diff --git a/main.ts b/main.ts
index 6b14fbf..e294d19 100644
--- a/main.ts
+++ b/main.ts
@@ -66,15 +66,69 @@ async function copy(from: string,to: string) {
     const raw = await fs.promises.stat(from,{
         throwIfNoEntry: true
     });
+
     // format
-    from = from[from.length -1] == '/' ? from : from + '/';
-    to = to[to.length -1] == '/' ? to : to + '/';
     if(raw.isDirectory()){
+        // 验证文件夹
+        try{
+            const dest = await fs.promises.stat(to, {
+                throwIfNoEntry: true
+            });
+            var dest_is_dir = dest.isDirectory();
+        }catch(e){
+            // 尝试创建文件夹
+            try{
+                fs.promises.mkdir(to);
+                var dest_is_dir = true;
+            }catch(e){
+                throw new Error('Access failed');
+            }
+        }
+
+        if(!dest_is_dir)
+            throw new Error('Destination is not a dir');
+        
+        // 格式化
+        from = format(from, true);
+        to = format(to, true);
+
+        // 尝试依次复制
         const dir = await fs.promises.readdir(from);
         for (let i = 0; i < dir.length; i++)
             await copy(from + dir[i], to + dir[i]);
-            
-    }else{
+    }else if(raw.isFile()){
+        // 验证文件是否存在
+        try{
+            const dest = await fs.promises.stat(to, {
+                throwIfNoEntry: true
+            });
+
+            // 格式化
+            if(dest.isDirectory())
+                to = format(to, true) + format(from,false).split('/').pop();
+            else
+                to = format(to, false);
+        }catch(e){
+            // 文件不存在
+            let dest = format(to, false);
+            dest = dest.substring(0, dest.lastIndexOf('/') +1);
+            try{
+                // 检验父文件夹是文件夹
+                const dest_stat = await fs.promises.stat(dest,{
+                    throwIfNoEntry: true
+                });
+                if(!dest_stat.isDirectory())
+                    throw new Error('Parent Path(' + dest + ') is not a dir');
+            }catch(e){
+                try{
+                    fs.promises.mkdir(dest);
+                }catch(e){
+                    throw new Error('Copy abort: Create dir failed')
+                }
+            }
+        }
+
+        // 打开文件并复制
         const st = await fs.promises.open(from,'r'),
             en = await fs.promises.open(to,'w');
         while(true){
@@ -85,8 +139,12 @@ async function copy(from: string,to: string) {
             // 读取完成
             if(readed.bytesRead == 0) break;
 
-            // 写入
-            en.write(buf, 0, readed.bytesRead, null);
+            // 防漏式写入
+            let writed = 0;
+            do{
+                const write = await en.write(buf, writed, readed.bytesRead - writed, null);
+                writed += write.bytesWritten;
+            }while(writed != readed.bytesRead);
         }
     }
 }
@@ -129,10 +187,126 @@ async function asyncFilter<T>(items: Array<T>, callback: (item: T, index: number
     return out;
 }
 
+/**
+ * 服务文件
+ * @param h 
+ */
+async function serve(h: NginxHTTPRequest){
+    // 前提检测
+    if(h.args.file.includes('..'))
+        throw h.return(403, 'Bad path');
+
+    try{
+        // 打开文件
+        var path = APP_ROOT + '/' + format(h.args.file, false),
+            file = await fs.promises.open(path, 'r'),
+            stat = await file.stat();
+        if(!stat.isFile())
+            throw new Error('Not a file');
+    }catch(e){
+        throw h.return(403,'Access Failed: ' + (e instanceof Error ? e.message : new String(e)));
+    }
+
+    // 添加mime和修改时间
+    h.headersOut['Content-Type'] = h.args.mime || 'application/octet-stream';
+    h.headersOut['ETag'] = stat.ctimeMs.toString(36);
+
+    // 检查是否有缓存
+    let etag;
+    h.rawHeadersIn.forEach(item => (item[0].toLowerCase() == 'etag') && (etag = item[1]));
+    
+    if (etag && etag == stat.ctimeMs.toString(36)) {
+        h.headersOut['Content-Length'] = stat.size.toString();
+        throw h.return(304);
+    } else {
+        // 文件：服务文件
+        if(h.headersIn['Range']){
+            const range = h.headersIn['Range'].match(/^bytes=\s*([0-9]*)-([0-9]*)?/i);
+            if(!range || (range[1] == '' && range[2] == ''))
+                return h.return(400,'Bad range');
+            
+            let start,end;
+            // 倒数n个字符串
+            if(range[1] == ''){
+                start = stat.size - parseInt(range[2]);
+                end = stat.size -1;
+            // 正数n到最后面
+            }else if(range[2] == ''){
+                start = parseInt(range[1]);
+                end = stat.size -1;
+            // 两个都写明了
+            }else{
+                start = parseInt(range[1]);
+                end = parseInt(range[2]);
+            }
+
+            // 判断位置
+            if(end >= stat.size)
+                throw h.return(416,"Out of fileSize($fsize)");
+            else if(end < start)
+                throw h.return(400,`Illegal range(#0:${start} >= #1:${end})`);
+            
+            // 输出header
+            h.status = 206;
+            h.headersOut['Content-Length'] = (end - start +1).toString();
+            h.headersOut['Content-Range'] = `bytes ${range[1]}-${(end || stat.size)-1}/${stat.size}`;
+            h.sendHeader();
+
+            let pos = start;
+            do{
+                const read = pos + BUFFER_LENGTH > end ? end - pos : BUFFER_LENGTH,
+                    readed = await file.read(
+                        new Uint8Array(read), 0, read, pos
+                    );
+                pos += readed.bytesRead;
+
+                h.send(readed.buffer);
+            }while(pos != end);
+        }else{
+            h.headersOut['Content-Length'] = stat.size.toString();
+            h.status = 200;
+            h.sendHeader();
+            while(true){
+                const readed = await file.read(
+                        new Uint8Array(BUFFER_LENGTH), 0, BUFFER_LENGTH, null
+                    );
+
+                h.send(
+                    readed.bytesRead == BUFFER_LENGTH
+                        ? readed.buffer
+                        : readed.buffer.buffer.slice(0,readed.bytesRead)
+                );
+
+                if(readed.bytesRead != BUFFER_LENGTH) break;
+            }
+        }
+    }
+    h.finish();
+}
+
+function format(path: string, is_dir: boolean | undefined){
+    path = path.replace(/[\/\\]+/,'/');
+    if(is_dir && path[path.length -1] != '/') return path + '/';
+    else if(!is_dir && path[path.length -1] == '/' ) return path.substring(0, path.length -1);
+    else return path;
+}
+
 /**
  * 用于njs调用的主函数
  */
 async function main(h:NginxHTTPRequest){
+    // 错误handle
+    function _error(e: any, sub?: string, code?: number){
+        h.return(code || 403, 
+            (sub || 'Core') + ' Error: ' + (
+            e instanceof Error
+                ? '[' + e.name + '] ' + e.message + '\n' + ((e.stack && e.stack[0]) || '')
+                : new String(e).toString()
+            )
+        );
+        ngx.log(ngx.ERR, new String(e).toString());
+    }
+
     // txt
     h.headersOut["Content-Type"] = 'text/plain';
 
@@ -150,134 +324,83 @@ async function main(h:NginxHTTPRequest){
 
     // 文件服务
     if(FILE_TRANSITION && h.method == 'GET' && h.args.file)
-    return (async function(){
-        // 前提检测
-        if(h.args.file.includes('..'))
-            return h.return(403, 'Bad path');
-
-        try{
-            var path = APP_ROOT + '/' + h.args.file,
-                file = await fs.promises.open(path, 'r'),
-                stat = await file.stat();
-        }catch(e){
-            return h.return(403,'Access Failed: ' + (e instanceof Error ? e.message : new String(e)));
-        }
-
-        // 添加mime和修改时间
-        h.headersOut['Content-Type'] = h.args.mime || 'application/octet-stream';
-        h.headersOut['ETag'] = stat.ctimeMs.toString(36);
-
-        // 检查是否有缓存
-        let etag;
-        h.rawHeadersIn.forEach(item => (item[0].toLowerCase() == 'etag') && (etag = item[1]));
-        
-        if (etag && etag == stat.ctimeMs.toString(36)) {
-            h.headersOut['Content-Length'] = stat.size.toString();
-            return h.return(304);
-        } else {
-            // 文件：服务文件
-            if(h.headersIn['Range']){
-                const range = h.headersIn['Range'].match(/^bytes=\s*([0-9]*)-([0-9]*)?/i);
-                if(!range || (range[1] == '' && range[2] == ''))
-                    return h.return(400,'Bad range');
-                
-                let start,end;
-                // 倒数n个字符串
-                if(range[1] == ''){
-                    start = stat.size - parseInt(range[2]);
-                    end = stat.size -1;
-                // 正数n到最后面
-                }else if(range[2] == ''){
-                    start = parseInt(range[1]);
-                    end = stat.size -1;
-                // 两个都写明了
-                }else{
-                    start = parseInt(range[1]);
-                    end = parseInt(range[2]);
-                }
-
-                if(end >= stat.size)
-                    return h.return(416,"Out of fileSize($fsize)");
-                else if(end < start)
-                    return h.return(400,`Illegal range(#0:${start} >= #1:${end})`);
-                
-                h.status = 206;
-                h.headersOut['Content-Length'] = (end - start +1).toString();
-                h.headersOut['Content-Range'] = `bytes ${range[1]}-${(end || stat.size)-1}/${stat.size}`;
-                h.sendHeader();
-
-                let pos = start;
-                do{
-                    const read = pos + BUFFER_LENGTH > end ? end - pos : BUFFER_LENGTH,
-                        readed = await file.read(
-                            new Uint8Array(read), 0, read, pos
-                        );
-                    pos += readed.bytesRead;
-
-                    h.send(readed.buffer);
-                }while(pos != end);
-            }else{
-                h.headersOut['Content-Length'] = stat.size.toString();
-                h.status = 200;
-                h.sendHeader();
-                while(true){
-                    const readed = await file.read(
-                            new Uint8Array(BUFFER_LENGTH), 0, BUFFER_LENGTH, null
-                        );
-
-                    h.send(
-                        readed.bytesRead == BUFFER_LENGTH
-                            ? readed.buffer
-                            : readed.buffer.buffer.slice(0,readed.bytesRead)
-                    );
-
-                    if(readed.bytesRead != BUFFER_LENGTH) break;
-                }
-            }
-        }
-        h.finish();
-    })() .catch(e => h.return(403, e instanceof Error ? e.message : new String(e).toString()));
+    return serve(h)
+        .catch(e => _error(e, 'File Serve'));
 
     // 行为
     if(typeof h.args.action != 'string')
         return h.return(400,'invaild request: Action should be defined');
 
-    // 读取body
-    if(h.method != 'POST' || !h.requestText)
-        return h.return(400,'Bad Method(POST only)');
+    // 读取body: POST 且 长度 > 0
+    if(h.method != 'POST' || !h.headersIn['Content-Length'])
+        return h.return(400,'Bad Method(POST only or losing BODY)');
 
     // 文件上传
-    if(h.args.action == 'upload' && h.requestBuffer) 
+    if(h.args.action == 'upload')
         try{
             // 前提检测
             if(h.args.path.includes('..'))
                 return h.return(403, 'Bad path');
 
-            // 打开文件
-            const file = await fs.promises.open(APP_ROOT + '/' + h.args.path,'w'),
-                buf = new Uint8Array(h.requestBuffer.buffer);
+            const dest = APP_ROOT + '/' + format(h.args.path,false);
+
+            try{
+                // 内容不在内存中
+                if(h.requestBuffer && h.requestBuffer.length == 0) throw 0;
+            }catch(_e){
+                // 尝试读取文件
+                const file = h.variables.request_body_file;
+                if(!file) return h.return(500, 'Body read failed');
+                const from = await fs.promises.open(file, 'r'),
+                    to = await fs.promises.open(dest, 'w');
+                // 循环写入文件
+                while(true){
+                    const buf = new Uint8Array(8 * 1024),
+                        readed = await from.read(buf, 0, buf.byteLength, null);
+                    if(readed.bytesRead == 0) break;
+                    to.write(buf, 0, readed.bytesRead, null);
+                }
+                return h.return(200);
+            }
+            
+            // 写入Buffer
+            const file = await fs.promises.open(dest,'w'),
+                buf = new Uint8Array((h.requestBuffer as Buffer).buffer);
             let readed = 0;
             while(buf.byteLength < readed)
                 readed += (await file.write(buf, readed)).bytesWritten;
 
             return h.return(200);
         }catch(e){
-            return h.return(403, 'Put Failed: ' + (e instanceof Error ? e.message : new String(e)));
+            return _error(e, 'Upload');
         }
 
     // 读取JSON
     try{
+        let text = '';
+        try{
+            // 在Buffer内：直接可以使用
+            if(!h.requestText) throw 1;
+            text = h.requestText;
+        }catch(_e){
+            // 在文件中：打开
+            const file = h.variables.request_body_file;
+            if(!file) return h.return(500, 'Body read failed');
+            text = (await fs.promises.readFile(file)).toString('utf8');
+        }
+
         // 尝试解析JSON
-        var request = JSON.parse(h.requestText);
+        var request = JSON.parse(text);
         if(typeof request != 'object') throw 0;
     }catch(e){
         return h.return(400,'Bad JSON body');
     }
 
+    // 判断模式
     switch(h.args.action){
         // 带有文件信息的列表
         case 'slist':{
-            const dir = APP_ROOT + '/' + request.path;
+            const dir = APP_ROOT + '/' + format(request.path, true);
             if(typeof dir != 'string')
                 return h.return(400,'invaild request: Missing `path` field');
             // 前提检测
@@ -285,18 +408,18 @@ async function main(h:NginxHTTPRequest){
                 return h.return(403, 'Bad path');
             // 尝试访问
             try{
-                await fs.promises.access(dir,fs.constants.R_OK);
+                var files = await fs.promises.readdir(dir);
             }catch(e){
                 return h.return(403,'Access Failed');
             }
+            // 循环读取文件
             const res = [];
-            const files = await fs.promises.readdir(dir);
             for (let i = 0; i < files.length; i++)
                 try{
                     // 隐藏文件
                     if(HIDE_FILES(files[i])) continue;
                     const statres = await stat(dir + '/' + files[i],files[i]);
-                    res.push(statres );
+                    res.push(statres);
                 }catch(e){
                     return h.return(403,'Access Failed');
                 }
@@ -392,9 +515,7 @@ async function main(h:NginxHTTPRequest){
                         throw 'Bad path';
                     await del(APP_ROOT + '/' + request.files[i]);
                 }catch(e){
-                    return h.return(403,'Delete "' + request.files[i] + '" Failed: ' + (
-                        e instanceof Error ? e.message : new String(e)
-                    ));
+                    return _error(e, 'Delete');
                 }
 
             return h.return(200);
@@ -408,10 +529,13 @@ async function main(h:NginxHTTPRequest){
             // 前提检测
             if(request.path.includes('..'))
                 return h.return(403, 'Bad path');
-
-            const res = await stat(file,file.split('/').pop() as string);
-            h.headersOut['Content-Type'] = 'application/json';
-            return h.return(200,JSON.stringify(res));
+            try{
+                const res = await stat(file,file.split('/').pop() as string);
+                h.headersOut['Content-Type'] = 'application/json';
+                return h.return(200,JSON.stringify(res));
+            }catch(e){
+                return _error(e, 'Stat');
+            }
         }
 
         // 复制文件
@@ -430,11 +554,10 @@ async function main(h:NginxHTTPRequest){
                 if(!stato.isDirectory())
                     throw new Error('<to> is not a dir');
             }catch(e){
-                return h.return(403, e instanceof Error ? e.message : new String(e).toString());
+                return _error(e);
             }
 
             for (let i = 0; i < request.from.length; i++) try{
-
                 // 前提检测
                 if(request.from[i].includes('..'))
                     return h.return(403, 'Bad input path: ' + request.from[i]);
@@ -444,12 +567,10 @@ async function main(h:NginxHTTPRequest){
                 if(!fname) throw new Error('Unknown source ' + f);
                 await copy(
                     APP_ROOT + '/' + request.from[i],
-                    APP_ROOT + '/' + request.to + '/' + fname[1]
+                    APP_ROOT + '/' + request.to + '/' + fname[i]
                 );
             }catch(e){
-                return h.return(403,'Copy ' + request.from[i] + ' Failed: ' + (
-                    e instanceof Error ? e.message : new String(e)
-                ));
+                return _error(e, 'Copy')
             }
             return h.return(200);
         }
@@ -463,7 +584,7 @@ async function main(h:NginxHTTPRequest){
             if(request.to.includes('..'))
                 return h.return(403, 'Bad output path');
 
-            const to = APP_ROOT + '/' + request.to,
+            const to = APP_ROOT + '/' + format(request.to, true),
                 to_stat = await fs.promises.stat(to);
 
             if(!to_stat.isDirectory())
@@ -474,21 +595,26 @@ async function main(h:NginxHTTPRequest){
                 if(request.from[i].includes('..'))
                     return h.return(403, 'Bad input path: ' + request.from[i]);
 
-                const from = APP_ROOT + '/' + request.from[i],
-                    stat = await fs.promises.stat(from);
+                const from = APP_ROOT + '/' + format(request.from[i], false),
+                    from_stat = await fs.promises.stat(from);
                 
                 // 相同dev使用rename
-                if(stat.dev == to_stat.dev){
-                    await fs.promises.rename(from, to);
+                if(from_stat.dev == to_stat.dev){
+                    await fs.promises.rename(from, to + from.split('/').pop());
                 // 不同dev先复制再删除
                 }else{
                     await copy(from, to);
-                    await del(from);
+                    try{
+                        // del使用不同的try...catch
+                        await del(from);
+                    }catch(e){
+                        throw new Error('Move abort. Reason: Delete failed:' + 
+                            (e as Error).message
+                        );
+                    }
                 }
             }catch(e){
-                return h.return(403,'Move ' + request.from[i] + ' Failed: ' + (
-                    e instanceof Error ? e.message : new String(e)
-                ));
+                return _error(e, 'Move');
             }
             return h.return(200);
         }
@@ -507,9 +633,7 @@ async function main(h:NginxHTTPRequest){
                     mode: request.mode || 0o0755
                 });
             }catch(e){
-                return h.return(403,'Create File ' + request.files[i] + ' Failed: ' + (
-                    e instanceof Error ? e.message : new String(e)
-                ));
+                return _error(e, 'Create File')
             }
             return h.return(200);
         }