fix(ui): align contacts table-view footer with cards/list views

In table view the table is inset into its glass panel by tVpad and its
outer_size is listH-2*tVpad, so the post-table cursor ended tVpad (~10px) above
where the cards/list views leave it, pulling the "N address saved" footer up.
Land the cursor at the glass-panel bottom (tpMin.y + listH) so the footer lines
up across all three view styles.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

CMakeLists.txt

@@ -53,7 +53,6 @@ set_property(CACHE DRAGONX_LITE_BACKEND_LINK_MODE PROPERTY STRINGS imported)
 set(DRAGONX_LITE_BACKEND_ABI "sdxl-c-v1" CACHE STRING "Expected lite backend C ABI version")
 set(DRAGONX_LITE_BACKEND_SYMBOLS_FILE "" CACHE FILEPATH "Path to generated lite backend exported-symbol inventory")
 set(DRAGONX_LITE_BACKEND_MANIFEST "" CACHE FILEPATH "Optional path to generated lite backend artifact manifest")
-option(DRAGONX_LITE_BACKEND_REQUIRE_SIGNATURE "Require verified signature metadata in the lite backend artifact manifest" OFF)
 set(DRAGONX_LITE_BACKEND_REQUIRED_SYMBOLS
     litelib_wallet_exists
     litelib_initialize_new
@@ -126,31 +125,12 @@ if(DRAGONX_ENABLE_LITE_BACKEND)
     if(DRAGONX_LITE_BACKEND_MANIFEST AND NOT EXISTS "${DRAGONX_LITE_BACKEND_MANIFEST}")
         message(FATAL_ERROR "DRAGONX_LITE_BACKEND_MANIFEST does not exist: ${DRAGONX_LITE_BACKEND_MANIFEST}")
     endif()
-    if(DRAGONX_LITE_BACKEND_REQUIRE_SIGNATURE)
-        if(NOT DRAGONX_LITE_BACKEND_MANIFEST)
-            message(FATAL_ERROR "DRAGONX_LITE_BACKEND_REQUIRE_SIGNATURE requires DRAGONX_LITE_BACKEND_MANIFEST")
-        endif()
-        file(READ "${DRAGONX_LITE_BACKEND_MANIFEST}" DRAGONX_LITE_BACKEND_MANIFEST_JSON)
-        string(JSON DRAGONX_LITE_SIGNATURE_STATUS ERROR_VARIABLE DRAGONX_LITE_SIGNATURE_STATUS_ERROR GET "${DRAGONX_LITE_BACKEND_MANIFEST_JSON}" signature_verification verification_status)
-        if(DRAGONX_LITE_SIGNATURE_STATUS_ERROR)
-            message(FATAL_ERROR "DRAGONX_LITE_BACKEND_MANIFEST is missing signature verification status")
-        endif()
-        if(NOT DRAGONX_LITE_SIGNATURE_STATUS STREQUAL "verified")
-            message(FATAL_ERROR "DRAGONX_LITE_BACKEND_REQUIRE_SIGNATURE requires verified signature metadata")
-        endif()
-        string(JSON DRAGONX_LITE_SIGNATURE_VERIFIED_SHA ERROR_VARIABLE DRAGONX_LITE_SIGNATURE_VERIFIED_SHA_ERROR GET "${DRAGONX_LITE_BACKEND_MANIFEST_JSON}" signature_verification verified_artifact_sha256)
-        string(JSON DRAGONX_LITE_ARTIFACT_SHA ERROR_VARIABLE DRAGONX_LITE_ARTIFACT_SHA_ERROR GET "${DRAGONX_LITE_BACKEND_MANIFEST_JSON}" artifact sha256)
-        if(DRAGONX_LITE_SIGNATURE_VERIFIED_SHA_ERROR OR DRAGONX_LITE_ARTIFACT_SHA_ERROR)
-            message(FATAL_ERROR "DRAGONX_LITE_BACKEND_MANIFEST is missing artifact/signature SHA-256 metadata")
-        endif()
-        if(NOT DRAGONX_LITE_SIGNATURE_VERIFIED_SHA STREQUAL DRAGONX_LITE_ARTIFACT_SHA)
-            message(FATAL_ERROR "DRAGONX_LITE_BACKEND_MANIFEST signature metadata does not verify the artifact SHA-256")
-        endif()
-        string(JSON DRAGONX_LITE_SIGNATURE_PERFORMED ERROR_VARIABLE DRAGONX_LITE_SIGNATURE_PERFORMED_ERROR GET "${DRAGONX_LITE_BACKEND_MANIFEST_JSON}" signature_verification verification_performed)
-        if(DRAGONX_LITE_SIGNATURE_PERFORMED_ERROR OR NOT DRAGONX_LITE_SIGNATURE_PERFORMED)
-            message(FATAL_ERROR "DRAGONX_LITE_BACKEND_REQUIRE_SIGNATURE requires verification_performed=true")
-        endif()
-    endif()
+    # Note (F15-1): the former signature-metadata gate was removed. It trusted a
+    # "verification_status: verified" field that scripts/build-lite-backend-artifact.sh
+    # self-attested with no cryptographic check (the "verified" SHA was just the artifact's
+    # own SHA). The trust root is now build-from-source: that script builds the backend from
+    # the vendored in-tree source and refuses prebuilt artifacts, so the library linked here
+    # is the one built from reviewed source. The required-symbol inventory check above stays.
 
     add_library(dragonx_lite_backend UNKNOWN IMPORTED)
     set_target_properties(dragonx_lite_backend PROPERTIES
@@ -555,6 +535,7 @@ set(APP_SOURCES
     src/util/platform.cpp
     src/util/payment_uri.cpp
     src/util/texture_loader.cpp
+    src/util/svg_texture.cpp
     src/util/noise_texture.cpp
     src/daemon/embedded_daemon.cpp
     src/daemon/seed_wallet_creator.cpp
@@ -1203,5 +1184,5 @@ message(STATUS "  Lite backend:   ${DRAGONX_LITE_BACKEND_READY}")
 message(STATUS "  Lite lib:       ${DRAGONX_LITE_BACKEND_LIBRARY}")
 message(STATUS "  Lite symbols:   ${DRAGONX_LITE_BACKEND_SYMBOLS_FILE}")
 message(STATUS "  Lite manifest:  ${DRAGONX_LITE_BACKEND_MANIFEST}")
-message(STATUS "  Lite signature: ${DRAGONX_LITE_BACKEND_REQUIRE_SIGNATURE}")
+message(STATUS "  Lite trust:     built-from-source (vendored third_party/silentdragonxlite)")
 message(STATUS "")

build.sh

@@ -478,18 +478,28 @@ APPRUN
     done
     [[ -f "$bd/_deps/sdl3-build/libSDL3.so" ]] && cp "$bd/_deps/sdl3-build/libSDL3.so"* "$APPDIR/usr/lib/" 2>/dev/null || true
 
-    # appimagetool
+    # appimagetool — pinned to a tagged release and SHA-256 verified before we exec it.
+    # The old "continuous" tag is a MOVING build fetched over the network and run on the release
+    # builder; a compromised/MITM'd artifact would execute here. Verify, or refuse to package.
+    local APPIMAGETOOL_URL="https://github.com/AppImage/appimagetool/releases/download/1.9.0/appimagetool-x86_64.AppImage"
+    local APPIMAGETOOL_SHA256="46fdd785094c7f6e545b61afcfb0f3d98d8eab243f644b4b17698c01d06083d1"
     local APPIMAGETOOL=""
     if command -v appimagetool &>/dev/null; then
-        APPIMAGETOOL="appimagetool"
-    elif [[ -f "$bd/appimagetool-x86_64.AppImage" ]]; then
-        APPIMAGETOOL="$bd/appimagetool-x86_64.AppImage"
+        APPIMAGETOOL="appimagetool"   # maintainer's own trusted system install
     else
-        info "Downloading appimagetool ..."
-        wget -q -O "$bd/appimagetool-x86_64.AppImage" \
-            "https://github.com/AppImage/AppImageKit/releases/download/continuous/appimagetool-x86_64.AppImage"
-        chmod +x "$bd/appimagetool-x86_64.AppImage"
-        APPIMAGETOOL="$bd/appimagetool-x86_64.AppImage"
+        local at="$bd/appimagetool-x86_64.AppImage"
+        # Re-verify any cached copy too; a stale unverified download must not be trusted.
+        if [[ ! -f "$at" ]] || ! echo "${APPIMAGETOOL_SHA256}  ${at}" | sha256sum -c --status; then
+            info "Downloading appimagetool 1.9.0 (pinned) ..."
+            wget -q -O "$at" "$APPIMAGETOOL_URL"
+            if ! echo "${APPIMAGETOOL_SHA256}  ${at}" | sha256sum -c --status; then
+                err "appimagetool SHA-256 verification failed — refusing to use it"
+                rm -f "$at"
+                return 1
+            fi
+            chmod +x "$at"
+        fi
+        APPIMAGETOOL="$at"
     fi
 
     local ARCH
@@ -1311,3 +1321,9 @@ if $DO_LINUX || $DO_WIN || $DO_MAC; then
     [[ -d "$SCRIPT_DIR/release/windows" ]] && echo -e "    ${CYAN}windows/${NC}   — .exe + .zip"
     [[ -d "$SCRIPT_DIR/release/mac" ]]     && echo -e "    ${CYAN}mac/${NC}       — .app + .dmg"
 fi
+
+# Reaching here means the build completed (real failures exit 1 at their point of failure).
+# Exit 0 explicitly: the final `[[ -d release/mac ]] && echo` above returns non-zero on a
+# non-mac build — and since set -e exempts the left side of an &&, that status would otherwise
+# become the script's exit code and make a successful build report failure (e.g. to CI).
+exit 0

res/img/logos/logo_dragonx.svg

@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128">
+  <defs>
+    <style>
+      .cls-1 {
+        fill: #fff;
+      }
+
+      .cls-2 {
+        fill: #d82652;
+      }
+    </style>
+  </defs>
+  <path class="cls-2" d="M103.98,128s-6.29-24.7-18.73-34.43c-8.53-8.03-15.63-16.49-21.25-24.16-5.62,7.68-12.72,16.17-21.25,24.16-12.4,9.74-18.73,34.43-18.73,34.43-2.38-24.34,7.85-35.82,12.87-41.29,7.82-8.5,15.31-16.56,21.75-25.02-7.64-11.44-11.41-19.72-11.41-19.72-.89-3.27-3.84-6.64-3.84-6.64,6.08-8.1-1.6-16.98-1.6-16.98,5.79-5.62,6.71-10.02,8.32-18.34-1.96,22.35,4.02,39.09,13.93,54.12,9.84-15.03,15.81-31.77,13.86-54.12,1.6,8.35,2.52,12.72,8.32,18.34,0,0-7.68,8.88-1.6,16.98,0,0-2.95,3.38-3.84,6.64,0,0-3.77,8.28-11.37,19.72,6.43,8.45,13.97,16.56,21.75,25.02,4.97,5.47,15.21,16.95,12.83,41.29h0Z"/>
+  <g>
+    <path class="cls-1" d="M55.33,61.62c-3.55,4.55-7.39,8.99-11.44,13.47-5.29-4.48-11.23-5.33-11.23-5.33,22.92-7.82,2.81-15.17.28-16.31C9.28,42.78,9.1,14.78,9.1,14.78c11.51,34.15,36.42,32.3,36.42,32.3.35-.21.67-.46.92-.71,1.64,3.27,4.58,8.67,8.88,15.24h0Z"/>
+    <g>
+      <path class="cls-1" d="M68.62,40.41c-1.35,2.98-2.91,5.83-4.62,8.63-1.71-2.81-3.23-5.69-4.62-8.63,1.74-3.45,4.62-20.58,4.62-20.58,0,0,2.88,17.13,4.62,20.58Z"/>
+      <path class="cls-1" d="M76.01,97.93l-3.48,2.34s-.1-4.44-3.52-1.84c-.42.32-2.38,2.21-.03,4.27,0,0-4.05,4.08-4.97,8.21-.92-4.12-4.97-8.21-4.97-8.21,2.34-2.06.39-3.95-.03-4.27-3.41-2.59-3.52,1.84-3.52,1.84l-3.48-2.34c.28-3.55.1-6.68-.46-9.42,4.69-4.94,8.85-9.88,12.47-14.61,3.66,4.72,7.78,9.67,12.47,14.61-.57,2.74-.75,5.86-.46,9.42Z"/>
+      <path class="cls-1" d="M95.34,69.76s-5.94.85-11.23,5.33c-4.02-4.48-7.89-8.92-11.44-13.47,4.3-6.57,7.25-11.98,8.88-15.24.25.25.57.5.92.71,0,0,24.91,1.84,36.42-32.3,0,0-.18,28-23.84,38.66-2.52,1.14-22.64,8.5.28,16.31h0Z"/>
+    </g>
+  </g>
+</svg>

res/lang/de.json

@@ -146,6 +146,11 @@
     "chat_bubble_minimal": "Minimal",
     "chat_bubble_rounded": "Abgerundet",
     "chat_bubble_square": "Eckig",
+    "chat_buffer_loading": "Chat-Puffer: …",
+    "chat_buffer_preparing": "Chat-Puffer: bereite %d/%d vor…",
+    "chat_buffer_ready": "Chat-Puffer: %d/%d bereit",
+    "chat_buffer_sending": "Chat: sende %d Nachrichten…",
+    "chat_buffer_sending_one": "Chat: sende %d Nachricht…",
     "chat_cancel": "Abbrechen",
     "chat_contact_added": "Kontakt hinzugefügt – benenne ihn in Kontakte um",
     "chat_contact_request": "kontaktanfrage",
@@ -162,6 +167,7 @@
     "chat_export_done": "Unterhaltung exportiert",
     "chat_export_failed": "Exportdatei konnte nicht geschrieben werden.",
     "chat_export_warn": "Speichert die entschlüsselten Nachrichten als Klartext. Bewahre die Datei sicher auf.",
+    "chat_filter": "Chat",
     "chat_hidden_toast": "Unterhaltung ausgeblendet – eine neue Nachricht holt sie zurück",
     "chat_hide": "Ausblenden",
     "chat_hide_hidden": "Ausgeblendete verbergen",
@@ -271,12 +277,18 @@
     "console_app": "App",
     "console_auto_scroll": "Automatisch scrollen",
     "console_available_commands": "Verfügbare Befehle:",
+    "console_backend_reference": "Backend-Befehlsreferenz",
+    "console_backend_unavailable": "Kein Backend",
     "console_capturing_output": "Erfasse Daemon-Ausgabe...",
+    "console_cat_advanced": "Erweitert",
     "console_cat_blockchain": "Blockchain",
     "console_cat_control": "Steuerung",
+    "console_cat_keys": "Schlüssel & Sicherheit",
     "console_cat_mining": "Mining",
     "console_cat_network": "Netzwerk",
     "console_cat_raw_transactions": "Rohtransaktionen",
+    "console_cat_send": "Senden",
+    "console_cat_sync": "Synchronisierung",
     "console_cat_utility": "Dienstprogramme",
     "console_cat_wallet": "Wallet",
     "console_clear": "Leeren",
@@ -310,11 +322,14 @@
     "console_help_help": "  help          - Diese Hilfe anzeigen",
     "console_help_setgenerate": "  setgenerate   - Mining steuern",
     "console_help_stop": "  stop          - Daemon stoppen",
+    "console_last_error": "Letzter Fehler:",
     "console_line_count": "%zu Zeilen",
     "console_matches": "Treffer",
     "console_new_lines": "%d neue Zeilen",
     "console_no_daemon": "Kein Daemon",
+    "console_no_output": "(keine Ausgabe)",
     "console_not_connected": "Fehler: Nicht mit Daemon verbunden",
+    "console_not_connected_lite": "Fehler: Keine Wallet geöffnet",
     "console_quit_note": "'quit'/'exit' werden hier nicht benötigt — schließen Sie einfach das Fenster.",
     "console_ref_builds": "Ergibt",
     "console_ref_cancel": "Abbrechen",
@@ -330,12 +345,14 @@
     "console_ref_run_confirm": "%s jetzt ausführen? Dies ist ein folgenreicher Befehl.",
     "console_ref_search_hint": "Nach Name oder Aufgabe suchen…",
     "console_ref_select_hint": "Wählen Sie einen Befehl, um zu sehen, was er tut.",
+    "console_ref_value": "Wert",
     "console_rpc_reference": "RPC-Befehlsreferenz",
     "console_rpc_trace": "RPC",
     "console_scanline": "Konsolen-Scanline",
     "console_search_commands": "Befehle suchen...",
     "console_select_all": "Alles auswählen",
     "console_show_app_output": "[App]-Wallet-Protokollzeilen anzeigen",
+    "console_show_backend_ref": "Backend-Befehlsreferenz anzeigen",
     "console_show_daemon_output": "Daemon-Ausgabe anzeigen",
     "console_show_errors_only": "Nur Fehler anzeigen",
     "console_show_rpc_ref": "RPC-Befehlsreferenz anzeigen",
@@ -348,6 +365,7 @@
     "console_status_stopped": "Gestoppt",
     "console_status_stopping": "Stoppt",
     "console_status_unknown": "Unbekannt",
+    "console_stop_confirm_node": "'stop' fährt den Node herunter und trennt die Wallet. Geben Sie zur Bestätigung erneut 'stop' ein.",
     "console_tab_completion": "Tab zur Vervollständigung",
     "console_text_colors": "Textfarben",
     "console_toggle_accents": "Farbakzente der Zeilen umschalten",
@@ -626,6 +644,7 @@
     "lite_birthday_backup": "Geburtstag: %llu  (auch diesen sichern)",
     "lite_birthday_hint": "Blockhöhe, ab der gescannt werden soll. Bei 0 belassen, falls unbekannt (langsamerer vollständiger Scan).",
     "lite_birthday_label": "Geburtsblock",
+    "lite_console_backend_commands": "Backend-Befehle:",
     "lite_console_help_passthrough": "Jede andere Eingabe wird als Lite-Wallet-Konsolenbefehl ausgeführt.",
     "lite_copy": "Kopieren",
     "lite_could_not_write": "Konnte nicht schreiben ",
@@ -643,6 +662,7 @@
     "lite_net_add_url_hint": "https://ihr-lite-server",
     "lite_net_checking": "wird geprüft…",
     "lite_net_connected": "Verbunden",
+    "lite_net_connecting": "Verbinde…",
     "lite_net_custom": "Benutzerdefiniert",
     "lite_net_disconnected": "Nicht verbunden",
     "lite_net_hidden_section": "Ausgeblendete Server",
@@ -731,6 +751,7 @@
     "market_cap_short": "Kap.",
     "market_chart_loading": "Preisverlauf wird geladen",
     "market_col_name": "Name",
+    "market_col_trend": "Trend",
     "market_col_value": "Wert",
     "market_iv_1d": "1T",
     "market_iv_1h": "1S",
@@ -1439,11 +1460,20 @@
     "tt_blur": "Unschärfe-Stärke (0%% = aus, 100%% = maximum)",
     "tt_change_pass": "Die Wallet-Verschlüsselungspassphrase ändern",
     "tt_change_pin": "Ihre Entsperr-PIN ändern",
+    "tt_chat_bubble_accent": "Akzentfarbe für deine ausgehenden Nachrichtenblasen (oder dem aktuellen Theme folgen)",
+    "tt_chat_bubble_style": "Form der Nachrichtenblase: abgerundet, eckig oder minimal (flach, randlos)",
+    "tt_chat_density": "Abstand zwischen Nachrichten: Komfortabel fügt mehr Abstand hinzu; Kompakt zeigt mehr auf dem Bildschirm",
+    "tt_chat_emoji_style": "Emoji als einfarbige Umrisse oder in voller Farbe darstellen",
+    "tt_chat_enter_sends": "Wenn aktiviert, sendet Enter die Nachricht und Shift+Enter fügt einen Zeilenumbruch ein; wenn deaktiviert, fügt Enter einen Zeilenumbruch ein",
+    "tt_chat_font_size": "Skaliere den Chat-Nachrichtentext von 0.8x bis 1.5x. Betrifft nur den Chat-Tab, nicht den Rest der App",
+    "tt_chat_poll_rate": "Wie oft auf neue und 0-conf-Nachrichten geprüft wird (0.5-15 s). Schneller ist reaktionsfreudiger, verbraucht aber mehr CPU",
+    "tt_chat_timestamp": "Zeitstempelformat nur für diesen Tab: der app-weiten Uhr folgen oder 24-hour bzw. 12-hour erzwingen",
     "tt_clear_ztx": "Lokal zwischengespeicherten Z-Transaktionsverlauf löschen",
     "tt_clock_format": "24- oder 12-Stunden-Uhr, app-weit. Der Chat-Tab kann sie überschreiben.",
     "tt_custom_fees": "Manuelle Gebühreneingabe beim Senden von Transaktionen aktivieren",
     "tt_custom_theme": "Benutzerdefiniertes Theme aktiv",
     "tt_daemon_install_bundled": "Node stoppen, den installierten dragonxd mit der in diesem Wallet-Build enthaltenen Version überschreiben und dann neu starten",
+    "tt_daemon_refresh": "Version, Größe und Datum des installierten und mitgelieferten dragonxd (oben angezeigt) erneut einlesen",
     "tt_daemon_update_check": "Den neuesten dragonxd-Full-Node vom Projekt-Gitea herunterladen und verifizieren, dann zum Anwenden neu starten",
     "tt_debug_collapse": "Debug-Protokollierungsoptionen einklappen",
     "tt_debug_expand": "Debug-Protokollierungsoptionen ausklappen",
@@ -1461,7 +1491,30 @@
     "tt_keep_daemon": "Der Daemon wird beim Ausführen des Einrichtungsassistenten gestoppt",
     "tt_language": "Schnittstellensprache der Wallet-UI",
     "tt_layout_hotkey": "Hotkey: Links-/Rechts-Pfeiltasten zum Wechseln der Balance-Layouts",
+    "tt_lite_copy": "Das angezeigte Geheimnis in die Zwischenablage kopieren",
+    "tt_lite_decrypt_pass": "Gib deine Passphrase ein, um die Verschlüsselung von der Wallet zu entfernen",
+    "tt_lite_encrypt": "Die Wallet mit der obigen Passphrase verschlüsseln; sie wird sofort gesperrt und benötigt die Passphrase zum Entsperren",
+    "tt_lite_encrypt_pass": "Passphrase, mit der die Wallet verschlüsselt wird. Geht sie verloren, kann die Wallet nicht mehr entsperrt oder wiederhergestellt werden",
+    "tt_lite_hide_wipe": "Das angezeigte Geheimnis ausblenden und sicher aus dem Speicher löschen",
+    "tt_lite_import_key": "Einen privaten Ausgabe- oder Ansichtsschlüssel zum Importieren einfügen; dessen Verlauf erscheint nach der nächsten Synchronisierung",
+    "tt_lite_import_key_btn": "Den eingegebenen privaten Schlüssel in diese Wallet importieren; Guthaben und Verlauf erscheinen nach der nächsten Synchronisierung",
+    "tt_lite_lifecycle_op": "Wähle, ob eine neue Wallet erstellt, eine vorhandene geöffnet oder eine aus einer Seed-Phrase wiederhergestellt werden soll",
+    "tt_lite_lifecycle_pass": "Passphrase, um die Wallet bei diesem Erstellen- / Öffnen- / Wiederherstellen-Vorgang zu entsperren oder zu setzen",
+    "tt_lite_lifecycle_run": "Den ausgewählten Erstellen- / Öffnen- / Wiederherstellen-Vorgang mit den obigen Werten ausführen",
+    "tt_lite_lifecycle_toggle": "Die Bedienelemente zum Erstellen / Öffnen / Wiederherstellen zur Verwaltung deiner Lite-Wallet-Datei ein- oder ausblenden",
+    "tt_lite_lock": "Die Wallet jetzt sperren; zum Entsperren ist eine Passphrase erforderlich und jede Chat-Sitzung wird beendet",
     "tt_lite_redownload": "Alle Blöcke erneut vom Lite-Server herunterladen und neu scannen",
+    "tt_lite_remove_encrypt": "Verschlüsselung entfernen und die Wallet ungeschützt speichern; zum Öffnen ist dann keine Passphrase mehr erforderlich",
+    "tt_lite_restore_account": "HD-Konto-Index zum Wiederherstellen; belasse 0, sofern du nicht mehrere Konten unter diesem Seed verwendet hast",
+    "tt_lite_restore_birthday": "Blockhöhe, bei der die Wallet erstellt wurde; das Scannen beginnt hier. Verwende 0 oder die früheste Höhe, falls unsicher",
+    "tt_lite_restore_overwrite": "Eine vorhandene Wallet-Datei durch diese Wiederherstellung ersetzen. Warnung: überschreibt die aktuellen Wallet-Daten",
+    "tt_lite_restore_seed": "Die 24-word-Wiederherstellungs-Seed-Phrase, aus der diese Wallet wiederhergestellt wird; bei der Eingabe ausgeblendet",
+    "tt_lite_save_seed_file": "Seed und Erstellungsdatum in eine nur für den Eigentümer lesbare Datei (lite-seed-backup.txt) im Konfigurationsordner schreiben",
+    "tt_lite_show_keys": "Die privaten Ausgabeschlüssel dieser Wallet anzeigen. Wer einen Schlüssel besitzt, kann das von ihm kontrollierte Guthaben ausgeben",
+    "tt_lite_show_seed": "Die Wiederherstellungs-Seed-Phrase und das Erstellungsdatum dieser Wallet anzeigen. Wer den Seed besitzt, kann dein Guthaben ausgeben",
+    "tt_lite_unlock": "Die verschlüsselte Wallet mit der obigen Passphrase entsperren",
+    "tt_lite_unlock_pass": "Gib deine Passphrase ein, um die verschlüsselte Wallet zu entsperren",
+    "tt_lite_wallet_path": "Pfad oder Name der Wallet-Datei, die geöffnet oder in die wiederhergestellt werden soll",
     "tt_lock": "Die Wallet sofort sperren",
     "tt_low_spec": "Alle aufwendigen visuellen Effekte deaktivieren\\nHotkey: Ctrl+Shift+Down",
     "tt_merge": "Mehrere UTXOs einer Adresse zusammenführen",
@@ -1482,12 +1535,17 @@
     "tt_rpc_host": "Hostname des DragonX-Daemons",
     "tt_rpc_pass": "RPC-Authentifizierungspasswort",
     "tt_rpc_port": "Port für RPC-Verbindungen des Daemons",
+    "tt_rpc_toggle": "Die schreibgeschützten RPC-Verbindungsdaten (Host, Port, Benutzer, Passwort) für den Daemon ein- oder ausblenden",
     "tt_rpc_user": "RPC-Authentifizierungsbenutzername",
     "tt_save_settings": "Alle Einstellungen auf der Festplatte speichern",
     "tt_save_ztx": "Z-Adresse-Transaktionsverlauf lokal für schnelleres Laden speichern",
     "tt_scan_themes": "Nach neuen Themes suchen.\\nTheme-Ordner ablegen in:\\n%s",
     "tt_scanline": "CRT-Scanlinieneffekt in der Konsole",
+    "tt_screenshot_open_dir": "Den Screenshots-Ordner (unter dem Konfigurationsverzeichnis) im Dateimanager öffnen",
+    "tt_screenshot_sweep": "Jedes Theme über jeden Tab durchlaufen und von jedem einen Screenshot in den Screenshots-Ordner der Konfiguration speichern (überschreibt den letzten Durchlauf)",
+    "tt_screenshot_sweep_full": "Wie der Theme-Durchlauf, erfasst aber auch jedes Modal / jeden Dialog / jeden Ablauf mit temporären Offline-Demo-Wallet-Daten",
     "tt_seed_backup": "Die 24-Wort-Wiederherstellungsphrase Ihrer Wallet anzeigen und sichern",
+    "tt_seed_demo_chat": "Beispielunterhaltungen in den Chat-Tab einfügen, damit ein Durchlauf dessen UI erfasst; nur im Speicher, beim Neustart verschwunden",
     "tt_seed_migrate": "Eine neue Wallet mit Wiederherstellungsphrase erstellen und Ihre Gelder dorthin übertragen",
     "tt_set_pin": "Eine 4-8-stellige PIN für schnelles Entsperren festlegen",
     "tt_shield_mining": "Transparente Mining-Belohnungen an eine geschirmte Adresse verschieben",
@@ -1506,6 +1564,7 @@
     "tt_website": "Die DragonX-Website öffnen",
     "tt_window_opacity": "Hintergrund-Deckkraft (niedriger = Desktop durch Fenster sichtbar)",
     "tt_wizard": "Den Ersteinrichtungsassistenten erneut ausführen\\nDer Daemon wird neu gestartet",
+    "tx_chat_badge": "Nachricht",
     "tx_confirmations": "%d Bestätigungen",
     "tx_details_title": "Transaktionsdetails",
     "tx_from_address": "Von Adresse:",

res/lang/es.json

@@ -146,6 +146,11 @@
     "chat_bubble_minimal": "Mínima",
     "chat_bubble_rounded": "Redondeada",
     "chat_bubble_square": "Cuadrada",
+    "chat_buffer_loading": "Búfer de chat: …",
+    "chat_buffer_preparing": "Búfer de chat: preparando %d/%d…",
+    "chat_buffer_ready": "Búfer de chat: %d/%d listos",
+    "chat_buffer_sending": "Chat: enviando %d mensajes…",
+    "chat_buffer_sending_one": "Chat: enviando %d mensaje…",
     "chat_cancel": "Cancelar",
     "chat_contact_added": "Contacto añadido: renómbralo en Contactos",
     "chat_contact_request": "solicitud de contacto",
@@ -162,6 +167,7 @@
     "chat_export_done": "Conversación exportada",
     "chat_export_failed": "No se pudo escribir el archivo de exportación.",
     "chat_export_warn": "Guarda los mensajes descifrados como texto sin cifrar. Guarda el archivo de forma segura.",
+    "chat_filter": "Chat",
     "chat_hidden_toast": "Conversación oculta: un mensaje nuevo la recupera",
     "chat_hide": "Ocultar",
     "chat_hide_hidden": "Ocultar ocultos",
@@ -271,12 +277,18 @@
     "console_app": "App",
     "console_auto_scroll": "Auto-desplazamiento",
     "console_available_commands": "Comandos disponibles:",
+    "console_backend_reference": "Referencia de Comandos del Backend",
+    "console_backend_unavailable": "Sin backend",
     "console_capturing_output": "Capturando salida del daemon...",
+    "console_cat_advanced": "Avanzado",
     "console_cat_blockchain": "Blockchain",
     "console_cat_control": "Control",
+    "console_cat_keys": "Claves y seguridad",
     "console_cat_mining": "Minería",
     "console_cat_network": "Red",
     "console_cat_raw_transactions": "Transacciones sin procesar",
+    "console_cat_send": "Enviar",
+    "console_cat_sync": "Sincronización",
     "console_cat_utility": "Utilidades",
     "console_cat_wallet": "Cartera",
     "console_clear": "Limpiar",
@@ -310,11 +322,14 @@
     "console_help_help": "  help          - Mostrar este mensaje de ayuda",
     "console_help_setgenerate": "  setgenerate   - Controlar minería",
     "console_help_stop": "  stop          - Detener el daemon",
+    "console_last_error": "Último error:",
     "console_line_count": "%zu líneas",
     "console_matches": "coincidencias",
     "console_new_lines": "%d nuevas líneas",
     "console_no_daemon": "Sin daemon",
+    "console_no_output": "(sin salida)",
     "console_not_connected": "Error: No conectado al daemon",
+    "console_not_connected_lite": "Error: No hay ninguna cartera abierta",
     "console_quit_note": "'quit'/'exit' no son necesarios aquí — simplemente cierra la ventana.",
     "console_ref_builds": "Genera",
     "console_ref_cancel": "Cancelar",
@@ -330,12 +345,14 @@
     "console_ref_run_confirm": "¿Ejecutar %s ahora? Es un comando con consecuencias.",
     "console_ref_search_hint": "Buscar por nombre o tarea…",
     "console_ref_select_hint": "Selecciona un comando para ver qué hace.",
+    "console_ref_value": "valor",
     "console_rpc_reference": "Referencia de Comandos RPC",
     "console_rpc_trace": "RPC",
     "console_scanline": "Líneas de consola",
     "console_search_commands": "Buscar comandos...",
     "console_select_all": "Seleccionar Todo",
     "console_show_app_output": "Mostrar las líneas de registro de la cartera [app]",
+    "console_show_backend_ref": "Mostrar referencia de comandos del backend",
     "console_show_daemon_output": "Mostrar salida del daemon",
     "console_show_errors_only": "Mostrar solo errores",
     "console_show_rpc_ref": "Mostrar referencia de comandos RPC",
@@ -348,6 +365,7 @@
     "console_status_stopped": "Detenido",
     "console_status_stopping": "Deteniendo",
     "console_status_unknown": "Desconocido",
+    "console_stop_confirm_node": "'stop' apagará el nodo y desconectará la cartera. Escribe 'stop' de nuevo para confirmar.",
     "console_tab_completion": "Tab para completar",
     "console_text_colors": "Colores de texto",
     "console_toggle_accents": "Alternar acentos de color de línea",
@@ -626,6 +644,7 @@
     "lite_birthday_backup": "Cumpleaños: %llu  (respalda esto también)",
     "lite_birthday_hint": "Altura de bloque desde la que empezar a escanear. Deja 0 si se desconoce (escaneo completo más lento).",
     "lite_birthday_label": "Fecha de creación",
+    "lite_console_backend_commands": "Comandos del backend:",
     "lite_console_help_passthrough": "Cualquier otra entrada se ejecuta como un comando de consola de la cartera lite.",
     "lite_copy": "Copiar",
     "lite_could_not_write": "No se pudo escribir ",
@@ -643,6 +662,7 @@
     "lite_net_add_url_hint": "https://tu-servidor-lite",
     "lite_net_checking": "comprobando…",
     "lite_net_connected": "Conectado",
+    "lite_net_connecting": "Conectando…",
     "lite_net_custom": "Personalizado",
     "lite_net_disconnected": "No conectado",
     "lite_net_hidden_section": "Servidores ocultos",
@@ -731,6 +751,7 @@
     "market_cap_short": "Cap.",
     "market_chart_loading": "Cargando historial de precios",
     "market_col_name": "Nombre",
+    "market_col_trend": "Tendencia",
     "market_col_value": "Valor",
     "market_iv_1d": "1D",
     "market_iv_1h": "1H",
@@ -1439,11 +1460,20 @@
     "tt_blur": "Cantidad de desenfoque (0%% = apagado, 100%% = máximo)",
     "tt_change_pass": "Cambiar la contraseña de cifrado de la billetera",
     "tt_change_pin": "Cambiar su PIN de desbloqueo",
+    "tt_chat_bubble_accent": "Color de acento para tus burbujas de mensaje salientes (o sigue el tema actual)",
+    "tt_chat_bubble_style": "Forma de la burbuja de mensaje: redondeada, cuadrada o mínima (plana, sin borde)",
+    "tt_chat_density": "Espaciado entre mensajes: Cómodo añade más relleno; Compacto muestra más en pantalla",
+    "tt_chat_emoji_style": "Muestra los emoji con contorno monocromo o a todo color",
+    "tt_chat_enter_sends": "Si está activado, Enter envía el mensaje y Shift+Enter añade un salto de línea; si está desactivado, Enter añade un salto de línea",
+    "tt_chat_font_size": "Escala el texto de los mensajes de chat de 0.8x a 1.5x. Solo afecta a la pestaña de Chat, no al resto de la app",
+    "tt_chat_poll_rate": "Con qué frecuencia se comprueban mensajes nuevos y de 0-conf (0.5-15 s). Más rápido responde mejor pero usa más CPU",
+    "tt_chat_timestamp": "Formato de marca de tiempo solo para esta pestaña: seguir el reloj de toda la app, o forzar 24-hour o 12-hour",
     "tt_clear_ztx": "Eliminar historial de z-transacciones en caché local",
     "tt_clock_format": "Reloj de 24 o 12 horas, en toda la app. El chat puede anularlo.",
     "tt_custom_fees": "Habilitar entrada manual de comisiones al enviar transacciones",
     "tt_custom_theme": "Tema personalizado activo",
     "tt_daemon_install_bundled": "Detiene el nodo, sobrescribe el dragonxd instalado con la versión incluida en esta compilación de la cartera y luego lo reinicia",
+    "tt_daemon_refresh": "Vuelve a leer la versión, el tamaño y la fecha de dragonxd instalado y del incluido que se muestran arriba",
     "tt_daemon_update_check": "Descarga y verifica el nodo completo dragonxd más reciente desde el Gitea del proyecto, y luego reinicia para aplicarlo",
     "tt_debug_collapse": "Colapsar opciones de registro de depuración",
     "tt_debug_expand": "Expandir opciones de registro de depuración",
@@ -1461,7 +1491,30 @@
     "tt_keep_daemon": "El daemon se detendrá cuando ejecute el asistente de configuración",
     "tt_language": "Idioma de la interfaz de la billetera",
     "tt_layout_hotkey": "Atajo: teclas de flecha izquierda/derecha para cambiar diseños de Balance",
+    "tt_lite_copy": "Copia el secreto revelado al portapapeles",
+    "tt_lite_decrypt_pass": "Introduce tu frase de contraseña para quitar el cifrado de la cartera",
+    "tt_lite_encrypt": "Cifra la cartera con la frase de contraseña de arriba; se bloquea de inmediato y requiere la frase para desbloquearse",
+    "tt_lite_encrypt_pass": "Frase de contraseña con la que cifrar la cartera. Si se pierde, la cartera no se puede desbloquear ni recuperar",
+    "tt_lite_hide_wipe": "Oculta el secreto revelado y lo borra de la memoria de forma segura",
+    "tt_lite_import_key": "Pega una clave privada de gasto o de visualización para importar; su historial aparece tras la próxima sincronización",
+    "tt_lite_import_key_btn": "Importa la clave privada introducida en esta cartera; los fondos y el historial aparecen tras la próxima sincronización",
+    "tt_lite_lifecycle_op": "Elige si crear una cartera nueva, abrir una existente o restaurar una desde una frase de recuperación",
+    "tt_lite_lifecycle_pass": "Frase de contraseña para desbloquear o establecer en la cartera durante esta operación de crear / abrir / restaurar",
+    "tt_lite_lifecycle_run": "Ejecuta la operación de crear / abrir / restaurar seleccionada con los valores de arriba",
+    "tt_lite_lifecycle_toggle": "Muestra u oculta los controles de crear / abrir / restaurar para gestionar tu archivo de cartera lite",
+    "tt_lite_lock": "Bloquea la cartera ahora; se necesita una frase de contraseña para desbloquearla y se cierra cualquier sesión de chat",
     "tt_lite_redownload": "Volver a descargar y re-escanear todos los bloques del servidor lite",
+    "tt_lite_remove_encrypt": "Quita el cifrado y guarda la cartera sin protección; no se requerirá ninguna frase de contraseña para abrirla",
+    "tt_lite_restore_account": "Índice de cuenta HD a restaurar; deja 0 salvo que hayas usado varias cuentas con esta semilla",
+    "tt_lite_restore_birthday": "Altura de bloque en la que se creó la cartera; el escaneo empieza aquí. Usa 0 o la altura más temprana si no estás seguro",
+    "tt_lite_restore_overwrite": "Reemplaza un archivo de cartera existente con esta restauración. Advertencia: sobrescribe los datos de la cartera actual",
+    "tt_lite_restore_seed": "La frase de recuperación de 24-word para restaurar esta cartera; se oculta mientras escribes",
+    "tt_lite_save_seed_file": "Escribe la semilla y la fecha de creación en un archivo solo para el propietario (lite-seed-backup.txt) en la carpeta de configuración",
+    "tt_lite_show_keys": "Revela las claves privadas de gasto de esta cartera. Cualquiera con una clave puede gastar los fondos que controla",
+    "tt_lite_show_seed": "Revela la frase de recuperación y la fecha de creación de esta cartera. Cualquiera con la semilla puede gastar tus fondos",
+    "tt_lite_unlock": "Desbloquea la cartera cifrada con la frase de contraseña de arriba",
+    "tt_lite_unlock_pass": "Introduce tu frase de contraseña para desbloquear la cartera cifrada",
+    "tt_lite_wallet_path": "Ruta o nombre del archivo de cartera que se abrirá o en el que se restaurará",
     "tt_lock": "Bloquear la billetera inmediatamente",
     "tt_low_spec": "Desactivar todos los efectos visuales pesados\\nAtajo: Ctrl+Shift+Down",
     "tt_merge": "Consolidar múltiples UTXOs en una dirección",
@@ -1482,12 +1535,17 @@
     "tt_rpc_host": "Nombre de host del daemon DragonX",
     "tt_rpc_pass": "Contraseña de autenticación RPC",
     "tt_rpc_port": "Puerto para conexiones RPC del daemon",
+    "tt_rpc_toggle": "Muestra u oculta los datos de conexión RPC de solo lectura (host, puerto, usuario, contraseña) del daemon",
     "tt_rpc_user": "Nombre de usuario de autenticación RPC",
     "tt_save_settings": "Guardar todas las configuraciones en disco",
     "tt_save_ztx": "Almacenar historial de transacciones de z-address localmente para carga más rápida",
     "tt_scan_themes": "Buscar nuevos temas.\\nColoque carpetas de temas en:\\n%s",
     "tt_scanline": "Efecto de líneas de escaneo CRT en la consola",
+    "tt_screenshot_open_dir": "Abre la carpeta de capturas (dentro del directorio de configuración) en tu explorador de archivos",
+    "tt_screenshot_sweep": "Recorre cada tema en cada pestaña y guarda una captura de cada uno en la carpeta de capturas de la configuración (sobrescribe el último recorrido)",
+    "tt_screenshot_sweep_full": "Como el recorrido de temas, pero además captura cada modal / diálogo / flujo usando datos de cartera de demostración temporales y sin conexión",
     "tt_seed_backup": "Muestra y respalda la frase de recuperación de 24 palabras de tu cartera",
+    "tt_seed_demo_chat": "Inserta conversaciones de ejemplo en la pestaña de Chat para que un recorrido capture su interfaz; solo en memoria, se pierde al reiniciar",
     "tt_seed_migrate": "Crea una nueva cartera con frase de recuperación y traslada tus fondos a ella",
     "tt_set_pin": "Establecer un PIN de 4-8 dígitos para desbloqueo rápido",
     "tt_shield_mining": "Mover recompensas de minería transparentes a una dirección blindada",
@@ -1506,6 +1564,7 @@
     "tt_website": "Abrir el sitio web de DragonX",
     "tt_window_opacity": "Opacidad del fondo (menor = escritorio visible a través de la ventana)",
     "tt_wizard": "Volver a ejecutar el asistente de configuración inicial\\nEl daemon será reiniciado",
+    "tx_chat_badge": "Mensaje",
     "tx_confirmations": "%d confirmaciones",
     "tx_details_title": "Detalles de Transacción",
     "tx_from_address": "Dirección Origen:",

res/lang/fr.json

@@ -146,6 +146,11 @@
     "chat_bubble_minimal": "Minimale",
     "chat_bubble_rounded": "Arrondie",
     "chat_bubble_square": "Carrée",
+    "chat_buffer_loading": "Tampon de chat: …",
+    "chat_buffer_preparing": "Tampon de chat: préparation %d/%d…",
+    "chat_buffer_ready": "Tampon de chat: %d/%d prêts",
+    "chat_buffer_sending": "Chat: envoi de %d messages…",
+    "chat_buffer_sending_one": "Chat: envoi de %d message…",
     "chat_cancel": "Annuler",
     "chat_contact_added": "Contact ajouté — renommez-le dans Contacts",
     "chat_contact_request": "demande de contact",
@@ -162,6 +167,7 @@
     "chat_export_done": "Conversation exportée",
     "chat_export_failed": "Impossible d'écrire le fichier d'exportation.",
     "chat_export_warn": "Enregistre les messages déchiffrés en texte clair. Conservez le fichier en lieu sûr.",
+    "chat_filter": "Chat",
     "chat_hidden_toast": "Conversation masquée — un nouveau message la fait réapparaître",
     "chat_hide": "Masquer",
     "chat_hide_hidden": "Masquer masqués",
@@ -271,12 +277,18 @@
     "console_app": "App",
     "console_auto_scroll": "Défilement auto",
     "console_available_commands": "Commandes disponibles :",
+    "console_backend_reference": "Référence des commandes du backend",
+    "console_backend_unavailable": "Aucun backend",
     "console_capturing_output": "Capture de la sortie du daemon...",
+    "console_cat_advanced": "Avancé",
     "console_cat_blockchain": "Blockchain",
     "console_cat_control": "Contrôle",
+    "console_cat_keys": "Clés et sécurité",
     "console_cat_mining": "Minage",
     "console_cat_network": "Réseau",
     "console_cat_raw_transactions": "Transactions brutes",
+    "console_cat_send": "Envoyer",
+    "console_cat_sync": "Synchronisation",
     "console_cat_utility": "Utilitaires",
     "console_cat_wallet": "Portefeuille",
     "console_clear": "Effacer",
@@ -310,11 +322,14 @@
     "console_help_help": "  help          - Afficher ce message d'aide",
     "console_help_setgenerate": "  setgenerate   - Contrôler le minage",
     "console_help_stop": "  stop          - Arrêter le daemon",
+    "console_last_error": "Dernière erreur :",
     "console_line_count": "%zu lignes",
     "console_matches": "correspondances",
     "console_new_lines": "%d nouvelles lignes",
     "console_no_daemon": "Pas de daemon",
+    "console_no_output": "(aucune sortie)",
     "console_not_connected": "Erreur : Non connecté au daemon",
+    "console_not_connected_lite": "Erreur : Aucun portefeuille ouvert",
     "console_quit_note": "'quit'/'exit' ne sont pas nécessaires ici — fermez simplement la fenêtre.",
     "console_ref_builds": "Génère",
     "console_ref_cancel": "Annuler",
@@ -330,12 +345,14 @@
     "console_ref_run_confirm": "Exécuter %s maintenant ? C'est une commande à conséquences.",
     "console_ref_search_hint": "Rechercher par nom ou tâche…",
     "console_ref_select_hint": "Sélectionnez une commande pour voir ce qu'elle fait.",
+    "console_ref_value": "valeur",
     "console_rpc_reference": "Référence des commandes RPC",
     "console_rpc_trace": "RPC",
     "console_scanline": "Scanline de la console",
     "console_search_commands": "Rechercher des commandes...",
     "console_select_all": "Tout sélectionner",
     "console_show_app_output": "Afficher les lignes du journal du portefeuille [app]",
+    "console_show_backend_ref": "Afficher la référence des commandes du backend",
     "console_show_daemon_output": "Afficher la sortie du daemon",
     "console_show_errors_only": "Afficher uniquement les erreurs",
     "console_show_rpc_ref": "Afficher la référence des commandes RPC",
@@ -348,6 +365,7 @@
     "console_status_stopped": "Arrêté",
     "console_status_stopping": "Arrêt",
     "console_status_unknown": "Inconnu",
+    "console_stop_confirm_node": "'stop' arrêtera le nœud et déconnectera le portefeuille. Tapez à nouveau 'stop' pour confirmer.",
     "console_tab_completion": "Tab pour compléter",
     "console_text_colors": "Couleurs du texte",
     "console_toggle_accents": "Basculer les accents de couleur des lignes",
@@ -626,6 +644,7 @@
     "lite_birthday_backup": "Date de création : %llu  (à sauvegarder également)",
     "lite_birthday_hint": "Hauteur de bloc à partir de laquelle commencer l'analyse. Laissez 0 si inconnue (analyse complète plus lente).",
     "lite_birthday_label": "Bloc de création",
+    "lite_console_backend_commands": "Commandes du backend :",
     "lite_console_help_passthrough": "Toute autre entrée est exécutée comme une commande de la console du portefeuille lite.",
     "lite_copy": "Copier",
     "lite_could_not_write": "Impossible d'écrire ",
@@ -643,6 +662,7 @@
     "lite_net_add_url_hint": "https://votre-serveur-lite",
     "lite_net_checking": "vérification…",
     "lite_net_connected": "Connecté",
+    "lite_net_connecting": "Connexion…",
     "lite_net_custom": "Personnalisé",
     "lite_net_disconnected": "Non connecté",
     "lite_net_hidden_section": "Serveurs masqués",
@@ -731,6 +751,7 @@
     "market_cap_short": "Cap.",
     "market_chart_loading": "Chargement de l'historique des prix",
     "market_col_name": "Nom",
+    "market_col_trend": "Tendance",
     "market_col_value": "Valeur",
     "market_iv_1d": "1J",
     "market_iv_1h": "1H",
@@ -1439,11 +1460,20 @@
     "tt_blur": "Quantité de flou (0%% = désactivé, 100%% = maximum)",
     "tt_change_pass": "Changer la phrase secrète de chiffrement du portefeuille",
     "tt_change_pin": "Changer votre PIN de déverrouillage",
+    "tt_chat_bubble_accent": "Couleur d'accent de vos bulles de message sortantes (ou suivre le thème actuel)",
+    "tt_chat_bubble_style": "Forme de la bulle de message : arrondie, carrée ou minimale (plate, sans bordure)",
+    "tt_chat_density": "Espacement entre les messages : Confortable ajoute plus de marge ; Compact en affiche davantage à l'écran",
+    "tt_chat_emoji_style": "Affiche les emoji en contour monochrome ou en couleur",
+    "tt_chat_enter_sends": "Si activé, Enter envoie le message et Shift+Enter ajoute un saut de ligne ; si désactivé, Enter ajoute un saut de ligne",
+    "tt_chat_font_size": "Met à l'échelle le texte des messages de chat de 0.8x à 1.5x. N'affecte que l'onglet Chat, pas le reste de l'application",
+    "tt_chat_poll_rate": "Fréquence de vérification des messages nouveaux et 0-conf (0.5-15 s). Plus rapide est plus réactif mais utilise plus de CPU",
+    "tt_chat_timestamp": "Format d'horodatage pour cet onglet uniquement : suivre l'horloge de l'application, ou forcer 24-hour ou 12-hour",
     "tt_clear_ztx": "Supprimer l'historique des z-transactions mis en cache localement",
     "tt_clock_format": "Horloge 24 h ou 12 h, dans toute l'app. Le chat peut la remplacer.",
     "tt_custom_fees": "Activer la saisie manuelle des frais lors de l'envoi de transactions",
     "tt_custom_theme": "Thème personnalisé actif",
     "tt_daemon_install_bundled": "Arrêter le nœud, remplacer le dragonxd installé par la version intégrée dans cette version du portefeuille, puis redémarrer",
+    "tt_daemon_refresh": "Relit la version, la taille et la date de dragonxd installé et fourni affichées ci-dessus",
     "tt_daemon_update_check": "Télécharger et vérifier le dernier nœud complet dragonxd depuis le Gitea du projet, puis redémarrer pour l'appliquer",
     "tt_debug_collapse": "Réduire les options de journalisation de débogage",
     "tt_debug_expand": "Développer les options de journalisation de débogage",
@@ -1461,7 +1491,30 @@
     "tt_keep_daemon": "Le daemon s'arrêtera lors de l'exécution de l'assistant de configuration",
     "tt_language": "Langue de l'interface du portefeuille",
     "tt_layout_hotkey": "Raccourci : touches fléchées gauche/droite pour changer les dispositions de Balance",
+    "tt_lite_copy": "Copie le secret révélé dans le presse-papiers",
+    "tt_lite_decrypt_pass": "Saisissez votre phrase de passe pour retirer le chiffrement du portefeuille",
+    "tt_lite_encrypt": "Chiffre le portefeuille avec la phrase de passe ci-dessus ; il se verrouille immédiatement et requiert la phrase pour se déverrouiller",
+    "tt_lite_encrypt_pass": "Phrase de passe pour chiffrer le portefeuille. En cas de perte, le portefeuille ne peut être ni déverrouillé ni récupéré",
+    "tt_lite_hide_wipe": "Masque le secret révélé et l'efface de la mémoire de façon sécurisée",
+    "tt_lite_import_key": "Collez une clé privée de dépense ou de lecture à importer ; son historique apparaît après la prochaine synchronisation",
+    "tt_lite_import_key_btn": "Importe la clé privée saisie dans ce portefeuille ; les fonds et l'historique apparaissent après la prochaine synchronisation",
+    "tt_lite_lifecycle_op": "Choisissez de créer un nouveau portefeuille, d'en ouvrir un existant ou d'en restaurer un à partir d'une phrase de récupération",
+    "tt_lite_lifecycle_pass": "Phrase de passe pour déverrouiller ou définir sur le portefeuille lors de cette opération de création / ouverture / restauration",
+    "tt_lite_lifecycle_run": "Exécute l'opération de création / ouverture / restauration sélectionnée avec les valeurs ci-dessus",
+    "tt_lite_lifecycle_toggle": "Affiche ou masque les commandes de création / ouverture / restauration pour gérer votre fichier de portefeuille lite",
+    "tt_lite_lock": "Verrouille le portefeuille maintenant ; une phrase de passe est requise pour le déverrouiller et toute session de chat est fermée",
     "tt_lite_redownload": "Re-télécharger et re-scanner tous les blocs depuis le serveur lite",
+    "tt_lite_remove_encrypt": "Retire le chiffrement et stocke le portefeuille sans protection ; aucune phrase de passe ne sera requise pour l'ouvrir",
+    "tt_lite_restore_account": "Index de compte HD à restaurer ; laissez 0 sauf si vous avez utilisé plusieurs comptes avec cette graine",
+    "tt_lite_restore_birthday": "Hauteur de bloc à laquelle le portefeuille a été créé ; l'analyse commence ici. Utilisez 0 ou la hauteur la plus ancienne en cas de doute",
+    "tt_lite_restore_overwrite": "Remplace un fichier de portefeuille existant par cette restauration. Attention : écrase les données du portefeuille actuel",
+    "tt_lite_restore_seed": "La phrase de récupération de 24-word pour restaurer ce portefeuille ; masquée pendant la saisie",
+    "tt_lite_save_seed_file": "Écrit la graine et la date de création dans un fichier réservé au propriétaire (lite-seed-backup.txt) dans le dossier de configuration",
+    "tt_lite_show_keys": "Révèle les clés privées de dépense de ce portefeuille. Quiconque possède une clé peut dépenser les fonds qu'elle contrôle",
+    "tt_lite_show_seed": "Révèle la phrase de récupération et la date de création de ce portefeuille. Quiconque possède la graine peut dépenser vos fonds",
+    "tt_lite_unlock": "Déverrouille le portefeuille chiffré à l'aide de la phrase de passe ci-dessus",
+    "tt_lite_unlock_pass": "Saisissez votre phrase de passe pour déverrouiller le portefeuille chiffré",
+    "tt_lite_wallet_path": "Chemin ou nom du fichier de portefeuille à ouvrir ou dans lequel restaurer",
     "tt_lock": "Verrouiller le portefeuille immédiatement",
     "tt_low_spec": "Désactiver tous les effets visuels lourds\\nRaccourci : Ctrl+Shift+Down",
     "tt_merge": "Consolider plusieurs UTXOs vers une adresse",
@@ -1482,12 +1535,17 @@
     "tt_rpc_host": "Nom d'hôte du daemon DragonX",
     "tt_rpc_pass": "Mot de passe d'authentification RPC",
     "tt_rpc_port": "Port pour les connexions RPC du daemon",
+    "tt_rpc_toggle": "Affiche ou masque les informations de connexion RPC en lecture seule (hôte, port, utilisateur, mot de passe) du daemon",
     "tt_rpc_user": "Nom d'utilisateur d'authentification RPC",
     "tt_save_settings": "Enregistrer tous les paramètres sur le disque",
     "tt_save_ztx": "Stocker l'historique des transactions z-address localement pour un chargement plus rapide",
     "tt_scan_themes": "Rechercher de nouveaux thèmes.\\nPlacez les dossiers de thèmes dans :\\n%s",
     "tt_scanline": "Effet de lignes de balayage CRT dans la console",
+    "tt_screenshot_open_dir": "Ouvre le dossier de captures (sous le répertoire de configuration) dans votre gestionnaire de fichiers",
+    "tt_screenshot_sweep": "Parcourt chaque thème sur chaque onglet et enregistre une capture de chacun dans le dossier de captures de la configuration (écrase le dernier parcours)",
+    "tt_screenshot_sweep_full": "Comme le parcours des thèmes, mais capture aussi chaque modale / boîte de dialogue / flux à l'aide de données de portefeuille de démonstration temporaires et hors ligne",
     "tt_seed_backup": "Afficher et sauvegarder la phrase de récupération de 24 mots de votre portefeuille",
+    "tt_seed_demo_chat": "Injecte des conversations d'exemple dans l'onglet Chat pour qu'un parcours capture son interface ; en mémoire uniquement, perdu au redémarrage",
     "tt_seed_migrate": "Créer un nouveau portefeuille à phrase de récupération et y transférer vos fonds",
     "tt_set_pin": "Définir un PIN de 4-8 chiffres pour un déverrouillage rapide",
     "tt_shield_mining": "Déplacer les récompenses de minage transparentes vers une adresse blindée",
@@ -1506,6 +1564,7 @@
     "tt_website": "Ouvrir le site web DragonX",
     "tt_window_opacity": "Opacité de l'arrière-plan (plus bas = bureau visible à travers la fenêtre)",
     "tt_wizard": "Relancer l'assistant de configuration initiale\\nLe daemon sera redémarré",
+    "tx_chat_badge": "Message",
     "tx_confirmations": "%d confirmations",
     "tx_details_title": "Détails de la transaction",
     "tx_from_address": "Adresse d'origine :",

res/lang/ja.json

@@ -146,6 +146,11 @@
     "chat_bubble_minimal": "ミニマル",
     "chat_bubble_rounded": "角丸",
     "chat_bubble_square": "角ばった",
+    "chat_buffer_loading": "チャットバッファ：…",
+    "chat_buffer_preparing": "チャットバッファ：%d/%d を準備中…",
+    "chat_buffer_ready": "チャットバッファ：%d/%d 準備完了",
+    "chat_buffer_sending": "チャット：%d 件のメッセージを送信中…",
+    "chat_buffer_sending_one": "チャット：%d 件のメッセージを送信中…",
     "chat_cancel": "キャンセル",
     "chat_contact_added": "連絡先を追加しました — 連絡先で名前を変更できます",
     "chat_contact_request": "連絡リクエスト",
@@ -162,6 +167,7 @@
     "chat_export_done": "会話をエクスポートしました",
     "chat_export_failed": "エクスポートファイルを書き込めませんでした。",
     "chat_export_warn": "復号したメッセージを平文で保存します。ファイルは安全に保管してください。",
+    "chat_filter": "チャット",
     "chat_hidden_toast": "会話を非表示にしました — 新しいメッセージが届くと再表示されます",
     "chat_hide": "非表示",
     "chat_hide_hidden": "非表示を隠す",
@@ -271,12 +277,18 @@
     "console_app": "アプリ",
     "console_auto_scroll": "自動スクロール",
     "console_available_commands": "利用可能なコマンド：",
+    "console_backend_reference": "バックエンドコマンドリファレンス",
+    "console_backend_unavailable": "バックエンドなし",
     "console_capturing_output": "デーモン出力をキャプチャ中...",
+    "console_cat_advanced": "詳細設定",
     "console_cat_blockchain": "ブロックチェーン",
     "console_cat_control": "制御",
+    "console_cat_keys": "鍵とセキュリティ",
     "console_cat_mining": "マイニング",
     "console_cat_network": "ネットワーク",
     "console_cat_raw_transactions": "生トランザクション",
+    "console_cat_send": "送金",
+    "console_cat_sync": "同期",
     "console_cat_utility": "ユーティリティ",
     "console_cat_wallet": "ウォレット",
     "console_clear": "クリア",
@@ -310,11 +322,14 @@
     "console_help_help": "  help          - このヘルプを表示",
     "console_help_setgenerate": "  setgenerate   - マイニングを制御",
     "console_help_stop": "  stop          - デーモンを停止",
+    "console_last_error": "最後のエラー：",
     "console_line_count": "%zu 行",
     "console_matches": "件一致",
     "console_new_lines": "%d 新しい行",
     "console_no_daemon": "デーモンなし",
+    "console_no_output": "（出力なし）",
     "console_not_connected": "エラー：デーモンに接続されていません",
+    "console_not_connected_lite": "エラー：ウォレットが開かれていません",
     "console_quit_note": "ここでは 'quit'／'exit' は不要です — ウィンドウを閉じるだけで構いません。",
     "console_ref_builds": "生成",
     "console_ref_cancel": "キャンセル",
@@ -330,12 +345,14 @@
     "console_ref_run_confirm": "%s を今すぐ実行しますか？ 影響の大きいコマンドです。",
     "console_ref_search_hint": "名前または用途で検索…",
     "console_ref_select_hint": "コマンドを選ぶと内容が表示されます。",
+    "console_ref_value": "値",
     "console_rpc_reference": "RPCコマンドリファレンス",
     "console_rpc_trace": "RPC",
     "console_scanline": "コンソールスキャンライン",
     "console_search_commands": "コマンドを検索...",
     "console_select_all": "すべて選択",
     "console_show_app_output": "[app] ウォレットのログ行を表示",
+    "console_show_backend_ref": "バックエンドコマンドリファレンスを表示",
     "console_show_daemon_output": "デーモン出力を表示",
     "console_show_errors_only": "エラーのみ表示",
     "console_show_rpc_ref": "RPCコマンドリファレンスを表示",
@@ -348,6 +365,7 @@
     "console_status_stopped": "停止済み",
     "console_status_stopping": "停止中",
     "console_status_unknown": "不明",
+    "console_stop_confirm_node": "'stop' はノードを停止し、ウォレットを切断します。確認するにはもう一度 'stop' と入力してください。",
     "console_tab_completion": "Tabで補完",
     "console_text_colors": "テキスト色",
     "console_toggle_accents": "行のカラーアクセントを切り替え",
@@ -626,6 +644,7 @@
     "lite_birthday_backup": "誕生日：%llu  (これもバックアップしてください)",
     "lite_birthday_hint": "スキャンを開始するブロック高。不明な場合は0のままにしてください（完全スキャンが遅くなります）。",
     "lite_birthday_label": "バースデー",
+    "lite_console_backend_commands": "バックエンドコマンド：",
     "lite_console_help_passthrough": "その他の入力はライトウォレットのコンソールコマンドとして実行されます。",
     "lite_copy": "コピー",
     "lite_could_not_write": "書き込めませんでした ",
@@ -643,6 +662,7 @@
     "lite_net_add_url_hint": "https://your-lite-server",
     "lite_net_checking": "確認中…",
     "lite_net_connected": "接続済み",
+    "lite_net_connecting": "接続中…",
     "lite_net_custom": "カスタム",
     "lite_net_disconnected": "未接続",
     "lite_net_hidden_section": "非表示のサーバー",
@@ -731,6 +751,7 @@
     "market_cap_short": "時価総額",
     "market_chart_loading": "価格履歴を読み込み中",
     "market_col_name": "名前",
+    "market_col_trend": "トレンド",
     "market_col_value": "価値",
     "market_iv_1d": "1日",
     "market_iv_1h": "1時間",
@@ -1439,11 +1460,20 @@
     "tt_blur": "ぼかし量（0%% = オフ、100%% = 最大）",
     "tt_change_pass": "ウォレットの暗号化パスフレーズを変更",
     "tt_change_pin": "アンロック PIN を変更",
+    "tt_chat_bubble_accent": "送信メッセージの吹き出しのアクセントカラー（または現在のテーマに従う）",
+    "tt_chat_bubble_style": "メッセージの吹き出しの形：角丸、四角、またはミニマル（フラット、枠なし）",
+    "tt_chat_density": "メッセージ間の間隔：ゆったりは余白を増やし、コンパクトは画面に多く表示します",
+    "tt_chat_emoji_style": "絵文字をモノクロの輪郭またはフルカラーで表示します",
+    "tt_chat_enter_sends": "オンのとき、Enterでメッセージを送信し、Shift+Enterで改行します。オフのとき、Enterで改行します",
+    "tt_chat_font_size": "チャットのメッセージ文字を0.8xから1.5xで拡大縮小します。チャットタブのみに影響し、アプリの他の部分には影響しません",
+    "tt_chat_poll_rate": "新着および0-confメッセージを確認する頻度（0.5-15 s）。速いほど反応が良くなりますが、CPUをより多く使います",
+    "tt_chat_timestamp": "このタブのみのタイムスタンプ形式：アプリ全体の時計に従うか、24-hourまたは12-hourを強制します",
     "tt_clear_ztx": "ローカルにキャッシュされた z-トランザクション履歴を削除",
     "tt_clock_format": "24時間または12時間表示（アプリ全体）。チャットで上書きできます。",
     "tt_custom_fees": "トランザクション送信時に手動手数料入力を有効化",
     "tt_custom_theme": "カスタムテーマがアクティブ",
     "tt_daemon_install_bundled": "ノードを停止し、インストール済みの dragonxd をこのウォレットビルドにバンドルされたバージョンで上書きしてから再起動します",
+    "tt_daemon_refresh": "上に表示されているインストール済みおよび同梱のdragonxdのバージョン、サイズ、日付を再読み込みします",
     "tt_daemon_update_check": "プロジェクトの Gitea から最新の dragonxd フルノードをダウンロードして検証し、再起動して適用します",
     "tt_debug_collapse": "デバッグログオプションを折りたたむ",
     "tt_debug_expand": "デバッグログオプションを展開",
@@ -1461,7 +1491,30 @@
     "tt_keep_daemon": "セットアップウィザード実行時にデーモンは停止します",
     "tt_language": "ウォレット UI のインターフェース言語",
     "tt_layout_hotkey": "ホットキー：左右矢印キーでバランスレイアウトを切り替え",
+    "tt_lite_copy": "表示された秘密情報をクリップボードにコピーします",
+    "tt_lite_decrypt_pass": "ウォレットの暗号化を解除するためにパスフレーズを入力します",
+    "tt_lite_encrypt": "上のパスフレーズでウォレットを暗号化します。すぐにロックされ、解除にはパスフレーズが必要です",
+    "tt_lite_encrypt_pass": "ウォレットを暗号化するパスフレーズ。失うとウォレットのロック解除も復元もできなくなります",
+    "tt_lite_hide_wipe": "表示された秘密情報を隠し、メモリから安全に消去します",
+    "tt_lite_import_key": "インポートする秘密鍵（送金用または閲覧用）を貼り付けます。その履歴は次回の同期後に表示されます",
+    "tt_lite_import_key_btn": "入力した秘密鍵をこのウォレットにインポートします。資金と履歴は次回の同期後に表示されます",
+    "tt_lite_lifecycle_op": "新しいウォレットを作成するか、既存のものを開くか、シードフレーズから復元するかを選びます",
+    "tt_lite_lifecycle_pass": "この作成／開く／復元の操作でウォレットのロック解除または設定に使うパスフレーズ",
+    "tt_lite_lifecycle_run": "上の値で、選択した作成／開く／復元の操作を実行します",
+    "tt_lite_lifecycle_toggle": "ライトウォレットファイルを管理する作成／開く／復元のコントロールを表示または非表示にします",
+    "tt_lite_lock": "ウォレットを今すぐロックします。解除にはパスフレーズが必要で、チャットセッションはすべて終了します",
     "tt_lite_redownload": "ライトサーバーからすべてのブロックを再ダウンロードして再スキャン",
+    "tt_lite_remove_encrypt": "暗号化を解除し、ウォレットを保護なしで保存します。開くのにパスフレーズは不要になります",
+    "tt_lite_restore_account": "復元するHDアカウントのインデックス。このシードで複数のアカウントを使っていない限り0のままにします",
+    "tt_lite_restore_birthday": "ウォレットが作成されたブロック高。スキャンはここから始まります。不明な場合は0または最も古い高さを使ってください",
+    "tt_lite_restore_overwrite": "既存のウォレットファイルをこの復元で置き換えます。警告：現在のウォレットデータを上書きします",
+    "tt_lite_restore_seed": "このウォレットを復元するための24-wordのリカバリーシードフレーズ。入力中は非表示になります",
+    "tt_lite_save_seed_file": "シードと作成時期を、設定フォルダ内の所有者のみが読めるファイル（lite-seed-backup.txt）に書き出します",
+    "tt_lite_show_keys": "このウォレットの秘密鍵（送金用）を表示します。鍵を持つ人は誰でもそれが管理する資金を使えます",
+    "tt_lite_show_seed": "このウォレットのリカバリーシードフレーズと作成時期を表示します。シードを持つ人は誰でもあなたの資金を使えます",
+    "tt_lite_unlock": "上のパスフレーズを使って暗号化されたウォレットのロックを解除します",
+    "tt_lite_unlock_pass": "暗号化されたウォレットのロックを解除するためにパスフレーズを入力します",
+    "tt_lite_wallet_path": "開く、または復元先となるウォレットファイルのパスまたは名前",
     "tt_lock": "ウォレットを即座にロック",
     "tt_low_spec": "すべての重い視覚効果を無効化\\nホットキー：Ctrl+Shift+Down",
     "tt_merge": "複数の UTXO を一つのアドレスに統合",
@@ -1482,12 +1535,17 @@
     "tt_rpc_host": "DragonX デーモンのホスト名",
     "tt_rpc_pass": "RPC 認証パスワード",
     "tt_rpc_port": "デーモン RPC 接続用ポート",
+    "tt_rpc_toggle": "デーモンの読み取り専用のRPC接続情報（ホスト、ポート、ユーザー、パスワード）を表示または非表示にします",
     "tt_rpc_user": "RPC 認証ユーザー名",
     "tt_save_settings": "すべての設定をディスクに保存",
     "tt_save_ztx": "z-address トランザクション履歴をローカルに保存して高速読み込み",
     "tt_scan_themes": "新しいテーマをスキャン。\\nテーマフォルダーをここに配置：\\n%s",
     "tt_scanline": "コンソールでの CRT スキャンライン効果",
+    "tt_screenshot_open_dir": "スクリーンショットフォルダ（設定ディレクトリ内）をファイルマネージャーで開きます",
+    "tt_screenshot_sweep": "すべてのタブですべてのテーマを順に切り替え、それぞれのスクリーンショットを設定のスクリーンショットフォルダに保存します（前回の実行を上書きします）",
+    "tt_screenshot_sweep_full": "テーマの実行と同様ですが、一時的なオフラインのデモウォレットデータを使って、すべてのモーダル／ダイアログ／フローも撮影します",
     "tt_seed_backup": "ウォレットの24単語の復元シードフレーズを表示してバックアップします",
+    "tt_seed_demo_chat": "実行でUIを撮影できるように、チャットタブにサンプルの会話を挿入します。メモリ上のみで、再起動で消えます",
     "tt_seed_migrate": "新しいシードフレーズウォレットを作成し、資金をそこへ移動します",
     "tt_set_pin": "クイックアンロック用の 4-8 桁 PIN を設定",
     "tt_shield_mining": "透明マイニング報酬をシールドアドレスに移動",
@@ -1506,6 +1564,7 @@
     "tt_website": "DragonX ウェブサイトを開く",
     "tt_window_opacity": "背景の不透明度（低い = デスクトップがウィンドウ越しに見える）",
     "tt_wizard": "初期セットアップウィザードを再実行\\nデーモンは再起動されます",
+    "tx_chat_badge": "メッセージ",
     "tx_confirmations": "%d 確認",
     "tx_details_title": "取引の詳細",
     "tx_from_address": "送信元アドレス：",

res/lang/ko.json

@@ -146,6 +146,11 @@
     "chat_bubble_minimal": "미니멀",
     "chat_bubble_rounded": "둥근",
     "chat_bubble_square": "각진",
+    "chat_buffer_loading": "채팅 버퍼: …",
+    "chat_buffer_preparing": "채팅 버퍼: %d/%d 준비 중…",
+    "chat_buffer_ready": "채팅 버퍼: %d/%d 준비됨",
+    "chat_buffer_sending": "채팅: 메시지 %d개 보내는 중…",
+    "chat_buffer_sending_one": "채팅: 메시지 %d개 보내는 중…",
     "chat_cancel": "취소",
     "chat_contact_added": "연락처 추가됨 — 연락처에서 이름을 변경하세요",
     "chat_contact_request": "연락 요청",
@@ -162,6 +167,7 @@
     "chat_export_done": "대화를 내보냈습니다",
     "chat_export_failed": "내보내기 파일을 쓸 수 없습니다.",
     "chat_export_warn": "복호화된 메시지를 일반 텍스트로 저장합니다. 파일을 안전하게 보관하세요.",
+    "chat_filter": "채팅",
     "chat_hidden_toast": "대화를 숨겼습니다 — 새 메시지가 오면 다시 표시됩니다",
     "chat_hide": "숨기기",
     "chat_hide_hidden": "숨김 접기",
@@ -271,12 +277,18 @@
     "console_app": "앱",
     "console_auto_scroll": "자동 스크롤",
     "console_available_commands": "사용 가능한 명령어:",
+    "console_backend_reference": "백엔드 명령어 참조",
+    "console_backend_unavailable": "백엔드 없음",
     "console_capturing_output": "데몬 출력 캡처 중...",
+    "console_cat_advanced": "고급",
     "console_cat_blockchain": "블록체인",
     "console_cat_control": "제어",
+    "console_cat_keys": "키 및 보안",
     "console_cat_mining": "채굴",
     "console_cat_network": "네트워크",
     "console_cat_raw_transactions": "원시 트랜잭션",
+    "console_cat_send": "보내기",
+    "console_cat_sync": "동기화",
     "console_cat_utility": "유틸리티",
     "console_cat_wallet": "지갑",
     "console_clear": "지우기",
@@ -310,11 +322,14 @@
     "console_help_help": "  help          - 도움말 표시",
     "console_help_setgenerate": "  setgenerate   - 채굴 제어",
     "console_help_stop": "  stop          - 데몬 중지",
+    "console_last_error": "마지막 오류:",
     "console_line_count": "%zu줄",
     "console_matches": "일치",
     "console_new_lines": "%d 새 줄",
     "console_no_daemon": "데몬 없음",
+    "console_no_output": "(출력 없음)",
     "console_not_connected": "오류: 데몬에 연결되지 않았습니다",
+    "console_not_connected_lite": "오류: 열린 지갑 없음",
     "console_quit_note": "여기서는 'quit'/'exit'가 필요 없습니다 — 그냥 창을 닫으세요.",
     "console_ref_builds": "생성",
     "console_ref_cancel": "취소",
@@ -330,12 +345,14 @@
     "console_ref_run_confirm": "%s 을(를) 지금 실행할까요? 영향이 큰 명령입니다.",
     "console_ref_search_hint": "이름 또는 용도로 검색…",
     "console_ref_select_hint": "명령을 선택하면 설명이 표시됩니다.",
+    "console_ref_value": "값",
     "console_rpc_reference": "RPC 명령어 참조",
     "console_rpc_trace": "RPC",
     "console_scanline": "콘솔 스캔라인",
     "console_search_commands": "명령어 검색...",
     "console_select_all": "모두 선택",
     "console_show_app_output": "[app] 지갑 로그 줄 표시",
+    "console_show_backend_ref": "백엔드 명령어 참조 표시",
     "console_show_daemon_output": "데몬 출력 표시",
     "console_show_errors_only": "오류만 표시",
     "console_show_rpc_ref": "RPC 명령어 참조 표시",
@@ -348,6 +365,7 @@
     "console_status_stopped": "중지됨",
     "console_status_stopping": "중지 중",
     "console_status_unknown": "알 수 없음",
+    "console_stop_confirm_node": "'stop'은 노드를 종료하고 지갑 연결을 끊습니다. 확인하려면 'stop'을 다시 입력하세요.",
     "console_tab_completion": "Tab으로 자동 완성",
     "console_text_colors": "텍스트 색상",
     "console_toggle_accents": "줄 색상 강조 전환",
@@ -626,6 +644,7 @@
     "lite_birthday_backup": "생성 블록: %llu  (이 값도 백업하세요)",
     "lite_birthday_hint": "스캔을 시작할 블록 높이입니다. 모르면 0으로 두세요(전체 스캔이 느려짐).",
     "lite_birthday_label": "생일 블록",
+    "lite_console_backend_commands": "백엔드 명령:",
     "lite_console_help_passthrough": "그 외 입력은 라이트 지갑 콘솔 명령으로 실행됩니다.",
     "lite_copy": "복사",
     "lite_could_not_write": "쓸 수 없습니다: ",
@@ -643,6 +662,7 @@
     "lite_net_add_url_hint": "https://your-lite-server",
     "lite_net_checking": "확인 중…",
     "lite_net_connected": "연결됨",
+    "lite_net_connecting": "연결 중…",
     "lite_net_custom": "사용자 지정",
     "lite_net_disconnected": "연결되지 않음",
     "lite_net_hidden_section": "숨겨진 서버",
@@ -731,6 +751,7 @@
     "market_cap_short": "시총",
     "market_chart_loading": "가격 기록 불러오는 중",
     "market_col_name": "이름",
+    "market_col_trend": "추세",
     "market_col_value": "가치",
     "market_iv_1d": "1일",
     "market_iv_1h": "1시간",
@@ -1439,11 +1460,20 @@
     "tt_blur": "블러 양 (0%% = 끔, 100%% = 최대)",
     "tt_change_pass": "지갑 암호화 비밀번호 변경",
     "tt_change_pin": "잠금 해제 PIN 변경",
+    "tt_chat_bubble_accent": "보내는 메시지 말풍선의 강조 색상(또는 현재 테마를 따름)",
+    "tt_chat_bubble_style": "메시지 말풍선 모양: 둥근형, 사각형 또는 미니멀(평면, 테두리 없음)",
+    "tt_chat_density": "메시지 간 간격: 편안함은 여백을 더 추가하고; 촘촘함은 화면에 더 많이 표시합니다",
+    "tt_chat_emoji_style": "이모지를 단색 윤곽선 또는 전체 색상으로 렌더링합니다",
+    "tt_chat_enter_sends": "켜면 Enter가 메시지를 보내고 Shift+Enter가 줄바꿈을 추가합니다; 끄면 Enter가 줄바꿈을 추가합니다",
+    "tt_chat_font_size": "채팅 메시지 텍스트를 0.8x에서 1.5x까지 조정합니다. 채팅 탭에만 적용되며 앱의 나머지 부분에는 영향을 주지 않습니다",
+    "tt_chat_poll_rate": "새 메시지 및 0-conf 메시지를 확인하는 빈도(0.5-15 s). 빠를수록 반응성이 좋지만 CPU를 더 사용합니다",
+    "tt_chat_timestamp": "이 탭에만 적용되는 타임스탬프 형식: 앱 전체 시계를 따르거나 24-hour 또는 12-hour로 강제합니다",
     "tt_clear_ztx": "로컬에 캐시된 z-트랜잭션 기록 삭제",
     "tt_clock_format": "24시간 또는 12시간 형식(앱 전체). 채팅에서 재정의할 수 있습니다.",
     "tt_custom_fees": "거래 전송 시 수동 수수료 입력 활성화",
     "tt_custom_theme": "사용자 지정 테마 활성화됨",
     "tt_daemon_install_bundled": "노드를 중지하고 설치된 dragonxd를 이 지갑 빌드에 번들된 버전으로 덮어쓴 다음 재시작합니다",
+    "tt_daemon_refresh": "위에 표시된 설치 및 번들 dragonxd의 버전, 크기, 날짜를 다시 읽어옵니다",
     "tt_daemon_update_check": "프로젝트 Gitea에서 최신 dragonxd 풀 노드를 다운로드하고 검증한 다음, 재시작하여 적용합니다",
     "tt_debug_collapse": "디버그 로깅 옵션 접기",
     "tt_debug_expand": "디버그 로깅 옵션 펼치기",
@@ -1461,7 +1491,30 @@
     "tt_keep_daemon": "설정 마법사를 실행하면 데몬이 여전히 중지됩니다",
     "tt_language": "지갑 UI 인터페이스 언어",
     "tt_layout_hotkey": "단축키: 좌/우 화살표 키로 잔액 레이아웃 전환",
+    "tt_lite_copy": "표시된 비밀을 클립보드에 복사합니다",
+    "tt_lite_decrypt_pass": "지갑에서 암호화를 제거하려면 암호를 입력하세요",
+    "tt_lite_encrypt": "위 암호로 지갑을 암호화합니다; 즉시 잠기며 잠금 해제하려면 암호가 필요합니다",
+    "tt_lite_encrypt_pass": "지갑을 암호화할 암호. 분실하면 지갑을 잠금 해제하거나 복구할 수 없습니다",
+    "tt_lite_hide_wipe": "표시된 비밀을 숨기고 메모리에서 안전하게 지웁니다",
+    "tt_lite_import_key": "가져올 개인 지출 또는 조회 키를 붙여넣으세요; 다음 동기화 후 해당 내역이 나타납니다",
+    "tt_lite_import_key_btn": "입력한 개인 키를 이 지갑으로 가져옵니다; 자금과 내역은 다음 동기화 후 나타납니다",
+    "tt_lite_lifecycle_op": "새 지갑을 생성할지, 기존 지갑을 열지, 시드 문구로 복구할지 선택합니다",
+    "tt_lite_lifecycle_pass": "이 생성 / 열기 / 복구 작업 중 지갑을 잠금 해제하거나 설정할 암호",
+    "tt_lite_lifecycle_run": "위 값으로 선택한 생성 / 열기 / 복구 작업을 실행합니다",
+    "tt_lite_lifecycle_toggle": "라이트 지갑 파일을 관리하기 위한 생성 / 열기 / 복구 컨트롤을 표시하거나 숨깁니다",
+    "tt_lite_lock": "지금 지갑을 잠급니다; 잠금 해제하려면 암호가 필요하며 모든 채팅 세션이 종료됩니다",
     "tt_lite_redownload": "라이트 서버에서 모든 블록을 다시 다운로드하고 다시 스캔합니다",
+    "tt_lite_remove_encrypt": "암호화를 제거하고 지갑을 보호되지 않은 상태로 저장합니다; 지갑을 열 때 암호가 필요하지 않습니다",
+    "tt_lite_restore_account": "복구할 HD 계정 인덱스; 이 시드로 여러 계정을 사용하지 않았다면 0으로 두세요",
+    "tt_lite_restore_birthday": "지갑이 생성된 블록 높이; 여기서부터 스캔이 시작됩니다. 확실하지 않으면 0 또는 가장 이른 높이를 사용하세요",
+    "tt_lite_restore_overwrite": "기존 지갑 파일을 이 복구본으로 대체합니다. 경고: 현재 지갑 데이터를 덮어씁니다",
+    "tt_lite_restore_seed": "이 지갑을 복구할 24-word 복구 시드 문구; 입력하는 동안 숨겨집니다",
+    "tt_lite_save_seed_file": "시드와 생성 높이를 설정 폴더의 소유자 전용 파일(lite-seed-backup.txt)에 기록합니다",
+    "tt_lite_show_keys": "이 지갑의 개인 지출 키를 표시합니다. 키를 가진 사람은 누구나 그 키가 제어하는 자금을 사용할 수 있습니다",
+    "tt_lite_show_seed": "이 지갑의 복구 시드 문구와 생성 높이를 표시합니다. 시드를 가진 사람은 누구나 자금을 사용할 수 있습니다",
+    "tt_lite_unlock": "위 암호를 사용하여 암호화된 지갑을 잠금 해제합니다",
+    "tt_lite_unlock_pass": "암호화된 지갑을 잠금 해제하려면 암호를 입력하세요",
+    "tt_lite_wallet_path": "열거나 복구할 지갑 파일의 경로 또는 이름",
     "tt_lock": "지갑 즉시 잠금",
     "tt_low_spec": "모든 고부하 시각 효과 비활성화\\n단축키: Ctrl+Shift+Down",
     "tt_merge": "여러 UTXO를 하나의 주소로 통합",
@@ -1482,12 +1535,17 @@
     "tt_rpc_host": "DragonX 데몬 호스트 이름",
     "tt_rpc_pass": "RPC 인증 비밀번호",
     "tt_rpc_port": "데몬 RPC 연결 포트",
+    "tt_rpc_toggle": "데몬의 읽기 전용 RPC 연결 정보(호스트, 포트, 사용자, 비밀번호)를 표시하거나 숨깁니다",
     "tt_rpc_user": "RPC 인증 사용자 이름",
     "tt_save_settings": "모든 설정을 디스크에 저장",
     "tt_save_ztx": "z-address 거래 기록을 로컬에 저장하여 빠른 로딩",
     "tt_scan_themes": "새 테마 검색.\\n테마 폴더를 여기에 배치:\\n%s",
     "tt_scanline": "콘솔에서 CRT 스캔라인 효과",
+    "tt_screenshot_open_dir": "파일 관리자에서 screenshots 폴더(설정 디렉터리 아래)를 엽니다",
+    "tt_screenshot_sweep": "모든 탭에서 모든 테마를 순환하며 각각의 스크린샷을 설정 screenshots 폴더에 저장합니다(마지막 스윕을 덮어씀)",
+    "tt_screenshot_sweep_full": "테마 스윕과 유사하지만 임시 오프라인 데모 지갑 데이터를 사용하여 모든 모달 / 대화 상자 / 흐름도 캡처합니다",
     "tt_seed_backup": "지갑의 24단어 복구 시드 문구를 표시하고 백업합니다",
+    "tt_seed_demo_chat": "스윕이 UI를 캡처하도록 샘플 대화를 채팅 탭에 삽입합니다; 메모리에만 저장되며 재시작 시 사라집니다",
     "tt_seed_migrate": "새 시드 문구 지갑을 만들고 자금을 그곳으로 옮깁니다",
     "tt_set_pin": "빠른 잠금 해제를 위한 4-8자리 PIN 설정",
     "tt_shield_mining": "투명 채굴 보상을 차폐 주소로 이동",
@@ -1506,6 +1564,7 @@
     "tt_website": "DragonX 웹사이트 열기",
     "tt_window_opacity": "배경 불투명도 (낮을수록 = 창을 통해 바탕 화면이 보임)",
     "tt_wizard": "초기 설정 마법사 다시 실행\\n데몬이 재시작됩니다",
+    "tx_chat_badge": "메시지",
     "tx_confirmations": "%d 확인",
     "tx_details_title": "거래 상세",
     "tx_from_address": "보낸 주소:",

res/lang/pt.json

@@ -146,6 +146,11 @@
     "chat_bubble_minimal": "Mínimo",
     "chat_bubble_rounded": "Arredondado",
     "chat_bubble_square": "Quadrado",
+    "chat_buffer_loading": "Buffer de chat: …",
+    "chat_buffer_preparing": "Buffer de chat: preparando %d/%d…",
+    "chat_buffer_ready": "Buffer de chat: %d/%d prontos",
+    "chat_buffer_sending": "Chat: enviando %d mensagens…",
+    "chat_buffer_sending_one": "Chat: enviando %d mensagem…",
     "chat_cancel": "Cancelar",
     "chat_contact_added": "Contato adicionado — renomeie em Contatos",
     "chat_contact_request": "solicitação de contato",
@@ -162,6 +167,7 @@
     "chat_export_done": "Conversa exportada",
     "chat_export_failed": "Não foi possível gravar o arquivo de exportação.",
     "chat_export_warn": "Salva as mensagens descriptografadas como texto simples. Guarde o arquivo com segurança.",
+    "chat_filter": "Chat",
     "chat_hidden_toast": "Conversa ocultada — uma nova mensagem a traz de volta",
     "chat_hide": "Ocultar",
     "chat_hide_hidden": "Ocultar ocultas",
@@ -271,12 +277,18 @@
     "console_app": "App",
     "console_auto_scroll": "Rolagem automática",
     "console_available_commands": "Comandos disponíveis:",
+    "console_backend_reference": "Referência de Comandos do Backend",
+    "console_backend_unavailable": "Sem backend",
     "console_capturing_output": "Capturando saída do daemon...",
+    "console_cat_advanced": "Avançado",
     "console_cat_blockchain": "Blockchain",
     "console_cat_control": "Controle",
+    "console_cat_keys": "Chaves e segurança",
     "console_cat_mining": "Mineração",
     "console_cat_network": "Rede",
     "console_cat_raw_transactions": "Transações brutas",
+    "console_cat_send": "Enviar",
+    "console_cat_sync": "Sincronização",
     "console_cat_utility": "Utilitários",
     "console_cat_wallet": "Carteira",
     "console_clear": "Limpar",
@@ -310,11 +322,14 @@
     "console_help_help": "  help          - Mostrar esta mensagem de ajuda",
     "console_help_setgenerate": "  setgenerate   - Controlar mineração",
     "console_help_stop": "  stop          - Parar o daemon",
+    "console_last_error": "Último erro:",
     "console_line_count": "%zu linhas",
     "console_matches": "correspondências",
     "console_new_lines": "%d novas linhas",
     "console_no_daemon": "Sem daemon",
+    "console_no_output": "(sem saída)",
     "console_not_connected": "Erro: Não conectado ao daemon",
+    "console_not_connected_lite": "Erro: Nenhuma carteira aberta",
     "console_quit_note": "'quit'/'exit' não são necessários aqui — basta fechar a janela.",
     "console_ref_builds": "Gera",
     "console_ref_cancel": "Cancelar",
@@ -330,12 +345,14 @@
     "console_ref_run_confirm": "Executar %s agora? Este é um comando com consequências.",
     "console_ref_search_hint": "Pesquisar por nome ou tarefa…",
     "console_ref_select_hint": "Selecione um comando para ver o que ele faz.",
+    "console_ref_value": "valor",
     "console_rpc_reference": "Referência de Comandos RPC",
     "console_rpc_trace": "RPC",
     "console_scanline": "Scanline do console",
     "console_search_commands": "Pesquisar comandos...",
     "console_select_all": "Selecionar Tudo",
     "console_show_app_output": "Mostrar linhas do log da carteira [app]",
+    "console_show_backend_ref": "Mostrar referência de comandos do backend",
     "console_show_daemon_output": "Mostrar saída do daemon",
     "console_show_errors_only": "Mostrar apenas erros",
     "console_show_rpc_ref": "Mostrar referência de comandos RPC",
@@ -348,6 +365,7 @@
     "console_status_stopped": "Parado",
     "console_status_stopping": "Parando",
     "console_status_unknown": "Desconhecido",
+    "console_stop_confirm_node": "'stop' irá desligar o nó e desconectar a carteira. Digite 'stop' novamente para confirmar.",
     "console_tab_completion": "Tab para completar",
     "console_text_colors": "Cores do texto",
     "console_toggle_accents": "Alternar destaques de cor das linhas",
@@ -626,6 +644,7 @@
     "lite_birthday_backup": "Aniversário: %llu  (faça o backup disto também)",
     "lite_birthday_hint": "Altura do bloco a partir da qual começar a escanear. Deixe 0 se desconhecida (escaneamento completo mais lento).",
     "lite_birthday_label": "Data de nascimento",
+    "lite_console_backend_commands": "Comandos do backend:",
     "lite_console_help_passthrough": "Qualquer outra entrada é executada como um comando de console da carteira leve.",
     "lite_copy": "Copiar",
     "lite_could_not_write": "Não foi possível gravar ",
@@ -643,6 +662,7 @@
     "lite_net_add_url_hint": "https://seu-servidor-lite",
     "lite_net_checking": "verificando…",
     "lite_net_connected": "Conectado",
+    "lite_net_connecting": "Conectando…",
     "lite_net_custom": "Personalizado",
     "lite_net_disconnected": "Não conectado",
     "lite_net_hidden_section": "Servidores ocultos",
@@ -731,6 +751,7 @@
     "market_cap_short": "Cap.",
     "market_chart_loading": "Carregando histórico de preços",
     "market_col_name": "Nome",
+    "market_col_trend": "Tendência",
     "market_col_value": "Valor",
     "market_iv_1d": "1D",
     "market_iv_1h": "1H",
@@ -1439,11 +1460,20 @@
     "tt_blur": "Quantidade de desfoque (0%% = desligado, 100%% = máximo)",
     "tt_change_pass": "Alterar a frase secreta de encriptação da carteira",
     "tt_change_pin": "Alterar seu PIN de desbloqueio",
+    "tt_chat_bubble_accent": "Cor de destaque para seus balões de mensagem enviados (ou seguir o tema atual)",
+    "tt_chat_bubble_style": "Formato do balão de mensagem: arredondado, quadrado ou minimalista (plano, sem borda)",
+    "tt_chat_density": "Espaçamento entre mensagens: Confortável adiciona mais espaçamento; Compacto exibe mais na tela",
+    "tt_chat_emoji_style": "Renderizar emojis em contorno monocromático ou colorido",
+    "tt_chat_enter_sends": "Quando ativado, Enter envia a mensagem e Shift+Enter adiciona uma nova linha; quando desativado, Enter adiciona uma nova linha",
+    "tt_chat_font_size": "Dimensionar o texto das mensagens de chat de 0.8x a 1.5x. Afeta apenas a aba Chat, não o restante do aplicativo",
+    "tt_chat_poll_rate": "Com que frequência verificar mensagens novas e 0-conf (0.5-15 s). Mais rápido é mais responsivo, mas usa mais CPU",
+    "tt_chat_timestamp": "Formato de horário apenas para esta aba: seguir o relógio geral do aplicativo, ou forçar 24-hour ou 12-hour",
     "tt_clear_ztx": "Excluir histórico de z-transações em cache local",
     "tt_clock_format": "Relógio de 24 ou 12 horas, em todo o app. O chat pode substituí-lo.",
     "tt_custom_fees": "Ativar entrada manual de taxas ao enviar transações",
     "tt_custom_theme": "Tema personalizado ativo",
     "tt_daemon_install_bundled": "Parar o nó, sobrescrever o dragonxd instalado com a versão incluída nesta compilação da carteira e reiniciar",
+    "tt_daemon_refresh": "Reler a versão, o tamanho e a data do dragonxd instalado e do incorporado, mostrados acima",
     "tt_daemon_update_check": "Baixe e verifique o nó completo dragonxd mais recente do Gitea do projeto e, em seguida, reinicie para aplicar",
     "tt_debug_collapse": "Recolher opções de registro de depuração",
     "tt_debug_expand": "Expandir opções de registro de depuração",
@@ -1461,7 +1491,30 @@
     "tt_keep_daemon": "O daemon será parado ao executar o assistente de configuração",
     "tt_language": "Idioma da interface da carteira",
     "tt_layout_hotkey": "Atalho: teclas de seta esquerda/direita para alternar layouts de Saldo",
+    "tt_lite_copy": "Copiar o segredo revelado para a área de transferência",
+    "tt_lite_decrypt_pass": "Digite sua frase-senha para remover a criptografia da carteira",
+    "tt_lite_encrypt": "Criptografar a carteira com a frase-senha acima; ela é bloqueada imediatamente e exige a frase-senha para desbloquear",
+    "tt_lite_encrypt_pass": "Frase-senha com a qual criptografar a carteira. Se perdida, a carteira não pode ser desbloqueada nem recuperada",
+    "tt_lite_hide_wipe": "Ocultar o segredo revelado e apagá-lo com segurança da memória",
+    "tt_lite_import_key": "Cole uma chave privada de gasto ou de visualização para importar; seu histórico aparece após a próxima sincronização",
+    "tt_lite_import_key_btn": "Importar a chave privada informada para esta carteira; os fundos e o histórico aparecem após a próxima sincronização",
+    "tt_lite_lifecycle_op": "Escolha entre criar uma nova carteira, abrir uma existente ou restaurar uma a partir de uma frase de recuperação",
+    "tt_lite_lifecycle_pass": "Frase-senha para desbloquear ou definir na carteira durante esta operação de criar / abrir / restaurar",
+    "tt_lite_lifecycle_run": "Executar a operação selecionada de criar / abrir / restaurar com os valores acima",
+    "tt_lite_lifecycle_toggle": "Mostrar ou ocultar os controles de criar / abrir / restaurar para gerenciar o arquivo da sua carteira lite",
+    "tt_lite_lock": "Bloquear a carteira agora; uma frase-senha é necessária para desbloquear e qualquer sessão de chat é encerrada",
     "tt_lite_redownload": "Rebaixar e reescanear todos os blocos do servidor lite",
+    "tt_lite_remove_encrypt": "Remover a criptografia e armazenar a carteira desprotegida; nenhuma frase-senha será necessária para abri-la",
+    "tt_lite_restore_account": "Índice da conta HD a restaurar; deixe 0 a menos que você tenha usado várias contas sob esta frase de recuperação",
+    "tt_lite_restore_birthday": "Altura de bloco em que a carteira foi criada; a varredura começa aqui. Use 0 ou a altura mais antiga se não tiver certeza",
+    "tt_lite_restore_overwrite": "Substituir um arquivo de carteira existente por esta restauração. Aviso: sobrescreve os dados da carteira atual",
+    "tt_lite_restore_seed": "A frase de recuperação de 24-word para restaurar esta carteira; oculta enquanto você digita",
+    "tt_lite_save_seed_file": "Gravar a frase de recuperação e a data de criação em um arquivo restrito ao dono (lite-seed-backup.txt) na pasta de configuração",
+    "tt_lite_show_keys": "Revelar as chaves privadas de gasto desta carteira. Qualquer pessoa com uma chave pode gastar os fundos que ela controla",
+    "tt_lite_show_seed": "Revelar a frase de recuperação e a data de criação desta carteira. Qualquer pessoa com a frase de recuperação pode gastar seus fundos",
+    "tt_lite_unlock": "Desbloquear a carteira criptografada usando a frase-senha acima",
+    "tt_lite_unlock_pass": "Digite sua frase-senha para desbloquear a carteira criptografada",
+    "tt_lite_wallet_path": "Caminho ou nome do arquivo da carteira a abrir ou para o qual restaurar",
     "tt_lock": "Bloquear a carteira imediatamente",
     "tt_low_spec": "Desativar todos os efeitos visuais pesados\\nAtalho: Ctrl+Shift+Down",
     "tt_merge": "Consolidar múltiplos UTXOs em um endereço",
@@ -1482,12 +1535,17 @@
     "tt_rpc_host": "Nome do host do daemon DragonX",
     "tt_rpc_pass": "Senha de autenticação RPC",
     "tt_rpc_port": "Porta para conexões RPC do daemon",
+    "tt_rpc_toggle": "Mostrar ou ocultar os detalhes de conexão RPC somente leitura (host, porta, usuário, senha) do daemon",
     "tt_rpc_user": "Nome de usuário de autenticação RPC",
     "tt_save_settings": "Salvar todas as configurações no disco",
     "tt_save_ztx": "Armazenar histórico de transações z-address localmente para carregamento mais rápido",
     "tt_scan_themes": "Procurar novos temas.\\nColoque pastas de temas em:\\n%s",
     "tt_scanline": "Efeito de linhas de varredura CRT no console",
+    "tt_screenshot_open_dir": "Abrir a pasta screenshots (dentro do diretório de configuração) no seu gerenciador de arquivos",
+    "tt_screenshot_sweep": "Percorrer cada tema em cada aba, salvando uma captura de tela de cada uma na pasta screenshots de configuração (sobrescreve a última varredura)",
+    "tt_screenshot_sweep_full": "Como a varredura de temas, mas também captura cada modal / caixa de diálogo / fluxo usando dados temporários de carteira de demonstração offline",
     "tt_seed_backup": "Mostrar e fazer backup da frase de recuperação de 24 palavras da sua carteira",
+    "tt_seed_demo_chat": "Injetar conversas de exemplo na aba Chat para que uma varredura capture sua interface; apenas na memória, some ao reiniciar",
     "tt_seed_migrate": "Criar uma nova carteira com frase de recuperação e mover seus fundos para ela",
     "tt_set_pin": "Definir um PIN de 4-8 dígitos para desbloqueio rápido",
     "tt_shield_mining": "Mover recompensas de mineração transparentes para um endereço blindado",
@@ -1506,6 +1564,7 @@
     "tt_website": "Abrir o site do DragonX",
     "tt_window_opacity": "Opacidade do fundo (menor = área de trabalho visível através da janela)",
     "tt_wizard": "Executar novamente o assistente de configuração inicial\\nO daemon será reiniciado",
+    "tx_chat_badge": "Mensagem",
     "tx_confirmations": "%d confirmações",
     "tx_details_title": "Detalhes da Transação",
     "tx_from_address": "Endereço de Origem:",

res/lang/ru.json

@@ -146,6 +146,11 @@
     "chat_bubble_minimal": "Минимальный",
     "chat_bubble_rounded": "Скруглённый",
     "chat_bubble_square": "Прямоугольный",
+    "chat_buffer_loading": "Буфер чата: …",
+    "chat_buffer_preparing": "Буфер чата: подготовка %d/%d…",
+    "chat_buffer_ready": "Буфер чата: %d/%d готово",
+    "chat_buffer_sending": "Чат: отправка %d сообщений…",
+    "chat_buffer_sending_one": "Чат: отправка %d сообщения…",
     "chat_cancel": "Отмена",
     "chat_contact_added": "Контакт добавлен — переименуйте его в Контактах",
     "chat_contact_request": "запрос контакта",
@@ -162,6 +167,7 @@
     "chat_export_done": "Разговор экспортирован",
     "chat_export_failed": "Не удалось записать файл экспорта.",
     "chat_export_warn": "Сохраняет расшифрованные сообщения в виде обычного текста. Храните файл в надёжном месте.",
+    "chat_filter": "Чат",
     "chat_hidden_toast": "Разговор скрыт — новое сообщение вернёт его",
     "chat_hide": "Скрыть",
     "chat_hide_hidden": "Скрыть скрытые",
@@ -271,12 +277,18 @@
     "console_app": "Прил.",
     "console_auto_scroll": "Авто-прокрутка",
     "console_available_commands": "Доступные команды:",
+    "console_backend_reference": "Справочник команд бэкенда",
+    "console_backend_unavailable": "Нет бэкенда",
     "console_capturing_output": "Захват вывода daemon...",
+    "console_cat_advanced": "Дополнительно",
     "console_cat_blockchain": "Блокчейн",
     "console_cat_control": "Управление",
+    "console_cat_keys": "Ключи и безопасность",
     "console_cat_mining": "Майнинг",
     "console_cat_network": "Сеть",
     "console_cat_raw_transactions": "Сырые транзакции",
+    "console_cat_send": "Отправка",
+    "console_cat_sync": "Синхронизация",
     "console_cat_utility": "Утилиты",
     "console_cat_wallet": "Кошелёк",
     "console_clear": "Очистить",
@@ -310,11 +322,14 @@
     "console_help_help": "  help          - Показать эту справку",
     "console_help_setgenerate": "  setgenerate   - Управление майнингом",
     "console_help_stop": "  stop          - Остановить daemon",
+    "console_last_error": "Последняя ошибка:",
     "console_line_count": "%zu строк",
     "console_matches": "совпадений",
     "console_new_lines": "%d новых строк",
     "console_no_daemon": "Нет daemon",
+    "console_no_output": "(нет вывода)",
     "console_not_connected": "Ошибка: Не подключено к daemon",
+    "console_not_connected_lite": "Ошибка: Нет открытого кошелька",
     "console_quit_note": "Здесь не нужны 'quit'/'exit' — просто закройте окно.",
     "console_ref_builds": "Формирует",
     "console_ref_cancel": "Отмена",
@@ -330,12 +345,14 @@
     "console_ref_run_confirm": "Выполнить %s сейчас? Это ответственная команда.",
     "console_ref_search_hint": "Поиск по названию или задаче…",
     "console_ref_select_hint": "Выберите команду, чтобы увидеть, что она делает.",
+    "console_ref_value": "значение",
     "console_rpc_reference": "Справочник RPC-команд",
     "console_rpc_trace": "RPC",
     "console_scanline": "Скан-линия консоли",
     "console_search_commands": "Поиск команд...",
     "console_select_all": "Выбрать всё",
     "console_show_app_output": "Показать строки журнала кошелька [app]",
+    "console_show_backend_ref": "Показать справочник команд бэкенда",
     "console_show_daemon_output": "Показать вывод daemon",
     "console_show_errors_only": "Показать только ошибки",
     "console_show_rpc_ref": "Показать справочник RPC-команд",
@@ -348,6 +365,7 @@
     "console_status_stopped": "Остановлен",
     "console_status_stopping": "Остановка",
     "console_status_unknown": "Неизвестно",
+    "console_stop_confirm_node": "'stop' остановит узел и отключит кошелёк. Введите 'stop' ещё раз для подтверждения.",
     "console_tab_completion": "Tab для дополнения",
     "console_text_colors": "Цвета текста",
     "console_toggle_accents": "Переключить цветовые акценты строк",
@@ -626,6 +644,7 @@
     "lite_birthday_backup": "Дата рождения: %llu  (сохраните её тоже)",
     "lite_birthday_hint": "Высота блока, с которой начинать сканирование. Оставьте 0, если неизвестно (медленное полное сканирование).",
     "lite_birthday_label": "Дата рождения",
+    "lite_console_backend_commands": "Команды бэкенда:",
     "lite_console_help_passthrough": "Любой другой ввод выполняется как команда консоли лайт-кошелька.",
     "lite_copy": "Копировать",
     "lite_could_not_write": "Не удалось записать ",
@@ -643,6 +662,7 @@
     "lite_net_add_url_hint": "https://your-lite-server",
     "lite_net_checking": "проверка…",
     "lite_net_connected": "Подключено",
+    "lite_net_connecting": "Подключение…",
     "lite_net_custom": "Свой",
     "lite_net_disconnected": "Не подключено",
     "lite_net_hidden_section": "Скрытые серверы",
@@ -731,6 +751,7 @@
     "market_cap_short": "Кап.",
     "market_chart_loading": "Загрузка истории цен",
     "market_col_name": "Название",
+    "market_col_trend": "Тренд",
     "market_col_value": "Стоимость",
     "market_iv_1d": "1Д",
     "market_iv_1h": "1Ч",
@@ -1439,11 +1460,20 @@
     "tt_blur": "Степень размытия (0%% = выкл., 100%% = максимум)",
     "tt_change_pass": "Сменить пароль шифрования кошелька",
     "tt_change_pin": "Изменить PIN-код разблокировки",
+    "tt_chat_bubble_accent": "Акцентный цвет для ваших исходящих пузырьков сообщений (или следовать текущей теме)",
+    "tt_chat_bubble_style": "Форма пузырька сообщения: скруглённая, квадратная или минимальная (плоская, без границы)",
+    "tt_chat_density": "Интервал между сообщениями: Комфортный добавляет больше отступов; Компактный вмещает больше на экране",
+    "tt_chat_emoji_style": "Отображать эмодзи в монохромном контуре или полноцветно",
+    "tt_chat_enter_sends": "Когда включено, Enter отправляет сообщение, а Shift+Enter добавляет новую строку; когда выключено, Enter добавляет новую строку",
+    "tt_chat_font_size": "Масштаб текста сообщений чата от 0.8x до 1.5x. Влияет только на вкладку «Чат», не на остальную часть приложения",
+    "tt_chat_poll_rate": "Как часто проверять новые и 0-conf сообщения (0.5-15 s). Быстрее — отзывчивее, но использует больше CPU",
+    "tt_chat_timestamp": "Формат времени только для этой вкладки: следовать общим настройкам часов приложения либо принудительно 24-hour или 12-hour",
     "tt_clear_ztx": "Удалить локально кешированную историю z-транзакций",
     "tt_clock_format": "24- или 12-часовой формат для всего приложения. Чат может переопределить.",
     "tt_custom_fees": "Включить ручной ввод комиссий при отправке транзакций",
     "tt_custom_theme": "Пользовательская тема активна",
     "tt_daemon_install_bundled": "Остановить узел, перезаписать установленный dragonxd версией, встроенной в эту сборку кошелька, затем перезапустить",
+    "tt_daemon_refresh": "Перечитать версию, размер и дату установленного и встроенного dragonxd, показанные выше",
     "tt_daemon_update_check": "Скачать и проверить последний полный узел dragonxd из проектного Gitea, затем перезапустить для применения",
     "tt_debug_collapse": "Свернуть параметры журнала отладки",
     "tt_debug_expand": "Развернуть параметры журнала отладки",
@@ -1461,7 +1491,30 @@
     "tt_keep_daemon": "Демон будет остановлен при запуске мастера настройки",
     "tt_language": "Язык интерфейса кошелька",
     "tt_layout_hotkey": "Горячая клавиша: стрелки влево/вправо для переключения раскладок Баланса",
+    "tt_lite_copy": "Скопировать показанный секрет в буфер обмена",
+    "tt_lite_decrypt_pass": "Введите пароль, чтобы снять шифрование с кошелька",
+    "tt_lite_encrypt": "Зашифровать кошелёк паролем выше; он блокируется сразу же и требует пароль для разблокировки",
+    "tt_lite_encrypt_pass": "Пароль для шифрования кошелька. При утрате кошелёк невозможно разблокировать или восстановить",
+    "tt_lite_hide_wipe": "Скрыть показанный секрет и безопасно стереть его из памяти",
+    "tt_lite_import_key": "Вставьте приватный ключ расходования или просмотра для импорта; его история появится после следующей синхронизации",
+    "tt_lite_import_key_btn": "Импортировать введённый приватный ключ в этот кошелёк; средства и история появятся после следующей синхронизации",
+    "tt_lite_lifecycle_op": "Выберите, создать новый кошелёк, открыть существующий или восстановить его из seed-фразы",
+    "tt_lite_lifecycle_pass": "Пароль для разблокировки или установки на кошелёк во время этой операции создания / открытия / восстановления",
+    "tt_lite_lifecycle_run": "Выполнить выбранную операцию создания / открытия / восстановления со значениями выше",
+    "tt_lite_lifecycle_toggle": "Показать или скрыть элементы управления создания / открытия / восстановления для управления файлом лёгкого кошелька",
+    "tt_lite_lock": "Заблокировать кошелёк сейчас; для разблокировки потребуется пароль, а любая сессия чата будет прервана",
     "tt_lite_redownload": "Заново загрузить и пересканировать все блоки с лёгкого сервера",
+    "tt_lite_remove_encrypt": "Снять шифрование и хранить кошелёк без защиты; пароль для его открытия не потребуется",
+    "tt_lite_restore_account": "Индекс HD-аккаунта для восстановления; оставьте 0, если только вы не использовали несколько аккаунтов с этой seed-фразой",
+    "tt_lite_restore_birthday": "Высота блока, на которой был создан кошелёк; отсюда начинается сканирование. Если не уверены, используйте 0 или самую раннюю высоту",
+    "tt_lite_restore_overwrite": "Заменить существующий файл кошелька этим восстановлением. Внимание: перезаписывает текущие данные кошелька",
+    "tt_lite_restore_seed": "24-word seed-фраза для восстановления этого кошелька; скрывается по мере ввода",
+    "tt_lite_save_seed_file": "Записать seed-фразу и дату создания в файл, доступный только владельцу (lite-seed-backup.txt), в папке конфигурации",
+    "tt_lite_show_keys": "Показать приватные ключи расходования этого кошелька. Любой, у кого есть ключ, может потратить контролируемые им средства",
+    "tt_lite_show_seed": "Показать seed-фразу восстановления и дату создания этого кошелька. Любой, у кого есть seed-фраза, может потратить ваши средства",
+    "tt_lite_unlock": "Разблокировать зашифрованный кошелёк с помощью пароля выше",
+    "tt_lite_unlock_pass": "Введите пароль для разблокировки зашифрованного кошелька",
+    "tt_lite_wallet_path": "Путь или имя файла кошелька для открытия или восстановления",
     "tt_lock": "Немедленно заблокировать кошелёк",
     "tt_low_spec": "Отключить все тяжёлые визуальные эффекты\\nГорячая клавиша: Ctrl+Shift+Down",
     "tt_merge": "Объединить несколько UTXO в один адрес",
@@ -1482,12 +1535,17 @@
     "tt_rpc_host": "Имя хоста демона DragonX",
     "tt_rpc_pass": "Пароль аутентификации RPC",
     "tt_rpc_port": "Порт для RPC-подключений демона",
+    "tt_rpc_toggle": "Показать или скрыть параметры RPC-подключения только для чтения (хост, порт, пользователь, пароль) для демона",
     "tt_rpc_user": "Имя пользователя аутентификации RPC",
     "tt_save_settings": "Сохранить все настройки на диск",
     "tt_save_ztx": "Хранить историю транзакций z-адреса локально для более быстрой загрузки",
     "tt_scan_themes": "Поиск новых тем.\\nРазместите папки тем в:\\n%s",
     "tt_scanline": "Эффект развёртки ЭЛТ в консоли",
+    "tt_screenshot_open_dir": "Открыть папку скриншотов (в каталоге конфигурации) в вашем файловом менеджере",
+    "tt_screenshot_sweep": "Перебрать каждую тему по всем вкладкам, сохраняя скриншот каждой в папку скриншотов конфигурации (перезаписывает предыдущий проход)",
+    "tt_screenshot_sweep_full": "Как проход по темам, но также захватывает каждое модальное окно / диалог / поток, используя временные офлайн-данные демонстрационного кошелька",
     "tt_seed_backup": "Показать и создать резервную копию сид-фразы восстановления вашего кошелька из 24 слов",
+    "tt_seed_demo_chat": "Добавить примеры переписок во вкладку «Чат», чтобы проход захватил её интерфейс; только в памяти, исчезает при перезапуске",
     "tt_seed_migrate": "Создать новый кошелёк с сид-фразой и перевести в него ваши средства",
     "tt_set_pin": "Установить 4-8-значный PIN для быстрой разблокировки",
     "tt_shield_mining": "Перевести прозрачные вознаграждения за майнинг на экранированный адрес",
@@ -1506,6 +1564,7 @@
     "tt_website": "Открыть сайт DragonX",
     "tt_window_opacity": "Непрозрачность фона (ниже = рабочий стол виден сквозь окно)",
     "tt_wizard": "Повторно запустить мастер начальной настройки\\nДемон будет перезапущен",
+    "tx_chat_badge": "Сообщение",
     "tx_confirmations": "%d подтверждений",
     "tx_details_title": "Детали транзакции",
     "tx_from_address": "Адрес отправителя:",

res/lang/zh.json

@@ -146,6 +146,11 @@
     "chat_bubble_minimal": "极简",
     "chat_bubble_rounded": "圆角",
     "chat_bubble_square": "方形",
+    "chat_buffer_loading": "聊天缓冲：…",
+    "chat_buffer_preparing": "聊天缓冲：正在准备 %d/%d…",
+    "chat_buffer_ready": "聊天缓冲：%d/%d 已就绪",
+    "chat_buffer_sending": "聊天：正在发送 %d 条消息…",
+    "chat_buffer_sending_one": "聊天：正在发送 %d 条消息…",
     "chat_cancel": "取消",
     "chat_contact_added": "已添加联系人——可在联系人中重命名",
     "chat_contact_request": "联系人请求",
@@ -162,6 +167,7 @@
     "chat_export_done": "会话已导出",
     "chat_export_failed": "无法写入导出文件。",
     "chat_export_warn": "将解密后的消息保存为纯文本。请妥善保管该文件。",
+    "chat_filter": "聊天",
     "chat_hidden_toast": "会话已隐藏——收到新消息后会重新显示",
     "chat_hide": "隐藏",
     "chat_hide_hidden": "收起已隐藏",
@@ -271,12 +277,18 @@
     "console_app": "应用",
     "console_auto_scroll": "自动滚动",
     "console_available_commands": "可用命令：",
+    "console_backend_reference": "后端命令参考",
+    "console_backend_unavailable": "无后端",
     "console_capturing_output": "正在捕获守护进程输出...",
+    "console_cat_advanced": "高级",
     "console_cat_blockchain": "区块链",
     "console_cat_control": "控制",
+    "console_cat_keys": "密钥与安全",
     "console_cat_mining": "挖矿",
     "console_cat_network": "网络",
     "console_cat_raw_transactions": "原始交易",
+    "console_cat_send": "发送",
+    "console_cat_sync": "同步",
     "console_cat_utility": "实用工具",
     "console_cat_wallet": "钱包",
     "console_clear": "清除",
@@ -310,11 +322,14 @@
     "console_help_help": "  help          - 显示此帮助信息",
     "console_help_setgenerate": "  setgenerate   - 控制挖矿",
     "console_help_stop": "  stop          - 停止守护进程",
+    "console_last_error": "上次错误：",
     "console_line_count": "%zu 行",
     "console_matches": "个匹配",
     "console_new_lines": "%d 新行",
     "console_no_daemon": "无守护进程",
+    "console_no_output": "（无输出）",
     "console_not_connected": "错误：未连接到守护进程",
+    "console_not_connected_lite": "错误：没有打开的钱包",
     "console_quit_note": "这里不需要 'quit'/'exit'——直接关闭窗口即可。",
     "console_ref_builds": "生成",
     "console_ref_cancel": "取消",
@@ -330,12 +345,14 @@
     "console_ref_run_confirm": "立即运行 %s？这是一个有重大影响的命令。",
     "console_ref_search_hint": "按名称或用途搜索…",
     "console_ref_select_hint": "选择一个命令以查看其功能。",
+    "console_ref_value": "值",
     "console_rpc_reference": "RPC 命令参考",
     "console_rpc_trace": "RPC",
     "console_scanline": "控制台扫描线",
     "console_search_commands": "搜索命令...",
     "console_select_all": "全选",
     "console_show_app_output": "显示[应用]钱包日志行",
+    "console_show_backend_ref": "显示后端命令参考",
     "console_show_daemon_output": "显示守护进程输出",
     "console_show_errors_only": "仅显示错误",
     "console_show_rpc_ref": "显示 RPC 命令参考",
@@ -348,6 +365,7 @@
     "console_status_stopped": "已停止",
     "console_status_stopping": "停止中",
     "console_status_unknown": "未知",
+    "console_stop_confirm_node": "'stop' 将关闭节点并断开钱包连接。再次输入 'stop' 以确认。",
     "console_tab_completion": "Tab 补全",
     "console_text_colors": "文本颜色",
     "console_toggle_accents": "切换行颜色强调",
@@ -626,6 +644,7 @@
     "lite_birthday_backup": "生日区块：%llu （也请一并备份）",
     "lite_birthday_hint": "开始扫描的区块高度。如未知请保留 0（完整扫描更慢）。",
     "lite_birthday_label": "诞生区块",
+    "lite_console_backend_commands": "后端命令：",
     "lite_console_help_passthrough": "其他任何输入都将作为轻钱包控制台命令运行。",
     "lite_copy": "复制",
     "lite_could_not_write": "无法写入 ",
@@ -643,6 +662,7 @@
     "lite_net_add_url_hint": "https://your-lite-server",
     "lite_net_checking": "检查中…",
     "lite_net_connected": "已连接",
+    "lite_net_connecting": "连接中…",
     "lite_net_custom": "自定义",
     "lite_net_disconnected": "未连接",
     "lite_net_hidden_section": "隐藏的服务器",
@@ -731,6 +751,7 @@
     "market_cap_short": "市值",
     "market_chart_loading": "正在加载价格历史",
     "market_col_name": "名称",
+    "market_col_trend": "趋势",
     "market_col_value": "价值",
     "market_iv_1d": "1天",
     "market_iv_1h": "1时",
@@ -1439,11 +1460,20 @@
     "tt_blur": "模糊程度（0%% = 关闭，100%% = 最大）",
     "tt_change_pass": "更改钱包加密密码",
     "tt_change_pin": "更改您的解锁 PIN",
+    "tt_chat_bubble_accent": "你发出的消息气泡的强调色（或跟随当前主题）",
+    "tt_chat_bubble_style": "消息气泡形状：圆角、方形或极简（扁平、无边框）",
+    "tt_chat_density": "消息之间的间距：宽松增加更多留白；紧凑在屏幕上容纳更多内容",
+    "tt_chat_emoji_style": "以单色轮廓或全彩渲染表情符号",
+    "tt_chat_enter_sends": "开启时，Enter 发送消息，Shift+Enter 换行；关闭时，Enter 换行",
+    "tt_chat_font_size": "将聊天消息文字从 0.8x 缩放到 1.5x。仅影响聊天标签页，不影响应用的其余部分",
+    "tt_chat_poll_rate": "检查新消息和 0-conf 消息的频率（0.5-15 s）。越快响应越及时，但占用更多 CPU",
+    "tt_chat_timestamp": "仅此标签页的时间戳格式：跟随全应用时钟，或强制使用 24-hour 或 12-hour",
     "tt_clear_ztx": "删除本地缓存的 z-交易历史",
     "tt_clock_format": "24 或 12 小时制，应用全局。聊天可覆盖。",
     "tt_custom_fees": "发送交易时启用手动费用输入",
     "tt_custom_theme": "自定义主题已激活",
     "tt_daemon_install_bundled": "停止节点，用此钱包版本内置的 dragonxd 覆盖已安装的版本，然后重启",
+    "tt_daemon_refresh": "重新读取上方显示的已安装及内置 dragonxd 版本、大小和日期",
     "tt_daemon_update_check": "从项目 Gitea 下载并验证最新的 dragonxd 全节点，然后重启以应用",
     "tt_debug_collapse": "折叠调试日志选项",
     "tt_debug_expand": "展开调试日志选项",
@@ -1461,7 +1491,30 @@
     "tt_keep_daemon": "运行设置向导时守护进程仍会停止",
     "tt_language": "钱包界面语言",
     "tt_layout_hotkey": "快捷键：左/右箭头键切换余额布局",
+    "tt_lite_copy": "将显示的机密复制到剪贴板",
+    "tt_lite_decrypt_pass": "输入你的密码以移除钱包的加密",
+    "tt_lite_encrypt": "用上方的密码加密钱包；加密后立即锁定，需要该密码才能解锁",
+    "tt_lite_encrypt_pass": "用于加密钱包的密码。若丢失，钱包将无法解锁或恢复",
+    "tt_lite_hide_wipe": "隐藏显示的机密并将其从内存中安全擦除",
+    "tt_lite_import_key": "粘贴要导入的私有花费或查看密钥；其历史记录会在下次同步后出现",
+    "tt_lite_import_key_btn": "将输入的私钥导入此钱包；资金和历史记录会在下次同步后出现",
+    "tt_lite_lifecycle_op": "选择是创建新钱包、打开现有钱包，还是从助记词恢复钱包",
+    "tt_lite_lifecycle_pass": "在此次创建 / 打开 / 恢复操作中用于解锁或设置钱包的密码",
+    "tt_lite_lifecycle_run": "使用上方的值执行所选的创建 / 打开 / 恢复操作",
+    "tt_lite_lifecycle_toggle": "显示或隐藏用于管理轻钱包文件的创建 / 打开 / 恢复控件",
+    "tt_lite_lock": "立即锁定钱包；解锁需要密码，任何聊天会话都会被中断",
     "tt_lite_redownload": "从轻钱包服务器重新下载并重新扫描所有区块",
+    "tt_lite_remove_encrypt": "移除加密并以未受保护的方式存储钱包；打开它将不再需要密码",
+    "tt_lite_restore_account": "要恢复的 HD 账户索引；除非你在此助记词下使用了多个账户，否则保持为 0",
+    "tt_lite_restore_birthday": "钱包创建时的区块高度；扫描从此处开始。不确定时请填 0 或最早的高度",
+    "tt_lite_restore_overwrite": "用此次恢复替换现有的钱包文件。警告：这会覆盖当前的钱包数据",
+    "tt_lite_restore_seed": "用于恢复此钱包的 24-word 助记词恢复短语；输入时会隐藏",
+    "tt_lite_save_seed_file": "将助记词和创建高度写入配置文件夹中一个仅所有者可读的文件（lite-seed-backup.txt）",
+    "tt_lite_show_keys": "显示此钱包的私有花费密钥。任何拥有密钥的人都能动用它所控制的资金",
+    "tt_lite_show_seed": "显示此钱包的助记词恢复短语和创建高度。任何拥有助记词的人都能动用你的资金",
+    "tt_lite_unlock": "使用上方的密码解锁已加密的钱包",
+    "tt_lite_unlock_pass": "输入你的密码以解锁已加密的钱包",
+    "tt_lite_wallet_path": "要打开或恢复到的钱包文件路径或名称",
     "tt_lock": "立即锁定钱包",
     "tt_low_spec": "禁用所有重度视觉效果\\n快捷键：Ctrl+Shift+Down",
     "tt_merge": "将多个 UTXO 合并到一个地址",
@@ -1482,12 +1535,17 @@
     "tt_rpc_host": "DragonX 守护进程主机名",
     "tt_rpc_pass": "RPC 认证密码",
     "tt_rpc_port": "守护进程 RPC 连接端口",
+    "tt_rpc_toggle": "显示或隐藏守护进程的只读 RPC 连接详情（主机、端口、用户、密码）",
     "tt_rpc_user": "RPC 认证用户名",
     "tt_save_settings": "将所有设置保存到磁盘",
     "tt_save_ztx": "将 z-address 交易历史存储在本地以加快加载速度",
     "tt_scan_themes": "扫描新主题。\\n将主题文件夹放在：\\n%s",
     "tt_scanline": "控制台中的 CRT 扫描线效果",
+    "tt_screenshot_open_dir": "在你的文件管理器中打开截图文件夹（位于配置目录下）",
+    "tt_screenshot_sweep": "在每个标签页遍历每种主题，将每种主题的截图保存到配置文件夹的 screenshots 目录（覆盖上一次遍历）",
+    "tt_screenshot_sweep_full": "与主题遍历类似，但同时捕获每个使用临时离线演示钱包数据的模态框 / 对话框 / 流程",
     "tt_seed_backup": "显示并备份您钱包的 24 词恢复助记词",
+    "tt_seed_demo_chat": "向聊天标签页注入示例对话，以便遍历能捕获其界面；仅在内存中，重启后消失",
     "tt_seed_migrate": "创建一个新的助记词钱包并将您的资金转入其中",
     "tt_set_pin": "设置 4-8 位 PIN 以快速解锁",
     "tt_shield_mining": "将透明挖矿奖励转移到屏蔽地址",
@@ -1506,6 +1564,7 @@
     "tt_website": "打开 DragonX 网站",
     "tt_window_opacity": "背景不透明度（越低 = 桌面透过窗口可见）",
     "tt_wizard": "重新运行初始设置向导\\n守护进程将被重启",
+    "tx_chat_badge": "消息",
     "tx_confirmations": "%d 次确认",
     "tx_details_title": "交易详情",
     "tx_from_address": "发送地址：",

res/themes/jade.toml

@@ -0,0 +1,190 @@
+[theme]
+name = "Jade"
+author = "The Hush Developers"
+dark = true
+elevation = { --elevation-0 = "#071210", --elevation-1 = "#0C1A16", --elevation-2 = "#16261F", --elevation-3 = "#1D3128", --elevation-4 = "#243B30" }
+images = { background_image = "backgrounds/texture/jade_bg.png", logo = "logos/logo_ObsidianDragon_dark.png" }
+
+[theme.palette]
+--primary = "#2FA07A"
+--primary-variant = "#1E7357"
+--primary-light = "#7FD1B5"
+--secondary = "#C9A24E"
+--secondary-variant = "#A8842F"
+--secondary-light = "#E0C583"
+--background = "#071210"
+--surface = "#0C1A16"
+--surface-variant = "#16261F"
+--on-primary = "#FFFFFF"
+--on-secondary = "#000000"
+--on-background = "#DCEDE4"
+--on-surface = "#DCEDE4"
+--on-surface-medium = "rgba(220,237,228,0.85)"
+--on-surface-disabled = "rgba(220,237,228,0.58)"
+--error = "#CF6679"
+--on-error = "#000000"
+--success = "#81C784"
+--on-success = "#000000"
+--warning = "#FFB74D"
+--on-warning = "#000000"
+--divider = "rgba(130,205,170,0.14)"
+--outline = "rgba(130,205,170,0.16)"
+--scrim = "rgba(0,0,0,0.6)"
+--surface-hover = "rgba(130,205,170,0.07)"
+--surface-alt = "rgba(130,205,170,0.05)"
+--surface-active = "rgba(130,205,170,0.10)"
+--glass-button = "rgba(130,205,170,0.06)"
+--glass-button-hover = "rgba(130,205,170,0.12)"
+--card-border = "rgba(130,205,170,0.26)"
+--text-shadow = "rgba(0,0,0,0.50)"
+--input-overlay-text = "rgba(220,237,228,0.30)"
+--slider-text = "rgba(220,237,228,0.85)"
+--thumb-fill = "rgba(130,205,170,0.15)"
+--thumb-border = "rgba(130,205,170,0.50)"
+--disabled-label = "rgba(130,205,170,0.18)"
+--chart-grid = "rgba(130,205,170,0.05)"
+--chart-crosshair = "rgba(130,205,170,0.15)"
+--chart-hover-ring = "rgba(130,205,170,0.30)"
+--tooltip-bg = "rgba(9,20,16,0.92)"
+--tooltip-border = "rgba(130,205,170,0.12)"
+--glass-fill = "rgba(130,205,170,0.08)"
+--glass-border = "rgba(47,160,122,0.30)"
+--glass-noise-tint = "rgba(130,205,170,0.03)"
+--tactile-top = "rgba(130,205,170,0.06)"
+--tactile-bottom = "rgba(130,205,170,0.0)"
+--hover-overlay = "rgba(130,205,170,0.05)"
+--active-overlay = "rgba(130,205,170,0.10)"
+--rim-light = "rgba(130,205,170,0.14)"
+--status-divider = "rgba(130,205,170,0.08)"
+--sidebar-hover = "rgba(130,205,170,0.10)"
+--sidebar-icon = "rgba(130,205,170,0.42)"
+--sidebar-badge = "rgba(220,237,228,1.0)"
+--sidebar-divider = "rgba(130,205,170,0.06)"
+--chart-line = "rgba(130,205,170,0.10)"
+--window-control = "rgba(220,237,228,0.78)"
+--window-control-hover = "rgba(130,205,170,0.12)"
+--window-close-hover = "rgba(232,17,35,0.78)"
+--spinner-track = "rgba(130,205,170,0.10)"
+--spinner-active = "rgba(79,184,154,0.85)"
+--shutdown-panel-bg = "rgba(7,18,14,0.90)"
+--shutdown-panel-border = "rgba(130,205,170,0.07)"
+--ram-bar-app = "#2FA07A"
+--ram-bar-system = "rgba(255,255,255,0.18)"
+--accent-total = "#7FD1B5"
+--accent-shielded = "#4FB89A"
+--accent-transparent = "#C9A24E"
+--accent-action = "#2FA07A"
+--accent-market = "#4FB89A"
+--accent-portfolio = "#7FD1B5"
+--toast-info-accent = "#2FA07A"
+--toast-info-text = "#7FD1B5"
+--toast-success-accent = "rgba(50,180,80,1.0)"
+--toast-success-text = "rgba(180,255,180,1.0)"
+--toast-warning-accent = "rgba(204,166,50,1.0)"
+--toast-warning-text = "rgba(255,230,130,1.0)"
+--toast-error-accent = "rgba(204,64,64,1.0)"
+--toast-error-text = "rgba(255,153,153,1.0)"
+--snackbar-bg = "rgba(24,40,34,0.95)"
+--snackbar-text = "rgba(220,237,228,0.87)"
+--snackbar-action = "rgba(79,184,154,1.0)"
+--snackbar-action-hover = "rgba(127,209,181,1.0)"
+--switch-track-off = "rgba(130,205,170,0.12)"
+--switch-track-on = "rgba(47,160,122,0.50)"
+--switch-thumb-off = "#A0C0B4"
+--switch-thumb-on = "#DCEDE4"
+--control-shadow = "rgba(0,0,0,0.24)"
+--checkbox-check = "#000000"
+--app-bar-shadow = "rgba(0,0,0,0.25)"
+
+[backdrop]
+base-color-top = "rgba(14,32,26,210)"
+base-color-bottom = "rgba(6,18,14,210)"
+texture-tint-alpha = 120
+gradient-top-r = 10
+gradient-top-g = 30
+gradient-top-b = 22
+gradient-top-a = 90
+gradient-bottom-r = 5
+gradient-bottom-g = 16
+gradient-bottom-b = 12
+gradient-bottom-a = 70
+background-alpha = 0.42
+surface-alpha = 0.56
+frame-alpha = 0.78
+surface-inline-alpha = 0.58
+background-inline-alpha = 0.40
+
+# ---------------------------------------------------------------------------
+# Theme Visual Effects — Jade (veins of gold shifting through the stone)
+#   Jade's signature is a slow jade→gold color-shifting border on every glass
+#   panel + the active nav button — a vein of gold surfacing through nephrite.
+#   It's drawn via AddRect so it hugs the real rounded corners (no polygonal
+#   edge-trace). Sparse jade motes drift up the viewport. No other theme turns
+#   gradient-border-panels on, so the panel-wide vein is Jade's own —
+#   deliberately NOT Obsidian's specular glare.
+# ---------------------------------------------------------------------------
+[effects]
+hue-cycle-enabled            = { size = 0.0 }
+rainbow-border-enabled       = { size = 0.0 }
+
+# No shimmer sweep — replaced by specular glare
+shimmer-enabled              = { size = 0.0 }
+
+positional-hue-enabled       = { size = 0.0 }
+
+glow-pulse-enabled           = { size = 0.0 }
+
+# Edge-trace OFF — its hand-walked perimeter chamfers rounded corners.
+# Jade's vein is the gradient-border below (corner-clean via AddRect).
+edge-trace-enabled           = { size = 0.0 }
+edge-trace-speed             = { size = 0.16 }
+edge-trace-length            = { size = 0.34 }
+edge-trace-thickness         = { size = 1.6 }
+edge-trace-alpha             = { size = 0.55 }
+edge-trace-color             = { color = "#C9A24E" }
+
+# Specular glare OFF — that's Obsidian's signature; Jade shouldn't echo it.
+specular-glare-enabled       = { size = 0.0 }
+specular-glare-speed         = { size = 0.018 }
+specular-glare-intensity     = { size = 0.008 }
+specular-glare-radius        = { size = 0.65 }
+specular-glare-count         = { size = 1.0 }
+specular-glare-color         = { color = "rgba(150,220,180,1.0)" }
+
+# HERO — vein of gold: a slow jade→gold color-shifting border on the active
+# nav button AND (via gradient-border-panels) every glass panel. Drawn with
+# AddRect so it follows the rounded corners exactly. Panels drift at a softer
+# alpha and position-phased offset, so a screenful reads like veins at
+# different depths rather than one synchronized pulse.
+gradient-border-enabled      = { size = 1.0 }
+gradient-border-panels       = { size = 1.0 }
+gradient-border-speed        = { size = 0.10 }
+gradient-border-thickness    = { size = 1.5 }
+gradient-border-alpha        = { size = 0.55 }
+gradient-border-color-a      = { color = "#7FD1B5" }
+gradient-border-color-b      = { color = "#C9A24E" }
+
+# Ambient jade motes — sparse, slow, cool green particles drifting up the
+# viewport (recolored ember-rise; a different mood from dragonx's fire embers).
+ember-rise-enabled           = { size = 1.0 }
+ember-rise-count             = { size = 5.0 }
+ember-rise-speed             = { size = 0.18 }
+ember-rise-particle-size     = { size = 1.4 }
+ember-rise-alpha             = { size = 0.26 }
+ember-rise-color             = { color = "#7FD1B5" }
+
+# Shader-like viewport overlay — deep green stone atmosphere
+viewport-wash-enabled        = { size = 1.0 }
+viewport-wash-alpha          = { size = 0.05 }
+viewport-wash-tl             = { color = "#12402E" }
+viewport-wash-tr             = { color = "#0E3828" }
+viewport-wash-bl             = { color = "#16442E" }
+viewport-wash-br             = { color = "#1A4A34" }
+viewport-wash-rotate         = { size = 0.015 }
+viewport-wash-pulse          = { size = 0.0 }
+viewport-wash-pulse-depth    = { size = 0.0 }
+
+viewport-vignette-enabled    = { size = 1.0 }
+viewport-vignette-color      = { color = "#04140D" }
+viewport-vignette-radius     = { size = 0.22 }
+viewport-vignette-alpha      = { size = 0.15 }

scripts/build-lite-backend-artifact.sh

@@ -67,25 +67,9 @@ Options:
     --backend-dir PATH              SilentDragonXLite/lib source directory.
     --silentdragonxlitelib-dir PATH Override the wrapper's silentdragonxlitelib dependency path.
     --out-dir PATH                  Output directory for copied artifact and metadata.
-    --artifact PATH                 Inventory an existing artifact instead of building.
-    --no-build                      Do not run cargo; requires --artifact.
     --reproducible                  Add deterministic Rust path remaps for clean builds.
     --remap-path-prefix FROM=TO     Extra rustc path remap used with --reproducible.
     --builder NAME                  Redacted builder/provenance label. Default: local.
-    --signature-required            Fail if verified signature metadata is not supplied.
-    --signature-file PATH           Existing sidecar signature file to record.
-    --signature-format FORMAT       Signature format: minisign, gpg, sigstore, external, or other.
-    --signature-verification-tool T Verification tool and version used by the release builder.
-    --signature-verification-command C
-                                    Verification command already run by the release builder.
-    --signature-key-fingerprint F   Reviewed public-key fingerprint, when applicable.
-    --signature-certificate-identity ID
-                                    Reviewed certificate identity, when applicable.
-    --signature-certificate-issuer I
-                                    Reviewed certificate issuer, when applicable.
-    --signature-transparency-log-url URL
-                                    Transparency log entry, when applicable.
-    --signature-verified-sha256 SHA Artifact SHA-256 verified by the signature check.
     -j, --jobs N                    Cargo parallel jobs.
     --cargo-arg ARG                 Extra argument forwarded to cargo build.
     -h, --help                      Show this help.
@@ -95,9 +79,13 @@ Outputs:
   <out>/<platform>/lite-backend-symbols.txt
   <out>/<platform>/lite-backend-artifact-manifest.json
 
-The script captures symbols, checksums, and optional read-only signature
-verification metadata only. It does not load the library, resolve function
-pointers, call SDXL, sign, upload, or publish artifacts.
+The lite backend is always built from the vendored in-tree source
+(third_party/silentdragonxlite), which is the trust root. Prebuilt artifacts
+and self-attested signature metadata are NOT accepted (F15-1) — the previous
+scheme only recorded an unverified "verified" claim. The script captures the
+freshly-built artifact's symbols and checksum, and records build provenance.
+It does not load the library, resolve function pointers, call SDXL, sign,
+upload, or publish artifacts.
 EOF
 }
 
@@ -166,15 +154,8 @@ while [[ $# -gt 0 ]]; do
             OUT_DIR="$(absolute_path "$2")"
             shift 2
             ;;
-        --artifact)
-            [[ $# -ge 2 ]] || die "--artifact requires a value"
-            ARTIFACT_PATH="$(absolute_path "$2")"
-            BUILD_ARTIFACT=false
-            shift 2
-            ;;
-        --no-build)
-            BUILD_ARTIFACT=false
-            shift
+        --artifact|--no-build)
+            die "$1 was removed (F15-1): the lite backend must be built from the vendored in-tree source (third_party/silentdragonxlite); prebuilt artifacts are no longer accepted."
             ;;
         --reproducible)
             REPRODUCIBLE=true
@@ -191,54 +172,11 @@ while [[ $# -gt 0 ]]; do
             BUILDER="$2"
             shift 2
             ;;
-        --signature-required)
-            SIGNATURE_REQUIRED=true
-            shift
-            ;;
-        --signature-file|--signature-path)
-            [[ $# -ge 2 ]] || die "$1 requires a value"
-            SIGNATURE_FILE="$(absolute_path "$2")"
-            shift 2
-            ;;
-        --signature-format)
-            [[ $# -ge 2 ]] || die "--signature-format requires a value"
-            SIGNATURE_FORMAT="$2"
-            shift 2
-            ;;
-        --signature-verification-tool|--signature-tool)
-            [[ $# -ge 2 ]] || die "$1 requires a value"
-            SIGNATURE_VERIFICATION_TOOL="$2"
-            shift 2
-            ;;
-        --signature-verification-command)
-            [[ $# -ge 2 ]] || die "--signature-verification-command requires a value"
-            SIGNATURE_VERIFICATION_COMMAND="$2"
-            shift 2
-            ;;
-        --signature-key-fingerprint)
-            [[ $# -ge 2 ]] || die "--signature-key-fingerprint requires a value"
-            SIGNATURE_KEY_FINGERPRINT="$2"
-            shift 2
-            ;;
-        --signature-certificate-identity)
-            [[ $# -ge 2 ]] || die "--signature-certificate-identity requires a value"
-            SIGNATURE_CERTIFICATE_IDENTITY="$2"
-            shift 2
-            ;;
-        --signature-certificate-issuer)
-            [[ $# -ge 2 ]] || die "--signature-certificate-issuer requires a value"
-            SIGNATURE_CERTIFICATE_ISSUER="$2"
-            shift 2
-            ;;
-        --signature-transparency-log-url)
-            [[ $# -ge 2 ]] || die "--signature-transparency-log-url requires a value"
-            SIGNATURE_TRANSPARENCY_LOG_URL="$2"
-            shift 2
-            ;;
-        --signature-verified-sha256)
-            [[ $# -ge 2 ]] || die "--signature-verified-sha256 requires a value"
-            SIGNATURE_VERIFIED_SHA256="$2"
-            shift 2
+        --signature-required|--signature-file|--signature-path|--signature-format|\
+--signature-verification-tool|--signature-tool|--signature-verification-command|\
+--signature-key-fingerprint|--signature-certificate-identity|--signature-certificate-issuer|\
+--signature-transparency-log-url|--signature-verified-sha256)
+            die "signature-attestation flags were removed (F15-1): they recorded a self-attested \"verified\" claim without running any cryptographic verifier. The lite backend is built from the vendored in-tree source, which is the trust root."
             ;;
         -j|--jobs)
             [[ $# -ge 2 ]] || die "--jobs requires a value"
@@ -766,6 +704,7 @@ MANIFEST_FILE="$PLATFORM_OUT_DIR/lite-backend-artifact-manifest.json"
     printf '  },\n'
     printf '  "provenance": {\n'
     printf '    "owner_ready": true,\n'
+    printf '    "built_from_source": true,\n'
     printf '    "metadata_provided": true,\n'
     printf '    "source": '; json_escape "$BACKEND_SOURCE_DIR"; printf ',\n'
     printf '    "cargo_build_source": '; json_escape "$BUILD_BACKEND_DIR"; printf ',\n'

scripts/create-appimage.sh

@@ -24,18 +24,27 @@ if [ ! -f "${BUILD_DIR}/bin/ObsidianDragon" ]; then
     exit 1
 fi
 
-# Check for appimagetool
+# Check for appimagetool — pinned to a tagged release and SHA-256 verified before we exec it.
+# The old "continuous" tag is a moving, unverified network download that runs on the release
+# builder; verify it or refuse to package.
+APPIMAGETOOL_URL="https://github.com/AppImage/appimagetool/releases/download/1.9.0/appimagetool-x86_64.AppImage"
+APPIMAGETOOL_SHA256="46fdd785094c7f6e545b61afcfb0f3d98d8eab243f644b4b17698c01d06083d1"
 APPIMAGETOOL=""
 if command -v appimagetool &> /dev/null; then
-    APPIMAGETOOL="appimagetool"
-elif [ -f "${BUILD_DIR}/appimagetool-x86_64.AppImage" ]; then
-    APPIMAGETOOL="${BUILD_DIR}/appimagetool-x86_64.AppImage"
+    APPIMAGETOOL="appimagetool"   # maintainer's own trusted system install
 else
-    print_status "Downloading appimagetool..."
-    wget -q -O "${BUILD_DIR}/appimagetool-x86_64.AppImage" \
-        "https://github.com/AppImage/AppImageKit/releases/download/continuous/appimagetool-x86_64.AppImage"
-    chmod +x "${BUILD_DIR}/appimagetool-x86_64.AppImage"
-    APPIMAGETOOL="${BUILD_DIR}/appimagetool-x86_64.AppImage"
+    AT="${BUILD_DIR}/appimagetool-x86_64.AppImage"
+    if [ ! -f "$AT" ] || ! echo "${APPIMAGETOOL_SHA256}  ${AT}" | sha256sum -c --status; then
+        print_status "Downloading appimagetool 1.9.0 (pinned)..."
+        wget -q -O "$AT" "$APPIMAGETOOL_URL"
+        if ! echo "${APPIMAGETOOL_SHA256}  ${AT}" | sha256sum -c --status; then
+            print_error "appimagetool SHA-256 verification failed — refusing to use it"
+            rm -f "$AT"
+            exit 1
+        fi
+        chmod +x "$AT"
+    fi
+    APPIMAGETOOL="$AT"
 fi
 
 print_status "Creating AppDir structure..."

setup.sh

@@ -391,11 +391,26 @@ elif $SETUP_SAPLING; then
 
         SPEND_URL="https://z.cash/downloads/sapling-spend.params"
         OUTPUT_URL="https://z.cash/downloads/sapling-output.params"
+        # Consensus-critical MPC parameters with fixed, well-known SHA-256 (identical across every
+        # Zcash-family node; also pinned in scripts/build-lite-backend-artifact.sh). z.cash is
+        # plain HTTPS with no signature, so verify the digest and refuse a tampered/corrupt file.
+        SPEND_SHA256="8e48ffd23abb3a5fd9c5589204f32d9c31285a04b78096ba40a79b75677efc13"
+        OUTPUT_SHA256="2f0ebbcbb9bb0bcffe95a397e7eba89c29eb4dde6191c339db88570e3f3fb0e4"
 
-        curl -fSL -o "$PARAMS_DIR/sapling-spend.params"  "$SPEND_URL"  && \
-            ok "Downloaded sapling-spend.params"
-        curl -fSL -o "$PARAMS_DIR/sapling-output.params" "$OUTPUT_URL" && \
-            ok "Downloaded sapling-output.params"
+        if curl -fSL -o "$PARAMS_DIR/sapling-spend.params" "$SPEND_URL" \
+           && echo "${SPEND_SHA256}  $PARAMS_DIR/sapling-spend.params" | sha256sum -c --status; then
+            ok "Downloaded + verified sapling-spend.params"
+        else
+            rm -f "$PARAMS_DIR/sapling-spend.params"
+            err "sapling-spend.params download or SHA-256 verification failed — not installed"
+        fi
+        if curl -fSL -o "$PARAMS_DIR/sapling-output.params" "$OUTPUT_URL" \
+           && echo "${OUTPUT_SHA256}  $PARAMS_DIR/sapling-output.params" | sha256sum -c --status; then
+            ok "Downloaded + verified sapling-output.params"
+        else
+            rm -f "$PARAMS_DIR/sapling-output.params"
+            err "sapling-output.params download or SHA-256 verification failed — not installed"
+        fi
     fi
 else
     skip "Sapling params not found (use --sapling to download, or they'll be extracted at runtime from embedded builds)"

src/app.cpp

@@ -73,6 +73,9 @@
 #include "util/text_format.h"
 #include "util/payment_uri.h"
 #include "util/texture_loader.h"
+#include "util/svg_texture.h"
+#include "ui/material/colors.h"
+#include "logo_dragonx_svg.h"
 #include "util/bootstrap.h"
 #include "util/secure_vault.h"
 #include "resources/embedded_resources.h"
@@ -735,20 +738,40 @@ void App::update()
             // HushChat (lite): harvest chat memos from the refreshed transactions and thread them
             // (no-op when the feature is off or no identity; the store dedups across refreshes).
             ingestLiteChatMemos(liteModel);
+            // Chat note-buffer: recompute the verified/maturing self-note estimates from the fresh model.
+            refreshChatNoteBudget(liteModel);
         }
-        // Deliver a completed async send/shield result to the waiting send_tab callback.
+        // Deliver a completed async send/shield result. Route by the in-flight op that owns the single
+        // broadcast channel: a user Send-tab send goes to lite_send_callback_; a chat send / contact
+        // request resolves its echo (real status — not the old optimistic "Sent"); a note-buffer split
+        // just logs. Because the controller runs one broadcast at a time, inflight_op_ correlates the
+        // one global result with no txid matching.
         wallet::LiteBroadcastResult broadcast;
         if (lite_wallet_->takeBroadcastResult(broadcast)) {
             // Mirror failures into the lite Console (copyable) in addition to the toast the send UI
             // shows — transient toasts are easy to miss and impossible to copy.
             if (!broadcast.ok)
                 wallet::liteLog("Send/shield failed: " + broadcast.error);
-            if (lite_send_callback_) {
-                lite_send_callback_(broadcast.ok, broadcast.ok ? broadcast.txid : broadcast.error);
-                lite_send_callback_ = nullptr;
+            const LiteInflightOp finished = inflight_op_;
+            inflight_op_ = LiteInflightOp{};                 // channel is free again
+            switch (finished.kind) {
+                case LiteOpKind::ChatSend:
+                case LiteOpKind::ContactRequest:
+                    onChatBroadcastResult(finished, broadcast.ok, broadcast.error);
+                    break;
+                case LiteOpKind::Split:
+                    // Buffer split done; the next refresh re-counts the new (maturing) notes.
+                    break;
+                case LiteOpKind::UserSend:
+                case LiteOpKind::None:
+                default:
+                    if (lite_send_callback_) {
+                        lite_send_callback_(broadcast.ok, broadcast.ok ? broadcast.txid : broadcast.error);
+                        lite_send_callback_ = nullptr;
+                    }
+                    break;
             }
         }
-
         // Startup lock screen: once the first refresh reveals the (auto-opened) wallet is
         // encrypted, prompt to unlock if it's locked. Soft by design — balances stay viewable via
         // viewing keys while locked; only spending needs the passphrase, so the user may dismiss
@@ -765,6 +788,13 @@ void App::update()
     // it can act; compiled away when the feature is off (constexpr gate inside).
     maybeProvisionChatIdentity();
 
+    // Chat note-buffer coordinator (BOTH variants). Full-node only: refresh the per-note counts via a
+    // rate-limited z_listunspent worker scan (lite gets its counts from the refresh model, above). Then
+    // pump: drain queued chat sends against verified notes and build/refill the buffer during idle. Both
+    // self-gate to no-ops unless chat is engaged; the pump serializes to one send outstanding at a time.
+    refreshChatNoteBudgetNode();
+    pumpChatNoteBuffer();
+
     // One-time reminder to back up the wallet's seed phrase (mnemonic wallets only).
     maybeRemindSeedBackup();
 
@@ -1326,6 +1356,103 @@ void App::handleGlobalShortcuts()
     }
 }
 
+// Load (and recolor per theme) the DragonX header logo texture. Called at the top of render() — BEFORE
+// the first-run-wizard / lock-screen paths — so every screen shows the mark. The SVG is recolored to the
+// theme accent, so it re-rasterizes whenever the accent or the dark↔light variant changes.
+void App::ensureLogoTexture()
+{
+    const bool wantDark = ui::material::IsDarkTheme();
+    const ImU32 logoAccent = ui::material::Primary();
+    if (logo_loaded_ && wantDark == logo_is_dark_variant_ && logoAccent == logo_accent_)
+        return;   // already current
+    logo_loaded_ = true;
+    logo_is_dark_variant_ = wantDark;
+    logo_accent_ = logoAccent;
+    // The SVG's white highlight (detail) stays white on dark skins, but darkens to the theme's on-surface
+    // colour on light skins so it doesn't wash out against a light card/background.
+    const ImU32 detailCol = wantDark ? IM_COL32(255, 255, 255, 255) : ui::material::OnSurface();
+
+    // ":drgx:" custom chat emoji — themed to the accent like the logo (re-rasterized on theme change).
+    if (drgx_emoji_tex_) util::DestroyTexture(drgx_emoji_tex_);
+    drgx_emoji_tex_ = 0; drgx_emoji_w_ = 0; drgx_emoji_h_ = 0;
+    util::LoadTextureFromSvg(embedded::kLogoDragonXSvg, 96, logoAccent, detailCol,
+                             &drgx_emoji_tex_, &drgx_emoji_w_, &drgx_emoji_h_);
+
+    if (logo_tex_) util::DestroyTexture(logo_tex_);   // free the previous texture before replacing
+    logo_tex_ = 0; logo_w_ = 0; logo_h_ = 0;
+
+    // Coin/currency icon (the big DragonX mark on the balance card) — the SAME themed SVG recolored to
+    // the accent, rasterized here so it changes with the skin too (done first, since the header block
+    // below early-returns on success). Falls back to the PNG coin icon if rasterization fails.
+    if (coin_logo_tex_) util::DestroyTexture(coin_logo_tex_);
+    coin_logo_tex_ = 0; coin_logo_w_ = 0; coin_logo_h_ = 0;
+    coin_logo_loaded_ = true;
+    if (!util::LoadTextureFromSvg(embedded::kLogoDragonXSvg, 128, logoAccent, detailCol,
+                                  &coin_logo_tex_, &coin_logo_w_, &coin_logo_h_)) {
+        auto coinElem = ui::schema::UI().drawElement("components.main-window", "coin-icon");
+        auto cit = coinElem.extraColors.find("icon");
+        std::string coinFile = (cit != coinElem.extraColors.end() && !cit->second.empty())
+            ? cit->second : "logos/logo_dragonx_128.png";
+        std::string coinPath = util::getExecutableDirectory() + "/res/img/" + coinFile;
+        std::error_code coinEc;
+        if (!(std::filesystem::exists(coinPath, coinEc) &&
+              util::LoadTextureFromFile(coinPath.c_str(), &coin_logo_tex_, &coin_logo_w_, &coin_logo_h_))) {
+            std::string coinBasename = std::filesystem::path(coinFile).filename().string();
+            const auto* coinRes = resources::getEmbeddedResource(coinBasename);
+            if (coinRes && coinRes->data && coinRes->size > 0)
+                util::LoadTextureFromMemory(coinRes->data, coinRes->size, &coin_logo_tex_, &coin_logo_w_, &coin_logo_h_);
+        }
+    }
+
+    // 0) DragonX mark — rasterize the embedded SVG recolored to the theme (body = accent, detail = white)
+    //    at ~2x the 128px viewBox for crisp downscaling. This is the branding on every skin; the per-skin
+    //    PNG path below is only a fallback if rasterization ever fails.
+    if (util::LoadTextureFromSvg(embedded::kLogoDragonXSvg, 256, logoAccent,
+                                 detailCol, &logo_tex_, &logo_w_, &logo_h_)) {
+        DEBUG_LOGF("Rendered DragonX SVG logo (%dx%d, accent %08X)\n", logo_w_, logo_h_, logoAccent);
+        return;
+    }
+
+    // 1) Fallback — theme-override logo from the active skin
+    const auto* activeSkin = ui::schema::SkinManager::instance().findById(
+        ui::schema::SkinManager::instance().activeSkinId());
+    std::string logoPath;
+    if (activeSkin && !activeSkin->logoPath.empty()) {
+        logoPath = activeSkin->logoPath;
+    } else {
+        // 2) Read icon filename from ui.toml (dark/light variant)
+        auto iconElem = ui::schema::UI().drawElement("components.main-window", "header-icon");
+        const char* iconKey = wantDark ? "icon-dark" : "icon-light";
+        auto it = iconElem.extraColors.find(iconKey);
+        std::string iconFile;
+        if (it != iconElem.extraColors.end() && !it->second.empty())
+            iconFile = it->second;
+        else
+            iconFile = wantDark ? "logos/logo_ObsidianDragon_dark.png" : "logos/logo_ObsidianDragon_light.png";
+        logoPath = util::getExecutableDirectory() + "/res/img/" + iconFile;
+    }
+    // Only attempt the disk read when the file is actually present (dev build / theme drop-in). The
+    // portable single-file build has no res/img/ beside it, so skip straight to the embedded copy.
+    std::error_code logoEc;
+    if (std::filesystem::exists(logoPath, logoEc) &&
+        util::LoadTextureFromFile(logoPath.c_str(), &logo_tex_, &logo_w_, &logo_h_)) {
+        DEBUG_LOGF("Loaded header logo from %s (%dx%d)\n", logoPath.c_str(), logo_w_, logo_h_);
+    } else {
+        std::string embeddedName = std::filesystem::path(logoPath).filename().string();
+        const auto* logoRes = resources::getEmbeddedResource(embeddedName);
+        if (!logoRes || !logoRes->data || logoRes->size == 0)
+            logoRes = resources::getEmbeddedResource(resources::RESOURCE_LOGO);
+        if (logoRes && logoRes->data && logoRes->size > 0) {
+            if (util::LoadTextureFromMemory(logoRes->data, logoRes->size, &logo_tex_, &logo_w_, &logo_h_))
+                DEBUG_LOGF("Loaded header logo from embedded: %s (%dx%d)\n", embeddedName.c_str(), logo_w_, logo_h_);
+            else
+                DEBUG_LOGF("Note: Failed to decode embedded logo (text-only header)\n");
+        } else {
+            DEBUG_LOGF("Note: Header logo not found at %s (text-only header)\n", logoPath.c_str());
+        }
+    }
+}
+
 void App::render()
 {
     // Advance the screenshot sweep FIRST — before the first-run-wizard early-return below — so the
@@ -1333,6 +1460,9 @@ void App::render()
     // (Pins current_page_ too, before the sidebar reads it further down.)
     updateScreenshotSweep();
 
+    // DragonX logo — load/recolor before the wizard/lock early-returns so every screen shows it.
+    ensureLogoTexture();
+
     // First-run wizard gate — blocks all normal UI
     if (wizard_phase_ != WizardPhase::None && wizard_phase_ != WizardPhase::Done) {
         renderFirstRunWizard();
@@ -1533,94 +1663,9 @@ void App::render()
     sbStatus.miningActive = state_.mining.generate || state_.pool_mining.xmrig_running;
     sbStatus.chatUnreadCount = chatUnreadCount();   // unread badge on the Chat nav item (Q1)
 
-    // Load logo texture lazily on first frame (or after theme change)
-    // Also reload when dark↔light mode changes so the correct variant shows
-    {
-        bool wantDark = ui::material::IsDarkTheme();
-        if (!logo_loaded_ || (wantDark != logo_is_dark_variant_)) {
-            logo_loaded_ = true;
-            logo_is_dark_variant_ = wantDark;
-            logo_tex_ = 0; logo_w_ = 0; logo_h_ = 0;
+    // (DragonX logo is loaded at the top of render() via ensureLogoTexture().)
 
-            // 1) Check for theme-override logo from active skin
-            const auto* activeSkin = ui::schema::SkinManager::instance().findById(
-                ui::schema::SkinManager::instance().activeSkinId());
-            std::string logoPath;
-            if (activeSkin && !activeSkin->logoPath.empty()) {
-                logoPath = activeSkin->logoPath;
-            } else {
-                // 2) Read icon filename from ui.toml (dark/light variant)
-                auto iconElem = ui::schema::UI().drawElement("components.main-window", "header-icon");
-                const char* iconKey = wantDark ? "icon-dark" : "icon-light";
-                auto it = iconElem.extraColors.find(iconKey);
-                std::string iconFile;
-                if (it != iconElem.extraColors.end() && !it->second.empty()) {
-                    iconFile = it->second;
-                } else {
-                    // Fallback filenames
-                    iconFile = wantDark ? "logos/logo_ObsidianDragon_dark.png" : "logos/logo_ObsidianDragon_light.png";
-                }
-                logoPath = util::getExecutableDirectory() + "/res/img/" + iconFile;
-            }
-            // Only attempt the disk read when the file is actually present (dev build / theme drop-in).
-            // The portable single-file build has no res/img/ beside it, so skip straight to the
-            // embedded copy instead of logging a spurious "failed to read".
-            std::error_code logoEc;
-            if (std::filesystem::exists(logoPath, logoEc) &&
-                util::LoadTextureFromFile(logoPath.c_str(), &logo_tex_, &logo_w_, &logo_h_)) {
-                DEBUG_LOGF("Loaded header logo from %s (%dx%d)\n", logoPath.c_str(), logo_w_, logo_h_);
-            } else {
-                // Try embedded data fallback — use actual filename from path
-                // so light/dark variants resolve correctly on Windows single-file
-                std::string embeddedName = std::filesystem::path(logoPath).filename().string();
-                const auto* logoRes = resources::getEmbeddedResource(embeddedName);
-                if (!logoRes || !logoRes->data || logoRes->size == 0) {
-                    // Final fallback: try the default dark logo constant
-                    logoRes = resources::getEmbeddedResource(resources::RESOURCE_LOGO);
-                }
-                if (logoRes && logoRes->data && logoRes->size > 0) {
-                    if (util::LoadTextureFromMemory(logoRes->data, logoRes->size, &logo_tex_, &logo_w_, &logo_h_)) {
-                        DEBUG_LOGF("Loaded header logo from embedded: %s (%dx%d)\n", embeddedName.c_str(), logo_w_, logo_h_);
-                    } else {
-                        DEBUG_LOGF("Note: Failed to decode embedded logo (text-only header)\n");
-                    }
-                } else {
-                    DEBUG_LOGF("Note: Header logo not found at %s (text-only header)\n", logoPath.c_str());
-                }
-            }
-        }
-    }
-
-    // Load coin logo texture lazily (DragonX currency icon for balance tab)
-    if (!coin_logo_loaded_) {
-        coin_logo_loaded_ = true;
-        coin_logo_tex_ = 0; coin_logo_w_ = 0; coin_logo_h_ = 0;
-
-        // Read coin icon filename from ui.toml
-        auto coinElem = ui::schema::UI().drawElement("components.main-window", "coin-icon");
-        auto cit = coinElem.extraColors.find("icon");
-        std::string coinFile = (cit != coinElem.extraColors.end() && !cit->second.empty())
-            ? cit->second : "logos/logo_dragonx_128.png";
-        std::string coinPath = util::getExecutableDirectory() + "/res/img/" + coinFile;
-        std::error_code coinEc;
-        if (std::filesystem::exists(coinPath, coinEc) &&
-            util::LoadTextureFromFile(coinPath.c_str(), &coin_logo_tex_, &coin_logo_w_, &coin_logo_h_)) {
-            DEBUG_LOGF("Loaded coin logo from %s (%dx%d)\n", coinPath.c_str(), coin_logo_w_, coin_logo_h_);
-        } else {
-            // Try embedded resource fallback (Windows single-file distribution)
-            std::string coinBasename = std::filesystem::path(coinFile).filename().string();
-            const auto* coinRes = resources::getEmbeddedResource(coinBasename);
-            if (coinRes && coinRes->data && coinRes->size > 0) {
-                if (util::LoadTextureFromMemory(coinRes->data, coinRes->size, &coin_logo_tex_, &coin_logo_w_, &coin_logo_h_)) {
-                    DEBUG_LOGF("Loaded coin logo from embedded: %s (%dx%d)\n", coinBasename.c_str(), coin_logo_w_, coin_logo_h_);
-                } else {
-                    DEBUG_LOGF("Note: Failed to decode embedded coin logo\n");
-                }
-            } else {
-                DEBUG_LOGF("Note: Coin logo not found at %s\n", coinPath.c_str());
-            }
-        }
-    }
+    // (coin logo is loaded/themed at the top of render() via ensureLogoTexture().)
 
     if (logo_tex_ != 0) {
         sbStatus.logoTexID = logo_tex_;
@@ -2005,8 +2050,8 @@ void App::render()
     // Send confirm popup
     ui::RenderSendConfirmPopup(this);
 
-    // Console RPC Command Reference popup
-    console_tab_.renderCommandsPopupModal();
+    // Console command-reference popup (full-node RPC reference / lite backend verbs).
+    console_tab_.renderCommandsPopupModal(console_exec_.get());
 
     // Key export dialog (triggered from balance tab context menu)
     ui::KeyExportDialog::render(this);
@@ -2324,17 +2369,32 @@ void App::renderStatusBar()
         // Connection / daemon status sits to the left of the version string
         // with a small gap.
         float gap = sbSectionGap;
+        float occupiedX = versionX;   // leftmost X used by the version + connection status so far
         if (!connection_status_.empty() && connection_status_ != "Connected") {
             float statusW = ImGui::CalcTextSize(connection_status_.c_str()).x;
             float statusX = versionX - statusW - gap;
             ImGui::SameLine(statusX);
             ImGui::TextDisabled("%s", connection_status_.c_str());
+            occupiedX = statusX;
         } else if (!daemon_status_.empty() && daemon_status_.find("Error") != std::string::npos) {
             const char* errText = TR("sb_daemon_not_found");
             float statusW = ImGui::CalcTextSize(errText).x;
             float statusX = versionX - statusW - gap;
             ImGui::SameLine(statusX);
             ImGui::TextColored(ImVec4(1.0f, 0.5f, 0.5f, 1.0f), "%s", errText);
+            occupiedX = statusX;
+        }
+
+        // Chat note-buffer status — only while the Chat tab is active. Sits left of the version/connection
+        // block. Surfaces the buffer filling/draining (and doubles as a diagnostic for send readiness).
+        if (current_page_ == ui::NavPage::Chat) {
+            const std::string cb = chatBufferStatusText();
+            if (!cb.empty()) {
+                float cbW = ImGui::CalcTextSize(cb.c_str()).x;
+                float cbX = occupiedX - cbW - gap;
+                ImGui::SameLine(cbX);
+                ImGui::TextUnformatted(cb.c_str());
+            }
         }
 
         // Version always at far right
@@ -2387,12 +2447,15 @@ void App::reloadThemeImages(const std::string& bgPath, const std::string& logoPa
         gradient_tex_ = 0;
     }
 
-    // Reset logo loaded flags — will reload on next render frame
+    // Reset logo loaded flags — will reload on next render frame (ensureLogoTexture re-rasterizes the
+    // SVG for the new theme). Free the current texture first so a theme switch doesn't leak it.
+    if (logo_tex_) util::DestroyTexture(logo_tex_);
     logo_loaded_ = false;
     logo_tex_ = 0;
     logo_w_ = 0;
     logo_h_ = 0;
     coin_logo_loaded_ = false;
+    if (coin_logo_tex_) util::DestroyTexture(coin_logo_tex_);
     coin_logo_tex_ = 0;
     coin_logo_w_ = 0;
     coin_logo_h_ = 0;
@@ -5257,6 +5320,11 @@ void App::renderLoadingOverlay(float contentH)
 
 void App::shutdown()
 {
+    // Wipe any copied secret from the OS clipboard before we exit — the 45s auto-clear timer
+    // never fires if the user quits sooner, which would otherwise leave a key/seed resident.
+    // (ImGui context is still alive here; App::shutdown() runs before ImGui::DestroyContext().)
+    clearSecretClipboardIfArmed();
+
     // Clean up bootstrap if running
     if (bootstrap_) {
         bootstrap_->cancel();
@@ -5459,10 +5527,9 @@ void App::copySecretToClipboard(const std::string& secret)
         ui::Notifications::instance().info("Copied — clipboard auto-clears in 45s", 4.0f);
 }
 
-void App::pumpSecretClipboardClear()
+void App::clearSecretClipboardIfArmed()
 {
-    if (clipboard_clear_deadline_ <= 0.0) return;
-    if (ImGui::GetTime() < clipboard_clear_deadline_) return;
+    if (clipboard_secret_hash_ == 0) return;
     // Only clear if the clipboard STILL holds our secret (the user may have copied something else).
     if (const char* cb = ImGui::GetClipboardText()) {
         std::uint64_t h = 1469598103934665603ULL;
@@ -5473,6 +5540,13 @@ void App::pumpSecretClipboardClear()
     clipboard_secret_hash_ = 0;
 }
 
+void App::pumpSecretClipboardClear()
+{
+    if (clipboard_clear_deadline_ <= 0.0) return;
+    if (ImGui::GetTime() < clipboard_clear_deadline_) return;
+    clearSecretClipboardIfArmed();
+}
+
 void App::maybeFinishTransactionSendProgress()
 {
     using Job = services::NetworkRefreshService::Job;

src/app.h

@@ -13,6 +13,7 @@
 #include <chrono>
 #include <unordered_map>
 #include <unordered_set>
+#include <deque>
 #include <nlohmann/json_fwd.hpp>
 #include "data/transaction_history_cache.h"
 #include "data/address_book.h"
@@ -478,6 +479,10 @@ public:
     // Coin logo texture accessor (DragonX currency icon for balance tab)
     ImTextureID getCoinLogoTexture() const { return coin_logo_tex_; }
 
+    // DragonX custom chat emoji (the ":drgx:" shortcode) — the mark recolored to the theme accent (like
+    // the logo), re-rasterized on theme change. Used by the emoji picker tile + inline in chat bubbles.
+    ImTextureID getDrgxEmojiTexture() const { return drgx_emoji_tex_; }
+
     /**
      * @brief Reload theme images (background gradient + logo) from new paths
      * @param bgPath Path to background image override (empty = use default)
@@ -485,6 +490,10 @@ public:
      */
     void reloadThemeImages(const std::string& bgPath, const std::string& logoPath);
 
+    // Load / recolor-per-theme the DragonX header logo (SVG rasterized to the theme accent). Called at
+    // the top of render() so the wizard, lock screen, and main header all show it.
+    void ensureLogoTexture();
+
     // Wizard / first-run
     WizardPhase getWizardPhase() const { return wizard_phase_; }
     bool isFirstRun() const;
@@ -564,6 +573,9 @@ public:
     // plaintext. Call pumpSecretClipboardClear() each frame to action the clear.
     void copySecretToClipboard(const std::string& secret);
     void pumpSecretClipboardClear();
+    // Immediately clear the clipboard if it still holds the armed secret (ignores the 45s timer).
+    // Called on app shutdown so a copied key/seed does not outlive the process in the OS clipboard.
+    void clearSecretClipboardIfArmed();
     bool isTransactionRefreshInProgress() const {
         return network_refresh_.jobInProgress(services::NetworkRefreshService::Job::Transactions);
     }
@@ -605,10 +617,13 @@ private:
     // the recipient `to`/`amount`/`memo`/`fee` used to record the optimistic pending-send row).
     // When markFeeGapRetry is set, the returned opid is recorded in send_feegap_retried_opids_ so a
     // retry of a retry is reported as a real error.
+    // background=true (autonomous chat sends / note-buffer splits): keep the single-flight + opid
+    // accounting but DON'T raise the global "transaction in progress" UI (status is on the chat message).
     void submitZSendMany(const std::string& from, const std::string& to, double amount, double fee,
                          const std::string& memo, const nlohmann::json& recipients,
                          const char* traceLabel, bool markFeeGapRetry,
-                         std::function<void(bool, const std::string&)> callback);
+                         std::function<void(bool, const std::string&)> callback,
+                         bool background = false);
     void markPendingSendTransactionSucceeded(const std::string& opid,
                                              const std::string& txid);
     void removePendingSendTransactions(const std::vector<std::string>& opids,
@@ -695,6 +710,72 @@ private:
     // thread is viewed (markChatConversationSeen); wiped in resetChatSession so unread doesn't leak across
     // wallets. In-memory only (resets on app restart).
     std::map<std::string, std::int64_t> chat_seen_watermark_;
+
+    // ── Chat note buffer (BOTH variants) ────────────────────────────────────────────────────────
+    // Each chat message is a shielded tx that spends a note; its change needs a few confirmations before
+    // it's spendable again (lite: backend ANCHOR_OFFSET+1 = 5; full node: z_sendmany minconf = 1), so
+    // rapid sends run out of verified funds. We keep a buffer of ~kChatBufferTarget small self-notes so a
+    // burst of messages each spends a separate verified note, refilled from change + background self-
+    // splits. Chat sends, self-splits and user sends share the wallet's single send channel; inflight_op_
+    // + (lite) lite_send_callback_ / (full node) send_submissions_in_flight_+pending_opids_ serialize them
+    // so exactly one send is ever outstanding. Implemented in app_network.cpp; pumped from update().
+    enum class LiteOpKind { None, ChatSend, ContactRequest, Split, UserSend };
+    struct LiteInflightOp {
+        LiteOpKind  kind = LiteOpKind::None;
+        std::string echoLocalId;    // ChatSend/ContactRequest: the echo to resolve when it completes
+        int         sessionGen = 0; // chat_session_generation_ snapshot at submit (stale-guard)
+        double      submittedAt = 0.0;
+    };
+    struct QueuedChatOp {
+        LiteOpKind kind = LiteOpKind::ChatSend;
+        chat::OutgoingChatMemos memos;   // kept so a transient-funds retry re-broadcasts, never recomposes
+        std::string echoLocalId;
+        int sessionGen = 0;
+        int retries = 0;
+    };
+    LiteInflightOp inflight_op_;                 // the single chat/split op currently on the send channel
+    std::deque<QueuedChatOp> chat_send_queue_;   // chat/contact sends awaiting a free channel + verified note
+    // Note-availability estimate between refreshes/scans: reset from a fresh count, decremented on each chat
+    // submit (the count lags a spend by a cycle, but the wallet still picks a fresh note per send). Zeroed on
+    // a transient-funds failure so we stop draining until the next refresh/scan restores the truth.
+    int           chat_verified_note_budget_ = 0;
+    int           chat_pipeline_note_count_  = 0;     // verified + maturing self-notes (drives shouldSplit)
+    std::uint64_t chat_verified_shielded_zat_ = 0;    // verified shielded balance (split affordability)
+    bool          chat_note_model_seen_ = false;      // saw a refresh/scan carrying per-note visibility
+    // Single-split-in-flight guard: a self-split's OUTPUT notes are invisible until mined (~1 block), far
+    // longer than any wall-clock cooldown — so we permit only ONE outstanding split and clear the flag when
+    // the pipeline recovers (outputs mined) or a watchdog expires (a split that never mines mustn't wedge
+    // refill forever). Prevents runaway splitting that would drain balance into fees.
+    bool          chat_split_outstanding_ = false;
+    double        chat_split_submitted_at_ = 0.0;     // ImGui time the outstanding split was submitted (watchdog)
+    // Full-node only: a coordinator-owned z_listunspent worker scan feeds the per-note counts (the shared
+    // balance poll discards per-note data). Mirrors chat_fast_scan_in_flight_.
+    bool          chat_note_scan_in_flight_ = false;
+    double        chat_note_scan_last_ = 0.0;         // ImGui time of the last note scan (rate limit)
+    // Most-recent chain tip, cached across refreshes: a lite refresh model that carries spendableOutputs
+    // may NOT carry sync status that same cycle (tolerated partial refresh), so verifiedSelfNoteCount reads
+    // this cache rather than requiring the current model to have both — else the budget flickers to 0.
+    std::int64_t  chat_last_chain_height_ = 0;
+    int           chat_fast_scan_last_seen_ = -1;  // dedup: last memo-note count logged by the 0-conf scan
+
+    // Coordinator helpers (both variants unless noted; see app_network.cpp).
+    void refreshChatNoteBudget(const wallet::LiteWalletAppRefreshModel& model);  // lite: recompute caches on a fresh model
+    void refreshChatNoteBudgetNode();             // full node: rate-limited z_listunspent worker scan
+    void pumpChatNoteBuffer();                     // per-frame: drain the queue / build the buffer
+    int  verifiedSelfNoteCount(const wallet::LiteWalletAppRefreshModel& model);   // lite
+    int  pipelineSelfNoteCount(const wallet::LiteWalletAppRefreshModel& model);   // lite
+    bool shouldSplitChatBuffer();
+    bool broadcastSelfSplitLite(int noteCount);   // lite: self-send minting noteCount reply-address notes
+    bool broadcastSelfSplitNode(int noteCount);   // full node: z_sendmany self-send minting noteCount notes
+    void enqueueChatSend(LiteOpKind kind, const chat::OutgoingChatMemos& memos, const std::string& echoLocalId);
+    void onChatBroadcastResult(const LiteInflightOp& op, bool ok, const std::string& error);
+    static bool isTransientVerifiedFundsError(const std::string& error);
+    int  chatConfsRequired() const;               // verified-note confs threshold: 5 (lite) / 1 (full node)
+public:
+    // Status-bar summary of the chat note buffer (empty when not applicable). Shown while the Chat tab is
+    // active so the buffer's state (ready / building / sending) is visible.
+    std::string chatBufferStatusText();
+private:
 public:
     // Total unread incoming chat messages across all conversations (for the sidebar badge). 0 when the
     // feature is off / no identity.
@@ -1010,6 +1091,9 @@ private:
     int logo_h_ = 0;
     bool logo_loaded_ = false;
     bool logo_is_dark_variant_ = true; // tracks which variant is currently loaded
+    ImU32 logo_accent_ = 0;            // theme accent the SVG logo was last rasterized with (re-render on change)
+    ImTextureID drgx_emoji_tex_ = 0;   // ":drgx:" custom chat emoji (themed to the accent, like the logo)
+    int drgx_emoji_w_ = 0, drgx_emoji_h_ = 0;
 
     // Coin logo texture (DragonX currency icon, separate from wallet branding)
     ImTextureID coin_logo_tex_ = 0;

src/app_network.cpp

@@ -40,6 +40,7 @@
 #include "config/settings.h"
 #include "wallet/lite_wallet_controller.h"  // lite send/new-address routing
 #include "wallet/lite_wallet_state_mapper.h"  // LiteWalletAppRefreshModel for lite chat harvest
+#include "wallet/lite_diagnostics.h"        // liteLog — chat note-buffer coordinator diagnostics
 #include "config/version.h"
 #include "daemon/daemon_controller.h"
 #include "daemon/embedded_daemon.h"
@@ -629,6 +630,11 @@ void App::onDisconnected(const std::string& reason)
     consecutive_core_failures_ = 0;
     send_progress_active_ = false;
     send_submissions_in_flight_ = 0;
+    // Release the chat note-buffer's single-split guard on a plain disconnect (which doesn't run
+    // resetChatSession) so a re-split isn't suppressed until the 1200s watchdog after reconnect.
+    chat_split_outstanding_ = false;
+    chat_split_submitted_at_ = 0.0;
+    inflight_op_ = LiteInflightOp{};   // the in-flight chat send's callback was just fired above (Failed)
     network_refresh_.resetJobs();
     rescan_status_poll_in_progress_ = false;
     opid_poll_in_progress_ = false;
@@ -2756,6 +2762,25 @@ void App::provisionChatIdentityFromSecret(std::string secret)
 // local — peers only ever exchange public keys).
 void App::resetChatSession()
 {
+    // Lite send channel — reset UNCONDITIONALLY (independent of the chat feature flag; user sends set
+    // inflight_op_/lite_send_callback_ even with chat off). Clear the note-buffer coordinator so wallet A's
+    // queued sends can't drain under wallet B, and DON'T orphan a user Send callback across a controller
+    // rebuild: rebuildLiteWallet(force) destroys the controller holding the in-flight send, so its result
+    // slot dies with it and the callback would hang the Send dialog forever. Fire the orphaned callback on a
+    // moved-out copy AFTER the channel state is reset, so a re-entrant sendTransaction stays clean.
+    auto orphanedSend = std::move(lite_send_callback_);
+    lite_send_callback_ = nullptr;
+    chat_send_queue_.clear();
+    inflight_op_ = LiteInflightOp{};
+    chat_verified_note_budget_ = 0;
+    chat_pipeline_note_count_ = 0;
+    chat_verified_shielded_zat_ = 0;
+    chat_note_model_seen_ = false;
+    chat_split_outstanding_ = false;
+    chat_split_submitted_at_ = 0.0;
+    chat_note_scan_in_flight_ = false;   // a stale in-flight note scan is dropped by its scanGen guard
+    if (orphanedSend) orphanedSend(false, "Wallet/server changed — send aborted");
+
     if (!chat::hushChatFeatureEnabledAtBuild()) return;  // constexpr — folds away in OFF builds
     // Drop identity + decrypted plaintext in RAM, lock the seed-encrypted DB, re-arm provisioning.
     chat_service_.clearIdentity();
@@ -2955,18 +2980,19 @@ bool App::broadcastChatMemos(const chat::OutgoingChatMemos& memos, const std::st
     const auto sessionGen = chat_session_generation_;
 
     if (lite_wallet_) {
-        const bool ok = broadcastChatMemosLite(memos);
-        // The lite backend has no per-send completion callback here; resolve optimistically on a
-        // successful queue (its own broadcast log surfaces a later failure).
-        if (ok && sessionGen == chat_session_generation_)
-            chat_service_.resolveOutgoing(echoLocalId, chat::ChatDelivery::Sent);
-        return ok;
+        // Lite chat is owned by the note-buffer coordinator (enqueue + drain + resolve from the real
+        // broadcast result). Route any caller here through the queue rather than resolving optimistically
+        // (the old code marked a merely-queued send "Sent", masking real failures). Kept for safety —
+        // the send/Retry paths call enqueueChatSend directly and don't hit this branch.
+        (void)sessionGen;
+        enqueueChatSend(LiteOpKind::ChatSend, memos, echoLocalId);
+        return true;
     }
 
-    if (!state_.connected || !rpc_ || !worker_) {
-        ui::Notifications::instance().error(TR("chat_toast_not_connected"));
-        return false;
-    }
+    // Coordinator-owned primitive (pumpChatNoteBuffer): the pump already gates on connected/unlocked and a
+    // verified-note budget, so these refusals are belt-and-suspenders. Return false SILENTLY (no per-frame
+    // toast) — the pump leaves the message queued ("Sending") and retries when the guard clears.
+    if (!state_.connected || !rpc_ || !worker_) return false;
 
     // Chat moves 0 value, and dragonxd REJECTS a 0-value tx whose fee exceeds the default miners fee
     // (0.0001) — so pin chat to exactly kChatMinFeeDrgx, independent of the user's default-fee setting
@@ -2976,10 +3002,7 @@ bool App::broadcastChatMemos(const chat::OutgoingChatMemos& memos, const std::st
     // Pay from a z-address that can actually cover the fee. The memo still advertises the identity
     // reply address, so the peer replies to the right place regardless of which note paid.
     const std::string from = chatPayFromZaddr(fee);
-    if (from.empty()) {
-        ui::Notifications::instance().error(TR("chat_toast_need_funds"));
-        return false;
-    }
+    if (from.empty()) return false;   // no fundable note yet — pump keeps it queued, retries after a scan
 
     // Full-node: each memo needs the daemon's "utf8:" prefix (raw JSON/hex is otherwise rejected).
     const auto outputs = chat::chatSendOutputs(memos, /*utf8Prefix=*/true);
@@ -2994,14 +3017,20 @@ bool App::broadcastChatMemos(const chat::OutgoingChatMemos& memos, const std::st
 
     // markFeeGapRetry=true is deliberate: it suppresses the fee-gap auto-retry, which rebuilds a
     // SINGLE-recipient tx from the scalar to/amount/memo and would drop the second (payload) output.
-    // The callback flips the echo to Sent/Failed once the async op resolves — real delivery status.
+    // This is now the note-buffer coordinator's full-node submit primitive (called only from the pump).
+    // The terminal callback (fired once by the opid poller) releases the send channel and routes the
+    // result through onChatBroadcastResult, so a transient "Insufficient shielded funds" requeues instead
+    // of hard-failing. The sessionGen guard drops a stale wallet's echo AND protects the inflight_op_
+    // clear from a callback landing after a wallet switch (which would otherwise clear a NEW op's token).
     submitZSendMany(from, memos.recipientZaddr, 0.0, fee, /*memo*/"", recipients,
                     "HushChat / broadcast", /*markFeeGapRetry*/ true,
-                    [this, echoLocalId, sessionGen](bool ok, const std::string& /*result*/) {
-                        if (sessionGen != chat_session_generation_) return;  // wallet locked/switched — stale
-                        chat_service_.resolveOutgoing(echoLocalId,
-                            ok ? chat::ChatDelivery::Sent : chat::ChatDelivery::Failed);
-                    });
+                    [this, echoLocalId, sessionGen](bool ok, const std::string& result) {
+                        if (sessionGen != chat_session_generation_) return;  // stale wallet — don't touch new session
+                        inflight_op_ = LiteInflightOp{};                     // release the channel for this session
+                        LiteInflightOp op; op.echoLocalId = echoLocalId; op.sessionGen = sessionGen;
+                        onChatBroadcastResult(op, ok, result);
+                    },
+                    /*background*/ true);   // status is shown on the chat message, not the global send UI
     return true;  // submitted (async build/broadcast; the callback resolves the final status)
 }
 
@@ -3021,11 +3050,9 @@ bool App::broadcastChatMemosLite(const chat::OutgoingChatMemos& memos)
         recipient.memo = out.memo;
         req.recipients.push_back(std::move(recipient));
     }
-    if (!lite_wallet_->sendTransaction(req)) {
-        ui::Notifications::instance().error(TR("chat_toast_lite_busy"));
-        return false;
-    }
-    return true;
+    // No busy toast here: the coordinator (pumpChatNoteBuffer) owns this call, retries next frame when the
+    // single broadcast channel frees, and surfaces status on the message itself.
+    return lite_wallet_->sendTransaction(req);
 }
 
 void App::sendChatMessage(const std::string& conversationId, const std::string& text)
@@ -3073,10 +3100,9 @@ void App::sendChatMessage(const std::string& conversationId, const std::string&
     echo.payload_position = 0;
     echo.delivery = chat::ChatDelivery::Sending;   // shows immediately; the broadcast callback resolves it
     chat_service_.recordOutgoingPending(echo);     // in-memory now; persisted with the final status
-    // A synchronous refusal (not connected / no funds) resolves to Failed right away so the Retry
-    // affordance appears; otherwise the async callback flips it to Sent/Failed.
-    if (!broadcastChatMemos(memos, echo.txid))
-        chat_service_.resolveOutgoing(echo.txid, chat::ChatDelivery::Failed);
+    // Both variants: hand to the note-buffer coordinator, which drains the queue against verified notes
+    // (building/refilling the buffer as needed) and resolves the echo Sent/Failed from the REAL result.
+    enqueueChatSend(LiteOpKind::ChatSend, memos, echo.txid);
 }
 
 void App::startChatConversation(const std::string& peerZaddr, const std::string& text)
@@ -3116,10 +3142,369 @@ void App::sendContactRequestForCid(const std::string& cid, const std::string& pe
     echo.payload_position = 0;
     echo.delivery = chat::ChatDelivery::Sending;
     chat_service_.recordOutgoingPending(echo);
-    if (broadcastChatMemos(memos, echo.txid))
-        ui::Notifications::instance().success(TR("chat_toast_request_queued"));
-    else
-        chat_service_.resolveOutgoing(echo.txid, chat::ChatDelivery::Failed);
+    // Both variants: enqueue through the coordinator (resolves the echo from the real result).
+    enqueueChatSend(LiteOpKind::ContactRequest, memos, echo.txid);
+    ui::Notifications::instance().success(TR("chat_toast_request_queued"));
+}
+
+// ── Chat note-buffer coordinator (lite only) ─────────────────────────────────────────────────────
+// Design in app.h. Keeps ~kChatBufferTarget verified self-notes so a burst of messages each spends a
+// separate note; refilled from change + background self-splits. Shares the controller's single broadcast
+// channel with user sends (inflight_op_ tracks ownership). Pumped from App::update().
+namespace {
+constexpr int    kChatBufferTarget      = 10;      // verified self-notes we aim to keep
+constexpr int    kChatRefillTrigger     = 4;       // (re)build only when the maturing pipeline drops below this
+// A note is spendable when its witness count > ANCHOR_OFFSET, i.e. block depth >= ANCHOR_OFFSET+1 = 5
+// (backend data.rs:543 needs anchor_offset+1 witnesses; ANCHOR_OFFSET=4 in lib.rs:25). Depth 4 is NOT yet
+// spendable — counting it there wastes a proving round-trip on a guaranteed "insufficient verified funds".
+constexpr int    kChatConfsRequired     = 5;
+constexpr double kChatNoteSizeDrgx      = 0.001;   // each buffer note (change after a send stays >= fee)
+constexpr double kChatSplitWatchdogSecs = 1200.0;  // 20 min: clear a stuck split flag if it never mines (expiry/reorg)
+constexpr int    kMaxChatSendRetries    = 20;      // transient-funds requeues before giving up
+inline std::uint64_t chatDrgxToZat(double drgx) {
+    return static_cast<std::uint64_t>(std::llround(drgx * 100000000.0));
+}
+}  // namespace
+
+// Confirmations a self-note needs before it's spendable: lite requires ANCHOR_OFFSET+1 witnesses (=5,
+// data.rs:543); the full node's chat z_sendmany uses minconf=1 (app_network.cpp z_sendmany call).
+int App::chatConfsRequired() const { return lite_wallet_ ? kChatConfsRequired : 1; }
+
+// Status-bar summary of the chat note buffer (shown while the Chat tab is active). Empty unless chat has
+// an identity. Surfaces the buffer state so the user can see it filling / draining, and it doubles as a
+// diagnostic: "…" = no note data yet; "0/10 ready" = counted but no verified notes; "N/10 ready" = armed.
+std::string App::chatBufferStatusText() {
+    if (!chat::hushChatFeatureEnabledAtBuild() || !chat_service_.hasIdentity()) return "";
+    const int queued = static_cast<int>(chat_send_queue_.size());
+    const int verified = std::max(0, std::min(chat_verified_note_budget_, kChatBufferTarget));
+    const int target = static_cast<int>(kChatBufferTarget);
+    char buf[128];
+    if (queued > 0) {
+        snprintf(buf, sizeof(buf), TR(queued == 1 ? "chat_buffer_sending_one" : "chat_buffer_sending"), queued);
+        return buf;
+    }
+    if (chat_split_outstanding_) {
+        snprintf(buf, sizeof(buf), TR("chat_buffer_preparing"), verified, target);
+        return buf;
+    }
+    if (!chat_note_model_seen_)
+        return TR("chat_buffer_loading");
+    snprintf(buf, sizeof(buf), TR("chat_buffer_ready"), verified, target);
+    return buf;
+}
+
+bool App::isTransientVerifiedFundsError(const std::string& error) {
+    // Both variants' "only unconfirmed change is short" phrasing, treated as transient (retry after the
+    // buffer matures): lite = "Insufficient verified funds" (lightwallet.rs:2402); full node =
+    // "Insufficient shielded funds" (asyncrpcoperation_sendmany, parsed at parseInsufficientShielded).
+    return error.find("Insufficient verified funds") != std::string::npos
+        || error.find("Insufficient shielded funds") != std::string::npos;
+}
+
+// Verified notes = ANY spendable shielded note (>= a fee) with >= kChatConfsRequired confirmations — the
+// ones a chat send can spend RIGHT NOW. We count notes at ALL addresses, not just the reply address,
+// because a chat send pays via chatPayFromZaddr (any funded z-addr) — gating on reply-address-only notes
+// would queue a sendable message whenever funds sit elsewhere. NB: the model's per-note `spendable` flag
+// means "unspent", NOT verified (lite_result_parsers.cpp recomputes it), so we derive it from depth here.
+int App::verifiedSelfNoteCount(const wallet::LiteWalletAppRefreshModel& model) {
+    if (!model.hasSpendableOutputs) return 0;
+    // Use the cached tip (refreshChatNoteBudget updates it), not this model's — a notes-carrying model may
+    // not carry sync status that cycle, which would otherwise zero the whole count.
+    const std::int64_t tip = chat_last_chain_height_;
+    if (tip <= 0) return 0;
+    const std::uint64_t minVal = chatDrgxToZat(kChatMinFeeDrgx);
+    int n = 0;
+    for (const auto& o : model.spendableOutputs) {
+        if (o.kind != wallet::LiteSpendableOutputKind::UnspentNote) continue;   // shielded notes only
+        if (o.spent || o.unconfirmedSpent || o.pending) continue;
+        if (o.valueZatoshis < minVal) continue;                                  // skip dust below a fee
+        if (!o.createdInBlock.has_value()) continue;                             // unknown depth -> not verified
+        if (tip - *o.createdInBlock + 1 >= chatConfsRequired()) ++n;
+    }
+    return n;
+}
+
+// Notes that are verified OR still maturing (any unspent shielded note of usable size) — i.e. notes that
+// will become spendable WITHOUT another split. Drives the refill trigger so we don't over-split while
+// change is confirming or when the wallet already holds enough notes anywhere.
+int App::pipelineSelfNoteCount(const wallet::LiteWalletAppRefreshModel& model) {
+    if (!model.hasSpendableOutputs) return 0;
+    const std::uint64_t minVal = chatDrgxToZat(kChatMinFeeDrgx);
+    int n = 0;
+    for (const auto& o : model.spendableOutputs) {
+        if (o.kind != wallet::LiteSpendableOutputKind::UnspentNote) continue;
+        if (o.spent || o.unconfirmedSpent) continue;                             // already consumed
+        if (o.valueZatoshis < minVal) continue;
+        ++n;                                                                     // verified or maturing (any addr)
+    }
+    return n;
+}
+
+// Recompute the cached note estimates from a fresh refresh model (called from update() when one arrives).
+void App::refreshChatNoteBudget(const wallet::LiteWalletAppRefreshModel& model) {
+    if (!lite_wallet_ || !chat::hushChatFeatureEnabledAtBuild()) return;
+    // Cache the chain tip from whatever height source THIS model carries (sync status or chain info) — a
+    // model with notes may lack sync that cycle, so verifiedSelfNoteCount reads the cache below.
+    if (model.hasSyncStatus && model.sync.chainHeight > 0)
+        chat_last_chain_height_ = static_cast<std::int64_t>(model.sync.chainHeight);
+    else if (model.hasChainInfo && model.chain.latestBlockHeight.has_value() &&
+             *model.chain.latestBlockHeight > 0)
+        chat_last_chain_height_ = static_cast<std::int64_t>(*model.chain.latestBlockHeight);
+    if (model.hasSpendableOutputs) {
+        chat_note_model_seen_ = true;
+        chat_verified_note_budget_ = verifiedSelfNoteCount(model);
+        chat_pipeline_note_count_  = pipelineSelfNoteCount(model);
+    }
+    if (model.hasBalance)
+        chat_verified_shielded_zat_ = model.balance.verifiedShieldedZatoshis;
+    // Release the single-split guard once the outstanding split's outputs are mined+visible (pipeline
+    // recovered) — or once a watchdog window elapses, so a split that never mines can't wedge refill.
+    if (chat_split_outstanding_ &&
+        (chat_pipeline_note_count_ >= kChatRefillTrigger ||
+         ImGui::GetTime() - chat_split_submitted_at_ > kChatSplitWatchdogSecs)) {
+        chat_split_outstanding_ = false;
+    }
+}
+
+// Full-node twin of refreshChatNoteBudget: the shared balance poll discards per-note data, so run our own
+// rate-limited z_listunspent worker scan (mirrors fastScanChatMemos) to count verified/maturing spendable
+// notes. z_listunspent returns only the wallet's OWN notes, and a chat send pays from any of them
+// (chatPayFromZaddr), so we count ALL addresses — gating on the reply address only would queue a sendable
+// message when funds sit elsewhere. minconf=0 exposes maturing change so the pipeline count doesn't over-
+// split. On an older daemon that rejects z_listunspent it leaves chat_note_model_seen_ false → the pump
+// won't drain a phantom budget or split (graceful degradation to naive one-at-a-time sends).
+void App::refreshChatNoteBudgetNode() {
+    if (lite_wallet_ || !chat::hushChatFeatureEnabledAtBuild() || !chat_service_.hasIdentity()) return;
+    if (!state_.connected || !rpc_ || !worker_ || state_.isLocked()) return;
+    if (chat_note_scan_in_flight_) return;                 // one scan at a time
+    const double now = ImGui::GetTime();
+    if (now - chat_note_scan_last_ < 4.0) return;          // rate limit; self-throttles via the in-flight flag too
+
+    chat_note_scan_last_ = now;
+    chat_note_scan_in_flight_ = true;
+    const int scanGen = chat_session_generation_;
+    const int confsNeeded = chatConfsRequired();           // == 1 for full node
+    const std::uint64_t minVal = chatDrgxToZat(kChatMinFeeDrgx);
+    worker_->post([this, scanGen, confsNeeded, minVal]() -> rpc::RPCWorker::MainCb {
+        int verified = 0, pipeline = 0;
+        std::uint64_t verifiedZat = 0;
+        bool ok = false;
+        try {
+            rpc::RPCClient::TraceScope trace("HushChat / note-buffer scan");
+            nlohmann::json notes = rpc_->call("z_listunspent", nlohmann::json::array({0}));  // 0 = include maturing
+            if (notes.is_array()) {
+                ok = true;
+                for (const auto& nz : notes) {
+                    if (!nz.is_object()) continue;
+                    if (nz.value("locked", false)) continue;                     // tied up by an in-flight send
+                    const std::uint64_t amtZat = chatDrgxToZat(nz.value("amount", 0.0));
+                    if (amtZat < minVal) continue;                               // skip dust below a fee
+                    // rawconfirmations is the TRUE depth; `confirmations` is dPoW-clamped to 1 and understates it.
+                    const int confs = (nz.contains("rawconfirmations") && nz["rawconfirmations"].is_number_integer())
+                                      ? nz["rawconfirmations"].get<int>()
+                                      : nz.value("confirmations", 0);
+                    ++pipeline;                                                  // unspent self-note (verified or maturing)
+                    if (confs >= confsNeeded) { ++verified; verifiedZat += amtZat; }
+                }
+            }
+        } catch (const std::exception&) {}
+        return [this, scanGen, ok, verified, pipeline, verifiedZat]() {
+            if (scanGen != chat_session_generation_) return;   // wallet switched — drop (reset cleared the flag)
+            chat_note_scan_in_flight_ = false;
+            if (!ok) return;                                    // z_listunspent unavailable — leave caches as-is
+            chat_note_model_seen_ = true;
+            chat_verified_note_budget_  = verified;
+            chat_pipeline_note_count_   = pipeline;
+            chat_verified_shielded_zat_ = verifiedZat;
+            if (chat_split_outstanding_ &&
+                (chat_pipeline_note_count_ >= kChatRefillTrigger ||
+                 ImGui::GetTime() - chat_split_submitted_at_ > kChatSplitWatchdogSecs)) {
+                chat_split_outstanding_ = false;
+            }
+        };
+    });
+}
+
+void App::enqueueChatSend(LiteOpKind kind, const chat::OutgoingChatMemos& memos, const std::string& echoLocalId) {
+    QueuedChatOp op;
+    op.kind = kind;
+    op.memos = memos;                     // kept so a transient-funds retry re-broadcasts, never recomposes
+    op.echoLocalId = echoLocalId;
+    op.sessionGen = chat_session_generation_;
+    chat_send_queue_.push_back(std::move(op));
+    wallet::liteLog("chat: queued outgoing " +
+                    std::string(kind == LiteOpKind::ContactRequest ? "contact request" : "message") +
+                    " (queue depth " + std::to_string(chat_send_queue_.size()) +
+                    ", verified notes ~" + std::to_string(chat_verified_note_budget_) + ")");
+    // pumpChatNoteBuffer() (next update tick) submits it when the channel is free + a verified note exists.
+}
+
+// Self-send that mints `noteCount` reply-address notes (funds stay in the wallet), building/refilling the
+// buffer. Returns false if the single broadcast channel is busy (the pump retries next frame).
+bool App::broadcastSelfSplitLite(int noteCount) {
+    if (!lite_wallet_ || noteCount < 1) return false;
+    const std::string myZ = chatReplyZaddr();
+    if (myZ.empty()) return false;
+    wallet::LiteSendRequest req;
+    const std::uint64_t noteZat = chatDrgxToZat(kChatNoteSizeDrgx);
+    for (int i = 0; i < noteCount; ++i) {
+        wallet::LiteSendRecipient r;
+        r.address = myZ;
+        r.amountZatoshis = noteZat;
+        req.recipients.push_back(std::move(r));
+    }
+    if (!lite_wallet_->sendTransaction(req)) return false;   // channel busy — retry next frame
+    wallet::liteLog("Chat buffer: splitting funds into " + std::to_string(noteCount) +
+                    " notes (self-send) so messages can be sent back-to-back");
+    return true;
+}
+
+// Full-node twin of broadcastSelfSplitLite: a z_sendmany self-send with `noteCount` outputs to our reply
+// address (funds stay in the wallet), building/refilling the buffer. Caps outputs to stay well under the
+// per-tx size limit after Sietch decoy padding. markFeeGapRetry=true is load-bearing — the fee-gap retry
+// rebuilds a SINGLE-recipient tx and would collapse the multi-output split. The terminal callback releases
+// the send channel; chat_split_outstanding_ stays set until a scan sees the outputs.
+bool App::broadcastSelfSplitNode(int noteCount) {
+    if (lite_wallet_ || noteCount < 1) return false;
+    if (!state_.connected || !rpc_ || !worker_) return false;
+    const std::string myZ = chatReplyZaddr();
+    if (myZ.empty()) return false;
+    const double fee = kChatMinFeeDrgx;
+    // Pay from any funded z-address; the split's OUTPUTS still go to the reply address (building the buffer
+    // there). The note count now includes notes at every address and is sized against the total verified
+    // balance, so paying from wherever the funds actually sit is consistent — and it can't stall when funds
+    // aren't at the reply address (which paying strictly from myZ would).
+    const std::string from = chatPayFromZaddr(fee);
+    if (from.empty()) return false;   // no fundable note — pump retries after a scan
+    const int n = std::min(noteCount, 40);   // bounded so the split tx stays under max_tx_size after decoys
+    nlohmann::json recipients = nlohmann::json::array();
+    for (int i = 0; i < n; ++i) {
+        nlohmann::json r;
+        r["address"] = myZ;
+        r["amount"] = util::formatAmountFixed(kChatNoteSizeDrgx);
+        recipients.push_back(std::move(r));
+    }
+    const auto sessionGen = chat_session_generation_;
+    submitZSendMany(from, myZ, 0.0, fee, /*memo*/"", recipients,
+                    "HushChat / note-buffer split", /*markFeeGapRetry*/ true,
+                    [this, sessionGen](bool ok, const std::string& /*result*/) {
+                        if (sessionGen != chat_session_generation_) return;   // stale wallet
+                        inflight_op_ = LiteInflightOp{};                      // release the channel
+                        // On success the outputs aren't mined yet — chat_split_outstanding_ clears on the
+                        // next scan (pipeline recovered) or the watchdog. On FAILURE (e.g. a stale-scan
+                        // insufficient-funds throw) clear it now so the pump can retry after the next scan
+                        // instead of waiting out the 1200s watchdog. (No notes were created, so it's safe.)
+                        if (!ok) chat_split_outstanding_ = false;
+                    },
+                    /*background*/ true);   // autonomous buffer maintenance — no global send UI
+    wallet::liteLog("Chat buffer: splitting funds into " + std::to_string(n) +
+                    " notes (self-send) so messages can be sent back-to-back");
+    return true;
+}
+
+bool App::shouldSplitChatBuffer() {
+    // Only for engaged chat users (has a conversation or a queued send) — never split for someone who
+    // never chats. Connected, unlocked, channel free, no split already outstanding, pipeline genuinely
+    // depleted, funded. NB: a wall-clock cooldown is deliberately NOT used — a split's outputs stay
+    // invisible until mined (~1 block, far longer than any UI cooldown), so we gate on a single-split-
+    // in-flight flag (cleared when the pipeline recovers or the watchdog fires) to prevent runaway splits.
+    if (chat_service_.store().conversationIds().empty() && chat_send_queue_.empty()) return false;
+    if (!state_.connected || state_.isLocked()) return false;
+    // Channel busy = our own op inflight, OR a user send holds the shared channel. Lite user sends set
+    // lite_send_callback_; full-node user sends don't touch inflight_op_, so they're detected via the
+    // shared single-flight counter + any outstanding opid (a chat/user/sweep z_sendmany not yet resolved).
+    if (inflight_op_.kind != LiteOpKind::None) return false;
+    if (lite_wallet_ ? (bool)lite_send_callback_
+                     : (send_submissions_in_flight_ > 0 || !pending_opids_.empty())) return false;
+    if (chat_split_outstanding_) return false;
+    if (!chat_note_model_seen_) return false;
+    if (chat_pipeline_note_count_ >= kChatRefillTrigger) return false;   // change refill covers it
+    if (chat_verified_shielded_zat_ < chatDrgxToZat(kChatNoteSizeDrgx + kChatMinFeeDrgx)) return false;
+    return true;
+}
+
+// Resolve the just-completed chat/contact broadcast onto its echo. The in-flight op is the queue FRONT
+// (the pump submits it without popping) so we can requeue it in place on a transient-funds failure.
+void App::onChatBroadcastResult(const LiteInflightOp& op, bool ok, const std::string& error) {
+    if (op.sessionGen != chat_session_generation_) return;   // wallet switched since submit — echo is gone
+    const bool frontMatches = !chat_send_queue_.empty()
+                              && chat_send_queue_.front().echoLocalId == op.echoLocalId;
+    if (ok) {
+        chat_service_.resolveOutgoing(op.echoLocalId, chat::ChatDelivery::Sent);
+        if (frontMatches) chat_send_queue_.pop_front();
+        wallet::liteLog("chat: message broadcast (Sent); " + std::to_string(chat_send_queue_.size()) +
+                        " still queued");
+        return;
+    }
+    if (frontMatches && isTransientVerifiedFundsError(error)
+        && chat_send_queue_.front().retries < kMaxChatSendRetries) {
+        // The optimistic budget was wrong (change not confirmed yet). Stop draining until the next refresh
+        // restores the true verified-note count; keep the message queued ("Sending") and retry then.
+        chat_verified_note_budget_ = 0;
+        ++chat_send_queue_.front().retries;
+        wallet::liteLog("chat: send deferred — funds still confirming (retry " +
+                        std::to_string(chat_send_queue_.front().retries) + "); message stays 'Sending'");
+        return;                                              // leave at front
+    }
+    chat_service_.resolveOutgoing(op.echoLocalId, chat::ChatDelivery::Failed);  // hard failure -> Retry affordance
+    if (frontMatches) chat_send_queue_.pop_front();
+    wallet::liteLog("chat: send FAILED: " + error);
+}
+
+// Per-frame pump: drain the chat queue against verified notes (priority 1); otherwise build/refill the
+// buffer during idle (priority 2). One op per frame — the single broadcast channel serializes the rest.
+void App::pumpChatNoteBuffer() {
+    if (!chat::hushChatFeatureEnabledAtBuild()) return;
+    if (!chat_service_.hasIdentity() || !state_.connected) return;
+    // A locked wallet can't spend: submitting would return a non-transient lock error and flap the queued
+    // message to Failed. Hold everything (send + split) until unlock — messages stay "Sending".
+    if (state_.isLocked()) return;
+    // Channel busy — exactly one send must be outstanding. Lite serializes via inflight_op_ + the send
+    // callback; the full node has no single-broadcast channel, so we also honour the shared single-flight
+    // counter and any outstanding opid (a chat/user/sweep z_sendmany not yet terminally resolved). Without
+    // the latter two a chat send could overlap a user Send-tab send (which never sets inflight_op_).
+    if (inflight_op_.kind != LiteOpKind::None) return;
+    if (lite_wallet_ ? (bool)lite_send_callback_
+                     : (send_submissions_in_flight_ > 0 || !pending_opids_.empty())) return;
+
+    // Priority 1: drain a queued chat send while we (optimistically) still have a verified note.
+    if (!chat_send_queue_.empty()) {
+        QueuedChatOp& front = chat_send_queue_.front();
+        if (front.sessionGen != chat_session_generation_) { chat_send_queue_.pop_front(); return; }
+        if (chat_verified_note_budget_ >= 1) {
+            // Submit onto the wallet's send channel; NOT popped until the async result resolves (so a
+            // transient-funds failure can requeue it in place). Full-node broadcastChatMemos registers a
+            // terminal opid callback that clears inflight_op_ + routes onChatBroadcastResult.
+            const bool submitted = lite_wallet_ ? broadcastChatMemosLite(front.memos)
+                                                : broadcastChatMemos(front.memos, front.echoLocalId);
+            if (submitted) {
+                inflight_op_ = LiteInflightOp{ front.kind, front.echoLocalId, front.sessionGen, ImGui::GetTime() };
+                --chat_verified_note_budget_;            // this note is now (optimistically) spent
+            }
+            return;                                      // one op per frame; the front waits until resolved
+        }
+        // No verified note available: leave it queued ("Sending"); fall through to maybe build the buffer.
+    }
+
+    // Priority 2: build/refill the buffer during idle.
+    if (shouldSplitChatBuffer()) {
+        const int need = kChatBufferTarget - chat_pipeline_note_count_;
+        const std::uint64_t noteZat = chatDrgxToZat(kChatNoteSizeDrgx);
+        const std::uint64_t feeZat  = chatDrgxToZat(kChatMinFeeDrgx);
+        int affordable = 0;
+        if (chat_verified_shielded_zat_ > feeZat && noteZat > 0)
+            affordable = static_cast<int>((chat_verified_shielded_zat_ - feeZat) / noteZat);
+        const int n = std::min(need, affordable);
+        const bool submitted = n >= 1 && (lite_wallet_ ? broadcastSelfSplitLite(n)
+                                                       : broadcastSelfSplitNode(n));
+        if (submitted) {
+            inflight_op_ = LiteInflightOp{ LiteOpKind::Split, {}, chat_session_generation_, ImGui::GetTime() };
+            // Block further splits until this one's outputs mine in (or the watchdog fires): the outputs are
+            // invisible to the note count for ~1 block, so without this we'd fire a fresh split every frame.
+            chat_split_outstanding_ = true;
+            chat_split_submitted_at_ = ImGui::GetTime();
+        }
+    }
 }
 
 // HushChat (lite variant): the full-node harvest works off z_viewtransaction, but the lite wallet's
@@ -3133,6 +3518,7 @@ void App::ingestLiteChatMemos(const wallet::LiteWalletAppRefreshModel& model)
 
     std::unordered_map<std::string, chat::HushChatTransactionInput> byTxid;
     std::unordered_map<std::string, std::int64_t> txTimestamps;
+    bool anyUnconfirmedChatTx = false;   // did a chat-carrying tx arrive still-unconfirmed (0-conf mempool)?
     for (const auto& tx : model.transactions) {
         if (tx.kind != wallet::LiteWalletAppTransactionKind::Receive) continue;  // only incoming carry chat
         if (tx.memo.empty() || !tx.position) continue;
@@ -3140,6 +3526,7 @@ void App::ingestLiteChatMemos(const wallet::LiteWalletAppRefreshModel& model)
         input.txid = tx.txid;
         input.outputs.push_back({static_cast<std::size_t>(*tx.position), tx.memo});
         txTimestamps[tx.txid] = tx.timestamp;
+        if (tx.unconfirmed) anyUnconfirmedChatTx = true;
     }
     if (byTxid.empty()) return;
 
@@ -3151,6 +3538,10 @@ void App::ingestLiteChatMemos(const wallet::LiteWalletAppRefreshModel& model)
     if (!metadata.empty()) {
         std::vector<std::string> newChatCids;
         chat_service_.ingest(metadata, txTimestamps, std::time(nullptr), &newChatCids);
+        if (!newChatCids.empty())
+            wallet::liteLog("chat: harvested " + std::to_string(newChatCids.size()) + " new message(s) " +
+                            (anyUnconfirmedChatTx ? "(0-conf / mempool — monitor working)"
+                                                  : "(confirmed only — not seen at mempool speed)"));
         // Mirror the full-node paths: a new incoming message un-hides a hidden conversation (you can't
         // un-receive), and a non-muted new message toasts when we're off the Chat tab.
         if (settings_) {
@@ -3182,6 +3573,8 @@ void App::fastScanChatMemos()
     const int scanGen = chat_session_generation_;   // guard: drop the result if the wallet switches/locks
     worker_->post([this, addr, scanGen]() -> rpc::RPCWorker::MainCb {
         std::vector<chat::HushChatTransactionMetadata> metadata;
+        int rawMemoCount = 0;   // received notes carrying a memo at the reply addr (0-conf visibility signal)
+        std::string scanError;
         try {
             rpc::RPCClient::TraceScope trace("HushChat / 0-conf fast scan");
             nlohmann::json received = rpc_->call("z_listreceivedbyaddress", {addr, 0});  // 0 = include mempool
@@ -3194,6 +3587,7 @@ void App::fastScanChatMemos()
                     const std::string txid = note.value("txid", std::string());
                     const std::string memo = note.value("memoStr", std::string());
                     if (txid.empty() || memo.empty()) continue;
+                    ++rawMemoCount;
                     std::size_t pos = fallbackPos;
                     for (const char* key : {"position", "outputIndex", "outindex"})
                         if (note.contains(key) && note[key].is_number_integer() && note[key].get<int>() >= 0) {
@@ -3209,13 +3603,25 @@ void App::fastScanChatMemos()
                     for (auto& m : extracted.metadata) metadata.push_back(std::move(m));
                 }
             }
-        } catch (const std::exception&) {}
-        return [this, scanGen, metadata = std::move(metadata)]() mutable {
+        } catch (const std::exception& e) { scanError = e.what(); }
+        const int parsedCount = static_cast<int>(metadata.size());
+        return [this, scanGen, metadata = std::move(metadata), rawMemoCount, parsedCount, scanError]() mutable {
             // The wallet was switched/locked between post and now — this metadata belongs to the previous
             // session. resetChatSession already reset the in-flight flag, so just drop; clearing it here
             // would clobber a new session's own in-flight scan (mirrors the broadcast/identity guards).
             if (scanGen != chat_session_generation_) return;
             chat_fast_scan_in_flight_ = false;
+            // Diagnostic (console App/chat channel): log when the memo-note count at the reply address
+            // CHANGES, so a stable mempool doesn't spam every 2.5s. Reveals whether inbound 0-conf messages
+            // are reaching us at all, and how many parse as chat vs are unrelated memos.
+            if (!scanError.empty()) {
+                wallet::liteLog("chat[0conf]: reply-addr scan failed: " + scanError);
+            } else if (rawMemoCount != chat_fast_scan_last_seen_) {
+                chat_fast_scan_last_seen_ = rawMemoCount;
+                if (rawMemoCount > 0)
+                    wallet::liteLog("chat[0conf]: reply-addr scan sees " + std::to_string(rawMemoCount) +
+                                    " memo note(s), " + std::to_string(parsedCount) + " parse as chat");
+            }
             if (metadata.empty()) return;
             // Skip HIDDEN conversations — the mempool fast path deliberately doesn't surface them; they
             // still come back through the normal confirmed harvest (which un-hides on a new message).
@@ -3229,6 +3635,9 @@ void App::fastScanChatMemos()
             std::unordered_map<std::string, std::int64_t> noTimes;  // mempool: no block time → ingest uses now
             std::vector<std::string> newChatCids;
             chat_service_.ingest(visible, noTimes, std::time(nullptr), &newChatCids);
+            if (!newChatCids.empty())
+                wallet::liteLog("chat[0conf]: harvested " + std::to_string(newChatCids.size()) +
+                                " new message(s) from the mempool");
             if (current_page_ != ui::NavPage::Chat &&
                 std::any_of(newChatCids.begin(), newChatCids.end(),
                             [this](const std::string& cid){ return !(settings_ && settings_->isChatMuted(cid)); }))
@@ -4087,6 +4496,9 @@ void App::sendTransaction(const std::string& from, const std::string& to,
             return;
         }
         lite_send_callback_ = std::move(callback);  // delivered from update()
+        // Claim the shared broadcast channel so the chat note-buffer coordinator yields to this user send
+        // and routes the one global broadcast result back to lite_send_callback_ (not a chat echo).
+        inflight_op_ = LiteInflightOp{ LiteOpKind::UserSend, {}, chat_session_generation_, ImGui::GetTime() };
         return;
     }
 
@@ -4149,12 +4561,13 @@ void App::sendTransaction(const std::string& from, const std::string& to,
 void App::submitZSendMany(const std::string& from, const std::string& to, double amount, double fee,
                           const std::string& memo, const nlohmann::json& recipients,
                           const char* traceLabel, bool markFeeGapRetry,
-                          std::function<void(bool, const std::string&)> callback)
+                          std::function<void(bool, const std::string&)> callback,
+                          bool background)
 {
-    send_progress_active_ = true;
+    if (!background) send_progress_active_ = true;   // autonomous chat/split: status shown on the message
     ++send_submissions_in_flight_;
     worker_->post([this, from, to, amount, fee, memo, recipients, callback, traceLabel,
-                   markFeeGapRetry]() -> rpc::RPCWorker::MainCb {
+                   markFeeGapRetry, background]() -> rpc::RPCWorker::MainCb {
         bool ok = false;
         std::string result_str;
         try {
@@ -4169,7 +4582,7 @@ void App::submitZSendMany(const std::string& from, const std::string& to, double
             // below would never run, leaving a stuck "Sending…" spinner.
             result_str = "Send failed (unknown error)";
         }
-        return [this, callback, ok, result_str, from, to, amount, fee, memo, markFeeGapRetry]() {
+        return [this, callback, ok, result_str, from, to, amount, fee, memo, markFeeGapRetry, background]() {
             if (send_submissions_in_flight_ > 0) --send_submissions_in_flight_;
             if (ok) {
                 // A send changes address balances — refresh on next cycle
@@ -4192,7 +4605,7 @@ void App::submitZSendMany(const std::string& from, const std::string& to, double
                     callback(true, result_str);  // no opid to track — report as-is
                 }
             } else {
-                send_progress_active_ = false;
+                if (!background) send_progress_active_ = false;
                 if (callback) callback(false, result_str);
             }
         };

src/chat/chat_database.cpp

@@ -228,6 +228,17 @@ bool ChatDatabase::ensureOpen()
     exec("PRAGMA journal_mode=WAL");
     exec("PRAGMA synchronous=NORMAL");
 
+    // C3-1: restrict the chat DB and its WAL/SHM sidecars to owner-only. sqlite creates them with
+    // umask-derived permissions (often world/group-readable); they hold per-row nonces + AEAD
+    // ciphertext of the user's messages. Best-effort (errors swallowed; a no-op-ish on Windows).
+    {
+        std::error_code perr;
+        const auto ownerOnly = std::filesystem::perms::owner_read | std::filesystem::perms::owner_write;
+        std::filesystem::permissions(database_path_, ownerOnly, std::filesystem::perm_options::replace, perr);
+        std::filesystem::permissions(database_path_ + "-wal", ownerOnly, std::filesystem::perm_options::replace, perr);
+        std::filesystem::permissions(database_path_ + "-shm", ownerOnly, std::filesystem::perm_options::replace, perr);
+    }
+
     if (!createSchema()) {
         close();
         return false;

src/chat/chat_outgoing.cpp

@@ -16,7 +16,8 @@ std::string buildHeaderMemo(const std::string& replyZaddr,
                             const std::string& conversationId,
                             const char* type,
                             const std::string& streamHeaderHex,
-                            const std::string& publicKeyHex)
+                            const std::string& publicKeyHex,
+                            std::int64_t sentAt)
 {
     nlohmann::json header;
     header["h"] = 1;                          // header number (>= 1)
@@ -26,6 +27,7 @@ std::string buildHeaderMemo(const std::string& replyZaddr,
     header["t"] = type;                       // "Memo" or "Cont"
     header["e"] = streamHeaderHex;            // 48-hex secretstream header (Memo) / "" (Cont)
     header["p"] = publicKeyHex;               // my 64-hex crypto_kx public key
+    if (sentAt > 0) header["ts"] = sentAt;    // optional sender compose time (Unix s) — receiver shows this
     return header.dump();
 }
 
@@ -67,7 +69,8 @@ ChatComposeStatus buildOutgoingMessage(const ChatKeyPair& mine,
 
     OutgoingChatMemos memos;
     memos.recipientZaddr = peerZaddr;
-    memos.headerMemo = buildHeaderMemo(myReplyZaddr, conversationId, "Memo", streamHeaderHex, myPublicKeyHex);
+    memos.headerMemo = buildHeaderMemo(myReplyZaddr, conversationId, "Memo", streamHeaderHex, myPublicKeyHex,
+                                       static_cast<std::int64_t>(std::time(nullptr)));
     memos.payloadMemo = ciphertextHex;
     if (memos.headerMemo.size() > kHushChatMemoByteLimit ||
         memos.payloadMemo.size() > kHushChatMemoByteLimit) {
@@ -95,7 +98,8 @@ ChatComposeStatus buildOutgoingContactRequest(const std::string& myPublicKeyHex,
 
     OutgoingChatMemos memos;
     memos.recipientZaddr = peerZaddr;
-    memos.headerMemo = buildHeaderMemo(myReplyZaddr, conversationId, "Cont", "", myPublicKeyHex);
+    memos.headerMemo = buildHeaderMemo(myReplyZaddr, conversationId, "Cont", "", myPublicKeyHex,
+                                       static_cast<std::int64_t>(std::time(nullptr)));
     memos.payloadMemo = requestText;
     if (memos.headerMemo.size() > kHushChatMemoByteLimit ||
         memos.payloadMemo.size() > kHushChatMemoByteLimit) {

src/chat/chat_protocol.cpp

@@ -124,6 +124,10 @@ HushChatHeaderParseResult parseHushChatHeaderMemo(const std::string& memo)
     if (!readRequiredString(object, "t", type, error)) return fail(error);
     if (!readRequiredString(object, "e", header.secretstream_header_hex, error)) return fail(error);
     if (!readRequiredString(object, "p", header.public_key_hex, error)) return fail(error);
+    // Optional sender compose time (Unix seconds). Absent on older senders — leave sent_at = 0 so the
+    // receiver falls back to the tx/receive time. Read leniently; never fail the header on a bad value.
+    if (auto it = object.find("ts"); it != object.end() && it->is_number_integer())
+        header.sent_at = it->get<std::int64_t>();
 
     if (header.header_number < 1) return fail("header number must be positive");
     if (header.version != kHushChatSupportedVersion) return fail("unsupported HushChat version");
@@ -303,6 +307,7 @@ HushChatTransactionExtractionResult extractHushChatTransactionMetadata(
         metadata.sender_public_key_hex = pair.header.public_key_hex;
         metadata.secretstream_header_hex = pair.header.secretstream_header_hex;
         metadata.payload_memo = pair.payload_memo;
+        metadata.sent_at = pair.header.sent_at;   // carry the sender's compose time (0 if absent)
         result.metadata.push_back(std::move(metadata));
     }
 

src/chat/chat_protocol.h

@@ -23,6 +23,9 @@ struct HushChatHeader {
     HushChatHeaderType type = HushChatHeaderType::Message;
     std::string secretstream_header_hex;
     std::string public_key_hex;
+    // Optional sender-stamped compose time (header "ts", Unix seconds). 0 = absent (older sender) → the
+    // receiver falls back to the tx/receive time. Lets both sides show the SAME (send) time.
+    std::int64_t sent_at = 0;
 };
 
 struct HushChatHeaderParseResult {
@@ -80,6 +83,7 @@ struct HushChatTransactionMetadata {
     std::string sender_public_key_hex;   // header "p": peer crypto_kx public key (hex)
     std::string secretstream_header_hex; // header "e": secretstream header (hex; empty for ContactRequest)
     std::string payload_memo;            // ciphertext hex (Message) or plaintext request text (ContactRequest)
+    std::int64_t sent_at = 0;            // header "ts": sender compose time (Unix s); 0 = absent → use tx time
 };
 
 struct HushChatTransactionExtractionResult {

src/chat/chat_service.cpp

@@ -45,8 +45,21 @@ int ChatService::ingest(const std::vector<HushChatTransactionMetadata>& metadata
         message.conversation_id = meta.conversation_id;
         message.peer_zaddr = meta.reply_zaddr;
         message.peer_public_key_hex = meta.sender_public_key_hex;
+        // Reference time: the tx/receive time (block time if confirmed, else the receiver's wall clock for
+        // a mempool receive).
         const auto timeIt = txTimestamps.find(meta.txid);
-        message.timestamp = timeIt != txTimestamps.end() ? timeIt->second : fallbackTimestamp;
+        const std::int64_t refTime = timeIt != txTimestamps.end() ? timeIt->second : fallbackTimestamp;
+        // Prefer the sender's stamped compose time (header "ts") — the true send time, shown identically on
+        // both ends. But REJECT a value implausibly in the FUTURE vs the reference: a wrong/ahead peer clock
+        // would otherwise pin their messages to the bottom of the thread forever. A compose time in the
+        // PAST is fine — the note buffer can broadcast a queued message long after it was composed, and a
+        // confirmed tx's block time is always >= the compose time.
+        constexpr std::int64_t kSenderTsFutureToleranceSec = 3600;  // 1 hour of clock skew tolerated
+        if (meta.sent_at > 0 && (refTime <= 0 || meta.sent_at <= refTime + kSenderTsFutureToleranceSec)) {
+            message.timestamp = meta.sent_at;
+        } else {
+            message.timestamp = refTime;
+        }
         message.payload_position = meta.payload_position;
 
         if (meta.type == HushChatHeaderType::ContactRequest) {

src/chat/chat_store.h

@@ -28,6 +28,16 @@ public:
     // Distinct conversation ids, in first-seen order.
     std::vector<std::string> conversationIds() const;
 
+    // The set of on-chain txids that carried a chat message (sent or received, messages + contact
+    // requests) — used by the History tab to badge / filter chat transactions. O(messages), no copies.
+    std::unordered_set<std::string> chatTxids() const {
+        std::unordered_set<std::string> out;
+        out.reserve(messages_.size());
+        for (const auto& m : messages_)
+            if (!m.txid.empty()) out.insert(m.txid);
+        return out;
+    }
+
     std::size_t size() const { return messages_.size(); }
     bool empty() const { return messages_.empty(); }
     void clear();

src/config/settings.h

@@ -91,7 +91,8 @@ public:
         bool showValue = true;          // show the converted/fiat value on the card
         bool show24h = false;           // show the 24h % change (live-market bases only)
         bool showSparkline = false;     // show a price-trend sparkline (live-market bases only)
-        int sparklineInterval = 0;      // 0=minute 1=hour 2=day 3=week 4=month (resample of price history)
+        int sparklineInterval = 4;      // 0=minute 1=hour 2=day 3=week 4=month (default month: a real curve
+                                        // from the daily series, vs the young in-session minute buffer)
         // Per-wallet visibility: "" (shown in every wallet — legacy/global) or a wallet-identity
         // hash (shown only when that wallet is active). New entries are tagged with the current
         // wallet so a portfolio built for wallet A doesn't clutter wallet B.

src/daemon/seed_wallet_creator.cpp

@@ -136,6 +136,14 @@ SeedWalletResult SeedWalletCreator::create(bool keepDatadir,
         }
     }
 
+    // W1-2: never hand back a live seed on a failure path. If the mnemonic was exported but a
+    // later step failed (empty address, or z_getnewaddress threw), the caller discards this
+    // result without wiping it, which would leave the seed resident. Success keeps it deliberately.
+    if (!r.ok && !r.seedPhrase.empty()) {
+        sodium_memzero(&r.seedPhrase[0], r.seedPhrase.size());
+        r.seedPhrase.clear();
+    }
+
     // 7. Stop the isolated node (graceful; it flushes its tiny empty chain quickly).
     cli.disconnect();
     temp.stop(20000);

src/daemon/xmrig_manager.cpp

@@ -208,19 +208,20 @@ bool XmrigManager::generateConfig(const Config& cfg, const std::string& outPath)
 
     try {
         fs::create_directories(fs::path(outPath).parent_path());
-        std::ofstream ofs(outPath);
+        std::ofstream ofs(outPath, std::ios::trunc);
         if (!ofs.is_open()) {
             last_error_ = "Cannot write xmrig config: " + outPath;
             DEBUG_LOGF("[ERROR] XmrigManager: %s\n", last_error_.c_str());
             return false;
         }
-        ofs << j.dump(4);
-        ofs.close();
-
 #ifndef _WIN32
-        // 0600 permissions — only owner can read/write
+        // Restrict to owner (0600) BEFORE writing any secret material (API token, wallet
+        // address, worker name). The file is still empty here, so the config is never
+        // world-readable — closing the window between creation and the previous post-write chmod.
         chmod(outPath.c_str(), 0600);
 #endif
+        ofs << j.dump(4);
+        ofs.close();
         return true;
     } catch (const std::exception& e) {
         last_error_ = std::string("Config write error: ") + e.what();

src/data/portfolio.h

@@ -31,19 +31,6 @@ inline double SumPortfolioBalance(const std::vector<std::string>& entryAddresses
     return sum;
 }
 
-// Shielded/transparent breakdown of an entry's balance (for the per-group Z/T split bar). Pure.
-struct PortfolioSplit { double shielded = 0.0; double transparent = 0.0; };
-inline PortfolioSplit SumPortfolioSplit(const std::vector<std::string>& entryAddresses,
-                                        const std::vector<AddressInfo>& walletAddresses)
-{
-    PortfolioSplit s;
-    if (entryAddresses.empty()) return s;
-    std::unordered_set<std::string> want(entryAddresses.begin(), entryAddresses.end());
-    for (const auto& a : walletAddresses)
-        if (want.count(a.address)) { if (a.isShielded()) s.shielded += a.balance; else s.transparent += a.balance; }
-    return s;
-}
-
 // Whether `address` is part of the entry's address group.
 inline bool PortfolioEntryContains(const std::vector<std::string>& entryAddresses,
                                    const std::string& address)

src/embedded/logo_dragonx_svg.h

@@ -0,0 +1,39 @@
+// DragonX Wallet - ImGui Edition
+// Copyright 2024-2026 The Hush Developers
+// Released under the GPLv3
+//
+// Embedded source of the DragonX mark (res/img/logos/logo_dragonx.svg). Kept as a string so the logo
+// is available in every build (dev + portable single-file) with no resource-pipeline or file dependency.
+// It is rasterized + recolored per theme at runtime (see util/svg_texture.*). Two fills: the crimson
+// body (.cls-2 #d82652) becomes the theme accent; the white detail (.cls-1 #fff) becomes the light tone.
+
+#pragma once
+
+// Global `embedded` namespace to match the generated embedded resources (embedded::ui_toml_data, etc.).
+namespace embedded {
+
+inline constexpr const char* kLogoDragonXSvg = R"SVG(<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128">
+  <defs>
+    <style>
+      .cls-1 {
+        fill: #fff;
+      }
+
+      .cls-2 {
+        fill: #d82652;
+      }
+    </style>
+  </defs>
+  <path class="cls-2" d="M103.98,128s-6.29-24.7-18.73-34.43c-8.53-8.03-15.63-16.49-21.25-24.16-5.62,7.68-12.72,16.17-21.25,24.16-12.4,9.74-18.73,34.43-18.73,34.43-2.38-24.34,7.85-35.82,12.87-41.29,7.82-8.5,15.31-16.56,21.75-25.02-7.64-11.44-11.41-19.72-11.41-19.72-.89-3.27-3.84-6.64-3.84-6.64,6.08-8.1-1.6-16.98-1.6-16.98,5.79-5.62,6.71-10.02,8.32-18.34-1.96,22.35,4.02,39.09,13.93,54.12,9.84-15.03,15.81-31.77,13.86-54.12,1.6,8.35,2.52,12.72,8.32,18.34,0,0-7.68,8.88-1.6,16.98,0,0-2.95,3.38-3.84,6.64,0,0-3.77,8.28-11.37,19.72,6.43,8.45,13.97,16.56,21.75,25.02,4.97,5.47,15.21,16.95,12.83,41.29h0Z"/>
+  <g>
+    <path class="cls-1" d="M55.33,61.62c-3.55,4.55-7.39,8.99-11.44,13.47-5.29-4.48-11.23-5.33-11.23-5.33,22.92-7.82,2.81-15.17.28-16.31C9.28,42.78,9.1,14.78,9.1,14.78c11.51,34.15,36.42,32.3,36.42,32.3.35-.21.67-.46.92-.71,1.64,3.27,4.58,8.67,8.88,15.24h0Z"/>
+    <g>
+      <path class="cls-1" d="M68.62,40.41c-1.35,2.98-2.91,5.83-4.62,8.63-1.71-2.81-3.23-5.69-4.62-8.63,1.74-3.45,4.62-20.58,4.62-20.58,0,0,2.88,17.13,4.62,20.58Z"/>
+      <path class="cls-1" d="M76.01,97.93l-3.48,2.34s-.1-4.44-3.52-1.84c-.42.32-2.38,2.21-.03,4.27,0,0-4.05,4.08-4.97,8.21-.92-4.12-4.97-8.21-4.97-8.21,2.34-2.06.39-3.95-.03-4.27-3.41-2.59-3.52,1.84-3.52,1.84l-3.48-2.34c.28-3.55.1-6.68-.46-9.42,4.69-4.94,8.85-9.88,12.47-14.61,3.66,4.72,7.78,9.67,12.47,14.61-.57,2.74-.75,5.86-.46,9.42Z"/>
+      <path class="cls-1" d="M95.34,69.76s-5.94.85-11.23,5.33c-4.02-4.48-7.89-8.92-11.44-13.47,4.3-6.57,7.25-11.98,8.88-15.24.25.25.57.5.92.71,0,0,24.91,1.84,36.42-32.3,0,0-.18,28-23.84,38.66-2.52,1.14-22.64,8.5.28,16.31h0Z"/>
+    </g>
+  </g>
+</svg>)SVG";
+
+} // namespace embedded

src/rpc/rpc_client.cpp

@@ -25,9 +25,11 @@ namespace {
 
 // Recursively zero every string value in a JSON tree in place — used to wipe a discarded parse tree
 // that held a secret (B7). Operates on the underlying std::string buffers via get_ref.
-void scrubJsonSecrets(nlohmann::json& j) {
+// Templated so it works on both nlohmann::json and nlohmann::ordered_json (callRaw uses the latter).
+template <typename J>
+void scrubJsonSecrets(J& j) {
     if (j.is_string()) {
-        auto& s = j.get_ref<std::string&>();
+        auto& s = j.template get_ref<std::string&>();
         if (!s.empty()) sodium_memzero(&s[0], s.size());
     } else if (j.is_object() || j.is_array()) {
         for (auto& el : j) scrubJsonSecrets(el);
@@ -96,6 +98,10 @@ void RPCClient::setTraceSource(std::string source)
 // Callback for libcurl to write response data
 static size_t WriteCallback(void* contents, size_t size, size_t nmemb, std::string* userp) {
     size_t totalSize = size * nmemb;
+    // Bound accumulation so a hostile/compromised daemon cannot OOM the client with an unbounded
+    // response body. 256 MiB is far above any legitimate JSON-RPC response yet prevents exhaustion.
+    static constexpr size_t kMaxRpcResponseBytes = 256u * 1024 * 1024;
+    if (userp->size() + totalSize > kMaxRpcResponseBytes) return 0;  // short count aborts the transfer
     userp->append((char*)contents, totalSize);
     return totalSize;
 }
@@ -202,6 +208,10 @@ bool RPCClient::connect(const std::string& host, const std::string& port,
     // budget for the TCP + TLS handshake over real network latency (1s would spuriously fail).
     const long connectTimeout = Connection::isLocalHost(host) ? 2L : 10L;
     curl_easy_setopt(impl_->curl, CURLOPT_CONNECTTIMEOUT, connectTimeout);
+    // Enforce TLS certificate + hostname verification explicitly rather than relying on libcurl's
+    // build defaults. Harmless on the localhost http:// case; essential for a remote https daemon.
+    curl_easy_setopt(impl_->curl, CURLOPT_SSL_VERIFYPEER, 1L);
+    curl_easy_setopt(impl_->curl, CURLOPT_SSL_VERIFYHOST, 2L);
 
     // Test connection with getinfo. Use a SHORT timeout for the probe on localhost: a healthy
     // local daemon answers in milliseconds and a warming one returns -28 just as fast, so a long
@@ -508,14 +518,22 @@ std::string RPCClient::callRaw(const std::string& method, const json& params)
     }
 
     auto& result = oj["result"];
+    std::string out;
     if (result.is_null()) {
-        return "null";
+        out = "null";
     } else if (result.is_string()) {
         // Return the raw string (not JSON-encoded) — caller wraps as needed
-        return result.get<std::string>();
+        out = result.get<std::string>();
     } else {
-        return result.dump(4);
+        out = result.dump(4);
     }
+    // B7: this raw path serves arbitrary console commands including dumpprivkey / z_exportkey,
+    // whose response carries plaintext key material. Zero the raw buffer and the parsed tree so
+    // the secret does not linger in freed heap (matching callSecret). The single returned copy is
+    // the caller's to manage.
+    scrubJsonSecrets(oj);
+    if (!response_data.empty()) sodium_memzero(&response_data[0], response_data.size());
+    return out;
 }
 
 void RPCClient::doRPC(const std::string& method, const json& params, Callback cb, ErrorCallback err)

src/services/network_refresh_service.cpp

@@ -434,8 +434,15 @@ std::optional<NetworkRefreshService::PriceRefreshResult> NetworkRefreshService::
         result.market.market_cap = data.value("usd_market_cap", 0.0);
 
         char buf[64];
-        std::tm* tm = std::localtime(&fetchedAt);
-        if (tm && std::strftime(buf, sizeof(buf), "%Y-%m-%d %H:%M:%S", tm) > 0) {
+        // Runs on the RPC worker thread — std::localtime shares a process-wide static tm, so use the
+        // reentrant variant into a local tm (matches the rest of the codebase).
+        std::tm tmv{};
+#ifdef _WIN32
+        localtime_s(&tmv, &fetchedAt);
+#else
+        localtime_r(&fetchedAt, &tmv);
+#endif
+        if (std::strftime(buf, sizeof(buf), "%Y-%m-%d %H:%M:%S", &tmv) > 0) {
             result.market.last_updated = buf;
         }
         return result;

src/ui/effects/theme_effects.cpp

@@ -160,6 +160,10 @@ void ThemeEffects::loadFromTheme() {
 
     // ---- Gradient Border Shift ----
     gradient_border_.enabled   = eff("gradient-border-enabled").sizeOr(0.0f) > 0.5f;
+    // Opt-in: also draw the shifting border on every glass panel (not just the
+    // active nav button). Off by default so themes that only want the button
+    // accent (e.g. Obsidian) are unaffected; Jade turns it on as its hero.
+    gradient_border_.panels    = eff("gradient-border-panels").sizeOr(0.0f) > 0.5f;
     gradient_border_.speed     = eff("gradient-border-speed").sizeOr(0.15f);
     gradient_border_.thickness = eff("gradient-border-thickness").sizeOr(1.5f);
     gradient_border_.alpha     = eff("gradient-border-alpha").sizeOr(0.6f);
@@ -512,11 +516,15 @@ void ThemeEffects::drawGlowPulse(ImDrawList* dl, ImVec2 pMin, ImVec2 pMax,
 // ============================================================================
 
 void ThemeEffects::drawGradientBorderShift(ImDrawList* dl, ImVec2 pMin, ImVec2 pMax,
-                                            float rounding) const {
+                                            float rounding, float phaseOffset,
+                                            float alphaMul) const {
     if (!enabled_ || !gradient_border_.enabled) return;
 
-    // Smooth sinusoidal oscillation between color A and color B
-    float phase = std::sin(time_ * gradient_border_.speed * 2.0f * 3.14159265f) * 0.5f + 0.5f;
+    // Smooth sinusoidal oscillation between color A and color B.
+    // phaseOffset shifts where in the cycle this element sits so a wall of
+    // panels reads like veins at different depths rather than one pulse.
+    float phase = std::sin((time_ * gradient_border_.speed + phaseOffset)
+                           * 2.0f * 3.14159265f) * 0.5f + 0.5f;
 
     // Extract RGBA from both colors and lerp
     RGB ca = unpackRGB(gradient_border_.colorA);
@@ -525,7 +533,7 @@ void ThemeEffects::drawGradientBorderShift(ImDrawList* dl, ImVec2 pMin, ImVec2 p
     int r = ca.r + (int)((cb.r - ca.r) * phase);
     int g = ca.g + (int)((cb.g - ca.g) * phase);
     int b = ca.b + (int)((cb.b - ca.b) * phase);
-    int a = scaledAlpha(gradient_border_.alpha, bgOpacity_);
+    int a = scaledAlpha(gradient_border_.alpha * alphaMul, bgOpacity_);
 
     // Draw the shifting border
     dl->AddRect(pMin, pMax, IM_COL32(r, g, b, a),
@@ -896,6 +904,22 @@ void ThemeEffects::drawPanelEffects(ImDrawList* dl, ImVec2 pMin, ImVec2 pMax,
                                      float rounding) const {
     if (!enabled_ || effects::isLowSpecMode()) return;
 
+    // Gradient border on panels — a slow color-shifting outline that hugs the
+    // panel's rounded corners (drawn via AddRect, so it follows the rounding
+    // exactly — no polygonal corners). Position-based phase offset makes each
+    // panel drift like a vein at a different depth; softer than the active
+    // nav button (alphaMul 0.6) so a screenful of panels stays calm.
+    if (gradient_border_.enabled && gradient_border_.panels) {
+        float w = pMax.x - pMin.x;
+        float h = pMax.y - pMin.y;
+        if (w > 80 && h > 40) { // skip small panels
+            float posKey = (pMin.x * 0.0073f + pMin.y * 0.0137f);
+            posKey = posKey - (int)posKey; // fractional 0..1
+            if (posKey < 0) posKey += 1.0f;
+            drawGradientBorderShift(dl, pMin, pMax, rounding, posKey, 0.6f);
+        }
+    }
+
     // Edge trace on panels — use position-based phase offset so each
     // panel's tracer is at a different position around the border
     if (edge_trace_.enabled) {

src/ui/effects/theme_effects.h

@@ -69,9 +69,12 @@ public:
     void drawEdgeTrace(ImDrawList* dl, ImVec2 pMin, ImVec2 pMax,
                        float rounding) const;
 
-    /// Draw a border that shifts between two colors over time (gem-like)
+    /// Draw a border that shifts between two colors over time (gem-like).
+    /// phaseOffset (0..1) shifts this element's point in the color cycle so
+    /// many panels don't pulse in unison; alphaMul scales the whole effect.
     void drawGradientBorderShift(ImDrawList* dl, ImVec2 pMin, ImVec2 pMax,
-                                 float rounding) const;
+                                 float rounding, float phaseOffset = 0.0f,
+                                 float alphaMul = 1.0f) const;
 
     /// Draw ember particles that rise from an element (fire theme)
     void drawEmberRise(ImDrawList* dl, ImVec2 pMin, ImVec2 pMax) const;
@@ -186,6 +189,7 @@ private:
 
     struct GradientBorderConfig {
         bool enabled = false;
+        bool panels = false;       ///< also draw on glass panels, not just the active nav button
         float speed = 0.15f;       ///< full color shift cycles per second
         float thickness = 1.5f;    ///< border line thickness in pixels
         float alpha = 0.6f;        ///< peak alpha

src/ui/material/draw_helpers.h

@@ -57,6 +57,21 @@ inline ImU32 ReadableError() {
     return IM_COL32(r, g, b, (e >> IM_COL32_A_SHIFT) & 0xFF);
 }
 
+// Middle-ellipsis truncation ("front...back", roughly equal halves) so `text` fits within
+// maxWidth pixels when drawn with `font` at `fontSize`. Returns `text` unchanged if it already
+// fits (or maxWidth is non-positive). Display-only — never mutate the underlying value with this.
+inline std::string TruncateToWidth(const std::string& text, ImFont* font, float fontSize, float maxWidth) {
+    if (text.empty() || !font || maxWidth <= 0.0f) return text;
+    if (font->CalcTextSizeA(fontSize, FLT_MAX, 0.0f, text.c_str()).x <= maxWidth) return text;
+    const int n = static_cast<int>(text.size());
+    for (int f = n / 2; f >= 3; --f) {
+        const int b = (f - 2 > 3) ? (f - 2) : 3;             // keep the two halves roughly equal
+        std::string t = text.substr(0, f) + "..." + text.substr(n - b);
+        if (font->CalcTextSizeA(fontSize, FLT_MAX, 0.0f, t.c_str()).x <= maxWidth) return t;
+    }
+    return n > 6 ? (text.substr(0, 3) + "..." + text.substr(n - 3)) : text;
+}
+
 // Animated "loading" ellipsis: "", ".", "..", "..." cycling on a ~3Hz phase.
 inline const char* LoadingDots() {
     int n = ((int)(ImGui::GetTime() * 3.0f)) % 4;

src/ui/material/settings_controls.h

@@ -0,0 +1,193 @@
+// DragonX Wallet - ImGui Edition
+// Copyright 2024-2026 The Hush Developers
+// Released under the GPLv3
+//
+// Settings design-system controls — the polished chat-settings look (accent subsection headers,
+// labeled rows with right-aligned controls, iOS-style segmented controls) promoted to reusable
+// components, plus a tiered ActionButton (Primary/Secondary/Tertiary/Destructive) with optional
+// leading Material icon and a ButtonFlow that wraps rows of buttons instead of shrinking them.
+
+#pragma once
+
+#include "draw_helpers.h"   // colors, type, layout, icons, WithAlpha, ScaleAlpha, DrawButtonGlassOverlay
+#include "imgui.h"
+
+#include <algorithm>
+
+namespace dragonx {
+namespace ui {
+namespace material {
+
+// Accent small-caps subsection header ("KEYS & BACKUP", "APPEARANCE"…) — the chat-settings section() look.
+inline void SettingsSubheader(const char* text) {
+    const float dp = Layout::dpiScale();
+    ImGui::Dummy(ImVec2(0.0f, 8.0f * dp));
+    ImGui::PushFont(Type().caption());
+    ImGui::PushStyleColor(ImGuiCol_Text, WithAlpha(Primary(), 235));
+    ImGui::TextUnformatted(text);
+    ImGui::PopStyleColor();
+    ImGui::PopFont();
+    ImGui::Dummy(ImVec2(0.0f, 2.0f * dp));
+}
+
+// A labeled settings row: label left, control right-aligned in a fixed column. Construct once per card
+// section with the content width (0 = auto), then call .label(text) before drawing each control (leaves
+// the cursor at the control origin and sets the next item width to the control column).
+struct SettingsRow {
+    float leftX, rowW, ctrlW, rowGap;
+    explicit SettingsRow(float contentWidth, float controlWidth = 250.0f) {
+        const float dp = Layout::dpiScale();
+        leftX  = ImGui::GetCursorPosX();
+        rowW   = (contentWidth > 0.0f) ? contentWidth : ImGui::GetContentRegionAvail().x;
+        ctrlW  = controlWidth * dp;
+        rowGap = 5.0f * dp;
+    }
+    void label(const char* text) {
+        ImGui::Dummy(ImVec2(0.0f, rowGap));
+        ImGui::AlignTextToFramePadding();
+        ImGui::TextUnformatted(text);
+        ImGui::SameLine();
+        ImGui::SetCursorPosX(std::max(ImGui::GetCursorPosX(), leftX + std::max(0.0f, rowW - ctrlW)));
+        ImGui::SetNextItemWidth(ctrlW);
+    }
+};
+
+// iOS-style segmented control (rounded track + inset pill on the selection). Draws its own labeled row
+// and returns the (possibly changed) index.
+inline int SegmentedControl(SettingsRow& row, const char* label, const char* const* items, int count, int value) {
+    const float dp = Layout::dpiScale();
+    row.label(label);
+    const ImVec2 origin = ImGui::GetCursorScreenPos();
+    const float h = ImGui::GetFrameHeight();
+    const float seg = row.ctrlW / static_cast<float>(count);
+    const float round = 7.0f * dp;
+    ImDrawList* dl = ImGui::GetWindowDrawList();
+    dl->AddRectFilled(origin, ImVec2(origin.x + row.ctrlW, origin.y + h), WithAlpha(OnSurface(), 20), round);
+    int result = value;
+    ImGui::PushID(label);
+    for (int i = 0; i < count; ++i) {
+        ImGui::PushID(i);
+        const ImVec2 mn(origin.x + i * seg, origin.y), mx(origin.x + (i + 1) * seg, origin.y + h);
+        ImGui::SetCursorScreenPos(mn);
+        if (ImGui::InvisibleButton("##s", ImVec2(seg, h))) result = i;
+        const bool hov = ImGui::IsItemHovered();
+        if (hov) ImGui::SetMouseCursor(ImGuiMouseCursor_Hand);
+        const bool sel = (value == i);
+        if (sel) {
+            const float in = 2.0f * dp;
+            dl->AddRectFilled(ImVec2(mn.x + in, mn.y + in), ImVec2(mx.x - in, mx.y - in),
+                              WithAlpha(Primary(), 210), std::max(1.0f, round - in));
+        } else if (hov) {
+            dl->AddRectFilled(mn, mx, WithAlpha(OnSurface(), 26), round);
+        }
+        const ImVec2 ts = ImGui::CalcTextSize(items[i]);
+        const float lpad = 4.0f * dp;
+        const float tx = (ts.x <= seg - 2.0f * lpad) ? (seg - ts.x) * 0.5f : lpad;
+        ImGui::PushClipRect(mn, mx, true);
+        dl->AddText(ImVec2(mn.x + tx, mn.y + (h - ts.y) * 0.5f),
+                    sel ? IM_COL32(255, 255, 255, 236) : OnSurfaceMedium(), items[i]);
+        ImGui::PopClipRect();
+        ImGui::PopID();
+    }
+    ImGui::PopID();
+    ImGui::SetCursorScreenPos(origin);
+    ImGui::Dummy(ImVec2(row.ctrlW, h));   // reserve the control's rect for layout flow
+    return result;
+}
+
+// ── Tiered action buttons ───────────────────────────────────────────────────
+// Primary   = filled accent (the one main action of a group)
+// Secondary = glass (default — common actions)
+// Tertiary  = ghost / low-emphasis (rarely used)
+// Destructive = error-tinted outline (delete / reset)
+enum class ActionTier { Primary, Secondary, Tertiary, Destructive };
+
+// The width an ActionButton will occupy (for ButtonFlow / manual layout).
+inline float ActionButtonWidth(const char* label, const char* icon, float minWidth = 0.0f) {
+    ImFont* lf  = Type().button();
+    ImFont* icf = Type().iconSmall();
+    const float dp = Layout::dpiScale();
+    const float padX = 12.0f * dp, gap = 6.0f * dp;
+    const float labelW = lf->CalcTextSizeA(lf->LegacySize, FLT_MAX, 0, label).x;
+    const float iconW  = (icon && icon[0] && icf) ? icf->CalcTextSizeA(icf->LegacySize, FLT_MAX, 0, icon).x : 0.0f;
+    const float w = padX * 2.0f + iconW + (iconW > 0.0f ? gap : 0.0f) + labelW;
+    return std::max(w, minWidth);
+}
+
+// A tiered action button with an optional leading Material icon (ICON_MD_* or nullptr). Auto-sizes to
+// its content (>= minWidth). Respects BeginDisabled() (dims via the style alpha, not clickable).
+inline bool ActionButton(const char* id, const char* label, const char* icon, ActionTier tier, float minWidth = 0.0f) {
+    ImFont* lf  = Type().button();
+    ImFont* icf = Type().iconSmall();
+    const float dp = Layout::dpiScale();
+    const float gap = 6.0f * dp;
+    const float h = ImGui::GetFrameHeight();
+    const bool  hasIcon = icon && icon[0] && icf;
+    const float labelW = lf->CalcTextSizeA(lf->LegacySize, FLT_MAX, 0, label).x;
+    const float iconW  = hasIcon ? icf->CalcTextSizeA(icf->LegacySize, FLT_MAX, 0, icon).x : 0.0f;
+    const float w = ActionButtonWidth(label, icon, minWidth);
+
+    const ImVec2 pos = ImGui::GetCursorScreenPos();
+    const bool pressed = ImGui::InvisibleButton(id, ImVec2(w, h));
+    const bool hov = ImGui::IsItemHovered(), act = ImGui::IsItemActive();
+    if (hov) ImGui::SetMouseCursor(ImGuiMouseCursor_Hand);
+    ImDrawList* dl = ImGui::GetWindowDrawList();
+    const ImVec2 pMax(pos.x + w, pos.y + h);
+    const float round = ImGui::GetStyle().FrameRounding;
+    const float a = ImGui::GetStyle().Alpha;   // BeginDisabled() lowers this
+
+    ImU32 bg = 0, border = 0, fg = OnSurface();
+    bool glass = false;
+    switch (tier) {
+        case ActionTier::Primary:
+            bg = WithAlpha(Primary(), act ? 255 : (hov ? 245 : 220));
+            fg = IM_COL32(255, 255, 255, 240);
+            break;
+        case ActionTier::Secondary:
+            bg = WithAlpha(OnSurface(), hov ? 26 : 16);
+            border = WithAlpha(OnSurface(), 40);
+            glass = true;
+            fg = OnSurface();
+            break;
+        case ActionTier::Tertiary:
+            bg = hov ? WithAlpha(OnSurface(), 18) : 0;
+            fg = OnSurfaceMedium();
+            break;
+        case ActionTier::Destructive:
+            bg = hov ? WithAlpha(Error(), 32) : WithAlpha(Error(), 12);
+            border = WithAlpha(Error(), 90);
+            fg = Error();
+            break;
+    }
+    if (bg)     dl->AddRectFilled(pos, pMax, ScaleAlpha(bg, a), round);
+    if (border) dl->AddRect(pos, pMax, ScaleAlpha(border, a), round, 0, 1.0f);
+    if (glass)  DrawButtonGlassOverlay(dl, pos, pMax, round, act, hov);
+    fg = ScaleAlpha(fg, a);
+
+    const float contentW = iconW + (iconW > 0.0f ? gap : 0.0f) + labelW;
+    float cx = pos.x + (w - contentW) * 0.5f;
+    if (hasIcon) {
+        dl->AddText(icf, icf->LegacySize, ImVec2(cx, pos.y + (h - icf->LegacySize) * 0.5f), fg, icon);
+        cx += iconW + gap;
+    }
+    dl->AddText(lf, lf->LegacySize, ImVec2(cx, pos.y + (h - lf->LegacySize) * 0.5f), fg, label);
+    return pressed;
+}
+
+// Places ActionButtons left→right, wrapping to a new row when the next one won't fit (instead of the
+// old font-scale-to-fit). Call next(width) before each ActionButton.
+struct ButtonFlow {
+    float availW, gap; float x = 0.0f; bool firstOnRow = true;
+    explicit ButtonFlow(float availWidth, float gapPx = 8.0f) : availW(availWidth) {
+        gap = gapPx * Layout::dpiScale();
+    }
+    void next(float w) {
+        if (firstOnRow) { firstOnRow = false; x = w; return; }
+        if (x + gap + w <= availW) { ImGui::SameLine(0, gap); x += gap + w; }
+        else { x = w; }   // natural newline wraps to the next row
+    }
+};
+
+} // namespace material
+} // namespace ui
+} // namespace dragonx

src/ui/windows/balance_address_list.cpp

@@ -70,6 +70,7 @@ AddressRowLayout ComputeAddressRowLayout(float rowX,
                                          float spacingSm,
                                          float spacingXs)
 {
+    (void)spacingXs;  // trailing button now insets by rowPadLeft (mirrors the left margin)
     AddressRowLayout layout;
     layout.contentStartX = rowX + rowPadLeft;
     layout.contentStartY = rowY + spacingMd;
@@ -77,7 +78,9 @@ AddressRowLayout ComputeAddressRowLayout(float rowX,
 
     const float buttonY = rowY + (rowHeight - layout.buttonSize) * 0.5f;
     const float rightEdge = rowX + rowWidth;
-    const float favoriteX = rightEdge - layout.buttonSize - spacingXs;
+    // Inset the trailing (favorite/star) button by the card's inner padding — the same margin the
+    // left content uses (rowPadLeft) — so it mirrors the left edge instead of hugging the card edge.
+    const float favoriteX = rightEdge - layout.buttonSize - rowPadLeft;
     const float visibilityX = favoriteX - spacingSm - layout.buttonSize;
 
     layout.favoriteButton = {favoriteX, buttonY, layout.buttonSize, layout.buttonSize};

src/ui/windows/chat_tab.cpp

@@ -26,8 +26,10 @@
 #include <algorithm>
 #include <cctype>
 #include <cfloat>
+#include <cmath>         // std::cos/std::sin — radial byte gauge in the composer
 #include <cstdint>
 #include <cstring>
+#include <functional>
 #include <ctime>
 #include <string>
 #include <vector>
@@ -41,9 +43,41 @@ namespace {
 std::string s_selected_cid;
 std::string s_scroll_to_cid;  // when set, scroll the thread to the bottom next frame
 
+// Auto-scroll: keep the thread pinned to the newest message only while the user is at the bottom.
+// A wheel-up detaches it (mirrors console_tab.cpp's ScrollController); returning to the bottom re-arms it.
+bool  s_chat_auto_scroll = true;
+float s_chat_scroll_cooldown = 0.0f;   // seconds left before an at-bottom position may re-arm auto-scroll
+
+// Message text selection: click-drag inside a bubble selects a byte range of its body; while a range is
+// active a small copy button appears at the bubble's top on the opposite side. Offsets index m.body bytes.
+std::string s_msgsel_cid;          // conversation of the selected message ("" = no selection)
+int         s_msgsel_index  = -1;  // message index within that conversation
+int         s_msgsel_anchor = 0;   // drag-start byte offset
+int         s_msgsel_head   = 0;   // drag-current byte offset
+bool        s_msgsel_dragging = false;
+
 // Composer + new-conversation UI state.
 char s_compose[512] = "";
 std::string s_compose_cid;   // the conversation s_compose is a draft for; draft is wiped when it changes
+// On-chain chat body cap in bytes = (512 − len("utf8:"))/2 − secretstream ABYTES (see chat_outgoing.cpp).
+// The composer hard-caps input to this; the emoji picker respects it too.
+constexpr int kChatBodyMaxBytes = (512 - 5) / 2 - 17;   // = 236
+float s_composerAnimH = 0.0f;   // animated composer-box height — grows with newlines, pushing the thread up
+float s_composerTargetH = 0.0f; // target height measured in the composer block (wrapped content), consumed next frame
+
+// Composer InputText callback: insert a newline at the cursor on Shift+Enter. ImGui 1.92's Enter handling
+// (imgui_widgets.cpp:5078) resolves Enter via Shortcut() with EXACT modifiers, so Shift+Enter matches
+// neither the plain-Enter (submit) nor the Ctrl+Enter shortcut — ImGui does nothing with it. We insert the
+// newline ourselves here (running under CallbackAlways), respecting the on-chain byte cap.
+int composeInputCallback(ImGuiInputTextCallbackData* data) {
+    ImGuiIO& io = ImGui::GetIO();
+    if (io.KeyShift
+        && (ImGui::IsKeyPressed(ImGuiKey_Enter) || ImGui::IsKeyPressed(ImGuiKey_KeypadEnter))
+        && data->BufTextLen < kChatBodyMaxBytes) {
+        data->InsertChars(data->CursorPos, "\n");
+    }
+    return 0;
+}
 bool s_show_new_convo = false;
 char s_new_zaddr[128] = "";
 char s_new_msg[256] = "";
@@ -165,6 +199,155 @@ ImU32 avatarColor(const std::string& seed) {
     return kPalette[h % (sizeof(kPalette) / sizeof(kPalette[0]))];
 }
 
+// Lay out (and optionally draw) a chat message body with paragraph spacing: each '\n'-delimited paragraph
+// word-wraps at wrapW, and every paragraph after the first gets `paraGap` of extra leading ABOVE it — so
+// an explicit newline reads as a paragraph break (a bit more space than a soft wrap, which stays tight).
+// Returns the total laid-out size (max wrapped width × total height). When dl != nullptr, draws at `origin`.
+// Both the size pass (dl == nullptr) and the draw pass MUST use identical args so the bubble fits the text.
+ImVec2 layoutChatBody(ImDrawList* dl, ImFont* font, float size, const std::string& body,
+                      float wrapW, float paraGap, ImVec2 origin, ImU32 col) {
+    float maxW = 0.0f, y = 0.0f;
+    bool first = true;
+    size_t start = 0;
+    for (;;) {
+        const size_t nl = body.find('\n', start);
+        const bool last = (nl == std::string::npos);
+        const char* pbeg = body.c_str() + start;
+        const char* pend = body.c_str() + (last ? body.size() : nl);
+        if (!first) y += paraGap;                                   // paragraph break gets extra room
+        const ImVec2 psz = font->CalcTextSizeA(size, FLT_MAX, wrapW, pbeg, pend);
+        const float ph = std::max(psz.y, size);                    // a blank line still takes one line
+        if (dl && pend > pbeg)
+            dl->AddText(font, size, ImVec2(origin.x, origin.y + y), col, pbeg, pend, wrapW);
+        y += ph;
+        maxW = std::max(maxW, psz.x);
+        first = false;
+        if (last) break;
+        start = nl + 1;
+    }
+    return ImVec2(maxW, y);
+}
+
+// One wrapped visual line of a laid-out chat body: byte range [b,e) into body + its y-offset from the
+// body origin (each line is `size` tall). Mirrors layoutChatBody's paragraph/wrap walk so selection
+// hit-testing and highlighting align with the drawn text.
+struct ChatBodyLine { std::size_t b, e; float y; };
+
+std::vector<ChatBodyLine> chatBodyLines(ImFont* font, float size, const std::string& body,
+                                        float wrapW, float paraGap) {
+    std::vector<ChatBodyLine> out;
+    const float scale = size / std::max(1.0f, font->LegacySize);
+    float y = 0.0f; bool first = true; std::size_t start = 0;
+    for (;;) {
+        const std::size_t nl = body.find('\n', start);
+        const bool last = (nl == std::string::npos);
+        const std::size_t pend = last ? body.size() : nl;
+        if (!first) y += paraGap;
+        std::size_t p = start;
+        if (p >= pend) { out.push_back({p, p, y}); y += size; }   // blank paragraph = one empty line
+        else {
+            while (p < pend) {
+                const char* w = font->CalcWordWrapPositionA(scale, body.c_str() + p, body.c_str() + pend, wrapW);
+                std::size_t we = (w > body.c_str() + p) ? static_cast<std::size_t>(w - body.c_str()) : p + 1;
+                if (we > pend) we = pend;
+                out.push_back({p, we, y});
+                y += size;
+                p = we;
+                while (p < pend && body[p] == ' ') ++p;   // AddText skips blanks at a wrap; match it
+            }
+        }
+        first = false;
+        if (last) break;
+        start = nl + 1;
+    }
+    return out;
+}
+
+// Advance one UTF-8 codepoint (byte offset) within [.. limit).
+inline std::size_t chatNextCp(const std::string& s, std::size_t i, std::size_t limit) {
+    if (i >= limit) return limit;
+    ++i;
+    while (i < limit && (static_cast<unsigned char>(s[i]) & 0xC0) == 0x80) ++i;
+    return i;
+}
+
+// Map a point to the nearest body byte offset (for drag selection). origin is the body's top-left.
+std::size_t chatBodyHitTest(ImFont* font, float size, const std::string& body, float wrapW,
+                            float paraGap, ImVec2 origin, ImVec2 pt) {
+    const auto lines = chatBodyLines(font, size, body, wrapW, paraGap);
+    if (lines.empty()) return 0;
+    const ChatBodyLine* L = &lines.front();
+    for (const auto& ln : lines) { if (pt.y >= origin.y + ln.y) L = &ln; else break; }
+    const float relX = pt.x - origin.x;
+    std::size_t best = L->b; float bestDx = 1e9f;
+    for (std::size_t i = L->b;; i = chatNextCp(body, i, L->e)) {
+        const float w = font->CalcTextSizeA(size, FLT_MAX, 0.0f, body.c_str() + L->b, body.c_str() + i).x;
+        const float dx = std::fabs(w - relX);
+        if (dx < bestDx) { bestDx = dx; best = i; }
+        if (i >= L->e) break;
+    }
+    return best;
+}
+
+// The custom-DragonX-emoji shortcode. Inserted by the emoji picker's DragonX tile; rendered inline as
+// the mark in chat bubbles (see layoutChatBodyRich). Plain text on clients that don't support it.
+static const char* kDrgxToken = ":drgx:";
+
+// Lay out (and optionally draw) a message body that contains one or more ":drgx:" tokens, flowing text
+// WORDS and the inline DragonX-emoji image left-to-right and wrapping at wrapW (each drgx renders as a
+// `size`-square image). Only used for bodies that actually contain the token — plain bodies keep the
+// tighter layoutChatBody path — so normal messages are unaffected. Returns the total laid-out size.
+ImVec2 layoutChatBodyRich(ImDrawList* dl, ImFont* font, float size, const std::string& body, float wrapW,
+                          float paraGap, ImVec2 origin, ImU32 col, ImTextureID drgxTex) {
+    const float spaceW = font->CalcTextSizeA(size, FLT_MAX, 0.0f, " ").x;
+    const float emojiW = size;                 // square, matching the line height
+    const std::size_t tokLen = std::strlen(kDrgxToken);
+    float maxW = 0.0f, y = 0.0f, x = 0.0f;
+    bool firstPara = true, firstOnLine = true;
+    // Place a token of width w on the current line, wrapping first if it doesn't fit; draw() gets the
+    // token's top-left screen position.
+    auto place = [&](float w, const std::function<void(float, float)>& draw) {
+        const float lead = firstOnLine ? 0.0f : spaceW;
+        if (!firstOnLine && x + lead + w > wrapW) { x = 0.0f; y += size; firstOnLine = true; }
+        const float sx = x + (firstOnLine ? 0.0f : spaceW);
+        if (dl) draw(origin.x + sx, origin.y + y);
+        x = sx + w;
+        if (x > maxW) maxW = x;
+        firstOnLine = false;
+    };
+    std::size_t pstart = 0;
+    for (;;) {
+        const std::size_t nl = body.find('\n', pstart);
+        const bool lastPara = (nl == std::string::npos);
+        const std::size_t pend = lastPara ? body.size() : nl;
+        if (!firstPara) y += paraGap;
+        x = 0.0f; firstOnLine = true;
+        std::size_t i = pstart;
+        while (i < pend) {
+            if (body[i] == ' ' || body[i] == '\t') { ++i; continue; }
+            if (body.compare(i, tokLen, kDrgxToken) == 0) {
+                place(emojiW, [&](float px, float py) {
+                    if (drgxTex) dl->AddImage(drgxTex, ImVec2(px, py), ImVec2(px + emojiW, py + size));
+                    else dl->AddText(font, size, ImVec2(px, py), col, kDrgxToken);   // fallback: literal
+                });
+                i += tokLen;
+                continue;
+            }
+            std::size_t j = i;
+            while (j < pend && body[j] != ' ' && body[j] != '\t' && body.compare(j, tokLen, kDrgxToken) != 0) ++j;
+            const std::string word = body.substr(i, j - i);
+            const float ww = font->CalcTextSizeA(size, FLT_MAX, 0.0f, word.c_str()).x;
+            place(ww, [&, word](float px, float py) { dl->AddText(font, size, ImVec2(px, py), col, word.c_str()); });
+            i = j;
+        }
+        y += size;
+        firstPara = false;
+        if (lastPara) break;
+        pstart = nl + 1;
+    }
+    return ImVec2(maxW, y);
+}
+
 // Outgoing-bubble accent base color for a chat_bubble_accent preset (0 = theme primary).
 ImU32 bubbleAccentColor(int accent) {
     switch (accent) {
@@ -416,6 +599,13 @@ static const EmojiEntry kEmoji[] = {
     {u8"🤢","nausea sick"},{u8"🤮","vomit sick"},{u8"🤧","sneeze sick"},{u8"😷","mask sick"},{u8"🤒","sick thermometer"},
     {u8"🤕","hurt bandage injured"},{u8"😈","devil imp evil"},{u8"👿","devil angry"},{u8"💀","skull dead"},{u8"👻","ghost boo"},
     {u8"👽","alien"},{u8"🤖","robot bot"},{u8"😺","cat smile"},{u8"🙀","cat scream"},
+    // Dragon-themed set (DRGX flavour — searchable by "dragon"/"drgx"). All verified present in the
+    // bundled mono NotoEmoji subset + the color Twemoji font.
+    {u8"🐉","dragon drgx dragonx wyrm mythical creature"},{u8"🐲","dragon face drgx dragonx"},
+    {u8"🐍","snake serpent reptile"},{u8"🦎","lizard reptile gecko"},{u8"🐊","crocodile croc reptile gator"},
+    {u8"🐾","paw tracks claws prints"},{u8"🥚","egg dragon egg"},{u8"🪺","nest eggs hatch"},
+    {u8"🏰","castle lair fortress keep"},{u8"⚔","swords battle crossed fight"},
+    {u8"🛡","shield defense guard protect"},{u8"🗡","dagger blade sword knife"},
     {u8"👍","thumbs up like yes good"},{u8"👎","thumbs down dislike no bad"},{u8"👌","ok perfect"},{u8"✌","peace victory"},
     {u8"🤞","fingers crossed luck"},{u8"🤟","love you"},{u8"🤘","rock horns"},{u8"👏","clap applause"},
     {u8"🙌","raise hands celebrate"},{u8"👐","open hands"},{u8"🙏","pray thanks please"},{u8"💪","muscle strong flex"},
@@ -434,7 +624,19 @@ static const EmojiEntry kEmoji[] = {
 
 // Emoji picker overlay: fills the conversation-list pane (cancel + keyword search at the top, then a
 // grid). Clicking an emoji appends its UTF-8 bytes to `buf` (the composer), respecting the buffer.
-void renderEmojiPickerOverlay(char* buf, std::size_t bufSize) {
+void renderEmojiPickerOverlay(char* buf, std::size_t bufSize, ImTextureID drgxTex) {
+    // Insert a token (emoji glyph or the ":drgx:" shortcode) at the end of the draft, prepending a space
+    // when the draft isn't empty and doesn't already end in whitespace. Respects the on-chain byte cap.
+    auto insertToken = [&](const char* tok) {
+        const std::size_t cur = std::strlen(buf), add = std::strlen(tok);
+        const bool needsSpace = cur > 0 && static_cast<unsigned char>(buf[cur - 1]) > ' ';
+        const std::size_t pad = needsSpace ? 1 : 0;
+        if (cur + pad + add <= static_cast<std::size_t>(kChatBodyMaxBytes) && cur + pad + add < bufSize) {
+            if (needsSpace) buf[cur] = ' ';
+            std::memcpy(buf + cur + pad, tok, add);
+            buf[cur + pad + add] = '\0';
+        }
+    };
     if (ImGui::SmallButton(TR("chat_cancel"))) { s_show_emoji_picker = false; s_emoji_search[0] = '\0'; return; }
     ImGui::SameLine();
     ImGui::SetNextItemWidth(-FLT_MIN);
@@ -460,13 +662,25 @@ void renderEmojiPickerOverlay(char* buf, std::size_t bufSize) {
     es.bgRounding = 8.0f * dp;
     ImGui::PushStyleVar(ImGuiStyleVar_ItemSpacing, ImVec2(spacing, spacing));
     int shown = 0;
+    // DragonX custom emoji tile (first cell) — inserts the ":drgx:" shortcode, which renders inline as the
+    // mark in message bubbles. Shown unless the search filter excludes "dragon"/"drgx".
+    if (q.empty() || containsCI("dragon drgx dragonx wyrm", q)) {
+        ImGui::PushID("drgxtile");
+        const ImVec2 tp = ImGui::GetCursorScreenPos();
+        ImGui::InvisibleButton("##drgx", ImVec2(cell, cell));
+        ImDrawList* gdl = ImGui::GetWindowDrawList();
+        if (ImGui::IsItemHovered()) gdl->AddRectFilled(tp, ImVec2(tp.x + cell, tp.y + cell), es.hoverBg, es.bgRounding);
+        if (drgxTex) gdl->AddImage(drgxTex, tp, ImVec2(tp.x + cell, tp.y + cell));
+        else        gdl->AddText(emojiFont, emojiFont->LegacySize, tp, material::OnSurface(), u8"🐉");
+        if (ImGui::IsItemClicked()) insertToken(kDrgxToken);
+        ImGui::PopID();
+        if (++shown % perRow != 0) ImGui::SameLine();
+    }
     for (const auto& e : kEmoji) {
         if (!q.empty() && !containsCI(e.keywords, q)) continue;
         ImGui::PushID(shown);
-        if (material::IconButton("##em", e.glyph, emojiFont, ImVec2(cell, cell), es)) {
-            const std::size_t cur = std::strlen(buf), add = std::strlen(e.glyph);
-            if (cur + add < bufSize) { std::memcpy(buf + cur, e.glyph, add); buf[cur + add] = '\0'; }
-        }
+        if (material::IconButton("##em", e.glyph, emojiFont, ImVec2(cell, cell), es))
+            insertToken(e.glyph);
         ImGui::PopID();
         if (++shown % perRow != 0) ImGui::SameLine();
     }
@@ -534,6 +748,7 @@ void RenderChatTab(App* app)
     if (s_selected_cid != s_compose_cid) {
         sodium_memzero(s_compose, sizeof(s_compose));
         s_compose_cid = s_selected_cid;
+        s_composerAnimH = 0.0f;   // re-arm the first-frame snap so the box doesn't animate-collapse on switch
     }
     // Abandon an in-progress header rename tied to a different conversation (switch/hide), so a
     // half-typed buffer can't silently reappear or land on the wrong contact (Tier C review).
@@ -557,14 +772,25 @@ void RenderChatTab(App* app)
     const float metaSz = scaledSize(metaFont);
 
     // ---- Left: new-conversation button + conversation list ----
-    // Faint sidebar tint so the list reads as distinct from the thread pane (V6).
-    ImGui::PushStyleColor(ImGuiCol_ChildBg, ImGui::ColorConvertU32ToFloat4(material::WithAlpha(material::OnSurface(), 10)));
-    ImGui::BeginChild("##ChatList", ImVec2(listW, avail.y), ImGuiChildFlags_Borders,
+    // Frosted-glass pane so the list blurs the backdrop like the rest of the app (the contacts_tab
+    // pattern): draw the glass behind the child, then give the child a TRANSPARENT bg. A flat ChildBg
+    // tint (the old approach) never samples the acrylic blur, so the raw texture showed through.
+    {
+        ImDrawList* paneDL = ImGui::GetWindowDrawList();
+        const ImVec2 pMin = ImGui::GetCursorScreenPos();
+        material::GlassPanelSpec g; g.rounding = 12.0f * Layout::dpiScale(); g.fillAlpha = 20; g.borderAlpha = 34;
+        material::DrawGlassPanel(paneDL, pMin, ImVec2(pMin.x + listW, pMin.y + avail.y), g);
+    }
+    // Inner padding so the list content (buttons, search, conversation cards) doesn't hug the glass
+    // pane's edges now that it's a visible frosted card.
+    ImGui::PushStyleVar(ImGuiStyleVar_WindowPadding, ImVec2(12.0f * Layout::dpiScale(), 10.0f * Layout::dpiScale()));
+    ImGui::PushStyleColor(ImGuiCol_ChildBg, IM_COL32(0, 0, 0, 0));   // transparent — the frosted glass shows through
+    ImGui::BeginChild("##ChatList", ImVec2(listW, avail.y), ImGuiChildFlags_AlwaysUseWindowPadding,
                       ImGuiWindowFlags_NoScrollWithMouse);
     material::ApplySmoothScroll();   // wheel-driven lerp scroll, matching the rest of the app
     if (s_show_emoji_picker) {
         // Emoji picker overlay takes over the conversation-list pane while open (search + cancel + grid).
-        renderEmojiPickerOverlay(s_compose, sizeof(s_compose));
+        renderEmojiPickerOverlay(s_compose, sizeof(s_compose), app->getDrgxEmojiTexture());
     } else {
         // "New chat" (accented) + "Show hidden (N)" toggle, side by side. Show-hidden only appears when
         // something is hidden; otherwise New chat spans the row.
@@ -683,6 +909,7 @@ void RenderChatTab(App* app)
     }
     ImGui::EndChild();
     ImGui::PopStyleColor();  // list ChildBg tint (V6)
+    ImGui::PopStyleVar();    // list inner WindowPadding
 
     ImGui::SameLine(0.0f, 10.0f * Layout::dpiScale());   // breathing gutter between the list and thread panes
 
@@ -693,13 +920,44 @@ void RenderChatTab(App* app)
     for (const auto& c : convs) if (c.cid == s_selected_cid) { sel = &c; break; }
 
     const float tdp = Layout::dpiScale();
-    const float composerBoxH = ImGui::GetTextLineHeight() * 2.6f;   // multi-line composer (Q6)
-    // Reserve a stable composer strip below the box whenever a conversation is open (thin counter row +
-    // the input row, which sits flush with the strip/window bottom). Same height for the waiting hint so
-    // the box doesn't jump when a reply arrives.
-    const float composerAreaH = sel ? (composerBoxH + metaSz + 12.0f * tdp) : 0.0f;
+    // Composer auto-grows with its content: the input word-wraps, so the box height tracks the wrapped
+    // line count (measured in the composer block below, where the wrap width is known) and animates so the
+    // thread above is smoothly pushed up/down. The vertical padding also centers a single line and, with
+    // the left FramePadding, keeps text off the edges. We consume last frame's measured target here (a
+    // 1-frame lag that's invisible under the smoothing); it falls back to one collapsed line.
+    const float lineH = ImGui::GetTextLineHeight();
+    const float composerVPad = 8.0f * tdp;                       // top+bottom inner padding
+    const float composerCtrlH = lineH + 2.0f * composerVPad;     // one-line (collapsed) height; side controls match
+    const int   kMaxComposerLines = 6;                          // beyond this the input scrolls internally
+    const float composerAnimTarget = (s_composerTargetH > 0.0f) ? s_composerTargetH : composerCtrlH;
+    if (s_composerAnimH <= 0.0f) s_composerAnimH = composerAnimTarget;   // first frame: snap, don't animate in
+    {
+        const float dt = ImGui::GetIO().DeltaTime;
+        const float k  = 1.0f - std::exp(-dt * 16.0f);          // ~16/s exponential convergence
+        s_composerAnimH += (composerAnimTarget - s_composerAnimH) * k;
+        if (std::fabs(composerAnimTarget - s_composerAnimH) < 0.5f) s_composerAnimH = composerAnimTarget;
+    }
+    const float composerBoxH  = s_composerAnimH;
+    // Reserve the (animated) composer strip below the box whenever a conversation is open — just the input
+    // row (the byte budget is a radial gauge inside the input, no separate counter row). Same height for
+    // the waiting hint so the box doesn't jump when a reply arrives.
+    const float composerAreaH = sel ? (composerBoxH + 10.0f * tdp) : 0.0f;
 
-    ImGui::BeginChild("##ChatThread", ImVec2(0, avail.y - composerAreaH), true);
+    // Frosted-glass thread pane (same reasoning as the list): glass behind + transparent child bg so
+    // the message area blurs the backdrop instead of showing the sharp texture. Replaces the old
+    // bordered child (which drew the flat, translucent WindowBg) — the glass supplies the border.
+    {
+        ImDrawList* paneDL = ImGui::GetWindowDrawList();
+        const ImVec2 pMin = ImGui::GetCursorScreenPos();
+        const float  pW = ImGui::GetContentRegionAvail().x;
+        material::GlassPanelSpec g; g.rounding = 12.0f * tdp; g.fillAlpha = 12; g.borderAlpha = 34;
+        material::DrawGlassPanel(paneDL, pMin, ImVec2(pMin.x + pW, pMin.y + (avail.y - composerAreaH)), g);
+    }
+    // Inner padding so the header + messages don't hug the glass card's edges (the message child
+    // below trims its own inset to compensate so bubbles aren't double-indented).
+    ImGui::PushStyleVar(ImGuiStyleVar_WindowPadding, ImVec2(12.0f * tdp, 10.0f * tdp));
+    ImGui::PushStyleColor(ImGuiCol_ChildBg, IM_COL32(0, 0, 0, 0));   // transparent — frosted glass shows through
+    ImGui::BeginChild("##ChatThread", ImVec2(0, avail.y - composerAreaH), ImGuiChildFlags_AlwaysUseWindowPadding);
     {
         if (sel) {
             app->markChatConversationSeen(sel->cid, sel->lastTs);  // viewing the thread clears its unread (Q1)
@@ -942,18 +1200,42 @@ void RenderChatTab(App* app)
             ImGui::Separator();
 
             const float dp = Layout::dpiScale();
-            // Inset the message list from the pane edges so bubbles don't hug the border/scrollbar (8px).
+            // Small message-list inset (the ##ChatThread WindowPadding above already holds content off
+            // the glass edge; keep a little here so bubbles don't hug the scrollbar).
             // Zero the VERTICAL item spacing: the message loop reserves its own gaps via Dummy() (tight
             // within a run so the grouped/merged corners read right), so the theme's 6px would double them.
             const float origSpacingX = ImGui::GetStyle().ItemSpacing.x;
-            ImGui::PushStyleVar(ImGuiStyleVar_WindowPadding, ImVec2(8.0f * dp, 8.0f * dp));
+            ImGui::PushStyleVar(ImGuiStyleVar_WindowPadding, ImVec2(4.0f * dp, 8.0f * dp));
             ImGui::PushStyleVar(ImGuiStyleVar_ItemSpacing, ImVec2(origSpacingX, 0.0f));
             ImGui::BeginChild("##ChatMessages", ImVec2(0, ImGui::GetContentRegionAvail().y),
-                              ImGuiChildFlags_None, ImGuiWindowFlags_NoScrollWithMouse);
+                              ImGuiChildFlags_AlwaysUseWindowPadding, ImGuiWindowFlags_NoScrollWithMouse);
             material::ApplySmoothScroll();   // smooth wheel scroll; syncs with the auto-scroll-to-bottom below
+            // Detach auto-scroll when the user wheels up inside the thread; re-armed once back at the bottom
+            // (below). The cooldown lets the smooth-scroll animate away before we re-check position. A direct
+            // mouse-in-rect test (not IsWindowHovered, which is false while the composer holds focus) matches
+            // ApplySmoothScroll, so scrolling up to read history while the composer is focused still detaches.
+            {
+                const ImVec2 wpos = ImGui::GetWindowPos(), wsz = ImGui::GetWindowSize();
+                const ImVec2 mp = ImGui::GetIO().MousePos;
+                const bool inThread = mp.x >= wpos.x && mp.x < wpos.x + wsz.x &&
+                                      mp.y >= wpos.y && mp.y < wpos.y + wsz.y;
+                if (inThread && ImGui::GetIO().MouseWheel > 0.0f) {
+                    s_chat_auto_scroll = false;
+                    s_chat_scroll_cooldown = 0.3f;
+                }
+            }
+            if (s_chat_scroll_cooldown > 0.0f) s_chat_scroll_cooldown -= ImGui::GetIO().DeltaTime;
+            // Was the thread at the bottom coming into this frame? (measured before this frame's content is
+            // laid out, so newly-arrived messages don't yank a scrolled-up reader.)
+            const float preScrollMaxY = ImGui::GetScrollMaxY();
+            const bool  wasAtBottom = preScrollMaxY <= 0.0f || ImGui::GetScrollY() >= preScrollMaxY - 4.0f;
             bool atBottom = true;
             const ImVec2 msgWinMin = ImGui::GetWindowPos();
             const ImVec2 msgWinSize = ImGui::GetWindowSize();
+            // Jump-to-latest pill geometry — computed here so the clear-on-empty-click below can exclude
+            // the pill (a pill click shouldn't drop an active selection) and the pill draw below reuses it.
+            const ImVec2 jumpPillMin(msgWinMin.x + msgWinSize.x - 88.0f * dp, msgWinMin.y + msgWinSize.y - 34.0f * dp);
+            const ImVec2 jumpPillMax(jumpPillMin.x + 78.0f * dp, jumpPillMin.y + 26.0f * dp);
             {
                 ImDrawList* dl = ImGui::GetWindowDrawList();
                 // Bubble style / accent / density / text-size from chat customization settings.
@@ -985,6 +1267,8 @@ void RenderChatTab(App* app)
                 ImFont* icf = material::Type().iconSmall();
                 const float icfSz = scaledSize(icf);
                 std::int64_t prevTs = -1; int prevDir = -1; std::int64_t prevDay = -1;
+                bool anyMsgClicked = false;   // did a left-click this frame land on a bubble / copy button?
+                const ImTextureID drgxTex = app->getDrgxEmojiTexture();   // ":drgx:" inline emoji
                 for (std::size_t mi = 0; mi < messages.size(); ++mi) {
                     const auto& m = messages[mi];
                     ImGui::PushID(static_cast<int>(mi));
@@ -1039,7 +1323,14 @@ void RenderChatTab(App* app)
                     }
 
                     // ── Direction-aligned bubble (rounding/fill/accent from settings; grouped corners).
-                    const ImVec2 tsz = nameFont->CalcTextSizeA(bodySz, innerW, innerW, m.body.c_str());
+                    // Body is laid out paragraph-by-paragraph so explicit newlines get extra leading.
+                    // A body containing ":drgx:" uses the richer inline-image flow (drgx tile → mark);
+                    // plain bodies keep the tighter text-only path so they're unaffected.
+                    const float paraGap = bodySz * 0.35f;
+                    const bool hasDrgx = m.body.find(kDrgxToken) != std::string::npos;
+                    const ImVec2 tsz = hasDrgx
+                        ? layoutChatBodyRich(nullptr, nameFont, bodySz, m.body, innerW, paraGap, ImVec2(0, 0), 0, drgxTex)
+                        : layoutChatBody(nullptr, nameFont, bodySz, m.body, innerW, paraGap, ImVec2(0, 0), 0);
                     const float bw = std::min(maxBubbleW, tsz.x + 2.0f * bpad);
                     const float bh = tsz.y + 2.0f * bpad;
                     const ImVec2 cur = ImGui::GetCursorScreenPos();
@@ -1060,8 +1351,48 @@ void RenderChatTab(App* app)
                         }
                     }
                     dl->AddRectFilled(bmin, bmax, bubCol, bround, rf);
-                    dl->AddText(nameFont, bodySz, ImVec2(bx + bpad, cur.y + bpad), material::OnSurface(),
-                                m.body.c_str(), nullptr, innerW);
+
+                    // ── Text selection: click-drag inside the bubble selects a byte range of the body.
+                    // Skipped for ":drgx:" messages — their inline-image layout (layoutChatBodyRich) doesn't
+                    // match the plain-text hit-test/highlight geometry, so a selection would misalign.
+                    // (Right-click "copy" still copies the whole message.)
+                    const ImVec2 bodyOrigin(bx + bpad, cur.y + bpad);
+                    const bool selfSel = (!hasDrgx && s_msgsel_cid == s_selected_cid && s_msgsel_index == static_cast<int>(mi));
+                    if (!hasDrgx && ImGui::IsMouseHoveringRect(bmin, bmax) && ImGui::IsMouseClicked(ImGuiMouseButton_Left)) {
+                        s_msgsel_cid = s_selected_cid; s_msgsel_index = static_cast<int>(mi);
+                        s_msgsel_anchor = s_msgsel_head = static_cast<int>(
+                            chatBodyHitTest(nameFont, bodySz, m.body, innerW, paraGap, bodyOrigin, ImGui::GetMousePos()));
+                        s_msgsel_dragging = true;
+                        anyMsgClicked = true;
+                    }
+                    if (selfSel && s_msgsel_dragging) {
+                        if (ImGui::IsMouseDown(ImGuiMouseButton_Left))
+                            s_msgsel_head = static_cast<int>(
+                                chatBodyHitTest(nameFont, bodySz, m.body, innerW, paraGap, bodyOrigin, ImGui::GetMousePos()));
+                        else
+                            s_msgsel_dragging = false;
+                    }
+                    // Highlight the selected range (behind the text) — one rect per wrapped line segment.
+                    if (selfSel && s_msgsel_anchor != s_msgsel_head) {
+                        const int a = std::min(s_msgsel_anchor, s_msgsel_head);
+                        const int b2 = std::max(s_msgsel_anchor, s_msgsel_head);
+                        for (const auto& ln : chatBodyLines(nameFont, bodySz, m.body, innerW, paraGap)) {
+                            const int ls = std::max(a, static_cast<int>(ln.b));
+                            const int le = std::min(b2, static_cast<int>(ln.e));
+                            if (ls >= le) continue;
+                            const float x0 = nameFont->CalcTextSizeA(bodySz, FLT_MAX, 0.0f, m.body.c_str() + ln.b, m.body.c_str() + ls).x;
+                            const float x1 = nameFont->CalcTextSizeA(bodySz, FLT_MAX, 0.0f, m.body.c_str() + ln.b, m.body.c_str() + le).x;
+                            dl->AddRectFilled(ImVec2(bodyOrigin.x + x0, bodyOrigin.y + ln.y),
+                                              ImVec2(bodyOrigin.x + x1, bodyOrigin.y + ln.y + bodySz),
+                                              material::WithAlpha(material::Primary(), 80));
+                        }
+                    }
+                    if (hasDrgx)
+                        layoutChatBodyRich(dl, nameFont, bodySz, m.body, innerW, paraGap,
+                                           ImVec2(bx + bpad, cur.y + bpad), material::OnSurface(), drgxTex);
+                    else
+                        layoutChatBody(dl, nameFont, bodySz, m.body, innerW, paraGap,
+                                       ImVec2(bx + bpad, cur.y + bpad), material::OnSurface());
 
                     // Peer avatar beside the LAST incoming bubble of a run (Tier 3).
                     if (!outgoing && lastInGroup) {
@@ -1088,6 +1419,31 @@ void RenderChatTab(App* app)
                         ImGui::EndPopup();
                     }
 
+                    // Copy button for an active selection — at the bubble TOP, on the OPPOSITE side (an
+                    // incoming bubble sits left → button to its right; an outgoing bubble sits right →
+                    // button to its left). Copies the selected substring of the body.
+                    if (selfSel && s_msgsel_anchor != s_msgsel_head) {
+                        const int a = std::min(s_msgsel_anchor, s_msgsel_head);
+                        const int b2 = std::max(s_msgsel_anchor, s_msgsel_head);
+                        const float cbs = 22.0f * dp;
+                        const float cbx = outgoing ? (bmin.x - cbs - 4.0f * dp) : (bmax.x + 4.0f * dp);
+                        const ImVec2 cbmin(cbx, bmin.y), cbmax(cbx + cbs, bmin.y + cbs);
+                        const bool cbhov = ImGui::IsMouseHoveringRect(cbmin, cbmax);
+                        dl->AddRectFilled(cbmin, cbmax, cbhov ? material::Primary()
+                                                              : material::WithAlpha(material::Primary(), 210), 5.0f * dp);
+                        const float gs = icfSz * 0.78f;
+                        const ImVec2 gsz = icf->CalcTextSizeA(gs, FLT_MAX, 0.0f, ICON_MD_CONTENT_COPY);
+                        dl->AddText(icf, gs, ImVec2(cbmin.x + (cbs - gsz.x) * 0.5f, cbmin.y + (cbs - gsz.y) * 0.5f),
+                                    IM_COL32(255, 255, 255, 235), ICON_MD_CONTENT_COPY);
+                        if (cbhov) {
+                            ImGui::SetMouseCursor(ImGuiMouseCursor_Hand);
+                            if (ImGui::IsMouseClicked(ImGuiMouseButton_Left)) {
+                                ImGui::SetClipboardText(m.body.substr(a, b2 - a).c_str());
+                                anyMsgClicked = true;
+                            }
+                        }
+                    }
+
                     // Delivery status for your messages: clock while sending, check once broadcast (Tier 2).
                     if (outgoing && !failed && (sending || lastInGroup)) {
                         const char* glyph = sending ? ICON_MD_SCHEDULE : ICON_MD_DONE;
@@ -1120,27 +1476,53 @@ void RenderChatTab(App* app)
                     ImGui::PopID();
                     prevTs = m.timestamp; prevDir = static_cast<int>(outgoing); prevDay = day;
                 }
-                if (s_scroll_to_cid == s_selected_cid) {
+                // A left-click inside the thread that hit no bubble or copy button clears the selection —
+                // except a click on the jump-to-latest pill, which is navigation, not a deselect.
+                if (ImGui::IsMouseClicked(ImGuiMouseButton_Left) && !anyMsgClicked && ImGui::IsWindowHovered()
+                    && !ImGui::IsMouseHoveringRect(jumpPillMin, jumpPillMax)) {
+                    s_msgsel_cid.clear(); s_msgsel_index = -1; s_msgsel_dragging = false;
+                }
+                // Pin to the newest message when explicitly requested (send / conversation switch) or when
+                // auto-scroll is armed and the thread was already at the bottom (so new messages follow).
+                if (s_scroll_to_cid == s_selected_cid || (s_chat_auto_scroll && wasAtBottom)) {
                     ImGui::SetScrollHereY(1.0f);
                     s_scroll_to_cid.clear();
                 }
-                atBottom = ImGui::GetScrollY() >= ImGui::GetScrollMaxY() - 4.0f;
+                atBottom = ImGui::GetScrollMaxY() <= 0.0f || ImGui::GetScrollY() >= ImGui::GetScrollMaxY() - 4.0f;
+                // Re-arm auto-scroll once the user returns to the bottom (after the wheel cooldown).
+                if (atBottom && s_chat_scroll_cooldown <= 0.0f) s_chat_auto_scroll = true;
+
+                // Jump-to-latest pill when scrolled up (Q9). Drawn LAST and INSIDE the thread child (on the
+                // child's own draw list) so it sits on top of the messages — a parent-window draw after
+                // EndChild renders UNDER the child and gets covered by the text. PushClipRect keeps the
+                // child's content padding / scrollbar from clipping it. Hand-drawn + IsMouseHoveringRect so
+                // the click lands despite the child owning hover here (a real widget would still miss it).
+                if (!atBottom) {
+                    const ImVec2 pmin = jumpPillMin, pmax = jumpPillMax;
+                    const float pw = pmax.x - pmin.x, ph = pmax.y - pmin.y;
+                    const bool hov = ImGui::IsMouseHoveringRect(pmin, pmax);
+                    dl->PushClipRect(pmin, pmax, false);
+                    dl->AddRectFilled(pmin, pmax,
+                                      hov ? material::Primary() : material::WithAlpha(material::Primary(), 220),
+                                      ph * 0.5f);
+                    ImFont* lf = ImGui::GetFont(); const float lsz = ImGui::GetFontSize();
+                    const char* lbl = TR("chat_jump_latest");
+                    const ImVec2 tszp = lf->CalcTextSizeA(lsz, FLT_MAX, 0.0f, lbl);
+                    dl->AddText(lf, lsz, ImVec2(pmin.x + (pw - tszp.x) * 0.5f, pmin.y + (ph - tszp.y) * 0.5f),
+                                IM_COL32(255, 255, 255, 235), lbl);
+                    dl->PopClipRect();
+                    if (hov) {
+                        ImGui::SetMouseCursor(ImGuiMouseCursor_Hand);
+                        if (ImGui::IsMouseClicked(ImGuiMouseButton_Left)) {
+                            s_scroll_to_cid = sel->cid;
+                            s_chat_auto_scroll = true;      // clicking Latest re-arms follow-the-newest
+                            s_chat_scroll_cooldown = 0.0f;
+                        }
+                    }
+                }
             }
             ImGui::EndChild();
             ImGui::PopStyleVar(2);  // ##ChatMessages WindowPadding + zeroed vertical ItemSpacing
-            // Jump-to-latest pill when scrolled up (Q9). SetCursorScreenPos moves the parent cursor to
-            // the child's bottom edge; save + restore it so the composer footer below stays anchored
-            // (otherwise it renders ~8px too high only while the pill is shown).
-            if (!atBottom) {
-                const ImVec2 savedCursor = ImGui::GetCursorScreenPos();
-                const ImVec2 pill(msgWinMin.x + msgWinSize.x - 84.0f * dp, msgWinMin.y + msgWinSize.y - 34.0f * dp);
-                ImGui::SetCursorScreenPos(pill);
-                ImGui::PushStyleColor(ImGuiCol_Button,        ImGui::ColorConvertU32ToFloat4(material::WithAlpha(material::Primary(), 220)));
-                ImGui::PushStyleColor(ImGuiCol_ButtonHovered, ImGui::ColorConvertU32ToFloat4(material::Primary()));
-                if (ImGui::Button(TR("chat_jump_latest"), ImVec2(74.0f * dp, 26.0f * dp))) s_scroll_to_cid = sel->cid;
-                ImGui::PopStyleColor(2);
-                ImGui::SetCursorScreenPos(savedCursor);
-            }
             // Composer is rendered OUTSIDE this box, directly below it (see after EndChild).
         } else {
             if (convs.empty()) centeredEmptyState(ICON_MD_FORUM, TR("chat_empty_title"), TR("chat_empty_start"));
@@ -1148,6 +1530,8 @@ void RenderChatTab(App* app)
         }
     }
     ImGui::EndChild();
+    ImGui::PopStyleColor();   // ##ChatThread transparent ChildBg (GetItemRect below still reads the child)
+    ImGui::PopStyleVar();     // ##ChatThread inner WindowPadding
 
     // ── Composer — OUTSIDE / below the bordered message box, spanning its width. No divider above it.
     // Layout (all placed by absolute screen pos so nothing wraps to the window's left edge): a thin
@@ -1159,6 +1543,7 @@ void RenderChatTab(App* app)
         const float cx = boxMin.x;
         const float cw = boxMax.x - boxMin.x;
         if (sel->peerPubKey.empty()) {
+            s_composerTargetH = composerCtrlH;   // no editable composer here — keep the strip collapsed
             ImGui::SetCursorScreenPos(ImVec2(cx, boxMax.y + 8.0f * tdp));
             ImGui::PushFont(metaFont);
             ImGui::PushStyleColor(ImGuiCol_Text, material::OnSurfaceMedium());
@@ -1168,31 +1553,36 @@ void RenderChatTab(App* app)
             ImGui::PopStyleColor();
             ImGui::PopFont();
         } else {
-            // Multi-line composer (Q6). Enter behavior is setting-dependent (see below). A live byte
-            // counter tracks the on-chain body cap = (512 − len("utf8:"))/2 − secretstream ABYTES.
-            static constexpr int kBodyMaxBytes = (512 - 5) / 2 - 17;   // = 236 (see chat_outgoing.cpp)
+            // Multi-line composer (Q6). Enter behavior is setting-dependent (see below). Input is
+            // hard-capped to the on-chain body byte budget; usage is shown as a radial gauge in the box.
+            const int   kBodyMaxBytes = kChatBodyMaxBytes;
             const float sendW   = 80.0f * tdp;   // scaled so the translated label never clips (B3)
             const float emojiBtn = 28.0f * tdp;
             const float inGap   = 6.0f * tdp;
             const int   used    = static_cast<int>(std::strlen(s_compose));
-            const bool  overCap = used > kBodyMaxBytes;
+            const bool  overCap = used > kBodyMaxBytes;   // defensive — the hard byte cap should prevent this
 
-            // Thin counter row (right-aligned) just under the box; over-cap tints + prefixes a label.
-            std::string counterLine = std::to_string(used) + " / " + std::to_string(kBodyMaxBytes);
-            if (overCap) counterLine = std::string(TR("chat_len_over")) + "   " + counterLine;
-            const float cwid = metaFont->CalcTextSizeA(metaSz, FLT_MAX, 0.0f, counterLine.c_str()).x;
-            ImGui::GetWindowDrawList()->AddText(metaFont, metaSz,
-                ImVec2(cx + cw - cwid, boxMax.y + 3.0f * tdp),
-                overCap ? material::Error() : material::OnSurfaceMedium(), counterLine.c_str());
+            // Fraction of the on-chain cap used, for the radial gauge (drawn inside the input, below).
+            const float frac = kBodyMaxBytes > 0 ? static_cast<float>(used) / kBodyMaxBytes : 0.0f;
 
-            // Input row, flush with the strip/window bottom: [emoji] [input] [Send].
+            // Input row: [emoji] [input] [Send]. The input's TOP is pinned 10px below the message box and
+            // it grows DOWNWARD as it gets taller (the thread above shrinks), so the row bottom stays put.
             const float rowY   = boxMax.y + composerAreaH - composerBoxH;
             const float inputX = cx + emojiBtn + inGap;
-            const float inputW = std::max(60.0f * tdp, cw - emojiBtn - 2.0f * inGap - sendW);
+            const float ctrlY  = rowY + composerBoxH - composerCtrlH;   // bottom-aligned row for side controls
+            // Radial byte gauge sits in the input box's bottom-right corner; a fixed small size (tied to
+            // the line height, NOT the animated box height) with a reserved right slot so text never
+            // reaches it. Geometry first so the input width floor can guarantee room for both.
+            const float ringR    = std::max(7.0f, lineH * 0.42f);
+            const float ringPad  = 9.0f * tdp;
+            const float ringSlot = 2.0f * ringR + ringPad * 1.6f;
+            const float inputW = std::max(ringSlot + 48.0f * tdp, cw - emojiBtn - 2.0f * inGap - sendW);
             const float sendX  = inputX + inputW + inGap;
+            const float textW  = std::max(40.0f * tdp, inputW - ringSlot);   // input area, left of the ring
+            const ImVec2 ringC(inputX + inputW - ringPad - ringR, rowY + composerBoxH - ringPad - ringR);
 
-            // Emoji toggle on the left, vertically centered in the input row.
-            ImGui::SetCursorScreenPos(ImVec2(cx, rowY + (composerBoxH - emojiBtn) * 0.5f));
+            // Emoji toggle on the left, bottom-aligned with the input row (centered in the control height).
+            ImGui::SetCursorScreenPos(ImVec2(cx, ctrlY + (composerCtrlH - emojiBtn) * 0.5f));
             {
                 material::IconButtonStyle es;
                 es.hoverBg    = material::WithAlpha(material::OnSurface(), 30);
@@ -1204,33 +1594,123 @@ void RenderChatTab(App* app)
                     s_emoji_search[0] = '\0';
                 }
             }
-            // Input.
+            // Input — frosted so it blurs the backdrop like the panes above (glass behind + transparent
+            // FrameBg); a flat FrameBg showed the sharp texture.
+            {
+                ImDrawList* cdl = ImGui::GetWindowDrawList();
+                material::GlassPanelSpec g; g.rounding = 8.0f * tdp; g.fillAlpha = 16; g.borderAlpha = 34;
+                material::DrawGlassPanel(cdl, ImVec2(inputX, rowY),
+                                         ImVec2(inputX + inputW, rowY + composerBoxH), g);
+            }
+            ImGui::PushStyleColor(ImGuiCol_FrameBg,        IM_COL32(0, 0, 0, 0));
+            ImGui::PushStyleColor(ImGuiCol_FrameBgHovered, IM_COL32(0, 0, 0, 0));
+            ImGui::PushStyleColor(ImGuiCol_FrameBgActive,  IM_COL32(0, 0, 0, 0));
+            // FramePadding gives the text a left inset (so it doesn't hug the box edge) and, since the
+            // collapsed box is exactly one line + 2×VPad tall, vertically centers a single line.
+            ImGui::PushStyleVar(ImGuiStyleVar_FramePadding, ImVec2(12.0f * tdp, composerVPad));
             ImGui::SetCursorScreenPos(ImVec2(inputX, rowY));
-            // Enter-to-send (setting): on → Enter sends + Ctrl+Enter newline; off → Enter is a newline and
-            // the Send button is the only way to send. NOTE: without EnterReturnsTrue, InputTextMultiline
-            // returns true on EVERY edit (value-changed), so in off-mode the return value must NOT drive
-            // submit — otherwise typing one character would fire a send.
+            // Enter-to-send (setting): on → Enter sends, Shift+Enter makes a newline (Ctrl+Enter too); off
+            // → Enter is a newline and the Send button is the only way to send. EnterReturnsTrue needs
+            // CtrlEnterForNewLine alongside it or multiline plain-Enter inserts a '\n' instead of
+            // validating (imgui_widgets.cpp:5118). Shift+Enter is handled in composeInputCallback since
+            // ImGui's exact-modifier Enter shortcut ignores it. CallbackAlways runs that handler.
             const bool enterSends = !app->settings() || app->settings()->getChatEnterSends();
-            const ImGuiInputTextFlags composeFlags = enterSends
-                ? (ImGuiInputTextFlags_EnterReturnsTrue | ImGuiInputTextFlags_CtrlEnterForNewLine)
-                : ImGuiInputTextFlags_None;
-            const bool inputReturned = ImGui::InputTextMultiline("##compose", s_compose, sizeof(s_compose),
-                              ImVec2(inputW, composerBoxH), composeFlags);
-            bool submit = enterSends && inputReturned;   // off-mode sends only via the Send button
-            // Send.
-            ImGui::SetCursorScreenPos(ImVec2(sendX, rowY));
+            // WordWrap: long lines wrap to the next visual line (the box grows) instead of scrolling the
+            // text horizontally off the left edge.
+            ImGuiInputTextFlags composeFlags = ImGuiInputTextFlags_CallbackAlways | ImGuiInputTextFlags_WordWrap;
+            if (enterSends)
+                composeFlags |= ImGuiInputTextFlags_EnterReturnsTrue | ImGuiInputTextFlags_CtrlEnterForNewLine;
+            // Hard-cap the byte length at the on-chain budget: passing kBodyMaxBytes+1 as the buffer size
+            // stops ImGui from accepting more input (UTF-8-safe), so the user can't type past the cap.
+            const bool inputReturned = ImGui::InputTextMultiline("##compose", s_compose, kBodyMaxBytes + 1,
+                              ImVec2(textW, composerBoxH), composeFlags, composeInputCallback);
+            ImGui::PopStyleVar();      // FramePadding
+            ImGui::PopStyleColor(3);   // composer FrameBg (transparent — glass shows through)
+
+            // Measure the wrapped content height to drive the auto-grow (consumed next frame at the top).
+            // Wrap width mirrors ImGui's internal InputText wrap = frame inner width (textW − 2×FramePadding.x),
+            // so CalcTextSize's wrap matches what the widget renders.
+            {
+                const float wrapW = std::max(1.0f, textW - 2.0f * 12.0f * tdp);
+                float contentH = (s_compose[0] == '\0') ? lineH
+                                 : ImGui::CalcTextSize(s_compose, nullptr, false, wrapW).y;
+                const size_t clen = std::strlen(s_compose);
+                if (clen > 0 && s_compose[clen - 1] == '\n') contentH += lineH;   // trailing empty line
+                contentH = std::min(contentH, kMaxComposerLines * lineH);
+                s_composerTargetH = std::max(lineH, contentH) + 2.0f * composerVPad;
+            }
+
+            // ── Radial byte gauge (replaces the old numeric counter): a ring in the input's right edge
+            //    that fills clockwise and shifts green→amber→red as the message nears the on-chain cap.
+            //    Full + red at/over the cap (Send is disabled there); exact count shows on hover.
+            {
+                ImDrawList* gdl = ImGui::GetWindowDrawList();
+                auto lerpCol = [](ImU32 a, ImU32 b, float t) {
+                    if (t < 0.0f) t = 0.0f; else if (t > 1.0f) t = 1.0f;
+                    const ImVec4 fa = ImGui::ColorConvertU32ToFloat4(a);
+                    const ImVec4 fb = ImGui::ColorConvertU32ToFloat4(b);
+                    return ImGui::GetColorU32(ImVec4(fa.x + (fb.x - fa.x) * t, fa.y + (fb.y - fa.y) * t,
+                                                     fa.z + (fb.z - fa.z) * t, fa.w + (fb.w - fa.w) * t));
+                };
+                const ImU32 green = material::Success(), amber = material::Warning(), red = material::Error();
+                ImU32 fillCol;
+                if (frac < 0.75f)      fillCol = green;                      // calm until genuinely near the cap
+                else if (frac < 1.0f) { const float t = (frac - 0.75f) / 0.25f;
+                                        fillCol = (t < 0.5f) ? lerpCol(green, amber, t / 0.5f)
+                                                             : lerpCol(amber, red, (t - 0.5f) / 0.5f); }
+                else                   fillCol = red;                        // at/over cap
+
+                const float thick = std::max(2.0f, 2.4f * tdp);
+                const float dispFrac = frac < 0.0f ? 0.0f : (frac > 1.0f ? 1.0f : frac);
+                // Faint full-ring track (alpha kept high enough to read on light skins too).
+                gdl->PathArcTo(ringC, ringR, 0.0f, IM_PI * 2.0f, 48);
+                gdl->PathStroke(material::WithAlpha(material::OnSurface(), 42), 0, thick);
+                // Progress arc from 12 o'clock, clockwise, with a rounded head.
+                if (dispFrac > 0.0001f) {
+                    const float a0 = -IM_PI * 0.5f;
+                    const float a1 = a0 + dispFrac * IM_PI * 2.0f;
+                    gdl->PathArcTo(ringC, ringR, a0, a1, 48);
+                    gdl->PathStroke(fillCol, 0, thick);
+                    gdl->AddCircleFilled(ImVec2(ringC.x + std::cos(a1) * ringR, ringC.y + std::sin(a1) * ringR),
+                                         thick * 0.6f, fillCol, 10);
+                }
+                // Exact count on hover (progressive disclosure; over-cap prefixes a label).
+                const float hitR = ringR + thick;
+                if (ImGui::IsMouseHoveringRect(ImVec2(ringC.x - hitR, ringC.y - hitR),
+                                               ImVec2(ringC.x + hitR, ringC.y + hitR))) {
+                    std::string tip = std::to_string(used) + " / " + std::to_string(kBodyMaxBytes);
+                    if (overCap) tip = std::string(TR("chat_len_over")) + "   " + tip;
+                    ImGui::BeginTooltip();
+                    ImGui::TextUnformatted(tip.c_str());
+                    ImGui::EndTooltip();
+                }
+            }
+            // Off-mode sends only via the Send button. In enter-sends mode EnterReturnsTrue makes the
+            // return value mean "validated" (plain Enter only) — Shift+Enter/edits don't set it.
+            bool submit = enterSends && inputReturned;
+            // Send — fixed height, bottom-aligned with the input row (doesn't stretch when the box grows).
+            ImGui::SetCursorScreenPos(ImVec2(sendX, ctrlY));
             ImGui::PushStyleColor(ImGuiCol_Button,        ImGui::ColorConvertU32ToFloat4(material::WithAlpha(material::Primary(), 205)));
             ImGui::PushStyleColor(ImGuiCol_ButtonHovered, ImGui::ColorConvertU32ToFloat4(material::Primary()));
             ImGui::PushStyleColor(ImGuiCol_ButtonActive,  ImGui::ColorConvertU32ToFloat4(material::WithAlpha(material::Primary(), 235)));
             ImGui::BeginDisabled(overCap || s_compose[0] == '\0');
-            if (material::TactileButton(TR("chat_send"), ImVec2(sendW, composerBoxH))) submit = true;
+            if (material::TactileButton(TR("chat_send"), ImVec2(sendW, composerCtrlH))) submit = true;
             ImGui::EndDisabled();
+            // When Send is disabled *because the message is over the cap*, explain why on hover — the
+            // gauge went red but the numeric reason is no longer always-visible.
+            if (overCap && ImGui::IsItemHovered(ImGuiHoveredFlags_AllowWhenDisabled))
+                ImGui::SetTooltip("%s  %d / %d", TR("chat_len_over"), used, kBodyMaxBytes);
             ImGui::PopStyleColor(3);
 
             if (submit && s_compose[0] != '\0' && !overCap) {
                 app->sendChatMessage(sel->cid, s_compose);
                 sodium_memzero(s_compose, sizeof(s_compose));
                 s_scroll_to_cid = sel->cid;
+                s_composerAnimH = 0.0f;   // snap back to collapsed instead of animating while unfocused
+                // Sending closes the emoji picker (it takes over the conversation-list pane) so the list
+                // reappears, and clears its search filter.
+                s_show_emoji_picker = false;
+                s_emoji_search[0] = '\0';
             }
         }
     }
@@ -1379,8 +1859,10 @@ void RenderChatSettingsControls(App* app, float contentWidth)
     // Right-align controls to the row's true right edge. The Settings tab renders us inside a GlassCard
     // whose content region isn't narrowed to the card padding, so it passes an explicit contentWidth;
     // the chat modal's dialog content region is correct, so it passes 0 (auto).
-    const float leftX = ImGui::GetCursorPosX();
-    const float rowW  = (contentWidth > 0.0f) ? contentWidth : ImGui::GetContentRegionAvail().x;
+    // leftX/rowW define the current column the rows lay out in; retargeted below
+    // to split Appearance | Messaging into two columns when the card is wide.
+    float leftX = ImGui::GetCursorPosX();
+    float rowW  = (contentWidth > 0.0f) ? contentWidth : ImGui::GetContentRegionAvail().x;
 
     // Label left, control right-aligned within [leftX, leftX+rowW]. Leaves the cursor at the control origin.
     auto beginRow = [&](const char* label) {
@@ -1445,6 +1927,17 @@ void RenderChatSettingsControls(App* app, float contentWidth)
         return result;
     };
 
+    // Two internal columns when the card is wide enough: Appearance on the left,
+    // Messaging on the right — fills the width and roughly halves the height.
+    // (Mirrors the Node & Security card.) Narrow (the chat modal) stays single-column.
+    const float chatColGap = 24.0f * dp;
+    const bool  chatTwoCol = rowW > 760.0f * dp;
+    const float chatColW   = chatTwoCol ? (rowW - chatColGap) * 0.5f : rowW;
+    const float chatBaseLeftX = leftX;
+    const float chatTopY = ImGui::GetCursorPosY();
+    float chatLeftBottomY = 0.0f;
+    if (chatTwoCol) rowW = chatColW;   // left column width
+
     // ── Appearance ────────────────────────────────────────────────────────────────
     section("chat_sec_appearance");
     // Emoji style (monochrome / color). Color needs a FreeType build (native + the cross-built Windows
@@ -1453,6 +1946,7 @@ void RenderChatSettingsControls(App* app, float contentWidth)
         int v = st->getChatEmojiColor() ? 1 : 0;
         const char* items[] = { TR("chat_emoji_mono"), TR("chat_emoji_color") };
         int nv = segmented(TR("chat_opt_emoji"), items, 2, v);
+        if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("tt_chat_emoji_style"));
         if (nv != v) { st->setChatEmojiColor(nv == 1); st->save(); app->requestFontRebuild(); }
     }
     // Bubble style (segmented) + accent color (a 6-way dropdown — too many for a segmented control).
@@ -1460,6 +1954,7 @@ void RenderChatSettingsControls(App* app, float contentWidth)
         const char* items[] = { TR("chat_bubble_rounded"), TR("chat_bubble_square"), TR("chat_bubble_minimal") };
         int v = st->getChatBubbleStyle();
         int nv = segmented(TR("chat_opt_bubble_style"), items, 3, v);
+        if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("tt_chat_bubble_style"));
         if (nv != v) { st->setChatBubbleStyle(nv); st->save(); }
     }
     {
@@ -1468,12 +1963,14 @@ void RenderChatSettingsControls(App* app, float contentWidth)
         const char* items[] = { TR("chat_accent_theme"), TR("chat_accent_blue"), TR("chat_accent_green"),
                                 TR("chat_accent_purple"), TR("chat_accent_amber"), TR("chat_accent_pink") };
         if (ImGui::Combo("##chat_baccent", &v, items, 6)) { st->setChatBubbleAccent(v); st->save(); }
+        if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("tt_chat_bubble_accent"));
     }
     // Message density (segmented).
     {
         const char* items[] = { TR("chat_density_comfortable"), TR("chat_density_compact") };
         int v = st->getChatDensity();
         int nv = segmented(TR("chat_opt_density"), items, 2, v);
+        if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("tt_chat_density"));
         if (nv != v) { st->setChatDensity(nv); st->save(); }
     }
     // Message text size (slider).
@@ -1483,6 +1980,16 @@ void RenderChatSettingsControls(App* app, float contentWidth)
         if (ImGui::SliderFloat("##chat_font", &v, 0.8f, 1.5f, "%.2fx", ImGuiSliderFlags_AlwaysClamp)) {
             st->setChatFontScale(v); st->save();
         }
+        if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("tt_chat_font_size"));
+    }
+
+    // Move Messaging into the right column (float it with Indent so every row's
+    // line-start holds the column; retarget leftX so controls right-align in it).
+    if (chatTwoCol) {
+        chatLeftBottomY = ImGui::GetCursorPosY();
+        ImGui::SetCursorPosY(chatTopY);
+        ImGui::Indent(chatColW + chatColGap);
+        leftX = chatBaseLeftX + chatColW + chatColGap;
     }
 
     // ── Messaging ─────────────────────────────────────────────────────────────────
@@ -1494,12 +2001,14 @@ void RenderChatSettingsControls(App* app, float contentWidth)
         if (ImGui::SliderFloat("##chat_poll", &v, 0.5f, 15.0f, "%.1f s", ImGuiSliderFlags_AlwaysClamp)) {
             st->setChatPollRateSec(v); st->save();
         }
+        if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("tt_chat_poll_rate"));
     }
     // Chat timestamps (segmented) — overrides the app-wide clock (Settings → General) for this tab only.
     {
         const char* items[] = { TR("chat_ts_global_short"), TR("chat_ts_24h"), TR("chat_ts_12h") };
         int v = st->getChatTimeFormat();
         int nv = segmented(TR("chat_opt_timestamp"), items, 3, v);
+        if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("tt_chat_timestamp"));
         if (nv != v) { st->setChatTimeFormat(nv); st->save(); }
     }
     // Enter-to-send (checkbox).
@@ -1507,6 +2016,15 @@ void RenderChatSettingsControls(App* app, float contentWidth)
         ImGui::Dummy(ImVec2(0.0f, rowGap));
         bool v = st->getChatEnterSends();
         if (ImGui::Checkbox(TR("chat_opt_enter_sends"), &v)) { st->setChatEnterSends(v); st->save(); }
+        if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("tt_chat_enter_sends"));
+    }
+
+    // Close the two-column band: un-indent and drop below the taller column.
+    if (chatTwoCol) {
+        ImGui::Unindent(chatColW + chatColGap);
+        const float chatRightBottomY = ImGui::GetCursorPosY();
+        ImGui::SetCursorPosX(chatBaseLeftX);
+        ImGui::SetCursorPosY(std::max(chatLeftBottomY, chatRightBottomY));
     }
 }
 

src/ui/windows/console_command_executor.cpp

@@ -4,6 +4,7 @@
 
 #include "console_command_executor.h"
 #include "console_channel.h"
+#include "console_command_reference.h"  // consoleCommandCategories / liteConsoleCommandCategories
 #include "console_input_model.h"  // BuildConsoleRpcCall
 
 #include "../../app.h"
@@ -28,6 +29,10 @@ namespace ui {
 
 using namespace material;
 
+// Classifies a diagnostics line into a console channel (defined below in an anonymous namespace); both
+// executors drain the same LiteDiagnostics ring, so declare it up front for the full-node drain.
+namespace { ConsoleChannel liteLogChannel(const std::string& line); }
+
 // ============================================================================
 // FullNodeConsoleExecutor
 // ============================================================================
@@ -172,6 +177,25 @@ void FullNodeConsoleExecutor::pollLogLines(const ConsoleAddLineFn& add)
     } else {
         last_xmrig_output_size_ = 0;  // reset so we get fresh output when it restarts
     }
+
+    // Chat diagnostics ring: chat code logs via wallet::liteLog on both variants (send lifecycle, the
+    // 0-conf harvest, the note buffer). Surface those lines here as App messages so the full-node console
+    // shows chat activity too. Same generation-cursor drain the lite console uses.
+    {
+        auto& diag = wallet::LiteDiagnostics::instance();
+        const std::uint64_t gen = diag.generation();
+        if (gen != diag_gen_) {
+            const auto snap = diag.snapshot();
+            std::size_t startIdx = 0;
+            if (diag_gen_ != static_cast<std::uint64_t>(-1)) {
+                const std::uint64_t added = gen - diag_gen_;
+                startIdx = (added >= snap.size()) ? 0 : snap.size() - static_cast<std::size_t>(added);
+            }
+            for (std::size_t i = startIdx; i < snap.size(); ++i)
+                add(snap[i], liteLogChannel(snap[i]));
+            diag_gen_ = gen;
+        }
+    }
 }
 
 void FullNodeConsoleExecutor::printHelp(const ConsoleAddLineFn& add)
@@ -194,6 +218,11 @@ void FullNodeConsoleExecutor::printHelp(const ConsoleAddLineFn& add)
     add(TR("console_tab_completion"), ConsoleChannel::Info);
 }
 
+const std::vector<ConsoleCommandCategory>* FullNodeConsoleExecutor::commandReference() const
+{
+    return &consoleCommandCategories();
+}
+
 ConsoleStatusLine FullNodeConsoleExecutor::toolbarStatus() const
 {
     ConsoleStatusLine s;
@@ -258,7 +287,7 @@ bool LiteConsoleExecutor::pollResult(std::string& result, bool& isError)
     if (!lw) return false;
     wallet::LiteConsoleResult res;
     if (!lw->takeConsoleResult(res)) return false;
-    result  = res.response.empty() ? std::string("(no output)") : res.response;
+    result  = res.response.empty() ? std::string(TR("console_no_output")) : res.response;
     isError = !res.ok;
     return true;
 }
@@ -286,6 +315,19 @@ void LiteConsoleExecutor::printHelp(const ConsoleAddLineFn& add)
     add(TR("console_help_clear"), ConsoleChannel::None);
     add(TR("console_help_help"), ConsoleChannel::None);
     add(TR("lite_console_help_passthrough"), ConsoleChannel::Info);
+    // The lite backend's own command verbs (literal command tokens, not RPC methods — mirrors the
+    // backend's get_commands() registry). Listed for discoverability: the C++ tab intercepts `help`
+    // before it can reach the backend's own HelpCommand, so its "type help" advice would dead-end.
+    add(TR("lite_console_backend_commands"), ConsoleChannel::Info);
+    add("  sync  syncstatus  balance  addresses  height  info  list  notes  encryptionstatus", ConsoleChannel::None);
+    add("  send  shield  new  seed  import  timport  export", ConsoleChannel::None);
+    add("  encrypt  decrypt  lock  unlock  rescan  save  sietch  saplingtree  coinsupply", ConsoleChannel::None);
+    add(TR("console_click_commands"), ConsoleChannel::Info);
+}
+
+const std::vector<ConsoleCommandCategory>* LiteConsoleExecutor::commandReference() const
+{
+    return &liteConsoleCommandCategories();
 }
 
 std::vector<ConsoleStatusLine> LiteConsoleExecutor::statusLines() const
@@ -294,20 +336,20 @@ std::vector<ConsoleStatusLine> LiteConsoleExecutor::statusLines() const
     wallet::LiteWalletController* lw = app_->liteWallet();
     if (lw && lw->walletOpen()) {
         const SyncInfo& sync = app_->state().sync;
-        char buf[96];
+        char buf[128];
         if (sync.syncing && !sync.isSynced()) {
             double vp = sync.verification_progress;
             if (vp < 0.0) vp = 0.0; else if (vp > 1.0) vp = 1.0;
-            std::snprintf(buf, sizeof(buf), "Syncing %.1f%%  (block %d / %d)",
-                          vp * 100.0, sync.blocks, sync.headers);
+            std::snprintf(buf, sizeof(buf), "%s %.1f%%  (block %d / %d)",
+                          TR("lite_net_syncing"), vp * 100.0, sync.blocks, sync.headers);
         } else {
-            std::snprintf(buf, sizeof(buf), "Synced  (block %d)", sync.blocks);
+            std::snprintf(buf, sizeof(buf), "%s  (block %d)", TR("lite_net_synced"), sync.blocks);
         }
         out.push_back({std::string(buf), OnSurfaceMedium(), false});
     }
     const std::string& err = app_->liteOpenError();
     if (!err.empty() && (!lw || !lw->walletOpen()))
-        out.push_back({std::string("Last error: ") + err, Error(), false});
+        out.push_back({std::string(TR("console_last_error")) + " " + err, Error(), false});
     return out;
 }
 
@@ -315,10 +357,10 @@ ConsoleStatusLine LiteConsoleExecutor::toolbarStatus() const
 {
     ConsoleStatusLine s;
     wallet::LiteWalletController* lw = app_->liteWallet();
-    if (!lw) { s.text = "No backend"; s.color = Error(); return s; }
-    if (lw->walletOpen()) { s.text = "Connected"; s.color = Success(); }
-    else if (lw->openInProgress()) { s.text = "Connecting"; s.color = Warning(); s.pulse = true; }
-    else { s.text = "Disconnected"; s.color = Error(); }
+    if (!lw) { s.text = TR("console_backend_unavailable"); s.color = Error(); return s; }
+    if (lw->walletOpen()) { s.text = TR("lite_net_connected"); s.color = Success(); }
+    else if (lw->openInProgress()) { s.text = TR("lite_net_connecting"); s.color = Warning(); s.pulse = true; }
+    else { s.text = TR("lite_net_disconnected"); s.color = Error(); }
     return s;
 }
 

src/ui/windows/console_command_executor.h

@@ -25,6 +25,8 @@ namespace dragonx {
 class App;
 namespace ui {
 
+struct ConsoleCommandCategory;  // console_command_reference.h — command-reference table
+
 using ConsoleAddLineFn = std::function<void(const std::string&, ConsoleChannel)>;
 
 struct ConsoleStatusLine {
@@ -64,7 +66,13 @@ public:
     virtual void pollLogLines(const ConsoleAddLineFn& add) { (void)add; }
 
     // UI-chrome capabilities.
-    virtual bool hasRpcReference() const { return false; } // show the RPC command-reference popup
+    // True when this backend speaks JSON-RPC to a daemon (the full node). Gates daemon-specific
+    // console behavior (the 'stop' shutdown confirm, "not connected to daemon" wording) and the
+    // command-reference modal's JSON string-arg quoting — the lite backend takes bare tokens.
+    virtual bool hasRpcReference() const { return false; }
+    // The command-reference table this backend offers (browsed by the console's reference modal),
+    // or nullptr for none. Full node = the JSON-RPC reference; lite = its own backend verbs.
+    virtual const std::vector<ConsoleCommandCategory>* commandReference() const { return nullptr; }
     // Which log-filter toggles the toolbar should show (default: none).
     virtual ConsoleLogFilterCaps logFilterCaps() const { return {}; }
 
@@ -88,6 +96,7 @@ public:
     bool pollResult(std::string& result, bool& isError) override;
     void pollLogLines(const ConsoleAddLineFn& add) override;
     bool hasRpcReference() const override { return true; }
+    const std::vector<ConsoleCommandCategory>* commandReference() const override;
     // Full node: daemon/xmrig log, errors-only, RPC trace, and app messages.
     ConsoleLogFilterCaps logFilterCaps() const override { return {true, true, true, true}; }
     void printHelp(const ConsoleAddLineFn& add) override;
@@ -104,6 +113,9 @@ private:
     bool   last_rpc_connected_      = false;
     std::deque<std::pair<std::string, bool>> results_;  // {text, isError}
     std::mutex results_mutex_;
+    // Chat diagnostics ring cursor: chat code logs via wallet::liteLog on BOTH variants, so the full-node
+    // console surfaces those lines (as App messages) too — mirrors LiteConsoleExecutor's diag drain.
+    std::uint64_t diag_gen_ = static_cast<std::uint64_t>(-1);
 };
 
 // ── Lite: diagnostics ring + backend console command ─────────────────────────
@@ -119,6 +131,7 @@ public:
     // Lite: no daemon log / RPC trace — its diagnostics ring maps to the App + Error
     // channels, so offer errors-only + app-messages (plus the always-shown text filter).
     ConsoleLogFilterCaps logFilterCaps() const override { return {false, true, false, true}; }
+    const std::vector<ConsoleCommandCategory>* commandReference() const override;
     void printHelp(const ConsoleAddLineFn& add) override;
     std::vector<ConsoleStatusLine> statusLines() const override;
     ConsoleStatusLine toolbarStatus() const override;

src/ui/windows/console_command_reference.cpp

@@ -280,6 +280,105 @@ const ConsoleCommandEntry kUtilityCommands[] = {
      "reconsiderblock \"0000000000abc123\"", "undo invalidate accept block again re-enable block restore chain reconsider fix rollback fork", true},
 };
 
+// ============================================================================
+// Lite backend command set — the verbs the SDXL lite backend accepts (see its
+// commands.rs get_commands()). Unlike the full node these are NOT JSON-RPC: the
+// backend takes plain, space-separated tokens (no quoting), so the reference
+// modal inserts them bare. clear/help/quit are intentionally omitted — the C++
+// console tab intercepts those before they reach the backend.
+// ============================================================================
+
+const ConsoleCommandEntry kLiteWalletCommands[] = {
+    {"balance", "Show your DRGX balance", "",
+     "Shows the DRGX balance held in this wallet across all its shielded and transparent addresses.",
+     "balance", "money funds amount total holdings"},
+    {"addresses", "List all addresses in the wallet", "",
+     "Lists every address this wallet owns \xE2\x80\x94 shielded (zs1...) and transparent (R.../t...) \xE2\x80\x94 so you can pick one to receive to.",
+     "addresses", "receive address list wallet mine deposit"},
+    {"new", "Create a new address in this wallet", "type",
+     "Creates a fresh receive address. Pass zs for a shielded (private) sapling address, or R (a capital R) for a transparent one \xE2\x80\x94 those exact tokens (case-sensitive).",
+     "new zs", "create address receive generate new shielded transparent zs"},
+    {"list", "List all transactions in the wallet", "",
+     "Shows the wallet's transaction history \xE2\x80\x94 sends, receives and shields \xE2\x80\x94 with amounts, addresses and confirmations.",
+     "list", "history transactions txs payments activity sent received"},
+    {"notes", "List sapling notes and UTXOs", "[all]",
+     "Lists the individual shielded notes and transparent UTXOs that make up your balance. Pass all to include spent ones.",
+     "notes", "utxo notes unspent coins inputs sapling"},
+    {"info", "Get the lightwalletd server's info", "",
+     "Reports the lightwalletd server the wallet is connected to \xE2\x80\x94 its version, chain and block height.",
+     "info", "server node lightwalletd version connection status"},
+};
+
+const ConsoleCommandEntry kLiteSyncCommands[] = {
+    {"sync", "Download compact blocks and sync to the server", "",
+     "Fetches new compact blocks from the lightwalletd server and scans them for transactions belonging to this wallet.",
+     "sync", "update refresh scan blocks download catch up"},
+    {"syncstatus", "Get the sync status of the wallet", "",
+     "Reports how far the wallet has synced \xE2\x80\x94 whether a sync is in progress and the block it has reached.",
+     "syncstatus", "progress status syncing scanning percent blocks"},
+    {"height", "Get the latest block height the wallet is at", "",
+     "Shows the block height the wallet has scanned up to. Compare with the network height to gauge sync.",
+     "height", "block height number chain tip synced"},
+    {"rescan", "Rescan the wallet from scratch", "",
+     "Discards the scanned state and re-downloads/re-scans every block from the wallet's birthday. Slow, but fixes a stuck or incomplete balance.",
+     "rescan", "rescan resync repair fix balance rebuild from scratch"},
+    {"save", "Save the wallet file to disk", "",
+     "Writes the current wallet state to disk. The wallet also saves automatically after a sync or send.",
+     "save", "save persist write disk store"},
+};
+
+const ConsoleCommandEntry kLiteSendCommands[] = {
+    {"send", "Send DRGX to an address", "[{\"address\":\"zs1...\",\"amount\":0}]",
+     "Sends DRGX from the console using a JSON array of recipients (the Send tab is the easy way; this is the power-user form). amount is in puposhis (the base unit); memo is optional and delivered privately to shielded recipients.",
+     "send [{\"address\":\"zs1exampleaddress\",\"amount\":100000000,\"memo\":\"thanks\"}]",
+     "pay transfer send spend money transaction json", true},
+    {"shield", "Shield transparent DRGX into a sapling address", "[address]",
+     "Moves your transparent (public) DRGX into a shielded sapling address for privacy. With no address it shields to the wallet's own sapling address.",
+     "shield", "shield private sapling transparent move protect", true},
+};
+
+const ConsoleCommandEntry kLiteKeyCommands[] = {
+    {"seed", "Display the wallet seed phrase", "",
+     "Reveals the seed phrase that backs up this wallet. Anyone who sees it can spend your funds \xE2\x80\x94 keep it secret and offline.",
+     "seed", "seed phrase mnemonic backup recovery words secret", true},
+    {"export", "Export the private key for an address", "[address]",
+     "Prints the private/spending key for a wallet address \xE2\x80\x94 anyone with it controls the funds. With no address it exports every key.",
+     "export zs1exampleaddress", "export private key spending backup secret", true},
+    {"import", "Import a spending or viewing key", "key",
+     "Imports a shielded spending or viewing key (pass just the key). The wallet rescans from the sapling activation height to find the key's transactions.",
+     "import somekey", "import restore key spending viewing add watch"},
+    {"timport", "Import a transparent WIF private key", "wif",
+     "Imports a transparent private key in WIF format (begins with U, 5, K or L) so the wallet can spend its funds.",
+     "timport somewifkey", "import transparent wif private key taddr"},
+    {"encrypt", "Encrypt the wallet with a password", "password",
+     "Encrypts the wallet with a password and locks it immediately. You will need the password to send or reveal keys afterwards. If you forget it, only the seed phrase can recover the wallet.",
+     "encrypt strongpassword", "encrypt password protect lock secure passphrase", true},
+    {"decrypt", "Completely remove wallet encryption", "password",
+     "Permanently removes the wallet's password encryption, leaving it unprotected on disk. Requires the current password.",
+     "decrypt strongpassword", "decrypt remove encryption password unprotect", true},
+    {"unlock", "Unlock the wallet for spending", "password",
+     "Temporarily unlocks an encrypted wallet so it can send or reveal keys. Use lock to re-lock it.",
+     "unlock strongpassword", "unlock password spend open temporarily"},
+    {"lock", "Lock a temporarily-unlocked wallet", "",
+     "Re-locks a wallet that was unlocked for spending, without removing its encryption.",
+     "lock", "lock secure re-lock protect close"},
+    {"encryptionstatus", "Check if the wallet is encrypted and locked", "",
+     "Reports whether the wallet is encrypted and, if so, whether it is currently locked or unlocked.",
+     "encryptionstatus", "encryption status locked unlocked encrypted state"},
+};
+
+const ConsoleCommandEntry kLiteAdvancedCommands[] = {
+    {"sietch", "Create a Sietch address", "[type]",
+     "Creates a Sietch address, used for enhanced-privacy sends. Pass zs for a sapling Sietch address.",
+     "sietch zs", "sietch privacy address decoy sapling advanced"},
+    {"saplingtree", "Dump the latest Sapling commitment tree (debug)", "",
+     "Prints the latest Sapling commitment tree state \xE2\x80\x94 a debugging aid, not needed for everyday use.",
+     "saplingtree", "sapling tree commitment debug advanced merkle"},
+    {"coinsupply", "Get the coin supply info", "",
+     "Reports coin-supply figures for the chain as seen by the wallet's server.",
+     "coinsupply", "supply coins total emission circulating amount"},
+};
+
 } // namespace
 
 const std::vector<ConsoleCommandCategory>& consoleCommandCategories()
@@ -296,5 +395,17 @@ const std::vector<ConsoleCommandCategory>& consoleCommandCategories()
     return categories;
 }
 
+const std::vector<ConsoleCommandCategory>& liteConsoleCommandCategories()
+{
+    static const std::vector<ConsoleCommandCategory> categories = {
+        {"Wallet",          kLiteWalletCommands,   CountOf(kLiteWalletCommands)},
+        {"Sync",            kLiteSyncCommands,     CountOf(kLiteSyncCommands)},
+        {"Send",            kLiteSendCommands,     CountOf(kLiteSendCommands)},
+        {"Keys & Security", kLiteKeyCommands,      CountOf(kLiteKeyCommands)},
+        {"Advanced",        kLiteAdvancedCommands, CountOf(kLiteAdvancedCommands)},
+    };
+    return categories;
+}
+
 } // namespace ui
 } // namespace dragonx

src/ui/windows/console_command_reference.h

@@ -23,7 +23,12 @@ struct ConsoleCommandCategory {
     int count;
 };
 
+// The full-node daemon's JSON-RPC command reference (browsed by the console's command-reference modal).
 const std::vector<ConsoleCommandCategory>& consoleCommandCategories();
 
+// The lite backend's own command set (the ~25 verbs the SDXL backend accepts) — the lite-variant
+// analog of the RPC reference, shown by the same modal when the executor is the lite one.
+const std::vector<ConsoleCommandCategory>& liteConsoleCommandCategories();
+
 } // namespace ui
 } // namespace dragonx

src/ui/windows/console_tab.cpp

@@ -464,12 +464,18 @@ void ConsoleTab::render(ConsoleCommandExecutor& exec)
     ImGui::EndChild();
 }
 
-void ConsoleTab::renderCommandsPopupModal()
+void ConsoleTab::renderCommandsPopupModal(ConsoleCommandExecutor* exec)
 {
     if (!show_commands_popup_) {
         return;
     }
-    renderCommandsPopup();
+    // Need a backend that offers a reference table. If the console hasn't built its executor yet
+    // (popup can't have been opened normally) or the backend has none, just dismiss.
+    if (!exec || !exec->commandReference()) {
+        show_commands_popup_ = false;
+        return;
+    }
+    renderCommandsPopup(*exec);
 }
 
 void ConsoleTab::renderToolbar(ConsoleCommandExecutor& exec)
@@ -544,14 +550,16 @@ void ConsoleTab::renderToolbar(ConsoleCommandExecutor& exec)
     
     ImGui::SameLine();
     
-    // Commands reference button (full-node RPC reference only)
-    if (exec.hasRpcReference()) {
+    // Commands reference button — shown whenever the backend offers a reference table (full-node
+    // JSON-RPC commands, or the lite backend's own verbs).
+    if (exec.commandReference()) {
         if (TactileButton(TR("console_commands"), ImVec2(0, 0), schema::UI().resolveFont("button"))) {
             command_search_[0] = '\0';   // fresh search each open (dismiss paths don't all reset it)
             show_commands_popup_ = true;
         }
         if (ImGui::IsItemHovered()) {
-            material::Tooltip("%s", TR("console_show_rpc_ref"));
+            material::Tooltip("%s", exec.hasRpcReference() ? TR("console_show_rpc_ref")
+                                                           : TR("console_show_backend_ref"));
         }
         ImGui::SameLine();
     }
@@ -572,12 +580,14 @@ void ConsoleTab::renderToolbar(ConsoleCommandExecutor& exec)
     ImGui::SameLine();
     {
         float btnSz = ImGui::GetFrameHeight();
+        // Capture the flag BEFORE the button can flip it — the push/pop guards must use the SAME value,
+        // or a click leaves the colour stack unbalanced (ImGui then draws a red error rect on the window).
+        const bool dim = !s_line_accents_enabled;
         const char* icon = s_line_accents_enabled ? ICON_MD_FORMAT_COLOR_FILL : ICON_MD_FORMAT_COLOR_RESET;
-        if (!s_line_accents_enabled)
-            ImGui::PushStyleColor(ImGuiCol_Text, ImGui::ColorConvertU32ToFloat4(OnSurfaceDisabled()));
+        if (dim) ImGui::PushStyleColor(ImGuiCol_Text, ImGui::ColorConvertU32ToFloat4(OnSurfaceDisabled()));
         if (TactileButton(icon, ImVec2(btnSz, btnSz), Type().iconMed()))
             s_line_accents_enabled = !s_line_accents_enabled;
-        if (!s_line_accents_enabled) ImGui::PopStyleColor();
+        if (dim) ImGui::PopStyleColor();
         if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("console_toggle_accents"));
     }
 
@@ -585,11 +595,11 @@ void ConsoleTab::renderToolbar(ConsoleCommandExecutor& exec)
     ImGui::SameLine();
     {
         float btnSz = ImGui::GetFrameHeight();
-        if (!s_line_text_color_enabled)
-            ImGui::PushStyleColor(ImGuiCol_Text, ImGui::ColorConvertU32ToFloat4(OnSurfaceDisabled()));
+        const bool dim = !s_line_text_color_enabled;   // capture before the click flips it (balanced push/pop)
+        if (dim) ImGui::PushStyleColor(ImGuiCol_Text, ImGui::ColorConvertU32ToFloat4(OnSurfaceDisabled()));
         if (TactileButton(ICON_MD_FORMAT_COLOR_TEXT, ImVec2(btnSz, btnSz), Type().iconMed()))
             s_line_text_color_enabled = !s_line_text_color_enabled;
-        if (!s_line_text_color_enabled) ImGui::PopStyleColor();
+        if (dim) ImGui::PopStyleColor();
         if (ImGui::IsItemHovered()) material::Tooltip("%s", TR("console_toggle_text_color"));
     }
 
@@ -609,7 +619,7 @@ void ConsoleTab::drawToolbarStatus(ConsoleCommandExecutor& exec)
         ImVec2 cp = ImGui::GetCursorScreenPos();
         float dotR = schema::UI().drawElement("tabs.console", "status-dot-radius-base").size + schema::UI().drawElement("tabs.console", "status-dot-radius-scale").size * Layout::hScale();
         float dotY = cp.y + ImGui::GetTextLineHeight() * 0.5f;
-        float dotX = cp.x + dotR + 2;
+        float dotX = cp.x + dotR + 2.0f * Layout::dpiScale();
 
         if (st.pulse) {
             float a = schema::UI().drawElement("animations", "pulse-base-glow").size + schema::UI().drawElement("animations", "pulse-amp-glow").size * (float)std::sin((double)ImGui::GetTime() * schema::UI().drawElement("animations", "pulse-speed-fast").size);
@@ -619,7 +629,7 @@ void ConsoleTab::drawToolbarStatus(ConsoleCommandExecutor& exec)
             dl->AddCircleFilled(ImVec2(dotX, dotY), dotR, st.color);
         }
 
-        ImGui::Dummy(ImVec2(dotR * 2 + 6, 0));
+        ImGui::Dummy(ImVec2(dotR * 2 + 6.0f * Layout::dpiScale(), 0));
         ImGui::SameLine();
         Type().textColored(TypeStyle::Caption, st.color, st.text.c_str());
     } else {
@@ -1432,18 +1442,22 @@ bool ConsoleTab::submitConsoleCommand(ConsoleCommandExecutor& exec, const std::s
         exec.printHelp(add);
     } else if (first == "quit" || first == "exit") {
         addLine(TR("console_quit_note"), ConsoleChannel::Info);
-    } else if (first == "stop") {
+    } else if (first == "stop" && exec.hasRpcReference()) {
+        // Full-node 'stop' shuts down the daemon (destructive) — gate behind a confirming second
+        // 'stop'. Lite has no node: `stop` isn't a backend verb, so it falls through below and the
+        // backend reports it as unknown — no misleading "shut down the node" warning or dead gate.
         if (!stop_confirm_pending_) {
             stop_confirm_pending_ = true;
-            addLine("'stop' will shut down the node and disconnect the wallet. Type 'stop' again to confirm.",
-                    ConsoleChannel::Warning);
+            addLine(TR("console_stop_confirm_node"), ConsoleChannel::Warning);
         } else {
             stop_confirm_pending_ = false;
             if (!exec.isReady()) addLine(TR("console_not_connected"), ConsoleChannel::Error);
             else                 exec.submit(cmd);
         }
     } else if (!exec.isReady()) {
-        addLine(TR("console_not_connected"), ConsoleChannel::Error);
+        // Full node connects to a daemon; the lite backend opens a wallet — word the error per variant.
+        addLine(exec.hasRpcReference() ? TR("console_not_connected") : TR("console_not_connected_lite"),
+                ConsoleChannel::Error);
     } else {
         exec.submit(cmd);
     }
@@ -1555,6 +1569,11 @@ const char* consoleCategoryLabel(const char* name)
     if (!std::strcmp(name, "Wallet"))           return TR("console_cat_wallet");
     if (!std::strcmp(name, "Raw Transactions")) return TR("console_cat_raw_transactions");
     if (!std::strcmp(name, "Utility"))          return TR("console_cat_utility");
+    // Lite backend reference categories.
+    if (!std::strcmp(name, "Sync"))             return TR("console_cat_sync");
+    if (!std::strcmp(name, "Send"))             return TR("console_cat_send");
+    if (!std::strcmp(name, "Keys & Security"))  return TR("console_cat_keys");
+    if (!std::strcmp(name, "Advanced"))         return TR("console_cat_advanced");
     return name;
 }
 } // namespace
@@ -1574,7 +1593,7 @@ void ConsoleTab::insertCommandToInput(const ConsoleCommandEntry& cmd)
     show_commands_popup_ = false;
 }
 
-void ConsoleTab::renderCommandDetail(const ConsoleCommandEntry& cmd, const char* catLabel)
+void ConsoleTab::renderCommandDetail(const ConsoleCommandEntry& cmd, const char* catLabel, bool jsonArgs)
 {
     using namespace material;
     float dp = Layout::dpiScale();
@@ -1625,8 +1644,11 @@ void ConsoleTab::renderCommandDetail(const ConsoleCommandEntry& cmd, const char*
             ImGui::PopFont();
             ImGui::SameLine(labelW);
             ImGui::SetNextItemWidth(-1);
+            // Lite backend args are bare freeform tokens, so its param types (string/number) don't
+            // apply — show a neutral "value" hint there instead of a misleading "number".
+            std::string typeHint = jsonArgs ? s.type : std::string(TR("console_ref_value"));
             std::string hint = s.optional
-                ? (s.type + " \xC2\xB7 " + std::string(TR("console_ref_optional"))) : s.type;
+                ? (typeHint + " \xC2\xB7 " + std::string(TR("console_ref_optional"))) : typeHint;
             ImGui::InputTextWithHint("##pv", hint.c_str(), cmd_param_bufs_[k], sizeof(cmd_param_bufs_[k]));
             ImGui::PopID();
         }
@@ -1656,7 +1678,9 @@ void ConsoleTab::renderCommandDetail(const ConsoleCommandEntry& cmd, const char*
             built += " " + specs[k].raw;
             complete = false;
         } else {
-            if (specs[k].type == "string" && val.front() != '"' && val.front() != '\'' &&
+            // JSON-RPC (full node) auto-quotes string args; the lite backend takes bare tokens, so
+            // leave the value exactly as typed there (quoting would break its address/key parsing).
+            if (jsonArgs && specs[k].type == "string" && val.front() != '"' && val.front() != '\'' &&
                 val.front() != '[' && val.front() != '{')
                 val = "\"" + val + "\"";
             built += " " + val;
@@ -1729,13 +1753,16 @@ void ConsoleTab::renderCommandDetail(const ConsoleCommandEntry& cmd, const char*
     }
 }
 
-void ConsoleTab::renderCommandsPopup()
+void ConsoleTab::renderCommandsPopup(ConsoleCommandExecutor& exec)
 {
     using namespace material;
     float dp = Layout::dpiScale();
 
+    // Full node speaks JSON-RPC (quote string args); the lite backend takes bare tokens.
+    const bool jsonArgs = exec.hasRpcReference();
+
     material::OverlayDialogSpec ov;
-    ov.title      = TR("console_rpc_reference");
+    ov.title      = jsonArgs ? TR("console_rpc_reference") : TR("console_backend_reference");
     ov.p_open     = &show_commands_popup_;
     ov.style      = material::OverlayStyle::BlurFloat;   // floating content on the blur, plain heading
     ov.cardWidth  = 960.0f;                              // wide enough for two panes
@@ -1764,7 +1791,7 @@ void ConsoleTab::renderCommandsPopup()
     std::transform(q.begin(), q.end(), q.begin(), ::tolower);
     const bool searching = !q.empty();
 
-    const auto& categories = consoleCommandCategories();
+    const auto& categories = *exec.commandReference();  // non-null: guarded by renderCommandsPopupModal
 
     // Flat display order of (cat,idx): ranked when searching, category order when browsing. Drives
     // keyboard nav + auto-selection; the browse view still renders grouped headers below.
@@ -1906,7 +1933,7 @@ void ConsoleTab::renderCommandsPopup()
     if (cmd_sel_cat_ >= 0 && cmd_sel_cat_ < (int)categories.size() &&
         cmd_sel_idx_ >= 0 && cmd_sel_idx_ < categories[cmd_sel_cat_].count) {
         renderCommandDetail(categories[cmd_sel_cat_].commands[cmd_sel_idx_],
-                            consoleCategoryLabel(categories[cmd_sel_cat_].name));
+                            consoleCategoryLabel(categories[cmd_sel_cat_].name), jsonArgs);
     } else {
         ImVec2 av = ImGui::GetContentRegionAvail();
         ImGui::SetCursorPosY(av.y * 0.4f);

src/ui/windows/console_tab.h

@@ -44,10 +44,11 @@ public:
     void render(ConsoleCommandExecutor& exec);
 
     /**
-     * @brief Render the RPC Command Reference popup at top-level scope.
-     * Must be called outside any child window so the modal blocks all input.
+     * @brief Render the command-reference popup at top-level scope.
+     * Must be called outside any child window so the modal blocks all input. `exec` supplies the
+     * reference table (full-node RPC vs lite backend verbs); may be null (no console yet) -> no-op.
      */
-    void renderCommandsPopupModal();
+    void renderCommandsPopupModal(ConsoleCommandExecutor* exec);
 
     // Debug/UI-sweep hook: force the RPC command-reference popup open/closed so the full UI sweep
     // can capture it (the popup is otherwise opened only by a toolbar button).
@@ -115,8 +116,9 @@ private:
     // Format a completed command result (JSON role -> channel) into console lines.
     void addFormattedResult(const std::string& result, bool is_error);
     void renderStatusHeader(ConsoleCommandExecutor& exec);
-    void renderCommandsPopup();
-    void renderCommandDetail(const ConsoleCommandEntry& cmd, const char* catLabel);  // right pane
+    void renderCommandsPopup(ConsoleCommandExecutor& exec);
+    // right pane; jsonArgs=true (full-node RPC) auto-quotes string args, false (lite) inserts bare
+    void renderCommandDetail(const ConsoleCommandEntry& cmd, const char* catLabel, bool jsonArgs);
     void insertCommandToInput(const ConsoleCommandEntry& cmd);  // fill input + close the modal
 
     // renderToolbar() draws the top bar; these are its sub-steps:
@@ -186,10 +188,11 @@ private:
     // consumed by the renderer + hit-testing.
     mutable ConsoleLayout layout_;
 
-    // Commands popup (RPC command explorer)
+    // Commands popup (command explorer) — indexes into the active executor's commandReference()
+    // table (full-node RPC commands or the lite backend verbs), not always the full-node one.
     bool show_commands_popup_ = false;
-    char command_search_[128] = {0};   // RPC-reference search filter (cleared when the modal opens)
-    int  cmd_sel_cat_ = -1;            // detail-pane selection: category index into consoleCommandCategories()
+    char command_search_[128] = {0};   // reference search filter (cleared when the modal opens)
+    int  cmd_sel_cat_ = -1;            // detail-pane selection: category index into that table
     int  cmd_sel_idx_ = -1;            // detail-pane selection: command index within that category
     std::string pending_submit_;      // command to run next frame (deferred so the modal needs no executor)
     const ConsoleCommandEntry* run_confirm_cmd_ = nullptr;  // destructive "Insert & run" awaiting confirmation

src/ui/windows/contacts_tab.cpp

@@ -1005,9 +1005,23 @@ void RenderContactsTab(App* app)
 
     if (viewMode == 2) {
         // ── TABLE mode (material-ized): no outer/grid borders, row backgrounds, interactive sort. ──
+        // Frosted-glass panel behind the table so it blurs the backdrop like the card/list view (the
+        // table's translucent row backgrounds let the blur show through). A BeginTable can't take
+        // AlwaysUseWindowPadding, so inset the table itself inside the glass so its headers/cells
+        // don't hug the container edges.
+        ImDrawList* tpdl   = ImGui::GetWindowDrawList();
+        const ImVec2 tpMin = ImGui::GetCursorScreenPos();
+        const float  tpW   = ImGui::GetContentRegionAvail().x;
+        const float  tIpad = 12.0f * dp, tVpad = 10.0f * dp;
+        {
+            material::GlassPanelSpec g; g.rounding = 12.0f * dp; g.fillAlpha = 14; g.borderAlpha = 34;
+            material::DrawGlassPanel(tpdl, tpMin, ImVec2(tpMin.x + tpW, tpMin.y + listH), g);
+        }
+        ImGui::SetCursorScreenPos(ImVec2(tpMin.x + tIpad, tpMin.y + tVpad));
         if (ImGui::BeginTable("AddressBookTable", 3,
             ImGuiTableFlags_RowBg | ImGuiTableFlags_Sortable |
-            ImGuiTableFlags_Resizable | ImGuiTableFlags_ScrollY, ImVec2(0, listH)))
+            ImGuiTableFlags_Resizable | ImGuiTableFlags_ScrollY,
+            ImVec2(tpW - 2.0f * tIpad, listH - 2.0f * tVpad)))
         {
             ImGui::TableSetupColumn(TR("label"), ImGuiTableColumnFlags_WidthStretch | ImGuiTableColumnFlags_DefaultSort, 1.5f);
             ImGui::TableSetupColumn(TR("address_label"), ImGuiTableColumnFlags_WidthStretch, 2.6f);
@@ -1083,6 +1097,10 @@ void RenderContactsTab(App* app)
             }
             ImGui::EndTable();
         }
+        // Land the cursor at the glass-panel bottom (tpMin.y + listH) so the count footer lines up
+        // with the Cards/List views. The table is inset by tVpad and its outer_size is listH-2*tVpad,
+        // so it would otherwise end tVpad higher and pull the footer up.
+        ImGui::SetCursorScreenPos(ImVec2(tpMin.x, tpMin.y + listH));
     } else {
         // ── CARDS (0) / LIST (1) mode — tactile Material items, no grid lines. ──
         const bool asCard = (viewMode == 0);
@@ -1093,8 +1111,20 @@ void RenderContactsTab(App* app)
                 return toLower(entries[a].label).compare(toLower(entries[b].label)) < 0;
             });
         }
+        // Frosted-glass list container so the contacts area blurs the backdrop (peers_tab pattern:
+        // glass behind a NoBackground list child) instead of showing the raw texture through the pane.
+        {
+            ImDrawList* pdl = ImGui::GetWindowDrawList();
+            const ImVec2 pMin = ImGui::GetCursorScreenPos();
+            const float  pW = ImGui::GetContentRegionAvail().x;
+            material::GlassPanelSpec g; g.rounding = 12.0f * dp; g.fillAlpha = 14; g.borderAlpha = 34;
+            material::DrawGlassPanel(pdl, pMin, ImVec2(pMin.x + pW, pMin.y + listH), g);
+        }
+        // AlwaysUseWindowPadding: a borderless child ignores WindowPadding without it, so the rows
+        // would hug the frosted container's edges.
+        ImGui::PushStyleVar(ImGuiStyleVar_WindowPadding, ImVec2(12.0f * dp, 10.0f * dp));
         ImGui::PushStyleColor(ImGuiCol_ChildBg, ImVec4(0,0,0,0));
-        ImGui::BeginChild("##contactList", ImVec2(0, listH), false,
+        ImGui::BeginChild("##contactList", ImVec2(0, listH), ImGuiChildFlags_AlwaysUseWindowPadding,
                           ImGuiWindowFlags_NoBackground | ImGuiWindowFlags_NoScrollWithMouse);
         material::ApplySmoothScroll();   // wheel-lerp scroll, matching the rest of the app
         if (visibleRows.empty()) {
@@ -1243,6 +1273,7 @@ void RenderContactsTab(App* app)
         }
         ImGui::EndChild();
         ImGui::PopStyleColor();
+        ImGui::PopStyleVar();   // ##contactList inner WindowPadding
     }
 
     // Shared right-click context menu (opened by either view's row right-click; acts on the selection).

src/ui/windows/export_all_keys_dialog.cpp

@@ -211,12 +211,11 @@ void ExportAllKeysDialog::render(App* app)
                         std::string filepath = configDir + "/" + filename;
                         bool writeOk = false;
                         if (exported > 0) {
-                            std::ofstream file(filepath);
-                            if (file.is_open()) {
-                                file << keys;
-                                file.close();
-                                writeOk = true;
-                            }
+                            // Write the plaintext private keys 0600 + atomically (never
+                            // world/group-readable, never a half-written file) — the same restricted
+                            // atomic-write idiom the PIN vault uses. A default ofstream would create
+                            // the key dump with umask-derived (often 0644) permissions.
+                            writeOk = util::Platform::writeFileAtomically(filepath, keys, /*restrictPermissions=*/true);
                         }
                         if (!keys.empty()) sodium_memzero(&keys[0], keys.size());  // don't leave every key in freed heap
 

src/ui/windows/export_transactions_dialog.cpp

@@ -36,21 +36,30 @@ static bool s_exporting = false;
 // Helper to escape CSV field
 static std::string escapeCSV(const std::string& field)
 {
-    if (field.find(',') != std::string::npos || 
-        field.find('"') != std::string::npos ||
-        field.find('\n') != std::string::npos) {
+    // Neutralize spreadsheet formula injection: a field beginning with '=', '+', '-', '@',
+    // tab, or CR is interpreted as a formula by Excel/LibreOffice, letting an attacker-supplied
+    // memo/address execute on open. Prefix such fields with a single quote so they render as text.
+    std::string safe = field;
+    if (!safe.empty()) {
+        const char c0 = safe.front();
+        if (c0 == '=' || c0 == '+' || c0 == '-' || c0 == '@' || c0 == '\t' || c0 == '\r')
+            safe.insert(safe.begin(), '\'');
+    }
+    if (safe.find(',') != std::string::npos ||
+        safe.find('"') != std::string::npos ||
+        safe.find('\n') != std::string::npos) {
         // Escape quotes and wrap in quotes
         std::string escaped;
-        escaped.reserve(field.size() + 4);
+        escaped.reserve(safe.size() + 4);
         escaped += '"';
-        for (char c : field) {
+        for (char c : safe) {
             if (c == '"') escaped += "\"\"";
             else escaped += c;
         }
         escaped += '"';
         return escaped;
     }
-    return field;
+    return safe;
 }
 
 void ExportTransactionsDialog::show()

src/ui/windows/market_tab.cpp

@@ -31,6 +31,7 @@
 #include <algorithm>
 #include <cmath>
 #include <ctime>
+#include <unordered_set>
 
 namespace dragonx {
 namespace ui {
@@ -47,7 +48,6 @@ struct MarketViewState {
     int  chartStyle = 1;           // 0 = line, 1 = candlestick (only applies when per-exchange OHLC exists)
 };
 static MarketViewState s_mkt;
-static bool s_show_market_settings = false;   // Market general-options modal (gear button, like chat)
 
 // The effective exchange registry: the live CoinGecko list when available, else the
 // compiled-in fallback.
@@ -133,7 +133,7 @@ struct PfEditState {
     bool   showValue = true;
     bool   show24h = false;
     bool   showSparkline = false;
-    int    sparkInterval = 0;      // 0=min 1=hour 2=day 3=week 4=month
+    int    sparkInterval = 4;      // 0=min 1=hour 2=day 3=week 4=month (default month)
 };
 static PfEditState s_pfEdit;
 
@@ -163,16 +163,16 @@ static bool pfProjectSeries(const std::vector<double>& hist, ImVec2 mn, ImVec2 m
 }
 
 static void pfDrawSparkline(ImDrawList* dl, ImVec2 mn, ImVec2 mx,
-                            const std::vector<double>& hist, ImU32 col)
+                            const std::vector<double>& hist, ImU32 col, float dp)
 {
     std::vector<ImVec2> pts;
     if (!pfProjectSeries(hist, mn, mx, pts)) return;
-    dl->AddPolyline(pts.data(), (int)pts.size(), col, ImDrawFlags_None, 1.2f);
+    dl->AddPolyline(pts.data(), (int)pts.size(), col, ImDrawFlags_None, 1.2f * dp);
 }
 
 // Sparkline with a soft fill under the line — for the card's dedicated bottom strip.
 static void pfDrawSparklineFilled(ImDrawList* dl, ImVec2 mn, ImVec2 mx,
-                                  const std::vector<double>& hist, ImU32 lineCol)
+                                  const std::vector<double>& hist, ImU32 lineCol, float dp)
 {
     std::vector<ImVec2> pts;
     if (!pfProjectSeries(hist, mn, mx, pts)) return;
@@ -181,7 +181,7 @@ static void pfDrawSparklineFilled(ImDrawList* dl, ImVec2 mn, ImVec2 mx,
     dl->PathLineTo(ImVec2(pts[n - 1].x, mx.y));
     dl->PathLineTo(ImVec2(pts[0].x, mx.y));
     dl->PathFillConcave(WithAlpha(lineCol, 28));
-    dl->AddPolyline(pts.data(), n, WithAlpha(lineCol, 220), ImDrawFlags_None, 1.4f);
+    dl->AddPolyline(pts.data(), n, WithAlpha(lineCol, 220), ImDrawFlags_None, 1.4f * dp);
 }
 
 
@@ -284,7 +284,7 @@ static void PortfolioBeginEdit(App* app, int index)
         s_pfEdit.showValue = true;
         s_pfEdit.show24h = false;
         s_pfEdit.showSparkline = false;
-        s_pfEdit.sparkInterval = 0;
+        s_pfEdit.sparkInterval = 4;   // default month (a real curve from the daily series)
     }
     s_pfEdit.search[0] = '\0';
     s_pfEdit.typeFilter = 0;
@@ -668,14 +668,18 @@ static void pfDrawAddressSection(App* app)
         }
         filtered.push_back(&a);
     }
+    // Build the selected-address set once — the sort comparator and the per-row membership test below
+    // both consulted it via a linear PortfolioEntryContains scan (O(n) each) every frame.
+    std::unordered_set<std::string> selSet(s_pfEdit.addrs.begin(), s_pfEdit.addrs.end());
     std::sort(filtered.begin(), filtered.end(), [&](const AddressInfo* x, const AddressInfo* y) {
-        bool sx = data::PortfolioEntryContains(s_pfEdit.addrs, x->address);
-        bool sy = data::PortfolioEntryContains(s_pfEdit.addrs, y->address);
+        bool sx = selSet.count(x->address) != 0;
+        bool sy = selSet.count(y->address) != 0;
         if (sx != sy) return sx;
         return x->balance > y->balance;
     });
     if (selAllClicked)
-        for (const AddressInfo* a : filtered) data::PortfolioEntryAdd(s_pfEdit.addrs, a->address);
+        for (const AddressInfo* a : filtered)
+            if (data::PortfolioEntryAdd(s_pfEdit.addrs, a->address)) selSet.insert(a->address);
     ImGui::Dummy(ImVec2(0, Layout::spacingXs()));
     ImDrawList* ldl = material::BeginFadeScrollChild("##pfAddrList", s_pfEdit.addrFade,
                                          ImVec2(Layout::spacingMd(), Layout::spacingSm()), dp);
@@ -685,7 +689,7 @@ static void pfDrawAddressSection(App* app)
         Type().textColored(TypeStyle::Caption, OnSurfaceDisabled(), TR("portfolio_no_addr_match"));
     for (const AddressInfo* ap : filtered) {
         const AddressInfo& a = *ap;
-        bool inSet = data::PortfolioEntryContains(s_pfEdit.addrs, a.address);
+        bool inSet = selSet.count(a.address) != 0;
         ImVec2 rmn = ImGui::GetCursorScreenPos();
         ImVec2 rmx(rmn.x + lw, rmn.y + rowH);
         bool rhov = ImGui::IsMouseHoveringRect(rmn, rmx);
@@ -734,8 +738,8 @@ static void pfDrawAddressSection(App* app)
         ImGui::PushID(a.address.c_str());
         ImGui::InvisibleButton("##pfrow", ImVec2(lw, rowH));
         if (ImGui::IsItemClicked()) {
-            if (inSet) data::PortfolioEntryRemove(s_pfEdit.addrs, a.address);
-            else       data::PortfolioEntryAdd(s_pfEdit.addrs, a.address);
+            if (inSet) { data::PortfolioEntryRemove(s_pfEdit.addrs, a.address); selSet.erase(a.address); }
+            else       { data::PortfolioEntryAdd(s_pfEdit.addrs, a.address);    selSet.insert(a.address); }
         }
         ImGui::PopID();
     }
@@ -957,7 +961,7 @@ static void RenderPortfolioEditor(App* app)
             ImVec2 pMin = ImGui::GetCursorScreenPos();
             ImVec2 pMax(pMin.x + pw, pMin.y + ph);
             ImU32 accent = s_pfEdit.color ? (ImU32)s_pfEdit.color : 0;
-            GlassPanelSpec g; g.rounding = 10.0f; g.fillAlpha = 22; g.borderAlpha = 40;
+            GlassPanelSpec g; g.rounding = 10.0f * dp; g.fillAlpha = 22; g.borderAlpha = 40;
             DrawGlassPanel(pdl, pMin, pMax, g);
             if (accent) {
                 int oa = (int)(std::max(0, std::min(100, s_pfEdit.outlineOpacity)) * 2.55f + 0.5f);
@@ -969,7 +973,7 @@ static void RenderPortfolioEditor(App* app)
                     ImU32 spCol = WithAlpha(h.back() >= h.front() ? Success() : Error(), 80);
                     ImVec2 spMin(pMin.x + ppad, pMin.y + ph * 0.46f);
                     ImVec2 spMax(pMax.x - ppad, pMax.y - ppad * 0.6f);
-                    pfDrawSparkline(pdl, spMin, spMax, h, spCol);
+                    pfDrawSparkline(pdl, spMin, spMax, h, spCol, dp);
                 }
             }
             float rowY = pMin.y + ppad, nameX = pMin.x + ppad;
@@ -1083,58 +1087,61 @@ bool PortfolioEditorActive() { return s_pfEdit.open; }
 // muted em-dash so a row never looks broken. Pure drawing into dl.
 // TABLE-style (portfolio_style 0) right-edge column anchors — shared by pfDrawRow's row body and the
 // column-header strip so the header labels sit exactly over the values they name.
+// TABLE-style (style 0) column widths (logical px) — shared by pfTableCols (which turns them into
+// right-edge anchors) and pfDrawRow (which feeds valW/drgxW to fit() truncation), so truncated text
+// always lines up with the column edges. Change here and both stay in sync.
+static constexpr float kPfChgColW  = 62.0f;
+static constexpr float kPfValColW  = 108.0f;
+static constexpr float kPfDrgxColW = 118.0f;
+
 struct PfTableCols { float labelR, drgxR, valR, chgR; };
 static PfTableCols pfTableCols(float right, float dp)
 {
     const float colGap = Layout::spacingMd();
-    const float chgW = 62.0f*dp, valW = 108.0f*dp, drgxW = 118.0f*dp;
     PfTableCols c;
     c.chgR   = right;
-    c.valR   = c.chgR  - chgW  - colGap;
-    c.drgxR  = c.valR  - valW  - colGap;
-    c.labelR = c.drgxR - drgxW - colGap;
+    c.valR   = c.chgR  - kPfChgColW  * dp - colGap;
+    c.drgxR  = c.valR  - kPfValColW  * dp - colGap;
+    c.labelR = c.drgxR - kPfDrgxColW * dp - colGap;
     return c;
 }
 
+// Portfolio row height + inter-row gap by style — one source shared by the row drawing
+// (mktDrawPortfolio) and the scroll-region height budget (RenderMarketTab) so they can't drift and clip.
+// Row heights: Table 48dp (a dedicated trend column needs vertical room), Cards 68dp (two-zone),
+// Spotlight 92dp (a dominant bottom chart band under the hero value). Uniform per style.
+static float pfRowHeight(int style, float dp) { return (style == 0 ? 48.0f : style == 1 ? 68.0f : 92.0f) * dp; }
+// Fraction of the Table label+trend zone given to the label; the rest is the centre TREND column.
+// Shared by the row body and the header strip so the sparkline and its "TREND" label line up.
+static constexpr float kPfTableTrendFrac = 0.38f;
+static float pfRowGapFor(int style, float dp) { return style == 0 ? 2.0f * dp : Layout::spacingSm(); }
+
 static void pfDrawRow(ImDrawList* dl, ImVec2 rowMin, ImVec2 rowMax,
                       const config::Settings::PortfolioEntry& e, const WalletState& state,
                       const MarketInfo& market, int style, float dp,
-                      ImFont* sub1, ImFont* capFont, bool hov)
+                      ImFont* sub1, ImFont* capFont, bool hov, bool tableReserveSpark = false)
 {
-    double bal = data::SumPortfolioBalance(e.addresses, state.addresses);
+    const double bal = data::SumPortfolioBalance(e.addresses, state.addresses);
     ImU32 accent = e.color ? (ImU32)e.color : 0;
     const bool zeroBal = (bal <= 0.0);   // empty groups render dimmed (content only, not the container)
 
-    // ---- Per-style CONTAINER (the enabler): the three styles differ before any field is read.
-    //      Table (0) = borderless ledger row (hairline + hover wash + a slim left identity tick);
-    //      Cards (1) = glass card with a faint accent tint + a left accent spine;
-    //      Spotlight (2) = a heavier tile (higher fill + a bold accent spine). ----
+    // ---- Per-style CONTAINER: Table (0) = borderless ledger row (hairline + hover wash); Cards (1) =
+    //      glass card with a faint identity tint; Spotlight (2) = a heavier glass tile. No accent line —
+    //      the group's colour already reads from its icon and the sparkline, so it adds nothing here. ----
     const float round = 10.0f * dp;
-    const int oa = (int)(std::max(0, std::min(100, e.outlineOpacity)) * 2.55f + 0.5f);
     if (style == 0) {
         if (hov) dl->AddRectFilled(rowMin, rowMax, WithAlpha(OnSurface(), 14), 0.0f);
         dl->AddLine(ImVec2(rowMin.x, rowMax.y - 0.5f), ImVec2(rowMax.x, rowMax.y - 0.5f),
                     WithAlpha(OnSurface(), 24), 1.0f);
-        dl->AddRectFilled(ImVec2(rowMin.x, rowMin.y + 5.0f * dp), ImVec2(rowMin.x + 3.0f * dp, rowMax.y - 5.0f * dp),
-                          accent ? accent : WithAlpha(OnSurface(), 55), 1.5f * dp);
     } else if (style == 1) {
-        GlassPanelSpec g; g.rounding = 10.0f; g.fillAlpha = hov ? 42 : 30; g.borderAlpha = 55;
+        GlassPanelSpec g; g.rounding = round; g.fillAlpha = hov ? 42 : 30; g.borderAlpha = 55;
         DrawGlassPanel(dl, rowMin, rowMax, g);
-        if (accent) {
-            dl->AddRectFilled(rowMin, rowMax, WithAlpha(accent, hov ? 16 : 10), round);
-            dl->AddRectFilled(rowMin, ImVec2(rowMin.x + 3.0f * dp, rowMax.y), WithAlpha(accent, 205),
-                              round, ImDrawFlags_RoundCornersLeft);
-            dl->AddRect(rowMin, rowMax, WithAlpha(accent, hov ? std::min(255, oa + 45) : oa), 10.0f, 0, hov ? 1.8f : 1.2f);
-        } else if (hov) {
-            dl->AddRect(rowMin, rowMax, WithAlpha(OnSurface(), 80), 10.0f, 0, 1.2f);
-        }
+        if (accent) dl->AddRectFilled(rowMin, rowMax, WithAlpha(accent, hov ? 16 : 10), round);  // faint identity wash
+        if (hov)    dl->AddRect(rowMin, rowMax, WithAlpha(OnSurface(), 80), round, 0, 1.2f);
     } else {
-        GlassPanelSpec g; g.rounding = 10.0f; g.fillAlpha = hov ? 56 : 46; g.borderAlpha = 60;
+        GlassPanelSpec g; g.rounding = round; g.fillAlpha = hov ? 56 : 46; g.borderAlpha = 60;
         DrawGlassPanel(dl, rowMin, rowMax, g);
-        dl->AddRectFilled(rowMin, ImVec2(rowMin.x + 4.0f * dp, rowMax.y),
-                          WithAlpha(accent ? accent : Primary(), 220), round, ImDrawFlags_RoundCornersLeft);
-        if (accent)   dl->AddRect(rowMin, rowMax, WithAlpha(accent, hov ? std::min(255, oa + 45) : oa), 10.0f, 0, hov ? 1.8f : 1.2f);
-        else if (hov) dl->AddRect(rowMin, rowMax, WithAlpha(OnSurface(), 70), 10.0f, 0, 1.2f);
+        if (hov) dl->AddRect(rowMin, rowMax, WithAlpha(OnSurface(), 70), round, 0, 1.2f);
     }
 
     auto tw = [](ImFont* f, const std::string& s){ return f->CalcTextSizeA(f->LegacySize, FLT_MAX, 0, s.c_str()).x; };
@@ -1174,11 +1181,12 @@ static void pfDrawRow(ImDrawList* dl, ImVec2 rowMin, ImVec2 rowMax,
     const int zdVtx = zeroBal ? dl->VtxBuffer.Size : -1;
 
     if (style == 0) {
-        // ---- TABLE: icon + label (left); tight numeric columns DRGX | value | 24h pill (right).
-        //      No sparkline — the trend rides in a small coloured % pill, keeping this a scannable grid.
+        // ---- TABLE: icon + label (left); a dedicated centre TREND column (aligned + header-labelled);
+        //      right-aligned numeric columns DRGX | value | 24h pill. The trend column is present for the
+        //      whole list when any group opts in (tableReserveSpark); each row fills it when it has one.
         const PfTableCols cols = pfTableCols(right, dp);
         const float chgR = cols.chgR, valR = cols.valR, drgxR = cols.drgxR, labelR = cols.labelR;
-        const float valW = 108.0f*dp, drgxW = 118.0f*dp;   // fit() widths for the value / DRGX columns
+        const float valW = kPfValColW*dp, drgxW = kPfDrgxColW*dp;   // fit() widths (shared with pfTableCols)
         float iconSz = capFont->LegacySize, x = left;
         if (!e.icon.empty()) {
             material::project_icons::drawByName(dl, e.icon.c_str(), ImVec2(x+iconSz*0.5f, midY), accent?accent:OnSurfaceMedium(), Type().iconSmall(), iconSz);
@@ -1194,65 +1202,81 @@ static void pfDrawRow(ImDrawList* dl, ImVec2 rowMin, ImVec2 rowMax,
             dl->AddText(capFont, capFont->LegacySize, ImVec2(pmn.x + 6.0f*dp, midY - capFont->LegacySize*0.5f),
                         hasChange?chgCol:OnSurfaceDisabled(), s.c_str());
         }
-        const float lblMaxW = std::max(24.0f*dp, labelR - x);
+        // Dedicated centre TREND column: when the list has any sparkline (tableReserveSpark), cap the
+        // label to a fixed boundary so the column + its header label align across every row; each row
+        // fills it only when that group opts in. Rows without any list-wide trend keep the full label.
+        // Trend-column origin from the fixed LEFT (icon-independent) so it lines up with the "TREND"
+        // header and across rows whether or not a group has an icon (x may be shifted past the icon).
+        const float zoneW   = std::max(24.0f*dp, labelR - left);
+        const float trendX0 = left + zoneW * kPfTableTrendFrac;
+        const float lblMaxW = tableReserveSpark ? std::max(24.0f*dp, trendX0 - colGap - x) : std::max(24.0f*dp, labelR - x);
         dl->AddText(sub1, sub1->LegacySize, ImVec2(x, midY - sub1->LegacySize*0.5f), OnSurface(), fit(e.label,sub1,lblMaxW).c_str());
+        if (hasSpark && tableReserveSpark && labelR - trendX0 > 40.0f * dp)
+            pfDrawSparklineFilled(dl, ImVec2(trendX0, rowMin.y + padY), ImVec2(labelR, rowMax.y - padY), spark, sparkCol, dp);
     } else if (style == 1) {
-        // ---- CARDS: muted label + a leading (shadowed) value on top; DRGX + 24h beneath; and a
-        //      per-group shielded/transparent split bar along the bottom edge as the signature.
-        const float zbarH = 3.0f*dp;
-        float iconSz = capFont->LegacySize, x = left;
-        const float topY = rowMin.y + padY + 1.0f*dp;
-        const float botY = rowMax.y - padY - zbarH - 3.0f*dp - capFont->LegacySize;
+        // ---- CARDS: a balanced snapshot — a LEFT-aligned info stack (icon + label / value+delta chip /
+        //      DRGX) grouped on the left, with a full-height sparkline filling the rest of the width.
+        const float zoneTop = rowMin.y + padY;
+        const float zoneBot = rowMax.y - padY;
+        // Icon centred in the info zone; the label/value/DRGX stack sits to its right.
+        const float iconSz = capFont->LegacySize;
+        float textX = left;
         if (!e.icon.empty()) {
-            material::project_icons::drawByName(dl, e.icon.c_str(), ImVec2(x+iconSz*0.5f, topY+sub1->LegacySize*0.5f), accent?accent:OnSurfaceMedium(), Type().iconSmall(), iconSz);
-            x += iconSz + Layout::spacingSm();
+            material::project_icons::drawByName(dl, e.icon.c_str(), ImVec2(left + iconSz*0.5f, (zoneTop + zoneBot)*0.5f), accent?accent:OnSurfaceMedium(), Type().iconSmall(), iconSz);
+            textX = left + iconSz + Layout::spacingSm();
         }
-        // value (top-right, leads via a soft shadow)
-        std::string vTop = wantValue ? (hasValue?valStr:kDash) : std::string();
-        float vW = wantValue ? tw(sub1, vTop) : 0.0f;
-        if (wantValue) DrawTextShadow(dl, sub1, sub1->LegacySize, ImVec2(right - vW, topY), hasValue?OnSurface():OnSurfaceDisabled(), vTop.c_str());
-        // label (top-left, muted so the value leads)
-        float labelR = wantValue ? (right - vW - colGap) : right;
-        dl->AddText(capFont, capFont->LegacySize, ImVec2(x, topY + (sub1->LegacySize - capFont->LegacySize)*0.5f), OnSurfaceMedium(), fit(e.label,capFont,std::max(24.0f*dp, labelR - x)).c_str());
-        // DRGX (bottom-left) + 24h (bottom-right)
-        if (e.showDrgx) dl->AddText(capFont, capFont->LegacySize, ImVec2(left, botY), OnSurfaceMedium(), drgxStr.c_str());
-        if (wantChange) { std::string s = hasChange?chgStr:kDash; dl->AddText(capFont, capFont->LegacySize, ImVec2(right - tw(capFont,s), botY), hasChange?chgCol:OnSurfaceDisabled(), s.c_str()); }
-        // shielded/transparent split bar (Cards-only signature; read-only balance data)
-        {
-            const data::PortfolioSplit sp = data::SumPortfolioSplit(e.addresses, state.addresses);
-            const double tot = sp.shielded + sp.transparent;
-            const float barY = rowMax.y - padY - zbarH;
-            const bool barLight = IsLightTheme();
-            dl->AddRectFilled(ImVec2(left, barY), ImVec2(right, barY + zbarH),
-                              barLight ? IM_COL32(0,0,0,20) : IM_COL32(255,255,255,12), zbarH*0.5f);
-            if (tot > 0) {
-                float sr = (float)(sp.shielded / tot); sr = sr<0?0.0f:(sr>1?1.0f:sr);
-                float sw = (right - left) * sr;
-                const int fa = barLight ? 205 : 175;
-                if (sw > 0.5f) dl->AddRectFilled(ImVec2(left, barY), ImVec2(left+sw, barY+zbarH), WithAlpha(Success(), fa),
-                                   (right-left-sw > 0.5f) ? ImDrawFlags_RoundCornersLeft : ImDrawFlags_RoundCornersAll, zbarH*0.5f);
-                if (right-left-sw > 0.5f) dl->AddRectFilled(ImVec2(left+sw, barY), ImVec2(right, barY+zbarH), WithAlpha(Warning(), fa),
-                                   sw > 0.5f ? ImDrawFlags_RoundCornersRight : ImDrawFlags_RoundCornersAll, zbarH*0.5f);
+        // Info zone driven by the ACTUAL content width so a short group hands the extra room to the chart;
+        // bounded [28%, 52%] so the info never cramps and the chart always keeps a decent band.
+        float infoR = right, cSparkL = right;
+        if (hasSpark) {
+            const std::string vTxt0 = wantValue ? (hasValue?valStr:kDash) : std::string();
+            const float chipW    = (wantChange && hasChange) ? (Layout::spacingSm() + tw(capFont, chgStr) + 12.0f*dp) : 0.0f;
+            const float valLineW = wantValue ? (tw(sub1, vTxt0) + chipW) : 0.0f;
+            const float contentW = std::max(std::max(tw(capFont, e.label), valLineW), e.showDrgx ? tw(capFont, drgxStr) : 0.0f);
+            const float span     = right - left;
+            const float infoW    = std::min(std::max((textX - left) + contentW + colGap * 2.0f, span * 0.28f), span * 0.52f);
+            cSparkL = left + infoW;
+            infoR   = cSparkL - colGap;
+        }
+        const float gap    = Layout::spacingXs();
+        const float stackH = capFont->LegacySize + gap + sub1->LegacySize + gap + capFont->LegacySize;
+        float cy = zoneTop + std::max(0.0f, (zoneBot - zoneTop - stackH) * 0.5f);
+        // label (muted)
+        dl->AddText(capFont, capFont->LegacySize, ImVec2(textX, cy), OnSurfaceMedium(), fit(e.label, capFont, std::max(24.0f*dp, infoR - textX)).c_str());
+        cy += capFont->LegacySize + gap;
+        // value (leads via a soft shadow) + delta chip trailing it
+        if (wantValue) {
+            const std::string vTxt = hasValue ? valStr : kDash;
+            DrawTextShadow(dl, sub1, sub1->LegacySize, ImVec2(textX, cy), hasValue?OnSurface():OnSurfaceDisabled(), vTxt.c_str());
+            if (wantChange && hasChange) {
+                const float pw = tw(capFont, chgStr) + 12.0f*dp, ph = capFont->LegacySize + 5.0f*dp;
+                const float chipX = textX + tw(sub1, vTxt) + Layout::spacingSm();
+                const float chipY = cy + (sub1->LegacySize - ph)*0.5f;
+                if (chipX + pw <= infoR) {
+                    dl->AddRectFilled(ImVec2(chipX, chipY), ImVec2(chipX+pw, chipY+ph), WithAlpha(chgCol, 34), ph*0.5f);
+                    dl->AddText(capFont, capFont->LegacySize, ImVec2(chipX+6.0f*dp, chipY + (ph-capFont->LegacySize)*0.5f), chgCol, chgStr.c_str());
+                }
             }
         }
+        cy += sub1->LegacySize + gap;
+        // DRGX (muted)
+        if (e.showDrgx) dl->AddText(capFont, capFont->LegacySize, ImVec2(textX, cy), OnSurfaceMedium(), fit(drgxStr, capFont, std::max(24.0f*dp, infoR - textX)).c_str());
+        if (hasSpark) pfDrawSparklineFilled(dl, ImVec2(cSparkL, zoneTop), ImVec2(right, zoneBot), spark, sparkCol, dp);
     } else {
-        // ---- SPOTLIGHT: muted name + DRGX on top, then a LARGE value coloured by 24h direction with a
-        //      delta chip, and a filled sparkline on the right. A third font tier no other style uses.
+        // ---- SPOTLIGHT: "big number over a chart" hero tile — a top zone (muted name + DRGX, then a
+        //      LARGE value coloured by 24h with a delta chip) over a dominant full-width sparkline band
+        //      filling the bottom. The value spans the full width now (no competing right strip).
         const float heroSz = sub1->LegacySize * 1.5f;   // ImGui 1.92 rebakes at this size (crisp, not upscaled)
-        const float sparkW = (right - left) * 0.34f;
-        const float sparkL = right - sparkW;
-        const float rightZoneL = hasSpark ? (sparkL - colGap) : right;
-        const float blockH = capFont->LegacySize + Layout::spacingXs() + heroSz;
-        const float topY = midY - blockH * 0.5f;
+        const float topY = rowMin.y + padY;
         float iconSz = capFont->LegacySize, x = left;
         if (!e.icon.empty()) {
-            material::project_icons::drawByName(dl, e.icon.c_str(), ImVec2(x+iconSz*0.5f, topY+iconSz*0.5f), accent?accent:OnSurfaceMedium(), Type().iconSmall(), iconSz);
+            material::project_icons::drawByName(dl, e.icon.c_str(), ImVec2(x+iconSz*0.5f, topY+capFont->LegacySize*0.5f), accent?accent:OnSurfaceMedium(), Type().iconSmall(), iconSz);
             x += iconSz + Layout::spacingSm();
         }
         // name (top-left, muted) + DRGX (top-right, muted)
         const float drgxW2 = e.showDrgx ? tw(capFont, drgxStr) : 0.0f;
-        if (e.showDrgx) rtext(capFont, rightZoneL, topY + capFont->LegacySize*0.5f, OnSurfaceMedium(), drgxStr);
-        const float nameMaxW = std::max(24.0f*dp, (rightZoneL - (e.showDrgx ? drgxW2 + colGap : 0.0f)) - x);
+        if (e.showDrgx) rtext(capFont, right, topY + capFont->LegacySize*0.5f, OnSurfaceMedium(), drgxStr);
+        const float nameMaxW = std::max(24.0f*dp, (right - (e.showDrgx ? drgxW2 + colGap : 0.0f)) - x);
         dl->AddText(capFont, capFont->LegacySize, ImVec2(x, topY), OnSurfaceMedium(), fit(e.label,capFont,nameMaxW).c_str());
         // hero value — coloured by 24h direction (neutral when no live change)
         const float valY = topY + capFont->LegacySize + Layout::spacingXs();
@@ -1260,17 +1284,22 @@ static void pfDrawRow(ImDrawList* dl, ImVec2 rowMin, ImVec2 rowMax,
         const ImU32 heroCol = !hasValue ? OnSurfaceDisabled() : (hasChange ? chgCol : OnSurface());
         DrawTextShadow(dl, sub1, heroSz, ImVec2(left, valY), heroCol, hero.c_str());
         const float heroW = sub1->CalcTextSizeA(heroSz, FLT_MAX, 0, hero.c_str()).x;
-        // delta chip trailing the hero value (only if it fits before the sparkline zone)
+        // delta chip trailing the hero value
         if (wantChange && hasChange) {
             const float pw = tw(capFont, chgStr) + 12.0f*dp, ph = capFont->LegacySize + 5.0f*dp;
             const float chipX = left + heroW + Layout::spacingSm();
             const float chipY = valY + (heroSz - ph)*0.5f;
-            if (chipX + pw <= rightZoneL) {
+            if (chipX + pw <= right) {
                 dl->AddRectFilled(ImVec2(chipX, chipY), ImVec2(chipX+pw, chipY+ph), WithAlpha(chgCol, 34), ph*0.5f);
                 dl->AddText(capFont, capFont->LegacySize, ImVec2(chipX+6.0f*dp, chipY + (ph-capFont->LegacySize)*0.5f), chgCol, chgStr.c_str());
             }
         }
-        if (hasSpark) pfDrawSparklineFilled(dl, ImVec2(sparkL, rowMin.y + padY), ImVec2(right, rowMax.y - padY), spark, sparkCol);
+        // full-width sparkline band filling the bottom of the tile, below the hero value
+        if (hasSpark) {
+            const float bandTop = valY + heroSz + Layout::spacingXs();
+            if (rowMax.y - padY - bandTop > 12.0f * dp)
+                pfDrawSparklineFilled(dl, ImVec2(left, bandTop), ImVec2(right, rowMax.y - padY), spark, sparkCol, dp);
+        }
     }
 
     if (zdVtx >= 0) {   // fade the just-emitted body vertices for an empty group
@@ -1474,6 +1503,23 @@ static void mktDrawPriceHero(const MktCtx& cx)
             float tradeBtnX = cardMax.x - pad - tradeBtnW;
             float tradeBtnY = cardMin.y + Layout::spacingSm();
 
+            // Chart line/candle segmented control, immediately left of the trade button — only when the
+            // selected range has per-exchange candles (Live / aggregate is line-only, nothing to toggle).
+            if (cx.chartCandles && cx.chartCandles->size() >= 2) {
+                const char* styleIcons[2] = { ICON_MD_SHOW_CHART, ICON_MD_CANDLESTICK_CHART };
+                const float csW = 2.0f * tradeBtnH;
+                const ImVec2 csOrigin(tradeBtnX - csW - Layout::spacingSm(), tradeBtnY);
+                const ImVec2 csSaved = ImGui::GetCursorScreenPos();
+                const int csCur = s_mkt.chartStyle;
+                const int csClk = SegmentedControl(dl, csOrigin, csW, tradeBtnH, styleIcons, 2, csCur,
+                                                   Type().iconSmall(), "##chartStyleSeg", dp);
+                if (csClk >= 0 && csClk != csCur) {
+                    s_mkt.chartStyle = csClk;
+                    if (app->settings()) { app->settings()->setChartStyle(csClk); app->settings()->save(); }
+                }
+                ImGui::SetCursorScreenPos(csSaved);
+            }
+
             ImVec2 tMin(tradeBtnX, tradeBtnY), tMax(tradeBtnX + tradeBtnW, tradeBtnY + tradeBtnH);
             bool tradeHov = material::IsRectHovered(tMin, tMax);
 
@@ -1596,30 +1642,7 @@ static void mktDrawPriceChart(const MktCtx& cx)
             bx += bw + Layout::spacingXs();
         }
 
-        // Line/candle toggle — only when the selected range has per-exchange candles (the aggregate /
-        // Live view is line-only, so the toggle is hidden there).
-        if (cx.chartCandles && cx.chartCandles->size() >= 2) {
-            bx += Layout::spacingSm();
-            ImFont* icoF = material::Typography::instance().iconSmall();
-            const bool isCandle = (s_mkt.chartStyle == 1);
-            const char* styleIcon = isCandle ? ICON_MD_CANDLESTICK_CHART : ICON_MD_SHOW_CHART;
-            ImVec2 tmn(bx, rowTop), tmx(bx + pillH, rowTop + pillH);
-            bool thov = material::IsRectHovered(tmn, tmx);
-            if (thov) { dl->AddRectFilled(tmn, tmx, IM_COL32(255, 255, 255, 20), 4.0f * mktDp);
-                        ImGui::SetMouseCursor(ImGuiMouseCursor_Hand); }
-            ImVec2 tiSz = icoF->CalcTextSizeA(icoF->LegacySize, FLT_MAX, 0, styleIcon);
-            dl->AddText(icoF, icoF->LegacySize,
-                        ImVec2(tmn.x + (pillH - tiSz.x) * 0.5f, tmn.y + (pillH - tiSz.y) * 0.5f),
-                        thov ? OnSurface() : OnSurfaceMedium(), styleIcon);
-            ImGui::SetCursorScreenPos(tmn);
-            if (ImGui::InvisibleButton("##ChartStyle", ImVec2(pillH, pillH))) {
-                s_mkt.chartStyle = isCandle ? 0 : 1;
-                if (app->settings()) { app->settings()->setChartStyle(s_mkt.chartStyle); app->settings()->save(); }
-            }
-            if (ImGui::IsItemHovered())
-                material::Tooltip("%s", TR(isCandle ? "market_style_line" : "market_style_candle"));
-            bx += pillH;
-        }
+        // (Line/candle chart-style toggle now lives top-right of the price hero, left of the trade button.)
 
         // Refresh button (far right).
         float rEdge = chartMax.x - chartPad;
@@ -1703,7 +1726,7 @@ static void mktDrawPriceChart(const MktCtx& cx)
             ImVec2 labelSz = capFont->CalcTextSizeA(capFont->LegacySize, FLT_MAX, 0, buf);
             // Keep the axis label inside the card even on narrow windows (min-padding may be
             // smaller than the label width) so it never spills onto the tab background.
-            float lblX = std::max(chartMin.x + 3.0f, plotLeft - labelSz.x - 6);
+            float lblX = std::max(chartMin.x + 3.0f * mktDp, plotLeft - labelSz.x - 6.0f * mktDp);
             dl->AddText(capFont, capFont->LegacySize,
                         ImVec2(lblX, gy - labelSz.y * 0.5f),
                         OnSurfaceDisabled(), buf);
@@ -1766,8 +1789,8 @@ static void mktDrawPriceChart(const MktCtx& cx)
                 tipX = std::max(plotLeft, tipX);
                 float tipY = plotTop + 4.0f * mktDp;
                 ImVec2 tMin(tipX, tipY), tMax(tipX + tw + pad * 2, tipY + th);
-                dl->AddRectFilled(tMin, tMax, IM_COL32(20, 20, 30, 235), 4.0f);
-                dl->AddRect(tMin, tMax, IM_COL32(255, 255, 255, 30), 4.0f, 0, 1.0f);
+                dl->AddRectFilled(tMin, tMax, IM_COL32(20, 20, 30, 235), 4.0f * mktDp);
+                dl->AddRect(tMin, tMax, IM_COL32(255, 255, 255, 30), 4.0f * mktDp, 0, 1.0f);
                 ImU32 cCol = (hc.close >= hc.open) ? Success() : Error();
                 dl->AddText(capFont, lh, ImVec2(tipX + pad, tipY + pad),                     OnSurface(), when);
                 dl->AddText(capFont, lh, ImVec2(tipX + pad, tipY + pad + lh + gap),          cCol, l2);
@@ -1870,16 +1893,16 @@ static void mktDrawPriceChart(const MktCtx& cx)
                 snprintf(buf, sizeof(buf), "%s", FormatPrice(s_mkt.history[idx]).c_str());
             ImVec2 tipSz = capFont->CalcTextSizeA(capFont->LegacySize, FLT_MAX, 0, buf);
             float tipPad = Layout::spacingSm() + Layout::spacingXs();
-            float tipX = px + 10;
-            float tipY = py - tipSz.y - tipPad * 2 - 4;
+            float tipX = px + 10.0f * mktDp;
+            float tipY = py - tipSz.y - tipPad * 2 - 4.0f * mktDp;
             if (tipX + tipSz.x + tipPad * 2 > plotRight)
-                tipX = px - tipSz.x - tipPad * 2 - 10;
-            if (tipY < plotTop) tipY = py + 10;
+                tipX = px - tipSz.x - tipPad * 2 - 10.0f * mktDp;
+            if (tipY < plotTop) tipY = py + 10.0f * mktDp;
 
             ImVec2 tipMin(tipX, tipY);
             ImVec2 tipMax(tipX + tipSz.x + tipPad * 2, tipY + tipSz.y + tipPad * 2);
-            dl->AddRectFilled(tipMin, tipMax, IM_COL32(20, 20, 30, 230), 4.0f);
-            dl->AddRect(tipMin, tipMax, IM_COL32(255, 255, 255, 30), 4.0f, 0, 1.0f);
+            dl->AddRectFilled(tipMin, tipMax, IM_COL32(20, 20, 30, 230), 4.0f * mktDp);
+            dl->AddRect(tipMin, tipMax, IM_COL32(255, 255, 255, 30), 4.0f * mktDp, 0, 1.0f);
             dl->AddText(capFont, capFont->LegacySize,
                         ImVec2(tipX + tipPad, tipY + tipPad), dotCol, buf);
         }
@@ -1945,23 +1968,29 @@ static void mktDrawPortfolio(const MktCtx& cx)
     }
 
     Type().textColored(TypeStyle::Overline, OnSurfaceMedium(), TR("market_portfolio"));
-    // Settings gear + "Manage…" button, right-aligned on the header row (gear left of Manage). The gear
-    // opens the general market-options modal; Manage opens the portfolio editor.
+    // Portfolio-style segmented control (Table / Cards / Spotlight) + "Manage…" button, right-aligned on
+    // the header row (style picker left of Manage). Manage opens the portfolio editor.
     {
         const char* ml = TR("portfolio_manage");
         float mBtnW = body2->CalcTextSizeA(body2->LegacySize, FLT_MAX, 0, ml).x + Layout::spacingMd() * 2;
-        const float gearW = ImGui::GetFrameHeight();   // square, matching the Manage button's height
-        const float gGap  = Layout::spacingXs();
+        const char* styleItems[3] = { TR("portfolio_style_compact"), TR("portfolio_style_detailed"),
+                                      TR("portfolio_style_featured") };
+        const float segH = ImGui::GetFrameHeight();
+        const float segW = 210.0f * mktDp;
+        const float sGap = Layout::spacingSm();
         ImGui::SameLine();
-        RightAlignX(mBtnW + gGap + gearW);   // reserve the whole group before drawing left-to-right
-        IconButtonStyle gst;
-        gst.tooltip    = TR("market_settings_tip");
-        gst.hoverBg    = WithAlpha(OnSurface(), 30);
-        gst.restBg     = WithAlpha(OnSurface(), 20);
-        gst.bgRounding = 7.0f * mktDp;
-        if (IconButton("##marketSettings", ICON_MD_SETTINGS, Type().iconSmall(), ImVec2(gearW, gearW), gst))
-            s_show_market_settings = true;
-        ImGui::SameLine(0.0f, gGap);
+        RightAlignX(segW + sGap + mBtnW);   // right-align the [style picker | Manage] group
+        const ImVec2 segOrigin = ImGui::GetCursorScreenPos();
+        const int curStyle = app->settings() ? app->settings()->getPortfolioStyle() : 0;
+        const int segClk = SegmentedControl(ImGui::GetWindowDrawList(), segOrigin, segW, segH,
+                                            styleItems, 3, curStyle, Type().caption(), "##pfStyleSeg", mktDp);
+        if (segClk >= 0 && segClk != curStyle && app->settings()) {
+            app->settings()->setPortfolioStyle(segClk);
+            app->settings()->save();
+        }
+        ImGui::SetCursorScreenPos(segOrigin);
+        ImGui::Dummy(ImVec2(segW, segH));   // reserve + restore layout flow
+        ImGui::SameLine(0.0f, sGap);
         if (material::TactileButton(ml, ImVec2(mBtnW, 0))) {
             // Open the editor on the first group visible to this wallet (or the empty state if none) —
             // never a raw index 0 that might belong to a different wallet.
@@ -2071,9 +2100,16 @@ static void mktDrawPortfolio(const MktCtx& cx)
         }
 
         int style = app->settings() ? app->settings()->getPortfolioStyle() : 0;
-        float rowH = (style == 0 ? 40.0f : style == 1 ? 68.0f : 80.0f) * mktDp;
+        // The Table's dedicated TREND column (+ its header label) is present for the whole list when any
+        // visible group opts into a sparkline, so the column aligns and doesn't flicker per row.
+        bool anySpark = false;
+        for (int i : vis) {
+            const auto& e = allEntries[i];
+            if (e.showSparkline && (e.priceBasis == 0 || e.priceBasis == 1)) { anySpark = true; break; }
+        }
+        float rowH = pfRowHeight(style, mktDp);
         // Table rows abut like a ledger (thin gap); Cards/Spotlight breathe.
-        float rowGap = (style == 0 ? 2.0f * mktDp : Layout::spacingSm());
+        float rowGap = pfRowGapFor(style, mktDp);
         float rowsH = std::max(rowH, portfolioH - pfSummaryH);
 
         ImGui::SetCursorScreenPos(ImVec2(cardMin.x, cardMin.y + pfSummaryH));
@@ -2108,6 +2144,8 @@ static void mktDrawPortfolio(const MktCtx& cx)
                     rdl->AddText(ovF, ovF->LegacySize, ImVec2(xr - w, ty), hcol, s);
                 };
                 rdl->AddText(ovF, ovF->LegacySize, ImVec2(hLeft, ty), hcol, TR("market_col_name"));
+                if (anySpark)   // TREND column header, left-aligned at the same x the row sparklines start
+                    rdl->AddText(ovF, ovF->LegacySize, ImVec2(hLeft + (hc.labelR - hLeft) * kPfTableTrendFrac, ty), hcol, TR("market_col_trend"));
                 hdr(hc.drgxR, DRAGONX_TICKER);
                 hdr(hc.valR,  TR("market_col_value"));
                 hdr(hc.chgR,  TR("market_24h"));
@@ -2124,7 +2162,7 @@ static void mktDrawPortfolio(const MktCtx& cx)
                 bool hov = ImGui::IsItemHovered();
                 if (hov) ImGui::SetMouseCursor(ImGuiMouseCursor_Hand);
                 ImGui::PopID();
-                pfDrawRow(rdl, rMin, rMax, allEntries[i], state, market, style, mktDp, sub1, capFont, hov);
+                pfDrawRow(rdl, rMin, rMax, allEntries[i], state, market, style, mktDp, sub1, capFont, hov, anySpark);
                 if (clicked) { PortfolioBeginEdit(app, i); s_pfEdit.open = true; }
                 if (vi + 1 < (int)vis.size()) ImGui::Dummy(ImVec2(rowW, rowGap));
             }
@@ -2138,87 +2176,6 @@ static void mktDrawPortfolio(const MktCtx& cx)
     ImGui::Dummy(ImVec2(0, gap));
 }
 
-// General market-tab options modal (opened by the PORTFOLIO-header gear). Mirrors the chat/contacts
-// settings modals: a BlurFloat overlay of right-aligned segmented controls + a text-sized Done button.
-// All controls write EXISTING settings (+ sync the live s_mkt mirror for chart range/style so the chart
-// updates the same frame). Rendered outside the scroll child so it overlays the page.
-static void RenderMarketSettings(App* app)
-{
-    if (!s_show_market_settings || !app->settings()) return;
-    auto* st = app->settings();
-    const float dp = Layout::dpiScale();
-
-    OverlayDialogSpec ov;
-    ov.title    = TR("market_settings_title");
-    ov.p_open   = &s_show_market_settings;
-    ov.style    = OverlayStyle::BlurFloat;
-    ov.cardWidth = 480.0f;
-    ov.idSuffix = "marketsettings";
-    if (BeginOverlayDialog(ov)) {
-        const float ctrlW = 280.0f * dp;   // roomy enough for the multi-word segment labels
-        auto rowStart = [&](const char* label) {
-            ImGui::AlignTextToFramePadding();
-            ImGui::TextUnformatted(label);
-            ImGui::SameLine();
-            ImGui::SetCursorPosX(ImGui::GetCursorPosX() + std::max(0.0f, ImGui::GetContentRegionAvail().x - ctrlW));
-        };
-        // A right-aligned segmented control on its own row; returns the clicked index (-1 if none).
-        auto seg = [&](const char* label, const char* const* items, int count, int cur, const char* id) -> int {
-            rowStart(label);
-            const float segH = ImGui::GetFrameHeight();
-            const ImVec2 o = ImGui::GetCursorScreenPos();
-            int clk = SegmentedControl(ImGui::GetWindowDrawList(), o, ctrlW, segH,
-                                       items, count, cur, Type().caption(), id, dp);
-            ImGui::SetCursorScreenPos(o);
-            ImGui::Dummy(ImVec2(ctrlW, segH));   // restore + reserve the control's rect for layout flow
-            return clk;
-        };
-
-        // Portfolio layout — surfaces the row style that was previously only Left/Right-arrow cyclable,
-        // and (unlike the arrow cycle) persists it.
-        {
-            const char* items[] = { TR("portfolio_style_compact"), TR("portfolio_style_detailed"),
-                                    TR("portfolio_style_featured") };
-            const int cur = st->getPortfolioStyle();
-            const int clk = seg(TR("portfolio_style_label"), items, 3, cur, "##mktPfStyle");
-            if (clk >= 0 && clk != cur) { st->setPortfolioStyle(clk); st->save(); }
-        }
-        // (Chart RANGE is deliberately not duplicated here — the Live/1H/1D/1W/1M toggle is always
-        //  visible on the chart itself, and a 5-segment control can't hold long "Live" translations.)
-        // Chart style (candlesticks only render where per-exchange OHLC exists; the setting is still stored).
-        {
-            ImGui::Dummy(ImVec2(0.0f, 4.0f * dp));
-            const char* items[] = { TR("market_style_line_label"), TR("market_style_candle_label") };
-            const int cur = st->getChartStyle();
-            const int clk = seg(TR("market_opt_chart_style"), items, 2, cur, "##mktChartStyle");
-            if (clk >= 0 && clk != cur) { s_mkt.chartStyle = clk; st->setChartStyle(clk); st->save(); }
-        }
-        // Fetch live prices (master toggle, mirrors the general Settings page).
-        {
-            ImGui::Dummy(ImVec2(0.0f, 6.0f * dp));
-            bool v = st->getFetchPrices();
-            if (ImGui::Checkbox(TR("fetch_prices"), &v)) { st->setFetchPrices(v); st->save(); }
-        }
-
-        // Done — sized to its text (+ a little shoulder room) and centered, not full width.
-        ImGui::Dummy(ImVec2(0.0f, 8.0f * dp));
-        {
-            const char* doneLbl = TR("chat_settings_done");
-            ImGui::PushFont(Type().button());
-            const float bw = ImGui::CalcTextSize(doneLbl).x + ImGui::GetStyle().FramePadding.x * 2.0f + 28.0f * dp;
-            ImGui::PopFont();
-            ImGui::SetCursorPosX(ImGui::GetCursorPosX() + std::max(0.0f, (ImGui::GetContentRegionAvail().x - bw) * 0.5f));
-            ImGui::PushStyleColor(ImGuiCol_Button,        ImGui::ColorConvertU32ToFloat4(WithAlpha(Primary(), 205)));
-            ImGui::PushStyleColor(ImGuiCol_ButtonHovered, ImGui::ColorConvertU32ToFloat4(Primary()));
-            ImGui::PushStyleColor(ImGuiCol_ButtonActive,  ImGui::ColorConvertU32ToFloat4(WithAlpha(Primary(), 235)));
-            if (material::TactileButton(doneLbl, ImVec2(bw, 0)))
-                s_show_market_settings = false;
-            ImGui::PopStyleColor(3);
-        }
-        EndOverlayDialog();
-    }
-}
-
 void RenderMarketTab(App* app)
 {
     auto& S = schema::UI();
@@ -2241,6 +2198,10 @@ void RenderMarketTab(App* app)
     // Also kick the historical price-chart fetch (self-throttled) so the chart's hour/day/week/
     // month intervals populate promptly when the user opens the Market tab.
     app->refreshMarketChart();
+    // ...and the SELECTED pair's per-exchange OHLC candles (self-throttled, in-flight-guarded). Without
+    // this, the candle series only loaded on a pair-chip / refresh click, so the candlestick toggle was
+    // missing (and "switch to candlesticks" silently did nothing) when the tab was just opened.
+    app->refreshExchangeChart();
     const auto& registry = EffectiveRegistry(market);
 
     // Load persisted exchange/pair on first frame
@@ -2253,7 +2214,7 @@ void RenderMarketTab(App* app)
     // Left/Right arrows: cycle portfolio row styles (compact / detailed / featured), mirroring the
     // Overview tab's layout switch. Skip while typing, when Ctrl is held (theme cycle), or while the
     // portfolio editor / market-settings modal is open.
-    if (app->settings() && !s_pfEdit.open && !s_show_market_settings &&
+    if (app->settings() && !s_pfEdit.open &&
         !ImGui::GetIO().WantTextInput && !ImGui::GetIO().KeyCtrl) {
         bool prev = ImGui::IsKeyPressed(ImGuiKey_LeftArrow);
         bool next = ImGui::IsKeyPressed(ImGuiKey_RightArrow);
@@ -2319,8 +2280,8 @@ void RenderMarketTab(App* app)
     for (const auto& e : pfEntriesGeo)
         if (e.scope.empty() || (!pfActiveHash.empty() && e.scope == pfActiveHash)) pfVisN++;
     int   pfStyle    = app->settings()->getPortfolioStyle();
-    float pfRowH     = (pfStyle == 0 ? 40.0f : pfStyle == 1 ? 68.0f : 80.0f) * mktDp;
-    float pfRowGap   = (pfStyle == 0 ? 2.0f * mktDp : Layout::spacingSm());   // Table rows abut
+    float pfRowH     = pfRowHeight(pfStyle, mktDp);
+    float pfRowGap   = pfRowGapFor(pfStyle, mktDp);   // Table rows abut
     float pfHeaderH  = (pfStyle == 0) ? (capFont->LegacySize + 8.0f * mktDp) : 0.0f;   // Table column strip
     const int pfMaxVisibleRows = 4;                        // rows shown before the list scrolls
     // Height for up to pfMaxVisibleRows rows. ItemSpacing is zeroed inside the row child, so the
@@ -2389,7 +2350,6 @@ void RenderMarketTab(App* app)
     // Portfolio editor modal (rendered outside the scroll child so it overlays the page). It captures
     // + blurs the live content drawn above, so it must render after the tab body.
     RenderPortfolioEditor(app);
-    RenderMarketSettings(app);
 }
 
 } // namespace ui

src/ui/windows/mining_controls.cpp

@@ -57,7 +57,10 @@ void RenderMiningControls(App* app, const WalletState& state, const MiningInfo&
 
         // --- Compute thread grid layout based on controls card width ---
         // Estimate controlsW first to compute cols correctly
-        float estControlsW = availWidth - std::min(schema::UI().drawElement("tabs.mining", "button-max-width-clamp").size, miningBtnMaxW) - miningBtnGap;
+        // The Mine button is square (= card height, which scales with DPI), so the width we
+        // reserve for it here must scale too — a RAW clamp under-reserves at >100% scaling, which
+        // over-estimates the grid width and lets the thread cells overflow the card (e.g. at 150%).
+        float estControlsW = availWidth - std::min(schema::UI().drawElement("tabs.mining", "button-max-width-clamp").size * dp, miningBtnMaxW) - miningBtnGap;
         float innerW  = estControlsW - pad * 2;
         float cellSz  = std::clamp(schema::UI().drawElement("tabs.mining", "cell-size").size * vs, schema::UI().drawElement("tabs.mining", "cell-min-size").size, schema::UI().drawElement("tabs.mining", "cell-max-size").sizeOr(42.0f));
         float cellGap = std::max(schema::UI().drawElement("tabs.mining", "cell-gap-min").size, cellSz * schema::UI().drawElement("tabs.mining", "cell-gap-ratio").size);

src/ui/windows/mining_mode_toggle.cpp

@@ -308,11 +308,14 @@ void RenderMiningModeToggle(App* app, const WalletState& state, const MiningInfo
                             pdl->AddRectFilled(rowMin, rowMax, IM_COL32(255, 255, 255, 10));
                         if (rowHov && !inXZone)
                             pdl->AddRectFilled(rowMin, rowMax, StateHover());
-                        // Item text with internal padding
+                        // Item text with internal padding, middle-truncated so a long saved URL
+                        // can't run under the trailing X (delete) button.
                         float textY = rowMin.y + (rowH - rowFontSz) * 0.5f;
+                        float maxTextW = popupInnerW - xZoneW - textPadX * 2.0f;
+                        std::string urlDisp = material::TruncateToWidth(url, rowFont, rowFontSz, maxTextW);
                         pdl->AddText(rowFont, rowFontSz,
                             ImVec2(rowMin.x + textPadX, textY),
-                            isCurrent ? Primary() : OnSurface(), url.c_str());
+                            isCurrent ? Primary() : OnSurface(), urlDisp.c_str());
                         // X button — flush with right edge, icon centered
                         {
                             ImVec2 xMin(rowMax.x - xZoneW, rowMin.y);
@@ -467,11 +470,14 @@ void RenderMiningModeToggle(App* app, const WalletState& state, const MiningInfo
                             pdl->AddRectFilled(rowMin, rowMax, IM_COL32(255, 255, 255, 10));
                         if (rowHov && !inXZone)
                             pdl->AddRectFilled(rowMin, rowMax, StateHover());
-                        // Full address text with internal padding
+                        // Address text with internal padding, middle-truncated so a full z-address
+                        // (~78 chars) can't run under the trailing X (delete) button.
                         float textY = rowMin.y + (wRowH - wRowFontSz) * 0.5f;
+                        float wMaxTextW = wPopupInnerW - wXZoneW - wTextPadX * 2.0f;
+                        std::string addrDisp = material::TruncateToWidth(addr, wRowFont, wRowFontSz, wMaxTextW);
                         pdl->AddText(wRowFont, wRowFontSz,
                             ImVec2(rowMin.x + wTextPadX, textY),
-                            isCurrent ? Primary() : OnSurface(), addr.c_str());
+                            isCurrent ? Primary() : OnSurface(), addrDisp.c_str());
                         // Tooltip for long addresses
                         if (rowHov && !inXZone)
                             material::Tooltip("%s", addr.c_str());

src/ui/windows/transactions_tab.cpp

@@ -26,6 +26,7 @@
 #include <ctime>
 #include <cmath>
 #include <unordered_map>
+#include <unordered_set>
 #include <vector>
 
 namespace dragonx {
@@ -141,6 +142,12 @@ void RenderTransactionsTab(App* app)
     const auto addrLabel    = S.label("tabs.transactions", "address-label");
     const auto& state = app->state();
 
+    // Txids that carried a chat message (sent or received) — drives the "Message" badge and the Chat
+    // filter below. Rebuilt each frame from the in-memory chat store (cheap: O(chat messages), which
+    // is small); empty when chat is disabled or the wallet has no chat identity. Both variants populate
+    // the chat store before this tab renders, so the same lookup serves full-node and lite.
+    const std::unordered_set<std::string> chatTxids = app->chatService().store().chatTxids();
+
     // Responsive scale factors (recomputed every frame)
     ImVec2 contentAvail = ImGui::GetContentRegionAvail();
     const float hs = Layout::hScale(contentAvail.x);
@@ -250,8 +257,9 @@ void RenderTransactionsTab(App* app)
                         innerPad, iconSz, glassSpec, ovFont, capFont, body2, "mined", goldCol, "mined_upper",
                         minedCount, minedTotal, "+", 3, type_filter);
 
-        // Selected card accent
-        if (type_filter > 0) {
+        // Selected card accent (only the three summary cards map to a card position — the Chat filter
+        // (4) has no card, so guard the idx_map lookup to 1..3).
+        if (type_filter > 0 && type_filter <= 3) {
             int idx_map[] = {-1, 1, 0, 2};
             int idx = idx_map[type_filter];
             float xOff = idx * (cardW + cardGap);
@@ -281,7 +289,8 @@ void RenderTransactionsTab(App* app)
         ImGui::SameLine(0, filterGap);
         float comboW = std::max(80.0f, ((filterCombo.width > 0) ? filterCombo.width : 120.0f) * hs);
         ImGui::SetNextItemWidth(comboW);
-        const char* types[] = { TR("all_filter"), TR("sent_filter"), TR("received_filter"), TR("mined_filter") };
+        const char* types[] = { TR("all_filter"), TR("sent_filter"), TR("received_filter"),
+                                TR("mined_filter"), TR("chat_filter") };
         ImGui::Combo("##TxType", &type_filter, types, IM_ARRAYSIZE(types));
 
         // Sort selector
@@ -476,6 +485,7 @@ void RenderTransactionsTab(App* app)
                 if (type_filter == 1 && dtx.display_type != "send" && dtx.display_type != "shield") continue;
                 if (type_filter == 2 && dtx.display_type != "receive") continue;
                 if (type_filter == 3 && dtx.display_type != "generate" && dtx.display_type != "immature" && dtx.display_type != "mined") continue;
+                if (type_filter == 4 && chatTxids.count(dtx.txid) == 0) continue;   // chat-only
             }
             if (!search_str.empty()) {
                 if (!containsIgnoreCase(dtx.address, search_str) &&
@@ -657,6 +667,7 @@ void RenderTransactionsTab(App* app)
 
                     // Determine type info
                     bool shieldedDisplay = tx.display_type == "shield";
+                    const bool isChatTx = chatTxids.count(tx.txid) > 0;   // carried a chat message
                     ImU32 iconCol;
                     const char* typeStr;
                     if (shieldedDisplay) {
@@ -749,12 +760,17 @@ void RenderTransactionsTab(App* app)
                         }
                         // Position status badge in the middle-right area
                         ImVec2 sSz = capFont->CalcTextSizeA(capFont->LegacySize, FLT_MAX, 0, statusStr);
-                        const char* shieldedStr = TR("shielded_type");
-                        ImVec2 shieldSz = shieldedDisplay
-                            ? capFont->CalcTextSizeA(capFont->LegacySize, FLT_MAX, 0, shieldedStr)
+                        // Optional "top" badge stacked above the status pill: "Message" for a chat tx or
+                        // "Shielded" for an autoshield. Chat txs are send/receive (not the "shield" type),
+                        // so the two are mutually exclusive; chat takes precedence.
+                        const bool  showTopBadge = isChatTx || shieldedDisplay;
+                        const char* topBadgeStr  = isChatTx ? TR("tx_chat_badge") : TR("shielded_type");
+                        const ImU32 topBadgeCol  = isChatTx ? Secondary() : Primary();
+                        ImVec2 topSz = showTopBadge
+                            ? capFont->CalcTextSizeA(capFont->LegacySize, FLT_MAX, 0, topBadgeStr)
                             : ImVec2(0, 0);
-                        float shieldPillW = shieldSz.x + Layout::spacingSm() * 2.0f;
-                        float stackW = shieldedDisplay ? std::max(sSz.x, shieldPillW) : sSz.x;
+                        float topPillW = topSz.x + Layout::spacingSm() * 2.0f;
+                        float stackW = showTopBadge ? std::max(sSz.x, topPillW) : sSz.x;
                         float statusX = amtX - stackW - Layout::spacingXxl();
                         float minStatusX = cx + innerW * 0.25f; // don't overlap address
                         if (statusX < minStatusX) statusX = minStatusX;
@@ -763,18 +779,17 @@ void RenderTransactionsTab(App* app)
                         // row background on every skin (faint alpha-30 fills used to vanish on dark-red /
                         // near-white / gradient skins). Fill 48, border 90 of the state color's RGB.
                         const float pillRound = schema::UI().drawElement("tabs.transactions", "status-pill-rounding").size;
-                        if (shieldedDisplay) {
-                            float shieldX = statusX + (stackW - shieldSz.x) * 0.5f;
-                            ImU32 shieldCol = Primary();
-                            ImVec2 shieldPillMin(shieldX - Layout::spacingSm(), cy - 1.0f);
-                            ImVec2 shieldPillMax(shieldX + shieldSz.x + Layout::spacingSm(),
-                                                 shieldPillMin.y + capFont->LegacySize + Layout::spacingXs());
-                            dl->AddRectFilled(shieldPillMin, shieldPillMax,
-                                              (shieldCol & 0x00FFFFFFu) | (static_cast<ImU32>(48) << 24), pillRound);
-                            dl->AddRect(shieldPillMin, shieldPillMax,
-                                        (shieldCol & 0x00FFFFFFu) | (static_cast<ImU32>(90) << 24), pillRound, 0, 1.0f);
+                        if (showTopBadge) {
+                            float topX = statusX + (stackW - topSz.x) * 0.5f;
+                            ImVec2 topPillMin(topX - Layout::spacingSm(), cy - 1.0f);
+                            ImVec2 topPillMax(topX + topSz.x + Layout::spacingSm(),
+                                              topPillMin.y + capFont->LegacySize + Layout::spacingXs());
+                            dl->AddRectFilled(topPillMin, topPillMax,
+                                              (topBadgeCol & 0x00FFFFFFu) | (static_cast<ImU32>(48) << 24), pillRound);
+                            dl->AddRect(topPillMin, topPillMax,
+                                        (topBadgeCol & 0x00FFFFFFu) | (static_cast<ImU32>(90) << 24), pillRound, 0, 1.0f);
                             dl->AddText(capFont, capFont->LegacySize,
-                                        ImVec2(shieldX, cy), shieldCol, shieldedStr);
+                                        ImVec2(topX, cy), topBadgeCol, topBadgeStr);
                         }
                         // Background pill
                         ImVec2 pillMin(statusTextX - Layout::spacingSm(), cy + body2->LegacySize + 1);

src/util/bootstrap.cpp

@@ -31,6 +31,31 @@ static bool endsWith(const std::string& s, const std::string& suffix) {
     return s.compare(s.size() - suffix.size(), suffix.size(), suffix) == 0;
 }
 
+// Reject archive member names that would escape the extraction root (zip-slip).
+// The snapshot legitimately carries sub-paths (blocks/, chainstate/), so — unlike the
+// updaters, which flatten to baseName() — we keep the relative path but refuse any entry
+// that is absolute, drive/UNC-rooted, or contains a ".." component.
+static bool isSafeArchivePath(const std::string& name) {
+    if (name.empty()) return false;
+    std::string n = name;
+    std::replace(n.begin(), n.end(), '\\', '/');   // normalize Windows separators
+    if (n.front() == '/') return false;             // absolute POSIX path
+    const char c0 = n[0];
+    if (n.size() >= 2 && n[1] == ':' &&
+        ((c0 >= 'A' && c0 <= 'Z') || (c0 >= 'a' && c0 <= 'z')))
+        return false;                               // Windows drive letter (C:...)
+    size_t start = 0;
+    while (start <= n.size()) {
+        const size_t slash = n.find('/', start);
+        const std::string comp =
+            n.substr(start, slash == std::string::npos ? std::string::npos : slash - start);
+        if (comp == "..") return false;             // path traversal component
+        if (slash == std::string::npos) break;
+        start = slash + 1;
+    }
+    return true;
+}
+
 static size_t writeFileCallback(void* contents, size_t size, size_t nmemb, void* userp) {
     size_t total = size * nmemb;
     FILE* fp = static_cast<FILE*>(userp);
@@ -383,6 +408,16 @@ bool Bootstrap::extract(const std::string& zipPath, const std::string& dataDir)
 
         std::string filename = stat.m_filename;
 
+        // *** SECURITY: reject zip-slip / path-traversal entries before building any path ***
+        // A legitimate snapshot from the project host never contains these; an entry that does
+        // indicates a malicious/corrupt archive, so abort rather than silently skip.
+        if (!isSafeArchivePath(filename)) {
+            DEBUG_LOGF("[Bootstrap] Unsafe archive path rejected: %s\n", filename.c_str());
+            setProgress(State::Failed, "Refusing to extract unsafe archive entry: " + filename);
+            mz_zip_reader_end(&zip);
+            return false;
+        }
+
         // *** CRITICAL: Skip wallet.dat ***
         if (filename == "wallet.dat" || endsWith(filename, "/wallet.dat")) {
             DEBUG_LOGF("[Bootstrap] Skipping wallet.dat (protected)\n");

src/util/http_download.cpp

@@ -19,10 +19,19 @@ namespace util {
 
 namespace {
 
+// Cap for in-memory text/JSON responses (release metadata, price/candle data). Far above any
+// legitimate body, but bounds memory if a hostile/MITM'd server streams an unbounded response.
+constexpr std::size_t kMaxMetadataBytes = 16u * 1024 * 1024;
+
 size_t writeStringCb(void* contents, size_t size, size_t nmemb, void* userp)
 {
-    static_cast<std::string*>(userp)->append(static_cast<char*>(contents), size * nmemb);
-    return size * nmemb;
+    auto* s = static_cast<std::string*>(userp);
+    const size_t n = size * nmemb;
+    // Hard cap: a chunked response omits Content-Length, so CURLOPT_MAXFILESIZE cannot catch it —
+    // aborting here (short count) makes curl fail the transfer instead of exhausting memory.
+    if (s->size() + n > kMaxMetadataBytes) return 0;
+    s->append(static_cast<char*>(contents), n);
+    return n;
 }
 
 size_t writeFileCb(void* contents, size_t size, size_t nmemb, void* userp)
@@ -52,6 +61,7 @@ std::string httpGetString(const std::string& url, const char* logTag)
     curl_easy_setopt(curl, CURLOPT_USERAGENT, "ObsidianDragon/1.0");
     curl_easy_setopt(curl, CURLOPT_TIMEOUT, 30L);
     curl_easy_setopt(curl, CURLOPT_CONNECTTIMEOUT, 15L);
+    curl_easy_setopt(curl, CURLOPT_MAXFILESIZE_LARGE, static_cast<curl_off_t>(kMaxMetadataBytes));  // reject oversized metadata
     curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 1L);
     curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 2L);
     const CURLcode res = curl_easy_perform(curl);

src/util/i18n.cpp

@@ -266,6 +266,13 @@ void I18n::loadBuiltinEnglish()
         strings_["chat_rename"] = "Rename contact";
         strings_["chat_rename_hint"] = "Contact name";
         strings_["chat_renamed"] = "Contact renamed";
+        // Chat note-buffer status (status bar, while the Chat tab is active). %d are counts;
+        // keep the format specifiers intact in translations.
+        strings_["chat_buffer_sending_one"] = "Chat: sending %d message\xE2\x80\xA6";
+        strings_["chat_buffer_sending"] = "Chat: sending %d messages\xE2\x80\xA6";
+        strings_["chat_buffer_preparing"] = "Chat buffer: preparing %d/%d\xE2\x80\xA6";
+        strings_["chat_buffer_loading"] = "Chat buffer: \xE2\x80\xA6";
+        strings_["chat_buffer_ready"] = "Chat buffer: %d/%d ready";
         // Chat customization (gear modal + Settings → Chat & Contacts)
         strings_["chat_settings_title"] = "Chat settings";
         strings_["chat_settings_tip"] = "Chat customization";
@@ -714,6 +721,47 @@ void I18n::loadBuiltinEnglish()
         strings_["tt_idle_delay"] = "How long to wait before starting mining";
         strings_["tt_wizard"] = "Re-run the initial setup wizard\nDaemon will be restarted";
         strings_["tt_download_bootstrap"] = "Download blockchain bootstrap to speed up sync\nExisting block data will be replaced";
+        // --- Full-node Node & Security tooltips ---
+        strings_["tt_rpc_toggle"] = "Show or hide the read-only RPC connection details (host, port, user, password) for the daemon";
+        strings_["tt_daemon_refresh"] = "Re-read the installed and bundled dragonxd version, size, and date shown above";
+        // --- Lite wallet Node & Security tooltips ---
+        strings_["tt_lite_lifecycle_toggle"] = "Show or hide the create / open / restore controls for managing your lite wallet file";
+        strings_["tt_lite_lifecycle_op"] = "Choose whether to create a new wallet, open an existing one, or restore one from a seed phrase";
+        strings_["tt_lite_wallet_path"] = "Path or name of the wallet file to open or restore into";
+        strings_["tt_lite_restore_seed"] = "The 24-word recovery seed phrase to restore this wallet from; hidden as you type";
+        strings_["tt_lite_restore_birthday"] = "Block height the wallet was created at; scanning starts here. Use 0 or the earliest height if unsure";
+        strings_["tt_lite_restore_account"] = "HD account index to restore; leave 0 unless you used multiple accounts under this seed";
+        strings_["tt_lite_restore_overwrite"] = "Replace an existing wallet file with this restore. Warning: overwrites the current wallet data";
+        strings_["tt_lite_lifecycle_pass"] = "Passphrase to unlock or set on the wallet during this create / open / restore operation";
+        strings_["tt_lite_lifecycle_run"] = "Run the selected create / open / restore operation with the values above";
+        strings_["tt_lite_show_seed"] = "Reveal this wallet's recovery seed phrase and birthday. Anyone with the seed can spend your funds";
+        strings_["tt_lite_show_keys"] = "Reveal this wallet's private spending keys. Anyone with a key can spend the funds it controls";
+        strings_["tt_lite_copy"] = "Copy the revealed secret to the clipboard";
+        strings_["tt_lite_save_seed_file"] = "Write the seed and birthday to an owner-only file (lite-seed-backup.txt) in the config folder";
+        strings_["tt_lite_hide_wipe"] = "Hide the revealed secret and securely wipe it from memory";
+        strings_["tt_lite_import_key"] = "Paste a private spending or viewing key to import; its history appears after the next sync";
+        strings_["tt_lite_import_key_btn"] = "Import the entered private key into this wallet; funds and history appear after the next sync";
+        strings_["tt_lite_encrypt_pass"] = "Passphrase to encrypt the wallet with. If lost, the wallet cannot be unlocked or recovered";
+        strings_["tt_lite_encrypt"] = "Encrypt the wallet with the passphrase above; it locks immediately and requires the passphrase to unlock";
+        strings_["tt_lite_unlock_pass"] = "Enter your passphrase to unlock the encrypted wallet";
+        strings_["tt_lite_unlock"] = "Unlock the encrypted wallet using the passphrase above";
+        strings_["tt_lite_lock"] = "Lock the wallet now; a passphrase is required to unlock and any chat session is torn down";
+        strings_["tt_lite_decrypt_pass"] = "Enter your passphrase to remove encryption from the wallet";
+        strings_["tt_lite_remove_encrypt"] = "Remove encryption and store the wallet unprotected; no passphrase will be required to open it";
+        // --- Chat & Contacts tooltips ---
+        strings_["tt_chat_emoji_style"] = "Render emoji in monochrome outline or full color";
+        strings_["tt_chat_bubble_style"] = "Message bubble shape: rounded, square, or minimal (flat, borderless)";
+        strings_["tt_chat_bubble_accent"] = "Accent color for your outgoing message bubbles (or follow the current theme)";
+        strings_["tt_chat_density"] = "Spacing between messages: Comfortable adds more padding; Compact fits more on screen";
+        strings_["tt_chat_font_size"] = "Scale chat message text from 0.8x to 1.5x. Affects only the Chat tab, not the rest of the app";
+        strings_["tt_chat_poll_rate"] = "How often to check for new and 0-conf messages (0.5-15 s). Faster is more responsive but uses more CPU";
+        strings_["tt_chat_timestamp"] = "Timestamp format for this tab only: follow the app-wide clock, or force 24-hour or 12-hour";
+        strings_["tt_chat_enter_sends"] = "When on, Enter sends the message and Shift+Enter adds a newline; when off, Enter adds a newline";
+        // --- Debug Options tooltips ---
+        strings_["tt_screenshot_sweep"] = "Cycle every theme across every tab, saving a screenshot of each into the config screenshots folder (overwrites the last sweep)";
+        strings_["tt_screenshot_sweep_full"] = "Like the theme sweep but also captures every modal / dialog / flow using temporary offline demo wallet data";
+        strings_["tt_screenshot_open_dir"] = "Open the screenshots folder (under the config directory) in your file manager";
+        strings_["tt_seed_demo_chat"] = "Inject sample conversations into the Chat tab so a sweep captures its UI; in-memory only, gone on restart";
         strings_["download_bootstrap"] = "Download Bootstrap";
         strings_["download"] = "Download";
         strings_["retry"] = "Retry";
@@ -1004,6 +1052,7 @@ void I18n::loadBuiltinEnglish()
         strings_["sent_filter"] = "Sent";
         strings_["received_filter"] = "Received";
         strings_["mined_filter"] = "Mined";
+        strings_["chat_filter"] = "Chat";
         strings_["sort_date_newest"] = "Newest first";
         strings_["sort_date_oldest"] = "Oldest first";
         strings_["sort_amount_high"] = "Largest amount";
@@ -1019,6 +1068,7 @@ void I18n::loadBuiltinEnglish()
         strings_["address_upper"] = "ADDRESS";
         strings_["memo_upper"] = "MEMO";
         strings_["shielded_type"] = "Shielded";
+        strings_["tx_chat_badge"] = "Message";
         strings_["recv_type"] = "Recv";
         strings_["sent_type"] = "Sent";
         strings_["immature_type"] = "Immature";
@@ -1395,6 +1445,12 @@ void I18n::loadBuiltinEnglish()
         strings_["console_available_commands"] = "Available commands:";
         strings_["console_quit_note"] = "'quit'/'exit' aren't needed here — just close the window.";
         strings_["lite_console_help_passthrough"] = "Any other input runs as a lite-wallet console command.";
+        strings_["lite_console_backend_commands"] = "Backend commands:";
+        strings_["console_no_output"] = "(no output)";
+        strings_["console_backend_unavailable"] = "No backend";
+        strings_["console_last_error"] = "Last error:";
+        strings_["console_not_connected_lite"] = "Error: no wallet open";
+        strings_["console_stop_confirm_node"] = "'stop' will shut down the node and disconnect the wallet. Type 'stop' again to confirm.";
         strings_["console_capturing_output"] = "Capturing daemon output...";
         strings_["console_clear"] = "Clear";
         strings_["console_clear_console"] = "Clear Console";
@@ -1434,6 +1490,7 @@ void I18n::loadBuiltinEnglish()
         strings_["console_no_daemon"] = "No daemon";
         strings_["console_not_connected"] = "Error: Not connected to daemon";
         strings_["console_rpc_reference"] = "RPC Command Reference";
+        strings_["console_backend_reference"] = "Backend Command Reference";
         strings_["console_rpc_trace"] = "RPC";
         strings_["console_app"] = "App";
         strings_["console_show_app_output"] = "Show [app] wallet log lines";
@@ -1442,6 +1499,7 @@ void I18n::loadBuiltinEnglish()
         strings_["console_show_daemon_output"] = "Show daemon output";
         strings_["console_show_errors_only"] = "Show errors only";
         strings_["console_show_rpc_ref"] = "Show RPC command reference";
+        strings_["console_show_backend_ref"] = "Show backend command reference";
         strings_["console_show_rpc_trace"] = "Show app RPC calls";
         strings_["console_showing_lines"] = "Showing %zu of %zu lines";
         strings_["console_starting_node"] = "Starting node...";
@@ -1467,10 +1525,15 @@ void I18n::loadBuiltinEnglish()
         strings_["console_cat_wallet"] = "Wallet";
         strings_["console_cat_raw_transactions"] = "Raw Transactions";
         strings_["console_cat_utility"] = "Utility";
+        strings_["console_cat_sync"] = "Sync";
+        strings_["console_cat_send"] = "Send";
+        strings_["console_cat_keys"] = "Keys & Security";
+        strings_["console_cat_advanced"] = "Advanced";
         strings_["console_ref_search_hint"] = "Search by name or task\xE2\x80\xA6";
         strings_["console_ref_parameters"] = "Parameters";
         strings_["console_ref_no_params"] = "Takes no parameters.";
         strings_["console_ref_optional"] = "optional";
+        strings_["console_ref_value"] = "value";
         strings_["console_ref_example"] = "Example";
         strings_["console_ref_builds"] = "Builds";
         strings_["console_ref_destructive"] = "Consequential";
@@ -1568,6 +1631,7 @@ void I18n::loadBuiltinEnglish()
         strings_["market_24h"] = "24h";
         strings_["market_col_name"] = "Name";
         strings_["market_col_value"] = "Value";
+        strings_["market_col_trend"] = "Trend";
         strings_["market_24h_volume"] = "24H VOLUME";
         strings_["market_6h"] = "6h";
         strings_["market_iv_live"] = "Live";
@@ -1853,6 +1917,7 @@ void I18n::loadBuiltinEnglish()
         strings_["lite_net_show_hidden"]  = "Show hidden servers";
         strings_["lite_net_hidden_section"] = "Hidden servers";
         strings_["lite_net_connected"]    = "Connected";
+        strings_["lite_net_connecting"]   = "Connecting";
         strings_["lite_net_disconnected"] = "Not connected";
         strings_["lite_net_syncing"]      = "Syncing";
         strings_["lite_net_synced"]       = "Synced";

src/util/logger.cpp

@@ -57,7 +57,15 @@ void Logger::write(const std::string& message)
         now.time_since_epoch()) % 1000;
     
     std::stringstream ss;
-    ss << std::put_time(std::localtime(&time), "%Y-%m-%d %H:%M:%S");
+    // Reachable from worker/monitor threads — std::localtime shares a process-wide static tm, so use the
+    // reentrant variant into a local tm (the logger's own mutex can't protect other localtime callers).
+    std::tm tmv{};
+#ifdef _WIN32
+    localtime_s(&tmv, &time);
+#else
+    localtime_r(&time, &tmv);
+#endif
+    ss << std::put_time(&tmv, "%Y-%m-%d %H:%M:%S");
     ss << '.' << std::setfill('0') << std::setw(3) << ms.count();
     ss << " | " << message;
     

src/util/pool_registry_core.cpp

@@ -30,14 +30,6 @@ const std::vector<KnownPool>& knownPools()
             "https://pool.dragonx.is/api/stats", PoolStatsSchema::DragonXIs,
             /*miningcorePoolId=*/"", /*feePercent=*/0.0, /*official=*/true,
         },
-        KnownPool{
-            // The mining (stratum) host is us.dragonx.cc — pool.dragonx.cc is the
-            // Cloudflare-proxied web/API host and does NOT accept stratum on :3333.
-            // Stats still come from pool.dragonx.cc/api/pools (proxied HTTP is fine).
-            "dragonx-cc-pplns", "pool.dragonx.cc", "us.dragonx.cc:3333", "rx/dragonx",
-            "https://pool.dragonx.cc/api/pools", PoolStatsSchema::Miningcore,
-            /*miningcorePoolId=*/"dragonx-pplns", /*feePercent=*/3.0, /*official=*/true,
-        },
     };
     return pools;
 }

src/util/svg_texture.cpp

@@ -0,0 +1,75 @@
+// DragonX Wallet - ImGui Edition
+// Copyright 2024-2026 The Hush Developers
+// Released under the GPLv3
+
+#include "svg_texture.h"
+#include "texture_loader.h"   // CreateRawTexture
+#include "logger.h"
+
+// nanosvg (memononen, zlib/public-domain, vendored in libs/nanosvg). Implementations compiled ONLY here.
+#define NANOSVG_IMPLEMENTATION
+#include "nanosvg/nanosvg.h"
+#define NANOSVGRAST_IMPLEMENTATION
+#include "nanosvg/nanosvgrast.h"
+
+#include <algorithm>
+#include <string>
+#include <vector>
+
+namespace dragonx {
+namespace util {
+
+// Perceptual brightness of a nanosvg color (byte order R,G,B,A — matches ImU32/IM_COL32).
+static inline float svgLuma(unsigned int c) {
+    const float r = (c & 0xFFu) / 255.0f;
+    const float g = ((c >> 8) & 0xFFu) / 255.0f;
+    const float b = ((c >> 16) & 0xFFu) / 255.0f;
+    return 0.299f * r + 0.587f * g + 0.114f * b;
+}
+
+bool LoadTextureFromSvg(const char* svgText, int pxSize, ImU32 bodyColor, ImU32 detailColor,
+                        ImTextureID* outTex, int* outW, int* outH) {
+    if (!svgText || pxSize <= 0 || !outTex) return false;
+
+    // nsvgParse mutates its input buffer — parse a copy.
+    std::string buf(svgText);
+    NSVGimage* img = nsvgParse(&buf[0], "px", 96.0f);
+    if (!img || img->width <= 0.0f || img->height <= 0.0f) {
+        if (img) nsvgDelete(img);
+        DEBUG_LOGF("LoadTextureFromSvg: parse failed / empty image\n");
+        return false;
+    }
+
+    // Recolor by brightness: light fills -> detail, darker fills -> body. Force opaque so a theme color
+    // with partial alpha can't make the mark translucent. ImU32 and nanosvg color share byte order.
+    const unsigned int body   = (static_cast<unsigned int>(bodyColor)   & 0x00FFFFFFu) | 0xFF000000u;
+    const unsigned int detail = (static_cast<unsigned int>(detailColor) & 0x00FFFFFFu) | 0xFF000000u;
+    for (NSVGshape* s = img->shapes; s; s = s->next) {
+        if (s->fill.type == NSVG_PAINT_COLOR)
+            s->fill.color = (svgLuma(s->fill.color) > 0.6f) ? detail : body;
+        if (s->stroke.type == NSVG_PAINT_COLOR)
+            s->stroke.color = (svgLuma(s->stroke.color) > 0.6f) ? detail : body;
+    }
+
+    const float scale = static_cast<float>(pxSize) / img->width;
+    const int w = pxSize;
+    const int h = std::max(1, static_cast<int>(img->height * scale + 0.5f));
+
+    std::vector<unsigned char> rgba(static_cast<size_t>(w) * h * 4, 0);
+    NSVGrasterizer* rast = nsvgCreateRasterizer();
+    if (!rast) { nsvgDelete(img); return false; }
+    nsvgRasterize(rast, img, 0.0f, 0.0f, scale, rgba.data(), w, h, w * 4);
+    nsvgDeleteRasterizer(rast);
+    nsvgDelete(img);
+
+    if (!CreateRawTexture(rgba.data(), w, h, /*repeat=*/false, outTex)) {
+        DEBUG_LOGF("LoadTextureFromSvg: CreateRawTexture failed (%dx%d)\n", w, h);
+        return false;
+    }
+    if (outW) *outW = w;
+    if (outH) *outH = h;
+    return true;
+}
+
+} // namespace util
+} // namespace dragonx

src/util/svg_texture.h

@@ -0,0 +1,24 @@
+// DragonX Wallet - ImGui Edition
+// Copyright 2024-2026 The Hush Developers
+// Released under the GPLv3
+//
+// Rasterize a (two-tone) SVG to a themed RGBA GPU texture via nanosvg. Used for the DragonX logo /
+// custom emoji: the darker fill becomes `bodyColor` (the theme accent), the light fill `detailColor`.
+
+#pragma once
+
+#include "imgui.h"
+
+namespace dragonx {
+namespace util {
+
+// Rasterize `svgText` (nul-terminated SVG markup) to a texture of width `pxSize` (height follows the
+// SVG aspect). Fills are recolored by brightness — light fills -> detailColor, darker fills -> bodyColor
+// (both forced opaque). Returns false on parse/rasterize/upload failure; on success *outTex is a texture
+// the caller owns (release via util::DestroyTexture). Safe to call off the initial frame (needs a live
+// GL/DX device, like the other texture loaders).
+bool LoadTextureFromSvg(const char* svgText, int pxSize, ImU32 bodyColor, ImU32 detailColor,
+                        ImTextureID* outTex, int* outW, int* outH);
+
+} // namespace util
+} // namespace dragonx

src/util/xmrig_updater.cpp

@@ -314,6 +314,12 @@ void XmrigUpdater::installResolved(const std::string& targetDir, const XmrigRele
                     return;
                 }
             }
+        } else if (kXmrigRequireSignature) {
+            // Signatures are required but no key is pinned in this build: fail closed rather than
+            // silently downgrading to checksum-only (the checksum is same-origin as the archive).
+            fs::remove(zipPath, ec);
+            setProgress(State::Failed, "No signing key is pinned in this build — refusing to install.");
+            return;
         }
     }
 

src/wallet/lite_connection_service.cpp

@@ -81,10 +81,56 @@ LiteConnectionSettings defaultLiteConnectionSettings()
     return settings;
 }
 
+// Strict dotted-decimal check for the 127.0.0.0/8 loopback block: exactly four numeric octets
+// (each 0-255) with the first equal to 127. This must NOT be a prefix match — "127.0.0.1.evil.com"
+// and "127.evil.com" are attacker-controlled DNS names that a startsWith("127.") test would wrongly
+// treat as loopback, reopening the plaintext-downgrade hole.
+static bool isNumericIpv4Loopback(const std::string& h)
+{
+    int parts = 0;
+    size_t start = 0;
+    while (true) {
+        const size_t dot = h.find('.', start);
+        const std::string seg = h.substr(start, dot == std::string::npos ? std::string::npos : dot - start);
+        if (seg.empty() || seg.size() > 3) return false;
+        int v = 0;
+        for (char c : seg) { if (c < '0' || c > '9') return false; v = v * 10 + (c - '0'); }
+        if (v > 255) return false;
+        if (parts == 0 && v != 127) return false;   // 127.0.0.0/8 only
+        ++parts;
+        if (dot == std::string::npos) break;
+        start = dot + 1;
+    }
+    return parts == 4;
+}
+
+static bool isLoopbackLiteHostSpec(const std::string& hostPort)
+{
+    std::string h = hostPort;
+    const size_t term = h.find_first_of("/?#");   // strip path/query/fragment
+    if (term != std::string::npos) h = h.substr(0, term);
+    const size_t at = h.rfind('@');               // strip userinfo (user:pass@host)
+    if (at != std::string::npos) h = h.substr(at + 1);
+    if (!h.empty() && h.front() == '[') {         // [::1]:port  (bracketed IPv6)
+        const size_t close = h.find(']');
+        h = (close == std::string::npos) ? h : h.substr(1, close - 1);
+    } else {                                      // host or host:port
+        const size_t colon = h.find(':');
+        if (colon != std::string::npos) h = h.substr(0, colon);
+    }
+    return h == "localhost" || h == "::1" || isNumericIpv4Loopback(h);
+}
+
 bool isLiteServerUrlUsable(const std::string& serverUrl)
 {
     const std::string normalized = liteTrimCopy(serverUrl);
-    return startsWith(normalized, "https://") || startsWith(normalized, "http://");
+    if (startsWith(normalized, "https://")) return true;
+    // SECURITY: plaintext http:// is a TLS downgrade for lightwalletd traffic (view keys,
+    // transactions, addresses). Permit it only for loopback (a local dev lightwalletd);
+    // reject remote plaintext servers instead of silently accepting the downgrade.
+    if (startsWith(normalized, "http://"))
+        return isLoopbackLiteHostSpec(normalized.substr(sizeof("http://") - 1));
+    return false;
 }
 
 bool isOfficialLiteServer(const std::string& serverUrl)

src/wallet/lite_wallet_controller.cpp

@@ -1066,7 +1066,16 @@ LiteEncryptionResult LiteWalletController::encryptWallet(std::string passphrase)
     }
     out = parseEncryptionOpResponse(bridge_->execute("encrypt", passphrase));
     secureWipeLiteSecret(passphrase);
-    if (out.ok) bridge_->execute("save", "");  // persist the now-encrypted wallet
+    if (out.ok) {
+        // Persist the now-encrypted wallet. If the save fails, do NOT report success — the
+        // on-disk wallet would still be unencrypted, contradicting what the user was told.
+        const auto saved = bridge_->execute("save", "");
+        if (!saved.ok) {
+            out.ok = false;
+            out.error = "wallet encrypted in memory but saving to disk failed" +
+                        (saved.error.empty() ? std::string() : (": " + saved.error));
+        }
+    }
     return out;
 }
 
@@ -1084,7 +1093,16 @@ LiteEncryptionResult LiteWalletController::decryptWallet(std::string passphrase)
     }
     out = parseEncryptionOpResponse(bridge_->execute("decrypt", passphrase));
     secureWipeLiteSecret(passphrase);
-    if (out.ok) bridge_->execute("save", "");  // persist the now-unencrypted wallet
+    if (out.ok) {
+        // Persist the now-unencrypted wallet. If the save fails, do NOT report success — the
+        // on-disk wallet would still be encrypted, contradicting what the user was told.
+        const auto saved = bridge_->execute("save", "");
+        if (!saved.ok) {
+            out.ok = false;
+            out.error = "wallet decrypted in memory but saving to disk failed" +
+                        (saved.error.empty() ? std::string() : (": " + saved.error));
+        }
+    }
     return out;
 }
 

tests/test_phase4.cpp

@@ -3434,9 +3434,11 @@ void testBalanceAddressListModel()
     EXPECT_NEAR(layout.contentStartX, 22.0, 0.0001);
     EXPECT_NEAR(layout.contentStartY, 26.0, 0.0001);
     EXPECT_NEAR(layout.buttonSize, 38.0, 0.0001);
-    EXPECT_NEAR(layout.favoriteButton.x, 270.0, 0.0001);
-    EXPECT_NEAR(layout.visibilityButton.x, 228.0, 0.0001);
-    EXPECT_NEAR(layout.contentRight, 224.0, 0.0001);
+    // Trailing (favorite) button is inset by rowPadLeft (12) so it mirrors the left margin
+    // instead of hugging the card edge: 310 - 38 - 12 = 260.
+    EXPECT_NEAR(layout.favoriteButton.x, 260.0, 0.0001);
+    EXPECT_NEAR(layout.visibilityButton.x, 218.0, 0.0001);
+    EXPECT_NEAR(layout.contentRight, 214.0, 0.0001);
     EXPECT_EQ(dragonx::ui::FormatAddressUsdValue(2.0, 3.5), std::string("$7.00"));
     EXPECT_EQ(dragonx::ui::FormatAddressUsdValue(0.001, 2.0), std::string("$0.002000"));
     EXPECT_EQ(dragonx::ui::FormatAddressUsdValue(0.0, 2.0), std::string(""));
@@ -5300,8 +5302,11 @@ void testXmrigAssetSelection()
     EXPECT_TRUE(linux >= 0);
     EXPECT_TRUE(win >= 0);
     EXPECT_TRUE(linux != win);
-    EXPECT_TRUE(rel.assets[linux].name.find("linux-x64.zip") != std::string::npos);
-    EXPECT_TRUE(rel.assets[win].name.find("win-x64.zip") != std::string::npos);
+    // Guard the index reads: select*Asset returns -1 when nothing matches, and EXPECT_TRUE doesn't
+    // abort this harness, so an unguarded rel.assets[-1] on a fixture/parser regression would SIGSEGV
+    // the whole suite instead of reporting the failed EXPECT above.
+    if (linux >= 0) EXPECT_TRUE(rel.assets[linux].name.find("linux-x64.zip") != std::string::npos);
+    if (win >= 0)   EXPECT_TRUE(rel.assets[win].name.find("win-x64.zip") != std::string::npos);
     // No macOS build in this fixture -> graceful "not found".
     EXPECT_EQ(selectXmrigAsset(rel, "macos-x86_64"), -1);
     EXPECT_EQ(selectXmrigAsset(rel, "macos-arm64"), -1);
@@ -5607,9 +5612,11 @@ void testDaemonAssetSelection()
     const int win = selectDaemonAsset(rel, "win64");
     EXPECT_TRUE(lin >= 0 && mac >= 0 && win >= 0);
     EXPECT_TRUE(lin != mac && mac != win && lin != win);
-    EXPECT_TRUE(rel.assets[lin].name.find("linux-amd64.zip") != std::string::npos);
-    EXPECT_TRUE(rel.assets[mac].name.find("macos.zip") != std::string::npos);
-    EXPECT_TRUE(rel.assets[win].name.find("win64.zip") != std::string::npos);
+    // Guard the index reads (select*Asset returns -1 on no match; EXPECT_TRUE doesn't abort here) so a
+    // fixture/parser regression reports the failed EXPECT above instead of an OOB rel.assets[-1] crash.
+    if (lin >= 0) EXPECT_TRUE(rel.assets[lin].name.find("linux-amd64.zip") != std::string::npos);
+    if (mac >= 0) EXPECT_TRUE(rel.assets[mac].name.find("macos.zip") != std::string::npos);
+    if (win >= 0) EXPECT_TRUE(rel.assets[win].name.find("win64.zip") != std::string::npos);
     // Wrong/foreign tokens (e.g. the miner's naming) must NOT match the daemon archives.
     EXPECT_EQ(selectDaemonAsset(rel, "linux-x64"), -1);
     EXPECT_EQ(selectDaemonAsset(rel, "linux-arm64"), -1);
@@ -5769,23 +5776,20 @@ void testXmrigLiveInstall()
 void testPoolRegistryLookup()
 {
     using namespace dragonx::util;
-    EXPECT_EQ(knownPools().size(), static_cast<std::size_t>(2));
+    // pool.dragonx.cc was removed from the built-in defaults; pool.dragonx.is is the sole entry.
+    EXPECT_EQ(knownPools().size(), static_cast<std::size_t>(1));
 
-    // The algo follows the pool. Note pool.dragonx.cc's stratum host is us.dragonx.cc
-    // (the .cc domain is only the Cloudflare-proxied web/API host).
-    EXPECT_EQ(resolvePoolAlgo("us.dragonx.cc:3333", "rx/hush"), std::string("rx/dragonx"));
+    // The algo follows the pool: pool.dragonx.is resolves to rx/hush regardless of the caller default.
     EXPECT_EQ(resolvePoolAlgo("pool.dragonx.is:3433", "rx/dragonx"), std::string("rx/hush"));
-    // Bare host (no port) still matches; scheme + path are tolerated.
-    EXPECT_EQ(resolvePoolAlgo("us.dragonx.cc", "rx/hush"), std::string("rx/dragonx"));
-    EXPECT_EQ(resolvePoolAlgo("stratum+tcp://us.dragonx.cc:3333/x", "rx/hush"),
-              std::string("rx/dragonx"));
-    // Unknown host -> fallback algo.
+    // The former us.dragonx.cc (pool.dragonx.cc) host is now unknown -> caller's fallback algo.
+    EXPECT_EQ(resolvePoolAlgo("us.dragonx.cc:3333", "rx/hush"), std::string("rx/hush"));
     EXPECT_EQ(resolvePoolAlgo("my.pool.example:1234", "rx/hush"), std::string("rx/hush"));
 
-    EXPECT_TRUE(findKnownPoolByUrl("us.dragonx.cc:3333") != nullptr);
+    EXPECT_TRUE(findKnownPoolByUrl("pool.dragonx.is:3433") != nullptr);
+    EXPECT_TRUE(findKnownPoolByUrl("us.dragonx.cc:3333") == nullptr);  // removed built-in default
     EXPECT_TRUE(findKnownPoolByUrl("unknown.host:1") == nullptr);
     // A mismatched explicit port must NOT match a known pool.
-    EXPECT_TRUE(findKnownPoolByUrl("us.dragonx.cc:9999") == nullptr);
+    EXPECT_TRUE(findKnownPoolByUrl("pool.dragonx.is:9999") == nullptr);
 }
 
 // Schema-aware pool hashrate parsing (the two pools speak different APIs).
@@ -6193,12 +6197,17 @@ void testHushChatOutgoing()
 
     ChatService bobSvc;
     bobSvc.setIdentity(bob);
-    EXPECT_EQ(bobSvc.ingest(extracted.metadata, {}, 5), 1);
+    // Realistic receive-time fallback (the header "ts" is a real std::time stamp; an artificially-tiny
+    // fallback would trip the future-plausibility clamp in ingest and reject the real ts).
+    EXPECT_EQ(bobSvc.ingest(extracted.metadata, {}, static_cast<std::int64_t>(std::time(nullptr))), 1);
     std::vector<ChatMessage> conv = bobSvc.store().conversation(cid);
     EXPECT_EQ((int)conv.size(), 1);
     EXPECT_EQ(conv[0].body, std::string("hello bob"));
     EXPECT_EQ(conv[0].peer_public_key_hex, ra.public_key_hex);  // Bob learns Alice's key
     EXPECT_EQ(conv[0].peer_zaddr, aliceZ);
+    // The header now carries the sender's compose time (header "ts"); ingest prefers it over the fallback
+    // (5) so both ends show the same send time. A real std::time() stamp is well past year-2001.
+    EXPECT_TRUE(conv[0].timestamp > 1000000000);
 
     // Plaintext contact request Alice -> Bob.
     OutgoingChatMemos creq;
@@ -6235,7 +6244,9 @@ void testHushChatOutgoing()
     echo.peer_zaddr = aliceZ;
     echo.peer_public_key_hex = ra.public_key_hex;
     echo.body = "reply!";
-    echo.timestamp = 7;
+    // A reply is sent AFTER the received message; the incoming "hello bob" now carries a real compose-time
+    // "ts" (~now), so stamp the echo just after it (not the old artificial 7, which would sort before it).
+    echo.timestamp = static_cast<std::int64_t>(std::time(nullptr)) + 10;
     echo.txid = "out:local1";
     echo.payload_position = 0;
     EXPECT_TRUE(bobSvc.recordOutgoing(echo));
@@ -6243,6 +6254,27 @@ void testHushChatOutgoing()
     EXPECT_EQ((int)conv2.size(), 2);
     EXPECT_TRUE(conv2.back().direction == ChatDirection::Outgoing);
     EXPECT_EQ(conv2.back().body, std::string("reply!"));
+
+    // Future-clock clamp: a header "ts" implausibly ahead of the receive time is rejected (falls back to
+    // the receive time), so a wrong/ahead-clocked peer can't pin their messages to the bottom of a thread.
+    {
+        const std::int64_t nowSec = static_cast<std::int64_t>(std::time(nullptr));
+        const std::int64_t futureTs = nowSec + 10 * 24 * 3600;  // 10 days ahead — well past the 1h tolerance
+        nlohmann::json h;
+        h["h"] = 1; h["v"] = 0; h["z"] = aliceZ; h["cid"] = "conv-clamp";
+        h["t"] = "Cont"; h["e"] = ""; h["p"] = ra.public_key_hex; h["ts"] = futureTs;
+        HushChatTransactionInput ctx;
+        ctx.txid = "txclamp";
+        ctx.outputs.push_back({0, h.dump()});      // header at the lower position
+        ctx.outputs.push_back({1, "please add"});  // contact-request plaintext payload (must not start with '{')
+        auto exc = extractHushChatTransactionMetadata(ctx, true);
+        EXPECT_EQ((int)exc.metadata.size(), 1);
+        EXPECT_EQ(exc.metadata[0].sent_at, futureTs);          // the future ts parses through
+        bobSvc.ingest(exc.metadata, {}, nowSec);               // realistic receive time
+        auto cc = bobSvc.store().conversation("conv-clamp");
+        EXPECT_EQ((int)cc.size(), 1);
+        EXPECT_EQ(cc[0].timestamp, nowSec);                    // clamped to receive time, NOT the future ts
+    }
 }
 
 // Phase 5: the transport encoding (chatSendOutputs) — header first, "utf8:" for full-node / raw for
@@ -6357,8 +6389,11 @@ void testAddressBookScope()
     fs::create_directories(tmp);
     setenv("HOME", tmp.string().c_str(), 1);
 
-    // A pre-scoping addressbook.json (no "scope" field) migrates to global on load.
-    fs::path cfg = tmp / ".config" / "ObsidianDragon";
+    // A pre-scoping addressbook.json (no "scope" field) migrates to global on load. Write to the
+    // SAME per-variant config dir AddressBook::load() reads from (Lite -> ObsidianDragonLite/),
+    // resolved under the temp HOME set above. Hardcoding ".config/ObsidianDragon" made the lite-build
+    // ctest write where load() never looks -> 0 entries -> the entries()[0] below segfaulted.
+    fs::path cfg = dragonx::util::Platform::getConfigDir();
     fs::create_directories(cfg);
     std::ofstream(cfg / "addressbook.json")
         << R"({"entries":[{"label":"Legacy","address":"zs1legacy","notes":""}]})";
@@ -6366,7 +6401,9 @@ void testAddressBookScope()
         AddressBook book;
         EXPECT_TRUE(book.load());
         EXPECT_EQ(book.size(), (size_t)1);
-        EXPECT_TRUE(book.entries()[0].isGlobal());     // migrated -> global
+        // Guard the [0] access — EXPECT_EQ doesn't abort this harness, so an empty book here must not
+        // SIGSEGV the whole suite (it would take every later test down with it).
+        EXPECT_TRUE(!book.entries().empty() && book.entries()[0].isGlobal());  // migrated -> global
     }
 
     // Same address may be a contact in two DIFFERENT wallets, but not twice in one; and a global