Merge feature/v1.4.9 — Plugin-Load Render Polish

Adds a "ChatTwo IPC compatibility layer" bullet across all six
release-note surfaces so the new behaviour from commits 8c4afaa and
655c903 is visible to users via the manifest installer, the Gitea
release page, the README project-status section, the changelog/roadmap
docs and the Forge-Discord announcement.

Files touched:
- HellionChat/HellionChat.yaml: bullet added inside the v1.4.9
  changelog block, preserved order so the regression-tripwire line
  still comes before the migration-stays line.
- repo.json: Changelog field kept synchronous (JSON-escaped newlines).
- README.md: project-status paragraph extended with a one-sentence
  recap of the IPC mirror and the conflict-detection caveat.
- docs/CHANGELOG.md: bullet inserted between the profiling-logs and
  migration-stays bullets, code-fenced gate names.
- docs/ROADMAP.md: v1.4.9-released section gets the same recap so the
  cycle history stays self-describing.
- .github/forge-posts/v1.4.9.md: German-only bullet for the Discord
  embed, slotted before the migration-v17 bullet. Char-cap holds —
  preflight Block C reports the embed total well under 5500 chars.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.gitea/workflows/forge-announce.yml

@@ -120,17 +120,37 @@ jobs:
                       $enBlock = $rest.TrimEnd()
                   }
 
-                  # ---------- Char-Cap-Check (5500 Total auf title + description + footer) ----------
+                  # ---------- Embed-Felder + Per-Field-Caps (Discord-Hard-Limits) ----------
+                  # Discord enforces per-embed-field limits separately from the
+                  # combined-total limit. We split the DE and EN blocks into two
+                  # embeds that share the same release URL so Discord stitches
+                  # them into one visual card. Hard caps per Discord docs:
+                  #   description: 4096 per embed
+                  #   title:        256 per embed
+                  #   footer.text: 2048 per embed
+                  #   combined sum across all embeds: 6000
                   $title = "Hellion Chat $version — $subtitle"
-                  $description = "**Deutsch**`n`n$deBody`n`n**English**`n`n$enBlock"
+                  $deDesc = "**Deutsch**`n`n$deBody"
+                  $enDesc = "**English**`n`n$enBlock"
                   $footerText = "Hellion Forge · $versionsnatur"
-                  $totalChars = $title.Length + $description.Length + $footerText.Length
-                  if ($totalChars -gt 5500) {
-                      throw "V6: Total char count $totalChars exceeds 5500 limit. Major-Release detected — please post manually via Bot/Multi-Embed (see forge style §8). Forge-Auto-Announce stays off for this tag."
-                  }
-                  Write-Host "Char-Cap OK: $totalChars / 5500"
+                  $releaseUrl = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/tag/$tag"
 
-                  # ---------- Embed-Payload bauen ----------
+                  if ($deDesc.Length -gt 4096) {
+                      throw "V6a: DE-Body too long for one embed ($($deDesc.Length) chars, max 4096). Trim .github/forge-posts/$tag.md or post the announcement manually (see forge style §8)."
+                  }
+                  if ($enDesc.Length -gt 4096) {
+                      throw "V6b: EN-Block too long for one embed ($($enDesc.Length) chars, max 4096). Trim the changelog entry in HellionChat/HellionChat.yaml or post manually."
+                  }
+                  $totalChars = $title.Length + $deDesc.Length + $enDesc.Length + $footerText.Length
+                  if ($totalChars -gt 6000) {
+                      throw "V6c: Combined embed chars $totalChars exceed Discord's 6000-total limit. Major-Release detected — post manually via Bot/Multi-Embed (see forge style §8)."
+                  }
+                  Write-Host "Embed-Caps OK: de=$($deDesc.Length)/4096, en=$($enDesc.Length)/4096, total=$totalChars/6000"
+
+                  # ---------- Embed-Payload bauen (zwei Embeds, gleiche url) ----------
+                  # Sharing the same `url` tells Discord to render both embeds as a
+                  # single contiguous card block. The title sits on the first embed,
+                  # the footer + timestamp on the last so it reads as one post.
                   $payload = [ordered]@{
                       username = "Forge Herald"
                       avatar_url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/HellionChat/images/icon.png"
@@ -142,9 +162,14 @@ jobs:
                       embeds = @(
                           [ordered]@{
                               title = $title
-                              url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/tag/$tag"
+                              url = $releaseUrl
                               color = 12730636
-                              description = $description
+                              description = $deDesc
+                          },
+                          [ordered]@{
+                              url = $releaseUrl
+                              color = 12730636
+                              description = $enDesc
                               footer = [ordered]@{ text = $footerText }
                               timestamp = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ss.fffZ")
                           }

.github/forge-posts/v1.4.4.md

@@ -17,19 +17,18 @@ spricht jetzt bei unbekannten ChatTypes.
   IPC-Callback-Methode jetzt einen 1-Zeilen-Banner darüber, der den Thread-Kontext direkt am Call-Site benennt
   (framework only, framework scheduled, any). Mehr Hilfe für künftige Reviews als ein abstraktes Threading-Kapitel
 - **Unsubscribe-Failure ist jetzt sichtbar.** `TryUnsubscribe` hat ein Honorific-Unsubscribe-Failure bisher als Debug
-  geloggt, was bei Standard-Loglevel verschluckt wurde. Eine geleakte Subscription kann den Service über
-  Plugin-Reloads hinweg leben lassen, also läuft der Log jetzt auf Warning
+  geloggt, was bei Standard-Loglevel verschluckt wurde. Eine geleakte Subscription kann den Service über Plugin-Reloads
+  hinweg leben lassen, also läuft der Log jetzt auf Warning
 - **AutoTranslate-Warmup blockiert den Plugin-Unload nicht mehr.** Der Cache-Warmup-Thread war ohne `IsBackground=true`
-  unterwegs, was den Unload um 100-300 ms verzögern konnte. Pattern-Match zu MessageManager und RetentionSweep
-  (beide seit v1.4.0)
-- **Privacy-Filter loggt unbekannte ChatTypes.** Wenn FFXIV durch einen Patch einen neuen ChatType einführt der weder
-  in der Whitelist noch in den Defaults steht, wird er bisher silent durch den Failsafe geleitet. Jetzt loggt der
-  Filter einmalig pro Runtime eine Warning mit dem Type und dem Failsafe-Wert. Dedup über ein NonSerialized-HashSet,
-  also kein Log-Spam
+  unterwegs, was den Unload um 100-300 ms verzögern konnte. Pattern-Match zu MessageManager und RetentionSweep (beide
+  seit v1.4.0)
+- **Privacy-Filter loggt unbekannte ChatTypes.** Wenn FFXIV durch einen Patch einen neuen ChatType einführt der weder in
+  der Whitelist noch in den Defaults steht, wird er bisher silent durch den Failsafe geleitet. Jetzt loggt der Filter
+  einmalig pro Runtime eine Warning mit dem Type und dem Failsafe-Wert. Dedup über ein NonSerialized-HashSet, also kein
+  Log-Spam
 - **Default-Flip für neue Installationen.** `PrivacyPersistUnknownChannels` startet bei neuen Configs jetzt auf `true`,
-  damit ein Patch-bedingt neuer ChatType nicht stillschweigend gedroppt wird bevor der User entscheiden kann.
-  Bestehende Configs behalten ihre Wahl, weil der Deserializer den Initializer überschreibt. Keine Migration, kein
-  Schema-Bump
+  damit ein Patch-bedingt neuer ChatType nicht stillschweigend gedroppt wird bevor der User entscheiden kann. Bestehende
+  Configs behalten ihre Wahl, weil der Deserializer den Initializer überschreibt. Keine Migration, kein Schema-Bump
 
 Keine User-sichtbaren Funktions-Änderungen außer dem Default-Flip für neue Installationen. Settings, Themes, Tabs und
 das Privacy-Verhalten für Bestand bleiben unangetastet.

.github/forge-posts/v1.4.5.md

@@ -0,0 +1,28 @@
+---
+subtitle: UX und Robustheit
+versionsnatur: UX-Polish-Cycle
+---
+
+**Hellion Chat 1.4.5 — UX und Robustheit**
+
+Sechster Sub-Patch der v1.4.x Polish-Sweep-Serie. Render-Fehler im Chat-Fenster werden jetzt sichtbar, der
+First-Run-Wizard hat eine explizite Cancel-Schaltfläche, der Eingabe-Verlauf bleibt nicht mehr über Plugin-Reloads
+hinweg liegen, und die Statusleiste klippt in schmalen Fenstern nicht mehr.
+
+- **Fehler-Benachrichtigung im Chat-Fenster.** Wenn ein Render-Fehler in `DrawChatLog` auftritt, zeigt das Plugin jetzt
+  eine einmalige Warning-Notification mit Verweis aufs `/xllog`, statt das Fenster stillschweigend leer zu lassen. Der
+  Stack-Trace selbst geht weiter via `Plugin.Log.Error` ins Logfile. De-Dup über Per-Session-Bool, damit ein
+  wiederkehrender Fehler die Notification-Stack nicht pro Frame neu vollkippt
+- **First-Run-Wizard trennt Accept und Close.** `OnClose` setzt nicht mehr stillschweigend `FirstRunCompleted=true`,
+  also lässt das X den Wizard schwebend zurück und er kommt beim nächsten Plugin-Reload wieder. Eine neue „Später —
+  Defaults behalten"-Schaltfläche im Footer ist der explizite Weg, ohne Profil-Auswahl rauszukommen. Strings bilingual
+  EN+DE plus Tooltip
+- **Eingabe-Verlauf wird beim Plugin-Reload geleert.** `InputHistoryService.Reset` hängt jetzt in `Plugin.DisposeAsync`
+  neben den anderen Pure-Memory-Cleanups, damit der statische Zustand aus der vorigen Session den nächsten Load nicht
+  mehr erbt
+- **Statusleiste klippt nicht mehr.** Der rechtsbündige Versions-Slot wird ausgeblendet wenn die Chat-Window-Breite
+  abzüglich Versions-Text unter 200 px fällt — vorher überlappte er die vier linken Slots. Ab ausreichender Breite
+  taucht der Slot wieder auf
+- **Intern:** `FontManager` fällt auf System-Font zurück wenn die eingebettete Hellion-Font-Resource fehlt
+  (Broken-csproj-Pfad, nie ein Produktions-Build), plus expliziter Session-Only-Invariant-Kommentar für Auto-Tell-Tabs
+  in `Plugin.cs:167-168` mit einem TempTabCounter-Init-Pin in der Build-Suite. Kein Schema-Bump, keine Migration

.github/forge-posts/v1.4.6.md

@@ -0,0 +1,33 @@
+---
+subtitle: Code Hygiene and Refactor
+versionsnatur: Maintenance-Cycle
+---
+
+Wartungs-Patch ohne User-sichtbare Änderungen. Saubere Code-Basis als Vorbereitung auf das v1.4.7-Backlog-Cleanup, plus
+zwei geerbte Bugfixes aus dem ChatTwo-Upstream `f35b7d3`.
+
+- **preflight.sh härter**: csharpier-Reflow-Check (Block E) und markdownlint (Block F) laufen jetzt im Pre-Push-Gate,
+  statt erst beim Pre-Merge-Review aufzufallen.
+- **FontManager-Fallback robuster**: Atlas-Toolkit-Throws aus kaputten Font-Configs (IO, InvalidOperation,
+  ArgumentException) fallen jetzt zuverlässig auf NotoSansCjkRegular, statt den Atlas-Build mitzureißen. Der
+  Exception-Typ wird im Log mitgegeben für die Diagnose.
+- **URL-Validation beim Plugin-Load**: BrandingLinks (5 URLs) und IntegrationLinks (2 URLs) werden via
+  `[ModuleInitializer]` geprüft. Ein Tippfehler bei einer künftigen URL-Rotation wirft jetzt sofort beim Plugin-Load,
+  statt still beim Klick zu scheitern.
+- **Cherry-Pick aus ChatTwo `f35b7d3`** — Memory-Leak in `Chat.SetChannel`: der native `Utf8String` wird jetzt auch dann
+  freigegeben, wenn der Linkshell-Check den Channel ablehnt (vorher gefangen im early-return).
+- **Cherry-Pick aus ChatTwo `f35b7d3`** — `Tab.Clone()` Deep-cloned jetzt `UsedChannel` und `TellTarget`. Vorher
+  Reference-Share-Bug: PopOut- und Temp-Tabs mutierten sich gegenseitig.
+- **Aktive-Tab-Underline pixel-perfect bei DPI-Scaling**: Die Underline-Pill skaliert jetzt mit
+  `ImGuiHelpers.GlobalScale` und rundet die DrawList-Koordinaten auf physische Pixel. Kein Sub-Pixel-Blur mehr auf
+  125/150%-Setups.
+- **IconButton-Width-Fix**: der manuelle `width - 2 * CellPadding.X`-Subtract verlor den HUD-Scale (Padding skaliert,
+  der raw int nicht). Gemessene Breite läuft jetzt unverändert durch.
+- **Test-Isolation für MessageStore**: `Dalamud.Utility.Util`-Surface (IsWine, OpenLink) läuft jetzt durch eine
+  `IPlatformUtil`-Indirektion. MessageStores `IsWine`-Probe ist isoliert testbar in der Build-Suite. Plus:
+  HellionStyle-ChildBgAlpha als Pure-Helper extrahiert, Plugin.SaveConfig kopiert nur Session-Tabs statt der ganzen
+  Tab-Liste, SettingsOverview cached den DrawList einmal pro Frame.
+- **Built-in-Theme-Roster**: Crystal Nocturne (Royal Sapphire + Electric Magenta auf Obsidian, von CRYSTALLITE) ersetzt
+  Moonlit Bloom. User mit Moonlit Bloom als aktivem Theme fallen beim ersten Plugin-Load auf Hellion Arctic zurück.
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).

.github/forge-posts/v1.4.7.md

@@ -0,0 +1,29 @@
+---
+subtitle: Backlog Cleanup and Mid-Features
+versionsnatur: Mid-Feature-Patch
+---
+
+Achter Sub-Patch der v1.4.x Polish-Sweep-Serie. Erstes User-sichtbares Feature-Bundle seit v1.4.5 — angepinnte Tell-Tabs
+die Relog überleben, opt-in Honorific-Glow, plus eine konfigurierbare Sidebar.
+
+- **TempTell anpinnen**: Rechtsklick auf einen TempTell-Tab in der Sidebar → „Tab anpinnen". Angepinnte Tabs überleben
+  Plugin-Reload und Char-Logout, behalten ihre Konversations-Historie (wird beim Rehydrate aus dem MessageStore
+  nachgeladen) und bleiben an die gleiche /tell-Person gebunden. Hard-Cap 5 angepinnte Tabs in einem separaten Pool —
+  die normalen Auto-Tell-Tabs (15er Cap) sind davon entkoppelt, Gesamt-Decke 20. Die Sidebar gruppiert angepinnte Tabs
+  in einer eigenen „Angepinnt"-Sektion mit eigenem Trenner.
+- **Honorific Glow-Outline**: rendert jetzt eine 8-Richtungs-DrawList-Outline wenn der Honorific-Titel eine Glow-Farbe
+  trägt. Opt-in via **Settings → Integrationen → Glow-Outline rendern (Honorific)** (Default OFF). Gradient (Color3 /
+  GradientColourSet / Wave / Pulse) wird geparst und im DTO weitergereicht, rendert aktuell aber statisch als
+  Primärfarbe — der volle Gradient-Port (Animations-Algorithmus + Pride-Palette) kommt als eigener Cycle nach.
+- **Sidebar-Breite konfigurierbar**: in **Theme & Layout** ein Slider 44–160 px. Default bleibt 44 px (icon-only), aber
+  breiter machen damit Sektion-Header wie „Aktive Tells (3)" oder „Angepinnt (2)" nicht abgeschnitten werden.
+- **Settings-Save Channel-Fix**: ein Save mit aktivem Party- oder Linkshell-Tab konnte den Chat-Input zurück auf
+  `/tell <angepinnte Person>` springen lassen. `Configuration.UpdateFrom` bewahrt jetzt den Runtime-`CurrentChannel`
+  über den persistent-Tab-Merge hinweg, und `TabSwitched` deep-cloned den Seed-Channel statt sich den `UsedChannel` mit
+  dem vorigen Tab zu teilen.
+- **Internal**: `IPluginLogProxy`-Indirektion vor Dalamud's `IPluginLog` über alle ~91 `Plugin.Log`-Call-Sites. Damit
+  läuft `MessageStore.Migrate0` voll-isoliert in xUnit (F12.1-Lücke aus v1.4.6 geschlossen). Plus: TempTab-Counter als
+  abgeleitete Property statt gecachtes Interlocked-Feld — die neuen Pin/Unpin-Übergänge sind Cold-Path, kein
+  Lock-Free-Vorteil mehr. Migration v16 → v17 ist rein additiv (neues `Tab.IsPinned`-Bool, Default false).
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).

.github/forge-posts/v1.4.8.md

@@ -0,0 +1,21 @@
+---
+subtitle: Hook-Layer und Polish-Quick-Wins
+versionsnatur: Polish-Patch
+---
+
+- DbViewer Volltext-Suche: optionaler FTS5-Index über die ganze Chat-Historie.
+  Wird beim ersten v1.4.8-Start asynchron im Hintergrund gebaut, Progress als
+  Toast. Lokale Page-Suche bleibt Default. Such-Eingaben werden als exakte
+  Wortfolge gematcht; mehrere Wörter werden nur gefunden, wenn sie zusammen
+  und in der Reihenfolge stehen. Wer rohe FTS5-MATCH-Syntax nutzen will, setzt
+  eigene Anführungszeichen um den Suchbegriff.
+- Custom-Theme-Files laden sich beim Speichern automatisch neu, wenn das Theme
+  aktiv ist. Kein Picker-Klick mehr nötig.
+- Retention-Sweep blockt nicht mehr den Framework-Thread. Der Mini-Hitch von
+  ~194ms pro Sweep ist weg.
+- Statusleiste rendert sauber bei Windows-Skalierung über 100%.
+- Receive-Suppressed-Tells-Routing wurde in diesem Cycle untersucht und auf
+  v1.5.x verschoben: wenn andere Plugins Tells via CheckMessageHandled
+  unterdrücken, überspringt FFXIVs Chat-Pipeline den RaptureLogModule-Resolver
+  und HellionChats Tab-Routing verliert den Tell-Partner. Der Fix liegt
+  architektonisch neben dem geplanten Ad-Block-Hook-Layer und kommt dort mit.

.github/forge-posts/v1.4.9.md

@@ -0,0 +1,37 @@
+---
+subtitle: Plugin-Load Render Polish
+versionsnatur: Performance-Patch
+---
+
+- First-Frame-HITCH unter 100 ms: der erste Render-Frame des Plugins liegt
+  jetzt bei ~76 ms Median (vorher ~127 ms), die Dalamud-Warnung
+  „UiBuilder(Hellion Chat) > 100ms" beim Plugin-Start ist damit weg.
+  Erreicht durch das Verlagern von sechs nicht-essentiellen Render-
+  Sektionen (Statusleiste, Kanalname-Chunks, Fenster-Bounds-Check,
+  Hinweis-Banner, Autocomplete, Input-Preview) auf den zweiten Frame.
+  Bei 60 fps sieht man die deferred-Sektionen ~17 ms später, was im
+  Atlas-Build-Fenster nach einem Reload unsichtbar bleibt.
+- Slash-Commands zentral registriert: /hellion, /hellionView,
+  /hellionSeString und /hellionDebugger werden jetzt im Plugin-Load zentral
+  registriert statt erst beim ersten Öffnen ihres Ziel-Fensters. Heißt: die
+  Befehle funktionieren ab dem ersten Tick, auch wenn das jeweilige Fenster
+  nie geöffnet wurde. Der „Einstellungen"-Button im Plugin-Manager hängt am
+  selben Pfad.
+- Plugin-Load-Diagnose-Logs als Tripwire: die Profiling-Logs für
+  MessageStore.Connect, MessageStore.Migrate, FilterAllTabs und den
+  Auto-Translate-Warmup bleiben auf Information-Level eingeschaltet. Falls
+  eine zukünftige Änderung die Lade-Zeit wieder über 100 ms drückt, taucht
+  der Mehrverbrauch direkt im /xllog auf, ohne dass jemand erst den
+  Debug-Filter einschalten muss.
+- ChatTwo-IPC-Kompatibilitäts-Layer: HellionChat spiegelt jetzt die
+  komplette ChatTwo-IPC-Surface (`GetChatInputState`,
+  `ChatInputStateChanged`, `Register`, `Unregister`, `Available`,
+  `Invoke`) zusätzlich zu unseren eigenen `HellionChat.*`-Gates unter
+  dem `ChatTwo.*`-Namensraum. Drittseitige Integrationen die nur auf
+  ChatTwo's IPC reagieren, etwa die Kontextmenü-Hooks von Artisan und
+  AllaganTools, funktionieren damit weiter ohne Code-Änderung auf
+  ihrer Seite. Die Conflict-Detection blockiert das parallele Laden
+  von ChatTwo, daher kein Namensraum-Konflikt im Live-Betrieb.
+- Migration v17 unverändert: kein Schema-Bump, kein Config-Migrations-
+  Aufwand. Nach dem Update läuft das Plugin gegen die bestehende
+  v17-Datenbank weiter.

.markdownlint.json

@@ -1,7 +1,9 @@
 {
     "MD007": { "indent": 4 },
     "MD013": false,
+    "MD024": { "siblings_only": true },
     "MD029": false,
     "MD033": false,
+    "MD036": false,
     "MD041": false
 }

HellionChat/AutoTellTabsService.cs

@@ -4,6 +4,7 @@ using System.Linq;
 using System.Threading;
 using Dalamud.Game.Text;
 using Dalamud.Game.Text.SeStringHandling;
+using Dalamud.Interface.ImGuiNotification;
 using HellionChat.Code;
 using HellionChat.GameFunctions.Types;
 using HellionChat.Resources;
@@ -20,13 +21,11 @@ internal sealed class AutoTellTabsService : IDisposable
     private readonly MessageStore _store;
     private readonly object _tempTabsLock = new();
 
-    // F2.1: lock-free counter mirrors Config.Tabs.Count(IsTempTab) so the
-    // hot-path getter doesn't contend with HandleTell on every render frame.
-    // Bumped from inside the existing mutation paths so it stays consistent
-    // with the underlying list — see SpawnTempTab, DropOldestTempTab, OnLogout
-    // and ResyncTempTabCounter (used by Plugin.cs snapshot-restore).
-    // TEST-MIRROR: ../../Hellion Build test/_Helpers/TempTabCounterTests.cs
-    private int _activeTempTabCount;
+    // Hard cap on pinned TempTabs so the sidebar doesn't inflate over years
+    // of usage. Separate pool from AutoTellTabsLimit (15) — pinned tabs live
+    // in their own bucket. A configurable cap is a vault-backlog anchor for
+    // a later cycle if tester feedback demands it.
+    internal const int MaxPinnedTempTabs = 5;
 
     private bool _initialized;
 
@@ -37,7 +36,14 @@ internal sealed class AutoTellTabsService : IDisposable
         _store = store;
     }
 
-    internal int ActiveTempTabCount => Volatile.Read(ref _activeTempTabCount);
+    // Derived from the tab list on read. Pin/Unpin/Promote/Logout simply
+    // mutate IsPinned or remove tabs — the count adapts automatically.
+    // Replaces the F2.1 Interlocked counter because the new pin-state
+    // transitions are cold-path and don't need lock-free reads.
+    internal int ActiveTempTabCount =>
+        Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInUnpinnedPool);
+
+    internal int PinnedTempTabCount => Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
 
     internal void Initialize()
     {
@@ -46,23 +52,51 @@ internal sealed class AutoTellTabsService : IDisposable
             return;
         }
 
-        // Seed the counter from the persisted Tabs list so a config that already
-        // contains TempTabs from a prior session starts in sync. Plugin.cs:168
-        // crash-recovery has already dropped TempTabs by the time we get here,
-        // so the snapshot reflects post-recovery reality.
-        Interlocked.Exchange(ref _activeTempTabCount, Plugin.Config.Tabs.Count(t => t.IsTempTab));
+        // Pinned tabs come out of the JSON with TellTarget set but
+        // CurrentChannel reset (NonSerialized). Without re-seeding, the chat
+        // input has no tell-target on the active pinned tab, and the
+        // game-side channel hook only repaints CurrentChannel once the user
+        // triggers a /tell or channel switch.
+        RehydratePinnedTabs();
 
         _messageManager.MessageProcessed += HandleTell;
         Plugin.ClientState.Logout += OnLogout;
         _initialized = true;
     }
 
-    // F2.1: callable from outside paths that mutate Config.Tabs directly
-    // (Plugin.cs snapshot-restore). Atomically re-pegs the counter to the
-    // live IsTempTab count.
-    internal void ResyncTempTabCounter()
+    private void RehydratePinnedTabs()
     {
-        Interlocked.Exchange(ref _activeTempTabCount, Plugin.Config.Tabs.Count(t => t.IsTempTab));
+        var pinned = Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
+        Plugin.LogProxy.Debug($"[Pin] Rehydrate scan: {pinned} pinned tab(s) found");
+
+        foreach (var tab in Plugin.Config.Tabs)
+        {
+            if (!TabLifecycleHelpers.IsInPinnedPool(tab))
+                continue;
+
+            if (tab.TellTarget is null || !tab.TellTarget.IsSet())
+            {
+                Plugin.LogProxy.Warning(
+                    $"[Pin] Pinned tab '{tab.Name}' has no usable TellTarget "
+                        + $"(Name={tab.TellTarget?.Name ?? "<null>"} World={tab.TellTarget?.World ?? 0}). "
+                        + "Chat input on this tab will be empty until the partner sends a tell or you /tell manually."
+                );
+                continue;
+            }
+
+            tab.Channel ??= InputChannel.Tell;
+            tab.CurrentChannel.Channel = InputChannel.Tell;
+            tab.CurrentChannel.TellTarget = tab.TellTarget.Clone();
+
+            // MessageList is NonSerialized so pinned tabs come back empty.
+            // Preload the same history window the spawn path uses so the user
+            // sees the recent conversation, not a blank tab.
+            PreloadHistory(tab, tab.TellTarget.Name, tab.TellTarget.World, Guid.Empty);
+
+            Plugin.LogProxy.Debug(
+                $"[Pin] Rehydrated '{tab.Name}' -> Tell target {tab.TellTarget.Name}@{tab.TellTarget.World}"
+            );
+        }
     }
 
     public void Dispose()
@@ -96,7 +130,7 @@ internal sealed class AutoTellTabsService : IDisposable
         if (partner == null)
         {
             // Diagnostics: helps detect regressions (FFXIV payload changes, new edge cases)
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 $"[AutoTellTabs] Could not extract tell partner. type={message.Code.Type}, "
                     + $"senderChunks={message.Sender.Count}, contentChunks={message.Content.Count}, "
                     + $"senderSourcePayloads={message.SenderSource?.Payloads?.Count ?? 0}, "
@@ -110,7 +144,23 @@ internal sealed class AutoTellTabsService : IDisposable
             var existing = FindTempTab(partner.Value.Name, partner.Value.World);
             if (existing != null)
             {
-                // Already routed via MessageManager pipeline
+                // Already routed via MessageManager pipeline. Repair the
+                // tell-target if the fallback hit a pinned tab whose
+                // TellTarget didn't survive a previous round-trip — keeps
+                // FindTempTab fast on the next message.
+                if (
+                    existing.IsPinned
+                    && (existing.TellTarget is null || !existing.TellTarget.IsSet())
+                )
+                {
+                    existing.TellTarget = new TellTarget(
+                        partner.Value.Name,
+                        partner.Value.World,
+                        0,
+                        TellReason.Direct
+                    );
+                    _plugin.SaveConfig();
+                }
                 return;
             }
 
@@ -160,22 +210,35 @@ internal sealed class AutoTellTabsService : IDisposable
         return null;
     }
 
-    private Tab? FindTempTab(string name, uint world)
+    private static Tab? FindTempTab(string name, uint world)
     {
-        return Plugin.Config.Tabs.FirstOrDefault(t =>
+        var byTarget = Plugin.Config.Tabs.FirstOrDefault(t =>
             t.IsTempTab
             && t.TellTarget != null
             && string.Equals(t.TellTarget.Name, name, StringComparison.OrdinalIgnoreCase)
             && t.TellTarget.World == world
         );
+        if (byTarget != null)
+            return byTarget;
+
+        // Fallback: match by tab name. Pinned tabs are named via
+        // FormatTabName(player, world) at spawn time, so the name is a
+        // stable secondary key when TellTarget didn't survive a save/load
+        // (older configs from a renamed pin, malformed migrations, etc.).
+        var expectedName = FormatTabName(name, world);
+        return Plugin.Config.Tabs.FirstOrDefault(t =>
+            t.IsTempTab && string.Equals(t.Name, expectedName, StringComparison.OrdinalIgnoreCase)
+        );
     }
 
-    private void DropOldestTempTab()
+    internal void DropOldestTempTab()
     {
-        // Prioritize greeted tabs for drop; within each bucket, drop by oldest LastActivity
+        // Pinned tabs live in their own bucket (MaxPinnedTempTabs) and are
+        // never drop candidates. They leave the bucket only via Unpin or
+        // PromoteToPermanent.
         var victim = Plugin
             .Config.Tabs.Select((tab, idx) => (Tab: tab, Index: idx))
-            .Where(t => t.Tab.IsTempTab)
+            .Where(t => TabLifecycleHelpers.IsInUnpinnedPool(t.Tab))
             .OrderByDescending(t => t.Tab.IsGreeted)
             .ThenBy(t => t.Tab.LastActivity)
             .FirstOrDefault();
@@ -198,7 +261,6 @@ internal sealed class AutoTellTabsService : IDisposable
         }
 
         Plugin.Config.Tabs.RemoveAt(victim.Index);
-        Interlocked.Decrement(ref _activeTempTabCount);
 
         // Re-anchor active tab to avoid silent switch when tab is dropped
         if (victim.Index <= _plugin.LastTab)
@@ -223,7 +285,6 @@ internal sealed class AutoTellTabsService : IDisposable
         }
 
         Plugin.Config.Tabs.Add(tab);
-        Interlocked.Increment(ref _activeTempTabCount);
     }
 
     private static Tab BuildTempTab(string playerName, uint worldRowId)
@@ -300,7 +361,7 @@ internal sealed class AutoTellTabsService : IDisposable
         catch (Exception ex)
         {
             // Non-fatal: tab still spawns with visible error notice instead of silent history loss
-            Plugin.Log.Error(ex, "[AutoTellTabs] History preload failed");
+            Plugin.LogProxy.Error(ex, "[AutoTellTabs] History preload failed");
             tab.Messages.AddPrune(
                 MakeSystemMarker(HellionStrings.AutoTellTabs_HistoryLoadError),
                 MessageManager.MessageDisplayLimit
@@ -354,14 +415,16 @@ internal sealed class AutoTellTabsService : IDisposable
     {
         lock (_tempTabsLock)
         {
-            // Snapshot active tab index before mutating list
+            // Pinned TempTabs must survive char-switch — that's the whole point
+            // of pinning. Only unpinned ones get stripped.
             var lastIndex = _plugin.LastTab;
             var lastIndexValid = lastIndex >= 0 && lastIndex < Plugin.Config.Tabs.Count;
-            var currentWasTempTab = lastIndexValid && Plugin.Config.Tabs[lastIndex].IsTempTab;
+            var currentWasUnpinnedTempTab =
+                lastIndexValid
+                && TabLifecycleHelpers.IsInUnpinnedPool(Plugin.Config.Tabs[lastIndex]);
 
-            // Clean up pop-out windows before removing temp tabs
             var poppedTempTabIds = Plugin
-                .Config.Tabs.Where(t => t.IsTempTab && t.PopOut)
+                .Config.Tabs.Where(t => TabLifecycleHelpers.IsInUnpinnedPool(t) && t.PopOut)
                 .Select(t => t.Identifier)
                 .ToList();
             if (poppedTempTabIds.Count > 0)
@@ -377,15 +440,78 @@ internal sealed class AutoTellTabsService : IDisposable
                 }
             }
 
-            var removed = Plugin.Config.Tabs.RemoveAll(t => t.IsTempTab);
-            Interlocked.Add(ref _activeTempTabCount, -removed);
+            Plugin.Config.Tabs.RemoveAll(TabLifecycleHelpers.IsInUnpinnedPool);
 
-            // Force switch to tab 0 if active tab was temp or index is now out of range
+            // Force switch to tab 0 if active tab was an unpinned temp tab or
+            // index is now out of range. Pinned tabs survive — no switch needed.
             var stillValid = lastIndex >= 0 && lastIndex < Plugin.Config.Tabs.Count;
-            if (currentWasTempTab || !stillValid)
+            if (currentWasUnpinnedTempTab || !stillValid)
             {
                 _plugin.WantedTab = 0;
             }
         }
     }
+
+    internal bool TryPin(Tab tab)
+    {
+        if (!tab.IsTempTab || tab.IsPinned)
+        {
+            Plugin.LogProxy.Debug(
+                $"[Pin] TryPin skipped: IsTempTab={tab.IsTempTab} IsPinned={tab.IsPinned}"
+            );
+            return false;
+        }
+
+        if (PinnedTempTabCount >= MaxPinnedTempTabs)
+        {
+            WrapperUtil.AddNotification(
+                string.Format(HellionStrings.PinTab_LimitReached, MaxPinnedTempTabs),
+                NotificationType.Warning
+            );
+            return false;
+        }
+
+        tab.IsPinned = true;
+        Plugin.LogProxy.Debug(
+            $"[Pin] Pinned tab '{tab.Name}' target={tab.TellTarget?.Name}@{tab.TellTarget?.World}"
+        );
+        _plugin.SaveConfig();
+        return true;
+    }
+
+    internal void Unpin(Tab tab)
+    {
+        if (!tab.IsPinned)
+        {
+            return;
+        }
+
+        // If the unpinned pool is already full, dropping the oldest before
+        // flipping the flag avoids counting the just-unpinned tab as a drop
+        // candidate.
+        if (ActiveTempTabCount >= Plugin.Config.AutoTellTabsLimit)
+        {
+            DropOldestTempTab();
+        }
+
+        tab.IsPinned = false;
+        Plugin.LogProxy.Debug("[Pin] Unpinned tab '{tab.Name}'");
+        _plugin.SaveConfig();
+    }
+
+    internal void PromoteToPermanent(Tab tab)
+    {
+        if (!tab.IsTempTab)
+        {
+            return;
+        }
+
+        tab.IsTempTab = false;
+        tab.IsPinned = false;
+        tab.TellTarget = TellTarget.Empty();
+        Plugin.LogProxy.Debug(
+            $"[Pin] Promoted tab '{tab.Name}' to permanent (tell-binding dropped)"
+        );
+        _plugin.SaveConfig();
+    }
 }

HellionChat/Branding/BrandingLinks.cs

@@ -1,3 +1,6 @@
+using System.Runtime.CompilerServices;
+using HellionChat.Util;
+
 namespace HellionChat.Branding;
 
 // Centralised — a future invite/URL rotation only touches this file.
@@ -9,4 +12,22 @@ internal static class BrandingLinks
         "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat";
     public const string HellionForgeWebsite = "https://hellion-forge.cloud";
     public const string HellionMediaWebsite = "https://hellion-media.de/de";
+
+    // CA2255 warns against [ModuleInitializer] in library code, but Dalamud
+    // loads the plugin DLL directly so the module-init pass is the right hook
+    // for a one-shot URL sanity check at plugin load.
+#pragma warning disable CA2255
+    [ModuleInitializer]
+#pragma warning restore CA2255
+    internal static void ValidateUrls()
+    {
+        UrlValidation.ValidateAll(
+            nameof(BrandingLinks),
+            HellionForgeDiscordInvite,
+            HellionForgeGitea,
+            HellionChatRepo,
+            HellionForgeWebsite,
+            HellionMediaWebsite
+        );
+    }
 }

HellionChat/Commands.cs

@@ -52,7 +52,7 @@ internal sealed class Commands : IDisposable
     {
         if (!Registered.TryGetValue(command, out var wrapper))
         {
-            Plugin.Log.Warning($"Missing registration for command {command}");
+            Plugin.LogProxy.Warning($"Missing registration for command {command}");
             return;
         }
 
@@ -62,7 +62,7 @@ internal sealed class Commands : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, $"Error while executing command {command}");
+            Plugin.LogProxy.Error(ex, $"Error while executing command {command}");
         }
     }
 }

HellionChat/Configuration.cs

@@ -34,7 +34,7 @@ public class ConfigKeyBind
 [Serializable]
 public class Configuration : IPluginConfiguration
 {
-    private const int LatestVersion = 16;
+    private const int LatestVersion = 17;
 
     public int Version { get; set; } = LatestVersion;
 
@@ -83,7 +83,7 @@ public class Configuration : IPluginConfiguration
         // silently, like before.
         if (!Enum.IsDefined(typeof(ChatType), type) && _warnedUnknownChannels.Add(type))
         {
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 "PrivacyFilter: unrecognised ChatType {Type} — falling back to PrivacyPersistUnknownChannels={Persist}.",
                 type,
                 PrivacyPersistUnknownChannels
@@ -102,10 +102,22 @@ public class Configuration : IPluginConfiguration
     public bool FirstRunCompleted;
     public bool UseHellionFont = true;
     public bool ShowHonorificTitleInHeader = true;
+
+    // v1.4.7 opt-in: renders the Honorific glow outline when the title carries
+    // a Glow colour. Default OFF — keeps v1.4.6 visuals untouched for users
+    // who don't care, and dodges the per-frame DrawList overhead on low-end
+    // hardware. Gradient (Color3 / GradientColourSet) is parsed but rendered
+    // as the primary Color until a later cycle ports the animation.
+    public bool ShowHonorificGlow;
     public bool EnableAutoTellTabs = true;
     public int AutoTellTabsLimit = 15;
     public bool AutoTellTabsCompactDisplay;
     public int AutoTellTabsHistoryPreload = 20;
+
+    // Sidebar width in pixels. Default 44 mirrors the icon-only layout from
+    // v1.2.0; users can widen up to 160 to fit a section-header line like
+    // "Active Tells (3)" without truncation.
+    public int SidebarWidth = 44;
     public bool AutoTellTabsShowGreetedToggle;
     public bool SeenPopOutInputHint;
     public bool PopOutInputEnabled = true;
@@ -278,16 +290,20 @@ public class Configuration : IPluginConfiguration
         ColorSelectedInputChannelButton = other.ColorSelectedInputChannelButton;
 
         // Keep live temp tabs alive across UpdateFrom — a settings save must
-        // not destroy open tell conversations. For persistent tabs, capture
-        // the live MessageList and LastSendUnread by Identifier before the
-        // replace and restore them onto the freshly cloned tabs; new tabs
-        // get an empty MessageList, deleted tabs lose their history (intended).
-        var liveTempTabs = Tabs.Where(t => t.IsTempTab).ToList();
-        var livePersistentSession = Tabs.Where(t => !t.IsTempTab)
-            .ToDictionary(t => t.Identifier, t => (t.Messages, t.LastSendUnread));
+        // not destroy open tell conversations. Pinned TempTabs are persistent
+        // and come through `other` like regular tabs; unpinned TempTabs are
+        // session-only and held from the local state. For persistent tabs
+        // (incl. pinned), capture live runtime state by Identifier and restore
+        // it onto the freshly cloned tabs — CurrentChannel is critical because
+        // the user may have switched channel in-game between settings-open
+        // and settings-save, and we'd otherwise overwrite that with the
+        // settings-time snapshot.
+        var liveUnpinnedTempTabs = Tabs.Where(TabLifecycleHelpers.IsInUnpinnedPool).ToList();
+        var livePersistentSession = Tabs.Where(t => !TabLifecycleHelpers.IsInUnpinnedPool(t))
+            .ToDictionary(t => t.Identifier, t => (t.Messages, t.LastSendUnread, t.CurrentChannel));
 
         Tabs = other
-            .Tabs.Where(t => !t.IsTempTab)
+            .Tabs.Where(t => !t.IsTempTab || t.IsPinned)
             .Select(t =>
             {
                 var clone = t.Clone();
@@ -295,11 +311,12 @@ public class Configuration : IPluginConfiguration
                 {
                     clone.Messages = live.Messages;
                     clone.LastSendUnread = live.LastSendUnread;
+                    clone.CurrentChannel = live.CurrentChannel;
                 }
                 return clone;
             })
             .ToList();
-        Tabs.AddRange(liveTempTabs);
+        Tabs.AddRange(liveUnpinnedTempTabs);
 
         ChatTabForward = other.ChatTabForward;
         ChatTabBackward = other.ChatTabBackward;
@@ -319,6 +336,7 @@ public class Configuration : IPluginConfiguration
         FirstRunCompleted = other.FirstRunCompleted;
         UseHellionFont = other.UseHellionFont;
         ShowHonorificTitleInHeader = other.ShowHonorificTitleInHeader;
+        ShowHonorificGlow = other.ShowHonorificGlow;
 
         // v1.1.0 theme engine fields
         Theme = other.Theme;
@@ -330,6 +348,7 @@ public class Configuration : IPluginConfiguration
         AutoTellTabsLimit = other.AutoTellTabsLimit;
         AutoTellTabsCompactDisplay = other.AutoTellTabsCompactDisplay;
         AutoTellTabsHistoryPreload = other.AutoTellTabsHistoryPreload;
+        SidebarWidth = other.SidebarWidth;
         AutoTellTabsShowGreetedToggle = other.AutoTellTabsShowGreetedToggle;
 
         SeenPopOutInputHint = other.SeenPopOutInputHint;
@@ -404,6 +423,11 @@ public class Tab
     public bool HideWhenInactive;
 
     public bool IsTempTab;
+
+    // Pinned TempTabs survive plugin reload and logout — tester feedback from
+    // Jin (v1.4.7). Pinned tabs live in their own pool (MaxPinnedTempTabs)
+    // separate from the AutoTellTabsLimit bucket.
+    public bool IsPinned;
     public bool AllSenderMessages;
     public TellTarget TellTarget = TellTarget.Empty();
 
@@ -500,7 +524,7 @@ public class Tab
             Opacity = Opacity,
             Identifier = Identifier,
             InputDisabled = InputDisabled,
-            CurrentChannel = CurrentChannel,
+            CurrentChannel = CurrentChannel.Clone(),
             CanMove = CanMove,
             CanResize = CanResize,
             IndependentHide = IndependentHide,
@@ -511,8 +535,9 @@ public class Tab
             HideInBattle = HideInBattle,
             HideWhenInactive = HideWhenInactive,
             IsTempTab = IsTempTab,
+            IsPinned = IsPinned,
             AllSenderMessages = AllSenderMessages,
-            TellTarget = TellTarget.From(TellTarget),
+            TellTarget = TellTarget.Clone(),
             IsGreeted = IsGreeted,
         };
     }
@@ -690,6 +715,29 @@ public class UsedChannel
     {
         Channel = channel;
     }
+
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Deep-clone the UsedChannel so Tab.Clone() no longer shares
+    //   channel state (incl. TellTarget) with its origin Tab. Previously
+    //   a reference copy: PopOut and Temp tabs mutated each other.
+    // - Name is intentionally a reference copy (matches upstream); it
+    //   gets reassigned on every channel switch anyway.
+    // TEST-MIRROR: ../../Hellion Build test/_Helpers/UsedChannelCloneTests.cs
+    // ---------------------------------------------------------------
+    public UsedChannel Clone()
+    {
+        return new UsedChannel
+        {
+            Channel = Channel,
+            Name = Name,
+            TellTarget = TellTarget?.Clone(),
+
+            UseTempChannel = UseTempChannel,
+            TempChannel = TempChannel,
+            TempTellTarget = TempTellTarget?.Clone(),
+        };
+    }
 }
 
 [Serializable]

HellionChat/EmoteCache.cs

@@ -101,7 +101,10 @@ public static class EmoteCache
                 t =>
                 {
                     if (t.IsFaulted)
-                        Plugin.Log.Error(t.Exception!, $"EmoteCache load failed for {emoteCode}");
+                        Plugin.LogProxy.Error(
+                            t.Exception!,
+                            $"EmoteCache load failed for {emoteCode}"
+                        );
                 },
                 TaskScheduler.Default
             )
@@ -158,7 +161,7 @@ public static class EmoteCache
         {
             // Reset to Unloaded so a later trigger can retry without a plugin reload.
             State = LoadingState.Unloaded;
-            Plugin.Log.Error(ex, "BetterTTV cache wasn't initialized");
+            Plugin.LogProxy.Error(ex, "BetterTTV cache wasn't initialized");
         }
     }
 
@@ -214,7 +217,7 @@ public static class EmoteCache
         }
         catch
         {
-            Plugin.Log.Error("Failed to convert");
+            Plugin.LogProxy.Error("Failed to convert");
             return null;
         }
     }
@@ -304,7 +307,7 @@ public static class EmoteCache
             catch (Exception ex)
             {
                 Failed = true;
-                Plugin.Log.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
+                Plugin.LogProxy.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
             }
         }
 
@@ -408,7 +411,7 @@ public static class EmoteCache
             catch (Exception ex)
             {
                 Failed = true;
-                Plugin.Log.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
+                Plugin.LogProxy.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
             }
         }
     }

HellionChat/FontManager.cs

@@ -44,16 +44,26 @@ public class FontManager
     // Hellion font bytes (Exo 2, OFL-1.1); lazily loaded from manifest resources
     private static byte[]? HellionFontBytes;
 
-    private static byte[] GetHellionFontBytes()
+    // Returns null when the embedded font resource is missing. Should never
+    // happen on a signed release build, but a broken csproj or hand-rolled
+    // dev build can land here. Caller falls back to the system font path so
+    // the plugin still loads instead of crashing the whole UiBuilder.
+    private static byte[]? TryGetHellionFontBytes()
     {
         if (HellionFontBytes is not null)
             return HellionFontBytes;
 
-        using var stream =
-            typeof(FontManager).Assembly.GetManifestResourceStream("HellionFont.ttf")
-            ?? throw new FileNotFoundException(
-                "Hellion font resource not embedded in the assembly"
+        using var stream = typeof(FontManager).Assembly.GetManifestResourceStream(
+            "HellionFont.ttf"
+        );
+        if (stream is null)
+        {
+            Plugin.LogProxy.Warning(
+                "Hellion font resource missing — falling back to system default font."
             );
+            return null;
+        }
+
         using var ms = new MemoryStream();
         stream.CopyTo(ms);
         HellionFontBytes = ms.ToArray();
@@ -146,8 +156,11 @@ public class FontManager
                     ? Plugin.Config.FontSizeV2
                     : Plugin.Config.GlobalFontV2.SizePt;
                 var config = new SafeFontConfig { SizePt = basePt, GlyphRanges = Ranges };
-                config.MergeFont = Plugin.Config.UseHellionFont
-                    ? tk.AddFontFromMemory(GetHellionFontBytes(), config, "Hellion-Exo2")
+                // F10.2: if the embedded font is missing, drop to the system font
+                // path rather than letting the UiBuilder throw.
+                var hellionBytes = Plugin.Config.UseHellionFont ? TryGetHellionFontBytes() : null;
+                config.MergeFont = hellionBytes is not null
+                    ? tk.AddFontFromMemory(hellionBytes, config, "Hellion-Exo2")
                     : AddFontWithFallback(tk, Plugin.Config.GlobalFontV2.FontId, config, "global");
 
                 config.SizePt = Plugin.Config.JapaneseFontV2.SizePt;
@@ -213,11 +226,21 @@ public class FontManager
             return fontId.AddToBuildToolkit(tk, config);
         }
         catch (Exception e)
-            when (e is FileNotFoundException or DirectoryNotFoundException or IOException)
+            when (e
+                    is FileNotFoundException
+                        or DirectoryNotFoundException
+                        or IOException
+                        or InvalidOperationException
+                        or ArgumentException
+            )
         {
-            Plugin.Log.Warning(
+            // Atlas-toolkit throws span IO and validation failures; routing the
+            // wider set through the fallback keeps a corrupt font config from
+            // taking down the whole atlas build.
+            Plugin.LogProxy.Warning(
                 e,
-                $"Configured {slot} font unavailable, falling back to NotoSansCjkRegular"
+                $"Configured {slot} font failed to load ({e.GetType().Name}), "
+                    + "falling back to NotoSansCjkRegular"
             );
             var fallback = new DalamudAssetFontAndFamilyId(DalamudAsset.NotoSansCjkRegular);
             return fallback.AddToBuildToolkit(tk, config);

HellionChat/GameFunctions/Chat.cs

@@ -236,7 +236,7 @@ internal sealed unsafe class Chat : IDisposable
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Error in chat Activated event");
+                    Plugin.LogProxy.Error(ex, "Error in chat Activated event");
                 }
             });
         }
@@ -266,7 +266,7 @@ internal sealed unsafe class Chat : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in chat Activated event");
+            Plugin.LogProxy.Error(ex, "Error in chat Activated event");
         }
 
         return 1; // Prevent vanilla chat log from gaining focus
@@ -299,7 +299,7 @@ internal sealed unsafe class Chat : IDisposable
         {
             playerName = SeString.Parse(agent->TellPlayerName).TextValue;
             worldId = agent->TellWorldId;
-            Plugin.Log.Debug($"Detected tell target '[redacted]'@{worldId}");
+            Plugin.LogProxy.Debug($"Detected tell target '[redacted]'@{worldId}");
         }
 
         Plugin.CurrentTab.CurrentChannel = new UsedChannel
@@ -358,7 +358,7 @@ internal sealed unsafe class Chat : IDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in chat Activated event");
+                Plugin.LogProxy.Error(ex, "Error in chat Activated event");
             }
         }
 
@@ -408,7 +408,7 @@ internal sealed unsafe class Chat : IDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in chat Activated event");
+                Plugin.LogProxy.Error(ex, "Error in chat Activated event");
             }
         }
 
@@ -423,16 +423,24 @@ internal sealed unsafe class Chat : IDisposable
         );
     }
 
-    // Check if channel is valid (non-linkshell or existing linkshell)
-    internal static bool ValidAnyLinkshell(InputChannel channel)
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Renamed ValidAnyLinkshell -> IsChannelOrExistingLinkshell. The
+    //   name now states intent: returns true for any non-linkshell
+    //   channel, or a linkshell index that actually exists.
+    // ---------------------------------------------------------------
+    internal static bool IsChannelOrExistingLinkshell(InputChannel channel)
     {
         var idx = channel.LinkshellIndex();
         if (idx == uint.MaxValue || channel.IsExtraChatLinkshell())
             return true;
-        if (channel.IsLinkshell() && ValidLinkshell(idx))
-            return true;
-        if (channel.IsCrossLinkshell() && ValidCrossLinkshell(idx))
-            return true;
+
+        if (channel.IsLinkshell())
+            return ValidLinkshell(idx);
+
+        if (channel.IsCrossLinkshell())
+            return ValidCrossLinkshell(idx);
+
         return false;
     }
 
@@ -531,12 +539,17 @@ internal sealed unsafe class Chat : IDisposable
         if (idx == uint.MaxValue)
             idx = 0;
 
-        if (!ValidAnyLinkshell(channel))
-            return;
+        // ---------------------------------------------------------------
+        // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+        // - Wrap ChangeChatChannel in the validity check instead of
+        //   early-returning. The previous early return skipped Dtor and
+        //   leaked the native Utf8String allocated a few lines above.
+        // ---------------------------------------------------------------
+        if (IsChannelOrExistingLinkshell(channel))
+            RaptureShellModule
+                .Instance()
+                ->ChangeChatChannel(tellTarget != null ? 17 : (int)channel, idx, target, true);
 
-        RaptureShellModule
-            .Instance()
-            ->ChangeChatChannel(tellTarget != null ? 17 : (int)channel, idx, target, true);
         target->Dtor(true);
     }
 
@@ -611,7 +624,7 @@ internal sealed unsafe class Chat : IDisposable
         if (contentId == 0)
         {
             Plugin.ChatGui.PrintError(Language.Chat_SendTell_Error);
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 "Tried to send a tell with ContentId being 0, sorry this is an internal error."
             );
             return;

HellionChat/GameFunctions/GameFunctions.cs

@@ -215,7 +215,7 @@ internal unsafe class GameFunctions : IDisposable
         }
         catch (Exception e)
         {
-            Plugin.Log.Warning(e, "Unable to open adventurer plate");
+            Plugin.LogProxy.Warning(e, "Unable to open adventurer plate");
             return false;
         }
     }
@@ -255,7 +255,7 @@ internal unsafe class GameFunctions : IDisposable
         var byteCount = System.Text.Encoding.UTF8.GetByteCount(ReplacementName);
         if (byteCount >= PlaceholderBufferSize)
         {
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 $"Replacement name too long for placeholder buffer ({byteCount} bytes >= {PlaceholderBufferSize}); falling back to original."
             );
             ReplacementName = null;

HellionChat/GameFunctions/KeybindManager.cs

@@ -507,7 +507,7 @@ internal unsafe class KeybindManager : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in chat Activated event");
+            Plugin.LogProxy.Error(ex, "Error in chat Activated event");
         }
     }
 

HellionChat/GameFunctions/Types/TellTarget.cs

@@ -40,5 +40,11 @@ public class TellTarget
 
     public static TellTarget Empty() => new(string.Empty, 0, 0, TellReason.Direct);
 
-    public static TellTarget From(TellTarget t) => new(t.Name, t.World, t.ContentId, t.Reason);
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Replaced static From(t) with an instance-style Clone() so call
+    //   sites read like a copy operation, not a factory.
+    // TEST-MIRROR: ../../../Hellion Build test/_Helpers/TellTargetCloneTests.cs
+    // ---------------------------------------------------------------
+    public TellTarget Clone() => new(Name, World, ContentId, Reason);
 }

HellionChat/HellionChat.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Dalamud.NET.Sdk/15.0.0">
     <PropertyGroup>
         <!-- Independent versioning; see yaml changelog for upstream Chat 2 base -->
-        <Version>1.4.4</Version>
+        <Version>1.4.9</Version>
         <ImplicitUsings>enable</ImplicitUsings>
         <Nullable>enable</Nullable>
         <!-- Use lock file to pin exact versions -->

HellionChat/HellionChat.yaml

@@ -35,49 +35,157 @@ tags:
     - Replacement
     - Privacy
 changelog: |-
-    **v1.4.4 — Threading and IPC safety polish (2026-05-12)**
+    **v1.4.9 — Plugin-Load Render Polish (2026-05-15)**
 
-    Fifth sub-patch of the v1.4.x polish-sweep series. Threading
-    assumptions are documented per-method, a hot-path lock falls
-    away, and the privacy filter speaks up when an unknown ChatType
-    shows up.
+    Tenth sub-patch of the v1.4.x polish-sweep series. First-frame
+    render cost drops from ~127 ms median to ~76 ms median,
+    comfortably under Dalamud's 100 ms HITCH warning threshold.
 
-    - AutoTellTabs hot-path getter uses an Interlocked counter
-      instead of taking the lock on every read
-    - Honorific integration: per-method threading banners, plus
-      Warning-level log on unsubscribe failure
-    - AutoTranslate warmup thread marked IsBackground so plugin
-      unload doesn't wait for it
-    - PrivacyFilter logs once per unknown ChatType so a future
-      patch's added channel doesn't drop off the radar
-    - New installs persist unknown channels by default; existing
-      configs keep their explicit choice
+    - First-frame defer: six non-essential rendering sections inside
+      ChatLogWindow skip their first Draw and run one frame later
+      (bottom status bar, channel-name SeString chunks, window bounds
+      check, v0.6.1 hint banner, autocomplete, input-preview
+      calculation). User-visible delay is ~17 ms at 60 fps, hidden
+      inside the post-reload font-atlas build window.
+    - Slash-command centralisation: /hellion, /hellionView,
+      /hellionSeString and /hellionDebugger are registered in
+      LoadAsync instead of inside the corresponding window
+      constructors. The plugin-manager Open and configuration buttons
+      hang on the same path.
+    - Plugin-load profiling logs stay on at Information level
+      (MessageStore connect/migrate, FilterAllTabs, auto-translate
+      warmup) as a regression tripwire — a future load past 100 ms
+      will show up in /xllog without a Debug filter.
+    - ChatTwo IPC compatibility layer: HellionChat now mirrors
+      ChatTwo's full IPC surface (GetChatInputState,
+      ChatInputStateChanged, Register, Unregister, Available,
+      Invoke) under the ChatTwo.* namespace in addition to our
+      existing HellionChat.* provider gates. Third-party
+      integrations that historically only subscribe to ChatTwo's
+      IPC — for example Artisan's and AllaganTools' context-menu
+      hooks — keep working without requiring a code change on their
+      side. Conflict detection prevents ChatTwo from loading in
+      parallel with HellionChat, so there is no slot-collision risk
+      at runtime.
+    - Migration v17 stays (no schema bump).
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
 
     ---
 
-    **v1.4.3 — Faster plugin load + new repo (2026-05-08)**
+    **v1.4.8 — Hook-Layer and Polish Quick-Wins (2026-05-14)**
 
-    Heavy startup work (migrations, hooks, windows) now runs async so
-    Dalamud's UI stays responsive during load. Load time is comparable
-    to v1.4.2 — this is the foundation for v1.4.4 optimisations.
+    Ninth sub-patch of the v1.4.x polish-sweep series. Hook-layer
+    cluster (DbViewer FTS5 full-text search, ad-block foundation
+    investigation) plus three polish quick-wins.
 
-    - Two-phase async load via IAsyncDalamudPlugin
-    - Schema-gate replaces the v9→v16 migration chain; old configs
-      require a v1.4.2 install first
-    - AutoTranslate cache loads on first use instead of every startup
-    - Custom font (Hellion-Exo2) appears with a brief pop after load
-    - Repo moved to gitea.hellion-forge.cloud — update your custom-repo URL
+    - DbViewer full-text search: optional FTS5 index across the full
+      chat history. Built asynchronously on first load after the
+      update with a progress toast. The local page-filter remains
+      available as the default mode. Queries match as exact phrases
+      -- multi-word terms must appear together in order; advanced
+      users can opt into raw FTS5 MATCH syntax by wrapping their own
+      double-quotes.
+    - Custom theme files now auto-reload when edited while the theme
+      is active -- no need to re-click the theme in the picker.
+    - Retention sweep no longer blocks the framework thread, removing
+      the ~194ms mini-hitch per sweep.
+    - Status bar renders correctly at Windows display scaling > 100%.
+    - Receive-suppressed-tells routing investigated this cycle and
+      postponed to v1.5.x: when other plugins suppress tells via
+      CheckMessageHandled, the FFXIV chat pipeline skips the
+      RaptureLogModule.AddMsgSourceEntry path so HellionChat's
+      ContentIdResolverHook does not fire and tell-partner
+      identification breaks. The fix belongs next to the planned
+      ad-block hook layer where the same patch surface comes up.
+    - Internal: messages.Id is declared BLOB but stored as TEXT
+      (Microsoft.Data.Sqlite Guid binding). FTS bulk insert and
+      LoadByGuids match the TEXT storage form on both sides.
+      Migration v17 stays (no schema bump).
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
 
     ---
 
-    **v1.4.2 — Smoother frames in the chat log**
+    **v1.4.7 — Backlog Cleanup and Mid-Features (2026-05-13)**
 
-    Per-frame allocations in the chat-log render path eliminated.
-    2–5% frame-time recovery in typical scenes, more on pop-out-heavy setups.
+    Eighth sub-patch of the v1.4.x polish-sweep series. First
+    user-visible feature bundle since v1.4.5 — pinned tell tabs that
+    survive relog, opt-in Honorific glow rendering, and a configurable
+    sidebar.
 
-    - Card-mode: theme/border invariants hoisted out of the per-message loop
-    - Auto-tell tab tint and icon cached per tab
-    - Status bar aggregation runs on ~1% of frames instead of every frame
+    - TempTell Pin: right-click a TempTell tab in the sidebar to pin
+      it. Pinned tabs survive relog, keep their conversation history
+      (loaded on demand from the message store), and stay bound to
+      the same /tell partner. Hard cap of 5 pinned tabs in a pool
+      separate from the 15-tab auto-tell pool — total ceiling is 20
+      tabs. New 'Pinned' section in the sidebar with its own divider
+      header
+    - Honorific Glow outline now renders when the title carries a
+      Glow colour. Opt-in via Settings → Integrations → 'Render glow
+      outlines (Honorific)' (default off, dodges the per-frame
+      DrawList overhead on low-end hardware). Gradient (Color3 /
+      GradientColourSet / Wave / Pulse) is parsed but rendered
+      statically — a later cycle will port the full animation
+    - Sidebar width is now configurable in Theme & Layout (range
+      44–160 px). Default stays icon-only; widen to fit section
+      headers like 'Active Tells (3)' without truncation
+    - Settings Save no longer pops the chat input back to /tell with
+      a pinned partner — Configuration.UpdateFrom now preserves the
+      runtime CurrentChannel across the persistent-tab merge, and
+      TabSwitched deep-clones the seeded channel instead of sharing
+      the previous tab's UsedChannel
+    - Util/ImGuiUtil.cs DrawArrows IconButton id now uses
+      (id + 1).ToString() instead of the operator-precedence quirk
+      id + 1.ToString() — generated IDs stay numerically stable
+    - Internal: IPluginLogProxy indirection over Dalamud's IPluginLog
+      routes all ~91 Plugin.Log call sites through a testable proxy.
+      MessageStore.Migrate0 can now run in xUnit without loading
+      Dalamud.dll, closing the gap F12.1 left in v1.4.6
+    - Internal: TempTab counter switched from an Interlocked cached
+      field to a derived Tabs.Count(predicate) — pin-state transitions
+      are cold-path and don't need lock-free reads
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+    ---
+
+    **v1.4.6 — Code Hygiene and Refactor (2026-05-12)**
+
+    Maintenance patch. No user-visible behaviour changes; tightens the
+    development feedback loop, fixes two upstream-inherited bugs, and
+    prepares the code for the v1.4.7 backlog cleanup.
+
+    - preflight.sh gains a csharpier reflow check and a markdownlint
+      pass so style drift and markdown violations are caught at the
+      pre-push gate
+    - FontManager fallback catches the full set of atlas-toolkit
+      throws (IO, InvalidOperation, ArgumentException) — a corrupt
+      font config no longer takes down the whole atlas build
+    - BrandingLinks and IntegrationLinks URLs validated on plugin
+      load — a typo in a future URL rotation now throws at startup
+    - Cherry-picked from ChatTwo upstream f35b7d3: Chat.SetChannel
+      no longer leaks the native Utf8String when the linkshell check
+      rejects the channel
+    - Cherry-picked from ChatTwo upstream f35b7d3: Tab.Clone now
+      deep-clones UsedChannel and TellTarget — PopOut and Temp tabs
+      no longer mutate each other's channel state
+    - Active-tab underline scales with DPI and rounds to physical
+      pixels for crisp rendering above 100% scaling
+    - IconButton width parameter no longer subtracts HUD-scaled
+      padding from a raw int (measured width passes through verbatim)
+    - Internal: HellionStyle ChildBgAlpha extracted to a testable
+      helper; Plugin.SaveConfig clones only the temp tabs;
+      SettingsOverview caches the draw-list per frame;
+      Dalamud.Utility.Util surface routed through an IPlatformUtil
+      indirection (MessageStore IsWine probe is now testable in
+      isolation)
+    - Built-in themes: Crystal Nocturne (sapphire and electric
+      magenta over obsidian, by CRYSTALLITE) replaces Moonlit Bloom.
+      Users with Moonlit Bloom selected fall back to Hellion Arctic
+      on first load
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
 
     ---
 

HellionChat/InputHistoryService.cs

@@ -4,6 +4,7 @@ namespace HellionChat;
 
 // Shared input history for all ChatInputBars (main and pop-out windows).
 // Push deduplicates: existing entries are moved to the end when re-added.
+// TEST-MIRROR: ../../Hellion Build test/Util/InputHistoryServiceTests.cs
 public static class InputHistoryService
 {
     private const int MaxSize = 30;
@@ -41,4 +42,12 @@ public static class InputHistoryService
             return null;
         return _entries[cursor];
     }
+
+    // Plugin reload doesn't reset static state automatically. Plugin.DisposeAsync
+    // calls this so the next load starts with an empty history instead of
+    // inheriting the previous session's entries.
+    public static void Reset()
+    {
+        _entries.Clear();
+    }
 }

HellionChat/Integrations/HonorificTitleData.cs

@@ -4,10 +4,19 @@ namespace HellionChat.Integrations;
 
 // Local DTO mirroring Honorific's TitleData — no hard reference to Honorific.dll
 // so HellionChat loads cleanly when Honorific is absent.
-// Glow/gradient fields omitted; Cycle 1 renders primary Color only.
+//
+// v1.4.7: render Glow only. Gradient (Color3 / GradientColourSet / Style) is
+// parsed and stashed so a future cycle can render it without re-shaping the
+// JSON roundtrip — see vault anchor "Honorific Full Gradient Port" (would
+// need GradientSystem.cs + the hardcoded Pride-palette list ported, or an
+// upstream IPC PR exposing the resolved frame colour).
 internal sealed record HonorificTitleData(
     string? Title,
     bool IsPrefix,
     bool IsOriginal,
-    Vector3? Color
+    Vector3? Color,
+    Vector3? Glow,
+    Vector3? Color3,
+    int? GradientColourSet,
+    string? GradientAnimationStyle
 );

HellionChat/Integrations/IntegrationLinks.cs

@@ -1,3 +1,6 @@
+using System.Runtime.CompilerServices;
+using HellionChat.Util;
+
 namespace HellionChat.Integrations;
 
 // Third-party plugin URLs — separate from BrandingLinks (Hellion-owned URLs).
@@ -5,4 +8,13 @@ internal static class IntegrationLinks
 {
     public const string HonorificRepo = "https://github.com/Caraxi/Honorific";
     public const string HonorificAuthor = "https://github.com/Caraxi";
+
+    // See BrandingLinks.ValidateUrls for the CA2255 rationale.
+#pragma warning disable CA2255
+    [ModuleInitializer]
+#pragma warning restore CA2255
+    internal static void ValidateUrls()
+    {
+        UrlValidation.ValidateAll(nameof(IntegrationLinks), HonorificRepo, HonorificAuthor);
+    }
 }

HellionChat/Ipc/ExtraChat.cs

@@ -62,7 +62,10 @@ public sealed class ExtraChat : IDisposable
         catch (Exception ex)
         {
             // ExtraChat is optional; IPC failure is normal when the plugin isn't loaded.
-            Plugin.Log.Verbose(ex, "ExtraChat IPC initial state query failed (peer not loaded?)");
+            Plugin.LogProxy.Verbose(
+                ex,
+                "ExtraChat IPC initial state query failed (peer not loaded?)"
+            );
         }
     }
 

HellionChat/Ipc/TypingIpc.cs

@@ -19,6 +19,17 @@ internal sealed class TypingIpc : IDisposable
     private ICallGateProvider<ChatInputState> StateQueryGate { get; }
     private ICallGateProvider<ChatInputState, object?> StateChangedGate { get; }
 
+    // v1.4.9 R4: ChatTwo IPC compatibility mirror. Some third-party plugins
+    // have a no-fork policy and subscribe only to ChatTwo.*-prefixed IPC
+    // gates. HellionChat replaces ChatTwo (conflict detection prevents
+    // parallel loading), so mirroring the ChatTwo provider slots lets those
+    // plugins keep working without code changes on their side. The tuple
+    // shape is textually identical to ChatTwo's IPC surface (same member
+    // order, same underlying types — ChatType is `ushort` in both repos)
+    // so Dalamud's IPC marshalling matches across plugin boundaries.
+    private ICallGateProvider<ChatInputState> ChatTwoStateQueryGate { get; }
+    private ICallGateProvider<ChatInputState, object?> ChatTwoStateChangedGate { get; }
+
     private ChatInputState LastState;
     private bool HasState;
 
@@ -33,7 +44,16 @@ internal sealed class TypingIpc : IDisposable
             "HellionChat.ChatInputStateChanged"
         );
 
+        // v1.4.9 R4: ChatTwo-prefixed compatibility slots (see class-level comment).
+        ChatTwoStateQueryGate = Plugin.Interface.GetIpcProvider<ChatInputState>(
+            "ChatTwo.GetChatInputState"
+        );
+        ChatTwoStateChangedGate = Plugin.Interface.GetIpcProvider<ChatInputState, object?>(
+            "ChatTwo.ChatInputStateChanged"
+        );
+
         StateQueryGate.RegisterFunc(GetState);
+        ChatTwoStateQueryGate.RegisterFunc(GetState);
     }
 
     private ChatInputState BuildState()
@@ -67,10 +87,13 @@ internal sealed class TypingIpc : IDisposable
         HasState = true;
         LastState = state;
         StateChangedGate.SendMessage(state);
+        // v1.4.9 R4: mirror on ChatTwo-prefixed slot for no-fork-policy plugins.
+        ChatTwoStateChangedGate.SendMessage(state);
     }
 
     public void Dispose()
     {
         StateQueryGate.UnregisterFunc();
+        ChatTwoStateQueryGate.UnregisterFunc();
     }
 }

HellionChat/IpcManager.cs

@@ -19,6 +19,26 @@ internal sealed class IpcManager : IDisposable
         object?
     > InvokeGate { get; }
 
+    // v1.4.9 R4: ChatTwo IPC compatibility mirror. Third-party plugins with
+    // a no-fork policy (e.g. Artisan, AllaganTools) only subscribe to the
+    // ChatTwo.*-prefixed context-menu integration gates. Mirroring all four
+    // provider slots under the ChatTwo namespace lets those plugins keep
+    // working without code changes on their side. Conflict detection
+    // prevents ChatTwo and HellionChat from loading in parallel, so no slot
+    // collision risk.
+    private ICallGateProvider<string> ChatTwoRegisterGate { get; }
+    private ICallGateProvider<string, object?> ChatTwoUnregisterGate { get; }
+    private ICallGateProvider<object?> ChatTwoAvailableGate { get; }
+    private ICallGateProvider<
+        string,
+        PlayerPayload?,
+        ulong,
+        Payload?,
+        SeString?,
+        SeString?,
+        object?
+    > ChatTwoInvokeGate { get; }
+
     internal List<string> Registered { get; } = [];
 
     public IpcManager()
@@ -41,7 +61,32 @@ internal sealed class IpcManager : IDisposable
             object?
         >("HellionChat.Invoke");
 
+        // v1.4.9 R4: ChatTwo-prefixed mirrors of the four context-menu slots
+        // above. Share the same Register/Unregister backing methods so a
+        // plugin that subscribes via either namespace lands in the same
+        // Registered list. SendMessage on Invoke fans out to both gates.
+        ChatTwoRegisterGate = Plugin.Interface.GetIpcProvider<string>("ChatTwo.Register");
+        ChatTwoRegisterGate.RegisterFunc(Register);
+
+        ChatTwoAvailableGate = Plugin.Interface.GetIpcProvider<object?>("ChatTwo.Available");
+
+        ChatTwoUnregisterGate = Plugin.Interface.GetIpcProvider<string, object?>(
+            "ChatTwo.Unregister"
+        );
+        ChatTwoUnregisterGate.RegisterAction(Unregister);
+
+        ChatTwoInvokeGate = Plugin.Interface.GetIpcProvider<
+            string,
+            PlayerPayload?,
+            ulong,
+            Payload?,
+            SeString?,
+            SeString?,
+            object?
+        >("ChatTwo.Invoke");
+
         AvailableGate.SendMessage();
+        ChatTwoAvailableGate.SendMessage();
     }
 
     internal void Invoke(
@@ -54,6 +99,8 @@ internal sealed class IpcManager : IDisposable
     )
     {
         InvokeGate.SendMessage(id, sender, contentId, payload, senderString, content);
+        // v1.4.9 R4: fan out the same event to plugins listening on ChatTwo.Invoke.
+        ChatTwoInvokeGate.SendMessage(id, sender, contentId, payload, senderString, content);
     }
 
     private string Register()
@@ -72,6 +119,8 @@ internal sealed class IpcManager : IDisposable
     {
         UnregisterGate.UnregisterAction();
         RegisterGate.UnregisterFunc();
+        ChatTwoUnregisterGate.UnregisterAction();
+        ChatTwoRegisterGate.UnregisterFunc();
         Registered.Clear();
     }
 }

HellionChat/Message.cs

@@ -153,8 +153,8 @@ public partial class Message
             }
             catch (ArgumentException ex)
             {
-                Plugin.Log.Error(ex, "Failed to parse extra chat channel GUID");
-                Plugin.Log.Error($"Byte Array: ${string.Join(", ", data[4..^1])}");
+                Plugin.LogProxy.Error(ex, "Failed to parse extra chat channel GUID");
+                Plugin.LogProxy.Error($"Byte Array: ${string.Join(", ", data[4..^1])}");
                 return Guid.Empty;
             }
         }
@@ -251,7 +251,7 @@ public partial class Message
                         AddChunkWithMessage(
                             text.NewWithStyle(chunk.Source, chunk.Link, token.Value)
                         );
-                        Plugin.Log.Debug(
+                        Plugin.LogProxy.Debug(
                             $"Invalid URL accepted by Regex but failed URI parsing: '{token.Value}'"
                         );
                     }
@@ -416,7 +416,7 @@ public partial class Message
                 catch (Exception)
                 {
                     AddChunkWithMessage(text.NewWithStyle(chunk.Source, chunk.Link, split));
-                    Plugin.Log.Debug($"Failed to parse the text param: '{split}'");
+                    Plugin.LogProxy.Debug($"Failed to parse the text param: '{split}'");
                 }
             }
         }

HellionChat/MessageManager.cs

@@ -52,7 +52,7 @@ internal class MessageManager : IAsyncDisposable
     {
         Plugin = plugin;
 
-        Store = new MessageStore(DatabasePath());
+        Store = new MessageStore(DatabasePath(), Plugin.PlatformUtil, Plugin.LogProxy);
 
         PendingMessageThread = new Thread(() =>
             ProcessPendingMessages(PendingThreadCancellationToken.Token)
@@ -91,7 +91,7 @@ internal class MessageManager : IAsyncDisposable
             await Task.Delay(100);
 
         if (PendingMessageThread.IsAlive)
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 "PendingMessageThread did not observe cancellation within 10s. "
                     + "Worker remains on background thread; next plugin reload releases it."
             );
@@ -137,7 +137,7 @@ internal class MessageManager : IAsyncDisposable
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Error processing pending message");
+                    Plugin.LogProxy.Error(ex, "Error processing pending message");
                 }
             }
             else
@@ -182,10 +182,12 @@ internal class MessageManager : IAsyncDisposable
 
         // Mark failed messages as deleted to prevent retry attempts
         var failedIds = messages.FailedMessageIds();
-        Plugin.Log.Info($"Marking {failedIds.Count} messages as deleted due to parse failures");
+        Plugin.LogProxy.Info(
+            $"Marking {failedIds.Count} messages as deleted due to parse failures"
+        );
         foreach (var msgId in messages.FailedMessageIds())
         {
-            Plugin.Log.Debug($"Marking message '{msgId}' as deleted due to parse failure");
+            Plugin.LogProxy.Debug($"Marking message '{msgId}' as deleted due to parse failure");
             Store.DeleteMessage(msgId);
         }
     }
@@ -201,10 +203,13 @@ internal class MessageManager : IAsyncDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in FilterAllTabs");
+                Plugin.LogProxy.Error(ex, "Error in FilterAllTabs");
             }
 
-            Plugin.Log.Debug($"FilterAllTabs took {stopwatch.ElapsedMilliseconds}ms");
+            // v1.4.9 R3 profiling: Information so the xllog tail surfaces this
+            // without a Debug filter. Belt-and-suspenders for future plugin-load
+            // regressions; remains in place after Sub-Task 3.4 Befund.
+            Plugin.LogProxy.Information($"FilterAllTabs took {stopwatch.ElapsedMilliseconds}ms");
         });
     }
 
@@ -259,7 +264,7 @@ internal class MessageManager : IAsyncDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in ContentIdResolver");
+            Plugin.LogProxy.Error(ex, "Error in ContentIdResolver");
         }
     }
 

HellionChat/PayloadHandler.cs

@@ -131,7 +131,7 @@ public sealed class PayloadHandler
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error executing integration");
+                Plugin.LogProxy.Error(ex, "Error executing integration");
             }
         }
 
@@ -535,7 +535,7 @@ public sealed class PayloadHandler
             )
         )
         {
-            Plugin.Log.Warning("Could not find DalamudLinkHandlers");
+            Plugin.LogProxy.Warning("Could not find DalamudLinkHandlers");
             return;
         }
 
@@ -546,7 +546,7 @@ public sealed class PayloadHandler
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error executing DalamudLinkPayload handler");
+            Plugin.LogProxy.Error(ex, "Error executing DalamudLinkPayload handler");
         }
     }
 

HellionChat/Plugin.cs

@@ -14,6 +14,7 @@ using HellionChat.Ipc;
 using HellionChat.Resources;
 using HellionChat.Ui;
 using HellionChat.Util;
+using Microsoft.Data.Sqlite;
 
 namespace HellionChat;
 
@@ -113,11 +114,32 @@ public sealed class Plugin : IAsyncDalamudPlugin
     internal Ui.StatusBar StatusBar { get; private set; } = null!;
     internal Integrations.HonorificService HonorificService { get; private set; } = null!;
 
+    // Platform indirection over Dalamud.Utility.Util. Wired in Phase-1 ctor so
+    // any service allocated in LoadAsync can read Plugin.PlatformUtil.
+    internal static IPlatformUtil PlatformUtil { get; private set; } = null!;
+
+    // Log indirection over Dalamud's IPluginLog. Same rationale as PlatformUtil:
+    // call-sites read through LogProxy so MessageStore can be tested in
+    // isolation. Wired immediately after Dalamud injects Log.
+    internal static IPluginLogProxy LogProxy { get; private set; } = null!;
+
     // Idempotency guard — Dalamud may fire DisposeAsync twice in a reload race.
     private int _disposeStarted;
 
+    // Set in the first DisposeAsync statement so async callbacks scheduled
+    // via Framework.RunOnTick (v1.4.8 B3 retention sweep) can early-bail
+    // before they touch state that has already been torn down. Volatile
+    // because the tick reads it from a different thread than the writer.
+    private volatile bool _isDisposing;
+
     internal int DeferredSaveFrames = -1;
 
+    // Cancels the v1.4.8 FTS5 bulk-insert worker on plugin teardown. The
+    // worker runs off the framework thread on its own SqliteConnection, so a
+    // Dispose mid-rebuild must signal cancellation before MessageManager
+    // tears down (the worker logs "rebuild failed" via Log on error paths).
+    private CancellationTokenSource? _ftsRebuildCts;
+
     // Serialises retention sweeps so a manual trigger and the 24h auto-sweep
     // can't run in parallel. Volatile because the ImGui thread reads it outside
     // the lock to gate the manual button.
@@ -154,18 +176,28 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
         Config = Interface.GetPluginConfig() as Configuration ?? new Configuration();
 
-        // Schema gate: v1.4.x requires config v16. Users on older schemas
-        // must install v1.4.2 first to run the migration chain.
+        // Wire platform indirection before LoadAsync allocates anything that
+        // needs Util.* — services then read Plugin.PlatformUtil instead of
+        // hitting the Dalamud static surface directly.
+        PlatformUtil = new DalamudPlatformUtil();
+        LogProxy = new DalamudPluginLogProxy(Log);
+
+        // Schema gate: v1.4.x requires config v16+. Users on older schemas
+        // must install v1.4.2 first to run the migration chain. v17 adds
+        // Tab.IsPinned (additive, no data migration needed) so v16 configs
+        // load cleanly and get their Version stamp bumped after the gate.
         if (Config.Version < 16)
         {
             throw new InvalidOperationException(
-                $"HellionChat v1.4.4 requires config schema v16, got v{Config.Version}. "
-                    + "Please install v1.4.2 first to migrate the configuration, then upgrade to v1.4.4."
+                $"HellionChat v1.4.9 requires config schema v16, got v{Config.Version}. "
+                    + "Please install v1.4.2 first to migrate the configuration, then upgrade to v1.4.9."
             );
         }
+        Config.Version = 17;
 
-        // Drop session-only Auto-Tell-Tabs that a previous crash may have persisted.
-        Config.Tabs.RemoveAll(t => t.IsTempTab);
+        // Unpinned TempTabs are session-only and dropped on every load. Pinned
+        // TempTabs survive reload — Jin's tester feedback (v1.4.7).
+        Config.Tabs.RemoveAll(TabLifecycleHelpers.ShouldStripOnLoad);
 
         LanguageChanged(Interface.UiLanguage);
         ImGuiUtil.Initialize(this);
@@ -202,6 +234,12 @@ public sealed class Plugin : IAsyncDalamudPlugin
             Directory.CreateDirectory(customThemesDir);
             SeedExampleThemeIfEmpty(customThemesDir);
             ThemeRegistry = new Themes.ThemeRegistry(customThemesDir);
+            // Warm up the custom-theme cache before the first Switch.
+            // LoadCustomBySlug is a reverse-lookup over _customCache; on a
+            // cold cache a Config.Theme that points at a custom slug would
+            // fall through to the built-in default. AllCustom is a lazy
+            // enumerable, so iterate it explicitly to materialise the cache.
+            foreach (var _ in ThemeRegistry.AllCustom()) { }
             ThemeRegistry.Switch(Config.Theme);
 
             cancellationToken.ThrowIfCancellationRequested();
@@ -251,6 +289,12 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
             cancellationToken.ThrowIfCancellationRequested();
 
+            // Populate the command dictionary + UiBuilder hooks BEFORE
+            // Commands.Initialise() walks the dictionary and registers each
+            // entry with Dalamud's CommandManager (Commands.cs:15-28). Adding
+            // wrappers after Initialise() would leak them — they'd live in
+            // the dictionary but never reach Dalamud.
+            SetupCommands();
             Commands.Initialise();
 
             // Daily retention sweep — fire-and-forget, skips when disabled
@@ -263,6 +307,113 @@ public sealed class Plugin : IAsyncDalamudPlugin
             if (Interface.Reason is not PluginLoadReason.Boot)
                 MessageManager.FilterAllTabsAsync();
 
+            // Kick the FTS5 rebuild worker if Migrate4 just added the schema or
+            // a previous run was cut short (InitFtsReadyCache leaves _ftsReady
+            // false in that case). Runs off the framework thread on its own
+            // SqliteConnection so the live UpsertMessage path keeps flowing
+            // through the chunked-commit windows.
+            _ftsRebuildCts = new CancellationTokenSource();
+            if (!MessageManager.Store.IsFtsIndexBuilt)
+            {
+                var token = _ftsRebuildCts.Token;
+                _ = Task.Run(
+                    async () =>
+                    {
+                        // FQN: Plugin.Notification (Z.74) shadows the type name.
+                        Dalamud.Interface.ImGuiNotification.IActiveNotification? notif = null;
+                        try
+                        {
+                            notif = Notification.AddNotification(
+                                new Dalamud.Interface.ImGuiNotification.Notification
+                                {
+                                    Title = "Hellion Chat",
+                                    Content = "Indexing chat history for full-text search...",
+                                    Type = Dalamud
+                                        .Interface
+                                        .ImGuiNotification
+                                        .NotificationType
+                                        .Info,
+                                    Minimized = false,
+                                    InitialDuration = TimeSpan.FromMinutes(10),
+                                }
+                            );
+
+                            // Progress<T> raises this callback on the captured
+                            // sync-context (Task.Run worker pool). IActiveNotification
+                            // is ImGui-backed and mutates the UI, so marshal the
+                            // mutation onto the framework thread via RunOnTick.
+                            var progress = new Progress<long>(done =>
+                            {
+                                Framework.RunOnTick(() =>
+                                {
+                                    if (notif is { } n)
+                                        n.Content = $"Indexing chat history: {done:N0} messages...";
+                                });
+                            });
+
+                            // Worker-owned connection. Closed+disposed before we
+                            // flip the readiness flag so the DbViewer never sees
+                            // IsFtsIndexBuilt=true while the worker connection
+                            // is still alive.
+                            SqliteConnection? workerConn = null;
+                            try
+                            {
+                                workerConn = MessageManager.Store.OpenSecondaryConnection();
+                                var total = await Task.Run(
+                                        () =>
+                                            MessageManager.Store.RebuildFtsIndex(
+                                                workerConn,
+                                                progress,
+                                                token
+                                            ),
+                                        token
+                                    )
+                                    .ConfigureAwait(false);
+
+                                workerConn.Close();
+                                workerConn.Dispose();
+                                workerConn = null;
+                                MessageManager.Store.MarkFtsIndexBuilt();
+
+                                if (notif is { } final)
+                                {
+                                    final.Content = $"Indexed {total:N0} messages.";
+                                    final.Type = Dalamud
+                                        .Interface
+                                        .ImGuiNotification
+                                        .NotificationType
+                                        .Success;
+                                    final.InitialDuration = TimeSpan.FromSeconds(5);
+                                }
+                            }
+                            finally
+                            {
+                                workerConn?.Dispose();
+                            }
+                        }
+                        catch (OperationCanceledException)
+                        {
+                            notif?.DismissNow();
+                        }
+                        catch (Exception ex)
+                        {
+                            Log.Error(ex, "FTS index rebuild failed");
+                            if (notif is { } err)
+                            {
+                                err.Content =
+                                    "Full-text indexing failed -- search will use local filter only.";
+                                err.Type = Dalamud
+                                    .Interface
+                                    .ImGuiNotification
+                                    .NotificationType
+                                    .Error;
+                            }
+                        }
+                    },
+                    _ftsRebuildCts.Token
+                );
+            }
+
             Interface.UiBuilder.DisableCutsceneUiHide = true;
             Interface.UiBuilder.DisableGposeUiHide = true;
 
@@ -279,7 +430,6 @@ public sealed class Plugin : IAsyncDalamudPlugin
             Framework.Update += FrameworkUpdate;
             Interface.UiBuilder.Draw += Draw;
             Interface.LanguageChanged += LanguageChanged;
-            Interface.UiBuilder.OpenMainUi += OpenMainUi;
         }
         catch
         {
@@ -301,14 +451,32 @@ public sealed class Plugin : IAsyncDalamudPlugin
         if (Interlocked.Exchange(ref _disposeStarted, 1) != 0)
             return;
 
+        // Set before any cleanup so deferred Framework.RunOnTick callbacks
+        // (B3 retention sweep) see the flag and bail out before they touch
+        // MessageManager / Log / static fields that the rest of this method
+        // is about to tear down.
+        _isDisposing = true;
+
         Exception? failure = null;
 
         // Unsubscribe hooks first — mirrors the hooks-last subscribe order in LoadAsync.
-        failure = CaptureFailure(failure, () => Interface.UiBuilder.OpenMainUi -= OpenMainUi);
         failure = CaptureFailure(failure, () => Interface.LanguageChanged -= LanguageChanged);
         failure = CaptureFailure(failure, () => Interface.UiBuilder.Draw -= Draw);
         failure = CaptureFailure(failure, () => Framework.Update -= FrameworkUpdate);
 
+        // Signal the FTS rebuild worker to bail. Runs before MessageManager
+        // tears down so the worker's "rebuild failed" log path still finds
+        // a live Log static. Worker owns its own SqliteConnection and disposes
+        // it itself; we only flip the cancellation flag here.
+        failure = CaptureFailure(
+            failure,
+            () =>
+            {
+                _ftsRebuildCts?.Cancel();
+                _ftsRebuildCts?.Dispose();
+            }
+        );
+
         // Flush a pending DeferredSave — FrameworkUpdate won't fire it anymore.
         failure = CaptureFailure(
             failure,
@@ -341,6 +509,11 @@ public sealed class Plugin : IAsyncDalamudPlugin
             await Framework
                 .RunOnFrameworkThread(() =>
                 {
+                    // TearDown slash-commands + UiBuilder hooks before windows
+                    // tear down. Slash-commands holding handlers that reach
+                    // the windows would otherwise see a half-torn Plugin.
+                    failure = CaptureFailure(failure, TearDownCommands);
+
                     failure = CaptureFailure(
                         failure,
                         () => GameFunctions.GameFunctions.SetChatInteractable(true)
@@ -372,6 +545,8 @@ public sealed class Plugin : IAsyncDalamudPlugin
         failure = CaptureFailure(failure, () => Functions?.Dispose());
         failure = CaptureFailure(failure, () => Commands?.Dispose());
         failure = CaptureFailure(failure, () => EmoteCache.Dispose());
+        // Static input history would otherwise survive the plugin reload.
+        failure = CaptureFailure(failure, InputHistoryService.Reset);
 
         if (failure is not null)
             ExceptionDispatchInfo.Capture(failure).Throw();
@@ -517,11 +692,80 @@ public sealed class Plugin : IAsyncDalamudPlugin
         }
     }
 
-    private void OpenMainUi()
+    // Central slash-command + UiBuilder.OpenConfigUi/OpenMainUi subscribe so
+    // the four lazy windows (Settings, DbViewer, SeStringDebugger, Debugger)
+    // have working entry points before they're constructed.
+    private void SetupCommands()
     {
-        SettingsWindow.IsOpen = !SettingsWindow.IsOpen;
+        // ChatLogWindow.cs:128 already registers /hellion (ToggleChat). The
+        // description-arg here keeps the Dalamud help list populated.
+        Commands.Register("/hellion", "Perform various actions with Hellion Chat.").Execute +=
+            OnHellionSettingsCommand;
+        Commands
+            .Register(
+                "/hellionView",
+                "Get access to your message history, with simple filter options.",
+                true
+            )
+            .Execute += OnHellionViewCommand;
+        Commands.Register("/hellionDebugger", showInHelp: false).Execute +=
+            OnHellionDebuggerCommand;
+#if DEBUG
+        // SeStringDebugger.cs lives under #if DEBUG too; keep this out of release builds.
+        Commands.Register("/hellionSeString", showInHelp: false).Execute +=
+            OnHellionSeStringCommand;
+#endif
+
+        // Plugin-Manager "Settings" button. Was in Settings.cs:67 pre-v1.4.9.
+        Interface.UiBuilder.OpenConfigUi += OnOpenConfigUi;
+
+        // Plugin-Manager "Open" button. Was in Plugin.cs LoadAsync pre-v1.4.9
+        // (separate OpenMainUi handler that flipped SettingsWindow.IsOpen).
+        Interface.UiBuilder.OpenMainUi += OnOpenMainUi;
     }
 
+    private void TearDownCommands()
+    {
+        Interface.UiBuilder.OpenMainUi -= OnOpenMainUi;
+        Interface.UiBuilder.OpenConfigUi -= OnOpenConfigUi;
+
+        Commands.Register("/hellion", "Perform various actions with Hellion Chat.").Execute -=
+            OnHellionSettingsCommand;
+        Commands
+            .Register(
+                "/hellionView",
+                "Get access to your message history, with simple filter options.",
+                true
+            )
+            .Execute -= OnHellionViewCommand;
+        Commands.Register("/hellionDebugger", showInHelp: false).Execute -=
+            OnHellionDebuggerCommand;
+#if DEBUG
+        Commands.Register("/hellionSeString", showInHelp: false).Execute -=
+            OnHellionSeStringCommand;
+#endif
+    }
+
+    private void OnHellionSettingsCommand(string command, string arguments)
+    {
+        // /hellion with args is intentionally a no-op (matches pre-v1.4.9
+        // Settings.cs:76-80 behaviour).
+        if (string.IsNullOrWhiteSpace(arguments))
+            SettingsWindow.Toggle();
+    }
+
+    private void OnOpenConfigUi() => SettingsWindow.Toggle();
+
+    private void OnOpenMainUi() => SettingsWindow.Toggle();
+
+    private void OnHellionViewCommand(string _, string __) => DbViewer.Toggle();
+
+    private void OnHellionDebuggerCommand(string _, string __) => DebuggerWindow.Toggle();
+
+#if DEBUG
+    private void OnHellionSeStringCommand(string _, string __) => SeStringDebugger.Toggle();
+#endif
+
     private void RunRetentionSweepIfDue()
     {
         if (!Config.RetentionEnabled)
@@ -557,15 +801,31 @@ public sealed class Plugin : IAsyncDalamudPlugin
                 if (deleted > 0)
                 {
                     Log.Information($"Retention sweep deleted {deleted} expired messages.");
-                    // Run clear+refilter on the framework thread — FilterAllTabsAsync
-                    // is fire-and-forget and would race the next sweep cycle.
-                    Framework
-                        .Run(() =>
+                    // Schedule on the next framework tick to avoid the ~194ms
+                    // hitch from blocking with .Wait() while the framework
+                    // finishes the current frame. Tabs-list mutation must
+                    // stay on the framework thread because Plugin.Config.Tabs
+                    // (Configuration.cs:222) is not lock-protected and
+                    // AutoTellTabsService can mutate it from background paths.
+                    // Pattern reference: SimpleTweaks
+                    // Tweaks/Chat/CaseInsensitiveCommands.cs:45.
+                    Framework.RunOnTick(() =>
+                    {
+                        // The retention thread is IsBackground=true so plugin
+                        // unload can fire while a scheduled tick is still
+                        // pending; bail before touching anything torn down.
+                        if (_isDisposing)
+                            return;
+                        try
                         {
                             MessageManager.ClearAllTabs();
                             MessageManager.FilterAllTabs();
-                        })
-                        .Wait();
+                        }
+                        catch (Exception ex)
+                        {
+                            Log.Error(ex, "Retention sweep clear+refilter failed");
+                        }
+                    });
                 }
                 else
                 {
@@ -589,6 +849,12 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
     private void Draw()
     {
+        // v1.4.8 B2: pick up external edits of the active custom theme JSON
+        // without forcing the user to re-click the picker. The disk-stat is
+        // 1Hz-throttled inside RefreshActiveIfStale, so this is essentially
+        // free on built-in themes and ~1 stat/second on custom themes.
+        ThemeRegistry.RefreshActiveIfStale();
+
         // Theme engine is always active; Classic is a theme, not a disabled state.
         using IDisposable _style = HellionStyle.PushGlobal(
             ThemeRegistry.Active,
@@ -633,19 +899,17 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
     internal void SaveConfig()
     {
-        // Strip session-only Auto-Tell-Tabs before serialization; restore after.
-        var snapshot = Config.Tabs.ToList();
-        Config.Tabs.RemoveAll(t => t.IsTempTab);
+        // Only unpinned TempTabs are session-only — they move aside before
+        // serialization and re-attach after. Pinned TempTabs stay in
+        // Config.Tabs across the save so JSON includes them. Cloning only the
+        // unpinned subset keeps the allocation proportional to
+        // AutoTellTabsLimit (<=15) instead of the full tab list.
+        var unpinnedTempTabs = Config.Tabs.Where(TabLifecycleHelpers.IsInUnpinnedPool).ToList();
+        Config.Tabs.RemoveAll(TabLifecycleHelpers.ShouldStripOnSave);
 
         Interface.SavePluginConfig(Config);
 
-        Config.Tabs.Clear();
-        Config.Tabs.AddRange(snapshot);
-
-        // F2.1: snapshot-restore preserves IsTempTab tabs but the mid-step
-        // RemoveAll bypasses AutoTellTabsService, so re-peg the counter.
-        // Null-conditional because SaveConfig can fire before Phase-2 init.
-        AutoTellTabsService?.ResyncTempTabCounter();
+        Config.Tabs.AddRange(unpinnedTempTabs);
     }
 
     internal void LanguageChanged(string langCode)

HellionChat/Resources/HellionStrings.Designer.cs

@@ -114,6 +114,8 @@ internal class HellionStrings
     internal static string Wizard_Profile_FullHistory_GdprWarning => Get(nameof(Wizard_Profile_FullHistory_GdprWarning));
     internal static string Wizard_Profile_FullHistory_Apply => Get(nameof(Wizard_Profile_FullHistory_Apply));
     internal static string Wizard_Reopen_Button => Get(nameof(Wizard_Reopen_Button));
+    internal static string Wizard_Cancel_Label => Get(nameof(Wizard_Cancel_Label));
+    internal static string Wizard_Cancel_Tooltip => Get(nameof(Wizard_Cancel_Tooltip));
 
     internal static string Export_Heading => Get(nameof(Export_Heading));
     internal static string Export_Help => Get(nameof(Export_Help));
@@ -168,6 +170,16 @@ internal class HellionStrings
     internal static string AutoTellTabs_HistoryLoadError => Get(nameof(AutoTellTabs_HistoryLoadError));
     internal static string AutoTellTabs_GreetedTooltip => Get(nameof(AutoTellTabs_GreetedTooltip));
     internal static string AutoTellTabs_UnGreetedTooltip => Get(nameof(AutoTellTabs_UnGreetedTooltip));
+    internal static string PinTab_MenuPin => Get(nameof(PinTab_MenuPin));
+    internal static string PinTab_MenuUnpin => Get(nameof(PinTab_MenuUnpin));
+    internal static string PinTab_MenuPromote => Get(nameof(PinTab_MenuPromote));
+    internal static string PinTab_PromoteTooltip => Get(nameof(PinTab_PromoteTooltip));
+    internal static string PinTab_LimitReached => Get(nameof(PinTab_LimitReached));
+    internal static string PinTab_PinnedTooltip => Get(nameof(PinTab_PinnedTooltip));
+    internal static string PinTab_PinTooltip => Get(nameof(PinTab_PinTooltip));
+    internal static string PinTab_SectionHeader => Get(nameof(PinTab_SectionHeader));
+    internal static string Settings_ThemeAndLayout_SidebarWidth_Name => Get(nameof(Settings_ThemeAndLayout_SidebarWidth_Name));
+    internal static string Settings_ThemeAndLayout_SidebarWidth_Description => Get(nameof(Settings_ThemeAndLayout_SidebarWidth_Description));
 
     // Hellion Chat — Auto-Tell-Tabs Chat settings tab
     internal static string ChatLog_AutoTellTabs_Section_Title => Get(nameof(ChatLog_AutoTellTabs_Section_Title));
@@ -368,6 +380,8 @@ internal class HellionStrings
     internal static string Settings_Integrations_Honorific_Status_Incompatible => Get(nameof(Settings_Integrations_Honorific_Status_Incompatible));
     internal static string Settings_Integrations_Honorific_Toggle => Get(nameof(Settings_Integrations_Honorific_Toggle));
     internal static string Settings_Integrations_Honorific_ToggleHint => Get(nameof(Settings_Integrations_Honorific_ToggleHint));
+    internal static string Settings_Integrations_Honorific_Glow_Toggle => Get(nameof(Settings_Integrations_Honorific_Glow_Toggle));
+    internal static string Settings_Integrations_Honorific_Glow_Hint => Get(nameof(Settings_Integrations_Honorific_Glow_Hint));
     internal static string Settings_Integrations_Honorific_LinkRepo => Get(nameof(Settings_Integrations_Honorific_LinkRepo));
     internal static string Settings_Integrations_Honorific_LinkAuthor => Get(nameof(Settings_Integrations_Honorific_LinkAuthor));
     internal static string Settings_Integrations_ComingSoon_SectionHeader => Get(nameof(Settings_Integrations_ComingSoon_SectionHeader));
@@ -388,4 +402,9 @@ internal class HellionStrings
 
     // Hellion Chat — v1.3.0 Honorific title slot tooltip
     internal static string ChatHeader_HonorificTitle_Tooltip => Get(nameof(ChatHeader_HonorificTitle_Tooltip));
+
+    // Hellion Chat — v1.4.8 DbViewer full-text search toggle
+    internal static string DbViewer_FullTextToggle => Get(nameof(DbViewer_FullTextToggle));
+    internal static string DbViewer_FullTextToggle_Hint_Indexing => Get(nameof(DbViewer_FullTextToggle_Hint_Indexing));
+    internal static string DbViewer_FullTextToggle_Hint_PhraseMode => Get(nameof(DbViewer_FullTextToggle_Hint_PhraseMode));
 }

HellionChat/Resources/HellionStrings.de.resx

@@ -222,6 +222,12 @@
   <data name="Wizard_Reopen_Button" xml:space="preserve">
     <value>Wizard erneut zeigen</value>
   </data>
+  <data name="Wizard_Cancel_Label" xml:space="preserve">
+    <value>Später — Defaults behalten</value>
+  </data>
+  <data name="Wizard_Cancel_Tooltip" xml:space="preserve">
+    <value>Schließt den Wizard ohne Profil-Auswahl. Die Plugin-Defaults bleiben aktiv und der Wizard erscheint beim nächsten Plugin-Reload erneut.</value>
+  </data>
   <data name="Export_Heading" xml:space="preserve">
     <value>Export (DSGVO Art. 15 — Auskunftsrecht)</value>
   </data>
@@ -377,6 +383,36 @@
   <data name="AutoTellTabs_UnGreetedTooltip" xml:space="preserve">
     <value>Als begrüßt markieren.</value>
   </data>
+  <data name="PinTab_MenuPin" xml:space="preserve">
+    <value>Tab anpinnen</value>
+  </data>
+  <data name="PinTab_MenuUnpin" xml:space="preserve">
+    <value>Tab lösen</value>
+  </data>
+  <data name="PinTab_MenuPromote" xml:space="preserve">
+    <value>In Standard-Tab umwandeln</value>
+  </data>
+  <data name="PinTab_PromoteTooltip" xml:space="preserve">
+    <value>Wandelt den TempTell in einen regulären Tab um. Die Tell-Bindung an die Person geht verloren, der Tab fängt dann Nachrichten anhand der Channel-Filter ein. Für „Tab überlebt Relog" stattdessen „Tab anpinnen" wählen.</value>
+  </data>
+  <data name="PinTab_LimitReached" xml:space="preserve">
+    <value>Maximal {0} angepinnte Tell-Tabs erreicht. Erst einen lösen oder dauerhaft behalten.</value>
+  </data>
+  <data name="PinTab_PinnedTooltip" xml:space="preserve">
+    <value>Angepinnt — überlebt Relog.</value>
+  </data>
+  <data name="PinTab_PinTooltip" xml:space="preserve">
+    <value>Angepinnte Tabs überleben Relog und behalten die Bindung an die Tell-Person.</value>
+  </data>
+  <data name="PinTab_SectionHeader" xml:space="preserve">
+    <value>Angepinnt</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Name" xml:space="preserve">
+    <value>Sidebar-Breite</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Description" xml:space="preserve">
+    <value>Breite der Tab-Sidebar in Pixeln. Default (44 px) ist Icon-only; breiter machen damit Sektion-Header wie „Aktive Tells (3)" nicht abgeschnitten werden.</value>
+  </data>
 
   <!-- Hellion Chat — Auto-Tell-Tabs (Chat-Einstellungstab) -->
   <data name="ChatLog_AutoTellTabs_Section_Title" xml:space="preserve">
@@ -392,7 +428,7 @@
     <value>Maximale Anzahl der Auto-Tell-Tabs</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Limit_Description" xml:space="preserve">
-    <value>Beim Erreichen werden begrüßte Tabs mit der ältesten Aktivität zuerst geschlossen. Änderungen greifen beim nächsten /tell.</value>
+    <value>Beim Erreichen werden begrüßte Tabs mit der ältesten Aktivität zuerst geschlossen. Änderungen greifen beim nächsten /tell. Diese Grenze gilt nur für den automatisch verwalteten Pool. Angepinnte Tell-Tabs (Rechtsklick → Tab anpinnen) leben in einem separaten Pool von bis zu 5 Tabs und überleben Relog.</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Compact_Name" xml:space="preserve">
     <value>Kompakte Anzeige</value>
@@ -821,6 +857,12 @@
   <data name="Settings_Integrations_Honorific_ToggleHint" xml:space="preserve">
     <value>Zeigt deinen Custom-Titel aus Honorific im Header über dem Chat-Log an, in der von dir gewählten Farbe.</value>
   </data>
+  <data name="Settings_Integrations_Honorific_Glow_Toggle" xml:space="preserve">
+    <value>Glow-Outline rendern (Honorific)</value>
+  </data>
+  <data name="Settings_Integrations_Honorific_Glow_Hint" xml:space="preserve">
+    <value>Kann die Framerate auf schwacher Hardware drücken. Rendert die Glow-Outline für Honorific-Titel, die sie nutzen. Gradient-Animation wird noch nicht unterstützt und wird stattdessen als Primärfarbe gezeichnet.</value>
+  </data>
   <data name="Settings_Integrations_Honorific_LinkRepo" xml:space="preserve">
     <value>Honorific auf GitHub</value>
   </data>
@@ -875,4 +917,13 @@
   <data name="ChatHeader_HonorificTitle_Tooltip" xml:space="preserve">
     <value>Custom-Titel von Honorific</value>
   </data>
+  <data name="DbViewer_FullTextToggle" xml:space="preserve">
+    <value>Volltext-Suche</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_Indexing" xml:space="preserve">
+    <value>Der Volltext-Index wird noch gebaut. Die lokale Suche bleibt verfügbar.</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_PhraseMode" xml:space="preserve">
+    <value>Sucht nach der exakten Wortfolge. Mehrere Wörter werden nur gefunden, wenn sie zusammen und in dieser Reihenfolge stehen. Wer rohe FTS5-MATCH-Syntax nutzen will, setzt eigene Anführungszeichen um den Suchbegriff.</value>
+  </data>
 </root>

HellionChat/Resources/HellionStrings.resx

@@ -222,6 +222,12 @@
   <data name="Wizard_Reopen_Button" xml:space="preserve">
     <value>Show wizard again</value>
   </data>
+  <data name="Wizard_Cancel_Label" xml:space="preserve">
+    <value>Later — keep defaults</value>
+  </data>
+  <data name="Wizard_Cancel_Tooltip" xml:space="preserve">
+    <value>Close the wizard without selecting a profile. The plugin defaults stay active and the wizard returns on next plugin load.</value>
+  </data>
   <data name="Export_Heading" xml:space="preserve">
     <value>Export (GDPR Art. 15 — Right of access)</value>
   </data>
@@ -377,6 +383,36 @@
   <data name="AutoTellTabs_UnGreetedTooltip" xml:space="preserve">
     <value>Mark as greeted.</value>
   </data>
+  <data name="PinTab_MenuPin" xml:space="preserve">
+    <value>Pin Tab</value>
+  </data>
+  <data name="PinTab_MenuUnpin" xml:space="preserve">
+    <value>Unpin Tab</value>
+  </data>
+  <data name="PinTab_MenuPromote" xml:space="preserve">
+    <value>Promote to permanent</value>
+  </data>
+  <data name="PinTab_PromoteTooltip" xml:space="preserve">
+    <value>Turns this TempTell into a regular tab. The tell binding to the partner is dropped — the tab will catch messages by its channel filters from now on. For "tab survives relog while staying bound to this partner", use Pin Tab instead.</value>
+  </data>
+  <data name="PinTab_PinTooltip" xml:space="preserve">
+    <value>Pinned tabs survive relog and stay bound to this conversation partner.</value>
+  </data>
+  <data name="PinTab_SectionHeader" xml:space="preserve">
+    <value>Pinned</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Name" xml:space="preserve">
+    <value>Sidebar width</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Description" xml:space="preserve">
+    <value>Width of the tab sidebar in pixels. The default (44 px) is icon-only; widen it to fit the section headers like "Active Tells (3)" without truncation.</value>
+  </data>
+  <data name="PinTab_LimitReached" xml:space="preserve">
+    <value>Maximum of {0} pinned tell tabs reached. Unpin one first, or use Promote to permanent.</value>
+  </data>
+  <data name="PinTab_PinnedTooltip" xml:space="preserve">
+    <value>Pinned — survives relog.</value>
+  </data>
 
   <!-- Hellion Chat — Auto-Tell-Tabs (Chat settings tab) -->
   <data name="ChatLog_AutoTellTabs_Section_Title" xml:space="preserve">
@@ -392,7 +428,7 @@
     <value>Maximum number of auto-tell tabs</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Limit_Description" xml:space="preserve">
-    <value>When the limit is reached, greeted tabs with the oldest activity are closed first. Changes take effect on the next /tell.</value>
+    <value>When the limit is reached, greeted tabs with the oldest activity are closed first. Changes take effect on the next /tell. This limit applies to the auto-managed pool. Pinned tell tabs (right-click → Pin Tab) live in a separate pool of up to 5 and survive relog.</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Compact_Name" xml:space="preserve">
     <value>Compact display</value>
@@ -821,6 +857,12 @@
   <data name="Settings_Integrations_Honorific_ToggleHint" xml:space="preserve">
     <value>Shows your custom title from Honorific in the header above the chat log, in the colour you have chosen.</value>
   </data>
+  <data name="Settings_Integrations_Honorific_Glow_Toggle" xml:space="preserve">
+    <value>Render glow outlines (Honorific)</value>
+  </data>
+  <data name="Settings_Integrations_Honorific_Glow_Hint" xml:space="preserve">
+    <value>May reduce frame rate on low-end hardware. Renders glow outlines for Honorific titles that use them. Gradient animation is not yet supported and will render as the primary colour.</value>
+  </data>
   <data name="Settings_Integrations_Honorific_LinkRepo" xml:space="preserve">
     <value>Honorific on GitHub</value>
   </data>
@@ -875,4 +917,13 @@
   <data name="ChatHeader_HonorificTitle_Tooltip" xml:space="preserve">
     <value>Custom title from Honorific</value>
   </data>
+  <data name="DbViewer_FullTextToggle" xml:space="preserve">
+    <value>Full-text search</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_Indexing" xml:space="preserve">
+    <value>The full-text index is still being built. The local filter remains available.</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_PhraseMode" xml:space="preserve">
+    <value>Searches for the exact phrase. Multi-word queries match only when the words appear together in order. To use raw FTS5 MATCH syntax, wrap your term in double quotes yourself.</value>
+  </data>
 </root>

HellionChat/Themes/Builtin/CrystalNocturne.cs

@@ -0,0 +1,82 @@
+using HellionChat.Util;
+
+namespace HellionChat.Themes.Builtin;
+
+internal static class CrystalNocturne
+{
+    public const string Slug = "crystal-nocturne";
+
+    public static Theme Build() =>
+        new(
+            Slug: Slug,
+            Name: "Crystal Nocturne",
+            Author: "CRYSTALLITE",
+            Description: "Royal sapphire and electric magenta over obsidian — a nocturne for the crystal-lit dance floor.",
+            Colors: new ThemeColors(
+                PrimaryDark: ColourUtil.HexToRgba("#1D4ED8"),
+                Primary: ColourUtil.HexToRgba("#3B82F6"),
+                PrimaryLight: ColourUtil.HexToRgba("#93C5FD"),
+                PrimaryGlow: ColourUtil.HexToRgba("#3B82F699"),
+                AccentDark: ColourUtil.HexToRgba("#A21CAF"),
+                Accent: ColourUtil.HexToRgba("#D946EF"),
+                AccentLight: ColourUtil.HexToRgba("#F0ABFC"),
+                Identity: ColourUtil.HexToRgba("#3B82F6"),
+                WindowBg: ColourUtil.HexToRgba("#08070F"),
+                ChildBg: ColourUtil.HexToRgba("#11101F"),
+                FrameBg: ColourUtil.HexToRgba("#1C1A33"),
+                Surface: ColourUtil.HexToRgba("#262340"),
+                SurfaceHover: ColourUtil.HexToRgba("#332D55"),
+                Border: ColourUtil.HexToRgba("#D946EF55"),
+                TextPrimary: ColourUtil.HexToRgba("#F5F3FF"),
+                TextMuted: ColourUtil.HexToRgba("#A5A0C0"),
+                TextDim: ColourUtil.HexToRgba("#4B4763"),
+                StatusSuccess: ColourUtil.HexToRgba("#10B981"),
+                StatusDanger: ColourUtil.HexToRgba("#F43F5E"),
+                StatusWarning: ColourUtil.HexToRgba("#FACC15"),
+                StatusInfo: ColourUtil.HexToRgba("#3B82F6")
+            ),
+            Layout: new ThemeLayout(
+                WindowRounding: 2f,
+                ChildRounding: 1f,
+                PopupRounding: 2f,
+                FrameRounding: 1f,
+                GrabRounding: 1f,
+                TabRounding: 1f,
+                ScrollbarRounding: 2f,
+                WindowBorderSize: 1f,
+                FrameBorderSize: 1f
+            ),
+            Typography: new ThemeTypography(),
+            IsBuiltIn: true,
+            ChatColors: new ThemeChatColors(
+                new Dictionary<HellionChat.Code.ChatType, uint>
+                {
+                    // Crystal Nocturne — sapphire-blue identity for party/team channels,
+                    // accent-magenta for tells, with mint/peach accents on linkshells
+                    // so the eight LS slots stay individually distinguishable on the
+                    // dark obsidian background.
+                    [HellionChat.Code.ChatType.Say] = ColourUtil.HexToRgba("#F5F3FF"),
+                    [HellionChat.Code.ChatType.Yell] = ColourUtil.HexToRgba("#FACC15"),
+                    [HellionChat.Code.ChatType.Shout] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.TellIncoming] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.TellOutgoing] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.Party] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Alliance] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.FreeCompany] = ColourUtil.HexToRgba("#A8C8E8"),
+                    [HellionChat.Code.ChatType.NoviceNetwork] = ColourUtil.HexToRgba("#10B981"),
+                    [HellionChat.Code.ChatType.CrossParty] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Linkshell1] = ColourUtil.HexToRgba("#10B981"),
+                    [HellionChat.Code.ChatType.Linkshell2] = ColourUtil.HexToRgba("#FACC15"),
+                    [HellionChat.Code.ChatType.Linkshell3] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.Linkshell4] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Linkshell5] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.Linkshell6] = ColourUtil.HexToRgba("#A5A0C0"),
+                    [HellionChat.Code.ChatType.Linkshell7] = ColourUtil.HexToRgba("#D946EF"),
+                    [HellionChat.Code.ChatType.Linkshell8] = ColourUtil.HexToRgba("#3B82F6"),
+                    [HellionChat.Code.ChatType.CustomEmote] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.StandardEmote] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.Echo] = ColourUtil.HexToRgba("#A5A0C0"),
+                }
+            )
+        );
+}

HellionChat/Themes/Builtin/MoonlitBloom.cs

@@ -1,80 +0,0 @@
-using HellionChat.Util;
-
-namespace HellionChat.Themes.Builtin;
-
-internal static class MoonlitBloom
-{
-    public const string Slug = "moonlit-bloom";
-
-    public static Theme Build() =>
-        new(
-            Slug: Slug,
-            Name: "Moonlit Bloom",
-            Author: "Hellion Forge",
-            Description: "Bloom Magenta + Soft Sage auf Deep Violet Night.",
-            Colors: new ThemeColors(
-                PrimaryDark: ColourUtil.HexToRgba("#C957D0"),
-                Primary: ColourUtil.HexToRgba("#E374E8"),
-                PrimaryLight: ColourUtil.HexToRgba("#EF8AF4"),
-                PrimaryGlow: ColourUtil.HexToRgba("#E374E899"),
-                AccentDark: ColourUtil.HexToRgba("#7AAC5C"),
-                Accent: ColourUtil.HexToRgba("#9CCB7C"),
-                AccentLight: ColourUtil.HexToRgba("#B6E297"),
-                Identity: ColourUtil.HexToRgba("#E374E8"),
-                WindowBg: ColourUtil.HexToRgba("#0E0C1F"),
-                ChildBg: ColourUtil.HexToRgba("#15122B"),
-                FrameBg: ColourUtil.HexToRgba("#1F1A38"),
-                Surface: ColourUtil.HexToRgba("#28224A"),
-                SurfaceHover: ColourUtil.HexToRgba("#332B5B"),
-                Border: ColourUtil.HexToRgba("#E374E844"),
-                TextPrimary: ColourUtil.HexToRgba("#ECE6F5"),
-                TextMuted: ColourUtil.HexToRgba("#9A8BB0"),
-                TextDim: ColourUtil.HexToRgba("#554B6E"),
-                StatusSuccess: ColourUtil.HexToRgba("#7AAC5C"),
-                StatusDanger: ColourUtil.HexToRgba("#E85C6A"),
-                StatusWarning: ColourUtil.HexToRgba("#E8B590"),
-                StatusInfo: ColourUtil.HexToRgba("#6278FF")
-            ),
-            Layout: new ThemeLayout(
-                WindowRounding: 6f,
-                ChildRounding: 5f,
-                PopupRounding: 5f,
-                FrameRounding: 4f,
-                GrabRounding: 4f,
-                TabRounding: 4f,
-                ScrollbarRounding: 4f,
-                WindowBorderSize: 1f,
-                FrameBorderSize: 1f
-            ),
-            Typography: new ThemeTypography(),
-            IsBuiltIn: true,
-            ChatColors: new ThemeChatColors(
-                new Dictionary<HellionChat.Code.ChatType, uint>
-                {
-                    // Moonlit Bloom — Bloom-Magenta-Tönung. Sage-Drift in NoviceNetwork
-                    // und Linkshell4. Tell-Pink-Identität bleibt sichtbar.
-                    [HellionChat.Code.ChatType.Say] = ColourUtil.HexToRgba("#ECE6F5"),
-                    [HellionChat.Code.ChatType.Yell] = ColourUtil.HexToRgba("#F0D080"),
-                    [HellionChat.Code.ChatType.Shout] = ColourUtil.HexToRgba("#F09A60"),
-                    [HellionChat.Code.ChatType.TellIncoming] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.TellOutgoing] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.Party] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Alliance] = ColourUtil.HexToRgba("#F0B090"),
-                    [HellionChat.Code.ChatType.FreeCompany] = ColourUtil.HexToRgba("#A8C8E8"),
-                    [HellionChat.Code.ChatType.NoviceNetwork] = ColourUtil.HexToRgba("#9CCB7C"),
-                    [HellionChat.Code.ChatType.CrossParty] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Linkshell1] = ColourUtil.HexToRgba("#9CCB7C"),
-                    [HellionChat.Code.ChatType.Linkshell2] = ColourUtil.HexToRgba("#F0BC92"),
-                    [HellionChat.Code.ChatType.Linkshell3] = ColourUtil.HexToRgba("#F0D080"),
-                    [HellionChat.Code.ChatType.Linkshell4] = ColourUtil.HexToRgba("#B6E297"),
-                    [HellionChat.Code.ChatType.Linkshell5] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Linkshell6] = ColourUtil.HexToRgba("#C098D8"),
-                    [HellionChat.Code.ChatType.Linkshell7] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.Linkshell8] = ColourUtil.HexToRgba("#E8B0E8"),
-                    [HellionChat.Code.ChatType.CustomEmote] = ColourUtil.HexToRgba("#E8B590"),
-                    [HellionChat.Code.ChatType.StandardEmote] = ColourUtil.HexToRgba("#E8B590"),
-                    [HellionChat.Code.ChatType.Echo] = ColourUtil.HexToRgba("#9A8BB0"),
-                }
-            )
-        );
-}

HellionChat/Themes/ThemeRegistry.cs

@@ -6,6 +6,13 @@ public sealed class ThemeRegistry
 {
     public const string DefaultSlug = HellionArctic.Slug;
 
+    // 1Hz throttle for the v1.4.8 B2 auto-refresh-on-active path. The
+    // Plugin.Draw hook calls RefreshActiveIfStale every frame, but the
+    // actual File.GetLastWriteTimeUtc disk-stat only runs once per second
+    // -- 60fps would otherwise mean 3600 stats/min on the same path (more
+    // on Wine). Same idiom as the StatusBar 1Hz cache.
+    private const long ActiveStampPollIntervalMs = 1000;
+
     private readonly Dictionary<string, Theme> _builtIns;
     private readonly Dictionary<string, (Theme Theme, DateTime Stamp)> _customCache = new(
         StringComparer.OrdinalIgnoreCase
@@ -13,19 +20,32 @@ public sealed class ThemeRegistry
     private readonly string? _customThemesDir;
     private Theme _active;
 
+    // v1.4.8 B2: source path of the currently active custom theme. Captured
+    // at Switch() time so RefreshActiveIfStale does not have to reconstruct
+    // a filename from the slug -- custom theme filenames are not required
+    // to match the slug they declare in the JSON body. Null when the active
+    // theme is built-in or no custom-themes directory is configured.
+    private string? _activeCustomPath;
+    private long _lastActiveStampCheckMs = -ActiveStampPollIntervalMs;
+    private DateTime _lastActiveStamp = DateTime.MinValue;
+
     public ThemeRegistry(string? customThemesDir = null)
     {
+        // Insertion order drives the Theme-Picker grid layout (3 columns).
+        // Row 1: blue family. Row 2: purple to magenta family.
+        // Row 3: green / warm / classic. Row 4: Synthwave Sunset as a
+        // retro bonus on its own line.
         _builtIns = new Dictionary<string, Theme>(StringComparer.OrdinalIgnoreCase)
         {
             { HellionArctic.Slug, HellionArctic.Build() },
             { HellionSpectrum.Slug, HellionSpectrum.Build() },
-            { Chat2Classic.Slug, Chat2Classic.Build() },
-            { EventHorizon.Slug, EventHorizon.Build() },
-            { MoonlitBloom.Slug, MoonlitBloom.Build() },
             { NightBlue.Slug, NightBlue.Build() },
+            { EventHorizon.Slug, EventHorizon.Build() },
             { IndigoViolet.Slug, IndigoViolet.Build() },
-            { ForgeMerchantman.Slug, ForgeMerchantman.Build() },
+            { CrystalNocturne.Slug, CrystalNocturne.Build() },
             { MintGrove.Slug, MintGrove.Build() },
+            { ForgeMerchantman.Slug, ForgeMerchantman.Build() },
+            { Chat2Classic.Slug, Chat2Classic.Build() },
             { SynthwaveSunset.Slug, SynthwaveSunset.Build() },
         };
 
@@ -44,7 +64,9 @@ public sealed class ThemeRegistry
         if (_builtIns.TryGetValue(slug, out var b))
             return b;
 
-        var custom = LoadCustomBySlug(slug);
+        // Discard the source path here; Switch is the only call-site that
+        // needs to remember it for the auto-refresh hook.
+        var custom = LoadCustomBySlug(slug, out _);
         if (custom != null)
             return custom;
 
@@ -55,12 +77,70 @@ public sealed class ThemeRegistry
 
     public IEnumerable<Theme> AllCustom() => RefreshCustomCache();
 
+    // Built-in-first to match Get(slug)'s lookup order. A user theme JSON
+    // that declares the same slug as a built-in is ignored deliberately --
+    // having Switch prefer custom and Get prefer built-in would produce
+    // a state where _active and Get(_active.Slug) disagree.
     public void Switch(string slug)
     {
-        var theme = Get(slug);
-        // Defensive — ensures any future theme source always gets a populated cache.
-        theme.RecomputeAbgrCache();
-        _active = theme;
+        if (_builtIns.TryGetValue(slug, out var builtin))
+        {
+            _active = builtin;
+            _active.RecomputeAbgrCache();
+            _activeCustomPath = null;
+            return;
+        }
+
+        var customTheme = LoadCustomBySlug(slug, out var customPath);
+        if (customTheme is not null)
+        {
+            _active = customTheme;
+            // Defensive — ensures any future theme source always gets a populated cache.
+            _active.RecomputeAbgrCache();
+            _activeCustomPath = customPath;
+            // Force a first-tick reload-check after the switch so the stamp
+            // baseline is established on the next RefreshActiveIfStale call.
+            _lastActiveStamp = DateTime.MinValue;
+            return;
+        }
+
+        // Fallback: neither built-in nor custom matched. Drop to default
+        // and clear the active custom path so RefreshActiveIfStale stays idle.
+        _active = _builtIns[DefaultSlug];
+        _active.RecomputeAbgrCache();
+        _activeCustomPath = null;
+    }
+
+    // 1Hz-throttled disk-stat on the currently active custom theme file.
+    // When the file's LastWriteTime moves forward (editor save), reload the
+    // theme via Get() so the user sees the edit immediately without
+    // re-selecting in the picker. Built-in themes short-circuit; custom
+    // themes without an _activeCustomPath (e.g. Switch fell to default)
+    // short-circuit too.
+    public void RefreshActiveIfStale()
+    {
+        var now = Environment.TickCount64;
+        if (now - _lastActiveStampCheckMs < ActiveStampPollIntervalMs)
+            return;
+        _lastActiveStampCheckMs = now;
+
+        if (_active.IsBuiltIn)
+            return;
+
+        var path = _activeCustomPath;
+        if (path is null || !File.Exists(path))
+            return;
+
+        var stamp = File.GetLastWriteTimeUtc(path);
+        if (!ThemeStampDiff.IsStale(_lastActiveStamp, stamp))
+            return;
+        _lastActiveStamp = stamp;
+
+        // Get() re-runs RefreshCustomCache which picks up the new content
+        // (the cache keys by path + LastWriteTime, so a mtime bump invalidates).
+        // RecomputeAbgrCache happens inside RefreshCustomCache on cache miss.
+        var reloaded = Get(_active.Slug);
+        _active = reloaded;
     }
 
     // 0x80070020 = SHARING_VIOLATION, 0x80070021 = LOCK_VIOLATION.
@@ -73,18 +153,30 @@ public sealed class ThemeRegistry
         return code == 0x80070020u || code == 0x80070021u;
     }
 
-    // Custom themes are loaded lazily, cached by LastWriteTime.
-    // A changed JSON is reloaded on the next lookup.
-    private Theme? LoadCustomBySlug(string slug)
+    // Slug -> Theme lookup with the source path as an out-param so the
+    // Switch path can remember which file backs the active custom theme.
+    // Pure reverse-lookup over the existing _customCache: that cache is
+    // already Path -> (Theme, Stamp), so iterating it costs nothing,
+    // avoids a re-parse of every JSON, and keeps the parse logic (and
+    // the recoverable-file-lock recovery) confined to RefreshCustomCache.
+    // The cache must be warm before this runs; Plugin.LoadAsync triggers
+    // a one-time warm-up via AllCustom() before the first Switch call.
+    private Theme? LoadCustomBySlug(string slug, out string? sourcePath)
     {
+        sourcePath = null;
         if (_customThemesDir is null)
             return null;
         if (!Directory.Exists(_customThemesDir))
             return null;
 
-        foreach (var theme in RefreshCustomCache())
-            if (string.Equals(theme.Slug, slug, StringComparison.OrdinalIgnoreCase))
-                return theme;
+        foreach (var kvp in _customCache)
+        {
+            if (string.Equals(kvp.Value.Theme.Slug, slug, StringComparison.OrdinalIgnoreCase))
+            {
+                sourcePath = kvp.Key;
+                return kvp.Value.Theme;
+            }
+        }
         return null;
     }
 
@@ -114,7 +206,7 @@ public sealed class ThemeRegistry
                 catch (Exception ex) when (IsRecoverableFileLock(ex))
                 {
                     // Editor mid-save: keep last known good, retry on next refresh.
-                    Plugin.Log.Debug(
+                    Plugin.LogProxy.Debug(
                         $"Custom theme {Path.GetFileName(path)} is locked, keeping last known good"
                     );
                     if (cached.Theme is not null)

HellionChat/Themes/ThemeStampDiff.cs

@@ -0,0 +1,20 @@
+namespace HellionChat.Themes;
+
+// Pure stale-check for the v1.4.8 B2 theme-auto-refresh-on-active path.
+// Lives in a free helper class so the Build-Suite can exercise the diff
+// rules without instantiating ThemeRegistry (which touches the Dalamud
+// log proxy and the filesystem). The rules:
+// - DateTime.MinValue on the current stat means we could not read the
+//   file -- hold the last known good (return false).
+// - Equal stamps mean no change since we last saw it.
+// - Any other difference, including the first observation where lastSeen
+//   is MinValue, counts as stale and triggers a reload.
+internal static class ThemeStampDiff
+{
+    public static bool IsStale(System.DateTime lastSeen, System.DateTime current)
+    {
+        if (current == System.DateTime.MinValue)
+            return false;
+        return current != lastSeen;
+    }
+}

HellionChat/Ui/ChatLogWindow.cs

@@ -90,6 +90,10 @@ public sealed class ChatLogWindow : Window
     private bool PlayedClosingSound = true;
     private bool DrewThisFrame;
 
+    // One-shot guard so a recurring draw failure doesn't spam the
+    // notification stack frame-by-frame. Resets only on next plugin reload.
+    private bool NotifiedDrawFailure;
+
     private long FrameTime; // set every frame
     internal long LastActivityTime = Environment.TickCount64;
 
@@ -268,9 +272,12 @@ public sealed class ChatLogWindow : Window
                 }
             }
 
-            if (targetChannel == null || !GameFunctions.Chat.ValidAnyLinkshell(targetChannel.Value))
+            if (
+                targetChannel == null
+                || !GameFunctions.Chat.IsChannelOrExistingLinkshell(targetChannel.Value)
+            )
             {
-                Plugin.Log.Warning(
+                Plugin.LogProxy.Warning(
                     $"Channel was set to an invalid value '{targetChannel}', ignoring"
                 );
                 return;
@@ -324,11 +331,11 @@ public sealed class ChatLogWindow : Window
         {
             case "hide":
                 CurrentHideState = HideState.User;
-                Plugin.Log.Verbose("HideState: → User (chat hide command)");
+                Plugin.LogProxy.Verbose("HideState: → User (chat hide command)");
                 break;
             case "show":
                 CurrentHideState = HideState.None;
-                Plugin.Log.Verbose("HideState: → None (chat show command)");
+                Plugin.LogProxy.Verbose("HideState: → None (chat show command)");
                 break;
             case "toggle":
                 CurrentHideState = CurrentHideState switch
@@ -338,7 +345,7 @@ public sealed class ChatLogWindow : Window
                     HideState.None => HideState.User,
                     _ => CurrentHideState,
                 };
-                Plugin.Log.Verbose($"HideState: → {CurrentHideState} (chat toggle command)");
+                Plugin.LogProxy.Verbose($"HideState: → {CurrentHideState} (chat toggle command)");
                 break;
         }
     }
@@ -412,8 +419,9 @@ public sealed class ChatLogWindow : Window
         // The hint banner renders before this block so ImGui already accounts for it.
         height -= ImGui.GetFrameHeightWithSpacing();
 
-        // Status bar at the window bottom reserves 22px + 2px spacing.
-        height -= StatusBar.Height + 2;
+        // StatusBar.Height now bakes in its own DPI-aware 2px spacer, so the
+        // window reservation is just Height -- no extra +2 (v1.4.8 B1).
+        height -= StatusBar.Height;
 
         return height;
     }
@@ -434,11 +442,24 @@ public sealed class ChatLogWindow : Window
 
     private void TabSwitched(Tab newTab, Tab previousTab)
     {
-        // Use the fixed channel if set by the user, or set it to the current tabs channel if this tab wasn't accessed before
+        // Use the fixed channel if set by the user. Otherwise, if the new tab
+        // has no channel state yet (fresh from JSON, never selected this
+        // session), seed from the previous tab — but deep-clone so we don't
+        // share TellTarget with the previous tab. Without the clone, a later
+        // /tell on the new tab would mutate the pinned tab's TellTarget and
+        // the Party/Linkshell channel would pop back to the pinned tell-mark.
         if (newTab.Channel is not null)
+        {
             newTab.CurrentChannel.Channel = newTab.Channel.Value;
+        }
         else if (newTab.CurrentChannel.Channel is InputChannel.Invalid)
-            newTab.CurrentChannel = previousTab.CurrentChannel;
+        {
+            newTab.CurrentChannel = previousTab.CurrentChannel.Clone();
+            Plugin.LogProxy.Debug(
+                $"[Tab] '{newTab.Name}' seeded channel from '{previousTab.Name}' "
+                    + $"(Channel={newTab.CurrentChannel.Channel}, TellTarget={newTab.CurrentChannel.TellTarget?.ToTargetString() ?? "null"})"
+            );
+        }
 
         SetChannel(newTab.CurrentChannel.Channel);
     }
@@ -462,14 +483,14 @@ public sealed class ChatLogWindow : Window
         if (Plugin.Config.HideInBattle && CurrentHideState == HideState.None && Plugin.InBattle)
         {
             CurrentHideState = HideState.Battle;
-            Plugin.Log.Verbose("HideState: None → Battle");
+            Plugin.LogProxy.Verbose("HideState: None → Battle");
         }
 
         // If the chat is hidden because of battle, we reset it here
         if (CurrentHideState is HideState.Battle && !Plugin.InBattle)
         {
             CurrentHideState = HideState.None;
-            Plugin.Log.Verbose("HideState: Battle → None");
+            Plugin.LogProxy.Verbose("HideState: Battle → None");
         }
 
         // if the chat has no hide state and in a cutscene, set the hide state to cutscene
@@ -482,7 +503,7 @@ public sealed class ChatLogWindow : Window
             if (Plugin.Functions.Chat.CheckHideFlags())
             {
                 CurrentHideState = HideState.Cutscene;
-                Plugin.Log.Verbose("HideState: None → Cutscene");
+                Plugin.LogProxy.Verbose("HideState: None → Cutscene");
             }
         }
 
@@ -493,7 +514,7 @@ public sealed class ChatLogWindow : Window
             && !Plugin.GposeActive
         )
         {
-            Plugin.Log.Verbose($"HideState: {CurrentHideState} → None (cutscene/gpose ended)");
+            Plugin.LogProxy.Verbose($"HideState: {CurrentHideState} → None (cutscene/gpose ended)");
             CurrentHideState = HideState.None;
         }
 
@@ -501,14 +522,14 @@ public sealed class ChatLogWindow : Window
         if (CurrentHideState == HideState.Cutscene && Activate)
         {
             CurrentHideState = HideState.CutsceneOverride;
-            Plugin.Log.Verbose("HideState: Cutscene → CutsceneOverride (user activate)");
+            Plugin.LogProxy.Verbose("HideState: Cutscene → CutsceneOverride (user activate)");
         }
 
         // if the user hid the chat and is now activating chat, reset the hide state
         if (CurrentHideState == HideState.User && Activate)
         {
             CurrentHideState = HideState.None;
-            Plugin.Log.Verbose("HideState: User → None (activate)");
+            Plugin.LogProxy.Verbose("HideState: User → None (activate)");
         }
 
         if (
@@ -615,6 +636,15 @@ public sealed class ChatLogWindow : Window
         IsOpen = true;
     }
 
+    // v1.4.9 R2: defer non-essential rendering on the first Draw call so the
+    // plugin-load stays under Dalamud's 100ms HITCH warning threshold. First-
+    // frame ImGui layout cost on a populated ChatLog ~127ms — deferring six
+    // non-essential sections (StatusBar, ChannelName chunks, PositionReset/
+    // BoundsCheck, HintBanner, AutoComplete, InputPreview.CalculatePreview)
+    // shaves ~33ms down to ~94ms. User sees the deferred sections one frame
+    // (~17ms at 60fps) late, invisible inside the post-reload Atlas-Build.
+    private bool _firstFrameDone;
+
     public override void Draw()
     {
         DrewThisFrame = true;
@@ -622,15 +652,39 @@ public sealed class ChatLogWindow : Window
         {
             DrawChatLog();
             AddPopOutsToDraw();
-            DrawAutoComplete();
+
+            // v1.4.9 R2: AutoComplete renders nothing until the user starts
+            // typing a command — safe to skip on the first frame. ~6ms.
+            if (_firstFrameDone)
+                DrawAutoComplete();
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error drawing Chat Log window");
+            Plugin.LogProxy.Error(ex, "Error drawing Chat Log window");
+            if (!NotifiedDrawFailure)
+            {
+                Plugin.Notification.AddNotification(
+                    new Dalamud.Interface.ImGuiNotification.Notification
+                    {
+                        Title = "Hellion Chat",
+                        Content = "A drawing error occurred. Check /xllog for details.",
+                        Type = Dalamud.Interface.ImGuiNotification.NotificationType.Warning,
+                        InitialDuration = TimeSpan.FromSeconds(20),
+                    }
+                );
+                NotifiedDrawFailure = true;
+            }
             // Prevent recurring draw failures from constantly trying to grab
             // input focus, which breaks every other ImGui window.
             Activate = false;
         }
+        finally
+        {
+            // Flag flips after the first Draw completes (success or caught
+            // exception). Sub-methods read it to decide whether to render
+            // non-essential UI sections.
+            _firstFrameDone = true;
+        }
     }
 
     private static bool IsChatMode =>
@@ -646,18 +700,25 @@ public sealed class ChatLogWindow : Window
         LastWindowSize = currentSize;
         LastWindowPos = ImGui.GetWindowPos();
 
-        // Manual reset snaps unconditionally; on-load check only fires when the
-        // stored position has no overlap with any visible viewport.
-        if (RequestPositionReset)
+        // v1.4.9 R2: skip the bounds-check chain on the first frame. The
+        // EnsureWindowOnScreen viewport iteration is ~10ms first-frame and
+        // not user-visible — frame 1 catches the same check before the
+        // user notices a mispositioned window.
+        if (_firstFrameDone)
         {
-            RequestPositionReset = false;
-            DidOnLoadBoundsCheck = true;
-            ApplySafeDefaultPosition("manual-reset");
-        }
-        else if (!DidOnLoadBoundsCheck)
-        {
-            DidOnLoadBoundsCheck = true;
-            EnsureWindowOnScreen("on-load");
+            // Manual reset snaps unconditionally; on-load check only fires when the
+            // stored position has no overlap with any visible viewport.
+            if (RequestPositionReset)
+            {
+                RequestPositionReset = false;
+                DidOnLoadBoundsCheck = true;
+                ApplySafeDefaultPosition("manual-reset");
+            }
+            else if (!DidOnLoadBoundsCheck)
+            {
+                DidOnLoadBoundsCheck = true;
+                EnsureWindowOnScreen("on-load");
+            }
         }
 
         if (resized)
@@ -666,12 +727,17 @@ public sealed class ChatLogWindow : Window
         LastViewport = ImGui.GetWindowViewport().Handle;
         WasDocked = ImGui.IsWindowDocked();
 
-        if (IsChatMode && Plugin.InputPreview.IsDrawable)
+        // v1.4.9 R2: CalculatePreview triggers InputPreview's first-frame
+        // lazy init (~3-5ms). User-typing-driven, safe to defer one frame.
+        if (_firstFrameDone && IsChatMode && Plugin.InputPreview.IsDrawable)
             Plugin.InputPreview.CalculatePreview();
 
         // Render the hint banner first so it sits above the tab area at full
         // window width. ImGui accounts for its height automatically.
-        DrawV061HintBannerIfNeeded();
+        // v1.4.9 R2: skip on first frame (~3-5ms layout cost). The banner
+        // is a v0.6.1 migration notice that returns the same result frame 1.
+        if (_firstFrameDone)
+            DrawV061HintBannerIfNeeded();
 
         if (Plugin.Config.SidebarTabView)
             DrawTabSidebar();
@@ -904,7 +970,11 @@ public sealed class ChatLogWindow : Window
 
         // v1.2.0 — Bottom-Status-Bar. Letzter Render-Step in DrawChatLog,
         // damit alle Zeilen-Operationen davor keine Layout-Sprünge auslösen.
-        Plugin.StatusBar.Draw(Plugin);
+        // v1.4.9 R2: skip on the first frame; ~12ms of first-frame layout
+        // cost. User sees the StatusBar 1 frame (~17ms at 60fps) later
+        // which is hidden inside the post-reload Atlas-Build window.
+        if (_firstFrameDone)
+            Plugin.StatusBar.Draw(Plugin);
     }
 
     internal Dictionary<string, InputChannel> GetValidChannels()
@@ -955,6 +1025,16 @@ public sealed class ChatLogWindow : Window
 
     private void DrawChannelName(Tab activeTab)
     {
+        // v1.4.9 R2: plain-text fallback on the first frame. ReadChannelName
+        // builds SeString chunks and DrawChunks runs SeString-Renderer layout
+        // — together ~18ms first-frame. Frame 1 renders the real chunks; the
+        // user sees the tab name for ~17ms during the post-reload window.
+        if (!_firstFrameDone)
+        {
+            ImGui.TextUnformatted(activeTab.Name);
+            return;
+        }
+
         var currentChannel = ReadChannelName(activeTab);
         if (!currentChannel.SequenceEqual(PreviousChannel))
             PreviousChannel = currentChannel;
@@ -1588,7 +1668,7 @@ public sealed class ChatLogWindow : Window
         }
         catch (Exception ex)
         {
-            Plugin.Log.Warning(ex, "Error drawing chat log");
+            Plugin.LogProxy.Warning(ex, "Error drawing chat log");
         }
     }
 
@@ -1620,17 +1700,21 @@ public sealed class ChatLogWindow : Window
                 continue;
 
             // Active-tab underline pill (2px accent). No native ImGui underline API,
-            // so we use a direct DrawList pass.
+            // so we use a direct DrawList pass. Pill height scales with GlobalScale
+            // and all coordinates round to physical pixels so the line stays crisp
+            // on 125/150% DPI setups instead of bleeding into a sub-pixel blur.
             {
                 var theme = Plugin.ThemeRegistry.Active;
                 var min = ImGui.GetItemRectMin();
                 var max = ImGui.GetItemRectMax();
-                const float pillHeight = 2f;
+                var pillHeight = MathF.Max(1f, MathF.Round(2f * ImGuiHelpers.GlobalScale));
+                var yBottom = MathF.Round(max.Y);
+                var yTop = yBottom - pillHeight;
                 ImGui
                     .GetWindowDrawList()
                     .AddRectFilled(
-                        new Vector2(min.X, max.Y - pillHeight),
-                        new Vector2(max.X, max.Y),
+                        new Vector2(MathF.Round(min.X), yTop),
+                        new Vector2(MathF.Round(max.X), yBottom),
                         ColourUtil.RgbaToAbgr(theme.Colors.Accent)
                     );
             }
@@ -1649,6 +1733,30 @@ public sealed class ChatLogWindow : Window
         Plugin.WantedTab = null;
     }
 
+    // Sidebar render order: persistent tabs in their original Plugin.Config.Tabs
+    // position, then pinned TempTabs, then unpinned TempTabs. Returns indices
+    // into Plugin.Config.Tabs so tabI in the loop body still mirrors the real
+    // list position (LastTab / WantedTab stay consistent).
+    private static List<int> BuildSidebarRenderOrder()
+    {
+        var tabs = Plugin.Config.Tabs;
+        var persistent = new List<int>(tabs.Count);
+        var pinned = new List<int>();
+        var unpinned = new List<int>();
+        for (var i = 0; i < tabs.Count; i++)
+        {
+            if (TabLifecycleHelpers.IsInPinnedPool(tabs[i]))
+                pinned.Add(i);
+            else if (TabLifecycleHelpers.IsInUnpinnedPool(tabs[i]))
+                unpinned.Add(i);
+            else
+                persistent.Add(i);
+        }
+        persistent.AddRange(pinned);
+        persistent.AddRange(unpinned);
+        return persistent;
+    }
+
     private void DrawTabSidebar()
     {
         var currentTab = -1;
@@ -1661,7 +1769,8 @@ public sealed class ChatLogWindow : Window
         if (!tabTable.Success)
             return;
 
-        ImGui.TableSetupColumn("tabs", ImGuiTableColumnFlags.WidthFixed, 44f);
+        var sidebarWidth = Math.Clamp(Plugin.Config.SidebarWidth, 44, 160);
+        ImGui.TableSetupColumn("tabs", ImGuiTableColumnFlags.WidthFixed, sidebarWidth);
         ImGui.TableSetupColumn("chat", ImGuiTableColumnFlags.WidthStretch, 1);
 
         ImGui.TableNextColumn();
@@ -1680,23 +1789,42 @@ public sealed class ChatLogWindow : Window
                 ImGui.Dummy(new Vector2(0, ImGui.GetFrameHeightWithSpacing()));
 
                 var previousTab = Plugin.CurrentTab;
-                // Divider rendered once before the first temp tab with a live unit counter.
+                // Render order: persistent → pinned TempTabs → unpinned TempTabs.
+                // Underlying Plugin.Config.Tabs order is untouched (tabI mirrors
+                // the real list index), only the display sequence groups by
+                // section so each section can carry its own divider header.
+                var renderOrder = BuildSidebarRenderOrder();
+                var pinnedHeaderRendered = false;
                 var tempTabHeaderRendered = false;
-                var tempTabCount = Plugin.Config.Tabs.Count(t => t.IsTempTab);
+                var pinnedCount = Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
+                var unpinnedTempCount = Plugin.Config.Tabs.Count(
+                    TabLifecycleHelpers.IsInUnpinnedPool
+                );
 
-                for (var tabI = 0; tabI < Plugin.Config.Tabs.Count; tabI++)
+                foreach (var tabI in renderOrder)
                 {
                     var tab = Plugin.Config.Tabs[tabI];
                     if (tab.PopOut)
                         continue;
 
-                    if (tab.IsTempTab && !tempTabHeaderRendered)
+                    if (TabLifecycleHelpers.IsInPinnedPool(tab) && !pinnedHeaderRendered)
                     {
                         ImGui.Separator();
                         if (!Plugin.Config.AutoTellTabsCompactDisplay)
                         {
                             ImGui.TextDisabled(
-                                $"{HellionStrings.AutoTellTabs_SectionHeader} ({tempTabCount})"
+                                $"{HellionStrings.PinTab_SectionHeader} ({pinnedCount})"
+                            );
+                        }
+                        pinnedHeaderRendered = true;
+                    }
+                    else if (TabLifecycleHelpers.IsInUnpinnedPool(tab) && !tempTabHeaderRendered)
+                    {
+                        ImGui.Separator();
+                        if (!Plugin.Config.AutoTellTabsCompactDisplay)
+                        {
+                            ImGui.TextDisabled(
+                                $"{HellionStrings.AutoTellTabs_SectionHeader} ({unpinnedTempCount})"
                             );
                         }
                         tempTabHeaderRendered = true;
@@ -1785,9 +1913,12 @@ public sealed class ChatLogWindow : Window
                     using (ImRaii.PushColor(ImGuiCol.Text, ColourUtil.RgbaToAbgr(iconColor)))
                     using (Plugin.FontManager.FontAwesome.Push())
                     {
+                        // Button stretches with the configured sidebar width so a
+                        // user-widened sidebar feels intentional, not a 36px icon
+                        // floating in empty space.
                         clicked = ImGui.Button(
                             $"{icon.ToIconString()}##sidebar-tab-{tabI}",
-                            new Vector2(36f, ImGui.GetFrameHeight())
+                            new Vector2(sidebarWidth - 8f, ImGui.GetFrameHeight())
                         );
                     }
 
@@ -1847,11 +1978,35 @@ public sealed class ChatLogWindow : Window
                             );
                     }
 
+                    // Pin indicator: subtle thumbtack glyph top-left of the icon.
+                    // Muted colour because the "Pinned" section header already
+                    // groups these tabs visually — this is just a per-tab
+                    // confirmation glyph, not the primary discoverability cue.
+                    if (tab.IsPinned)
+                    {
+                        var min = ImGui.GetItemRectMin();
+                        const float pinPadding = 1f;
+                        var pinPos = new Vector2(min.X + pinPadding, min.Y + pinPadding);
+                        var pinColor = theme.Colors.TextMuted;
+                        // Dim further so the glyph reads as a hint, not a badge.
+                        var pinAbgr = ColourUtil.RgbaToAbgr(pinColor) & 0x77FFFFFFu;
+                        using (Plugin.FontManager.FontAwesome.Push())
+                        {
+                            ImGui
+                                .GetWindowDrawList()
+                                .AddText(pinPos, pinAbgr, FontAwesomeIcon.Thumbtack.ToIconString());
+                        }
+                    }
+
                     // Tooltip mit Tab-Name + Unread-Counter beim Hover.
                     if (ImGui.IsItemHovered())
                     {
                         using var tt = ImRaii.Tooltip();
                         ImGui.TextUnformatted($"{tab.Name}{unread}");
+                        if (tab.IsPinned)
+                        {
+                            ImGui.TextUnformatted(HellionStrings.PinTab_PinnedTooltip);
+                        }
                     }
 
                     DrawTabContextMenu(tab, tabI);
@@ -1975,10 +2130,7 @@ public sealed class ChatLogWindow : Window
             ImGui.TextUnformatted(FontAwesomeIcon.Crown.ToIconString());
         }
         ImGui.SameLine(0f, gapAfterCrown);
-        using (ImRaii.PushColor(ImGuiCol.Text, titleColor))
-        {
-            ImGui.TextUnformatted(rendered);
-        }
+        DrawHonorificTitleText(rendered, titleColor, title.Glow);
         ImGui.EndGroup();
 
         if (ImGui.IsItemHovered())
@@ -1989,6 +2141,35 @@ public sealed class ChatLogWindow : Window
         ImGui.SameLine();
     }
 
+    // Renders the title text, optionally with a glow outline pre-pass. Glow is
+    // drawn at 8 cardinal offsets (±1 px) in the glow colour at reduced alpha,
+    // then the primary text on top. The pre-pass uses the window draw list so
+    // it composites correctly with the regular ImGui text that follows.
+    private void DrawHonorificTitleText(string rendered, Vector4 titleColor, Vector3? glow)
+    {
+        if (Plugin.Config.ShowHonorificGlow && glow is { } g)
+        {
+            var pos = ImGui.GetCursorScreenPos();
+            var glowColor = new Vector4(g.X, g.Y, g.Z, 0.4f);
+            var glowAbgr = ImGui.ColorConvertFloat4ToU32(glowColor);
+            var drawList = ImGui.GetWindowDrawList();
+            for (var dy = -1; dy <= 1; dy++)
+            {
+                for (var dx = -1; dx <= 1; dx++)
+                {
+                    if (dx == 0 && dy == 0)
+                        continue;
+                    drawList.AddText(new Vector2(pos.X + dx, pos.Y + dy), glowAbgr, rendered);
+                }
+            }
+        }
+
+        using (ImRaii.PushColor(ImGuiCol.Text, titleColor))
+        {
+            ImGui.TextUnformatted(rendered);
+        }
+    }
+
     // One-time hint banner for the pop-out header button and right-click pathway.
     private float DrawV061HintBannerIfNeeded()
     {
@@ -2035,7 +2216,7 @@ public sealed class ChatLogWindow : Window
         {
             Plugin.Config.SeenPopOutHeaderHint = true;
             Plugin.SaveConfig();
-            Plugin.Log.Debug("v0.6.1 pop-out header hint dismissed");
+            Plugin.LogProxy.Debug("v0.6.1 pop-out header hint dismissed");
             if (openSettings)
                 Plugin.SettingsWindow.Toggle();
         }
@@ -2100,10 +2281,52 @@ public sealed class ChatLogWindow : Window
             anyChanged = true;
         }
 
+        if (tab.IsTempTab)
+        {
+            ImGui.Separator();
+            DrawPinControls(tab);
+        }
+
         if (anyChanged)
             Plugin.SaveConfig();
     }
 
+    private void DrawPinControls(Tab tab)
+    {
+        var svc = Plugin.AutoTellTabsService;
+        if (svc == null)
+            return;
+
+        if (tab.IsPinned)
+        {
+            if (ImGui.MenuItem(HellionStrings.PinTab_MenuUnpin))
+            {
+                svc.Unpin(tab);
+                ImGui.CloseCurrentPopup();
+            }
+        }
+        else
+        {
+            var atCap = svc.PinnedTempTabCount >= AutoTellTabsService.MaxPinnedTempTabs;
+            if (ImGui.MenuItem(HellionStrings.PinTab_MenuPin, enabled: !atCap))
+            {
+                if (svc.TryPin(tab))
+                    ImGui.CloseCurrentPopup();
+            }
+            if (ImGui.IsItemHovered(ImGuiHoveredFlags.AllowWhenDisabled))
+            {
+                ImGui.SetTooltip(
+                    atCap
+                        ? string.Format(
+                            HellionStrings.PinTab_LimitReached,
+                            AutoTellTabsService.MaxPinnedTempTabs
+                        )
+                        : HellionStrings.PinTab_PinTooltip
+                );
+            }
+        }
+    }
+
     internal readonly List<bool> PopOutDocked = [];
     internal readonly HashSet<Guid> PopOutWindows = [];
 
@@ -2648,7 +2871,7 @@ public sealed class ChatLogWindow : Window
         var viewport = ImGui.GetMainViewport();
         var safePos = viewport.WorkPos + SafeDefaultOffset;
         Position = safePos;
-        Plugin.Log.Info(
+        Plugin.LogProxy.Info(
             $"[Window-Recovery] {source}: snapping main window from {LastWindowPos} (size {LastWindowSize}) to {safePos}."
         );
 

HellionChat/Ui/DbViewer.cs

@@ -2,6 +2,7 @@
 using System.Globalization;
 using System.Numerics;
 using System.Text;
+using System.Threading;
 using Dalamud.Bindings.ImGui;
 using Dalamud.Game.Text.SeStringHandling.Payloads;
 using Dalamud.Interface;
@@ -33,11 +34,21 @@ public class DbViewer : Window
 
     private int CurrentPage = 1;
     private string SimpleSearchTerm = "";
+
+    // v1.4.8 H2: opt-in full-text search across the whole DB via FTS5.
+    // Transient UI state (per-session), not persisted -- users opt in fresh
+    // every time so they always see the page-filter as the default mode.
+    private bool UseFullTextSearch;
+
     private bool OnlyCurrentCharacter = true;
     private readonly Dictionary<ChatType, (ChatSource, ChatSource)> SelectedChannels;
 
     private bool IsProcessing;
     private long ProcessingStart = Environment.TickCount64;
+
+    // Bumped per trigger so a late worker drops itself instead of overwriting
+    // a newer result.
+    private long _ftsFilterSeq;
     private (DateTime Min, DateTime Max, int Page, bool Local, int ChannelCount) LastProcessed;
 
     private string MinDateString = "";
@@ -82,29 +93,13 @@ public class DbViewer : Window
 
         RespectCloseHotkey = false;
         DisableWindowSounds = true;
-
-        Plugin
-            .Commands.Register(
-                "/hellionView",
-                "Get access to your message history, with simple filter options.",
-                true
-            )
-            .Execute += Toggle;
     }
 
     public void Dispose()
     {
-        Plugin
-            .Commands.Register(
-                "/hellionView",
-                "Get access to your message history, with simple filter options.",
-                true
-            )
-            .Execute -= Toggle;
+        // Slash-command tear-down moved to Plugin.TearDownCommands.
     }
 
-    private void Toggle(string _, string __) => Toggle();
-
     public override void Draw()
     {
         var totalPages = (int)Math.Ceiling((double)Count / RowPerPage);
@@ -233,6 +228,24 @@ public class DbViewer : Window
             tooltipRight: Language.Page_ArrowRight_Tooltip
         );
 
+        // Full-text search toggle (v1.4.8 H2). IsFtsIndexBuilt is a cached
+        // volatile bool in MessageStore -- single field read per frame, no
+        // SELECT count(*). ImRaii.Disabled blocks any click while the index
+        // is still being built, so no defensive force-off branch needed
+        // inside the if-body. UseFullTextSearch is transient UI state, so we
+        // do not call SaveConfig here.
+        var ftsReady = Plugin.MessageManager.Store.IsFtsIndexBuilt;
+        using (ImRaii.Disabled(!ftsReady))
+        {
+            if (ImGui.Checkbox(HellionStrings.DbViewer_FullTextToggle, ref UseFullTextSearch))
+                TriggerFilterRefresh();
+        }
+        ImGuiUtil.HelpMarker(
+            ftsReady
+                ? HellionStrings.DbViewer_FullTextToggle_Hint_PhraseMode
+                : HellionStrings.DbViewer_FullTextToggle_Hint_Indexing
+        );
+
         ImGui.SameLine(ImGui.GetContentRegionMax().X - width);
         ImGui.SetNextItemWidth(width);
         if (
@@ -243,7 +256,7 @@ public class DbViewer : Window
                 30
             )
         )
-            Filtered = Filter(Messages);
+            TriggerFilterRefresh();
 
         // Third row
 
@@ -307,7 +320,7 @@ public class DbViewer : Window
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Failed reading messages from database");
+                    Plugin.LogProxy.Error(ex, "Failed reading messages from database");
                 }
                 finally
                 {
@@ -447,11 +460,53 @@ public class DbViewer : Window
         }
     }
 
+    // FTS path hits SQLite per keystroke -- dispatch to a worker, drop stale
+    // results via _ftsFilterSeq. Page-filter path is in-memory LINQ, stays
+    // inline.
+    private void TriggerFilterRefresh()
+    {
+        if (!UseFullTextSearch || !Plugin.MessageManager.Store.IsFtsIndexBuilt)
+        {
+            Filtered = Filter(Messages);
+            return;
+        }
+
+        var snapshot = Messages;
+        var mySeq = Interlocked.Increment(ref _ftsFilterSeq);
+        Task.Run(() =>
+        {
+            try
+            {
+                var result = Filter(snapshot);
+                if (Interlocked.Read(ref _ftsFilterSeq) == mySeq)
+                    Filtered = result;
+            }
+            catch (Exception ex)
+            {
+                Plugin.LogProxy.Error(ex, "FTS filter worker failed");
+            }
+        });
+    }
+
     private ConcurrentStack<Message> Filter(Message[] messages)
     {
         if (SimpleSearchTerm == "")
             return new ConcurrentStack<Message>(messages.Reverse().OrderByDescending(m => m.Date));
 
+        // Full-text mode bypasses the page-bounded messages array and queries
+        // the FTS5 index across the whole DB. IsFtsIndexBuilt re-check guards
+        // against the (rare) case of the toggle being on while the index is
+        // mid-rebuild -- ImRaii.Disabled prevents the user from flipping it,
+        // but a Dispose-and-reopen during indexing could leave UseFullTextSearch
+        // true while ftsReady flipped back to false; the local fallback below
+        // still serves the page.
+        if (UseFullTextSearch && Plugin.MessageManager.Store.IsFtsIndexBuilt)
+        {
+            var guidHits = Plugin.MessageManager.Store.FullTextSearch(SimpleSearchTerm);
+            var resolved = Plugin.MessageManager.Store.LoadByGuids(guidHits);
+            return new ConcurrentStack<Message>(resolved.OrderByDescending(m => m.Date));
+        }
+
         return new ConcurrentStack<Message>(
             messages
                 .Reverse()
@@ -570,7 +625,7 @@ public class DbViewer : Window
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Failed creating txt backup");
+                Plugin.LogProxy.Error(ex, "Failed creating txt backup");
 
                 Notification.Content = "Error ...";
                 Notification.Type = NotificationType.Error;

HellionChat/Ui/Debugger.cs

@@ -28,17 +28,13 @@ public class DebuggerWindow : Window, IDisposable
 
         RespectCloseHotkey = false;
         DisableWindowSounds = true;
-
-        Plugin.Commands.Register("/hellionDebugger", showInHelp: false).Execute += Toggle;
     }
 
     public void Dispose()
     {
-        Plugin.Commands.Register("/hellionDebugger", showInHelp: false).Execute -= Toggle;
+        // Slash-command tear-down moved to Plugin.TearDownCommands.
     }
 
-    private void Toggle(string _, string __) => Toggle();
-
     public override unsafe void Draw()
     {
         var agent = (nint)AgentItemDetail.Instance();

HellionChat/Ui/FirstRunWizard.cs

@@ -30,14 +30,10 @@ public sealed class FirstRunWizard : Window
 
     public override void OnClose()
     {
-        // Closing the wizard without picking anything = the user accepts
-        // whatever defaults are already in place. Mark as complete so we
-        // don't pester them again on the next launch.
-        if (!Plugin.Config.FirstRunCompleted)
-        {
-            Plugin.Config.FirstRunCompleted = true;
-            Plugin.SaveConfig();
-        }
+        // OnClose fires on explicit X-click and on plugin dispose. We never
+        // implicitly accept the defaults here — the explicit "Later" button
+        // does that. If the user hasn't picked a profile yet, the wizard
+        // reopens on the next plugin load.
     }
 
     public override void Draw()
@@ -49,7 +45,12 @@ public sealed class FirstRunWizard : Window
 
         var avail = ImGui.GetContentRegionAvail();
         var cardWidth = (avail.X - ImGui.GetStyle().ItemSpacing.X * 2) / 3f;
-        var cardHeight = avail.Y - ImGui.GetTextLineHeightWithSpacing();
+        // Reserve room for the footer separator + cancel button below the cards.
+        var footerReserve =
+            ImGui.GetStyle().ItemSpacing.Y * 3
+            + ImGui.GetTextLineHeight()
+            + ImGui.GetFrameHeightWithSpacing();
+        var cardHeight = avail.Y - footerReserve;
 
         DrawCard(
             "privacy-first",
@@ -87,6 +88,20 @@ public sealed class FirstRunWizard : Window
             HellionStrings.Wizard_Profile_FullHistory_Apply,
             ApplyFullHistory
         );
+
+        ImGui.Spacing();
+        ImGui.Separator();
+        ImGui.Spacing();
+
+        if (ImGui.Button(HellionStrings.Wizard_Cancel_Label))
+        {
+            Plugin.Config.FirstRunCompleted = true;
+            Plugin.SaveConfig();
+            IsOpen = false;
+        }
+
+        if (ImGui.IsItemHovered())
+            ImGuiUtil.Tooltip(HellionStrings.Wizard_Cancel_Tooltip);
     }
 
     private void DrawCard(

HellionChat/Ui/HellionStyle.cs

@@ -43,13 +43,10 @@ internal static class HellionStyle
         var alphaByte = (uint)Math.Clamp((int)(windowOpacity * 255f), 0x55, 0xFF);
         var windowBgWithAlpha = (c.WindowBg & 0xFFFFFF00u) | alphaByte;
 
-        // ChildBg alpha: child areas rendered inside ChatLogWindow would
-        // multiply their alpha with WindowBg, making 50% opacity appear
-        // ~75% solid. At full opacity the theme's alpha is preserved; below
-        // it ChildBg goes fully transparent so only WindowBg sets the final
-        // coverage.
-        var childBgAlpha = windowOpacity >= 0.999f ? (c.ChildBg & 0xFFu) : 0u;
-        var childBgWithAlpha = (c.ChildBg & 0xFFFFFF00u) | childBgAlpha;
+        // ChildBg alpha resolution lives in HellionStyleHelpers so the
+        // threshold logic can be covered by a pure-helper test in the
+        // build suite.
+        var childBgWithAlpha = HellionStyleHelpers.ResolveChildBgAlpha(c.ChildBg, windowOpacity);
 
         // Layout
         stack.PushStyleVar(ImGuiStyleVar.WindowRounding, l.WindowRounding);

HellionChat/Ui/HellionStyleHelpers.cs

@@ -0,0 +1,17 @@
+namespace HellionChat.Ui;
+
+internal static class HellionStyleHelpers
+{
+    // Child surfaces are drawn over WindowBg, so at partial window opacity
+    // the theme's own ChildBg alpha would double-multiply and read too solid.
+    // Above ~full opacity we preserve the theme alpha; below it we wipe to 0
+    // so WindowBg alone carries the coverage. The 0.999f threshold is a
+    // float-imprecision guard around the user-facing 100% slider value.
+    // TEST-MIRROR: ../../Hellion Build test/_Helpers/HellionStyleHelpersTests.cs
+    public static uint ResolveChildBgAlpha(uint themeChildBgRgba, float windowOpacity)
+    {
+        var alphaPreserved = windowOpacity >= 0.999f;
+        var childBgAlpha = alphaPreserved ? (themeChildBgRgba & 0xFFu) : 0u;
+        return (themeChildBgRgba & 0xFFFFFF00u) | childBgAlpha;
+    }
+}

HellionChat/Ui/Popout.cs

@@ -175,7 +175,7 @@ internal class Popout : Window
         {
             Plugin.Config.SeenPopOutInputHint = true;
             ChatLogWindow.Plugin.SaveConfig();
-            Plugin.Log.Debug("Pop-Out input hint dismissed");
+            Plugin.LogProxy.Debug("Pop-Out input hint dismissed");
             if (openSettings)
                 ChatLogWindow.Plugin.SettingsWindow.Toggle();
         }
@@ -214,13 +214,13 @@ internal class Popout : Window
         if (Tab.HideInBattle && CurrentHideState == HideState.None && Plugin.InBattle)
         {
             CurrentHideState = HideState.Battle;
-            Plugin.Log.Verbose($"Popout HideState [{Tab.Name}]: None -> Battle");
+            Plugin.LogProxy.Verbose($"Popout HideState [{Tab.Name}]: None -> Battle");
         }
 
         if (CurrentHideState is HideState.Battle && !Plugin.InBattle)
         {
             CurrentHideState = HideState.None;
-            Plugin.Log.Verbose($"Popout HideState [{Tab.Name}]: Battle -> None");
+            Plugin.LogProxy.Verbose($"Popout HideState [{Tab.Name}]: Battle -> None");
         }
 
         if (
@@ -232,7 +232,7 @@ internal class Popout : Window
             if (ChatLogWindow.Plugin.Functions.Chat.CheckHideFlags())
             {
                 CurrentHideState = HideState.Cutscene;
-                Plugin.Log.Verbose($"Popout HideState [{Tab.Name}]: None -> Cutscene");
+                Plugin.LogProxy.Verbose($"Popout HideState [{Tab.Name}]: None -> Cutscene");
             }
         }
 
@@ -242,7 +242,7 @@ internal class Popout : Window
             && !Plugin.GposeActive
         )
         {
-            Plugin.Log.Verbose(
+            Plugin.LogProxy.Verbose(
                 $"Popout HideState [{Tab.Name}]: {CurrentHideState} -> None (cutscene/gpose ended)"
             );
             CurrentHideState = HideState.None;
@@ -251,7 +251,7 @@ internal class Popout : Window
         if (CurrentHideState == HideState.Cutscene && ChatLogWindow.Activate)
         {
             CurrentHideState = HideState.CutsceneOverride;
-            Plugin.Log.Verbose(
+            Plugin.LogProxy.Verbose(
                 $"Popout HideState [{Tab.Name}]: Cutscene -> CutsceneOverride (user activate)"
             );
         }
@@ -259,7 +259,7 @@ internal class Popout : Window
         if (CurrentHideState == HideState.User && ChatLogWindow.Activate)
         {
             CurrentHideState = HideState.None;
-            Plugin.Log.Verbose($"Popout HideState [{Tab.Name}]: User -> None (activate)");
+            Plugin.LogProxy.Verbose($"Popout HideState [{Tab.Name}]: User -> None (activate)");
         }
 
         return CurrentHideState is HideState.Cutscene or HideState.User or HideState.Battle

HellionChat/Ui/SeStringDebugger.cs

@@ -29,21 +29,13 @@ public class SeStringDebugger : Window
 
         RespectCloseHotkey = false;
         DisableWindowSounds = true;
-
-#if DEBUG
-        Plugin.Commands.Register("/hellionSeString", showInHelp: false).Execute += Toggle;
-#endif
     }
 
     public void Dispose()
     {
-#if DEBUG
-        Plugin.Commands.Register("/hellionSeString", showInHelp: false).Execute -= Toggle;
-#endif
+        // Slash-command tear-down moved to Plugin.TearDownCommands.
     }
 
-    private void Toggle(string _, string __) => Toggle();
-
     public override void Draw()
     {
         if (Plugin.MessageManager.LastMessage.Sender == null)

HellionChat/Ui/Settings.cs

@@ -60,23 +60,11 @@ public sealed class SettingsWindow : Dalamud.Interface.Windowing.Window
         DisableWindowSounds = true;
 
         Initialise();
-
-        Plugin
-            .Commands.Register("/hellion", "Perform various actions with Hellion Chat.")
-            .Execute += Command;
-        Plugin.Interface.UiBuilder.OpenConfigUi += Toggle;
     }
 
     public void Dispose()
     {
-        Plugin.Interface.UiBuilder.OpenConfigUi -= Toggle;
-        Plugin.Commands.Register("/hellion").Execute -= Command;
-    }
-
-    private void Command(string command, string args)
-    {
-        if (string.IsNullOrWhiteSpace(args))
-            Toggle();
+        // Slash-command + OpenConfigUi tear-down moved to Plugin.TearDownCommands.
     }
 
     private void Initialise()
@@ -199,12 +187,12 @@ public sealed class SettingsWindow : Dalamud.Interface.Windowing.Window
             );
 
             if (ImGui.Button(buttonLabel2))
-                Dalamud.Utility.Util.OpenLink("https://ko-fi.com/infiii");
+                Plugin.PlatformUtil.OpenLink("https://ko-fi.com/infiii");
 
             ImGui.SameLine();
 
             if (ImGui.Button(buttonLabel))
-                Dalamud.Utility.Util.OpenLink("https://ko-fi.com/lojewalo");
+                Plugin.PlatformUtil.OpenLink("https://ko-fi.com/lojewalo");
         }
 
         if (!save)

HellionChat/Ui/SettingsOverview.cs

@@ -79,11 +79,13 @@ internal sealed class SettingsOverview
         // 110f accommodates two-line subtexts; wrap width is matched in DrawCard.
         var cardHeight = 110f;
 
+        // One draw-list lookup per frame instead of one per card.
+        var drawList = ImGui.GetWindowDrawList();
         var cardDefs = BuildCardDefs();
         for (var i = 0; i < cardDefs.Length; i++)
         {
             var (icon, title, subtext) = cardDefs[i];
-            DrawCard(i, icon, title, subtext, cardWidth, cardHeight);
+            DrawCard(i, icon, title, subtext, cardWidth, cardHeight, drawList);
 
             if ((i + 1) % columns != 0 && i != cardDefs.Length - 1)
                 ImGui.SameLine();
@@ -96,7 +98,8 @@ internal sealed class SettingsOverview
         string title,
         string subtext,
         float w,
-        float h
+        float h,
+        ImDrawListPtr drawList
     )
     {
         // BeginGroup makes the card a single layout item so SameLine works
@@ -108,8 +111,7 @@ internal sealed class SettingsOverview
         var hovered = ImGui.IsItemHovered();
         var bgColor = hovered ? 0xFF22303Fu : 0xFF1A2538u;
 
-        var draw = ImGui.GetWindowDrawList();
-        draw.AddRectFilled(cursorBefore, cursorBefore + new Vector2(w, h), bgColor, 4f);
+        drawList.AddRectFilled(cursorBefore, cursorBefore + new Vector2(w, h), bgColor, 4f);
 
         var iconPos = cursorBefore + new Vector2(16f, 12f);
         var titlePos = cursorBefore + new Vector2(16f, 40f);
@@ -120,15 +122,15 @@ internal sealed class SettingsOverview
 
         using (_window.Plugin.FontManager.FontAwesome.Push())
         {
-            draw.AddText(iconPos, titleColor, icon.ToIconString());
+            drawList.AddText(iconPos, titleColor, icon.ToIconString());
         }
 
-        draw.AddText(titlePos, titleColor, title);
+        drawList.AddText(titlePos, titleColor, title);
 
         // Subtext wraps at card inner width (16px padding each side) via DrawList
         // to avoid expanding the group bounds and breaking SameLine in the card row.
         var subtextWrapWidth = w - 32f;
-        draw.AddText(
+        drawList.AddText(
             ImGui.GetFont(),
             ImGui.GetFontSize(),
             subtextPos,

HellionChat/Ui/SettingsTabs/DataManagement.cs

@@ -229,7 +229,7 @@ internal sealed class DataManagement : ISettingsTab
                     }
                     catch (Exception e)
                     {
-                        Plugin.Log.Error(e, "Unable to delete old database");
+                        Plugin.LogProxy.Error(e, "Unable to delete old database");
                         WrapperUtil.AddNotification(
                             Language.Options_Database_Old_Delete_Error,
                             NotificationType.Error
@@ -391,7 +391,9 @@ internal sealed class DataManagement : ISettingsTab
                 Plugin.Config.RetentionLastRunAt = DateTimeOffset.UtcNow;
                 Plugin.SaveConfig();
 
-                Plugin.Log.Information($"Manual retention run deleted {deleted} expired messages.");
+                Plugin.LogProxy.Information(
+                    $"Manual retention run deleted {deleted} expired messages."
+                );
 
                 if (deleted > 0)
                 {
@@ -405,7 +407,7 @@ internal sealed class DataManagement : ISettingsTab
                             .Wait(TimeSpan.FromSeconds(5))
                     )
                     {
-                        Plugin.Log.Warning(
+                        Plugin.LogProxy.Warning(
                             "Retention sweep: framework refresh timed out after 5s."
                         );
                     }
@@ -418,7 +420,7 @@ internal sealed class DataManagement : ISettingsTab
             }
             catch (Exception e)
             {
-                Plugin.Log.Error(e, "Manual retention run failed");
+                Plugin.LogProxy.Error(e, "Manual retention run failed");
                 WrapperUtil.AddNotification(HellionStrings.Retention_Error, NotificationType.Error);
             }
             finally
@@ -566,7 +568,7 @@ internal sealed class DataManagement : ISettingsTab
         }
         catch (Exception e)
         {
-            Plugin.Log.Error(e, "Failed to compute cleanup preview");
+            Plugin.LogProxy.Error(e, "Failed to compute cleanup preview");
             WrapperUtil.AddNotification(
                 HellionStrings.Cleanup_PreviewError,
                 NotificationType.Error
@@ -587,7 +589,7 @@ internal sealed class DataManagement : ISettingsTab
             try
             {
                 var deleted = Plugin.MessageManager.Store.CleanupRetainOnly(allowed);
-                Plugin.Log.Information($"Privacy cleanup: deleted {deleted} messages");
+                Plugin.LogProxy.Information($"Privacy cleanup: deleted {deleted} messages");
 
                 if (
                     !Plugin
@@ -599,7 +601,9 @@ internal sealed class DataManagement : ISettingsTab
                         .Wait(TimeSpan.FromSeconds(5))
                 )
                 {
-                    Plugin.Log.Warning("Privacy cleanup: framework refresh timed out after 5s.");
+                    Plugin.LogProxy.Warning(
+                        "Privacy cleanup: framework refresh timed out after 5s."
+                    );
                 }
 
                 WrapperUtil.AddNotification(
@@ -609,7 +613,7 @@ internal sealed class DataManagement : ISettingsTab
             }
             catch (Exception e)
             {
-                Plugin.Log.Error(e, "Privacy cleanup failed");
+                Plugin.LogProxy.Error(e, "Privacy cleanup failed");
                 WrapperUtil.AddNotification(HellionStrings.Cleanup_Error, NotificationType.Error);
             }
             finally
@@ -769,7 +773,7 @@ internal sealed class DataManagement : ISettingsTab
             }
             catch (Exception e)
             {
-                Plugin.Log.Error(e, "Export failed");
+                Plugin.LogProxy.Error(e, "Export failed");
                 WrapperUtil.AddNotification(HellionStrings.Export_Error, NotificationType.Error);
             }
             finally
@@ -849,7 +853,7 @@ internal sealed class DataManagement : ISettingsTab
                 )
             )
             {
-                Plugin.Log.Warning("Clearing messages from database");
+                Plugin.LogProxy.Warning("Clearing messages from database");
                 Plugin.MessageManager.Store.ClearMessages();
                 Plugin.MessageManager.ClearAllTabs();
 
@@ -907,7 +911,7 @@ internal sealed class DataManagement : ISettingsTab
 
     private void InsertMessages(int count)
     {
-        Plugin.Log.Info($"Inserting {count} messages due to user request");
+        Plugin.LogProxy.Info($"Inserting {count} messages due to user request");
 
         var stopwatch = Stopwatch.StartNew();
         var playerName = Plugin.PlayerState.CharacterName;
@@ -952,7 +956,7 @@ internal sealed class DataManagement : ISettingsTab
 
         var elapsedTicks = stopwatch.ElapsedTicks;
         stopwatch.Stop();
-        Plugin.Log.Info(
+        Plugin.LogProxy.Info(
             $"Crafted {count} messages in {elapsedTicks} ticks ({elapsedTicks / TimeSpan.TicksPerMillisecond}ms)"
         );
 
@@ -962,7 +966,7 @@ internal sealed class DataManagement : ISettingsTab
 
         elapsedTicks = stopwatch.ElapsedTicks;
         stopwatch.Stop();
-        Plugin.Log.Info(
+        Plugin.LogProxy.Info(
             $"Upserted {count} messages in {elapsedTicks} ticks ({elapsedTicks / TimeSpan.TicksPerMillisecond}ms)"
         );
 
@@ -973,7 +977,7 @@ internal sealed class DataManagement : ISettingsTab
                 Plugin.MessageManager.ClearAllTabs();
                 elapsedTicks = stopwatch.ElapsedTicks;
                 stopwatch.Stop();
-                Plugin.Log.Info(
+                Plugin.LogProxy.Info(
                     $"Cleared {Plugin.Config.Tabs.Count} tabs in {elapsedTicks} ticks ({elapsedTicks / TimeSpan.TicksPerMillisecond}ms)"
                 );
             })
@@ -986,7 +990,7 @@ internal sealed class DataManagement : ISettingsTab
                 Plugin.MessageManager.FilterAllTabs();
                 elapsedTicks = stopwatch.ElapsedTicks;
                 stopwatch.Stop();
-                Plugin.Log.Info(
+                Plugin.LogProxy.Info(
                     $"Fetched and filtered all tabs in {elapsedTicks} ticks ({elapsedTicks / TimeSpan.TicksPerMillisecond}ms)"
                 );
             })

HellionChat/Ui/SettingsTabs/FontsAndColours.cs

@@ -312,6 +312,6 @@ internal sealed class FontsAndColours : ISettingsTab
         }
         Plugin.SaveConfig();
         GlobalParametersCache.Refresh();
-        Plugin.Log.Debug($"Applied chat colour preset: {preset.DisplayName}");
+        Plugin.LogProxy.Debug($"Applied chat colour preset: {preset.DisplayName}");
     }
 }

HellionChat/Ui/SettingsTabs/Information.cs

@@ -97,7 +97,7 @@ internal sealed class Information : ISettingsTab
             ImGui.TextUnformatted(Language.Options_About_Github_Issues);
             ImGui.SameLine();
             if (ImGuiUtil.IconButton(FontAwesomeIcon.ExternalLinkAlt, "githubIssues"))
-                Dalamud.Utility.Util.OpenLink(
+                Plugin.PlatformUtil.OpenLink(
                     "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/issues"
                 );
         }
@@ -116,7 +116,7 @@ internal sealed class Information : ISettingsTab
             ImGui.TextUnformatted(HellionStrings.About_Maintainer_Website_Label);
             ImGui.SameLine();
             if (ImGuiUtil.IconButton(FontAwesomeIcon.ExternalLinkAlt, "hellionMedia"))
-                Dalamud.Utility.Util.OpenLink("https://hellion-media.de");
+                Plugin.PlatformUtil.OpenLink("https://hellion-media.de");
 
             ImGuiHelpers.ScaledDummy(10.0f);
 
@@ -137,7 +137,7 @@ internal sealed class Information : ISettingsTab
             ImGui.TextUnformatted(HellionStrings.About_BuiltOn_Upstream_Label);
             ImGui.SameLine();
             if (ImGuiUtil.IconButton(FontAwesomeIcon.ExternalLinkAlt, "chatTwoUpstream"))
-                Dalamud.Utility.Util.OpenLink("https://github.com/Infiziert90/ChatTwo");
+                Plugin.PlatformUtil.OpenLink("https://github.com/Infiziert90/ChatTwo");
 
             ImGuiHelpers.ScaledDummy(10.0f);
 

HellionChat/Ui/SettingsTabs/Integrations.cs

@@ -71,6 +71,17 @@ internal sealed class Integrations : ISettingsTab
             {
                 ImGui.TextWrapped(HellionStrings.Settings_Integrations_Honorific_ToggleHint);
             }
+
+            if (
+                ImGui.Checkbox(
+                    HellionStrings.Settings_Integrations_Honorific_Glow_Toggle,
+                    ref Mutable.ShowHonorificGlow
+                )
+            )
+            {
+                Plugin.SaveConfig();
+            }
+            ImGuiUtil.HelpMarker(HellionStrings.Settings_Integrations_Honorific_Glow_Hint);
         }
 
         // Honorific has no LICENSE in its repo so we link upstream and author
@@ -79,12 +90,12 @@ internal sealed class Integrations : ISettingsTab
         ImGui.Spacing();
         if (ImGui.Button(HellionStrings.Settings_Integrations_Honorific_LinkRepo))
         {
-            Dalamud.Utility.Util.OpenLink(IntegrationLinks.HonorificRepo);
+            Plugin.PlatformUtil.OpenLink(IntegrationLinks.HonorificRepo);
         }
         ImGui.SameLine();
         if (ImGui.Button(HellionStrings.Settings_Integrations_Honorific_LinkAuthor))
         {
-            Dalamud.Utility.Util.OpenLink(IntegrationLinks.HonorificAuthor);
+            Plugin.PlatformUtil.OpenLink(IntegrationLinks.HonorificAuthor);
         }
     }
 
@@ -193,7 +204,7 @@ internal sealed class Integrations : ISettingsTab
 
         if (ImGui.Button(HellionStrings.Settings_Integrations_GotAnIdea_LinkLabel))
         {
-            Dalamud.Utility.Util.OpenLink(BrandingLinks.HellionForgeDiscordInvite);
+            Plugin.PlatformUtil.OpenLink(BrandingLinks.HellionForgeDiscordInvite);
         }
     }
 

HellionChat/Ui/SettingsTabs/ThemeAndLayout.cs

@@ -78,7 +78,7 @@ internal sealed class ThemeAndLayout : ISettingsTab
             {
                 var dir = Path.Combine(Plugin.Interface.ConfigDirectory.FullName, "themes");
                 Directory.CreateDirectory(dir);
-                Dalamud.Utility.Util.OpenLink(dir);
+                Plugin.PlatformUtil.OpenLink(dir);
             }
 
             ImGui.SameLine();
@@ -90,7 +90,7 @@ internal sealed class ThemeAndLayout : ISettingsTab
                 var path = Path.Combine(dir, fileName);
                 var json = ThemeJsonWriter.Serialize(active);
                 File.WriteAllText(path, json);
-                Plugin.Log.Information($"Exported active theme '{active.Slug}' to {path}");
+                Plugin.LogProxy.Information($"Exported active theme '{active.Slug}' to {path}");
             }
         }
     }
@@ -250,6 +250,26 @@ internal sealed class ThemeAndLayout : ISettingsTab
                 string.Format(Language.Options_SidebarTabView_Description, Plugin.PluginName)
             );
 
+            if (Mutable.SidebarTabView)
+            {
+                var sidebarWidth = Mutable.SidebarWidth;
+                if (
+                    ImGui.SliderInt(
+                        HellionStrings.Settings_ThemeAndLayout_SidebarWidth_Name,
+                        ref sidebarWidth,
+                        44,
+                        160,
+                        $"{sidebarWidth} px"
+                    )
+                )
+                {
+                    Mutable.SidebarWidth = sidebarWidth;
+                }
+                ImGuiUtil.HelpMarker(
+                    HellionStrings.Settings_ThemeAndLayout_SidebarWidth_Description
+                );
+            }
+
             ImGui.Spacing();
             ImGui.Separator();
             ImGui.Spacing();

HellionChat/Ui/StatusBar.cs

@@ -2,6 +2,7 @@ using System.Globalization;
 using System.Numerics;
 using Dalamud.Bindings.ImGui;
 using Dalamud.Interface;
+using Dalamud.Interface.Utility;
 using Dalamud.Interface.Utility.Raii;
 using HellionChat.Code;
 using HellionChat.Resources;
@@ -9,12 +10,20 @@ using HellionChat.Util;
 
 namespace HellionChat.Ui;
 
-// Bottom status bar, 22px tall. Slots left to right: channel indicator,
-// privacy badge, counts, tells (hidden at 0), version (right-aligned).
-// Updates at 1Hz; format strings are cached between updates.
+// Bottom status bar. Slots left to right: channel indicator, privacy badge,
+// counts, tells (hidden at 0), version (right-aligned). Updates at 1Hz;
+// format strings are cached between updates.
 internal sealed class StatusBar
 {
-    public const float Height = 22f;
+    // DPI-aware bar height. The previous fixed 22px constant clipped on
+    // Windows display-scaling >100% because ImGui renders the font bigger
+    // than the reservation. GetTextLineHeightWithSpacing scales with the
+    // current ImGui font; the 2px spacer is GlobalScale-rounded to stay
+    // on integer pixel boundaries (same idiom as v1.4.6 F7.2 underline-pill
+    // in ChatLogWindow.cs:1639-1653).
+    public static float Height =>
+        ImGui.GetTextLineHeightWithSpacing() + MathF.Round(2f * ImGuiHelpers.GlobalScale);
+
     private const long UpdateIntervalMs = 1000;
 
     // Initially outdated so the first frame always computes fresh.
@@ -144,14 +153,20 @@ internal sealed class StatusBar
             ImGui.TextUnformatted(_cachedTellsText);
         }
 
-        // Slot 5: version, right-aligned, muted
+        // Slot 5: version, right-aligned, muted. Hidden when the window is
+        // too narrow to fit all five slots — the other four need ~200 px
+        // before the version text starts clipping into them.
         var versionText = $"v{Plugin.Interface.Manifest.AssemblyVersion} · Hellion";
         var versionWidth = ImGui.CalcTextSize(versionText).X;
         var contentRegionMax = ImGui.GetContentRegionMax().X;
-        ImGui.SameLine(contentRegionMax - versionWidth);
-        using (ImRaii.PushColor(ImGuiCol.Text, ColourUtil.RgbaToAbgr(theme.Colors.TextMuted)))
+        const float MinOtherSlotsWidth = 200f;
+        if (contentRegionMax - versionWidth > MinOtherSlotsWidth)
         {
-            ImGui.TextUnformatted(versionText);
+            ImGui.SameLine(contentRegionMax - versionWidth);
+            using (ImRaii.PushColor(ImGuiCol.Text, ColourUtil.RgbaToAbgr(theme.Colors.TextMuted)))
+            {
+                ImGui.TextUnformatted(versionText);
+            }
         }
     }
 

HellionChat/Util/AutoTranslate.cs

@@ -62,7 +62,12 @@ internal static class AutoTranslate
         {
             var sw = Stopwatch.StartNew();
             AllEntries();
-            Plugin.Log.Debug($"Warming up auto-translate took {sw.ElapsedMilliseconds}ms");
+            // v1.4.9 R3 profiling: Information so the xllog tail surfaces this
+            // without a Debug filter. Belt-and-suspenders for future plugin-load
+            // regressions; remains in place after Sub-Task 3.4 Befund.
+            Plugin.LogProxy.Information(
+                $"Warming up auto-translate took {sw.ElapsedMilliseconds}ms"
+            );
         })
         {
             IsBackground = true,
@@ -197,7 +202,7 @@ internal static class AutoTranslate
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, $"failed to translate: {lookup}");
+                Plugin.LogProxy.Error(ex, $"failed to translate: {lookup}");
             }
         }
 

HellionChat/Util/DalamudPlatformUtil.cs

@@ -0,0 +1,16 @@
+namespace HellionChat.Util;
+
+internal sealed class DalamudPlatformUtil : IPlatformUtil
+{
+    public DalamudPlatformUtil()
+    {
+        // Util.IsWine probes the host process and never changes for the
+        // lifetime of a plugin instance, so we cache it once at ctor.
+        // Mirrors LightlessSync/Services/DalamudUtilService:154.
+        IsWine = Dalamud.Utility.Util.IsWine();
+    }
+
+    public bool IsWine { get; }
+
+    public void OpenLink(string url) => Dalamud.Utility.Util.OpenLink(url);
+}

HellionChat/Util/DalamudPluginLogProxy.cs

@@ -0,0 +1,61 @@
+using System;
+using Dalamud.Plugin.Services;
+
+namespace HellionChat.Util;
+
+internal sealed class DalamudPluginLogProxy : IPluginLogProxy
+{
+    private readonly IPluginLog _log;
+
+    public DalamudPluginLogProxy(IPluginLog log) => _log = log;
+
+    public void Verbose(string message) => _log.Verbose(message);
+
+    public void Verbose(Exception exception, string message) => _log.Verbose(exception, message);
+
+    public void Verbose(string messageTemplate, params object[] values) =>
+        _log.Verbose(messageTemplate, values);
+
+    public void Debug(string message) => _log.Debug(message);
+
+    public void Debug(Exception exception, string message) => _log.Debug(exception, message);
+
+    public void Debug(string messageTemplate, params object[] values) =>
+        _log.Debug(messageTemplate, values);
+
+    public void Information(string message) => _log.Information(message);
+
+    public void Information(Exception exception, string message) =>
+        _log.Information(exception, message);
+
+    public void Information(string messageTemplate, params object[] values) =>
+        _log.Information(messageTemplate, values);
+
+    public void Info(string message) => _log.Info(message);
+
+    public void Info(Exception exception, string message) => _log.Info(exception, message);
+
+    public void Info(string messageTemplate, params object[] values) =>
+        _log.Info(messageTemplate, values);
+
+    public void Warning(string message) => _log.Warning(message);
+
+    public void Warning(Exception exception, string message) => _log.Warning(exception, message);
+
+    public void Warning(string messageTemplate, params object[] values) =>
+        _log.Warning(messageTemplate, values);
+
+    public void Error(string message) => _log.Error(message);
+
+    public void Error(Exception exception, string message) => _log.Error(exception, message);
+
+    public void Error(string messageTemplate, params object[] values) =>
+        _log.Error(messageTemplate, values);
+
+    public void Fatal(string message) => _log.Fatal(message);
+
+    public void Fatal(Exception exception, string message) => _log.Fatal(exception, message);
+
+    public void Fatal(string messageTemplate, params object[] values) =>
+        _log.Fatal(messageTemplate, values);
+}

HellionChat/Util/IPlatformUtil.cs

@@ -0,0 +1,11 @@
+namespace HellionChat.Util;
+
+// Indirection over Dalamud.Utility.Util's static surface so services can be
+// constructed in an isolated xUnit AppDomain without loading Dalamud.dll.
+// Production wiring lives in DalamudPlatformUtil; tests substitute a fake.
+internal interface IPlatformUtil
+{
+    bool IsWine { get; }
+
+    void OpenLink(string url);
+}

HellionChat/Util/IPluginLogProxy.cs

@@ -0,0 +1,40 @@
+using System;
+
+namespace HellionChat.Util;
+
+// Indirection over Dalamud's IPluginLog so MessageStore can be constructed
+// in an isolated xUnit AppDomain without loading Dalamud.dll — same pattern
+// as IPlatformUtil from F12.1. A later DI-container cycle (v1.5.x) may
+// replace this with Microsoft.Extensions.Logging's ILogger<T>.
+internal interface IPluginLogProxy
+{
+    void Verbose(string message);
+    void Verbose(Exception exception, string message);
+    void Verbose(string messageTemplate, params object[] values);
+
+    void Debug(string message);
+    void Debug(Exception exception, string message);
+    void Debug(string messageTemplate, params object[] values);
+
+    void Information(string message);
+    void Information(Exception exception, string message);
+    void Information(string messageTemplate, params object[] values);
+
+    // IPluginLog exposes Info as a distinct method (short alias of
+    // Information) — both are present so call-sites stay drop-in.
+    void Info(string message);
+    void Info(Exception exception, string message);
+    void Info(string messageTemplate, params object[] values);
+
+    void Warning(string message);
+    void Warning(Exception exception, string message);
+    void Warning(string messageTemplate, params object[] values);
+
+    void Error(string message);
+    void Error(Exception exception, string message);
+    void Error(string messageTemplate, params object[] values);
+
+    void Fatal(string message);
+    void Fatal(Exception exception, string message);
+    void Fatal(string messageTemplate, params object[] values);
+}

HellionChat/Util/ImGuiUtil.cs

@@ -254,6 +254,17 @@ internal static class ImGuiUtil
         return end;
     }
 
+    // ---------------------------------------------------------------
+    // Inspired by ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12).
+    // Upstream dropped the width parameter (no callers there); we keep
+    // it because two ChatLogWindow header buttons size themselves to
+    // match the ChannelIcon button's frame. The actual bug is the
+    // manual size = width - 2 * CellPadding.X subtraction: CellPadding
+    // scales with HUD scale, the raw int does not, so the button
+    // shrank under high HUD scales. ImGui.Button already handles its
+    // own frame padding internally — pass the measured width straight
+    // through.
+    // ---------------------------------------------------------------
     internal static bool IconButton(
         FontAwesomeIcon icon,
         string? id = null,
@@ -268,10 +279,7 @@ internal static class ImGuiUtil
         bool ret;
         using (Plugin.FontManager.FontAwesome.Push())
         {
-            var size = Vector2.Zero;
-            if (width > 0)
-                size.X = width - 2 * ImGui.GetStyle().CellPadding.X;
-
+            var size = width > 0 ? new Vector2(width, 0f) : Vector2.Zero;
             ret = ImGui.Button(label, size);
         }
 
@@ -575,7 +583,9 @@ internal static class ImGuiUtil
 
         using (ImRaii.Disabled(isMax))
         {
-            if (IconButton(FontAwesomeIcon.ArrowRight, id + 1.ToString()))
+            // Parentheses pin the operator precedence: without them this resolves as
+            // id.ToString() + "1" (e.g. "01" instead of "1").
+            if (IconButton(FontAwesomeIcon.ArrowRight, (id + 1).ToString()))
                 selected++;
         }
 

HellionChat/Util/MemoryUtil.cs

@@ -42,6 +42,6 @@ public static class MemoryUtil
                 str.Append(' ');
         }
 
-        Plugin.Log.Information(str.ToString());
+        Plugin.LogProxy.Information(str.ToString());
     }
 }

HellionChat/Util/TabLifecycleHelpers.cs

@@ -0,0 +1,16 @@
+namespace HellionChat.Util;
+
+// Pure predicates for the TempTab pin lifecycle. Extracted from the strip
+// sites in Plugin.cs and Configuration.cs so they stay in lockstep — a
+// load-time strip that disagrees with the save-time strip is exactly how
+// pinned tabs would silently fall out of the JSON.
+internal static class TabLifecycleHelpers
+{
+    public static bool IsInUnpinnedPool(Tab t) => t.IsTempTab && !t.IsPinned;
+
+    public static bool IsInPinnedPool(Tab t) => t.IsTempTab && t.IsPinned;
+
+    public static bool ShouldStripOnLoad(Tab t) => IsInUnpinnedPool(t);
+
+    public static bool ShouldStripOnSave(Tab t) => IsInUnpinnedPool(t);
+}

HellionChat/Util/UrlValidation.cs

@@ -0,0 +1,21 @@
+namespace HellionChat.Util;
+
+internal static class UrlValidation
+{
+    // Used by BrandingLinks/IntegrationLinks at module init. A typo in a URL
+    // rotation throws loudly at plugin load instead of silently failing when
+    // a user clicks the broken button.
+    public static void ValidateAll(string source, params string[] urls)
+    {
+        foreach (var url in urls)
+        {
+            if (
+                !Uri.TryCreate(url, UriKind.Absolute, out var uri)
+                || (uri.Scheme is not "https" and not "http")
+            )
+            {
+                throw new InvalidOperationException($"{source} contains malformed URL: {url}");
+            }
+        }
+    }
+}

HellionChat/Util/WrapperUtil.cs

@@ -21,12 +21,12 @@ public static class WrapperUtil
     {
         try
         {
-            Plugin.Log.Debug($"Opening URI {uri} in default browser");
-            Dalamud.Utility.Util.OpenLink(uri.ToString());
+            Plugin.LogProxy.Debug($"Opening URI {uri} in default browser");
+            Plugin.PlatformUtil.OpenLink(uri.ToString());
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error($"Error opening URI: {ex}");
+            Plugin.LogProxy.Error($"Error opening URI: {ex}");
             AddNotification(Language.Context_OpenInBrowserError, NotificationType.Error);
         }
     }

HellionChat/packages.lock.json

@@ -1,110 +1,110 @@
 {
-  "version": 1,
-  "dependencies": {
-    "net10.0-windows7.0": {
-      "DalamudPackager": {
-        "type": "Direct",
-        "requested": "[15.0.0, )",
-        "resolved": "15.0.0",
-        "contentHash": "411vwC8/X8Z/sQ2TI6v3SvOn66xFPeOjFn3Zn+h0d3Ox2t1kFm66AhDvmx/qcMwVrR+Hidxj0dadpQ2dgyXMBQ=="
-      },
-      "DotNet.ReproducibleBuilds": {
-        "type": "Direct",
-        "requested": "[1.2.39, )",
-        "resolved": "1.2.39",
-        "contentHash": "fcFN01tDTIQqDuTwr1jUQK/geofiwjG5DycJQOnC72i1SsLAk1ELe+apBOuZ11UMQG8YKFZG1FgvjZPbqHyatg=="
-      },
-      "MessagePack": {
-        "type": "Direct",
-        "requested": "[3.1.4, 4.0.0)",
-        "resolved": "3.1.4",
-        "contentHash": "BH0wlHWmVoZpbAPyyt2Awbq30C+ZsS3eHSkYdnyUAbqVJ22fAJDzn2xTieBeoT5QlcBzp61vHcv878YJGfi3mg==",
-        "dependencies": {
-          "MessagePack.Annotations": "3.1.4",
-          "MessagePackAnalyzer": "3.1.4",
-          "Microsoft.NET.StringTools": "17.11.4"
+    "version": 1,
+    "dependencies": {
+        "net10.0-windows7.0": {
+            "DalamudPackager": {
+                "type": "Direct",
+                "requested": "[15.0.0, )",
+                "resolved": "15.0.0",
+                "contentHash": "411vwC8/X8Z/sQ2TI6v3SvOn66xFPeOjFn3Zn+h0d3Ox2t1kFm66AhDvmx/qcMwVrR+Hidxj0dadpQ2dgyXMBQ=="
+            },
+            "DotNet.ReproducibleBuilds": {
+                "type": "Direct",
+                "requested": "[1.2.39, )",
+                "resolved": "1.2.39",
+                "contentHash": "fcFN01tDTIQqDuTwr1jUQK/geofiwjG5DycJQOnC72i1SsLAk1ELe+apBOuZ11UMQG8YKFZG1FgvjZPbqHyatg=="
+            },
+            "MessagePack": {
+                "type": "Direct",
+                "requested": "[3.1.4, 4.0.0)",
+                "resolved": "3.1.4",
+                "contentHash": "BH0wlHWmVoZpbAPyyt2Awbq30C+ZsS3eHSkYdnyUAbqVJ22fAJDzn2xTieBeoT5QlcBzp61vHcv878YJGfi3mg==",
+                "dependencies": {
+                    "MessagePack.Annotations": "3.1.4",
+                    "MessagePackAnalyzer": "3.1.4",
+                    "Microsoft.NET.StringTools": "17.11.4"
+                }
+            },
+            "Microsoft.Data.Sqlite": {
+                "type": "Direct",
+                "requested": "[10.0.7, )",
+                "resolved": "10.0.7",
+                "contentHash": "DZ6G2QuyPrsh5VS+wfiZbNBtYT6p+CkxXjD0aZHF04xso7QsG/uk0JpG30hzYlK6u/wtTzta1Dqfgbc/Sl2sDA==",
+                "dependencies": {
+                    "Microsoft.Data.Sqlite.Core": "10.0.7",
+                    "SQLitePCLRaw.bundle_e_sqlite3": "2.1.11",
+                    "SQLitePCLRaw.core": "2.1.11"
+                }
+            },
+            "morelinq": {
+                "type": "Direct",
+                "requested": "[4.4.0, )",
+                "resolved": "4.4.0",
+                "contentHash": "QX3bsK9oFeUXk8tFsc9NkI6NnCr8Ar/ex027p+ZZ/jdLCdX2RlryDtxUqZW5j45NVwn4E4Z4hzupsoMQd6Yxtg=="
+            },
+            "Pidgin": {
+                "type": "Direct",
+                "requested": "[3.5.1, 4.0.0)",
+                "resolved": "3.5.1",
+                "contentHash": "zU7tkXlF3D6d2GLTjJDomAL3nnl4AwfZvSgSz8D4b+Ry21/clqedYlxBnEAkAU/bkGfEv6uRR7QCdWZUpKrB/g=="
+            },
+            "SixLabors.ImageSharp": {
+                "type": "Direct",
+                "requested": "[3.1.12, 4.0.0)",
+                "resolved": "3.1.12",
+                "contentHash": "iAg6zifihXEFS/t7fiHhZBGAdCp3FavsF4i2ZIDp0JfeYeDVzvmlbY1CNhhIKimaIzrzSi5M/NBFcWvZT2rB/A=="
+            },
+            "SQLitePCLRaw.lib.e_sqlite3": {
+                "type": "Direct",
+                "requested": "[3.50.3, )",
+                "resolved": "3.50.3",
+                "contentHash": "tVyhqQ8wxgedWiiPFChyZhE8I3PkOM/AE1azsj1qsdYUws13ONBFyi3aDxju4tD2kzedB2q5+50WrTyY0h2gMQ=="
+            },
+            "MessagePack.Annotations": {
+                "type": "Transitive",
+                "resolved": "3.1.4",
+                "contentHash": "aVWrDAkCdqxwQsz/q0ldPh2EFn48M99YUzE9OvZjMq2RNLKz4o2z88iGFvSvbMqOWRweRvKPHBJZe22PRqzslQ=="
+            },
+            "MessagePackAnalyzer": {
+                "type": "Transitive",
+                "resolved": "3.1.4",
+                "contentHash": "CTaSsN/liJ7MhLCAB7Z4ZLBNuVGCq9lt2BT/cbrc9vzGv89yK3CqIA+z9T19a11eQYl9etZHL6MQJgCqECRVpg=="
+            },
+            "Microsoft.Data.Sqlite.Core": {
+                "type": "Transitive",
+                "resolved": "10.0.7",
+                "contentHash": "xVrtBg3M1wJlBDkoT0dXEYB/wSc8bIHJPYtw/bu1AqpWgF79uPSs87DAhERR/Ilumre6TKZa1cjMg3VUUObVLA==",
+                "dependencies": {
+                    "SQLitePCLRaw.core": "2.1.11"
+                }
+            },
+            "Microsoft.NET.StringTools": {
+                "type": "Transitive",
+                "resolved": "17.11.4",
+                "contentHash": "mudqUHhNpeqIdJoUx2YDWZO/I9uEDYVowan89R6wsomfnUJQk6HteoQTlNjZDixhT2B4IXMkMtgZtoceIjLRmA=="
+            },
+            "SQLitePCLRaw.bundle_e_sqlite3": {
+                "type": "Transitive",
+                "resolved": "2.1.11",
+                "contentHash": "DC4nA7yWnf4UZdgJDF+9Mus4/cb0Y3Sfgi3gDnAoKNAIBwzkskNAbNbyu+u4atT0ruVlZNJfwZmwiEwE5oz9LQ==",
+                "dependencies": {
+                    "SQLitePCLRaw.lib.e_sqlite3": "2.1.11",
+                    "SQLitePCLRaw.provider.e_sqlite3": "2.1.11"
+                }
+            },
+            "SQLitePCLRaw.core": {
+                "type": "Transitive",
+                "resolved": "2.1.11",
+                "contentHash": "PK0GLFkfhZzLQeR3PJf71FmhtHox+U3vcY6ZtswoMjrefkB9k6ErNJEnwXqc5KgXDSjige2XXrezqS39gkpQKA=="
+            },
+            "SQLitePCLRaw.provider.e_sqlite3": {
+                "type": "Transitive",
+                "resolved": "2.1.11",
+                "contentHash": "Y/0ZkR+r0Cg3DQFuCl1RBnv/tmxpIZRU3HUvelPw6MVaKHwYYR8YNvgs0vuNuXCMvlyJ+Fh88U1D4tah1tt6qw==",
+                "dependencies": {
+                    "SQLitePCLRaw.core": "2.1.11"
+                }
+            }
         }
-      },
-      "Microsoft.Data.Sqlite": {
-        "type": "Direct",
-        "requested": "[10.0.7, )",
-        "resolved": "10.0.7",
-        "contentHash": "DZ6G2QuyPrsh5VS+wfiZbNBtYT6p+CkxXjD0aZHF04xso7QsG/uk0JpG30hzYlK6u/wtTzta1Dqfgbc/Sl2sDA==",
-        "dependencies": {
-          "Microsoft.Data.Sqlite.Core": "10.0.7",
-          "SQLitePCLRaw.bundle_e_sqlite3": "2.1.11",
-          "SQLitePCLRaw.core": "2.1.11"
-        }
-      },
-      "morelinq": {
-        "type": "Direct",
-        "requested": "[4.4.0, )",
-        "resolved": "4.4.0",
-        "contentHash": "QX3bsK9oFeUXk8tFsc9NkI6NnCr8Ar/ex027p+ZZ/jdLCdX2RlryDtxUqZW5j45NVwn4E4Z4hzupsoMQd6Yxtg=="
-      },
-      "Pidgin": {
-        "type": "Direct",
-        "requested": "[3.5.1, 4.0.0)",
-        "resolved": "3.5.1",
-        "contentHash": "zU7tkXlF3D6d2GLTjJDomAL3nnl4AwfZvSgSz8D4b+Ry21/clqedYlxBnEAkAU/bkGfEv6uRR7QCdWZUpKrB/g=="
-      },
-      "SixLabors.ImageSharp": {
-        "type": "Direct",
-        "requested": "[3.1.12, 4.0.0)",
-        "resolved": "3.1.12",
-        "contentHash": "iAg6zifihXEFS/t7fiHhZBGAdCp3FavsF4i2ZIDp0JfeYeDVzvmlbY1CNhhIKimaIzrzSi5M/NBFcWvZT2rB/A=="
-      },
-      "SQLitePCLRaw.lib.e_sqlite3": {
-        "type": "Direct",
-        "requested": "[3.50.3, )",
-        "resolved": "3.50.3",
-        "contentHash": "tVyhqQ8wxgedWiiPFChyZhE8I3PkOM/AE1azsj1qsdYUws13ONBFyi3aDxju4tD2kzedB2q5+50WrTyY0h2gMQ=="
-      },
-      "MessagePack.Annotations": {
-        "type": "Transitive",
-        "resolved": "3.1.4",
-        "contentHash": "aVWrDAkCdqxwQsz/q0ldPh2EFn48M99YUzE9OvZjMq2RNLKz4o2z88iGFvSvbMqOWRweRvKPHBJZe22PRqzslQ=="
-      },
-      "MessagePackAnalyzer": {
-        "type": "Transitive",
-        "resolved": "3.1.4",
-        "contentHash": "CTaSsN/liJ7MhLCAB7Z4ZLBNuVGCq9lt2BT/cbrc9vzGv89yK3CqIA+z9T19a11eQYl9etZHL6MQJgCqECRVpg=="
-      },
-      "Microsoft.Data.Sqlite.Core": {
-        "type": "Transitive",
-        "resolved": "10.0.7",
-        "contentHash": "xVrtBg3M1wJlBDkoT0dXEYB/wSc8bIHJPYtw/bu1AqpWgF79uPSs87DAhERR/Ilumre6TKZa1cjMg3VUUObVLA==",
-        "dependencies": {
-          "SQLitePCLRaw.core": "2.1.11"
-        }
-      },
-      "Microsoft.NET.StringTools": {
-        "type": "Transitive",
-        "resolved": "17.11.4",
-        "contentHash": "mudqUHhNpeqIdJoUx2YDWZO/I9uEDYVowan89R6wsomfnUJQk6HteoQTlNjZDixhT2B4IXMkMtgZtoceIjLRmA=="
-      },
-      "SQLitePCLRaw.bundle_e_sqlite3": {
-        "type": "Transitive",
-        "resolved": "2.1.11",
-        "contentHash": "DC4nA7yWnf4UZdgJDF+9Mus4/cb0Y3Sfgi3gDnAoKNAIBwzkskNAbNbyu+u4atT0ruVlZNJfwZmwiEwE5oz9LQ==",
-        "dependencies": {
-          "SQLitePCLRaw.lib.e_sqlite3": "2.1.11",
-          "SQLitePCLRaw.provider.e_sqlite3": "2.1.11"
-        }
-      },
-      "SQLitePCLRaw.core": {
-        "type": "Transitive",
-        "resolved": "2.1.11",
-        "contentHash": "PK0GLFkfhZzLQeR3PJf71FmhtHox+U3vcY6ZtswoMjrefkB9k6ErNJEnwXqc5KgXDSjige2XXrezqS39gkpQKA=="
-      },
-      "SQLitePCLRaw.provider.e_sqlite3": {
-        "type": "Transitive",
-        "resolved": "2.1.11",
-        "contentHash": "Y/0ZkR+r0Cg3DQFuCl1RBnv/tmxpIZRU3HUvelPw6MVaKHwYYR8YNvgs0vuNuXCMvlyJ+Fh88U1D4tah1tt6qw==",
-        "dependencies": {
-          "SQLitePCLRaw.core": "2.1.11"
-        }
-      }
     }
-  }
-}
+}

README.md

@@ -2,7 +2,7 @@
 
 [![Build](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/actions/workflows/build.yml/badge.svg?branch=main)](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/actions/workflows/build.yml)
 [![License: EUPL-1.2](https://img.shields.io/badge/License-EUPL--1.2-blue.svg)](LICENSE)
-[![Latest release](https://img.shields.io/badge/release-v1.4.4-brightgreen)](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/latest)
+[![Latest release](https://img.shields.io/badge/release-v1.4.9-brightgreen)](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/latest)
 [![Dalamud API](https://img.shields.io/badge/Dalamud-API_15-purple)](https://github.com/goatcorp/Dalamud)
 [![.NET](https://img.shields.io/badge/.NET-10.0-512BD4)](https://dotnet.microsoft.com/)
 [![FFXIV](https://img.shields.io/badge/FFXIV-Dawntrail-c3a37f)](https://www.finalfantasyxiv.com/)
@@ -11,7 +11,7 @@
   <img src="docs/images/hellion-forge.png" alt="Hellion Forge" width="180" />
 </p>
 
-**Version 1.4.4** — Privacy-first chat plugin for FINAL FANTASY XIV / Dalamud, built on
+**Version 1.4.9** — Privacy-first chat plugin for FINAL FANTASY XIV / Dalamud, built on
 [Chat 2](https://github.com/Infiziert90/ChatTwo) (EUPL-1.2).
 
 Hellion Chat is a privacy-first plugin built on the Chat 2 foundation. The majority of the engine comes from Chat 2
@@ -102,7 +102,7 @@ Hellion Chat is developed under **Hellion Forge**, the specialized modding and p
 #### Custom Themes (v1.1.0)
 
 HellionChat ships a theme engine with ten built-in themes (Hellion Arctic, Hellion Spectrum, Chat 2 Classic, Event
-Horizon, Moonlit Bloom, Mint Grove, Night Blue, Indigo Violet, Forge Merchantman, Synthwave Sunset) and a JSON-based
+Horizon, Crystal Nocturne, Mint Grove, Night Blue, Indigo Violet, Forge Merchantman, Synthwave Sunset) and a JSON-based
 authoring format for custom themes. Schema and step-by-step guide in
 [`docs/THEME-AUTHORING.md`](docs/THEME-AUTHORING.md). Hellion Spectrum is Deuteranopia/Protanopia-safe (red-green color
 blindness) based on the Wong/Okabe-Ito palette.
@@ -286,16 +286,24 @@ An optional submission to the Dalamud main plugin repo (in addition to the custo
 
 ## Project Status
 
-**Version 1.4.4** — Threading and IPC safety polish on top of the v1.4.3 async-load foundation. The
-`AutoTellTabsService` hot-path getter now reads from an `Interlocked` counter instead of taking a lock on every
-render frame, with a resync hook for the snapshot-restore path in `SaveConfig` and a pure-helper test mirror in the
-Build-Suite repo. The Honorific integration carries per-method threading banners so the framework-thread invariant is
-visible at the call site, and an unsubscribe failure now logs at Warning instead of Debug — a leaked subscription
-across plugin reloads is exactly the kind of thing that should not be silent. The AutoTranslate warmup thread is
-finally marked `IsBackground = true`, matching the pattern used in `MessageManager` and `Plugin.RetentionSweep` since
-v1.4.0. The privacy filter logs once per unknown ChatType so a future patch's added channel does not drop off the
-radar, and new installs default `PrivacyPersistUnknownChannels` to `true` as a failsafe; existing configs keep their
-explicit choice. No schema bump, no migration. Fifth sub-patch of the v1.4.x polish sweep series (as of 2026-05-12).
+**Version 1.4.9** — Plugin-Load Render Polish. First-frame render cost is now well under Dalamud's 100 ms HITCH
+warning threshold (~76 ms median, down from ~127 ms). The gain comes from deferring six non-essential rendering
+sections on the very first Draw — bottom status bar, channel-name SeString chunks, window bounds check, hint
+banner, autocomplete and input-preview calculation — so the initial ImGui layout cost is spread between frame 0
+and frame 1 instead of all hitting at once. At 60 fps the user sees those sections one frame (~17 ms) later, which
+is invisible inside the post-reload font-atlas build window. Slash commands `/hellion`, `/hellionView`,
+`/hellionSeString` and `/hellionDebugger` are now registered centrally during plugin load so they work before
+their target window is opened the first time. The configuration-button entry in Dalamud's plugin manager hangs on
+the same path. Three plugin-load profiling logs (auto-translate warm-up, message-store connect, tab filter) stay
+on at Information level as a regression tripwire — if a future change pushes the load past 100 ms again, the cost
+is right there in `/xllog`. The release also ships a ChatTwo IPC compatibility layer: HellionChat now mirrors
+ChatTwo's full IPC surface (`GetChatInputState`, `ChatInputStateChanged`, `Register`, `Unregister`, `Available`,
+`Invoke`) under the `ChatTwo.*` namespace in addition to our existing `HellionChat.*` provider gates, so
+third-party integrations that historically only subscribe to ChatTwo's IPC (Artisan's and AllaganTools' context-
+menu hooks are the practical examples) keep working without requiring a code change on their side. Conflict
+detection prevents ChatTwo from loading in parallel with HellionChat, so there is no slot-collision risk at
+runtime. Migration v17 stays (no schema bump). Tenth sub-patch of the v1.4.x polish sweep series (as of
+2026-05-15).
 
 Hellion Chat is a standalone plugin, no longer a fork in the repository sense. Fully completed:
 

docs/CHANGELOG.md

@@ -10,6 +10,187 @@ to the release pages for details.
 
 ---
 
+## Hellion Chat 1.4.9 — Plugin-Load Render Polish (2026-05-15)
+
+Tenth sub-patch of the v1.4.x polish-sweep series. First-frame render cost drops from ~127 ms median down to
+~76 ms median — comfortably under Dalamud's 100 ms HITCH warning threshold. The remaining ~13 ms gap to ChatTwo
+upstream (~63 ms median) is the cost of HellionChat-only features (sidebar tab view, custom status bar,
+Honorific integration).
+
+- First-frame defer: six non-essential rendering sections inside `ChatLogWindow` skip their first Draw and run
+  one frame later. Covered sections are the bottom status bar, channel-name SeString chunks, window bounds
+  check, v0.6.1 hint banner, autocomplete and input-preview calculation. At 60 fps the user sees those sections
+  ~17 ms after plugin reload — invisible inside the ~2.5 s font-atlas build window every reload runs through
+  anyway. Frame 1 stays well under 100 ms too (~40 ms), so no secondary HITCH warning appears.
+- Slash-command centralisation: `/hellion`, `/hellionView`, `/hellionSeString` and `/hellionDebugger` are now
+  registered during `LoadAsync` instead of inside the corresponding window constructors. The commands work
+  before their target window is opened the first time, and Dalamud's plugin-manager configuration / open
+  buttons (`UiBuilder.OpenConfigUi` / `OpenMainUi`) hang on the same path.
+- Plugin-load profiling logs stay on: `MessageStore.Connect`, `MessageStore.Migrate`, `FilterAllTabs` and the
+  auto-translate warm-up timing log are now Information level rather than Debug. They serve as a tripwire so a
+  future regression past 100 ms shows up directly in `/xllog` without re-enabling Debug.
+- ChatTwo IPC compatibility layer: HellionChat now mirrors ChatTwo's full IPC surface
+  (`GetChatInputState`, `ChatInputStateChanged`, `Register`, `Unregister`, `Available`, `Invoke`) under the
+  `ChatTwo.*` namespace in addition to our existing `HellionChat.*` provider gates. Third-party
+  integrations that historically only subscribe to ChatTwo's IPC — for example Artisan's and AllaganTools'
+  context-menu hooks — keep working without requiring a code change on their side. Conflict detection
+  prevents ChatTwo from loading in parallel with HellionChat, so there is no slot-collision risk at
+  runtime.
+- Migration v17 stays (no schema bump).
+- Internal: hypothesis-triage during the R2 cycle falsified three of the four candidate root causes
+  (font-atlas sync, theme-apply ABGR-cache init, multiple-window render). Actual cause is `DrawList` setup
+  cost distributed across ~10 ImGui sections inside ChatLogWindow (5-20 ms each). The six selective defers
+  above are the pragmatic fix — a clean structural rewrite would belong in the v1.5.x DI-container cycle.
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+---
+
+## Hellion Chat 1.4.8 — Hook-Layer and Polish Quick-Wins (2026-05-14)
+
+Ninth sub-patch of the v1.4.x polish-sweep series. Hook-layer cluster (FTS5 full-text search, ad-block foundation
+investigation) plus three polish quick-wins.
+
+- DbViewer full-text search: optional FTS5 index across the full chat history. Built asynchronously on first run after
+  the update with a progress toast (UI stays responsive, the toggle is disabled until the build completes). The local
+  page-filter remains the default mode. Multi-word queries match as exact phrases; power users can opt into raw FTS5
+  `MATCH` syntax by wrapping their own double-quotes around the term.
+- Custom theme files now auto-reload when edited while the theme is active. Save the JSON in your editor and the live
+  render picks up the change within a second — no need to re-click the theme in the picker. Disk-stat is throttled to
+  1 Hz so per-frame cost stays free.
+- Retention sweep no longer blocks the framework thread. `Framework.Run(...).Wait()` is replaced by
+  `Framework.RunOnTick(...)`, which removes the ~194 ms hitch the sweep used to add per run.
+- Status bar height is derived from `GetTextLineHeightWithSpacing()` plus a DPI-aware spacer so the bar renders
+  correctly at Windows display scaling above 100 %. Linux/Wayland default of 100 % is unaffected.
+- Receive-suppressed-tells routing was investigated this cycle and **postponed to v1.5.x**. When other plugins suppress
+  tells via `CheckMessageHandled`, FFXIV's chat pipeline skips the `RaptureLogModule.AddMsgSourceEntry` path, which means
+  HellionChat's `ContentIdResolverHook` does not fire and tell-partner identification breaks for AutoTellTab routing.
+  The proper fix sits next to the planned ad-block hook layer (`RaptureLogModule.ShowMiniTalkPlayer` and friends) where
+  the same patch surface comes up anyway.
+- Internal: storage form of `messages.Id` clarified (declared BLOB but Microsoft.Data.Sqlite stores Guid parameters as
+  TEXT). FTS bulk insert and `LoadByGuids` join now match the TEXT storage form on both sides. Migration v17 stays
+  (no schema bump).
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+---
+
+## Hellion Chat 1.4.7 — Backlog Cleanup and Mid-Features (2026-05-13)
+
+Eighth sub-patch of the v1.4.x polish-sweep series. First user-visible feature bundle since v1.4.5 — pinned tell tabs
+that survive relog, opt-in Honorific glow rendering, a configurable sidebar, plus a Settings-Save channel-preservation
+fix surfaced during smoke testing.
+
+- TempTell Pin: right-click a TempTell tab in the sidebar and choose "Pin Tab" / "Tab anpinnen". Pinned tabs survive
+  plugin reload and character logout, keep their conversation history (loaded on demand from the message store on
+  rehydrate), and stay bound to the same `/tell` partner. Hard cap of 5 pinned tabs in a pool separate from the 15-tab
+  auto-tell pool — total ceiling is 20 tabs. The sidebar groups pinned tabs into their own section with a divider header
+- Honorific glow outlines now render via an 8-direction DrawList pre-pass when the title carries a Glow colour. Opt-in
+  via **Settings → Integrations → Render glow outlines (Honorific)** (default off). Honorific's gradient surface
+  (`Color3`, `GradientColourSet`, `GradientAnimationStyle`) is parsed and stashed for a later cycle but renders as the
+  primary colour until then — the v1.4.7 DTO already mirrors all four extra fields so the JSON roundtrip doesn't
+  silent-drop them
+- Sidebar width configurable in **Theme & Layout** (44–160 px, default 44 stays icon-only). The icon button stretches
+  with the configured width so a widened sidebar looks intentional, not a 36 px icon floating in empty space
+- `Configuration.UpdateFrom` now preserves the runtime `CurrentChannel` across the persistent-tab merge alongside
+  `Messages` and `LastSendUnread`. `TabSwitched` deep-clones the seeded channel from the previous tab instead of sharing
+  the same `UsedChannel` instance. Together these fix a regression where Settings-Save on a Party or Linkshell tab
+  popped the chat input back to `/tell <pinned-partner>` on the next interaction
+- `Util/ImGuiUtil.cs` `DrawArrows` IconButton id uses `(id + 1).ToString()` with explicit parentheses instead of the
+  operator-precedence quirk `id + 1.ToString()` (which resolved to `id.ToString() + "1"`). Single live caller is
+  `Ui/DbViewer.cs:227` page-navigation
+- Internal: `IPluginLogProxy` indirection over Dalamud's `IPluginLog` routes all ~91 `Plugin.Log` call sites through a
+  testable proxy. `MessageStore.Migrate0` can now run in xUnit without loading `Dalamud.dll`, closing the gap F12.1 left
+  in v1.4.6. Production wrapper `DalamudPluginLogProxy` and Build-Suite `FakePluginLogProxy` mirror the full
+  `IPluginLog` surface (`Verbose`/`Debug`/`Information`/`Info`/`Warning`/`Error`/`Fatal`) with single-string,
+  `Exception+string`, and `params object[]` overloads
+- Internal: TempTab counter switched from an `Interlocked` cached field to a derived `Tabs.Count(predicate)`. Pin-state
+  transitions (TryPin / Unpin / Promote) are cold-path and don't need lock-free reads; counter mutation surface dropped
+  from 5 to 0 sites. Build-Suite floor 688 → 710 (+22)
+- Schema bump v16 → v17 is additive: new `Tab.IsPinned` bool, default false. Existing v16 configs load cleanly and get
+  their `Version` stamp bumped after the gate check
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+---
+
+## Hellion Chat 1.4.6 — Code Hygiene and Refactor (2026-05-12)
+
+Maintenance patch. No user-visible behaviour changes; tightens the development feedback loop, fixes two
+upstream-inherited bugs from ChatTwo `f35b7d3`, and prepares the code for the v1.4.7 backlog cleanup.
+
+- `scripts/preflight.sh` gains Block E (`dotnet csharpier check`) and Block F (`markdownlint-cli2`) so reflow drift and
+  markdown violations are caught at the pre-push gate. `.markdownlint.json` adds `MD024 siblings_only` and disables
+  `MD036` so the bilingual forge-post bold-emphasis headings pass linting; the `.claude/` directory is excluded from the
+  scan
+- `FontManager.AddFontWithFallback` catch-filter now covers `InvalidOperationException` and `ArgumentException` on top
+  of the existing IO triad. The warning log carries the exception type name, so the diagnostic path knows which class of
+  atlas-toolkit throw triggered the NotoSansCjkRegular fallback
+- `BrandingLinks` (5 URLs) and `Integrations/IntegrationLinks` (2 URLs) validate themselves on first module load via
+  `[ModuleInitializer]` + a shared `UrlValidation.ValidateAll` helper. A malformed URL now throws
+  `InvalidOperationException` at plugin load with the source class and the broken URL in the message
+- Cherry-picked from ChatTwo upstream `f35b7d3`: `Chat.SetChannel` no longer leaks the native `Utf8String` when the
+  linkshell check rejects the channel. The validity check is now wrapped around the `ChangeChatChannel` call instead of
+  short-circuiting before `Dtor`. `ValidAnyLinkshell` is renamed to `IsChannelOrExistingLinkshell` and the
+  `ChatLogWindow` call-site follows the rename
+- Cherry-picked from ChatTwo upstream `f35b7d3`: `Tab.Clone` now deep-clones `UsedChannel` and `TellTarget`. The old
+  `CurrentChannel = CurrentChannel` was a reference copy, so PopOut and Temp tabs mutated each other's channel state
+  (incl. tell target). `TellTarget.From(t)` static factory is replaced with an instance `Clone()`; `UsedChannel.Clone()`
+  is new and runs deep-clone on both TellTarget references
+- `ChatLogWindow` active-tab underline pill now scales with `ImGuiHelpers.GlobalScale` and rounds its DrawList
+  coordinates to physical pixels via `MathF.Round`, so the 2 px line stays crisp on 125 % and 150 % DPI setups instead
+  of bleeding into a sub-pixel blur
+- `ImGuiUtil.IconButton` width parameter no longer subtracts HUD-scaled `CellPadding.X * 2` from the raw `int` width.
+  `ImGui.Button` handles its own frame padding internally, so the measured `buttonWidth` now passes through verbatim
+  (inspired-by upstream `f35b7d3`, but our two call-sites need the parameter, so the param itself stays)
+- Internal: `HellionStyle` ChildBgAlpha threshold logic extracted to `HellionStyleHelpers.ResolveChildBgAlpha` with a
+  build-suite mirror test that pins the 0.999f cutoff. `Plugin.SaveConfig` clones only the temp-tab subset in the
+  pre-serialization snapshot instead of the full tab list. `SettingsOverview` caches `ImGui.GetWindowDrawList()` once
+  per frame and passes the pointer down to `DrawCard`
+- Internal: `Dalamud.Utility.Util` static surface (`IsWine`, `OpenLink`) routed through a new `IPlatformUtil`
+  indirection. `MessageStore`'s `IsWine` probe is now reachable from the xUnit AppDomain via a `FakePlatformUtil`
+  fixture (full isolated MessageStore construction still pending — `Plugin.Log.Information` in `Migrate0` is a separate
+  Dalamud-static surface, slated for v1.4.7)
+- Built-in themes: Crystal Nocturne (royal sapphire and electric magenta over obsidian, by CRYSTALLITE) replaces Moonlit
+  Bloom in the built-in roster. Users who had Moonlit Bloom selected fall back to the default Hellion Arctic on the
+  first plugin load; an existing custom JSON copy of Moonlit Bloom under `pluginConfigs/HellionChat/themes/` keeps
+  working unchanged
+
+Modding & support: join Hellion Forge — <https://discord.gg/X9V7Kcv5gR>
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+---
+
+## Hellion Chat 1.4.5 — UX and Robustness (2026-05-12)
+
+Sixth sub-patch of the v1.4.x polish-sweep series. User-visible robustness fixes plus two doc/test polish items from the
+audit backlog. No schema bump, no migration.
+
+- `ChatLogWindow.Draw` now surfaces a one-shot warning notification when the draw path throws. The stack trace still
+  goes to `/xllog` via `Plugin.Log.Error`; the notification is suppressed for the rest of the plugin session so a
+  recurring failure can't spam the notification stack frame-by-frame. Pattern-match to the existing `Plugin.cs:505-516`
+  migration-blocker notification
+- `FirstRunWizard` splits accept from close. `OnClose` no longer silently sets `FirstRunCompleted`, so closing the X
+  leaves the wizard pending and it reopens on the next plugin load. A new footer "Later — keep defaults" button is the
+  explicit path to dismiss without picking a profile. Bilingual strings (EN + DE) plus a tooltip
+- `InputHistoryService.Reset` is wired into `Plugin.DisposeAsync` alongside the existing pure-memory cleanups. Static
+  state used to survive a plugin reload — the next load now starts with an empty history
+- `FontManager.GetHellionFontBytes` becomes `TryGetHellionFontBytes` with a nullable return. On miss (broken csproj,
+  hand-rolled dev build) the caller falls back to the system-font path that `UseHellionFont=false` already uses, plus a
+  `Plugin.Log.Warning`. The whole UiBuilder no longer throws if the embedded font resource is absent
+- `Plugin.cs:167-168` gets a 4-line reasoning comment around the session-only `RemoveAll(IsTempTab)`: tells are usually
+  privacy-filtered, resurrecting an empty crashed-session tab would trigger DB reconstruction on the next load.
+  `TempTabCounter.InitFromList` mirrors the post-strip semantic in the Build-Suite with a pinning test
+- `StatusBar.cs` drops the version slot when the chat window's content width minus the version text is below 200 px. The
+  right-aligned version used to clip into the four left-side slots in narrow windows
+
+Modding & support: join Hellion Forge — <https://discord.gg/X9V7Kcv5gR>
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+---
+
 ## Hellion Chat 1.4.4 — Threading and IPC Safety Polish (2026-05-12)
 
 Fifth sub-patch of the v1.4.x polish-sweep series. Threading assumptions are documented per-method, a hot-path lock
@@ -20,21 +201,21 @@ unknown ChatType shows up.
   in sync with `Config.Tabs` from inside the existing mutation paths. `Initialize()` seeds the counter from the
   persisted Tabs list, and `SaveConfig`'s snapshot-restore path calls a new `ResyncTempTabCounter()` so the mid-step
   `RemoveAll` doesn't leave the counter drifting. Pure-helper test mirror lives in the Build-Suite repo
-- `HonorificService` per-method threading banners replace the block comment at the bottom of the file. Each IPC
-  callback (`TryInitialPull`, `OnTitleChanged`, `OnReady`, `OnDisposing`, `TryUnsubscribe`) and the `CurrentTitle`
-  field carry a one-line `// Thread:` annotation so the framework-thread invariant is visible at the call site
+- `HonorificService` per-method threading banners replace the block comment at the bottom of the file. Each IPC callback
+  (`TryInitialPull`, `OnTitleChanged`, `OnReady`, `OnDisposing`, `TryUnsubscribe`) and the `CurrentTitle` field carry a
+  one-line `// Thread:` annotation so the framework-thread invariant is visible at the call site
 - `TryUnsubscribe` log-level upgraded from `Debug` to `Warning`. A silent unsubscribe failure leaks a live subscription
   across plugin reloads, which is exactly the kind of issue that should not be at Debug
-- `AutoTranslate.PreloadCache` thread now has `IsBackground = true` and a thread name. Without `IsBackground` the
-  warmup blocks plugin unload (typically 100-300 ms). Pattern-match to `MessageManager` (F6.1) and `Plugin.RetentionSweep`
+- `AutoTranslate.PreloadCache` thread now has `IsBackground = true` and a thread name. Without `IsBackground` the warmup
+  blocks plugin unload (typically 100-300 ms). Pattern-match to `MessageManager` (F6.1) and `Plugin.RetentionSweep`
   (F9.3), both since v1.4.0
-- `Configuration.IsAllowedForStorage` adds a one-line `Plugin.Log.Warning` for the first occurrence of any ChatType
-  that isn't in `PrivacyPersistChannels`. Dedup via a `NonSerialized` `HashSet<ChatType>`, so the warning fires once
-  per runtime — not once per frame, not once per install. Failsafe routing through `PrivacyPersistUnknownChannels`
-  is unchanged
+- `Configuration.IsAllowedForStorage` adds a one-line `Plugin.Log.Warning` for the first occurrence of any ChatType that
+  isn't in `PrivacyPersistChannels`. Dedup via a `NonSerialized` `HashSet<ChatType>`, so the warning fires once per
+  runtime — not once per frame, not once per install. Failsafe routing through `PrivacyPersistUnknownChannels` is
+  unchanged
 - `PrivacyPersistUnknownChannels` field default flipped from `false` to `true` for new installs via a constant in
-  `PrivacyDefaults`. Existing configs keep their explicit choice — the deserializer overrides the initializer. No
-  schema bump, no migration, no first-run banner
+  `PrivacyDefaults`. Existing configs keep their explicit choice — the deserializer overrides the initializer. No schema
+  bump, no migration, no first-run banner
 
 Modding & support: join Hellion Forge — <https://discord.gg/X9V7Kcv5gR>
 

docs/ROADMAP.md

@@ -10,14 +10,119 @@ the plugin's privacy-first scope during brainstorming.
 
 ---
 
-## Next Cycle (v1.4.4)
+## Next Cycle (v1.4.10)
 
-**Window-Lazy-Open + Render-Init-Cost Optimisation** — take the `IAsyncDalamudPlugin` foundation laid in v1.4.3 and turn
-it into wins users can actually feel. Window construction deferred until first open, render-path init cost reduced in
-the first frames. Concrete candidates and size estimates will be consolidated in the v1.4.4 brainstorm.
+**Render Clipper, Symbol-Picker and Final-Cleanup.** Reserve items inherited from the v1.4.9 plan that did not need to
+land in the HITCH-cut: an `ImGuiListClipper` for variable-height messages in `DrawMessages` (the OtterGui `ImGuiClip.cs`
+wrapper is the idiom anchor), a Symbol Picker popup for the chat input (`imgui_demo.cpp` Popups & Modal Windows section
+is the pattern reference), plus the carry-over from v1.4.9: structural First-Frame-Layout rewrite if the v1.4.9 selective
+defers turn out to be too narrow once user-side regressions surface. Lazy-Window-Init naive is **not** in scope — the
+v1.4.9 Stage-2 diagnose falsified that path (`WindowSystem.windows` is non-thread-safe, Game-Freeze under reload stress,
+no measurable HITCH delta). A clean DI-container adoption (Lightless `PluginHostFactory` pattern) belongs in v1.5.x and
+will revisit the question with the right threading model.
 
 ---
 
+## v1.4.9 — Plugin-Load Render Polish (released 2026-05-15)
+
+Tenth sub-patch of the v1.4.x Polish Sweep series. First-frame HITCH drops from ~127 ms median to ~76 ms median (4-reload
+sample), comfortably under Dalamud's 100 ms warning threshold. Mechanism: a single `_firstFrameDone` flag inside
+`ChatLogWindow` defers six non-essential rendering sections (bottom status bar, channel-name SeString chunks, window
+bounds check, v0.6.1 hint banner, autocomplete, input-preview calculation) from frame 0 to frame 1. User sees those
+sections ~17 ms (60 fps) later, invisible inside the ~2.5 s font-atlas build window after every reload. Slash-command
+registration moved from individual window constructors to a central `SetupCommands` / `TearDownCommands` pair in
+`Plugin.cs` — `/hellion`, `/hellionView`, `/hellionSeString` and `/hellionDebugger` work before their target windows are
+opened the first time, and Dalamud's plugin-manager `OpenConfigUi` / `OpenMainUi` buttons hang on the same path.
+Plugin-load profiling logs (auto-translate warmup, `MessageStore.Connect`, `MessageStore.Migrate`, `FilterAllTabs`) stay
+on at Information level as a regression tripwire. The release also ships a ChatTwo IPC compatibility layer: HellionChat
+mirrors ChatTwo's full IPC surface (`GetChatInputState`, `ChatInputStateChanged`, `Register`, `Unregister`, `Available`,
+`Invoke`) under the `ChatTwo.*` namespace in addition to our existing `HellionChat.*` provider gates, so third-party
+integrations that only subscribe to ChatTwo's IPC (Artisan, AllaganTools) keep working without a code change on their
+side. Conflict detection prevents ChatTwo from loading in parallel, so there is no slot-collision risk at runtime.
+Migration v17 stays (no schema bump). Hypothesis-triage falsified
+three of four candidate root causes (font-atlas sync fallback, theme-apply ABGR-cache init, multiple-window render via
+lazy-init) — actual cost distributes evenly across ~10 ImGui sections inside ChatLogWindow, so structural rewrite is
+deferred to v1.5.x DI-container cycle.
+
+## v1.4.8 — Hook-Layer and Polish Quick-Wins (released 2026-05-14)
+
+Ninth sub-patch of the v1.4.x Polish Sweep series. Database Viewer gains an optional FTS5 full-text search across the
+full chat history, built asynchronously on first run after the update with a progress toast; the local page-filter
+remains the default mode. Custom theme files auto-reload when edited while the theme is active (1 Hz disk-stat throttle,
+so per-frame cost is free). Retention sweep no longer blocks the framework thread — `Framework.Run(...).Wait()` is
+replaced by `Framework.RunOnTick(...)`, removing the ~194 ms hitch per sweep. Status-bar height is now derived from
+`GetTextLineHeightWithSpacing()` plus a DPI-aware spacer so the bar renders correctly at Windows display scaling above
+100 %. Receive-suppressed-tells routing was investigated and **postponed to v1.5.x**: when other plugins suppress tells
+via `CheckMessageHandled`, FFXIV's chat-pipeline skips the `RaptureLogModule.AddMsgSourceEntry` path, which means the
+`ContentIdResolverHook` does not fire and tell-partner identification breaks. The fix belongs next to the planned ad-block
+hook layer where the same patch surface comes up anyway. Migration v17 stays (no schema bump). H3 leaves a foundation
+note in the Vault (`Projekte/FFXIV/Hellion Chat/v1.5.x Ad-Block Foundation.md`) covering the NoSoliciting filter +
+bubble-layer hook pattern as a ready-made template for the v1.5.x cycle.
+
+---
+
+## v1.4.7 — Backlog Cleanup and Mid-Features (released 2026-05-13)
+
+Eighth sub-patch of the v1.4.x Polish Sweep series. First user-visible feature bundle since v1.4.5. TempTell tabs can
+now be pinned via right-click; pinned tabs survive plugin reload and character logout, keep their conversation history
+(loaded on demand from the message store on rehydrate), and stay bound to the same `/tell` partner. A hard cap of 5
+pinned tabs lives in a pool separate from the 15-tab auto-tell pool, total ceiling 20. The sidebar groups pinned tabs
+into their own section with a divider header, and the sidebar width itself is now configurable in **Theme & Layout**
+between 44 and 160 px. Honorific glow outlines render when the title carries a Glow colour, opt-in via **Settings →
+Integrations → Render glow outlines (Honorific)** (default off). Honorific's gradient (Color3 / GradientColourSet / Wave
+/ Pulse) is parsed but rendered statically — a later cycle will port the full animation algorithm or land an upstream
+IPC PR for the resolved frame colour. `Configuration.UpdateFrom` now preserves the runtime `CurrentChannel` across the
+persistent-tab merge, and `TabSwitched` deep-clones the seeded channel instead of sharing the previous tab's
+`UsedChannel` — together they fix a Settings-Save regression where the chat input could pop back to
+`/tell <pinned-partner>` after touching settings on a Party or Linkshell tab. Internal items: `IPluginLogProxy`
+indirection over Dalamud's `IPluginLog` routes all ~91 `Plugin.Log` call sites through a testable proxy, closing the
+F12.1 test-isolation gap (`MessageStore.Migrate0` runs in xUnit now). TempTab counter switched from `Interlocked` cached
+field to derived `Tabs.Count(predicate)`. Migration v16 → v17 is additive (new `Tab.IsPinned` flag). Build-Suite floor
+688 → 710 (+22 tests across Pin-lifecycle predicates, pool limits, Tab.Clone roundtrip, MessageStore Migrate0
+construction, and Honorific TitleData JSON roundtrip).
+
+## v1.4.6 — Code Hygiene and Refactor (released 2026-05-12)
+
+Seventh sub-patch of the v1.4.x Polish Sweep series. Maintenance patch — no user-visible behaviour changes; tightens the
+development feedback loop and pulls in two ChatTwo upstream bugfixes. `scripts/preflight.sh` gains a csharpier reflow
+check (Block E) and a markdownlint pass (Block F), so style drift and markdown violations are blocked at the pre-push
+gate. `FontManager.AddFontWithFallback` catch-filter now spans `InvalidOperationException` and `ArgumentException` on
+top of the existing IO triad, with the exception type name in the warning log so the diagnostic path can see which
+atlas-toolkit throw triggered the fallback. `BrandingLinks` and `IntegrationLinks` run a `[ModuleInitializer]` URL
+validation pass on plugin load; a typo in a future URL rotation now throws at startup instead of failing silently when a
+user clicks the broken button. Cherry-picked from ChatTwo upstream `f35b7d3`: `Chat.SetChannel` no longer leaks the
+native `Utf8String` when the linkshell check rejects the channel (rename to `IsChannelOrExistingLinkshell` plus
+wrap-not-return), and `Tab.Clone` now deep-clones `UsedChannel` and `TellTarget` (the previous reference copy let PopOut
+and Temp tabs mutate each other's channel state). The `ChatLogWindow` active-tab underline pill scales with
+`ImGuiHelpers.GlobalScale` and rounds to physical pixels for crisp rendering above 100 % DPI. Internal items:
+`HellionStyle` ChildBgAlpha extracted to a testable helper, `Plugin.SaveConfig` clones only the temp-tab subset in the
+snapshot path, `SettingsOverview` caches the draw-list per frame, `Dalamud.Utility.Util` static surface routed through
+an `IPlatformUtil` indirection (`MessageStore`'s `IsWine` probe is now testable in isolation). No schema bump, no
+migration.
+
+## v1.4.5 — UX and Robustness (released 2026-05-12)
+
+Sixth sub-patch of the v1.4.x Polish Sweep series. User-visible robustness polish plus two doc/test polish items from
+the audit backlog. Chat-log draw failures now surface as a one-shot notification instead of failing silently. The
+first-run wizard splits accept from close: `OnClose` no longer silently sets `FirstRunCompleted`, and a new footer
+"Later — keep defaults" button is the explicit path to dismiss without picking a profile. `InputHistoryService` clears
+on plugin dispose so the previous session's typed commands don't bleed into the next load. `FontManager` falls back to
+the system font path if the embedded Hellion font resource is missing (broken-csproj / dev-build only). The status bar
+hides the version slot when the chat window is too narrow to fit all five slots without overlap. Plus
+`Plugin.cs:167-168` gains an explicit session-only Auto-Tell-Tab invariant comment with a `TempTabCounter.InitFromList`
+pin in the Build-Suite. No schema bump, no migration.
+
+## v1.4.4 — Threading and IPC Safety Polish (released 2026-05-12)
+
+Fifth sub-patch of the v1.4.x Polish Sweep series. `AutoTellTabsService.ActiveTempTabCount` switches from a
+lock-protected LINQ `Count` to an `Interlocked` counter kept in sync from inside the existing mutation paths;
+`Initialize()` seeds from the persisted Tabs list and `SaveConfig`'s snapshot-restore path calls a new
+`ResyncTempTabCounter()` after the mid-step `RemoveAll`. `HonorificService` carries per-method threading banners and
+`TryUnsubscribe`'s log level moves from Debug to Warning. `AutoTranslate.PreloadCache` is marked `IsBackground = true`
+so plugin unload no longer waits for it. `Configuration.IsAllowedForStorage` logs once per unknown ChatType via a
+`NonSerialized` `HashSet`, and `PrivacyPersistUnknownChannels` default flips to `true` for new installs. No schema bump,
+no migration.
+
 ## v1.4.3 — Plugin-Load Async-Init + Repo-Cutover (released 2026-05-08)
 
 Fourth and largest sub-patch of the v1.4.x Polish Sweep series. Plugin migrated to Dalamud's `IAsyncDalamudPlugin` API:

docs/THEME-AUTHORING.md

@@ -141,7 +141,7 @@ A theme can tint these toward its brand family (e.g., a purple theme can shift T
 **don't** flip them (Tell suddenly green, Yell suddenly cyan). RP groups and combat-spec setups depend on the visual
 hierarchy.
 
-The eight colored built-in themes (Hellion Arctic, Hellion Spectrum, Event Horizon, Moonlit Bloom, Mint Grove, Night
+The eight colored built-in themes (Hellion Arctic, Hellion Spectrum, Event Horizon, Crystal Nocturne, Mint Grove, Night
 Blue, Indigo Violet, Forge Merchantman) all follow this rule — read their source for reference. Chat 2 Klassik
 intentionally ships without `chatChannels` so the user keeps their existing picks.
 

scripts/preflight.sh

@@ -1,7 +1,9 @@
 #!/usr/bin/env bash
 # preflight.sh — pre-push gate. Blocks A/B/C verify config drift; Block D is a
-# headless `dotnet build` to catch compile-time API drift. Test execution lives
-# in the local Build-Suite repo and is NOT part of this preflight.
+# headless `dotnet build` to catch compile-time API drift; Block E runs
+# `dotnet csharpier check` against HellionChat/; Block F runs markdownlint
+# against the repo's *.md files. Test execution lives in the local Build-Suite
+# repo and is NOT part of this preflight.
 
 set -euo pipefail
 ROOT="$(cd "$(dirname "$0")/.." && pwd)"
@@ -19,4 +21,12 @@ echo "==> preflight: Block C — changelog sync"
 echo "==> preflight: Block D — plugin compile health"
 dotnet build HellionChat/HellionChat.csproj --configuration Release --nologo --verbosity quiet
 
+echo "==> preflight: Block E — csharpier reflow check"
+dotnet csharpier check HellionChat/
+
+echo "==> preflight: Block F — markdownlint"
+# npx --yes avoids a global install; first run caches into ~/.npm/_npx/.
+# Subsequent runs are sub-second.
+npx --yes markdownlint-cli2 "**/*.md" "#node_modules" "#bin" "#obj" "#.claude"
+
 echo "==> preflight: ALL GREEN"