- Fix issues with cache dir

- Fix responsiveness issue with navbars
- Support user entry for users running as non-root
- Other minor fixes

.air.toml

@@ -7,16 +7,16 @@ tmp_dir = "tmp"
   bin = "./tmp/main"
   cmd = "bash -c 'go build -ldflags \"-X github.com/sirrobot01/decypharr/pkg/version.Version=0.0.0 -X github.com/sirrobot01/decypharr/pkg/version.Channel=dev\" -o ./tmp/main .'"
   delay = 1000
-  exclude_dir = ["assets", "tmp", "vendor", "testdata", "data"]
+  exclude_dir = ["tmp", "vendor", "testdata", "data", "logs", "docs", "dist", "node_modules", ".ven"]
   exclude_file = []
   exclude_regex = ["_test.go"]
   exclude_unchanged = false
   follow_symlink = false
   full_bin = ""
   include_dir = []
-  include_ext = ["go", "tpl", "tmpl", "html", ".json"]
+  include_ext = ["go", "tpl", "tmpl", "html", ".json", ".js", ".css"]
   include_file = []
-  kill_delay = "0s"
+  kill_delay = "1s"
   log = "build-errors.log"
   poll = false
   poll_interval = 0
@@ -24,8 +24,8 @@ tmp_dir = "tmp"
   pre_cmd = []
   rerun = false
   rerun_delay = 500
-  send_interrupt = false
-  stop_on_error = false
+  send_interrupt = true
+  stop_on_error = true
 
 [color]
   app = ""

.dockerignore

@@ -11,3 +11,23 @@ torrents.json
 *.json
 .ven/**
 docs/**
+
+# Don't copy node modules
+node_modules/
+
+# Don't copy development files
+.git/
+.gitignore
+*.md
+.env*
+*.log
+
+# Build artifacts
+decypharr
+healthcheck
+*.exe
+.venv/
+data/**
+
+.stignore
+.stfolder/**

.github/workflows/deploy-docs.yml

@@ -24,5 +24,5 @@ jobs:
           path: .cache
           restore-keys: |
             mkdocs-material-
-      - run: pip install mkdocs-material
+      - run: cd docs && pip install -r requirements.txt
       - run: cd docs && mkdocs gh-deploy --force

.gitignore

@@ -12,4 +12,9 @@ tmp/**
 torrents.json
 logs/**
 auth.json
-.ven/
+.ven/
+.env
+node_modules/
+.venv/
+.stignore
+.stfolder/**

Dockerfile

@@ -29,40 +29,37 @@ RUN --mount=type=cache,target=/go/pkg/mod \
     go build -trimpath -ldflags="-w -s" \
     -o /healthcheck cmd/healthcheck/main.go
 
-# Stage 2: Create directory structure
-FROM alpine:3.19 as dirsetup
-RUN mkdir -p /app/logs && \
-    mkdir -p /app/cache && \
-    chmod 777 /app/logs && \
-    touch /app/logs/decypharr.log && \
-    chmod 666 /app/logs/decypharr.log
+# Stage 2: Final image
+FROM alpine:latest
 
-# Stage 3: Final image
-FROM gcr.io/distroless/static-debian12:nonroot
+ARG VERSION=0.0.0
+ARG CHANNEL=dev
 
 LABEL version = "${VERSION}-${CHANNEL}"
-
 LABEL org.opencontainers.image.source = "https://github.com/sirrobot01/decypharr"
 LABEL org.opencontainers.image.title = "decypharr"
 LABEL org.opencontainers.image.authors = "sirrobot01"
 LABEL org.opencontainers.image.documentation = "https://github.com/sirrobot01/decypharr/blob/main/README.md"
 
-# Copy binaries
-COPY --from=builder --chown=nonroot:nonroot /decypharr /usr/bin/decypharr
-COPY --from=builder --chown=nonroot:nonroot /healthcheck /usr/bin/healthcheck
+# Install dependencies including rclone
+RUN apk add --no-cache fuse3 ca-certificates su-exec shadow rclone && \
+    echo "user_allow_other" >> /etc/fuse.conf
 
-# Copy pre-made directory structure
-COPY --from=dirsetup --chown=nonroot:nonroot /app /app
+# Copy binaries and entrypoint
+COPY --from=builder /decypharr /usr/bin/decypharr
+COPY --from=builder /healthcheck /usr/bin/healthcheck
+COPY scripts/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
 
-
-# Metadata
+# Set environment variables
+ENV PUID=1000
+ENV PGID=1000
 ENV LOG_PATH=/app/logs
+
 EXPOSE 8282
 VOLUME ["/app"]
-USER nonroot:nonroot
 
+HEALTHCHECK --interval=10s --retries=10 CMD ["/usr/bin/healthcheck", "--config", "/app", "--basic"]
 
-# Base healthcheck
-HEALTHCHECK --interval=3s --retries=10 CMD ["/usr/bin/healthcheck", "--config", "/app", "--basic"]
-
+ENTRYPOINT ["/entrypoint.sh"]
 CMD ["/usr/bin/decypharr", "--config", "/app"]

README.md

@@ -12,9 +12,9 @@ Decypharr combines the power of QBittorrent with popular Debrid services to enha
 
 - Mock Qbittorent API that supports the Arrs (Sonarr, Radarr, Lidarr etc)
 - Full-fledged UI for managing torrents
-- Proxy support for filtering out un-cached Debrid torrents
 - Multiple Debrid providers support
 - WebDAV server support for each debrid provider
+- Optional mounting of WebDAV to your system(using [Rclone](https://rclone.org/))
 - Repair Worker for missing files
 
 ## Supported Debrid Providers
@@ -29,17 +29,22 @@ Decypharr combines the power of QBittorrent with popular Debrid services to enha
 ### Docker (Recommended)
 
 ```yaml
-version: '3.7'
 services:
   decypharr:
-    image: cy01/blackhole:latest # or cy01/blackhole:beta
+    image: cy01/blackhole:latest
     container_name: decypharr
     ports:
-      - "8282:8282" # qBittorrent
+      - "8282:8282"
     volumes:
-      - /mnt/:/mnt
+      - /mnt/:/mnt:rshared
       - ./configs/:/app # config.json must be in this directory
     restart: unless-stopped
+    devices:
+      - /dev/fuse:/dev/fuse:rwm
+    cap_add:
+      - SYS_ADMIN
+    security_opt:
+      - apparmor:unconfined
 ```
 
 ## Documentation
@@ -57,25 +62,7 @@ The documentation includes:
 
 ## Basic Configuration
 
-```json
-{
-  "debrids": [
-    {
-      "name": "realdebrid",
-      "api_key": "your_api_key_here",
-      "folder": "/mnt/remote/realdebrid/__all__/",
-      "use_webdav": true
-    }
-  ],
-  "qbittorrent": {
-    "download_folder": "/mnt/symlinks/",
-    "categories": ["sonarr", "radarr"]
-  },
-  "use_auth": false,
-  "log_level": "info",
-  "port": "8282"
-}
-```
+You can configure Decypharr through the Web UI or by editing the `config.json` file directly.
 
 ## Contributing
 

cmd/decypharr/main.go

@@ -73,6 +73,14 @@ func Start(ctx context.Context) error {
 		}
 		srv := server.New(handlers)
 
+		reset := func() {
+			// Reset the store and services
+			qb.Reset()
+			store.Reset()
+			// refresh GC
+			runtime.GC()
+		}
+
 		done := make(chan struct{})
 		go func(ctx context.Context) {
 			if err := startServices(ctx, cancelSvc, wd, srv); err != nil {
@@ -87,22 +95,18 @@ func Start(ctx context.Context) error {
 			// graceful shutdown
 			cancelSvc() // propagate to services
 			<-done      // wait for them to finish
+			_log.Info().Msg("Decypharr has been stopped gracefully.")
+			reset() // reset store and services
 			return nil
 
 		case <-restartCh:
 			cancelSvc() // tell existing services to shut down
 			_log.Info().Msg("Restarting Decypharr...")
 			<-done // wait for them to finish
-			qb.Reset()
-			store.Reset()
-
+			_log.Info().Msg("Decypharr has been restarted.")
+			reset() // reset store and services
 			// rebuild svcCtx off the original parent
 			svcCtx, cancelSvc = context.WithCancel(ctx)
-			runtime.GC()
-
-			config.Reload()
-			store.Reset()
-			// loop will restart services automatically
 		}
 	}
 }
@@ -144,6 +148,15 @@ func startServices(ctx context.Context, cancelSvc context.CancelFunc, wd *webdav
 		return srv.Start(ctx)
 	})
 
+	// Start rclone RC server if enabled
+	safeGo(func() error {
+		rcManager := store.Get().RcloneManager()
+		if rcManager == nil {
+			return nil
+		}
+		return rcManager.Start(ctx)
+	})
+
 	safeGo(func() error {
 		arr := store.Get().Arr()
 		if arr == nil {

docs/docs/api-spec.yaml

@@ -0,0 +1,418 @@
+openapi: 3.0.3
+info:
+  title: Decypharr API
+  description: QbitTorrent with Debrid Support API
+  version: 1.0.0
+  contact:
+    name: Decypharr
+    url: https://github.com/sirrobot01/decypharr
+
+servers:
+  - url: /api
+    description: API endpoints
+
+security:
+  - cookieAuth: []
+  - bearerAuth: []
+
+paths:
+  /arrs:
+    get:
+      summary: Get all configured Arrs
+      description: Retrieve a list of all configured Arr applications (Sonarr, Radarr, etc.)
+      tags:
+        - Arrs
+      responses:
+        '200':
+          description: Successfully retrieved Arrs
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/Arr'
+
+  /add:
+    post:
+      summary: Add content for processing
+      description: Add torrent files or magnet links for processing through debrid services
+      tags:
+        - Content
+      requestBody:
+        content:
+          multipart/form-data:
+            schema:
+              type: object
+              properties:
+                arr:
+                  type: string
+                  description: Name of the Arr application
+                action:
+                  type: string
+                  description: Action to perform
+                debrid:
+                  type: string
+                  description: Debrid service to use
+                callbackUrl:
+                  type: string
+                  description: Optional callback URL
+                downloadFolder:
+                  type: string
+                  description: Download folder path
+                downloadUncached:
+                  type: boolean
+                  description: Whether to download uncached content
+                urls:
+                  type: string
+                  description: Newline-separated URLs or magnet links
+                files:
+                  type: array
+                  items:
+                    type: string
+                    format: binary
+                  description: Torrent files to upload
+      responses:
+        '200':
+          description: Content added successfully
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  results:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/ImportRequest'
+                  errors:
+                    type: array
+                    items:
+                      type: string
+        '400':
+          description: Bad request
+
+  /repair:
+    post:
+      summary: Repair media
+      description: Start a repair process for specified media items
+      tags:
+        - Repair
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/RepairRequest'
+      responses:
+        '200':
+          description: Repair started or completed
+          content:
+            application/json:
+              schema:
+                type: string
+        '400':
+          description: Bad request
+        '404':
+          description: Arr not found
+        '500':
+          description: Internal server error
+
+  /repair/jobs:
+    get:
+      summary: Get repair jobs
+      description: Retrieve all repair jobs
+      tags:
+        - Repair
+      responses:
+        '200':
+          description: Successfully retrieved repair jobs
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/RepairJob'
+    delete:
+      summary: Delete repair jobs
+      description: Delete multiple repair jobs by IDs
+      tags:
+        - Repair
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                ids:
+                  type: array
+                  items:
+                    type: string
+              required:
+                - ids
+      responses:
+        '200':
+          description: Jobs deleted successfully
+        '400':
+          description: Bad request
+
+  /repair/jobs/{id}/process:
+    post:
+      summary: Process repair job
+      description: Process a specific repair job by ID
+      tags:
+        - Repair
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+          description: Job ID
+      responses:
+        '200':
+          description: Job processed successfully
+        '400':
+          description: Bad request
+
+  /repair/jobs/{id}/stop:
+    post:
+      summary: Stop repair job
+      description: Stop a running repair job by ID
+      tags:
+        - Repair
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+          description: Job ID
+      responses:
+        '200':
+          description: Job stopped successfully
+        '400':
+          description: Bad request
+        '500':
+          description: Internal server error
+
+  /torrents:
+    get:
+      summary: Get all torrents
+      description: Retrieve all torrents sorted by added date
+      tags:
+        - Torrents
+      responses:
+        '200':
+          description: Successfully retrieved torrents
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/Torrent'
+    delete:
+      summary: Delete multiple torrents
+      description: Delete multiple torrents by hash list
+      tags:
+        - Torrents
+      parameters:
+        - name: hashes
+          in: query
+          required: true
+          schema:
+            type: string
+          description: Comma-separated list of torrent hashes
+        - name: removeFromDebrid
+          in: query
+          schema:
+            type: boolean
+            default: false
+          description: Whether to remove from debrid service
+      responses:
+        '200':
+          description: Torrents deleted successfully
+        '400':
+          description: Bad request
+
+  /torrents/{category}/{hash}:
+    delete:
+      summary: Delete single torrent
+      description: Delete a specific torrent by category and hash
+      tags:
+        - Torrents
+      parameters:
+        - name: category
+          in: path
+          required: true
+          schema:
+            type: string
+          description: Torrent category
+        - name: hash
+          in: path
+          required: true
+          schema:
+            type: string
+          description: Torrent hash
+        - name: removeFromDebrid
+          in: query
+          schema:
+            type: boolean
+            default: false
+          description: Whether to remove from debrid service
+      responses:
+        '200':
+          description: Torrent deleted successfully
+        '400':
+          description: Bad request
+
+components:
+  securitySchemes:
+    cookieAuth:
+      type: apiKey
+      in: cookie
+      name: auth-session
+    bearerAuth:
+      type: http
+      scheme: bearer
+      bearerFormat: token
+      description: API token for authentication
+
+  schemas:
+    Arr:
+      type: object
+      properties:
+        name:
+          type: string
+          description: Name of the Arr application
+        host:
+          type: string
+          description: Host URL of the Arr application
+        token:
+          type: string
+          description: API token for the Arr application
+        cleanup:
+          type: boolean
+          description: Whether to cleanup after processing
+        skipRepair:
+          type: boolean
+          description: Whether to skip repair operations
+        downloadUncached:
+          type: boolean
+          description: Whether to download uncached content
+        selectedDebrid:
+          type: string
+          description: Selected debrid service
+        source:
+          type: string
+          description: Source of the Arr configuration
+
+    ImportRequest:
+      type: object
+      properties:
+        debridName:
+          type: string
+          description: Name of the debrid service
+        downloadFolder:
+          type: string
+          description: Download folder path
+        magnet:
+          type: string
+          description: Magnet link
+        arr:
+          $ref: '#/components/schemas/Arr'
+        action:
+          type: string
+          description: Action to perform
+        downloadUncached:
+          type: boolean
+          description: Whether to download uncached content
+        callbackUrl:
+          type: string
+          description: Callback URL
+        importType:
+          type: string
+          description: Type of import (API, etc.)
+
+    RepairRequest:
+      type: object
+      properties:
+        arrName:
+          type: string
+          description: Name of the Arr application
+        mediaIds:
+          type: array
+          items:
+            type: string
+          description: List of media IDs to repair
+        autoProcess:
+          type: boolean
+          description: Whether to auto-process the repair
+        async:
+          type: boolean
+          description: Whether to run repair asynchronously
+      required:
+        - arrName
+
+    RepairJob:
+      type: object
+      properties:
+        id:
+          type: string
+          description: Job ID
+        status:
+          type: string
+          description: Job status
+        arrName:
+          type: string
+          description: Associated Arr application
+        mediaIds:
+          type: array
+          items:
+            type: string
+          description: Media IDs being repaired
+        createdAt:
+          type: string
+          format: date-time
+          description: Job creation timestamp
+
+    Torrent:
+      type: object
+      properties:
+        hash:
+          type: string
+          description: Torrent hash
+        name:
+          type: string
+          description: Torrent name
+        category:
+          type: string
+          description: Torrent category
+        addedOn:
+          type: string
+          format: date-time
+          description: Date when torrent was added
+        size:
+          type: integer
+          description: Torrent size in bytes
+        progress:
+          type: number
+          format: float
+          description: Download progress (0-1)
+        status:
+          type: string
+          description: Torrent status
+
+
+tags:
+  - name: Arrs
+    description: Arr application management
+  - name: Content
+    description: Content addition and processing
+  - name: Repair
+    description: Media repair operations
+  - name: Torrents
+    description: Torrent management
+  - name: Configuration
+    description: Application configuration
+  - name: Authentication
+    description: API token management

docs/docs/api.md

@@ -0,0 +1,90 @@
+# API Documentation
+
+Decypharr provides a RESTful API for managing torrents, debrid services, and Arr integrations. The API requires authentication and all endpoints are prefixed with `/api`.
+
+## Authentication
+
+The API supports two authentication methods:
+
+### 1. Session-based Authentication (Cookies)
+Log in through the web interface (`/login`) to establish an authenticated session. The session cookie (`auth-session`) will be automatically included in subsequent API requests from the same browser session.
+
+### 2. API Token Authentication (Bearer Token)
+Use API tokens for programmatic access. Include the token in the `Authorization` header for each request:
+
+- `Authorization: Bearer <your-token>`
+
+## Interactive API Documentation
+
+<swagger-ui src="api-spec.yaml"/>
+
+## API Endpoints Overview
+
+### Arrs Management
+- `GET /api/arrs` - Get all configured Arr applications (Sonarr, Radarr, etc.)
+
+### Content Management
+- `POST /api/add` - Add torrent files or magnet links for processing through debrid services
+
+### Repair Operations
+- `POST /api/repair` - Start repair process for media items
+- `GET /api/repair/jobs` - Get all repair jobs
+- `POST /api/repair/jobs/{id}/process` - Process a specific repair job
+- `POST /api/repair/jobs/{id}/stop` - Stop a running repair job
+- `DELETE /api/repair/jobs` - Delete multiple repair jobs
+
+### Torrent Management
+- `GET /api/torrents` - Get all torrents
+- `DELETE /api/torrents/{category}/{hash}` - Delete a specific torrent
+- `DELETE /api/torrents/` - Delete multiple torrents
+
+## Usage Examples
+
+### Adding Content via API
+
+#### Using API Token:
+```bash
+curl -H "Authorization: Bearer $API_TOKEN" -X POST http://localhost:8080/api/add \
+  -F "arr=sonarr" \
+  -F "debrid=realdebrid" \
+  -F "urls=magnet:?xt=urn:btih:..." \
+  -F "downloadUncached=true"
+  -F "file=@/path/to/torrent/file.torrent"
+  -F "callbackUrl=http://your.callback.url/endpoint"
+```
+
+#### Using Session Cookies:
+```bash
+# Login first (this sets the session cookie)
+curl -c cookies.txt -X POST http://localhost:8080/login \
+  -H "Content-Type: application/json" \
+  -d '{"username": "your_username", "password": "your_password"}'
+
+# Then use the session cookie for API calls
+curl -b cookies.txt -X POST http://localhost:8080/api/add \
+  -F "arr=sonarr" \
+  -F "debrid=realdebrid" \
+  -F "urls=magnet:?xt=urn:btih:..." \
+  -F "downloadUncached=true"
+```
+
+### Getting Torrents
+
+```bash
+# With API token
+curl -H "Authorization: Bearer $API_TOKEN" -X GET http://localhost:8080/api/torrents
+```
+
+### Starting a Repair Job
+
+```bash
+# With API token
+curl -H "Authorization: Bearer $API_TOKEN" -X POST http://localhost:8080/api/repair \
+  -H "Content-Type: application/json" \
+  -d '{
+    "arrName": "sonarr",
+    "mediaIds": ["123", "456"],
+    "autoProcess": true,
+    "async": true
+  }'
+```

docs/docs/changelog.md

@@ -1,186 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-- Add WebDAV support for debrid providers
-- Some refactoring and code cleanup
-- Fixes
-    - Fix Alldebrid not downloading torrents
-    - Fix Alldebrid not downloading uncached torrents
-    - Fix uncached torrents not being downloaded for RealDebrid
-- Add support for multiple download API keys for debrid providers
-- Add support for editable config.json via the UI
-- Fix downloading timeout
-- Fix UMASK for Windows
-- Retries 50x(except 503) errors for RD
-
-
-## 0.5.0
-
-- A more refined repair worker (with more control)
-- UI Improvements
-    - Pagination for torrents
-    - Dark mode
-    - Ordered torrents table
-- Fix Arr API flaky behavior
-- Discord Notifications
-- Minor bug fixes
-- Add Tautulli support
-    - playback_failed event triggers a repair
-- Miscellaneous improvements
-    - Add an option to skip the repair worker for a specific arr
-    - Arr specific uncached downloading option
-    - Option to download uncached torrents from UI
-- Remove QbitTorrent Log level (Use the global log level)
-
-## 0.4.2
-
-- Hotfixes
-    - Fix saving torrents error
-    - Fix bugs with the UI
-- Speed improvements
-
-## 0.4.1
-
-- Adds optional UI authentication
-- Downloaded Torrents persist on restart
-- Fixes
-    - Fix Alldebrid struggling to find the correct file
-- Minor bug fixes or speed-gains
-- A new cleanup worker to clean up ARR queues
-
-## 0.4.0
-
-- Add support for multiple debrid providers
-- A full-fledged UI for adding torrents, repairing files, viewing config and managing torrents
-- Fix issues with Alldebrid
-    - Fix file transversal bug
-    - Fix files with no parent directory
-- Logging
-    - Add a more robust logging system
-    - Add logging to a file
-    - Add logging to the UI
-- Qbittorrent
-    - Add support for tags (creating, deleting, listing)
-    - Add support for categories (creating, deleting, listing)
-    - Fix issues with arr sending torrents using a different content type
-
-## 0.3.3
-
-- Add AllDebrid Support
-- Fix Torbox not downloading uncached torrents
-- Fix Rar files being downloaded
-
-## 0.3.2
-
-- Fix DebridLink not downloading
-- Fix Torbox with uncached torrents
-- Add new /internal/cached endpoint to check if an hash is cached
-- Implement per-debrid local cache
-- Fix file check for torbox
-- Other minor bug fixes
-
-## 0.3.1
-
-- Add DebridLink Support
-- Refactor error handling
-
-## 0.3.0
-
-- Add UI for adding torrents
-- Refraction of the code
-- Fix Torbox bug
-- Update CI/CD
-- Update Readme
-
-## 0.2.7
-
-- Add support for multiple debrid providers
-- Add Torbox support
-- Add support for configurable debrid cache checks
-- Add support for configurable debrid download uncached torrents
-
-## 0.2.6
-
-- Delete torrent for empty matched files
-- Update Readme
-
-## 0.2.5
-
-- Fix ContentPath not being set prior
-- Rewrote Readme
-- Cleaned up the code
-
-## 0.2.4
-
-- Add file download support (Sequential Download)
-- Fix http handler error
-- Fix *arrs map failing concurrently
-- Fix cache not being updated
-
-## 0.2.3
-
-- Delete uncached items from RD
-- Fail if the torrent is not cached (optional)
-- Fix cache not being updated
-
-## 0.2.2
-
-- Fix name mismatch in the cache
-- Fix directory mapping with mounts
-- Add Support for refreshing the *arrs
-
-## 0.2.1
-
-- Fix Uncached torrents not being downloaded/downloaded
-- Minor bug fixed
-- Fix Race condition in the cache and file system
-
-## 0.2.0
-
-- Implement 0.2.0-beta changes
-- Removed Blackhole
-- Added QbitTorrent API
-- Cleaned up the code
-
-## 0.2.0-beta
-
-- Switch to QbitTorrent API instead of Blackhole
-- Rewrote the whole codebase
-
-## 0.1.4
-
-- Rewrote Report log
-- Fix YTS, 1337x not grabbing infohash
-- Fix Torrent symlink bug
-
-## 0.1.3
-
-- Searching for infohashes in the xml description/summary/comments
-- Added local cache support
-- Added max cache size
-- Rewrite blackhole.go
-- Bug fixes
-    - Fixed indexer getting disabled
-    - Fixed blackhole not working
-
-## 0.1.2
-
-- Bug fixes
-- Code cleanup
-- Get available hashes at once
-
-## 0.1.1
-
-- Added support for "No Blackhole" for Arrs
-- Added support for "Cached Only" for Proxy
-- Bug Fixes
-
-## 0.1.0
-
-- Initial Release
-- Added Real Debrid Support
-- Added Arrs Support
-- Added Proxy Support
-- Added Basic Authentication for Proxy
-- Added Rate Limiting for Debrid Providers

docs/docs/configuration/arrs.md

@@ -1,77 +0,0 @@
-# Arr Applications Configuration
-
-Decypharr can integrate directly with Sonarr, Radarr, and other Arr applications. This section explains how to configure the Arr integration in your `config.json` file.
-
-## Basic Configuration
-
-The Arr applications are configured under the `arrs` key:
-
-```json
-"arrs": [
-  {
-    "name": "sonarr",
-    "host": "http://sonarr:8989",
-    "token": "your-sonarr-api-key",
-    "cleanup": true
-  },
-  {
-    "name": "radarr",
-    "host": "http://radarr:7878",
-    "token": "your-radarr-api-key",
-    "cleanup": true
-  }
-]
-```
-
-### !!! note
-This configuration is optional if you've already set up the qBittorrent client in your Arr applications with the correct host and token information. It's particularly useful for the Repair Worker functionality.
-
-
-### Configuration Options
-Each Arr application supports the following options:
-
-- `name`: The name of the Arr application, which should match the category in qBittorrent
-- `host`: The host URL of the Arr application, including protocol and port
-- `token`: The API token/key of the Arr application
-- `cleanup`: Whether to clean up the Arr queue (removes completed downloads). This is only useful for Sonarr.
-- `skip_repair`: Automated repair will be skipped for this *arr.
-- `download_uncached`: Whether to download uncached torrents (defaults to debrid/manual setting)
-
-### Finding Your API Key
-#### Sonarr/Radarr/Lidarr
-
-1. Go to Sonarr > Settings > General
-2. Look for "API Key" in the "Security" section
-3. Copy the API key
-
-### Multiple Arr Applications
-You can configure multiple Arr applications by adding more entries to the arrs array:
-
-```json
-"arrs": [
-  {
-    "name": "sonarr",
-    "host": "http://sonarr:8989",
-    "token": "your-sonarr-api-key",
-    "cleanup": true
-  },
-  {
-    "name": "sonarr-anime",
-    "host": "http://sonarr-anime:8989",
-    "token": "your-sonarr-anime-api-key",
-    "cleanup": true
-    },
-  {
-    "name": "radarr",
-    "host": "http://radarr:7878",
-    "token": "your-radarr-api-key",
-    "cleanup": false
-  },
-  {
-    "name": "lidarr",
-    "host": "http://lidarr:8686",
-    "token": "your-lidarr-api-key",
-    "cleanup": false
-  }
-]
-```

docs/docs/configuration/debrid.md

@@ -1,131 +0,0 @@
-
-# Debrid Providers Configuration
-
-Decypharr supports multiple Debrid providers. This section explains how to configure each provider in your `config.json` file.
-
-## Basic Configuration
-
-Each Debrid provider is configured in the `debrids` array:
-
-```json
-"debrids": [
-  {
-    "name": "realdebrid",
-    "api_key": "your-api-key",
-    "folder": "/mnt/remote/realdebrid/__all__/",
-  },
-  {
-    "name": "alldebrid",
-    "api_key": "your-api-key",
-    "folder": "/mnt/remote/alldebrid/downloads/"
-  }
-]
-```
-
-### Provider Options
-
-Each Debrid provider accepts the following configuration options:
-
-
-#### Basic(Required) Options
-
-- `name`: The name of the Debrid provider (realdebrid, alldebrid, debridlink, torbox)
-- `host`: The API endpoint of the Debrid provider
-- `api_key`: Your API key for the Debrid service (can be comma-separated for multiple keys)
-- `folder`: The folder where your Debrid content is mounted (via webdav, rclone, zurg, etc.)
-
-#### Advanced Options
-
-- `rate_limit`: Rate limit for API requests (null by default)
-- `download_uncached`: Whether to download uncached torrents (disabled by default)
-- `check_cached`: Whether to check if torrents are cached (disabled by default)
-- `use_webdav`: Whether to create a WebDAV server for this Debrid provider (disabled by default)
-- `proxy`: Proxy URL for the Debrid provider (optional)
-
-#### WebDAV and Rclone Options
-- `torrents_refresh_interval`: Interval for refreshing torrent data (e.g., `15s`, `1m`, `1h`).
-- `download_links_refresh_interval`: Interval for refreshing download links (e.g., `40m`, `1h`).
-- `workers`: Number of concurrent workers for processing requests.
-- `serve_from_rclone`: Whether to serve files directly from Rclone (disabled by default)
-- `add_samples`: Whether to add sample files when adding torrents to debrid (disabled by default)
-- `folder_naming`: Naming convention for folders:
-    - `original_no_ext`: Original file name without extension
-    - `original`: Original file name with extension
-    - `filename`: Torrent filename
-    - `filename_no_ext`: Torrent filename without extension
-    - `id`: Torrent ID
-    - `hash`: Torrent hash
-- `auto_expire_links_after`: Time after which download links will expire (e.g., `3d`, `1w`).
-- `rc_url`, `rc_user`, `rc_pass`, `rc_refresh_dirs`: Rclone RC configuration for VFS refreshes
-- `directories`: A map of virtual folders to serve via the webDAV server. The key is the virtual folder name, and the values are map of filters and their value
-
-#### Example of `directories` configuration
-```json
-    "directories": {
-        "Newly Added": {
-          "filters": {
-            "exclude": "9-1-1",
-            "last_added": "20h"
-          }
-        },
-        "Spiderman Collection": {
-          "filters": {
-            "regex": "(?i)spider[-\\s]?man(\\s+collection|\\s+\\d|\\s+trilogy|\\s+complete|\\s+ultimate|\\s+box\\s+set|:?\\s+homecoming|:?\\s+far\\s+from\\s+home|:?\\s+no\\s+way\\s+home)"
-          }
-        }
-      }
-```
-
-### Example Configuration
-
-#### Real Debrid
-
-```json
-{
-  "name": "realdebrid",
-  "api_key": "your-api-key",
-  "folder": "/mnt/remote/realdebrid/__all__/",
-  "rate_limit": null,
-  "download_uncached": false,
-  "use_webdav": true
-}
-```
-
-#### All Debrid
-
-```json
-{
-  "name": "alldebrid",
-  "api_key": "your-api-key",
-  "folder": "/mnt/remote/alldebrid/torrents/",
-  "rate_limit": null,
-  "download_uncached": false,
-  "use_webdav": true
-}
-```
-
-#### Debrid Link
-
-```json
-{
-  "name": "debridlink",
-  "api_key": "your-api-key",
-  "folder": "/mnt/remote/debridlink/torrents/",
-  "rate_limit": null,
-  "download_uncached": false,
-  "use_webdav": true
-}
-```
-
-#### Torbox
-
-```json
-{
-  "name": "torbox",
-  "api_key": "your-api-key",
-  "folder": "/mnt/remote/torbox/torrents/",
-  "rate_limit": null,
-  "download_uncached": false,
-  "use_webdav": true
-}
-```

docs/docs/configuration/general.md

@@ -1,81 +0,0 @@
-# General Configuration
-
-This section covers the basic configuration options for Decypharr that apply to the entire application.
-
-## Basic Settings
-
-Here are the fundamental configuration options:
-
-```json
-{
-  "use_auth": false,
-  "port": 8282,
-  "log_level": "info",
-  "discord_webhook_url": "",
-  "min_file_size": 0,
-  "max_file_size": 0,
-  "allowed_file_types": ["mp4", "mkv", "avi", ...],
-  
-}
-```
-
-### Configuration Options
-
-#### Log Level
-The `log_level` setting determines how verbose the application logs will be:
-
-- `debug`: Detailed information, useful for troubleshooting
-- `info`: General operational information (default)
-- `warn`: Warning messages
-- `error`: Error messages only
-- `trace`: Very detailed information, including all requests and responses
-
-#### Port
-
-The `port` setting specifies the port on which Decypharr will run. The default is `8282`. You can change this to any available port on your server.
-
-Ensure this port:
-
-- Is not used by other applications
-- Is accessible to your Arr applications
-- Is properly exposed if using Docker (see the Docker Compose example in the Installation guide)
-
-
-#### Authentication
-The `use_auth` option enables basic authentication for the UI:
-
-```json
-"use_auth": true
-```
-
-When enabled, you'll need to provide a username and password to access the Decypharr interface.
-
-
-#### File Size Limits
-
-You can set minimum and maximum file size limits for torrents:
-```json
-"min_file_size": 0,
-"max_file_size": 0
-```
-
-#### Allowed File Types
-You can restrict the types of files that Decypharr will process by specifying allowed file extensions. This is useful for filtering out unwanted file types.
-
-```json
-"allowed_file_types": [
-  "mp4", "mkv", "avi", "mov",
-  "m4v", "mpg", "mpeg", "wmv",
-  "m4a", "mp3", "flac", "wav"
-]
-```
-
-If not specified, all movie, TV show, and music file types are allowed by default.
-
-
-#### Discord Notifications
-To receive notifications on Discord, add your webhook URL:
-```json
-"discord_webhook_url": "https://discord.com/api/webhooks/..."
-```
-This will send notifications for various events, such as successful downloads or errors.

docs/docs/configuration/index.md

@@ -1,43 +0,0 @@
-# Configuration Overview
-
-Decypharr uses a JSON configuration file to manage its settings. This file should be named `config.json` and placed in your configured directory.
-
-## Basic Configuration
-
-Here's a minimal configuration to get started:
-
-```json
-{
-  "debrids": [
-    {
-      "name": "realdebrid",
-      "api_key": "realdebrid_key",
-      "folder": "/mnt/remote/realdebrid/__all__/",
-      "use_webdav": true
-    }
-  ],
-  "qbittorrent": {
-    "port": "8282",
-    "download_folder": "/mnt/symlinks/",
-    "categories": ["sonarr", "radarr"]
-  },
-  "repair": {
-    "enabled": false,
-    "interval": "12h"
-  },
-  "use_auth": false,
-  "log_level": "info"
-}
-```
-
-### Configuration Sections
-
-Decypharr's configuration is divided into several sections:
-
-- [General Configuration](general.md) - Basic settings like logging and authentication
-- [Debrid Providers](debrid.md) - Configure one or more Debrid services
-- [qBittorrent Settings](qbittorrent.md) - Settings for the qBittorrent API
-- [Arr Integration](arrs.md) - Configuration for Sonarr, Radarr, etc.
-
-Full Configuration Example
-For a complete configuration file with all available options, see our [full configuration example](../extras/config.full.json).

docs/docs/configuration/qbittorrent.md

@@ -1,61 +0,0 @@
-# qBittorrent Configuration
-
-Decypharr emulates a qBittorrent instance to integrate with Arr applications. This section explains how to configure the qBittorrent settings in your `config.json` file.
-
-## Basic Configuration
-
-The qBittorrent functionality is configured under the `qbittorrent` key:
-
-```json
-"qbittorrent": {
-  "download_folder": "/mnt/symlinks/",
-  "categories": ["sonarr", "radarr", "lidarr"],
-  "refresh_interval": 5
-}
-```
-
-### Configuration Options
-#### Required Settings
-
-- `download_folder`: The folder where symlinks or downloaded files will be placed
-- `categories`: An array of categories to organize downloads (usually matches your Arr applications)
-
-#### Advanced Settings
-
-- `refresh_interval`: How often (in seconds) to refresh the Arrs Monitored Downloads (default: 5)
-- `max_downloads`: The maximum number of concurrent downloads. This is only for downloading real files(Not symlinks). If you set this to 0, it will download all files at once. This is not recommended for most users.(default: 5)
-- `skip_pre_cache`: This option disables the process of pre-caching files. This caches a small portion of the file to speed up your *arrs import process. 
-
-#### Categories
-Categories help organize your downloads and match them to specific Arr applications. Typically, you'll want to configure categories that match your Sonarr, Radarr, or other Arr applications:
-
-```json
-"categories": ["sonarr", "radarr", "lidarr", "readarr"]
-```
-
-When setting up your Arr applications to connect to Decypharr, you'll specify these same category names.
-
-#### Download Folder
-
-The `download_folder` setting specifies where Decypharr will place downloaded files or create symlinks:
-
-```json
-"download_folder": "/mnt/symlinks/"
-```
-
-This folder should be:
-
-- Accessible to Decypharr
-- Accessible to your Arr applications
-- Have sufficient space if downloading files locally
-
-
-#### Refresh Interval
-The refresh_interval setting controls how often Decypharr checks for updates from your Arr applications:
-
-```json
-"refresh_interval": 5
-```
-
-
-This value is in seconds. Lower values provide more responsive updates but may increase CPU usage.

docs/docs/extras/config.full.json

@@ -1,88 +0,0 @@
-{
-  "debrids": [
-    {
-      "name": "realdebrid",
-      "api_key": "realdebrid_key",
-      "folder": "/mnt/remote/realdebrid/__all__/",
-      "download_api_keys": [],
-      "proxy": "",
-      "rate_limit": "250/minute",
-      "download_uncached": false,
-      "use_webdav": true,
-      "torrents_refresh_interval": "15s",
-      "folder_naming": "original_no_ext",
-      "auto_expire_links_after": "3d",
-      "rc_url": "http://your-ip-address:9990",
-      "rc_user": "your_rclone_rc_user",
-      "rc_pass": "your_rclone_rc_pass"
-    },
-    {
-      "name": "torbox",
-      "api_key": "torbox_api_key",
-      "folder": "/mnt/remote/torbox/torrents/",
-      "rate_limit": "250/minute",
-      "download_uncached": false,
-    },
-    {
-      "name": "debridlink",
-      "api_key": "debridlink_key",
-      "folder": "/mnt/remote/debridlink/torrents/",
-      "rate_limit": "250/minute",
-      "download_uncached": false,
-    },
-    {
-      "name": "alldebrid",
-      "api_key": "alldebrid_key",
-      "folder": "/mnt/remote/alldebrid/magnet/",
-      "rate_limit": "600/minute",
-      "download_uncached": false,
-    }
-  ],
-  "max_cache_size": 1000,
-  "qbittorrent": {
-    "port": "8282",
-    "download_folder": "/mnt/symlinks/",
-    "categories": ["sonarr", "radarr"],
-    "refresh_interval": 5,
-    "skip_pre_cache": false
-  },
-  "arrs": [
-    {
-      "name": "sonarr",
-      "host": "http://sonarr:8989",
-      "token": "arr_key",
-      "cleanup": true,
-      "skip_repair": true,
-      "download_uncached": false
-    },
-    {
-      "name": "radarr",
-      "host": "http://radarr:7878",
-      "token": "arr_key",
-      "cleanup": false,
-      "download_uncached": false
-    },
-    {
-      "name": "lidarr",
-      "host": "http://lidarr:8686",
-      "token": "arr_key",
-      "cleanup": false,
-      "skip_repair": true,
-      "download_uncached": false
-    }
-  ],
-  "repair": {
-    "enabled": false,
-    "interval": "12h",
-    "run_on_start": false,
-    "zurg_url": "",
-    "use_webdav": false,
-    "auto_process": false
-  },
-  "log_level": "info",
-  "min_file_size": "",
-  "max_file_size": "",
-  "allowed_file_types": [],
-  "use_auth": false,
-  "discord_webhook_url": "https://discord.com/api/webhooks/..."
-}

docs/docs/extras/rclone.conf

@@ -1,5 +0,0 @@
-[decypharr]
-type = webdav
-url = http://decypharr:8282/webdav/realdebrid
-vendor = other
-pacer_min_sleep = 0

docs/docs/features/index.md

@@ -25,8 +25,10 @@ The Decypharr user interface provides:
 
 Decypharr includes several advanced features that extend its capabilities:
 
-- [Repair Worker](repair-worker.md): Identifies and fixes issues with your media files
-- [WebDAV Server](webdav.md): Provides direct access to your Debrid files
+- [Repair Support](repair-worker.md): Identifies and fixes issues with your media files
+- WebDav Server: Provides direct access to your Debrid files
+- Mounting Support: Allows you to mount Debrid services using [rclone](https://rclone.org), making it easy to access your files directly from your system
+- Multiple Debrid Providers: Supports Real Debrid, Torbox, Debrid Link, and All Debrid, allowing you to choose the best service for your needs
 
 ## Supported Debrid Providers
 
@@ -36,5 +38,7 @@ Decypharr supports multiple Debrid providers:
 - Torbox
 - Debrid Link
 - All Debrid
+- Premiumize(Coming Soon)
+- Usenet(Coming Soon)
 
 Each provider can be configured separately, allowing you to use one or multiple services simultaneously.

docs/docs/features/repair-worker.md

@@ -15,27 +15,4 @@ The Repair Worker performs the following tasks:
 
 ## Configuration
 
-To enable and configure the Repair Worker, add the following to your `config.json`:
-
-```json
-"repair": {
-  "enabled": true,
-  "interval": "12h",
-  "use_webdav": false,
-  "zurg_url": "http://localhost:9999",
-  "auto_process": true
-}
-```
-
-### Configuration Options
-
-- `enabled`: Set to `true` to enable the Repair Worker.
-- `interval`: The time interval for the Repair Worker to run (e.g., `12h`, `1d`).
-- `use_webdav`: If set to `true`, the Repair Worker will use WebDAV for file operations.
-- `zurg_url`: The URL for the Zurg service (if using).
-- `auto_process`: If set to `true`, the Repair Worker will automatically process files that it finds issues with.
-
-
-### Performance Tips
-- For users of the WebDAV server, enable `use_webdav` for exponentially faster repair processes
-- If using Zurg, set the `zurg_url` parameter to greatly improve repair speed
+You can enable and configure the Repair Worker in the Decypharr settings. It can be set to run at regular intervals, such as every 12 hours or daily.

docs/docs/features/webdav.md

@@ -1,74 +0,0 @@
-# WebDAV Server
-
-![WebDAV Server](../images/webdav.png)
-
-Decypharr includes a built-in WebDAV server that provides direct access to your Debrid files, making them easily accessible to media players and other applications.
-
-
-## Overview
-
-While most Debrid providers have their own WebDAV servers, Decypharr's implementation offers faster access and additional features.
-
-## Accessing the WebDAV Server
-
-- URL: `http://localhost:8282/webdav` or `http://<your-server-ip>:8282/webdav`
-
-## Configuration
-
-You can configure WebDAV settings either globally or per-Debrid provider in your `config.json`:
-
-```json
-"webdav": {
-  "torrents_refresh_interval": "15s",
-  "download_links_refresh_interval": "40m",
-  "folder_naming": "original_no_ext",
-  "auto_expire_links_after": "3d",
-  "rc_url": "http://localhost:5572",
-  "rc_user": "username",
-  "rc_pass": "password",
-  "serve_from_rclone": false,
-  "directories": {
-      "Newly Added": {
-        "filters": {
-          "exclude": "9-1-1",
-          "last_added": "20h"
-        }
-      }
-  }
-}
-```
-
-### Configuration Options
-
-- `torrents_refresh_interval`: Interval for refreshing torrent data (e.g., `15s`, `1m`, `1h`).
-- `download_links_refresh_interval`: Interval for refreshing download links (e.g., `40m`, `1h`).
-- `workers`: Number of concurrent workers for processing requests.
-- folder_naming: Naming convention for folders:
-  - `original_no_ext`: Original file name without extension
-  - `original`: Original file name with extension
-  - `filename`: Torrent filename
-  - `filename_no_ext`: Torrent filename without extension
-  - `id`: Torrent ID
-- `auto_expire_links_after`: Time after which download links will expire (e.g., `3d`, `1w`).
-- `rc_url`, `rc_user`, `rc_pass`: Rclone RC configuration for VFS refreshes
-- `directories`: A map of virtual folders to serve via the WebDAV server. The key is the virtual folder name, and the values are a map of filters and their values.
-- `serve_from_rclone`: Whether to serve files directly from Rclone (disabled by default).
-
-### Using with Media Players
-The WebDAV server works well with media players like:
-
-- Infuse
-- VidHub
-- Plex, Emby, Jellyfin (with rclone, Check [this guide](../guides/rclone.md))
-- Kodi
-
-### Mounting with Rclone
-You can mount the WebDAV server locally using Rclone. Example configuration:
-
-```conf
-[decypharr]
-type = webdav
-url = http://localhost:8282/webdav/realdebrid
-vendor = other
-```
-For a complete Rclone configuration example, see our [sample rclone.conf](../extras/rclone.conf).

docs/docs/guides/downloading.md

@@ -2,21 +2,25 @@
 
 While Decypharr provides a Qbittorent API for integration with media management applications, it also allows you to manually download torrents directly through its interface. This guide will walk you through the process of downloading torrents using Decypharr.
 
-- You can either use the Decypharr UI to add torrents manually or use its API to automate the process.
+- You can either use the Decypharr UI to add torrents manually or use its [API](../api.md) to automate the process.
 
 ## Manual Downloading
 
 ![Downloading UI](../images/download.png)
 To manually download a torrent using Decypharr, follow these steps:
-1. **Access the Download Page**: Navigate to the "Download" section in the Decypharr UI.
+1. Navigate to the "Download" section in the Decypharr UI.
 2. You can either upload torrent file(s) or paste magnet links directly into the input fields
 3. Select the action(defaults to Symlink)
-5. Add any additional options, such as:
+
+4. Add any additional options, such as:
    - *Download Folder*: Specify the folder where the downloaded files will be saved.
    - *Arr Category*: Choose the category for the download, which helps in organizing files in your media management applications.
+   - **Post Download Action**: Select what to do after the download completes:
+     - **Create Symlink**: Create a symlink to the downloaded files in the mount folder(default)
+     - **Download**: Download the file directly.
+     - **No Action**: Do nothing after the download completes.
    - **Debrid Provider**: Choose which Debrid service to use for the download(if you have multiple)
-   - **File Size Limits**: Set minimum and maximum file size limits if needed.
-   - **Allowed File Types**: Specify which file types are allowed for download.
+   - **Download Uncached**: If enabled, Decypharr will attempt to download uncached files from the Debrid service.
 
 Note:
 - If you use an arr category, your download will go into **{download_folder}/{arr}**

docs/docs/guides/index.md

@@ -1,5 +1,4 @@
 # Guides for setting up Decypharr
 
-
-- [Setting up with Rclone](rclone.md)
-- [Manual Downloading with Decypharr](downloading.md)
+- [Manual Downloading with Decypharr](downloading.md)
+- [Internal Mounting](internal-mounting.md)

docs/docs/guides/internal-mounting.md

@@ -0,0 +1,81 @@
+# Internal Mounting
+
+This guide explains how to use Decypharr's internal mounting feature to eliminate the need for external rclone setup.
+
+## Overview
+
+![Decypharr Internal Mounting](../images/settings/rclone.png)
+
+Instead of requiring users to install and configure rclone separately, Decypharr can now mount your WebDAV endpoints internally using rclone as a library dependency. This provides a seamless experience where files appear as regular filesystem paths without any external dependencies.
+
+## Prerequisites
+
+- **Docker users**: FUSE support may need to be enabled in the container depending on your Docker setup
+- **macOS users**: May need [macFUSE](https://osxfuse.github.io/) installed for mounting functionality
+- **Linux users**: FUSE should be available by default on most distributions
+- **Windows users**: Mounting functionality may be limited
+
+### Configuration Options
+
+You can set the options in the Web UI or directly in the configuration file:
+
+#### Note:
+Check the Rclone documentation for more details on the available options: [Rclone Mount Options](https://rclone.org/commands/rclone_mount/).
+
+## How It Works
+
+1. **WebDAV Server**: Decypharr starts its internal WebDAV server for enabled providers
+2. **Internal Mount**: Rclone is used internally to mount the WebDAV endpoint to a local filesystem path
+3. **File Access**: Your applications can access files using regular filesystem paths like `/mnt/decypharr/realdebrid/__all__/MyMovie/`
+
+## Benefits
+
+- **Automatic Setup**: Mounting is handled automatically by Decypharr using internal rclone rcd
+- **Filesystem Access**: Files appear as regular directories and files
+- **Seamless Integration**: Works with existing media servers without changes
+
+## Docker Compose
+
+```yaml
+version: '3.8'
+services:
+  decypharr:
+    image: sirrobot01/decypharr:latest
+    container_name: decypharr
+    ports:
+      - "8282:8282"
+    volumes:
+      - ./config:/config
+      - /mnt:/mnt:rshared  # Important: use 'rshared' for mount propagation
+    devices:
+      - /dev/fuse:/dev/fuse:rwm
+    cap_add:
+      - SYS_ADMIN
+    environment:
+      - UMASK=002
+```
+
+**Important Docker Notes:**
+- Mount volumes with `:rshared` to allow mount propagation
+- Include `/dev/fuse` device for FUSE mounting
+
+## Troubleshooting
+
+### Mount Failures
+
+If mounting fails, check:
+
+1. **FUSE Installation**: 
+   - **macOS**: Install macFUSE from https://osxfuse.github.io/
+   - **Linux**: Install fuse package (`apt install fuse` or `yum install fuse`)
+   - **Docker**: Fuse is already included in the container, but ensure the host supports it
+2. **Permissions**: Ensure the application has sufficient privileges
+
+### No Mount Methods Available
+
+If you see "no mount method available" errors:
+
+1. **Check Platform Support**: Some platforms have limited FUSE support
+2. **Install Dependencies**: Ensure FUSE libraries are installed
+3. **Use WebDAV Directly**: Access files via `http://localhost:8282/webdav/provider/`
+4. **External Mounting**: Use OS-native WebDAV mounting as fallback

docs/docs/guides/rclone.md

@@ -1,152 +0,0 @@
-# Setting up Decypharr with Rclone
-
-This guide will help you set up Decypharr with Rclone, allowing you to use your Debrid providers as a remote storage solution.
-
-#### Rclone
-Make sure you have Rclone installed and configured on your system. You can follow the [Rclone installation guide](https://rclone.org/install/) for instructions.
-
-It's recommended to use a docker version of Rclone, as it provides a consistent environment across different platforms. 
-
-
-### Steps
-
-We'll be using docker compose to set up Rclone and Decypharr together.
-
-#### Note
-This guide assumes you have a basic understanding of Docker and Docker Compose. If you're new to Docker, consider checking out the [Docker documentation](https://docs.docker.com/get-started/) for more information.
-
-Also, ensure you have Docker and Docker Compose installed on your system. You can find installation instructions in the [Docker documentation](https://docs.docker.com/get-docker/) and [Docker Compose documentation](https://docs.docker.com/compose/install/).
-
-
-Create a directory for your Decypharr and Rclone setup:
-```bash
-mkdir -p /opt/decypharr
-mkdir -p /opt/rclone
-mkdir -p /mnt/remote/realdebrid
-
-# Set permissions
-chown -R $USER:$USER /opt/decypharr
-chown -R $USER:$USER /opt/rclone
-chown -R $USER:$USER /mnt/remote/realdebrid
-```
-
-Create a `rclone.conf` file in `/opt/rclone/` with your Rclone configuration. 
-
-```conf
-[decypharr]
-type = webdav
-url = http://your-ip-or-domain:8282/webdav/realdebrid
-vendor = other
-pacer_min_sleep = 0
-```
-
-Create a `config.json` file in `/opt/decypharr/` with your Decypharr configuration. 
-
-```json
-{
-  "debrids": [
-    {
-      "name": "realdebrid",
-      "api_key": "realdebrid_key",
-      "folder": "/mnt/remote/realdebrid/__all__/",
-      "rate_limit": "250/minute",
-      "use_webdav": true,
-      "rc_url": "rclone:5572"
-    }
-  ],
-  "qbittorrent": {
-    "download_folder": "data/media/symlinks/",
-    "refresh_interval": 10
-  }
-}
-
-```
-
-### Docker Compose Setup
-
-- Check your current user and group IDs by running `id -u` and `id -g` in your terminal. You can use these values to set the `PUID` and `PGID` environment variables in the Docker Compose file.
-- You should also set `user` to your user ID and group ID in the Docker Compose file to ensure proper file permissions.
-
-Create a `docker-compose.yml` file with the following content:
-
-```yaml
-services:
-  decypharr:
-    image: cy01/blackhole:latest
-    container_name: decypharr
-    user: "${PUID:-1000}:${PGID:-1000}"
-    volumes:
-      - /mnt/:/mnt:rslave
-      - /opt/decypharr/:/app
-    environment:
-      - UMASK=002
-      - PUID=1000 # Replace with your user ID
-      - PGID=1000 # Replace with your group ID
-    ports:
-      - "8282:8282/tcp"
-    restart: unless-stopped
-  
-  rclone:
-    image: rclone/rclone:latest
-    container_name: rclone
-    restart: unless-stopped
-    environment:
-      TZ: UTC
-    ports:
-     - 5572:5572
-    volumes:
-      - /mnt/remote/realdebrid:/data:rshared
-      - /opt/rclone/rclone.conf:/config/rclone/rclone.conf
-    cap_add:
-      - SYS_ADMIN
-    security_opt:
-      - apparmor:unconfined
-    devices:
-      - /dev/fuse:/dev/fuse:rwm
-    depends_on:
-      decypharr:
-        condition: service_healthy
-        restart: true
-    command: "mount decypharr: /data --allow-non-empty --allow-other --dir-cache-time 10s --rc --rc-addr :5572 --rc-no-auth"
-```
-
-#### Docker Notes
-
-- Ensure that the `/mnt/` directory is mounted correctly to access your media files.
-- You can check your current user and group IDs and UMASK by running `id -a` and `umask` commands in your terminal.
-- You can adjust the `PUID` and `PGID` environment variables to match your user and group IDs for proper file permissions.
-- Also adding `--uid=$YOUR_PUID --gid=$YOUR_PGID` to the `rclone mount` command can help with permissions.
-- The `UMASK` environment variable can be set to control file permissions created by Decypharr.
-
-Start the containers:
-```bash
-docker-compose up -d
-```
-
-Access the Decypharr web interface at `http://your-ip-address:8282` and configure your settings as needed.
-
-- Access your webdav server at `http://your-ip-address:8282/webdav` to see your files.
-- You should be able to see your files in the `/mnt/remote/realdebrid/__all__/` directory.
-- You can now use your Debrid provider as a remote storage solution with Rclone and Decypharr.
-- You can also use the Rclone mount command to mount your Debrid provider locally. For example:
-
-
-### Notes
-
-- Make sure to replace `your-ip-address` with the actual IP address of your server.
-- You can use multiple Debrid providers by adding them to the `debrids` array in the `config.json` file.
-
-For each provider, you'll need a different rclone. OR you can change your `rclone.conf`
-
-
-```apache
-[decypharr]
-type = webdav
-url = http://your-ip-or-domain:8282/webdav/
-vendor = other
-pacer_min_sleep = 0
-```
-
-You'll still be able to access the directories via `/mnt/remote/realdebrid, /mnt/remote/alldebrid` etc
-
-

docs/docs/index.md

@@ -1,20 +1,19 @@
 # Decypharr
-
-![Decypharr UI](images/main.png)
+![Decypharr UI - Light Mode](images/main-light.png){: .light-mode-image}
+![Decypharr UI - Dark Mode](images/main.png){: .dark-mode-image}
 
 **Decypharr** is an implementation of QbitTorrent with **Multiple Debrid service support**, written in Go.
 
 ## What is Decypharr?
 
-TLDR; Decypharr is a self-hosted, open-source torrent client that integrates with multiple Debrid services. It provides a user-friendly interface for managing torrents and supports popular media management applications like Sonarr and Radarr.
+**TLDR**; Decypharr is a self-hosted, open-source download client that integrates with multiple Debrid services. It provides a user-friendly interface for managing files and supports popular media management applications like Sonarr and Radarr.
 
 
 ## Key Features
 
 - Mock Qbittorent API that supports Sonarr, Radarr, Lidarr, and other Arr applications
-- Full-fledged UI for managing torrents
 - Multiple Debrid providers support
-- WebDAV server support for each Debrid provider
+- WebDAV server support for each Debrid provider with an optional mounting feature(using [rclone](https://rclone.org))
 - Repair Worker for missing files, symlinks etc
 
 ## Supported Debrid Providers

docs/docs/installation.md

@@ -18,7 +18,6 @@ You can use either Docker Hub or GitHub Container Registry to pull the image:
 - `latest`: The latest stable release
 - `beta`: The latest beta release
 - `vX.Y.Z`: A specific version (e.g., `v0.1.0`)
-- `nightly`: The latest nightly build (usually unstable)
 - `experimental`: The latest experimental build (highly unstable)
 
 ### Docker CLI Setup
@@ -31,12 +30,13 @@ Run the Docker container:
 ```bash
 docker run -d \
   --name decypharr \
+  --restart unless-stopped \
   -p 8282:8282 \
-  -v /mnt/:/mnt \
+  -v /mnt/:/mnt:rshared \
   -v ./config/:/app \
-  -e PUID=1000 \
-  -e PGID=1000 \
-  -e UMASK=002 \
+  --device /dev/fuse:/dev/fuse:rwm \
+  --cap-add SYS_ADMIN \
+  --security-opt apparmor:unconfined \
   cy01/blackhole:latest
 ```
 
@@ -52,10 +52,15 @@ services:
     ports:
       - "8282:8282"
     volumes:
-      - /mnt/:/mnt:rslave # Mount your media directory
-      - ./config/:/app # config.json must be in this directory
-      - QBIT_PORT=8282 # qBittorrent Port (optional)
+      - /mnt/:/mnt:rshared
+      - ./config/:/app
     restart: unless-stopped
+    devices:
+      - /dev/fuse:/dev/fuse:rwm
+    cap_add:
+      - SYS_ADMIN
+    security_opt:
+      - apparmor:unconfined
 ```
 
 Run the Docker Compose setup:
@@ -67,7 +72,7 @@ docker-compose up -d
 ## Binary Installation
 If you prefer not to use Docker, you can download and run the binary directly.
 
-Download your OS-specific release from the [releases page](https://github.com/sirrobot01/decypharr/releases).
+Download your OS-specific release from the [release page](https://github.com/sirrobot01/decypharr/releases).
 Create a configuration file (see Configuration)
 Run the binary:
 
@@ -76,44 +81,15 @@ chmod +x decypharr
 ./decypharr --config /path/to/config/folder
 ```
 
-The config directory should contain your config.json file.
-
-## config.json
-
-The `config.json` file is where you configure Decypharr. You can find a sample configuration file in the `configs` directory of the repository.
-
-You can also configure Decypharr through the web interface, but it's recommended to start with the config file for initial setup.
-
-```json
-{
-  "debrids": [
-    {
-      "name": "realdebrid",
-      "api_key": "your_api_key_here",
-      "folder": "/mnt/remote/realdebrid/__all__/",
-      "use_webdav": true
-    }
-  ],
-  "qbittorrent": {
-    "download_folder": "/mnt/symlinks/",
-    "categories": ["sonarr", "radarr"]
-  },
-  "use_auth": false,
-  "log_level": "info",
-  "port": "8282"
-}
-```
-
 ### Notes for Docker Users
 
 - Ensure that the `/mnt/` directory is mounted correctly to access your media files.
-- The `./config/` directory should contain your `config.json` file.
 - You can adjust the `PUID` and `PGID` environment variables to match your user and group IDs for proper file permissions.
 - The `UMASK` environment variable can be set to control file permissions created by Decypharr.
 
 ##### Health Checks
 - Health checks are disabled by default. You can enable them by adding a `healthcheck` section in your `docker-compose.yml` file.
-- Health checks checks for availability of several parts of the application;
+- Health checks the availability of several parts of the application;
     - The main web interface
     - The qBittorrent API
     - The WebDAV server (if enabled). You should disable health checks for the initial indexes as they can take a long time to complete.
@@ -125,7 +101,7 @@ services:
     ...
     healthcheck:
       test: ["CMD", "/usr/bin/healthcheck", "--config", "/app/"]
-      interval: 5s
+      interval: 10s
       timeout: 10s
       retries: 3
 ```

docs/docs/styles/styles.css

@@ -0,0 +1,24 @@
+/* Light mode image - visible by default */
+.light-mode-image {
+    display: block;
+}
+
+/* Dark mode image - hidden by default */
+.dark-mode-image {
+    display: none;
+}
+
+/* When dark theme (slate) is active */
+[data-md-color-scheme="slate"] .light-mode-image {
+    display: none;
+}
+
+[data-md-color-scheme="slate"] .dark-mode-image {
+    display: block;
+}
+
+/* Optional: smooth transition */
+.light-mode-image,
+.dark-mode-image {
+    transition: opacity 0.2s ease-in-out;
+}

docs/docs/usage.md

@@ -2,15 +2,35 @@
 
 This guide will help you get started with Decypharr after installation.
 
-## Basic Setup
+After installing Decypharr, you can access the web interface at `http://localhost:8282` or your configured host/port.
 
-1. Create your `config.json` file (see [Configuration](configuration/index.md) for details)
-2. Start the Decypharr service using Docker or binary
-3. Access the UI at `http://localhost:8282` (or your configured host/port)
-4. Connect your Arr applications (Sonarr, Radarr, etc.)
+### Initial Configuration
+If it's the first time you're accessing the UI, you will be prompted to set up your credentials. You can skip this step if you don't want to enable authentication. If you choose to set up credentials, enter a username and password confirm password, then click **Save**. You will be redirected to the settings page.
 
-## Connecting to Sonarr/Radarr
+### Debrid Configuration
+   ![Decypharr Settings](images/settings/debrid.png)
+- Click on **Debrid** in the tab
+- Add your desired Debrid services (Real Debrid, Torbox, Debrid Link, All Debrid) by entering the required API keys or tokens.
+- Set the **Mount/Rclone Folder**. This is where decypharr will look for added torrents to symlink them to your media library.
+   - If you're using internal webdav, do not forget the `/__all__` suffix
+- Enable WebDAV
+- You can leave the remaining settings as default for now.
 
+### Qbittorent Configuration
+   ![Qbittorrent Settings](images/settings/qbittorent.png)
+
+- Click on **Qbittorrent** in the tab
+- Set the **Download Folder** to where you want Decypharr to save downloaded files. These files will be symlinked to the mount folder you configured earlier.
+You can leave the remaining settings as default for now.
+
+### Arrs Configuration
+
+You can skip Arr configuration for now. Decypharr will auto-add them when you connect to Sonarr or Radarr later.
+
+
+#### Connecting to Sonarr/Radarr
+
+![Sonarr/Radarr Setup](images/settings/arr.png)
 To connect Decypharr to your Sonarr or Radarr instance:
 
 1. In Sonarr/Radarr, go to **Settings → Download Client → Add Client → qBittorrent**
@@ -18,22 +38,38 @@ To connect Decypharr to your Sonarr or Radarr instance:
    - **Host**: `localhost` (or the IP of your Decypharr server)
    - **Port**: `8282` (or your configured qBittorrent port)
    - **Username**: `http://sonarr:8989` (your Arr host with http/https)
-   - **Password**: `sonarr_token` (your Arr API token)
+   - **Password**: `sonarr_token` (your Arr API token, you can get this from Sonarr/Radarr settings)
    - **Category**: e.g., `sonarr`, `radarr` (match what you configured in Decypharr)
    - **Use SSL**: `No`
    - **Sequential Download**: `No` or `Yes` (if you want to download torrents locally instead of symlink)
 3. Click **Test** to verify the connection
 4. Click **Save** to add the download client
 
-![Sonarr/Radarr Setup](images/sonarr-setup.png)
 
-## Using the UI
+### Rclone Configuration
 
-The Decypharr UI provides a familiar qBittorrent-like interface with additional features for Debrid services:
+![Rclone Settings](images/settings/rclone.png)
 
-- Add new torrents
-- Monitor download status
-- Access WebDAV functionality
-- Edit your configuration
+If you want Decypharr to automatically mount WebDAV folders using Rclone, you need to set up Rclone first:
 
-Access the UI at `http://localhost:8282` or your configured host/port.
+If you're using Docker, the rclone binary is already included in the container. If you're running Decypharr directly, make sure Rclone is installed on your system.
+
+Enable **Mount**
+  - **Global Mount Path**: Set the path where you want to mount the WebDAV folders (e.g., `/mnt/remote`). Decypharr will create subfolders for each Debrid service. For example, if you set `/mnt/remote`, it will create `/mnt/remote/realdebrid`, `/mnt/remote/torbox`, etc. This should be the grandparent of your mount folder set in the Debrid configuration.
+  - **User ID**: Set the user ID for Rclone mounts (default is gotten from the environment variable `PUID`).
+  - **Group ID**: Set the group ID for Rclone mounts (default is gotten from the environment variable `PGID`).
+  - **Buffer Size**: Set the buffer size for Rclone mounts.
+
+You should set other options based on your use case. If you don't know what you're doing, leave it as defaults. Checkout the [Rclone documentation](https://rclone.org/commands/rclone_mount/) for more details.
+
+### Repair Configuration
+
+![Repair Settings](images/settings/repair.png)
+
+Repair is an optional feature that allows you to fix missing files, symlinks, and other issues in your media library.
+- Click on **Repair** in the tab
+- Enable **Scheduled Repair** if you want Decypharr to automatically check for missing files at your specified interval.
+- Set the **Repair Interval** to how often you want Decypharr to check for missing files (e.g 1h, 6h, 12h, 24h, you can also use cron syntax like `0 0 * * *` for daily checks).
+- Enable **WebDav**(You shoukd enable this, if you enabled WebDav in Debrid configuration)
+- **Auto Process**: Enable this if you want Decypharr to automatically process repair jobs when they are done. This could delete the original files, symlinks, be wary!!!
+- **Worker Threads**: Set the number of worker threads for processing repair jobs. More threads can speed up the process but may consume more resources.

docs/mkdocs.yml

@@ -6,6 +6,9 @@ repo_name: sirrobot01/decypharr
 edit_uri: blob/main/docs
 
 
+extra_css:
+  - styles/styles.css
+
 theme:
   name: material
   logo: images/logo.png
@@ -59,22 +62,17 @@ nav:
   - Home: index.md
   - Installation: installation.md
   - Usage: usage.md
-  - Configuration:
-      - Overview: configuration/index.md
-      - General: configuration/general.md
-      - Debrid Providers: configuration/debrid.md
-      - qBittorrent: configuration/qbittorrent.md
-      - Arr Integration: configuration/arrs.md
+  - API Documentation: api.md
   - Features:
       - Overview: features/index.md
       - Repair Worker: features/repair-worker.md
-      - WebDAV: features/webdav.md
   - Guides:
       - Overview: guides/index.md
-      - Setting Up with Rclone: guides/rclone.md
-  - Changelog: changelog.md
+      - Manual Downloading: guides/downloading.md
+      - Internal Mounting: guides/internal-mounting.md
 
 
 plugins:
   - search
-  - tags
+  - tags
+  - swagger-ui-tag

docs/requirements.txt

@@ -0,0 +1,3 @@
+mkdocs==1.6.1
+mkdocs-material==9.6.16
+mkdocs-swagger-ui-tag==0.6.10

go.mod

@@ -7,7 +7,7 @@ toolchain go1.24.3
 require (
 	github.com/anacrolix/torrent v1.55.0
 	github.com/cavaliergopher/grab/v3 v3.0.1
-	github.com/go-chi/chi/v5 v5.1.0
+	github.com/go-chi/chi/v5 v5.2.2
 	github.com/go-co-op/gocron/v2 v2.16.1
 	github.com/google/uuid v1.6.0
 	github.com/gorilla/sessions v1.4.0
@@ -15,9 +15,9 @@ require (
 	github.com/rs/zerolog v1.33.0
 	github.com/stanNthe5/stringbuf v0.0.3
 	go.uber.org/ratelimit v0.3.1
-	golang.org/x/crypto v0.33.0
-	golang.org/x/net v0.35.0
-	golang.org/x/sync v0.12.0
+	golang.org/x/crypto v0.39.0
+	golang.org/x/net v0.41.0
+	golang.org/x/sync v0.15.0
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1
 )
 
@@ -27,13 +27,13 @@ require (
 	github.com/benbjohnson/clock v1.3.0 // indirect
 	github.com/bradfitz/iter v0.0.0-20191230175014-e8f45d346db8 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
-	github.com/google/go-cmp v0.6.0 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
 	github.com/gorilla/securecookie v1.1.2 // indirect
 	github.com/huandu/xstrings v1.3.2 // indirect
 	github.com/jonboulle/clockwork v0.5.0 // indirect
-	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
-	github.com/rogpeppe/go-internal v1.13.1 // indirect
-	golang.org/x/sys v0.30.0 // indirect
+	github.com/rogpeppe/go-internal v1.14.1 // indirect
+	golang.org/x/sys v0.33.0 // indirect
 )

go.sum

@@ -70,8 +70,8 @@ github.com/glycerine/go-unsnap-stream v0.0.0-20190901134440-81cf024a9e0a/go.mod
 github.com/glycerine/goconvey v0.0.0-20180728074245-46e3a41ad493/go.mod h1:Ogl1Tioa0aV7gstGFO7KhffUsb9M4ydbEbbxpcEDc24=
 github.com/glycerine/goconvey v0.0.0-20190315024820-982ee783a72e/go.mod h1:Ogl1Tioa0aV7gstGFO7KhffUsb9M4ydbEbbxpcEDc24=
 github.com/glycerine/goconvey v0.0.0-20190410193231-58a59202ab31/go.mod h1:Ogl1Tioa0aV7gstGFO7KhffUsb9M4ydbEbbxpcEDc24=
-github.com/go-chi/chi/v5 v5.1.0 h1:acVI1TYaD+hhedDJ3r54HyA6sExp3HfXq7QWEEY/xMw=
-github.com/go-chi/chi/v5 v5.1.0/go.mod h1:DslCQbL2OYiznFReuXYUmQ2hGd1aDpCnlMNITLSKoi8=
+github.com/go-chi/chi/v5 v5.2.2 h1:CMwsvRVTbXVytCk1Wd72Zy1LAsAh9GxMmSNWLHCG618=
+github.com/go-chi/chi/v5 v5.2.2/go.mod h1:L2yAIGWB3H+phAw1NxKwWM+7eUH/lU8pOMm5hHcoops=
 github.com/go-co-op/gocron/v2 v2.16.1 h1:ux/5zxVRveCaCuTtNI3DiOk581KC1KpJbpJFYUEVYwo=
 github.com/go-co-op/gocron/v2 v2.16.1/go.mod h1:opexeOFy5BplhsKdA7bzY9zeYih8I8/WNJ4arTIFPVc=
 github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
@@ -102,8 +102,8 @@ github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5a
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
 github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
@@ -143,8 +143,9 @@ github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
 github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
+github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
+github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
 github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
@@ -188,8 +189,8 @@ github.com/prometheus/procfs v0.0.11/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4
 github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
 github.com/robfig/cron/v3 v3.0.1 h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs=
 github.com/robfig/cron/v3 v3.0.1/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro=
-github.com/rogpeppe/go-internal v1.13.1 h1:KvO1DLK/DRN07sQ1LQKScxyZJuNnedQ5/wKSR38lUII=
-github.com/rogpeppe/go-internal v1.13.1/go.mod h1:uMEvuHeurkdAXX61udpOXGD/AzZDWNMNyH2VO9fmH0o=
+github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
+github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
 github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg=
 github.com/rs/zerolog v1.33.0 h1:1cU2KZkvPxNyfgEmhHAz/1A9Bz+llsdYzklWFzgp0r8=
 github.com/rs/zerolog v1.33.0/go.mod h1:/7mN4D5sKwJLZQ2b/znpjC3/GQWY/xaDXUM0kKWRHss=
@@ -226,8 +227,8 @@ go.uber.org/ratelimit v0.3.1 h1:K4qVE+byfv/B3tC+4nYWP7v/6SimcO7HzHekoMNBma0=
 go.uber.org/ratelimit v0.3.1/go.mod h1:6euWsTB6U/Nb3X++xEUXA8ciPJvr19Q/0h1+oDcJhRk=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
-golang.org/x/crypto v0.33.0 h1:IOBPskki6Lysi0lo9qQvbxiQ+FvsCC/YWOecCHAixus=
-golang.org/x/crypto v0.33.0/go.mod h1:bVdXmD7IV/4GdElGPozy6U7lWdRXA4qyRVGJV57uQ5M=
+golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
+golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
 golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
@@ -243,8 +244,8 @@ golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73r
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.35.0 h1:T5GQRQb2y08kTAByq9L4/bz8cipCdA8FbRTXewonqY8=
-golang.org/x/net v0.35.0/go.mod h1:EglIi67kWsHKlRzzVMUD93VMSWGFOMSZgxFjparz1Qk=
+golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
+golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -252,8 +253,8 @@ golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.12.0 h1:MHc5BpPuC30uJk597Ri8TV3CNZcTLu6B6z4lJy+g6Jw=
-golang.org/x/sync v0.12.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
+golang.org/x/sync v0.15.0 h1:KWH3jNZsfyT6xfAfKiz6MRNmd46ByHDYaZ7KSkCtdW8=
+golang.org/x/sync v0.15.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -268,8 +269,8 @@ golang.org/x/sys v0.0.0-20200413165638-669c56c373c4/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
-golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.33.0 h1:q3i8TbbEz+JRD9ywIRlyRAQbM0qF7hu24q3teo2hbuw=
+golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/tools v0.0.0-20180828015842-6cd1fcedba52/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=

internal/config/config.go

@@ -2,6 +2,8 @@ package config
 
 import (
 	"cmp"
+	"crypto/rand"
+	"encoding/hex"
 	"encoding/json"
 	"errors"
 	"fmt"
@@ -12,6 +14,13 @@ import (
 	"sync"
 )
 
+type RepairStrategy string
+
+const (
+	RepairStrategyPerFile    RepairStrategy = "per_file"
+	RepairStrategyPerTorrent RepairStrategy = "per_torrent"
+)
+
 var (
 	instance   *Config
 	once       sync.Once
@@ -32,6 +41,7 @@ type Debrid struct {
 	UnpackRar         bool     `json:"unpack_rar,omitempty"`
 	AddSamples        bool     `json:"add_samples,omitempty"`
 	MinimumFreeSlot   int      `json:"minimum_free_slot,omitempty"` // Minimum active pots to use this debrid
+	Limit             int      `json:"limit,omitempty"`             // Maximum number of total torrents
 
 	UseWebDav bool `json:"use_webdav,omitempty"`
 	WebDav
@@ -60,18 +70,53 @@ type Arr struct {
 }
 
 type Repair struct {
-	Enabled     bool   `json:"enabled,omitempty"`
-	Interval    string `json:"interval,omitempty"`
-	ZurgURL     string `json:"zurg_url,omitempty"`
-	AutoProcess bool   `json:"auto_process,omitempty"`
-	UseWebDav   bool   `json:"use_webdav,omitempty"`
-	Workers     int    `json:"workers,omitempty"`
-	ReInsert    bool   `json:"reinsert,omitempty"`
+	Enabled     bool           `json:"enabled,omitempty"`
+	Interval    string         `json:"interval,omitempty"`
+	ZurgURL     string         `json:"zurg_url,omitempty"`
+	AutoProcess bool           `json:"auto_process,omitempty"`
+	UseWebDav   bool           `json:"use_webdav,omitempty"`
+	Workers     int            `json:"workers,omitempty"`
+	ReInsert    bool           `json:"reinsert,omitempty"`
+	Strategy    RepairStrategy `json:"strategy,omitempty"`
 }
 
 type Auth struct {
 	Username string `json:"username,omitempty"`
 	Password string `json:"password,omitempty"`
+	APIToken string `json:"api_token,omitempty"`
+}
+
+type Rclone struct {
+	// Global mount folder where all providers will be mounted as subfolders
+	Enabled   bool   `json:"enabled,omitempty"`
+	MountPath string `json:"mount_path,omitempty"`
+
+	// Cache settings
+	CacheDir string `json:"cache_dir,omitempty"`
+
+	// VFS settings
+	VfsCacheMode          string `json:"vfs_cache_mode,omitempty"`            // off, minimal, writes, full
+	VfsCacheMaxAge        string `json:"vfs_cache_max_age,omitempty"`         // Maximum age of objects in the cache (default 1h)
+	VfsCacheMaxSize       string `json:"vfs_cache_max_size,omitempty"`        // Maximum size of the cache (default off)
+	VfsCachePollInterval  string `json:"vfs_cache_poll_interval,omitempty"`   // How often to poll for changes (default 1m)
+	VfsReadChunkSize      string `json:"vfs_read_chunk_size,omitempty"`       // Read chunk size (default 128M)
+	VfsReadChunkSizeLimit string `json:"vfs_read_chunk_size_limit,omitempty"` // Max chunk size (default off)
+	VfsReadAhead          string `json:"vfs_read_ahead,omitempty"`            // read ahead size
+	VfsPollInterval       string `json:"vfs_poll_interval,omitempty"`         // How often to rclone cleans the cache (default 1m)
+	BufferSize            string `json:"buffer_size,omitempty"`               // Buffer size for reading files (default 16M)
+
+	// File system settings
+	UID   uint32 `json:"uid,omitempty"` // User ID for mounted files
+	GID   uint32 `json:"gid,omitempty"` // Group ID for mounted files
+	Umask string `json:"umask,omitempty"`
+
+	// Timeout settings
+	AttrTimeout  string `json:"attr_timeout,omitempty"`   // Attribute cache timeout (default 1s)
+	DirCacheTime string `json:"dir_cache_time,omitempty"` // Directory cache time (default 5m)
+
+	// Performance settings
+	NoModTime  bool `json:"no_modtime,omitempty"`  // Don't read/write modification time
+	NoChecksum bool `json:"no_checksum,omitempty"` // Don't checksum files on upload
 }
 
 type Config struct {
@@ -86,6 +131,7 @@ type Config struct {
 	Arrs               []Arr       `json:"arrs,omitempty"`
 	Repair             Repair      `json:"repair,omitempty"`
 	WebDav             WebDav      `json:"webdav,omitempty"`
+	Rclone             Rclone      `json:"rclone,omitempty"`
 	AllowedExt         []string    `json:"allowed_file_types,omitempty"`
 	MinFileSize        string      `json:"min_file_size,omitempty"` // Minimum file size to download, 10MB, 1GB, etc
 	MaxFileSize        string      `json:"max_file_size,omitempty"` // Maximum file size to download (0 means no limit)
@@ -189,6 +235,15 @@ func ValidateConfig(config *Config) error {
 	return nil
 }
 
+// generateAPIToken creates a new random API token
+func generateAPIToken() (string, error) {
+	bytes := make([]byte, 32) // 256-bit token
+	if _, err := rand.Read(bytes); err != nil {
+		return "", err
+	}
+	return hex.EncodeToString(bytes), nil
+}
+
 func SetConfigPath(path string) {
 	configPath = path
 }
@@ -296,7 +351,7 @@ func (c *Config) updateDebrid(d Debrid) Debrid {
 	}
 
 	if d.TorrentsRefreshInterval == "" {
-		d.TorrentsRefreshInterval = cmp.Or(c.WebDav.TorrentsRefreshInterval, "15s") // 15 seconds
+		d.TorrentsRefreshInterval = cmp.Or(c.WebDav.TorrentsRefreshInterval, "45s") // 45 seconds
 	}
 	if d.WebDav.DownloadLinksRefreshInterval == "" {
 		d.DownloadLinksRefreshInterval = cmp.Or(c.WebDav.DownloadLinksRefreshInterval, "40m") // 40 minutes
@@ -352,8 +407,46 @@ func (c *Config) setDefaults() {
 		c.URLBase += "/"
 	}
 
+	// Set repair defaults
+	if c.Repair.Strategy == "" {
+		c.Repair.Strategy = RepairStrategyPerTorrent
+	}
+
+	// Rclone defaults
+	if c.Rclone.Enabled {
+		c.Rclone.VfsCacheMode = cmp.Or(c.Rclone.VfsCacheMode, "off")
+		if c.Rclone.UID == 0 {
+			c.Rclone.UID = uint32(os.Getuid())
+		}
+		if c.Rclone.GID == 0 {
+			if runtime.GOOS == "windows" {
+				// On Windows, we use the current user's SID as GID
+				c.Rclone.GID = uint32(os.Getuid()) // Windows does not have GID, using UID instead
+			} else {
+				c.Rclone.GID = uint32(os.Getgid())
+			}
+		}
+		if c.Rclone.VfsCacheMode != "off" {
+			c.Rclone.VfsCachePollInterval = cmp.Or(c.Rclone.VfsCachePollInterval, "1m") // Clean cache every minute
+		}
+		c.Rclone.DirCacheTime = cmp.Or(c.Rclone.DirCacheTime, "5m")
+	}
 	// Load the auth file
 	c.Auth = c.GetAuth()
+
+	// Generate API token if auth is enabled and no token exists
+	if c.UseAuth {
+		if c.Auth == nil {
+			c.Auth = &Auth{}
+		}
+		if c.Auth.APIToken == "" {
+			if token, err := generateAPIToken(); err == nil {
+				c.Auth.APIToken = token
+				// Save the updated auth config
+				_ = c.SaveAuth(c.Auth)
+			}
+		}
+	}
 }
 
 func (c *Config) Save() error {

internal/config/misc.go

@@ -24,7 +24,7 @@ func (c *Config) IsAllowedFile(filename string) bool {
 }
 
 func getDefaultExtensions() []string {
-	videoExts := strings.Split("webm,m4v,3gp,nsv,ty,strm,rm,rmvb,m3u,ifo,mov,qt,divx,xvid,bivx,nrg,pva,wmv,asf,asx,ogm,ogv,m2v,avi,bin,dat,dvr-ms,mpg,mpeg,mp4,avc,vp3,svq3,nuv,viv,dv,fli,flv,wpl,img,iso,vob,mkv,mk3d,ts,wtv,m2ts'", ",")
+	videoExts := strings.Split("webm,m4v,3gp,nsv,ty,strm,rm,rmvb,m3u,ifo,mov,qt,divx,xvid,bivx,nrg,pva,wmv,asf,asx,ogm,ogv,m2v,avi,bin,dat,dvr-ms,mpg,mpeg,mp4,avc,vp3,svq3,nuv,viv,dv,fli,flv,wpl,vob,mkv,mk3d,ts,wtv,m2ts", ",")
 	musicExts := strings.Split("MP3,WAV,FLAC,OGG,WMA,AIFF,ALAC,M4A,APE,AC3,DTS,M4P,MID,MIDI,MKA,MP2,MPA,RA,VOC,WV,AMR", ",")
 
 	// Combine both slices

internal/utils/regex.go

@@ -7,7 +7,7 @@ import (
 )
 
 var (
-	videoMatch  = "(?i)(\\.)(webm|m4v|3gp|nsv|ty|strm|rm|rmvb|m3u|ifo|mov|qt|divx|xvid|bivx|nrg|pva|wmv|asf|asx|ogm|ogv|m2v|avi|bin|dat|dvr-ms|mpg|mpeg|mp4|avc|vp3|svq3|nuv|viv|dv|fli|flv|wpl|img|iso|vob|mkv|mk3d|ts|wtv|m2ts)$"
+	videoMatch  = "(?i)(\\.)(webm|m4v|3gp|nsv|ty|strm|rm|rmvb|m3u|ifo|mov|qt|divx|xvid|bivx|nrg|pva|wmv|asf|asx|ogm|ogv|m2v|avi|bin|dat|dvr-ms|mpg|mpeg|mp4|avc|vp3|svq3|nuv|viv|dv|fli|flv|wpl|vob|mkv|mk3d|ts|wtv|m2ts)$"
 	musicMatch  = "(?i)(\\.)(mp2|mp3|m4a|m4b|m4p|ogg|oga|opus|wma|wav|wv|flac|ape|aif|aiff|aifc)$"
 	sampleMatch = `(?i)(^|[\s/\\])(sample|trailer|thumb|special|extras?)s?[-/]|(\((sample|trailer|thumb|special|extras?)s?\))|(-\s*(sample|trailer|thumb|special|extras?)s?)`
 )
@@ -51,7 +51,8 @@ func IsMediaFile(path string) bool {
 }
 
 func IsSampleFile(path string) bool {
-	if strings.HasSuffix(strings.ToLower(path), "sample.mkv") {
+	filename := filepath.Base(path)
+	if strings.HasSuffix(strings.ToLower(filename), "sample.mkv") {
 		return true
 	}
 	return RegexMatch(sampleRegex, path)

package.json

@@ -0,0 +1,19 @@
+{
+  "name": "decypharr",
+  "version": "1.0.0",
+  "description": "Media management tool",
+  "scripts": {
+    "build-css": "tailwindcss -i ./pkg/web/assets/styles.css -o ./pkg/web/assets/build/css/styles.css --minify",
+    "minify-js": "node scripts/minify-js.js",
+    "download-assets": "node scripts/download-assets.js",
+    "build": "npm run build-css && npm run minify-js",
+    "build-all": "npm run download-assets && npm run build",
+    "dev": "npm run build && air"
+  },
+  "devDependencies": {
+    "tailwindcss": "^3.4.0",
+    "daisyui": "^4.12.10",
+    "terser": "^5.24.0",
+    "clean-css": "^5.3.3"
+  }
+}

pkg/arr/arr.go

@@ -115,8 +115,10 @@ func (a *Arr) Validate() error {
 	if err != nil {
 		return err
 	}
-	if resp.StatusCode != http.StatusOK {
-		return fmt.Errorf("arr test failed: %s", resp.Status)
+	defer resp.Body.Close()
+	// If response is not 200 or 404(this is the case for Lidarr, etc), return an error
+	if resp.StatusCode != http.StatusOK && resp.StatusCode != http.StatusNotFound {
+		return fmt.Errorf("failed to validate arr %s: %s", a.Name, resp.Status)
 	}
 	return nil
 }

pkg/debrid/debrid.go

@@ -12,47 +12,66 @@ import (
 	"github.com/sirrobot01/decypharr/pkg/debrid/providers/debrid_link"
 	"github.com/sirrobot01/decypharr/pkg/debrid/providers/realdebrid"
 	"github.com/sirrobot01/decypharr/pkg/debrid/providers/torbox"
-	"github.com/sirrobot01/decypharr/pkg/debrid/store"
+	debridStore "github.com/sirrobot01/decypharr/pkg/debrid/store"
 	"github.com/sirrobot01/decypharr/pkg/debrid/types"
+	"github.com/sirrobot01/decypharr/pkg/rclone"
 	"sync"
 )
 
 type Debrid struct {
-	cache  *store.Cache // Could be nil if not using WebDAV
-	client types.Client // HTTP client for making requests to the debrid service
+	cache  *debridStore.Cache // Could be nil if not using WebDAV
+	client types.Client       // HTTP client for making requests to the debrid service
 }
 
 func (de *Debrid) Client() types.Client {
 	return de.client
 }
 
-func (de *Debrid) Cache() *store.Cache {
+func (de *Debrid) Cache() *debridStore.Cache {
 	return de.cache
 }
 
+func (de *Debrid) Reset() {
+	if de.cache != nil {
+		de.cache.Reset()
+	}
+}
+
 type Storage struct {
 	debrids  map[string]*Debrid
 	mu       sync.RWMutex
 	lastUsed string
 }
 
-func NewStorage() *Storage {
+func NewStorage(rcManager *rclone.Manager) *Storage {
 	cfg := config.Get()
 
 	_logger := logger.Default()
 
 	debrids := make(map[string]*Debrid)
 
+	bindAddress := cfg.BindAddress
+	if bindAddress == "" {
+		bindAddress = "localhost"
+	}
+	webdavUrl := fmt.Sprintf("http://%s:%s%s/webdav", bindAddress, cfg.Port, cfg.URLBase)
+
 	for _, dc := range cfg.Debrids {
 		client, err := createDebridClient(dc)
 		if err != nil {
 			_logger.Error().Err(err).Str("Debrid", dc.Name).Msg("failed to connect to debrid client")
 			continue
 		}
-		var cache *store.Cache
+		var (
+			cache   *debridStore.Cache
+			mounter *rclone.Mount
+		)
 		_log := client.Logger()
 		if dc.UseWebDav {
-			cache = store.NewDebridCache(dc, client)
+			if cfg.Rclone.Enabled && rcManager != nil {
+				mounter = rclone.NewMount(dc.Name, webdavUrl, rcManager)
+			}
+			cache = debridStore.NewDebridCache(dc, client, mounter)
 			_log.Info().Msg("Debrid Service started with WebDAV")
 		} else {
 			_log.Info().Msg("Debrid Service started")
@@ -102,8 +121,17 @@ func (d *Storage) Client(name string) types.Client {
 
 func (d *Storage) Reset() {
 	d.mu.Lock()
+	defer d.mu.Unlock()
+
+	// Reset all debrid clients and caches
+	for _, debrid := range d.debrids {
+		if debrid != nil {
+			debrid.Reset()
+		}
+	}
+
+	// Reinitialize the debrids map
 	d.debrids = make(map[string]*Debrid)
-	d.mu.Unlock()
 	d.lastUsed = ""
 }
 
@@ -119,10 +147,10 @@ func (d *Storage) Clients() map[string]types.Client {
 	return clientsCopy
 }
 
-func (d *Storage) Caches() map[string]*store.Cache {
+func (d *Storage) Caches() map[string]*debridStore.Cache {
 	d.mu.RLock()
 	defer d.mu.RUnlock()
-	cachesCopy := make(map[string]*store.Cache)
+	cachesCopy := make(map[string]*debridStore.Cache)
 	for name, debrid := range d.debrids {
 		if debrid != nil && debrid.cache != nil {
 			cachesCopy[name] = debrid.cache
@@ -193,7 +221,7 @@ func Process(ctx context.Context, store *Storage, selectedDebrid string, magnet
 		debridTorrent.DownloadUncached = false
 	}
 
-	for index, db := range clients {
+	for _, db := range clients {
 		_logger := db.Logger()
 		_logger.Info().
 			Str("Debrid", db.Name()).
@@ -214,7 +242,7 @@ func Process(ctx context.Context, store *Storage, selectedDebrid string, magnet
 		}
 		dbt.Arr = a
 		_logger.Info().Str("id", dbt.Id).Msgf("Torrent: %s submitted to %s", dbt.Name, db.Name())
-		store.lastUsed = index
+		store.lastUsed = db.Name()
 
 		torrent, err := db.CheckStatus(dbt)
 		if err != nil && torrent != nil && torrent.Id != "" {

pkg/debrid/providers/alldebrid/alldebrid.go

@@ -309,7 +309,7 @@ func (ad *AllDebrid) GetFileDownloadLinks(t *types.Torrent) error {
 				errCh <- err
 				return
 			}
-			if link != nil {
+			if link == nil {
 				errCh <- fmt.Errorf("download link is empty")
 				return
 			}

pkg/debrid/providers/alldebrid/types.go

@@ -1,5 +1,10 @@
 package alldebrid
 
+import (
+	"encoding/json"
+	"fmt"
+)
+
 type errorResponse struct {
 	Code    string `json:"code"`
 	Message string `json:"message"`
@@ -32,6 +37,8 @@ type magnetInfo struct {
 	Files          []MagnetFile `json:"files"`
 }
 
+type Magnets []magnetInfo
+
 type TorrentInfoResponse struct {
 	Status string `json:"status"`
 	Data   struct {
@@ -43,7 +50,7 @@ type TorrentInfoResponse struct {
 type TorrentsListResponse struct {
 	Status string `json:"status"`
 	Data   struct {
-		Magnets []magnetInfo `json:"magnets"`
+		Magnets Magnets `json:"magnets"`
 	} `json:"data"`
 	Error *errorResponse `json:"error"`
 }
@@ -81,3 +88,27 @@ type DownloadLink struct {
 	} `json:"data"`
 	Error *errorResponse `json:"error"`
 }
+
+// UnmarshalJSON implements custom unmarshaling for Magnets type
+// It can handle both an array of magnetInfo objects or a map with string keys.
+// If the input is an array, it will be unmarshaled directly into the Magnets slice.
+// If the input is a map, it will extract the values and append them to the Magnets slice.
+// If the input is neither, it will return an error.
+func (m *Magnets) UnmarshalJSON(data []byte) error {
+	// Try to unmarshal as array
+	var arr []magnetInfo
+	if err := json.Unmarshal(data, &arr); err == nil {
+		*m = arr
+		return nil
+	}
+
+	// Try to unmarshal as map
+	var obj map[string]magnetInfo
+	if err := json.Unmarshal(data, &obj); err == nil {
+		for _, v := range obj {
+			*m = append(*m, v)
+		}
+		return nil
+	}
+	return fmt.Errorf("magnets: unsupported JSON format")
+}

pkg/debrid/providers/realdebrid/realdebrid.go

@@ -46,7 +46,7 @@ type RealDebrid struct {
 	addSamples      bool
 	Profile         *types.Profile
 	minimumFreeSlot int // Minimum number of active pots to maintain (used for cached stuffs, etc.)
-
+	limit           int
 }
 
 func New(dc config.Debrid) (*RealDebrid, error) {
@@ -101,6 +101,7 @@ func New(dc config.Debrid) (*RealDebrid, error) {
 		checkCached:     dc.CheckCached,
 		addSamples:      dc.AddSamples,
 		minimumFreeSlot: dc.MinimumFreeSlot,
+		limit:           dc.Limit,
 	}
 
 	if _, err := r.GetProfile(); err != nil {
@@ -510,7 +511,7 @@ func (r *RealDebrid) CheckStatus(t *types.Torrent) (*types.Torrent, error) {
 		if status == "waiting_files_selection" {
 			t.Files = r.getTorrentFiles(t, data)
 			if len(t.Files) == 0 {
-				return t, fmt.Errorf("no video files found")
+				return t, fmt.Errorf("no valid files found")
 			}
 			filesId := make([]string, 0)
 			for _, f := range t.Files {
@@ -794,6 +795,10 @@ func (r *RealDebrid) getTorrents(offset int, limit int) (int, []*types.Torrent,
 
 func (r *RealDebrid) GetTorrents() ([]*types.Torrent, error) {
 	limit := 5000
+	if r.limit != 0 {
+		limit = r.limit
+	}
+	hardLimit := r.limit
 
 	// Get first batch and total count
 	allTorrents := make([]*types.Torrent, 0)
@@ -812,6 +817,10 @@ func (r *RealDebrid) GetTorrents() ([]*types.Torrent, error) {
 		}
 		allTorrents = append(allTorrents, torrents...)
 		offset += totalTorrents
+		if hardLimit != 0 && len(allTorrents) >= hardLimit {
+			// If hard limit is set, stop fetching more torrents
+			break
+		}
 	}
 
 	if fetchError != nil {

pkg/debrid/providers/torbox/torbox.go

@@ -4,13 +4,6 @@ import (
 	"bytes"
 	"encoding/json"
 	"fmt"
-	"github.com/rs/zerolog"
-	"github.com/sirrobot01/decypharr/internal/config"
-	"github.com/sirrobot01/decypharr/internal/logger"
-	"github.com/sirrobot01/decypharr/internal/request"
-	"github.com/sirrobot01/decypharr/internal/utils"
-	"github.com/sirrobot01/decypharr/pkg/debrid/types"
-	"github.com/sirrobot01/decypharr/pkg/version"
 	"mime/multipart"
 	"net/http"
 	gourl "net/url"
@@ -21,6 +14,14 @@ import (
 	"strings"
 	"sync"
 	"time"
+
+	"github.com/rs/zerolog"
+	"github.com/sirrobot01/decypharr/internal/config"
+	"github.com/sirrobot01/decypharr/internal/logger"
+	"github.com/sirrobot01/decypharr/internal/request"
+	"github.com/sirrobot01/decypharr/internal/utils"
+	"github.com/sirrobot01/decypharr/pkg/debrid/types"
+	"github.com/sirrobot01/decypharr/pkg/version"
 )
 
 type Torbox struct {
@@ -168,7 +169,7 @@ func (tb *Torbox) SubmitMagnet(torrent *types.Torrent) (*types.Torrent, error) {
 	return torrent, nil
 }
 
-func getTorboxStatus(status string, finished bool) string {
+func (tb *Torbox) getTorboxStatus(status string, finished bool) string {
 	if finished {
 		return "downloaded"
 	}
@@ -176,12 +177,16 @@ func getTorboxStatus(status string, finished bool) string {
 		"checkingResumeData", "metaDL", "pausedUP", "queuedUP", "checkingUP",
 		"forcedUP", "allocating", "downloading", "metaDL", "pausedDL",
 		"queuedDL", "checkingDL", "forcedDL", "checkingResumeData", "moving"}
+
+	var determinedStatus string
 	switch {
 	case utils.Contains(downloading, status):
-		return "downloading"
+		determinedStatus = "downloading"
 	default:
-		return "error"
+		determinedStatus = "error"
 	}
+
+	return determinedStatus
 }
 
 func (tb *Torbox) GetTorrent(torrentId string) (*types.Torrent, error) {
@@ -206,7 +211,7 @@ func (tb *Torbox) GetTorrent(torrentId string) (*types.Torrent, error) {
 		Bytes:            data.Size,
 		Folder:           data.Name,
 		Progress:         data.Progress * 100,
-		Status:           getTorboxStatus(data.DownloadState, data.DownloadFinished),
+		Status:           tb.getTorboxStatus(data.DownloadState, data.DownloadFinished),
 		Speed:            data.DownloadSpeed,
 		Seeders:          data.Seeds,
 		Filename:         data.Name,
@@ -217,19 +222,33 @@ func (tb *Torbox) GetTorrent(torrentId string) (*types.Torrent, error) {
 		Added:            data.CreatedAt.Format(time.RFC3339),
 	}
 	cfg := config.Get()
+
+	totalFiles := 0
+	skippedSamples := 0
+	skippedFileType := 0
+	skippedSize := 0
+	validFiles := 0
+	filesWithLinks := 0
+
 	for _, f := range data.Files {
+		totalFiles++
 		fileName := filepath.Base(f.Name)
+
 		if !tb.addSamples && utils.IsSampleFile(f.AbsolutePath) {
-			// Skip sample files
+			skippedSamples++
 			continue
 		}
 		if !cfg.IsAllowedFile(fileName) {
+			skippedFileType++
 			continue
 		}
 
 		if !cfg.IsSizeAllowed(f.Size) {
+			skippedSize++
 			continue
 		}
+
+		validFiles++
 		file := types.File{
 			TorrentId: t.Id,
 			Id:        strconv.Itoa(f.Id),
@@ -237,8 +256,26 @@ func (tb *Torbox) GetTorrent(torrentId string) (*types.Torrent, error) {
 			Size:      f.Size,
 			Path:      f.Name,
 		}
+
+		// For downloaded torrents, set a placeholder link to indicate file is available
+		if data.DownloadFinished {
+			file.Link = fmt.Sprintf("torbox://%s/%d", t.Id, f.Id)
+			filesWithLinks++
+		}
+
 		t.Files[fileName] = file
 	}
+
+	// Log summary only if there are issues or for debugging
+	tb.logger.Debug().
+		Str("torrent_id", t.Id).
+		Str("torrent_name", t.Name).
+		Bool("download_finished", data.DownloadFinished).
+		Str("status", t.Status).
+		Int("total_files", totalFiles).
+		Int("valid_files", validFiles).
+		Int("final_file_count", len(t.Files)).
+		Msg("Torrent file processing completed")
 	var cleanPath string
 	if len(t.Files) > 0 {
 		cleanPath = path.Clean(data.Files[0].Name)
@@ -266,24 +303,33 @@ func (tb *Torbox) UpdateTorrent(t *types.Torrent) error {
 	}
 	data := res.Data
 	name := data.Name
+
 	t.Name = name
 	t.Bytes = data.Size
 	t.Folder = name
 	t.Progress = data.Progress * 100
-	t.Status = getTorboxStatus(data.DownloadState, data.DownloadFinished)
+	t.Status = tb.getTorboxStatus(data.DownloadState, data.DownloadFinished)
 	t.Speed = data.DownloadSpeed
 	t.Seeders = data.Seeds
 	t.Filename = name
 	t.OriginalFilename = name
 	t.MountPath = tb.MountPath
 	t.Debrid = tb.name
+
+	// Clear existing files map to rebuild it
+	t.Files = make(map[string]types.File)
+
 	cfg := config.Get()
+	validFiles := 0
+	filesWithLinks := 0
+
 	for _, f := range data.Files {
 		fileName := filepath.Base(f.Name)
+
 		if !tb.addSamples && utils.IsSampleFile(f.AbsolutePath) {
-			// Skip sample files
 			continue
 		}
+
 		if !cfg.IsAllowedFile(fileName) {
 			continue
 		}
@@ -291,6 +337,8 @@ func (tb *Torbox) UpdateTorrent(t *types.Torrent) error {
 		if !cfg.IsSizeAllowed(f.Size) {
 			continue
 		}
+
+		validFiles++
 		file := types.File{
 			TorrentId: t.Id,
 			Id:        strconv.Itoa(f.Id),
@@ -298,8 +346,16 @@ func (tb *Torbox) UpdateTorrent(t *types.Torrent) error {
 			Size:      f.Size,
 			Path:      fileName,
 		}
+
+		// For downloaded torrents, set a placeholder link to indicate file is available
+		if data.DownloadFinished {
+			file.Link = fmt.Sprintf("torbox://%s/%s", t.Id, strconv.Itoa(f.Id))
+			filesWithLinks++
+		}
+
 		t.Files[fileName] = file
 	}
+
 	var cleanPath string
 	if len(t.Files) > 0 {
 		cleanPath = path.Clean(data.Files[0].Name)
@@ -409,30 +465,58 @@ func (tb *Torbox) GetDownloadLink(t *types.Torrent, file *types.File) (*types.Do
 	query.Add("token", tb.APIKey)
 	query.Add("file_id", file.Id)
 	url += "?" + query.Encode()
+
 	req, _ := http.NewRequest(http.MethodGet, url, nil)
 	resp, err := tb.client.MakeRequest(req)
 	if err != nil {
+		tb.logger.Error().
+			Err(err).
+			Str("torrent_id", t.Id).
+			Str("file_id", file.Id).
+			Msg("Failed to make request to Torbox API")
 		return nil, err
 	}
+
 	var data DownloadLinksResponse
 	if err = json.Unmarshal(resp, &data); err != nil {
+		tb.logger.Error().
+			Err(err).
+			Str("torrent_id", t.Id).
+			Str("file_id", file.Id).
+			Msg("Failed to unmarshal Torbox API response")
 		return nil, err
 	}
+
 	if data.Data == nil {
+		tb.logger.Error().
+			Str("torrent_id", t.Id).
+			Str("file_id", file.Id).
+			Bool("success", data.Success).
+			Interface("error", data.Error).
+			Str("detail", data.Detail).
+			Msg("Torbox API returned no data")
 		return nil, fmt.Errorf("error getting download links")
 	}
+
 	link := *data.Data
 	if link == "" {
+		tb.logger.Error().
+			Str("torrent_id", t.Id).
+			Str("file_id", file.Id).
+			Msg("Torbox API returned empty download link")
 		return nil, fmt.Errorf("error getting download links")
 	}
+
 	now := time.Now()
-	return &types.DownloadLink{
+	downloadLink := &types.DownloadLink{
 		Link:         file.Link,
 		DownloadLink: link,
 		Id:           file.Id,
 		Generated:    now,
 		ExpiresAt:    now.Add(tb.autoExpiresLinksAfter),
-	}, nil
+	}
+
+	return downloadLink, nil
 }
 
 func (tb *Torbox) GetDownloadingStatus() []string {
@@ -440,7 +524,87 @@ func (tb *Torbox) GetDownloadingStatus() []string {
 }
 
 func (tb *Torbox) GetTorrents() ([]*types.Torrent, error) {
-	return nil, nil
+	url := fmt.Sprintf("%s/api/torrents/mylist", tb.Host)
+	req, _ := http.NewRequest(http.MethodGet, url, nil)
+	resp, err := tb.client.MakeRequest(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var res TorrentsListResponse
+	err = json.Unmarshal(resp, &res)
+	if err != nil {
+		return nil, err
+	}
+
+	if !res.Success || res.Data == nil {
+		return nil, fmt.Errorf("torbox API error: %v", res.Error)
+	}
+
+	torrents := make([]*types.Torrent, 0, len(*res.Data))
+	cfg := config.Get()
+
+	for _, data := range *res.Data {
+		t := &types.Torrent{
+			Id:               strconv.Itoa(data.Id),
+			Name:             data.Name,
+			Bytes:            data.Size,
+			Folder:           data.Name,
+			Progress:         data.Progress * 100,
+			Status:           tb.getTorboxStatus(data.DownloadState, data.DownloadFinished),
+			Speed:            data.DownloadSpeed,
+			Seeders:          data.Seeds,
+			Filename:         data.Name,
+			OriginalFilename: data.Name,
+			MountPath:        tb.MountPath,
+			Debrid:           tb.name,
+			Files:            make(map[string]types.File),
+			Added:            data.CreatedAt.Format(time.RFC3339),
+			InfoHash:         data.Hash,
+		}
+
+		// Process files
+		for _, f := range data.Files {
+			fileName := filepath.Base(f.Name)
+			if !tb.addSamples && utils.IsSampleFile(f.AbsolutePath) {
+				// Skip sample files
+				continue
+			}
+			if !cfg.IsAllowedFile(fileName) {
+				continue
+			}
+			if !cfg.IsSizeAllowed(f.Size) {
+				continue
+			}
+			file := types.File{
+				TorrentId: t.Id,
+				Id:        strconv.Itoa(f.Id),
+				Name:      fileName,
+				Size:      f.Size,
+				Path:      f.Name,
+			}
+
+			// For downloaded torrents, set a placeholder link to indicate file is available
+			if data.DownloadFinished {
+				file.Link = fmt.Sprintf("torbox://%s/%d", t.Id, f.Id)
+			}
+
+			t.Files[fileName] = file
+		}
+
+		// Set original filename based on first file or torrent name
+		var cleanPath string
+		if len(t.Files) > 0 {
+			cleanPath = path.Clean(data.Files[0].Name)
+		} else {
+			cleanPath = path.Clean(data.Name)
+		}
+		t.OriginalFilename = strings.Split(cleanPath, "/")[0]
+
+		torrents = append(torrents, t)
+	}
+
+	return torrents, nil
 }
 
 func (tb *Torbox) GetDownloadUncached() bool {

pkg/debrid/providers/torbox/types.go

@@ -57,7 +57,7 @@ type torboxInfo struct {
 	} `json:"files"`
 	DownloadPath     string      `json:"download_path"`
 	InactiveCheck    int         `json:"inactive_check"`
-	Availability     int         `json:"availability"`
+	Availability     float64     `json:"availability"`
 	DownloadFinished bool        `json:"download_finished"`
 	Tracker          interface{} `json:"tracker"`
 	TotalUploaded    int         `json:"total_uploaded"`
@@ -73,3 +73,5 @@ type torboxInfo struct {
 type InfoResponse APIResponse[torboxInfo]
 
 type DownloadLinksResponse APIResponse[string]
+
+type TorrentsListResponse APIResponse[[]torboxInfo]

pkg/debrid/store/cache.go

@@ -6,7 +6,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
-	"github.com/sirrobot01/decypharr/pkg/debrid/types"
+	"github.com/sirrobot01/decypharr/pkg/rclone"
 	"os"
 	"path"
 	"path/filepath"
@@ -17,13 +17,16 @@ import (
 	"sync/atomic"
 	"time"
 
+	"github.com/sirrobot01/decypharr/pkg/debrid/types"
+
 	"encoding/json"
+	_ "time/tzdata"
+
 	"github.com/go-co-op/gocron/v2"
 	"github.com/rs/zerolog"
 	"github.com/sirrobot01/decypharr/internal/config"
 	"github.com/sirrobot01/decypharr/internal/logger"
 	"github.com/sirrobot01/decypharr/internal/utils"
-	_ "time/tzdata"
 )
 
 type WebDavFolderNaming string
@@ -104,9 +107,10 @@ type Cache struct {
 
 	config        config.Debrid
 	customFolders []string
+	mounter       *rclone.Mount
 }
 
-func NewDebridCache(dc config.Debrid, client types.Client) *Cache {
+func NewDebridCache(dc config.Debrid, client types.Client, mounter *rclone.Mount) *Cache {
 	cfg := config.Get()
 	cet, err := time.LoadLocation("CET")
 	if err != nil {
@@ -161,6 +165,7 @@ func NewDebridCache(dc config.Debrid, client types.Client) *Cache {
 
 		config:        dc,
 		customFolders: customFolders,
+		mounter:       mounter,
 
 		ready: make(chan struct{}),
 	}
@@ -184,6 +189,15 @@ func (c *Cache) StreamWithRclone() bool {
 // and before you discard the instance on a restart.
 func (c *Cache) Reset() {
 
+	// Unmount first
+	if c.mounter != nil && c.mounter.IsMounted() {
+		if err := c.mounter.Unmount(); err != nil {
+			c.logger.Error().Err(err).Msgf("Failed to unmount %s", c.config.Name)
+		} else {
+			c.logger.Info().Msgf("Unmounted %s", c.config.Name)
+		}
+	}
+
 	if err := c.scheduler.StopJobs(); err != nil {
 		c.logger.Error().Err(err).Msg("Failed to stop scheduler jobs")
 	}
@@ -196,7 +210,9 @@ func (c *Cache) Reset() {
 	c.listingDebouncer.Stop()
 
 	// Close the repair channel
-	close(c.repairChan)
+	if c.repairChan != nil {
+		close(c.repairChan)
+	}
 
 	// 1. Reset torrent storage
 	c.torrents.reset()
@@ -217,6 +233,9 @@ func (c *Cache) Reset() {
 
 	// 6. Reset repair channel so the next Start() can spin it up
 	c.repairChan = make(chan RepairRequest, 100)
+
+	// Reset the ready channel
+	c.ready = make(chan struct{})
 }
 
 func (c *Cache) Start(ctx context.Context) error {
@@ -248,10 +267,13 @@ func (c *Cache) Start(ctx context.Context) error {
 	addr := cfg.BindAddress + ":" + cfg.Port + cfg.URLBase + "webdav/" + name + "/"
 	c.logger.Info().Msgf("%s WebDav server running at %s", name, addr)
 
-	<-ctx.Done()
-	c.logger.Info().Msgf("Stopping %s WebDav server", name)
-	c.Reset()
-
+	if c.mounter != nil {
+		if err := c.mounter.Mount(ctx); err != nil {
+			c.logger.Error().Err(err).Msgf("Failed to mount %s", c.config.Name)
+		}
+	} else {
+		c.logger.Warn().Msgf("Mounting is disabled for %s", c.config.Name)
+	}
 	return nil
 }
 
@@ -682,8 +704,13 @@ func (c *Cache) ProcessTorrent(t *types.Torrent) error {
 	}
 
 	if !isComplete(t.Files) {
-		c.logger.Debug().Msgf("Torrent %s is still not complete. Triggering a reinsert(disabled)", t.Id)
+		c.logger.Debug().
+			Str("torrent_id", t.Id).
+			Str("torrent_name", t.Name).
+			Int("total_files", len(t.Files)).
+			Msg("Torrent still not complete after refresh")
 	} else {
+
 		addedOn, err := time.Parse(time.RFC3339, t.Added)
 		if err != nil {
 			addedOn = time.Now()
@@ -874,3 +901,7 @@ func (c *Cache) RemoveFile(torrentId string, filename string) error {
 func (c *Cache) Logger() zerolog.Logger {
 	return c.logger
 }
+
+func (c *Cache) GetConfig() config.Debrid {
+	return c.config
+}

pkg/debrid/store/download_link.go

@@ -105,6 +105,11 @@ func (c *Cache) fetchDownloadLink(torrentName, filename, fileLink string) (*type
 	downloadLink, err := c.client.GetDownloadLink(ct.Torrent, &file)
 	if err != nil {
 		if errors.Is(err, utils.HosterUnavailableError) {
+			c.logger.Trace().
+				Str("filename", filename).
+				Str("torrent_id", ct.Id).
+				Msg("Hoster unavailable, attempting to reinsert torrent")
+
 			newCt, err := c.reInsertTorrent(ct)
 			if err != nil {
 				return nil, fmt.Errorf("failed to reinsert torrent: %w", err)
@@ -117,10 +122,10 @@ func (c *Cache) fetchDownloadLink(torrentName, filename, fileLink string) (*type
 			// Retry getting the download link
 			downloadLink, err = c.client.GetDownloadLink(ct.Torrent, &file)
 			if err != nil {
-				return nil, err
+				return nil, fmt.Errorf("retry failed to get download link: %w", err)
 			}
 			if downloadLink == nil {
-				return nil, fmt.Errorf("download link is empty for")
+				return nil, fmt.Errorf("download link is empty after retry")
 			}
 			return nil, nil
 		} else if errors.Is(err, utils.TrafficExceededError) {

pkg/debrid/store/refresh.go

@@ -127,26 +127,29 @@ func (c *Cache) refreshTorrents(ctx context.Context) {
 
 func (c *Cache) refreshRclone() error {
 	cfg := c.config
+	dirs := strings.FieldsFunc(cfg.RcRefreshDirs, func(r rune) bool {
+		return r == ',' || r == '&'
+	})
+	if len(dirs) == 0 {
+		dirs = []string{"__all__"}
+	}
+	if c.mounter != nil {
+		return c.mounter.RefreshDir(dirs)
+	} else {
+		return c.refreshRcloneWithRC(dirs)
+	}
+}
+
+func (c *Cache) refreshRcloneWithRC(dirs []string) error {
+	cfg := c.config
 
 	if cfg.RcUrl == "" {
 		return nil
 	}
 
-	if cfg.RcUrl == "" {
-		return nil
-	}
-
-	client := &http.Client{
-		Timeout: 60 * time.Second,
-		Transport: &http.Transport{
-			MaxIdleConns:        10,
-			IdleConnTimeout:     60 * time.Second,
-			DisableCompression:  false,
-			MaxIdleConnsPerHost: 5,
-		},
-	}
+	client := http.DefaultClient
 	// Create form data
-	data := c.buildRcloneRequestData()
+	data := c.buildRcloneRequestData(dirs)
 
 	if err := c.sendRcloneRequest(client, "vfs/forget", data); err != nil {
 		c.logger.Error().Err(err).Msg("Failed to send rclone vfs/forget request")
@@ -159,16 +162,7 @@ func (c *Cache) refreshRclone() error {
 	return nil
 }
 
-func (c *Cache) buildRcloneRequestData() string {
-	cfg := c.config
-	dirs := strings.FieldsFunc(cfg.RcRefreshDirs, func(r rune) bool {
-		return r == ',' || r == '&'
-	})
-
-	if len(dirs) == 0 {
-		return "dir=__all__"
-	}
-
+func (c *Cache) buildRcloneRequestData(dirs []string) string {
 	var data strings.Builder
 	for index, dir := range dirs {
 		if dir != "" {

pkg/debrid/store/repair.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"github.com/sirrobot01/decypharr/internal/config"
 	"github.com/sirrobot01/decypharr/internal/utils"
 	"github.com/sirrobot01/decypharr/pkg/debrid/types"
 	"sync"
@@ -60,6 +61,7 @@ func (c *Cache) markAsSuccessfullyReinserted(torrentId string) {
 
 func (c *Cache) GetBrokenFiles(t *CachedTorrent, filenames []string) []string {
 	files := make(map[string]types.File)
+	repairStrategy := config.Get().Repair.Strategy
 	brokenFiles := make([]string, 0)
 	if len(filenames) > 0 {
 		for name, f := range t.Files {
@@ -93,6 +95,10 @@ func (c *Cache) GetBrokenFiles(t *CachedTorrent, filenames []string) []string {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
 
+	// Use a mutex to protect brokenFiles slice and torrent-wide failure flag
+	var mu sync.Mutex
+	torrentWideFailed := false
+
 	wg.Add(len(files))
 
 	for _, f := range files {
@@ -106,14 +112,33 @@ func (c *Cache) GetBrokenFiles(t *CachedTorrent, filenames []string) []string {
 			}
 
 			if f.Link == "" {
-				cancel()
+				mu.Lock()
+				if repairStrategy == config.RepairStrategyPerTorrent {
+					torrentWideFailed = true
+					mu.Unlock()
+					cancel() // Signal all other goroutines to stop
+					return
+				} else {
+					// per_file strategy - only mark this file as broken
+					brokenFiles = append(brokenFiles, f.Name)
+				}
+				mu.Unlock()
 				return
 			}
 
 			if err := c.client.CheckLink(f.Link); err != nil {
 				if errors.Is(err, utils.HosterUnavailableError) {
-					cancel() // Signal all other goroutines to stop
-					return
+					mu.Lock()
+					if repairStrategy == config.RepairStrategyPerTorrent {
+						torrentWideFailed = true
+						mu.Unlock()
+						cancel() // Signal all other goroutines to stop
+						return
+					} else {
+						// per_file strategy - only mark this file as broken
+						brokenFiles = append(brokenFiles, f.Name)
+					}
+					mu.Unlock()
 				}
 			}
 		}(f)
@@ -121,12 +146,14 @@ func (c *Cache) GetBrokenFiles(t *CachedTorrent, filenames []string) []string {
 
 	wg.Wait()
 
-	// If context was cancelled, mark all files as broken
-	if ctx.Err() != nil {
+	// Handle the result based on strategy
+	if repairStrategy == config.RepairStrategyPerTorrent && torrentWideFailed {
+		// Mark all files as broken for per_torrent strategy
 		for _, f := range files {
 			brokenFiles = append(brokenFiles, f.Name)
 		}
 	}
+	// For per_file strategy, brokenFiles already contains only the broken ones
 
 	// Try to reinsert the torrent if it's broken
 	if len(brokenFiles) > 0 && t.Torrent != nil {

pkg/debrid/store/worker.go

@@ -9,6 +9,9 @@ import (
 func (c *Cache) StartSchedule(ctx context.Context) error {
 	// For now, we just want to refresh the listing and download links
 
+	// Stop any existing jobs before starting new ones
+	c.scheduler.RemoveByTags("decypharr")
+
 	// Schedule download link refresh job
 	if jd, err := utils.ConvertToJobDef(c.downloadLinksRefreshInterval); err != nil {
 		c.logger.Error().Err(err).Msg("Failed to convert download link refresh interval to job definition")
@@ -16,7 +19,7 @@ func (c *Cache) StartSchedule(ctx context.Context) error {
 		// Schedule the job
 		if _, err := c.scheduler.NewJob(jd, gocron.NewTask(func() {
 			c.refreshDownloadLinks(ctx)
-		}), gocron.WithContext(ctx)); err != nil {
+		}), gocron.WithContext(ctx), gocron.WithTags("decypharr")); err != nil {
 			c.logger.Error().Err(err).Msg("Failed to create download link refresh job")
 		} else {
 			c.logger.Debug().Msgf("Download link refresh job scheduled for every %s", c.downloadLinksRefreshInterval)
@@ -30,7 +33,7 @@ func (c *Cache) StartSchedule(ctx context.Context) error {
 		// Schedule the job
 		if _, err := c.scheduler.NewJob(jd, gocron.NewTask(func() {
 			c.refreshTorrents(ctx)
-		}), gocron.WithContext(ctx)); err != nil {
+		}), gocron.WithContext(ctx), gocron.WithTags("decypharr")); err != nil {
 			c.logger.Error().Err(err).Msg("Failed to create torrent refresh job")
 		} else {
 			c.logger.Debug().Msgf("Torrent refresh job scheduled for every %s", c.torrentRefreshInterval)
@@ -46,7 +49,7 @@ func (c *Cache) StartSchedule(ctx context.Context) error {
 		// Schedule the job
 		if _, err := c.cetScheduler.NewJob(jd, gocron.NewTask(func() {
 			c.resetInvalidLinks(ctx)
-		}), gocron.WithContext(ctx)); err != nil {
+		}), gocron.WithContext(ctx), gocron.WithTags("decypharr")); err != nil {
 			c.logger.Error().Err(err).Msg("Failed to create link reset job")
 		} else {
 			c.logger.Debug().Msgf("Link reset job scheduled for every midnight, CET")

pkg/qbit/context.go

@@ -5,8 +5,10 @@ import (
 	"encoding/base64"
 	"fmt"
 	"github.com/go-chi/chi/v5"
+	"github.com/sirrobot01/decypharr/internal/config"
 	"github.com/sirrobot01/decypharr/pkg/arr"
 	"github.com/sirrobot01/decypharr/pkg/store"
+	"golang.org/x/crypto/bcrypt"
 	"net/http"
 	"net/url"
 	"strings"
@@ -125,6 +127,7 @@ func (q *QBit) categoryContext(next http.Handler) http.Handler {
 // Only a valid host and token will be added to the context/config. The rest are manual
 func (q *QBit) authContext(next http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		cfg := config.Get()
 		host, token, err := decodeAuthHeader(r.Header.Get("Authorization"))
 		category := getCategory(r.Context())
 		arrs := store.Get().Arr()
@@ -145,12 +148,22 @@ func (q *QBit) authContext(next http.Handler) http.Handler {
 				a.Token = token
 			}
 		}
-		a.Source = "auto"
-		if err := validateServiceURL(a.Host); err != nil {
-			// Return silently, no need to raise a problem. Just do not add the Arr to the context/config.json
-			next.ServeHTTP(w, r)
-			return
+		if cfg.NeedsAuth() {
+			if a.Host == "" || a.Token == "" {
+				http.Error(w, "Unauthorized: Host and token are required for authentication", http.StatusUnauthorized)
+				return
+			}
+			// try to use either Arr validate, or user auth validation
+			if err := a.Validate(); err != nil {
+				// If this failed, try to use user auth validation
+				if !verifyAuth(host, token) {
+					http.Error(w, "Unauthorized: Invalid host or token", http.StatusUnauthorized)
+					return
+				}
+			}
 		}
+
+		a.Source = "auto"
 		arrs.AddOrUpdate(a)
 		ctx := context.WithValue(r.Context(), arrKey, a)
 		next.ServeHTTP(w, r.WithContext(ctx))
@@ -176,3 +189,19 @@ func hashesContext(next http.Handler) http.Handler {
 		next.ServeHTTP(w, r.WithContext(ctx))
 	})
 }
+
+func verifyAuth(username, password string) bool {
+	// If you're storing hashed password, use bcrypt to compare
+	if username == "" {
+		return false
+	}
+	auth := config.Get().GetAuth()
+	if auth == nil {
+		return false
+	}
+	if username != auth.Username {
+		return false
+	}
+	err := bcrypt.CompareHashAndPassword([]byte(auth.Password), []byte(password))
+	return err == nil
+}

pkg/qbit/http.go

@@ -19,6 +19,7 @@ func (q *QBit) handleLogin(w http.ResponseWriter, r *http.Request) {
 	if err := _arr.Validate(); err != nil {
 		q.logger.Error().Err(err).Msgf("Error validating arr")
 		http.Error(w, "Invalid arr configuration", http.StatusBadRequest)
+		return
 	}
 	_, _ = w.Write([]byte("Ok."))
 }

pkg/rclone/client.go

@@ -0,0 +1,399 @@
+package rclone
+
+import (
+	"fmt"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"time"
+
+	"github.com/sirrobot01/decypharr/internal/config"
+)
+
+// Mount creates a mount using the rclone RC API with retry logic
+func (m *Manager) Mount(provider, webdavURL string) error {
+	return m.mountWithRetry(provider, webdavURL, 3)
+}
+
+// mountWithRetry attempts to mount with retry logic
+func (m *Manager) mountWithRetry(provider, webdavURL string, maxRetries int) error {
+	if !m.IsReady() {
+		if err := m.WaitForReady(30 * time.Second); err != nil {
+			return fmt.Errorf("rclone RC server not ready: %w", err)
+		}
+	}
+
+	for attempt := 0; attempt <= maxRetries; attempt++ {
+		if attempt > 0 {
+			// Wait before retry
+			wait := time.Duration(attempt*2) * time.Second
+			m.logger.Debug().
+				Int("attempt", attempt).
+				Str("provider", provider).
+				Msg("Retrying mount operation")
+			time.Sleep(wait)
+		}
+
+		if err := m.performMount(provider, webdavURL); err != nil {
+			m.logger.Error().
+				Err(err).
+				Str("provider", provider).
+				Int("attempt", attempt+1).
+				Msg("Mount attempt failed")
+			continue
+		}
+
+		return nil // Success
+	}
+	return fmt.Errorf("mount failed for %s", provider)
+}
+
+// performMount performs a single mount attempt
+func (m *Manager) performMount(provider, webdavURL string) error {
+	cfg := config.Get()
+	mountPath := filepath.Join(cfg.Rclone.MountPath, provider)
+
+	// Create mount directory
+	if err := os.MkdirAll(mountPath, 0755); err != nil {
+		return fmt.Errorf("failed to create mount directory %s: %w", mountPath, err)
+	}
+
+	// Check if already mounted
+	m.mountsMutex.RLock()
+	existingMount, exists := m.mounts[provider]
+	m.mountsMutex.RUnlock()
+
+	if exists && existingMount.Mounted {
+		m.logger.Info().Str("provider", provider).Str("path", mountPath).Msg("Already mounted")
+		return nil
+	}
+
+	// Clean up any stale mount first
+	if exists && !existingMount.Mounted {
+		m.forceUnmountPath(mountPath)
+	}
+
+	// Create rclone config for this provider
+	if err := m.createConfig(provider, webdavURL); err != nil {
+		return fmt.Errorf("failed to create rclone config: %w", err)
+	}
+
+	// Prepare mount arguments
+	mountArgs := map[string]interface{}{
+		"fs":         fmt.Sprintf("%s:", provider),
+		"mountPoint": mountPath,
+		"mountType":  "mount", // Use standard FUSE mount
+		"mountOpt": map[string]interface{}{
+			"AllowNonEmpty": true,
+			"AllowOther":    true,
+			"DebugFUSE":     false,
+			"DeviceName":    fmt.Sprintf("decypharr-%s", provider),
+			"VolumeName":    fmt.Sprintf("decypharr-%s", provider),
+		},
+	}
+
+	configOpts := make(map[string]interface{})
+
+	if cfg.Rclone.BufferSize != "" {
+		configOpts["BufferSize"] = cfg.Rclone.BufferSize
+	}
+
+	if len(configOpts) > 0 {
+		// Only add _config if there are options to set
+		mountArgs["_config"] = configOpts
+	}
+
+	// Add VFS options if caching is enabled
+	if cfg.Rclone.VfsCacheMode != "off" {
+		vfsOpt := map[string]interface{}{
+			"CacheMode": cfg.Rclone.VfsCacheMode,
+		}
+
+		if cfg.Rclone.VfsCacheMaxAge != "" {
+			vfsOpt["CacheMaxAge"] = cfg.Rclone.VfsCacheMaxAge
+		}
+		if cfg.Rclone.VfsCacheMaxSize != "" {
+			vfsOpt["CacheMaxSize"] = cfg.Rclone.VfsCacheMaxSize
+		}
+		if cfg.Rclone.VfsCachePollInterval != "" {
+			vfsOpt["CachePollInterval"] = cfg.Rclone.VfsCachePollInterval
+		}
+		if cfg.Rclone.VfsReadChunkSize != "" {
+			vfsOpt["ChunkSize"] = cfg.Rclone.VfsReadChunkSize
+		}
+		if cfg.Rclone.VfsReadAhead != "" {
+			vfsOpt["ReadAhead"] = cfg.Rclone.VfsReadAhead
+		}
+		if cfg.Rclone.NoChecksum {
+			vfsOpt["NoChecksum"] = cfg.Rclone.NoChecksum
+		}
+		if cfg.Rclone.NoModTime {
+			vfsOpt["NoModTime"] = cfg.Rclone.NoModTime
+		}
+
+		mountArgs["vfsOpt"] = vfsOpt
+	}
+
+	// Add mount options based on configuration
+	if cfg.Rclone.UID != 0 {
+		mountArgs["mountOpt"].(map[string]interface{})["UID"] = cfg.Rclone.UID
+	}
+	if cfg.Rclone.GID != 0 {
+		mountArgs["mountOpt"].(map[string]interface{})["GID"] = cfg.Rclone.GID
+	}
+	if cfg.Rclone.AttrTimeout != "" {
+		if attrTimeout, err := time.ParseDuration(cfg.Rclone.AttrTimeout); err == nil {
+			mountArgs["mountOpt"].(map[string]interface{})["AttrTimeout"] = attrTimeout.String()
+		}
+	}
+	// Make the mount request
+	req := RCRequest{
+		Command: "mount/mount",
+		Args:    mountArgs,
+	}
+
+	_, err := m.makeRequest(req, true)
+	if err != nil {
+		// Clean up mount point on failure
+		m.forceUnmountPath(mountPath)
+		return fmt.Errorf("failed to create mount for %s: %w", provider, err)
+	}
+
+	// Store mount info
+	mountInfo := &MountInfo{
+		Provider:   provider,
+		LocalPath:  mountPath,
+		WebDAVURL:  webdavURL,
+		Mounted:    true,
+		MountedAt:  time.Now().Format(time.RFC3339),
+		ConfigName: provider,
+	}
+
+	m.mountsMutex.Lock()
+	m.mounts[provider] = mountInfo
+	m.mountsMutex.Unlock()
+
+	return nil
+}
+
+// Unmount unmounts a specific provider
+func (m *Manager) Unmount(provider string) error {
+	return m.unmount(provider)
+}
+
+// unmount is the internal unmount function
+func (m *Manager) unmount(provider string) error {
+	m.mountsMutex.RLock()
+	mountInfo, exists := m.mounts[provider]
+	m.mountsMutex.RUnlock()
+
+	if !exists || !mountInfo.Mounted {
+		m.logger.Info().Str("provider", provider).Msg("Mount not found or already unmounted")
+		return nil
+	}
+
+	m.logger.Info().Str("provider", provider).Str("path", mountInfo.LocalPath).Msg("Unmounting")
+
+	// Try RC unmount first
+	req := RCRequest{
+		Command: "mount/unmount",
+		Args: map[string]interface{}{
+			"mountPoint": mountInfo.LocalPath,
+		},
+	}
+
+	var rcErr error
+	if m.IsReady() {
+		_, rcErr = m.makeRequest(req, true)
+	}
+
+	// If RC unmount fails or server is not ready, try force unmount
+	if rcErr != nil {
+		m.logger.Warn().Err(rcErr).Str("provider", provider).Msg("RC unmount failed, trying force unmount")
+		if err := m.forceUnmountPath(mountInfo.LocalPath); err != nil {
+			m.logger.Error().Err(err).Str("provider", provider).Msg("Force unmount failed")
+			// Don't return error here, update the state anyway
+		}
+	}
+
+	// Update mount info
+	m.mountsMutex.Lock()
+	if info, exists := m.mounts[provider]; exists {
+		info.Mounted = false
+		info.Error = ""
+		if rcErr != nil {
+			info.Error = rcErr.Error()
+		}
+	}
+	m.mountsMutex.Unlock()
+
+	m.logger.Info().Str("provider", provider).Msg("Unmount completed")
+	return nil
+}
+
+// UnmountAll unmounts all mounts
+func (m *Manager) UnmountAll() error {
+	m.mountsMutex.RLock()
+	providers := make([]string, 0, len(m.mounts))
+	for provider, mount := range m.mounts {
+		if mount.Mounted {
+			providers = append(providers, provider)
+		}
+	}
+	m.mountsMutex.RUnlock()
+
+	var lastError error
+	for _, provider := range providers {
+		if err := m.unmount(provider); err != nil {
+			lastError = err
+			m.logger.Error().Err(err).Str("provider", provider).Msg("Failed to unmount")
+		}
+	}
+
+	return lastError
+}
+
+// GetMountInfo returns information about a specific mount
+func (m *Manager) GetMountInfo(provider string) (*MountInfo, bool) {
+	m.mountsMutex.RLock()
+	defer m.mountsMutex.RUnlock()
+
+	info, exists := m.mounts[provider]
+	if !exists {
+		return nil, false
+	}
+
+	// Create a copy to avoid race conditions
+	mountInfo := *info
+	return &mountInfo, true
+}
+
+// GetAllMounts returns information about all mounts
+func (m *Manager) GetAllMounts() map[string]*MountInfo {
+	m.mountsMutex.RLock()
+	defer m.mountsMutex.RUnlock()
+
+	result := make(map[string]*MountInfo, len(m.mounts))
+	for provider, info := range m.mounts {
+		// Create a copy to avoid race conditions
+		mountInfo := *info
+		result[provider] = &mountInfo
+	}
+
+	return result
+}
+
+// IsMounted checks if a provider is mounted
+func (m *Manager) IsMounted(provider string) bool {
+	info, exists := m.GetMountInfo(provider)
+	return exists && info.Mounted
+}
+
+// RefreshDir refreshes directories in the VFS cache
+func (m *Manager) RefreshDir(provider string, dirs []string) error {
+	if !m.IsReady() {
+		return fmt.Errorf("rclone RC server not ready")
+	}
+
+	mountInfo, exists := m.GetMountInfo(provider)
+	if !exists || !mountInfo.Mounted {
+		return fmt.Errorf("provider %s not mounted", provider)
+	}
+
+	// If no specific directories provided, refresh root
+	if len(dirs) == 0 {
+		dirs = []string{"/"}
+	}
+	args := map[string]interface{}{
+		"fs": fmt.Sprintf("%s:", provider),
+	}
+	for i, dir := range dirs {
+		if dir != "" {
+			if i == 0 {
+				args["dir"] = dir
+			} else {
+				args[fmt.Sprintf("dir%d", i+1)] = dir
+			}
+		}
+	}
+	req := RCRequest{
+		Command: "vfs/forget",
+		Args:    args,
+	}
+
+	_, err := m.makeRequest(req, true)
+	if err != nil {
+		m.logger.Error().Err(err).
+			Str("provider", provider).
+			Msg("Failed to refresh directory")
+		return fmt.Errorf("failed to refresh directory %s for provider %s: %w", dirs, provider, err)
+	}
+
+	req = RCRequest{
+		Command: "vfs/refresh",
+		Args:    args,
+	}
+
+	_, err = m.makeRequest(req, true)
+	if err != nil {
+		m.logger.Error().Err(err).
+			Str("provider", provider).
+			Msg("Failed to refresh directory")
+		return fmt.Errorf("failed to refresh directory %s for provider %s: %w", dirs, provider, err)
+	}
+	return nil
+}
+
+// createConfig creates an rclone config entry for the provider
+func (m *Manager) createConfig(configName, webdavURL string) error {
+	req := RCRequest{
+		Command: "config/create",
+		Args: map[string]interface{}{
+			"name": configName,
+			"type": "webdav",
+			"parameters": map[string]interface{}{
+				"url":             webdavURL,
+				"vendor":          "other",
+				"pacer_min_sleep": "0",
+			},
+		},
+	}
+
+	_, err := m.makeRequest(req, true)
+	if err != nil {
+		return fmt.Errorf("failed to create config %s: %w", configName, err)
+	}
+	return nil
+}
+
+// forceUnmountPath attempts to force unmount a path using system commands
+func (m *Manager) forceUnmountPath(mountPath string) error {
+	methods := [][]string{
+		{"umount", mountPath},
+		{"umount", "-l", mountPath}, // lazy unmount
+		{"fusermount", "-uz", mountPath},
+		{"fusermount3", "-uz", mountPath},
+	}
+
+	for _, method := range methods {
+		if err := m.tryUnmountCommand(method...); err == nil {
+			m.logger.Info().
+				Strs("command", method).
+				Str("path", mountPath).
+				Msg("Successfully unmounted using system command")
+			return nil
+		}
+	}
+
+	return fmt.Errorf("all force unmount attempts failed for %s", mountPath)
+}
+
+// tryUnmountCommand tries to run an unmount command
+func (m *Manager) tryUnmountCommand(args ...string) error {
+	if len(args) == 0 {
+		return fmt.Errorf("no command provided")
+	}
+
+	cmd := exec.CommandContext(m.ctx, args[0], args[1:]...)
+	return cmd.Run()
+}

pkg/rclone/health.go

@@ -0,0 +1,140 @@
+package rclone
+
+import (
+	"context"
+	"fmt"
+	"time"
+)
+
+// HealthCheck performs comprehensive health checks on the rclone system
+func (m *Manager) HealthCheck() error {
+	if !m.serverStarted {
+		return fmt.Errorf("rclone RC server is not started")
+	}
+
+	if !m.IsReady() {
+		return fmt.Errorf("rclone RC server is not ready")
+	}
+
+	// Check if we can communicate with the server
+	if !m.pingServer() {
+		return fmt.Errorf("rclone RC server is not responding")
+	}
+
+	// Check mounts health
+	m.mountsMutex.RLock()
+	unhealthyMounts := make([]string, 0)
+	for provider, mount := range m.mounts {
+		if mount.Mounted && !m.checkMountHealth(provider) {
+			unhealthyMounts = append(unhealthyMounts, provider)
+		}
+	}
+	m.mountsMutex.RUnlock()
+
+	if len(unhealthyMounts) > 0 {
+		return fmt.Errorf("unhealthy mounts detected: %v", unhealthyMounts)
+	}
+
+	return nil
+}
+
+// checkMountHealth checks if a specific mount is healthy
+func (m *Manager) checkMountHealth(provider string) bool {
+	// Try to list the root directory of the mount
+	req := RCRequest{
+		Command: "operations/list",
+		Args: map[string]interface{}{
+			"fs":     fmt.Sprintf("%s:", provider),
+			"remote": "/",
+		},
+	}
+
+	_, err := m.makeRequest(req, true)
+	return err == nil
+}
+
+// RecoverMount attempts to recover a failed mount
+func (m *Manager) RecoverMount(provider string) error {
+	m.mountsMutex.RLock()
+	mountInfo, exists := m.mounts[provider]
+	m.mountsMutex.RUnlock()
+
+	if !exists {
+		return fmt.Errorf("mount for provider %s does not exist", provider)
+	}
+
+	m.logger.Warn().Str("provider", provider).Msg("Attempting to recover mount")
+
+	// First try to unmount cleanly
+	if err := m.unmount(provider); err != nil {
+		m.logger.Error().Err(err).Str("provider", provider).Msg("Failed to unmount during recovery")
+	}
+
+	// Wait a moment
+	time.Sleep(2 * time.Second)
+
+	// Try to remount
+	if err := m.Mount(provider, mountInfo.WebDAVURL); err != nil {
+		return fmt.Errorf("failed to recover mount for %s: %w", provider, err)
+	}
+
+	m.logger.Info().Str("provider", provider).Msg("Successfully recovered mount")
+	return nil
+}
+
+// MonitorMounts continuously monitors mount health and attempts recovery
+func (m *Manager) MonitorMounts(ctx context.Context) {
+	if !m.serverStarted {
+		return
+	}
+
+	ticker := time.NewTicker(30 * time.Second) // Check every 30 seconds
+	defer ticker.Stop()
+
+	for {
+		select {
+		case <-ctx.Done():
+			m.logger.Debug().Msg("Mount monitoring stopped")
+			return
+		case <-ticker.C:
+			m.performMountHealthCheck()
+		}
+	}
+}
+
+// performMountHealthCheck checks and attempts to recover unhealthy mounts
+func (m *Manager) performMountHealthCheck() {
+	if !m.IsReady() {
+		return
+	}
+
+	m.mountsMutex.RLock()
+	providers := make([]string, 0, len(m.mounts))
+	for provider, mount := range m.mounts {
+		if mount.Mounted {
+			providers = append(providers, provider)
+		}
+	}
+	m.mountsMutex.RUnlock()
+
+	for _, provider := range providers {
+		if !m.checkMountHealth(provider) {
+			m.logger.Warn().Str("provider", provider).Msg("Mount health check failed, attempting recovery")
+
+			// Mark mount as unhealthy
+			m.mountsMutex.Lock()
+			if mount, exists := m.mounts[provider]; exists {
+				mount.Error = "Health check failed"
+				mount.Mounted = false
+			}
+			m.mountsMutex.Unlock()
+
+			// Attempt recovery
+			go func(provider string) {
+				if err := m.RecoverMount(provider); err != nil {
+					m.logger.Error().Err(err).Str("provider", provider).Msg("Failed to recover mount")
+				}
+			}(provider)
+		}
+	}
+}

pkg/rclone/killed_unix.go

@@ -0,0 +1,43 @@
+//go:build !windows
+
+package rclone
+
+import (
+	"errors"
+	"os/exec"
+	"syscall"
+)
+
+// WasHardTerminated reports true iff the process was ended by SIGKILL or SIGTERM.
+func WasHardTerminated(err error) bool {
+	var ee *exec.ExitError
+	if !errors.As(err, &ee) {
+		return false
+	}
+	ws, ok := ee.Sys().(syscall.WaitStatus)
+	if !ok || !ws.Signaled() {
+		return false
+	}
+	sig := ws.Signal()
+	return sig == syscall.SIGKILL || sig == syscall.SIGTERM
+}
+
+// ExitCode returns the numeric exit code when available.
+func ExitCode(err error) (int, bool) {
+	var ee *exec.ExitError
+	if !errors.As(err, &ee) {
+		return 0, false
+	}
+	ws, ok := ee.Sys().(syscall.WaitStatus)
+	if !ok {
+		return 0, false
+	}
+	if ws.Exited() {
+		return ws.ExitStatus(), true
+	}
+	// Conventional shell “killed by signal” code is 128 + signal.
+	if ws.Signaled() {
+		return 128 + int(ws.Signal()), true
+	}
+	return 0, false
+}

pkg/rclone/killed_windows.go

@@ -0,0 +1,35 @@
+//go:build windows
+
+package rclone
+
+import (
+	"errors"
+	"os/exec"
+	"syscall"
+)
+
+func WasHardTerminated(err error) bool {
+	var ee *exec.ExitError
+	if !errors.As(err, &ee) {
+		return false
+	}
+	ws, ok := ee.Sys().(syscall.WaitStatus)
+	if !ok {
+		return false
+	}
+	// No Signaled() on Windows; consider "hard terminated" if not success.
+	return ws.ExitStatus() != 0 // Use the ExitStatus() method
+}
+
+// ExitCode returns the process exit code when available.
+func ExitCode(err error) (int, bool) {
+	var ee *exec.ExitError
+	if !errors.As(err, &ee) {
+		return 0, false
+	}
+	ws, ok := ee.Sys().(syscall.WaitStatus)
+	if !ok {
+		return 0, false
+	}
+	return ws.ExitStatus(), true // Use the ExitStatus() method
+}

pkg/rclone/manager.go

@@ -0,0 +1,380 @@
+package rclone
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"net/http"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"sync"
+	"time"
+
+	"github.com/rs/zerolog"
+	"github.com/sirrobot01/decypharr/internal/config"
+	"github.com/sirrobot01/decypharr/internal/logger"
+)
+
+// Manager handles the rclone RC server and provides mount operations
+type Manager struct {
+	cmd           *exec.Cmd
+	rcPort        string
+	rcUser        string
+	rcPass        string
+	configDir     string
+	mounts        map[string]*MountInfo
+	mountsMutex   sync.RWMutex
+	logger        zerolog.Logger
+	ctx           context.Context
+	cancel        context.CancelFunc
+	httpClient    *http.Client
+	serverReady   chan struct{}
+	serverStarted bool
+	mu            sync.RWMutex
+}
+
+type MountInfo struct {
+	Provider   string `json:"provider"`
+	LocalPath  string `json:"local_path"`
+	WebDAVURL  string `json:"webdav_url"`
+	Mounted    bool   `json:"mounted"`
+	MountedAt  string `json:"mounted_at,omitempty"`
+	ConfigName string `json:"config_name"`
+	Error      string `json:"error,omitempty"`
+}
+
+type RCRequest struct {
+	Command string                 `json:"command"`
+	Args    map[string]interface{} `json:"args,omitempty"`
+}
+
+type RCResponse struct {
+	Result interface{} `json:"result,omitempty"`
+	Error  string      `json:"error,omitempty"`
+}
+
+// NewManager creates a new rclone RC manager
+func NewManager() *Manager {
+	cfg := config.Get()
+
+	rcPort := "5572"
+	configDir := filepath.Join(cfg.Path, "rclone")
+
+	// Ensure config directory exists
+	if err := os.MkdirAll(configDir, 0755); err != nil {
+		_logger := logger.New("rclone")
+		_logger.Error().Err(err).Msg("Failed to create rclone config directory")
+	}
+
+	ctx, cancel := context.WithCancel(context.Background())
+
+	return &Manager{
+		rcPort:      rcPort,
+		configDir:   configDir,
+		mounts:      make(map[string]*MountInfo),
+		logger:      logger.New("rclone"),
+		ctx:         ctx,
+		cancel:      cancel,
+		httpClient:  &http.Client{Timeout: 30 * time.Second},
+		serverReady: make(chan struct{}),
+	}
+}
+
+// Start starts the rclone RC server
+func (m *Manager) Start(ctx context.Context) error {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
+	if m.serverStarted {
+		return nil
+	}
+
+	cfg := config.Get()
+	if !cfg.Rclone.Enabled {
+		m.logger.Info().Msg("Rclone is disabled, skipping RC server startup")
+		return nil
+	}
+
+	args := []string{
+		"rcd",
+		"--rc-addr", ":" + m.rcPort,
+		"--rc-no-auth", // We'll handle auth at the application level
+		"--config", filepath.Join(m.configDir, "rclone.conf"),
+		"--log-level", "INFO",
+	}
+	if cfg.Rclone.CacheDir != "" {
+		if err := os.MkdirAll(cfg.Rclone.CacheDir, 0755); err == nil {
+			args = append(args, "--cache-dir", cfg.Rclone.CacheDir)
+		}
+	}
+	m.cmd = exec.CommandContext(ctx, "rclone", args...)
+	m.cmd.Dir = m.configDir
+
+	// Capture output for debugging
+	var stdout, stderr bytes.Buffer
+	m.cmd.Stdout = &stdout
+	m.cmd.Stderr = &stderr
+
+	if err := m.cmd.Start(); err != nil {
+		return fmt.Errorf("failed to start rclone RC server: %w", err)
+	}
+
+	m.serverStarted = true
+
+	// Wait for server to be ready in a goroutine
+	go func() {
+		defer func() {
+			if r := recover(); r != nil {
+				m.logger.Error().Interface("panic", r).Msg("Panic in rclone RC server monitor")
+			}
+		}()
+
+		m.waitForServer()
+		close(m.serverReady)
+
+		// Start mount monitoring once server is ready
+		go func() {
+			defer func() {
+				if r := recover(); r != nil {
+					m.logger.Error().Interface("panic", r).Msg("Panic in mount monitor")
+				}
+			}()
+			m.MonitorMounts(ctx)
+		}()
+
+		// Wait for command to finish and log output
+		err := m.cmd.Wait()
+		switch {
+		case err == nil:
+			m.logger.Info().Msg("Rclone RC server exited normally")
+
+		case errors.Is(err, context.Canceled):
+			m.logger.Info().Msg("Rclone RC server terminated: context canceled")
+
+		case WasHardTerminated(err): // SIGKILL on *nix; non-zero exit on Windows
+			m.logger.Info().Msg("Rclone RC server hard-terminated")
+
+		default:
+			if code, ok := ExitCode(err); ok {
+				m.logger.Debug().Int("exit_code", code).Err(err).
+					Msg("Rclone RC server error")
+			} else {
+				m.logger.Debug().Err(err).Msg("Rclone RC server error (no exit code)")
+			}
+		}
+	}()
+	return nil
+}
+
+// Stop stops the rclone RC server and unmounts all mounts
+func (m *Manager) Stop() error {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
+	if !m.serverStarted {
+		return nil
+	}
+
+	m.logger.Info().Msg("Stopping rclone RC server")
+
+	// Unmount all mounts first
+	m.mountsMutex.RLock()
+	mountList := make([]*MountInfo, 0, len(m.mounts))
+	for _, mount := range m.mounts {
+		if mount.Mounted {
+			mountList = append(mountList, mount)
+		}
+	}
+	m.mountsMutex.RUnlock()
+
+	// Unmount in parallel
+	var wg sync.WaitGroup
+	for _, mount := range mountList {
+		wg.Add(1)
+		go func(mount *MountInfo) {
+			defer wg.Done()
+			if err := m.unmount(mount.Provider); err != nil {
+				m.logger.Error().Err(err).Str("provider", mount.Provider).Msg("Failed to unmount during shutdown")
+			}
+		}(mount)
+	}
+
+	// Wait for unmounts with timeout
+	done := make(chan struct{})
+	go func() {
+		wg.Wait()
+		close(done)
+	}()
+
+	select {
+	case <-done:
+		m.logger.Info().Msg("All mounts unmounted successfully")
+	case <-time.After(30 * time.Second):
+		m.logger.Warn().Msg("Timeout waiting for mounts to unmount, proceeding with shutdown")
+	}
+
+	// Cancel context and stop process
+	m.cancel()
+
+	if m.cmd != nil && m.cmd.Process != nil {
+		// Try graceful shutdown first
+		if err := m.cmd.Process.Signal(os.Interrupt); err != nil {
+			m.logger.Warn().Err(err).Msg("Failed to send interrupt signal, using kill")
+			if killErr := m.cmd.Process.Kill(); killErr != nil {
+				m.logger.Error().Err(killErr).Msg("Failed to kill rclone process")
+				return killErr
+			}
+		}
+
+		// Wait for process to exit with timeout
+		done := make(chan error, 1)
+		go func() {
+			done <- m.cmd.Wait()
+		}()
+
+		select {
+		case err := <-done:
+			if err != nil && !errors.Is(err, context.Canceled) && !WasHardTerminated(err) {
+				m.logger.Warn().Err(err).Msg("Rclone process exited with error")
+			}
+		case <-time.After(10 * time.Second):
+			m.logger.Warn().Msg("Timeout waiting for rclone to exit, force killing")
+			if err := m.cmd.Process.Kill(); err != nil {
+				m.logger.Error().Err(err).Msg("Failed to force kill rclone process")
+				return err
+			}
+			// Wait a bit more for the kill to take effect
+			select {
+			case <-done:
+				m.logger.Info().Msg("Rclone process killed successfully")
+			case <-time.After(5 * time.Second):
+				m.logger.Error().Msg("Process may still be running after kill")
+			}
+		}
+	}
+
+	// Clean up any remaining mount directories
+	cfg := config.Get()
+	if cfg.Rclone.MountPath != "" {
+		m.cleanupMountDirectories(cfg.Rclone.MountPath)
+	}
+
+	m.serverStarted = false
+	m.logger.Info().Msg("Rclone RC server stopped")
+	return nil
+}
+
+// cleanupMountDirectories removes empty mount directories
+func (m *Manager) cleanupMountDirectories(_ string) {
+	m.mountsMutex.RLock()
+	defer m.mountsMutex.RUnlock()
+
+	for _, mount := range m.mounts {
+		if mount.LocalPath != "" {
+			// Try to remove the directory if it's empty
+			if err := os.Remove(mount.LocalPath); err == nil {
+				m.logger.Debug().Str("path", mount.LocalPath).Msg("Removed empty mount directory")
+			}
+			// Don't log errors here as the directory might not be empty, which is fine
+		}
+	}
+}
+
+// waitForServer waits for the RC server to become available
+func (m *Manager) waitForServer() {
+	maxAttempts := 30
+	for i := 0; i < maxAttempts; i++ {
+		if m.ctx.Err() != nil {
+			return
+		}
+
+		if m.pingServer() {
+			m.logger.Info().Msg("Rclone RC server is ready")
+			return
+		}
+
+		time.Sleep(time.Second)
+	}
+
+	m.logger.Error().Msg("Rclone RC server not responding - mount operations will be disabled")
+}
+
+// pingServer checks if the RC server is responding
+func (m *Manager) pingServer() bool {
+	req := RCRequest{Command: "core/version"}
+	_, err := m.makeRequest(req, true)
+	return err == nil
+}
+
+func (m *Manager) makeRequest(req RCRequest, close bool) (*http.Response, error) {
+	reqBody, err := json.Marshal(req.Args)
+	if err != nil {
+		return nil, fmt.Errorf("failed to marshal request: %w", err)
+	}
+
+	url := fmt.Sprintf("http://localhost:%s/%s", m.rcPort, req.Command)
+	httpReq, err := http.NewRequestWithContext(m.ctx, "POST", url, bytes.NewBuffer(reqBody))
+	if err != nil {
+		return nil, fmt.Errorf("failed to create request: %w", err)
+	}
+
+	httpReq.Header.Set("Content-Type", "application/json")
+
+	resp, err := m.httpClient.Do(httpReq)
+	if err != nil {
+		return nil, fmt.Errorf("failed to make request: %w", err)
+	}
+
+	if resp.StatusCode != http.StatusOK {
+		// Read the response body to get more details
+		defer resp.Body.Close()
+		var errorResp RCResponse
+		if err := json.NewDecoder(resp.Body).Decode(&errorResp); err != nil {
+			return nil, fmt.Errorf("request failed with status %s, but could not decode error response: %w", resp.Status, err)
+		}
+		if errorResp.Error != "" {
+			return nil, fmt.Errorf("%s", errorResp.Error)
+		} else {
+			return nil, fmt.Errorf("request failed with status %s and no error message", resp.Status)
+		}
+	}
+
+	if close {
+		defer func() {
+			if err := resp.Body.Close(); err != nil {
+				m.logger.Debug().Err(err).Msg("Failed to close response body")
+			}
+		}()
+	}
+
+	return resp, nil
+}
+
+// IsReady returns true if the RC server is ready
+func (m *Manager) IsReady() bool {
+	select {
+	case <-m.serverReady:
+		return true
+	default:
+		return false
+	}
+}
+
+// WaitForReady waits for the RC server to be ready
+func (m *Manager) WaitForReady(timeout time.Duration) error {
+	select {
+	case <-m.serverReady:
+		return nil
+	case <-time.After(timeout):
+		return fmt.Errorf("timeout waiting for rclone RC server to be ready")
+	case <-m.ctx.Done():
+		return m.ctx.Err()
+	}
+}
+
+func (m *Manager) GetLogger() zerolog.Logger {
+	return m.logger
+}

pkg/rclone/mount.go

@@ -0,0 +1,120 @@
+package rclone
+
+import (
+	"context"
+	"fmt"
+	"github.com/rs/zerolog"
+	"github.com/sirrobot01/decypharr/internal/config"
+	"net/url"
+	"path/filepath"
+)
+
+// Mount represents a mount using the rclone RC client
+type Mount struct {
+	Provider  string
+	LocalPath string
+	WebDAVURL string
+	logger    zerolog.Logger
+	rcManager *Manager
+}
+
+// NewMount creates a new RC-based mount
+func NewMount(provider, webdavURL string, rcManager *Manager) *Mount {
+	cfg := config.Get()
+	mountPath := filepath.Join(cfg.Rclone.MountPath, provider)
+
+	_url, err := url.JoinPath(webdavURL, provider)
+	if err != nil {
+		_url = fmt.Sprintf("%s/%s", webdavURL, provider)
+	}
+
+	return &Mount{
+		Provider:  provider,
+		LocalPath: mountPath,
+		WebDAVURL: _url,
+		rcManager: rcManager,
+		logger:    rcManager.GetLogger(),
+	}
+}
+
+// Mount creates the mount using rclone RC
+func (m *Mount) Mount(ctx context.Context) error {
+	if m.rcManager == nil {
+		return fmt.Errorf("rclone manager is not available")
+	}
+
+	// Check if already mounted
+	if m.rcManager.IsMounted(m.Provider) {
+		m.logger.Info().Msgf("Mount %s is already mounted at %s", m.Provider, m.LocalPath)
+		return nil
+	}
+
+	m.logger.Info().
+		Str("provider", m.Provider).
+		Str("webdav_url", m.WebDAVURL).
+		Str("mount_path", m.LocalPath).
+		Msg("Creating mount via RC")
+
+	if err := m.rcManager.Mount(m.Provider, m.WebDAVURL); err != nil {
+		m.logger.Error().Str("provider", m.Provider).Msg("Mount operation failed")
+		return fmt.Errorf("mount failed for %s", m.Provider)
+	}
+
+	m.logger.Info().Msgf("Successfully mounted %s WebDAV at %s via RC", m.Provider, m.LocalPath)
+	return nil
+}
+
+// Unmount removes the mount using rclone RC
+func (m *Mount) Unmount() error {
+	if m.rcManager == nil {
+		m.logger.Warn().Msg("Rclone manager is not available, skipping unmount")
+		return nil
+	}
+
+	if !m.rcManager.IsMounted(m.Provider) {
+		m.logger.Info().Msgf("Mount %s is not mounted, skipping unmount", m.Provider)
+		return nil
+	}
+
+	m.logger.Info().Str("provider", m.Provider).Msg("Unmounting via RC")
+
+	if err := m.rcManager.Unmount(m.Provider); err != nil {
+		return fmt.Errorf("failed to unmount %s via RC: %w", m.Provider, err)
+	}
+
+	m.logger.Info().Msgf("Successfully unmounted %s", m.Provider)
+	return nil
+}
+
+// IsMounted checks if the mount is active via RC
+func (m *Mount) IsMounted() bool {
+	if m.rcManager == nil {
+		return false
+	}
+	return m.rcManager.IsMounted(m.Provider)
+}
+
+// RefreshDir refreshes directories in the mount
+func (m *Mount) RefreshDir(dirs []string) error {
+	if m.rcManager == nil {
+		return fmt.Errorf("rclone manager is not available")
+	}
+
+	if !m.IsMounted() {
+		return fmt.Errorf("provider %s not properly mounted. Skipping refreshes", m.Provider)
+	}
+
+	if err := m.rcManager.RefreshDir(m.Provider, dirs); err != nil {
+		return fmt.Errorf("failed to refresh directories for %s: %w", m.Provider, err)
+	}
+
+	return nil
+}
+
+// GetMountInfo returns mount information
+func (m *Mount) GetMountInfo() (*MountInfo, bool) {
+	if m.rcManager == nil {
+		return nil, false
+	}
+	return m.rcManager.GetMountInfo(m.Provider)
+}

pkg/rclone/stats.go

@@ -0,0 +1,184 @@
+package rclone
+
+import (
+	"encoding/json"
+	"fmt"
+)
+
+type TransferringStat struct {
+	Bytes    int64   `json:"bytes"`
+	ETA      int64   `json:"eta"`
+	Name     string  `json:"name"`
+	Speed    float64 `json:"speed"`
+	Size     int64   `json:"size"`
+	Progress float64 `json:"progress"`
+}
+
+type VersionResponse struct {
+	Arch    string `json:"arch"`
+	Version string `json:"version"`
+	OS      string `json:"os"`
+}
+
+type CoreStatsResponse struct {
+	Bytes          int64              `json:"bytes"`
+	Checks         int                `json:"checks"`
+	DeletedDirs    int                `json:"deletedDirs"`
+	Deletes        int                `json:"deletes"`
+	ElapsedTime    float64            `json:"elapsedTime"`
+	Errors         int                `json:"errors"`
+	Eta            int                `json:"eta"`
+	Speed          float64            `json:"speed"`
+	TotalBytes     int64              `json:"totalBytes"`
+	TotalChecks    int                `json:"totalChecks"`
+	TotalTransfers int                `json:"totalTransfers"`
+	TransferTime   float64            `json:"transferTime"`
+	Transfers      int                `json:"transfers"`
+	Transferring   []TransferringStat `json:"transferring,omitempty"`
+}
+
+type MemoryStats struct {
+	Sys        int   `json:"Sys"`
+	TotalAlloc int64 `json:"TotalAlloc"`
+}
+
+type BandwidthStats struct {
+	BytesPerSecond int64  `json:"bytesPerSecond"`
+	Rate           string `json:"rate"`
+}
+
+// Stats represents rclone statistics
+type Stats struct {
+	Enabled   bool                  `json:"enabled"`
+	Ready     bool                  `json:"server_ready"`
+	Core      CoreStatsResponse     `json:"core"`
+	Memory    MemoryStats           `json:"memory"`
+	Mount     map[string]*MountInfo `json:"mount"`
+	Bandwidth BandwidthStats        `json:"bandwidth"`
+	Version   VersionResponse       `json:"version"`
+}
+
+// GetStats retrieves statistics from the rclone RC server
+func (m *Manager) GetStats() (*Stats, error) {
+	stats := &Stats{}
+	stats.Ready = m.IsReady()
+	stats.Enabled = true
+
+	coreStats, err := m.GetCoreStats()
+	if err == nil {
+		stats.Core = *coreStats
+	}
+
+	// Get memory usage
+	memStats, err := m.GetMemoryUsage()
+	if err == nil {
+		stats.Memory = *memStats
+	}
+	// Get bandwidth stats
+	bwStats, err := m.GetBandwidthStats()
+	if err == nil {
+		stats.Bandwidth = *bwStats
+	} else {
+		fmt.Println("Failed to get rclone stats", err)
+	}
+
+	// Get version info
+	versionResp, err := m.GetVersion()
+	if err == nil {
+		stats.Version = *versionResp
+	}
+
+	// Get mount info
+	stats.Mount = m.GetAllMounts()
+	return stats, nil
+}
+
+func (m *Manager) GetCoreStats() (*CoreStatsResponse, error) {
+	if !m.IsReady() {
+		return nil, fmt.Errorf("rclone RC server not ready")
+	}
+
+	req := RCRequest{
+		Command: "core/stats",
+	}
+
+	resp, err := m.makeRequest(req, false)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get core stats: %w", err)
+	}
+	defer resp.Body.Close()
+
+	var coreStats CoreStatsResponse
+	if err := json.NewDecoder(resp.Body).Decode(&coreStats); err != nil {
+		return nil, fmt.Errorf("failed to decode core stats response: %w", err)
+	}
+	return &coreStats, nil
+}
+
+// GetMemoryUsage returns memory usage statistics
+func (m *Manager) GetMemoryUsage() (*MemoryStats, error) {
+	if !m.IsReady() {
+		return nil, fmt.Errorf("rclone RC server not ready")
+	}
+
+	req := RCRequest{
+		Command: "core/memstats",
+	}
+
+	resp, err := m.makeRequest(req, false)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get memory stats: %w", err)
+	}
+	defer resp.Body.Close()
+	var memStats MemoryStats
+
+	if err := json.NewDecoder(resp.Body).Decode(&memStats); err != nil {
+		return nil, fmt.Errorf("failed to decode memory stats response: %w", err)
+	}
+	return &memStats, nil
+}
+
+// GetBandwidthStats returns bandwidth usage for all transfers
+func (m *Manager) GetBandwidthStats() (*BandwidthStats, error) {
+	if !m.IsReady() {
+		return nil, fmt.Errorf("rclone RC server not ready")
+	}
+
+	req := RCRequest{
+		Command: "core/bwlimit",
+	}
+
+	resp, err := m.makeRequest(req, false)
+	if err != nil {
+		// Bandwidth stats might not be available, return empty
+		return nil, nil
+	}
+	defer resp.Body.Close()
+	var bwStats BandwidthStats
+	if err := json.NewDecoder(resp.Body).Decode(&bwStats); err != nil {
+		return nil, fmt.Errorf("failed to decode bandwidth stats response: %w", err)
+	}
+	return &bwStats, nil
+}
+
+// GetVersion returns rclone version information
+func (m *Manager) GetVersion() (*VersionResponse, error) {
+	if !m.IsReady() {
+		return nil, fmt.Errorf("rclone RC server not ready")
+	}
+
+	req := RCRequest{
+		Command: "core/version",
+	}
+
+	resp, err := m.makeRequest(req, false)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get version: %w", err)
+	}
+	defer resp.Body.Close()
+	var versionResp VersionResponse
+	if err := json.NewDecoder(resp.Body).Decode(&versionResp); err != nil {
+		return nil, fmt.Errorf("failed to decode version response: %w", err)
+	}
+	return &versionResp, nil
+}

pkg/repair/misc.go

@@ -88,6 +88,8 @@ func collectFiles(media arr.Content) map[string][]arr.ContentFile {
 func (r *Repair) checkTorrentFiles(torrentPath string, files []arr.ContentFile, clients map[string]types.Client, caches map[string]*store.Cache) []arr.ContentFile {
 	brokenFiles := make([]arr.ContentFile, 0)
 
+	emptyFiles := make([]arr.ContentFile, 0)
+
 	r.logger.Debug().Msgf("Checking %s", torrentPath)
 
 	// Get the debrid client
@@ -95,17 +97,18 @@ func (r *Repair) checkTorrentFiles(torrentPath string, files []arr.ContentFile,
 	debridName := r.findDebridForPath(dir, clients)
 	if debridName == "" {
 		r.logger.Debug().Msgf("No debrid found for %s. Skipping", torrentPath)
-		return files // Return all files as broken if no debrid found
+		return emptyFiles
 	}
 
 	cache, ok := caches[debridName]
 	if !ok {
 		r.logger.Debug().Msgf("No cache found for %s. Skipping", debridName)
-		return files // Return all files as broken if no cache found
+		return emptyFiles
 	}
 	tor, ok := r.torrentsMap.Load(debridName)
 	if !ok {
 		r.logger.Debug().Msgf("Could not find torrents for %s. Skipping", debridName)
+		return emptyFiles
 	}
 
 	torrentsMap := tor.(map[string]store.CachedTorrent)
@@ -114,8 +117,9 @@ func (r *Repair) checkTorrentFiles(torrentPath string, files []arr.ContentFile,
 	torrentName := filepath.Clean(filepath.Base(torrentPath))
 	torrent, ok := torrentsMap[torrentName]
 	if !ok {
-		r.logger.Debug().Msgf("No torrent found for %s. Skipping", torrentName)
-		return files // Return all files as broken if torrent not found
+		r.logger.Debug().Msgf("Can't find torrent %s in %s. Marking as broken", torrentName, debridName)
+		// Return all files as broken
+		return files
 	}
 
 	// Batch check files

pkg/repair/repair.go

@@ -534,17 +534,21 @@ func (r *Repair) checkMountUp(media []arr.Content) error {
 	if len(files) == 0 {
 		return fmt.Errorf("no files found in media %s", firstMedia.Title)
 	}
-	firstFile := files[0]
-	symlinkPath := getSymlinkTarget(firstFile.Path)
-
-	if symlinkPath == "" {
-		return fmt.Errorf("no symlink target found for %s", firstFile.Path)
-	}
-	r.logger.Debug().Msgf("Checking symlink parent directory for %s", symlinkPath)
-
-	parentSymlink := filepath.Dir(filepath.Dir(symlinkPath)) // /mnt/zurg/torrents/movie/movie.mkv -> /mnt/zurg/torrents
-	if _, err := os.Stat(parentSymlink); os.IsNotExist(err) {
-		return fmt.Errorf("parent directory %s not accessible for %s", parentSymlink, firstFile.Path)
+	for _, file := range files {
+		if _, err := os.Stat(file.Path); os.IsNotExist(err) {
+			// If the file does not exist, we can't check the symlink target
+			r.logger.Debug().Msgf("File %s does not exist, skipping repair", file.Path)
+			return fmt.Errorf("file %s does not exist, skipping repair", file.Path)
+		}
+		// Get the symlink target
+		symlinkPath := getSymlinkTarget(file.Path)
+		if symlinkPath != "" {
+			r.logger.Trace().Msgf("Found symlink target for %s: %s", file.Path, symlinkPath)
+			if _, err := os.Stat(symlinkPath); os.IsNotExist(err) {
+				r.logger.Debug().Msgf("Symlink target %s does not exist, skipping repair", symlinkPath)
+				return fmt.Errorf("symlink target %s does not exist for %s. skipping repair", symlinkPath, file.Path)
+			}
+		}
 	}
 	return nil
 }

pkg/server/debug.go

@@ -118,5 +118,25 @@ func (s *Server) handleStats(w http.ResponseWriter, r *http.Request) {
 		profiles = append(profiles, profile)
 	}
 	stats["debrids"] = profiles
+
+	// Add rclone stats if available
+	if rcManager := store.Get().RcloneManager(); rcManager != nil && rcManager.IsReady() {
+		rcStats, err := rcManager.GetStats()
+		if err != nil {
+			s.logger.Error().Err(err).Msg("Failed to get rclone stats")
+			stats["rclone"] = map[string]interface{}{
+				"enabled":      true,
+				"server_ready": false,
+			}
+		} else {
+			stats["rclone"] = rcStats
+		}
+	} else {
+		stats["rclone"] = map[string]interface{}{
+			"enabled":      false,
+			"server_ready": false,
+		}
+	}
+
 	request.JSONResponse(w, stats, http.StatusOK)
 }

pkg/server/server.go

@@ -11,7 +11,6 @@ import (
 	"github.com/sirrobot01/decypharr/internal/logger"
 	"io"
 	"net/http"
-	"net/url"
 	"os"
 )
 
@@ -30,10 +29,6 @@ func New(handlers map[string]http.Handler) *Server {
 	s := &Server{
 		logger: l,
 	}
-	staticPath, _ := url.JoinPath(cfg.URLBase, "static")
-	r.Handle(staticPath+"/*",
-		http.StripPrefix(staticPath, http.FileServer(http.Dir("static"))),
-	)
 
 	r.Route(cfg.URLBase, func(r chi.Router) {
 		for pattern, handler := range handlers {

pkg/store/downloader.go

@@ -2,13 +2,14 @@ package store
 
 import (
 	"fmt"
-	"github.com/sirrobot01/decypharr/pkg/debrid/types"
 	"net/http"
 	"os"
 	"path/filepath"
 	"sync"
 	"time"
 
+	"github.com/sirrobot01/decypharr/pkg/debrid/types"
+
 	"github.com/cavaliergopher/grab/v3"
 	"github.com/sirrobot01/decypharr/internal/utils"
 )
@@ -152,7 +153,7 @@ func (s *Store) downloadFiles(torrent *Torrent, debridTorrent *types.Torrent, pa
 func (s *Store) processSymlink(torrent *Torrent, debridTorrent *types.Torrent) (string, error) {
 	files := debridTorrent.Files
 	if len(files) == 0 {
-		return "", fmt.Errorf("no video files found")
+		return "", fmt.Errorf("no valid files found")
 	}
 	s.logger.Info().Msgf("Checking symlinks for %d files...", len(files))
 	rCloneBase := debridTorrent.MountPath
@@ -212,7 +213,7 @@ func (s *Store) processSymlink(torrent *Torrent, debridTorrent *types.Torrent) (
 				if _, err := os.Stat(fullFilePath); !os.IsNotExist(err) {
 					fileSymlinkPath := filepath.Join(torrentSymlinkPath, file.Name)
 					if err := os.Symlink(fullFilePath, fileSymlinkPath); err != nil && !os.IsExist(err) {
-						s.logger.Debug().Msgf("Failed to create symlink: %s: %v", fileSymlinkPath, err)
+						s.logger.Warn().Msgf("Failed to create symlink: %s: %v", fileSymlinkPath, err)
 					} else {
 						filePaths = append(filePaths, fileSymlinkPath)
 						delete(pending, path)

pkg/store/store.go

@@ -8,6 +8,7 @@ import (
 	"github.com/sirrobot01/decypharr/internal/logger"
 	"github.com/sirrobot01/decypharr/pkg/arr"
 	"github.com/sirrobot01/decypharr/pkg/debrid"
+	"github.com/sirrobot01/decypharr/pkg/rclone"
 	"github.com/sirrobot01/decypharr/pkg/repair"
 	"sync"
 	"time"
@@ -17,6 +18,7 @@ type Store struct {
 	repair             *repair.Repair
 	arr                *arr.Storage
 	debrid             *debrid.Storage
+	rcloneManager      *rclone.Manager
 	importsQueue       *ImportQueue // Queued import requests(probably from too_many_active_downloads)
 	torrents           *TorrentStorage
 	logger             zerolog.Logger
@@ -34,15 +36,24 @@ var (
 // Get returns the singleton instance
 func Get() *Store {
 	once.Do(func() {
-		arrs := arr.NewStorage()
-		deb := debrid.NewStorage()
 		cfg := config.Get()
 		qbitCfg := cfg.QBitTorrent
 
+		// Create rclone manager if enabled
+		var rcManager *rclone.Manager
+		if cfg.Rclone.Enabled {
+			rcManager = rclone.NewManager()
+		}
+
+		// Create services with dependencies
+		arrs := arr.NewStorage()
+		deb := debrid.NewStorage(rcManager)
+
 		instance = &Store{
 			repair:            repair.New(arrs, deb),
 			arr:               arrs,
 			debrid:            deb,
+			rcloneManager:     rcManager,
 			torrents:          newTorrentStorage(cfg.TorrentsFile()),
 			logger:            logger.Default(), // Use default logger [decypharr]
 			refreshInterval:   time.Duration(cmp.Or(qbitCfg.RefreshInterval, 10)) * time.Minute,
@@ -66,11 +77,17 @@ func Reset() {
 			instance.debrid.Reset()
 		}
 
+		if instance.rcloneManager != nil {
+			instance.rcloneManager.Stop()
+		}
+
 		if instance.importsQueue != nil {
 			instance.importsQueue.Close()
 		}
-
-		close(instance.downloadSemaphore)
+		if instance.downloadSemaphore != nil {
+			// Close the semaphore channel to
+			close(instance.downloadSemaphore)
+		}
 	}
 	once = sync.Once{}
 	instance = nil
@@ -88,3 +105,6 @@ func (s *Store) Repair() *repair.Repair {
 func (s *Store) Torrents() *TorrentStorage {
 	return s.torrents
 }
+func (s *Store) RcloneManager() *rclone.Manager {
+	return s.rcloneManager
+}

pkg/store/torrent.go

@@ -5,13 +5,15 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"math"
+	"os"
+	"path/filepath"
+	"time"
+
 	"github.com/sirrobot01/decypharr/internal/request"
 	"github.com/sirrobot01/decypharr/internal/utils"
 	debridTypes "github.com/sirrobot01/decypharr/pkg/debrid"
 	"github.com/sirrobot01/decypharr/pkg/debrid/types"
-	"os"
-	"path/filepath"
-	"time"
 )
 
 func (s *Store) AddTorrent(ctx context.Context, importReq *ImportRequest) error {
@@ -63,6 +65,11 @@ func (s *Store) processFiles(torrent *Torrent, debridTorrent *types.Torrent, imp
 		s.logger.Debug().Msgf("%s <- (%s) Download Progress: %.2f%%", debridTorrent.Debrid, debridTorrent.Name, debridTorrent.Progress)
 		dbT, err := client.CheckStatus(debridTorrent)
 		if err != nil {
+			s.logger.Error().
+				Str("torrent_id", debridTorrent.Id).
+				Str("torrent_name", debridTorrent.Name).
+				Err(err).
+				Msg("Error checking torrent status")
 			if dbT != nil && dbT.Id != "" {
 				// Delete the torrent if it was not downloaded
 				go func() {
@@ -207,6 +214,9 @@ func (s *Store) partialTorrentUpdate(t *Torrent, debridTorrent *types.Torrent) *
 	}
 	totalSize := debridTorrent.Bytes
 	progress := (cmp.Or(debridTorrent.Progress, 0.0)) / 100.0
+	if math.IsNaN(progress) || math.IsInf(progress, 0) {
+		progress = 0
+	}
 	sizeCompleted := int64(float64(totalSize) * progress)
 
 	var speed int64

pkg/web/api.go

@@ -3,6 +3,7 @@ package web
 import (
 	"fmt"
 	"github.com/sirrobot01/decypharr/pkg/store"
+	"golang.org/x/crypto/bcrypt"
 	"net/http"
 	"strings"
 	"time"
@@ -214,7 +215,26 @@ func (wb *Web) handleGetConfig(w http.ResponseWriter, r *http.Request) {
 	for _, a := range unique {
 		cfg.Arrs = append(cfg.Arrs, a)
 	}
-	request.JSONResponse(w, cfg, http.StatusOK)
+
+	// Create response with API token info
+	type ConfigResponse struct {
+		*config.Config
+		APIToken     string `json:"api_token,omitempty"`
+		AuthUsername string `json:"auth_username,omitempty"`
+	}
+
+	response := &ConfigResponse{Config: cfg}
+
+	// Add API token and auth information
+	auth := cfg.GetAuth()
+	if auth != nil {
+		if auth.APIToken != "" {
+			response.APIToken = auth.APIToken
+		}
+		response.AuthUsername = auth.Username
+	}
+
+	request.JSONResponse(w, response, http.StatusOK)
 }
 
 func (wb *Web) handleUpdateConfig(w http.ResponseWriter, r *http.Request) {
@@ -247,6 +267,7 @@ func (wb *Web) handleUpdateConfig(w http.ResponseWriter, r *http.Request) {
 
 	// Update Repair config
 	currentConfig.Repair = updatedConfig.Repair
+	currentConfig.Rclone = updatedConfig.Rclone
 
 	// Update Debrids
 	if len(updatedConfig.Debrids) > 0 {
@@ -359,3 +380,103 @@ func (wb *Web) handleStopRepairJob(w http.ResponseWriter, r *http.Request) {
 	}
 	w.WriteHeader(http.StatusOK)
 }
+
+func (wb *Web) handleRefreshAPIToken(w http.ResponseWriter, _ *http.Request) {
+	token, err := wb.refreshAPIToken()
+	if err != nil {
+		wb.logger.Error().Err(err).Msg("Failed to refresh API token")
+		http.Error(w, "Failed to refresh token: "+err.Error(), http.StatusInternalServerError)
+		return
+	}
+
+	request.JSONResponse(w, map[string]interface{}{
+		"token":   token,
+		"message": "API token refreshed successfully",
+	}, http.StatusOK)
+}
+
+func (wb *Web) handleUpdateAuth(w http.ResponseWriter, r *http.Request) {
+	var req struct {
+		Username        string `json:"username"`
+		Password        string `json:"password"`
+		ConfirmPassword string `json:"confirm_password"`
+	}
+	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
+		http.Error(w, err.Error(), http.StatusBadRequest)
+		return
+	}
+
+	cfg := config.Get()
+	auth := cfg.GetAuth()
+	if auth == nil {
+		auth = &config.Auth{}
+	}
+
+	// Check if trying to disable authentication (both empty)
+	if req.Username == "" && req.Password == "" {
+		// Disable authentication
+		cfg.UseAuth = false
+		auth.Username = ""
+		auth.Password = ""
+		if err := cfg.SaveAuth(auth); err != nil {
+			wb.logger.Error().Err(err).Msg("Failed to save auth config")
+			http.Error(w, "Failed to save authentication settings", http.StatusInternalServerError)
+			return
+		}
+		if err := cfg.Save(); err != nil {
+			wb.logger.Error().Err(err).Msg("Failed to save config")
+			http.Error(w, "Failed to save configuration", http.StatusInternalServerError)
+			return
+		}
+
+		request.JSONResponse(w, map[string]string{
+			"message": "Authentication disabled successfully",
+		}, http.StatusOK)
+		return
+	}
+
+	// Validate required fields
+	if req.Username == "" {
+		http.Error(w, "Username is required", http.StatusBadRequest)
+		return
+	}
+	if req.Password == "" {
+		http.Error(w, "Password is required", http.StatusBadRequest)
+		return
+	}
+	if req.Password != req.ConfirmPassword {
+		http.Error(w, "Passwords do not match", http.StatusBadRequest)
+		return
+	}
+
+	// Hash the password
+	hashedPassword, err := bcrypt.GenerateFromPassword([]byte(req.Password), bcrypt.DefaultCost)
+	if err != nil {
+		wb.logger.Error().Err(err).Msg("Failed to hash password")
+		http.Error(w, "Failed to process password", http.StatusInternalServerError)
+		return
+	}
+
+	// Update auth settings
+	auth.Username = req.Username
+	auth.Password = string(hashedPassword)
+	cfg.UseAuth = true
+
+	// Save auth config
+	if err := cfg.SaveAuth(auth); err != nil {
+		wb.logger.Error().Err(err).Msg("Failed to save auth config")
+		http.Error(w, "Failed to save authentication settings", http.StatusInternalServerError)
+		return
+	}
+
+	// Save main config
+	if err := cfg.Save(); err != nil {
+		wb.logger.Error().Err(err).Msg("Failed to save config")
+		http.Error(w, "Failed to save configuration", http.StatusInternalServerError)
+		return
+	}
+
+	request.JSONResponse(w, map[string]string{
+		"message": "Authentication settings updated successfully",
+	}, http.StatusOK)
+}

pkg/web/assets/images/favicon/site.webmanifest

@@ -0,0 +1 @@
+{"name":"","short_name":"","icons":[{"src":"/images/favicon/android-chrome-192x192.png","sizes":"192x192","type":"image/png"},{"src":"/images/favicon/android-chrome-512x512.png","sizes":"512x512","type":"image/png"}],"theme_color":"#ffffff","background_color":"#ffffff","display":"standalone"}

pkg/web/assets/js/common.js

@@ -0,0 +1,721 @@
+// Common utilities and functions
+class DecypharrUtils {
+    constructor() {
+        this.urlBase = window.urlBase || '';
+        this.toastContainer = null;
+        this.init();
+    }
+
+    init() {
+        this.setupToastSystem();
+        this.setupThemeToggle();
+        this.setupPasswordToggles();
+        this.setupVersionInfo();
+        this.setupGlobalEventListeners();
+        this.createToastContainer();
+    }
+
+    // Create toast container if it doesn't exist
+    createToastContainer() {
+        let container = document.querySelector('.toast-container');
+        if (!container) {
+            container = document.createElement('div');
+            container.className = 'toast-container fixed bottom-4 right-4 z-50 space-y-2';
+            document.body.appendChild(container);
+        }
+        this.toastContainer = container;
+    }
+
+    // Setup toast system
+    setupToastSystem() {
+        // Add toast CSS styles
+        this.addToastStyles();
+
+        // Global toast handler
+        window.addEventListener('error', (e) => {
+            console.error('Global error:', e.error);
+            this.createToast(`Unexpected error: ${e.error?.message || 'Unknown error'}`, 'error');
+        });
+
+        // Handle unhandled promise rejections
+        window.addEventListener('unhandledrejection', (e) => {
+            console.error('Unhandled promise rejection:', e.reason);
+            this.createToast(`Promise rejected: ${e.reason?.message || 'Unknown error'}`, 'error');
+        });
+    }
+
+    // Add toast styles to document
+    addToastStyles() {
+        if (document.getElementById('toast-styles')) return;
+
+        const style = document.createElement('style');
+        style.id = 'toast-styles';
+        style.textContent = `
+            @keyframes toastSlideIn {
+                from {
+                    opacity: 0;
+                    transform: translateX(100%);
+                }
+                to {
+                    opacity: 1;
+                    transform: translateX(0);
+                }
+            }
+
+            @keyframes toastSlideOut {
+                from {
+                    opacity: 1;
+                    transform: translateX(0);
+                }
+                to {
+                    opacity: 0;
+                    transform: translateX(100%);
+                }
+            }
+
+            .toast-container .alert {
+                animation: toastSlideIn 0.3s ease-out;
+                max-width: 400px;
+                word-wrap: break-word;
+            }
+
+            .toast-container .alert.toast-closing {
+                animation: toastSlideOut 0.3s ease-in forwards;
+            }
+
+            @media (max-width: 640px) {
+                .toast-container {
+                    left: 1rem;
+                    right: 1rem;
+                    bottom: 1rem;
+                }
+                
+                .toast-container .alert {
+                    max-width: none;
+                }
+            }
+        `;
+        document.head.appendChild(style);
+    }
+
+    // URL joining utility
+    joinURL(base, path) {
+        if (!base.endsWith('/')) base += '/';
+        if (path.startsWith('/')) path = path.substring(1);
+        return base + path;
+    }
+
+    // Enhanced fetch wrapper
+    async fetcher(endpoint, options = {}) {
+        const url = this.joinURL(this.urlBase, endpoint);
+
+        // Handle FormData - don't set Content-Type for FormData
+        const defaultOptions = {
+            headers: {},
+            ...options
+        };
+
+        // Only set Content-Type if not FormData
+        if (!(options.body instanceof FormData)) {
+            defaultOptions.headers['Content-Type'] = 'application/json';
+        }
+
+        // Merge headers
+        defaultOptions.headers = {
+            ...defaultOptions.headers,
+            ...options.headers
+        };
+
+        try {
+            const response = await fetch(url, defaultOptions);
+
+            // Add loading state management
+            if (options.loadingButton) {
+                this.setButtonLoading(options.loadingButton, false);
+            }
+
+            return response;
+        } catch (error) {
+            if (options.loadingButton) {
+                this.setButtonLoading(options.loadingButton, false);
+            }
+            throw error;
+        }
+    }
+
+    // Enhanced toast system
+    createToast(message, type = 'success', duration = null) {
+        const toastTimeouts = {
+            success: 5000,
+            warning: 10000,
+            error: 15000,
+            info: 7000
+        };
+
+        type = ['success', 'warning', 'error', 'info'].includes(type) ? type : 'success';
+        duration = duration || toastTimeouts[type];
+
+        // Ensure toast container exists
+        if (!this.toastContainer) {
+            this.createToastContainer();
+        }
+
+        const toastId = `toast-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
+
+        const alertTypeClass = {
+            success: 'alert-success',
+            warning: 'alert-warning',
+            error: 'alert-error',
+            info: 'alert-info'
+        };
+
+        const icons = {
+            success: '<path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zm3.707-9.293a1 1 0 00-1.414-1.414L9 10.586 7.707 9.293a1 1 0 00-1.414 1.414l2 2a1 1 0 001.414 0l4-4z" clip-rule="evenodd"></path>',
+            error: '<path fill-rule="evenodd" d="M18 10a8 8 0 11-16 0 8 8 0 0116 0zm-7 4a1 1 0 11-2 0 1 1 0 012 0zm-1-9a1 1 0 00-1 1v4a1 1 0 102 0V6a1 1 0 00-1-1z" clip-rule="evenodd"></path>',
+            warning: '<path fill-rule="evenodd" d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z" clip-rule="evenodd"></path>',
+            info: '<path fill-rule="evenodd" d="M18 10a8 8 0 11-16 0 8 8 0 0116 0zm-7-4a1 1 0 11-2 0 1 1 0 012 0zM9 9a1 1 0 000 2v3a1 1 0 001 1h1a1 1 0 100-2v-3a1 1 0 00-1-1H9z" clip-rule="evenodd"></path>'
+        };
+
+        const toastHtml = `
+            <div id="${toastId}" class="alert ${alertTypeClass[type]} shadow-lg mb-2">
+                <div class="flex items-start gap-3">
+                    <svg class="w-6 h-6 shrink-0" fill="currentColor" viewBox="0 0 20 20">
+                        ${icons[type]}
+                    </svg>
+                    <div class="flex-1">
+                        <span class="text-sm">${message.replace(/\n/g, '<br>')}</span>
+                    </div>
+                    <button class="btn btn-sm btn-ghost btn-circle" onclick="window.decypharrUtils.closeToast('${toastId}');">
+                        <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12"></path>
+                        </svg>
+                    </button>
+                </div>
+            </div>
+        `;
+
+        this.toastContainer.insertAdjacentHTML('beforeend', toastHtml);
+
+        // Auto-close toast
+        const timeoutId = setTimeout(() => this.closeToast(toastId), duration);
+
+        // Store timeout ID for manual closing
+        const toastElement = document.getElementById(toastId);
+        if (toastElement) {
+            toastElement.dataset.timeoutId = timeoutId;
+        }
+
+        return toastId;
+    }
+
+    closeToast(toastId) {
+        const toastElement = document.getElementById(toastId);
+        if (toastElement) {
+            // Clear auto-close timeout
+            if (toastElement.dataset.timeoutId) {
+                clearTimeout(parseInt(toastElement.dataset.timeoutId));
+            }
+
+            toastElement.classList.add('toast-closing');
+            setTimeout(() => {
+                if (toastElement.parentNode) {
+                    toastElement.remove();
+                }
+            }, 300);
+        }
+    }
+
+    // Close all toasts
+    closeAllToasts() {
+        const toasts = this.toastContainer?.querySelectorAll('.alert');
+        if (toasts) {
+            toasts.forEach(toast => {
+                if (toast.id) {
+                    this.closeToast(toast.id);
+                }
+            });
+        }
+    }
+
+    // Button loading state management
+    setButtonLoading(buttonElement, loading = true, originalText = null) {
+        if (typeof buttonElement === 'string') {
+            buttonElement = document.getElementById(buttonElement) || document.querySelector(buttonElement);
+        }
+
+        if (!buttonElement) return;
+
+        if (loading) {
+            buttonElement.disabled = true;
+            if (!buttonElement.dataset.originalText) {
+                buttonElement.dataset.originalText = originalText || buttonElement.innerHTML;
+            }
+            buttonElement.innerHTML = '<span class="loading loading-spinner loading-sm"></span>Processing...';
+            buttonElement.classList.add('loading-state');
+        } else {
+            buttonElement.disabled = false;
+            buttonElement.innerHTML = buttonElement.dataset.originalText || 'Submit';
+            buttonElement.classList.remove('loading-state');
+            delete buttonElement.dataset.originalText;
+        }
+    }
+
+    // Password field utilities
+    setupPasswordToggles() {
+        document.addEventListener('click', (e) => {
+            const toggleBtn = e.target.closest('.password-toggle-btn');
+            if (toggleBtn) {
+                e.preventDefault();
+                e.stopPropagation();
+
+                // Find the associated input field
+                const container = toggleBtn.closest('.password-toggle-container');
+                if (container) {
+                    const input = container.querySelector('input, textarea');
+                    const icon = toggleBtn.querySelector('i');
+                    if (input && icon) {
+                        this.togglePasswordField(input, icon);
+                    }
+                }
+            }
+        });
+    }
+
+    togglePasswordField(field, icon) {
+        if (!icon) return;
+
+        if (field.tagName.toLowerCase() === 'textarea') {
+            this.togglePasswordTextarea(field, icon);
+        } else {
+            this.togglePasswordInput(field, icon);
+        }
+    }
+
+    togglePasswordInput(field, icon) {
+        if (field.type === 'password') {
+            field.type = 'text';
+            icon.className = 'bi bi-eye-slash';
+        } else {
+            field.type = 'password';
+            icon.className = 'bi bi-eye';
+        }
+    }
+
+    togglePasswordTextarea(field, icon) {
+        const isHidden = field.style.webkitTextSecurity === 'disc' ||
+            field.style.webkitTextSecurity === '' ||
+            field.getAttribute('data-password-visible') !== 'true';
+
+        if (isHidden) {
+            field.style.webkitTextSecurity = 'none';
+            field.style.textSecurity = 'none';
+            field.setAttribute('data-password-visible', 'true');
+            icon.className = 'bi bi-eye-slash';
+        } else {
+            field.style.webkitTextSecurity = 'disc';
+            field.style.textSecurity = 'disc';
+            field.setAttribute('data-password-visible', 'false');
+            icon.className = 'bi bi-eye';
+        }
+    }
+
+    // Legacy methods for backward compatibility
+    togglePassword(fieldId) {
+        const field = document.getElementById(fieldId);
+        const button = field?.closest('.password-toggle-container')?.querySelector('.password-toggle-btn');
+        let icon = button.querySelector("i");
+        if (field && icon) {
+            this.togglePasswordField(field, icon);
+        }
+    }
+
+    // Theme management
+    setupThemeToggle() {
+        const themeToggle = document.getElementById('themeToggle');
+        const htmlElement = document.documentElement;
+
+        if (!themeToggle) return;
+
+        const setTheme = (theme) => {
+            htmlElement.setAttribute('data-theme', theme);
+            localStorage.setItem('theme', theme);
+            themeToggle.checked = theme === 'dark';
+
+            // Smooth theme transition
+            document.body.style.transition = 'background-color 0.3s ease, color 0.3s ease';
+            setTimeout(() => {
+                document.body.style.transition = '';
+            }, 300);
+
+            // Emit theme change event
+            window.dispatchEvent(new CustomEvent('themechange', { detail: { theme } }));
+        };
+
+        // Load saved theme
+        const savedTheme = localStorage.getItem('theme');
+        if (savedTheme) {
+            setTheme(savedTheme);
+        } else if (window.matchMedia?.('(prefers-color-scheme: dark)').matches) {
+            setTheme('dark');
+        } else {
+            setTheme('light');
+        }
+
+        // Theme toggle event
+        themeToggle.addEventListener('change', () => {
+            const currentTheme = htmlElement.getAttribute('data-theme');
+            setTheme(currentTheme === 'dark' ? 'light' : 'dark');
+        });
+
+        // Listen for system theme changes
+        if (window.matchMedia) {
+            window.matchMedia('(prefers-color-scheme: dark)').addEventListener('change', e => {
+                if (!localStorage.getItem('theme')) {
+                    setTheme(e.matches ? 'dark' : 'light');
+                }
+            });
+        }
+    }
+
+    // Version info
+    async setupVersionInfo() {
+        try {
+            const response = await this.fetcher('/version');
+            if (!response.ok) throw new Error('Failed to fetch version');
+
+            const data = await response.json();
+            const versionBadge = document.getElementById('version-badge');
+
+            if (versionBadge) {
+                versionBadge.innerHTML = `
+                    <a href="https://github.com/sirrobot01/decypharr/releases/tag/${data.version}" 
+                       target="_blank" 
+                       class="text-current hover:text-primary transition-colors">
+                        ${data.channel}-${data.version}
+                    </a>
+                `;
+
+                // Remove existing badge classes
+                versionBadge.classList.remove('badge-warning', 'badge-error', 'badge-ghost');
+
+                if (data.channel === 'beta') {
+                    versionBadge.classList.add('badge-warning');
+                } else if (data.channel === 'nightly') {
+                    versionBadge.classList.add('badge-error');
+                }
+            }
+        } catch (error) {
+            console.error('Error fetching version:', error);
+            const versionBadge = document.getElementById('version-badge');
+            if (versionBadge) {
+                versionBadge.textContent = 'Unknown';
+                versionBadge.classList.add('badge-ghost');
+            }
+        }
+    }
+
+    // Mobile navigation dropdown handler
+    setupMobileNavigation() {
+        const mobileMenuBtn = document.querySelector('.navbar-start .dropdown [role="button"]');
+        const mobileMenu = document.querySelector('.navbar-start .dropdown .dropdown-content');
+        const dropdown = document.querySelector('.navbar-start .dropdown');
+
+        if (!mobileMenuBtn || !mobileMenu || !dropdown) return;
+
+        let isOpen = false;
+
+        const openDropdown = () => {
+            if (!isOpen) {
+                dropdown.classList.add('dropdown-open');
+                mobileMenuBtn.setAttribute('aria-expanded', 'true');
+                isOpen = true;
+            }
+        };
+
+        const closeDropdown = () => {
+            if (isOpen) {
+                dropdown.classList.remove('dropdown-open');
+                mobileMenuBtn.setAttribute('aria-expanded', 'false');
+                isOpen = false;
+            }
+        };
+
+        const toggleDropdown = (e) => {
+            e.preventDefault();
+            e.stopPropagation();
+            
+            if (isOpen) {
+                closeDropdown();
+            } else {
+                openDropdown();
+            }
+        };
+
+        // Handle button clicks (both mouse and touch)
+        mobileMenuBtn.addEventListener('click', toggleDropdown);
+        mobileMenuBtn.addEventListener('touchend', (e) => {
+            e.preventDefault();
+            toggleDropdown(e);
+        });
+
+        // Close dropdown when clicking outside
+        document.addEventListener('click', (e) => {
+            if (isOpen && !dropdown.contains(e.target)) {
+                closeDropdown();
+            }
+        });
+
+        // Close dropdown when touching outside
+        document.addEventListener('touchend', (e) => {
+            if (isOpen && !dropdown.contains(e.target)) {
+                closeDropdown();
+            }
+        });
+
+        // Close dropdown when clicking menu items
+        mobileMenu.addEventListener('click', (e) => {
+            if (e.target.tagName === 'A') {
+                closeDropdown();
+            }
+        });
+
+        // Handle keyboard navigation
+        mobileMenuBtn.addEventListener('keydown', (e) => {
+            if (e.key === 'Enter' || e.key === ' ') {
+                e.preventDefault();
+                toggleDropdown(e);
+            } else if (e.key === 'Escape') {
+                closeDropdown();
+            }
+        });
+
+        // Set initial aria attributes
+        mobileMenuBtn.setAttribute('aria-expanded', 'false');
+        mobileMenuBtn.setAttribute('aria-haspopup', 'true');
+    }
+
+    // Global event listeners
+    setupGlobalEventListeners() {
+        // Setup mobile navigation dropdown
+        this.setupMobileNavigation();
+
+        // Smooth scroll for anchor links
+        document.addEventListener('click', (e) => {
+            const link = e.target.closest('a[href^="#"]');
+            if (link && link.getAttribute('href') !== '#') {
+                e.preventDefault();
+                const target = document.querySelector(link.getAttribute('href'));
+                if (target) {
+                    target.scrollIntoView({ behavior: 'smooth', block: 'start' });
+                }
+            }
+        });
+
+        // Enhanced form validation
+        document.addEventListener('invalid', (e) => {
+            e.target.classList.add('input-error');
+            setTimeout(() => e.target.classList.remove('input-error'), 3000);
+        }, true);
+
+        // Keyboard shortcuts
+        document.addEventListener('keydown', (e) => {
+            // Escape key closes modals and dropdowns
+            if (e.key === 'Escape') {
+                // Close modals
+                document.querySelectorAll('.modal[open]').forEach(modal => modal.close());
+
+                // Close dropdowns
+                document.querySelectorAll('.dropdown-open').forEach(dropdown => {
+                    dropdown.classList.remove('dropdown-open');
+                });
+
+                // Close context menus
+                document.querySelectorAll('.context-menu:not(.hidden)').forEach(menu => {
+                    menu.classList.add('hidden');
+                });
+            }
+
+            // Ctrl/Cmd + / for help (if help system exists)
+            if ((e.ctrlKey || e.metaKey) && e.key === '/') {
+                e.preventDefault();
+                this.showKeyboardShortcuts();
+            }
+        });
+
+        // Handle page visibility changes
+        document.addEventListener('visibilitychange', () => {
+            if (document.hidden) {
+                // Page is hidden - pause auto-refresh timers if any
+                window.dispatchEvent(new CustomEvent('pageHidden'));
+            } else {
+                // Page is visible - resume auto-refresh timers if any
+                window.dispatchEvent(new CustomEvent('pageVisible'));
+            }
+        });
+
+        // Handle online/offline status
+        window.addEventListener('online', () => {
+            this.createToast('Connection restored', 'success');
+        });
+
+        window.addEventListener('offline', () => {
+            this.createToast('Connection lost - working offline', 'warning');
+        });
+    }
+
+    // Show keyboard shortcuts modal
+    showKeyboardShortcuts() {
+        const shortcuts = [
+            { key: 'Esc', description: 'Close modals and dropdowns' },
+            { key: 'Ctrl + /', description: 'Show this help' },
+            { key: 'Ctrl + R', description: 'Refresh page' }
+        ];
+
+        const modal = document.createElement('dialog');
+        modal.className = 'modal';
+        modal.innerHTML = `
+            <div class="modal-box">
+                <form method="dialog">
+                    <button class="btn btn-sm btn-circle btn-ghost absolute right-2 top-2">✕</button>
+                </form>
+                <h3 class="font-bold text-lg mb-4">Keyboard Shortcuts</h3>
+                <div class="space-y-2">
+                    ${shortcuts.map(shortcut => `
+                        <div class="flex justify-between items-center">
+                            <span class="kbd kbd-sm">${shortcut.key}</span>
+                            <span class="text-sm">${shortcut.description}</span>
+                        </div>
+                    `).join('')}
+                </div>
+            </div>
+        `;
+
+        document.body.appendChild(modal);
+        modal.showModal();
+
+        modal.addEventListener('close', () => {
+            document.body.removeChild(modal);
+        });
+    }
+
+    // Utility methods
+    formatBytes(bytes) {
+        if (!bytes || bytes === 0) return '0 B';
+        const k = 1024;
+        const sizes = ['B', 'KB', 'MB', 'GB', 'TB', 'PB'];
+        const i = Math.floor(Math.log(bytes) / Math.log(k));
+        return `${parseFloat((bytes / Math.pow(k, i)).toFixed(2))} ${sizes[i]}`;
+    }
+
+    formatSpeed(speed) {
+        return `${this.formatBytes(speed)}/s`;
+    }
+
+    formatDuration(seconds) {
+        if (!seconds || seconds === 0) return '0s';
+
+        const units = [
+            { label: 'd', seconds: 86400 },
+            { label: 'h', seconds: 3600 },
+            { label: 'm', seconds: 60 },
+            { label: 's', seconds: 1 }
+        ];
+
+        const parts = [];
+        let remaining = seconds;
+
+        for (const unit of units) {
+            const count = Math.floor(remaining / unit.seconds);
+            if (count > 0) {
+                parts.push(`${count}${unit.label}`);
+                remaining %= unit.seconds;
+            }
+        }
+
+        return parts.slice(0, 2).join(' ') || '0s';
+    }
+
+    // Debounce function
+    debounce(func, wait, immediate = false) {
+        let timeout;
+        return function executedFunction(...args) {
+            const later = () => {
+                timeout = null;
+                if (!immediate) func(...args);
+            };
+            const callNow = immediate && !timeout;
+            clearTimeout(timeout);
+            timeout = setTimeout(later, wait);
+            if (callNow) func(...args);
+        };
+    }
+
+    // Throttle function
+    throttle(func, limit) {
+        let inThrottle;
+        return function(...args) {
+            if (!inThrottle) {
+                func.apply(this, args);
+                inThrottle = true;
+                setTimeout(() => inThrottle = false, limit);
+            }
+        };
+    }
+
+    // Copy to clipboard utility
+    async copyToClipboard(text) {
+        try {
+            await navigator.clipboard.writeText(text);
+            this.createToast('Copied to clipboard', 'success');
+            return true;
+        } catch (error) {
+            console.error('Failed to copy to clipboard:', error);
+            this.createToast('Failed to copy to clipboard', 'error');
+            return false;
+        }
+    }
+
+    // Validate URL
+    isValidUrl(string) {
+        try {
+            new URL(string);
+            return true;
+        } catch (_) {
+            return false;
+        }
+    }
+
+    // Escape HTML
+    escapeHtml(text) {
+        const map = {
+            '&': '&amp;',
+            '<': '&lt;',
+            '>': '&gt;',
+            '"': '&quot;',
+            "'": '&#039;'
+        };
+        return text ? text.replace(/[&<>"']/g, (m) => map[m]) : '';
+    }
+
+    // Get current theme
+    getCurrentTheme() {
+        return document.documentElement.getAttribute('data-theme') || 'light';
+    }
+
+    // Network status
+    isOnline() {
+        return navigator.onLine;
+    }
+}
+
+// Initialize utilities
+window.decypharrUtils = new DecypharrUtils();
+
+// Global functions for backward compatibility
+window.fetcher = (endpoint, options = {}) => window.decypharrUtils.fetcher(endpoint, options);
+window.createToast = (message, type, duration) => window.decypharrUtils.createToast(message, type, duration);
+
+// Export for ES6 modules if needed
+if (typeof module !== 'undefined' && module.exports) {
+    module.exports = DecypharrUtils;
+}

pkg/web/assets/js/dashboard.js

@@ -0,0 +1,559 @@
+// Dashboard functionality for torrent management
+class TorrentDashboard {
+    constructor() {
+        this.state = {
+            torrents: [],
+            selectedTorrents: new Set(),
+            categories: new Set(),
+            filteredTorrents: [],
+            selectedCategory: '',
+            selectedState: '',
+            sortBy: 'added_on',
+            itemsPerPage: 20,
+            currentPage: 1,
+            selectedTorrentContextMenu: null
+        };
+
+        this.refs = {
+            torrentsList: document.getElementById('torrentsList'),
+            categoryFilter: document.getElementById('categoryFilter'),
+            stateFilter: document.getElementById('stateFilter'),
+            sortSelector: document.getElementById('sortSelector'),
+            selectAll: document.getElementById('selectAll'),
+            batchDeleteBtn: document.getElementById('batchDeleteBtn'),
+            batchDeleteDebridBtn: document.getElementById('batchDeleteDebridBtn'),
+            refreshBtn: document.getElementById('refreshBtn'),
+            torrentContextMenu: document.getElementById('torrentContextMenu'),
+            paginationControls: document.getElementById('paginationControls'),
+            paginationInfo: document.getElementById('paginationInfo'),
+            emptyState: document.getElementById('emptyState')
+        };
+
+        this.init();
+    }
+
+    init() {
+        this.bindEvents();
+        this.loadTorrents();
+        this.startAutoRefresh();
+    }
+
+    bindEvents() {
+        // Refresh button
+        this.refs.refreshBtn.addEventListener('click', () => this.loadTorrents());
+
+        // Batch delete
+        this.refs.batchDeleteBtn.addEventListener('click', () => this.deleteSelectedTorrents());
+        this.refs.batchDeleteDebridBtn.addEventListener('click', () => this.deleteSelectedTorrents(true));
+
+        // Select all checkbox
+        this.refs.selectAll.addEventListener('change', (e) => this.toggleSelectAll(e.target.checked));
+
+        // Filters
+        this.refs.categoryFilter.addEventListener('change', (e) => this.setFilter('category', e.target.value));
+        this.refs.stateFilter.addEventListener('change', (e) => this.setFilter('state', e.target.value));
+        this.refs.sortSelector.addEventListener('change', (e) => this.setSort(e.target.value));
+
+        // Context menu
+        this.bindContextMenu();
+
+        // Torrent selection
+        this.refs.torrentsList.addEventListener('change', (e) => {
+            if (e.target.classList.contains('torrent-select')) {
+                this.toggleTorrentSelection(e.target.dataset.hash, e.target.checked);
+            }
+        });
+    }
+
+    bindContextMenu() {
+        // Show context menu
+        this.refs.torrentsList.addEventListener('contextmenu', (e) => {
+            const row = e.target.closest('tr[data-hash]');
+            if (!row) return;
+
+            e.preventDefault();
+            this.showContextMenu(e, row);
+        });
+
+        // Hide context menu
+        document.addEventListener('click', (e) => {
+            if (!this.refs.torrentContextMenu.contains(e.target)) {
+                this.hideContextMenu();
+            }
+        });
+
+        // Context menu actions
+        this.refs.torrentContextMenu.addEventListener('click', (e) => {
+            const action = e.target.closest('[data-action]')?.dataset.action;
+            if (action) {
+                this.handleContextAction(action);
+                this.hideContextMenu();
+            }
+        });
+    }
+
+    showContextMenu(event, row) {
+        this.state.selectedTorrentContextMenu = {
+            hash: row.dataset.hash,
+            name: row.dataset.name,
+            category: row.dataset.category || ''
+        };
+
+        this.refs.torrentContextMenu.querySelector('.torrent-name').textContent =
+            this.state.selectedTorrentContextMenu.name;
+
+        const { pageX, pageY } = event;
+        const { clientWidth, clientHeight } = document.documentElement;
+        const menu = this.refs.torrentContextMenu;
+
+        // Position the menu
+        menu.style.left = `${Math.min(pageX, clientWidth - 200)}px`;
+        menu.style.top = `${Math.min(pageY, clientHeight - 150)}px`;
+
+        menu.classList.remove('hidden');
+    }
+
+    hideContextMenu() {
+        this.refs.torrentContextMenu.classList.add('hidden');
+        this.state.selectedTorrentContextMenu = null;
+    }
+
+    async handleContextAction(action) {
+        const torrent = this.state.selectedTorrentContextMenu;
+        if (!torrent) return;
+
+        const actions = {
+            'copy-magnet': async () => {
+                try {
+                    await navigator.clipboard.writeText(`magnet:?xt=urn:btih:${torrent.hash}`);
+                    window.decypharrUtils.createToast('Magnet link copied to clipboard');
+                } catch (error) {
+                    window.decypharrUtils.createToast('Failed to copy magnet link', 'error');
+                }
+            },
+            'copy-name': async () => {
+                try {
+                    await navigator.clipboard.writeText(torrent.name);
+                    window.decypharrUtils.createToast('Torrent name copied to clipboard');
+                } catch (error) {
+                    window.decypharrUtils.createToast('Failed to copy torrent name', 'error');
+                }
+            },
+            'delete': async () => {
+                await this.deleteTorrent(torrent.hash, torrent.category, false);
+            }
+        };
+
+        if (actions[action]) {
+            await actions[action]();
+        }
+    }
+
+    async loadTorrents() {
+        try {
+            // Show loading state
+            this.refs.refreshBtn.disabled = true;
+            this.refs.paginationInfo.textContent = 'Loading torrents...';
+
+            const response = await window.decypharrUtils.fetcher('/api/torrents');
+            if (!response.ok) throw new Error('Failed to fetch torrents');
+
+            const torrents = await response.json();
+            this.state.torrents = torrents;
+            this.state.categories = new Set(torrents.map(t => t.category).filter(Boolean));
+
+            this.updateUI();
+
+        } catch (error) {
+            console.error('Error loading torrents:', error);
+            window.decypharrUtils.createToast(`Error loading torrents: ${error.message}`, 'error');
+        } finally {
+            this.refs.refreshBtn.disabled = false;
+        }
+    }
+
+    updateUI() {
+        // Filter torrents
+        this.filterTorrents();
+
+        // Update category dropdown
+        this.updateCategoryFilter();
+
+        // Render torrents table
+        this.renderTorrents();
+
+        // Update pagination
+        this.updatePagination();
+
+        // Update selection state
+        this.updateSelectionUI();
+
+        // Show/hide empty state
+        this.toggleEmptyState();
+    }
+
+    filterTorrents() {
+        let filtered = [...this.state.torrents];
+
+        if (this.state.selectedCategory) {
+            filtered = filtered.filter(t => t.category === this.state.selectedCategory);
+        }
+
+        if (this.state.selectedState) {
+            filtered = filtered.filter(t => t.state?.toLowerCase() === this.state.selectedState.toLowerCase());
+        }
+
+        // Sort torrents
+        filtered = this.sortTorrents(filtered);
+
+        this.state.filteredTorrents = filtered;
+    }
+
+    sortTorrents(torrents) {
+        const [field, direction] = this.state.sortBy.includes('_asc') || this.state.sortBy.includes('_desc')
+            ? [this.state.sortBy.split('_').slice(0, -1).join('_'), this.state.sortBy.endsWith('_asc') ? 'asc' : 'desc']
+            : [this.state.sortBy, 'desc'];
+
+        return torrents.sort((a, b) => {
+            let valueA, valueB;
+
+            switch (field) {
+                case 'name':
+                    valueA = a.name?.toLowerCase() || '';
+                    valueB = b.name?.toLowerCase() || '';
+                    break;
+                case 'size':
+                    valueA = a.size || 0;
+                    valueB = b.size || 0;
+                    break;
+                case 'progress':
+                    valueA = a.progress || 0;
+                    valueB = b.progress || 0;
+                    break;
+                case 'added_on':
+                    valueA = a.added_on || 0;
+                    valueB = b.added_on || 0;
+                    break;
+                default:
+                    valueA = a[field] || 0;
+                    valueB = b[field] || 0;
+            }
+
+            if (typeof valueA === 'string') {
+                return direction === 'asc'
+                    ? valueA.localeCompare(valueB)
+                    : valueB.localeCompare(valueA);
+            } else {
+                return direction === 'asc'
+                    ? valueA - valueB
+                    : valueB - valueA;
+            }
+        });
+    }
+
+    renderTorrents() {
+        const startIndex = (this.state.currentPage - 1) * this.state.itemsPerPage;
+        const endIndex = Math.min(startIndex + this.state.itemsPerPage, this.state.filteredTorrents.length);
+        const pageItems = this.state.filteredTorrents.slice(startIndex, endIndex);
+
+        this.refs.torrentsList.innerHTML = pageItems.map(torrent => this.torrentRowTemplate(torrent)).join('');
+    }
+
+    torrentRowTemplate(torrent) {
+        const progressPercent = (torrent.progress * 100).toFixed(1);
+        const isSelected = this.state.selectedTorrents.has(torrent.hash);
+        let addedOn = new Date(torrent.added_on).toLocaleString();
+
+        return `
+            <tr data-hash="${torrent.hash}" 
+                data-name="${this.escapeHtml(torrent.name)}" 
+                data-category="${torrent.category || ''}"
+                class="hover:bg-base-200 transition-colors">
+                <td>
+                    <label class="cursor-pointer">
+                        <input type="checkbox" 
+                               class="checkbox checkbox-sm torrent-select" 
+                               data-hash="${torrent.hash}" 
+                               ${isSelected ? 'checked' : ''}>
+                    </label>
+                </td>
+                <td class="max-w-xs">
+                    <div class="truncate font-medium" title="${this.escapeHtml(torrent.name)}">
+                        ${this.escapeHtml(torrent.name)}
+                    </div>
+                </td>
+                <td class="text-nowrap font-mono text-sm">
+                    ${window.decypharrUtils.formatBytes(torrent.size)}
+                </td>
+                <td class="min-w-36">
+                    <div class="flex items-center gap-3">
+                        <progress class="progress progress-primary w-20 h-2" 
+                                  value="${progressPercent}" 
+                                  max="100"></progress>
+                        <span class="text-sm font-medium min-w-12">${progressPercent}%</span>
+                    </div>
+                </td>
+                <td class="text-nowrap font-mono text-sm">
+                    ${window.decypharrUtils.formatSpeed(torrent.dlspeed)}
+                </td>
+                <td>
+                    ${torrent.category ?
+            `<div class="badge badge-secondary badge-sm">${this.escapeHtml(torrent.category)}</div>` :
+            '<span class="text-base-content/50">None</span>'
+        }
+                </td>
+                <td>
+                    ${torrent.debrid ?
+            `<div class="badge badge-accent badge-sm">${this.escapeHtml(torrent.debrid)}</div>` :
+            '<span class="text-base-content/50">None</span>'
+        }
+                </td>
+                <td class="text-nowrap font-mono text-sm">
+                    ${torrent.num_seeds || 0}
+                </td>
+                <td>
+                    <div class="badge ${this.getStateColor(torrent.state)} badge-sm">
+                        ${this.escapeHtml(torrent.state)}
+                    </div>
+                </td>
+                <td>
+                    <div class="flex gap-1">
+                        <button class="btn btn-error btn-outline btn-xs tooltip" 
+                                onclick="dashboard.deleteTorrent('${torrent.hash}', '${torrent.category || ''}', false);"
+                                data-tip="Delete from local">
+                            <i class="bi bi-trash"></i>
+                        </button>
+                        ${torrent.debrid && torrent.id ? `
+                            <button class="btn btn-error btn-outline btn-xs tooltip" 
+                                    onclick="dashboard.deleteTorrent('${torrent.hash}', '${torrent.category || ''}', true);"
+                                    data-tip="Remove from ${torrent.debrid}">
+                                <i class="bi bi-cloud-slash"></i>
+                            </button>
+                        ` : ''}
+                    </div>
+                </td>
+            </tr>
+        `;
+    }
+
+    getStateColor(state) {
+        const stateColors = {
+            'downloading': 'badge-primary',
+            'pausedup': 'badge-success',
+            'error': 'badge-error',
+            'completed': 'badge-success'
+        };
+        return stateColors[state?.toLowerCase()] || 'badge-ghost';
+    }
+
+    updateCategoryFilter() {
+        const currentCategories = Array.from(this.state.categories).sort();
+        const categoryOptions = ['<option value="">All Categories</option>']
+            .concat(currentCategories.map(cat =>
+                `<option value="${this.escapeHtml(cat)}" ${cat === this.state.selectedCategory ? 'selected' : ''}>
+                    ${this.escapeHtml(cat)}
+                </option>`
+            ));
+        this.refs.categoryFilter.innerHTML = categoryOptions.join('');
+    }
+
+    updatePagination() {
+        const totalPages = Math.ceil(this.state.filteredTorrents.length / this.state.itemsPerPage);
+        const startIndex = (this.state.currentPage - 1) * this.state.itemsPerPage;
+        const endIndex = Math.min(startIndex + this.state.itemsPerPage, this.state.filteredTorrents.length);
+
+        // Update pagination info
+        this.refs.paginationInfo.textContent =
+            `Showing ${this.state.filteredTorrents.length > 0 ? startIndex + 1 : 0}-${endIndex} of ${this.state.filteredTorrents.length} torrents`;
+
+        // Clear pagination controls
+        this.refs.paginationControls.innerHTML = '';
+
+        if (totalPages <= 1) return;
+
+        // Previous button
+        const prevBtn = this.createPaginationButton('❮', this.state.currentPage - 1, this.state.currentPage === 1);
+        this.refs.paginationControls.appendChild(prevBtn);
+
+        // Page numbers
+        const maxPageButtons = 5;
+        let startPage = Math.max(1, this.state.currentPage - Math.floor(maxPageButtons / 2));
+        let endPage = Math.min(totalPages, startPage + maxPageButtons - 1);
+
+        if (endPage - startPage + 1 < maxPageButtons) {
+            startPage = Math.max(1, endPage - maxPageButtons + 1);
+        }
+
+        for (let i = startPage; i <= endPage; i++) {
+            const pageBtn = this.createPaginationButton(i, i, false, i === this.state.currentPage);
+            this.refs.paginationControls.appendChild(pageBtn);
+        }
+
+        // Next button
+        const nextBtn = this.createPaginationButton('❯', this.state.currentPage + 1, this.state.currentPage === totalPages);
+        this.refs.paginationControls.appendChild(nextBtn);
+    }
+
+    createPaginationButton(text, page, disabled = false, active = false) {
+        const button = document.createElement('button');
+        button.className = `join-item btn btn-sm ${active ? 'btn-active' : ''} ${disabled ? 'btn-disabled' : ''}`;
+        button.textContent = text;
+        button.disabled = disabled;
+
+        if (!disabled) {
+            button.addEventListener('click', () => {
+                this.state.currentPage = page;
+                this.updateUI();
+            });
+        }
+
+        return button;
+    }
+
+    updateSelectionUI() {
+        // Clean up selected torrents that no longer exist
+        const currentHashes = new Set(this.state.filteredTorrents.map(t => t.hash));
+        this.state.selectedTorrents.forEach(hash => {
+            if (!currentHashes.has(hash)) {
+                this.state.selectedTorrents.delete(hash);
+            }
+        });
+
+        // Update batch delete button
+        this.refs.batchDeleteBtn.classList.toggle('hidden', this.state.selectedTorrents.size === 0);
+        this.refs.batchDeleteDebridBtn.classList.toggle('hidden', this.state.selectedTorrents.size === 0);
+
+        // Update select all checkbox
+        const visibleTorrents = this.state.filteredTorrents.slice(
+            (this.state.currentPage - 1) * this.state.itemsPerPage,
+            this.state.currentPage * this.state.itemsPerPage
+        );
+
+        this.refs.selectAll.checked = visibleTorrents.length > 0 &&
+            visibleTorrents.every(torrent => this.state.selectedTorrents.has(torrent.hash));
+        this.refs.selectAll.indeterminate = visibleTorrents.some(torrent => this.state.selectedTorrents.has(torrent.hash)) &&
+            !visibleTorrents.every(torrent => this.state.selectedTorrents.has(torrent.hash));
+    }
+
+    toggleEmptyState() {
+        const isEmpty = this.state.torrents.length === 0;
+        this.refs.emptyState.classList.toggle('hidden', !isEmpty);
+        document.querySelector('.card:has(#torrentsList)').classList.toggle('hidden', isEmpty);
+    }
+
+    // Event handlers
+    setFilter(type, value) {
+        if (type === 'category') {
+            this.state.selectedCategory = value;
+        } else if (type === 'state') {
+            this.state.selectedState = value;
+        }
+        this.state.currentPage = 1;
+        this.updateUI();
+    }
+
+    setSort(sortBy) {
+        this.state.sortBy = sortBy;
+        this.state.currentPage = 1;
+        this.updateUI();
+    }
+
+    toggleSelectAll(checked) {
+        const visibleTorrents = this.state.filteredTorrents.slice(
+            (this.state.currentPage - 1) * this.state.itemsPerPage,
+            this.state.currentPage * this.state.itemsPerPage
+        );
+
+        visibleTorrents.forEach(torrent => {
+            if (checked) {
+                this.state.selectedTorrents.add(torrent.hash);
+            } else {
+                this.state.selectedTorrents.delete(torrent.hash);
+            }
+        });
+
+        this.updateUI();
+    }
+
+    toggleTorrentSelection(hash, checked) {
+        if (checked) {
+            this.state.selectedTorrents.add(hash);
+        } else {
+            this.state.selectedTorrents.delete(hash);
+        }
+        this.updateSelectionUI();
+    }
+
+    async deleteTorrent(hash, category, removeFromDebrid = false) {
+        if (!confirm(`Are you sure you want to delete this torrent${removeFromDebrid ? ' from ' + category : ''}?`)) {
+            return;
+        }
+
+        try {
+            const endpoint = `/api/torrents/${encodeURIComponent(category)}/${hash}?removeFromDebrid=${removeFromDebrid}`;
+            const response = await window.decypharrUtils.fetcher(endpoint, { method: 'DELETE' });
+
+            if (!response.ok) throw new Error(await response.text());
+
+            window.decypharrUtils.createToast('Torrent deleted successfully');
+            await this.loadTorrents();
+
+        } catch (error) {
+            console.error('Error deleting torrent:', error);
+            window.decypharrUtils.createToast(`Failed to delete torrent: ${error.message}`, 'error');
+        }
+    }
+
+    async deleteSelectedTorrents(removeFromDebrid = false) {
+        const count = this.state.selectedTorrents.size;
+        if (count === 0) {
+            window.decypharrUtils.createToast('No torrents selected for deletion', 'warning');
+            return;
+        }
+        if (!confirm(`Are you sure you want to delete ${count} torrent${count > 1 ? 's' : ''}${removeFromDebrid ? ' from debrid' : ''}?`)) {
+            return;
+        }
+
+        try {
+            const hashes = Array.from(this.state.selectedTorrents).join(',');
+            const response = await window.decypharrUtils.fetcher(
+                `/api/torrents/?hashes=${encodeURIComponent(hashes)}&removeFromDebrid=${removeFromDebrid}`,
+                { method: 'DELETE' }
+            );
+
+            if (!response.ok) throw new Error(await response.text());
+
+            window.decypharrUtils.createToast(`${count} torrent${count > 1 ? 's' : ''} deleted successfully`);
+            this.state.selectedTorrents.clear();
+            await this.loadTorrents();
+
+        } catch (error) {
+            console.error('Error deleting torrents:', error);
+            window.decypharrUtils.createToast(`Failed to delete some torrents: ${error.message}`, 'error');
+        }
+    }
+
+    startAutoRefresh() {
+        this.refreshInterval = setInterval(() => {
+            this.loadTorrents();
+        }, 5000);
+
+        // Clean up on page unload
+        window.addEventListener('beforeunload', () => {
+            if (this.refreshInterval) {
+                clearInterval(this.refreshInterval);
+            }
+        });
+    }
+
+    escapeHtml(text) {
+        const map = {
+            '&': '&amp;',
+            '<': '&lt;',
+            '>': '&gt;',
+            '"': '&quot;',
+            "'": '&#039;'
+        };
+        return text ? text.replace(/[&<>"']/g, (m) => map[m]) : '';
+    }
+}

pkg/web/assets/js/download.js

@@ -0,0 +1,242 @@
+// Download page functionality
+class DownloadManager {
+    constructor(downloadFolder) {
+        this.downloadFolder = downloadFolder;
+        this.refs = {
+            downloadForm: document.getElementById('downloadForm'),
+            magnetURI: document.getElementById('magnetURI'),
+            torrentFiles: document.getElementById('torrentFiles'),
+            arr: document.getElementById('arr'),
+            downloadAction: document.getElementById('downloadAction'),
+            downloadUncached: document.getElementById('downloadUncached'),
+            downloadFolder: document.getElementById('downloadFolder'),
+            debrid: document.getElementById('debrid'),
+            submitBtn: document.getElementById('submitDownload'),
+            activeCount: document.getElementById('activeCount'),
+            completedCount: document.getElementById('completedCount'),
+            totalSize: document.getElementById('totalSize')
+        };
+
+        this.init();
+    }
+
+    init() {
+        this.loadSavedOptions();
+        this.bindEvents();
+        this.handleMagnetFromURL();
+    }
+
+    bindEvents() {
+        // Form submission
+        this.refs.downloadForm.addEventListener('submit', (e) => this.handleSubmit(e));
+
+        // Save options on change
+        this.refs.arr.addEventListener('change', () => this.saveOptions());
+        this.refs.downloadAction.addEventListener('change', () => this.saveOptions());
+        this.refs.downloadUncached.addEventListener('change', () => this.saveOptions());
+        this.refs.downloadFolder.addEventListener('change', () => this.saveOptions());
+
+        // File input enhancement
+        this.refs.torrentFiles.addEventListener('change', (e) => this.handleFileSelection(e));
+
+        // Drag and drop
+        this.setupDragAndDrop();
+    }
+
+    loadSavedOptions() {
+        const savedOptions = {
+            category: localStorage.getItem('downloadCategory') || '',
+            action: localStorage.getItem('downloadAction') || 'symlink',
+            uncached: localStorage.getItem('downloadUncached') === 'true',
+            folder: localStorage.getItem('downloadFolder') || this.downloadFolder
+        };
+
+        this.refs.arr.value = savedOptions.category;
+        this.refs.downloadAction.value = savedOptions.action;
+        this.refs.downloadUncached.checked = savedOptions.uncached;
+        this.refs.downloadFolder.value = savedOptions.folder;
+    }
+
+    saveOptions() {
+        localStorage.setItem('downloadCategory', this.refs.arr.value);
+        localStorage.setItem('downloadAction', this.refs.downloadAction.value);
+        localStorage.setItem('downloadUncached', this.refs.downloadUncached.checked.toString());
+        localStorage.setItem('downloadFolder', this.refs.downloadFolder.value);
+    }
+
+    handleMagnetFromURL() {
+        const urlParams = new URLSearchParams(window.location.search);
+        const magnetURI = urlParams.get('magnet');
+
+        if (magnetURI) {
+            this.refs.magnetURI.value = magnetURI;
+            history.replaceState({}, document.title, window.location.pathname);
+
+            // Show notification
+            window.decypharrUtils.createToast('Magnet link loaded from URL', 'info');
+        }
+    }
+
+    async handleSubmit(e) {
+        e.preventDefault();
+
+        const formData = new FormData();
+
+        // Get URLs
+        const urls = this.refs.magnetURI.value
+            .split('\n')
+            .map(url => url.trim())
+            .filter(url => url.length > 0);
+
+        if (urls.length > 0) {
+            formData.append('urls', urls.join('\n'));
+        }
+
+        // Get files
+        for (let i = 0; i < this.refs.torrentFiles.files.length; i++) {
+            formData.append('files', this.refs.torrentFiles.files[i]);
+        }
+
+        // Validation
+        const totalItems = urls.length + this.refs.torrentFiles.files.length;
+        if (totalItems === 0) {
+            window.decypharrUtils.createToast('Please provide at least one torrent', 'warning');
+            return;
+        }
+
+        if (totalItems > 100) {
+            window.decypharrUtils.createToast('Please submit up to 100 torrents at a time', 'warning');
+            return;
+        }
+
+        // Add other form data
+        formData.append('arr', this.refs.arr.value);
+        formData.append('downloadFolder', this.refs.downloadFolder.value);
+        formData.append('action', this.refs.downloadAction.value);
+        formData.append('downloadUncached', this.refs.downloadUncached.checked);
+
+        if (this.refs.debrid) {
+            formData.append('debrid', this.refs.debrid.value);
+        }
+
+        try {
+            // Set loading state
+            window.decypharrUtils.setButtonLoading(this.refs.submitBtn, true);
+
+            const response = await window.decypharrUtils.fetcher('/api/add', {
+                method: 'POST',
+                body: formData,
+                headers: {} // Remove Content-Type to let browser set it for FormData
+            });
+
+            const result = await response.json();
+
+            if (!response.ok) {
+                throw new Error(result.error || 'Unknown error');
+            }
+
+            // Handle partial success
+            if (result.errors && result.errors.length > 0) {
+                if (result.results.length > 0) {
+                    window.decypharrUtils.createToast(
+                        `Added ${result.results.length} torrents with ${result.errors.length} errors`,
+                        'warning'
+                    );
+                    this.showErrorDetails(result.errors);
+                } else {
+                    window.decypharrUtils.createToast('Failed to add torrents', 'error');
+                    this.showErrorDetails(result.errors);
+                }
+            } else {
+                window.decypharrUtils.createToast(
+                    `Successfully added ${result.results.length} torrent${result.results.length > 1 ? 's' : ''}!`
+                );
+                this.clearForm();
+            }
+
+        } catch (error) {
+            console.error('Error adding downloads:', error);
+            window.decypharrUtils.createToast(`Error adding downloads: ${error.message}`, 'error');
+        } finally {
+            window.decypharrUtils.setButtonLoading(this.refs.submitBtn, false);
+        }
+    }
+
+    showErrorDetails(errors) {
+        // Create a modal or detailed view for errors
+        const errorList = errors.map(error => `• ${error}`).join('\n');
+        console.error('Download errors:', errorList);
+        window.decypharrUtils.createToast(
+            `Errors occurred while adding torrents:\n${errorList}`,
+            'error'
+        );
+    }
+
+    clearForm() {
+        this.refs.magnetURI.value = '';
+        this.refs.torrentFiles.value = '';
+    }
+
+    handleFileSelection(e) {
+        const files = e.target.files;
+        if (files.length > 0) {
+            const fileNames = Array.from(files).map(f => f.name).join(', ');
+            window.decypharrUtils.createToast(
+                `Selected ${files.length} file${files.length > 1 ? 's' : ''}: ${fileNames}`,
+                'info'
+            );
+        }
+    }
+
+    setupDragAndDrop() {
+        const dropZone = this.refs.downloadForm;
+
+        ['dragenter', 'dragover', 'dragleave', 'drop'].forEach(eventName => {
+            dropZone.addEventListener(eventName, this.preventDefaults, false);
+        });
+
+        ['dragenter', 'dragover'].forEach(eventName => {
+            dropZone.addEventListener(eventName, () => this.highlight(dropZone), false);
+        });
+
+        ['dragleave', 'drop'].forEach(eventName => {
+            dropZone.addEventListener(eventName, () => this.unhighlight(dropZone), false);
+        });
+
+        dropZone.addEventListener('drop', (e) => this.handleDrop(e), false);
+    }
+
+    preventDefaults(e) {
+        e.preventDefault();
+        e.stopPropagation();
+    }
+
+    highlight(element) {
+        element.classList.add('border-primary', 'border-2', 'border-dashed', 'bg-primary/5');
+    }
+
+    unhighlight(element) {
+        element.classList.remove('border-primary', 'border-2', 'border-dashed', 'bg-primary/5');
+    }
+
+    handleDrop(e) {
+        const dt = e.dataTransfer;
+        const files = dt.files;
+
+        // Filter for .torrent files
+        const torrentFiles = Array.from(files).filter(file =>
+            file.name.toLowerCase().endsWith('.torrent')
+        );
+
+        if (torrentFiles.length > 0) {
+            // Create a new FileList-like object
+            const dataTransfer = new DataTransfer();
+            torrentFiles.forEach(file => dataTransfer.items.add(file));
+            this.refs.torrentFiles.files = dataTransfer.files;
+
+            this.handleFileSelection({ target: { files: torrentFiles } });
+        } else {
+            window.decypharrUtils.createToast('Please drop .torrent files only', 'warning');
+        }
+    }
+}

pkg/web/assets/styles.css

@@ -0,0 +1,729 @@
+@import './css/bootstrap-icons.css';
+
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
+
+
+* {
+    transition: transform 0.2s ease-in-out,
+    opacity 0.2s ease-in-out,
+    box-shadow 0.2s ease-in-out,
+    border-color 0.2s ease-in-out,
+    background-color 0.2s ease-in-out;
+}
+
+:root {
+    --warning-color: rgb(245 158 11); /* amber-500 */
+}
+
+[data-theme="dark"] {
+    --warning-color: rgb(251 191 36); /* amber-400 - lighter for dark theme */
+}
+
+
+/* Context menu styles */
+.context-menu {
+    position: absolute;
+    z-index: 1000;
+    backdrop-filter: blur(8px);
+    border: 1px solid hsl(var(--bc) / 0.2);
+    box-shadow: 0 20px 25px -5px rgba(0, 0, 0, 0.1), 0 10px 10px -5px rgba(0, 0, 0, 0.04);
+}
+
+.context-menu.hidden {
+    opacity: 0;
+    pointer-events: none;
+    transform: scale(0.95) translateY(-5px);
+}
+
+.context-menu:not(.hidden) {
+    opacity: 1;
+    pointer-events: all;
+    transform: scale(1) translateY(0);
+    animation: contextMenuAppear 0.15s ease-out;
+}
+
+@keyframes contextMenuAppear {
+    from {
+        opacity: 0;
+        transform: scale(0.95) translateY(-5px);
+    }
+    to {
+        opacity: 1;
+        transform: scale(1) translateY(0);
+    }
+}
+
+/* Smooth progress bar animations */
+.progress {
+    transition: all 0.3s ease-in-out;
+}
+
+.progress::-webkit-progress-value {
+    transition: width 0.5s ease-in-out;
+}
+
+.progress::-moz-progress-bar {
+    transition: width 0.5s ease-in-out;
+}
+
+/* Enhanced button animations */
+.btn {
+    transition: all 0.2s ease-in-out;
+    transform: translateY(0);
+}
+
+.btn:hover:not(:disabled) {
+    transform: translateY(-1px);
+    box-shadow: 0 4px 12px rgba(0, 0, 0, 0.15);
+}
+
+.btn:active:not(:disabled) {
+    transform: translateY(0);
+    transition: all 0.1s ease-in-out;
+}
+
+/* Card hover effects */
+.card {
+    transition: all 0.3s ease-in-out;
+}
+
+.card:hover {
+    transform: translateY(-2px);
+    box-shadow: 0 8px 25px rgba(0, 0, 0, 0.15);
+}
+
+/* Table row animations */
+.table tbody tr {
+    transition: all 0.2s ease-in-out;
+}
+
+.table tbody tr:hover {
+    background-color: hsl(var(--b2));
+    transform: scale(1.005);
+}
+
+/* Item selection styles */
+.item-row.selected {
+    background-color: hsl(var(--p) / 0.1) !important;
+    border-left: 4px solid hsl(var(--p));
+}
+
+.item-row {
+    cursor: pointer;
+    transition: all 0.2s ease-in-out;
+}
+
+/* Stepper navigation */
+.stepper-nav .nav-link {
+    transition: all 0.2s ease-in-out;
+    position: relative;
+    overflow: hidden;
+}
+
+.stepper-nav .nav-link::before {
+    content: '';
+    position: absolute;
+    top: 0;
+    left: -100%;
+    width: 100%;
+    height: 100%;
+    background: linear-gradient(90deg, transparent, rgba(255, 255, 255, 0.2), transparent);
+    transition: left 0.5s ease-in-out;
+}
+
+.stepper-nav .nav-link:hover::before {
+    left: 100%;
+}
+
+/* Modal animations */
+.modal {
+    transition: all 0.3s ease-in-out;
+}
+
+.modal-box {
+    animation: modalSlideIn 0.3s ease-out;
+}
+
+@keyframes modalSlideIn {
+    from {
+        opacity: 0;
+        transform: scale(0.9) translateY(-20px);
+    }
+    to {
+        opacity: 1;
+        transform: scale(1) translateY(0);
+    }
+}
+
+/* Toast animations */
+.toast-container .alert {
+    animation: toastSlideIn 0.3s ease-out;
+}
+
+@keyframes toastSlideIn {
+    from {
+        opacity: 0;
+        transform: translateX(100%);
+    }
+    to {
+        opacity: 1;
+        transform: translateX(0);
+    }
+}
+
+/* Loading spinner improvements */
+.loading {
+    transition: all 0.2s ease-in-out;
+}
+
+/* Badge animations */
+.badge {
+    transition: all 0.2s ease-in-out;
+}
+
+.badge:hover {
+    transform: scale(1.05);
+}
+
+/* Form focus improvements */
+.form-control input:focus,
+.form-control textarea:focus,
+.form-control select:focus {
+    transform: scale(1.02);
+    box-shadow: 0 0 0 3px hsl(var(--p) / 0.2);
+}
+
+/* Pagination smooth transitions */
+.join .btn {
+    transition: all 0.2s ease-in-out;
+}
+
+.join .btn:not(.btn-active):hover {
+    background-color: hsl(var(--b3));
+    transform: translateY(-1px);
+}
+
+/* Password Toggle */
+/* Password toggle styles */
+.password-toggle-container {
+    position: relative;
+    display: flex;
+    align-items: center;
+}
+
+.password-toggle-btn {
+    position: absolute;
+    right: 0;
+    top: 0;
+    bottom: 0;
+    width: 40px;
+    background: none;
+    border: none;
+    cursor: pointer;
+    z-index: 10;
+    color: hsl(var(--bc) / 0.6);
+    transition: all 0.2s ease-in-out;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    border-top-right-radius: var(--rounded-btn, 0.5rem);
+    border-bottom-right-radius: var(--rounded-btn, 0.5rem);
+}
+
+.password-toggle-btn:hover {
+    background-color: hsl(var(--bc) / 0.1);
+    color: hsl(var(--bc) / 0.8);
+}
+
+/* Input password fields - make room for the button */
+.input.input-has-toggle {
+    padding-right: 40px !important;
+    width: 100%;
+}
+
+/* Textarea password fields */
+.textarea.has-toggle {
+    padding-right: 40px !important;
+    font-family: 'JetBrains Mono', 'Consolas', 'Monaco', 'Courier New', monospace !important;
+    line-height: 1.4;
+    resize: vertical;
+}
+
+/* Specific positioning for textarea toggles */
+.password-toggle-btn.textarea-toggle {
+    top: 0;
+    right: 0;
+    bottom: auto;
+    height: 40px;
+    border-radius: 0;
+    border-top-right-radius: var(--rounded-btn, 0.5rem);
+}
+
+/* Better masking for textareas */
+.textarea.has-toggle[data-password-visible="false"],
+.textarea.has-toggle:not([data-password-visible="true"]) {
+    -webkit-text-security: disc;
+    text-security: disc;
+    font-family: monospace !important;
+    letter-spacing: 2px;
+}
+
+.textarea.has-toggle[data-password-visible="true"] {
+    -webkit-text-security: none;
+    text-security: none;
+    font-family: 'JetBrains Mono', 'Consolas', 'Monaco', 'Courier New', monospace !important;
+    letter-spacing: normal;
+}
+
+/* Input password field styling */
+.input[type="password"] {
+    font-family: 'Courier New', monospace;
+    letter-spacing: 1px;
+}
+
+.input[type="text"].was-password {
+    font-family: 'JetBrains Mono', 'Consolas', 'Monaco', 'Courier New', monospace;
+    letter-spacing: normal;
+}
+
+/* Dark mode button styling */
+[data-theme="dark"] .password-toggle-btn {
+    color: hsl(var(--bc) / 0.6);
+    background-color: transparent;
+}
+
+[data-theme="dark"] .password-toggle-btn:hover {
+    background-color: hsl(var(--bc) / 0.15);
+    color: hsl(var(--bc) / 0.9);
+}
+
+/* Light mode button styling */
+[data-theme="light"] .password-toggle-btn {
+    color: hsl(var(--bc) / 0.7);
+    background-color: transparent;
+}
+
+[data-theme="light"] .password-toggle-btn:hover {
+    background-color: hsl(var(--bc) / 0.1);
+    color: hsl(var(--bc) / 0.9);
+}
+
+/* Icon sizing */
+.password-toggle-btn i {
+    font-size: 14px;
+    line-height: 1;
+}
+
+/* Make sure the container fills the width */
+.password-toggle-container {
+    width: 100%;
+}
+
+.password-toggle-container .input,
+.password-toggle-container .textarea {
+    width: 100%;
+}
+
+/* Drawer animations */
+.drawer-side {
+    transition: transform 0.3s ease-in-out;
+}
+
+/* Dropdown animations */
+.dropdown-content {
+    animation: dropdownSlideIn 0.2s ease-out;
+}
+
+@keyframes dropdownSlideIn {
+    from {
+        opacity: 0;
+        transform: scale(0.95) translateY(-10px);
+    }
+    to {
+        opacity: 1;
+        transform: scale(1) translateY(0);
+    }
+}
+
+/* Enhanced filter UI */
+.filters-container .filter-item {
+    animation: filterItemAppear 0.2s ease-out;
+    transition: all 0.2s ease-in-out;
+}
+
+@keyframes filterItemAppear {
+    from {
+        opacity: 0;
+        transform: translateX(-10px);
+    }
+    to {
+        opacity: 1;
+        transform: translateX(0);
+    }
+}
+
+.filter-item:hover {
+    background-color: hsl(var(--b2));
+    border-radius: 4px;
+    padding: 4px;
+    margin: -4px;
+}
+
+/* Dark mode specific improvements */
+[data-theme="dark"] .glass {
+    background: rgba(255, 255, 255, 0.05);
+    backdrop-filter: blur(10px);
+    border: 1px solid rgba(255, 255, 255, 0.1);
+}
+
+/* Fix input text colors in dark mode */
+[data-theme="dark"] .input,
+[data-theme="dark"] .textarea,
+[data-theme="dark"] .select {
+    color: #ffffff !important; /* Force white text for values */
+    background-color: hsl(var(--b1));
+}
+
+/* Keep placeholders dim and distinguishable */
+[data-theme="dark"] .input::placeholder,
+[data-theme="dark"] .textarea::placeholder {
+    color: #6b7280 !important; /* Gray-500 equivalent */
+    opacity: 1 !important;
+    font-style: italic;
+}
+
+/* Focus states */
+[data-theme="dark"] .input:focus,
+[data-theme="dark"] .textarea:focus,
+[data-theme="dark"] .select:focus {
+    color: #ffffff !important;
+    background-color: hsl(var(--b1));
+    border-color: hsl(var(--p));
+    outline: none;
+    box-shadow: 0 0 0 2px hsl(var(--p) / 0.2);
+}
+
+/* Select options - Enhanced dark mode support */
+[data-theme="dark"] .select option {
+    background-color: hsl(var(--b1)) !important;
+    color: #ffffff !important;
+}
+
+/* Force dark styling for select dropdowns even when OS is in light mode */
+[data-theme="dark"] .select {
+    color-scheme: dark !important;
+}
+
+/* Additional browser-specific overrides for select options */
+[data-theme="dark"] select option {
+    background-color: hsl(var(--b1)) !important;
+    color: #ffffff !important;
+    border: none !important;
+}
+
+[data-theme="dark"] select optgroup {
+    background-color: hsl(var(--b1)) !important;
+    color: #ffffff !important;
+}
+
+/* WebKit-specific styling for select dropdown */
+[data-theme="dark"] select::-webkit-scrollbar {
+    width: 8px;
+    background-color: hsl(var(--b2));
+}
+
+[data-theme="dark"] select::-webkit-scrollbar-thumb {
+    background-color: hsl(var(--bc) / 0.3);
+    border-radius: 4px;
+}
+
+/* Firefox-specific select styling */
+@-moz-document url-prefix() {
+    [data-theme="dark"] select option {
+        background-color: hsl(var(--b1)) !important;
+        color: #ffffff !important;
+    }
+}
+
+/* Disabled inputs */
+[data-theme="dark"] .input:disabled,
+[data-theme="dark"] .textarea:disabled,
+[data-theme="dark"] .select:disabled {
+    color: #9ca3af !important; /* Gray-400 */
+    background-color: hsl(var(--b2));
+    border-color: hsl(var(--bc) / 0.2);
+}
+
+[data-theme="dark"] .input:disabled::placeholder,
+[data-theme="dark"] .textarea:disabled::placeholder {
+    color: #6b7280 !important;
+}
+
+/* Readonly inputs (like auto-detected configs) */
+[data-theme="dark"] .input[readonly],
+[data-theme="dark"] .textarea[readonly],
+[data-theme="dark"] .select[readonly] {
+    color: #d1d5db !important; /* Gray-300 */
+    background-color: hsl(var(--b2));
+    border-color: hsl(var(--bc) / 0.15);
+}
+
+/* Password fields with monospace */
+[data-theme="dark"] .password-toggle-container .input {
+    color: #ffffff !important;
+}
+
+[data-theme="dark"] .password-toggle-container .textarea {
+    color: #ffffff !important;
+    font-family: 'JetBrains Mono', 'Consolas', 'Monaco', 'Courier New', monospace;
+}
+
+/* Form labels */
+[data-theme="dark"] .label-text {
+    color: #f3f4f6; /* Gray-100 */
+}
+
+[data-theme="dark"] .label-text-alt {
+    color: #9ca3af; /* Gray-400 */
+}
+
+.text-warning,
+[data-theme="dark"] .text-warning,
+[data-theme="dark"] .label-text-alt.text-warning {
+    color: var(--warning-color) !important;
+}
+
+/* File input */
+[data-theme="dark"] .file-input {
+    color: #ffffff !important;
+}
+
+[data-theme="dark"] .file-input::file-selector-button {
+    background-color: hsl(var(--b3));
+    color: #ffffff;
+    border: none;
+    border-right: 1px solid hsl(var(--bc) / 0.2);
+}
+
+/* Search inputs */
+[data-theme="dark"] input[type="search"] {
+    color: #ffffff !important;
+}
+
+[data-theme="dark"] input[type="search"]::placeholder {
+    color: #6b7280 !important;
+    font-style: italic;
+}
+
+/* Number inputs */
+[data-theme="dark"] input[type="number"] {
+    color: #ffffff !important;
+}
+
+/* URL inputs */
+[data-theme="dark"] input[type="url"] {
+    color: #ffffff !important;
+}
+
+/* Email inputs */
+[data-theme="dark"] input[type="email"] {
+    color: #ffffff !important;
+}
+
+/* Date/time inputs */
+[data-theme="dark"] input[type="date"],
+[data-theme="dark"] input[type="time"],
+[data-theme="dark"] input[type="datetime-local"] {
+    color: #ffffff !important;
+}
+
+/* Fix autofill in dark mode */
+[data-theme="dark"] .input:-webkit-autofill,
+[data-theme="dark"] .input:-webkit-autofill:hover,
+[data-theme="dark"] .input:-webkit-autofill:focus {
+    -webkit-box-shadow: 0 0 0 1000px hsl(var(--b1)) inset !important;
+    -webkit-text-fill-color: #ffffff !important;
+    transition: background-color 5000s ease-in-out 0s;
+}
+
+/* Error states */
+[data-theme="dark"] .input-error {
+    color: #ffffff !important;
+    border-color: hsl(var(--er));
+    background-color: hsl(var(--er) / 0.1);
+}
+
+[data-theme="dark"] .input-error::placeholder {
+    color: #ef4444 !important; /* Red placeholder for errors */
+}
+
+/* Responsive improvements */
+@media (max-width: 768px) {
+    .card:hover {
+        transform: none;
+        box-shadow: 0 4px 15px rgba(0, 0, 0, 0.1);
+    }
+
+    .btn:hover:not(:disabled) {
+        transform: none;
+    }
+
+    .table tbody tr:hover {
+        transform: none;
+    }
+}
+
+/* Custom scrollbar */
+::-webkit-scrollbar {
+    width: 8px;
+    height: 8px;
+}
+
+::-webkit-scrollbar-track {
+    background: hsl(var(--b1));
+}
+
+::-webkit-scrollbar-thumb {
+    background: hsl(var(--bc) / 0.3);
+    border-radius: 4px;
+}
+
+::-webkit-scrollbar-thumb:hover {
+    background: hsl(var(--bc) / 0.5);
+}
+
+/* Tabs */
+/* Tab Navigation Styles */
+.tab-button {
+    transition: all 0.2s ease-in-out;
+    white-space: nowrap;
+    cursor: pointer;
+    background: none;
+    border: none;
+    outline: none;
+}
+
+.tab-button.active {
+    color: hsl(var(--p)) !important;
+    border-color: hsl(var(--p)) !important;
+}
+
+.tab-button:not(.active) {
+    color: hsl(var(--bc) / 0.7);
+    border-color: transparent;
+}
+
+.tab-button:not(.active):hover {
+    color: hsl(var(--bc));
+    border-color: hsl(var(--bc) / 0.3);
+}
+
+/* Tab content styling */
+.tab-content {
+    min-height: 400px;
+}
+
+.tab-content.hidden {
+    display: none !important;
+}
+
+.tab-content:not(.hidden) {
+    display: block;
+    animation: fadeIn 0.3s ease-in-out;
+}
+
+@keyframes fadeIn {
+    from {
+        opacity: 0;
+        transform: translateY(10px);
+    }
+    to {
+        opacity: 1;
+        transform: translateY(0);
+    }
+}
+
+/* Responsive adjustments */
+@media (max-width: 640px) {
+    .tab-button {
+        padding: 12px 8px;
+        font-size: 12px;
+    }
+
+    .tab-button i {
+        font-size: 16px;
+    }
+
+    nav[aria-label="Configuration Tabs"] {
+        overflow-x: auto;
+        white-space: nowrap;
+        padding-bottom: 8px;
+    }
+
+    nav[aria-label="Configuration Tabs"]::-webkit-scrollbar {
+        height: 4px;
+    }
+
+    nav[aria-label="Configuration Tabs"]::-webkit-scrollbar-track {
+        background: hsl(var(--b2));
+    }
+
+    nav[aria-label="Configuration Tabs"]::-webkit-scrollbar-thumb {
+        background: hsl(var(--bc) / 0.3);
+        border-radius: 2px;
+    }
+}
+
+/* Dark mode specific styling */
+[data-theme="dark"] .tab-button:not(.active) {
+    color: hsl(var(--bc) / 0.6);
+}
+
+[data-theme="dark"] .tab-button:not(.active):hover {
+    color: hsl(var(--bc) / 0.9);
+    border-color: hsl(var(--bc) / 0.3);
+}
+
+/* Light mode specific styling */
+[data-theme="light"] .tab-button:not(.active) {
+    color: hsl(var(--bc) / 0.7);
+}
+
+[data-theme="light"] .tab-button:not(.active):hover {
+    color: hsl(var(--bc) / 0.9);
+    border-color: hsl(var(--bc) / 0.4);
+}
+
+/* Enhanced border styling */
+.tab-button {
+    border-bottom-width: 2px;
+    border-bottom-style: solid;
+}
+
+/* Make sure the nav container has proper spacing */
+nav[aria-label="Configuration Tabs"] {
+    display: flex;
+    gap: 2rem;
+    min-height: 60px;
+    align-items: end;
+}
+
+/* Icon and text alignment */
+.tab-button .flex {
+    align-items: center;
+    justify-content: center;
+    gap: 0.5rem;
+}
+
+/* Focus states for accessibility */
+.tab-button:focus {
+    outline: 2px solid hsl(var(--p));
+    outline-offset: 2px;
+    border-radius: 4px;
+}
+
+.tab-button:focus:not(:focus-visible) {
+    outline: none;
+}

pkg/web/auth.go

@@ -1,9 +1,13 @@
 package web
 
 import (
+	"crypto/rand"
+	"encoding/hex"
+	"fmt"
 	"github.com/sirrobot01/decypharr/internal/config"
 	"golang.org/x/crypto/bcrypt"
 	"net/http"
+	"strings"
 )
 
 func (wb *Web) verifyAuth(username, password string) bool {
@@ -32,3 +36,68 @@ func (wb *Web) skipAuthHandler(w http.ResponseWriter, r *http.Request) {
 	}
 	http.Redirect(w, r, "/", http.StatusSeeOther)
 }
+
+// isValidAPIToken checks if the request contains a valid API token
+func (wb *Web) isValidAPIToken(r *http.Request) bool {
+	// Check Authorization header for Bearer token
+	authHeader := r.Header.Get("Authorization")
+	if authHeader == "" {
+		return false
+	}
+
+	// Support both "Bearer <token>" and "Token <token>" formats
+	var token string
+	if strings.HasPrefix(authHeader, "Bearer ") {
+		token = strings.TrimPrefix(authHeader, "Bearer ")
+	} else if strings.HasPrefix(authHeader, "Token ") {
+		token = strings.TrimPrefix(authHeader, "Token ")
+	} else {
+		return false
+	}
+
+	if token == "" {
+		return false
+	}
+
+	// Get auth config and check if token exists
+	auth := config.Get().GetAuth()
+	if auth == nil || auth.APIToken == "" {
+		return false
+	}
+
+	// Check if the provided token matches the configured token
+	return token == auth.APIToken
+}
+
+// generateAPIToken creates a new random API token
+func (wb *Web) generateAPIToken() (string, error) {
+	bytes := make([]byte, 32) // 256-bit token
+	if _, err := rand.Read(bytes); err != nil {
+		return "", err
+	}
+	return hex.EncodeToString(bytes), nil
+}
+
+// refreshAPIToken generates a new API token and saves it
+func (wb *Web) refreshAPIToken() (string, error) {
+	auth := config.Get().GetAuth()
+	if auth == nil {
+		return "", fmt.Errorf("authentication not configured")
+	}
+
+	// Generate new token
+	token, err := wb.generateAPIToken()
+	if err != nil {
+		return "", err
+	}
+
+	// Update auth config
+	auth.APIToken = token
+
+	// Save auth config
+	if err := config.Get().SaveAuth(auth); err != nil {
+		return "", err
+	}
+
+	return token, nil
+}