Merge branch 'feature/v1.4.8'

FullTextSearch + LoadByGuids could stall the draw thread for 100-300 ms
on large databases with a popular search term. The two hot trigger sites
(FTS toggle, search input) now route via TriggerFilterRefresh, which
dispatches the FTS path to Task.Run; the in-memory page-filter path
stays inline because it is sub-ms on the loaded page array.

_ftsFilterSeq is bumped per trigger so a late worker recognises itself
as stale and drops its result instead of overwriting a newer one. The
date/channel and history workers already lived on Task.Run and are
untouched.

Surfaced during the v1.4.8 pre-tag review.

.gitea/workflows/forge-announce.yml

@@ -120,17 +120,37 @@ jobs:
                       $enBlock = $rest.TrimEnd()
                   }
 
-                  # ---------- Char-Cap-Check (5500 Total auf title + description + footer) ----------
+                  # ---------- Embed-Felder + Per-Field-Caps (Discord-Hard-Limits) ----------
+                  # Discord enforces per-embed-field limits separately from the
+                  # combined-total limit. We split the DE and EN blocks into two
+                  # embeds that share the same release URL so Discord stitches
+                  # them into one visual card. Hard caps per Discord docs:
+                  #   description: 4096 per embed
+                  #   title:        256 per embed
+                  #   footer.text: 2048 per embed
+                  #   combined sum across all embeds: 6000
                   $title = "Hellion Chat $version — $subtitle"
-                  $description = "**Deutsch**`n`n$deBody`n`n**English**`n`n$enBlock"
+                  $deDesc = "**Deutsch**`n`n$deBody"
+                  $enDesc = "**English**`n`n$enBlock"
                   $footerText = "Hellion Forge · $versionsnatur"
-                  $totalChars = $title.Length + $description.Length + $footerText.Length
+                  $releaseUrl = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/tag/$tag"
-                  if ($totalChars -gt 5500) {
-                      throw "V6: Total char count $totalChars exceeds 5500 limit. Major-Release detected — please post manually via Bot/Multi-Embed (see forge style §8). Forge-Auto-Announce stays off for this tag."
-                  }
-                  Write-Host "Char-Cap OK: $totalChars / 5500"
 
-                  # ---------- Embed-Payload bauen ----------
+                  if ($deDesc.Length -gt 4096) {
+                      throw "V6a: DE-Body too long for one embed ($($deDesc.Length) chars, max 4096). Trim .github/forge-posts/$tag.md or post the announcement manually (see forge style §8)."
+                  }
+                  if ($enDesc.Length -gt 4096) {
+                      throw "V6b: EN-Block too long for one embed ($($enDesc.Length) chars, max 4096). Trim the changelog entry in HellionChat/HellionChat.yaml or post manually."
+                  }
+                  $totalChars = $title.Length + $deDesc.Length + $enDesc.Length + $footerText.Length
+                  if ($totalChars -gt 6000) {
+                      throw "V6c: Combined embed chars $totalChars exceed Discord's 6000-total limit. Major-Release detected — post manually via Bot/Multi-Embed (see forge style §8)."
+                  }
+                  Write-Host "Embed-Caps OK: de=$($deDesc.Length)/4096, en=$($enDesc.Length)/4096, total=$totalChars/6000"
+
+                  # ---------- Embed-Payload bauen (zwei Embeds, gleiche url) ----------
+                  # Sharing the same `url` tells Discord to render both embeds as a
+                  # single contiguous card block. The title sits on the first embed,
+                  # the footer + timestamp on the last so it reads as one post.
                   $payload = [ordered]@{
                       username = "Forge Herald"
                       avatar_url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/raw/branch/main/HellionChat/images/icon.png"
@@ -142,9 +162,14 @@ jobs:
                       embeds = @(
                           [ordered]@{
                               title = $title
-                              url = "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/tag/$tag"
+                              url = $releaseUrl
                               color = 12730636
-                              description = $description
+                              description = $deDesc
+                          },
+                          [ordered]@{
+                              url = $releaseUrl
+                              color = 12730636
+                              description = $enDesc
                               footer = [ordered]@{ text = $footerText }
                               timestamp = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ss.fffZ")
                           }

.github/forge-posts/v1.4.6.md

@@ -0,0 +1,33 @@
+---
+subtitle: Code Hygiene and Refactor
+versionsnatur: Maintenance-Cycle
+---
+
+Wartungs-Patch ohne User-sichtbare Änderungen. Saubere Code-Basis als Vorbereitung auf das v1.4.7-Backlog-Cleanup, plus
+zwei geerbte Bugfixes aus dem ChatTwo-Upstream `f35b7d3`.
+
+- **preflight.sh härter**: csharpier-Reflow-Check (Block E) und markdownlint (Block F) laufen jetzt im Pre-Push-Gate,
+  statt erst beim Pre-Merge-Review aufzufallen.
+- **FontManager-Fallback robuster**: Atlas-Toolkit-Throws aus kaputten Font-Configs (IO, InvalidOperation,
+  ArgumentException) fallen jetzt zuverlässig auf NotoSansCjkRegular, statt den Atlas-Build mitzureißen. Der
+  Exception-Typ wird im Log mitgegeben für die Diagnose.
+- **URL-Validation beim Plugin-Load**: BrandingLinks (5 URLs) und IntegrationLinks (2 URLs) werden via
+  `[ModuleInitializer]` geprüft. Ein Tippfehler bei einer künftigen URL-Rotation wirft jetzt sofort beim Plugin-Load,
+  statt still beim Klick zu scheitern.
+- **Cherry-Pick aus ChatTwo `f35b7d3`** — Memory-Leak in `Chat.SetChannel`: der native `Utf8String` wird jetzt auch dann
+  freigegeben, wenn der Linkshell-Check den Channel ablehnt (vorher gefangen im early-return).
+- **Cherry-Pick aus ChatTwo `f35b7d3`** — `Tab.Clone()` Deep-cloned jetzt `UsedChannel` und `TellTarget`. Vorher
+  Reference-Share-Bug: PopOut- und Temp-Tabs mutierten sich gegenseitig.
+- **Aktive-Tab-Underline pixel-perfect bei DPI-Scaling**: Die Underline-Pill skaliert jetzt mit
+  `ImGuiHelpers.GlobalScale` und rundet die DrawList-Koordinaten auf physische Pixel. Kein Sub-Pixel-Blur mehr auf
+  125/150%-Setups.
+- **IconButton-Width-Fix**: der manuelle `width - 2 * CellPadding.X`-Subtract verlor den HUD-Scale (Padding skaliert,
+  der raw int nicht). Gemessene Breite läuft jetzt unverändert durch.
+- **Test-Isolation für MessageStore**: `Dalamud.Utility.Util`-Surface (IsWine, OpenLink) läuft jetzt durch eine
+  `IPlatformUtil`-Indirektion. MessageStores `IsWine`-Probe ist isoliert testbar in der Build-Suite. Plus:
+  HellionStyle-ChildBgAlpha als Pure-Helper extrahiert, Plugin.SaveConfig kopiert nur Session-Tabs statt der ganzen
+  Tab-Liste, SettingsOverview cached den DrawList einmal pro Frame.
+- **Built-in-Theme-Roster**: Crystal Nocturne (Royal Sapphire + Electric Magenta auf Obsidian, von CRYSTALLITE) ersetzt
+  Moonlit Bloom. User mit Moonlit Bloom als aktivem Theme fallen beim ersten Plugin-Load auf Hellion Arctic zurück.
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).

.github/forge-posts/v1.4.7.md

@@ -0,0 +1,29 @@
+---
+subtitle: Backlog Cleanup and Mid-Features
+versionsnatur: Mid-Feature-Patch
+---
+
+Achter Sub-Patch der v1.4.x Polish-Sweep-Serie. Erstes User-sichtbares Feature-Bundle seit v1.4.5 — angepinnte Tell-Tabs
+die Relog überleben, opt-in Honorific-Glow, plus eine konfigurierbare Sidebar.
+
+- **TempTell anpinnen**: Rechtsklick auf einen TempTell-Tab in der Sidebar → „Tab anpinnen". Angepinnte Tabs überleben
+  Plugin-Reload und Char-Logout, behalten ihre Konversations-Historie (wird beim Rehydrate aus dem MessageStore
+  nachgeladen) und bleiben an die gleiche /tell-Person gebunden. Hard-Cap 5 angepinnte Tabs in einem separaten Pool —
+  die normalen Auto-Tell-Tabs (15er Cap) sind davon entkoppelt, Gesamt-Decke 20. Die Sidebar gruppiert angepinnte Tabs
+  in einer eigenen „Angepinnt"-Sektion mit eigenem Trenner.
+- **Honorific Glow-Outline**: rendert jetzt eine 8-Richtungs-DrawList-Outline wenn der Honorific-Titel eine Glow-Farbe
+  trägt. Opt-in via **Settings → Integrationen → Glow-Outline rendern (Honorific)** (Default OFF). Gradient (Color3 /
+  GradientColourSet / Wave / Pulse) wird geparst und im DTO weitergereicht, rendert aktuell aber statisch als
+  Primärfarbe — der volle Gradient-Port (Animations-Algorithmus + Pride-Palette) kommt als eigener Cycle nach.
+- **Sidebar-Breite konfigurierbar**: in **Theme & Layout** ein Slider 44–160 px. Default bleibt 44 px (icon-only), aber
+  breiter machen damit Sektion-Header wie „Aktive Tells (3)" oder „Angepinnt (2)" nicht abgeschnitten werden.
+- **Settings-Save Channel-Fix**: ein Save mit aktivem Party- oder Linkshell-Tab konnte den Chat-Input zurück auf
+  `/tell <angepinnte Person>` springen lassen. `Configuration.UpdateFrom` bewahrt jetzt den Runtime-`CurrentChannel`
+  über den persistent-Tab-Merge hinweg, und `TabSwitched` deep-cloned den Seed-Channel statt sich den `UsedChannel` mit
+  dem vorigen Tab zu teilen.
+- **Internal**: `IPluginLogProxy`-Indirektion vor Dalamud's `IPluginLog` über alle ~91 `Plugin.Log`-Call-Sites. Damit
+  läuft `MessageStore.Migrate0` voll-isoliert in xUnit (F12.1-Lücke aus v1.4.6 geschlossen). Plus: TempTab-Counter als
+  abgeleitete Property statt gecachtes Interlocked-Feld — die neuen Pin/Unpin-Übergänge sind Cold-Path, kein
+  Lock-Free-Vorteil mehr. Migration v16 → v17 ist rein additiv (neues `Tab.IsPinned`-Bool, Default false).
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).

.github/forge-posts/v1.4.8.md

@@ -0,0 +1,21 @@
+---
+subtitle: Hook-Layer und Polish-Quick-Wins
+versionsnatur: Polish-Patch
+---
+
+- DbViewer Volltext-Suche: optionaler FTS5-Index über die ganze Chat-Historie.
+  Wird beim ersten v1.4.8-Start asynchron im Hintergrund gebaut, Progress als
+  Toast. Lokale Page-Suche bleibt Default. Such-Eingaben werden als exakte
+  Wortfolge gematcht; mehrere Wörter werden nur gefunden, wenn sie zusammen
+  und in der Reihenfolge stehen. Wer rohe FTS5-MATCH-Syntax nutzen will, setzt
+  eigene Anführungszeichen um den Suchbegriff.
+- Custom-Theme-Files laden sich beim Speichern automatisch neu, wenn das Theme
+  aktiv ist. Kein Picker-Klick mehr nötig.
+- Retention-Sweep blockt nicht mehr den Framework-Thread. Der Mini-Hitch von
+  ~194ms pro Sweep ist weg.
+- Statusleiste rendert sauber bei Windows-Skalierung über 100%.
+- Receive-Suppressed-Tells-Routing wurde in diesem Cycle untersucht und auf
+  v1.5.x verschoben: wenn andere Plugins Tells via CheckMessageHandled
+  unterdrücken, überspringt FFXIVs Chat-Pipeline den RaptureLogModule-Resolver
+  und HellionChats Tab-Routing verliert den Tell-Partner. Der Fix liegt
+  architektonisch neben dem geplanten Ad-Block-Hook-Layer und kommt dort mit.

.markdownlint.json

@@ -1,7 +1,9 @@
 {
     "MD007": { "indent": 4 },
     "MD013": false,
+    "MD024": { "siblings_only": true },
     "MD029": false,
     "MD033": false,
+    "MD036": false,
     "MD041": false
 }

HellionChat/AutoTellTabsService.cs

@@ -4,6 +4,7 @@ using System.Linq;
 using System.Threading;
 using Dalamud.Game.Text;
 using Dalamud.Game.Text.SeStringHandling;
+using Dalamud.Interface.ImGuiNotification;
 using HellionChat.Code;
 using HellionChat.GameFunctions.Types;
 using HellionChat.Resources;
@@ -20,13 +21,11 @@ internal sealed class AutoTellTabsService : IDisposable
     private readonly MessageStore _store;
     private readonly object _tempTabsLock = new();
 
-    // F2.1: lock-free counter mirrors Config.Tabs.Count(IsTempTab) so the
+    // Hard cap on pinned TempTabs so the sidebar doesn't inflate over years
-    // hot-path getter doesn't contend with HandleTell on every render frame.
+    // of usage. Separate pool from AutoTellTabsLimit (15) — pinned tabs live
-    // Bumped from inside the existing mutation paths so it stays consistent
+    // in their own bucket. A configurable cap is a vault-backlog anchor for
-    // with the underlying list — see SpawnTempTab, DropOldestTempTab, OnLogout
+    // a later cycle if tester feedback demands it.
-    // and ResyncTempTabCounter (used by Plugin.cs snapshot-restore).
+    internal const int MaxPinnedTempTabs = 5;
-    // TEST-MIRROR: ../../Hellion Build test/_Helpers/TempTabCounterTests.cs
-    private int _activeTempTabCount;
 
     private bool _initialized;
 
@@ -37,7 +36,14 @@ internal sealed class AutoTellTabsService : IDisposable
         _store = store;
     }
 
-    internal int ActiveTempTabCount => Volatile.Read(ref _activeTempTabCount);
+    // Derived from the tab list on read. Pin/Unpin/Promote/Logout simply
+    // mutate IsPinned or remove tabs — the count adapts automatically.
+    // Replaces the F2.1 Interlocked counter because the new pin-state
+    // transitions are cold-path and don't need lock-free reads.
+    internal int ActiveTempTabCount =>
+        Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInUnpinnedPool);
+
+    internal int PinnedTempTabCount => Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
 
     internal void Initialize()
     {
@@ -46,23 +52,51 @@ internal sealed class AutoTellTabsService : IDisposable
             return;
         }
 
-        // Seed the counter from the persisted Tabs list so a config that already
+        // Pinned tabs come out of the JSON with TellTarget set but
-        // contains TempTabs from a prior session starts in sync. Plugin.cs:168
+        // CurrentChannel reset (NonSerialized). Without re-seeding, the chat
-        // crash-recovery has already dropped TempTabs by the time we get here,
+        // input has no tell-target on the active pinned tab, and the
-        // so the snapshot reflects post-recovery reality.
+        // game-side channel hook only repaints CurrentChannel once the user
-        Interlocked.Exchange(ref _activeTempTabCount, Plugin.Config.Tabs.Count(t => t.IsTempTab));
+        // triggers a /tell or channel switch.
+        RehydratePinnedTabs();
 
         _messageManager.MessageProcessed += HandleTell;
         Plugin.ClientState.Logout += OnLogout;
         _initialized = true;
     }
 
-    // F2.1: callable from outside paths that mutate Config.Tabs directly
+    private void RehydratePinnedTabs()
-    // (Plugin.cs snapshot-restore). Atomically re-pegs the counter to the
-    // live IsTempTab count.
-    internal void ResyncTempTabCounter()
     {
-        Interlocked.Exchange(ref _activeTempTabCount, Plugin.Config.Tabs.Count(t => t.IsTempTab));
+        var pinned = Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
+        Plugin.LogProxy.Debug($"[Pin] Rehydrate scan: {pinned} pinned tab(s) found");
+
+        foreach (var tab in Plugin.Config.Tabs)
+        {
+            if (!TabLifecycleHelpers.IsInPinnedPool(tab))
+                continue;
+
+            if (tab.TellTarget is null || !tab.TellTarget.IsSet())
+            {
+                Plugin.LogProxy.Warning(
+                    $"[Pin] Pinned tab '{tab.Name}' has no usable TellTarget "
+                        + $"(Name={tab.TellTarget?.Name ?? "<null>"} World={tab.TellTarget?.World ?? 0}). "
+                        + "Chat input on this tab will be empty until the partner sends a tell or you /tell manually."
+                );
+                continue;
+            }
+
+            tab.Channel ??= InputChannel.Tell;
+            tab.CurrentChannel.Channel = InputChannel.Tell;
+            tab.CurrentChannel.TellTarget = tab.TellTarget.Clone();
+
+            // MessageList is NonSerialized so pinned tabs come back empty.
+            // Preload the same history window the spawn path uses so the user
+            // sees the recent conversation, not a blank tab.
+            PreloadHistory(tab, tab.TellTarget.Name, tab.TellTarget.World, Guid.Empty);
+
+            Plugin.LogProxy.Debug(
+                $"[Pin] Rehydrated '{tab.Name}' -> Tell target {tab.TellTarget.Name}@{tab.TellTarget.World}"
+            );
+        }
     }
 
     public void Dispose()
@@ -96,7 +130,7 @@ internal sealed class AutoTellTabsService : IDisposable
         if (partner == null)
         {
             // Diagnostics: helps detect regressions (FFXIV payload changes, new edge cases)
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 $"[AutoTellTabs] Could not extract tell partner. type={message.Code.Type}, "
                     + $"senderChunks={message.Sender.Count}, contentChunks={message.Content.Count}, "
                     + $"senderSourcePayloads={message.SenderSource?.Payloads?.Count ?? 0}, "
@@ -110,7 +144,23 @@ internal sealed class AutoTellTabsService : IDisposable
             var existing = FindTempTab(partner.Value.Name, partner.Value.World);
             if (existing != null)
             {
-                // Already routed via MessageManager pipeline
+                // Already routed via MessageManager pipeline. Repair the
+                // tell-target if the fallback hit a pinned tab whose
+                // TellTarget didn't survive a previous round-trip — keeps
+                // FindTempTab fast on the next message.
+                if (
+                    existing.IsPinned
+                    && (existing.TellTarget is null || !existing.TellTarget.IsSet())
+                )
+                {
+                    existing.TellTarget = new TellTarget(
+                        partner.Value.Name,
+                        partner.Value.World,
+                        0,
+                        TellReason.Direct
+                    );
+                    _plugin.SaveConfig();
+                }
                 return;
             }
 
@@ -160,22 +210,35 @@ internal sealed class AutoTellTabsService : IDisposable
         return null;
     }
 
-    private Tab? FindTempTab(string name, uint world)
+    private static Tab? FindTempTab(string name, uint world)
     {
-        return Plugin.Config.Tabs.FirstOrDefault(t =>
+        var byTarget = Plugin.Config.Tabs.FirstOrDefault(t =>
             t.IsTempTab
             && t.TellTarget != null
             && string.Equals(t.TellTarget.Name, name, StringComparison.OrdinalIgnoreCase)
             && t.TellTarget.World == world
         );
+        if (byTarget != null)
+            return byTarget;
+
+        // Fallback: match by tab name. Pinned tabs are named via
+        // FormatTabName(player, world) at spawn time, so the name is a
+        // stable secondary key when TellTarget didn't survive a save/load
+        // (older configs from a renamed pin, malformed migrations, etc.).
+        var expectedName = FormatTabName(name, world);
+        return Plugin.Config.Tabs.FirstOrDefault(t =>
+            t.IsTempTab && string.Equals(t.Name, expectedName, StringComparison.OrdinalIgnoreCase)
+        );
     }
 
-    private void DropOldestTempTab()
+    internal void DropOldestTempTab()
     {
-        // Prioritize greeted tabs for drop; within each bucket, drop by oldest LastActivity
+        // Pinned tabs live in their own bucket (MaxPinnedTempTabs) and are
+        // never drop candidates. They leave the bucket only via Unpin or
+        // PromoteToPermanent.
         var victim = Plugin
             .Config.Tabs.Select((tab, idx) => (Tab: tab, Index: idx))
-            .Where(t => t.Tab.IsTempTab)
+            .Where(t => TabLifecycleHelpers.IsInUnpinnedPool(t.Tab))
             .OrderByDescending(t => t.Tab.IsGreeted)
             .ThenBy(t => t.Tab.LastActivity)
             .FirstOrDefault();
@@ -198,7 +261,6 @@ internal sealed class AutoTellTabsService : IDisposable
         }
 
         Plugin.Config.Tabs.RemoveAt(victim.Index);
-        Interlocked.Decrement(ref _activeTempTabCount);
 
         // Re-anchor active tab to avoid silent switch when tab is dropped
         if (victim.Index <= _plugin.LastTab)
@@ -223,7 +285,6 @@ internal sealed class AutoTellTabsService : IDisposable
         }
 
         Plugin.Config.Tabs.Add(tab);
-        Interlocked.Increment(ref _activeTempTabCount);
     }
 
     private static Tab BuildTempTab(string playerName, uint worldRowId)
@@ -300,7 +361,7 @@ internal sealed class AutoTellTabsService : IDisposable
         catch (Exception ex)
         {
             // Non-fatal: tab still spawns with visible error notice instead of silent history loss
-            Plugin.Log.Error(ex, "[AutoTellTabs] History preload failed");
+            Plugin.LogProxy.Error(ex, "[AutoTellTabs] History preload failed");
             tab.Messages.AddPrune(
                 MakeSystemMarker(HellionStrings.AutoTellTabs_HistoryLoadError),
                 MessageManager.MessageDisplayLimit
@@ -354,14 +415,16 @@ internal sealed class AutoTellTabsService : IDisposable
     {
         lock (_tempTabsLock)
         {
-            // Snapshot active tab index before mutating list
+            // Pinned TempTabs must survive char-switch — that's the whole point
+            // of pinning. Only unpinned ones get stripped.
             var lastIndex = _plugin.LastTab;
             var lastIndexValid = lastIndex >= 0 && lastIndex < Plugin.Config.Tabs.Count;
-            var currentWasTempTab = lastIndexValid && Plugin.Config.Tabs[lastIndex].IsTempTab;
+            var currentWasUnpinnedTempTab =
+                lastIndexValid
+                && TabLifecycleHelpers.IsInUnpinnedPool(Plugin.Config.Tabs[lastIndex]);
 
-            // Clean up pop-out windows before removing temp tabs
             var poppedTempTabIds = Plugin
-                .Config.Tabs.Where(t => t.IsTempTab && t.PopOut)
+                .Config.Tabs.Where(t => TabLifecycleHelpers.IsInUnpinnedPool(t) && t.PopOut)
                 .Select(t => t.Identifier)
                 .ToList();
             if (poppedTempTabIds.Count > 0)
@@ -377,15 +440,78 @@ internal sealed class AutoTellTabsService : IDisposable
                 }
             }
 
-            var removed = Plugin.Config.Tabs.RemoveAll(t => t.IsTempTab);
+            Plugin.Config.Tabs.RemoveAll(TabLifecycleHelpers.IsInUnpinnedPool);
-            Interlocked.Add(ref _activeTempTabCount, -removed);
 
-            // Force switch to tab 0 if active tab was temp or index is now out of range
+            // Force switch to tab 0 if active tab was an unpinned temp tab or
+            // index is now out of range. Pinned tabs survive — no switch needed.
             var stillValid = lastIndex >= 0 && lastIndex < Plugin.Config.Tabs.Count;
-            if (currentWasTempTab || !stillValid)
+            if (currentWasUnpinnedTempTab || !stillValid)
             {
                 _plugin.WantedTab = 0;
             }
         }
     }
+
+    internal bool TryPin(Tab tab)
+    {
+        if (!tab.IsTempTab || tab.IsPinned)
+        {
+            Plugin.LogProxy.Debug(
+                $"[Pin] TryPin skipped: IsTempTab={tab.IsTempTab} IsPinned={tab.IsPinned}"
+            );
+            return false;
+        }
+
+        if (PinnedTempTabCount >= MaxPinnedTempTabs)
+        {
+            WrapperUtil.AddNotification(
+                string.Format(HellionStrings.PinTab_LimitReached, MaxPinnedTempTabs),
+                NotificationType.Warning
+            );
+            return false;
+        }
+
+        tab.IsPinned = true;
+        Plugin.LogProxy.Debug(
+            $"[Pin] Pinned tab '{tab.Name}' target={tab.TellTarget?.Name}@{tab.TellTarget?.World}"
+        );
+        _plugin.SaveConfig();
+        return true;
+    }
+
+    internal void Unpin(Tab tab)
+    {
+        if (!tab.IsPinned)
+        {
+            return;
+        }
+
+        // If the unpinned pool is already full, dropping the oldest before
+        // flipping the flag avoids counting the just-unpinned tab as a drop
+        // candidate.
+        if (ActiveTempTabCount >= Plugin.Config.AutoTellTabsLimit)
+        {
+            DropOldestTempTab();
+        }
+
+        tab.IsPinned = false;
+        Plugin.LogProxy.Debug("[Pin] Unpinned tab '{tab.Name}'");
+        _plugin.SaveConfig();
+    }
+
+    internal void PromoteToPermanent(Tab tab)
+    {
+        if (!tab.IsTempTab)
+        {
+            return;
+        }
+
+        tab.IsTempTab = false;
+        tab.IsPinned = false;
+        tab.TellTarget = TellTarget.Empty();
+        Plugin.LogProxy.Debug(
+            $"[Pin] Promoted tab '{tab.Name}' to permanent (tell-binding dropped)"
+        );
+        _plugin.SaveConfig();
+    }
 }

HellionChat/Branding/BrandingLinks.cs

@@ -1,3 +1,6 @@
+using System.Runtime.CompilerServices;
+using HellionChat.Util;
+
 namespace HellionChat.Branding;
 
 // Centralised — a future invite/URL rotation only touches this file.
@@ -9,4 +12,22 @@ internal static class BrandingLinks
         "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat";
     public const string HellionForgeWebsite = "https://hellion-forge.cloud";
     public const string HellionMediaWebsite = "https://hellion-media.de/de";
+
+    // CA2255 warns against [ModuleInitializer] in library code, but Dalamud
+    // loads the plugin DLL directly so the module-init pass is the right hook
+    // for a one-shot URL sanity check at plugin load.
+#pragma warning disable CA2255
+    [ModuleInitializer]
+#pragma warning restore CA2255
+    internal static void ValidateUrls()
+    {
+        UrlValidation.ValidateAll(
+            nameof(BrandingLinks),
+            HellionForgeDiscordInvite,
+            HellionForgeGitea,
+            HellionChatRepo,
+            HellionForgeWebsite,
+            HellionMediaWebsite
+        );
+    }
 }

HellionChat/Commands.cs

@@ -52,7 +52,7 @@ internal sealed class Commands : IDisposable
     {
         if (!Registered.TryGetValue(command, out var wrapper))
         {
-            Plugin.Log.Warning($"Missing registration for command {command}");
+            Plugin.LogProxy.Warning($"Missing registration for command {command}");
             return;
         }
 
@@ -62,7 +62,7 @@ internal sealed class Commands : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, $"Error while executing command {command}");
+            Plugin.LogProxy.Error(ex, $"Error while executing command {command}");
         }
     }
 }

HellionChat/Configuration.cs

@@ -34,7 +34,7 @@ public class ConfigKeyBind
 [Serializable]
 public class Configuration : IPluginConfiguration
 {
-    private const int LatestVersion = 16;
+    private const int LatestVersion = 17;
 
     public int Version { get; set; } = LatestVersion;
 
@@ -83,7 +83,7 @@ public class Configuration : IPluginConfiguration
         // silently, like before.
         if (!Enum.IsDefined(typeof(ChatType), type) && _warnedUnknownChannels.Add(type))
         {
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 "PrivacyFilter: unrecognised ChatType {Type} — falling back to PrivacyPersistUnknownChannels={Persist}.",
                 type,
                 PrivacyPersistUnknownChannels
@@ -102,10 +102,22 @@ public class Configuration : IPluginConfiguration
     public bool FirstRunCompleted;
     public bool UseHellionFont = true;
     public bool ShowHonorificTitleInHeader = true;
+
+    // v1.4.7 opt-in: renders the Honorific glow outline when the title carries
+    // a Glow colour. Default OFF — keeps v1.4.6 visuals untouched for users
+    // who don't care, and dodges the per-frame DrawList overhead on low-end
+    // hardware. Gradient (Color3 / GradientColourSet) is parsed but rendered
+    // as the primary Color until a later cycle ports the animation.
+    public bool ShowHonorificGlow;
     public bool EnableAutoTellTabs = true;
     public int AutoTellTabsLimit = 15;
     public bool AutoTellTabsCompactDisplay;
     public int AutoTellTabsHistoryPreload = 20;
+
+    // Sidebar width in pixels. Default 44 mirrors the icon-only layout from
+    // v1.2.0; users can widen up to 160 to fit a section-header line like
+    // "Active Tells (3)" without truncation.
+    public int SidebarWidth = 44;
     public bool AutoTellTabsShowGreetedToggle;
     public bool SeenPopOutInputHint;
     public bool PopOutInputEnabled = true;
@@ -278,16 +290,20 @@ public class Configuration : IPluginConfiguration
         ColorSelectedInputChannelButton = other.ColorSelectedInputChannelButton;
 
         // Keep live temp tabs alive across UpdateFrom — a settings save must
-        // not destroy open tell conversations. For persistent tabs, capture
+        // not destroy open tell conversations. Pinned TempTabs are persistent
-        // the live MessageList and LastSendUnread by Identifier before the
+        // and come through `other` like regular tabs; unpinned TempTabs are
-        // replace and restore them onto the freshly cloned tabs; new tabs
+        // session-only and held from the local state. For persistent tabs
-        // get an empty MessageList, deleted tabs lose their history (intended).
+        // (incl. pinned), capture live runtime state by Identifier and restore
-        var liveTempTabs = Tabs.Where(t => t.IsTempTab).ToList();
+        // it onto the freshly cloned tabs — CurrentChannel is critical because
-        var livePersistentSession = Tabs.Where(t => !t.IsTempTab)
+        // the user may have switched channel in-game between settings-open
-            .ToDictionary(t => t.Identifier, t => (t.Messages, t.LastSendUnread));
+        // and settings-save, and we'd otherwise overwrite that with the
+        // settings-time snapshot.
+        var liveUnpinnedTempTabs = Tabs.Where(TabLifecycleHelpers.IsInUnpinnedPool).ToList();
+        var livePersistentSession = Tabs.Where(t => !TabLifecycleHelpers.IsInUnpinnedPool(t))
+            .ToDictionary(t => t.Identifier, t => (t.Messages, t.LastSendUnread, t.CurrentChannel));
 
         Tabs = other
-            .Tabs.Where(t => !t.IsTempTab)
+            .Tabs.Where(t => !t.IsTempTab || t.IsPinned)
             .Select(t =>
             {
                 var clone = t.Clone();
@@ -295,11 +311,12 @@ public class Configuration : IPluginConfiguration
                 {
                     clone.Messages = live.Messages;
                     clone.LastSendUnread = live.LastSendUnread;
+                    clone.CurrentChannel = live.CurrentChannel;
                 }
                 return clone;
             })
             .ToList();
-        Tabs.AddRange(liveTempTabs);
+        Tabs.AddRange(liveUnpinnedTempTabs);
 
         ChatTabForward = other.ChatTabForward;
         ChatTabBackward = other.ChatTabBackward;
@@ -319,6 +336,7 @@ public class Configuration : IPluginConfiguration
         FirstRunCompleted = other.FirstRunCompleted;
         UseHellionFont = other.UseHellionFont;
         ShowHonorificTitleInHeader = other.ShowHonorificTitleInHeader;
+        ShowHonorificGlow = other.ShowHonorificGlow;
 
         // v1.1.0 theme engine fields
         Theme = other.Theme;
@@ -330,6 +348,7 @@ public class Configuration : IPluginConfiguration
         AutoTellTabsLimit = other.AutoTellTabsLimit;
         AutoTellTabsCompactDisplay = other.AutoTellTabsCompactDisplay;
         AutoTellTabsHistoryPreload = other.AutoTellTabsHistoryPreload;
+        SidebarWidth = other.SidebarWidth;
         AutoTellTabsShowGreetedToggle = other.AutoTellTabsShowGreetedToggle;
 
         SeenPopOutInputHint = other.SeenPopOutInputHint;
@@ -404,6 +423,11 @@ public class Tab
     public bool HideWhenInactive;
 
     public bool IsTempTab;
+
+    // Pinned TempTabs survive plugin reload and logout — tester feedback from
+    // Jin (v1.4.7). Pinned tabs live in their own pool (MaxPinnedTempTabs)
+    // separate from the AutoTellTabsLimit bucket.
+    public bool IsPinned;
     public bool AllSenderMessages;
     public TellTarget TellTarget = TellTarget.Empty();
 
@@ -500,7 +524,7 @@ public class Tab
             Opacity = Opacity,
             Identifier = Identifier,
             InputDisabled = InputDisabled,
-            CurrentChannel = CurrentChannel,
+            CurrentChannel = CurrentChannel.Clone(),
             CanMove = CanMove,
             CanResize = CanResize,
             IndependentHide = IndependentHide,
@@ -511,8 +535,9 @@ public class Tab
             HideInBattle = HideInBattle,
             HideWhenInactive = HideWhenInactive,
             IsTempTab = IsTempTab,
+            IsPinned = IsPinned,
             AllSenderMessages = AllSenderMessages,
-            TellTarget = TellTarget.From(TellTarget),
+            TellTarget = TellTarget.Clone(),
             IsGreeted = IsGreeted,
         };
     }
@@ -690,6 +715,29 @@ public class UsedChannel
     {
         Channel = channel;
     }
+
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Deep-clone the UsedChannel so Tab.Clone() no longer shares
+    //   channel state (incl. TellTarget) with its origin Tab. Previously
+    //   a reference copy: PopOut and Temp tabs mutated each other.
+    // - Name is intentionally a reference copy (matches upstream); it
+    //   gets reassigned on every channel switch anyway.
+    // TEST-MIRROR: ../../Hellion Build test/_Helpers/UsedChannelCloneTests.cs
+    // ---------------------------------------------------------------
+    public UsedChannel Clone()
+    {
+        return new UsedChannel
+        {
+            Channel = Channel,
+            Name = Name,
+            TellTarget = TellTarget?.Clone(),
+
+            UseTempChannel = UseTempChannel,
+            TempChannel = TempChannel,
+            TempTellTarget = TempTellTarget?.Clone(),
+        };
+    }
 }
 
 [Serializable]

HellionChat/EmoteCache.cs

@@ -101,7 +101,10 @@ public static class EmoteCache
                 t =>
                 {
                     if (t.IsFaulted)
-                        Plugin.Log.Error(t.Exception!, $"EmoteCache load failed for {emoteCode}");
+                        Plugin.LogProxy.Error(
+                            t.Exception!,
+                            $"EmoteCache load failed for {emoteCode}"
+                        );
                 },
                 TaskScheduler.Default
             )
@@ -158,7 +161,7 @@ public static class EmoteCache
         {
             // Reset to Unloaded so a later trigger can retry without a plugin reload.
             State = LoadingState.Unloaded;
-            Plugin.Log.Error(ex, "BetterTTV cache wasn't initialized");
+            Plugin.LogProxy.Error(ex, "BetterTTV cache wasn't initialized");
         }
     }
 
@@ -214,7 +217,7 @@ public static class EmoteCache
         }
         catch
         {
-            Plugin.Log.Error("Failed to convert");
+            Plugin.LogProxy.Error("Failed to convert");
             return null;
         }
     }
@@ -304,7 +307,7 @@ public static class EmoteCache
             catch (Exception ex)
             {
                 Failed = true;
-                Plugin.Log.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
+                Plugin.LogProxy.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
             }
         }
 
@@ -408,7 +411,7 @@ public static class EmoteCache
             catch (Exception ex)
             {
                 Failed = true;
-                Plugin.Log.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
+                Plugin.LogProxy.Error(ex, $"Unable to load {emote.Code} with id {emote.Id}");
             }
         }
     }

HellionChat/FontManager.cs

@@ -58,7 +58,7 @@ public class FontManager
         );
         if (stream is null)
         {
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 "Hellion font resource missing — falling back to system default font."
             );
             return null;
@@ -226,11 +226,21 @@ public class FontManager
             return fontId.AddToBuildToolkit(tk, config);
         }
         catch (Exception e)
-            when (e is FileNotFoundException or DirectoryNotFoundException or IOException)
+            when (e
+                    is FileNotFoundException
+                        or DirectoryNotFoundException
+                        or IOException
+                        or InvalidOperationException
+                        or ArgumentException
+            )
         {
-            Plugin.Log.Warning(
+            // Atlas-toolkit throws span IO and validation failures; routing the
+            // wider set through the fallback keeps a corrupt font config from
+            // taking down the whole atlas build.
+            Plugin.LogProxy.Warning(
                 e,
-                $"Configured {slot} font unavailable, falling back to NotoSansCjkRegular"
+                $"Configured {slot} font failed to load ({e.GetType().Name}), "
+                    + "falling back to NotoSansCjkRegular"
             );
             var fallback = new DalamudAssetFontAndFamilyId(DalamudAsset.NotoSansCjkRegular);
             return fallback.AddToBuildToolkit(tk, config);

HellionChat/GameFunctions/Chat.cs

@@ -236,7 +236,7 @@ internal sealed unsafe class Chat : IDisposable
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Error in chat Activated event");
+                    Plugin.LogProxy.Error(ex, "Error in chat Activated event");
                 }
             });
         }
@@ -266,7 +266,7 @@ internal sealed unsafe class Chat : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in chat Activated event");
+            Plugin.LogProxy.Error(ex, "Error in chat Activated event");
         }
 
         return 1; // Prevent vanilla chat log from gaining focus
@@ -299,7 +299,7 @@ internal sealed unsafe class Chat : IDisposable
         {
             playerName = SeString.Parse(agent->TellPlayerName).TextValue;
             worldId = agent->TellWorldId;
-            Plugin.Log.Debug($"Detected tell target '[redacted]'@{worldId}");
+            Plugin.LogProxy.Debug($"Detected tell target '[redacted]'@{worldId}");
         }
 
         Plugin.CurrentTab.CurrentChannel = new UsedChannel
@@ -358,7 +358,7 @@ internal sealed unsafe class Chat : IDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in chat Activated event");
+                Plugin.LogProxy.Error(ex, "Error in chat Activated event");
             }
         }
 
@@ -408,7 +408,7 @@ internal sealed unsafe class Chat : IDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in chat Activated event");
+                Plugin.LogProxy.Error(ex, "Error in chat Activated event");
             }
         }
 
@@ -423,16 +423,24 @@ internal sealed unsafe class Chat : IDisposable
         );
     }
 
-    // Check if channel is valid (non-linkshell or existing linkshell)
+    // ---------------------------------------------------------------
-    internal static bool ValidAnyLinkshell(InputChannel channel)
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Renamed ValidAnyLinkshell -> IsChannelOrExistingLinkshell. The
+    //   name now states intent: returns true for any non-linkshell
+    //   channel, or a linkshell index that actually exists.
+    // ---------------------------------------------------------------
+    internal static bool IsChannelOrExistingLinkshell(InputChannel channel)
     {
         var idx = channel.LinkshellIndex();
         if (idx == uint.MaxValue || channel.IsExtraChatLinkshell())
             return true;
-        if (channel.IsLinkshell() && ValidLinkshell(idx))
+
-            return true;
+        if (channel.IsLinkshell())
-        if (channel.IsCrossLinkshell() && ValidCrossLinkshell(idx))
+            return ValidLinkshell(idx);
-            return true;
+
+        if (channel.IsCrossLinkshell())
+            return ValidCrossLinkshell(idx);
+
         return false;
     }
 
@@ -531,12 +539,17 @@ internal sealed unsafe class Chat : IDisposable
         if (idx == uint.MaxValue)
             idx = 0;
 
-        if (!ValidAnyLinkshell(channel))
+        // ---------------------------------------------------------------
-            return;
+        // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+        // - Wrap ChangeChatChannel in the validity check instead of
+        //   early-returning. The previous early return skipped Dtor and
+        //   leaked the native Utf8String allocated a few lines above.
+        // ---------------------------------------------------------------
+        if (IsChannelOrExistingLinkshell(channel))
+            RaptureShellModule
+                .Instance()
+                ->ChangeChatChannel(tellTarget != null ? 17 : (int)channel, idx, target, true);
 
-        RaptureShellModule
-            .Instance()
-            ->ChangeChatChannel(tellTarget != null ? 17 : (int)channel, idx, target, true);
         target->Dtor(true);
     }
 
@@ -611,7 +624,7 @@ internal sealed unsafe class Chat : IDisposable
         if (contentId == 0)
         {
             Plugin.ChatGui.PrintError(Language.Chat_SendTell_Error);
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 "Tried to send a tell with ContentId being 0, sorry this is an internal error."
             );
             return;

HellionChat/GameFunctions/GameFunctions.cs

@@ -215,7 +215,7 @@ internal unsafe class GameFunctions : IDisposable
         }
         catch (Exception e)
         {
-            Plugin.Log.Warning(e, "Unable to open adventurer plate");
+            Plugin.LogProxy.Warning(e, "Unable to open adventurer plate");
             return false;
         }
     }
@@ -255,7 +255,7 @@ internal unsafe class GameFunctions : IDisposable
         var byteCount = System.Text.Encoding.UTF8.GetByteCount(ReplacementName);
         if (byteCount >= PlaceholderBufferSize)
         {
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 $"Replacement name too long for placeholder buffer ({byteCount} bytes >= {PlaceholderBufferSize}); falling back to original."
             );
             ReplacementName = null;

HellionChat/GameFunctions/KeybindManager.cs

@@ -507,7 +507,7 @@ internal unsafe class KeybindManager : IDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in chat Activated event");
+            Plugin.LogProxy.Error(ex, "Error in chat Activated event");
         }
     }
 

HellionChat/GameFunctions/Types/TellTarget.cs

@@ -40,5 +40,11 @@ public class TellTarget
 
     public static TellTarget Empty() => new(string.Empty, 0, 0, TellReason.Direct);
 
-    public static TellTarget From(TellTarget t) => new(t.Name, t.World, t.ContentId, t.Reason);
+    // ---------------------------------------------------------------
+    // Cherry-picked from ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12)
+    // - Replaced static From(t) with an instance-style Clone() so call
+    //   sites read like a copy operation, not a factory.
+    // TEST-MIRROR: ../../../Hellion Build test/_Helpers/TellTargetCloneTests.cs
+    // ---------------------------------------------------------------
+    public TellTarget Clone() => new(Name, World, ContentId, Reason);
 }

HellionChat/HellionChat.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Dalamud.NET.Sdk/15.0.0">
     <PropertyGroup>
         <!-- Independent versioning; see yaml changelog for upstream Chat 2 base -->
-        <Version>1.4.5</Version>
+        <Version>1.4.8</Version>
         <ImplicitUsings>enable</ImplicitUsings>
         <Nullable>enable</Nullable>
         <!-- Use lock file to pin exact versions -->

HellionChat/HellionChat.yaml

@@ -35,6 +35,122 @@ tags:
     - Replacement
     - Privacy
 changelog: |-
+    **v1.4.8 — Hook-Layer and Polish Quick-Wins (2026-05-14)**
+
+    Ninth sub-patch of the v1.4.x polish-sweep series. Hook-layer
+    cluster (DbViewer FTS5 full-text search, ad-block foundation
+    investigation) plus three polish quick-wins.
+
+    - DbViewer full-text search: optional FTS5 index across the full
+      chat history. Built asynchronously on first load after the
+      update with a progress toast. The local page-filter remains
+      available as the default mode. Queries match as exact phrases
+      -- multi-word terms must appear together in order; advanced
+      users can opt into raw FTS5 MATCH syntax by wrapping their own
+      double-quotes.
+    - Custom theme files now auto-reload when edited while the theme
+      is active -- no need to re-click the theme in the picker.
+    - Retention sweep no longer blocks the framework thread, removing
+      the ~194ms mini-hitch per sweep.
+    - Status bar renders correctly at Windows display scaling > 100%.
+    - Receive-suppressed-tells routing investigated this cycle and
+      postponed to v1.5.x: when other plugins suppress tells via
+      CheckMessageHandled, the FFXIV chat pipeline skips the
+      RaptureLogModule.AddMsgSourceEntry path so HellionChat's
+      ContentIdResolverHook does not fire and tell-partner
+      identification breaks. The fix belongs next to the planned
+      ad-block hook layer where the same patch surface comes up.
+    - Internal: messages.Id is declared BLOB but stored as TEXT
+      (Microsoft.Data.Sqlite Guid binding). FTS bulk insert and
+      LoadByGuids match the TEXT storage form on both sides.
+      Migration v17 stays (no schema bump).
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+    ---
+
+    **v1.4.7 — Backlog Cleanup and Mid-Features (2026-05-13)**
+
+    Eighth sub-patch of the v1.4.x polish-sweep series. First
+    user-visible feature bundle since v1.4.5 — pinned tell tabs that
+    survive relog, opt-in Honorific glow rendering, and a configurable
+    sidebar.
+
+    - TempTell Pin: right-click a TempTell tab in the sidebar to pin
+      it. Pinned tabs survive relog, keep their conversation history
+      (loaded on demand from the message store), and stay bound to
+      the same /tell partner. Hard cap of 5 pinned tabs in a pool
+      separate from the 15-tab auto-tell pool — total ceiling is 20
+      tabs. New 'Pinned' section in the sidebar with its own divider
+      header
+    - Honorific Glow outline now renders when the title carries a
+      Glow colour. Opt-in via Settings → Integrations → 'Render glow
+      outlines (Honorific)' (default off, dodges the per-frame
+      DrawList overhead on low-end hardware). Gradient (Color3 /
+      GradientColourSet / Wave / Pulse) is parsed but rendered
+      statically — a later cycle will port the full animation
+    - Sidebar width is now configurable in Theme & Layout (range
+      44–160 px). Default stays icon-only; widen to fit section
+      headers like 'Active Tells (3)' without truncation
+    - Settings Save no longer pops the chat input back to /tell with
+      a pinned partner — Configuration.UpdateFrom now preserves the
+      runtime CurrentChannel across the persistent-tab merge, and
+      TabSwitched deep-clones the seeded channel instead of sharing
+      the previous tab's UsedChannel
+    - Util/ImGuiUtil.cs DrawArrows IconButton id now uses
+      (id + 1).ToString() instead of the operator-precedence quirk
+      id + 1.ToString() — generated IDs stay numerically stable
+    - Internal: IPluginLogProxy indirection over Dalamud's IPluginLog
+      routes all ~91 Plugin.Log call sites through a testable proxy.
+      MessageStore.Migrate0 can now run in xUnit without loading
+      Dalamud.dll, closing the gap F12.1 left in v1.4.6
+    - Internal: TempTab counter switched from an Interlocked cached
+      field to a derived Tabs.Count(predicate) — pin-state transitions
+      are cold-path and don't need lock-free reads
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+    ---
+
+    **v1.4.6 — Code Hygiene and Refactor (2026-05-12)**
+
+    Maintenance patch. No user-visible behaviour changes; tightens the
+    development feedback loop, fixes two upstream-inherited bugs, and
+    prepares the code for the v1.4.7 backlog cleanup.
+
+    - preflight.sh gains a csharpier reflow check and a markdownlint
+      pass so style drift and markdown violations are caught at the
+      pre-push gate
+    - FontManager fallback catches the full set of atlas-toolkit
+      throws (IO, InvalidOperation, ArgumentException) — a corrupt
+      font config no longer takes down the whole atlas build
+    - BrandingLinks and IntegrationLinks URLs validated on plugin
+      load — a typo in a future URL rotation now throws at startup
+    - Cherry-picked from ChatTwo upstream f35b7d3: Chat.SetChannel
+      no longer leaks the native Utf8String when the linkshell check
+      rejects the channel
+    - Cherry-picked from ChatTwo upstream f35b7d3: Tab.Clone now
+      deep-clones UsedChannel and TellTarget — PopOut and Temp tabs
+      no longer mutate each other's channel state
+    - Active-tab underline scales with DPI and rounds to physical
+      pixels for crisp rendering above 100% scaling
+    - IconButton width parameter no longer subtracts HUD-scaled
+      padding from a raw int (measured width passes through verbatim)
+    - Internal: HellionStyle ChildBgAlpha extracted to a testable
+      helper; Plugin.SaveConfig clones only the temp tabs;
+      SettingsOverview caches the draw-list per frame;
+      Dalamud.Utility.Util surface routed through an IPlatformUtil
+      indirection (MessageStore IsWine probe is now testable in
+      isolation)
+    - Built-in themes: Crystal Nocturne (sapphire and electric
+      magenta over obsidian, by CRYSTALLITE) replaces Moonlit Bloom.
+      Users with Moonlit Bloom selected fall back to Hellion Arctic
+      on first load
+
+    Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+    ---
+
     **v1.4.5 — UX and Robustness (2026-05-12)**
 
     Sixth sub-patch of the v1.4.x polish-sweep series. Chat-log draw
@@ -58,50 +174,4 @@ changelog: |-
 
     ---
 
-    **v1.4.4 — Threading and IPC safety polish (2026-05-12)**
-
-    Fifth sub-patch of the v1.4.x polish-sweep series. Threading
-    assumptions are documented per-method, a hot-path lock falls
-    away, and the privacy filter speaks up when an unknown ChatType
-    shows up.
-
-    - AutoTellTabs hot-path getter uses an Interlocked counter
-      instead of taking the lock on every read
-    - Honorific integration: per-method threading banners, plus
-      Warning-level log on unsubscribe failure
-    - AutoTranslate warmup thread marked IsBackground so plugin
-      unload doesn't wait for it
-    - PrivacyFilter logs once per unknown ChatType so a future
-      patch's added channel doesn't drop off the radar
-    - New installs persist unknown channels by default; existing
-      configs keep their explicit choice
-
-    ---
-
-    **v1.4.3 — Faster plugin load + new repo (2026-05-08)**
-
-    Heavy startup work (migrations, hooks, windows) now runs async so
-    Dalamud's UI stays responsive during load. Load time is comparable
-    to v1.4.2 — this is the foundation for v1.4.4 optimisations.
-
-    - Two-phase async load via IAsyncDalamudPlugin
-    - Schema-gate replaces the v9→v16 migration chain; old configs
-      require a v1.4.2 install first
-    - AutoTranslate cache loads on first use instead of every startup
-    - Custom font (Hellion-Exo2) appears with a brief pop after load
-    - Repo moved to gitea.hellion-forge.cloud — update your custom-repo URL
-
-    ---
-
-    **v1.4.2 — Smoother frames in the chat log**
-
-    Per-frame allocations in the chat-log render path eliminated.
-    2–5% frame-time recovery in typical scenes, more on pop-out-heavy setups.
-
-    - Card-mode: theme/border invariants hoisted out of the per-message loop
-    - Auto-tell tab tint and icon cached per tab
-    - Status bar aggregation runs on ~1% of frames instead of every frame
-
-    ---
-
     Full history: https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases

HellionChat/Integrations/HonorificTitleData.cs

@@ -4,10 +4,19 @@ namespace HellionChat.Integrations;
 
 // Local DTO mirroring Honorific's TitleData — no hard reference to Honorific.dll
 // so HellionChat loads cleanly when Honorific is absent.
-// Glow/gradient fields omitted; Cycle 1 renders primary Color only.
+//
+// v1.4.7: render Glow only. Gradient (Color3 / GradientColourSet / Style) is
+// parsed and stashed so a future cycle can render it without re-shaping the
+// JSON roundtrip — see vault anchor "Honorific Full Gradient Port" (would
+// need GradientSystem.cs + the hardcoded Pride-palette list ported, or an
+// upstream IPC PR exposing the resolved frame colour).
 internal sealed record HonorificTitleData(
     string? Title,
     bool IsPrefix,
     bool IsOriginal,
-    Vector3? Color
+    Vector3? Color,
+    Vector3? Glow,
+    Vector3? Color3,
+    int? GradientColourSet,
+    string? GradientAnimationStyle
 );

HellionChat/Integrations/IntegrationLinks.cs

@@ -1,3 +1,6 @@
+using System.Runtime.CompilerServices;
+using HellionChat.Util;
+
 namespace HellionChat.Integrations;
 
 // Third-party plugin URLs — separate from BrandingLinks (Hellion-owned URLs).
@@ -5,4 +8,13 @@ internal static class IntegrationLinks
 {
     public const string HonorificRepo = "https://github.com/Caraxi/Honorific";
     public const string HonorificAuthor = "https://github.com/Caraxi";
+
+    // See BrandingLinks.ValidateUrls for the CA2255 rationale.
+#pragma warning disable CA2255
+    [ModuleInitializer]
+#pragma warning restore CA2255
+    internal static void ValidateUrls()
+    {
+        UrlValidation.ValidateAll(nameof(IntegrationLinks), HonorificRepo, HonorificAuthor);
+    }
 }

HellionChat/Ipc/ExtraChat.cs

@@ -62,7 +62,10 @@ public sealed class ExtraChat : IDisposable
         catch (Exception ex)
         {
             // ExtraChat is optional; IPC failure is normal when the plugin isn't loaded.
-            Plugin.Log.Verbose(ex, "ExtraChat IPC initial state query failed (peer not loaded?)");
+            Plugin.LogProxy.Verbose(
+                ex,
+                "ExtraChat IPC initial state query failed (peer not loaded?)"
+            );
         }
     }
 

HellionChat/Message.cs

@@ -153,8 +153,8 @@ public partial class Message
             }
             catch (ArgumentException ex)
             {
-                Plugin.Log.Error(ex, "Failed to parse extra chat channel GUID");
+                Plugin.LogProxy.Error(ex, "Failed to parse extra chat channel GUID");
-                Plugin.Log.Error($"Byte Array: ${string.Join(", ", data[4..^1])}");
+                Plugin.LogProxy.Error($"Byte Array: ${string.Join(", ", data[4..^1])}");
                 return Guid.Empty;
             }
         }
@@ -251,7 +251,7 @@ public partial class Message
                         AddChunkWithMessage(
                             text.NewWithStyle(chunk.Source, chunk.Link, token.Value)
                         );
-                        Plugin.Log.Debug(
+                        Plugin.LogProxy.Debug(
                             $"Invalid URL accepted by Regex but failed URI parsing: '{token.Value}'"
                         );
                     }
@@ -416,7 +416,7 @@ public partial class Message
                 catch (Exception)
                 {
                     AddChunkWithMessage(text.NewWithStyle(chunk.Source, chunk.Link, split));
-                    Plugin.Log.Debug($"Failed to parse the text param: '{split}'");
+                    Plugin.LogProxy.Debug($"Failed to parse the text param: '{split}'");
                 }
             }
         }

HellionChat/MessageManager.cs

@@ -52,7 +52,7 @@ internal class MessageManager : IAsyncDisposable
     {
         Plugin = plugin;
 
-        Store = new MessageStore(DatabasePath());
+        Store = new MessageStore(DatabasePath(), Plugin.PlatformUtil, Plugin.LogProxy);
 
         PendingMessageThread = new Thread(() =>
             ProcessPendingMessages(PendingThreadCancellationToken.Token)
@@ -91,7 +91,7 @@ internal class MessageManager : IAsyncDisposable
             await Task.Delay(100);
 
         if (PendingMessageThread.IsAlive)
-            Plugin.Log.Warning(
+            Plugin.LogProxy.Warning(
                 "PendingMessageThread did not observe cancellation within 10s. "
                     + "Worker remains on background thread; next plugin reload releases it."
             );
@@ -137,7 +137,7 @@ internal class MessageManager : IAsyncDisposable
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Error processing pending message");
+                    Plugin.LogProxy.Error(ex, "Error processing pending message");
                 }
             }
             else
@@ -182,10 +182,12 @@ internal class MessageManager : IAsyncDisposable
 
         // Mark failed messages as deleted to prevent retry attempts
         var failedIds = messages.FailedMessageIds();
-        Plugin.Log.Info($"Marking {failedIds.Count} messages as deleted due to parse failures");
+        Plugin.LogProxy.Info(
+            $"Marking {failedIds.Count} messages as deleted due to parse failures"
+        );
         foreach (var msgId in messages.FailedMessageIds())
         {
-            Plugin.Log.Debug($"Marking message '{msgId}' as deleted due to parse failure");
+            Plugin.LogProxy.Debug($"Marking message '{msgId}' as deleted due to parse failure");
             Store.DeleteMessage(msgId);
         }
     }
@@ -201,10 +203,10 @@ internal class MessageManager : IAsyncDisposable
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error in FilterAllTabs");
+                Plugin.LogProxy.Error(ex, "Error in FilterAllTabs");
             }
 
-            Plugin.Log.Debug($"FilterAllTabs took {stopwatch.ElapsedMilliseconds}ms");
+            Plugin.LogProxy.Debug($"FilterAllTabs took {stopwatch.ElapsedMilliseconds}ms");
         });
     }
 
@@ -259,7 +261,7 @@ internal class MessageManager : IAsyncDisposable
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error in ContentIdResolver");
+            Plugin.LogProxy.Error(ex, "Error in ContentIdResolver");
         }
     }
 

HellionChat/PayloadHandler.cs

@@ -131,7 +131,7 @@ public sealed class PayloadHandler
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Error executing integration");
+                Plugin.LogProxy.Error(ex, "Error executing integration");
             }
         }
 
@@ -535,7 +535,7 @@ public sealed class PayloadHandler
             )
         )
         {
-            Plugin.Log.Warning("Could not find DalamudLinkHandlers");
+            Plugin.LogProxy.Warning("Could not find DalamudLinkHandlers");
             return;
         }
 
@@ -546,7 +546,7 @@ public sealed class PayloadHandler
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error executing DalamudLinkPayload handler");
+            Plugin.LogProxy.Error(ex, "Error executing DalamudLinkPayload handler");
         }
     }
 

HellionChat/Plugin.cs

@@ -14,6 +14,7 @@ using HellionChat.Ipc;
 using HellionChat.Resources;
 using HellionChat.Ui;
 using HellionChat.Util;
+using Microsoft.Data.Sqlite;
 
 namespace HellionChat;
 
@@ -113,11 +114,32 @@ public sealed class Plugin : IAsyncDalamudPlugin
     internal Ui.StatusBar StatusBar { get; private set; } = null!;
     internal Integrations.HonorificService HonorificService { get; private set; } = null!;
 
+    // Platform indirection over Dalamud.Utility.Util. Wired in Phase-1 ctor so
+    // any service allocated in LoadAsync can read Plugin.PlatformUtil.
+    internal static IPlatformUtil PlatformUtil { get; private set; } = null!;
+
+    // Log indirection over Dalamud's IPluginLog. Same rationale as PlatformUtil:
+    // call-sites read through LogProxy so MessageStore can be tested in
+    // isolation. Wired immediately after Dalamud injects Log.
+    internal static IPluginLogProxy LogProxy { get; private set; } = null!;
+
     // Idempotency guard — Dalamud may fire DisposeAsync twice in a reload race.
     private int _disposeStarted;
 
+    // Set in the first DisposeAsync statement so async callbacks scheduled
+    // via Framework.RunOnTick (v1.4.8 B3 retention sweep) can early-bail
+    // before they touch state that has already been torn down. Volatile
+    // because the tick reads it from a different thread than the writer.
+    private volatile bool _isDisposing;
+
     internal int DeferredSaveFrames = -1;
 
+    // Cancels the v1.4.8 FTS5 bulk-insert worker on plugin teardown. The
+    // worker runs off the framework thread on its own SqliteConnection, so a
+    // Dispose mid-rebuild must signal cancellation before MessageManager
+    // tears down (the worker logs "rebuild failed" via Log on error paths).
+    private CancellationTokenSource? _ftsRebuildCts;
+
     // Serialises retention sweeps so a manual trigger and the 24h auto-sweep
     // can't run in parallel. Volatile because the ImGui thread reads it outside
     // the lock to gate the manual button.
@@ -154,20 +176,28 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
         Config = Interface.GetPluginConfig() as Configuration ?? new Configuration();
 
-        // Schema gate: v1.4.x requires config v16. Users on older schemas
+        // Wire platform indirection before LoadAsync allocates anything that
-        // must install v1.4.2 first to run the migration chain.
+        // needs Util.* — services then read Plugin.PlatformUtil instead of
+        // hitting the Dalamud static surface directly.
+        PlatformUtil = new DalamudPlatformUtil();
+        LogProxy = new DalamudPluginLogProxy(Log);
+
+        // Schema gate: v1.4.x requires config v16+. Users on older schemas
+        // must install v1.4.2 first to run the migration chain. v17 adds
+        // Tab.IsPinned (additive, no data migration needed) so v16 configs
+        // load cleanly and get their Version stamp bumped after the gate.
         if (Config.Version < 16)
         {
             throw new InvalidOperationException(
-                $"HellionChat v1.4.5 requires config schema v16, got v{Config.Version}. "
+                $"HellionChat v1.4.8 requires config schema v16, got v{Config.Version}. "
-                    + "Please install v1.4.2 first to migrate the configuration, then upgrade to v1.4.5."
+                    + "Please install v1.4.2 first to migrate the configuration, then upgrade to v1.4.8."
             );
         }
+        Config.Version = 17;
 
-        // Session-only tabs are stripped on every load; AutoTellTabsService.Initialize
+        // Unpinned TempTabs are session-only and dropped on every load. Pinned
-        // then re-pegs TempTabCounter from the stripped list, not the pre-strip snapshot.
+        // TempTabs survive reload — Jin's tester feedback (v1.4.7).
-        // TEST-MIRROR: ../../Hellion Build test/_Helpers/TempTabCounterTests.cs
+        Config.Tabs.RemoveAll(TabLifecycleHelpers.ShouldStripOnLoad);
-        Config.Tabs.RemoveAll(t => t.IsTempTab);
 
         LanguageChanged(Interface.UiLanguage);
         ImGuiUtil.Initialize(this);
@@ -204,6 +234,12 @@ public sealed class Plugin : IAsyncDalamudPlugin
             Directory.CreateDirectory(customThemesDir);
             SeedExampleThemeIfEmpty(customThemesDir);
             ThemeRegistry = new Themes.ThemeRegistry(customThemesDir);
+            // Warm up the custom-theme cache before the first Switch.
+            // LoadCustomBySlug is a reverse-lookup over _customCache; on a
+            // cold cache a Config.Theme that points at a custom slug would
+            // fall through to the built-in default. AllCustom is a lazy
+            // enumerable, so iterate it explicitly to materialise the cache.
+            foreach (var _ in ThemeRegistry.AllCustom()) { }
             ThemeRegistry.Switch(Config.Theme);
 
             cancellationToken.ThrowIfCancellationRequested();
@@ -265,6 +301,113 @@ public sealed class Plugin : IAsyncDalamudPlugin
             if (Interface.Reason is not PluginLoadReason.Boot)
                 MessageManager.FilterAllTabsAsync();
 
+            // Kick the FTS5 rebuild worker if Migrate4 just added the schema or
+            // a previous run was cut short (InitFtsReadyCache leaves _ftsReady
+            // false in that case). Runs off the framework thread on its own
+            // SqliteConnection so the live UpsertMessage path keeps flowing
+            // through the chunked-commit windows.
+            _ftsRebuildCts = new CancellationTokenSource();
+            if (!MessageManager.Store.IsFtsIndexBuilt)
+            {
+                var token = _ftsRebuildCts.Token;
+                _ = Task.Run(
+                    async () =>
+                    {
+                        // FQN: Plugin.Notification (Z.74) shadows the type name.
+                        Dalamud.Interface.ImGuiNotification.IActiveNotification? notif = null;
+                        try
+                        {
+                            notif = Notification.AddNotification(
+                                new Dalamud.Interface.ImGuiNotification.Notification
+                                {
+                                    Title = "Hellion Chat",
+                                    Content = "Indexing chat history for full-text search...",
+                                    Type = Dalamud
+                                        .Interface
+                                        .ImGuiNotification
+                                        .NotificationType
+                                        .Info,
+                                    Minimized = false,
+                                    InitialDuration = TimeSpan.FromMinutes(10),
+                                }
+                            );
+
+                            // Progress<T> raises this callback on the captured
+                            // sync-context (Task.Run worker pool). IActiveNotification
+                            // is ImGui-backed and mutates the UI, so marshal the
+                            // mutation onto the framework thread via RunOnTick.
+                            var progress = new Progress<long>(done =>
+                            {
+                                Framework.RunOnTick(() =>
+                                {
+                                    if (notif is { } n)
+                                        n.Content = $"Indexing chat history: {done:N0} messages...";
+                                });
+                            });
+
+                            // Worker-owned connection. Closed+disposed before we
+                            // flip the readiness flag so the DbViewer never sees
+                            // IsFtsIndexBuilt=true while the worker connection
+                            // is still alive.
+                            SqliteConnection? workerConn = null;
+                            try
+                            {
+                                workerConn = MessageManager.Store.OpenSecondaryConnection();
+                                var total = await Task.Run(
+                                        () =>
+                                            MessageManager.Store.RebuildFtsIndex(
+                                                workerConn,
+                                                progress,
+                                                token
+                                            ),
+                                        token
+                                    )
+                                    .ConfigureAwait(false);
+
+                                workerConn.Close();
+                                workerConn.Dispose();
+                                workerConn = null;
+                                MessageManager.Store.MarkFtsIndexBuilt();
+
+                                if (notif is { } final)
+                                {
+                                    final.Content = $"Indexed {total:N0} messages.";
+                                    final.Type = Dalamud
+                                        .Interface
+                                        .ImGuiNotification
+                                        .NotificationType
+                                        .Success;
+                                    final.InitialDuration = TimeSpan.FromSeconds(5);
+                                }
+                            }
+                            finally
+                            {
+                                workerConn?.Dispose();
+                            }
+                        }
+                        catch (OperationCanceledException)
+                        {
+                            notif?.DismissNow();
+                        }
+                        catch (Exception ex)
+                        {
+                            Log.Error(ex, "FTS index rebuild failed");
+                            if (notif is { } err)
+                            {
+                                err.Content =
+                                    "Full-text indexing failed -- search will use local filter only.";
+                                err.Type = Dalamud
+                                    .Interface
+                                    .ImGuiNotification
+                                    .NotificationType
+                                    .Error;
+                            }
+                        }
+                    },
+                    _ftsRebuildCts.Token
+                );
+            }
+
             Interface.UiBuilder.DisableCutsceneUiHide = true;
             Interface.UiBuilder.DisableGposeUiHide = true;
 
@@ -303,6 +446,12 @@ public sealed class Plugin : IAsyncDalamudPlugin
         if (Interlocked.Exchange(ref _disposeStarted, 1) != 0)
             return;
 
+        // Set before any cleanup so deferred Framework.RunOnTick callbacks
+        // (B3 retention sweep) see the flag and bail out before they touch
+        // MessageManager / Log / static fields that the rest of this method
+        // is about to tear down.
+        _isDisposing = true;
+
         Exception? failure = null;
 
         // Unsubscribe hooks first — mirrors the hooks-last subscribe order in LoadAsync.
@@ -311,6 +460,19 @@ public sealed class Plugin : IAsyncDalamudPlugin
         failure = CaptureFailure(failure, () => Interface.UiBuilder.Draw -= Draw);
         failure = CaptureFailure(failure, () => Framework.Update -= FrameworkUpdate);
 
+        // Signal the FTS rebuild worker to bail. Runs before MessageManager
+        // tears down so the worker's "rebuild failed" log path still finds
+        // a live Log static. Worker owns its own SqliteConnection and disposes
+        // it itself; we only flip the cancellation flag here.
+        failure = CaptureFailure(
+            failure,
+            () =>
+            {
+                _ftsRebuildCts?.Cancel();
+                _ftsRebuildCts?.Dispose();
+            }
+        );
+
         // Flush a pending DeferredSave — FrameworkUpdate won't fire it anymore.
         failure = CaptureFailure(
             failure,
@@ -561,15 +723,31 @@ public sealed class Plugin : IAsyncDalamudPlugin
                 if (deleted > 0)
                 {
                     Log.Information($"Retention sweep deleted {deleted} expired messages.");
-                    // Run clear+refilter on the framework thread — FilterAllTabsAsync
+                    // Schedule on the next framework tick to avoid the ~194ms
-                    // is fire-and-forget and would race the next sweep cycle.
+                    // hitch from blocking with .Wait() while the framework
-                    Framework
+                    // finishes the current frame. Tabs-list mutation must
-                        .Run(() =>
+                    // stay on the framework thread because Plugin.Config.Tabs
+                    // (Configuration.cs:222) is not lock-protected and
+                    // AutoTellTabsService can mutate it from background paths.
+                    // Pattern reference: SimpleTweaks
+                    // Tweaks/Chat/CaseInsensitiveCommands.cs:45.
+                    Framework.RunOnTick(() =>
+                    {
+                        // The retention thread is IsBackground=true so plugin
+                        // unload can fire while a scheduled tick is still
+                        // pending; bail before touching anything torn down.
+                        if (_isDisposing)
+                            return;
+                        try
                         {
                             MessageManager.ClearAllTabs();
                             MessageManager.FilterAllTabs();
-                        })
+                        }
-                        .Wait();
+                        catch (Exception ex)
+                        {
+                            Log.Error(ex, "Retention sweep clear+refilter failed");
+                        }
+                    });
                 }
                 else
                 {
@@ -593,6 +771,12 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
     private void Draw()
     {
+        // v1.4.8 B2: pick up external edits of the active custom theme JSON
+        // without forcing the user to re-click the picker. The disk-stat is
+        // 1Hz-throttled inside RefreshActiveIfStale, so this is essentially
+        // free on built-in themes and ~1 stat/second on custom themes.
+        ThemeRegistry.RefreshActiveIfStale();
+
         // Theme engine is always active; Classic is a theme, not a disabled state.
         using IDisposable _style = HellionStyle.PushGlobal(
             ThemeRegistry.Active,
@@ -637,19 +821,17 @@ public sealed class Plugin : IAsyncDalamudPlugin
 
     internal void SaveConfig()
     {
-        // Strip session-only Auto-Tell-Tabs before serialization; restore after.
+        // Only unpinned TempTabs are session-only — they move aside before
-        var snapshot = Config.Tabs.ToList();
+        // serialization and re-attach after. Pinned TempTabs stay in
-        Config.Tabs.RemoveAll(t => t.IsTempTab);
+        // Config.Tabs across the save so JSON includes them. Cloning only the
+        // unpinned subset keeps the allocation proportional to
+        // AutoTellTabsLimit (<=15) instead of the full tab list.
+        var unpinnedTempTabs = Config.Tabs.Where(TabLifecycleHelpers.IsInUnpinnedPool).ToList();
+        Config.Tabs.RemoveAll(TabLifecycleHelpers.ShouldStripOnSave);
 
         Interface.SavePluginConfig(Config);
 
-        Config.Tabs.Clear();
+        Config.Tabs.AddRange(unpinnedTempTabs);
-        Config.Tabs.AddRange(snapshot);
-
-        // F2.1: snapshot-restore preserves IsTempTab tabs but the mid-step
-        // RemoveAll bypasses AutoTellTabsService, so re-peg the counter.
-        // Null-conditional because SaveConfig can fire before Phase-2 init.
-        AutoTellTabsService?.ResyncTempTabCounter();
     }
 
     internal void LanguageChanged(string langCode)

HellionChat/Resources/HellionStrings.Designer.cs

@@ -170,6 +170,16 @@ internal class HellionStrings
     internal static string AutoTellTabs_HistoryLoadError => Get(nameof(AutoTellTabs_HistoryLoadError));
     internal static string AutoTellTabs_GreetedTooltip => Get(nameof(AutoTellTabs_GreetedTooltip));
     internal static string AutoTellTabs_UnGreetedTooltip => Get(nameof(AutoTellTabs_UnGreetedTooltip));
+    internal static string PinTab_MenuPin => Get(nameof(PinTab_MenuPin));
+    internal static string PinTab_MenuUnpin => Get(nameof(PinTab_MenuUnpin));
+    internal static string PinTab_MenuPromote => Get(nameof(PinTab_MenuPromote));
+    internal static string PinTab_PromoteTooltip => Get(nameof(PinTab_PromoteTooltip));
+    internal static string PinTab_LimitReached => Get(nameof(PinTab_LimitReached));
+    internal static string PinTab_PinnedTooltip => Get(nameof(PinTab_PinnedTooltip));
+    internal static string PinTab_PinTooltip => Get(nameof(PinTab_PinTooltip));
+    internal static string PinTab_SectionHeader => Get(nameof(PinTab_SectionHeader));
+    internal static string Settings_ThemeAndLayout_SidebarWidth_Name => Get(nameof(Settings_ThemeAndLayout_SidebarWidth_Name));
+    internal static string Settings_ThemeAndLayout_SidebarWidth_Description => Get(nameof(Settings_ThemeAndLayout_SidebarWidth_Description));
 
     // Hellion Chat — Auto-Tell-Tabs Chat settings tab
     internal static string ChatLog_AutoTellTabs_Section_Title => Get(nameof(ChatLog_AutoTellTabs_Section_Title));
@@ -370,6 +380,8 @@ internal class HellionStrings
     internal static string Settings_Integrations_Honorific_Status_Incompatible => Get(nameof(Settings_Integrations_Honorific_Status_Incompatible));
     internal static string Settings_Integrations_Honorific_Toggle => Get(nameof(Settings_Integrations_Honorific_Toggle));
     internal static string Settings_Integrations_Honorific_ToggleHint => Get(nameof(Settings_Integrations_Honorific_ToggleHint));
+    internal static string Settings_Integrations_Honorific_Glow_Toggle => Get(nameof(Settings_Integrations_Honorific_Glow_Toggle));
+    internal static string Settings_Integrations_Honorific_Glow_Hint => Get(nameof(Settings_Integrations_Honorific_Glow_Hint));
     internal static string Settings_Integrations_Honorific_LinkRepo => Get(nameof(Settings_Integrations_Honorific_LinkRepo));
     internal static string Settings_Integrations_Honorific_LinkAuthor => Get(nameof(Settings_Integrations_Honorific_LinkAuthor));
     internal static string Settings_Integrations_ComingSoon_SectionHeader => Get(nameof(Settings_Integrations_ComingSoon_SectionHeader));
@@ -390,4 +402,9 @@ internal class HellionStrings
 
     // Hellion Chat — v1.3.0 Honorific title slot tooltip
     internal static string ChatHeader_HonorificTitle_Tooltip => Get(nameof(ChatHeader_HonorificTitle_Tooltip));
+
+    // Hellion Chat — v1.4.8 DbViewer full-text search toggle
+    internal static string DbViewer_FullTextToggle => Get(nameof(DbViewer_FullTextToggle));
+    internal static string DbViewer_FullTextToggle_Hint_Indexing => Get(nameof(DbViewer_FullTextToggle_Hint_Indexing));
+    internal static string DbViewer_FullTextToggle_Hint_PhraseMode => Get(nameof(DbViewer_FullTextToggle_Hint_PhraseMode));
 }

HellionChat/Resources/HellionStrings.de.resx

@@ -383,6 +383,36 @@
   <data name="AutoTellTabs_UnGreetedTooltip" xml:space="preserve">
     <value>Als begrüßt markieren.</value>
   </data>
+  <data name="PinTab_MenuPin" xml:space="preserve">
+    <value>Tab anpinnen</value>
+  </data>
+  <data name="PinTab_MenuUnpin" xml:space="preserve">
+    <value>Tab lösen</value>
+  </data>
+  <data name="PinTab_MenuPromote" xml:space="preserve">
+    <value>In Standard-Tab umwandeln</value>
+  </data>
+  <data name="PinTab_PromoteTooltip" xml:space="preserve">
+    <value>Wandelt den TempTell in einen regulären Tab um. Die Tell-Bindung an die Person geht verloren, der Tab fängt dann Nachrichten anhand der Channel-Filter ein. Für „Tab überlebt Relog" stattdessen „Tab anpinnen" wählen.</value>
+  </data>
+  <data name="PinTab_LimitReached" xml:space="preserve">
+    <value>Maximal {0} angepinnte Tell-Tabs erreicht. Erst einen lösen oder dauerhaft behalten.</value>
+  </data>
+  <data name="PinTab_PinnedTooltip" xml:space="preserve">
+    <value>Angepinnt — überlebt Relog.</value>
+  </data>
+  <data name="PinTab_PinTooltip" xml:space="preserve">
+    <value>Angepinnte Tabs überleben Relog und behalten die Bindung an die Tell-Person.</value>
+  </data>
+  <data name="PinTab_SectionHeader" xml:space="preserve">
+    <value>Angepinnt</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Name" xml:space="preserve">
+    <value>Sidebar-Breite</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Description" xml:space="preserve">
+    <value>Breite der Tab-Sidebar in Pixeln. Default (44 px) ist Icon-only; breiter machen damit Sektion-Header wie „Aktive Tells (3)" nicht abgeschnitten werden.</value>
+  </data>
 
   <!-- Hellion Chat — Auto-Tell-Tabs (Chat-Einstellungstab) -->
   <data name="ChatLog_AutoTellTabs_Section_Title" xml:space="preserve">
@@ -398,7 +428,7 @@
     <value>Maximale Anzahl der Auto-Tell-Tabs</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Limit_Description" xml:space="preserve">
-    <value>Beim Erreichen werden begrüßte Tabs mit der ältesten Aktivität zuerst geschlossen. Änderungen greifen beim nächsten /tell.</value>
+    <value>Beim Erreichen werden begrüßte Tabs mit der ältesten Aktivität zuerst geschlossen. Änderungen greifen beim nächsten /tell. Diese Grenze gilt nur für den automatisch verwalteten Pool. Angepinnte Tell-Tabs (Rechtsklick → Tab anpinnen) leben in einem separaten Pool von bis zu 5 Tabs und überleben Relog.</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Compact_Name" xml:space="preserve">
     <value>Kompakte Anzeige</value>
@@ -827,6 +857,12 @@
   <data name="Settings_Integrations_Honorific_ToggleHint" xml:space="preserve">
     <value>Zeigt deinen Custom-Titel aus Honorific im Header über dem Chat-Log an, in der von dir gewählten Farbe.</value>
   </data>
+  <data name="Settings_Integrations_Honorific_Glow_Toggle" xml:space="preserve">
+    <value>Glow-Outline rendern (Honorific)</value>
+  </data>
+  <data name="Settings_Integrations_Honorific_Glow_Hint" xml:space="preserve">
+    <value>Kann die Framerate auf schwacher Hardware drücken. Rendert die Glow-Outline für Honorific-Titel, die sie nutzen. Gradient-Animation wird noch nicht unterstützt und wird stattdessen als Primärfarbe gezeichnet.</value>
+  </data>
   <data name="Settings_Integrations_Honorific_LinkRepo" xml:space="preserve">
     <value>Honorific auf GitHub</value>
   </data>
@@ -881,4 +917,13 @@
   <data name="ChatHeader_HonorificTitle_Tooltip" xml:space="preserve">
     <value>Custom-Titel von Honorific</value>
   </data>
+  <data name="DbViewer_FullTextToggle" xml:space="preserve">
+    <value>Volltext-Suche</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_Indexing" xml:space="preserve">
+    <value>Der Volltext-Index wird noch gebaut. Die lokale Suche bleibt verfügbar.</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_PhraseMode" xml:space="preserve">
+    <value>Sucht nach der exakten Wortfolge. Mehrere Wörter werden nur gefunden, wenn sie zusammen und in dieser Reihenfolge stehen. Wer rohe FTS5-MATCH-Syntax nutzen will, setzt eigene Anführungszeichen um den Suchbegriff.</value>
+  </data>
 </root>

HellionChat/Resources/HellionStrings.resx

@@ -383,6 +383,36 @@
   <data name="AutoTellTabs_UnGreetedTooltip" xml:space="preserve">
     <value>Mark as greeted.</value>
   </data>
+  <data name="PinTab_MenuPin" xml:space="preserve">
+    <value>Pin Tab</value>
+  </data>
+  <data name="PinTab_MenuUnpin" xml:space="preserve">
+    <value>Unpin Tab</value>
+  </data>
+  <data name="PinTab_MenuPromote" xml:space="preserve">
+    <value>Promote to permanent</value>
+  </data>
+  <data name="PinTab_PromoteTooltip" xml:space="preserve">
+    <value>Turns this TempTell into a regular tab. The tell binding to the partner is dropped — the tab will catch messages by its channel filters from now on. For "tab survives relog while staying bound to this partner", use Pin Tab instead.</value>
+  </data>
+  <data name="PinTab_PinTooltip" xml:space="preserve">
+    <value>Pinned tabs survive relog and stay bound to this conversation partner.</value>
+  </data>
+  <data name="PinTab_SectionHeader" xml:space="preserve">
+    <value>Pinned</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Name" xml:space="preserve">
+    <value>Sidebar width</value>
+  </data>
+  <data name="Settings_ThemeAndLayout_SidebarWidth_Description" xml:space="preserve">
+    <value>Width of the tab sidebar in pixels. The default (44 px) is icon-only; widen it to fit the section headers like "Active Tells (3)" without truncation.</value>
+  </data>
+  <data name="PinTab_LimitReached" xml:space="preserve">
+    <value>Maximum of {0} pinned tell tabs reached. Unpin one first, or use Promote to permanent.</value>
+  </data>
+  <data name="PinTab_PinnedTooltip" xml:space="preserve">
+    <value>Pinned — survives relog.</value>
+  </data>
 
   <!-- Hellion Chat — Auto-Tell-Tabs (Chat settings tab) -->
   <data name="ChatLog_AutoTellTabs_Section_Title" xml:space="preserve">
@@ -398,7 +428,7 @@
     <value>Maximum number of auto-tell tabs</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Limit_Description" xml:space="preserve">
-    <value>When the limit is reached, greeted tabs with the oldest activity are closed first. Changes take effect on the next /tell.</value>
+    <value>When the limit is reached, greeted tabs with the oldest activity are closed first. Changes take effect on the next /tell. This limit applies to the auto-managed pool. Pinned tell tabs (right-click → Pin Tab) live in a separate pool of up to 5 and survive relog.</value>
   </data>
   <data name="ChatLog_AutoTellTabs_Compact_Name" xml:space="preserve">
     <value>Compact display</value>
@@ -827,6 +857,12 @@
   <data name="Settings_Integrations_Honorific_ToggleHint" xml:space="preserve">
     <value>Shows your custom title from Honorific in the header above the chat log, in the colour you have chosen.</value>
   </data>
+  <data name="Settings_Integrations_Honorific_Glow_Toggle" xml:space="preserve">
+    <value>Render glow outlines (Honorific)</value>
+  </data>
+  <data name="Settings_Integrations_Honorific_Glow_Hint" xml:space="preserve">
+    <value>May reduce frame rate on low-end hardware. Renders glow outlines for Honorific titles that use them. Gradient animation is not yet supported and will render as the primary colour.</value>
+  </data>
   <data name="Settings_Integrations_Honorific_LinkRepo" xml:space="preserve">
     <value>Honorific on GitHub</value>
   </data>
@@ -881,4 +917,13 @@
   <data name="ChatHeader_HonorificTitle_Tooltip" xml:space="preserve">
     <value>Custom title from Honorific</value>
   </data>
+  <data name="DbViewer_FullTextToggle" xml:space="preserve">
+    <value>Full-text search</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_Indexing" xml:space="preserve">
+    <value>The full-text index is still being built. The local filter remains available.</value>
+  </data>
+  <data name="DbViewer_FullTextToggle_Hint_PhraseMode" xml:space="preserve">
+    <value>Searches for the exact phrase. Multi-word queries match only when the words appear together in order. To use raw FTS5 MATCH syntax, wrap your term in double quotes yourself.</value>
+  </data>
 </root>

HellionChat/Themes/Builtin/CrystalNocturne.cs

@@ -0,0 +1,82 @@
+using HellionChat.Util;
+
+namespace HellionChat.Themes.Builtin;
+
+internal static class CrystalNocturne
+{
+    public const string Slug = "crystal-nocturne";
+
+    public static Theme Build() =>
+        new(
+            Slug: Slug,
+            Name: "Crystal Nocturne",
+            Author: "CRYSTALLITE",
+            Description: "Royal sapphire and electric magenta over obsidian — a nocturne for the crystal-lit dance floor.",
+            Colors: new ThemeColors(
+                PrimaryDark: ColourUtil.HexToRgba("#1D4ED8"),
+                Primary: ColourUtil.HexToRgba("#3B82F6"),
+                PrimaryLight: ColourUtil.HexToRgba("#93C5FD"),
+                PrimaryGlow: ColourUtil.HexToRgba("#3B82F699"),
+                AccentDark: ColourUtil.HexToRgba("#A21CAF"),
+                Accent: ColourUtil.HexToRgba("#D946EF"),
+                AccentLight: ColourUtil.HexToRgba("#F0ABFC"),
+                Identity: ColourUtil.HexToRgba("#3B82F6"),
+                WindowBg: ColourUtil.HexToRgba("#08070F"),
+                ChildBg: ColourUtil.HexToRgba("#11101F"),
+                FrameBg: ColourUtil.HexToRgba("#1C1A33"),
+                Surface: ColourUtil.HexToRgba("#262340"),
+                SurfaceHover: ColourUtil.HexToRgba("#332D55"),
+                Border: ColourUtil.HexToRgba("#D946EF55"),
+                TextPrimary: ColourUtil.HexToRgba("#F5F3FF"),
+                TextMuted: ColourUtil.HexToRgba("#A5A0C0"),
+                TextDim: ColourUtil.HexToRgba("#4B4763"),
+                StatusSuccess: ColourUtil.HexToRgba("#10B981"),
+                StatusDanger: ColourUtil.HexToRgba("#F43F5E"),
+                StatusWarning: ColourUtil.HexToRgba("#FACC15"),
+                StatusInfo: ColourUtil.HexToRgba("#3B82F6")
+            ),
+            Layout: new ThemeLayout(
+                WindowRounding: 2f,
+                ChildRounding: 1f,
+                PopupRounding: 2f,
+                FrameRounding: 1f,
+                GrabRounding: 1f,
+                TabRounding: 1f,
+                ScrollbarRounding: 2f,
+                WindowBorderSize: 1f,
+                FrameBorderSize: 1f
+            ),
+            Typography: new ThemeTypography(),
+            IsBuiltIn: true,
+            ChatColors: new ThemeChatColors(
+                new Dictionary<HellionChat.Code.ChatType, uint>
+                {
+                    // Crystal Nocturne — sapphire-blue identity for party/team channels,
+                    // accent-magenta for tells, with mint/peach accents on linkshells
+                    // so the eight LS slots stay individually distinguishable on the
+                    // dark obsidian background.
+                    [HellionChat.Code.ChatType.Say] = ColourUtil.HexToRgba("#F5F3FF"),
+                    [HellionChat.Code.ChatType.Yell] = ColourUtil.HexToRgba("#FACC15"),
+                    [HellionChat.Code.ChatType.Shout] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.TellIncoming] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.TellOutgoing] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.Party] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Alliance] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.FreeCompany] = ColourUtil.HexToRgba("#A8C8E8"),
+                    [HellionChat.Code.ChatType.NoviceNetwork] = ColourUtil.HexToRgba("#10B981"),
+                    [HellionChat.Code.ChatType.CrossParty] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Linkshell1] = ColourUtil.HexToRgba("#10B981"),
+                    [HellionChat.Code.ChatType.Linkshell2] = ColourUtil.HexToRgba("#FACC15"),
+                    [HellionChat.Code.ChatType.Linkshell3] = ColourUtil.HexToRgba("#F0ABFC"),
+                    [HellionChat.Code.ChatType.Linkshell4] = ColourUtil.HexToRgba("#93C5FD"),
+                    [HellionChat.Code.ChatType.Linkshell5] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.Linkshell6] = ColourUtil.HexToRgba("#A5A0C0"),
+                    [HellionChat.Code.ChatType.Linkshell7] = ColourUtil.HexToRgba("#D946EF"),
+                    [HellionChat.Code.ChatType.Linkshell8] = ColourUtil.HexToRgba("#3B82F6"),
+                    [HellionChat.Code.ChatType.CustomEmote] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.StandardEmote] = ColourUtil.HexToRgba("#F0B090"),
+                    [HellionChat.Code.ChatType.Echo] = ColourUtil.HexToRgba("#A5A0C0"),
+                }
+            )
+        );
+}

HellionChat/Themes/Builtin/MoonlitBloom.cs

@@ -1,80 +0,0 @@
-using HellionChat.Util;
-
-namespace HellionChat.Themes.Builtin;
-
-internal static class MoonlitBloom
-{
-    public const string Slug = "moonlit-bloom";
-
-    public static Theme Build() =>
-        new(
-            Slug: Slug,
-            Name: "Moonlit Bloom",
-            Author: "Hellion Forge",
-            Description: "Bloom Magenta + Soft Sage auf Deep Violet Night.",
-            Colors: new ThemeColors(
-                PrimaryDark: ColourUtil.HexToRgba("#C957D0"),
-                Primary: ColourUtil.HexToRgba("#E374E8"),
-                PrimaryLight: ColourUtil.HexToRgba("#EF8AF4"),
-                PrimaryGlow: ColourUtil.HexToRgba("#E374E899"),
-                AccentDark: ColourUtil.HexToRgba("#7AAC5C"),
-                Accent: ColourUtil.HexToRgba("#9CCB7C"),
-                AccentLight: ColourUtil.HexToRgba("#B6E297"),
-                Identity: ColourUtil.HexToRgba("#E374E8"),
-                WindowBg: ColourUtil.HexToRgba("#0E0C1F"),
-                ChildBg: ColourUtil.HexToRgba("#15122B"),
-                FrameBg: ColourUtil.HexToRgba("#1F1A38"),
-                Surface: ColourUtil.HexToRgba("#28224A"),
-                SurfaceHover: ColourUtil.HexToRgba("#332B5B"),
-                Border: ColourUtil.HexToRgba("#E374E844"),
-                TextPrimary: ColourUtil.HexToRgba("#ECE6F5"),
-                TextMuted: ColourUtil.HexToRgba("#9A8BB0"),
-                TextDim: ColourUtil.HexToRgba("#554B6E"),
-                StatusSuccess: ColourUtil.HexToRgba("#7AAC5C"),
-                StatusDanger: ColourUtil.HexToRgba("#E85C6A"),
-                StatusWarning: ColourUtil.HexToRgba("#E8B590"),
-                StatusInfo: ColourUtil.HexToRgba("#6278FF")
-            ),
-            Layout: new ThemeLayout(
-                WindowRounding: 6f,
-                ChildRounding: 5f,
-                PopupRounding: 5f,
-                FrameRounding: 4f,
-                GrabRounding: 4f,
-                TabRounding: 4f,
-                ScrollbarRounding: 4f,
-                WindowBorderSize: 1f,
-                FrameBorderSize: 1f
-            ),
-            Typography: new ThemeTypography(),
-            IsBuiltIn: true,
-            ChatColors: new ThemeChatColors(
-                new Dictionary<HellionChat.Code.ChatType, uint>
-                {
-                    // Moonlit Bloom — Bloom-Magenta-Tönung. Sage-Drift in NoviceNetwork
-                    // und Linkshell4. Tell-Pink-Identität bleibt sichtbar.
-                    [HellionChat.Code.ChatType.Say] = ColourUtil.HexToRgba("#ECE6F5"),
-                    [HellionChat.Code.ChatType.Yell] = ColourUtil.HexToRgba("#F0D080"),
-                    [HellionChat.Code.ChatType.Shout] = ColourUtil.HexToRgba("#F09A60"),
-                    [HellionChat.Code.ChatType.TellIncoming] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.TellOutgoing] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.Party] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Alliance] = ColourUtil.HexToRgba("#F0B090"),
-                    [HellionChat.Code.ChatType.FreeCompany] = ColourUtil.HexToRgba("#A8C8E8"),
-                    [HellionChat.Code.ChatType.NoviceNetwork] = ColourUtil.HexToRgba("#9CCB7C"),
-                    [HellionChat.Code.ChatType.CrossParty] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Linkshell1] = ColourUtil.HexToRgba("#9CCB7C"),
-                    [HellionChat.Code.ChatType.Linkshell2] = ColourUtil.HexToRgba("#F0BC92"),
-                    [HellionChat.Code.ChatType.Linkshell3] = ColourUtil.HexToRgba("#F0D080"),
-                    [HellionChat.Code.ChatType.Linkshell4] = ColourUtil.HexToRgba("#B6E297"),
-                    [HellionChat.Code.ChatType.Linkshell5] = ColourUtil.HexToRgba("#A0B0F0"),
-                    [HellionChat.Code.ChatType.Linkshell6] = ColourUtil.HexToRgba("#C098D8"),
-                    [HellionChat.Code.ChatType.Linkshell7] = ColourUtil.HexToRgba("#EF8AF4"),
-                    [HellionChat.Code.ChatType.Linkshell8] = ColourUtil.HexToRgba("#E8B0E8"),
-                    [HellionChat.Code.ChatType.CustomEmote] = ColourUtil.HexToRgba("#E8B590"),
-                    [HellionChat.Code.ChatType.StandardEmote] = ColourUtil.HexToRgba("#E8B590"),
-                    [HellionChat.Code.ChatType.Echo] = ColourUtil.HexToRgba("#9A8BB0"),
-                }
-            )
-        );
-}

HellionChat/Themes/ThemeRegistry.cs

@@ -6,6 +6,13 @@ public sealed class ThemeRegistry
 {
     public const string DefaultSlug = HellionArctic.Slug;
 
+    // 1Hz throttle for the v1.4.8 B2 auto-refresh-on-active path. The
+    // Plugin.Draw hook calls RefreshActiveIfStale every frame, but the
+    // actual File.GetLastWriteTimeUtc disk-stat only runs once per second
+    // -- 60fps would otherwise mean 3600 stats/min on the same path (more
+    // on Wine). Same idiom as the StatusBar 1Hz cache.
+    private const long ActiveStampPollIntervalMs = 1000;
+
     private readonly Dictionary<string, Theme> _builtIns;
     private readonly Dictionary<string, (Theme Theme, DateTime Stamp)> _customCache = new(
         StringComparer.OrdinalIgnoreCase
@@ -13,19 +20,32 @@ public sealed class ThemeRegistry
     private readonly string? _customThemesDir;
     private Theme _active;
 
+    // v1.4.8 B2: source path of the currently active custom theme. Captured
+    // at Switch() time so RefreshActiveIfStale does not have to reconstruct
+    // a filename from the slug -- custom theme filenames are not required
+    // to match the slug they declare in the JSON body. Null when the active
+    // theme is built-in or no custom-themes directory is configured.
+    private string? _activeCustomPath;
+    private long _lastActiveStampCheckMs = -ActiveStampPollIntervalMs;
+    private DateTime _lastActiveStamp = DateTime.MinValue;
+
     public ThemeRegistry(string? customThemesDir = null)
     {
+        // Insertion order drives the Theme-Picker grid layout (3 columns).
+        // Row 1: blue family. Row 2: purple to magenta family.
+        // Row 3: green / warm / classic. Row 4: Synthwave Sunset as a
+        // retro bonus on its own line.
         _builtIns = new Dictionary<string, Theme>(StringComparer.OrdinalIgnoreCase)
         {
             { HellionArctic.Slug, HellionArctic.Build() },
             { HellionSpectrum.Slug, HellionSpectrum.Build() },
-            { Chat2Classic.Slug, Chat2Classic.Build() },
-            { EventHorizon.Slug, EventHorizon.Build() },
-            { MoonlitBloom.Slug, MoonlitBloom.Build() },
             { NightBlue.Slug, NightBlue.Build() },
+            { EventHorizon.Slug, EventHorizon.Build() },
             { IndigoViolet.Slug, IndigoViolet.Build() },
-            { ForgeMerchantman.Slug, ForgeMerchantman.Build() },
+            { CrystalNocturne.Slug, CrystalNocturne.Build() },
             { MintGrove.Slug, MintGrove.Build() },
+            { ForgeMerchantman.Slug, ForgeMerchantman.Build() },
+            { Chat2Classic.Slug, Chat2Classic.Build() },
             { SynthwaveSunset.Slug, SynthwaveSunset.Build() },
         };
 
@@ -44,7 +64,9 @@ public sealed class ThemeRegistry
         if (_builtIns.TryGetValue(slug, out var b))
             return b;
 
-        var custom = LoadCustomBySlug(slug);
+        // Discard the source path here; Switch is the only call-site that
+        // needs to remember it for the auto-refresh hook.
+        var custom = LoadCustomBySlug(slug, out _);
         if (custom != null)
             return custom;
 
@@ -55,12 +77,70 @@ public sealed class ThemeRegistry
 
     public IEnumerable<Theme> AllCustom() => RefreshCustomCache();
 
+    // Built-in-first to match Get(slug)'s lookup order. A user theme JSON
+    // that declares the same slug as a built-in is ignored deliberately --
+    // having Switch prefer custom and Get prefer built-in would produce
+    // a state where _active and Get(_active.Slug) disagree.
     public void Switch(string slug)
     {
-        var theme = Get(slug);
+        if (_builtIns.TryGetValue(slug, out var builtin))
-        // Defensive — ensures any future theme source always gets a populated cache.
+        {
-        theme.RecomputeAbgrCache();
+            _active = builtin;
-        _active = theme;
+            _active.RecomputeAbgrCache();
+            _activeCustomPath = null;
+            return;
+        }
+
+        var customTheme = LoadCustomBySlug(slug, out var customPath);
+        if (customTheme is not null)
+        {
+            _active = customTheme;
+            // Defensive — ensures any future theme source always gets a populated cache.
+            _active.RecomputeAbgrCache();
+            _activeCustomPath = customPath;
+            // Force a first-tick reload-check after the switch so the stamp
+            // baseline is established on the next RefreshActiveIfStale call.
+            _lastActiveStamp = DateTime.MinValue;
+            return;
+        }
+
+        // Fallback: neither built-in nor custom matched. Drop to default
+        // and clear the active custom path so RefreshActiveIfStale stays idle.
+        _active = _builtIns[DefaultSlug];
+        _active.RecomputeAbgrCache();
+        _activeCustomPath = null;
+    }
+
+    // 1Hz-throttled disk-stat on the currently active custom theme file.
+    // When the file's LastWriteTime moves forward (editor save), reload the
+    // theme via Get() so the user sees the edit immediately without
+    // re-selecting in the picker. Built-in themes short-circuit; custom
+    // themes without an _activeCustomPath (e.g. Switch fell to default)
+    // short-circuit too.
+    public void RefreshActiveIfStale()
+    {
+        var now = Environment.TickCount64;
+        if (now - _lastActiveStampCheckMs < ActiveStampPollIntervalMs)
+            return;
+        _lastActiveStampCheckMs = now;
+
+        if (_active.IsBuiltIn)
+            return;
+
+        var path = _activeCustomPath;
+        if (path is null || !File.Exists(path))
+            return;
+
+        var stamp = File.GetLastWriteTimeUtc(path);
+        if (!ThemeStampDiff.IsStale(_lastActiveStamp, stamp))
+            return;
+        _lastActiveStamp = stamp;
+
+        // Get() re-runs RefreshCustomCache which picks up the new content
+        // (the cache keys by path + LastWriteTime, so a mtime bump invalidates).
+        // RecomputeAbgrCache happens inside RefreshCustomCache on cache miss.
+        var reloaded = Get(_active.Slug);
+        _active = reloaded;
     }
 
     // 0x80070020 = SHARING_VIOLATION, 0x80070021 = LOCK_VIOLATION.
@@ -73,18 +153,30 @@ public sealed class ThemeRegistry
         return code == 0x80070020u || code == 0x80070021u;
     }
 
-    // Custom themes are loaded lazily, cached by LastWriteTime.
+    // Slug -> Theme lookup with the source path as an out-param so the
-    // A changed JSON is reloaded on the next lookup.
+    // Switch path can remember which file backs the active custom theme.
-    private Theme? LoadCustomBySlug(string slug)
+    // Pure reverse-lookup over the existing _customCache: that cache is
+    // already Path -> (Theme, Stamp), so iterating it costs nothing,
+    // avoids a re-parse of every JSON, and keeps the parse logic (and
+    // the recoverable-file-lock recovery) confined to RefreshCustomCache.
+    // The cache must be warm before this runs; Plugin.LoadAsync triggers
+    // a one-time warm-up via AllCustom() before the first Switch call.
+    private Theme? LoadCustomBySlug(string slug, out string? sourcePath)
     {
+        sourcePath = null;
         if (_customThemesDir is null)
             return null;
         if (!Directory.Exists(_customThemesDir))
             return null;
 
-        foreach (var theme in RefreshCustomCache())
+        foreach (var kvp in _customCache)
-            if (string.Equals(theme.Slug, slug, StringComparison.OrdinalIgnoreCase))
+        {
-                return theme;
+            if (string.Equals(kvp.Value.Theme.Slug, slug, StringComparison.OrdinalIgnoreCase))
+            {
+                sourcePath = kvp.Key;
+                return kvp.Value.Theme;
+            }
+        }
         return null;
     }
 
@@ -114,7 +206,7 @@ public sealed class ThemeRegistry
                 catch (Exception ex) when (IsRecoverableFileLock(ex))
                 {
                     // Editor mid-save: keep last known good, retry on next refresh.
-                    Plugin.Log.Debug(
+                    Plugin.LogProxy.Debug(
                         $"Custom theme {Path.GetFileName(path)} is locked, keeping last known good"
                     );
                     if (cached.Theme is not null)

HellionChat/Themes/ThemeStampDiff.cs

@@ -0,0 +1,20 @@
+namespace HellionChat.Themes;
+
+// Pure stale-check for the v1.4.8 B2 theme-auto-refresh-on-active path.
+// Lives in a free helper class so the Build-Suite can exercise the diff
+// rules without instantiating ThemeRegistry (which touches the Dalamud
+// log proxy and the filesystem). The rules:
+// - DateTime.MinValue on the current stat means we could not read the
+//   file -- hold the last known good (return false).
+// - Equal stamps mean no change since we last saw it.
+// - Any other difference, including the first observation where lastSeen
+//   is MinValue, counts as stale and triggers a reload.
+internal static class ThemeStampDiff
+{
+    public static bool IsStale(System.DateTime lastSeen, System.DateTime current)
+    {
+        if (current == System.DateTime.MinValue)
+            return false;
+        return current != lastSeen;
+    }
+}

HellionChat/Ui/ChatLogWindow.cs

@@ -272,9 +272,12 @@ public sealed class ChatLogWindow : Window
                 }
             }
 
-            if (targetChannel == null || !GameFunctions.Chat.ValidAnyLinkshell(targetChannel.Value))
+            if (
+                targetChannel == null
+                || !GameFunctions.Chat.IsChannelOrExistingLinkshell(targetChannel.Value)
+            )
             {
-                Plugin.Log.Warning(
+                Plugin.LogProxy.Warning(
                     $"Channel was set to an invalid value '{targetChannel}', ignoring"
                 );
                 return;
@@ -328,11 +331,11 @@ public sealed class ChatLogWindow : Window
         {
             case "hide":
                 CurrentHideState = HideState.User;
-                Plugin.Log.Verbose("HideState: → User (chat hide command)");
+                Plugin.LogProxy.Verbose("HideState: → User (chat hide command)");
                 break;
             case "show":
                 CurrentHideState = HideState.None;
-                Plugin.Log.Verbose("HideState: → None (chat show command)");
+                Plugin.LogProxy.Verbose("HideState: → None (chat show command)");
                 break;
             case "toggle":
                 CurrentHideState = CurrentHideState switch
@@ -342,7 +345,7 @@ public sealed class ChatLogWindow : Window
                     HideState.None => HideState.User,
                     _ => CurrentHideState,
                 };
-                Plugin.Log.Verbose($"HideState: → {CurrentHideState} (chat toggle command)");
+                Plugin.LogProxy.Verbose($"HideState: → {CurrentHideState} (chat toggle command)");
                 break;
         }
     }
@@ -416,8 +419,9 @@ public sealed class ChatLogWindow : Window
         // The hint banner renders before this block so ImGui already accounts for it.
         height -= ImGui.GetFrameHeightWithSpacing();
 
-        // Status bar at the window bottom reserves 22px + 2px spacing.
+        // StatusBar.Height now bakes in its own DPI-aware 2px spacer, so the
-        height -= StatusBar.Height + 2;
+        // window reservation is just Height -- no extra +2 (v1.4.8 B1).
+        height -= StatusBar.Height;
 
         return height;
     }
@@ -438,11 +442,24 @@ public sealed class ChatLogWindow : Window
 
     private void TabSwitched(Tab newTab, Tab previousTab)
     {
-        // Use the fixed channel if set by the user, or set it to the current tabs channel if this tab wasn't accessed before
+        // Use the fixed channel if set by the user. Otherwise, if the new tab
+        // has no channel state yet (fresh from JSON, never selected this
+        // session), seed from the previous tab — but deep-clone so we don't
+        // share TellTarget with the previous tab. Without the clone, a later
+        // /tell on the new tab would mutate the pinned tab's TellTarget and
+        // the Party/Linkshell channel would pop back to the pinned tell-mark.
         if (newTab.Channel is not null)
+        {
             newTab.CurrentChannel.Channel = newTab.Channel.Value;
+        }
         else if (newTab.CurrentChannel.Channel is InputChannel.Invalid)
-            newTab.CurrentChannel = previousTab.CurrentChannel;
+        {
+            newTab.CurrentChannel = previousTab.CurrentChannel.Clone();
+            Plugin.LogProxy.Debug(
+                $"[Tab] '{newTab.Name}' seeded channel from '{previousTab.Name}' "
+                    + $"(Channel={newTab.CurrentChannel.Channel}, TellTarget={newTab.CurrentChannel.TellTarget?.ToTargetString() ?? "null"})"
+            );
+        }
 
         SetChannel(newTab.CurrentChannel.Channel);
     }
@@ -466,14 +483,14 @@ public sealed class ChatLogWindow : Window
         if (Plugin.Config.HideInBattle && CurrentHideState == HideState.None && Plugin.InBattle)
         {
             CurrentHideState = HideState.Battle;
-            Plugin.Log.Verbose("HideState: None → Battle");
+            Plugin.LogProxy.Verbose("HideState: None → Battle");
         }
 
         // If the chat is hidden because of battle, we reset it here
         if (CurrentHideState is HideState.Battle && !Plugin.InBattle)
         {
             CurrentHideState = HideState.None;
-            Plugin.Log.Verbose("HideState: Battle → None");
+            Plugin.LogProxy.Verbose("HideState: Battle → None");
         }
 
         // if the chat has no hide state and in a cutscene, set the hide state to cutscene
@@ -486,7 +503,7 @@ public sealed class ChatLogWindow : Window
             if (Plugin.Functions.Chat.CheckHideFlags())
             {
                 CurrentHideState = HideState.Cutscene;
-                Plugin.Log.Verbose("HideState: None → Cutscene");
+                Plugin.LogProxy.Verbose("HideState: None → Cutscene");
             }
         }
 
@@ -497,7 +514,7 @@ public sealed class ChatLogWindow : Window
             && !Plugin.GposeActive
         )
         {
-            Plugin.Log.Verbose($"HideState: {CurrentHideState} → None (cutscene/gpose ended)");
+            Plugin.LogProxy.Verbose($"HideState: {CurrentHideState} → None (cutscene/gpose ended)");
             CurrentHideState = HideState.None;
         }
 
@@ -505,14 +522,14 @@ public sealed class ChatLogWindow : Window
         if (CurrentHideState == HideState.Cutscene && Activate)
         {
             CurrentHideState = HideState.CutsceneOverride;
-            Plugin.Log.Verbose("HideState: Cutscene → CutsceneOverride (user activate)");
+            Plugin.LogProxy.Verbose("HideState: Cutscene → CutsceneOverride (user activate)");
         }
 
         // if the user hid the chat and is now activating chat, reset the hide state
         if (CurrentHideState == HideState.User && Activate)
         {
             CurrentHideState = HideState.None;
-            Plugin.Log.Verbose("HideState: User → None (activate)");
+            Plugin.LogProxy.Verbose("HideState: User → None (activate)");
         }
 
         if (
@@ -630,7 +647,7 @@ public sealed class ChatLogWindow : Window
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error(ex, "Error drawing Chat Log window");
+            Plugin.LogProxy.Error(ex, "Error drawing Chat Log window");
             if (!NotifiedDrawFailure)
             {
                 Plugin.Notification.AddNotification(
@@ -1605,7 +1622,7 @@ public sealed class ChatLogWindow : Window
         }
         catch (Exception ex)
         {
-            Plugin.Log.Warning(ex, "Error drawing chat log");
+            Plugin.LogProxy.Warning(ex, "Error drawing chat log");
         }
     }
 
@@ -1637,17 +1654,21 @@ public sealed class ChatLogWindow : Window
                 continue;
 
             // Active-tab underline pill (2px accent). No native ImGui underline API,
-            // so we use a direct DrawList pass.
+            // so we use a direct DrawList pass. Pill height scales with GlobalScale
+            // and all coordinates round to physical pixels so the line stays crisp
+            // on 125/150% DPI setups instead of bleeding into a sub-pixel blur.
             {
                 var theme = Plugin.ThemeRegistry.Active;
                 var min = ImGui.GetItemRectMin();
                 var max = ImGui.GetItemRectMax();
-                const float pillHeight = 2f;
+                var pillHeight = MathF.Max(1f, MathF.Round(2f * ImGuiHelpers.GlobalScale));
+                var yBottom = MathF.Round(max.Y);
+                var yTop = yBottom - pillHeight;
                 ImGui
                     .GetWindowDrawList()
                     .AddRectFilled(
-                        new Vector2(min.X, max.Y - pillHeight),
+                        new Vector2(MathF.Round(min.X), yTop),
-                        new Vector2(max.X, max.Y),
+                        new Vector2(MathF.Round(max.X), yBottom),
                         ColourUtil.RgbaToAbgr(theme.Colors.Accent)
                     );
             }
@@ -1666,6 +1687,30 @@ public sealed class ChatLogWindow : Window
         Plugin.WantedTab = null;
     }
 
+    // Sidebar render order: persistent tabs in their original Plugin.Config.Tabs
+    // position, then pinned TempTabs, then unpinned TempTabs. Returns indices
+    // into Plugin.Config.Tabs so tabI in the loop body still mirrors the real
+    // list position (LastTab / WantedTab stay consistent).
+    private static List<int> BuildSidebarRenderOrder()
+    {
+        var tabs = Plugin.Config.Tabs;
+        var persistent = new List<int>(tabs.Count);
+        var pinned = new List<int>();
+        var unpinned = new List<int>();
+        for (var i = 0; i < tabs.Count; i++)
+        {
+            if (TabLifecycleHelpers.IsInPinnedPool(tabs[i]))
+                pinned.Add(i);
+            else if (TabLifecycleHelpers.IsInUnpinnedPool(tabs[i]))
+                unpinned.Add(i);
+            else
+                persistent.Add(i);
+        }
+        persistent.AddRange(pinned);
+        persistent.AddRange(unpinned);
+        return persistent;
+    }
+
     private void DrawTabSidebar()
     {
         var currentTab = -1;
@@ -1678,7 +1723,8 @@ public sealed class ChatLogWindow : Window
         if (!tabTable.Success)
             return;
 
-        ImGui.TableSetupColumn("tabs", ImGuiTableColumnFlags.WidthFixed, 44f);
+        var sidebarWidth = Math.Clamp(Plugin.Config.SidebarWidth, 44, 160);
+        ImGui.TableSetupColumn("tabs", ImGuiTableColumnFlags.WidthFixed, sidebarWidth);
         ImGui.TableSetupColumn("chat", ImGuiTableColumnFlags.WidthStretch, 1);
 
         ImGui.TableNextColumn();
@@ -1697,23 +1743,42 @@ public sealed class ChatLogWindow : Window
                 ImGui.Dummy(new Vector2(0, ImGui.GetFrameHeightWithSpacing()));
 
                 var previousTab = Plugin.CurrentTab;
-                // Divider rendered once before the first temp tab with a live unit counter.
+                // Render order: persistent → pinned TempTabs → unpinned TempTabs.
+                // Underlying Plugin.Config.Tabs order is untouched (tabI mirrors
+                // the real list index), only the display sequence groups by
+                // section so each section can carry its own divider header.
+                var renderOrder = BuildSidebarRenderOrder();
+                var pinnedHeaderRendered = false;
                 var tempTabHeaderRendered = false;
-                var tempTabCount = Plugin.Config.Tabs.Count(t => t.IsTempTab);
+                var pinnedCount = Plugin.Config.Tabs.Count(TabLifecycleHelpers.IsInPinnedPool);
+                var unpinnedTempCount = Plugin.Config.Tabs.Count(
+                    TabLifecycleHelpers.IsInUnpinnedPool
+                );
 
-                for (var tabI = 0; tabI < Plugin.Config.Tabs.Count; tabI++)
+                foreach (var tabI in renderOrder)
                 {
                     var tab = Plugin.Config.Tabs[tabI];
                     if (tab.PopOut)
                         continue;
 
-                    if (tab.IsTempTab && !tempTabHeaderRendered)
+                    if (TabLifecycleHelpers.IsInPinnedPool(tab) && !pinnedHeaderRendered)
                     {
                         ImGui.Separator();
                         if (!Plugin.Config.AutoTellTabsCompactDisplay)
                         {
                             ImGui.TextDisabled(
-                                $"{HellionStrings.AutoTellTabs_SectionHeader} ({tempTabCount})"
+                                $"{HellionStrings.PinTab_SectionHeader} ({pinnedCount})"
+                            );
+                        }
+                        pinnedHeaderRendered = true;
+                    }
+                    else if (TabLifecycleHelpers.IsInUnpinnedPool(tab) && !tempTabHeaderRendered)
+                    {
+                        ImGui.Separator();
+                        if (!Plugin.Config.AutoTellTabsCompactDisplay)
+                        {
+                            ImGui.TextDisabled(
+                                $"{HellionStrings.AutoTellTabs_SectionHeader} ({unpinnedTempCount})"
                             );
                         }
                         tempTabHeaderRendered = true;
@@ -1802,9 +1867,12 @@ public sealed class ChatLogWindow : Window
                     using (ImRaii.PushColor(ImGuiCol.Text, ColourUtil.RgbaToAbgr(iconColor)))
                     using (Plugin.FontManager.FontAwesome.Push())
                     {
+                        // Button stretches with the configured sidebar width so a
+                        // user-widened sidebar feels intentional, not a 36px icon
+                        // floating in empty space.
                         clicked = ImGui.Button(
                             $"{icon.ToIconString()}##sidebar-tab-{tabI}",
-                            new Vector2(36f, ImGui.GetFrameHeight())
+                            new Vector2(sidebarWidth - 8f, ImGui.GetFrameHeight())
                         );
                     }
 
@@ -1864,11 +1932,35 @@ public sealed class ChatLogWindow : Window
                             );
                     }
 
+                    // Pin indicator: subtle thumbtack glyph top-left of the icon.
+                    // Muted colour because the "Pinned" section header already
+                    // groups these tabs visually — this is just a per-tab
+                    // confirmation glyph, not the primary discoverability cue.
+                    if (tab.IsPinned)
+                    {
+                        var min = ImGui.GetItemRectMin();
+                        const float pinPadding = 1f;
+                        var pinPos = new Vector2(min.X + pinPadding, min.Y + pinPadding);
+                        var pinColor = theme.Colors.TextMuted;
+                        // Dim further so the glyph reads as a hint, not a badge.
+                        var pinAbgr = ColourUtil.RgbaToAbgr(pinColor) & 0x77FFFFFFu;
+                        using (Plugin.FontManager.FontAwesome.Push())
+                        {
+                            ImGui
+                                .GetWindowDrawList()
+                                .AddText(pinPos, pinAbgr, FontAwesomeIcon.Thumbtack.ToIconString());
+                        }
+                    }
+
                     // Tooltip mit Tab-Name + Unread-Counter beim Hover.
                     if (ImGui.IsItemHovered())
                     {
                         using var tt = ImRaii.Tooltip();
                         ImGui.TextUnformatted($"{tab.Name}{unread}");
+                        if (tab.IsPinned)
+                        {
+                            ImGui.TextUnformatted(HellionStrings.PinTab_PinnedTooltip);
+                        }
                     }
 
                     DrawTabContextMenu(tab, tabI);
@@ -1992,10 +2084,7 @@ public sealed class ChatLogWindow : Window
             ImGui.TextUnformatted(FontAwesomeIcon.Crown.ToIconString());
         }
         ImGui.SameLine(0f, gapAfterCrown);
-        using (ImRaii.PushColor(ImGuiCol.Text, titleColor))
+        DrawHonorificTitleText(rendered, titleColor, title.Glow);
-        {
-            ImGui.TextUnformatted(rendered);
-        }
         ImGui.EndGroup();
 
         if (ImGui.IsItemHovered())
@@ -2006,6 +2095,35 @@ public sealed class ChatLogWindow : Window
         ImGui.SameLine();
     }
 
+    // Renders the title text, optionally with a glow outline pre-pass. Glow is
+    // drawn at 8 cardinal offsets (±1 px) in the glow colour at reduced alpha,
+    // then the primary text on top. The pre-pass uses the window draw list so
+    // it composites correctly with the regular ImGui text that follows.
+    private void DrawHonorificTitleText(string rendered, Vector4 titleColor, Vector3? glow)
+    {
+        if (Plugin.Config.ShowHonorificGlow && glow is { } g)
+        {
+            var pos = ImGui.GetCursorScreenPos();
+            var glowColor = new Vector4(g.X, g.Y, g.Z, 0.4f);
+            var glowAbgr = ImGui.ColorConvertFloat4ToU32(glowColor);
+            var drawList = ImGui.GetWindowDrawList();
+            for (var dy = -1; dy <= 1; dy++)
+            {
+                for (var dx = -1; dx <= 1; dx++)
+                {
+                    if (dx == 0 && dy == 0)
+                        continue;
+                    drawList.AddText(new Vector2(pos.X + dx, pos.Y + dy), glowAbgr, rendered);
+                }
+            }
+        }
+
+        using (ImRaii.PushColor(ImGuiCol.Text, titleColor))
+        {
+            ImGui.TextUnformatted(rendered);
+        }
+    }
+
     // One-time hint banner for the pop-out header button and right-click pathway.
     private float DrawV061HintBannerIfNeeded()
     {
@@ -2052,7 +2170,7 @@ public sealed class ChatLogWindow : Window
         {
             Plugin.Config.SeenPopOutHeaderHint = true;
             Plugin.SaveConfig();
-            Plugin.Log.Debug("v0.6.1 pop-out header hint dismissed");
+            Plugin.LogProxy.Debug("v0.6.1 pop-out header hint dismissed");
             if (openSettings)
                 Plugin.SettingsWindow.Toggle();
         }
@@ -2117,10 +2235,52 @@ public sealed class ChatLogWindow : Window
             anyChanged = true;
         }
 
+        if (tab.IsTempTab)
+        {
+            ImGui.Separator();
+            DrawPinControls(tab);
+        }
+
         if (anyChanged)
             Plugin.SaveConfig();
     }
 
+    private void DrawPinControls(Tab tab)
+    {
+        var svc = Plugin.AutoTellTabsService;
+        if (svc == null)
+            return;
+
+        if (tab.IsPinned)
+        {
+            if (ImGui.MenuItem(HellionStrings.PinTab_MenuUnpin))
+            {
+                svc.Unpin(tab);
+                ImGui.CloseCurrentPopup();
+            }
+        }
+        else
+        {
+            var atCap = svc.PinnedTempTabCount >= AutoTellTabsService.MaxPinnedTempTabs;
+            if (ImGui.MenuItem(HellionStrings.PinTab_MenuPin, enabled: !atCap))
+            {
+                if (svc.TryPin(tab))
+                    ImGui.CloseCurrentPopup();
+            }
+            if (ImGui.IsItemHovered(ImGuiHoveredFlags.AllowWhenDisabled))
+            {
+                ImGui.SetTooltip(
+                    atCap
+                        ? string.Format(
+                            HellionStrings.PinTab_LimitReached,
+                            AutoTellTabsService.MaxPinnedTempTabs
+                        )
+                        : HellionStrings.PinTab_PinTooltip
+                );
+            }
+        }
+    }
+
     internal readonly List<bool> PopOutDocked = [];
     internal readonly HashSet<Guid> PopOutWindows = [];
 
@@ -2665,7 +2825,7 @@ public sealed class ChatLogWindow : Window
         var viewport = ImGui.GetMainViewport();
         var safePos = viewport.WorkPos + SafeDefaultOffset;
         Position = safePos;
-        Plugin.Log.Info(
+        Plugin.LogProxy.Info(
             $"[Window-Recovery] {source}: snapping main window from {LastWindowPos} (size {LastWindowSize}) to {safePos}."
         );
 

HellionChat/Ui/DbViewer.cs

@@ -2,6 +2,7 @@
 using System.Globalization;
 using System.Numerics;
 using System.Text;
+using System.Threading;
 using Dalamud.Bindings.ImGui;
 using Dalamud.Game.Text.SeStringHandling.Payloads;
 using Dalamud.Interface;
@@ -33,11 +34,21 @@ public class DbViewer : Window
 
     private int CurrentPage = 1;
     private string SimpleSearchTerm = "";
+
+    // v1.4.8 H2: opt-in full-text search across the whole DB via FTS5.
+    // Transient UI state (per-session), not persisted -- users opt in fresh
+    // every time so they always see the page-filter as the default mode.
+    private bool UseFullTextSearch;
+
     private bool OnlyCurrentCharacter = true;
     private readonly Dictionary<ChatType, (ChatSource, ChatSource)> SelectedChannels;
 
     private bool IsProcessing;
     private long ProcessingStart = Environment.TickCount64;
+
+    // Bumped per trigger so a late worker drops itself instead of overwriting
+    // a newer result.
+    private long _ftsFilterSeq;
     private (DateTime Min, DateTime Max, int Page, bool Local, int ChannelCount) LastProcessed;
 
     private string MinDateString = "";
@@ -233,6 +244,24 @@ public class DbViewer : Window
             tooltipRight: Language.Page_ArrowRight_Tooltip
         );
 
+        // Full-text search toggle (v1.4.8 H2). IsFtsIndexBuilt is a cached
+        // volatile bool in MessageStore -- single field read per frame, no
+        // SELECT count(*). ImRaii.Disabled blocks any click while the index
+        // is still being built, so no defensive force-off branch needed
+        // inside the if-body. UseFullTextSearch is transient UI state, so we
+        // do not call SaveConfig here.
+        var ftsReady = Plugin.MessageManager.Store.IsFtsIndexBuilt;
+        using (ImRaii.Disabled(!ftsReady))
+        {
+            if (ImGui.Checkbox(HellionStrings.DbViewer_FullTextToggle, ref UseFullTextSearch))
+                TriggerFilterRefresh();
+        }
+        ImGuiUtil.HelpMarker(
+            ftsReady
+                ? HellionStrings.DbViewer_FullTextToggle_Hint_PhraseMode
+                : HellionStrings.DbViewer_FullTextToggle_Hint_Indexing
+        );
+
         ImGui.SameLine(ImGui.GetContentRegionMax().X - width);
         ImGui.SetNextItemWidth(width);
         if (
@@ -243,7 +272,7 @@ public class DbViewer : Window
                 30
             )
         )
-            Filtered = Filter(Messages);
+            TriggerFilterRefresh();
 
         // Third row
 
@@ -307,7 +336,7 @@ public class DbViewer : Window
                 }
                 catch (Exception ex)
                 {
-                    Plugin.Log.Error(ex, "Failed reading messages from database");
+                    Plugin.LogProxy.Error(ex, "Failed reading messages from database");
                 }
                 finally
                 {
@@ -447,11 +476,53 @@ public class DbViewer : Window
         }
     }
 
+    // FTS path hits SQLite per keystroke -- dispatch to a worker, drop stale
+    // results via _ftsFilterSeq. Page-filter path is in-memory LINQ, stays
+    // inline.
+    private void TriggerFilterRefresh()
+    {
+        if (!UseFullTextSearch || !Plugin.MessageManager.Store.IsFtsIndexBuilt)
+        {
+            Filtered = Filter(Messages);
+            return;
+        }
+
+        var snapshot = Messages;
+        var mySeq = Interlocked.Increment(ref _ftsFilterSeq);
+        Task.Run(() =>
+        {
+            try
+            {
+                var result = Filter(snapshot);
+                if (Interlocked.Read(ref _ftsFilterSeq) == mySeq)
+                    Filtered = result;
+            }
+            catch (Exception ex)
+            {
+                Plugin.LogProxy.Error(ex, "FTS filter worker failed");
+            }
+        });
+    }
+
     private ConcurrentStack<Message> Filter(Message[] messages)
     {
         if (SimpleSearchTerm == "")
             return new ConcurrentStack<Message>(messages.Reverse().OrderByDescending(m => m.Date));
 
+        // Full-text mode bypasses the page-bounded messages array and queries
+        // the FTS5 index across the whole DB. IsFtsIndexBuilt re-check guards
+        // against the (rare) case of the toggle being on while the index is
+        // mid-rebuild -- ImRaii.Disabled prevents the user from flipping it,
+        // but a Dispose-and-reopen during indexing could leave UseFullTextSearch
+        // true while ftsReady flipped back to false; the local fallback below
+        // still serves the page.
+        if (UseFullTextSearch && Plugin.MessageManager.Store.IsFtsIndexBuilt)
+        {
+            var guidHits = Plugin.MessageManager.Store.FullTextSearch(SimpleSearchTerm);
+            var resolved = Plugin.MessageManager.Store.LoadByGuids(guidHits);
+            return new ConcurrentStack<Message>(resolved.OrderByDescending(m => m.Date));
+        }
+
         return new ConcurrentStack<Message>(
             messages
                 .Reverse()
@@ -570,7 +641,7 @@ public class DbViewer : Window
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, "Failed creating txt backup");
+                Plugin.LogProxy.Error(ex, "Failed creating txt backup");
 
                 Notification.Content = "Error ...";
                 Notification.Type = NotificationType.Error;

HellionChat/Ui/HellionStyle.cs

@@ -43,13 +43,10 @@ internal static class HellionStyle
         var alphaByte = (uint)Math.Clamp((int)(windowOpacity * 255f), 0x55, 0xFF);
         var windowBgWithAlpha = (c.WindowBg & 0xFFFFFF00u) | alphaByte;
 
-        // ChildBg alpha: child areas rendered inside ChatLogWindow would
+        // ChildBg alpha resolution lives in HellionStyleHelpers so the
-        // multiply their alpha with WindowBg, making 50% opacity appear
+        // threshold logic can be covered by a pure-helper test in the
-        // ~75% solid. At full opacity the theme's alpha is preserved; below
+        // build suite.
-        // it ChildBg goes fully transparent so only WindowBg sets the final
+        var childBgWithAlpha = HellionStyleHelpers.ResolveChildBgAlpha(c.ChildBg, windowOpacity);
-        // coverage.
-        var childBgAlpha = windowOpacity >= 0.999f ? (c.ChildBg & 0xFFu) : 0u;
-        var childBgWithAlpha = (c.ChildBg & 0xFFFFFF00u) | childBgAlpha;
 
         // Layout
         stack.PushStyleVar(ImGuiStyleVar.WindowRounding, l.WindowRounding);

HellionChat/Ui/HellionStyleHelpers.cs

@@ -0,0 +1,17 @@
+namespace HellionChat.Ui;
+
+internal static class HellionStyleHelpers
+{
+    // Child surfaces are drawn over WindowBg, so at partial window opacity
+    // the theme's own ChildBg alpha would double-multiply and read too solid.
+    // Above ~full opacity we preserve the theme alpha; below it we wipe to 0
+    // so WindowBg alone carries the coverage. The 0.999f threshold is a
+    // float-imprecision guard around the user-facing 100% slider value.
+    // TEST-MIRROR: ../../Hellion Build test/_Helpers/HellionStyleHelpersTests.cs
+    public static uint ResolveChildBgAlpha(uint themeChildBgRgba, float windowOpacity)
+    {
+        var alphaPreserved = windowOpacity >= 0.999f;
+        var childBgAlpha = alphaPreserved ? (themeChildBgRgba & 0xFFu) : 0u;
+        return (themeChildBgRgba & 0xFFFFFF00u) | childBgAlpha;
+    }
+}

HellionChat/Ui/Popout.cs

@@ -175,7 +175,7 @@ internal class Popout : Window
         {
             Plugin.Config.SeenPopOutInputHint = true;
             ChatLogWindow.Plugin.SaveConfig();
-            Plugin.Log.Debug("Pop-Out input hint dismissed");
+            Plugin.LogProxy.Debug("Pop-Out input hint dismissed");
             if (openSettings)
                 ChatLogWindow.Plugin.SettingsWindow.Toggle();
         }
@@ -214,13 +214,13 @@ internal class Popout : Window
         if (Tab.HideInBattle && CurrentHideState == HideState.None && Plugin.InBattle)
         {
             CurrentHideState = HideState.Battle;
-            Plugin.Log.Verbose($"Popout HideState [{Tab.Name}]: None -> Battle");
+            Plugin.LogProxy.Verbose($"Popout HideState [{Tab.Name}]: None -> Battle");
         }
 
         if (CurrentHideState is HideState.Battle && !Plugin.InBattle)
         {
             CurrentHideState = HideState.None;
-            Plugin.Log.Verbose($"Popout HideState [{Tab.Name}]: Battle -> None");
+            Plugin.LogProxy.Verbose($"Popout HideState [{Tab.Name}]: Battle -> None");
         }
 
         if (
@@ -232,7 +232,7 @@ internal class Popout : Window
             if (ChatLogWindow.Plugin.Functions.Chat.CheckHideFlags())
             {
                 CurrentHideState = HideState.Cutscene;
-                Plugin.Log.Verbose($"Popout HideState [{Tab.Name}]: None -> Cutscene");
+                Plugin.LogProxy.Verbose($"Popout HideState [{Tab.Name}]: None -> Cutscene");
             }
         }
 
@@ -242,7 +242,7 @@ internal class Popout : Window
             && !Plugin.GposeActive
         )
         {
-            Plugin.Log.Verbose(
+            Plugin.LogProxy.Verbose(
                 $"Popout HideState [{Tab.Name}]: {CurrentHideState} -> None (cutscene/gpose ended)"
             );
             CurrentHideState = HideState.None;
@@ -251,7 +251,7 @@ internal class Popout : Window
         if (CurrentHideState == HideState.Cutscene && ChatLogWindow.Activate)
         {
             CurrentHideState = HideState.CutsceneOverride;
-            Plugin.Log.Verbose(
+            Plugin.LogProxy.Verbose(
                 $"Popout HideState [{Tab.Name}]: Cutscene -> CutsceneOverride (user activate)"
             );
         }
@@ -259,7 +259,7 @@ internal class Popout : Window
         if (CurrentHideState == HideState.User && ChatLogWindow.Activate)
         {
             CurrentHideState = HideState.None;
-            Plugin.Log.Verbose($"Popout HideState [{Tab.Name}]: User -> None (activate)");
+            Plugin.LogProxy.Verbose($"Popout HideState [{Tab.Name}]: User -> None (activate)");
         }
 
         return CurrentHideState is HideState.Cutscene or HideState.User or HideState.Battle

HellionChat/Ui/Settings.cs

@@ -199,12 +199,12 @@ public sealed class SettingsWindow : Dalamud.Interface.Windowing.Window
             );
 
             if (ImGui.Button(buttonLabel2))
-                Dalamud.Utility.Util.OpenLink("https://ko-fi.com/infiii");
+                Plugin.PlatformUtil.OpenLink("https://ko-fi.com/infiii");
 
             ImGui.SameLine();
 
             if (ImGui.Button(buttonLabel))
-                Dalamud.Utility.Util.OpenLink("https://ko-fi.com/lojewalo");
+                Plugin.PlatformUtil.OpenLink("https://ko-fi.com/lojewalo");
         }
 
         if (!save)

HellionChat/Ui/SettingsOverview.cs

@@ -79,11 +79,13 @@ internal sealed class SettingsOverview
         // 110f accommodates two-line subtexts; wrap width is matched in DrawCard.
         var cardHeight = 110f;
 
+        // One draw-list lookup per frame instead of one per card.
+        var drawList = ImGui.GetWindowDrawList();
         var cardDefs = BuildCardDefs();
         for (var i = 0; i < cardDefs.Length; i++)
         {
             var (icon, title, subtext) = cardDefs[i];
-            DrawCard(i, icon, title, subtext, cardWidth, cardHeight);
+            DrawCard(i, icon, title, subtext, cardWidth, cardHeight, drawList);
 
             if ((i + 1) % columns != 0 && i != cardDefs.Length - 1)
                 ImGui.SameLine();
@@ -96,7 +98,8 @@ internal sealed class SettingsOverview
         string title,
         string subtext,
         float w,
-        float h
+        float h,
+        ImDrawListPtr drawList
     )
     {
         // BeginGroup makes the card a single layout item so SameLine works
@@ -108,8 +111,7 @@ internal sealed class SettingsOverview
         var hovered = ImGui.IsItemHovered();
         var bgColor = hovered ? 0xFF22303Fu : 0xFF1A2538u;
 
-        var draw = ImGui.GetWindowDrawList();
+        drawList.AddRectFilled(cursorBefore, cursorBefore + new Vector2(w, h), bgColor, 4f);
-        draw.AddRectFilled(cursorBefore, cursorBefore + new Vector2(w, h), bgColor, 4f);
 
         var iconPos = cursorBefore + new Vector2(16f, 12f);
         var titlePos = cursorBefore + new Vector2(16f, 40f);
@@ -120,15 +122,15 @@ internal sealed class SettingsOverview
 
         using (_window.Plugin.FontManager.FontAwesome.Push())
         {
-            draw.AddText(iconPos, titleColor, icon.ToIconString());
+            drawList.AddText(iconPos, titleColor, icon.ToIconString());
         }
 
-        draw.AddText(titlePos, titleColor, title);
+        drawList.AddText(titlePos, titleColor, title);
 
         // Subtext wraps at card inner width (16px padding each side) via DrawList
         // to avoid expanding the group bounds and breaking SameLine in the card row.
         var subtextWrapWidth = w - 32f;
-        draw.AddText(
+        drawList.AddText(
             ImGui.GetFont(),
             ImGui.GetFontSize(),
             subtextPos,

HellionChat/Ui/SettingsTabs/DataManagement.cs

@@ -229,7 +229,7 @@ internal sealed class DataManagement : ISettingsTab
                     }
                     catch (Exception e)
                     {
-                        Plugin.Log.Error(e, "Unable to delete old database");
+                        Plugin.LogProxy.Error(e, "Unable to delete old database");
                         WrapperUtil.AddNotification(
                             Language.Options_Database_Old_Delete_Error,
                             NotificationType.Error
@@ -391,7 +391,9 @@ internal sealed class DataManagement : ISettingsTab
                 Plugin.Config.RetentionLastRunAt = DateTimeOffset.UtcNow;
                 Plugin.SaveConfig();
 
-                Plugin.Log.Information($"Manual retention run deleted {deleted} expired messages.");
+                Plugin.LogProxy.Information(
+                    $"Manual retention run deleted {deleted} expired messages."
+                );
 
                 if (deleted > 0)
                 {
@@ -405,7 +407,7 @@ internal sealed class DataManagement : ISettingsTab
                             .Wait(TimeSpan.FromSeconds(5))
                     )
                     {
-                        Plugin.Log.Warning(
+                        Plugin.LogProxy.Warning(
                             "Retention sweep: framework refresh timed out after 5s."
                         );
                     }
@@ -418,7 +420,7 @@ internal sealed class DataManagement : ISettingsTab
             }
             catch (Exception e)
             {
-                Plugin.Log.Error(e, "Manual retention run failed");
+                Plugin.LogProxy.Error(e, "Manual retention run failed");
                 WrapperUtil.AddNotification(HellionStrings.Retention_Error, NotificationType.Error);
             }
             finally
@@ -566,7 +568,7 @@ internal sealed class DataManagement : ISettingsTab
         }
         catch (Exception e)
         {
-            Plugin.Log.Error(e, "Failed to compute cleanup preview");
+            Plugin.LogProxy.Error(e, "Failed to compute cleanup preview");
             WrapperUtil.AddNotification(
                 HellionStrings.Cleanup_PreviewError,
                 NotificationType.Error
@@ -587,7 +589,7 @@ internal sealed class DataManagement : ISettingsTab
             try
             {
                 var deleted = Plugin.MessageManager.Store.CleanupRetainOnly(allowed);
-                Plugin.Log.Information($"Privacy cleanup: deleted {deleted} messages");
+                Plugin.LogProxy.Information($"Privacy cleanup: deleted {deleted} messages");
 
                 if (
                     !Plugin
@@ -599,7 +601,9 @@ internal sealed class DataManagement : ISettingsTab
                         .Wait(TimeSpan.FromSeconds(5))
                 )
                 {
-                    Plugin.Log.Warning("Privacy cleanup: framework refresh timed out after 5s.");
+                    Plugin.LogProxy.Warning(
+                        "Privacy cleanup: framework refresh timed out after 5s."
+                    );
                 }
 
                 WrapperUtil.AddNotification(
@@ -609,7 +613,7 @@ internal sealed class DataManagement : ISettingsTab
             }
             catch (Exception e)
             {
-                Plugin.Log.Error(e, "Privacy cleanup failed");
+                Plugin.LogProxy.Error(e, "Privacy cleanup failed");
                 WrapperUtil.AddNotification(HellionStrings.Cleanup_Error, NotificationType.Error);
             }
             finally
@@ -769,7 +773,7 @@ internal sealed class DataManagement : ISettingsTab
             }
             catch (Exception e)
             {
-                Plugin.Log.Error(e, "Export failed");
+                Plugin.LogProxy.Error(e, "Export failed");
                 WrapperUtil.AddNotification(HellionStrings.Export_Error, NotificationType.Error);
             }
             finally
@@ -849,7 +853,7 @@ internal sealed class DataManagement : ISettingsTab
                 )
             )
             {
-                Plugin.Log.Warning("Clearing messages from database");
+                Plugin.LogProxy.Warning("Clearing messages from database");
                 Plugin.MessageManager.Store.ClearMessages();
                 Plugin.MessageManager.ClearAllTabs();
 
@@ -907,7 +911,7 @@ internal sealed class DataManagement : ISettingsTab
 
     private void InsertMessages(int count)
     {
-        Plugin.Log.Info($"Inserting {count} messages due to user request");
+        Plugin.LogProxy.Info($"Inserting {count} messages due to user request");
 
         var stopwatch = Stopwatch.StartNew();
         var playerName = Plugin.PlayerState.CharacterName;
@@ -952,7 +956,7 @@ internal sealed class DataManagement : ISettingsTab
 
         var elapsedTicks = stopwatch.ElapsedTicks;
         stopwatch.Stop();
-        Plugin.Log.Info(
+        Plugin.LogProxy.Info(
             $"Crafted {count} messages in {elapsedTicks} ticks ({elapsedTicks / TimeSpan.TicksPerMillisecond}ms)"
         );
 
@@ -962,7 +966,7 @@ internal sealed class DataManagement : ISettingsTab
 
         elapsedTicks = stopwatch.ElapsedTicks;
         stopwatch.Stop();
-        Plugin.Log.Info(
+        Plugin.LogProxy.Info(
             $"Upserted {count} messages in {elapsedTicks} ticks ({elapsedTicks / TimeSpan.TicksPerMillisecond}ms)"
         );
 
@@ -973,7 +977,7 @@ internal sealed class DataManagement : ISettingsTab
                 Plugin.MessageManager.ClearAllTabs();
                 elapsedTicks = stopwatch.ElapsedTicks;
                 stopwatch.Stop();
-                Plugin.Log.Info(
+                Plugin.LogProxy.Info(
                     $"Cleared {Plugin.Config.Tabs.Count} tabs in {elapsedTicks} ticks ({elapsedTicks / TimeSpan.TicksPerMillisecond}ms)"
                 );
             })
@@ -986,7 +990,7 @@ internal sealed class DataManagement : ISettingsTab
                 Plugin.MessageManager.FilterAllTabs();
                 elapsedTicks = stopwatch.ElapsedTicks;
                 stopwatch.Stop();
-                Plugin.Log.Info(
+                Plugin.LogProxy.Info(
                     $"Fetched and filtered all tabs in {elapsedTicks} ticks ({elapsedTicks / TimeSpan.TicksPerMillisecond}ms)"
                 );
             })

HellionChat/Ui/SettingsTabs/FontsAndColours.cs

@@ -312,6 +312,6 @@ internal sealed class FontsAndColours : ISettingsTab
         }
         Plugin.SaveConfig();
         GlobalParametersCache.Refresh();
-        Plugin.Log.Debug($"Applied chat colour preset: {preset.DisplayName}");
+        Plugin.LogProxy.Debug($"Applied chat colour preset: {preset.DisplayName}");
     }
 }

HellionChat/Ui/SettingsTabs/Information.cs

@@ -97,7 +97,7 @@ internal sealed class Information : ISettingsTab
             ImGui.TextUnformatted(Language.Options_About_Github_Issues);
             ImGui.SameLine();
             if (ImGuiUtil.IconButton(FontAwesomeIcon.ExternalLinkAlt, "githubIssues"))
-                Dalamud.Utility.Util.OpenLink(
+                Plugin.PlatformUtil.OpenLink(
                     "https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/issues"
                 );
         }
@@ -116,7 +116,7 @@ internal sealed class Information : ISettingsTab
             ImGui.TextUnformatted(HellionStrings.About_Maintainer_Website_Label);
             ImGui.SameLine();
             if (ImGuiUtil.IconButton(FontAwesomeIcon.ExternalLinkAlt, "hellionMedia"))
-                Dalamud.Utility.Util.OpenLink("https://hellion-media.de");
+                Plugin.PlatformUtil.OpenLink("https://hellion-media.de");
 
             ImGuiHelpers.ScaledDummy(10.0f);
 
@@ -137,7 +137,7 @@ internal sealed class Information : ISettingsTab
             ImGui.TextUnformatted(HellionStrings.About_BuiltOn_Upstream_Label);
             ImGui.SameLine();
             if (ImGuiUtil.IconButton(FontAwesomeIcon.ExternalLinkAlt, "chatTwoUpstream"))
-                Dalamud.Utility.Util.OpenLink("https://github.com/Infiziert90/ChatTwo");
+                Plugin.PlatformUtil.OpenLink("https://github.com/Infiziert90/ChatTwo");
 
             ImGuiHelpers.ScaledDummy(10.0f);
 

HellionChat/Ui/SettingsTabs/Integrations.cs

@@ -71,6 +71,17 @@ internal sealed class Integrations : ISettingsTab
             {
                 ImGui.TextWrapped(HellionStrings.Settings_Integrations_Honorific_ToggleHint);
             }
+
+            if (
+                ImGui.Checkbox(
+                    HellionStrings.Settings_Integrations_Honorific_Glow_Toggle,
+                    ref Mutable.ShowHonorificGlow
+                )
+            )
+            {
+                Plugin.SaveConfig();
+            }
+            ImGuiUtil.HelpMarker(HellionStrings.Settings_Integrations_Honorific_Glow_Hint);
         }
 
         // Honorific has no LICENSE in its repo so we link upstream and author
@@ -79,12 +90,12 @@ internal sealed class Integrations : ISettingsTab
         ImGui.Spacing();
         if (ImGui.Button(HellionStrings.Settings_Integrations_Honorific_LinkRepo))
         {
-            Dalamud.Utility.Util.OpenLink(IntegrationLinks.HonorificRepo);
+            Plugin.PlatformUtil.OpenLink(IntegrationLinks.HonorificRepo);
         }
         ImGui.SameLine();
         if (ImGui.Button(HellionStrings.Settings_Integrations_Honorific_LinkAuthor))
         {
-            Dalamud.Utility.Util.OpenLink(IntegrationLinks.HonorificAuthor);
+            Plugin.PlatformUtil.OpenLink(IntegrationLinks.HonorificAuthor);
         }
     }
 
@@ -193,7 +204,7 @@ internal sealed class Integrations : ISettingsTab
 
         if (ImGui.Button(HellionStrings.Settings_Integrations_GotAnIdea_LinkLabel))
         {
-            Dalamud.Utility.Util.OpenLink(BrandingLinks.HellionForgeDiscordInvite);
+            Plugin.PlatformUtil.OpenLink(BrandingLinks.HellionForgeDiscordInvite);
         }
     }
 

HellionChat/Ui/SettingsTabs/ThemeAndLayout.cs

@@ -78,7 +78,7 @@ internal sealed class ThemeAndLayout : ISettingsTab
             {
                 var dir = Path.Combine(Plugin.Interface.ConfigDirectory.FullName, "themes");
                 Directory.CreateDirectory(dir);
-                Dalamud.Utility.Util.OpenLink(dir);
+                Plugin.PlatformUtil.OpenLink(dir);
             }
 
             ImGui.SameLine();
@@ -90,7 +90,7 @@ internal sealed class ThemeAndLayout : ISettingsTab
                 var path = Path.Combine(dir, fileName);
                 var json = ThemeJsonWriter.Serialize(active);
                 File.WriteAllText(path, json);
-                Plugin.Log.Information($"Exported active theme '{active.Slug}' to {path}");
+                Plugin.LogProxy.Information($"Exported active theme '{active.Slug}' to {path}");
             }
         }
     }
@@ -250,6 +250,26 @@ internal sealed class ThemeAndLayout : ISettingsTab
                 string.Format(Language.Options_SidebarTabView_Description, Plugin.PluginName)
             );
 
+            if (Mutable.SidebarTabView)
+            {
+                var sidebarWidth = Mutable.SidebarWidth;
+                if (
+                    ImGui.SliderInt(
+                        HellionStrings.Settings_ThemeAndLayout_SidebarWidth_Name,
+                        ref sidebarWidth,
+                        44,
+                        160,
+                        $"{sidebarWidth} px"
+                    )
+                )
+                {
+                    Mutable.SidebarWidth = sidebarWidth;
+                }
+                ImGuiUtil.HelpMarker(
+                    HellionStrings.Settings_ThemeAndLayout_SidebarWidth_Description
+                );
+            }
+
             ImGui.Spacing();
             ImGui.Separator();
             ImGui.Spacing();

HellionChat/Ui/StatusBar.cs

@@ -2,6 +2,7 @@ using System.Globalization;
 using System.Numerics;
 using Dalamud.Bindings.ImGui;
 using Dalamud.Interface;
+using Dalamud.Interface.Utility;
 using Dalamud.Interface.Utility.Raii;
 using HellionChat.Code;
 using HellionChat.Resources;
@@ -9,12 +10,20 @@ using HellionChat.Util;
 
 namespace HellionChat.Ui;
 
-// Bottom status bar, 22px tall. Slots left to right: channel indicator,
+// Bottom status bar. Slots left to right: channel indicator, privacy badge,
-// privacy badge, counts, tells (hidden at 0), version (right-aligned).
+// counts, tells (hidden at 0), version (right-aligned). Updates at 1Hz;
-// Updates at 1Hz; format strings are cached between updates.
+// format strings are cached between updates.
 internal sealed class StatusBar
 {
-    public const float Height = 22f;
+    // DPI-aware bar height. The previous fixed 22px constant clipped on
+    // Windows display-scaling >100% because ImGui renders the font bigger
+    // than the reservation. GetTextLineHeightWithSpacing scales with the
+    // current ImGui font; the 2px spacer is GlobalScale-rounded to stay
+    // on integer pixel boundaries (same idiom as v1.4.6 F7.2 underline-pill
+    // in ChatLogWindow.cs:1639-1653).
+    public static float Height =>
+        ImGui.GetTextLineHeightWithSpacing() + MathF.Round(2f * ImGuiHelpers.GlobalScale);
+
     private const long UpdateIntervalMs = 1000;
 
     // Initially outdated so the first frame always computes fresh.

HellionChat/Util/AutoTranslate.cs

@@ -62,7 +62,7 @@ internal static class AutoTranslate
         {
             var sw = Stopwatch.StartNew();
             AllEntries();
-            Plugin.Log.Debug($"Warming up auto-translate took {sw.ElapsedMilliseconds}ms");
+            Plugin.LogProxy.Debug($"Warming up auto-translate took {sw.ElapsedMilliseconds}ms");
         })
         {
             IsBackground = true,
@@ -197,7 +197,7 @@ internal static class AutoTranslate
             }
             catch (Exception ex)
             {
-                Plugin.Log.Error(ex, $"failed to translate: {lookup}");
+                Plugin.LogProxy.Error(ex, $"failed to translate: {lookup}");
             }
         }
 

HellionChat/Util/DalamudPlatformUtil.cs

@@ -0,0 +1,16 @@
+namespace HellionChat.Util;
+
+internal sealed class DalamudPlatformUtil : IPlatformUtil
+{
+    public DalamudPlatformUtil()
+    {
+        // Util.IsWine probes the host process and never changes for the
+        // lifetime of a plugin instance, so we cache it once at ctor.
+        // Mirrors LightlessSync/Services/DalamudUtilService:154.
+        IsWine = Dalamud.Utility.Util.IsWine();
+    }
+
+    public bool IsWine { get; }
+
+    public void OpenLink(string url) => Dalamud.Utility.Util.OpenLink(url);
+}

HellionChat/Util/DalamudPluginLogProxy.cs

@@ -0,0 +1,61 @@
+using System;
+using Dalamud.Plugin.Services;
+
+namespace HellionChat.Util;
+
+internal sealed class DalamudPluginLogProxy : IPluginLogProxy
+{
+    private readonly IPluginLog _log;
+
+    public DalamudPluginLogProxy(IPluginLog log) => _log = log;
+
+    public void Verbose(string message) => _log.Verbose(message);
+
+    public void Verbose(Exception exception, string message) => _log.Verbose(exception, message);
+
+    public void Verbose(string messageTemplate, params object[] values) =>
+        _log.Verbose(messageTemplate, values);
+
+    public void Debug(string message) => _log.Debug(message);
+
+    public void Debug(Exception exception, string message) => _log.Debug(exception, message);
+
+    public void Debug(string messageTemplate, params object[] values) =>
+        _log.Debug(messageTemplate, values);
+
+    public void Information(string message) => _log.Information(message);
+
+    public void Information(Exception exception, string message) =>
+        _log.Information(exception, message);
+
+    public void Information(string messageTemplate, params object[] values) =>
+        _log.Information(messageTemplate, values);
+
+    public void Info(string message) => _log.Info(message);
+
+    public void Info(Exception exception, string message) => _log.Info(exception, message);
+
+    public void Info(string messageTemplate, params object[] values) =>
+        _log.Info(messageTemplate, values);
+
+    public void Warning(string message) => _log.Warning(message);
+
+    public void Warning(Exception exception, string message) => _log.Warning(exception, message);
+
+    public void Warning(string messageTemplate, params object[] values) =>
+        _log.Warning(messageTemplate, values);
+
+    public void Error(string message) => _log.Error(message);
+
+    public void Error(Exception exception, string message) => _log.Error(exception, message);
+
+    public void Error(string messageTemplate, params object[] values) =>
+        _log.Error(messageTemplate, values);
+
+    public void Fatal(string message) => _log.Fatal(message);
+
+    public void Fatal(Exception exception, string message) => _log.Fatal(exception, message);
+
+    public void Fatal(string messageTemplate, params object[] values) =>
+        _log.Fatal(messageTemplate, values);
+}

HellionChat/Util/IPlatformUtil.cs

@@ -0,0 +1,11 @@
+namespace HellionChat.Util;
+
+// Indirection over Dalamud.Utility.Util's static surface so services can be
+// constructed in an isolated xUnit AppDomain without loading Dalamud.dll.
+// Production wiring lives in DalamudPlatformUtil; tests substitute a fake.
+internal interface IPlatformUtil
+{
+    bool IsWine { get; }
+
+    void OpenLink(string url);
+}

HellionChat/Util/IPluginLogProxy.cs

@@ -0,0 +1,40 @@
+using System;
+
+namespace HellionChat.Util;
+
+// Indirection over Dalamud's IPluginLog so MessageStore can be constructed
+// in an isolated xUnit AppDomain without loading Dalamud.dll — same pattern
+// as IPlatformUtil from F12.1. A later DI-container cycle (v1.5.x) may
+// replace this with Microsoft.Extensions.Logging's ILogger<T>.
+internal interface IPluginLogProxy
+{
+    void Verbose(string message);
+    void Verbose(Exception exception, string message);
+    void Verbose(string messageTemplate, params object[] values);
+
+    void Debug(string message);
+    void Debug(Exception exception, string message);
+    void Debug(string messageTemplate, params object[] values);
+
+    void Information(string message);
+    void Information(Exception exception, string message);
+    void Information(string messageTemplate, params object[] values);
+
+    // IPluginLog exposes Info as a distinct method (short alias of
+    // Information) — both are present so call-sites stay drop-in.
+    void Info(string message);
+    void Info(Exception exception, string message);
+    void Info(string messageTemplate, params object[] values);
+
+    void Warning(string message);
+    void Warning(Exception exception, string message);
+    void Warning(string messageTemplate, params object[] values);
+
+    void Error(string message);
+    void Error(Exception exception, string message);
+    void Error(string messageTemplate, params object[] values);
+
+    void Fatal(string message);
+    void Fatal(Exception exception, string message);
+    void Fatal(string messageTemplate, params object[] values);
+}

HellionChat/Util/ImGuiUtil.cs

@@ -254,6 +254,17 @@ internal static class ImGuiUtil
         return end;
     }
 
+    // ---------------------------------------------------------------
+    // Inspired by ChatTwo upstream f35b7d3 (Infiziert90, 2026-05-12).
+    // Upstream dropped the width parameter (no callers there); we keep
+    // it because two ChatLogWindow header buttons size themselves to
+    // match the ChannelIcon button's frame. The actual bug is the
+    // manual size = width - 2 * CellPadding.X subtraction: CellPadding
+    // scales with HUD scale, the raw int does not, so the button
+    // shrank under high HUD scales. ImGui.Button already handles its
+    // own frame padding internally — pass the measured width straight
+    // through.
+    // ---------------------------------------------------------------
     internal static bool IconButton(
         FontAwesomeIcon icon,
         string? id = null,
@@ -268,10 +279,7 @@ internal static class ImGuiUtil
         bool ret;
         using (Plugin.FontManager.FontAwesome.Push())
         {
-            var size = Vector2.Zero;
+            var size = width > 0 ? new Vector2(width, 0f) : Vector2.Zero;
-            if (width > 0)
-                size.X = width - 2 * ImGui.GetStyle().CellPadding.X;
-
             ret = ImGui.Button(label, size);
         }
 
@@ -575,7 +583,9 @@ internal static class ImGuiUtil
 
         using (ImRaii.Disabled(isMax))
         {
-            if (IconButton(FontAwesomeIcon.ArrowRight, id + 1.ToString()))
+            // Parentheses pin the operator precedence: without them this resolves as
+            // id.ToString() + "1" (e.g. "01" instead of "1").
+            if (IconButton(FontAwesomeIcon.ArrowRight, (id + 1).ToString()))
                 selected++;
         }
 

HellionChat/Util/MemoryUtil.cs

@@ -42,6 +42,6 @@ public static class MemoryUtil
                 str.Append(' ');
         }
 
-        Plugin.Log.Information(str.ToString());
+        Plugin.LogProxy.Information(str.ToString());
     }
 }

HellionChat/Util/TabLifecycleHelpers.cs

@@ -0,0 +1,16 @@
+namespace HellionChat.Util;
+
+// Pure predicates for the TempTab pin lifecycle. Extracted from the strip
+// sites in Plugin.cs and Configuration.cs so they stay in lockstep — a
+// load-time strip that disagrees with the save-time strip is exactly how
+// pinned tabs would silently fall out of the JSON.
+internal static class TabLifecycleHelpers
+{
+    public static bool IsInUnpinnedPool(Tab t) => t.IsTempTab && !t.IsPinned;
+
+    public static bool IsInPinnedPool(Tab t) => t.IsTempTab && t.IsPinned;
+
+    public static bool ShouldStripOnLoad(Tab t) => IsInUnpinnedPool(t);
+
+    public static bool ShouldStripOnSave(Tab t) => IsInUnpinnedPool(t);
+}

HellionChat/Util/UrlValidation.cs

@@ -0,0 +1,21 @@
+namespace HellionChat.Util;
+
+internal static class UrlValidation
+{
+    // Used by BrandingLinks/IntegrationLinks at module init. A typo in a URL
+    // rotation throws loudly at plugin load instead of silently failing when
+    // a user clicks the broken button.
+    public static void ValidateAll(string source, params string[] urls)
+    {
+        foreach (var url in urls)
+        {
+            if (
+                !Uri.TryCreate(url, UriKind.Absolute, out var uri)
+                || (uri.Scheme is not "https" and not "http")
+            )
+            {
+                throw new InvalidOperationException($"{source} contains malformed URL: {url}");
+            }
+        }
+    }
+}

HellionChat/Util/WrapperUtil.cs

@@ -21,12 +21,12 @@ public static class WrapperUtil
     {
         try
         {
-            Plugin.Log.Debug($"Opening URI {uri} in default browser");
+            Plugin.LogProxy.Debug($"Opening URI {uri} in default browser");
-            Dalamud.Utility.Util.OpenLink(uri.ToString());
+            Plugin.PlatformUtil.OpenLink(uri.ToString());
         }
         catch (Exception ex)
         {
-            Plugin.Log.Error($"Error opening URI: {ex}");
+            Plugin.LogProxy.Error($"Error opening URI: {ex}");
             AddNotification(Language.Context_OpenInBrowserError, NotificationType.Error);
         }
     }

README.md

@@ -2,7 +2,7 @@
 
 [![Build](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/actions/workflows/build.yml/badge.svg?branch=main)](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/actions/workflows/build.yml)
 [![License: EUPL-1.2](https://img.shields.io/badge/License-EUPL--1.2-blue.svg)](LICENSE)
-[![Latest release](https://img.shields.io/badge/release-v1.4.5-brightgreen)](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/latest)
+[![Latest release](https://img.shields.io/badge/release-v1.4.8-brightgreen)](https://gitea.hellion-forge.cloud/JonKazama-Hellion/HellionChat/releases/latest)
 [![Dalamud API](https://img.shields.io/badge/Dalamud-API_15-purple)](https://github.com/goatcorp/Dalamud)
 [![.NET](https://img.shields.io/badge/.NET-10.0-512BD4)](https://dotnet.microsoft.com/)
 [![FFXIV](https://img.shields.io/badge/FFXIV-Dawntrail-c3a37f)](https://www.finalfantasyxiv.com/)
@@ -11,7 +11,7 @@
   <img src="docs/images/hellion-forge.png" alt="Hellion Forge" width="180" />
 </p>
 
-**Version 1.4.5** — Privacy-first chat plugin for FINAL FANTASY XIV / Dalamud, built on
+**Version 1.4.8** — Privacy-first chat plugin for FINAL FANTASY XIV / Dalamud, built on
 [Chat 2](https://github.com/Infiziert90/ChatTwo) (EUPL-1.2).
 
 Hellion Chat is a privacy-first plugin built on the Chat 2 foundation. The majority of the engine comes from Chat 2
@@ -102,7 +102,7 @@ Hellion Chat is developed under **Hellion Forge**, the specialized modding and p
 #### Custom Themes (v1.1.0)
 
 HellionChat ships a theme engine with ten built-in themes (Hellion Arctic, Hellion Spectrum, Chat 2 Classic, Event
-Horizon, Moonlit Bloom, Mint Grove, Night Blue, Indigo Violet, Forge Merchantman, Synthwave Sunset) and a JSON-based
+Horizon, Crystal Nocturne, Mint Grove, Night Blue, Indigo Violet, Forge Merchantman, Synthwave Sunset) and a JSON-based
 authoring format for custom themes. Schema and step-by-step guide in
 [`docs/THEME-AUTHORING.md`](docs/THEME-AUTHORING.md). Hellion Spectrum is Deuteranopia/Protanopia-safe (red-green color
 blindness) based on the Wong/Okabe-Ito palette.
@@ -286,18 +286,19 @@ An optional submission to the Dalamud main plugin repo (in addition to the custo
 
 ## Project Status
 
-**Version 1.4.5** — User-visible robustness polish on top of the v1.4.4 threading work. The chat log no longer fails
+**Version 1.4.8** — Hook-Layer and Polish Quick-Wins. The Database Viewer now has an optional FTS5 full-text search
-silently: a draw-path exception now triggers a one-shot warning notification that points users at `/xllog`, while the
+across the entire chat history. Toggle "Full-text search" next to the search bar; the index is built asynchronously on
-stack trace itself keeps going through `Plugin.Log.Error` as before. The first-run wizard splits accept from close —
+first run after the update with a progress toast, and the toggle stays disabled until the build completes. Multi-word
-`OnClose` no longer silently sets `FirstRunCompleted`, so closing the X leaves the wizard pending and it reopens on the
+terms match as exact phrases by default; power users can opt into raw FTS5 `MATCH` syntax by wrapping their own
-next plugin load; a new footer "Later — keep defaults" button is the explicit path to dismiss without picking a profile.
+double-quotes. Custom theme files auto-reload when edited while the theme is active — save the JSON in your editor and
-`InputHistoryService` clears on plugin dispose alongside the existing pure-memory cleanups, so the previous session's
+the live render picks up the change within a second, no picker click. Retention sweep no longer blocks the framework
-typed commands don't bleed into the next load. `FontManager.GetHellionFontBytes` becomes a `Try`-variant that falls back
+thread (`Framework.Run(...).Wait()` replaced by `Framework.RunOnTick(...)`), removing the ~194 ms hitch per sweep. Status
-to the system-font path when the embedded resource is missing (broken csproj / dev build) instead of throwing through
+bar height is now derived from `GetTextLineHeightWithSpacing()` plus a DPI-aware spacer so the bar renders correctly at
-the UiBuilder. The status bar drops the right-aligned version slot when the chat window is below the threshold needed to
+Windows display scaling above 100 %. Receive-suppressed-tells routing is postponed to v1.5.x; the investigation in this
-fit all five slots without overlap. Internal: explicit session-only Auto-Tell-Tab invariant comment with a
+cycle showed that the FFXIV `ContentIdResolverHook` does not fire when other plugins suppress tells via
-`TempTabCounter.InitFromList` pin in the Build-Suite. No schema bump, no migration. Sixth sub-patch of the v1.4.x polish
+`CheckMessageHandled`, which means tell-partner identification breaks for AutoTellTab routing — the fix lives next to
-sweep series (as of 2026-05-12).
+the planned ad-block hook layer where the same `RaptureLogModule` patch surface comes up anyway. Migration v17 stays
+(no schema bump). Ninth sub-patch of the v1.4.x polish sweep series (as of 2026-05-14).
 
 Hellion Chat is a standalone plugin, no longer a fork in the repository sense. Fully completed:
 

docs/CHANGELOG.md

@@ -10,6 +10,122 @@ to the release pages for details.
 
 ---
 
+## Hellion Chat 1.4.8 — Hook-Layer and Polish Quick-Wins (2026-05-14)
+
+Ninth sub-patch of the v1.4.x polish-sweep series. Hook-layer cluster (FTS5 full-text search, ad-block foundation
+investigation) plus three polish quick-wins.
+
+- DbViewer full-text search: optional FTS5 index across the full chat history. Built asynchronously on first run after
+  the update with a progress toast (UI stays responsive, the toggle is disabled until the build completes). The local
+  page-filter remains the default mode. Multi-word queries match as exact phrases; power users can opt into raw FTS5
+  `MATCH` syntax by wrapping their own double-quotes around the term.
+- Custom theme files now auto-reload when edited while the theme is active. Save the JSON in your editor and the live
+  render picks up the change within a second — no need to re-click the theme in the picker. Disk-stat is throttled to
+  1 Hz so per-frame cost stays free.
+- Retention sweep no longer blocks the framework thread. `Framework.Run(...).Wait()` is replaced by
+  `Framework.RunOnTick(...)`, which removes the ~194 ms hitch the sweep used to add per run.
+- Status bar height is derived from `GetTextLineHeightWithSpacing()` plus a DPI-aware spacer so the bar renders
+  correctly at Windows display scaling above 100 %. Linux/Wayland default of 100 % is unaffected.
+- Receive-suppressed-tells routing was investigated this cycle and **postponed to v1.5.x**. When other plugins suppress
+  tells via `CheckMessageHandled`, FFXIV's chat pipeline skips the `RaptureLogModule.AddMsgSourceEntry` path, which means
+  HellionChat's `ContentIdResolverHook` does not fire and tell-partner identification breaks for AutoTellTab routing.
+  The proper fix sits next to the planned ad-block hook layer (`RaptureLogModule.ShowMiniTalkPlayer` and friends) where
+  the same patch surface comes up anyway.
+- Internal: storage form of `messages.Id` clarified (declared BLOB but Microsoft.Data.Sqlite stores Guid parameters as
+  TEXT). FTS bulk insert and `LoadByGuids` join now match the TEXT storage form on both sides. Migration v17 stays
+  (no schema bump).
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+---
+
+## Hellion Chat 1.4.7 — Backlog Cleanup and Mid-Features (2026-05-13)
+
+Eighth sub-patch of the v1.4.x polish-sweep series. First user-visible feature bundle since v1.4.5 — pinned tell tabs
+that survive relog, opt-in Honorific glow rendering, a configurable sidebar, plus a Settings-Save channel-preservation
+fix surfaced during smoke testing.
+
+- TempTell Pin: right-click a TempTell tab in the sidebar and choose "Pin Tab" / "Tab anpinnen". Pinned tabs survive
+  plugin reload and character logout, keep their conversation history (loaded on demand from the message store on
+  rehydrate), and stay bound to the same `/tell` partner. Hard cap of 5 pinned tabs in a pool separate from the 15-tab
+  auto-tell pool — total ceiling is 20 tabs. The sidebar groups pinned tabs into their own section with a divider header
+- Honorific glow outlines now render via an 8-direction DrawList pre-pass when the title carries a Glow colour. Opt-in
+  via **Settings → Integrations → Render glow outlines (Honorific)** (default off). Honorific's gradient surface
+  (`Color3`, `GradientColourSet`, `GradientAnimationStyle`) is parsed and stashed for a later cycle but renders as the
+  primary colour until then — the v1.4.7 DTO already mirrors all four extra fields so the JSON roundtrip doesn't
+  silent-drop them
+- Sidebar width configurable in **Theme & Layout** (44–160 px, default 44 stays icon-only). The icon button stretches
+  with the configured width so a widened sidebar looks intentional, not a 36 px icon floating in empty space
+- `Configuration.UpdateFrom` now preserves the runtime `CurrentChannel` across the persistent-tab merge alongside
+  `Messages` and `LastSendUnread`. `TabSwitched` deep-clones the seeded channel from the previous tab instead of sharing
+  the same `UsedChannel` instance. Together these fix a regression where Settings-Save on a Party or Linkshell tab
+  popped the chat input back to `/tell <pinned-partner>` on the next interaction
+- `Util/ImGuiUtil.cs` `DrawArrows` IconButton id uses `(id + 1).ToString()` with explicit parentheses instead of the
+  operator-precedence quirk `id + 1.ToString()` (which resolved to `id.ToString() + "1"`). Single live caller is
+  `Ui/DbViewer.cs:227` page-navigation
+- Internal: `IPluginLogProxy` indirection over Dalamud's `IPluginLog` routes all ~91 `Plugin.Log` call sites through a
+  testable proxy. `MessageStore.Migrate0` can now run in xUnit without loading `Dalamud.dll`, closing the gap F12.1 left
+  in v1.4.6. Production wrapper `DalamudPluginLogProxy` and Build-Suite `FakePluginLogProxy` mirror the full
+  `IPluginLog` surface (`Verbose`/`Debug`/`Information`/`Info`/`Warning`/`Error`/`Fatal`) with single-string,
+  `Exception+string`, and `params object[]` overloads
+- Internal: TempTab counter switched from an `Interlocked` cached field to a derived `Tabs.Count(predicate)`. Pin-state
+  transitions (TryPin / Unpin / Promote) are cold-path and don't need lock-free reads; counter mutation surface dropped
+  from 5 to 0 sites. Build-Suite floor 688 → 710 (+22)
+- Schema bump v16 → v17 is additive: new `Tab.IsPinned` bool, default false. Existing v16 configs load cleanly and get
+  their `Version` stamp bumped after the gate check
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+---
+
+## Hellion Chat 1.4.6 — Code Hygiene and Refactor (2026-05-12)
+
+Maintenance patch. No user-visible behaviour changes; tightens the development feedback loop, fixes two
+upstream-inherited bugs from ChatTwo `f35b7d3`, and prepares the code for the v1.4.7 backlog cleanup.
+
+- `scripts/preflight.sh` gains Block E (`dotnet csharpier check`) and Block F (`markdownlint-cli2`) so reflow drift and
+  markdown violations are caught at the pre-push gate. `.markdownlint.json` adds `MD024 siblings_only` and disables
+  `MD036` so the bilingual forge-post bold-emphasis headings pass linting; the `.claude/` directory is excluded from the
+  scan
+- `FontManager.AddFontWithFallback` catch-filter now covers `InvalidOperationException` and `ArgumentException` on top
+  of the existing IO triad. The warning log carries the exception type name, so the diagnostic path knows which class of
+  atlas-toolkit throw triggered the NotoSansCjkRegular fallback
+- `BrandingLinks` (5 URLs) and `Integrations/IntegrationLinks` (2 URLs) validate themselves on first module load via
+  `[ModuleInitializer]` + a shared `UrlValidation.ValidateAll` helper. A malformed URL now throws
+  `InvalidOperationException` at plugin load with the source class and the broken URL in the message
+- Cherry-picked from ChatTwo upstream `f35b7d3`: `Chat.SetChannel` no longer leaks the native `Utf8String` when the
+  linkshell check rejects the channel. The validity check is now wrapped around the `ChangeChatChannel` call instead of
+  short-circuiting before `Dtor`. `ValidAnyLinkshell` is renamed to `IsChannelOrExistingLinkshell` and the
+  `ChatLogWindow` call-site follows the rename
+- Cherry-picked from ChatTwo upstream `f35b7d3`: `Tab.Clone` now deep-clones `UsedChannel` and `TellTarget`. The old
+  `CurrentChannel = CurrentChannel` was a reference copy, so PopOut and Temp tabs mutated each other's channel state
+  (incl. tell target). `TellTarget.From(t)` static factory is replaced with an instance `Clone()`; `UsedChannel.Clone()`
+  is new and runs deep-clone on both TellTarget references
+- `ChatLogWindow` active-tab underline pill now scales with `ImGuiHelpers.GlobalScale` and rounds its DrawList
+  coordinates to physical pixels via `MathF.Round`, so the 2 px line stays crisp on 125 % and 150 % DPI setups instead
+  of bleeding into a sub-pixel blur
+- `ImGuiUtil.IconButton` width parameter no longer subtracts HUD-scaled `CellPadding.X * 2` from the raw `int` width.
+  `ImGui.Button` handles its own frame padding internally, so the measured `buttonWidth` now passes through verbatim
+  (inspired-by upstream `f35b7d3`, but our two call-sites need the parameter, so the param itself stays)
+- Internal: `HellionStyle` ChildBgAlpha threshold logic extracted to `HellionStyleHelpers.ResolveChildBgAlpha` with a
+  build-suite mirror test that pins the 0.999f cutoff. `Plugin.SaveConfig` clones only the temp-tab subset in the
+  pre-serialization snapshot instead of the full tab list. `SettingsOverview` caches `ImGui.GetWindowDrawList()` once
+  per frame and passes the pointer down to `DrawCard`
+- Internal: `Dalamud.Utility.Util` static surface (`IsWine`, `OpenLink`) routed through a new `IPlatformUtil`
+  indirection. `MessageStore`'s `IsWine` probe is now reachable from the xUnit AppDomain via a `FakePlatformUtil`
+  fixture (full isolated MessageStore construction still pending — `Plugin.Log.Information` in `Migrate0` is a separate
+  Dalamud-static surface, slated for v1.4.7)
+- Built-in themes: Crystal Nocturne (royal sapphire and electric magenta over obsidian, by CRYSTALLITE) replaces Moonlit
+  Bloom in the built-in roster. Users who had Moonlit Bloom selected fall back to the default Hellion Arctic on the
+  first plugin load; an existing custom JSON copy of Moonlit Bloom under `pluginConfigs/HellionChat/themes/` keeps
+  working unchanged
+
+Modding & support: join Hellion Forge — <https://discord.gg/X9V7Kcv5gR>
+
+Based on Chat 2 1.35.3 (upstream Infiziert90/ChatTwo, EUPL-1.2).
+
+---
+
 ## Hellion Chat 1.4.5 — UX and Robustness (2026-05-12)
 
 Sixth sub-patch of the v1.4.x polish-sweep series. User-visible robustness fixes plus two doc/test polish items from the

docs/ROADMAP.md

@@ -10,14 +10,70 @@ the plugin's privacy-first scope during brainstorming.
 
 ---
 
-## Next Cycle (v1.4.6)
+## Next Cycle (v1.4.9)
 
-**Code-Hygiene + Refactor.** Build-side pre-commit hook with csharpier-check as a hard gate so format drift can't reach
+**Plugin-Load Render Polish.** Erststart-Frame-Hitch (~110 ms UiBuilder) and the related Font-Atlas + Auto-Translate
-a commit (~30 min). Plus the cycle absorbs whatever surfaces from v1.4.5 smoke that doesn't justify a hotfix. Concrete
+warmup costs surface every load and are reproducible in `/xlstats`. The cycle also unblocks the lazy-window refactor
-scope is consolidated in the v1.4.6 brainstorm.
+sketched in `feedback_lazy_window_dalamud` and the slash-command centralisation that comes with it.
 
 ---
 
+## v1.4.8 — Hook-Layer and Polish Quick-Wins (released 2026-05-14)
+
+Ninth sub-patch of the v1.4.x Polish Sweep series. Database Viewer gains an optional FTS5 full-text search across the
+full chat history, built asynchronously on first run after the update with a progress toast; the local page-filter
+remains the default mode. Custom theme files auto-reload when edited while the theme is active (1 Hz disk-stat throttle,
+so per-frame cost is free). Retention sweep no longer blocks the framework thread — `Framework.Run(...).Wait()` is
+replaced by `Framework.RunOnTick(...)`, removing the ~194 ms hitch per sweep. Status-bar height is now derived from
+`GetTextLineHeightWithSpacing()` plus a DPI-aware spacer so the bar renders correctly at Windows display scaling above
+100 %. Receive-suppressed-tells routing was investigated and **postponed to v1.5.x**: when other plugins suppress tells
+via `CheckMessageHandled`, FFXIV's chat-pipeline skips the `RaptureLogModule.AddMsgSourceEntry` path, which means the
+`ContentIdResolverHook` does not fire and tell-partner identification breaks. The fix belongs next to the planned ad-block
+hook layer where the same patch surface comes up anyway. Migration v17 stays (no schema bump). H3 leaves a foundation
+note in the Vault (`Projekte/FFXIV/Hellion Chat/v1.5.x Ad-Block Foundation.md`) covering the NoSoliciting filter +
+bubble-layer hook pattern as a ready-made template for the v1.5.x cycle.
+
+---
+
+## v1.4.7 — Backlog Cleanup and Mid-Features (released 2026-05-13)
+
+Eighth sub-patch of the v1.4.x Polish Sweep series. First user-visible feature bundle since v1.4.5. TempTell tabs can
+now be pinned via right-click; pinned tabs survive plugin reload and character logout, keep their conversation history
+(loaded on demand from the message store on rehydrate), and stay bound to the same `/tell` partner. A hard cap of 5
+pinned tabs lives in a pool separate from the 15-tab auto-tell pool, total ceiling 20. The sidebar groups pinned tabs
+into their own section with a divider header, and the sidebar width itself is now configurable in **Theme & Layout**
+between 44 and 160 px. Honorific glow outlines render when the title carries a Glow colour, opt-in via **Settings →
+Integrations → Render glow outlines (Honorific)** (default off). Honorific's gradient (Color3 / GradientColourSet / Wave
+/ Pulse) is parsed but rendered statically — a later cycle will port the full animation algorithm or land an upstream
+IPC PR for the resolved frame colour. `Configuration.UpdateFrom` now preserves the runtime `CurrentChannel` across the
+persistent-tab merge, and `TabSwitched` deep-clones the seeded channel instead of sharing the previous tab's
+`UsedChannel` — together they fix a Settings-Save regression where the chat input could pop back to
+`/tell <pinned-partner>` after touching settings on a Party or Linkshell tab. Internal items: `IPluginLogProxy`
+indirection over Dalamud's `IPluginLog` routes all ~91 `Plugin.Log` call sites through a testable proxy, closing the
+F12.1 test-isolation gap (`MessageStore.Migrate0` runs in xUnit now). TempTab counter switched from `Interlocked` cached
+field to derived `Tabs.Count(predicate)`. Migration v16 → v17 is additive (new `Tab.IsPinned` flag). Build-Suite floor
+688 → 710 (+22 tests across Pin-lifecycle predicates, pool limits, Tab.Clone roundtrip, MessageStore Migrate0
+construction, and Honorific TitleData JSON roundtrip).
+
+## v1.4.6 — Code Hygiene and Refactor (released 2026-05-12)
+
+Seventh sub-patch of the v1.4.x Polish Sweep series. Maintenance patch — no user-visible behaviour changes; tightens the
+development feedback loop and pulls in two ChatTwo upstream bugfixes. `scripts/preflight.sh` gains a csharpier reflow
+check (Block E) and a markdownlint pass (Block F), so style drift and markdown violations are blocked at the pre-push
+gate. `FontManager.AddFontWithFallback` catch-filter now spans `InvalidOperationException` and `ArgumentException` on
+top of the existing IO triad, with the exception type name in the warning log so the diagnostic path can see which
+atlas-toolkit throw triggered the fallback. `BrandingLinks` and `IntegrationLinks` run a `[ModuleInitializer]` URL
+validation pass on plugin load; a typo in a future URL rotation now throws at startup instead of failing silently when a
+user clicks the broken button. Cherry-picked from ChatTwo upstream `f35b7d3`: `Chat.SetChannel` no longer leaks the
+native `Utf8String` when the linkshell check rejects the channel (rename to `IsChannelOrExistingLinkshell` plus
+wrap-not-return), and `Tab.Clone` now deep-clones `UsedChannel` and `TellTarget` (the previous reference copy let PopOut
+and Temp tabs mutate each other's channel state). The `ChatLogWindow` active-tab underline pill scales with
+`ImGuiHelpers.GlobalScale` and rounds to physical pixels for crisp rendering above 100 % DPI. Internal items:
+`HellionStyle` ChildBgAlpha extracted to a testable helper, `Plugin.SaveConfig` clones only the temp-tab subset in the
+snapshot path, `SettingsOverview` caches the draw-list per frame, `Dalamud.Utility.Util` static surface routed through
+an `IPlatformUtil` indirection (`MessageStore`'s `IsWine` probe is now testable in isolation). No schema bump, no
+migration.
+
 ## v1.4.5 — UX and Robustness (released 2026-05-12)
 
 Sixth sub-patch of the v1.4.x Polish Sweep series. User-visible robustness polish plus two doc/test polish items from

docs/THEME-AUTHORING.md

@@ -141,7 +141,7 @@ A theme can tint these toward its brand family (e.g., a purple theme can shift T
 **don't** flip them (Tell suddenly green, Yell suddenly cyan). RP groups and combat-spec setups depend on the visual
 hierarchy.
 
-The eight colored built-in themes (Hellion Arctic, Hellion Spectrum, Event Horizon, Moonlit Bloom, Mint Grove, Night
+The eight colored built-in themes (Hellion Arctic, Hellion Spectrum, Event Horizon, Crystal Nocturne, Mint Grove, Night
 Blue, Indigo Violet, Forge Merchantman) all follow this rule — read their source for reference. Chat 2 Klassik
 intentionally ships without `chatChannels` so the user keeps their existing picks.
 

scripts/preflight.sh

@@ -1,7 +1,9 @@
 #!/usr/bin/env bash
 # preflight.sh — pre-push gate. Blocks A/B/C verify config drift; Block D is a
-# headless `dotnet build` to catch compile-time API drift. Test execution lives
+# headless `dotnet build` to catch compile-time API drift; Block E runs
-# in the local Build-Suite repo and is NOT part of this preflight.
+# `dotnet csharpier check` against HellionChat/; Block F runs markdownlint
+# against the repo's *.md files. Test execution lives in the local Build-Suite
+# repo and is NOT part of this preflight.
 
 set -euo pipefail
 ROOT="$(cd "$(dirname "$0")/.." && pwd)"
@@ -19,4 +21,12 @@ echo "==> preflight: Block C — changelog sync"
 echo "==> preflight: Block D — plugin compile health"
 dotnet build HellionChat/HellionChat.csproj --configuration Release --nologo --verbosity quiet
 
+echo "==> preflight: Block E — csharpier reflow check"
+dotnet csharpier check HellionChat/
+
+echo "==> preflight: Block F — markdownlint"
+# npx --yes avoids a global install; first run caches into ~/.npm/_npx/.
+# Subsequent runs are sub-second.
+npx --yes markdownlint-cli2 "**/*.md" "#node_modules" "#bin" "#obj" "#.claude"
+
 echo "==> preflight: ALL GREEN"