Merge branch 'feature/v2.0.0' into main

The 2.0.0 reset put every install on the shipped defaults for the first time, and
that exposed which of them had never actually been used. The sidebar was the
loudest: 44 pixels, a width carried over from the v1.2.0 icon-only layout and left
in place long after the sidebar started drawing labels beside those icons. Every
tab name came out clipped. Nobody had noticed in cycles because everyone had
widened it by hand -- 160 in the config this was measured against.

Default 160, and the floor moves from 40 to 130: where a tab name stops being
readable in German, which is the longest of the 25 languages, rather than where
the icons stop fitting. Anyone who wants it slimmer wants the collapsed layout,
and that is a separate width.

Glyph ranges had the same shape of problem with a worse outcome. They were only
ever filled when someone picked a language explicitly, so an install left on
"follow Dalamud" -- the default -- got none at all. That went unnoticed while
configs accumulated ranges over months; a fresh config has none, and a tester on
a Korean, Chinese, Cyrillic or Greek client would have come out of this update
reading boxes. The load path derives them from the Dalamud UI language too now.

The rest are preference defaults taken from a config that has been in daily use
across every one of these cycles: compact density off, title bar off, compact
timestamps on, compact tell tabs on, honorific glow on, 100 messages of tell
history preloaded, inactive opacity 0.75, command help on the right. New tell
tabs open as pop-outs, because the wizard's closing step tells the user to try
/tell and watch exactly that happen.

Two values were deliberately not carried over. SeenPopOutInputHint and
SeenPopOutHeaderHint are not preferences, they are "this user has seen it"
markers -- shipping them as true would mean no new user ever sees the hints that
explain a feature people did not find on their own. The greeted toggle stays off
as well: it is opt-in for people who greet.

Also dropped the light-bulb emoji from the wizard's closing hint in all 25
languages. UI icons come from the icon font here, not from emoji.

.editorconfig

@@ -1,167 +1,252 @@
+# ##############################################################
+# #
+# #   .editorconfig – Hellion Forge / Hellion Media
+# #
+# #   Überarbeitet: Mai 2026
+# #
+# #   Strategie:
+# #     - Standard-.NET-Conventions (private Fields = _camelCase)
+# #     - CSharpier übernimmt die meiste Formatierung
+# #     - Hier: Naming, IDE-Hints, Backup-Format-Regeln
+# #
+# # ##############################################################
+
+root = true
+
+
+# =====================================================
+# Defaults (alle Files)
+# =====================================================
+
 [*]
 indent_style = space
 tab_width = 4
 indent_size = 4
+charset = utf-8
+end_of_line = lf
 trim_trailing_whitespace = true
-insert_final_newline=false
+insert_final_newline = true
 
-# JetBrains Rider custom properties for code formatting styles
+
-resharper_csharp_brace_style=next_line
+# =====================================================
-# Allman für standard Tooling (VS Code)
+# Markdown: Trailing Spaces erlaubt (2 Spaces = <br>)
+# =====================================================
+
+[*.md]
+trim_trailing_whitespace = false
+
+
+# =====================================================
+# JSON / YAML / Web-Configs: 2-Space-Indent
+# Konsistent mit yamllint und Prettier-Override
+# =====================================================
+
+[*.{yaml,yml}]
+indent_size = 2
+
+[*.{json,jsonc,har,jsb2,jsb3,postman_collection,postman_environment}]
+indent_size = 2
+
+[{.babelrc,.eslintrc,.prettierrc,.markdownlintrc,.stylelintrc,bowerrc}]
+indent_size = 2
+
+
+# =====================================================
+# .NET / XAML / Razor / Resources: 4-Space-Indent
+# =====================================================
+
+[*.{cs,csx,vb,fs,fsi,fsx}]
+indent_size = 4
+
+[*.{xml,xsd,xaml,axaml,paml,resx,resw,nuspec,config}]
+indent_size = 4
+
+[*.{cshtml,razor,aspx,ascx,asax,master,axaml}]
+indent_size = 4
+
+
+# ##############################################################
+# #
+# #   C# Sektion: Style, Naming, Format
+# #
+# ##############################################################
+
+[*.{cs,csx}]
+
+
+# =====================================================
+# C# Style – var-Präferenz
+# =====================================================
+
+csharp_style_var_for_built_in_types = true:suggestion
+csharp_style_var_when_type_is_apparent = true:suggestion
+csharp_style_var_elsewhere = true:suggestion
+
+
+# =====================================================
+# C# Style – Sonstiges
+# =====================================================
+
+# UTF-8 String Literals (C# 11+)
+csharp_style_prefer_utf8_string_literals = true:suggestion
+
+# Reihenfolge der Access-Modifier (Microsoft-Empfehlung)
+csharp_preferred_modifier_order = public, private, protected, internal, file, new, static, abstract, virtual, sealed, readonly, override, extern, unsafe, volatile, async, required:suggestion
+
+# Initializer: nicht alles auf eine Zeile
+csharp_new_line_before_members_in_object_initializers = false
+
+
+# =====================================================
+# C# Format – Braces (Backup, falls CSharpier nicht läuft)
+# =====================================================
+
+# Allman Style: Klammern auf neue Zeile
 csharp_new_line_before_open_brace = all
 csharp_new_line_before_else = true
 csharp_new_line_before_catch = true
 csharp_new_line_before_finally = true
 
-# Switch-Einrückung
+
+# =====================================================
+# C# Format – Switch-Einrückung
+# =====================================================
+
 csharp_indent_case_contents = true
 csharp_indent_switch_labels = true
 
+
+# =====================================================
+# .NET Style – Qualification (kein "this." nötig)
+# =====================================================
+
+dotnet_style_qualification_for_field = false:suggestion
+dotnet_style_qualification_for_property = false:suggestion
+dotnet_style_qualification_for_method = false:suggestion
+dotnet_style_qualification_for_event = false:suggestion
+
+
+# =====================================================
+# .NET Style – Predefined Types (int statt Int32 etc.)
+# =====================================================
+
+dotnet_style_predefined_type_for_locals_parameters_members = true:suggestion
+dotnet_style_predefined_type_for_member_access = true:suggestion
+
+
+# =====================================================
+# .NET Style – Parentheses
+# =====================================================
+
+dotnet_style_parentheses_in_arithmetic_binary_operators = never_if_unnecessary:none
+dotnet_style_parentheses_in_relational_binary_operators = never_if_unnecessary:none
+dotnet_style_parentheses_in_other_binary_operators = always_for_clarity:none
+
+
+# =====================================================
+# .NET Style – Accessibility-Modifier erzwingen
+# =====================================================
+
+dotnet_style_require_accessibility_modifiers = for_non_interface_members:suggestion
+
+
+# ##############################################################
+# #
+# #   Naming Conventions (.NET-Standard)
+# #
+# #   Private Instance Fields:      _camelCase
+# #   Private Static Fields:        _camelCase
+# #   Private Constants:            PascalCase
+# #   Private Static Readonly:      PascalCase
+# #
+# ##############################################################
+
+# === Style: Underscore + camelCase ===
+dotnet_naming_style.underscore_camel_case_style.capitalization = camel_case
+dotnet_naming_style.underscore_camel_case_style.required_prefix = _
+
+# === Style: PascalCase ===
+dotnet_naming_style.pascal_case_style.capitalization = pascal_case
+
+
+# === Rule: Private Instance Fields → _camelCase ===
+dotnet_naming_rule.private_instance_fields.severity = warning
+dotnet_naming_rule.private_instance_fields.symbols = private_instance_fields_symbols
+dotnet_naming_rule.private_instance_fields.style = underscore_camel_case_style
+
+dotnet_naming_symbols.private_instance_fields_symbols.applicable_kinds = field
+dotnet_naming_symbols.private_instance_fields_symbols.applicable_accessibilities = private
+
+
+# === Rule: Private Static Fields → _camelCase ===
+dotnet_naming_rule.private_static_fields.severity = warning
+dotnet_naming_rule.private_static_fields.symbols = private_static_fields_symbols
+dotnet_naming_rule.private_static_fields.style = underscore_camel_case_style
+
+dotnet_naming_symbols.private_static_fields_symbols.applicable_kinds = field
+dotnet_naming_symbols.private_static_fields_symbols.applicable_accessibilities = private
+dotnet_naming_symbols.private_static_fields_symbols.required_modifiers = static
+
+
+# === Rule: Private Constants → PascalCase ===
+dotnet_naming_rule.private_constants.severity = warning
+dotnet_naming_rule.private_constants.symbols = private_constants_symbols
+dotnet_naming_rule.private_constants.style = pascal_case_style
+
+dotnet_naming_symbols.private_constants_symbols.applicable_kinds = field
+dotnet_naming_symbols.private_constants_symbols.applicable_accessibilities = private
+dotnet_naming_symbols.private_constants_symbols.required_modifiers = const
+
+
+# === Rule: Private Static Readonly → PascalCase ===
+dotnet_naming_rule.private_static_readonly.severity = warning
+dotnet_naming_rule.private_static_readonly.symbols = private_static_readonly_symbols
+dotnet_naming_rule.private_static_readonly.style = pascal_case_style
+
+dotnet_naming_symbols.private_static_readonly_symbols.applicable_kinds = field
+dotnet_naming_symbols.private_static_readonly_symbols.applicable_accessibilities = private
+dotnet_naming_symbols.private_static_readonly_symbols.required_modifiers = static, readonly
+
+
+# ##############################################################
+# #
+# #   JetBrains Rider / ReSharper Settings
+# #
+# ##############################################################
+
+# === Brace-Style (für ReSharper-spezifische Formatierung) ===
+resharper_csharp_brace_style = next_line
+
+# Kurze Statements ohne Klammern erlaubt (für 1-Zeiler)
 resharper_csharp_braces_for_foreach = not_required
 resharper_csharp_braces_for_for = not_required
 resharper_csharp_braces_for_while = not_required
-charset=utf-8
-end_of_line=lf
 
-# Microsoft .NET properties
+# === Auto-Detection und Formatter-Tags ===
-csharp_new_line_before_members_in_object_initializers=false
-csharp_preferred_modifier_order=public, private, protected, internal, file, new, static, abstract, virtual, sealed, readonly, override, extern, unsafe, volatile, async, required:suggestion
-csharp_style_prefer_utf8_string_literals=true:suggestion
-csharp_style_var_elsewhere=true:suggestion
-csharp_style_var_for_built_in_types=true:suggestion
-csharp_style_var_when_type_is_apparent=true:suggestion
-dotnet_naming_rule.private_constants_rule.import_to_resharper=True
-dotnet_naming_rule.private_constants_rule.resharper_description=Constant fields (private)
-dotnet_naming_rule.private_constants_rule.resharper_guid=236f7aa5-7b06-43ca-bf2a-9b31bfcff09a
-dotnet_naming_rule.private_constants_rule.severity=warning
-dotnet_naming_rule.private_constants_rule.style=upper_camel_case_style
-dotnet_naming_rule.private_constants_rule.symbols=private_constants_symbols
-dotnet_naming_rule.private_instance_fields_rule.import_to_resharper=True
-dotnet_naming_rule.private_instance_fields_rule.resharper_description=Instance fields (private)
-dotnet_naming_rule.private_instance_fields_rule.resharper_guid=4a98fdf6-7d98-4f5a-afeb-ea44ad98c70c
-dotnet_naming_rule.private_instance_fields_rule.severity=warning
-dotnet_naming_rule.private_instance_fields_rule.style=upper_camel_case_style
-dotnet_naming_rule.private_instance_fields_rule.symbols=private_instance_fields_symbols
-dotnet_naming_rule.private_instance_fields_rule_1.import_to_resharper=True
-dotnet_naming_rule.private_instance_fields_rule_1.resharper_description=Instance fields (private)
-dotnet_naming_rule.private_instance_fields_rule_1.resharper_guid=4a98fdf6-7d98-4f5a-afeb-ea44ad98c70c
-dotnet_naming_rule.private_instance_fields_rule_1.severity=warning
-dotnet_naming_rule.private_instance_fields_rule_1.style=upper_camel_case_style
-dotnet_naming_rule.private_instance_fields_rule_1.symbols=private_instance_fields_symbols_1
-dotnet_naming_rule.private_static_fields_rule.import_to_resharper=True
-dotnet_naming_rule.private_static_fields_rule.resharper_description=Static fields (private)
-dotnet_naming_rule.private_static_fields_rule.resharper_guid=f9fce829-e6f4-4cb2-80f1-5497c44f51df
-dotnet_naming_rule.private_static_fields_rule.severity=warning
-dotnet_naming_rule.private_static_fields_rule.style=upper_camel_case_style
-dotnet_naming_rule.private_static_fields_rule.symbols=private_static_fields_symbols
-dotnet_naming_rule.private_static_readonly_rule.import_to_resharper=True
-dotnet_naming_rule.private_static_readonly_rule.resharper_description=Static readonly fields (private)
-dotnet_naming_rule.private_static_readonly_rule.resharper_guid=15b5b1f1-457c-4ca6-b278-5615aedc07d3
-dotnet_naming_rule.private_static_readonly_rule.severity=warning
-dotnet_naming_rule.private_static_readonly_rule.style=upper_camel_case_style
-dotnet_naming_rule.private_static_readonly_rule.symbols=private_static_readonly_symbols
-dotnet_naming_rule.unity_serialized_field_rule.import_to_resharper=True
-dotnet_naming_rule.unity_serialized_field_rule.resharper_description=Unity serialized field
-dotnet_naming_rule.unity_serialized_field_rule.resharper_guid=5f0fdb63-c892-4d2c-9324-15c80b22a7ef
-dotnet_naming_rule.unity_serialized_field_rule.severity=warning
-dotnet_naming_rule.unity_serialized_field_rule.style=lower_camel_case_style_1
-dotnet_naming_rule.unity_serialized_field_rule.symbols=unity_serialized_field_symbols
-dotnet_naming_rule.unity_serialized_field_rule_1.import_to_resharper=True
-dotnet_naming_rule.unity_serialized_field_rule_1.resharper_description=Unity serialized field
-dotnet_naming_rule.unity_serialized_field_rule_1.resharper_guid=5f0fdb63-c892-4d2c-9324-15c80b22a7ef
-dotnet_naming_rule.unity_serialized_field_rule_1.severity=warning
-dotnet_naming_rule.unity_serialized_field_rule_1.style=lower_camel_case_style_1
-dotnet_naming_rule.unity_serialized_field_rule_1.symbols=unity_serialized_field_symbols_1
-dotnet_naming_style.lower_camel_case_style.capitalization=camel_case
-dotnet_naming_style.lower_camel_case_style.required_prefix=_
-dotnet_naming_style.lower_camel_case_style_1.capitalization=camel_case
-dotnet_naming_style.upper_camel_case_style.capitalization=pascal_case
-dotnet_naming_symbols.private_constants_symbols.applicable_accessibilities=private
-dotnet_naming_symbols.private_constants_symbols.applicable_kinds=field
-dotnet_naming_symbols.private_constants_symbols.required_modifiers=const
-dotnet_naming_symbols.private_constants_symbols.resharper_applicable_kinds=constant_field
-dotnet_naming_symbols.private_constants_symbols.resharper_required_modifiers=any
-dotnet_naming_symbols.private_instance_fields_symbols.applicable_accessibilities=private
-dotnet_naming_symbols.private_instance_fields_symbols.applicable_kinds=field
-dotnet_naming_symbols.private_instance_fields_symbols.resharper_applicable_kinds=field,readonly_field
-dotnet_naming_symbols.private_instance_fields_symbols.resharper_required_modifiers=instance
-dotnet_naming_symbols.private_instance_fields_symbols_1.applicable_accessibilities=private
-dotnet_naming_symbols.private_instance_fields_symbols_1.applicable_kinds=field
-dotnet_naming_symbols.private_instance_fields_symbols_1.resharper_applicable_kinds=field,readonly_field
-dotnet_naming_symbols.private_instance_fields_symbols_1.resharper_required_modifiers=instance
-dotnet_naming_symbols.private_static_fields_symbols.applicable_accessibilities=private
-dotnet_naming_symbols.private_static_fields_symbols.applicable_kinds=field
-dotnet_naming_symbols.private_static_fields_symbols.required_modifiers=static
-dotnet_naming_symbols.private_static_fields_symbols.resharper_applicable_kinds=field
-dotnet_naming_symbols.private_static_fields_symbols.resharper_required_modifiers=static
-dotnet_naming_symbols.private_static_readonly_symbols.applicable_accessibilities=private
-dotnet_naming_symbols.private_static_readonly_symbols.applicable_kinds=field
-dotnet_naming_symbols.private_static_readonly_symbols.required_modifiers=readonly,static
-dotnet_naming_symbols.private_static_readonly_symbols.resharper_applicable_kinds=readonly_field
-dotnet_naming_symbols.private_static_readonly_symbols.resharper_required_modifiers=static
-dotnet_naming_symbols.unity_serialized_field_symbols.applicable_accessibilities=*
-dotnet_naming_symbols.unity_serialized_field_symbols.applicable_kinds=
-dotnet_naming_symbols.unity_serialized_field_symbols.resharper_applicable_kinds=unity_serialised_field
-dotnet_naming_symbols.unity_serialized_field_symbols.resharper_required_modifiers=instance
-dotnet_naming_symbols.unity_serialized_field_symbols_1.applicable_accessibilities=*
-dotnet_naming_symbols.unity_serialized_field_symbols_1.applicable_kinds=
-dotnet_naming_symbols.unity_serialized_field_symbols_1.resharper_applicable_kinds=unity_serialised_field
-dotnet_naming_symbols.unity_serialized_field_symbols_1.resharper_required_modifiers=instance
-dotnet_style_parentheses_in_arithmetic_binary_operators=never_if_unnecessary:none
-dotnet_style_parentheses_in_other_binary_operators=always_for_clarity:none
-dotnet_style_parentheses_in_relational_binary_operators=never_if_unnecessary:none
-dotnet_style_predefined_type_for_locals_parameters_members=true:suggestion
-dotnet_style_predefined_type_for_member_access=true:suggestion
-dotnet_style_qualification_for_event=false:suggestion
-dotnet_style_qualification_for_field=false:suggestion
-dotnet_style_qualification_for_method=false:suggestion
-dotnet_style_qualification_for_property=false:suggestion
-dotnet_style_require_accessibility_modifiers=for_non_interface_members:suggestion
-
-# ReSharper properties
 resharper_autodetect_indent_settings = true
-resharper_cpp_insert_final_newline=true
+resharper_use_indent_from_vs = false
-resharper_csharp_insert_final_newline=false
+
+# Erlaubt @formatter:off / @formatter:on Kommentare im Code
 resharper_formatter_off_tag = @formatter:off
 resharper_formatter_on_tag = @formatter:on
 resharper_formatter_tags_enabled = true
-resharper_fsharp_insert_final_newline=false
-resharper_html_insert_final_newline=false
-resharper_resx_insert_final_newline=false
-resharper_shaderlab_insert_final_newline=false
-resharper_t4_insert_final_newline=false
-resharper_use_indent_from_vs=false
-resharper_vb_insert_final_newline=false
-resharper_xmldoc_insert_final_newline=false
-resharper_xml_insert_final_newline=false
 
-# ReSharper inspection severities
+
+# =====================================================
+# ReSharper Inspection Severities
+# (Hints = blaue Wellen, Warnings = gelb, Errors = rot)
+# =====================================================
+
+# Style-Suggestions: nur als Hint anzeigen
 resharper_arrange_redundant_parentheses_highlighting = hint
 resharper_arrange_this_qualifier_highlighting = hint
 resharper_arrange_type_member_modifiers_highlighting = hint
 resharper_arrange_type_modifiers_highlighting = hint
 resharper_built_in_type_reference_style_for_member_access_highlighting = hint
 resharper_built_in_type_reference_style_highlighting = hint
-resharper_razor_assembly_not_resolved_highlighting=warning
-resharper_redundant_base_qualifier_highlighting=warning
 resharper_suggest_var_or_type_built_in_types_highlighting = hint
 resharper_suggest_var_or_type_elsewhere_highlighting = hint
 resharper_suggest_var_or_type_simple_types_highlighting = hint
-resharper_web_config_module_not_resolved_highlighting=warning
-resharper_web_config_type_not_resolved_highlighting=warning
-resharper_web_config_wrong_module_highlighting=warning
 
-[{*.har,*.jsb2,*.jsb3,*.json,*.jsonc,*.postman_collection,*.postman_collection.json,*.postman_environment,*.postman_environment.json,.babelrc,.eslintrc,.prettierrc,.prettierrc.json,.markdownlint.json,.yamllint.json,.stylelintrc,bowerrc,jest.config}]
+# Echte Probleme: als Warning
-indent_style=space
+resharper_redundant_base_qualifier_highlighting = warning
-indent_size=2
-
-[{*.yaml,*.yml}]
-indent_style=space
-indent_size=2
-
-[*.{appxmanifest,asax,ascx,aspx,axaml,build,c,c++,c++m,cc,ccm,cginc,compute,cp,cpp,cppm,cs,cshtml,cu,cuh,cxx,cxxm,dtd,fs,fsi,fsscript,fsx,fx,fxh,h,hh,hlsl,hlsli,hlslinc,hpp,hxx,inc,inl,ino,ipp,ixx,master,ml,mli,mpp,mq4,mq5,mqh,mxx,nuspec,paml,razor,resw,resx,shader,skin,tpp,usf,ush,uxml,vb,xaml,xamlx,xoml,xsd}]
-indent_style=space
-indent_size=4
-tab_width=4
-[*.md]
-trim_trailing_whitespace=false

.env.example

@@ -1,19 +1,50 @@
-# Local development environment template
+##############################################################
-#
+##
-# Copy this file to `.env` and adjust paths to your setup,
+##   .env.example – Hellion Forge / Hellion Media
-# or run: bash scripts/setup-dev-env.sh
+##
-#
+##   Template für lokale Entwicklungsumgebung.
-# `.env` is gitignored — never commit your local paths.
+##   Kopiere diese Datei nach `.env` und passe die Pfade
-#
+##   an dein Setup an.
-# Activate in shell:
+##
-#   set -a; source .env; set +a
+##   ⚠️  `.env` ist gitignored – niemals lokale Pfade committen!
-#
+##
-# Or use direnv (recommended):
+##############################################################
-#   echo 'dotenv .env' > .envrc && direnv allow
+##
+##   SETUP
+##
+##   1) Manuell:
+##        cp .env.example .env
+##        # Pfade in .env anpassen
+##
+##   2) Automatisch:
+##        bash scripts/setup-dev-env.sh
+##
+##   AKTIVIERUNG IN DER SHELL
+##
+##   Variante A – einmalig pro Shell:
+##        set -a; source .env; set +a
+##
+##   Variante B – mit direnv (empfohlen):
+##        echo 'dotenv .env' > .envrc
+##        direnv allow
+##
+##############################################################
 
-# Path to Dalamud development DLLs (Dalamud.dll, FFXIVClientStructs.dll,
+
-# Lumina.dll, Lumina.Excel.dll). Required for building ChatTwo.Tests project.
+# =====================================================
+# Build & Development Paths
+# =====================================================
+
+# Pfad zu den Dalamud-Development-DLLs:
+#   - Dalamud.dll
+#   - FFXIVClientStructs.dll
+#   - Lumina.dll
+#   - Lumina.Excel.dll
 #
+# Wird zum Bauen des HellionChat.Tests-Projekts benötigt.
+#
+# Standardpfade je nach Plattform:
 #   XIVLauncher Core (Linux):  ~/.xlcore/dalamud/Hooks/dev
 #   XIVLauncher    (Windows):  %AppData%\XIVLauncher\addon\Hooks\dev
+#   XIVLauncher    (macOS):    ~/Library/Application Support/XIV on Mac/dalamud/Hooks/dev
 DALAMUD_HOME=/path/to/dalamud/dev/dlls

.gitattributes

@@ -1,8 +1,178 @@
-# Generated files
+##############################################################
-HellionChat/Resources/Language.*.resx linguist-generated=true
+##
+##   .gitattributes – Hellion Forge / Hellion Media
+##
+##   Setup:        Linux-First Development
+##                 (Hauptentwicklung auf Linux, Target = Dalamud/Windows)
+##   Überarbeitet: Mai 2026
+##
+##   Strategie:
+##     - Default:                Alles LF (Linux-Konvention)
+##     - Windows-Batch-Scripts:  CRLF (technische Pflicht!)
+##     - PowerShell:             CRLF (Sicherheit für Windows PS 5.1)
+##     - Binärdateien:           explizit markiert (gegen Korruption)
+##
+##   Hinweis:
+##     Moderne Visual-Studio- und MSBuild-Versionen kommen
+##     problemlos mit LF in .sln/.csproj klar.
+##     Falls jemals Probleme auftauchen: hier umstellen.
+##
+##############################################################
+
+
+# =====================================================
+# Default: Auto-Detect, alles auf LF normalisieren
+# =====================================================
+
 * text=auto eol=lf
+
+
+# =====================================================
+# Source Code (LF)
+# =====================================================
+
 *.cs            text eol=lf
+*.csx           text eol=lf
+*.vb            text eol=lf
+*.fs            text eol=lf
+*.fsx           text eol=lf
+
+
+# =====================================================
+# Configs & Daten (LF)
+# =====================================================
+
+*.json          text eol=lf
 *.yml           text eol=lf
 *.yaml          text eol=lf
+*.xml           text eol=lf
 *.md            text eol=lf
-*.json text eol=lf
+*.txt           text eol=lf
+*.config        text eol=lf
+*.editorconfig  text eol=lf
+.gitignore      text eol=lf
+.gitattributes  text eol=lf
+.env.example    text eol=lf
+
+
+# =====================================================
+# Visual Studio / MSBuild Project Files (LF)
+# Linux-first: moderne Tools kommen mit LF zurecht
+# =====================================================
+
+*.sln           text eol=lf
+*.csproj        text eol=lf
+*.vbproj        text eol=lf
+*.fsproj        text eol=lf
+*.props         text eol=lf
+*.targets       text eol=lf
+
+
+# =====================================================
+# Resources & Lokalisierung (LF)
+# =====================================================
+
+# Linguist soll generierte Sprachdateien nicht mitzählen
+HellionChat/Resources/Language.*.resx linguist-generated=true
+
+*.resx          text eol=lf
+*.resw          text eol=lf
+
+
+# =====================================================
+# Linux/Mac-Scripts (LF – Pflicht)
+# =====================================================
+
+*.sh            text eol=lf
+*.bash          text eol=lf
+*.zsh           text eol=lf
+
+
+# =====================================================
+# >>> AUSNAHMEN <<<
+# Windows-Scripts brauchen ZWINGEND CRLF.
+# Mit LF werden diese auf Windows nicht ausgeführt!
+# =====================================================
+
+# Batch-Scripts (cmd.exe braucht CRLF)
+*.bat           text eol=crlf
+*.cmd           text eol=crlf
+
+# PowerShell (PS 7+ wäre LF-tolerant,
+# aber Windows PowerShell 5.1 zickt teilweise)
+*.ps1           text eol=crlf
+*.psm1          text eol=crlf
+*.psd1          text eol=crlf
+
+
+# =====================================================
+# Binäre Build-Artefakte
+# =====================================================
+
+*.dll           binary
+*.exe           binary
+*.pdb           binary
+*.so            binary
+*.dylib         binary
+*.nupkg         binary
+*.snupkg        binary
+
+
+# =====================================================
+# Bilder (binary)
+# =====================================================
+
+*.png           binary
+*.jpg           binary
+*.jpeg          binary
+*.gif           binary
+*.ico           binary
+*.bmp           binary
+*.tiff          binary
+*.webp          binary
+
+# SVG ist eigentlich XML – als Text behandeln
+*.svg           text eol=lf
+
+
+# =====================================================
+# Fonts (binary)
+# =====================================================
+
+*.ttf           binary
+*.otf           binary
+*.woff          binary
+*.woff2         binary
+*.eot           binary
+
+
+# =====================================================
+# Archive (binary)
+# =====================================================
+
+*.zip           binary
+*.7z            binary
+*.tar           binary
+*.gz            binary
+*.rar           binary
+
+
+# =====================================================
+# Audio / Video (binary)
+# =====================================================
+
+*.wav           binary
+*.mp3           binary
+*.ogg           binary
+*.mp4           binary
+
+
+# =====================================================
+# FFXIV / Dalamud spezifische Binär-Formate
+# =====================================================
+
+*.tex           binary
+*.pap           binary
+*.avfx          binary
+*.shpk          binary
+*.scd           binary

.gitea/workflows/build.yml

@@ -0,0 +1,53 @@
+name: Build
+
+# Verifies that every push to main and every PR still builds against the
+# current Dalamud staging branch. Does not produce release artefacts; the
+# release workflow handles that on tag.
+#
+# Linux runner: gitea.com Cloud Actions provides ubuntu-latest. The plugin
+# csproj targets net10.0-windows, but `dotnet build` cross-compiles on
+# Linux as long as the Dalamud staging assemblies are present at the
+# expected lookup path ($(HOME)/.xlcore/dalamud/Hooks/dev/, which the
+# Dalamud SDK 15 uses on Linux).
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+# Minimum permissions for a build-only workflow: read the repo, nothing
+# else. Closes the CodeQL "Workflow does not contain permissions" alert
+# and matches the principle-of-least-privilege the security guide
+# recommends for workflows that don't push or create releases.
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build (Release)
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Setup .NET 10
+        uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5
+        with:
+          dotnet-version: 10.0.x
+
+      - name: Download Dalamud staging
+        run: |
+          hooks="$HOME/.xlcore/dalamud/Hooks/dev"
+          mkdir -p "$hooks"
+          curl -fsSL https://goatcorp.github.io/dalamud-distrib/stg/latest.zip -o dalamud.zip
+          unzip -oq dalamud.zip -d "$hooks"
+
+      - name: Restore
+        run: dotnet restore HellionChat/HellionChat.csproj
+
+      - name: Build (Release)
+        run: dotnet build HellionChat/HellionChat.csproj --configuration Release --no-restore

.gitea/workflows/forge-announce.yml

@@ -0,0 +1,255 @@
+name: Forge Announce
+
+# Triggered when a vX.Y.Z tag is pushed. Reads .github/forge-posts/<tag>.md
+# (Frontmatter + DE bullet body) and the matching English block from
+# HellionChat/HellionChat.yaml, builds a Discord-Webhook embed and posts
+# it to the Hellion Forge #changelog channel.
+#
+# Decoupled from release.yml: a fail here does not block the GitHub
+# release, and a fail there does not block the announce. Spec lives in
+# the Vault under "Hellion Chat Forge-Auto-Announce Spec".
+#
+# Security: the only user-controlled inputs that enter run-steps are the
+# tag name and the frontmatter values from a repo-internal markdown file.
+# Tag name is read via env: (TAG_NAME, $env:TAG_NAME) and validated against
+# ^v\d+\.\d+\.\d+$ before any string interpolation. Frontmatter values are
+# parsed by regex with explicit length caps. No webhook event payload data
+# (issue titles, PR bodies, commit messages, etc.) flows into run-steps.
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Existing tag to (re)post, e.g. v1.1.0'
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  announce:
+    name: Post changelog to Hellion Forge
+    runs-on: ubuntu-latest
+    # The DISCORD_FORGE_WEBHOOK secret is set as a repo-level Actions Secret
+    # on Gitea (Settings → Actions → Secrets). Repo-level secrets are in
+    # scope for every job by default, no environment: declaration needed.
+    timeout-minutes: 5
+
+    steps:
+      # On push:tags github.ref points at the tag commit; on workflow_dispatch
+      # the user supplies the tag explicitly. Always check out that tag so
+      # the yaml + forge-posts file are read from the tagged tree, not main.
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: ${{ github.event.inputs.tag || github.ref }}
+
+      # Build embed-payload as a JSON file on disk. PowerShell-Core (pwsh)
+      # ships pre-installed on ubuntu-latest so we get the same scripting
+      # patterns release.yml uses on windows-latest. Tag is read via env: to
+      # treat it as a string variable rather than inline shell text, and
+      # validated against the semver regex before any interpolation.
+      - name: Build embed payload
+        id: build
+        shell: pwsh
+        env:
+          TAG_NAME: ${{ github.event.inputs.tag || github.ref_name }}
+        run: |
+          $tag = $env:TAG_NAME
+          if ($tag -notmatch '^v\d+\.\d+\.\d+$') {
+              throw "V1: Refusing to announce non-semver tag: $tag"
+          }
+          $version = $tag.Substring(1)
+
+          # ---------- Forge-Post-Datei lesen ----------
+          $forgePath = ".github/forge-posts/$tag.md"
+          if (-not (Test-Path $forgePath)) {
+              throw "V2: Forge-Post-Datei für $tag fehlt unter .github/forge-posts/. Datei vor dem Tag anlegen, dann Tag re-pushen oder workflow_dispatch."
+          }
+          $forgeRaw = Get-Content -Path $forgePath -Raw
+
+          # Frontmatter (--- … ---) am Datei-Anfang
+          if ($forgeRaw -notmatch '(?s)\A---\s*\r?\n(.*?)\r?\n---\s*\r?\n(.*)\z') {
+              throw "V3: Frontmatter (---) fehlt oder ist defekt in $forgePath"
+          }
+          $fmText = $matches[1]
+          $deBody = $matches[2].Trim()
+
+          $subtitle = $null
+          $versionsnatur = $null
+          foreach ($line in ($fmText -split "`r?`n")) {
+              if ($line -match '^subtitle:\s*"?([^"]*)"?\s*$')      { $subtitle = $matches[1] }
+              if ($line -match '^versionsnatur:\s*"?([^"]*)"?\s*$') { $versionsnatur = $matches[1] }
+          }
+          if ([string]::IsNullOrWhiteSpace($subtitle))      { throw "V3: Frontmatter-Feld 'subtitle' fehlt in $forgePath" }
+          if ([string]::IsNullOrWhiteSpace($versionsnatur)) { throw "V3: Frontmatter-Feld 'versionsnatur' fehlt in $forgePath" }
+          if ($subtitle.Length      -gt 60) { throw "V4: Frontmatter-Feld 'subtitle' überschreitet Limit ($($subtitle.Length) Char, max 60)" }
+          if ($versionsnatur.Length -gt 40) { throw "V4: Frontmatter-Feld 'versionsnatur' überschreitet Limit ($($versionsnatur.Length) Char, max 40)" }
+          if ([string]::IsNullOrWhiteSpace($deBody)) { throw "V3: DE-Body fehlt in $forgePath" }
+
+          # ---------- EN-Block aus HellionChat.yaml ziehen ----------
+          # 1:1 Pattern aus release.yml — gleicher Header-Marker, gleiches
+          # Trailer-Verhalten. Bei Drift die zwei Workflows synchron halten.
+          $yamlPath = "HellionChat/HellionChat.yaml"
+          $raw = Get-Content -Path $yamlPath -Raw
+          $marker = "changelog: |-"
+          $idx = $raw.IndexOf($marker)
+          if ($idx -lt 0) { throw "V5: changelog-Block nicht gefunden in $yamlPath" }
+          $afterMarker = $raw.Substring($idx + $marker.Length)
+          $changelogBody = (($afterMarker -split "`r?`n") | ForEach-Object {
+              if ($_ -match '^    ') { $_.Substring(4) } else { $_ }
+          }) -join "`n"
+
+          $header = "**v$version "
+          $start = $changelogBody.IndexOf($header)
+          if ($start -lt 0) {
+              throw "V5: No changelog entry for version $version found in $yamlPath. Update the changelog block before tagging."
+          }
+          $rest = $changelogBody.Substring($start)
+          $nextHdr = $rest.IndexOf("`n`n**v", 1)
+          $trailer = $rest.IndexOf("`n`n---")
+          if ($nextHdr -ge 0 -and ($trailer -lt 0 -or $nextHdr -lt $trailer)) {
+              $enBlock = $rest.Substring(0, $nextHdr).TrimEnd()
+          } elseif ($trailer -ge 0) {
+              $enBlock = $rest.Substring(0, $trailer).TrimEnd()
+          } else {
+              $enBlock = $rest.TrimEnd()
+          }
+
+          # ---------- Embed-Felder + Per-Field-Caps (Discord-Hard-Limits) ----------
+          # Discord enforces per-embed-field limits separately from the
+          # combined-total limit. We split the DE and EN blocks into two
+          # embeds that share the same release URL so Discord stitches
+          # them into one visual card. Hard caps per Discord docs:
+          #   description: 4096 per embed
+          #   title:        256 per embed
+          #   footer.text: 2048 per embed
+          #   combined sum across all embeds: 6000
+          $title = "Hellion Chat $version — $subtitle"
+          $deDesc = "**Deutsch**`n`n$deBody"
+          $enDesc = "**English**`n`n$enBlock"
+          $footerText = "Hellion Forge · $versionsnatur"
+          $releaseUrl = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/tag/$tag"
+
+          if ($deDesc.Length -gt 4096) {
+              throw "V6a: DE-Body too long for one embed ($($deDesc.Length) chars, max 4096). Trim .github/forge-posts/$tag.md or post the announcement manually (see forge style §8)."
+          }
+          if ($enDesc.Length -gt 4096) {
+              throw "V6b: EN-Block too long for one embed ($($enDesc.Length) chars, max 4096). Trim the changelog entry in HellionChat/HellionChat.yaml or post manually."
+          }
+          $totalChars = $title.Length + $deDesc.Length + $enDesc.Length + $footerText.Length
+          if ($totalChars -gt 6000) {
+              throw "V6c: Combined embed chars $totalChars exceed Discord's 6000-total limit. Major-Release detected — post manually via Bot/Multi-Embed (see forge style §8)."
+          }
+          Write-Host "Embed-Caps OK: de=$($deDesc.Length)/4096, en=$($enDesc.Length)/4096, total=$totalChars/6000"
+
+          # ---------- Embed-Payload bauen (zwei gestapelte Embeds) ----------
+          # Discord MERGES embeds in one message that share the same `url`
+          # (the image-gallery merge) and then renders only the FIRST embed's
+          # description — every following embed contributes images only. So
+          # only the DE embed carries the release URL; the EN embed stays
+          # url-less, which makes Discord stack both as separate cards with
+          # both descriptions visible. Title sits on the first embed, footer
+          # + timestamp on the last so it still reads as one post.
+          $payload = [ordered]@{
+              username = "Forge Herald"
+              avatar_url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/HellionChat/images/icon.png"
+              content = "<@&1500489631555260446>"
+              allowed_mentions = [ordered]@{
+                  parse = @()
+                  roles = @("1500489631555260446")
+              }
+              embeds = @(
+                  [ordered]@{
+                      title = $title
+                      url = $releaseUrl
+                      color = 12730636
+                      description = $deDesc
+                  },
+                  [ordered]@{
+                      # Deliberately no `url` — a shared url would make Discord
+                      # merge this embed into the first and drop the EN body.
+                      color = 12730636
+                      description = $enDesc
+                      footer = [ordered]@{ text = $footerText }
+                      timestamp = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ss.fffZ")
+                  }
+              )
+          }
+
+          $payloadJson = $payload | ConvertTo-Json -Depth 8 -Compress
+          # Ausgabe-Datei ohne trailing newline für sauberes curl --data-binary @-
+          [System.IO.File]::WriteAllText("$PWD/embed-payload.json", $payloadJson, [System.Text.UTF8Encoding]::new($false))
+
+          Write-Host "Payload size: $($payloadJson.Length) chars"
+          Write-Host "Embed title:  $title"
+          Write-Host "Embed footer: $footerText"
+
+      # POST to the Hellion Forge changelog webhook. curl from PowerShell-Core
+      # so we can pipe the payload via stdin (--data-binary @-) and keep
+      # secrets out of process arg lists. One retry on 5xx, hard fail on 4xx.
+      - name: POST to Hellion Forge webhook
+        shell: pwsh
+        env:
+          DISCORD_FORGE_WEBHOOK: ${{ secrets.DISCORD_FORGE_WEBHOOK }}
+        run: |
+          if ([string]::IsNullOrEmpty($env:DISCORD_FORGE_WEBHOOK)) {
+              throw "V7: DISCORD_FORGE_WEBHOOK secret is empty. Check Settings → Environments → Webhook."
+          }
+
+          $payloadFile = "$PWD/embed-payload.json"
+          if (-not (Test-Path $payloadFile)) {
+              throw "Embed payload file missing — previous step did not produce embed-payload.json"
+          }
+
+          $maxAttempts = 2
+          $attempt = 0
+          while ($attempt -lt $maxAttempts) {
+              $attempt++
+              Write-Host "POST attempt $attempt of $maxAttempts"
+              $tmpResp = "$PWD/.webhook-response"
+              $tmpHeaders = "$PWD/.webhook-headers"
+              # --silent suppresses progress; --show-error prints errors so
+              # the workflow log shows what happened. -w prints HTTP status
+              # to stdout for inspection. -o captures body for diagnosis,
+              # -D captures headers.
+              $rawStatus = Get-Content $payloadFile -Raw |
+                  curl --silent --show-error `
+                       --header 'Content-Type: application/json' `
+                       --data-binary '@-' `
+                       -D $tmpHeaders `
+                       -o $tmpResp `
+                       -w '%{http_code}' `
+                       "$env:DISCORD_FORGE_WEBHOOK"
+              $status = [int]$rawStatus
+              Write-Host "HTTP status: $status"
+
+              if ($status -ge 200 -and $status -lt 300) {
+                  Write-Host "Forge announce POST succeeded."
+                  exit 0
+              }
+
+              $bodySnippet = ""
+              if (Test-Path $tmpResp) {
+                  $bodySnippet = (Get-Content $tmpResp -Raw -ErrorAction SilentlyContinue)
+                  if ($bodySnippet.Length -gt 500) { $bodySnippet = $bodySnippet.Substring(0, 500) + " …" }
+              }
+
+              if ($status -ge 400 -and $status -lt 500) {
+                  # E2: 4xx is permanent — webhook revoked, channel deleted,
+                  # payload malformed. No retry.
+                  throw "E2: Discord-Webhook returned permanent $status. Body: $bodySnippet"
+              }
+
+              # E1: 5xx (or transport-level fail with status 0) — wait + retry once
+              if ($attempt -lt $maxAttempts) {
+                  Write-Host "Transient $status — sleeping 30s before retry."
+                  Start-Sleep -Seconds 30
+              } else {
+                  throw "E1: Discord-Webhook returned transient $status after $maxAttempts attempts. Body: $bodySnippet"
+              }
+          }

.gitea/workflows/release.yml

@@ -0,0 +1,183 @@
+name: Release
+
+# Triggered when a vX.Y.Z tag is pushed. Builds the plugin against the
+# current Dalamud staging branch, locates the latest.zip produced by
+# DalamudPackager and attaches it to the matching Gitea Release.
+#
+# User-controlled inputs touched by this workflow:
+#   - the tag name (filtered by on.tags = v*, validated again at runtime
+#     against ^v\d+\.\d+\.\d+$ before being used in any string)
+# All other values are either repo-controlled (paths under
+# HellionChat/bin/Release derived from find / Get-ChildItem) or pinned
+# URLs to goatcorp / gitea. Nothing from a webhook event payload (issue/PR
+# titles, commit messages, etc.) flows into a run-step.
+#
+# Linux runner: gitea.com Cloud Actions only ships ubuntu-latest. The
+# plugin csproj targets net10.0-windows, `dotnet build` cross-compiles on
+# Linux when the Dalamud staging assemblies sit under $(HOME)/.xlcore/...
+
+on:
+  push:
+    tags:
+      - 'v*'
+  # Manual recovery trigger. Use Gitea's "Run workflow" UI and select the
+  # tag (e.g. v1.4.4) from the Ref dropdown - not main. The Validate tag
+  # ref step below hard-fails if a non-tag ref is selected, because the
+  # release-action reads GITHUB_REF directly and rejects anything that
+  # does not start with refs/tags/.
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: Build and attach release ZIP
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    steps:
+      # release-action@main reads GITHUB_REF directly (its action.yml
+      # does not declare a tag_name input). Validate up-front so manual
+      # dispatches from a branch ref fail loud here instead of burning
+      # a full build before the final step errors out with "ref X is
+      # not a tag".
+      - name: Validate tag ref
+        run: |
+          if [[ "${GITHUB_REF}" != refs/tags/v* ]]; then
+              echo "::error::Release workflow must run on a v*.X.Y tag ref, got ${GITHUB_REF}"
+              echo "::error::Push a tag, or pick the tag (not main) in the workflow_dispatch Ref dropdown."
+              exit 1
+          fi
+
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Setup .NET 10
+        uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5
+        with:
+          dotnet-version: 10.0.x
+
+      - name: Download Dalamud staging
+        run: |
+          hooks="$HOME/.xlcore/dalamud/Hooks/dev"
+          mkdir -p "$hooks"
+          curl -fsSL https://goatcorp.github.io/dalamud-distrib/stg/latest.zip -o dalamud.zip
+          unzip -oq dalamud.zip -d "$hooks"
+
+      - name: Build (Release)
+        run: dotnet build HellionChat/HellionChat.csproj --configuration Release
+
+      - name: Locate latest.zip
+        id: locate
+        run: |
+          zip="$(find HellionChat/bin/Release -name latest.zip -print -quit)"
+          if [ -z "$zip" ]; then
+              echo "latest.zip not found under HellionChat/bin/Release" >&2
+              exit 1
+          fi
+          echo "Found: $zip"
+          echo "path=$zip" >> "$GITHUB_OUTPUT"
+
+      # Build a release body from the matching changelog block in
+      # HellionChat.yaml plus a static install / docs footer. Fails the
+      # workflow if no block exists for the tagged version, which is the
+      # automated counterpart to the "yaml + repo.json + release body
+      # kept in sync" rule.
+      #
+      # GITHUB_REF_NAME is read via env: (not ${{ }} interpolation) so the
+      # tag value is treated as a PowerShell variable, not as inline shell
+      # text. The strict regex below rejects anything that is not a clean
+      # semver tag before it is used to build a string.
+      - name: Generate release body
+        shell: pwsh
+        env:
+          # github.ref_name is the tag because Validate tag ref above
+          # already enforced refs/tags/v*. Read via env: so the value
+          # is a PowerShell variable, not inline shell text, and gets
+          # re-validated against the semver regex below.
+          TAG_NAME: ${{ github.ref_name }}
+        run: |
+          $tag = $env:TAG_NAME
+          if ($tag -notmatch '^v\d+\.\d+\.\d+$') {
+              throw "Refusing to generate release body for non-semver tag: $tag"
+          }
+          $version = $tag.Substring(1)
+
+          $yamlPath = "HellionChat/HellionChat.yaml"
+          $raw = Get-Content -Path $yamlPath -Raw
+
+          $marker = "changelog: |-"
+          $idx = $raw.IndexOf($marker)
+          if ($idx -lt 0) { throw "changelog block not found in $yamlPath" }
+
+          # changelog: is the last top-level key in the manifest, so
+          # everything after the marker is the literal block. Strip the
+          # 4-space yaml indent (prettier convention) from each line.
+          $afterMarker = $raw.Substring($idx + $marker.Length)
+          $changelogBody = (($afterMarker -split "`r?`n") | ForEach-Object {
+              if ($_ -match '^    ') { $_.Substring(4) } else { $_ }
+          }) -join "`n"
+
+          # Subblock convention: "**vX.Y.Z — <subtitle> (<date>)**"
+          # matches verify-changelog-sync.sh and slim-rule grep.
+          $header = "**v$version "
+          $start = $changelogBody.IndexOf($header)
+          if ($start -lt 0) {
+              throw "No changelog entry for version $version found in $yamlPath. Update the changelog block before tagging a release."
+          }
+
+          $rest = $changelogBody.Substring($start)
+          $nextHdr = $rest.IndexOf("`n`n**v", 1)
+          $trailer = $rest.IndexOf("`n`n---")
+
+          if ($nextHdr -ge 0 -and ($trailer -lt 0 -or $nextHdr -lt $trailer)) {
+              $currentBlock = $rest.Substring(0, $nextHdr).TrimEnd()
+          } elseif ($trailer -ge 0) {
+              $currentBlock = $rest.Substring(0, $trailer).TrimEnd()
+          } else {
+              $currentBlock = $rest.TrimEnd()
+          }
+
+          # Static install / docs / licence footer is maintained as a
+          # separate file so the workflow YAML stays clean (no embedded
+          # heredoc that would have to be indented under the run-block).
+          $footerPath = ".github/release-footer.md"
+          if (-not (Test-Path $footerPath)) {
+              throw "Release footer template not found: $footerPath"
+          }
+          $footer = Get-Content -Path $footerPath -Raw
+
+          $body = $currentBlock + "`n" + $footer
+          $body | Out-File -FilePath release-body.md -Encoding utf8 -NoNewline
+
+          Write-Host "Generated release body for $tag :"
+          Write-Host "----------------------------------------"
+          Write-Host $body
+          Write-Host "----------------------------------------"
+
+      # release-action@main only declares files/title/body/pre_release/
+      # draft/api_key/insecure as inputs (see its action.yml). It silently
+      # ignores anything else, including body_path and tag_name. The tag
+      # itself comes from GITHUB_REF, the body must be passed inline via
+      # body:, so we re-emit release-body.md as a step output first.
+      - name: Expose release body for release-action
+        id: body
+        shell: bash
+        run: |
+          {
+              echo 'content<<RELEASE_BODY_EOF'
+              cat release-body.md
+              echo 'RELEASE_BODY_EOF'
+          } >> "$GITHUB_OUTPUT"
+
+      # Gitea-native release action. Creates the release if the tag has no
+      # release yet, or updates the existing one with latest.zip attached
+      # and the generated body. The auto-injected GITHUB_TOKEN on Gitea
+      # Actions has Gitea-API scope and is sufficient for release write.
+      - name: Attach to Gitea release
+        uses: https://gitea.com/actions/release-action@main
+        with:
+          files: ${{ steps.locate.outputs.path }}
+          body: ${{ steps.body.outputs.content }}
+          api_key: ${{ secrets.GITHUB_TOKEN }}

.gitea/workflows/security.yml

@@ -1,20 +1,20 @@
 name: Security
+
+# Ruft den zentralen Scan-Workflow in security-workflows auf
+# (Semgrep SAST + Trivy filesystem scan).
+
 on:
   push:
     branches: [main, master]
   pull_request:
   schedule:
-        - cron: "0 6 * * 1"
+    - cron: '0 6 * * 1'
   workflow_dispatch:
 
 jobs:
   scan:
     uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main
     with:
-            # MessageStore.cs uses string-interpolation in CommandText for table
+      # MessageStore.cs interpoliert SQL-Strings, die plugin-lokal sicher sind;
-            # names and clause-joins that come from internal code constants, not
+      # Semgrep matcht das Pattern, CodeQL mit Datenflussanalyse nicht.
-            # user input. Values are bound via SqlParameter, the SQL surface is
+      semgrep-exclude-rules: 'csharp.lang.security.sqli.csharp-sqli.csharp-sqli'
-            # local-only inside a Dalamud plugin. Semgrep matches the pattern
-            # without dataflow, so it flags those eight call sites; CodeQL
-            # would not. Suppressed for this repo only.
-            semgrep-exclude-rules: "csharp.lang.security.sqli.csharp-sqli.csharp-sqli"

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -16,7 +16,7 @@ body:
     attributes:
       label: HellionChat version
       description: From Settings → Information → Version
-          placeholder: "0.5.4"
+      placeholder: '0.5.4'
     validations:
       required: true
 

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -37,9 +37,9 @@ body:
     attributes:
       label: Scope estimate from your side
       options:
-              - "Small (one tab, one toggle, one filter)"
+        - 'Small (one tab, one toggle, one filter)'
-              - "Medium (a settings section, persistent state, one new file)"
+        - 'Medium (a settings section, persistent state, one new file)'
-              - "Large (architectural, touches the message pipeline or the database)"
+        - 'Large (architectural, touches the message pipeline or the database)'
         - "I don't know"
     validations:
       required: true
@@ -51,7 +51,5 @@ body:
       options:
         - label: I have searched existing issues for similar requests
           required: true
-              - label:
+        - label: I understand HellionChat is a privacy-focused fork and not a feature parity tool with upstream Chat 2
-                    I understand HellionChat is a privacy-focused fork and not a feature parity tool with upstream Chat
-                    2
           required: true

.github/PULL_REQUEST_TEMPLATE.md

@@ -18,7 +18,8 @@ mailto:kontakt@hellion-media.de?subject=%5BHellionChat%20Security%5D
 
 - [ ] Bug fix (non-breaking change that fixes an issue)
 - [ ] New feature (non-breaking change that adds behaviour)
-- [ ] Breaking change (config migration, removed feature, or behaviour change that user-visible defaults rely on)
+- [ ] Breaking change (config migration, removed feature, or behaviour change that user-visible
+      defaults rely on)
 - [ ] Documentation only
 - [ ] Translation update
 - [ ] Build, CI or tooling change
@@ -55,10 +56,11 @@ new commands, new translations, removed behaviour. If none, write
 
 ## Checklist
 
-- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md) and [CODE_OF_CONDUCT.md](../CODE_OF_CONDUCT.md).
+- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md) and
+      [CODE_OF_CONDUCT.md](../CODE_OF_CONDUCT.md).
 - [ ] My change matches the existing code style (`.editorconfig`).
-- [ ] I added or updated tests where the existing test infrastructure made that practical, or I have explained why tests
+- [ ] I added or updated tests where the existing test infrastructure made that practical, or I have
-      are not applicable.
+      explained why tests are not applicable.
 - [ ] I updated the README, in-plugin strings or documentation if my change is user-visible.
 - [ ] I did not include any AI-generated code without disclosing it in the PR description (see
       [AI_DISCLOSURE.md](../docs/AI_DISCLOSURE.md)).

.github/dependabot.yml

@@ -9,14 +9,14 @@ updates:
     schedule:
       interval: weekly
       day: monday
-          time: "07:00"
+      time: '07:00'
       timezone: Europe/Berlin
     open-pull-requests-limit: 5
     labels:
       - dependencies
       - nuget
     commit-message:
-          prefix: "chore(deps)"
+      prefix: 'chore(deps)'
     groups:
       patches:
         update-types:
@@ -32,11 +32,11 @@ updates:
     directory: /
     schedule:
       interval: monthly
-          time: "07:00"
+      time: '07:00'
       timezone: Europe/Berlin
     open-pull-requests-limit: 3
     labels:
       - dependencies
       - github-actions
     commit-message:
-          prefix: "chore(actions)"
+      prefix: 'chore(actions)'

.github/forge-posts/v1.1.0.md

@@ -3,15 +3,16 @@ subtitle: "Theme Foundation"
 versionsnatur: "Major-UI-Cycle"
 ---
 
-- Theme-Engine mit fünf Built-In-Themes: Hellion Arctic (Default), Chat 2 Klassik, Event Horizon, Moonlit Bloom, Mint
+- Theme-Engine mit fünf Built-In-Themes: Hellion Arctic (Default), Chat 2 Klassik, Event Horizon,
-  Grove
+  Moonlit Bloom, Mint Grove
-- Settings öffnet jetzt eine Card-Grid-Übersicht — Klick auf eine Card führt in den Detail-View, Breadcrumb und ESC
+- Settings öffnet jetzt eine Card-Grid-Übersicht — Klick auf eine Card führt in den Detail-View,
-  zurück zur Übersicht
+  Breadcrumb und ESC zurück zur Übersicht
 - Themes-Tab mit Mini-Mockup pro Theme, Live-Switch beim Klick
-- Eigene Themes als JSON in `pluginConfigs/HellionChat/themes/` — Beispiel-Vorlage wird beim ersten Start automatisch
+- Eigene Themes als JSON in `pluginConfigs/HellionChat/themes/` — Beispiel-Vorlage wird beim ersten
-  abgelegt
+  Start automatisch abgelegt
-- Optional pro Theme eigene Chat-Channel-Farben mit Übernehmen/Behalten-Banner — niemals automatisch überschrieben
+- Optional pro Theme eigene Chat-Channel-Farben mit Übernehmen/Behalten-Banner — niemals automatisch
+  überschrieben
 - Plugin-Icon zum Hellion-Forge-Hammer gewechselt
-- Migration v13 → v14: alle User landen auf Hellion Arctic. Wer den Upstream-Look will, wählt Chat 2 Klassik in Settings
+- Migration v13 → v14: alle User landen auf Hellion Arctic. Wer den Upstream-Look will, wählt Chat 2
-  → Themes
+  Klassik in Settings → Themes
 - Anleitung zum Schreiben eigener Themes: `docs/THEME-AUTHORING.md`

.github/forge-posts/v1.2.0.md

@@ -3,22 +3,22 @@ subtitle: "Layout Refresh"
 versionsnatur: "Major-UI-Cycle"
 ---
 
-- Sidebar im neuen Look: fix 44 px breit, nur Icons, Tab-Name als Tooltip beim Hover, vertikale Akzent-Pill markiert den
+- Sidebar im neuen Look: fix 44 px breit, nur Icons, Tab-Name als Tooltip beim Hover, vertikale
-  aktiven Tab
+  Akzent-Pill markiert den aktiven Tab
 - Top-Tabs bekommen eine Akzent-Underline statt Background-Fill am aktiven Tab
 - Pro Tab eigenes Icon wählbar in Einstellungen → Tabs (FontAwesome-Pool)
 - Auto-Tell-Tabs sind jetzt visuell unterscheidbar: jeder Tell-Partner bekommt ein eigenes Icon
-  (envelope/star/heart/bell/bookmark/flag/fire) plus eigene Farbe aus 12-Farb-Palette — 84 Kombinationen, gleicher
+  (envelope/star/heart/bell/bookmark/flag/fire) plus eigene Farbe aus 12-Farb-Palette — 84
-  Partner ergibt konsistent dieselbe
+  Kombinationen, gleicher Partner ergibt konsistent dieselbe
-- Pulsierender roter Dot oben rechts am Sidebar-Icon zeigt ungelesene Nachrichten an. Sanft, 2-Sekunden-Cycle,
+- Pulsierender roter Dot oben rechts am Sidebar-Icon zeigt ungelesene Nachrichten an. Sanft,
-  deaktivierbar über `Configuration.ReduceMotion` (UI-Toggle in v1.3.0)
+  2-Sekunden-Cycle, deaktivierbar über `Configuration.ReduceMotion` (UI-Toggle in v1.3.0)
-- Bottom-Status-Bar (22 px) mit fünf Live-Slots: aktiver Channel + Color-Dot, Privacy-Badge, Tab/Message-Counter,
+- Bottom-Status-Bar (22 px) mit fünf Live-Slots: aktiver Channel + Color-Dot, Privacy-Badge,
-  Auto-Tell-Counter, Plugin-Version. Update 1×/Sek
+  Tab/Message-Counter, Auto-Tell-Counter, Plugin-Version. Update 1×/Sek
-- Card-Rows als Default-Message-Render: Sender-Header in Channel-Farbe, Body neue Zeile, dezenter Trenner.
+- Card-Rows als Default-Message-Render: Sender-Header in Channel-Farbe, Body neue Zeile, dezenter
-  `Compact Density`-Toggle in Aussehen schaltet zurück auf den Einzeiler
+  Trenner. `Compact Density`-Toggle in Aussehen schaltet zurück auf den Einzeiler
-- Bug-Fix: Settings speichern löscht den Chat-Verlauf nicht mehr. Refilter läuft jetzt nur wenn Filter-relevante
+- Bug-Fix: Settings speichern löscht den Chat-Verlauf nicht mehr. Refilter läuft jetzt nur wenn
-  Settings geändert wurden — Cosmetic-Änderungen lassen den Chat unverändert. Persistente und Auto-Tell-Tabs überleben
+  Filter-relevante Settings geändert wurden — Cosmetic-Änderungen lassen den Chat unverändert.
-  beide
+  Persistente und Auto-Tell-Tabs überleben beide
 - Bug-Fix: Hellion-Schrift (Exo 2) blockt die Schriftgröße nicht mehr — 4K-User können hochskalieren
 - Migration v14 → v15: alte Theme-Felder entfernt, alle anderen Settings bleiben
 

.github/forge-posts/v1.2.1.md

@@ -3,27 +3,31 @@ subtitle: "Settings Cleanup"
 versionsnatur: "UX-Polish-Cycle"
 ---
 
-- Settings-Übersicht thematisch re-sortiert: zusammenhängende Optionen wohnen jetzt zusammen, jede Card hat einen kurzen
+- Settings-Übersicht thematisch re-sortiert: zusammenhängende Optionen wohnen jetzt zusammen, jede
-  Untertitel — kein Raten mehr wo eine Setting steckt
+  Card hat einen kurzen Untertitel — kein Raten mehr wo eine Setting steckt
-- Drei neue Cards: **Theme & Layout** (Theme-Picker, Fenster-Style, Zeitstempel-Style), **Schriften & Farben**
+- Drei neue Cards: **Theme & Layout** (Theme-Picker, Fenster-Style, Zeitstempel-Style), **Schriften
-  (Schriftart, Schriftgröße, Chat-Farben pro Channel), **Daten-Verwaltung** (Aufbewahrung, Cleanup, Export, DB-Viewer,
+  & Farben** (Schriftart, Schriftgröße, Chat-Farben pro Channel), **Daten-Verwaltung**
-  Advanced-Tools — vorher zwischen Datenschutz und Datenbank verteilt)
+  (Aufbewahrung, Cleanup, Export, DB-Viewer, Advanced-Tools — vorher zwischen Datenschutz und
+  Datenbank verteilt)
 - Datenschutz fokussiert sich jetzt auf eine Aufgabe: den Privacy-Filter
 - Der Auto-Tell-Tabs-History-Preload-Slider ist von Datenschutz nach Chat → Auto-Tell-Tabs umgezogen
 - KeybindMode wohnt jetzt unter Allgemein → Eingabe statt unter Sprache
-- Vier tote Schema-Felder entfernt (alle obsolet seit der Theme-Engine in v1.1.0): `Stilüberschreiben`-Toggle,
+- Vier tote Schema-Felder entfernt (alle obsolet seit der Theme-Engine in v1.1.0):
-  `Stilname`-Auswahl, alter `WindowAlpha`-Slider, ungenutztes `ShowThemeQuickPicker`
+  `Stilüberschreiben`-Toggle, `Stilname`-Auswahl, alter `WindowAlpha`-Slider, ungenutztes
+  `ShowThemeQuickPicker`
 - Migration v15 → v16: alter `WindowAlpha`-Wert wird automatisch nach
-  `Theme & Layout → Fenster-Style → Fenster-Transparenz` gemappt (nur wenn der Slider noch auf Default 0.85 stand, sonst
+  `Theme & Layout → Fenster-Style → Fenster-Transparenz` gemappt (nur wenn der Slider noch auf
-  gewinnt der User-Wert). Backup der Pre-v16-Config liegt unter `pluginConfigs/HellionChat.json.pre-v16-backup`. User
+  Default 0.85 stand, sonst gewinnt der User-Wert). Backup der Pre-v16-Config liegt unter
-  die `Stilüberschreiben` aktiv hatten sehen einen einmaligen Hinweis-Toast
+  `pluginConfigs/HellionChat.json.pre-v16-backup`. User die `Stilüberschreiben` aktiv hatten sehen
-- UX-Default-Bumps für Bestand-User mit Default-Werten: Card-Rows-Layout zurück auf Single-Line, NG+ standardmäßig
+  einen einmaligen Hinweis-Toast
-  hidden, gleiche Zeitstempel werden zusammengefasst, MaxLinesToRender auf konservativere 2500
+- UX-Default-Bumps für Bestand-User mit Default-Werten: Card-Rows-Layout zurück auf Single-Line, NG+
-- Frische Installs starten mit dem Hellion-Brand-Chat-Color-Preset out-of-the-box (der First-Run-Wizard hat keine
+  standardmäßig hidden, gleiche Zeitstempel werden zusammengefasst, MaxLinesToRender auf
-  Preset-Wahl)
+  konservativere 2500
-- Hinweis zum Window-Transparenz-Slider in der Beschreibung: Dalamud's per-Window-Hamburger-Menü (oben rechts in der
+- Frische Installs starten mit dem Hellion-Brand-Chat-Color-Preset out-of-the-box (der
-  Titelleiste) bietet eigene Overrides für Deckkraft, Hintergrund-Blur, Anpinnen und Durchklick — die haben Vorrang über
+  First-Run-Wizard hat keine Preset-Wahl)
-  unseren Slider für das jeweilige Fenster
+- Hinweis zum Window-Transparenz-Slider in der Beschreibung: Dalamud's per-Window-Hamburger-Menü
+  (oben rechts in der Titelleiste) bietet eigene Overrides für Deckkraft, Hintergrund-Blur, Anpinnen
+  und Durchklick — die haben Vorrang über unseren Slider für das jeweilige Fenster
 
-Pure UX-Polish, keine neuen Features. Nächster Cycle (v1.3.0): Animation-Polish (Lerps, Theme-Crossfade, Quick-Picker)
+Pure UX-Polish, keine neuen Features. Nächster Cycle (v1.3.0): Animation-Polish (Lerps,
-wie ursprünglich geplant.
+Theme-Crossfade, Quick-Picker) wie ursprünglich geplant.

.github/forge-posts/v1.2.3.md

@@ -3,21 +3,23 @@ subtitle: "Theme Expansion"
 versionsnatur: "Theme-Pack-Patch"
 ---
 
-- Vier neue Built-in-Themes verlängern die Auswahl im Picker — keine Engine-Änderung, keine Settings angefasst, einfach
+- Vier neue Built-in-Themes verlängern die Auswahl im Picker — keine Engine-Änderung, keine Settings
-  mehr Farboptionen
+  angefasst, einfach mehr Farboptionen
-- **Night Blue** — Royal Blue auf tiefem Marineblau. Kühles Tech-Dashboard-Mood, bewusst neutral gehalten damit es sich
+- **Night Blue** — Royal Blue auf tiefem Marineblau. Kühles Tech-Dashboard-Mood, bewusst neutral
-  nicht mit den Brand-Themes beißt
+  gehalten damit es sich nicht mit den Brand-Themes beißt
-- **Indigo Violet** — Royal Violet auf Deep Indigo mit Türkis-Mint-Counter für Aurora-Glitter-Stimmung. Schwester von
+- **Indigo Violet** — Royal Violet auf Deep Indigo mit Türkis-Mint-Counter für
-  Event Horizon, aber dunkler und dichter; der Türkis-Akzent hält die beiden klar auseinander
+  Aurora-Glitter-Stimmung. Schwester von Event Horizon, aber dunkler und dichter; der Türkis-Akzent
-- **Forge Merchantman** — Patina-Bronze auf Workshop-Slate mit warmem Bernstein-Counter. Hellion Forge bekommt ein
+  hält die beiden klar auseinander
-  eigenes Theme im Plugin selbst — Schwester von Hellion Arctic, aber grüner und wärmer statt kaltem Cyan
+- **Forge Merchantman** — Patina-Bronze auf Workshop-Slate mit warmem Bernstein-Counter. Hellion
+  Forge bekommt ein eigenes Theme im Plugin selbst — Schwester von Hellion Arctic, aber grüner und
+  wärmer statt kaltem Cyan
 - **Hellion Spectrum** — Farbenblind-sichere Channel-Farben (Deuteranopie/Protanopie) auf Basis der
-  Wong/Okabe-Ito-Palette. Channel-Identität bleibt erhalten (Tell pink, Yell gelb, Shout orange, Party blau, FC grün);
+  Wong/Okabe-Ito-Palette. Channel-Identität bleibt erhalten (Tell pink, Yell gelb, Shout orange,
-  die Töne sind so gewählt dass jeder Channel auch unter Rot-Grün-Schwäche klar trennbar bleibt. Deckt rund 99 % aller
+  Party blau, FC grün); die Töne sind so gewählt dass jeder Channel auch unter Rot-Grün-Schwäche
-  CVD-Fälle ab
+  klar trennbar bleibt. Deckt rund 99 % aller CVD-Fälle ab
-- Kein Schema-Bump, keine Migration. Das Default-Theme bleibt **Hellion Arctic**, eigene Custom-Themes laufen
+- Kein Schema-Bump, keine Migration. Das Default-Theme bleibt **Hellion Arctic**, eigene
-  unverändert weiter
+  Custom-Themes laufen unverändert weiter
 - Theme-Katalog wächst damit von fünf auf neun Built-ins
 
-Reines Theme-Pack zwischen v1.2.1 und dem nächsten Polish-Cycle. Eine Tritan-Variante (Spectrum für Blau-Gelb-Schwäche)
+Reines Theme-Pack zwischen v1.2.1 und dem nächsten Polish-Cycle. Eine Tritan-Variante (Spectrum für
-kann später nachgeliefert werden, falls Bedarf kommt.
+Blau-Gelb-Schwäche) kann später nachgeliefert werden, falls Bedarf kommt.

.github/forge-posts/v1.3.0.md

@@ -4,15 +4,17 @@ versionsnatur: "Plugin-Integration-Cycle 1"
 ---
 
 - Erste Plugin-Integration eingebaut, Cycle 1 von 6 auf der Roadmap
-- **Honorific-Custom-Titles im Chat-Header** — der Titel den du in Honorific gesetzt hast erscheint jetzt links über dem
+- **Honorific-Custom-Titles im Chat-Header** — der Titel den du in Honorific gesetzt hast erscheint
-  Message-Log mit der von dir gewählten Farbe, Auto-Hide wenn Honorific nicht installiert ist oder kein Custom-Titel
+  jetzt links über dem Message-Log mit der von dir gewählten Farbe, Auto-Hide wenn Honorific nicht
-  aktiv ist
+  installiert ist oder kein Custom-Titel aktiv ist
-- **Krone-Icon plus Tooltip** vor dem Titel-Text, damit klar ist woher der Slot kommt ohne dass der User raten muss
+- **Krone-Icon plus Tooltip** vor dem Titel-Text, damit klar ist woher der Slot kommt ohne dass der
-- **Neuer Integrations-Settings-Tab** mit Status-Indikator (erkannt, nicht installiert, inkompatibel) und Toggle. Plus
+  User raten muss
-  Vorschau-Block der die fünf weiteren geplanten Cycles ankündigt: Kontextmenü-Aktionen, Smart Notifications
+- **Neuer Integrations-Settings-Tab** mit Status-Indikator (erkannt, nicht installiert,
-  (NotificationMaster), RP-Status-Block (Moodles und LightlessClient), ExtraChat-Channels, Quick-DM-Button
+  inkompatibel) und Toggle. Plus Vorschau-Block der die fünf weiteren geplanten Cycles ankündigt:
-  (XIVInstantMessenger)
+  Kontextmenü-Aktionen, Smart Notifications (NotificationMaster), RP-Status-Block (Moodles und
-- **Maintainer-Attribution** im Tab als Höflichkeits-Geste, zwei Buttons zum Honorific-Repo und zum Caraxi-Profil. Plus
+  LightlessClient), ExtraChat-Channels, Quick-DM-Button (XIVInstantMessenger)
-  Hellion-Forge-Discord-Button für Community-Vorschläge zu künftigen Integrationen
+- **Maintainer-Attribution** im Tab als Höflichkeits-Geste, zwei Buttons zum Honorific-Repo und zum
-- Keine Migration, keine Schema-Änderung. Wer Honorific eh schon nutzt sieht den Custom-Titel automatisch sobald
+  Caraxi-Profil. Plus Hellion-Forge-Discord-Button für Community-Vorschläge zu künftigen
-  HellionChat aktualisiert
+  Integrationen
+- Keine Migration, keine Schema-Änderung. Wer Honorific eh schon nutzt sieht den Custom-Titel
+  automatisch sobald HellionChat aktualisiert

.github/forge-posts/v1.4.0.md

@@ -5,19 +5,20 @@ versionsnatur: Stability-Hotfix
 
 **Hellion Chat 1.4.0 — Critical Lifecycle Fixes**
 
-Erster Sub-Patch der v1.4.x Polish-Sweep-Serie. Sieben bekannte Lifecycle- und Race-Bugs aus den Audit-Pässen
+Erster Sub-Patch der v1.4.x Polish-Sweep-Serie. Sieben bekannte Lifecycle- und Race-Bugs aus den
-abgearbeitet, bevor Performance- und Architektur-Refactors draufkommen.
+Audit-Pässen abgearbeitet, bevor Performance- und Architektur-Refactors draufkommen.
 
-- **SQLite-Dispose** lehnt sich nicht mehr an GC-Druck zur Datei-Freigabe an, Pooling=false auf der Connection macht den
+- **SQLite-Dispose** lehnt sich nicht mehr an GC-Druck zur Datei-Freigabe an, Pooling=false auf der
-  manuellen GC.Collect überflüssig
+  Connection macht den manuellen GC.Collect überflüssig
-- **Worker-Threads** (PendingMessage, RetentionSweep) sind jetzt explizit IsBackground=true, das Plugin-Domain kann
+- **Worker-Threads** (PendingMessage, RetentionSweep) sind jetzt explizit IsBackground=true, das
-  sauber unloaden bei XIVLauncher-Reload ohne darauf zu warten
+  Plugin-Domain kann sauber unloaden bei XIVLauncher-Reload ohne darauf zu warten
-- **EmoteCache-Loader** von async-void auf async-Task mit shared Task-Tracker, drain-on-Dispose. Kein Schreib-Risiko
+- **EmoteCache-Loader** von async-void auf async-Task mit shared Task-Tracker, drain-on-Dispose.
-  mehr auf disposed EmoteImages-Einträge nach Plugin-Reload
+  Kein Schreib-Risiko mehr auf disposed EmoteImages-Einträge nach Plugin-Reload
 - **DisposeAsync-Timeout** (10s) warnt jetzt laut statt silent zu failen
-- **Plugin-Dispose** flushed pending DeferredSave bevor Services abgebaut werden, Settings-Änderungen aus den letzten
+- **Plugin-Dispose** flushed pending DeferredSave bevor Services abgebaut werden,
-  Frames vor Disable überleben jetzt zuverlässig
+  Settings-Änderungen aus den letzten Frames vor Disable überleben jetzt zuverlässig
-- **v13→v14 Config-Migration** liest pre-v13-Backup und überträgt HellionThemeWindowOpacity in das neue
+- **v13→v14 Config-Migration** liest pre-v13-Backup und überträgt HellionThemeWindowOpacity in das
-  WindowOpacity-Feld statt auf 0.85 zurückzufallen
+  neue WindowOpacity-Feld statt auf 0.85 zurückzufallen
 
-Keine Schema-Bumps, keine User-sichtbaren Funktions-Änderungen außer dass Reload und Shutdown spürbar sauberer laufen.
+Keine Schema-Bumps, keine User-sichtbaren Funktions-Änderungen außer dass Reload und Shutdown
+spürbar sauberer laufen.

.github/forge-posts/v1.4.1.md

@@ -5,23 +5,25 @@ versionsnatur: Performance-Patch
 
 **Hellion Chat 1.4.1 — Theme Engine Performance**
 
-Zweiter Sub-Patch der v1.4.x Polish-Sweep-Serie. Heap-Pressure aus dem Theme-Engine-Render-Pfad eliminiert,
+Zweiter Sub-Patch der v1.4.x Polish-Sweep-Serie. Heap-Pressure aus dem Theme-Engine-Render-Pfad
-Custom-Theme- Hot-Reload überlebt transiente File-Locks beim Editor-Save. Plus zehnter Built-In und überarbeitete
+eliminiert, Custom-Theme- Hot-Reload überlebt transiente File-Locks beim Editor-Save. Plus zehnter
-Author-Credits.
+Built-In und überarbeitete Author-Credits.
 
-- **ABGR-Cache auf den Theme-Records.** Beim Theme-Register (Built-In oder Custom) werden alle Color-Slots einmalig in
+- **ABGR-Cache auf den Theme-Records.** Beim Theme-Register (Built-In oder Custom) werden alle
-  ABGR-Pack-Form vor-konvertiert. HellionStyle.PushGlobal liest aus dem Cache statt pro Slot pro Frame durch
+  Color-Slots einmalig in ABGR-Pack-Form vor-konvertiert. HellionStyle.PushGlobal liest aus dem
-  ColourUtil.RgbaToAbgr zu jagen. Real gemessene Frame-Time-Recovery: **~13 %** in typischer Render-Szene
+  Cache statt pro Slot pro Frame durch ColourUtil.RgbaToAbgr zu jagen. Real gemessene
-  (Plan-Erwartung war 2-6 % konservativ, real ~10-15 %)
+  Frame-Time-Recovery: **~13 %** in typischer Render-Szene (Plan-Erwartung war 2-6 % konservativ,
-- **Custom-Theme File-Lock-Härtung.** Wenn der User ein Theme-JSON gerade speichert während HellionChat reloaden will,
+  real ~10-15 %)
-  fängt der Loader jetzt explizit Sharing-Violation und Lock-Violation ab. Last-Known-Good-Snapshot bleibt im Picker,
+- **Custom-Theme File-Lock-Härtung.** Wenn der User ein Theme-JSON gerade speichert während
-  beim nächsten Tick wird automatisch retry'd — vorher fiel das Theme aus der Liste bis zum Plugin-Reload
+  HellionChat reloaden will, fängt der Loader jetzt explizit Sharing-Violation und Lock-Violation
-- **Defensive Cache-Refresh beim Theme-Switch.** Falls ein Theme auf einem alten Pfad ohne Cache-Fill in den Speicher
+  ab. Last-Known-Good-Snapshot bleibt im Picker, beim nächsten Tick wird automatisch retry'd —
-  gekommen ist, holt Switch() das beim Anwenden nach
+  vorher fiel das Theme aus der Liste bis zum Plugin-Reload
-- **Synthwave Sunset als zehnter Built-In.** Hot Magenta + Cyan auf Mitternachts-Violett, 80s-Neon-Grid-Vibes für
+- **Defensive Cache-Refresh beim Theme-Switch.** Falls ein Theme auf einem alten Pfad ohne
-  Late-Night-Raids
+  Cache-Fill in den Speicher gekommen ist, holt Switch() das beim Anwenden nach
-- **Author-Credits konsolidiert.** Brand-Themes laufen jetzt unter „Hellion Forge". Mint Grove und Forge Merchantman
+- **Synthwave Sunset als zehnter Built-In.** Hot Magenta + Cyan auf Mitternachts-Violett,
-  werden Carla Beleandis als Community-Geste zugeschrieben.
+  80s-Neon-Grid-Vibes für Late-Night-Raids
+- **Author-Credits konsolidiert.** Brand-Themes laufen jetzt unter „Hellion Forge". Mint Grove und
+  Forge Merchantman werden Carla Beleandis als Community-Geste zugeschrieben.
 
-Keine Schema-Bumps, keine User-sichtbaren Funktions- Änderungen außer dass die Frames in Theme-getrieben rendernden
+Keine Schema-Bumps, keine User-sichtbaren Funktions- Änderungen außer dass die Frames in
-Szenen merklich glatter laufen und ein neues Theme im Picker steht.
+Theme-getrieben rendernden Szenen merklich glatter laufen und ein neues Theme im Picker steht.

.github/forge-posts/v1.4.10.md

@@ -0,0 +1,27 @@
+---
+subtitle: Symbol-Picker und Tell-History Fix
+versionsnatur: Feature-Patch + Hotfix
+---
+
+- Symbol-Picker im Chat-Eingang: ein kleiner Smile-Button links neben dem Kanal-Indikator öffnet ein
+  Popup mit zwei Tabs. Der erste listet alle 161 FFXIV-PUA-Glyphen (Dalamuds SeIconChar); der zweite
+  trägt 97 verifizierte BMP-Symbole (Latin-Marken, Währungen, das ganze griechische Alphabet,
+  Geometrie, Spielkarten, Noten) — jedes davon über `/echo` und `/say` in einer vierrundigen
+  Whitelist-Probe durchgereicht, damit der Channel-Render dem entspricht, was der Picker anzeigt.
+  Klick fügt das Symbol an der Cursor-Position ein, Multi-Insert lässt das Popup offen, eine
+  Recent-Used-Leiste zeigt die letzten sechzehn Picks über beide Tabs. Toggle in Settings → Chat →
+  Nachrichten-Verhalten, Default an.
+- Verlauf in angepinnten Tell-Tabs lädt wieder vollständig: ein versteckter 500-Zeilen-Scan-Cap in
+  PreloadHistory hat das User-Setting `AutoTellTabsHistoryPreload` überschrieben, wodurch
+  weniger-frequente Tell-Partner ihren Backlog verloren haben sobald die Scan-Schicht mit anderen
+  Chat-Partnern voll lief. Cap ist raus, der Index auf `(Receiver, Date)` hält die Query schnell.
+- Slash-Command-Teardown: /hellion, /hellionView, /hellionDebugger (und im Debug-Build
+  /hellionSeString) sind als private Felder gecached. Plugin-Dispose detached die echte
+  Registrierung, statt mit identischen Args neu zu registrieren — schließt eine latente
+  Wartungs-Falle aus v1.4.9.
+- v1.4.x-Polish-Sweep endet hier. Der ImGuiListClipper-Refactor von der v1.4.10-Reserve-Liste wurde
+  gecancelt, nachdem der Cross- Plattform-Smoke gezeigt hat dass das Scroll-Gummi ein Wine/Linux-
+  Quirk ist — Windows-User haben es nie gesehen. Spike dafür kommt in einem späteren Patch. Nächster
+  Major-Cycle ist v1.5.0 mit der DI-Container-Adoption (`Microsoft.Extensions.Hosting` +
+  `ILogger<T>`) nach dem Lightless-Vorbild.
+- Migration v17 unverändert: kein Schema-Bump, kein Config-Migrations-Aufwand.

.github/forge-posts/v1.4.2.md

@@ -5,25 +5,27 @@ versionsnatur: Performance-Patch
 
 **Hellion Chat 1.4.2 — ChatLog Frame-Hot-Path**
 
-Dritter Sub-Patch der v1.4.x Polish-Sweep-Serie. Drei Per-Frame-Allokations-Quellen aus dem ChatLogWindow-Render- Pfad
+Dritter Sub-Patch der v1.4.x Polish-Sweep-Serie. Drei Per-Frame-Allokations-Quellen aus dem
-und der Settings-StatusBar eliminiert.
+ChatLogWindow-Render- Pfad und der Settings-StatusBar eliminiert.
 
-- **Card-Mode-Border-Loop entlastet.** DrawMessages hebt Theme, DrawList, Window-Left, Window-Right und die ABGR-
+- **Card-Mode-Border-Loop entlastet.** DrawMessages hebt Theme, DrawList, Window-Left, Window-Right
-  Border-Color einmalig vor den Per-Message-Loop. Bei 100 sichtbaren Messages sind das gut 500 redundante P/Invokes und
+  und die ABGR- Border-Color einmalig vor den Per-Message-Loop. Bei 100 sichtbaren Messages sind das
-  Property-Reads, die der Hoist eliminiert. Pop-Out- Heavy-Setups (mehrere parallele Chat-Windows) profitieren
+  gut 500 redundante P/Invokes und Property-Reads, die der Hoist eliminiert. Pop-Out- Heavy-Setups
-  proportional, weil der Hoist pro DrawMessages-Call greift, also pro Window
+  (mehrere parallele Chat-Windows) profitieren proportional, weil der Hoist pro DrawMessages-Call
-- **Auto-Tell Tab-Tint und Icon gecached.** Die Hash-Color- Berechnung für Auto-Tell-Tabs lief pro Tab pro Frame, mit
+  greift, also pro Window
-  zwei String-Allokationen pro Tab (eine für Tint-Hash, eine für Icon-Hash). Der neue TabTintCache liest pre-computed
+- **Auto-Tell Tab-Tint und Icon gecached.** Die Hash-Color- Berechnung für Auto-Tell-Tabs lief pro
-  Werte aus dem Tab und rechnet nur neu wenn das Tell-Target drifted. Beide Caches haben separate Validation-Keys, also
+  Tab pro Frame, mit zwei String-Allokationen pro Tab (eine für Tint-Hash, eine für Icon-Hash). Der
-  keine Cross-Invalidation zwischen Tint- und Icon-Pfad. AutoTellTabTint selbst bleibt pure Hash-Helper, weiterhin ohne
+  neue TabTintCache liest pre-computed Werte aus dem Tab und rechnet nur neu wenn das Tell-Target
-  Tab-Awareness
+  drifted. Beide Caches haben separate Validation-Keys, also keine Cross-Invalidation zwischen Tint-
-- **StatusBar-Aggregation hinter Cache-Gate.** Die Status- Leiste am unteren Window-Rand summiert die Tab-Message-
+  und Icon-Pfad. AutoTellTabTint selbst bleibt pure Hash-Helper, weiterhin ohne Tab-Awareness
-  Counts und zählt die Auto-Tell-Tabs pro Frame. Der Cache- Gate (1 Sekunde) lag bisher hinter den LINQ-Pfaden, also
+- **StatusBar-Aggregation hinter Cache-Gate.** Die Status- Leiste am unteren Window-Rand summiert
-  liefen Sum und Count trotzdem pro Frame. Jetzt vor dem Gate, plus die LINQ-Pfade durch eine Single-Pass-Foreach
+  die Tab-Message- Counts und zählt die Auto-Tell-Tabs pro Frame. Der Cache- Gate (1 Sekunde) lag
-  ersetzt. Die Aggregation läuft auf etwa 1 % der Frames
+  bisher hinter den LINQ-Pfaden, also liefen Sum und Count trotzdem pro Frame. Jetzt vor dem Gate,
+  plus die LINQ-Pfade durch eine Single-Pass-Foreach ersetzt. Die Aggregation läuft auf etwa 1 % der
+  Frames
 
-Realistische Frame-Time-Recovery: 2-5 % in typischen Szenen, Pop-Out-Heavy-Setups potenziell mehr durch die Card-Border-
+Realistische Frame-Time-Recovery: 2-5 % in typischen Szenen, Pop-Out-Heavy-Setups potenziell mehr
-Multiplikation pro Window.
+durch die Card-Border- Multiplikation pro Window.
 
-Keine Schema-Bumps, keine User-sichtbaren Funktions- Änderungen außer dass die Frames im Chat-Log und in der
+Keine Schema-Bumps, keine User-sichtbaren Funktions- Änderungen außer dass die Frames im Chat-Log
-Settings-Statusleiste merklich glatter laufen.
+und in der Settings-Statusleiste merklich glatter laufen.

.github/forge-posts/v1.4.3.md

@@ -5,25 +5,29 @@ versionsnatur: Architecture-Refactor
 
 **Hellion Chat 1.4.3 — Plugin-Load Async-Init + Repo-Cutover**
 
-Vierter Sub-Patch der v1.4.x Polish-Sweep-Serie. Plugin- Lifecycle auf Dalamud's `IAsyncDalamudPlugin`-API migriert und
+Vierter Sub-Patch der v1.4.x Polish-Sweep-Serie. Plugin- Lifecycle auf Dalamud's
-das Custom-Repo zieht von GitHub auf Gitea um.
+`IAsyncDalamudPlugin`-API migriert und das Custom-Repo zieht von GitHub auf Gitea um.
 
-- **Async-Plugin-Architektur.** Konstruktor übernimmt nur noch die Bootstrap-Essentials (Config-Load, Language-Init,
+- **Async-Plugin-Architektur.** Konstruktor übernimmt nur noch die Bootstrap-Essentials
-  Conflict-Detection). Migrationen, Service-Allokationen, Window-Konstruktion und Hook-Subscription wandern in
+  (Config-Load, Language-Init, Conflict-Detection). Migrationen, Service-Allokationen,
-  LoadAsync, sodass Dalamud die UI während der schweren Arbeit responsive halten kann. Per-Line-CaptureFailure in
+  Window-Konstruktion und Hook-Subscription wandern in LoadAsync, sodass Dalamud die UI während der
-  DisposeAsync mirrort LightlessSync's Pattern, plus Idempotency-Guard gegen Reload-Races
+  schweren Arbeit responsive halten kann. Per-Line-CaptureFailure in DisposeAsync mirrort
-- **Custom-Repo-URL umgezogen auf Gitea.** Bestehende Tester müssen einmalig in XIVLauncher die Custom-Repo-URL auf
+  LightlessSync's Pattern, plus Idempotency-Guard gegen Reload-Races
-  `https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json` umstellen, dann
+- **Custom-Repo-URL umgezogen auf Gitea.** Bestehende Tester müssen einmalig in XIVLauncher die
-  XIVLauncher neu starten. Das alte GitHub-Repo bleibt als eingefrorener v1.4.2-Snapshot stehen und wird nicht mehr
+  Custom-Repo-URL auf
-  aktualisiert
+  `https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json`
-- **Schema-Gate statt Migrations-Kette.** Die v9 → v16 Migrationen sind raus, ersetzt durch einen harten Schema-Check in
+  umstellen, dann XIVLauncher neu starten. Das alte GitHub-Repo bleibt als eingefrorener
-  Phase 1. Configs auf Schema v16+ laden direkt; ältere Configs (vor v1.2.1) bekommen jetzt eine klare „install v1.4.2
+  v1.4.2-Snapshot stehen und wird nicht mehr aktualisiert
-  first"-Fehlermeldung statt eines impliziten Migrations-Pfads
+- **Schema-Gate statt Migrations-Kette.** Die v9 → v16 Migrationen sind raus, ersetzt durch einen
-- **AutoTranslate-Cache läuft im Hintergrund.** Der Cache füllt sich jetzt fire-and-forget statt blockierend im
+  harten Schema-Check in Phase 1. Configs auf Schema v16+ laden direkt; ältere Configs (vor v1.2.1)
-  Plugin-Load. Trade-off: die erste Auto-Translate-Nutzung einer Session kann einen kurzen Hitch haben, dafür kein
+  bekommen jetzt eine klare „install v1.4.2 first"-Fehlermeldung statt eines impliziten
-  300-ms-Block beim Plugin-Start
+  Migrations-Pfads
-- **Plugin-Load-Zeit ehrlich.** Median 3,7 s über fünf Reloads, vergleichbar mit v1.4.2. Der Async-Refactor ist
+- **AutoTranslate-Cache läuft im Hintergrund.** Der Cache füllt sich jetzt fire-and-forget statt
-  Foundation für künftige Lazy-Init-Optimierungen (v1.4.4) und Code-Architektur-Hygiene, kein direkter User-spürbarer
+  blockierend im Plugin-Load. Trade-off: die erste Auto-Translate-Nutzung einer Session kann einen
-  Speed-Win in dieser Release
+  kurzen Hitch haben, dafür kein 300-ms-Block beim Plugin-Start
+- **Plugin-Load-Zeit ehrlich.** Median 3,7 s über fünf Reloads, vergleichbar mit v1.4.2. Der
+  Async-Refactor ist Foundation für künftige Lazy-Init-Optimierungen (v1.4.4) und
+  Code-Architektur-Hygiene, kein direkter User-spürbarer Speed-Win in dieser Release
 
-Keine User-sichtbaren Funktions-Änderungen außer dem Repo-URL-Update. Settings, Themes und Tabs bleiben unangetastet.
+Keine User-sichtbaren Funktions-Änderungen außer dem Repo-URL-Update. Settings, Themes und Tabs
+bleiben unangetastet.

.github/forge-posts/v1.4.4.md

@@ -0,0 +1,37 @@
+---
+subtitle: Threading- und IPC-Sicherheits-Politur
+versionsnatur: Wartung und Robustheit
+---
+
+**Hellion Chat 1.4.4 — Threading- und IPC-Sicherheits-Politur**
+
+Fünfter Sub-Patch der v1.4.x Polish-Sweep-Serie. Threading-Annahmen werden explizit pro Methode
+dokumentiert, ein Hot-Path-Lock im Auto-Tell-Tab-Counter fällt weg, IPC-Cleanup wird sichtbar wenn
+er fehlschlägt und der Privacy-Filter spricht jetzt bei unbekannten ChatTypes.
+
+- **AutoTellTabsService Hot-Path-Lock entfernt.** `ActiveTempTabCount` hat bisher pro Render-Frame
+  ein LINQ-Count unter einem Lock gemacht. Jetzt läuft das über einen Interlocked-Counter der
+  parallel zur Tabs-Liste mitgeführt wird, inklusive Resync-Hook für den Snapshot-Restore-Pfad in
+  `SaveConfig`. Plus Pure-Helper-Test-Mirror in der Build-Suite damit die Atomicity-Semantik nicht
+  versehentlich wegrefactored wird
+- **HonorificService selbst-dokumentierende Threading-Banner.** Statt eines Block-Comments am
+  Klassen-Ende hat jede IPC-Callback-Methode jetzt einen 1-Zeilen-Banner darüber, der den
+  Thread-Kontext direkt am Call-Site benennt (framework only, framework scheduled, any). Mehr Hilfe
+  für künftige Reviews als ein abstraktes Threading-Kapitel
+- **Unsubscribe-Failure ist jetzt sichtbar.** `TryUnsubscribe` hat ein Honorific-Unsubscribe-Failure
+  bisher als Debug geloggt, was bei Standard-Loglevel verschluckt wurde. Eine geleakte Subscription
+  kann den Service über Plugin-Reloads hinweg leben lassen, also läuft der Log jetzt auf Warning
+- **AutoTranslate-Warmup blockiert den Plugin-Unload nicht mehr.** Der Cache-Warmup-Thread war ohne
+  `IsBackground=true` unterwegs, was den Unload um 100-300 ms verzögern konnte. Pattern-Match zu
+  MessageManager und RetentionSweep (beide seit v1.4.0)
+- **Privacy-Filter loggt unbekannte ChatTypes.** Wenn FFXIV durch einen Patch einen neuen ChatType
+  einführt der weder in der Whitelist noch in den Defaults steht, wird er bisher silent durch den
+  Failsafe geleitet. Jetzt loggt der Filter einmalig pro Runtime eine Warning mit dem Type und dem
+  Failsafe-Wert. Dedup über ein NonSerialized-HashSet, also kein Log-Spam
+- **Default-Flip für neue Installationen.** `PrivacyPersistUnknownChannels` startet bei neuen
+  Configs jetzt auf `true`, damit ein Patch-bedingt neuer ChatType nicht stillschweigend gedroppt
+  wird bevor der User entscheiden kann. Bestehende Configs behalten ihre Wahl, weil der Deserializer
+  den Initializer überschreibt. Keine Migration, kein Schema-Bump
+
+Keine User-sichtbaren Funktions-Änderungen außer dem Default-Flip für neue Installationen. Settings,
+Themes, Tabs und das Privacy-Verhalten für Bestand bleiben unangetastet.

.github/forge-posts/v1.4.5.md

@@ -0,0 +1,31 @@
+---
+subtitle: UX und Robustheit
+versionsnatur: UX-Polish-Cycle
+---
+
+**Hellion Chat 1.4.5 — UX und Robustheit**
+
+Sechster Sub-Patch der v1.4.x Polish-Sweep-Serie. Render-Fehler im Chat-Fenster werden jetzt
+sichtbar, der First-Run-Wizard hat eine explizite Cancel-Schaltfläche, der Eingabe-Verlauf bleibt
+nicht mehr über Plugin-Reloads hinweg liegen, und die Statusleiste klippt in schmalen Fenstern nicht
+mehr.
+
+- **Fehler-Benachrichtigung im Chat-Fenster.** Wenn ein Render-Fehler in `DrawChatLog` auftritt,
+  zeigt das Plugin jetzt eine einmalige Warning-Notification mit Verweis aufs `/xllog`, statt das
+  Fenster stillschweigend leer zu lassen. Der Stack-Trace selbst geht weiter via `Plugin.Log.Error`
+  ins Logfile. De-Dup über Per-Session-Bool, damit ein wiederkehrender Fehler die Notification-Stack
+  nicht pro Frame neu vollkippt
+- **First-Run-Wizard trennt Accept und Close.** `OnClose` setzt nicht mehr stillschweigend
+  `FirstRunCompleted=true`, also lässt das X den Wizard schwebend zurück und er kommt beim nächsten
+  Plugin-Reload wieder. Eine neue „Später — Defaults behalten"-Schaltfläche im Footer ist der
+  explizite Weg, ohne Profil-Auswahl rauszukommen. Strings bilingual EN+DE plus Tooltip
+- **Eingabe-Verlauf wird beim Plugin-Reload geleert.** `InputHistoryService.Reset` hängt jetzt in
+  `Plugin.DisposeAsync` neben den anderen Pure-Memory-Cleanups, damit der statische Zustand aus der
+  vorigen Session den nächsten Load nicht mehr erbt
+- **Statusleiste klippt nicht mehr.** Der rechtsbündige Versions-Slot wird ausgeblendet wenn die
+  Chat-Window-Breite abzüglich Versions-Text unter 200 px fällt — vorher überlappte er die vier
+  linken Slots. Ab ausreichender Breite taucht der Slot wieder auf
+- **Intern:** `FontManager` fällt auf System-Font zurück wenn die eingebettete Hellion-Font-Resource
+  fehlt (Broken-csproj-Pfad, nie ein Produktions-Build), plus expliziter
+  Session-Only-Invariant-Kommentar für Auto-Tell-Tabs in `Plugin.cs:167-168` mit einem
+  TempTabCounter-Init-Pin in der Build-Suite. Kein Schema-Bump, keine Migration

.github/forge-posts/v1.4.6.md

@@ -0,0 +1,36 @@
+---
+subtitle: Code Hygiene and Refactor
+versionsnatur: Maintenance-Cycle
+---
+
+Wartungs-Patch ohne User-sichtbare Änderungen. Saubere Code-Basis als Vorbereitung auf das
+v1.4.7-Backlog-Cleanup, plus zwei geerbte Bugfixes aus dem ChatTwo-Upstream `f35b7d3`.
+
+- **preflight.sh härter**: csharpier-Reflow-Check (Block E) und markdownlint (Block F) laufen jetzt
+  im Pre-Push-Gate, statt erst beim Pre-Merge-Review aufzufallen.
+- **FontManager-Fallback robuster**: Atlas-Toolkit-Throws aus kaputten Font-Configs (IO,
+  InvalidOperation, ArgumentException) fallen jetzt zuverlässig auf NotoSansCjkRegular, statt den
+  Atlas-Build mitzureißen. Der Exception-Typ wird im Log mitgegeben für die Diagnose.
+- **URL-Validation beim Plugin-Load**: BrandingLinks (5 URLs) und IntegrationLinks (2 URLs) werden
+  via `[ModuleInitializer]` geprüft. Ein Tippfehler bei einer künftigen URL-Rotation wirft jetzt
+  sofort beim Plugin-Load, statt still beim Klick zu scheitern.
+- **Cherry-Pick aus ChatTwo `f35b7d3`** — Memory-Leak in `Chat.SetChannel`: der native `Utf8String`
+  wird jetzt auch dann freigegeben, wenn der Linkshell-Check den Channel ablehnt (vorher gefangen im
+  early-return).
+- **Cherry-Pick aus ChatTwo `f35b7d3`** — `Tab.Clone()` Deep-cloned jetzt `UsedChannel` und
+  `TellTarget`. Vorher Reference-Share-Bug: PopOut- und Temp-Tabs mutierten sich gegenseitig.
+- **Aktive-Tab-Underline pixel-perfect bei DPI-Scaling**: Die Underline-Pill skaliert jetzt mit
+  `ImGuiHelpers.GlobalScale` und rundet die DrawList-Koordinaten auf physische Pixel. Kein
+  Sub-Pixel-Blur mehr auf 125/150%-Setups.
+- **IconButton-Width-Fix**: der manuelle `width - 2 * CellPadding.X`-Subtract verlor den HUD-Scale
+  (Padding skaliert, der raw int nicht). Gemessene Breite läuft jetzt unverändert durch.
+- **Test-Isolation für MessageStore**: `Dalamud.Utility.Util`-Surface (IsWine, OpenLink) läuft jetzt
+  durch eine `IPlatformUtil`-Indirektion. MessageStores `IsWine`-Probe ist isoliert testbar in der
+  Build-Suite. Plus: HellionStyle-ChildBgAlpha als Pure-Helper extrahiert, Plugin.SaveConfig kopiert
+  nur Session-Tabs statt der ganzen Tab-Liste, SettingsOverview cached den DrawList einmal pro
+  Frame.
+- **Built-in-Theme-Roster**: Crystal Nocturne (Royal Sapphire + Electric Magenta auf Obsidian, von
+  CRYSTALLITE) ersetzt Moonlit Bloom. User mit Moonlit Bloom als aktivem Theme fallen beim ersten
+  Plugin-Load auf Hellion Arctic zurück.
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).

.github/forge-posts/v1.4.7.md

@@ -0,0 +1,33 @@
+---
+subtitle: Backlog Cleanup and Mid-Features
+versionsnatur: Mid-Feature-Patch
+---
+
+Achter Sub-Patch der v1.4.x Polish-Sweep-Serie. Erstes User-sichtbares Feature-Bundle seit v1.4.5 —
+angepinnte Tell-Tabs die Relog überleben, opt-in Honorific-Glow, plus eine konfigurierbare Sidebar.
+
+- **TempTell anpinnen**: Rechtsklick auf einen TempTell-Tab in der Sidebar → „Tab anpinnen".
+  Angepinnte Tabs überleben Plugin-Reload und Char-Logout, behalten ihre Konversations-Historie
+  (wird beim Rehydrate aus dem MessageStore nachgeladen) und bleiben an die gleiche /tell-Person
+  gebunden. Hard-Cap 5 angepinnte Tabs in einem separaten Pool — die normalen Auto-Tell-Tabs (15er
+  Cap) sind davon entkoppelt, Gesamt-Decke 20. Die Sidebar gruppiert angepinnte Tabs in einer
+  eigenen „Angepinnt"-Sektion mit eigenem Trenner.
+- **Honorific Glow-Outline**: rendert jetzt eine 8-Richtungs-DrawList-Outline wenn der
+  Honorific-Titel eine Glow-Farbe trägt. Opt-in via **Settings → Integrationen → Glow-Outline
+  rendern (Honorific)** (Default OFF). Gradient (Color3 / GradientColourSet / Wave / Pulse) wird
+  geparst und im DTO weitergereicht, rendert aktuell aber statisch als Primärfarbe — der volle
+  Gradient-Port (Animations-Algorithmus + Pride-Palette) kommt als eigener Cycle nach.
+- **Sidebar-Breite konfigurierbar**: in **Theme & Layout** ein Slider 44–160 px. Default bleibt 44
+  px (icon-only), aber breiter machen damit Sektion-Header wie „Aktive Tells (3)" oder „Angepinnt
+  (2)" nicht abgeschnitten werden.
+- **Settings-Save Channel-Fix**: ein Save mit aktivem Party- oder Linkshell-Tab konnte den
+  Chat-Input zurück auf `/tell <angepinnte Person>` springen lassen. `Configuration.UpdateFrom`
+  bewahrt jetzt den Runtime-`CurrentChannel` über den persistent-Tab-Merge hinweg, und `TabSwitched`
+  deep-cloned den Seed-Channel statt sich den `UsedChannel` mit dem vorigen Tab zu teilen.
+- **Internal**: `IPluginLogProxy`-Indirektion vor Dalamud's `IPluginLog` über alle ~91
+  `Plugin.Log`-Call-Sites. Damit läuft `MessageStore.Migrate0` voll-isoliert in xUnit (F12.1-Lücke
+  aus v1.4.6 geschlossen). Plus: TempTab-Counter als abgeleitete Property statt gecachtes
+  Interlocked-Feld — die neuen Pin/Unpin-Übergänge sind Cold-Path, kein Lock-Free-Vorteil mehr.
+  Migration v16 → v17 ist rein additiv (neues `Tab.IsPinned`-Bool, Default false).
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).

.github/forge-posts/v1.4.8.md

@@ -0,0 +1,19 @@
+---
+subtitle: Hook-Layer und Polish-Quick-Wins
+versionsnatur: Polish-Patch
+---
+
+- DbViewer Volltext-Suche: optionaler FTS5-Index über die ganze Chat-Historie. Wird beim ersten
+  v1.4.8-Start asynchron im Hintergrund gebaut, Progress als Toast. Lokale Page-Suche bleibt
+  Default. Such-Eingaben werden als exakte Wortfolge gematcht; mehrere Wörter werden nur gefunden,
+  wenn sie zusammen und in der Reihenfolge stehen. Wer rohe FTS5-MATCH-Syntax nutzen will, setzt
+  eigene Anführungszeichen um den Suchbegriff.
+- Custom-Theme-Files laden sich beim Speichern automatisch neu, wenn das Theme aktiv ist. Kein
+  Picker-Klick mehr nötig.
+- Retention-Sweep blockt nicht mehr den Framework-Thread. Der Mini-Hitch von ~194ms pro Sweep ist
+  weg.
+- Statusleiste rendert sauber bei Windows-Skalierung über 100%.
+- Receive-Suppressed-Tells-Routing wurde in diesem Cycle untersucht und auf v1.5.x verschoben: wenn
+  andere Plugins Tells via CheckMessageHandled unterdrücken, überspringt FFXIVs Chat-Pipeline den
+  RaptureLogModule-Resolver und HellionChats Tab-Routing verliert den Tell-Partner. Der Fix liegt
+  architektonisch neben dem geplanten Ad-Block-Hook-Layer und kommt dort mit.

.github/forge-posts/v1.4.9.md

@@ -0,0 +1,28 @@
+---
+subtitle: Plugin-Load Render Polish
+versionsnatur: Performance-Patch
+---
+
+- First-Frame-HITCH unter 100 ms: der erste Render-Frame des Plugins liegt jetzt bei ~76 ms Median
+  (vorher ~127 ms), die Dalamud-Warnung „UiBuilder(Hellion Chat) > 100ms" beim Plugin-Start ist
+  damit weg. Erreicht durch das Verlagern von sechs nicht-essentiellen Render- Sektionen
+  (Statusleiste, Kanalname-Chunks, Fenster-Bounds-Check, Hinweis-Banner, Autocomplete,
+  Input-Preview) auf den zweiten Frame. Bei 60 fps sieht man die deferred-Sektionen ~17 ms später,
+  was im Atlas-Build-Fenster nach einem Reload unsichtbar bleibt.
+- Slash-Commands zentral registriert: /hellion, /hellionView, /hellionSeString und /hellionDebugger
+  werden jetzt im Plugin-Load zentral registriert statt erst beim ersten Öffnen ihres Ziel-Fensters.
+  Heißt: die Befehle funktionieren ab dem ersten Tick, auch wenn das jeweilige Fenster nie geöffnet
+  wurde. Der „Einstellungen"-Button im Plugin-Manager hängt am selben Pfad.
+- Plugin-Load-Diagnose-Logs als Tripwire: die Profiling-Logs für MessageStore.Connect,
+  MessageStore.Migrate, FilterAllTabs und den Auto-Translate-Warmup bleiben auf Information-Level
+  eingeschaltet. Falls eine zukünftige Änderung die Lade-Zeit wieder über 100 ms drückt, taucht der
+  Mehrverbrauch direkt im /xllog auf, ohne dass jemand erst den Debug-Filter einschalten muss.
+- ChatTwo-IPC-Kompatibilitäts-Layer: HellionChat spiegelt jetzt die komplette ChatTwo-IPC-Surface
+  (`GetChatInputState`, `ChatInputStateChanged`, `Register`, `Unregister`, `Available`, `Invoke`)
+  zusätzlich zu unseren eigenen `HellionChat.*`-Gates unter dem `ChatTwo.*`-Namensraum. Drittseitige
+  Integrationen die nur auf ChatTwo's IPC reagieren, etwa die Kontextmenü-Hooks von Artisan und
+  AllaganTools, funktionieren damit weiter ohne Code-Änderung auf ihrer Seite. Die
+  Conflict-Detection blockiert das parallele Laden von ChatTwo, daher kein Namensraum-Konflikt im
+  Live-Betrieb.
+- Migration v17 unverändert: kein Schema-Bump, kein Config-Migrations- Aufwand. Nach dem Update
+  läuft das Plugin gegen die bestehende v17-Datenbank weiter.

.github/forge-posts/v1.5.0.md

@@ -0,0 +1,28 @@
+---
+subtitle: DI Foundation und Service-Refactor
+versionsnatur: Architektur-Cycle
+---
+
+- **Architektur-Umbau ohne User-spürbare Verhaltens-Änderung:** der Plugin-Bootstrap wechselt auf
+  einen Generic-Host DI-Container (`Microsoft.Extensions.Hosting` + `IServiceCollection`) nach dem
+  Lightless-Sync-Muster. 18 Service-Klassen wandern von einem statischen `Plugin.LogProxy`-Locator
+  auf typisierte `ILogger<T>`-Constructor-Injection. `DalamudLogger` brückt
+  `Microsoft.Extensions.Logging` über auf Dalamuds `IPluginLog` — im xllog erscheinen jetzt
+  Service-spezifische Spalten wie `[ MessageManager]` und `[Honori...ervice]`.
+- **Plugin.LogProxy bleibt für die acht Buckets erhalten,** die Constructor-Injection nicht
+  erreicht: Static-Helper (EmoteCache, AutoTranslate, MemoryUtil, WrapperUtil), Dalamud-Reflektion
+  (Configuration), Data-Class mit Massen-Instanziierung (Message) und Instanz-Klassen die nur aus
+  Static-Methods loggen (FontManager, eine GameFunctions-Stelle).
+- **Performance bestätigt durch Cross-Plugin-Baseline:** HellionChat First-Frame-HITCH 77 ms Median,
+  Chat 2 v1.40.2 74 ms Median — kein DI-Penalty gegenüber dem Upstream-Fork-Origin. Lightless und
+  XIVInstantMessenger liegen bei ~7 ms weil sie ihren FontAtlas-Build deferren; das wird das
+  v1.5.1-Item.
+- **User-sichtbarer Bug-Fix nebenbei:** Slash-Command-Einfügen in das Chat-Eingabefeld (Friend-List
+  "/tell"-Action plus Plugin-Inserts von Artisan, AllaganTools und ähnlichen) ersetzt jetzt den
+  vorhandenen Input, statt anzukonkatenieren. Cherry-Pick aus ChatTwo upstream `ee7768ac` mit
+  Namespace-Anpassung.
+- **Foundation für die Plugin-Integrations-Wave:** v1.5.7-11 (Context-Menu, NotificationMaster,
+  Moodles, ExtraChat, XIVIM Quick-DM) werden ab jetzt strukturell handhabbar — neue Services sind
+  ein `services.AddSingleton<T>` plus ein paar Factory-Lambda- Zeilen, kein Plugin.cs-Anflanschen
+  mehr.
+- Migration v17 unverändert: kein Schema-Bump, kein Config-Migrations-Aufwand.

.github/forge-posts/v1.5.1.md

@@ -0,0 +1,21 @@
+---
+subtitle: "FontAtlas Refactor and Forge Signature"
+versionsnatur: "Architecture + Closure + Branding"
+---
+
+- **FontManager-Refactor.** Der FontAtlas baut jetzt nur noch einmal pro Plugin-Load statt vier- bis
+  fünfmal. Weniger CPU- und GPU-Druck in den ersten Sekunden nach einem Reload, weniger
+  Atlas-Texture-Memory-Churn. Die acht Font-Einstellungen können live über den neuen
+  `RebuildDelegateFonts`-Pfad geändert werden, ohne dass das Plugin neu geladen werden muss.
+- **Hellion Forge Signatur.** Das Plugin trägt jetzt eine ASCII-Fuchs-Signatur. Im `/xllog`
+  erscheint beim Plugin-Load ein kleiner Fuchs-Kopf, im First-Run-Wizard und unter Settings →
+  Information taucht eine eingeklappte „Hellion Forge"-Sektion mit dem vollen Fuchs auf. Gezeichnet
+  von Julia Moon, fest in der Plugin-DLL eingebettet.
+- **Honorific-Integration bleibt unverändert.** Der ursprünglich geplante Gradient-Render-Pfad
+  (Wave/Pulse-Animation) entfällt. Honorific 3.2 stellt keine IPC für den fertig gerenderten
+  Gradient-Frame zur Verfügung, und ein eigener Port der Pride-Palette wurde verworfen. Die
+  Honorific-Anzeige bleibt wie in v1.4.7 etabliert (statischer Glow plus Title).
+- **Hinweis zum HITCH-Win.** Der ursprünglich angepeilte 10×-First-Frame-Sprung
+  (Lightless/XIVIM-Pattern, ~7 ms statt ~75 ms) ist in diesem Cycle nicht eingetreten. Die
+  Render-Kosten liegen im UiBuilder-First-Frame-Pfad, nicht im FontAtlas-Build. Investigation kommt
+  als eigener späterer Cycle. Keine User-sichtbare Disruption, keine Migration.

.github/forge-posts/v1.5.2.md

@@ -0,0 +1,10 @@
+---
+subtitle: "First-Run Wizard — neu in 4 Steps, Roleplay-Profil neu"
+versionsnatur: "UX-Patch"
+---
+- **Vier Steps statt Single-Page.** Der First-Run-Wizard öffnet jetzt in vier Bühnen: Willkommen → Privacy-Profil → Power-Settings → Fertig. Pagination-Dots in Forge-Bronze oben rechts, Back/Skip/Next im Footer. Standardgröße 720×480 (Min 600×400) und der Fuchs-Banner sitzt als zugeklappter TreeNode oben in Step 1, damit die Einleitung im Fokus bleibt.
+- **Neues Privacy-Profil „Roleplay".** Datensparsamkeit plus Sagen und beide Emote-Typen für Story-Logs. Schreien und Rufen bleiben außen vor, Public-Distance-Lärm von Fremden ist kein Story-Inhalt. Aufbewahrung: Sagen 30 Tage, Emotes 90 Tage. Privacy-Picker wird zum 2×2-Grid, Casual bleibt mit ★-Marker als Empfehlung.
+- **Power-Settings sichtbar.** Bislang versteckte Defaults bekommen eine eigene Bühne: Vorherige Session laden, Filter inkl. alter Messages, N Tell-Messages vorladen, Compact-Density, Prettier-Timestamps und Theme-Picker für die 10 Built-in-Themes. Keine neuen Settings, nur das Bestehende sauber sichtbar.
+- **Staged-Commit und Test-Hint auf der Fertig-Bühne.** Auswahl wird erst beim Klick auf „Fertig ✓" geschrieben. „Später entscheiden" oder X-Close lässt die bestehende Config unangetastet, ein nicht angefasster Step behält die alten Werte. Direkt darunter sichtbar: „Tipp /tell <Spielername>", plus die aktuelle Preload-Zahl aus Step 3 als Hinweis auf den Auto-Tell-Tab-Spawn.
+- **Bestehende User sehen den neuen Wizard einmal.** Wer schon v1.5.1 hatte, bekommt den Multi-Step-Flow beim ersten v1.5.2-Boot aufgepoppt. Neues Config-Feld `WizardLastShownVersion` triggert das einmalig pro Wizard-Rework; Skip oder Finish reicht und danach öffnet er nicht mehr automatisch.
+- **Unter der Haube.** Pure-Helper-Tests für alle vier Profile-Sets in der Build-Suite (zwölf neue Facts), plus ein WizardStateSmokeStep für `/xlperf`. Migration v17 bleibt, nur ein optionales Config-Feld kommt dazu.

.github/forge-posts/v1.5.3.md

@@ -0,0 +1,9 @@
+---
+subtitle: "24 Sprachen, Inter Light statt Exo 2, HITCH 74 → 20 ms"
+versionsnatur: "Localisation + Font-Stack"
+---
+- **24 wählbare UI-Sprachen.** Aus dem ursprünglich nur als FR-Lokalisierung geplanten Cycle ist eine breite Welle geworden: Catalan, Czech, Danish, Dutch, English, Finnish, French, German, Greek, Hungarian, Italian, Japanese, Korean, Norsk bokmål, Polish, Portuguese (BR), Portuguese (PT), Romanian, Russian, Spanish, Swedish, Turkish, Ukrainian, Simplified Chinese, Traditional Chinese. Dropdown sortiert alphabetisch nach Endonym, „None" oben angepinnt. Nicht-native Übersetzungen sind AI-assisted und für Community-Review im Forge-Discord markiert.
+- **Inter Light statt Exo 2 als bundled Schrift.** Plus NotoSansCjkRegular als dritte Merge-Schicht. Damit deckt der Stack Latin Extended-A/B, Greek polytonic, Cyrillic Supplement und CJK (inkl. Hangul, Simplified-Han nach Reform) ab — die nicht-vanilla-FFXIV-Sprachen waren mit Exo 2 nicht lesbar.
+- **HITCH 74 → ~20 ms als Side-Effect.** Der UiBuilder-First-Frame-Lag lag seit v1.4.x stabil bei 74 ms; v1.5.1 wollte ihn in Richtung 7 ms ziehen, fiel als „Hypothese zu optimistisch" durch. Echter Grund: `Plugin.cs:937` push'te `RegularFont` nur wenn `FontsEnabled` true war — die „Mitgelieferte Schrift verwenden"-Logik setzte `FontsEnabled = false` mit, der bundled-Pfad war die ganze v1.5.x-Reihe tot, FFXIVs Axis-Font übernahm und kostete ~50 ms extra. Fix routet `RegularFont` jetzt auch über `UseHellionFont`. Median ~20 ms im 5-Reload-Stresstest (17.9-23.6 ms, Linux/Wine; Windows-Baseline steht aus).
+- **Glyph-Ranges aktivieren sich automatisch beim Sprachwechsel** plus eine One-Shot-Migration für User die schon eine non-Latin-Sprache eingestellt hatten. Neue WarningText unter dem Sprach-Dropdown weist darauf hin, dass FFXIVs Chat-Engine offiziell nur EN/DE/FR/JA-Glyphen rendert — andere Schriften können in der Game-Eingabe Garbled-Output zeigen.
+- **Unter der Haube.** Drei-Layer-Font-Stack, zwei neue ExtraGlyphRanges-Flags (`LatinExtended`, `Greek`), `LanguageOverride`-Enum wächst um zehn Locales plus drei reaktivierte (Italian, Korean, Norwegian mit `nb`). Append-only damit User-Configs stabil bleiben. Migration v17 bleibt.

.github/forge-posts/v1.5.4.md

@@ -0,0 +1,9 @@
+---
+subtitle: "Theme-Crossfade, Quick-Picker, Hover-Animationen"
+versionsnatur: "Polish & Motion"
+---
+- **Theme-Crossfade.** Theme-Wechsel blenden jetzt sanft über rund 300 ms ineinander, statt hart umzuschalten. Alle Hellion-Flächen gleiten mit: Sidebar, Titel, Buttons, Tabs, Scrollbar, Trennlinien. Der Fenster-Hintergrund snappt bewusst weiter, damit das Per-Window-Deckkraft-Setting aus Dalamuds Pinning-Menü unangetastet bleibt.
+- **Header-Quick-Picker.** Neuer Paletten-Button links vom Zahnrad im Chat-Header. Ein Klick öffnet ein kompaktes Popup mit zwei Sektionen: alle Built-in- und Custom-Themes sowie alle Tabs. Der aktive Eintrag trägt ein Häkchen, ein Klick wechselt ohne das Popup zu schließen. So lassen sich mehrere Wechsel hintereinander erledigen, ohne den Umweg über die Einstellungen.
+- **Sanfte Hover-Animationen.** Sidebar-Icons faden bei Hover sanft von gedimmt auf volle Deckkraft. Card-Mode-Trennlinien heben sich beim Überfahren einer Zeile für den ganzen Tab dezent ab. Beides framerate-unabhängig gerechnet, also auch bei Wine-Stall-Frames stabil.
+- **Bewegung reduzieren.** Neuer Toggle im Tab für Theme und Layout. Er deaktiviert Crossfade, Hover-Animationen und das Pulsieren ungelesener Tabs für alle, die eine statische Oberfläche bevorzugen.
+- Drei P3-Items plus der Accessibility-Toggle, kein Schema-Bump, keine Migration. Eine kleine Polish-Welle vor den größeren Cycles.

.github/forge-posts/v1.5.5.md

@@ -0,0 +1,11 @@
+---
+subtitle: "Backlog-Sync Tab-Features"
+versionsnatur: "Bundle-Patch (Hälfte 1 von 2)"
+---
+- **Fehlgeschlagener Tell.** Geht ein gesendeter Tell nicht durch (Empfänger offline, in einer Instanz oder blockiert), erscheint jetzt ein Warn-Toast statt dass die Systemmeldung durchrauscht. Abschaltbar in den Einstellungen unter Chat.
+- **Ton pro Tab.** Jeder Chat-Tab kann einen Benachrichtigungston spielen, wenn eine Nachricht eintrifft, während ein anderer Tab aktiv ist. Zur Wahl stehen die 16 Spiel-Chat-Sounds oder drei mitgelieferte Hellion-Sounds, mit einem Vorhör-Knopf. Standardmäßig aus, hört auf den globalen Sound-Schalter.
+- **Tab umbenennen.** Das Umbenennen-Feld im Rechtsklick-Menü fokussiert sich beim Öffnen von selbst und nimmt jetzt bis zu 512 Zeichen.
+- **Sprung ans Ende.** In der Chat-Kopfleiste erscheint ein Knopf, sobald man vom aktuellen Ende weggescrollt ist. Ein Klick springt zurück zur jüngsten Nachricht.
+- **Karten- und Item-Links.** Kartenmarkierung und verlinktes Item lassen sich aus dem Rechtsklick-Menü der Chat-Eingabe einfügen.
+- **Fuchs-Banner.** Das Hellion-Forge-Fuchs-Motiv im Einrichtungs-Assistenten und im Informations-Tab ist jetzt ein echtes Bild statt ASCII-Kunst.
+- Schema-Bump auf v18, rein additiv.

.github/forge-posts/v1.5.6.md

@@ -0,0 +1,11 @@
+---
+subtitle: "Settings Overhaul + Filter & Notification Polish"
+versionsnatur: "Settings-Overhaul-Release"
+---
+- **Settings komplett neu strukturiert** — die zehn alten Tabs sind auf sieben zusammengefasst (Allgemein, Aussehen, Chat, Fenster, Kanäle, Daten & Privatsphäre, Über). Jeder Tab gliedert sich jetzt in Sektionen, die beim Reingehen eingeklappt sind. Controls innerhalb einer Sektion sind nach Typ gruppiert. Tabs-Tab im Per-Tab-Panel ebenfalls in Sub-Sektionen aufgeteilt.
+- **Absender-Namen anpassbar** — neue Optionen in Chat → Nachrichten für das Namensformat (Voll / Vorname / Initialen) und das Welt-Suffix (Nie / Andere Welten / Immer).
+- **Pre-Send-Warnung für Plugin-Symbole** — beim Senden einer Nachricht mit Symbolen, die nur HellionChat-User sehen, kommt eine Warnung. Verhindert leere Kästchen bei anderen.
+- **Getrennte Fenster-Deckkraft** — Aktiv vs. Inaktiv. Aktiv wie bisher; Inaktiv über einen zweiten Slider unter Aussehen → Fenster-Stil.
+- **Lautstärke für eigene Notification-Sounds** — Slider in Allgemein → Sound, im Kanäle-Tab pro Tab nochmal angezeigt. Wirkt nur auf die drei mitgelieferten Custom-Sounds, die 16 Game-Sounds bleiben unverändert.
+- **Regex-Filter pro Tab gestrichen** — kurz dabei, dann verworfen: der eingebaute FFXIV-Blackword-Filter deckt das ab.
+- **Lokalisierung erweitert** — neue Section-Titel und v1.5.6-Controls in allen 24 Sprachen, maschinell übersetzt. Native-Review läuft weiter über den Hellion Forge Discord.

.github/forge-posts/v2.0.0.md

@@ -0,0 +1,11 @@
+---
+subtitle: "Rebuilt, Repaired, Reset"
+versionsnatur: "Major-Release mit Config-Reset"
+---
+- **Deine Einstellungen werden zurückgesetzt.** Neun Zyklen Umbau haben gespeicherte Werte hinterlassen, die auf Oberflächen zeigen, die es nicht mehr gibt. Neu anzufangen ist der einzige Weg, dass alle dieselben Vorgaben haben. **Dein Nachrichtenverlauf bleibt unberührt**, der liegt in einer eigenen Datenbank. Die alten Einstellungen liegen als `HellionChat.json.pre-2.0.0.bak` daneben.
+- **Behoben, und mehrere davon haben Daten verloren oder versteckt:** Die rückwirkende Bereinigung ließ sich nie anwenden. Das Verdichten der Datenbank schlug fehl und meldete danach, es sei nichts gelöscht worden, während alles weg war. Gelöschte Nachrichten blieben im Suchindex. Angepinnte Flüster-Tabs kamen eine ganze Sitzung lang leer hoch. Der Export schrieb ungültiges JSON. Ein Auskoppelfenster mit Titelleiste ließ sich nicht schließen. Ein 403 eines Emote-Dienstes riss alle 65 funktionierenden Emotes mit.
+- **Was sich am Speichern ändert:** Das Kanalraster entscheidet jetzt allein. Bisher griff die Unbekannt-Absicherung auch bei bekannten Kanälen, ein abgewählter Kanal wurde also trotzdem geschrieben. Wen das betraf, der speichert ab jetzt weniger. Nichts in der Datenbank wird angefasst.
+- **Jedes Fenster zeichnet das Plugin selbst** und alle sprechen eine Sprache: Struktur trägt die Typografie, alles Drückbare bekommt eine Fläche, jede Farbe wird gegen ihren Untergrund gemessen. Dazu benannte Typo-Rollen, Zeitstempel in eigener Spalte, kursive Systemmeldungen.
+- **Wieder erreichbar:** Export, Tab-Editor, Datenbankpflege und Anpinnen hatten beim Umbau ihre Zugänge verloren. Der Screenshot-Modus erreichte eine von vier Flächen mit Tab-Namen, jetzt alle vier. Der DSGVO-Hinweis beim Profil "Volle Historie" war in 25 Sprachen übersetzt und seit Mai unsichtbar.
+- **Gestrichen:** sechs Einstellungen mit Regler, gespeichertem Wert und ohne jeden Leser. Ein Regex-Filter pro Tab, den der spieleigene Wortfilter abdeckt. Ein Assistenten-Häkchen, das abgefragt, als angewendet gemeldet und nie gelesen wurde.
+- **Neu:** Emote-Tab im Standard-Layout (Testerwunsch), Orts- und Serverzeit in der Statusleiste, Screenshot-Modus aus der Eingabezeile erreichbar, `/hellion wizard`, ein Stil-Labor unter `/hellion lab`, und ein Hinweis im Assistenten, dass Plugins in FFXIV eine Grauzone sind und nicht in öffentliche Kanäle gehören.

.github/release-footer.md

@@ -2,26 +2,28 @@
 
 ## How to install
 
-This release is distributed via the HellionChat custom repository, not the Dalamud main plugin repo. To install:
+This release is distributed via the HellionChat custom repository, not the Dalamud main plugin repo.
+To install:
 
 1. In XIVLauncher: **Settings → Experimental → Custom Plugin Repositories**
-2. Add the URL: `https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json`
+2. Add the URL:
+   `https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json`
 3. Enable, save, then `/xlplugins` → search **Hellion Chat** → install
 
 ## Project documents
 
-- [README](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/README.md) — features,
+- [README](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/README.md)
-  architecture, build
+  — features, architecture, build
-- [Privacy notice](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/PRIVACY.md) — what
+- [Privacy notice](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/PRIVACY.md)
-  the plugin stores and sends
+  — what the plugin stores and sends
 - [Third-party notices](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/docs/THIRD_PARTY_NOTICES.md)
   — dependencies and licences
-- [Security policy](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/SECURITY.md) —
+- [Security policy](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/SECURITY.md)
-  vulnerability reporting
+  — vulnerability reporting
-- [Support](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/SUPPORT.md) — bug reports,
+- [Support](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/SUPPORT.md)
-  questions, contact paths
+  — bug reports, questions, contact paths
 
 ## Licence
 
-[EUPL-1.2](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/LICENSE). Based on
+[EUPL-1.2](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/src/branch/main/LICENSE).
-[Chat 2](https://github.com/Infiziert90/ChatTwo) by Infi and Anna, also EUPL-1.2.
+Based on [Chat 2](https://github.com/Infiziert90/ChatTwo) by Infi and Anna, also EUPL-1.2.

.github/workflows/build.yml

@@ -1,53 +0,0 @@
-name: Build
-
-# Verifies that every push to main and every PR still builds against the
-# current Dalamud staging branch. Does not produce release artefacts; the
-# release workflow handles that on tag.
-#
-# Linux runner: gitea.com Cloud Actions provides ubuntu-latest. The plugin
-# csproj targets net10.0-windows, but `dotnet build` cross-compiles on
-# Linux as long as the Dalamud staging assemblies are present at the
-# expected lookup path ($(HOME)/.xlcore/dalamud/Hooks/dev/, which the
-# Dalamud SDK 15 uses on Linux).
-
-on:
-    push:
-        branches: [main]
-    pull_request:
-        branches: [main]
-    workflow_dispatch:
-
-# Minimum permissions for a build-only workflow: read the repo, nothing
-# else. Closes the CodeQL "Workflow does not contain permissions" alert
-# and matches the principle-of-least-privilege the security guide
-# recommends for workflows that don't push or create releases.
-permissions:
-    contents: read
-
-jobs:
-    build:
-        name: Build (Release)
-        runs-on: ubuntu-latest
-        timeout-minutes: 15
-
-        steps:
-            - name: Checkout
-              uses: actions/checkout@v6
-
-            - name: Setup .NET 10
-              uses: actions/setup-dotnet@v5
-              with:
-                  dotnet-version: 10.0.x
-
-            - name: Download Dalamud staging
-              run: |
-                  hooks="$HOME/.xlcore/dalamud/Hooks/dev"
-                  mkdir -p "$hooks"
-                  curl -fsSL https://goatcorp.github.io/dalamud-distrib/stg/latest.zip -o dalamud.zip
-                  unzip -oq dalamud.zip -d "$hooks"
-
-            - name: Restore
-              run: dotnet restore HellionChat/HellionChat.csproj
-
-            - name: Build (Release)
-              run: dotnet build HellionChat/HellionChat.csproj --configuration Release --no-restore

.github/workflows/forge-announce.yml

@@ -1,225 +0,0 @@
-name: Forge Announce
-
-# Triggered when a vX.Y.Z tag is pushed. Reads .github/forge-posts/<tag>.md
-# (Frontmatter + DE bullet body) and the matching English block from
-# HellionChat/HellionChat.yaml, builds a Discord-Webhook embed and posts
-# it to the Hellion Forge #changelog channel.
-#
-# Decoupled from release.yml: a fail here does not block the GitHub
-# release, and a fail there does not block the announce. Spec lives in
-# the Vault under "Hellion Chat Forge-Auto-Announce Spec".
-#
-# Security: the only user-controlled inputs that enter run-steps are the
-# tag name and the frontmatter values from a repo-internal markdown file.
-# Tag name is read via env: (TAG_NAME, $env:TAG_NAME) and validated against
-# ^v\d+\.\d+\.\d+$ before any string interpolation. Frontmatter values are
-# parsed by regex with explicit length caps. No webhook event payload data
-# (issue titles, PR bodies, commit messages, etc.) flows into run-steps.
-
-on:
-    push:
-        tags:
-            - "v*"
-    workflow_dispatch:
-        inputs:
-            tag:
-                description: "Existing tag to (re)post, e.g. v1.1.0"
-                required: true
-                type: string
-
-permissions:
-    contents: read
-
-jobs:
-    announce:
-        name: Post changelog to Hellion Forge
-        runs-on: ubuntu-latest
-        # The DISCORD_FORGE_WEBHOOK secret is set as a repo-level Actions Secret
-        # on Gitea (Settings → Actions → Secrets). Repo-level secrets are in
-        # scope for every job by default, no environment: declaration needed.
-        timeout-minutes: 5
-
-        steps:
-            # On push:tags github.ref points at the tag commit; on workflow_dispatch
-            # the user supplies the tag explicitly. Always check out that tag so
-            # the yaml + forge-posts file are read from the tagged tree, not main.
-            - name: Checkout
-              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-              with:
-                  ref: ${{ github.event.inputs.tag || github.ref }}
-
-            # Build embed-payload as a JSON file on disk. PowerShell-Core (pwsh)
-            # ships pre-installed on ubuntu-latest so we get the same scripting
-            # patterns release.yml uses on windows-latest. Tag is read via env: to
-            # treat it as a string variable rather than inline shell text, and
-            # validated against the semver regex before any interpolation.
-            - name: Build embed payload
-              id: build
-              shell: pwsh
-              env:
-                  TAG_NAME: ${{ github.event.inputs.tag || github.ref_name }}
-              run: |
-                  $tag = $env:TAG_NAME
-                  if ($tag -notmatch '^v\d+\.\d+\.\d+$') {
-                      throw "V1: Refusing to announce non-semver tag: $tag"
-                  }
-                  $version = $tag.Substring(1)
-
-                  # ---------- Forge-Post-Datei lesen ----------
-                  $forgePath = ".github/forge-posts/$tag.md"
-                  if (-not (Test-Path $forgePath)) {
-                      throw "V2: Forge-Post-Datei für $tag fehlt unter .github/forge-posts/. Datei vor dem Tag anlegen, dann Tag re-pushen oder workflow_dispatch."
-                  }
-                  $forgeRaw = Get-Content -Path $forgePath -Raw
-
-                  # Frontmatter (--- … ---) am Datei-Anfang
-                  if ($forgeRaw -notmatch '(?s)\A---\s*\r?\n(.*?)\r?\n---\s*\r?\n(.*)\z') {
-                      throw "V3: Frontmatter (---) fehlt oder ist defekt in $forgePath"
-                  }
-                  $fmText = $matches[1]
-                  $deBody = $matches[2].Trim()
-
-                  $subtitle = $null
-                  $versionsnatur = $null
-                  foreach ($line in ($fmText -split "`r?`n")) {
-                      if ($line -match '^subtitle:\s*"?([^"]*)"?\s*$')      { $subtitle = $matches[1] }
-                      if ($line -match '^versionsnatur:\s*"?([^"]*)"?\s*$') { $versionsnatur = $matches[1] }
-                  }
-                  if ([string]::IsNullOrWhiteSpace($subtitle))      { throw "V3: Frontmatter-Feld 'subtitle' fehlt in $forgePath" }
-                  if ([string]::IsNullOrWhiteSpace($versionsnatur)) { throw "V3: Frontmatter-Feld 'versionsnatur' fehlt in $forgePath" }
-                  if ($subtitle.Length      -gt 60) { throw "V4: Frontmatter-Feld 'subtitle' überschreitet Limit ($($subtitle.Length) Char, max 60)" }
-                  if ($versionsnatur.Length -gt 40) { throw "V4: Frontmatter-Feld 'versionsnatur' überschreitet Limit ($($versionsnatur.Length) Char, max 40)" }
-                  if ([string]::IsNullOrWhiteSpace($deBody)) { throw "V3: DE-Body fehlt in $forgePath" }
-
-                  # ---------- EN-Block aus HellionChat.yaml ziehen ----------
-                  # 1:1 Pattern aus release.yml — gleicher Header-Marker, gleiches
-                  # Trailer-Verhalten. Bei Drift die zwei Workflows synchron halten.
-                  $yamlPath = "HellionChat/HellionChat.yaml"
-                  $raw = Get-Content -Path $yamlPath -Raw
-                  $marker = "changelog: |-"
-                  $idx = $raw.IndexOf($marker)
-                  if ($idx -lt 0) { throw "V5: changelog-Block nicht gefunden in $yamlPath" }
-                  $afterMarker = $raw.Substring($idx + $marker.Length)
-                  $changelogBody = (($afterMarker -split "`r?`n") | ForEach-Object {
-                      if ($_ -match '^  ') { $_.Substring(2) } else { $_ }
-                  }) -join "`n"
-
-                  $header = "**Hellion Chat $version"
-                  $start = $changelogBody.IndexOf($header)
-                  if ($start -lt 0) {
-                      throw "V5: No changelog entry for version $version found in $yamlPath. Update the changelog block before tagging."
-                  }
-                  $rest = $changelogBody.Substring($start)
-                  $nextHdr = $rest.IndexOf("`n`n**Hellion Chat ", 1)
-                  $trailer = $rest.IndexOf("`n`n---")
-                  if ($nextHdr -ge 0 -and ($trailer -lt 0 -or $nextHdr -lt $trailer)) {
-                      $enBlock = $rest.Substring(0, $nextHdr).TrimEnd()
-                  } elseif ($trailer -ge 0) {
-                      $enBlock = $rest.Substring(0, $trailer).TrimEnd()
-                  } else {
-                      $enBlock = $rest.TrimEnd()
-                  }
-
-                  # ---------- Char-Cap-Check (5500 Total auf title + description + footer) ----------
-                  $title = "Hellion Chat $version — $subtitle"
-                  $description = "**Deutsch**`n`n$deBody`n`n**English**`n`n$enBlock"
-                  $footerText = "Hellion Forge · $versionsnatur"
-                  $totalChars = $title.Length + $description.Length + $footerText.Length
-                  if ($totalChars -gt 5500) {
-                      throw "V6: Total char count $totalChars exceeds 5500 limit. Major-Release detected — please post manually via Bot/Multi-Embed (see forge style §8). Forge-Auto-Announce stays off for this tag."
-                  }
-                  Write-Host "Char-Cap OK: $totalChars / 5500"
-
-                  # ---------- Embed-Payload bauen ----------
-                  $payload = [ordered]@{
-                      username = "Forge Herald"
-                      avatar_url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/HellionChat/images/icon.png"
-                      content = "<@&1500489631555260446>"
-                      allowed_mentions = [ordered]@{
-                          parse = @()
-                          roles = @("1500489631555260446")
-                      }
-                      embeds = @(
-                          [ordered]@{
-                              title = $title
-                              url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/tag/$tag"
-                              color = 12730636
-                              description = $description
-                              footer = [ordered]@{ text = $footerText }
-                              timestamp = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ss.fffZ")
-                          }
-                      )
-                  }
-
-                  $payloadJson = $payload | ConvertTo-Json -Depth 8 -Compress
-                  # Ausgabe-Datei ohne trailing newline für sauberes curl --data-binary @-
-                  [System.IO.File]::WriteAllText("$PWD/embed-payload.json", $payloadJson, [System.Text.UTF8Encoding]::new($false))
-
-                  Write-Host "Payload size: $($payloadJson.Length) chars"
-                  Write-Host "Embed title:  $title"
-                  Write-Host "Embed footer: $footerText"
-
-            # POST to the Hellion Forge changelog webhook. curl from PowerShell-Core
-            # so we can pipe the payload via stdin (--data-binary @-) and keep
-            # secrets out of process arg lists. One retry on 5xx, hard fail on 4xx.
-            - name: POST to Hellion Forge webhook
-              shell: pwsh
-              env:
-                  DISCORD_FORGE_WEBHOOK: ${{ secrets.DISCORD_FORGE_WEBHOOK }}
-              run: |
-                  if ([string]::IsNullOrEmpty($env:DISCORD_FORGE_WEBHOOK)) {
-                      throw "V7: DISCORD_FORGE_WEBHOOK secret is empty. Check Settings → Environments → Webhook."
-                  }
-
-                  $payloadFile = "$PWD/embed-payload.json"
-                  if (-not (Test-Path $payloadFile)) {
-                      throw "Embed payload file missing — previous step did not produce embed-payload.json"
-                  }
-
-                  $maxAttempts = 2
-                  $attempt = 0
-                  while ($attempt -lt $maxAttempts) {
-                      $attempt++
-                      Write-Host "POST attempt $attempt of $maxAttempts"
-                      $tmpResp = "$PWD/.webhook-response"
-                      $tmpHeaders = "$PWD/.webhook-headers"
-                      # --silent suppresses progress; --show-error prints errors so
-                      # the workflow log shows what happened. -w prints HTTP status
-                      # to stdout for inspection. -o captures body for diagnosis,
-                      # -D captures headers.
-                      $rawStatus = Get-Content $payloadFile -Raw |
-                          curl --silent --show-error `
-                               --header 'Content-Type: application/json' `
-                               --data-binary '@-' `
-                               -D $tmpHeaders `
-                               -o $tmpResp `
-                               -w '%{http_code}' `
-                               "$env:DISCORD_FORGE_WEBHOOK"
-                      $status = [int]$rawStatus
-                      Write-Host "HTTP status: $status"
-
-                      if ($status -ge 200 -and $status -lt 300) {
-                          Write-Host "Forge announce POST succeeded."
-                          exit 0
-                      }
-
-                      $bodySnippet = ""
-                      if (Test-Path $tmpResp) {
-                          $bodySnippet = (Get-Content $tmpResp -Raw -ErrorAction SilentlyContinue)
-                          if ($bodySnippet.Length -gt 500) { $bodySnippet = $bodySnippet.Substring(0, 500) + " …" }
-                      }
-
-                      if ($status -ge 400 -and $status -lt 500) {
-                          # E2: 4xx is permanent — webhook revoked, channel deleted,
-                          # payload malformed. No retry.
-                          throw "E2: Discord-Webhook returned permanent $status. Body: $bodySnippet"
-                      }
-
-                      # E1: 5xx (or transport-level fail with status 0) — wait + retry once
-                      if ($attempt -lt $maxAttempts) {
-                          Write-Host "Transient $status — sleeping 30s before retry."
-                          Start-Sleep -Seconds 30
-                      } else {
-                          throw "E1: Discord-Webhook returned transient $status after $maxAttempts attempts. Body: $bodySnippet"
-                      }
-                  }

.github/workflows/release.yml

@@ -1,170 +0,0 @@
-name: Release
-
-# Triggered when a vX.Y.Z tag is pushed. Builds the plugin against the
-# current Dalamud staging branch, locates the latest.zip produced by
-# DalamudPackager and attaches it to the matching Gitea Release.
-#
-# User-controlled inputs touched by this workflow:
-#   - the tag name (filtered by on.tags = v*, validated again at runtime
-#     against ^v\d+\.\d+\.\d+$ before being used in any string)
-# All other values are either repo-controlled (paths under
-# HellionChat/bin/Release derived from find / Get-ChildItem) or pinned
-# URLs to goatcorp / gitea. Nothing from a webhook event payload (issue/PR
-# titles, commit messages, etc.) flows into a run-step.
-#
-# Linux runner: gitea.com Cloud Actions only ships ubuntu-latest. The
-# plugin csproj targets net10.0-windows, `dotnet build` cross-compiles on
-# Linux when the Dalamud staging assemblies sit under $(HOME)/.xlcore/...
-
-on:
-    push:
-        tags:
-            - "v*"
-    # Manual recovery trigger. Use when a tag was pushed but the auto-run
-    # was missed or failed: `gh workflow run release.yml -f tag=v0.6.1`.
-    # The tag input is validated against the same semver regex as the
-    # auto-trigger before any string interpolation happens.
-    workflow_dispatch:
-        inputs:
-            tag:
-                description: "Existing tag to (re)release, e.g. v0.6.1"
-                required: true
-                type: string
-
-permissions:
-    contents: write
-
-jobs:
-    release:
-        name: Build and attach release ZIP
-        runs-on: ubuntu-latest
-        timeout-minutes: 20
-
-        steps:
-            # On push:tags, github.ref_name is the tag — checkout default works.
-            # On workflow_dispatch, ref defaults to the branch the action was
-            # invoked from; we need to explicitly check out the tag the user
-            # supplied so the build comes from the tagged commit, not main.
-            - name: Checkout
-              uses: actions/checkout@v6
-              with:
-                  ref: ${{ github.event.inputs.tag || github.ref }}
-
-            - name: Setup .NET 10
-              uses: actions/setup-dotnet@v5
-              with:
-                  dotnet-version: 10.0.x
-
-            - name: Download Dalamud staging
-              run: |
-                  hooks="$HOME/.xlcore/dalamud/Hooks/dev"
-                  mkdir -p "$hooks"
-                  curl -fsSL https://goatcorp.github.io/dalamud-distrib/stg/latest.zip -o dalamud.zip
-                  unzip -oq dalamud.zip -d "$hooks"
-
-            - name: Build (Release)
-              run: dotnet build HellionChat/HellionChat.csproj --configuration Release
-
-            - name: Locate latest.zip
-              id: locate
-              run: |
-                  zip="$(find HellionChat/bin/Release -name latest.zip -print -quit)"
-                  if [ -z "$zip" ]; then
-                      echo "latest.zip not found under HellionChat/bin/Release" >&2
-                      exit 1
-                  fi
-                  echo "Found: $zip"
-                  echo "path=$zip" >> "$GITHUB_OUTPUT"
-
-            # Build a release body from the matching changelog block in
-            # HellionChat.yaml plus a static install / docs footer. Fails the
-            # workflow if no block exists for the tagged version, which is the
-            # automated counterpart to the "yaml + repo.json + release body
-            # kept in sync" rule.
-            #
-            # GITHUB_REF_NAME is read via env: (not ${{ }} interpolation) so the
-            # tag value is treated as a PowerShell variable, not as inline shell
-            # text. The strict regex below rejects anything that is not a clean
-            # semver tag before it is used to build a string.
-            - name: Generate release body
-              shell: pwsh
-              env:
-                  # workflow_dispatch carries the user-supplied tag in inputs.tag;
-                  # push:tags carries it in github.ref_name. Either way the value
-                  # is treated as a PowerShell variable (env-var pass), not as
-                  # inline shell text, and validated against the semver regex
-                  # below before any string interpolation.
-                  TAG_NAME: ${{ github.event.inputs.tag || github.ref_name }}
-              run: |
-                  $tag = $env:TAG_NAME
-                  if ($tag -notmatch '^v\d+\.\d+\.\d+$') {
-                      throw "Refusing to generate release body for non-semver tag: $tag"
-                  }
-                  $version = $tag.Substring(1)
-
-                  $yamlPath = "HellionChat/HellionChat.yaml"
-                  $raw = Get-Content -Path $yamlPath -Raw
-
-                  $marker = "changelog: |-"
-                  $idx = $raw.IndexOf($marker)
-                  if ($idx -lt 0) { throw "changelog block not found in $yamlPath" }
-
-                  # changelog: is the last top-level key in the manifest, so
-                  # everything after the marker is the literal block. Strip the
-                  # 2-space yaml indent from each line.
-                  $afterMarker = $raw.Substring($idx + $marker.Length)
-                  $changelogBody = (($afterMarker -split "`r?`n") | ForEach-Object {
-                      if ($_ -match '^  ') { $_.Substring(2) } else { $_ }
-                  }) -join "`n"
-
-                  $header = "**Hellion Chat $version"
-                  $start = $changelogBody.IndexOf($header)
-                  if ($start -lt 0) {
-                      throw "No changelog entry for version $version found in $yamlPath. Update the changelog block before tagging a release."
-                  }
-
-                  $rest = $changelogBody.Substring($start)
-                  $nextHdr = $rest.IndexOf("`n`n**Hellion Chat ", 1)
-                  $trailer = $rest.IndexOf("`n`n---")
-
-                  if ($nextHdr -ge 0 -and ($trailer -lt 0 -or $nextHdr -lt $trailer)) {
-                      $currentBlock = $rest.Substring(0, $nextHdr).TrimEnd()
-                  } elseif ($trailer -ge 0) {
-                      $currentBlock = $rest.Substring(0, $trailer).TrimEnd()
-                  } else {
-                      $currentBlock = $rest.TrimEnd()
-                  }
-
-                  # Static install / docs / licence footer is maintained as a
-                  # separate file so the workflow YAML stays clean (no embedded
-                  # heredoc that would have to be indented under the run-block).
-                  $footerPath = ".github/release-footer.md"
-                  if (-not (Test-Path $footerPath)) {
-                      throw "Release footer template not found: $footerPath"
-                  }
-                  $footer = Get-Content -Path $footerPath -Raw
-
-                  $body = $currentBlock + "`n" + $footer
-                  $body | Out-File -FilePath release-body.md -Encoding utf8 -NoNewline
-
-                  Write-Host "Generated release body for $tag :"
-                  Write-Host "----------------------------------------"
-                  Write-Host $body
-                  Write-Host "----------------------------------------"
-
-            # Gitea-native release action. Creates the release if the tag has no
-            # release yet, or updates the existing one. body_path provides the
-            # generated release body, files attaches latest.zip. The auto-injected
-            # GITHUB_TOKEN on Gitea Actions has Gitea-API scope and is sufficient
-            # for release write.
-            - name: Attach to Gitea release
-              uses: https://gitea.com/actions/release-action@main
-              with:
-                  # Explicit tag_name so the action targets the correct release in
-                  # both push:tags (auto) and workflow_dispatch (manual recovery)
-                  # modes. Without this, dispatch runs would default to the branch
-                  # ref (main) and fail to find the release.
-                  tag_name: ${{ github.event.inputs.tag || github.ref_name }}
-                  files: ${{ steps.locate.outputs.path }}
-                  body_path: release-body.md
-                  api_key: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -1,37 +1,193 @@
-## Ignore Visual Studio temporary files, build results, and
+##############################################################
-## files generated by popular Visual Studio add-ons.
 ##
-## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
+##   .gitignore – Hellion Forge / Hellion Media
+##
+##   Basis:        github/gitignore VisualStudio.gitignore
+##   Überarbeitet: Mai 2026
+##   Status:       Original-Patterns vollständig erhalten,
+##                 neu sortiert in logische Sektionen,
+##                 Sicherheits- & Tooling-Sektionen ergänzt.
+##
+##   Markierungen:
+##     [!! OBSOLET 2026 !!]  → Tool offiziell eingestellt,
+##                             Pattern bleibt aus Vorsicht drin.
+##
+##############################################################
 
-# Local development environment (HellionChat fork)
+
+# =====================================================
+# [!! KRITISCH !!]  Secrets, Keys & Credentials
+# Diese Sachen dürfen NIEMALS im Repo landen!
+# =====================================================
+
+# Environment Files
 .env
+.env.*
 .env.bak*
 .envrc
 !.env.example
+!.env.sample
+
+# Private Keys & Zertifikate
+*.pem
+*.key
+*.p12
+*.pfx
+*.cer
+*.crt
+*.csr
+*.gpg
+*.asc
+
+# SSH Keys (falls jemand die ins Repo legt)
+id_rsa
+id_ed25519
+id_ecdsa
+known_hosts
+
+# Auth-/Token-Files
+auth.json
+.npmrc
+.pypirc
+secrets.json
+
+# ASP.NET / .NET App-Configs mit lokalen Secrets
+appsettings.*.local.json
+appsettings.Local.json
+local.settings.json
+
+# Memory Dumps (können Credentials im Heap enthalten!)
+*.dmp
+*.mdmp
+crash.log
+
+
+# =====================================================
+# Projekt-spezifisch (HellionChat Fork)
+# =====================================================
+
+# Lokale Entwicklungsumgebung
 .vscode/
 scripts/setup-dev-env.sh
 
-# Local test project (stays out of the published plugin repo;
+# Lokales Test-Projekt (bleibt aus dem Plugin-Repo raus;
-# pure-function safety net for refactor cycles)
+# pure-function safety net für Refactor-Cycles)
 HellionChat.Tests/
+ChatTwo.Tests
+TestResults
+*.db-shm
+*.db-wal
 
 # Packaging
 pack/
 
-# User-specific files
+# Specs und Plan-Dateien
+/.superpowers/
+
+# Claude Code lokales Setup (nicht committed)
+/.claude/
+/CLAUDE.md
+
+# Cycle-Working-Notes (im Vault gepflegt, lokales Repo-Pad bei Bedarf)
+/docs/cycle-notes/
+
+
+# =====================================================
+# OS-spezifische Files
+# =====================================================
+
+# macOS
+.DS_Store
+.AppleDouble
+.LSOverride
+._*
+
+# Windows
+Thumbs.db
+ehthumbs.db
+Desktop.ini
+$RECYCLE.BIN/
+
+# Linux
+.directory
+.Trash-*
+
+
+# =====================================================
+# AI / LLM Tooling (2026 era)
+# =====================================================
+
+# Cursor IDE
+.cursor/
+.cursorignore
+
+# Aider
+.aider*
+
+# Continue.dev
+.continue/
+.continuerc.json
+
+# Windsurf
+.windsurf/
+
+# Sourcegraph Cody
+.cody/
+
+# Lokale Prompt-Sammlungen / Scratch-Pads
+prompts/local/
+
+
+# =====================================================
+# Editor & IDE (neben Visual Studio)
+# =====================================================
+
+# JetBrains (IntelliJ, Rider, etc.)
+.idea/
+
+# Vim / Neovim
+*.swp
+*.swo
+*.swn
+
+# Sublime Text
+*.sublime-workspace
+*.sublime-project
+
+
+# =====================================================
+# IDE & Editor – User-spezifische Files (VS)
+# =====================================================
+
+# Visual Studio User Files
 *.rsuser
 *.suo
 *.user
 *.userosscache
 *.sln.docstates
 
-# User-specific files (MonoDevelop/Xamarin Studio)
+# MonoDevelop/Xamarin Studio
 *.userprefs
 
-# Mono auto generated files
+# Visual Studio Cache/Options Directory
-mono_crash.*
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto-generated files
+Generated\ Files/
+
+# Local History
+.localhistory/
+
+# CodeRush personal settings
+.cr/personal
+
+
+# =====================================================
+# Build Output
+# =====================================================
 
-# Build results
 [Dd]ebug/
 [Dd]ebugPublic/
 [Rr]elease/
@@ -47,43 +203,24 @@ bld/
 [Ll]og/
 [Ll]ogs/
 
-# Visual Studio 2015/2017 cache/options directory
+# ATL Project Build Output
-.vs/
-# Uncomment if you have tasks that create the project's static files in wwwroot
-#wwwroot/
-
-# Visual Studio 2017 auto generated files
-Generated\ Files/
-
-# MSTest test Results
-[Tt]est[Rr]esult*/
-[Bb]uild[Ll]og.*
-
-# NUnit
-*.VisualState.xml
-TestResult.xml
-nunit-*.xml
-
-# Build Results of an ATL Project
 [Dd]ebugPS/
 [Rr]eleasePS/
 dlldata.c
 
-# Benchmark Results
-BenchmarkDotNet.Artifacts/
-
 # .NET Core
 project.lock.json
 project.fragment.lock.json
 artifacts/
 
-# ASP.NET Scaffolding
+# MigrationBackup (Package Reference Convert Tool)
-ScaffoldingReadMe.txt
+MigrationBackup/
 
-# StyleCop
-StyleCopReport.xml
 
-# Files built by Visual Studio
+# =====================================================
+# Build-Artefakte (Files built by Visual Studio)
+# =====================================================
+
 *_i.c
 *_p.c
 *_h.h
@@ -105,6 +242,7 @@ StyleCopReport.xml
 *.tmp_proj
 *_wpftmp.csproj
 *.log
+*.binlog
 *.vspscc
 *.vssscc
 .builds
@@ -112,10 +250,87 @@ StyleCopReport.xml
 *.svclog
 *.scc
 
-# Chutzpah Test files
+
+# =====================================================
+# Test Results
+# =====================================================
+
+# MSTest
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUnit
+*.VisualState.xml
+TestResult.xml
+nunit-*.xml
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# Verify / Snapshot Testing (modern .NET, Spotty Wisdom)
+*.received.*
+*.received.txt
+
+# [!! OBSOLET 2026 !!] Chutzpah – Repository auf GitHub archiviert
 _Chutzpah*
 
+
+# =====================================================
+# Code Coverage
+# =====================================================
+
+# Coverlet
+coverage*.json
+coverage*.xml
+coverage*.info
+
+# Visual Studio code coverage
+*.coverage
+*.coveragexml
+
+# DotCover (JetBrains)
+*.dotCover
+
+# AxoCover
+.axoCover/*
+!.axoCover/settings.json
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# OpenCover UI Analysis
+OpenCover/
+
+# [!! OBSOLET 2026 !!] MightyMoose / AutoTest.Net – seit >10 Jahren nicht mehr gepflegt
+*.mm.*
+AutoTest.Net/
+
+
+# =====================================================
+# Profiler & Trace
+# =====================================================
+
+# Visual Studio Profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# NVidia Nsight GPU Debugger
+*.nvuser
+
+
+# =====================================================
+# Cache Files (VS, C++, Sass)
+# =====================================================
+
 # Visual C++ cache files
+# Hinweis: Manche Patterns hier werden auch vom C#-Linter genutzt (z. B. *.lscache)
 ipch/
 *.aps
 *.ncb
@@ -125,101 +340,80 @@ ipch/
 *.cachefile
 *.VC.db
 *.VC.VC.opendb
+*.lscache
 
-# Visual Studio profiler
+# Visual Studio cache (.cache files allgemein, .cache directories behalten)
-*.psess
+*.[Cc]ache
-*.vsp
+!?*.[Cc]ache/
-*.vspx
-*.sap
 
-# Visual Studio Trace Files
+# Web Workbench Sass
-*.e2e
-
-# TFS 2012 Local Workspace
-$tf/
-
-# Guidance Automation Toolkit
-*.gpState
-
-# ReSharper is a .NET coding add-in
-_ReSharper*/
-*.[Rr]e[Ss]harper
-*.DotSettings.user
-
-# TeamCity is a build add-in
-_TeamCity*
-
-# DotCover is a Code Coverage Tool
-*.dotCover
-
-# AxoCover is a Code Coverage Tool
-.axoCover/*
-!.axoCover/settings.json
-
-# Coverlet is a free, cross platform Code Coverage Tool
-coverage*.json
-coverage*.xml
-coverage*.info
-
-# Visual Studio code coverage results
-*.coverage
-*.coveragexml
-
-# NCrunch
-_NCrunch_*
-.*crunch*.local.xml
-nCrunchTemp_*
-
-# MightyMoose
-*.mm.*
-AutoTest.Net/
-
-# Web workbench (sass)
 .sass-cache/
 
-# Installshield output folder
-[Ee]xpress/
 
-# DocProject is a documentation generator add-in
+# =====================================================
-DocProject/buildhelp/
+# NuGet & Dependencies
-DocProject/Help/*.HxT
+# =====================================================
-DocProject/Help/*.HxC
-DocProject/Help/*.hhc
-DocProject/Help/*.hhk
-DocProject/Help/*.hhp
-DocProject/Help/Html2
-DocProject/Help/html
-
-# Click-Once directory
-publish/
-
-# Publish Web Output
-*.[Pp]ublish.xml
-*.azurePubxml
-# Note: Comment the next line if you want to checkin your web deploy settings,
-# but database connection strings (with potential passwords) will be unencrypted
-*.pubxml
-*.publishproj
-
-# Microsoft Azure Web App publish settings. Comment the next line if you want to
-# checkin your Azure Web App publish settings, but sensitive information contained
-# in these scripts will be unencrypted
-PublishScripts/
 
 # NuGet Packages
 *.nupkg
-# NuGet Symbol Packages
 *.snupkg
-# The packages folder can be ignored because of Package Restore
 **/[Pp]ackages/*
-# except build/, which is used as an MSBuild target.
 !**/[Pp]ackages/build/
 # Uncomment if necessary however generally it will be regenerated when needed
 #!**/[Pp]ackages/repositories.config
-# NuGet v3's project.json files produces more ignorable files
 *.nuget.props
 *.nuget.targets
 
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Fody – auto-generated XML schema
+FodyWeavers.xsd
+
+# Node (falls JS-Tooling im Build genutzt wird)
+.ntvs_analysis.dat
+node_modules/
+
+# Python Tools für Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+
+# =====================================================
+# Mono
+# =====================================================
+
+mono_crash.*
+
+
+# =====================================================
+# Publish & Deploy
+# =====================================================
+
+# Click-Once
+publish/
+
+# Publish Web Output
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.[Pp]ublish.xml
+*.azurePubxml
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App Publish Settings
+# Comment the next line if you want to checkin your Azure Web App publish settings,
+# but sensitive information contained in these scripts will be unencrypted
+PublishScripts/
+
 # Microsoft Azure Build Output
 csx/
 *.build.csdef
@@ -228,7 +422,35 @@ csx/
 ecf/
 rcf/
 
-# Windows Store app package directories and files
+# Service Fabric Backup
+ServiceFabricBackup/
+
+# Installshield
+[Ee]xpress/
+
+
+# =====================================================
+# Container / Infrastructure-as-Code (Vorsicht: Tokens!)
+# =====================================================
+
+# Docker
+docker-compose.override.yml
+
+# Terraform
+.terraform/
+*.tfstate
+*.tfstate.*
+*.tfvars
+!example.tfvars
+
+# Serverless Framework
+.serverless/
+
+
+# =====================================================
+# Windows Store / AppX
+# =====================================================
+
 AppPackages/
 BundleArtifacts/
 Package.StoreAssociation.xml
@@ -237,23 +459,155 @@ _pkginfo.txt
 *.appxbundle
 *.appxupload
 
-# Visual Studio cache files
-# files ending in .cache can be ignored
-*.[Cc]ache
-# but keep track of directories ending in .cache
-!?*.[Cc]ache/
 
-# Others
+# =====================================================
-ClientBin/
+# Datenbanken & SQL
-~$*
+# =====================================================
-*~
+
+# SQL Server
+*.mdf
+*.ldf
+*.ndf
+
+# Andere DB-bezogene
 *.dbmdl
 *.dbproj.schemaview
 *.jfm
-*.pfx
+
-*.publishsettings
+# [!! OBSOLET 2026 !!] BeatPulse – wurde 2019 umbenannt zu AspNetCore.Diagnostics.HealthChecks
+healthchecksdb
+
+
+# =====================================================
+# Business Intelligence / Reporting
+# =====================================================
+
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+*- [Bb]ackup.rdl
+*- [Bb]ackup ([0-9]).rdl
+*- [Bb]ackup ([0-9][0-9]).rdl
+*.rptproj.bak
+
+
+# =====================================================
+# Add-ins & Analyzer Tools
+# =====================================================
+
+# ReSharper
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# TeamCity
+_TeamCity*
+
+# StyleCop
+StyleCopReport.xml
+
+# ASP.NET Scaffolding
+ScaffoldingReadMe.txt
+
+# Guidance Automation Toolkit
+*.gpState
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# [!! OBSOLET 2026 !!] GhostDoc Plugin – Submain hat das Tool eingestellt
+*.GhostDoc.xml
+
+# Tabs Studio
+*.tss
+
+# Telerik JustMock
+*.jmconfig
+
+# MFractors (Xamarin productivity tool)
+.mfractor/
+
+# DocProject Documentation Generator
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+
+# =====================================================
+# Sonstige Sprachen & Tooling
+# =====================================================
+
+# Ionide (F# VS Code Tools)
+.ionide/
+
+# Azure Stream Analytics Local Run
+ASALocalRun/
+
+# BizTalk Build Output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# Orleans
 orleans.codegen.cs
 
+
+# =====================================================
+# [!! OBSOLET 2026 !!]  Legacy-Tooling (eingestellt)
+# Patterns bleiben aus Vorsicht drin.
+# =====================================================
+
+# [!! OBSOLET 2026 !!] TFS 2012 Local Workspace – ersetzt durch Azure DevOps
+$tf/
+
+# [!! OBSOLET 2026 !!] Visual Studio 6 Build Log – VS6 ist von 1998
+*.plg
+
+# [!! OBSOLET 2026 !!] Visual Studio 6 Workspace Options
+*.opt
+
+# [!! OBSOLET 2026 !!] Visual Studio 6 Workspace File
+*.vbw
+
+# [!! OBSOLET 2026 !!] RIA / Silverlight – Microsoft hat das Okt. 2021 eingestellt
+Generated_Code/
+
+# [!! OBSOLET 2026 !!] Visual Studio LightSwitch – von Microsoft eingestellt
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+
+# =====================================================
+# Upgrade / Backup-Reports
+# =====================================================
+
+# Backup-Files vom Konvertieren alter VS-Projekte (wir haben ja git ;-))
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+
+
+# =====================================================
+# Misc / Temp / Backup
+# =====================================================
+
+ClientBin/
+~$*
+*~
+*.publishsettings
+
 # Including strong name files can present a security risk
 # (https://github.com/github/gitignore/pull/2483#issue-259490424)
 #*.snk
@@ -261,126 +615,3 @@ orleans.codegen.cs
 # Since there are multiple workflows, uncomment next line to ignore bower_components
 # (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
 #bower_components/
-
-# RIA/Silverlight projects
-Generated_Code/
-
-# Backup & report files from converting an old project file
-# to a newer Visual Studio version. Backup files are not needed,
-# because we have git ;-)
-_UpgradeReport_Files/
-Backup*/
-UpgradeLog*.XML
-UpgradeLog*.htm
-ServiceFabricBackup/
-*.rptproj.bak
-
-# SQL Server files
-*.mdf
-*.ldf
-*.ndf
-
-# Business Intelligence projects
-*.rdl.data
-*.bim.layout
-*.bim_*.settings
-*.rptproj.rsuser
-*- [Bb]ackup.rdl
-*- [Bb]ackup ([0-9]).rdl
-*- [Bb]ackup ([0-9][0-9]).rdl
-
-# Microsoft Fakes
-FakesAssemblies/
-
-# GhostDoc plugin setting file
-*.GhostDoc.xml
-
-# Node.js Tools for Visual Studio
-.ntvs_analysis.dat
-node_modules/
-
-# Visual Studio 6 build log
-*.plg
-
-# Visual Studio 6 workspace options file
-*.opt
-
-# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
-*.vbw
-
-# Visual Studio LightSwitch build output
-**/*.HTMLClient/GeneratedArtifacts
-**/*.DesktopClient/GeneratedArtifacts
-**/*.DesktopClient/ModelManifest.xml
-**/*.Server/GeneratedArtifacts
-**/*.Server/ModelManifest.xml
-_Pvt_Extensions
-
-# Paket dependency manager
-.paket/paket.exe
-paket-files/
-
-# FAKE - F# Make
-.fake/
-
-# CodeRush personal settings
-.cr/personal
-
-# Python Tools for Visual Studio (PTVS)
-__pycache__/
-*.pyc
-
-# Cake - Uncomment if you are using it
-# tools/**
-# !tools/packages.config
-
-# Tabs Studio
-*.tss
-
-# Telerik's JustMock configuration file
-*.jmconfig
-
-# BizTalk build output
-*.btp.cs
-*.btm.cs
-*.odx.cs
-*.xsd.cs
-
-# OpenCover UI analysis results
-OpenCover/
-
-# Azure Stream Analytics local run output
-ASALocalRun/
-
-# MSBuild Binary and Structured Log
-*.binlog
-
-# NVidia Nsight GPU debugger configuration file
-*.nvuser
-
-# MFractors (Xamarin productivity tool) working folder
-.mfractor/
-
-# Local History for Visual Studio
-.localhistory/
-
-# BeatPulse healthcheck temp database
-healthchecksdb
-
-# Backup folder for Package Reference Convert tool in Visual Studio 2017
-MigrationBackup/
-
-# Ionide (cross platform F# VS Code tools) working folder
-.ionide/
-
-# Fody - auto-generated XML schema
-FodyWeavers.xsd
-
-#Specs und Plan datein
-/.superpowers/
-
-#Test Datein
-ChatTwo.Tests
-TestResults
-*.db-shm
-*.db-wal

.markdownlint.json

@@ -1,7 +1,17 @@
 {
-    "MD007": { "indent": 4 },
+    "MD003": { "style": "atx" },
+    "MD004": { "style": "dash" },
+    "MD007": { "indent": 2 },
+    "MD009": { "br_spaces": 2, "strict": false, "list_item_empty_lines": false },
     "MD013": false,
+    "MD024": { "siblings_only": true },
     "MD029": false,
     "MD033": false,
-    "MD041": false
+    "MD036": false,
+    "MD040": true,
+    "MD041": false,
+    "MD046": { "style": "fenced" },
+    "MD048": { "style": "backtick" },
+    "MD049": { "style": "underscore" },
+    "MD050": { "style": "asterisk" }
 }

.prettierignore

@@ -1,4 +1,50 @@
+# ##############################################################
+# #
+# #   .prettierignore – Hellion Forge / Hellion Media
+# #
+# #   Files die Prettier NICHT anfassen soll.
+# #   Überarbeitet: Mai 2026
+# #
+# #   Hinweis: Prettier liest auch .gitignore automatisch mit.
+# #   Hier nur Sachen die zusätzlich ignoriert werden müssen
+# #   oder die im Repo liegen aber nicht formatiert werden dürfen.
+# #
+# ##############################################################
+
+
+# === .NET Build Output ===
 bin/
 obj/
+
+# === JS / Web Build Output ===
 node_modules/
+dist/
+out/
+build/
+coverage/
+
+# === Generierte C#-Files (Designer, Source Generators) ===
 *.Designer.cs
+*.g.cs
+*.g.i.cs
+*.generated.cs
+*.AssemblyInfo.cs
+*.AssemblyAttributes.cs
+
+# === Lock-Files (NIE umformatieren – zerschießt den Hash) ===
+package-lock.json
+yarn.lock
+pnpm-lock.yaml
+packages.lock.json
+
+# === Minified Files (bewusst kompakt, niemals anfassen) ===
+*.min.js
+*.min.css
+
+# === Test-Snapshots (z. B. Verify) ===
+*.received.*
+*.verified.*
+**/__snapshots__/
+
+# === Plugin-Manifest (DalamudPackager-Schema, fix lassen) ===
+HellionChat/HellionChat.yaml

.prettierrc.json

@@ -1,7 +1,35 @@
 {
     "printWidth": 120,
     "tabWidth": 4,
-    "proseWrap": "always",
+    "useTabs": false,
+    "semi": true,
     "singleQuote": false,
-    "endOfLine": "lf"
+    "trailingComma": "all",
+    "bracketSpacing": true,
+    "arrowParens": "always",
+    "proseWrap": "always",
+    "endOfLine": "lf",
+    "overrides": [
+        {
+            "files": "*.md",
+            "options": {
+                "printWidth": 100,
+                "tabWidth": 2
+            }
+        },
+        {
+            "files": ["*.yml", "*.yaml"],
+            "options": {
+                "tabWidth": 2,
+                "singleQuote": true
+            }
+        },
+        {
+            "files": "*.json",
+            "options": {
+                "tabWidth": 4,
+                "trailingComma": "none"
+            }
+        }
+    ]
 }

.yamllint.yaml

@@ -1,8 +1,53 @@
+# ##############################################################
+# #
+# #   .yamllint.yaml – Hellion Forge / Hellion Media
+# #
+# #   YAML-Linting Konfiguration.
+# #   Überarbeitet: Mai 2026
+# #
+# #   Regel-Doku:
+# #     https://yamllint.readthedocs.io/en/stable/rules.html
+# #
+# ##############################################################
+
 extends: default
+
+# Plugin-Manifest folgt DalamudPackager-Konvention (4-space-indent für
+# image_urls + tags). yamllint-Default verlangt 2 — Konflikt, daher
+# ignorieren statt das Manifest zu reformatieren.
+ignore: |
+  HellionChat/HellionChat.yaml
+
 rules:
+  # Zeilenlängen-Check aus (konsistent mit markdownlint MD013)
   line-length: disable
+
+  # YAML ohne führendes "---" erlaubt
   document-start: disable
+
+  # GitHub Actions nutzt "on:" als Trigger-Key.
+  # Ohne diesen Override würde yamllint das als boolean "on" beklagen.
   truthy:
-        allowed-values: ["true", "false", "on"]
+    allowed-values: ['true', 'false', 'on']
+
+  # Maximal 1 Leerzeile in Folge (saubere Files)
   empty-lines:
     max: 1
+
+  # YAML-Standard ist 2 Spaces (auch GitHub Actions erwartet das).
+  # Explizit setzen, um Konsistenz im Repo zu erzwingen.
+  indentation:
+    spaces: 2
+    indent-sequences: true
+    check-multi-line-strings: false
+
+  # Kommentare brauchen Space nach #, müssen mit Content beginnen
+  comments:
+    require-starting-space: true
+    min-spaces-from-content: 1
+
+  # Kein Whitespace am Zeilenende
+  trailing-spaces: enable
+
+  # Datei muss mit Newline enden
+  new-line-at-end-of-file: enable

CODE_OF_CONDUCT.md

@@ -2,14 +2,15 @@
 
 ## A Note on This Project
 
-HellionChat is a one-person side project developed under Hellion Forge. I maintain this in my spare time, which means
+HellionChat is a one-person side project developed under Hellion Forge. I maintain this in my spare
-replies can take a few days. Please do not escalate just because a thread is quiet.
+time, which means replies can take a few days. Please do not escalate just because a thread is
+quiet.
 
-When in doubt, assume good intent. Contributors come from different backgrounds, time zones and skill levels. A
+When in doubt, assume good intent. Contributors come from different backgrounds, time zones and
-clarifying question is almost always a better first move than an accusation.
+skill levels. A clarifying question is almost always a better first move than an accusation.
 
-Please also keep discussions on topic. This project is about a Dalamud chat plugin. Off-topic arguments belong
+Please also keep discussions on topic. This project is about a Dalamud chat plugin. Off-topic
-elsewhere.
+arguments belong elsewhere.
 
 ---
 
@@ -17,20 +18,21 @@ elsewhere.
 
 We pledge to make our community welcoming, safe, and equitable for all.
 
-We are committed to fostering an environment that respects and promotes the dignity, rights, and contributions of all
+We are committed to fostering an environment that respects and promotes the dignity, rights, and
-individuals, regardless of characteristics including race, ethnicity, caste, color, age, physical characteristics,
+contributions of all individuals, regardless of characteristics including race, ethnicity, caste,
-neurodiversity, disability, sex or gender, gender identity or expression, sexual orientation, language, philosophy or
+color, age, physical characteristics, neurodiversity, disability, sex or gender, gender identity or
-religion, national or social origin, socio-economic position, level of education, or other status. The same privileges
+expression, sexual orientation, language, philosophy or religion, national or social origin,
-of participation are extended to everyone who participates in good faith and in accordance with this Covenant.
+socio-economic position, level of education, or other status. The same privileges of participation
+are extended to everyone who participates in good faith and in accordance with this Covenant.
 
 ## Encouraged Behaviors
 
-While acknowledging differences in social norms, we all strive to meet our community's expectations for positive
+While acknowledging differences in social norms, we all strive to meet our community's expectations
-behavior. We also understand that our words and actions may be interpreted differently than we intend based on culture,
+for positive behavior. We also understand that our words and actions may be interpreted differently
-background, or native language.
+than we intend based on culture, background, or native language.
 
-With these considerations in mind, we agree to behave mindfully toward each other and act in ways that center our shared
+With these considerations in mind, we agree to behave mindfully toward each other and act in ways
-values, including:
+that center our shared values, including:
 
 1. Respecting the **purpose of our community**, our activities, and our ways of gathering.
 2. Engaging **kindly and honestly** with others.
@@ -42,31 +44,32 @@ values, including:
 
 ## Restricted Behaviors
 
-We agree to restrict the following behaviors in our community. Instances, threats, and promotion of these behaviors are
+We agree to restrict the following behaviors in our community. Instances, threats, and promotion of
-violations of this Code of Conduct.
+these behaviors are violations of this Code of Conduct.
 
-1. **Harassment.** Violating explicitly expressed boundaries or engaging in unnecessary personal attention after any
+1. **Harassment.** Violating explicitly expressed boundaries or engaging in unnecessary personal
-   clear request to stop.
+   attention after any clear request to stop.
-2. **Character attacks.** Making insulting, demeaning, or pejorative comments directed at a community member or group of
+2. **Character attacks.** Making insulting, demeaning, or pejorative comments directed at a
-   people.
+   community member or group of people.
-3. **Stereotyping or discrimination.** Characterizing anyone's personality or behavior on the basis of immutable
+3. **Stereotyping or discrimination.** Characterizing anyone's personality or behavior on the basis
-   identities or traits.
+   of immutable identities or traits.
-4. **Sexualization.** Behaving in a way that would generally be considered inappropriately intimate in the context or
+4. **Sexualization.** Behaving in a way that would generally be considered inappropriately intimate
-   purpose of the community.
+   in the context or purpose of the community.
-5. **Violating confidentiality.** Sharing or acting on someone's personal or private information without their
+5. **Violating confidentiality.** Sharing or acting on someone's personal or private information
-   permission.
+   without their permission.
-6. **Endangerment.** Causing, encouraging, or threatening violence or other harm toward any person or group.
+6. **Endangerment.** Causing, encouraging, or threatening violence or other harm toward any person
+   or group.
 7. Behaving in other ways that **threaten the well-being** of our community.
 
 ### Other Restrictions
 
-1. **Misleading identity.** Impersonating someone else for any reason, or pretending to be someone else to evade
+1. **Misleading identity.** Impersonating someone else for any reason, or pretending to be someone
-   enforcement actions.
+   else to evade enforcement actions.
 2. **Failing to credit sources.** Not properly crediting the sources of content you contribute.
-3. **Promotional materials.** Sharing marketing or other commercial content in a way that is outside the norms of the
+3. **Promotional materials.** Sharing marketing or other commercial content in a way that is outside
-   community.
+   the norms of the community.
-4. **Irresponsible communication.** Failing to responsibly present content which includes, links to, or describes any
+4. **Irresponsible communication.** Failing to responsibly present content which includes, links to,
-   other restricted behaviors.
+   or describes any other restricted behaviors.
 
 ## Reporting
 
@@ -77,12 +80,13 @@ If something here is being broken, contact me directly. Do not open a public iss
 | Email      | `kontakt@hellion-media.de` |
 | Discord DM | `@j.j_kazama`              |
 
-Reports stay private. I will acknowledge within a few weekdays (European business hours) and tell you what I plan to do.
+Reports stay private. I will acknowledge within a few weekdays (European business hours) and tell
+you what I plan to do.
 
 ## Enforcement
 
-I am the sole maintainer, so enforcement is a single-person process. I will pick the lightest measure that actually
+I am the sole maintainer, so enforcement is a single-person process. I will pick the lightest
-resolves the situation:
+measure that actually resolves the situation:
 
 1. Private note asking the behaviour to stop.
 2. Public correction in the affected thread.
@@ -95,16 +99,16 @@ Severe cases skip the lower steps. I will not negotiate over harassment or threa
 
 ## Scope
 
-This Code of Conduct applies to all spaces the project owns or that I run on its behalf: the GitHub repository, GitHub
+This Code of Conduct applies to all spaces the project owns or that I run on its behalf: the GitHub
-Discussions, project-related Discord conversations, and the maintainer contact listed in [`SECURITY.md`](SECURITY.md).
+repository, GitHub Discussions, project-related Discord conversations, and the maintainer contact
-It also applies when someone is identifiably representing HellionChat elsewhere, for example when posting as a
+listed in [`SECURITY.md`](SECURITY.md). It also applies when someone is identifiably representing
-HellionChat maintainer in the Dalamud Discord.
+HellionChat elsewhere, for example when posting as a HellionChat maintainer in the Dalamud Discord.
 
 ## Attribution
 
 This Code of Conduct is adapted from the Contributor Covenant, version 3.0, available at
 [https://www.contributor-covenant.org/version/3/0/](https://www.contributor-covenant.org/version/3/0/).
 
-Contributor Covenant is stewarded by the Organization for Ethical Source and licensed under CC BY-SA 4.0. To view a copy
+Contributor Covenant is stewarded by the Organization for Ethical Source and licensed under CC BY-SA
-of this license, visit
+4.0. To view a copy of this license, visit
 [https://creativecommons.org/licenses/by-sa/4.0/](https://creativecommons.org/licenses/by-sa/4.0/).

CONTRIBUTING.md

@@ -1,69 +1,75 @@
 # Contributing to HellionChat
 
-Thanks for taking a look. HellionChat is a one-person side project developed under Hellion Forge. It started as a fork
+Thanks for taking a look. HellionChat is a one-person side project developed under Hellion Forge. It
-of [Chat 2](https://github.com/Infiziert90/ChatTwo) and has since become a standalone plugin under its own namespace,
+started as a fork of [Chat 2](https://github.com/Infiziert90/ChatTwo) and has since become a
-IPC channels and source tree (standalone-cut completed in v1.0.0). Forking HellionChat itself is explicitly permitted
+standalone plugin under its own namespace, IPC channels and source tree (standalone-cut completed in
-under the EUPL-1.2.
+v1.0.0). Forking HellionChat itself is explicitly permitted under the EUPL-1.2.
 
-This document explains what I am looking for, what I am not, and how to make a contribution land smoothly.
+This document explains what I am looking for, what I am not, and how to make a contribution land
+smoothly.
 
 ## Before You Open Anything
 
-- Read the [README](README.md) so you understand the scope: a privacy-focused, EUPL-1.2-licensed Dalamud plugin that
+- Read the [README](README.md) so you understand the scope: a privacy-focused, EUPL-1.2-licensed
-  intentionally removes the upstream webinterface and ships privacy-first defaults.
+  Dalamud plugin that intentionally removes the upstream webinterface and ships privacy-first
-- Read [`docs/UPSTREAM_SYNC.md`](docs/UPSTREAM_SYNC.md). Active cherry-picking from upstream Chat 2 has ended in the
+  defaults.
-  v1.4.x cycle; HellionChat continues as an independent codebase. Existing upstream-derived code keeps its attribution.
+- Read [`docs/UPSTREAM_SYNC.md`](docs/UPSTREAM_SYNC.md). Active cherry-picking from upstream Chat 2
-  New contributions stand on their own and do not need to be cherry-pick-compatible.
+  has ended in the v1.4.x cycle; HellionChat continues as an independent codebase. Existing
-- Read [`SECURITY.md`](SECURITY.md). Anything security-sensitive goes through a private advisory, never a public issue
+  upstream-derived code keeps its attribution. New contributions stand on their own and do not need
-  or PR.
+  to be cherry-pick-compatible.
+- Read [`SECURITY.md`](SECURITY.md). Anything security-sensitive goes through a private advisory,
+  never a public issue or PR.
 - Read the [Code of Conduct](CODE_OF_CONDUCT.md).
 
 ## What I Will Accept
 
 - Bug fixes for behaviour documented in the README, the in-plugin settings or the changelog.
 - Translation contributions for Hellion-specific strings via direct pull requests against
-  `HellionChat/Resources/HellionStrings.*.resx`. Translations for upstream Chat 2 strings (`Language.*.resx`) are not
+  `HellionChat/Resources/HellionStrings.*.resx`. Translations for upstream Chat 2 strings
-  handled here; those go to the upstream Chat 2 project.
+  (`Language.*.resx`) are not handled here; those go to the upstream Chat 2 project.
 - Documentation improvements (README, comments, this file).
 - Performance fixes with a measurable before/after.
-- New features that fit the privacy-first scope and do not duplicate what an existing Dalamud plugin already does well.
+- New features that fit the privacy-first scope and do not duplicate what an existing Dalamud plugin
+  already does well.
 
 ## What I Will Probably Decline
 
-- Re-introducing the webinterface or any remote-access feature. It was removed in v0.2.0 on purpose. See the README
+- Re-introducing the webinterface or any remote-access feature. It was removed in v0.2.0 on purpose.
-  section "Was gegenüber Chat 2 fehlt".
+  See the README section "Was gegenüber Chat 2 fehlt".
-- Features that bypass the privacy filter or weaken the default retention behaviour without an explicit, documented
+- Features that bypass the privacy filter or weaken the default retention behaviour without an
-  opt-in.
+  explicit, documented opt-in.
-- Sweeping refactors that touch large parts of the codebase. The maintenance cost outweighs the benefit for a one-person
+- Sweeping refactors that touch large parts of the codebase. The maintenance cost outweighs the
-  project. (This used to be doubly important because of the upstream cherry-pick path; that path is closed now, but the
+  benefit for a one-person project. (This used to be doubly important because of the upstream
-  rule still holds on its own merits.)
+  cherry-pick path; that path is closed now, but the rule still holds on its own merits.)
-- AI-generated code dropped in without disclosure or human review. See [`docs/AI_DISCLOSURE.md`](docs/AI_DISCLOSURE.md)
+- AI-generated code dropped in without disclosure or human review. See
-  for how I handle AI assistance on my side; I expect comparable transparency from contributors.
+  [`docs/AI_DISCLOSURE.md`](docs/AI_DISCLOSURE.md) for how I handle AI assistance on my side; I
+  expect comparable transparency from contributors.
 
-If you are unsure whether an idea fits, open a feature-request issue first and ask before writing code. I would rather
+If you are unsure whether an idea fits, open a feature-request issue first and ask before writing
-say "no" to a proposal than to a finished pull request.
+code. I would rather say "no" to a proposal than to a finished pull request.
 
 ## Workflow
 
-1. Open an issue (bug or feature request) using the templates under `.github/ISSUE_TEMPLATE/`. Skip this for trivial
+1. Open an issue (bug or feature request) using the templates under `.github/ISSUE_TEMPLATE/`. Skip
-   typos.
+   this for trivial typos.
-2. Fork the repository and branch off `main`. Branch naming is informal; something like `fix/auto-tell-history-empty` or
+2. Fork the repository and branch off `main`. Branch naming is informal; something like
-   `feat/theme-export` is fine.
+   `fix/auto-tell-history-empty` or `feat/theme-export` is fine.
-3. Match the existing code style. The repository ships an `.editorconfig` that VS Code and Rider pick up automatically.
+3. Match the existing code style. The repository ships an `.editorconfig` that VS Code and Rider
-4. Keep commits focused. Several small commits with clear messages are easier to review than one large one.
+   pick up automatically.
-   Squash-on-merge happens at the PR level if needed.
+4. Keep commits focused. Several small commits with clear messages are easier to review than one
+   large one. Squash-on-merge happens at the PR level if needed.
 5. If your change touches user-visible behaviour, update the README and/or the changelog block in
    `HellionChat/HellionChat.yaml` and `repo.json`. I bump the version number myself at release time.
-6. Open the pull request against `main`. The PR template will ask you to summarise the change, the testing you did and
+6. Open the pull request against `main`. The PR template will ask you to summarise the change, the
-   any compatibility notes.
+   testing you did and any compatibility notes.
 
 ## Build and Test
 
 The project targets `net10.0-windows` against Dalamud SDK 15. To build locally you need:
 
 - .NET 10 SDK
-- A working Dalamud dev environment with `DALAMUD_HOME` set (XIVLauncher installed and launched once is the simplest
+- A working Dalamud dev environment with `DALAMUD_HOME` set (XIVLauncher installed and launched once
-  path)
+  is the simplest path)
 - VS Code with the C# Dev Kit, Rider, or Visual Studio
 
 ```bash
@@ -71,11 +77,12 @@ dotnet restore
 dotnet build HellionChat.sln -c Release
 ```
 
-There are currently no tests in `HellionChat.sln`. If you add a test project, point it at the relevant subsystems
+There are currently no tests in `HellionChat.sln`. If you add a test project, point it at the
-(privacy filter, configuration migration, message store) and mention it in the PR.
+relevant subsystems (privacy filter, configuration migration, message store) and mention it in the
+PR.
 
-For a smoke test in-game: build, copy the output into your Dalamud `devPlugins/HellionChat/` directory and load it via
+For a smoke test in-game: build, copy the output into your Dalamud `devPlugins/HellionChat/`
-`/xlplugins`.
+directory and load it via `/xlplugins`.
 
 ## Continuous Integration
 
@@ -86,30 +93,33 @@ Every push and every pull request runs:
 | `build.yml`  | `dotnet build` and `dotnet test` |
 | `codeql.yml` | CodeQL security analysis         |
 
-A pull request will not be merged while either of these is failing. CodeQL findings on changed code need to be
+A pull request will not be merged while either of these is failing. CodeQL findings on changed code
-addressed; pre-existing findings on untouched code are tracked separately.
+need to be addressed; pre-existing findings on untouched code are tracked separately.
 
 ## Translations
 
 Hellion-specific strings live in `HellionChat/Resources/HellionStrings.resx` (English source) and
 `HellionStrings.<lang>.resx` (per-language). These are accepted as direct pull requests.
 
-The upstream Chat 2 strings in `HellionChat/Resources/Language.*.resx` are **not** translated here. They are kept as-is
+The upstream Chat 2 strings in `HellionChat/Resources/Language.*.resx` are **not** translated here.
-from the last upstream sync and remain the work of the Chat 2 Crowdin community. Active cherry-picking from upstream
+They are kept as-is from the last upstream sync and remain the work of the Chat 2 Crowdin community.
-ended in the v1.4.x cycle (see [`docs/UPSTREAM_SYNC.md`](docs/UPSTREAM_SYNC.md)), so future translation improvements to
+Active cherry-picking from upstream ended in the v1.4.x cycle (see
-those upstream strings will not flow into HellionChat automatically anymore. If you have improvements for the original
+[`docs/UPSTREAM_SYNC.md`](docs/UPSTREAM_SYNC.md)), so future translation improvements to those
-Chat 2 strings, please contribute them to [Infiziert90/ChatTwo](https://github.com/Infiziert90/ChatTwo) directly.
+upstream strings will not flow into HellionChat automatically anymore. If you have improvements for
+the original Chat 2 strings, please contribute them to
+[Infiziert90/ChatTwo](https://github.com/Infiziert90/ChatTwo) directly.
 
 ## Licensing
 
 By submitting a pull request you confirm that:
 
-- Your contribution is your own work, or you have the right to contribute it under the project licence.
+- Your contribution is your own work, or you have the right to contribute it under the project
-- You agree that your contribution will be released under the [EUPL-1.2](LICENSE), the same licence as the rest of the
+  licence.
-  project.
+- You agree that your contribution will be released under the [EUPL-1.2](LICENSE), the same licence
+  as the rest of the project.
 
-There is no separate CLA. Forking HellionChat is explicitly permitted under the EUPL-1.2, as with any EUPL-licensed
+There is no separate CLA. Forking HellionChat is explicitly permitted under the EUPL-1.2, as with
-project.
+any EUPL-licensed project.
 
 ## Response Times
 
@@ -119,8 +129,9 @@ project.
 | Discord DM    | `@j.j_kazama`                           |
 | Email         | `kontakt@hellion-media.de`              |
 
-I respond on weekdays during European business hours and take weekends and FFXIV patch days off. A pull request that
+I respond on weekdays during European business hours and take weekends and FFXIV patch days off. A
-sits for a few days has not been ignored. Pinging once after a week is fine; please do not ping daily.
+pull request that sits for a few days has not been ignored. Pinging once after a week is fine;
+please do not ping daily.
 
 ## First-time setup
 
@@ -130,9 +141,10 @@ After cloning, run once:
 ./scripts/setup-hooks.sh
 ```
 
-This wires `core.hooksPath` to `.githooks/`. The pre-push hook runs preflight (versions/manifest/changelog/build).
+This wires `core.hooksPath` to `.githooks/`. The pre-push hook runs preflight
+(versions/manifest/changelog/build).
 
 ### Test suite
 
-The plugin's test suite lives in a separate local repository and is not part of this codebase. If you need access for
+The plugin's test suite lives in a separate local repository and is not part of this codebase. If
-development, contact the maintainer.
+you need access for development, contact the maintainer.

HellionChat/AllCommands.cs

@@ -0,0 +1,36 @@
+using Lumina.Excel.Sheets;
+
+namespace HellionChat;
+
+// Ported 1:1 from v1.5.6 ChatLogWindow.SetUpAllCommands. Provides a fast
+// lookup from slash-command string to the game's TextCommand row so the
+// InputBar callback can feed descriptions to CommandHelpWindow without
+// hitting the sheet on every keystroke.
+internal static class AllCommands
+{
+    private static readonly Dictionary<string, TextCommand> Commands = BuildCommands();
+
+    private static Dictionary<string, TextCommand> BuildCommands()
+    {
+        var dict = new Dictionary<string, TextCommand>(StringComparer.Ordinal);
+        foreach (var command in Sheets.TextCommandSheet)
+        {
+            if (!command.Command.IsEmpty)
+                dict.TryAdd(command.Command.ToString(), command);
+
+            if (!command.ShortCommand.IsEmpty)
+                dict.TryAdd(command.ShortCommand.ToString(), command);
+
+            if (!command.Alias.IsEmpty)
+                dict.TryAdd(command.Alias.ToString(), command);
+
+            if (!command.ShortAlias.IsEmpty)
+                dict.TryAdd(command.ShortAlias.ToString(), command);
+        }
+
+        return dict;
+    }
+
+    public static bool TryGetValue(string command, out TextCommand textCommand) =>
+        Commands.TryGetValue(command, out textCommand);
+}

HellionChat/AutoTellTabsService.cs

@@ -1,49 +1,69 @@
 using System;
 using System.Collections.Generic;
 using System.Linq;
+using System.Threading;
 using Dalamud.Game.Text;
 using Dalamud.Game.Text.SeStringHandling;
+using Dalamud.Interface.ImGuiNotification;
 using HellionChat.Code;
 using HellionChat.GameFunctions.Types;
 using HellionChat.Resources;
 using HellionChat.Util;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat;
 
-// Hellion Chat — Auto-Tell-Tabs.
+// Auto-Tell-Tabs: spawns session-only tabs per /tell partner.
-//
+// Subscribes to MessageManager.MessageProcessed and ClientState.Logout.
-// Spawns a session-only tab per /tell partner so a club greeter can track
-// multiple parallel conversations without losing context. Subscribes to
-// MessageManager.MessageProcessed for live tells and to ClientState.Logout
-// for the cleanup pass; everything else hangs off these two entry points.
-//
-// See spec: Hellion Chat Auto-Tell-Tabs Spec (Obsidian vault).
 internal sealed class AutoTellTabsService : IDisposable
 {
     private readonly Plugin _plugin;
     private readonly MessageManager _messageManager;
     private readonly MessageStore _store;
-    private readonly object _tempTabsLock = new();
+    private readonly ILogger<AutoTellTabsService> _logger;
+
+    // Tabs-list structure lock now lives on Plugin (neutral owner) so the
+    // MessageManager refilter can share it. See Plugin.TabsListLock.
+    private object TabsListLock => _plugin.TabsListLock;
+
+    // Bumped whenever something wipes unpinned temp tabs wholesale (logout).
+    // HandleTell reads it before releasing the lock and re-checks after, so a
+    // tab built in between is discarded instead of outliving the wipe.
+    private int _tabGeneration;
+
+    // Hard cap on pinned TempTabs so the sidebar doesn't inflate over years
+    // of usage. Separate pool from AutoTellTabsLimit (15) — pinned tabs live
+    // in their own bucket. A configurable cap is a vault-backlog anchor for
+    // a later cycle if tester feedback demands it.
+    internal const int MaxPinnedTempTabs = 5;
 
     private bool _initialized;
 
-    internal AutoTellTabsService(Plugin plugin, MessageManager messageManager, MessageStore store)
+    // Set when Initialize ran before a character was available; cleared once the
+    // history has actually been loaded.
+    private bool _rehydratePending;
+
+    internal AutoTellTabsService(
+        Plugin plugin,
+        MessageManager messageManager,
+        MessageStore store,
+        ILogger<AutoTellTabsService> logger
+    )
     {
         _plugin = plugin;
         _messageManager = messageManager;
         _store = store;
+        _logger = logger;
     }
 
-    internal int ActiveTempTabCount
+    // Derived from the tab list on read. Pin/Unpin/Promote/Logout simply
-    {
+    // mutate IsPinned or remove tabs — the count adapts automatically.
-        get
+    // Replaces an Interlocked counter: the pin-state transitions are cold-path
-        {
+    // and don't need lock-free reads.
-            lock (_tempTabsLock)
+    internal int ActiveTempTabCount =>
-            {
+        Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInUnpinnedPool);
-                return Plugin.Config.Tabs.Count(t => t.IsTempTab);
+
-            }
+    internal int PinnedTempTabCount => Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
-        }
-    }
 
     internal void Initialize()
     {
@@ -52,11 +72,71 @@ internal sealed class AutoTellTabsService : IDisposable
             return;
         }
 
+        // Pinned tabs come out of the JSON with TellTarget set but
+        // CurrentChannel reset (NonSerialized). Without re-seeding, the chat
+        // input has no tell-target on the active pinned tab, and the
+        // game-side channel hook only repaints CurrentChannel once the user
+        // triggers a /tell or channel switch.
+        RehydratePinnedTabs();
+
         _messageManager.MessageProcessed += HandleTell;
+        Plugin.ClientState.Login += OnLogin;
         Plugin.ClientState.Logout += OnLogout;
         _initialized = true;
     }
 
+    // Deferred when the plugin starts before a character is logged in, which is
+    // the normal case: the game loads plugins at boot. CurrentContentId is 0
+    // until then, so the history query would look up tells for character zero,
+    // find none, and leave every pinned tab blank for the whole session.
+    //
+    // Only visible to someone who actually pins a tell tab AND starts the game
+    // with the plugin already installed. Reloading the plugin in a running
+    // session -- what a developer does all day -- hides it completely.
+    private void RehydratePinnedTabs()
+    {
+        if (_messageManager.CurrentContentId == 0)
+        {
+            _logger.LogDebug("[Pin] Rehydrate deferred: no character yet, waiting for login");
+            _rehydratePending = true;
+            return;
+        }
+
+        _rehydratePending = false;
+
+        var pinned = Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
+        _logger.LogDebug($"[Pin] Rehydrate scan: {pinned} pinned tab(s) found");
+
+        foreach (var tab in Plugin.Config.Tabs)
+        {
+            if (!TabLifecycleHelpers.IsInPinnedPool(tab))
+                continue;
+
+            if (tab.TellTarget is null || !tab.TellTarget.IsSet())
+            {
+                _logger.LogWarning(
+                    $"[Pin] Pinned tab '{tab.Name}' has no usable TellTarget "
+                        + $"(Name={tab.TellTarget?.Name ?? "<null>"} World={tab.TellTarget?.World ?? 0}). "
+                        + "Chat input on this tab will be empty until the partner sends a tell or you /tell manually."
+                );
+                continue;
+            }
+
+            tab.Channel ??= InputChannel.Tell;
+            tab.CurrentChannel.Channel = InputChannel.Tell;
+            tab.CurrentChannel.TellTarget = tab.TellTarget.Clone();
+
+            // MessageList is NonSerialized so pinned tabs come back empty.
+            // Preload the same history window the spawn path uses so the user
+            // sees the recent conversation, not a blank tab.
+            PreloadHistory(tab, tab.TellTarget.Name, tab.TellTarget.World, Guid.Empty);
+
+            _logger.LogDebug(
+                $"[Pin] Rehydrated '{tab.Name}' -> Tell target {tab.TellTarget.Name}@{tab.TellTarget.World}"
+            );
+        }
+    }
+
     public void Dispose()
     {
         if (!_initialized)
@@ -64,6 +144,7 @@ internal sealed class AutoTellTabsService : IDisposable
             return;
         }
 
+        Plugin.ClientState.Login -= OnLogin;
         Plugin.ClientState.Logout -= OnLogout;
         _messageManager.MessageProcessed -= HandleTell;
         _initialized = false;
@@ -87,11 +168,8 @@ internal sealed class AutoTellTabsService : IDisposable
         var partner = ExtractTellPartner(message);
         if (partner == null)
         {
-            // Real message without a player payload — e.g. GM tells, which
+            // Diagnostics: helps detect regressions (FFXIV payload changes, new edge cases)
-            // we deliberately skip. The diagnostics make future regressions
+            _logger.LogWarning(
-            // (FFXIV changing tell payload shape, new edge cases) findable
-            // without having to crank up debug logging at the source.
-            Plugin.Log.Warning(
                 $"[AutoTellTabs] Could not extract tell partner. type={message.Code.Type}, "
                     + $"senderChunks={message.Sender.Count}, contentChunks={message.Content.Count}, "
                     + $"senderSourcePayloads={message.SenderSource?.Payloads?.Count ?? 0}, "
@@ -100,23 +178,58 @@ internal sealed class AutoTellTabsService : IDisposable
             return;
         }
 
-        lock (_tempTabsLock)
+        // Three steps, because building the tab pulls history out of the store and
+        // that must not happen under TabsListLock (the query sorts the whole
+        // receiver history). Step 1 and 3 are locked, step 2 is not.
+        int generation;
+        lock (TabsListLock)
         {
             var existing = FindTempTab(partner.Value.Name, partner.Value.World);
             if (existing != null)
             {
-                // Tab already exists; Tab.Matches has already routed this
+                // Already routed via MessageManager pipeline — no AddMessage here,
-                // message via the MessageManager pipeline (see Task 2 sender
+                // HandleTell runs after the delivery loop. Repair the tell-target if
-                // filter).
+                // the fallback hit a pinned tab whose TellTarget didn't survive a
+                // previous round-trip — keeps FindTempTab fast on the next message.
+                if (
+                    existing.IsPinned
+                    && (existing.TellTarget is null || !existing.TellTarget.IsSet())
+                )
+                {
+                    existing.TellTarget = new TellTarget(
+                        partner.Value.Name,
+                        partner.Value.World,
+                        0,
+                        TellReason.Direct
+                    );
+                    _plugin.SaveConfig();
+                }
                 return;
             }
 
-            if (ActiveTempTabCount >= Plugin.Config.AutoTellTabsLimit)
+            generation = _tabGeneration;
-            {
-                DropOldestTempTab();
         }
 
-            SpawnTempTab(partner.Value, message);
+        var tab = BuildTempTabWithHistory(partner.Value, message);
+
+        lock (TabsListLock)
+        {
+            // A logout in between wiped the unpinned pool; committing now would
+            // resurrect a tab for a character we already left.
+            if (generation != _tabGeneration)
+                return;
+
+            // Someone else (self-test, UI) may have created the tab while we built
+            // ours. Hand the message to theirs and drop what we built — unlike the
+            // early return above, this tab appeared after the delivery loop ran.
+            var raced = FindTempTab(partner.Value.Name, partner.Value.World);
+            if (raced != null)
+            {
+                raced.AddMessage(message, unread: true);
+                return;
+            }
+
+            CommitTempTab(tab);
         }
     }
 
@@ -124,10 +237,7 @@ internal sealed class AutoTellTabsService : IDisposable
     {
         if (message.Code.Type == ChatType.TellIncoming)
         {
-            // Incoming tell: the sender is the conversation partner. The
+            // Sender is the partner; check chunks first, then raw SeString as fallback
-            // PlayerPayload normally rides on a chunk's Link slot, but for
-            // some tell types FFXIV only puts it in the raw SeString —
-            // fall back to that before giving up.
             var fromSender =
                 ChunkUtil.TryGetPlayerPayload(message.Sender)
                 ?? ChunkUtil.TryGetPlayerPayload(message.SenderSource);
@@ -138,10 +248,7 @@ internal sealed class AutoTellTabsService : IDisposable
             return null;
         }
 
-        // Outgoing tell: the local player is the sender, the partner shows
+        // Outgoing tell: check content first, then channels's TellTarget as fallback
-        // up either as a payload in the content (for tells typed via the
-        // Chat 2 input bar) or as the channel's tracked tell target (set by
-        // the SetContextTellTarget game hook). Same SeString fallback.
         var fromContent =
             ChunkUtil.TryGetPlayerPayload(message.Content)
             ?? ChunkUtil.TryGetPlayerPayload(message.ContentSource)
@@ -163,25 +270,49 @@ internal sealed class AutoTellTabsService : IDisposable
         return null;
     }
 
-    private Tab? FindTempTab(string name, uint world)
+    internal static Tab? FindTempTab(string name, uint world)
     {
-        return Plugin.Config.Tabs.FirstOrDefault(t =>
+        var byTarget = Plugin.Config.Tabs.FirstOrDefault(t =>
             t.IsTempTab
             && t.TellTarget != null
             && string.Equals(t.TellTarget.Name, name, StringComparison.OrdinalIgnoreCase)
             && t.TellTarget.World == world
         );
+        if (byTarget != null)
+            return byTarget;
+
+        // Fallback: match by tab name. Pinned tabs are named via
+        // FormatTabName(player, world) at spawn time, so the name is a
+        // stable secondary key when TellTarget didn't survive a save/load
+        // (older configs from a renamed pin, malformed migrations, etc.).
+        var expectedName = FormatTabName(name, world);
+        return Plugin.Config.Tabs.FirstOrDefault(t =>
+            t.IsTempTab && string.Equals(t.Name, expectedName, StringComparison.OrdinalIgnoreCase)
+        );
     }
 
-    private void DropOldestTempTab()
+    // Lock-protected lookup for the framework-thread caller (TellRouterService).
+    // Config.Tabs is mutated under the shared Plugin.TabsListLock on the worker thread,
+    // so a framework-tick reader must take the same lock to avoid enumerating the list
+    // mid-mutation.
+    internal Tab? FindTempTabSafe(string name, uint world)
     {
-        // Greeted tabs are dropped before un-greeted ones (the user said
+        lock (TabsListLock)
-        // "I'm done with that conversation"), and within each bucket we
+            return FindTempTab(name, world);
-        // pick the oldest LastActivity. This protects active conversations
+    }
-        // and unfinished greetings while still freeing up a slot.
+
+    internal void DropOldestTempTab()
+    {
+        // Lock the list-structure ops so the (currently caller-less) Unpin path
+        // can't race the worker; re-entrant when HandleTell already holds the lock.
+        lock (TabsListLock)
+        {
+            // Pinned tabs live in their own bucket (MaxPinnedTempTabs) and are
+            // never drop candidates. They leave the bucket only via Unpin or
+            // PromoteToPermanent.
             var victim = Plugin
                 .Config.Tabs.Select((tab, idx) => (Tab: tab, Index: idx))
-            .Where(t => t.Tab.IsTempTab)
+                .Where(t => TabLifecycleHelpers.IsInUnpinnedPool(t.Tab))
                 .OrderByDescending(t => t.Tab.IsGreeted)
                 .ThenBy(t => t.Tab.LastActivity)
                 .FirstOrDefault();
@@ -191,59 +322,71 @@ internal sealed class AutoTellTabsService : IDisposable
                 return;
             }
 
-        // v0.6.1 — if the victim is currently popped out, tear down the
+            var dropped = victim.Tab;
-        // matching Popout window first. Otherwise the window stays in
+            // By reference, not by index: the index came from a Select() earlier in
-        // PopOutWindows + WindowSystem and renders empty / re-spawns on the
+            // this block and would point at the wrong tab if anything shifted the list.
-        // next AddPopOutsToDraw tick. Latent since pop-outs were introduced;
+            Plugin.Config.Tabs.Remove(dropped);
-        // becomes visible with AutoTellTabsOpenAsPopout where dropping a
+
-        // popped tab is now a routine code path.
+            // Re-anchor the UI selection if it pointed at the dropped tab, and close any
-        if (victim.Tab.PopOut)
+            // pop-out window the dropped tab owned. Both run on the PendingMessage worker
+            // thread and touch window state the Draw path reads (OnTabActivated re-seed +
+            // the pool's Unbind), so marshal onto the framework thread to serialize with
+            // Draw (reference_dalamud_framework_thread). TryClose is idempotent: a tab that
+            // was never popped is a silent no-op.
+            Plugin.Framework.RunOnFrameworkThread(() =>
             {
-            var popout = _plugin.ChatLogWindow.ActivePopouts.FirstOrDefault(p =>
+                _plugin.ChannelPopoutPool.TryClose(dropped.Identifier);
-                p.TabIdentifier == victim.Tab.Identifier
+                _plugin.MainWindow?.ResetActiveTabIfRemoved(dropped);
-            );
+            });
-            if (popout != null)
-            {
-                popout.IsOpen = false;
         }
     }
 
-        Plugin.Config.Tabs.RemoveAt(victim.Index);
+    // Runs WITHOUT TabsListLock: PreloadHistory hits the store, which used to hold
-
+    // the lock across a query that sorted the whole receiver history. The tab is not
-        // Re-anchor the active tab so the user does not silently end up on
+    // public until CommitTempTab adds it, so building it unlocked is safe.
-        // a different conversation when their tab gets dropped or shifted.
+    private Tab BuildTempTabWithHistory((string Name, uint World) partner, Message currentMessage)
-        if (victim.Index <= _plugin.LastTab)
-        {
-            _plugin.WantedTab = 0;
-        }
-    }
-
-    private void SpawnTempTab((string Name, uint World) partner, Message currentMessage)
     {
         var tab = BuildTempTab(partner.Name, partner.World);
 
-        // Preload first so the tab opens with chronological history above
+        // Preload history: chronological order with current message already persisted
-        // the current message — and so a slow DB query never causes a
-        // visible "empty tab, then history pops in" effect on screen.
-        // The current message is already persisted in the store by the
-        // time MessageProcessed fires (see MessageManager.cs: UpsertMessage
-        // runs before the event), so we have to exclude it explicitly to
-        // avoid the separator landing below the live tell.
         PreloadHistory(tab, partner.Name, partner.World, currentMessage.Id);
 
         tab.AddMessage(currentMessage, unread: true);
 
-        // Hellion Chat v0.6.1 — opt-in: open new /tell tabs directly as a
+        // Flag the tab as a pop-out if configured; the marshalled TryOpen below reads
-        // pop-out window. Set BEFORE Tabs.Add so the next render-tick's
+        // that flag to open the real window.
-        // AddPopOutsToDraw() sees PopOut=true and spawns the Popout window
-        // alongside the tab going into the list. No SaveConfig() because
-        // auto-tell tabs are IsTempTab (session-only, never persisted).
         if (Plugin.Config.AutoTellTabsOpenAsPopout)
         {
             tab.PopOut = true;
         }
 
+        return tab;
+    }
+
+    // Caller MUST hold TabsListLock.
+    private void CommitTempTab(Tab tab)
+    {
+        if (ActiveTempTabCount >= Plugin.Config.AutoTellTabsLimit)
+        {
+            DropOldestTempTab();
+        }
+
         Plugin.Config.Tabs.Add(tab);
+
+        // Actually open the pop-out window for the flagged tab — without this the
+        // flag was dead (a PopOut tab with no window). CommitTempTab runs on the
+        // PendingMessage worker thread under Plugin.TabsListLock; TryOpen does
+        // OnTabActivated + Bind (window state Draw reads), so marshal onto the
+        // framework thread. If the pool is full, drop the flag so it never claims a
+        // window it didn't get (flag/window parity).
+        if (tab.PopOut)
+        {
+            Plugin.Framework.RunOnFrameworkThread(() =>
+            {
+                if (!_plugin.ChannelPopoutPool.TryOpen(tab))
+                    tab.PopOut = false;
+            });
+        }
     }
 
     private static Tab BuildTempTab(string playerName, uint worldRowId)
@@ -251,6 +394,7 @@ internal sealed class AutoTellTabsService : IDisposable
         return new Tab
         {
             Name = FormatTabName(playerName, worldRowId),
+            NameCameFromPartner = true,
             IsTempTab = true,
             AllSenderMessages = true,
             TellTarget = new TellTarget(playerName, worldRowId, 0, TellReason.Direct),
@@ -272,9 +416,7 @@ internal sealed class AutoTellTabsService : IDisposable
         {
             return $"{playerName}@{worldRow.Name}";
         }
-        // World sheet lookup miss is rare (only for FFXIV worlds Dalamud has
+        // Fallback if world lookup misses (rare; only for unseen worlds)
-        // not yet seen). Fall back to the raw RowId so the user still has a
-        // unique, readable label.
         return $"{playerName}@World{worldRowId}";
     }
 
@@ -288,9 +430,7 @@ internal sealed class AutoTellTabsService : IDisposable
 
         try
         {
-            // Pull one extra row because the live tell that triggered this
+            // Pull one extra row: current message is already in store and would eat a preload slot
-            // spawn is already in the store and would otherwise eat one of
-            // the user's preload-budget slots.
             var history = _store.GetTellHistoryWithSender(
                 _messageManager.CurrentContentId,
                 senderName,
@@ -305,23 +445,17 @@ internal sealed class AutoTellTabsService : IDisposable
 
             if (historicMessages.Count == 0)
             {
-                // No prior tells with this player — leave the tab to start
+                // No prior tells; leave tab empty to avoid orphaned "history loaded" marker
-                // empty so the user does not see a "history loaded" marker
-                // sitting alone above the very first message.
                 return;
             }
 
-            // The history list is already oldest-first, so a plain AddPrune
+            // History is oldest-first; add in order for chronological display
-            // loop produces the chronological order the user expects to see
-            // when the tab opens.
             foreach (var message in historicMessages)
             {
                 tab.Messages.AddPrune(message, MessageManager.MessageDisplayLimit);
             }
 
-            // Visible separator between the loaded history and the live
+            // Separator between history and live tell (sorts after history but before current)
-            // tell that triggered this spawn. Goes in last so it sorts
-            // after the historical messages but before the current one.
             tab.Messages.AddPrune(
                 MakeSystemMarker(HellionStrings.AutoTellTabs_HistorySeparator),
                 MessageManager.MessageDisplayLimit
@@ -329,10 +463,8 @@ internal sealed class AutoTellTabsService : IDisposable
         }
         catch (Exception ex)
         {
-            // Non-fatal: the tab still spawns, but the user gets a visible
+            // Non-fatal: tab still spawns with visible error notice instead of silent history loss
-            // notice instead of silently missing history. The error logs
+            _logger.LogError(ex, "[AutoTellTabs] History preload failed");
-            // once with full stack trace for diagnosis.
-            Plugin.Log.Error(ex, "[AutoTellTabs] History preload failed");
             tab.Messages.AddPrune(
                 MakeSystemMarker(HellionStrings.AutoTellTabs_HistoryLoadError),
                 MessageManager.MessageDisplayLimit
@@ -370,11 +502,9 @@ internal sealed class AutoTellTabsService : IDisposable
             return;
         }
 
-        lock (_tempTabsLock)
+        lock (TabsListLock)
         {
-            // Frame-race guard (E5): the sidebar might still render a tab
+            // Guard against frame-race: sidebar might render a tab already removed by LRU or logout
-            // that has already been removed by LRU drop or logout cleanup.
-            // Silently skip the toggle so we don't mutate stale state.
             if (!Plugin.Config.Tabs.Contains(tab))
             {
                 return;
@@ -384,49 +514,135 @@ internal sealed class AutoTellTabsService : IDisposable
         }
     }
 
+    // Fires on the login that follows a boot-time start, and on every character
+    // switch after one. Guarded by the pending flag so a switch does not append
+    // a second copy of the history to tabs that already have it.
+    private void OnLogin()
+    {
+        if (!_rehydratePending)
+            return;
+
+        RehydratePinnedTabs();
+    }
+
     private void OnLogout(int type, int code)
     {
-        lock (_tempTabsLock)
+        lock (TabsListLock)
         {
-            // Snapshot whether the active tab is about to be removed, BEFORE
+            // Pinned TempTabs must survive char-switch — that's the whole point
-            // we mutate the list — index lookups would lie to us afterwards.
+            // of pinning. Only unpinned ones get stripped.
-            var lastIndex = _plugin.LastTab;
+            var active = _plugin.MainWindow?.ActiveTab;
-            var lastIndexValid = lastIndex >= 0 && lastIndex < Plugin.Config.Tabs.Count;
-            var currentWasTempTab = lastIndexValid && Plugin.Config.Tabs[lastIndex].IsTempTab;
 
-            // v0.6.1 — symmetric to DropOldestTempTab cleanup: tear down any
-            // popped-out temp tab windows before removing the tabs themselves,
-            // otherwise PopOutWindows + WindowSystem keep ghost entries until
-            // the next plugin reload. Especially relevant once Auto-Pop-Out is
-            // enabled — every logout would otherwise leak as many ghosts as
-            // there were active /tell pop-outs.
             var poppedTempTabIds = Plugin
-                .Config.Tabs.Where(t => t.IsTempTab && t.PopOut)
+                .Config.Tabs.Where(t =>
+                    TabLifecycleHelpers.IsInUnpinnedPool(t)
+                    && _plugin.ChannelPopoutPool.IsOpen(t.Identifier)
+                )
                 .Select(t => t.Identifier)
                 .ToList();
-            if (poppedTempTabIds.Count > 0)
+
+            // Close any pop-out window an unpinned temp tab owns before the tabs leave
+            // the list. Filtering on the live pool (not the PopOut flag) also catches
+            // manually right-clicked pop-outs, which never set the flag.
+            foreach (var id in poppedTempTabIds)
+                _plugin.ChannelPopoutPool.TryClose(id);
+
+            Plugin.Config.Tabs.RemoveAll(TabLifecycleHelpers.IsInUnpinnedPool);
+
+            // HandleTell builds a tab outside the lock; bumping here lets it detect
+            // that the world moved on and drop what it built. Read and compared under
+            // the same lock, so no volatile needed.
+            _tabGeneration++;
+
+            // Re-anchor the UI selection if the active tab was one of the stripped
+            // unpinned temp tabs (reference predicate, not an index). Logout is a
+            // framework-thread event, so this is already serialized with Draw — no
+            // marshalling needed here, unlike the worker-thread eviction path.
+            if (active is { } a && TabLifecycleHelpers.IsInUnpinnedPool(a))
             {
-                var poppedSet = poppedTempTabIds.ToHashSet();
+                _plugin.MainWindow?.ResetActiveTabIfRemoved(a);
-                foreach (
+            }
-                    var popout in _plugin
-                        .ChatLogWindow.ActivePopouts.Where(p => poppedSet.Contains(p.TabIdentifier))
-                        .ToList()
-                )
-                {
-                    popout.IsOpen = false;
         }
     }
 
-            Plugin.Config.Tabs.RemoveAll(t => t.IsTempTab);
+    internal bool TryPin(Tab tab)
-
-            // Force a switch to tab 0 if the active tab was a temp tab OR
-            // if drops before the active index pushed LastTab out of range.
-            // Otherwise the user keeps their current persistent tab.
-            var stillValid = lastIndex >= 0 && lastIndex < Plugin.Config.Tabs.Count;
-            if (currentWasTempTab || !stillValid)
     {
-                _plugin.WantedTab = 0;
+        if (!tab.IsTempTab || tab.IsPinned)
+        {
+            _logger.LogDebug(
+                $"[Pin] TryPin skipped: IsTempTab={tab.IsTempTab} IsPinned={tab.IsPinned}"
+            );
+            return false;
         }
+
+        // Count and flag under one lock so the cap can't be raced. SaveConfig stays
+        // OUTSIDE -- holding TabsListLock across a save would put an fsync on the
+        // click path, which is what a later cycle just removed elsewhere.
+        lock (TabsListLock)
+        {
+            if (PinnedTempTabCount >= MaxPinnedTempTabs)
+            {
+                WrapperUtil.AddNotification(
+                    string.Format(HellionStrings.PinTab_LimitReached, MaxPinnedTempTabs),
+                    NotificationType.Warning
+                );
+                return false;
             }
+
+            tab.IsPinned = true;
+        }
+
+        _logger.LogDebug(
+            $"[Pin] Pinned tab '{tab.Name}' target={tab.TellTarget?.Name}@{tab.TellTarget?.World}"
+        );
+        _plugin.SaveConfig();
+        return true;
+    }
+
+    internal void Unpin(Tab tab)
+    {
+        if (!tab.IsPinned)
+        {
+            return;
+        }
+
+        // If the unpinned pool is already full, dropping the oldest before
+        // flipping the flag avoids counting the just-unpinned tab as a drop
+        // candidate. Under lock, since DropOldestTempTab mutates the list.
+        // SaveConfig stays outside, see TryPin.
+        lock (TabsListLock)
+        {
+            if (ActiveTempTabCount >= Plugin.Config.AutoTellTabsLimit)
+            {
+                DropOldestTempTab();
+            }
+
+            tab.IsPinned = false;
+        }
+
+        _logger.LogDebug("[Pin] Unpinned tab '{TabName}'", tab.Name);
+        _plugin.SaveConfig();
+    }
+
+    internal void PromoteToPermanent(Tab tab)
+    {
+        if (!tab.IsTempTab)
+        {
+            return;
+        }
+
+        // Drops the temp/pin flags, the persisted tell target AND the runtime
+        // channel's tell state. The runtime-channel clear is the CORR-1 guard —
+        // see StripTellBindingOnPromote; clearing Tab.TellTarget alone would leave
+        // CurrentChannel.Channel == Tell + a stale target and route a typed line
+        // silently as /tell to the old partner.
+        // Flips IsTempTab/IsPinned, which decide pool membership and whether a save
+        // strips the tab. Under lock so a concurrent save sees one or the other, never
+        // half. SaveConfig stays outside, see TryPin.
+        lock (TabsListLock)
+            TabLifecycleHelpers.StripTellBindingOnPromote(tab);
+
+        _logger.LogDebug($"[Pin] Promoted tab '{tab.Name}' to permanent (tell-binding dropped)");
+        _plugin.SaveConfig();
     }
 }

HellionChat/Branding/BrandingLinks.cs

@@ -1,11 +1,36 @@
-// HellionChat/Branding/BrandingLinks.cs
+using System.Runtime.CompilerServices;
+using HellionChat.Util;
+
 namespace HellionChat.Branding;
 
-// Centralised so a future invite rotation only touches one file. The same
+// Centralised — a future invite/URL rotation only touches this file.
-// link is currently hard-coded in repo.json, README.md, SUPPORT.md,
-// CONTRIBUTORS.md and HellionChat.yaml — those will be migrated to consume
-// this constant in a separate housekeeping sweep
 internal static class BrandingLinks
 {
     public const string HellionForgeDiscordInvite = "https://discord.gg/X9V7Kcv5gR";
+    public const string HellionForgeGitea = "https://gitea.hellion-forge.cloud/Hellion-Forge";
+    public const string HellionChatRepo =
+        "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat";
+    public const string HellionChatCustomRepoManifest =
+        "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/repo.json";
+    public const string HellionForgeWebsite = "https://hellion-forge.cloud";
+    public const string HellionMediaWebsite = "https://hellion-media.de/de";
+
+    // CA2255 warns against [ModuleInitializer] in library code, but Dalamud
+    // loads the plugin DLL directly so the module-init pass is the right hook
+    // for a one-shot URL sanity check at plugin load.
+#pragma warning disable CA2255
+    [ModuleInitializer]
+#pragma warning restore CA2255
+    internal static void ValidateUrls()
+    {
+        UrlValidation.ValidateAll(
+            nameof(BrandingLinks),
+            HellionForgeDiscordInvite,
+            HellionForgeGitea,
+            HellionChatRepo,
+            HellionChatCustomRepoManifest,
+            HellionForgeWebsite,
+            HellionMediaWebsite
+        );
+    }
 }

HellionChat/Branding/FoxBannerTexture.cs

@@ -0,0 +1,22 @@
+using Dalamud.Interface.Textures;
+
+namespace HellionChat.Branding;
+
+// UI sibling of HellionForgeAscii.FoxMini: the embedded Hellion Forge fox
+// banner PNG. Uses ITextureProvider.GetFromManifestResource, a "Get" shared
+// texture, so Dalamud owns the cache and lifetime. No manual dispose, no async
+// handling in the plugin. Static to mirror HellionForgeAscii (zero injectable
+// deps; Plugin.TextureProvider is a static [PluginService]).
+internal static class FoxBannerTexture
+{
+    private const string ResourceName = "HellionChat.Branding.fox-banner.png";
+
+    // Resolved fresh on every access. Dalamud keeps the shared texture cached
+    // internally and decodes it asynchronously, so GetWrapOrDefault() returns
+    // null for the first few frames until the decode finishes.
+    public static ISharedImmediateTexture Shared =>
+        Plugin.TextureProvider.GetFromManifestResource(
+            typeof(FoxBannerTexture).Assembly,
+            ResourceName
+        );
+}

HellionChat/Branding/HellionForgeAscii.cs

@@ -0,0 +1,29 @@
+namespace HellionChat.Branding;
+
+// Lazy-loaded ASCII art that ships embedded with the DLL.
+//
+//   - FoxMini: the four-line fox-head + curly-tail that gets stitched
+//     into the DI-logger bootstrap line so an xllog reader sees the
+//     same signature on every plugin load.
+//
+// The file lives as an embedded resource under HellionChat.Branding.* so
+// the plugin DLL is self-contained; no on-disk asset lookup that could
+// silently miss after a partial deploy.
+internal static class HellionForgeAscii
+{
+    private static string? _foxMini;
+
+    public static string FoxMini => _foxMini ??= Load("HellionChat.Branding.fox-mini.txt");
+
+    private static string Load(string resourceName)
+    {
+        using var stream = typeof(HellionForgeAscii).Assembly.GetManifestResourceStream(
+            resourceName
+        );
+        if (stream is null)
+            return string.Empty;
+
+        using var reader = new StreamReader(stream);
+        return reader.ReadToEnd();
+    }
+}

HellionChat/Chunk.cs

@@ -34,9 +34,7 @@ public abstract class Chunk
             _ => null,
         };
 
-    /// <summary>
+    // Returns basic text for hashing (content for TextChunk, icon name for IconChunk)
-    /// Get some basic text for use in generating hashes.
-    /// </summary>
     internal string StringValue()
     {
         return this switch
@@ -108,9 +106,6 @@ public class TextChunk : Chunk
         Content = content ?? "";
     }
 
-    /// <summary>
-    /// Creates a new TextChunk with identical styling to this one.
-    /// </summary>
     public TextChunk NewWithStyle(ChunkSource source, Payload? link, string content)
     {
         return new TextChunk(source, link, content)
@@ -122,9 +117,6 @@ public class TextChunk : Chunk
         };
     }
 
-    /// <summary>
-    /// Creates a new TextChunk with identical styling to this one.
-    /// </summary>
     public TextChunk NewWithStyle(Chunk chunk, string content)
     {
         return new TextChunk(chunk, content)

HellionChat/CjkFallbackRange.cs

@@ -0,0 +1,26 @@
+namespace HellionChat;
+
+// Reduced CJK fallback coverage for the v1.5.3 NotoSansCjk fallback merge.
+// Before that the fallback merged over the full `Ranges` array (Default + endonyms),
+// duplicating the Latin/Default work already done by the global/Japanese fonts.
+// This is the trimmed remainder the fallback is actually the sole source for:
+//   - Hangul Syllables (AC00-D7A3): no other merged font ships Korean glyphs.
+//   - The full CJK Unified Ideographs (Han) block: at UseHellionFont=true the global
+//     font is Inter-Light (no CJK), so the fallback is the SOLE Han source. The JpRange
+//     overlap is harmless (MergeMode: the Japanese font wins for shared kanji).
+// Deliberately excluded: ONLY the ASCII/Latin Default block (0x20-0xFF), which the
+// global font already owns -- that doubled Latin merge is the waste being removed.
+// Kept as plain start/end pairs so it is unit-testable without the unsafe ImGui
+// glyph-range builder (mirrors FontSizeResolver's split-for-test rationale).
+internal static class CjkFallbackRange
+{
+    // Hangul Syllables + the full CJK Unified Ideographs (Han) block. Rationale: see
+    // class comment. Plain start/end pairs so it stays unit-testable.
+    internal static readonly ushort[] Pairs =
+    [
+        0xAC00,
+        0xD7A3, // Hangul Syllables
+        0x4E00,
+        0x9FFF, // CJK Unified Ideographs (full Han) -- sole source at UseHellionFont
+    ];
+}

HellionChat/Code/ChatSource.cs

@@ -7,36 +7,36 @@ public enum ChatSource : ushort
 {
     None = 0,
 
-    /// <summary>The player currently controlled by the local client.</summary>
+    // The player controlled by this client
     LocalPlayer = 1 << XivChatRelationKind.LocalPlayer,
 
-    /// <summary>A player in the same 4-man or 8-man party as the local player.</summary>
+    // Member of the local party
     PartyMember = 1 << XivChatRelationKind.PartyMember,
 
-    /// <summary>A player in the same alliance raid.</summary>
+    // Member of the alliance
     AllianceMember = 1 << XivChatRelationKind.AllianceMember,
 
-    /// <summary>A player not in the local player's party or alliance.</summary>
+    // Other player
     OtherPlayer = 1 << XivChatRelationKind.OtherPlayer,
 
-    /// <summary>An enemy entity that is currently in combat with the player or party.</summary>
+    // Enemy in combat
     EngagedEnemy = 1 << XivChatRelationKind.EngagedEnemy,
 
-    /// <summary>An enemy entity that is not yet in combat or claimed.</summary>
+    // Enemy out of combat
     UnengagedEnemy = 1 << XivChatRelationKind.UnengagedEnemy,
 
-    /// <summary>An NPC that is friendly or neutral to the player (e.g., EventNPCs).</summary>
+    // Friendly NPC
     FriendlyNpc = 1 << XivChatRelationKind.FriendlyNpc,
 
-    /// <summary>A pet (Summoner/Scholar) or companion (Chocobo) belonging to the local player.</summary>
+    // Own pet or companion
     PetOrCompanion = 1 << XivChatRelationKind.PetOrCompanion,
 
-    /// <summary>A pet or companion belonging to a member of the local player's party.</summary>
+    // Pet or companion of party members
     PetOrCompanionParty = 1 << XivChatRelationKind.PetOrCompanionParty,
 
-    /// <summary>A pet or companion belonging to a member of the alliance.</summary>
+    // Pet or companion of alliance members
     PetOrCompanionAlliance = 1 << XivChatRelationKind.PetOrCompanionAlliance,
 
-    /// <summary>A pet or companion belonging to a player not in the party or alliance.</summary>
+    // Pet or companion of other players
     PetOrCompanionOther = 1 << XivChatRelationKind.PetOrCompanionOther,
 }

HellionChat/Commands.cs

@@ -1,10 +1,17 @@
 using Dalamud.Game.Command;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat;
 
 internal sealed class Commands : IDisposable
 {
     private readonly Dictionary<string, CommandWrapper> Registered = [];
+    private readonly ILogger<Commands> _logger;
+
+    public Commands(ILogger<Commands> logger)
+    {
+        _logger = logger;
+    }
 
     public void Dispose()
     {
@@ -52,7 +59,7 @@ internal sealed class Commands : IDisposable
     {
         if (!Registered.TryGetValue(command, out var wrapper))
         {
-            Plugin.Log.Warning($"Missing registration for command {command}");
+            _logger.LogWarning($"Missing registration for command {command}");
             return;
         }
 
@@ -62,7 +69,7 @@ internal sealed class Commands : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, $"Error while executing command {command}");
+            _logger.LogError(ex, $"Error while executing command {command}");
         }
     }
 }

HellionChat/Configuration.cs

@@ -1,4 +1,5 @@
 using System.Collections;
+using System.Linq;
 using Dalamud;
 using Dalamud.Bindings.ImGui;
 using Dalamud.Configuration;
@@ -34,122 +35,143 @@ public class ConfigKeyBind
 [Serializable]
 public class Configuration : IPluginConfiguration
 {
-    private const int LatestVersion = 16;
+    internal const int LatestVersion = 27;
 
     public int Version { get; set; } = LatestVersion;
 
-    // v1.1.0 — Theme-Engine. Slug-basiert; ThemeRegistry liefert das Objekt.
+    // Slug-based; ThemeRegistry resolves the object at runtime.
     public string Theme = "hellion-arctic";
 
-    // v1.1.0 — Globale Window-Opacity, theme-übergreifend. Migration aus
+    // Global window opacity, applied across all themes.
-    // HellionThemeWindowOpacity beim Bump v13 → v14.
     public float WindowOpacity = 0.85f;
 
-    // v1.1.0 — Felder für künftige UI-Toggles (v1.2.0 / v1.3.0). Werden
+    // Background opacity of the main chat window while unfocused.
-    // vorab angelegt, damit später keine Migration nötig ist.
+    // WindowOpacity above stays the focused value.
+    public float WindowOpacityInactive = 0.75f;
+
+    // Reserved for future UI toggles; pre-declared to avoid a migration later.
     public bool ReduceMotion;
 
-    // v1.2.1 — Default geflippt von false → true. Card-Rows-Layout aus
+    // v1.2.1: default flipped false → true. Compact single-line layout is
-    // v1.2.0 wurde als zu dicht empfunden; Single-Line `[HH:mm] Sender:
+    // more readable than the card-rows layout introduced in v1.2.0.
-    // Text` ist besser lesbar und platzsparender. Bestand-User mit aktiv
+    public bool UseCompactDensity;
-    // false werden durch die v15→v16-Migration auf den neuen Default
-    // gehoben (Heuristik: wer in v1.2.0 false hatte, hatte den damals
-    // neu eingeführten Default — kaum jemand hat aktiv abgeschaltet).
-    public bool UseCompactDensity = true;
 
-    // Hellion Chat — Privacy filter (DSGVO Art. 25 Privacy by Default).
+    // Privacy by Default master switch. Set false to restore upstream behaviour.
-    // Master-switch defaults to true; set false to restore upstream behavior.
     public bool PrivacyFilterEnabled = true;
 
-    // Empty set means the migration has not run yet — see Plugin.cs v6→v7.
+    // Stays empty here. Dalamud deserialises with Json.NET's default settings,
+    // which means ObjectCreationHandling.Auto: a collection field that already
+    // holds items is *populated*, not replaced. A non-empty initializer would
+    // therefore union itself into every config on load and switch channels the
+    // user had unticked back on. Verified against Newtonsoft 13.0.3:
+    // saved [] loads as the initializer, saved [Say] loads as initializer + Say.
+    //
+    // Privacy by Default (DSGVO Art. 25) is seeded in CreateFresh instead, which
+    // only runs when there is no config file at all.
     public HashSet<ChatType> PrivacyPersistChannels = [];
 
-    // Failsafe for ChatTypes added by future FFXIV patches we don't know about.
+    // Failsafe for ChatTypes added by future FFXIV patches. New configs default
-    public bool PrivacyPersistUnknownChannels;
+    // to the failsafe via PrivacyDefaults; existing configs keep their saved
+    // choice because the deserializer overrides this initializer.
+    public bool PrivacyPersistUnknownChannels = Privacy
+        .PrivacyDefaults
+        .DefaultPersistUnknownChannels;
+
+    // Dedup unknown-ChatType warnings so a chatty filter doesn't spam
+    // the log every frame. NonSerialized so the warning fires once per
+    // runtime, not once-ever-per-install.
+    [NonSerialized]
+    private readonly HashSet<ChatType> _warnedUnknownChannels = new();
+
+    // A first-ever start records the player's own conversations and nothing
+    // else. Deliberately not a field initializer -- see PrivacyPersistChannels.
+    internal static Configuration CreateFresh()
+    {
+        var config = new Configuration();
+        config.PrivacyPersistChannels = [.. Privacy.PrivacyDefaults.PrivacyFirstWhitelist];
+        return config;
+    }
 
     public bool IsAllowedForStorage(ChatType type)
     {
         if (!PrivacyFilterEnabled)
             return true;
-        if (PrivacyPersistChannels.Contains(type))
+
-            return true;
+        // Runs per message on the worker thread while the settings UI can Add to the
-        return PrivacyPersistUnknownChannels;
+        // same set from the draw thread. A HashSet.Contains racing an Add that
+        // resizes buckets can return the wrong answer -- and this answer decides
+        // whether a message is persisted. Lock kept tight, this is a hot path.
+        bool listed;
+        lock (Plugin.Instance.ConfigMapsLock)
+            listed = PrivacyPersistChannels.Contains(type);
+
+        var known = Enum.IsDefined(typeof(ChatType), type);
+
+        // Log the first occurrence of a ChatType the running build doesn't
+        // recognise — i.e. one a future FFXIV patch may have added.
+        if (!known && !listed && _warnedUnknownChannels.Add(type))
+        {
+            Plugin.LogProxy.Warning(
+                "PrivacyFilter: unrecognised ChatType {Type} — falling back to PrivacyPersistUnknownChannels={Persist}.",
+                type,
+                PrivacyPersistUnknownChannels
+            );
         }
 
-    // Hellion Chat — Message retention (GDPR data minimization, time axis).
+        return Privacy.StorageRule.Allows(listed, known, PrivacyPersistUnknownChannels);
-    // Master switch defaults to false; the plugin will not delete history
+    }
-    // until the user explicitly opts in.
+
+    // Retention master switch defaults to false — plugin will not delete
+    // history until the user explicitly opts in.
     public bool RetentionEnabled;
     public int RetentionDefaultDays = 30;
     public Dictionary<ChatType, int> RetentionPerChannelDays = [];
     public DateTimeOffset RetentionLastRunAt = DateTimeOffset.MinValue;
-
-    // Hellion Chat first-run wizard — opens once on a fresh install. Existing
-    // ChatTwo users skip it because the v6→v7 migration sets the flag.
     public bool FirstRunCompleted;
 
-    // Use the bundled Exo 2 font (OFL-1.1) for the regular plugin font
+    // Tracks which plugin version last surfaced the first-run wizard.
-    // instead of whatever GlobalFontV2.FontId points at. Default ON so a
+    // When the running version is newer than this, Plugin.LoadAsync
-    // fresh install gets the Hellion typography out-of-the-box; flip OFF
+    // re-opens the wizard once so existing users see major UX reworks
-    // to fall back to the user's chosen system or Dalamud font.
+    // (e.g. the v1.5.2 multi-step rewrite). Skip path and Finish both
-    public bool UseHellionFont = true;
+    // set FirstRunCompleted = true on close, so the wizard only fires
+    // once per version bump even if the user dismisses it.
+    public string WizardLastShownVersion = string.Empty;
 
-    // Cycle 1 of the plugin-integration roadmap. When Honorific is installed
+    public bool UseHellionFont = true;
-    // and reports a custom title, render it in the chat header above the
-    // message log. Auto-hides regardless when Honorific is missing or the
-    // active title is original/empty, so leaving this on is safe even for
-    // users who don't run Honorific.
     public bool ShowHonorificTitleInHeader = true;
 
-    // Hellion Chat — Auto-Tell-Tabs. When enabled, an incoming or outgoing
+    // v1.4.7 opt-in: renders the Honorific glow outline when the title carries
-    // /tell spawns a session-only tab dedicated to that conversation
+    // a Glow colour. Default OFF — keeps v1.4.6 visuals untouched for users
-    // partner. See spec: Hellion Chat Auto-Tell-Tabs Spec (Obsidian).
+    // who don't care, and dodges the per-frame DrawList overhead on low-end
+    // hardware. Gradient (Color3 / GradientColourSet) is parsed but rendered
+    // as the primary Color until a later cycle ports the animation.
+    public bool ShowHonorificGlow = true;
     public bool EnableAutoTellTabs = true;
-
-    // Hard cap on simultaneously open auto tell tabs. Range enforced by the
-    // settings slider (1–50). LRU drop favors greeted tabs first.
     public int AutoTellTabsLimit = 15;
+    public bool AutoTellTabsCompactDisplay = true;
+    public int AutoTellTabsHistoryPreload = 100;
 
-    // When true the sidebar shows only a thin separator before the temp
+    // Expanded sidebar width in pixels. 44 was carried over from the v1.2.0
-    // tabs; when false a section header "Active Tells (n)" is rendered.
+    // icon-only layout and stayed the default long after the sidebar started
-    public bool AutoTellTabsCompactDisplay;
+    // drawing labels beside those icons, so every tab name came out clipped --
-
+    // it only went unnoticed because everyone had widened it by hand. 160 fits
-    // Number of prior tells to preload from the message store when an
+    // the German tab names, which are the longest of the 25 languages, and the
-    // auto tell tab is spawned. Range 0–100; 0 disables preload.
+    // floor below is set where they stop being readable rather than where the
-    public int AutoTellTabsHistoryPreload = 20;
+    // icons stop fitting.
-
+    public int SidebarWidth = 160;
-    // Show the greeter "marked-as-greeted" toggle button next to each
-    // temp tab and dim the tab name when set. Off by default because the
-    // workflow is specific to club-greeter use cases — most users just
-    // want the auto tabs themselves without the extra UI affordance.
     public bool AutoTellTabsShowGreetedToggle;
-
-    // Hellion Chat — One-Time-Hint-Banner that introduces the v0.6.0 pop-out
-    // input feature. Set to true once the user dismisses the banner from a
-    // pop-out window; never reset after that.
     public bool SeenPopOutInputHint;
-
-    // Hellion Chat — v0.6.0 master switch for the pop-out input bar.
-    // Global on purpose: per-tab makes no sense for Auto-Tell-Tabs which
-    // are session-only and would force the user to re-enable it for every
-    // new conversation. Default flipped to ON in v0.6.1 (was OFF in v0.6.0)
-    // because tester feedback called the manual toggle "umständlich, wirkt
-    // unfertig". v11 → v12 migration applies the same flip to existing users.
     public bool PopOutInputEnabled = true;
-
-    // Hellion Chat — v0.6.1 One-Time-Hint-Banner that introduces the
-    // chat-header pop-out toolbar button and reminds about the pop-out
-    // input default flip. Set to true once the user dismisses the banner
-    // from the main chat window; never reset after that.
     public bool SeenPopOutHeaderHint;
 
-    // Hellion Chat — v0.6.1 opt-in: when true, AutoTellTabsService.SpawnTempTab
+    // On by default: the wizard's closing step tells the user to try /tell and
-    // sets tab.PopOut = true on every new auto-tell tab so the conversation
+    // watch a conversation open on its own, so the behaviour it describes has to
-    // pops out as its own window directly. Closing the pop-out returns the
+    // be the behaviour they get.
-    // tab to the sidebar via the standard Popout.OnClose() flow. Default OFF
+    public bool AutoTellTabsOpenAsPopout = true;
-    // because the existing sidebar workflow is what most users (especially
+
-    // club greeters tracking many parallel tells) expect by default.
+    // How sender names are rendered in the chat log.
-    public bool AutoTellTabsOpenAsPopout;
+    public WorldSuffixMode WorldSuffixMode = WorldSuffixMode.OtherWorldOnly;
+    public NameFormMode NameFormMode = NameFormMode.Full;
 
     public int GetRetentionDays(ChatType type)
     {
@@ -167,73 +189,63 @@ public class Configuration : IPluginConfiguration
     public bool HideInLoadingScreens;
     public bool HideInBattle;
 
-    // v1.2.1 — Default geflippt false → true. Hellion-UI im NG+-Menü
+    // v1.2.1: default flipped false → true for consistency with other hide defaults.
-    // versteckt zu halten ist konsistent mit den anderen Hide-Defaults
-    // (Cutscenes, Logged-out, UI-Hidden) — UI-out-of-the-way bei Story-
-    // Sequenzen.
     public bool HideInNewGamePlusMenu = true;
     public bool HideWhenInactive;
-    public int InactivityHideTimeout = 10;
-    public bool InactivityHideActiveDuringBattle = true;
 
-    [Obsolete("Use InactivityHideChannelsV2 instead")]
-    public Dictionary<ChatType, ChatSource> InactivityHideChannels = [];
-
-    public Dictionary<ChatType, (ChatSource, ChatSource)> InactivityHideChannelsV2 = [];
-    public bool InactivityHideExtraChatAll = true;
-    public HashSet<Guid> InactivityHideExtraChatChannels = [];
     public bool ShowHideButton = true;
     public bool NativeItemTooltips = true;
-    public bool PrettierTimestamps = true;
+    public bool ScreenshotMode;
-    public bool MoreCompactPretty;
 
-    // v1.2.1 — Default geflippt false → true. Wiederholte Zeitstempel
+    // No control and no reader. Kept so a stored value survives until the
-    // innerhalb derselben Minute lesen sich als Rauschen; ein einziger
+    // rendering they describe exists; see the reconnect backlog. Note the two
-    // Timestamp pro Minute reicht aus um die Konversation zu verorten.
+    // resource sets disagree on what PrettierTimestamps even means -- the wizard
+    // called it "relative time", the settings tab "modern layout".
+    public bool PrettierTimestamps = true;
+    public bool MoreCompactPretty = true;
     public bool HideSameTimestamps = true;
+
+    // No reader; see the reconnect backlog.
     public bool ShowNoviceNetwork;
 
-    // Hellion Chat — vertical sidebar tab layout reads better than the
+    // Migration-only since v23: the 1.5.6 sidebar↔top-tabs switch, superseded by
-    // horizontal tab strip in the company of Auto-Tell-Tabs (a club
+    // MainWindowLayoutMode in the v1.6.0 rewrite. No UI control anymore; read by
-    // greeter typically tracks 5–15 simultaneous conversations). Bestand
+    // the v23 migration in Plugin.cs and kept deserializable so a 1.5.6 user's
-    // users keep their saved value untouched — only fresh installs pick
+    // false value survives one load. Remove in a later schema bump.
-    // up the new default.
     public bool SidebarTabView = true;
+
+    // No reader; see the reconnect backlog.
     public bool PrintChangelog = true;
     public bool OnlyPreviewIf;
     public int PreviewMinimum = 1;
     public PreviewPosition PreviewPosition = PreviewPosition.Inside;
-    public CommandHelpSide CommandHelpSide = CommandHelpSide.None;
+    public CommandHelpSide CommandHelpSide = CommandHelpSide.Right;
     public KeybindMode KeybindMode = KeybindMode.Strict;
     public LanguageOverride LanguageOverride = LanguageOverride.None;
     public bool CanMove = true;
     public bool CanResize = true;
-    public bool ShowTitleBar = true;
+    public bool ShowTitleBar;
     public bool ShowPopOutTitleBar = true;
     public bool DatabaseBattleMessages;
-    public bool LoadPreviousSession;
     public bool FilterIncludePreviousSessions;
     public bool SortAutoTranslate;
     public bool CollapseDuplicateMessages;
     public bool CollapseKeepUniqueLinks;
+    public bool SymbolPickerEnabled = true;
     public bool PlaySounds = true;
+
+    // AUDIO-1: playback volume (0-1) for the three bundled custom sounds.
+    public float CustomSoundVolume = 0.5f;
+
+    // Toast when a tell the user sent could not be delivered.
+    public bool NotifyFailedTell = true;
+
+    // Warn before sending a message that carries plugin-only glyphs.
+    public bool NotifyPluginDisclosure = true;
     public bool KeepInputFocus = true;
-
-    // v1.2.1 — Default gesenkt 5000 → 2500. 5000 ist auf Mid-Range-
-    // Hardware bei langen Sessions spürbar langsamer (Card-Layout
-    // re-Layout pro Frame), 2500 deckt eine typische Stunde Chat ab
-    // und bleibt smooth. User die mehr brauchen können bis 10000 hoch.
-    public int MaxLinesToRender = 2_500; // 1-10000
-
-    // Default ON to match a German / European 24h locale. The
-    // ChatLogWindow.cs format-flip in v0.5.1 honours this strictly via
-    // CultureInfo.InvariantCulture so the result is consistent across
-    // host locales.
     public bool Use24HourClock = true;
-
     public bool ShowEmotes = true;
     public HashSet<string> BlockedEmotes = [];
-
     public bool FontsEnabled = true;
     public ExtraGlyphRanges ExtraGlyphRanges = 0;
     public float FontSizeV2 = 12.75f;
@@ -258,12 +270,6 @@ public class Configuration : IPluginConfiguration
 
     public float TooltipOffset;
 
-    // v1.2.1 — Default-Chat-Farben sind das Hellion-Brand-Preset. Der
-    // First-Run-Wizard bietet keine Theme-/Preset-Wahl an, daher kriegen
-    // neue User die Hellion-Brand-Farben out-of-the-box (Cyan-Familie für
-    // Standard/Tell, Ember/Warning für laute Channels). Bestand-User mit
-    // leerem ChatColours-Dict werden durch die v15→v16-Migration auf das
-    // Preset gehoben; User die bereits Custom-Farben haben, bleiben.
     public Dictionary<ChatType, uint> ChatColours = BuildDefaultChatColours();
 
     private static Dictionary<ChatType, uint> BuildDefaultChatColours()
@@ -276,150 +282,66 @@ public class Configuration : IPluginConfiguration
         return defaults;
     }
 
+    // No reader; see the reconnect backlog.
     public bool ColorSelectedInputChannelButton = true;
     public List<Tab> Tabs = [];
 
     public ConfigKeyBind? ChatTabForward;
     public ConfigKeyBind? ChatTabBackward;
 
-    public void UpdateFrom(Configuration other, bool backToOriginal)
+    // v20 fields: window visibility state, channel popout pool size and
-    {
+    // sidebar auto-switch threshold. All initializers double as the
-        if (backToOriginal)
+    // migration defaults for configs loaded at v19 or earlier.
-            foreach (var tab in Tabs.Where(t => t.PopOut))
+    // Still written on open/close, but no longer read for the start state: the
-                tab.PopOut = false;
+    // window always shows on login (1.5.6 parity, MainWindow ctor). Kept for the
+    // migration round-trip and a possible future "remember session state" opt-in.
+    public bool MainWindowOpen = true;
+    public bool SettingsWindowOpen;
+    public int MaxParallelPopouts = 8;
+    public TellAutoOpenMode TellAutoOpenMode = TellAutoOpenMode.Sidebar;
 
-        HideChat = other.HideChat;
+    // When true (default) the tell-auto-open router switches the active tab to the
-        HideDuringCutscenes = other.HideDuringCutscenes;
+    // incoming tell on every message; when false the tab is still created/revealed
-        HideWhenNotLoggedIn = other.HideWhenNotLoggedIn;
+    // with its unread badge but the active tab is left where the user is reading.
-        HideWhenUiHidden = other.HideWhenUiHidden;
+    public bool TellAutoOpenSwitchAlways = true;
-        HideInLoadingScreens = other.HideInLoadingScreens;
+    public int SidebarAutoSwitchThresholdPx = 800;
-        HideInBattle = other.HideInBattle;
-        HideInNewGamePlusMenu = other.HideInNewGamePlusMenu;
-        HideWhenInactive = other.HideWhenInactive;
-        InactivityHideTimeout = other.InactivityHideTimeout;
-        InactivityHideActiveDuringBattle = other.InactivityHideActiveDuringBattle;
-        InactivityHideChannelsV2 = other.InactivityHideChannelsV2.ToDictionary(
-            pair => pair.Key,
-            pair => pair.Value
-        );
-        InactivityHideExtraChatAll = other.InactivityHideExtraChatAll;
-        InactivityHideExtraChatChannels = other.InactivityHideExtraChatChannels.ToHashSet();
-        ShowHideButton = other.ShowHideButton;
-        NativeItemTooltips = other.NativeItemTooltips;
-        PrettierTimestamps = other.PrettierTimestamps;
-        MoreCompactPretty = other.MoreCompactPretty;
-        HideSameTimestamps = other.HideSameTimestamps;
-        ShowNoviceNetwork = other.ShowNoviceNetwork;
-        SidebarTabView = other.SidebarTabView;
-        PrintChangelog = other.PrintChangelog;
-        OnlyPreviewIf = other.OnlyPreviewIf;
-        PreviewMinimum = other.PreviewMinimum;
-        PreviewPosition = other.PreviewPosition;
-        CommandHelpSide = other.CommandHelpSide;
-        KeybindMode = other.KeybindMode;
-        LanguageOverride = other.LanguageOverride;
-        CanMove = other.CanMove;
-        CanResize = other.CanResize;
-        ShowTitleBar = other.ShowTitleBar;
-        ShowPopOutTitleBar = other.ShowPopOutTitleBar;
-        DatabaseBattleMessages = other.DatabaseBattleMessages;
-        LoadPreviousSession = other.LoadPreviousSession;
-        FilterIncludePreviousSessions = other.FilterIncludePreviousSessions;
-        SortAutoTranslate = other.SortAutoTranslate;
-        CollapseDuplicateMessages = other.CollapseDuplicateMessages;
-        CollapseKeepUniqueLinks = other.CollapseKeepUniqueLinks;
-        PlaySounds = other.PlaySounds;
-        KeepInputFocus = other.KeepInputFocus;
-        MaxLinesToRender = other.MaxLinesToRender;
-        Use24HourClock = other.Use24HourClock;
-        ShowEmotes = other.ShowEmotes;
-        // Deep-copy the set so the live and mutable Configuration instances don't share state
-        // — a HashSet reference assignment would cause edits in the settings window to leak
-        // into the live config before the user clicks Save.
-        BlockedEmotes = new HashSet<string>(other.BlockedEmotes);
-        FontsEnabled = other.FontsEnabled;
-        ItalicEnabled = other.ItalicEnabled;
-        ExtraGlyphRanges = other.ExtraGlyphRanges;
-        FontSizeV2 = other.FontSizeV2;
-        GlobalFontV2 = other.GlobalFontV2;
-        JapaneseFontV2 = other.JapaneseFontV2;
-        ItalicFontV2 = other.ItalicFontV2;
-        SymbolsFontSizeV2 = other.SymbolsFontSizeV2;
-        TooltipOffset = other.TooltipOffset;
-        ChatColours = other.ChatColours.ToDictionary(entry => entry.Key, entry => entry.Value);
-        ColorSelectedInputChannelButton = other.ColorSelectedInputChannelButton;
 
-        // Hellion Chat — Auto-Tell-Tabs are session-only and therefore
+    // v22 field: MainWindow layout mode (sidebar vs. horizontal top tabs).
-        // never present in a disk-loaded copy. Keep the live temp tabs of
+    // Initializer doubles as the migration default for configs loaded at v21.
-        // *this* configuration alive across an UpdateFrom so a settings
+    public MainWindowLayoutMode MainWindowLayoutMode = MainWindowLayoutMode.Sidebar;
-        // save (or sidebar-mode toggle) does not silently destroy the
-        // user's open tell conversations.
-        //
-        // For persistent tabs we go through Tab.Clone() which intentionally
-        // does NOT copy the NonSerialized Messages list (avoids shared
-        // mutable state on disk-load). On a settings save that means the
-        // chat history for every persistent tab would be wiped — bug
-        // reported by Flo 2026-05-05. We work around it by capturing the
-        // live MessageList (and LastSendUnread counter) by Identifier
-        // before the replace, then restoring it onto the freshly cloned
-        // tabs whose Identifier survives Tab.Clone(). New tabs added in
-        // settings get a fresh empty MessageList; deleted tabs lose their
-        // history (intended).
-        var liveTempTabs = Tabs.Where(t => t.IsTempTab).ToList();
-        var livePersistentSession = Tabs.Where(t => !t.IsTempTab)
-            .ToDictionary(t => t.Identifier, t => (t.Messages, t.LastSendUnread));
-
-        Tabs = other
-            .Tabs.Where(t => !t.IsTempTab)
-            .Select(t =>
-            {
-                var clone = t.Clone();
-                if (livePersistentSession.TryGetValue(clone.Identifier, out var live))
-                {
-                    clone.Messages = live.Messages;
-                    clone.LastSendUnread = live.LastSendUnread;
 }
-                return clone;
-            })
-            .ToList();
-        Tabs.AddRange(liveTempTabs);
 
-        ChatTabForward = other.ChatTabForward;
+[Serializable]
-        ChatTabBackward = other.ChatTabBackward;
+public enum TellAutoOpenMode
-
+{
-        PrivacyFilterEnabled = other.PrivacyFilterEnabled;
+    Off,
-        PrivacyPersistChannels = [.. other.PrivacyPersistChannels];
+    Sidebar,
-        PrivacyPersistUnknownChannels = other.PrivacyPersistUnknownChannels;
+    TopTab,
-
+    Popout,
-        RetentionEnabled = other.RetentionEnabled;
-        RetentionDefaultDays = other.RetentionDefaultDays;
-        RetentionPerChannelDays = other.RetentionPerChannelDays.ToDictionary(
-            p => p.Key,
-            p => p.Value
-        );
-        RetentionLastRunAt = other.RetentionLastRunAt;
-
-        FirstRunCompleted = other.FirstRunCompleted;
-        UseHellionFont = other.UseHellionFont;
-        ShowHonorificTitleInHeader = other.ShowHonorificTitleInHeader;
-
-        // v1.1.0 theme engine fields
-        Theme = other.Theme;
-        WindowOpacity = other.WindowOpacity;
-        ReduceMotion = other.ReduceMotion;
-        UseCompactDensity = other.UseCompactDensity;
-
-        EnableAutoTellTabs = other.EnableAutoTellTabs;
-        AutoTellTabsLimit = other.AutoTellTabsLimit;
-        AutoTellTabsCompactDisplay = other.AutoTellTabsCompactDisplay;
-        AutoTellTabsHistoryPreload = other.AutoTellTabsHistoryPreload;
-        AutoTellTabsShowGreetedToggle = other.AutoTellTabsShowGreetedToggle;
-
-        SeenPopOutInputHint = other.SeenPopOutInputHint;
-        PopOutInputEnabled = other.PopOutInputEnabled;
-        SeenPopOutHeaderHint = other.SeenPopOutHeaderHint;
-        AutoTellTabsOpenAsPopout = other.AutoTellTabsOpenAsPopout;
 }
+
+public static class TellAutoOpenModeExt
+{
+    // The only display name set still in English. It sat inline in ChannelsTab
+    // as a literal array, which is why it was missed when the rest moved into
+    // resources; here it is at least in the same place as its peers for the
+    // localisation pass to pick up.
+    public static string Name(this TellAutoOpenMode mode) =>
+        mode switch
+        {
+            TellAutoOpenMode.Off => "Off",
+            TellAutoOpenMode.Sidebar => "Sidebar",
+            TellAutoOpenMode.TopTab => "Top tab",
+            TellAutoOpenMode.Popout => "Popout",
+            _ => throw new ArgumentOutOfRangeException(nameof(mode), mode, null),
+        };
+}
+
+[Serializable]
+public enum MainWindowLayoutMode
+{
+    Sidebar,
+    TopTabs,
 }
 
 [Serializable]
@@ -456,14 +378,9 @@ public class Tab
 {
     public string Name = Language.Tab_DefaultName;
 
-    // v1.2.0 — optionaler FontAwesome-Glyph-Name. Null bedeutet:
+    // Optional FontAwesome glyph name; null falls back to TabIconMapping default.
-    // Default-Mapping aus TabIconMapping greift (basiert auf Tab-Name).
-    // User können hier per Settings → Tabs einen eigenen Glyph setzen.
     public string? Icon = null;
 
-    [Obsolete("Removed in favor of SelectedChannels")]
-    public Dictionary<ChatType, ChatSource> ChatCodes = new();
-
     public Dictionary<ChatType, (ChatSource, ChatSource)> SelectedChannels = new();
     public bool ExtraChatAll;
     public HashSet<Guid> ExtraChatChannels = [];
@@ -480,18 +397,37 @@ public class Tab
     public bool CanMove = true;
     public bool CanResize = true;
 
-    public bool IndependentHide;
+    // Six per-tab hide conditions used to live here. Their reader was the
-    public bool HideDuringCutscenes = true;
+    // pop-out window, which stopped consulting them in cf4705e; the equivalents
-    public bool HideWhenNotLoggedIn = true;
+    // that survive are the window-level fields of the same name further up this
-    public bool HideWhenUiHidden = true;
+    // file, and v1.12.0 gave every one of those a control.
-    public bool HideInLoadingScreens;
+    //
-    public bool HideInBattle;
+    // Per-tab was the wrong unit anyway: "hide during cutscenes" is a statement
+    // about the screen, not about one conversation.
+    //
+    // HideWhenInactive stays -- the auto-tell service writes it.
     public bool HideWhenInactive;
 
     public bool IsTempTab;
+
+    // Pinned TempTabs survive plugin reload and logout -- tester feedback in
+    // v1.4.7. Pinned tabs live in their own pool (MaxPinnedTempTabs) separate
+    // from the AutoTellTabsLimit bucket.
+    public bool IsPinned;
     public bool AllSenderMessages;
     public TellTarget TellTarget = TellTarget.Empty();
 
+    // Set once, where the name is built from a conversation partner. Never
+    // cleared by promotion, unlike IsTempTab and TellTarget -- both of those are
+    // routing state and are deliberately wiped when a tab is promoted, while the
+    // name they produced stays. Screenshot mode reads this, so it has to outlive
+    // every path that keeps the name but drops the binding.
+    public bool NameCameFromPartner;
+
+    // Per-tab notification sound for messages arriving in an inactive tab.
+    public bool EnableNotificationSound;
+    public uint NotificationSoundId = 1;
+
     [NonSerialized]
     public uint Unread;
 
@@ -510,15 +446,12 @@ public class Tab
     [NonSerialized]
     public Guid Identifier = Guid.NewGuid();
 
-    // Hellion Chat — Auto-Tell-Tabs greeted flag. Toggled manually from the
+    // Session-only greeted flag for club-greeter workflows.
-    // sidebar to mark a tell partner as already greeted in the current
-    // session. NonSerialized because the temp tab itself is session-only.
     [NonSerialized]
     public bool IsGreeted;
 
-    // v1.4.2 — TabTintCache uses separate validation keys per cache so a
+    // Separate validation keys per cache so TellTarget changes don't
-    // TellTarget change picked up by GetTint can't strand GetIcon (or vice
+    // cause GetTint and GetIcon to strand each other with stale entries.
-    // versa) with a stale entry that looks fresh on the shared key.
     [NonSerialized]
     internal string? _cachedTintTellName;
 
@@ -537,20 +470,54 @@ public class Tab
     [NonSerialized]
     internal string? _cachedTellIcon;
 
+    // hover-lerp state. Default 0f means "not hovered". Sidebar
+    // path animates per tab; card-mode-border path is tab-aggregate
+    // (any card-row hover ramps the alpha for all cards in this tab).
+    // Lerp speed lives in the render loop, not here, so the same field
+    // serves both sites at the same animation curve.
+    [NonSerialized]
+    internal float _hoverAlpha;
+
+    [NonSerialized]
+    internal float _cardHoverAlpha;
+
+    // Copy-on-write for the three channel-filter fields. They are read without
+    // any lock from the pending-message thread, the filter worker and the draw
+    // thread, and until v1.12.0 nothing ever wrote them after load -- so the
+    // tab editor is their first writer, and mutating a live Dictionary while
+    // Matches enumerates it is the classic way to get a wrong answer or an
+    // exception on somebody else's thread.
+    //
+    // Building the replacements and swapping the references means a reader sees
+    // either the old set or the new one, never half of either.
+    //
+    // What this deliberately does not do is make the three writes one atomic
+    // step. A reader can catch the new dictionary with the old ExtraChat flag
+    // for a single message. That is harmless: the editor finishes by clearing
+    // and refiltering every tab, so any message placed by a mixed view is
+    // reconsidered a moment later. Making it truly atomic would mean one
+    // reference for all three, and these three are serialized fields with a
+    // shape the config file already has.
+    internal void ReplaceChannelFilter(
+        Dictionary<ChatType, (ChatSource, ChatSource)> selected,
+        bool extraChatAll,
+        HashSet<Guid> extraChatChannels
+    )
+    {
+        Volatile.Write(ref SelectedChannels, selected);
+        Volatile.Write(ref ExtraChatChannels, extraChatChannels);
+        Volatile.Write(ref ExtraChatAll, extraChatAll);
+    }
+
     public bool Matches(Message message)
     {
         if (!message.Matches(SelectedChannels, ExtraChatAll, ExtraChatChannels))
-        {
             return false;
-        }
 
-        // Auto-tell temp tabs are bound to a single conversation partner;
+        // Temp tabs are bound to a single conversation partner — other tells
-        // every other tell that matches the channel filter must NOT land
+        // matching the channel filter must not land here.
-        // here, otherwise all temp tabs would mirror "Tell Exclusive".
         if (IsTempTab && TellTarget?.IsSet() == true)
-        {
             return ChunkUtil.MatchesSender(message, TellTarget.Name, TellTarget.World);
-        }
 
         return true;
     }
@@ -562,13 +529,13 @@ public class Tab
             return;
 
         Unread += 1;
-        if (
+
-            message.Matches(
+        // Stamped for every message now. The condition that used to sit here
-                Plugin.Config.InactivityHideChannelsV2,
+        // filtered on InactivityHideChannels, a setting for the hide-when-
-                Plugin.Config.InactivityHideExtraChatAll,
+        // inactive feature -- and that feature lost its reader in cf4705e. So
-                Plugin.Config.InactivityHideExtraChatChannels
+        // which tell tab the auto-tell pool drops first, which is the only
-            )
+        // thing that reads this stamp, hung on a setting for something that
-        )
+        // does not happen.
         LastActivity = Environment.TickCount64;
     }
 
@@ -579,6 +546,11 @@ public class Tab
         return new Tab
         {
             Name = Name,
+            // Icon feeds the sidebar glyph and a clone round-trip used to drop
+            // it silently. ChatCodes sat beside it until v1.12.0, carrying data
+            // for a migration that the v16 schema gate had already made
+            // unreachable.
+            Icon = Icon,
             SelectedChannels = SelectedChannels.ToDictionary(pair => pair.Key, pair => pair.Value),
             ExtraChatAll = ExtraChatAll,
             ExtraChatChannels = ExtraChatChannels.ToHashSet(),
@@ -593,27 +565,21 @@ public class Tab
             Opacity = Opacity,
             Identifier = Identifier,
             InputDisabled = InputDisabled,
-            CurrentChannel = CurrentChannel,
+            CurrentChannel = CurrentChannel.Clone(),
             CanMove = CanMove,
             CanResize = CanResize,
-            IndependentHide = IndependentHide,
-            HideDuringCutscenes = HideDuringCutscenes,
-            HideWhenNotLoggedIn = HideWhenNotLoggedIn,
-            HideWhenUiHidden = HideWhenUiHidden,
-            HideInLoadingScreens = HideInLoadingScreens,
-            HideInBattle = HideInBattle,
             HideWhenInactive = HideWhenInactive,
             IsTempTab = IsTempTab,
+            IsPinned = IsPinned,
             AllSenderMessages = AllSenderMessages,
-            TellTarget = TellTarget.From(TellTarget),
+            TellTarget = TellTarget.Clone(),
+            EnableNotificationSound = EnableNotificationSound,
+            NotificationSoundId = NotificationSoundId,
             IsGreeted = IsGreeted,
         };
     }
 
-    /// <summary>
+    /// Ordered message list with duplicate ID tracking, sorting and mutex protection.
-    /// MessageList provides an ordered list of messages with duplicate ID
-    /// tracking, sorting and mutex protection.
-    /// </summary>
     public class MessageList
     {
         private readonly SemaphoreSlim LockSlim = new(1, 1);
@@ -701,10 +667,7 @@ public class Tab
             }
         }
 
-        /// <summary>
+        /// Current message count. Lock-per-read is acceptable for 1×/sec status bar polling.
-        /// Aktuelle Anzahl der gespeicherten Messages. Lock-acquire pro Read
-        /// ist OK für 1×/sec Status-Bar-Polling (v1.2.0).
-        /// </summary>
         public int Count
         {
             get
@@ -721,9 +684,7 @@ public class Tab
             }
         }
 
-        /// <summary>
+        /// Returns an array copy of the message list for usage outside of main thread.
-        /// Returns an array copy of the message list for usage outside of main thread
-        /// </summary>
         public async Task<Message[]> GetCopy(int millisecondsTimeout = -1)
         {
             await LockSlim.WaitAsync(millisecondsTimeout);
@@ -737,10 +698,7 @@ public class Tab
             }
         }
 
-        /// <summary>
+        /// Returns a read-only list while holding a reader lock. Use with a using statement.
-        /// GetReadOnly returns a read-only list of messages while holding a
-        /// reader lock. The list should be used with a using statement.
-        /// </summary>
         public RLockedMessageList GetReadOnly(int millisecondsTimeout = -1)
         {
             LockSlim.Wait(millisecondsTimeout);
@@ -794,6 +752,29 @@ public class UsedChannel
     {
         Channel = channel;
     }
+
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Deep-clone the UsedChannel so Tab.Clone() no longer shares
+    //   channel state (incl. TellTarget) with its origin Tab. Previously
+    //   a reference copy: PopOut and Temp tabs mutated each other.
+    // - Name is intentionally a reference copy (matches upstream); it
+    //   gets reassigned on every channel switch anyway.
+    // TEST-MIRROR: ../../Hellion Build test/_Helpers/UsedChannelCloneTests.cs
+    // ---------------------------------------------------------------
+    public UsedChannel Clone()
+    {
+        return new UsedChannel
+        {
+            Channel = Channel,
+            Name = Name,
+            TellTarget = TellTarget?.Clone(),
+
+            UseTempChannel = UseTempChannel,
+            TempChannel = TempChannel,
+            TempTellTarget = TempTellTarget?.Clone(),
+        };
+    }
 }
 
 [Serializable]
@@ -877,17 +858,27 @@ public enum LanguageOverride
     French,
     German,
     Greek,
-
-    // Italian,
     Japanese,
-
-    // Korean,
-    // Norwegian,
     PortugueseBrazil,
     Romanian,
     Russian,
     Spanish,
     Swedish,
+
+    // v1.5.3: Crowdin-heritage activated and Forge-maintained additions.
+    // Append-only to preserve serialized integer values of existing user configs.
+    Italian,
+    Korean,
+    Norwegian,
+    Catalan,
+    Czech,
+    Danish,
+    Finnish,
+    Hungarian,
+    Polish,
+    PortuguesePortugal,
+    Turkish,
+    Ukrainian,
 }
 
 public static class LanguageOverrideExt
@@ -903,15 +894,24 @@ public static class LanguageOverrideExt
             LanguageOverride.French => "Français",
             LanguageOverride.German => "Deutsch",
             LanguageOverride.Greek => "Ελληνικά",
-            // LanguageOverride.Italian => "Italiano",
+            LanguageOverride.Italian => "Italiano",
             LanguageOverride.Japanese => "日本語",
-            // LanguageOverride.Korean => "한국어 (Korean)",
+            LanguageOverride.Korean => "한국어",
-            // LanguageOverride.Norwegian => "Norsk",
+            LanguageOverride.Norwegian => "Norsk bokmål",
             LanguageOverride.PortugueseBrazil => "Português do Brasil",
             LanguageOverride.Romanian => "Română",
             LanguageOverride.Russian => "Русский",
             LanguageOverride.Spanish => "Español",
             LanguageOverride.Swedish => "Svenska",
+            LanguageOverride.Catalan => "Català",
+            LanguageOverride.Czech => "Čeština",
+            LanguageOverride.Danish => "Dansk",
+            LanguageOverride.Finnish => "Suomi",
+            LanguageOverride.Hungarian => "Magyar",
+            LanguageOverride.Polish => "Polski",
+            LanguageOverride.PortuguesePortugal => "Português (Portugal)",
+            LanguageOverride.Turkish => "Türkçe",
+            LanguageOverride.Ukrainian => "Українська",
             _ => throw new ArgumentOutOfRangeException(nameof(mode), mode, null),
         };
 
@@ -926,17 +926,80 @@ public static class LanguageOverrideExt
             LanguageOverride.French => "fr",
             LanguageOverride.German => "de",
             LanguageOverride.Greek => "el",
-            // LanguageOverride.Italian => "it",
+            LanguageOverride.Italian => "it",
             LanguageOverride.Japanese => "ja",
-            // LanguageOverride.Korean => "ko",
+            LanguageOverride.Korean => "ko",
-            // LanguageOverride.Norwegian => "no",
+            LanguageOverride.Norwegian => "nb",
             LanguageOverride.PortugueseBrazil => "pt-br",
             LanguageOverride.Romanian => "ro",
             LanguageOverride.Russian => "ru",
             LanguageOverride.Spanish => "es",
             LanguageOverride.Swedish => "sv",
+            LanguageOverride.Catalan => "ca",
+            LanguageOverride.Czech => "cs",
+            LanguageOverride.Danish => "da",
+            LanguageOverride.Finnish => "fi",
+            LanguageOverride.Hungarian => "hu",
+            LanguageOverride.Polish => "pl",
+            LanguageOverride.PortuguesePortugal => "pt-pt",
+            LanguageOverride.Turkish => "tr",
+            LanguageOverride.Ukrainian => "uk",
             _ => throw new ArgumentOutOfRangeException(nameof(mode), mode, null),
         };
+
+    // Maps a language to the ExtraGlyphRanges flag required for full UI
+    // rendering in that locale. The settings save path ORs this into
+    // Mutable.ExtraGlyphRanges so users do not need to know which range
+    // to tick manually. Returns 0 for locales fully covered by the default
+    // ImGui glyph range (Latin-1) or by the separate Japanese font handle.
+    // The same mapping keyed by culture code, for when the language override is
+    // None and the UI follows Dalamud. Without this the ranges only ever get
+    // filled by an explicit language pick -- installs that never touched the
+    // setting rendered their own locale in whatever the default range covers,
+    // which for Korean, Chinese, Cyrillic and Greek is boxes. It went unnoticed
+    // while configs accumulated ranges over time; a fresh config has none.
+    public static ExtraGlyphRanges RequiredGlyphRangesForCulture(string? cultureCode)
+    {
+        var code = (cultureCode ?? string.Empty).ToLowerInvariant();
+
+        // Longest first: zh-hant has to win over the zh prefix.
+        if (code.StartsWith("zh-hant") || code.StartsWith("zh-tw") || code.StartsWith("zh-hk"))
+            return ExtraGlyphRanges.ChineseFull;
+        if (code.StartsWith("zh"))
+            return ExtraGlyphRanges.ChineseSimplifiedCommon;
+        if (code.StartsWith("ko"))
+            return ExtraGlyphRanges.Korean;
+        if (code.StartsWith("uk") || code.StartsWith("ru") || code.StartsWith("be"))
+            return ExtraGlyphRanges.Cyrillic;
+        if (code.StartsWith("el"))
+            return ExtraGlyphRanges.Greek;
+        if (
+            code.StartsWith("cs")
+            || code.StartsWith("pl")
+            || code.StartsWith("ro")
+            || code.StartsWith("hu")
+            || code.StartsWith("tr")
+        )
+            return ExtraGlyphRanges.LatinExtended;
+
+        return 0;
+    }
+
+    public static ExtraGlyphRanges RequiredGlyphRanges(this LanguageOverride mode) =>
+        mode switch
+        {
+            LanguageOverride.Korean => ExtraGlyphRanges.Korean,
+            LanguageOverride.ChineseSimplified => ExtraGlyphRanges.ChineseSimplifiedCommon,
+            LanguageOverride.ChineseTraditional => ExtraGlyphRanges.ChineseFull,
+            LanguageOverride.Ukrainian => ExtraGlyphRanges.Cyrillic,
+            LanguageOverride.Greek => ExtraGlyphRanges.Greek,
+            LanguageOverride.Czech
+            or LanguageOverride.Polish
+            or LanguageOverride.Romanian
+            or LanguageOverride.Hungarian
+            or LanguageOverride.Turkish => ExtraGlyphRanges.LatinExtended,
+            _ => 0,
+        };
 }
 
 [Serializable]
@@ -950,10 +1013,23 @@ public enum ExtraGlyphRanges
     Korean = 1 << 4,
     Thai = 1 << 5,
     Vietnamese = 1 << 6,
+
+    // v1.5.3: Custom ranges for languages with Latin Extended-A glyphs (Czech,
+    // Polish, Romanian, Turkish, Hungarian) and Greek polytonic accents.
+    LatinExtended = 1 << 7,
+    Greek = 1 << 8,
 }
 
 public static class ExtraGlyphRangesExt
 {
+    // Custom (start, end) inclusive pair lists for ranges that ImGui does
+    // not ship a built-in helper for. SetUpRanges() feeds these into
+    // ImFontGlyphRangesBuilder.AddChar via the `chars` parameter of
+    // BuildRange so we avoid the lifetime/pinning question that the native
+    // GetGlyphRanges*-pointer pathway papers over.
+    internal static readonly ushort[] LatinExtendedPairs = { 0x0100, 0x024F };
+    internal static readonly ushort[] GreekPairs = { 0x0370, 0x03FF, 0x1F00, 0x1FFF };
+
     public static string Name(this ExtraGlyphRanges ranges) =>
         ranges switch
         {
@@ -965,6 +1041,8 @@ public static class ExtraGlyphRangesExt
             ExtraGlyphRanges.Korean => Language.ExtraGlyphRanges_Korean_Name,
             ExtraGlyphRanges.Thai => Language.ExtraGlyphRanges_Thai_Name,
             ExtraGlyphRanges.Vietnamese => Language.ExtraGlyphRanges_Vietnamese_Name,
+            ExtraGlyphRanges.LatinExtended => Language.ExtraGlyphRanges_LatinExtended_Name,
+            ExtraGlyphRanges.Greek => Language.ExtraGlyphRanges_Greek_Name,
             _ => throw new ArgumentOutOfRangeException(nameof(ranges), ranges, null),
         };
 
@@ -979,6 +1057,10 @@ public static class ExtraGlyphRangesExt
             ExtraGlyphRanges.Korean => (nint)ImGui.GetIO().Fonts.GetGlyphRangesKorean(),
             ExtraGlyphRanges.Thai => (nint)ImGui.GetIO().Fonts.GetGlyphRangesThai(),
             ExtraGlyphRanges.Vietnamese => (nint)ImGui.GetIO().Fonts.GetGlyphRangesVietnamese(),
+            // LatinExtended and Greek are applied via builder.AddChar in
+            // FontManager.SetUpRanges, not through a native pointer range.
+            ExtraGlyphRanges.LatinExtended => 0,
+            ExtraGlyphRanges.Greek => 0,
             _ => throw new ArgumentOutOfRangeException(nameof(ranges), ranges, null),
         };
 }

HellionChat/EmoteCache.cs

@@ -79,7 +79,7 @@ public static class EmoteCache
         Done,
     }
 
-    // All of this data is uninitalized while State is not `LoadingState.Done`
+    // All fields below are uninitialised while State != Done.
     public static LoadingState State = LoadingState.Unloaded;
 
     private static readonly Dictionary<string, Emote> Cache = new();
@@ -87,15 +87,11 @@ public static class EmoteCache
 
     public static string[] SortedCodeArray = [];
 
-    // Plugin-scoped cancellation source for in-flight emote loads. Dispose
+    // Cancelled on Dispose to stop in-flight downloads; replaced on re-enable.
-    // cancels every running download/texture-create so the workers don't
-    // touch a torn-down TextureProvider on plugin reload. Replaced with a
-    // fresh source on the next LoadData() call so a re-enable still works.
     private static CancellationTokenSource Cts = new();
     internal static CancellationToken Token => Cts.Token;
 
-    // Drain target for in-flight loads on Dispose; without this an orphan
+    // Tracks in-flight loads so Dispose can drain them before teardown.
-    // continuation could still write to a torn-down Texture/Frames field.
     private static readonly ConcurrentBag<Task> PendingLoads = new();
 
     internal static void TrackLoad(Task loadTask, string emoteCode)
@@ -105,7 +101,10 @@ public static class EmoteCache
                 t =>
                 {
                     if (t.IsFaulted)
-                        Plugin.Log.Error(t.Exception!, $"EmoteCache load failed for {emoteCode}");
+                        Plugin.LogProxy.Error(
+                            t.Exception!,
+                            $"EmoteCache load failed for {emoteCode}"
+                        );
                 },
                 TaskScheduler.Default
             )
@@ -117,8 +116,7 @@ public static class EmoteCache
         if (State is not LoadingState.Unloaded)
             return;
 
-        // Refresh the CTS in case Dispose was called and we're being re-enabled
+        // Reset CTS if Dispose was called and the plugin is being re-enabled.
-        // in the same process (Dalamud /xlplugins toggle).
         if (Cts.IsCancellationRequested)
             Cts = new CancellationTokenSource();
 
@@ -127,6 +125,15 @@ public static class EmoteCache
         try
         {
             var global = await Client.GetAsync(GlobalEmotes, ct);
+            if (!global.IsSuccessStatusCode)
+            {
+                // Nothing usable at all -- let the catch below reset to Unloaded
+                // so a later trigger can retry.
+                throw new HttpRequestException(
+                    $"BetterTTV global emotes returned {(int)global.StatusCode}."
+                );
+            }
+
             var globalList = await global.Content.ReadAsStringAsync(ct);
 
             foreach (var emote in JsonSerializer.Deserialize<Emote[]>(globalList)!)
@@ -137,14 +144,29 @@ public static class EmoteCache
             for (var i = 0; i < 15; i++)
             {
                 var top = await Client.GetAsync(Top100Emotes.Format(BetterTTV, lastId), ct);
+
+                // The shared-emote endpoint went behind authentication and now
+                // answers 403 with a JSON object. Deserializing that as a list
+                // threw on every single start, and took the global emotes -- which
+                // still work -- down with it. The global set is the useful half
+                // anyway, so a failure here stops paging instead of the load.
+                if (!top.IsSuccessStatusCode)
+                {
+                    Plugin.LogProxy.Warning(
+                        $"BetterTTV shared emotes unavailable ({(int)top.StatusCode}); "
+                            + "continuing with global emotes only."
+                    );
+                    break;
+                }
+
                 var topList = await top.Content.ReadAsStringAsync(ct);
 
-                var jsonList = JsonSerializer.Deserialize<List<Top100>>(topList)!;
+                var jsonList = JsonSerializer.Deserialize<List<Top100>>(topList);
-                // BetterTTV occasionally returns entries with a null Code; the
+                if (jsonList is not { Count: > 0 })
-                // upstream code passed those straight into Dictionary.TryAdd
+                    break;
-                // and tripped ArgumentNullException, killing the whole emote
+
-                // load. Skip them defensively so a single bad row no longer
+                // BetterTTV occasionally returns entries with a null Code;
-                // breaks the cache for everyone else.
+                // skip them so a single bad row doesn't break the whole cache.
                 foreach (var emote in jsonList)
                     if (
                         !string.IsNullOrEmpty(emote.Emote.Code)
@@ -152,7 +174,7 @@ public static class EmoteCache
                     )
                         Cache.TryAdd(emote.Emote.Code, emote.Emote);
 
-                lastId = jsonList.Last().Id;
+                lastId = jsonList[^1].Id;
             }
 
             SortedCodeArray = Cache.Keys.Order().ToArray();
@@ -160,18 +182,13 @@ public static class EmoteCache
         }
         catch (OperationCanceledException)
         {
-            // Plugin disposed while the cache was loading; leave State on
+            // Plugin disposed mid-load; State stays on Loading so re-enable can retry.
-            // Loading so a subsequent re-enable can re-issue LoadData with
-            // a fresh CTS (handled above).
         }
         catch (Exception ex)
         {
-            // Reset to Unloaded so a later trigger (e.g. the user reopening
+            // Reset to Unloaded so a later trigger can retry without a plugin reload.
-            // the Emotes tab after the network recovers) can retry. Without
-            // this the State stays on Loading and the early-out at the top
-            // of LoadData blocks every further attempt until plugin reload.
             State = LoadingState.Unloaded;
-            Plugin.Log.Error(ex, "BetterTTV cache wasn't initialized");
+            Plugin.LogProxy.Error(ex, "BetterTTV cache wasn't initialized");
         }
     }
 
@@ -227,7 +244,7 @@ public static class EmoteCache
         }
         catch
         {
-            Plugin.Log.Error("Failed to convert");
+            Plugin.LogProxy.Error("Failed to convert");
             return null;
         }
     }
@@ -248,11 +265,8 @@ public static class EmoteCache
 
         internal async Task<byte[]> LoadAsync(Emote emote, CancellationToken ct)
         {
-            // BetterTTV-supplied Id and ImageType are interpolated straight
+            // Path-traversal guard: resolve and verify the candidate path stays
-            // into the filename. HTTPS protects the wire, but a compromised
+            // inside the cache directory before reading or writing.
-            // upstream could still hand us "../foo" and write into the
-            // pluginConfigs root (or worse). Resolve the candidate path and
-            // refuse anything that escapes the cache directory.
             var dir = Path.GetFullPath(
                 Path.Join(Plugin.Interface.ConfigDirectory.FullName, "EmoteCacheV1")
             );
@@ -320,7 +334,7 @@ public static class EmoteCache
             catch (Exception ex)
             {
                 Failed = true;
-                Plugin.Log.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
+                Plugin.LogProxy.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
             }
         }
 
@@ -397,7 +411,7 @@ public static class EmoteCache
 
                     var delay = frame.Metadata.GetGifMetadata().FrameDelay / 100f;
 
-                    // Follows the same pattern as browsers, anything under 0.02s delay will be rounded up to 0.1s
+                    // Match browser behaviour: anything under 20ms rounds up to 100ms.
                     if (delay < 0.02f)
                         delay = 0.1f;
 
@@ -416,8 +430,7 @@ public static class EmoteCache
             }
             catch (OperationCanceledException)
             {
-                // Plugin disposed mid-load; partial frames are released by
+                // Plugin disposed mid-load; release any partial frames.
-                // InnerDispose on the next dispose pass.
                 foreach (var f in Frames)
                     f.Texture.Dispose();
                 Frames = [];
@@ -425,7 +438,7 @@ public static class EmoteCache
             catch (Exception ex)
             {
                 Failed = true;
-                Plugin.Log.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
+                Plugin.LogProxy.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
             }
         }
     }

HellionChat/Export/MessageExporter.cs

@@ -1,6 +1,7 @@
 using System.Globalization;
 using System.Text;
 using HellionChat.Code;
+using HellionChat.Util;
 
 namespace HellionChat.Export;
 
@@ -32,14 +33,24 @@ internal static class ExportFormatExt
         };
 }
 
-/// <summary>
+// Serializes message snapshots to Markdown, JSON, or CSV.
-/// Serializes message snapshots into Markdown, JSON, or CSV. The caller is
+//
-/// expected to filter the input enumerable; this class only handles
+// Text comes from the chunk lists, never from SenderSource/ContentSource. Those
-/// formatting and writes to the supplied path. Sender substring filtering
+// are raw SeStrings, and reading TextValue on one containing an auto-translate
-/// happens here because it requires deserialized SeString.TextValue.
+// phrase reaches SeStringEvaluator, which asserts it is on the main thread and
-/// </summary>
+// throws unconditionally when a macro resolves a global number. An export runs on
+// a worker, so that would abort it partway and leave half a file behind.
+//
+// The chunks are already resolved: ChunkUtil turns auto-translate into text at
+// ingest, and the full-text index reads them exactly this way. Same strings, no
+// evaluator, no thread affinity.
+//
+// The caller pre-filters by channel and date via StreamForExport; only the sender
+// substring is applied here.
 internal static class MessageExporter
 {
+    private static readonly UTF8Encoding Utf8NoBom = new(encoderShouldEmitUTF8Identifier: false);
+
     internal record FilterDescription(
         IReadOnlyCollection<int>? ChatTypes,
         DateTimeOffset? From,
@@ -54,22 +65,83 @@ internal static class MessageExporter
         FilterDescription filter
     )
     {
+        // Rejected before the file is touched. The old order opened the stream
+        // first, so an unknown format left a zero-byte file where the user's
+        // previous export had been.
+        if (!Enum.IsDefined(format))
+            throw new ArgumentOutOfRangeException(nameof(format), format, null);
+
         var matching = filter.SenderSubstring is { Length: > 0 } needle
             ? messages.Where(m => MatchesSender(m, needle))
             : messages;
 
-        using var writer = new StreamWriter(path, append: false, encoding: Encoding.UTF8);
+        // Written beside the target and moved into place at the end. A crash or
-        return format switch
+        // an unplugged drive halfway through would otherwise leave a file that
+        // opens fine and is quietly incomplete -- and this is the path a GDPR
+        // access request goes out on, where "looks complete" is the dangerous
+        // failure.
+        var temp = path + ".part";
+        int written;
+        try
+        {
+            // Encoding.UTF8 writes a byte order mark, and that is not a
+            // cosmetic detail here: a leading U+FEFF makes the JSON invalid for
+            // every strict parser, Python's json.load included. CSV is the one
+            // format that wants it -- without a BOM Excel guesses the codepage
+            // and mangles every non-ASCII name in the file.
+            var encoding = format == ExportFormat.Csv ? Encoding.UTF8 : Utf8NoBom;
+
+            using (var writer = new StreamWriter(temp, append: false, encoding))
+            {
+                written = format switch
                 {
                     ExportFormat.Markdown => WriteMarkdown(writer, matching, filter),
                     ExportFormat.Json => WriteJson(writer, matching, filter),
-            ExportFormat.Csv => WriteCsv(writer, matching, filter),
+                    _ => WriteCsv(writer, matching, filter),
-            _ => throw new ArgumentOutOfRangeException(nameof(format), format, null),
                 };
             }
 
+            // An export that matched nothing does not replace anything. The
+            // file still has a header and a footer, so moving it would put a
+            // near-empty file where the user's previous export was -- and then
+            // report "no message matched the filter", which reads as "nothing
+            // happened". Dalamud's save dialog has no overwrite confirmation to
+            // fall back on.
+            if (written == 0)
+            {
+                TryDeleteTemp(temp);
+                return 0;
+            }
+
+            File.Move(temp, path, overwrite: true);
+            return written;
+        }
+        catch
+        {
+            TryDeleteTemp(temp);
+            throw;
+        }
+    }
+
+    // Best effort: the export already failed, and a leftover .part file is a
+    // smaller problem than masking the original exception with an IO one.
+    private static void TryDeleteTemp(string temp)
+    {
+        try
+        {
+            if (File.Exists(temp))
+                File.Delete(temp);
+        }
+        catch (IOException) { }
+        catch (UnauthorizedAccessException) { }
+    }
+
     private static bool MatchesSender(Message m, string needle) =>
-        m.SenderSource.TextValue.Contains(needle, StringComparison.OrdinalIgnoreCase);
+        SenderText(m).Contains(needle, StringComparison.OrdinalIgnoreCase);
+
+    private static string SenderText(Message m) => ChunkUtil.ToRawString(m.Sender);
+
+    private static string ContentText(Message m) => ChunkUtil.ToRawString(m.Content);
 
     private static int WriteMarkdown(
         StreamWriter w,
@@ -98,8 +170,9 @@ internal static class MessageExporter
             }
 
             var chatType = (ChatType)(ushort)m.Code.Type;
-            var sender = m.SenderSource.TextValue.Trim().Trim('<', '>', '[', ']', ':').Trim();
+            var sender = SenderText(m).Trim().Trim('<', '>', '[', ']', ':').Trim();
-            var content = m.ContentSource.TextValue;
+            var content = ContentText(m);
+
             if (string.IsNullOrEmpty(sender))
                 w.WriteLine($"**[{localDate:HH:mm}] {chatType}:** {content}");
             else
@@ -132,8 +205,7 @@ internal static class MessageExporter
         FilterDescription filter
     )
     {
-        // Manual JSON to avoid pulling in System.Text.Json policy choices.
+        // Manual JSON to avoid System.Text.Json policy coupling.
-        // Output is a single object with metadata and an array of messages.
         w.Write("{\n  \"exported_at\": \"");
         w.Write(DateTimeOffset.UtcNow.ToString("O", CultureInfo.InvariantCulture));
         w.Write("\",\n  \"plugin\": \"Hellion Chat\",\n");
@@ -174,12 +246,17 @@ internal static class MessageExporter
             w.Write($",\"date\":\"{m.Date.ToString("O", CultureInfo.InvariantCulture)}\"");
             w.Write($",\"chat_type\":{(int)m.Code.Type}");
             w.Write($",\"chat_type_name\":\"{chatType}\"");
-            w.Write($",\"source_kind\":{m.Code.Source}");
+            // Cast, not interpolate. These are XivChatRelationKind, and string
-            w.Write($",\"target_kind\":{m.Code.Target}");
+            // interpolation of an enum writes the member name -- so every
+            // message with a recognised relation produced
+            // "source_kind":LocalPlayer, which no parser accepts. This is the
+            // file an access request goes out on.
+            w.Write($",\"source_kind\":{(int)m.Code.Source}");
+            w.Write($",\"target_kind\":{(int)m.Code.Target}");
             w.Write($",\"receiver\":{m.Receiver}");
             w.Write($",\"content_id\":{m.ContentId}");
-            w.Write($",\"sender\":{JsonString(m.SenderSource.TextValue)}");
+            w.Write($",\"sender\":{JsonString(SenderText(m))}");
-            w.Write($",\"content\":{JsonString(m.ContentSource.TextValue)}");
+            w.Write($",\"content\":{JsonString(ContentText(m))}");
             w.Write("}");
         }
 
@@ -194,7 +271,7 @@ internal static class MessageExporter
         FilterDescription filter
     )
     {
-        // Header line always written so empty exports are still importable.
+        // Header always written so empty exports remain importable.
         w.WriteLine("Date,ChatType,ChatTypeName,Sender,Content,Receiver,ContentId");
         var count = 0;
         foreach (var m in messages)
@@ -207,9 +284,9 @@ internal static class MessageExporter
             w.Write(',');
             w.Write(CsvString(chatType.ToString()));
             w.Write(',');
-            w.Write(CsvString(m.SenderSource.TextValue));
+            w.Write(CsvString(SenderText(m)));
             w.Write(',');
-            w.Write(CsvString(m.ContentSource.TextValue));
+            w.Write(CsvString(ContentText(m)));
             w.Write(',');
             w.Write(m.Receiver);
             w.Write(',');
@@ -262,8 +339,17 @@ internal static class MessageExporter
 
     private static string CsvString(string s)
     {
+        // Leading =, +, - and @ make a spreadsheet treat the cell as a formula.
+        // Every value here is text somebody else typed into a chat channel, and
+        // this file exists to be opened in Excel, so a prefixed apostrophe goes
+        // in front. It is the standard defence and it costs one character that
+        // spreadsheets hide.
+        if (s.Length > 0 && s[0] is '=' or '+' or '-' or '@' or '\t' or '\r')
+            s = "'" + s;
+
         if (s.IndexOfAny(['"', ',', '\n', '\r']) < 0)
             return s;
+
         return "\"" + s.Replace("\"", "\"\"") + "\"";
     }
 }

HellionChat/FontManager.cs

@@ -1,26 +1,110 @@
-using Dalamud;
+using Dalamud;
 using Dalamud.Bindings.ImGui;
 using Dalamud.Interface;
 using Dalamud.Interface.FontIdentifier;
 using Dalamud.Interface.GameFonts;
 using Dalamud.Interface.ManagedFontAtlas;
 using Dalamud.Interface.Utility;
+using Dalamud.Plugin;
+using HellionChat.Themes;
+using HellionChat.Ui.StyleEngine;
 
 namespace HellionChat;
 
-public class FontManager
+// Two LogProxy sites live in static methods (TryGetBundledFontBytes,
+// AddFontWithFallback); a ctor-injected ILogger would not be reachable
+// from those scopes, so the class stays on Plugin.LogProxy.
+//
+// Hybrid handle model: Axis and AxisItalic mirror the game's current
+// font state and are init-only. FontAwesome reuses Dalamud's UiBuilder
+// fixed-width icon handle and is likewise init-only. RegularFont and
+// ItalicFont depend on user-toggleable settings and get replaced live
+// via RebuildDelegateFonts when those settings change; they stay as
+// mutable nullable fields.
+//
+// The four atlas-owned handles register inside a single
+// SuppressAutoRebuild block so the font atlas only rebuilds once for the
+// whole plugin start instead of once per handle. FontAwesome lives
+// outside that accounting because the UiBuilder already owns it.
+public sealed class FontManager : IDisposable
 {
-    internal IFontHandle Axis = null!;
+    private readonly IDalamudPluginInterface _pluginInterface;
-    internal IFontHandle AxisItalic = null!;
 
-    internal IFontHandle RegularFont = null!;
+    internal IFontHandle Axis { get; init; }
+    internal IFontHandle AxisItalic { get; init; }
+    internal IFontHandle FontAwesome { get; init; }
+
+    // Mutable because the live font settings replace these via
+    // RebuildDelegateFonts. Reference replacement is atomic for reference
+    // types, so push sites that read the field once per frame see at most
+    // one stale handle.
+    internal IFontHandle? RegularFont;
     internal IFontHandle? ItalicFont;
 
-    internal IFontHandle FontAwesome = null!;
+    // v1.13.0: one handle per type role that needs a face of its own. Sender
+    // carries extra weight, Meta a smaller size on a tiny glyph range.
+    internal IFontHandle? SenderFont;
+    internal IFontHandle? MetaFont;
+
+    // The mockup asks for weight 600 on the sender. There is no bold face in the
+    // plugin and none in the bundled file, so the weight comes from a denser
+    // rasterisation of the same outline. 1.0 is the SafeFontConfig default;
+    // below ~1.2 the difference is not visible, above ~1.4 the glyphs smear.
+    //
+    // Note on cost: all three delegate handles now carry the full glyph range.
+    // The meta face started with an ASCII-sized one, on the assumption it would
+    // only ever draw clocks and world names -- then the channel header wanted
+    // to use it, and tab names are free user input. An umlaut would have been
+    // enough to break it.
+    //
+    // Not const: the smoke test compares three values side by side, and the
+    // widget gallery exposes it.
+    internal static float SenderWeight = 1.3f;
+
+    // Wired post-build (B4b-3); a Func keeps FontManager off the theme layer.
+    private Func<ThemeTypography?>? _typographySource;
+
+    // Lets RebuildDelegateFontsIfChanged skip rebuilds when the size is unchanged.
+    private (
+        float Global,
+        float Symbols,
+        float Sender,
+        float Meta,
+        float Italic
+    ) _lastBuiltFingerprint;
+
+    // True once every required atlas-owned handle reports Available. Components
+    // gate their first-frame draw on this — without it the layout math would
+    // run against placeholder font metrics and snap when the real atlas
+    // finishes building. ItalicFont being null means italics are disabled in
+    // config, which is a ready state, not a pending one.
+    public bool FontsReady =>
+        Axis.Available
+        && AxisItalic.Available
+        && FontAwesome.Available
+        && RegularFont is { Available: true }
+        && (ItalicFont is null || ItalicFont.Available)
+        // Unconditional, unlike ItalicFont: these two are always built. A handle
+        // that is not ready yet makes SimplePushedFont push nothing at all --
+        // silently -- so the first frame after a rebuild would measure the wrong
+        // face and write those heights into the row cache.
+        && SenderFont is { Available: true }
+        && MetaFont is { Available: true };
 
     private ushort[] Ranges = [];
     private ushort[] JpRange = [];
 
+    // Trimmed remainder the NotoSansCjk fallback is the sole source for
+    // (Hangul + full Han); excludes the Default/Latin block already merged
+    // by the global font, so the fallback no longer re-merges the full Ranges array.
+    private ushort[] CjkFallbackGlyphRange = [];
+
+    // Report accessor for the ctor self-test: built glyph-range array lengths so
+    // the step can show the dedup effect (a small trimmed fallback vs the large
+    // primary range) in its on-disk report instead of a bare Pass.
+    internal (int Ranges, int JpRange, int CjkFallback) GlyphRangeLengths =>
+        (Ranges.Length, JpRange.Length, CjkFallbackGlyphRange.Length);
+
     public static readonly HashSet<float> AxisFontSizeList =
     [
         9.6f,
@@ -41,147 +125,224 @@ public class FontManager
         90f,
     ];
 
-    /// <summary>
+    // Bundled UI font bytes (Inter Light, OFL-1.1); lazily loaded from manifest resources
-    /// Backing bytes for the bundled Hellion font (Exo 2, OFL-1.1). Lazily
+    private static byte[]? BundledFontBytes;
-    /// extracted from the assembly's manifest resources on first use; the
-    /// load happens inside the font atlas build callback so we keep the
-    /// allocation off the plugin constructor's hot path.
-    /// </summary>
-    private static byte[]? HellionFontBytes;
 
-    private static byte[] GetHellionFontBytes()
+    public FontManager(IDalamudPluginInterface pluginInterface)
-    {
-        if (HellionFontBytes is not null)
-            return HellionFontBytes;
-
-        using var stream =
-            typeof(FontManager).Assembly.GetManifestResourceStream("HellionFont.ttf")
-            ?? throw new FileNotFoundException(
-                "Hellion font resource not embedded in the assembly"
-            );
-        using var ms = new MemoryStream();
-        stream.CopyTo(ms);
-        HellionFontBytes = ms.ToArray();
-        return HellionFontBytes;
-    }
-
-    private unsafe void SetUpRanges()
-    {
-        ushort[] BuildRange(IReadOnlyList<ushort>? chars, params nint[] ranges)
-        {
-            var builder = new ImFontGlyphRangesBuilderPtr(ImGuiNative.ImFontGlyphRangesBuilder());
-            // text
-            foreach (var range in ranges)
-                builder.AddRanges((ushort*)range);
-
-            // chars
-            if (chars != null)
-            {
-                for (var i = 0; i < chars.Count; i += 2)
-                {
-                    if (chars[i] == 0)
-                        break;
-
-                    for (var j = (uint)chars[i]; j <= chars[i + 1]; j++)
-                        builder.AddChar((ushort)j);
-                }
-            }
-
-            // Ingame supported ranges
-            var reader = new FdtReader(Plugin.DataManager.GetFile("common/font/axis_12.fdt")!.Data);
-            foreach (var c in reader.Glyphs)
-                builder.AddChar(c.Char);
-
-            // various symbols
-            // French
-            // Romanian
-            // builder.AddText("←→↑↓《》■※☀★★☆♥♡ヅツッシ☀☁☂℃℉°♀♂♠♣♦♣♧®©™€$£♯♭♪✓√◎◆◇♦■□〇●△▽▼▲‹›≤≥<«“”─＼～");
-            builder.AddText("Œœ");
-            builder.AddText("ĂăÂâÎîȘșȚț");
-
-            // "Enclosed Alphanumerics" (partial) https://www.compart.com/en/unicode/block/U+2460
-            for (var i = 0x2460; i <= 0x24B5; i++)
-                builder.AddChar((char)i);
-
-            builder.AddChar('⓪');
-            return builder.BuildRangesToArray();
-        }
-
-        var ranges = new List<nint> { (nint)ImGui.GetIO().Fonts.GetGlyphRangesDefault() };
-        foreach (var extraRange in Enum.GetValues<ExtraGlyphRanges>())
-            if (Plugin.Config.ExtraGlyphRanges.HasFlag(extraRange))
-                ranges.Add(extraRange.Range());
-
-        Ranges = BuildRange(null, ranges.ToArray());
-        JpRange = BuildRange(GlyphRangesJapanese.GlyphRanges);
-    }
-
-    /// <summary>
-    /// Async wrapper around <see cref="BuildFonts"/> for the Phase-1 LoadAsync
-    /// path. The font-atlas build is CPU-bound, so we offload via Task.Run and
-    /// honour the cancellation token at the scheduling boundary; this lets the
-    /// font build run in parallel with the theme init without blocking the
-    /// loader. Settings-driven manual rebuilds keep using the sync entry point.
-    /// </summary>
-    public async Task BuildFontsAsync(CancellationToken cancellationToken)
-    {
-        cancellationToken.ThrowIfCancellationRequested();
-        await Task.Run(BuildFonts, cancellationToken).ConfigureAwait(false);
-    }
-
-    public void BuildFonts()
     {
+        _pluginInterface = pluginInterface;
         SetUpRanges();
 
-        Axis = Plugin.Interface.UiBuilder.FontAtlas.NewGameFontHandle(
+        var atlas = _pluginInterface.UiBuilder.FontAtlas;
+
+        using (atlas.SuppressAutoRebuild())
+        {
+            Axis = atlas.NewGameFontHandle(
                 new GameFontStyle(GameFontFamily.Axis, SizeInPx(Plugin.Config.FontSizeV2))
             );
-        AxisItalic = Plugin.Interface.UiBuilder.FontAtlas.NewGameFontHandle(
+
+            AxisItalic = atlas.NewGameFontHandle(
                 new GameFontStyle(GameFontFamily.Axis, SizeInPx(Plugin.Config.FontSizeV2))
                 {
                     SkewStrength = SizeInPx(Plugin.Config.FontSizeV2) / 6,
                 }
             );
 
-        FontAwesome = Plugin.Interface.UiBuilder.FontAtlas.NewDelegateFontHandle(e =>
+            FontAwesome = _pluginInterface.UiBuilder.IconFontFixedWidthHandle;
+
+            RegularFont = BuildRegularFontHandle(atlas);
+
+            if (Plugin.Config.ItalicEnabled)
+                ItalicFont = BuildItalicFontHandle(atlas);
+
+            SenderFont = BuildSenderFontHandle(atlas);
+            MetaFont = BuildMetaFontHandle(atlas);
+        }
+
+        // Source is still null here, so this is the config-only baseline.
+        _lastBuiltFingerprint = EffectiveFontFingerprint();
+    }
+
+    // Called from the settings save path when one of the font-related
+    // settings changed. Game fonts and FontAwesome stay untouched because
+    // none of those settings affect them.
+    //
+    // Thread model: the settings save path runs on the ImGui draw thread,
+    // same as every push site. The rebuild finishes synchronously before
+    // the next push reads the field in the same frame, so there is no
+    // cross-thread race on the handle reference.
+    public void RebuildDelegateFonts()
     {
-            e.OnPreBuild(tk =>
+        SetUpRanges();
-                tk.AddFontAwesomeIconFont(new SafeFontConfig { SizePx = GetFontSize() })
+
+        var atlas = _pluginInterface.UiBuilder.FontAtlas;
+
+        // Without the suppression each handle triggers its own atlas rebuild.
+        // With two handles that was tolerable; with four it is four rebuilds for
+        // one size change.
+        using (atlas.SuppressAutoRebuild())
+        {
+            RegularFont?.Dispose();
+            RegularFont = BuildRegularFontHandle(atlas);
+
+            ItalicFont?.Dispose();
+            ItalicFont = Plugin.Config.ItalicEnabled ? BuildItalicFontHandle(atlas) : null;
+
+            SenderFont?.Dispose();
+            SenderFont = BuildSenderFontHandle(atlas);
+
+            MetaFont?.Dispose();
+            MetaFont = BuildMetaFontHandle(atlas);
+        }
+
+        _lastBuiltFingerprint = EffectiveFontFingerprint();
+    }
+
+    public void SetTypographySource(Func<ThemeTypography?> source) => _typographySource = source;
+
+    internal float ResolveGlobalFontPt() =>
+        FontSizeResolver.ResolveGlobalPt(
+            _typographySource?.Invoke(),
+            Plugin.Config.UseHellionFont,
+            Plugin.Config.FontSizeV2,
+            Plugin.Config.GlobalFontV2.SizePt
         );
-            e.OnPostBuild(tk => tk.FitRatio(tk.Font));
-        });
 
-        RegularFont = Plugin.Interface.UiBuilder.FontAtlas.NewDelegateFontHandle(e =>
+    internal float ResolveSymbolsFontPt() =>
-            e.OnPreBuild(tk =>
+        FontSizeResolver.ResolveSymbolsPt(
+            _typographySource?.Invoke(),
+            Plugin.Config.SymbolsFontSizeV2
+        );
+
+    // Every size that can land in one message row. Roles follow the base size
+    // arithmetically, but the resolved value is what the height cache has to key
+    // on -- a theme override moves the base without moving any factor.
+    internal (
+        float Global,
+        float Symbols,
+        float Sender,
+        float Meta,
+        float Italic
+    ) EffectiveFontFingerprint()
     {
-                // v1.2.0 — Bei aktiver Hellion-Schrift (Exo 2 ist Variable-Font)
+        var basePt = ResolveGlobalFontPt();
-                // wird die User-Schriftgröße aus FontSizeV2 als SizePt angewendet.
+        return (
-                // Der Bestand-Pfad nutzt weiter GlobalFontV2.SizePt aus dem
+            basePt,
-                // Custom-Font-Stack. Ohne diese Verzweigung war FontSizeV2 bei
+            ResolveSymbolsFontPt(),
-                // UseHellionFont=true wirkungslos, was 4K-User mit größerer
+            TypeScale.SizePtOf(TypeRole.Sender, basePt),
-                // Skalierung blockierte (Settings → Erscheinungsbild → Schriftarten).
+            TypeScale.SizePtOf(TypeRole.Meta, basePt),
-                var basePt = Plugin.Config.UseHellionFont
+            Plugin.Config.ItalicFontV2.SizePt
-                    ? Plugin.Config.FontSizeV2
+        );
-                    : Plugin.Config.GlobalFontV2.SizePt;
+    }
-                var config = new SafeFontConfig { SizePt = basePt, GlyphRanges = Ranges };
-                config.MergeFont = Plugin.Config.UseHellionFont
-                    ? tk.AddFontFromMemory(GetHellionFontBytes(), config, "Hellion-Exo2")
-                    : AddFontWithFallback(tk, Plugin.Config.GlobalFontV2.FontId, config, "global");
 
+    // Rebuilds only when the effective size changed (live fingerprint, TOCTOU-free).
+    // The atlas rebuild must run on the framework/draw thread — callers ensure that.
+    internal void RebuildDelegateFontsIfChanged()
+    {
+        if (EffectiveFontFingerprint() != _lastBuiltFingerprint)
+        {
+            RebuildDelegateFonts();
+        }
+    }
+
+    // Instance method so Ranges / JpRange are reachable without parameter
+    // plumbing; PascalCase field names follow the existing class style.
+    // Shared CJK + symbols tail for both the regular and italic delegate
+    // fonts. Earlier-merged fonts win for shared codepoints (imgui MergeMode),
+    // so this runs AFTER the primary font is set as config.MergeFont. The CJK
+    // fallback is the sole Hangul/Simplified-Han source when UseHellionFont=true
+    // (global=Inter-Light), so it stays in the chain — only its glyph range is
+    // trimmed (CjkFallbackGlyphRange) to drop the Default-block/endonym overlap.
+    // The Japanese merge keeps its own configured size and the full JpRange (which
+    // owns Traditional Han such as 體 U+9AD4), so japanese↔fallback no longer overlap.
+    private void AddCjkAndSymbols(
+        IFontAtlasBuildToolkitPreBuild tk,
+        SafeFontConfig config,
+        float basePt
+    )
+    {
         config.SizePt = Plugin.Config.JapaneseFontV2.SizePt;
         config.GlyphRanges = JpRange;
         AddFontWithFallback(tk, Plugin.Config.JapaneseFontV2.FontId, config, "japanese");
 
-                config.SizePt = Plugin.Config.SymbolsFontSizeV2;
+        // NotoSansCjk fallback, trimmed to CjkFallbackGlyphRange. Merged last so earlier fonts win.
+        config.SizePt = basePt;
+        config.GlyphRanges = CjkFallbackGlyphRange;
+        AddFontWithFallback(
+            tk,
+            new DalamudAssetFontAndFamilyId(DalamudAsset.NotoSansCjkRegular),
+            config,
+            "noto-cjk-fallback"
+        );
+
+        config.SizePt = ResolveSymbolsFontPt();
         tk.AddGameSymbol(config);
+    }
+
+    private IFontHandle BuildRegularFontHandle(IFontAtlas atlas) =>
+        atlas.NewDelegateFontHandle(e =>
+            e.OnPreBuild(tk =>
+            {
+                var basePt = ResolveGlobalFontPt();
+                var config = new SafeFontConfig { SizePt = basePt, GlyphRanges = Ranges };
+                // Missing embedded resource falls back to the configured
+                // system font instead of taking the whole UiBuilder down.
+                var bundledBytes = Plugin.Config.UseHellionFont ? TryGetBundledFontBytes() : null;
+                config.MergeFont = bundledBytes is not null
+                    ? tk.AddFontFromMemory(bundledBytes, config, "Inter-Light")
+                    : AddFontWithFallback(tk, Plugin.Config.GlobalFontV2.FontId, config, "global");
+
+                AddCjkAndSymbols(tk, config, basePt);
 
                 tk.Font = config.MergeFont;
             })
         );
 
-        if (Plugin.Config.ItalicEnabled)
+    // Same outline as the body face, rasterised denser. Only works on the
+    // delegate path: with FontsEnabled and UseHellionFont both off the game's own
+    // Axis handle draws, and a game font handle has no such knob. The sender then
+    // leans on channel colour alone, which is a deliberate limitation.
+    private IFontHandle BuildSenderFontHandle(IFontAtlas atlas) =>
+        atlas.NewDelegateFontHandle(e =>
+            e.OnPreBuild(tk =>
             {
-            ItalicFont = Plugin.Interface.UiBuilder.FontAtlas.NewDelegateFontHandle(e =>
+                var basePt = TypeScale.SizePtOf(TypeRole.Sender, ResolveGlobalFontPt());
+                var config = new SafeFontConfig
+                {
+                    SizePt = basePt,
+                    GlyphRanges = Ranges,
+                    RasterizerMultiply = SenderWeight,
+                };
+                var bundledBytes = Plugin.Config.UseHellionFont ? TryGetBundledFontBytes() : null;
+                config.MergeFont = bundledBytes is not null
+                    ? tk.AddFontFromMemory(bundledBytes, config, "Inter-Light-Sender")
+                    : AddFontWithFallback(tk, Plugin.Config.GlobalFontV2.FontId, config, "sender");
+
+                AddCjkAndSymbols(tk, config, basePt);
+
+                tk.Font = config.MergeFont;
+            })
+        );
+
+    private IFontHandle BuildMetaFontHandle(IFontAtlas atlas) =>
+        atlas.NewDelegateFontHandle(e =>
+            e.OnPreBuild(tk =>
+            {
+                var basePt = TypeScale.SizePtOf(TypeRole.Meta, ResolveGlobalFontPt());
+                var config = new SafeFontConfig { SizePt = basePt, GlyphRanges = Ranges };
+                var bundledBytes = Plugin.Config.UseHellionFont ? TryGetBundledFontBytes() : null;
+                config.MergeFont = bundledBytes is not null
+                    ? tk.AddFontFromMemory(bundledBytes, config, "Inter-Light-Meta")
+                    : AddFontWithFallback(tk, Plugin.Config.GlobalFontV2.FontId, config, "meta");
+
+                AddCjkAndSymbols(tk, config, basePt);
+
+                tk.Font = config.MergeFont;
+            })
+        );
+
+    private IFontHandle BuildItalicFontHandle(IFontAtlas atlas) =>
+        atlas.NewDelegateFontHandle(e =>
             e.OnPreBuild(tk =>
             {
                 var config = new SafeFontConfig
@@ -196,35 +357,154 @@ public class FontManager
                     "italic"
                 );
 
-                    config.SizePt = Plugin.Config.JapaneseFontV2.SizePt;
+                AddCjkAndSymbols(tk, config, Plugin.Config.ItalicFontV2.SizePt);
-                    config.GlyphRanges = JpRange;
-                    AddFontWithFallback(
-                        tk,
-                        Plugin.Config.JapaneseFontV2.FontId,
-                        config,
-                        "japanese"
-                    );
-
-                    config.SizePt = Plugin.Config.SymbolsFontSizeV2;
-                    tk.AddGameSymbol(config);
 
                 tk.Font = config.MergeFont;
             })
         );
-        }
+
-        else
+    public void Dispose()
     {
-            ItalicFont = null;
+        Axis.Dispose();
+        AxisItalic.Dispose();
+        // FontAwesome is shared with the UiBuilder; the host owns its
+        // lifetime, so the plugin must not dispose it.
+        RegularFont?.Dispose();
+        ItalicFont?.Dispose();
+        SenderFont?.Dispose();
+        MetaFont?.Dispose();
+    }
+
+    // Returns null when the embedded font resource is missing. Should not
+    // happen on a signed release build, but a broken csproj or hand-rolled
+    // dev build can land here. Caller falls back to the system font path
+    // so the plugin still loads instead of crashing the whole UiBuilder.
+    private static byte[]? TryGetBundledFontBytes()
+    {
+        if (BundledFontBytes is not null)
+            return BundledFontBytes;
+
+        using var stream = typeof(FontManager).Assembly.GetManifestResourceStream(
+            "Inter-Light.ttf"
+        );
+        if (stream is null)
+        {
+            Plugin.LogProxy.Warning(
+                "Bundled Inter Light font resource missing, falling back to system default font."
+            );
+            return null;
+        }
+
+        using var ms = new MemoryStream();
+        stream.CopyTo(ms);
+        BundledFontBytes = ms.ToArray();
+        return BundledFontBytes;
+    }
+
+    private unsafe void SetUpRanges()
+    {
+        ushort[] BuildRange(
+            IReadOnlyList<ushort>? chars,
+            bool includeCommonExtras,
+            params nint[] ranges
+        )
+        {
+            var builder = new ImFontGlyphRangesBuilderPtr(ImGuiNative.ImFontGlyphRangesBuilder());
+            foreach (var range in ranges)
+                builder.AddRanges((ushort*)range);
+
+            if (chars != null)
+            {
+                for (var i = 0; i < chars.Count; i += 2)
+                {
+                    if (chars[i] == 0)
+                        break;
+
+                    for (var j = (uint)chars[i]; j <= chars[i + 1]; j++)
+                        builder.AddChar((ushort)j);
                 }
             }
 
-    /// <summary>
+            // Common extras (Axis ingame glyphs, endonyms, enclosed alphanumerics)
-    /// Try to add a user-configured font to the build toolkit, falling back to
+            // belong to the primary/Japanese ranges only. The trimmed CJK fallback
-    /// the bundled NotoSansCjkRegular asset if the configured font isn't
+            // skips them so it stays a pure Hangul/Simplified-Han remainder and
-    /// available on the system. Without this guard a stale SystemFontId
+            // does not re-merge the Default-block work the global font already did.
-    /// pointing at a font the user uninstalled or that never existed on
+            if (includeCommonExtras)
-    /// Linux (e.g. "Crimson Text") tears down the entire font atlas build.
+            {
-    /// </summary>
+                // Ingame supported ranges
+                var reader = new FdtReader(
+                    Plugin.DataManager.GetFile("common/font/axis_12.fdt")!.Data
+                );
+                foreach (var c in reader.Glyphs)
+                    builder.AddChar(c.Char);
+
+                // French
+                // Romanian
+                builder.AddText("Œœ");
+                builder.AddText("ĂăÂâÎîȘșȚț");
+
+                // v1.5.3: language-dropdown endonyms. The dropdown renders
+                // with the currently active font range; without these glyphs
+                // a user on an English UI cannot read non-Latin language names
+                // before switching. Auto-activation in Settings.Apply then
+                // pulls in the full ExtraGlyphRange for the chosen locale.
+                builder.AddText(
+                    "Català Čeština Dansk Deutsch Ελληνικά English Español Suomi"
+                        + " Français Magyar Italiano 日本語 한국어 Norsk bokmål Nederlands"
+                        + " Polski Português Brasil (Portugal) Română Русский Svenska"
+                        + " Türkçe Українська 简体中文 繁體中文"
+                );
+
+                // "Enclosed Alphanumerics" (partial) https://www.compart.com/en/unicode/block/U+2460
+                for (var i = 0x2460; i <= 0x24B5; i++)
+                    builder.AddChar((char)i);
+
+                builder.AddChar('⓪');
+            }
+
+            return builder.BuildRangesToArray();
+        }
+
+        var ranges = new List<nint> { (nint)ImGui.GetIO().Fonts.GetGlyphRangesDefault() };
+        var customChars = new List<ushort>();
+        foreach (var extraRange in Enum.GetValues<ExtraGlyphRanges>())
+        {
+            if (!Plugin.Config.ExtraGlyphRanges.HasFlag(extraRange))
+                continue;
+
+            // LatinExtended and Greek use AddChar pairs because they have no
+            // built-in ImGui range helper; everything else points to a native
+            // ImGui glyph-range table.
+            switch (extraRange)
+            {
+                case ExtraGlyphRanges.LatinExtended:
+                    customChars.AddRange(ExtraGlyphRangesExt.LatinExtendedPairs);
+                    break;
+                case ExtraGlyphRanges.Greek:
+                    customChars.AddRange(ExtraGlyphRangesExt.GreekPairs);
+                    break;
+                default:
+                    var ptr = extraRange.Range();
+                    if (ptr != 0)
+                        ranges.Add(ptr);
+                    break;
+            }
+        }
+
+        Ranges = BuildRange(
+            customChars.Count > 0 ? customChars : null,
+            includeCommonExtras: true,
+            ranges.ToArray()
+        );
+        JpRange = BuildRange(GlyphRangesJapanese.GlyphRanges, includeCommonExtras: true);
+
+        // The fallback gets only the trimmed Hangul/Simplified-Han remainder.
+        // No Default block, no endonyms — those are already merged by the global and
+        // Japanese fonts, so re-merging them on the fallback was wasted atlas work.
+        CjkFallbackGlyphRange = BuildRange(CjkFallbackRange.Pairs, includeCommonExtras: false);
+    }
+
+    // Add font with fallback to NotoSansCjkRegular if unavailable
     private static ImFontPtr AddFontWithFallback(
         IFontAtlasBuildToolkitPreBuild tk,
         IFontId fontId,
@@ -237,11 +517,21 @@ public class FontManager
             return fontId.AddToBuildToolkit(tk, config);
         }
         catch (Exception e)
-            when (e is FileNotFoundException or DirectoryNotFoundException or IOException)
+            when (e
+                    is FileNotFoundException
+                        or DirectoryNotFoundException
+                        or IOException
+                        or InvalidOperationException
+                        or ArgumentException
+            )
         {
-            Plugin.Log.Warning(
+            // Atlas-toolkit throws span IO and validation failures; routing
+            // the wider set through the fallback keeps a corrupt font config
+            // from taking down the whole atlas build.
+            Plugin.LogProxy.Warning(
                 e,
-                $"Configured {slot} font unavailable, falling back to NotoSansCjkRegular"
+                $"Configured {slot} font failed to load ({e.GetType().Name}), "
+                    + "falling back to NotoSansCjkRegular"
             );
             var fallback = new DalamudAssetFontAndFamilyId(DalamudAsset.NotoSansCjkRegular);
             return fallback.AddToBuildToolkit(tk, config);

HellionChat/FontSizeResolver.cs

@@ -0,0 +1,18 @@
+using HellionChat.Themes;
+
+namespace HellionChat;
+
+// Pure size resolution, split out of FontManager so it is unit-testable without
+// building the font atlas. A typography override wins; null falls back to config.
+internal static class FontSizeResolver
+{
+    internal static float ResolveGlobalPt(
+        ThemeTypography? typography,
+        bool useHellionFont,
+        float fontSizeV2,
+        float globalSizePt
+    ) => typography?.OverrideGlobalFontSizePt ?? (useHellionFont ? fontSizeV2 : globalSizePt);
+
+    internal static float ResolveSymbolsPt(ThemeTypography? typography, float symbolsSizePt) =>
+        typography?.OverrideSymbolsFontSizePt ?? symbolsSizePt;
+}

HellionChat/GameFunctions/Chat.cs

@@ -19,6 +19,7 @@ using HellionChat.Resources;
 using HellionChat.Util;
 using InteropGenerator.Runtime;
 using Lumina.Text.ReadOnly;
+using Microsoft.Extensions.Logging;
 using ValueType = FFXIVClientStructs.FFXIV.Component.GUI.AtkValueType;
 
 namespace HellionChat.GameFunctions;
@@ -98,9 +99,12 @@ internal sealed unsafe class Chat : IDisposable
     private long LastPlayerNameDisplayTypeRefresh;
     private PlayerNameDisplayType CurrentPlayerNameDisplayType = PlayerNameDisplayType.FullName;
 
-    public Chat(Plugin plugin)
+    private readonly ILogger<Chat> _logger;
+
+    public Chat(Plugin plugin, ILogger<Chat> logger)
     {
         Plugin = plugin;
+        _logger = logger;
         Plugin.GameInteropProvider.InitializeFromAttributes(this);
 
         ChatLogRefreshHook?.Enable();
@@ -174,8 +178,7 @@ internal sealed unsafe class Chat : IDisposable
     internal static void RotateCrossLinkshellHistory(RotateMode mode) =>
         UIModule.Instance()->RotateCrossLinkshellHistory(GetRotateIdx(mode));
 
-    // This function looks up a channel's user-defined color.
+    // Look up a channel's user-defined color, returns null if 0
-    // If this function ever returns 0, it returns null instead.
     internal uint? GetChannelColor(ChatType type)
     {
         var parent = type.Parent();
@@ -215,8 +218,7 @@ internal sealed unsafe class Chat : IDisposable
 
         if (Plugin.Functions.KeybindManager.DirectChat && LastTypedCharacter != null)
         {
-            // FIXME: this whole system sucks
+            // Capture the just-typed character input
-            // FIXME v2: I hate everything about this, but it works
             Plugin.Framework.RunOnTick(() =>
             {
                 string? input = null;
@@ -230,15 +232,13 @@ internal sealed unsafe class Chat : IDisposable
                 if (c != '\0' && !char.IsControl(c))
                     input = c.ToString();
 
-                try
+                // Seed the just-typed character into our input field and focus it, the
+                // same InputBar.AppendPending + Activate prefill path inventory item-links
+                // use. Prefill only, deliberately: no tab switch.
+                if (input != null)
                 {
-                    Plugin.ChatLogWindow.Activated(
+                    Plugin.InputBar.AppendPending(input);
-                        new ChatActivatedArgs(new ChannelSwitchInfo(null)) { Input = input }
+                    Plugin.InputBar.Activate = true;
-                    );
-                }
-                catch (Exception ex)
-                {
-                    Plugin.Log.Error(ex, "Error in chat Activated event");
                 }
             });
         }
@@ -253,30 +253,15 @@ internal sealed unsafe class Chat : IDisposable
                 addIfNotPresent = add;
         }
 
-        try
+        // Route the addIfNotPresent token into the InputBar so inventory
+        // right-click "Link item" reaches our input field instead of being lost.
+        if (addIfNotPresent != null && !Plugin.InputBar.PendingMessage.Contains(addIfNotPresent))
         {
-            // We already called this function once, so we skip the duplicated call
+            Plugin.InputBar.AppendPending(addIfNotPresent);
-            // Also return the original value here so that vanilla chat receives all information
+            Plugin.InputBar.Activate = true;
-            if (Plugin.ChatLogWindow.TellSpecial)
-            {
-                Plugin.Log.Information("Return early to prevent duplicated call...");
-                return ChatLogRefreshHook!.Original(log, eventId, value);
         }
 
-            Plugin.ChatLogWindow.Activated(
+        return 1; // Prevent vanilla chat log from gaining focus
-                new ChatActivatedArgs(new ChannelSwitchInfo(null))
-                {
-                    AddIfNotPresent = addIfNotPresent,
-                }
-            );
-        }
-        catch (Exception ex)
-        {
-            Plugin.Log.Error(ex, "Error in chat Activated event");
-        }
-
-        // prevent the game from focusing the chat log
-        return 1;
     }
 
     private CStringPointer ChangeChannelNameDetour(AgentChatLog* agent)
@@ -306,7 +291,7 @@ internal sealed unsafe class Chat : IDisposable
         {
             playerName = SeString.Parse(agent->TellPlayerName).TextValue;
             worldId = agent->TellWorldId;
-            Plugin.Log.Debug($"Detected tell target '[redacted]'@{worldId}");
+            _logger.LogDebug($"Detected tell target '[redacted]'@{worldId}");
         }
 
         Plugin.CurrentTab.CurrentChannel = new UsedChannel
@@ -332,6 +317,30 @@ internal sealed unsafe class Chat : IDisposable
         ReplyInSelectedChatModeHook!.Original(agent);
     }
 
+    // Pure /tell-prefill command builder, shared by the two native SetTellTarget
+    // detours and the PayloadHandler Send-Tell payload. Empty/null world drops the
+    // @World suffix (matches the old IsNullOrEmpty guard); trailing space lets the
+    // user type straight after. internal static so the Build-Suite can pin it
+    // frame-free. TEST-MIRROR: ../../../Hellion Build test/GameFunctions/PrefillTellCommandTests.cs
+    internal static string BuildTellCommand(string name, string? world)
+    {
+        var command = $"/tell {name}";
+        if (!string.IsNullOrEmpty(world))
+            command += $"@{world}";
+        command += " ";
+        return command;
+    }
+
+    // Prefills + focuses our own input bar with a /tell command. The DI/Dalamud
+    // plumbing (Plugin.InputBar) lives here; the string assembly is BuildTellCommand.
+    // The in-foray TellSpecial routing (SetEurekaTellChannel) is NOT this helper's
+    // job — it stays at the call-site (v1.8.1 deferral).
+    private void PrefillTellInput(string name, string? world)
+    {
+        Plugin.InputBar.SetPendingMessage(BuildTellCommand(name, world));
+        Plugin.InputBar.Activate = true;
+    }
+
     private bool SetContextTellTarget(
         RaptureShellModule* a1,
         Utf8String* playerName,
@@ -345,28 +354,14 @@ internal sealed unsafe class Chat : IDisposable
     {
         if (playerName != null)
         {
-            try
+            // Right-click -> Send Tell: prefill our input the same way our own
-            {
+            // "Send Tell" payload menu does (PayloadHandler), then focus. Prefill
-                var target = new TellTarget(
+            // only, deliberately: no tab switch, no ChatActivatedArgs revival.
+            // The game supplies worldName here, so no sheet lookup.
+            PrefillTellInput(
                 playerName->ToString(),
-                    worldId,
+                worldName != null ? worldName->ToString() : null
-                    contentId,
-                    (TellReason)reason
             );
-                Plugin.ChatLogWindow.Activated(
-                    new ChatActivatedArgs(
-                        new ChannelSwitchInfo(InputChannel.Tell, permanent: setChatType)
-                    )
-                    {
-                        TellReason = (TellReason)reason,
-                        TellTarget = target,
-                    }
-                );
-            }
-            catch (Exception ex)
-            {
-                Plugin.Log.Error(ex, "Error in chat Activated event");
-            }
         }
 
         return SetChatLogTellTargetHook!.Original(
@@ -396,27 +391,13 @@ internal sealed unsafe class Chat : IDisposable
 
         if (playerName != null)
         {
-            try
+            // In-foray right-click -> Send Tell: same prefill path as the non-foray
-            {
+            // tell. The foray-specific TellSpecial channel routing stays deferred
-                var target = new TellTarget(
+            // (v1.8.1, SetEurekaTellChannel) -- prefill only here as well.
+            PrefillTellInput(
                 playerName->ToString(),
-                    worldId,
+                worldName != null ? worldName->ToString() : null
-                    contentId,
-                    (TellReason)reason
             );
-                Plugin.ChatLogWindow.Activated(
-                    new ChatActivatedArgs(new ChannelSwitchInfo(InputChannel.Tell))
-                    {
-                        TellReason = (TellReason)reason,
-                        TellTarget = target,
-                        TellSpecial = Sheets.IsInForay(), // Handle Eureka/Bozja special
-                    }
-                );
-            }
-            catch (Exception ex)
-            {
-                Plugin.Log.Error(ex, "Error in chat Activated event");
-            }
         }
 
         ContextMenuTellInForayHook!.Original(
@@ -430,19 +411,24 @@ internal sealed unsafe class Chat : IDisposable
         );
     }
 
-    /// <summary>
+    // ---------------------------------------------------------------
-    /// Returns true if the channel is any non-linkshell channel, or if the
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
-    /// linkshell actually exists.
+    // - Renamed ValidAnyLinkshell -> IsChannelOrExistingLinkshell. The
-    /// </summary>
+    //   name now states intent: returns true for any non-linkshell
-    internal static bool ValidAnyLinkshell(InputChannel channel)
+    //   channel, or a linkshell index that actually exists.
+    // ---------------------------------------------------------------
+    internal static bool IsChannelOrExistingLinkshell(InputChannel channel)
     {
         var idx = channel.LinkshellIndex();
         if (idx == uint.MaxValue || channel.IsExtraChatLinkshell())
             return true;
-        if (channel.IsLinkshell() && ValidLinkshell(idx))
+
-            return true;
+        if (channel.IsLinkshell())
-        if (channel.IsCrossLinkshell() && ValidCrossLinkshell(idx))
+            return ValidLinkshell(idx);
-            return true;
+
+        if (channel.IsCrossLinkshell())
+            return ValidCrossLinkshell(idx);
+
         return false;
     }
 
@@ -465,6 +451,17 @@ internal sealed unsafe class Chat : IDisposable
         uint currentIndex,
         RotateMode rotate,
         Func<uint, bool> validFn
+    ) => RotateLinkshellIndex(currentIndex, rotate, validFn);
+
+    // Pure index-stepper (Dalamud-free): wrap (8 + currentIndex + delta) % 8 and return the
+    // first index validFn accepts within 8 iterations, else null. Extracted so the
+    // modulo/termination logic is unit-testable with a synthetic predicate; the
+    // production caller binds validFn to InfoProxyLinkshell (in-game only).
+    // TEST-MIRROR: ../../../Hellion Build test/_Helpers/RotateLinkshellIndexTests.cs
+    internal static uint? RotateLinkshellIndex(
+        uint currentIndex,
+        RotateMode rotate,
+        Func<uint, bool> validFn
     )
     {
         if (rotate == RotateMode.None)
@@ -477,8 +474,7 @@ internal sealed unsafe class Chat : IDisposable
             _ => 1,
         };
 
-        // Iterate up to 8 times to find a valid linkshell.
+        for (var i = 0; i < 8; i++) // Find valid linkshell within 8 iterations
-        for (var i = 0; i < 8; i++)
         {
             currentIndex = (uint)((8 + currentIndex + delta) % 8);
             if (validFn(currentIndex))
@@ -524,7 +520,7 @@ internal sealed unsafe class Chat : IDisposable
                 );
                 // RotateLinkshell returns null when no valid linkshell is found within 8 iterations.
                 // Forward the null so the caller can keep the existing channel instead of crashing on nullable arithmetic.
-                return idx is null ? null : channel + idx.Value;
+                return idx is null ? null : channel + idx.Value; // null if not found, otherwise new channel
             }
             default:
                 return channel;
@@ -533,11 +529,7 @@ internal sealed unsafe class Chat : IDisposable
 
     internal void SetChannel(InputChannel channel, TellTarget? tellTarget = null)
     {
-        // ExtraChat linkshells aren't supported in game so we never want to
+        // Ignore ExtraChat linkshells (use ChatLogWindow.SetChannel() instead)
-        // call the ChangeChatChannel function with them.
-        //
-        // Callers should call ChatLogWindow.SetChannel() which handles
-        // ExtraChat channels
         if (channel.IsExtraChatLinkshell())
             return;
 
@@ -546,12 +538,17 @@ internal sealed unsafe class Chat : IDisposable
         if (idx == uint.MaxValue)
             idx = 0;
 
-        if (!ValidAnyLinkshell(channel))
+        // ---------------------------------------------------------------
-            return;
+        // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
-
+        // - Wrap ChangeChatChannel in the validity check instead of
+        //   early-returning. The previous early return skipped Dtor and
+        //   leaked the native Utf8String allocated a few lines above.
+        // ---------------------------------------------------------------
+        if (IsChannelOrExistingLinkshell(channel))
             RaptureShellModule
                 .Instance()
                 ->ChangeChatChannel(tellTarget != null ? 17 : (int)channel, idx, target, true);
+
         target->Dtor(true);
     }
 
@@ -565,15 +562,11 @@ internal sealed unsafe class Chat : IDisposable
         bool setChatType
     )
     {
-        // param6 is 0 for contentId and 1 for objectId
-        // param7 is always 0 ?
-
         if (!Plugin.CurrentTab.CurrentChannel.UseTempChannel)
             Plugin.CurrentTab.CurrentChannel.UseTempChannel = true;
 
-        // Send tell via CommandInner later and let the game handle it
+        // Send tell via CommandInner later and let the game handle it.
-        // Only works because we use the SetTellTargetInForay function to set all required information
+        // TellSpecial gate is offline until the new chat layer reads it.
-        Plugin.ChatLogWindow.TellSpecial = true;
 
         var utfName = Utf8String.FromString(name);
         var utfWorld = Utf8String.FromString(worldName);
@@ -629,7 +622,7 @@ internal sealed unsafe class Chat : IDisposable
         if (contentId == 0)
         {
             Plugin.ChatGui.PrintError(Language.Chat_SendTell_Error);
-            Plugin.Log.Warning(
+            _logger.LogWarning(
                 "Tried to send a tell with ContentId being 0, sorry this is an internal error."
             );
             return;
@@ -742,10 +735,7 @@ internal sealed unsafe class Chat : IDisposable
 
     internal bool CheckHideFlags()
     {
-        // Only hide the chat in a cutscene when the vanilla chat would've
+        // Only hide chat in cutscene when vanilla chat would also be hidden
-        // also been hidden. This prevents Chat 2 from hiding for a split
-        // second before the cutscene actually starts, because the game sets
-        // the cutscene conditions before processing the skip.
         var raptureAtkUnitManager = RaptureAtkUnitManager.Instance();
         return raptureAtkUnitManager == null
             || raptureAtkUnitManager->UiFlags.HasFlag(UiFlags.Chat);

HellionChat/GameFunctions/ChatBox.cs

@@ -15,17 +15,10 @@ public unsafe class ChatBox
         mes->Dtor(true);
     }
 
-    public static void SendMessage(string message)
+    public static void SendMessage(string message) => SendMessageUnsafe(ValidateMessage(message));
-    {
-        var bytes = ValidateMessage(message);
-        SendMessageUnsafe(bytes);
-    }
 
-    // Validation split out so the deterministic checks (UTF-8 length, sanitise
+    // sanitiserOverride allows xUnit to bypass Utf8String->SanitizeString (game memory only).
-    // round-trip) can run in xUnit without ClientStructs game memory. The
+    // Returns encoded bytes so SendMessage avoids a second GetBytes call.
-    // sanitiser is injectable so tests can pin throw behaviour without invoking
-    // Utf8String->SanitizeString, which only resolves in-process. Returns the
-    // already-encoded bytes so SendMessage doesn't pay GetBytes twice.
     // TEST-MIRROR: ../../../Hellion Build test/GameFunctions/ChatBoxTests.cs
     internal static byte[] ValidateMessage(
         string message,
@@ -49,11 +42,9 @@ public unsafe class ChatBox
     private static string SanitiseText(string text)
     {
         var uText = Utf8String.FromString(text);
-
         uText->SanitizeString((AllowedEntities)0x27F);
         var sanitised = uText->ToString();
         uText->Dtor(true);
-
         return sanitised;
     }
 }

HellionChat/GameFunctions/GameFunctions.cs

@@ -14,6 +14,7 @@ using FFXIVClientStructs.FFXIV.Client.UI.Info;
 using FFXIVClientStructs.FFXIV.Component.GUI;
 using Lumina.Excel;
 using Lumina.Excel.Sheets;
+using Microsoft.Extensions.Logging;
 using ValueType = FFXIVClientStructs.FFXIV.Component.GUI.AtkValueType;
 
 namespace HellionChat.GameFunctions;
@@ -37,17 +38,22 @@ internal unsafe class GameFunctions : IDisposable
     #endregion
 
     private Plugin Plugin { get; }
+    private readonly ILogger<GameFunctions> _logger;
     internal KeybindManager KeybindManager { get; }
     internal Chat Chat { get; }
 
-    internal GameFunctions(Plugin plugin)
+    internal GameFunctions(
+        Plugin plugin,
+        ILogger<GameFunctions> logger,
+        ILoggerFactory loggerFactory
+    )
     {
         Plugin = plugin;
-        KeybindManager = new KeybindManager(plugin);
+        _logger = logger;
-        Chat = new Chat(Plugin);
+        KeybindManager = new KeybindManager(plugin, loggerFactory.CreateLogger<KeybindManager>());
+        Chat = new Chat(Plugin, loggerFactory.CreateLogger<Chat>());
 
         Plugin.GameInteropProvider.InitializeFromAttributes(this);
-
         ResolveTextCommandPlaceholderHook?.Enable();
     }
 
@@ -55,36 +61,24 @@ internal unsafe class GameFunctions : IDisposable
     {
         Chat.Dispose();
         KeybindManager.Dispose();
-
         ResolveTextCommandPlaceholderHook?.Dispose();
-
         Marshal.FreeHGlobal(PlaceholderNamePtr);
     }
 
-    internal void SendFriendRequest(string name, ushort world)
+    internal void SendFriendRequest(string name, ushort world) =>
-    {
         ListCommand(name, world, "friendlist");
-    }
 
-    internal void AddToBlacklist(string name, ushort world)
+    internal void AddToBlacklist(string name, ushort world) => ListCommand(name, world, "blist");
-    {
-        ListCommand(name, world, "blist");
-    }
 
-    internal void AddToMuteList(ulong accountId, ulong contentId, string name, short worldId)
+    internal void AddToMuteList(ulong accountId, ulong contentId, string name, short worldId) =>
-    {
         AgentMutelist.Instance()->Add(accountId, contentId, name, worldId);
-    }
 
-    internal void AddToTermsList(SeString content)
+    internal void AddToTermsList(SeString content) =>
-    {
         AgentTermFilter.Instance()->OpenNewFilterWindow(content.EncodeWithNullTerminator());
-    }
 
     private void ListCommand(string name, ushort world, string commandName)
     {
         var worldRow = Sheets.WorldSheet.GetRow(world);
-
         ReplacementName = $"{name}@{worldRow.Name.ToString()}";
         ChatBox.SendMessage($"/{commandName} add {Placeholder}");
     }
@@ -108,7 +102,6 @@ internal unsafe class GameFunctions : IDisposable
     {
         for (var i = 0; i < 4; i++)
             SetAddonInteractable($"ChatLogPanel_{i}", interactable);
-
         SetAddonInteractable("ChatLog", interactable);
     }
 
@@ -124,7 +117,6 @@ internal unsafe class GameFunctions : IDisposable
         var agent = AgentItemDetail.Instance();
         var addon = GetAddon<AtkUnitBase>("ItemDetail");
 
-        // atkStage ain't gonna be null or we have bigger problems
         if (agent == null || addon == null)
             return;
 
@@ -133,23 +125,19 @@ internal unsafe class GameFunctions : IDisposable
         agent->Index = 0;
         agent->Flag1 &= 0xEF;
         agent->ItemId = id;
-        // agent->Flag2 = 1;
+
-        // agent->Flag3 = 0;
+        // TODO: Revert when CS offset lands in a release build.
-        // TODO: Revert whenever CS is merged
         *(byte*)((nint)agent + 0x21A) = 1;
         *(byte*)((nint)agent + 0x21E) = 0;
 
-        // This just probably needs to be set
         agent->AddonId = addon->Id;
-
-        // Skips early return
         atkStage->TooltipManager.TooltipType |= 2;
         addon->Show(false, 15);
     }
 
     internal static void CloseItemTooltip()
     {
-        // hide addon first to prevent the "addon close" sound
+        // Hide addon first to suppress the "addon close" sound.
         var addon = GetAddon<AtkUnitBase>("ItemDetail");
         if (addon != null)
             addon->Hide(true, false, 0);
@@ -167,7 +155,7 @@ internal unsafe class GameFunctions : IDisposable
 
     internal static void OpenPartyFinder()
     {
-        // this whole method: 6.05: 84433A (FF 97 ?? ?? ?? ?? 41 B4 01)
+        // 6.05: 84433A (FF 97 ?? ?? ?? ?? 41 B4 01)
         var lfg = AgentLookingForGroup.Instance();
         if (lfg->IsAgentActive())
         {
@@ -188,15 +176,10 @@ internal unsafe class GameFunctions : IDisposable
         }
     }
 
-    internal static bool IsMentor()
+    internal static bool IsMentor() => PlayerState.Instance()->IsMentor();
-    {
-        return PlayerState.Instance()->IsMentor();
-    }
 
-    internal static InfoProxyCommonList.CharacterData[] GetFriends()
+    internal static InfoProxyCommonList.CharacterData[] GetFriends() =>
-    {
+        InfoProxyFriendList.Instance()->CharDataSpan.ToArray();
-        return InfoProxyFriendList.Instance()->CharDataSpan.ToArray();
-    }
 
     internal static void OpenQuestLog(RowRef<Quest> quest)
     {
@@ -223,20 +206,12 @@ internal unsafe class GameFunctions : IDisposable
         AgentQuestJournal.Instance()->OpenForQuest(questId, 1);
     }
 
-    internal static void OpenPartyFinder(uint id)
+    internal static void OpenPartyFinder(uint id) =>
-    {
         AgentLookingForGroup.Instance()->OpenListing(id);
-    }
 
-    internal static void OpenAchievement(uint id)
+    internal static void OpenAchievement(uint id) => AgentAchievement.Instance()->OpenById(id);
-    {
-        AgentAchievement.Instance()->OpenById(id);
-    }
 
-    internal static bool IsInInstance()
+    internal static bool IsInInstance() => Plugin.Condition[ConditionFlag.BoundByDuty56];
-    {
-        return Plugin.Condition[ConditionFlag.BoundByDuty56];
-    }
 
     internal static bool TryOpenAdventurerPlate(ulong playerId)
     {
@@ -247,7 +222,8 @@ internal unsafe class GameFunctions : IDisposable
         }
         catch (Exception e)
         {
-            Plugin.Log.Warning(e, "Unable to open adventurer plate");
+            // Static method, no instance _logger reachable here.
+            Plugin.LogProxy.Warning(e, "Unable to open adventurer plate");
             return false;
         }
     }
@@ -255,8 +231,7 @@ internal unsafe class GameFunctions : IDisposable
     internal static void ClickNoviceNetworkButton()
     {
         var agent = AgentChatLog.Instance();
-        // case 3
+        var value = new AtkValue { Type = ValueType.Int, Int = 3 }; // case 3
-        var value = new AtkValue { Type = ValueType.Int, Int = 3 };
         var result = 0;
         var vf0 = *(delegate* unmanaged<AgentChatLog*, int*, AtkValue*, ulong, ulong, int*>*)
             agent->VirtualTable;
@@ -275,9 +250,8 @@ internal unsafe class GameFunctions : IDisposable
         byte a4
     )
     {
-        // The detour is only invoked through the hook, so the hook should
+        // Hook field is nullable due to the Signature attribute, but will never
-        // never be null here, but the nullable field declaration forces us
+        // be null during normal execution; guard covers the teardown race only.
-        // to handle the theoretical race during teardown.
         if (ResolveTextCommandPlaceholderHook is null)
             return nint.Zero;
 
@@ -285,13 +259,11 @@ internal unsafe class GameFunctions : IDisposable
         if (ReplacementName == null || placeholder != Placeholder)
             return ResolveTextCommandPlaceholderHook.Original(a1, placeholderText, a3, a4);
 
-        // The fixed buffer is 128 bytes; UTF-8 + null-terminator must fit.
+        // Guard against a malformed ReplacementName overflowing the 128-byte buffer.
-        // FFXIV player names plus an @World suffix should never approach this
-        // limit, but a malformed ReplacementName must not overflow the buffer.
         var byteCount = System.Text.Encoding.UTF8.GetByteCount(ReplacementName);
         if (byteCount >= PlaceholderBufferSize)
         {
-            Plugin.Log.Warning(
+            _logger.LogWarning(
                 $"Replacement name too long for placeholder buffer ({byteCount} bytes >= {PlaceholderBufferSize}); falling back to original."
             );
             ReplacementName = null;
@@ -300,7 +272,6 @@ internal unsafe class GameFunctions : IDisposable
 
         MemoryHelper.WriteString(PlaceholderNamePtr, ReplacementName);
         ReplacementName = null;
-
         return PlaceholderNamePtr;
     }
 }

HellionChat/GameFunctions/KeybindManager.cs

@@ -7,7 +7,9 @@ using FFXIVClientStructs.FFXIV.Client.System.String;
 using FFXIVClientStructs.FFXIV.Client.UI;
 using HellionChat.Code;
 using HellionChat.GameFunctions.Types;
+using HellionChat.Ui.Windows;
 using HellionChat.Util;
+using Microsoft.Extensions.Logging;
 using ModifierFlag = HellionChat.GameFunctions.Types.ModifierFlag;
 
 namespace HellionChat.GameFunctions;
@@ -306,9 +308,12 @@ internal unsafe class KeybindManager : IDisposable
         // VirtualKey.OEM_CLEAR,
     };
 
-    internal KeybindManager(Plugin plugin)
+    private readonly ILogger<KeybindManager> _logger;
+
+    internal KeybindManager(Plugin plugin, ILogger<KeybindManager> logger)
     {
         Plugin = plugin;
+        _logger = logger;
         Plugin.GameInteropProvider.InitializeFromAttributes(this);
 
         // Handle keybinds from the game on every tick.
@@ -500,33 +505,188 @@ internal unsafe class KeybindManager : IDisposable
         if (!KeybindsToIntercept.TryGetValue(currentBest.Item2, out var info))
             return;
 
+        // Resolve the surface this keybind acts on FIRST: a focused pop-out otherwise
+        // the main window. Channel-set/REPLY/prefill all write here so the action
+        // follows the input the user is typing in.
+        var (targetWindow, targetTab) = ResolveKeybindTarget();
+
+        // Surface + focus the resolved target ONCE, before routing. Main: ActivateChat
+        // re-surfaces it from a hide/closed state (the chat-activation entry point
+        // retired in v1.6.0). Pop-out: arm only its focus — NOT ActivateChat, which
+        // would yank the main window to front and un-hide it on every pop-out-targeted
+        // keybind: stay where the user types. Exactly one window arms focus per
+        // keybind, so the next frame has no SetKeyboardFocusHere race.
+        if (targetWindow is ChannelPopoutWindow)
+            targetWindow.RequestInputFocus();
+        else
+            Plugin.Instance.MainWindow?.ActivateChat();
+
+        // The routing tail makes native game calls (GetTellHistoryInfo, UIModule,
+        // RotateLinkshellHistory) on the framework tick — wrap it so one bad frame logs
+        // instead of throwing into Dalamud's update loop (v1.5.6 parity).
         try
         {
-            TellReason? reason = info.Channel == InputChannel.Tell ? TellReason.Reply : null;
+            if (info.Channel is { } channel && info.Rotate == RotateMode.None)
-            Plugin.ChatLogWindow.Activated(new ChatActivatedArgs(info) { TellReason = reason });
-        }
-        catch (Exception ex)
             {
-            Plugin.Log.Error(ex, "Error in chat Activated event");
+                // Direct channel-switch binds (CMD_SAY/PARTY/numbered linkshells/…): switch
+                // the game channel AND mirror it onto the resolved tab so the input pill
+                // shows the real send target (pill-sync).
+                Plugin.Instance.Functions.Chat.SetChannel(channel);
+                // Only mirror onto the tab when the game actually accepted the switch — an
+                // empty linkshell slot leaves the game channel untouched, so the pill must
+                // stay put rather than show a target the game will not send to.
+                if (Chat.IsChannelOrExistingLinkshell(channel) && targetTab is { } directTab)
+                {
+                    directTab.CurrentChannel.SetChannel(channel);
+                    directTab.CurrentChannel.TellTarget = null;
+                    directTab.CurrentChannel.ResetTempChannel();
+                }
+            }
+            else if (info.Channel is { } rotateChannel && info.Rotate != RotateMode.None)
+            {
+                // Rotation binds (REPLY / linkshell-cycle). Ported from v1.5.6's
+                // ChatLogWindow.Activated (1d3b429:240-334) without the ChatActivatedArgs
+                // indirection (gone in the rewrite). Writes onto the resolved surface's
+                // tab, not Plugin.CurrentTab.
+                if (targetTab is { } rotTab)
+                {
+                    var targetChannel = (InputChannel?)rotateChannel;
+
+                    // REPLY rotation: the reply target is ALWAYS temp (never permanent —
+                    // a permanent reply would leak the partner onto the tab) and ALWAYS
+                    // TellReason.Reply. info.Permanent does not gate this step; only the
+                    // channel-set tail below honours the _ALWAYS binds' permanence.
+                    if (rotateChannel == InputChannel.Tell)
+                    {
+                        var idx =
+                            rotTab.CurrentChannel.TempChannel != InputChannel.Tell ? 0
+                            : info.Rotate == RotateMode.Reverse ? -1
+                            : 1;
+
+                        var tellInfo = Plugin.Instance.Functions.Chat.GetTellHistoryInfo(idx);
+                        if (tellInfo != null)
+                            rotTab.CurrentChannel.TempTellTarget = new TellTarget(
+                                tellInfo.Name,
+                                tellInfo.World,
+                                tellInfo.ContentId,
+                                TellReason.Reply
+                            );
+                    }
+                    else
+                    {
+                        // Cycling AWAY from Tell to a linkshell: drop any stale permanent
+                        // tell target so a typed line cannot silently route to the old
+                        // partner (v1.5.6 ChatLogWindow.cs:280, privacy guard).
+                        rotTab.CurrentChannel.TellTarget = null;
+                    }
+
+                    // LS/CWLS cycle: permanent rotates the game's own history and reads the
+                    // landed cycle index back; temp resolves the next valid linkshell index
+                    // without touching game state. Both leave targetChannel null on failure
+                    // (no valid linkshell in 8 iterations) so the tail below logs + skips.
+                    if (rotateChannel is InputChannel.Linkshell1 or InputChannel.CrossLinkshell1)
+                    {
+                        var module = UIModule.Instance();
+                        if (info.Permanent)
+                        {
+                            if (rotateChannel == InputChannel.Linkshell1)
+                            {
+                                Chat.RotateLinkshellHistory(info.Rotate);
+                                targetChannel = rotateChannel + (uint)module->LinkshellCycle;
+                            }
+                            else
+                            {
+                                Chat.RotateCrossLinkshellHistory(info.Rotate);
+                                targetChannel =
+                                    rotateChannel + (uint)module->CrossWorldLinkshellCycle;
+                            }
+                        }
+                        else
+                        {
+                            targetChannel = Chat.ResolveTempInputChannel(
+                                rotTab.CurrentChannel.TempChannel,
+                                rotateChannel,
+                                info.Rotate
+                            );
                         }
                     }
 
-    // v0.6.0 — central dispatch for ChatTabForward/Backward. If a pop-out
+                    // Shared channel-set tail (runs for Tell too: IsChannelOrExistingLinkshell
-    // window currently has its compact input focused, the keybind is
+                    // is true for Tell and targetChannel stays Tell). Permanent => commit the
-    // forwarded into that pop-out's ChatInputBar so the user navigates
+                    // game channel; temp => arm UseTempChannel/TempChannel only. This is the
-    // tabs in the window they are typing in. Otherwise the main window
+                    // ONLY place info.Permanent decides temp vs permanent for the channel.
-    // handles it (= v0.5.x behavior).
+                    if (
-    private void DispatchTabDelta(int delta)
+                        targetChannel is null
+                        || !Chat.IsChannelOrExistingLinkshell(targetChannel.Value)
+                    )
                     {
-        foreach (var popout in Plugin.ChatLogWindow.ActivePopouts)
+                        _logger.LogWarning(
-        {
+                            "Rotation channel resolved to an invalid value '{Channel}', ignoring",
-            if (popout.HasFocusedInputBar && popout.InputBar != null)
+                            targetChannel
-            {
+                        );
-                popout.InputBar.HandleKeybindForward(delta);
                         return;
                     }
+
+                    if (info.Permanent)
+                    {
+                        // 1.5.6 parity (ChatLogWindow.SetChannel, 1d3b429:1476-1479):
+                        // committing the game channel also pre-targets the game's native input.
+                        // Forward the tab's reply target for Tell so the partner is armed
+                        // game-side (ChangeChatChannel code 17); null for a linkshell —
+                        // targetChannel is the FINAL resolved value (9..16/19..26 for LS, never
+                        // 0=Tell), so a stale TempTellTarget can never flip an LS cycle to Tell.
+                        var gameTarget =
+                            targetChannel.Value == InputChannel.Tell
+                                ? rotTab.CurrentChannel.TempTellTarget
+                                    ?? rotTab.CurrentChannel.TellTarget
+                                : null;
+                        Plugin.Instance.Functions.Chat.SetChannel(targetChannel.Value, gameTarget);
+                        rotTab.CurrentChannel.SetChannel(targetChannel.Value);
                     }
-        Plugin.ChatLogWindow.ChangeTabDelta(delta);
+                    else
+                    {
+                        rotTab.CurrentChannel.UseTempChannel = true;
+                        rotTab.CurrentChannel.TempChannel = targetChannel.Value;
+                    }
+                }
+            }
+
+            // Prefill text binds (CMD_COMMAND seeds "/"): the token always goes to the
+            // main InputBar (the focus contract does not expose pop-out buffers); a
+            // focused pop-out already received focus above, so only token routing matters
+            // here -- a documented scope limit.
+            if (info.Text is { } text)
+                Plugin.Instance.InputBar.SetPendingMessage(text);
+        }
+        catch (Exception ex)
+        {
+            _logger.LogError(ex, "Keybind routing failed for channel {Channel}", info.Channel);
+        }
+    }
+
+    // Resolve which chat surface a keybind action targets: the open pop-out whose
+    // input currently has focus, otherwise the main window. Both paths share it so a
+    // channel-switch/REPLY/prefill follows the surface the user is typing in. The
+    // returned tab is that surface's bound tab (pop-out: Bound; main: ActiveTab).
+    // Null tab => skip the tab-write (early-load window where no tab exists yet).
+    private (IFocusableChatWindow Window, Tab? Tab) ResolveKeybindTarget()
+    {
+        foreach (var popout in Plugin.Instance.ChannelPopoutPool.Instances)
+        {
+            if (popout.Bound is { } bound && popout.IsOpen && popout.HasFocusedInput)
+                return (popout, bound);
+        }
+
+        var main = Plugin.Instance.MainWindow;
+        return (main!, main?.ActiveTab);
+    }
+
+    // Tab-delta keybinds (ChatTabForward/Backward) stay main-window-only by design:
+    // a channel-bound pop-out has no tab list to cycle. The focus contract is
+    // consumed by the channel-set/REPLY/prefill tail, not here.
+    private void DispatchTabDelta(int delta)
+    {
+        Plugin.Instance.MainWindow?.ChangeTabDelta(delta);
     }
 
     private static Keybind GetKeybind(string id)

HellionChat/GameFunctions/Types/TellTarget.cs

@@ -40,5 +40,11 @@ public class TellTarget
 
     public static TellTarget Empty() => new(string.Empty, 0, 0, TellReason.Direct);
 
-    public static TellTarget From(TellTarget t) => new(t.Name, t.World, t.ContentId, t.Reason);
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Replaced static From(t) with an instance-style Clone() so call
+    //   sites read like a copy operation, not a factory.
+    // TEST-MIRROR: ../../../Hellion Build test/_Helpers/TellTargetCloneTests.cs
+    // ---------------------------------------------------------------
+    public TellTarget Clone() => new(Name, World, ContentId, Reason);
 }

HellionChat/HellionChat.csproj

@@ -1,46 +1,42 @@
 <Project Sdk="Dalamud.NET.Sdk/15.0.0">
     <PropertyGroup>
-        <!-- Hellion Chat versioning runs separately from upstream Chat 2.
+        <!-- Independent versioning; see yaml changelog for upstream Chat 2 base -->
-             0.1.0 is our bootstrap release; the underlying Chat 2 base is
+        <Version>2.0.0</Version>
-             called out in the yaml changelog so users can see what it
-             derives from. -->
-        <Version>1.4.3</Version>
         <ImplicitUsings>enable</ImplicitUsings>
         <Nullable>enable</Nullable>
-        <!-- Honor packages.lock.json on restore so floating version ranges
+        <!-- Use lock file to pin exact versions -->
-             don't silently drift between machines or CI runs. -->
         <RestorePackagesWithLockFile>true</RestorePackagesWithLockFile>
-        <!-- v1.0.0 standalone cut — both AssemblyName and RootNamespace
+        <!-- v1.0.0+: standalone fork, no upstream cherry-pick compatibility -->
-             are HellionChat. The plugin no longer maintains source-level
-             cherry-pick compatibility with upstream Infiziert90/ChatTwo;
-             upstream changes are integrated manually if at all. -->
         <AssemblyName>HellionChat</AssemblyName>
         <RootNamespace>HellionChat</RootNamespace>
     </PropertyGroup>
 
     <ItemGroup>
-        <!-- Closed ranges on packages with breaking-change history block a
+        <!-- Closed ranges prevent surprise major bumps during lock file regeneration -->
-             surprise major bump when the lock file is regenerated. The
-             lock file pins the exact version per build; the upper bound
-             keeps the unlock path from drifting across major lines. -->
         <PackageReference Include="MessagePack" Version="[3.1.4, 4.0.0)" />
-        <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.7" />
+        <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.8" />
-        <!-- Override the transitively-referenced native SQLite build to one
+        <!-- v1.5.0 DI-container foundation; matches Lightless pin (Hosting 10.0.7) -->
-             that ships SQLite >= 3.50.3 (CVE-2025-6965 memory corruption,
+        <PackageReference
-             CVE-2025-7709 fixed in 3.50.x). Microsoft.Data.Sqlite 10.0.7
+            Include="Microsoft.Extensions.DependencyInjection"
-             pulls SQLitePCLRaw 2.1.11 which carries the older lib; pinning
+            Version="[10.0.7, 11.0.0)"
-             the lib package directly forces the newer native binary
+        />
-             without a major bump on the managed wrapper. -->
+        <PackageReference Include="Microsoft.Extensions.Hosting" Version="[10.0.7, 11.0.0)" />
+        <PackageReference Include="Microsoft.Extensions.Logging" Version="[10.0.7, 11.0.0)" />
+        <PackageReference Include="Microsoft.Extensions.Options" Version="[10.0.7, 11.0.0)" />
+        <!-- SQLitePCLRaw override for CVE-2025-6965, CVE-2025-7709 (SQLite >= 3.50.3) -->
         <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.50.3" />
         <PackageReference Include="morelinq" Version="4.4.0" />
+        <!-- NAudio.WinMM 2.2.1 MIT - WaveOutEvent/WinMM path is Wine-safe (WaveOut works under Wine,
+             Media-Foundation-based codecs do not). Using the sub-package avoids pulling in
+             NAudio.WinForms (which requires WindowsDesktop and does not build on Linux hosts).
+             WaveOutEvent and WaveFileReader both live in NAudio.WinMM + NAudio.Core. -->
+        <PackageReference Include="NAudio.WinMM" Version="2.3.0" />
         <PackageReference Include="Pidgin" Version="[3.5.1, 4.0.0)" />
         <PackageReference Include="SixLabors.ImageSharp" Version="[3.1.12, 4.0.0)" />
     </ItemGroup>
 
     <ItemGroup>
-        <!-- Pure-function test suites in HellionChat.Tests need access to
+        <!-- Test assembly needs access to internal helpers (not redistributed) -->
-             the internal helper classes (StringUtil, UriPayload, Tokenizer
-             etc.). Test assembly does not get redistributed. -->
         <InternalsVisibleTo Include="HellionChat.Tests" />
     </ItemGroup>
 
@@ -59,37 +55,39 @@
         </EmbeddedResource>
     </ItemGroup>
 
-    <!-- HellionChat — Hellion-specific resource bundle (HellionStrings.resx
+    <!-- Embedded resources: bundled UI font (Inter Light, OFL-1.1) + manifest resource -->
-         + HellionStrings.<lang>.resx) is picked up automatically by the SDK
-         default include. Designer.cs is hand-maintained, no auto-gen needed. -->
-
-    <!-- Bundled Hellion font (Exo 2, OFL-1.1). Embedded as a manifest
-         resource with a fixed LogicalName so FontManager can pull the
-         bytes back at runtime via AddFontFromMemory. The OFL license
-         text travels with it inside the assembly to satisfy the
-         "license must be distributed with the font" clause. -->
     <ItemGroup>
-        <EmbeddedResource Include="Resources\HellionFont.ttf">
+        <EmbeddedResource Include="Resources\Inter-Light.ttf">
-            <LogicalName>HellionFont.ttf</LogicalName>
+            <LogicalName>Inter-Light.ttf</LogicalName>
         </EmbeddedResource>
-        <EmbeddedResource Include="Resources\HellionFont-OFL.txt">
+        <EmbeddedResource Include="Resources\Inter-OFL.txt">
-            <LogicalName>HellionFont-OFL.txt</LogicalName>
+            <LogicalName>Inter-OFL.txt</LogicalName>
+        </EmbeddedResource>
+        <EmbeddedResource Include="Resources\Branding\fox-banner.png">
+            <LogicalName>HellionChat.Branding.fox-banner.png</LogicalName>
+        </EmbeddedResource>
+        <!-- Bundled custom notification sounds, Mono 44.1 kHz 16-bit PCM WAV (Wine-safe) -->
+        <EmbeddedResource Include="Resources\Sounds\notification-1.wav">
+            <LogicalName>HellionChat.Sounds.notification-1.wav</LogicalName>
+        </EmbeddedResource>
+        <EmbeddedResource Include="Resources\Sounds\notification-2.wav">
+            <LogicalName>HellionChat.Sounds.notification-2.wav</LogicalName>
+        </EmbeddedResource>
+        <EmbeddedResource Include="Resources\Sounds\notification-3.wav">
+            <LogicalName>HellionChat.Sounds.notification-3.wav</LogicalName>
+        </EmbeddedResource>
+        <EmbeddedResource Include="Resources\Branding\fox-mini.txt">
+            <LogicalName>HellionChat.Branding.fox-mini.txt</LogicalName>
         </EmbeddedResource>
         <EmbeddedResource Include="Themes\Builtin\example-theme.json">
             <LogicalName>HellionChat.Themes.Builtin.example-theme.json</LogicalName>
         </EmbeddedResource>
     </ItemGroup>
 
-    <!-- Plugin icon. Copy images/* into the build output so Dalamud
+    <!-- Plugin icon: copy images/* to output for Dalamud discovery. ASCII
-         finds the icon next to the DLL, and let the SDK default
+         study folder is source-only material, no need to ship it. -->
-         DalamudPackager pipeline include the same path in the
-         release ZIP. Earlier we shipped a custom DalamudPackager
-         targets override that explicitly set HandleImages and
-         ImagesPath; that override conflicted with the SDK 15
-         default and the resulting manifest carried no IconUrl.
-         Removed in v0.5.2. -->
     <ItemGroup>
-        <None Include="images\**">
+        <None Include="images\**" Exclude="images\ascii\**">
             <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
         </None>
     </ItemGroup>

HellionChat/HellionChat.yaml

@@ -1,77 +1,26 @@
 name: Hellion Chat
-author: JonKazama-Hellion
+author: Jon Kazama (Hellion Forge)
-punchline: Chat replacement with privacy controls aligned to EU, US and JP rules — based on Chat 2 (EUPL-1.2)
+punchline: A Hellion Forge plugin — privacy-focused chat replacement for FFXIV, built for EU, US and JP data rules.
 description: |-
-    Hellion Chat is a privacy-focused chat replacement for FINAL FANTASY XIV
+    Chat replacement for FINAL FANTASY XIV with privacy controls built around
-    based on the Chat 2 codebase (EUPL-1.2). One feature is intentionally
+    EU, US and JP data-protection rules.
-    removed (the optional webinterface) and a stack of privacy controls is
-    added on top. Tabs, channel filters, RGB colours, emotes, screenshot
-    mode, IPC integration and the chat replacement window itself work the
-    same. The webinterface is intentionally not part of Hellion Chat because
-    it serves a different use case from the smaller default footprint this
-    plugin is built around.
 
-    On top of that, Hellion Chat adds privacy and data-handling controls
+    By default only your own conversations are stored. Public chat, NPC
-    designed to align with the modern data protection rules that apply
+    dialogue and system messages stay out of the database unless you opt in.
-    across the EU, the United States and Japan. By default only your own
+    Retention windows are configurable per channel, history can be wiped
-    conversations are stored; messages from strangers, NPCs and system
+    retroactively, and everything can be exported on demand.
-    spam stay out of the database. Retention windows are configurable per
-    channel, history can be wiped retroactively, and stored data can be
-    exported on demand.
-
-    Key privacy and data-handling features:
 
+    Features:
     - Channel whitelist with a Privacy-First default
     - Per-channel retention with a daily background sweep
-    - Retroactive cleanup with a Ctrl+Shift confirm
+    - Retroactive cleanup (Ctrl+Shift confirm)
     - Export to Markdown, JSON or CSV
-    - First-run wizard with three preset profiles (Privacy-First, Casual,
+    - First-run wizard with four preset profiles
-      Full History)
+    - Multi-language UI (24 locales) with live language switching
-    - Bilingual UI (English and German) with live language switching
+    - Own config and database — no shared state with other plugins
-    - Independent plugin state — own config file and database directory,
-      so Hellion Chat does not share state with upstream Chat 2
 
-    v1.3.0 First plugin integration cycle. Honorific custom titles
+    Based on Chat 2 by Infi and Anna (EUPL-1.2).
-    are shown in the chat header above the message log, with auto-detect
+    Support: https://discord.gg/X9V7Kcv5gR
-    and silent fallback when Honorific is not installed.
-
-    v1.4.0 — Critical Lifecycle Fixes. Plugin reload and shutdown
-    are cleaner: SQLite no longer leans on GC pressure to release
-    its file, worker threads are explicitly background, deferred
-    config saves no longer get lost mid-disable, and pre-v13 config
-    backups carry the user's custom theme opacity into the v14 schema
-    instead of falling back to the default.
-
-    v1.4.1 — Theme Engine Performance plus a tenth built-in.
-    HellionStyle.PushGlobal reads pre-computed ABGR values from a
-    per-theme cache instead of converting RGBA per slot per frame
-    (~13 % render-time recovery in typical scenes). Custom-theme
-    hot-reload survives transient file locks (editor mid-save
-    keeps the last-known-good snapshot). Synthwave Sunset joins
-    as the tenth built-in theme — Hot Magenta + Cyan on midnight
-    violet, 80s neon-grid vibes.
-
-    v1.4.2 — ChatLog Frame-Hot-Path. Three per-frame allocation
-    patterns gone from the chat-log render path: card-mode borders
-    hoist invariants out of the per-message loop, auto-tell tab
-    tint and icon get a per-tab cache, and the status bar gates
-    its tab aggregation behind the same one-second cache it uses
-    for the format strings.
-
-    v1.4.3 — Plugin-Load Async-Init plus Repo-Cutover. Plugin
-    migrated to Dalamud's IAsyncDalamudPlugin so the heavy work
-    (migrations, service allocations, window construction, hook
-    subscription) runs in LoadAsync without blocking Dalamud's
-    UI. Schema-gate replaces the v9 → v16 migration chain;
-    configs on schema v16+ load directly. Custom-repo URL moves
-    to gitea.hellion-forge.cloud, the GitHub repo stays as a
-    frozen v1.4.2 snapshot.
-
-    Based on Chat 2 by Infi and Anna, licensed under EUPL-1.2.
-
-    Modding & support: join the Hellion Forge Discord at
-    https://discord.gg/X9V7Kcv5gR — community for Hellion Chat and
-    other Hellion Online Media plugins/tools.
 repo_url: https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat
 accepts_feedback: true
 icon_url: https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/HellionChat/images/icon.png
@@ -86,136 +35,118 @@ tags:
     - Replacement
     - Privacy
 changelog: |-
-    **Hellion Chat 1.4.3 — Plugin-Load Async-Init + Repo-Cutover (2026-05-08)**
+    **v2.0.0 — Rebuilt, Repaired, Reset (2026-08-19)**
 
-    Plugin lifecycle migrated to Dalamud's `IAsyncDalamudPlugin`
+    Nine development cycles in one release. Everything built as v1.6.0 through v1.15.0 ships here; those versions were never published on their own.
-    API. The constructor now does only the bootstrap-essentials
-    (config load, language init, conflict detection); migrations,
-    service allocations, window construction and hook subscription
-    move to LoadAsync. Dalamud can keep its UI responsive while the
-    heavy work runs.
 
-    - IAsyncDalamudPlugin two-phase load with per-line CaptureFailure
+    **This update resets your settings.** Nine cycles of rebuilding left saved values pointing at surfaces that no longer exist, and starting over is the only way to be sure every install is on the same defaults. **Your message history is untouched** — it lives in a separate database. Your old settings are kept next to the config file as `HellionChat.json.pre-2.0.0.bak`.
-      in DisposeAsync (mirrors LightlessSync's pattern); idempotency
-      guard protects against reload races
-    - Schema-gate replaces the v9 → v16 migration chain. Configs
-      on schema v16+ load directly; older configs trigger an
-      "install v1.4.2 first" error so the historic migration
-      path stays intact
-    - AutoTranslate.PreloadCache moved off the load path. First
-      use may have a sub-second hitch instead of every-load; the
-      upstream chose differently, we accept first-use latency
-    - FontManager.BuildFonts is called sync at the start of
-      LoadAsync; Dalamud rebuilds the font atlas on its own
-      pipeline so the custom Hellion-Exo2 font appears with a
-      brief font-pop after load (matches ChatTwo's behaviour)
-    - Custom-repo URL moved to gitea.hellion-forge.cloud/
-      JonKazama-Hellion/HellionChat. GitHub repo stays as a
-      frozen v1.4.2 snapshot; new releases ship from Gitea.
-      Existing testers need to update the custom-repo URL once
-    - Plugin-load time in this release sits at ~3.7 s median
-      (5 reloads), comparable to v1.4.2. Async migration is
-      foundational for v1.4.4 Lazy-Init optimisations rather
-      than an immediate user-perceived win
 
-    Modding & support: join Hellion Forge — https://discord.gg/X9V7Kcv5gR
+    Fixed, and several of these lost data or hid it:
 
-    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+    - Retroactive cleanup could never be applied at all. The preview took the database lock itself and that counted as a change, so every preview went stale the instant it finished and the apply button never appeared.
+    - Compacting the database ran against an open reader and failed, after which the plugin reported that nothing had been deleted — while everything had.
+    - Deleting messages left them in the search index, so search kept returning rows that were already gone.
+    - Pinned tell tabs came up empty for a whole session: the history query ran at plugin start, before any character is logged in, and never tried again.
+    - Export wrote invalid JSON where a setting value was involved, and a byte-order mark that strict parsers reject.
+    - A pop-out with its title bar switched on could not be closed, and a tell from a popped-out partner hijacked the main window's active tab.
+    - One third-party emote service started returning 403, and that response took all 65 working global emotes down with it on every start.
+    - The GDPR notice for the full-history profile had been translated into 25 languages and shown nowhere since May.
 
-    **Hellion Chat 1.4.2 — ChatLog Frame-Hot-Path**
+    Changed, and one of these changes what gets stored:
 
-    Third sub-patch of the v1.4.x Polish Sweep series. Per-frame
+    - **The channel grid is now authoritative.** Until now the unknown-channel failsafe was applied to known channels too, so a channel you had unticked was still being written while that failsafe was on. If that was you, this release stores less than before. Nothing already in the database is touched.
-    allocations from the chat-log render path eliminated.
+    - Every window is drawn by the plugin rather than by ImGui defaults, and they share one visual language: structure carried by typography, a surface on anything you can press, and colours measured against what sits behind them.
+    - Typography has named roles — sender, body and timestamp mean the same thing everywhere, timestamps sit in their own column, system messages are italic.
+    - Export, the tab editor, database maintenance and pinning had lost their entry points during the rebuild and are reachable again.
+    - Screenshot mode reached one of four surfaces that draw a tab name. It reaches all four now.
 
-    - DrawMessages card-mode hoists theme/drawList/winLeft/winRight/
+    Removed: six settings that had a control and a saved value but no reader anywhere in the plugin; a per-tab regex filter the game's own blackword filter covers; and a wizard checkbox that was collected, reported as applied and never read.
-      borderColorAbgr out of the per-message loop. About 500
-      redundant calls per frame at 100 visible messages, multiplied
-      by every pop-out window
-    - Auto-tell tab tint and icon use a per-tab cache. Hash
-      computation and string allocation only happen when the tell
-      target name or world drifts. AutoTellTabTint stays a pure
-      hash helper; cache lives in a thin TabTintCache wrapper
-    - Status bar gates its tab aggregation behind the same
-      one-second cache it already used for the format strings.
-      LINQ Sum and Count replaced with a single foreach pass
-      that runs on roughly 1% of frames
 
-    Realistic frame-time recovery: 2-5% in typical scenes, more
+    New: an Emote tab in the default layout, local and server clocks in the status bar, a screenshot mode reachable from the input row, `/hellion wizard` to reopen the setup wizard, a style lab under `/hellion lab`, and 25 UI languages with the settings window and wizard fully covered.
-    on pop-out-heavy setups because the card-border hoist scales
-    per window.
 
-    Modding & support: join Hellion Forge — https://discord.gg/X9V7Kcv5gR
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2). The two codebases have diverged far enough that they no longer line up.
 
-    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+    ---
 
-    **Hellion Chat 1.4.1 — Theme Engine Performance**
+    **v1.5.6 — Settings Overhaul + Filter & Notification Polish (2026-05-23)**
 
-    Second sub-patch of the v1.4.x Polish Sweep series. Heap
+    - Settings window reorganised: ten tabs down to seven (General, Appearance, Chat, Window, Channels, Data & Privacy, About). Each tab now uses collapsible sections grouped by control type. Sections start collapsed every time you open a tab — less noise, easier to find what you need.
-    pressure from the theme engine's per-frame render path
+    - New sender-name display options under Chat → Messages: separate world-suffix and name-format modes (Full name / First name only / Initials × Never / Other worlds only / Always).
-    removed, plus a tenth built-in theme and hardening for
+    - Plugin-only symbols now show a pre-send warning so other players do not get empty boxes (Chat → Messages → "Warn before sending plugin-only symbols").
-    the custom-theme hot-reload.
+    - Separate window opacity for focused vs. inactive chat window (Appearance → Window style → "Inactive window opacity"). The slider above sets the focused value.
-
+    - Custom notification sound volume slider (General → Sound, and mirrored in Channels → per-tab → Notification). Affects only the three bundled custom sounds; the 16 game sounds are unaffected.
-    - Theme records carry a pre-computed ABGR-packed cache
+    - The per-tab regex filter that briefly shipped earlier in this cycle has been removed — FFXIV's built-in blackword filter covers the same need.
-      for every color slot; cache is filled when the theme
+    - All 24 locale files updated for the new section labels and the v1.5.6 control labels (machine translation; native review continues via the Hellion Forge Discord).
-      is registered and refreshed defensively on every
-      Switch()
-    - HellionStyle.PushGlobal reads ABGR values from the
-      cache instead of calling ColourUtil.RgbaToAbgr per
-      slot per frame; ~13 % render-time recovery measured
-      in typical scenes (plan estimate was 2–6 %, real
-      ~10–15 %)
-    - ThemeRegistry custom-theme reload distinguishes a
-      recoverable file lock (editor mid-save) from a
-      permanent IO failure; locked themes keep their
-      last-known-good snapshot and retry on the next
-      lookup instead of dropping out of the picker
-    - New built-in: Synthwave Sunset — Hot Magenta + Cyan
-      on midnight violet, 80s neon-grid vibes; tenth theme
-      in the picker
-    - Author credits refreshed: brand themes are credited
-      as "Hellion Forge"; Mint Grove and Forge Merchantman
-      now credited to Carla Beleandis as a community thanks
-
-    No schema bump, no user-visible behaviour change other
-    than smoother frames on GC-sensitive setups and one
-    additional colour option.
-
-    Modding & support: join Hellion Forge — https://discord.gg/X9V7Kcv5gR
-
-    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
-
-    **Hellion Chat 1.4.0 — Critical Lifecycle Fixes**
-
-    First sub-patch of the v1.4.x Polish Sweep series. Seven
-    known lifecycle and race bugs eliminated before any
-    performance refactor sits on top.
-
-    - MessageStore disposal no longer triggers GC.Collect
-      globally; Pooling=false on the SQLite connection means
-      there's nothing left to clean up by hand
-    - PendingMessage and RetentionSweep worker threads are
-      explicitly marked IsBackground=true so the plugin domain
-      can unload during XIVLauncher reload without waiting
-      for them
-    - EmoteCache image and gif loaders moved from async-void
-      to async Task with a shared task tracker, draining
-      on Dispose so an in-flight load can no longer write
-      to a disposed EmoteImages entry
-    - DisposeAsync 10s timeout now warns loudly instead of
-      silently leaving the worker behind
-    - Plugin.Dispose flushes any pending DeferredSaveFrames
-      before tearing services down, so settings changes
-      made in the last few frames before disable are no
-      longer lost
-    - The v13→v14 config migration now reads the pre-v13
-      backup and carries HellionThemeWindowOpacity into the
-      new WindowOpacity field instead of falling back to
-      the default 0.85
-
-    Modding & support: join Hellion Forge — https://discord.gg/X9V7Kcv5gR
 
     Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
 
     ---
 
+    **v1.5.5 — Upstream-Sync Tab-Features (2026-05-21)**
+
+    A backlog-sync cycle: inherited tab-feature items plus a new fox
+    banner image and custom notification sounds.
+
+    User-visible:
+
+    - Failed tells now raise a warning toast when a message you sent
+      could not be delivered (recipient offline, in an instance, or
+      blocking you). Toggle in Settings, Chat tab.
+    - Per-tab notification sound: each tab can play a sound when a
+      message arrives while you are looking at a different tab. Pick
+      one of the 16 game chat sounds or one of three bundled Hellion
+      sounds, with a preview button to hear it. Off by default,
+      respects the global sound toggle.
+    - The tab rename field in the right-click menu now focuses
+      itself when the menu opens and accepts up to 512 characters,
+      matching the settings-tab rename.
+    - A jump-to-latest button appears in the chat log header while
+      you are scrolled up from the live end.
+    - Map flags and item links can be inserted into the chat input
+      from its right-click menu.
+    - The Hellion Forge fox banner in the first-run wizard and the
+      Information tab is now a real image instead of ASCII art.
+
+    Schema bumped to v18 (additive fields only, no data migration).
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+    ---
+
+    **v1.5.4 — Polish and Motion (2026-05-20)**
+
+    A polish cycle: smoother theme switching, faster theme and tab
+    access, and subtle hover motion. Three P3 items plus an
+    accessibility toggle.
+
+    User-visible:
+
+    - Theme switches now crossfade smoothly over ~300 ms across every
+      Hellion-rendered surface — sidebar, title, buttons, tabs,
+      scrollbar, separators. The window background snaps deliberately
+      so the per-window opacity override from Dalamud's pinning menu
+      stays untouched.
+    - New header quick-picker: a palette button left of the cog opens
+      a compact popup with two sections — every built-in and custom
+      theme, and every tab. The active entry carries a check glyph;
+      clicking another switches without closing the popup.
+    - Sidebar icons ease their opacity on hover, and card-mode message
+      borders highlight per tab while the cursor is over their rows.
+      Framerate-independent, so a stalled Wine frame cannot overshoot
+      the animation.
+    - New "Reduce motion" toggle in Theme & Layout disables the
+      crossfade, the hover animations and the unread-tab pulse for
+      users who prefer a static UI.
+
+    Under the hood:
+
+    - Two pure-helper lerp paths (ThemeAbgrCacheLerp, FrameLerp) with
+      xUnit coverage in the Build Suite, plus a ColourUtil.ApplyAlpha
+      alpha modulator. Two new /xlperf self-test steps pin the
+      crossfade and quick-picker contracts.
+
+    No schema bump, no migration. Migration v17 stays.
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
     Earlier history: https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases

HellionChat/Infrastructure/Hosting/InitHostedServices.cs

@@ -0,0 +1,208 @@
+using Dalamud.Game.Addon.Lifecycle;
+using Dalamud.Plugin;
+using HellionChat.Integrations;
+using HellionChat.Ipc;
+using HellionChat.Themes;
+using HellionChat.Ui;
+using HellionChat.Ui.Components;
+using HellionChat.Ui.Windows;
+using Microsoft.Extensions.Hosting;
+
+namespace HellionChat.Infrastructure.Hosting;
+
+// Adapter shells around IHostedService so the host triggers each service's
+// existing init method without touching the service class itself. Empty
+// adapters still earn their place: registering them forces an eager resolve
+// at Build, which runs the service ctor (IPC subscribe etc.) right then
+// instead of lazily on first GetRequiredService.
+
+internal sealed class ThemeRegistryInitHostedService(
+    ThemeRegistry registry,
+    FontManager fontManager
+) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        // Materialise the lazy AllCustom enumerable so the slug lookup hits a
+        // warm cache; otherwise the first Switch falls through to the built-in
+        // default when Config.Theme points at a custom slug.
+        foreach (var _ in registry.AllCustom()) { }
+        registry.SwitchSilent(Plugin.Config.Theme);
+
+        // B4b-3: point font sizes at the active theme's typography, wire future
+        // theme switches to the atlas rebuild, and apply the boot theme's override.
+        fontManager.SetTypographySource(() => registry.Active.Typography);
+        registry.SetActiveChangedCallback(() => fontManager.RebuildDelegateFontsIfChanged());
+        await Plugin.Framework.RunOnFrameworkThread(() =>
+            fontManager.RebuildDelegateFontsIfChanged()
+        );
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+// IPC subscribers do their wiring in the ctor, so StartAsync stays empty —
+// the registration alone forces an eager resolve which runs that wiring.
+
+internal sealed class IpcManagerInitHostedService(IpcManager ipc) : IHostedService
+{
+    private readonly IpcManager _ipc = ipc;
+
+    public Task StartAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class TypingIpcInitHostedService(TypingIpc typingIpc) : IHostedService
+{
+    private readonly TypingIpc _typingIpc = typingIpc;
+
+    public Task StartAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class ExtraChatInitHostedService(ExtraChat extraChat) : IHostedService
+{
+    private readonly ExtraChat _extraChat = extraChat;
+
+    public Task StartAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class MessageManagerInitHostedService(
+    IDalamudPluginInterface pluginInterface,
+    MessageManager manager
+) : IHostedService
+{
+    public Task StartAsync(CancellationToken cancellationToken)
+    {
+        // FilterAllTabsAsync rebuilds the per-tab view from the message store;
+        // on Boot, tabs come up empty and the first chat events fill them, so
+        // we skip the rebuild to avoid a pointless full-history scan.
+        if (pluginInterface.Reason is not PluginLoadReason.Boot)
+            manager.FilterAllTabsAsync();
+        return Task.CompletedTask;
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class AutoTellTabsServiceInitHostedService(AutoTellTabsService service)
+    : IHostedService
+{
+    public Task StartAsync(CancellationToken cancellationToken)
+    {
+        service.Initialize();
+        return Task.CompletedTask;
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class TellRouterServiceInitHostedService(Services.TellRouterService service)
+    : IHostedService
+{
+    public Task StartAsync(CancellationToken cancellationToken)
+    {
+        service.Initialize();
+        return Task.CompletedTask;
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+// Eager-resolve trigger: resolving FailedTellNotifier in this adapter's ctor
+// enables its game hook during host startup. StartAsync itself is a no-op.
+internal sealed class FailedTellNotifierInitHostedService(FailedTellNotifier notifier)
+    : IHostedService
+{
+    // No-op adapter: the ctor dependency above is the actual eager-resolve
+    // trigger. Field kept to match the IpcManager/TypingIpc/ExtraChat no-op
+    // adapters and to avoid the CS9113 unread-parameter warning.
+    private readonly FailedTellNotifier _notifier = notifier;
+
+    public Task StartAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+internal sealed class PayloadHandlerInitHostedService(
+    PayloadHandler payloadHandler,
+    MessageList messageList
+) : IHostedService
+{
+    public async Task StartAsync(CancellationToken cancellationToken)
+    {
+        // Cycle resolution: both singletons exist by the time HostedServices
+        // run, so this is the first safe point to wire the setter.
+        messageList.AttachPayloadHandler(payloadHandler);
+
+        // IAddonLifecycle thread-affinity is not explicitly documented; wrap is
+        // defensive insurance — mirrors the window-registration RunOnFrameworkThread
+        // pattern established in PluginLifecycle.cs.
+        await Plugin.Framework.RunOnFrameworkThread(() =>
+        {
+            Plugin.AddonLifecycle.RegisterListener(
+                AddonEvent.PostUpdate,
+                "ItemDetail",
+                payloadHandler.MoveTooltip
+            );
+            Plugin.AddonLifecycle.RegisterListener(
+                AddonEvent.PostUpdate,
+                "ActionDetail",
+                payloadHandler.MoveTooltip
+            );
+        });
+    }
+
+    public async Task StopAsync(CancellationToken cancellationToken)
+    {
+        await Plugin.Framework.RunOnFrameworkThread(() =>
+        {
+            // Single call using the params-overload removes the delegate from all addons it was registered for (ItemDetail + ActionDetail both cleaned in one shot).
+            Plugin.AddonLifecycle.UnregisterListener(payloadHandler.MoveTooltip);
+        });
+    }
+}
+
+// Wires MainWindow into CommandHelpWindow post-container-build. CommandHelpWindow
+// cannot take MainWindow as a ctor-param because that would close the cycle
+// InputBar -> CommandHelpWindow -> MainWindow -> InputBar (MS.DI does not catch
+// it through FactoryCallSite registrations and the resolve recurses silently).
+// Both singletons exist by host.StartAsync time, so this is the first safe point
+// to wire the setter — same setter-injection pattern as MessageList.AttachPayloadHandler.
+internal sealed class CommandHelpWindowInitHostedService(
+    CommandHelpWindow commandHelpWindow,
+    MainWindow mainWindow
+) : IHostedService
+{
+    public Task StartAsync(CancellationToken cancellationToken)
+    {
+        commandHelpWindow.AttachMainWindow(mainWindow);
+        return Task.CompletedTask;
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}
+
+// Attaches the singleton PayloadHandler to every pre-allocated pop-out
+// window's MessageList post-container-build. Pool/window cannot take the
+// PayloadHandler via ctor (that would close the silent FactoryCallSite cycle —
+// same setter-injection reason as MessageList.AttachPayloadHandler / CommandHelpWindow.
+// AttachMainWindow). Both singletons exist by host.StartAsync time.
+internal sealed class ChannelPopoutInitHostedService(
+    ChannelPopoutPool pool,
+    PayloadHandler payloadHandler
+) : IHostedService
+{
+    public Task StartAsync(CancellationToken cancellationToken)
+    {
+        foreach (var window in pool.Instances)
+            window.AttachPayloadHandler(payloadHandler);
+        return Task.CompletedTask;
+    }
+
+    public Task StopAsync(CancellationToken cancellationToken) => Task.CompletedTask;
+}

HellionChat/Infrastructure/Logging/DalamudLogger.cs

@@ -0,0 +1,64 @@
+using System.Text;
+using Dalamud.Plugin.Services;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat.Infrastructure.Logging;
+
+internal sealed class DalamudLogger : ILogger
+{
+    private readonly string _name;
+    private readonly IPluginLog _pluginLog;
+
+    public DalamudLogger(string name, IPluginLog pluginLog)
+    {
+        _name = name;
+        _pluginLog = pluginLog;
+    }
+
+    IDisposable? ILogger.BeginScope<TState>(TState state) => default!;
+
+    // Filtering happens in Dalamud's /xllog. Letting every level through keeps
+    // the HellionChat side stateless; if we ever want a per-plugin floor we add
+    // a Config.LogLevel and tighten this method.
+    public bool IsEnabled(LogLevel logLevel) => true;
+
+    public void Log<TState>(
+        LogLevel logLevel,
+        EventId eventId,
+        TState state,
+        Exception? exception,
+        Func<TState, Exception?, string> formatter
+    )
+    {
+        if (!IsEnabled(logLevel))
+            return;
+
+        // U+200B between the bracket and the level is a quiet provenance
+        // marker; byte-distinguishable from any 1:1 port of this format.
+        if ((int)logLevel <= (int)LogLevel.Information)
+        {
+            _pluginLog.Information($"[{_name}]​{{{(int)logLevel}}} {state}");
+            return;
+        }
+
+        var sb = new StringBuilder();
+        sb.Append($"[{_name}]​{{{(int)logLevel}}} {state} {exception?.Message}");
+        if (!string.IsNullOrWhiteSpace(exception?.StackTrace))
+            sb.AppendLine(exception.StackTrace);
+
+        var inner = exception?.InnerException;
+        while (inner != null)
+        {
+            sb.AppendLine($"InnerException {inner}: {inner.Message}");
+            sb.AppendLine(inner.StackTrace);
+            inner = inner.InnerException;
+        }
+
+        if (logLevel == LogLevel.Warning)
+            _pluginLog.Warning(sb.ToString());
+        else if (logLevel == LogLevel.Error)
+            _pluginLog.Error(sb.ToString());
+        else
+            _pluginLog.Fatal(sb.ToString());
+    }
+}

HellionChat/Infrastructure/Logging/DalamudLoggingProvider.cs

@@ -0,0 +1,84 @@
+using System.Collections.Concurrent;
+using System.Reflection;
+using System.Security.Cryptography;
+using System.Text;
+using Dalamud.Plugin.Services;
+using HellionChat.Branding;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat.Infrastructure.Logging;
+
+[ProviderAlias("Dalamud")]
+public sealed class DalamudLoggingProvider : ILoggerProvider
+{
+    // Hellion Forge Bronze (#C2410C). Mixed into the bootstrap fingerprint.
+    private const string HellionMarker = "HellionForgeBronzeC2410C";
+
+    private readonly ConcurrentDictionary<string, DalamudLogger> _loggers = new(
+        StringComparer.OrdinalIgnoreCase
+    );
+
+    private readonly IPluginLog _pluginLog;
+
+    public DalamudLoggingProvider(IPluginLog pluginLog)
+    {
+        _pluginLog = pluginLog;
+        EmitBootstrapBanner();
+    }
+
+    // One-shot per plugin load. Intentionally visible in xllog so uncredited
+    // ports of the DalamudLogger trio keep announcing their origin — the
+    // mini fox silhouette goes first, then the textual provenance line.
+    private void EmitBootstrapBanner()
+    {
+        var version =
+            typeof(DalamudLoggingProvider).Assembly.GetName().Version?.ToString() ?? "0.0.0";
+        var fingerprint = ComputeFingerprint(version);
+
+        foreach (var line in HellionForgeAscii.FoxMini.Split('\n'))
+        {
+            var trimmed = line.TrimEnd('\r');
+            if (trimmed.Length > 0)
+                _pluginLog.Information(trimmed);
+        }
+
+        _pluginLog.Information("by Julia Moon - Hellion Forge");
+        _pluginLog.Information(
+            $"HellionChat DI-Logger bootstrap v{version} fingerprint={fingerprint}"
+        );
+    }
+
+    private static string ComputeFingerprint(string version)
+    {
+        var seed = Encoding.UTF8.GetBytes($"{HellionMarker}-{version}");
+        var hash = SHA256.HashData(seed);
+        var sb = new StringBuilder(8);
+        for (var i = 0; i < 4; i++)
+            sb.Append(hash[i].ToString("x2"));
+        return sb.ToString();
+    }
+
+    public ILogger CreateLogger(string categoryName)
+    {
+        // Category-name normalisation mirrors Lightless: take the leaf type
+        // name, then either ellipsis-trim long ones or left-pad short ones to
+        // 15 chars so the xllog column stays aligned across services.
+        var catName = categoryName.Split(".", StringSplitOptions.RemoveEmptyEntries).Last();
+        if (catName.Length > 15)
+            catName = string.Concat(
+                catName.AsSpan(0, 6),
+                "...",
+                catName.AsSpan(catName.Length - 6, 6)
+            );
+        else
+            catName = catName.PadLeft(15);
+
+        return _loggers.GetOrAdd(catName, name => new DalamudLogger(name, _pluginLog));
+    }
+
+    public void Dispose()
+    {
+        _loggers.Clear();
+        GC.SuppressFinalize(this);
+    }
+}

HellionChat/Infrastructure/Logging/DalamudLoggingProviderExtensions.cs

@@ -0,0 +1,23 @@
+using Dalamud.Plugin.Services;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat.Infrastructure.Logging;
+
+public static class DalamudLoggingProviderExtensions
+{
+    public static ILoggingBuilder AddDalamudLogging(
+        this ILoggingBuilder builder,
+        IPluginLog pluginLog
+    )
+    {
+        builder.ClearProviders();
+        builder.Services.TryAddEnumerable(
+            ServiceDescriptor.Singleton<ILoggerProvider, DalamudLoggingProvider>(
+                _ => new DalamudLoggingProvider(pluginLog)
+            )
+        );
+        return builder;
+    }
+}

HellionChat/InputHistoryService.cs

@@ -2,14 +2,9 @@ using System.Collections.Generic;
 
 namespace HellionChat;
 
-// Hellion Chat — v0.6.0 shared input history. Replaces the embedded
+// Shared input history for all ChatInputBars (main and pop-out windows).
-// ChatLogWindow.InputBacklog so that pop-out windows with their own
+// Push deduplicates: existing entries are moved to the end when re-added.
-// ChatInputBar can navigate the same Up/Down history as the main window.
+// TEST-MIRROR: ../../Hellion Build test/Util/InputHistoryServiceTests.cs
-// Index semantics are kept identical to the v0.5.x InputBacklog:
-//   index 0          = oldest entry
-//   index Count - 1  = newest entry
-// Push performs move-to-newest deduplication: existing entries are
-// removed before the new one is appended at the end.
 public static class InputHistoryService
 {
     private const int MaxSize = 30;
@@ -26,8 +21,7 @@ public static class InputHistoryService
 
         var trimmed = entry.Trim();
 
-        // Move-to-newest: existing entries are removed before the append
+        // Move-to-newest: remove existing entry before adding at the end
-        // so the same line typed twice does not occupy two history slots.
         for (var i = 0; i < _entries.Count; i++)
         {
             if (_entries[i] == trimmed)
@@ -48,4 +42,12 @@ public static class InputHistoryService
             return null;
         return _entries[cursor];
     }
+
+    // Plugin reload doesn't reset static state automatically. Plugin.DisposeAsync
+    // calls this so the next load starts with an empty history instead of
+    // inheriting the previous session's entries.
+    public static void Reset()
+    {
+        _entries.Clear();
+    }
 }

HellionChat/Integrations/CustomAudioPlayer.cs

@@ -0,0 +1,150 @@
+using System;
+using System.IO;
+using Microsoft.Extensions.Logging;
+using NAudio.Wave;
+
+namespace HellionChat.Integrations;
+
+// Plays the three bundled WAV notification sounds via NAudio WaveOutEvent.
+// WaveOutEvent/WinMM is the correct backend for FFXIV on Wine: it works
+// without Media Foundation (which Wine does not support for MP3/AAC).
+//
+// Playback volume comes from Configuration.CustomSoundVolume via the Play
+// parameter, clamped to [0,1]. The 16 game sounds are unaffected — they go
+// through UIGlobals.PlaySoundEffect, which the plugin cannot scale.
+internal sealed class CustomAudioPlayer : IDisposable
+{
+    // Sound bytes are read once at construction so each Play() wraps a fresh
+    // MemoryStream rather than re-reading the manifest stream (which becomes
+    // unreadable after the first read and would require Seek support).
+    private readonly byte[][] _soundData;
+    private readonly ILogger<CustomAudioPlayer> _logger;
+
+    private WaveOutEvent? _outputDevice;
+    private WaveFileReader? _reader;
+    private readonly object _lock = new();
+
+    public CustomAudioPlayer(ILogger<CustomAudioPlayer> logger)
+    {
+        _logger = logger;
+        _soundData = new byte[3][];
+
+        for (var i = 0; i < 3; i++)
+        {
+            var resourceName = $"HellionChat.Sounds.notification-{i + 1}.wav";
+            using var stream = typeof(CustomAudioPlayer).Assembly.GetManifestResourceStream(
+                resourceName
+            );
+            if (stream is null)
+            {
+                _logger.LogWarning(
+                    "Embedded sound resource not found: {Resource}. "
+                        + "Custom sound {Index} will be silent.",
+                    resourceName,
+                    i + 1
+                );
+                _soundData[i] = Array.Empty<byte>();
+                continue;
+            }
+
+            using var ms = new MemoryStream();
+            stream.CopyTo(ms);
+            _soundData[i] = ms.ToArray();
+        }
+    }
+
+    // customIndex is 1, 2, or 3, matching the sound file suffix.
+    // Stops any currently playing sound before starting the new one.
+    // NAudio playback runs on its own thread; this method returns immediately.
+    public void Play(int customIndex, float volume)
+    {
+        if (customIndex < 1 || customIndex > 3)
+        {
+            _logger.LogWarning(
+                "CustomAudioPlayer.Play called with out-of-range index {Index}",
+                customIndex
+            );
+            return;
+        }
+
+        var data = _soundData[customIndex - 1];
+        if (data.Length == 0)
+        {
+            _logger.LogWarning(
+                "Sound data for index {Index} is empty; skipping playback",
+                customIndex
+            );
+            return;
+        }
+
+        lock (_lock)
+        {
+            try
+            {
+                StopCurrent();
+
+                var ms = new MemoryStream(data, writable: false);
+                _reader = new WaveFileReader(ms);
+
+                _outputDevice = new WaveOutEvent();
+                // Init opens the device and creates the WinMM handle. Volume
+                // must be set after Init, otherwise waveOutSetVolume fails with
+                // InvalidHandle.
+                _outputDevice.Init(_reader);
+                // AUDIO-1: volume comes from Configuration.CustomSoundVolume.
+                // Clamp here too — a hand-edited config could carry an
+                // out-of-range value, and WaveOutEvent.Volume rejects those.
+                _outputDevice.Volume = Math.Clamp(volume, 0f, 1f);
+                _outputDevice.Play();
+            }
+            catch (Exception ex)
+            {
+                _logger.LogWarning(
+                    ex,
+                    "Failed to play custom notification sound {Index}",
+                    customIndex
+                );
+                StopCurrent();
+            }
+        }
+    }
+
+    // Stops and tears down the active WaveOutEvent + WaveFileReader without
+    // throwing. Called on Play (to interrupt previous sound) and from Dispose.
+    // Guards Stop() with a PlaybackState check because waveOutReset blocks even
+    // when playback already finished; under Wine this can stall the WinMM
+    // callback thread if many sounds arrive in quick succession.
+    private void StopCurrent()
+    {
+        try
+        {
+            if (_outputDevice?.PlaybackState == PlaybackState.Playing)
+                _outputDevice.Stop();
+            _outputDevice?.Dispose();
+            _outputDevice = null;
+        }
+        catch (Exception ex)
+        {
+            _logger.LogWarning(ex, "Exception while stopping current WaveOutEvent");
+        }
+
+        try
+        {
+            _reader?.Dispose();
+            _reader = null;
+        }
+        catch (Exception ex)
+        {
+            _logger.LogWarning(ex, "Exception while disposing WaveFileReader");
+        }
+    }
+
+    // At plugin unload the PendingMessageThread is already cancelled and the
+    // draw loop is gone, so _lock is uncontended here. Calling StopCurrent
+    // outside the lock avoids holding it across the blocking waveOutReset /
+    // WaveOutEvent.Dispose, which can freeze on Wine during unload.
+    public void Dispose()
+    {
+        StopCurrent();
+    }
+}

HellionChat/Integrations/FailedTellNotifier.cs

@@ -0,0 +1,74 @@
+using System;
+using Dalamud.Hooking;
+using Dalamud.Interface.ImGuiNotification;
+using FFXIVClientStructs.FFXIV.Client.System.String;
+using FFXIVClientStructs.FFXIV.Client.UI.Misc;
+using HellionChat._Helpers;
+using HellionChat.Resources;
+using HellionChat.Util;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat.Integrations;
+
+// A minimal, failed-tell-specific game hook. A locale-robust "tell failed"
+// signal is not reachable over the processed message stream (Message carries
+// no LogMessage row id, ChatCode 60 is too broad). This hooks the one
+// ShowLogMessageString overload and toasts on a pinned id set. It is NOT the
+// broad ad-block hook layer.
+internal sealed class FailedTellNotifier : IDisposable
+{
+    private readonly ILogger<FailedTellNotifier> _logger;
+    private readonly Hook<RaptureLogModule.Delegates.ShowLogMessageString>? _hook;
+
+    public unsafe FailedTellNotifier(ILogger<FailedTellNotifier> logger)
+    {
+        _logger = logger;
+
+        // Creating/enabling a hook is safe off the framework thread (the
+        // ctor runs during host startup on the framework thread,
+        // eager-resolved via FailedTellNotifierInitHostedService).
+        _hook =
+            Plugin.GameInteropProvider.HookFromAddress<RaptureLogModule.Delegates.ShowLogMessageString>(
+                RaptureLogModule.MemberFunctionPointers.ShowLogMessageString,
+                ShowLogMessageStringDetour
+            );
+        _hook.Enable();
+    }
+
+    private unsafe void ShowLogMessageStringDetour(
+        RaptureLogModule* module,
+        uint logMessageId,
+        Utf8String* value
+    )
+    {
+        try
+        {
+            if (
+                FailedTellMatcher.ShouldNotify(
+                    logMessageId,
+                    Plugin.Config.NotifyFailedTell,
+                    FailedTellMatcher.FailedTellLogMessageIds
+                )
+            )
+            {
+                var recipient = value is null ? string.Empty : value->ToString();
+                var content = string.IsNullOrEmpty(recipient)
+                    ? HellionStrings.FailedTell_Notification_Generic
+                    : string.Format(HellionStrings.FailedTell_Notification_Named, recipient);
+                WrapperUtil.AddNotification(content, NotificationType.Warning);
+            }
+        }
+        catch (Exception ex)
+        {
+            _logger.LogError(ex, "FailedTellNotifier detour threw");
+        }
+
+        _hook!.Original(module, logMessageId, value);
+    }
+
+    public void Dispose()
+    {
+        _hook?.Disable();
+        _hook?.Dispose();
+    }
+}

HellionChat/Integrations/HonorificService.cs

@@ -2,69 +2,51 @@ using System;
 using Dalamud.Plugin;
 using Dalamud.Plugin.Ipc;
 using Dalamud.Plugin.Services;
+using Microsoft.Extensions.Logging;
 using Newtonsoft.Json;
 
 namespace HellionChat.Integrations;
 
-// We pull Newtonsoft.Json into this single file for IPC compatibility:
+// Newtonsoft.Json is used here for IPC compatibility with Honorific, which
-// Honorific serialises its TitleData with Newtonsoft (see
+// serialises TitleData with it. It's a transitive Dalamud dependency — no
-// Honorific-master/IpcProvider.cs:9 and CustomTitle.cs:12). Using the
+// new NuGet entry needed. The rest of HellionChat uses System.Text.Json.
-// same library guarantees identical handling of System.Numerics.Vector3?
-// and the enum fields we ignore. Newtonsoft is a transitive dependency
-// via Dalamud, so no new NuGet entry is needed. The rest of HellionChat
-// keeps using System.Text.Json.
 internal sealed class HonorificService : IDisposable
 {
     private const string IpcNamespace = "Honorific";
 
-    // Major version of the Honorific IPC contract HellionChat is built against.
+    // Major version of the Honorific IPC contract we're built against.
-    // Used both by the runtime compatibility check and by the settings tab when
-    // it tells the user which major version we expected, so the literal lives
-    // in exactly one place.
     internal const uint ExpectedApiMajor = 3;
 
-    // IPC gates we subscribe to. Keep them as fields so Dispose can
+    // IPC gates — kept as fields so Dispose can unsubscribe the same instances.
-    // unsubscribe the same instances we subscribed in the constructor.
     private readonly ICallGateSubscriber<(uint, uint)> _apiVersion;
     private readonly ICallGateSubscriber<string> _getLocalCharacterTitle;
     private readonly ICallGateSubscriber<string, object> _localCharacterTitleChanged;
     private readonly ICallGateSubscriber<object> _ready;
     private readonly ICallGateSubscriber<object> _disposing;
 
-    private readonly IPluginLog _log;
+    private readonly ILogger<HonorificService> _logger;
     private readonly IFramework _framework;
     private bool _versionWarningLogged;
 
+    // Thread: framework only — IPC delivery + ImGui render both run there.
     public HonorificTitleData? CurrentTitle { get; private set; }
     public bool IsAvailable { get; private set; }
     public (uint Major, uint Minor)? DetectedApiVersion { get; private set; }
 
     public HonorificService(
         IDalamudPluginInterface pluginInterface,
-        IPluginLog log,
+        ILogger<HonorificService> logger,
         IFramework framework
     )
     {
         _framework = framework;
-        _log = log;
+        _logger = logger;
 
-        // Dalamud caches gate objects per-name for the lifetime of the
+        // Gate objects are cached per-name by Dalamud and safe to register
-        // plugin interface, so we can register subscribers even when
+        // before Honorific loads — they just won't fire until it does.
-        // Honorific isn't loaded yet — the gate just won't fire. Calling
+        // Initial pull is scheduled on the framework thread because plugin
-        // InvokeFunc before Honorific is up will throw, which is why the
+        // constructors run on the loader thread, and Honorific's IPC handlers
-        // initial pull below is wrapped in try-catch.
+        // read ObjectTable.LocalPlayer which throws off the framework thread.
-        //
-        // Thread-context: plugin constructors run on Dalamud's plugin-loader
-        // thread, NOT the framework thread. Honorific's IPC handlers read
-        // ObjectTable.LocalPlayer (Honorific IpcProvider.cs:61), which throws
-        // "Not on main thread!" outside the framework thread. If Honorific is
-        // already loaded when HellionChat starts, a synchronous InvokeFunc
-        // here would surface that exception, the broad catch below would
-        // mark IsAvailable=false, and OnTitleChanged's `if (!IsAvailable)`
-        // gate would block every subsequent title update. We therefore
-        // schedule the initial pull onto the framework thread via
-        // IFramework.RunOnFrameworkThread so the IPC call sees the right
-        // thread context.
         _apiVersion = pluginInterface.GetIpcSubscriber<(uint, uint)>($"{IpcNamespace}.ApiVersion");
         _getLocalCharacterTitle = pluginInterface.GetIpcSubscriber<string>(
             $"{IpcNamespace}.GetLocalCharacterTitle"
@@ -84,16 +66,14 @@ internal sealed class HonorificService : IDisposable
 
     public void Dispose()
     {
-        // Honorific may already be gone by the time we dispose. Wrap each
+        // Wrap each unsubscribe — a missing gate must not block the others.
-        // unsubscribe so a missing gate doesn't prevent the others from
+        // Leaking a subscription keeps this service alive across plugin reloads.
-        // unsubscribing — leaking even one subscription leaves a callback
-        // alive that captures `this`, which keeps the whole service alive
-        // and breaks plugin reload.
         TryUnsubscribe(() => _localCharacterTitleChanged.Unsubscribe(OnTitleChanged));
         TryUnsubscribe(() => _ready.Unsubscribe(OnReady));
         TryUnsubscribe(() => _disposing.Unsubscribe(OnDisposing));
     }
 
+    // Thread: framework (scheduled from ctor and OnReady).
     private void TryInitialPull()
     {
         try
@@ -105,7 +85,7 @@ internal sealed class HonorificService : IDisposable
             {
                 if (!_versionWarningLogged)
                 {
-                    _log.Warning(
+                    _logger.LogWarning(
                         "Honorific API version mismatch — expected major 3, "
                             + "found {Major}.{Minor}. Disabling Honorific integration.",
                         version.Item1,
@@ -119,68 +99,47 @@ internal sealed class HonorificService : IDisposable
 
             IsAvailable = true;
             _versionWarningLogged = false;
-            // Pull the current title once at startup; from here on we rely
-            // on LocalCharacterTitleChanged events.
             var json = _getLocalCharacterTitle.InvokeFunc();
             CurrentTitle = ParseTitleJson(json);
         }
         catch (Exception ex)
         {
-            // Honorific isn't installed or hasn't initialised yet. The Ready
+            // Honorific not installed or not yet initialised — Ready will retry.
-            // event will give us a second chance later. Log at Debug so
+            _logger.LogDebug(ex, "Honorific not available at HellionChat startup; awaiting Ready.");
-            // users without Honorific don't see noise on every reload.
-            _log.Debug(ex, "Honorific not available at HellionChat startup; awaiting Ready.");
             IsAvailable = false;
             CurrentTitle = null;
         }
     }
 
-    // Honorific fires LocalCharacterTitleChanged through its nameplate hook
+    // Thread: framework (Dalamud IPC delivery contract).
-    // (Honorific-master/Plugin.cs:665), which means we get title updates on
-    // character switches automatically as soon as the new character is
-    // rendered. While the user is in the character-select menu, HellionChat's
-    // window is hidden by default via HideWhenNotLoggedIn (Configuration.cs:152),
-    // so the stale-title window between logout and login isn't user-visible.
     private void OnTitleChanged(string json)
     {
-        // Don't update cached state when we've already decided we can't trust
+        // Skip updates on version mismatch; subscription stays live for reload.
-        // Honorific (e.g. version mismatch). Subscription stays live in case a
-        // compatible Honorific reloads, in which case Ready triggers TryInitialPull
-        // and sets IsAvailable back to true.
         if (!IsAvailable)
             return;
         CurrentTitle = ParseTitleJson(json);
     }
 
+    // Thread: any (Honorific dispatches NotifyReady from its own thread).
     private void OnReady()
     {
-        // Honorific loaded after HellionChat; redo the version check and
-        // initial pull. Idempotent on purpose — Honorific can fire Ready
-        // more than once across reloads.
-        //
-        // Honorific's NotifyReady may dispatch from any thread, and
-        // TryInitialPull eventually calls IPC handlers that read
-        // ObjectTable.LocalPlayer — same "Not on main thread!" hazard as
-        // the constructor path. Schedule onto the framework thread.
         _framework.RunOnFrameworkThread(TryInitialPull);
     }
 
+    // Thread: framework (IPC delivery contract); idempotent — Disposing fires once.
     private void OnDisposing()
     {
-        // Honorific is unloading. Drop our cached state so the header
+        // Honorific unloading — clear cached state so the header hides next frame.
-        // hides on the next frame; subscriptions stay registered because
+        // Subscriptions stay registered in case Honorific reloads.
-        // the gates may come back later (Honorific reload).
+        // CurrentTitle is already nulled by OnTitleChanged before this fires,
-        //
+        // re-clearing here is belt-and-braces.
-        // Race-note: Honorific's NotifyDisposing calls ChangedLocalCharacterTitle(null)
-        // BEFORE SendMessage on the Disposing gate (IpcProvider.cs:109-111),
-        // so OnTitleChanged is expected to fire first and already null out
-        // CurrentTitle. We re-clear here as belt-and-braces; should the
-        // ordering ever flip, ShouldRenderSlot would still gate on IsAvailable.
         CurrentTitle = null;
         IsAvailable = false;
         DetectedApiVersion = null;
     }
 
+    // Thread: framework (called from Dispose, which runs on the framework
+    // cleanup block in Plugin.DisposeAsync).
     private void TryUnsubscribe(Action unsubscribe)
     {
         try
@@ -189,33 +148,15 @@ internal sealed class HonorificService : IDisposable
         }
         catch (Exception ex)
         {
-            _log.Debug(ex, "Honorific unsubscribe failed (likely already gone).");
+            // Warning not Debug — a silent unsubscribe failure leaks a live
+            // subscription across plugin reloads.
+            _logger.LogWarning(
+                ex,
+                "Honorific unsubscribe failed (likely API break or gate already gone)."
+            );
         }
     }
 
-    // Threading note: Dalamud fires IPC events on the framework thread and
-    // ImGui renders on the framework thread, so OnTitleChanged and the
-    // render path that reads CurrentTitle never race — OnTitleChanged is
-    // safe to keep direct (no RunOnFrameworkThread wrap needed) because
-    // LocalCharacterTitleChanged delivery is framework-thread by Dalamud
-    // contract. If a future change moves either side onto a worker thread,
-    // switch to volatile/Interlocked for the CurrentTitle field.
-    //
-    // The constructor's initial pull and OnReady, on the other hand, are
-    // explicitly scheduled via IFramework.RunOnFrameworkThread because
-    // they run outside that contract: the constructor executes on the
-    // plugin-loader thread, and Honorific's NotifyReady can dispatch from
-    // any thread. Both call paths eventually invoke IPC handlers that read
-    // ObjectTable.LocalPlayer, which throws "Not on main thread!" off the
-    // framework thread — see the constructor comment block for context.
-    //
-    // Divergence from ChatTwo/Ipc/ExtraChat.cs: that file uses `volatile`
-    // on its state fields out of caution. We don't, because the framework-
-    // thread delivery is the documented Dalamud contract. If the two files
-    // ever need to share a threading audit, this is the place to revisit.
-
-    // --- Pure-logic helpers below; tested via HellionChat.Tests/Integrations. ---
-
     internal static HonorificTitleData? ParseTitleJson(string json)
     {
         if (string.IsNullOrEmpty(json))
@@ -254,4 +195,23 @@ internal sealed class HonorificService : IDisposable
             return false;
         return true;
     }
+
+    // Test seam: the three status fields are private-set and IPC-driven, which a
+    // headless /xlperf run can't reach (Honorific is usually absent in tests).
+    // Callers MUST snapshot the prior values and restore them in CleanUp, and
+    // MUST drive Set -> Draw -> Assert within ONE synchronous RunStep (never
+    // Waiting between Set and Assert) — a between-frame OnReady/OnTitleChanged
+    // would otherwise clobber this state and a CleanUp restore can't un-corrupt a
+    // mid-flight assertion. (A FontsReady precondition gate returning Waiting
+    // BEFORE the snapshot/Set is fine — nothing is mutated yet.)
+    internal void TestOnly_SetState(
+        bool isAvailable,
+        (uint Major, uint Minor)? detectedApiVersion,
+        HonorificTitleData? title
+    )
+    {
+        IsAvailable = isAvailable;
+        DetectedApiVersion = detectedApiVersion;
+        CurrentTitle = title;
+    }
 }

HellionChat/Integrations/HonorificStatus.cs

@@ -0,0 +1,29 @@
+namespace HellionChat.Integrations;
+
+internal enum HonorificStatusKind
+{
+    NotInstalled,
+    Incompatible,
+    Detected,
+}
+
+internal static class HonorificStatus
+{
+    // Mirrors the 1.5.6 three-state discriminator (1d3b429:About.cs:171/183/196):
+    // it keys on IsAvailable + the *nullability* of DetectedApiVersion, never a
+    // recomputed major check. IsAvailable already encodes the compatibility
+    // result HonorificService set during the initial pull. Null-safe: an
+    // (isAvailable=true, detectedApiVersion=null) state a test seam can produce
+    // resolves to NotInstalled rather than dereferencing null.
+    internal static HonorificStatusKind Resolve(
+        bool isAvailable,
+        (uint Major, uint Minor)? detectedApiVersion
+    )
+    {
+        if (isAvailable && detectedApiVersion is not null)
+            return HonorificStatusKind.Detected;
+        if (detectedApiVersion is not null)
+            return HonorificStatusKind.Incompatible;
+        return HonorificStatusKind.NotInstalled;
+    }
+}

HellionChat/Integrations/HonorificTitleData.cs

@@ -2,16 +2,20 @@ using System.Numerics;
 
 namespace HellionChat.Integrations;
 
-// Local DTO mirroring Honorific's TitleData shape. We replicate the structure
+// Local DTO mirroring Honorific's TitleData — no hard reference to Honorific.dll
-// instead of referencing Honorific.dll because a hard build-time dependency
+// so HellionChat loads cleanly when Honorific is absent.
-// would couple the two assemblies and break HellionChat at load time when
+//
-// Honorific is missing. Glow, Color3, GradientColourSet and GradientAnimationStyle
+// Color is rendered in the header title slot (HonorificHeader). Glow, Color3,
-// are intentionally omitted — Cycle 1 renders text in the primary Color only;
+// GradientColourSet and GradientAnimationStyle are parsed but not rendered —
-// the "Honorific Full Fidelity" backlog item adds them later as a pure
+// the animated gradient lives inside Honorific and is not exposed over IPC.
-// extension that won't break this DTO's existing consumers.
+// The fields stay in the DTO so the JSON roundtrip remains lossless.
 internal sealed record HonorificTitleData(
     string? Title,
     bool IsPrefix,
     bool IsOriginal,
-    Vector3? Color
+    Vector3? Color,
+    Vector3? Glow,
+    Vector3? Color3,
+    int? GradientColourSet,
+    string? GradientAnimationStyle
 );

HellionChat/Integrations/IntegrationLinks.cs

@@ -1,12 +1,20 @@
+using System.Runtime.CompilerServices;
+using HellionChat.Util;
+
 namespace HellionChat.Integrations;
 
-// External URLs for the third-party plugins HellionChat integrates with.
+// Third-party plugin URLs — separate from BrandingLinks (Hellion-owned URLs).
-// Kept separate from BrandingLinks (which is for Hellion-owned URLs) so
-// future cycles can extend this file with maintainer attribution links
-// for Moodles, NotificationMaster, ExtraChat, etc. without polluting the
-// brand-links class.
 internal static class IntegrationLinks
 {
     public const string HonorificRepo = "https://github.com/Caraxi/Honorific";
     public const string HonorificAuthor = "https://github.com/Caraxi";
+
+    // See BrandingLinks.ValidateUrls for the CA2255 rationale.
+#pragma warning disable CA2255
+    [ModuleInitializer]
+#pragma warning restore CA2255
+    internal static void ValidateUrls()
+    {
+        UrlValidation.ValidateAll(nameof(IntegrationLinks), HonorificRepo, HonorificAuthor);
+    }
 }

HellionChat/Ipc/ExtraChat.cs

@@ -1,9 +1,12 @@
 using Dalamud.Plugin.Ipc;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat.Ipc;
 
 public sealed class ExtraChat : IDisposable
 {
+    private readonly ILogger<ExtraChat> _logger;
+
 #pragma warning disable CS0649 // Assigned through IPC
     [Serializable]
     private struct OverrideInfo
@@ -26,10 +29,9 @@ public sealed class ExtraChat : IDisposable
 
     internal (string, uint)? ChannelOverride { get; set; }
 
-    // Volatile reference: IPC callbacks (OnChannelCommandColours/OnChannelNames) fire on a
+    // volatile: IPC callbacks fire on a Dalamud thread while ImGui reads these.
-    // Dalamud-dispatcher thread while the ImGui thread reads the IReadOnlyDictionary projections.
+    // Reference assignment is atomic on x64, but the barrier ensures visibility
-    // Reference assignment is atomic on x64, but the JIT (especially Mono on Wine/Linux) needs
+    // across threads (especially Mono/Wine). Raised in the 2026-05-05 audit.
-    // the volatile barrier to guarantee visibility across threads. See AUDIT-2026-05-05 [SEC-01].
     private volatile Dictionary<string, uint> ChannelCommandColoursInternal = new();
     internal IReadOnlyDictionary<string, uint> ChannelCommandColours =>
         ChannelCommandColoursInternal;
@@ -37,8 +39,9 @@ public sealed class ExtraChat : IDisposable
     private volatile Dictionary<Guid, string> ChannelNamesInternal = new();
     internal IReadOnlyDictionary<Guid, string> ChannelNames => ChannelNamesInternal;
 
-    internal ExtraChat()
+    internal ExtraChat(ILogger<ExtraChat> logger)
     {
+        _logger = logger;
         OverrideChannelGate = Plugin.Interface.GetIpcSubscriber<OverrideInfo, object>(
             "ExtraChat.OverrideChannelColour"
         );
@@ -54,6 +57,7 @@ public sealed class ExtraChat : IDisposable
         OverrideChannelGate.Subscribe(OnOverrideChannel);
         ChannelCommandColoursGate.Subscribe(OnChannelCommandColours);
         ChannelNamesGate.Subscribe(OnChannelNames);
+
         try
         {
             ChannelCommandColoursInternal = ChannelCommandColoursGate.InvokeFunc(null!);
@@ -61,8 +65,8 @@ public sealed class ExtraChat : IDisposable
         }
         catch (Exception ex)
         {
-            // ExtraChat is optional; missing IPC peer is normal when the plugin isn't loaded.
+            // ExtraChat is optional; IPC failure is normal when the plugin isn't loaded.
-            Plugin.Log.Verbose(ex, "ExtraChat IPC initial state query failed (peer not loaded?)");
+            _logger.LogTrace(ex, "ExtraChat IPC initial state query failed (peer not loaded?)");
         }
     }
 
@@ -75,22 +79,11 @@ public sealed class ExtraChat : IDisposable
 
     private void OnOverrideChannel(OverrideInfo info)
     {
-        if (info.Channel == null)
+        ChannelOverride = info.Channel == null ? null : (info.Channel, info.Rgba);
-        {
-            ChannelOverride = null;
-            return;
     }
 
-        ChannelOverride = (info.Channel, info.Rgba);
+    private void OnChannelCommandColours(Dictionary<string, uint> obj) =>
-    }
-
-    private void OnChannelCommandColours(Dictionary<string, uint> obj)
-    {
         ChannelCommandColoursInternal = obj;
-    }
 
-    private void OnChannelNames(Dictionary<Guid, string> obj)
+    private void OnChannelNames(Dictionary<Guid, string> obj) => ChannelNamesInternal = obj;
-    {
-        ChannelNamesInternal = obj;
-    }
 }

HellionChat/Ipc/TypingIpc.cs

@@ -1,5 +1,6 @@
 using Dalamud.Plugin.Ipc;
 using HellionChat.Code;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat.Ipc;
 
@@ -19,12 +20,28 @@ internal sealed class TypingIpc : IDisposable
     private ICallGateProvider<ChatInputState> StateQueryGate { get; }
     private ICallGateProvider<ChatInputState, object?> StateChangedGate { get; }
 
+    // v1.4.9: ChatTwo IPC compatibility mirror. Some third-party plugins
+    // have a no-fork policy and subscribe only to ChatTwo.*-prefixed IPC
+    // gates. HellionChat replaces ChatTwo (conflict detection prevents
+    // parallel loading), so mirroring the ChatTwo provider slots lets those
+    // plugins keep working without code changes on their side. The tuple
+    // shape is textually identical to ChatTwo's IPC surface (same member
+    // order, same underlying types — ChatType is `ushort` in both repos)
+    // so Dalamud's IPC marshalling matches across plugin boundaries.
+    private ICallGateProvider<ChatInputState> ChatTwoStateQueryGate { get; }
+    private ICallGateProvider<ChatInputState, object?> ChatTwoStateChangedGate { get; }
+
     private ChatInputState LastState;
     private bool HasState;
 
-    internal TypingIpc(Plugin plugin)
+    private readonly Ui.Components.InputBar _inputBar;
+    private readonly ILogger<TypingIpc> _logger;
+
+    internal TypingIpc(Plugin plugin, Ui.Components.InputBar inputBar, ILogger<TypingIpc> logger)
     {
         Plugin = plugin;
+        _inputBar = inputBar;
+        _logger = logger;
 
         StateQueryGate = Plugin.Interface.GetIpcProvider<ChatInputState>(
             "HellionChat.GetChatInputState"
@@ -33,30 +50,48 @@ internal sealed class TypingIpc : IDisposable
             "HellionChat.ChatInputStateChanged"
         );
 
+        // v1.4.9: ChatTwo-prefixed compatibility slots (see class-level comment).
+        ChatTwoStateQueryGate = Plugin.Interface.GetIpcProvider<ChatInputState>(
+            "ChatTwo.GetChatInputState"
+        );
+        ChatTwoStateChangedGate = Plugin.Interface.GetIpcProvider<ChatInputState, object?>(
+            "ChatTwo.ChatInputStateChanged"
+        );
+
         StateQueryGate.RegisterFunc(GetState);
+        ChatTwoStateQueryGate.RegisterFunc(GetState);
     }
 
     private ChatInputState BuildState()
     {
-        var log = Plugin.ChatLogWindow;
-
         var usedChannel = Plugin.CurrentTab.CurrentChannel;
         var inputChannel = usedChannel.UseTempChannel
             ? usedChannel.TempChannel
             : usedChannel.Channel;
         var channelType = inputChannel.ToChatType();
 
+        // MainWindow is Phase-1-resolved and never reassigned;
+        // the `?.` is defense-in-depth for pre-Phase-1 IPC-pulls.
+        var mainWindowOpen = Plugin.MainWindow?.IsOpen ?? false;
+
+        // Stale-state guard: InputBar's focus and pending-buffer fields are
+        // only written by DrawInputField. Closing MainWindow freezes them, so
+        // gate all four state fields on mainWindowOpen.
+        var inputFocused = mainWindowOpen && _inputBar.IsFocused;
+        var hasText = mainWindowOpen && _inputBar.PendingLength > 0;
+        var textLength = mainWindowOpen ? _inputBar.PendingLength : 0;
+
         return (
-            InputVisible: !log.IsHidden,
+            InputVisible: mainWindowOpen,
-            log.InputFocused,
+            InputFocused: inputFocused,
-            HasText: log.Chat.Length > 0,
+            HasText: hasText,
-            IsTyping: log is { InputFocused: true, Chat.Length: > 0 },
+            IsTyping: hasText,
-            TextLength: log.Chat.Length,
+            TextLength: textLength,
             ChannelType: channelType
         );
     }
 
-    private ChatInputState GetState() => BuildState();
+    internal ChatInputState GetState() => BuildState();
 
     internal void Update()
     {
@@ -67,10 +102,13 @@ internal sealed class TypingIpc : IDisposable
         HasState = true;
         LastState = state;
         StateChangedGate.SendMessage(state);
+        // v1.4.9: mirror on ChatTwo-prefixed slot for no-fork-policy plugins.
+        ChatTwoStateChangedGate.SendMessage(state);
     }
 
     public void Dispose()
     {
         StateQueryGate.UnregisterFunc();
+        ChatTwoStateQueryGate.UnregisterFunc();
     }
 }

HellionChat/IpcManager.cs

@@ -1,11 +1,14 @@
 using Dalamud.Game.Text.SeStringHandling;
 using Dalamud.Game.Text.SeStringHandling.Payloads;
 using Dalamud.Plugin.Ipc;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat;
 
 internal sealed class IpcManager : IDisposable
 {
+    private readonly ILogger<IpcManager> _logger;
+
     private ICallGateProvider<string> RegisterGate { get; }
     private ICallGateProvider<string, object?> UnregisterGate { get; }
     private ICallGateProvider<object?> AvailableGate { get; }
@@ -19,10 +22,31 @@ internal sealed class IpcManager : IDisposable
         object?
     > InvokeGate { get; }
 
+    // v1.4.9: ChatTwo IPC compatibility mirror. Third-party plugins with
+    // a no-fork policy (e.g. Artisan, AllaganTools) only subscribe to the
+    // ChatTwo.*-prefixed context-menu integration gates. Mirroring all four
+    // provider slots under the ChatTwo namespace lets those plugins keep
+    // working without code changes on their side. Conflict detection
+    // prevents ChatTwo and HellionChat from loading in parallel, so no slot
+    // collision risk.
+    private ICallGateProvider<string> ChatTwoRegisterGate { get; }
+    private ICallGateProvider<string, object?> ChatTwoUnregisterGate { get; }
+    private ICallGateProvider<object?> ChatTwoAvailableGate { get; }
+    private ICallGateProvider<
+        string,
+        PlayerPayload?,
+        ulong,
+        Payload?,
+        SeString?,
+        SeString?,
+        object?
+    > ChatTwoInvokeGate { get; }
+
     internal List<string> Registered { get; } = [];
 
-    public IpcManager()
+    public IpcManager(ILogger<IpcManager> logger)
     {
+        _logger = logger;
         RegisterGate = Plugin.Interface.GetIpcProvider<string>("HellionChat.Register");
         RegisterGate.RegisterFunc(Register);
 
@@ -41,7 +65,32 @@ internal sealed class IpcManager : IDisposable
             object?
         >("HellionChat.Invoke");
 
+        // v1.4.9: ChatTwo-prefixed mirrors of the four context-menu slots
+        // above. Share the same Register/Unregister backing methods so a
+        // plugin that subscribes via either namespace lands in the same
+        // Registered list. SendMessage on Invoke fans out to both gates.
+        ChatTwoRegisterGate = Plugin.Interface.GetIpcProvider<string>("ChatTwo.Register");
+        ChatTwoRegisterGate.RegisterFunc(Register);
+
+        ChatTwoAvailableGate = Plugin.Interface.GetIpcProvider<object?>("ChatTwo.Available");
+
+        ChatTwoUnregisterGate = Plugin.Interface.GetIpcProvider<string, object?>(
+            "ChatTwo.Unregister"
+        );
+        ChatTwoUnregisterGate.RegisterAction(Unregister);
+
+        ChatTwoInvokeGate = Plugin.Interface.GetIpcProvider<
+            string,
+            PlayerPayload?,
+            ulong,
+            Payload?,
+            SeString?,
+            SeString?,
+            object?
+        >("ChatTwo.Invoke");
+
         AvailableGate.SendMessage();
+        ChatTwoAvailableGate.SendMessage();
     }
 
     internal void Invoke(
@@ -54,6 +103,8 @@ internal sealed class IpcManager : IDisposable
     )
     {
         InvokeGate.SendMessage(id, sender, contentId, payload, senderString, content);
+        // v1.4.9: fan out the same event to plugins listening on ChatTwo.Invoke.
+        ChatTwoInvokeGate.SendMessage(id, sender, contentId, payload, senderString, content);
     }
 
     private string Register()
@@ -72,6 +123,8 @@ internal sealed class IpcManager : IDisposable
     {
         UnregisterGate.UnregisterAction();
         RegisterGate.UnregisterFunc();
+        ChatTwoUnregisterGate.UnregisterAction();
+        ChatTwoRegisterGate.UnregisterFunc();
         Registered.Clear();
     }
 }

HellionChat/Message.cs

@@ -153,8 +153,8 @@ public partial class Message
             }
             catch (ArgumentException ex)
             {
-                Plugin.Log.Error(ex, "Failed to parse extra chat channel GUID");
+                Plugin.LogProxy.Error(ex, "Failed to parse extra chat channel GUID");
-                Plugin.Log.Error($"Byte Array: ${string.Join(", ", data[4..^1])}");
+                Plugin.LogProxy.Error($"Byte Array: ${string.Join(", ", data[4..^1])}");
                 return Guid.Empty;
             }
         }
@@ -251,7 +251,7 @@ public partial class Message
                         AddChunkWithMessage(
                             text.NewWithStyle(chunk.Source, chunk.Link, token.Value)
                         );
-                        Plugin.Log.Debug(
+                        Plugin.LogProxy.Debug(
                             $"Invalid URL accepted by Regex but failed URI parsing: '{token.Value}'"
                         );
                     }
@@ -416,7 +416,7 @@ public partial class Message
                 catch (Exception)
                 {
                     AddChunkWithMessage(text.NewWithStyle(chunk.Source, chunk.Link, split));
-                    Plugin.Log.Debug($"Failed to parse the text param: '{split}'");
+                    Plugin.LogProxy.Debug($"Failed to parse the text param: '{split}'");
                 }
             }
         }

HellionChat/MessageManager.cs

@@ -7,13 +7,16 @@ using Dalamud.Game.Text.SeStringHandling;
 using Dalamud.Hooking;
 using Dalamud.Interface.ImGuiNotification;
 using Dalamud.Plugin.Services;
+using FFXIVClientStructs.FFXIV.Client.UI;
 using FFXIVClientStructs.FFXIV.Client.UI.Misc;
+using HellionChat._Helpers;
 using HellionChat.Code;
 using HellionChat.Resources;
 using HellionChat.Util;
 using Lumina.Text.Expressions;
 using Lumina.Text.Payloads;
 using Lumina.Text.ReadOnly;
+using Microsoft.Extensions.Logging;
 
 namespace HellionChat;
 
@@ -22,21 +25,13 @@ internal class MessageManager : IAsyncDisposable
     internal const int MessageDisplayLimit = 10_000;
 
     private Plugin Plugin { get; }
+    private readonly ILogger<MessageManager> _logger;
     internal MessageStore Store { get; }
 
     private Dictionary<ChatType, NameFormatting> Formats { get; } = [];
     private ulong LastContentId { get; set; }
 
-    // Messages go into the PendingSync queue first, which will be consumed one
+    // PendingSync (main thread) → PendingAsync (worker thread); LinkedList for O(1) Last access
-    // at a time in the main thread. This is to delay the async processing until
-    // after we've received the content ID from the ContentIdResolver hook.
-    //
-    // After that, the message is enqueued in the PendingAsync queue, which will
-    // be consumed in a separate thread and perform more processing (emotes,
-    // URLs) as well as inserting the message into the database.
-    // LinkedList instead of Queue: ContentIdResolver hits PendingSync.Last
-    // every hook call. Queue<T>.Last() is the LINQ extension and walks the
-    // whole queue (O(n)); LinkedList<T>.Last is an O(1) node reference.
     private LinkedList<PendingMessage> PendingSync { get; } = [];
     private ConcurrentQueue<PendingMessage> PendingAsync { get; } = [];
     private readonly Thread PendingMessageThread;
@@ -53,21 +48,26 @@ internal class MessageManager : IAsyncDisposable
         }
     }
 
-    // Hellion Chat — Auto-Tell-Tabs hook. Fires after a fully processed
+    // Auto-Tell-Tabs hook: fires after a message is processed and stored, allowing
-    // message has been routed to all matching persistent tabs and stored
+    // AutoTellTabsService to spawn or refresh temp tabs without coupling.
-    // in the database. The AutoTellTabsService subscribes to spawn or
-    // refresh temp tabs without having to wedge itself into ProcessMessage
-    // directly.
     public event Action<Message>? MessageProcessed;
 
-    internal unsafe MessageManager(Plugin plugin)
+    internal unsafe MessageManager(
+        Plugin plugin,
+        ILogger<MessageManager> logger,
+        ILoggerFactory loggerFactory
+    )
     {
         Plugin = plugin;
+        _logger = logger;
 
-        Store = new MessageStore(DatabasePath());
+        Store = new MessageStore(
+            DatabasePath(),
+            Plugin.PlatformUtil,
+            loggerFactory.CreateLogger<MessageStore>(),
+            loggerFactory
+        );
 
-        // IsBackground so a stuck worker never blocks plugin unload.
-        // Cooperative cancel via PendingThreadCancellationToken first, background flag is the safety net.
         PendingMessageThread = new Thread(() =>
             ProcessPendingMessages(PendingThreadCancellationToken.Token)
         )
@@ -105,14 +105,11 @@ internal class MessageManager : IAsyncDisposable
             await Task.Delay(100);
 
         if (PendingMessageThread.IsAlive)
-            Plugin.Log.Warning(
+            _logger.LogWarning(
                 "PendingMessageThread did not observe cancellation within 10s. "
-                    + "Worker remains on a background thread; next plugin reload releases it. "
+                    + "Worker remains on background thread; next plugin reload releases it."
-                    + "If this recurs, file a bug with /xllog after the previous reload."
             );
 
-        // CTS owns an unmanaged WaitHandle; dispose even if the worker is
-        // alive — it checks IsCancellationRequested via the linked token.
         PendingThreadCancellationToken.Dispose();
 
         Store.Dispose();
@@ -154,7 +151,7 @@ internal class MessageManager : IAsyncDisposable
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Error processing pending message");
+                    _logger.LogError(ex, "Error processing pending message");
                 }
             }
             else
@@ -166,13 +163,15 @@ internal class MessageManager : IAsyncDisposable
 
     internal void ClearAllTabs()
     {
-        // Hellion Chat — TempTabs haben keine DB-Persistenz (session-only,
+        // Snapshot the tab LIST under the shared lock so the worker-thread
-        // direkt vom AutoTellTabsService befüllt). Ein Clear+Refilter würde
+        // add/remove can't tear the enumeration; tab.Clear() then runs lock-free
-        // sie leer hinterlassen weil FilterAllTabs nichts aus der DB
+        // (each tab's Messages has its own SemaphoreSlim — lock order: list outer).
-        // findet — Tells sind oft durch Privacy-Filter blockiert oder
+        List<Tab> tabsSnapshot;
-        // schlicht session-flüchtig. TempTabs vom Clear-Pfad ausschließen
+        lock (Plugin.TabsListLock)
-        // damit Settings-Save den Tell-Verlauf nicht zerstört.
+            tabsSnapshot = Plugin.Config.Tabs.ToList();
-        foreach (var tab in Plugin.Config.Tabs.Where(t => !t.IsTempTab))
+
+        // TempTabs are session-only (not persisted); exclude them to preserve Tell history
+        foreach (var tab in tabsSnapshot.Where(t => !t.IsTempTab))
             tab.Clear();
     }
 
@@ -184,40 +183,57 @@ internal class MessageManager : IAsyncDisposable
 
         using var messages = Store.GetMostRecentMessages(CurrentContentId, since);
 
-        // We store the pending messages to be added to the chat log in a
+        // TempTabs excluded (live state from AutoTellTabsService). Bucket via the
-        // temporary list, and apply them all at once after filtering.
+        // pure MapMessagesToTabs so the assignment stays testable outside Dalamud.
-        // TempTabs werden ausgeschlossen — sie bleiben live-state aus dem
+        // Snapshot under the shared lock (list copy only — short critical
-        // AutoTellTabsService, ein DB-Refilter würde sie nur partial
+        // section). The Store query above and the AddSortPrune writes below stay
-        // wiederherstellen falls Tells in DB liegen, oder leer lassen wenn
+        // OUTSIDE the lock (lock order: list outer, MessageList inner).
-        // Privacy-Filter sie blockiert hat.
+        List<Tab> nonTempTabs;
-        var pendingTabs = Plugin
+        lock (Plugin.TabsListLock)
-            .Config.Tabs.Where(t => !t.IsTempTab)
+            nonTempTabs = Plugin.Config.Tabs.Where(t => !t.IsTempTab).ToList();
-            .Select(tab => (tab, new List<Message>()))
+        var buckets = MapMessagesToTabs(nonTempTabs, messages);
-            .ToList();
-        foreach (var message in messages)
-        foreach (var (_, pendingMessages) in pendingTabs.Where(ptab => ptab.Item1.Matches(message)))
-            pendingMessages.Add(message);
 
-        // Apply the messages to the chat log in one go.
+        // Apply messages to chat log all at once.
-        foreach (var (tab, pendingMessages) in pendingTabs)
+        foreach (var tab in nonTempTabs)
-            tab.Messages.AddSortPrune(pendingMessages, MessageDisplayLimit);
+            tab.Messages.AddSortPrune(buckets[tab], MessageDisplayLimit);
 
         if (!messages.DidError)
             return;
 
         WrapperUtil.AddNotification(Language.LoadMessages_Error, NotificationType.Error);
 
-        // Mark the failed messages as deleted so we don't try to load them
+        // Mark failed messages as deleted to prevent retry attempts
-        // again.
         var failedIds = messages.FailedMessageIds();
-        Plugin.Log.Info($"Marking {failedIds.Count} messages as deleted due to parse failures");
+        _logger.LogInformation(
+            $"Marking {failedIds.Count} messages as deleted due to parse failures"
+        );
         foreach (var msgId in messages.FailedMessageIds())
         {
-            Plugin.Log.Debug($"Marking message '{msgId}' as deleted due to parse failure");
+            _logger.LogDebug($"Marking message '{msgId}' as deleted due to parse failure");
             Store.DeleteMessage(msgId);
         }
     }
 
+    // Pure message->tab bucketing for the refilter. Dalamud-free + static so the
+    // assignment can be unit-pinned in the build suite; the live caller owns the
+    // Store query, the snapshot and the SemaphoreSlim writes.
+    internal static Dictionary<Tab, List<Message>> MapMessagesToTabs(
+        IReadOnlyList<Tab> tabs,
+        IEnumerable<Message> messages
+    )
+    {
+        var buckets = new Dictionary<Tab, List<Message>>(tabs.Count);
+        foreach (var tab in tabs)
+            buckets[tab] = new List<Message>();
+
+        foreach (var message in messages)
+        foreach (var tab in tabs)
+            if (tab.Matches(message))
+                buckets[tab].Add(message);
+
+        return buckets;
+    }
+
     internal void FilterAllTabsAsync()
     {
         Task.Run(() =>
@@ -229,10 +245,12 @@ internal class MessageManager : IAsyncDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in FilterAllTabs");
+                _logger.LogError(ex, "Error in FilterAllTabs");
             }
 
-            Plugin.Log.Debug($"FilterAllTabs took {stopwatch.ElapsedMilliseconds}ms");
+            // Information, not Debug, so the xllog tail surfaces this without a
+            // filter. Kept as a guard against future plugin-load regressions.
+            _logger.LogInformation($"FilterAllTabs took {stopwatch.ElapsedMilliseconds}ms");
         });
     }
 
@@ -256,16 +274,10 @@ internal class MessageManager : IAsyncDisposable
         // Update colour codes.
         GlobalParametersCache.Refresh();
 
-        // We delay messages to be handed off to the async processing thread
+        // Delay to next tick to get content ID from ContentIdResolver hook
-        // in the next tick, otherwise we can't get the content ID from the hook
-        // below.
         PendingSync.AddLast(pendingMessage);
     }
 
-    // This hook is called immediately after receiving a message with the
-    // message's content ID. If multiple messages are received in the same tick,
-    // this will be called for each message immediately after ChatMessage is
-    // called for each message.
     private unsafe void ContentIdResolver(
         RaptureLogModule* agent,
         ulong contentId,
@@ -293,7 +305,7 @@ internal class MessageManager : IAsyncDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in ContentIdResolver");
+            _logger.LogError(ex, "Error in ContentIdResolver");
         }
     }
 
@@ -346,20 +358,135 @@ internal class MessageManager : IAsyncDisposable
         if (Plugin.Config.DatabaseBattleMessages || !message.Code.IsBattle())
             Store.UpsertMessage(message);
 
-        var currentMatches = Plugin.CurrentTab.Matches(message);
+        // Snapshot the list, not just the active tab. This loop runs on the worker
-        foreach (var tab in Plugin.Config.Tabs)
+        // thread while SaveConfig's strip and the auto-tell spawn mutate Config.Tabs
+        // under TabsListLock — enumerating it live throws "collection was modified",
+        // and the catch in ProcessPendingMessages swallows that, silently dropping
+        // the whole message: no tab entry, no sound, no MessageProcessed.
+        List<Tab> tabsSnapshot;
+        lock (Plugin.TabsListLock)
+            tabsSnapshot = Plugin.Config.Tabs.ToList();
+
+        // Snapshot the active tab and whether it shows this message ONCE, so the
+        // whole loop sees a consistent value (the getter is a cross-thread read of
+        // MainWindow.ActiveTab).
+        var currentTab = Plugin.CurrentTab;
+        var currentTabMatches = currentTab.Matches(message);
+        foreach (var tab in tabsSnapshot)
         {
-            var unread = !(
+            if (tab.Matches(message))
-                tab.UnreadMode == UnreadMode.Unseen && Plugin.CurrentTab != tab && currentMatches
+                tab.AddMessage(message, ShouldCountUnread(tab, currentTab, currentTabMatches));
+        }
+
+        // Deliberate O(2n): the sound pick re-walks the tab list so the selection
+        // stays pure and SelfTest-able; AddMessage above and playback below keep
+        // the side effects.
+        var notificationSound = SelectNotificationSound(
+            tabsSnapshot,
+            currentTab,
+            message,
+            Plugin.Config.PlaySounds,
+            out var soundSource
         );
 
-            if (tab.Matches(message))
+        // The snapshot can outlive a tab (eviction, logout). Playing its sound would
-                tab.AddMessage(message, unread);
+        // be an audible artefact for a tab that is already gone, so re-check first.
+        if (notificationSound is not null && soundSource is not null)
+        {
+            bool sourceStillPresent;
+            lock (Plugin.TabsListLock)
+                sourceStillPresent = Plugin.Config.Tabs.Contains(soundSource);
+            if (!sourceStillPresent)
+                notificationSound = null;
+        }
+
+        if (notificationSound is { } soundId)
+        {
+            if (soundId is >= 1 and <= 16)
+            {
+                // ProcessMessage runs on the PendingMessageThread worker; the native
+                // UIGlobals.PlaySoundEffect must be marshalled onto the framework
+                // thread (reference_dalamud_framework_thread).
+                Plugin.Framework.RunOnFrameworkThread(() =>
+                {
+                    unsafe
+                    {
+                        UIGlobals.PlaySoundEffect(soundId);
+                    }
+                });
+            }
+            else if (soundId >= 17)
+            {
+                // Custom bundled sounds (ids 17-19) go through NAudio WaveOutEvent.
+                // NAudio manages its own playback thread, so no framework marshalling needed.
+                Plugin.CustomAudioPlayer.Play((int)soundId - 16, Plugin.Config.CustomSoundVolume);
+            }
+            // soundId == 0 (hand-edited config) falls through: plays nothing.
         }
 
         MessageProcessed?.Invoke(message);
     }
 
+    // Pure: picks the sound id for the first inactive tab that wants one, or null.
+    // No AddMessage, no store write — those stay in the ProcessMessage loop so this
+    // is exercisable from the SelfTest without polluting tab state. The "first
+    // match wins" semantics live here via the running 'picked is null' guard,
+    // keeping a message matching several background tabs from stacking sounds.
+    // TEST-MIRROR: ../_Helpers/TabSoundDecision.cs
+    // Unseen ("count only what you haven't seen") suppresses unread on an inactive
+    // tab when the active tab ALSO shows this message — you already saw it in the
+    // tab you're looking at (1.5.6 / upstream ChatTwo behavior). The "active tab"
+    // used to be pinned to Tabs[0], so this fired against the wrong one until
+    // CurrentTab was recoupled to the real active tab, and currentTabMatches is
+    // now measured against the tab you see. All -> always counts; None ->
+    // counts here and is gated out at the display layer. Pure + SelfTest-able.
+    internal static bool ShouldCountUnread(Tab tab, Tab currentTab, bool currentTabMatches) =>
+        !(
+            tab.UnreadMode == UnreadMode.Unseen
+            && !ReferenceEquals(currentTab, tab)
+            && currentTabMatches
+        );
+
+    // Reports the tab the sound came from, so the caller can drop it if that tab
+    // disappeared between snapshot and playback.
+    internal static uint? SelectNotificationSound(
+        IEnumerable<Tab> tabs,
+        Tab currentTab,
+        Message probe,
+        bool playSounds,
+        out Tab? source
+    )
+    {
+        uint? picked = null;
+        source = null;
+        foreach (var tab in tabs)
+        {
+            if (!tab.Matches(probe))
+                continue;
+            if (
+                picked is null
+                && TabSoundDecision.ShouldPlay(
+                    currentTab == tab,
+                    tab.EnableNotificationSound,
+                    playSounds
+                )
+            )
+            {
+                picked = tab.NotificationSoundId;
+                source = tab;
+            }
+        }
+        return picked;
+    }
+
+    // SelfTest hook — same name discipline as InputBar.TestBuildOutgoingForSelfTest.
+    internal static uint? TestSelectNotificationSoundForSelfTest(
+        IEnumerable<Tab> tabs,
+        Tab currentTab,
+        Message probe,
+        bool playSounds
+    ) => SelectNotificationSound(tabs, currentTab, probe, playSounds, out _);
+
     internal class NameFormatting
     {
         internal string Before { get; private set; } = string.Empty;
@@ -408,7 +535,7 @@ internal class MessageManager : IAsyncDisposable
         var after = formats
             .GetRange(firstStringParam + 1, secondStringParam - firstStringParam)
             .Where(payload => payload.Type == ReadOnlySePayloadType.Text)
-            .Select(text => Encoding.UTF8.GetString(text.Body.Span)); // Can't use `ToString()` as it defaults to macro
+            .Select(text => Encoding.UTF8.GetString(text.Body.Span));
 
         var nameFormatting = NameFormatting.Of(string.Join("", before), string.Join("", after));
         Formats[type] = nameFormatting;

HellionChat/NameDisplayModes.cs

@@ -0,0 +1,42 @@
+using HellionChat.Resources;
+
+namespace HellionChat;
+
+// How a sender's name is rendered in the chat log. Kept in its own file
+// (no Dalamud usings) so the SenderNameFormatter pure-helper test stays
+// AppDomain-isolated (feedback_dalamud_test_isolation).
+
+public enum WorldSuffixMode
+{
+    Never,
+    OtherWorldOnly,
+    Always,
+}
+
+public enum NameFormMode
+{
+    Full,
+    FirstNameOnly,
+    Initials,
+}
+
+public static class NameDisplayModeExt
+{
+    public static string Name(this WorldSuffixMode mode) =>
+        mode switch
+        {
+            WorldSuffixMode.Never => HellionStrings.NameDisplay_WorldSuffix_Never,
+            WorldSuffixMode.OtherWorldOnly => HellionStrings.NameDisplay_WorldSuffix_OtherWorldOnly,
+            WorldSuffixMode.Always => HellionStrings.NameDisplay_WorldSuffix_Always,
+            _ => mode.ToString(),
+        };
+
+    public static string Name(this NameFormMode mode) =>
+        mode switch
+        {
+            NameFormMode.Full => HellionStrings.NameDisplay_NameForm_Full,
+            NameFormMode.FirstNameOnly => HellionStrings.NameDisplay_NameForm_FirstNameOnly,
+            NameFormMode.Initials => HellionStrings.NameDisplay_NameForm_Initials,
+            _ => mode.ToString(),
+        };
+}

HellionChat/PluginHostFactory.cs

@@ -0,0 +1,480 @@
+using Dalamud.Interface.ImGuiFileDialog;
+using Dalamud.Plugin;
+using Dalamud.Plugin.Services;
+using HellionChat.Infrastructure.Hosting;
+using HellionChat.Infrastructure.Logging;
+using HellionChat.Ipc;
+using HellionChat.Themes;
+using HellionChat.Ui;
+using HellionChat.Util;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
+using Microsoft.Extensions.Logging;
+
+namespace HellionChat;
+
+// Builds the generic-host DI container that drives v1.5.0+. The factory is
+// invoked synchronously from Plugin.ctor (after the schema gate clears) so the
+// container exists before PluginLifecycle.LoadAsync runs. For the
+// deliberate divergence from Lightless' deferred Func-delegate pattern.
+internal static class PluginHostFactory
+{
+    public static IHost Build(Plugin plugin, PluginHostDependencies dependencies)
+    {
+        return new HostBuilder()
+            .UseContentRoot(dependencies.PluginInterface.ConfigDirectory.FullName)
+            .ConfigureLogging(logging =>
+            {
+                logging.ClearProviders();
+                logging.AddDalamudLogging(dependencies.PluginLog);
+                logging.SetMinimumLevel(LogLevel.Trace);
+            })
+            // ValidateOnBuild eagerly instantiates every singleton at Build time
+            // so missing registrations / ConstructorCallSite cycles throw on
+            // load instead of producing a silent hang. ValidateScopes is cheap
+            // (we only use singletons) but guards against future Scoped misuse.
+            .UseDefaultServiceProvider(o =>
+            {
+                o.ValidateOnBuild = true;
+                o.ValidateScopes = true;
+            })
+            .ConfigureServices(services => ConfigureServices(services, plugin, dependencies))
+            .Build();
+    }
+
+    private static void ConfigureServices(
+        IServiceCollection services,
+        Plugin plugin,
+        PluginHostDependencies dependencies
+    )
+    {
+        // Dalamud services (21 [PluginService] singletons).
+        services.AddSingleton(dependencies);
+        services.AddSingleton(dependencies.PluginInterface);
+        services.AddSingleton(dependencies.PluginLog);
+        services.AddSingleton(dependencies.ChatGui);
+        services.AddSingleton(dependencies.ClientState);
+        services.AddSingleton(dependencies.CommandManager);
+        services.AddSingleton(dependencies.Condition);
+        services.AddSingleton(dependencies.DataManager);
+        services.AddSingleton(dependencies.Framework);
+        services.AddSingleton(dependencies.GameGui);
+        services.AddSingleton(dependencies.KeyState);
+        services.AddSingleton(dependencies.ObjectTable);
+        services.AddSingleton(dependencies.PartyList);
+        services.AddSingleton(dependencies.TargetManager);
+        services.AddSingleton(dependencies.TextureProvider);
+        services.AddSingleton(dependencies.GameInteropProvider);
+        services.AddSingleton(dependencies.GameConfig);
+        services.AddSingleton(dependencies.Notification);
+        services.AddSingleton(dependencies.AddonLifecycle);
+        services.AddSingleton(dependencies.PlayerState);
+        services.AddSingleton(dependencies.Evaluator);
+        services.AddSingleton(dependencies.SelfTestRegistry);
+
+        // Self-references: Plugin and its WindowSystem already exist.
+        services.AddSingleton(plugin);
+        services.AddSingleton(plugin.WindowSystem);
+        services.AddSingleton<PluginLifecycle>();
+
+        // HellionChat singletons. Factory lambdas because most
+        // classes are internal-sealed and the default activator only sees
+        // public ctors.
+        services.AddSingleton<IPlatformUtil>(_ => new DalamudPlatformUtil());
+        services.AddSingleton<IPluginLogProxy>(sp => new DalamudPluginLogProxy(
+            sp.GetRequiredService<IPluginLog>()
+        ));
+        services.AddSingleton<FileDialogManager>(_ => new FileDialogManager());
+        services.AddSingleton(sp => new Commands(sp.GetRequiredService<ILogger<Commands>>()));
+        services.AddSingleton(sp => new FontManager(
+            sp.GetRequiredService<IDalamudPluginInterface>()
+        ));
+        services.AddSingleton(sp => new IpcManager(sp.GetRequiredService<ILogger<IpcManager>>()));
+        services.AddSingleton(sp => new ExtraChat(sp.GetRequiredService<ILogger<ExtraChat>>()));
+
+        services.AddSingleton(sp => new ThemeRegistry(
+            Path.Combine(
+                sp.GetRequiredService<IDalamudPluginInterface>().ConfigDirectory.FullName,
+                "themes"
+            ),
+            sp.GetRequiredService<ILogger<ThemeRegistry>>()
+        ));
+
+        services.AddSingleton(_ => new Ui.StyleEngine.TokenResolver());
+
+        // Transient: each surface owns its motes, so two backdrops on screen do
+        // not drift in lockstep.
+        services.AddSingleton(sp => new Ui.Components.Settings.SectionRenderer(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+
+        services.AddTransient(sp => new Ui.StyleEngine.SurfaceBackdrop(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+        services.AddSingleton(sp => new Ui.StyleEngine.PushStack(
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+
+        services.AddSingleton(sp => new GameFunctions.GameFunctions(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILogger<GameFunctions.GameFunctions>>(),
+            sp.GetRequiredService<ILoggerFactory>()
+        ));
+        services.AddSingleton(sp => new TypingIpc(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.Components.InputBar>(),
+            sp.GetRequiredService<ILogger<TypingIpc>>()
+        ));
+
+        services.AddSingleton(sp => new Integrations.HonorificService(
+            sp.GetRequiredService<IDalamudPluginInterface>(),
+            sp.GetRequiredService<ILogger<Integrations.HonorificService>>(),
+            sp.GetRequiredService<IFramework>()
+        ));
+        services.AddSingleton(sp => new Services.TellRouterService(
+            sp.GetRequiredService<MessageManager>(),
+            sp.GetRequiredService<ILogger<Services.TellRouterService>>()
+        ));
+
+        services.AddSingleton(sp => new Ui.Components.HonorificHeader(
+            sp.GetRequiredService<Integrations.HonorificService>(),
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Sidebar(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>(),
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<ILogger<Ui.Components.Sidebar>>(),
+            sp.GetRequiredService<Ui.Windows.ChannelPopoutPool>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.MessageList(
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<Ui.Components.ChunkRenderer>()
+        ));
+        services.AddSingleton(_ => new Ui.Components.SymbolPicker());
+        services.AddSingleton(sp => new Ui.Components.ThemeQuickPicker(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Plugin>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.InputBar(
+            sp.GetRequiredService<Ui.Components.SymbolPicker>(),
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>(),
+            sp.GetRequiredService<ILogger<Ui.Components.InputBar>>(),
+            () => sp.GetRequiredService<Plugin>().SettingsWindow.Toggle(),
+            sp.GetRequiredService<Ui.CommandHelpWindow>(),
+            sp.GetRequiredService<Ui.Components.ThemeQuickPicker>(),
+            () => sp.GetRequiredService<Plugin>().MainWindow.UserHide()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.TabSidebar(
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.ContentArea(
+            sp.GetRequiredService<Ui.StyleEngine.SurfaceBackdrop>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.ThemePicker(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.Components.Settings.SectionRenderer>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.ColorPicker(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.Components.Settings.SectionRenderer>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.LivePreviewPanel(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>(),
+            sp.GetRequiredService<FontManager>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.ThemeImportExportRow(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<ILogger<Ui.Components.Settings.ThemeImportExportRow>>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.FontsSection(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<Ui.Components.Settings.SectionRenderer>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.ChatColourPicker(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.Components.Settings.SectionRenderer>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.Tabs.AppearanceTab(
+            sp.GetRequiredService<Ui.Components.Settings.ThemePicker>(),
+            sp.GetRequiredService<Ui.Components.Settings.ColorPicker>(),
+            sp.GetRequiredService<Ui.Components.Settings.LivePreviewPanel>(),
+            sp.GetRequiredService<Ui.Components.Settings.ThemeImportExportRow>(),
+            sp.GetRequiredService<Ui.Components.Settings.FontsSection>(),
+            sp.GetRequiredService<Ui.Components.Settings.ChatColourPicker>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.Tabs.GeneralTab(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.Tabs.ChatTab(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.Tabs.WindowTab(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.Tabs.ChannelsTab(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.Tabs.DataPrivacyTab(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>(),
+            sp.GetRequiredService<ILogger<Ui.Components.Settings.Tabs.DataPrivacyTab>>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.Settings.Tabs.AboutTab(
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Integrations.HonorificService>(),
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<IPlatformUtil>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.StatusBar(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<FontManager>()
+        ));
+        services.AddSingleton(sp => new Ui.Components.TopTabBar(
+            sp.GetRequiredService<Ui.Windows.ChannelPopoutPool>(),
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+        services.AddSingleton(sp => new Ui.Windows.MainWindow(
+            sp.GetRequiredService<Ui.Components.HonorificHeader>(),
+            sp.GetRequiredService<Ui.Components.Sidebar>(),
+            sp.GetRequiredService<Ui.Components.TopTabBar>(),
+            sp.GetRequiredService<Ui.Components.MessageList>(),
+            sp.GetRequiredService<Ui.Components.InputBar>(),
+            sp.GetRequiredService<Ui.Components.StatusBar>(),
+            sp.GetRequiredService<Lender<PayloadHandler>>(),
+            sp.GetRequiredService<Ui.Windows.ChannelPopoutPool>(),
+            sp.GetRequiredService<Ui.StyleEngine.SurfaceBackdrop>()
+        ));
+        services.AddSingleton(sp => new Integrations.FailedTellNotifier(
+            sp.GetRequiredService<ILogger<Integrations.FailedTellNotifier>>()
+        ));
+        services.AddSingleton(sp => new Integrations.CustomAudioPlayer(
+            sp.GetRequiredService<ILogger<Integrations.CustomAudioPlayer>>()
+        ));
+
+        services.AddSingleton(sp => new MessageManager(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILogger<MessageManager>>(),
+            sp.GetRequiredService<ILoggerFactory>()
+        ));
+
+        // MessageStore is allocated inside MessageManager.ctor; a separate
+        // container singleton would double-construct the SQLite handle.
+        services.AddSingleton(sp =>
+        {
+            var pluginRef = sp.GetRequiredService<Plugin>();
+            var manager = sp.GetRequiredService<MessageManager>();
+            return new AutoTellTabsService(
+                pluginRef,
+                manager,
+                manager.Store,
+                sp.GetRequiredService<ILogger<AutoTellTabsService>>()
+            );
+        });
+
+        // Factory-lambdas for ChunkRenderer, PayloadHandler, and Lender<PayloadHandler>
+        // because all three are internal-sealed (ActivatorUtilities can't reflect into
+        // internal ctors) and Lender<T> has an internal ctor by design.
+        // PayloadHandler registered twice: once as singleton for G/H, once via Lender<T> for per-frame isolation (I/J/K).
+        services.AddSingleton(sp => new Ui.Components.ChunkRenderer(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<FontManager>(),
+            sp.GetRequiredService<ILogger<Ui.Components.ChunkRenderer>>(),
+            sp.GetRequiredService<GameFunctions.GameFunctions>()
+        ));
+        services.AddSingleton(sp => MakePayloadHandler(sp));
+        services.AddSingleton(sp => new Lender<PayloadHandler>(() => MakePayloadHandler(sp)));
+
+        // Pop-out windows: each gets its OWN MessageList + InputBar so the
+        // channel pill and message scroll are per-window. The PayloadHandler is
+        // attached post-build (ChannelPopoutInitHostedService), NEVER via ctor
+        // (would close a silent FactoryCallSite cycle).
+        services.AddSingleton<Func<int, Ui.Windows.ChannelPopoutWindow>>(sp =>
+            slot => new Ui.Windows.ChannelPopoutWindow(
+                slot,
+                new Ui.Components.MessageList(
+                    sp.GetRequiredService<FontManager>(),
+                    sp.GetRequiredService<Ui.Components.ChunkRenderer>()
+                ),
+                new Ui.Components.InputBar(
+                    sp.GetRequiredService<Ui.Components.SymbolPicker>(),
+                    sp.GetRequiredService<FontManager>(),
+                    sp.GetRequiredService<ThemeRegistry>(),
+                    sp.GetRequiredService<Ui.StyleEngine.TokenResolver>(),
+                    sp.GetRequiredService<ILogger<Ui.Components.InputBar>>(),
+                    () => sp.GetRequiredService<Plugin>().SettingsWindow.Toggle(),
+                    sp.GetRequiredService<Ui.CommandHelpWindow>()
+                ),
+                sp.GetRequiredService<ILogger<Ui.Windows.ChannelPopoutWindow>>(),
+                sp.GetRequiredService<FontManager>(),
+                sp.GetRequiredService<Ui.StyleEngine.SurfaceBackdrop>(),
+                sp.GetRequiredService<ThemeRegistry>(),
+                sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+            )
+        );
+        services.AddSingleton(sp => new Ui.Windows.ChannelPopoutPool(
+            sp.GetRequiredService<Func<int, Ui.Windows.ChannelPopoutWindow>>(),
+            sp.GetRequiredService<ILogger<Ui.Windows.ChannelPopoutPool>>()
+        ));
+
+        // Windows. WindowSystem.AddWindow is called from
+        // PluginLifecycle.LoadAsync on the framework thread.
+        services.AddSingleton(sp => new Ui.Windows.SettingsWindow(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.Components.Settings.TabSidebar>(),
+            sp.GetRequiredService<Ui.Components.Settings.ContentArea>(),
+            sp.GetRequiredService<Ui.Components.Settings.ThemePicker>(),
+            sp.GetRequiredService<Ui.Components.Settings.ColorPicker>(),
+            sp.GetRequiredService<Ui.Components.Settings.LivePreviewPanel>(),
+            sp.GetRequiredService<Ui.Components.Settings.Tabs.AppearanceTab>(),
+            sp.GetRequiredService<Ui.Components.Settings.Tabs.GeneralTab>(),
+            sp.GetRequiredService<Ui.Components.Settings.Tabs.ChatTab>(),
+            sp.GetRequiredService<Ui.Components.Settings.Tabs.WindowTab>(),
+            sp.GetRequiredService<Ui.Components.Settings.Tabs.ChannelsTab>(),
+            sp.GetRequiredService<Ui.Components.Settings.Tabs.DataPrivacyTab>(),
+            sp.GetRequiredService<Ui.Components.Settings.Tabs.AboutTab>(),
+            sp.GetRequiredService<ILoggerFactory>()
+        ));
+        services.AddSingleton(sp => new DbViewer(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<ILogger<DbViewer>>()
+        ));
+        services.AddSingleton(sp => new InputPreview(
+            sp.GetRequiredService<Ui.Components.ChunkRenderer>(),
+            sp.GetRequiredService<Lender<PayloadHandler>>(),
+            sp.GetRequiredService<Ui.Windows.MainWindow>(),
+            sp.GetRequiredService<Ui.Components.InputBar>(),
+            sp.GetRequiredService<ILogger<InputPreview>>()
+        ));
+        // No MainWindow ctor-param: breaks the InputBar -> CommandHelpWindow ->
+        // MainWindow -> InputBar singleton cycle. MainWindow is wired post-build
+        // via CommandHelpWindowInitHostedService.
+        services.AddSingleton(sp => new CommandHelpWindow(
+            sp.GetRequiredService<Ui.Components.ChunkRenderer>(),
+            sp.GetRequiredService<ILogger<CommandHelpWindow>>()
+        ));
+        services.AddSingleton(sp => new SeStringDebugger(sp.GetRequiredService<Plugin>()));
+#if DEBUG
+        services.AddSingleton(sp => new Ui.Windows.WidgetGalleryWindow(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.StyleEngine.TokenResolver>()
+        ));
+#endif
+        // The style lab: variants side by side, in-game, against the live theme.
+        // Permanent, and deliberately not behind DEBUG: style decisions get
+        // made in the build that actually ships.
+        services.AddSingleton(sp => new Ui.Windows.InputBarLabWindow(
+            sp.GetRequiredService<Plugin>()
+        ));
+        services.AddSingleton(sp => new DebuggerWindow(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<PayloadHandler>()
+        ));
+        services.AddSingleton(sp => new FirstRunWizard(
+            sp.GetRequiredService<Plugin>(),
+            sp.GetRequiredService<Ui.StyleEngine.SurfaceBackdrop>()
+        ));
+
+        // Hosted-service adapters: thin wrappers around the existing init
+        // methods so the service class bodies stay unchanged. FontManager
+        // does not need one — its ctor runs the init inline inside a single
+        // SuppressAutoRebuild block on eager resolve.
+        services.AddHostedService(sp => new ThemeRegistryInitHostedService(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<FontManager>()
+        ));
+        services.AddHostedService(sp => new IpcManagerInitHostedService(
+            sp.GetRequiredService<IpcManager>()
+        ));
+        services.AddHostedService(sp => new TypingIpcInitHostedService(
+            sp.GetRequiredService<TypingIpc>()
+        ));
+        services.AddHostedService(sp => new ExtraChatInitHostedService(
+            sp.GetRequiredService<ExtraChat>()
+        ));
+        services.AddHostedService(sp => new MessageManagerInitHostedService(
+            sp.GetRequiredService<IDalamudPluginInterface>(),
+            sp.GetRequiredService<MessageManager>()
+        ));
+        services.AddHostedService(sp => new AutoTellTabsServiceInitHostedService(
+            sp.GetRequiredService<AutoTellTabsService>()
+        ));
+        // Must come AFTER AutoTell's registration: both subscribe MessageProcessed,
+        // and AutoTell subscribing first lets the router's IsOpen-guard see the
+        // already-opened pop-out (FIFO framework-tick ordering, no double-pop).
+        services.AddHostedService(sp => new TellRouterServiceInitHostedService(
+            sp.GetRequiredService<Services.TellRouterService>()
+        ));
+        services.AddHostedService(
+            sp => new Infrastructure.Hosting.FailedTellNotifierInitHostedService(
+                sp.GetRequiredService<Integrations.FailedTellNotifier>()
+            )
+        );
+        services.AddHostedService(sp => new PayloadHandlerInitHostedService(
+            sp.GetRequiredService<PayloadHandler>(),
+            sp.GetRequiredService<Ui.Components.MessageList>()
+        ));
+        services.AddHostedService(sp => new CommandHelpWindowInitHostedService(
+            sp.GetRequiredService<Ui.CommandHelpWindow>(),
+            sp.GetRequiredService<Ui.Windows.MainWindow>()
+        ));
+        services.AddHostedService(sp => new ChannelPopoutInitHostedService(
+            sp.GetRequiredService<Ui.Windows.ChannelPopoutPool>(),
+            sp.GetRequiredService<PayloadHandler>()
+        ));
+    }
+
+    private static PayloadHandler MakePayloadHandler(IServiceProvider sp) =>
+        new(
+            sp.GetRequiredService<ThemeRegistry>(),
+            sp.GetRequiredService<IpcManager>(),
+            sp.GetRequiredService<GameFunctions.GameFunctions>(),
+            sp.GetRequiredService<Ui.Components.InputBar>(),
+            sp.GetRequiredService<Ui.Windows.MainWindow>(),
+            sp.GetRequiredService<Ui.Components.ChunkRenderer>(),
+            sp.GetRequiredService<ILogger<PayloadHandler>>()
+        );
+}
+
+internal sealed record PluginHostDependencies(
+    IDalamudPluginInterface PluginInterface,
+    IPluginLog PluginLog,
+    IChatGui ChatGui,
+    IClientState ClientState,
+    ICommandManager CommandManager,
+    ICondition Condition,
+    IDataManager DataManager,
+    IFramework Framework,
+    IGameGui GameGui,
+    IKeyState KeyState,
+    IObjectTable ObjectTable,
+    IPartyList PartyList,
+    ITargetManager TargetManager,
+    ITextureProvider TextureProvider,
+    IGameInteropProvider GameInteropProvider,
+    IGameConfig GameConfig,
+    INotificationManager Notification,
+    IAddonLifecycle AddonLifecycle,
+    IPlayerState PlayerState,
+    ISeStringEvaluator Evaluator,
+    ISelfTestRegistry SelfTestRegistry
+);

HellionChat/PluginLifecycle.cs

@@ -0,0 +1,152 @@
+using System.Runtime.ExceptionServices;
+using Dalamud.Plugin.Services;
+using Microsoft.Extensions.Hosting;
+
+namespace HellionChat;
+
+// Orchestrates Host.StartAsync / StopAsync and the framework-thread dispose.
+// Plugin.ctor builds the host and assigns it via the Host property, so
+// PluginLifecycle never constructs the host itself.
+internal sealed class PluginLifecycle : IAsyncDisposable
+{
+    private readonly IFramework _framework;
+    private readonly Plugin _plugin;
+
+    private int _disposeStarted;
+    private bool _hostStartRequested;
+
+    public PluginLifecycle(IFramework framework, Plugin plugin)
+    {
+        _framework = framework;
+        _plugin = plugin;
+    }
+
+    // Plugin.ctor fills this immediately after PluginHostFactory.Build and
+    // before invoking LoadAsync; LoadAsync may NRE-suppress on Host! safely.
+    public IHost? Host { get; set; }
+
+    public async Task LoadAsync(CancellationToken cancellationToken)
+    {
+        cancellationToken.ThrowIfCancellationRequested();
+
+        try
+        {
+            _hostStartRequested = true;
+            await Host!.StartAsync(cancellationToken).ConfigureAwait(false);
+
+            // WindowSystem.AddWindow mutates an internal List<>; v1.4.9 Stage-2
+            // verified the list is non-thread-safe, so we marshal the entire
+            // registration block to the framework thread.
+            await _framework
+                .RunOnFrameworkThread(() => RegisterWindows(_plugin))
+                .ConfigureAwait(false);
+        }
+        catch
+        {
+            try
+            {
+                await DisposeAsync().ConfigureAwait(false);
+            }
+            catch
+            {
+                // Swallow secondary dispose failure so the original load throw wins.
+            }
+
+            throw;
+        }
+    }
+
+    private static void RegisterWindows(Plugin plugin)
+    {
+        plugin.WindowSystem.AddWindow(plugin.MainWindow);
+        plugin.WindowSystem.AddWindow(plugin.SettingsWindow);
+        plugin.WindowSystem.AddWindow(plugin.DbViewer);
+        plugin.WindowSystem.AddWindow(Plugin.InputPreview);
+        plugin.WindowSystem.AddWindow(plugin.CommandHelpWindow);
+        plugin.WindowSystem.AddWindow(plugin.SeStringDebugger);
+#if DEBUG
+        plugin.WindowSystem.AddWindow(plugin.WidgetGallery);
+#endif
+        plugin.WindowSystem.AddWindow(plugin.InputBarLab);
+        plugin.WindowSystem.AddWindow(plugin.DebuggerWindow);
+        plugin.WindowSystem.AddWindow(plugin.FirstRunWizard);
+
+        // Pop-out pool: register all pre-allocated instances ONCE here on the
+        // framework thread. Open/Close at runtime is IsOpen-only, never AddWindow.
+        foreach (var popout in plugin.ChannelPopoutPool.Instances)
+            plugin.WindowSystem.AddWindow(popout);
+    }
+
+    public async ValueTask DisposeAsync()
+    {
+        // Idempotency guard — Dalamud may fire DisposeAsync twice in a reload race.
+        if (Interlocked.Exchange(ref _disposeStarted, 1) != 0)
+            return;
+
+        Exception? failure = null;
+
+        if (_hostStartRequested && Host is not null)
+            failure = await CaptureFailureAsync(failure, () => Host.StopAsync())
+                .ConfigureAwait(false);
+
+        failure = await DisposeHostOnFrameworkThreadAsync(failure).ConfigureAwait(false);
+
+        ThrowIfFailed(failure);
+    }
+
+    private async Task<Exception?> DisposeHostOnFrameworkThreadAsync(Exception? failure)
+    {
+        try
+        {
+            await _framework
+                .RunOnFrameworkThread(() =>
+                {
+                    failure = CaptureFailure(failure, () => Host?.Dispose());
+                })
+                .ConfigureAwait(false);
+        }
+        catch (Exception ex)
+        {
+            failure ??= ex;
+        }
+
+        return failure;
+    }
+
+    private static Exception? CaptureFailure(Exception? failure, Action action)
+    {
+        try
+        {
+            action();
+        }
+        catch (Exception ex)
+        {
+            failure ??= ex;
+        }
+
+        return failure;
+    }
+
+    private static async ValueTask<Exception?> CaptureFailureAsync(
+        Exception? failure,
+        Func<Task> action
+    )
+    {
+        try
+        {
+            await action().ConfigureAwait(false);
+        }
+        catch (Exception ex)
+        {
+            failure ??= ex;
+        }
+
+        return failure;
+    }
+
+    private static void ThrowIfFailed(Exception? failure)
+    {
+        if (failure is not null)
+            ExceptionDispatchInfo.Capture(failure).Throw();
+    }
+}

HellionChat/Privacy/ChannelGroups.cs

@@ -0,0 +1,154 @@
+using HellionChat.Code;
+using HellionChat.Resources;
+
+namespace HellionChat.Privacy;
+
+// The eight buckets the privacy surface sorts channels into. Eighty-nine
+// checkboxes in one flat list is not a choice anybody makes; eight named groups
+// is. Shared by the export form and the persist grid so the two screens
+// describe channels the same way.
+//
+// Headings are functions, not strings, so a language switch at runtime relabels
+// them on the next frame. A captured string would keep the language the window
+// happened to be opened in.
+//
+// Game Master channels follow ChatTypeExt.Parent(), which already pairs each of
+// them with its player counterpart. Filing them all under system traffic reads
+// tidier but puts GmTell -- a private two-person conversation -- outside the
+// direct-messages group, and an access request that quietly drops part of what
+// it promises is the dangerous kind of gap.
+//
+// Every ChatType belongs to exactly one group, and a build-suite test pins that.
+// A channel in no group cannot be picked in any of these screens, which reads as
+// a missing checkbox rather than as an omission.
+internal static class ChannelGroups
+{
+    internal static readonly (Func<string> Heading, ChatType[] Types)[] All =
+    [
+        (
+            () => HellionStrings.Privacy_Group_DirectMessages,
+            [ChatType.TellIncoming, ChatType.TellOutgoing, ChatType.GmTell]
+        ),
+        (
+            () => HellionStrings.Privacy_Group_PartyAlliance,
+            [
+                ChatType.Party,
+                ChatType.CrossParty,
+                ChatType.Alliance,
+                ChatType.PvpTeam,
+                ChatType.PvpTeamAnnouncement,
+                ChatType.PvpTeamLoginLogout,
+                ChatType.GmParty,
+            ]
+        ),
+        (
+            () => HellionStrings.Privacy_Group_FreeCompany,
+            [
+                ChatType.FreeCompany,
+                ChatType.FreeCompanyAnnouncement,
+                ChatType.FreeCompanyLoginLogout,
+                ChatType.GmFreeCompany,
+            ]
+        ),
+        (
+            () => HellionStrings.Privacy_Group_Linkshells,
+            [
+                ChatType.Linkshell1,
+                ChatType.Linkshell2,
+                ChatType.Linkshell3,
+                ChatType.Linkshell4,
+                ChatType.Linkshell5,
+                ChatType.Linkshell6,
+                ChatType.Linkshell7,
+                ChatType.Linkshell8,
+                ChatType.GmLinkshell1,
+                ChatType.GmLinkshell2,
+                ChatType.GmLinkshell3,
+                ChatType.GmLinkshell4,
+                ChatType.GmLinkshell5,
+                ChatType.GmLinkshell6,
+                ChatType.GmLinkshell7,
+                ChatType.GmLinkshell8,
+            ]
+        ),
+        (
+            () => HellionStrings.Privacy_Group_CrossLinkshells,
+            [
+                ChatType.CrossLinkshell1,
+                ChatType.CrossLinkshell2,
+                ChatType.CrossLinkshell3,
+                ChatType.CrossLinkshell4,
+                ChatType.CrossLinkshell5,
+                ChatType.CrossLinkshell6,
+                ChatType.CrossLinkshell7,
+                ChatType.CrossLinkshell8,
+            ]
+        ),
+        (
+            () => HellionStrings.Privacy_Group_ExtraChat,
+            [
+                ChatType.ExtraChatLinkshell1,
+                ChatType.ExtraChatLinkshell2,
+                ChatType.ExtraChatLinkshell3,
+                ChatType.ExtraChatLinkshell4,
+                ChatType.ExtraChatLinkshell5,
+                ChatType.ExtraChatLinkshell6,
+                ChatType.ExtraChatLinkshell7,
+                ChatType.ExtraChatLinkshell8,
+            ]
+        ),
+        (
+            () => HellionStrings.Privacy_Group_PublicChat,
+            [
+                ChatType.Say,
+                ChatType.Shout,
+                ChatType.Yell,
+                ChatType.NoviceNetwork,
+                ChatType.NoviceNetworkSystem,
+                ChatType.CustomEmote,
+                ChatType.StandardEmote,
+                ChatType.GmSay,
+                ChatType.GmShout,
+                ChatType.GmYell,
+                ChatType.GmNoviceNetwork,
+            ]
+        ),
+        (
+            () => HellionStrings.Privacy_Group_SystemLogs,
+            [
+                ChatType.System,
+                ChatType.Notice,
+                ChatType.Urgent,
+                ChatType.Echo,
+                ChatType.NpcDialogue,
+                ChatType.NpcAnnouncement,
+                ChatType.LootNotice,
+                ChatType.LootRoll,
+                ChatType.RetainerSale,
+                ChatType.Crafting,
+                ChatType.Gathering,
+                ChatType.Sign,
+                ChatType.RandomNumber,
+                ChatType.MessageBook,
+                ChatType.Alarm,
+                ChatType.Orchestrion,
+                ChatType.GlamourNotifications,
+                ChatType.PeriodicRecruitmentNotification,
+                ChatType.GatheringSystem,
+                ChatType.Progress,
+                ChatType.Debug,
+                ChatType.Error,
+                ChatType.Item,
+                ChatType.Action,
+                ChatType.BattleSystem,
+                ChatType.Damage,
+                ChatType.Healing,
+                ChatType.Miss,
+                ChatType.GainBuff,
+                ChatType.GainDebuff,
+                ChatType.LoseBuff,
+                ChatType.LoseDebuff,
+            ]
+        ),
+    ];
+}

HellionChat/Privacy/PrivacyDefaults.cs

@@ -4,10 +4,15 @@ namespace HellionChat.Privacy;
 
 internal static class PrivacyDefaults
 {
-    // Privacy-First default whitelist (DSGVO Art. 25 - Privacy by Default).
+    // Failsafe for ChatTypes added by future FFXIV patches. New installs
-    // Only the player's own conversations are persisted out-of-the-box.
+    // persist unknown channels so a major patch's added ChatType isn't silently
-    // Public chat (Say/Shout/Yell), Novice Network, NPC dialogue, system
+    // dropped before the user can opt in or out. Existing configs keep their
-    // logs and battle messages are NOT persisted unless the user opts in.
+    // explicit choice — see Configuration.cs PrivacyPersistUnknownChannels.
+    internal const bool DefaultPersistUnknownChannels = true;
+
+    // DSGVO Art. 25 (Privacy by Default): only the player's own conversations
+    // are persisted out-of-the-box. Public chat, NPC dialogue, system logs and
+    // battle messages require explicit opt-in.
     internal static readonly IReadOnlySet<ChatType> PrivacyFirstWhitelist = new HashSet<ChatType>
     {
         ChatType.TellIncoming,
@@ -42,10 +47,8 @@ internal static class PrivacyDefaults
         ChatType.ExtraChatLinkshell8,
     };
 
-    // Default retention windows per channel (in days). Channels not listed
+    // Per-channel retention in days. Unlisted channels fall back to
-    // here fall back to Configuration.RetentionDefaultDays. Reflects the
+    // Configuration.RetentionDefaultDays. Tells: 365, everything else: 90.
-    // design spec: Tells 365, own-conversation channels 90, everything else
-    // shorter via the global default.
     internal static readonly IReadOnlyDictionary<ChatType, int> DefaultRetentionDays =
         new Dictionary<ChatType, int>
         {
@@ -86,10 +89,9 @@ internal static class PrivacyDefaults
             [ChatType.ExtraChatLinkshell8] = 90,
         };
 
-    // Casual profile = Privacy-First plus public chat (Say/Shout/Yell, both
+    // Casual: Privacy-First + public chat (Say/Shout/Yell, emotes, Novice
-    // emote types, Novice Network), kept for a short 24-hour window so the
+    // Network) with a 1-day window so recent RP/trade is searchable but
-    // last RP scene or shout trade is still searchable but third-party data
+    // third-party data doesn't accumulate.
-    // doesn't accumulate forever.
     internal static readonly IReadOnlySet<ChatType> CasualWhitelist = new HashSet<ChatType>(
         PrivacyFirstWhitelist
     )
@@ -112,4 +114,29 @@ internal static class PrivacyDefaults
             [ChatType.StandardEmote] = 1,
             [ChatType.NoviceNetwork] = 1,
         };
+
+    // Roleplay: Privacy-First + Say + both emote types. Public-distance
+    // channels (Shout, Yell) stay out — they are public-noise from
+    // strangers, not story content. Novice Network also stays out;
+    // it is not RP-adjacent and would dilute the profile's intent.
+    internal static readonly IReadOnlySet<ChatType> RoleplayWhitelist = new HashSet<ChatType>(
+        PrivacyFirstWhitelist
+    )
+    {
+        ChatType.Say,
+        ChatType.CustomEmote,
+        ChatType.StandardEmote,
+    };
+
+    // RP sessions function as story logs: Say + emotes need a longer
+    // window than Casual's 1-day public-chat window. 30 days for Say
+    // keeps in-character dialogue scrollable across multiple sessions,
+    // 90 days for emotes mirrors the Privacy-First conversation default.
+    internal static readonly IReadOnlyDictionary<ChatType, int> RoleplayRetentionOverrides =
+        new Dictionary<ChatType, int>
+        {
+            [ChatType.Say] = 30,
+            [ChatType.CustomEmote] = 90,
+            [ChatType.StandardEmote] = 90,
+        };
 }

HellionChat/Privacy/StorageRule.cs

@@ -0,0 +1,51 @@
+namespace HellionChat.Privacy;
+
+// The rule that decides whether a message is written to disk, as plain logic.
+//
+// It lives apart from Configuration because Configuration implements a Dalamud
+// interface, and the build suite cannot load Dalamud.dll -- the runtime resolves
+// the declaring type before it ever reaches the method body, so even a static
+// call on it fails. This is the single most consequential branch in the plugin,
+// and it belongs where it can be pinned.
+internal static class StorageRule
+{
+    // v1.12.0 corrected the last term. A known channel the user had unticked
+    // used to fall through to the unknown-type failsafe, so the channel grid did
+    // nothing at all whenever that failsafe was on. It is on by default, so the
+    // filter stored everything while its own description promised "only messages
+    // from allowed channels are written to the database".
+    internal static bool Allows(bool listed, bool knownType, bool persistUnknownTypes) =>
+        listed || (!knownType && persistUnknownTypes);
+
+    // Carry-over for configs written before that correction. Where the failsafe
+    // made the list irrelevant and no channel was ever picked, the old rule
+    // stored everything; the corrected rule would store nothing. Switching the
+    // filter off keeps the behaviour and states it where the user can see it.
+    //
+    // A config that does have picks keeps them and starts honouring them, which
+    // is the point of the change.
+    internal static bool ShouldDisableFilterOnV24(
+        bool filterEnabled,
+        bool persistUnknownTypes,
+        int listedCount
+    ) => filterEnabled && persistUnknownTypes && listedCount == 0;
+
+    // Why a retroactive cleanup cannot be offered, or that it can.
+    internal enum CleanupAvailability
+    {
+        Available,
+
+        // Nothing is filtered, so nothing in the database contradicts the rule.
+        FilterDisabled,
+
+        // The rule keeps no channel at all. CleanupRetainOnly refuses an empty
+        // allowlist on purpose -- that request is a full wipe, and a full wipe
+        // has its own button with its own confirmation.
+        NothingListed,
+    }
+
+    internal static CleanupAvailability CleanupState(bool filterEnabled, int listedCount) =>
+        !filterEnabled ? CleanupAvailability.FilterDisabled
+        : listedCount == 0 ? CleanupAvailability.NothingListed
+        : CleanupAvailability.Available;
+}

HellionChat/Resources/Branding/fox-mini.txt

@@ -0,0 +1,4 @@
+|\_/|,,_____,~~`
+(.".)~~     )`~}}
+ \o/\ /---~\\ ~}}
+   _//    _// ~}

HellionChat/Resources/ChatColourPresets.cs

@@ -4,11 +4,8 @@ using HellionChat.Util;
 
 namespace HellionChat.Resources;
 
-// Hellion Chat — v0.6.0 built-in colour presets for the ChatColours
+// Built-in colour presets applied via Settings UI → ChatColours.
-// settings section. Read-only static data; users apply a preset via the
+// Battle-channel types are intentionally excluded to preserve combat-log tuning.
-// settings UI which overwrites Configuration.ChatColours immediately.
-// Battle-channel types are intentionally NOT covered by the stylistic
-// presets so that combat-log tuning the user has done stays intact.
 public sealed record ChatColourPreset(
     string DisplayName,
     string LocalizationKey,
@@ -69,9 +66,7 @@ public static class ChatColourPresets
         };
     }
 
-    // The Default preset spiegelt 1:1 die Werte aus ChatTypeExt.DefaultColor.
+    // Mirrors ChatTypeExt.DefaultColor; channels without a default are skipped.
-    // Channels ohne Default-Wert (return null) werden ausgelassen — wer sie
-    // anwenden will, behält seine aktuelle Farbe.
     private static IReadOnlyDictionary<ChatType, uint> BuildDefault()
     {
         var dict = new Dictionary<ChatType, uint>();
@@ -183,33 +178,22 @@ public static class ChatColourPresets
         };
     }
 
-    // Hellion brand preset — Arctic Cyan + Ember Orange palette aus
+    // Hellion brand preset — Arctic Cyan + Ember Orange palette.
-    // /mnt/ssd-fast/Projekte/hellion-media/hellion-media-website/BRANDING.md
+    // Cyan family for Standard/Tell, Ember/Warning for loud channels,
-    // (Schema-Stand 2026-04-16). Channels sind über das ganze Brand-Spektrum
+    // Status colours for Linkshells, darker variants for CrossLinkshells.
-    // verteilt damit jede Zeile auf einen Glance unterscheidbar ist:
-    // Cyan-Familie für Standard/Tell, Ember + Warning für laute Channels,
-    // Status-Farben (Success, Danger) für Linkshells. CrossLinkshells
-    // nutzen die dunkleren/sattersten Varianten derselben Hue-Familien.
     private static IReadOnlyDictionary<ChatType, uint> BuildHellion()
     {
         return new Dictionary<ChatType, uint>
         {
-            // Standard / Tell — Cyan-Familie (Brand-Primary)
             [ChatType.Say] = ColourUtil.ComponentsToRgba(77, 217, 232), // Cyan-light #4DD9E8
             [ChatType.TellIncoming] = ColourUtil.ComponentsToRgba(0, 190, 210), // Brand Cyan #00BED2
             [ChatType.TellOutgoing] = ColourUtil.ComponentsToRgba(0, 151, 167), // Cyan-dark #0097A7
-
-            // Laute Channels — Ember/Warning
             [ChatType.Yell] = ColourUtil.ComponentsToRgba(240, 173, 78), // Warning #F0AD4E
             [ChatType.Shout] = ColourUtil.ComponentsToRgba(249, 115, 22), // Brand Ember #F97316
-
-            // Gruppen-Channels — Success/Ember-dark/Cyan
             [ChatType.Party] = ColourUtil.ComponentsToRgba(92, 184, 92), // Success #5CB85C
             [ChatType.Alliance] = ColourUtil.ComponentsToRgba(232, 93, 4), // Ember-dark #E85D04
             [ChatType.FreeCompany] = ColourUtil.ComponentsToRgba(0, 190, 210), // Brand Cyan
             [ChatType.NoviceNetwork] = ColourUtil.ComponentsToRgba(77, 217, 232), // Cyan-light
-
-            // Linkshells 1-8 — über das ganze Brand-Spektrum verteilt
             [ChatType.Linkshell1] = ColourUtil.ComponentsToRgba(251, 146, 60), // Ember-light #FB923C
             [ChatType.Linkshell2] = ColourUtil.ComponentsToRgba(240, 173, 78), // Warning
             [ChatType.Linkshell3] = ColourUtil.ComponentsToRgba(92, 184, 92), // Success
@@ -218,8 +202,6 @@ public static class ChatColourPresets
             [ChatType.Linkshell6] = ColourUtil.ComponentsToRgba(0, 151, 167), // Cyan-dark
             [ChatType.Linkshell7] = ColourUtil.ComponentsToRgba(249, 115, 22), // Brand Ember
             [ChatType.Linkshell8] = ColourUtil.ComponentsToRgba(217, 83, 79), // Danger #D9534F
-
-            // CrossWorld-Linkshells 1-8 — dunklere/sattersere Varianten
             [ChatType.CrossLinkshell1] = ColourUtil.ComponentsToRgba(232, 93, 4), // Ember-dark
             [ChatType.CrossLinkshell2] = ColourUtil.ComponentsToRgba(200, 140, 50), // Warning-dark
             [ChatType.CrossLinkshell3] = ColourUtil.ComponentsToRgba(60, 140, 60), // Success-dark
@@ -231,31 +213,20 @@ public static class ChatColourPresets
         };
     }
 
-    // Bonus preset — Night Blue, KAZAMA-Stimmungs-Theme aus
+    // Night Blue — cool nautical theme, deep navy without purple.
-    // /mnt/HDD-Data1/Obsidian/Vault/Systeme/KAZAMA/Theming/Night Blue + Indigo Violet Themes.md
-    // Klassisch, kühl, technisch — Marineblau-Tiefe ohne Lila-Anteil.
-    // Bewusst NICHT als Brand-Preset markiert (Vault-Boundary): die KAZAMA-Themes
-    // sind persönliche Stimmungs-Themes, nicht Teil des Hellion-Brand-Systems.
     private static IReadOnlyDictionary<ChatType, uint> BuildNightBlue()
     {
         return new Dictionary<ChatType, uint>
         {
-            // Standard / Tell — Royal Blue Akzent-Familie
             [ChatType.Say] = ColourUtil.ComponentsToRgba(230, 237, 247), // text-primary
             [ChatType.TellIncoming] = ColourUtil.ComponentsToRgba(106, 176, 255), // akzent-hot
             [ChatType.TellOutgoing] = ColourUtil.ComponentsToRgba(74, 144, 226), // akzent-primary
-
-            // Laute Channels — Warning/Danger Status-Töne
             [ChatType.Yell] = ColourUtil.ComponentsToRgba(255, 184, 74), // warning
             [ChatType.Shout] = ColourUtil.ComponentsToRgba(255, 92, 122), // danger
-
-            // Gruppen — Success/Akzent-Variations
             [ChatType.Party] = ColourUtil.ComponentsToRgba(61, 220, 151), // success
             [ChatType.Alliance] = ColourUtil.ComponentsToRgba(255, 144, 100), // warm-orange-light
             [ChatType.FreeCompany] = ColourUtil.ComponentsToRgba(74, 144, 226), // akzent-primary
             [ChatType.NoviceNetwork] = ColourUtil.ComponentsToRgba(140, 160, 191), // text-dim
-
-            // Linkshells 1-8 — über Spektrum verteilt
             [ChatType.Linkshell1] = ColourUtil.ComponentsToRgba(255, 184, 74),
             [ChatType.Linkshell2] = ColourUtil.ComponentsToRgba(255, 144, 100),
             [ChatType.Linkshell3] = ColourUtil.ComponentsToRgba(255, 220, 130),
@@ -264,8 +235,6 @@ public static class ChatColourPresets
             [ChatType.Linkshell6] = ColourUtil.ComponentsToRgba(100, 200, 220),
             [ChatType.Linkshell7] = ColourUtil.ComponentsToRgba(106, 176, 255),
             [ChatType.Linkshell8] = ColourUtil.ComponentsToRgba(140, 160, 191),
-
-            // CrossWorld-Linkshells — gedämpfte Variants
             [ChatType.CrossLinkshell1] = ColourUtil.ComponentsToRgba(200, 130, 50),
             [ChatType.CrossLinkshell2] = ColourUtil.ComponentsToRgba(220, 110, 80),
             [ChatType.CrossLinkshell3] = ColourUtil.ComponentsToRgba(200, 180, 60),
@@ -277,30 +246,20 @@ public static class ChatColourPresets
         };
     }
 
-    // Bonus preset — Indigo Violet, KAZAMA-Stimmungs-Theme aus demselben
+    // Indigo Violet — warm-mystic theme, deep indigo with violet accent.
-    // Vault-Doc. Warm-mystisch, "Galaxy/Glitter/Nordlicht" — tiefes Indigo
-    // mit kräftigem Violet-Akzent. Persönlicher Favorit (siehe Vault).
-    // Auch nicht als Brand-Preset (siehe NightBlue-Note oben).
     private static IReadOnlyDictionary<ChatType, uint> BuildIndigoViolet()
     {
         return new Dictionary<ChatType, uint>
         {
-            // Standard / Tell — Royal Violet Akzent-Familie
+            [ChatType.Say] = ColourUtil.ComponentsToRgba(240, 230, 255), // text-primary
-            [ChatType.Say] = ColourUtil.ComponentsToRgba(240, 230, 255), // text-primary (light lavender)
             [ChatType.TellIncoming] = ColourUtil.ComponentsToRgba(176, 124, 255), // akzent-hot
             [ChatType.TellOutgoing] = ColourUtil.ComponentsToRgba(139, 77, 222), // akzent-primary
-
-            // Laute Channels — geteilt mit Night Blue (Status-Farben)
             [ChatType.Yell] = ColourUtil.ComponentsToRgba(255, 184, 74),
             [ChatType.Shout] = ColourUtil.ComponentsToRgba(255, 92, 122),
-
-            // Gruppen
             [ChatType.Party] = ColourUtil.ComponentsToRgba(61, 220, 151),
             [ChatType.Alliance] = ColourUtil.ComponentsToRgba(255, 144, 100),
             [ChatType.FreeCompany] = ColourUtil.ComponentsToRgba(139, 77, 222), // akzent-primary
             [ChatType.NoviceNetwork] = ColourUtil.ComponentsToRgba(168, 144, 208), // text-dim
-
-            // Linkshells 1-8
             [ChatType.Linkshell1] = ColourUtil.ComponentsToRgba(255, 184, 74),
             [ChatType.Linkshell2] = ColourUtil.ComponentsToRgba(255, 144, 100),
             [ChatType.Linkshell3] = ColourUtil.ComponentsToRgba(255, 220, 130),
@@ -309,8 +268,6 @@ public static class ChatColourPresets
             [ChatType.Linkshell6] = ColourUtil.ComponentsToRgba(139, 77, 222),
             [ChatType.Linkshell7] = ColourUtil.ComponentsToRgba(130, 90, 200),
             [ChatType.Linkshell8] = ColourUtil.ComponentsToRgba(168, 144, 208),
-
-            // CrossWorld-Linkshells
             [ChatType.CrossLinkshell1] = ColourUtil.ComponentsToRgba(200, 130, 50),
             [ChatType.CrossLinkshell2] = ColourUtil.ComponentsToRgba(220, 110, 80),
             [ChatType.CrossLinkshell3] = ColourUtil.ComponentsToRgba(200, 180, 60),

HellionChat/Resources/HellionStrings.Designer.cs

@@ -41,11 +41,9 @@ internal class HellionStrings
     private static string Get(string key)
         => ResourceManager.GetString(key, resourceCulture) ?? key;
 
-    internal static string Privacy_Tab_Title => Get(nameof(Privacy_Tab_Title));
     internal static string Privacy_FilterEnabled_Name => Get(nameof(Privacy_FilterEnabled_Name));
     internal static string Privacy_FilterEnabled_Description => Get(nameof(Privacy_FilterEnabled_Description));
     internal static string Privacy_FilterEnabled_StorageOnly_Help => Get(nameof(Privacy_FilterEnabled_StorageOnly_Help));
-    internal static string Privacy_Filter_Tree_Heading => Get(nameof(Privacy_Filter_Tree_Heading));
     internal static string Privacy_Whitelist_Help => Get(nameof(Privacy_Whitelist_Help));
     internal static string Privacy_Preset_PrivacyFirst => Get(nameof(Privacy_Preset_PrivacyFirst));
     internal static string Privacy_Preset_ClearAll => Get(nameof(Privacy_Preset_ClearAll));
@@ -61,11 +59,10 @@ internal class HellionStrings
     internal static string Privacy_PersistUnknown_Name => Get(nameof(Privacy_PersistUnknown_Name));
     internal static string Privacy_PersistUnknown_Description => Get(nameof(Privacy_PersistUnknown_Description));
 
-    internal static string Cleanup_Heading => Get(nameof(Cleanup_Heading));
+    internal static string Cleanup_Unavailable_FilterOff => Get(nameof(Cleanup_Unavailable_FilterOff));
+    internal static string Cleanup_Unavailable_NothingListed => Get(nameof(Cleanup_Unavailable_NothingListed));
     internal static string Cleanup_Help_Intro => Get(nameof(Cleanup_Help_Intro));
-    internal static string Cleanup_Help_SavedNote => Get(nameof(Cleanup_Help_SavedNote));
     internal static string Cleanup_Preview_Stale => Get(nameof(Cleanup_Preview_Stale));
-    internal static string Retention_Help_SavedNote => Get(nameof(Retention_Help_SavedNote));
     internal static string Cleanup_RefreshPreview => Get(nameof(Cleanup_RefreshPreview));
     internal static string Cleanup_NoPreview => Get(nameof(Cleanup_NoPreview));
     internal static string Cleanup_TotalStored => Get(nameof(Cleanup_TotalStored));
@@ -94,8 +91,8 @@ internal class HellionStrings
     internal static string Retention_Tag_Global => Get(nameof(Retention_Tag_Global));
     internal static string Retention_Reset_Button => Get(nameof(Retention_Reset_Button));
     internal static string Retention_Apply_Label => Get(nameof(Retention_Apply_Label));
-    internal static string Retention_Apply_Tooltip => Get(nameof(Retention_Apply_Tooltip));
     internal static string Retention_Running => Get(nameof(Retention_Running));
+    internal static string Retention_RunNow_Tooltip => Get(nameof(Retention_RunNow_Tooltip));
     internal static string Retention_LastRun_Never => Get(nameof(Retention_LastRun_Never));
     internal static string Retention_LastRun_At => Get(nameof(Retention_LastRun_At));
     internal static string Retention_Success => Get(nameof(Retention_Success));
@@ -114,8 +111,43 @@ internal class HellionStrings
     internal static string Wizard_Profile_FullHistory_GdprWarning => Get(nameof(Wizard_Profile_FullHistory_GdprWarning));
     internal static string Wizard_Profile_FullHistory_Apply => Get(nameof(Wizard_Profile_FullHistory_Apply));
     internal static string Wizard_Reopen_Button => Get(nameof(Wizard_Reopen_Button));
+    internal static string Wizard_Cancel_Label => Get(nameof(Wizard_Cancel_Label));
+    internal static string Wizard_Cancel_Tooltip => Get(nameof(Wizard_Cancel_Tooltip));
+    internal static string Wizard_Step1_Title => Get(nameof(Wizard_Step1_Title));
+    internal static string Wizard_Step1_Subtitle => Get(nameof(Wizard_Step1_Subtitle));
+    internal static string Wizard_Step1_Footer_Hint => Get(nameof(Wizard_Step1_Footer_Hint));
+    internal static string Wizard_Step1_PluginNotice => Get(nameof(Wizard_Step1_PluginNotice));
+    internal static string Wizard_Step1_Heritage => Get(nameof(Wizard_Step1_Heritage));
+    internal static string Wizard_Step1_Skip_Label => Get(nameof(Wizard_Step1_Skip_Label));
+    internal static string Wizard_Step1_Skip_Tooltip => Get(nameof(Wizard_Step1_Skip_Tooltip));
+    internal static string Wizard_Step2_Title => Get(nameof(Wizard_Step2_Title));
+    internal static string Wizard_Profile_Recommended_Badge => Get(nameof(Wizard_Profile_Recommended_Badge));
+    internal static string Wizard_Profile_Roleplay_Heading => Get(nameof(Wizard_Profile_Roleplay_Heading));
+    internal static string Wizard_Profile_Roleplay_Description => Get(nameof(Wizard_Profile_Roleplay_Description));
+    internal static string Wizard_Profile_Roleplay_Apply => Get(nameof(Wizard_Profile_Roleplay_Apply));
+    internal static string Wizard_Nav_Back => Get(nameof(Wizard_Nav_Back));
+    internal static string Wizard_Nav_Next => Get(nameof(Wizard_Nav_Next));
+    internal static string Wizard_Nav_Finish => Get(nameof(Wizard_Nav_Finish));
+    internal static string Wizard_Step3_Title => Get(nameof(Wizard_Step3_Title));
+    internal static string Wizard_Step3_Section_History => Get(nameof(Wizard_Step3_Section_History));
+    internal static string Wizard_Step3_Section_TellTabs => Get(nameof(Wizard_Step3_Section_TellTabs));
+    internal static string Wizard_Step3_Section_Visual => Get(nameof(Wizard_Step3_Section_Visual));
+    internal static string Wizard_Step3_FilterIncludePreviousSessions_Label => Get(nameof(Wizard_Step3_FilterIncludePreviousSessions_Label));
+    internal static string Wizard_Step3_AutoTellTabsHistoryPreload_Label => Get(nameof(Wizard_Step3_AutoTellTabsHistoryPreload_Label));
+    internal static string Wizard_Step3_UseCompactDensity_Label => Get(nameof(Wizard_Step3_UseCompactDensity_Label));
+    internal static string Wizard_Step3_PrettierTimestamps_Label => Get(nameof(Wizard_Step3_PrettierTimestamps_Label));
+    internal static string Wizard_Step3_Theme_Label => Get(nameof(Wizard_Step3_Theme_Label));
+    internal static string Wizard_Step4_Title => Get(nameof(Wizard_Step4_Title));
+    internal static string Wizard_Step4_SummaryHeading => Get(nameof(Wizard_Step4_SummaryHeading));
+    internal static string Wizard_Step4_Summary_Profile => Get(nameof(Wizard_Step4_Summary_Profile));
+    internal static string Wizard_Step4_Summary_History => Get(nameof(Wizard_Step4_Summary_History));
+    internal static string Wizard_Step4_Summary_TellTabs => Get(nameof(Wizard_Step4_Summary_TellTabs));
+    internal static string Wizard_Step4_Summary_Visual => Get(nameof(Wizard_Step4_Summary_Visual));
+    internal static string Wizard_Step4_Summary_Unchanged => Get(nameof(Wizard_Step4_Summary_Unchanged));
+    internal static string Wizard_Step4_Summary_Off => Get(nameof(Wizard_Step4_Summary_Off));
+    internal static string Wizard_Step4_TestHint => Get(nameof(Wizard_Step4_TestHint));
+    internal static string Wizard_Step4_SettingsHint => Get(nameof(Wizard_Step4_SettingsHint));
 
-    internal static string Export_Heading => Get(nameof(Export_Heading));
     internal static string Export_Help => Get(nameof(Export_Help));
     internal static string Export_Range_Label => Get(nameof(Export_Range_Label));
     internal static string Export_Sender_Label => Get(nameof(Export_Sender_Label));
@@ -168,6 +200,16 @@ internal class HellionStrings
     internal static string AutoTellTabs_HistoryLoadError => Get(nameof(AutoTellTabs_HistoryLoadError));
     internal static string AutoTellTabs_GreetedTooltip => Get(nameof(AutoTellTabs_GreetedTooltip));
     internal static string AutoTellTabs_UnGreetedTooltip => Get(nameof(AutoTellTabs_UnGreetedTooltip));
+    internal static string PinTab_MenuPin => Get(nameof(PinTab_MenuPin));
+    internal static string PinTab_MenuUnpin => Get(nameof(PinTab_MenuUnpin));
+    internal static string PinTab_MenuPromote => Get(nameof(PinTab_MenuPromote));
+    internal static string PinTab_PromoteTooltip => Get(nameof(PinTab_PromoteTooltip));
+    internal static string PinTab_LimitReached => Get(nameof(PinTab_LimitReached));
+    internal static string PinTab_PinnedTooltip => Get(nameof(PinTab_PinnedTooltip));
+    internal static string PinTab_PinTooltip => Get(nameof(PinTab_PinTooltip));
+    internal static string PinTab_SectionHeader => Get(nameof(PinTab_SectionHeader));
+    internal static string Settings_ThemeAndLayout_SidebarWidth_Name => Get(nameof(Settings_ThemeAndLayout_SidebarWidth_Name));
+    internal static string Settings_ThemeAndLayout_SidebarWidth_Description => Get(nameof(Settings_ThemeAndLayout_SidebarWidth_Description));
 
     // Hellion Chat — Auto-Tell-Tabs Chat settings tab
     internal static string ChatLog_AutoTellTabs_Section_Title => Get(nameof(ChatLog_AutoTellTabs_Section_Title));
@@ -191,8 +233,6 @@ internal class HellionStrings
     internal static string Privacy_AutoTellTabs_Preload_Hint => Get(nameof(Privacy_AutoTellTabs_Preload_Hint));
 
     // Hellion Chat — Settings UX Polish v10 wipe migration
-    internal static string SettingsRefactor_Migration_Title => Get(nameof(SettingsRefactor_Migration_Title));
-    internal static string SettingsRefactor_Migration_Content => Get(nameof(SettingsRefactor_Migration_Content));
 
     // Hellion Chat — Settings UX Polish 8-tab structure
     internal static string Settings_Tab_General => Get(nameof(Settings_Tab_General));
@@ -204,24 +244,6 @@ internal class HellionStrings
     internal static string Settings_Tab_Information => Get(nameof(Settings_Tab_Information));
 
     // v1.1.0 — Settings card-grid overview
-    internal static string Settings_Card_General_Title => Get(nameof(Settings_Card_General_Title));
-    internal static string Settings_Card_General_Subtext => Get(nameof(Settings_Card_General_Subtext));
-    internal static string Settings_Card_Appearance_Title => Get(nameof(Settings_Card_Appearance_Title));
-    internal static string Settings_Card_Appearance_Subtext => Get(nameof(Settings_Card_Appearance_Subtext));
-    internal static string Settings_Card_Themes_Title => Get(nameof(Settings_Card_Themes_Title));
-    internal static string Settings_Card_Themes_Subtext => Get(nameof(Settings_Card_Themes_Subtext));
-    internal static string Settings_Card_Window_Title => Get(nameof(Settings_Card_Window_Title));
-    internal static string Settings_Card_Window_Subtext => Get(nameof(Settings_Card_Window_Subtext));
-    internal static string Settings_Card_Chat_Title => Get(nameof(Settings_Card_Chat_Title));
-    internal static string Settings_Card_Chat_Subtext => Get(nameof(Settings_Card_Chat_Subtext));
-    internal static string Settings_Card_Tabs_Title => Get(nameof(Settings_Card_Tabs_Title));
-    internal static string Settings_Card_Tabs_Subtext => Get(nameof(Settings_Card_Tabs_Subtext));
-    internal static string Settings_Card_Privacy_Title => Get(nameof(Settings_Card_Privacy_Title));
-    internal static string Settings_Card_Privacy_Subtext => Get(nameof(Settings_Card_Privacy_Subtext));
-    internal static string Settings_Card_Database_Title => Get(nameof(Settings_Card_Database_Title));
-    internal static string Settings_Card_Database_Subtext => Get(nameof(Settings_Card_Database_Subtext));
-    internal static string Settings_Card_Information_Title => Get(nameof(Settings_Card_Information_Title));
-    internal static string Settings_Card_Information_Subtext => Get(nameof(Settings_Card_Information_Subtext));
 
     // v1.1.0 — Themes-Settings-Tab
     internal static string Settings_Tab_Themes => Get(nameof(Settings_Tab_Themes));
@@ -234,11 +256,7 @@ internal class HellionStrings
     internal static string Settings_Themes_ApplyChatColors_Apply => Get(nameof(Settings_Themes_ApplyChatColors_Apply));
     internal static string Settings_Themes_ApplyChatColors_Keep => Get(nameof(Settings_Themes_ApplyChatColors_Keep));
 
-    // Hellion Chat — General-Tab section headings
+    internal static string Settings_Language_FFXIVCoverage_Warning => Get(nameof(Settings_Language_FFXIVCoverage_Warning));
-    internal static string Settings_General_Input_Heading => Get(nameof(Settings_General_Input_Heading));
-    internal static string Settings_General_Audio_Heading => Get(nameof(Settings_General_Audio_Heading));
-    internal static string Settings_General_Performance_Heading => Get(nameof(Settings_General_Performance_Heading));
-    internal static string Settings_General_Language_Heading => Get(nameof(Settings_General_Language_Heading));
 
     // Hellion Chat — Appearance-Tab section headings
     internal static string Settings_Appearance_Theme_Heading => Get(nameof(Settings_Appearance_Theme_Heading));
@@ -246,30 +264,27 @@ internal class HellionStrings
     internal static string Settings_Appearance_Colours_Heading => Get(nameof(Settings_Appearance_Colours_Heading));
     internal static string Settings_Appearance_Timestamps_Heading => Get(nameof(Settings_Appearance_Timestamps_Heading));
 
-    // Hellion Chat — Window-Tab section headings
+    // Hellion Chat — Window-Tab section headings (pre-cycle legacy, kept for reference)
-    internal static string Settings_Window_Hide_Heading => Get(nameof(Settings_Window_Hide_Heading));
-    internal static string Settings_Window_InactivityHide_Heading => Get(nameof(Settings_Window_InactivityHide_Heading));
     internal static string Settings_Window_Frame_Heading => Get(nameof(Settings_Window_Frame_Heading));
-    internal static string Settings_Window_Tooltips_Heading => Get(nameof(Settings_Window_Tooltips_Heading));
 
-    // Hellion Chat — Chat-Tab section headings
+    // Hellion Chat — Chat-Tab SymbolPicker
-    internal static string Settings_Chat_AutoTellTabs_Heading => Get(nameof(Settings_Chat_AutoTellTabs_Heading));
+    internal static string Settings_Chat_SymbolPicker_Enable_Name => Get(nameof(Settings_Chat_SymbolPicker_Enable_Name));
-    internal static string Settings_Chat_Behaviour_Heading => Get(nameof(Settings_Chat_Behaviour_Heading));
+    internal static string Settings_Chat_SymbolPicker_Enable_Description => Get(nameof(Settings_Chat_SymbolPicker_Enable_Description));
-    internal static string Settings_Chat_Preview_Heading => Get(nameof(Settings_Chat_Preview_Heading));
-    internal static string Settings_Chat_Emotes_Heading => Get(nameof(Settings_Chat_Emotes_Heading));
 
     // Hellion Chat — Database-Tab section headings
-    internal static string Settings_Database_Storage_Heading => Get(nameof(Settings_Database_Storage_Heading));
+    internal static string Settings_Database_Busy => Get(nameof(Settings_Database_Busy));
-    internal static string Settings_Database_Viewer_Heading => Get(nameof(Settings_Database_Viewer_Heading));
+    internal static string Settings_Database_ClearHint => Get(nameof(Settings_Database_ClearHint));
-    internal static string Settings_Database_Stats_Heading => Get(nameof(Settings_Database_Stats_Heading));
+    internal static string Settings_Database_ClearError => Get(nameof(Settings_Database_ClearError));
-
+    internal static string Settings_Database_Op_RetentionSweep => Get(nameof(Settings_Database_Op_RetentionSweep));
-    // Hellion Chat — Information-Tab section headings
+    internal static string Settings_Database_Op_Export => Get(nameof(Settings_Database_Op_Export));
-    internal static string Settings_Information_VersionInfo_Heading => Get(nameof(Settings_Information_VersionInfo_Heading));
+    internal static string Settings_Database_Op_Cleanup => Get(nameof(Settings_Database_Op_Cleanup));
-    internal static string Settings_Information_About_Heading => Get(nameof(Settings_Information_About_Heading));
+    internal static string Settings_Database_Op_Clear => Get(nameof(Settings_Database_Op_Clear));
-    internal static string Settings_Information_Changelog_Heading => Get(nameof(Settings_Information_Changelog_Heading));
+    internal static string Settings_Database_Op_Preview => Get(nameof(Settings_Database_Op_Preview));
+    internal static string Settings_Database_Op_Maintenance => Get(nameof(Settings_Database_Op_Maintenance));
 
     // Hellion Chat — Default tab presets (channel-themed)
     internal static string Tabs_Presets_System => Get(nameof(Tabs_Presets_System));
+    internal static string Tabs_Presets_Emote => Get(nameof(Tabs_Presets_Emote));
     internal static string Tabs_Presets_FreeCompany => Get(nameof(Tabs_Presets_FreeCompany));
     internal static string Tabs_Presets_Party => Get(nameof(Tabs_Presets_Party));
     internal static string Tabs_Presets_Beginner => Get(nameof(Tabs_Presets_Beginner));
@@ -302,14 +317,8 @@ internal class HellionStrings
     internal static string Settings_Window_ResetPosition_Description => Get(nameof(Settings_Window_ResetPosition_Description));
 
     // Hellion Chat — v0.6.0 one-time hint banner shown inside pop-outs
-    internal static string Popout_v060_HintText => Get(nameof(Popout_v060_HintText));
-    internal static string Popout_v060_HintAck => Get(nameof(Popout_v060_HintAck));
-    internal static string Popout_v060_HintOpenSettings => Get(nameof(Popout_v060_HintOpenSettings));
 
     // Hellion Chat — v0.6.1 pop-out header hint banner (discoverability)
-    internal static string Hint_v061_PopOutHeader_Body => Get(nameof(Hint_v061_PopOutHeader_Body));
-    internal static string Hint_v061_PopOutHeader_Ack => Get(nameof(Hint_v061_PopOutHeader_Ack));
-    internal static string Hint_v061_PopOutHeader_OpenSettings => Get(nameof(Hint_v061_PopOutHeader_OpenSettings));
 
     // Hellion Chat — v1.0.0 Chat 2 parallel-load conflict detection
     internal static string ChatTwoConflictTitle => Get(nameof(ChatTwoConflictTitle));
@@ -325,14 +334,7 @@ internal class HellionStrings
     internal static string Appearance_UseCompactDensity_Description => Get(nameof(Appearance_UseCompactDensity_Description));
 
     // Hellion Chat — v1.2.1 Settings Cleanup: new card titles + subtexts
-    internal static string Settings_Card_ThemeAndLayout_Title => Get(nameof(Settings_Card_ThemeAndLayout_Title));
-    internal static string Settings_Card_ThemeAndLayout_Subtext => Get(nameof(Settings_Card_ThemeAndLayout_Subtext));
-    internal static string Settings_Card_FontsAndColours_Title => Get(nameof(Settings_Card_FontsAndColours_Title));
-    internal static string Settings_Card_FontsAndColours_Subtext => Get(nameof(Settings_Card_FontsAndColours_Subtext));
     internal static string Settings_Card_DataManagement_Title => Get(nameof(Settings_Card_DataManagement_Title));
-    internal static string Settings_Card_DataManagement_Subtext => Get(nameof(Settings_Card_DataManagement_Subtext));
-    internal static string Settings_Card_Integrations_Title => Get(nameof(Settings_Card_Integrations_Title));
-    internal static string Settings_Card_Integrations_Subtext => Get(nameof(Settings_Card_Integrations_Subtext));
 
     // Hellion Chat — v1.2.1 Theme & Layout tab section headings + WindowOpacity slider
     internal static string Settings_ThemeAndLayout_Theme_Heading => Get(nameof(Settings_ThemeAndLayout_Theme_Heading));
@@ -341,26 +343,108 @@ internal class HellionStrings
     internal static string Settings_ThemeAndLayout_WindowOpacity_Name => Get(nameof(Settings_ThemeAndLayout_WindowOpacity_Name));
     internal static string Settings_ThemeAndLayout_WindowOpacity_Description => Get(nameof(Settings_ThemeAndLayout_WindowOpacity_Description));
 
-    // Hellion Chat — v1.2.1 Fonts & Colours tab section headings
-    internal static string Settings_FontsAndColours_Fonts_Heading => Get(nameof(Settings_FontsAndColours_Fonts_Heading));
-    internal static string Settings_FontsAndColours_Colours_Heading => Get(nameof(Settings_FontsAndColours_Colours_Heading));
-
     // Hellion Chat — v1.2.1 Data Management tab section headings
-    internal static string Settings_DataManagement_Storage_Heading => Get(nameof(Settings_DataManagement_Storage_Heading));
-    internal static string Settings_DataManagement_Retention_Heading => Get(nameof(Settings_DataManagement_Retention_Heading));
-    internal static string Settings_DataManagement_Cleanup_Heading => Get(nameof(Settings_DataManagement_Cleanup_Heading));
-    internal static string Settings_DataManagement_Export_Heading => Get(nameof(Settings_DataManagement_Export_Heading));
-    internal static string Settings_DataManagement_DbViewer_Heading => Get(nameof(Settings_DataManagement_DbViewer_Heading));
     internal static string Settings_DataManagement_Advanced_Heading => Get(nameof(Settings_DataManagement_Advanced_Heading));
 
-    // Hellion Chat — v1.2.1 Window-tab Behaviour heading (replaces Frame heading)
+    // v1.5.6: Data & Privacy tab section titles
-    internal static string Settings_Window_Frame_Behaviour_Heading => Get(nameof(Settings_Window_Frame_Behaviour_Heading));
+    internal static string Settings_Section_PrivacyFilter => Get(nameof(Settings_Section_PrivacyFilter));
+    internal static string Settings_Section_Storage => Get(nameof(Settings_Section_Storage));
+    internal static string Settings_Section_Retention => Get(nameof(Settings_Section_Retention));
+    internal static string Settings_Section_Cleanup => Get(nameof(Settings_Section_Cleanup));
+    internal static string Settings_Section_Export => Get(nameof(Settings_Section_Export));
+    internal static string Settings_Section_Telemetry => Get(nameof(Settings_Section_Telemetry));
+    internal static string Settings_Theme_ActiveTheme => Get(nameof(Settings_Theme_ActiveTheme));
+    internal static string Settings_Theme_ForkAndEdit => Get(nameof(Settings_Theme_ForkAndEdit));
+    internal static string Settings_Theme_ForkTooltip => Get(nameof(Settings_Theme_ForkTooltip));
+    internal static string Settings_Theme_EditTheme => Get(nameof(Settings_Theme_EditTheme));
+    internal static string Settings_Theme_Editing => Get(nameof(Settings_Theme_Editing));
+    internal static string Settings_Theme_Group_Surfaces => Get(nameof(Settings_Theme_Group_Surfaces));
+    internal static string Settings_Theme_Group_Borders => Get(nameof(Settings_Theme_Group_Borders));
+    internal static string Settings_Theme_Group_Text => Get(nameof(Settings_Theme_Group_Text));
+    internal static string Settings_Theme_Group_Identity => Get(nameof(Settings_Theme_Group_Identity));
+    internal static string Settings_Theme_Group_Status => Get(nameof(Settings_Theme_Group_Status));
+    internal static string Settings_Theme_Save => Get(nameof(Settings_Theme_Save));
+    internal static string Settings_Theme_Cancel => Get(nameof(Settings_Theme_Cancel));
+    internal static string Settings_Theme_ResetToSource => Get(nameof(Settings_Theme_ResetToSource));
+    internal static string Settings_Theme_ResetUnavailable => Get(nameof(Settings_Theme_ResetUnavailable));
+    internal static string Settings_Theme_LockedTooltip => Get(nameof(Settings_Theme_LockedTooltip));
+    internal static string Settings_Theme_Custom => Get(nameof(Settings_Theme_Custom));
+    internal static string Settings_Tabs_Duplicate => Get(nameof(Settings_Tabs_Duplicate));
+    internal static string Settings_Theme_ForkActive => Get(nameof(Settings_Theme_ForkActive));
+    internal static string Settings_Theme_ImportFile => Get(nameof(Settings_Theme_ImportFile));
+    internal static string Settings_Theme_ImportPathHint => Get(nameof(Settings_Theme_ImportPathHint));
+    internal static string Settings_Theme_ExportDialogTitle => Get(nameof(Settings_Theme_ExportDialogTitle));
+    internal static string Settings_Theme_Category_Cool => Get(nameof(Settings_Theme_Category_Cool));
+    internal static string Settings_Theme_Category_Natural => Get(nameof(Settings_Theme_Category_Natural));
+    internal static string Settings_Theme_Category_Classic => Get(nameof(Settings_Theme_Category_Classic));
+    internal static string Settings_Theme_Category_Retro => Get(nameof(Settings_Theme_Category_Retro));
+    internal static string Settings_Fonts_Bundled => Get(nameof(Settings_Fonts_Bundled));
+    internal static string Settings_Fonts_GameFont => Get(nameof(Settings_Fonts_GameFont));
+    internal static string Settings_Fonts_Global => Get(nameof(Settings_Fonts_Global));
+    internal static string Settings_Fonts_Active => Get(nameof(Settings_Fonts_Active));
+    internal static string Settings_Preview_TypeAMessage => Get(nameof(Settings_Preview_TypeAMessage));
+    internal static string StatusBar_Tabs_One => Get(nameof(StatusBar_Tabs_One));
+    internal static string StatusBar_Tabs_Other => Get(nameof(StatusBar_Tabs_Other));
+    internal static string StatusBar_Tells_One => Get(nameof(StatusBar_Tells_One));
+    internal static string StatusBar_Tells_Other => Get(nameof(StatusBar_Tells_Other));
+    internal static string StatusBar_Messages => Get(nameof(StatusBar_Messages));
+    internal static string StatusBar_MessagesThousands => Get(nameof(StatusBar_MessagesThousands));
+    internal static string Settings_Preview_TitleMock => Get(nameof(Settings_Preview_TitleMock));
+    internal static string Settings_Preview_StatusOpen => Get(nameof(Settings_Preview_StatusOpen));
+    internal static string ChannelHeader_NotLoggedIn => Get(nameof(ChannelHeader_NotLoggedIn));
+    internal static string InputBar_More_Tooltip => Get(nameof(InputBar_More_Tooltip));
+    internal static string Settings_Section_Links => Get(nameof(Settings_Section_Links));
+    internal static string Settings_Section_Behaviour => Get(nameof(Settings_Section_Behaviour));
+    internal static string Settings_Section_Keybinds => Get(nameof(Settings_Section_Keybinds));
+    internal static string Settings_Section_Notifications => Get(nameof(Settings_Section_Notifications));
+    internal static string Settings_Section_DisplayModes => Get(nameof(Settings_Section_DisplayModes));
+    internal static string Settings_Section_History => Get(nameof(Settings_Section_History));
+    internal static string Settings_Section_CommandHelp => Get(nameof(Settings_Section_CommandHelp));
+    internal static string Settings_Section_PluginDisclosure => Get(nameof(Settings_Section_PluginDisclosure));
+    internal static string Settings_Section_LayoutMode => Get(nameof(Settings_Section_LayoutMode));
+    internal static string Settings_Section_Opacity => Get(nameof(Settings_Section_Opacity));
+    internal static string Settings_Section_ResizeBehaviour => Get(nameof(Settings_Section_ResizeBehaviour));
+    internal static string Settings_Section_TellAutoOpen => Get(nameof(Settings_Section_TellAutoOpen));
+    internal static string Settings_Section_Sidebar => Get(nameof(Settings_Section_Sidebar));
+    internal static string Settings_Section_Brand => Get(nameof(Settings_Section_Brand));
+    internal static string Settings_Section_Integrations => Get(nameof(Settings_Section_Integrations));
+    internal static string Settings_Section_Credits => Get(nameof(Settings_Section_Credits));
+    internal static string Settings_Section_License => Get(nameof(Settings_Section_License));
+    internal static string Settings_Keybinds_Hint => Get(nameof(Settings_Keybinds_Hint));
+    internal static string Settings_Keybinds_CycleNext => Get(nameof(Settings_Keybinds_CycleNext));
+    internal static string Settings_Keybinds_CyclePrevious => Get(nameof(Settings_Keybinds_CyclePrevious));
+    internal static string Settings_General_Language_Description => Get(nameof(Settings_General_Language_Description));
+    internal static string Settings_Chat_Clock24_Name => Get(nameof(Settings_Chat_Clock24_Name));
+    internal static string Settings_Chat_PreviousSessions_Name => Get(nameof(Settings_Chat_PreviousSessions_Name));
+    internal static string Settings_Chat_PreviousSessions_Description => Get(nameof(Settings_Chat_PreviousSessions_Description));
+    internal static string Settings_Chat_CommandHelpSide_Name => Get(nameof(Settings_Chat_CommandHelpSide_Name));
+    internal static string Settings_Chat_CommandHelpSide_Description => Get(nameof(Settings_Chat_CommandHelpSide_Description));
+    internal static string Settings_Channels_TellAutoOpenMode_Name => Get(nameof(Settings_Channels_TellAutoOpenMode_Name));
+    internal static string Settings_Channels_TellAutoOpenMode_Description => Get(nameof(Settings_Channels_TellAutoOpenMode_Description));
+    internal static string Settings_Channels_TellSwitchAlways_Name => Get(nameof(Settings_Channels_TellSwitchAlways_Name));
+    internal static string Settings_Channels_TellSwitchAlways_Description => Get(nameof(Settings_Channels_TellSwitchAlways_Description));
+    internal static string Settings_Window_LayoutSidebar => Get(nameof(Settings_Window_LayoutSidebar));
+    internal static string Settings_Window_LayoutTopTabs => Get(nameof(Settings_Window_LayoutTopTabs));
+    internal static string Settings_Window_TabPlacement_Name => Get(nameof(Settings_Window_TabPlacement_Name));
+    internal static string Settings_Window_TabPlacement_Description => Get(nameof(Settings_Window_TabPlacement_Description));
+    internal static string Settings_Window_TitleBar_Name => Get(nameof(Settings_Window_TitleBar_Name));
+    internal static string Settings_Window_PopoutTitleBar_Name => Get(nameof(Settings_Window_PopoutTitleBar_Name));
+    internal static string Settings_Window_AllowMove_Name => Get(nameof(Settings_Window_AllowMove_Name));
+    internal static string Settings_Window_AllowResize_Name => Get(nameof(Settings_Window_AllowResize_Name));
+    internal static string Settings_Window_SidebarThreshold_Name => Get(nameof(Settings_Window_SidebarThreshold_Name));
+    internal static string Settings_Window_SidebarThreshold_Description => Get(nameof(Settings_Window_SidebarThreshold_Description));
+    internal static string Settings_Window_PreviewPosition_Name => Get(nameof(Settings_Window_PreviewPosition_Name));
+    internal static string Settings_Window_PreviewOnlyTyping_Name => Get(nameof(Settings_Window_PreviewOnlyTyping_Name));
+    internal static string Settings_About_GiteaRepo => Get(nameof(Settings_About_GiteaRepo));
+    internal static string Settings_About_CustomRepo => Get(nameof(Settings_About_CustomRepo));
+    internal static string Settings_Section_AutoTranslate => Get(nameof(Settings_Section_AutoTranslate));
+    internal static string Settings_Emotes_Block => Get(nameof(Settings_Emotes_Block));
+    internal static string Settings_Telemetry_None => Get(nameof(Settings_Telemetry_None));
+    internal static string Settings_Section_Database => Get(nameof(Settings_Section_Database));
 
     // Hellion Chat — v1.2.1 Migration v15 → v16 toast
-    internal static string Migration_v16_OverrideStyle_Toast => Get(nameof(Migration_v16_OverrideStyle_Toast));
 
-    // Hellion Chat — v1.3.0 Integrations tab (Honorific + Coming-Soon roadmap)
+    // Hellion Chat — v1.3.0 Integrations (Honorific + Coming-Soon roadmap) — now in About tab
-    internal static string Settings_Tab_Integrations => Get(nameof(Settings_Tab_Integrations));
     internal static string Settings_Integrations_Intro => Get(nameof(Settings_Integrations_Intro));
     internal static string Settings_Integrations_Honorific_SectionHeader => Get(nameof(Settings_Integrations_Honorific_SectionHeader));
     internal static string Settings_Integrations_Honorific_Status_Detected => Get(nameof(Settings_Integrations_Honorific_Status_Detected));
@@ -368,6 +452,8 @@ internal class HellionStrings
     internal static string Settings_Integrations_Honorific_Status_Incompatible => Get(nameof(Settings_Integrations_Honorific_Status_Incompatible));
     internal static string Settings_Integrations_Honorific_Toggle => Get(nameof(Settings_Integrations_Honorific_Toggle));
     internal static string Settings_Integrations_Honorific_ToggleHint => Get(nameof(Settings_Integrations_Honorific_ToggleHint));
+    internal static string Settings_Integrations_Honorific_Glow_Toggle => Get(nameof(Settings_Integrations_Honorific_Glow_Toggle));
+    internal static string Settings_Integrations_Honorific_Glow_Hint => Get(nameof(Settings_Integrations_Honorific_Glow_Hint));
     internal static string Settings_Integrations_Honorific_LinkRepo => Get(nameof(Settings_Integrations_Honorific_LinkRepo));
     internal static string Settings_Integrations_Honorific_LinkAuthor => Get(nameof(Settings_Integrations_Honorific_LinkAuthor));
     internal static string Settings_Integrations_ComingSoon_SectionHeader => Get(nameof(Settings_Integrations_ComingSoon_SectionHeader));
@@ -388,4 +474,110 @@ internal class HellionStrings
 
     // Hellion Chat — v1.3.0 Honorific title slot tooltip
     internal static string ChatHeader_HonorificTitle_Tooltip => Get(nameof(ChatHeader_HonorificTitle_Tooltip));
+
+    // Hellion Chat — v1.4.8 DbViewer full-text search toggle
+    internal static string DbViewer_FullTextToggle => Get(nameof(DbViewer_FullTextToggle));
+    internal static string DbViewer_FullTextToggle_Hint_Indexing => Get(nameof(DbViewer_FullTextToggle_Hint_Indexing));
+    internal static string DbViewer_FullTextToggle_Hint_PhraseMode => Get(nameof(DbViewer_FullTextToggle_Hint_PhraseMode));
+
+    // Hellion Chat — v1.5.4 header quick-picker + reduce-motion toggle
+    internal static string Settings_QuickPicker_Tooltip => Get(nameof(Settings_QuickPicker_Tooltip));
+
+    internal static string InputBar_InsertSymbol_Tooltip =>
+        Get(nameof(InputBar_InsertSymbol_Tooltip));
+
+    internal static string InputBar_Settings_Tooltip => Get(nameof(InputBar_Settings_Tooltip));
+
+    internal static string InputBar_HideChat_Tooltip => Get(nameof(InputBar_HideChat_Tooltip));
+    internal static string InputBar_PopIn_Tooltip => Get(nameof(InputBar_PopIn_Tooltip));
+    internal static string Settings_QuickPicker_Themes_Header => Get(nameof(Settings_QuickPicker_Themes_Header));
+    internal static string Settings_QuickPicker_Tabs_Header => Get(nameof(Settings_QuickPicker_Tabs_Header));
+    internal static string Settings_ThemeAndLayout_ReduceMotion_Name => Get(nameof(Settings_ThemeAndLayout_ReduceMotion_Name));
+    internal static string Settings_ThemeAndLayout_ReduceMotion_Description => Get(nameof(Settings_ThemeAndLayout_ReduceMotion_Description));
+
+    // Failed-tell notification
+    internal static string FailedTell_Notification_Generic => Get(nameof(FailedTell_Notification_Generic));
+    internal static string FailedTell_Notification_Named => Get(nameof(FailedTell_Notification_Named));
+    internal static string Settings_Chat_NotifyFailedTell_Name => Get(nameof(Settings_Chat_NotifyFailedTell_Name));
+    internal static string Settings_Chat_NotifyFailedTell_Description => Get(nameof(Settings_Chat_NotifyFailedTell_Description));
+
+    // Per-tab notification sound
+    internal static string Tabs_NotificationSound_Enable_Name => Get(nameof(Tabs_NotificationSound_Enable_Name));
+    internal static string Tabs_NotificationSound_Description => Get(nameof(Tabs_NotificationSound_Description));
+    internal static string Tabs_NotificationSound_Option => Get(nameof(Tabs_NotificationSound_Option));
+    internal static string Tabs_NotificationSound_Preview => Get(nameof(Tabs_NotificationSound_Preview));
+    internal static string Tabs_NotificationSound_CustomOption => Get(nameof(Tabs_NotificationSound_CustomOption));
+
+    // Scroll-to-bottom and item/flag linking
+    internal static string ChatLog_ScrollToBottom_Tooltip => Get(nameof(ChatLog_ScrollToBottom_Tooltip));
+    internal static string ChatLog_Insert_MapFlag => Get(nameof(ChatLog_Insert_MapFlag));
+    internal static string ChatLog_Insert_ItemLink => Get(nameof(ChatLog_Insert_ItemLink));
+
+    // v1.5.6: plugin-disclosure warning
+    internal static string Settings_Chat_NotifyPluginDisclosure_Name => Get(nameof(Settings_Chat_NotifyPluginDisclosure_Name));
+    internal static string Settings_Chat_NotifyPluginDisclosure_Description => Get(nameof(Settings_Chat_NotifyPluginDisclosure_Description));
+    internal static string ChatInput_PluginDisclosure_Warning => Get(nameof(ChatInput_PluginDisclosure_Warning));
+
+    // v1.5.6: world suffix + name format display options
+    internal static string Settings_Chat_WorldSuffix_Name => Get(nameof(Settings_Chat_WorldSuffix_Name));
+    internal static string Settings_Chat_WorldSuffix_Description => Get(nameof(Settings_Chat_WorldSuffix_Description));
+    internal static string Settings_Chat_NameForm_Name => Get(nameof(Settings_Chat_NameForm_Name));
+    internal static string Settings_Chat_NameForm_Description => Get(nameof(Settings_Chat_NameForm_Description));
+    internal static string NameDisplay_WorldSuffix_Never => Get(nameof(NameDisplay_WorldSuffix_Never));
+    internal static string NameDisplay_WorldSuffix_OtherWorldOnly => Get(nameof(NameDisplay_WorldSuffix_OtherWorldOnly));
+    internal static string NameDisplay_WorldSuffix_Always => Get(nameof(NameDisplay_WorldSuffix_Always));
+    internal static string NameDisplay_NameForm_Full => Get(nameof(NameDisplay_NameForm_Full));
+    internal static string NameDisplay_NameForm_FirstNameOnly => Get(nameof(NameDisplay_NameForm_FirstNameOnly));
+    internal static string NameDisplay_NameForm_Initials => Get(nameof(NameDisplay_NameForm_Initials));
+
+    // v1.5.6: inactive window opacity
+    internal static string Settings_ThemeAndLayout_WindowOpacityInactive_Name => Get(nameof(Settings_ThemeAndLayout_WindowOpacityInactive_Name));
+    internal static string Settings_ThemeAndLayout_WindowOpacityInactive_Description => Get(nameof(Settings_ThemeAndLayout_WindowOpacityInactive_Description));
+
+    // v1.5.6: custom sound volume
+    internal static string Settings_General_CustomSoundVolume_Name => Get(nameof(Settings_General_CustomSoundVolume_Name));
+    internal static string Settings_General_CustomSoundVolume_Description => Get(nameof(Settings_General_CustomSoundVolume_Description));
+
+    // v1.5.6: General tab collapsible section titles
+    internal static string Settings_Section_Input => Get(nameof(Settings_Section_Input));
+    internal static string Settings_Section_Sound => Get(nameof(Settings_Section_Sound));
+    internal static string Settings_Section_Language => Get(nameof(Settings_Section_Language));
+    internal static string Settings_Section_Performance => Get(nameof(Settings_Section_Performance));
+    internal static string Settings_Section_Sound_TabsHint => Get(nameof(Settings_Section_Sound_TabsHint));
+
+    // v1.5.6: Chat tab collapsible section titles
+    internal static string Settings_Section_Messages => Get(nameof(Settings_Section_Messages));
+    internal static string Settings_Section_InputPreview => Get(nameof(Settings_Section_InputPreview));
+    internal static string Settings_Section_AutoTellTabs => Get(nameof(Settings_Section_AutoTellTabs));
+    internal static string Settings_Section_Emotes => Get(nameof(Settings_Section_Emotes));
+    internal static string Settings_Section_LinksTooltips => Get(nameof(Settings_Section_LinksTooltips));
+    internal static string Settings_Section_NoviceNetwork => Get(nameof(Settings_Section_NoviceNetwork));
+
+    // v1.5.6: Appearance tab collapsible section titles
+    internal static string Settings_Section_Theme => Get(nameof(Settings_Section_Theme));
+    internal static string Settings_Section_Fonts => Get(nameof(Settings_Section_Fonts));
+    internal static string Settings_Section_Colours => Get(nameof(Settings_Section_Colours));
+    internal static string Settings_Section_WindowStyle => Get(nameof(Settings_Section_WindowStyle));
+    internal static string Settings_Section_Timestamps => Get(nameof(Settings_Section_Timestamps));
+    internal static string Settings_Section_Animations => Get(nameof(Settings_Section_Animations));
+
+    // v1.5.6: Window tab collapsible section titles
+    internal static string Settings_Section_Hide => Get(nameof(Settings_Section_Hide));
+    internal static string Settings_Section_InactivityHide => Get(nameof(Settings_Section_InactivityHide));
+    internal static string Settings_Section_Frame => Get(nameof(Settings_Section_Frame));
+
+    // v1.5.6: Tabs tab per-tab-item sub-section titles
+    internal static string Settings_Section_Tab_Channels => Get(nameof(Settings_Section_Tab_Channels));
+    internal static string Settings_Section_Tab_Display => Get(nameof(Settings_Section_Tab_Display));
+    internal static string Settings_Section_Tab_Notification => Get(nameof(Settings_Section_Tab_Notification));
+    internal static string Settings_Section_Tab_Input => Get(nameof(Settings_Section_Tab_Input));
+    internal static string Settings_Section_Tab_PopOut => Get(nameof(Settings_Section_Tab_PopOut));
+    internal static string Settings_Section_Tab_Volume_AllTabsHint => Get(nameof(Settings_Section_Tab_Volume_AllTabsHint));
+
+    // v1.5.6: About tab collapsible section titles
+    internal static string Settings_Section_Extensions => Get(nameof(Settings_Section_Extensions));
+    internal static string Settings_Section_PluginInfo => Get(nameof(Settings_Section_PluginInfo));
+    internal static string Settings_Section_Project => Get(nameof(Settings_Section_Project));
+    internal static string Settings_Section_Translators => Get(nameof(Settings_Section_Translators));
+    internal static string Settings_Section_Changelog => Get(nameof(Settings_Section_Changelog));
 }