Merge branch 'feature/v1.5.2'

Preflight Block E (`dotnet csharpier check`) flagged two reflows
in the v1.5.2 code: the ForgeBronzeDim Vector4 constant needed
multi-line form, and a handful of switch arms / long Plugin.Config
chains in WizardStateSmokeStep needed line-breaks at csharpier's
print-width. Pure formatting — zero functional change. Block D
build stays clean, Block E now passes.

.editorconfig

@@ -1,167 +1,252 @@
-[*]
+# ##############################################################
-indent_style=space
+# #
-tab_width=4
+# #   .editorconfig – Hellion Forge / Hellion Media
-indent_size=4
+# #
-trim_trailing_whitespace=true
+# #   Überarbeitet: Mai 2026
-insert_final_newline=false
+# #
+# #   Strategie:
+# #     - Standard-.NET-Conventions (private Fields = _camelCase)
+# #     - CSharpier übernimmt die meiste Formatierung
+# #     - Hier: Naming, IDE-Hints, Backup-Format-Regeln
+# #
+# # ##############################################################
 
-# JetBrains Rider custom properties for code formatting styles
+root = true
-resharper_csharp_brace_style=next_line
+
-# Allman für standard Tooling (VS Code)
+
+# =====================================================
+# Defaults (alle Files)
+# =====================================================
+
+[*]
+indent_style = space
+tab_width = 4
+indent_size = 4
+charset = utf-8
+end_of_line = lf
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+
+# =====================================================
+# Markdown: Trailing Spaces erlaubt (2 Spaces = <br>)
+# =====================================================
+
+[*.md]
+trim_trailing_whitespace = false
+
+
+# =====================================================
+# JSON / YAML / Web-Configs: 2-Space-Indent
+# Konsistent mit yamllint und Prettier-Override
+# =====================================================
+
+[*.{yaml,yml}]
+indent_size = 2
+
+[*.{json,jsonc,har,jsb2,jsb3,postman_collection,postman_environment}]
+indent_size = 2
+
+[{.babelrc,.eslintrc,.prettierrc,.markdownlintrc,.stylelintrc,bowerrc}]
+indent_size = 2
+
+
+# =====================================================
+# .NET / XAML / Razor / Resources: 4-Space-Indent
+# =====================================================
+
+[*.{cs,csx,vb,fs,fsi,fsx}]
+indent_size = 4
+
+[*.{xml,xsd,xaml,axaml,paml,resx,resw,nuspec,config}]
+indent_size = 4
+
+[*.{cshtml,razor,aspx,ascx,asax,master,axaml}]
+indent_size = 4
+
+
+# ##############################################################
+# #
+# #   C# Sektion: Style, Naming, Format
+# #
+# ##############################################################
+
+[*.{cs,csx}]
+
+
+# =====================================================
+# C# Style – var-Präferenz
+# =====================================================
+
+csharp_style_var_for_built_in_types = true:suggestion
+csharp_style_var_when_type_is_apparent = true:suggestion
+csharp_style_var_elsewhere = true:suggestion
+
+
+# =====================================================
+# C# Style – Sonstiges
+# =====================================================
+
+# UTF-8 String Literals (C# 11+)
+csharp_style_prefer_utf8_string_literals = true:suggestion
+
+# Reihenfolge der Access-Modifier (Microsoft-Empfehlung)
+csharp_preferred_modifier_order = public, private, protected, internal, file, new, static, abstract, virtual, sealed, readonly, override, extern, unsafe, volatile, async, required:suggestion
+
+# Initializer: nicht alles auf eine Zeile
+csharp_new_line_before_members_in_object_initializers = false
+
+
+# =====================================================
+# C# Format – Braces (Backup, falls CSharpier nicht läuft)
+# =====================================================
+
+# Allman Style: Klammern auf neue Zeile
 csharp_new_line_before_open_brace = all
 csharp_new_line_before_else = true
 csharp_new_line_before_catch = true
 csharp_new_line_before_finally = true
 
-# Switch-Einrückung
+
+# =====================================================
+# C# Format – Switch-Einrückung
+# =====================================================
+
 csharp_indent_case_contents = true
 csharp_indent_switch_labels = true
 
-resharper_csharp_braces_for_foreach=not_required
-resharper_csharp_braces_for_for=not_required
-resharper_csharp_braces_for_while=not_required
-charset=utf-8
-end_of_line=lf
 
-# Microsoft .NET properties
+# =====================================================
-csharp_new_line_before_members_in_object_initializers=false
+# .NET Style – Qualification (kein "this." nötig)
-csharp_preferred_modifier_order=public, private, protected, internal, file, new, static, abstract, virtual, sealed, readonly, override, extern, unsafe, volatile, async, required:suggestion
+# =====================================================
-csharp_style_prefer_utf8_string_literals=true:suggestion
-csharp_style_var_elsewhere=true:suggestion
-csharp_style_var_for_built_in_types=true:suggestion
-csharp_style_var_when_type_is_apparent=true:suggestion
-dotnet_naming_rule.private_constants_rule.import_to_resharper=True
-dotnet_naming_rule.private_constants_rule.resharper_description=Constant fields (private)
-dotnet_naming_rule.private_constants_rule.resharper_guid=236f7aa5-7b06-43ca-bf2a-9b31bfcff09a
-dotnet_naming_rule.private_constants_rule.severity=warning
-dotnet_naming_rule.private_constants_rule.style=upper_camel_case_style
-dotnet_naming_rule.private_constants_rule.symbols=private_constants_symbols
-dotnet_naming_rule.private_instance_fields_rule.import_to_resharper=True
-dotnet_naming_rule.private_instance_fields_rule.resharper_description=Instance fields (private)
-dotnet_naming_rule.private_instance_fields_rule.resharper_guid=4a98fdf6-7d98-4f5a-afeb-ea44ad98c70c
-dotnet_naming_rule.private_instance_fields_rule.severity=warning
-dotnet_naming_rule.private_instance_fields_rule.style=upper_camel_case_style
-dotnet_naming_rule.private_instance_fields_rule.symbols=private_instance_fields_symbols
-dotnet_naming_rule.private_instance_fields_rule_1.import_to_resharper=True
-dotnet_naming_rule.private_instance_fields_rule_1.resharper_description=Instance fields (private)
-dotnet_naming_rule.private_instance_fields_rule_1.resharper_guid=4a98fdf6-7d98-4f5a-afeb-ea44ad98c70c
-dotnet_naming_rule.private_instance_fields_rule_1.severity=warning
-dotnet_naming_rule.private_instance_fields_rule_1.style=upper_camel_case_style
-dotnet_naming_rule.private_instance_fields_rule_1.symbols=private_instance_fields_symbols_1
-dotnet_naming_rule.private_static_fields_rule.import_to_resharper=True
-dotnet_naming_rule.private_static_fields_rule.resharper_description=Static fields (private)
-dotnet_naming_rule.private_static_fields_rule.resharper_guid=f9fce829-e6f4-4cb2-80f1-5497c44f51df
-dotnet_naming_rule.private_static_fields_rule.severity=warning
-dotnet_naming_rule.private_static_fields_rule.style=upper_camel_case_style
-dotnet_naming_rule.private_static_fields_rule.symbols=private_static_fields_symbols
-dotnet_naming_rule.private_static_readonly_rule.import_to_resharper=True
-dotnet_naming_rule.private_static_readonly_rule.resharper_description=Static readonly fields (private)
-dotnet_naming_rule.private_static_readonly_rule.resharper_guid=15b5b1f1-457c-4ca6-b278-5615aedc07d3
-dotnet_naming_rule.private_static_readonly_rule.severity=warning
-dotnet_naming_rule.private_static_readonly_rule.style=upper_camel_case_style
-dotnet_naming_rule.private_static_readonly_rule.symbols=private_static_readonly_symbols
-dotnet_naming_rule.unity_serialized_field_rule.import_to_resharper=True
-dotnet_naming_rule.unity_serialized_field_rule.resharper_description=Unity serialized field
-dotnet_naming_rule.unity_serialized_field_rule.resharper_guid=5f0fdb63-c892-4d2c-9324-15c80b22a7ef
-dotnet_naming_rule.unity_serialized_field_rule.severity=warning
-dotnet_naming_rule.unity_serialized_field_rule.style=lower_camel_case_style_1
-dotnet_naming_rule.unity_serialized_field_rule.symbols=unity_serialized_field_symbols
-dotnet_naming_rule.unity_serialized_field_rule_1.import_to_resharper=True
-dotnet_naming_rule.unity_serialized_field_rule_1.resharper_description=Unity serialized field
-dotnet_naming_rule.unity_serialized_field_rule_1.resharper_guid=5f0fdb63-c892-4d2c-9324-15c80b22a7ef
-dotnet_naming_rule.unity_serialized_field_rule_1.severity=warning
-dotnet_naming_rule.unity_serialized_field_rule_1.style=lower_camel_case_style_1
-dotnet_naming_rule.unity_serialized_field_rule_1.symbols=unity_serialized_field_symbols_1
-dotnet_naming_style.lower_camel_case_style.capitalization=camel_case
-dotnet_naming_style.lower_camel_case_style.required_prefix=_
-dotnet_naming_style.lower_camel_case_style_1.capitalization=camel_case
-dotnet_naming_style.upper_camel_case_style.capitalization=pascal_case
-dotnet_naming_symbols.private_constants_symbols.applicable_accessibilities=private
-dotnet_naming_symbols.private_constants_symbols.applicable_kinds=field
-dotnet_naming_symbols.private_constants_symbols.required_modifiers=const
-dotnet_naming_symbols.private_constants_symbols.resharper_applicable_kinds=constant_field
-dotnet_naming_symbols.private_constants_symbols.resharper_required_modifiers=any
-dotnet_naming_symbols.private_instance_fields_symbols.applicable_accessibilities=private
-dotnet_naming_symbols.private_instance_fields_symbols.applicable_kinds=field
-dotnet_naming_symbols.private_instance_fields_symbols.resharper_applicable_kinds=field,readonly_field
-dotnet_naming_symbols.private_instance_fields_symbols.resharper_required_modifiers=instance
-dotnet_naming_symbols.private_instance_fields_symbols_1.applicable_accessibilities=private
-dotnet_naming_symbols.private_instance_fields_symbols_1.applicable_kinds=field
-dotnet_naming_symbols.private_instance_fields_symbols_1.resharper_applicable_kinds=field,readonly_field
-dotnet_naming_symbols.private_instance_fields_symbols_1.resharper_required_modifiers=instance
-dotnet_naming_symbols.private_static_fields_symbols.applicable_accessibilities=private
-dotnet_naming_symbols.private_static_fields_symbols.applicable_kinds=field
-dotnet_naming_symbols.private_static_fields_symbols.required_modifiers=static
-dotnet_naming_symbols.private_static_fields_symbols.resharper_applicable_kinds=field
-dotnet_naming_symbols.private_static_fields_symbols.resharper_required_modifiers=static
-dotnet_naming_symbols.private_static_readonly_symbols.applicable_accessibilities=private
-dotnet_naming_symbols.private_static_readonly_symbols.applicable_kinds=field
-dotnet_naming_symbols.private_static_readonly_symbols.required_modifiers=readonly,static
-dotnet_naming_symbols.private_static_readonly_symbols.resharper_applicable_kinds=readonly_field
-dotnet_naming_symbols.private_static_readonly_symbols.resharper_required_modifiers=static
-dotnet_naming_symbols.unity_serialized_field_symbols.applicable_accessibilities=*
-dotnet_naming_symbols.unity_serialized_field_symbols.applicable_kinds=
-dotnet_naming_symbols.unity_serialized_field_symbols.resharper_applicable_kinds=unity_serialised_field
-dotnet_naming_symbols.unity_serialized_field_symbols.resharper_required_modifiers=instance
-dotnet_naming_symbols.unity_serialized_field_symbols_1.applicable_accessibilities=*
-dotnet_naming_symbols.unity_serialized_field_symbols_1.applicable_kinds=
-dotnet_naming_symbols.unity_serialized_field_symbols_1.resharper_applicable_kinds=unity_serialised_field
-dotnet_naming_symbols.unity_serialized_field_symbols_1.resharper_required_modifiers=instance
-dotnet_style_parentheses_in_arithmetic_binary_operators=never_if_unnecessary:none
-dotnet_style_parentheses_in_other_binary_operators=always_for_clarity:none
-dotnet_style_parentheses_in_relational_binary_operators=never_if_unnecessary:none
-dotnet_style_predefined_type_for_locals_parameters_members=true:suggestion
-dotnet_style_predefined_type_for_member_access=true:suggestion
-dotnet_style_qualification_for_event=false:suggestion
-dotnet_style_qualification_for_field=false:suggestion
-dotnet_style_qualification_for_method=false:suggestion
-dotnet_style_qualification_for_property=false:suggestion
-dotnet_style_require_accessibility_modifiers=for_non_interface_members:suggestion
 
-# ReSharper properties
+dotnet_style_qualification_for_field = false:suggestion
-resharper_autodetect_indent_settings=true
+dotnet_style_qualification_for_property = false:suggestion
-resharper_cpp_insert_final_newline=true
+dotnet_style_qualification_for_method = false:suggestion
-resharper_csharp_insert_final_newline=false
+dotnet_style_qualification_for_event = false:suggestion
-resharper_formatter_off_tag=@formatter:off
-resharper_formatter_on_tag=@formatter:on
-resharper_formatter_tags_enabled=true
-resharper_fsharp_insert_final_newline=false
-resharper_html_insert_final_newline=false
-resharper_resx_insert_final_newline=false
-resharper_shaderlab_insert_final_newline=false
-resharper_t4_insert_final_newline=false
-resharper_use_indent_from_vs=false
-resharper_vb_insert_final_newline=false
-resharper_xmldoc_insert_final_newline=false
-resharper_xml_insert_final_newline=false
 
-# ReSharper inspection severities
-resharper_arrange_redundant_parentheses_highlighting=hint
-resharper_arrange_this_qualifier_highlighting=hint
-resharper_arrange_type_member_modifiers_highlighting=hint
-resharper_arrange_type_modifiers_highlighting=hint
-resharper_built_in_type_reference_style_for_member_access_highlighting=hint
-resharper_built_in_type_reference_style_highlighting=hint
-resharper_razor_assembly_not_resolved_highlighting=warning
-resharper_redundant_base_qualifier_highlighting=warning
-resharper_suggest_var_or_type_built_in_types_highlighting=hint
-resharper_suggest_var_or_type_elsewhere_highlighting=hint
-resharper_suggest_var_or_type_simple_types_highlighting=hint
-resharper_web_config_module_not_resolved_highlighting=warning
-resharper_web_config_type_not_resolved_highlighting=warning
-resharper_web_config_wrong_module_highlighting=warning
 
-[{*.har,*.jsb2,*.jsb3,*.json,*.jsonc,*.postman_collection,*.postman_collection.json,*.postman_environment,*.postman_environment.json,.babelrc,.eslintrc,.prettierrc,.prettierrc.json,.markdownlint.json,.yamllint.json,.stylelintrc,bowerrc,jest.config}]
+# =====================================================
-indent_style=space
+# .NET Style – Predefined Types (int statt Int32 etc.)
-indent_size=2
+# =====================================================
 
-[{*.yaml,*.yml}]
+dotnet_style_predefined_type_for_locals_parameters_members = true:suggestion
-indent_style=space
+dotnet_style_predefined_type_for_member_access = true:suggestion
-indent_size=2
 
-[*.{appxmanifest,asax,ascx,aspx,axaml,build,c,c++,c++m,cc,ccm,cginc,compute,cp,cpp,cppm,cs,cshtml,cu,cuh,cxx,cxxm,dtd,fs,fsi,fsscript,fsx,fx,fxh,h,hh,hlsl,hlsli,hlslinc,hpp,hxx,inc,inl,ino,ipp,ixx,master,ml,mli,mpp,mq4,mq5,mqh,mxx,nuspec,paml,razor,resw,resx,shader,skin,tpp,usf,ush,uxml,vb,xaml,xamlx,xoml,xsd}]
+
-indent_style=space
+# =====================================================
-indent_size=4
+# .NET Style – Parentheses
-tab_width=4
+# =====================================================
-[*.md]
+
-trim_trailing_whitespace=false
+dotnet_style_parentheses_in_arithmetic_binary_operators = never_if_unnecessary:none
+dotnet_style_parentheses_in_relational_binary_operators = never_if_unnecessary:none
+dotnet_style_parentheses_in_other_binary_operators = always_for_clarity:none
+
+
+# =====================================================
+# .NET Style – Accessibility-Modifier erzwingen
+# =====================================================
+
+dotnet_style_require_accessibility_modifiers = for_non_interface_members:suggestion
+
+
+# ##############################################################
+# #
+# #   Naming Conventions (.NET-Standard)
+# #
+# #   Private Instance Fields:      _camelCase
+# #   Private Static Fields:        _camelCase
+# #   Private Constants:            PascalCase
+# #   Private Static Readonly:      PascalCase
+# #
+# ##############################################################
+
+# === Style: Underscore + camelCase ===
+dotnet_naming_style.underscore_camel_case_style.capitalization = camel_case
+dotnet_naming_style.underscore_camel_case_style.required_prefix = _
+
+# === Style: PascalCase ===
+dotnet_naming_style.pascal_case_style.capitalization = pascal_case
+
+
+# === Rule: Private Instance Fields → _camelCase ===
+dotnet_naming_rule.private_instance_fields.severity = warning
+dotnet_naming_rule.private_instance_fields.symbols = private_instance_fields_symbols
+dotnet_naming_rule.private_instance_fields.style = underscore_camel_case_style
+
+dotnet_naming_symbols.private_instance_fields_symbols.applicable_kinds = field
+dotnet_naming_symbols.private_instance_fields_symbols.applicable_accessibilities = private
+
+
+# === Rule: Private Static Fields → _camelCase ===
+dotnet_naming_rule.private_static_fields.severity = warning
+dotnet_naming_rule.private_static_fields.symbols = private_static_fields_symbols
+dotnet_naming_rule.private_static_fields.style = underscore_camel_case_style
+
+dotnet_naming_symbols.private_static_fields_symbols.applicable_kinds = field
+dotnet_naming_symbols.private_static_fields_symbols.applicable_accessibilities = private
+dotnet_naming_symbols.private_static_fields_symbols.required_modifiers = static
+
+
+# === Rule: Private Constants → PascalCase ===
+dotnet_naming_rule.private_constants.severity = warning
+dotnet_naming_rule.private_constants.symbols = private_constants_symbols
+dotnet_naming_rule.private_constants.style = pascal_case_style
+
+dotnet_naming_symbols.private_constants_symbols.applicable_kinds = field
+dotnet_naming_symbols.private_constants_symbols.applicable_accessibilities = private
+dotnet_naming_symbols.private_constants_symbols.required_modifiers = const
+
+
+# === Rule: Private Static Readonly → PascalCase ===
+dotnet_naming_rule.private_static_readonly.severity = warning
+dotnet_naming_rule.private_static_readonly.symbols = private_static_readonly_symbols
+dotnet_naming_rule.private_static_readonly.style = pascal_case_style
+
+dotnet_naming_symbols.private_static_readonly_symbols.applicable_kinds = field
+dotnet_naming_symbols.private_static_readonly_symbols.applicable_accessibilities = private
+dotnet_naming_symbols.private_static_readonly_symbols.required_modifiers = static, readonly
+
+
+# ##############################################################
+# #
+# #   JetBrains Rider / ReSharper Settings
+# #
+# ##############################################################
+
+# === Brace-Style (für ReSharper-spezifische Formatierung) ===
+resharper_csharp_brace_style = next_line
+
+# Kurze Statements ohne Klammern erlaubt (für 1-Zeiler)
+resharper_csharp_braces_for_foreach = not_required
+resharper_csharp_braces_for_for = not_required
+resharper_csharp_braces_for_while = not_required
+
+# === Auto-Detection und Formatter-Tags ===
+resharper_autodetect_indent_settings = true
+resharper_use_indent_from_vs = false
+
+# Erlaubt @formatter:off / @formatter:on Kommentare im Code
+resharper_formatter_off_tag = @formatter:off
+resharper_formatter_on_tag = @formatter:on
+resharper_formatter_tags_enabled = true
+
+
+# =====================================================
+# ReSharper Inspection Severities
+# (Hints = blaue Wellen, Warnings = gelb, Errors = rot)
+# =====================================================
+
+# Style-Suggestions: nur als Hint anzeigen
+resharper_arrange_redundant_parentheses_highlighting = hint
+resharper_arrange_this_qualifier_highlighting = hint
+resharper_arrange_type_member_modifiers_highlighting = hint
+resharper_arrange_type_modifiers_highlighting = hint
+resharper_built_in_type_reference_style_for_member_access_highlighting = hint
+resharper_built_in_type_reference_style_highlighting = hint
+resharper_suggest_var_or_type_built_in_types_highlighting = hint
+resharper_suggest_var_or_type_elsewhere_highlighting = hint
+resharper_suggest_var_or_type_simple_types_highlighting = hint
+
+# Echte Probleme: als Warning
+resharper_redundant_base_qualifier_highlighting = warning

.env.example

@@ -1,19 +1,50 @@
-# Local development environment template
+##############################################################
-#
+##
-# Copy this file to `.env` and adjust paths to your setup,
+##   .env.example – Hellion Forge / Hellion Media
-# or run: bash scripts/setup-dev-env.sh
+##
-#
+##   Template für lokale Entwicklungsumgebung.
-# `.env` is gitignored — never commit your local paths.
+##   Kopiere diese Datei nach `.env` und passe die Pfade
-#
+##   an dein Setup an.
-# Activate in shell:
+##
-#   set -a; source .env; set +a
+##   ⚠️  `.env` ist gitignored – niemals lokale Pfade committen!
-#
+##
-# Or use direnv (recommended):
+##############################################################
-#   echo 'dotenv .env' > .envrc && direnv allow
+##
+##   SETUP
+##
+##   1) Manuell:
+##        cp .env.example .env
+##        # Pfade in .env anpassen
+##
+##   2) Automatisch:
+##        bash scripts/setup-dev-env.sh
+##
+##   AKTIVIERUNG IN DER SHELL
+##
+##   Variante A – einmalig pro Shell:
+##        set -a; source .env; set +a
+##
+##   Variante B – mit direnv (empfohlen):
+##        echo 'dotenv .env' > .envrc
+##        direnv allow
+##
+##############################################################
 
-# Path to Dalamud development DLLs (Dalamud.dll, FFXIVClientStructs.dll,
+
-# Lumina.dll, Lumina.Excel.dll). Required for building ChatTwo.Tests project.
+# =====================================================
+# Build & Development Paths
+# =====================================================
+
+# Pfad zu den Dalamud-Development-DLLs:
+#   - Dalamud.dll
+#   - FFXIVClientStructs.dll
+#   - Lumina.dll
+#   - Lumina.Excel.dll
 #
-# XIVLauncher Core (Linux):  ~/.xlcore/dalamud/Hooks/dev
+# Wird zum Bauen des HellionChat.Tests-Projekts benötigt.
-# XIVLauncher (Windows):     %AppData%\XIVLauncher\addon\Hooks\dev
+#
+# Standardpfade je nach Plattform:
+#   XIVLauncher Core (Linux):  ~/.xlcore/dalamud/Hooks/dev
+#   XIVLauncher    (Windows):  %AppData%\XIVLauncher\addon\Hooks\dev
+#   XIVLauncher    (macOS):    ~/Library/Application Support/XIV on Mac/dalamud/Hooks/dev
 DALAMUD_HOME=/path/to/dalamud/dev/dlls

.gitattributes

@@ -1,8 +1,178 @@
-# Generated files
+##############################################################
-HellionChat/Resources/Language.*.resx linguist-generated=true
+##
+##   .gitattributes – Hellion Forge / Hellion Media
+##
+##   Setup:        Linux-First Development
+##                 (Hauptentwicklung auf Linux, Target = Dalamud/Windows)
+##   Überarbeitet: Mai 2026
+##
+##   Strategie:
+##     - Default:                Alles LF (Linux-Konvention)
+##     - Windows-Batch-Scripts:  CRLF (technische Pflicht!)
+##     - PowerShell:             CRLF (Sicherheit für Windows PS 5.1)
+##     - Binärdateien:           explizit markiert (gegen Korruption)
+##
+##   Hinweis:
+##     Moderne Visual-Studio- und MSBuild-Versionen kommen
+##     problemlos mit LF in .sln/.csproj klar.
+##     Falls jemals Probleme auftauchen: hier umstellen.
+##
+##############################################################
+
+
+# =====================================================
+# Default: Auto-Detect, alles auf LF normalisieren
+# =====================================================
+
 * text=auto eol=lf
-*.cs text eol=lf
+
-*.yml text eol=lf
+
-*.yaml text eol=lf
+# =====================================================
-*.md text eol=lf
+# Source Code (LF)
-*.json text eol=lf
+# =====================================================
+
+*.cs            text eol=lf
+*.csx           text eol=lf
+*.vb            text eol=lf
+*.fs            text eol=lf
+*.fsx           text eol=lf
+
+
+# =====================================================
+# Configs & Daten (LF)
+# =====================================================
+
+*.json          text eol=lf
+*.yml           text eol=lf
+*.yaml          text eol=lf
+*.xml           text eol=lf
+*.md            text eol=lf
+*.txt           text eol=lf
+*.config        text eol=lf
+*.editorconfig  text eol=lf
+.gitignore      text eol=lf
+.gitattributes  text eol=lf
+.env.example    text eol=lf
+
+
+# =====================================================
+# Visual Studio / MSBuild Project Files (LF)
+# Linux-first: moderne Tools kommen mit LF zurecht
+# =====================================================
+
+*.sln           text eol=lf
+*.csproj        text eol=lf
+*.vbproj        text eol=lf
+*.fsproj        text eol=lf
+*.props         text eol=lf
+*.targets       text eol=lf
+
+
+# =====================================================
+# Resources & Lokalisierung (LF)
+# =====================================================
+
+# Linguist soll generierte Sprachdateien nicht mitzählen
+HellionChat/Resources/Language.*.resx linguist-generated=true
+
+*.resx          text eol=lf
+*.resw          text eol=lf
+
+
+# =====================================================
+# Linux/Mac-Scripts (LF – Pflicht)
+# =====================================================
+
+*.sh            text eol=lf
+*.bash          text eol=lf
+*.zsh           text eol=lf
+
+
+# =====================================================
+# >>> AUSNAHMEN <<<
+# Windows-Scripts brauchen ZWINGEND CRLF.
+# Mit LF werden diese auf Windows nicht ausgeführt!
+# =====================================================
+
+# Batch-Scripts (cmd.exe braucht CRLF)
+*.bat           text eol=crlf
+*.cmd           text eol=crlf
+
+# PowerShell (PS 7+ wäre LF-tolerant,
+# aber Windows PowerShell 5.1 zickt teilweise)
+*.ps1           text eol=crlf
+*.psm1          text eol=crlf
+*.psd1          text eol=crlf
+
+
+# =====================================================
+# Binäre Build-Artefakte
+# =====================================================
+
+*.dll           binary
+*.exe           binary
+*.pdb           binary
+*.so            binary
+*.dylib         binary
+*.nupkg         binary
+*.snupkg        binary
+
+
+# =====================================================
+# Bilder (binary)
+# =====================================================
+
+*.png           binary
+*.jpg           binary
+*.jpeg          binary
+*.gif           binary
+*.ico           binary
+*.bmp           binary
+*.tiff          binary
+*.webp          binary
+
+# SVG ist eigentlich XML – als Text behandeln
+*.svg           text eol=lf
+
+
+# =====================================================
+# Fonts (binary)
+# =====================================================
+
+*.ttf           binary
+*.otf           binary
+*.woff          binary
+*.woff2         binary
+*.eot           binary
+
+
+# =====================================================
+# Archive (binary)
+# =====================================================
+
+*.zip           binary
+*.7z            binary
+*.tar           binary
+*.gz            binary
+*.rar           binary
+
+
+# =====================================================
+# Audio / Video (binary)
+# =====================================================
+
+*.wav           binary
+*.mp3           binary
+*.ogg           binary
+*.mp4           binary
+
+
+# =====================================================
+# FFXIV / Dalamud spezifische Binär-Formate
+# =====================================================
+
+*.tex           binary
+*.pap           binary
+*.avfx          binary
+*.shpk          binary
+*.scd           binary

.gitea/workflows/build.yml

@@ -0,0 +1,53 @@
+name: Build
+
+# Verifies that every push to main and every PR still builds against the
+# current Dalamud staging branch. Does not produce release artefacts; the
+# release workflow handles that on tag.
+#
+# Linux runner: gitea.com Cloud Actions provides ubuntu-latest. The plugin
+# csproj targets net10.0-windows, but `dotnet build` cross-compiles on
+# Linux as long as the Dalamud staging assemblies are present at the
+# expected lookup path ($(HOME)/.xlcore/dalamud/Hooks/dev/, which the
+# Dalamud SDK 15 uses on Linux).
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+# Minimum permissions for a build-only workflow: read the repo, nothing
+# else. Closes the CodeQL "Workflow does not contain permissions" alert
+# and matches the principle-of-least-privilege the security guide
+# recommends for workflows that don't push or create releases.
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build (Release)
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Setup .NET 10
+        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5
+        with:
+          dotnet-version: 10.0.x
+
+      - name: Download Dalamud staging
+        run: |
+          hooks="$HOME/.xlcore/dalamud/Hooks/dev"
+          mkdir -p "$hooks"
+          curl -fsSL https://goatcorp.github.io/dalamud-distrib/stg/latest.zip -o dalamud.zip
+          unzip -oq dalamud.zip -d "$hooks"
+
+      - name: Restore
+        run: dotnet restore HellionChat/HellionChat.csproj
+
+      - name: Build (Release)
+        run: dotnet build HellionChat/HellionChat.csproj --configuration Release --no-restore

.gitea/workflows/forge-announce.yml

@@ -0,0 +1,250 @@
+name: Forge Announce
+
+# Triggered when a vX.Y.Z tag is pushed. Reads .github/forge-posts/<tag>.md
+# (Frontmatter + DE bullet body) and the matching English block from
+# HellionChat/HellionChat.yaml, builds a Discord-Webhook embed and posts
+# it to the Hellion Forge #changelog channel.
+#
+# Decoupled from release.yml: a fail here does not block the GitHub
+# release, and a fail there does not block the announce. Spec lives in
+# the Vault under "Hellion Chat Forge-Auto-Announce Spec".
+#
+# Security: the only user-controlled inputs that enter run-steps are the
+# tag name and the frontmatter values from a repo-internal markdown file.
+# Tag name is read via env: (TAG_NAME, $env:TAG_NAME) and validated against
+# ^v\d+\.\d+\.\d+$ before any string interpolation. Frontmatter values are
+# parsed by regex with explicit length caps. No webhook event payload data
+# (issue titles, PR bodies, commit messages, etc.) flows into run-steps.
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Existing tag to (re)post, e.g. v1.1.0'
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  announce:
+    name: Post changelog to Hellion Forge
+    runs-on: ubuntu-latest
+    # The DISCORD_FORGE_WEBHOOK secret is set as a repo-level Actions Secret
+    # on Gitea (Settings → Actions → Secrets). Repo-level secrets are in
+    # scope for every job by default, no environment: declaration needed.
+    timeout-minutes: 5
+
+    steps:
+      # On push:tags github.ref points at the tag commit; on workflow_dispatch
+      # the user supplies the tag explicitly. Always check out that tag so
+      # the yaml + forge-posts file are read from the tagged tree, not main.
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: ${{ github.event.inputs.tag || github.ref }}
+
+      # Build embed-payload as a JSON file on disk. PowerShell-Core (pwsh)
+      # ships pre-installed on ubuntu-latest so we get the same scripting
+      # patterns release.yml uses on windows-latest. Tag is read via env: to
+      # treat it as a string variable rather than inline shell text, and
+      # validated against the semver regex before any interpolation.
+      - name: Build embed payload
+        id: build
+        shell: pwsh
+        env:
+          TAG_NAME: ${{ github.event.inputs.tag || github.ref_name }}
+        run: |
+          $tag = $env:TAG_NAME
+          if ($tag -notmatch '^v\d+\.\d+\.\d+$') {
+              throw "V1: Refusing to announce non-semver tag: $tag"
+          }
+          $version = $tag.Substring(1)
+
+          # ---------- Forge-Post-Datei lesen ----------
+          $forgePath = ".github/forge-posts/$tag.md"
+          if (-not (Test-Path $forgePath)) {
+              throw "V2: Forge-Post-Datei für $tag fehlt unter .github/forge-posts/. Datei vor dem Tag anlegen, dann Tag re-pushen oder workflow_dispatch."
+          }
+          $forgeRaw = Get-Content -Path $forgePath -Raw
+
+          # Frontmatter (--- … ---) am Datei-Anfang
+          if ($forgeRaw -notmatch '(?s)\A---\s*\r?\n(.*?)\r?\n---\s*\r?\n(.*)\z') {
+              throw "V3: Frontmatter (---) fehlt oder ist defekt in $forgePath"
+          }
+          $fmText = $matches[1]
+          $deBody = $matches[2].Trim()
+
+          $subtitle = $null
+          $versionsnatur = $null
+          foreach ($line in ($fmText -split "`r?`n")) {
+              if ($line -match '^subtitle:\s*"?([^"]*)"?\s*$')      { $subtitle = $matches[1] }
+              if ($line -match '^versionsnatur:\s*"?([^"]*)"?\s*$') { $versionsnatur = $matches[1] }
+          }
+          if ([string]::IsNullOrWhiteSpace($subtitle))      { throw "V3: Frontmatter-Feld 'subtitle' fehlt in $forgePath" }
+          if ([string]::IsNullOrWhiteSpace($versionsnatur)) { throw "V3: Frontmatter-Feld 'versionsnatur' fehlt in $forgePath" }
+          if ($subtitle.Length      -gt 60) { throw "V4: Frontmatter-Feld 'subtitle' überschreitet Limit ($($subtitle.Length) Char, max 60)" }
+          if ($versionsnatur.Length -gt 40) { throw "V4: Frontmatter-Feld 'versionsnatur' überschreitet Limit ($($versionsnatur.Length) Char, max 40)" }
+          if ([string]::IsNullOrWhiteSpace($deBody)) { throw "V3: DE-Body fehlt in $forgePath" }
+
+          # ---------- EN-Block aus HellionChat.yaml ziehen ----------
+          # 1:1 Pattern aus release.yml — gleicher Header-Marker, gleiches
+          # Trailer-Verhalten. Bei Drift die zwei Workflows synchron halten.
+          $yamlPath = "HellionChat/HellionChat.yaml"
+          $raw = Get-Content -Path $yamlPath -Raw
+          $marker = "changelog: |-"
+          $idx = $raw.IndexOf($marker)
+          if ($idx -lt 0) { throw "V5: changelog-Block nicht gefunden in $yamlPath" }
+          $afterMarker = $raw.Substring($idx + $marker.Length)
+          $changelogBody = (($afterMarker -split "`r?`n") | ForEach-Object {
+              if ($_ -match '^    ') { $_.Substring(4) } else { $_ }
+          }) -join "`n"
+
+          $header = "**v$version "
+          $start = $changelogBody.IndexOf($header)
+          if ($start -lt 0) {
+              throw "V5: No changelog entry for version $version found in $yamlPath. Update the changelog block before tagging."
+          }
+          $rest = $changelogBody.Substring($start)
+          $nextHdr = $rest.IndexOf("`n`n**v", 1)
+          $trailer = $rest.IndexOf("`n`n---")
+          if ($nextHdr -ge 0 -and ($trailer -lt 0 -or $nextHdr -lt $trailer)) {
+              $enBlock = $rest.Substring(0, $nextHdr).TrimEnd()
+          } elseif ($trailer -ge 0) {
+              $enBlock = $rest.Substring(0, $trailer).TrimEnd()
+          } else {
+              $enBlock = $rest.TrimEnd()
+          }
+
+          # ---------- Embed-Felder + Per-Field-Caps (Discord-Hard-Limits) ----------
+          # Discord enforces per-embed-field limits separately from the
+          # combined-total limit. We split the DE and EN blocks into two
+          # embeds that share the same release URL so Discord stitches
+          # them into one visual card. Hard caps per Discord docs:
+          #   description: 4096 per embed
+          #   title:        256 per embed
+          #   footer.text: 2048 per embed
+          #   combined sum across all embeds: 6000
+          $title = "Hellion Chat $version — $subtitle"
+          $deDesc = "**Deutsch**`n`n$deBody"
+          $enDesc = "**English**`n`n$enBlock"
+          $footerText = "Hellion Forge · $versionsnatur"
+          $releaseUrl = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/tag/$tag"
+
+          if ($deDesc.Length -gt 4096) {
+              throw "V6a: DE-Body too long for one embed ($($deDesc.Length) chars, max 4096). Trim .github/forge-posts/$tag.md or post the announcement manually (see forge style §8)."
+          }
+          if ($enDesc.Length -gt 4096) {
+              throw "V6b: EN-Block too long for one embed ($($enDesc.Length) chars, max 4096). Trim the changelog entry in HellionChat/HellionChat.yaml or post manually."
+          }
+          $totalChars = $title.Length + $deDesc.Length + $enDesc.Length + $footerText.Length
+          if ($totalChars -gt 6000) {
+              throw "V6c: Combined embed chars $totalChars exceed Discord's 6000-total limit. Major-Release detected — post manually via Bot/Multi-Embed (see forge style §8)."
+          }
+          Write-Host "Embed-Caps OK: de=$($deDesc.Length)/4096, en=$($enDesc.Length)/4096, total=$totalChars/6000"
+
+          # ---------- Embed-Payload bauen (zwei Embeds, gleiche url) ----------
+          # Sharing the same `url` tells Discord to render both embeds as a
+          # single contiguous card block. The title sits on the first embed,
+          # the footer + timestamp on the last so it reads as one post.
+          $payload = [ordered]@{
+              username = "Forge Herald"
+              avatar_url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/HellionChat/images/icon.png"
+              content = "<@&1500489631555260446>"
+              allowed_mentions = [ordered]@{
+                  parse = @()
+                  roles = @("1500489631555260446")
+              }
+              embeds = @(
+                  [ordered]@{
+                      title = $title
+                      url = $releaseUrl
+                      color = 12730636
+                      description = $deDesc
+                  },
+                  [ordered]@{
+                      url = $releaseUrl
+                      color = 12730636
+                      description = $enDesc
+                      footer = [ordered]@{ text = $footerText }
+                      timestamp = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ss.fffZ")
+                  }
+              )
+          }
+
+          $payloadJson = $payload | ConvertTo-Json -Depth 8 -Compress
+          # Ausgabe-Datei ohne trailing newline für sauberes curl --data-binary @-
+          [System.IO.File]::WriteAllText("$PWD/embed-payload.json", $payloadJson, [System.Text.UTF8Encoding]::new($false))
+
+          Write-Host "Payload size: $($payloadJson.Length) chars"
+          Write-Host "Embed title:  $title"
+          Write-Host "Embed footer: $footerText"
+
+      # POST to the Hellion Forge changelog webhook. curl from PowerShell-Core
+      # so we can pipe the payload via stdin (--data-binary @-) and keep
+      # secrets out of process arg lists. One retry on 5xx, hard fail on 4xx.
+      - name: POST to Hellion Forge webhook
+        shell: pwsh
+        env:
+          DISCORD_FORGE_WEBHOOK: ${{ secrets.DISCORD_FORGE_WEBHOOK }}
+        run: |
+          if ([string]::IsNullOrEmpty($env:DISCORD_FORGE_WEBHOOK)) {
+              throw "V7: DISCORD_FORGE_WEBHOOK secret is empty. Check Settings → Environments → Webhook."
+          }
+
+          $payloadFile = "$PWD/embed-payload.json"
+          if (-not (Test-Path $payloadFile)) {
+              throw "Embed payload file missing — previous step did not produce embed-payload.json"
+          }
+
+          $maxAttempts = 2
+          $attempt = 0
+          while ($attempt -lt $maxAttempts) {
+              $attempt++
+              Write-Host "POST attempt $attempt of $maxAttempts"
+              $tmpResp = "$PWD/.webhook-response"
+              $tmpHeaders = "$PWD/.webhook-headers"
+              # --silent suppresses progress; --show-error prints errors so
+              # the workflow log shows what happened. -w prints HTTP status
+              # to stdout for inspection. -o captures body for diagnosis,
+              # -D captures headers.
+              $rawStatus = Get-Content $payloadFile -Raw |
+                  curl --silent --show-error `
+                       --header 'Content-Type: application/json' `
+                       --data-binary '@-' `
+                       -D $tmpHeaders `
+                       -o $tmpResp `
+                       -w '%{http_code}' `
+                       "$env:DISCORD_FORGE_WEBHOOK"
+              $status = [int]$rawStatus
+              Write-Host "HTTP status: $status"
+
+              if ($status -ge 200 -and $status -lt 300) {
+                  Write-Host "Forge announce POST succeeded."
+                  exit 0
+              }
+
+              $bodySnippet = ""
+              if (Test-Path $tmpResp) {
+                  $bodySnippet = (Get-Content $tmpResp -Raw -ErrorAction SilentlyContinue)
+                  if ($bodySnippet.Length -gt 500) { $bodySnippet = $bodySnippet.Substring(0, 500) + " …" }
+              }
+
+              if ($status -ge 400 -and $status -lt 500) {
+                  # E2: 4xx is permanent — webhook revoked, channel deleted,
+                  # payload malformed. No retry.
+                  throw "E2: Discord-Webhook returned permanent $status. Body: $bodySnippet"
+              }
+
+              # E1: 5xx (or transport-level fail with status 0) — wait + retry once
+              if ($attempt -lt $maxAttempts) {
+                  Write-Host "Transient $status — sleeping 30s before retry."
+                  Start-Sleep -Seconds 30
+              } else {
+                  throw "E1: Discord-Webhook returned transient $status after $maxAttempts attempts. Body: $bodySnippet"
+              }
+          }

.gitea/workflows/release.yml

@@ -0,0 +1,183 @@
+name: Release
+
+# Triggered when a vX.Y.Z tag is pushed. Builds the plugin against the
+# current Dalamud staging branch, locates the latest.zip produced by
+# DalamudPackager and attaches it to the matching Gitea Release.
+#
+# User-controlled inputs touched by this workflow:
+#   - the tag name (filtered by on.tags = v*, validated again at runtime
+#     against ^v\d+\.\d+\.\d+$ before being used in any string)
+# All other values are either repo-controlled (paths under
+# HellionChat/bin/Release derived from find / Get-ChildItem) or pinned
+# URLs to goatcorp / gitea. Nothing from a webhook event payload (issue/PR
+# titles, commit messages, etc.) flows into a run-step.
+#
+# Linux runner: gitea.com Cloud Actions only ships ubuntu-latest. The
+# plugin csproj targets net10.0-windows, `dotnet build` cross-compiles on
+# Linux when the Dalamud staging assemblies sit under $(HOME)/.xlcore/...
+
+on:
+  push:
+    tags:
+      - 'v*'
+  # Manual recovery trigger. Use Gitea's "Run workflow" UI and select the
+  # tag (e.g. v1.4.4) from the Ref dropdown - not main. The Validate tag
+  # ref step below hard-fails if a non-tag ref is selected, because the
+  # release-action reads GITHUB_REF directly and rejects anything that
+  # does not start with refs/tags/.
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: Build and attach release ZIP
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    steps:
+      # release-action@main reads GITHUB_REF directly (its action.yml
+      # does not declare a tag_name input). Validate up-front so manual
+      # dispatches from a branch ref fail loud here instead of burning
+      # a full build before the final step errors out with "ref X is
+      # not a tag".
+      - name: Validate tag ref
+        run: |
+          if [[ "${GITHUB_REF}" != refs/tags/v* ]]; then
+              echo "::error::Release workflow must run on a v*.X.Y tag ref, got ${GITHUB_REF}"
+              echo "::error::Push a tag, or pick the tag (not main) in the workflow_dispatch Ref dropdown."
+              exit 1
+          fi
+
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Setup .NET 10
+        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5
+        with:
+          dotnet-version: 10.0.x
+
+      - name: Download Dalamud staging
+        run: |
+          hooks="$HOME/.xlcore/dalamud/Hooks/dev"
+          mkdir -p "$hooks"
+          curl -fsSL https://goatcorp.github.io/dalamud-distrib/stg/latest.zip -o dalamud.zip
+          unzip -oq dalamud.zip -d "$hooks"
+
+      - name: Build (Release)
+        run: dotnet build HellionChat/HellionChat.csproj --configuration Release
+
+      - name: Locate latest.zip
+        id: locate
+        run: |
+          zip="$(find HellionChat/bin/Release -name latest.zip -print -quit)"
+          if [ -z "$zip" ]; then
+              echo "latest.zip not found under HellionChat/bin/Release" >&2
+              exit 1
+          fi
+          echo "Found: $zip"
+          echo "path=$zip" >> "$GITHUB_OUTPUT"
+
+      # Build a release body from the matching changelog block in
+      # HellionChat.yaml plus a static install / docs footer. Fails the
+      # workflow if no block exists for the tagged version, which is the
+      # automated counterpart to the "yaml + repo.json + release body
+      # kept in sync" rule.
+      #
+      # GITHUB_REF_NAME is read via env: (not ${{ }} interpolation) so the
+      # tag value is treated as a PowerShell variable, not as inline shell
+      # text. The strict regex below rejects anything that is not a clean
+      # semver tag before it is used to build a string.
+      - name: Generate release body
+        shell: pwsh
+        env:
+          # github.ref_name is the tag because Validate tag ref above
+          # already enforced refs/tags/v*. Read via env: so the value
+          # is a PowerShell variable, not inline shell text, and gets
+          # re-validated against the semver regex below.
+          TAG_NAME: ${{ github.ref_name }}
+        run: |
+          $tag = $env:TAG_NAME
+          if ($tag -notmatch '^v\d+\.\d+\.\d+$') {
+              throw "Refusing to generate release body for non-semver tag: $tag"
+          }
+          $version = $tag.Substring(1)
+
+          $yamlPath = "HellionChat/HellionChat.yaml"
+          $raw = Get-Content -Path $yamlPath -Raw
+
+          $marker = "changelog: |-"
+          $idx = $raw.IndexOf($marker)
+          if ($idx -lt 0) { throw "changelog block not found in $yamlPath" }
+
+          # changelog: is the last top-level key in the manifest, so
+          # everything after the marker is the literal block. Strip the
+          # 4-space yaml indent (prettier convention) from each line.
+          $afterMarker = $raw.Substring($idx + $marker.Length)
+          $changelogBody = (($afterMarker -split "`r?`n") | ForEach-Object {
+              if ($_ -match '^    ') { $_.Substring(4) } else { $_ }
+          }) -join "`n"
+
+          # Subblock convention: "**vX.Y.Z — <subtitle> (<date>)**"
+          # matches verify-changelog-sync.sh and slim-rule grep.
+          $header = "**v$version "
+          $start = $changelogBody.IndexOf($header)
+          if ($start -lt 0) {
+              throw "No changelog entry for version $version found in $yamlPath. Update the changelog block before tagging a release."
+          }
+
+          $rest = $changelogBody.Substring($start)
+          $nextHdr = $rest.IndexOf("`n`n**v", 1)
+          $trailer = $rest.IndexOf("`n`n---")
+
+          if ($nextHdr -ge 0 -and ($trailer -lt 0 -or $nextHdr -lt $trailer)) {
+              $currentBlock = $rest.Substring(0, $nextHdr).TrimEnd()
+          } elseif ($trailer -ge 0) {
+              $currentBlock = $rest.Substring(0, $trailer).TrimEnd()
+          } else {
+              $currentBlock = $rest.TrimEnd()
+          }
+
+          # Static install / docs / licence footer is maintained as a
+          # separate file so the workflow YAML stays clean (no embedded
+          # heredoc that would have to be indented under the run-block).
+          $footerPath = ".github/release-footer.md"
+          if (-not (Test-Path $footerPath)) {
+              throw "Release footer template not found: $footerPath"
+          }
+          $footer = Get-Content -Path $footerPath -Raw
+
+          $body = $currentBlock + "`n" + $footer
+          $body | Out-File -FilePath release-body.md -Encoding utf8 -NoNewline
+
+          Write-Host "Generated release body for $tag :"
+          Write-Host "----------------------------------------"
+          Write-Host $body
+          Write-Host "----------------------------------------"
+
+      # release-action@main only declares files/title/body/pre_release/
+      # draft/api_key/insecure as inputs (see its action.yml). It silently
+      # ignores anything else, including body_path and tag_name. The tag
+      # itself comes from GITHUB_REF, the body must be passed inline via
+      # body:, so we re-emit release-body.md as a step output first.
+      - name: Expose release body for release-action
+        id: body
+        shell: bash
+        run: |
+          {
+              echo 'content<<RELEASE_BODY_EOF'
+              cat release-body.md
+              echo 'RELEASE_BODY_EOF'
+          } >> "$GITHUB_OUTPUT"
+
+      # Gitea-native release action. Creates the release if the tag has no
+      # release yet, or updates the existing one with latest.zip attached
+      # and the generated body. The auto-injected GITHUB_TOKEN on Gitea
+      # Actions has Gitea-API scope and is sufficient for release write.
+      - name: Attach to Gitea release
+        uses: https://gitea.com/actions/release-action@main
+        with:
+          files: ${{ steps.locate.outputs.path }}
+          body: ${{ steps.body.outputs.content }}
+          api_key: ${{ secrets.GITHUB_TOKEN }}

.gitea/workflows/security.yml

@@ -1,20 +1,20 @@
 name: Security
 on:
-    push:
+  push:
-        branches: [main, master]
+    branches: [main, master]
-    pull_request:
+  pull_request:
-    schedule:
+  schedule:
-        - cron: "0 6 * * 1"
+    - cron: '0 6 * * 1'
-    workflow_dispatch:
+  workflow_dispatch:
 
 jobs:
-    scan:
+  scan:
-        uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main
+    uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main
-        with:
+    with:
-            # MessageStore.cs uses string-interpolation in CommandText for table
+      # MessageStore.cs uses string-interpolation in CommandText for table
-            # names and clause-joins that come from internal code constants, not
+      # names and clause-joins that come from internal code constants, not
-            # user input. Values are bound via SqlParameter, the SQL surface is
+      # user input. Values are bound via SqlParameter, the SQL surface is
-            # local-only inside a Dalamud plugin. Semgrep matches the pattern
+      # local-only inside a Dalamud plugin. Semgrep matches the pattern
-            # without dataflow, so it flags those eight call sites; CodeQL
+      # without dataflow, so it flags those eight call sites; CodeQL
-            # would not. Suppressed for this repo only.
+      # would not. Suppressed for this repo only.
-            semgrep-exclude-rules: "csharp.lang.security.sqli.csharp-sqli.csharp-sqli"
+      semgrep-exclude-rules: 'csharp.lang.security.sqli.csharp-sqli.csharp-sqli'

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,73 +1,73 @@
 name: Bug report
 description: Something in HellionChat is broken or behaves wrong
 labels:
-    - bug
+  - bug
 body:
-    - type: markdown
+  - type: markdown
-      attributes:
+    attributes:
-          value: |
+      value: |
-              Thanks for reporting. Please fill in the fields below so I can
+        Thanks for reporting. Please fill in the fields below so I can
-              reproduce the issue. If this is a security issue, stop here and
+        reproduce the issue. If this is a security issue, stop here and
-              report it privately to [kontakt@hellion-media.de](mailto:kontakt@hellion-media.de?subject=%5BHellionChat%20Security%5D)
+        report it privately to [kontakt@hellion-media.de](mailto:kontakt@hellion-media.de?subject=%5BHellionChat%20Security%5D)
-              instead.
+        instead.
 
-    - type: input
+  - type: input
-      id: version
+    id: version
-      attributes:
+    attributes:
-          label: HellionChat version
+      label: HellionChat version
-          description: From Settings → Information → Version
+      description: From Settings → Information → Version
-          placeholder: "0.5.4"
+      placeholder: '0.5.4'
-      validations:
+    validations:
+      required: true
+
+  - type: dropdown
+    id: platform
+    attributes:
+      label: Platform
+      options:
+        - Windows (XIVLauncher)
+        - Linux (XIVLauncher Core)
+        - macOS (XIVLauncher Core / wine)
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened
+      description: Plain description, no log dumps yet
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: What you expected
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: How to reproduce
+      description: Step-by-step from "open settings" or "log in" through to the broken behaviour
+    validations:
+      required: true
+
+  - type: textarea
+    id: log
+    attributes:
+      label: Relevant /xllog excerpt
+      description: Filter for "HellionChat" if the log is huge
+      render: text
+
+  - type: checkboxes
+    id: confirm
+    attributes:
+      label: Pre-flight
+      options:
+        - label: I am running the latest version of HellionChat
           required: true
-
+        - label: I have searched existing issues for duplicates
-    - type: dropdown
-      id: platform
-      attributes:
-          label: Platform
-          options:
-              - Windows (XIVLauncher)
-              - Linux (XIVLauncher Core)
-              - macOS (XIVLauncher Core / wine)
-              - Other
-      validations:
           required: true
-
-    - type: textarea
-      id: what-happened
-      attributes:
-          label: What happened
-          description: Plain description, no log dumps yet
-      validations:
-          required: true
-
-    - type: textarea
-      id: expected
-      attributes:
-          label: What you expected
-      validations:
-          required: true
-
-    - type: textarea
-      id: steps
-      attributes:
-          label: How to reproduce
-          description: Step-by-step from "open settings" or "log in" through to the broken behaviour
-      validations:
-          required: true
-
-    - type: textarea
-      id: log
-      attributes:
-          label: Relevant /xllog excerpt
-          description: Filter for "HellionChat" if the log is huge
-          render: text
-
-    - type: checkboxes
-      id: confirm
-      attributes:
-          label: Pre-flight
-          options:
-              - label: I am running the latest version of HellionChat
-                required: true
-              - label: I have searched existing issues for duplicates
-                required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -1,15 +1,15 @@
 blank_issues_enabled: false
 
 contact_links:
-    - name: Security vulnerability
+  - name: Security vulnerability
-      url: mailto:kontakt@hellion-media.de?subject=%5BHellionChat%20Security%5D
+    url: mailto:kontakt@hellion-media.de?subject=%5BHellionChat%20Security%5D
-      about: Do not open a public issue for security problems. Report by e-mail instead.
+    about: Do not open a public issue for security problems. Report by e-mail instead.
 
-    - name: Upstream Chat 2 issue
+  - name: Upstream Chat 2 issue
-      url: https://github.com/Infiziert90/ChatTwo/issues
+    url: https://github.com/Infiziert90/ChatTwo/issues
-      about:
+    about:
-          If the issue exists in upstream Chat 2 too, please report it there so the original maintainers see it as well.
+      If the issue exists in upstream Chat 2 too, please report it there so the original maintainers see it as well.
 
-    - name: Discord
+  - name: Discord
-      url: https://discord.com/users/j.j_kazama
+    url: https://discord.com/users/j.j_kazama
-      about: Quick questions, casual feedback. Bug reports still go through the issue tracker for tracking.
+    about: Quick questions, casual feedback. Bug reports still go through the issue tracker for tracking.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,57 +1,55 @@
 name: Feature request
 description: Suggest a feature or enhancement for HellionChat
 labels:
-    - enhancement
+  - enhancement
 body:
-    - type: markdown
+  - type: markdown
-      attributes:
+    attributes:
-          value: |
+      value: |
-              Thanks for the suggestion. HellionChat focuses on privacy by
+        Thanks for the suggestion. HellionChat focuses on privacy by
-              default and a small, well-scoped feature set. Suggestions that
+        default and a small, well-scoped feature set. Suggestions that
-              align with that scope are easier to accept than ones that pull
+        align with that scope are easier to accept than ones that pull
-              the plugin toward "do everything".
+        the plugin toward "do everything".
 
-    - type: textarea
+  - type: textarea
-      id: problem
+    id: problem
-      attributes:
+    attributes:
-          label: What problem are you trying to solve
+      label: What problem are you trying to solve
-          description: The user-side problem, not the proposed solution yet
+      description: The user-side problem, not the proposed solution yet
-      validations:
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: What you would like HellionChat to do
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives you have considered
+      description: Other plugins, manual workarounds, settings combinations
+
+  - type: dropdown
+    id: scope
+    attributes:
+      label: Scope estimate from your side
+      options:
+        - 'Small (one tab, one toggle, one filter)'
+        - 'Medium (a settings section, persistent state, one new file)'
+        - 'Large (architectural, touches the message pipeline or the database)'
+        - "I don't know"
+    validations:
+      required: true
+
+  - type: checkboxes
+    id: confirm
+    attributes:
+      label: Pre-flight
+      options:
+        - label: I have searched existing issues for similar requests
           required: true
-
+        - label: I understand HellionChat is a privacy-focused fork and not a feature parity tool with upstream Chat 2
-    - type: textarea
-      id: solution
-      attributes:
-          label: What you would like HellionChat to do
-      validations:
           required: true
-
-    - type: textarea
-      id: alternatives
-      attributes:
-          label: Alternatives you have considered
-          description: Other plugins, manual workarounds, settings combinations
-
-    - type: dropdown
-      id: scope
-      attributes:
-          label: Scope estimate from your side
-          options:
-              - "Small (one tab, one toggle, one filter)"
-              - "Medium (a settings section, persistent state, one new file)"
-              - "Large (architectural, touches the message pipeline or the database)"
-              - "I don't know"
-      validations:
-          required: true
-
-    - type: checkboxes
-      id: confirm
-      attributes:
-          label: Pre-flight
-          options:
-              - label: I have searched existing issues for similar requests
-                required: true
-              - label:
-                    I understand HellionChat is a privacy-focused fork and not a feature parity tool with upstream Chat
-                    2
-                required: true

.github/PULL_REQUEST_TEMPLATE.md

@@ -18,7 +18,8 @@ mailto:kontakt@hellion-media.de?subject=%5BHellionChat%20Security%5D
 
 - [ ] Bug fix (non-breaking change that fixes an issue)
 - [ ] New feature (non-breaking change that adds behaviour)
-- [ ] Breaking change (config migration, removed feature, or behaviour change that user-visible defaults rely on)
+- [ ] Breaking change (config migration, removed feature, or behaviour change that user-visible
+      defaults rely on)
 - [ ] Documentation only
 - [ ] Translation update
 - [ ] Build, CI or tooling change
@@ -55,10 +56,11 @@ new commands, new translations, removed behaviour. If none, write
 
 ## Checklist
 
-- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md) and [CODE_OF_CONDUCT.md](../CODE_OF_CONDUCT.md).
+- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md) and
+      [CODE_OF_CONDUCT.md](../CODE_OF_CONDUCT.md).
 - [ ] My change matches the existing code style (`.editorconfig`).
-- [ ] I added or updated tests where the existing test infrastructure made that practical, or I have explained why tests
+- [ ] I added or updated tests where the existing test infrastructure made that practical, or I have
-      are not applicable.
+      explained why tests are not applicable.
 - [ ] I updated the README, in-plugin strings or documentation if my change is user-visible.
 - [ ] I did not include any AI-generated code without disclosing it in the PR description (see
       [AI_DISCLOSURE.md](../docs/AI_DISCLOSURE.md)).

.github/dependabot.yml

@@ -1,42 +1,42 @@
 version: 2
 
 updates:
-    # NuGet package updates for the plugin project. Weekly cadence keeps the
+  # NuGet package updates for the plugin project. Weekly cadence keeps the
-    # noise down while still catching transitive security advisories within
+  # noise down while still catching transitive security advisories within
-    # a few days of disclosure.
+  # a few days of disclosure.
-    - package-ecosystem: nuget
+  - package-ecosystem: nuget
-      directory: /HellionChat
+    directory: /HellionChat
-      schedule:
+    schedule:
-          interval: weekly
+      interval: weekly
-          day: monday
+      day: monday
-          time: "07:00"
+      time: '07:00'
-          timezone: Europe/Berlin
+      timezone: Europe/Berlin
-      open-pull-requests-limit: 5
+    open-pull-requests-limit: 5
-      labels:
+    labels:
-          - dependencies
+      - dependencies
-          - nuget
+      - nuget
-      commit-message:
+    commit-message:
-          prefix: "chore(deps)"
+      prefix: 'chore(deps)'
-      groups:
+    groups:
-          patches:
+      patches:
-              update-types:
+        update-types:
-                  - patch
+          - patch
-          minor:
+      minor:
-              update-types:
+        update-types:
-                  - minor
+          - minor
 
-    # GitHub Actions versions in .github/workflows. Lower cadence because
+  # GitHub Actions versions in .github/workflows. Lower cadence because
-    # Action releases ship less frequently and are usually safe to defer
+  # Action releases ship less frequently and are usually safe to defer
-    # for a month.
+  # for a month.
-    - package-ecosystem: github-actions
+  - package-ecosystem: github-actions
-      directory: /
+    directory: /
-      schedule:
+    schedule:
-          interval: monthly
+      interval: monthly
-          time: "07:00"
+      time: '07:00'
-          timezone: Europe/Berlin
+      timezone: Europe/Berlin
-      open-pull-requests-limit: 3
+    open-pull-requests-limit: 3
-      labels:
+    labels:
-          - dependencies
+      - dependencies
-          - github-actions
+      - github-actions
-      commit-message:
+    commit-message:
-          prefix: "chore(actions)"
+      prefix: 'chore(actions)'

.github/forge-posts/v1.1.0.md

@@ -3,15 +3,16 @@ subtitle: "Theme Foundation"
 versionsnatur: "Major-UI-Cycle"
 ---
 
-- Theme-Engine mit fünf Built-In-Themes: Hellion Arctic (Default), Chat 2 Klassik, Event Horizon, Moonlit Bloom, Mint
+- Theme-Engine mit fünf Built-In-Themes: Hellion Arctic (Default), Chat 2 Klassik, Event Horizon,
-  Grove
+  Moonlit Bloom, Mint Grove
-- Settings öffnet jetzt eine Card-Grid-Übersicht — Klick auf eine Card führt in den Detail-View, Breadcrumb und ESC
+- Settings öffnet jetzt eine Card-Grid-Übersicht — Klick auf eine Card führt in den Detail-View,
-  zurück zur Übersicht
+  Breadcrumb und ESC zurück zur Übersicht
 - Themes-Tab mit Mini-Mockup pro Theme, Live-Switch beim Klick
-- Eigene Themes als JSON in `pluginConfigs/HellionChat/themes/` — Beispiel-Vorlage wird beim ersten Start automatisch
+- Eigene Themes als JSON in `pluginConfigs/HellionChat/themes/` — Beispiel-Vorlage wird beim ersten
-  abgelegt
+  Start automatisch abgelegt
-- Optional pro Theme eigene Chat-Channel-Farben mit Übernehmen/Behalten-Banner — niemals automatisch überschrieben
+- Optional pro Theme eigene Chat-Channel-Farben mit Übernehmen/Behalten-Banner — niemals automatisch
+  überschrieben
 - Plugin-Icon zum Hellion-Forge-Hammer gewechselt
-- Migration v13 → v14: alle User landen auf Hellion Arctic. Wer den Upstream-Look will, wählt Chat 2 Klassik in Settings
+- Migration v13 → v14: alle User landen auf Hellion Arctic. Wer den Upstream-Look will, wählt Chat 2
-  → Themes
+  Klassik in Settings → Themes
 - Anleitung zum Schreiben eigener Themes: `docs/THEME-AUTHORING.md`

.github/forge-posts/v1.2.0.md

@@ -3,22 +3,22 @@ subtitle: "Layout Refresh"
 versionsnatur: "Major-UI-Cycle"
 ---
 
-- Sidebar im neuen Look: fix 44 px breit, nur Icons, Tab-Name als Tooltip beim Hover, vertikale Akzent-Pill markiert den
+- Sidebar im neuen Look: fix 44 px breit, nur Icons, Tab-Name als Tooltip beim Hover, vertikale
-  aktiven Tab
+  Akzent-Pill markiert den aktiven Tab
 - Top-Tabs bekommen eine Akzent-Underline statt Background-Fill am aktiven Tab
 - Pro Tab eigenes Icon wählbar in Einstellungen → Tabs (FontAwesome-Pool)
 - Auto-Tell-Tabs sind jetzt visuell unterscheidbar: jeder Tell-Partner bekommt ein eigenes Icon
-  (envelope/star/heart/bell/bookmark/flag/fire) plus eigene Farbe aus 12-Farb-Palette — 84 Kombinationen, gleicher
+  (envelope/star/heart/bell/bookmark/flag/fire) plus eigene Farbe aus 12-Farb-Palette — 84
-  Partner ergibt konsistent dieselbe
+  Kombinationen, gleicher Partner ergibt konsistent dieselbe
-- Pulsierender roter Dot oben rechts am Sidebar-Icon zeigt ungelesene Nachrichten an. Sanft, 2-Sekunden-Cycle,
+- Pulsierender roter Dot oben rechts am Sidebar-Icon zeigt ungelesene Nachrichten an. Sanft,
-  deaktivierbar über `Configuration.ReduceMotion` (UI-Toggle in v1.3.0)
+  2-Sekunden-Cycle, deaktivierbar über `Configuration.ReduceMotion` (UI-Toggle in v1.3.0)
-- Bottom-Status-Bar (22 px) mit fünf Live-Slots: aktiver Channel + Color-Dot, Privacy-Badge, Tab/Message-Counter,
+- Bottom-Status-Bar (22 px) mit fünf Live-Slots: aktiver Channel + Color-Dot, Privacy-Badge,
-  Auto-Tell-Counter, Plugin-Version. Update 1×/Sek
+  Tab/Message-Counter, Auto-Tell-Counter, Plugin-Version. Update 1×/Sek
-- Card-Rows als Default-Message-Render: Sender-Header in Channel-Farbe, Body neue Zeile, dezenter Trenner.
+- Card-Rows als Default-Message-Render: Sender-Header in Channel-Farbe, Body neue Zeile, dezenter
-  `Compact Density`-Toggle in Aussehen schaltet zurück auf den Einzeiler
+  Trenner. `Compact Density`-Toggle in Aussehen schaltet zurück auf den Einzeiler
-- Bug-Fix: Settings speichern löscht den Chat-Verlauf nicht mehr. Refilter läuft jetzt nur wenn Filter-relevante
+- Bug-Fix: Settings speichern löscht den Chat-Verlauf nicht mehr. Refilter läuft jetzt nur wenn
-  Settings geändert wurden — Cosmetic-Änderungen lassen den Chat unverändert. Persistente und Auto-Tell-Tabs überleben
+  Filter-relevante Settings geändert wurden — Cosmetic-Änderungen lassen den Chat unverändert.
-  beide
+  Persistente und Auto-Tell-Tabs überleben beide
 - Bug-Fix: Hellion-Schrift (Exo 2) blockt die Schriftgröße nicht mehr — 4K-User können hochskalieren
 - Migration v14 → v15: alte Theme-Felder entfernt, alle anderen Settings bleiben
 

.github/forge-posts/v1.2.1.md

@@ -3,27 +3,31 @@ subtitle: "Settings Cleanup"
 versionsnatur: "UX-Polish-Cycle"
 ---
 
-- Settings-Übersicht thematisch re-sortiert: zusammenhängende Optionen wohnen jetzt zusammen, jede Card hat einen kurzen
+- Settings-Übersicht thematisch re-sortiert: zusammenhängende Optionen wohnen jetzt zusammen, jede
-  Untertitel — kein Raten mehr wo eine Setting steckt
+  Card hat einen kurzen Untertitel — kein Raten mehr wo eine Setting steckt
-- Drei neue Cards: **Theme & Layout** (Theme-Picker, Fenster-Style, Zeitstempel-Style), **Schriften & Farben**
+- Drei neue Cards: **Theme & Layout** (Theme-Picker, Fenster-Style, Zeitstempel-Style), **Schriften
-  (Schriftart, Schriftgröße, Chat-Farben pro Channel), **Daten-Verwaltung** (Aufbewahrung, Cleanup, Export, DB-Viewer,
+  & Farben** (Schriftart, Schriftgröße, Chat-Farben pro Channel), **Daten-Verwaltung**
-  Advanced-Tools — vorher zwischen Datenschutz und Datenbank verteilt)
+  (Aufbewahrung, Cleanup, Export, DB-Viewer, Advanced-Tools — vorher zwischen Datenschutz und
+  Datenbank verteilt)
 - Datenschutz fokussiert sich jetzt auf eine Aufgabe: den Privacy-Filter
 - Der Auto-Tell-Tabs-History-Preload-Slider ist von Datenschutz nach Chat → Auto-Tell-Tabs umgezogen
 - KeybindMode wohnt jetzt unter Allgemein → Eingabe statt unter Sprache
-- Vier tote Schema-Felder entfernt (alle obsolet seit der Theme-Engine in v1.1.0): `Stilüberschreiben`-Toggle,
+- Vier tote Schema-Felder entfernt (alle obsolet seit der Theme-Engine in v1.1.0):
-  `Stilname`-Auswahl, alter `WindowAlpha`-Slider, ungenutztes `ShowThemeQuickPicker`
+  `Stilüberschreiben`-Toggle, `Stilname`-Auswahl, alter `WindowAlpha`-Slider, ungenutztes
+  `ShowThemeQuickPicker`
 - Migration v15 → v16: alter `WindowAlpha`-Wert wird automatisch nach
-  `Theme & Layout → Fenster-Style → Fenster-Transparenz` gemappt (nur wenn der Slider noch auf Default 0.85 stand, sonst
+  `Theme & Layout → Fenster-Style → Fenster-Transparenz` gemappt (nur wenn der Slider noch auf
-  gewinnt der User-Wert). Backup der Pre-v16-Config liegt unter `pluginConfigs/HellionChat.json.pre-v16-backup`. User
+  Default 0.85 stand, sonst gewinnt der User-Wert). Backup der Pre-v16-Config liegt unter
-  die `Stilüberschreiben` aktiv hatten sehen einen einmaligen Hinweis-Toast
+  `pluginConfigs/HellionChat.json.pre-v16-backup`. User die `Stilüberschreiben` aktiv hatten sehen
-- UX-Default-Bumps für Bestand-User mit Default-Werten: Card-Rows-Layout zurück auf Single-Line, NG+ standardmäßig
+  einen einmaligen Hinweis-Toast
-  hidden, gleiche Zeitstempel werden zusammengefasst, MaxLinesToRender auf konservativere 2500
+- UX-Default-Bumps für Bestand-User mit Default-Werten: Card-Rows-Layout zurück auf Single-Line, NG+
-- Frische Installs starten mit dem Hellion-Brand-Chat-Color-Preset out-of-the-box (der First-Run-Wizard hat keine
+  standardmäßig hidden, gleiche Zeitstempel werden zusammengefasst, MaxLinesToRender auf
-  Preset-Wahl)
+  konservativere 2500
-- Hinweis zum Window-Transparenz-Slider in der Beschreibung: Dalamud's per-Window-Hamburger-Menü (oben rechts in der
+- Frische Installs starten mit dem Hellion-Brand-Chat-Color-Preset out-of-the-box (der
-  Titelleiste) bietet eigene Overrides für Deckkraft, Hintergrund-Blur, Anpinnen und Durchklick — die haben Vorrang über
+  First-Run-Wizard hat keine Preset-Wahl)
-  unseren Slider für das jeweilige Fenster
+- Hinweis zum Window-Transparenz-Slider in der Beschreibung: Dalamud's per-Window-Hamburger-Menü
+  (oben rechts in der Titelleiste) bietet eigene Overrides für Deckkraft, Hintergrund-Blur, Anpinnen
+  und Durchklick — die haben Vorrang über unseren Slider für das jeweilige Fenster
 
-Pure UX-Polish, keine neuen Features. Nächster Cycle (v1.3.0): Animation-Polish (Lerps, Theme-Crossfade, Quick-Picker)
+Pure UX-Polish, keine neuen Features. Nächster Cycle (v1.3.0): Animation-Polish (Lerps,
-wie ursprünglich geplant.
+Theme-Crossfade, Quick-Picker) wie ursprünglich geplant.

.github/forge-posts/v1.2.3.md

@@ -3,21 +3,23 @@ subtitle: "Theme Expansion"
 versionsnatur: "Theme-Pack-Patch"
 ---
 
-- Vier neue Built-in-Themes verlängern die Auswahl im Picker — keine Engine-Änderung, keine Settings angefasst, einfach
+- Vier neue Built-in-Themes verlängern die Auswahl im Picker — keine Engine-Änderung, keine Settings
-  mehr Farboptionen
+  angefasst, einfach mehr Farboptionen
-- **Night Blue** — Royal Blue auf tiefem Marineblau. Kühles Tech-Dashboard-Mood, bewusst neutral gehalten damit es sich
+- **Night Blue** — Royal Blue auf tiefem Marineblau. Kühles Tech-Dashboard-Mood, bewusst neutral
-  nicht mit den Brand-Themes beißt
+  gehalten damit es sich nicht mit den Brand-Themes beißt
-- **Indigo Violet** — Royal Violet auf Deep Indigo mit Türkis-Mint-Counter für Aurora-Glitter-Stimmung. Schwester von
+- **Indigo Violet** — Royal Violet auf Deep Indigo mit Türkis-Mint-Counter für
-  Event Horizon, aber dunkler und dichter; der Türkis-Akzent hält die beiden klar auseinander
+  Aurora-Glitter-Stimmung. Schwester von Event Horizon, aber dunkler und dichter; der Türkis-Akzent
-- **Forge Merchantman** — Patina-Bronze auf Workshop-Slate mit warmem Bernstein-Counter. Hellion Forge bekommt ein
+  hält die beiden klar auseinander
-  eigenes Theme im Plugin selbst — Schwester von Hellion Arctic, aber grüner und wärmer statt kaltem Cyan
+- **Forge Merchantman** — Patina-Bronze auf Workshop-Slate mit warmem Bernstein-Counter. Hellion
+  Forge bekommt ein eigenes Theme im Plugin selbst — Schwester von Hellion Arctic, aber grüner und
+  wärmer statt kaltem Cyan
 - **Hellion Spectrum** — Farbenblind-sichere Channel-Farben (Deuteranopie/Protanopie) auf Basis der
-  Wong/Okabe-Ito-Palette. Channel-Identität bleibt erhalten (Tell pink, Yell gelb, Shout orange, Party blau, FC grün);
+  Wong/Okabe-Ito-Palette. Channel-Identität bleibt erhalten (Tell pink, Yell gelb, Shout orange,
-  die Töne sind so gewählt dass jeder Channel auch unter Rot-Grün-Schwäche klar trennbar bleibt. Deckt rund 99 % aller
+  Party blau, FC grün); die Töne sind so gewählt dass jeder Channel auch unter Rot-Grün-Schwäche
-  CVD-Fälle ab
+  klar trennbar bleibt. Deckt rund 99 % aller CVD-Fälle ab
-- Kein Schema-Bump, keine Migration. Das Default-Theme bleibt **Hellion Arctic**, eigene Custom-Themes laufen
+- Kein Schema-Bump, keine Migration. Das Default-Theme bleibt **Hellion Arctic**, eigene
-  unverändert weiter
+  Custom-Themes laufen unverändert weiter
 - Theme-Katalog wächst damit von fünf auf neun Built-ins
 
-Reines Theme-Pack zwischen v1.2.1 und dem nächsten Polish-Cycle. Eine Tritan-Variante (Spectrum für Blau-Gelb-Schwäche)
+Reines Theme-Pack zwischen v1.2.1 und dem nächsten Polish-Cycle. Eine Tritan-Variante (Spectrum für
-kann später nachgeliefert werden, falls Bedarf kommt.
+Blau-Gelb-Schwäche) kann später nachgeliefert werden, falls Bedarf kommt.

.github/forge-posts/v1.3.0.md

@@ -4,15 +4,17 @@ versionsnatur: "Plugin-Integration-Cycle 1"
 ---
 
 - Erste Plugin-Integration eingebaut, Cycle 1 von 6 auf der Roadmap
-- **Honorific-Custom-Titles im Chat-Header** — der Titel den du in Honorific gesetzt hast erscheint jetzt links über dem
+- **Honorific-Custom-Titles im Chat-Header** — der Titel den du in Honorific gesetzt hast erscheint
-  Message-Log mit der von dir gewählten Farbe, Auto-Hide wenn Honorific nicht installiert ist oder kein Custom-Titel
+  jetzt links über dem Message-Log mit der von dir gewählten Farbe, Auto-Hide wenn Honorific nicht
-  aktiv ist
+  installiert ist oder kein Custom-Titel aktiv ist
-- **Krone-Icon plus Tooltip** vor dem Titel-Text, damit klar ist woher der Slot kommt ohne dass der User raten muss
+- **Krone-Icon plus Tooltip** vor dem Titel-Text, damit klar ist woher der Slot kommt ohne dass der
-- **Neuer Integrations-Settings-Tab** mit Status-Indikator (erkannt, nicht installiert, inkompatibel) und Toggle. Plus
+  User raten muss
-  Vorschau-Block der die fünf weiteren geplanten Cycles ankündigt: Kontextmenü-Aktionen, Smart Notifications
+- **Neuer Integrations-Settings-Tab** mit Status-Indikator (erkannt, nicht installiert,
-  (NotificationMaster), RP-Status-Block (Moodles und LightlessClient), ExtraChat-Channels, Quick-DM-Button
+  inkompatibel) und Toggle. Plus Vorschau-Block der die fünf weiteren geplanten Cycles ankündigt:
-  (XIVInstantMessenger)
+  Kontextmenü-Aktionen, Smart Notifications (NotificationMaster), RP-Status-Block (Moodles und
-- **Maintainer-Attribution** im Tab als Höflichkeits-Geste, zwei Buttons zum Honorific-Repo und zum Caraxi-Profil. Plus
+  LightlessClient), ExtraChat-Channels, Quick-DM-Button (XIVInstantMessenger)
-  Hellion-Forge-Discord-Button für Community-Vorschläge zu künftigen Integrationen
+- **Maintainer-Attribution** im Tab als Höflichkeits-Geste, zwei Buttons zum Honorific-Repo und zum
-- Keine Migration, keine Schema-Änderung. Wer Honorific eh schon nutzt sieht den Custom-Titel automatisch sobald
+  Caraxi-Profil. Plus Hellion-Forge-Discord-Button für Community-Vorschläge zu künftigen
-  HellionChat aktualisiert
+  Integrationen
+- Keine Migration, keine Schema-Änderung. Wer Honorific eh schon nutzt sieht den Custom-Titel
+  automatisch sobald HellionChat aktualisiert

.github/forge-posts/v1.4.0.md

@@ -5,19 +5,20 @@ versionsnatur: Stability-Hotfix
 
 **Hellion Chat 1.4.0 — Critical Lifecycle Fixes**
 
-Erster Sub-Patch der v1.4.x Polish-Sweep-Serie. Sieben bekannte Lifecycle- und Race-Bugs aus den Audit-Pässen
+Erster Sub-Patch der v1.4.x Polish-Sweep-Serie. Sieben bekannte Lifecycle- und Race-Bugs aus den
-abgearbeitet, bevor Performance- und Architektur-Refactors draufkommen.
+Audit-Pässen abgearbeitet, bevor Performance- und Architektur-Refactors draufkommen.
 
-- **SQLite-Dispose** lehnt sich nicht mehr an GC-Druck zur Datei-Freigabe an, Pooling=false auf der Connection macht den
+- **SQLite-Dispose** lehnt sich nicht mehr an GC-Druck zur Datei-Freigabe an, Pooling=false auf der
-  manuellen GC.Collect überflüssig
+  Connection macht den manuellen GC.Collect überflüssig
-- **Worker-Threads** (PendingMessage, RetentionSweep) sind jetzt explizit IsBackground=true, das Plugin-Domain kann
+- **Worker-Threads** (PendingMessage, RetentionSweep) sind jetzt explizit IsBackground=true, das
-  sauber unloaden bei XIVLauncher-Reload ohne darauf zu warten
+  Plugin-Domain kann sauber unloaden bei XIVLauncher-Reload ohne darauf zu warten
-- **EmoteCache-Loader** von async-void auf async-Task mit shared Task-Tracker, drain-on-Dispose. Kein Schreib-Risiko
+- **EmoteCache-Loader** von async-void auf async-Task mit shared Task-Tracker, drain-on-Dispose.
-  mehr auf disposed EmoteImages-Einträge nach Plugin-Reload
+  Kein Schreib-Risiko mehr auf disposed EmoteImages-Einträge nach Plugin-Reload
 - **DisposeAsync-Timeout** (10s) warnt jetzt laut statt silent zu failen
-- **Plugin-Dispose** flushed pending DeferredSave bevor Services abgebaut werden, Settings-Änderungen aus den letzten
+- **Plugin-Dispose** flushed pending DeferredSave bevor Services abgebaut werden,
-  Frames vor Disable überleben jetzt zuverlässig
+  Settings-Änderungen aus den letzten Frames vor Disable überleben jetzt zuverlässig
-- **v13→v14 Config-Migration** liest pre-v13-Backup und überträgt HellionThemeWindowOpacity in das neue
+- **v13→v14 Config-Migration** liest pre-v13-Backup und überträgt HellionThemeWindowOpacity in das
-  WindowOpacity-Feld statt auf 0.85 zurückzufallen
+  neue WindowOpacity-Feld statt auf 0.85 zurückzufallen
 
-Keine Schema-Bumps, keine User-sichtbaren Funktions-Änderungen außer dass Reload und Shutdown spürbar sauberer laufen.
+Keine Schema-Bumps, keine User-sichtbaren Funktions-Änderungen außer dass Reload und Shutdown
+spürbar sauberer laufen.

.github/forge-posts/v1.4.1.md

@@ -5,23 +5,25 @@ versionsnatur: Performance-Patch
 
 **Hellion Chat 1.4.1 — Theme Engine Performance**
 
-Zweiter Sub-Patch der v1.4.x Polish-Sweep-Serie. Heap-Pressure aus dem Theme-Engine-Render-Pfad eliminiert,
+Zweiter Sub-Patch der v1.4.x Polish-Sweep-Serie. Heap-Pressure aus dem Theme-Engine-Render-Pfad
-Custom-Theme- Hot-Reload überlebt transiente File-Locks beim Editor-Save. Plus zehnter Built-In und überarbeitete
+eliminiert, Custom-Theme- Hot-Reload überlebt transiente File-Locks beim Editor-Save. Plus zehnter
-Author-Credits.
+Built-In und überarbeitete Author-Credits.
 
-- **ABGR-Cache auf den Theme-Records.** Beim Theme-Register (Built-In oder Custom) werden alle Color-Slots einmalig in
+- **ABGR-Cache auf den Theme-Records.** Beim Theme-Register (Built-In oder Custom) werden alle
-  ABGR-Pack-Form vor-konvertiert. HellionStyle.PushGlobal liest aus dem Cache statt pro Slot pro Frame durch
+  Color-Slots einmalig in ABGR-Pack-Form vor-konvertiert. HellionStyle.PushGlobal liest aus dem
-  ColourUtil.RgbaToAbgr zu jagen. Real gemessene Frame-Time-Recovery: **~13 %** in typischer Render-Szene
+  Cache statt pro Slot pro Frame durch ColourUtil.RgbaToAbgr zu jagen. Real gemessene
-  (Plan-Erwartung war 2-6 % konservativ, real ~10-15 %)
+  Frame-Time-Recovery: **~13 %** in typischer Render-Szene (Plan-Erwartung war 2-6 % konservativ,
-- **Custom-Theme File-Lock-Härtung.** Wenn der User ein Theme-JSON gerade speichert während HellionChat reloaden will,
+  real ~10-15 %)
-  fängt der Loader jetzt explizit Sharing-Violation und Lock-Violation ab. Last-Known-Good-Snapshot bleibt im Picker,
+- **Custom-Theme File-Lock-Härtung.** Wenn der User ein Theme-JSON gerade speichert während
-  beim nächsten Tick wird automatisch retry'd — vorher fiel das Theme aus der Liste bis zum Plugin-Reload
+  HellionChat reloaden will, fängt der Loader jetzt explizit Sharing-Violation und Lock-Violation
-- **Defensive Cache-Refresh beim Theme-Switch.** Falls ein Theme auf einem alten Pfad ohne Cache-Fill in den Speicher
+  ab. Last-Known-Good-Snapshot bleibt im Picker, beim nächsten Tick wird automatisch retry'd —
-  gekommen ist, holt Switch() das beim Anwenden nach
+  vorher fiel das Theme aus der Liste bis zum Plugin-Reload
-- **Synthwave Sunset als zehnter Built-In.** Hot Magenta + Cyan auf Mitternachts-Violett, 80s-Neon-Grid-Vibes für
+- **Defensive Cache-Refresh beim Theme-Switch.** Falls ein Theme auf einem alten Pfad ohne
-  Late-Night-Raids
+  Cache-Fill in den Speicher gekommen ist, holt Switch() das beim Anwenden nach
-- **Author-Credits konsolidiert.** Brand-Themes laufen jetzt unter „Hellion Forge". Mint Grove und Forge Merchantman
+- **Synthwave Sunset als zehnter Built-In.** Hot Magenta + Cyan auf Mitternachts-Violett,
-  werden Carla Beleandis als Community-Geste zugeschrieben.
+  80s-Neon-Grid-Vibes für Late-Night-Raids
+- **Author-Credits konsolidiert.** Brand-Themes laufen jetzt unter „Hellion Forge". Mint Grove und
+  Forge Merchantman werden Carla Beleandis als Community-Geste zugeschrieben.
 
-Keine Schema-Bumps, keine User-sichtbaren Funktions- Änderungen außer dass die Frames in Theme-getrieben rendernden
+Keine Schema-Bumps, keine User-sichtbaren Funktions- Änderungen außer dass die Frames in
-Szenen merklich glatter laufen und ein neues Theme im Picker steht.
+Theme-getrieben rendernden Szenen merklich glatter laufen und ein neues Theme im Picker steht.

.github/forge-posts/v1.4.10.md

@@ -0,0 +1,27 @@
+---
+subtitle: Symbol-Picker und Tell-History Fix
+versionsnatur: Feature-Patch + Hotfix
+---
+
+- Symbol-Picker im Chat-Eingang: ein kleiner Smile-Button links neben dem Kanal-Indikator öffnet ein
+  Popup mit zwei Tabs. Der erste listet alle 161 FFXIV-PUA-Glyphen (Dalamuds SeIconChar); der zweite
+  trägt 97 verifizierte BMP-Symbole (Latin-Marken, Währungen, das ganze griechische Alphabet,
+  Geometrie, Spielkarten, Noten) — jedes davon über `/echo` und `/say` in einer vierrundigen
+  Whitelist-Probe durchgereicht, damit der Channel-Render dem entspricht, was der Picker anzeigt.
+  Klick fügt das Symbol an der Cursor-Position ein, Multi-Insert lässt das Popup offen, eine
+  Recent-Used-Leiste zeigt die letzten sechzehn Picks über beide Tabs. Toggle in Settings → Chat →
+  Nachrichten-Verhalten, Default an.
+- Verlauf in angepinnten Tell-Tabs lädt wieder vollständig: ein versteckter 500-Zeilen-Scan-Cap in
+  PreloadHistory hat das User-Setting `AutoTellTabsHistoryPreload` überschrieben, wodurch
+  weniger-frequente Tell-Partner ihren Backlog verloren haben sobald die Scan-Schicht mit anderen
+  Chat-Partnern voll lief. Cap ist raus, der Index auf `(Receiver, Date)` hält die Query schnell.
+- Slash-Command-Teardown: /hellion, /hellionView, /hellionDebugger (und im Debug-Build
+  /hellionSeString) sind als private Felder gecached. Plugin-Dispose detached die echte
+  Registrierung, statt mit identischen Args neu zu registrieren — schließt eine latente
+  Wartungs-Falle aus v1.4.9.
+- v1.4.x-Polish-Sweep endet hier. Der ImGuiListClipper-Refactor von der v1.4.10-Reserve-Liste wurde
+  gecancelt, nachdem der Cross- Plattform-Smoke gezeigt hat dass das Scroll-Gummi ein Wine/Linux-
+  Quirk ist — Windows-User haben es nie gesehen. Spike dafür kommt in einem späteren Patch. Nächster
+  Major-Cycle ist v1.5.0 mit der DI-Container-Adoption (`Microsoft.Extensions.Hosting` +
+  `ILogger<T>`) nach dem Lightless-Vorbild.
+- Migration v17 unverändert: kein Schema-Bump, kein Config-Migrations-Aufwand.

.github/forge-posts/v1.4.2.md

@@ -5,25 +5,27 @@ versionsnatur: Performance-Patch
 
 **Hellion Chat 1.4.2 — ChatLog Frame-Hot-Path**
 
-Dritter Sub-Patch der v1.4.x Polish-Sweep-Serie. Drei Per-Frame-Allokations-Quellen aus dem ChatLogWindow-Render- Pfad
+Dritter Sub-Patch der v1.4.x Polish-Sweep-Serie. Drei Per-Frame-Allokations-Quellen aus dem
-und der Settings-StatusBar eliminiert.
+ChatLogWindow-Render- Pfad und der Settings-StatusBar eliminiert.
 
-- **Card-Mode-Border-Loop entlastet.** DrawMessages hebt Theme, DrawList, Window-Left, Window-Right und die ABGR-
+- **Card-Mode-Border-Loop entlastet.** DrawMessages hebt Theme, DrawList, Window-Left, Window-Right
-  Border-Color einmalig vor den Per-Message-Loop. Bei 100 sichtbaren Messages sind das gut 500 redundante P/Invokes und
+  und die ABGR- Border-Color einmalig vor den Per-Message-Loop. Bei 100 sichtbaren Messages sind das
-  Property-Reads, die der Hoist eliminiert. Pop-Out- Heavy-Setups (mehrere parallele Chat-Windows) profitieren
+  gut 500 redundante P/Invokes und Property-Reads, die der Hoist eliminiert. Pop-Out- Heavy-Setups
-  proportional, weil der Hoist pro DrawMessages-Call greift, also pro Window
+  (mehrere parallele Chat-Windows) profitieren proportional, weil der Hoist pro DrawMessages-Call
-- **Auto-Tell Tab-Tint und Icon gecached.** Die Hash-Color- Berechnung für Auto-Tell-Tabs lief pro Tab pro Frame, mit
+  greift, also pro Window
-  zwei String-Allokationen pro Tab (eine für Tint-Hash, eine für Icon-Hash). Der neue TabTintCache liest pre-computed
+- **Auto-Tell Tab-Tint und Icon gecached.** Die Hash-Color- Berechnung für Auto-Tell-Tabs lief pro
-  Werte aus dem Tab und rechnet nur neu wenn das Tell-Target drifted. Beide Caches haben separate Validation-Keys, also
+  Tab pro Frame, mit zwei String-Allokationen pro Tab (eine für Tint-Hash, eine für Icon-Hash). Der
-  keine Cross-Invalidation zwischen Tint- und Icon-Pfad. AutoTellTabTint selbst bleibt pure Hash-Helper, weiterhin ohne
+  neue TabTintCache liest pre-computed Werte aus dem Tab und rechnet nur neu wenn das Tell-Target
-  Tab-Awareness
+  drifted. Beide Caches haben separate Validation-Keys, also keine Cross-Invalidation zwischen Tint-
-- **StatusBar-Aggregation hinter Cache-Gate.** Die Status- Leiste am unteren Window-Rand summiert die Tab-Message-
+  und Icon-Pfad. AutoTellTabTint selbst bleibt pure Hash-Helper, weiterhin ohne Tab-Awareness
-  Counts und zählt die Auto-Tell-Tabs pro Frame. Der Cache- Gate (1 Sekunde) lag bisher hinter den LINQ-Pfaden, also
+- **StatusBar-Aggregation hinter Cache-Gate.** Die Status- Leiste am unteren Window-Rand summiert
-  liefen Sum und Count trotzdem pro Frame. Jetzt vor dem Gate, plus die LINQ-Pfade durch eine Single-Pass-Foreach
+  die Tab-Message- Counts und zählt die Auto-Tell-Tabs pro Frame. Der Cache- Gate (1 Sekunde) lag
-  ersetzt. Die Aggregation läuft auf etwa 1 % der Frames
+  bisher hinter den LINQ-Pfaden, also liefen Sum und Count trotzdem pro Frame. Jetzt vor dem Gate,
+  plus die LINQ-Pfade durch eine Single-Pass-Foreach ersetzt. Die Aggregation läuft auf etwa 1 % der
+  Frames
 
-Realistische Frame-Time-Recovery: 2-5 % in typischen Szenen, Pop-Out-Heavy-Setups potenziell mehr durch die Card-Border-
+Realistische Frame-Time-Recovery: 2-5 % in typischen Szenen, Pop-Out-Heavy-Setups potenziell mehr
-Multiplikation pro Window.
+durch die Card-Border- Multiplikation pro Window.
 
-Keine Schema-Bumps, keine User-sichtbaren Funktions- Änderungen außer dass die Frames im Chat-Log und in der
+Keine Schema-Bumps, keine User-sichtbaren Funktions- Änderungen außer dass die Frames im Chat-Log
-Settings-Statusleiste merklich glatter laufen.
+und in der Settings-Statusleiste merklich glatter laufen.

.github/forge-posts/v1.4.3.md

@@ -5,25 +5,29 @@ versionsnatur: Architecture-Refactor
 
 **Hellion Chat 1.4.3 — Plugin-Load Async-Init + Repo-Cutover**
 
-Vierter Sub-Patch der v1.4.x Polish-Sweep-Serie. Plugin- Lifecycle auf Dalamud's `IAsyncDalamudPlugin`-API migriert und
+Vierter Sub-Patch der v1.4.x Polish-Sweep-Serie. Plugin- Lifecycle auf Dalamud's
-das Custom-Repo zieht von GitHub auf Gitea um.
+`IAsyncDalamudPlugin`-API migriert und das Custom-Repo zieht von GitHub auf Gitea um.
 
-- **Async-Plugin-Architektur.** Konstruktor übernimmt nur noch die Bootstrap-Essentials (Config-Load, Language-Init,
+- **Async-Plugin-Architektur.** Konstruktor übernimmt nur noch die Bootstrap-Essentials
-  Conflict-Detection). Migrationen, Service-Allokationen, Window-Konstruktion und Hook-Subscription wandern in
+  (Config-Load, Language-Init, Conflict-Detection). Migrationen, Service-Allokationen,
-  LoadAsync, sodass Dalamud die UI während der schweren Arbeit responsive halten kann. Per-Line-CaptureFailure in
+  Window-Konstruktion und Hook-Subscription wandern in LoadAsync, sodass Dalamud die UI während der
-  DisposeAsync mirrort LightlessSync's Pattern, plus Idempotency-Guard gegen Reload-Races
+  schweren Arbeit responsive halten kann. Per-Line-CaptureFailure in DisposeAsync mirrort
-- **Custom-Repo-URL umgezogen auf Gitea.** Bestehende Tester müssen einmalig in XIVLauncher die Custom-Repo-URL auf
+  LightlessSync's Pattern, plus Idempotency-Guard gegen Reload-Races
-  `https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json` umstellen, dann
+- **Custom-Repo-URL umgezogen auf Gitea.** Bestehende Tester müssen einmalig in XIVLauncher die
-  XIVLauncher neu starten. Das alte GitHub-Repo bleibt als eingefrorener v1.4.2-Snapshot stehen und wird nicht mehr
+  Custom-Repo-URL auf
-  aktualisiert
+  `https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json`
-- **Schema-Gate statt Migrations-Kette.** Die v9 → v16 Migrationen sind raus, ersetzt durch einen harten Schema-Check in
+  umstellen, dann XIVLauncher neu starten. Das alte GitHub-Repo bleibt als eingefrorener
-  Phase 1. Configs auf Schema v16+ laden direkt; ältere Configs (vor v1.2.1) bekommen jetzt eine klare „install v1.4.2
+  v1.4.2-Snapshot stehen und wird nicht mehr aktualisiert
-  first"-Fehlermeldung statt eines impliziten Migrations-Pfads
+- **Schema-Gate statt Migrations-Kette.** Die v9 → v16 Migrationen sind raus, ersetzt durch einen
-- **AutoTranslate-Cache läuft im Hintergrund.** Der Cache füllt sich jetzt fire-and-forget statt blockierend im
+  harten Schema-Check in Phase 1. Configs auf Schema v16+ laden direkt; ältere Configs (vor v1.2.1)
-  Plugin-Load. Trade-off: die erste Auto-Translate-Nutzung einer Session kann einen kurzen Hitch haben, dafür kein
+  bekommen jetzt eine klare „install v1.4.2 first"-Fehlermeldung statt eines impliziten
-  300-ms-Block beim Plugin-Start
+  Migrations-Pfads
-- **Plugin-Load-Zeit ehrlich.** Median 3,7 s über fünf Reloads, vergleichbar mit v1.4.2. Der Async-Refactor ist
+- **AutoTranslate-Cache läuft im Hintergrund.** Der Cache füllt sich jetzt fire-and-forget statt
-  Foundation für künftige Lazy-Init-Optimierungen (v1.4.4) und Code-Architektur-Hygiene, kein direkter User-spürbarer
+  blockierend im Plugin-Load. Trade-off: die erste Auto-Translate-Nutzung einer Session kann einen
-  Speed-Win in dieser Release
+  kurzen Hitch haben, dafür kein 300-ms-Block beim Plugin-Start
+- **Plugin-Load-Zeit ehrlich.** Median 3,7 s über fünf Reloads, vergleichbar mit v1.4.2. Der
+  Async-Refactor ist Foundation für künftige Lazy-Init-Optimierungen (v1.4.4) und
+  Code-Architektur-Hygiene, kein direkter User-spürbarer Speed-Win in dieser Release
 
-Keine User-sichtbaren Funktions-Änderungen außer dem Repo-URL-Update. Settings, Themes und Tabs bleiben unangetastet.
+Keine User-sichtbaren Funktions-Änderungen außer dem Repo-URL-Update. Settings, Themes und Tabs
+bleiben unangetastet.

.github/forge-posts/v1.4.4.md

@@ -0,0 +1,37 @@
+---
+subtitle: Threading- und IPC-Sicherheits-Politur
+versionsnatur: Wartung und Robustheit
+---
+
+**Hellion Chat 1.4.4 — Threading- und IPC-Sicherheits-Politur**
+
+Fünfter Sub-Patch der v1.4.x Polish-Sweep-Serie. Threading-Annahmen werden explizit pro Methode
+dokumentiert, ein Hot-Path-Lock im Auto-Tell-Tab-Counter fällt weg, IPC-Cleanup wird sichtbar wenn
+er fehlschlägt und der Privacy-Filter spricht jetzt bei unbekannten ChatTypes.
+
+- **AutoTellTabsService Hot-Path-Lock entfernt.** `ActiveTempTabCount` hat bisher pro Render-Frame
+  ein LINQ-Count unter einem Lock gemacht. Jetzt läuft das über einen Interlocked-Counter der
+  parallel zur Tabs-Liste mitgeführt wird, inklusive Resync-Hook für den Snapshot-Restore-Pfad in
+  `SaveConfig`. Plus Pure-Helper-Test-Mirror in der Build-Suite damit die Atomicity-Semantik nicht
+  versehentlich wegrefactored wird
+- **HonorificService selbst-dokumentierende Threading-Banner.** Statt eines Block-Comments am
+  Klassen-Ende hat jede IPC-Callback-Methode jetzt einen 1-Zeilen-Banner darüber, der den
+  Thread-Kontext direkt am Call-Site benennt (framework only, framework scheduled, any). Mehr Hilfe
+  für künftige Reviews als ein abstraktes Threading-Kapitel
+- **Unsubscribe-Failure ist jetzt sichtbar.** `TryUnsubscribe` hat ein Honorific-Unsubscribe-Failure
+  bisher als Debug geloggt, was bei Standard-Loglevel verschluckt wurde. Eine geleakte Subscription
+  kann den Service über Plugin-Reloads hinweg leben lassen, also läuft der Log jetzt auf Warning
+- **AutoTranslate-Warmup blockiert den Plugin-Unload nicht mehr.** Der Cache-Warmup-Thread war ohne
+  `IsBackground=true` unterwegs, was den Unload um 100-300 ms verzögern konnte. Pattern-Match zu
+  MessageManager und RetentionSweep (beide seit v1.4.0)
+- **Privacy-Filter loggt unbekannte ChatTypes.** Wenn FFXIV durch einen Patch einen neuen ChatType
+  einführt der weder in der Whitelist noch in den Defaults steht, wird er bisher silent durch den
+  Failsafe geleitet. Jetzt loggt der Filter einmalig pro Runtime eine Warning mit dem Type und dem
+  Failsafe-Wert. Dedup über ein NonSerialized-HashSet, also kein Log-Spam
+- **Default-Flip für neue Installationen.** `PrivacyPersistUnknownChannels` startet bei neuen
+  Configs jetzt auf `true`, damit ein Patch-bedingt neuer ChatType nicht stillschweigend gedroppt
+  wird bevor der User entscheiden kann. Bestehende Configs behalten ihre Wahl, weil der Deserializer
+  den Initializer überschreibt. Keine Migration, kein Schema-Bump
+
+Keine User-sichtbaren Funktions-Änderungen außer dem Default-Flip für neue Installationen. Settings,
+Themes, Tabs und das Privacy-Verhalten für Bestand bleiben unangetastet.

.github/forge-posts/v1.4.5.md

@@ -0,0 +1,31 @@
+---
+subtitle: UX und Robustheit
+versionsnatur: UX-Polish-Cycle
+---
+
+**Hellion Chat 1.4.5 — UX und Robustheit**
+
+Sechster Sub-Patch der v1.4.x Polish-Sweep-Serie. Render-Fehler im Chat-Fenster werden jetzt
+sichtbar, der First-Run-Wizard hat eine explizite Cancel-Schaltfläche, der Eingabe-Verlauf bleibt
+nicht mehr über Plugin-Reloads hinweg liegen, und die Statusleiste klippt in schmalen Fenstern nicht
+mehr.
+
+- **Fehler-Benachrichtigung im Chat-Fenster.** Wenn ein Render-Fehler in `DrawChatLog` auftritt,
+  zeigt das Plugin jetzt eine einmalige Warning-Notification mit Verweis aufs `/xllog`, statt das
+  Fenster stillschweigend leer zu lassen. Der Stack-Trace selbst geht weiter via `Plugin.Log.Error`
+  ins Logfile. De-Dup über Per-Session-Bool, damit ein wiederkehrender Fehler die Notification-Stack
+  nicht pro Frame neu vollkippt
+- **First-Run-Wizard trennt Accept und Close.** `OnClose` setzt nicht mehr stillschweigend
+  `FirstRunCompleted=true`, also lässt das X den Wizard schwebend zurück und er kommt beim nächsten
+  Plugin-Reload wieder. Eine neue „Später — Defaults behalten"-Schaltfläche im Footer ist der
+  explizite Weg, ohne Profil-Auswahl rauszukommen. Strings bilingual EN+DE plus Tooltip
+- **Eingabe-Verlauf wird beim Plugin-Reload geleert.** `InputHistoryService.Reset` hängt jetzt in
+  `Plugin.DisposeAsync` neben den anderen Pure-Memory-Cleanups, damit der statische Zustand aus der
+  vorigen Session den nächsten Load nicht mehr erbt
+- **Statusleiste klippt nicht mehr.** Der rechtsbündige Versions-Slot wird ausgeblendet wenn die
+  Chat-Window-Breite abzüglich Versions-Text unter 200 px fällt — vorher überlappte er die vier
+  linken Slots. Ab ausreichender Breite taucht der Slot wieder auf
+- **Intern:** `FontManager` fällt auf System-Font zurück wenn die eingebettete Hellion-Font-Resource
+  fehlt (Broken-csproj-Pfad, nie ein Produktions-Build), plus expliziter
+  Session-Only-Invariant-Kommentar für Auto-Tell-Tabs in `Plugin.cs:167-168` mit einem
+  TempTabCounter-Init-Pin in der Build-Suite. Kein Schema-Bump, keine Migration

.github/forge-posts/v1.4.6.md

@@ -0,0 +1,36 @@
+---
+subtitle: Code Hygiene and Refactor
+versionsnatur: Maintenance-Cycle
+---
+
+Wartungs-Patch ohne User-sichtbare Änderungen. Saubere Code-Basis als Vorbereitung auf das
+v1.4.7-Backlog-Cleanup, plus zwei geerbte Bugfixes aus dem ChatTwo-Upstream `f35b7d3`.
+
+- **preflight.sh härter**: csharpier-Reflow-Check (Block E) und markdownlint (Block F) laufen jetzt
+  im Pre-Push-Gate, statt erst beim Pre-Merge-Review aufzufallen.
+- **FontManager-Fallback robuster**: Atlas-Toolkit-Throws aus kaputten Font-Configs (IO,
+  InvalidOperation, ArgumentException) fallen jetzt zuverlässig auf NotoSansCjkRegular, statt den
+  Atlas-Build mitzureißen. Der Exception-Typ wird im Log mitgegeben für die Diagnose.
+- **URL-Validation beim Plugin-Load**: BrandingLinks (5 URLs) und IntegrationLinks (2 URLs) werden
+  via `[ModuleInitializer]` geprüft. Ein Tippfehler bei einer künftigen URL-Rotation wirft jetzt
+  sofort beim Plugin-Load, statt still beim Klick zu scheitern.
+- **Cherry-Pick aus ChatTwo `f35b7d3`** — Memory-Leak in `Chat.SetChannel`: der native `Utf8String`
+  wird jetzt auch dann freigegeben, wenn der Linkshell-Check den Channel ablehnt (vorher gefangen im
+  early-return).
+- **Cherry-Pick aus ChatTwo `f35b7d3`** — `Tab.Clone()` Deep-cloned jetzt `UsedChannel` und
+  `TellTarget`. Vorher Reference-Share-Bug: PopOut- und Temp-Tabs mutierten sich gegenseitig.
+- **Aktive-Tab-Underline pixel-perfect bei DPI-Scaling**: Die Underline-Pill skaliert jetzt mit
+  `ImGuiHelpers.GlobalScale` und rundet die DrawList-Koordinaten auf physische Pixel. Kein
+  Sub-Pixel-Blur mehr auf 125/150%-Setups.
+- **IconButton-Width-Fix**: der manuelle `width - 2 * CellPadding.X`-Subtract verlor den HUD-Scale
+  (Padding skaliert, der raw int nicht). Gemessene Breite läuft jetzt unverändert durch.
+- **Test-Isolation für MessageStore**: `Dalamud.Utility.Util`-Surface (IsWine, OpenLink) läuft jetzt
+  durch eine `IPlatformUtil`-Indirektion. MessageStores `IsWine`-Probe ist isoliert testbar in der
+  Build-Suite. Plus: HellionStyle-ChildBgAlpha als Pure-Helper extrahiert, Plugin.SaveConfig kopiert
+  nur Session-Tabs statt der ganzen Tab-Liste, SettingsOverview cached den DrawList einmal pro
+  Frame.
+- **Built-in-Theme-Roster**: Crystal Nocturne (Royal Sapphire + Electric Magenta auf Obsidian, von
+  CRYSTALLITE) ersetzt Moonlit Bloom. User mit Moonlit Bloom als aktivem Theme fallen beim ersten
+  Plugin-Load auf Hellion Arctic zurück.
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).

.github/forge-posts/v1.4.7.md

@@ -0,0 +1,33 @@
+---
+subtitle: Backlog Cleanup and Mid-Features
+versionsnatur: Mid-Feature-Patch
+---
+
+Achter Sub-Patch der v1.4.x Polish-Sweep-Serie. Erstes User-sichtbares Feature-Bundle seit v1.4.5 —
+angepinnte Tell-Tabs die Relog überleben, opt-in Honorific-Glow, plus eine konfigurierbare Sidebar.
+
+- **TempTell anpinnen**: Rechtsklick auf einen TempTell-Tab in der Sidebar → „Tab anpinnen".
+  Angepinnte Tabs überleben Plugin-Reload und Char-Logout, behalten ihre Konversations-Historie
+  (wird beim Rehydrate aus dem MessageStore nachgeladen) und bleiben an die gleiche /tell-Person
+  gebunden. Hard-Cap 5 angepinnte Tabs in einem separaten Pool — die normalen Auto-Tell-Tabs (15er
+  Cap) sind davon entkoppelt, Gesamt-Decke 20. Die Sidebar gruppiert angepinnte Tabs in einer
+  eigenen „Angepinnt"-Sektion mit eigenem Trenner.
+- **Honorific Glow-Outline**: rendert jetzt eine 8-Richtungs-DrawList-Outline wenn der
+  Honorific-Titel eine Glow-Farbe trägt. Opt-in via **Settings → Integrationen → Glow-Outline
+  rendern (Honorific)** (Default OFF). Gradient (Color3 / GradientColourSet / Wave / Pulse) wird
+  geparst und im DTO weitergereicht, rendert aktuell aber statisch als Primärfarbe — der volle
+  Gradient-Port (Animations-Algorithmus + Pride-Palette) kommt als eigener Cycle nach.
+- **Sidebar-Breite konfigurierbar**: in **Theme & Layout** ein Slider 44–160 px. Default bleibt 44
+  px (icon-only), aber breiter machen damit Sektion-Header wie „Aktive Tells (3)" oder „Angepinnt
+  (2)" nicht abgeschnitten werden.
+- **Settings-Save Channel-Fix**: ein Save mit aktivem Party- oder Linkshell-Tab konnte den
+  Chat-Input zurück auf `/tell <angepinnte Person>` springen lassen. `Configuration.UpdateFrom`
+  bewahrt jetzt den Runtime-`CurrentChannel` über den persistent-Tab-Merge hinweg, und `TabSwitched`
+  deep-cloned den Seed-Channel statt sich den `UsedChannel` mit dem vorigen Tab zu teilen.
+- **Internal**: `IPluginLogProxy`-Indirektion vor Dalamud's `IPluginLog` über alle ~91
+  `Plugin.Log`-Call-Sites. Damit läuft `MessageStore.Migrate0` voll-isoliert in xUnit (F12.1-Lücke
+  aus v1.4.6 geschlossen). Plus: TempTab-Counter als abgeleitete Property statt gecachtes
+  Interlocked-Feld — die neuen Pin/Unpin-Übergänge sind Cold-Path, kein Lock-Free-Vorteil mehr.
+  Migration v16 → v17 ist rein additiv (neues `Tab.IsPinned`-Bool, Default false).
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).

.github/forge-posts/v1.4.8.md

@@ -0,0 +1,19 @@
+---
+subtitle: Hook-Layer und Polish-Quick-Wins
+versionsnatur: Polish-Patch
+---
+
+- DbViewer Volltext-Suche: optionaler FTS5-Index über die ganze Chat-Historie. Wird beim ersten
+  v1.4.8-Start asynchron im Hintergrund gebaut, Progress als Toast. Lokale Page-Suche bleibt
+  Default. Such-Eingaben werden als exakte Wortfolge gematcht; mehrere Wörter werden nur gefunden,
+  wenn sie zusammen und in der Reihenfolge stehen. Wer rohe FTS5-MATCH-Syntax nutzen will, setzt
+  eigene Anführungszeichen um den Suchbegriff.
+- Custom-Theme-Files laden sich beim Speichern automatisch neu, wenn das Theme aktiv ist. Kein
+  Picker-Klick mehr nötig.
+- Retention-Sweep blockt nicht mehr den Framework-Thread. Der Mini-Hitch von ~194ms pro Sweep ist
+  weg.
+- Statusleiste rendert sauber bei Windows-Skalierung über 100%.
+- Receive-Suppressed-Tells-Routing wurde in diesem Cycle untersucht und auf v1.5.x verschoben: wenn
+  andere Plugins Tells via CheckMessageHandled unterdrücken, überspringt FFXIVs Chat-Pipeline den
+  RaptureLogModule-Resolver und HellionChats Tab-Routing verliert den Tell-Partner. Der Fix liegt
+  architektonisch neben dem geplanten Ad-Block-Hook-Layer und kommt dort mit.

.github/forge-posts/v1.4.9.md

@@ -0,0 +1,28 @@
+---
+subtitle: Plugin-Load Render Polish
+versionsnatur: Performance-Patch
+---
+
+- First-Frame-HITCH unter 100 ms: der erste Render-Frame des Plugins liegt jetzt bei ~76 ms Median
+  (vorher ~127 ms), die Dalamud-Warnung „UiBuilder(Hellion Chat) > 100ms" beim Plugin-Start ist
+  damit weg. Erreicht durch das Verlagern von sechs nicht-essentiellen Render- Sektionen
+  (Statusleiste, Kanalname-Chunks, Fenster-Bounds-Check, Hinweis-Banner, Autocomplete,
+  Input-Preview) auf den zweiten Frame. Bei 60 fps sieht man die deferred-Sektionen ~17 ms später,
+  was im Atlas-Build-Fenster nach einem Reload unsichtbar bleibt.
+- Slash-Commands zentral registriert: /hellion, /hellionView, /hellionSeString und /hellionDebugger
+  werden jetzt im Plugin-Load zentral registriert statt erst beim ersten Öffnen ihres Ziel-Fensters.
+  Heißt: die Befehle funktionieren ab dem ersten Tick, auch wenn das jeweilige Fenster nie geöffnet
+  wurde. Der „Einstellungen"-Button im Plugin-Manager hängt am selben Pfad.
+- Plugin-Load-Diagnose-Logs als Tripwire: die Profiling-Logs für MessageStore.Connect,
+  MessageStore.Migrate, FilterAllTabs und den Auto-Translate-Warmup bleiben auf Information-Level
+  eingeschaltet. Falls eine zukünftige Änderung die Lade-Zeit wieder über 100 ms drückt, taucht der
+  Mehrverbrauch direkt im /xllog auf, ohne dass jemand erst den Debug-Filter einschalten muss.
+- ChatTwo-IPC-Kompatibilitäts-Layer: HellionChat spiegelt jetzt die komplette ChatTwo-IPC-Surface
+  (`GetChatInputState`, `ChatInputStateChanged`, `Register`, `Unregister`, `Available`, `Invoke`)
+  zusätzlich zu unseren eigenen `HellionChat.*`-Gates unter dem `ChatTwo.*`-Namensraum. Drittseitige
+  Integrationen die nur auf ChatTwo's IPC reagieren, etwa die Kontextmenü-Hooks von Artisan und
+  AllaganTools, funktionieren damit weiter ohne Code-Änderung auf ihrer Seite. Die
+  Conflict-Detection blockiert das parallele Laden von ChatTwo, daher kein Namensraum-Konflikt im
+  Live-Betrieb.
+- Migration v17 unverändert: kein Schema-Bump, kein Config-Migrations- Aufwand. Nach dem Update
+  läuft das Plugin gegen die bestehende v17-Datenbank weiter.

.github/forge-posts/v1.5.0.md

@@ -0,0 +1,28 @@
+---
+subtitle: DI Foundation und Service-Refactor
+versionsnatur: Architektur-Cycle
+---
+
+- **Architektur-Umbau ohne User-spürbare Verhaltens-Änderung:** der Plugin-Bootstrap wechselt auf
+  einen Generic-Host DI-Container (`Microsoft.Extensions.Hosting` + `IServiceCollection`) nach dem
+  Lightless-Sync-Muster. 18 Service-Klassen wandern von einem statischen `Plugin.LogProxy`-Locator
+  auf typisierte `ILogger<T>`-Constructor-Injection. `DalamudLogger` brückt
+  `Microsoft.Extensions.Logging` über auf Dalamuds `IPluginLog` — im xllog erscheinen jetzt
+  Service-spezifische Spalten wie `[ MessageManager]` und `[Honori...ervice]`.
+- **Plugin.LogProxy bleibt für die acht Buckets erhalten,** die Constructor-Injection nicht
+  erreicht: Static-Helper (EmoteCache, AutoTranslate, MemoryUtil, WrapperUtil), Dalamud-Reflektion
+  (Configuration), Data-Class mit Massen-Instanziierung (Message) und Instanz-Klassen die nur aus
+  Static-Methods loggen (FontManager, eine GameFunctions-Stelle).
+- **Performance bestätigt durch Cross-Plugin-Baseline:** HellionChat First-Frame-HITCH 77 ms Median,
+  Chat 2 v1.40.2 74 ms Median — kein DI-Penalty gegenüber dem Upstream-Fork-Origin. Lightless und
+  XIVInstantMessenger liegen bei ~7 ms weil sie ihren FontAtlas-Build deferren; das wird das
+  v1.5.1-Item.
+- **User-sichtbarer Bug-Fix nebenbei:** Slash-Command-Einfügen in das Chat-Eingabefeld (Friend-List
+  "/tell"-Action plus Plugin-Inserts von Artisan, AllaganTools und ähnlichen) ersetzt jetzt den
+  vorhandenen Input, statt anzukonkatenieren. Cherry-Pick aus ChatTwo upstream `ee7768ac` mit
+  Namespace-Anpassung.
+- **Foundation für die Plugin-Integrations-Wave:** v1.5.7-11 (Context-Menu, NotificationMaster,
+  Moodles, ExtraChat, XIVIM Quick-DM) werden ab jetzt strukturell handhabbar — neue Services sind
+  ein `services.AddSingleton<T>` plus ein paar Factory-Lambda- Zeilen, kein Plugin.cs-Anflanschen
+  mehr.
+- Migration v17 unverändert: kein Schema-Bump, kein Config-Migrations-Aufwand.

.github/forge-posts/v1.5.1.md

@@ -0,0 +1,21 @@
+---
+subtitle: "FontAtlas Refactor and Forge Signature"
+versionsnatur: "Architecture + Closure + Branding"
+---
+
+- **FontManager-Refactor.** Der FontAtlas baut jetzt nur noch einmal pro Plugin-Load statt vier- bis
+  fünfmal. Weniger CPU- und GPU-Druck in den ersten Sekunden nach einem Reload, weniger
+  Atlas-Texture-Memory-Churn. Die acht Font-Einstellungen können live über den neuen
+  `RebuildDelegateFonts`-Pfad geändert werden, ohne dass das Plugin neu geladen werden muss.
+- **Hellion Forge Signatur.** Das Plugin trägt jetzt eine ASCII-Fuchs-Signatur. Im `/xllog`
+  erscheint beim Plugin-Load ein kleiner Fuchs-Kopf, im First-Run-Wizard und unter Settings →
+  Information taucht eine eingeklappte „Hellion Forge"-Sektion mit dem vollen Fuchs auf. Gezeichnet
+  von Julia Moon, fest in der Plugin-DLL eingebettet.
+- **Honorific-Integration bleibt unverändert.** Der ursprünglich geplante Gradient-Render-Pfad
+  (Wave/Pulse-Animation) entfällt. Honorific 3.2 stellt keine IPC für den fertig gerenderten
+  Gradient-Frame zur Verfügung, und ein eigener Port der Pride-Palette wurde verworfen. Die
+  Honorific-Anzeige bleibt wie in v1.4.7 etabliert (statischer Glow plus Title).
+- **Hinweis zum HITCH-Win.** Der ursprünglich angepeilte 10×-First-Frame-Sprung
+  (Lightless/XIVIM-Pattern, ~7 ms statt ~75 ms) ist in diesem Cycle nicht eingetreten. Die
+  Render-Kosten liegen im UiBuilder-First-Frame-Pfad, nicht im FontAtlas-Build. Investigation kommt
+  als eigener späterer Cycle. Keine User-sichtbare Disruption, keine Migration.

.github/forge-posts/v1.5.2.md

@@ -0,0 +1,10 @@
+---
+subtitle: "First-Run Wizard — neu in 4 Steps, Roleplay-Profil neu"
+versionsnatur: "UX-Patch"
+---
+- **Vier Steps statt Single-Page.** Der First-Run-Wizard öffnet jetzt in vier Bühnen: Willkommen → Privacy-Profil → Power-Settings → Fertig. Pagination-Dots in Forge-Bronze oben rechts, Back/Skip/Next im Footer. Standardgröße 720×480 (Min 600×400) und der Fuchs-Banner sitzt als zugeklappter TreeNode oben in Step 1, damit die Einleitung im Fokus bleibt.
+- **Neues Privacy-Profil „Roleplay".** Datensparsamkeit plus Sagen und beide Emote-Typen für Story-Logs. Schreien und Rufen bleiben außen vor, Public-Distance-Lärm von Fremden ist kein Story-Inhalt. Aufbewahrung: Sagen 30 Tage, Emotes 90 Tage. Privacy-Picker wird zum 2×2-Grid, Casual bleibt mit ★-Marker als Empfehlung.
+- **Power-Settings sichtbar.** Bislang versteckte Defaults bekommen eine eigene Bühne: Vorherige Session laden, Filter inkl. alter Messages, N Tell-Messages vorladen, Compact-Density, Prettier-Timestamps und Theme-Picker für die 10 Built-in-Themes. Keine neuen Settings, nur das Bestehende sauber sichtbar.
+- **Staged-Commit und Test-Hint auf der Fertig-Bühne.** Auswahl wird erst beim Klick auf „Fertig ✓" geschrieben. „Später entscheiden" oder X-Close lässt die bestehende Config unangetastet, ein nicht angefasster Step behält die alten Werte. Direkt darunter sichtbar: „Tipp /tell <Spielername>", plus die aktuelle Preload-Zahl aus Step 3 als Hinweis auf den Auto-Tell-Tab-Spawn.
+- **Bestehende User sehen den neuen Wizard einmal.** Wer schon v1.5.1 hatte, bekommt den Multi-Step-Flow beim ersten v1.5.2-Boot aufgepoppt. Neues Config-Feld `WizardLastShownVersion` triggert das einmalig pro Wizard-Rework; Skip oder Finish reicht und danach öffnet er nicht mehr automatisch.
+- **Unter der Haube.** Pure-Helper-Tests für alle vier Profile-Sets in der Build-Suite (zwölf neue Facts), plus ein WizardStateSmokeStep für `/xlperf`. Migration v17 bleibt, nur ein optionales Config-Feld kommt dazu.

.github/release-footer.md

@@ -2,26 +2,28 @@
 
 ## How to install
 
-This release is distributed via the HellionChat custom repository, not the Dalamud main plugin repo. To install:
+This release is distributed via the HellionChat custom repository, not the Dalamud main plugin repo.
+To install:
 
 1. In XIVLauncher: **Settings → Experimental → Custom Plugin Repositories**
-2. Add the URL: `https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json`
+2. Add the URL:
+   `https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json`
 3. Enable, save, then `/xlplugins` → search **Hellion Chat** → install
 
 ## Project documents
 
-- [README](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/README.md) — features,
+- [README](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/README.md)
-  architecture, build
+  — features, architecture, build
-- [Privacy notice](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/PRIVACY.md) — what
+- [Privacy notice](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/PRIVACY.md)
-  the plugin stores and sends
+  — what the plugin stores and sends
 - [Third-party notices](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/docs/THIRD_PARTY_NOTICES.md)
   — dependencies and licences
-- [Security policy](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/SECURITY.md) —
+- [Security policy](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/SECURITY.md)
-  vulnerability reporting
+  — vulnerability reporting
-- [Support](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/SUPPORT.md) — bug reports,
+- [Support](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/SUPPORT.md)
-  questions, contact paths
+  — bug reports, questions, contact paths
 
 ## Licence
 
-[EUPL-1.2](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/LICENSE). Based on
+[EUPL-1.2](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/LICENSE).
-[Chat 2](https://github.com/Infiziert90/ChatTwo) by Infi and Anna, also EUPL-1.2.
+Based on [Chat 2](https://github.com/Infiziert90/ChatTwo) by Infi and Anna, also EUPL-1.2.

.github/workflows/build.yml

@@ -1,53 +0,0 @@
-name: Build
-
-# Verifies that every push to main and every PR still builds against the
-# current Dalamud staging branch. Does not produce release artefacts; the
-# release workflow handles that on tag.
-#
-# Linux runner: gitea.com Cloud Actions provides ubuntu-latest. The plugin
-# csproj targets net10.0-windows, but `dotnet build` cross-compiles on
-# Linux as long as the Dalamud staging assemblies are present at the
-# expected lookup path ($(HOME)/.xlcore/dalamud/Hooks/dev/, which the
-# Dalamud SDK 15 uses on Linux).
-
-on:
-    push:
-        branches: [main]
-    pull_request:
-        branches: [main]
-    workflow_dispatch:
-
-# Minimum permissions for a build-only workflow: read the repo, nothing
-# else. Closes the CodeQL "Workflow does not contain permissions" alert
-# and matches the principle-of-least-privilege the security guide
-# recommends for workflows that don't push or create releases.
-permissions:
-    contents: read
-
-jobs:
-    build:
-        name: Build (Release)
-        runs-on: ubuntu-latest
-        timeout-minutes: 15
-
-        steps:
-            - name: Checkout
-              uses: actions/checkout@v6
-
-            - name: Setup .NET 10
-              uses: actions/setup-dotnet@v5
-              with:
-                  dotnet-version: 10.0.x
-
-            - name: Download Dalamud staging
-              run: |
-                  hooks="$HOME/.xlcore/dalamud/Hooks/dev"
-                  mkdir -p "$hooks"
-                  curl -fsSL https://goatcorp.github.io/dalamud-distrib/stg/latest.zip -o dalamud.zip
-                  unzip -oq dalamud.zip -d "$hooks"
-
-            - name: Restore
-              run: dotnet restore HellionChat/HellionChat.csproj
-
-            - name: Build (Release)
-              run: dotnet build HellionChat/HellionChat.csproj --configuration Release --no-restore

.github/workflows/forge-announce.yml

@@ -1,225 +0,0 @@
-name: Forge Announce
-
-# Triggered when a vX.Y.Z tag is pushed. Reads .github/forge-posts/<tag>.md
-# (Frontmatter + DE bullet body) and the matching English block from
-# HellionChat/HellionChat.yaml, builds a Discord-Webhook embed and posts
-# it to the Hellion Forge #changelog channel.
-#
-# Decoupled from release.yml: a fail here does not block the GitHub
-# release, and a fail there does not block the announce. Spec lives in
-# the Vault under "Hellion Chat Forge-Auto-Announce Spec".
-#
-# Security: the only user-controlled inputs that enter run-steps are the
-# tag name and the frontmatter values from a repo-internal markdown file.
-# Tag name is read via env: (TAG_NAME, $env:TAG_NAME) and validated against
-# ^v\d+\.\d+\.\d+$ before any string interpolation. Frontmatter values are
-# parsed by regex with explicit length caps. No webhook event payload data
-# (issue titles, PR bodies, commit messages, etc.) flows into run-steps.
-
-on:
-    push:
-        tags:
-            - "v*"
-    workflow_dispatch:
-        inputs:
-            tag:
-                description: "Existing tag to (re)post, e.g. v1.1.0"
-                required: true
-                type: string
-
-permissions:
-    contents: read
-
-jobs:
-    announce:
-        name: Post changelog to Hellion Forge
-        runs-on: ubuntu-latest
-        # The DISCORD_FORGE_WEBHOOK secret is set as a repo-level Actions Secret
-        # on Gitea (Settings → Actions → Secrets). Repo-level secrets are in
-        # scope for every job by default, no environment: declaration needed.
-        timeout-minutes: 5
-
-        steps:
-            # On push:tags github.ref points at the tag commit; on workflow_dispatch
-            # the user supplies the tag explicitly. Always check out that tag so
-            # the yaml + forge-posts file are read from the tagged tree, not main.
-            - name: Checkout
-              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-              with:
-                  ref: ${{ github.event.inputs.tag || github.ref }}
-
-            # Build embed-payload as a JSON file on disk. PowerShell-Core (pwsh)
-            # ships pre-installed on ubuntu-latest so we get the same scripting
-            # patterns release.yml uses on windows-latest. Tag is read via env: to
-            # treat it as a string variable rather than inline shell text, and
-            # validated against the semver regex before any interpolation.
-            - name: Build embed payload
-              id: build
-              shell: pwsh
-              env:
-                  TAG_NAME: ${{ github.event.inputs.tag || github.ref_name }}
-              run: |
-                  $tag = $env:TAG_NAME
-                  if ($tag -notmatch '^v\d+\.\d+\.\d+$') {
-                      throw "V1: Refusing to announce non-semver tag: $tag"
-                  }
-                  $version = $tag.Substring(1)
-
-                  # ---------- Forge-Post-Datei lesen ----------
-                  $forgePath = ".github/forge-posts/$tag.md"
-                  if (-not (Test-Path $forgePath)) {
-                      throw "V2: Forge-Post-Datei für $tag fehlt unter .github/forge-posts/. Datei vor dem Tag anlegen, dann Tag re-pushen oder workflow_dispatch."
-                  }
-                  $forgeRaw = Get-Content -Path $forgePath -Raw
-
-                  # Frontmatter (--- … ---) am Datei-Anfang
-                  if ($forgeRaw -notmatch '(?s)\A---\s*\r?\n(.*?)\r?\n---\s*\r?\n(.*)\z') {
-                      throw "V3: Frontmatter (---) fehlt oder ist defekt in $forgePath"
-                  }
-                  $fmText = $matches[1]
-                  $deBody = $matches[2].Trim()
-
-                  $subtitle = $null
-                  $versionsnatur = $null
-                  foreach ($line in ($fmText -split "`r?`n")) {
-                      if ($line -match '^subtitle:\s*"?([^"]*)"?\s*$')      { $subtitle = $matches[1] }
-                      if ($line -match '^versionsnatur:\s*"?([^"]*)"?\s*$') { $versionsnatur = $matches[1] }
-                  }
-                  if ([string]::IsNullOrWhiteSpace($subtitle))      { throw "V3: Frontmatter-Feld 'subtitle' fehlt in $forgePath" }
-                  if ([string]::IsNullOrWhiteSpace($versionsnatur)) { throw "V3: Frontmatter-Feld 'versionsnatur' fehlt in $forgePath" }
-                  if ($subtitle.Length      -gt 60) { throw "V4: Frontmatter-Feld 'subtitle' überschreitet Limit ($($subtitle.Length) Char, max 60)" }
-                  if ($versionsnatur.Length -gt 40) { throw "V4: Frontmatter-Feld 'versionsnatur' überschreitet Limit ($($versionsnatur.Length) Char, max 40)" }
-                  if ([string]::IsNullOrWhiteSpace($deBody)) { throw "V3: DE-Body fehlt in $forgePath" }
-
-                  # ---------- EN-Block aus HellionChat.yaml ziehen ----------
-                  # 1:1 Pattern aus release.yml — gleicher Header-Marker, gleiches
-                  # Trailer-Verhalten. Bei Drift die zwei Workflows synchron halten.
-                  $yamlPath = "HellionChat/HellionChat.yaml"
-                  $raw = Get-Content -Path $yamlPath -Raw
-                  $marker = "changelog: |-"
-                  $idx = $raw.IndexOf($marker)
-                  if ($idx -lt 0) { throw "V5: changelog-Block nicht gefunden in $yamlPath" }
-                  $afterMarker = $raw.Substring($idx + $marker.Length)
-                  $changelogBody = (($afterMarker -split "`r?`n") | ForEach-Object {
-                      if ($_ -match '^  ') { $_.Substring(2) } else { $_ }
-                  }) -join "`n"
-
-                  $header = "**Hellion Chat $version"
-                  $start = $changelogBody.IndexOf($header)
-                  if ($start -lt 0) {
-                      throw "V5: No changelog entry for version $version found in $yamlPath. Update the changelog block before tagging."
-                  }
-                  $rest = $changelogBody.Substring($start)
-                  $nextHdr = $rest.IndexOf("`n`n**Hellion Chat ", 1)
-                  $trailer = $rest.IndexOf("`n`n---")
-                  if ($nextHdr -ge 0 -and ($trailer -lt 0 -or $nextHdr -lt $trailer)) {
-                      $enBlock = $rest.Substring(0, $nextHdr).TrimEnd()
-                  } elseif ($trailer -ge 0) {
-                      $enBlock = $rest.Substring(0, $trailer).TrimEnd()
-                  } else {
-                      $enBlock = $rest.TrimEnd()
-                  }
-
-                  # ---------- Char-Cap-Check (5500 Total auf title + description + footer) ----------
-                  $title = "Hellion Chat $version — $subtitle"
-                  $description = "**Deutsch**`n`n$deBody`n`n**English**`n`n$enBlock"
-                  $footerText = "Hellion Forge · $versionsnatur"
-                  $totalChars = $title.Length + $description.Length + $footerText.Length
-                  if ($totalChars -gt 5500) {
-                      throw "V6: Total char count $totalChars exceeds 5500 limit. Major-Release detected — please post manually via Bot/Multi-Embed (see forge style §8). Forge-Auto-Announce stays off for this tag."
-                  }
-                  Write-Host "Char-Cap OK: $totalChars / 5500"
-
-                  # ---------- Embed-Payload bauen ----------
-                  $payload = [ordered]@{
-                      username = "Forge Herald"
-                      avatar_url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/HellionChat/images/icon.png"
-                      content = "<@&1500489631555260446>"
-                      allowed_mentions = [ordered]@{
-                          parse = @()
-                          roles = @("1500489631555260446")
-                      }
-                      embeds = @(
-                          [ordered]@{
-                              title = $title
-                              url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/tag/$tag"
-                              color = 12730636
-                              description = $description
-                              footer = [ordered]@{ text = $footerText }
-                              timestamp = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ss.fffZ")
-                          }
-                      )
-                  }
-
-                  $payloadJson = $payload | ConvertTo-Json -Depth 8 -Compress
-                  # Ausgabe-Datei ohne trailing newline für sauberes curl --data-binary @-
-                  [System.IO.File]::WriteAllText("$PWD/embed-payload.json", $payloadJson, [System.Text.UTF8Encoding]::new($false))
-
-                  Write-Host "Payload size: $($payloadJson.Length) chars"
-                  Write-Host "Embed title:  $title"
-                  Write-Host "Embed footer: $footerText"
-
-            # POST to the Hellion Forge changelog webhook. curl from PowerShell-Core
-            # so we can pipe the payload via stdin (--data-binary @-) and keep
-            # secrets out of process arg lists. One retry on 5xx, hard fail on 4xx.
-            - name: POST to Hellion Forge webhook
-              shell: pwsh
-              env:
-                  DISCORD_FORGE_WEBHOOK: ${{ secrets.DISCORD_FORGE_WEBHOOK }}
-              run: |
-                  if ([string]::IsNullOrEmpty($env:DISCORD_FORGE_WEBHOOK)) {
-                      throw "V7: DISCORD_FORGE_WEBHOOK secret is empty. Check Settings → Environments → Webhook."
-                  }
-
-                  $payloadFile = "$PWD/embed-payload.json"
-                  if (-not (Test-Path $payloadFile)) {
-                      throw "Embed payload file missing — previous step did not produce embed-payload.json"
-                  }
-
-                  $maxAttempts = 2
-                  $attempt = 0
-                  while ($attempt -lt $maxAttempts) {
-                      $attempt++
-                      Write-Host "POST attempt $attempt of $maxAttempts"
-                      $tmpResp = "$PWD/.webhook-response"
-                      $tmpHeaders = "$PWD/.webhook-headers"
-                      # --silent suppresses progress; --show-error prints errors so
-                      # the workflow log shows what happened. -w prints HTTP status
-                      # to stdout for inspection. -o captures body for diagnosis,
-                      # -D captures headers.
-                      $rawStatus = Get-Content $payloadFile -Raw |
-                          curl --silent --show-error `
-                               --header 'Content-Type: application/json' `
-                               --data-binary '@-' `
-                               -D $tmpHeaders `
-                               -o $tmpResp `
-                               -w '%{http_code}' `
-                               "$env:DISCORD_FORGE_WEBHOOK"
-                      $status = [int]$rawStatus
-                      Write-Host "HTTP status: $status"
-
-                      if ($status -ge 200 -and $status -lt 300) {
-                          Write-Host "Forge announce POST succeeded."
-                          exit 0
-                      }
-
-                      $bodySnippet = ""
-                      if (Test-Path $tmpResp) {
-                          $bodySnippet = (Get-Content $tmpResp -Raw -ErrorAction SilentlyContinue)
-                          if ($bodySnippet.Length -gt 500) { $bodySnippet = $bodySnippet.Substring(0, 500) + " …" }
-                      }
-
-                      if ($status -ge 400 -and $status -lt 500) {
-                          # E2: 4xx is permanent — webhook revoked, channel deleted,
-                          # payload malformed. No retry.
-                          throw "E2: Discord-Webhook returned permanent $status. Body: $bodySnippet"
-                      }
-
-                      # E1: 5xx (or transport-level fail with status 0) — wait + retry once
-                      if ($attempt -lt $maxAttempts) {
-                          Write-Host "Transient $status — sleeping 30s before retry."
-                          Start-Sleep -Seconds 30
-                      } else {
-                          throw "E1: Discord-Webhook returned transient $status after $maxAttempts attempts. Body: $bodySnippet"
-                      }
-                  }

.github/workflows/release.yml

@@ -1,170 +0,0 @@
-name: Release
-
-# Triggered when a vX.Y.Z tag is pushed. Builds the plugin against the
-# current Dalamud staging branch, locates the latest.zip produced by
-# DalamudPackager and attaches it to the matching Gitea Release.
-#
-# User-controlled inputs touched by this workflow:
-#   - the tag name (filtered by on.tags = v*, validated again at runtime
-#     against ^v\d+\.\d+\.\d+$ before being used in any string)
-# All other values are either repo-controlled (paths under
-# HellionChat/bin/Release derived from find / Get-ChildItem) or pinned
-# URLs to goatcorp / gitea. Nothing from a webhook event payload (issue/PR
-# titles, commit messages, etc.) flows into a run-step.
-#
-# Linux runner: gitea.com Cloud Actions only ships ubuntu-latest. The
-# plugin csproj targets net10.0-windows, `dotnet build` cross-compiles on
-# Linux when the Dalamud staging assemblies sit under $(HOME)/.xlcore/...
-
-on:
-    push:
-        tags:
-            - "v*"
-    # Manual recovery trigger. Use when a tag was pushed but the auto-run
-    # was missed or failed: `gh workflow run release.yml -f tag=v0.6.1`.
-    # The tag input is validated against the same semver regex as the
-    # auto-trigger before any string interpolation happens.
-    workflow_dispatch:
-        inputs:
-            tag:
-                description: "Existing tag to (re)release, e.g. v0.6.1"
-                required: true
-                type: string
-
-permissions:
-    contents: write
-
-jobs:
-    release:
-        name: Build and attach release ZIP
-        runs-on: ubuntu-latest
-        timeout-minutes: 20
-
-        steps:
-            # On push:tags, github.ref_name is the tag — checkout default works.
-            # On workflow_dispatch, ref defaults to the branch the action was
-            # invoked from; we need to explicitly check out the tag the user
-            # supplied so the build comes from the tagged commit, not main.
-            - name: Checkout
-              uses: actions/checkout@v6
-              with:
-                  ref: ${{ github.event.inputs.tag || github.ref }}
-
-            - name: Setup .NET 10
-              uses: actions/setup-dotnet@v5
-              with:
-                  dotnet-version: 10.0.x
-
-            - name: Download Dalamud staging
-              run: |
-                  hooks="$HOME/.xlcore/dalamud/Hooks/dev"
-                  mkdir -p "$hooks"
-                  curl -fsSL https://goatcorp.github.io/dalamud-distrib/stg/latest.zip -o dalamud.zip
-                  unzip -oq dalamud.zip -d "$hooks"
-
-            - name: Build (Release)
-              run: dotnet build HellionChat/HellionChat.csproj --configuration Release
-
-            - name: Locate latest.zip
-              id: locate
-              run: |
-                  zip="$(find HellionChat/bin/Release -name latest.zip -print -quit)"
-                  if [ -z "$zip" ]; then
-                      echo "latest.zip not found under HellionChat/bin/Release" >&2
-                      exit 1
-                  fi
-                  echo "Found: $zip"
-                  echo "path=$zip" >> "$GITHUB_OUTPUT"
-
-            # Build a release body from the matching changelog block in
-            # HellionChat.yaml plus a static install / docs footer. Fails the
-            # workflow if no block exists for the tagged version, which is the
-            # automated counterpart to the "yaml + repo.json + release body
-            # kept in sync" rule.
-            #
-            # GITHUB_REF_NAME is read via env: (not ${{ }} interpolation) so the
-            # tag value is treated as a PowerShell variable, not as inline shell
-            # text. The strict regex below rejects anything that is not a clean
-            # semver tag before it is used to build a string.
-            - name: Generate release body
-              shell: pwsh
-              env:
-                  # workflow_dispatch carries the user-supplied tag in inputs.tag;
-                  # push:tags carries it in github.ref_name. Either way the value
-                  # is treated as a PowerShell variable (env-var pass), not as
-                  # inline shell text, and validated against the semver regex
-                  # below before any string interpolation.
-                  TAG_NAME: ${{ github.event.inputs.tag || github.ref_name }}
-              run: |
-                  $tag = $env:TAG_NAME
-                  if ($tag -notmatch '^v\d+\.\d+\.\d+$') {
-                      throw "Refusing to generate release body for non-semver tag: $tag"
-                  }
-                  $version = $tag.Substring(1)
-
-                  $yamlPath = "HellionChat/HellionChat.yaml"
-                  $raw = Get-Content -Path $yamlPath -Raw
-
-                  $marker = "changelog: |-"
-                  $idx = $raw.IndexOf($marker)
-                  if ($idx -lt 0) { throw "changelog block not found in $yamlPath" }
-
-                  # changelog: is the last top-level key in the manifest, so
-                  # everything after the marker is the literal block. Strip the
-                  # 2-space yaml indent from each line.
-                  $afterMarker = $raw.Substring($idx + $marker.Length)
-                  $changelogBody = (($afterMarker -split "`r?`n") | ForEach-Object {
-                      if ($_ -match '^  ') { $_.Substring(2) } else { $_ }
-                  }) -join "`n"
-
-                  $header = "**Hellion Chat $version"
-                  $start = $changelogBody.IndexOf($header)
-                  if ($start -lt 0) {
-                      throw "No changelog entry for version $version found in $yamlPath. Update the changelog block before tagging a release."
-                  }
-
-                  $rest = $changelogBody.Substring($start)
-                  $nextHdr = $rest.IndexOf("`n`n**Hellion Chat ", 1)
-                  $trailer = $rest.IndexOf("`n`n---")
-
-                  if ($nextHdr -ge 0 -and ($trailer -lt 0 -or $nextHdr -lt $trailer)) {
-                      $currentBlock = $rest.Substring(0, $nextHdr).TrimEnd()
-                  } elseif ($trailer -ge 0) {
-                      $currentBlock = $rest.Substring(0, $trailer).TrimEnd()
-                  } else {
-                      $currentBlock = $rest.TrimEnd()
-                  }
-
-                  # Static install / docs / licence footer is maintained as a
-                  # separate file so the workflow YAML stays clean (no embedded
-                  # heredoc that would have to be indented under the run-block).
-                  $footerPath = ".github/release-footer.md"
-                  if (-not (Test-Path $footerPath)) {
-                      throw "Release footer template not found: $footerPath"
-                  }
-                  $footer = Get-Content -Path $footerPath -Raw
-
-                  $body = $currentBlock + "`n" + $footer
-                  $body | Out-File -FilePath release-body.md -Encoding utf8 -NoNewline
-
-                  Write-Host "Generated release body for $tag :"
-                  Write-Host "----------------------------------------"
-                  Write-Host $body
-                  Write-Host "----------------------------------------"
-
-            # Gitea-native release action. Creates the release if the tag has no
-            # release yet, or updates the existing one. body_path provides the
-            # generated release body, files attaches latest.zip. The auto-injected
-            # GITHUB_TOKEN on Gitea Actions has Gitea-API scope and is sufficient
-            # for release write.
-            - name: Attach to Gitea release
-              uses: https://gitea.com/actions/release-action@main
-              with:
-                  # Explicit tag_name so the action targets the correct release in
-                  # both push:tags (auto) and workflow_dispatch (manual recovery)
-                  # modes. Without this, dispatch runs would default to the branch
-                  # ref (main) and fail to find the release.
-                  tag_name: ${{ github.event.inputs.tag || github.ref_name }}
-                  files: ${{ steps.locate.outputs.path }}
-                  body_path: release-body.md
-                  api_key: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -1,37 +1,193 @@
-## Ignore Visual Studio temporary files, build results, and
+##############################################################
-## files generated by popular Visual Studio add-ons.
 ##
-## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
+##   .gitignore – Hellion Forge / Hellion Media
+##
+##   Basis:        github/gitignore VisualStudio.gitignore
+##   Überarbeitet: Mai 2026
+##   Status:       Original-Patterns vollständig erhalten,
+##                 neu sortiert in logische Sektionen,
+##                 Sicherheits- & Tooling-Sektionen ergänzt.
+##
+##   Markierungen:
+##     [!! OBSOLET 2026 !!]  → Tool offiziell eingestellt,
+##                             Pattern bleibt aus Vorsicht drin.
+##
+##############################################################
 
-# Local development environment (HellionChat fork)
+
+# =====================================================
+# [!! KRITISCH !!]  Secrets, Keys & Credentials
+# Diese Sachen dürfen NIEMALS im Repo landen!
+# =====================================================
+
+# Environment Files
 .env
+.env.*
 .env.bak*
 .envrc
 !.env.example
+!.env.sample
+
+# Private Keys & Zertifikate
+*.pem
+*.key
+*.p12
+*.pfx
+*.cer
+*.crt
+*.csr
+*.gpg
+*.asc
+
+# SSH Keys (falls jemand die ins Repo legt)
+id_rsa
+id_ed25519
+id_ecdsa
+known_hosts
+
+# Auth-/Token-Files
+auth.json
+.npmrc
+.pypirc
+secrets.json
+
+# ASP.NET / .NET App-Configs mit lokalen Secrets
+appsettings.*.local.json
+appsettings.Local.json
+local.settings.json
+
+# Memory Dumps (können Credentials im Heap enthalten!)
+*.dmp
+*.mdmp
+crash.log
+
+
+# =====================================================
+# Projekt-spezifisch (HellionChat Fork)
+# =====================================================
+
+# Lokale Entwicklungsumgebung
 .vscode/
 scripts/setup-dev-env.sh
 
-# Local test project (stays out of the published plugin repo;
+# Lokales Test-Projekt (bleibt aus dem Plugin-Repo raus;
-# pure-function safety net for refactor cycles)
+# pure-function safety net für Refactor-Cycles)
 HellionChat.Tests/
+ChatTwo.Tests
+TestResults
+*.db-shm
+*.db-wal
 
 # Packaging
 pack/
 
-# User-specific files
+# Specs und Plan-Dateien
+/.superpowers/
+
+# Claude Code lokales Setup (nicht committed)
+/.claude/
+/CLAUDE.md
+
+# Cycle-Working-Notes (im Vault gepflegt, lokales Repo-Pad bei Bedarf)
+/docs/cycle-notes/
+
+
+# =====================================================
+# OS-spezifische Files
+# =====================================================
+
+# macOS
+.DS_Store
+.AppleDouble
+.LSOverride
+._*
+
+# Windows
+Thumbs.db
+ehthumbs.db
+Desktop.ini
+$RECYCLE.BIN/
+
+# Linux
+.directory
+.Trash-*
+
+
+# =====================================================
+# AI / LLM Tooling (2026 era)
+# =====================================================
+
+# Cursor IDE
+.cursor/
+.cursorignore
+
+# Aider
+.aider*
+
+# Continue.dev
+.continue/
+.continuerc.json
+
+# Windsurf
+.windsurf/
+
+# Sourcegraph Cody
+.cody/
+
+# Lokale Prompt-Sammlungen / Scratch-Pads
+prompts/local/
+
+
+# =====================================================
+# Editor & IDE (neben Visual Studio)
+# =====================================================
+
+# JetBrains (IntelliJ, Rider, etc.)
+.idea/
+
+# Vim / Neovim
+*.swp
+*.swo
+*.swn
+
+# Sublime Text
+*.sublime-workspace
+*.sublime-project
+
+
+# =====================================================
+# IDE & Editor – User-spezifische Files (VS)
+# =====================================================
+
+# Visual Studio User Files
 *.rsuser
 *.suo
 *.user
 *.userosscache
 *.sln.docstates
 
-# User-specific files (MonoDevelop/Xamarin Studio)
+# MonoDevelop/Xamarin Studio
 *.userprefs
 
-# Mono auto generated files
+# Visual Studio Cache/Options Directory
-mono_crash.*
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto-generated files
+Generated\ Files/
+
+# Local History
+.localhistory/
+
+# CodeRush personal settings
+.cr/personal
+
+
+# =====================================================
+# Build Output
+# =====================================================
 
-# Build results
 [Dd]ebug/
 [Dd]ebugPublic/
 [Rr]elease/
@@ -47,43 +203,24 @@ bld/
 [Ll]og/
 [Ll]ogs/
 
-# Visual Studio 2015/2017 cache/options directory
+# ATL Project Build Output
-.vs/
-# Uncomment if you have tasks that create the project's static files in wwwroot
-#wwwroot/
-
-# Visual Studio 2017 auto generated files
-Generated\ Files/
-
-# MSTest test Results
-[Tt]est[Rr]esult*/
-[Bb]uild[Ll]og.*
-
-# NUnit
-*.VisualState.xml
-TestResult.xml
-nunit-*.xml
-
-# Build Results of an ATL Project
 [Dd]ebugPS/
 [Rr]eleasePS/
 dlldata.c
 
-# Benchmark Results
-BenchmarkDotNet.Artifacts/
-
 # .NET Core
 project.lock.json
 project.fragment.lock.json
 artifacts/
 
-# ASP.NET Scaffolding
+# MigrationBackup (Package Reference Convert Tool)
-ScaffoldingReadMe.txt
+MigrationBackup/
 
-# StyleCop
-StyleCopReport.xml
 
-# Files built by Visual Studio
+# =====================================================
+# Build-Artefakte (Files built by Visual Studio)
+# =====================================================
+
 *_i.c
 *_p.c
 *_h.h
@@ -105,6 +242,7 @@ StyleCopReport.xml
 *.tmp_proj
 *_wpftmp.csproj
 *.log
+*.binlog
 *.vspscc
 *.vssscc
 .builds
@@ -112,10 +250,87 @@ StyleCopReport.xml
 *.svclog
 *.scc
 
-# Chutzpah Test files
+
+# =====================================================
+# Test Results
+# =====================================================
+
+# MSTest
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUnit
+*.VisualState.xml
+TestResult.xml
+nunit-*.xml
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# Verify / Snapshot Testing (modern .NET, Spotty Wisdom)
+*.received.*
+*.received.txt
+
+# [!! OBSOLET 2026 !!] Chutzpah – Repository auf GitHub archiviert
 _Chutzpah*
 
+
+# =====================================================
+# Code Coverage
+# =====================================================
+
+# Coverlet
+coverage*.json
+coverage*.xml
+coverage*.info
+
+# Visual Studio code coverage
+*.coverage
+*.coveragexml
+
+# DotCover (JetBrains)
+*.dotCover
+
+# AxoCover
+.axoCover/*
+!.axoCover/settings.json
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# OpenCover UI Analysis
+OpenCover/
+
+# [!! OBSOLET 2026 !!] MightyMoose / AutoTest.Net – seit >10 Jahren nicht mehr gepflegt
+*.mm.*
+AutoTest.Net/
+
+
+# =====================================================
+# Profiler & Trace
+# =====================================================
+
+# Visual Studio Profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# NVidia Nsight GPU Debugger
+*.nvuser
+
+
+# =====================================================
+# Cache Files (VS, C++, Sass)
+# =====================================================
+
 # Visual C++ cache files
+# Hinweis: Manche Patterns hier werden auch vom C#-Linter genutzt (z. B. *.lscache)
 ipch/
 *.aps
 *.ncb
@@ -125,101 +340,80 @@ ipch/
 *.cachefile
 *.VC.db
 *.VC.VC.opendb
+*.lscache
 
-# Visual Studio profiler
+# Visual Studio cache (.cache files allgemein, .cache directories behalten)
-*.psess
+*.[Cc]ache
-*.vsp
+!?*.[Cc]ache/
-*.vspx
-*.sap
 
-# Visual Studio Trace Files
+# Web Workbench Sass
-*.e2e
-
-# TFS 2012 Local Workspace
-$tf/
-
-# Guidance Automation Toolkit
-*.gpState
-
-# ReSharper is a .NET coding add-in
-_ReSharper*/
-*.[Rr]e[Ss]harper
-*.DotSettings.user
-
-# TeamCity is a build add-in
-_TeamCity*
-
-# DotCover is a Code Coverage Tool
-*.dotCover
-
-# AxoCover is a Code Coverage Tool
-.axoCover/*
-!.axoCover/settings.json
-
-# Coverlet is a free, cross platform Code Coverage Tool
-coverage*.json
-coverage*.xml
-coverage*.info
-
-# Visual Studio code coverage results
-*.coverage
-*.coveragexml
-
-# NCrunch
-_NCrunch_*
-.*crunch*.local.xml
-nCrunchTemp_*
-
-# MightyMoose
-*.mm.*
-AutoTest.Net/
-
-# Web workbench (sass)
 .sass-cache/
 
-# Installshield output folder
-[Ee]xpress/
 
-# DocProject is a documentation generator add-in
+# =====================================================
-DocProject/buildhelp/
+# NuGet & Dependencies
-DocProject/Help/*.HxT
+# =====================================================
-DocProject/Help/*.HxC
-DocProject/Help/*.hhc
-DocProject/Help/*.hhk
-DocProject/Help/*.hhp
-DocProject/Help/Html2
-DocProject/Help/html
-
-# Click-Once directory
-publish/
-
-# Publish Web Output
-*.[Pp]ublish.xml
-*.azurePubxml
-# Note: Comment the next line if you want to checkin your web deploy settings,
-# but database connection strings (with potential passwords) will be unencrypted
-*.pubxml
-*.publishproj
-
-# Microsoft Azure Web App publish settings. Comment the next line if you want to
-# checkin your Azure Web App publish settings, but sensitive information contained
-# in these scripts will be unencrypted
-PublishScripts/
 
 # NuGet Packages
 *.nupkg
-# NuGet Symbol Packages
 *.snupkg
-# The packages folder can be ignored because of Package Restore
 **/[Pp]ackages/*
-# except build/, which is used as an MSBuild target.
 !**/[Pp]ackages/build/
 # Uncomment if necessary however generally it will be regenerated when needed
 #!**/[Pp]ackages/repositories.config
-# NuGet v3's project.json files produces more ignorable files
 *.nuget.props
 *.nuget.targets
 
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Fody – auto-generated XML schema
+FodyWeavers.xsd
+
+# Node (falls JS-Tooling im Build genutzt wird)
+.ntvs_analysis.dat
+node_modules/
+
+# Python Tools für Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+
+# =====================================================
+# Mono
+# =====================================================
+
+mono_crash.*
+
+
+# =====================================================
+# Publish & Deploy
+# =====================================================
+
+# Click-Once
+publish/
+
+# Publish Web Output
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.[Pp]ublish.xml
+*.azurePubxml
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App Publish Settings
+# Comment the next line if you want to checkin your Azure Web App publish settings,
+# but sensitive information contained in these scripts will be unencrypted
+PublishScripts/
+
 # Microsoft Azure Build Output
 csx/
 *.build.csdef
@@ -228,7 +422,35 @@ csx/
 ecf/
 rcf/
 
-# Windows Store app package directories and files
+# Service Fabric Backup
+ServiceFabricBackup/
+
+# Installshield
+[Ee]xpress/
+
+
+# =====================================================
+# Container / Infrastructure-as-Code (Vorsicht: Tokens!)
+# =====================================================
+
+# Docker
+docker-compose.override.yml
+
+# Terraform
+.terraform/
+*.tfstate
+*.tfstate.*
+*.tfvars
+!example.tfvars
+
+# Serverless Framework
+.serverless/
+
+
+# =====================================================
+# Windows Store / AppX
+# =====================================================
+
 AppPackages/
 BundleArtifacts/
 Package.StoreAssociation.xml
@@ -237,50 +459,29 @@ _pkginfo.txt
 *.appxbundle
 *.appxupload
 
-# Visual Studio cache files
-# files ending in .cache can be ignored
-*.[Cc]ache
-# but keep track of directories ending in .cache
-!?*.[Cc]ache/
 
-# Others
+# =====================================================
-ClientBin/
+# Datenbanken & SQL
-~$*
+# =====================================================
-*~
-*.dbmdl
-*.dbproj.schemaview
-*.jfm
-*.pfx
-*.publishsettings
-orleans.codegen.cs
 
-# Including strong name files can present a security risk
+# SQL Server
-# (https://github.com/github/gitignore/pull/2483#issue-259490424)
-#*.snk
-
-# Since there are multiple workflows, uncomment next line to ignore bower_components
-# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
-#bower_components/
-
-# RIA/Silverlight projects
-Generated_Code/
-
-# Backup & report files from converting an old project file
-# to a newer Visual Studio version. Backup files are not needed,
-# because we have git ;-)
-_UpgradeReport_Files/
-Backup*/
-UpgradeLog*.XML
-UpgradeLog*.htm
-ServiceFabricBackup/
-*.rptproj.bak
-
-# SQL Server files
 *.mdf
 *.ldf
 *.ndf
 
-# Business Intelligence projects
+# Andere DB-bezogene
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+
+# [!! OBSOLET 2026 !!] BeatPulse – wurde 2019 umbenannt zu AspNetCore.Diagnostics.HealthChecks
+healthchecksdb
+
+
+# =====================================================
+# Business Intelligence / Reporting
+# =====================================================
+
 *.rdl.data
 *.bim.layout
 *.bim_*.settings
@@ -288,27 +489,97 @@ ServiceFabricBackup/
 *- [Bb]ackup.rdl
 *- [Bb]ackup ([0-9]).rdl
 *- [Bb]ackup ([0-9][0-9]).rdl
+*.rptproj.bak
+
+
+# =====================================================
+# Add-ins & Analyzer Tools
+# =====================================================
+
+# ReSharper
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# TeamCity
+_TeamCity*
+
+# StyleCop
+StyleCopReport.xml
+
+# ASP.NET Scaffolding
+ScaffoldingReadMe.txt
+
+# Guidance Automation Toolkit
+*.gpState
 
 # Microsoft Fakes
 FakesAssemblies/
 
-# GhostDoc plugin setting file
+# [!! OBSOLET 2026 !!] GhostDoc Plugin – Submain hat das Tool eingestellt
 *.GhostDoc.xml
 
-# Node.js Tools for Visual Studio
+# Tabs Studio
-.ntvs_analysis.dat
+*.tss
-node_modules/
 
-# Visual Studio 6 build log
+# Telerik JustMock
+*.jmconfig
+
+# MFractors (Xamarin productivity tool)
+.mfractor/
+
+# DocProject Documentation Generator
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+
+# =====================================================
+# Sonstige Sprachen & Tooling
+# =====================================================
+
+# Ionide (F# VS Code Tools)
+.ionide/
+
+# Azure Stream Analytics Local Run
+ASALocalRun/
+
+# BizTalk Build Output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# Orleans
+orleans.codegen.cs
+
+
+# =====================================================
+# [!! OBSOLET 2026 !!]  Legacy-Tooling (eingestellt)
+# Patterns bleiben aus Vorsicht drin.
+# =====================================================
+
+# [!! OBSOLET 2026 !!] TFS 2012 Local Workspace – ersetzt durch Azure DevOps
+$tf/
+
+# [!! OBSOLET 2026 !!] Visual Studio 6 Build Log – VS6 ist von 1998
 *.plg
 
-# Visual Studio 6 workspace options file
+# [!! OBSOLET 2026 !!] Visual Studio 6 Workspace Options
 *.opt
 
-# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+# [!! OBSOLET 2026 !!] Visual Studio 6 Workspace File
 *.vbw
 
-# Visual Studio LightSwitch build output
+# [!! OBSOLET 2026 !!] RIA / Silverlight – Microsoft hat das Okt. 2021 eingestellt
+Generated_Code/
+
+# [!! OBSOLET 2026 !!] Visual Studio LightSwitch – von Microsoft eingestellt
 **/*.HTMLClient/GeneratedArtifacts
 **/*.DesktopClient/GeneratedArtifacts
 **/*.DesktopClient/ModelManifest.xml
@@ -316,71 +587,31 @@ node_modules/
 **/*.Server/ModelManifest.xml
 _Pvt_Extensions
 
-# Paket dependency manager
-.paket/paket.exe
-paket-files/
 
-# FAKE - F# Make
+# =====================================================
-.fake/
+# Upgrade / Backup-Reports
+# =====================================================
 
-# CodeRush personal settings
+# Backup-Files vom Konvertieren alter VS-Projekte (wir haben ja git ;-))
-.cr/personal
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
 
-# Python Tools for Visual Studio (PTVS)
-__pycache__/
-*.pyc
 
-# Cake - Uncomment if you are using it
+# =====================================================
-# tools/**
+# Misc / Temp / Backup
-# !tools/packages.config
+# =====================================================
 
-# Tabs Studio
+ClientBin/
-*.tss
+~$*
+*~
+*.publishsettings
 
-# Telerik's JustMock configuration file
+# Including strong name files can present a security risk
-*.jmconfig
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
 
-# BizTalk build output
+# Since there are multiple workflows, uncomment next line to ignore bower_components
-*.btp.cs
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
-*.btm.cs
+#bower_components/
-*.odx.cs
-*.xsd.cs
-
-# OpenCover UI analysis results
-OpenCover/
-
-# Azure Stream Analytics local run output
-ASALocalRun/
-
-# MSBuild Binary and Structured Log
-*.binlog
-
-# NVidia Nsight GPU debugger configuration file
-*.nvuser
-
-# MFractors (Xamarin productivity tool) working folder
-.mfractor/
-
-# Local History for Visual Studio
-.localhistory/
-
-# BeatPulse healthcheck temp database
-healthchecksdb
-
-# Backup folder for Package Reference Convert tool in Visual Studio 2017
-MigrationBackup/
-
-# Ionide (cross platform F# VS Code tools) working folder
-.ionide/
-
-# Fody - auto-generated XML schema
-FodyWeavers.xsd
-
-#Specs und Plan datein
-/.superpowers/
-
-#Test Datein
-ChatTwo.Tests
-TestResults
-*.db-shm
-*.db-wal

.markdownlint.json

@@ -1,7 +1,17 @@
 {
-    "MD007": { "indent": 4 },
+    "MD003": { "style": "atx" },
+    "MD004": { "style": "dash" },
+    "MD007": { "indent": 2 },
+    "MD009": { "br_spaces": 2, "strict": false, "list_item_empty_lines": false },
     "MD013": false,
+    "MD024": { "siblings_only": true },
     "MD029": false,
     "MD033": false,
-    "MD041": false
+    "MD036": false,
+    "MD040": true,
+    "MD041": false,
+    "MD046": { "style": "fenced" },
+    "MD048": { "style": "backtick" },
+    "MD049": { "style": "underscore" },
+    "MD050": { "style": "asterisk" }
 }

.prettierignore

@@ -1,4 +1,50 @@
+# ##############################################################
+# #
+# #   .prettierignore – Hellion Forge / Hellion Media
+# #
+# #   Files die Prettier NICHT anfassen soll.
+# #   Überarbeitet: Mai 2026
+# #
+# #   Hinweis: Prettier liest auch .gitignore automatisch mit.
+# #   Hier nur Sachen die zusätzlich ignoriert werden müssen
+# #   oder die im Repo liegen aber nicht formatiert werden dürfen.
+# #
+# ##############################################################
+
+
+# === .NET Build Output ===
 bin/
 obj/
+
+# === JS / Web Build Output ===
 node_modules/
-*.Designer.cs
+dist/
+out/
+build/
+coverage/
+
+# === Generierte C#-Files (Designer, Source Generators) ===
+*.Designer.cs
+*.g.cs
+*.g.i.cs
+*.generated.cs
+*.AssemblyInfo.cs
+*.AssemblyAttributes.cs
+
+# === Lock-Files (NIE umformatieren – zerschießt den Hash) ===
+package-lock.json
+yarn.lock
+pnpm-lock.yaml
+packages.lock.json
+
+# === Minified Files (bewusst kompakt, niemals anfassen) ===
+*.min.js
+*.min.css
+
+# === Test-Snapshots (z. B. Verify) ===
+*.received.*
+*.verified.*
+**/__snapshots__/
+
+# === Plugin-Manifest (DalamudPackager-Schema, fix lassen) ===
+HellionChat/HellionChat.yaml

.prettierrc.json

@@ -1,7 +1,35 @@
 {
     "printWidth": 120,
     "tabWidth": 4,
-    "proseWrap": "always",
+    "useTabs": false,
+    "semi": true,
     "singleQuote": false,
-    "endOfLine": "lf"
+    "trailingComma": "all",
+    "bracketSpacing": true,
+    "arrowParens": "always",
+    "proseWrap": "always",
+    "endOfLine": "lf",
+    "overrides": [
+        {
+            "files": "*.md",
+            "options": {
+                "printWidth": 100,
+                "tabWidth": 2
+            }
+        },
+        {
+            "files": ["*.yml", "*.yaml"],
+            "options": {
+                "tabWidth": 2,
+                "singleQuote": true
+            }
+        },
+        {
+            "files": "*.json",
+            "options": {
+                "tabWidth": 4,
+                "trailingComma": "none"
+            }
+        }
+    ]
 }

.yamllint.yaml

@@ -1,8 +1,53 @@
+# ##############################################################
+# #
+# #   .yamllint.yaml – Hellion Forge / Hellion Media
+# #
+# #   YAML-Linting Konfiguration.
+# #   Überarbeitet: Mai 2026
+# #
+# #   Regel-Doku:
+# #     https://yamllint.readthedocs.io/en/stable/rules.html
+# #
+# ##############################################################
+
 extends: default
+
+# Plugin-Manifest folgt DalamudPackager-Konvention (4-space-indent für
+# image_urls + tags). yamllint-Default verlangt 2 — Konflikt, daher
+# ignorieren statt das Manifest zu reformatieren.
+ignore: |
+  HellionChat/HellionChat.yaml
+
 rules:
-    line-length: disable
+  # Zeilenlängen-Check aus (konsistent mit markdownlint MD013)
-    document-start: disable
+  line-length: disable
-    truthy:
+
-        allowed-values: ["true", "false", "on"]
+  # YAML ohne führendes "---" erlaubt
-    empty-lines:
+  document-start: disable
-        max: 1
+
+  # GitHub Actions nutzt "on:" als Trigger-Key.
+  # Ohne diesen Override würde yamllint das als boolean "on" beklagen.
+  truthy:
+    allowed-values: ['true', 'false', 'on']
+
+  # Maximal 1 Leerzeile in Folge (saubere Files)
+  empty-lines:
+    max: 1
+
+  # YAML-Standard ist 2 Spaces (auch GitHub Actions erwartet das).
+  # Explizit setzen, um Konsistenz im Repo zu erzwingen.
+  indentation:
+    spaces: 2
+    indent-sequences: true
+    check-multi-line-strings: false
+
+  # Kommentare brauchen Space nach #, müssen mit Content beginnen
+  comments:
+    require-starting-space: true
+    min-spaces-from-content: 1
+
+  # Kein Whitespace am Zeilenende
+  trailing-spaces: enable
+
+  # Datei muss mit Newline enden
+  new-line-at-end-of-file: enable

CODE_OF_CONDUCT.md

@@ -2,14 +2,15 @@
 
 ## A Note on This Project
 
-HellionChat is a one-person side project developed under Hellion Forge. I maintain this in my spare time, which means
+HellionChat is a one-person side project developed under Hellion Forge. I maintain this in my spare
-replies can take a few days. Please do not escalate just because a thread is quiet.
+time, which means replies can take a few days. Please do not escalate just because a thread is
+quiet.
 
-When in doubt, assume good intent. Contributors come from different backgrounds, time zones and skill levels. A
+When in doubt, assume good intent. Contributors come from different backgrounds, time zones and
-clarifying question is almost always a better first move than an accusation.
+skill levels. A clarifying question is almost always a better first move than an accusation.
 
-Please also keep discussions on topic. This project is about a Dalamud chat plugin. Off-topic arguments belong
+Please also keep discussions on topic. This project is about a Dalamud chat plugin. Off-topic
-elsewhere.
+arguments belong elsewhere.
 
 ---
 
@@ -17,20 +18,21 @@ elsewhere.
 
 We pledge to make our community welcoming, safe, and equitable for all.
 
-We are committed to fostering an environment that respects and promotes the dignity, rights, and contributions of all
+We are committed to fostering an environment that respects and promotes the dignity, rights, and
-individuals, regardless of characteristics including race, ethnicity, caste, color, age, physical characteristics,
+contributions of all individuals, regardless of characteristics including race, ethnicity, caste,
-neurodiversity, disability, sex or gender, gender identity or expression, sexual orientation, language, philosophy or
+color, age, physical characteristics, neurodiversity, disability, sex or gender, gender identity or
-religion, national or social origin, socio-economic position, level of education, or other status. The same privileges
+expression, sexual orientation, language, philosophy or religion, national or social origin,
-of participation are extended to everyone who participates in good faith and in accordance with this Covenant.
+socio-economic position, level of education, or other status. The same privileges of participation
+are extended to everyone who participates in good faith and in accordance with this Covenant.
 
 ## Encouraged Behaviors
 
-While acknowledging differences in social norms, we all strive to meet our community's expectations for positive
+While acknowledging differences in social norms, we all strive to meet our community's expectations
-behavior. We also understand that our words and actions may be interpreted differently than we intend based on culture,
+for positive behavior. We also understand that our words and actions may be interpreted differently
-background, or native language.
+than we intend based on culture, background, or native language.
 
-With these considerations in mind, we agree to behave mindfully toward each other and act in ways that center our shared
+With these considerations in mind, we agree to behave mindfully toward each other and act in ways
-values, including:
+that center our shared values, including:
 
 1. Respecting the **purpose of our community**, our activities, and our ways of gathering.
 2. Engaging **kindly and honestly** with others.
@@ -42,31 +44,32 @@ values, including:
 
 ## Restricted Behaviors
 
-We agree to restrict the following behaviors in our community. Instances, threats, and promotion of these behaviors are
+We agree to restrict the following behaviors in our community. Instances, threats, and promotion of
-violations of this Code of Conduct.
+these behaviors are violations of this Code of Conduct.
 
-1. **Harassment.** Violating explicitly expressed boundaries or engaging in unnecessary personal attention after any
+1. **Harassment.** Violating explicitly expressed boundaries or engaging in unnecessary personal
-   clear request to stop.
+   attention after any clear request to stop.
-2. **Character attacks.** Making insulting, demeaning, or pejorative comments directed at a community member or group of
+2. **Character attacks.** Making insulting, demeaning, or pejorative comments directed at a
-   people.
+   community member or group of people.
-3. **Stereotyping or discrimination.** Characterizing anyone's personality or behavior on the basis of immutable
+3. **Stereotyping or discrimination.** Characterizing anyone's personality or behavior on the basis
-   identities or traits.
+   of immutable identities or traits.
-4. **Sexualization.** Behaving in a way that would generally be considered inappropriately intimate in the context or
+4. **Sexualization.** Behaving in a way that would generally be considered inappropriately intimate
-   purpose of the community.
+   in the context or purpose of the community.
-5. **Violating confidentiality.** Sharing or acting on someone's personal or private information without their
+5. **Violating confidentiality.** Sharing or acting on someone's personal or private information
-   permission.
+   without their permission.
-6. **Endangerment.** Causing, encouraging, or threatening violence or other harm toward any person or group.
+6. **Endangerment.** Causing, encouraging, or threatening violence or other harm toward any person
+   or group.
 7. Behaving in other ways that **threaten the well-being** of our community.
 
 ### Other Restrictions
 
-1. **Misleading identity.** Impersonating someone else for any reason, or pretending to be someone else to evade
+1. **Misleading identity.** Impersonating someone else for any reason, or pretending to be someone
-   enforcement actions.
+   else to evade enforcement actions.
 2. **Failing to credit sources.** Not properly crediting the sources of content you contribute.
-3. **Promotional materials.** Sharing marketing or other commercial content in a way that is outside the norms of the
+3. **Promotional materials.** Sharing marketing or other commercial content in a way that is outside
-   community.
+   the norms of the community.
-4. **Irresponsible communication.** Failing to responsibly present content which includes, links to, or describes any
+4. **Irresponsible communication.** Failing to responsibly present content which includes, links to,
-   other restricted behaviors.
+   or describes any other restricted behaviors.
 
 ## Reporting
 
@@ -77,12 +80,13 @@ If something here is being broken, contact me directly. Do not open a public iss
 | Email      | `kontakt@hellion-media.de` |
 | Discord DM | `@j.j_kazama`              |
 
-Reports stay private. I will acknowledge within a few weekdays (European business hours) and tell you what I plan to do.
+Reports stay private. I will acknowledge within a few weekdays (European business hours) and tell
+you what I plan to do.
 
 ## Enforcement
 
-I am the sole maintainer, so enforcement is a single-person process. I will pick the lightest measure that actually
+I am the sole maintainer, so enforcement is a single-person process. I will pick the lightest
-resolves the situation:
+measure that actually resolves the situation:
 
 1. Private note asking the behaviour to stop.
 2. Public correction in the affected thread.
@@ -95,16 +99,16 @@ Severe cases skip the lower steps. I will not negotiate over harassment or threa
 
 ## Scope
 
-This Code of Conduct applies to all spaces the project owns or that I run on its behalf: the GitHub repository, GitHub
+This Code of Conduct applies to all spaces the project owns or that I run on its behalf: the GitHub
-Discussions, project-related Discord conversations, and the maintainer contact listed in [`SECURITY.md`](SECURITY.md).
+repository, GitHub Discussions, project-related Discord conversations, and the maintainer contact
-It also applies when someone is identifiably representing HellionChat elsewhere, for example when posting as a
+listed in [`SECURITY.md`](SECURITY.md). It also applies when someone is identifiably representing
-HellionChat maintainer in the Dalamud Discord.
+HellionChat elsewhere, for example when posting as a HellionChat maintainer in the Dalamud Discord.
 
 ## Attribution
 
 This Code of Conduct is adapted from the Contributor Covenant, version 3.0, available at
 [https://www.contributor-covenant.org/version/3/0/](https://www.contributor-covenant.org/version/3/0/).
 
-Contributor Covenant is stewarded by the Organization for Ethical Source and licensed under CC BY-SA 4.0. To view a copy
+Contributor Covenant is stewarded by the Organization for Ethical Source and licensed under CC BY-SA
-of this license, visit
+4.0. To view a copy of this license, visit
 [https://creativecommons.org/licenses/by-sa/4.0/](https://creativecommons.org/licenses/by-sa/4.0/).

CONTRIBUTING.md

@@ -1,69 +1,75 @@
 # Contributing to HellionChat
 
-Thanks for taking a look. HellionChat is a one-person side project developed under Hellion Forge. It started as a fork
+Thanks for taking a look. HellionChat is a one-person side project developed under Hellion Forge. It
-of [Chat 2](https://github.com/Infiziert90/ChatTwo) and has since become a standalone plugin under its own namespace,
+started as a fork of [Chat 2](https://github.com/Infiziert90/ChatTwo) and has since become a
-IPC channels and source tree (standalone-cut completed in v1.0.0). Forking HellionChat itself is explicitly permitted
+standalone plugin under its own namespace, IPC channels and source tree (standalone-cut completed in
-under the EUPL-1.2.
+v1.0.0). Forking HellionChat itself is explicitly permitted under the EUPL-1.2.
 
-This document explains what I am looking for, what I am not, and how to make a contribution land smoothly.
+This document explains what I am looking for, what I am not, and how to make a contribution land
+smoothly.
 
 ## Before You Open Anything
 
-- Read the [README](README.md) so you understand the scope: a privacy-focused, EUPL-1.2-licensed Dalamud plugin that
+- Read the [README](README.md) so you understand the scope: a privacy-focused, EUPL-1.2-licensed
-  intentionally removes the upstream webinterface and ships privacy-first defaults.
+  Dalamud plugin that intentionally removes the upstream webinterface and ships privacy-first
-- Read [`docs/UPSTREAM_SYNC.md`](docs/UPSTREAM_SYNC.md). Active cherry-picking from upstream Chat 2 has ended in the
+  defaults.
-  v1.4.x cycle; HellionChat continues as an independent codebase. Existing upstream-derived code keeps its attribution.
+- Read [`docs/UPSTREAM_SYNC.md`](docs/UPSTREAM_SYNC.md). Active cherry-picking from upstream Chat 2
-  New contributions stand on their own and do not need to be cherry-pick-compatible.
+  has ended in the v1.4.x cycle; HellionChat continues as an independent codebase. Existing
-- Read [`SECURITY.md`](SECURITY.md). Anything security-sensitive goes through a private advisory, never a public issue
+  upstream-derived code keeps its attribution. New contributions stand on their own and do not need
-  or PR.
+  to be cherry-pick-compatible.
+- Read [`SECURITY.md`](SECURITY.md). Anything security-sensitive goes through a private advisory,
+  never a public issue or PR.
 - Read the [Code of Conduct](CODE_OF_CONDUCT.md).
 
 ## What I Will Accept
 
 - Bug fixes for behaviour documented in the README, the in-plugin settings or the changelog.
 - Translation contributions for Hellion-specific strings via direct pull requests against
-  `HellionChat/Resources/HellionStrings.*.resx`. Translations for upstream Chat 2 strings (`Language.*.resx`) are not
+  `HellionChat/Resources/HellionStrings.*.resx`. Translations for upstream Chat 2 strings
-  handled here; those go to the upstream Chat 2 project.
+  (`Language.*.resx`) are not handled here; those go to the upstream Chat 2 project.
 - Documentation improvements (README, comments, this file).
 - Performance fixes with a measurable before/after.
-- New features that fit the privacy-first scope and do not duplicate what an existing Dalamud plugin already does well.
+- New features that fit the privacy-first scope and do not duplicate what an existing Dalamud plugin
+  already does well.
 
 ## What I Will Probably Decline
 
-- Re-introducing the webinterface or any remote-access feature. It was removed in v0.2.0 on purpose. See the README
+- Re-introducing the webinterface or any remote-access feature. It was removed in v0.2.0 on purpose.
-  section "Was gegenüber Chat 2 fehlt".
+  See the README section "Was gegenüber Chat 2 fehlt".
-- Features that bypass the privacy filter or weaken the default retention behaviour without an explicit, documented
+- Features that bypass the privacy filter or weaken the default retention behaviour without an
-  opt-in.
+  explicit, documented opt-in.
-- Sweeping refactors that touch large parts of the codebase. The maintenance cost outweighs the benefit for a one-person
+- Sweeping refactors that touch large parts of the codebase. The maintenance cost outweighs the
-  project. (This used to be doubly important because of the upstream cherry-pick path; that path is closed now, but the
+  benefit for a one-person project. (This used to be doubly important because of the upstream
-  rule still holds on its own merits.)
+  cherry-pick path; that path is closed now, but the rule still holds on its own merits.)
-- AI-generated code dropped in without disclosure or human review. See [`docs/AI_DISCLOSURE.md`](docs/AI_DISCLOSURE.md)
+- AI-generated code dropped in without disclosure or human review. See
-  for how I handle AI assistance on my side; I expect comparable transparency from contributors.
+  [`docs/AI_DISCLOSURE.md`](docs/AI_DISCLOSURE.md) for how I handle AI assistance on my side; I
+  expect comparable transparency from contributors.
 
-If you are unsure whether an idea fits, open a feature-request issue first and ask before writing code. I would rather
+If you are unsure whether an idea fits, open a feature-request issue first and ask before writing
-say "no" to a proposal than to a finished pull request.
+code. I would rather say "no" to a proposal than to a finished pull request.
 
 ## Workflow
 
-1. Open an issue (bug or feature request) using the templates under `.github/ISSUE_TEMPLATE/`. Skip this for trivial
+1. Open an issue (bug or feature request) using the templates under `.github/ISSUE_TEMPLATE/`. Skip
-   typos.
+   this for trivial typos.
-2. Fork the repository and branch off `main`. Branch naming is informal; something like `fix/auto-tell-history-empty` or
+2. Fork the repository and branch off `main`. Branch naming is informal; something like
-   `feat/theme-export` is fine.
+   `fix/auto-tell-history-empty` or `feat/theme-export` is fine.
-3. Match the existing code style. The repository ships an `.editorconfig` that VS Code and Rider pick up automatically.
+3. Match the existing code style. The repository ships an `.editorconfig` that VS Code and Rider
-4. Keep commits focused. Several small commits with clear messages are easier to review than one large one.
+   pick up automatically.
-   Squash-on-merge happens at the PR level if needed.
+4. Keep commits focused. Several small commits with clear messages are easier to review than one
+   large one. Squash-on-merge happens at the PR level if needed.
 5. If your change touches user-visible behaviour, update the README and/or the changelog block in
    `HellionChat/HellionChat.yaml` and `repo.json`. I bump the version number myself at release time.
-6. Open the pull request against `main`. The PR template will ask you to summarise the change, the testing you did and
+6. Open the pull request against `main`. The PR template will ask you to summarise the change, the
-   any compatibility notes.
+   testing you did and any compatibility notes.
 
 ## Build and Test
 
 The project targets `net10.0-windows` against Dalamud SDK 15. To build locally you need:
 
 - .NET 10 SDK
-- A working Dalamud dev environment with `DALAMUD_HOME` set (XIVLauncher installed and launched once is the simplest
+- A working Dalamud dev environment with `DALAMUD_HOME` set (XIVLauncher installed and launched once
-  path)
+  is the simplest path)
 - VS Code with the C# Dev Kit, Rider, or Visual Studio
 
 ```bash
@@ -71,11 +77,12 @@ dotnet restore
 dotnet build HellionChat.sln -c Release
 ```
 
-There are currently no tests in `HellionChat.sln`. If you add a test project, point it at the relevant subsystems
+There are currently no tests in `HellionChat.sln`. If you add a test project, point it at the
-(privacy filter, configuration migration, message store) and mention it in the PR.
+relevant subsystems (privacy filter, configuration migration, message store) and mention it in the
+PR.
 
-For a smoke test in-game: build, copy the output into your Dalamud `devPlugins/HellionChat/` directory and load it via
+For a smoke test in-game: build, copy the output into your Dalamud `devPlugins/HellionChat/`
-`/xlplugins`.
+directory and load it via `/xlplugins`.
 
 ## Continuous Integration
 
@@ -86,30 +93,33 @@ Every push and every pull request runs:
 | `build.yml`  | `dotnet build` and `dotnet test` |
 | `codeql.yml` | CodeQL security analysis         |
 
-A pull request will not be merged while either of these is failing. CodeQL findings on changed code need to be
+A pull request will not be merged while either of these is failing. CodeQL findings on changed code
-addressed; pre-existing findings on untouched code are tracked separately.
+need to be addressed; pre-existing findings on untouched code are tracked separately.
 
 ## Translations
 
 Hellion-specific strings live in `HellionChat/Resources/HellionStrings.resx` (English source) and
 `HellionStrings.<lang>.resx` (per-language). These are accepted as direct pull requests.
 
-The upstream Chat 2 strings in `HellionChat/Resources/Language.*.resx` are **not** translated here. They are kept as-is
+The upstream Chat 2 strings in `HellionChat/Resources/Language.*.resx` are **not** translated here.
-from the last upstream sync and remain the work of the Chat 2 Crowdin community. Active cherry-picking from upstream
+They are kept as-is from the last upstream sync and remain the work of the Chat 2 Crowdin community.
-ended in the v1.4.x cycle (see [`docs/UPSTREAM_SYNC.md`](docs/UPSTREAM_SYNC.md)), so future translation improvements to
+Active cherry-picking from upstream ended in the v1.4.x cycle (see
-those upstream strings will not flow into HellionChat automatically anymore. If you have improvements for the original
+[`docs/UPSTREAM_SYNC.md`](docs/UPSTREAM_SYNC.md)), so future translation improvements to those
-Chat 2 strings, please contribute them to [Infiziert90/ChatTwo](https://github.com/Infiziert90/ChatTwo) directly.
+upstream strings will not flow into HellionChat automatically anymore. If you have improvements for
+the original Chat 2 strings, please contribute them to
+[Infiziert90/ChatTwo](https://github.com/Infiziert90/ChatTwo) directly.
 
 ## Licensing
 
 By submitting a pull request you confirm that:
 
-- Your contribution is your own work, or you have the right to contribute it under the project licence.
+- Your contribution is your own work, or you have the right to contribute it under the project
-- You agree that your contribution will be released under the [EUPL-1.2](LICENSE), the same licence as the rest of the
+  licence.
-  project.
+- You agree that your contribution will be released under the [EUPL-1.2](LICENSE), the same licence
+  as the rest of the project.
 
-There is no separate CLA. Forking HellionChat is explicitly permitted under the EUPL-1.2, as with any EUPL-licensed
+There is no separate CLA. Forking HellionChat is explicitly permitted under the EUPL-1.2, as with
-project.
+any EUPL-licensed project.
 
 ## Response Times
 
@@ -119,8 +129,9 @@ project.
 | Discord DM    | `@j.j_kazama`                           |
 | Email         | `kontakt@hellion-media.de`              |
 
-I respond on weekdays during European business hours and take weekends and FFXIV patch days off. A pull request that
+I respond on weekdays during European business hours and take weekends and FFXIV patch days off. A
-sits for a few days has not been ignored. Pinging once after a week is fine; please do not ping daily.
+pull request that sits for a few days has not been ignored. Pinging once after a week is fine;
+please do not ping daily.
 
 ## First-time setup
 
@@ -130,9 +141,10 @@ After cloning, run once:
 ./scripts/setup-hooks.sh
 ```
 
-This wires `core.hooksPath` to `.githooks/`. The pre-push hook runs preflight (versions/manifest/changelog/build).
+This wires `core.hooksPath` to `.githooks/`. The pre-push hook runs preflight
+(versions/manifest/changelog/build).
 
 ### Test suite
 
-The plugin's test suite lives in a separate local repository and is not part of this codebase. If you need access for
+The plugin's test suite lives in a separate local repository and is not part of this codebase. If
-development, contact the maintainer.
+you need access for development, contact the maintainer.

HellionChat/AutoTellTabsService.cs

@@ -1,49 +1,57 @@
 using System;
 using System.Collections.Generic;
 using System.Linq;
+using System.Threading;
 using Dalamud.Game.Text;
 using Dalamud.Game.Text.SeStringHandling;
+using Dalamud.Interface.ImGuiNotification;
 using HellionChat.Code;
 using HellionChat.GameFunctions.Types;
 using HellionChat.Resources;
 using HellionChat.Util;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat;
 
-// Hellion Chat — Auto-Tell-Tabs.
+// Auto-Tell-Tabs: spawns session-only tabs per /tell partner.
-//
+// Subscribes to MessageManager.MessageProcessed and ClientState.Logout.
-// Spawns a session-only tab per /tell partner so a club greeter can track
-// multiple parallel conversations without losing context. Subscribes to
-// MessageManager.MessageProcessed for live tells and to ClientState.Logout
-// for the cleanup pass; everything else hangs off these two entry points.
-//
-// See spec: Hellion Chat Auto-Tell-Tabs Spec (Obsidian vault).
 internal sealed class AutoTellTabsService : IDisposable
 {
     private readonly Plugin _plugin;
     private readonly MessageManager _messageManager;
     private readonly MessageStore _store;
+    private readonly ILogger<AutoTellTabsService> _logger;
     private readonly object _tempTabsLock = new();
 
+    // Hard cap on pinned TempTabs so the sidebar doesn't inflate over years
+    // of usage. Separate pool from AutoTellTabsLimit (15) — pinned tabs live
+    // in their own bucket. A configurable cap is a vault-backlog anchor for
+    // a later cycle if tester feedback demands it.
+    internal const int MaxPinnedTempTabs = 5;
+
     private bool _initialized;
 
-    internal AutoTellTabsService(Plugin plugin, MessageManager messageManager, MessageStore store)
+    internal AutoTellTabsService(
+        Plugin plugin,
+        MessageManager messageManager,
+        MessageStore store,
+        ILogger<AutoTellTabsService> logger
+    )
     {
         _plugin = plugin;
         _messageManager = messageManager;
         _store = store;
+        _logger = logger;
     }
 
-    internal int ActiveTempTabCount
+    // Derived from the tab list on read. Pin/Unpin/Promote/Logout simply
-    {
+    // mutate IsPinned or remove tabs — the count adapts automatically.
-        get
+    // Replaces the F2.1 Interlocked counter because the new pin-state
-        {
+    // transitions are cold-path and don't need lock-free reads.
-            lock (_tempTabsLock)
+    internal int ActiveTempTabCount =>
-            {
+        Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInUnpinnedPool);
-                return Plugin.Config.Tabs.Count(t => t.IsTempTab);
+
-            }
+    internal int PinnedTempTabCount => Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
-        }
-    }
 
     internal void Initialize()
     {
@@ -52,11 +60,53 @@ internal sealed class AutoTellTabsService : IDisposable
             return;
         }
 
+        // Pinned tabs come out of the JSON with TellTarget set but
+        // CurrentChannel reset (NonSerialized). Without re-seeding, the chat
+        // input has no tell-target on the active pinned tab, and the
+        // game-side channel hook only repaints CurrentChannel once the user
+        // triggers a /tell or channel switch.
+        RehydratePinnedTabs();
+
         _messageManager.MessageProcessed += HandleTell;
         Plugin.ClientState.Logout += OnLogout;
         _initialized = true;
     }
 
+    private void RehydratePinnedTabs()
+    {
+        var pinned = Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
+        _logger.LogDebug($"[Pin] Rehydrate scan: {pinned} pinned tab(s) found");
+
+        foreach (var tab in Plugin.Config.Tabs)
+        {
+            if (!TabLifecycleHelpers.IsInPinnedPool(tab))
+                continue;
+
+            if (tab.TellTarget is null || !tab.TellTarget.IsSet())
+            {
+                _logger.LogWarning(
+                    $"[Pin] Pinned tab '{tab.Name}' has no usable TellTarget "
+                        + $"(Name={tab.TellTarget?.Name ?? "<null>"} World={tab.TellTarget?.World ?? 0}). "
+                        + "Chat input on this tab will be empty until the partner sends a tell or you /tell manually."
+                );
+                continue;
+            }
+
+            tab.Channel ??= InputChannel.Tell;
+            tab.CurrentChannel.Channel = InputChannel.Tell;
+            tab.CurrentChannel.TellTarget = tab.TellTarget.Clone();
+
+            // MessageList is NonSerialized so pinned tabs come back empty.
+            // Preload the same history window the spawn path uses so the user
+            // sees the recent conversation, not a blank tab.
+            PreloadHistory(tab, tab.TellTarget.Name, tab.TellTarget.World, Guid.Empty);
+
+            _logger.LogDebug(
+                $"[Pin] Rehydrated '{tab.Name}' -> Tell target {tab.TellTarget.Name}@{tab.TellTarget.World}"
+            );
+        }
+    }
+
     public void Dispose()
     {
         if (!_initialized)
@@ -87,11 +137,8 @@ internal sealed class AutoTellTabsService : IDisposable
         var partner = ExtractTellPartner(message);
         if (partner == null)
         {
-            // Real message without a player payload — e.g. GM tells, which
+            // Diagnostics: helps detect regressions (FFXIV payload changes, new edge cases)
-            // we deliberately skip. The diagnostics make future regressions
+            _logger.LogWarning(
-            // (FFXIV changing tell payload shape, new edge cases) findable
-            // without having to crank up debug logging at the source.
-            Plugin.Log.Warning(
                 $"[AutoTellTabs] Could not extract tell partner. type={message.Code.Type}, "
                     + $"senderChunks={message.Sender.Count}, contentChunks={message.Content.Count}, "
                     + $"senderSourcePayloads={message.SenderSource?.Payloads?.Count ?? 0}, "
@@ -105,9 +152,23 @@ internal sealed class AutoTellTabsService : IDisposable
             var existing = FindTempTab(partner.Value.Name, partner.Value.World);
             if (existing != null)
             {
-                // Tab already exists; Tab.Matches has already routed this
+                // Already routed via MessageManager pipeline. Repair the
-                // message via the MessageManager pipeline (see Task 2 sender
+                // tell-target if the fallback hit a pinned tab whose
-                // filter).
+                // TellTarget didn't survive a previous round-trip — keeps
+                // FindTempTab fast on the next message.
+                if (
+                    existing.IsPinned
+                    && (existing.TellTarget is null || !existing.TellTarget.IsSet())
+                )
+                {
+                    existing.TellTarget = new TellTarget(
+                        partner.Value.Name,
+                        partner.Value.World,
+                        0,
+                        TellReason.Direct
+                    );
+                    _plugin.SaveConfig();
+                }
                 return;
             }
 
@@ -124,10 +185,7 @@ internal sealed class AutoTellTabsService : IDisposable
     {
         if (message.Code.Type == ChatType.TellIncoming)
         {
-            // Incoming tell: the sender is the conversation partner. The
+            // Sender is the partner; check chunks first, then raw SeString as fallback
-            // PlayerPayload normally rides on a chunk's Link slot, but for
-            // some tell types FFXIV only puts it in the raw SeString —
-            // fall back to that before giving up.
             var fromSender =
                 ChunkUtil.TryGetPlayerPayload(message.Sender)
                 ?? ChunkUtil.TryGetPlayerPayload(message.SenderSource);
@@ -138,10 +196,7 @@ internal sealed class AutoTellTabsService : IDisposable
             return null;
         }
 
-        // Outgoing tell: the local player is the sender, the partner shows
+        // Outgoing tell: check content first, then channels's TellTarget as fallback
-        // up either as a payload in the content (for tells typed via the
-        // Chat 2 input bar) or as the channel's tracked tell target (set by
-        // the SetContextTellTarget game hook). Same SeString fallback.
         var fromContent =
             ChunkUtil.TryGetPlayerPayload(message.Content)
             ?? ChunkUtil.TryGetPlayerPayload(message.ContentSource)
@@ -163,25 +218,35 @@ internal sealed class AutoTellTabsService : IDisposable
         return null;
     }
 
-    private Tab? FindTempTab(string name, uint world)
+    private static Tab? FindTempTab(string name, uint world)
     {
-        return Plugin.Config.Tabs.FirstOrDefault(t =>
+        var byTarget = Plugin.Config.Tabs.FirstOrDefault(t =>
             t.IsTempTab
             && t.TellTarget != null
             && string.Equals(t.TellTarget.Name, name, StringComparison.OrdinalIgnoreCase)
             && t.TellTarget.World == world
         );
+        if (byTarget != null)
+            return byTarget;
+
+        // Fallback: match by tab name. Pinned tabs are named via
+        // FormatTabName(player, world) at spawn time, so the name is a
+        // stable secondary key when TellTarget didn't survive a save/load
+        // (older configs from a renamed pin, malformed migrations, etc.).
+        var expectedName = FormatTabName(name, world);
+        return Plugin.Config.Tabs.FirstOrDefault(t =>
+            t.IsTempTab && string.Equals(t.Name, expectedName, StringComparison.OrdinalIgnoreCase)
+        );
     }
 
-    private void DropOldestTempTab()
+    internal void DropOldestTempTab()
     {
-        // Greeted tabs are dropped before un-greeted ones (the user said
+        // Pinned tabs live in their own bucket (MaxPinnedTempTabs) and are
-        // "I'm done with that conversation"), and within each bucket we
+        // never drop candidates. They leave the bucket only via Unpin or
-        // pick the oldest LastActivity. This protects active conversations
+        // PromoteToPermanent.
-        // and unfinished greetings while still freeing up a slot.
         var victim = Plugin
             .Config.Tabs.Select((tab, idx) => (Tab: tab, Index: idx))
-            .Where(t => t.Tab.IsTempTab)
+            .Where(t => TabLifecycleHelpers.IsInUnpinnedPool(t.Tab))
             .OrderByDescending(t => t.Tab.IsGreeted)
             .ThenBy(t => t.Tab.LastActivity)
             .FirstOrDefault();
@@ -191,12 +256,7 @@ internal sealed class AutoTellTabsService : IDisposable
             return;
         }
 
-        // v0.6.1 — if the victim is currently popped out, tear down the
+        // Clean up pop-out window if tab is popped out
-        // matching Popout window first. Otherwise the window stays in
-        // PopOutWindows + WindowSystem and renders empty / re-spawns on the
-        // next AddPopOutsToDraw tick. Latent since pop-outs were introduced;
-        // becomes visible with AutoTellTabsOpenAsPopout where dropping a
-        // popped tab is now a routine code path.
         if (victim.Tab.PopOut)
         {
             var popout = _plugin.ChatLogWindow.ActivePopouts.FirstOrDefault(p =>
@@ -210,8 +270,7 @@ internal sealed class AutoTellTabsService : IDisposable
 
         Plugin.Config.Tabs.RemoveAt(victim.Index);
 
-        // Re-anchor the active tab so the user does not silently end up on
+        // Re-anchor active tab to avoid silent switch when tab is dropped
-        // a different conversation when their tab gets dropped or shifted.
         if (victim.Index <= _plugin.LastTab)
         {
             _plugin.WantedTab = 0;
@@ -222,22 +281,12 @@ internal sealed class AutoTellTabsService : IDisposable
     {
         var tab = BuildTempTab(partner.Name, partner.World);
 
-        // Preload first so the tab opens with chronological history above
+        // Preload history: chronological order with current message already persisted
-        // the current message — and so a slow DB query never causes a
-        // visible "empty tab, then history pops in" effect on screen.
-        // The current message is already persisted in the store by the
-        // time MessageProcessed fires (see MessageManager.cs: UpsertMessage
-        // runs before the event), so we have to exclude it explicitly to
-        // avoid the separator landing below the live tell.
         PreloadHistory(tab, partner.Name, partner.World, currentMessage.Id);
 
         tab.AddMessage(currentMessage, unread: true);
 
-        // Hellion Chat v0.6.1 — opt-in: open new /tell tabs directly as a
+        // Open as pop-out if configured (set before Tabs.Add for next render-tick)
-        // pop-out window. Set BEFORE Tabs.Add so the next render-tick's
-        // AddPopOutsToDraw() sees PopOut=true and spawns the Popout window
-        // alongside the tab going into the list. No SaveConfig() because
-        // auto-tell tabs are IsTempTab (session-only, never persisted).
         if (Plugin.Config.AutoTellTabsOpenAsPopout)
         {
             tab.PopOut = true;
@@ -272,9 +321,7 @@ internal sealed class AutoTellTabsService : IDisposable
         {
             return $"{playerName}@{worldRow.Name}";
         }
-        // World sheet lookup miss is rare (only for FFXIV worlds Dalamud has
+        // Fallback if world lookup misses (rare; only for unseen worlds)
-        // not yet seen). Fall back to the raw RowId so the user still has a
-        // unique, readable label.
         return $"{playerName}@World{worldRowId}";
     }
 
@@ -288,9 +335,7 @@ internal sealed class AutoTellTabsService : IDisposable
 
         try
         {
-            // Pull one extra row because the live tell that triggered this
+            // Pull one extra row: current message is already in store and would eat a preload slot
-            // spawn is already in the store and would otherwise eat one of
-            // the user's preload-budget slots.
             var history = _store.GetTellHistoryWithSender(
                 _messageManager.CurrentContentId,
                 senderName,
@@ -305,23 +350,17 @@ internal sealed class AutoTellTabsService : IDisposable
 
             if (historicMessages.Count == 0)
             {
-                // No prior tells with this player — leave the tab to start
+                // No prior tells; leave tab empty to avoid orphaned "history loaded" marker
-                // empty so the user does not see a "history loaded" marker
-                // sitting alone above the very first message.
                 return;
             }
 
-            // The history list is already oldest-first, so a plain AddPrune
+            // History is oldest-first; add in order for chronological display
-            // loop produces the chronological order the user expects to see
-            // when the tab opens.
             foreach (var message in historicMessages)
             {
                 tab.Messages.AddPrune(message, MessageManager.MessageDisplayLimit);
             }
 
-            // Visible separator between the loaded history and the live
+            // Separator between history and live tell (sorts after history but before current)
-            // tell that triggered this spawn. Goes in last so it sorts
-            // after the historical messages but before the current one.
             tab.Messages.AddPrune(
                 MakeSystemMarker(HellionStrings.AutoTellTabs_HistorySeparator),
                 MessageManager.MessageDisplayLimit
@@ -329,10 +368,8 @@ internal sealed class AutoTellTabsService : IDisposable
         }
         catch (Exception ex)
         {
-            // Non-fatal: the tab still spawns, but the user gets a visible
+            // Non-fatal: tab still spawns with visible error notice instead of silent history loss
-            // notice instead of silently missing history. The error logs
+            _logger.LogError(ex, "[AutoTellTabs] History preload failed");
-            // once with full stack trace for diagnosis.
-            Plugin.Log.Error(ex, "[AutoTellTabs] History preload failed");
             tab.Messages.AddPrune(
                 MakeSystemMarker(HellionStrings.AutoTellTabs_HistoryLoadError),
                 MessageManager.MessageDisplayLimit
@@ -372,9 +409,7 @@ internal sealed class AutoTellTabsService : IDisposable
 
         lock (_tempTabsLock)
         {
-            // Frame-race guard (E5): the sidebar might still render a tab
+            // Guard against frame-race: sidebar might render a tab already removed by LRU or logout
-            // that has already been removed by LRU drop or logout cleanup.
-            // Silently skip the toggle so we don't mutate stale state.
             if (!Plugin.Config.Tabs.Contains(tab))
             {
                 return;
@@ -388,20 +423,16 @@ internal sealed class AutoTellTabsService : IDisposable
     {
         lock (_tempTabsLock)
         {
-            // Snapshot whether the active tab is about to be removed, BEFORE
+            // Pinned TempTabs must survive char-switch — that's the whole point
-            // we mutate the list — index lookups would lie to us afterwards.
+            // of pinning. Only unpinned ones get stripped.
             var lastIndex = _plugin.LastTab;
             var lastIndexValid = lastIndex >= 0 && lastIndex < Plugin.Config.Tabs.Count;
-            var currentWasTempTab = lastIndexValid && Plugin.Config.Tabs[lastIndex].IsTempTab;
+            var currentWasUnpinnedTempTab =
+                lastIndexValid
+                && TabLifecycleHelpers.IsInUnpinnedPool(Plugin.Config.Tabs[lastIndex]);
 
-            // v0.6.1 — symmetric to DropOldestTempTab cleanup: tear down any
-            // popped-out temp tab windows before removing the tabs themselves,
-            // otherwise PopOutWindows + WindowSystem keep ghost entries until
-            // the next plugin reload. Especially relevant once Auto-Pop-Out is
-            // enabled — every logout would otherwise leak as many ghosts as
-            // there were active /tell pop-outs.
             var poppedTempTabIds = Plugin
-                .Config.Tabs.Where(t => t.IsTempTab && t.PopOut)
+                .Config.Tabs.Where(t => TabLifecycleHelpers.IsInUnpinnedPool(t) && t.PopOut)
                 .Select(t => t.Identifier)
                 .ToList();
             if (poppedTempTabIds.Count > 0)
@@ -417,16 +448,76 @@ internal sealed class AutoTellTabsService : IDisposable
                 }
             }
 
-            Plugin.Config.Tabs.RemoveAll(t => t.IsTempTab);
+            Plugin.Config.Tabs.RemoveAll(TabLifecycleHelpers.IsInUnpinnedPool);
 
-            // Force a switch to tab 0 if the active tab was a temp tab OR
+            // Force switch to tab 0 if active tab was an unpinned temp tab or
-            // if drops before the active index pushed LastTab out of range.
+            // index is now out of range. Pinned tabs survive — no switch needed.
-            // Otherwise the user keeps their current persistent tab.
             var stillValid = lastIndex >= 0 && lastIndex < Plugin.Config.Tabs.Count;
-            if (currentWasTempTab || !stillValid)
+            if (currentWasUnpinnedTempTab || !stillValid)
             {
                 _plugin.WantedTab = 0;
             }
         }
     }
+
+    internal bool TryPin(Tab tab)
+    {
+        if (!tab.IsTempTab || tab.IsPinned)
+        {
+            _logger.LogDebug(
+                $"[Pin] TryPin skipped: IsTempTab={tab.IsTempTab} IsPinned={tab.IsPinned}"
+            );
+            return false;
+        }
+
+        if (PinnedTempTabCount >= MaxPinnedTempTabs)
+        {
+            WrapperUtil.AddNotification(
+                string.Format(HellionStrings.PinTab_LimitReached, MaxPinnedTempTabs),
+                NotificationType.Warning
+            );
+            return false;
+        }
+
+        tab.IsPinned = true;
+        _logger.LogDebug(
+            $"[Pin] Pinned tab '{tab.Name}' target={tab.TellTarget?.Name}@{tab.TellTarget?.World}"
+        );
+        _plugin.SaveConfig();
+        return true;
+    }
+
+    internal void Unpin(Tab tab)
+    {
+        if (!tab.IsPinned)
+        {
+            return;
+        }
+
+        // If the unpinned pool is already full, dropping the oldest before
+        // flipping the flag avoids counting the just-unpinned tab as a drop
+        // candidate.
+        if (ActiveTempTabCount >= Plugin.Config.AutoTellTabsLimit)
+        {
+            DropOldestTempTab();
+        }
+
+        tab.IsPinned = false;
+        _logger.LogDebug("[Pin] Unpinned tab '{TabName}'", tab.Name);
+        _plugin.SaveConfig();
+    }
+
+    internal void PromoteToPermanent(Tab tab)
+    {
+        if (!tab.IsTempTab)
+        {
+            return;
+        }
+
+        tab.IsTempTab = false;
+        tab.IsPinned = false;
+        tab.TellTarget = TellTarget.Empty();
+        _logger.LogDebug($"[Pin] Promoted tab '{tab.Name}' to permanent (tell-binding dropped)");
+        _plugin.SaveConfig();
+    }
 }

HellionChat/Branding/BrandingLinks.cs

@@ -1,11 +1,33 @@
-// HellionChat/Branding/BrandingLinks.cs
+using System.Runtime.CompilerServices;
+using HellionChat.Util;
+
 namespace HellionChat.Branding;
 
-// Centralised so a future invite rotation only touches one file. The same
+// Centralised — a future invite/URL rotation only touches this file.
-// link is currently hard-coded in repo.json, README.md, SUPPORT.md,
-// CONTRIBUTORS.md and HellionChat.yaml — those will be migrated to consume
-// this constant in a separate housekeeping sweep
 internal static class BrandingLinks
 {
     public const string HellionForgeDiscordInvite = "https://discord.gg/X9V7Kcv5gR";
+    public const string HellionForgeGitea = "https://gitea.hellion-forge.cloud/Hellion-Forge";
+    public const string HellionChatRepo =
+        "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat";
+    public const string HellionForgeWebsite = "https://hellion-forge.cloud";
+    public const string HellionMediaWebsite = "https://hellion-media.de/de";
+
+    // CA2255 warns against [ModuleInitializer] in library code, but Dalamud
+    // loads the plugin DLL directly so the module-init pass is the right hook
+    // for a one-shot URL sanity check at plugin load.
+#pragma warning disable CA2255
+    [ModuleInitializer]
+#pragma warning restore CA2255
+    internal static void ValidateUrls()
+    {
+        UrlValidation.ValidateAll(
+            nameof(BrandingLinks),
+            HellionForgeDiscordInvite,
+            HellionForgeGitea,
+            HellionChatRepo,
+            HellionForgeWebsite,
+            HellionMediaWebsite
+        );
+    }
 }

HellionChat/Branding/HellionForgeAscii.cs

@@ -0,0 +1,36 @@
+namespace HellionChat.Branding;
+
+// Lazy-loaded provenance art that ships embedded with the DLL. Two
+// variants:
+//
+//   - FoxBanner: the full-size silhouette with "Hellion Forge" inside
+//     the body — rendered in the first-run wizard and the Information
+//     tab as a small "about the makers" anchor.
+//   - FoxMini: the four-line fox-head + curly-tail that gets stitched
+//     into the DI-logger bootstrap line so an xllog reader sees the
+//     same signature on every plugin load.
+//
+// Both files live as embedded resources under HellionChat.Branding.* so
+// the plugin DLL is self-contained — no on-disk asset lookup that could
+// silently miss after a partial deploy.
+internal static class HellionForgeAscii
+{
+    private static string? _foxBanner;
+    private static string? _foxMini;
+
+    public static string FoxBanner => _foxBanner ??= Load("HellionChat.Branding.fox-banner.txt");
+
+    public static string FoxMini => _foxMini ??= Load("HellionChat.Branding.fox-mini.txt");
+
+    private static string Load(string resourceName)
+    {
+        using var stream = typeof(HellionForgeAscii).Assembly.GetManifestResourceStream(
+            resourceName
+        );
+        if (stream is null)
+            return string.Empty;
+
+        using var reader = new StreamReader(stream);
+        return reader.ReadToEnd();
+    }
+}

HellionChat/Chunk.cs

@@ -34,9 +34,7 @@ public abstract class Chunk
             _ => null,
         };
 
-    /// <summary>
+    // Returns basic text for hashing (content for TextChunk, icon name for IconChunk)
-    /// Get some basic text for use in generating hashes.
-    /// </summary>
     internal string StringValue()
     {
         return this switch
@@ -108,9 +106,6 @@ public class TextChunk : Chunk
         Content = content ?? "";
     }
 
-    /// <summary>
-    /// Creates a new TextChunk with identical styling to this one.
-    /// </summary>
     public TextChunk NewWithStyle(ChunkSource source, Payload? link, string content)
     {
         return new TextChunk(source, link, content)
@@ -122,9 +117,6 @@ public class TextChunk : Chunk
         };
     }
 
-    /// <summary>
-    /// Creates a new TextChunk with identical styling to this one.
-    /// </summary>
     public TextChunk NewWithStyle(Chunk chunk, string content)
     {
         return new TextChunk(chunk, content)

HellionChat/Code/ChatSource.cs

@@ -7,36 +7,36 @@ public enum ChatSource : ushort
 {
     None = 0,
 
-    /// <summary>The player currently controlled by the local client.</summary>
+    // The player controlled by this client
     LocalPlayer = 1 << XivChatRelationKind.LocalPlayer,
 
-    /// <summary>A player in the same 4-man or 8-man party as the local player.</summary>
+    // Member of the local party
     PartyMember = 1 << XivChatRelationKind.PartyMember,
 
-    /// <summary>A player in the same alliance raid.</summary>
+    // Member of the alliance
     AllianceMember = 1 << XivChatRelationKind.AllianceMember,
 
-    /// <summary>A player not in the local player's party or alliance.</summary>
+    // Other player
     OtherPlayer = 1 << XivChatRelationKind.OtherPlayer,
 
-    /// <summary>An enemy entity that is currently in combat with the player or party.</summary>
+    // Enemy in combat
     EngagedEnemy = 1 << XivChatRelationKind.EngagedEnemy,
 
-    /// <summary>An enemy entity that is not yet in combat or claimed.</summary>
+    // Enemy out of combat
     UnengagedEnemy = 1 << XivChatRelationKind.UnengagedEnemy,
 
-    /// <summary>An NPC that is friendly or neutral to the player (e.g., EventNPCs).</summary>
+    // Friendly NPC
     FriendlyNpc = 1 << XivChatRelationKind.FriendlyNpc,
 
-    /// <summary>A pet (Summoner/Scholar) or companion (Chocobo) belonging to the local player.</summary>
+    // Own pet or companion
     PetOrCompanion = 1 << XivChatRelationKind.PetOrCompanion,
 
-    /// <summary>A pet or companion belonging to a member of the local player's party.</summary>
+    // Pet or companion of party members
     PetOrCompanionParty = 1 << XivChatRelationKind.PetOrCompanionParty,
 
-    /// <summary>A pet or companion belonging to a member of the alliance.</summary>
+    // Pet or companion of alliance members
     PetOrCompanionAlliance = 1 << XivChatRelationKind.PetOrCompanionAlliance,
 
-    /// <summary>A pet or companion belonging to a player not in the party or alliance.</summary>
+    // Pet or companion of other players
     PetOrCompanionOther = 1 << XivChatRelationKind.PetOrCompanionOther,
 }

HellionChat/Commands.cs

@@ -1,10 +1,17 @@
 using Dalamud.Game.Command;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat;
 
 internal sealed class Commands : IDisposable
 {
     private readonly Dictionary<string, CommandWrapper> Registered = [];
+    private readonly ILogger<Commands> _logger;
+
+    public Commands(ILogger<Commands> logger)
+    {
+        _logger = logger;
+    }
 
     public void Dispose()
     {
@@ -52,7 +59,7 @@ internal sealed class Commands : IDisposable
     {
         if (!Registered.TryGetValue(command, out var wrapper))
         {
-            Plugin.Log.Warning($"Missing registration for command {command}");
+            _logger.LogWarning($"Missing registration for command {command}");
             return;
         }
 
@@ -62,7 +69,7 @@ internal sealed class Commands : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, $"Error while executing command {command}");
+            _logger.LogError(ex, $"Error while executing command {command}");
         }
     }
 }

HellionChat/Configuration.cs

@@ -34,38 +34,41 @@ public class ConfigKeyBind
 [Serializable]
 public class Configuration : IPluginConfiguration
 {
-    private const int LatestVersion = 16;
+    private const int LatestVersion = 17;
 
     public int Version { get; set; } = LatestVersion;
 
-    // v1.1.0 — Theme-Engine. Slug-basiert; ThemeRegistry liefert das Objekt.
+    // Slug-based; ThemeRegistry resolves the object at runtime.
     public string Theme = "hellion-arctic";
 
-    // v1.1.0 — Globale Window-Opacity, theme-übergreifend. Migration aus
+    // Global window opacity, applied across all themes.
-    // HellionThemeWindowOpacity beim Bump v13 → v14.
     public float WindowOpacity = 0.85f;
 
-    // v1.1.0 — Felder für künftige UI-Toggles (v1.2.0 / v1.3.0). Werden
+    // Reserved for future UI toggles; pre-declared to avoid a migration later.
-    // vorab angelegt, damit später keine Migration nötig ist.
     public bool ReduceMotion;
 
-    // v1.2.1 — Default geflippt von false → true. Card-Rows-Layout aus
+    // v1.2.1: default flipped false → true. Compact single-line layout is
-    // v1.2.0 wurde als zu dicht empfunden; Single-Line `[HH:mm] Sender:
+    // more readable than the card-rows layout introduced in v1.2.0.
-    // Text` ist besser lesbar und platzsparender. Bestand-User mit aktiv
-    // false werden durch die v15→v16-Migration auf den neuen Default
-    // gehoben (Heuristik: wer in v1.2.0 false hatte, hatte den damals
-    // neu eingeführten Default — kaum jemand hat aktiv abgeschaltet).
     public bool UseCompactDensity = true;
 
-    // Hellion Chat — Privacy filter (DSGVO Art. 25 Privacy by Default).
+    // Privacy by Default master switch. Set false to restore upstream behaviour.
-    // Master-switch defaults to true; set false to restore upstream behavior.
     public bool PrivacyFilterEnabled = true;
 
     // Empty set means the migration has not run yet — see Plugin.cs v6→v7.
     public HashSet<ChatType> PrivacyPersistChannels = [];
 
-    // Failsafe for ChatTypes added by future FFXIV patches we don't know about.
+    // Failsafe for ChatTypes added by future FFXIV patches. New configs default
-    public bool PrivacyPersistUnknownChannels;
+    // to the failsafe via PrivacyDefaults; existing configs keep their saved
+    // choice because the deserializer overrides this initializer.
+    public bool PrivacyPersistUnknownChannels = Privacy
+        .PrivacyDefaults
+        .DefaultPersistUnknownChannels;
+
+    // F3.2: dedup unknown-ChatType warnings so a chatty filter doesn't spam
+    // the log every frame. NonSerialized so the warning fires once per
+    // runtime, not once-ever-per-install.
+    [NonSerialized]
+    private readonly HashSet<ChatType> _warnedUnknownChannels = new();
 
     public bool IsAllowedForStorage(ChatType type)
     {
@@ -73,82 +76,61 @@ public class Configuration : IPluginConfiguration
             return true;
         if (PrivacyPersistChannels.Contains(type))
             return true;
+
+        // F3.2: log first occurrence of a ChatType the running build doesn't
+        // recognise — i.e. one a future FFXIV patch may have added. Known
+        // types the user opted out of are routed through the failsafe
+        // silently, like before.
+        if (!Enum.IsDefined(typeof(ChatType), type) && _warnedUnknownChannels.Add(type))
+        {
+            Plugin.LogProxy.Warning(
+                "PrivacyFilter: unrecognised ChatType {Type} — falling back to PrivacyPersistUnknownChannels={Persist}.",
+                type,
+                PrivacyPersistUnknownChannels
+            );
+        }
+
         return PrivacyPersistUnknownChannels;
     }
 
-    // Hellion Chat — Message retention (GDPR data minimization, time axis).
+    // Retention master switch defaults to false — plugin will not delete
-    // Master switch defaults to false; the plugin will not delete history
+    // history until the user explicitly opts in.
-    // until the user explicitly opts in.
     public bool RetentionEnabled;
     public int RetentionDefaultDays = 30;
     public Dictionary<ChatType, int> RetentionPerChannelDays = [];
     public DateTimeOffset RetentionLastRunAt = DateTimeOffset.MinValue;
-
-    // Hellion Chat first-run wizard — opens once on a fresh install. Existing
-    // ChatTwo users skip it because the v6→v7 migration sets the flag.
     public bool FirstRunCompleted;
 
-    // Use the bundled Exo 2 font (OFL-1.1) for the regular plugin font
+    // Tracks which plugin version last surfaced the first-run wizard.
-    // instead of whatever GlobalFontV2.FontId points at. Default ON so a
+    // When the running version is newer than this, Plugin.LoadAsync
-    // fresh install gets the Hellion typography out-of-the-box; flip OFF
+    // re-opens the wizard once so existing users see major UX reworks
-    // to fall back to the user's chosen system or Dalamud font.
+    // (e.g. the v1.5.2 multi-step rewrite). Skip path and Finish both
-    public bool UseHellionFont = true;
+    // set FirstRunCompleted = true on close, so the wizard only fires
+    // once per version bump even if the user dismisses it.
+    public string WizardLastShownVersion = string.Empty;
 
-    // Cycle 1 of the plugin-integration roadmap. When Honorific is installed
+    public bool UseHellionFont = true;
-    // and reports a custom title, render it in the chat header above the
-    // message log. Auto-hides regardless when Honorific is missing or the
-    // active title is original/empty, so leaving this on is safe even for
-    // users who don't run Honorific.
     public bool ShowHonorificTitleInHeader = true;
 
-    // Hellion Chat — Auto-Tell-Tabs. When enabled, an incoming or outgoing
+    // v1.4.7 opt-in: renders the Honorific glow outline when the title carries
-    // /tell spawns a session-only tab dedicated to that conversation
+    // a Glow colour. Default OFF — keeps v1.4.6 visuals untouched for users
-    // partner. See spec: Hellion Chat Auto-Tell-Tabs Spec (Obsidian).
+    // who don't care, and dodges the per-frame DrawList overhead on low-end
+    // hardware. Gradient (Color3 / GradientColourSet) is parsed but rendered
+    // as the primary Color until a later cycle ports the animation.
+    public bool ShowHonorificGlow;
     public bool EnableAutoTellTabs = true;
-
-    // Hard cap on simultaneously open auto tell tabs. Range enforced by the
-    // settings slider (1–50). LRU drop favors greeted tabs first.
     public int AutoTellTabsLimit = 15;
-
-    // When true the sidebar shows only a thin separator before the temp
-    // tabs; when false a section header "Active Tells (n)" is rendered.
     public bool AutoTellTabsCompactDisplay;
-
-    // Number of prior tells to preload from the message store when an
-    // auto tell tab is spawned. Range 0–100; 0 disables preload.
     public int AutoTellTabsHistoryPreload = 20;
 
-    // Show the greeter "marked-as-greeted" toggle button next to each
+    // Sidebar width in pixels. Default 44 mirrors the icon-only layout from
-    // temp tab and dim the tab name when set. Off by default because the
+    // v1.2.0; users can widen up to 160 to fit a section-header line like
-    // workflow is specific to club-greeter use cases — most users just
+    // "Active Tells (3)" without truncation.
-    // want the auto tabs themselves without the extra UI affordance.
+    public int SidebarWidth = 44;
     public bool AutoTellTabsShowGreetedToggle;
-
-    // Hellion Chat — One-Time-Hint-Banner that introduces the v0.6.0 pop-out
-    // input feature. Set to true once the user dismisses the banner from a
-    // pop-out window; never reset after that.
     public bool SeenPopOutInputHint;
-
-    // Hellion Chat — v0.6.0 master switch for the pop-out input bar.
-    // Global on purpose: per-tab makes no sense for Auto-Tell-Tabs which
-    // are session-only and would force the user to re-enable it for every
-    // new conversation. Default flipped to ON in v0.6.1 (was OFF in v0.6.0)
-    // because tester feedback called the manual toggle "umständlich, wirkt
-    // unfertig". v11 → v12 migration applies the same flip to existing users.
     public bool PopOutInputEnabled = true;
-
-    // Hellion Chat — v0.6.1 One-Time-Hint-Banner that introduces the
-    // chat-header pop-out toolbar button and reminds about the pop-out
-    // input default flip. Set to true once the user dismisses the banner
-    // from the main chat window; never reset after that.
     public bool SeenPopOutHeaderHint;
-
-    // Hellion Chat — v0.6.1 opt-in: when true, AutoTellTabsService.SpawnTempTab
-    // sets tab.PopOut = true on every new auto-tell tab so the conversation
-    // pops out as its own window directly. Closing the pop-out returns the
-    // tab to the sidebar via the standard Popout.OnClose() flow. Default OFF
-    // because the existing sidebar workflow is what most users (especially
-    // club greeters tracking many parallel tells) expect by default.
     public bool AutoTellTabsOpenAsPopout;
 
     public int GetRetentionDays(ChatType type)
@@ -167,10 +149,7 @@ public class Configuration : IPluginConfiguration
     public bool HideInLoadingScreens;
     public bool HideInBattle;
 
-    // v1.2.1 — Default geflippt false → true. Hellion-UI im NG+-Menü
+    // v1.2.1: default flipped false → true for consistency with other hide defaults.
-    // versteckt zu halten ist konsistent mit den anderen Hide-Defaults
-    // (Cutscenes, Logged-out, UI-Hidden) — UI-out-of-the-way bei Story-
-    // Sequenzen.
     public bool HideInNewGamePlusMenu = true;
     public bool HideWhenInactive;
     public int InactivityHideTimeout = 10;
@@ -186,18 +165,8 @@ public class Configuration : IPluginConfiguration
     public bool NativeItemTooltips = true;
     public bool PrettierTimestamps = true;
     public bool MoreCompactPretty;
-
-    // v1.2.1 — Default geflippt false → true. Wiederholte Zeitstempel
-    // innerhalb derselben Minute lesen sich als Rauschen; ein einziger
-    // Timestamp pro Minute reicht aus um die Konversation zu verorten.
     public bool HideSameTimestamps = true;
     public bool ShowNoviceNetwork;
-
-    // Hellion Chat — vertical sidebar tab layout reads better than the
-    // horizontal tab strip in the company of Auto-Tell-Tabs (a club
-    // greeter typically tracks 5–15 simultaneous conversations). Bestand
-    // users keep their saved value untouched — only fresh installs pick
-    // up the new default.
     public bool SidebarTabView = true;
     public bool PrintChangelog = true;
     public bool OnlyPreviewIf;
@@ -216,24 +185,13 @@ public class Configuration : IPluginConfiguration
     public bool SortAutoTranslate;
     public bool CollapseDuplicateMessages;
     public bool CollapseKeepUniqueLinks;
+    public bool SymbolPickerEnabled = true;
     public bool PlaySounds = true;
     public bool KeepInputFocus = true;
-
-    // v1.2.1 — Default gesenkt 5000 → 2500. 5000 ist auf Mid-Range-
-    // Hardware bei langen Sessions spürbar langsamer (Card-Layout
-    // re-Layout pro Frame), 2500 deckt eine typische Stunde Chat ab
-    // und bleibt smooth. User die mehr brauchen können bis 10000 hoch.
     public int MaxLinesToRender = 2_500; // 1-10000
-
-    // Default ON to match a German / European 24h locale. The
-    // ChatLogWindow.cs format-flip in v0.5.1 honours this strictly via
-    // CultureInfo.InvariantCulture so the result is consistent across
-    // host locales.
     public bool Use24HourClock = true;
-
     public bool ShowEmotes = true;
     public HashSet<string> BlockedEmotes = [];
-
     public bool FontsEnabled = true;
     public ExtraGlyphRanges ExtraGlyphRanges = 0;
     public float FontSizeV2 = 12.75f;
@@ -258,12 +216,6 @@ public class Configuration : IPluginConfiguration
 
     public float TooltipOffset;
 
-    // v1.2.1 — Default-Chat-Farben sind das Hellion-Brand-Preset. Der
-    // First-Run-Wizard bietet keine Theme-/Preset-Wahl an, daher kriegen
-    // neue User die Hellion-Brand-Farben out-of-the-box (Cyan-Familie für
-    // Standard/Tell, Ember/Warning für laute Channels). Bestand-User mit
-    // leerem ChatColours-Dict werden durch die v15→v16-Migration auf das
-    // Preset gehoben; User die bereits Custom-Farben haben, bleiben.
     public Dictionary<ChatType, uint> ChatColours = BuildDefaultChatColours();
 
     private static Dictionary<ChatType, uint> BuildDefaultChatColours()
@@ -328,14 +280,13 @@ public class Configuration : IPluginConfiguration
         SortAutoTranslate = other.SortAutoTranslate;
         CollapseDuplicateMessages = other.CollapseDuplicateMessages;
         CollapseKeepUniqueLinks = other.CollapseKeepUniqueLinks;
+        SymbolPickerEnabled = other.SymbolPickerEnabled;
         PlaySounds = other.PlaySounds;
         KeepInputFocus = other.KeepInputFocus;
         MaxLinesToRender = other.MaxLinesToRender;
         Use24HourClock = other.Use24HourClock;
         ShowEmotes = other.ShowEmotes;
-        // Deep-copy the set so the live and mutable Configuration instances don't share state
+        // Deep-copy so settings window edits don't leak into live config before Save.
-        // — a HashSet reference assignment would cause edits in the settings window to leak
-        // into the live config before the user clicks Save.
         BlockedEmotes = new HashSet<string>(other.BlockedEmotes);
         FontsEnabled = other.FontsEnabled;
         ItalicEnabled = other.ItalicEnabled;
@@ -349,28 +300,21 @@ public class Configuration : IPluginConfiguration
         ChatColours = other.ChatColours.ToDictionary(entry => entry.Key, entry => entry.Value);
         ColorSelectedInputChannelButton = other.ColorSelectedInputChannelButton;
 
-        // Hellion Chat — Auto-Tell-Tabs are session-only and therefore
+        // Keep live temp tabs alive across UpdateFrom — a settings save must
-        // never present in a disk-loaded copy. Keep the live temp tabs of
+        // not destroy open tell conversations. Pinned TempTabs are persistent
-        // *this* configuration alive across an UpdateFrom so a settings
+        // and come through `other` like regular tabs; unpinned TempTabs are
-        // save (or sidebar-mode toggle) does not silently destroy the
+        // session-only and held from the local state. For persistent tabs
-        // user's open tell conversations.
+        // (incl. pinned), capture live runtime state by Identifier and restore
-        //
+        // it onto the freshly cloned tabs — CurrentChannel is critical because
-        // For persistent tabs we go through Tab.Clone() which intentionally
+        // the user may have switched channel in-game between settings-open
-        // does NOT copy the NonSerialized Messages list (avoids shared
+        // and settings-save, and we'd otherwise overwrite that with the
-        // mutable state on disk-load). On a settings save that means the
+        // settings-time snapshot.
-        // chat history for every persistent tab would be wiped — bug
+        var liveUnpinnedTempTabs = Tabs.Where(TabLifecycleHelpers.IsInUnpinnedPool).ToList();
-        // reported by Flo 2026-05-05. We work around it by capturing the
+        var livePersistentSession = Tabs.Where(t => !TabLifecycleHelpers.IsInUnpinnedPool(t))
-        // live MessageList (and LastSendUnread counter) by Identifier
+            .ToDictionary(t => t.Identifier, t => (t.Messages, t.LastSendUnread, t.CurrentChannel));
-        // before the replace, then restoring it onto the freshly cloned
-        // tabs whose Identifier survives Tab.Clone(). New tabs added in
-        // settings get a fresh empty MessageList; deleted tabs lose their
-        // history (intended).
-        var liveTempTabs = Tabs.Where(t => t.IsTempTab).ToList();
-        var livePersistentSession = Tabs.Where(t => !t.IsTempTab)
-            .ToDictionary(t => t.Identifier, t => (t.Messages, t.LastSendUnread));
 
         Tabs = other
-            .Tabs.Where(t => !t.IsTempTab)
+            .Tabs.Where(t => !t.IsTempTab || t.IsPinned)
             .Select(t =>
             {
                 var clone = t.Clone();
@@ -378,11 +322,12 @@ public class Configuration : IPluginConfiguration
                 {
                     clone.Messages = live.Messages;
                     clone.LastSendUnread = live.LastSendUnread;
+                    clone.CurrentChannel = live.CurrentChannel;
                 }
                 return clone;
             })
             .ToList();
-        Tabs.AddRange(liveTempTabs);
+        Tabs.AddRange(liveUnpinnedTempTabs);
 
         ChatTabForward = other.ChatTabForward;
         ChatTabBackward = other.ChatTabBackward;
@@ -400,8 +345,10 @@ public class Configuration : IPluginConfiguration
         RetentionLastRunAt = other.RetentionLastRunAt;
 
         FirstRunCompleted = other.FirstRunCompleted;
+        WizardLastShownVersion = other.WizardLastShownVersion;
         UseHellionFont = other.UseHellionFont;
         ShowHonorificTitleInHeader = other.ShowHonorificTitleInHeader;
+        ShowHonorificGlow = other.ShowHonorificGlow;
 
         // v1.1.0 theme engine fields
         Theme = other.Theme;
@@ -413,6 +360,7 @@ public class Configuration : IPluginConfiguration
         AutoTellTabsLimit = other.AutoTellTabsLimit;
         AutoTellTabsCompactDisplay = other.AutoTellTabsCompactDisplay;
         AutoTellTabsHistoryPreload = other.AutoTellTabsHistoryPreload;
+        SidebarWidth = other.SidebarWidth;
         AutoTellTabsShowGreetedToggle = other.AutoTellTabsShowGreetedToggle;
 
         SeenPopOutInputHint = other.SeenPopOutInputHint;
@@ -456,9 +404,7 @@ public class Tab
 {
     public string Name = Language.Tab_DefaultName;
 
-    // v1.2.0 — optionaler FontAwesome-Glyph-Name. Null bedeutet:
+    // Optional FontAwesome glyph name; null falls back to TabIconMapping default.
-    // Default-Mapping aus TabIconMapping greift (basiert auf Tab-Name).
-    // User können hier per Settings → Tabs einen eigenen Glyph setzen.
     public string? Icon = null;
 
     [Obsolete("Removed in favor of SelectedChannels")]
@@ -489,6 +435,11 @@ public class Tab
     public bool HideWhenInactive;
 
     public bool IsTempTab;
+
+    // Pinned TempTabs survive plugin reload and logout — tester feedback from
+    // Jin (v1.4.7). Pinned tabs live in their own pool (MaxPinnedTempTabs)
+    // separate from the AutoTellTabsLimit bucket.
+    public bool IsPinned;
     public bool AllSenderMessages;
     public TellTarget TellTarget = TellTarget.Empty();
 
@@ -510,15 +461,12 @@ public class Tab
     [NonSerialized]
     public Guid Identifier = Guid.NewGuid();
 
-    // Hellion Chat — Auto-Tell-Tabs greeted flag. Toggled manually from the
+    // Session-only greeted flag for club-greeter workflows.
-    // sidebar to mark a tell partner as already greeted in the current
-    // session. NonSerialized because the temp tab itself is session-only.
     [NonSerialized]
     public bool IsGreeted;
 
-    // v1.4.2 — TabTintCache uses separate validation keys per cache so a
+    // Separate validation keys per cache so TellTarget changes don't
-    // TellTarget change picked up by GetTint can't strand GetIcon (or vice
+    // cause GetTint and GetIcon to strand each other with stale entries.
-    // versa) with a stale entry that looks fresh on the shared key.
     [NonSerialized]
     internal string? _cachedTintTellName;
 
@@ -540,17 +488,12 @@ public class Tab
     public bool Matches(Message message)
     {
         if (!message.Matches(SelectedChannels, ExtraChatAll, ExtraChatChannels))
-        {
             return false;
-        }
 
-        // Auto-tell temp tabs are bound to a single conversation partner;
+        // Temp tabs are bound to a single conversation partner — other tells
-        // every other tell that matches the channel filter must NOT land
+        // matching the channel filter must not land here.
-        // here, otherwise all temp tabs would mirror "Tell Exclusive".
         if (IsTempTab && TellTarget?.IsSet() == true)
-        {
             return ChunkUtil.MatchesSender(message, TellTarget.Name, TellTarget.World);
-        }
 
         return true;
     }
@@ -593,7 +536,7 @@ public class Tab
             Opacity = Opacity,
             Identifier = Identifier,
             InputDisabled = InputDisabled,
-            CurrentChannel = CurrentChannel,
+            CurrentChannel = CurrentChannel.Clone(),
             CanMove = CanMove,
             CanResize = CanResize,
             IndependentHide = IndependentHide,
@@ -604,16 +547,14 @@ public class Tab
             HideInBattle = HideInBattle,
             HideWhenInactive = HideWhenInactive,
             IsTempTab = IsTempTab,
+            IsPinned = IsPinned,
             AllSenderMessages = AllSenderMessages,
-            TellTarget = TellTarget.From(TellTarget),
+            TellTarget = TellTarget.Clone(),
             IsGreeted = IsGreeted,
         };
     }
 
-    /// <summary>
+    /// Ordered message list with duplicate ID tracking, sorting and mutex protection.
-    /// MessageList provides an ordered list of messages with duplicate ID
-    /// tracking, sorting and mutex protection.
-    /// </summary>
     public class MessageList
     {
         private readonly SemaphoreSlim LockSlim = new(1, 1);
@@ -701,10 +642,7 @@ public class Tab
             }
         }
 
-        /// <summary>
+        /// Current message count. Lock-per-read is acceptable for 1×/sec status bar polling.
-        /// Aktuelle Anzahl der gespeicherten Messages. Lock-acquire pro Read
-        /// ist OK für 1×/sec Status-Bar-Polling (v1.2.0).
-        /// </summary>
         public int Count
         {
             get
@@ -721,9 +659,7 @@ public class Tab
             }
         }
 
-        /// <summary>
+        /// Returns an array copy of the message list for usage outside of main thread.
-        /// Returns an array copy of the message list for usage outside of main thread
-        /// </summary>
         public async Task<Message[]> GetCopy(int millisecondsTimeout = -1)
         {
             await LockSlim.WaitAsync(millisecondsTimeout);
@@ -737,10 +673,7 @@ public class Tab
             }
         }
 
-        /// <summary>
+        /// Returns a read-only list while holding a reader lock. Use with a using statement.
-        /// GetReadOnly returns a read-only list of messages while holding a
-        /// reader lock. The list should be used with a using statement.
-        /// </summary>
         public RLockedMessageList GetReadOnly(int millisecondsTimeout = -1)
         {
             LockSlim.Wait(millisecondsTimeout);
@@ -794,6 +727,29 @@ public class UsedChannel
     {
         Channel = channel;
     }
+
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Deep-clone the UsedChannel so Tab.Clone() no longer shares
+    //   channel state (incl. TellTarget) with its origin Tab. Previously
+    //   a reference copy: PopOut and Temp tabs mutated each other.
+    // - Name is intentionally a reference copy (matches upstream); it
+    //   gets reassigned on every channel switch anyway.
+    // TEST-MIRROR: ../../Hellion Build test/_Helpers/UsedChannelCloneTests.cs
+    // ---------------------------------------------------------------
+    public UsedChannel Clone()
+    {
+        return new UsedChannel
+        {
+            Channel = Channel,
+            Name = Name,
+            TellTarget = TellTarget?.Clone(),
+
+            UseTempChannel = UseTempChannel,
+            TempChannel = TempChannel,
+            TempTellTarget = TempTellTarget?.Clone(),
+        };
+    }
 }
 
 [Serializable]

HellionChat/EmoteCache.cs

@@ -79,7 +79,7 @@ public static class EmoteCache
         Done,
     }
 
-    // All of this data is uninitalized while State is not `LoadingState.Done`
+    // All fields below are uninitialised while State != Done.
     public static LoadingState State = LoadingState.Unloaded;
 
     private static readonly Dictionary<string, Emote> Cache = new();
@@ -87,15 +87,11 @@ public static class EmoteCache
 
     public static string[] SortedCodeArray = [];
 
-    // Plugin-scoped cancellation source for in-flight emote loads. Dispose
+    // Cancelled on Dispose to stop in-flight downloads; replaced on re-enable.
-    // cancels every running download/texture-create so the workers don't
-    // touch a torn-down TextureProvider on plugin reload. Replaced with a
-    // fresh source on the next LoadData() call so a re-enable still works.
     private static CancellationTokenSource Cts = new();
     internal static CancellationToken Token => Cts.Token;
 
-    // Drain target for in-flight loads on Dispose; without this an orphan
+    // Tracks in-flight loads so Dispose can drain them before teardown.
-    // continuation could still write to a torn-down Texture/Frames field.
     private static readonly ConcurrentBag<Task> PendingLoads = new();
 
     internal static void TrackLoad(Task loadTask, string emoteCode)
@@ -105,7 +101,10 @@ public static class EmoteCache
                 t =>
                 {
                     if (t.IsFaulted)
-                        Plugin.Log.Error(t.Exception!, $"EmoteCache load failed for {emoteCode}");
+                        Plugin.LogProxy.Error(
+                            t.Exception!,
+                            $"EmoteCache load failed for {emoteCode}"
+                        );
                 },
                 TaskScheduler.Default
             )
@@ -117,8 +116,7 @@ public static class EmoteCache
         if (State is not LoadingState.Unloaded)
             return;
 
-        // Refresh the CTS in case Dispose was called and we're being re-enabled
+        // Reset CTS if Dispose was called and the plugin is being re-enabled.
-        // in the same process (Dalamud /xlplugins toggle).
         if (Cts.IsCancellationRequested)
             Cts = new CancellationTokenSource();
 
@@ -140,11 +138,8 @@ public static class EmoteCache
                 var topList = await top.Content.ReadAsStringAsync(ct);
 
                 var jsonList = JsonSerializer.Deserialize<List<Top100>>(topList)!;
-                // BetterTTV occasionally returns entries with a null Code; the
+                // BetterTTV occasionally returns entries with a null Code;
-                // upstream code passed those straight into Dictionary.TryAdd
+                // skip them so a single bad row doesn't break the whole cache.
-                // and tripped ArgumentNullException, killing the whole emote
-                // load. Skip them defensively so a single bad row no longer
-                // breaks the cache for everyone else.
                 foreach (var emote in jsonList)
                     if (
                         !string.IsNullOrEmpty(emote.Emote.Code)
@@ -160,18 +155,13 @@ public static class EmoteCache
         }
         catch (OperationCanceledException)
         {
-            // Plugin disposed while the cache was loading; leave State on
+            // Plugin disposed mid-load; State stays on Loading so re-enable can retry.
-            // Loading so a subsequent re-enable can re-issue LoadData with
-            // a fresh CTS (handled above).
         }
         catch (Exception ex)
         {
-            // Reset to Unloaded so a later trigger (e.g. the user reopening
+            // Reset to Unloaded so a later trigger can retry without a plugin reload.
-            // the Emotes tab after the network recovers) can retry. Without
-            // this the State stays on Loading and the early-out at the top
-            // of LoadData blocks every further attempt until plugin reload.
             State = LoadingState.Unloaded;
-            Plugin.Log.Error(ex, "BetterTTV cache wasn't initialized");
+            Plugin.LogProxy.Error(ex, "BetterTTV cache wasn't initialized");
         }
     }
 
@@ -227,7 +217,7 @@ public static class EmoteCache
         }
         catch
         {
-            Plugin.Log.Error("Failed to convert");
+            Plugin.LogProxy.Error("Failed to convert");
             return null;
         }
     }
@@ -248,11 +238,8 @@ public static class EmoteCache
 
         internal async Task<byte[]> LoadAsync(Emote emote, CancellationToken ct)
         {
-            // BetterTTV-supplied Id and ImageType are interpolated straight
+            // Path-traversal guard: resolve and verify the candidate path stays
-            // into the filename. HTTPS protects the wire, but a compromised
+            // inside the cache directory before reading or writing.
-            // upstream could still hand us "../foo" and write into the
-            // pluginConfigs root (or worse). Resolve the candidate path and
-            // refuse anything that escapes the cache directory.
             var dir = Path.GetFullPath(
                 Path.Join(Plugin.Interface.ConfigDirectory.FullName, "EmoteCacheV1")
             );
@@ -320,7 +307,7 @@ public static class EmoteCache
             catch (Exception ex)
             {
                 Failed = true;
-                Plugin.Log.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
+                Plugin.LogProxy.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
             }
         }
 
@@ -397,7 +384,7 @@ public static class EmoteCache
 
                     var delay = frame.Metadata.GetGifMetadata().FrameDelay / 100f;
 
-                    // Follows the same pattern as browsers, anything under 0.02s delay will be rounded up to 0.1s
+                    // Match browser behaviour: anything under 20ms rounds up to 100ms.
                     if (delay < 0.02f)
                         delay = 0.1f;
 
@@ -416,8 +403,7 @@ public static class EmoteCache
             }
             catch (OperationCanceledException)
             {
-                // Plugin disposed mid-load; partial frames are released by
+                // Plugin disposed mid-load; release any partial frames.
-                // InnerDispose on the next dispose pass.
                 foreach (var f in Frames)
                     f.Texture.Dispose();
                 Frames = [];
@@ -425,7 +411,7 @@ public static class EmoteCache
             catch (Exception ex)
             {
                 Failed = true;
-                Plugin.Log.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
+                Plugin.LogProxy.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
             }
         }
     }

HellionChat/Export/MessageExporter.cs

@@ -32,12 +32,8 @@ internal static class ExportFormatExt
         };
 }
 
-/// <summary>
+// Serializes message snapshots to Markdown, JSON, or CSV.
-/// Serializes message snapshots into Markdown, JSON, or CSV. The caller is
+// Caller handles pre-filtering except sender substring, which requires deserialized SeString.TextValue.
-/// expected to filter the input enumerable; this class only handles
-/// formatting and writes to the supplied path. Sender substring filtering
-/// happens here because it requires deserialized SeString.TextValue.
-/// </summary>
 internal static class MessageExporter
 {
     internal record FilterDescription(
@@ -100,6 +96,7 @@ internal static class MessageExporter
             var chatType = (ChatType)(ushort)m.Code.Type;
             var sender = m.SenderSource.TextValue.Trim().Trim('<', '>', '[', ']', ':').Trim();
             var content = m.ContentSource.TextValue;
+
             if (string.IsNullOrEmpty(sender))
                 w.WriteLine($"**[{localDate:HH:mm}] {chatType}:** {content}");
             else
@@ -132,8 +129,7 @@ internal static class MessageExporter
         FilterDescription filter
     )
     {
-        // Manual JSON to avoid pulling in System.Text.Json policy choices.
+        // Manual JSON to avoid System.Text.Json policy coupling.
-        // Output is a single object with metadata and an array of messages.
         w.Write("{\n  \"exported_at\": \"");
         w.Write(DateTimeOffset.UtcNow.ToString("O", CultureInfo.InvariantCulture));
         w.Write("\",\n  \"plugin\": \"Hellion Chat\",\n");
@@ -194,7 +190,7 @@ internal static class MessageExporter
         FilterDescription filter
     )
     {
-        // Header line always written so empty exports are still importable.
+        // Header always written so empty exports remain importable.
         w.WriteLine("Date,ChatType,ChatTypeName,Sender,Content,Receiver,ContentId");
         var count = 0;
         foreach (var m in messages)

HellionChat/FontManager.cs

@@ -1,23 +1,44 @@
-using Dalamud;
+using Dalamud;
 using Dalamud.Bindings.ImGui;
 using Dalamud.Interface;
 using Dalamud.Interface.FontIdentifier;
 using Dalamud.Interface.GameFonts;
 using Dalamud.Interface.ManagedFontAtlas;
 using Dalamud.Interface.Utility;
+using Dalamud.Plugin;
 
 namespace HellionChat;
 
-public class FontManager
+// Two LogProxy sites live in static methods (TryGetHellionFontBytes,
+// AddFontWithFallback); a ctor-injected ILogger would not be reachable
+// from those scopes, so the class stays on Plugin.LogProxy.
+//
+// Hybrid handle model: Axis and AxisItalic mirror the game's current
+// font state and are init-only. FontAwesome reuses Dalamud's UiBuilder
+// fixed-width icon handle and is likewise init-only. RegularFont and
+// ItalicFont depend on user-toggleable settings and get replaced live
+// via RebuildDelegateFonts when those settings change; they stay as
+// mutable nullable fields.
+//
+// The four atlas-owned handles register inside a single
+// SuppressAutoRebuild block so the font atlas only rebuilds once for the
+// whole plugin start instead of once per handle. FontAwesome lives
+// outside that accounting because the UiBuilder already owns it.
+public sealed class FontManager : IDisposable
 {
-    internal IFontHandle Axis = null!;
+    private readonly IDalamudPluginInterface _pluginInterface;
-    internal IFontHandle AxisItalic = null!;
 
-    internal IFontHandle RegularFont = null!;
+    internal IFontHandle Axis { get; init; }
+    internal IFontHandle AxisItalic { get; init; }
+    internal IFontHandle FontAwesome { get; init; }
+
+    // Mutable because the live font settings replace these via
+    // RebuildDelegateFonts. Reference replacement is atomic for reference
+    // types, so push sites that read the field once per frame see at most
+    // one stale handle.
+    internal IFontHandle? RegularFont;
     internal IFontHandle? ItalicFont;
 
-    internal IFontHandle FontAwesome = null!;
-
     private ushort[] Ranges = [];
     private ushort[] JpRange = [];
 
@@ -41,24 +62,147 @@ public class FontManager
         90f,
     ];
 
-    /// <summary>
+    // Hellion font bytes (Exo 2, OFL-1.1); lazily loaded from manifest resources
-    /// Backing bytes for the bundled Hellion font (Exo 2, OFL-1.1). Lazily
-    /// extracted from the assembly's manifest resources on first use; the
-    /// load happens inside the font atlas build callback so we keep the
-    /// allocation off the plugin constructor's hot path.
-    /// </summary>
     private static byte[]? HellionFontBytes;
 
-    private static byte[] GetHellionFontBytes()
+    public FontManager(IDalamudPluginInterface pluginInterface)
+    {
+        _pluginInterface = pluginInterface;
+        SetUpRanges();
+
+        var atlas = _pluginInterface.UiBuilder.FontAtlas;
+
+        using (atlas.SuppressAutoRebuild())
+        {
+            Axis = atlas.NewGameFontHandle(
+                new GameFontStyle(GameFontFamily.Axis, SizeInPx(Plugin.Config.FontSizeV2))
+            );
+
+            AxisItalic = atlas.NewGameFontHandle(
+                new GameFontStyle(GameFontFamily.Axis, SizeInPx(Plugin.Config.FontSizeV2))
+                {
+                    SkewStrength = SizeInPx(Plugin.Config.FontSizeV2) / 6,
+                }
+            );
+
+            FontAwesome = _pluginInterface.UiBuilder.IconFontFixedWidthHandle;
+
+            RegularFont = BuildRegularFontHandle(atlas);
+
+            if (Plugin.Config.ItalicEnabled)
+                ItalicFont = BuildItalicFontHandle(atlas);
+        }
+    }
+
+    // Called from the settings save path when one of the font-related
+    // settings changed. Game fonts and FontAwesome stay untouched because
+    // none of those settings affect them.
+    //
+    // Thread model: the settings save path runs on the ImGui draw thread,
+    // same as every push site. The rebuild finishes synchronously before
+    // the next push reads the field in the same frame, so there is no
+    // cross-thread race on the handle reference.
+    public void RebuildDelegateFonts()
+    {
+        SetUpRanges();
+
+        var atlas = _pluginInterface.UiBuilder.FontAtlas;
+
+        RegularFont?.Dispose();
+        RegularFont = BuildRegularFontHandle(atlas);
+
+        ItalicFont?.Dispose();
+        ItalicFont = Plugin.Config.ItalicEnabled ? BuildItalicFontHandle(atlas) : null;
+    }
+
+    // Instance method so Ranges / JpRange are reachable without parameter
+    // plumbing; PascalCase field names follow the existing class style.
+    private IFontHandle BuildRegularFontHandle(IFontAtlas atlas) =>
+        atlas.NewDelegateFontHandle(e =>
+            e.OnPreBuild(tk =>
+            {
+                // UseHellionFont swaps the source font but keeps the size
+                // selector tied to FontSizeV2 (the Hellion font ships as
+                // a single weight).
+                var basePt = Plugin.Config.UseHellionFont
+                    ? Plugin.Config.FontSizeV2
+                    : Plugin.Config.GlobalFontV2.SizePt;
+                var config = new SafeFontConfig { SizePt = basePt, GlyphRanges = Ranges };
+                // Missing embedded resource falls back to the configured
+                // system font instead of taking the whole UiBuilder down.
+                var hellionBytes = Plugin.Config.UseHellionFont ? TryGetHellionFontBytes() : null;
+                config.MergeFont = hellionBytes is not null
+                    ? tk.AddFontFromMemory(hellionBytes, config, "Hellion-Exo2")
+                    : AddFontWithFallback(tk, Plugin.Config.GlobalFontV2.FontId, config, "global");
+
+                config.SizePt = Plugin.Config.JapaneseFontV2.SizePt;
+                config.GlyphRanges = JpRange;
+                AddFontWithFallback(tk, Plugin.Config.JapaneseFontV2.FontId, config, "japanese");
+
+                config.SizePt = Plugin.Config.SymbolsFontSizeV2;
+                tk.AddGameSymbol(config);
+
+                tk.Font = config.MergeFont;
+            })
+        );
+
+    private IFontHandle BuildItalicFontHandle(IFontAtlas atlas) =>
+        atlas.NewDelegateFontHandle(e =>
+            e.OnPreBuild(tk =>
+            {
+                var config = new SafeFontConfig
+                {
+                    SizePt = Plugin.Config.ItalicFontV2.SizePt,
+                    GlyphRanges = Ranges,
+                };
+                config.MergeFont = AddFontWithFallback(
+                    tk,
+                    Plugin.Config.ItalicFontV2.FontId,
+                    config,
+                    "italic"
+                );
+
+                config.SizePt = Plugin.Config.JapaneseFontV2.SizePt;
+                config.GlyphRanges = JpRange;
+                AddFontWithFallback(tk, Plugin.Config.JapaneseFontV2.FontId, config, "japanese");
+
+                config.SizePt = Plugin.Config.SymbolsFontSizeV2;
+                tk.AddGameSymbol(config);
+
+                tk.Font = config.MergeFont;
+            })
+        );
+
+    public void Dispose()
+    {
+        Axis.Dispose();
+        AxisItalic.Dispose();
+        // FontAwesome is shared with the UiBuilder; the host owns its
+        // lifetime, so the plugin must not dispose it.
+        RegularFont?.Dispose();
+        ItalicFont?.Dispose();
+    }
+
+    // Returns null when the embedded font resource is missing. Should not
+    // happen on a signed release build, but a broken csproj or hand-rolled
+    // dev build can land here. Caller falls back to the system font path
+    // so the plugin still loads instead of crashing the whole UiBuilder.
+    private static byte[]? TryGetHellionFontBytes()
     {
         if (HellionFontBytes is not null)
             return HellionFontBytes;
 
-        using var stream =
+        using var stream = typeof(FontManager).Assembly.GetManifestResourceStream(
-            typeof(FontManager).Assembly.GetManifestResourceStream("HellionFont.ttf")
+            "HellionFont.ttf"
-            ?? throw new FileNotFoundException(
+        );
-                "Hellion font resource not embedded in the assembly"
+        if (stream is null)
+        {
+            Plugin.LogProxy.Warning(
+                "Hellion font resource missing — falling back to system default font."
             );
+            return null;
+        }
+
         using var ms = new MemoryStream();
         stream.CopyTo(ms);
         HellionFontBytes = ms.ToArray();
@@ -70,11 +214,9 @@ public class FontManager
         ushort[] BuildRange(IReadOnlyList<ushort>? chars, params nint[] ranges)
         {
             var builder = new ImFontGlyphRangesBuilderPtr(ImGuiNative.ImFontGlyphRangesBuilder());
-            // text
             foreach (var range in ranges)
                 builder.AddRanges((ushort*)range);
 
-            // chars
             if (chars != null)
             {
                 for (var i = 0; i < chars.Count; i += 2)
@@ -92,10 +234,8 @@ public class FontManager
             foreach (var c in reader.Glyphs)
                 builder.AddChar(c.Char);
 
-            // various symbols
             // French
             // Romanian
-            // builder.AddText("←→↑↓《》■※☀★★☆♥♡ヅツッシ☀☁☂℃℉°♀♂♠♣♦♣♧®©™€$£♯♭♪✓√◎◆◇♦■□〇●△▽▼▲‹›≤≥<«“”─＼～");
             builder.AddText("Œœ");
             builder.AddText("ĂăÂâÎîȘșȚț");
 
@@ -116,115 +256,7 @@ public class FontManager
         JpRange = BuildRange(GlyphRangesJapanese.GlyphRanges);
     }
 
-    /// <summary>
+    // Add font with fallback to NotoSansCjkRegular if unavailable
-    /// Async wrapper around <see cref="BuildFonts"/> for the Phase-1 LoadAsync
-    /// path. The font-atlas build is CPU-bound, so we offload via Task.Run and
-    /// honour the cancellation token at the scheduling boundary; this lets the
-    /// font build run in parallel with the theme init without blocking the
-    /// loader. Settings-driven manual rebuilds keep using the sync entry point.
-    /// </summary>
-    public async Task BuildFontsAsync(CancellationToken cancellationToken)
-    {
-        cancellationToken.ThrowIfCancellationRequested();
-        await Task.Run(BuildFonts, cancellationToken).ConfigureAwait(false);
-    }
-
-    public void BuildFonts()
-    {
-        SetUpRanges();
-
-        Axis = Plugin.Interface.UiBuilder.FontAtlas.NewGameFontHandle(
-            new GameFontStyle(GameFontFamily.Axis, SizeInPx(Plugin.Config.FontSizeV2))
-        );
-        AxisItalic = Plugin.Interface.UiBuilder.FontAtlas.NewGameFontHandle(
-            new GameFontStyle(GameFontFamily.Axis, SizeInPx(Plugin.Config.FontSizeV2))
-            {
-                SkewStrength = SizeInPx(Plugin.Config.FontSizeV2) / 6,
-            }
-        );
-
-        FontAwesome = Plugin.Interface.UiBuilder.FontAtlas.NewDelegateFontHandle(e =>
-        {
-            e.OnPreBuild(tk =>
-                tk.AddFontAwesomeIconFont(new SafeFontConfig { SizePx = GetFontSize() })
-            );
-            e.OnPostBuild(tk => tk.FitRatio(tk.Font));
-        });
-
-        RegularFont = Plugin.Interface.UiBuilder.FontAtlas.NewDelegateFontHandle(e =>
-            e.OnPreBuild(tk =>
-            {
-                // v1.2.0 — Bei aktiver Hellion-Schrift (Exo 2 ist Variable-Font)
-                // wird die User-Schriftgröße aus FontSizeV2 als SizePt angewendet.
-                // Der Bestand-Pfad nutzt weiter GlobalFontV2.SizePt aus dem
-                // Custom-Font-Stack. Ohne diese Verzweigung war FontSizeV2 bei
-                // UseHellionFont=true wirkungslos, was 4K-User mit größerer
-                // Skalierung blockierte (Settings → Erscheinungsbild → Schriftarten).
-                var basePt = Plugin.Config.UseHellionFont
-                    ? Plugin.Config.FontSizeV2
-                    : Plugin.Config.GlobalFontV2.SizePt;
-                var config = new SafeFontConfig { SizePt = basePt, GlyphRanges = Ranges };
-                config.MergeFont = Plugin.Config.UseHellionFont
-                    ? tk.AddFontFromMemory(GetHellionFontBytes(), config, "Hellion-Exo2")
-                    : AddFontWithFallback(tk, Plugin.Config.GlobalFontV2.FontId, config, "global");
-
-                config.SizePt = Plugin.Config.JapaneseFontV2.SizePt;
-                config.GlyphRanges = JpRange;
-                AddFontWithFallback(tk, Plugin.Config.JapaneseFontV2.FontId, config, "japanese");
-
-                config.SizePt = Plugin.Config.SymbolsFontSizeV2;
-                tk.AddGameSymbol(config);
-
-                tk.Font = config.MergeFont;
-            })
-        );
-
-        if (Plugin.Config.ItalicEnabled)
-        {
-            ItalicFont = Plugin.Interface.UiBuilder.FontAtlas.NewDelegateFontHandle(e =>
-                e.OnPreBuild(tk =>
-                {
-                    var config = new SafeFontConfig
-                    {
-                        SizePt = Plugin.Config.ItalicFontV2.SizePt,
-                        GlyphRanges = Ranges,
-                    };
-                    config.MergeFont = AddFontWithFallback(
-                        tk,
-                        Plugin.Config.ItalicFontV2.FontId,
-                        config,
-                        "italic"
-                    );
-
-                    config.SizePt = Plugin.Config.JapaneseFontV2.SizePt;
-                    config.GlyphRanges = JpRange;
-                    AddFontWithFallback(
-                        tk,
-                        Plugin.Config.JapaneseFontV2.FontId,
-                        config,
-                        "japanese"
-                    );
-
-                    config.SizePt = Plugin.Config.SymbolsFontSizeV2;
-                    tk.AddGameSymbol(config);
-
-                    tk.Font = config.MergeFont;
-                })
-            );
-        }
-        else
-        {
-            ItalicFont = null;
-        }
-    }
-
-    /// <summary>
-    /// Try to add a user-configured font to the build toolkit, falling back to
-    /// the bundled NotoSansCjkRegular asset if the configured font isn't
-    /// available on the system. Without this guard a stale SystemFontId
-    /// pointing at a font the user uninstalled or that never existed on
-    /// Linux (e.g. "Crimson Text") tears down the entire font atlas build.
-    /// </summary>
     private static ImFontPtr AddFontWithFallback(
         IFontAtlasBuildToolkitPreBuild tk,
         IFontId fontId,
@@ -237,11 +269,21 @@ public class FontManager
             return fontId.AddToBuildToolkit(tk, config);
         }
         catch (Exception e)
-            when (e is FileNotFoundException or DirectoryNotFoundException or IOException)
+            when (e
+                    is FileNotFoundException
+                        or DirectoryNotFoundException
+                        or IOException
+                        or InvalidOperationException
+                        or ArgumentException
+            )
         {
-            Plugin.Log.Warning(
+            // Atlas-toolkit throws span IO and validation failures; routing
+            // the wider set through the fallback keeps a corrupt font config
+            // from taking down the whole atlas build.
+            Plugin.LogProxy.Warning(
                 e,
-                $"Configured {slot} font unavailable, falling back to NotoSansCjkRegular"
+                $"Configured {slot} font failed to load ({e.GetType().Name}), "
+                    + "falling back to NotoSansCjkRegular"
             );
             var fallback = new DalamudAssetFontAndFamilyId(DalamudAsset.NotoSansCjkRegular);
             return fallback.AddToBuildToolkit(tk, config);

HellionChat/GameFunctions/Chat.cs

@@ -19,6 +19,7 @@ using HellionChat.Resources;
 using HellionChat.Util;
 using InteropGenerator.Runtime;
 using Lumina.Text.ReadOnly;
+using Microsoft.Extensions.Logging;
 using ValueType = FFXIVClientStructs.FFXIV.Component.GUI.AtkValueType;
 
 namespace HellionChat.GameFunctions;
@@ -98,9 +99,12 @@ internal sealed unsafe class Chat : IDisposable
     private long LastPlayerNameDisplayTypeRefresh;
     private PlayerNameDisplayType CurrentPlayerNameDisplayType = PlayerNameDisplayType.FullName;
 
-    public Chat(Plugin plugin)
+    private readonly ILogger<Chat> _logger;
+
+    public Chat(Plugin plugin, ILogger<Chat> logger)
     {
         Plugin = plugin;
+        _logger = logger;
         Plugin.GameInteropProvider.InitializeFromAttributes(this);
 
         ChatLogRefreshHook?.Enable();
@@ -174,8 +178,7 @@ internal sealed unsafe class Chat : IDisposable
     internal static void RotateCrossLinkshellHistory(RotateMode mode) =>
         UIModule.Instance()->RotateCrossLinkshellHistory(GetRotateIdx(mode));
 
-    // This function looks up a channel's user-defined color.
+    // Look up a channel's user-defined color, returns null if 0
-    // If this function ever returns 0, it returns null instead.
     internal uint? GetChannelColor(ChatType type)
     {
         var parent = type.Parent();
@@ -215,8 +218,7 @@ internal sealed unsafe class Chat : IDisposable
 
         if (Plugin.Functions.KeybindManager.DirectChat && LastTypedCharacter != null)
         {
-            // FIXME: this whole system sucks
+            // Capture the just-typed character input
-            // FIXME v2: I hate everything about this, but it works
             Plugin.Framework.RunOnTick(() =>
             {
                 string? input = null;
@@ -238,7 +240,7 @@ internal sealed unsafe class Chat : IDisposable
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Error in chat Activated event");
+                    _logger.LogError(ex, "Error in chat Activated event");
                 }
             });
         }
@@ -255,13 +257,9 @@ internal sealed unsafe class Chat : IDisposable
 
         try
         {
-            // We already called this function once, so we skip the duplicated call
+            // Prevent duplicate calls
-            // Also return the original value here so that vanilla chat receives all information
             if (Plugin.ChatLogWindow.TellSpecial)
-            {
-                Plugin.Log.Information("Return early to prevent duplicated call...");
                 return ChatLogRefreshHook!.Original(log, eventId, value);
-            }
 
             Plugin.ChatLogWindow.Activated(
                 new ChatActivatedArgs(new ChannelSwitchInfo(null))
@@ -272,11 +270,10 @@ internal sealed unsafe class Chat : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in chat Activated event");
+            _logger.LogError(ex, "Error in chat Activated event");
         }
 
-        // prevent the game from focusing the chat log
+        return 1; // Prevent vanilla chat log from gaining focus
-        return 1;
     }
 
     private CStringPointer ChangeChannelNameDetour(AgentChatLog* agent)
@@ -306,7 +303,7 @@ internal sealed unsafe class Chat : IDisposable
         {
             playerName = SeString.Parse(agent->TellPlayerName).TextValue;
             worldId = agent->TellWorldId;
-            Plugin.Log.Debug($"Detected tell target '[redacted]'@{worldId}");
+            _logger.LogDebug($"Detected tell target '[redacted]'@{worldId}");
         }
 
         Plugin.CurrentTab.CurrentChannel = new UsedChannel
@@ -365,7 +362,7 @@ internal sealed unsafe class Chat : IDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in chat Activated event");
+                _logger.LogError(ex, "Error in chat Activated event");
             }
         }
 
@@ -415,7 +412,7 @@ internal sealed unsafe class Chat : IDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in chat Activated event");
+                _logger.LogError(ex, "Error in chat Activated event");
             }
         }
 
@@ -430,19 +427,24 @@ internal sealed unsafe class Chat : IDisposable
         );
     }
 
-    /// <summary>
+    // ---------------------------------------------------------------
-    /// Returns true if the channel is any non-linkshell channel, or if the
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
-    /// linkshell actually exists.
+    // - Renamed ValidAnyLinkshell -> IsChannelOrExistingLinkshell. The
-    /// </summary>
+    //   name now states intent: returns true for any non-linkshell
-    internal static bool ValidAnyLinkshell(InputChannel channel)
+    //   channel, or a linkshell index that actually exists.
+    // ---------------------------------------------------------------
+    internal static bool IsChannelOrExistingLinkshell(InputChannel channel)
     {
         var idx = channel.LinkshellIndex();
         if (idx == uint.MaxValue || channel.IsExtraChatLinkshell())
             return true;
-        if (channel.IsLinkshell() && ValidLinkshell(idx))
+
-            return true;
+        if (channel.IsLinkshell())
-        if (channel.IsCrossLinkshell() && ValidCrossLinkshell(idx))
+            return ValidLinkshell(idx);
-            return true;
+
+        if (channel.IsCrossLinkshell())
+            return ValidCrossLinkshell(idx);
+
         return false;
     }
 
@@ -477,8 +479,7 @@ internal sealed unsafe class Chat : IDisposable
             _ => 1,
         };
 
-        // Iterate up to 8 times to find a valid linkshell.
+        for (var i = 0; i < 8; i++) // Find valid linkshell within 8 iterations
-        for (var i = 0; i < 8; i++)
         {
             currentIndex = (uint)((8 + currentIndex + delta) % 8);
             if (validFn(currentIndex))
@@ -524,7 +525,7 @@ internal sealed unsafe class Chat : IDisposable
                 );
                 // RotateLinkshell returns null when no valid linkshell is found within 8 iterations.
                 // Forward the null so the caller can keep the existing channel instead of crashing on nullable arithmetic.
-                return idx is null ? null : channel + idx.Value;
+                return idx is null ? null : channel + idx.Value; // null if not found, otherwise new channel
             }
             default:
                 return channel;
@@ -533,11 +534,7 @@ internal sealed unsafe class Chat : IDisposable
 
     internal void SetChannel(InputChannel channel, TellTarget? tellTarget = null)
     {
-        // ExtraChat linkshells aren't supported in game so we never want to
+        // Ignore ExtraChat linkshells (use ChatLogWindow.SetChannel() instead)
-        // call the ChangeChatChannel function with them.
-        //
-        // Callers should call ChatLogWindow.SetChannel() which handles
-        // ExtraChat channels
         if (channel.IsExtraChatLinkshell())
             return;
 
@@ -546,12 +543,17 @@ internal sealed unsafe class Chat : IDisposable
         if (idx == uint.MaxValue)
             idx = 0;
 
-        if (!ValidAnyLinkshell(channel))
+        // ---------------------------------------------------------------
-            return;
+        // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+        // - Wrap ChangeChatChannel in the validity check instead of
+        //   early-returning. The previous early return skipped Dtor and
+        //   leaked the native Utf8String allocated a few lines above.
+        // ---------------------------------------------------------------
+        if (IsChannelOrExistingLinkshell(channel))
+            RaptureShellModule
+                .Instance()
+                ->ChangeChatChannel(tellTarget != null ? 17 : (int)channel, idx, target, true);
 
-        RaptureShellModule
-            .Instance()
-            ->ChangeChatChannel(tellTarget != null ? 17 : (int)channel, idx, target, true);
         target->Dtor(true);
     }
 
@@ -565,9 +567,6 @@ internal sealed unsafe class Chat : IDisposable
         bool setChatType
     )
     {
-        // param6 is 0 for contentId and 1 for objectId
-        // param7 is always 0 ?
-
         if (!Plugin.CurrentTab.CurrentChannel.UseTempChannel)
             Plugin.CurrentTab.CurrentChannel.UseTempChannel = true;
 
@@ -629,7 +628,7 @@ internal sealed unsafe class Chat : IDisposable
         if (contentId == 0)
         {
             Plugin.ChatGui.PrintError(Language.Chat_SendTell_Error);
-            Plugin.Log.Warning(
+            _logger.LogWarning(
                 "Tried to send a tell with ContentId being 0, sorry this is an internal error."
             );
             return;
@@ -742,10 +741,7 @@ internal sealed unsafe class Chat : IDisposable
 
     internal bool CheckHideFlags()
     {
-        // Only hide the chat in a cutscene when the vanilla chat would've
+        // Only hide chat in cutscene when vanilla chat would also be hidden
-        // also been hidden. This prevents Chat 2 from hiding for a split
-        // second before the cutscene actually starts, because the game sets
-        // the cutscene conditions before processing the skip.
         var raptureAtkUnitManager = RaptureAtkUnitManager.Instance();
         return raptureAtkUnitManager == null
             || raptureAtkUnitManager->UiFlags.HasFlag(UiFlags.Chat);

HellionChat/GameFunctions/ChatBox.cs

@@ -15,17 +15,10 @@ public unsafe class ChatBox
         mes->Dtor(true);
     }
 
-    public static void SendMessage(string message)
+    public static void SendMessage(string message) => SendMessageUnsafe(ValidateMessage(message));
-    {
-        var bytes = ValidateMessage(message);
-        SendMessageUnsafe(bytes);
-    }
 
-    // Validation split out so the deterministic checks (UTF-8 length, sanitise
+    // sanitiserOverride allows xUnit to bypass Utf8String->SanitizeString (game memory only).
-    // round-trip) can run in xUnit without ClientStructs game memory. The
+    // Returns encoded bytes so SendMessage avoids a second GetBytes call.
-    // sanitiser is injectable so tests can pin throw behaviour without invoking
-    // Utf8String->SanitizeString, which only resolves in-process. Returns the
-    // already-encoded bytes so SendMessage doesn't pay GetBytes twice.
     // TEST-MIRROR: ../../../Hellion Build test/GameFunctions/ChatBoxTests.cs
     internal static byte[] ValidateMessage(
         string message,
@@ -49,11 +42,9 @@ public unsafe class ChatBox
     private static string SanitiseText(string text)
     {
         var uText = Utf8String.FromString(text);
-
         uText->SanitizeString((AllowedEntities)0x27F);
         var sanitised = uText->ToString();
         uText->Dtor(true);
-
         return sanitised;
     }
 }

HellionChat/GameFunctions/GameFunctions.cs

@@ -14,6 +14,7 @@ using FFXIVClientStructs.FFXIV.Client.UI.Info;
 using FFXIVClientStructs.FFXIV.Component.GUI;
 using Lumina.Excel;
 using Lumina.Excel.Sheets;
+using Microsoft.Extensions.Logging;
 using ValueType = FFXIVClientStructs.FFXIV.Component.GUI.AtkValueType;
 
 namespace HellionChat.GameFunctions;
@@ -37,17 +38,22 @@ internal unsafe class GameFunctions : IDisposable
     #endregion
 
     private Plugin Plugin { get; }
+    private readonly ILogger<GameFunctions> _logger;
     internal KeybindManager KeybindManager { get; }
     internal Chat Chat { get; }
 
-    internal GameFunctions(Plugin plugin)
+    internal GameFunctions(
+        Plugin plugin,
+        ILogger<GameFunctions> logger,
+        ILoggerFactory loggerFactory
+    )
     {
         Plugin = plugin;
-        KeybindManager = new KeybindManager(plugin);
+        _logger = logger;
-        Chat = new Chat(Plugin);
+        KeybindManager = new KeybindManager(plugin, loggerFactory.CreateLogger<KeybindManager>());
+        Chat = new Chat(Plugin, loggerFactory.CreateLogger<Chat>());
 
         Plugin.GameInteropProvider.InitializeFromAttributes(this);
-
         ResolveTextCommandPlaceholderHook?.Enable();
     }
 
@@ -55,36 +61,24 @@ internal unsafe class GameFunctions : IDisposable
     {
         Chat.Dispose();
         KeybindManager.Dispose();
-
         ResolveTextCommandPlaceholderHook?.Dispose();
-
         Marshal.FreeHGlobal(PlaceholderNamePtr);
     }
 
-    internal void SendFriendRequest(string name, ushort world)
+    internal void SendFriendRequest(string name, ushort world) =>
-    {
         ListCommand(name, world, "friendlist");
-    }
 
-    internal void AddToBlacklist(string name, ushort world)
+    internal void AddToBlacklist(string name, ushort world) => ListCommand(name, world, "blist");
-    {
-        ListCommand(name, world, "blist");
-    }
 
-    internal void AddToMuteList(ulong accountId, ulong contentId, string name, short worldId)
+    internal void AddToMuteList(ulong accountId, ulong contentId, string name, short worldId) =>
-    {
         AgentMutelist.Instance()->Add(accountId, contentId, name, worldId);
-    }
 
-    internal void AddToTermsList(SeString content)
+    internal void AddToTermsList(SeString content) =>
-    {
         AgentTermFilter.Instance()->OpenNewFilterWindow(content.EncodeWithNullTerminator());
-    }
 
     private void ListCommand(string name, ushort world, string commandName)
     {
         var worldRow = Sheets.WorldSheet.GetRow(world);
-
         ReplacementName = $"{name}@{worldRow.Name.ToString()}";
         ChatBox.SendMessage($"/{commandName} add {Placeholder}");
     }
@@ -108,7 +102,6 @@ internal unsafe class GameFunctions : IDisposable
     {
         for (var i = 0; i < 4; i++)
             SetAddonInteractable($"ChatLogPanel_{i}", interactable);
-
         SetAddonInteractable("ChatLog", interactable);
     }
 
@@ -124,7 +117,6 @@ internal unsafe class GameFunctions : IDisposable
         var agent = AgentItemDetail.Instance();
         var addon = GetAddon<AtkUnitBase>("ItemDetail");
 
-        // atkStage ain't gonna be null or we have bigger problems
         if (agent == null || addon == null)
             return;
 
@@ -133,23 +125,19 @@ internal unsafe class GameFunctions : IDisposable
         agent->Index = 0;
         agent->Flag1 &= 0xEF;
         agent->ItemId = id;
-        // agent->Flag2 = 1;
+
-        // agent->Flag3 = 0;
+        // TODO: Revert when CS offset lands in a release build.
-        // TODO: Revert whenever CS is merged
         *(byte*)((nint)agent + 0x21A) = 1;
         *(byte*)((nint)agent + 0x21E) = 0;
 
-        // This just probably needs to be set
         agent->AddonId = addon->Id;
-
-        // Skips early return
         atkStage->TooltipManager.TooltipType |= 2;
         addon->Show(false, 15);
     }
 
     internal static void CloseItemTooltip()
     {
-        // hide addon first to prevent the "addon close" sound
+        // Hide addon first to suppress the "addon close" sound.
         var addon = GetAddon<AtkUnitBase>("ItemDetail");
         if (addon != null)
             addon->Hide(true, false, 0);
@@ -167,7 +155,7 @@ internal unsafe class GameFunctions : IDisposable
 
     internal static void OpenPartyFinder()
     {
-        // this whole method: 6.05: 84433A (FF 97 ?? ?? ?? ?? 41 B4 01)
+        // 6.05: 84433A (FF 97 ?? ?? ?? ?? 41 B4 01)
         var lfg = AgentLookingForGroup.Instance();
         if (lfg->IsAgentActive())
         {
@@ -188,15 +176,10 @@ internal unsafe class GameFunctions : IDisposable
         }
     }
 
-    internal static bool IsMentor()
+    internal static bool IsMentor() => PlayerState.Instance()->IsMentor();
-    {
-        return PlayerState.Instance()->IsMentor();
-    }
 
-    internal static InfoProxyCommonList.CharacterData[] GetFriends()
+    internal static InfoProxyCommonList.CharacterData[] GetFriends() =>
-    {
+        InfoProxyFriendList.Instance()->CharDataSpan.ToArray();
-        return InfoProxyFriendList.Instance()->CharDataSpan.ToArray();
-    }
 
     internal static void OpenQuestLog(RowRef<Quest> quest)
     {
@@ -223,20 +206,12 @@ internal unsafe class GameFunctions : IDisposable
         AgentQuestJournal.Instance()->OpenForQuest(questId, 1);
     }
 
-    internal static void OpenPartyFinder(uint id)
+    internal static void OpenPartyFinder(uint id) =>
-    {
         AgentLookingForGroup.Instance()->OpenListing(id);
-    }
 
-    internal static void OpenAchievement(uint id)
+    internal static void OpenAchievement(uint id) => AgentAchievement.Instance()->OpenById(id);
-    {
-        AgentAchievement.Instance()->OpenById(id);
-    }
 
-    internal static bool IsInInstance()
+    internal static bool IsInInstance() => Plugin.Condition[ConditionFlag.BoundByDuty56];
-    {
-        return Plugin.Condition[ConditionFlag.BoundByDuty56];
-    }
 
     internal static bool TryOpenAdventurerPlate(ulong playerId)
     {
@@ -247,7 +222,8 @@ internal unsafe class GameFunctions : IDisposable
         }
         catch (Exception e)
         {
-            Plugin.Log.Warning(e, "Unable to open adventurer plate");
+            // Static method, no instance _logger reachable here.
+            Plugin.LogProxy.Warning(e, "Unable to open adventurer plate");
             return false;
         }
     }
@@ -255,8 +231,7 @@ internal unsafe class GameFunctions : IDisposable
     internal static void ClickNoviceNetworkButton()
     {
         var agent = AgentChatLog.Instance();
-        // case 3
+        var value = new AtkValue { Type = ValueType.Int, Int = 3 }; // case 3
-        var value = new AtkValue { Type = ValueType.Int, Int = 3 };
         var result = 0;
         var vf0 = *(delegate* unmanaged<AgentChatLog*, int*, AtkValue*, ulong, ulong, int*>*)
             agent->VirtualTable;
@@ -275,9 +250,8 @@ internal unsafe class GameFunctions : IDisposable
         byte a4
     )
     {
-        // The detour is only invoked through the hook, so the hook should
+        // Hook field is nullable due to the Signature attribute, but will never
-        // never be null here, but the nullable field declaration forces us
+        // be null during normal execution; guard covers the teardown race only.
-        // to handle the theoretical race during teardown.
         if (ResolveTextCommandPlaceholderHook is null)
             return nint.Zero;
 
@@ -285,13 +259,11 @@ internal unsafe class GameFunctions : IDisposable
         if (ReplacementName == null || placeholder != Placeholder)
             return ResolveTextCommandPlaceholderHook.Original(a1, placeholderText, a3, a4);
 
-        // The fixed buffer is 128 bytes; UTF-8 + null-terminator must fit.
+        // Guard against a malformed ReplacementName overflowing the 128-byte buffer.
-        // FFXIV player names plus an @World suffix should never approach this
-        // limit, but a malformed ReplacementName must not overflow the buffer.
         var byteCount = System.Text.Encoding.UTF8.GetByteCount(ReplacementName);
         if (byteCount >= PlaceholderBufferSize)
         {
-            Plugin.Log.Warning(
+            _logger.LogWarning(
                 $"Replacement name too long for placeholder buffer ({byteCount} bytes >= {PlaceholderBufferSize}); falling back to original."
             );
             ReplacementName = null;
@@ -300,7 +272,6 @@ internal unsafe class GameFunctions : IDisposable
 
         MemoryHelper.WriteString(PlaceholderNamePtr, ReplacementName);
         ReplacementName = null;
-
         return PlaceholderNamePtr;
     }
 }

HellionChat/GameFunctions/KeybindManager.cs

@@ -8,6 +8,7 @@ using FFXIVClientStructs.FFXIV.Client.UI;
 using HellionChat.Code;
 using HellionChat.GameFunctions.Types;
 using HellionChat.Util;
+using Microsoft.Extensions.Logging;
 using ModifierFlag = HellionChat.GameFunctions.Types.ModifierFlag;
 
 namespace HellionChat.GameFunctions;
@@ -306,9 +307,12 @@ internal unsafe class KeybindManager : IDisposable
         // VirtualKey.OEM_CLEAR,
     };
 
-    internal KeybindManager(Plugin plugin)
+    private readonly ILogger<KeybindManager> _logger;
+
+    internal KeybindManager(Plugin plugin, ILogger<KeybindManager> logger)
     {
         Plugin = plugin;
+        _logger = logger;
         Plugin.GameInteropProvider.InitializeFromAttributes(this);
 
         // Handle keybinds from the game on every tick.
@@ -507,7 +511,7 @@ internal unsafe class KeybindManager : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in chat Activated event");
+            _logger.LogError(ex, "Error in chat Activated event");
         }
     }
 

HellionChat/GameFunctions/Types/TellTarget.cs

@@ -40,5 +40,11 @@ public class TellTarget
 
     public static TellTarget Empty() => new(string.Empty, 0, 0, TellReason.Direct);
 
-    public static TellTarget From(TellTarget t) => new(t.Name, t.World, t.ContentId, t.Reason);
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Replaced static From(t) with an instance-style Clone() so call
+    //   sites read like a copy operation, not a factory.
+    // TEST-MIRROR: ../../../Hellion Build test/_Helpers/TellTargetCloneTests.cs
+    // ---------------------------------------------------------------
+    public TellTarget Clone() => new(Name, World, ContentId, Reason);
 }

HellionChat/HellionChat.csproj

@@ -1,36 +1,29 @@
 <Project Sdk="Dalamud.NET.Sdk/15.0.0">
     <PropertyGroup>
-        <!-- Hellion Chat versioning runs separately from upstream Chat 2.
+        <!-- Independent versioning; see yaml changelog for upstream Chat 2 base -->
-             0.1.0 is our bootstrap release; the underlying Chat 2 base is
+        <Version>1.5.2</Version>
-             called out in the yaml changelog so users can see what it
-             derives from. -->
-        <Version>1.4.3</Version>
         <ImplicitUsings>enable</ImplicitUsings>
         <Nullable>enable</Nullable>
-        <!-- Honor packages.lock.json on restore so floating version ranges
+        <!-- Use lock file to pin exact versions -->
-             don't silently drift between machines or CI runs. -->
         <RestorePackagesWithLockFile>true</RestorePackagesWithLockFile>
-        <!-- v1.0.0 standalone cut — both AssemblyName and RootNamespace
+        <!-- v1.0.0+: standalone fork, no upstream cherry-pick compatibility -->
-             are HellionChat. The plugin no longer maintains source-level
-             cherry-pick compatibility with upstream Infiziert90/ChatTwo;
-             upstream changes are integrated manually if at all. -->
         <AssemblyName>HellionChat</AssemblyName>
         <RootNamespace>HellionChat</RootNamespace>
     </PropertyGroup>
 
     <ItemGroup>
-        <!-- Closed ranges on packages with breaking-change history block a
+        <!-- Closed ranges prevent surprise major bumps during lock file regeneration -->
-             surprise major bump when the lock file is regenerated. The
-             lock file pins the exact version per build; the upper bound
-             keeps the unlock path from drifting across major lines. -->
         <PackageReference Include="MessagePack" Version="[3.1.4, 4.0.0)" />
         <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.7" />
-        <!-- Override the transitively-referenced native SQLite build to one
+        <!-- v1.5.0 DI-container foundation; matches Lightless pin (Hosting 10.0.7) -->
-             that ships SQLite >= 3.50.3 (CVE-2025-6965 memory corruption,
+        <PackageReference
-             CVE-2025-7709 fixed in 3.50.x). Microsoft.Data.Sqlite 10.0.7
+            Include="Microsoft.Extensions.DependencyInjection"
-             pulls SQLitePCLRaw 2.1.11 which carries the older lib; pinning
+            Version="[10.0.7, 11.0.0)"
-             the lib package directly forces the newer native binary
+        />
-             without a major bump on the managed wrapper. -->
+        <PackageReference Include="Microsoft.Extensions.Hosting" Version="[10.0.7, 11.0.0)" />
+        <PackageReference Include="Microsoft.Extensions.Logging" Version="[10.0.7, 11.0.0)" />
+        <PackageReference Include="Microsoft.Extensions.Options" Version="[10.0.7, 11.0.0)" />
+        <!-- SQLitePCLRaw override for CVE-2025-6965, CVE-2025-7709 (SQLite >= 3.50.3) -->
         <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.50.3" />
         <PackageReference Include="morelinq" Version="4.4.0" />
         <PackageReference Include="Pidgin" Version="[3.5.1, 4.0.0)" />
@@ -38,9 +31,7 @@
     </ItemGroup>
 
     <ItemGroup>
-        <!-- Pure-function test suites in HellionChat.Tests need access to
+        <!-- Test assembly needs access to internal helpers (not redistributed) -->
-             the internal helper classes (StringUtil, UriPayload, Tokenizer
-             etc.). Test assembly does not get redistributed. -->
         <InternalsVisibleTo Include="HellionChat.Tests" />
     </ItemGroup>
 
@@ -59,15 +50,7 @@
         </EmbeddedResource>
     </ItemGroup>
 
-    <!-- HellionChat — Hellion-specific resource bundle (HellionStrings.resx
+    <!-- Embedded resources: Hellion font (Exo 2, OFL-1.1) + manifest resource -->
-         + HellionStrings.<lang>.resx) is picked up automatically by the SDK
-         default include. Designer.cs is hand-maintained, no auto-gen needed. -->
-
-    <!-- Bundled Hellion font (Exo 2, OFL-1.1). Embedded as a manifest
-         resource with a fixed LogicalName so FontManager can pull the
-         bytes back at runtime via AddFontFromMemory. The OFL license
-         text travels with it inside the assembly to satisfy the
-         "license must be distributed with the font" clause. -->
     <ItemGroup>
         <EmbeddedResource Include="Resources\HellionFont.ttf">
             <LogicalName>HellionFont.ttf</LogicalName>
@@ -75,21 +58,21 @@
         <EmbeddedResource Include="Resources\HellionFont-OFL.txt">
             <LogicalName>HellionFont-OFL.txt</LogicalName>
         </EmbeddedResource>
+        <EmbeddedResource Include="Resources\Branding\fox-banner.txt">
+            <LogicalName>HellionChat.Branding.fox-banner.txt</LogicalName>
+        </EmbeddedResource>
+        <EmbeddedResource Include="Resources\Branding\fox-mini.txt">
+            <LogicalName>HellionChat.Branding.fox-mini.txt</LogicalName>
+        </EmbeddedResource>
         <EmbeddedResource Include="Themes\Builtin\example-theme.json">
             <LogicalName>HellionChat.Themes.Builtin.example-theme.json</LogicalName>
         </EmbeddedResource>
     </ItemGroup>
 
-    <!-- Plugin icon. Copy images/* into the build output so Dalamud
+    <!-- Plugin icon: copy images/* to output for Dalamud discovery. ASCII
-         finds the icon next to the DLL, and let the SDK default
+         study folder is source-only material, no need to ship it. -->
-         DalamudPackager pipeline include the same path in the
-         release ZIP. Earlier we shipped a custom DalamudPackager
-         targets override that explicitly set HandleImages and
-         ImagesPath; that override conflicted with the SDK 15
-         default and the resulting manifest carried no IconUrl.
-         Removed in v0.5.2. -->
     <ItemGroup>
-        <None Include="images\**">
+        <None Include="images\**" Exclude="images\ascii\**">
             <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
         </None>
     </ItemGroup>

HellionChat/HellionChat.yaml

@@ -1,77 +1,26 @@
 name: Hellion Chat
-author: JonKazama-Hellion
+author: Jon Kazama (Hellion Forge)
-punchline: Chat replacement with privacy controls aligned to EU, US and JP rules — based on Chat 2 (EUPL-1.2)
+punchline: A Hellion Forge plugin — privacy-focused chat replacement for FFXIV, built for EU, US and JP data rules.
 description: |-
-    Hellion Chat is a privacy-focused chat replacement for FINAL FANTASY XIV
+    Chat replacement for FINAL FANTASY XIV with privacy controls built around
-    based on the Chat 2 codebase (EUPL-1.2). One feature is intentionally
+    EU, US and JP data-protection rules.
-    removed (the optional webinterface) and a stack of privacy controls is
-    added on top. Tabs, channel filters, RGB colours, emotes, screenshot
-    mode, IPC integration and the chat replacement window itself work the
-    same. The webinterface is intentionally not part of Hellion Chat because
-    it serves a different use case from the smaller default footprint this
-    plugin is built around.
 
-    On top of that, Hellion Chat adds privacy and data-handling controls
+    By default only your own conversations are stored. Public chat, NPC
-    designed to align with the modern data protection rules that apply
+    dialogue and system messages stay out of the database unless you opt in.
-    across the EU, the United States and Japan. By default only your own
+    Retention windows are configurable per channel, history can be wiped
-    conversations are stored; messages from strangers, NPCs and system
+    retroactively, and everything can be exported on demand.
-    spam stay out of the database. Retention windows are configurable per
-    channel, history can be wiped retroactively, and stored data can be
-    exported on demand.
-
-    Key privacy and data-handling features:
 
+    Features:
     - Channel whitelist with a Privacy-First default
     - Per-channel retention with a daily background sweep
-    - Retroactive cleanup with a Ctrl+Shift confirm
+    - Retroactive cleanup (Ctrl+Shift confirm)
     - Export to Markdown, JSON or CSV
-    - First-run wizard with three preset profiles (Privacy-First, Casual,
+    - First-run wizard with three preset profiles
-      Full History)
+    - Bilingual UI (EN/DE) with live language switching
-    - Bilingual UI (English and German) with live language switching
+    - Own config and database — no shared state with other plugins
-    - Independent plugin state — own config file and database directory,
-      so Hellion Chat does not share state with upstream Chat 2
 
-    v1.3.0 First plugin integration cycle. Honorific custom titles
+    Based on Chat 2 by Infi and Anna (EUPL-1.2).
-    are shown in the chat header above the message log, with auto-detect
+    Support: https://discord.gg/X9V7Kcv5gR
-    and silent fallback when Honorific is not installed.
-
-    v1.4.0 — Critical Lifecycle Fixes. Plugin reload and shutdown
-    are cleaner: SQLite no longer leans on GC pressure to release
-    its file, worker threads are explicitly background, deferred
-    config saves no longer get lost mid-disable, and pre-v13 config
-    backups carry the user's custom theme opacity into the v14 schema
-    instead of falling back to the default.
-
-    v1.4.1 — Theme Engine Performance plus a tenth built-in.
-    HellionStyle.PushGlobal reads pre-computed ABGR values from a
-    per-theme cache instead of converting RGBA per slot per frame
-    (~13 % render-time recovery in typical scenes). Custom-theme
-    hot-reload survives transient file locks (editor mid-save
-    keeps the last-known-good snapshot). Synthwave Sunset joins
-    as the tenth built-in theme — Hot Magenta + Cyan on midnight
-    violet, 80s neon-grid vibes.
-
-    v1.4.2 — ChatLog Frame-Hot-Path. Three per-frame allocation
-    patterns gone from the chat-log render path: card-mode borders
-    hoist invariants out of the per-message loop, auto-tell tab
-    tint and icon get a per-tab cache, and the status bar gates
-    its tab aggregation behind the same one-second cache it uses
-    for the format strings.
-
-    v1.4.3 — Plugin-Load Async-Init plus Repo-Cutover. Plugin
-    migrated to Dalamud's IAsyncDalamudPlugin so the heavy work
-    (migrations, service allocations, window construction, hook
-    subscription) runs in LoadAsync without blocking Dalamud's
-    UI. Schema-gate replaces the v9 → v16 migration chain;
-    configs on schema v16+ load directly. Custom-repo URL moves
-    to gitea.hellion-forge.cloud, the GitHub repo stays as a
-    frozen v1.4.2 snapshot.
-
-    Based on Chat 2 by Infi and Anna, licensed under EUPL-1.2.
-
-    Modding & support: join the Hellion Forge Discord at
-    https://discord.gg/X9V7Kcv5gR — community for Hellion Chat and
-    other Hellion Online Media plugins/tools.
 repo_url: https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat
 accepts_feedback: true
 icon_url: https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/HellionChat/images/icon.png
@@ -86,136 +35,196 @@ tags:
     - Replacement
     - Privacy
 changelog: |-
-    **Hellion Chat 1.4.3 — Plugin-Load Async-Init + Repo-Cutover (2026-05-08)**
+    **v1.5.2 — First-Run Wizard Rework (2026-05-18)**
 
-    Plugin lifecycle migrated to Dalamud's `IAsyncDalamudPlugin`
+    UX patch. The first-run wizard becomes a four-step flow with a
-    API. The constructor now does only the bootstrap-essentials
+    new Roleplay privacy profile and a power-settings step that
-    (config load, language init, conflict detection); migrations,
+    surfaces previously-hidden defaults. Existing v1.5.1 users see
-    service allocations, window construction and hook subscription
+    the new wizard once on first v1.5.2 boot.
-    move to LoadAsync. Dalamud can keep its UI responsive while the
-    heavy work runs.
 
-    - IAsyncDalamudPlugin two-phase load with per-line CaptureFailure
+    What changes user-visible:
-      in DisposeAsync (mirrors LightlessSync's pattern); idempotency
-      guard protects against reload races
-    - Schema-gate replaces the v9 → v16 migration chain. Configs
-      on schema v16+ load directly; older configs trigger an
-      "install v1.4.2 first" error so the historic migration
-      path stays intact
-    - AutoTranslate.PreloadCache moved off the load path. First
-      use may have a sub-second hitch instead of every-load; the
-      upstream chose differently, we accept first-use latency
-    - FontManager.BuildFonts is called sync at the start of
-      LoadAsync; Dalamud rebuilds the font atlas on its own
-      pipeline so the custom Hellion-Exo2 font appears with a
-      brief font-pop after load (matches ChatTwo's behaviour)
-    - Custom-repo URL moved to gitea.hellion-forge.cloud/
-      JonKazama-Hellion/HellionChat. GitHub repo stays as a
-      frozen v1.4.2 snapshot; new releases ship from Gitea.
-      Existing testers need to update the custom-repo URL once
-    - Plugin-load time in this release sits at ~3.7 s median
-      (5 reloads), comparable to v1.4.2. Async migration is
-      foundational for v1.4.4 Lazy-Init optimisations rather
-      than an immediate user-perceived win
 
-    Modding & support: join Hellion Forge — https://discord.gg/X9V7Kcv5gR
+    - Wizard navigation: Welcome → Privacy profile → Power settings
+      → Done. Forge-Bronze pagination dots, dedicated stage for the
+      power settings so they are no longer buried in Settings.
+    - Fourth privacy profile "Roleplay": Privacy-First plus Say and
+      both emote types, with a 30-day window for Say and a 90-day
+      window for emotes. Shout, Yell and Novice Network stay out.
+    - Privacy picker becomes a 2x2 grid. Casual stays the
+      recommended option with a ★ marker.
+    - Power-settings step covers Load Previous Session, Filter
+      Include Previous Sessions, Auto-Tell-Tabs History Preload,
+      Compact Density, Prettier Timestamps and a built-in theme
+      picker. All six map to existing Configuration fields — no new
+      settings introduced.
+    - Staged commit: the wizard only writes to Config on the Finish
+      step. Decide-later or X-close at any point leaves the existing
+      config untouched.
+    - Inline test hint on the done step: "type /tell <Player Name>
+      into chat" surfaces the auto-tell-tab spawn mechanism.
+    - Window starts at 720x480 (was 900x560) and can shrink to
+      600x400; Step 1 keeps the fox banner in a folded TreeNode so
+      the onboarding copy stays primary.
+    - Existing users get the new wizard surfaced once on first boot
+      after the update via the new WizardLastShownVersion config
+      field. Future cycles bump the constant only when the wizard
+      itself changes shape.
 
-    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+    Under the hood:
 
-    **Hellion Chat 1.4.2 — ChatLog Frame-Hot-Path**
+    - WizardStateSmokeStep added to /xlperf alongside the FontManager
+      and ThemeSwitch self-tests.
+    - Twelve new pure-helper xUnit Facts in the Build Suite cover
+      all four privacy profile sets and their retention overrides.
 
-    Third sub-patch of the v1.4.x Polish Sweep series. Per-frame
+    Migration v17 stays (no schema bump). The Configuration grows
-    allocations from the chat-log render path eliminated.
+    one optional string field (WizardLastShownVersion) which
-
+    defaults to empty for legacy users.
-    - DrawMessages card-mode hoists theme/drawList/winLeft/winRight/
-      borderColorAbgr out of the per-message loop. About 500
-      redundant calls per frame at 100 visible messages, multiplied
-      by every pop-out window
-    - Auto-tell tab tint and icon use a per-tab cache. Hash
-      computation and string allocation only happen when the tell
-      target name or world drifts. AutoTellTabTint stays a pure
-      hash helper; cache lives in a thin TabTintCache wrapper
-    - Status bar gates its tab aggregation behind the same
-      one-second cache it already used for the format strings.
-      LINQ Sum and Count replaced with a single foreach pass
-      that runs on roughly 1% of frames
-
-    Realistic frame-time recovery: 2-5% in typical scenes, more
-    on pop-out-heavy setups because the card-border hoist scales
-    per window.
-
-    Modding & support: join Hellion Forge — https://discord.gg/X9V7Kcv5gR
-
-    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
-
-    **Hellion Chat 1.4.1 — Theme Engine Performance**
-
-    Second sub-patch of the v1.4.x Polish Sweep series. Heap
-    pressure from the theme engine's per-frame render path
-    removed, plus a tenth built-in theme and hardening for
-    the custom-theme hot-reload.
-
-    - Theme records carry a pre-computed ABGR-packed cache
-      for every color slot; cache is filled when the theme
-      is registered and refreshed defensively on every
-      Switch()
-    - HellionStyle.PushGlobal reads ABGR values from the
-      cache instead of calling ColourUtil.RgbaToAbgr per
-      slot per frame; ~13 % render-time recovery measured
-      in typical scenes (plan estimate was 2–6 %, real
-      ~10–15 %)
-    - ThemeRegistry custom-theme reload distinguishes a
-      recoverable file lock (editor mid-save) from a
-      permanent IO failure; locked themes keep their
-      last-known-good snapshot and retry on the next
-      lookup instead of dropping out of the picker
-    - New built-in: Synthwave Sunset — Hot Magenta + Cyan
-      on midnight violet, 80s neon-grid vibes; tenth theme
-      in the picker
-    - Author credits refreshed: brand themes are credited
-      as "Hellion Forge"; Mint Grove and Forge Merchantman
-      now credited to Carla Beleandis as a community thanks
-
-    No schema bump, no user-visible behaviour change other
-    than smoother frames on GC-sensitive setups and one
-    additional colour option.
-
-    Modding & support: join Hellion Forge — https://discord.gg/X9V7Kcv5gR
-
-    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
-
-    **Hellion Chat 1.4.0 — Critical Lifecycle Fixes**
-
-    First sub-patch of the v1.4.x Polish Sweep series. Seven
-    known lifecycle and race bugs eliminated before any
-    performance refactor sits on top.
-
-    - MessageStore disposal no longer triggers GC.Collect
-      globally; Pooling=false on the SQLite connection means
-      there's nothing left to clean up by hand
-    - PendingMessage and RetentionSweep worker threads are
-      explicitly marked IsBackground=true so the plugin domain
-      can unload during XIVLauncher reload without waiting
-      for them
-    - EmoteCache image and gif loaders moved from async-void
-      to async Task with a shared task tracker, draining
-      on Dispose so an in-flight load can no longer write
-      to a disposed EmoteImages entry
-    - DisposeAsync 10s timeout now warns loudly instead of
-      silently leaving the worker behind
-    - Plugin.Dispose flushes any pending DeferredSaveFrames
-      before tearing services down, so settings changes
-      made in the last few frames before disable are no
-      longer lost
-    - The v13→v14 config migration now reads the pre-v13
-      backup and carries HellionThemeWindowOpacity into the
-      new WindowOpacity field instead of falling back to
-      the default 0.85
-
-    Modding & support: join Hellion Forge — https://discord.gg/X9V7Kcv5gR
 
     Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
 
     ---
 
-    Earlier history: https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases
+    **v1.5.1 — FontAtlas Refactor and Hellion Forge Signature (2026-05-17)**
+
+    Hybrid FontManager refactor plus an embedded provenance mark.
+
+    What changes under the hood:
+
+    - FontManager handle creation moves into the ctor inside a single
+      atlas.SuppressAutoRebuild() block. The font atlas now builds once
+      per plugin load instead of four to five times — less CPU and GPU
+      pressure in the first seconds after a reload, less atlas texture
+      memory churn.
+    - Hybrid property model: Axis, AxisItalic and FontAwesome become
+      init-only handles. RegularFont and ItalicFont stay mutable because
+      the eight font settings still need to replace them at runtime —
+      that path is funnelled through RebuildDelegateFonts() now and
+      runs without a plugin reload.
+    - FontAwesome reuses Dalamud's UiBuilder.IconFontFixedWidthHandle
+      instead of building its own atlas slot. One delegate-build step
+      less in the ctor.
+    - BuildFontsAsync and BuildFonts are removed; the live mutation
+      path is RebuildDelegateFonts() now.
+    - Two FontManager self-test steps registered with /xlperf: ctor
+      smoke (every handle non-null after Phase-1 resolve, no atlas
+      load-exception) and push smoke (Push() returns without throwing).
+
+    Honorific full-gradient port (originally the v1.5.1 main item) was
+    dropped: Honorific 3.2 exposes no IPC for the rendered gradient
+    frame, and an in-plugin port of the colour palette was declined.
+    The integration stays at the v1.4.7 glow-only shape.
+
+    User-visible:
+
+    - Hellion Forge signature: a small fox-head ASCII silhouette is
+      emitted to /xllog on every plugin load, and a full fox banner
+      with "Hellion Forge" set inside the body is available as a
+      folded TreeNode in the First-Run Wizard and Settings ->
+      Information tab. Drawn by Julia Moon, embedded in the plugin DLL.
+    - No settings changes, no migration. v17 stays.
+
+    Note on performance: the cross-plugin baseline target from v1.5.0
+    (matching Lightless and XIVInstantMessenger at ~7 ms HITCH) did
+    not land this cycle. HITCH stays around 80 ms because the cost is
+    in the UiBuilder first-frame render path, not in the atlas build
+    (which this cycle did reduce from 4-5 builds per load to 1). A
+    first-frame render investigation is reserved for a later cycle.
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+    ---
+
+    **v1.5.0 — DI Foundation and Service Refactor (2026-05-17)**
+
+    Major architecture cycle. The plugin bootstrap moves to a
+    generic-host DI container (Microsoft.Extensions.Hosting +
+    IServiceCollection) modelled on Lightless Sync. Service logging
+    moves from a static Plugin.LogProxy locator to typed
+    Microsoft.Extensions.Logging.ILogger<T> via constructor injection,
+    bridged over Dalamud's IPluginLog by a custom DalamudLogger trio.
+
+    What changes under the hood:
+
+    - 18 instance-class services migrate to ILogger<T> via constructor
+      injection across four slices: data layer (MessageStore,
+      MessageManager, AutoTellTabsService), IPC and integrations
+      (HonorificService, IpcManager, TypingIpc, ExtraChat, the three
+      GameFunctions classes), UI window layer (ChatLogWindow,
+      DbViewer, Popout, three settings tabs), and root (Commands,
+      ThemeRegistry, PayloadHandler).
+    - Plugin.LogProxy stays in place for the eight buckets ctor
+      injection cannot reach: static helpers (EmoteCache,
+      AutoTranslate, MemoryUtil, WrapperUtil), Dalamud-reflected
+      types (Configuration), the Message data class, and instance
+      classes that only log from static methods (FontManager, one
+      GameFunctions site).
+    - Plugin.cs finishes at 1012 lines — virtually identical to the
+      pre-cycle 1013. The new Phase-1 host build and Plugin.X bridge
+      wiring trade out exactly the service and window allocations
+      that previously lived in LoadAsync.
+    - Cross-plugin baseline confirms no performance penalty against
+      Chat 2: HellionChat first-frame HITCH 77 ms median, Chat 2
+      74 ms median. Lightless and XIVInstantMessenger sit around
+      7 ms by deferring their font-atlas build past Finished
+      loading — that pattern is the v1.5.1 follow-up.
+
+    User-visible:
+
+    - Slash-command insert fix: pasting a slash command into the
+      chat input (Friend List "/tell" action, plugin-driven inserts
+      from Artisan, AllaganTools etc.) now replaces the existing
+      input instead of concatenating. Cherry-picked from ChatTwo
+      upstream ee7768ac with namespace adaptation.
+
+    Migration v17 stays (no schema bump).
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+    ---
+
+    **v1.4.10 — Symbol-Picker and Tell-History Fix (2026-05-16)**
+
+    Eleventh and final sub-patch of the v1.4.x polish-sweep series.
+    Symbol picker for the chat input, a tell-history reload fix for
+    users with many active partners, and a closing cleanup sweep
+    before v1.5.0 picks up the DI-container adoption.
+
+    - Symbol picker: a small smile-icon button left of the channel
+      indicator opens a popup with two tabs. The first lists all 161
+      FFXIV PUA glyphs (Dalamud's SeIconChar enum); the second
+      carries 97 server-verified BMP symbols (latin marks, currency,
+      the full Greek alphabet, geometric shapes, suits, notes) —
+      every one of them round-tripped through /echo and /say in a
+      four-round probe so the in-channel render matches what the
+      picker shows. Click drops the glyph at the caret, multi-insert
+      keeps the popup open, and a recent-used strip floats the last
+      sixteen picks across both tabs. Toggle in Settings → Chat →
+      Message behaviour, default on.
+    - Pinned auto-tell tabs reload their full history again: a
+      hidden 500-row scan cap in PreloadHistory used to override the
+      user-configurable AutoTellTabsHistoryPreload setting, so
+      less-frequent pinned partners (rare /tell sessions in an
+      otherwise busy week) lost their backlog. The cap is removed;
+      the (Receiver, Date) index keeps SQL fast, the client-side
+      loop still respects your setting as the upper bound.
+    - Slash-command teardown: /hellion, /hellionView,
+      /hellionDebugger (and #if DEBUG /hellionSeString) wrappers are
+      now cached as private fields. Plugin teardown detaches the
+      live registration instead of re-Register'ing with identical
+      args — closes a latent maintenance hazard from v1.4.9.
+    - v1.4.x polish-sweep wraps up here. The ImGuiListClipper render
+      refactor that was on the v1.4.10 reserve list got dropped
+      after cross-platform smoke showed the scroll rubber-band is a
+      Wine / Linux render-pipeline quirk, not universal — Windows
+      users never saw it. It will get its own platform-targeted
+      spike in a later patch. Next major cycle is v1.5.0 with the
+      DI-container adoption (Microsoft.Extensions.Hosting +
+      ILogger<T>) modelled on Lightless.
+    - Migration v17 stays (no schema bump).
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+    ---
+
+    Full history: https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases

HellionChat/Infrastructure/Hosting/InitHostedServices.cs

@@ -0,0 +1,87 @@
+using Dalamud.Plugin;
+using HellionChat.Ipc;
+using HellionChat.Themes;
+using Microsoft.Extensions.Hosting;
+
+namespace HellionChat.Infrastructure.Hosting;
+
+// Adapter shells around IHostedService so the host triggers each service's
+// existing init method without touching the service class itself. Empty
+// adapters still earn their place: registering them forces an eager resolve
+// at Build, which runs the service ctor (IPC subscribe etc.) right then
+// instead of lazily on first GetRequiredService.
+
+internal sealed class ThemeRegistryInitHostedService(ThemeRegistry registry) : IHostedService
+{
+    public Task StartAsync(CancellationToken cancellationToken)
+    {
+        // Materialise the lazy AllCustom enumerable so the slug lookup hits a
+        // warm cache; otherwise the first Switch falls through to the built-in
+        // default when Config.Theme points at a custom slug.
+        foreach (var _ in registry.AllCustom()) { }
+        registry.Switch(Plugin.Config.Theme);
+        return Task.CompletedTask;
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+// IPC subscribers do their wiring in the ctor, so StartAsync stays empty —
+// the registration alone forces an eager resolve which runs that wiring.
+
+internal sealed class IpcManagerInitHostedService(IpcManager ipc) : IHostedService
+{
+    private readonly IpcManager _ipc = ipc;
+
+    public Task StartAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class TypingIpcInitHostedService(TypingIpc typingIpc) : IHostedService
+{
+    private readonly TypingIpc _typingIpc = typingIpc;
+
+    public Task StartAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class ExtraChatInitHostedService(ExtraChat extraChat) : IHostedService
+{
+    private readonly ExtraChat _extraChat = extraChat;
+
+    public Task StartAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class MessageManagerInitHostedService(
+    IDalamudPluginInterface pluginInterface,
+    MessageManager manager
+) : IHostedService
+{
+    public Task StartAsync(CancellationToken cancellationToken)
+    {
+        // FilterAllTabsAsync rebuilds the per-tab view from the message store;
+        // on Boot, tabs come up empty and the first chat events fill them, so
+        // we skip the rebuild to avoid a pointless full-history scan.
+        if (pluginInterface.Reason is not PluginLoadReason.Boot)
+            manager.FilterAllTabsAsync();
+        return Task.CompletedTask;
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class AutoTellTabsServiceInitHostedService(AutoTellTabsService service)
+    : IHostedService
+{
+    public Task StartAsync(CancellationToken cancellationToken)
+    {
+        service.Initialize();
+        return Task.CompletedTask;
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}

HellionChat/Infrastructure/Logging/DalamudLogger.cs

@@ -0,0 +1,64 @@
+using System.Text;
+using Dalamud.Plugin.Services;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat.Infrastructure.Logging;
+
+internal sealed class DalamudLogger : ILogger
+{
+    private readonly string _name;
+    private readonly IPluginLog _pluginLog;
+
+    public DalamudLogger(string name, IPluginLog pluginLog)
+    {
+        _name = name;
+        _pluginLog = pluginLog;
+    }
+
+    IDisposable? ILogger.BeginScope<TState>(TState state) => default!;
+
+    // Filtering happens in Dalamud's /xllog. Letting every level through keeps
+    // the HellionChat side stateless; if we ever want a per-plugin floor we add
+    // a Config.LogLevel and tighten this method.
+    public bool IsEnabled(LogLevel logLevel) => true;
+
+    public void Log<TState>(
+        LogLevel logLevel,
+        EventId eventId,
+        TState state,
+        Exception? exception,
+        Func<TState, Exception?, string> formatter
+    )
+    {
+        if (!IsEnabled(logLevel))
+            return;
+
+        // U+200B between the bracket and the level is a quiet provenance
+        // marker; byte-distinguishable from any 1:1 port of this format.
+        if ((int)logLevel <= (int)LogLevel.Information)
+        {
+            _pluginLog.Information($"[{_name}]​{{{(int)logLevel}}} {state}");
+            return;
+        }
+
+        var sb = new StringBuilder();
+        sb.Append($"[{_name}]​{{{(int)logLevel}}} {state} {exception?.Message}");
+        if (!string.IsNullOrWhiteSpace(exception?.StackTrace))
+            sb.AppendLine(exception.StackTrace);
+
+        var inner = exception?.InnerException;
+        while (inner != null)
+        {
+            sb.AppendLine($"InnerException {inner}: {inner.Message}");
+            sb.AppendLine(inner.StackTrace);
+            inner = inner.InnerException;
+        }
+
+        if (logLevel == LogLevel.Warning)
+            _pluginLog.Warning(sb.ToString());
+        else if (logLevel == LogLevel.Error)
+            _pluginLog.Error(sb.ToString());
+        else
+            _pluginLog.Fatal(sb.ToString());
+    }
+}

HellionChat/Infrastructure/Logging/DalamudLoggingProvider.cs

@@ -0,0 +1,84 @@
+using System.Collections.Concurrent;
+using System.Reflection;
+using System.Security.Cryptography;
+using System.Text;
+using Dalamud.Plugin.Services;
+using HellionChat.Branding;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat.Infrastructure.Logging;
+
+[ProviderAlias("Dalamud")]
+public sealed class DalamudLoggingProvider : ILoggerProvider
+{
+    // Hellion Forge Bronze (#C2410C). Mixed into the bootstrap fingerprint.
+    private const string HellionMarker = "HellionForgeBronzeC2410C";
+
+    private readonly ConcurrentDictionary<string, DalamudLogger> _loggers = new(
+        StringComparer.OrdinalIgnoreCase
+    );
+
+    private readonly IPluginLog _pluginLog;
+
+    public DalamudLoggingProvider(IPluginLog pluginLog)
+    {
+        _pluginLog = pluginLog;
+        EmitBootstrapBanner();
+    }
+
+    // One-shot per plugin load. Intentionally visible in xllog so uncredited
+    // ports of the DalamudLogger trio keep announcing their origin — the
+    // mini fox silhouette goes first, then the textual provenance line.
+    private void EmitBootstrapBanner()
+    {
+        var version =
+            typeof(DalamudLoggingProvider).Assembly.GetName().Version?.ToString() ?? "0.0.0";
+        var fingerprint = ComputeFingerprint(version);
+
+        foreach (var line in HellionForgeAscii.FoxMini.Split('\n'))
+        {
+            var trimmed = line.TrimEnd('\r');
+            if (trimmed.Length > 0)
+                _pluginLog.Information(trimmed);
+        }
+
+        _pluginLog.Information("by Julia Moon - Hellion Forge");
+        _pluginLog.Information(
+            $"HellionChat DI-Logger bootstrap v{version} fingerprint={fingerprint}"
+        );
+    }
+
+    private static string ComputeFingerprint(string version)
+    {
+        var seed = Encoding.UTF8.GetBytes($"{HellionMarker}-{version}");
+        var hash = SHA256.HashData(seed);
+        var sb = new StringBuilder(8);
+        for (var i = 0; i < 4; i++)
+            sb.Append(hash[i].ToString("x2"));
+        return sb.ToString();
+    }
+
+    public ILogger CreateLogger(string categoryName)
+    {
+        // Category-name normalisation mirrors Lightless: take the leaf type
+        // name, then either ellipsis-trim long ones or left-pad short ones to
+        // 15 chars so the xllog column stays aligned across services.
+        var catName = categoryName.Split(".", StringSplitOptions.RemoveEmptyEntries).Last();
+        if (catName.Length > 15)
+            catName = string.Concat(
+                catName.AsSpan(0, 6),
+                "...",
+                catName.AsSpan(catName.Length - 6, 6)
+            );
+        else
+            catName = catName.PadLeft(15);
+
+        return _loggers.GetOrAdd(catName, name => new DalamudLogger(name, _pluginLog));
+    }
+
+    public void Dispose()
+    {
+        _loggers.Clear();
+        GC.SuppressFinalize(this);
+    }
+}

HellionChat/Infrastructure/Logging/DalamudLoggingProviderExtensions.cs

@@ -0,0 +1,23 @@
+using Dalamud.Plugin.Services;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat.Infrastructure.Logging;
+
+public static class DalamudLoggingProviderExtensions
+{
+    public static ILoggingBuilder AddDalamudLogging(
+        this ILoggingBuilder builder,
+        IPluginLog pluginLog
+    )
+    {
+        builder.ClearProviders();
+        builder.Services.TryAddEnumerable(
+            ServiceDescriptor.Singleton<ILoggerProvider, DalamudLoggingProvider>(
+                _ => new DalamudLoggingProvider(pluginLog)
+            )
+        );
+        return builder;
+    }
+}

HellionChat/InputHistoryService.cs

@@ -2,14 +2,9 @@ using System.Collections.Generic;
 
 namespace HellionChat;
 
-// Hellion Chat — v0.6.0 shared input history. Replaces the embedded
+// Shared input history for all ChatInputBars (main and pop-out windows).
-// ChatLogWindow.InputBacklog so that pop-out windows with their own
+// Push deduplicates: existing entries are moved to the end when re-added.
-// ChatInputBar can navigate the same Up/Down history as the main window.
+// TEST-MIRROR: ../../Hellion Build test/Util/InputHistoryServiceTests.cs
-// Index semantics are kept identical to the v0.5.x InputBacklog:
-//   index 0          = oldest entry
-//   index Count - 1  = newest entry
-// Push performs move-to-newest deduplication: existing entries are
-// removed before the new one is appended at the end.
 public static class InputHistoryService
 {
     private const int MaxSize = 30;
@@ -26,8 +21,7 @@ public static class InputHistoryService
 
         var trimmed = entry.Trim();
 
-        // Move-to-newest: existing entries are removed before the append
+        // Move-to-newest: remove existing entry before adding at the end
-        // so the same line typed twice does not occupy two history slots.
         for (var i = 0; i < _entries.Count; i++)
         {
             if (_entries[i] == trimmed)
@@ -48,4 +42,12 @@ public static class InputHistoryService
             return null;
         return _entries[cursor];
     }
+
+    // Plugin reload doesn't reset static state automatically. Plugin.DisposeAsync
+    // calls this so the next load starts with an empty history instead of
+    // inheriting the previous session's entries.
+    public static void Reset()
+    {
+        _entries.Clear();
+    }
 }

HellionChat/Integrations/HonorificService.cs

@@ -2,69 +2,51 @@ using System;
 using Dalamud.Plugin;
 using Dalamud.Plugin.Ipc;
 using Dalamud.Plugin.Services;
+using Microsoft.Extensions.Logging;
 using Newtonsoft.Json;
 
 namespace HellionChat.Integrations;
 
-// We pull Newtonsoft.Json into this single file for IPC compatibility:
+// Newtonsoft.Json is used here for IPC compatibility with Honorific, which
-// Honorific serialises its TitleData with Newtonsoft (see
+// serialises TitleData with it. It's a transitive Dalamud dependency — no
-// Honorific-master/IpcProvider.cs:9 and CustomTitle.cs:12). Using the
+// new NuGet entry needed. The rest of HellionChat uses System.Text.Json.
-// same library guarantees identical handling of System.Numerics.Vector3?
-// and the enum fields we ignore. Newtonsoft is a transitive dependency
-// via Dalamud, so no new NuGet entry is needed. The rest of HellionChat
-// keeps using System.Text.Json.
 internal sealed class HonorificService : IDisposable
 {
     private const string IpcNamespace = "Honorific";
 
-    // Major version of the Honorific IPC contract HellionChat is built against.
+    // Major version of the Honorific IPC contract we're built against.
-    // Used both by the runtime compatibility check and by the settings tab when
-    // it tells the user which major version we expected, so the literal lives
-    // in exactly one place.
     internal const uint ExpectedApiMajor = 3;
 
-    // IPC gates we subscribe to. Keep them as fields so Dispose can
+    // IPC gates — kept as fields so Dispose can unsubscribe the same instances.
-    // unsubscribe the same instances we subscribed in the constructor.
     private readonly ICallGateSubscriber<(uint, uint)> _apiVersion;
     private readonly ICallGateSubscriber<string> _getLocalCharacterTitle;
     private readonly ICallGateSubscriber<string, object> _localCharacterTitleChanged;
     private readonly ICallGateSubscriber<object> _ready;
     private readonly ICallGateSubscriber<object> _disposing;
 
-    private readonly IPluginLog _log;
+    private readonly ILogger<HonorificService> _logger;
     private readonly IFramework _framework;
     private bool _versionWarningLogged;
 
+    // Thread: framework only — IPC delivery + ImGui render both run there.
     public HonorificTitleData? CurrentTitle { get; private set; }
     public bool IsAvailable { get; private set; }
     public (uint Major, uint Minor)? DetectedApiVersion { get; private set; }
 
     public HonorificService(
         IDalamudPluginInterface pluginInterface,
-        IPluginLog log,
+        ILogger<HonorificService> logger,
         IFramework framework
     )
     {
         _framework = framework;
-        _log = log;
+        _logger = logger;
 
-        // Dalamud caches gate objects per-name for the lifetime of the
+        // Gate objects are cached per-name by Dalamud and safe to register
-        // plugin interface, so we can register subscribers even when
+        // before Honorific loads — they just won't fire until it does.
-        // Honorific isn't loaded yet — the gate just won't fire. Calling
+        // Initial pull is scheduled on the framework thread because plugin
-        // InvokeFunc before Honorific is up will throw, which is why the
+        // constructors run on the loader thread, and Honorific's IPC handlers
-        // initial pull below is wrapped in try-catch.
+        // read ObjectTable.LocalPlayer which throws off the framework thread.
-        //
-        // Thread-context: plugin constructors run on Dalamud's plugin-loader
-        // thread, NOT the framework thread. Honorific's IPC handlers read
-        // ObjectTable.LocalPlayer (Honorific IpcProvider.cs:61), which throws
-        // "Not on main thread!" outside the framework thread. If Honorific is
-        // already loaded when HellionChat starts, a synchronous InvokeFunc
-        // here would surface that exception, the broad catch below would
-        // mark IsAvailable=false, and OnTitleChanged's `if (!IsAvailable)`
-        // gate would block every subsequent title update. We therefore
-        // schedule the initial pull onto the framework thread via
-        // IFramework.RunOnFrameworkThread so the IPC call sees the right
-        // thread context.
         _apiVersion = pluginInterface.GetIpcSubscriber<(uint, uint)>($"{IpcNamespace}.ApiVersion");
         _getLocalCharacterTitle = pluginInterface.GetIpcSubscriber<string>(
             $"{IpcNamespace}.GetLocalCharacterTitle"
@@ -84,16 +66,14 @@ internal sealed class HonorificService : IDisposable
 
     public void Dispose()
     {
-        // Honorific may already be gone by the time we dispose. Wrap each
+        // Wrap each unsubscribe — a missing gate must not block the others.
-        // unsubscribe so a missing gate doesn't prevent the others from
+        // Leaking a subscription keeps this service alive across plugin reloads.
-        // unsubscribing — leaking even one subscription leaves a callback
-        // alive that captures `this`, which keeps the whole service alive
-        // and breaks plugin reload.
         TryUnsubscribe(() => _localCharacterTitleChanged.Unsubscribe(OnTitleChanged));
         TryUnsubscribe(() => _ready.Unsubscribe(OnReady));
         TryUnsubscribe(() => _disposing.Unsubscribe(OnDisposing));
     }
 
+    // Thread: framework (scheduled from ctor and OnReady).
     private void TryInitialPull()
     {
         try
@@ -105,7 +85,7 @@ internal sealed class HonorificService : IDisposable
             {
                 if (!_versionWarningLogged)
                 {
-                    _log.Warning(
+                    _logger.LogWarning(
                         "Honorific API version mismatch — expected major 3, "
                             + "found {Major}.{Minor}. Disabling Honorific integration.",
                         version.Item1,
@@ -119,68 +99,47 @@ internal sealed class HonorificService : IDisposable
 
             IsAvailable = true;
             _versionWarningLogged = false;
-            // Pull the current title once at startup; from here on we rely
-            // on LocalCharacterTitleChanged events.
             var json = _getLocalCharacterTitle.InvokeFunc();
             CurrentTitle = ParseTitleJson(json);
         }
         catch (Exception ex)
         {
-            // Honorific isn't installed or hasn't initialised yet. The Ready
+            // Honorific not installed or not yet initialised — Ready will retry.
-            // event will give us a second chance later. Log at Debug so
+            _logger.LogDebug(ex, "Honorific not available at HellionChat startup; awaiting Ready.");
-            // users without Honorific don't see noise on every reload.
-            _log.Debug(ex, "Honorific not available at HellionChat startup; awaiting Ready.");
             IsAvailable = false;
             CurrentTitle = null;
         }
     }
 
-    // Honorific fires LocalCharacterTitleChanged through its nameplate hook
+    // Thread: framework (Dalamud IPC delivery contract).
-    // (Honorific-master/Plugin.cs:665), which means we get title updates on
-    // character switches automatically as soon as the new character is
-    // rendered. While the user is in the character-select menu, HellionChat's
-    // window is hidden by default via HideWhenNotLoggedIn (Configuration.cs:152),
-    // so the stale-title window between logout and login isn't user-visible.
     private void OnTitleChanged(string json)
     {
-        // Don't update cached state when we've already decided we can't trust
+        // Skip updates on version mismatch; subscription stays live for reload.
-        // Honorific (e.g. version mismatch). Subscription stays live in case a
-        // compatible Honorific reloads, in which case Ready triggers TryInitialPull
-        // and sets IsAvailable back to true.
         if (!IsAvailable)
             return;
         CurrentTitle = ParseTitleJson(json);
     }
 
+    // Thread: any (Honorific dispatches NotifyReady from its own thread).
     private void OnReady()
     {
-        // Honorific loaded after HellionChat; redo the version check and
-        // initial pull. Idempotent on purpose — Honorific can fire Ready
-        // more than once across reloads.
-        //
-        // Honorific's NotifyReady may dispatch from any thread, and
-        // TryInitialPull eventually calls IPC handlers that read
-        // ObjectTable.LocalPlayer — same "Not on main thread!" hazard as
-        // the constructor path. Schedule onto the framework thread.
         _framework.RunOnFrameworkThread(TryInitialPull);
     }
 
+    // Thread: framework (IPC delivery contract); idempotent — Disposing fires once.
     private void OnDisposing()
     {
-        // Honorific is unloading. Drop our cached state so the header
+        // Honorific unloading — clear cached state so the header hides next frame.
-        // hides on the next frame; subscriptions stay registered because
+        // Subscriptions stay registered in case Honorific reloads.
-        // the gates may come back later (Honorific reload).
+        // CurrentTitle is already nulled by OnTitleChanged before this fires,
-        //
+        // re-clearing here is belt-and-braces.
-        // Race-note: Honorific's NotifyDisposing calls ChangedLocalCharacterTitle(null)
-        // BEFORE SendMessage on the Disposing gate (IpcProvider.cs:109-111),
-        // so OnTitleChanged is expected to fire first and already null out
-        // CurrentTitle. We re-clear here as belt-and-braces; should the
-        // ordering ever flip, ShouldRenderSlot would still gate on IsAvailable.
         CurrentTitle = null;
         IsAvailable = false;
         DetectedApiVersion = null;
     }
 
+    // Thread: framework (called from Dispose, which runs on the framework
+    // cleanup block in Plugin.DisposeAsync).
     private void TryUnsubscribe(Action unsubscribe)
     {
         try
@@ -189,33 +148,15 @@ internal sealed class HonorificService : IDisposable
         }
         catch (Exception ex)
         {
-            _log.Debug(ex, "Honorific unsubscribe failed (likely already gone).");
+            // Warning not Debug — a silent unsubscribe failure leaks a live
+            // subscription across plugin reloads.
+            _logger.LogWarning(
+                ex,
+                "Honorific unsubscribe failed (likely API break or gate already gone)."
+            );
         }
     }
 
-    // Threading note: Dalamud fires IPC events on the framework thread and
-    // ImGui renders on the framework thread, so OnTitleChanged and the
-    // render path that reads CurrentTitle never race — OnTitleChanged is
-    // safe to keep direct (no RunOnFrameworkThread wrap needed) because
-    // LocalCharacterTitleChanged delivery is framework-thread by Dalamud
-    // contract. If a future change moves either side onto a worker thread,
-    // switch to volatile/Interlocked for the CurrentTitle field.
-    //
-    // The constructor's initial pull and OnReady, on the other hand, are
-    // explicitly scheduled via IFramework.RunOnFrameworkThread because
-    // they run outside that contract: the constructor executes on the
-    // plugin-loader thread, and Honorific's NotifyReady can dispatch from
-    // any thread. Both call paths eventually invoke IPC handlers that read
-    // ObjectTable.LocalPlayer, which throws "Not on main thread!" off the
-    // framework thread — see the constructor comment block for context.
-    //
-    // Divergence from ChatTwo/Ipc/ExtraChat.cs: that file uses `volatile`
-    // on its state fields out of caution. We don't, because the framework-
-    // thread delivery is the documented Dalamud contract. If the two files
-    // ever need to share a threading audit, this is the place to revisit.
-
-    // --- Pure-logic helpers below; tested via HellionChat.Tests/Integrations. ---
-
     internal static HonorificTitleData? ParseTitleJson(string json)
     {
         if (string.IsNullOrEmpty(json))

HellionChat/Integrations/HonorificTitleData.cs

@@ -2,16 +2,21 @@ using System.Numerics;
 
 namespace HellionChat.Integrations;
 
-// Local DTO mirroring Honorific's TitleData shape. We replicate the structure
+// Local DTO mirroring Honorific's TitleData — no hard reference to Honorific.dll
-// instead of referencing Honorific.dll because a hard build-time dependency
+// so HellionChat loads cleanly when Honorific is absent.
-// would couple the two assemblies and break HellionChat at load time when
+//
-// Honorific is missing. Glow, Color3, GradientColourSet and GradientAnimationStyle
+// Only Glow is rendered. Color3, GradientColourSet and GradientAnimationStyle
-// are intentionally omitted — Cycle 1 renders text in the primary Color only;
+// are parsed but unused — the animated gradient lives entirely inside Honorific
-// the "Honorific Full Fidelity" backlog item adds them later as a pure
+// and is not exposed over IPC, so reproducing it here would mean shipping our
-// extension that won't break this DTO's existing consumers.
+// own copy of Honorific's colour palette. The fields stay in the DTO so the
+// JSON roundtrip remains lossless.
 internal sealed record HonorificTitleData(
     string? Title,
     bool IsPrefix,
     bool IsOriginal,
-    Vector3? Color
+    Vector3? Color,
+    Vector3? Glow,
+    Vector3? Color3,
+    int? GradientColourSet,
+    string? GradientAnimationStyle
 );

HellionChat/Integrations/IntegrationLinks.cs

@@ -1,12 +1,20 @@
+using System.Runtime.CompilerServices;
+using HellionChat.Util;
+
 namespace HellionChat.Integrations;
 
-// External URLs for the third-party plugins HellionChat integrates with.
+// Third-party plugin URLs — separate from BrandingLinks (Hellion-owned URLs).
-// Kept separate from BrandingLinks (which is for Hellion-owned URLs) so
-// future cycles can extend this file with maintainer attribution links
-// for Moodles, NotificationMaster, ExtraChat, etc. without polluting the
-// brand-links class.
 internal static class IntegrationLinks
 {
     public const string HonorificRepo = "https://github.com/Caraxi/Honorific";
     public const string HonorificAuthor = "https://github.com/Caraxi";
+
+    // See BrandingLinks.ValidateUrls for the CA2255 rationale.
+#pragma warning disable CA2255
+    [ModuleInitializer]
+#pragma warning restore CA2255
+    internal static void ValidateUrls()
+    {
+        UrlValidation.ValidateAll(nameof(IntegrationLinks), HonorificRepo, HonorificAuthor);
+    }
 }

HellionChat/Ipc/ExtraChat.cs

@@ -1,9 +1,12 @@
 using Dalamud.Plugin.Ipc;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat.Ipc;
 
 public sealed class ExtraChat : IDisposable
 {
+    private readonly ILogger<ExtraChat> _logger;
+
 #pragma warning disable CS0649 // Assigned through IPC
     [Serializable]
     private struct OverrideInfo
@@ -26,10 +29,9 @@ public sealed class ExtraChat : IDisposable
 
     internal (string, uint)? ChannelOverride { get; set; }
 
-    // Volatile reference: IPC callbacks (OnChannelCommandColours/OnChannelNames) fire on a
+    // volatile: IPC callbacks fire on a Dalamud thread while ImGui reads these.
-    // Dalamud-dispatcher thread while the ImGui thread reads the IReadOnlyDictionary projections.
+    // Reference assignment is atomic on x64, but the barrier ensures visibility
-    // Reference assignment is atomic on x64, but the JIT (especially Mono on Wine/Linux) needs
+    // across threads (especially Mono/Wine). See AUDIT-2026-05-05 [SEC-01].
-    // the volatile barrier to guarantee visibility across threads. See AUDIT-2026-05-05 [SEC-01].
     private volatile Dictionary<string, uint> ChannelCommandColoursInternal = new();
     internal IReadOnlyDictionary<string, uint> ChannelCommandColours =>
         ChannelCommandColoursInternal;
@@ -37,8 +39,9 @@ public sealed class ExtraChat : IDisposable
     private volatile Dictionary<Guid, string> ChannelNamesInternal = new();
     internal IReadOnlyDictionary<Guid, string> ChannelNames => ChannelNamesInternal;
 
-    internal ExtraChat()
+    internal ExtraChat(ILogger<ExtraChat> logger)
     {
+        _logger = logger;
         OverrideChannelGate = Plugin.Interface.GetIpcSubscriber<OverrideInfo, object>(
             "ExtraChat.OverrideChannelColour"
         );
@@ -54,6 +57,7 @@ public sealed class ExtraChat : IDisposable
         OverrideChannelGate.Subscribe(OnOverrideChannel);
         ChannelCommandColoursGate.Subscribe(OnChannelCommandColours);
         ChannelNamesGate.Subscribe(OnChannelNames);
+
         try
         {
             ChannelCommandColoursInternal = ChannelCommandColoursGate.InvokeFunc(null!);
@@ -61,8 +65,8 @@ public sealed class ExtraChat : IDisposable
         }
         catch (Exception ex)
         {
-            // ExtraChat is optional; missing IPC peer is normal when the plugin isn't loaded.
+            // ExtraChat is optional; IPC failure is normal when the plugin isn't loaded.
-            Plugin.Log.Verbose(ex, "ExtraChat IPC initial state query failed (peer not loaded?)");
+            _logger.LogTrace(ex, "ExtraChat IPC initial state query failed (peer not loaded?)");
         }
     }
 
@@ -75,22 +79,11 @@ public sealed class ExtraChat : IDisposable
 
     private void OnOverrideChannel(OverrideInfo info)
     {
-        if (info.Channel == null)
+        ChannelOverride = info.Channel == null ? null : (info.Channel, info.Rgba);
-        {
-            ChannelOverride = null;
-            return;
-        }
-
-        ChannelOverride = (info.Channel, info.Rgba);
     }
 
-    private void OnChannelCommandColours(Dictionary<string, uint> obj)
+    private void OnChannelCommandColours(Dictionary<string, uint> obj) =>
-    {
         ChannelCommandColoursInternal = obj;
-    }
 
-    private void OnChannelNames(Dictionary<Guid, string> obj)
+    private void OnChannelNames(Dictionary<Guid, string> obj) => ChannelNamesInternal = obj;
-    {
-        ChannelNamesInternal = obj;
-    }
 }

HellionChat/Ipc/TypingIpc.cs

@@ -1,5 +1,6 @@
 using Dalamud.Plugin.Ipc;
 using HellionChat.Code;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat.Ipc;
 
@@ -19,12 +20,26 @@ internal sealed class TypingIpc : IDisposable
     private ICallGateProvider<ChatInputState> StateQueryGate { get; }
     private ICallGateProvider<ChatInputState, object?> StateChangedGate { get; }
 
+    // v1.4.9 R4: ChatTwo IPC compatibility mirror. Some third-party plugins
+    // have a no-fork policy and subscribe only to ChatTwo.*-prefixed IPC
+    // gates. HellionChat replaces ChatTwo (conflict detection prevents
+    // parallel loading), so mirroring the ChatTwo provider slots lets those
+    // plugins keep working without code changes on their side. The tuple
+    // shape is textually identical to ChatTwo's IPC surface (same member
+    // order, same underlying types — ChatType is `ushort` in both repos)
+    // so Dalamud's IPC marshalling matches across plugin boundaries.
+    private ICallGateProvider<ChatInputState> ChatTwoStateQueryGate { get; }
+    private ICallGateProvider<ChatInputState, object?> ChatTwoStateChangedGate { get; }
+
     private ChatInputState LastState;
     private bool HasState;
 
-    internal TypingIpc(Plugin plugin)
+    private readonly ILogger<TypingIpc> _logger;
+
+    internal TypingIpc(Plugin plugin, ILogger<TypingIpc> logger)
     {
         Plugin = plugin;
+        _logger = logger;
 
         StateQueryGate = Plugin.Interface.GetIpcProvider<ChatInputState>(
             "HellionChat.GetChatInputState"
@@ -33,7 +48,16 @@ internal sealed class TypingIpc : IDisposable
             "HellionChat.ChatInputStateChanged"
         );
 
+        // v1.4.9 R4: ChatTwo-prefixed compatibility slots (see class-level comment).
+        ChatTwoStateQueryGate = Plugin.Interface.GetIpcProvider<ChatInputState>(
+            "ChatTwo.GetChatInputState"
+        );
+        ChatTwoStateChangedGate = Plugin.Interface.GetIpcProvider<ChatInputState, object?>(
+            "ChatTwo.ChatInputStateChanged"
+        );
+
         StateQueryGate.RegisterFunc(GetState);
+        ChatTwoStateQueryGate.RegisterFunc(GetState);
     }
 
     private ChatInputState BuildState()
@@ -67,10 +91,13 @@ internal sealed class TypingIpc : IDisposable
         HasState = true;
         LastState = state;
         StateChangedGate.SendMessage(state);
+        // v1.4.9 R4: mirror on ChatTwo-prefixed slot for no-fork-policy plugins.
+        ChatTwoStateChangedGate.SendMessage(state);
     }
 
     public void Dispose()
     {
         StateQueryGate.UnregisterFunc();
+        ChatTwoStateQueryGate.UnregisterFunc();
     }
 }

HellionChat/IpcManager.cs

@@ -1,11 +1,14 @@
 using Dalamud.Game.Text.SeStringHandling;
 using Dalamud.Game.Text.SeStringHandling.Payloads;
 using Dalamud.Plugin.Ipc;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat;
 
 internal sealed class IpcManager : IDisposable
 {
+    private readonly ILogger<IpcManager> _logger;
+
     private ICallGateProvider<string> RegisterGate { get; }
     private ICallGateProvider<string, object?> UnregisterGate { get; }
     private ICallGateProvider<object?> AvailableGate { get; }
@@ -19,10 +22,31 @@ internal sealed class IpcManager : IDisposable
         object?
     > InvokeGate { get; }
 
+    // v1.4.9 R4: ChatTwo IPC compatibility mirror. Third-party plugins with
+    // a no-fork policy (e.g. Artisan, AllaganTools) only subscribe to the
+    // ChatTwo.*-prefixed context-menu integration gates. Mirroring all four
+    // provider slots under the ChatTwo namespace lets those plugins keep
+    // working without code changes on their side. Conflict detection
+    // prevents ChatTwo and HellionChat from loading in parallel, so no slot
+    // collision risk.
+    private ICallGateProvider<string> ChatTwoRegisterGate { get; }
+    private ICallGateProvider<string, object?> ChatTwoUnregisterGate { get; }
+    private ICallGateProvider<object?> ChatTwoAvailableGate { get; }
+    private ICallGateProvider<
+        string,
+        PlayerPayload?,
+        ulong,
+        Payload?,
+        SeString?,
+        SeString?,
+        object?
+    > ChatTwoInvokeGate { get; }
+
     internal List<string> Registered { get; } = [];
 
-    public IpcManager()
+    public IpcManager(ILogger<IpcManager> logger)
     {
+        _logger = logger;
         RegisterGate = Plugin.Interface.GetIpcProvider<string>("HellionChat.Register");
         RegisterGate.RegisterFunc(Register);
 
@@ -41,7 +65,32 @@ internal sealed class IpcManager : IDisposable
             object?
         >("HellionChat.Invoke");
 
+        // v1.4.9 R4: ChatTwo-prefixed mirrors of the four context-menu slots
+        // above. Share the same Register/Unregister backing methods so a
+        // plugin that subscribes via either namespace lands in the same
+        // Registered list. SendMessage on Invoke fans out to both gates.
+        ChatTwoRegisterGate = Plugin.Interface.GetIpcProvider<string>("ChatTwo.Register");
+        ChatTwoRegisterGate.RegisterFunc(Register);
+
+        ChatTwoAvailableGate = Plugin.Interface.GetIpcProvider<object?>("ChatTwo.Available");
+
+        ChatTwoUnregisterGate = Plugin.Interface.GetIpcProvider<string, object?>(
+            "ChatTwo.Unregister"
+        );
+        ChatTwoUnregisterGate.RegisterAction(Unregister);
+
+        ChatTwoInvokeGate = Plugin.Interface.GetIpcProvider<
+            string,
+            PlayerPayload?,
+            ulong,
+            Payload?,
+            SeString?,
+            SeString?,
+            object?
+        >("ChatTwo.Invoke");
+
         AvailableGate.SendMessage();
+        ChatTwoAvailableGate.SendMessage();
     }
 
     internal void Invoke(
@@ -54,6 +103,8 @@ internal sealed class IpcManager : IDisposable
     )
     {
         InvokeGate.SendMessage(id, sender, contentId, payload, senderString, content);
+        // v1.4.9 R4: fan out the same event to plugins listening on ChatTwo.Invoke.
+        ChatTwoInvokeGate.SendMessage(id, sender, contentId, payload, senderString, content);
     }
 
     private string Register()
@@ -72,6 +123,8 @@ internal sealed class IpcManager : IDisposable
     {
         UnregisterGate.UnregisterAction();
         RegisterGate.UnregisterFunc();
+        ChatTwoUnregisterGate.UnregisterAction();
+        ChatTwoRegisterGate.UnregisterFunc();
         Registered.Clear();
     }
 }

HellionChat/Message.cs

@@ -153,8 +153,8 @@ public partial class Message
             }
             catch (ArgumentException ex)
             {
-                Plugin.Log.Error(ex, "Failed to parse extra chat channel GUID");
+                Plugin.LogProxy.Error(ex, "Failed to parse extra chat channel GUID");
-                Plugin.Log.Error($"Byte Array: ${string.Join(", ", data[4..^1])}");
+                Plugin.LogProxy.Error($"Byte Array: ${string.Join(", ", data[4..^1])}");
                 return Guid.Empty;
             }
         }
@@ -251,7 +251,7 @@ public partial class Message
                         AddChunkWithMessage(
                             text.NewWithStyle(chunk.Source, chunk.Link, token.Value)
                         );
-                        Plugin.Log.Debug(
+                        Plugin.LogProxy.Debug(
                             $"Invalid URL accepted by Regex but failed URI parsing: '{token.Value}'"
                         );
                     }
@@ -416,7 +416,7 @@ public partial class Message
                 catch (Exception)
                 {
                     AddChunkWithMessage(text.NewWithStyle(chunk.Source, chunk.Link, split));
-                    Plugin.Log.Debug($"Failed to parse the text param: '{split}'");
+                    Plugin.LogProxy.Debug($"Failed to parse the text param: '{split}'");
                 }
             }
         }

HellionChat/MessageManager.cs

@@ -14,6 +14,7 @@ using HellionChat.Util;
 using Lumina.Text.Expressions;
 using Lumina.Text.Payloads;
 using Lumina.Text.ReadOnly;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat;
 
@@ -22,21 +23,13 @@ internal class MessageManager : IAsyncDisposable
     internal const int MessageDisplayLimit = 10_000;
 
     private Plugin Plugin { get; }
+    private readonly ILogger<MessageManager> _logger;
     internal MessageStore Store { get; }
 
     private Dictionary<ChatType, NameFormatting> Formats { get; } = [];
     private ulong LastContentId { get; set; }
 
-    // Messages go into the PendingSync queue first, which will be consumed one
+    // PendingSync (main thread) → PendingAsync (worker thread); LinkedList for O(1) Last access
-    // at a time in the main thread. This is to delay the async processing until
-    // after we've received the content ID from the ContentIdResolver hook.
-    //
-    // After that, the message is enqueued in the PendingAsync queue, which will
-    // be consumed in a separate thread and perform more processing (emotes,
-    // URLs) as well as inserting the message into the database.
-    // LinkedList instead of Queue: ContentIdResolver hits PendingSync.Last
-    // every hook call. Queue<T>.Last() is the LINQ extension and walks the
-    // whole queue (O(n)); LinkedList<T>.Last is an O(1) node reference.
     private LinkedList<PendingMessage> PendingSync { get; } = [];
     private ConcurrentQueue<PendingMessage> PendingAsync { get; } = [];
     private readonly Thread PendingMessageThread;
@@ -53,21 +46,26 @@ internal class MessageManager : IAsyncDisposable
         }
     }
 
-    // Hellion Chat — Auto-Tell-Tabs hook. Fires after a fully processed
+    // Auto-Tell-Tabs hook: fires after a message is processed and stored, allowing
-    // message has been routed to all matching persistent tabs and stored
+    // AutoTellTabsService to spawn or refresh temp tabs without coupling.
-    // in the database. The AutoTellTabsService subscribes to spawn or
-    // refresh temp tabs without having to wedge itself into ProcessMessage
-    // directly.
     public event Action<Message>? MessageProcessed;
 
-    internal unsafe MessageManager(Plugin plugin)
+    internal unsafe MessageManager(
+        Plugin plugin,
+        ILogger<MessageManager> logger,
+        ILoggerFactory loggerFactory
+    )
     {
         Plugin = plugin;
+        _logger = logger;
 
-        Store = new MessageStore(DatabasePath());
+        Store = new MessageStore(
+            DatabasePath(),
+            Plugin.PlatformUtil,
+            loggerFactory.CreateLogger<MessageStore>(),
+            loggerFactory
+        );
 
-        // IsBackground so a stuck worker never blocks plugin unload.
-        // Cooperative cancel via PendingThreadCancellationToken first, background flag is the safety net.
         PendingMessageThread = new Thread(() =>
             ProcessPendingMessages(PendingThreadCancellationToken.Token)
         )
@@ -105,14 +103,11 @@ internal class MessageManager : IAsyncDisposable
             await Task.Delay(100);
 
         if (PendingMessageThread.IsAlive)
-            Plugin.Log.Warning(
+            _logger.LogWarning(
                 "PendingMessageThread did not observe cancellation within 10s. "
-                    + "Worker remains on a background thread; next plugin reload releases it. "
+                    + "Worker remains on background thread; next plugin reload releases it."
-                    + "If this recurs, file a bug with /xllog after the previous reload."
             );
 
-        // CTS owns an unmanaged WaitHandle; dispose even if the worker is
-        // alive — it checks IsCancellationRequested via the linked token.
         PendingThreadCancellationToken.Dispose();
 
         Store.Dispose();
@@ -154,7 +149,7 @@ internal class MessageManager : IAsyncDisposable
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Error processing pending message");
+                    _logger.LogError(ex, "Error processing pending message");
                 }
             }
             else
@@ -166,12 +161,7 @@ internal class MessageManager : IAsyncDisposable
 
     internal void ClearAllTabs()
     {
-        // Hellion Chat — TempTabs haben keine DB-Persistenz (session-only,
+        // TempTabs are session-only (not persisted); exclude them to preserve Tell history
-        // direkt vom AutoTellTabsService befüllt). Ein Clear+Refilter würde
-        // sie leer hinterlassen weil FilterAllTabs nichts aus der DB
-        // findet — Tells sind oft durch Privacy-Filter blockiert oder
-        // schlicht session-flüchtig. TempTabs vom Clear-Pfad ausschließen
-        // damit Settings-Save den Tell-Verlauf nicht zerstört.
         foreach (var tab in Plugin.Config.Tabs.Where(t => !t.IsTempTab))
             tab.Clear();
     }
@@ -184,12 +174,7 @@ internal class MessageManager : IAsyncDisposable
 
         using var messages = Store.GetMostRecentMessages(CurrentContentId, since);
 
-        // We store the pending messages to be added to the chat log in a
+        // TempTabs are excluded; they maintain live state from AutoTellTabsService
-        // temporary list, and apply them all at once after filtering.
-        // TempTabs werden ausgeschlossen — sie bleiben live-state aus dem
-        // AutoTellTabsService, ein DB-Refilter würde sie nur partial
-        // wiederherstellen falls Tells in DB liegen, oder leer lassen wenn
-        // Privacy-Filter sie blockiert hat.
         var pendingTabs = Plugin
             .Config.Tabs.Where(t => !t.IsTempTab)
             .Select(tab => (tab, new List<Message>()))
@@ -198,7 +183,7 @@ internal class MessageManager : IAsyncDisposable
         foreach (var (_, pendingMessages) in pendingTabs.Where(ptab => ptab.Item1.Matches(message)))
             pendingMessages.Add(message);
 
-        // Apply the messages to the chat log in one go.
+        // Apply messages to chat log all at once.
         foreach (var (tab, pendingMessages) in pendingTabs)
             tab.Messages.AddSortPrune(pendingMessages, MessageDisplayLimit);
 
@@ -207,13 +192,14 @@ internal class MessageManager : IAsyncDisposable
 
         WrapperUtil.AddNotification(Language.LoadMessages_Error, NotificationType.Error);
 
-        // Mark the failed messages as deleted so we don't try to load them
+        // Mark failed messages as deleted to prevent retry attempts
-        // again.
         var failedIds = messages.FailedMessageIds();
-        Plugin.Log.Info($"Marking {failedIds.Count} messages as deleted due to parse failures");
+        _logger.LogInformation(
+            $"Marking {failedIds.Count} messages as deleted due to parse failures"
+        );
         foreach (var msgId in messages.FailedMessageIds())
         {
-            Plugin.Log.Debug($"Marking message '{msgId}' as deleted due to parse failure");
+            _logger.LogDebug($"Marking message '{msgId}' as deleted due to parse failure");
             Store.DeleteMessage(msgId);
         }
     }
@@ -229,10 +215,13 @@ internal class MessageManager : IAsyncDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in FilterAllTabs");
+                _logger.LogError(ex, "Error in FilterAllTabs");
             }
 
-            Plugin.Log.Debug($"FilterAllTabs took {stopwatch.ElapsedMilliseconds}ms");
+            // v1.4.9 R3 profiling: Information so the xllog tail surfaces this
+            // without a Debug filter. Belt-and-suspenders for future plugin-load
+            // regressions; remains in place after Sub-Task 3.4 Befund.
+            _logger.LogInformation($"FilterAllTabs took {stopwatch.ElapsedMilliseconds}ms");
         });
     }
 
@@ -256,16 +245,10 @@ internal class MessageManager : IAsyncDisposable
         // Update colour codes.
         GlobalParametersCache.Refresh();
 
-        // We delay messages to be handed off to the async processing thread
+        // Delay to next tick to get content ID from ContentIdResolver hook
-        // in the next tick, otherwise we can't get the content ID from the hook
-        // below.
         PendingSync.AddLast(pendingMessage);
     }
 
-    // This hook is called immediately after receiving a message with the
-    // message's content ID. If multiple messages are received in the same tick,
-    // this will be called for each message immediately after ChatMessage is
-    // called for each message.
     private unsafe void ContentIdResolver(
         RaptureLogModule* agent,
         ulong contentId,
@@ -293,7 +276,7 @@ internal class MessageManager : IAsyncDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in ContentIdResolver");
+            _logger.LogError(ex, "Error in ContentIdResolver");
         }
     }
 
@@ -408,7 +391,7 @@ internal class MessageManager : IAsyncDisposable
         var after = formats
             .GetRange(firstStringParam + 1, secondStringParam - firstStringParam)
             .Where(payload => payload.Type == ReadOnlySePayloadType.Text)
-            .Select(text => Encoding.UTF8.GetString(text.Body.Span)); // Can't use `ToString()` as it defaults to macro
+            .Select(text => Encoding.UTF8.GetString(text.Body.Span));
 
         var nameFormatting = NameFormatting.Of(string.Join("", before), string.Join("", after));
         Formats[type] = nameFormatting;

HellionChat/PayloadHandler.cs

@@ -20,6 +20,7 @@ using HellionChat.Resources;
 using HellionChat.Ui;
 using HellionChat.Util;
 using Lumina.Excel.Sheets;
+using Microsoft.Extensions.Logging;
 using Action = System.Action;
 using ChatTwoPartyFinderPayload = HellionChat.Util.PartyFinderPayload;
 using DalamudPartyFinderPayload = Dalamud.Game.Text.SeStringHandling.Payloads.PartyFinderPayload;
@@ -40,9 +41,12 @@ public sealed class PayloadHandler
 
     private const uint PopupSfx = 1;
 
-    internal PayloadHandler(ChatLogWindow logWindow)
+    private readonly ILogger<PayloadHandler> _logger;
+
+    internal PayloadHandler(ChatLogWindow logWindow, ILogger<PayloadHandler> logger)
     {
         LogWindow = logWindow;
+        _logger = logger;
     }
 
     internal void Draw()
@@ -131,7 +135,7 @@ public sealed class PayloadHandler
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error executing integration");
+                _logger.LogError(ex, "Error executing integration");
             }
         }
 
@@ -535,7 +539,7 @@ public sealed class PayloadHandler
             )
         )
         {
-            Plugin.Log.Warning("Could not find DalamudLinkHandlers");
+            _logger.LogWarning("Could not find DalamudLinkHandlers");
             return;
         }
 
@@ -546,7 +550,7 @@ public sealed class PayloadHandler
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error executing DalamudLinkPayload handler");
+            _logger.LogError(ex, "Error executing DalamudLinkPayload handler");
         }
     }
 

HellionChat/Plugin.cs

@@ -14,6 +14,9 @@ using HellionChat.Ipc;
 using HellionChat.Resources;
 using HellionChat.Ui;
 using HellionChat.Util;
+using Microsoft.Data.Sqlite;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
 
 namespace HellionChat;
 
@@ -90,10 +93,8 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
     public readonly WindowSystem WindowSystem = new(PluginName);
 
-    // v1.4.3: properties moved from { get; } to { get; private set; } = null!;
+    // Phase-2 services are constructed in LoadAsync; null! shape is kept
-    // because LoadAsync now owns construction of the Phase-2 services.
+    // consistent across all properties for clarity.
-    // Phase-1 services use the same shape for consistency, even though
-    // they're still allocated in the ctor.
     public SettingsWindow SettingsWindow { get; private set; } = null!;
     public ChatLogWindow ChatLogWindow { get; private set; } = null!;
     public DbViewer DbViewer { get; private set; } = null!;
@@ -115,27 +116,55 @@ public sealed class Plugin : IAsyncDalamudPlugin
     internal Ui.StatusBar StatusBar { get; private set; } = null!;
     internal Integrations.HonorificService HonorificService { get; private set; } = null!;
 
-    // (B3) Lightless idempotency guard — Dalamud may fire DisposeAsync twice
+    // Platform indirection over Dalamud.Utility.Util. Wired in Phase-1 ctor so
-    // in a reload race; second call short-circuits.
+    // any service allocated in LoadAsync can read Plugin.PlatformUtil.
+    internal static IPlatformUtil PlatformUtil { get; private set; } = null!;
+
+    // Log indirection over Dalamud's IPluginLog. Same rationale as PlatformUtil:
+    // call-sites read through LogProxy so MessageStore can be tested in
+    // isolation. Wired immediately after Dalamud injects Log.
+    internal static IPluginLogProxy LogProxy { get; private set; } = null!;
+
+    // Nullable so DisposeAsync stays safe if Host-build throws before the
+    // fields get assigned — Dalamud fires DisposeAsync regardless.
+    private readonly IHost? _host;
+    private readonly PluginLifecycle? _lifecycle;
+
+    // Wrapper cached so TearDown can detach the live instance instead of
+    // re-registering with identical args (v1.4.9 ISSUE-1 cleanup).
+    private CommandWrapper? _hellionSettingsCmd;
+    private CommandWrapper? _hellionViewCmd;
+    private CommandWrapper? _hellionDebuggerCmd;
+#if DEBUG
+    private CommandWrapper? _hellionSeStringCmd;
+#endif
+
+    // Idempotency guard — Dalamud may fire DisposeAsync twice in a reload race.
     private int _disposeStarted;
 
+    // Set in the first DisposeAsync statement so async callbacks scheduled
+    // via Framework.RunOnTick (v1.4.8 B3 retention sweep) can early-bail
+    // before they touch state that has already been torn down. Volatile
+    // because the tick reads it from a different thread than the writer.
+    private volatile bool _isDisposing;
+
     internal int DeferredSaveFrames = -1;
 
-    // Serialises retention sweeps. The 24h auto-sweep on plugin load and
+    // Cancels the v1.4.8 FTS5 bulk-insert worker on plugin teardown. The
-    // the manual button in the Privacy tab both run on background threads;
+    // worker runs off the framework thread on its own SqliteConnection, so a
-    // without this gate, hitting the manual button moments after a fresh
+    // Dispose mid-rebuild must signal cancellation before MessageManager
-    // plugin start would launch two sweeps in parallel and the second one
+    // tears down (the worker logs "rebuild failed" via Log on error paths).
-    // would just re-do work the first one already finished. The lock guards
+    private CancellationTokenSource? _ftsRebuildCts;
-    // the flag — the flag check itself bails before we touch the database.
+
-    // Volatile because the ImGui thread reads the flag outside the lock to
+    // Serialises retention sweeps so a manual trigger and the 24h auto-sweep
-    // gate the manual button; without it the JIT may cache the value in a
+    // can't run in parallel. Volatile because the ImGui thread reads it outside
-    // register and miss the background-thread update.
+    // the lock to gate the manual button.
     internal readonly object RetentionSweepLock = new();
     internal volatile bool RetentionSweepRunning;
 
     internal DateTime GameStarted { get; }
 
-    // Tab management needs to happen outside the chatlog window class for access reasons
+    // Tab management lives here rather than in ChatLogWindow for access reasons.
     internal int LastTab { get; set; }
     internal int? WantedTab { get; set; }
     internal Tab CurrentTab
@@ -149,52 +178,113 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
     public Plugin()
     {
-        // Phase-1 ctor stays minimal: bootstrap-essentials only (conflict
+        // Phase-1 ctor: bootstrap-essentials only (conflict gate, config load,
-        // gate, config load, language + ImGui init, WindowSystem skeleton).
+        // language + ImGui init). All service/window allocation lives in LoadAsync.
-        // Schema migrations and every service / window allocation moved to
-        // LoadAsync so the sync ctor returns fast. On failure here nothing
-        // is initialized yet, so just throw — there is nothing to clean up.
 
-        // Refuse to start if upstream Chat 2 is loaded — prevents IPC
+        // Block load if upstream Chat 2 is active — prevents IPC collisions
-        // channel collisions and double-replacement of the in-game chat
+        // and double-replacement of the in-game chat window.
-        // window. Throwing here makes Dalamud abort the load cleanly with
-        // our localized message instead of crashing FFXIV mid-frame.
         ChatTwoConflictDetector.ThrowIfChatTwoIsLoaded(Interface);
 
         GameStarted = Process.GetCurrentProcess().StartTime.ToUniversalTime();
 
-        // Hellion Chat: take over config + database from upstream ChatTwo
+        // Migrate config + database from upstream ChatTwo on first start.
-        // before Dalamud loads our plugin config. Idempotent: only acts on
-        // the first start where the legacy paths exist and ours don't.
         MigrateFromChatTwoLayout();
 
         Config = Interface.GetPluginConfig() as Configuration ?? new Configuration();
 
-        // Schema-gate: v1.4.3 only supports config schema v16. Older configs
+        // PlatformUtil and LogProxy are filled from the DI container in
-        // went through their migrations in v1.2.1 (v15→v16) and earlier; users
+        // Phase-1 below (`_host.Services.GetRequiredService<IPlatformUtil>()`
-        // who skipped past those releases need to install v1.4.2 first to run
+        // and the LogProxy equivalent). Phase-0 helpers that run before that
-        // the migration chain, then upgrade to v1.4.3.
+        // point (MigrateFromChatTwoLayout, LanguageChanged, ImGuiUtil.Initialize)
+        // do not touch either static, so the brief null-window is safe.
+
+        // Schema gate: v1.4.x requires config v16+. Users on older schemas
+        // must install v1.4.2 first to run the migration chain. v17 adds
+        // Tab.IsPinned (additive, no data migration needed) so v16 configs
+        // load cleanly and get their Version stamp bumped after the gate.
         if (Config.Version < 16)
         {
             throw new InvalidOperationException(
-                $"HellionChat v1.4.3 requires config schema v16, got v{Config.Version}. "
+                $"HellionChat v1.4.10 requires config schema v16, got v{Config.Version}. "
-                    + "Please install v1.4.2 first to migrate the configuration, then upgrade to v1.4.3."
+                    + "Please install v1.4.2 first to migrate the configuration, then upgrade to v1.4.10."
             );
         }
+        Config.Version = 17;
 
-        // Hellion Chat — Auto-Tell-Tabs Defense-in-Depth. SaveConfig
+        // Unpinned TempTabs are session-only and dropped on every load. Pinned
-        // already strips temp tabs before persistence, but a previous
+        // TempTabs survive reload — Jin's tester feedback (v1.4.7).
-        // crash or external write could have left them in the JSON.
+        Config.Tabs.RemoveAll(TabLifecycleHelpers.ShouldStripOnLoad);
-        // Drop them on load to guarantee the session-only invariant.
-        Config.Tabs.RemoveAll(t => t.IsTempTab);
 
         LanguageChanged(Interface.UiLanguage);
         ImGuiUtil.Initialize(this);
 
         DeferredSaveFrames = -1;
 
-        // WindowSystem skeleton is initialised by the readonly field above —
+        // Custom themes dir + seed run before the container builds so the
-        // no AddWindow yet; window construction lives in LoadAsync.
+        // ThemeRegistry factory lambda finds the directory ready.
+        var customThemesDir = Path.Combine(Interface.ConfigDirectory.FullName, "themes");
+        Directory.CreateDirectory(customThemesDir);
+        SeedExampleThemeIfEmpty(customThemesDir);
+
+        // Phase-1: build the host synchronously (the schema gate must clear
+        // before services allocate; Lightless' deferred build would invert
+        // that order) and pull singletons into the Plugin.X surface.
+        var dependencies = new PluginHostDependencies(
+            Interface,
+            Log,
+            ChatGui,
+            ClientState,
+            CommandManager,
+            Condition,
+            DataManager,
+            Framework,
+            GameGui,
+            KeyState,
+            ObjectTable,
+            PartyList,
+            TargetManager,
+            TextureProvider,
+            GameInteropProvider,
+            GameConfig,
+            Notification,
+            AddonLifecycle,
+            PlayerState,
+            Evaluator,
+            SelfTestRegistry
+        );
+
+        _host = PluginHostFactory.Build(this, dependencies);
+        _lifecycle = _host.Services.GetRequiredService<PluginLifecycle>();
+        _lifecycle.Host = _host;
+
+        // Plugin.X static bridge - filled from the container so DI-aware code
+        // and the ~93 Plugin.X consumer sites read the same instances.
+        PlatformUtil = _host.Services.GetRequiredService<IPlatformUtil>();
+        LogProxy = _host.Services.GetRequiredService<IPluginLogProxy>();
+        FileDialogManager = _host.Services.GetRequiredService<FileDialogManager>();
+
+        // Resolve order matters: block-B services first so the windows can
+        // read Plugin.MessageManager etc. from their own ctors without NREs.
+        FontManager = _host.Services.GetRequiredService<FontManager>();
+        ThemeRegistry = _host.Services.GetRequiredService<Themes.ThemeRegistry>();
+        Commands = _host.Services.GetRequiredService<Commands>();
+        Functions = _host.Services.GetRequiredService<GameFunctions.GameFunctions>();
+        Ipc = _host.Services.GetRequiredService<IpcManager>();
+        TypingIpc = _host.Services.GetRequiredService<TypingIpc>();
+        ExtraChat = _host.Services.GetRequiredService<ExtraChat>();
+        HonorificService = _host.Services.GetRequiredService<Integrations.HonorificService>();
+        StatusBar = _host.Services.GetRequiredService<Ui.StatusBar>();
+        MessageManager = _host.Services.GetRequiredService<MessageManager>();
+        AutoTellTabsService = _host.Services.GetRequiredService<AutoTellTabsService>();
+
+        ChatLogWindow = _host.Services.GetRequiredService<ChatLogWindow>();
+        SettingsWindow = _host.Services.GetRequiredService<SettingsWindow>();
+        DbViewer = _host.Services.GetRequiredService<DbViewer>();
+        InputPreview = _host.Services.GetRequiredService<InputPreview>();
+        CommandHelpWindow = _host.Services.GetRequiredService<CommandHelpWindow>();
+        SeStringDebugger = _host.Services.GetRequiredService<SeStringDebugger>();
+        DebuggerWindow = _host.Services.GetRequiredService<DebuggerWindow>();
+        FirstRunWizard = _host.Services.GetRequiredService<FirstRunWizard>();
     }
 
     public async Task LoadAsync(CancellationToken cancellationToken)
@@ -203,14 +293,8 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
         try
         {
-            // Hellion v1.0.0 default tab layout. Five thematically separated
+            // Default tab layout on fresh install. Tells are handled by
-            // tabs: General catches the immediate-surroundings public chat
+            // Auto-Tell-Tabs; Novice Network has no preset tab by design.
-            // (Say/Yell/Shout) only; System absorbs the rest of the technical
-            // and gameplay-event noise; FreeCompany, Group and Linkshell each
-            // own their respective channel set. Tells are not in a static
-            // tab anymore — Auto-Tell-Tabs spawns dedicated per-conversation
-            // tabs on demand. Novice-Network gets no preset tab; users who
-            // want it can add HellionBeginner from Settings → Tabs.
             if (Config.Tabs.Count == 0)
             {
                 Config.Tabs.Add(TabsUtil.VanillaGeneral);
@@ -222,124 +306,186 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
             cancellationToken.ThrowIfCancellationRequested();
 
-            // Sync allocation + handle registration. BuildFonts() registers
+            // Container drives service init now: Host.StartAsync triggers the
-            // IFontHandles with Dalamud's UiBuilder.FontAtlas — registration
+            // remaining IHostedService adapters (ThemeRegistry cache warmup +
-            // itself is non-blocking (handles stored, lambdas queued). Dalamud
+            // Switch, IPC eager-resolve, MessageManager FilterAllTabsAsync,
-            // rebuilds the atlas on its own pipeline a few frames later; first
+            // AutoTellTabsService.Initialize). FontManager runs its own init
-            // frames render with the default font until the rebuild lands and
+            // inline inside the ctor's SuppressAutoRebuild block on eager
-            // ImGui switches to Hellion-Exo2 / NotoSans (visible "font-pop").
+            // resolve. Window registration with WindowSystem runs on the
-            // Mirrors ChatTwo Plugin.cs:152.
+            // framework thread inside PluginLifecycle.LoadAsync after
-            FontManager = new FontManager();
+            // StartAsync returns.
-            FontManager.BuildFonts();
+            if (_lifecycle is not null)
+                await _lifecycle.LoadAsync(cancellationToken).ConfigureAwait(false);
 
-            // Theme init stays sync on the LoadAsync continuation — cheap,
+            SelfTestRegistry.RegisterTestSteps([
-            // and Active is read every Draw frame, so the registry must be
+                new SelfTests.ThemeSwitchSelfTestStep(this),
-            // wired before the first hook fires.
+                new SelfTests.FontManagerCtorSmokeStep(this),
-            var customThemesDir = Path.Combine(Interface.ConfigDirectory.FullName, "themes");
+                new SelfTests.FontPushSmokeStep(this),
-            Directory.CreateDirectory(customThemesDir);
+                new SelfTests.WizardStateSmokeStep(this),
-            SeedExampleThemeIfEmpty(customThemesDir);
+            ]);
-            ThemeRegistry = new Themes.ThemeRegistry(customThemesDir);
-            ThemeRegistry.Switch(Config.Theme);
 
-            cancellationToken.ThrowIfCancellationRequested();
+            // Re-surface the wizard for existing users when a major UX
+            // rework ships. The constant tracks the most recent version
+            // whose wizard should be shown once; bump it in future cycles
+            // that reshape the onboarding flow. Saved immediately so a
+            // pre-Finish crash doesn't loop the prompt forever.
+            const string WizardReshowVersion = "1.5.2";
+            if (Config.WizardLastShownVersion != WizardReshowVersion)
+            {
+                Config.FirstRunCompleted = false;
+                Config.WizardLastShownVersion = WizardReshowVersion;
+                SaveConfig();
+            }
 
-            // Service allocations: order encodes dependencies. Commands is
-            // alloc-only here; Initialise() runs after windows exist so the
-            // slash-commands can toggle their visibility. HonorificService
-            // registers IPC subscribers up-front so Ready/Disposing events
-            // are caught from the very first frame.
-            FileDialogManager = new FileDialogManager();
-            Commands = new Commands();
-            Functions = new GameFunctions.GameFunctions(this);
-            Ipc = new IpcManager();
-            TypingIpc = new TypingIpc(this);
-            ExtraChat = new ExtraChat();
-            HonorificService = new Integrations.HonorificService(Interface, Log, Framework);
-            StatusBar = new Ui.StatusBar();
-            MessageManager = new MessageManager(this);
-
-            // Auto-Tell-Tabs subscribes to MessageManager.MessageProcessed for
-            // live tells and to ClientState.Logout for cleanup; needs the live
-            // store handed in at construction.
-            AutoTellTabsService = new AutoTellTabsService(
-                this,
-                MessageManager,
-                MessageManager.Store
-            );
-            AutoTellTabsService.Initialize();
-
-            // SelfTest steps poll Active per frame and need the registry wired.
-            SelfTestRegistry.RegisterTestSteps([new SelfTests.ThemeSwitchSelfTestStep(this)]);
-
-            ChatLogWindow = new ChatLogWindow(this);
-            SettingsWindow = new SettingsWindow(this);
-            DbViewer = new DbViewer(this);
-            InputPreview = new InputPreview(ChatLogWindow);
-            CommandHelpWindow = new CommandHelpWindow(ChatLogWindow);
-            SeStringDebugger = new SeStringDebugger(this);
-            DebuggerWindow = new DebuggerWindow(this);
-            FirstRunWizard = new FirstRunWizard(this);
-
-            WindowSystem.AddWindow(ChatLogWindow);
-            WindowSystem.AddWindow(SettingsWindow);
-            WindowSystem.AddWindow(DbViewer);
-            WindowSystem.AddWindow(InputPreview);
-            WindowSystem.AddWindow(CommandHelpWindow);
-            WindowSystem.AddWindow(SeStringDebugger);
-            WindowSystem.AddWindow(DebuggerWindow);
-            WindowSystem.AddWindow(FirstRunWizard);
-
-            // Open the wizard on a fresh install. Existing ChatTwo users have
-            // FirstRunCompleted set to true by the v6→v7 migration above.
             if (!Config.FirstRunCompleted)
                 FirstRunWizard.IsOpen = true;
 
             cancellationToken.ThrowIfCancellationRequested();
 
-            // let all the other components register, then initialize commands
+            // Populate the command dictionary + UiBuilder hooks BEFORE
+            // Commands.Initialise() walks the dictionary and registers each
+            // entry with Dalamud's CommandManager (Commands.cs:15-28). Adding
+            // wrappers after Initialise() would leak them — they'd live in
+            // the dictionary but never reach Dalamud.
+            SetupCommands();
             Commands.Initialise();
 
-            // Daily retention sweep, fire-and-forget. Skips itself when
+            // Daily retention sweep — fire-and-forget, skips when disabled
-            // disabled or when it already ran within the past 24 hours.
+            // or already ran within the past 24 hours.
             RunRetentionSweepIfDue();
 
             if (Config.ShowEmotes)
-                _ = EmoteCache.LoadData(); // Fire-and-forget, exceptions caught inside
+                _ = EmoteCache.LoadData();
 
-            if (Interface.Reason is not PluginLoadReason.Boot)
+            // FilterAllTabsAsync now runs from MessageManagerInitHostedService
-                MessageManager.FilterAllTabsAsync();
+            // during Host.StartAsync (same Reason-not-Boot guard there).
+
+            // Kick the FTS5 rebuild worker if Migrate4 just added the schema or
+            // a previous run was cut short (InitFtsReadyCache leaves _ftsReady
+            // false in that case). Runs off the framework thread on its own
+            // SqliteConnection so the live UpsertMessage path keeps flowing
+            // through the chunked-commit windows.
+            _ftsRebuildCts = new CancellationTokenSource();
+            if (!MessageManager.Store.IsFtsIndexBuilt)
+            {
+                var token = _ftsRebuildCts.Token;
+                _ = Task.Run(
+                    async () =>
+                    {
+                        // FQN: Plugin.Notification (Z.74) shadows the type name.
+                        Dalamud.Interface.ImGuiNotification.IActiveNotification? notif = null;
+                        try
+                        {
+                            notif = Notification.AddNotification(
+                                new Dalamud.Interface.ImGuiNotification.Notification
+                                {
+                                    Title = "Hellion Chat",
+                                    Content = "Indexing chat history for full-text search...",
+                                    Type = Dalamud
+                                        .Interface
+                                        .ImGuiNotification
+                                        .NotificationType
+                                        .Info,
+                                    Minimized = false,
+                                    InitialDuration = TimeSpan.FromMinutes(10),
+                                }
+                            );
+
+                            // Progress<T> raises this callback on the captured
+                            // sync-context (Task.Run worker pool). IActiveNotification
+                            // is ImGui-backed and mutates the UI, so marshal the
+                            // mutation onto the framework thread via RunOnTick.
+                            var progress = new Progress<long>(done =>
+                            {
+                                Framework.RunOnTick(() =>
+                                {
+                                    if (notif is { } n)
+                                        n.Content = $"Indexing chat history: {done:N0} messages...";
+                                });
+                            });
+
+                            // Worker-owned connection. Closed+disposed before we
+                            // flip the readiness flag so the DbViewer never sees
+                            // IsFtsIndexBuilt=true while the worker connection
+                            // is still alive.
+                            SqliteConnection? workerConn = null;
+                            try
+                            {
+                                workerConn = MessageManager.Store.OpenSecondaryConnection();
+                                var total = await Task.Run(
+                                        () =>
+                                            MessageManager.Store.RebuildFtsIndex(
+                                                workerConn,
+                                                progress,
+                                                token
+                                            ),
+                                        token
+                                    )
+                                    .ConfigureAwait(false);
+
+                                workerConn.Close();
+                                workerConn.Dispose();
+                                workerConn = null;
+                                MessageManager.Store.MarkFtsIndexBuilt();
+
+                                if (notif is { } final)
+                                {
+                                    final.Content = $"Indexed {total:N0} messages.";
+                                    final.Type = Dalamud
+                                        .Interface
+                                        .ImGuiNotification
+                                        .NotificationType
+                                        .Success;
+                                    final.InitialDuration = TimeSpan.FromSeconds(5);
+                                }
+                            }
+                            finally
+                            {
+                                workerConn?.Dispose();
+                            }
+                        }
+                        catch (OperationCanceledException)
+                        {
+                            notif?.DismissNow();
+                        }
+                        catch (Exception ex)
+                        {
+                            Log.Error(ex, "FTS index rebuild failed");
+                            if (notif is { } err)
+                            {
+                                err.Content =
+                                    "Full-text indexing failed -- search will use local filter only.";
+                                err.Type = Dalamud
+                                    .Interface
+                                    .ImGuiNotification
+                                    .NotificationType
+                                    .Error;
+                            }
+                        }
+                    },
+                    _ftsRebuildCts.Token
+                );
+            }
 
             Interface.UiBuilder.DisableCutsceneUiHide = true;
             Interface.UiBuilder.DisableGposeUiHide = true;
 
 #if !DEBUG
-            // Fire-and-forget on a worker thread. The first auto-translate use of
+            // Fire-and-forget — first auto-translate use may have a sub-second
-            // a session may have a sub-second hitch if the cache hasn't filled yet,
+            // hitch if the cache hasn't filled yet, but avoids blocking load.
-            // but that's preferable to making every user wait ~300 ms during
-            // plugin load for a cache they may never touch. ChatTwo (upstream)
-            // does this sync; we trade load-time for first-use latency.
             _ = Task.Run(AutoTranslate.PreloadCache, cancellationToken);
 #endif
 
             cancellationToken.ThrowIfCancellationRequested();
 
-            // (B1) Hooks last: every service and window must be live before
+            // Hooks last — all services and windows must be live before
-            // Dalamud fires our first Draw / FrameworkUpdate tick. Anything
+            // the first Draw / FrameworkUpdate tick fires.
-            // earlier risks rendering against null FontManager / ThemeRegistry.
             Framework.Update += FrameworkUpdate;
             Interface.UiBuilder.Draw += Draw;
             Interface.LanguageChanged += LanguageChanged;
-            // Hellion Chat — surface a "main UI" entry point so Dalamud's
-            // plugin list shows the Open-Plugin button. Settings is the
-            // most useful landing place; OpenConfigUi is already wired to
-            // the same toggle inside SettingsWindow.
-            Interface.UiBuilder.OpenMainUi += OpenMainUi;
         }
         catch
         {
-            // Mirror the v1.4.0 load-failure recovery: hand off to DisposeAsync
-            // so partially-built services are torn down. Swallow the cleanup
-            // exception so the original load failure stays the visible cause.
             try
             {
                 await DisposeAsync().ConfigureAwait(false);
@@ -351,28 +497,40 @@ public sealed class Plugin : IAsyncDalamudPlugin
         }
     }
 
-    // Suppressing this warning because DisposeAsync may run after a partial
-    // LoadAsync, so some properties may not be initialized.
     [SuppressMessage("ReSharper", "ConditionalAccessQualifierIsNonNullableAccordingToAPIContract")]
     public async ValueTask DisposeAsync()
     {
-        // (B3) Idempotency guard — Dalamud may reload-race us; second
+        // Idempotency guard — second call short-circuits on reload race.
-        // call short-circuits so we don't double-dispose services.
         if (Interlocked.Exchange(ref _disposeStarted, 1) != 0)
             return;
 
+        // Set before any cleanup so deferred Framework.RunOnTick callbacks
+        // (B3 retention sweep) see the flag and bail out before they touch
+        // MessageManager / Log / static fields that the rest of this method
+        // is about to tear down.
+        _isDisposing = true;
+
         Exception? failure = null;
 
-        // Hooks unsubscribe FIRST so no Draw / FrameworkUpdate / LanguageChanged
+        // Unsubscribe hooks first — mirrors the hooks-last subscribe order in LoadAsync.
-        // tick can fire while we're tearing services down. Mirrors the
-        // hooks-last subscribe order in LoadAsync.
-        failure = CaptureFailure(failure, () => Interface.UiBuilder.OpenMainUi -= OpenMainUi);
         failure = CaptureFailure(failure, () => Interface.LanguageChanged -= LanguageChanged);
         failure = CaptureFailure(failure, () => Interface.UiBuilder.Draw -= Draw);
         failure = CaptureFailure(failure, () => Framework.Update -= FrameworkUpdate);
 
-        // v1.4.0 F5.3 — flush a pending DeferredSave before service teardown,
+        // Signal the FTS rebuild worker to bail. Runs before MessageManager
-        // since FrameworkUpdate just got unsubscribed and won't fire it.
+        // tears down so the worker's "rebuild failed" log path still finds
+        // a live Log static. Worker owns its own SqliteConnection and disposes
+        // it itself; we only flip the cancellation flag here.
+        failure = CaptureFailure(
+            failure,
+            () =>
+            {
+                _ftsRebuildCts?.Cancel();
+                _ftsRebuildCts?.Dispose();
+            }
+        );
+
+        // Flush a pending DeferredSave — FrameworkUpdate won't fire it anymore.
         failure = CaptureFailure(
             failure,
             () =>
@@ -385,59 +543,18 @@ public sealed class Plugin : IAsyncDalamudPlugin
             }
         );
 
-        // Auto-Tell-Tabs unsubscribes from MessageProcessed before MessageManager
+        // Framework-thread cleanup the container does not reach.
-        // goes away. Pure-memory cleanup, no framework-thread requirement.
-        failure = CaptureFailure(failure, () => AutoTellTabsService?.Dispose());
-
-        // v1.4.0 F6.2 — MessageManager has its own async dispose path
-        // (DB flush, pending-message thread shutdown). Run it before the
-        // framework-block so the worker threads are quiesced first.
-        if (MessageManager is not null)
-        {
-            failure = await CaptureFailureAsync(
-                    failure,
-                    () => MessageManager.DisposeAsync().AsTask()
-                )
-                .ConfigureAwait(false);
-        }
-
-        // (B4) Game-Function / IPC / UI-Window cleanup MUST run on the
-        // framework thread. WindowSystem mutations and IPC subscriber
-        // disposes touch Dalamud state that's only safe from the framework.
-        // Worker-thread DisposeAsync would race the next Draw tick.
-        // Per-line CaptureFailure so a single throw can't strand the lines
-        // behind it; mirrors Lightless DisposeFrameworkBoundServicesAsync.
         try
         {
             await Framework
                 .RunOnFrameworkThread(() =>
                 {
-                    // Game-Functions first — other services may still query
+                    failure = CaptureFailure(failure, TearDownCommands);
-                    // chat-interactable state during their Dispose.
                     failure = CaptureFailure(
                         failure,
                         () => GameFunctions.GameFunctions.SetChatInteractable(true)
                     );
-
-                    // IPC subscribers — dispose before windows so any final
-                    // event firing from the IPC source can't reach a half-torn
-                    // ChatLogWindow.
-                    failure = CaptureFailure(failure, () => HonorificService?.Dispose());
-                    failure = CaptureFailure(failure, () => TypingIpc?.Dispose());
-                    failure = CaptureFailure(failure, () => ExtraChat?.Dispose());
-                    failure = CaptureFailure(failure, () => Ipc?.Dispose());
-
-                    // Windows — RemoveAllWindows first, then per-window Dispose.
-                    // Order matches the pre-v1.4.3 Dispose body byte-for-byte.
-                    // CommandHelpWindow and FirstRunWizard don't implement
-                    // IDisposable; their resources are reclaimed via WindowSystem.
                     failure = CaptureFailure(failure, () => WindowSystem?.RemoveAllWindows());
-                    failure = CaptureFailure(failure, () => ChatLogWindow?.Dispose());
-                    failure = CaptureFailure(failure, () => DbViewer?.Dispose());
-                    failure = CaptureFailure(failure, () => InputPreview?.Dispose());
-                    failure = CaptureFailure(failure, () => SettingsWindow?.Dispose());
-                    failure = CaptureFailure(failure, () => DebuggerWindow?.Dispose());
-                    failure = CaptureFailure(failure, () => SeStringDebugger?.Dispose());
                 })
                 .ConfigureAwait(false);
         }
@@ -446,19 +563,25 @@ public sealed class Plugin : IAsyncDalamudPlugin
             failure ??= ex;
         }
 
-        // Pure-memory cleanups — no Framework / UI / IPC touch, so they
+        // Container disposes services + windows on the framework thread.
-        // run on whatever thread DisposeAsync resumes on.
+        // MessageManager.DisposeAsync is not idempotent, so we let the
-        failure = CaptureFailure(failure, () => Functions?.Dispose());
+        // container do it once instead of double-disposing.
-        failure = CaptureFailure(failure, () => Commands?.Dispose());
+        if (_lifecycle is not null)
+        {
+            failure = await CaptureFailureAsync(failure, () => _lifecycle.DisposeAsync().AsTask())
+                .ConfigureAwait(false);
+        }
+
+        // Static-class cleanups the container has no handle on.
         failure = CaptureFailure(failure, () => EmoteCache.Dispose());
+        failure = CaptureFailure(failure, InputHistoryService.Reset);
 
         if (failure is not null)
             ExceptionDispatchInfo.Capture(failure).Throw();
     }
 
-    // Lightless-pattern capture helpers: run cleanup, remember the FIRST
+    // Run cleanup actions individually so a single failure doesn't strand
-    // exception, keep going. Without these one mid-teardown failure would
+    // the remaining teardown steps.
-    // skip every cleanup behind it and leave services half-torn.
     private static Exception? CaptureFailure(Exception? failure, Action action)
     {
         try
@@ -499,9 +622,6 @@ public sealed class Plugin : IAsyncDalamudPlugin
         var ourConfigFile = Path.Combine(pluginConfigsDir, "HellionChat.json");
         var ourConfigDir = Interface.ConfigDirectory.FullName;
 
-        // Track whether anything legitimately blocked us. The most common
-        // cause is upstream Chat 2 still being loaded — its SQLite handle
-        // keeps chat-sqlite.db locked and File.Move throws IOException.
         var lockedBlocker = false;
 
         try
@@ -523,13 +643,6 @@ public sealed class Plugin : IAsyncDalamudPlugin
             lockedBlocker = true;
         }
 
-        // The plugin's ConfigDirectory may already exist on first load
-        // (Dalamud creates it), so check at the file level instead of
-        // skipping when the directory is present. Move every legacy
-        // entry whose target name is not occupied yet, then remove the
-        // source dir if it ends up empty. Each move is wrapped on its
-        // own so a single locked file (the SQLite db while ChatTwo still
-        // runs) does not abandon the rest of the migration.
         if (!Directory.Exists(legacyConfigDir))
             return;
 
@@ -537,6 +650,8 @@ public sealed class Plugin : IAsyncDalamudPlugin
         {
             Directory.CreateDirectory(ourConfigDir);
 
+            // Move each file individually so a single locked file (e.g. the
+            // SQLite db while ChatTwo is still loaded) doesn't abort the rest.
             foreach (var file in Directory.EnumerateFiles(legacyConfigDir))
             {
                 var target = Path.Combine(ourConfigDir, Path.GetFileName(file));
@@ -590,9 +705,6 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
         if (lockedBlocker)
         {
-            // Surface the most common cause to the user as a notification
-            // so they don't think Hellion Chat lost their history when in
-            // fact upstream Chat 2 was still holding the database file.
             Notification.AddNotification(
                 new Dalamud.Interface.ImGuiNotification.Notification
                 {
@@ -608,15 +720,95 @@ public sealed class Plugin : IAsyncDalamudPlugin
         }
     }
 
-    private void OpenMainUi()
+    // Central slash-command + UiBuilder.OpenConfigUi/OpenMainUi subscribe so
+    // the four lazy windows (Settings, DbViewer, SeStringDebugger, Debugger)
+    // have working entry points before they're constructed.
+    private void SetupCommands()
     {
-        // Settings is the most useful landing surface — same target as the
+        // ChatLogWindow.cs:128 already registers /hellion (ToggleChat). The
-        // Configure button. SettingsWindow.Toggle is internal and already
+        // description-arg here keeps the Dalamud help list populated.
-        // wired to OpenConfigUi, so re-using IsOpen keeps both entry points
+        _hellionSettingsCmd = Commands.Register(
-        // behaviourally identical.
+            "/hellion",
-        SettingsWindow.IsOpen = !SettingsWindow.IsOpen;
+            "Perform various actions with Hellion Chat."
+        );
+        _hellionSettingsCmd.Execute += OnHellionSettingsCommand;
+
+        _hellionViewCmd = Commands.Register(
+            "/hellionView",
+            "Get access to your message history, with simple filter options.",
+            true
+        );
+        _hellionViewCmd.Execute += OnHellionViewCommand;
+
+        _hellionDebuggerCmd = Commands.Register("/hellionDebugger", showInHelp: false);
+        _hellionDebuggerCmd.Execute += OnHellionDebuggerCommand;
+#if DEBUG
+        // SeStringDebugger.cs lives under #if DEBUG too; keep this out of release builds.
+        _hellionSeStringCmd = Commands.Register("/hellionSeString", showInHelp: false);
+        _hellionSeStringCmd.Execute += OnHellionSeStringCommand;
+#endif
+
+        // Plugin-Manager "Settings" button. Was in Settings.cs:67 pre-v1.4.9.
+        Interface.UiBuilder.OpenConfigUi += OnOpenConfigUi;
+
+        // Plugin-Manager "Open" button. Was in Plugin.cs LoadAsync pre-v1.4.9
+        // (separate OpenMainUi handler that flipped SettingsWindow.IsOpen).
+        Interface.UiBuilder.OpenMainUi += OnOpenMainUi;
     }
 
+    private void TearDownCommands()
+    {
+        Interface.UiBuilder.OpenMainUi -= OnOpenMainUi;
+        Interface.UiBuilder.OpenConfigUi -= OnOpenConfigUi;
+
+        // Null-tolerant detaches: TearDownCommands can run from the LoadAsync
+        // failure path (Plugin.cs CaptureFailure) before SetupCommands finished.
+        if (_hellionSettingsCmd is not null)
+        {
+            _hellionSettingsCmd.Execute -= OnHellionSettingsCommand;
+            _hellionSettingsCmd = null;
+        }
+
+        if (_hellionViewCmd is not null)
+        {
+            _hellionViewCmd.Execute -= OnHellionViewCommand;
+            _hellionViewCmd = null;
+        }
+
+        if (_hellionDebuggerCmd is not null)
+        {
+            _hellionDebuggerCmd.Execute -= OnHellionDebuggerCommand;
+            _hellionDebuggerCmd = null;
+        }
+#if DEBUG
+        if (_hellionSeStringCmd is not null)
+        {
+            _hellionSeStringCmd.Execute -= OnHellionSeStringCommand;
+            _hellionSeStringCmd = null;
+        }
+#endif
+    }
+
+    private void OnHellionSettingsCommand(string command, string arguments)
+    {
+        // /hellion with args is intentionally a no-op (matches pre-v1.4.9
+        // Settings.cs:76-80 behaviour).
+        if (string.IsNullOrWhiteSpace(arguments))
+            SettingsWindow.Toggle();
+    }
+
+    private void OnOpenConfigUi() => SettingsWindow.Toggle();
+
+    private void OnOpenMainUi() => SettingsWindow.Toggle();
+
+    private void OnHellionViewCommand(string _, string __) => DbViewer.Toggle();
+
+    private void OnHellionDebuggerCommand(string _, string __) => DebuggerWindow.Toggle();
+
+#if DEBUG
+    private void OnHellionSeStringCommand(string _, string __) => SeStringDebugger.Toggle();
+#endif
+
     private void RunRetentionSweepIfDue()
     {
         if (!Config.RetentionEnabled)
@@ -624,8 +816,7 @@ public sealed class Plugin : IAsyncDalamudPlugin
         if (DateTimeOffset.UtcNow - Config.RetentionLastRunAt < TimeSpan.FromHours(24))
             return;
 
-        // Snapshot the policy so the user can edit settings while we run.
+        // Snapshot the policy so the user can edit settings while the sweep runs.
-        // Spec defaults form the baseline; explicit user overrides win.
         var policy = new Dictionary<int, int>();
         foreach (var (type, days) in Privacy.PrivacyDefaults.DefaultRetentionDays)
             policy[(int)(ushort)type] = days;
@@ -633,16 +824,10 @@ public sealed class Plugin : IAsyncDalamudPlugin
             policy[(int)(ushort)type] = days;
         var defaultDays = Config.RetentionDefaultDays;
 
-        // IsBackground = true for the same reason as PendingMessageThread:
+        // IsBackground = true so a stuck sweep never blocks plugin unload.
-        // a stuck sweep must never block plugin unload. RunRetentionSweepIfDue
-        // guards the run-frequency, and the sweep itself uses the framework's
-        // cooperative cancellation pattern. The background flag is the safety
-        // net if the sweep ever takes longer than expected.
         new Thread(() =>
         {
-            // Bail out cheaply if a manual sweep is already in flight; the
+            // Bail early if a manual sweep is already in flight.
-            // lock around the actual work would queue us up otherwise and
-            // we would just re-do whatever the manual run already did.
             lock (RetentionSweepLock)
             {
                 if (RetentionSweepRunning)
@@ -659,18 +844,31 @@ public sealed class Plugin : IAsyncDalamudPlugin
                 if (deleted > 0)
                 {
                     Log.Information($"Retention sweep deleted {deleted} expired messages.");
-                    // Run the clear+refilter synchronously on the framework thread.
+                    // Schedule on the next framework tick to avoid the ~194ms
-                    // Earlier this called FilterAllTabsAsync(), which is fire-and-forget
+                    // hitch from blocking with .Wait() while the framework
-                    // — the .Wait() here would return as soon as the inner Task.Run was
+                    // finishes the current frame. Tabs-list mutation must
-                    // dispatched, racing the next sweep cycle against the still-running
+                    // stay on the framework thread because Plugin.Config.Tabs
-                    // filter pass. See AUDIT-2026-05-05 [QUAL-02].
+                    // (Configuration.cs:222) is not lock-protected and
-                    Framework
+                    // AutoTellTabsService can mutate it from background paths.
-                        .Run(() =>
+                    // Pattern reference: SimpleTweaks
+                    // Tweaks/Chat/CaseInsensitiveCommands.cs:45.
+                    Framework.RunOnTick(() =>
+                    {
+                        // The retention thread is IsBackground=true so plugin
+                        // unload can fire while a scheduled tick is still
+                        // pending; bail before touching anything torn down.
+                        if (_isDisposing)
+                            return;
+                        try
                         {
                             MessageManager.ClearAllTabs();
                             MessageManager.FilterAllTabs();
-                        })
+                        }
-                        .Wait();
+                        catch (Exception ex)
+                        {
+                            Log.Error(ex, "Retention sweep clear+refilter failed");
+                        }
+                    });
                 }
                 else
                 {
@@ -694,9 +892,13 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
     private void Draw()
     {
-        // Theme-Engine ist ab v14 immer aktiv; Klassik ist jetzt ein eigenes
+        // v1.4.8 B2: pick up external edits of the active custom theme JSON
-        // Theme statt einem deaktivierten Hellion-Theme. Active wird einmal
+        // without forcing the user to re-click the picker. The disk-stat is
-        // pro Frame aus der Registry gelesen.
+        // 1Hz-throttled inside RefreshActiveIfStale, so this is essentially
+        // free on built-in themes and ~1 stat/second on custom themes.
+        ThemeRegistry.RefreshActiveIfStale();
+
+        // Theme engine is always active; Classic is a theme, not a disabled state.
         using IDisposable _style = HellionStyle.PushGlobal(
             ThemeRegistry.Active,
             Config.WindowOpacity
@@ -711,9 +913,7 @@ public sealed class Plugin : IAsyncDalamudPlugin
             return;
         }
 
-        // v1.0.2 — global skip while the New Game+ menu (QuestRedo addon) is
+        // Hide all plugin windows while the New Game+ menu is open.
-        // open. Hides every plugin window in one shot (chat log, pop-outs,
-        // settings, db viewer, etc.), matching the LoadingScreens pattern.
         if (
             Config.HideInNewGamePlusMenu
             && GameFunctions.GameFunctions.IsAddonInteractable(
@@ -731,7 +931,10 @@ public sealed class Plugin : IAsyncDalamudPlugin
         Interface.UiBuilder.DisableUserUiHide = !Config.HideWhenUiHidden;
         ChatLogWindow.DefaultText = ImGui.GetStyle().Colors[(int)ImGuiCol.Text];
 
-        using ((Config.FontsEnabled ? FontManager.RegularFont : FontManager.Axis).Push())
+        // RegularFont is nullable only because the live rebuild path
+        // disposes it before reassigning; both ends of that swap happen on
+        // this same draw thread, so it cannot be null here.
+        using ((Config.FontsEnabled ? FontManager.RegularFont! : FontManager.Axis).Push())
             WindowSystem.Draw();
 
         ChatLogWindow.FinalizeFrame();
@@ -742,17 +945,17 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
     internal void SaveConfig()
     {
-        // Hellion Chat — Auto-Tell-Tabs are session-only. Strip them out
+        // Only unpinned TempTabs are session-only — they move aside before
-        // before serialization so a crash mid-session can never persist
+        // serialization and re-attach after. Pinned TempTabs stay in
-        // them. We snapshot the full tab list first and restore it after
+        // Config.Tabs across the save so JSON includes them. Cloning only the
-        // the save, preserving the user's order and open conversations.
+        // unpinned subset keeps the allocation proportional to
-        var snapshot = Config.Tabs.ToList();
+        // AutoTellTabsLimit (<=15) instead of the full tab list.
-        Config.Tabs.RemoveAll(t => t.IsTempTab);
+        var unpinnedTempTabs = Config.Tabs.Where(TabLifecycleHelpers.IsInUnpinnedPool).ToList();
+        Config.Tabs.RemoveAll(TabLifecycleHelpers.ShouldStripOnSave);
 
         Interface.SavePluginConfig(Config);
 
-        Config.Tabs.Clear();
+        Config.Tabs.AddRange(unpinnedTempTabs);
-        Config.Tabs.AddRange(snapshot);
     }
 
     internal void LanguageChanged(string langCode)
@@ -794,9 +997,8 @@ public sealed class Plugin : IAsyncDalamudPlugin
         Condition[ConditionFlag.OccupiedInCutSceneEvent]
         || Condition[ConditionFlag.WatchingCutscene78];
 
-    // v1.1.0 — wenn der themes/-Ordner leer ist, schreiben wir die embedded
+    // Seeds example-theme.json into the themes dir on first run.
-    // example-theme.json als Vorlage rein. Bestehende User-Customs werden
+    // Skipped if any custom JSON already exists.
-    // nicht angefasst (existing JSONs lassen den Block überspringen).
     private static void SeedExampleThemeIfEmpty(string dir)
     {
         if (Directory.EnumerateFiles(dir, "*.json").Any())

HellionChat/PluginHostFactory.cs

@@ -0,0 +1,200 @@
+using Dalamud.Interface.ImGuiFileDialog;
+using Dalamud.Plugin;
+using Dalamud.Plugin.Services;
+using HellionChat.Infrastructure.Hosting;
+using HellionChat.Infrastructure.Logging;
+using HellionChat.Ipc;
+using HellionChat.Themes;
+using HellionChat.Ui;
+using HellionChat.Util;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat;
+
+// Builds the generic-host DI container that drives v1.5.0+. The factory is
+// invoked synchronously from Plugin.ctor (after the schema gate clears) so the
+// container exists before PluginLifecycle.LoadAsync runs. See plan §1 for the
+// deliberate divergence from Lightless' deferred Func-delegate pattern.
+internal static class PluginHostFactory
+{
+    public static IHost Build(Plugin plugin, PluginHostDependencies dependencies)
+    {
+        return new HostBuilder()
+            .UseContentRoot(dependencies.PluginInterface.ConfigDirectory.FullName)
+            .ConfigureLogging(logging =>
+            {
+                logging.ClearProviders();
+                logging.AddDalamudLogging(dependencies.PluginLog);
+                logging.SetMinimumLevel(LogLevel.Trace);
+            })
+            .ConfigureServices(services => ConfigureServices(services, plugin, dependencies))
+            .Build();
+    }
+
+    private static void ConfigureServices(
+        IServiceCollection services,
+        Plugin plugin,
+        PluginHostDependencies dependencies
+    )
+    {
+        // Block A — Dalamud services (21 [PluginService] singletons).
+        services.AddSingleton(dependencies);
+        services.AddSingleton(dependencies.PluginInterface);
+        services.AddSingleton(dependencies.PluginLog);
+        services.AddSingleton(dependencies.ChatGui);
+        services.AddSingleton(dependencies.ClientState);
+        services.AddSingleton(dependencies.CommandManager);
+        services.AddSingleton(dependencies.Condition);
+        services.AddSingleton(dependencies.DataManager);
+        services.AddSingleton(dependencies.Framework);
+        services.AddSingleton(dependencies.GameGui);
+        services.AddSingleton(dependencies.KeyState);
+        services.AddSingleton(dependencies.ObjectTable);
+        services.AddSingleton(dependencies.PartyList);
+        services.AddSingleton(dependencies.TargetManager);
+        services.AddSingleton(dependencies.TextureProvider);
+        services.AddSingleton(dependencies.GameInteropProvider);
+        services.AddSingleton(dependencies.GameConfig);
+        services.AddSingleton(dependencies.Notification);
+        services.AddSingleton(dependencies.AddonLifecycle);
+        services.AddSingleton(dependencies.PlayerState);
+        services.AddSingleton(dependencies.Evaluator);
+        services.AddSingleton(dependencies.SelfTestRegistry);
+
+        // Self-references: Plugin and its WindowSystem already exist.
+        services.AddSingleton(plugin);
+        services.AddSingleton(plugin.WindowSystem);
+        services.AddSingleton<PluginLifecycle>();
+
+        // Block B — HellionChat singletons. Factory lambdas because most
+        // classes are internal-sealed and the default activator only sees
+        // public ctors.
+        services.AddSingleton<IPlatformUtil>(_ => new DalamudPlatformUtil());
+        services.AddSingleton<IPluginLogProxy>(sp => new DalamudPluginLogProxy(
+            sp.GetRequiredService<IPluginLog>()
+        ));
+        services.AddSingleton<FileDialogManager>(_ => new FileDialogManager());
+        services.AddSingleton(sp => new Commands(sp.GetRequiredService<ILogger<Commands>>()));
+        services.AddSingleton(sp => new FontManager(
+            sp.GetRequiredService<IDalamudPluginInterface>()
+        ));
+        services.AddSingleton(_ => new StatusBar());
+        services.AddSingleton(sp => new IpcManager(sp.GetRequiredService<ILogger<IpcManager>>()));
+        services.AddSingleton(sp => new ExtraChat(sp.GetRequiredService<ILogger<ExtraChat>>()));
+
+        services.AddSingleton(sp => new ThemeRegistry(
+            Path.Combine(
+                sp.GetRequiredService<IDalamudPluginInterface>().ConfigDirectory.FullName,
+                "themes"
+            ),
+            sp.GetRequiredService<ILogger<ThemeRegistry>>()
+        ));
+
+        services.AddSingleton(sp => new GameFunctions.GameFunctions(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILogger<GameFunctions.GameFunctions>>(),
+            sp.GetRequiredService<ILoggerFactory>()
+        ));
+        services.AddSingleton(sp => new TypingIpc(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILogger<TypingIpc>>()
+        ));
+
+        services.AddSingleton(sp => new Integrations.HonorificService(
+            sp.GetRequiredService<IDalamudPluginInterface>(),
+            sp.GetRequiredService<ILogger<Integrations.HonorificService>>(),
+            sp.GetRequiredService<IFramework>()
+        ));
+
+        services.AddSingleton(sp => new MessageManager(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILogger<MessageManager>>(),
+            sp.GetRequiredService<ILoggerFactory>()
+        ));
+
+        // MessageStore is allocated inside MessageManager.ctor; a separate
+        // container singleton would double-construct the SQLite handle.
+        services.AddSingleton(sp =>
+        {
+            var pluginRef = sp.GetRequiredService<Plugin>();
+            var manager = sp.GetRequiredService<MessageManager>();
+            return new AutoTellTabsService(
+                pluginRef,
+                manager,
+                manager.Store,
+                sp.GetRequiredService<ILogger<AutoTellTabsService>>()
+            );
+        });
+
+        // Block C — Windows. WindowSystem.AddWindow is called from
+        // PluginLifecycle.LoadAsync on the framework thread.
+        services.AddSingleton(sp => new ChatLogWindow(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILogger<ChatLogWindow>>(),
+            sp.GetRequiredService<ILoggerFactory>()
+        ));
+        services.AddSingleton(sp => new SettingsWindow(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILoggerFactory>()
+        ));
+        services.AddSingleton(sp => new DbViewer(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILogger<DbViewer>>()
+        ));
+        services.AddSingleton(sp => new InputPreview(sp.GetRequiredService<ChatLogWindow>()));
+        services.AddSingleton(sp => new CommandHelpWindow(sp.GetRequiredService<ChatLogWindow>()));
+        services.AddSingleton(sp => new SeStringDebugger(sp.GetRequiredService<Plugin>()));
+        services.AddSingleton(sp => new DebuggerWindow(sp.GetRequiredService<Plugin>()));
+        services.AddSingleton(sp => new FirstRunWizard(sp.GetRequiredService<Plugin>()));
+
+        // Hosted-service adapters: thin wrappers around the existing init
+        // methods so the service class bodies stay unchanged. FontManager
+        // does not need one — its ctor runs the init inline inside a single
+        // SuppressAutoRebuild block on eager resolve.
+        services.AddHostedService(sp => new ThemeRegistryInitHostedService(
+            sp.GetRequiredService<ThemeRegistry>()
+        ));
+        services.AddHostedService(sp => new IpcManagerInitHostedService(
+            sp.GetRequiredService<IpcManager>()
+        ));
+        services.AddHostedService(sp => new TypingIpcInitHostedService(
+            sp.GetRequiredService<TypingIpc>()
+        ));
+        services.AddHostedService(sp => new ExtraChatInitHostedService(
+            sp.GetRequiredService<ExtraChat>()
+        ));
+        services.AddHostedService(sp => new MessageManagerInitHostedService(
+            sp.GetRequiredService<IDalamudPluginInterface>(),
+            sp.GetRequiredService<MessageManager>()
+        ));
+        services.AddHostedService(sp => new AutoTellTabsServiceInitHostedService(
+            sp.GetRequiredService<AutoTellTabsService>()
+        ));
+    }
+}
+
+internal sealed record PluginHostDependencies(
+    IDalamudPluginInterface PluginInterface,
+    IPluginLog PluginLog,
+    IChatGui ChatGui,
+    IClientState ClientState,
+    ICommandManager CommandManager,
+    ICondition Condition,
+    IDataManager DataManager,
+    IFramework Framework,
+    IGameGui GameGui,
+    IKeyState KeyState,
+    IObjectTable ObjectTable,
+    IPartyList PartyList,
+    ITargetManager TargetManager,
+    ITextureProvider TextureProvider,
+    IGameInteropProvider GameInteropProvider,
+    IGameConfig GameConfig,
+    INotificationManager Notification,
+    IAddonLifecycle AddonLifecycle,
+    IPlayerState PlayerState,
+    ISeStringEvaluator Evaluator,
+    ISelfTestRegistry SelfTestRegistry
+);

HellionChat/PluginLifecycle.cs

@@ -0,0 +1,143 @@
+using System.Runtime.ExceptionServices;
+using Dalamud.Plugin.Services;
+using Microsoft.Extensions.Hosting;
+
+namespace HellionChat;
+
+// Orchestrates Host.StartAsync / StopAsync and the framework-thread dispose.
+// Plugin.ctor builds the host and assigns it via the Host property, so
+// PluginLifecycle never constructs the host itself.
+internal sealed class PluginLifecycle : IAsyncDisposable
+{
+    private readonly IFramework _framework;
+    private readonly Plugin _plugin;
+
+    private int _disposeStarted;
+    private bool _hostStartRequested;
+
+    public PluginLifecycle(IFramework framework, Plugin plugin)
+    {
+        _framework = framework;
+        _plugin = plugin;
+    }
+
+    // Plugin.ctor fills this immediately after PluginHostFactory.Build and
+    // before invoking LoadAsync; LoadAsync may NRE-suppress on Host! safely.
+    public IHost? Host { get; set; }
+
+    public async Task LoadAsync(CancellationToken cancellationToken)
+    {
+        cancellationToken.ThrowIfCancellationRequested();
+
+        try
+        {
+            _hostStartRequested = true;
+            await Host!.StartAsync(cancellationToken).ConfigureAwait(false);
+
+            // WindowSystem.AddWindow mutates an internal List<>; v1.4.9 Stage-2
+            // verified the list is non-thread-safe, so we marshal the entire
+            // registration block to the framework thread.
+            await _framework
+                .RunOnFrameworkThread(() => RegisterWindows(_plugin))
+                .ConfigureAwait(false);
+        }
+        catch
+        {
+            try
+            {
+                await DisposeAsync().ConfigureAwait(false);
+            }
+            catch
+            {
+                // Swallow secondary dispose failure so the original load throw wins.
+            }
+
+            throw;
+        }
+    }
+
+    private static void RegisterWindows(Plugin plugin)
+    {
+        plugin.WindowSystem.AddWindow(plugin.ChatLogWindow);
+        plugin.WindowSystem.AddWindow(plugin.SettingsWindow);
+        plugin.WindowSystem.AddWindow(plugin.DbViewer);
+        plugin.WindowSystem.AddWindow(plugin.InputPreview);
+        plugin.WindowSystem.AddWindow(plugin.CommandHelpWindow);
+        plugin.WindowSystem.AddWindow(plugin.SeStringDebugger);
+        plugin.WindowSystem.AddWindow(plugin.DebuggerWindow);
+        plugin.WindowSystem.AddWindow(plugin.FirstRunWizard);
+    }
+
+    public async ValueTask DisposeAsync()
+    {
+        // Idempotency guard — Dalamud may fire DisposeAsync twice in a reload race.
+        if (Interlocked.Exchange(ref _disposeStarted, 1) != 0)
+            return;
+
+        Exception? failure = null;
+
+        if (_hostStartRequested && Host is not null)
+            failure = await CaptureFailureAsync(failure, () => Host.StopAsync())
+                .ConfigureAwait(false);
+
+        failure = await DisposeHostOnFrameworkThreadAsync(failure).ConfigureAwait(false);
+
+        ThrowIfFailed(failure);
+    }
+
+    private async Task<Exception?> DisposeHostOnFrameworkThreadAsync(Exception? failure)
+    {
+        try
+        {
+            await _framework
+                .RunOnFrameworkThread(() =>
+                {
+                    failure = CaptureFailure(failure, () => Host?.Dispose());
+                })
+                .ConfigureAwait(false);
+        }
+        catch (Exception ex)
+        {
+            failure ??= ex;
+        }
+
+        return failure;
+    }
+
+    private static Exception? CaptureFailure(Exception? failure, Action action)
+    {
+        try
+        {
+            action();
+        }
+        catch (Exception ex)
+        {
+            failure ??= ex;
+        }
+
+        return failure;
+    }
+
+    private static async ValueTask<Exception?> CaptureFailureAsync(
+        Exception? failure,
+        Func<Task> action
+    )
+    {
+        try
+        {
+            await action().ConfigureAwait(false);
+        }
+        catch (Exception ex)
+        {
+            failure ??= ex;
+        }
+
+        return failure;
+    }
+
+    private static void ThrowIfFailed(Exception? failure)
+    {
+        if (failure is not null)
+            ExceptionDispatchInfo.Capture(failure).Throw();
+    }
+}

HellionChat/Privacy/PrivacyDefaults.cs

@@ -4,10 +4,15 @@ namespace HellionChat.Privacy;
 
 internal static class PrivacyDefaults
 {
-    // Privacy-First default whitelist (DSGVO Art. 25 - Privacy by Default).
+    // F3.1: failsafe for ChatTypes added by future FFXIV patches. New installs
-    // Only the player's own conversations are persisted out-of-the-box.
+    // persist unknown channels so a major patch's added ChatType isn't silently
-    // Public chat (Say/Shout/Yell), Novice Network, NPC dialogue, system
+    // dropped before the user can opt in or out. Existing configs keep their
-    // logs and battle messages are NOT persisted unless the user opts in.
+    // explicit choice — see Configuration.cs PrivacyPersistUnknownChannels.
+    internal const bool DefaultPersistUnknownChannels = true;
+
+    // DSGVO Art. 25 (Privacy by Default): only the player's own conversations
+    // are persisted out-of-the-box. Public chat, NPC dialogue, system logs and
+    // battle messages require explicit opt-in.
     internal static readonly IReadOnlySet<ChatType> PrivacyFirstWhitelist = new HashSet<ChatType>
     {
         ChatType.TellIncoming,
@@ -42,10 +47,8 @@ internal static class PrivacyDefaults
         ChatType.ExtraChatLinkshell8,
     };
 
-    // Default retention windows per channel (in days). Channels not listed
+    // Per-channel retention in days. Unlisted channels fall back to
-    // here fall back to Configuration.RetentionDefaultDays. Reflects the
+    // Configuration.RetentionDefaultDays. Tells: 365, everything else: 90.
-    // design spec: Tells 365, own-conversation channels 90, everything else
-    // shorter via the global default.
     internal static readonly IReadOnlyDictionary<ChatType, int> DefaultRetentionDays =
         new Dictionary<ChatType, int>
         {
@@ -86,10 +89,9 @@ internal static class PrivacyDefaults
             [ChatType.ExtraChatLinkshell8] = 90,
         };
 
-    // Casual profile = Privacy-First plus public chat (Say/Shout/Yell, both
+    // Casual: Privacy-First + public chat (Say/Shout/Yell, emotes, Novice
-    // emote types, Novice Network), kept for a short 24-hour window so the
+    // Network) with a 1-day window so recent RP/trade is searchable but
-    // last RP scene or shout trade is still searchable but third-party data
+    // third-party data doesn't accumulate.
-    // doesn't accumulate forever.
     internal static readonly IReadOnlySet<ChatType> CasualWhitelist = new HashSet<ChatType>(
         PrivacyFirstWhitelist
     )
@@ -112,4 +114,29 @@ internal static class PrivacyDefaults
             [ChatType.StandardEmote] = 1,
             [ChatType.NoviceNetwork] = 1,
         };
+
+    // Roleplay: Privacy-First + Say + both emote types. Public-distance
+    // channels (Shout, Yell) stay out — they are public-noise from
+    // strangers, not story content. Novice Network also stays out;
+    // it is not RP-adjacent and would dilute the profile's intent.
+    internal static readonly IReadOnlySet<ChatType> RoleplayWhitelist = new HashSet<ChatType>(
+        PrivacyFirstWhitelist
+    )
+    {
+        ChatType.Say,
+        ChatType.CustomEmote,
+        ChatType.StandardEmote,
+    };
+
+    // RP sessions function as story logs: Say + emotes need a longer
+    // window than Casual's 1-day public-chat window. 30 days for Say
+    // keeps in-character dialogue scrollable across multiple sessions,
+    // 90 days for emotes mirrors the Privacy-First conversation default.
+    internal static readonly IReadOnlyDictionary<ChatType, int> RoleplayRetentionOverrides =
+        new Dictionary<ChatType, int>
+        {
+            [ChatType.Say] = 30,
+            [ChatType.CustomEmote] = 90,
+            [ChatType.StandardEmote] = 90,
+        };
 }

HellionChat/Resources/Branding/fox-banner.txt

@@ -0,0 +1,68 @@
+                                   .:;+xXXX$$$$$$$$XXx+;:
+.X$+                        .;+X$$$$$$$$$$$$$$$$$$$$$$$$$$$x:
+;$xx$$X+:...    .....::+X$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$;.
+X$;  .:+xXXX$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$X:
+$$;              :++xX$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$X;
+$$x.             .+$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$X.
+x$$;           ;$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$X+;::::::;x$$$$$:
+:$$$;            .+$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$X+:.              .+$$$$$$$$$X+;;:
+ ;$$$+.   :X$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$X;:                   :$$$$$$$$$$$$$$$$X;.
+ .+$$$X:   ..;X$$$$$$$$$$$$$$$$$$$$$$$$$$X;..                     :$$$$$$$$$$$$$$$$$$$$X:
+   ;$$$$$X+::::+X$$$$$$$$$$$$$$$$$$$$$X;.                        .$$$$$$$$$$$$$$$$$$$$$$$X;
+     +$$$$$$$$$$$$$$$$$$$$$$$$$$$$X+:  Hellion Forge             x$$$$$$$$$$$$$$$$$$$$$$$$$X:
+      .;x$$$$$$$$$$$$$$$$$$$$$x;:                               .X$$$$$$$$$$$$$$$$$$$$$$$$$$$+
+          .;+$$$$$$$$$$X+;:..                                   .X$$$$$$$$$$$$$$$$$$$$$$$$$$$$+
+                                                                .X$$$$$$$$$$$$$$$$$$$$$$$$$$$$$;
+                                                                .X$$$$$$$$$$$$$$$$$$$$$$$$$$$$$X
+                                                                 x$$$$$$$$$$$$$$$$$$$$$$$$$$$$$X
+                                                                 ;$$$$$$xx$$$$$$$$$$$$$$$$$$$$$x
+                                                                 .$$$$$$x+$$$$$$$$$$$$$$$$$$$$$x
+                                                               :+X$$$$$$X;$$$$$$$$$$$$$$$$$$$$$$:
+                                                              ;$$$$$$$$$$;$$$$$$$$$$$$$$$$$$$$$$X.
+                                                              +$$$$$$$$$$;x$$$$$$$$$$$$$$$$$$$$$$+
+                                                               x$$$$$$$$$$:$$$$$$$$$$$$$$$$$$$$$$X:
+                                                               .X$$$$$$$$$.:$$$$$$$$$$$$$$$$$$$$$$;
+                                                                :X$$X;;;;: .$$$$$$$$$$$$$$$$$$$$$$X.
+                                                                 .$$$$X    .$$$$$$$$$$$$$$$$$$$$$$$:
+                                                                  .$$$$+   .X$$$$$$$$$$$$$$$$$$$$$$;
+                                                                   ;$$$$:  .X$$$$$$$$$$$$$$$$$$$$$$x
+                                                                   :X$$$+  .$$$$$$$$$$$$$$$$$$$$$$$X
+                                                                    +$$$x  :$$$$$$$$$$$$$$$$$$$$$$$X
+                                                                    ;$$X:  $$$$$$$$$$$$$$$$$$$$$$$$X
+                                                                          x$$$$$$$$$$$$$$$$$$$$$$$$X
+                                                                         +$$$$$$$$$$$$$$$$$$$$$$$$$+
+                                                                       .+$$$$$$$$$$$$$$$$$$$$$$$$$$;
+                                                                   .  ;$$$$$$$$$$$$$$$$$$$$$$$$$$$$:
+                                                                 :X$x$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
+                                                              .XX$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$+
+                                                             ;$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$+$;
+                                                    ..     ++X$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$:+$:
+                                                   :$$+.  ;$$$$$$$$$$$$$$X$$$$$$$$$$$$$$$$$$$$$;:$$+
+                                                  .x+X$X: X$$$$$$$$$$x::;:;$$$$$$$$$$$$$$$$$$X: ;$X.
+                                                  :X.x$$$:.::::::;x+:X$$$$;$$$$$$$$$$$$$$$$$$:  :X;
+                                                  :x.x$$$$$$$$$$$$$$$$$;;$:$$$$$$$$$$$$$$$$$:  :$+
+                                                  :Xx$$$$$$$$$$$$$$$$$: ;X;$$$$$$$$$$$$$$$$: .+$$;
+                                                  ;$$$$$$$$$$$$$$$$$$; .X+X$$$$$$$$$$$$$$$+  .+$+.
+                                                 +$$$$$$$$$$$$$$$$$$$$$$$;+$$$$$$$$$$$$$$X: .+X:
+                                                +$$$$$$$$$$$$$$$$$$$$$$$$$+:$$$$$$$$$$$$$+.+$+.
+                                               ;$$$$$$$$$$$$$$$$$$$$$$$$$$$X;$$$$$$$$$$$$$$X:
+                                               +X: .:X$$$$$$$$x+++x$$$$$$$$;:X$$$$$$$$$$$X:
+                                               :x.;$;+$$$$$:.       :X$$$$X   :$$$$$$$$$$X:
+                                                ;x  :X$$$; .x$$x      X$$;  .:+.$$$$$$$$$$x
+                                                 xx.X$$X:              X$;.:$X:.X$$$$$$$$$:
+                                                 +$$$$X.               ;$;:::  .$$$$$$$$$:
+                                                 ;$$$;        :+X$$$$XX$;      X$$$$$$$$:
+                                                ;$$X:    .:x$x$$$$$X.         x$$$$$$$$:
+                                              :X$X:    :+x;  :$$$$$:         +$$$$$$$X:
+                                              :++$X+xXX;.    +$$$$.         +$$$$$$$+.
+                                                  ...       .X$$$X.        +$$$$$$$:
+                                                             ;$$$$;      .X$$$$$$x.
+                                                              ;$$X;     :X$$$$$$;
+                                                                       ;$$$$$$x.
+                                                                     .X$$$$$$;
+                                                                    ;$$$$$$+
+                                                                   +$$$$$;
+                                                                 :X$$$$;.
+                                                                ;$$$$+.
+                                                               .x$$$X:
+                                                               .+$$X;

HellionChat/Resources/Branding/fox-mini.txt

@@ -0,0 +1,4 @@
+|\_/|,,_____,~~`
+(.".)~~     )`~}}
+ \o/\ /---~\\ ~}}
+   _//    _// ~}

HellionChat/Resources/ChatColourPresets.cs

@@ -4,11 +4,8 @@ using HellionChat.Util;
 
 namespace HellionChat.Resources;
 
-// Hellion Chat — v0.6.0 built-in colour presets for the ChatColours
+// Built-in colour presets applied via Settings UI → ChatColours.
-// settings section. Read-only static data; users apply a preset via the
+// Battle-channel types are intentionally excluded to preserve combat-log tuning.
-// settings UI which overwrites Configuration.ChatColours immediately.
-// Battle-channel types are intentionally NOT covered by the stylistic
-// presets so that combat-log tuning the user has done stays intact.
 public sealed record ChatColourPreset(
     string DisplayName,
     string LocalizationKey,
@@ -69,9 +66,7 @@ public static class ChatColourPresets
         };
     }
 
-    // The Default preset spiegelt 1:1 die Werte aus ChatTypeExt.DefaultColor.
+    // Mirrors ChatTypeExt.DefaultColor; channels without a default are skipped.
-    // Channels ohne Default-Wert (return null) werden ausgelassen — wer sie
-    // anwenden will, behält seine aktuelle Farbe.
     private static IReadOnlyDictionary<ChatType, uint> BuildDefault()
     {
         var dict = new Dictionary<ChatType, uint>();
@@ -183,33 +178,22 @@ public static class ChatColourPresets
         };
     }
 
-    // Hellion brand preset — Arctic Cyan + Ember Orange palette aus
+    // Hellion brand preset — Arctic Cyan + Ember Orange palette.
-    // /mnt/ssd-fast/Projekte/hellion-media/hellion-media-website/BRANDING.md
+    // Cyan family for Standard/Tell, Ember/Warning for loud channels,
-    // (Schema-Stand 2026-04-16). Channels sind über das ganze Brand-Spektrum
+    // Status colours for Linkshells, darker variants for CrossLinkshells.
-    // verteilt damit jede Zeile auf einen Glance unterscheidbar ist:
-    // Cyan-Familie für Standard/Tell, Ember + Warning für laute Channels,
-    // Status-Farben (Success, Danger) für Linkshells. CrossLinkshells
-    // nutzen die dunkleren/sattersten Varianten derselben Hue-Familien.
     private static IReadOnlyDictionary<ChatType, uint> BuildHellion()
     {
         return new Dictionary<ChatType, uint>
         {
-            // Standard / Tell — Cyan-Familie (Brand-Primary)
             [ChatType.Say] = ColourUtil.ComponentsToRgba(77, 217, 232), // Cyan-light #4DD9E8
             [ChatType.TellIncoming] = ColourUtil.ComponentsToRgba(0, 190, 210), // Brand Cyan #00BED2
             [ChatType.TellOutgoing] = ColourUtil.ComponentsToRgba(0, 151, 167), // Cyan-dark #0097A7
-
-            // Laute Channels — Ember/Warning
             [ChatType.Yell] = ColourUtil.ComponentsToRgba(240, 173, 78), // Warning #F0AD4E
             [ChatType.Shout] = ColourUtil.ComponentsToRgba(249, 115, 22), // Brand Ember #F97316
-
-            // Gruppen-Channels — Success/Ember-dark/Cyan
             [ChatType.Party] = ColourUtil.ComponentsToRgba(92, 184, 92), // Success #5CB85C
             [ChatType.Alliance] = ColourUtil.ComponentsToRgba(232, 93, 4), // Ember-dark #E85D04
             [ChatType.FreeCompany] = ColourUtil.ComponentsToRgba(0, 190, 210), // Brand Cyan
             [ChatType.NoviceNetwork] = ColourUtil.ComponentsToRgba(77, 217, 232), // Cyan-light
-
-            // Linkshells 1-8 — über das ganze Brand-Spektrum verteilt
             [ChatType.Linkshell1] = ColourUtil.ComponentsToRgba(251, 146, 60), // Ember-light #FB923C
             [ChatType.Linkshell2] = ColourUtil.ComponentsToRgba(240, 173, 78), // Warning
             [ChatType.Linkshell3] = ColourUtil.ComponentsToRgba(92, 184, 92), // Success
@@ -218,8 +202,6 @@ public static class ChatColourPresets
             [ChatType.Linkshell6] = ColourUtil.ComponentsToRgba(0, 151, 167), // Cyan-dark
             [ChatType.Linkshell7] = ColourUtil.ComponentsToRgba(249, 115, 22), // Brand Ember
             [ChatType.Linkshell8] = ColourUtil.ComponentsToRgba(217, 83, 79), // Danger #D9534F
-
-            // CrossWorld-Linkshells 1-8 — dunklere/sattersere Varianten
             [ChatType.CrossLinkshell1] = ColourUtil.ComponentsToRgba(232, 93, 4), // Ember-dark
             [ChatType.CrossLinkshell2] = ColourUtil.ComponentsToRgba(200, 140, 50), // Warning-dark
             [ChatType.CrossLinkshell3] = ColourUtil.ComponentsToRgba(60, 140, 60), // Success-dark
@@ -231,31 +213,20 @@ public static class ChatColourPresets
         };
     }
 
-    // Bonus preset — Night Blue, KAZAMA-Stimmungs-Theme aus
+    // Night Blue — cool nautical theme, deep navy without purple.
-    // /mnt/HDD-Data1/Obsidian/Vault/Systeme/KAZAMA/Theming/Night Blue + Indigo Violet Themes.md
-    // Klassisch, kühl, technisch — Marineblau-Tiefe ohne Lila-Anteil.
-    // Bewusst NICHT als Brand-Preset markiert (Vault-Boundary): die KAZAMA-Themes
-    // sind persönliche Stimmungs-Themes, nicht Teil des Hellion-Brand-Systems.
     private static IReadOnlyDictionary<ChatType, uint> BuildNightBlue()
     {
         return new Dictionary<ChatType, uint>
         {
-            // Standard / Tell — Royal Blue Akzent-Familie
             [ChatType.Say] = ColourUtil.ComponentsToRgba(230, 237, 247), // text-primary
             [ChatType.TellIncoming] = ColourUtil.ComponentsToRgba(106, 176, 255), // akzent-hot
             [ChatType.TellOutgoing] = ColourUtil.ComponentsToRgba(74, 144, 226), // akzent-primary
-
-            // Laute Channels — Warning/Danger Status-Töne
             [ChatType.Yell] = ColourUtil.ComponentsToRgba(255, 184, 74), // warning
             [ChatType.Shout] = ColourUtil.ComponentsToRgba(255, 92, 122), // danger
-
-            // Gruppen — Success/Akzent-Variations
             [ChatType.Party] = ColourUtil.ComponentsToRgba(61, 220, 151), // success
             [ChatType.Alliance] = ColourUtil.ComponentsToRgba(255, 144, 100), // warm-orange-light
             [ChatType.FreeCompany] = ColourUtil.ComponentsToRgba(74, 144, 226), // akzent-primary
             [ChatType.NoviceNetwork] = ColourUtil.ComponentsToRgba(140, 160, 191), // text-dim
-
-            // Linkshells 1-8 — über Spektrum verteilt
             [ChatType.Linkshell1] = ColourUtil.ComponentsToRgba(255, 184, 74),
             [ChatType.Linkshell2] = ColourUtil.ComponentsToRgba(255, 144, 100),
             [ChatType.Linkshell3] = ColourUtil.ComponentsToRgba(255, 220, 130),
@@ -264,8 +235,6 @@ public static class ChatColourPresets
             [ChatType.Linkshell6] = ColourUtil.ComponentsToRgba(100, 200, 220),
             [ChatType.Linkshell7] = ColourUtil.ComponentsToRgba(106, 176, 255),
             [ChatType.Linkshell8] = ColourUtil.ComponentsToRgba(140, 160, 191),
-
-            // CrossWorld-Linkshells — gedämpfte Variants
             [ChatType.CrossLinkshell1] = ColourUtil.ComponentsToRgba(200, 130, 50),
             [ChatType.CrossLinkshell2] = ColourUtil.ComponentsToRgba(220, 110, 80),
             [ChatType.CrossLinkshell3] = ColourUtil.ComponentsToRgba(200, 180, 60),
@@ -277,30 +246,20 @@ public static class ChatColourPresets
         };
     }
 
-    // Bonus preset — Indigo Violet, KAZAMA-Stimmungs-Theme aus demselben
+    // Indigo Violet — warm-mystic theme, deep indigo with violet accent.
-    // Vault-Doc. Warm-mystisch, "Galaxy/Glitter/Nordlicht" — tiefes Indigo
-    // mit kräftigem Violet-Akzent. Persönlicher Favorit (siehe Vault).
-    // Auch nicht als Brand-Preset (siehe NightBlue-Note oben).
     private static IReadOnlyDictionary<ChatType, uint> BuildIndigoViolet()
     {
         return new Dictionary<ChatType, uint>
         {
-            // Standard / Tell — Royal Violet Akzent-Familie
+            [ChatType.Say] = ColourUtil.ComponentsToRgba(240, 230, 255), // text-primary
-            [ChatType.Say] = ColourUtil.ComponentsToRgba(240, 230, 255), // text-primary (light lavender)
             [ChatType.TellIncoming] = ColourUtil.ComponentsToRgba(176, 124, 255), // akzent-hot
             [ChatType.TellOutgoing] = ColourUtil.ComponentsToRgba(139, 77, 222), // akzent-primary
-
-            // Laute Channels — geteilt mit Night Blue (Status-Farben)
             [ChatType.Yell] = ColourUtil.ComponentsToRgba(255, 184, 74),
             [ChatType.Shout] = ColourUtil.ComponentsToRgba(255, 92, 122),
-
-            // Gruppen
             [ChatType.Party] = ColourUtil.ComponentsToRgba(61, 220, 151),
             [ChatType.Alliance] = ColourUtil.ComponentsToRgba(255, 144, 100),
             [ChatType.FreeCompany] = ColourUtil.ComponentsToRgba(139, 77, 222), // akzent-primary
             [ChatType.NoviceNetwork] = ColourUtil.ComponentsToRgba(168, 144, 208), // text-dim
-
-            // Linkshells 1-8
             [ChatType.Linkshell1] = ColourUtil.ComponentsToRgba(255, 184, 74),
             [ChatType.Linkshell2] = ColourUtil.ComponentsToRgba(255, 144, 100),
             [ChatType.Linkshell3] = ColourUtil.ComponentsToRgba(255, 220, 130),
@@ -309,8 +268,6 @@ public static class ChatColourPresets
             [ChatType.Linkshell6] = ColourUtil.ComponentsToRgba(139, 77, 222),
             [ChatType.Linkshell7] = ColourUtil.ComponentsToRgba(130, 90, 200),
             [ChatType.Linkshell8] = ColourUtil.ComponentsToRgba(168, 144, 208),
-
-            // CrossWorld-Linkshells
             [ChatType.CrossLinkshell1] = ColourUtil.ComponentsToRgba(200, 130, 50),
             [ChatType.CrossLinkshell2] = ColourUtil.ComponentsToRgba(220, 110, 80),
             [ChatType.CrossLinkshell3] = ColourUtil.ComponentsToRgba(200, 180, 60),

HellionChat/Resources/HellionStrings.Designer.cs

@@ -114,6 +114,40 @@ internal class HellionStrings
     internal static string Wizard_Profile_FullHistory_GdprWarning => Get(nameof(Wizard_Profile_FullHistory_GdprWarning));
     internal static string Wizard_Profile_FullHistory_Apply => Get(nameof(Wizard_Profile_FullHistory_Apply));
     internal static string Wizard_Reopen_Button => Get(nameof(Wizard_Reopen_Button));
+    internal static string Wizard_Cancel_Label => Get(nameof(Wizard_Cancel_Label));
+    internal static string Wizard_Cancel_Tooltip => Get(nameof(Wizard_Cancel_Tooltip));
+    internal static string Wizard_Step1_Title => Get(nameof(Wizard_Step1_Title));
+    internal static string Wizard_Step1_Subtitle => Get(nameof(Wizard_Step1_Subtitle));
+    internal static string Wizard_Step1_Footer_Hint => Get(nameof(Wizard_Step1_Footer_Hint));
+    internal static string Wizard_Step1_Skip_Label => Get(nameof(Wizard_Step1_Skip_Label));
+    internal static string Wizard_Step1_Skip_Tooltip => Get(nameof(Wizard_Step1_Skip_Tooltip));
+    internal static string Wizard_Step2_Title => Get(nameof(Wizard_Step2_Title));
+    internal static string Wizard_Step2_RecommendedFooter => Get(nameof(Wizard_Step2_RecommendedFooter));
+    internal static string Wizard_Profile_Roleplay_Heading => Get(nameof(Wizard_Profile_Roleplay_Heading));
+    internal static string Wizard_Profile_Roleplay_Description => Get(nameof(Wizard_Profile_Roleplay_Description));
+    internal static string Wizard_Profile_Roleplay_Apply => Get(nameof(Wizard_Profile_Roleplay_Apply));
+    internal static string Wizard_Nav_Back => Get(nameof(Wizard_Nav_Back));
+    internal static string Wizard_Nav_Next => Get(nameof(Wizard_Nav_Next));
+    internal static string Wizard_Nav_Finish => Get(nameof(Wizard_Nav_Finish));
+    internal static string Wizard_Step3_Title => Get(nameof(Wizard_Step3_Title));
+    internal static string Wizard_Step3_Section_History => Get(nameof(Wizard_Step3_Section_History));
+    internal static string Wizard_Step3_Section_TellTabs => Get(nameof(Wizard_Step3_Section_TellTabs));
+    internal static string Wizard_Step3_Section_Visual => Get(nameof(Wizard_Step3_Section_Visual));
+    internal static string Wizard_Step3_LoadPreviousSession_Label => Get(nameof(Wizard_Step3_LoadPreviousSession_Label));
+    internal static string Wizard_Step3_FilterIncludePreviousSessions_Label => Get(nameof(Wizard_Step3_FilterIncludePreviousSessions_Label));
+    internal static string Wizard_Step3_AutoTellTabsHistoryPreload_Label => Get(nameof(Wizard_Step3_AutoTellTabsHistoryPreload_Label));
+    internal static string Wizard_Step3_UseCompactDensity_Label => Get(nameof(Wizard_Step3_UseCompactDensity_Label));
+    internal static string Wizard_Step3_PrettierTimestamps_Label => Get(nameof(Wizard_Step3_PrettierTimestamps_Label));
+    internal static string Wizard_Step3_Theme_Label => Get(nameof(Wizard_Step3_Theme_Label));
+    internal static string Wizard_Step4_Title => Get(nameof(Wizard_Step4_Title));
+    internal static string Wizard_Step4_SummaryHeading => Get(nameof(Wizard_Step4_SummaryHeading));
+    internal static string Wizard_Step4_Summary_Profile => Get(nameof(Wizard_Step4_Summary_Profile));
+    internal static string Wizard_Step4_Summary_History => Get(nameof(Wizard_Step4_Summary_History));
+    internal static string Wizard_Step4_Summary_TellTabs => Get(nameof(Wizard_Step4_Summary_TellTabs));
+    internal static string Wizard_Step4_Summary_Visual => Get(nameof(Wizard_Step4_Summary_Visual));
+    internal static string Wizard_Step4_Summary_Unchanged => Get(nameof(Wizard_Step4_Summary_Unchanged));
+    internal static string Wizard_Step4_TestHint => Get(nameof(Wizard_Step4_TestHint));
+    internal static string Wizard_Step4_SettingsHint => Get(nameof(Wizard_Step4_SettingsHint));
 
     internal static string Export_Heading => Get(nameof(Export_Heading));
     internal static string Export_Help => Get(nameof(Export_Help));
@@ -168,6 +202,16 @@ internal class HellionStrings
     internal static string AutoTellTabs_HistoryLoadError => Get(nameof(AutoTellTabs_HistoryLoadError));
     internal static string AutoTellTabs_GreetedTooltip => Get(nameof(AutoTellTabs_GreetedTooltip));
     internal static string AutoTellTabs_UnGreetedTooltip => Get(nameof(AutoTellTabs_UnGreetedTooltip));
+    internal static string PinTab_MenuPin => Get(nameof(PinTab_MenuPin));
+    internal static string PinTab_MenuUnpin => Get(nameof(PinTab_MenuUnpin));
+    internal static string PinTab_MenuPromote => Get(nameof(PinTab_MenuPromote));
+    internal static string PinTab_PromoteTooltip => Get(nameof(PinTab_PromoteTooltip));
+    internal static string PinTab_LimitReached => Get(nameof(PinTab_LimitReached));
+    internal static string PinTab_PinnedTooltip => Get(nameof(PinTab_PinnedTooltip));
+    internal static string PinTab_PinTooltip => Get(nameof(PinTab_PinTooltip));
+    internal static string PinTab_SectionHeader => Get(nameof(PinTab_SectionHeader));
+    internal static string Settings_ThemeAndLayout_SidebarWidth_Name => Get(nameof(Settings_ThemeAndLayout_SidebarWidth_Name));
+    internal static string Settings_ThemeAndLayout_SidebarWidth_Description => Get(nameof(Settings_ThemeAndLayout_SidebarWidth_Description));
 
     // Hellion Chat — Auto-Tell-Tabs Chat settings tab
     internal static string ChatLog_AutoTellTabs_Section_Title => Get(nameof(ChatLog_AutoTellTabs_Section_Title));
@@ -258,6 +302,10 @@ internal class HellionStrings
     internal static string Settings_Chat_Preview_Heading => Get(nameof(Settings_Chat_Preview_Heading));
     internal static string Settings_Chat_Emotes_Heading => Get(nameof(Settings_Chat_Emotes_Heading));
 
+    // Hellion Chat — Chat-Tab SymbolPicker
+    internal static string Settings_Chat_SymbolPicker_Enable_Name => Get(nameof(Settings_Chat_SymbolPicker_Enable_Name));
+    internal static string Settings_Chat_SymbolPicker_Enable_Description => Get(nameof(Settings_Chat_SymbolPicker_Enable_Description));
+
     // Hellion Chat — Database-Tab section headings
     internal static string Settings_Database_Storage_Heading => Get(nameof(Settings_Database_Storage_Heading));
     internal static string Settings_Database_Viewer_Heading => Get(nameof(Settings_Database_Viewer_Heading));
@@ -368,6 +416,8 @@ internal class HellionStrings
     internal static string Settings_Integrations_Honorific_Status_Incompatible => Get(nameof(Settings_Integrations_Honorific_Status_Incompatible));
     internal static string Settings_Integrations_Honorific_Toggle => Get(nameof(Settings_Integrations_Honorific_Toggle));
     internal static string Settings_Integrations_Honorific_ToggleHint => Get(nameof(Settings_Integrations_Honorific_ToggleHint));
+    internal static string Settings_Integrations_Honorific_Glow_Toggle => Get(nameof(Settings_Integrations_Honorific_Glow_Toggle));
+    internal static string Settings_Integrations_Honorific_Glow_Hint => Get(nameof(Settings_Integrations_Honorific_Glow_Hint));
     internal static string Settings_Integrations_Honorific_LinkRepo => Get(nameof(Settings_Integrations_Honorific_LinkRepo));
     internal static string Settings_Integrations_Honorific_LinkAuthor => Get(nameof(Settings_Integrations_Honorific_LinkAuthor));
     internal static string Settings_Integrations_ComingSoon_SectionHeader => Get(nameof(Settings_Integrations_ComingSoon_SectionHeader));
@@ -388,4 +438,9 @@ internal class HellionStrings
 
     // Hellion Chat — v1.3.0 Honorific title slot tooltip
     internal static string ChatHeader_HonorificTitle_Tooltip => Get(nameof(ChatHeader_HonorificTitle_Tooltip));
+
+    // Hellion Chat — v1.4.8 DbViewer full-text search toggle
+    internal static string DbViewer_FullTextToggle => Get(nameof(DbViewer_FullTextToggle));
+    internal static string DbViewer_FullTextToggle_Hint_Indexing => Get(nameof(DbViewer_FullTextToggle_Hint_Indexing));
+    internal static string DbViewer_FullTextToggle_Hint_PhraseMode => Get(nameof(DbViewer_FullTextToggle_Hint_PhraseMode));
 }

HellionChat/Resources/HellionStrings.de.resx

@@ -222,6 +222,108 @@
   <data name="Wizard_Reopen_Button" xml:space="preserve">
     <value>Wizard erneut zeigen</value>
   </data>
+  <data name="Wizard_Cancel_Label" xml:space="preserve">
+    <value>Später — Defaults behalten</value>
+  </data>
+  <data name="Wizard_Cancel_Tooltip" xml:space="preserve">
+    <value>Schließt den Wizard ohne Profil-Auswahl. Die Plugin-Defaults bleiben aktiv und der Wizard erscheint beim nächsten Plugin-Reload erneut.</value>
+  </data>
+  <data name="Wizard_Step1_Title" xml:space="preserve">
+    <value>Willkommen bei Hellion Chat</value>
+  </data>
+  <data name="Wizard_Step1_Subtitle" xml:space="preserve">
+    <value>Ein Chat 2 Fork von Hellion Forge mit DSGVO-konformen Defaults, brand-konsistentem Look und Quality-of-Life-Verbesserungen.</value>
+  </data>
+  <data name="Wizard_Step1_Footer_Hint" xml:space="preserve">
+    <value>3 kurze Schritte. Du kannst alles später unter Einstellungen → Hellion Chat ändern.</value>
+  </data>
+  <data name="Wizard_Step1_Skip_Label" xml:space="preserve">
+    <value>Später entscheiden</value>
+  </data>
+  <data name="Wizard_Step1_Skip_Tooltip" xml:space="preserve">
+    <value>Assistenten schließen. Die Plugin-Standardwerte bleiben aktiv. Du kannst den Assistenten über Einstellungen → Hellion Chat erneut öffnen.</value>
+  </data>
+  <data name="Wizard_Step2_Title" xml:space="preserve">
+    <value>Was darf gespeichert werden?</value>
+  </data>
+  <data name="Wizard_Step2_RecommendedFooter" xml:space="preserve">
+    <value>★ = empfohlen für die meisten Spieler.</value>
+  </data>
+  <data name="Wizard_Profile_Roleplay_Heading" xml:space="preserve">
+    <value>Roleplay</value>
+  </data>
+  <data name="Wizard_Profile_Roleplay_Description" xml:space="preserve">
+    <value>Wie Datensparsamkeit, plus Sagen und beide Emote-Typen für deine Story-Logs. Schreien und Rufen bleiben außen vor — Public-Distance-Lärm von Fremden ist kein Story-Inhalt. Aufbewahrung: Sagen 30 Tage, Emotes 90 Tage.</value>
+  </data>
+  <data name="Wizard_Profile_Roleplay_Apply" xml:space="preserve">
+    <value>Roleplay übernehmen</value>
+  </data>
+  <data name="Wizard_Nav_Back" xml:space="preserve">
+    <value>‹ Zurück</value>
+  </data>
+  <data name="Wizard_Nav_Next" xml:space="preserve">
+    <value>Weiter ›</value>
+  </data>
+  <data name="Wizard_Nav_Finish" xml:space="preserve">
+    <value>Fertig ✓</value>
+  </data>
+  <data name="Wizard_Step3_Title" xml:space="preserve">
+    <value>Versteckte Defaults</value>
+  </data>
+  <data name="Wizard_Step3_Section_History" xml:space="preserve">
+    <value>Verlauf</value>
+  </data>
+  <data name="Wizard_Step3_Section_TellTabs" xml:space="preserve">
+    <value>Tell-Tabs</value>
+  </data>
+  <data name="Wizard_Step3_Section_Visual" xml:space="preserve">
+    <value>Optik</value>
+  </data>
+  <data name="Wizard_Step3_LoadPreviousSession_Label" xml:space="preserve">
+    <value>Vorherige Session beim Start laden</value>
+  </data>
+  <data name="Wizard_Step3_FilterIncludePreviousSessions_Label" xml:space="preserve">
+    <value>Filter auch auf alte Messages anwenden</value>
+  </data>
+  <data name="Wizard_Step3_AutoTellTabsHistoryPreload_Label" xml:space="preserve">
+    <value>N Tell-Messages beim Öffnen eines Auto-Tabs vorladen</value>
+  </data>
+  <data name="Wizard_Step3_UseCompactDensity_Label" xml:space="preserve">
+    <value>Kompakter Density-Modus</value>
+  </data>
+  <data name="Wizard_Step3_PrettierTimestamps_Label" xml:space="preserve">
+    <value>Schönere Timestamps (relative Zeit)</value>
+  </data>
+  <data name="Wizard_Step3_Theme_Label" xml:space="preserve">
+    <value>Theme</value>
+  </data>
+  <data name="Wizard_Step4_Title" xml:space="preserve">
+    <value>Du bist startklar</value>
+  </data>
+  <data name="Wizard_Step4_SummaryHeading" xml:space="preserve">
+    <value>Deine Konfiguration</value>
+  </data>
+  <data name="Wizard_Step4_Summary_Profile" xml:space="preserve">
+    <value>Profil: {0}</value>
+  </data>
+  <data name="Wizard_Step4_Summary_History" xml:space="preserve">
+    <value>Verlauf: {0}</value>
+  </data>
+  <data name="Wizard_Step4_Summary_TellTabs" xml:space="preserve">
+    <value>Tell-Tabs: {0} Messages vorladen</value>
+  </data>
+  <data name="Wizard_Step4_Summary_Visual" xml:space="preserve">
+    <value>Optik: {0}</value>
+  </data>
+  <data name="Wizard_Step4_Summary_Unchanged" xml:space="preserve">
+    <value>(unverändert)</value>
+  </data>
+  <data name="Wizard_Step4_TestHint" xml:space="preserve">
+    <value>💡 Probier's aus: Tipp /tell &lt;Spielername&gt; in den Chat. Hellion Chat öffnet automatisch einen eigenen Tab für die Unterhaltung und lädt die letzten {0} Messages mit.</value>
+  </data>
+  <data name="Wizard_Step4_SettingsHint" xml:space="preserve">
+    <value>Einstellungen → Hellion Chat zum späteren Anpassen</value>
+  </data>
   <data name="Export_Heading" xml:space="preserve">
     <value>Export (DSGVO Art. 15 — Auskunftsrecht)</value>
   </data>
@@ -377,6 +479,36 @@
   <data name="AutoTellTabs_UnGreetedTooltip" xml:space="preserve">
     <value>Als begrüßt markieren.</value>
   </data>
+  <data name="PinTab_MenuPin" xml:space="preserve">
+    <value>Tab anpinnen</value>
+  </data>
+  <data name="PinTab_MenuUnpin" xml:space="preserve">
+    <value>Tab lösen</value>
+  </data>
+  <data name="PinTab_MenuPromote" xml:space="preserve">
+    <value>In Standard-Tab umwandeln</value>
+  </data>
+  <data name="PinTab_PromoteTooltip" xml:space="preserve">
+    <value>Wandelt den TempTell in einen regulären Tab um. Die Tell-Bindung an die Person geht verloren, der Tab fängt dann Nachrichten anhand der Channel-Filter ein. Für „Tab überlebt Relog" stattdessen „Tab anpinnen" wählen.</value>
+  </data>
+  <data name="PinTab_LimitReached" xml:space="preserve">
+    <value>Maximal {0} angepinnte Tell-Tabs erreicht. Erst einen lösen oder dauerhaft behalten.</value>
+  </data>
+  <data name="PinTab_PinnedTooltip" xml:space="preserve">
+    <value>Angepinnt — überlebt Relog.</value>
+  </data>
+  <data name="PinTab_PinTooltip" xml:space="preserve">
+    <value>Angepinnte Tabs überleben Relog und behalten die Bindung an die Tell-Person.</value>
+  </data>
+  <data name="PinTab_SectionHeader" xml:space="preserve">
+    <value>Angepinnt</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Name" xml:space="preserve">
+    <value>Sidebar-Breite</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Description" xml:space="preserve">
+    <value>Breite der Tab-Sidebar in Pixeln. Default (44 px) ist Icon-only; breiter machen damit Sektion-Header wie „Aktive Tells (3)" nicht abgeschnitten werden.</value>
+  </data>
 
   <!-- Hellion Chat — Auto-Tell-Tabs (Chat-Einstellungstab) -->
   <data name="ChatLog_AutoTellTabs_Section_Title" xml:space="preserve">
@@ -392,7 +524,7 @@
     <value>Maximale Anzahl der Auto-Tell-Tabs</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Limit_Description" xml:space="preserve">
-    <value>Beim Erreichen werden begrüßte Tabs mit der ältesten Aktivität zuerst geschlossen. Änderungen greifen beim nächsten /tell.</value>
+    <value>Beim Erreichen werden begrüßte Tabs mit der ältesten Aktivität zuerst geschlossen. Änderungen greifen beim nächsten /tell. Diese Grenze gilt nur für den automatisch verwalteten Pool. Angepinnte Tell-Tabs (Rechtsklick → Tab anpinnen) leben in einem separaten Pool von bis zu 5 Tabs und überleben Relog.</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Compact_Name" xml:space="preserve">
     <value>Kompakte Anzeige</value>
@@ -520,6 +652,14 @@
     <value>Emotes</value>
   </data>
 
+  <!-- Hellion Chat — Chat-Tab SymbolPicker -->
+  <data name="Settings_Chat_SymbolPicker_Enable_Name" xml:space="preserve">
+    <value>Symbol-Picker-Button neben dem Chat-Eingang anzeigen</value>
+  </data>
+  <data name="Settings_Chat_SymbolPicker_Enable_Description" xml:space="preserve">
+    <value>Fügt einen kleinen Button links neben dem Kanal-Indikator ein. Klick öffnet ein Popup mit FFXIV-Glyphen und einer kuratierten Symbol-Liste. Ausschalten für eine schlankere Eingabezeile.</value>
+  </data>
+
   <!-- Hellion Chat — Sektions-Überschriften des Database-Tabs -->
   <data name="Settings_Database_Storage_Heading" xml:space="preserve">
     <value>Speicherung</value>
@@ -639,7 +779,7 @@
     <value>Allgemein</value>
   </data>
   <data name="Settings_Card_General_Subtext" xml:space="preserve">
-    <value>Plugin-globale Einstellungen — Sprache, Eingabe, Audio, Performance.</value>
+    <value>Sprache, Eingabe, Audio und Performance.</value>
   </data>
   <data name="Settings_Card_Appearance_Title" xml:space="preserve">
     <value>Erscheinungsbild</value>
@@ -657,25 +797,25 @@
     <value>Fenster</value>
   </data>
   <data name="Settings_Card_Window_Subtext" xml:space="preserve">
-    <value>Verhalten des Fensters — wann es da ist, ob es bewegt werden kann.</value>
+    <value>Wann das Fenster sichtbar ist und ob es sich bewegen lässt.</value>
   </data>
   <data name="Settings_Card_Chat_Title" xml:space="preserve">
     <value>Chat</value>
   </data>
   <data name="Settings_Card_Chat_Subtext" xml:space="preserve">
-    <value>Wie Nachrichten angezeigt werden — Tells, Vorschau, Verhalten, Emotes.</value>
+    <value>Tells, Vorschau, Nachrichten-Verhalten und Emotes.</value>
   </data>
   <data name="Settings_Card_Tabs_Title" xml:space="preserve">
     <value>Tabs</value>
   </data>
   <data name="Settings_Card_Tabs_Subtext" xml:space="preserve">
-    <value>Tab-Verwaltung — eigene Chat-Tabs anlegen und konfigurieren.</value>
+    <value>Eigene Chat-Tabs anlegen und konfigurieren.</value>
   </data>
   <data name="Settings_Card_Privacy_Title" xml:space="preserve">
     <value>Datenschutz</value>
   </data>
   <data name="Settings_Card_Privacy_Subtext" xml:space="preserve">
-    <value>Was darf gespeichert werden — Privacy-Filter pro Channel.</value>
+    <value>Privacy-Filter pro Channel und was gespeichert werden darf.</value>
   </data>
   <data name="Settings_Card_Database_Title" xml:space="preserve">
     <value>Datenbank</value>
@@ -687,7 +827,7 @@
     <value>Information</value>
   </data>
   <data name="Settings_Card_Information_Subtext" xml:space="preserve">
-    <value>Über das Plugin — Version, Mission, Lizenz, Changelog.</value>
+    <value>Version, Mission, Lizenz und Changelog.</value>
   </data>
   <data name="Settings_Tab_Themes" xml:space="preserve">
     <value>Themes</value>
@@ -732,25 +872,25 @@
     <value>Theme &amp; Layout</value>
   </data>
   <data name="Settings_Card_ThemeAndLayout_Subtext" xml:space="preserve">
-    <value>Wie das Fenster aussieht — Theme, Rahmen, Zeitstempel-Style.</value>
+    <value>Theme, Fenster-Rahmen und Zeitstempel-Style.</value>
   </data>
   <data name="Settings_Card_FontsAndColours_Title" xml:space="preserve">
     <value>Schriften &amp; Farben</value>
   </data>
   <data name="Settings_Card_FontsAndColours_Subtext" xml:space="preserve">
-    <value>Lesbarkeit — Schriftart, Schriftgröße, Chat-Farben pro Channel.</value>
+    <value>Schriftart, Schriftgröße und Chat-Farben pro Channel.</value>
   </data>
   <data name="Settings_Card_DataManagement_Title" xml:space="preserve">
     <value>Daten-Verwaltung</value>
   </data>
   <data name="Settings_Card_DataManagement_Subtext" xml:space="preserve">
-    <value>Was passiert mit gespeicherten Daten — Aufbewahrung, Aufräumen, Export, DB-Stats.</value>
+    <value>Aufbewahrung, Aufräumen, Export und Datenbank-Statistiken.</value>
   </data>
   <data name="Settings_Card_Integrations_Title" xml:space="preserve">
     <value>Integrationen</value>
   </data>
   <data name="Settings_Card_Integrations_Subtext" xml:space="preserve">
-    <value>Andere Dalamud-Plugins, mit denen HellionChat zusammenarbeitet. Auto-detected, mit Vorschau auf kommende Integrationen.</value>
+    <value>Andere Dalamud-Plugins, mit denen HellionChat zusammenarbeitet. Kommende Integrationen in der Vorschau.</value>
   </data>
   <data name="Settings_ThemeAndLayout_Theme_Heading" xml:space="preserve">
     <value>Theme</value>
@@ -821,6 +961,12 @@
   <data name="Settings_Integrations_Honorific_ToggleHint" xml:space="preserve">
     <value>Zeigt deinen Custom-Titel aus Honorific im Header über dem Chat-Log an, in der von dir gewählten Farbe.</value>
   </data>
+  <data name="Settings_Integrations_Honorific_Glow_Toggle" xml:space="preserve">
+    <value>Glow-Outline rendern (Honorific)</value>
+  </data>
+  <data name="Settings_Integrations_Honorific_Glow_Hint" xml:space="preserve">
+    <value>Kann die Framerate auf schwacher Hardware drücken. Rendert die Glow-Outline für Honorific-Titel, die sie nutzen. Gradient-Animation wird noch nicht unterstützt und wird stattdessen als Primärfarbe gezeichnet.</value>
+  </data>
   <data name="Settings_Integrations_Honorific_LinkRepo" xml:space="preserve">
     <value>Honorific auf GitHub</value>
   </data>
@@ -875,4 +1021,13 @@
   <data name="ChatHeader_HonorificTitle_Tooltip" xml:space="preserve">
     <value>Custom-Titel von Honorific</value>
   </data>
+  <data name="DbViewer_FullTextToggle" xml:space="preserve">
+    <value>Volltext-Suche</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_Indexing" xml:space="preserve">
+    <value>Der Volltext-Index wird noch gebaut. Die lokale Suche bleibt verfügbar.</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_PhraseMode" xml:space="preserve">
+    <value>Sucht nach der exakten Wortfolge. Mehrere Wörter werden nur gefunden, wenn sie zusammen und in dieser Reihenfolge stehen. Wer rohe FTS5-MATCH-Syntax nutzen will, setzt eigene Anführungszeichen um den Suchbegriff.</value>
+  </data>
 </root>

HellionChat/SelfTests/FontManagerCtorSmokeStep.cs

@@ -0,0 +1,93 @@
+using Dalamud.Bindings.ImGui;
+using Dalamud.Plugin.SelfTest;
+
+namespace HellionChat.SelfTests;
+
+// Verifies the FontManager came out of the DI container with every
+// handle attached and no atlas-load failure on any of them. ItalicFont
+// is allowed to be null when ItalicEnabled is off.
+internal sealed class FontManagerCtorSmokeStep : ISelfTestStep
+{
+    private readonly Plugin plugin;
+
+    public FontManagerCtorSmokeStep(Plugin plugin)
+    {
+        this.plugin = plugin;
+    }
+
+    public string Name => "Hellion Chat - FontManager ctor smoke";
+
+    public SelfTestStepResult RunStep()
+    {
+        var fm = this.plugin.FontManager;
+        if (fm is null)
+        {
+            ImGui.Text("Plugin.FontManager is null");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.Axis is null)
+        {
+            ImGui.Text("Axis handle is null");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.AxisItalic is null)
+        {
+            ImGui.Text("AxisItalic handle is null");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.FontAwesome is null)
+        {
+            ImGui.Text("FontAwesome handle is null");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.RegularFont is null)
+        {
+            ImGui.Text("RegularFont handle is null");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (Plugin.Config.ItalicEnabled && fm.ItalicFont is null)
+        {
+            ImGui.Text("ItalicEnabled is on but ItalicFont handle is null");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.Axis.LoadException is { } e1)
+        {
+            ImGui.Text($"Axis load exception: {e1.Message}");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.AxisItalic.LoadException is { } e2)
+        {
+            ImGui.Text($"AxisItalic load exception: {e2.Message}");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.FontAwesome.LoadException is { } e3)
+        {
+            ImGui.Text($"FontAwesome load exception: {e3.Message}");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.RegularFont.LoadException is { } e4)
+        {
+            ImGui.Text($"RegularFont load exception: {e4.Message}");
+            return SelfTestStepResult.Fail;
+        }
+
+        if (fm.ItalicFont?.LoadException is { } e5)
+        {
+            ImGui.Text($"ItalicFont load exception: {e5.Message}");
+            return SelfTestStepResult.Fail;
+        }
+
+        return SelfTestStepResult.Pass;
+    }
+
+    public void CleanUp() { }
+}

HellionChat/SelfTests/FontPushSmokeStep.cs

@@ -0,0 +1,46 @@
+using Dalamud.Bindings.ImGui;
+using Dalamud.Plugin.SelfTest;
+
+namespace HellionChat.SelfTests;
+
+// Push-safety smoke: IFontHandle.Push() is contracted safe regardless
+// of the Available state, so this step proves the ctor-built handles
+// can be pushed even right after plugin load. Self-test steps run on
+// the framework thread via the xlperf path, so the push call itself
+// stays main-thread-safe.
+internal sealed class FontPushSmokeStep : ISelfTestStep
+{
+    private readonly Plugin plugin;
+
+    public FontPushSmokeStep(Plugin plugin)
+    {
+        this.plugin = plugin;
+    }
+
+    public string Name => "Hellion Chat - FontManager push smoke";
+
+    public SelfTestStepResult RunStep()
+    {
+        var fm = this.plugin.FontManager;
+        if (fm?.RegularFont is null || fm.FontAwesome is null)
+        {
+            ImGui.Text("RegularFont or FontAwesome missing - see FontManager ctor smoke");
+            return SelfTestStepResult.Fail;
+        }
+
+        try
+        {
+            using (fm.RegularFont.Push()) { }
+            using (fm.FontAwesome.Push()) { }
+        }
+        catch (Exception e)
+        {
+            ImGui.Text($"Push threw: {e.GetType().Name}: {e.Message}");
+            return SelfTestStepResult.Fail;
+        }
+
+        return SelfTestStepResult.Pass;
+    }
+
+    public void CleanUp() { }
+}

HellionChat/SelfTests/ThemeSwitchSelfTestStep.cs

@@ -4,13 +4,9 @@ using HellionChat.Themes;
 
 namespace HellionChat.SelfTests;
 
-// Validates the runtime theme-switch contract from the user side. The
+// Validates the runtime theme-switch contract: polls ThemeRegistry.Active
-// caller toggles the active theme via Settings -> Theme & Layout, the
+// per frame until the slug moves away and back, then sanity-checks that
-// step polls ThemeRegistry.Active per frame and only passes once the
+// the ABGR cache was recomputed on switch.
-// slug has moved away from the initial value and back. The ABGR cache
-// is sanity-checked on every frame: a freshly switched theme must carry
-// a populated cache, otherwise Switch() forgot the recompute and the UI
-// would still draw, just with all-transparent slots.
 internal sealed class ThemeSwitchSelfTestStep : ISelfTestStep
 {
     private readonly Plugin plugin;
@@ -73,9 +69,8 @@ internal sealed class ThemeSwitchSelfTestStep : ISelfTestStep
         this.switchedAway = false;
     }
 
-    // Any non-zero slot proves the cache was actually recomputed for the
+    // Any non-zero slot confirms the cache was recomputed — no reference
-    // current theme. We don't compare against a reference, because custom
+    // comparison since custom themes can share slot values with built-ins.
-    // themes can legitimately share slot values with a built-in.
     private static bool HasPopulatedCache(Theme theme)
     {
         var cache = theme.AbgrCache;

HellionChat/SelfTests/WizardStateSmokeStep.cs

@@ -0,0 +1,135 @@
+using System.Collections.Generic;
+using Dalamud.Bindings.ImGui;
+using Dalamud.Plugin.SelfTest;
+using HellionChat.Code;
+using HellionChat.Ui;
+
+namespace HellionChat.SelfTests;
+
+// Drives the FirstRunWizard state machine through every step and
+// commits a no-op pending state (Variant 1), then re-runs picking
+// Roleplay on Step 2 and skipping Step 3 (Variant 2). Verifies
+// that the staged-commit path does not throw under any combination
+// of Pending* values and that CommitPending leaves Config in a
+// readable shape. Variant 2's Roleplay commit would normally
+// mutate the six PrivacyFilter / Retention fields ApplyRoleplay
+// touches, so the step snapshots them before Variant 2 runs and
+// CleanUp() restores them — the self-test stays idempotent across
+// repeated /xlperf runs and does not overwrite an active privacy
+// profile.
+internal sealed class WizardStateSmokeStep : ISelfTestStep
+{
+    private readonly Plugin plugin;
+
+    // Snapshot slots for the six Configuration fields ApplyRoleplay
+    // writes in Variant 2. Populated right before Variant 2 mutates
+    // Config, consumed by CleanUp(). Reference-typed snapshots
+    // (HashSet, Dictionary) capture the existing slot by reference,
+    // which is safe because ApplyRoleplay reassigns the slot with
+    // a fresh instance instead of mutating in place.
+    private bool? snapshotPrivacyFilterEnabled;
+    private HashSet<ChatType>? snapshotPrivacyPersistChannels;
+    private bool? snapshotPrivacyPersistUnknownChannels;
+    private bool? snapshotRetentionEnabled;
+    private int? snapshotRetentionDefaultDays;
+    private Dictionary<ChatType, int>? snapshotRetentionPerChannelDays;
+
+    public WizardStateSmokeStep(Plugin plugin)
+    {
+        this.plugin = plugin;
+    }
+
+    public string Name => "Hellion Chat - FirstRunWizard state smoke";
+
+    public SelfTestStepResult RunStep()
+    {
+        var wizard = this.plugin.FirstRunWizard;
+        if (wizard is null)
+        {
+            ImGui.Text("Plugin.FirstRunWizard is null");
+            return SelfTestStepResult.Fail;
+        }
+
+        try
+        {
+            // Variant 1: no-op CommitPending. Walks the state machine and
+            // verifies the empty-pending write-back path does not throw.
+            wizard.TestOnly_AdvanceTo(1);
+            wizard.TestOnly_AdvanceTo(2);
+            wizard.TestOnly_AdvanceTo(3);
+            wizard.TestOnly_AdvanceTo(4);
+            wizard.CommitPending();
+
+            // Variant 2: skip Step 3 explicitly. Picks Roleplay on Step 2,
+            // jumps straight to Step 4 (no Step-3 entry → no seed for
+            // LoadPreviousSession / FilterIncludePreviousSessions), commits,
+            // and asserts the two coupled history toggles remained on their
+            // pre-test value. Pins the null-semantics from Spec Z.176 so a
+            // regression in CommitPending that started writing seeded
+            // recommendations unconditionally would surface here.
+            // CommitPending → ApplyRoleplay overwrites six privacy /
+            // retention fields, so snapshot them first and let CleanUp
+            // restore them after the assert. Keeps /xlperf idempotent.
+            this.snapshotPrivacyFilterEnabled = Plugin.Config.PrivacyFilterEnabled;
+            this.snapshotPrivacyPersistChannels = Plugin.Config.PrivacyPersistChannels;
+            this.snapshotPrivacyPersistUnknownChannels = Plugin
+                .Config
+                .PrivacyPersistUnknownChannels;
+            this.snapshotRetentionEnabled = Plugin.Config.RetentionEnabled;
+            this.snapshotRetentionDefaultDays = Plugin.Config.RetentionDefaultDays;
+            this.snapshotRetentionPerChannelDays = Plugin.Config.RetentionPerChannelDays;
+
+            var loadPrevBefore = Plugin.Config.LoadPreviousSession;
+            var filterPrevBefore = Plugin.Config.FilterIncludePreviousSessions;
+            wizard.TestOnly_AdvanceTo(2);
+            wizard.TestOnly_SetPendingProfile(FirstRunWizard.PrivacyProfile.Roleplay);
+            wizard.TestOnly_AdvanceTo(4);
+            wizard.CommitPending();
+            if (Plugin.Config.LoadPreviousSession != loadPrevBefore)
+            {
+                ImGui.Text("Skip-Step-3 path overwrote LoadPreviousSession");
+                return SelfTestStepResult.Fail;
+            }
+            if (Plugin.Config.FilterIncludePreviousSessions != filterPrevBefore)
+            {
+                ImGui.Text("Skip-Step-3 path overwrote FilterIncludePreviousSessions");
+                return SelfTestStepResult.Fail;
+            }
+        }
+        catch (Exception ex)
+        {
+            ImGui.Text($"Wizard state smoke threw: {ex.GetType().Name}: {ex.Message}");
+            return SelfTestStepResult.Fail;
+        }
+
+        return SelfTestStepResult.Pass;
+    }
+
+    public void CleanUp()
+    {
+        // Restore the six Variant-2 snapshots so back-to-back /xlperf
+        // runs don't drift the active privacy profile. If Variant 2
+        // never ran (Variant 1 threw early), the slots stay null and
+        // restore is a no-op. After restore the slots are nulled so a
+        // future RunStep starts fresh.
+        if (this.snapshotPrivacyFilterEnabled is { } privacyFilter)
+            Plugin.Config.PrivacyFilterEnabled = privacyFilter;
+        if (this.snapshotPrivacyPersistChannels is { } persistChannels)
+            Plugin.Config.PrivacyPersistChannels = persistChannels;
+        if (this.snapshotPrivacyPersistUnknownChannels is { } persistUnknown)
+            Plugin.Config.PrivacyPersistUnknownChannels = persistUnknown;
+        if (this.snapshotRetentionEnabled is { } retentionEnabled)
+            Plugin.Config.RetentionEnabled = retentionEnabled;
+        if (this.snapshotRetentionDefaultDays is { } retentionDays)
+            Plugin.Config.RetentionDefaultDays = retentionDays;
+        if (this.snapshotRetentionPerChannelDays is { } retentionPolicy)
+            Plugin.Config.RetentionPerChannelDays = retentionPolicy;
+
+        this.snapshotPrivacyFilterEnabled = null;
+        this.snapshotPrivacyPersistChannels = null;
+        this.snapshotPrivacyPersistUnknownChannels = null;
+        this.snapshotRetentionEnabled = null;
+        this.snapshotRetentionDefaultDays = null;
+        this.snapshotRetentionPerChannelDays = null;
+    }
+}

HellionChat/Themes/Builtin/CrystalNocturne.cs

@@ -0,0 +1,82 @@
+using HellionChat.Util;
+
+namespace HellionChat.Themes.Builtin;
+
+internal static class CrystalNocturne
+{
+    public const string Slug = "crystal-nocturne";
+
+    public static Theme Build() =>
+        new(
+            Slug: Slug,
+            Name: "Crystal Nocturne",
+            Author: "CRYSTALLITE",
+            Description: "Royal sapphire and electric magenta over obsidian — a nocturne for the crystal-lit dance floor.",
+            Colors: new ThemeColors(
+                PrimaryDark: ColourUtil.HexToRgba("#1D4ED8"),
+                Primary: ColourUtil.HexToRgba("#3B82F6"),
+                PrimaryLight: ColourUtil.HexToRgba("#93C5FD"),
+                PrimaryGlow: ColourUtil.HexToRgba("#3B82F699"),
+                AccentDark: ColourUtil.HexToRgba("#A21CAF"),
+                Accent: ColourUtil.HexToRgba("#D946EF"),
+                AccentLight: ColourUtil.HexToRgba("#F0ABFC"),
+                Identity: ColourUtil.HexToRgba("#3B82F6"),
+                WindowBg: ColourUtil.HexToRgba("#08070F"),
+                ChildBg: ColourUtil.HexToRgba("#11101F"),
+                FrameBg: ColourUtil.HexToRgba("#1C1A33"),
+                Surface: ColourUtil.HexToRgba("#262340"),
+                SurfaceHover: ColourUtil.HexToRgba("#332D55"),
+                Border: ColourUtil.HexToRgba("#D946EF55"),
+                TextPrimary: ColourUtil.HexToRgba("#F5F3FF"),
+                TextMuted: ColourUtil.HexToRgba("#A5A0C0"),
+                TextDim: ColourUtil.HexToRgba("#4B4763"),
+                StatusSuccess: ColourUtil.HexToRgba("#10B981"),
+                StatusDanger: ColourUtil.HexToRgba("#F43F5E"),
+                StatusWarning: ColourUtil.HexToRgba("#FACC15"),
+                StatusInfo: ColourUtil.HexToRgba("#3B82F6")
+            ),
+            Layout: new ThemeLayout(
+                WindowRounding: 2f,
+                ChildRounding: 1f,
+                PopupRounding: 2f,
+                FrameRounding: 1f,
+                GrabRounding: 1f,
+                TabRounding: 1f,
+                ScrollbarRounding: 2f,
+                WindowBorderSize: 1f,
+                FrameBorderSize: 1f
+            ),
+            Typography: new ThemeTypography(),
+            IsBuiltIn: true,
+            ChatColors: new ThemeChatColors(
+                new Dictionary<HellionChat.Code.ChatType, uint>
+                {
+                    // Crystal Nocturne — sapphire-blue identity for party/team channels,
+                    // accent-magenta for tells, with mint/peach accents on linkshells
+                    // so the eight LS slots stay individually distinguishable on the
+                    // dark obsidian background.
+                    [HellionChat.Code.ChatType.Say] = ColourUtil.HexToRgba("#F5F3FF"),
+                    [HellionChat.Code.ChatType.Yell] = ColourUtil.HexToRgba("#FACC15"),
+                    [HellionChat.Code.ChatType.Shout] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.TellIncoming] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.TellOutgoing] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.Party] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Alliance] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.FreeCompany] = ColourUtil.HexToRgba("#A8C8E8"),
+                    [HellionChat.Code.ChatType.NoviceNetwork] = ColourUtil.HexToRgba("#10B981"),
+                    [HellionChat.Code.ChatType.CrossParty] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Linkshell1] = ColourUtil.HexToRgba("#10B981"),
+                    [HellionChat.Code.ChatType.Linkshell2] = ColourUtil.HexToRgba("#FACC15"),
+                    [HellionChat.Code.ChatType.Linkshell3] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.Linkshell4] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Linkshell5] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.Linkshell6] = ColourUtil.HexToRgba("#A5A0C0"),
+                    [HellionChat.Code.ChatType.Linkshell7] = ColourUtil.HexToRgba("#D946EF"),
+                    [HellionChat.Code.ChatType.Linkshell8] = ColourUtil.HexToRgba("#3B82F6"),
+                    [HellionChat.Code.ChatType.CustomEmote] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.StandardEmote] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.Echo] = ColourUtil.HexToRgba("#A5A0C0"),
+                }
+            )
+        );
+}

HellionChat/Themes/Builtin/HellionSpectrum.cs

@@ -2,12 +2,7 @@ using HellionChat.Util;
 
 namespace HellionChat.Themes.Builtin;
 
-// Hellion Spectrum: Deuteran/Protan-safe channel colours.
+// Deuteran/Protan-safe palette with preserved channel identity.
-// Palette derived from Bang Wong, "Points of view: Color blindness",
-// Nature Methods 8, 441 (2011). Channel identity (Tell pink, Yell yellow,
-// Shout orange, Party blue, FC green) is preserved per Channel-Identity-
-// Rule in docs/THEME-AUTHORING.md; tones are chosen so every channel
-// stays distinguishable under red-green colour-vision deficiency.
 internal static class HellionSpectrum
 {
     public const string Slug = "hellion-spectrum";
@@ -57,9 +52,6 @@ internal static class HellionSpectrum
             ChatColors: new ThemeChatColors(
                 new Dictionary<HellionChat.Code.ChatType, uint>
                 {
-                    // Hellion Spectrum — Wong/Okabe-Ito tones within FFXIV channel
-                    // identity. FC pulled slightly greener than vanilla cyan-teal so
-                    // Party-blue and FC-green stay separable under deuteran sim.
                     [HellionChat.Code.ChatType.Say] = ColourUtil.HexToRgba("#FFFFFF"),
                     [HellionChat.Code.ChatType.Yell] = ColourUtil.HexToRgba("#F0E442"),
                     [HellionChat.Code.ChatType.Shout] = ColourUtil.HexToRgba("#D55E00"),

HellionChat/Themes/Builtin/MoonlitBloom.cs

@@ -1,80 +0,0 @@
-using HellionChat.Util;
-
-namespace HellionChat.Themes.Builtin;
-
-internal static class MoonlitBloom
-{
-    public const string Slug = "moonlit-bloom";
-
-    public static Theme Build() =>
-        new(
-            Slug: Slug,
-            Name: "Moonlit Bloom",
-            Author: "Hellion Forge",
-            Description: "Bloom Magenta + Soft Sage auf Deep Violet Night.",
-            Colors: new ThemeColors(
-                PrimaryDark: ColourUtil.HexToRgba("#C957D0"),
-                Primary: ColourUtil.HexToRgba("#E374E8"),
-                PrimaryLight: ColourUtil.HexToRgba("#EF8AF4"),
-                PrimaryGlow: ColourUtil.HexToRgba("#E374E899"),
-                AccentDark: ColourUtil.HexToRgba("#7AAC5C"),
-                Accent: ColourUtil.HexToRgba("#9CCB7C"),
-                AccentLight: ColourUtil.HexToRgba("#B6E297"),
-                Identity: ColourUtil.HexToRgba("#E374E8"),
-                WindowBg: ColourUtil.HexToRgba("#0E0C1F"),
-                ChildBg: ColourUtil.HexToRgba("#15122B"),
-                FrameBg: ColourUtil.HexToRgba("#1F1A38"),
-                Surface: ColourUtil.HexToRgba("#28224A"),
-                SurfaceHover: ColourUtil.HexToRgba("#332B5B"),
-                Border: ColourUtil.HexToRgba("#E374E844"),
-                TextPrimary: ColourUtil.HexToRgba("#ECE6F5"),
-                TextMuted: ColourUtil.HexToRgba("#9A8BB0"),
-                TextDim: ColourUtil.HexToRgba("#554B6E"),
-                StatusSuccess: ColourUtil.HexToRgba("#7AAC5C"),
-                StatusDanger: ColourUtil.HexToRgba("#E85C6A"),
-                StatusWarning: ColourUtil.HexToRgba("#E8B590"),
-                StatusInfo: ColourUtil.HexToRgba("#6278FF")
-            ),
-            Layout: new ThemeLayout(
-                WindowRounding: 6f,
-                ChildRounding: 5f,
-                PopupRounding: 5f,
-                FrameRounding: 4f,
-                GrabRounding: 4f,
-                TabRounding: 4f,
-                ScrollbarRounding: 4f,
-                WindowBorderSize: 1f,
-                FrameBorderSize: 1f
-            ),
-            Typography: new ThemeTypography(),
-            IsBuiltIn: true,
-            ChatColors: new ThemeChatColors(
-                new Dictionary<HellionChat.Code.ChatType, uint>
-                {
-                    // Moonlit Bloom — Bloom-Magenta-Tönung. Sage-Drift in NoviceNetwork
-                    // und Linkshell4. Tell-Pink-Identität bleibt sichtbar.
-                    [HellionChat.Code.ChatType.Say] = ColourUtil.HexToRgba("#ECE6F5"),
-                    [HellionChat.Code.ChatType.Yell] = ColourUtil.HexToRgba("#F0D080"),
-                    [HellionChat.Code.ChatType.Shout] = ColourUtil.HexToRgba("#F09A60"),
-                    [HellionChat.Code.ChatType.TellIncoming] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.TellOutgoing] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.Party] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Alliance] = ColourUtil.HexToRgba("#F0B090"),
-                    [HellionChat.Code.ChatType.FreeCompany] = ColourUtil.HexToRgba("#A8C8E8"),
-                    [HellionChat.Code.ChatType.NoviceNetwork] = ColourUtil.HexToRgba("#9CCB7C"),
-                    [HellionChat.Code.ChatType.CrossParty] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Linkshell1] = ColourUtil.HexToRgba("#9CCB7C"),
-                    [HellionChat.Code.ChatType.Linkshell2] = ColourUtil.HexToRgba("#F0BC92"),
-                    [HellionChat.Code.ChatType.Linkshell3] = ColourUtil.HexToRgba("#F0D080"),
-                    [HellionChat.Code.ChatType.Linkshell4] = ColourUtil.HexToRgba("#B6E297"),
-                    [HellionChat.Code.ChatType.Linkshell5] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Linkshell6] = ColourUtil.HexToRgba("#C098D8"),
-                    [HellionChat.Code.ChatType.Linkshell7] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.Linkshell8] = ColourUtil.HexToRgba("#E8B0E8"),
-                    [HellionChat.Code.ChatType.CustomEmote] = ColourUtil.HexToRgba("#E8B590"),
-                    [HellionChat.Code.ChatType.StandardEmote] = ColourUtil.HexToRgba("#E8B590"),
-                    [HellionChat.Code.ChatType.Echo] = ColourUtil.HexToRgba("#9A8BB0"),
-                }
-            )
-        );
-}

HellionChat/Themes/Builtin/SynthwaveSunset.cs

@@ -10,7 +10,7 @@ internal static class SynthwaveSunset
         new(
             Slug: Slug,
             Name: "Synthwave Sunset",
-            Author: "Hellion Forge",
+            Author: "Zoe Moon",
             Description: "Hot Magenta + Cyan on midnight violet. 80s neon-grid vibes for late-night raids.",
             Colors: new ThemeColors(
                 PrimaryDark: ColourUtil.HexToRgba("#C71585"),

HellionChat/Themes/ThemeChatColors.cs

@@ -2,8 +2,6 @@ using HellionChat.Code;
 
 namespace HellionChat.Themes;
 
-// Optional pro Theme. Wenn ein Theme ChatColors mitliefert, kann der
+// Optional per-theme chat colours applied to Configuration.ChatColours on user request.
-// User sie per Klick im Themes-Tab auf Configuration.ChatColours anwenden.
+// Themes without this leave channel colours untouched.
-// Ein Theme ohne ChatColors (z.B. chat2-classic) lässt die User-Channel-
-// Farben unverändert.
 public sealed record ThemeChatColors(IReadOnlyDictionary<ChatType, uint> Channels);

HellionChat/Themes/ThemeColors.cs

@@ -1,6 +1,6 @@
 namespace HellionChat.Themes;
 
-// Color-Werte als 0xRRGGBBAA, RgbaToAbgr handled den Byte-Swap zu ImGui.
+// Colour values as 0xRRGGBBAA — RgbaToAbgr handles the byte-swap for ImGui.
 public sealed record ThemeColors(
     uint PrimaryDark,
     uint Primary,

HellionChat/Themes/ThemeJsonLoader.cs

@@ -66,10 +66,8 @@ internal static class ThemeJsonLoader
         var dict = new Dictionary<HellionChat.Code.ChatType, uint>();
         foreach (var prop in el.EnumerateObject())
         {
-            // Property-Name ist der ChatType-Name als String (z.B. "Say", "Tell"),
+            // Property name is the ChatType name (e.g. "Say", "Tell"), value is hex like theme colours.
-            // Value ist Hex wie bei den Theme-Colors. Unbekannte Channel-Names
+            // Unknown channel names are silently skipped for forward-compat with future SE channels.
-            // werden still übersprungen — Forward-Compat falls SE neue Channels
-            // einführt.
             if (
                 !Enum.TryParse<HellionChat.Code.ChatType>(
                     prop.Name,

HellionChat/Themes/ThemeLayout.cs

@@ -1,6 +1,6 @@
 namespace HellionChat.Themes;
 
-// Layout-Werte spiegeln die ImGuiStyleVar-Slots, die HellionStyle pusht.
+// Layout values mirror the ImGuiStyleVar slots pushed by HellionStyle.
 public sealed record ThemeLayout(
     float WindowRounding,
     float ChildRounding,

HellionChat/Themes/ThemeRegistry.cs

@@ -1,11 +1,21 @@
 using HellionChat.Themes.Builtin;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat.Themes;
 
 public sealed class ThemeRegistry
 {
+    private readonly ILogger<ThemeRegistry>? _logger;
+
     public const string DefaultSlug = HellionArctic.Slug;
 
+    // 1Hz throttle for the v1.4.8 B2 auto-refresh-on-active path. The
+    // Plugin.Draw hook calls RefreshActiveIfStale every frame, but the
+    // actual File.GetLastWriteTimeUtc disk-stat only runs once per second
+    // -- 60fps would otherwise mean 3600 stats/min on the same path (more
+    // on Wine). Same idiom as the StatusBar 1Hz cache.
+    private const long ActiveStampPollIntervalMs = 1000;
+
     private readonly Dictionary<string, Theme> _builtIns;
     private readonly Dictionary<string, (Theme Theme, DateTime Stamp)> _customCache = new(
         StringComparer.OrdinalIgnoreCase
@@ -13,23 +23,37 @@ public sealed class ThemeRegistry
     private readonly string? _customThemesDir;
     private Theme _active;
 
-    public ThemeRegistry(string? customThemesDir = null)
+    // v1.4.8 B2: source path of the currently active custom theme. Captured
+    // at Switch() time so RefreshActiveIfStale does not have to reconstruct
+    // a filename from the slug -- custom theme filenames are not required
+    // to match the slug they declare in the JSON body. Null when the active
+    // theme is built-in or no custom-themes directory is configured.
+    private string? _activeCustomPath;
+    private long _lastActiveStampCheckMs = -ActiveStampPollIntervalMs;
+    private DateTime _lastActiveStamp = DateTime.MinValue;
+
+    public ThemeRegistry(string? customThemesDir = null, ILogger<ThemeRegistry>? logger = null)
     {
+        _logger = logger;
+        // Insertion order drives the Theme-Picker grid layout (3 columns).
+        // Row 1: blue family. Row 2: purple to magenta family.
+        // Row 3: green / warm / classic. Row 4: Synthwave Sunset as a
+        // retro bonus on its own line.
         _builtIns = new Dictionary<string, Theme>(StringComparer.OrdinalIgnoreCase)
         {
             { HellionArctic.Slug, HellionArctic.Build() },
             { HellionSpectrum.Slug, HellionSpectrum.Build() },
-            { Chat2Classic.Slug, Chat2Classic.Build() },
-            { EventHorizon.Slug, EventHorizon.Build() },
-            { MoonlitBloom.Slug, MoonlitBloom.Build() },
             { NightBlue.Slug, NightBlue.Build() },
+            { EventHorizon.Slug, EventHorizon.Build() },
             { IndigoViolet.Slug, IndigoViolet.Build() },
-            { ForgeMerchantman.Slug, ForgeMerchantman.Build() },
+            { CrystalNocturne.Slug, CrystalNocturne.Build() },
             { MintGrove.Slug, MintGrove.Build() },
+            { ForgeMerchantman.Slug, ForgeMerchantman.Build() },
+            { Chat2Classic.Slug, Chat2Classic.Build() },
             { SynthwaveSunset.Slug, SynthwaveSunset.Build() },
         };
 
-        // Centralised so the ten .Build() factories stay free of cache plumbing.
+        // Centralised so Build() factories stay free of cache plumbing.
         foreach (var theme in _builtIns.Values)
             theme.RecomputeAbgrCache();
 
@@ -44,7 +68,9 @@ public sealed class ThemeRegistry
         if (_builtIns.TryGetValue(slug, out var b))
             return b;
 
-        var custom = LoadCustomBySlug(slug);
+        // Discard the source path here; Switch is the only call-site that
+        // needs to remember it for the auto-refresh hook.
+        var custom = LoadCustomBySlug(slug, out _);
         if (custom != null)
             return custom;
 
@@ -55,17 +81,74 @@ public sealed class ThemeRegistry
 
     public IEnumerable<Theme> AllCustom() => RefreshCustomCache();
 
+    // Built-in-first to match Get(slug)'s lookup order. A user theme JSON
+    // that declares the same slug as a built-in is ignored deliberately --
+    // having Switch prefer custom and Get prefer built-in would produce
+    // a state where _active and Get(_active.Slug) disagree.
     public void Switch(string slug)
     {
-        var theme = Get(slug);
+        if (_builtIns.TryGetValue(slug, out var builtin))
-        // Defensive — idempotent and cheap, so any future theme source
+        {
-        // that forgets the cache fill still ends up with a populated one.
+            _active = builtin;
-        theme.RecomputeAbgrCache();
+            _active.RecomputeAbgrCache();
-        _active = theme;
+            _activeCustomPath = null;
+            return;
+        }
+
+        var customTheme = LoadCustomBySlug(slug, out var customPath);
+        if (customTheme is not null)
+        {
+            _active = customTheme;
+            // Defensive — ensures any future theme source always gets a populated cache.
+            _active.RecomputeAbgrCache();
+            _activeCustomPath = customPath;
+            // Force a first-tick reload-check after the switch so the stamp
+            // baseline is established on the next RefreshActiveIfStale call.
+            _lastActiveStamp = DateTime.MinValue;
+            return;
+        }
+
+        // Fallback: neither built-in nor custom matched. Drop to default
+        // and clear the active custom path so RefreshActiveIfStale stays idle.
+        _active = _builtIns[DefaultSlug];
+        _active.RecomputeAbgrCache();
+        _activeCustomPath = null;
     }
 
-    // 0x80070020 = SHARING_VIOLATION, 0x80070021 = LOCK_VIOLATION. Other
+    // 1Hz-throttled disk-stat on the currently active custom theme file.
-    // IO failures are permanent and get the theme dropped instead of retried.
+    // When the file's LastWriteTime moves forward (editor save), reload the
+    // theme via Get() so the user sees the edit immediately without
+    // re-selecting in the picker. Built-in themes short-circuit; custom
+    // themes without an _activeCustomPath (e.g. Switch fell to default)
+    // short-circuit too.
+    public void RefreshActiveIfStale()
+    {
+        var now = Environment.TickCount64;
+        if (now - _lastActiveStampCheckMs < ActiveStampPollIntervalMs)
+            return;
+        _lastActiveStampCheckMs = now;
+
+        if (_active.IsBuiltIn)
+            return;
+
+        var path = _activeCustomPath;
+        if (path is null || !File.Exists(path))
+            return;
+
+        var stamp = File.GetLastWriteTimeUtc(path);
+        if (!ThemeStampDiff.IsStale(_lastActiveStamp, stamp))
+            return;
+        _lastActiveStamp = stamp;
+
+        // Get() re-runs RefreshCustomCache which picks up the new content
+        // (the cache keys by path + LastWriteTime, so a mtime bump invalidates).
+        // RecomputeAbgrCache happens inside RefreshCustomCache on cache miss.
+        var reloaded = Get(_active.Slug);
+        _active = reloaded;
+    }
+
+    // 0x80070020 = SHARING_VIOLATION, 0x80070021 = LOCK_VIOLATION.
+    // Other IO failures are permanent — theme is dropped instead of retried.
     internal static bool IsRecoverableFileLock(Exception? ex)
     {
         if (ex is not IOException io)
@@ -74,19 +157,30 @@ public sealed class ThemeRegistry
         return code == 0x80070020u || code == 0x80070021u;
     }
 
-    // Custom-Themes werden lazy aus dem Verzeichnis geladen, Cache mit
+    // Slug -> Theme lookup with the source path as an out-param so the
-    // LastWriteTime-Token. Eine geänderte JSON wird beim nächsten Lookup
+    // Switch path can remember which file backs the active custom theme.
-    // neu eingelesen.
+    // Pure reverse-lookup over the existing _customCache: that cache is
-    private Theme? LoadCustomBySlug(string slug)
+    // already Path -> (Theme, Stamp), so iterating it costs nothing,
+    // avoids a re-parse of every JSON, and keeps the parse logic (and
+    // the recoverable-file-lock recovery) confined to RefreshCustomCache.
+    // The cache must be warm before this runs; Plugin.LoadAsync triggers
+    // a one-time warm-up via AllCustom() before the first Switch call.
+    private Theme? LoadCustomBySlug(string slug, out string? sourcePath)
     {
+        sourcePath = null;
         if (_customThemesDir is null)
             return null;
         if (!Directory.Exists(_customThemesDir))
             return null;
 
-        foreach (var theme in RefreshCustomCache())
+        foreach (var kvp in _customCache)
-            if (string.Equals(theme.Slug, slug, StringComparison.OrdinalIgnoreCase))
+        {
-                return theme;
+            if (string.Equals(kvp.Value.Theme.Slug, slug, StringComparison.OrdinalIgnoreCase))
+            {
+                sourcePath = kvp.Key;
+                return kvp.Value.Theme;
+            }
+        }
         return null;
     }
 
@@ -115,9 +209,8 @@ public sealed class ThemeRegistry
                 }
                 catch (Exception ex) when (IsRecoverableFileLock(ex))
                 {
-                    // Editor mid-save: keep the cached snapshot, leave the stamp
+                    // Editor mid-save: keep last known good, retry on next refresh.
-                    // alone so the next refresh retries automatically.
+                    _logger?.LogDebug(
-                    Plugin.Log.Debug(
                         $"Custom theme {Path.GetFileName(path)} is locked, keeping last known good"
                     );
                     if (cached.Theme is not null)

HellionChat/Themes/ThemeStampDiff.cs

@@ -0,0 +1,20 @@
+namespace HellionChat.Themes;
+
+// Pure stale-check for the v1.4.8 B2 theme-auto-refresh-on-active path.
+// Lives in a free helper class so the Build-Suite can exercise the diff
+// rules without instantiating ThemeRegistry (which touches the Dalamud
+// log proxy and the filesystem). The rules:
+// - DateTime.MinValue on the current stat means we could not read the
+//   file -- hold the last known good (return false).
+// - Equal stamps mean no change since we last saw it.
+// - Any other difference, including the first observation where lastSeen
+//   is MinValue, counts as stale and triggers a reload.
+internal static class ThemeStampDiff
+{
+    public static bool IsStale(System.DateTime lastSeen, System.DateTime current)
+    {
+        if (current == System.DateTime.MinValue)
+            return false;
+        return current != lastSeen;
+    }
+}

HellionChat/Themes/ThemeTypography.cs

@@ -1,7 +1,6 @@
 namespace HellionChat.Themes;
 
-// Optional pro Theme. v1.1.0 nutzt das nicht aktiv; ist als Erweiterungspunkt
+// Optional per-theme; reserved as an extension point for future theme slots.
-// für zukünftige Theme-Slots vorbereitet.
 public sealed record ThemeTypography(
     float? OverrideGlobalFontSizePt = null,
     float? OverrideSymbolsFontSizePt = null

HellionChat/Ui/AutoTellTabTint.cs

@@ -1,34 +1,17 @@
 namespace HellionChat.Ui;
 
-/// <summary>
+// Deterministic hash-based color and icon tinting for Auto-Tell sidebar tabs.
-/// Hash-Color-Tinting für Auto-Tell-Tabs in der Sidebar (v1.2.0).
+// Same tell partner (name+world) always produces the same color and icon across
-/// Differenziert Tells visuell ohne dass User pro Tab manuell ein
+// sessions. Pure string logic, no Dalamud dependency — testable without game refs.
-/// Custom-Icon setzen muss. Gleicher Tell-Partner (Name+World) liefert
-/// konsistent dieselbe Farbe über Sessions hinweg.
-///
-/// Kuratierte 12-Farb-Palette aus dem Hellion-Theme-Pool: alle saturiert
-/// mid-bright, lesbar gegen Dark-Theme-Backgrounds. Bei realistischen
-/// 1-5 parallelen Tells ist Kollisions-Wahrscheinlichkeit gering.
-///
-/// Reine String-Logik (kein Dalamud-Dep) — testbar im HellionChat.Tests-
-/// Projekt das ohne Dalamud-Reference baut.
-/// </summary>
 internal static class AutoTellTabTint
 {
-    /// <summary>
+    // Fallback for invalid input (empty name or world=0). White matches
-    /// Fallback bei ungültigem Input (leerer Name, World=0). Standard-
+    // TextPrimary default so the sidebar stays visually consistent.
-    /// Text-Color (weiß) — passt mit existierendem TextPrimary-Default
-    /// zusammen, sodass die Sidebar visuell konsistent bleibt.
-    /// </summary>
     public const uint Fallback = 0xFFFFFFFFu;
 
-    /// <summary>
+    // 12 saturated mid-bright colors from the built-in theme pool, readable
-    /// 12 saturierte mid-bright Farben aus den 5 Built-In-Themes
+    // on dark backgrounds. Collision risk is low at realistic 1-5 active tells.
-    /// (Hellion-Arctic, Chat2-Klassik, Event-Horizon, Moonlit-Bloom,
+    // RGBA format, matching ColourUtil.RgbaToAbgr convention.
-    /// Mint-Grove). Reihenfolge ist deterministisch — Hash-Index wählt
-    /// Farbe per Modulo. RGBA-Format (passt zu ColourUtil.RgbaToAbgr-
-    /// Konvention im restlichen Code).
-    /// </summary>
     public static readonly IReadOnlyList<uint> Palette = new uint[]
     {
         0x00BED2FFu, // Arctic Cyan
@@ -45,30 +28,19 @@ internal static class AutoTellTabTint
         0xE85D04FFu, // Deep Ember
     };
 
-    /// <summary>
-    /// Liefert eine konsistente Tint-Color für einen Tell-Partner.
-    /// Hash basiert auf "Name@World" — Cross-World-Namen kollidieren
-    /// nur bei Hash-Bucket-Kollision, nicht durch Identitäts-Annahme.
-    /// </summary>
     public static uint For(string name, uint world)
     {
         if (string.IsNullOrEmpty(name) || world == 0)
             return Fallback;
 
-        // GetHashCode kann negativ sein; Bitmaske auf positive Range
+        // Mask to positive range so modulo always yields a valid index.
-        // damit Modulo-Division immer einen validen Index liefert.
         var key = $"{name}@{world}";
         var hash = (uint)(key.GetHashCode() & 0x7FFFFFFF);
         return Palette[(int)(hash % Palette.Count)];
     }
 
-    /// <summary>
+    // 7 visually distinct FA glyphs that make sense in a tell context.
-    /// Tell-spezifischer Icon-Pool. 7 visuell distinkte FontAwesome-Glyphen
+    // Excludes cog/comment/users — those read as system or group tabs.
-    /// die im Tell-Kontext sinnvoll wirken (envelope = Tell-Default, star/
-    /// heart/bell = personalisiert, bookmark/flag/fire = markiert/wichtig).
-    /// Bewusst kein cog/comment/users — die wären für System-/Group-Tabs
-    /// reserviert und würden im Tell-Bereich verwirrend wirken.
-    /// </summary>
     public static readonly IReadOnlyList<string> IconPool = new[]
     {
         "envelope",
@@ -80,26 +52,17 @@ internal static class AutoTellTabTint
         "fire",
     };
 
-    /// <summary>
+    // "envelope" matches the tell context better than the old hardcoded "clock".
-    /// Fallback-Icon bei ungültigem Input. "envelope" passt semantisch zum
-    /// Tell-Kontext besser als das alte hardcoded "clock".
-    /// </summary>
     public const string IconFallback = "envelope";
 
-    /// <summary>
-    /// Liefert ein konsistentes Icon-Glyph für einen Tell-Partner.
-    /// Nutzt einen anderen Hash-Bias als For() (Color), damit Icon und
-    /// Color unabhängig variieren — gibt 7 × 12 = 84 distinct Combinations.
-    /// </summary>
     public static string IconFor(string name, uint world)
     {
         if (string.IsNullOrEmpty(name) || world == 0)
             return IconFallback;
 
-        // Anderer Hash-Bias als For() (verschiedene Modulo-Basis): wir
+        // Reversed key ("world@name") gives icon and color independent variation
-        // nutzen "world@name" statt "name@world" damit Icon und Color
+        // so the same tell partner doesn't always get the same color+icon pair.
-        // nicht synchron variieren. Ohne Bias-Trennung würden alle Tells
+        // 7 icons x 12 colors = 84 distinct combinations.
-        // mit derselben Color auch dasselbe Icon haben.
         var key = $"{world}@{name}";
         var hash = (uint)(key.GetHashCode() & 0x7FFFFFFF);
         return IconPool[(int)(hash % IconPool.Count)];