From dab87878ccf17308f3bd9dc1b811459ff2ba327f Mon Sep 17 00:00:00 2001
From: kodi <kodi@lab.local>
Date: Sat, 14 Mar 2026 12:40:41 +0100
Subject: [PATCH] feat: download - fase 02

---
 .../__pycache__/routes_files.cpython-313.pyc  | Bin 6330 -> 6676 bytes
 webui/backend/app/api/routes_files.py         |  12 +-
 .../file_ops_service.cpython-313.pyc          | Bin 27125 -> 32021 bytes
 .../backend/app/services/file_ops_service.py  | 134 ++++++++++++++----
 .../test_api_download_golden.cpython-313.pyc  | Bin 6810 -> 12924 bytes
 .../test_ui_smoke_golden.cpython-313.pyc      | Bin 35565 -> 35557 bytes
 .../tests/golden/test_api_download_golden.py  |  71 ++++++++++
 .../tests/golden/test_ui_smoke_golden.py      |  12 +-
 webui/html/app.js                             |  31 ++--
 9 files changed, 215 insertions(+), 45 deletions(-)

diff --git a/webui/backend/app/api/__pycache__/routes_files.cpython-313.pyc b/webui/backend/app/api/__pycache__/routes_files.cpython-313.pyc
index c80d22240ade0cef0878e3fe599b977a97a34041..feb4169319f59ea63404e2e388ae313490a186ec 100644
GIT binary patch
literal 6676
zcmcgwU2GHC6`udG<2ZI==g$ct<QEf&Ss;Pz0^QIkBoj95W=Mg>)NA5NFeJ8n$4Qn5
zRayE#=*w=ks+vAEPZfFNrBeG;^{IWSWGj^tMvDaML$z;4L0a+FbMDOe4~MW)%Yg4a
zbMLv|J?A^;{!Dh=?kWbJ+Oa>yuh%lnzwyO>WK&>w*93<7Eu%6jJHaR{VcSvWCOCyB
zydn@m5s9csL{elTD-PmNoWx0W_=zgTMO;)CCaM)TaZ_2Gs8Kw`qj-r|sU@{a9jQ}%
z#HaX)U#TbcN&{(78cCzlM4FUl(oDxl69J`#v`|@|XjKl71MN(h?_gAi>KtN8TexlN
zC${N@TCEEERM!v}7CM-4%K&TkoMPJ;`=8pQRtK0n!X0+N8b;dpz;cJ{_rdB_Ys#<=
z?SbV9d-uUQta{6^I`+V-4L4CN3D~H!eGKE9FaIW%^p&z9*jyB9HK_W_X77aA#|zBb
zl3E{b#@SV08OK}!4JGx6+E9kry$51rxON|I`qZW}te!ovn)3|EZ(*RwR`sYFD8ugE
z13RBjWu6yh7xny@+FFKqcn`z_d234}RD`JZt8Hay!9CCpz7tw|8QPIO&<?#5T1OdL
zAD~rQm!09pePSF^yUMVR&UFWme~*b5WDQp|kw~Va>3A}s2W7)K{OR~qaxtwDLmtsm
zS|X+!!f1S6gEC1L4Dqu?jodTjDeV`Fnw~bQrc?9DXbd#~tX54EExHg-%uQ)}3J|fe
z=0bGl?i@)jCSq5j`rV+*aF1y7T3WL)YV22Yh~Y)F@x*M>1~IBXxf_cUTi<QHS?ca7
zEfHNPpxLihw@ZyK<vXj*7ptqrG`=v+&*Iv${RWo%=d^TW7L17`Q+h<#$WnZUdV~gE
zPU))IvLc00Nrw?qifFU(FQH`tEk^H&#YAKw8Pn!xID5fEEyC|t48!hDfzZjc!|^c9
zPFb64ksdS6Ocjr_x}X(~l=4Sqhqx~0G(XD*xyc}BxKdG~CDM^pG=19;kf|VVh}1lC
z00xsbC^k7mCRRvg%TXPtY;QNZLeW$zbPIwA*+AuJDjtG(rZt_iqxYxok%I_@MGgG)
zE-1cdR+(HCQ|<fu+@o_FSGT**WV_G&dHJvR|8jrrT*h@NBV2mDiw->K?qyfx5LgMu
zy?=rP%8VnSEk`VNB-0eq1ICeFEZU*4_#mCwaM&&yu&31B^N-H2FaP2G@9#gE+a4Uv
z4vwy!&$upTgp02UDuSz!2$28p-Bs$4;UwD3BGKbZm<W<-is|YRbgCU4GDB~=+J~)J
zV502l>hkvKvFzzFbagx<jOSflr29kv=nO{Mek2fR;^T}~;`5af{~9;VLPGO}gys!b
zI!bV1(y+Nqe42-bGr6RZWfD*0B9+XZpg@knBqRidA>cYC9U$sxPCGoNkH=933k<m)
zfP!Xk4Q4NdbK~wm?xAPbGs5-Pbm)UxAG;!kmSDq};X&Pg@=F>M#PW=*=o$J|yim>H
zIA)V1qQ&BA@IXNHAaBOzB;c8r<8*n$Phm3_XuRG81vR`H4L|$n?E00pvl-VwMi{V`
znzs(kj>G0!l6}Yq4M>sMd+bDDHk%K}CQGeDV-YjRnZ{Cvi*x7<;1eu{;8!q{?hbh~
zJ2FDYYl7Fu6=x`xTu$K0QetL4Z~h2MZ{IM{%mjBMADd}T<uEu<^Hwcjt%^f@f}iH5
z@TKfgCHt&KTJVYb80Lm`qo-IB4zsnU`T2a7Pun>wPXaq4CaZ49Gs#36He*A+twm!R
z(T!@WC6d0E(l$AA7T}Dk1;~IXZGs{5S~Rhk3W|mo4j0_aBQ`h0h1xtU22xGO;U;aK
zw2=0g$~0pPhcz%}IPBA?H2)1p9&!{$4Z}~5L1As--o|ZDZ`RZMIF|ABW;`cX$G-El
z?>M~QG-n+xJKm=C=B&4K$Jeqxnf3L(lm)M}ItDwx!~5|5SNFde-<I35a@%)pM;~8%
z63-s{c&lxA&G9c7>GG{!eyw9r9}IhjYgsrpm*O!kS+b&#ZJL_D2I1{1s?s4@F|Mo~
zF_jzQ5`0lac`G}3m1f5@uZlEVc$G$4m4^f?`5lvnNTP{3%}RQsn!ZKM$dZr1TEnHo
z&1zAP%)rr4Lrcy<Gc0KZDzgDEbwR=K+p(ntM09$OGBqxsE=Jmp=^<>uB}PV|D2t>>
z0mvoj`3!rnLSbzQ7{<P=r|*gX@0b5}d3)q)cI0a2T4ZbFi;Sl)<B398U9I`B`dim;
zX8nC{gx4unOF2dqB|CELFwd?Cp;T<P@>=~AEcoB8Rg?WqX_A}<TuO6+S#loQ;LcNL
zvk6AoTq1*;)@E8DuXr;xcu*(E+86NCF)~F9Aei+8AEz^(V8(N*l&Lot05T*1L%X;g
zJm~7d%#JTa=Sq)!OnjQz{||=9B%lKo`NX307n4D7TD^n-kt&gC=vctcG78M(p~*7%
zt`rcw+pbiF(zh2EZY84e(i`x5p`gjmhP(~?(BRA~l51#v1u8;WPw2^&j3<=weE8$2
z5JNhAkW^kOw_&EYFO^DLT;=ZoXhn9*p0dl7c}UQ`s#g0lrOl+Z7=Eb4XX9E7wj}{=
zEhv%C0q)Hk;tg!Y;vxKWyp34v#=L~=xcy&;ABA_kjlc8!#<LSRv>iB^4V=u$Om!2i
z6MM0k_p0M3*vX(o=pN@qT)I}9K{DW4o?avg0)Js+Y?Zna6%xi*IHU9Z?h5_*g%Yfy
z*FuAboz}V=-byCt$p@%kRbdd`^MekPiksL^FJwQjpxKC;Qjuof1JgWDp?}3WAJ@}2
zz=oRzKTR#V;TO+G8F5yak7~YUKC7RO_g5HSkM<lhsv?ouMc`M9L<nvQhCCaE<0};>
zxQP)w1qmh;!2_8%u%Ol;Sw^j;+n>K*n0FIDAQ1T0No)OuyNP*OX|%p5`{C;ne(`>N
z=C-yF)d>w5#)u$OgeC!ooX}Wfa0zt-?Isu&f{YtY#dtCLrwc7H6W4Ttw_>BaxZD21
z?JxhhCsv}Fe*qCvNeB&o)SBOWeJCBr;sO?!==4%cMp42em!2MU|D-zyT@;(lF7z<;
zL&I>Kh1In<ubn4%ppAu}{!d^#$FnT^jOq9fGr7%7W|_%nObGt}ATaDW{{tx6<x46*
zV}_nFAHQ(ctsl-hJ6ENg#Bh#>Enl^)UE5e#ZOO2wUP{cto=ne&TWufZM1lQ;-ElYP
zcod$yTg(<1B>7&+*tW|v+(3>)F;`<lUEla6LJgKdjR8~up~h^eF&3fx2sK8bP9qew
z?gypVP>Kzu6rhv>6tunp^`fz5{iomFd)g3KANcm}Q|qm*+w$2dv7fU$wf-EB!gG%=
zC!zp`y6ST>6&*}XYmVx{T@}oCVJk8L=2L|_WFqiYVC~|@rPV-&{QyQcv^>qvA&czb
zPL(^yL;bv_E+;|_Du9YTIR_)vy>fztm?v@^wt4fAnXXfaIZ(!KCj}JPPAg2ENNodB
z+lerP$ZV&{23j_;#WuZYKql@K>=LV4|4x-J$3snFphlR+S29Ql)12e5t<AP(Y>Tab
z=_q83>|!Nq2-MHr{+tN4<rzxgS>r1wNQl*t<FKvO#v0vXeI-sgEi9<1HBejDfP@JC
z9EWX9HUhP#IDes+S_5@u1hAn5;nEh{{Nrp06d~X`y1Eg@<Udh@;s86`O*tNFY6sNl
TN!=?MB=qFuOAaIwhh_a=>xe%t

delta 2309
zcmah~O-vg{6yCL$#a{m#FPI;jwF5B=F^HrzxTS=sLZr4pYL}*$m8>OR$Wr4)W1BP_
zN~E-hDkm~Iw6`A18MTLAs#aAGQ4eXQD$+`odaH6n$+=bE8w0@$R#)<;nfKoJ{^rg2
z$s6BKhhK$45(nSI#c!=A(fx3e-`vkl4J(|+Y2K2*C=rRRg;JmxB*9{cgo<IZe?L=X
z;;vF(F-ekaEtdL=17twqbZ?f^x;0;cCxiOn2L<%s{%L+as!0WpE@U}9xql>IAJqZ_
z+@`R}&m3ElR0nEMkDsOX&4gUUbO&Ns51l2-Mox>ksKXtoQC((K5ekdV@U0Ye+{I6K
zU2Qs682y(|6~?q4R}=-JyxZOo+-V8D7o%wLR$Cr>6LV=U&1tG8yF6q&c<9x`Z6y}Q
zwLTa1QU_}Cw2+fCDNJbnF7ikR@_?J1m}i+^(FR=}Mmu;Ia(j>=e9A?>+<~0Fh&=2f
z=Q@y;bL8t2TE;~l1M)?4oYfO;4bSJbOD?LqF``bszynr!Ct%cScEe~`cCD_8^r?`c
zFNN{L$*xDdI0z<Wi2fihN-10-glM??>F5Y<M-kEhbq|1|kPHegpMXsN>CW?6I^p~D
z2HHD*V%}+zy0v4fUPr8$RkL9d=4lK$=RBz>MM#0CAu9M|;H}sHMScPmc>qUPx2h&l
zU|AOc6!=<MOu~*JjM88IyRG=Xb(@sUiq(L!g&oVhr+QoAr_opesCxlUeOyH`!W8{n
z`eX_-MW$6-w^dJzser7l`Zqy95N7F>K!(3YR{|q+A-d{25LXDkBy=pO>;e5PSUb`d
zq+^sD_qR>e<3zWKxor@$T(R%fs<u%f_z)f(C#fL8cWhE=%hd6mG8VuJfAt#xFSrNX
zk;Fy&o=0-OMRMP)K8xg@MXo-eFC*7zDfHbOmgEG9QQI)fcTJ;W5`r`31nMvm&3gHc
z4I<2xybS>DTEsOI%+YtkLpN9z-VL+CQdNakSBB9_LBK59PsZumu_~rbZh>Z*ei?Q=
zWR^aP3}moYGLQCW55e(nSJp`h#5(;wvJ@gWVYw?#SzE@2N%OIf7iK{K%}bm#k7>&F
z1~H8-memDLyO<GK0jfp+h~DCF(sXQ>pQT^Llw5~I{EfTKt+kqARmuCn+o6BOkf+8U
zi`Yg|pg+ck$6HI>YY69NdKIMz52@7i-X7~z7-b4VAAlngv(Y3q5`m2>5@r%bt%86i
z<U@oQz==M90tMl<K8SjW;AL^V(2wIAvu4{>GKHpoZtpxRfh=F^9B-o)yBr_kN<nz-
zUxqEjXB9I`mp=4Adg$|Vdni__52LtT;gOt_8oxl_gZgp$b7GeAa)OuWw4Cy@o?sK`
zvYe-%$%A|^{aT*b!wR6ub`xG7N7%NZHSBd`4;OoL*yFK;ao7{U?(_m~acJ2vve994
zzz*|(dj%SfJw1+ZZp*GTtL8je0~!7`*MEYMKJxNB|0kCf|K^sSb4!P}d&fL9)<4Pj
Q(}n)T;V;P|FBo9_9~tnFcK`qY

diff --git a/webui/backend/app/api/routes_files.py b/webui/backend/app/api/routes_files.py
index ad9c2dc..db2655d 100644
--- a/webui/backend/app/api/routes_files.py
+++ b/webui/backend/app/api/routes_files.py
@@ -1,7 +1,8 @@
 from __future__ import annotations
 
-from fastapi import APIRouter, Depends, File, Form, Request, UploadFile
+from fastapi import APIRouter, Depends, File, Form, Query, Request, UploadFile
 from fastapi.responses import StreamingResponse
+from starlette.background import BackgroundTask
 
 from backend.app.api.schemas import DeleteRequest, DeleteResponse, FileInfoResponse, MkdirRequest, MkdirResponse, RenameRequest, RenameResponse, SaveRequest, SaveResponse, UploadResponse, ViewResponse
 from backend.app.dependencies import get_file_ops_service
@@ -63,15 +64,18 @@ async def info(
 
 @router.get("/download")
 async def download(
-    path: str,
+    path: list[str] = Query(...),
     service: FileOpsService = Depends(get_file_ops_service),
 ) -> StreamingResponse:
-    prepared = service.prepare_download(path=path)
-    return StreamingResponse(
+    prepared = service.prepare_download(paths=path)
+    response = StreamingResponse(
         prepared["content"],
         headers=prepared["headers"],
         media_type=prepared["content_type"],
     )
+    if prepared.get("cleanup"):
+        response.background = BackgroundTask(prepared["cleanup"])
+    return response
 
 
 @router.get("/video")
diff --git a/webui/backend/app/services/__pycache__/file_ops_service.cpython-313.pyc b/webui/backend/app/services/__pycache__/file_ops_service.cpython-313.pyc
index 1e16a310fbe92d3f898dd220827315c8327d19eb..9f2333566238579caf60208529d2339fc5570e53 100644
GIT binary patch
delta 10055
zcmb6<3vgRkmG9{<OSWW7{z<a+EZa%sZyd)?9Oq*vv6J{8zbHxLq>5ra$D*=iuH<}7
zTV-cwcHIKgB$v=Iz&3?pX!$k8>`a*j+L<lTWm%ALi8QY%w0yTP(@om4g)j?y&V7>n
zX+q0OdvxBt_uPBVx#ygF&VByF5`X0mU-WiiVF3qEVE?~{O3qy>sz_LQj=RE%oX8Jy
z13cjc#8rbTqJm%bpn5<<G}$&S(L$SMP&c3>x&b}Wvv%#EVZca?4A%`7448<C;rc=I
zKp`m{C?Z7z7GfE&66-)QDIO>xB?C5MV`B`13Hv}PDP=Fl!LosJQqJ&#!HR)OQVF<;
zIN*P$Xoi1<ViEkah*q&!ED>#@y`_M-SWjt-id2bZ@UL8~5Gz|Wq&olR5S^k+tZLB{
zw^%K@MFGYNVvXq8$dj6i3eLlcwGK|K>rkO)IF5KutGxBp%G*67US8JkJ|CB22S&Xr
z*$@oGrFdvYk_`ywqY-Jbj{iMxEkm+$1QiG>saqXM++><P&JkYZK$|>K<D#P4!F@>c
zA)aW&T2X^IXthq%GE67di|a&Pc7z_@){FY=n*rW7h=%N&QS^#NMpGa*hy@HYiH)L(
zVP;s#*Cd*=gA2uGv5<8X0anB?3t$$8S&tWsEut0i4&WXiQUYzQV)3dr8@ADa#^!Am
zZL4}p*=YN!wlX&Qvzk5pM*6y@G0`SgV*iI!q!M~IiH=pH9b&ua#1`1;&7zB8F0n(b
zVpx^fDONMA8fdqOZp8Dv!j2LFwrs0h)E^2<qq8wlB4<LA(i>eM%E+V!C8Cqszw+A_
zCv}sWnl^ZsO;e#rC^jtx{ek$?Ji)f7)nps|kT&|;f?nQDy(UR##0G(W!qm!}>5HcA
zHV-474G<|3_s<66)1;Bw%)7Vl!gjTEZZd`>Lhd2!aDpw^X<yA<%gh785ZSf(aq}J>
z-$YX-rQ<C)wiUrf1jrNF1VGloYJnMvY=sxEPT{hfb;P1`WKxn%K`9mwMFR0qG@{UL
zN8%lHtF3Dz6Y2!M-;aPzi|mpf1ic7$BiIALTTa~cNt=`Jqu;g(i389i>lA6p1P<y)
zuphwy0;ZpRhzS5>lftN?m?3N)Mo@@-#VG$sG~OSbiv;@!i4ro3og)aw5F7;HEg-03
zg-hQtKxGS&V$tv!*eXR@a)`BN_kc)Y5c`Zod`NZ}0Tb>BU@;7KxvdZcWiyV`XYCID
z^x_Zg3p&#ZMN_|X$2e-3pxuxi2zDayBRGj5fS?D#8m-xg8(U8yU^>%>V*V+R7i{NE
zXR~5P`)G}8>#=36AajZeP9wIg0^PC-WFwI#=SU0%WU`@HOu(29Fhw>+t_a9w*9WDr
z6qmlR_#;=juC5UWHzBx}X^|OftnE!O!_qDr)(T5OLy|SI&^$!FnP@OH6_SGBDa?vK
zf>S>Tz^hScKY)RiDXQ9wq<Wm&Fcs<uEB4L!?ZX~sX3Vabt)Wg=7~F^PRiJ;Vb=NGb
z(}Io6qLwvTNIZ0BT{VB6o~YYkVhVg1haI99>uNm9x<mtAwiCb<mCiGj&dr9Sf#8kB
zH|sv9<!9)n2B&p}*#PByHErv0(M-cXCwg%9)y5$k<76%}2}ehe<P|3CC!>)##1OAR
zQ6-8lo3oAn`1x6hJce^!M35&Vm*CY~vc}p7(+9euo-mz7>8~5Rd4bk6wT|YML993x
zuH)6OFfhYZl=!7!D6ZJoW$2gnvqU-*lFkz5M7T>?<&bssiKc44a`8J&W9ml6vk{`0
zG#QVQ^W*{yT;^3aO6Ner7>1<Fv}<E+f^9Dvj;vt<=EagVBpQvACy*W)AlDE)iQsbx
zJ`ccaTp_gp4YDy755)bU2nfLJ!-PYb{7fG~B+@KPN_OJ@gAq&d0376j7#<8L7u#!D
zgA>WNH9;C1eLO^xZ*bJQ+d<pgK6}gybdxFoxd%N_&2jwO8)4)X&c|=a_5^{Y320Lu
zkr!2>TGVu@CEmx|xWlTLs+EhWY~21Tj*AN8DtfToM*l}w+SQRI8dD8JU@>t57g0x4
z6Sx!X@u_noMD4btkk55;oKG$4wDe(jIsK~JPRBMCYwXZSlbxj{tP2QpM0FgU-B6KO
zevPRFU?ifN0^1moEuqMnKsXfi6Y0ZqaInl*^~Qy;6o|zINO=T2^@LDNz+Tw<;2Rf#
zTL=m5umahP0MF((Py~W%0ux8uT;4ue4gO9JB(O0GK(6wG!C^f2$3l_QVTpxKe=vGB
zf}SUr=DX)Zv-#%i-pX3!C&s);w&stDcz~Ri;;}WGY|X8MbJNV``ouJ_8T$+{ae@1p
z#eTEIktto5so0Wnxo_(=wxU~{rm*O?nLEr+@Jr5#pZJcwbSUj=O1YZSuH7lu?iV)S
zaP3d|jwKBhN$12(Q&H05UNQ;SdY4S~$%bvuwWS(%q#OEE4gKkckyOJ-x?wEUFqW~E
zr)?c6TSszJXa5TyPIVqwvJE870~w1gZSkfoULakvbSDkne|k&LxsLNOEpYgF-ENy^
zQbXIy?Tf{oV`|3?D)12mcZo+1Q!D_7#-q?ZUrP`6yXo^?TGPjI^hXhVjQ+T5Qv&0O
z5@>o5>qW2|0VV^>zDyp1S8wt17AhW>k2~40gESPuGXP|r6q$?$CGtsZ5wOLaJ3#!Q
zSX8#0CG^6!qEpKest5*wwRn&K;{*$La<O!779tFs|2c9Ns$?r1j4TbyH~$mTu$W~4
z41F6P2wJzcRr7O;mTrT#^sY*yO+EEGrmAM9sxv({75N(dXph*1wk+$Xr2t40Q=$_p
z&1-!>Wl&qMNB0Tj=nC!bt=1hxRG|LeN--~>Y$k!oY00llzajz~F?j%QfKyisVUENh
zw~PdtW0CK{MDNLL=zsR^<iEaHu>12o@1?1>%Eg}He$~BAq!x}WhbcZiH*+cy2!+X`
zbf~{&%XeXF@MK(Jg{VdEE9$fTHT_J!myl8s8ZiNYY>LH+6qsR7{q)L!jPaN)v%*WM
zbzi^gb^h|uS^DFB&#VyTo*U;jhh_q&vzFe(wr|H^Q36FFO8~s@%RVw$?q{?3SDwIr
zI9XUyO70>S`6(`N1HcOIaV9&9G4uz6n|amZUkBHJu>GjQ{m{+^r(h?ZAKlpacd$<#
zW6tJ#Y5%Tl(o<vG_*(kc!E?0qAS(I02lv#x2+TjtL7A&L6^KbJQHWvq&Lu<r)I09s
z_tK&9TA-L6{|#SFkBGH=BmIcz71~gAa||3c6bSpVT3JO*>5F1Lzn}h29A?Co^n@?4
zy&8zT8rgREz}~)5|DMs2LwzHM{D<xv>l4Xup^y9y!G9ybbUcPfN;Wn7K7I30BR@(V
zKJW5`z|r$Qx9~osFVnyHT6vMS99}`1=jFg~@4mjjj~AI19ceTj0cDX}$SZ1x35fh0
zseC_venxK}E2V`;?feAw9QBr9egRe937kqvsOgELZhkv`=;%iiteES@t`+_GdI!Ou
z5n#sdRgoI_fs7JdFE05Z(<J91g<_HC1I}@`N|qm@3-{IXe)^UB1{6lsD;c4NW1k)R
zKU`l!SZ3ai46&SG7+bTI4P#&zcC8lTJvGfJsK(2mqt1!`A(nOlP5#0Bjip`J0J*|V
z<U7XEY}Y&<ZUV=%XIw{9f{lJ>qMBFHS0~y_At}q<{?u_^?FdU-X!r4|1fILHIubog
zFv*kEbMZ-854lP>09CgUPB91(Gl4ky1@sc+P$?WxSh;*nF6oD9@ZkFxuouHEyukg+
zQvTS3k3RUB{Z9;iYG}#gO<UShmbT{tNlRPO(v!B(o5vks-Vn~U=fL={&?j}xw0DcE
zXbyxCxY^o>%BLRJgE;Hyzw9XCdFX`PZ^T4@vDJ2Y#IEx3^vN1K6-Es@Q77uNuP?OP
z%|)DOXjgCKecZT>_U^Ff#?jO6;&G!`(4q!am_`Vmmv>wuyJrw)<{$@*MB~CKNeBqB
z^E2U4<bgHW#~s@qrL<|@8;Z?FV<EhhxI;agHz(j|xr92(pD$4DLw*Y}Gn=>h!_v9X
zBm@w4vx2$2TmY4HZXqKQ3kX>7J%AW1DkxyNTpv#rnfJ>@xw({E1BlX)a4Pu#(p|@4
zO>4I(mml6O550){_AMa0z-2t^(w<Ez&!)6zU&^!ZB};n$$<+RnOP)Z=;9lSt+O7sN
zrpmObE@i4qo7SaF>oBv_meyq|I%#sBhkmN#eq~?R-+)=~H-h<MaAOZ<9QeTALY1(8
z5HPimri#i6@>#z?ukWm=LX%wcL^MZtqiF?9G`ZexV5Np?+(dgTZC#pNzAtdYV4zr4
zOcdtmeSEGrTTy^}`go`)U;qv5D5bFtHY_SkRjb=;?!p9^mcCsT(T;8r4HH&+yxpY*
z_p@{K#6YbIBICspd%pHyW7QGugfquUUVPnzE7vxTC&ik_!})Y#!HO}$ngQ@Cn!3~~
zE&_HBinKFDa^tnoLHF*mu8-xM9u!ihC`82TZ*IBWryH*a?{Xw&j6UOLo?WRLA_kwq
z!{zwIYiXYr<glPS;pH^CP7T+@ZOAedgsq)Y37i`=E^s3qJJfD&iuaa`kT1iC`8E;m
zY%sqSLUCy(ra0L&B=15ngtvN=aUq_F&NhdoGg4S!M=SXX5R$JV_!<JRA#PsN0_D+s
z;RA3<lPjH?=L_ratDmV4HrMa3AFdZ={w!Q+n<k?(VCXR{%_o5}|KKz>6%?`+fb8UJ
zf!izGA#RK2OoF?j6}Z#f7WEWQa5GrM!|U<cz<Dgv*x7tRDWy&RY{m!t$X)kxv6Z!4
z%l2>-+&;FmWd-Rs(cet4)*s*C65w+sl^+}a6HB)KQD4B5LeMHHLSO+fZwbuKh9P!f
zv}uL8i4|JCHd!5$;&P>*6|{H~=2YWXDnzA_VL=3=i>wX=gRFc}E>+O{iH?WR!43eT
zhe>4vh&P2_00=~3C=OsXOxI=ovCu3^E1QoU81wJ#>mTYp)VCL^+p`3AcJ0dkc+?M+
zvH|K;;BHRJU41U%q=f-8ISsddN-9OhSyVHxY?KT0qM%L4x>IvgQxcK&*+ImKx^Vzl
zT`cq{N7S>JbtH1}4j9Sv_ay555YYYc0(a9>|M~ib!dKj_3!@pcHEnK4nH!$k^|HA;
z<7`Mf+f&Z=v~z39xpiSEV{tB7nr@a=XDS;quF;H83l(&E2~^O<CASK=LPy$Ml`>ad
z4c{;~-nMbV#&^oNgxT^p3g+Qd!*IG`G}SPgakpOQQ|?V^cX!I&op$%6+&#(a-WTji
zSN|i!uT?jGW&blnUmE&W#q+Ljx|W*y(@mqPrqSe>f2rwYvN4bhNJ-b!!tk$(D`@3{
z?q;F=G5@3ftB0>8#BZEVcMhaF2YymG_|n-|YTGYbGFE%qx+!JdbbZSW>(FgASGW0H
zHCHsm-_mim%EwzTwJw#^F6jTD;f;>l2Ckx(KJ=QkKIz@{Lg90XmjcQ4W4F|*iXs?Y
z)pFaUvliUqbjE^ri*bsd77pHtnPGolv^x77>hHQ71$`Uzt1gq!3e|X-w43%0w|$Vq
z-U!G3>s#%YN9qg#*tOFTxAC1`)YofcZ~?_4um-{<Yu=A}Ko?#*!CmPbtTfvf(M^=X
zs_gOQPl<@WmGfy2@;==`jGmChMGQyJHG@M&AQrNu!{Z8qtqemvm_WAK1GiiTyyb$`
zlw8E%!INef3KaZ3y?Ur|_0VJ90wv=hW{_k}V$qMGYbqKJN6%u~5u0zwW+nL>$mRS5
z%eX)&l1ouy^B%0P5;>3Ynv{~Z7+1kGgOnhKLMQ<NuccT7kX6x`tT`J9KfrFQb3Tgh
zNNh-BNALxBh0lW_!lJXxs`o64H=EfHMVNrdT9%5hc1b~T$!eHN-mo@a-Yaswh;G^d
zBp*B-v8~QWa_NZ6Vdl)vw5c{_s!f|3Q>MnWsX1k8&X`LwbYpj^*xdTekuM#&?oW3N
zr#gm{6DMD84y3H!i<)c3n=av+{nG;%jTu+_)#;?G{i(_&SNp}i8CN}Al3nb}l)KX9
z>r>_H)8*c!a_`ORb(xxtnYuB0vdVenZ9P}D`L>p8ImO>9;|gszi^?*^LdL!|Q{l{%
zI<NZERUN6Sj-<Wwwoz*VN75P#Se88rcAI}N17RNXzn~1bepS(=rL-Khv-W{BiuJ)2
zE6Zi{kaPHWuw=-Npb|)0>_u=>%6F;IOrgUF9rkKC*;Vaual4!pOyHr!p6q;I-emJY
z2?5LFllujy34^m}d}^G+r=hR!EvG4q4YTpfUROa8*A9t~PXqaPN~qPBGiGp2n-kNC
zHH!{IsiZKw%a-U<xEzk;oC=B-Jd7dqquG%cfeof8nQs7-J%F$5jAPfWT6P}E2KEDI
znXHRN3FIHLmYfbpPvKWQ<(nEDQL-Tr^J5l&j=6(U!NF;WhNoP^8JUH%BS;HJRyasH
zp)ZEJg4uTN`k)RP-<xm$t&{PWXy8AAX~4kkwP|}(%HEW=x25cDi3MZE<hYx`+8!Hz
zWcX@p+Oa9+*!0|ih2fOBAI$hQgC%XKNEs@w9=O_lEpXNSRPD=#mYZN=qiNUXlxuU^
zwJqh^_FVgtYuAm^o`t?lrRS>YTH7^Wy1p}2-+4We-ZGlnGP+bhmae}qwYUDhrTU3v
z-SK4EiG_U`i~X?&A9?VxhaY)3V=Yfxg_Kpew(nZkQ@z)!uB&fYH@{{rf4uNg;Z^Bk
z;gYrEEfZJP%M<V7yT>0_X;}(LpYWGCSLAdC+^=6C@FG}8Z~BM%w`jx3npSL>*PX(@
zN!TItP2}Hk0LuZ-A%<2DS2*y&I6g-r#7O5))^A|9SN{P$vU(;IkqZuEw!yx@f^GZ|
z$^Hw$9{T;08@)e5^v4L;MJj%zWV^_K5~qFuZL){n@_YDOi+chO@r?qGuR(z297_<v
zQfd*mA*e%8f}o!M{*;gyN0ePzF{@-)KUx%?jX>F!??0BuSU=V)UcP_TkU40BORH!!
zOxPG?83z1Ap7K1yaC+8n!8p8XhEJ^?V8sbEE0|zp==9L~b@-V#h9NVb0M|Lerj#|o
z&}9Bo9+T!0n-aml<uNu*5xgc=t&TfzrvN4s9u!941B=4tIPm*kCRnSE{4zi18vWtg
zIVwF4Vrz;xSBdh87DpsVcYXqP1A_yUyC#OUVK2kjtrEljoNvSXC8ZZ9mo><<*StKt
z^8MY2qwX;|#1A$nV-7P-xUOP2V?T>$6~MA#4eEP^Ua~_NsfNX(c}q46Z^<U%%4jx1
zrx-a-u2{N`c|<>TOQn1b?T|VX>#=VOg5wAvu5x4^!KV>Ch2R?qzKtM>AdTP^1V0A=
zSD)}PGBgPv7pJ2^<?}Vg&hI058G(%8X9$K6K=zgW>j=1s805&a_>LI>!AMD%kCpnN
z9Kvbgk5u9$bZQQ~-tS)-8IZ`C1Ne6fvG38Esf}8bcKbVy#lus_`2?>G@^7m-UCAvK
zqVMP|+JbjHH30hgDu6r9+Rj@J=zm+aPTR;vGE9j*IJvi0F7W%O<{+d<u)G@AYr(Bo
zg`%tkA~ndeQY%3x7KQQYaOf1KOqZt}ypcMmtK8_91igrPIs2m!g5E$Z2(0wT^m@LS
zCIFVuFHYAdSmd~heV;_|27=!pcniTF5WI=tj|i9&R)kDwlMUP9%g|g{+DWhihyS=(
z2EZ*f&-1Txo?mjtSGlrRxT2qP>tE$6e$6$$3$^c<>RlK+rn*gcg}!LH-^4e*#UW(s
F_<vHlVl4mw

delta 6102
zcmb7IYitzP72etR%g^=uf!8nW!Po{01e>SvgL;jP&G3v(mSJ~*f%UF)W^HT(S<<LY
z(<VT2MH8iYkV=tCD<w*uNNv*wnl^2vgr+1)Q$~f*s!>D}spQc=Nn7=tJL~l>kP>Y8
zeCFJH&z$q!bMHNOPJJ%?>un+X)2uAF34iYEeo0-fKAc^W_&YwGGD#*$=raWb5d0*Y
z`^*6gSh#HIvj%Kn<Fd8S9&mso-~?yD1+IV_+yM`G0$%V2vLK81vGrvKav+Dx_P*Re
z9^`S^(U%|afe&RT6yX0t$%VfOx8%WJuaqTaOF2@ml-J^hBHonWVuoVLhrb0<p;Xjj
zg_6`$u~Z_JN@Xn$D3!{k3aJwNmPzxZszm~nmzZiylE2I(RWCDBuqG2!?5h!LuaYPV
zx<`&iV{tjI#-iE`2p<Z$KI&6IP)Jb3MlI3Aivlq-Vgf-jfmss3B30rmEM=wx)&l}q
zr7FovGT0=)WaE-us+MXbd$NZEpK2vX^2v!$b&@mr<dW(o7a!x6=1Xoad87u(!zC}i
zDbXl-lby4$OBQd)Mk$+1IVk0DDR(4K5~W;{m!bFc1No?1AmwG~d|a2Gp)24zUxu!b
z>k2YE7Lk&DXzdi5SgWn6f1y-LgASOX6kD35vJ4YtsB4kRGjupjI1Og8RnP8GBg&>R
zO;TV&4JlWb&Ae%I3BvN3i}sMUx&{5$J$u!ts_j?8K{<X#0MebYz#SA?3)|)C5GvTy
z9>s1aMJ024TLl+u_pb6)@xfy<DA9OuOpfn|M)rVr{fbqjw<wb#&4rSG_6KUoz*1@~
z$aJb@^k7(pl{1#CPWyflJ7C^qg;i}VB2NXi_*6uJCK|htpqYStgjNLIj&GMo6`<J=
z?S|JYc!L%jhmfLs!ipAGqdWtRacwlXojvDkOYk7?q~~D*ZkF7K)dXt@))K5k5R0J#
z|LBFFXtBtI5>zHtvb@iTeLc1LkP4Uzf)c^^VHaXWx5*Jz)}V(v*bTa12R=Y&g0P!l
z0|95ai=;{f-D8AinC~TZfPnTCJ&zb1h{bzi<I!+8Kn!3bHTDto6AU1TZlFmr;@Xaq
zo|AMw93*-UgcKO!>f|iWIu4s@m_)$o*n*NqFP@!Dzu%b7ov70bubWQ8?+}eyjGMwS
z(>3!-HdI+Mv#&5@_oPiAd#8N$W|}!zPS8%Ul3;{j7r|WwH=7L~pA867JEzv6YQeq8
z3g&3IqS;8-F7{}}io_gu4(iQ`3X?QPlzomU-33Z$95kFig8>Sj)1c7=84MWFAH?Sy
zq7N$(C9XV!P1;Aes~t1V3{+;>>l(=lCHI%+G8|xu+KvRzWZPUOr==!ku5Q)TX+?LA
z#=`1eRSDx#<!L)frl$}@t1<Q~WOR|iVFwMhl5OW+H4!lu6!({s8afHO2zaUz*=hM2
zrAMBxzC)nKmEibTBqoP(H=)VUt$a%6X246``3%gFpT)`7J#iWKDTT&fqI(QG#*|L5
zx9b``JRc8}fgxtEuU<VjF<GdbOHGuF`8kB@8|KHb`_@dj{s*>(1K8v9LWyq`{?TzQ
z?%$*MWj}X1JyDyRewesP7V54zj7LLqTnR&J0(3_x7LDUhAUchyAu4rmQW=a-jVbUT
zs^B4l)G#=Xk7E9HX$_oTN<4=#2N5>BaHUYm9$na)NKptx0ML6xM_ML3_r@Togw?o_
z$S1H}cZ`8Dp(=-fuW4EkN#ZzVx|P~=Ur)xV(L%~XOlIxZJfr_yHt*fC1sB-sJ^R?@
z_DZ&CgMH@B=9kP(JW>~K=1M3YgDE&lZlxmBUCJc#qG2rnC)o3gY7;!kD1CJ+r)93I
z6=JbCJVE2hZFrL4DT1d7P9un}G_H6Cx-_gbf@&1Q=2_~bt~_%&i!u$e&hdlw3~F#G
zDRDV0$7PMy0I>nJ?7-rAjv<QpMH4&MQ^w9Leo~mvIz~#(mj(96hBkJ2;}!OeY9E^r
z3)s5uDvLvMvJ3r1Y=>On$~H-^uUQreTiJ!KLN?enkG--huO6$f7E7H;^bP=}9ej%*
zEy?h4x`qu0%Gh(NvuN7aX=G7z7oLPMO{EfQnpNMmG$C4euIP^a3NAFzI76Z*jSU`s
zDsz&FL$BjBd9*kv@~E-2_!OMPHnci-SP(Iq1%b1HfAw6<8#*O|VRm?Fqa#e*TqABk
zSjA5FRakRPB^B)KhGKRi*lV4SLzrAuG_!x%pr!Dp;j;59>g@Mpzv)_bZ=fod=jnIw
z8NN;M0Gr>oBypTXzF1b1lzAf0Wfn|htC;sy7@$yf3vP0{U5SQb$R8uioEY!yrW#bW
zn4WV8*t>1n6?3c1LvL}W(R7>%?ZvG;i*oVI;FZv<4Y-f&@>NE8h(z)q%&iUW^X&H!
ze;3)=9&P4w`$_AUP_!*j<(*K&N(?wr%|sMCzt(5IDzLw;m6k1`SDYc>i-gz`b8p20
zi>|B5eV7J4f}mSQ<w@PgWbm!wMT0>_URsU>L5}WI(u)b*%T+-m0h7B6`*>Y>Rm!8A
zl?!?S8|)}xYdh-gFH`)F^Y|}yGzrGqn)zZwkNHceINB{5+0w{Kc)i<w$1CVQ9)H)x
zpMA^ty*<^P0~G%`f)o=xaQG1!P2VJFb~(Li+XJff6820_2|L*%n*Sj%Vek-Jvf=q#
zhp{bCFWk?L1eP?B_wYJ`cx#U@1}dBXug7p64W&8AYWvm*o<{~J*`<#4tYYKntv&ni
zK&?UW0wVa1vG86$ZTnc@!tJ<vbW{0ly87Ctc46U91{){|8izWoe~F=-F^Oi~x<}R&
zeyVA7x12rIJK2LnH9|joeyA2ld|xVM9}S%s%Gu91*9wj7@@CQBg1vRGHl~DBITED%
zL56{otU;<5hFHJU&kankD#rn$RrhV{?dskX?A$c4rF&pYaLdlYZV4`98~l~vJpw9H
zHB4Spvc@>ehPE^bJJ``JqG4=Z(pd49uW#*NKhV*;@%9Y9!Q`#2!U%hKYtmrKyWake
z4c)hA>;k)cTa#xu(gz=q_r%w9d(y+a!LFX$GxrV~-YyDZ_RZ~LK5g-M<4U_dv2)w2
zgf@0%`*)3t)e3rJT01>{Oz;T-6|<rl=HVYKj_^Rj+L2$M@LcBy5x<<>+Q!XpnL;o7
za7V4MpXKZf7>-)f9bpG|J~{Lmz26GFG+jgvEhY$%HhCN14)FU=W)L^r1E`+W>)5p&
zRcyD{Cfv*JxwFSk{De&Gv{X?16pHxWN5F4ArhqAm-+rQk-?Wvzu%t*3*x>F0c6!9g
z77Q0#ENxg_I11R6RZg~hxRCXZc|2G$*av`Cz!|nnC}9r`m$m;JpWr_Tx+NMrq+7=0
zA>DxobVSB0uM1BvEP+PlIDCO!GIBq_-W#qcI)&D>HQ08{^ntVWN>1^KBM%&TjAf53
z5$4a_9edO~py#O33B0(5@iKe&I9{Qr3wjNOe>0s1eq-xbPvTO*%3+Q`egN3Wy^93I
z0v>s5pkH``JqXpUq?oqvnTjjgYF$_ezn~63B^W25FmdVQwLU%$QLwYWKz-vmYWWoc
z9#(2pcW;v;;|jm^;-T~#YJ82r$wX~Y-ET?!9RWXk-6$C+FQIWSc$FR18idDZp4E;D
zO?2|}EHusyzBcUOCv7f4H9-zR4eKBGCpMADH)CEpamj-$fD0Qiby`yG+fx#6Cr?D7
zC!-6X4)?iOECRfbgZkLvp47+*l8VSYZ}*xK*S+L>nH}gNfLT4~1Rq8P$PHTE8dgK8
zOA3$UI2q&8OiJPgc;&-mOC&oG?Vr1`O7I`?55%I1;a@R&ivH`V(bsWAwr3roYTFo9
zLZkAHYb$>{U-ew#E05ZZYjBBx@f*=`CErfC#P<{~(Z&K?BG+{*c_(_)tn(#pr(QQ$
z&oIs-FD2j1hM(k73x>y2j=RV6?i`t-&eJ(@yj?28YBavkkFZOuWY)>$i8|`Alwc<T
zeKvqY1dkCsOYmcYmk54O@CSmo2>yhCXBmA$4dF#)e=KZV$f=HnvjlGtTp)OdfNyBD
zBN?BIUd2NE{AB68wADy$C9^=E8?+agb!w5V#OD5N=}g<yh@e_*Vc}DY$)11BOyV^s
zil3V2+nTtNOUBYBI|E{+?hXd`j^mP5f<d5r1Ku<7+gC*0V|-XB+9QV!D$#I@JT`{^
z)fR=mS!uYwTMt)OQPu<HC|^VT3l~tvftMhQ9X#A1WHW}C!(KjIFY|SIirN^#6@p6y
zR|!5Mc%R^(1U%Br=ym5RtkTCL${J|EX~Taejaa;95d`6qspfswf8=L58{I<FCniE3
G>i+-*6Kd4}

diff --git a/webui/backend/app/services/file_ops_service.py b/webui/backend/app/services/file_ops_service.py
index 8b560a8..ef44c03 100644
--- a/webui/backend/app/services/file_ops_service.py
+++ b/webui/backend/app/services/file_ops_service.py
@@ -1,5 +1,9 @@
 from __future__ import annotations
 
+import os
+from io import BytesIO
+import zipfile
+from datetime import datetime, timezone
 from pathlib import Path
 
 from backend.app.api.errors import AppError
@@ -353,31 +357,18 @@ class FileOpsService:
             height=metadata["height"],
         )
 
-    def prepare_download(self, path: str) -> dict:
-        resolved_target = self._path_guard.resolve_existing_path(path)
-
-        if resolved_target.absolute.is_dir():
+    def prepare_download(self, paths: list[str]) -> dict:
+        if not paths:
             raise AppError(
-                code="type_conflict",
-                message="Source must be a file",
-                status_code=409,
-                details={"path": resolved_target.relative},
-            )
-        if not resolved_target.absolute.is_file():
-            raise AppError(
-                code="type_conflict",
-                message="Unsupported path type for download",
-                status_code=409,
-                details={"path": resolved_target.relative},
+                code="invalid_request",
+                message="At least one path is required",
+                status_code=400,
             )
 
-        return {
-            "content": self._filesystem.stream_file(resolved_target.absolute),
-            "headers": {
-                "Content-Disposition": f'attachment; filename="{resolved_target.absolute.name}"',
-            },
-            "content_type": self._content_type_for(resolved_target.absolute) or "application/octet-stream",
-        }
+        resolved_targets = [self._path_guard.resolve_existing_path(path) for path in paths]
+        if len(resolved_targets) == 1 and resolved_targets[0].absolute.is_file():
+            return self._prepare_single_file_download(resolved_targets[0])
+        return self._prepare_zip_download(resolved_targets)
 
     def save(self, path: str, content: str, expected_modified: str) -> SaveResponse:
         resolved_target = self._path_guard.resolve_existing_path(path)
@@ -660,9 +651,104 @@ class FileOpsService:
 
     @staticmethod
     def _now_iso() -> str:
-        from datetime import datetime, timezone
-
         return datetime.now(timezone.utc).replace(microsecond=0).isoformat().replace("+00:00", "Z")
+
+    def _prepare_single_file_download(self, resolved_target) -> dict:
+        _, _, lexical_source, _ = self._path_guard.resolve_lexical_path(resolved_target.relative)
+        if lexical_source.is_symlink():
+            raise AppError(
+                code="type_conflict",
+                message="Source must not be a symlink",
+                status_code=409,
+                details={"path": resolved_target.relative},
+            )
+        return {
+            "content": self._filesystem.stream_file(resolved_target.absolute),
+            "headers": {
+                "Content-Disposition": f'attachment; filename="{resolved_target.absolute.name}"',
+            },
+            "content_type": self._content_type_for(resolved_target.absolute) or "application/octet-stream",
+        }
+
+    def _prepare_zip_download(self, resolved_targets: list) -> dict:
+        archive_names: set[str] = set()
+        for resolved_target in resolved_targets:
+            self._validate_download_target(resolved_target)
+            archive_name = resolved_target.absolute.name
+            if archive_name in archive_names:
+                raise AppError(
+                    code="invalid_request",
+                    message="Selected items must have distinct top-level names",
+                    status_code=400,
+                )
+            archive_names.add(archive_name)
+
+        if len(resolved_targets) == 1 and resolved_targets[0].absolute.is_dir():
+            download_name = f"{resolved_targets[0].absolute.name}.zip"
+        else:
+            download_name = f"kodidownload-{datetime.now(timezone.utc).strftime('%Y%m%d-%H%M%S')}.zip"
+
+        buffer = BytesIO()
+        with zipfile.ZipFile(buffer, "w", compression=zipfile.ZIP_DEFLATED) as archive:
+            for resolved_target in resolved_targets:
+                self._write_download_target_to_zip(archive, resolved_target)
+        payload = buffer.getvalue()
+
+        async def _stream_zip():
+            yield payload
+
+        return {
+            "content": _stream_zip(),
+            "headers": {
+                "Content-Disposition": f'attachment; filename="{download_name}"',
+            },
+            "content_type": "application/zip",
+        }
+
+    def _validate_download_target(self, resolved_target) -> None:
+        _, _, lexical_source, _ = self._path_guard.resolve_lexical_path(resolved_target.relative)
+        if lexical_source.is_symlink():
+            raise AppError(
+                code="type_conflict",
+                message="Source must not be a symlink",
+                status_code=409,
+                details={"path": resolved_target.relative},
+            )
+        if resolved_target.absolute.is_file():
+            return
+        if resolved_target.absolute.is_dir():
+            for root, dirnames, filenames in os.walk(resolved_target.absolute, followlinks=False):
+                root_path = Path(root)
+                for name in [*dirnames, *filenames]:
+                    entry = root_path / name
+                    if entry.is_symlink():
+                        raise AppError(
+                            code="type_conflict",
+                            message="Source directory must not contain symlinks",
+                            status_code=409,
+                            details={"path": resolved_target.relative},
+                        )
+            return
+        raise AppError(
+            code="type_conflict",
+            message="Unsupported path type for download",
+            status_code=409,
+            details={"path": resolved_target.relative},
+        )
+
+    def _write_download_target_to_zip(self, archive: zipfile.ZipFile, resolved_target) -> None:
+        root_name = resolved_target.absolute.name
+        if resolved_target.absolute.is_file():
+            archive.write(resolved_target.absolute, arcname=root_name)
+            return
+
+        archive.writestr(f"{root_name}/", b"")
+        for child in sorted(resolved_target.absolute.rglob("*")):
+            arcname = f"{root_name}/{child.relative_to(resolved_target.absolute).as_posix()}"
+            if child.is_dir():
+                archive.writestr(f"{arcname}/", b"")
+            else:
+                archive.write(child, arcname=arcname)
     @staticmethod
     def _parse_range_header(range_header: str, file_size: int) -> tuple[int, int]:
         def invalid_range() -> AppError:
diff --git a/webui/backend/tests/golden/__pycache__/test_api_download_golden.cpython-313.pyc b/webui/backend/tests/golden/__pycache__/test_api_download_golden.cpython-313.pyc
index 815dd447b1678582ffa85e71e20f4d99768e038f..82594abf09709632848762c81e4f32a548f598eb 100644
GIT binary patch
literal 12924
zcmds7Yitx*cCPAYb-UdLKWN+FabtsV19mSDV;b`q^EMs~>9S!KTT@$f7j{9ryK}3|
z!;@Xj?q+AqWFmGlL2ERT1}T3`k{?9cO-Oz%$!;`JBBg8Eq)9DEBaQNdACX4F5*w5s
zIp<bazg&I{Y&OzfyKkMkk8^L`d(L;xeLSzO_A(IIlRuN~%?$GuzL<eC2==+kGR$p;
zXLxpyImHq-h_r3cMr`zHCwBUD5C?raiIYBE#05|Lp!*a@I9kUs=sD#j-hBNkQZ;6e
zHk!>9pV9S2+N5}9%-_b0dEr;n1O34e-Do^Z<DUFWw5>GNpn0bg2(xyN%}AxaaShg<
zsv~ujb`RE{Y9I}i<_6cD3XlM$J%f#>nn)9+y@SoC)|2%?rjco5_^M`x_l-HDdl$Fa
zV>i-B%h(%y^}e?mMyzERD0^^m**3=PeUKTqjoU*0XILo2>Q!PgnNmenP9>Egcy}MZ
zp-RfY86X{JMRnpCwgNBp<B}>|k`t1UN-KgQk*jh{g7me=Ax*iVsM2JATuiGHxyR~u
zF`b4y4>CA0C6YM2__5%bw89%zW2K$Uj~Dy=BS^i?j4_1e8IS=M=6?-uYi2H^1gzmf
zkbrXXYk3EyT#)9Zlp81)r8uD6l=1+@QOXOHhf-BQc`4-s3Pu<BRRiUtlpm;SO4aaw
zvSz#{RI4`}O<hYSQewP6EuTmw;!<*0Qq*Vbpr^6Cw9rp+K@4NXK7Sul-?86jMrkre
z(fs!n5`ZYq$Ow}t<d3?|G9ygXVbaBCG_N_ul%mw}Y*!V-05=px8h{7YLG#^sMyt!;
z@r}2^pFLs=GNUzS?&w;RvgTt-`)bSaj&7S-C&`Z16}Ypb4JK_$DesKfChfd?#J-!Q
z^U7UzByA(MQ5<#}th9R+aK;E*;4#jGxFOv^QYm#fWYgVgkw{5Z(K+e5tf)fj3M6uh
znj+%3w4*@ngj8=D<W?9*!PUJe^M-sc64_61y4OHc2ibNe2!cDzY+`!tm)Lvk&^=Td
zcV15v6qNV$v*Bwgaz#mtF)4gax;QB&p=r`Jc{Po%Q*!vC7`q}R<6+Q1RSAz%X`?TK
zn3jcjUJwN%qdR>=Zx&KlB|_x5v`9DgLzaTutw`!fx_f^j6%!N6!S1CQya9byK%$sm
zKV#lw9@jO`4E?u)GWkQhi-l2g5lNjQN#cW~kYDEj0n#{FdhIY!Fs$UpQJF|F7~va6
zt`L_ALFv>TNpVslC}6sC@(LznL%Lm23FSvn&It;yULTjzFeXwmcB9Z&g`l2<9J)i1
z5|;=H1!=(u;hpv|7!1BiHo%+iq#vxWUuHA{SnETGe*GTvq%oLl-1SA{u54q^jN_x~
zC-sf9^`EueX~{Kh)0(zr>$lHc)#@?J^O*D9^4#>?s<~Nn*D<Hg)M(u9Ck=1>)sg#-
zzxDjJ=P!r;)&BX>e;fGcfq(I9t>?21Z_jw2)CT8H%^w-g9yzDgo}Y2QaIl{BU%Qxn
z!|X@)92eBM;QYp(FStF=p*Q9Df*3*ZMFnCdbcq%)0Qnff)U6<3L=@4gB1AnE3GiC1
zGtQ7ENC-LUtdI_%b!RLgiG;Kv?M6B|1+Y(0`KZJPjTr#R5D5;y{)Y7=nECBkaT7!^
z4P2Em967E-<2vTKP8{v(o7Fk4MdMl?ajj%46pR&+6JAg@=?I+y;vE+J3fl+^_`w3A
zQ~X#7kw<JrR5p=n6BDuzm1#bT9@TswXtk;NE3qEM&e6cL5jI(B94w}y4W`HdWR@8K
zQ#b*ib(OtsA9DJbBs;=dP1SG#TnE63Dy^ZQGX;O9TQUIerTIZXEsh!LhF<`Fo{h|Q
zhL(Xo8?ADTkLk?!KMr4g$rfZ<0r9|@U=G+@nM*99UdS;-P===0PN-^nU)X>#F!vGx
zxbUb%Oe%m2s?J>$6-k&PiI7uwV%h6@bw7V%VAw2SXns|{aw8c#l8^zmbvyVUAv@U#
z{B>6>p9U-x7#b!Re9sUyhd`#1dZ)FR3BaNR_@E?ylk#ndD8xN!Y{@ll`=W8%PwiUc
z?wNrnfepDp=NEy_`;p9v3%S7P7lF}?AU$qr|Lnq@3v>2Qg<N3!3p>*|#zJN`F!~=Q
zuaJ@njQ)>u4!Hkt=V1r?Gq!(|>u>Bp{ar)<R{KLg+uz}OSYt=J)(6QC-(dSYT@PDb
zNO!Q9-pL}p)peM4Kl~QkzsvV<hY#rkZb%Q=NGmXZ>8B&u9hG2klZpgG?G|z1<dklQ
zZ-hZZg(MM-_CaKf*mv^E>A+FZo0lFjs?CV20FEzgc2C!Wmsu0I_3nr7-r4=>o@`B9
zhHEo)5d@<UP)T5B*ylfh)Z2(Sg{&fBcq~+)aTY5ADgf_5p9E@K;2G~Ubrd`UCW<Xq
zgb|ySzr?#tMWCFm>!InX2)w(jo|PBHL5u#1YVaB@cv8hY-otxMe&%zT{;Za3l{qH7
zugDcVq3WS&FOg9Dy4CCIw0}ZMBvQe6-lKTwoKi1!?FG-B13R0F%gOQS?P2ga!qoc-
zo8=CnV|2junZiYe&pwAQQ?QfejHfq>sw&1NCP9V!g2)UF|ADq*&9;|yu~brp{I0kR
z60FF$6w#S!pP8)QNK4aAs&riqrxT)_><h*wL;_a*0PS?hWB3u?YeZHh0n3p?&=FYK
zDBymn$9{iGOz2e#tZ}9k0X|LwTV=GUb4HPYr0$-O#JEHh(hF7dDg*8aiRm24D^?z9
z@_N&OK3dTwQ>J1uNl}DLDI$n4wAZ9K^~m)7)|$1t+F=~kKZgkXFMsVV`KCO(UGsO$
z*dKFMxBNH#nZTC&TW0(kx9`ikz)vC{M=~vg*}Au8xGy<hj%(Do#@WVPQ<v7%HK)vT
zyTF7NQ$t!)D6?(<Ja-^(Su^V*5BBEz2DQGyT;Cb3?@Z>blo^+^eV6CCD~qb;*(S41
z2Qr5)JmN-|!GP;vrI*KmsD=I)eUIhPgSX+T#}Xd^J#ZbdlvV)_<Pi%Hh_N!MU}#?z
z2iVucfl*k=8zEY6QpIN*Gm0)N4bVr6eGc=>%%_c^7-@xBRe)It?-juu{UVCM7+KZ#
zeS`WI9wyXA&%Gi5dgbSauP*kW+>Jr!16`Hn9g~nB)`0O;OnK=P5&CpiB!{6jas;B6
z9V>$z)+NWF@N}y+mSKVJX*u0Sjw9a_Sk#G$;b|{@&~~5W_lThy3RYwjmOP0OLKPXn
z2)$PF7DlHrLLk!Jz?ZJ6+!y5Zaez;Pek2*hJPx5W0ZUm};{tfy%iH-gw4O*}6Y^E5
z9J4l;qYf;)jMbTd5DU<lyp)h*s@}I6$XcQ@buj)5x&VmfslL^8v+2j@G|&1R*QRl8
z^W3J=#MyDpvpL7@(6}A<+kfuPAa$|;WXG~~$Cm*zTnl8@^*(6KMFzCUKrV7xi=563
z#WK=(HZn2K$xo{5ZwVg?e|G-v+qum>+UA~Y%bxk_-Uq#peQR!=zIl3f%iZ2w`!210
zSGK)p-nYk0-ahBfb?((V_hviy&HMTwIp^D;`8Ld+|7`5e*xdGPOYejFdEdboZpObi
zSKa&X)x9qjRE&RQ`rD3fv;Sh7_h`gzy*2dHR|3K^M+h3K47`&<paq2Tt`%G;x2a|n
z0<Byj*3yOIib@HvfNS@P0I-Dn0u>=z*jy@RlsZCuRgv!~ZmiG{Er6k!g4<`sO(STl
zuq{+9VSbtU%tIh9Vk-jAegg=zs_*;;^{vL(8Uk6f=cTS3jP~j|6ddH=0Em)d7&V>k
zF9A>IMFUU|Pxq}1qZ9-?%Kb-LpJHnfI$!R#M%gRim6~p7*I4}Bz2C)n&v(Zt^ip)~
zr}1GEV=ds-^a-QVxOBY;vjq0e8G`G;BD@+%d;!yNZBND^Do4{$IhsyRB~;nig@a8g
z09J5g1yK<I!I#>KTQvi;DT*H~ND)=fYn}}`u2bVW=j!fX%OG{g1XruP0<K=j){QQM
ztA>O4*jI0$Ud|WPe8J4dJr8VI1j8c>PP@muz%l-YS3=jtpj(EnTe2-X?;oA_MJi#p
zknzG(0lWWj;IRFe$No!?_gG*F*xd)vxV-<F_adzz6xX0E^&w#rD#OyyYx+-1)}*`j
zM!URgNgvkDbG#?-!&Wv9??(H)cggxyCG{<Uqv&USLm#-rE3@_s0hCv}X7%$mChYTT
zObSjS3b6kh^?@yXU4E^#7i!L7u}|==R`qLNvwq!c)~{b}{a5m!8_<K6$qrZ#PhA|o
z#}b?vnzWNz1tP+G(JqjS_!@&~I<m4|K*kkj0g`rBSOpSCc1|oDp7ziO^d&s)FObx}
zfWr-S!_=;rW?&Qc#=;hmam*;V+AG+A#qi&4h2GG7-lbk-1CFl7t2T_t(p=C`DMMw3
z0Nv|ZN%OSlxUCwu_5SV*KKGioU}^6g>)Ztwyer2=G%oU>{c~`^fjV1Sb$K8C?QGq*
z|Nm^sw!7DITY9xEz1c01dEdUg1D|Q$I(H(seZRJSe|G!9dEcQW9Q#Fv<QKNX>~Wv{
zpM2iq%}W@PzyCk<-<LN6E14jpHt$(-CEzVt30N6|!p7k@Gz2BvjIV77s(HT&wMCQg
zTQvl@60q2gShXQo^P2TnZHQh8$ZP2)uo$0|497iM1Z~}wo=B-FMRz4(UsH+?lSxEe
zw>&v+ls!A$zcQHPK7_%%0@4lUmZ0u7^1{;%dBW&GIN!1f;}pRumRIbUye5qIR=~J?
zJ->4+h{-q}STBX=r&opNt7UfufxV>+*vB-_#vIqBab0t<2PZN}9W|l(ZOzkim(x6*
zIWDYm;RlWkJ`XI)o{MOn-8t?}jeGOwb)UmB0jTqZrNDQxb>eRUz8CMP(EXRt-Shd4
zna#cPzP$zb-f_P-x9f<u>qvIjv3cL|#rrI6{Tq+@?7#GRk5%9_9uk2I&pyX9%H<t?
zKsnZG(|MJ9Ef&X7CPpmj@Y7wIJjz=j@JM03PdQj@mBIlOd>00~nQOJ{Vzb(H;aA?R
zv03fRm|w(u@N;=DjZ1cD;8@8wG!5q?V#2_P>qR^vJXD$H5_0ki<`FywmG40Jbtl|c
zNfF&aPhzUeb{<2Vu{&DOb=|Anm_!}|Tp}sgd);waNtuV6x=R%aoMRH){48Ikca`gR
zQK7HNaL31FPo&GB=TclhvKp;kfyp0WC+<K5tM#=FKWX~7Y4(D)cFT<GG3U>5O&ZrU
z+dc=r7Es?ZHFjw??K0K!-Eg<${<(Q>e?fUy*dH|ydhqJXr>%1Vt!c;o4y`Hj;Lsy(
zaPe7<1G-C9=P!Vus*@Krcr66JAfnVsuvjgFQX!{`z}rl-PDR_go`p&j1kg@J&p~5n
zkrxP{YiPP_WxF&fD+-)xq9n?H3Li$Mp@-yMh;%=_>jhUJ;plEE8NcVKkTdc<D0R<f
zoS{?k0v`}A92oZvHk3<OIWK+ZYJ{o0&IiC;LHP&SF^}}#%GRA;5vFGwD`z^>H~5Hq
z>vw9ZLrYHeRPss^4zuZbHBR%hPs*pcR!&|O6LMU@>ws`VD~k&GLl|cABOLJ3DGioS
z>Ee3&p4Ck2;(C8<F|{YNbpx+7wPzl2XMd-rHoWB27Oop~cZVf47EZ&V{k1r`iL+PK
z;{eqoxMKvjjTA8<#3hv?`VzC;T0YCgdKckh<P|UkJ*%1IMb+S5*dp~E%GRBEr8ypc
z#EsB7hMPWkgM?nR8_Hk%(H%pnq!e-(_j)#Cb}L5vAquV4IYGeVK|#>Hf-sqiPr=1)
zLH7v)-iFBM)CjO$O%xRjtdvX%0_j8s-560@dlsp8Fq*(9h0#@v-oxm9jQ$9tTM+3D
zf`C^n<d^{a_e8!p1p^E$o3X%Fj5c6|TY@yg0~_TSMDH^THm`G-U1+p9gA1I?*}kyG
z;~Zlb)>SzVEi~6S_bs%ob?#s2sBxZP7ur0|w;;>mJk2in9M0ckUqF10HCjOC_~Daq
zNkkArLHzVfQ*cKWKAoV^AqTL89d7fIAT2wUlvNZ2y7{Bq<P_ci$E(8XL_)qu@2ZmB
zSk!?@x=V%&RzxK@+}IKx&BCy{;fhEq0fI+2#v1dtc)Q^ee0SmUsw^3oR`rdg*_V`V
z<YC+|7DVF$J-z&@uPH5upJZH$Yb{Myq}UYPdb!a}g`ZwnHZIa`E-ytd>l;m#Uf-uz
zZFO!KM&JnC$TMc=Pw3~;2FoW;=k^<dbdbzJ8T1bn#I&#NEXzJ++P-4^zhb<<VruBW
z|0%QXDbx5B<NK1af53g8`=I9gH9uxQ-u1CMd-9X-<pNz=peq{)=K{T2p!Wf*1@>j@
z`sSJa|H(w2GKZcr!KX~mQ|8SDSHF!t$IhP2ZRpZAbS*IS_3M)k#^IZp&f1$EJA5CU
R{=w-Vo%!0%IGU*>{4dBUP167X

delta 1599
zcmZvcPiz}S6vlVfyX&<bJC6S(j_npFO`I;N-K1?wC{?Kn4Jd9al1-}?Ty0%@6WluM
z@OItOAhlfRxzVFi1qXTpRe}SGdWA~8!HE;n7LY2qAdrZJMLB?A-dGhXu=0NUo0&J?
z8^4*|KN|1N#D0xN!xFz1kKS!w@7suF*tv~~eMX?7%?BY^kW9&xD>~@az+!^pp1c;*
z_{LB&Dpez+QZ>l$z8SW0Ba8P2ba^pPV@%oD8h%Nw^v}m3F6^|*z<dG{f`gUhd<s&6
z^-6kv5C#Q@Dns)b$P}cEG%A_ltYk*2>f#>!bTBy_=q&-V)tuRP;It&w_`>+;EZ){r
zc!Tw`DBflnywBWLgU8;KsuD0$0@-8`F#Ak7D_u}P;S><0no&~`r13sgP>_=*Naqw3
z6yl@{3UdkxikM;OTZtGkKaCq&TK+M$`A~i+vpn8cCs+i3Qp?vAz6f7&YO6NH3Dwn$
zjV1t<-4D1PK!g(nNkY_@YS?SG)3BZT6{~&8252^H7c@R(D8Ay_tz}44aGoT~#ia~|
zLg6svIQXh-dnecY+>7nYPODwRTUv^xH$TyeY+r_t8>&bH<07`+vTFb%#6e=Gvt}?T
z^0v#k6d;E|y~IXvhO4nz*WYDK$KOM9EQHU8GsS6|snuIe+wuHB2U;%ePoeO3Z!L-i
z9mn6vYcq%#POu_=82+4X$K^<I2PJ`7l4rT}=AGjSdBaz%72ET(G*2ZQ$1fsdJpV6|
z&zQchcD&`%tbuo<9$Uw!V@DFAu;I(l^lZzs-}K-RUX2~l_j4~J07bkP%ds4O6Kk>(
z&h>xH4E(?tmVc1&TCsrT_z3RJrI?H#rJrE|JU%qS7}h3IbdJYOMddE0DpZ@1d4pdC
zX+<)ECw!&RuDk0+oGy<F#N^J=8BJ_7?BH>5h~y~A92Z}?;I^GRvZydrc#lhl1*-Fn
z<cdb+aI5%dGK;5;IkC*Yj=aJ<VS$SuTdR4mTTa`vmfIbtaYy-=J(v`_L?(}IX<8n0
zlX(nG?qi2>c5*@3eu*b{O-=n{ooG6jYOQ9&f;PA3RCD3Xf86lyuCr_olcmQdQ|0N%
zSqkepVXM3?@juhvFTci);iK}xeuD=aa<4#i>`w5;cK-C06K%&fl-`LLBTMRr=eQVA
zyt;e;*aWppB%-Lth)$BcN@9`J@#o#SYr}+;NE{}J5|O0%?M`vIE_LOwy2QE}SuJ#R
zP2JIrhtw+T4r=N#){QIban|iq)CKm4>nYYVBMV=*tkqi6u`FYoAGWOJj@JR(vVe{~
z9HfZAjC;j}r$lhaX?mXRdVY|0uGKsb^sd5Q8dRvu*P4!Ng9l^y-P8~pz~82}GY!+z
z6B+s<`0?|#`bGXVDA(53%9I#FxHLV^!ni&?d4|3mzP`j0yinsV;*Ty1ZxQ-r9en-Z
zYP->C*@xgQ9z(CU`wo|_0AuW1Y4m$3_CN|hkox%#l|6ImgX|Q$_43#G(pULXSEAO|
NRsLS=8B(aWe*=|8ax?${

diff --git a/webui/backend/tests/golden/__pycache__/test_ui_smoke_golden.cpython-313.pyc b/webui/backend/tests/golden/__pycache__/test_ui_smoke_golden.cpython-313.pyc
index 1317c6b214a7725094657ad60fc56bb3e0e9ef3a..91b2992410f0d6e2e26aff827a6500f760b573a1 100644
GIT binary patch
delta 230
zcmaDmmFekJCf?7yyj%=Gkms>A(|03pPdKCI<XPeBjK!M|hTmg0(ofFMD=tw;$uG~#
z$xlp4Ov*_OPR&V8F3HT#Q?OOYEJ@8R*2_uFOE1Y#uv0Lwt}>qdCR%B-UaSzK6_6z{
z*)K+t1EyhfPE0N%qs`=7u`-kUisTeEt*dkr^O7_2i}YX?0L@Ix%t`f2%uQ9Oso5+L
zH(QF4XY-nh6-<-MTX-jXGzm_AS<63pZ#Dns3Ds7NlevJLt#$m9f7J*8apmMAbpn&s
QtNABKHuG;@Q0vPJ0D_NJRsaA1

delta 237
zcmaDlmFewNCf?7yyj%=G5ahZwGh`!gPdKB-<XPeBn-7KGV`lW4yf9jL^06p+sgl&(
z;%I|dz3j}q6a`ybTLq=G%$!su>ne}Qm!g#>C&vhiE2iX^=jG%lrX(iiqy}f^rRSt-
zT34A*W{)vs1@ksL#N;wEDo<V)D<h>>kXVudlvYU0OU}qI(u3($u-(iVH(QF4ck|MU
z6-;an2h^@`cus!TD6u)aI)YI>=|W1@6^`s196bHJoxB&s5-ucVT;a%s^ZhRbhF{@`
WnEaxqX>wHq|Kx2A{F^&#V|W3>{Z{Y*

diff --git a/webui/backend/tests/golden/test_api_download_golden.py b/webui/backend/tests/golden/test_api_download_golden.py
index 3f487e1..6e749ea 100644
--- a/webui/backend/tests/golden/test_api_download_golden.py
+++ b/webui/backend/tests/golden/test_api_download_golden.py
@@ -4,6 +4,8 @@ import asyncio
 import sys
 import tempfile
 import unittest
+import zipfile
+from io import BytesIO
 from pathlib import Path
 
 import httpx
@@ -55,6 +57,75 @@ class DownloadApiGoldenTest(unittest.TestCase):
 
     def test_download_directory_type_conflict(self) -> None:
         (self.root / "docs").mkdir()
+        (self.root / "docs" / "a.txt").write_text("a", encoding="utf-8")
+
+        response = self._get("/api/files/download?path=storage1/docs")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertIn('attachment; filename="docs.zip"', response.headers.get("content-disposition", ""))
+        with zipfile.ZipFile(BytesIO(response.content)) as archive:
+            self.assertIn("docs/", archive.namelist())
+            self.assertIn("docs/a.txt", archive.namelist())
+            self.assertEqual(archive.read("docs/a.txt"), b"a")
+
+    def test_download_multi_file_selection_as_zip(self) -> None:
+        (self.root / "a.txt").write_text("A", encoding="utf-8")
+        (self.root / "b.txt").write_text("B", encoding="utf-8")
+
+        response = self._get("/api/files/download?path=storage1/a.txt&path=storage1/b.txt")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertRegex(
+            response.headers.get("content-disposition", ""),
+            r'attachment; filename="kodidownload-\d{8}-\d{6}\.zip"',
+        )
+        with zipfile.ZipFile(BytesIO(response.content)) as archive:
+            self.assertIn("a.txt", archive.namelist())
+            self.assertIn("b.txt", archive.namelist())
+            self.assertEqual(archive.read("a.txt"), b"A")
+            self.assertEqual(archive.read("b.txt"), b"B")
+
+    def test_download_multi_directory_selection_as_zip(self) -> None:
+        (self.root / "dir1" / "sub").mkdir(parents=True)
+        (self.root / "dir2").mkdir()
+        (self.root / "dir1" / "sub" / "a.txt").write_text("A", encoding="utf-8")
+        (self.root / "dir2" / "b.txt").write_text("B", encoding="utf-8")
+
+        response = self._get("/api/files/download?path=storage1/dir1&path=storage1/dir2")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertRegex(
+            response.headers.get("content-disposition", ""),
+            r'attachment; filename="kodidownload-\d{8}-\d{6}\.zip"',
+        )
+        with zipfile.ZipFile(BytesIO(response.content)) as archive:
+            self.assertIn("dir1/", archive.namelist())
+            self.assertIn("dir1/sub/", archive.namelist())
+            self.assertIn("dir1/sub/a.txt", archive.namelist())
+            self.assertIn("dir2/b.txt", archive.namelist())
+
+    def test_download_mixed_file_and_directory_selection_as_zip(self) -> None:
+        (self.root / "readme.txt").write_text("R", encoding="utf-8")
+        (self.root / "photos" / "nested").mkdir(parents=True)
+        (self.root / "photos" / "nested" / "img.txt").write_text("P", encoding="utf-8")
+
+        response = self._get("/api/files/download?path=storage1/readme.txt&path=storage1/photos")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertRegex(
+            response.headers.get("content-disposition", ""),
+            r'attachment; filename="kodidownload-\d{8}-\d{6}\.zip"',
+        )
+        with zipfile.ZipFile(BytesIO(response.content)) as archive:
+            self.assertIn("readme.txt", archive.namelist())
+            self.assertIn("photos/", archive.namelist())
+            self.assertIn("photos/nested/img.txt", archive.namelist())
+
+    def test_download_directory_with_symlink_rejected(self) -> None:
+        target = self.root / "real.txt"
+        target.write_text("x", encoding="utf-8")
+        (self.root / "docs").mkdir()
+        (self.root / "docs" / "link.txt").symlink_to(target)
 
         response = self._get("/api/files/download?path=storage1/docs")
 
diff --git a/webui/backend/tests/golden/test_ui_smoke_golden.py b/webui/backend/tests/golden/test_ui_smoke_golden.py
index f39a314..954cbd4 100644
--- a/webui/backend/tests/golden/test_ui_smoke_golden.py
+++ b/webui/backend/tests/golden/test_ui_smoke_golden.py
@@ -215,7 +215,7 @@ class UiSmokeGoldenTest(unittest.TestCase):
         self.assertIn('function openContextMenu(pane, entry, event)', app_js)
         self.assertIn('function closeContextMenu()', app_js)
         self.assertIn('function isOpenableSelection(item)', app_js)
-        self.assertIn('async function downloadFileRequest(path)', app_js)
+        self.assertIn('async function downloadFileRequest(paths)', app_js)
         self.assertIn('function applyContextMenuSelection()', app_js)
         self.assertIn('function startContextMenuOpen()', app_js)
         self.assertIn('function startContextMenuEdit()', app_js)
@@ -239,9 +239,9 @@ class UiSmokeGoldenTest(unittest.TestCase):
         self.assertIn('const editableSingle = items.length === 1 && isEditableSelection(items[0]);', app_js)
         self.assertIn('elements.editButton.classList.toggle("hidden", isMulti || items.length !== 1 || items[0].kind !== "file");', app_js)
         self.assertIn('elements.editButton.disabled = !editableSingle;', app_js)
-        self.assertIn('const downloadableSingle = items.length === 1 && items[0].kind === "file";', app_js)
-        self.assertIn('elements.downloadButton.classList.toggle("hidden", !downloadableSingle);', app_js)
-        self.assertIn('elements.downloadButton.disabled = !downloadableSingle;', app_js)
+        self.assertIn('const downloadableSelection = items.length > 0;', app_js)
+        self.assertIn('elements.downloadButton.classList.remove("hidden");', app_js)
+        self.assertIn('elements.downloadButton.disabled = !downloadableSelection;', app_js)
         self.assertIn('elements.renameButton.classList.toggle("hidden", isMulti);', app_js)
         self.assertIn('elements.copyButton.classList.remove("hidden");', app_js)
         self.assertIn('elements.copyButton.disabled = items.length === 0;', app_js)
@@ -250,8 +250,8 @@ class UiSmokeGoldenTest(unittest.TestCase):
         self.assertIn('elements.propertiesButton.disabled = items.length === 0;', app_js)
         self.assertIn('openCurrentDirectory();', app_js)
         self.assertIn('openEditor();', app_js)
-        self.assertIn('downloadFileRequest(selected.path);', app_js)
-        self.assertIn('anchor.download = selected.name;', app_js)
+        self.assertIn('downloadFileRequest(selectedItems.map((item) => item.path));', app_js)
+        self.assertIn('anchor.download = fileName || selected.name;', app_js)
         self.assertIn('openRenamePopup();', app_js)
         self.assertIn('startCopySelected();', app_js)
         self.assertIn('openF6Flow();', app_js)
diff --git a/webui/html/app.js b/webui/html/app.js
index 8f7fac8..7495988 100644
--- a/webui/html/app.js
+++ b/webui/html/app.js
@@ -384,15 +384,15 @@ function openContextMenu(pane, entry, event) {
   const isMulti = items.length > 1;
   const openableSingle = items.length === 1 && isOpenableSelection(items[0]);
   const editableSingle = items.length === 1 && isEditableSelection(items[0]);
-  const downloadableSingle = items.length === 1 && items[0].kind === "file";
+  const downloadableSelection = items.length > 0;
   elements.scope.textContent = isMulti ? "Multi-selection" : "Single item";
   elements.target.textContent = isMulti ? `${items.length} selected items` : entry.name;
   elements.openButton.classList.toggle("hidden", isMulti);
   elements.openButton.disabled = !openableSingle;
   elements.editButton.classList.toggle("hidden", isMulti || items.length !== 1 || items[0].kind !== "file");
   elements.editButton.disabled = !editableSingle;
-  elements.downloadButton.classList.toggle("hidden", !downloadableSingle);
-  elements.downloadButton.disabled = !downloadableSingle;
+  elements.downloadButton.classList.remove("hidden");
+  elements.downloadButton.disabled = !downloadableSelection;
   elements.renameButton.classList.toggle("hidden", isMulti);
   elements.copyButton.classList.remove("hidden");
   elements.copyButton.disabled = items.length === 0;
@@ -496,21 +496,21 @@ function startContextMenuEdit() {
 
 async function startDownloadSelected() {
   const selectedItems = activePaneState().selectedItems;
-  if (selectedItems.length !== 1 || selectedItems[0].kind !== "file") {
+  if (selectedItems.length === 0) {
     return;
   }
-  const selected = selectedItems[0];
   try {
-    const blob = await downloadFileRequest(selected.path);
+    const selected = selectedItems[0];
+    const { blob, fileName } = await downloadFileRequest(selectedItems.map((item) => item.path));
     const url = URL.createObjectURL(blob);
     const anchor = document.createElement("a");
     anchor.href = url;
-    anchor.download = selected.name;
+    anchor.download = fileName || selected.name;
     document.body.append(anchor);
     anchor.click();
     anchor.remove();
     URL.revokeObjectURL(url);
-    setStatus(`Download started: ${selected.name}`);
+    setStatus(`Download started: ${anchor.download}`);
   } catch (err) {
     setActionError("Download", err);
   }
@@ -782,13 +782,22 @@ function createApiError(response, data) {
   return err;
 }
 
-async function downloadFileRequest(path) {
-  const response = await fetch(`/api/files/download?${new URLSearchParams({ path }).toString()}`);
+async function downloadFileRequest(paths) {
+  const params = new URLSearchParams();
+  for (const path of paths) {
+    params.append("path", path);
+  }
+  const response = await fetch(`/api/files/download?${params.toString()}`);
   if (!response.ok) {
     const data = await response.json().catch(() => ({}));
     throw createApiError(response, data);
   }
-  return response.blob();
+  const disposition = response.headers.get("content-disposition") || "";
+  const match = disposition.match(/filename=\"([^\"]+)\"/);
+  return {
+    blob: await response.blob(),
+    fileName: match ? match[1] : null,
+  };
 }
 
 async function uploadFileRequest(targetPath, file, overwrite = false) {