fix: address Copilot review feedback

- Remove 'retry' from HttpRangeDownloader summary (no retry impl)
- Fix auth precedence: per-package AuthScheme fully overrides global
- Remove unimplented properties from HttpDownloadOptions (RequestTimeout,
  MaxRetryAttempts, RetryBaseDelay)
- Document httpClient vs httpOptions mutual exclusivity in CreateDefault
- Replace --force-with-lease with safe tag-creation check in CI

Co-Authored-By: Claude <noreply@anthropic.com>

Author: JusterZhu

.github/workflows/publish-nuget.yml

@@ -66,7 +66,11 @@ jobs:
           git config user.name "github-actions"
           git config user.email "github-actions@github.com"
           TAG="v${{ inputs.version }}"
-          git tag --force "$TAG"
+          if git rev-parse "$TAG" >/dev/null 2>&1; then
+            echo "::error::Tag $TAG already exists. Use a different version or delete the existing tag first."
+            exit 1
+          fi
+          git tag "$TAG"
           git push --force-with-lease origin "$TAG"
 
       - name: Create GitHub Release

src/GeneralUpdate.Maui.Android/Models/HttpDownloadOptions.cs

@@ -5,7 +5,7 @@ namespace GeneralUpdate.Maui.Android.Models;
 
 /// <summary>
 /// Configures HTTP transport behavior for update downloads:
-/// SSL/TLS certificate validation, timeouts, proxy, retry, and authentication.
+/// SSL/TLS certificate validation, proxy, timeouts, and authentication.
 /// <para>
 /// When provided to <see cref="Services.GeneralUpdateBootstrap.CreateDefault"/>,
 /// the library constructs an internal <see cref="HttpClient"/> from these settings.
@@ -22,12 +22,6 @@ public sealed record HttpDownloadOptions
     /// </summary>
     public ISslValidationPolicy? SslValidationPolicy { get; init; }
 
-    /// <summary>
-    /// Timeout for individual HTTP requests (HEAD probes, etc.).
-    /// Default is 30 seconds.
-    /// </summary>
-    public TimeSpan RequestTimeout { get; init; } = TimeSpan.FromSeconds(30);
-
     /// <summary>
     /// Overall timeout for the entire download operation.
     /// Default is 10 minutes.
@@ -46,23 +40,11 @@ public sealed record HttpDownloadOptions
     /// </summary>
     public bool UseProxy { get; init; }
 
-    /// <summary>
-    /// Maximum number of retry attempts for transient failures.
-    /// Default is 3 (meaning 1 initial attempt + 2 retries).
-    /// Set to 1 to disable retry.
-    /// </summary>
-    public int MaxRetryAttempts { get; init; } = 3;
-
-    /// <summary>
-    /// Base delay for exponential backoff retry.
-    /// Actual delays are: baseDelay * 2^attempt.
-    /// Default is 1 second.
-    /// </summary>
-    public TimeSpan RetryBaseDelay { get; init; } = TimeSpan.FromSeconds(1);
-
     /// <summary>
     /// Global authentication provider applied to all download requests.
     /// Per-package authentication on <see cref="UpdatePackageInfo"/> takes precedence.
+    /// When <see cref="UpdatePackageInfo.AuthScheme"/> is explicitly set,
+    /// per-package credentials are used exclusively (no fallback to global).
     /// </summary>
     public IHttpAuthProvider? AuthProvider { get; init; }
 

src/GeneralUpdate.Maui.Android/Services/GeneralUpdateBootstrap.cs

@@ -34,6 +34,16 @@ public static IServiceCollection AddGeneralUpdateMauiAndroid(
         return services;
     }
 
+    /// <summary>
+    /// Creates a default <see cref="IAndroidBootstrap"/> with built-in service implementations.
+    /// </summary>
+    /// <param name="httpClient">Optional external HttpClient. Ignored when <paramref name="httpOptions"/> is provided.</param>
+    /// <param name="logger">Optional logger.</param>
+    /// <param name="httpOptions">
+    /// Optional HTTP configuration (SSL, proxy, auth, timeouts).
+    /// When set, an internal HttpClient is constructed from these options
+    /// and <paramref name="httpClient"/> is not used.
+    /// </param>
     public static IAndroidBootstrap CreateDefault(
         HttpClient? httpClient = null,
         IUpdateLogger? logger = null,
@@ -42,6 +52,7 @@ public static IAndroidBootstrap CreateDefault(
         if (httpOptions != null)
         {
             // Build HttpClient from HttpDownloadOptions (SSL, proxy, auth, timeouts)
+            // Note: when httpOptions is provided, the httpClient parameter is NOT used.
             var handler = httpOptions.BuildHandler();
             var client = new HttpClient(handler, disposeHandler: true)
             {

src/GeneralUpdate.Maui.Android/Services/HttpRangeDownloader.cs

@@ -7,7 +7,7 @@
 namespace GeneralUpdate.Maui.Android.Services;
 
 /// <summary>
-/// HTTP downloader that supports range-based resume, authentication, retry, and progress statistics.
+/// HTTP downloader that supports range-based resume, authentication, and progress statistics.
 /// </summary>
 public sealed class HttpRangeDownloader : IUpdateDownloader, IDisposable
 {
@@ -135,11 +135,15 @@ public async Task<DownloadResult> DownloadAsync(
     /// <summary>
     /// Applies authentication to the HTTP request.
     /// Per-package auth takes precedence over global auth.
+    /// When <see cref="UpdatePackageInfo.AuthScheme"/> is explicitly set,
+    /// only per-package credentials are used (no fallback to global).
+    /// When AuthScheme is null, the global provider is used if configured.
     /// </summary>
     private async Task ApplyAuthAsync(HttpRequestMessage request, UpdatePackageInfo packageInfo, CancellationToken cancellationToken)
     {
         IHttpAuthProvider? provider = null;
 
+        // Per-package auth takes full precedence when explicitly set
         if (packageInfo.AuthScheme.HasValue)
         {
             provider = HttpAuthProviderFactory.Create(
@@ -148,10 +152,13 @@ private async Task ApplyAuthAsync(HttpRequestMessage request, UpdatePackageInfo
                 packageInfo.AuthSecretKey,
                 packageInfo.BasicUsername,
                 packageInfo.BasicPassword);
-        }
 
-        if ((provider is null || provider is NoOpAuthProvider) && _globalAuthProvider != null)
+            // When per-package scheme is set, do NOT fall back to global,
+            // even if credentials are missing (NoOpAuthProvider).
+        }
+        else
         {
+            // Only fall back to global when no per-package scheme is specified
             provider = _globalAuthProvider;
         }