Fix: Model downloads failing on VPN connections (SSL/TLS decrypt error). QoL: Retry button

StabilityMatrix.Avalonia/ViewModels/Base/PausableProgressItemViewModelBase.cs

@@ -14,7 +14,8 @@ public abstract partial class PausableProgressItemViewModelBase : ProgressItemVi
         nameof(IsPaused),
         nameof(IsCompleted),
         nameof(CanPauseResume),
-        nameof(CanCancel)
+        nameof(CanCancel),
+        nameof(CanRetry)
     )]
     private ProgressState state = ProgressState.Inactive;
 
@@ -33,9 +34,20 @@ public abstract partial class PausableProgressItemViewModelBase : ProgressItemVi
     public virtual bool SupportsPauseResume => true;
     public virtual bool SupportsCancel => true;
 
+    /// <summary>
+    /// Override to true in subclasses that support manual retry after failure.
+    /// Defaults to false so unrelated progress item types are never affected.
+    /// </summary>
+    public virtual bool SupportsRetry => false;
+
     public bool CanPauseResume => SupportsPauseResume && !IsCompleted && !IsPending;
     public bool CanCancel => SupportsCancel && !IsCompleted;
 
+    /// <summary>
+    /// True only when this item supports retry AND is in the Failed state.
+    /// </summary>
+    public bool CanRetry => SupportsRetry && State == ProgressState.Failed;
+
     private AsyncRelayCommand? pauseCommand;
     public IAsyncRelayCommand PauseCommand => pauseCommand ??= new AsyncRelayCommand(Pause);
 
@@ -51,6 +63,11 @@ public abstract partial class PausableProgressItemViewModelBase : ProgressItemVi
 
     public virtual Task Cancel() => Task.CompletedTask;
 
+    private AsyncRelayCommand? retryCommand;
+    public IAsyncRelayCommand RetryCommand => retryCommand ??= new AsyncRelayCommand(Retry);
+
+    public virtual Task Retry() => Task.CompletedTask;
+
     [RelayCommand]
     private Task TogglePauseResume()
     {

StabilityMatrix.Avalonia/ViewModels/Progress/DownloadProgressItemViewModel.cs

@@ -71,6 +71,11 @@ private void OnProgressStateChanged(ProgressState state)
         }
     }
 
+    /// <summary>
+    /// Downloads support manual retry when they reach the Failed state.
+    /// </summary>
+    public override bool SupportsRetry => true;
+
     /// <inheritdoc />
     public override Task Cancel()
     {
@@ -91,4 +96,14 @@ public override Task Resume()
     {
         return downloadService.TryResumeDownload(download);
     }
+
+    /// <inheritdoc />
+    /// Resets the internal retry counter so the user gets a fresh 3-attempt budget,
+    /// then re-registers the download in the service dictionary (it was removed on
+    /// failure) and resumes it through the normal concurrency queue.
+    public override Task Retry()
+    {
+        download.ResetAttempts();
+        return downloadService.TryRestartDownload(download);
+    }
 }

StabilityMatrix.Avalonia/Views/ProgressManagerPage.axaml

@@ -113,6 +113,15 @@
                                         IsVisible="{Binding CanCancel}">
                                         <ui:SymbolIcon Symbol="Cancel" />
                                     </Button>
+
+                                    <!--  Retry button: only visible when download is in Failed state  -->
+                                    <Button
+                                        Classes="transparent-full"
+                                        Command="{Binding RetryCommand}"
+                                        IsVisible="{Binding CanRetry}"
+                                        ToolTip.Tip="Retry download">
+                                        <ui:SymbolIcon Symbol="Refresh" />
+                                    </Button>
                                 </StackPanel>
 
                                 <ProgressBar

StabilityMatrix.Core/Models/TrackedDownload.cs

@@ -1,4 +1,5 @@
 using System.Diagnostics.CodeAnalysis;
+using System.Security.Authentication;
 using System.Text.Json.Serialization;
 using AsyncAwaitBestPractices;
 using NLog;
@@ -316,6 +317,16 @@ private void DoCleanup()
         }
     }
 
+    /// <summary>
+    /// Returns true for transient network/SSL exceptions that are safe to retry (ie: VPN tunnel resets or TLS re-key failures)
+    /// (IOException, AuthenticationException, or either wrapped in an AggregateException).
+    /// </summary>
+    private static bool IsTransientNetworkException(Exception? ex) =>
+        ex is IOException or AuthenticationException
+        || ex?.InnerException is IOException or AuthenticationException
+        || ex is AggregateException ae
+            && ae.InnerExceptions.Any(e => e is IOException or AuthenticationException);
+
     /// <summary>
     /// Invoked by the task's completion callback
     /// </summary>
@@ -349,7 +360,7 @@ private void OnDownloadTaskCompleted(Task task)
             // Set the exception
             Exception = task.Exception;
 
-            if ((Exception is IOException || Exception?.InnerException is IOException) && attempts < 3)
+            if (IsTransientNetworkException(Exception) && attempts < 3)
             {
                 attempts++;
                 Logger.Warn(
@@ -359,9 +370,25 @@ private void OnDownloadTaskCompleted(Task task)
                     attempts
                 );
 
+                // Exponential backoff: 2 s → 4 s → 8 s, capped at 30 s, ±500 ms jitter.
+                // Gives the VPN tunnel time to re-key/re-route before reconnecting,
+                // which prevents the retry from hitting the same torn connection.
+                var delayMs =
+                    (int)Math.Min(2000 * Math.Pow(2, attempts - 1), 30_000) + Random.Shared.Next(-500, 500);
+                Logger.Debug(
+                    "Download {Download} retrying in {Delay}ms (attempt {Attempt}/3)",
+                    FileName,
+                    delayMs,
+                    attempts
+                );
+
+                // Persist Inactive to disk before the delay so a restart during backoff loads it as resumable.
                 OnProgressStateChanging(ProgressState.Inactive);
                 ProgressState = ProgressState.Inactive;
-                Resume();
+                OnProgressStateChanged(ProgressState.Inactive);
+
+                // Fire-and-forget the delayed resume to avoid blocking the task continuation thread.
+                Task.Delay(Math.Max(delayMs, 0)).ContinueWith(_ => Resume()).SafeFireAndForget();
                 return;
             }
 
@@ -392,6 +419,17 @@ private void OnDownloadTaskCompleted(Task task)
         downloadPauseTokenSource = null;
     }
 
+    /// <summary>
+    /// Resets the retry counter and silently sets state to Inactive without firing events.
+    /// Must be called before re-adding to TrackedDownloadService to avoid events
+    /// firing while the download is absent from the dictionary.
+    /// </summary>
+    public void ResetAttempts()
+    {
+        attempts = 0;
+        ProgressState = ProgressState.Inactive;
+    }
+
     public void SetDownloadService(IDownloadService service)
     {
         downloadService = service;

StabilityMatrix.Core/Services/ITrackedDownloadService.cs

@@ -15,5 +15,7 @@ TrackedDownload NewDownload(string downloadUrl, FilePath downloadPath) =>
         NewDownload(new Uri(downloadUrl), downloadPath);
     Task TryStartDownload(TrackedDownload download);
     Task TryResumeDownload(TrackedDownload download);
+    Task TryRestartDownload(TrackedDownload download);
+
     void UpdateMaxConcurrentDownloads(int newMax);
 }

StabilityMatrix.Core/Services/TrackedDownloadService.cs

@@ -129,6 +129,26 @@ public async Task TryStartDownload(TrackedDownload download)
         }
     }
 
+    public async Task TryRestartDownload(TrackedDownload download)
+    {
+        // Re-create the backing JSON file and re-add to the dictionary.
+        // Downloads are removed on failure, so this restores the tracking entry
+        // so that subsequent state-change events can persist normally.
+        var downloadsDir = new DirectoryPath(settingsManager.DownloadsDirectory);
+        downloadsDir.Create();
+        var jsonFile = downloadsDir.JoinFile($"{download.Id}.json");
+
+        var jsonFileStream = jsonFile.Info.Open(FileMode.Create, FileAccess.ReadWrite, FileShare.Read);
+        var json = JsonSerializer.Serialize(download);
+        jsonFileStream.Write(Encoding.UTF8.GetBytes(json));
+        jsonFileStream.Flush();
+
+        // Handlers are already attached from the original AddDownload call.
+        downloads.TryAdd(download.Id, (download, jsonFileStream));
+
+        await TryResumeDownload(download).ConfigureAwait(false);
+    }
+
     public async Task TryResumeDownload(TrackedDownload download)
     {
         if (IsQueueEnabled && ActiveDownloads >= MaxConcurrentDownloads)