mu.Lock()
+	defer q.mu.Unlock()
+	return len(q.jobs)
+}
+
+// IsRunning returns true if the queue worker is running
+func (q *ExtractionQueue) IsRunning() bool {
+	q.mu.Lock()
+	defer q.mu.Unlock()
+	return q.running
+}
+
+// HasPendingJob checks if there's a pending job with the given ID
+func (q *ExtractionQueue) HasPendingJob(id string) bool {
+	q.mu.Lock()
+	defer q.mu.Unlock()
+
+	for _, job := range q.jobs {
+		if job.ID == id {
+			return true
+		}
+	}
+	return false
+}
+
+// RemovePendingJob removes a pending job with the given ID from the queue
+// Returns true if a job was removed, false if not found
+// Note: This cannot remove a job that is currently being executed
+func (q *ExtractionQueue) RemovePendingJob(id string) bool {
+	q.mu.Lock()
+	defer q.mu.Unlock()
+
+	for i, job := range q.jobs {
+		if job.ID == id {
+			// Close the done channel to unblock any waiters
+			close(job.done)
+			// Remove from queue
+			q.jobs = append(q.jobs[:i], q.jobs[i+1:]...)
+			return true
+		}
+	}
+	return false
+}
+
+// worker is the main loop that processes jobs sequentially
+func (q *ExtractionQueue) worker() {
+	defer q.wg.Done()
+
+	for {
+		q.mu.Lock()
+		// Wait for a job or shutdown signal
+		for len(q.jobs) == 0 && !q.shutdown {
+			q.cond.Wait()
+		}
+
+		if q.shutdown {
+			// Close done channels for all remaining jobs
+			for _, job := range q.jobs {
+				close(job.done)
+			}
+			q.jobs = nil
+			q.running = false
+			q.mu.Unlock()
+			return
+		}
+
+		// Dequeue the first job
+		job := q.jobs[0]
+		q.jobs = q.jobs[1:]
+		q.mu.Unlock()
+
+		// Execute the job outside the lock
+		if job.Execute != nil {
+			job.Execute()
+		}
+
+		// Signal that the job is done
+		close(job.done)
+	}
+}
+
+// Global extraction queue instance
+var globalExtractionQueue *ExtractionQueue
+var extractionQueueOnce sync.Once
+
+// GetExtractionQueue returns the global extraction queue instance
+func GetExtractionQueue() *ExtractionQueue {
+	extractionQueueOnce.Do(func() {
+		globalExtractionQueue = NewExtractionQueue()
+		globalExtractionQueue.Start()
+	})
+	return globalExtractionQueue
+}
@@ -0,0 +1,545 @@
+package download
+
+import (
+	"sync"
+	"sync/atomic"
+	"testing"
+	"time"
+)
+
+func TestNewExtractionQueue(t *testing.T) {
+	q := NewExtractionQueue()
+	if q == nil {
+		t.Fatal("NewExtractionQueue returned nil")
+	}
+	if q.jobs == nil {
+		t.Fatal("jobs slice should be initialized")
+	}
+	if len(q.jobs) != 0 {
+		t.Fatalf("expected empty jobs slice, got %d", len(q.jobs))
+	}
+	if q.running {
+		t.Fatal("queue should not be running initially")
+	}
+	if q.cond == nil {
+		t.Fatal("condition variable should be initialized")
+	}
+}
+
+func TestExtractionQueue_StartStop(t *testing.T) {
+	q := NewExtractionQueue()
+
+	// Test Start
+	q.Start()
+	if !q.IsRunning() {
+		t.Fatal("queue should be running after Start")
+	}
+
+	// Test double Start (should be idempotent)
+	q.Start()
+	if !q.IsRunning() {
+		t.Fatal("queue should still be running after second Start")
+	}
+
+	// Test Stop
+	q.Stop()
+	if q.IsRunning() {
+		t.Fatal("queue should not be running after Stop")
+	}
+
+	// Test double Stop (should be idempotent)
+	q.Stop()
+	if q.IsRunning() {
+		t.Fatal("queue should still not be running after second Stop")
+	}
+}
+
+func TestExtractionQueue_EnqueueSingleJob(t *testing.T) {
+	q := NewExtractionQueue()
+	q.Start()
+	defer q.Stop()
+
+	executed := false
+	job := NewExtractionJob("test-1", func() {
+		executed = true
+	})
+
+	q.Enqueue(job)
+	job.Wait()
+
+	if !executed {
+		t.Fatal("job should have been executed")
+	}
+}
+
+func TestExtractionQueue_EnqueueAndWait(t *testing.T) {
+	q := NewExtractionQueue()
+	q.Start()
+	defer q.Stop()
+
+	executed := false
+	job := NewExtractionJob("test-1", func() {
+		executed = true
+	})
+
+	q.EnqueueAndWait(job)
+
+	if !executed {
+		t.Fatal("job should have been executed after EnqueueAndWait returns")
+	}
+}
+
+func TestExtractionQueue_FIFOOrder(t *testing.T) {
+	q := NewExtractionQueue()
+	// Don't start yet - we want to queue multiple jobs first
+
+	var executionOrder []string
+	var mu sync.Mutex
+
+	addToOrder := func(id string) {
+		mu.Lock()
+		executionOrder = append(executionOrder, id)
+		mu.Unlock()
+	}
+
+	job1 := NewExtractionJob("job-1", func() {
+		addToOrder("job-1")
+	})
+	job2 := NewExtractionJob("job-2", func() {
+		addToOrder("job-2")
+	})
+	job3 := NewExtractionJob("job-3", func() {
+		addToOrder("job-3")
+	})
+
+	// Enqueue jobs before starting (they'll wait in queue)
+	q.mu.Lock()
+	q.jobs = append(q.jobs, job1, job2, job3)
+	q.mu.Unlock()
+
+	// Now start processing
+	q.Start()
+	defer q.Stop()
+
+	// Wait for all jobs
+	job1.Wait()
+	job2.Wait()
+	job3.Wait()
+
+	// Verify FIFO order
+	if len(executionOrder) != 3 {
+		t.Fatalf("expected 3 executions, got %d", len(executionOrder))
+	}
+	if executionOrder[0] != "job-1" || executionOrder[1] != "job-2" || executionOrder[2] != "job-3" {
+		t.Fatalf("expected FIFO order [job-1, job-2, job-3], got %v", executionOrder)
+	}
+}
+
+func TestExtractionQueue_SequentialExecution(t *testing.T) {
+	q := NewExtractionQueue()
+	q.Start()
+	defer q.Stop()
+
+	var activeJobs int32
+	var maxConcurrent int32
+	var mu sync.Mutex
+
+	// Create jobs that take some time to execute
+	createJob := func(id string) *ExtractionJob {
+		return NewExtractionJob(id, func() {
+			current := atomic.AddInt32(&activeJobs, 1)
+			mu.Lock()
+			if current > maxConcurrent {
+				maxConcurrent = current
+			}
+			mu.Unlock()
+			time.Sleep(10 * time.Millisecond)
+			atomic.AddInt32(&activeJobs, -1)
+		})
+	}
+
+	jobs := make([]*ExtractionJob, 5)
+	for i := range jobs {
+		jobs[i] = q.Enqueue(createJob(string(rune('A' + i))))
+	}
+
+	// Wait for all jobs
+	for _, job := range jobs {
+		job.Wait()
+	}
+
+	// Verify only one job ran at a time
+	if maxConcurrent > 1 {
+		t.Fatalf("expected max 1 concurrent job, got %d", maxConcurrent)
+	}
+}
+
+func TestExtractionQueue_QueueLength(t *testing.T) {
+	q := NewExtractionQueue()
+
+	if q.QueueLength() != 0 {
+		t.Fatalf("expected queue length 0, got %d", q.QueueLength())
+	}
+
+	// Add jobs without starting (they'll stay in queue)
+	blockChan := make(chan struct{})
+	blockingJob := NewExtractionJob("blocking", func() {
+		<-blockChan // Block until signaled
+	})
+
+	q.Start()
+	defer q.Stop()
+
+	q.Enqueue(blockingJob)
+
+	// Give worker time to pick up the blocking job
+	time.Sleep(20 * time.Millisecond)
+
+	// Queue more jobs while blocking job is running
+	job2 := q.Enqueue(NewExtractionJob("job-2", func() {}))
+	job3 := q.Enqueue(NewExtractionJob("job-3", func() {}))
+
+	// Should have 2 jobs waiting
+	if q.QueueLength() != 2 {
+		t.Fatalf("expected queue length 2, got %d", q.QueueLength())
+	}
+
+	// Unblock and wait
+	close(blockChan)
+	blockingJob.Wait()
+	job2.Wait()
+	job3.Wait()
+
+	if q.QueueLength() != 0 {
+		t.Fatalf("expected queue length 0 after completion, got %d", q.QueueLength())
+	}
+}
+
+func TestExtractionQueue_HasPendingJob(t *testing.T) {
+	q := NewExtractionQueue()
+
+	blockChan := make(chan struct{})
+	blockingJob := NewExtractionJob("blocking", func() {
+		<-blockChan
+	})
+
+	q.Start()
+	defer q.Stop()
+
+	q.Enqueue(blockingJob)
+	time.Sleep(20 * time.Millisecond) // Let blocking job start
+
+	// Queue more jobs
+	job2 := q.Enqueue(NewExtractionJob("job-2", func() {}))
+
+	if !q.HasPendingJob("job-2") {
+		t.Fatal("expected HasPendingJob to return true for job-2")
+	}
+
+	if q.HasPendingJob("job-99") {
+		t.Fatal("expected HasPendingJob to return false for non-existent job")
+	}
+
+	// Unblock and wait
+	close(blockChan)
+	blockingJob.Wait()
+	job2.Wait()
+
+	if q.HasPendingJob("job-2") {
+		t.Fatal("expected HasPendingJob to return false after job completion")
+	}
+}
+
+func TestExtractionQueue_RemovePendingJob(t *testing.T) {
+	q := NewExtractionQueue()
+
+	blockChan := make(chan struct{})
+	blockingJob := NewExtractionJob("blocking", func() {
+		<-blockChan
+	})
+
+	executed := false
+	job2 := NewExtractionJob("job-2", func() {
+		executed = true
+	})
+
+	q.Start()
+	defer q.Stop()
+
+	q.Enqueue(blockingJob)
+	time.Sleep(20 * time.Millisecond) // Let blocking job start
+	q.Enqueue(job2)
+
+	// Remove job-2 before it executes
+	removed := q.RemovePendingJob("job-2")
+	if !removed {
+		t.Fatal("expected RemovePendingJob to return true")
+	}
+
+	// Try to remove again (should return false)
+	removed = q.RemovePendingJob("job-2")
+	if removed {
+		t.Fatal("expected second RemovePendingJob to return false")
+	}
+
+	// Unblock
+	close(blockChan)
+	blockingJob.Wait()
+
+	// Wait a bit for any potential execution
+	time.Sleep(50 * time.Millisecond)
+
+	if executed {
+		t.Fatal("removed job should not have been executed")
+	}
+
+	// The removed job's done channel should be closed
+	select {
+	case <-job2.done:
+		// Expected
+	default:
+		t.Fatal("removed job's done channel should be closed")
+	}
+}
+
+func TestExtractionQueue_StopDiscardsPendingJobs(t *testing.T) {
+	q := NewExtractionQueue()
+
+	blockChan := make(chan struct{})
+	executed1 := false
+	executed2 := false
+
+	blockingJob := NewExtractionJob("blocking", func() {
+		<-blockChan
+		executed1 = true
+	})
+	pendingJob := NewExtractionJob("pending", func() {
+		executed2 = true
+	})
+
+	q.Start()
+
+	q.Enqueue(blockingJob)
+	time.Sleep(20 * time.Millisecond) // Let blocking job start
+	q.Enqueue(pendingJob)
+
+	// Stop without unblocking
+	go func() {
+		time.Sleep(10 * time.Millisecond)
+		close(blockChan)
+	}()
+	q.Stop()
+
+	// Blocking job should have completed, but pending job was discarded
+	if !executed1 {
+		t.Log("Note: blocking job may not complete if Stop() won races")
+	}
+	if executed2 {
+		t.Fatal("pending job should not have been executed after Stop")
+	}
+
+	// Pending job's done channel should be closed
+	select {
+	case <-pendingJob.done:
+		// Expected
+	default:
+		t.Fatal("pending job's done channel should be closed after Stop")
+	}
+}
+
+func TestExtractionQueue_EnqueueAfterShutdown(t *testing.T) {
+	q := NewExtractionQueue()
+	q.Start()
+	q.Stop()
+
+	executed := false
+	job := NewExtractionJob("after-shutdown", func() {
+		executed = true
+	})
+
+	q.Enqueue(job)
+
+	// Job should be immediately done (without execution)
+	select {
+	case <-job.done:
+		// Expected
+	case <-time.After(100 * time.Millisecond):
+		t.Fatal("job should be immediately done after shutdown")
+	}
+
+	if executed {
+		t.Fatal("job should not be executed after shutdown")
+	}
+}
+
+func TestNewExtractionJob(t *testing.T) {
+	job := NewExtractionJob("test-id", func() {})
+
+	if job.ID != "test-id" {
+		t.Fatalf("expected ID 'test-id', got '%s'", job.ID)
+	}
+	if job.Execute == nil {
+		t.Fatal("Execute should not be nil")
+	}
+	if job.done == nil {
+		t.Fatal("done channel should be initialized")
+	}
+}
+
+func TestExtractionJob_Wait(t *testing.T) {
+	job := NewExtractionJob("test", func() {})
+
+	done := make(chan struct{})
+	go func() {
+		job.Wait()
+		close(done)
+	}()
+
+	// Wait should block
+	select {
+	case <-done:
+		t.Fatal("Wait should block until job is done")
+	case <-time.After(50 * time.Millisecond):
+		// Expected
+	}
+
+	// Close done channel
+	close(job.done)
+
+	// Now Wait should return
+	select {
+	case <-done:
+		// Expected
+	case <-time.After(100 * time.Millisecond):
+		t.Fatal("Wait should return after job is done")
+	}
+}
+
+func TestExtractionQueue_NilExecuteFunction(t *testing.T) {
+	q := NewExtractionQueue()
+	q.Start()
+	defer q.Stop()
+
+	// Job with nil Execute should not panic
+	job := &ExtractionJob{
+		ID:      "nil-execute",
+		Execute: nil,
+		done:    make(chan struct{}),
+	}
+
+	q.Enqueue(job)
+	job.Wait()
+	// No panic means success
+}
+
+func TestExtractionQueue_ConcurrentEnqueue(t *testing.T) {
+	q := NewExtractionQueue()
+	q.Start()
+	defer q.Stop()
+
+	var counter int32
+	var wg sync.WaitGroup
+	numGoroutines := 10
+	jobsPerGoroutine := 10
+
+	wg.Add(numGoroutines)
+	for i := 0; i < numGoroutines; i++ {
+		go func(goroutineID int) {
+			defer wg.Done()
+			for j := 0; j < jobsPerGoroutine; j++ {
+				job := NewExtractionJob("", func() {
+					atomic.AddInt32(&counter, 1)
+				})
+				q.EnqueueAndWait(job)
+			}
+		}(i)
+	}
+
+	wg.Wait()
+
+	expected := int32(numGoroutines * jobsPerGoroutine)
+	if counter != expected {
+		t.Fatalf("expected counter %d, got %d", expected, counter)
+	}
+}
+
+func TestExtractionQueue_Restart(t *testing.T) {
+	q := NewExtractionQueue()
+
+	// First run
+	q.Start()
+	executed1 := false
+	job1 := NewExtractionJob("job-1", func() {
+		executed1 = true
+	})
+	q.EnqueueAndWait(job1)
+	q.Stop()
+
+	if !executed1 {
+		t.Fatal("first job should have been executed")
+	}
+
+	// Restart
+	q.Start()
+	executed2 := false
+	job2 := NewExtractionJob("job-2", func() {
+		executed2 = true
+	})
+	q.EnqueueAndWait(job2)
+	q.Stop()
+
+	if !executed2 {
+		t.Fatal("second job should have been executed after restart")
+	}
+}
+
+func TestGetExtractionQueue(t *testing.T) {
+	// Note: This test modifies global state, so it should ideally be run in isolation
+	// However, the implementation ensures the queue is created only once
+
+	queue := GetExtractionQueue()
+	if queue == nil {
+		t.Fatal("GetExtractionQueue should not return nil")
+	}
+	if !queue.IsRunning() {
+		t.Fatal("global queue should be running")
+	}
+
+	// Calling again should return the same instance
+	queue2 := GetExtractionQueue()
+	if queue != queue2 {
+		t.Fatal("GetExtractionQueue should return the same instance")
+	}
+}
+
+func TestExtractionQueue_LongRunningJob(t *testing.T) {
+	q := NewExtractionQueue()
+	q.Start()
+	defer q.Stop()
+
+	startTime := time.Now()
+	longJobDuration := 100 * time.Millisecond
+
+	longJob := NewExtractionJob("long-job", func() {
+		time.Sleep(longJobDuration)
+	})
+
+	shortJobExecuted := false
+	shortJob := NewExtractionJob("short-job", func() {
+		shortJobExecuted = true
+	})
+
+	q.Enqueue(longJob)
+	q.Enqueue(shortJob)
+
+	shortJob.Wait()
+
+	elapsed := time.Since(startTime)
+	if elapsed < longJobDuration {
+		t.Fatalf("short job should wait for long job, elapsed: %v", elapsed)
+	}
+
+	if !shortJobExecuted {
+		t.Fatal("short job should have been executed")
+	}
+}
@@ -0,0 +1,46 @@
+package download
+
+import (
+	"context"
+	"os"
+	"path/filepath"
+
+	"github.com/mholt/archives"
+)
+
+// extractRarMultiPart extracts a multi-part RAR archive
+func extractRarMultiPart(firstPartPath string, destDir string, password string, progressCallback ExtractProgressCallback) error {
+	// For RAR archives, we need to use the Name field in archives.Rar
+	// to let it automatically find subsequent volumes
+
+	dir := filepath.Dir(firstPartPath)
+	fileName := filepath.Base(firstPartPath)
+
+	rar := archives.Rar{
+		Password: password,
+		Name:     fileName,
+		FS:       os.DirFS(dir),
+	}
+
+	// Create destination directory
+	if err := os.MkdirAll(destDir, 0755); err != nil {
+		return err
+	}
+
+	// Count files first for progress
+	totalFiles := 0
+	err := rar.Extract(context.Background(), nil, func(ctx context.Context, fileInfo archives.FileInfo) error {
+		if !fileInfo.IsDir() {
+			totalFiles++
+		}
+		return nil
+	})
+
+	if err != nil {
+		// If counting fails, proceed without progress
+		totalFiles = 0
+	}
+
+	// Reset and extract with progress tracking
+	return rar.Extract(context.Background(), nil, createExtractionHandler(destDir, totalFiles, progressCallback))
+}
@@ -0,0 +1,191 @@
+package download
+
+import (
+	"context"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"github.com/mholt/archives"
+)
+
+// extractZipMultiPart extracts a multi-part ZIP archive (.zip.001, .zip.002, etc.)
+// These are created by simply splitting a ZIP file into chunks, so we concatenate them
+func extractZipMultiPart(firstPartPath string, destDir string, password string, progressCallback ExtractProgressCallback) error {
+	// Find all parts
+	parts, err := findZipMultiParts(firstPartPath)
+	if err != nil {
+		return err
+	}
+
+	// Create a multi-part reader that reads across all parts
+	multiReader := newMultiPartFileReader(parts)
+	defer multiReader.Close()
+
+	// Get total size
+	totalSize := multiReader.Size()
+
+	// Create destination directory
+	if err := os.MkdirAll(destDir, 0755); err != nil {
+		return err
+	}
+
+	// First pass: count files for progress
+	totalFiles := 0
+	zip := archives.Zip{}
+	err = zip.Extract(context.Background(), io.NewSectionReader(multiReader, 0, totalSize), func(ctx context.Context, fileInfo archives.FileInfo) error {
+		if !fileInfo.IsDir() {
+			totalFiles++
+		}
+		return nil
+	})
+	if err != nil {
+		// If counting fails, proceed without progress
+		totalFiles = 0
+	}
+
+	// Reset reader for actual extraction
+	multiReader.Close()
+	multiReader = newMultiPartFileReader(parts)
+	defer multiReader.Close()
+
+	// Second pass: extract with progress tracking
+	return zip.Extract(context.Background(), io.NewSectionReader(multiReader, 0, totalSize), createExtractionHandler(destDir, totalFiles, progressCallback))
+}
+
+// findZipMultiParts finds all parts of a multi-part ZIP archive in order
+func findZipMultiParts(firstPartPath string) ([]string, error) {
+	// Extract base name (e.g., "Archive.zip" from "Archive.zip.001")
+	dir := filepath.Dir(firstPartPath)
+	baseName := filepath.Base(firstPartPath)
+
+	// Remove the .001 suffix to get the base
+	if idx := strings.LastIndex(baseName, "."); idx > 0 {
+		baseName = baseName[:idx] // "Archive.zip"
+	}
+
+	var parts []string
+	partNum := 1
+
+	for {
+		partPath := filepath.Join(dir, baseName+fmt.Sprintf(".%03d", partNum))
+		if _, err := os.Stat(partPath); os.IsNotExist(err) {
+			break
+		}
+		parts = append(parts, partPath)
+		partNum++
+	}
+
+	if len(parts) == 0 {
+		return nil, fmt.Errorf("no parts found for %s", firstPartPath)
+	}
+
+	return parts, nil
+}
+
+// multiPartFileReader provides io.ReaderAt over multiple files concatenated
+type multiPartFileReader struct {
+	parts     []string
+	files     []*os.File
+	sizes     []int64
+	offsets   []int64 // cumulative offsets for each file
+	totalSize int64
+}
+
+func newMultiPartFileReader(parts []string) *multiPartFileReader {
+	return &multiPartFileReader{parts: parts}
+}
+
+func (m *multiPartFileReader) init() error {
+	if m.files != nil {
+		return nil
+	}
+
+	m.files = make([]*os.File, len(m.parts))
+	m.sizes = make([]int64, len(m.parts))
+	m.offsets = make([]int64, len(m.parts))
+
+	var offset int64
+	for i, part := range m.parts {
+		f, err := os.Open(part)
+		if err != nil {
+			m.Close()
+			return err
+		}
+		stat, err := f.Stat()
+		if err != nil {
+			f.Close()
+			m.Close()
+			return err
+		}
+		m.files[i] = f
+		m.sizes[i] = stat.Size()
+		m.offsets[i] = offset
+		offset += stat.Size()
+	}
+	m.totalSize = offset
+
+	return nil
+}
+
+func (m *multiPartFileReader) Size() int64 {
+	if err := m.init(); err != nil {
+		return 0
+	}
+	return m.totalSize
+}
+
+func (m *multiPartFileReader) ReadAt(p []byte, off int64) (n int, err error) {
+	if err := m.init(); err != nil {
+		return 0, err
+	}
+
+	if off >= m.totalSize {
+		return 0, io.EOF
+	}
+
+	// Find which file(s) to read from
+	for i, fileOffset := range m.offsets {
+		fileEnd := fileOffset + m.sizes[i]
+
+		if off >= fileEnd {
+			continue
+		}
+
+		// Read from this file
+		localOffset := off - fileOffset
+		toRead := len(p) - n
+		if int64(toRead) > fileEnd-off {
+			toRead = int(fileEnd - off)
+		}
+
+		read, err := m.files[i].ReadAt(p[n:n+toRead], localOffset)
+		n += read
+		off += int64(read)
+
+		if err != nil && err != io.EOF {
+			return n, err
+		}
+
+		if n >= len(p) {
+			return n, nil
+		}
+	}
+
+	if n == 0 {
+		return 0, io.EOF
+	}
+	return n, nil
+}
+
+func (m *multiPartFileReader) Close() error {
+	for _, f := range m.files {
+		if f != nil {
+			f.Close()
+		}
+	}
+	m.files = nil
+	return nil
+}
@@ -2,6 +2,9 @@ package download

 import (
 	"encoding/json"
+	"sync"
+	"time"
+
 	"github.com/GopeedLab/gopeed/internal/controller"
 	"github.com/GopeedLab/gopeed/internal/fetcher"
 	"github.com/GopeedLab/gopeed/internal/protocol/bt"
@@ -9,8 +12,6 @@ import (
 	"github.com/GopeedLab/gopeed/pkg/base"
 	"github.com/GopeedLab/gopeed/pkg/util"
 	gonanoid "github.com/matoous/go-nanoid/v2"
-	"sync"
-	"time"
 )

 type ResolveResult struct {
@@ -100,16 +101,27 @@ func (t *Task) clone() *Task {
 	return util.DeepClone(t)
 }

-func (t *Task) calcSpeed(speedArr []int64, downloaded int64, usedTime float64) int64 {
-	speedArr = append(speedArr, downloaded)
-	if len(speedArr) > 6 {
-		speedArr = speedArr[1:]
+func (t *Task) updateSpeed(downloaded int64, usedTime float64) int64 {
+	return calcSpeed(&t.speedArr, downloaded, usedTime)
+}
+
+func (t *Task) updateUploadSpeed(downloaded int64, usedTime float64) int64 {
+	return calcSpeed(&t.uploadSpeedArr, downloaded, usedTime)
+}
+
+func calcSpeed(speedArr *[]int64, downloaded int64, usedTime float64) int64 {
+	*speedArr = append(*speedArr, downloaded)
+	// Record last 5 seconds of download speed to calculate the average speed
+	if len(*speedArr) > int(5.0/usedTime) {
+		*speedArr = (*speedArr)[1:]
 	}
+
 	var total int64
-	for _, v := range speedArr {
+	for _, v := range *speedArr {
 		total += v
 	}
-	return int64(float64(total) / float64(len(speedArr)) / usedTime)
+
+	return int64(float64(total) / float64(len(*speedArr)) / usedTime)
 }

 type TaskFilter struct {
@@ -126,10 +138,10 @@ type DownloaderConfig struct {
 	Controller    *controller.Controller
 	FetchManagers []fetcher.FetcherManager

-	RefreshInterval      int `json:"refreshInterval"` // RefreshInterval time duration to refresh task progress(ms)
-	Storage              Storage
-	StorageDir           string
-	DownloadDirWhiteList []string `json:"downloadDirWhiteList"`
+	RefreshInterval   int // RefreshInterval time duration to refresh task progress(ms)
+	Storage           Storage
+	StorageDir        string
+	WhiteDownloadDirs []string

 	ProductionMode bool

@@ -2,11 +2,12 @@ package download

 import (
 	"encoding/json"
-	"go.etcd.io/bbolt"
 	"os"
 	"path/filepath"
 	"reflect"
 	"sync"
+
+	"go.etcd.io/bbolt"
 )

 type Storage interface {
@@ -45,22 +46,24 @@ func changeValue(p any, v any) {
 	}
 }

-var memData = make(map[string]map[string]any)
-
 type MemStorage struct {
 	lock *sync.RWMutex
+	data map[string]map[string]any
 }

 func NewMemStorage() *MemStorage {
 	return &MemStorage{
 		lock: &sync.RWMutex{},
+		data: make(map[string]map[string]any),
 	}
 }

 func (n *MemStorage) Setup(buckets []string) error {
+	n.lock.Lock()
+	defer n.lock.Unlock()
 	for _, bucket := range buckets {
-		if _, ok := memData[bucket]; !ok {
-			memData[bucket] = make(map[string]any)
+		if _, ok := n.data[bucket]; !ok {
+			n.data[bucket] = make(map[string]any)
 		}
 	}
 	return nil
@@ -69,7 +72,7 @@ func (n *MemStorage) Setup(buckets []string) error {
 func (n *MemStorage) Put(bucket string, key string, v any) error {
 	n.lock.Lock()
 	defer n.lock.Unlock()
-	if bucketData, ok := memData[bucket]; ok {
+	if bucketData, ok := n.data[bucket]; ok {
 		bucketData[key] = v
 	}
 	return nil
@@ -78,7 +81,7 @@ func (n *MemStorage) Put(bucket string, key string, v any) error {
 func (n *MemStorage) Get(bucket string, key string, v any) (bool, error) {
 	n.lock.RLock()
 	defer n.lock.RUnlock()
-	if dv, ok := memData[bucket][key]; ok {
+	if dv, ok := n.data[bucket][key]; ok {
 		changeValue(v, dv)
 		return true, nil
 	}
@@ -88,7 +91,7 @@ func (n *MemStorage) Get(bucket string, key string, v any) (bool, error) {
 func (n *MemStorage) List(bucket string, v any) error {
 	n.lock.RLock()
 	defer n.lock.RUnlock()
-	data := memData[bucket]
+	data := n.data[bucket]
 	list := make([]any, 0)
 	for _, v := range data {
 		list = append(list, v)
@@ -100,7 +103,7 @@ func (n *MemStorage) List(bucket string, v any) error {
 func (n *MemStorage) Pop(bucket string, key string, v any) error {
 	n.lock.Lock()
 	defer n.lock.Unlock()
-	data := memData[bucket]
+	data := n.data[bucket]
 	changeValue(v, data[key])
 	delete(data, key)
 	return nil
@@ -109,7 +112,7 @@ func (n *MemStorage) Pop(bucket string, key string, v any) error {
 func (n *MemStorage) Delete(bucket string, key string) error {
 	n.lock.Lock()
 	defer n.lock.Unlock()
-	delete(memData[bucket], key)
+	delete(n.data[bucket], key)
 	return nil
 }

@@ -120,7 +123,7 @@ func (n *MemStorage) Close() error {
 func (n *MemStorage) Clear() error {
 	n.lock.Lock()
 	defer n.lock.Unlock()
-	memData = make(map[string]map[string]any)
+	n.data = make(map[string]map[string]any)
 	return nil
 }

@@ -0,0 +1,229 @@
+package download
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"time"
+
+	"github.com/GopeedLab/gopeed/internal/fetcher"
+	"github.com/GopeedLab/gopeed/pkg/base"
+)
+
+const (
+	webhookTimeout = 10 * time.Second
+)
+
+// WebhookEvent represents the type of webhook event
+type WebhookEvent string
+
+const (
+	WebhookEventDownloadDone  WebhookEvent = "DOWNLOAD_DONE"
+	WebhookEventDownloadError WebhookEvent = "DOWNLOAD_ERROR"
+)
+
+// WebhookData is the data sent to webhook URLs
+type WebhookData struct {
+	Event   WebhookEvent    `json:"event"`
+	Time    int64           `json:"time"` // Unix timestamp in milliseconds
+	Payload *WebhookPayload `json:"payload"`
+}
+
+// WebhookPayload contains the task data
+type WebhookPayload struct {
+	Task *Task `json:"task"`
+}
+
+// getWebhookUrls extracts webhook URLs from config
+// Supports both new webhook config format and legacy extra field for backward compatibility
+func (d *Downloader) getWebhookUrls() []string {
+	cfg := d.cfg.DownloaderStoreConfig
+	if cfg == nil {
+		return nil
+	}
+
+	// Try new webhook config first
+	if cfg.Webhook != nil && cfg.Webhook.Enable && len(cfg.Webhook.URLs) > 0 {
+		urls := make([]string, 0, len(cfg.Webhook.URLs))
+		for _, url := range cfg.Webhook.URLs {
+			if url != "" {
+				urls = append(urls, url)
+			}
+		}
+		if len(urls) > 0 {
+			return urls
+		}
+	}
+
+	// Fall back to legacy extra field for backward compatibility
+	if cfg.Extra == nil {
+		return nil
+	}
+
+	webhookUrls, ok := cfg.Extra["webhookUrls"]
+	if !ok {
+		return nil
+	}
+
+	// Try direct string slice first
+	if urlsStr, ok := webhookUrls.([]string); ok {
+		if len(urlsStr) == 0 {
+			return nil
+		}
+		return urlsStr
+	}
+
+	// Convert []interface{} to []string
+	if urlsInterface, ok := webhookUrls.([]any); ok {
+		if len(urlsInterface) == 0 {
+			return nil
+		}
+		urls := make([]string, 0, len(urlsInterface))
+		for _, urlInterface := range urlsInterface {
+			if url, ok := urlInterface.(string); ok && url != "" {
+				urls = append(urls, url)
+			}
+		}
+		if len(urls) == 0 {
+			return nil
+		}
+		return urls
+	}
+
+	return nil
+}
+
+// sendWebhookToUrl sends webhook data to a single URL
+// Returns the HTTP status code and any error that occurred
+func (d *Downloader) sendWebhookToUrl(url string, data *WebhookData) (int, error) {
+	if url == "" {
+		return 0, fmt.Errorf("webhook URL is empty")
+	}
+
+	jsonData, err := json.Marshal(data)
+	if err != nil {
+		return 0, err
+	}
+
+	client := &http.Client{
+		Timeout: webhookTimeout,
+	}
+
+	req, err := http.NewRequest(http.MethodPost, url, bytes.NewBuffer(jsonData))
+	if err != nil {
+		return 0, err
+	}
+	req.Header.Set("Content-Type", "application/json")
+	req.Header.Set("User-Agent", "Gopeed-Webhook/1.0")
+
+	resp, err := client.Do(req)
+	if err != nil {
+		return 0, err
+	}
+	defer resp.Body.Close()
+
+	return resp.StatusCode, nil
+}
+
+// triggerWebhooks sends webhook notifications to all configured URLs
+func (d *Downloader) triggerWebhooks(event WebhookEvent, task *Task, err error) {
+	urls := d.getWebhookUrls()
+	if len(urls) == 0 {
+		return
+	}
+
+	data := &WebhookData{
+		Event: event,
+		Time:  time.Now().UnixMilli(),
+		Payload: &WebhookPayload{
+			Task: task.clone(),
+		},
+	}
+
+	go d.sendWebhooks(urls, data)
+}
+
+func (d *Downloader) sendWebhooks(urls []string, data *WebhookData) {
+	for _, url := range urls {
+		if url == "" {
+			continue
+		}
+		go func(webhookUrl string) {
+			statusCode, err := d.sendWebhookToUrl(webhookUrl, data)
+			if err != nil {
+				d.Logger.Warn().Err(err).Str("url", webhookUrl).Msg("webhook: failed to send request")
+				return
+			}
+			if statusCode >= 200 && statusCode < 300 {
+				d.Logger.Debug().Str("url", webhookUrl).Int("status", statusCode).Msg("webhook: sent successfully")
+			} else {
+				d.Logger.Warn().Str("url", webhookUrl).Int("status", statusCode).Msg("webhook: received non-success status")
+			}
+		}(url)
+	}
+}
+
+// SendTestWebhook sends a test webhook with a simulated payload
+// Returns error if any webhook URL does not respond with HTTP 200
+func (d *Downloader) SendTestWebhook() error {
+	urls := d.getWebhookUrls()
+	if len(urls) == 0 {
+		return nil
+	}
+
+	for _, url := range urls {
+		if url == "" {
+			continue
+		}
+		if err := d.TestWebhookUrl(url); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+// TestWebhookUrl tests a single webhook URL with a simulated payload
+// Returns error if the URL does not respond with HTTP 200
+func (d *Downloader) TestWebhookUrl(url string) error {
+	// Create a simulated test task with minimal required fields
+	testTask := NewTask()
+	testTask.Protocol = "http"
+	testTask.Status = base.DownloadStatusDone
+	testTask.Meta = &fetcher.FetcherMeta{
+		Req: &base.Request{
+			URL: "https://example.com/test-file.zip",
+		},
+		Opts: &base.Options{
+			Name: "test-file.zip",
+			Path: "/downloads",
+		},
+		Res: &base.Resource{
+			Size: 1024 * 1024 * 100, // 100MB
+			Files: []*base.FileInfo{
+				{Name: "test-file.zip", Size: 1024 * 1024 * 100},
+			},
+		},
+	}
+
+	// Create test data
+	testData := &WebhookData{
+		Event: WebhookEventDownloadDone,
+		Time:  time.Now().UnixMilli(),
+		Payload: &WebhookPayload{
+			Task: testTask,
+		},
+	}
+
+	statusCode, err := d.sendWebhookToUrl(url, testData)
+	if err != nil {
+		return err
+	}
+
+	if statusCode != http.StatusOK {
+		return fmt.Errorf("webhook test failed: %s returned status %d", url, statusCode)
+	}
+
+	return nil
+}
@@ -0,0 +1,827 @@
+package download
+
+import (
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"testing"
+	"time"
+
+	"github.com/GopeedLab/gopeed/internal/fetcher"
+	"github.com/GopeedLab/gopeed/pkg/base"
+)
+
+var mockFetcherMeta = fetcher.FetcherMeta{
+	Req: &base.Request{
+		URL: "https://example.com/test.zip",
+	},
+	Opts: &base.Options{
+		Path: "/downloads",
+	},
+	Res: &base.Resource{
+		Size: 1024 * 1024,
+		Files: []*base.FileInfo{
+			{Name: "test.zip", Size: 1024 * 1024},
+		},
+	},
+}
+
+func TestWebhook_TriggerOnDone(t *testing.T) {
+	receivedData := make(chan *WebhookData, 1)
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost {
+			t.Errorf("Expected POST request, got %s", r.Method)
+		}
+		if r.Header.Get("Content-Type") != "application/json" {
+			t.Errorf("Expected Content-Type application/json, got %s", r.Header.Get("Content-Type"))
+		}
+		var data WebhookData
+		if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
+			t.Errorf("Failed to decode data: %v", err)
+			return
+		}
+		receivedData <- &data
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Configure webhook URLs
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		// Create a mock task
+		task := NewTask()
+		task.Protocol = "http"
+		task.Meta = &mockFetcherMeta
+
+		// Trigger webhook
+		downloader.triggerWebhooks(WebhookEventDownloadDone, task, nil)
+
+		select {
+		case data := <-receivedData:
+			if data.Event != WebhookEventDownloadDone {
+				t.Errorf("Expected event 'DOWNLOAD_DONE', got '%s'", data.Event)
+			}
+			if data.Payload == nil || data.Payload.Task == nil {
+				t.Error("Expected payload.task to be present")
+			} else if data.Payload.Task.ID != task.ID {
+				t.Errorf("Expected task ID '%s', got '%s'", task.ID, data.Payload.Task.ID)
+			}
+			if data.Time == 0 {
+				t.Error("Expected time to be set")
+			}
+		case <-time.After(2 * time.Second):
+			t.Error("Timeout waiting for webhook")
+		}
+	})
+}
+
+func TestWebhook_TriggerOnError(t *testing.T) {
+	receivedData := make(chan *WebhookData, 1)
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var data WebhookData
+		if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
+			t.Errorf("Failed to decode data: %v", err)
+			return
+		}
+		receivedData <- &data
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Configure webhook URLs
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		// Create a mock task
+		task := NewTask()
+		task.Protocol = "http"
+		task.Meta = &mockFetcherMeta
+
+		// Trigger webhook with error
+		testError := http.ErrServerClosed
+		downloader.triggerWebhooks(WebhookEventDownloadError, task, testError)
+
+		select {
+		case data := <-receivedData:
+			if data.Event != WebhookEventDownloadError {
+				t.Errorf("Expected event 'DOWNLOAD_ERROR', got '%s'", data.Event)
+			}
+			if data.Payload == nil || data.Payload.Task == nil {
+				t.Error("Expected payload.task to be present")
+			}
+		case <-time.After(2 * time.Second):
+			t.Error("Timeout waiting for webhook")
+		}
+	})
+}
+
+func TestWebhook_SendTestWebhook(t *testing.T) {
+	receivedData := make(chan *WebhookData, 1)
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var data WebhookData
+		if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
+			t.Errorf("Failed to decode data: %v", err)
+			return
+		}
+		receivedData <- &data
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Configure webhook URLs
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		// Send test webhook
+		err := downloader.SendTestWebhook()
+		if err != nil {
+			t.Errorf("SendTestWebhook failed: %v", err)
+		}
+
+		select {
+		case data := <-receivedData:
+			if data.Event != WebhookEventDownloadDone {
+				t.Errorf("Expected event 'DOWNLOAD_DONE', got '%s'", data.Event)
+			}
+			if data.Payload == nil || data.Payload.Task == nil {
+				t.Error("Expected payload.task to be present")
+			}
+			if data.Time == 0 {
+				t.Error("Expected time to be set")
+			}
+		case <-time.After(2 * time.Second):
+			t.Error("Timeout waiting for webhook")
+		}
+	})
+}
+
+func TestWebhook_NoWebhookConfigured(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Create a mock task
+		task := NewTask()
+		task.Protocol = "http"
+		task.Meta = &mockFetcherMeta
+
+		// Trigger webhook (should not panic with no webhooks configured)
+		downloader.triggerWebhooks(WebhookEventDownloadDone, task, nil)
+
+		// Send test webhook (should not panic)
+		err := downloader.SendTestWebhook()
+		if err != nil {
+			t.Errorf("SendTestWebhook failed: %v", err)
+		}
+	})
+}
+
+func TestWebhook_MultipleUrls(t *testing.T) {
+	count := 0
+	server1 := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		count++
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server1.Close()
+	server2 := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		count++
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server2.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Configure multiple webhook URLs
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server1.URL, server2.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		// Create a mock task
+		task := NewTask()
+		task.Protocol = "http"
+		task.Meta = &mockFetcherMeta
+
+		// Trigger webhook
+		downloader.triggerWebhooks(WebhookEventDownloadDone, task, nil)
+
+		// Wait for webhooks
+		time.Sleep(500 * time.Millisecond)
+
+		if count != 2 {
+			t.Errorf("Expected 2 webhook calls, got %d", count)
+		}
+	})
+}
+
+func TestWebhook_TestWebhookFailsOnNon200(t *testing.T) {
+	// Test that SendTestWebhook returns error for non-200 status codes
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusInternalServerError) // 500
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Configure webhook URLs
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		// Send test webhook - should fail with non-200 status
+		err := downloader.SendTestWebhook()
+		if err == nil {
+			t.Error("Expected SendTestWebhook to return error for non-200 status")
+		}
+	})
+}
+
+func TestWebhook_TestWebhookFailsOn201(t *testing.T) {
+	// Test that SendTestWebhook returns error for 201 (only 200 is success)
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusCreated) // 201
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Configure webhook URLs
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		// Send test webhook - should fail with 201 status (only 200 is success)
+		err := downloader.SendTestWebhook()
+		if err == nil {
+			t.Error("Expected SendTestWebhook to return error for 201 status")
+		}
+	})
+}
+
+func TestWebhook_TestWebhookUrl(t *testing.T) {
+	receivedData := make(chan *WebhookData, 1)
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var data WebhookData
+		if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
+			t.Errorf("Failed to decode data: %v", err)
+			return
+		}
+		receivedData <- &data
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Test single URL
+		err := downloader.TestWebhookUrl(server.URL)
+		if err != nil {
+			t.Errorf("TestWebhookUrl failed: %v", err)
+		}
+
+		select {
+		case data := <-receivedData:
+			if data.Event != WebhookEventDownloadDone {
+				t.Errorf("Expected event 'DOWNLOAD_DONE', got '%s'", data.Event)
+			}
+			if data.Payload == nil || data.Payload.Task == nil {
+				t.Error("Expected payload.task to be present")
+			}
+		case <-time.After(2 * time.Second):
+			t.Error("Timeout waiting for webhook")
+		}
+	})
+}
+
+func TestWebhook_TestWebhookUrlEmpty(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		// Test with empty URL - should return error
+		err := downloader.TestWebhookUrl("")
+		if err == nil {
+			t.Error("Expected TestWebhookUrl to return error for empty URL")
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_EmptyConfig(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		urls := downloader.getWebhookUrls()
+		if urls != nil {
+			t.Errorf("Expected nil, got %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_NoExtraField(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = nil
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if urls != nil {
+			t.Errorf("Expected nil, got %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_NoWebhookUrlsKey(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{Enable: true} // No URLs set
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if urls != nil {
+			t.Errorf("Expected nil, got %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_StringSlice(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{"http://example.com", "http://example2.com"},
+		}
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if len(urls) != 2 {
+			t.Errorf("Expected 2 URLs, got %d", len(urls))
+		}
+		if urls[0] != "http://example.com" || urls[1] != "http://example2.com" {
+			t.Errorf("URLs don't match expected values: %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_InterfaceSlice(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{"http://example.com", "http://example2.com"},
+		}
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if len(urls) != 2 {
+			t.Errorf("Expected 2 URLs, got %d", len(urls))
+		}
+		if urls[0] != "http://example.com" || urls[1] != "http://example2.com" {
+			t.Errorf("URLs don't match expected values: %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_EmptyStringSlice(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Extra = make(map[string]any)
+		cfg.Webhook.URLs = []string{}
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if urls != nil {
+			t.Errorf("Expected nil, got %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_InterfaceSliceWithEmptyStrings(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{"", "", ""},
+		}
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if urls != nil {
+			t.Errorf("Expected nil for all empty strings, got %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_InterfaceSliceMixedTypes(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{"http://example.com", "", "http://example2.com", ""},
+		}
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if len(urls) != 2 {
+			t.Errorf("Expected 2 valid URLs (ignoring empty strings), got %d: %v", len(urls), urls)
+		}
+		if urls[0] != "http://example.com" || urls[1] != "http://example2.com" {
+			t.Errorf("URLs don't match expected values: %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_InvalidType(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{Enable: false} // Disabled webhook
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if urls != nil {
+			t.Errorf("Expected nil for disabled webhook, got %v", urls)
+		}
+	})
+}
+
+func TestWebhook_GetWebhookUrls_DisabledWebhook(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: false,
+			URLs:   []string{"http://example.com"},
+		}
+		downloader.PutConfig(cfg)
+
+		urls := downloader.getWebhookUrls()
+		if urls != nil {
+			t.Errorf("Expected nil for disabled webhook even with URLs, got %v", urls)
+		}
+	})
+}
+
+func TestWebhook_SendWebhookToUrl_Success(t *testing.T) {
+	receivedData := make(chan *WebhookData, 1)
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		// Verify headers
+		if r.Header.Get("Content-Type") != "application/json" {
+			t.Errorf("Expected Content-Type application/json, got %s", r.Header.Get("Content-Type"))
+		}
+		if r.Header.Get("User-Agent") != "Gopeed-Webhook/1.0" {
+			t.Errorf("Expected User-Agent Gopeed-Webhook/1.0, got %s", r.Header.Get("User-Agent"))
+		}
+
+		var data WebhookData
+		if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
+			t.Errorf("Failed to decode data: %v", err)
+			return
+		}
+		receivedData <- &data
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		task := NewTask()
+		task.Protocol = "http"
+		task.Meta = &mockFetcherMeta
+
+		data := &WebhookData{
+			Event: WebhookEventDownloadDone,
+			Time:  time.Now().UnixMilli(),
+			Payload: &WebhookPayload{
+				Task: task,
+			},
+		}
+
+		statusCode, err := downloader.sendWebhookToUrl(server.URL, data)
+		if err != nil {
+			t.Errorf("sendWebhookToUrl failed: %v", err)
+		}
+		if statusCode != http.StatusOK {
+			t.Errorf("Expected status 200, got %d", statusCode)
+		}
+
+		select {
+		case received := <-receivedData:
+			if received.Event != WebhookEventDownloadDone {
+				t.Errorf("Expected event DOWNLOAD_DONE, got %s", received.Event)
+			}
+		case <-time.After(1 * time.Second):
+			t.Error("Timeout waiting for webhook")
+		}
+	})
+}
+
+func TestWebhook_SendWebhookToUrl_EmptyUrl(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		data := &WebhookData{
+			Event: WebhookEventDownloadDone,
+			Time:  time.Now().UnixMilli(),
+		}
+
+		_, err := downloader.sendWebhookToUrl("", data)
+		if err == nil {
+			t.Error("Expected error for empty URL")
+		}
+		if err.Error() != "webhook URL is empty" {
+			t.Errorf("Expected 'webhook URL is empty' error, got: %v", err)
+		}
+	})
+}
+
+func TestWebhook_SendWebhookToUrl_InvalidUrl(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		data := &WebhookData{
+			Event: WebhookEventDownloadDone,
+			Time:  time.Now().UnixMilli(),
+		}
+
+		_, err := downloader.sendWebhookToUrl("://invalid-url", data)
+		if err == nil {
+			t.Error("Expected error for invalid URL")
+		}
+	})
+}
+
+func TestWebhook_SendWebhookToUrl_NonExistentHost(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		data := &WebhookData{
+			Event: WebhookEventDownloadDone,
+			Time:  time.Now().UnixMilli(),
+		}
+
+		_, err := downloader.sendWebhookToUrl("http://non-existent-host-12345.example", data)
+		if err == nil {
+			t.Error("Expected error for non-existent host")
+		}
+	})
+}
+
+func TestWebhook_SendWebhookToUrl_Timeout(t *testing.T) {
+	// Create a server that delays response beyond webhook timeout
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		time.Sleep(15 * time.Second) // Longer than webhookTimeout (10s)
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		data := &WebhookData{
+			Event: WebhookEventDownloadDone,
+			Time:  time.Now().UnixMilli(),
+		}
+
+		_, err := downloader.sendWebhookToUrl(server.URL, data)
+		if err == nil {
+			t.Error("Expected timeout error")
+		}
+	})
+}
+
+func TestWebhook_SendWebhookToUrl_VariousStatusCodes(t *testing.T) {
+	testCases := []struct {
+		name       string
+		statusCode int
+	}{
+		{"200 OK", http.StatusOK},
+		{"201 Created", http.StatusCreated},
+		{"204 No Content", http.StatusNoContent},
+		{"400 Bad Request", http.StatusBadRequest},
+		{"404 Not Found", http.StatusNotFound},
+		{"500 Internal Server Error", http.StatusInternalServerError},
+	}
+
+	for _, tc := range testCases {
+		t.Run(tc.name, func(t *testing.T) {
+			server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+				w.WriteHeader(tc.statusCode)
+			}))
+			defer server.Close()
+
+			setupWebhookTest(t, func(downloader *Downloader) {
+				data := &WebhookData{
+					Event: WebhookEventDownloadDone,
+					Time:  time.Now().UnixMilli(),
+				}
+
+				statusCode, err := downloader.sendWebhookToUrl(server.URL, data)
+				if err != nil {
+					t.Errorf("sendWebhookToUrl failed: %v", err)
+				}
+				if statusCode != tc.statusCode {
+					t.Errorf("Expected status %d, got %d", tc.statusCode, statusCode)
+				}
+			})
+		})
+	}
+}
+
+func TestWebhook_TriggerWebhooks_EmptyUrlSkipped(t *testing.T) {
+	requestCount := 0
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		requestCount++
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server.URL, "", server.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		task := NewTask()
+		task.Protocol = "http"
+		task.Meta = &mockFetcherMeta
+
+		downloader.triggerWebhooks(WebhookEventDownloadDone, task, nil)
+
+		time.Sleep(500 * time.Millisecond)
+
+		if requestCount != 2 {
+			t.Errorf("Expected 2 requests (empty URL should be skipped), got %d", requestCount)
+		}
+	})
+}
+
+func TestWebhook_WebhookDataStructure(t *testing.T) {
+	receivedData := make(chan *WebhookData, 1)
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var data WebhookData
+		if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
+			t.Errorf("Failed to decode data: %v", err)
+			return
+		}
+		receivedData <- &data
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		task := NewTask()
+		task.Protocol = "http"
+		task.Status = base.DownloadStatusDone
+		task.Meta = &mockFetcherMeta
+
+		downloader.triggerWebhooks(WebhookEventDownloadDone, task, nil)
+
+		select {
+		case data := <-receivedData:
+			// Verify event
+			if data.Event != WebhookEventDownloadDone {
+				t.Errorf("Expected event DOWNLOAD_DONE, got %s", data.Event)
+			}
+			// Verify time is set
+			if data.Time == 0 {
+				t.Error("Expected time to be set")
+			}
+			// Verify payload
+			if data.Payload == nil {
+				t.Error("Expected payload to be present")
+			}
+			if data.Payload.Task == nil {
+				t.Error("Expected task in payload to be present")
+			}
+			// Verify task is cloned (has same ID but different pointer)
+			if data.Payload.Task.ID != task.ID {
+				t.Errorf("Expected task ID %s, got %s", task.ID, data.Payload.Task.ID)
+			}
+		case <-time.After(2 * time.Second):
+			t.Error("Timeout waiting for webhook")
+		}
+	})
+}
+
+func TestWebhook_SendTestWebhook_EmptyUrls(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Extra = make(map[string]any)
+		cfg.Webhook.URLs = []string{}
+		downloader.PutConfig(cfg)
+
+		err := downloader.SendTestWebhook()
+		if err != nil {
+			t.Errorf("Expected no error for empty URLs, got: %v", err)
+		}
+	})
+}
+
+func TestWebhook_SendTestWebhook_MixedResults(t *testing.T) {
+	// First server returns 200
+	server1 := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server1.Close()
+
+	// Second server returns 500
+	server2 := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusInternalServerError)
+	}))
+	defer server2.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		cfg, _ := downloader.GetConfig()
+		cfg.Webhook = &base.WebhookConfig{
+			Enable: true,
+			URLs:   []string{server1.URL, server2.URL},
+		}
+		downloader.PutConfig(cfg)
+
+		// Should fail because server2 returns 500
+		err := downloader.SendTestWebhook()
+		if err == nil {
+			t.Error("Expected error when one server returns non-200 status")
+		}
+	})
+}
+
+func TestWebhook_TestWebhookUrl_InvalidUrl(t *testing.T) {
+	setupWebhookTest(t, func(downloader *Downloader) {
+		err := downloader.TestWebhookUrl("://invalid")
+		if err == nil {
+			t.Error("Expected error for invalid URL")
+		}
+	})
+}
+
+func TestWebhook_TestWebhookUrl_VerifyTestPayload(t *testing.T) {
+	receivedData := make(chan *WebhookData, 1)
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var data WebhookData
+		if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
+			t.Errorf("Failed to decode data: %v", err)
+			return
+		}
+		receivedData <- &data
+		w.WriteHeader(http.StatusOK)
+	}))
+	defer server.Close()
+
+	setupWebhookTest(t, func(downloader *Downloader) {
+		err := downloader.TestWebhookUrl(server.URL)
+		if err != nil {
+			t.Errorf("TestWebhookUrl failed: %v", err)
+		}
+
+		select {
+		case data := <-receivedData:
+			// Verify it's a test webhook
+			if data.Event != WebhookEventDownloadDone {
+				t.Errorf("Expected event DOWNLOAD_DONE, got %s", data.Event)
+			}
+			if data.Payload == nil || data.Payload.Task == nil {
+				t.Error("Expected payload with task")
+			}
+			// Verify test task properties
+			task := data.Payload.Task
+			if task.Protocol != "http" {
+				t.Errorf("Expected protocol 'http', got '%s'", task.Protocol)
+			}
+			if task.Status != base.DownloadStatusDone {
+				t.Errorf("Expected status Done, got %s", task.Status)
+			}
+			if task.Meta == nil || task.Meta.Req == nil {
+				t.Error("Expected meta and request in test task")
+			}
+			if task.Meta.Req.URL != "https://example.com/test-file.zip" {
+				t.Errorf("Expected test URL, got %s", task.Meta.Req.URL)
+			}
+		case <-time.After(2 * time.Second):
+			t.Error("Timeout waiting for webhook")
+		}
+	})
+}
+
+func setupWebhookTest(t *testing.T, fn func(downloader *Downloader)) {
+	defaultDownloader.Setup()
+	defaultDownloader.cfg.StorageDir = ".test_storage"
+	defaultDownloader.cfg.DownloadDir = ".test_download"
+	defer func() {
+		defaultDownloader.Clear()
+		os.RemoveAll(defaultDownloader.cfg.StorageDir)
+		os.RemoveAll(defaultDownloader.cfg.DownloadDir)
+	}()
+	fn(defaultDownloader)
+}
@@ -9,11 +9,28 @@ type ReqExtra struct {
 type OptsExtra struct {
 	Connections int `json:"connections"`
 	// AutoTorrent when task download complete, and it is a .torrent file, it will be auto create a new task for the torrent file
-	AutoTorrent bool `json:"autoTorrent"`
+	// nil means use global config, true/false means explicit setting
+	AutoTorrent *bool `json:"autoTorrent"`
+	// DeleteTorrentAfterDownload when true, deletes the .torrent file after creating BT task
+	// nil means use global config, true/false means explicit setting
+	DeleteTorrentAfterDownload *bool `json:"deleteTorrentAfterDownload"`
+	// AutoExtract when task download complete, and it is an archive file, it will be auto extracted
+	// nil means use global config, true/false means explicit setting
+	AutoExtract *bool `json:"autoExtract"`
+	// ArchivePassword is the password for extracting password-protected archives
+	ArchivePassword string `json:"archivePassword"`
+	// DeleteAfterExtract when true, deletes the archive file after successful extraction
+	DeleteAfterExtract bool `json:"deleteAfterExtract"`
 }

 // Stats for download
 type Stats struct {
-	// http stats
-	// health indicators of http
+	Connections []*StatsConnection `json:"connections"`
+}
+
+type StatsConnection struct {
+	Downloaded int64 `json:"downloaded"`
+	Completed  bool  `json:"completed"`
+	Failed     bool  `json:"failed"`
+	RetryTimes int   `json:"retryTimes"`
 }
@@ -1,14 +1,15 @@
 package rest

 import (
-	"github.com/GopeedLab/gopeed/pkg/base"
-	"github.com/GopeedLab/gopeed/pkg/download"
-	"github.com/GopeedLab/gopeed/pkg/rest/model"
-	"github.com/gorilla/mux"
 	"io"
 	"net/http"
 	"net/url"
 	"runtime"
+
+	"github.com/GopeedLab/gopeed/pkg/base"
+	"github.com/GopeedLab/gopeed/pkg/download"
+	"github.com/GopeedLab/gopeed/pkg/rest/model"
+	"github.com/gorilla/mux"
 )

 func Info(w http.ResponseWriter, r *http.Request) {
@@ -23,9 +24,9 @@ func Info(w http.ResponseWriter, r *http.Request) {
 }

 func Resolve(w http.ResponseWriter, r *http.Request) {
-	var req base.Request
+	var req model.ResolveTask
 	if ReadJson(r, w, &req) {
-		rr, err := Downloader.Resolve(&req)
+		rr, err := Downloader.Resolve(req.Req, req.Opts)
 		if err != nil {
 			WriteJson(w, model.NewErrorResult(err.Error()))
 			return
@@ -42,9 +43,9 @@ func CreateTask(w http.ResponseWriter, r *http.Request) {
 			err    error
 		)
 		if req.Rid != "" {
-			taskId, err = Downloader.Create(req.Rid, req.Opt)
+			taskId, err = Downloader.Create(req.Rid)
 		} else if req.Req != nil {
-			taskId, err = Downloader.CreateDirect(req.Req, req.Opt)
+			taskId, err = Downloader.CreateDirect(req.Req, req.Opts)
 		} else {
 			WriteJson(w, model.NewErrorResult("param invalid: rid or req", model.CodeInvalidParam))
 			return
@@ -58,13 +59,13 @@ func CreateTask(w http.ResponseWriter, r *http.Request) {
 }

 func CreateTaskBatch(w http.ResponseWriter, r *http.Request) {
-	var req model.CreateTaskBatch
+	var req base.CreateTaskBatch
 	if ReadJson(r, w, &req) {
 		if len(req.Reqs) == 0 {
 			WriteJson(w, model.NewErrorResult("param invalid: reqs", model.CodeInvalidParam))
 			return
 		}
-		taskIds, err := Downloader.CreateDirectBatch(req.Reqs, req.Opt)
+		taskIds, err := Downloader.CreateDirectBatch(&req)
 		if err != nil {
 			WriteJson(w, model.NewErrorResult(err.Error()))
 			return
@@ -309,6 +310,8 @@ func DoProxy(w http.ResponseWriter, r *http.Request) {
 	r.RequestURI = ""
 	r.URL = targetUrl
 	r.Host = targetUrl.Host
+	r.Header.Del("Authorization")
+	r.Header.Del("X-Target-Uri")
 	resp, err := http.DefaultClient.Do(r)
 	if err != nil {
 		writeError(w, err.Error())
@@ -387,3 +390,14 @@ func getServerConfig() *base.DownloaderStoreConfig {
 	cfg, _ := Downloader.GetConfig()
 	return cfg
 }
+
+func TestWebhook(w http.ResponseWriter, r *http.Request) {
+	var req model.TestWebhookReq
+	if ReadJson(r, w, &req) {
+		if err := Downloader.TestWebhookUrl(req.URL); err != nil {
+			WriteJson(w, model.NewErrorResult(err.Error()))
+			return
+		}
+		WriteJson(w, model.NewNilResult())
+	}
+}
@@ -0,0 +1,34 @@
+package rest
+
+import (
+	"compress/gzip"
+	"io"
+	"net/http"
+	"strings"
+)
+
+type gzipResponseWriter struct {
+	io.Writer
+	http.ResponseWriter
+}
+
+func (g gzipResponseWriter) Write(b []byte) (int, error) {
+	return g.Writer.Write(b)
+}
+
+func gzipMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if !strings.Contains(r.Header.Get("Accept-Encoding"), "gzip") {
+			next.ServeHTTP(w, r)
+			return
+		}
+
+		w.Header().Set("Content-Encoding", "gzip")
+		w.Header().Add("Vary", "Accept-Encoding")
+
+		gz := gzip.NewWriter(w)
+		defer gz.Close()
+
+		next.ServeHTTP(gzipResponseWriter{Writer: gz, ResponseWriter: w}, r)
+	})
+}
@@ -1,7 +1,6 @@
 package model

 import (
-	"encoding/base64"
 	"github.com/GopeedLab/gopeed/pkg/base"
 	"io/fs"
 )
@@ -25,9 +24,9 @@ type StartConfig struct {

 	ProductionMode bool

-	WebEnable    bool
-	WebFS        fs.FS
-	WebBasicAuth *WebBasicAuth
+	WebEnable bool
+	WebFS     fs.FS
+	WebAuth   *WebAuth
 }

 func (cfg *StartConfig) Init() *StartConfig {
@@ -49,13 +48,7 @@ func (cfg *StartConfig) Init() *StartConfig {
 	return cfg
 }

-type WebBasicAuth struct {
+type WebAuth struct {
 	Username string
 	Password string
 }
-
-// Authorization returns the value of the Authorization header to be used in HTTP requests.
-func (cfg *WebBasicAuth) Authorization() string {
-	userId := cfg.Username + ":" + cfg.Password
-	return "Basic " + base64.StdEncoding.EncodeToString([]byte(userId))
-}
@@ -2,13 +2,13 @@ package model

 import "github.com/GopeedLab/gopeed/pkg/base"

+type ResolveTask struct {
+	Req  *base.Request `json:"req"`
+	Opts *base.Options `json:"opts"`
+}
 type CreateTask struct {
-	Rid string        `json:"rid"`
-	Req *base.Request `json:"req"`
-	Opt *base.Options `json:"opt"`
-}
+	Rid string `json:"rid"`

-type CreateTaskBatch struct {
-	Reqs []*base.Request `json:"reqs"`
-	Opt  *base.Options   `json:"opt"`
+	Req  *base.Request `json:"req"`
+	Opts *base.Options `json:"opts"`
 }
@@ -0,0 +1,6 @@
+package model
+
+// TestWebhookReq is the request body for testing a single webhook URL
+type TestWebhookReq struct {
+	URL string `json:"url"`
+}
@@ -2,6 +2,10 @@ package rest

 import (
 	"context"
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/rand"
+	"encoding/base64"
 	"encoding/json"
 	"fmt"
 	"github.com/GopeedLab/gopeed/pkg/download"
@@ -10,17 +14,22 @@ import (
 	"github.com/gorilla/handlers"
 	"github.com/gorilla/mux"
 	"github.com/pkg/errors"
+	"io"
+	"io/fs"
 	"net"
 	"net/http"
 	"os"
 	"path/filepath"
 	"regexp"
+	"strconv"
 	"strings"
+	"time"
 )

 var (
 	srv         *http.Server
 	runningPort int
+	aesKey      []byte

 	Downloader *download.Downloader
 )
@@ -56,7 +65,9 @@ func Stop() {
 	}()

 	if srv != nil {
-		if err := srv.Shutdown(context.TODO()); err != nil {
+		shutdownCtx, cancel := context.WithTimeout(context.Background(), 3*time.Second)
+		defer cancel()
+		if err := srv.Shutdown(shutdownCtx); err != nil {
 			Downloader.Logger.Warn().Err(err).Msg("shutdown server failed")
 		}
 	}
@@ -74,8 +85,9 @@ func BuildServer(startCfg *model.StartConfig) (*http.Server, net.Listener, error
 	startCfg.Init()

 	downloadCfg := &download.DownloaderConfig{
-		ProductionMode:  startCfg.ProductionMode,
-		RefreshInterval: startCfg.RefreshInterval,
+		ProductionMode:    startCfg.ProductionMode,
+		RefreshInterval:   startCfg.RefreshInterval,
+		WhiteDownloadDirs: startCfg.WhiteDownloadDirs,
 	}
 	if startCfg.Storage == model.StorageBolt {
 		downloadCfg.Storage = download.NewBoltStorage(startCfg.StorageDir)
@@ -93,6 +105,13 @@ func BuildServer(startCfg *model.StartConfig) (*http.Server, net.Listener, error
 		util.SafeRemove(startCfg.Address)
 	}

+	if startCfg.WebEnable {
+		aesKey = make([]byte, 32)
+		if _, err := rand.Read(aesKey); err != nil {
+			return nil, nil, errors.Wrap(err, "generate aes key failed")
+		}
+	}
+
 	listener, err := net.Listen(startCfg.Network, startCfg.Address)
 	if err != nil {
 		return nil, nil, err
@@ -122,28 +141,96 @@ func BuildServer(startCfg *model.StartConfig) (*http.Server, net.Listener, error
 	r.Methods(http.MethodDelete).Path("/api/v1/extensions/{identity}").HandlerFunc(DeleteExtension)
 	r.Methods(http.MethodGet).Path("/api/v1/extensions/{identity}/update").HandlerFunc(UpdateCheckExtension)
 	r.Methods(http.MethodPost).Path("/api/v1/extensions/{identity}/update").HandlerFunc(UpdateExtension)
+	r.Methods(http.MethodPost).Path("/api/v1/webhook/test").HandlerFunc(TestWebhook)
 	r.Path("/api/v1/proxy").HandlerFunc(DoProxy)
+
+	enableApiToken := startCfg.ApiToken != ""
+	enableBasicAuth := startCfg.WebEnable && startCfg.WebAuth != nil
 	if startCfg.WebEnable {
+		if enableBasicAuth {
+			r.Methods(http.MethodPost).Path("/api/web/login").HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+				var loginReq model.WebAuth
+				if ReadJson(r, w, &loginReq) {
+					if loginReq.Username == startCfg.WebAuth.Username && loginReq.Password == startCfg.WebAuth.Password {
+						// Generate a login token, Username:Password:Timestamp
+						timestamp := time.Now().Unix()
+						tokenData := fmt.Sprintf("%s:%s:%d", loginReq.Username, loginReq.Password, timestamp)
+						token, err := aesEncrypt(aesKey, []byte(tokenData))
+						if err != nil {
+							WriteJson(w, model.NewErrorResult(err.Error()))
+							return
+						}
+
+						WriteJson(w, model.NewOkResult(token))
+						return
+					}
+				}
+				WriteStatusJson(w, http.StatusUnauthorized, model.NewErrorResult("unauthorized", model.CodeUnauthorized))
+			})
+		}
 		r.PathPrefix("/fs/tasks").Handler(http.FileServer(new(taskFileSystem)))
 		r.PathPrefix("/fs/extensions").Handler(http.FileServer(new(extensionFileSystem)))
-		r.PathPrefix("/").Handler(http.FileServer(http.FS(startCfg.WebFS)))
+		r.PathPrefix("/").Handler(gzipMiddleware(http.FileServer(newEmbedCacheFileSystem(http.FS(startCfg.WebFS)))))
 	}
+	if enableApiToken || enableBasicAuth {
+		writeUnauthorized := func(w http.ResponseWriter, r *http.Request) {
+			WriteStatusJson(w, http.StatusUnauthorized, model.NewErrorResult("unauthorized", model.CodeUnauthorized))
+		}

-	if startCfg.ApiToken != "" || (startCfg.WebEnable && startCfg.WebBasicAuth != nil) {
 		r.Use(func(h http.Handler) http.Handler {
 			return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-				if startCfg.ApiToken != "" && r.Header.Get("X-Api-Token") == startCfg.ApiToken {
-					h.ServeHTTP(w, r)
-					return
+				if enableApiToken {
+					apiTokenHeader := r.Header["X-Api-Token"]
+					// If api token header is set, only check api token ignore basic auth
+					if len(apiTokenHeader) > 0 {
+						if apiTokenHeader[0] == startCfg.ApiToken {
+							h.ServeHTTP(w, r)
+							return
+						}
+
+						writeUnauthorized(w, r)
+						return
+					}
 				}
-				if startCfg.WebEnable && startCfg.WebBasicAuth != nil {
-					if r.Header.Get("Authorization") == startCfg.WebBasicAuth.Authorization() {
+
+				if enableBasicAuth {
+					if !strings.HasPrefix(r.URL.Path, "/api/") || r.URL.Path == "/api/web/login" {
 						h.ServeHTTP(w, r)
 						return
 					}
-					w.Header().Set("WWW-Authenticate", "Basic realm=\"gopeed web\"")
+
+					token := r.Header.Get("Authorization")
+					if token == "" {
+						writeUnauthorized(w, r)
+						return
+					}
+
+					token = strings.TrimPrefix(token, "Bearer ")
+					tokenData, err := aesDecrypt(aesKey, token)
+					if err != nil {
+						writeUnauthorized(w, r)
+						return
+					}
+					parts := strings.SplitN(string(tokenData), ":", 3)
+					username := parts[0]
+					password := parts[1]
+					timestamp, _ := strconv.Atoi(parts[2])
+
+					if username != startCfg.WebAuth.Username || password != startCfg.WebAuth.Password {
+						writeUnauthorized(w, r)
+						return
+					}
+
+					// Check if the token is expired (7 days)
+					if time.Now().Unix()-int64(timestamp) > 7*24*3600 {
+						writeUnauthorized(w, r)
+						return
+					}
+
+					h.ServeHTTP(w, r)
+					return
 				}
-				WriteStatusJson(w, http.StatusUnauthorized, model.NewErrorResult("unauthorized", model.CodeUnauthorized))
+				writeUnauthorized(w, r)
 			})
 		})
 	}
@@ -163,9 +250,10 @@ func BuildServer(startCfg *model.StartConfig) (*http.Server, net.Listener, error
 	})

 	srv = &http.Server{Handler: handlers.CORS(
-		handlers.AllowedHeaders([]string{"Content-Type", "X-Api-Token", "X-Target-Uri"}),
+		handlers.AllowedHeaders([]string{"Content-Type", "Authorization", "X-Api-Token", "X-Target-Uri"}),
 		handlers.AllowedMethods([]string{"GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"}),
 		handlers.AllowedOrigins([]string{"*"}),
+		handlers.AllowCredentials(),
 	)(r)}
 	return srv, listener, nil
 }
@@ -222,6 +310,68 @@ func (e *extensionFileSystem) Open(name string) (http.File, error) {
 	return os.Open(filepath.Join(extensionPath, path))
 }

+type embedCacheFileSystem struct {
+	fs          http.FileSystem
+	lastModTime time.Time
+}
+
+func newEmbedCacheFileSystem(fs http.FileSystem) *embedCacheFileSystem {
+	efs := &embedCacheFileSystem{
+		fs:          fs,
+		lastModTime: time.Now(),
+	}
+
+	exe, err := os.Executable()
+	if err != nil {
+		return efs
+	}
+
+	fi, err := os.Stat(exe)
+	if err != nil {
+		return efs
+	}
+
+	efs.lastModTime = fi.ModTime()
+	return efs
+}
+
+func (e *embedCacheFileSystem) Open(name string) (http.File, error) {
+	file, err := e.fs.Open(name)
+	if err != nil {
+		return nil, err
+	}
+
+	return &embedFile{
+		File:        file,
+		lastModTime: e.lastModTime,
+	}, nil
+}
+
+type embedFile struct {
+	http.File
+	lastModTime time.Time
+}
+
+type embedFileInfo struct {
+	fs.FileInfo
+	lastModTime time.Time
+}
+
+func (e *embedFileInfo) ModTime() time.Time {
+	return e.lastModTime
+}
+
+func (e *embedFile) Stat() (fs.FileInfo, error) {
+	fi, err := e.File.Stat()
+	if err != nil {
+		return nil, err
+	}
+	return &embedFileInfo{
+		FileInfo:    fi,
+		lastModTime: e.lastModTime,
+	}, nil
+}
+
 func ReadJson(r *http.Request, w http.ResponseWriter, v any) bool {
 	if err := json.NewDecoder(r.Body).Decode(v); err != nil {
 		WriteJson(w, model.NewErrorResult(err.Error()))
@@ -239,3 +389,47 @@ func WriteStatusJson(w http.ResponseWriter, statusCode int, v any) {
 	w.WriteHeader(statusCode)
 	json.NewEncoder(w).Encode(v)
 }
+
+func aesEncrypt(key, data []byte) (string, error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return "", err
+	}
+
+	gcm, err := cipher.NewGCM(block)
+	if err != nil {
+		return "", err
+	}
+
+	nonce := make([]byte, gcm.NonceSize())
+	if _, err := io.ReadFull(rand.Reader, nonce); err != nil {
+		return "", err
+	}
+
+	cipherText := gcm.Seal(nonce, nonce, data, nil)
+	return base64.StdEncoding.EncodeToString(cipherText), nil
+}
+
+func aesDecrypt(key []byte, encryptedData string) ([]byte, error) {
+	cipherText, err := base64.StdEncoding.DecodeString(encryptedData)
+	if err != nil {
+		return nil, err
+	}
+
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+
+	gcm, err := cipher.NewGCM(block)
+	if err != nil {
+		return nil, err
+	}
+
+	if len(cipherText) < gcm.NonceSize() {
+		return nil, errors.New("ciphertext too short")
+	}
+
+	nonce, cipherText := cipherText[:gcm.NonceSize()], cipherText[gcm.NonceSize():]
+	return gcm.Open(nil, nonce, cipherText, nil)
+}
@@ -6,18 +6,21 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
-	"github.com/GopeedLab/gopeed/internal/test"
-	"github.com/GopeedLab/gopeed/pkg/base"
-	"github.com/GopeedLab/gopeed/pkg/download"
-	"github.com/GopeedLab/gopeed/pkg/rest/model"
 	"io"
 	"net"
 	"net/http"
 	"os"
+	"path/filepath"
 	"reflect"
+	"strings"
 	"sync"
 	"testing"
 	"time"
+
+	"github.com/GopeedLab/gopeed/internal/test"
+	"github.com/GopeedLab/gopeed/pkg/base"
+	"github.com/GopeedLab/gopeed/pkg/download"
+	"github.com/GopeedLab/gopeed/pkg/rest/model"
 )

 var (
@@ -50,13 +53,13 @@ var (
 			"connections": 2,
 		},
 	}
-	createReq = &model.CreateTask{
-		Req: taskReq,
-		Opt: createOpts,
+	resolveReq = &model.ResolveTask{
+		Req:  taskReq,
+		Opts: createOpts,
 	}
-	createResoledReq = &model.CreateTask{
-		Req: taskReq,
-		Opt: createOpts,
+	createReq = &model.CreateTask{
+		Req:  taskReq,
+		Opts: createOpts,
 	}
 	installExtensionReq = &model.InstallExtension{
 		URL: "https://github.com/GopeedLab/gopeed-extension-samples#github-contributor-avatars-sample",
@@ -77,7 +80,7 @@ func TestInfo(t *testing.T) {

 func TestResolve(t *testing.T) {
 	doTest(func() {
-		resp := httpRequestCheckOk[*download.ResolveResult](http.MethodPost, "/api/v1/resolve", taskReq)
+		resp := httpRequestCheckOk[*download.ResolveResult](http.MethodPost, "/api/v1/resolve", resolveReq)
 		if !test.AssertResourceEqual(taskRes, resp.Res) {
 			t.Errorf("Resolve() got = %v, want %v", test.ToJson(resp.Res), test.ToJson(taskRes))
 		}
@@ -86,7 +89,7 @@ func TestResolve(t *testing.T) {

 func TestCreateTask(t *testing.T) {
 	doTest(func() {
-		resp := httpRequestCheckOk[*download.ResolveResult](http.MethodPost, "/api/v1/resolve", taskReq)
+		resp := httpRequestCheckOk[*download.ResolveResult](http.MethodPost, "/api/v1/resolve", resolveReq)

 		var wg sync.WaitGroup
 		wg.Add(1)
@@ -98,7 +101,6 @@ func TestCreateTask(t *testing.T) {

 		taskId := httpRequestCheckOk[string](http.MethodPost, "/api/v1/tasks", &model.CreateTask{
 			Rid: resp.ID,
-			Opt: createOpts,
 		})
 		if taskId == "" {
 			t.Fatal("create task failed")
@@ -139,11 +141,13 @@ func TestCreateDirectTask(t *testing.T) {

 func TestCreateDirectTaskBatch(t *testing.T) {
 	doTest(func() {
-		reqs := make([]*base.Request, 0)
+		reqs := make([]*base.CreateTaskBatchItem, 0)
 		for i := 0; i < 5; i++ {
-			reqs = append(reqs, createReq.Req)
+			reqs = append(reqs, &base.CreateTaskBatchItem{
+				Req: createReq.Req,
+			})
 		}
-		taskIds := httpRequestCheckOk[[]string](http.MethodPost, "/api/v1/tasks/batch", &model.CreateTaskBatch{
+		taskIds := httpRequestCheckOk[[]string](http.MethodPost, "/api/v1/tasks/batch", &base.CreateTaskBatch{
 			Reqs: reqs,
 		})
 		if len(taskIds) != len(reqs) {
@@ -152,26 +156,41 @@ func TestCreateDirectTaskBatch(t *testing.T) {
 	})
 }

-func TestCreateDirectTaskWithResoled(t *testing.T) {
+func TestCreateDirectTaskBatchWithOpt(t *testing.T) {
 	doTest(func() {
-		var wg sync.WaitGroup
-		wg.Add(1)
-		Downloader.Listener(func(event *download.Event) {
-			if event.Key == download.EventKeyFinally {
-				wg.Done()
+		reqs := make([]*base.CreateTaskBatchItem, 0)
+		for i := 0; i < 5; i++ {
+			item := &base.CreateTaskBatchItem{
+				Req: createReq.Req,
 			}
+			if i == 0 {
+				item.Opts = &base.Options{
+					Name: "spe_opt.data",
+				}
+			}
+			reqs = append(reqs, item)
+		}
+		taskIds := httpRequestCheckOk[[]string](http.MethodPost, "/api/v1/tasks/batch", &base.CreateTaskBatch{
+			Reqs: reqs,
+			Opts: &base.Options{
+				Name: "default_opt.data",
+			},
 		})
-
-		taskId := httpRequestCheckOk[string](http.MethodPost, "/api/v1/tasks", createResoledReq)
-		if taskId == "" {
-			t.Fatal("create task failed")
+		if len(taskIds) != len(reqs) {
+			t.Errorf("CreateDirectTaskBatch() got = %v, want %v", len(taskIds), len(reqs))
 		}

-		wg.Wait()
-		want := test.FileMd5(test.BuildFile)
-		got := test.FileMd5(test.DownloadFile)
-		if want != got {
-			t.Errorf("CreateDirectTaskWithResoled() got = %v, want %v", got, want)
+		for i, taskId := range taskIds {
+			task := httpRequestCheckOk[*download.Task](http.MethodGet, "/api/v1/tasks/"+taskId, nil)
+			if i == 0 {
+				if !strings.Contains(task.Name(), "spe_opt") {
+					t.Errorf("CreateDirectTaskBatch() got = %v, want %v", task.Name(), "spe_opt.data")
+				}
+			} else {
+				if !strings.Contains(task.Name(), "default_opt") {
+					t.Errorf("CreateDirectTaskBatch() got = %v, want %v", task.Name(), "default_opt.data")
+				}
+			}
 		}
 	})
 }
@@ -197,6 +216,7 @@ func TestPauseAndContinueTask(t *testing.T) {
 		if t2.Status != base.DownloadStatusPause {
 			t.Errorf("PauseTask() got = %v, want %v", t2.Status, base.DownloadStatusPause)
 		}
+		time.Sleep(time.Millisecond * 100)
 		httpRequestCheckOk[any](http.MethodPut, "/api/v1/tasks/"+taskId+"/continue", nil)
 		t3 := httpRequestCheckOk[*download.Task](http.MethodGet, "/api/v1/tasks/"+taskId, nil)
 		if t3.Status != base.DownloadStatusRunning {
@@ -221,6 +241,7 @@ func TestPauseAllAndContinueALLTasks(t *testing.T) {

 		createAndPause := func() {
 			taskId := httpRequestCheckOk[string](http.MethodPost, "/api/v1/tasks", createReq)
+			time.Sleep(time.Millisecond * 5)
 			httpRequestCheckOk[*download.Task](http.MethodPut, "/api/v1/tasks/"+taskId+"/pause", nil)
 		}

@@ -228,6 +249,7 @@ func TestPauseAllAndContinueALLTasks(t *testing.T) {
 		for i := 0; i < total; i++ {
 			createAndPause()
 		}
+		time.Sleep(time.Millisecond * 50)

 		// continue all
 		httpRequestCheckOk[any](http.MethodPut, "/api/v1/tasks/continue", nil)
@@ -478,6 +500,66 @@ func TestFsExtensionFail(t *testing.T) {
 	})
 }

+func TestWebFsEnhance(t *testing.T) {
+	indexHtml := `
+<!DOCTYPE html>
+<html lang="en">
+<head>
+	<meta charset="UTF-8">
+	<title>index</title>
+</head>
+<body>
+	<h1>index</h1>
+</body>
+</html>
+`
+	webDistPath := "dist"
+	os.MkdirAll("dist", os.ModePerm)
+	if err := os.WriteFile(filepath.Join(webDistPath, "index.html"), []byte(indexHtml), os.ModePerm); err != nil {
+		panic(err)
+	}
+	defer os.RemoveAll(webDistPath)
+
+	doTest0(func(cfg *model.StartConfig) {
+		cfg.WebFS = os.DirFS(webDistPath)
+	}, func() {
+		// First request no cache
+		code, header, _ := doHttpRequest1(http.MethodGet, "/index.html", map[string]string{
+			"Accept-Encoding": "gzip",
+		}, nil)
+		if code != http.StatusOK {
+			t.Errorf("TestWebFsEnhance() got = %v, want %v", code, http.StatusOK)
+		}
+		// Check header last-modified
+		if _, ok := header["Last-Modified"]; !ok {
+			t.Errorf("TestWebFsEnhance() missing key = %v", "Last-Modified")
+		}
+		// Check gzip compress
+		if _, ok := header["Content-Encoding"]; !ok || header["Content-Encoding"] != "gzip" {
+			t.Errorf("TestWebFsEnhance() no gzip compress")
+		}
+
+		// Request with If-Modified-Since
+		ifModifiedSince := header["Last-Modified"]
+		code, _, _ = doHttpRequest1(http.MethodGet, "/index.html", map[string]string{
+			"If-Modified-Since": ifModifiedSince,
+		}, nil)
+		if code != http.StatusNotModified {
+			t.Errorf("TestWebFsEnhance() got = %v, want %v", code, http.StatusNotModified)
+		}
+
+		// Request with un gzip
+		code, header, _ = doHttpRequest1(http.MethodGet, "/index.html?t=123", nil, nil)
+		if code != http.StatusOK {
+			t.Errorf("TestWebFsEnhance() got = %v, want %v", code, http.StatusOK)
+		}
+		// Check no gzip compress
+		if _, ok := header["Content-Encoding"]; ok && header["Content-Encoding"] == "gzip" {
+			t.Errorf("TestWebFsEnhance() has gzip compress")
+		}
+	})
+}
+
 func TestDoProxy(t *testing.T) {
 	doTest(func() {
 		code, respBody := doHttpRequest0(http.MethodGet, "/api/v1/proxy", map[string]string{
@@ -503,6 +585,116 @@ func TestDoProxy(t *testing.T) {
 	})
 }

+func TestTestWebhook(t *testing.T) {
+	doTest(func() {
+		// Set up a mock webhook server
+		webhookReceived := false
+		var receivedData map[string]interface{}
+		var wg sync.WaitGroup
+		wg.Add(1)
+
+		webhookServer := http.Server{
+			Handler: http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+				if r.Method != http.MethodPost {
+					w.WriteHeader(http.StatusMethodNotAllowed)
+					return
+				}
+
+				body, err := io.ReadAll(r.Body)
+				if err != nil {
+					w.WriteHeader(http.StatusBadRequest)
+					return
+				}
+
+				if err := json.Unmarshal(body, &receivedData); err != nil {
+					w.WriteHeader(http.StatusBadRequest)
+					return
+				}
+
+				// Check Content-Type
+				if r.Header.Get("Content-Type") != "application/json" {
+					t.Errorf("TestWebhook() Content-Type got = %v, want %v", r.Header.Get("Content-Type"), "application/json")
+				}
+
+				webhookReceived = true
+				w.WriteHeader(http.StatusOK)
+				wg.Done()
+			}),
+		}
+
+		// Start webhook server
+		listener, err := net.Listen("tcp", "127.0.0.1:0")
+		if err != nil {
+			t.Fatal(err)
+		}
+		webhookPort := listener.Addr().(*net.TCPAddr).Port
+		webhookURL := fmt.Sprintf("http://127.0.0.1:%d/webhook", webhookPort)
+
+		go webhookServer.Serve(listener)
+		defer webhookServer.Close()
+
+		// Test with valid webhook URL
+		httpRequestCheckOk[any](http.MethodPost, "/api/v1/webhook/test", &model.TestWebhookReq{
+			URL: webhookURL,
+		})
+
+		// Wait for webhook to be received
+		wg.Wait()
+
+		if !webhookReceived {
+			t.Error("TestWebhook() webhook was not received")
+		}
+
+		// Verify webhook data structure
+		if receivedData["event"] == nil {
+			t.Error("TestWebhook() missing 'event' field")
+		}
+		if receivedData["time"] == nil {
+			t.Error("TestWebhook() missing 'time' field")
+		}
+		if receivedData["payload"] == nil {
+			t.Error("TestWebhook() missing 'payload' field")
+		}
+
+		// Test with invalid webhook URL
+		code, _ := httpRequest[any](http.MethodPost, "/api/v1/webhook/test", &model.TestWebhookReq{
+			URL: "http://invalid-webhook-url-that-does-not-exist.local:99999/webhook",
+		})
+		checkCode(code, model.CodeError)
+
+		// Test with empty URL
+		code, _ = httpRequest[any](http.MethodPost, "/api/v1/webhook/test", &model.TestWebhookReq{
+			URL: "",
+		})
+		checkCode(code, model.CodeError)
+
+		// Test with webhook server returning non-200 status
+		wg.Add(1)
+		badWebhookServer := http.Server{
+			Handler: http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+				w.WriteHeader(http.StatusBadRequest)
+				wg.Done()
+			}),
+		}
+		badListener, err := net.Listen("tcp", "127.0.0.1:0")
+		if err != nil {
+			t.Fatal(err)
+		}
+		badWebhookPort := badListener.Addr().(*net.TCPAddr).Port
+		badWebhookURL := fmt.Sprintf("http://127.0.0.1:%d/webhook", badWebhookPort)
+
+		go badWebhookServer.Serve(badListener)
+		defer badWebhookServer.Close()
+
+		code, _ = httpRequest[any](http.MethodPost, "/api/v1/webhook/test", &model.TestWebhookReq{
+			URL: badWebhookURL,
+		})
+		checkCode(code, model.CodeError)
+
+		wg.Wait()
+	})
+}
+
 func TestApiToken(t *testing.T) {
 	var cfg = &model.StartConfig{}
 	cfg.Init()
@@ -534,7 +726,7 @@ func TestAuthorization(t *testing.T) {
 	cfg.Init()
 	cfg.ApiToken = "123456"
 	cfg.WebEnable = true
-	cfg.WebBasicAuth = &model.WebBasicAuth{
+	cfg.WebAuth = &model.WebAuth{
 		Username: "admin",
 		Password: "123456",
 	}
@@ -546,14 +738,61 @@ func TestAuthorization(t *testing.T) {
 		Stop()
 	}()

-	status, _ := doHttpRequest0(http.MethodGet, "/api/v1/config", nil, nil)
+	status, _ := doHttpRequest0(http.MethodPost, "/api/web/login", nil, &model.WebAuth{
+		Username: "xxx",
+		Password: "xxx",
+	})
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	token := httpRequestCheckOk[string](http.MethodPost, "/api/web/login", cfg.WebAuth)
+	authToken := fmt.Sprintf("Bearer %s", token)
+	authHeaders := map[string]string{
+		"Authorization": authToken,
+	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", nil, nil)
 	if status != http.StatusUnauthorized {
 		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
 	}

 	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
-		"Authorization": cfg.WebBasicAuth.Authorization(),
+		"Authorization": "xxx",
 	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": "xxx",
+	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	buildToken := func(username, password string, ts int64) string {
+		token, _ := aesEncrypt(aesKey, []byte(fmt.Sprintf("%s:%s:%d", username, password, ts)))
+		return token
+	}
+
+	fakeToken := buildToken("fake", "fake", time.Now().Unix())
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": fmt.Sprintf("Bearer %s", fakeToken),
+	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	expireToken := buildToken(cfg.WebAuth.Username, cfg.WebAuth.Password, time.Now().Add(-time.Hour*8*24).Unix())
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": fmt.Sprintf("Bearer %s", expireToken),
+	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", authHeaders, nil)
 	if status != http.StatusOK {
 		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusOK)
 	}
@@ -564,15 +803,38 @@ func TestAuthorization(t *testing.T) {
 	if status != http.StatusOK {
 		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusOK)
 	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": authToken,
+		"X-Api-Token":   cfg.ApiToken,
+	}, nil)
+	if status != http.StatusOK {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusOK)
+	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": authToken,
+		"X-Api-Token":   "",
+	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
 }

 func doTest(handler func()) {
+	doTest0(nil, handler)
+}
+
+func doTest0(onStart func(cfg *model.StartConfig), handler func()) {
 	testFunc := func(storage model.Storage) {
 		var cfg = &model.StartConfig{}
 		cfg.Init()
 		cfg.Storage = storage
 		cfg.StorageDir = ".test_storage"
 		cfg.WebEnable = true
+		if onStart != nil {
+			onStart(cfg)
+		}
 		fileListener := doStart(cfg)
 		defer func() {
 			if err := fileListener.Close(); err != nil {
@@ -582,6 +844,7 @@ func doTest(handler func()) {
 			Downloader.Clear()
 		}()
 		defer func() {
+			time.Sleep(500 * time.Millisecond)
 			Downloader.Pause(nil)
 			Downloader.Delete(nil, true)
 			os.RemoveAll(cfg.StorageDir)
@@ -603,6 +866,11 @@ func doStart(cfg *model.StartConfig) net.Listener {
 }

 func doHttpRequest0(method string, path string, headers map[string]string, body any) (int, []byte) {
+	r1, _, r3 := doHttpRequest1(method, path, headers, body)
+	return r1, r3
+}
+
+func doHttpRequest1(method string, path string, headers map[string]string, body any) (int, map[string]string, []byte) {
 	var reader io.Reader
 	if body != nil {
 		buf, _ := json.Marshal(body)
@@ -623,12 +891,18 @@ func doHttpRequest0(method string, path string, headers map[string]string, body
 		panic(err)
 	}
 	defer response.Body.Close()
+
+	respHeader := make(map[string]string)
+	for k, vv := range response.Header {
+		respHeader[k] = vv[0]
+	}
+
 	respBody, err := io.ReadAll(response.Body)
 	if err != nil {
 		panic(err)
 	}

-	return response.StatusCode, respBody
+	return response.StatusCode, respHeader, respBody
 }

 func doHttpRequest[T any](method string, path string, headers map[string]string, body any) (int, *model.Result[T]) {
@@ -5,14 +5,27 @@ import (
 	"math"
 )

+const unknownSize = "unknown"
+
 var unitArr = []string{"B", "KB", "MB", "GB", "TB", "PB", "EB"}

 func ByteFmt(size int64) string {
 	if size == 0 {
-		return "unknown"
+		return unknownSize
+	}
+	// Handle negative values
+	if size < 0 {
+		return unknownSize
 	}
 	fs := float64(size)
 	p := int(math.Log(fs) / math.Log(1024))
+	// Ensure index is within bounds
+	if p < 0 {
+		p = 0
+	}
+	if p >= len(unitArr) {
+		p = len(unitArr) - 1
+	}
 	val := fs / math.Pow(1024, float64(p))
 	_, frac := math.Modf(val)
 	if frac > 0 {
@@ -14,7 +14,17 @@ func TestByteFmt(t *testing.T) {
 		{
 			name: "unknown",
 			args: args{size: int64(0)},
-			want: "unknown",
+			want: unknownSize,
+		},
+		{
+			name: "negative value",
+			args: args{size: int64(-1)},
+			want: unknownSize,
+		},
+		{
+			name: "negative min int64",
+			args: args{size: int64(-9223372036854775808)},
+			want: unknownSize,
 		},
 		{
 			name: "100B",
@@ -51,6 +61,11 @@ func TestByteFmt(t *testing.T) {
 			args: args{size: int64(1024 * 1024 * 2)},
 			want: "2MB",
 		},
+		{
+			name: "large value",
+			args: args{size: int64(9223372036854775807)}, // max int64
+			want: "8EB",
+		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
@@ -26,3 +26,13 @@ func DeepClone[T any](v *T) *T {
 	json.Unmarshal(b, &t)
 	return &t
 }
+
+// Ptr returns a pointer to the given value.
+func Ptr[T any](v T) *T {
+	return &v
+}
+
+// BoolPtr returns a pointer to a bool value.
+func BoolPtr(v bool) *bool {
+	return &v
+}
@@ -8,6 +8,8 @@ import (
 	syspath "path"
 	"path/filepath"
 	"strings"
+	"time"
+	"unicode/utf8"
 )

 func Dir(path string) string {
@@ -50,12 +52,17 @@ func CheckDuplicateAndRename(path string) (string, error) {
 		return "", err
 	}

-	index := strings.LastIndex(name, ".")
+	ext := syspath.Ext(name)
 	var nameTpl string
-	if index == -1 {
+	// Special case: if the extension is the entire filename (like .gitignore),
+	// or if index of last dot is 0 (starts with dot), treat it as no extension
+	if ext == "" || ext == name || (len(ext) > 0 && strings.LastIndex(name, ".") == 0) {
+		// No extension or hidden file without extension
 		nameTpl = name + " (%d)"
 	} else {
-		nameTpl = name[:index] + " (%d)" + name[index:]
+		// Has extension
+		nameWithoutExt := name[:len(name)-len(ext)]
+		nameTpl = nameWithoutExt + " (%d)" + ext
 	}
 	for i := 1; ; i++ {
 		newName := fmt.Sprintf(nameTpl, i)
@@ -135,17 +142,6 @@ func CopyDir(source string, target string, excludeDir ...string) error {
 	return nil
 }

-// RmAndMkDirAll remove and create directory, if the directory already exists, it will be overwritten.
-func RmAndMkDirAll(path string) error {
-	if err := os.RemoveAll(path); err != nil {
-		return err
-	}
-	if err := os.MkdirAll(path, 0755); err != nil {
-		return err
-	}
-	return nil
-}
-
 // copy file, if the target file already exists, it will be overwritten.
 func copyForce(source string, target string) error {
 	sourceFile, err := os.Open(source)
@@ -184,7 +180,65 @@ func IsExistsFile(path string) bool {
 	return false
 }

+const (
+	// MaxFilenameLength is the maximum length in bytes for a filename
+	MaxFilenameLength = 100
+	// maxExtensionLength is the maximum length in bytes for a file extension
+	// to be treated as a valid extension. Extensions longer than this are
+	// treated as part of the filename to avoid edge cases.
+	maxExtensionLength = 20
+)
+
+// SafeFilename sanitizes a filename by replacing invalid characters and truncating to a safe length.
+// It performs two operations:
+// 1. Replaces invalid path characters (platform-specific) with underscores
+// 2. Truncates filename to MaxFilenameLength bytes while preserving the file extension
+// The function handles UTF-8 multi-byte characters correctly by truncating at valid boundaries.
+func SafeFilename(filename string) string {
+	if filename == "" {
+		return ""
+	}
+	
+	// Step 1: Replace invalid characters
+	for _, char := range invalidPathChars {
+		filename = strings.ReplaceAll(filename, char, "_")
+	}
+	
+	// Step 2: Truncate if needed
+	if len(filename) <= MaxFilenameLength {
+		return filename
+	}
+
+	// Find the extension (last dot in filename)
+	ext := ""
+	lastDot := strings.LastIndex(filename, ".")
+	
+	// Only treat as extension if:
+	// 1. There is a dot
+	// 2. The dot is not at the start (not a hidden file like .gitignore)
+	// 3. The extension is reasonable length (< maxExtensionLength bytes) to avoid edge cases
+	if lastDot > 0 && lastDot < len(filename)-1 && len(filename)-lastDot < maxExtensionLength {
+		ext = filename[lastDot:]
+		filename = filename[:lastDot]
+	}
+
+	// Calculate how much space we have for the base name
+	availableLength := MaxFilenameLength - len(ext)
+	
+	// Ensure we have at least some space for the base name
+	if availableLength < 1 {
+		// Extension itself is too long or no room, just truncate everything at byte boundary
+		return truncateAtValidUTF8Boundary(filename+ext, MaxFilenameLength)
+	}
+
+	// Truncate the base name at a valid UTF-8 boundary
+	truncatedBase := truncateAtValidUTF8Boundary(filename, availableLength)
+	
+	return truncatedBase + ext
+}
+
 // ReplaceInvalidFilename replace invalid path characters
+// Deprecated: Use SafeFilename instead which also handles length truncation
 func ReplaceInvalidFilename(path string) string {
 	if path == "" {
 		return ""
@@ -194,3 +248,88 @@ func ReplaceInvalidFilename(path string) string {
 	}
 	return path
 }
+
+// TruncateFilename truncates a filename to a maximum byte length while preserving the extension.
+// Deprecated: Use SafeFilename instead which also handles invalid character replacement
+func TruncateFilename(filename string, maxLength int) string {
+	// If already short enough, return as-is
+	if len(filename) <= maxLength {
+		return filename
+	}
+
+	// Find the extension (last dot in filename)
+	ext := ""
+	lastDot := strings.LastIndex(filename, ".")
+	
+	// Only treat as extension if:
+	// 1. There is a dot
+	// 2. The dot is not at the start (not a hidden file like .gitignore)
+	// 3. The extension is reasonable length (< maxExtensionLength bytes) to avoid edge cases
+	if lastDot > 0 && lastDot < len(filename)-1 && len(filename)-lastDot < maxExtensionLength {
+		ext = filename[lastDot:]
+		filename = filename[:lastDot]
+	}
+
+	// Calculate how much space we have for the base name
+	availableLength := maxLength - len(ext)
+	
+	// Ensure we have at least some space for the base name
+	if availableLength < 1 {
+		// Extension itself is too long or no room, just truncate everything at byte boundary
+		return truncateAtValidUTF8Boundary(filename+ext, maxLength)
+	}
+
+	// Truncate the base name at a valid UTF-8 boundary
+	truncatedBase := truncateAtValidUTF8Boundary(filename, availableLength)
+	
+	return truncatedBase + ext
+}
+
+// truncateAtValidUTF8Boundary truncates a string to at most maxBytes,
+// ensuring we don't cut in the middle of a UTF-8 character
+func truncateAtValidUTF8Boundary(s string, maxBytes int) string {
+	if len(s) <= maxBytes {
+		return s
+	}
+	
+	// Truncate at byte position
+	truncated := s[:maxBytes]
+	
+	// Find the last valid UTF-8 character boundary
+	// Walk backwards to find where the last complete character ends
+	for len(truncated) > 0 {
+		// Check if this is a valid UTF-8 string
+		if utf8.ValidString(truncated) {
+			return truncated
+		}
+		// Remove one byte and try again
+		truncated = truncated[:len(truncated)-1]
+	}
+	
+	return truncated
+}
+
+// ReplacePathPlaceholders replaces date placeholders in a path with actual values
+// Supported placeholders:
+//   - %year%  - Current year (e.g., 2025)
+//   - %month% - Current month (01-12)
+//   - %day%   - Current day (01-31)
+//   - %date%  - Full date format (2025-01-01)
+func ReplacePathPlaceholders(path string) string {
+	if path == "" {
+		return ""
+	}
+
+	now := time.Now()
+	year := fmt.Sprintf("%d", now.Year())
+	month := fmt.Sprintf("%02d", now.Month())
+	day := fmt.Sprintf("%02d", now.Day())
+	date := fmt.Sprintf("%s-%s-%s", year, month, day)
+
+	path = strings.ReplaceAll(path, "%year%", year)
+	path = strings.ReplaceAll(path, "%month%", month)
+	path = strings.ReplaceAll(path, "%day%", day)
+	path = strings.ReplaceAll(path, "%date%", date)
+
+	return path
+}
@@ -1,8 +1,11 @@
 package util

 import (
+	"fmt"
 	"os"
+	"strings"
 	"testing"
+	"time"
 )

 func TestDir(t *testing.T) {
@@ -106,13 +109,28 @@ func TestSafeRemove(t *testing.T) {
 }

 func TestCheckDuplicateAndRename(t *testing.T) {
+	// Test with extension
 	doCheckDuplicateAndRename(t, []string{}, "a.txt", "a.txt")
 	doCheckDuplicateAndRename(t, []string{"a.txt"}, "a.txt", "a (1).txt")
 	doCheckDuplicateAndRename(t, []string{"a.txt", "a (1).txt"}, "a.txt", "a (2).txt")

+	// Test without extension
 	doCheckDuplicateAndRename(t, []string{}, "a", "a")
 	doCheckDuplicateAndRename(t, []string{"a"}, "a", "a (1)")
 	doCheckDuplicateAndRename(t, []string{"a", "a (1)"}, "a", "a (2)")
+
+	// Test hidden files (starting with dot)
+	doCheckDuplicateAndRename(t, []string{}, ".gitignore", ".gitignore")
+	doCheckDuplicateAndRename(t, []string{".gitignore"}, ".gitignore", ".gitignore (1)")
+	doCheckDuplicateAndRename(t, []string{".gitignore", ".gitignore (1)"}, ".gitignore", ".gitignore (2)")
+
+	// Test hidden files with extension
+	doCheckDuplicateAndRename(t, []string{}, ".config.json", ".config.json")
+	doCheckDuplicateAndRename(t, []string{".config.json"}, ".config.json", ".config (1).json")
+
+	// Test multiple dots
+	doCheckDuplicateAndRename(t, []string{}, "test.tar.gz", "test.tar.gz")
+	doCheckDuplicateAndRename(t, []string{"test.tar.gz"}, "test.tar.gz", "test.tar (1).gz")
 }

 func doCheckDuplicateAndRename(t *testing.T, exitsPaths []string, path string, except string) {
@@ -225,3 +243,254 @@ func TestReplaceInvalidFilename(t *testing.T) {
 		})
 	}
 }
+
+// TestSafeFilename tests the combined filename sanitization functionality
+func TestSafeFilename(t *testing.T) {
+	tests := []struct {
+		name     string
+		filename string
+		want     string
+	}{
+		{
+			name:     "short filename - no changes needed",
+			filename: "test.txt",
+			want:     "test.txt",
+		},
+		{
+			name:     "empty filename",
+			filename: "",
+			want:     "",
+		},
+		{
+			name:     "invalid chars only",
+			filename: "te/st:file.txt",
+			want:     "te_st_file.txt",
+		},
+		{
+			name:     "long filename only",
+			filename: "this_is_a_very_long_filename_that_exceeds_the_maximum_allowed_length_and_should_be_truncated_properly.txt",
+			want:     "this_is_a_very_long_filename_that_exceeds_the_maximum_allowed_length_and_should_be_truncated_pro.txt",
+		},
+		{
+			name:     "both invalid chars and too long",
+			filename: "path/to/very:long*filename?that<exceeds>filesystem|limits_and_has_invalid_characters_everywhere.pdf",
+			want:     "path_to_very_long*filename?that<exceeds>filesystem|limits_and_has_invalid_characters_everywhere.pdf",
+		},
+		{
+			name:     "unicode with invalid chars and truncation",
+			filename: "测试/文件名:非常长的中文文件名_需要被截断_这是一个测试用的超长文件名.pdf",
+			want:     "测试_文件名_非常长的中文文件名_需要被截断_这是一个测试用的超长文.pdf",
+		},
+		{
+			name:     "hidden file with truncation",
+			filename: ".gitignore_with_very_long_name_that_needs_truncation_and_more_characters_to_exceed_the_maximum_length",
+			want:     ".gitignore_with_very_long_name_that_needs_truncation_and_more_characters_to_exceed_the_maximum_lengt",
+		},
+		{
+			name:     "multiple dots and invalid chars",
+			filename: "archive/tar.gz.backup:old.txt",
+			want:     "archive_tar.gz.backup_old.txt",
+		},
+		{
+			name:     "extension longer than reasonable",
+			filename: "test.verylongextensionthatshouldnotbetreatedasextension_with_more_characters_to_exceed_maximum_length",
+			want:     "test.verylongextensionthatshouldnotbetreatedasextension_with_more_characters_to_exceed_maximum_lengt",
+		},
+		{
+			name:     "filename with spaces and invalid chars",
+			filename: "my document/with:spaces and a very long name that needs to be truncated because it exceeds the maximum length.docx",
+			want:     "my document_with_spaces and a very long name that needs to be truncated because it exceeds the .docx",
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := SafeFilename(tt.filename)
+			if got != tt.want {
+				t.Errorf("SafeFilename() = %q (len=%d), want %q (len=%d)",
+					got, len(got), tt.want, len(tt.want))
+			}
+			// Verify result doesn't exceed MaxFilenameLength
+			if len(got) > MaxFilenameLength {
+				t.Errorf("SafeFilename() result length %d exceeds MaxFilenameLength %d",
+					len(got), MaxFilenameLength)
+			}
+		})
+	}
+}
+
+func TestReplacePathPlaceholders(t *testing.T) {
+	now := time.Now()
+	year := fmt.Sprintf("%d", now.Year())
+	month := fmt.Sprintf("%02d", now.Month())
+	day := fmt.Sprintf("%02d", now.Day())
+	date := fmt.Sprintf("%s-%s-%s", year, month, day)
+
+	tests := []struct {
+		name string
+		path string
+		want string
+	}{
+		{
+			name: "empty path",
+			path: "",
+			want: "",
+		},
+		{
+			name: "no placeholders",
+			path: "/home/user/Downloads",
+			want: "/home/user/Downloads",
+		},
+		{
+			name: "year placeholder",
+			path: "/Downloads/%year%",
+			want: "/Downloads/" + year,
+		},
+		{
+			name: "month placeholder",
+			path: "/Downloads/%month%",
+			want: "/Downloads/" + month,
+		},
+		{
+			name: "day placeholder",
+			path: "/Downloads/%day%",
+			want: "/Downloads/" + day,
+		},
+		{
+			name: "date placeholder",
+			path: "/Downloads/%date%",
+			want: "/Downloads/" + date,
+		},
+		{
+			name: "multiple placeholders",
+			path: "/Downloads/%year%-%month%",
+			want: "/Downloads/" + year + "-" + month,
+		},
+		{
+			name: "mixed path with placeholders",
+			path: "/home/user/Downloads/%year%/%month%/%day%",
+			want: "/home/user/Downloads/" + year + "/" + month + "/" + day,
+		},
+		{
+			name: "windows style path",
+			path: "D:\\Downloads\\%year%-%month%",
+			want: "D:\\Downloads\\" + year + "-" + month,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := ReplacePathPlaceholders(tt.path)
+			if !strings.Contains(got, year) && tt.path != "" && strings.Contains(tt.path, "%year%") {
+				t.Errorf("ReplacePathPlaceholders() = %v, want containing year %v", got, year)
+			}
+			if got != tt.want {
+				t.Errorf("ReplacePathPlaceholders() = %v, want %v", got, tt.want)
+			}
+		})
+	}
+}
+
+// TestTruncateFilename tests the filename truncation functionality
+func TestTruncateFilename(t *testing.T) {
+	tests := []struct {
+		name      string
+		filename  string
+		maxLength int
+		want      string
+	}{
+		{
+			name:      "short filename - no truncation",
+			filename:  "test.txt",
+			maxLength: 100,
+			want:      "test.txt",
+		},
+		{
+			name:      "filename at exact limit",
+			filename:  "abcdefghij.txt", // 14 chars
+			maxLength: 14,
+			want:      "abcdefghij.txt",
+		},
+		{
+			name:      "long filename with extension - truncate base",
+			filename:  "this_is_a_very_long_filename_that_exceeds_the_maximum_allowed_length_and_should_be_truncated_properly.txt",
+			maxLength: 100,
+			want:      "this_is_a_very_long_filename_that_exceeds_the_maximum_allowed_length_and_should_be_truncated_pro.txt",
+		},
+		{
+			name:      "long filename without extension",
+			filename:  "this_is_a_very_long_filename_without_extension_that_exceeds_maximum_length_and_needs_truncation",
+			maxLength: 100,
+			want:      "this_is_a_very_long_filename_without_extension_that_exceeds_maximum_length_and_needs_truncation",
+		},
+		{
+			name:      "filename with multiple dots",
+			filename:  "archive.tar.gz.backup.old.file.with.many.dots.txt",
+			maxLength: 30,
+			want:      "archive.tar.gz.backup.old..txt", // Preserves last extension
+		},
+		{
+			name:      "hidden file (starts with dot)",
+			filename:  ".gitignore_with_very_long_name_that_needs_truncation",
+			maxLength: 30,
+			want:      ".gitignore_with_very_long_name",
+		},
+		{
+			name:      "only extension (no base name)",
+			filename:  ".txt",
+			maxLength: 100,
+			want:      ".txt",
+		},
+		{
+			name:      "unicode characters in filename",
+			filename:  "测试文件名_非常长的中文文件名_需要被截断_这是一个测试用的超长文件名.pdf",
+			maxLength: 50,
+			want:      "测试文件名_非常长的中文文件名_.pdf", // Truncated at byte boundary, preserving UTF-8
+		},
+		{
+			name:      "extension longer than reasonable (>20 chars)",
+			filename:  "test.verylongextensionthatshouldnotbetreatedasextension",
+			maxLength: 30,
+			want:      "test.verylongextensionthatshou",
+		},
+		{
+			name:      "very short max length with extension",
+			filename:  "document.pdf",
+			maxLength: 10,
+			want:      "docume.pdf",
+		},
+		{
+			name:      "maxLength smaller than extension",
+			filename:  "test.pdf",
+			maxLength: 3,
+			want:      "tes",
+		},
+		{
+			name:      "empty filename",
+			filename:  "",
+			maxLength: 100,
+			want:      "",
+		},
+		{
+			name:      "filename with spaces",
+			filename:  "my document with spaces and a very long name that needs to be truncated.docx",
+			maxLength: 50,
+			want:      "my document with spaces and a very long name .docx",
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := TruncateFilename(tt.filename, tt.maxLength)
+			if got != tt.want {
+				t.Errorf("TruncateFilename() = %q (len=%d), want %q (len=%d)",
+					got, len(got), tt.want, len(tt.want))
+			}
+			// Verify result doesn't exceed maxLength
+			if len(got) > tt.maxLength {
+				t.Errorf("TruncateFilename() result length %d exceeds maxLength %d",
+					len(got), tt.maxLength)
+			}
+		})
+	}
+}
@@ -56,3 +56,26 @@ func ProxyUrlToHandler(proxyUrl *url.URL) func(*http.Request) (*url.URL, error)
 	}
 	return http.ProxyURL(proxyUrl)
 }
+
+// TryUrlQueryUnescape tries to unescape a URL-encoded string.
+//
+// If unescaping fails, it returns the original string.
+func TryUrlQueryUnescape(s string) string {
+	if decoded, err := url.QueryUnescape(s); err == nil {
+		return decoded
+	}
+	return s
+}
+
+// TryUrlPathUnescape tries to unescape a URL path-encoded string.
+// Unlike QueryUnescape, PathUnescape does not treat '+' as a space.
+// This is the correct function to use for decoding URL paths and filenames
+// where %2B should decode to '+', not to a space.
+//
+// If unescaping fails, it returns the original string.
+func TryUrlPathUnescape(s string) string {
+	if decoded, err := url.PathUnescape(s); err == nil {
+		return decoded
+	}
+	return s
+}
@@ -128,3 +128,52 @@ func TestParseDataUri(t *testing.T) {
 		})
 	}
 }
+
+func TestTryURLDecode(t *testing.T) {
+	tests := []struct {
+		input    string
+		expected string
+	}{
+		{"normal.txt", "normal.txt"},
+		{"%E7%8F%80%E5%B0%94%E8%AF%BA.zip", "珀尔诺.zip"},
+		{"hello%20world.txt", "hello world.txt"},
+		{"bad%2-text", "bad%2-text"},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.input, func(t *testing.T) {
+			got := TryUrlQueryUnescape(tt.input)
+			if got != tt.expected {
+				t.Errorf("TryUrlQueryUnescape(%q) = %q, want %q", tt.input, got, tt.expected)
+			}
+		})
+	}
+}
+
+func TestTryUrlPathUnescape(t *testing.T) {
+	tests := []struct {
+		input    string
+		expected string
+	}{
+		{"normal.txt", "normal.txt"},
+		{"%E7%8F%80%E5%B0%94%E8%AF%BA.zip", "珀尔诺.zip"},
+		{"hello%20world.txt", "hello world.txt"},
+		{"bad%2-text", "bad%2-text"},
+		// The key difference: %2B should decode to + (not space)
+		{"C%2B%2B%20Primer.txt", "C++ Primer.txt"},
+		{"test%2Bfile.txt", "test+file.txt"},
+		// Plus sign in path should remain as-is (not decoded to space)
+		{"test+plus.txt", "test+plus.txt"},
+		// Mixed encoding
+		{"C%2B%2B%20%20Primer%20%20Plus.mobi", "C++  Primer  Plus.mobi"},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.input, func(t *testing.T) {
+			got := TryUrlPathUnescape(tt.input)
+			if got != tt.expected {
+				t.Errorf("TryUrlPathUnescape(%q) = %q, want %q", tt.input, got, tt.expected)
+			}
+		})
+	}
+}
@@ -69,5 +69,7 @@ windows/flutter/generated_plugins.cmake
 database.hive
 database.lock

-assets/host/host
-assets/host/host.exe
+assets/exec/host
+assets/exec/host.exe
+assets/exec/updater
+assets/exec/updater.exe
@@ -1,3 +1,9 @@
+plugins {
+    id 'com.android.application'
+    id 'kotlin-android'
+    id 'dev.flutter.flutter-gradle-plugin'
+}
+
 def localProperties = new Properties()
 def localPropertiesFile = rootProject.file('local.properties')
 if (localPropertiesFile.exists()) {
@@ -6,11 +12,6 @@ if (localPropertiesFile.exists()) {
    }
 }

-def flutterRoot = localProperties.getProperty('flutter.sdk')
-if (flutterRoot == null) {
-    throw new GradleException("Flutter SDK not found. Define location with flutter.sdk in the local.properties file.")
-}
-
 def flutterVersionCode = localProperties.getProperty('flutter.versionCode')
 if (flutterVersionCode == null) {
    flutterVersionCode = '1'
@@ -21,21 +22,18 @@ if (flutterVersionName == null) {
    flutterVersionName = '1.0'
 }

-apply plugin: 'com.android.application'
-apply plugin: 'kotlin-android'
-apply from: "$flutterRoot/packages/flutter_tools/gradle/flutter.gradle"
-
 android {
-    compileSdkVersion 34
+    namespace 'com.gopeed.gopeed'
+    compileSdk 35
    ndkVersion flutter.ndkVersion

    compileOptions {
-        sourceCompatibility JavaVersion.VERSION_1_8
-        targetCompatibility JavaVersion.VERSION_1_8
+        sourceCompatibility JavaVersion.VERSION_17
+        targetCompatibility JavaVersion.VERSION_17
    }

    kotlinOptions {
-        jvmTarget = '1.8'
+        jvmTarget = '17'
    }

    sourceSets {
@@ -44,21 +42,21 @@ android {

    defaultConfig {
        // TODO: Specify your own unique Application ID (https://developer.android.com/studio/build/application-id.html).
-        applicationId "com.gopeed.gopeed"
+        applicationId 'com.gopeed.gopeed'
        // You can update the following values to match your application needs.
        // For more information, see: https://docs.flutter.dev/deployment/android#reviewing-the-build-configuration.
-        minSdkVersion 21
-        targetSdkVersion 34
+        minSdk flutter.minSdkVersion
+        targetSdk 35
        versionCode flutterVersionCode.toInteger()
        versionName flutterVersionName
    }

    signingConfigs {
        release {
-            keyAlias "upload"
-            keyPassword System.getenv("APK_KEY_PASSWORD")
-            storeFile file("upload-keystore.jks")
-            storePassword System.getenv("APK_STORE_PASSWORD")
+            keyAlias 'upload'
+            keyPassword System.getenv('APK_KEY_PASSWORD')
+            storeFile file('upload-keystore.jks')
+            storePassword System.getenv('APK_STORE_PASSWORD')
        }
    }

@@ -84,6 +82,5 @@ flutter {
 }

 dependencies {
-    implementation "org.jetbrains.kotlin:kotlin-stdlib-jdk7:$kotlin_version"
    implementation(name: 'libgopeed', ext: 'aar')
 }
@@ -1,8 +1,7 @@
-<manifest xmlns:android="http://schemas.android.com/apk/res/android"
-    package="com.gopeed.gopeed">
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
    <!-- The INTERNET permission is required for development. Specifically,
         the Flutter tool needs it to communicate with the running application
         to allow setting breakpoints, to provide hot reload, etc.
    -->
-    <uses-permission android:name="android.permission.INTERNET"/>
-</manifest>
+    <uses-permission android:name="android.permission.INTERNET" />
+</manifest>
@@ -1,12 +1,13 @@
-<manifest xmlns:android="http://schemas.android.com/apk/res/android"
-    package="com.gopeed.gopeed">
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">

    <uses-permission android:name="android.permission.INTERNET" />
    <uses-permission android:name="android.permission.READ_MEDIA_IMAGES" />
    <uses-permission android:name="android.permission.READ_MEDIA_AUDIO" />
    <uses-permission android:name="android.permission.READ_MEDIA_VIDEO" />
-    <uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" android:maxSdkVersion="32" />
-    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" android:maxSdkVersion="32" />
+    <uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE"
+        android:maxSdkVersion="32" />
+    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE"
+        android:maxSdkVersion="32" />
    <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
    <uses-permission android:name="android.permission.REQUEST_INSTALL_PACKAGES" />
@@ -69,6 +70,19 @@
                <data
                    android:scheme="magnet" />
            </intent-filter>
+            <!-- Handle http/https URLs with common downloadable mimeTypes -->
+            <intent-filter android:label="Gopeed">
+                <action android:name="android.intent.action.VIEW" />
+                <category android:name="android.intent.category.DEFAULT" />
+                <category android:name="android.intent.category.BROWSABLE" />
+                <data android:scheme="http" />
+                <data android:scheme="https" />
+                <data android:mimeType="*/*" />
+            </intent-filter>
+            <intent-filter>
+                <action android:name="android.intent.action.VIEW_DOWNLOADS" />
+                <category android:name="android.intent.category.DEFAULT" />
+            </intent-filter>

            <!-- Specifies an Android theme to apply to this Activity as soon as
                 the Android process has started. This theme is visible to the user
@@ -91,7 +105,7 @@
        </activity>

        <!-- Add android:stopWithTask option only when necessary. -->
-        <service 
+        <service
            android:name="com.pravera.flutter_foreground_task.service.ForegroundService"
            android:foregroundServiceType="dataSync"
            android:exported="false" />
@@ -102,4 +116,4 @@
            android:name="flutterEmbedding"
            android:value="2" />
    </application>
-</manifest>
+</manifest>
@@ -1,8 +1,7 @@
-<manifest xmlns:android="http://schemas.android.com/apk/res/android"
-    package="com.gopeed.gopeed">
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
    <!-- The INTERNET permission is required for development. Specifically,
         the Flutter tool needs it to communicate with the running application
         to allow setting breakpoints, to provide hot reload, etc.
    -->
-    <uses-permission android:name="android.permission.INTERNET"/>
-</manifest>
+    <uses-permission android:name="android.permission.INTERNET" />
+</manifest>
@@ -1,16 +1,3 @@
-buildscript {
-    ext.kotlin_version = '1.8.22'
-    repositories {
-        google()
-        mavenCentral()
-    }
-
-    dependencies {
-        classpath 'com.android.tools.build:gradle:7.1.2'
-        classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:$kotlin_version"
-    }
-}
-
 allprojects {
    repositories {
        google()
@@ -26,6 +13,24 @@ subprojects {
    project.evaluationDependsOn(':app')
 }

-tasks.register("clean", Delete) {
+subprojects { subproject ->
+    subproject.plugins.withId('com.android.library') {
+        subproject.android {
+            if (namespace == null || namespace.isEmpty()) {
+                def manifest = file("${subproject.projectDir}/src/main/AndroidManifest.xml")
+                if (manifest.exists()) {
+                    def manifestContent = manifest.getText()
+                    def packagePattern = /package\s*=\s*["']([^"']+)["']/
+                    def matcher = (manifestContent =~ packagePattern)
+                    if (matcher.find()) {
+                        namespace = matcher.group(1)
+                    }
+                }
+            }
+        }
+    }
+}
+
+tasks.register('clean', Delete) {
    delete rootProject.buildDir
 }
@@ -1,3 +1,6 @@
-org.gradle.jvmargs=-Xmx1536M
+org.gradle.jvmargs=-Xmx4G -XX:+HeapDumpOnOutOfMemoryError
 android.useAndroidX=true
 android.enableJetifier=true
+android.nonTransitiveRClass=true
+android.nonFinalResIds=true
+android.defaults.buildfeatures.buildconfig=true
@@ -3,4 +3,4 @@ distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-7.4-all.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.11.1-all.zip
@@ -1,11 +1,25 @@
+pluginManagement {
+    def flutterSdkPath = {
+        def properties = new Properties()
+        file('local.properties').withInputStream { properties.load(it) }
+        def flutterSdkPath = properties.getProperty('flutter.sdk')
+        assert flutterSdkPath != null, 'flutter.sdk not set in local.properties'
+        return flutterSdkPath
+    }()
+
+    includeBuild("$flutterSdkPath/packages/flutter_tools/gradle")
+
+    repositories {
+        google()
+        mavenCentral()
+        gradlePluginPortal()
+    }
+}
+
+plugins {
+    id 'dev.flutter.flutter-plugin-loader' version '1.0.0'
+    id 'com.android.application' version '8.7.3' apply false
+    id 'org.jetbrains.kotlin.android' version '2.1.0' apply false
+}
+
 include ':app'
-
-def localPropertiesFile = new File(rootProject.projectDir, "local.properties")
-def properties = new Properties()
-
-assert localPropertiesFile.exists()
-localPropertiesFile.withReader("UTF-8") { reader -> properties.load(reader) }
-
-def flutterSdkPath = properties.getProperty("flutter.sdk")
-assert flutterSdkPath != null, "flutter.sdk not set in local.properties"
-apply from: "$flutterSdkPath/packages/flutter_tools/gradle/app_plugin_loader.gradle"
@@ -3,19 +3,24 @@ import 'dart:io';
 import 'package:dio/dio.dart';
 import 'package:dio/io.dart';
 import 'package:flutter/foundation.dart';
-import 'package:gopeed/api/model/extension.dart';
-import 'package:gopeed/api/model/install_extension.dart';
-import 'package:gopeed/api/model/switch_extension.dart';
+import 'package:get/get.dart' as getx;

+import '../app/routes/app_pages.dart';
+import '../database/database.dart';
 import '../util/util.dart';
 import 'model/create_task.dart';
+import 'model/create_task_batch.dart';
 import 'model/downloader_config.dart';
-import 'model/request.dart';
+import 'model/extension.dart';
+import 'model/install_extension.dart';
+import 'model/login.dart';
 import 'model/resolve_result.dart';
+import 'model/resolve_task.dart';
 import 'model/result.dart';
+import 'model/switch_extension.dart';
 import 'model/task.dart';
-import 'model/update_extension_settings.dart';
 import 'model/update_check_extension_resp.dart';
+import 'model/update_extension_settings.dart';

 class _Client {
  static _Client? _instance;
@@ -29,12 +34,12 @@ class _Client {
      _instance = _Client._internal();
      var dio = Dio();
      final isUnixSocket = network == 'unix';
-      var baseUrl = 'http://127.0.0.1';
+      var baseUrl = 'http://127.0.0.1/';
      if (!isUnixSocket) {
        if (Util.isWeb()) {
-          baseUrl = kDebugMode ? 'http://127.0.0.1:9999' : '';
+          baseUrl = kDebugMode ? 'http://127.0.0.1:9999/' : '';
        } else {
-          baseUrl = 'http://$address';
+          baseUrl = 'http://$address/';
        }
      }
      dio.options.baseUrl = baseUrl;
@@ -42,12 +47,27 @@ class _Client {
      dio.options.sendTimeout = const Duration(seconds: 5);
      dio.options.connectTimeout = const Duration(seconds: 5);
      dio.options.receiveTimeout = const Duration(seconds: 60);
-      dio.interceptors.add(InterceptorsWrapper(onRequest: (options, handler) {
-        if (apiToken.isNotEmpty) {
-          options.headers['X-Api-Token'] = apiToken;
-        }
-        handler.next(options);
-      }));
+      dio.interceptors.add(InterceptorsWrapper(
+        onRequest: (options, handler) {
+          if (apiToken.isNotEmpty) {
+            options.headers['X-Api-Token'] = apiToken;
+          }
+          if (Util.isWeb()) {
+            final token = Database.instance.getWebToken();
+            if (token != null) {
+              options.headers['Authorization'] = 'Bearer $token';
+            }
+          }
+          handler.next(options);
+        },
+        onError: (error, handler) {
+          // Only web version has a login page
+          if (Util.isWeb() && error.response?.statusCode == 401) {
+            getx.Get.rootDelegate.offAndToNamed(Routes.LOGIN);
+          }
+          handler.next(error);
+        },
+      ));

      _instance!.dio = dio;
      if (isUnixSocket) {
@@ -95,25 +115,32 @@ Future<T> _parse<T>(
  } on DioException catch (e) {
    if (e.type == DioExceptionType.sendTimeout ||
        e.type == DioExceptionType.receiveTimeout ||
-        e.type == DioExceptionType.connectionTimeout) {
+        e.type == DioExceptionType.connectionTimeout ||
+        e.type == DioExceptionType.connectionError) {
      throw TimeoutException("request timeout");
    }
    throw Exception(Result(code: 1000, msg: e.message));
  }
 }

-Future<ResolveResult> resolve(Request request) async {
+Future<ResolveResult> resolve(ResolveTask resolveTask) async {
  return _parse<ResolveResult>(
-      () => _client.dio.post("/api/v1/resolve", data: request),
+      () => _client.dio.post("api/v1/resolve", data: resolveTask),
      (data) => ResolveResult.fromJson(data));
 }

 Future<String> createTask(CreateTask createTask) async {
  return _parse<String>(
-      () => _client.dio.post("/api/v1/tasks", data: createTask),
+      () => _client.dio.post("api/v1/tasks", data: createTask),
      (data) => data as String);
 }

+Future<List<String>> createTaskBatch(CreateTaskBatch createTaskBatch) async {
+  return _parse<List<String>>(
+      () => _client.dio.post("api/v1/tasks/batch", data: createTaskBatch),
+      (data) => (data as List).map((e) => e as String).toList());
+}
+
 Future<List<Task>> getTasks(List<Status> statuses) async {
  return _parse<List<Task>>(
      () => _client.dio.get(
@@ -122,16 +149,16 @@ Future<List<Task>> getTasks(List<Status> statuses) async {
 }

 Future<void> pauseTask(String id) async {
-  return _parse(() => _client.dio.put("/api/v1/tasks/$id/pause"), null);
+  return _parse(() => _client.dio.put("api/v1/tasks/$id/pause"), null);
 }

 Future<void> continueTask(String id) async {
-  return _parse(() => _client.dio.put("/api/v1/tasks/$id/continue"), null);
+  return _parse(() => _client.dio.put("api/v1/tasks/$id/continue"), null);
 }

 Future<void> pauseAllTasks(List<String>? ids) async {
  return _parse(
-      () => _client.dio.put("/api/v1/tasks/pause", queryParameters: {
+      () => _client.dio.put("api/v1/tasks/pause", queryParameters: {
            "id": ids,
          }),
      null);
@@ -139,7 +166,7 @@ Future<void> pauseAllTasks(List<String>? ids) async {

 Future<void> continueAllTasks(List<String>? ids) async {
  return _parse(
-      () => _client.dio.put("/api/v1/tasks/continue", queryParameters: {
+      () => _client.dio.put("api/v1/tasks/continue", queryParameters: {
            "id": ids,
          }),
      null);
@@ -147,12 +174,12 @@ Future<void> continueAllTasks(List<String>? ids) async {

 Future<void> deleteTask(String id, bool force) async {
  return _parse(
-      () => _client.dio.delete("/api/v1/tasks/$id?force=$force"), null);
+      () => _client.dio.delete("api/v1/tasks/$id?force=$force"), null);
 }

 Future<void> deleteTasks(List<String>? ids, bool force) async {
  return _parse(
-      () => _client.dio.delete("/api/v1/tasks", queryParameters: {
+      () => _client.dio.delete("api/v1/tasks", queryParameters: {
            "id": ids,
            "force": force,
          }),
@@ -160,29 +187,29 @@ Future<void> deleteTasks(List<String>? ids, bool force) async {
 }

 Future<DownloaderConfig> getConfig() async {
-  return _parse(() => _client.dio.get("/api/v1/config"),
+  return _parse(() => _client.dio.get("api/v1/config"),
      (data) => DownloaderConfig.fromJson(data));
 }

 Future<void> putConfig(DownloaderConfig config) async {
-  return _parse(() => _client.dio.put("/api/v1/config", data: config), null);
+  return _parse(() => _client.dio.put("api/v1/config", data: config), null);
 }

 Future<void> installExtension(InstallExtension installExtension) async {
  return _parse(
-      () => _client.dio.post("/api/v1/extensions", data: installExtension),
+      () => _client.dio.post("api/v1/extensions", data: installExtension),
      null);
 }

 Future<List<Extension>> getExtensions() async {
-  return _parse<List<Extension>>(() => _client.dio.get("/api/v1/extensions"),
+  return _parse<List<Extension>>(() => _client.dio.get("api/v1/extensions"),
      (data) => (data as List).map((e) => Extension.fromJson(e)).toList());
 }

 Future<void> updateExtensionSettings(
    String identity, UpdateExtensionSettings updateExtensionSettings) async {
  return _parse(
-      () => _client.dio.put("/api/v1/extensions/$identity/settings",
+      () => _client.dio.put("api/v1/extensions/$identity/settings",
          data: updateExtensionSettings),
      null);
 }
@@ -191,22 +218,32 @@ Future<void> switchExtension(
    String identity, SwitchExtension switchExtension) async {
  return _parse(
      () => _client.dio
-          .put("/api/v1/extensions/$identity/switch", data: switchExtension),
+          .put("api/v1/extensions/$identity/switch", data: switchExtension),
      null);
 }

 Future<void> deleteExtension(String identity) async {
-  return _parse(() => _client.dio.delete("/api/v1/extensions/$identity"), null);
+  return _parse(() => _client.dio.delete("api/v1/extensions/$identity"), null);
 }

 Future<UpdateCheckExtensionResp> upgradeCheckExtension(String identity) async {
-  return _parse(() => _client.dio.get("/api/v1/extensions/$identity/update"),
+  return _parse(() => _client.dio.get("api/v1/extensions/$identity/update"),
      (data) => UpdateCheckExtensionResp.fromJson(data));
 }

 Future<void> updateExtension(String identity) async {
  return _parse(
-      () => _client.dio.post("/api/v1/extensions/$identity/update"), null);
+      () => _client.dio.post("api/v1/extensions/$identity/update"), null);
+}
+
+Future<void> testWebhook(String url) async {
+  return _parse(
+      () => _client.dio.post("api/v1/webhook/test", data: {"url": url}), null);
+}
+
+Future<String> login(LoginReq loginReq) async {
+  return _parse(() => _client.dio.post("api/web/login", data: loginReq),
+      (data) => data as String);
 }

 Future<Response<String>> proxyRequest<T>(String uri,
@@ -223,5 +260,25 @@ Future<Response<String>> proxyRequest<T>(String uri,
 }

 String join(String path) {
-  return "${_client.dio.options.baseUrl}/${Util.cleanPath(path)}";
+  final baseUrl = _client.dio.options.baseUrl;
+  final cleanBaseUrl = baseUrl.endsWith('/')
+      ? baseUrl.substring(0, baseUrl.length - 1)
+      : baseUrl;
+  return "$cleanBaseUrl/${Util.cleanPath(path)}";
+}
+
+/// Generic request method for API proxy
+/// Directly forwards requests to gopeed REST API
+Future<Response> forward(
+  String path, {
+  String method = 'GET',
+  dynamic data,
+  Map<String, dynamic>? queryParameters,
+}) async {
+  return _client.dio.request(
+    path,
+    data: data,
+    queryParameters: queryParameters,
+    options: Options(method: method),
+  );
 }
@@ -9,12 +9,12 @@ part 'create_task.g.dart';
 class CreateTask {
  String? rid;
  Request? req;
-  Options? opt;
+  Options? opts;

  CreateTask({
    this.rid,
    this.req,
-    this.opt,
+    this.opts,
  });

  factory CreateTask.fromJson(
@@ -11,9 +11,9 @@ CreateTask _$CreateTaskFromJson(Map<String, dynamic> json) => CreateTask(
      req: json['req'] == null
          ? null
          : Request.fromJson(json['req'] as Map<String, dynamic>),
-      opt: json['opt'] == null
+      opts: json['opts'] == null
          ? null
-          : Options.fromJson(json['opt'] as Map<String, dynamic>),
+          : Options.fromJson(json['opts'] as Map<String, dynamic>),
    );

 Map<String, dynamic> _$CreateTaskToJson(CreateTask instance) {
@@ -27,6 +27,6 @@ Map<String, dynamic> _$CreateTaskToJson(CreateTask instance) {

  writeNotNull('rid', instance.rid);
  writeNotNull('req', instance.req?.toJson());
-  writeNotNull('opt', instance.opt?.toJson());
+  writeNotNull('opts', instance.opts?.toJson());
  return val;
 }
@@ -0,0 +1,39 @@
+import 'package:json_annotation/json_annotation.dart';
+
+import 'options.dart';
+import 'request.dart';
+
+part 'create_task_batch.g.dart';
+
+@JsonSerializable(explicitToJson: true)
+class CreateTaskBatch {
+  List<CreateTaskBatchItem>? reqs;
+  Options? opts;
+
+  CreateTaskBatch({
+    this.reqs,
+    this.opts,
+  });
+
+  factory CreateTaskBatch.fromJson(
+    Map<String, dynamic> json,
+  ) =>
+      _$CreateTaskBatchFromJson(json);
+
+  Map<String, dynamic> toJson() => _$CreateTaskBatchToJson(this);
+}
+
+@JsonSerializable()
+class CreateTaskBatchItem {
+  Request? req;
+  Options? opts;
+
+  CreateTaskBatchItem({
+    this.req,
+    this.opts,
+  });
+
+  factory CreateTaskBatchItem.fromJson(Map<String, dynamic> json) =>
+      _$CreateTaskBatchItemFromJson(json);
+  Map<String, dynamic> toJson() => _$CreateTaskBatchItemToJson(this);
+}
@@ -0,0 +1,55 @@
+// GENERATED CODE - DO NOT MODIFY BY HAND
+
+part of 'create_task_batch.dart';
+
+// **************************************************************************
+// JsonSerializableGenerator
+// **************************************************************************
+
+CreateTaskBatch _$CreateTaskBatchFromJson(Map<String, dynamic> json) =>
+    CreateTaskBatch(
+      reqs: (json['reqs'] as List<dynamic>?)
+          ?.map((e) => CreateTaskBatchItem.fromJson(e as Map<String, dynamic>))
+          .toList(),
+      opts: json['opts'] == null
+          ? null
+          : Options.fromJson(json['opts'] as Map<String, dynamic>),
+    );
+
+Map<String, dynamic> _$CreateTaskBatchToJson(CreateTaskBatch instance) {
+  final val = <String, dynamic>{};
+
+  void writeNotNull(String key, dynamic value) {
+    if (value != null) {
+      val[key] = value;
+    }
+  }
+
+  writeNotNull('reqs', instance.reqs?.map((e) => e.toJson()).toList());
+  writeNotNull('opts', instance.opts?.toJson());
+  return val;
+}
+
+CreateTaskBatchItem _$CreateTaskBatchItemFromJson(Map<String, dynamic> json) =>
+    CreateTaskBatchItem(
+      req: json['req'] == null
+          ? null
+          : Request.fromJson(json['req'] as Map<String, dynamic>),
+      opts: json['opts'] == null
+          ? null
+          : Options.fromJson(json['opts'] as Map<String, dynamic>),
+    );
+
+Map<String, dynamic> _$CreateTaskBatchItemToJson(CreateTaskBatchItem instance) {
+  final val = <String, dynamic>{};
+
+  void writeNotNull(String key, dynamic value) {
+    if (value != null) {
+      val[key] = value;
+    }
+  }
+
+  writeNotNull('req', instance.req);
+  writeNotNull('opts', instance.opts);
+  return val;
+}
@@ -9,10 +9,15 @@ class DownloaderConfig {
  ProtocolConfig protocolConfig = ProtocolConfig();
  ExtraConfig extra = ExtraConfig();
  ProxyConfig proxy = ProxyConfig();
+  WebhookConfig webhook = WebhookConfig();
+  AutoTorrentConfig autoTorrent = AutoTorrentConfig();
+  ArchiveConfig archive = ArchiveConfig();
+  bool autoDeleteMissingFileTasks;

  DownloaderConfig({
    this.downloadDir = '',
    this.maxRunning = 0,
+    this.autoDeleteMissingFileTasks = false,
  });

  factory DownloaderConfig.fromJson(Map<String, dynamic> json) =>
@@ -81,8 +86,12 @@ class ExtraConfig {
  bool lastDeleteTaskKeep;
  bool defaultDirectDownload;
  bool defaultBtClient;
+  bool notifyWhenNewVersion;
+  bool autoStartTasks;
+  List<DownloadCategory> downloadCategories;

  ExtraConfigBt bt = ExtraConfigBt();
+  ExtraConfigGithubMirror githubMirror = ExtraConfigGithubMirror();

  ExtraConfig({
    this.themeMode = '',
@@ -90,6 +99,9 @@ class ExtraConfig {
    this.lastDeleteTaskKeep = false,
    this.defaultDirectDownload = false,
    this.defaultBtClient = true,
+    this.notifyWhenNewVersion = true,
+    this.autoStartTasks = false,
+    this.downloadCategories = const [],
  });

  factory ExtraConfig.fromJson(Map<String, dynamic>? json) =>
@@ -98,6 +110,45 @@ class ExtraConfig {
  Map<String, dynamic> toJson() => _$ExtraConfigToJson(this);
 }

+@JsonSerializable()
+class DownloadCategory {
+  String name;
+  String path;
+  bool isBuiltIn;
+  String? nameKey; // i18n key for built-in categories (e.g., 'categoryMusic')
+  bool
+      isDeleted; // Mark built-in categories as deleted instead of removing them
+
+  DownloadCategory({
+    required this.name,
+    required this.path,
+    this.isBuiltIn = false,
+    this.nameKey,
+    this.isDeleted = false,
+  });
+
+  factory DownloadCategory.fromJson(Map<String, dynamic> json) =>
+      _$DownloadCategoryFromJson(json);
+
+  Map<String, dynamic> toJson() => _$DownloadCategoryToJson(this);
+}
+
+@JsonSerializable()
+class WebhookConfig {
+  bool enable;
+  List<String> urls;
+
+  WebhookConfig({
+    this.enable = false,
+    this.urls = const [],
+  });
+
+  factory WebhookConfig.fromJson(Map<String, dynamic>? json) =>
+      json == null ? WebhookConfig() : _$WebhookConfigFromJson(json);
+
+  Map<String, dynamic> toJson() => _$WebhookConfigToJson(this);
+}
+
@JsonSerializable()
 class ProxyConfig {
  bool enable;
@@ -138,3 +189,78 @@ class ExtraConfigBt {

  Map<String, dynamic> toJson() => _$ExtraConfigBtToJson(this);
 }
+
+enum GithubMirrorType {
+  jsdelivr,
+  ghProxy,
+}
+
+@JsonSerializable()
+class GithubMirror {
+  GithubMirrorType type;
+  String url;
+  bool isBuiltIn;
+  bool isDeleted;
+
+  GithubMirror({
+    required this.type,
+    required this.url,
+    this.isBuiltIn = false,
+    this.isDeleted = false,
+  });
+
+  factory GithubMirror.fromJson(Map<String, dynamic> json) =>
+      _$GithubMirrorFromJson(json);
+
+  Map<String, dynamic> toJson() => _$GithubMirrorToJson(this);
+}
+
+@JsonSerializable(explicitToJson: true)
+class ExtraConfigGithubMirror {
+  bool enabled;
+  List<GithubMirror> mirrors;
+
+  ExtraConfigGithubMirror({
+    this.enabled = true,
+    this.mirrors = const [],
+  });
+
+  factory ExtraConfigGithubMirror.fromJson(Map<String, dynamic>? json) =>
+      json == null
+          ? ExtraConfigGithubMirror()
+          : _$ExtraConfigGithubMirrorFromJson(json);
+
+  Map<String, dynamic> toJson() => _$ExtraConfigGithubMirrorToJson(this);
+}
+
+@JsonSerializable()
+class AutoTorrentConfig {
+  bool enable;
+  bool deleteAfterDownload;
+
+  AutoTorrentConfig({
+    this.enable = false,
+    this.deleteAfterDownload = false,
+  });
+
+  factory AutoTorrentConfig.fromJson(Map<String, dynamic>? json) =>
+      json == null ? AutoTorrentConfig() : _$AutoTorrentConfigFromJson(json);
+
+  Map<String, dynamic> toJson() => _$AutoTorrentConfigToJson(this);
+}
+
+@JsonSerializable()
+class ArchiveConfig {
+  bool autoExtract;
+  bool deleteAfterExtract;
+
+  ArchiveConfig({
+    this.autoExtract = true,
+    this.deleteAfterExtract = true,
+  });
+
+  factory ArchiveConfig.fromJson(Map<String, dynamic>? json) =>
+      json == null ? ArchiveConfig() : _$ArchiveConfigFromJson(json);
+
+  Map<String, dynamic> toJson() => _$ArchiveConfigToJson(this);
+}
@@ -10,11 +10,19 @@ DownloaderConfig _$DownloaderConfigFromJson(Map<String, dynamic> json) =>
    DownloaderConfig(
      downloadDir: json['downloadDir'] as String? ?? '',
      maxRunning: (json['maxRunning'] as num?)?.toInt() ?? 0,
+      autoDeleteMissingFileTasks:
+          json['autoDeleteMissingFileTasks'] as bool? ?? false,
    )
      ..protocolConfig = ProtocolConfig.fromJson(
          json['protocolConfig'] as Map<String, dynamic>?)
      ..extra = ExtraConfig.fromJson(json['extra'] as Map<String, dynamic>?)
-      ..proxy = ProxyConfig.fromJson(json['proxy'] as Map<String, dynamic>);
+      ..proxy = ProxyConfig.fromJson(json['proxy'] as Map<String, dynamic>)
+      ..webhook =
+          WebhookConfig.fromJson(json['webhook'] as Map<String, dynamic>?)
+      ..autoTorrent = AutoTorrentConfig.fromJson(
+          json['autoTorrent'] as Map<String, dynamic>?)
+      ..archive =
+          ArchiveConfig.fromJson(json['archive'] as Map<String, dynamic>?);

 Map<String, dynamic> _$DownloaderConfigToJson(DownloaderConfig instance) =>
    <String, dynamic>{
@@ -23,6 +31,10 @@ Map<String, dynamic> _$DownloaderConfigToJson(DownloaderConfig instance) =>
      'protocolConfig': instance.protocolConfig.toJson(),
      'extra': instance.extra.toJson(),
      'proxy': instance.proxy.toJson(),
+      'webhook': instance.webhook.toJson(),
+      'autoTorrent': instance.autoTorrent.toJson(),
+      'archive': instance.archive.toJson(),
+      'autoDeleteMissingFileTasks': instance.autoDeleteMissingFileTasks,
    };

 ProtocolConfig _$ProtocolConfigFromJson(Map<String, dynamic> json) =>
@@ -74,7 +86,16 @@ ExtraConfig _$ExtraConfigFromJson(Map<String, dynamic> json) => ExtraConfig(
      lastDeleteTaskKeep: json['lastDeleteTaskKeep'] as bool? ?? false,
      defaultDirectDownload: json['defaultDirectDownload'] as bool? ?? false,
      defaultBtClient: json['defaultBtClient'] as bool? ?? true,
-    )..bt = ExtraConfigBt.fromJson(json['bt'] as Map<String, dynamic>);
+      notifyWhenNewVersion: json['notifyWhenNewVersion'] as bool? ?? true,
+      autoStartTasks: json['autoStartTasks'] as bool? ?? false,
+      downloadCategories: (json['downloadCategories'] as List<dynamic>?)
+              ?.map((e) => DownloadCategory.fromJson(e as Map<String, dynamic>))
+              .toList() ??
+          const [],
+    )
+      ..bt = ExtraConfigBt.fromJson(json['bt'] as Map<String, dynamic>)
+      ..githubMirror = ExtraConfigGithubMirror.fromJson(
+          json['githubMirror'] as Map<String, dynamic>?);

 Map<String, dynamic> _$ExtraConfigToJson(ExtraConfig instance) =>
    <String, dynamic>{
@@ -83,7 +104,53 @@ Map<String, dynamic> _$ExtraConfigToJson(ExtraConfig instance) =>
      'lastDeleteTaskKeep': instance.lastDeleteTaskKeep,
      'defaultDirectDownload': instance.defaultDirectDownload,
      'defaultBtClient': instance.defaultBtClient,
+      'notifyWhenNewVersion': instance.notifyWhenNewVersion,
+      'autoStartTasks': instance.autoStartTasks,
+      'downloadCategories':
+          instance.downloadCategories.map((e) => e.toJson()).toList(),
      'bt': instance.bt.toJson(),
+      'githubMirror': instance.githubMirror.toJson(),
+    };
+
+DownloadCategory _$DownloadCategoryFromJson(Map<String, dynamic> json) =>
+    DownloadCategory(
+      name: json['name'] as String,
+      path: json['path'] as String,
+      isBuiltIn: json['isBuiltIn'] as bool? ?? false,
+      nameKey: json['nameKey'] as String?,
+      isDeleted: json['isDeleted'] as bool? ?? false,
+    );
+
+Map<String, dynamic> _$DownloadCategoryToJson(DownloadCategory instance) {
+  final val = <String, dynamic>{
+    'name': instance.name,
+    'path': instance.path,
+    'isBuiltIn': instance.isBuiltIn,
+  };
+
+  void writeNotNull(String key, dynamic value) {
+    if (value != null) {
+      val[key] = value;
+    }
+  }
+
+  writeNotNull('nameKey', instance.nameKey);
+  val['isDeleted'] = instance.isDeleted;
+  return val;
+}
+
+WebhookConfig _$WebhookConfigFromJson(Map<String, dynamic> json) =>
+    WebhookConfig(
+      enable: json['enable'] as bool? ?? false,
+      urls:
+          (json['urls'] as List<dynamic>?)?.map((e) => e as String).toList() ??
+              const [],
+    );
+
+Map<String, dynamic> _$WebhookConfigToJson(WebhookConfig instance) =>
+    <String, dynamic>{
+      'enable': instance.enable,
+      'urls': instance.urls,
    };

 ProxyConfig _$ProxyConfigFromJson(Map<String, dynamic> json) => ProxyConfig(
@@ -139,3 +206,64 @@ Map<String, dynamic> _$ExtraConfigBtToJson(ExtraConfigBt instance) {
  val['customTrackers'] = instance.customTrackers;
  return val;
 }
+
+GithubMirror _$GithubMirrorFromJson(Map<String, dynamic> json) => GithubMirror(
+      type: $enumDecode(_$GithubMirrorTypeEnumMap, json['type']),
+      url: json['url'] as String,
+      isBuiltIn: json['isBuiltIn'] as bool? ?? false,
+      isDeleted: json['isDeleted'] as bool? ?? false,
+    );
+
+Map<String, dynamic> _$GithubMirrorToJson(GithubMirror instance) =>
+    <String, dynamic>{
+      'type': _$GithubMirrorTypeEnumMap[instance.type]!,
+      'url': instance.url,
+      'isBuiltIn': instance.isBuiltIn,
+      'isDeleted': instance.isDeleted,
+    };
+
+const _$GithubMirrorTypeEnumMap = {
+  GithubMirrorType.jsdelivr: 'jsdelivr',
+  GithubMirrorType.ghProxy: 'ghProxy',
+};
+
+ExtraConfigGithubMirror _$ExtraConfigGithubMirrorFromJson(
+        Map<String, dynamic> json) =>
+    ExtraConfigGithubMirror(
+      enabled: json['enabled'] as bool? ?? true,
+      mirrors: (json['mirrors'] as List<dynamic>?)
+              ?.map((e) => GithubMirror.fromJson(e as Map<String, dynamic>))
+              .toList() ??
+          const [],
+    );
+
+Map<String, dynamic> _$ExtraConfigGithubMirrorToJson(
+        ExtraConfigGithubMirror instance) =>
+    <String, dynamic>{
+      'enabled': instance.enabled,
+      'mirrors': instance.mirrors.map((e) => e.toJson()).toList(),
+    };
+
+AutoTorrentConfig _$AutoTorrentConfigFromJson(Map<String, dynamic> json) =>
+    AutoTorrentConfig(
+      enable: json['enable'] as bool? ?? false,
+      deleteAfterDownload: json['deleteAfterDownload'] as bool? ?? false,
+    );
+
+Map<String, dynamic> _$AutoTorrentConfigToJson(AutoTorrentConfig instance) =>
+    <String, dynamic>{
+      'enable': instance.enable,
+      'deleteAfterDownload': instance.deleteAfterDownload,
+    };
+
+ArchiveConfig _$ArchiveConfigFromJson(Map<String, dynamic> json) =>
+    ArchiveConfig(
+      autoExtract: json['autoExtract'] as bool? ?? true,
+      deleteAfterExtract: json['deleteAfterExtract'] as bool? ?? true,
+    );
+
+Map<String, dynamic> _$ArchiveConfigToJson(ArchiveConfig instance) =>
+    <String, dynamic>{
+      'autoExtract': instance.autoExtract,
+      'deleteAfterExtract': instance.deleteAfterExtract,
+    };
@@ -0,0 +1,18 @@
+import 'package:json_annotation/json_annotation.dart';
+
+part 'login.g.dart';
+
+@JsonSerializable()
+class LoginReq {
+  String username;
+  String password;
+
+  LoginReq({
+    required this.username,
+    required this.password,
+  });
+
+  factory LoginReq.fromJson(Map<String, dynamic> json) =>
+      _$LoginReqFromJson(json);
+  Map<String, dynamic> toJson() => _$LoginReqToJson(this);
+}
@@ -0,0 +1,17 @@
+// GENERATED CODE - DO NOT MODIFY BY HAND
+
+part of 'login.dart';
+
+// **************************************************************************
+// JsonSerializableGenerator
+// **************************************************************************
+
+LoginReq _$LoginReqFromJson(Map<String, dynamic> json) => LoginReq(
+      username: json['username'] as String,
+      password: json['password'] as String,
+    );
+
+Map<String, dynamic> _$LoginReqToJson(LoginReq instance) => <String, dynamic>{
+      'username': instance.username,
+      'password': instance.password,
+    };
@@ -25,11 +25,19 @@ class Options {
@JsonSerializable()
 class OptsExtraHttp {
  int connections;
-  bool autoTorrent;
+  bool? autoTorrent;
+  bool? deleteTorrentAfterDownload;
+  bool? autoExtract;
+  String archivePassword;
+  bool deleteAfterExtract;

  OptsExtraHttp({
    this.connections = 0,
-    this.autoTorrent = false,
+    this.autoTorrent,
+    this.deleteTorrentAfterDownload,
+    this.autoExtract,
+    this.archivePassword = '',
+    this.deleteAfterExtract = false,
  });

  factory OptsExtraHttp.fromJson(Map<String, dynamic> json) =>
@@ -36,11 +36,29 @@ Map<String, dynamic> _$OptionsToJson(Options instance) {
 OptsExtraHttp _$OptsExtraHttpFromJson(Map<String, dynamic> json) =>
    OptsExtraHttp(
      connections: (json['connections'] as num?)?.toInt() ?? 0,
-      autoTorrent: json['autoTorrent'] as bool? ?? false,
+      autoTorrent: json['autoTorrent'] as bool?,
+      deleteTorrentAfterDownload: json['deleteTorrentAfterDownload'] as bool?,
+      autoExtract: json['autoExtract'] as bool?,
+      archivePassword: json['archivePassword'] as String? ?? '',
+      deleteAfterExtract: json['deleteAfterExtract'] as bool? ?? false,
    );

-Map<String, dynamic> _$OptsExtraHttpToJson(OptsExtraHttp instance) =>
-    <String, dynamic>{
-      'connections': instance.connections,
-      'autoTorrent': instance.autoTorrent,
-    };
+Map<String, dynamic> _$OptsExtraHttpToJson(OptsExtraHttp instance) {
+  final val = <String, dynamic>{
+    'connections': instance.connections,
+  };
+
+  void writeNotNull(String key, dynamic value) {
+    if (value != null) {
+      val[key] = value;
+    }
+  }
+
+  writeNotNull('autoTorrent', instance.autoTorrent);
+  writeNotNull(
+      'deleteTorrentAfterDownload', instance.deleteTorrentAfterDownload);
+  writeNotNull('autoExtract', instance.autoExtract);
+  val['archivePassword'] = instance.archivePassword;
+  val['deleteAfterExtract'] = instance.deleteAfterExtract;
+  return val;
+}
@@ -0,0 +1,21 @@
+import 'package:json_annotation/json_annotation.dart';
+
+import 'options.dart';
+import 'request.dart';
+
+part 'resolve_task.g.dart';
+
+@JsonSerializable()
+class ResolveTask {
+  Request? req;
+  Options? opts;
+
+  ResolveTask({
+    this.req,
+    this.opts,
+  });
+
+  factory ResolveTask.fromJson(Map<String, dynamic> json) =>
+      _$ResolveTaskFromJson(json);
+  Map<String, dynamic> toJson() => _$ResolveTaskToJson(this);
+}
@@ -1,22 +1,21 @@
 // GENERATED CODE - DO NOT MODIFY BY HAND

-part of 'create_router_params.dart';
+part of 'resolve_task.dart';

 // **************************************************************************
 // JsonSerializableGenerator
 // **************************************************************************

-CreateRouterParams _$CreateRouterParamsFromJson(Map<String, dynamic> json) =>
-    CreateRouterParams(
+ResolveTask _$ResolveTaskFromJson(Map<String, dynamic> json) => ResolveTask(
      req: json['req'] == null
          ? null
          : Request.fromJson(json['req'] as Map<String, dynamic>),
-      opt: json['opt'] == null
+      opts: json['opts'] == null
          ? null
-          : Options.fromJson(json['opt'] as Map<String, dynamic>),
+          : Options.fromJson(json['opts'] as Map<String, dynamic>),
    );

-Map<String, dynamic> _$CreateRouterParamsToJson(CreateRouterParams instance) {
+Map<String, dynamic> _$ResolveTaskToJson(ResolveTask instance) {
  final val = <String, dynamic>{};

  void writeNotNull(String key, dynamic value) {
@@ -25,7 +24,7 @@ Map<String, dynamic> _$CreateRouterParamsToJson(CreateRouterParams instance) {
    }
  }

-  writeNotNull('req', instance.req?.toJson());
-  writeNotNull('opt', instance.opt?.toJson());
+  writeNotNull('req', instance.req);
+  writeNotNull('opts', instance.opts);
  return val;
 }
Author	SHA1	Message	Date
Levi	640e798d70	release: v1.9.0	2026-01-23 22:38:11 +08:00
Levi	ba2df0ecff	docs: update windows arm download link	2026-01-23 22:33:00 +08:00
Levi	d61da67456	feat: add anonymous analytics (#1254 )	2026-01-23 22:29:15 +08:00
Levi	7c696ee6e0	feat: upgrade Flutter version to 3.38 (#1256 )	2026-01-23 21:28:13 +08:00
Copilot	7b840b4261	feat: add config for auto-torrent (#1219 )	2026-01-22 22:18:34 +08:00
Copilot	a3c1f84c2c	feat: register as android download handler for browser integration (#1251 )	2026-01-22 18:33:23 +08:00
Locon213	8d33e1a5b3	feat: add automatic cleanup options for completed torrents and missing files (#1243 )	2026-01-22 09:32:14 +08:00
Copilot	bad7f1d06c	fix: filesystem error when creating long filename (#1240 )	2026-01-21 23:12:38 +08:00
Levi	af1c8b2719	feat: enhance deep link handling for install extensions (#1249 )	2026-01-21 20:23:04 +08:00
Levi	d90af0b9d1	feat: support calling Gopeed API via host RPC (#1247 )	2026-01-21 13:21:20 +08:00
Levi	6016ee1d24	feat: localize google fonts in flutter web (#1241 )	2026-01-15 23:59:41 +08:00
Levi	e275fd58bd	fix: update goja to avoid some special cases stack overflow (#1242 )	2026-01-15 18:49:19 +08:00
Levi	c9626cb389	perf: slow down DHT announcing on errors (#1186 )	2026-01-14 20:04:21 +08:00
Locon213	f86a379f93	feat(ui): add download percentage and ETA display (#1238 )	2026-01-14 09:47:45 +08:00
Levi	a9eee26be7	refactor: fethcer interface & download flow (#1229 )	2026-01-08 21:50:47 +08:00
Copilot	abd16d5326	fix: filename truncation for HTML-encoded ampersands in Content-Disposition (#1215 )	2026-01-05 22:56:04 +08:00
Copilot	6756d82ffa	fix: use PathUnescape for filename URL decoding (#1214 )	2026-01-05 21:46:50 +08:00
Copilot	71c9e6947a	feat: add auto-start incomplete tasks on application startup (#1203 )	2026-01-05 21:11:42 +08:00
Matteo Pietro Dazzi	24db9bb58b	feat: queue extractions (#1227 )	2026-01-05 15:53:19 +08:00
Matteo Pietro Dazzi	de0afb1481	feat: multipart-archives (#1222 )	2026-01-01 19:09:22 +08:00
awe123343	cb6331c20d	feat(ui): support running as menubar app (#1216 )	2025-12-31 09:57:16 +08:00
Matteo Pietro Dazzi	b0e133b554	feat: show extraction progress (#1217 )	2025-12-31 09:25:21 +08:00
r6SHsRLF	dbe37befa3	ci(windows): keep installer exe in release assets (#1211 )	2025-12-29 17:36:27 +08:00
Matteo Pietro Dazzi	0d5c4e8e7f	feat: auto extract archives (#1212 )	2025-12-29 17:27:49 +08:00
Copilot	5515a1c48c	fix: ByteFmt panic on negative int64 values (#1200 )	2025-12-28 21:57:40 +08:00
Mine	3abf6ed933	feat: add support for Windows ARM architecture in build and release configurations (#1206 )	2025-12-28 21:45:47 +08:00
Levi	af40e8aa63	release: v1.8.3	2025-11-30 21:11:04 +08:00
Levi	64c5ece02c	docs: add WeChat Official Account qr (#1192 )	2025-11-29 13:19:37 +08:00
Levi	4ccbc3ebc5	feat: support custom GitHub mirror config (#1191 )	2025-11-29 12:39:24 +08:00
BerryMC	14d9642d3c	feat: add RPM package build (#1190 )	2025-11-29 11:35:32 +08:00
Copilot	2f5fbfb17c	fix: HTTP filename parsing for mixed encodings and GBK-encoded (#1189 )	2025-11-29 11:34:50 +08:00
Copilot	49b4d99b5e	feat: add download directory placeholders, category support (#1188 )	2025-11-27 18:39:08 +08:00
Copilot	9d9f1caaaa	feat: support webhook (#1187 )	2025-11-25 23:34:45 +08:00
Copilot	5bb8541385	fix: proxy username and password not persisting in settings (#1183 )	2025-11-24 19:29:49 +08:00
Levi	f7189668fd	ci: pin windows runner image to windows-2022 (#1184 )	2025-11-24 18:32:56 +08:00
Little-King	1b36ed1807	fix: defect in extension process during rename duplicate file (#1158 )	2025-11-14 18:49:21 +08:00
Levi	07dc196c3c	feat: add support for Waterfox browser detection (#1146 )	2025-10-15 20:44:41 +08:00
Levi	76bec67ab2	ci: fix windows runner	2025-10-12 22:45:43 +08:00
Levi	a2a9e3dc2a	release: v1.8.2	2025-10-12 21:17:40 +08:00
Levi	9a5680fb45	feat: refactor browser extension communication to use IPC (#1130 )	2025-10-12 21:17:07 +08:00
Levi	75a8a3a9ac	ci: downgrade to Ubuntu 22.04 (#1128 )	2025-10-09 21:01:06 +08:00
Levi	3e8c85b945	feat: update GitHub mirrors (#1137 )	2025-10-09 20:59:56 +08:00
Levi	90f70d1bf6	feat: isolate TLS fingerprint for each extension lifecycle (#1135 )	2025-10-09 20:37:21 +08:00
Levi	20a70d7f91	fix: certain special single-file torrent downloads (#1136 )	2025-09-29 22:52:06 +08:00
Levi	d33546a4b5	fix: update deleteAll method to accept force parameter (#1127 )	2025-09-29 19:41:48 +08:00
Levi	93614d46a8	release: v1.8.1	2025-09-14 10:10:30 +08:00
Levi	04b0e691eb	fix: add timeout to server shutdown (#1116 )	2025-09-13 21:19:28 +08:00
铺盖崽	7f08fa0b23	ci: update linux runner 24.04 (#1117 )	2025-09-13 18:44:00 +08:00
Levi	df6a51d23c	feat: add notify when new version option (#1115 )	2025-09-12 18:32:45 +08:00
Levi	46c379d556	fix: resolve incorrect download path for single file torrent (#1111 )	2025-09-10 07:59:10 +08:00
Levi	46cd9f7a3e	fix: windows tray disappearing after sleep/wake cycles (#1108 )	2025-09-09 22:44:09 +08:00
Levi	5c2f66f4b6	fix: web auth config (#1094 )	2025-09-09 18:35:04 +08:00
Krau	cfdcb586ee	fix: decode URL-encoded filename from contentDisposition header (#1099 )	2025-09-04 18:22:30 +08:00
Levi	55e6bdc4f7	release: v1.8.0	2025-08-28 18:43:44 +08:00
Levi	b31b42301e	feat: update storage directory path for Windows (#1087 )	2025-08-28 08:44:18 +08:00
Levi	7ce0d876b0	feat: add environment variables configuration support (#1088 )	2025-08-28 08:21:02 +08:00
Levi	2fd2596aa0	ci: update macOS version to macos-14 (#1086 )	2025-08-26 10:07:33 +08:00
Local-Gay-Communist	e0973e4a34	feat: add german language support (#1084 )	2025-08-22 09:26:37 +08:00
Levi	4f7b8a05ad	feat: web login page (#1058 )	2025-07-16 01:02:25 +08:00
Levi	2927d1ef2b	feat(extension): TLS fingerprinting support in xhr (#1054 )	2025-07-15 23:54:51 +08:00
Levi	3451f577ab	fix: remove invalid characters in HTTP headers (#1053 )	2025-07-15 22:34:10 +08:00
Levi	06671be0d8	release: v1.7.1	2025-07-08 09:13:39 +08:00
Thiago Sabaia	8ae9363f0f	feat: Translation into Portuguese (Brazil) (#1047 )	2025-06-17 09:51:51 +08:00
unifan	5d84445f8f	feat: Open in Folder with support for 3rd file manager (#1045 )	2025-06-07 11:14:58 +08:00
Levi	7c541e4047	feat: web support relative base path (#1001 )	2025-05-15 22:07:26 +08:00
Charles Huang	3262e5a11b	fix: do not add external tracker to a private torrent (#1011 )	2025-04-23 22:53:15 +08:00
Charles Huang	ff43a373cd	fix: json syntax error in bt config (#1014 )	2025-04-23 13:48:46 +08:00
Levi	7394d948e4	ci: workaround for app_indicator_new is deprecated (#986 )	2025-04-09 22:20:16 +08:00
Levi	5afb3aa43b	ci: fix go 1.24 code coverage (#988 )	2025-04-09 22:19:50 +08:00
Levi	7705af6e68	release: v1.7.0	2025-04-08 22:22:09 +08:00
Levi	684e060ef3	chore: upgrade go to 1.24 (#984 )	2025-04-08 22:18:18 +08:00
Levi	0c67792441	ci: build separate macos packages (#967 )	2025-04-08 19:43:30 +08:00
Levi	b0ef2c2a87	fix: bt seed cause crash (#985 )	2025-04-08 18:38:17 +08:00
mak7im01	1977c2a0fc	feat: update ru_ru.dart (#982 )	2025-04-08 09:21:29 +08:00
Levi	d289708f9e	feat: use batch download api for create multitasks (#978 )	2025-04-05 22:57:17 +08:00
Levi	cd5fd45667	fix: resolve http non encode attachment filename (#975 )	2025-04-05 22:37:19 +08:00
Levi	50bc9ab129	feat: improve http download strategy to prevent speed drops near completion (#969 )	2025-04-05 22:20:35 +08:00
Levi	bfad91dcab	release: v1.6.11	2025-03-14 23:03:48 +08:00
Levi	61a959adda	ci: apk build split abi (#962 )	2025-03-14 22:58:28 +08:00
Levi	f4b839fd11	fix: http download size exceeds file size (#959 )	2025-03-14 20:07:34 +08:00
Levi	969aeb5e0a	fix: : web auth priority when api token and basic auth coexist (#960 )	2025-03-14 19:22:31 +08:00
Levi	68d42eb397	feat: web http file server caching and gzip support (#961 )	2025-03-14 18:31:05 +08:00
Levi	08603f9510	feat: auto updater (#933 )	2025-03-13 18:31:38 +08:00
Internetezoo	b450bf67bd	feat: Add Hungarian languages (#940 )	2025-03-10 11:59:44 +08:00
Levi	03e26dbea8	feat: improve http download retry strategy (#951 )	2025-03-07 12:01:52 +08:00
Levi	046a3ac9f9	fix: can not open url encode torrent file path (#945 )	2025-02-27 00:00:25 +08:00
Levi	9c5aebaf36	fix: path url encode filename parse (#939 )	2025-02-18 19:37:38 +08:00
Xiangxin	a094715d69	fix: windows title bar theme switch (#936 )	2025-02-17 19:32:09 +08:00
铺盖崽	69bb875172	ci: fix flathub build error (#937 )	2025-02-17 09:15:42 +08:00
铺盖崽	589f10c7ef	ci: add linux arm64 build (#935 )	2025-02-16 10:54:25 +08:00