Download Engine 3.6.0

Extensions

• The new Extensions page replaces Scripting in the top toolbar, with Installed, Scripts, Rules and Run history tabs. Tools → Scripting opens the Scripts tab. Existing rules, scripts and site readers keep working as before.
• An extension is one .de-extension.json file that packages site readers, download providers and automation jobs with shared settings. This release installs from a local file only: there is no online catalogue, and publishers are not verified.
• Installing shows a review of what the extension can do, and it starts turned off. File access stays off unless you tick it. An update shows what changed. New access, a new publisher or a job that runs differently needs your approval, and your settings, keys and stored values are kept. Not now leaves the installed version as it was.
• Each job runs in its own restricted Lua worker with the limits of its kind. The app holds xd.fetch, including every redirect, and xd.add to the hosts the extension declares. Jobs share read-only settings, and each secret and aes_key setting is encrypted with Windows user-scoped DPAPI.
• The new de-cli extensions commands list, review, install, configure, enable, disable, remove and pack extensions. list_extensions shows them to MCP clients. See docs/extensions.md.
• Installing the first extension upgrades the profile compatibility guard. Older builds refuse that profile instead of running its jobs without these limits.

Downloads

• Windows installer: DownloadEngine-3.6.0-UnsignedSetup.exe
• Portable app: DownloadEngine-3.6.0-Unsigned-windows-x64.zip
• Browser extensions: the Chrome, Edge and Firefox ZIPs attached below.
• Matching source: DownloadEngine-3.6.0-Source.zip
• SHA-256 checksums: SHA256SUMS-3.6.0

The Windows installer and portable app both bundle the verified FFmpeg executable, corresponding source archives, build recipe and license notices. The Windows binaries are unsigned. The browser ZIPs are developer-loading packages; the Firefox ZIP is not a Mozilla-signed XPI.

Download Engine's original code remains MIT licensed. Third-party components keep their own licenses.

Validation

Release build, formatting, strict Clippy, 224 browser/Node tests, 473 library tests and 326 integration tests passed. Desktop checks were completed with isolated reruns after parallel execution failures; the sound-preference regression was corrected to scroll to its existing control while preserving its save/cancel assertions. The packaged portable app passed 7 Extensions checks and 14 Lua-provider checks. Isolated installer install/upgrade/uninstall checks passed for English, Simplified Chinese and Arabic, with all 19 browser locales and the pinned FFmpeg bundle verified. Test profiles were cleaned without changing the existing browser or startup registrations.