feat: downloads, RSS, subtitles, Bangumi, watcher, stats, profile, audit

Backend
  - service/bangumi.go: Bangumi (bgm.tv) scraper for anime libraries.
  - service/episode_parser.go: SxxExx / NxE / EPxx / 第NN集 parser with
    unit tests; consumed by the scanner for tv/anime libraries.
  - service/scraper.go: provider chain orchestrator picks Bangumi for
    anime libraries (TMDb fallback), TMDb for everything else; emits
    'no_match' rows so we don't retry forever; AnyEnabled() for the
    scanner kick.
  - service/scanner.go: writes season/episode numbers for tv/anime libs
    and reports a 'probed' counter alongside 'added'.
  - service/transcoder.go (existing): unchanged, stays per-media.
  - service/subtitle.go: discovers external subtitles next to the source
    file (.srt/.vtt/.ass/.ssa) and converts SRT/ASS to WebVTT on the fly.
  - service/qbittorrent.go: thread-safe qBittorrent v2 Web UI client
    (login / add / list / delete) with cookie-jar reuse.
  - service/downloads.go: persists download tasks, reads runtime
    qbittorrent.* settings, polls /torrents/info every 5 s and pushes
    the result to WS subscribers ('download' topic).
  - service/subscription.go: 10-minute RSS poller with regex filter,
    GUID dedup persisted in the settings table, and 'subscription' WS
    events on enqueue.
  - service/watcher.go: fsnotify watcher with 5 s coalescing debouncer
    that triggers per-library rescans on create/rename/remove.
  - service/stats.go: dashboard snapshot — totals, recently added,
    gopsutil-driven CPU/mem/disk readings.
  - service/profile.go: non-credential profile patch + admin role mutator.
  - service/audit.go: best-effort writer for the access_logs table.
  - service/service.go: container wires every new service; Boot() spins
    up watcher / downloads poller / subscription scheduler; Close()
    tears them down on graceful shutdown.

Handlers
  - new files: downloads.go, subscriptions.go, subtitles.go, series.go,
    stats.go, profile.go, util.go.
  - handler.go: registers PATCH /me, /libraries/:id/seasons,
    /media/:id/subtitles, /subtitles/:id, /downloads*, /subscriptions*,
    /stats, /admin/users/:id/role.
  - auth.go / media.go: write audit rows for login + library CRUD and
    refresh the watcher when libraries change.

Frontend
  - api: new helpers for downloads, subscriptions, profile, series, stats,
    subtitles; library helper gained scrape().
  - hooks/useWebSocket.ts: shared connection with 3 s reconnect.
  - components/GlobalEvents.tsx: surfaces scan / scrape / subscription
    completion as toasts (mounted at app root).
  - pages: Library now switches to a season-grouped layout for tv/anime
    libraries; Player attaches WebVTT <track> elements; new pages for
    Downloads (live torrent table), Subscriptions, Profile, Stats.
  - components/Layout.tsx + App.tsx: sidebar groups (媒体库 / 自动化 /
    账号 / 管理) and routes for the new pages; /stats and /admin remain
    admin-only.
  - types/index.ts: new types — Subscription, DownloadTask, QBitTorrent,
    Hardware, StatsSnapshot.

Verified: go build, go vet, go test (incl. ParseEpisode + srtToVTT +
stripASSTags) all pass; tsc -b && vite build emits 17 route chunks plus
the deferred hls chunk; main bundle 247 KB / 83 KB gzipped.

web/src/components/GlobalEvents.tsx

@@ -0,0 +1,27 @@
+import { useCallback } from 'react'
+import toast from 'react-hot-toast'
+
+import { useWebSocket } from '../hooks/useWebSocket'
+
+// GlobalEvents subscribes to the WS hub and surfaces interesting events
+// as toasts. Lives at the top of the component tree so every page sees
+// the same stream without re-opening connections.
+export function GlobalEvents() {
+  const onEvent = useCallback((topic: string, payload: unknown) => {
+    if (!payload || typeof payload !== 'object') return
+    const p = payload as Record<string, unknown>
+    if (topic === 'scan' && p.finished) {
+      toast.success(`扫描完成:已添加 ${p.added ?? 0} 项,已探测 ${p.probed ?? 0} 项`)
+    }
+    if (topic === 'scrape' && p.finished) {
+      toast.success(`刮削完成:成功匹配 ${p.matched ?? 0} 项`)
+    }
+    if (topic === 'subscription') {
+      const queued = (p.queued as number | undefined) ?? 0
+      if (queued > 0) toast.success(`订阅「${p.name}」已加入 ${queued} 项下载`)
+    }
+  }, [])
+
+  useWebSocket(onEvent)
+  return null
+}

web/src/components/Layout.tsx

@@ -1,14 +1,18 @@
 import { useEffect, useState } from 'react'
 import { Link, NavLink, Outlet, useNavigate } from 'react-router-dom'
 import {
+  Activity,
+  CloudDownload,
   Film,
   Heart,
   Home,
   ListMusic,
   LogOut,
+  Rss,
   Search,
   Settings,
   Library as LibraryIcon,
+  User as UserIcon,
 } from 'lucide-react'
 import clsx from 'clsx'
 
@@ -42,7 +46,7 @@ export function Layout() {
           </span>
         </Link>
 
-        <nav className="flex-1 space-y-1">
+        <nav className="flex-1 space-y-1 overflow-y-auto pr-1">
           <SidebarLink to="/" icon={<Home size={18} />} label="首页" end />
           <SidebarLink to="/search" icon={<Search size={18} />} label="搜索" />
           <SidebarLink to="/favourites" icon={<Heart size={18} />} label="收藏" />
@@ -63,11 +67,23 @@ export function Layout() {
             />
           ))}
 
+          <div className="mt-6 px-2 text-xs uppercase tracking-wider text-slate-500">
+            自动化
+          </div>
+          <SidebarLink to="/downloads" icon={<CloudDownload size={18} />} label="下载" />
+          <SidebarLink to="/subscriptions" icon={<Rss size={18} />} label="RSS 订阅" />
+
+          <div className="mt-6 px-2 text-xs uppercase tracking-wider text-slate-500">
+            账号
+          </div>
+          <SidebarLink to="/profile" icon={<UserIcon size={18} />} label="个人资料" />
+
           {user?.role === 'admin' && (
             <>
               <div className="mt-6 px-2 text-xs uppercase tracking-wider text-slate-500">
                 管理
               </div>
+              <SidebarLink to="/stats" icon={<Activity size={18} />} label="运行状态" />
               <SidebarLink to="/admin" icon={<Settings size={18} />} label="管理后台" />
             </>
           )}