nostr: Connected flag tracks the fast relay-live probe, not the 30s catch-up fetch

Symptom: after 'Save & reconnect' of the relay list, the home/onboarding UI sat on 'Connecting relays…' for ~30s even though the relays had physically reconnected over the exit in ~2-4s. Cause: on restart the service clears connected=false, then the UI flag was only restored AFTER publish_identity (serial, untimed per-event sends) AND a catch-up fetch_events_from bounded by FETCH_TIMEOUT=30s. One relay slow to EOSE pinned is_connected() false for the whole window while the connection was already usable. A separate FAST probe task already detects first-relay-Connected at 250ms poll (~2-4s) and reports relay-live to nymproc, but it did not touch the UI flag. Fix: in that fast probe, when relays first report Connected (same point that calls report_relay_live), also set svc.connected=true. The indicator now tracks the real ~2-4s relay-up signal; publish_identity + the catch-up fetch continue in the background. Tradeoff (documented in code): a relay drop between the probe store(true) and the 2s status loop taking over wouldn't flip the flag for up to ~30s until the post-catch-up re-check re-syncs to reality — the same-order staleness as the old pessimistic gap, just optimistic; the transport watchdog still tracks real exit health independently. Hardening: publish_identity's per-event send_event_to was untimed, so a stalled relay delayed the catch-up fetch and the kind:1059 subscription that follow it (real incoming-message latency). Each publish is now wrapped in tokio::time::timeout(SEND_TIMEOUT), mirroring dispatch_dm; on timeout it warns and continues to the next event, never aborting the sequence. Audit: all readers of is_connected() were reviewed for the relaxed invariant (flag can now be true before the giftwrap subscription is established). gui/goblin/mod.rs and gui/goblin/onboarding.rs use it for display + repaint scheduling and to enable the claim-username button — claiming needs relays connected (which the flag now genuinely means), not the incoming kind:1059 subscription. wallet/e2e.rs uses it as a test precondition with downstream waits of 900s/2400s and relays replay stored gift wraps on subscribe, so it still converges. No reader treats is_connected() as 'safe to receive now', so no separate ui_connected flag is needed.
nym: race two gateway connects on the cold-start path (bound the lottery tail)
2026-07-03 15:39:02 -04:00 · 2026-07-03 13:52:26 -04:00 · 2026-07-03 13:40:22 -04:00 · 2026-07-03 13:22:47 -04:00 · 2026-07-03 11:56:40 -04:00 · 2026-07-03 11:47:38 -04:00
118 changed files with 14636 additions and 2363 deletions
@@ -0,0 +1,21 @@
+name: Fetch nip44 crate
+description: >
+  Clone the nip44 crate (v2 + v3 encryption) from our mirror
+  (github.com/2ro/nip44, branch `v3`) into ../nip44, so the
+  `nip44 = { path = "../nip44" }` dependency resolves.
+
+runs:
+  using: composite
+  steps:
+    - name: Clone nip44
+      shell: bash
+      run: |
+        set -euo pipefail
+        DEST="$(dirname "$GITHUB_WORKSPACE")/nip44"
+        if [ -e "$DEST/Cargo.toml" ]; then
+          echo "nip44 already present at $DEST"
+          exit 0
+        fi
+        rm -rf "$DEST"
+        git clone --branch v3 --depth 1 https://github.com/2ro/nip44.git "$DEST"
+        echo "nip44 cloned from 2ro/nip44@v3 -> $DEST"
@@ -17,6 +17,8 @@ jobs:
          submodules: recursive
      # nym-sdk is a path dep on ../nym; materialize it before building.
      - uses: ./.github/actions/fetch-nym
+      # nip44 is a path dep on ../nip44; materialize it before building.
+      - uses: ./.github/actions/fetch-nip44
      - name: Release build
        run: cargo build --release

@@ -28,6 +30,7 @@ jobs:
        with:
          submodules: recursive
      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
      - name: Release build
        run: cargo build --release

@@ -39,5 +42,6 @@ jobs:
        with:
          submodules: recursive
      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
      - name: Release build
        run: cargo build --release
@@ -8,10 +8,12 @@
 name: Release

 on:
-  # macOS is DEFERRED until Linux/Windows/Android are polished — so this is
-  # manual-dispatch only for now (no auto-build on release publish). When macOS
-  # is back on the table, re-add `release: { types: [published] }` here and the
-  # macOS job will attach a universal build to each release automatically.
+  # macOS builds on its native runner automatically when a release is published
+  # (the macOS job has no dispatch-only gate). Linux/Windows stay dispatch-only —
+  # they are built locally and uploaded with the release; run the workflow by hand
+  # to (re)build those on runners against an existing tag.
+  release:
+    types: [published]
  workflow_dispatch:
    inputs:
      tag:
@@ -38,6 +40,7 @@ jobs:
          ref: ${{ inputs.tag || github.event.release.tag_name }}
          submodules: recursive
      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
      - name: Build
        shell: bash
        run: GOBLIN_BUILD="${TAG#build}" cargo build --release
@@ -63,10 +66,32 @@ jobs:
          ref: ${{ inputs.tag || github.event.release.tag_name }}
          submodules: recursive
      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
      - name: Build
        shell: bash
        run: GOBLIN_BUILD="${TAG#build}" cargo build --release
-      - name: Package
+      - name: Build MSI installer (cargo-wix / WiX 3 — same packaging as GRIM)
+        shell: pwsh
+        run: |
+          # The .msi is built from wix/main.wxs (the cargo-wix default template:
+          # WixUI_Minimal + launch-after-install), so `cargo wix` wires up the
+          # WixUI/WixUtil extensions, cultures and CargoTargetBinDir for us. The
+          # installer + shortcuts + Add/Remove-Programs entry carry wix/Product.ico
+          # (the yellow Goblin icon). --no-build reuses the release exe above so the
+          # embedded GOBLIN_BUILD number is preserved.
+          cargo install cargo-wix --locked
+          $wix = Get-ChildItem 'C:\Program Files (x86)' -Directory -Filter 'WiX Toolset v3*' -ErrorAction SilentlyContinue | Select-Object -Last 1
+          if (-not $wix) {
+            choco install wixtoolset --no-progress -y | Out-Null
+            $wix = Get-ChildItem 'C:\Program Files (x86)' -Directory -Filter 'WiX Toolset v3*' | Select-Object -Last 1
+          }
+          $env:WIX = "$($wix.FullName)\"
+          $env:PATH = "$($wix.FullName)\bin;$env:PATH"
+          $msi = "goblin-$env:TAG-win-x86_64.msi"
+          cargo wix --no-build --nocapture -o "$msi"
+          if ($LASTEXITCODE -ne 0 -or -not (Test-Path "$msi")) { throw "cargo wix failed to produce $msi" }
+          (Get-FileHash "$msi" -Algorithm SHA256).Hash.ToLower() + "  $msi" | Out-File -Encoding ascii "goblin-$env:TAG-win-x86_64-msi-sha256sum.txt"
+      - name: Package portable zip
        shell: bash
        run: |
          7z a "goblin-$TAG-win-x86_64.zip" ./target/release/goblin.exe
@@ -75,6 +100,8 @@ jobs:
        with:
          tag_name: ${{ inputs.tag || github.event.release.tag_name }}
          files: |
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-win-x86_64.msi
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-win-x86_64-msi-sha256sum.txt
            goblin-${{ inputs.tag || github.event.release.tag_name }}-win-x86_64.zip
            goblin-${{ inputs.tag || github.event.release.tag_name }}-win-x86_64-sha256sum.txt

@@ -87,18 +114,33 @@ jobs:
          ref: ${{ inputs.tag || github.event.release.tag_name }}
          submodules: recursive
      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
      - name: Build both architectures
        run: |
          export GOBLIN_BUILD="${TAG#build}"
          rustup target add aarch64-apple-darwin x86_64-apple-darwin
          cargo build --release --target aarch64-apple-darwin
          cargo build --release --target x86_64-apple-darwin
-      - name: Universal binary + package
+      - name: Universal binary into Goblin.app bundle
        run: |
+          # Combine both arches into one universal Mach-O and drop it into the
+          # app bundle's executable slot (CFBundleExecutable=goblin).
          lipo -create -output goblin \
            target/aarch64-apple-darwin/release/goblin \
            target/x86_64-apple-darwin/release/goblin
-          zip "goblin-$TAG-macos-universal.zip" goblin
+          cp goblin macos/Goblin.app/Contents/MacOS/goblin
+          chmod +x macos/Goblin.app/Contents/MacOS/goblin
+          # Drop the placeholder that kept the empty dir tracked in git.
+          rm -f macos/Goblin.app/Contents/MacOS/.gitignore
+          # Ad-hoc sign (no Apple cert in CI). REQUIRED on Apple Silicon: lipo
+          # strips the per-arch signatures cargo/ld add, and an unsigned arm64
+          # Mach-O is killed by the OS. Ad-hoc gives a valid (if unidentified)
+          # signature; users still right-click → Open past Gatekeeper.
+          codesign --force --sign - macos/Goblin.app/Contents/MacOS/goblin
+          codesign --force --sign - macos/Goblin.app
+          # ditto is the macOS-correct way to zip an .app (preserves the bundle
+          # layout, symlinks and permissions; plain `zip` mangles bundles).
+          ditto -c -k --keepParent macos/Goblin.app "goblin-$TAG-macos-universal.zip"
          shasum -a 256 "goblin-$TAG-macos-universal.zip" > "goblin-$TAG-macos-universal-sha256sum.txt"
      - uses: softprops/action-gh-release@v2
        with:
@@ -24,3 +24,8 @@ Cargo.toml-e
 screenshots/
 # GRIM-canonical build toolchains fetched by scripts/toolchain.sh
 .toolchains/
+# Runtime wallet/node artifacts + secrets generated by running locally — NEVER commit
+.owner_api_secret
+.foreign_api_secret
+grin-wallet.log
+grin-wallet.toml
@@ -1200,7 +1200,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "90dbd31c98227229239363921e60fcf5e558e43ec69094d46fc4996f08d1d5bc"
 dependencies = [
 "bitcoin_hashes 0.14.100",
- "rand 0.7.3",
+ "rand 0.8.6",
 "rand_core 0.6.4",
 "serde",
 "unicode-normalization",
@@ -2813,6 +2813,47 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "be1e0bca6c3637f992fc1cc7cbc52a78c1ef6db076dbf1059c4323d6a2048376"

+[[package]]
+name = "defmt"
+version = "0.3.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0963443817029b2024136fc4dd07a5107eb8f977eaf18fcd1fdeb11306b64ad"
+dependencies = [
+ "defmt 1.1.0",
+]
+
+[[package]]
+name = "defmt"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6e524506490a1953d237cb87b1cfc1e46f88c18f10a22dfe0f507dc6bfc7f7f"
+dependencies = [
+ "bitflags 1.3.2",
+ "defmt-macros",
+]
+
+[[package]]
+name = "defmt-macros"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0a27770e9c8f719a79d8b638281f4d828f77d8fd61e0bd94451b9b85e576a0b"
+dependencies = [
+ "defmt-parser",
+ "proc-macro-error2",
+ "proc-macro2 1.0.106",
+ "quote 1.0.44",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "defmt-parser"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e"
+dependencies = [
+ "thiserror 2.0.18",
+]
+
 [[package]]
 name = "der"
 version = "0.7.10"
@@ -4496,6 +4537,7 @@ dependencies = [
 "grin_wallet_libwallet",
 "grin_wallet_util",
 "hex",
+ "hickory-proto",
 "http-body-util",
 "hyper 1.8.1",
 "hyper-proxy2",
@@ -4509,6 +4551,7 @@ dependencies = [
 "local-ip-address",
 "log",
 "log4rs",
+ "nip44",
 "nokhwa",
 "nostr-relay-pool",
 "nostr-sdk",
@@ -4521,22 +4564,24 @@ dependencies = [
 "qrcodegen",
 "rand 0.9.2",
 "regex",
- "reqwest 0.12.28",
 "rfd",
 "ring 0.16.20",
 "rkv",
 "rqrr",
 "rust-i18n",
 "rustls 0.23.40",
+ "secp256k1 0.31.1",
 "serde",
 "serde_derive",
 "serde_json",
+ "serde_yaml",
 "sha2 0.10.9",
+ "smolmix",
 "sys-locale",
 "thiserror 2.0.18",
 "tokio 0.2.25",
 "tokio 1.49.0",
- "tokio-socks 0.5.3",
+ "tokio-rustls 0.26.4",
 "tokio-tungstenite 0.26.2",
 "tokio-util 0.2.0",
 "toml 0.9.11+spec-1.1.0",
@@ -4544,13 +4589,15 @@ dependencies = [
 "url",
 "usvg",
 "uuid 0.8.2",
+ "webpki-roots 1.0.7",
 "wgpu",
 "winit",
+ "winresource",
 ]

 [[package]]
 name = "grin_api"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "async-stream",
 "bytes 1.11.1",
@@ -4583,7 +4630,7 @@ dependencies = [

 [[package]]
 name = "grin_chain"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "bit-vec 0.6.3",
 "bitflags 1.3.2",
@@ -4605,7 +4652,7 @@ dependencies = [

 [[package]]
 name = "grin_config"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "dirs 2.0.2",
 "grin_core",
@@ -4620,7 +4667,7 @@ dependencies = [

 [[package]]
 name = "grin_core"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "blake2-rfc",
 "byteorder",
@@ -4645,7 +4692,7 @@ dependencies = [

 [[package]]
 name = "grin_keychain"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "blake2-rfc",
 "byteorder",
@@ -4666,7 +4713,7 @@ dependencies = [

 [[package]]
 name = "grin_p2p"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "bitflags 1.3.2",
 "built",
@@ -4688,7 +4735,7 @@ dependencies = [

 [[package]]
 name = "grin_pool"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "blake2-rfc",
 "chrono",
@@ -4719,7 +4766,7 @@ dependencies = [

 [[package]]
 name = "grin_servers"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "async-stream",
 "chrono",
@@ -4749,7 +4796,7 @@ dependencies = [

 [[package]]
 name = "grin_store"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "byteorder",
 "croaring",
@@ -4767,7 +4814,7 @@ dependencies = [

 [[package]]
 name = "grin_util"
-version = "5.4.0"
+version = "5.4.1"
 dependencies = [
 "anyhow",
 "backtrace",
@@ -5043,6 +5090,15 @@ dependencies = [
 "serde_json",
 ]

+[[package]]
+name = "hash32"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47d60b12902ba28e2730cd37e95b8c9223af2808df9e902d4df49588d1470606"
+dependencies = [
+ "byteorder",
+]
+
 [[package]]
 name = "hashbrown"
 version = "0.12.3"
@@ -5160,6 +5216,16 @@ dependencies = [
 "http 1.4.0",
 ]

+[[package]]
+name = "heapless"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bfb9eb618601c89945a70e254898da93b13be0388091d42117462b265bb3fad"
+dependencies = [
+ "hash32",
+ "stable_deref_trait",
+]
+
 [[package]]
 name = "heck"
 version = "0.3.3"
@@ -5658,7 +5724,6 @@ dependencies = [
 "tokio 1.49.0",
 "tokio-rustls 0.26.4",
 "tower-service",
- "webpki-roots 1.0.7",
 ]

 [[package]]
@@ -6981,6 +7046,12 @@ dependencies = [
 "libc",
 ]

+[[package]]
+name = "managed"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ca88d725a0a943b096803bd34e73a4437208b6077654cc4ecb2947a5f91618d"
+
 [[package]]
 name = "matchers"
 version = "0.2.0"
@@ -7406,6 +7477,23 @@ version = "1.0.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "650eef8c711430f1a879fdd01d4745a7deea475becfb90269c06775983bbf086"

+[[package]]
+name = "nip44"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13b65fa17d19c3eb6b7b4a908eea19a18ded30f1d95a80a08234f1f80ffe1cb9"
+dependencies = [
+ "base64 0.22.1",
+ "chacha20 0.9.1",
+ "constant_time_eq 0.4.2",
+ "hkdf 0.12.4",
+ "hmac 0.12.1",
+ "rand_core 0.9.5",
+ "secp256k1 0.31.1",
+ "sha2 0.10.9",
+ "thiserror 2.0.18",
+]
+
 [[package]]
 name = "nodrop"
 version = "0.1.14"
@@ -11015,44 +11103,6 @@ dependencies = [
 "winreg 0.50.0",
 ]

-[[package]]
-name = "reqwest"
-version = "0.12.28"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
-dependencies = [
- "base64 0.22.1",
- "bytes 1.11.1",
- "futures-core",
- "http 1.4.0",
- "http-body 1.0.1",
- "http-body-util",
- "hyper 1.8.1",
- "hyper-rustls 0.27.9",
- "hyper-util",
- "js-sys",
- "log",
- "percent-encoding",
- "pin-project-lite 0.2.16",
- "quinn",
- "rustls 0.23.40",
- "rustls-pki-types",
- "serde",
- "serde_json",
- "serde_urlencoded",
- "sync_wrapper 1.0.2",
- "tokio 1.49.0",
- "tokio-rustls 0.26.4",
- "tower",
- "tower-http",
- "tower-service",
- "url",
- "wasm-bindgen",
- "wasm-bindgen-futures",
- "web-sys",
- "webpki-roots 1.0.7",
-]
-
 [[package]]
 name = "reqwest"
 version = "0.13.4"
@@ -11778,6 +11828,17 @@ dependencies = [
 "serde",
 ]

+[[package]]
+name = "secp256k1"
+version = "0.31.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c3c81b43dc2d8877c216a3fccf76677ee1ebccd429566d3e67447290d0c42b2"
+dependencies = [
+ "bitcoin_hashes 0.14.100",
+ "rand 0.9.2",
+ "secp256k1-sys 0.11.0",
+]
+
 [[package]]
 name = "secp256k1-sys"
 version = "0.8.2"
@@ -11796,6 +11857,15 @@ dependencies = [
 "cc",
 ]

+[[package]]
+name = "secp256k1-sys"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dcb913707158fadaf0d8702c2db0e857de66eb003ccfdda5924b5f5ac98efb38"
+dependencies = [
+ "cc",
+]
+
 [[package]]
 name = "secrecy"
 version = "0.6.0"
@@ -12304,6 +12374,36 @@ dependencies = [
 "serde",
 ]

+[[package]]
+name = "smolmix"
+version = "1.21.1"
+dependencies = [
+ "futures 0.3.31",
+ "nym-ip-packet-requests",
+ "nym-sdk",
+ "smoltcp",
+ "thiserror 2.0.18",
+ "tokio 1.49.0",
+ "tokio-smoltcp",
+ "tracing",
+]
+
+[[package]]
+name = "smoltcp"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dad095989c1533c1c266d9b1e8d70a1329dd3723c3edac6d03bbd67e7bf6f4bb"
+dependencies = [
+ "bitflags 1.3.2",
+ "byteorder",
+ "cfg-if 1.0.4",
+ "defmt 0.3.100",
+ "heapless",
+ "libc",
+ "log",
+ "managed",
+]
+
 [[package]]
 name = "snow"
 version = "0.9.6"
@@ -13360,6 +13460,20 @@ dependencies = [
 "tokio 1.49.0",
 ]

+[[package]]
+name = "tokio-smoltcp"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5f5d53da1c3095663a8900d86c2abb0ffe02d3f6aa86527b066148fcb33e65e"
+dependencies = [
+ "futures 0.3.31",
+ "parking_lot 0.12.5",
+ "pin-project-lite 0.2.16",
+ "smoltcp",
+ "tokio 1.49.0",
+ "tokio-util 0.7.18",
+]
+
 [[package]]
 name = "tokio-socks"
 version = "0.3.0"
@@ -13541,6 +13655,21 @@ dependencies = [
 "winnow 0.7.14",
 ]

+[[package]]
+name = "toml"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "399b1124a3c9e16766831c6bba21e50192572cdd98706ea114f9502509686ffc"
+dependencies = [
+ "indexmap 2.13.0",
+ "serde_core",
+ "serde_spanned 1.0.4",
+ "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 0.7.14",
+]
+
 [[package]]
 name = "toml_datetime"
 version = "0.6.11"
@@ -13559,6 +13688,15 @@ dependencies = [
 "serde_core",
 ]

+[[package]]
+name = "toml_datetime"
+version = "1.1.1+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3165f65f62e28e0115a00b2ebdd37eb6f3b641855f9d636d3cd4103767159ad7"
+dependencies = [
+ "serde_core",
+]
+
 [[package]]
 name = "toml_edit"
 version = "0.22.27"
@@ -15533,6 +15671,16 @@ dependencies = [
 "windows-sys 0.48.0",
 ]

+[[package]]
+name = "winresource"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0986a8b1d586b7d3e4fe3d9ea39fb451ae22869dcea4aa109d287a374d866087"
+dependencies = [
+ "toml 1.0.6+spec-1.1.0",
+ "version_check",
+]
+
 [[package]]
 name = "wit-bindgen"
 version = "0.51.0"
@@ -87,19 +87,12 @@ rkv = "0.20.0"
 usvg = "0.45.1"
 ring = "0.16.20"
 hyper = { version = "1.6.0", features = ["full"], package = "hyper" }
-hyper-util = {  version = "0.1.19", features = ["http1", "client", "client-legacy"] }
+hyper-util = {  version = "0.1.19", features = ["http1", "client", "client-legacy", "tokio"] }
 http-body-util = "0.1.3"
 bytes = "1.11.0"
 hyper-socks2 = "0.9.1"
 hyper-proxy2 = "0.1.0"
 hyper-tls = "0.6.0"
-## native-tls (via hyper-tls) uses OpenSSL on Linux/Android. Upstream Grim got a
-## vendored, statically-linked OpenSSL for free through arti's `static` feature;
-## dropping arti for Nym took that with it, breaking Android/cross builds (no
-## system OpenSSL for the target) and leaving desktop dynamically linked to
-## libssl. Restore the vendored build so every target is self-contained. Inert on
-## Windows/macOS, which use SChannel / Security.framework instead of OpenSSL.
-openssl = { version = "0.10", features = ["vendored"] }
 async-std = "1.13.2"
 uuid = { version = "0.8.2", features = ["v4"] }
 num-bigint = "0.4.6"
@@ -107,29 +100,42 @@ num-bigint = "0.4.6"
 ## nostr
 nostr-sdk = { version = "0.44", features = ["nip06", "nip44", "nip49", "nip59", "nip98"] }
 nostr-relay-pool = "0.44"
+## NIP-44 v3 (+ v2) encryption for the NIP-17 backward-compat extension (G4).
+## Now published to crates.io as v0.3.0 (the M0 deliverable, all upstream test
+## vectors green) — no local sibling checkout required. secp256k1 0.31, bridged
+## to nostr-sdk's 0.29 in wrapv3.rs (see the secp256k1 note below).
+nip44 = "0.3.0"
+## Only to construct the key types the `nip44` crate takes: nostr-sdk pins
+## secp256k1 0.29, the nip44 crate 0.31 — bridged via byte arrays in wrapv3.rs.
+secp256k1 = "0.31"
 async-wsocket = "0.13"
 tokio-tungstenite = { version = "0.26", features = ["rustls-tls-webpki-roots"] }
 regex = "1"
 base64 = "0.22"
 hex = "0.4"
-## HTTP client routed through the local Nym SOCKS5 sidecar (rustls, no native
-## TLS so it cross-compiles to Android; `socks` so every request — NIP-05,
-## price, avatars — goes over the mixnet, never clearnet).
-reqwest = { version = "0.12", default-features = false, features = ["rustls-tls", "socks"] }
-## SOCKS5 TCP dialer for the nostr relay WebSocket transport over the mixnet.
-tokio-socks = "0.5"
-
-## rustls is pulled by both our TLS (tungstenite/reqwest, ring) and nym-sdk
+## rustls is pulled by both our TLS (tungstenite, ring) and nym-sdk
 ## (aws-lc-rs); with two providers present rustls 0.23 can't auto-pick a default,
 ## so we install ring explicitly at startup (see lib.rs). Direct dep just to make
-## `rustls::crypto::ring::default_provider()` reachable.
+## `rustls::crypto::ring::default_provider()` reachable. NOTHING here may pull
+## rustls-platform-verifier — it panics on Android outside a full app context.
 rustls = { version = "0.23", features = ["ring"] }
+## TLS-over-tunnel for the mixnet HTTP client (webpki roots, never the platform
+## verifier — see the rustls note above).
+tokio-rustls = { version = "0.26", default-features = false, features = ["ring"] }
+webpki-roots = "1"

-## Nym mixnet, linked IN-PROCESS (no sidecar subprocess, no bundled binary). We
-## run the SDK's SOCKS5 client on an internal tokio task exposing 127.0.0.1:1080,
-## the same loopback seam the transport already dials. Path dep: the local nym
-## checkout carries our Android webpki-roots patch.
+## Nym mixnet, linked IN-PROCESS (no sidecar subprocess, no bundled binary).
+## Path deps into the local nym checkout, PINNED at rev
+## f6ed17d949cc19fee0fb51db3cb65771fd510d5b: it carries the load-bearing local
+## commit "http-api-client: preconfigured webpki roots on Android". Do not
+## float the checkout past that rev without re-verifying the Android build.
 nym-sdk = { path = "../nym/sdk/rust/nym-sdk" }
+## smolmix: TCP/UDP tunnel over the mixnet with an AUTO-SELECTED IPR exit —
+## the single-network-requester SPOF is structurally gone (plan G14).
+smolmix = { path = "../nym/smolmix/core" }
+## mix-dns wire codec. Already in the dependency graph via nym-http-api-client
+## (Cargo.lock), so we reuse it instead of vendoring a DNS encode/parse.
+hickory-proto = { version = "0.26", default-features = false, features = ["std"] }

 ## NIP-98 payload hashing
 sha2 = "0.10.8"
@@ -156,6 +162,18 @@ arboard = "3.2.0"
 rfd = "0.17.2"
 interprocess = { version = "2.2.1", features = ["tokio"] }

+## native-tls (via hyper-tls) uses OpenSSL only on Linux/Android. Upstream Grim
+## got a vendored, statically-linked OpenSSL for free through arti's `static`
+## feature; dropping arti for Nym took that with it, breaking Android/cross
+## builds (no system OpenSSL for the target) and leaving desktop dynamically
+## linked to libssl. Restore the vendored build for exactly those two targets so
+## each is self-contained. Windows (SChannel) and macOS (Security.framework)
+## don't use OpenSSL at all, so they must NOT pull it — building openssl-src
+## there is both pointless and fragile (the Windows MSVC runner's bash perl is
+## missing modules its Configure needs).
+[target.'cfg(any(target_os = "linux", target_os = "android"))'.dependencies]
+openssl = { version = "0.10", features = ["vendored"] }
+
 [target.'cfg(target_os = "android")'.dependencies]
 android_logger = "0.15.0"
 jni = "0.21.1"
@@ -166,9 +184,22 @@ eframe = { version = "0.33.2", default-features = false, features = ["glow", "an
 [build-dependencies]
 built = "0.8.0"

+# Windows hosts only: embed the Goblin icon (wix/Product.ico) into goblin.exe via
+# build.rs. Not compiled on Linux/macOS/Android hosts, so other builds are
+# unaffected.
+[target.'cfg(windows)'.build-dependencies]
+winresource = "0.1"
+
 [dev-dependencies]
 nostr-sdk = { version = "0.44", features = ["nip06", "nip44", "nip49", "nip59", "nip98"] }
 tokio = { version = "1.49.0", features = ["full"] }
 base64 = "0.22"
 sha2 = "0.10"
 hex = "0.4"
+serde_yaml = "0.9"
+## G14 transport-validation harness (tests/xrelay_smoke.rs): re-expose deps that
+## already live in the main graph so the smolmix transport can be exercised and
+## its tunnel/mix-dns logs captured. No new compiles — same versions unify.
+log = "0.4.27"
+env_logger = "0.11.3"
+rustls = { version = "0.23", features = ["ring"] }
@@ -4,17 +4,18 @@

 # Goblin

-Goblin is a private, Cash App-style wallet for [GRIN ツ](https://grin.mw) — confidential digital cash on [Mimblewimble](https://github.com/mimblewimble/grin), with no amounts or addresses on the chain.
+Goblin is a private, pay-by-username wallet for [GRIN ツ](https://grin.mw) — confidential digital cash on [Mimblewimble](https://github.com/mimblewimble/grin), with no amounts or addresses on the chain.

-Instead of passing slatepack files back and forth, you **pay a `@username` (or an `npub`)** and the payment is delivered for you as an **end-to-end encrypted message over [nostr](https://github.com/nostr-protocol/nips), routed through the [Nym mixnet](https://nym.com)**. Relays only ever see ciphertext — never the amount, the sender, or the recipient — and the mixnet hides who is talking to whom at the network layer.
+Instead of passing slatepack files back and forth, you **pay a `username` (or an `npub`)** and the payment is delivered for you as an **end-to-end encrypted message over [nostr](https://github.com/nostr-protocol/nips), routed through the [Nym mixnet](https://nym.com)**. Relays only ever see ciphertext — never the amount, the sender, or the recipient — and the mixnet hides who is talking to whom at the network layer.

 Goblin is a fork of the **Grim** egui GRIN wallet: it keeps Grim's full GRIN node/wallet engine and layers a Nostr-native, mobile-first payments experience on top.

 ## What it does

- **Send to people** — pay a `@username` or `npub`; the GRIN slatepack travels as a [NIP-17](https://nips.nostr.com/17) gift-wrapped DM ([kind 1059](https://nostrbook.dev/kinds/1059)) over the Nym mixnet and is applied automatically by the recipient's wallet. No files to swap, no need to both be online at once.
- **In-app identity** — a nostr payment key that is deliberately *not* part of your seed, so you can rotate it any time to stay unlinkable without touching your funds. An optional human-readable `@name` (and hosted avatar) comes from the goblin.st identity service.
- **Private by construction** — GRIN's address-less, confidential chain; every relay and HTTP request (relays, NIP-05 lookups, price, avatars) routed through the [Nym mixnet](https://nym.com) via a bundled `nym-socks5-client` sidecar, so nothing touches the clear net; keys, names and history stay on your device.
+- **Send to people** — pay a `username` or `npub`; the GRIN slatepack travels as a [NIP-17](https://nips.nostr.com/17) gift-wrapped DM ([kind 1059](https://nostrbook.dev/kinds/1059)) over the Nym mixnet and is applied automatically by the recipient's wallet. No files to swap, no need to both be online at once.
+- **Manual slatepacks too** — when you need to pay or get paid without a handle, **Settings → Wallet → Slatepacks** exposes the classic by-hand flow: create a slatepack to send, or paste one to receive, finalize, or pay.
+- **In-app identity** — a nostr payment key that is deliberately *not* part of your seed, so you can rotate it any time to stay unlinkable without touching your funds. An optional human-readable `name` comes from the goblin.st identity service.
+- **Private by construction** — GRIN's address-less, confidential chain; your payments and identity (nostr relays, NIP-05 lookups, price) are routed through the [Nym mixnet](https://nym.com), so who-pays-whom never touches the clear net. The GRIN node connection — block sync and broadcasting your transaction — is direct: public chain data, the same for everyone, and not tied to your identity. Keys, names and history stay on your device.
 - **Configurable amount pairing** — show balances against a world currency, Bitcoin, or sats (rates fetched over the mixnet), or turn the preview off.
 - **Cross-platform** — Linux, macOS, Windows, Android, built in pure Rust on [egui](https://github.com/emilk/egui).

@@ -40,13 +41,16 @@ Both parties only need one relay in common. The default set is the Goblin relay

 ### Desktop (Linux / macOS / Windows)

+Goblin links the [Nym mixnet](https://nym.com) SDK **in-process** — the wallet is a single self-contained binary, no sidecar. The SDK builds from a sibling `../nym` checkout (a pinned nym tree with a small Android TLS patch):
+
 ```
+git clone --branch goblin https://git.us-ea.st/GRIN/nym ../nym
 git submodule update --init --recursive
 cargo build --release
 ./target/release/goblin
 ```

-Goblin routes all of its traffic over the [Nym mixnet](https://nym.com) using a `nym-socks5-client` sidecar that runs alongside the wallet and exposes a local SOCKS5 proxy on `127.0.0.1:1080`. Ship the `nym-socks5-client` binary next to the `goblin` executable (or point `GOBLIN_NYM_BIN` at it), and set the network requester it routes through via `GOBLIN_NYM_PROVIDER` (or bake it into `NETWORK_REQUESTER` in `src/nym/sidecar.rs`). If a SOCKS5 endpoint is already listening on `127.0.0.1:1080`, Goblin reuses it.
+Goblin's identity and payment traffic — nostr relays, NIP-05 lookups and price fetches — is routed over the mixnet through a network requester (the default is baked into `NETWORK_REQUESTER` in `src/nym/sidecar.rs`); the SDK's SOCKS5 listener is run in-process on `127.0.0.1:1080`. If something is already listening there, Goblin reuses it. The GRIN node connection (block sync and transaction broadcast) is **not** mixed — it connects directly, as it carries only public chain data that isn't linked to your wallet.

 ### Android

@@ -60,7 +64,7 @@ Install the Android SDK / NDK, then from the repo root:

 ## Identity service (`goblin-nip05d`)

-The optional `@name` + avatar service lives in `goblin-nip05d/` (axum + SQLite) and is deployed at [goblin.st](https://goblin.st). It implements [NIP-05](https://nips.nostr.com/5) resolution, [NIP-98](https://nips.nostr.com/98)-authenticated registration/transfer/release, and a hardened avatar pipeline (magic-byte sniffing, bounded decode, full re-encode to a clean 256×256 PNG). The wallet is fully usable — and fully anonymous — without it.
+The optional `name` service lives in `goblin-nip05d/` (axum + SQLite) and is deployed at [goblin.st](https://goblin.st). It implements [NIP-05](https://nips.nostr.com/5) resolution, [NIP-98](https://nips.nostr.com/98)-authenticated registration and release (names are never transferred — on a key rotation you release the old name and re-register, or import your existing identity). The wallet is fully usable — and fully anonymous — without it. Avatars aren't stored or served — clients render them from the pubkey (an npub gradient with the username's first letter, else the Grin mark).

 ## License

@@ -11,8 +11,15 @@ android {
        applicationId "st.goblin.wallet"
        minSdk 24
        targetSdk 36
-        versionCode 5
-        versionName "0.3.6"
+        // Version tracks Goblin's build number (GOBLIN_BUILD) so the Android
+        // package identity moves forward with every release instead of freezing.
+        // Same env the Rust side stamps into crate::BUILD; the in-app updater
+        // compares build numbers, and this keeps versionCode (Android's
+        // upgrade/downgrade integer) in lockstep. Bare local gradle → fallback.
+        // ponytail: fallback keeps a keyless ./gradlew working; CI/release sets the env
+        def goblinBuild = (System.getenv("GOBLIN_BUILD") ?: "").trim()
+        versionCode goblinBuild.isEmpty() ? 5 : goblinBuild.toInteger()
+        versionName goblinBuild.isEmpty() ? "0.3.6" : goblinBuild
    }

    lint {
@@ -23,6 +23,14 @@ public class BackgroundService extends Service {
    private boolean mStopped = false;

    private static final int NOTIFICATION_ID = 1;
+    // One-shot "payment received" notification, separate from the persistent
+    // sync notification above.
+    private static final int PAYMENT_NOTIFICATION_ID = 2;
+    private static final String PAYMENT_CHANNEL_ID = "PaymentReceived";
+    // One-shot "payment requested" notification (someone asking us to pay them),
+    // separate from both the sync (id=1) and received-payment (id=2) notifications.
+    private static final int REQUEST_NOTIFICATION_ID = 3;
+    private static final String REQUEST_CHANNEL_ID = "PaymentRequested";
    private NotificationCompat.Builder mNotificationBuilder;

    private String mNotificationContentText = "";
@@ -70,12 +78,13 @@ public class BackgroundService extends Service {
                    if (Build.VERSION.SDK_INT > 25) {
                        startStopIntent.putExtra(EXTRA_NOTIFICATION_ID, NOTIFICATION_ID);
                    }
-                    if (canStart) {
-                        startStopIntent.setAction(ACTION_START_NODE);
-                        PendingIntent i = PendingIntent
-                                .getBroadcast(BackgroundService.this, 1, startStopIntent, PendingIntent.FLAG_IMMUTABLE | PendingIntent.FLAG_ONE_SHOT);
-                        mNotificationBuilder.addAction(R.drawable.ic_start, getStartText(), i);
-                    } else if (canStop) {
+                    // Goblin's background job is the light Nostr-over-Nym payment
+                    // listen (the "Listening for payments" status); the heavy
+                    // integrated node is never STARTED from this notification --
+                    // Goblin defaults to an external node, so the GRIM "Enable"
+                    // action is removed. Only offer STOP as a safety valve if the
+                    // node is somehow already running (started elsewhere).
+                    if (canStop) {
                        startStopIntent.setAction(ACTION_STOP_NODE);
                        PendingIntent i = PendingIntent
                                .getBroadcast(BackgroundService.this, 1, startStopIntent, PendingIntent.FLAG_IMMUTABLE | PendingIntent.FLAG_ONE_SHOT);
@@ -189,6 +198,74 @@ public class BackgroundService extends Service {
        notificationManager.cancel(NOTIFICATION_ID);
    }

+    // Show a one-shot "payment received" notification (id=2), separate from
+    // the persistent sync notification (id=1). Called from native code via
+    // MainActivity when a payment slatepack is received over nostr, possibly
+    // while the app is backgrounded. Localization of the fixed strings is a
+    // follow-up (text is composed here at Java side).
+    public static void notifyPaymentReceived(Context context, String name, String amount) {
+        NotificationManager manager = context.getSystemService(NotificationManager.class);
+        if (manager == null) {
+            return;
+        }
+        // High-importance channel so the notification pops with sound + vibration.
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {
+            NotificationChannel channel = new NotificationChannel(
+                    PAYMENT_CHANNEL_ID, "Payments", NotificationManager.IMPORTANCE_HIGH
+            );
+            manager.createNotificationChannel(channel);
+        }
+        Intent i = context.getPackageManager().getLaunchIntentForPackage(context.getPackageName());
+        PendingIntent pendingIntent = PendingIntent.getActivity(context, 0, i, PendingIntent.FLAG_IMMUTABLE);
+        NotificationCompat.Builder builder = new NotificationCompat.Builder(context, PAYMENT_CHANNEL_ID)
+                .setContentTitle("Payment received")
+                .setContentText(name + " paid " + amount + " ツ")
+                .setSmallIcon(R.drawable.ic_stat_name)
+                .setPriority(NotificationCompat.PRIORITY_HIGH)
+                .setAutoCancel(true)
+                .setDefaults(NotificationCompat.DEFAULT_ALL)
+                .setContentIntent(pendingIntent);
+        try {
+            manager.notify(PAYMENT_NOTIFICATION_ID, builder.build());
+        } catch (SecurityException e) {
+            // POST_NOTIFICATIONS not granted: skip the notification, never the payment.
+        }
+    }
+
+    // Show a one-shot "payment requested" notification (id=3), separate from both
+    // the persistent sync notification (id=1) and the received-payment one (id=2).
+    // Called from native code via MainActivity when a payment request (Invoice1)
+    // arrives over nostr, possibly while the app is backgrounded. Mirrors
+    // notifyPaymentReceived; strings are composed here Java-side.
+    public static void notifyPaymentRequested(Context context, String name, String amount) {
+        NotificationManager manager = context.getSystemService(NotificationManager.class);
+        if (manager == null) {
+            return;
+        }
+        // High-importance channel so the notification pops with sound + vibration.
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {
+            NotificationChannel channel = new NotificationChannel(
+                    REQUEST_CHANNEL_ID, "Payment requests", NotificationManager.IMPORTANCE_HIGH
+            );
+            manager.createNotificationChannel(channel);
+        }
+        Intent i = context.getPackageManager().getLaunchIntentForPackage(context.getPackageName());
+        PendingIntent pendingIntent = PendingIntent.getActivity(context, 0, i, PendingIntent.FLAG_IMMUTABLE);
+        NotificationCompat.Builder builder = new NotificationCompat.Builder(context, REQUEST_CHANNEL_ID)
+                .setContentTitle("Payment requested")
+                .setContentText(name + " requested " + amount + " ツ")
+                .setSmallIcon(R.drawable.ic_stat_name)
+                .setPriority(NotificationCompat.PRIORITY_HIGH)
+                .setAutoCancel(true)
+                .setDefaults(NotificationCompat.DEFAULT_ALL)
+                .setContentIntent(pendingIntent);
+        try {
+            manager.notify(REQUEST_NOTIFICATION_ID, builder.build());
+        } catch (SecurityException e) {
+            // POST_NOTIFICATIONS not granted: skip the notification, never the request.
+        }
+    }
+
    // Start the service.
    public static void start(Context c) {
        if (!isServiceRunning(c)) {
@@ -69,6 +69,9 @@ public class MainActivity extends GameActivity {

    private ActivityResultLauncher<Intent> mFilePickResult = null;
    private ActivityResultLauncher<Intent> mOpenFilePermissionsResult = null;
+    private ActivityResultLauncher<Intent> mFileSaveResult = null;
+    // Source path (in the share cache) staged by Rust for the next saveFile().
+    private String mPendingSavePath = null;

    @SuppressLint("UnspecifiedRegisterReceiverFlag")
    @Override
@@ -145,6 +148,32 @@ public class MainActivity extends GameActivity {
                    }
                });

+        // Register file SAVE result (Storage Access Framework CREATE_DOCUMENT):
+        // copy the staged source file into the user-chosen document.
+        mFileSaveResult = registerForActivityResult(
+                new ActivityResultContracts.StartActivityForResult(),
+                result -> {
+                    String src = mPendingSavePath;
+                    mPendingSavePath = null;
+                    if (result.getResultCode() == Activity.RESULT_OK && src != null) {
+                        Intent data = result.getData();
+                        if (data != null && data.getData() != null) {
+                            Uri uri = data.getData();
+                            try (InputStream is = new FileInputStream(new File(src));
+                                 OutputStream os = getContentResolver().openOutputStream(uri)) {
+                                byte[] buffer = new byte[4096];
+                                int length;
+                                while (is != null && (length = is.read(buffer)) > 0) {
+                                    os.write(buffer, 0, length);
+                                }
+                                if (os != null) os.flush();
+                            } catch (Exception e) {
+                                Log.e("grim", e.toString());
+                            }
+                        }
+                    }
+                });
+
        // Listener for display insets (cutouts) to pass values into native code.
        View content = getWindow().getDecorView().findViewById(android.R.id.content);
        ViewCompat.setOnApplyWindowInsetsListener(content, (v, insets) -> {
@@ -392,6 +421,18 @@ public class MainActivity extends GameActivity {
    // Notify native code to stop activity (e.g. node) if app was terminated from recent apps.
    public native void onTermination();

+    // Called from native code to show a "payment received" notification
+    // (BackgroundService id=2) when a payment arrives over nostr.
+    public void notifyPaymentReceived(String name, String amount) {
+        BackgroundService.notifyPaymentReceived(this, name, amount);
+    }
+
+    // Called from native code to show a "payment requested" notification
+    // (BackgroundService id=3) when a payment request arrives over nostr.
+    public void notifyPaymentRequested(String name, String amount) {
+        BackgroundService.notifyPaymentRequested(this, name, amount);
+    }
+
    // Called from native code to set text into clipboard.
    public void copyText(String data) {
        ClipboardManager clipboard = (ClipboardManager) getSystemService(Context.CLIPBOARD_SERVICE);
@@ -510,6 +551,23 @@ public class MainActivity extends GameActivity {
        startActivity(Intent.createChooser(intent, "Share data"));
    }

+    // Called from native code to SAVE a staged file to a user-chosen location.
+    // Launches the Storage Access Framework create-document picker; the result
+    // handler copies the staged source file into the chosen document.
+    public void saveFile(String path, String name) {
+        mPendingSavePath = path;
+        Intent intent = new Intent(Intent.ACTION_CREATE_DOCUMENT);
+        intent.addCategory(Intent.CATEGORY_OPENABLE);
+        intent.setType("application/octet-stream");
+        intent.putExtra(Intent.EXTRA_TITLE, name);
+        try {
+            mFileSaveResult.launch(intent);
+        } catch (android.content.ActivityNotFoundException ex) {
+            Log.e("grim", ex.toString());
+            mPendingSavePath = null;
+        }
+    }
+
    // Called from native code to share plain text (e.g. a payment link) via the
    // system share sheet.
    public void shareText(String text) {
@@ -534,6 +592,22 @@ public class MainActivity extends GameActivity {
        }
    }

+    // Called from native code to play a tiny "tick" haptic on a successful copy.
+    public void vibrateCopy() {
+        Vibrator vibrator = (Vibrator) getSystemService(Context.VIBRATOR_SERVICE);
+        if (vibrator == null || !vibrator.hasVibrator()) {
+            return;
+        }
+        // One short, light tick — a confirmation, not an alert.
+        if (Build.VERSION.SDK_INT >= 29) {
+            vibrator.vibrate(VibrationEffect.createPredefined(VibrationEffect.EFFECT_TICK));
+        } else if (Build.VERSION.SDK_INT >= 26) {
+            vibrator.vibrate(VibrationEffect.createOneShot(20, VibrationEffect.DEFAULT_AMPLITUDE));
+        } else {
+            vibrator.vibrate(20);
+        }
+    }
+
    // Called from native code to set status-bar icon color to contrast the
    // in-app theme. white = light icons for a dark background. The app draws
    // edge-to-edge, so the OS status-bar background is the app's own content;
@@ -557,7 +631,12 @@ public class MainActivity extends GameActivity {
    // Called from native code to pick the file.
    public void pickFile() {
        Intent intent = new Intent(Intent.ACTION_GET_CONTENT);
-        intent.setType("text/*");
+        // Permissive type: custom extensions like .backup have no registered
+        // MIME type, so any narrower filter greys them out in the picker and
+        // locks users out of restoring their identity. Content is validated
+        // on the native side after selection.
+        intent.setType("*/*");
+        intent.addCategory(Intent.CATEGORY_OPENABLE);
        try {
            mFilePickResult.launch(Intent.createChooser(intent, "Pick file"));
        } catch (android.content.ActivityNotFoundException ex) {
@@ -46,12 +46,12 @@ fn main() {

 	if cfg!(target_os = "windows") {
 		Command::new("cmd")
-			.args(&["/C", &git_hooks])
+			.args(["/C", &git_hooks])
 			.output()
 			.expect("failed to execute git config for hooks");
 	} else {
 		Command::new("sh")
-			.args(&["-c", &git_hooks])
+			.args(["-c", &git_hooks])
 			.output()
 			.expect("failed to execute git config for hooks");
 	}
@@ -59,4 +59,30 @@ fn main() {
 	// Goblin links the Nym mixnet SDK in-process (see src/nym/) — no sidecar
 	// subprocess, no bundled/embedded helper binary, and no Tor/webtunnel. There
 	// is nothing transport-related to build or embed here.
+
+	// Embed the Goblin icon into goblin.exe so Explorer, the taskbar and Alt-Tab
+	// show it even for the bare exe (the .msi shortcuts already carry it). No-op
+	// on every non-Windows platform.
+	embed_windows_icon();
 }
+
+/// Embed `wix/Product.ico` (the yellow Goblin icon) as goblin.exe's application
+/// icon resource. Gated to Windows hosts — that's where the `winresource`
+/// build-dependency is compiled and where the MSVC resource compiler (`rc.exe`,
+/// shipped on the windows-latest runner) is available; our Windows builds are
+/// always native MSVC, so host == target == windows.
+#[cfg(windows)]
+fn embed_windows_icon() {
+	if env::var("CARGO_CFG_TARGET_OS").as_deref() != Ok("windows") {
+		return;
+	}
+	let mut res = winresource::WindowsResource::new();
+	res.set_icon("wix/Product.ico");
+	if let Err(e) = res.compile() {
+		// Don't fail the build over the icon — just flag it.
+		println!("cargo:warning=winresource icon embed failed: {e}");
+	}
+}
+
+#[cfg(not(windows))]
+fn embed_windows_icon() {}
@@ -0,0 +1,377 @@
+# Goblin transactions — how a payment works, end to end
+
+This document explains the full lifecycle of a Goblin payment: how money moves,
+every status it passes through, and the small guarantees that keep it safe. It is
+written against the code in `src/nostr/` and `src/wallet/` — function names and
+files are cited (line numbers drift, so they aren't).
+
+---
+
+## 1. The big picture: two layers
+
+A Goblin payment is **a Grin transaction wrapped in a private nostr message**.
+
+1. **Grin layer (the money).** Grin/Mimblewimble transactions are *interactive*:
+   the sender and recipient exchange a "slate" that passes through states until
+   it's finalized and posted on-chain. There are no addresses and no amounts on
+   the chain. Goblin reuses GRIM's full Grin node + wallet engine for this.
+
+2. **Nostr layer (the delivery).** Instead of making you hand slate files back
+   and forth, Goblin delivers each slate as an **end-to-end-encrypted nostr
+   direct message**, routed through the **Nym mixnet**. You pay a `username` or
+   `npub`; the recipient's wallet applies the slate automatically.
+
+The slate is the payload; nostr is the transport. Everything below is about how
+those two layers move together and what state is tracked at each step.
+
+### Slate states (Grin layer)
+
+Interactive Grin slates pass through numbered states. Goblin uses two flows:
+
+| Flow | States | Who builds what |
+| --- | --- | --- |
+| **Standard** (sender pushes money) | `Standard1` → `Standard2` → `Standard3` | Sender builds S1 (locks their outputs), recipient replies S2, sender finalizes S3 and posts |
+| **Invoice** (recipient pulls money) | `Invoice1` → `Invoice2` → `Invoice3` | Requester builds I1 (the ask), payer replies I2 (pays), requester finalizes I3 and posts |
+
+### Status + direction (Goblin's nostr metadata)
+
+For each payment Goblin stores a `TxNostrMeta` (`src/nostr/types.rs`) keyed by
+slate id, with a **direction** and a **status**:
+
+`NostrTxDirection`:
+- `Sent` — we pushed funds (we created S1).
+- `Received` — we were paid (we replied S2).
+- `RequestedByUs` — we issued an invoice (we created I1).
+- `RequestedOfUs` — someone invoiced us and we paid it (we replied I2).
+
+`NostrSendStatus`:
+- `Created` — slate built locally, DM not dispatched yet (durable checkpoint).
+- `AwaitingS2` — S1 sent, waiting for the recipient's S2 reply.
+- `ReceivedNoReply` — we processed an incoming S1 (or I1) and built our reply, but haven't dispatched it yet (crash-recovery point).
+- `RepliedS2` — our S2 reply was dispatched (we received a payment).
+- `AwaitingI2` — our I1 invoice was sent, waiting for the payer's I2.
+- `PaidAwaitingFinalize` — we paid an invoice (sent I2); the requester finalizes.
+- `Finalized` — slate finalized and posted on-chain.
+- `SendFailed` — DM dispatch failed; eligible for retry.
+- `Cancelled` — cancelled locally (manual cancel or 24h expiry).
+
+`Finalized` and `Cancelled` are **terminal**.
+
+---
+
+## 2. Identity & addressing
+
+Your nostr identity is a key that is **deliberately not derived from your wallet
+seed** (`src/nostr/identity.rs`) — so you can rotate it any time to stay
+unlinkable without ever touching your funds. It's stored encrypted at rest
+(NIP-49 ncryptsec under your wallet password).
+
+You can optionally claim a human-readable **`username`** from a **name authority**
+(a NIP-05 server). The authority is configurable (Settings → Identity → Name
+authority; `NostrConfig::{nip05_server, home_domain, set_nip05_server}`), which is
+what makes Goblin **federated**: a user on `bob@otherinstance.com` can pay
+`alice@goblin.st`, because a full `name@domain` always resolves against that
+domain's `/.well-known/nostr.json`. Bare names (`alice`) resolve against *your*
+configured home authority.
+
+Display rules (`data::display_name`, no `@` ever shown):
+- A local **petname** wins.
+- A verified name on **your home authority** shows bare (`alice`) + a check.
+- A verified name on a **foreign authority** shows `alice · domain` + a check, so
+  it can never masquerade as a home name.
+- Otherwise: a short npub.
+
+Names are kept fresh: see [§11 Name freshness](#11-contacts--name-freshness).
+
+---
+
+## 3. Transport: NIP-17 gift wraps over Nym
+
+A payment DM is built and sent by `send_payment_dm`; control messages (voids) by
+`send_control_dm` (both in `src/nostr/client.rs`). The message structure
+(`src/nostr/protocol.rs`):
+
+- The **payload** is the raw Grin slatepack armor (`BEGINSLATEPACK… ENDSLATEPACK`)
+  inside a kind-14 rumor, prefixed with a human preamble (`[Goblin] GRIN payment
+  message — open in Goblin …`) so a non-Goblin nostr client shows something sane.
+- **Tags:** a `["goblin","1"]` protocol marker always; an optional `["subject", …]`
+  carrying the user's note (sanitized); control DMs carry
+  `["goblin-action","void", slate_id]` and **no** slatepack.
+- The rumor is sealed and wrapped as a **kind-1059 gift wrap** (NIP-59 + NIP-44
+  encryption) via nostr-sdk's `send_private_msg_to`. Relays only ever see
+  ciphertext — never the amount, sender, or recipient.
+
+**Where it's delivered:** the recipient's **kind-10050 DM-relay list**
+(`fetch_dm_relays`), with our own default relays as fallback, plus any relay
+hints carried by a pasted `nprofile`. Default relays: `relay.goblin.st`,
+`relay.damus.io`, `nos.lol` (`src/nostr/relays.rs`), capped at `MAX_DM_RELAYS`.
+
+**How relays are reached:** every relay connection runs through the in-process
+**Nym mixnet** SOCKS5 proxy (`NymWebSocketTransport`; `run_service` waits for the
+proxy to be ready before dialing). The mixnet hides who-talks-to-whom at the
+network layer. The Grin *node* connection (block sync + broadcasting the final tx)
+is direct clearnet — it's public chain data, the same for everyone, not tied to
+your identity.
+
+The UI tracks an outgoing attempt via a coarse **send phase**
+(`client::send_phase`): `IDLE / WORKING / SENT / FAILED / REQUEST_BLOCKED`, with a
+human-readable failure reason on `FAILED`.
+
+---
+
+## 4. Flow A — Pay by username/npub (Standard, we send)
+
+Dispatched as `WalletTask::NostrSend(amount, npub, note, relay_hints)`; handled in
+`wallet.rs`.
+
+1. `w.send(amount)` builds the **S1** slate and **locks our outputs** (the funds
+   are reserved but not yet spent).
+2. **Save meta `Created`** *before* any network call — this is the durable point
+   a crash recovers from.
+3. `send_payment_dm` delivers S1 → **`AwaitingS2`** (storing the gift-wrap event
+   id). On dispatch failure → **`SendFailed`** (retryable). On success the contact
+   is created/refreshed (so people you pay appear in Suggested) and a background
+   NIP-05 lookup resolves their name.
+4. The recipient replies S2 (Flow B). When their S2 gift wrap arrives, the ingest
+   guard routes it to `nostr_finalize_post`, which finalizes **S3** and posts it
+   on-chain → **`Finalized`**.
+
+```
+Created ──(S1 sent)──▶ AwaitingS2 ──(their S2 arrives)──▶ Finalized
+   └──(dispatch fails)──▶ SendFailed ──(retry)──▶ AwaitingS2
+   └──(manual cancel / 24h expiry)──▶ Cancelled  (outputs unlocked)
+```
+
+---
+
+## 5. Flow B — Receiving (Standard, we're paid)
+
+Our service subscribes to kind-1059 gift wraps addressed to us
+(`run_service`). When an **S1** arrives, `handle_wrap` runs the ingest pipeline
+(§7) and `decide()` classifies it by the **accept policy**:
+
+- `Everyone` → **AutoReceive** (auto-reply S2).
+- `Contacts` → AutoReceive if the sender is a known contact, else **SurfaceIncoming** (an approval card).
+- `Ask` → always SurfaceIncoming.
+
+**AutoReceive:** `nostr_receive` builds the **S2** reply; we save meta
+`Received` / **`ReceivedNoReply`**, mark the message processed, then dispatch S2 →
+**`RepliedS2`**. If the S2 dispatch fails we stay at `ReceivedNoReply` and resend
+on the next start (§9). The sender then finalizes S3 (Flow A step 4).
+
+```
+(incoming S1) ──▶ ReceivedNoReply ──(S2 dispatched)──▶ RepliedS2
+                      └──(dispatch fails)──▶ stays ReceivedNoReply → resent on restart
+```
+
+**SurfaceIncoming** instead stores a `PaymentRequest` (status `Pending`) for the
+user to approve or decline — see Flow D.
+
+---
+
+## 6. Flow C — Request money (Invoice)
+
+**We request** — `WalletTask::NostrRequest(amount, npub, note, …)`:
+
+1. First we check the recipient hasn't opted out: `accepts_requests` reads their
+   kind-0 `goblin_accepts_requests` field; an explicit `false` → phase
+   `REQUEST_BLOCKED` and we stop (fail-open: unknown/unreachable = allowed).
+2. `issue_invoice(amount)` builds **I1** (no outputs locked — it's just an ask).
+3. Save meta `RequestedByUs / Created`, dispatch I1 → **`AwaitingI2`**.
+4. When the payer's **I2** arrives, the ingest guard finalizes **I3** and posts →
+   **`Finalized`**.
+
+**They approve & pay** (the other side of the same flow) is Flow D.
+
+```
+Created ──(I1 sent)──▶ AwaitingI2 ──(their I2 arrives)──▶ Finalized
+   └──(SendFailed → retry)        └──(cancel / expiry)──▶ Cancelled
+```
+
+---
+
+## 7. Flow D — Approving an incoming request (we pay an invoice)
+
+Someone's **I1** is *always* surfaced as a `PaymentRequest`, **never auto-paid**
+(a hard security invariant). It shows in the Requests list. The user can:
+
+- **Approve** → `WalletTask::NostrPayRequest(rumor_id)`: re-parse the stored
+  slatepack (must still be I1), `nostr_pay` builds **I2** (this is where *we* pay),
+  save meta `RequestedOfUs / ReceivedNoReply`, dispatch I2 → **`PaidAwaitingFinalize`**,
+  mark the request `Approved`. The requester then finalizes I3.
+  A "Paying…" spinner shows while this runs; the card clears on success.
+- **Decline** → `WalletTask::NostrDeclineRequest(rumor_id)`: mark `Declined` and
+  send a **void** control DM so the requester's side clears too.
+
+A surfaced incoming *Standard* S1 (from SurfaceIncoming) is approved the same way,
+but routes through `nostr_receive` (Flow B) rather than `nostr_pay`.
+
+`RequestStatus`: `Pending → Approved | Declined | Expired | Cancelled`
+(`Cancelled` = the requester withdrew it via a void).
+
+---
+
+## 8. The ingest guard — `decide()`
+
+Every incoming gift wrap is judged by `decide()` (`src/nostr/ingest.rs`), a
+**positive allow-list**: anything not explicitly accepted is `Drop`ped. This is
+the security core. Summary:
+
+| Incoming state | Condition | Decision |
+| --- | --- | --- |
+| `Standard1` | amount 0, or slate already known | **Drop** |
+| `Standard1` | new, policy `Everyone` (or `Contacts` + known) | **AutoReceive** |
+| `Standard1` | new, policy `Contacts` + unknown, or `Ask` | **SurfaceIncoming** |
+| `Standard2` | matches our pending `Sent` tx (status `AwaitingS2/Created/SendFailed`) **and** sender == stored counterparty **and** the tx exists | **FinalizePost** |
+| `Standard2` | sender mismatch, or status `Cancelled`/`Finalized`, or no meta | **Drop** |
+| `Invoice1` | amount 0, already known, or incoming-requests disabled | **Drop** |
+| `Invoice1` | otherwise | **SurfaceRequest** (never auto-pay) |
+| `Invoice2` | matches our pending `RequestedByUs` tx + sender match | **FinalizePost** |
+| `Invoice3` / unknown | — | **Drop** |
+
+Key consequences:
+- A **late S2 on a cancelled send** falls through to `Drop` — so cancelling is
+  safe even if the recipient's reply is still in flight (the cancel marks the meta
+  `Cancelled` *first*, and `decide()` then drops the S2).
+- Finalize only happens for a slate we are actually waiting on, from the exact key
+  we sent to.
+- Invoices are never auto-paid.
+
+---
+
+## 9. Cancel & reclaim
+
+A stuck outgoing send (recipient never replied) locks your outputs. You can
+reclaim them manually from the receipt's **"Cancel payment"** button, or the 24h
+auto-expiry does it for you (§10).
+
+`WalletTask::NostrCancelSend(slate_id)` (`wallet.rs`):
+1. Take the `cancel_finalize_lock` — this **serializes against a concurrent S2
+   finalize** so the two can't both win (cancel-and-post would be a double action).
+2. **Re-check live state under the lock.** If the tx is already `Finalized`, or
+   confirmed/posted on-chain → do nothing and return `CancelOutcome::AlreadyCompleted`
+   ("This payment already went through and can't be cancelled"). If already
+   `Cancelled` → idempotent success.
+3. Otherwise mark the meta **`Cancelled` first**, then `w.cancel(tx_id)` to unlock
+   the Grin outputs, then best-effort send a **void** control DM to the recipient
+   (they're likely offline). → `CancelOutcome::Cancelled` ("your funds are
+   available again").
+
+**Receipt button visibility** (`cancelable_send` gate): shown only while the send
+is still unanswered — direction `Sent`, status in `{Created, AwaitingS2,
+SendFailed}`, **not** confirmed, **not** already cancelled, and either it never
+reached a relay (`SendFailed`, shown immediately) or the grace window
+(`cancel_grace_secs`, default 600s) has passed. The instant the recipient accepts
+(status leaves that set) the button disappears.
+
+**Recipient side / void ordering:** a void control message marks the slate so that
+if the recipient's wallet later (or earlier) sees the S1, it's dropped — including
+the **void-before-S1** race, where the void arrives first and is recorded as
+`void:{slate_id}:{sender}` so the subsequent S1 is dropped.
+
+There are sibling tasks for the other directions: `NostrCancelOutgoing` (withdraw
+an invoice we issued) and `NostrDeclineRequest` (decline an incoming request) —
+both send a void and mark the local record.
+
+---
+
+## 10. Auto-expiry (24h)
+
+`expire_stale` (`src/nostr/client.rs`) runs from the sync loop. Any non-terminal
+meta older than `expiry_secs` (default 24h) is expired:
+
+- If it **locked our outputs** (`expiry_locks_outputs`: a `Sent` send in
+  `Created/AwaitingS2/SendFailed`, or a `RequestedOfUs` invoice we paid in
+  `PaidAwaitingFinalize`) → cancel the Grin tx to unlock, and mark meta `Cancelled`.
+- If it locked nothing of ours (incoming payments, invoices we issued) → just
+  annotate `Cancelled`.
+- Pending incoming `PaymentRequest`s flip to `Expired`.
+
+This is the same unlock path as manual cancel; the manual button just lets you act
+before the 24h.
+
+---
+
+## 11. Crash recovery (`reconcile`)
+
+On service start, `reconcile` (`client.rs`) re-dispatches any pending outgoing
+message within a 7-day window, by `(direction, status)`:
+
+| Direction · status | Slate | Action |
+| --- | --- | --- |
+| `Sent` · `Created`/`SendFailed` | Standard1 | resend S1 → `AwaitingS2` |
+| `RequestedByUs` · `Created`/`SendFailed` | Invoice1 | resend I1 → `AwaitingI2` |
+| `Received` · `ReceivedNoReply` | Standard2 | resend S2 → `RepliedS2` |
+| `RequestedOfUs` · `ReceivedNoReply` | Invoice2 | resend I2 → `PaidAwaitingFinalize` |
+
+Because the slatepack text is persisted and the meta is written *before* every
+dispatch, a crash at any point is recoverable: re-sending an already-delivered
+message is harmless (the peer dedups it; see §12).
+
+---
+
+## 12. Confirmations (X / N)
+
+A posted Grin tx matures over `min_confirmations` blocks (default 10) before it's
+spendable. Grin marks a tx `confirmed` at the **first** block, but Goblin's
+receipt counts toward the spendable threshold so the number actually moves
+(`data::receipt_detail`):
+
+- broadcast, no block yet → `0 / N`
+- on-chain, immature → `count / N` where `count = tip − inclusion_height + 1`
+- `count ≥ N` → matured (shown as complete; the receipt's network-fee row is shown
+  only for outgoing payments — a recipient pays no fee).
+
+---
+
+## 13. Reliability primitives
+
+- **Dedup / processed markers** (`store::{is_processed, mark_processed,
+  prune_processed}`): every wrap is recorded at three levels — the gift-wrap event
+  id, the inner rumor id, and `slate:{id}:{state}` — so a replayed or re-sent
+  message is processed exactly once. Markers TTL out after 30 days
+  (pruned on start + hourly).
+- **Rate limiting** (`allow_sender`): per-sender sliding window — 30 events/hour
+  for known contacts, 10/hour for unknowns — plus a global decrypt ceiling
+  (~120 NIP-44 unwraps/min) to bound CPU/battery against fresh-keypair spam. A
+  message dropped purely for the *global* ceiling isn't marked processed, so it can
+  be retried later.
+- **Seal integrity:** the gift-wrap seal signer must equal the inner rumor author,
+  and self-addressed messages are dropped.
+- **The cancel/finalize lock** (§9) prevents a cancel and a finalize from both
+  succeeding on the same slate.
+
+---
+
+## 14. Name freshness (contacts)
+
+Cached `@usernames` are re-validated against the name authority on a periodic
+sweep (`NAME_REVERIFY_INTERVAL_SECS`, ~78s, capped per tick), and once at app open
+(persisted `last_name_sweep_at`, gated to the interval).
+`nip05::check` returns `Verified / Mismatch / Unreachable`: a name is only
+**cleared** (falls back to the npub) on a definitive `Mismatch` (the server says
+it's gone or now maps to a different key) — never on a transient network failure.
+This catches released or reassigned names and stops a freed name from
+impersonating someone. A user-set petname is never touched.
+
+---
+
+## 15. File map
+
+| Concern | File |
+| --- | --- |
+| Status / direction / meta types | `src/nostr/types.rs` |
+| Gift-wrap + control message build/parse | `src/nostr/protocol.rs` |
+| Service loop, send/receive/finalize, expiry, reconcile, name sweep | `src/nostr/client.rs` |
+| Ingest allow-list | `src/nostr/ingest.rs` |
+| Wallet task handlers (NostrSend / Request / PayRequest / CancelSend / finalize) | `src/wallet/wallet.rs` |
+| Task definitions | `src/wallet/types.rs` |
+| Metadata + dedup + contacts store | `src/nostr/store.rs` |
+| NIP-05 resolve / verify / register, name authority | `src/nostr/nip05.rs` |
+| Identity (key, NIP-49 backup) | `src/nostr/identity.rs` |
+| Receipt / activity / confirmations / display name | `src/gui/views/goblin/data.rs` |
+| Relay defaults + name-authority defaults | `src/nostr/relays.rs` |
+
+---
+
+🤖 Documentation written with AI pair-programming assistance (Claude).
@@ -0,0 +1,112 @@
+//! Avatar sizing-checkpoint harness: renders the REAL `avatar_tex` (custom
+//! image, no ring) and `gradient_avatar` across every size the app uses.
+//! Names never affect the avatar — this just checks sizing by eye.
+//! Run: `cargo run --example avatar_ring` (screenshots taken externally).
+
+use eframe::egui;
+use grim::gui::views::goblin::widgets as w;
+
+const SIZES: [f32; 6] = [28.0, 40.0, 48.0, 56.0, 72.0, 96.0];
+const NAMES: [&str; 3] = ["alice", "bob", "carmen"];
+
+struct App {
+	tex: Vec<egui::TextureHandle>,
+}
+
+/// A synthetic "profile photo": diagonal two-tone blend with a light disc, so
+/// sizing is judged against something photo-like rather than a flat fill.
+fn photo(ctx: &egui::Context, name: &str, a: [u8; 3], b: [u8; 3]) -> egui::TextureHandle {
+	const N: usize = 128;
+	let mut px = Vec::with_capacity(N * N);
+	for y in 0..N {
+		for x in 0..N {
+			let t = (x + y) as f32 / (2 * N) as f32;
+			let mut r = a[0] as f32 * (1.0 - t) + b[0] as f32 * t;
+			let mut g = a[1] as f32 * (1.0 - t) + b[1] as f32 * t;
+			let mut bl = a[2] as f32 * (1.0 - t) + b[2] as f32 * t;
+			let dx = x as f32 - 44.0;
+			let dy = y as f32 - 40.0;
+			if (dx * dx + dy * dy).sqrt() < 26.0 {
+				r = (r + 90.0).min(255.0);
+				g = (g + 90.0).min(255.0);
+				bl = (bl + 90.0).min(255.0);
+			}
+			px.push(egui::Color32::from_rgb(r as u8, g as u8, bl as u8));
+		}
+	}
+	let img = egui::ColorImage {
+		size: [N, N],
+		source_size: egui::Vec2::splat(N as f32),
+		pixels: px,
+	};
+	ctx.load_texture(name.to_string(), img, Default::default())
+}
+
+impl App {
+	fn new(cc: &eframe::CreationContext) -> Self {
+		egui_extras::install_image_loaders(&cc.egui_ctx);
+		let tex = vec![
+			photo(&cc.egui_ctx, "alice", [180, 120, 90], [90, 60, 120]),
+			photo(&cc.egui_ctx, "bob", [70, 110, 160], [40, 160, 120]),
+			photo(&cc.egui_ctx, "carmen", [160, 70, 90], [220, 170, 80]),
+		];
+		Self { tex }
+	}
+}
+
+impl eframe::App for App {
+	fn update(&mut self, ctx: &egui::Context, _f: &mut eframe::Frame) {
+		egui::CentralPanel::default()
+			.frame(egui::Frame::default().fill(egui::Color32::from_rgb(0xFA, 0xFA, 0xF7)))
+			.show(ctx, |ui| {
+				ui.add_space(10.0);
+				ui.heading("avatar sizing sheet (no ring — names never affect the avatar)");
+				ui.add_space(12.0);
+				for (i, name) in NAMES.iter().enumerate() {
+					ui.horizontal(|ui| {
+						ui.add_space(12.0);
+						ui.label(format!("{name:>7}"));
+						for size in SIZES {
+							ui.add_space(14.0);
+							w::avatar_tex(ui, &self.tex[i], name, size);
+						}
+					});
+					ui.add_space(14.0);
+				}
+				ui.separator();
+				ui.label("anonymous npub (grinmark gradient):");
+				ui.add_space(8.0);
+				ui.horizontal(|ui| {
+					ui.add_space(12.0);
+					ui.label("        ");
+					for (i, size) in SIZES.iter().enumerate() {
+						ui.add_space(14.0);
+						w::gradient_avatar(ui, &format!("{i}deadbeef{i}"), *size);
+					}
+				});
+				ui.add_space(10.0);
+				ui.horizontal(|ui| {
+					ui.add_space(12.0);
+					ui.label("sizes:  ");
+					for size in SIZES {
+						ui.add_space(14.0);
+						ui.allocate_ui(egui::Vec2::new(size, 16.0), |ui| {
+							ui.centered_and_justified(|ui| ui.small(format!("{size}")));
+						});
+					}
+				});
+			});
+	}
+}
+
+fn main() -> eframe::Result {
+	let opts = eframe::NativeOptions {
+		viewport: egui::ViewportBuilder::default().with_inner_size([900.0, 640.0]),
+		..Default::default()
+	};
+	eframe::run_native(
+		"avatar-ring",
+		opts,
+		Box::new(|cc| Ok(Box::new(App::new(cc)))),
+	)
+}
@@ -0,0 +1,105 @@
+// Local network measurement for the Nym read tunnel. Uses the wallet's REAL
+// transport (warm_up + tuned tunnel + reselect + DNS cache + HTTP keep-alive
+// pool), then fetches the live price API over the mixnet on a fixed interval
+// so we can see (a) cold connect time, (b) whether the connection stays warm,
+// (c) per-fetch latency over time.
+//
+//   cargo run --release --example tunnel_measure -- <seconds> [interval_secs]
+//
+// e.g. `-- 300` (5 min) or `-- 600 15` (10 min, every 15s).
+
+use std::time::{Duration, Instant};
+
+const PRICE_URL: &str = "https://api.coingecko.com/api/v3/simple/price?ids=grin&vs_currencies=usd";
+
+#[tokio::main]
+async fn main() {
+	let _ = rustls::crypto::ring::default_provider().install_default();
+
+	let args: Vec<String> = std::env::args().collect();
+	let total_secs: u64 = args.get(1).and_then(|s| s.parse().ok()).unwrap_or(300);
+	let interval_secs: u64 = args.get(2).and_then(|s| s.parse().ok()).unwrap_or(15);
+
+	let run_start = Instant::now();
+	println!("[t=0.0s] warm_up(): starting the tunnel");
+	grim::nym::warm_up();
+
+	// Cold connect time: poll is_ready().
+	let mut connect_ms = None;
+	let t_connect = Instant::now();
+	while t_connect.elapsed() < Duration::from_secs(120) {
+		if grim::nym::is_ready() {
+			connect_ms = Some(t_connect.elapsed().as_millis());
+			break;
+		}
+		tokio::time::sleep(Duration::from_millis(200)).await;
+	}
+	match connect_ms {
+		Some(ms) => println!(
+			"[t={:.1}s] TUNNEL READY (cold connect {} ms)",
+			run_start.elapsed().as_secs_f64(),
+			ms
+		),
+		None => {
+			println!("tunnel never became ready in 120s; aborting");
+			return;
+		}
+	}
+
+	// Warm-loop: fetch price over the mixnet every interval, record latency.
+	let mut lats: Vec<u128> = vec![];
+	let mut fails = 0u32;
+	let deadline = run_start + Duration::from_secs(total_secs);
+	let mut n = 0u32;
+	while Instant::now() < deadline {
+		n += 1;
+		let t = Instant::now();
+		let ok = grim::nym::http_request("GET", PRICE_URL.to_string(), None, vec![]).await;
+		let ms = t.elapsed().as_millis();
+		match ok {
+			Some(body) if body.contains("grin") => {
+				lats.push(ms);
+				println!(
+					"[t={:.1}s] fetch #{n}: {} ms  ready={}",
+					run_start.elapsed().as_secs_f64(),
+					ms,
+					grim::nym::is_ready()
+				);
+			}
+			other => {
+				fails += 1;
+				println!(
+					"[t={:.1}s] fetch #{n}: FAIL after {} ms (ready={}, body={:?})",
+					run_start.elapsed().as_secs_f64(),
+					ms,
+					grim::nym::is_ready(),
+					other.map(|b| b.chars().take(40).collect::<String>())
+				);
+			}
+		}
+		tokio::time::sleep(Duration::from_secs(interval_secs)).await;
+	}
+
+	// Summary.
+	lats.sort_unstable();
+	let n_ok = lats.len();
+	let sum: u128 = lats.iter().sum();
+	let median = lats.get(n_ok / 2).copied().unwrap_or(0);
+	println!(
+		"\n==== SUMMARY ({}s run, {}s interval) ====",
+		total_secs, interval_secs
+	);
+	println!("cold connect: {} ms", connect_ms.unwrap());
+	println!("fetches: {} ok, {} failed", n_ok, fails);
+	if n_ok > 0 {
+		println!(
+			"warm fetch latency ms: min {} / median {} / max {} / mean {}",
+			lats.first().unwrap(),
+			median,
+			lats.last().unwrap(),
+			sum / n_ok as u128
+		);
+		let head: Vec<u128> = lats.iter().take(3).copied().collect();
+		println!("(sorted sample) fastest 3: {:?}", head);
+	}
+}
@@ -0,0 +1,48 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
+ "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg"
+ width="600.000000pt" height="601.000000pt" viewBox="0 0 600.000000 601.000000"
+ preserveAspectRatio="xMidYMid meet">
+<g transform="translate(0.000000,601.000000) scale(0.050000,-0.050000)"
+fill="#000000" stroke="none">
+<path d="M195 11784 c-515 -1551 98 -2966 1520 -3514 171 -66 171 -72 2 -72
+-415 0 -893 215 -1273 572 -178 167 -181 163 -77 -83 478 -1130 1770 -1734
+2963 -1384 283 83 309 101 420 292 376 648 1038 1116 1763 1245 l143 26 100
+202 c887 1780 -911 3344 -3076 2675 l-170 -52 220 -14 c480 -32 818 -114 1118
+-273 258 -137 548 -414 624 -597 l32 -76 -87 76 c-435 375 -938 524 -1557 461
+-273 -28 -340 -39 -740 -120 -893 -182 -1449 24 -1756 650 l-98 200 -71 -214z"/>
+<path d="M9720 10053 c0 -146 -256 -556 -441 -705 -381 -308 -766 -380 -1559
+-290 -1178 133 -2048 -270 -2488 -1152 -57 -115 -92 -149 -92 -89 0 78 123
+415 199 548 43 74 73 135 67 135 -25 0 -397 -184 -512 -253 -962 -578 -1594
+-1675 -1594 -2767 0 -209 -2 -210 -154 -95 -393 297 -523 388 -751 525 -321
+192 -571 311 -843 400 -290 95 -302 94 -242 -15 52 -95 166 -372 191 -465 9
+-33 34 -121 56 -195 48 -161 120 -508 194 -935 118 -684 437 -1371 795 -1715
+185 -178 324 -239 594 -262 144 -13 150 -15 147 -63 -1 -27 -14 -174 -28 -326
+-83 -902 258 -1568 1037 -2024 139 -81 161 -80 127 4 -37 96 -85 369 -96 546
+l-10 170 46 -60 c328 -431 869 -753 1497 -891 351 -77 1285 -67 1426 15 9 5
+-104 50 -250 98 -653 218 -1499 778 -1704 1129 -43 73 -54 78 188 -79 230
+-149 543 -303 750 -369 783 -249 1542 -242 2332 20 l274 91 106 -83 c298 -236
+798 -328 1259 -231 197 42 196 38 32 169 -156 124 -344 356 -443 546 l-60 116
+70 52 c544 408 783 906 627 1300 l-41 102 170 138 c442 355 584 624 813 1537
+186 742 257 952 452 1328 l118 227 -145 -14 c-693 -68 -1425 -411 -1729 -810
+-99 -130 -112 -127 -165 44 -54 175 -217 511 -308 636 -64 88 -70 91 -224 117
+-419 70 -947 328 -1223 597 -98 96 -153 192 -70 122 41 -35 332 -177 487 -238
+97 -38 146 -55 348 -118 335 -105 983 -129 1280 -47 1070 294 1688 1238 1761
+2691 16 304 7 325 -82 190 -88 -134 -504 -535 -669 -645 -618 -412 -1228 -507
+-1895 -296 -192 60 -199 77 -67 163 428 277 628 871 480 1428 -20 75 -38 98
+-38 48z m-682 -4962 c306 -158 601 -1396 416 -1747 -118 -224 -283 -345 -526
+-387 -455 -78 -577 227 -456 1143 96 725 320 1118 566 991z m-3115 -156 c371
+-172 699 -815 799 -1565 34 -251 19 -307 -108 -422 -575 -519 -1624 -162
+-1931 657 -265 709 593 1630 1240 1330z m5261 -120 c20 -377 -135 -912 -290
+-995 -70 -38 -72 -35 -157 230 l-64 200 -24 -90 c-50 -192 -144 -340 -215
+-340 -111 0 -316 804 -228 893 53 53 200 -130 226 -283 l14 -80 36 105 c100
+293 222 333 332 109 l54 -110 35 105 c89 260 271 427 281 256z m-8491 -284
+l75 -230 52 160 c89 272 210 336 295 154 126 -268 210 -757 142 -825 -44 -44
+-163 120 -247 340 -12 33 -19 24 -39 -50 -89 -330 -286 -346 -374 -30 l-22 80
+-35 -125 c-54 -196 -223 -428 -275 -377 -37 37 -29 448 11 608 70 276 219 524
+314 524 17 0 56 -87 103 -229z m4164 -2698 c137 -310 856 -372 1401 -121 175
+81 194 76 89 -23 -356 -336 -878 -447 -1310 -278 -224 88 -517 339 -517 443 0
+53 140 267 212 324 l58 46 14 -152 c8 -84 31 -191 53 -239z"/>
+</g>
+</svg>
@@ -0,0 +1,48 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
+ "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg"
+ width="600.000000pt" height="601.000000pt" viewBox="0 0 600.000000 601.000000"
+ preserveAspectRatio="xMidYMid meet">
+<g transform="translate(0.000000,601.000000) scale(0.050000,-0.050000)"
+fill="#ffffff" stroke="none">
+<path d="M195 11784 c-515 -1551 98 -2966 1520 -3514 171 -66 171 -72 2 -72
+-415 0 -893 215 -1273 572 -178 167 -181 163 -77 -83 478 -1130 1770 -1734
+2963 -1384 283 83 309 101 420 292 376 648 1038 1116 1763 1245 l143 26 100
+202 c887 1780 -911 3344 -3076 2675 l-170 -52 220 -14 c480 -32 818 -114 1118
+-273 258 -137 548 -414 624 -597 l32 -76 -87 76 c-435 375 -938 524 -1557 461
+-273 -28 -340 -39 -740 -120 -893 -182 -1449 24 -1756 650 l-98 200 -71 -214z"/>
+<path d="M9720 10053 c0 -146 -256 -556 -441 -705 -381 -308 -766 -380 -1559
+-290 -1209 137 -2026 -255 -2519 -1208 -78 -151 -82 -156 -72 -77 18 140 128
+450 210 592 43 74 73 135 67 135 -25 0 -397 -184 -512 -253 -966 -580 -1594
+-1674 -1594 -2777 0 -104 -4 -190 -10 -190 -5 0 -65 43 -132 95 -650 503
+-1118 775 -1606 935 -290 95 -302 94 -242 -15 52 -95 166 -372 191 -465 9 -33
+34 -121 56 -195 48 -161 120 -508 194 -935 118 -684 437 -1371 795 -1715 185
+-178 324 -239 594 -262 144 -13 150 -15 147 -63 -1 -27 -14 -174 -28 -326 -83
+-902 258 -1568 1037 -2024 139 -81 161 -80 127 4 -37 96 -85 369 -96 546 l-10
+170 46 -60 c328 -431 869 -753 1497 -891 351 -77 1285 -67 1426 15 9 5 -104
+50 -250 98 -649 217 -1341 668 -1680 1096 -81 102 -88 147 -11 78 157 -142
+653 -406 925 -493 783 -249 1542 -242 2332 20 l274 91 106 -83 c298 -236 798
+-328 1259 -231 197 42 196 38 32 169 -156 124 -344 356 -443 546 l-60 116 70
+52 c544 408 783 906 627 1300 l-41 102 170 138 c442 355 584 624 813 1537 186
+742 257 952 452 1328 l118 227 -145 -14 c-693 -68 -1425 -411 -1729 -810 -99
+-130 -112 -127 -165 44 -54 175 -217 511 -308 636 -64 88 -70 91 -224 117
+-314 52 -637 184 -956 390 -260 168 -509 436 -280 302 127 -74 302 -160 430
+-211 97 -38 146 -55 348 -118 335 -105 983 -129 1280 -47 961 264 1554 1048
+1729 2286 28 199 45 685 23 677 -9 -4 -73 -77 -141 -163 -650 -810 -1594
+-1147 -2451 -873 -251 80 -246 76 -171 121 395 240 638 767 578 1253 -25 209
+-77 395 -77 278z m-682 -4962 c306 -158 601 -1396 416 -1747 -118 -224 -283
+-345 -526 -387 -455 -78 -577 227 -456 1143 96 725 320 1118 566 991z m-3115
+-156 c371 -172 699 -815 799 -1565 34 -251 19 -307 -108 -422 -575 -519 -1624
+-162 -1931 657 -265 709 593 1630 1240 1330z m5261 -120 c20 -377 -135 -912
+-290 -995 -70 -38 -72 -35 -157 230 l-64 200 -24 -90 c-50 -192 -144 -340
+-215 -340 -111 0 -316 804 -228 893 53 53 200 -130 226 -283 l14 -80 36 105
+c100 293 222 333 332 109 l54 -110 35 105 c89 260 271 427 281 256z m-8491
+-284 l75 -230 52 160 c89 272 210 336 295 154 126 -268 210 -757 142 -825 -44
+-44 -163 120 -247 340 -12 33 -19 24 -39 -50 -89 -330 -286 -346 -374 -30
+l-22 80 -35 -125 c-54 -196 -223 -428 -275 -377 -37 37 -29 448 11 608 70 276
+219 524 314 524 17 0 56 -87 103 -229z m4164 -2698 c137 -311 883 -373 1408
+-116 162 78 171 64 42 -61 -317 -305 -854 -408 -1271 -244 -223 87 -516 338
+-516 442 0 53 140 267 212 324 l58 46 14 -152 c8 -84 31 -191 53 -239z"/>
+</g>
+</svg>
@@ -12,8 +12,8 @@ set -euo pipefail

 platform="${1:-x86_64}"
 case "${platform}" in
-  x86_64) arch="x86_64-unknown-linux-gnu" ;;
-  arm)    arch="aarch64-unknown-linux-gnu" ;;
+  x86_64) arch="x86_64-unknown-linux-gnu"; appimage_arch="x86_64" ;;
+  arm)    arch="aarch64-unknown-linux-gnu"; appimage_arch="aarch64" ;;
  *) echo "Usage: build_release.sh [platform]  (platform: 'x86_64' | 'arm')" >&2; exit 1 ;;
 esac

@@ -51,7 +51,13 @@ out="target/${arch}/release/Goblin-${platform}.AppImage"
 rm -f "target/${arch}/release/"*.AppImage
 # Use the DEV appimagetool + type2 runtime when fetched, else the system tool.
 appimagetool_bin="${GOBLIN_APPIMAGETOOL:-appimagetool}"
+# The type2 runtime must match the target arch. env.sh sets GOBLIN_APPIMAGE_RUNTIME
+# to the x86_64 runtime; for a non-x86_64 target use the sibling runtime-<arch>.
+runtime_file="${GOBLIN_APPIMAGE_RUNTIME:-}"
+if [ "${appimage_arch}" != "x86_64" ] && [ -n "${runtime_file}" ]; then
+  runtime_file="$(dirname "${runtime_file}")/runtime-${appimage_arch}"
+fi
 runtime_arg=()
-[ -n "${GOBLIN_APPIMAGE_RUNTIME:-}" ] && runtime_arg=(--runtime-file "${GOBLIN_APPIMAGE_RUNTIME}")
-ARCH=x86_64 "${appimagetool_bin}" "${runtime_arg[@]}" "${appdir}" "${out}"
+[ -n "${runtime_file}" ] && [ -e "${runtime_file}" ] && runtime_arg=(--runtime-file "${runtime_file}")
+ARCH="${appimage_arch}" "${appimagetool_bin}" "${runtime_arg[@]}" "${appdir}" "${out}"
 echo "built: ${out}"
@@ -44,7 +44,7 @@ wallets:
  await_fin_amount: Warten auf die Fertigstellung
  locked_amount: Gesperrt
  txs_empty: 'Um Geld manuell oder per Transport zu empfangen oder zu senden, verwenden Sie die Schaltflächen %{message} oder %{transport} unten auf dem Bildschirm. Um die Wallet-Einstellungen zu ändern, drücken Sie %{settings}.'
-  title: Wallets
+  title: Goblin
  create_desc: Erstellen oder importieren Sie ein bestehendes Wallet mit dem Seed-Phrase.
  add: Wallet hinzufügen
  name: 'Name:'
@@ -355,4 +355,468 @@ keyboard:
  m: m
  m1: ','
  m2: .
-  m3: '/'
+  m3: '/'
+goblin:
+  home:
+    anonymous: "Anonym"
+    connected_nym: "Über Nym verbunden"
+    nym_ready: "Nym bereit · Relays…"
+    connecting_nym: "Verbinde mit Nym…"
+    cant_reach_node: "Node nicht erreichbar"
+    node_synced: "Node synchronisiert"
+    syncing: "Synchronisiere…"
+    balance_updating: "Guthaben wird aktualisiert…"
+    listening: "Wartet auf Zahlungen"
+    block: "Block %{height}"
+    waiting_for_chain: "Warte auf Chain…"
+    nav_wallet: "Wallet"
+    nav_pay: "Zahlen"
+    nav_activity: "Aktivität"
+    nav_receive: "Empfangen"
+    nav_settings: "Einstellungen"
+    activity: "Aktivität"
+    empty_title: "Noch keine Aktivität"
+    empty_sub: "Sende oder empfange grin, um zu starten."
+    recent: "Zuletzt"
+    scan_to_pay: "Zum Zahlen scannen"
+    type_amount: "Betrag eingeben"
+    request: "Anfordern"
+    pay: "Zahlen"
+    enter_amount: "Betrag zum Zahlen oder Anfordern eingeben"
+  activity:
+    canceled: "abgebrochen"
+    pending: "ausstehend"
+    earlier: "Früher"
+    today: "Heute"
+    yesterday: "Gestern"
+    title: "Aktivität"
+    requests: "Anfragen"
+    empty_title: "Noch keine Aktivität"
+    empty_sub: "Deine Zahlungen erscheinen hier."
+    pending_header: "Ausstehend"
+  receipt:
+    title: "Beleg"
+    not_found: "Transaktion nicht gefunden"
+    for_note: "Für %{note}"
+    details: "Transaktionsdetails"
+    canceled: "Abgebrochen"
+    expired: "Abgelaufen"
+    funds_returned: "Guthaben zurückerstattet"
+    complete: "Abgeschlossen"
+    payment_received: "Zahlung empfangen"
+    payment_sent: "Zahlung erfolgreich gesendet"
+    pending: "Ausstehend"
+    confs: "%{c}/%{r} Bestätigungen"
+    waiting_to_confirm: "Warte auf Bestätigung"
+    paying: "Zahlung läuft…"
+    you: "Du"
+    to: "An"
+    from: "Von"
+    nostr: "nostr"
+    fee_none: "Keine"
+    network_fee: "Netzwerkgebühr"
+    privacy: "Privatsphäre"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "Transaktion"
+    cancel_request: "Anfrage abbrechen"
+    cancel_send: "Zahlung abbrechen"
+    cancel_send_confirm: "Zum Abbrechen erneut tippen — sie könnten sie noch erhalten"
+    cancel_send_done: "Zahlung abgebrochen — dein Guthaben ist wieder verfügbar"
+    cancel_send_too_late: "Diese Zahlung ist bereits durchgegangen und kann nicht abgebrochen werden"
+    waiting_to_receive: "Warte, bis %{name} empfängt…"
+  request:
+    title: "%{name} fordert an"
+    approve: "Annehmen"
+    decline: "Ablehnen"
+    review_title: "Anfrage prüfen"
+    hold_to_accept: "Zum Annehmen halten"
+    hold_accept_hint: "Halte gedrückt, um diese Anfrage zu bezahlen"
+  receive:
+    title: "Empfangen"
+    requesting: "Fordere %{amt}%{tsu} an — teilen, um bezahlt zu werden"
+    clear_request: "Anfrage löschen"
+    share_handle: "Teile deinen Handle, um bezahlt zu werden"
+    share_npub: "Teile deinen npub, um bezahlt zu werden"
+    copied: "Kopiert"
+    copy_nostr_id: "nostr-ID kopieren"
+    copy_address: "Adresse kopieren"
+    copy_npub: "npub kopieren"
+    share_message: "Bezahl mich auf Goblin (goblin.st) — %{npub}"
+    privacy_note: "Dein Benutzername ist öffentlich. Zahlungsinhalte bleiben im Netzwerk verschlüsselt."
+    privacy_note_npub: "Dein npub ist öffentlich. Zahlungsinhalte bleiben im Netzwerk verschlüsselt."
+  profile:
+    title: "Profil"
+    activity: "Aktivität"
+    no_activity: "Noch keine Aktivität mit ihnen."
+    unblock: "Entsperren"
+    block: "Sperren"
+    blocked_blurb: "Gesperrt — ihre Zahlungen und Anfragen werden verworfen."
+    block_blurb: "Sperren verwirft eingehende Zahlungen und Anfragen von ihnen."
+  settings:
+    title: "Einstellungen"
+    connected_nostr: "Mit nostr verbunden"
+    connecting_relays: "Verbinde mit Relays…"
+    identity: "Identität"
+    copy_npub: "npub kopieren (öffentlich)"
+    rotate_key: "nostr-Schlüssel wechseln"
+    import_identity: "Identität importieren (.backup / nsec)"
+    backup_note: "Gerät wechseln? Sichere BEIDES: deine Seed-Phrase (Guthaben) und deine Identitäts-.backup-Datei (Name + Schlüssel)."
+    wallet: "Wallet"
+    display_unit: "Anzeigeeinheit"
+    relays: "Relays"
+    nostr_relays: "Nostr-Relays"
+    node: "Node"
+    integrated_node: "Einstellungen des integrierten Nodes"
+    node_advanced: "Erweitert"
+    slatepacks: "Slatepacks"
+    slatepacks_value: "Manuelle Transaktion"
+    lock_wallet: "Wallet sperren"
+    switch_wallet: "Wallet wechseln"
+    advanced: "Erweitert"
+    privacy: "Privatsphäre"
+    mixnet_routing: "Mixnet-Routing"
+    messages_lookups: "Nachrichten & Abfragen"
+    auto_accept: "Automatisch annehmen"
+    pairing: "Preiswährung"
+    accept_anyone: "Jeder"
+    accept_contacts: "Nur Kontakte"
+    accept_ask: "Immer fragen"
+    requests: "Anfragen"
+    incoming_requests: "Eingehende Anfragen"
+    incoming_requests_sub: "Erlaube anderen, Geld von dir anzufordern"
+    appearance: "Erscheinungsbild"
+    theme: "Design"
+    theme_light: "Hell"
+    theme_dark: "Dunkel"
+    theme_yellow: "Gelb"
+    archive: "Archiv"
+    export_archive: "Archiv exportieren"
+    wipe_history: "Zahlungsverlauf löschen"
+    wipe_history_confirm: "Zum Löschen erneut tippen — kann nicht rückgängig gemacht werden"
+    about: "Über"
+    goblin: "Goblin"
+    build: "Build %{build}"
+    network: "Netzwerk"
+    network_value: "MW + Nym mixnet + nostr"
+    third_party: "Drittanbieter"
+    grim: "GRIM (Upstream-Wallet)"
+    grin_node: "Grin-Node"
+    sp_intro: "Erweitert — rohe slatepacks von Hand austauschen, so wie GRIM es macht. Nur nutzen, wenn du nicht über einen username zahlen oder bezahlt werden kannst."
+    sp_receive_group: "Empfangen oder abschließen"
+    sp_receive_blurb: "Füge einen slatepack ein, den dir jemand gegeben hat. Goblin empfängt die Zahlung, begleicht die Rechnung oder schließt sie ab und sendet sie."
+    sp_process: "Slatepack verarbeiten"
+    sp_paste_first: "Füge zuerst einen slatepack ein."
+    sp_reply_ready: "Antwort bereit — sende sie an den Absender zurück."
+    sp_finalizing: "Schließe ab und sende an die Chain…"
+    sp_create_group: "Zahlung erstellen"
+    sp_create_blurb: "Erstelle einen slatepack zum Übergeben. Der Empfänger nimmt ihn an, sendet die Antwort zurück, und du schließt sie oben ab."
+    sp_amount_hint: "Betrag in grin"
+    sp_addr_hint: "Empfängeradresse (optional)"
+    sp_create: "Slatepack erstellen"
+    sp_ready: "Slatepack bereit — übergib ihn dem Empfänger."
+    sp_amount_gt_zero: "Gib einen Betrag größer als null ein."
+    sp_to_send: "Zu sendender slatepack"
+    sp_copy: "Slatepack kopieren"
+    rotate_line1: "• Du bekommst einen brandneuen ZUFÄLLIGEN Schlüssel; das alte npub empfängt nichts mehr. Es gibt keine Ableitungskette zwischen beiden."
+    rotate_line2: "• Der neue Schlüssel ist NICHT aus deinem Seed wiederherstellbar — sichere die neue nsec direkt nach dem Wechsel."
+    rotate_line3: "• Dein Benutzername wird FREIGEGEBEN — beanspruche direkt danach denselben oder einen neuen Namen (sobald frei, kann ihn auch jede andere Person nehmen)."
+    rotate_line4: "• Zahlungen, die noch an den alten Schlüssel unterwegs sind, WERDEN gestört — warte zuerst, bis ausstehende Zahlungen abgeschlossen sind."
+    rotate_line5: "• Kontakte, die dein npub direkt gespeichert haben, müssen dich neu finden — teile dein neues npub oder den neu gesicherten username."
+    cancel: "Abbrechen"
+    continue: "Weiter"
+    final_confirmation: "Endgültige Bestätigung"
+    rotate_confirm_blurb: "Dies kann in der App nicht rückgängig gemacht werden. Tippe RESET und gib dein Wallet-Passwort ein, um zu wechseln."
+    type_reset: "RESET tippen"
+    wallet_password: "Wallet-Passwort"
+    rotate_key_btn: "Schlüssel wechseln"
+    rotating_key: "Wechsle Schlüssel…"
+    key_rotated: "Schlüssel gewechselt"
+    new_npub: "Neues npub: %{npub}"
+    backup_new_key: "Sichere jetzt den NEUEN geheimen Schlüssel — dein Seed kann ihn nicht wiederherstellen."
+    copy_new_nsec: "Neues nsec-Backup kopieren"
+    done: "Fertig"
+    rotation_failed: "Wechsel fehlgeschlagen"
+    close: "Schließen"
+    import_identity_title: "Identität importieren"
+    import_blurb: "Ersetzt die nostr-Identität dieser Wallet — wähle eine GOBLIN-.backup-Datei oder füge einen nsec ein. Eine Sicherung stellt auch Benutzername und Verlauf wieder her. Sichere zuerst den aktuellen Schlüssel, falls du ihn noch brauchst."
+    import_nsec_hint: "nsec1… oder eingefügte Sicherung"
+    backup_password_hint: "Backup-Passwort (nur wenn anderswo exportiert)"
+    import_btn: "Importieren"
+    importing: "Importiere…"
+    identity_replaced: "Identität ersetzt"
+    now_using: "Jetzt aktiv: %{npub}"
+    import_failed: "Import fehlgeschlagen"
+    name_authority: "Namensautorität"
+    name_authority_title: "Namensautorität ändern"
+    name_authority_blurb: "Der Server, der Namen registriert und verifiziert. Auf eine andere Instanz zeigen, um dort gehostete Namen zu nutzen und zu bezahlen."
+    name_authority_invalid: "Vollständige URL eingeben (https://…)."
+    reset: "Zurücksetzen"
+    save: "Speichern"
+    backup_file: "In Datei sichern"
+    choose_backup_file: "Eine .backup-Datei wählen"
+    backup_read_failed: "Datei konnte nicht gelesen werden."
+    backup_saved: "Sicherung gespeichert"
+    backup_saved_sub: "Bewahre die .backup-Datei sicher auf — wer sie UND dein Passwort hat, kann deine Identität wiederherstellen."
+    backup_file_title: "Identität sichern"
+    backup_file_blurb: "Erstellt eine verschlüsselte .backup-Datei mit Benutzername und Schlüssel. Gib dein Wallet-Passwort ein, um sie zu versiegeln."
+    backup_write_failed: "Datei konnte nicht gespeichert werden."
+    create_backup: "Sicherung erstellen"
+    registered: "%{name} registriert"
+    released_msg: "Freigegeben — der Name ist frei"
+    release_confirm: "%{name} freigeben?"
+    release_blurb: "Sobald er frei ist, ist er verfügbar — jeder kann ihn beanspruchen, auch dein nächster rotierter Schlüssel. Du kannst 10 Minuten lang keinen anderen Benutzernamen registrieren."
+    releasing: "Gebe frei…"
+    keep_it: "Behalten"
+    release_it: "Freigeben"
+    username: "Benutzername"
+    username_note: "Wird als dein Name angezeigt. Öffentlich auf goblin.st. Zahlungen bleiben verschlüsselt."
+    release_username: "Benutzername freigeben"
+    pick_username: "Benutzernamen wählen — optional"
+    working: "Arbeite…"
+    claim: "Sichern"
+    err_just_taken: "Dieser Benutzername wurde gerade vergeben"
+    err_cooldown: "Du hast kürzlich einen Benutzernamen freigegeben — du kannst innerhalb von 10 Minuten einen neuen registrieren."
+    err_unreachable: "goblin.st nicht erreichbar — Verbindungsproblem. Versuche es erneut."
+    err_release: "Freigabe fehlgeschlagen: %{err}"
+    avail_available: "Verfügbar!"
+    avail_taken: "Vergeben"
+    avail_reserved: "Reserviert"
+    avail_invalid: "Namen haben 3–20 Zeichen: a–z, 0–9, _ oder -"
+    avail_quarantined: "Nicht verfügbar"
+    avail_unknown: "Prüfung fehlgeschlagen — Verbindungsproblem. Versuche es erneut."
+  advanced:
+    title: "Erweitert"
+    intro: "Wallet-Werkzeuge auf niedriger Ebene von GRIM. Normalerweise brauchst du diese nicht."
+    own_node_desc: "Synchronisiere einen vollständigen Grin-Node auf diesem Gerät, statt einem öffentlichen zu vertrauen."
+    own_node_active: "Eigener Node läuft"
+    repair: "Wallet reparieren"
+    repair_desc: "Die Kette neu scannen und fehlende Outputs wiederherstellen. Das kann dauern."
+    repair_unavailable: "Benötigt zuerst eine synchronisierte Node-Verbindung."
+    repairing: "Repariere… %{pct}%"
+    restore: "Wallet wiederherstellen"
+    restore_desc: "Lokale Daten löschen und aus deinem Seed neu aufbauen. Nutze das, wenn eine Reparatur nicht half — danach öffnest du die Wallet erneut."
+    restore_confirm: "Zum Wiederherstellen erneut tippen"
+    show_phrase: "Wiederherstellungsphrase"
+    phrase_desc: "Deine 24 grin-Seed-Wörter — der einzige Weg, Guthaben wiederherzustellen. Halte sie offline und privat."
+    reveal: "Phrase anzeigen"
+    hide: "Verbergen"
+    password: "Wallet-Passwort"
+    wrong_password: "Falsches Passwort."
+    delete: "Wallet löschen"
+    delete_desc: "Diese Wallet dauerhaft von diesem Gerät entfernen. Ohne deinen Seed sind Guthaben nicht wiederherstellbar."
+    delete_confirm: "Zum Löschen erneut tippen"
+    manage_node: "Node-Verbindung verwalten"
+    repair_confirm: "Ja, jetzt reparieren"
+    repair_confirm_note: "Die Reparatur scannt die Chain neu und kann einige Minuten dauern."
+    restore_confirm_note: "Dies löscht lokale Daten und baut sie aus deinem Seed neu auf — das kann einige Minuten dauern."
+    nostr_key: "Nostr-Schlüssel"
+    nostr_key_desc: "Dein nsec, der geheime Schlüssel deiner Nostr-Identität. Kopiere ihn oder zeige den QR-Code, um dich bei Nostr-Apps wie magick.market anzumelden. Wer ihn hat, kontrolliert deine Identität, also halte ihn geheim."
+    reveal_nsec: "Schlüssel anzeigen"
+    copy_nsec: "nsec kopieren"
+    show_qr: "QR anzeigen"
+    hide_qr: "QR ausblenden"
+  privacy:
+    title: "Netzwerk-Privatsphäre"
+    intro: "Goblin sendet seinen privaten Datenverkehr durch das Nym mixnet — ein Netzwerk mit fünf Sprüngen, das verbirgt, wer mit wem kommuniziert, sodass ein Relay eine Zahlung nicht zu dir zurückverfolgen kann."
+    payments: "Zahlungen"
+    payments_blurb: "Jede nostr-Nachricht, die einen slatepack trägt."
+    usernames: "usernames"
+    usernames_blurb: "NIP-05-Namensabfragen zu und von goblin.st."
+    price_avatars: "Preis"
+    price_avatars_blurb: "Der Live-Wechselkurs neben den Beträgen."
+    over_mixnet: "Über das mixnet"
+    direct_connection: "Direkte Verbindung"
+    grin_node: "Grin-Node"
+    grin_node_blurb: "Block-Synchronisierung und Übertragung deiner Transaktion ins Netzwerk. Dies sind öffentliche Chain-Daten, für alle gleich, und nicht mit deiner Identität verknüpft."
+  pairing:
+    title: "Kopplung"
+    intro: "Womit dein Guthaben und deine Beträge verglichen werden."
+    pair_with: "Koppeln mit"
+    rates_note: "Kurse werden über das Nym mixnet abgerufen, nur solange eine Kopplung aktiv ist — aus bedeutet, dass keine Kursanfrage dein Gerät verlässt."
+  relays:
+    title: "Relays"
+    intro: "Zahlungsnachrichten werden an jedes Relay unten gespiegelt; ein erreichbares Relay genügt zum Empfangen."
+    your_relays: "Deine Relays"
+    add_relay: "Relay hinzufügen"
+    add_relay_btn: "Relay hinzufügen"
+    save_reconnect: "Speichern & neu verbinden"
+    none: "keine"
+    count: "%{n} Relays"
+  node:
+    title: "Node"
+    connection: "Verbindung"
+    integrated: "Integrierter Node"
+    applies_after: "Wird wirksam, nachdem das Wallet gesperrt und wieder entsperrt wurde."
+    add_external: "Externen Node hinzufügen"
+    api_secret_hint: "API-Secret (optional)"
+    add_node: "Node hinzufügen"
+    integrated_host: "integrierter Node"
+    summary_syncing: "%{conn} · synchronisiere"
+    summary_block: "Block %{height} · %{conn}"
+  nips:
+    title: "nostr & NIPs"
+    intro1: "Goblin spricht nostr — ein offenes Protokoll signierter Nachrichten, die über einfache Relay-Server weitergereicht werden. Dein Wallet trägt seine eigene nostr-Identität: einen eigenständigen Zufallsschlüssel, bewusst unabhängig von deinem Guthaben und Seed gehalten. Jede Zahlung reist als Ende-zu-Ende-verschlüsselte Direktnachricht zwischen Identitäten, mit dem slatepack im Inneren."
+    intro2: "goblin.st ist Goblins Namensdienst: Das Sichern eines Benutzernamens veröffentlicht dort eine Name → Schlüssel-Zuordnung (NIP-05), sodass Leute you statt eines langen npub bezahlen können. Der Benutzername ist öffentlich; Zahlungsinhalte sind es nie. NIPs sind die Bausteine des Protokolls — tippe auf einen, um die Spezifikation zu lesen."
+    n05_title: "Namen"
+    n05_blurb: "Ordnet username@goblin.st deinem Schlüssel zu, sodass Handles wie Adressen funktionieren."
+    n17_title: "Private Nachrichten"
+    n17_blurb: "Die verschlüsselte DM-Hülle, in der jede Zahlung reist."
+    n44_title: "Verschlüsselung"
+    n44_blurb: "Die authentifizierte Chiffre, die in diesen Nachrichten verwendet wird."
+    n49_title: "Schlüsselverschlüsselung"
+    n49_blurb: "Wie der geheime Schlüssel im Ruhezustand gespeichert wird, gesperrt durch dein Passwort."
+    n59_title: "Gift Wrap"
+    n59_blurb: "Verpackt Nachrichten, sodass Relays nicht sehen können, wer mit wem kommuniziert."
+    n98_title: "HTTP-Auth"
+    n98_blurb: "Signiert die Benutzernamen-Registrierungsanfrage an goblin.st."
+  onboarding:
+    intro:
+      private_money_head: "Privates Geld"
+      private_money_body: "Goblin ist ein Wallet für grin — digitales Bargeld ohne Beträge oder Adressen auf seiner Chain."
+      send_like_message_head: "Senden wie eine Nachricht"
+      send_like_message_body: "Zahle an einen username oder npub und es kommt als Ende-zu-Ende-verschlüsselte Nachricht über nostr und das Nym mixnet an — niemand dazwischen sieht den Betrag oder die Beteiligten."
+      yours_alone_head: "Nur deins"
+      yours_alone_body: "Schlüssel, Namen und Verlauf bleiben auf diesem Gerät. Basiert auf dem GRIM-Wallet."
+      get_started: "Loslegen"
+      footnote: "Dauert etwa eine Minute. Du kannst später alles ändern."
+    node:
+      kicker: "SCHRITT 1 VON 3 · NETZWERK"
+      title: "Wie soll Goblin\ndie Chain beobachten?"
+      own_title: "Eigenen Node betreiben"
+      own_badge: "Privat"
+      own_body: "Vertraut niemandem — dein Wallet prüft die Chain selbst. Synchronisiert im Hintergrund, während du die Einrichtung beendest."
+      connect_title: "Mit einem Node verbinden"
+      connect_badge: "Sofort"
+      connect_body: "Kein Warten auf Sync. Der gewählte Node kann die Abfragen deines Wallets sehen."
+      changeable: "Jederzeit änderbar unter Einstellungen → Node."
+      continue: "Weiter"
+      url_invalid: "Node-URL muss mit http:// oder https:// beginnen"
+    wallet:
+      kicker: "SCHRITT 2 VON 3 · WALLET"
+      title: "Richte dein Wallet ein"
+      create_new: "Neu erstellen"
+      restore_from_seed: "Aus Seed wiederherstellen"
+      name_hint: "Wallet-Name"
+      password_hint: "Passwort"
+      repeat_password_hint: "Passwort wiederholen"
+      restore_hint: "Halte deine Seed-Wörter bereit — du gibst sie als Nächstes ein."
+      create_hint: "Als Nächstes erhältst du 24 Seed-Wörter zum Aufschreiben. Sie sind das Geld — wer sie hat, hält dein Guthaben."
+      continue: "Weiter"
+      passwords_no_match: "Passwörter stimmen nicht überein"
+    words:
+      kicker: "SCHRITT 2 VON 3 · WALLET"
+      title_restore: "Gib deine Seed-Wörter ein"
+      title_create: "Schreibe diese Wörter auf"
+      write_down_hint: "Auf Papier, in Reihenfolge. Wer diese Wörter hat, kann dein Guthaben nehmen; ohne sie bedeutet ein verlorenes Gerät verlorenes Guthaben."
+      paste: "Einfügen"
+      scan_qr: "QR scannen"
+      copy_clipboard: "In Zwischenablage kopieren (vermeiden)"
+      restore_wallet: "Wallet wiederherstellen"
+      wrote_them_down: "Ich habe sie aufgeschrieben"
+      fill_every_word: "Fülle jedes Wort aus — tippe ein Wort an, um es zu bearbeiten, oder füge die Phrase ein."
+    confirm:
+      kicker: "SCHRITT 2 VON 3 · WALLET"
+      title: "Jetzt beweise es"
+      enter_hint: "Gib die soeben aufgeschriebenen Wörter ein. Tippe ein Wort an, um es zu tippen."
+      paste: "Einfügen"
+      create_wallet: "Wallet erstellen"
+      keep_going: "Weiter so — jedes Wort, in Reihenfolge."
+    identity:
+      kicker: "SCHRITT 3 VON 3 · IDENTITÄT"
+      title: "Deine Zahlungsidentität"
+      key_being_made: "Schlüssel wird erstellt…"
+      connected_nym: "über Nym verbunden"
+      connecting_nym: "verbinde über Nym…"
+      fresh_key_blurb: "Ein Zahlungsschlüssel, der nicht Teil deines Seeds ist — jederzeit rotierbar, ohne deine Mittel zu berühren."
+      clean_slate_blurb: "Lust auf einen Neuanfang? Tausche jederzeit einen brandneuen Schlüssel ein — das neue Du ist nicht mit dem alten verknüpft. Gleiches Wallet, frisches Gesicht."
+      pick_username: "Benutzernamen wählen — optional"
+      username_blurb: "Freunde zahlen an deinen Namen statt an einen langen Schlüssel. Optional — jederzeit beanspruchbar."
+      username_field_hint: "deinname"
+      working: "Arbeite…"
+      claim_username: "Benutzernamen sichern"
+      available_when_connected: "Verfügbar, sobald das mixnet verbindet — oder überspringen und später sichern."
+      youre: "Du bist %{name}"
+      claimed_title: "%{name} gehört dir"
+      claimed_blurb: "Freunde können dich jetzt per Namen bezahlen. Alles bereit — öffne dein Wallet."
+      open_wallet: "Mein Wallet öffnen"
+      skip_for_now: "Vorerst überspringen"
+      import_existing: "Schon eine Goblin-Identität? Importieren"
+      import_title: "Identität importieren"
+      import_blurb: "Füge deinen nsec ein oder wähle eine .backup-Datei, um deinen vorhandenen Schlüssel und Benutzernamen zu behalten statt diesen neuen."
+    errors:
+      cant_open: "Wallet konnte nicht geöffnet werden: %{err}"
+      cant_create: "Wallet konnte nicht erstellt werden: %{err}"
+  send:
+    scan_to_request: "Zum Anfordern scannen"
+    scan_to_pay: "Zum Zahlen scannen"
+    tab_scan: "Scannen"
+    tab_my_code: "Mein Code"
+    request_from: "Anfordern von"
+    send_to: "Senden an"
+    search_hint: "handle, npub oder Name"
+    suggested: "%{icon}  Vorgeschlagen"
+    no_contacts: "Noch keine Kontakte. Finde jemanden über seinen handle."
+    no_profile: "kein Profil"
+    tag_contact: "Kontakt"
+    tag_on_nostr: "auf nostr"
+    searching_nostr: "Durchsuche nostr…"
+    unverified_title: "Unverifizierten Schlüssel bezahlen?"
+    unverified_body: "Für diesen Schlüssel ist kein nostr-Profil veröffentlicht — er könnte brandneu, anonym oder vertippt sein. Prüfe genau, ob es der richtige ist, bevor du sendest."
+    keep_looking: "Weitersuchen"
+    pay_anyway: "Trotzdem zahlen"
+    scan_not_recipient: "Dieser QR ist kein goblin-Empfänger — erwartet wurde ein npub oder handle"
+    scan_prompt: "Halte einen goblin-Code ins Bild, um zu aktivieren"
+    scan_to_pay_me: "Scannen, um mich zu bezahlen"
+    share_btn: "%{icon} Teilen"
+    share_message: "Bezahl mich auf Goblin — %{handle}\n%{link}\nnpub: %{npub}"
+    none_found: "Niemand gefunden für %{label}"
+    enter_recipient: "Gib einen handle, npub oder Namen ein"
+    amount_title: "Betrag"
+    to_name: "An %{name}"
+    not_enough: "Du hast nicht genug grin"
+    max: "Max"
+    note_label: "Notiz"
+    note_hint: "Notiz hinzufügen…"
+    add_note: "Notiz hinzufügen"
+    edit_note: "Notiz bearbeiten"
+    note_cancel: "Abbrechen"
+    note_save: "Speichern"
+    review_btn: "Prüfen"
+    confirm_request: "Anfrage bestätigen"
+    review_title: "Prüfen"
+    requesting_from: "Fordere an von %{name}"
+    youre_sending: "Du sendest %{name}"
+    row_from: "Von"
+    row_to: "An"
+    row_note: "Notiz"
+    row_they_pay: "Sie zahlen"
+    row_they_pay_val: "Nur wenn sie zustimmen"
+    row_delivery: "Zustellung"
+    row_delivery_val: "NIP-44-verschlüsselt, über Nym"
+    row_network_fee: "Netzwerkgebühr"
+    row_network_fee_val: "Von deinem Guthaben abgezogen"
+    row_privacy: "Privatsphäre"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "Anfrage senden"
+    request_approve_hint: "Sie erhalten eine Anfrage zum Zustimmen"
+    hold_to_send: "Zum Senden halten"
+    lower_amount: "Zurückgehen und Betrag verringern"
+    hold_confirm_hint: "Gedrückt halten zum Bestätigen"
+    requesting: "Fordere an…"
+    sending: "Sende…"
+    they: "Sie"
+    request_blocked: "%{who} nimmt keine Anfragen an. Bitte sie, dir stattdessen grin zu senden."
+    failed_request_title: "Anfrage fehlgeschlagen"
+    failed_send_title: "Senden fehlgeschlagen"
+    failed_request_body: "Die Anfrage konnte nicht zugestellt werden. Bitte sie, dir stattdessen grin zu senden."
+    failed_send_body: "Die Zahlung wurde nicht zugestellt. Dein grin ist sicher — versuche es erneut."
+    try_again_btn: "Erneut versuchen"
+    close_btn: "Schließen"
+    success:
+      requested: "Angefordert"
+      sent: "Gesendet"
+      from: "von"
+      to: "an"
+      subtitle: "%{dir} %{who} · gerade eben"
+      done_btn: "Fertig"
+      receipt_btn: "Beleg"
@@ -44,7 +44,7 @@ wallets:
  await_fin_amount: Awaiting finalization
  locked_amount: Locked
  txs_empty: 'To receive funds manually or over transport use %{message} or %{transport} buttons at the bottom of the screen, to change wallet settings press %{settings} button.'
-  title: Wallets
+  title: Goblin
  create_desc: Create or import existing wallet from saved recovery phrase.
  add: Add wallet
  name: 'Name:'
@@ -355,4 +355,468 @@ keyboard:
  m: m
  m1: ','
  m2: .
-  m3: /
+  m3: /
+goblin:
+  home:
+    anonymous: "Anonymous"
+    connected_nym: "Connected over Nym"
+    nym_ready: "Nym ready · relays…"
+    connecting_nym: "Connecting to Nym…"
+    cant_reach_node: "Can't reach node"
+    node_synced: "Node synced"
+    syncing: "Syncing…"
+    balance_updating: "Balance updating…"
+    listening: "Listening for payments"
+    block: "Block %{height}"
+    waiting_for_chain: "Waiting for chain…"
+    nav_wallet: "Wallet"
+    nav_pay: "Pay"
+    nav_activity: "Activity"
+    nav_receive: "Receive"
+    nav_settings: "Settings"
+    activity: "Activity"
+    empty_title: "No activity yet"
+    empty_sub: "Send or receive grin to get started."
+    recent: "Recent"
+    scan_to_pay: "Scan to pay"
+    type_amount: "Type an amount"
+    request: "Request"
+    pay: "Pay"
+    enter_amount: "Enter an amount to pay or request"
+  activity:
+    canceled: "canceled"
+    pending: "pending"
+    earlier: "Earlier"
+    today: "Today"
+    yesterday: "Yesterday"
+    title: "Activity"
+    requests: "Requests"
+    empty_title: "No activity yet"
+    empty_sub: "Your payments will appear here."
+    pending_header: "Pending"
+  receipt:
+    title: "Receipt"
+    not_found: "Transaction not found"
+    for_note: "For %{note}"
+    details: "Transaction details"
+    canceled: "Canceled"
+    expired: "Expired"
+    funds_returned: "Funds returned"
+    complete: "Complete"
+    payment_received: "Payment received"
+    payment_sent: "Payment sent successfully"
+    pending: "Pending"
+    confs: "%{c}/%{r} confirmations"
+    waiting_to_confirm: "Waiting to confirm"
+    paying: "Paying…"
+    you: "You"
+    to: "To"
+    from: "From"
+    nostr: "nostr"
+    fee_none: "None"
+    network_fee: "Network fee"
+    privacy: "Privacy"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "Transaction"
+    cancel_request: "Cancel request"
+    cancel_send: "Cancel payment"
+    cancel_send_confirm: "Tap again to cancel — they may still receive it"
+    cancel_send_done: "Payment cancelled — your funds are available again"
+    cancel_send_too_late: "This payment already went through and can't be cancelled"
+    waiting_to_receive: "Waiting for %{name} to receive…"
+  request:
+    title: "%{name} requests"
+    approve: "Approve"
+    decline: "Decline"
+    review_title: "Review request"
+    hold_to_accept: "Hold to accept"
+    hold_accept_hint: "Press and hold to pay this request"
+  receive:
+    title: "Receive"
+    requesting: "Requesting %{amt}%{tsu} — share to get paid"
+    clear_request: "Clear request"
+    share_handle: "Share your handle to get paid"
+    share_npub: "Share your npub to get paid"
+    copied: "Copied"
+    copy_nostr_id: "Copy nostr ID"
+    copy_address: "Copy address"
+    copy_npub: "Copy npub"
+    share_message: "Pay me on Goblin (goblin.st) — %{npub}"
+    privacy_note: "Your username is public. Payment contents stay encrypted over the network."
+    privacy_note_npub: "Your npub is public. Payment contents stay encrypted over the network."
+  profile:
+    title: "Profile"
+    activity: "Activity"
+    no_activity: "No activity with them yet."
+    unblock: "Unblock"
+    block: "Block"
+    blocked_blurb: "Blocked — their payments and requests are dropped."
+    block_blurb: "Blocking drops their incoming payments and requests."
+  settings:
+    title: "Settings"
+    connected_nostr: "Connected to nostr"
+    connecting_relays: "Connecting to relays…"
+    identity: "Identity"
+    copy_npub: "Copy npub (public)"
+    rotate_key: "Rotate nostr key"
+    import_identity: "Import identity (.backup / nsec)"
+    backup_note: "Moving devices? Back up BOTH: your seed phrase (funds) and your identity .backup file (name + key)."
+    wallet: "Wallet"
+    display_unit: "Display unit"
+    relays: "Relays"
+    nostr_relays: "Nostr Relays"
+    node: "Node"
+    integrated_node: "Integrated node settings"
+    node_advanced: "Advanced"
+    slatepacks: "Slatepacks"
+    slatepacks_value: "Manual transaction"
+    lock_wallet: "Lock wallet"
+    switch_wallet: "Switch wallet"
+    advanced: "Advanced"
+    privacy: "Privacy"
+    mixnet_routing: "Mixnet routing"
+    messages_lookups: "Messages & lookups"
+    auto_accept: "Auto-accept"
+    pairing: "Price currency"
+    accept_anyone: "Anyone"
+    accept_contacts: "Contacts only"
+    accept_ask: "Always ask"
+    requests: "Requests"
+    incoming_requests: "Incoming requests"
+    incoming_requests_sub: "Let others request money from you"
+    appearance: "Appearance"
+    theme: "Theme"
+    theme_light: "Light"
+    theme_dark: "Dark"
+    theme_yellow: "Yellow"
+    archive: "Archive"
+    export_archive: "Export archive"
+    wipe_history: "Wipe payment history"
+    wipe_history_confirm: "Tap again to wipe — this can't be undone"
+    about: "About"
+    goblin: "Goblin"
+    build: "Build %{build}"
+    network: "Network"
+    network_value: "MW + Nym mixnet + nostr"
+    third_party: "Third party"
+    grim: "GRIM (upstream wallet)"
+    grin_node: "Grin node"
+    sp_intro: "Advanced — exchange raw slatepacks by hand, the way GRIM does. Use this only when you can't pay or get paid through a username."
+    sp_receive_group: "Receive or finalize"
+    sp_receive_blurb: "Paste a slatepack someone gave you. Goblin receives the payment, pays the invoice, or finalizes and posts it."
+    sp_process: "Process slatepack"
+    sp_paste_first: "Paste a slatepack first."
+    sp_reply_ready: "Reply ready — send it back to the sender."
+    sp_finalizing: "Finalizing and posting to the chain…"
+    sp_create_group: "Create a payment"
+    sp_create_blurb: "Make a slatepack to hand to someone. They receive it, send the reply back, and you finalize it above."
+    sp_amount_hint: "Amount in grin"
+    sp_addr_hint: "Recipient address (optional)"
+    sp_create: "Create slatepack"
+    sp_ready: "Slatepack ready — hand it to the recipient."
+    sp_amount_gt_zero: "Enter an amount greater than zero."
+    sp_to_send: "Slatepack to send"
+    sp_copy: "Copy slatepack"
+    rotate_line1: "• You get a brand-new RANDOM key; the old npub stops receiving. There is no derivation chain between them."
+    rotate_line2: "• The new key is NOT recoverable from your seed — back up the new nsec right after rotating."
+    rotate_line3: "• Your username is RELEASED — claim the same or a new name right after (anyone else can grab it too once it's free)."
+    rotate_line4: "• Payments still in flight to the old key WILL be disrupted — wait for pending payments to finish first."
+    rotate_line5: "• Contacts who saved your npub directly must re-find you — share your new npub or re-claimed username."
+    cancel: "Cancel"
+    continue: "Continue"
+    final_confirmation: "Final confirmation"
+    rotate_confirm_blurb: "This cannot be undone from the app. Type RESET and enter your wallet password to rotate."
+    type_reset: "Type RESET"
+    wallet_password: "Wallet password"
+    rotate_key_btn: "Rotate key"
+    rotating_key: "Rotating key…"
+    key_rotated: "Key rotated"
+    new_npub: "New npub: %{npub}"
+    backup_new_key: "Back up the NEW secret key now — your seed cannot recover it."
+    copy_new_nsec: "Copy new nsec backup"
+    done: "Done"
+    rotation_failed: "Rotation failed"
+    close: "Close"
+    import_identity_title: "Import identity"
+    import_blurb: "Replaces this wallet's nostr identity — choose a GOBLIN .backup file, or paste a bare nsec. A backup also restores your username and history. Back up the current key first if you still need it."
+    import_nsec_hint: "nsec1… or pasted backup"
+    backup_password_hint: "Backup password (only if exported elsewhere)"
+    import_btn: "Import"
+    importing: "Importing…"
+    identity_replaced: "Identity replaced"
+    now_using: "Now using: %{npub}"
+    import_failed: "Import failed"
+    name_authority: "Name authority"
+    name_authority_title: "Change name authority"
+    name_authority_blurb: "The server that registers and verifies names. Point it at another instance to use and pay names hosted there."
+    name_authority_invalid: "Enter a full URL (https://…)."
+    reset: "Reset"
+    save: "Save"
+    backup_file: "Back up to a file"
+    choose_backup_file: "Choose a .backup file"
+    backup_read_failed: "Couldn't read that file."
+    backup_saved: "Backup saved"
+    backup_saved_sub: "Keep the .backup file safe — anyone with it AND your password can restore your identity."
+    backup_file_title: "Back up identity"
+    backup_file_blurb: "Creates one encrypted .backup file with your username and key. Enter your wallet password to seal it."
+    backup_write_failed: "Couldn't save the file."
+    create_backup: "Create backup"
+    registered: "Registered %{name}"
+    released_msg: "Released — the name is up for grabs"
+    release_confirm: "Release %{name}?"
+    release_blurb: "It's up for grabs the moment it's free — anyone can claim it, including the next key you rotate to. You won't be able to register another username for 10 minutes."
+    releasing: "Releasing…"
+    keep_it: "Keep it"
+    release_it: "Release it"
+    username: "Username"
+    username_note: "Shown as your name. Public on goblin.st. Payments stay encrypted."
+    release_username: "Release username"
+    pick_username: "Pick a username — optional"
+    working: "Working…"
+    claim: "Claim"
+    err_just_taken: "That username was just taken"
+    err_cooldown: "You recently released a username — you can register a new one within 10 minutes."
+    err_unreachable: "Couldn't reach goblin.st — connection hiccup. Try again."
+    err_release: "Couldn't release: %{err}"
+    avail_available: "Available!"
+    avail_taken: "Taken"
+    avail_reserved: "Reserved"
+    avail_invalid: "Names are 3–20 chars: a–z, 0–9, _ or -"
+    avail_quarantined: "Not available"
+    avail_unknown: "Couldn't check — connection hiccup. Try again."
+  advanced:
+    title: "Advanced"
+    intro: "Low-level wallet tools from GRIM. You won't normally need these."
+    own_node_desc: "Sync a full Grin node on this device instead of trusting a public one."
+    own_node_active: "Running your own node"
+    repair: "Repair wallet"
+    repair_desc: "Re-scan the chain and restore any missing outputs. This can take a while."
+    repair_unavailable: "Needs a synced node connection first."
+    repairing: "Repairing… %{pct}%"
+    restore: "Restore wallet"
+    restore_desc: "Delete local data and rebuild from your seed. Use this if a repair didn't help — you'll re-open the wallet after."
+    restore_confirm: "Tap again to restore"
+    show_phrase: "Recovery phrase"
+    phrase_desc: "Your 24 grin seed words — the only way to recover funds. Keep them offline and private."
+    reveal: "Show phrase"
+    hide: "Hide"
+    password: "Wallet password"
+    wrong_password: "Wrong password."
+    delete: "Delete wallet"
+    delete_desc: "Permanently remove this wallet from this device. Without your seed, funds can't be recovered."
+    delete_confirm: "Tap again to delete"
+    manage_node: "Manage node connection"
+    repair_confirm: "Yes, repair now"
+    repair_confirm_note: "Repair re-scans the chain and can take a few minutes."
+    restore_confirm_note: "This erases local data and rebuilds it from your seed — it can take several minutes."
+    nostr_key: "Nostr key"
+    nostr_key_desc: "Your nsec, the secret key to your nostr identity. Copy it or show its QR to log in to nostr apps like magick.market. Anyone who has it controls your identity, so keep it private."
+    reveal_nsec: "Show key"
+    copy_nsec: "Copy nsec"
+    show_qr: "Show QR"
+    hide_qr: "Hide QR"
+  privacy:
+    title: "Network privacy"
+    intro: "Goblin sends its private traffic through the Nym mixnet — a five-hop network that hides who is talking to whom, so a relay can't link a payment back to you."
+    payments: "Payments"
+    payments_blurb: "Every nostr message carrying a slatepack."
+    usernames: "usernames"
+    usernames_blurb: "NIP-05 name lookups to and from goblin.st."
+    price_avatars: "Price"
+    price_avatars_blurb: "The live fiat rate shown next to amounts."
+    over_mixnet: "Over the mixnet"
+    direct_connection: "Direct connection"
+    grin_node: "Grin node"
+    grin_node_blurb: "Block sync and broadcasting your transaction to the network. This is public chain data, the same for everyone, and isn't linked to your identity."
+  pairing:
+    title: "Pairing"
+    intro: "What your balance and amounts are shown against."
+    pair_with: "Pair with"
+    rates_note: "Rates fetch over the Nym mixnet, only while a pairing is on — off means no rate request leaves your device."
+  relays:
+    title: "Relays"
+    intro: "Payment messages are mirrored to every relay below; one reachable relay is enough to receive."
+    your_relays: "Your relays"
+    add_relay: "Add relay"
+    add_relay_btn: "Add relay"
+    save_reconnect: "Save & reconnect"
+    none: "none"
+    count: "%{n} relays"
+  node:
+    title: "Node"
+    connection: "Connection"
+    integrated: "Integrated node"
+    applies_after: "Applies after the wallet is locked and unlocked again."
+    add_external: "Add external node"
+    api_secret_hint: "API secret (optional)"
+    add_node: "Add node"
+    integrated_host: "integrated node"
+    summary_syncing: "%{conn} · syncing"
+    summary_block: "Block %{height} · %{conn}"
+  nips:
+    title: "nostr & NIPs"
+    intro1: "Goblin speaks nostr — an open protocol of signed messages passed through simple relay servers. Your wallet carries its own nostr identity: a standalone random key, kept deliberately independent of your funds and seed. Every payment travels as an end-to-end encrypted direct message between identities, with the slatepack riding inside."
+    intro2: "goblin.st is Goblin's name service: claiming a username publishes a name → key mapping there (NIP-05), so people can pay you instead of a long npub. The username is public; payment contents never are. NIPs are the protocol's building blocks — tap one to read the spec."
+    n05_title: "Names"
+    n05_blurb: "Maps username@goblin.st to your key, so handles work like addresses."
+    n17_title: "Private messages"
+    n17_blurb: "The encrypted DM envelope every payment travels in."
+    n44_title: "Encryption"
+    n44_blurb: "The authenticated cipher used inside those messages."
+    n49_title: "Key encryption"
+    n49_blurb: "How the secret key is stored at rest, locked by your password."
+    n59_title: "Gift wrap"
+    n59_blurb: "Wraps messages so relays can't see who is talking to whom."
+    n98_title: "HTTP auth"
+    n98_blurb: "Signs the username registration request to goblin.st."
+  onboarding:
+    intro:
+      private_money_head: "Private money"
+      private_money_body: "Goblin is a wallet for grin — digital cash with no amounts or addresses on its chain."
+      send_like_message_head: "Send like a message"
+      send_like_message_body: "Pay a username or npub and it arrives as an end-to-end encrypted message over nostr and the Nym mixnet — no one in between can see the amount or who's involved."
+      yours_alone_head: "Yours alone"
+      yours_alone_body: "Keys, names and history live on this device. Built on the GRIM wallet."
+      get_started: "Get started"
+      footnote: "Takes about a minute. You can change everything later."
+    node:
+      kicker: "STEP 1 OF 3 · NETWORK"
+      title: "How should Goblin\nwatch the chain?"
+      own_title: "Run my own node"
+      own_badge: "Private"
+      own_body: "Trusts no one — your wallet checks the chain itself. Syncs in the background while you finish setup."
+      connect_title: "Connect to a node"
+      connect_badge: "Instant"
+      connect_body: "No sync wait. The node you pick can see your wallet's queries."
+      changeable: "Changeable any time in Settings → Node."
+      continue: "Continue"
+      url_invalid: "Node URL must start with http:// or https://"
+    wallet:
+      kicker: "STEP 2 OF 3 · WALLET"
+      title: "Set up your wallet"
+      create_new: "Create new"
+      restore_from_seed: "Restore from seed"
+      name_hint: "Wallet name"
+      password_hint: "Password"
+      repeat_password_hint: "Repeat password"
+      restore_hint: "Have your seed words ready — you'll enter them next."
+      create_hint: "Next you'll get 24 seed words to write down. They are the money — anyone holding them holds your funds."
+      continue: "Continue"
+      passwords_no_match: "Passwords don't match"
+    words:
+      kicker: "STEP 2 OF 3 · WALLET"
+      title_restore: "Enter your seed words"
+      title_create: "Write these words down"
+      write_down_hint: "On paper, in order. Anyone with these words can take your funds; without them a lost device means lost funds."
+      paste: "Paste"
+      scan_qr: "Scan QR"
+      copy_clipboard: "Copy to clipboard (avoid this)"
+      restore_wallet: "Restore wallet"
+      wrote_them_down: "I wrote them down"
+      fill_every_word: "Fill every word — tap a word to edit it, or paste the phrase."
+    confirm:
+      kicker: "STEP 2 OF 3 · WALLET"
+      title: "Now prove it"
+      enter_hint: "Enter the words you just wrote down. Tap a word to type it."
+      paste: "Paste"
+      create_wallet: "Create wallet"
+      keep_going: "Keep going — every word, in order."
+    identity:
+      kicker: "STEP 3 OF 3 · IDENTITY"
+      title: "Your payment identity"
+      key_being_made: "key being made…"
+      connected_nym: "connected over Nym"
+      connecting_nym: "connecting over Nym…"
+      fresh_key_blurb: "A payment key that isn't part of your seed — rotate it anytime to stay private, without touching your funds."
+      clean_slate_blurb: "Want a clean slate? Swap in a brand-new key any time — the new you isn't linked to the old one. Same wallet, fresh face."
+      pick_username: "Pick a username — optional"
+      username_blurb: "Friends pay your name instead of a long key. Optional — claim one any time."
+      username_field_hint: "yourname"
+      working: "Working…"
+      claim_username: "Claim username"
+      available_when_connected: "Available once the mixnet connects — or skip and claim later."
+      youre: "You're %{name}"
+      claimed_title: "%{name} is yours"
+      claimed_blurb: "Friends can now pay you by name. You're all set — open your wallet."
+      open_wallet: "Open my wallet"
+      skip_for_now: "Skip for now"
+      import_existing: "Already have a Goblin identity? Import it"
+      import_title: "Import your identity"
+      import_blurb: "Paste your nsec or pick a .backup file to keep your existing key and username instead of this new one."
+    errors:
+      cant_open: "Couldn't open the wallet: %{err}"
+      cant_create: "Couldn't create the wallet: %{err}"
+  send:
+    scan_to_request: "Scan to request"
+    scan_to_pay: "Scan to pay"
+    tab_scan: "Scan"
+    tab_my_code: "My Code"
+    request_from: "Request from"
+    send_to: "Send to"
+    search_hint: "handle, npub, or name"
+    suggested: "%{icon}  Suggested"
+    no_contacts: "No contacts yet. Find someone by their handle."
+    no_profile: "no profile"
+    tag_contact: "contact"
+    tag_on_nostr: "on nostr"
+    searching_nostr: "Searching nostr…"
+    unverified_title: "Pay an unverified key?"
+    unverified_body: "No nostr profile is published for this key — it may be brand new, anonymous, or mistyped. Double-check it's the right one before sending."
+    keep_looking: "Keep looking"
+    pay_anyway: "Pay anyway"
+    scan_not_recipient: "That QR isn't a goblin recipient — expected an npub or handle"
+    scan_prompt: "Position a goblin code in view to activate"
+    scan_to_pay_me: "Scan to pay me"
+    share_btn: "%{icon} Share"
+    share_message: "Pay me on Goblin — %{handle}\n%{link}\nnpub: %{npub}"
+    none_found: "No one found for %{label}"
+    enter_recipient: "Enter a handle, npub, or name"
+    amount_title: "Amount"
+    to_name: "To %{name}"
+    not_enough: "You don't have enough grin"
+    max: "Max"
+    note_label: "Note"
+    note_hint: "Add a note…"
+    add_note: "Add a note"
+    edit_note: "Edit note"
+    note_cancel: "Cancel"
+    note_save: "Save"
+    review_btn: "Review"
+    confirm_request: "Confirm request"
+    review_title: "Review"
+    requesting_from: "Requesting from %{name}"
+    youre_sending: "You're sending %{name}"
+    row_from: "From"
+    row_to: "To"
+    row_note: "Note"
+    row_they_pay: "They pay"
+    row_they_pay_val: "Only if they approve"
+    row_delivery: "Delivery"
+    row_delivery_val: "NIP-44 encrypted, over Nym"
+    row_network_fee: "Network fee"
+    row_network_fee_val: "Deducted from your balance"
+    row_privacy: "Privacy"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "Send request"
+    request_approve_hint: "They'll get a request to approve"
+    hold_to_send: "Hold to send"
+    lower_amount: "Go back and lower the amount"
+    hold_confirm_hint: "Press and hold to confirm"
+    requesting: "Requesting…"
+    sending: "Sending…"
+    they: "They"
+    request_blocked: "%{who} isn't accepting requests. Ask them to send you grin instead."
+    failed_request_title: "Couldn't request"
+    failed_send_title: "Couldn't send"
+    failed_request_body: "We couldn't deliver the request. Ask them to send you grin instead."
+    failed_send_body: "The payment wasn't delivered. Your grin is safe — try again."
+    try_again_btn: "Try again"
+    close_btn: "Close"
+    success:
+      requested: "Requested"
+      sent: "Sent"
+      from: "from"
+      to: "to"
+      subtitle: "%{dir} %{who} · just now"
+      done_btn: "Done"
+      receipt_btn: "Receipt"
@@ -44,7 +44,7 @@ wallets:
  await_fin_amount: En attente de finalisation
  locked_amount: Verrouillé
  txs_empty: "Pour recevoir des fonds manuellement ou par transport, utilisez les boutons %{message} ou %{transport} en bas de l'écran. Pour modifier les paramètres du portefeuille, appuyez sur le bouton %{settings}."
-  title: Portefeuilles
+  title: Goblin
  create_desc: Créer ou importer un portefeuille existant à partir de la phrase de récupération sauvegardée.
  add: Ajouter un portefeuille
  name: 'Nom:'
@@ -355,4 +355,468 @@ keyboard:
  m: ','
  m1: .
  m2: ':'
-  m3: /
+  m3: /
+goblin:
+  home:
+    anonymous: "Anonyme"
+    connected_nym: "Connecté via Nym"
+    nym_ready: "Nym prêt · relais…"
+    connecting_nym: "Connexion à Nym…"
+    cant_reach_node: "Nœud injoignable"
+    node_synced: "Nœud synchronisé"
+    syncing: "Synchronisation…"
+    balance_updating: "Solde en cours de mise à jour…"
+    listening: "En attente de paiements"
+    block: "Bloc %{height}"
+    waiting_for_chain: "En attente de la chaîne…"
+    nav_wallet: "Portefeuille"
+    nav_pay: "Payer"
+    nav_activity: "Activité"
+    nav_receive: "Recevoir"
+    nav_settings: "Réglages"
+    activity: "Activité"
+    empty_title: "Aucune activité"
+    empty_sub: "Envoyez ou recevez des grin pour commencer."
+    recent: "Récent"
+    scan_to_pay: "Scanner pour payer"
+    type_amount: "Saisir un montant"
+    request: "Demander"
+    pay: "Payer"
+    enter_amount: "Saisissez un montant à payer ou demander"
+  activity:
+    canceled: "annulé"
+    pending: "en attente"
+    earlier: "Plus tôt"
+    today: "Aujourd'hui"
+    yesterday: "Hier"
+    title: "Activité"
+    requests: "Demandes"
+    empty_title: "Aucune activité"
+    empty_sub: "Vos paiements apparaîtront ici."
+    pending_header: "En attente"
+  receipt:
+    title: "Reçu"
+    not_found: "Transaction introuvable"
+    for_note: "Pour %{note}"
+    details: "Détails de la transaction"
+    canceled: "Annulé"
+    expired: "Expiré"
+    funds_returned: "Fonds retournés"
+    complete: "Terminé"
+    payment_received: "Paiement reçu"
+    payment_sent: "Paiement envoyé avec succès"
+    pending: "En attente"
+    confs: "%{c}/%{r} confirmations"
+    waiting_to_confirm: "En attente de confirmation"
+    paying: "Paiement…"
+    you: "Vous"
+    to: "À"
+    from: "De"
+    nostr: "nostr"
+    fee_none: "Aucun"
+    network_fee: "Frais de réseau"
+    privacy: "Confidentialité"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "Transaction"
+    cancel_request: "Annuler la demande"
+    cancel_send: "Annuler le paiement"
+    cancel_send_confirm: "Appuyez à nouveau pour annuler — il peut encore le recevoir"
+    cancel_send_done: "Paiement annulé — vos fonds sont à nouveau disponibles"
+    cancel_send_too_late: "Ce paiement est déjà passé et ne peut pas être annulé"
+    waiting_to_receive: "En attente de réception par %{name}…"
+  request:
+    title: "%{name} demande"
+    approve: "Approuver"
+    decline: "Refuser"
+    review_title: "Vérifier la demande"
+    hold_to_accept: "Maintenir pour accepter"
+    hold_accept_hint: "Maintenez pour payer cette demande"
+  receive:
+    title: "Recevoir"
+    requesting: "Demande de %{amt}%{tsu} — partagez pour être payé"
+    clear_request: "Effacer la demande"
+    share_handle: "Partagez votre identifiant pour être payé"
+    share_npub: "Partagez votre npub pour être payé"
+    copied: "Copié"
+    copy_nostr_id: "Copier l'ID nostr"
+    copy_address: "Copier l'adresse"
+    copy_npub: "Copier npub"
+    share_message: "Payez-moi sur Goblin (goblin.st) — %{npub}"
+    privacy_note: "Votre nom d'utilisateur est public. Le contenu des paiements reste chiffré sur le réseau."
+    privacy_note_npub: "Votre npub est public. Le contenu des paiements reste chiffré sur le réseau."
+  profile:
+    title: "Profil"
+    activity: "Activité"
+    no_activity: "Aucune activité avec cette personne."
+    unblock: "Débloquer"
+    block: "Bloquer"
+    blocked_blurb: "Bloqué — ses paiements et demandes sont ignorés."
+    block_blurb: "Le blocage ignore ses paiements et demandes entrants."
+  settings:
+    title: "Réglages"
+    connected_nostr: "Connecté à nostr"
+    connecting_relays: "Connexion aux relais…"
+    identity: "Identité"
+    copy_npub: "Copier le npub (public)"
+    rotate_key: "Renouveler la clé nostr"
+    import_identity: "Importer l'identité (.backup / nsec)"
+    backup_note: "Changement d'appareil ? Sauvegardez les DEUX : votre phrase seed (fonds) et votre fichier .backup d'identité (nom + clé)."
+    wallet: "Portefeuille"
+    display_unit: "Unité d'affichage"
+    relays: "Relais"
+    nostr_relays: "Relais Nostr"
+    node: "Nœud"
+    integrated_node: "Paramètres du nœud intégré"
+    node_advanced: "Avancé"
+    slatepacks: "Slatepacks"
+    slatepacks_value: "Transaction manuelle"
+    lock_wallet: "Verrouiller le portefeuille"
+    switch_wallet: "Changer de portefeuille"
+    advanced: "Avancé"
+    privacy: "Confidentialité"
+    mixnet_routing: "Routage par mixnet"
+    messages_lookups: "Messages et recherches"
+    auto_accept: "Acceptation auto"
+    pairing: "Devise des prix"
+    accept_anyone: "Tout le monde"
+    accept_contacts: "Contacts seulement"
+    accept_ask: "Toujours demander"
+    requests: "Demandes"
+    incoming_requests: "Demandes entrantes"
+    incoming_requests_sub: "Laisser les autres vous demander de l'argent"
+    appearance: "Apparence"
+    theme: "Thème"
+    theme_light: "Clair"
+    theme_dark: "Sombre"
+    theme_yellow: "Jaune"
+    archive: "Archive"
+    export_archive: "Exporter l'archive"
+    wipe_history: "Effacer l'historique des paiements"
+    wipe_history_confirm: "Appuyez à nouveau pour effacer — action irréversible"
+    about: "À propos"
+    goblin: "Goblin"
+    build: "Build %{build}"
+    network: "Réseau"
+    network_value: "MW + mixnet Nym + nostr"
+    third_party: "Tiers"
+    grim: "GRIM (portefeuille amont)"
+    grin_node: "Nœud grin"
+    sp_intro: "Avancé — échangez des slatepacks bruts à la main, comme le fait GRIM. À utiliser seulement si vous ne pouvez pas payer ou être payé via un username."
+    sp_receive_group: "Recevoir ou finaliser"
+    sp_receive_blurb: "Collez un slatepack qu'on vous a donné. Goblin reçoit le paiement, règle la facture, ou le finalise et le publie."
+    sp_process: "Traiter le slatepack"
+    sp_paste_first: "Collez d'abord un slatepack."
+    sp_reply_ready: "Réponse prête — renvoyez-la à l'expéditeur."
+    sp_finalizing: "Finalisation et publication sur la chaîne…"
+    sp_create_group: "Créer un paiement"
+    sp_create_blurb: "Créez un slatepack à remettre à quelqu'un. Il le reçoit, vous renvoie la réponse, et vous le finalisez ci-dessus."
+    sp_amount_hint: "Montant en grin"
+    sp_addr_hint: "Adresse du destinataire (facultatif)"
+    sp_create: "Créer un slatepack"
+    sp_ready: "Slatepack prêt — remettez-le au destinataire."
+    sp_amount_gt_zero: "Saisissez un montant supérieur à zéro."
+    sp_to_send: "Slatepack à envoyer"
+    sp_copy: "Copier le slatepack"
+    rotate_line1: "• Vous obtenez une toute nouvelle clé ALÉATOIRE ; l'ancien npub cesse de recevoir. Il n'y a aucune chaîne de dérivation entre eux."
+    rotate_line2: "• La nouvelle clé n'est PAS récupérable depuis votre phrase de récupération — sauvegardez le nouveau nsec juste après le renouvellement."
+    rotate_line3: "• Votre nom d'utilisateur est LIBÉRÉ — réclamez le même ou un nouveau juste après (une fois libre, n'importe qui peut le prendre)."
+    rotate_line4: "• Les paiements encore en cours vers l'ancienne clé SERONT interrompus — attendez d'abord la fin des paiements en attente."
+    rotate_line5: "• Les contacts qui ont enregistré votre npub directement doivent vous retrouver — partagez votre nouveau npub ou votre username re-réservé."
+    cancel: "Annuler"
+    continue: "Continuer"
+    final_confirmation: "Confirmation finale"
+    rotate_confirm_blurb: "Cette action est irréversible depuis l'app. Tapez RESET et saisissez le mot de passe du portefeuille pour renouveler."
+    type_reset: "Tapez RESET"
+    wallet_password: "Mot de passe du portefeuille"
+    rotate_key_btn: "Renouveler la clé"
+    rotating_key: "Renouvellement de la clé…"
+    key_rotated: "Clé renouvelée"
+    new_npub: "Nouveau npub : %{npub}"
+    backup_new_key: "Sauvegardez la NOUVELLE clé secrète maintenant — votre phrase de récupération ne peut pas la restaurer."
+    copy_new_nsec: "Copier la sauvegarde du nouveau nsec"
+    done: "Terminé"
+    rotation_failed: "Échec du renouvellement"
+    close: "Fermer"
+    import_identity_title: "Importer une identité"
+    import_blurb: "Remplace l'identité nostr de ce portefeuille — choisissez un fichier .backup GOBLIN, ou collez un nsec. Une sauvegarde restaure aussi votre nom d'utilisateur et votre historique. Sauvegardez d'abord la clé actuelle si besoin."
+    import_nsec_hint: "nsec1… ou sauvegarde collée"
+    backup_password_hint: "Mot de passe de sauvegarde (uniquement si exportée ailleurs)"
+    import_btn: "Importer"
+    importing: "Importation…"
+    identity_replaced: "Identité remplacée"
+    now_using: "Utilise maintenant : %{npub}"
+    import_failed: "Échec de l'importation"
+    name_authority: "Autorité de noms"
+    name_authority_title: "Changer l'autorité de noms"
+    name_authority_blurb: "Le serveur qui enregistre et vérifie les noms. Pointez-le vers une autre instance pour utiliser et payer des noms qui y sont hébergés."
+    name_authority_invalid: "Saisissez une URL complète (https://…)."
+    reset: "Réinitialiser"
+    save: "Enregistrer"
+    backup_file: "Sauvegarder dans un fichier"
+    choose_backup_file: "Choisir un fichier .backup"
+    backup_read_failed: "Impossible de lire ce fichier."
+    backup_saved: "Sauvegarde enregistrée"
+    backup_saved_sub: "Conservez le fichier .backup en lieu sûr — quiconque l'a AVEC votre mot de passe peut restaurer votre identité."
+    backup_file_title: "Sauvegarder l'identité"
+    backup_file_blurb: "Crée un fichier .backup chiffré avec votre nom d'utilisateur et votre clé. Saisissez le mot de passe du portefeuille pour le sceller."
+    backup_write_failed: "Impossible d'enregistrer le fichier."
+    create_backup: "Créer la sauvegarde"
+    registered: "%{name} enregistré"
+    released_msg: "Libéré — le nom est disponible"
+    release_confirm: "Libérer %{name} ?"
+    release_blurb: "Dès qu'il est libre, il est disponible — n'importe qui peut le réclamer, y compris votre prochaine clé. Vous ne pourrez pas enregistrer un autre nom d'utilisateur pendant 10 minutes."
+    releasing: "Libération…"
+    keep_it: "Le garder"
+    release_it: "Le libérer"
+    username: "Nom d'utilisateur"
+    username_note: "Affiché comme votre nom. Public sur goblin.st. Les paiements restent chiffrés."
+    release_username: "Libérer le nom d'utilisateur"
+    pick_username: "Choisir un nom d'utilisateur — facultatif"
+    working: "En cours…"
+    claim: "Réserver"
+    err_just_taken: "Ce nom d'utilisateur vient d'être pris"
+    err_cooldown: "Vous avez récemment libéré un nom d'utilisateur — vous pouvez en enregistrer un nouveau dans les 10 minutes."
+    err_unreachable: "Impossible de joindre goblin.st — souci de connexion. Réessayez."
+    err_release: "Impossible de libérer : %{err}"
+    avail_available: "Disponible !"
+    avail_taken: "Pris"
+    avail_reserved: "Réservé"
+    avail_invalid: "Les noms font 3 à 20 caractères : a–z, 0–9, _ ou -"
+    avail_quarantined: "Indisponible"
+    avail_unknown: "Vérification impossible — souci de connexion. Réessayez."
+  advanced:
+    title: "Avancé"
+    intro: "Outils de portefeuille bas niveau de GRIM. Vous n'en aurez normalement pas besoin."
+    own_node_desc: "Synchronisez un nœud Grin complet sur cet appareil au lieu de faire confiance à un nœud public."
+    own_node_active: "Votre propre nœud est actif"
+    repair: "Réparer le portefeuille"
+    repair_desc: "Re-scanner la chaîne et restaurer les sorties manquantes. Cela peut prendre du temps."
+    repair_unavailable: "Nécessite d'abord une connexion à un nœud synchronisé."
+    repairing: "Réparation… %{pct}%"
+    restore: "Restaurer le portefeuille"
+    restore_desc: "Supprimer les données locales et reconstruire depuis votre seed. À utiliser si une réparation n'a pas aidé — vous rouvrirez le portefeuille ensuite."
+    restore_confirm: "Touchez à nouveau pour restaurer"
+    show_phrase: "Phrase de récupération"
+    phrase_desc: "Vos 24 mots de seed grin — le seul moyen de récupérer les fonds. Gardez-les hors ligne et privés."
+    reveal: "Afficher la phrase"
+    hide: "Masquer"
+    password: "Mot de passe du portefeuille"
+    wrong_password: "Mot de passe incorrect."
+    delete: "Supprimer le portefeuille"
+    delete_desc: "Supprimer définitivement ce portefeuille de cet appareil. Sans votre seed, les fonds sont irrécupérables."
+    delete_confirm: "Touchez à nouveau pour supprimer"
+    manage_node: "Gérer la connexion au nœud"
+    repair_confirm: "Oui, réparer maintenant"
+    repair_confirm_note: "La réparation réanalyse la chaîne et peut prendre quelques minutes."
+    restore_confirm_note: "Cela efface les données locales et les reconstruit depuis votre seed — cela peut prendre plusieurs minutes."
+    nostr_key: "Clé Nostr"
+    nostr_key_desc: "Votre nsec, la clé secrète de votre identité Nostr. Copiez-la ou affichez son QR pour vous connecter à des applis Nostr comme magick.market. Quiconque la possède contrôle votre identité, gardez-la privée."
+    reveal_nsec: "Afficher la clé"
+    copy_nsec: "Copier le nsec"
+    show_qr: "Afficher le QR"
+    hide_qr: "Masquer le QR"
+  privacy:
+    title: "Confidentialité réseau"
+    intro: "Goblin envoie son trafic privé via le mixnet Nym — un réseau à cinq sauts qui masque qui parle à qui, afin qu'un relais ne puisse pas relier un paiement à vous."
+    payments: "Paiements"
+    payments_blurb: "Chaque message nostr transportant un slatepack."
+    usernames: "usernames"
+    usernames_blurb: "Recherches de noms NIP-05 vers et depuis goblin.st."
+    price_avatars: "Prix"
+    price_avatars_blurb: "Le taux en temps réel affiché à côté des montants."
+    over_mixnet: "Via le mixnet"
+    direct_connection: "Connexion directe"
+    grin_node: "Nœud grin"
+    grin_node_blurb: "Synchronisation des blocs et diffusion de votre transaction sur le réseau. Ce sont des données de chaîne publiques, identiques pour tous, et non liées à votre identité."
+  pairing:
+    title: "Appairage"
+    intro: "Ce à quoi votre solde et vos montants sont comparés."
+    pair_with: "Apparier avec"
+    rates_note: "Les cours sont récupérés via le mixnet Nym, uniquement tant qu'un appairage est actif — désactivé, aucune requête de cours ne quitte votre appareil."
+  relays:
+    title: "Relais"
+    intro: "Les messages de paiement sont répliqués sur tous les relais ci-dessous ; un seul relais joignable suffit pour recevoir."
+    your_relays: "Vos relais"
+    add_relay: "Ajouter un relais"
+    add_relay_btn: "Ajouter un relais"
+    save_reconnect: "Enregistrer et reconnecter"
+    none: "aucun"
+    count: "%{n} relais"
+  node:
+    title: "Nœud"
+    connection: "Connexion"
+    integrated: "Nœud intégré"
+    applies_after: "S'applique après le verrouillage puis déverrouillage du portefeuille."
+    add_external: "Ajouter un nœud externe"
+    api_secret_hint: "Secret API (facultatif)"
+    add_node: "Ajouter le nœud"
+    integrated_host: "nœud intégré"
+    summary_syncing: "%{conn} · synchronisation"
+    summary_block: "Bloc %{height} · %{conn}"
+  nips:
+    title: "nostr et NIP"
+    intro1: "Goblin parle nostr — un protocole ouvert de messages signés transmis via de simples serveurs relais. Votre portefeuille porte sa propre identité nostr : une clé aléatoire autonome, gardée délibérément indépendante de vos fonds et de votre phrase de récupération. Chaque paiement voyage comme un message direct chiffré de bout en bout entre identités, le slatepack à l'intérieur."
+    intro2: "goblin.st est le service de noms de Goblin : réserver un nom d'utilisateur y publie une correspondance nom → clé (NIP-05), pour qu'on puisse payer you au lieu d'un long npub. Le nom d'utilisateur est public ; le contenu des paiements ne l'est jamais. Les NIP sont les briques du protocole — touchez-en un pour lire la spécification."
+    n05_title: "Noms"
+    n05_blurb: "Associe username@goblin.st à votre clé, pour que les identifiants fonctionnent comme des adresses."
+    n17_title: "Messages privés"
+    n17_blurb: "L'enveloppe de DM chiffré dans laquelle voyage chaque paiement."
+    n44_title: "Chiffrement"
+    n44_blurb: "Le chiffrement authentifié utilisé à l'intérieur de ces messages."
+    n49_title: "Chiffrement de clé"
+    n49_blurb: "Comment la clé secrète est stockée au repos, verrouillée par votre mot de passe."
+    n59_title: "Emballage cadeau"
+    n59_blurb: "Enveloppe les messages pour que les relais ne voient pas qui parle à qui."
+    n98_title: "Auth HTTP"
+    n98_blurb: "Signe la demande d'enregistrement du nom d'utilisateur auprès de goblin.st."
+  onboarding:
+    intro:
+      private_money_head: "Argent privé"
+      private_money_body: "Goblin est un portefeuille pour grin — de l'argent numérique sans montants ni adresses sur sa chaîne."
+      send_like_message_head: "Envoyer comme un message"
+      send_like_message_body: "Payez un username ou un npub et cela arrive comme un message chiffré de bout en bout via nostr et le mixnet Nym — personne entre les deux ne voit le montant ni les personnes impliquées."
+      yours_alone_head: "À vous seul"
+      yours_alone_body: "Clés, noms et historique vivent sur cet appareil. Construit sur le portefeuille GRIM."
+      get_started: "Commencer"
+      footnote: "Environ une minute. Vous pourrez tout changer plus tard."
+    node:
+      kicker: "ÉTAPE 1 SUR 3 · RÉSEAU"
+      title: "Comment Goblin doit-il\nsurveiller la chaîne ?"
+      own_title: "Lancer mon propre nœud"
+      own_badge: "Privé"
+      own_body: "Ne fait confiance à personne — votre portefeuille vérifie la chaîne lui-même. Se synchronise en arrière-plan pendant que vous terminez la configuration."
+      connect_title: "Se connecter à un nœud"
+      connect_badge: "Instantané"
+      connect_body: "Aucune attente de synchronisation. Le nœud que vous choisissez peut voir les requêtes de votre portefeuille."
+      changeable: "Modifiable à tout moment dans Réglages → Nœud."
+      continue: "Continuer"
+      url_invalid: "L'URL du nœud doit commencer par http:// ou https://"
+    wallet:
+      kicker: "ÉTAPE 2 SUR 3 · PORTEFEUILLE"
+      title: "Configurez votre portefeuille"
+      create_new: "Créer un nouveau"
+      restore_from_seed: "Restaurer depuis la phrase"
+      name_hint: "Nom du portefeuille"
+      password_hint: "Mot de passe"
+      repeat_password_hint: "Répéter le mot de passe"
+      restore_hint: "Préparez vos mots de récupération — vous les saisirez ensuite."
+      create_hint: "Vous obtiendrez ensuite 24 mots de récupération à noter. Ce sont l'argent — quiconque les détient détient vos fonds."
+      continue: "Continuer"
+      passwords_no_match: "Les mots de passe ne correspondent pas"
+    words:
+      kicker: "ÉTAPE 2 SUR 3 · PORTEFEUILLE"
+      title_restore: "Saisissez vos mots de récupération"
+      title_create: "Notez ces mots"
+      write_down_hint: "Sur papier, dans l'ordre. Quiconque a ces mots peut prendre vos fonds ; sans eux, un appareil perdu signifie des fonds perdus."
+      paste: "Coller"
+      scan_qr: "Scanner le QR"
+      copy_clipboard: "Copier dans le presse-papiers (à éviter)"
+      restore_wallet: "Restaurer le portefeuille"
+      wrote_them_down: "Je les ai notés"
+      fill_every_word: "Remplissez chaque mot — touchez un mot pour le modifier, ou collez la phrase."
+    confirm:
+      kicker: "ÉTAPE 2 SUR 3 · PORTEFEUILLE"
+      title: "Maintenant prouvez-le"
+      enter_hint: "Saisissez les mots que vous venez de noter. Touchez un mot pour le taper."
+      paste: "Coller"
+      create_wallet: "Créer le portefeuille"
+      keep_going: "Continuez — chaque mot, dans l'ordre."
+    identity:
+      kicker: "ÉTAPE 3 SUR 3 · IDENTITÉ"
+      title: "Votre identité de paiement"
+      key_being_made: "clé en cours de création…"
+      connected_nym: "connecté via Nym"
+      connecting_nym: "connexion via Nym…"
+      fresh_key_blurb: "Une clé de paiement qui ne fait pas partie de votre seed — renouvelable à tout moment, sans toucher à vos fonds."
+      clean_slate_blurb: "Envie de repartir à zéro ? Remplacez par une toute nouvelle clé à tout moment — le nouveau vous n'est pas lié à l'ancien. Même portefeuille, nouveau visage."
+      pick_username: "Choisir un nom d'utilisateur — facultatif"
+      username_blurb: "Vos amis paient votre nom au lieu d'une longue clé. Facultatif — réclamez-en un à tout moment."
+      username_field_hint: "votrenom"
+      working: "En cours…"
+      claim_username: "Réserver le nom d'utilisateur"
+      available_when_connected: "Disponible une fois le mixnet connecté — ou passez et réservez plus tard."
+      youre: "Vous êtes %{name}"
+      claimed_title: "%{name} est à vous"
+      claimed_blurb: "Vos amis peuvent désormais vous payer par votre nom. Tout est prêt — ouvrez votre portefeuille."
+      open_wallet: "Ouvrir mon portefeuille"
+      skip_for_now: "Passer pour l'instant"
+      import_existing: "Vous avez déjà une identité Goblin ? Importez-la"
+      import_title: "Importer votre identité"
+      import_blurb: "Collez votre nsec ou choisissez un fichier .backup pour conserver votre clé et votre nom existants au lieu de ce nouveau."
+    errors:
+      cant_open: "Impossible d'ouvrir le portefeuille : %{err}"
+      cant_create: "Impossible de créer le portefeuille : %{err}"
+  send:
+    scan_to_request: "Scanner pour demander"
+    scan_to_pay: "Scanner pour payer"
+    tab_scan: "Scanner"
+    tab_my_code: "Mon code"
+    request_from: "Demander à"
+    send_to: "Envoyer à"
+    search_hint: "handle, npub ou nom"
+    suggested: "%{icon}  Suggéré"
+    no_contacts: "Aucun contact pour l'instant. Trouvez quelqu'un par son handle."
+    no_profile: "pas de profil"
+    tag_contact: "contact"
+    tag_on_nostr: "sur nostr"
+    searching_nostr: "Recherche sur nostr…"
+    unverified_title: "Payer une clé non vérifiée ?"
+    unverified_body: "Aucun profil nostr n'est publié pour cette clé — elle peut être toute neuve, anonyme ou mal saisie. Vérifiez bien qu'il s'agit de la bonne avant d'envoyer."
+    keep_looking: "Continuer à chercher"
+    pay_anyway: "Payer quand même"
+    scan_not_recipient: "Ce QR n'est pas un destinataire goblin — un npub ou handle est attendu"
+    scan_prompt: "Placez un code goblin dans le champ pour activer"
+    scan_to_pay_me: "Scannez pour me payer"
+    share_btn: "%{icon} Partager"
+    share_message: "Payez-moi sur Goblin — %{handle}\n%{link}\nnpub : %{npub}"
+    none_found: "Personne trouvé pour %{label}"
+    enter_recipient: "Saisissez un handle, un npub ou un nom"
+    amount_title: "Montant"
+    to_name: "À %{name}"
+    not_enough: "Vous n'avez pas assez de grin"
+    max: "Max"
+    note_label: "Note"
+    note_hint: "Ajouter une note…"
+    add_note: "Ajouter une note"
+    edit_note: "Modifier la note"
+    note_cancel: "Annuler"
+    note_save: "Enregistrer"
+    review_btn: "Vérifier"
+    confirm_request: "Confirmer la demande"
+    review_title: "Vérification"
+    requesting_from: "Demande à %{name}"
+    youre_sending: "Vous envoyez %{name}"
+    row_from: "De"
+    row_to: "À"
+    row_note: "Note"
+    row_they_pay: "Ils paient"
+    row_they_pay_val: "Seulement s'ils approuvent"
+    row_delivery: "Livraison"
+    row_delivery_val: "Chiffré NIP-44, via Nym"
+    row_network_fee: "Frais de réseau"
+    row_network_fee_val: "Déduit de votre solde"
+    row_privacy: "Confidentialité"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "Envoyer la demande"
+    request_approve_hint: "Ils recevront une demande à approuver"
+    hold_to_send: "Maintenir pour envoyer"
+    lower_amount: "Revenez et baissez le montant"
+    hold_confirm_hint: "Appuyez et maintenez pour confirmer"
+    requesting: "Demande en cours…"
+    sending: "Envoi…"
+    they: "Ils"
+    request_blocked: "%{who} n'accepte pas les demandes. Demandez-lui de vous envoyer des grin à la place."
+    failed_request_title: "Échec de la demande"
+    failed_send_title: "Échec de l'envoi"
+    failed_request_body: "Impossible de livrer la demande. Demandez-lui de vous envoyer des grin à la place."
+    failed_send_body: "Le paiement n'a pas été livré. Vos grin sont en sécurité — réessayez."
+    try_again_btn: "Réessayer"
+    close_btn: "Fermer"
+    success:
+      requested: "Demandé"
+      sent: "Envoyé"
+      from: "de"
+      to: "à"
+      subtitle: "%{dir} %{who} · à l'instant"
+      done_btn: "Terminé"
+      receipt_btn: "Reçu"
@@ -44,7 +44,7 @@ wallets:
  await_fin_amount: Ожидает завершения
  locked_amount: Заблокировано
  txs_empty: 'Для получения средств вручную или через транспорт используйте кнопки %{message} или %{transport} внизу экрана, для изменения настроек кошелька нажмите кнопку %{settings}.'
-  title: Кошельки
+  title: Goblin
  create_desc: Создайте или импортируйте существующий кошелёк из сохранённой фразы восстановления.
  add: Добавить кошелёк
  name: 'Название:'
@@ -355,4 +355,468 @@ keyboard:
  m: ь
  m1: б
  m2: ю
-  m3: ё
+  m3: ё
+goblin:
+  home:
+    anonymous: "Аноним"
+    connected_nym: "Подключено через Nym"
+    nym_ready: "Nym готов · реле…"
+    connecting_nym: "Подключение к Nym…"
+    cant_reach_node: "Нет связи с узлом"
+    node_synced: "Узел синхронизирован"
+    syncing: "Синхронизация…"
+    balance_updating: "Баланс обновляется…"
+    listening: "Ожидание платежей"
+    block: "Блок %{height}"
+    waiting_for_chain: "Ожидание цепочки…"
+    nav_wallet: "Кошелёк"
+    nav_pay: "Оплатить"
+    nav_activity: "Действия"
+    nav_receive: "Получить"
+    nav_settings: "Настройки"
+    activity: "Действия"
+    empty_title: "Пока нет действий"
+    empty_sub: "Отправьте или получите grin, чтобы начать."
+    recent: "Недавние"
+    scan_to_pay: "Сканируйте для оплаты"
+    type_amount: "Введите сумму"
+    request: "Запросить"
+    pay: "Оплатить"
+    enter_amount: "Введите сумму для оплаты или запроса"
+  activity:
+    canceled: "отменено"
+    pending: "в ожидании"
+    earlier: "Ранее"
+    today: "Сегодня"
+    yesterday: "Вчера"
+    title: "Действия"
+    requests: "Запросы"
+    empty_title: "Пока нет действий"
+    empty_sub: "Здесь появятся ваши платежи."
+    pending_header: "В ожидании"
+  receipt:
+    title: "Квитанция"
+    not_found: "Транзакция не найдена"
+    for_note: "За %{note}"
+    details: "Детали транзакции"
+    canceled: "Отменено"
+    expired: "Истекло"
+    funds_returned: "Средства возвращены"
+    complete: "Завершено"
+    payment_received: "Платёж получен"
+    payment_sent: "Платёж успешно отправлен"
+    pending: "В ожидании"
+    confs: "%{c}/%{r} подтверждений"
+    waiting_to_confirm: "Ожидание подтверждения"
+    paying: "Оплата…"
+    you: "Вы"
+    to: "Кому"
+    from: "От"
+    nostr: "nostr"
+    fee_none: "Нет"
+    network_fee: "Сетевая комиссия"
+    privacy: "Приватность"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "Транзакция"
+    cancel_request: "Отменить запрос"
+    cancel_send: "Отменить платёж"
+    cancel_send_confirm: "Нажмите ещё раз для отмены — он ещё может его получить"
+    cancel_send_done: "Платёж отменён — ваши средства снова доступны"
+    cancel_send_too_late: "Этот платёж уже прошёл и не может быть отменён"
+    waiting_to_receive: "Ожидание, пока %{name} получит…"
+  request:
+    title: "%{name} запрашивает"
+    approve: "Принять"
+    decline: "Отклонить"
+    review_title: "Проверить запрос"
+    hold_to_accept: "Удерживайте, чтобы принять"
+    hold_accept_hint: "Нажмите и удерживайте, чтобы оплатить запрос"
+  receive:
+    title: "Получить"
+    requesting: "Запрос %{amt}%{tsu} — поделитесь, чтобы получить оплату"
+    clear_request: "Очистить запрос"
+    share_handle: "Поделитесь именем, чтобы получить оплату"
+    share_npub: "Поделитесь своим npub, чтобы получить оплату"
+    copied: "Скопировано"
+    copy_nostr_id: "Копировать nostr ID"
+    copy_address: "Копировать адрес"
+    copy_npub: "Копировать npub"
+    share_message: "Заплатите мне в Goblin (goblin.st) — %{npub}"
+    privacy_note: "Ваше имя публично. Содержимое платежей остаётся зашифрованным в сети."
+    privacy_note_npub: "Ваш npub публичен. Содержимое платежей остаётся зашифрованным в сети."
+  profile:
+    title: "Профиль"
+    activity: "Действия"
+    no_activity: "Пока нет действий с ними."
+    unblock: "Разблокировать"
+    block: "Заблокировать"
+    blocked_blurb: "Заблокирован — их платежи и запросы отклоняются."
+    block_blurb: "Блокировка отклоняет их входящие платежи и запросы."
+  settings:
+    title: "Настройки"
+    connected_nostr: "Подключено к nostr"
+    connecting_relays: "Подключение к реле…"
+    identity: "Личность"
+    copy_npub: "Копировать npub (публичный)"
+    rotate_key: "Сменить ключ nostr"
+    import_identity: "Импорт личности (.backup / nsec)"
+    backup_note: "Меняете устройство? Сохраните ОБА: seed-фразу (средства) и файл .backup личности (имя + ключ)."
+    wallet: "Кошелёк"
+    display_unit: "Единица отображения"
+    relays: "Реле"
+    nostr_relays: "Реле Nostr"
+    node: "Узел"
+    integrated_node: "Настройки встроенного узла"
+    node_advanced: "Дополнительно"
+    slatepacks: "Slatepacks"
+    slatepacks_value: "Ручная транзакция"
+    lock_wallet: "Заблокировать кошелёк"
+    switch_wallet: "Сменить кошелёк"
+    advanced: "Дополнительно"
+    privacy: "Приватность"
+    mixnet_routing: "Маршрутизация через mixnet"
+    messages_lookups: "Сообщения и поиск"
+    auto_accept: "Автоприём"
+    pairing: "Валюта цены"
+    accept_anyone: "Любой"
+    accept_contacts: "Только контакты"
+    accept_ask: "Всегда спрашивать"
+    requests: "Запросы"
+    incoming_requests: "Входящие запросы"
+    incoming_requests_sub: "Разрешить другим запрашивать у вас деньги"
+    appearance: "Внешний вид"
+    theme: "Тема"
+    theme_light: "Светлая"
+    theme_dark: "Тёмная"
+    theme_yellow: "Жёлтая"
+    archive: "Архив"
+    export_archive: "Экспорт архива"
+    wipe_history: "Стереть историю платежей"
+    wipe_history_confirm: "Нажмите ещё раз, чтобы стереть — это нельзя отменить"
+    about: "О приложении"
+    goblin: "Goblin"
+    build: "Сборка %{build}"
+    network: "Сеть"
+    network_value: "MW + mixnet Nym + nostr"
+    third_party: "Сторонние"
+    grim: "GRIM (исходный кошелёк)"
+    grin_node: "Узел Grin"
+    sp_intro: "Для опытных — обмен сырыми slatepacks вручную, как в GRIM. Используйте только если не можете платить или получать через username."
+    sp_receive_group: "Получить или завершить"
+    sp_receive_blurb: "Вставьте slatepack, который вам дали. Goblin получит платёж, оплатит счёт или завершит и опубликует его."
+    sp_process: "Обработать slatepack"
+    sp_paste_first: "Сначала вставьте slatepack."
+    sp_reply_ready: "Ответ готов — отправьте его обратно отправителю."
+    sp_finalizing: "Завершение и публикация в цепочку…"
+    sp_create_group: "Создать платёж"
+    sp_create_blurb: "Создайте slatepack для передачи кому-то. Они получат его, отправят ответ, а вы завершите его выше."
+    sp_amount_hint: "Сумма в grin"
+    sp_addr_hint: "Адрес получателя (необязательно)"
+    sp_create: "Создать slatepack"
+    sp_ready: "Slatepack готов — передайте его получателю."
+    sp_amount_gt_zero: "Введите сумму больше нуля."
+    sp_to_send: "Slatepack для отправки"
+    sp_copy: "Копировать slatepack"
+    rotate_line1: "• Вы получите совершенно новый СЛУЧАЙНЫЙ ключ; старый npub перестанет принимать. Между ними нет цепочки вывода."
+    rotate_line2: "• Новый ключ НЕЛЬЗЯ восстановить из seed — сохраните новый nsec сразу после смены."
+    rotate_line3: "• Ваше имя пользователя ОСВОБОЖДАЕТСЯ — сразу после заявите то же или новое имя (как только свободно, его может занять кто угодно)."
+    rotate_line4: "• Платежи, всё ещё идущие к старому ключу, БУДУТ нарушены — сначала дождитесь завершения ожидающих платежей."
+    rotate_line5: "• Контакты, сохранившие ваш npub напрямую, должны найти вас заново — поделитесь новым npub или заново занятым username."
+    cancel: "Отмена"
+    continue: "Продолжить"
+    final_confirmation: "Финальное подтверждение"
+    rotate_confirm_blurb: "Это нельзя отменить из приложения. Введите RESET и пароль кошелька, чтобы сменить."
+    type_reset: "Введите RESET"
+    wallet_password: "Пароль кошелька"
+    rotate_key_btn: "Сменить ключ"
+    rotating_key: "Смена ключа…"
+    key_rotated: "Ключ сменён"
+    new_npub: "Новый npub: %{npub}"
+    backup_new_key: "Сохраните НОВЫЙ секретный ключ сейчас — seed не сможет его восстановить."
+    copy_new_nsec: "Копировать резерв нового nsec"
+    done: "Готово"
+    rotation_failed: "Смена не удалась"
+    close: "Закрыть"
+    import_identity_title: "Импорт личности"
+    import_blurb: "Заменяет nostr-личность этого кошелька — выберите файл GOBLIN .backup или вставьте nsec. Резервная копия также восстанавливает имя и историю. Сначала сохраните текущий ключ, если он ещё нужен."
+    import_nsec_hint: "nsec1… или вставленная копия"
+    backup_password_hint: "Пароль резерва (только если экспортирован в другом месте)"
+    import_btn: "Импорт"
+    importing: "Импорт…"
+    identity_replaced: "Личность заменена"
+    now_using: "Сейчас используется: %{npub}"
+    import_failed: "Импорт не удался"
+    name_authority: "Сервер имён"
+    name_authority_title: "Сменить сервер имён"
+    name_authority_blurb: "Сервер, который регистрирует и проверяет имена. Укажите другой инстанс, чтобы использовать и оплачивать имена оттуда."
+    name_authority_invalid: "Введите полный URL (https://…)."
+    reset: "Сброс"
+    save: "Сохранить"
+    backup_file: "Сохранить в файл"
+    choose_backup_file: "Выбрать файл .backup"
+    backup_read_failed: "Не удалось прочитать файл."
+    backup_saved: "Резервная копия сохранена"
+    backup_saved_sub: "Храните файл .backup в безопасности — любой, у кого есть он И ваш пароль, может восстановить вашу личность."
+    backup_file_title: "Резервная копия личности"
+    backup_file_blurb: "Создаёт один зашифрованный файл .backup с именем и ключом. Введите пароль кошелька, чтобы запечатать его."
+    backup_write_failed: "Не удалось сохранить файл."
+    create_backup: "Создать копию"
+    registered: "Зарегистрировано %{name}"
+    released_msg: "Освобождено — имя свободно для занятия"
+    release_confirm: "Освободить %{name}?"
+    release_blurb: "Как только оно свободно, его можно занять — кто угодно, включая ваш следующий ключ. Вы не сможете зарегистрировать другое имя в течение 10 минут."
+    releasing: "Освобождение…"
+    keep_it: "Оставить"
+    release_it: "Освободить"
+    username: "Имя пользователя"
+    username_note: "Отображается как ваше имя. Публично на goblin.st. Платежи остаются зашифрованными."
+    release_username: "Освободить имя"
+    pick_username: "Выберите имя — необязательно"
+    working: "Обработка…"
+    claim: "Занять"
+    err_just_taken: "Это имя только что заняли"
+    err_cooldown: "Вы недавно освободили имя — можно зарегистрировать новое в течение 10 минут."
+    err_unreachable: "Не удалось связаться с goblin.st — сбой соединения. Попробуйте снова."
+    err_release: "Не удалось освободить: %{err}"
+    avail_available: "Доступно!"
+    avail_taken: "Занято"
+    avail_reserved: "Зарезервировано"
+    avail_invalid: "Имена 3–20 символов: a–z, 0–9, _ или -"
+    avail_quarantined: "Недоступно"
+    avail_unknown: "Не удалось проверить — сбой соединения. Попробуйте снова."
+  advanced:
+    title: "Дополнительно"
+    intro: "Низкоуровневые инструменты кошелька из GRIM. Обычно они вам не нужны."
+    own_node_desc: "Синхронизируйте полный узел Grin на этом устройстве вместо доверия публичному."
+    own_node_active: "Ваш узел запущен"
+    repair: "Починить кошелёк"
+    repair_desc: "Повторно просканировать цепочку и восстановить недостающие выходы. Это может занять время."
+    repair_unavailable: "Сначала нужно синхронизированное подключение к узлу."
+    repairing: "Починка… %{pct}%"
+    restore: "Восстановить кошелёк"
+    restore_desc: "Удалить локальные данные и пересоздать из seed-фразы. Используйте, если починка не помогла — после этого откройте кошелёк заново."
+    restore_confirm: "Нажмите ещё раз для восстановления"
+    show_phrase: "Фраза восстановления"
+    phrase_desc: "Ваши 24 seed-слова grin — единственный способ восстановить средства. Храните их офлайн и в тайне."
+    reveal: "Показать фразу"
+    hide: "Скрыть"
+    password: "Пароль кошелька"
+    wrong_password: "Неверный пароль."
+    delete: "Удалить кошелёк"
+    delete_desc: "Безвозвратно удалить этот кошелёк с этого устройства. Без seed-фразы средства не восстановить."
+    delete_confirm: "Нажмите ещё раз для удаления"
+    manage_node: "Управление подключением к узлу"
+    repair_confirm: "Да, восстановить сейчас"
+    repair_confirm_note: "Восстановление повторно сканирует цепочку и может занять несколько минут."
+    restore_confirm_note: "Это стирает локальные данные и восстанавливает их из seed-фразы — может занять несколько минут."
+    nostr_key: "Ключ Nostr"
+    nostr_key_desc: "Ваш nsec, секретный ключ вашей личности Nostr. Скопируйте его или покажите QR-код, чтобы войти в приложения Nostr, такие как magick.market. Любой, у кого он есть, управляет вашей личностью, держите его в секрете."
+    reveal_nsec: "Показать ключ"
+    copy_nsec: "Копировать nsec"
+    show_qr: "Показать QR"
+    hide_qr: "Скрыть QR"
+  privacy:
+    title: "Сетевая приватность"
+    intro: "Goblin отправляет приватный трафик через mixnet Nym — сеть из пяти переходов, скрывающую, кто с кем общается, чтобы реле не могло связать платёж с вами."
+    payments: "Платежи"
+    payments_blurb: "Каждое nostr-сообщение, несущее slatepack."
+    usernames: "usernames"
+    usernames_blurb: "Поиск имён NIP-05 к и от goblin.st."
+    price_avatars: "Цена"
+    price_avatars_blurb: "Текущий курс рядом с суммами."
+    over_mixnet: "Через mixnet"
+    direct_connection: "Прямое соединение"
+    grin_node: "Узел Grin"
+    grin_node_blurb: "Синхронизация блоков и трансляция транзакции в сеть. Это публичные данные цепочки, одинаковые для всех, и они не связаны с вашей личностью."
+  pairing:
+    title: "Привязка"
+    intro: "К чему привязаны отображаемые баланс и суммы."
+    pair_with: "Привязать к"
+    rates_note: "Курсы загружаются через mixnet Nym только при включённой привязке — выключено означает, что запрос курса не покидает устройство."
+  relays:
+    title: "Реле"
+    intro: "Сообщения о платежах дублируются на каждое реле ниже; для получения достаточно одного доступного реле."
+    your_relays: "Ваши реле"
+    add_relay: "Добавить реле"
+    add_relay_btn: "Добавить реле"
+    save_reconnect: "Сохранить и переподключить"
+    none: "нет"
+    count: "%{n} реле"
+  node:
+    title: "Узел"
+    connection: "Соединение"
+    integrated: "Встроенный узел"
+    applies_after: "Применяется после блокировки и повторной разблокировки кошелька."
+    add_external: "Добавить внешний узел"
+    api_secret_hint: "API-секрет (необязательно)"
+    add_node: "Добавить узел"
+    integrated_host: "встроенный узел"
+    summary_syncing: "%{conn} · синхронизация"
+    summary_block: "Блок %{height} · %{conn}"
+  nips:
+    title: "nostr и NIPs"
+    intro1: "Goblin говорит на nostr — открытом протоколе подписанных сообщений, передаваемых через простые реле-серверы. Ваш кошелёк несёт собственную nostr-личность: отдельный случайный ключ, намеренно независимый от ваших средств и seed. Каждый платёж идёт как сквозно зашифрованное личное сообщение между личностями, со slatepack внутри."
+    intro2: "goblin.st — это служба имён Goblin: занятие имени публикует там сопоставление имя → ключ (NIP-05), чтобы вам платили на you вместо длинного npub. Имя публично; содержимое платежей — никогда. NIPs — это строительные блоки протокола; коснитесь одного, чтобы прочитать спецификацию."
+    n05_title: "Имена"
+    n05_blurb: "Сопоставляет username@goblin.st с вашим ключом, чтобы имена работали как адреса."
+    n17_title: "Личные сообщения"
+    n17_blurb: "Зашифрованный конверт DM, в котором идёт каждый платёж."
+    n44_title: "Шифрование"
+    n44_blurb: "Аутентифицированный шифр, используемый внутри этих сообщений."
+    n49_title: "Шифрование ключа"
+    n49_blurb: "Как секретный ключ хранится в покое, защищённый вашим паролем."
+    n59_title: "Gift wrap"
+    n59_blurb: "Оборачивает сообщения, чтобы реле не видели, кто с кем общается."
+    n98_title: "HTTP-авторизация"
+    n98_blurb: "Подписывает запрос регистрации имени на goblin.st."
+  onboarding:
+    intro:
+      private_money_head: "Приватные деньги"
+      private_money_body: "Goblin — кошелёк для grin: цифровая наличность без сумм и адресов в её цепочке."
+      send_like_message_head: "Отправляйте как сообщение"
+      send_like_message_body: "Заплатите на username или npub, и платёж придёт как сквозно зашифрованное сообщение через nostr и mixnet Nym — никто посередине не увидит сумму или участников."
+      yours_alone_head: "Только ваше"
+      yours_alone_body: "Ключи, имена и история живут на этом устройстве. На базе кошелька GRIM."
+      get_started: "Начать"
+      footnote: "Займёт около минуты. Всё можно изменить позже."
+    node:
+      kicker: "ШАГ 1 ИЗ 3 · СЕТЬ"
+      title: "Как Goblin должен\nследить за цепочкой?"
+      own_title: "Запустить свой узел"
+      own_badge: "Приватно"
+      own_body: "Никому не доверяет — ваш кошелёк проверяет цепочку сам. Синхронизируется в фоне, пока вы завершаете настройку."
+      connect_title: "Подключиться к узлу"
+      connect_badge: "Мгновенно"
+      connect_body: "Без ожидания синхронизации. Выбранный узел может видеть запросы вашего кошелька."
+      changeable: "Меняется в любой момент в Настройки → Узел."
+      continue: "Продолжить"
+      url_invalid: "URL узла должен начинаться с http:// или https://"
+    wallet:
+      kicker: "ШАГ 2 ИЗ 3 · КОШЕЛЁК"
+      title: "Настройте кошелёк"
+      create_new: "Создать новый"
+      restore_from_seed: "Восстановить из seed"
+      name_hint: "Имя кошелька"
+      password_hint: "Пароль"
+      repeat_password_hint: "Повторите пароль"
+      restore_hint: "Подготовьте seed-слова — вы введёте их далее."
+      create_hint: "Далее вы получите 24 seed-слова для записи. Они — это деньги: кто владеет ими, владеет вашими средствами."
+      continue: "Продолжить"
+      passwords_no_match: "Пароли не совпадают"
+    words:
+      kicker: "ШАГ 2 ИЗ 3 · КОШЕЛЁК"
+      title_restore: "Введите seed-слова"
+      title_create: "Запишите эти слова"
+      write_down_hint: "На бумаге, по порядку. Любой с этими словами может забрать ваши средства; без них потеря устройства означает потерю средств."
+      paste: "Вставить"
+      scan_qr: "Сканировать QR"
+      copy_clipboard: "Копировать в буфер (избегайте этого)"
+      restore_wallet: "Восстановить кошелёк"
+      wrote_them_down: "Я записал их"
+      fill_every_word: "Заполните каждое слово — коснитесь слова для редактирования или вставьте фразу."
+    confirm:
+      kicker: "ШАГ 2 ИЗ 3 · КОШЕЛЁК"
+      title: "Теперь подтвердите"
+      enter_hint: "Введите слова, которые только что записали. Коснитесь слова, чтобы ввести его."
+      paste: "Вставить"
+      create_wallet: "Создать кошелёк"
+      keep_going: "Продолжайте — каждое слово, по порядку."
+    identity:
+      kicker: "ШАГ 3 ИЗ 3 · ЛИЧНОСТЬ"
+      title: "Ваша платёжная личность"
+      key_being_made: "ключ создаётся…"
+      connected_nym: "подключено через Nym"
+      connecting_nym: "подключение через Nym…"
+      fresh_key_blurb: "Платёжный ключ, не связанный с seed-фразой — меняйте его в любой момент, не трогая средства."
+      clean_slate_blurb: "Хотите начать с чистого листа? Подставьте совершенно новый ключ в любой момент — новый вы не связан со старым. Тот же кошелёк, новое лицо."
+      pick_username: "Выберите имя — необязательно"
+      username_blurb: "Друзья платят на ваше имя, а не на длинный ключ. Необязательно — можно занять в любой момент."
+      username_field_hint: "yourname"
+      working: "Обработка…"
+      claim_username: "Занять имя"
+      available_when_connected: "Доступно после подключения mixnet — или пропустите и займите позже."
+      youre: "Вы %{name}"
+      claimed_title: "%{name} теперь ваше"
+      claimed_blurb: "Друзья теперь могут платить вам по имени. Всё готово — откройте кошелёк."
+      open_wallet: "Открыть кошелёк"
+      skip_for_now: "Пропустить пока"
+      import_existing: "Уже есть личность Goblin? Импортируйте её"
+      import_title: "Импорт личности"
+      import_blurb: "Вставьте свой nsec или выберите файл .backup, чтобы сохранить существующий ключ и имя вместо нового."
+    errors:
+      cant_open: "Не удалось открыть кошелёк: %{err}"
+      cant_create: "Не удалось создать кошелёк: %{err}"
+  send:
+    scan_to_request: "Сканируйте для запроса"
+    scan_to_pay: "Сканируйте для оплаты"
+    tab_scan: "Сканировать"
+    tab_my_code: "Мой код"
+    request_from: "Запросить у"
+    send_to: "Отправить"
+    search_hint: "handle, npub или имя"
+    suggested: "%{icon}  Рекомендуемые"
+    no_contacts: "Пока нет контактов. Найдите кого-то по их handle."
+    no_profile: "нет профиля"
+    tag_contact: "контакт"
+    tag_on_nostr: "в nostr"
+    searching_nostr: "Поиск в nostr…"
+    unverified_title: "Заплатить непроверенному ключу?"
+    unverified_body: "Для этого ключа не опубликован nostr-профиль — он может быть совсем новым, анонимным или с опечаткой. Дважды проверьте перед отправкой."
+    keep_looking: "Продолжить поиск"
+    pay_anyway: "Всё равно оплатить"
+    scan_not_recipient: "Этот QR — не получатель goblin; ожидался npub или handle"
+    scan_prompt: "Наведите на код goblin, чтобы активировать"
+    scan_to_pay_me: "Сканируйте, чтобы заплатить мне"
+    share_btn: "%{icon} Поделиться"
+    share_message: "Заплатите мне в Goblin — %{handle}\n%{link}\nnpub: %{npub}"
+    none_found: "Никого не найдено по %{label}"
+    enter_recipient: "Введите handle, npub или имя"
+    amount_title: "Сумма"
+    to_name: "Кому %{name}"
+    not_enough: "Недостаточно grin"
+    max: "Макс"
+    note_label: "Заметка"
+    note_hint: "Добавить заметку…"
+    add_note: "Добавить заметку"
+    edit_note: "Изменить заметку"
+    note_cancel: "Отмена"
+    note_save: "Сохранить"
+    review_btn: "Проверить"
+    confirm_request: "Подтвердить запрос"
+    review_title: "Проверка"
+    requesting_from: "Запрос у %{name}"
+    youre_sending: "Вы отправляете %{name}"
+    row_from: "От"
+    row_to: "Кому"
+    row_note: "Заметка"
+    row_they_pay: "Они платят"
+    row_they_pay_val: "Только если они одобрят"
+    row_delivery: "Доставка"
+    row_delivery_val: "Зашифровано NIP-44, через Nym"
+    row_network_fee: "Сетевая комиссия"
+    row_network_fee_val: "Списывается с вашего баланса"
+    row_privacy: "Приватность"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "Отправить запрос"
+    request_approve_hint: "Они получат запрос на одобрение"
+    hold_to_send: "Удерживайте для отправки"
+    lower_amount: "Вернуться и уменьшить сумму"
+    hold_confirm_hint: "Нажмите и удерживайте для подтверждения"
+    requesting: "Запрос…"
+    sending: "Отправка…"
+    they: "Они"
+    request_blocked: "%{who} не принимает запросы. Попросите их отправить вам grin вместо этого."
+    failed_request_title: "Не удалось запросить"
+    failed_send_title: "Не удалось отправить"
+    failed_request_body: "Не удалось доставить запрос. Попросите их отправить вам grin вместо этого."
+    failed_send_body: "Платёж не доставлен. Ваш grin в безопасности — попробуйте снова."
+    try_again_btn: "Попробовать снова"
+    close_btn: "Закрыть"
+    success:
+      requested: "Запрошено"
+      sent: "Отправлено"
+      from: "от"
+      to: "кому"
+      subtitle: "%{dir} %{who} · только что"
+      done_btn: "Готово"
+      receipt_btn: "Квитанция"
@@ -44,7 +44,7 @@ wallets:
  await_fin_amount: Tamamlanma bekleniyor
  locked_amount: Kilitli
  txs_empty: 'Koinleri al/gonder icin ekranin altinda bulunan   %{receive} / %{send} sekmeleri, cuzdan ayarlar icin %{settings} sekmesini kullanin.'
-  title: Cuzdanlar
+  title: Goblin
  create_desc: Yeni cuzdan olustur veya var olan bakiyeli cuzdani kurtarma kelimelerinizle canlandirin.
  add: Cuzdan ekle
  name: 'Ad:'
@@ -355,4 +355,468 @@ keyboard:
  m: m
  m1: ','
  m2: .
-  m3: /
+  m3: /
+goblin:
+  home:
+    anonymous: "Anonim"
+    connected_nym: "Nym üzerinden bağlı"
+    nym_ready: "Nym hazır · relaylar…"
+    connecting_nym: "Nym'e bağlanılıyor…"
+    cant_reach_node: "Düğüme ulaşılamıyor"
+    node_synced: "Düğüm eşitlendi"
+    syncing: "Eşitleniyor…"
+    balance_updating: "Bakiye güncelleniyor…"
+    listening: "Ödemeler bekleniyor"
+    block: "Blok %{height}"
+    waiting_for_chain: "Zincir bekleniyor…"
+    nav_wallet: "Cüzdan"
+    nav_pay: "Öde"
+    nav_activity: "Etkinlik"
+    nav_receive: "Al"
+    nav_settings: "Ayarlar"
+    activity: "Etkinlik"
+    empty_title: "Henüz etkinlik yok"
+    empty_sub: "Başlamak için grin gönder ya da al."
+    recent: "Son işlemler"
+    scan_to_pay: "Ödemek için tara"
+    type_amount: "Bir tutar gir"
+    request: "İste"
+    pay: "Öde"
+    enter_amount: "Ödemek ya da istemek için bir tutar gir"
+  activity:
+    canceled: "iptal edildi"
+    pending: "beklemede"
+    earlier: "Daha önce"
+    today: "Bugün"
+    yesterday: "Dün"
+    title: "Etkinlik"
+    requests: "İstekler"
+    empty_title: "Henüz etkinlik yok"
+    empty_sub: "Ödemelerin burada görünecek."
+    pending_header: "Beklemede"
+  receipt:
+    title: "Makbuz"
+    not_found: "İşlem bulunamadı"
+    for_note: "%{note} için"
+    details: "İşlem ayrıntıları"
+    canceled: "İptal edildi"
+    expired: "Süresi doldu"
+    funds_returned: "Para iade edildi"
+    complete: "Tamamlandı"
+    payment_received: "Ödeme alındı"
+    payment_sent: "Ödeme başarıyla gönderildi"
+    pending: "Beklemede"
+    confs: "%{c}/%{r} onay"
+    waiting_to_confirm: "Onay bekleniyor"
+    paying: "Ödeniyor…"
+    you: "Sen"
+    to: "Alıcı"
+    from: "Gönderen"
+    nostr: "nostr"
+    fee_none: "Yok"
+    network_fee: "Ağ ücreti"
+    privacy: "Gizlilik"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "İşlem"
+    cancel_request: "İsteği iptal et"
+    cancel_send: "Ödemeyi iptal et"
+    cancel_send_confirm: "İptal için tekrar dokun — hâlâ alabilir"
+    cancel_send_done: "Ödeme iptal edildi — paranız yeniden kullanılabilir"
+    cancel_send_too_late: "Bu ödeme zaten geçti ve iptal edilemez"
+    waiting_to_receive: "%{name} alana kadar bekleniyor…"
+  request:
+    title: "%{name} istiyor"
+    approve: "Onayla"
+    decline: "Reddet"
+    review_title: "İsteği incele"
+    hold_to_accept: "Kabul için basılı tut"
+    hold_accept_hint: "Bu isteği ödemek için basılı tutun"
+  receive:
+    title: "Al"
+    requesting: "%{amt}%{tsu} isteniyor — ödeme almak için paylaş"
+    clear_request: "İsteği temizle"
+    share_handle: "Ödeme almak için kullanıcı adını paylaş"
+    share_npub: "Ödeme almak için npub'ını paylaş"
+    copied: "Kopyalandı"
+    copy_nostr_id: "nostr kimliğini kopyala"
+    copy_address: "Adresi kopyala"
+    copy_npub: "npub kopyala"
+    share_message: "Goblin'de bana öde (goblin.st) — %{npub}"
+    privacy_note: "Kullanıcı adın herkese açıktır. Ödeme içeriği ağ üzerinde şifreli kalır."
+    privacy_note_npub: "npub'ın herkese açıktır. Ödeme içeriği ağ üzerinde şifreli kalır."
+  profile:
+    title: "Profil"
+    activity: "Etkinlik"
+    no_activity: "Henüz onlarla etkinlik yok."
+    unblock: "Engeli kaldır"
+    block: "Engelle"
+    blocked_blurb: "Engellendi — ödemeleri ve istekleri reddediliyor."
+    block_blurb: "Engellemek, gelen ödeme ve isteklerini düşürür."
+  settings:
+    title: "Ayarlar"
+    connected_nostr: "nostr'a bağlı"
+    connecting_relays: "Relaylara bağlanılıyor…"
+    identity: "Kimlik"
+    copy_npub: "npub kopyala (genel)"
+    rotate_key: "nostr anahtarını değiştir"
+    import_identity: "Kimlik içe aktar (.backup / nsec)"
+    backup_note: "Cihaz mı değiştiriyorsun? İKİSİNİ de yedekle: seed ifaden (bakiye) ve kimlik .backup dosyan (ad + anahtar)."
+    wallet: "Cüzdan"
+    display_unit: "Görüntüleme birimi"
+    relays: "Relaylar"
+    nostr_relays: "Nostr Relayları"
+    node: "Düğüm"
+    integrated_node: "Tümleşik düğüm ayarları"
+    node_advanced: "Gelişmiş"
+    slatepacks: "Slatepackler"
+    slatepacks_value: "Manuel işlem"
+    lock_wallet: "Cüzdanı kilitle"
+    switch_wallet: "Cüzdan değiştir"
+    advanced: "Gelişmiş"
+    privacy: "Gizlilik"
+    mixnet_routing: "Mixnet yönlendirme"
+    messages_lookups: "Mesajlar ve aramalar"
+    auto_accept: "Otomatik kabul"
+    pairing: "Fiyat para birimi"
+    accept_anyone: "Herkes"
+    accept_contacts: "Yalnızca kişiler"
+    accept_ask: "Her zaman sor"
+    requests: "İstekler"
+    incoming_requests: "Gelen istekler"
+    incoming_requests_sub: "Başkalarının senden para istemesine izin ver"
+    appearance: "Görünüm"
+    theme: "Tema"
+    theme_light: "Açık"
+    theme_dark: "Koyu"
+    theme_yellow: "Sarı"
+    archive: "Arşiv"
+    export_archive: "Arşivi dışa aktar"
+    wipe_history: "Ödeme geçmişini sil"
+    wipe_history_confirm: "Silmek için tekrar dokun — geri alınamaz"
+    about: "Hakkında"
+    goblin: "Goblin"
+    build: "Sürüm %{build}"
+    network: "Ağ"
+    network_value: "MW + Nym mixnet + nostr"
+    third_party: "Üçüncü taraf"
+    grim: "GRIM (üst kaynak cüzdan)"
+    grin_node: "Grin düğümü"
+    sp_intro: "Gelişmiş — GRIM'in yaptığı gibi ham slatepackleri elle değiş tokuş et. Bunu yalnızca bir username üzerinden ödeme yapamadığında ya da alamadığında kullan."
+    sp_receive_group: "Al ya da tamamla"
+    sp_receive_blurb: "Birinin sana verdiği bir slatepack'i yapıştır. Goblin ödemeyi alır, faturayı öder ya da tamamlayıp zincire gönderir."
+    sp_process: "Slatepack işle"
+    sp_paste_first: "Önce bir slatepack yapıştır."
+    sp_reply_ready: "Yanıt hazır — gönderene geri yolla."
+    sp_finalizing: "Tamamlanıp zincire gönderiliyor…"
+    sp_create_group: "Ödeme oluştur"
+    sp_create_blurb: "Birine vermek için bir slatepack oluştur. Onlar alır, yanıtı geri gönderir, sen de yukarıda tamamlarsın."
+    sp_amount_hint: "Grin cinsinden tutar"
+    sp_addr_hint: "Alıcı adresi (isteğe bağlı)"
+    sp_create: "Slatepack oluştur"
+    sp_ready: "Slatepack hazır — alıcıya ver."
+    sp_amount_gt_zero: "Sıfırdan büyük bir tutar gir."
+    sp_to_send: "Gönderilecek slatepack"
+    sp_copy: "Slatepack kopyala"
+    rotate_line1: "• Tamamen yeni RASTGELE bir anahtar alırsın; eski npub artık almaz. Aralarında türetme zinciri yoktur."
+    rotate_line2: "• Yeni anahtar tohumundan kurtarılamaz — anahtarı değiştirdikten hemen sonra yeni nsec'i yedekle."
+    rotate_line3: "• Kullanıcı adın SERBEST BIRAKILIR — hemen ardından aynı adı ya da yeni bir ad al (serbest kaldığında başkası da kapabilir)."
+    rotate_line4: "• Eski anahtara hâlâ yoldaki ödemeler KESİNTİYE uğrar — önce bekleyen ödemelerin bitmesini bekle."
+    rotate_line5: "• npub'unu doğrudan kaydeden kişiler seni yeniden bulmalı — yeni npub'unu ya da yeniden aldığın username'i paylaş."
+    cancel: "İptal"
+    continue: "Devam"
+    final_confirmation: "Son onay"
+    rotate_confirm_blurb: "Bu işlem uygulamadan geri alınamaz. Değiştirmek için RESET yaz ve cüzdan parolanı gir."
+    type_reset: "RESET yaz"
+    wallet_password: "Cüzdan parolası"
+    rotate_key_btn: "Anahtarı değiştir"
+    rotating_key: "Anahtar değiştiriliyor…"
+    key_rotated: "Anahtar değiştirildi"
+    new_npub: "Yeni npub: %{npub}"
+    backup_new_key: "YENİ gizli anahtarı şimdi yedekle — tohumun onu kurtaramaz."
+    copy_new_nsec: "Yeni nsec yedeğini kopyala"
+    done: "Bitti"
+    rotation_failed: "Değiştirme başarısız"
+    close: "Kapat"
+    import_identity_title: "Kimlik içe aktar"
+    import_blurb: "Bu cüzdanın nostr kimliğini değiştirir — bir GOBLIN .backup dosyası seç ya da nsec yapıştır. Yedek ayrıca kullanıcı adını ve geçmişini geri yükler. Hâlâ gerekiyorsa önce mevcut anahtarı yedekle."
+    import_nsec_hint: "nsec1… veya yapıştırılan yedek"
+    backup_password_hint: "Yedek parolası (yalnızca başka yerde dışa aktarıldıysa)"
+    import_btn: "İçe aktar"
+    importing: "İçe aktarılıyor…"
+    identity_replaced: "Kimlik değiştirildi"
+    now_using: "Şu an kullanılan: %{npub}"
+    import_failed: "İçe aktarma başarısız"
+    name_authority: "İsim otoritesi"
+    name_authority_title: "İsim otoritesini değiştir"
+    name_authority_blurb: "Adları kaydeden ve doğrulayan sunucu. Başka bir örneğe yönlendirerek oradaki adları kullan ve öde."
+    name_authority_invalid: "Tam bir URL gir (https://…)."
+    reset: "Sıfırla"
+    save: "Kaydet"
+    backup_file: "Dosyaya yedekle"
+    choose_backup_file: "Bir .backup dosyası seç"
+    backup_read_failed: "Dosya okunamadı."
+    backup_saved: "Yedek kaydedildi"
+    backup_saved_sub: ".backup dosyasını güvende tut — hem ona hem de parolana sahip olan kimliğini geri yükleyebilir."
+    backup_file_title: "Kimliği yedekle"
+    backup_file_blurb: "Kullanıcı adın ve anahtarınla tek bir şifreli .backup dosyası oluşturur. Mühürlemek için cüzdan parolanı gir."
+    backup_write_failed: "Dosya kaydedilemedi."
+    create_backup: "Yedek oluştur"
+    registered: "%{name} kaydedildi"
+    released_msg: "Bırakıldı — ad artık alınabilir"
+    release_confirm: "%{name} bırakılsın mı?"
+    release_blurb: "Serbest kalır kalmaz herkes alabilir — döndüğün bir sonraki anahtar dahil. 10 dakika boyunca başka bir kullanıcı adı kaydedemezsin."
+    releasing: "Bırakılıyor…"
+    keep_it: "Vazgeç"
+    release_it: "Bırak"
+    username: "Kullanıcı adı"
+    username_note: "Adınız olarak gösterilir. goblin.st'de herkese açık. Ödemeler şifreli kalır."
+    release_username: "Kullanıcı adını bırak"
+    pick_username: "Bir kullanıcı adı seç — isteğe bağlı"
+    working: "Çalışıyor…"
+    claim: "Al"
+    err_just_taken: "O kullanıcı adı az önce alındı"
+    err_cooldown: "Yakın zamanda bir kullanıcı adı bıraktın — 10 dakika içinde yenisini kaydedebilirsin."
+    err_unreachable: "goblin.st'ye ulaşılamadı — bağlantı sorunu. Tekrar dene."
+    err_release: "Bırakılamadı: %{err}"
+    avail_available: "Müsait!"
+    avail_taken: "Alınmış"
+    avail_reserved: "Ayrılmış"
+    avail_invalid: "Adlar 3–20 karakter: a–z, 0–9, _ ya da -"
+    avail_quarantined: "Müsait değil"
+    avail_unknown: "Kontrol edilemedi — bağlantı sorunu. Tekrar dene."
+  advanced:
+    title: "Gelişmiş"
+    intro: "GRIM'den düşük seviyeli cüzdan araçları. Bunlara normalde ihtiyacın olmaz."
+    own_node_desc: "Herkese açık bir düğüme güvenmek yerine bu cihazda tam bir Grin düğümü senkronize edin."
+    own_node_active: "Kendi düğümünüz çalışıyor"
+    repair: "Cüzdanı onar"
+    repair_desc: "Zinciri yeniden tara ve eksik çıktıları geri yükle. Bu biraz zaman alabilir."
+    repair_unavailable: "Önce senkronize bir düğüm bağlantısı gerekir."
+    repairing: "Onarılıyor… %{pct}%"
+    restore: "Cüzdanı geri yükle"
+    restore_desc: "Yerel verileri sil ve tohumundan yeniden oluştur. Onarım işe yaramadıysa bunu kullan — sonra cüzdanı yeniden açarsın."
+    restore_confirm: "Geri yüklemek için tekrar dokun"
+    show_phrase: "Kurtarma ifadesi"
+    phrase_desc: "24 grin tohum kelimen — fonları kurtarmanın tek yolu. Onları çevrimdışı ve gizli tut."
+    reveal: "İfadeyi göster"
+    hide: "Gizle"
+    password: "Cüzdan parolası"
+    wrong_password: "Yanlış parola."
+    delete: "Cüzdanı sil"
+    delete_desc: "Bu cüzdanı bu cihazdan kalıcı olarak kaldır. Tohumun olmadan fonlar kurtarılamaz."
+    delete_confirm: "Silmek için tekrar dokun"
+    manage_node: "Düğüm bağlantısını yönet"
+    repair_confirm: "Evet, şimdi onar"
+    repair_confirm_note: "Onarım zinciri yeniden tarar ve birkaç dakika sürebilir."
+    restore_confirm_note: "Bu, yerel verileri siler ve seed'inizden yeniden oluşturur — birkaç dakika sürebilir."
+    nostr_key: "Nostr anahtarı"
+    nostr_key_desc: "nsec'iniz, Nostr kimliğinizin gizli anahtarı. magick.market gibi Nostr uygulamalarında oturum açmak için kopyalayın veya QR kodunu gösterin. Ona sahip olan herkes kimliğinizi kontrol eder, gizli tutun."
+    reveal_nsec: "Anahtarı göster"
+    copy_nsec: "nsec'i kopyala"
+    show_qr: "QR göster"
+    hide_qr: "QR gizle"
+  privacy:
+    title: "Ağ gizliliği"
+    intro: "Goblin özel trafiğini Nym mixnet üzerinden gönderir — kimin kiminle konuştuğunu gizleyen beş atlamalı bir ağ, böylece bir relay bir ödemeyi sana bağlayamaz."
+    payments: "Ödemeler"
+    payments_blurb: "Slatepack taşıyan her nostr mesajı."
+    usernames: "usernamelar"
+    usernames_blurb: "goblin.st'ye ve oradan NIP-05 ad aramaları."
+    price_avatars: "Fiyat"
+    price_avatars_blurb: "Tutarların yanında gösterilen anlık kur."
+    over_mixnet: "Mixnet üzerinden"
+    direct_connection: "Doğrudan bağlantı"
+    grin_node: "Grin düğümü"
+    grin_node_blurb: "Blok eşitleme ve işlemini ağa yayma. Bu, herkes için aynı olan genel zincir verisidir ve kimliğinle ilişkilendirilmez."
+  pairing:
+    title: "Eşleştirme"
+    intro: "Bakiyenin ve tutarların neye göre gösterildiği."
+    pair_with: "Eşleştir"
+    rates_note: "Kurlar yalnızca bir eşleştirme açıkken Nym mixnet üzerinden alınır — kapalıysa cihazından hiçbir kur isteği çıkmaz."
+  relays:
+    title: "Relaylar"
+    intro: "Ödeme mesajları aşağıdaki her relay'e yansıtılır; almak için ulaşılabilir tek bir relay yeterlidir."
+    your_relays: "Relaylarn"
+    add_relay: "Relay ekle"
+    add_relay_btn: "Relay ekle"
+    save_reconnect: "Kaydet ve yeniden bağlan"
+    none: "yok"
+    count: "%{n} relay"
+  node:
+    title: "Düğüm"
+    connection: "Bağlantı"
+    integrated: "Tümleşik düğüm"
+    applies_after: "Cüzdan kilitlenip yeniden açıldıktan sonra geçerli olur."
+    add_external: "Harici düğüm ekle"
+    api_secret_hint: "API gizli anahtarı (isteğe bağlı)"
+    add_node: "Düğüm ekle"
+    integrated_host: "tümleşik düğüm"
+    summary_syncing: "%{conn} · eşitleniyor"
+    summary_block: "Blok %{height} · %{conn}"
+  nips:
+    title: "nostr ve NIPler"
+    intro1: "Goblin nostr konuşur — basit relay sunucuları üzerinden geçen imzalı mesajların açık bir protokolü. Cüzdanın kendi nostr kimliğini taşır: bağımsız rastgele bir anahtar, paran ve tohumundan kasıtlı olarak ayrı tutulur. Her ödeme, slatepack içinde olacak şekilde, kimlikler arasında uçtan uca şifreli bir doğrudan mesaj olarak gider."
+    intro2: "goblin.st, Goblin'in ad servisidir: bir kullanıcı adı almak orada bir ad → anahtar eşlemesi yayımlar (NIP-05), böylece insanlar uzun bir npub yerine you'ya ödeme yapabilir. Kullanıcı adı herkese açıktır; ödeme içeriği asla değil. NIPler protokolün yapı taşlarıdır — özelliği okumak için birine dokun."
+    n05_title: "Adlar"
+    n05_blurb: "username@goblin.st'yi anahtarına eşler, böylece kullanıcı adları adres gibi çalışır."
+    n17_title: "Özel mesajlar"
+    n17_blurb: "Her ödemenin içinde gittiği şifreli DM zarfı."
+    n44_title: "Şifreleme"
+    n44_blurb: "Bu mesajların içinde kullanılan kimlik doğrulamalı şifreleme."
+    n49_title: "Anahtar şifreleme"
+    n49_blurb: "Gizli anahtarın parolanla kilitli olarak nasıl depolandığı."
+    n59_title: "Hediye paketi"
+    n59_blurb: "Mesajları sarar, böylece relaylar kimin kiminle konuştuğunu göremez."
+    n98_title: "HTTP kimlik doğrulama"
+    n98_blurb: "goblin.st'ye gönderilen kullanıcı adı kayıt isteğini imzalar."
+  onboarding:
+    intro:
+      private_money_head: "Özel para"
+      private_money_body: "Goblin, grin için bir cüzdan — zincirinde tutar ya da adres bulunmayan dijital nakit."
+      send_like_message_head: "Mesaj gibi gönder"
+      send_like_message_body: "Bir username ya da npub'a öde, nostr ve Nym mixnet üzerinden uçtan uca şifreli bir mesaj olarak ulaşır — aradaki hiç kimse tutarı ya da kimlerin dahil olduğunu göremez."
+      yours_alone_head: "Yalnızca senin"
+      yours_alone_body: "Anahtarlar, adlar ve geçmiş bu cihazda yaşar. GRIM cüzdanı üzerine kuruludur."
+      get_started: "Başla"
+      footnote: "Yaklaşık bir dakika sürer. Her şeyi sonradan değiştirebilirsin."
+    node:
+      kicker: "ADIM 1 / 3 · AĞ"
+      title: "Goblin zinciri nasıl\nizlesin?"
+      own_title: "Kendi düğümümü çalıştır"
+      own_badge: "Özel"
+      own_body: "Kimseye güvenmez — cüzdanın zinciri kendisi kontrol eder. Sen kurulumu bitirirken arka planda eşitlenir."
+      connect_title: "Bir düğüme bağlan"
+      connect_badge: "Anında"
+      connect_body: "Eşitleme beklemesi yok. Seçtiğin düğüm cüzdanının sorgularını görebilir."
+      changeable: "Ayarlar → Düğüm'den istediğin zaman değiştirilebilir."
+      continue: "Devam"
+      url_invalid: "Düğüm URL'si http:// ya da https:// ile başlamalı"
+    wallet:
+      kicker: "ADIM 2 / 3 · CÜZDAN"
+      title: "Cüzdanını kur"
+      create_new: "Yeni oluştur"
+      restore_from_seed: "Tohumdan geri yükle"
+      name_hint: "Cüzdan adı"
+      password_hint: "Parola"
+      repeat_password_hint: "Parolayı tekrarla"
+      restore_hint: "Tohum kelimelerini hazır tut — onları sonra gireceksin."
+      create_hint: "Sırada yazman için 24 tohum kelimesi var. Onlar paradır — onları elinde tutan paranı elinde tutar."
+      continue: "Devam"
+      passwords_no_match: "Parolalar eşleşmiyor"
+    words:
+      kicker: "ADIM 2 / 3 · CÜZDAN"
+      title_restore: "Tohum kelimelerini gir"
+      title_create: "Bu kelimeleri yaz"
+      write_down_hint: "Kâğıda, sırayla. Bu kelimelere sahip olan paranı alabilir; onlar olmadan kaybolan bir cihaz kaybolan para demektir."
+      paste: "Yapıştır"
+      scan_qr: "QR tara"
+      copy_clipboard: "Panoya kopyala (bundan kaçın)"
+      restore_wallet: "Cüzdanı geri yükle"
+      wrote_them_down: "Onları yazdım"
+      fill_every_word: "Her kelimeyi doldur — düzenlemek için bir kelimeye dokun ya da ifadeyi yapıştır."
+    confirm:
+      kicker: "ADIM 2 / 3 · CÜZDAN"
+      title: "Şimdi kanıtla"
+      enter_hint: "Az önce yazdığın kelimeleri gir. Yazmak için bir kelimeye dokun."
+      paste: "Yapıştır"
+      create_wallet: "Cüzdan oluştur"
+      keep_going: "Devam et — her kelime, sırayla."
+    identity:
+      kicker: "ADIM 3 / 3 · KİMLİK"
+      title: "Ödeme kimliğin"
+      key_being_made: "anahtar oluşturuluyor…"
+      connected_nym: "Nym üzerinden bağlı"
+      connecting_nym: "Nym üzerinden bağlanılıyor…"
+      fresh_key_blurb: "Seed'inin parçası olmayan bir ödeme anahtarı — paranı hiç ellemeden istediğin an döndür."
+      clean_slate_blurb: "Temiz bir sayfa mı istiyorsun? İstediğin zaman yepyeni bir anahtar tak — yeni sen eskisine bağlı değil. Aynı cüzdan, yeni yüz."
+      pick_username: "Bir kullanıcı adı seç — isteğe bağlı"
+      username_blurb: "Arkadaşların uzun bir anahtar yerine adına öder. İsteğe bağlı — istediğin an al."
+      username_field_hint: "adınız"
+      working: "Çalışıyor…"
+      claim_username: "Kullanıcı adı al"
+      available_when_connected: "Mixnet bağlandığında müsait — ya da atla ve sonra al."
+      youre: "Sen %{name}'sin"
+      claimed_title: "%{name} artık senin"
+      claimed_blurb: "Arkadaşların artık sana adınla ödeme yapabilir. Her şey hazır — cüzdanını aç."
+      open_wallet: "Cüzdanımı aç"
+      skip_for_now: "Şimdilik atla"
+      import_existing: "Zaten bir Goblin kimliğin var mı? İçe aktar"
+      import_title: "Kimliğini içe aktar"
+      import_blurb: "Bu yeni anahtar yerine mevcut anahtarını ve kullanıcı adını korumak için nsec'ini yapıştır veya bir .backup dosyası seç."
+    errors:
+      cant_open: "Cüzdan açılamadı: %{err}"
+      cant_create: "Cüzdan oluşturulamadı: %{err}"
+  send:
+    scan_to_request: "İstemek için tara"
+    scan_to_pay: "Ödemek için tara"
+    tab_scan: "Tara"
+    tab_my_code: "Kodum"
+    request_from: "Şundan iste"
+    send_to: "Şuna gönder"
+    search_hint: "handle, npub ya da ad"
+    suggested: "%{icon}  Önerilen"
+    no_contacts: "Henüz kişi yok. Birini handle ile bul."
+    no_profile: "profil yok"
+    tag_contact: "kişi"
+    tag_on_nostr: "nostr'da"
+    searching_nostr: "nostr aranıyor…"
+    unverified_title: "Doğrulanmamış bir anahtara ödeme yapılsın mı?"
+    unverified_body: "Bu anahtar için yayımlanmış bir nostr profili yok — yepyeni, anonim ya da yanlış yazılmış olabilir. Göndermeden önce doğru olduğunu iki kez kontrol et."
+    keep_looking: "Aramaya devam et"
+    pay_anyway: "Yine de öde"
+    scan_not_recipient: "O QR bir goblin alıcısı değil — bir npub ya da handle bekleniyordu"
+    scan_prompt: "Etkinleştirmek için bir goblin kodunu görüntüye getir"
+    scan_to_pay_me: "Bana ödemek için tara"
+    share_btn: "%{icon} Paylaş"
+    share_message: "Goblin'de bana öde — %{handle}\n%{link}\nnpub: %{npub}"
+    none_found: "%{label} için kimse bulunamadı"
+    enter_recipient: "Bir handle, npub ya da ad gir"
+    amount_title: "Tutar"
+    to_name: "%{name} için"
+    not_enough: "Yeterli grin yok"
+    max: "Maks"
+    note_label: "Not"
+    note_hint: "Bir not ekle…"
+    add_note: "Not ekle"
+    edit_note: "Notu düzenle"
+    note_cancel: "İptal"
+    note_save: "Kaydet"
+    review_btn: "İncele"
+    confirm_request: "İsteği onayla"
+    review_title: "İncele"
+    requesting_from: "%{name} kişisinden isteniyor"
+    youre_sending: "%{name} kişisine gönderiyorsun"
+    row_from: "Gönderen"
+    row_to: "Alıcı"
+    row_note: "Not"
+    row_they_pay: "Onlar öder"
+    row_they_pay_val: "Yalnızca onaylarlarsa"
+    row_delivery: "Teslimat"
+    row_delivery_val: "NIP-44 şifreli, Nym üzerinden"
+    row_network_fee: "Ağ ücreti"
+    row_network_fee_val: "Bakiyenden düşülür"
+    row_privacy: "Gizlilik"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "İstek gönder"
+    request_approve_hint: "Onaylamaları için bir istek alacaklar"
+    hold_to_send: "Göndermek için basılı tut"
+    lower_amount: "Geri dön ve tutarı düşür"
+    hold_confirm_hint: "Onaylamak için basılı tut"
+    requesting: "İsteniyor…"
+    sending: "Gönderiliyor…"
+    they: "Onlar"
+    request_blocked: "%{who} istek kabul etmiyor. Bunun yerine sana grin göndermesini iste."
+    failed_request_title: "İstenemedi"
+    failed_send_title: "Gönderilemedi"
+    failed_request_body: "İsteği teslim edemedik. Bunun yerine sana grin göndermesini iste."
+    failed_send_body: "Ödeme teslim edilemedi. Grin'in güvende — tekrar dene."
+    try_again_btn: "Tekrar dene"
+    close_btn: "Kapat"
+    success:
+      requested: "İstendi"
+      sent: "Gönderildi"
+      from: "şuradan"
+      to: "şuraya"
+      subtitle: "%{dir} %{who} · az önce"
+      done_btn: "Bitti"
+      receipt_btn: "Makbuz"
@@ -44,7 +44,7 @@ wallets:
  await_fin_amount: 等待确定中
  locked_amount: 锁定帐户
  txs_empty: '手动接收资金或通过传输接收资金 %{message} or %{transport} 更改钱包设置, 请按屏幕底部的按钮 %{settings} 按钮.'
-  title: 钱包
+  title: Goblin
  create_desc: 创建或种子单词导入已有钱包.
  add: 添加钱包
  name: '用户名:'
@@ -355,4 +355,468 @@ keyboard:
  m: 一
  m1: ','
  m2: .
-  m3: /
+  m3: /
+goblin:
+  home:
+    anonymous: "匿名"
+    connected_nym: "已通过 Nym 连接"
+    nym_ready: "Nym 就绪 · 连接中继…"
+    connecting_nym: "正在连接 Nym…"
+    cant_reach_node: "无法连接节点"
+    node_synced: "节点已同步"
+    syncing: "同步中…"
+    balance_updating: "余额更新中…"
+    listening: "正在监听付款"
+    block: "区块 %{height}"
+    waiting_for_chain: "等待链数据…"
+    nav_wallet: "钱包"
+    nav_pay: "支付"
+    nav_activity: "动态"
+    nav_receive: "收款"
+    nav_settings: "设置"
+    activity: "动态"
+    empty_title: "暂无动态"
+    empty_sub: "收发 grin 即可开始。"
+    recent: "最近"
+    scan_to_pay: "扫码支付"
+    type_amount: "输入金额"
+    request: "请求"
+    pay: "支付"
+    enter_amount: "输入要支付或请求的金额"
+  activity:
+    canceled: "已取消"
+    pending: "待处理"
+    earlier: "更早"
+    today: "今天"
+    yesterday: "昨天"
+    title: "动态"
+    requests: "请求"
+    empty_title: "暂无动态"
+    empty_sub: "你的付款将显示在这里。"
+    pending_header: "待处理"
+  receipt:
+    title: "收据"
+    not_found: "未找到交易"
+    for_note: "用于 %{note}"
+    details: "交易详情"
+    canceled: "已取消"
+    expired: "已过期"
+    funds_returned: "资金已退回"
+    complete: "已完成"
+    payment_received: "已收到付款"
+    payment_sent: "付款发送成功"
+    pending: "待处理"
+    confs: "%{c}/%{r} 次确认"
+    waiting_to_confirm: "等待确认"
+    paying: "支付中…"
+    you: "你"
+    to: "收款方"
+    from: "付款方"
+    nostr: "nostr"
+    fee_none: "无"
+    network_fee: "网络费用"
+    privacy: "隐私"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "交易"
+    cancel_request: "取消请求"
+    cancel_send: "取消付款"
+    cancel_send_confirm: "再次点按以取消 — 对方可能仍会收到"
+    cancel_send_done: "付款已取消 — 你的资金已重新可用"
+    cancel_send_too_late: "这笔付款已经完成，无法取消"
+    waiting_to_receive: "等待 %{name} 接收…"
+  request:
+    title: "%{name} 发起请求"
+    approve: "同意"
+    decline: "拒绝"
+    review_title: "审核请求"
+    hold_to_accept: "按住以接受"
+    hold_accept_hint: "按住以支付此请求"
+  receive:
+    title: "收款"
+    requesting: "正在请求 %{amt}%{tsu} — 分享以收款"
+    clear_request: "清除请求"
+    share_handle: "分享你的用户名以收款"
+    share_npub: "分享你的 npub 以收款"
+    copied: "已复制"
+    copy_nostr_id: "复制 nostr ID"
+    copy_address: "复制地址"
+    copy_npub: "复制 npub"
+    share_message: "在 Goblin 上向我付款 (goblin.st) — %{npub}"
+    privacy_note: "你的用户名是公开的。付款内容在网络中保持加密。"
+    privacy_note_npub: "你的 npub 是公开的。付款内容在网络中保持加密。"
+  profile:
+    title: "资料"
+    activity: "动态"
+    no_activity: "尚无往来记录。"
+    unblock: "取消屏蔽"
+    block: "屏蔽"
+    blocked_blurb: "已屏蔽 — 其付款和请求会被丢弃。"
+    block_blurb: "屏蔽后将丢弃对方发来的付款和请求。"
+  settings:
+    title: "设置"
+    connected_nostr: "已连接 nostr"
+    connecting_relays: "正在连接中继…"
+    identity: "身份"
+    copy_npub: "复制 npub（公开）"
+    rotate_key: "轮换 nostr 密钥"
+    import_identity: "导入身份（.backup / nsec）"
+    backup_note: "更换设备？两者都要备份：你的助记词（资金）和身份 .backup 文件（名称 + 密钥）。"
+    wallet: "钱包"
+    display_unit: "显示单位"
+    relays: "中继"
+    nostr_relays: "Nostr 中继"
+    node: "节点"
+    integrated_node: "集成节点设置"
+    node_advanced: "高级"
+    slatepacks: "Slatepack"
+    slatepacks_value: "手动交易"
+    lock_wallet: "锁定钱包"
+    switch_wallet: "切换钱包"
+    advanced: "高级"
+    privacy: "隐私"
+    mixnet_routing: "mixnet 路由"
+    messages_lookups: "消息和查询"
+    auto_accept: "自动接受"
+    pairing: "价格货币"
+    accept_anyone: "任何人"
+    accept_contacts: "仅联系人"
+    accept_ask: "每次询问"
+    requests: "请求"
+    incoming_requests: "收到的请求"
+    incoming_requests_sub: "允许他人向你请求付款"
+    appearance: "外观"
+    theme: "主题"
+    theme_light: "浅色"
+    theme_dark: "深色"
+    theme_yellow: "黄色"
+    archive: "存档"
+    export_archive: "导出存档"
+    wipe_history: "清除付款记录"
+    wipe_history_confirm: "再次点按以清除 — 无法撤销"
+    about: "关于"
+    goblin: "Goblin"
+    build: "构建 %{build}"
+    network: "网络"
+    network_value: "MW + Nym mixnet + nostr"
+    third_party: "第三方"
+    grim: "GRIM（上游钱包）"
+    grin_node: "Grin 节点"
+    sp_intro: "高级功能 — 像 GRIM 那样手动交换原始 slatepack。仅在无法通过 username 收付款时使用。"
+    sp_receive_group: "接收或确认"
+    sp_receive_blurb: "粘贴别人给你的 slatepack。Goblin 会接收付款、支付账单，或确认并广播到链上。"
+    sp_process: "处理 slatepack"
+    sp_paste_first: "请先粘贴 slatepack。"
+    sp_reply_ready: "回复已就绪 — 发回给发送方。"
+    sp_finalizing: "正在确认并广播到链上…"
+    sp_create_group: "创建付款"
+    sp_create_blurb: "生成一个 slatepack 交给他人。对方接收后将回复发回，你在上方确认即可。"
+    sp_amount_hint: "金额（grin）"
+    sp_addr_hint: "收款地址（可选）"
+    sp_create: "创建 slatepack"
+    sp_ready: "slatepack 已就绪 — 交给收款方。"
+    sp_amount_gt_zero: "请输入大于零的金额。"
+    sp_to_send: "待发送的 slatepack"
+    sp_copy: "复制 slatepack"
+    rotate_line1: "• 你会得到一个全新的随机密钥；旧 npub 将停止接收。两者之间没有任何派生关系。"
+    rotate_line2: "• 新密钥无法从助记词恢复 — 轮换后请立即备份新的 nsec。"
+    rotate_line3: "• 你的用户名将被释放——请立即认领相同或新的名称（一旦释放，他人也可抢注）。"
+    rotate_line4: "• 正在发往旧密钥的付款将受影响 — 请先等待待处理付款完成。"
+    rotate_line5: "• 直接保存了你 npub 的联系人需要重新查找你 — 分享你的新 npub 或重新注册的 username。"
+    cancel: "取消"
+    continue: "继续"
+    final_confirmation: "最终确认"
+    rotate_confirm_blurb: "此操作在应用内无法撤销。输入 RESET 并输入钱包密码以进行轮换。"
+    type_reset: "输入 RESET"
+    wallet_password: "钱包密码"
+    rotate_key_btn: "轮换密钥"
+    rotating_key: "正在轮换密钥…"
+    key_rotated: "密钥已轮换"
+    new_npub: "新 npub：%{npub}"
+    backup_new_key: "立即备份新私钥 — 助记词无法恢复它。"
+    copy_new_nsec: "复制新 nsec 备份"
+    done: "完成"
+    rotation_failed: "轮换失败"
+    close: "关闭"
+    import_identity_title: "导入身份"
+    import_blurb: "替换此钱包的 nostr 身份——选择一个 GOBLIN .backup 文件，或粘贴 nsec。备份也会恢复你的用户名和历史。如果仍需要当前密钥，请先备份。"
+    import_nsec_hint: "nsec1… 或粘贴的备份"
+    backup_password_hint: "备份密码（仅当在他处导出时需要）"
+    import_btn: "导入"
+    importing: "正在导入…"
+    identity_replaced: "身份已替换"
+    now_using: "当前使用：%{npub}"
+    import_failed: "导入失败"
+    name_authority: "名称授权方"
+    name_authority_title: "更改名称授权方"
+    name_authority_blurb: "注册和验证名称的服务器。指向另一个实例即可使用并支付那里托管的名称。"
+    name_authority_invalid: "请输入完整网址（https://…）。"
+    reset: "重置"
+    save: "保存"
+    backup_file: "备份到文件"
+    choose_backup_file: "选择 .backup 文件"
+    backup_read_failed: "无法读取该文件。"
+    backup_saved: "备份已保存"
+    backup_saved_sub: "妥善保管 .backup 文件——同时拥有它和你密码的人都能恢复你的身份。"
+    backup_file_title: "备份身份"
+    backup_file_blurb: "创建一个包含你的用户名和密钥的加密 .backup 文件。输入钱包密码以封存它。"
+    backup_write_failed: "无法保存文件。"
+    create_backup: "创建备份"
+    registered: "已注册 %{name}"
+    released_msg: "已释放 — 用户名可被抢注"
+    release_confirm: "释放 %{name}？"
+    release_blurb: "一旦释放即可被认领——任何人都可以，包括你接下来轮换到的密钥。10 分钟内你无法注册另一个用户名。"
+    releasing: "正在释放…"
+    keep_it: "保留"
+    release_it: "释放"
+    username: "用户名"
+    username_note: "显示为你的名字。在 goblin.st 上公开。付款保持加密。"
+    release_username: "释放用户名"
+    pick_username: "选择用户名 — 可选"
+    working: "处理中…"
+    claim: "注册"
+    err_just_taken: "该用户名刚被占用"
+    err_cooldown: "你刚释放了一个用户名 — 10 分钟内无法注册新用户名。"
+    err_unreachable: "无法连接 goblin.st — 连接中断。请重试。"
+    err_release: "无法释放：%{err}"
+    avail_available: "可用！"
+    avail_taken: "已被占用"
+    avail_reserved: "已保留"
+    avail_invalid: "用户名为 3–20 个字符：a–z、0–9、_ 或 -"
+    avail_quarantined: "不可用"
+    avail_unknown: "无法检查 — 连接中断。请重试。"
+  advanced:
+    title: "高级"
+    intro: "来自 GRIM 的底层钱包工具。通常你用不到这些。"
+    own_node_desc: "在本设备上同步完整的 Grin 节点，而不是信任公共节点。"
+    own_node_active: "正在运行你自己的节点"
+    repair: "修复钱包"
+    repair_desc: "重新扫描链并恢复任何缺失的输出。这可能需要一些时间。"
+    repair_unavailable: "需要先有已同步的节点连接。"
+    repairing: "修复中… %{pct}%"
+    restore: "恢复钱包"
+    restore_desc: "删除本地数据并从助记词重建。如果修复无效，请使用此功能 — 之后需重新打开钱包。"
+    restore_confirm: "再次点击以恢复"
+    show_phrase: "恢复助记词"
+    phrase_desc: "你的 24 个 grin 助记词 — 恢复资金的唯一方式。请离线且私密保存。"
+    reveal: "显示助记词"
+    hide: "隐藏"
+    password: "钱包密码"
+    wrong_password: "密码错误。"
+    delete: "删除钱包"
+    delete_desc: "从此设备永久移除该钱包。没有助记词，资金将无法找回。"
+    delete_confirm: "再次点击以删除"
+    manage_node: "管理节点连接"
+    repair_confirm: "是的，立即修复"
+    repair_confirm_note: "修复会重新扫描链，可能需要几分钟。"
+    restore_confirm_note: "这会清除本地数据并从助记词重建——可能需要几分钟。"
+    nostr_key: "Nostr 密钥"
+    nostr_key_desc: "您的 nsec，即 Nostr 身份的私钥。复制它或显示二维码，即可登录 magick.market 等 Nostr 应用。持有它的人即可控制您的身份，请妥善保管。"
+    reveal_nsec: "显示密钥"
+    copy_nsec: "复制 nsec"
+    show_qr: "显示二维码"
+    hide_qr: "隐藏二维码"
+  privacy:
+    title: "网络隐私"
+    intro: "Goblin 通过 Nym mixnet 发送其私密流量 — 这是一个五跳网络，可隐藏通信双方的身份，使中继无法将付款关联到你。"
+    payments: "付款"
+    payments_blurb: "每条携带 slatepack 的 nostr 消息。"
+    usernames: "用户名"
+    usernames_blurb: "往返 goblin.st 的 NIP-05 名称查询。"
+    price_avatars: "价格"
+    price_avatars_blurb: "金额旁显示的实时法币汇率。"
+    over_mixnet: "经由 mixnet"
+    direct_connection: "直接连接"
+    grin_node: "Grin 节点"
+    grin_node_blurb: "区块同步及向网络广播你的交易。这是公开的链上数据，对所有人都一样，且不与你的身份关联。"
+  pairing:
+    title: "配对"
+    intro: "你的余额和金额以何种货币显示。"
+    pair_with: "配对货币"
+    rates_note: "汇率仅在开启配对时通过 Nym mixnet 获取 — 关闭后不会有任何汇率请求离开你的设备。"
+  relays:
+    title: "中继"
+    intro: "付款消息会镜像到下方每个中继；只要有一个可达的中继即可收款。"
+    your_relays: "你的中继"
+    add_relay: "添加中继"
+    add_relay_btn: "添加中继"
+    save_reconnect: "保存并重新连接"
+    none: "无"
+    count: "%{n} 个中继"
+  node:
+    title: "节点"
+    connection: "连接"
+    integrated: "集成节点"
+    applies_after: "在钱包锁定并再次解锁后生效。"
+    add_external: "添加外部节点"
+    api_secret_hint: "API 密钥（可选）"
+    add_node: "添加节点"
+    integrated_host: "集成节点"
+    summary_syncing: "%{conn} · 同步中"
+    summary_block: "区块 %{height} · %{conn}"
+  nips:
+    title: "nostr 与 NIPs"
+    intro1: "Goblin 使用 nostr — 一种通过简单中继服务器传递签名消息的开放协议。你的钱包拥有自己的 nostr 身份：一个独立的随机密钥，刻意与你的资金和助记词保持独立。每笔付款都作为身份之间的端到端加密私信传输，slatepack 就包含在其中。"
+    intro2: "goblin.st 是 Goblin 的名称服务：注册用户名会在此发布名称 → 密钥的映射（NIP-05），让人们可以付款给 you 而不必使用冗长的 npub。用户名是公开的；付款内容则永不公开。NIPs 是该协议的构建模块 — 点击任意一项可阅读规范。"
+    n05_title: "名称"
+    n05_blurb: "将 username@goblin.st 映射到你的密钥，让用户名像地址一样使用。"
+    n17_title: "私密消息"
+    n17_blurb: "每笔付款传输所用的加密私信信封。"
+    n44_title: "加密"
+    n44_blurb: "这些消息内部使用的认证加密算法。"
+    n49_title: "密钥加密"
+    n49_blurb: "私钥静态存储的方式，由你的密码锁定。"
+    n59_title: "礼物包装"
+    n59_blurb: "包装消息，使中继无法看到通信双方是谁。"
+    n98_title: "HTTP 认证"
+    n98_blurb: "为向 goblin.st 注册用户名的请求签名。"
+  onboarding:
+    intro:
+      private_money_head: "私密货币"
+      private_money_body: "Goblin 是一个 grin 钱包 — 链上无金额、无地址的数字现金。"
+      send_like_message_head: "像发消息一样付款"
+      send_like_message_body: "向 username 或 npub 付款，款项会作为端到端加密消息通过 nostr 和 Nym mixnet 送达 — 中间任何人都看不到金额或参与者。"
+      yours_alone_head: "完全属于你"
+      yours_alone_body: "密钥、用户名和历史记录都存于本设备。基于 GRIM 钱包构建。"
+      get_started: "开始使用"
+      footnote: "约需一分钟。之后一切均可更改。"
+    node:
+      kicker: "步骤 1 / 3 · 网络"
+      title: "Goblin 该如何\n监视链？"
+      own_title: "运行我自己的节点"
+      own_badge: "私密"
+      own_body: "无需信任任何人 — 钱包自行验证链。完成设置时在后台同步。"
+      connect_title: "连接到节点"
+      connect_badge: "即时"
+      connect_body: "无需等待同步。你选择的节点可看到钱包的查询。"
+      changeable: "随时可在 设置 → 节点 中更改。"
+      continue: "继续"
+      url_invalid: "节点 URL 必须以 http:// 或 https:// 开头"
+    wallet:
+      kicker: "步骤 2 / 3 · 钱包"
+      title: "设置你的钱包"
+      create_new: "新建"
+      restore_from_seed: "从助记词恢复"
+      name_hint: "钱包名称"
+      password_hint: "密码"
+      repeat_password_hint: "重复密码"
+      restore_hint: "准备好你的助记词 — 下一步将输入。"
+      create_hint: "接下来你会得到 24 个助记词以供抄写。它们就是钱 — 谁持有它们，谁就掌握你的资金。"
+      continue: "继续"
+      passwords_no_match: "密码不一致"
+    words:
+      kicker: "步骤 2 / 3 · 钱包"
+      title_restore: "输入你的助记词"
+      title_create: "抄下这些词"
+      write_down_hint: "按顺序写在纸上。任何持有这些词的人都能取走你的资金；丢失这些词又丢失设备，资金将无法找回。"
+      paste: "粘贴"
+      scan_qr: "扫描二维码"
+      copy_clipboard: "复制到剪贴板（不建议）"
+      restore_wallet: "恢复钱包"
+      wrote_them_down: "我已抄好"
+      fill_every_word: "填写每个词 — 点击某个词进行编辑，或粘贴整个短语。"
+    confirm:
+      kicker: "步骤 2 / 3 · 钱包"
+      title: "现在来验证"
+      enter_hint: "输入你刚抄下的词。点击某个词进行输入。"
+      paste: "粘贴"
+      create_wallet: "创建钱包"
+      keep_going: "继续 — 每个词,按顺序。"
+    identity:
+      kicker: "步骤 3 / 3 · 身份"
+      title: "你的付款身份"
+      key_being_made: "正在生成密钥…"
+      connected_nym: "已通过 Nym 连接"
+      connecting_nym: "正在通过 Nym 连接…"
+      fresh_key_blurb: "一个不属于助记词的支付密钥——可随时轮换以保护隐私，且不影响你的资金。"
+      clean_slate_blurb: "想要全新开始？随时换上一个全新密钥 — 新的你与旧的毫无关联。同一个钱包,焕然一新。"
+      pick_username: "选择用户名 — 可选"
+      username_blurb: "朋友支付给你的名称，而不是一长串密钥。可选——随时认领。"
+      username_field_hint: "你的用户名"
+      working: "处理中…"
+      claim_username: "注册用户名"
+      available_when_connected: "mixnet 连接后可用 — 或跳过,稍后注册。"
+      youre: "你是 %{name}"
+      claimed_title: "%{name} 已归你所有"
+      claimed_blurb: "朋友现在可以用你的用户名向你付款。一切就绪——打开钱包吧。"
+      open_wallet: "打开我的钱包"
+      skip_for_now: "暂时跳过"
+      import_existing: "已有 Goblin 身份？导入它"
+      import_title: "导入你的身份"
+      import_blurb: "粘贴你的 nsec 或选择一个 .backup 文件，保留你现有的密钥和用户名，而不是这个新的。"
+    errors:
+      cant_open: "无法打开钱包：%{err}"
+      cant_create: "无法创建钱包：%{err}"
+  send:
+    scan_to_request: "扫码请求"
+    scan_to_pay: "扫码支付"
+    tab_scan: "扫描"
+    tab_my_code: "我的二维码"
+    request_from: "向谁请求"
+    send_to: "发送给"
+    search_hint: "handle、npub 或名称"
+    suggested: "%{icon}  建议"
+    no_contacts: "暂无联系人。通过 handle 查找某人。"
+    no_profile: "无资料"
+    tag_contact: "联系人"
+    tag_on_nostr: "在 nostr 上"
+    searching_nostr: "正在搜索 nostr…"
+    unverified_title: "向未验证的密钥付款？"
+    unverified_body: "此密钥未发布 nostr 资料 — 它可能是全新的、匿名的或输错的。发送前请仔细核对是否正确。"
+    keep_looking: "继续查找"
+    pay_anyway: "仍然付款"
+    scan_not_recipient: "该二维码不是 goblin 收款方 — 应为 npub 或 handle"
+    scan_prompt: "将 goblin 二维码对准取景框以激活"
+    scan_to_pay_me: "扫码向我付款"
+    share_btn: "%{icon} 分享"
+    share_message: "在 Goblin 上向我付款 — %{handle}\n%{link}\nnpub：%{npub}"
+    none_found: "未找到与 %{label} 匹配的人"
+    enter_recipient: "输入 handle、npub 或名称"
+    amount_title: "金额"
+    to_name: "发送给 %{name}"
+    not_enough: "你的 grin 余额不足"
+    max: "最大"
+    note_label: "备注"
+    note_hint: "添加备注…"
+    add_note: "添加备注"
+    edit_note: "编辑备注"
+    note_cancel: "取消"
+    note_save: "保存"
+    review_btn: "查看"
+    confirm_request: "确认请求"
+    review_title: "查看"
+    requesting_from: "向 %{name} 请求"
+    youre_sending: "你正在发送给 %{name}"
+    row_from: "付款方"
+    row_to: "收款方"
+    row_note: "备注"
+    row_they_pay: "对方支付"
+    row_they_pay_val: "仅当对方同意时"
+    row_delivery: "传输"
+    row_delivery_val: "NIP-44 加密,经由 Nym"
+    row_network_fee: "网络费用"
+    row_network_fee_val: "从你的余额中扣除"
+    row_privacy: "隐私"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "发送请求"
+    request_approve_hint: "对方将收到一条待同意的请求"
+    hold_to_send: "长按发送"
+    lower_amount: "返回并降低金额"
+    hold_confirm_hint: "按住以确认"
+    requesting: "正在请求…"
+    sending: "正在发送…"
+    they: "对方"
+    request_blocked: "%{who} 不接受请求。请对方改为向你发送 grin。"
+    failed_request_title: "请求失败"
+    failed_send_title: "发送失败"
+    failed_request_body: "我们无法送达请求。请对方改为向你发送 grin。"
+    failed_send_body: "付款未送达。你的 grin 是安全的 — 请重试。"
+    try_again_btn: "重试"
+    close_btn: "关闭"
+    success:
+      requested: "已请求"
+      sent: "已发送"
+      from: "来自"
+      to: "发往"
+      subtitle: "%{dir} %{who} · 刚刚"
+      done_btn: "完成"
+      receipt_btn: "收据"
@@ -1,128 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-	<key>files</key>
-	<dict>
-		<key>Resources/AppIcon.icns</key>
-		<data>
-		F0XBdu5xI+eXrj78HQf2Qr9SKio=
-		</data>
-	</dict>
-	<key>files2</key>
-	<dict>
-		<key>Resources/AppIcon.icns</key>
-		<dict>
-			<key>hash2</key>
-			<data>
-			ZjAn1LaNzSeTeUtKbWKWE7W2ELzhYyrHjKYOXUkQvcI=
-			</data>
-		</dict>
-	</dict>
-	<key>rules</key>
-	<dict>
-		<key>^Resources/</key>
-		<true/>
-		<key>^Resources/.*\.lproj/</key>
-		<dict>
-			<key>optional</key>
-			<true/>
-			<key>weight</key>
-			<real>1000</real>
-		</dict>
-		<key>^Resources/.*\.lproj/locversion.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>1100</real>
-		</dict>
-		<key>^Resources/Base\.lproj/</key>
-		<dict>
-			<key>weight</key>
-			<real>1010</real>
-		</dict>
-		<key>^version.plist$</key>
-		<true/>
-	</dict>
-	<key>rules2</key>
-	<dict>
-		<key>.*\.dSYM($|/)</key>
-		<dict>
-			<key>weight</key>
-			<real>11</real>
-		</dict>
-		<key>^(.*/)?\.DS_Store$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>2000</real>
-		</dict>
-		<key>^(Frameworks|SharedFrameworks|PlugIns|Plug-ins|XPCServices|Helpers|MacOS|Library/(Automator|Spotlight|LoginItems))/</key>
-		<dict>
-			<key>nested</key>
-			<true/>
-			<key>weight</key>
-			<real>10</real>
-		</dict>
-		<key>^.*</key>
-		<true/>
-		<key>^Info\.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^PkgInfo$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^Resources/</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^Resources/.*\.lproj/</key>
-		<dict>
-			<key>optional</key>
-			<true/>
-			<key>weight</key>
-			<real>1000</real>
-		</dict>
-		<key>^Resources/.*\.lproj/locversion.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>1100</real>
-		</dict>
-		<key>^Resources/Base\.lproj/</key>
-		<dict>
-			<key>weight</key>
-			<real>1010</real>
-		</dict>
-		<key>^[^/]+$</key>
-		<dict>
-			<key>nested</key>
-			<true/>
-			<key>weight</key>
-			<real>10</real>
-		</dict>
-		<key>^embedded\.provisionprofile$</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^version\.plist$</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-	</dict>
-</dict>
-</plist>
@@ -61,7 +61,7 @@ function build_lib() {
 ### Build application
 function build_apk() {
  flavor=$3
-  [[ flavor == "" ]] && flavor="local"
+  [[ -z "$flavor" ]] && flavor="local"
  cd android || exit 1
  ./gradlew clean
  # Build signed apk if keystore exists
@@ -80,12 +80,15 @@ function build_apk() {
  fi

  if [[ $1 == "" ]] && [ $success -eq 1 ]; then
-    # Launch application at all connected devices.
+    # Launch application at all connected devices. The installed application id
+    # (st.goblin.wallet) differs from the Java namespace (mw.gri.android), so
+    # derive it from build.gradle and launch the fully-qualified activity.
+    app_id=$(grep -m 1 -Po 'applicationId "\K[^"]*' app/build.gradle)
    for SERIAL in $(adb devices | grep -v List | cut -f 1);
      do
        adb -s "$SERIAL" install ${apk_path}
        sleep 1s
-        adb -s "$SERIAL" shell am start -n mw.gri.android/.MainActivity;
+        adb -s "$SERIAL" shell am start -n "${app_id}/mw.gri.android.MainActivity";
    done
  elif [ $success -eq 1 ]; then
    # Get version
@@ -1,32 +1,57 @@
 #!/usr/bin/env bash
-# Generate all Goblin app icons from img/goblin-icon.png (app icon)
-# and img/goblin-mask.png (black mascot art on transparency).
-# Requires ImageMagick (magick).
+# Regenerate EVERY platform's app icon from two canonical sources:
+#   img/goblin-icon.png        the gradient app icon (yellow gradient + black mascot)
+#   img/goblin-mark-black.svg  the black mascot mark, vector, transparent bg
+#                              (mirror of site/assets/goblin-mark-black.svg)
+#
+# Square icons (desktop window, Linux AppImage, Android launcher, Windows .ico,
+# macOS .icns) come from the gradient PNG. The Android *adaptive* foreground is
+# the black mascot on transparency, composited by the OS over the yellow
+# background color (res/values/ic_launcher_background.xml = #FFD60A) — which
+# reproduces the gradient icon's look.
+#
+# Requires ImageMagick (magick) and python3 (for the .icns container).
 set -euo pipefail
 cd "$(dirname "$0")/.."

 ICON=img/goblin-icon.png
-MASK=img/goblin-mask.png
+MARK=img/goblin-mark-black.svg
 RES=android/app/src/main/res

-# Desktop window icon + in-app embeds.
-magick "$ICON" -resize 256x256 img/icon.png
-magick "$ICON" -resize 512x512 img/goblin-icon-512.png
-magick "$MASK" -channel RGB -fill white -colorize 100 img/goblin-mask-white.png
-magick img/goblin-mask-white.png -resize 128x128 img/goblin-mask-128.png
-magick img/goblin-mask-white.png -resize 64x64 img/goblin-mask-64.png
+# --- Desktop window icon (egui, src/main.rs) + Linux AppImage AppDir icon ---
+magick "$ICON" -resize 256x256 PNG32:img/icon.png
+cp img/icon.png linux/Goblin.AppDir/goblin.png

-# Android launcher icons.
-declare -A SIZES=( [mdpi]=48 [hdpi]=72 [xhdpi]=96 [xxhdpi]=144 [xxxhdpi]=192 )
+# --- Android launcher icons (gradient square) + adaptive foreground (mascot) ---
+declare -A SIZES=(    [mdpi]=48  [hdpi]=72  [xhdpi]=96  [xxhdpi]=144 [xxxhdpi]=192 )
 declare -A FG_SIZES=( [mdpi]=108 [hdpi]=162 [xhdpi]=216 [xxhdpi]=324 [xxxhdpi]=432 )
 for d in mdpi hdpi xhdpi xxhdpi xxxhdpi; do
  s=${SIZES[$d]}; fg=${FG_SIZES[$d]}
-  # mascot occupies ~52% of the adaptive canvas (safe zone is 66%)
-  art=$(( fg * 52 / 100 ))
-  magick "$ICON" -resize ${s}x${s} "$RES/mipmap-$d/ic_launcher.png"
-  magick "$ICON" -resize ${s}x${s} "$RES/mipmap-$d/ic_launcher_round.png"
-  magick "$MASK" -resize ${art}x${art} -background none \
-    -gravity center -extent ${fg}x${fg} "$RES/mipmap-$d/ic_launcher_foreground.png"
+  # Mascot fills ~60% of the adaptive canvas — inside the ~61% safe zone, so no
+  # launcher mask (circle/squircle) ever clips it.
+  art=$(( fg * 60 / 100 ))
+  magick "$ICON" -resize "${s}x${s}"   PNG32:"$RES/mipmap-$d/ic_launcher.png"
+  magick "$ICON" -resize "${s}x${s}"   PNG32:"$RES/mipmap-$d/ic_launcher_round.png"
+  magick -background none "$MARK" -resize "${art}x${art}" \
+    -gravity center -extent "${fg}x${fg}" PNG32:"$RES/mipmap-$d/ic_launcher_foreground.png"
 done

-echo "icons generated"
+# --- Android notification (status-bar) icon: white-on-transparent mascot ---
+# Android renders ic_stat_name as an alpha-only silhouette, so the RGB channels
+# are forced to pure white; ~90% of the canvas matches the old asset's padding.
+declare -A STAT_SIZES=( [mdpi]=24 [hdpi]=36 [xhdpi]=48 [xxhdpi]=72 [xxxhdpi]=96 )
+for d in mdpi hdpi xhdpi xxhdpi xxxhdpi; do
+  s=${STAT_SIZES[$d]}
+  art=$(( s * 9 / 10 ))
+  magick -background none img/goblin-logo2.svg -resize "${art}x${art}" \
+    -gravity center -extent "${s}x${s}" \
+    -channel RGB -evaluate set 100% +channel PNG32:"$RES/drawable-$d/ic_stat_name.png"
+done
+
+# --- Windows installer + file-type icon (WiX wix/Product.ico) ---
+magick "$ICON" -define icon:auto-resize=256,128,64,48,32,24,16 wix/Product.ico
+
+# --- macOS app bundle icon (Goblin.app) ---
+python3 scripts/make-icns.py "$ICON" macos/Goblin.app/Contents/Resources/AppIcon.icns
+
+echo "icons generated from $ICON + $MARK"
@@ -0,0 +1,60 @@
+#!/usr/bin/env python3
+"""Build a macOS .icns from a square PNG, dependency-free.
+
+macOS has `iconutil` and Linux distros have `png2icns`, but neither is reliably
+present, and ImageMagick's own .icns writer only emits a single size. So we
+assemble the multi-resolution PNG-payload .icns container by hand (the format
+macOS 10.7+ accepts): the `icns` magic + big-endian length, then one entry per
+OSType, each carrying an 8-bit PNG. ImageMagick (`magick`) does the resizing.
+
+Usage: make-icns.py <source.png> <out.icns>
+"""
+
+import struct
+import subprocess
+import sys
+
+# OSType -> pixel size. PNG-payload entries. Sizes above the source are
+# Lanczos-upscaled (soft but acceptable for the few large Dock/Finder slots).
+SLOTS = [
+    (b"icp4", 16),
+    (b"icp5", 32),
+    (b"icp6", 64),
+    (b"ic07", 128),
+    (b"ic08", 256),
+    (b"ic11", 32),   # 16@2x
+    (b"ic12", 64),   # 32@2x
+    (b"ic13", 256),  # 128@2x
+    (b"ic09", 512),  # 512
+    (b"ic14", 512),  # 256@2x
+]
+
+
+def render(src, size):
+    out = "/tmp/_icns_%d.png" % size
+    subprocess.run(
+        ["magick", src, "-resize", "%dx%d" % (size, size),
+         "-filter", "Lanczos", "-depth", "8", "PNG32:%s" % out],
+        check=True,
+    )
+    return open(out, "rb").read()
+
+
+def main():
+    if len(sys.argv) != 3:
+        sys.exit("usage: make-icns.py <source.png> <out.icns>")
+    src, out = sys.argv[1], sys.argv[2]
+    cache, entries = {}, []
+    for ostype, size in SLOTS:
+        if size not in cache:
+            cache[size] = render(src, size)
+        data = cache[size]
+        entries.append(ostype + struct.pack(">I", 8 + len(data)) + data)
+    body = b"".join(entries)
+    with open(out, "wb") as f:
+        f.write(b"icns" + struct.pack(">I", 8 + len(body)) + body)
+    print("wrote %s (%d entries)" % (out, len(entries)))
+
+
+if __name__ == "__main__":
+    main()
@@ -49,11 +49,12 @@ fetch_zig() {
 }

 fetch_appimage() {
-	[ -x "${TC}/appimagetool" ] && [ -e "${TC}/runtime-x86_64" ] && { echo "appimagetool ${AT_VER}: present"; return; }
-	echo "appimage: fetching appimagetool ${AT_VER} + type2 runtime…"
+	[ -x "${TC}/appimagetool" ] && [ -e "${TC}/runtime-x86_64" ] && [ -e "${TC}/runtime-aarch64" ] && { echo "appimagetool ${AT_VER}: present"; return; }
+	echo "appimage: fetching appimagetool ${AT_VER} + type2 runtimes (x86_64 + aarch64)…"
 	dl "${DEV}/appimagetool/releases/download/${AT_VER}/appimagetool-x86_64.AppImage" "${TC}/appimagetool"
 	dl "${DEV}/appimage-type2-runtime/releases/download/${RT_TAG}/runtime-x86_64" "${TC}/runtime-x86_64"
-	chmod +x "${TC}/appimagetool" "${TC}/runtime-x86_64"
+	dl "${DEV}/appimage-type2-runtime/releases/download/${RT_TAG}/runtime-aarch64" "${TC}/runtime-aarch64"
+	chmod +x "${TC}/appimagetool" "${TC}/runtime-x86_64" "${TC}/runtime-aarch64"
 }

 # Assemble a minimal Android SDK (build-tools + platform + platform-tools) from
@@ -77,6 +77,13 @@ impl<Platform: PlatformCallbacks> App<Platform> {
 			self.first_draw = false;
 		}

+		// Heartbeat for "is the app on-screen": stamp this frame, and keep a light
+		// ~2s repaint cadence so the stamp stays fresh while visible. When the app
+		// is backgrounded eframe stops calling this, the stamp goes stale, and
+		// background workers (the @name re-verify sweep) pause until we're back.
+		crate::mark_frame();
+		ctx.request_repaint_after(std::time::Duration::from_secs(2));
+
 		// Keep the Android status-bar icons readable against the in-app theme
 		// (the app draws edge-to-edge over the status bar). Only on change.
 		let white_icons = crate::gui::theme::status_bar_white_icons();
@@ -323,14 +330,38 @@ impl<Platform: PlatformCallbacks> App<Platform> {
 			ui.ctx().send_viewport_cmd(ViewportCommand::StartDrag);
 		}

-		// Paint the title.
+		// Paint the title. Centering on the full rect runs the tail of the
+		// string under the right-side window buttons at narrow widths (the
+		// "Build NNN" digits collide with the minimize caret at 390px), so
+		// when the centered galley would reach the button cluster, center it
+		// in the free span between the theme toggle and the buttons instead,
+		// eliding if even that span is too tight.
 		let title_text = format!("Goblin ツ · Build {}", crate::BUILD);
-		painter.text(
-			title_rect.center(),
-			egui::Align2::CENTER_CENTER,
-			title_text,
-			egui::FontId::proportional(15.0),
-			Colors::title(true),
+		let title_font = egui::FontId::proportional(15.0);
+		let title_ink = Colors::title(true);
+		const BUTTONS_LEFT_INSET: f32 = 60.0; // theme toggle
+		const BUTTONS_RIGHT_INSET: f32 = 168.0; // minimize + fullscreen + close
+		let free_left = title_rect.min.x + BUTTONS_LEFT_INSET;
+		let free_right = title_rect.max.x - BUTTONS_RIGHT_INSET;
+		let mut galley = painter.layout_no_wrap(title_text.clone(), title_font.clone(), title_ink);
+		let mut center_x = title_rect.center().x;
+		if center_x + galley.size().x / 2.0 > free_right {
+			center_x = (free_left + free_right) / 2.0;
+			if galley.size().x > free_right - free_left {
+				let mut job =
+					egui::text::LayoutJob::simple_singleline(title_text, title_font, title_ink);
+				job.wrap =
+					egui::text::TextWrapping::truncate_at_width((free_right - free_left).max(0.0));
+				galley = painter.layout_job(job);
+			}
+		}
+		painter.galley(
+			egui::pos2(
+				center_x - galley.size().x / 2.0,
+				title_rect.center().y - galley.size().y / 2.0,
+			),
+			galley,
+			title_ink,
 		);

 		ui.scope_builder(UiBuilder::new().max_rect(title_rect), |ui| {
@@ -40,6 +40,12 @@ pub struct Android {
 impl Android {
 	/// Create new Android platform instance from provided [`AndroidApp`].
 	pub fn new(app: AndroidApp) -> Self {
+		// Keep a process-wide handle so non-GUI threads (the nostr service)
+		// can reach Java too (see `notify_payment_received`).
+		{
+			let mut w_app = ANDROID_APP.write();
+			*w_app = Some(app.clone());
+		}
 		Self {
 			android_app: app,
 			ctx: Arc::new(RwLock::new(None)),
@@ -158,6 +164,38 @@ impl PlatformCallbacks for Android {
 		Ok(())
 	}

+	fn save_file(&self, name: String, data: Vec<u8>) -> Result<(), std::io::Error> {
+		// Stage the bytes in the share cache (same dir the FileProvider exposes),
+		// then let Java copy them to the user-chosen Storage Access Framework
+		// document. Mirrors `share_data`, but the Java side uses CREATE_DOCUMENT.
+		let default_cache = OsString::from(dirs::cache_dir().unwrap());
+		let mut file = PathBuf::from(env::var_os("XDG_CACHE_HOME").unwrap_or(default_cache));
+		file.push("share");
+		if !file.exists() {
+			std::fs::create_dir(file.clone())?;
+		}
+		file.push(&name);
+		if file.exists() {
+			std::fs::remove_file(file.clone())?;
+		}
+		let mut f = File::create_new(file.clone())?;
+		f.write_all(data.as_slice())?;
+		f.sync_all()?;
+		let vm = unsafe { jni::JavaVM::from_raw(self.android_app.vm_as_ptr() as _) }.unwrap();
+		let env = vm.attach_current_thread().unwrap();
+		let path_arg = env.new_string(file.to_str().unwrap()).unwrap();
+		let name_arg = env.new_string(&name).unwrap();
+		let _ = self.call_java_method(
+			"saveFile",
+			"(Ljava/lang/String;Ljava/lang/String;)V",
+			&[
+				JValue::Object(&JObject::from(path_arg)),
+				JValue::Object(&JObject::from(name_arg)),
+			],
+		);
+		Ok(())
+	}
+
 	fn share_text(&self, text: String) {
 		let vm = unsafe { jni::JavaVM::from_raw(self.android_app.vm_as_ptr() as _) }.unwrap();
 		let env = vm.attach_current_thread().unwrap();
@@ -224,6 +262,10 @@ impl PlatformCallbacks for Android {
 	fn vibrate_error(&self) {
 		let _ = self.call_java_method("vibrateError", "()V", &[]);
 	}
+
+	fn vibrate_copy(&self) {
+		let _ = self.call_java_method("vibrateCopy", "()V", &[]);
+	}
 }

 lazy_static! {
@@ -231,6 +273,89 @@ lazy_static! {
 	static ref LAST_CAMERA_IMAGE: Arc<RwLock<Option<(Vec<u8>, u32)>>> = Arc::new(RwLock::new(None));
 	/// Picked file path.
 	static ref PICKED_FILE_PATH: Arc<RwLock<Option<String>>> = Arc::new(RwLock::new(None));
+	/// App handle for JNI calls from threads without a platform reference.
+	static ref ANDROID_APP: Arc<RwLock<Option<AndroidApp>>> = Arc::new(RwLock::new(None));
+}
+
+/// Show the one-shot "payment received" system notification (Java side
+/// `BackgroundService.notifyPaymentReceived`, id=2, separate from the
+/// persistent sync notification id=1). Called by the nostr service on
+/// slatepack receipt from a non-GUI thread, hence the stored [`AndroidApp`]
+/// handle instead of a platform reference. Fail-open: a missing handle or
+/// JNI error just skips the notification, never the payment.
+pub fn notify_payment_received(name: &str, amount: &str) {
+	let app = {
+		let r_app = ANDROID_APP.read();
+		r_app.clone()
+	};
+	let Some(app) = app else {
+		return;
+	};
+	let platform = Android {
+		android_app: app,
+		ctx: Arc::new(RwLock::new(None)),
+	};
+	let Ok(vm) = (unsafe { jni::JavaVM::from_raw(platform.android_app.vm_as_ptr() as _) }) else {
+		return;
+	};
+	let Ok(env) = vm.attach_current_thread() else {
+		return;
+	};
+	let Ok(j_name) = env.new_string(name) else {
+		return;
+	};
+	let Ok(j_amount) = env.new_string(amount) else {
+		return;
+	};
+	let _ = platform.call_java_method(
+		"notifyPaymentReceived",
+		"(Ljava/lang/String;Ljava/lang/String;)V",
+		&[
+			JValue::Object(&JObject::from(j_name)),
+			JValue::Object(&JObject::from(j_amount)),
+		],
+	);
+}
+
+/// Show the one-shot "payment requested" system notification (Java side
+/// `BackgroundService.notifyPaymentRequested`, id=3, separate from both the
+/// persistent sync notification id=1 and the received-payment one id=2). Called
+/// by the nostr service when a payment request (Invoice1) is ingested from a
+/// non-GUI thread, hence the stored [`AndroidApp`] handle instead of a platform
+/// reference. Fail-open: a missing handle or JNI error just skips the
+/// notification, never the request. Mirrors [`notify_payment_received`].
+pub fn notify_payment_requested(name: &str, amount: &str) {
+	let app = {
+		let r_app = ANDROID_APP.read();
+		r_app.clone()
+	};
+	let Some(app) = app else {
+		return;
+	};
+	let platform = Android {
+		android_app: app,
+		ctx: Arc::new(RwLock::new(None)),
+	};
+	let Ok(vm) = (unsafe { jni::JavaVM::from_raw(platform.android_app.vm_as_ptr() as _) }) else {
+		return;
+	};
+	let Ok(env) = vm.attach_current_thread() else {
+		return;
+	};
+	let Ok(j_name) = env.new_string(name) else {
+		return;
+	};
+	let Ok(j_amount) = env.new_string(amount) else {
+		return;
+	};
+	let _ = platform.call_java_method(
+		"notifyPaymentRequested",
+		"(Ljava/lang/String;Ljava/lang/String;)V",
+		&[
+			JValue::Object(&JObject::from(j_name)),
+			JValue::Object(&JObject::from(j_amount)),
+		],
+	);
 }

 /// Callback from Java code with last entered character from soft keyboard.
@@ -32,6 +32,14 @@ pub trait PlatformCallbacks {
 	fn can_switch_camera(&self) -> bool;
 	fn switch_camera(&self);
 	fn share_data(&self, name: String, data: Vec<u8>) -> Result<(), std::io::Error>;
+
+	/// Save bytes to a user-chosen location on the device (a "save as" dialog).
+	/// Desktop already does this via `share_data` (rfd save dialog); Android
+	/// overrides to use the Storage Access Framework (ACTION_CREATE_DOCUMENT)
+	/// instead of the share sheet.
+	fn save_file(&self, name: String, data: Vec<u8>) -> Result<(), std::io::Error> {
+		self.share_data(name, data)
+	}
 	/// Share plain text via the platform's native share sheet (e.g. a payment
 	/// link). Defaults to copying to the clipboard on platforms without a share
 	/// sheet (desktop).
@@ -57,4 +65,7 @@ pub trait PlatformCallbacks {
 	/// Play a short "error" haptic (e.g. a rejected over-balance payment).
 	/// No-op off Android.
 	fn vibrate_error(&self) {}
+
+	/// Play a tiny "tick" haptic confirming a successful copy. No-op off Android.
+	fn vibrate_copy(&self) {}
 }
@@ -194,7 +194,7 @@ thread_local! {
 /// RAII guard that forces [`kind`]/[`tokens`] to a specific theme for its
 /// lifetime, restoring the previous value on drop (panic-safe). Used to paint
 /// one surface — the Pay tab — in the yellow theme regardless of the user's
-/// chosen theme, à la Cash App's brand-colored pay screen.
+/// chosen theme, à la a modern pay app's brand-colored pay screen.
 #[must_use = "the override only lasts while the guard is alive"]
 pub struct ScopedTheme(Option<ThemeKind>);

@@ -224,9 +224,22 @@ pub fn tokens() -> &'static ThemeTokens {
 	}
 }

+/// Set each frame by the Pay surface (which paints a bright yellow top under a
+/// possibly-dark global theme), so the status bar can pick readable icons for it.
+static YELLOW_SURFACE: std::sync::atomic::AtomicBool = std::sync::atomic::AtomicBool::new(false);
+
+/// Flag whether the bright Pay/yellow surface is currently on screen.
+pub fn set_status_surface_yellow(yellow: bool) {
+	YELLOW_SURFACE.store(yellow, std::sync::atomic::Ordering::Relaxed);
+}
+
 /// Whether the status bar should use light (white) icons: true on the dark
-/// theme (dark top), false on the light/yellow themes (bright top).
+/// theme (dark top), false on the light/yellow themes (bright top). The bright
+/// Pay surface forces dark icons even when the global theme is dark.
 pub fn status_bar_white_icons() -> bool {
+	if YELLOW_SURFACE.load(std::sync::atomic::Ordering::Relaxed) {
+		return false;
+	}
 	tokens().dark_base
 }

@@ -338,12 +351,6 @@ pub fn ink_for(bg: Color32) -> Color32 {
 	}
 }

-/// Avatar (background, ink) pair for a hue index.
-pub fn avatar_pair(hue: usize) -> (Color32, Color32) {
-	let pairs = &tokens().avatar_pairs;
-	pairs[hue % pairs.len()]
-}
-
 /// Number of avatar color pairs (hue derivation modulus).
 pub fn avatar_pairs_len() -> usize {
 	tokens().avatar_pairs.len()
@@ -144,6 +144,9 @@ impl ContentContainer for Content {
 					.show();
 			} else if OperatingSystem::from_target_os() == OperatingSystem::Android
 				&& AppConfig::android_integrated_node_warning_needed()
+				// The warning is about INTEGRATED-node background sync; on the
+				// external-node default it nags about a node we do not run.
+				&& AppConfig::autostart_node()
 			{
 				Modal::new(ANDROID_INTEGRATED_NODE_WARNING_MODAL)
 					.title(t!("network.node"))
@@ -30,7 +30,7 @@ enum Fetched {
 	Found(String, Vec<u8>),
 	/// The server confirmed the name has no avatar.
 	Absent,
-	/// The probe failed (network/Tor) — do NOT cache; retry later.
+	/// The probe failed (network) — do NOT cache; retry later.
 	Failed,
 }
 type FetchResult = (String, Fetched);
@@ -115,15 +115,6 @@ impl AvatarTextures {
 		None
 	}

-	/// Install the just-uploaded avatar without waiting for a round-trip.
-	pub fn set_own(&mut self, ctx: &egui::Context, name: &str, hash: &str, png: &[u8]) {
-		let name = name.trim_start_matches('@').to_lowercase();
-		self.cache.store(&name, hash, png);
-		let tex = decode(png)
-			.map(|img| ctx.load_texture(format!("avatar_{name}"), img, Default::default()));
-		self.textures.insert(name, tex);
-	}
-
 	/// Forget a name (released or rotated away).
 	pub fn invalidate(&mut self, name: &str) {
 		let name = name.trim_start_matches('@').to_lowercase();
@@ -146,9 +137,8 @@ impl AvatarTextures {
 					self.cache.mark_absent(&name);
 					self.textures.insert(name, None);
 				}
-				// Network/Tor failure: leave the entry stale so the next
-				// frame retries once a circuit is healthy. Never cache it as
-				// a confirmed "no avatar".
+				// Network failure: leave the entry stale so the next frame
+				// retries. Never cache it as a confirmed "no avatar".
 				Fetched::Failed => {}
 			}
 			ctx.request_repaint();
@@ -31,7 +31,6 @@ pub struct ActivityItem {
 	/// Canceled/expired before completing (wallet-cancelled tx or expired meta).
 	pub canceled: bool,
 	pub system: bool,
-	pub hue: usize,
 	pub time: i64,
 	/// Counterparty npub hex, when known.
 	pub npub: Option<String>,
@@ -44,7 +43,6 @@ pub struct ActivityItem {
 pub struct ReceiptDetail {
 	pub tx_id: u32,
 	pub title: String,
-	pub hue: usize,
 	pub npub: Option<String>,
 	pub amount: u64,
 	pub incoming: bool,
@@ -79,18 +77,16 @@ pub fn receipt_detail(wallet: &Wallet, tx_id: u32) -> Option<ReceiptDetail> {
 	let meta: Option<TxNostrMeta> = slate_id
 		.as_ref()
 		.and_then(|sid| store_ref.and_then(|s| s.tx_meta(sid)));
-	let (title, hue) = if system {
-		("Mining reward".to_string(), 5)
+	let title = if system {
+		"Mining reward".to_string()
 	} else if let Some(m) = &meta {
 		store_ref
 			.map(|s| contact_title(s, &m.npub))
-			.unwrap_or_else(|| (short_npub(&m.npub), 0))
+			.unwrap_or_else(|| short_npub(&m.npub))
+	} else if incoming {
+		"Received".to_string()
 	} else {
-		let label = if incoming { "Received" } else { "Sent" };
-		(
-			label.to_string(),
-			(tx.data.id as usize) % crate::gui::theme::avatar_pairs_len(),
-		)
+		"Sent".to_string()
 	};
 	let note = meta.as_ref().and_then(|m| m.note.clone());
 	let time = tx
@@ -105,16 +101,25 @@ pub fn receipt_detail(wallet: &Wallet, tx_id: u32) -> Option<ReceiptDetail> {
 	} else {
 		Some(tx.data.fee.map(|f| f.fee()).unwrap_or(0))
 	};
-	let confs = if tx.data.confirmed {
-		None
-	} else {
-		match tx.height {
-			Some(h) if h > 0 && data.info.last_confirmed_height >= h => Some((
-				data.info.last_confirmed_height - h + 1,
-				data.info.minimum_confirmations,
-			)),
-			_ => Some((0, data.info.minimum_confirmations)),
+	// Confirmation progress toward the spendable threshold (min_confirmations).
+	// grin flips `confirmed` to true at the FIRST on-chain block, but a payment
+	// isn't spendable until min_confirmations — so keep counting 1/10 … 10/10
+	// instead of jumping straight to "complete" at one block (which is why the
+	// count never appeared to move).
+	let min_conf = data.info.minimum_confirmations;
+	let confs = match tx.height {
+		Some(h) if h > 0 && data.info.last_confirmed_height >= h => {
+			let count = data.info.last_confirmed_height - h + 1;
+			if count >= min_conf {
+				None // matured — fully spendable
+			} else {
+				Some((count, min_conf))
+			}
 		}
+		// On-chain but exact height not yet known: at least one block in.
+		_ if tx.data.confirmed => Some((1.min(min_conf), min_conf)),
+		// Broadcast but not yet mined.
+		_ => Some((0, min_conf)),
 	};
 	let canceled = is_canceled(tx, meta.as_ref());
 	let has_identity = meta
@@ -124,7 +129,6 @@ pub fn receipt_detail(wallet: &Wallet, tx_id: u32) -> Option<ReceiptDetail> {
 	Some(ReceiptDetail {
 		tx_id,
 		title,
-		hue,
 		npub: meta.map(|m| m.npub),
 		amount: tx.amount,
 		incoming,
@@ -175,16 +179,17 @@ fn is_canceled(tx: &WalletTx, meta: Option<&TxNostrMeta>) -> bool {
 }

 /// Resolve the display title for a contact npub.
-pub fn contact_title(store: &NostrStore, npub: &str) -> (String, usize) {
+pub fn contact_title(store: &NostrStore, npub: &str) -> String {
 	if let Some(contact) = store.contact(npub) {
-		(display_name(&contact), contact.hue as usize)
+		display_name(&contact)
 	} else {
-		let hue = hue_of(&npub);
-		(short_npub(npub), hue)
+		short_npub(npub)
 	}
 }

-/// Display rule: petname → @user (verified goblin.st) → user@domain → npub short.
+/// Display rule: petname → bare name (verified, home authority) → `name · domain`
+/// (verified, foreign authority — never bare, so a foreign "alice" can't pose as
+/// your home "alice") → short npub. We never show the `@`.
 pub fn display_name(contact: &Contact) -> String {
 	if let Some(petname) = &contact.petname {
 		if !petname.is_empty() {
@@ -193,18 +198,34 @@ pub fn display_name(contact: &Contact) -> String {
 	}
 	if let (Some(nip05), Some(_)) = (&contact.nip05, contact.nip05_verified_at) {
 		if let Some((name, domain)) = nip05.split_once('@') {
-			if domain == crate::nostr::relays::HOME_NIP05_DOMAIN {
-				return format!("@{}", name);
+			if domain == crate::nostr::nip05::home_domain() {
+				return name.to_string();
 			}
-			return nip05.clone();
+			// Foreign authority: show the domain (no @) so it can't masquerade
+			// as a home name.
+			return format!("{name} · {domain}");
 		}
 	}
 	short_npub(&contact.npub)
 }

-/// Short npub display (npub1abcd…wxyz) from a hex pubkey.
+/// Whether this contact's name is verified against a name authority (gets the
+/// little check), and the foreign domain to surface (None when it's the home
+/// authority, where the domain is implied).
+pub fn name_verification(contact: &Contact) -> Option<Option<String>> {
+	let nip05 = contact.nip05.as_ref()?;
+	contact.nip05_verified_at?;
+	let (_, domain) = nip05.split_once('@')?;
+	if domain == crate::nostr::nip05::home_domain() {
+		Some(None)
+	} else {
+		Some(Some(domain.to_string()))
+	}
+}
+
 /// Avatar hue index derived from a hex pubkey (stable per identity, spread
-/// across the full color-pair palette).
+/// across the full color-pair palette). Only fills the persisted
+/// `Contact.hue` field these days — nothing reads it for rendering anymore.
 pub fn hue_of(hex: &str) -> usize {
 	usize::from_str_radix(&hex[..2.min(hex.len())], 16).unwrap_or(0)
 		% crate::gui::theme::avatar_pairs_len()
@@ -222,16 +243,17 @@ pub fn short_handle(handle: &str) -> String {
 	format!("{head}…{tail}")
 }

+/// Short npub display (npub1abcd…wxyz) from a hex pubkey.
 pub fn short_npub(hex: &str) -> String {
 	use nostr_sdk::{PublicKey, ToBech32};
 	if let Ok(pk) = PublicKey::from_hex(hex) {
-		if let Ok(npub) = pk.to_bech32() {
-			// Standard truncation: "npub1" + 7 head chars … 6 tail chars.
-			if npub.len() > 18 {
-				return format!("{}…{}", &npub[..12], &npub[npub.len() - 6..]);
-			}
-			return npub;
+		// `to_bech32` for a valid key is infallible.
+		let Ok(npub) = pk.to_bech32();
+		// Standard truncation: "npub1" + 7 head chars … 6 tail chars.
+		if npub.len() > 18 {
+			return format!("{}…{}", &npub[..12], &npub[npub.len() - 6..]);
 		}
+		return npub;
 	}
 	format!("{}…", &hex[..8.min(hex.len())])
 }
@@ -273,23 +295,17 @@ fn build_item(tx: &WalletTx, store: Option<&NostrStore>) -> ActivityItem {
 		.as_ref()
 		.and_then(|sid| store.and_then(|s| s.tx_meta(sid)));

-	let (title, hue) = if system {
-		("Mining reward".to_string(), 5)
+	let title = if system {
+		"Mining reward".to_string()
 	} else if let Some(meta) = &meta {
 		store
 			.map(|s| contact_title(s, &meta.npub))
-			.unwrap_or_else(|| (short_npub(&meta.npub), 0))
+			.unwrap_or_else(|| short_npub(&meta.npub))
+	} else if incoming {
+		// Fall back to a generic label when there's no nostr counterparty.
+		"Received".to_string()
 	} else {
-		// Fall back to slatepack address counterparty or generic label.
-		let label = if incoming {
-			"Received".to_string()
-		} else {
-			"Sent".to_string()
-		};
-		(
-			label,
-			(tx.data.id as usize) % crate::gui::theme::avatar_pairs_len(),
-		)
+		"Sent".to_string()
 	};

 	let note = meta.as_ref().and_then(|m| m.note.clone());
@@ -310,14 +326,14 @@ fn build_item(tx: &WalletTx, store: Option<&NostrStore>) -> ActivityItem {
 		confirmed: tx.data.confirmed,
 		canceled,
 		system,
-		hue,
 		time,
 		npub: meta.map(|m| m.npub),
 	}
 }

-/// Recent unique peers for the home strip (most recent first).
-pub fn recent_peers(wallet: &Wallet, limit: usize) -> Vec<(String, usize, String)> {
+/// Recent unique peers for the home strip (most recent first), as
+/// `(display name, npub hex)`.
+pub fn recent_peers(wallet: &Wallet, limit: usize) -> Vec<(String, String)> {
 	let store = match wallet.nostr_service() {
 		Some(s) => s.store.clone(),
 		None => return vec![],
@@ -327,13 +343,14 @@ pub fn recent_peers(wallet: &Wallet, limit: usize) -> Vec<(String, usize, String
 	contacts
 		.into_iter()
 		.take(limit)
-		.map(|c| (display_name(&c), c.hue as usize, c.npub))
+		.map(|c| (display_name(&c), c.npub))
 		.collect()
 }

 /// Local contacts whose petname / nip05 / npub contains `query` (case-
 /// insensitive) — the instant, no-network half of the recipient search.
-pub fn search_contacts(wallet: &Wallet, query: &str, limit: usize) -> Vec<(String, usize, String)> {
+/// Returns `(display name, npub hex)` pairs.
+pub fn search_contacts(wallet: &Wallet, query: &str, limit: usize) -> Vec<(String, String)> {
 	let store = match wallet.nostr_service() {
 		Some(s) => s.store.clone(),
 		None => return vec![],
@@ -342,7 +359,7 @@ pub fn search_contacts(wallet: &Wallet, query: &str, limit: usize) -> Vec<(Strin
 	if q.is_empty() {
 		return vec![];
 	}
-	let mut hits: Vec<(String, usize, String)> = store
+	let mut hits: Vec<(String, String)> = store
 		.all_contacts()
 		.into_iter()
 		.filter(|c| {
@@ -356,7 +373,7 @@ pub fn search_contacts(wallet: &Wallet, query: &str, limit: usize) -> Vec<(Strin
 					.unwrap_or(false)
 				|| c.npub.to_lowercase().contains(&q)
 		})
-		.map(|c| (display_name(&c), c.hue as usize, c.npub))
+		.map(|c| (display_name(&c), c.npub))
 		.collect();
 	hits.truncate(limit);
 	hits
@@ -36,8 +36,8 @@ const LOGO_FRAC: f64 = 0.90;
 const LOGO_OPACITY: f64 = 0.67;
 const GRIN_NATIVE: f64 = 61.0;

-/// Standard HSL → RGB → `#rrggbb`. f64 throughout for cross-port byte-identity.
-fn hsl_to_rgb(h: f64, s: f64, l: f64) -> String {
+/// Standard HSL → RGB bytes. f64 throughout for cross-port byte-identity.
+pub(super) fn hsl_rgb8(h: f64, s: f64, l: f64) -> (u8, u8, u8) {
 	let c = (1.0 - (2.0 * l - 1.0).abs()) * s;
 	let hp = h / 60.0;
 	let x = c * (1.0 - ((hp % 2.0) - 1.0).abs());
@@ -51,7 +51,13 @@ fn hsl_to_rgb(h: f64, s: f64, l: f64) -> String {
 	};
 	let m = l - c / 2.0;
 	let to = |v: f64| ((v + m) * 255.0).round() as u8;
-	format!("#{:02x}{:02x}{:02x}", to(r), to(g), to(b))
+	(to(r), to(g), to(b))
+}
+
+/// Standard HSL → RGB → `#rrggbb`.
+fn hsl_to_rgb(h: f64, s: f64, l: f64) -> String {
+	let (r, g, b) = hsl_rgb8(h, s, l);
+	format!("#{r:02x}{g:02x}{b:02x}")
 }

 /// Normalise any caller-supplied id (npub bech32 OR raw hex) to the canonical
@@ -79,17 +85,6 @@ fn gradient_params(hex: &str) -> (String, String, f64) {
 	(c1, c2, angle)
 }

-/// The seeded two-tone gradient WITHOUT the Grin mark — a bare background tile.
-/// Used for **named** users, where the app paints the person's initial on top
-/// (see `widgets::gradient_letter_avatar`) instead of the Grin mark. Same seed →
-/// same background as the anonymous gradient avatar, so one key reads consistently.
-pub fn gradient_bg_svg(hex: &str, size: u32) -> String {
-	let (c1, c2, angle) = gradient_params(hex);
-	format!(
-		r##"<svg xmlns="http://www.w3.org/2000/svg" width="{size}" height="{size}" viewBox="0 0 {size} {size}" role="img"><defs><linearGradient id="g" gradientUnits="objectBoundingBox" gradientTransform="rotate({angle:.1},0.5,0.5)"><stop offset="0" stop-color="{c1}"/><stop offset="1" stop-color="{c2}"/></linearGradient></defs><rect width="{size}" height="{size}" fill="url(#g)"/></svg>"##
-	)
-}
-
 /// The gradient avatar as a standalone SVG document, seeded by `hex` (lowercase
 /// hex pubkey). `id_suffix` makes the gradient element id unique when several
 /// are inlined into ONE html document; for a standalone document (how egui
@@ -21,13 +21,14 @@ use eframe::epaint::FontId;
 use egui::{Align, Layout, RichText, ScrollArea, Sense, Vec2};
 use grin_util::ZeroingString;

-use crate::gui::icons::ARROW_LEFT;
+use crate::gui::icons::{ARROW_LEFT, CHECK};
 use crate::gui::platform::PlatformCallbacks;
 use crate::gui::theme::{self, fonts};
 use crate::gui::views::types::{ContentContainer, ModalPosition, QrScanResult};
 use crate::gui::views::wallets::creation::MnemonicSetup;
 use crate::gui::views::{CameraScanContent, Content, Modal, TextEdit, View};
 use crate::node::Node;
+use crate::nostr::NostrIdentity;
 use crate::wallet::types::{ConnectionMethod, PhraseMode, PhraseSize};
 use crate::wallet::{ConnectionsConfig, ExternalConnection, Wallet, WalletList};

@@ -39,6 +40,7 @@ const OB_PHRASE_SCAN_MODAL: &'static str = "ob_phrase_scan_modal";

 /// Onboarding step.
 #[derive(PartialEq, Eq, Clone, Copy)]
+#[allow(dead_code)] // Node step retired from the flow; node mgmt lives in Settings/Advanced
 enum Step {
 	Intro,
 	Node,
@@ -69,13 +71,41 @@ pub struct OnboardingContent {
 	wallet: Option<Wallet>,
 	/// Optional username claim state (same machinery as Settings).
 	claim: ClaimState,
+	/// Optional "import an existing identity" sub-flow, opened from the identity
+	/// step so a returning user can keep their old npub + username instead of the
+	/// freshly-generated random key.
+	import: Option<OnbImport>,
+	/// Moment the recovery phrase was copied, for the transient "Copied" check.
+	words_copied: Option<std::time::Instant>,
+}
+
+/// Onboarding identity-import state. Reuses the wallet password the user just
+/// set, so it only needs the backup file / nsec (and the backup's own password
+/// when restoring a sealed `.backup`).
+#[derive(Default)]
+struct OnbImport {
+	/// 0 = form, 1 = working, 2 = error.
+	stage: u8,
+	/// Pasted nsec or the read-in contents of a `.backup` / identity JSON file.
+	nsec: String,
+	/// Password the backup was sealed under (blank for a bare nsec, or when it
+	/// matches this wallet's password).
+	backup_password: String,
+	/// Last import error, shown on stage 2.
+	error: String,
+	/// A native file pick is in flight (Android resolves the path asynchronously).
+	picking: bool,
+	/// Worker result: Ok(new npub) or Err(message).
+	result: std::sync::Arc<std::sync::Mutex<Option<Result<String, String>>>>,
 }

 impl Default for OnboardingContent {
 	fn default() -> Self {
 		Self {
 			step: Step::Intro,
-			integrated: true,
+			// Default to the Instant path (connect to a public node) so a new
+			// user is online immediately, with no chain-sync wait.
+			integrated: false,
 			ext_url: "https://grincoin.org".to_string(),
 			restore: false,
 			name: "Main wallet".to_string(),
@@ -86,6 +116,8 @@ impl Default for OnboardingContent {
 			scan_modal: None,
 			wallet: None,
 			claim: ClaimState::default(),
+			import: None,
+			words_copied: None,
 		}
 	}
 }
@@ -185,22 +217,18 @@ impl OnboardingContent {
 			);
 		});
 		ui.add_space(26.0);
-		let lines: [(&str, &str); 3] = [
+		let lines: [(String, String); 3] = [
 			(
-				"Private money",
-				"Goblin is a wallet for grin — digital cash with no amounts \
-				 or addresses on its chain.",
+				t!("goblin.onboarding.intro.private_money_head").to_string(),
+				t!("goblin.onboarding.intro.private_money_body").to_string(),
 			),
 			(
-				"Send like a message",
-				"Pay a @username or npub and it arrives as an end-to-end \
-				 encrypted message over nostr and the Nym mixnet — no one in \
-				 between can see the amount or who's involved.",
+				t!("goblin.onboarding.intro.send_like_message_head").to_string(),
+				t!("goblin.onboarding.intro.send_like_message_body").to_string(),
 			),
 			(
-				"Yours alone",
-				"Keys, names and history live on this device. Built on the \
-				 GRIM wallet.",
+				t!("goblin.onboarding.intro.yours_alone_head").to_string(),
+				t!("goblin.onboarding.intro.yours_alone_body").to_string(),
 			),
 		];
 		for (head, body) in lines {
@@ -221,13 +249,13 @@ impl OnboardingContent {
 			ui.add_space(10.0);
 		}
 		ui.add_space(16.0);
-		if w::big_action(ui, "Get started", false).clicked() {
-			self.step = Step::Node;
+		if w::big_action(ui, &t!("goblin.onboarding.intro.get_started"), false).clicked() {
+			self.step = Step::WalletSetup;
 		}
 		ui.add_space(8.0);
 		ui.vertical_centered(|ui| {
 			ui.label(
-				RichText::new("Takes about a minute. You can change everything later.")
+				RichText::new(t!("goblin.onboarding.intro.footnote"))
 					.font(FontId::new(12.5, fonts::regular()))
 					.color(t.text_mute),
 			);
@@ -293,27 +321,18 @@ impl OnboardingContent {
 		let t = theme::tokens();
 		self.step_header(
 			ui,
-			"STEP 1 OF 3 · NETWORK",
-			"How should Goblin\nwatch the chain?",
+			&t!("goblin.onboarding.node.kicker"),
+			&t!("goblin.onboarding.node.title"),
 			Step::Intro,
 		);
-		if Self::node_card(
-			ui,
-			self.integrated,
-			"Run my own node",
-			"Private",
-			"Trusts no one — your wallet checks the chain itself. Syncs in \
-			 the background while you finish setup.",
-		) {
-			self.integrated = true;
-		}
-		ui.add_space(10.0);
+		// Instant (connect to a public node) leads — most people want to be
+		// online immediately, with no chain-sync wait.
 		if Self::node_card(
 			ui,
 			!self.integrated,
-			"Connect to a node",
-			"Instant",
-			"No sync wait. The node you pick can see your wallet's queries.",
+			&t!("goblin.onboarding.node.connect_title"),
+			&t!("goblin.onboarding.node.connect_badge"),
+			&t!("goblin.onboarding.node.connect_body"),
 		) {
 			self.integrated = false;
 		}
@@ -328,9 +347,19 @@ impl OnboardingContent {
 					.ui(ui, &mut self.ext_url, cb);
 			});
 		}
+		ui.add_space(10.0);
+		if Self::node_card(
+			ui,
+			self.integrated,
+			&t!("goblin.onboarding.node.own_title"),
+			&t!("goblin.onboarding.node.own_badge"),
+			&t!("goblin.onboarding.node.own_body"),
+		) {
+			self.integrated = true;
+		}
 		ui.add_space(8.0);
 		ui.label(
-			RichText::new("Changeable any time in Settings → Node.")
+			RichText::new(t!("goblin.onboarding.node.changeable"))
 				.font(FontId::new(12.5, fonts::regular()))
 				.color(t.text_mute),
 		);
@@ -338,13 +367,13 @@ impl OnboardingContent {
 		let url_ok = self.integrated
 			|| self.ext_url.trim().starts_with("http://")
 			|| self.ext_url.trim().starts_with("https://");
-		if w::big_action(ui, "Continue", false).clicked() && url_ok {
+		if w::big_action(ui, &t!("goblin.onboarding.node.continue"), false).clicked() && url_ok {
 			self.step = Step::WalletSetup;
 		}
 		if !url_ok {
 			ui.add_space(8.0);
 			ui.label(
-				RichText::new("Node URL must start with http:// or https://")
+				RichText::new(t!("goblin.onboarding.node.url_invalid"))
 					.font(FontId::new(13.0, fonts::regular()))
 					.color(t.neg),
 			);
@@ -355,12 +384,20 @@ impl OnboardingContent {

 	fn wallet_setup_ui(&mut self, ui: &mut egui::Ui, cb: &dyn PlatformCallbacks) {
 		let t = theme::tokens();
-		self.step_header(ui, "STEP 2 OF 3 · WALLET", "Set up your wallet", Step::Node);
+		self.step_header(
+			ui,
+			&t!("goblin.onboarding.wallet.kicker"),
+			&t!("goblin.onboarding.wallet.title"),
+			Step::Intro,
+		);

 		// Create / Restore segmented choice.
 		ui.horizontal(|ui| {
 			let half = (ui.available_width() - 10.0) / 2.0;
-			for (restore, label) in [(false, "Create new"), (true, "Restore from seed")] {
+			for (restore, label) in [
+				(false, t!("goblin.onboarding.wallet.create_new")),
+				(true, t!("goblin.onboarding.wallet.restore_from_seed")),
+			] {
 				ui.scope_builder(
 					egui::UiBuilder::new().max_rect(egui::Rect::from_min_size(
 						ui.cursor().min,
@@ -368,7 +405,7 @@ impl OnboardingContent {
 					)),
 					|ui| {
 						let active = self.restore == restore;
-						let resp = w::chip(ui, label, active);
+						let resp = w::chip(ui, &label, active);
 						if resp.clicked() {
 							self.restore = restore;
 						}
@@ -382,7 +419,7 @@ impl OnboardingContent {
 		w::field_well(ui, |ui| {
 			TextEdit::new(egui::Id::from("onb_name"))
 				.focus(false)
-				.hint_text("Wallet name")
+				.hint_text(t!("goblin.onboarding.wallet.name_hint"))
 				.text_color(t.surface_text)
 				.body()
 				.ui(ui, &mut self.name, cb);
@@ -391,7 +428,7 @@ impl OnboardingContent {
 		w::field_well(ui, |ui| {
 			TextEdit::new(egui::Id::from("onb_pass"))
 				.focus(false)
-				.hint_text("Password")
+				.hint_text(t!("goblin.onboarding.wallet.password_hint"))
 				.password()
 				.text_color(t.surface_text)
 				.body()
@@ -401,7 +438,7 @@ impl OnboardingContent {
 		w::field_well(ui, |ui| {
 			TextEdit::new(egui::Id::from("onb_pass2"))
 				.focus(false)
-				.hint_text("Repeat password")
+				.hint_text(t!("goblin.onboarding.wallet.repeat_password_hint"))
 				.password()
 				.text_color(t.surface_text)
 				.body()
@@ -410,10 +447,9 @@ impl OnboardingContent {
 		ui.add_space(10.0);
 		ui.label(
 			RichText::new(if self.restore {
-				"Have your seed words ready — you'll enter them next."
+				t!("goblin.onboarding.wallet.restore_hint")
 			} else {
-				"Next you'll get 24 seed words to write down. They are the \
-				 money — anyone holding them holds your funds."
+				t!("goblin.onboarding.wallet.create_hint")
 			})
 			.font(FontId::new(12.5, fonts::regular()))
 			.color(t.text_mute),
@@ -422,7 +458,10 @@ impl OnboardingContent {

 		let pass_ok = !self.pass.is_empty() && self.pass == self.pass2;
 		let name_ok = !self.name.trim().is_empty();
-		if w::big_action(ui, "Continue", false).clicked() && pass_ok && name_ok {
+		if w::big_action(ui, &t!("goblin.onboarding.wallet.continue"), false).clicked()
+			&& pass_ok
+			&& name_ok
+		{
 			self.mnemonic_setup.reset();
 			self.mnemonic_setup.mnemonic.set_mode(if self.restore {
 				PhraseMode::Import
@@ -436,7 +475,7 @@ impl OnboardingContent {
 		if !self.pass.is_empty() && self.pass != self.pass2 {
 			ui.add_space(8.0);
 			ui.label(
-				RichText::new("Passwords don't match")
+				RichText::new(t!("goblin.onboarding.wallet.passwords_no_match"))
 					.font(FontId::new(13.0, fonts::regular()))
 					.color(t.neg),
 			);
@@ -453,14 +492,15 @@ impl OnboardingContent {
 	) {
 		let t = theme::tokens();
 		let restore = self.mnemonic_setup.mnemonic.mode() == PhraseMode::Import;
+		let words_title = if restore {
+			t!("goblin.onboarding.words.title_restore")
+		} else {
+			t!("goblin.onboarding.words.title_create")
+		};
 		self.step_header(
 			ui,
-			"STEP 2 OF 3 · WALLET",
-			if restore {
-				"Enter your seed words"
-			} else {
-				"Write these words down"
-			},
+			&t!("goblin.onboarding.words.kicker"),
+			&words_title,
 			Step::WalletSetup,
 		);
 		if restore {
@@ -478,12 +518,9 @@ impl OnboardingContent {
 			ui.add_space(10.0);
 		} else {
 			ui.label(
-				RichText::new(
-					"On paper, in order. Anyone with these words can take \
-					 your funds; without them a lost device means lost funds.",
-				)
-				.font(FontId::new(13.0, fonts::regular()))
-				.color(t.text_dim),
+				RichText::new(t!("goblin.onboarding.words.write_down_hint"))
+					.font(FontId::new(13.0, fonts::regular()))
+					.color(t.text_dim),
 			);
 			ui.add_space(10.0);
 		}
@@ -501,7 +538,7 @@ impl OnboardingContent {
 						Vec2::new(half, 44.0),
 					)),
 					|ui| {
-						if w::chip(ui, "Paste", false).clicked() {
+						if w::chip(ui, &t!("goblin.onboarding.words.paste"), false).clicked() {
 							let data = ZeroingString::from(cb.get_string_from_buffer());
 							self.mnemonic_setup.mnemonic.import(&data);
 						}
@@ -514,7 +551,7 @@ impl OnboardingContent {
 						Vec2::new(half, 44.0),
 					)),
 					|ui| {
-						if w::chip(ui, "Scan QR", false).clicked() {
+						if w::chip(ui, &t!("goblin.onboarding.words.scan_qr"), false).clicked() {
 							self.scan_modal = Some(CameraScanContent::default());
 							Modal::new(OB_PHRASE_SCAN_MODAL)
 								.position(ModalPosition::CenterTop)
@@ -527,8 +564,24 @@ impl OnboardingContent {
 				);
 			});
 			ui.add_space(14.0);
-		} else if w::chip(ui, "Copy to clipboard (avoid this)", false).clicked() {
-			cb.copy_string_to_buffer(self.mnemonic_setup.mnemonic.get_phrase());
+		} else {
+			// Transient "Copied" feedback (the Build 82/89 pattern): a silent
+			// copy of the recovery phrase reads as a dead button.
+			let copied = matches!(self.words_copied, Some(at) if at.elapsed().as_millis() < 1500);
+			if self.words_copied.is_some() {
+				ui.ctx()
+					.request_repaint_after(std::time::Duration::from_millis(200));
+			}
+			let label = if copied {
+				format!("{} {}", CHECK, t!("goblin.receive.copied"))
+			} else {
+				t!("goblin.onboarding.words.copy_clipboard").to_string()
+			};
+			if w::chip(ui, &label, false).clicked() {
+				cb.copy_string_to_buffer(self.mnemonic_setup.mnemonic.get_phrase());
+				cb.vibrate_copy();
+				self.words_copied = Some(std::time::Instant::now());
+			}
 		}
 		if !restore {
 			ui.add_space(14.0);
@@ -540,12 +593,12 @@ impl OnboardingContent {
 			true
 		};
 		let label = if restore {
-			"Restore wallet"
+			t!("goblin.onboarding.words.restore_wallet")
 		} else {
-			"I wrote them down"
+			t!("goblin.onboarding.words.wrote_them_down")
 		};
 		if ready {
-			if w::big_action(ui, label, false).clicked() {
+			if w::big_action(ui, &label, false).clicked() {
 				if restore {
 					self.create_wallet(wallets);
 				} else {
@@ -554,7 +607,7 @@ impl OnboardingContent {
 			}
 		} else {
 			ui.label(
-				RichText::new("Fill every word — tap a word to edit it, or paste the phrase.")
+				RichText::new(t!("goblin.onboarding.words.fill_every_word"))
 					.font(FontId::new(13.0, fonts::regular()))
 					.color(t.text_mute),
 			);
@@ -569,27 +622,32 @@ impl OnboardingContent {
 		cb: &dyn PlatformCallbacks,
 	) {
 		let t = theme::tokens();
-		self.step_header(ui, "STEP 2 OF 3 · WALLET", "Now prove it", Step::Words);
+		self.step_header(
+			ui,
+			&t!("goblin.onboarding.confirm.kicker"),
+			&t!("goblin.onboarding.confirm.title"),
+			Step::Words,
+		);
 		ui.label(
-			RichText::new("Enter the words you just wrote down. Tap a word to type it.")
+			RichText::new(t!("goblin.onboarding.confirm.enter_hint"))
 				.font(FontId::new(13.0, fonts::regular()))
 				.color(t.text_dim),
 		);
 		ui.add_space(10.0);
 		self.mnemonic_setup.word_list_ui(ui, true);
 		ui.add_space(14.0);
-		if w::chip(ui, "Paste", false).clicked() {
+		if w::chip(ui, &t!("goblin.onboarding.confirm.paste"), false).clicked() {
 			let data = ZeroingString::from(cb.get_string_from_buffer());
 			self.mnemonic_setup.mnemonic.import(&data);
 		}
 		ui.add_space(14.0);
 		if !self.mnemonic_setup.mnemonic.has_empty_or_invalid() {
-			if w::big_action(ui, "Create wallet", false).clicked() {
+			if w::big_action(ui, &t!("goblin.onboarding.confirm.create_wallet"), false).clicked() {
 				self.create_wallet(wallets);
 			}
 		} else {
 			ui.label(
-				RichText::new("Keep going — every word, in order.")
+				RichText::new(t!("goblin.onboarding.confirm.keep_going"))
 					.font(FontId::new(13.0, fonts::regular()))
 					.color(t.text_mute),
 			);
@@ -650,10 +708,20 @@ impl OnboardingContent {
 						self.error = None;
 						self.step = Step::Identity;
 					}
-					Err(e) => self.error = Some(format!("Couldn't open the wallet: {:?}", e)),
+					Err(e) => {
+						self.error = Some(
+							t!("goblin.onboarding.errors.cant_open", err => format!("{:?}", e))
+								.to_string(),
+						)
+					}
 				}
 			}
-			Err(e) => self.error = Some(format!("Couldn't create the wallet: {:?}", e)),
+			Err(e) => {
+				self.error = Some(
+					t!("goblin.onboarding.errors.cant_create", err => format!("{:?}", e))
+						.to_string(),
+				)
+			}
 		}
 	}

@@ -663,13 +731,13 @@ impl OnboardingContent {
 		let t = theme::tokens();
 		// No back from here: the wallet exists now.
 		ui.label(
-			RichText::new("STEP 3 OF 3 · IDENTITY")
+			RichText::new(t!("goblin.onboarding.identity.kicker"))
 				.font(fonts::kicker())
 				.color(t.text_mute),
 		);
 		ui.add_space(18.0);
 		ui.label(
-			RichText::new("Your payment identity")
+			RichText::new(t!("goblin.onboarding.identity.title"))
 				.font(FontId::new(26.0, fonts::bold()))
 				.color(t.text),
 		);
@@ -681,6 +749,13 @@ impl OnboardingContent {
 			.as_ref()
 			.map(|s| (s.npub(), s.is_connected()))
 			.unwrap_or((String::new(), false));
+		// The claimed @name (bare), if any — so the identity card shows the name
+		// instead of the npub once a username is registered.
+		let claimed_name = service
+			.as_ref()
+			.and_then(|s| s.identity.read().nip05.clone())
+			.and_then(|n| n.split('@').next().map(|s| s.to_string()))
+			.filter(|n| !n.is_empty());

 		w::card(ui, |ui| {
 			ui.set_min_width(ui.available_width());
@@ -689,29 +764,50 @@ impl OnboardingContent {
 				// for this key; only fall back to a placeholder while the key is
 				// still being generated (npub not yet available).
 				if npub.is_empty() {
-					w::avatar(ui, "N", 44.0, 6);
+					// Key still generating: a fixed-seed gradient placeholder.
+					w::gradient_avatar(ui, "goblin", 44.0);
 				} else {
 					w::gradient_avatar(ui, &npub, 44.0);
 				}
 				ui.add_space(10.0);
 				ui.vertical(|ui| {
-					let short = if npub.len() > 20 {
-						format!("{}…{}", &npub[..12], &npub[npub.len() - 6..])
-					} else if npub.is_empty() {
-						"key being made…".to_string()
+					// Once claimed, show the @name (with a check) instead of the npub
+					// so the user can SEE the username applied.
+					if let Some(name) = &claimed_name {
+						ui.horizontal(|ui| {
+							ui.spacing_mut().item_spacing.x = 5.0;
+							ui.label(
+								RichText::new(name)
+									.font(FontId::new(16.0, fonts::bold()))
+									.color(t.surface_text),
+							);
+							ui.label(
+								RichText::new(crate::gui::icons::SEAL_CHECK)
+									.font(FontId::new(14.0, fonts::regular()))
+									.color(t.pos),
+							);
+						});
 					} else {
-						npub.clone()
-					};
-					ui.label(
-						RichText::new(short)
-							.font(FontId::new(15.0, fonts::semibold()))
-							.color(t.surface_text),
-					);
-					ui.label(
-						RichText::new(if connected {
-							"connected over Nym"
+						let short = if npub.len() > 20 {
+							format!("{}…{}", &npub[..12], &npub[npub.len() - 6..])
+						} else if npub.is_empty() {
+							t!("goblin.onboarding.identity.key_being_made").to_string()
 						} else {
-							"connecting over Nym…"
+							npub.clone()
+						};
+						ui.label(
+							RichText::new(short)
+								.font(FontId::new(15.0, fonts::semibold()))
+								.color(t.surface_text),
+						);
+					}
+					ui.label(
+						// Relay-gated readiness: "connected over Nym" only once a
+						// relay is actually live, not merely when the tunnel is warm.
+						RichText::new(if crate::nym::transport_ready() {
+							t!("goblin.onboarding.identity.connected_nym")
+						} else {
+							t!("goblin.onboarding.identity.connecting_nym")
 						})
 						.font(FontId::new(12.0, fonts::regular()))
 						.color(t.surface_text_mute),
@@ -720,24 +816,9 @@ impl OnboardingContent {
 			});
 			ui.add_space(8.0);
 			ui.label(
-				RichText::new(
-					"A fresh key, made for payments — deliberately not part \
-					 of your seed, so you can rotate it anytime to maintain \
-					 your privacy, without ever touching your funds. Back it \
-					 up in Settings → Identity.",
-				)
-				.font(FontId::new(12.5, fonts::regular()))
-				.color(t.surface_text_dim),
-			);
-			ui.add_space(6.0);
-			ui.label(
-				RichText::new(
-					"Want a clean slate? Swap in a brand-new key any time — \
-					 the new you isn't linked to the old one. Same wallet, \
-					 fresh face.",
-				)
-				.font(FontId::new(12.5, fonts::regular()))
-				.color(t.surface_text_dim),
+				RichText::new(t!("goblin.onboarding.identity.fresh_key_blurb"))
+					.font(FontId::new(12.5, fonts::regular()))
+					.color(t.surface_text_dim),
 			);
 		});
 		ui.add_space(14.0);
@@ -752,8 +833,13 @@ impl OnboardingContent {
 					self.claim.message = Some(msg.to_string());
 				}
 				ClaimMsg::Registered(nip05) => {
-					self.claim.message =
-						Some(format!("You're @{}", nip05.split('@').next().unwrap_or("")));
+					self.claim.message = Some(
+						t!(
+							"goblin.onboarding.identity.youre",
+							name => nip05.split('@').next().unwrap_or("")
+						)
+						.to_string(),
+					);
 					self.claim.available = Some(true);
 					if let Some(s) = wallet.nostr_service() {
 						{
@@ -763,6 +849,9 @@ impl OnboardingContent {
 						}
 						s.save_identity();
 					}
+					// Publish kind 0 now so the just-claimed name is visible to
+					// others over the relay without waiting for the next app start.
+					wallet.task(crate::wallet::types::WalletTask::NostrRepublishProfile);
 				}
 				ClaimMsg::Released => {}
 				ClaimMsg::Error(e) => {
@@ -775,36 +864,30 @@ impl OnboardingContent {
 			.nostr_service()
 			.map(|s| s.identity.read().nip05.is_some())
 			.unwrap_or(false);
-		if !registered {
+		if self.import.is_some() {
+			// Returning user is swapping the random key for their existing identity.
+			self.import_ui(ui, &wallet, cb);
+		} else if !registered {
 			w::card(ui, |ui| {
 				ui.set_min_width(ui.available_width());
 				ui.label(
-					RichText::new("Pick a username — optional")
+					RichText::new(t!("goblin.onboarding.identity.pick_username"))
 						.font(FontId::new(15.0, fonts::semibold()))
 						.color(t.surface_text),
 				);
 				ui.add_space(4.0);
 				ui.label(
-					RichText::new(
-						"Friends pay @you instead of a long key. Public on \
-						 goblin.st; payments stay encrypted. Skip it and \
-						 you're simply anonymous — claim one any time later.",
-					)
-					.font(FontId::new(12.5, fonts::regular()))
-					.color(t.surface_text_dim),
+					RichText::new(t!("goblin.onboarding.identity.username_blurb"))
+						.font(FontId::new(12.5, fonts::regular()))
+						.color(t.surface_text_dim),
 				);
 				ui.add_space(8.0);
 				w::field_well(ui, |ui| {
 					ui.horizontal(|ui| {
-						ui.label(
-							RichText::new("@")
-								.font(FontId::new(16.0, fonts::semibold()))
-								.color(t.surface_text),
-						);
 						let before = self.claim.input.clone();
 						TextEdit::new(egui::Id::from("onb_claim"))
 							.focus(false)
-							.hint_text("yourname")
+							.hint_text(t!("goblin.onboarding.identity.username_field_hint"))
 							.text_color(t.surface_text)
 							.body()
 							.ui(ui, &mut self.claim.input, cb);
@@ -828,35 +911,89 @@ impl OnboardingContent {
 				}
 				ui.add_space(10.0);
 				let name = self.claim.input.trim().to_lowercase();
-				let valid = name.len() >= 3 && name.len() <= 30;
+				let valid = name.len() >= 3 && name.len() <= 20;
 				if self.claim.checking {
 					ui.horizontal(|ui| {
 						View::small_loading_spinner(ui);
 						ui.add_space(8.0);
-						ui.label(RichText::new("Working…").color(t.surface_text_dim));
+						ui.label(
+							RichText::new(t!("goblin.onboarding.identity.working"))
+								.color(t.surface_text_dim),
+						);
 					});
 					ui.ctx().request_repaint();
 				} else {
 					ui.add_enabled_ui(valid && connected, |ui| {
-						if w::big_action_on_card(ui, "Claim username").clicked() {
+						if w::big_action_on_card(
+							ui,
+							&t!("goblin.onboarding.identity.claim_username"),
+						)
+						.clicked()
+						{
 							start_claim_flow(&mut self.claim, &name, &wallet);
 						}
 					});
 					if !connected {
 						ui.add_space(6.0);
 						ui.label(
-							RichText::new(
-								"Available once the mixnet connects — or skip and claim later.",
-							)
+							RichText::new(t!(
+								"goblin.onboarding.identity.available_when_connected"
+							))
 							.font(FontId::new(12.0, fonts::regular()))
 							.color(t.surface_text_mute),
 						);
 					}
 				}
 			});
+			ui.add_space(10.0);
+			// Returning user? Let them restore their existing identity (nsec or a
+			// .backup file) instead of claiming a fresh name on the random key.
+			let import_resp = ui
+				.add(
+					egui::Label::new(
+						RichText::new(t!("goblin.onboarding.identity.import_existing"))
+							.font(FontId::new(13.0, fonts::semibold()))
+							.color(t.accent),
+					)
+					.sense(Sense::click()),
+				)
+				.on_hover_cursor(egui::CursorIcon::PointingHand);
+			if import_resp.clicked() {
+				self.import = Some(OnbImport::default());
+			}
 			ui.add_space(16.0);
 		} else {
-			ui.add_space(2.0);
+			// Claimed: show a clear success confirmation so the user knows the
+			// username stuck before they tap through to the wallet.
+			let claimed = claimed_name.clone().unwrap_or_default();
+			w::card(ui, |ui| {
+				ui.set_min_width(ui.available_width());
+				ui.horizontal(|ui| {
+					ui.spacing_mut().item_spacing.x = 8.0;
+					ui.label(
+						RichText::new(crate::gui::icons::SEAL_CHECK)
+							.font(FontId::new(22.0, fonts::regular()))
+							.color(t.pos),
+					);
+					ui.vertical(|ui| {
+						ui.label(
+							RichText::new(t!(
+								"goblin.onboarding.identity.claimed_title",
+								name => &claimed
+							))
+							.font(FontId::new(15.0, fonts::semibold()))
+							.color(t.surface_text),
+						);
+						ui.add_space(2.0);
+						ui.label(
+							RichText::new(t!("goblin.onboarding.identity.claimed_blurb"))
+								.font(FontId::new(12.5, fonts::regular()))
+								.color(t.surface_text_dim),
+						);
+					});
+				});
+			});
+			ui.add_space(16.0);
 		}

 		if !connected {
@@ -865,16 +1002,209 @@ impl OnboardingContent {
 		}

 		let main_label = if registered {
-			"Open my wallet"
+			t!("goblin.onboarding.identity.open_wallet")
 		} else {
-			"Skip for now"
+			t!("goblin.onboarding.identity.skip_for_now")
 		};
-		if w::big_action(ui, main_label, false).clicked() {
+		if w::big_action(ui, &main_label, false).clicked() {
 			return Some(wallet);
 		}
 		None
 	}

+	/// Onboarding identity-import sub-flow: paste an nsec or pick a `.backup`
+	/// file to swap the freshly-generated random key for the user's existing
+	/// identity (keeping their npub and any claimed username). Reuses the wallet
+	/// password the user just set; a sealed `.backup` may carry its own password.
+	fn import_ui(&mut self, ui: &mut egui::Ui, wallet: &Wallet, cb: &dyn PlatformCallbacks) {
+		let t = theme::tokens();
+		// Poll the worker first, WITHOUT holding a borrow across the reset below.
+		if self.import.as_ref().map(|i| i.stage) == Some(1) {
+			let res = self.import.as_ref().unwrap().result.lock().unwrap().take();
+			if let Some(res) = res {
+				match res {
+					// Identity replaced: drop the sub-flow; the identity card and the
+					// claim/success state re-render from the new service next frame.
+					Ok(_) => {
+						self.import = None;
+						return;
+					}
+					Err(e) => {
+						let imp = self.import.as_mut().unwrap();
+						imp.error = e;
+						imp.stage = 2;
+					}
+				}
+			}
+		}
+		let wallet_pass = self.pass.clone();
+		let imp = self.import.as_mut().unwrap();
+		let mut close = false;
+		w::card(ui, |ui| {
+			ui.set_min_width(ui.available_width());
+			match imp.stage {
+				1 => {
+					ui.horizontal(|ui| {
+						View::small_loading_spinner(ui);
+						ui.add_space(8.0);
+						ui.label(
+							RichText::new(t!("goblin.settings.importing"))
+								.font(FontId::new(13.0, fonts::regular()))
+								.color(t.surface_text_dim),
+						);
+					});
+					ui.ctx().request_repaint();
+				}
+				2 => {
+					ui.label(
+						RichText::new(t!("goblin.settings.import_failed"))
+							.font(FontId::new(15.0, fonts::semibold()))
+							.color(t.neg),
+					);
+					ui.add_space(4.0);
+					ui.label(
+						RichText::new(&imp.error)
+							.font(FontId::new(13.0, fonts::regular()))
+							.color(t.surface_text_dim),
+					);
+					ui.add_space(10.0);
+					if w::big_action_on_card(ui, &t!("goblin.settings.close")).clicked() {
+						close = true;
+					}
+				}
+				_ => {
+					ui.label(
+						RichText::new(t!("goblin.onboarding.identity.import_title"))
+							.font(FontId::new(15.0, fonts::semibold()))
+							.color(t.surface_text),
+					);
+					ui.add_space(6.0);
+					ui.label(
+						RichText::new(t!("goblin.onboarding.identity.import_blurb"))
+							.font(FontId::new(12.5, fonts::regular()))
+							.color(t.surface_text_dim),
+					);
+					ui.add_space(10.0);
+					// Native ".backup file" picker. Desktop returns the path now;
+					// Android resolves it asynchronously (poll picked_file()).
+					if imp.picking {
+						if let Some(path) = cb.picked_file() {
+							imp.picking = false;
+							if !path.is_empty() {
+								match std::fs::read_to_string(&path) {
+									Ok(contents) => imp.nsec = contents.trim().to_string(),
+									Err(_) => {
+										imp.error =
+											t!("goblin.settings.backup_read_failed").to_string();
+									}
+								}
+							}
+						} else {
+							ui.ctx().request_repaint();
+						}
+					}
+					if w::big_action_on_card(ui, &t!("goblin.settings.choose_backup_file"))
+						.clicked()
+					{
+						imp.error.clear();
+						match cb.pick_file() {
+							Some(path) if !path.is_empty() => {
+								match std::fs::read_to_string(&path) {
+									Ok(contents) => imp.nsec = contents.trim().to_string(),
+									Err(_) => {
+										imp.error =
+											t!("goblin.settings.backup_read_failed").to_string();
+									}
+								}
+							}
+							// Empty string = Android async pick in flight.
+							Some(_) => imp.picking = true,
+							None => {}
+						}
+					}
+					ui.add_space(8.0);
+					w::field_well(ui, |ui| {
+						TextEdit::new(egui::Id::from("onb_import_nsec"))
+							.focus(false)
+							.hint_text(t!("goblin.settings.import_nsec_hint"))
+							.password()
+							.text_color(t.surface_text)
+							.body()
+							.ui(ui, &mut imp.nsec, cb);
+					});
+					ui.add_space(8.0);
+					w::field_well(ui, |ui| {
+						TextEdit::new(egui::Id::from("onb_import_bpw"))
+							.focus(false)
+							.hint_text(t!("goblin.settings.backup_password_hint"))
+							.password()
+							.text_color(t.surface_text)
+							.body()
+							.ui(ui, &mut imp.backup_password, cb);
+					});
+					if !imp.error.is_empty() {
+						ui.add_space(6.0);
+						ui.label(
+							RichText::new(&imp.error)
+								.font(FontId::new(12.5, fonts::regular()))
+								.color(t.neg),
+						);
+					}
+					ui.add_space(10.0);
+					let pasted = imp.nsec.trim();
+					// Only an nsec paste or a sealed .backup file — nothing else.
+					let armed =
+						pasted.starts_with("nsec1") || NostrIdentity::is_encrypted_backup(pasted);
+					ui.horizontal(|ui| {
+						let half = (ui.available_width() - 10.0) / 2.0;
+						ui.scope_builder(
+							egui::UiBuilder::new().max_rect(egui::Rect::from_min_size(
+								ui.cursor().min,
+								Vec2::new(half, 44.0),
+							)),
+							|ui| {
+								if w::big_action_on_card(ui, &t!("goblin.settings.cancel"))
+									.clicked()
+								{
+									close = true;
+								}
+							},
+						);
+						ui.add_space(10.0);
+						ui.scope_builder(
+							egui::UiBuilder::new().max_rect(egui::Rect::from_min_size(
+								ui.cursor().min,
+								Vec2::new(half, 44.0),
+							)),
+							|ui| {
+								ui.add_enabled_ui(armed, |ui| {
+									if w::big_action(ui, &t!("goblin.settings.import_btn"), false)
+										.clicked()
+									{
+										imp.stage = 1;
+										let slot = imp.result.clone();
+										let nsec = std::mem::take(&mut imp.nsec);
+										let bpw = std::mem::take(&mut imp.backup_password);
+										let bpw = if bpw.is_empty() { None } else { Some(bpw) };
+										let wallet = wallet.clone();
+										let pass = wallet_pass.clone();
+										std::thread::spawn(move || {
+											let res = wallet.import_nostr_identity(nsec, pass, bpw);
+											*slot.lock().unwrap() = Some(res);
+										});
+									}
+								});
+							},
+						);
+					});
+				}
+			}
+		});
+		if close {
+			self.import = None;
+		}
+	}
+
 	/// Recovery-phrase QR scan modal content.
 	fn scan_modal_ui(&mut self, ui: &mut egui::Ui, _: &Modal, cb: &dyn PlatformCallbacks) {
 		if let Some(content) = self.scan_modal.as_mut() {
@@ -27,34 +27,14 @@ pub fn amount_str(atomic: u64) -> String {
 	grin_core::core::amount_to_hr_string(atomic, true)
 }

-/// Draw a colored avatar puck with the contact initial.
-pub fn avatar(ui: &mut Ui, name: &str, size: f32, hue: usize) -> Response {
+/// A custom-picture avatar: the texture drawn to fill the circle. Names never
+/// affect the avatar — claimed and anonymous identities render identically.
+pub fn avatar_tex(ui: &mut Ui, tex: &egui::TextureHandle, _name: &str, size: f32) -> Response {
 	let (rect, resp) = ui.allocate_exact_size(Vec2::splat(size), Sense::click());
-	let (bg, ink) = theme::avatar_pair(hue);
-	ui.painter().circle_filled(rect.center(), size / 2.0, bg);
-	// First letter of the name — never the @ prefix or other decoration.
-	let initial = name
-		.chars()
-		.find(|c| c.is_alphanumeric())
-		.map(|c| c.to_uppercase().to_string())
-		.unwrap_or_else(|| "?".to_string());
-	ui.painter().text(
-		rect.center(),
-		egui::Align2::CENTER_CENTER,
-		initial,
-		FontId::new(size * 0.42, fonts::bold()),
-		ink,
-	);
-	resp
-}
-
-/// A custom-picture avatar: the texture drawn in a circle.
-pub fn avatar_tex(ui: &mut Ui, tex: &egui::TextureHandle, size: f32) -> Response {
-	let (rect, resp) = ui.allocate_exact_size(Vec2::splat(size), Sense::click());
-	let rounding = eframe::epaint::CornerRadius::same((size / 2.0) as u8);
+	let rounding = eframe::epaint::CornerRadius::same((rect.width() / 2.0) as u8);
 	egui::Image::new(tex)
 		.corner_radius(rounding)
-		.fit_to_exact_size(Vec2::splat(size))
+		.fit_to_exact_size(rect.size())
 		.paint_at(ui, rect);
 	resp
 }
@@ -65,80 +45,42 @@ pub fn avatar_tex(ui: &mut Ui, tex: &egui::TextureHandle, size: f32) -> Response
 /// the same avatar (see [`super::identicon`]). Cached per-pubkey by egui.
 pub fn gradient_avatar(ui: &mut Ui, id: &str, size: f32) -> Response {
 	let (rect, resp) = ui.allocate_exact_size(Vec2::splat(size), Sense::click());
-	let hex = super::identicon::to_hex_seed(id);
-	// Rasterize at 2x for crispness; egui caches the texture by the `uri`, so the
-	// SVG is generated/rasterized once per pubkey regardless of frames or size.
-	let svg = super::identicon::gradient_avatar_svg(&hex, (size * 2.0) as u32, "");
-	let uri = format!("bytes://gobavatar-{}-{}.svg", hex, size as u32);
-	egui::Image::new(egui::ImageSource::Bytes {
-		uri: uri.into(),
-		bytes: svg.into_bytes().into(),
-	})
-	.corner_radius(CornerRadius::same((size / 2.0) as u8))
-	.fit_to_exact_size(Vec2::splat(size))
-	.paint_at(ui, rect);
+	paint_gradient(ui, id, rect);
 	resp
 }

-/// A named user's avatar: the same pubkey-seeded gradient background as
-/// [`gradient_avatar`], but with the person's initial painted on top (white with
-/// a faint dark shadow for legibility on any hue) instead of the Grin mark. `id`
-/// seeds the gradient; `name` supplies the letter.
-pub fn gradient_letter_avatar(ui: &mut Ui, id: &str, name: &str, size: f32) -> Response {
-	let (rect, resp) = ui.allocate_exact_size(Vec2::splat(size), Sense::click());
+/// Paint the pubkey-seeded grinmark gradient into `rect` (rasterized at 2x,
+/// cached by egui via the `uri`).
+fn paint_gradient(ui: &mut Ui, id: &str, rect: egui::Rect) {
 	let hex = super::identicon::to_hex_seed(id);
-	let svg = super::identicon::gradient_bg_svg(&hex, (size * 2.0) as u32);
-	let uri = format!("bytes://gobavatarbg-{}-{}.svg", hex, size as u32);
+	let px = (rect.width() * 2.0) as u32;
+	let svg = super::identicon::gradient_avatar_svg(&hex, px, "");
+	let uri = format!("bytes://gobavatar-{}-{}.svg", hex, rect.width() as u32);
 	egui::Image::new(egui::ImageSource::Bytes {
 		uri: uri.into(),
 		bytes: svg.into_bytes().into(),
 	})
-	.corner_radius(CornerRadius::same((size / 2.0) as u8))
-	.fit_to_exact_size(Vec2::splat(size))
+	.corner_radius(CornerRadius::same((rect.width() / 2.0) as u8))
+	.fit_to_exact_size(rect.size())
 	.paint_at(ui, rect);
-	// Initial — first alphanumeric of the name, never the @ prefix.
-	let initial = name
-		.chars()
-		.find(|c| c.is_alphanumeric())
-		.map(|c| c.to_uppercase().to_string())
-		.unwrap_or_else(|| "?".to_string());
-	let font = FontId::new(size * 0.46, fonts::bold());
-	let c = rect.center();
-	ui.painter().text(
-		c + Vec2::splat(size * 0.03),
-		egui::Align2::CENTER_CENTER,
-		&initial,
-		font.clone(),
-		Color32::from_black_alpha(80),
-	);
-	ui.painter().text(
-		c,
-		egui::Align2::CENTER_CENTER,
-		&initial,
-		font,
-		Color32::from_rgb(0xFA, 0xFA, 0xF7),
-	);
-	resp
 }

 /// Picture avatar when a texture exists; otherwise the deterministic
-/// pubkey-seeded gradient: with the Grin mark for an anonymous key (display name
-/// is an `npub…`), or with the person's initial for a named contact/@handle. A
-/// flat lettered tile is the last resort when no pubkey is known. `id` is the
-/// npub/hex used to seed the gradient.
+/// pubkey-seeded grinmark gradient for everyone, named or anonymous — names
+/// never affect the avatar. When no pubkey is known (last resort) the name
+/// seeds the gradient instead, so the tile is still deterministic. `id` is
+/// the npub/hex used to seed the gradient.
 pub fn avatar_any(
 	ui: &mut Ui,
 	name: &str,
 	id: &str,
 	size: f32,
-	hue: usize,
 	tex: Option<&egui::TextureHandle>,
 ) -> Response {
 	match tex {
-		Some(t) => avatar_tex(ui, t, size),
-		None if name.starts_with("npub") && !id.is_empty() => gradient_avatar(ui, id, size),
-		None if !id.is_empty() => gradient_letter_avatar(ui, id, name, size),
-		None => avatar(ui, name, size, hue),
+		Some(t) => avatar_tex(ui, t, name, size),
+		None if !id.is_empty() => gradient_avatar(ui, id, size),
+		None => gradient_avatar(ui, name, size),
 	}
 }

@@ -196,7 +138,7 @@ pub fn amount_text_centered_shifted(
 				.layout_no_wrap(value.to_string(), FontId::new(sz, fonts::bold()), num_ink);
 		let mark = ui.painter().layout_no_wrap(
 			TSU.to_string(),
-			FontId::new(sz * 0.4, fonts::medium()),
+			FontId::new(sz * 0.46, fonts::semibold()),
 			mark_ink,
 		);
 		num.size().x + 1.0 + mark.size().x
@@ -221,7 +163,7 @@ pub fn amount_text_centered_shifted(
 		ui.add_space(1.0);
 		ui.label(
 			RichText::new(TSU)
-				.font(FontId::new(size * 0.4, fonts::medium()))
+				.font(FontId::new(size * 0.46, fonts::semibold()))
 				.color(mark_ink),
 		);
 	});
@@ -309,12 +251,20 @@ pub fn big_action(ui: &mut Ui, label: &str, secondary: bool) -> Response {
 	let t = theme::tokens();
 	let desired = Vec2::new(ui.available_width(), 56.0);
 	let (rect, resp) = ui.allocate_exact_size(desired, Sense::click());
-	let (fill, ink, stroke) = if secondary {
+	let (mut fill, mut ink, mut stroke) = if secondary {
 		(Color32::TRANSPARENT, t.text, Stroke::new(1.5, t.line))
 	} else {
 		(t.accent, t.accent_ink, Stroke::NONE)
 	};
-	let visual_fill = if resp.hovered() && !secondary {
+	// Inside `add_enabled_ui(false)` the button must LOOK disabled too, so a
+	// blocked action (e.g. Review while over balance) never reads as a live CTA.
+	let enabled = ui.is_enabled();
+	if !enabled {
+		fill = fill.gamma_multiply(0.35);
+		ink = ink.gamma_multiply(0.45);
+		stroke.color = stroke.color.gamma_multiply(0.45);
+	}
+	let visual_fill = if enabled && resp.hovered() && !secondary {
 		t.accent_dark
 	} else {
 		fill
@@ -382,6 +332,43 @@ pub fn big_action_on_card_ink(ui: &mut Ui, label: &str, ink: Color32) -> Respons
 	resp
 }

+/// A full-width outlined action with an icon to the left of its label, bordered
+/// in a tint of `ink` (so it reads "around the same color" as the text). Used
+/// for the wallet-management cluster at the foot of Settings — switch / lock /
+/// advanced — where each action stands on its own rather than in a card.
+pub fn outlined_icon_action(ui: &mut Ui, icon: &str, label: &str, ink: Color32) -> Response {
+	let desired = Vec2::new(ui.available_width(), 50.0);
+	let (rect, resp) = ui.allocate_exact_size(desired, Sense::click());
+	let border = ink.gamma_multiply(if resp.hovered() { 0.9 } else { 0.55 });
+	let fill = if resp.hovered() {
+		ink.gamma_multiply(0.10)
+	} else {
+		Color32::TRANSPARENT
+	};
+	ui.painter().rect(
+		rect,
+		CornerRadius::same(14),
+		fill,
+		Stroke::new(1.5, border),
+		egui::StrokeKind::Inside,
+	);
+	ui.painter().text(
+		rect.left_center() + Vec2::new(18.0, 0.0),
+		egui::Align2::LEFT_CENTER,
+		icon,
+		FontId::new(18.0, fonts::regular()),
+		ink,
+	);
+	ui.painter().text(
+		rect.left_center() + Vec2::new(46.0, 0.0),
+		egui::Align2::LEFT_CENTER,
+		label,
+		FontId::new(15.0, fonts::semibold()),
+		ink,
+	);
+	resp
+}
+
 /// A pill/chip; returns the click response. `active` paints it inverted.
 pub fn chip(ui: &mut Ui, label: &str, active: bool) -> Response {
 	let t = theme::tokens();
@@ -409,35 +396,9 @@ pub fn chip(ui: &mut Ui, label: &str, active: bool) -> Response {
 	resp
 }

-/// An outline pill chip (transparent fill, line border) per the design's
-/// amount quick-select row.
-pub fn chip_outline(ui: &mut Ui, label: &str) -> Response {
-	let t = theme::tokens();
-	let galley = ui.painter().layout_no_wrap(
-		label.to_string(),
-		FontId::new(13.0, fonts::semibold()),
-		t.text,
-	);
-	let pad = Vec2::new(14.0, 8.0);
-	let size = galley.size() + pad * 2.0;
-	let (rect, resp) = ui.allocate_exact_size(size, Sense::click());
-	ui.painter().rect(
-		rect,
-		CornerRadius::same(255),
-		Color32::TRANSPARENT,
-		Stroke::new(1.0, t.line),
-		egui::StrokeKind::Inside,
-	);
-	ui.painter()
-		.galley(rect.center() - galley.size() / 2.0, galley, t.text);
-	resp
-}
-
-/// Paint a QR code for `text` with the goblin mark centered, per the
-/// design's receive card. Always dark modules on a white plate, whatever the
-/// theme: inverted (light-on-dark) codes fail to decode in a number of
-/// scanner apps. Encoding a short URI is microseconds, so this is done
-/// synchronously each frame; modules are plain painter rects.
+/// Paint a QR code for `text` with the goblin mark centered. Always dark modules
+/// on a white plate, whatever the theme — inverted codes fail to decode in many
+/// scanners. Encoded synchronously each frame; modules are plain painter rects.
 pub fn qr_code(ui: &mut Ui, text: &str, size: f32) {
 	let plate = Color32::WHITE;
 	let ink = Color32::from_rgb(0x0E, 0x0E, 0x0C);
@@ -452,10 +413,9 @@ pub fn qr_code(ui: &mut Ui, text: &str, size: f32) {
 	let rect = outer.shrink(pad);
 	let n = qr.size();
 	let cell = size / n as f32;
-	// Full cells with no inter-module gap: at receive-card density (~4.5px
-	// cells) even a 0.5px gap fragments the finder patterns and scanners
-	// fail to detect the code at all (probed with rqrr). Corner rounding
-	// only when cells are big enough that the notching can't matter.
+	// Full cells, no inter-module gap: at receive-card density (~4.5px cells) even
+	// a 0.5px gap fragments the finder patterns and scanners fail. Round corners
+	// only when cells are large enough that the notching can't matter.
 	let radius = if cell >= 6.0 { (cell * 0.3) as u8 } else { 0 };
 	for y in 0..n {
 		for x in 0..n {
@@ -469,11 +429,9 @@ pub fn qr_code(ui: &mut Ui, text: &str, size: f32) {
 			}
 		}
 	}
-	// Goblin mark on a yellow backing square in the center, same 19% footprint
-	// the white version was tuned to (at 26%, zbar-class scanners fail on the
-	// glyph; 19% passes everything probed). Yellow's luminance reads as "light"
-	// to a scanner just like white, so the obscured center is recovered by the
-	// High ECC exactly as before — only the colour changes.
+	// Goblin mark on a yellow backing square in the center, 19% footprint (larger
+	// obscures too many modules for a reliable decode). Yellow reads as "light" to
+	// a scanner like white, so the covered center is recovered by the High ECC.
 	let t = theme::tokens();
 	let backing = size * 0.19;
 	let b_rect = egui::Rect::from_center_size(rect.center(), Vec2::splat(backing));
@@ -504,12 +462,61 @@ pub fn field_well(ui: &mut Ui, content: impl FnOnce(&mut Ui)) {
 }

 /// A balance hero block: kicker, big number + ツ, optional fiat line.
-pub fn balance_hero(ui: &mut Ui, atomic: u64, fiat: Option<&str>, size: f32) {
+/// `updating` marks a zero balance that is only zero because funds are in
+/// flight or the first sync is still running.
+pub fn balance_hero(
+	ui: &mut Ui,
+	total: u64,
+	spendable: u64,
+	updating: bool,
+	sync_pct: u8,
+	fiat: Option<&str>,
+	size: f32,
+) {
 	let t = theme::tokens();
-	// Centered to match the Pay amount and the empty-state below it.
+	// Headline is the TOTAL the wallet holds — same number GRIM shows — so a
+	// wallet mid-confirmation doesn't look empty.
 	ui.vertical_centered(|ui| kicker(ui, "Balance"));
 	ui.add_space(6.0);
-	amount_text_centered(ui, &amount_str(atomic), size);
+	amount_text_centered(ui, &amount_str(total), size);
+	// When some of it can't be spent yet (a payment still confirming, ~10 blocks),
+	// say how much is available vs confirming so a failed send explains itself.
+	if total > spendable {
+		let confirming = total - spendable;
+		ui.add_space(4.0);
+		ui.vertical_centered(|ui| {
+			ui.label(
+				RichText::new(format!(
+					"{}{} available · {}{} confirming",
+					amount_str(spendable),
+					TSU,
+					amount_str(confirming),
+					TSU
+				))
+				.font(FontId::new(12.5, fonts::medium()))
+				.color(t.text_dim),
+			);
+		});
+	}
+	// A fresh sync or funds in flight leave a stark 0 that reads as "funds
+	// vanished" — say the balance is still updating, with the scan % when the
+	// node reports one (1..99), so the user sees progress without opening the
+	// wallet switcher.
+	if total == 0 && updating {
+		let label = if (1..100).contains(&sync_pct) {
+			format!("{} {sync_pct}%", t!("goblin.home.balance_updating"))
+		} else {
+			t!("goblin.home.balance_updating").to_string()
+		};
+		ui.add_space(4.0);
+		ui.vertical_centered(|ui| {
+			ui.label(
+				RichText::new(label)
+					.font(FontId::new(12.5, fonts::medium()))
+					.color(t.text_dim),
+			);
+		});
+	}
 	if let Some(fiat) = fiat {
 		ui.add_space(4.0);
 		ui.vertical_centered(|ui| {
@@ -528,10 +535,10 @@ pub fn activity_row(
 	ui: &mut Ui,
 	title: &str,
 	subtitle: &str,
-	hue: usize,
 	id: &str,
 	amount: &str,
 	incoming: bool,
+	canceled: bool,
 	system: bool,
 	tex: Option<&egui::TextureHandle>,
 ) -> Response {
@@ -562,7 +569,7 @@ pub fn activity_row(
 				t.text,
 			);
 		} else {
-			avatar_any(ui, title, id, 40.0, hue, tex);
+			avatar_any(ui, title, id, 40.0, tex);
 		}
 		ui.add_space(12.0);
 		ui.vertical(|ui| {
@@ -587,10 +594,18 @@ pub fn activity_row(
 			);
 		});
 		ui.with_layout(Layout::right_to_left(Align::Center), |ui| {
+			// A canceled tx delivered no funds: mute the amount so it never
+			// reads as a completed green credit (or a real debit).
 			ui.label(
 				RichText::new(amount)
 					.font(FontId::new(15.0, fonts::mono_semibold()))
-					.color(if incoming { t.pos } else { t.text }),
+					.color(if canceled {
+						t.text_dim
+					} else if incoming {
+						t.pos
+					} else {
+						t.text
+					}),
 			);
 		});
 	});
@@ -706,7 +721,11 @@ pub fn send_receive(ui: &mut Ui) -> (bool, bool) {
 }

 /// A simple numeric keypad. Mutates `amount` string. Returns true if changed.
-pub fn numpad(ui: &mut Ui, amount: &mut String) -> bool {
+pub fn numpad(
+	ui: &mut Ui,
+	amount: &mut String,
+	cb: &dyn crate::gui::platform::PlatformCallbacks,
+) -> bool {
 	let t = theme::tokens();
 	let mut changed = false;
 	let keys = [
@@ -719,7 +738,7 @@ pub fn numpad(ui: &mut Ui, amount: &mut String) -> bool {
 	let gap = 14.0;
 	// Center a fixed-width pad so the three columns line up directly under
 	// the centered amount above, on any width. Wider than before to give the
-	// columns more breathing room (Cash App-style).
+	// columns more breathing room (payment-app-style).
 	let pad_w = ui.available_width().min(332.0);
 	let key_w = (pad_w - 2.0 * gap) / 3.0;
 	let side = ((ui.available_width() - pad_w) / 2.0).max(0.0);
@@ -755,8 +774,16 @@ pub fn numpad(ui: &mut Ui, amount: &mut String) -> bool {
 					col,
 				);
 				if resp.clicked() {
+					let before = amount.clone();
 					apply_key(amount, k);
-					changed = true;
+					if *amount == before {
+						// A no-op key — a second '.', a '0' on a leading zero, the
+						// 9-decimal cap, or backspace on empty. Nudge with a short
+						// error haptic instead of silently doing nothing.
+						cb.vibrate_error();
+					} else {
+						changed = true;
+					}
 				}
 			}
 		});
@@ -820,12 +847,6 @@ pub fn apply_key(amount: &mut String, key: &str) {
 	}
 }

-/// Paint a full-rect background fill on the current panel.
-pub fn fill_bg(ui: &Ui, color: Color32) {
-	let rect = ui.ctx().screen_rect();
-	ui.painter().rect_filled(rect, CornerRadius::ZERO, color);
-}
-
 /// Center a fixed-width column for narrow content on wide screens.
 /// Hands the child the full remaining height: wrapping in `horizontal()`
 /// would start the row a single line tall, so a `ScrollArea` inside would
@@ -917,11 +938,3 @@ impl HoldToSend {
 		false
 	}
 }
-
-/// Shorten a long key/address for display (8…6).
-pub fn short_key(key: &str) -> String {
-	if key.len() <= 16 {
-		return key.to_string();
-	}
-	format!("{}…{}", &key[..8], &key[key.len() - 6..])
-}
@@ -349,7 +349,7 @@ impl NetworkContent {
 }

 /// Content to draw when node is disabled.
-fn disabled_node_ui(ui: &mut egui::Ui) {
+pub fn disabled_node_ui(ui: &mut egui::Ui) {
 	View::center_content(ui, 156.0, |ui| {
 		let text = t!("network.disabled_server", "dots" => DOTS_THREE_OUTLINE_VERTICAL);
 		ui.label(
@@ -28,7 +28,6 @@ pub struct SettingsContent {
 	interface_settings: InterfaceSettingsContent,
 	/// Network communication settings.
 	network_settings: NetworkSettingsContent,
-	// tor_settings: TorSettingsContent,
 }

 impl Default for SettingsContent {
@@ -36,7 +35,6 @@ impl Default for SettingsContent {
 		Self {
 			interface_settings: InterfaceSettingsContent::default(),
 			network_settings: NetworkSettingsContent::default(),
-			//tor_settings: TorSettingsContent::default(),
 		}
 	}
 }
@@ -110,21 +108,5 @@ impl SettingsContent {
 			}
 		});
 		ui.add_space(8.0);
-
-		// Do not show Tor settings on Android.
-		// let os = OperatingSystem::from_target_os();
-		// let show_tor = os != OperatingSystem::Android;
-		// if show_tor {
-		//     View::horizontal_line(ui, Colors::stroke());
-		//     ui.add_space(6.0);
-		//
-		//     View::sub_title(ui, format!("{} {}", CIRCLE_HALF, t!("transport.tor_network")));
-		//     View::horizontal_line(ui, Colors::stroke());
-		//     ui.add_space(6.0);
-		//
-		//     // Show Tor settings.
-		//     self.tor_settings.ui(ui, cb);
-		//     ui.add_space(8.0);
-		// }
 	}
 }
@@ -703,16 +703,12 @@ impl View {
 				.fit_to_exact_size(egui::vec2(150.0, 150.0))
 				.ui(ui);
 		});
-		ui.add_space(8.0);
-		ui.label(
-			RichText::new("GOBLIN")
-				.size(24.0)
-				.color(Colors::white_or_black(true)),
-		);
-		ui.add_space(-2.0);
+		ui.add_space(6.0);
+		// Build number only — the "GOBLIN" wordmark was redundant with the mark
+		// above and the title bar, so it's dropped. Kept small and quiet.
 		ui.label(
 			RichText::new(format!("Build {}", crate::BUILD))
-				.size(16.0)
+				.size(13.0)
 				.color(Colors::title(false)),
 		);
 	}
@@ -26,7 +26,7 @@ use crate::AppConfig;
 use crate::gui::Colors;
 use crate::gui::icons::{
 	ARROW_LEFT, BOOKMARKS, CALENDAR_CHECK, CLOUD_ARROW_DOWN, COMPUTER_TOWER, GEAR, GEAR_FINE,
-	GLOBE, GLOBE_SIMPLE, LOCK_KEY, NOTEPAD, PLUS, SIDEBAR_SIMPLE, SUITCASE,
+	GLOBE_SIMPLE, LOCK_KEY, NOTEPAD, PLUS, SIDEBAR_SIMPLE, SUITCASE,
 };
 use crate::gui::platform::PlatformCallbacks;
 use crate::gui::views::goblin::onboarding::OnboardingContent;
@@ -202,6 +202,18 @@ impl ContentContainer for WalletsContent {
 		// keeps it through its identity step, when the new wallet is already
 		// open but not yet selected).
 		let onboarding_active = !showing_wallet && self.onboarding_active();
+		// Keep the Android status-bar icons readable against whatever paints the
+		// top strip. The GRIM screens (wallet list, app settings, wallet creation)
+		// leave the bright accent-yellow `title_panel_bg` showing under the status
+		// bar, which needs DARK icons. Onboarding, though, paints its OWN dark
+		// full-bleed surface (no title panel), so it needs theme-appropriate icons
+		// (white on the dark surface) — forcing dark there made them black-on-black.
+		// The Goblin wallet surface covers the inset itself and sets its per-tab flag.
+		if !showing_wallet && !onboarding_active {
+			crate::gui::theme::set_status_surface_yellow(true);
+		} else if onboarding_active {
+			crate::gui::theme::set_status_surface_yellow(false);
+		}
 		let dual_panel = is_dual_panel_mode(ui);
 		let content_width = ui.available_width();
 		let list_hidden = showing_settings
@@ -210,11 +222,12 @@ impl ContentContainer for WalletsContent {
 			|| self.wallets.list().is_empty()
 			|| (showing_wallet && (!dual_panel || !AppConfig::show_wallets_at_dual_panel()));

-		// Show title panel, except over the full-bleed Goblin wallet surface,
-		// onboarding, and the returning-user wallet list (all carry their own
-		// header; the yellow GRIM bar is off-brand on those surfaces).
-		let wallet_list_screen = self.wallet_list_screen();
-		if !showing_wallet && !onboarding_active && !wallet_list_screen {
+		// Show the title panel everywhere except the full-bleed Goblin wallet
+		// surface and onboarding (which carry their own headers). The wallet
+		// list keeps GRIM's title bar — it puts the app-settings gear within
+		// reach at the top-right and gives the list a proper header, painted in
+		// the Pay-screen accent yellow.
+		if !showing_wallet && !onboarding_active {
 			self.title_ui(ui, dual_panel, cb);
 		}

@@ -236,6 +249,13 @@ impl ContentContainer for WalletsContent {
 				}
 			});

+		// "Switch wallet" in the goblin settings asks to return to the chooser
+		// without locking the current wallet (it stays open, so re-picking it is
+		// instant). Locking is a separate, explicit action.
+		if self.wallet_content.take_switch_request() {
+			self.wallets.select(None);
+		}
+
 		// Show wallet list tabs.
 		let side_padding = View::TAB_ITEMS_PADDING + if View::is_desktop() { 0.0 } else { 4.0 };
 		let tabs_margin = Margin {
@@ -386,11 +406,11 @@ impl WalletsContent {
 			}
 			return false;
 		} else if self.showing_wallet() {
-			// Go back at stack or close wallet.
+			// Go back at stack; on Home with nothing open, back is a no-op.
+			// Leaving the wallet is intentional-only (switch/lock controls),
+			// never a back fallback to the chooser.
 			if self.wallet_content.can_back() {
 				self.wallet_content.back(cb);
-			} else {
-				self.wallets.select(None);
 			}
 			return false;
 		}
@@ -529,10 +549,10 @@ impl WalletsContent {
 					});
 				} else if show_wallet && !dual_panel {
 					View::title_button_big(ui, ARROW_LEFT, |_| {
+						// Same rule as system back: never fall back to the
+						// chooser; on Home the arrow is a no-op.
 						if self.wallet_content.can_back() {
 							self.wallet_content.back(cb);
-						} else {
-							self.wallets.select(None);
 						}
 					});
 				} else if self.creating_wallet() {
@@ -552,10 +572,6 @@ impl WalletsContent {
 					View::title_button_big(ui, list_icon, |_| {
 						AppConfig::toggle_show_wallets_at_dual_panel();
 					});
-				} else if !Content::is_dual_panel_mode(ui.ctx()) {
-					View::title_button_big(ui, GLOBE, |_| {
-						Content::toggle_network_panel();
-					});
 				}
 			},
 			|ui| {
@@ -574,35 +590,6 @@ impl WalletsContent {
 		}
 	}

-	/// Slim header for the wallet-list surface: just the app-settings gear,
-	/// right-aligned. The integrated node moved into the gear's settings — out
-	/// of the list, every node feature still intact.
-	fn wallet_list_header_ui(&mut self, ui: &mut egui::Ui) {
-		ui.add_space(6.0);
-		ui.horizontal(|ui| {
-			// App-settings gear, right-aligned. Drawn manually (the title-bar
-			// button uses dark-on-yellow ink, invisible on this dark surface).
-			ui.with_layout(Layout::right_to_left(Align::Center), |ui| {
-				let (g_rect, g_resp) =
-					ui.allocate_exact_size(egui::Vec2::splat(34.0), Sense::click());
-				ui.painter().text(
-					g_rect.center(),
-					egui::Align2::CENTER_CENTER,
-					GEAR,
-					eframe::epaint::FontId::proportional(20.0),
-					Colors::text(false),
-				);
-				if g_resp
-					.on_hover_cursor(CursorIcon::PointingHand)
-					.on_hover_text("Settings")
-					.clicked()
-				{
-					self.settings_content = Some(SettingsContent::default());
-				}
-			});
-		});
-	}
-
 	/// Draw list of wallets.
 	fn wallet_list_ui(&mut self, ui: &mut egui::Ui, cb: &dyn PlatformCallbacks) {
 		ScrollArea::vertical()
@@ -611,11 +598,8 @@ impl WalletsContent {
 			.auto_shrink([false; 2])
 			.show(ui, |ui| {
 				View::max_width_ui(ui, Content::SIDE_PANEL_WIDTH * 1.3, |ui| {
-					// Slim goblin header: node-status chip (opens the node
-					// panel) on the left, app-settings gear on the right —
-					// the controls the suppressed yellow title bar used to
-					// carry, restyled to match the open-wallet surface.
-					self.wallet_list_header_ui(ui);
+					// The app-settings gear now lives in the restored title bar
+					// above; the list starts straight into the app logo.
 					ui.add_space(8.0);

 					// Show application logo and name.
@@ -863,7 +847,7 @@ impl WalletsContent {
 					let ver_text = if let Some(size) = update.size.as_ref() {
 						format!("{} {} ({} MB)", BOOKMARKS, update.version, size)
 					} else {
-						format!("{} {} > {}", BOOKMARKS, crate::VERSION, update.version)
+						format!("{} build{} > {}", BOOKMARKS, crate::BUILD, update.version)
 					};
 					View::ellipsize_text(ui, ver_text, 15.0, Colors::text(false));
 					ui.add_space(1.0);
@@ -50,7 +50,7 @@ pub struct WalletContent {
 	/// Send request creation [`Modal`] content.
 	send_content: Option<SendRequestContent>,

-	/// Goblin Cash App-style surface (primary UI).
+	/// Goblin payment-app-style surface (primary UI).
 	goblin: crate::gui::views::goblin::GoblinWalletView,
 }

@@ -83,8 +83,15 @@ impl WalletContentContainer for WalletContent {
 	}

 	fn container_ui(&mut self, ui: &mut egui::Ui, wallet: &Wallet, cb: &dyn PlatformCallbacks) {
+		// Drawing this wallet means the app is foreground with the wallet
+		// on-screen: resume on-demand node polling right away so the balance
+		// goes live (the sync thread otherwise re-checks the foreground
+		// signal only once per cycle). No-op unless polling was paused.
+		if wallet.node_polling_paused() {
+			wallet.resume_node_polling();
+		}
 		// Goblin surface is the primary UI. Show a sync screen until data is
-		// ready, then hand the whole surface to the Cash App-style view.
+		// ready, then hand the whole surface to the payment-app-style view.
 		let block_nav_goblin = self.block_navigation_on_sync(wallet);
 		if block_nav_goblin || wallet.get_data().is_none() {
 			egui::CentralPanel::default()
@@ -305,9 +312,17 @@ impl WalletContent {
 		}
 	}

-	/// Check if it's possible to go back at navigation stack.
+	/// Check if it's possible to go back at navigation stack. Delegates to the
+	/// goblin view too (overlays, settings sub-pages, non-Home tabs), so the
+	/// host never falls through to the wallet chooser on back.
 	pub fn can_back(&self) -> bool {
-		self.goblin.overlay_active() || self.account_content.can_back()
+		self.goblin.can_back() || self.account_content.can_back()
+	}
+
+	/// Take the pending "switch wallet" request from the goblin settings, so the
+	/// host can deselect this wallet (return to the chooser) without locking it.
+	pub fn take_switch_request(&mut self) -> bool {
+		self.goblin.take_switch_request()
 	}

 	/// Navigate back on navigation stack. Returns true if not consumed.
@@ -324,7 +324,7 @@ impl SendRequestContent {
 		if self.amount_edit.is_empty() {
 			return;
 		}
-		// Check address to send over Tor if enabled.
+		// Validate the recipient slatepack address.
 		let addr_str = self.address_edit.as_str();
 		if let Ok(r) = SlatepackAddress::try_from(addr_str.trim()) {
 			if let Ok(a) = amount_from_hr_string(self.amount_edit.as_str()) {
@@ -18,5 +18,5 @@ pub use client::*;
 mod release;
 pub use release::*;

-mod price;
+pub(crate) mod price;
 pub use price::grin_rate;
@@ -12,22 +12,40 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.

-//! GRIN price preview, fetched over the Nym mixnet and cached per currency.
+//! GRIN price preview, cached per currency. Off by default (no pairing → no
+//! fetch); only once the user opts into a pairing is the rate fetched — and it
+//! goes over the Nym mixnet like everything else, never the clear net. The rate
+//! barely moves and CoinGecko's free tier rate-limits frequent polling (the
+//! shared exit IP all the more), so it refreshes on a slow cache, not live.

 use lazy_static::lazy_static;
 use parking_lot::RwLock;
 use std::collections::{HashMap, HashSet};
-use std::time::{SystemTime, UNIX_EPOCH};
+use std::time::{Duration, SystemTime, UNIX_EPOCH};

+use crate::AppConfig;
 use crate::nym;

 /// Cache refresh interval (seconds).
 const REFRESH_SECS: i64 = 300;

 /// Minimum delay between fetch attempts for a currency, so a failing fetch
-/// (e.g. the mixnet still bootstrapping) does not respawn a thread every frame.
+/// (e.g. no network) does not respawn a thread every frame.
 const RETRY_SECS: i64 = 30;

+/// How stale a disk-cached rate may be and still be worth painting on cold start
+/// (48h). Older than this and we start blank rather than show a very wrong price.
+const SEED_MAX_AGE_SECS: i64 = 48 * 3600;
+
+/// Eager-probe per-try timeout. The eager fetch on tunnel-ready doubles as the
+/// end-to-end exit probe: a healthy warm fetch is ~800ms, a dead exit hangs until
+/// timeout, so a short cap lets us fail fast and condemn a bad exit in seconds.
+const PROBE_TIMEOUT: Duration = Duration::from_secs(12);
+
+/// How many eager-probe fetch attempts before we conclude the (still-"ready")
+/// exit is blackholing HTTP and condemn it.
+const PROBE_ATTEMPTS: u32 = 3;
+
 lazy_static! {
 	/// Cached GRIN rates per `vs_currency`: code -> (rate, fetched_at).
 	static ref RATES: RwLock<HashMap<String, (f64, i64)>> = RwLock::new(HashMap::new());
@@ -59,7 +77,7 @@ pub fn grin_rate(vs: &str) -> Option<f64> {
 	cached.map(|(rate, _)| rate)
 }

-/// Spawn a background refresh over the mixnet for one currency (deduped per code).
+/// Spawn a background refresh for one currency (deduped per code).
 fn trigger_refresh(vs: String) {
 	let t = now();
 	{
@@ -83,13 +101,87 @@ fn trigger_refresh(vs: String) {
 			.unwrap();
 		rt.block_on(async {
 			if let Some(rate) = fetch_rate(&vs).await {
-				RATES.write().insert(vs.clone(), (rate, now()));
+				record_rate(&vs, rate);
 			}
 		});
 		FETCHING.write().remove(&vs);
 	});
 }

+/// Record a freshly fetched rate: into the in-memory cache (with `now()`) AND to
+/// disk, so the next cold start can paint it instantly (see [`seed_from_disk`]).
+fn record_rate(vs: &str, rate: f64) {
+	let t = now();
+	RATES.write().insert(vs.to_string(), (rate, t));
+	AppConfig::set_last_rate(vs, rate, t);
+}
+
+/// Seed the in-memory cache from the disk-persisted last rate, if it is fresh
+/// enough (< 48h). Inserted with its ORIGINAL timestamp so it reads as stale —
+/// [`grin_rate`] returns it immediately for an instant preview, yet `needs_refresh`
+/// stays true so a live refresh is still kicked. Called once, early in start().
+pub fn seed_from_disk() {
+	if let Some((vs, rate, at)) = AppConfig::last_rate() {
+		if now() - at <= SEED_MAX_AGE_SECS {
+			RATES.write().entry(vs).or_insert((rate, at));
+		}
+	}
+}
+
+/// Kick a refresh for the current pairing's currency the moment the tunnel is
+/// ready, bypassing the [`RETRY_SECS`] gate (but keeping the [`FETCHING`] dedupe).
+/// It doubles as the end-to-end exit probe: if every attempt fails while the
+/// tunnel still reports ready, the exit is blackholing HTTP despite passing the
+/// cheap liveness probe, so we condemn it (bounded: at most one condemnation per
+/// tunnel generation) rather than let it stall the wallet for minutes.
+pub fn eager_refresh() {
+	let vs = match AppConfig::pairing().vs_currency() {
+		Some(vs) => vs.to_string(),
+		// Pairing off → nothing to fetch, so no probe either (we never fetch a
+		// price the user hasn't opted into). The watchdog's own signals govern.
+		None => return,
+	};
+	{
+		let mut fetching = FETCHING.write();
+		if fetching.contains(&vs) {
+			return;
+		}
+		fetching.insert(vs.clone());
+	}
+	LAST_TRY.write().insert(vs.clone(), now());
+	let rt = tokio::runtime::Builder::new_current_thread()
+		.enable_all()
+		.build()
+		.unwrap();
+	rt.block_on(async {
+		let generation = nym::tunnel_generation();
+		let mut ok = false;
+		for attempt in 1..=PROBE_ATTEMPTS {
+			match tokio::time::timeout(PROBE_TIMEOUT, fetch_rate(&vs)).await {
+				Ok(Some(rate)) => {
+					record_rate(&vs, rate);
+					ok = true;
+					break;
+				}
+				_ => {
+					log::warn!(
+						"price: eager probe fetch {attempt}/{PROBE_ATTEMPTS} failed \
+						 (vs {vs}, gen {generation})"
+					);
+				}
+			}
+		}
+		// Every attempt failed AND the tunnel still claims ready on the SAME
+		// generation we probed: the exit is up but blackholing our HTTP. Condemn
+		// it so a fresh exit is selected in seconds, not minutes. Guarded to the
+		// probed generation so a reselect that already happened is never hit.
+		if !ok && nym::is_ready() && nym::tunnel_generation() == generation {
+			nym::condemn_exit(generation);
+		}
+	});
+	FETCHING.write().remove(&vs);
+}
+
 /// Fetch the GRIN/`vs` rate from CoinGecko over the Nym mixnet.
 async fn fetch_rate(vs: &str) -> Option<f64> {
 	let url = format!(
@@ -105,7 +197,7 @@ async fn fetch_rate(vs: &str) -> Option<f64> {
 		.and_then(|doc| doc.get("grin")?.get(vs)?.as_f64());
 	if parsed.is_none() {
 		log::warn!(
-			"price: unexpected response from rate API (mixnet exit blocked?): {}",
+			"price: unexpected response from rate API: {}",
 			body.chars().take(120).collect::<String>()
 		);
 	}
@@ -47,42 +47,43 @@ const ARM_ARCH: &str = "arm";
 const ARCH: &'static str = ARM_ARCH;

 /// Base endpoint to download the release.
-const BASE_DOWNLOAD_URL: &'static str = "https://code.gri.mw/GUI/grim/releases/download/";
+const BASE_DOWNLOAD_URL: &'static str = "https://github.com/2ro/goblin/releases/download/";

 impl ReleaseInfo {
-	/// Get version number.
+	/// Release version (the build tag, e.g. "build71").
 	pub fn version(&self) -> String {
-		self.tag_name.replace("v", "")
+		self.tag_name.clone()
 	}

-	/// Get artifact release name based on current platform.
+	/// Get artifact release name based on current platform. Matches the assets
+	/// attached to Goblin's GitHub releases; platforms Goblin doesn't ship
+	/// (linux-arm, macOS, windows-arm) return None.
 	fn name(&self) -> Option<String> {
 		let os = OperatingSystem::from_target_os();
 		match os {
 			OperatingSystem::Unknown => None,
 			OperatingSystem::Android => {
 				let name = if ARCH == ARM_ARCH {
-					format!("grim-{}-android.apk", self.tag_name)
+					format!("goblin-{}-android-arm.apk", self.tag_name)
 				} else {
-					format!("grim-{}-android-x86_64.apk", self.tag_name)
+					format!("goblin-{}-android-x86_64.apk", self.tag_name)
 				};
 				Some(name)
 			}
 			OperatingSystem::IOS => None,
 			OperatingSystem::Nix => {
-				let name = if ARCH == ARM_ARCH {
-					format!("grim-{}-linux-arm.AppImage", self.tag_name)
+				if ARCH == ARM_ARCH {
+					None
 				} else {
-					format!("grim-{}-linux-x86_64.AppImage", self.tag_name)
-				};
-				Some(name)
+					Some(format!("goblin-{}-linux-x86_64.tar.gz", self.tag_name))
+				}
 			}
-			OperatingSystem::Mac => Some(format!("grim-{}-macos-universal.zip", self.tag_name)),
+			OperatingSystem::Mac => None,
 			OperatingSystem::Windows => {
 				if ARCH == ARM_ARCH {
 					None
 				} else {
-					Some(format!("grim-{}-win-x86_64.msi", self.tag_name))
+					Some(format!("goblin-{}-win-x86_64.zip", self.tag_name))
 				}
 			}
 		}
@@ -119,46 +120,30 @@ impl ReleaseInfo {
 		None
 	}

-	/// Check if release is update.
+	/// Whether this release is newer than the running build. Goblin versions by
+	/// build number ("buildNN" tags) rather than semver, so compare the numbers.
 	pub fn is_update(&self) -> bool {
-		let cur = crate::VERSION;
-		let ver = self.version();
-		if cur == ver {
-			return false;
-		}
-		let cur_numbers: Vec<i32> = cur
-			.split(".")
-			.filter_map(|s| s.parse::<i32>().ok())
-			.collect();
-		let ver_numbers: Vec<i32> = ver
-			.split(".")
-			.filter_map(|s| s.parse::<i32>().ok())
-			.collect();
-		if cur_numbers.len() != ver_numbers.len() {
-			return true;
-		}
-		for (i, num) in ver_numbers.iter().enumerate() {
-			if num > &cur_numbers.get(i).unwrap() {
-				if i == 0 {
-					return true;
-				} else if i == 1 && cur_numbers.get(0).unwrap() == ver_numbers.get(0).unwrap() {
-					return true;
-				} else if i == 2 && cur_numbers.get(1).unwrap() == ver_numbers.get(1).unwrap() {
-					return true;
-				}
-			}
-		}
-		false
+		let cur: u64 = crate::BUILD.trim().parse().unwrap_or(0);
+		let rel: u64 = self
+			.tag_name
+			.trim()
+			.trim_start_matches("build")
+			.parse()
+			.unwrap_or(0);
+		rel > cur
 	}
 }

-/// API endpoint to check last release.
-const REQUEST_URL: &'static str = "https://code.gri.mw/api/v1/repos/gui/grim/releases/latest";
+/// API endpoint to check last release (Goblin's own GitHub releases).
+const REQUEST_URL: &'static str = "https://api.github.com/repos/2ro/goblin/releases/latest";

 pub async fn retrieve_release() -> Result<ReleaseInfo, String> {
 	let req = hyper::Request::builder()
 		.method(hyper::Method::GET)
 		.uri(REQUEST_URL)
+		// GitHub's API rejects requests without a User-Agent.
+		.header("User-Agent", "goblin-wallet")
+		.header("Accept", "application/vnd.github+json")
 		.body(Empty::<Bytes>::new())
 		.unwrap();
 	if let Ok(resp) = HttpClient::send(req).await {
@@ -38,7 +38,7 @@ mod http;
 pub mod logger;
 mod node;
 pub mod nostr;
-mod nym;
+pub mod nym;
 mod settings;
 mod wallet;

@@ -117,16 +117,20 @@ pub fn start(options: NativeOptions, app_creator: eframe::AppCreator) -> eframe:
 	// would panic on the first TLS handshake. nym uses its own explicit provider,
 	// so this only steers our relay/HTTP TLS. Idempotent (Err if already set).
 	let _ = rustls::crypto::ring::default_provider().install_default();
+	// Pre-warm the in-process Nym mixnet tunnel FIRST, before i18n/node setup, so
+	// the mixnet bootstrap (the long pole on cold start) overlaps everything else
+	// and price/NIP-05/nostr are ready at first use. All of Goblin's outbound
+	// traffic egresses through it; nothing clearnet.
+	nym::warm_up();
+	// Seed the price cache from disk so the amount preview can paint an instant
+	// (stale-marked) fiat value while the first live fetch is still in flight.
+	crate::http::price::seed_from_disk();
 	// Setup translations.
 	setup_i18n();
 	// Start integrated node if needed.
 	if AppConfig::autostart_node() {
 		Node::start();
 	}
-	// Pre-warm the in-process Nym mixnet client so price/NIP-05/nostr are ready at
-	// first use. All of Goblin's outbound traffic egresses through it; nothing
-	// clearnet.
-	nym::warm_up();
 	// Launch graphical interface.
 	eframe::run_native("Goblin", options, app_creator)
 }
@@ -335,18 +339,21 @@ fn setup_i18n() {
 		}
 	} else {
 		let locale = sys_locale::get_locale().unwrap_or(String::from(AppConfig::DEFAULT_LOCALE));
-		let locale_str = if locale.contains("-") {
-			locale
-				.split("-")
-				.next()
-				.unwrap_or(AppConfig::DEFAULT_LOCALE)
-		} else {
-			locale.as_str()
-		};
-
-		// Set best possible locale.
-		if rust_i18n::available_locales!().contains(&locale_str) {
-			rust_i18n::set_locale(locale_str);
+		// sys_locale may hand back either `zh-CN` or `zh_CN`; normalize the
+		// separator so a region-specific locale can match its file name.
+		let normalized = locale.replace('_', "-");
+		let available = rust_i18n::available_locales!();
+		// Prefer an exact region match (e.g. `zh-CN`, the only CJK locale and one
+		// the bare-subtag fallback could never reach), then the language subtag
+		// (e.g. `de` from `de-DE`), else the default.
+		let primary = normalized
+			.split('-')
+			.next()
+			.unwrap_or(AppConfig::DEFAULT_LOCALE);
+		if available.contains(&normalized.as_str()) {
+			rust_i18n::set_locale(normalized.as_str());
+		} else if available.contains(&primary) {
+			rust_i18n::set_locale(primary);
 		} else {
 			rust_i18n::set_locale(AppConfig::DEFAULT_LOCALE);
 		}
@@ -375,6 +382,69 @@ pub fn on_data(data: String) {
 	*w_data = Some(data);
 }

+/// Unix-seconds timestamp of the most recent GUI frame. Background workers read
+/// it to tell whether the app is actually on-screen: while the app is
+/// backgrounded, eframe stops calling the per-frame draw and this stops
+/// advancing. Crate-root so both `gui` and `nostr` can reach it without coupling.
+static LAST_FRAME_AT: std::sync::atomic::AtomicI64 = std::sync::atomic::AtomicI64::new(0);
+
+/// A frame older than this many seconds means the app isn't drawing — i.e. it's
+/// backgrounded/occluded. The GUI keeps a ~2s repaint heartbeat while visible, so
+/// this leaves a couple of frames of margin before declaring "not foreground".
+const FOREGROUND_STALE_SECS: i64 = 5;
+
+fn now_unix_secs() -> i64 {
+	std::time::SystemTime::now()
+		.duration_since(std::time::UNIX_EPOCH)
+		.map(|d| d.as_secs() as i64)
+		.unwrap_or(0)
+}
+
+/// Stamp that the GUI just drew a frame. Called once per frame from the app loop.
+pub fn mark_frame() {
+	LAST_FRAME_AT.store(now_unix_secs(), std::sync::atomic::Ordering::Relaxed);
+}
+
+/// True when the GUI drew a frame within the last few seconds — i.e. the app is
+/// foreground and visible. While backgrounded (no frames), returns false, so
+/// periodic background work (the @name re-verify sweep) can pause and catch up
+/// on resume instead of burning mixnet round-trips while nobody's looking.
+pub fn app_foreground() -> bool {
+	let last = LAST_FRAME_AT.load(std::sync::atomic::Ordering::Relaxed);
+	last != 0 && now_unix_secs() - last <= FOREGROUND_STALE_SECS
+}
+
+/// Fire the platform "payment received" notification with the payer's display
+/// name and human-readable amount. Android shows a one-shot system
+/// notification (`BackgroundService.notifyPaymentReceived`, id=2, separate
+/// from the persistent sync notification); other platforms are a no-op.
+/// Crate-root so the nostr service can reach it without holding a platform
+/// reference.
+pub fn notify_payment_received(name: &str, amount: &str) {
+	#[cfg(target_os = "android")]
+	gui::platform::notify_payment_received(name, amount);
+	#[cfg(not(target_os = "android"))]
+	{
+		let _ = (name, amount);
+	}
+}
+
+/// Fire the platform "payment requested" notification with the requester's
+/// display name and human-readable amount, for an incoming payment request
+/// (someone asking us to pay them). Android shows a one-shot system
+/// notification (`BackgroundService.notifyPaymentRequested`, id=3, separate from
+/// both the persistent sync notification id=1 and the received-payment one
+/// id=2); other platforms are a no-op. Crate-root so the nostr service can reach
+/// it without holding a platform reference. Mirrors [`notify_payment_received`].
+pub fn notify_payment_requested(name: &str, amount: &str) {
+	#[cfg(target_os = "android")]
+	gui::platform::notify_payment_requested(name, amount);
+	#[cfg(not(target_os = "android"))]
+	{
+		let _ = (name, amount);
+	}
+}
+
 lazy_static! {
 	/// Data provided from deeplink or opened file.
 	pub static ref INCOMING_DATA: Arc<RwLock<Option<String>>> = Arc::new(RwLock::new(None));
@@ -721,7 +721,15 @@ pub extern "C" fn Java_mw_gri_android_BackgroundService_getSyncStatusText(
 	_class: jni::objects::JObject,
 	_activity: jni::objects::JObject,
 ) -> jni::sys::jstring {
-	let status_text = Node::get_sync_status_text();
+	// The keep-alive notification must reflect the real connection: on the
+	// external-node default the integrated node is deliberately off, so "Node
+	// is down" is wrong — the service's actual background job is the
+	// Nostr-over-Nym payment listen.
+	let status_text = if Node::is_running() || Node::is_starting() {
+		Node::get_sync_status_text()
+	} else {
+		t!("goblin.home.listening").into()
+	};
 	let j_text = _env.new_string(status_text);
 	return j_text.unwrap().into_raw();
 }
@@ -736,7 +744,14 @@ pub extern "C" fn Java_mw_gri_android_BackgroundService_getSyncTitle(
 	_class: jni::objects::JObject,
 	_activity: jni::objects::JObject,
 ) -> jni::sys::jstring {
-	let j_text = _env.new_string(t!("network.node"));
+	// Match the status text: only title the notification "Node" when the
+	// integrated node is actually in use.
+	let title = if Node::is_running() || Node::is_starting() {
+		t!("network.node").to_string()
+	} else {
+		"Goblin".to_string()
+	};
+	let j_text = _env.new_string(title);
 	return j_text.unwrap().into_raw();
 }

@@ -12,77 +12,13 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.

-//! Client-side avatar handling: local preprocessing of a picked picture
-//! (mirrors the server pipeline so uploads over the mixnet stay small and previews
-//! are instant — the server still re-validates everything), plus a small
-//! disk cache of fetched avatars keyed by username.
+//! Client-side avatar handling: a small disk cache of fetched avatars keyed
+//! by username.

-use image::codecs::png::PngEncoder;
-use image::metadata::Orientation;
-use image::{DynamicImage, ImageDecoder, ImageFormat, ImageReader, Limits};
 use serde::{Deserialize, Serialize};
 use std::collections::HashMap;
-use std::io::Cursor;
 use std::path::PathBuf;

-/// Output dimensions (square), matching the server.
-pub const SIZE: u32 = 256;
-/// Raw picked files larger than this are rejected before decoding.
-const MAX_FILE_BYTES: u64 = 10 * 1024 * 1024;
-
-/// Identify the image format from magic bytes alone (PNG/JPEG/WebP).
-fn sniff(raw: &[u8]) -> Option<ImageFormat> {
-	if raw.len() >= 8 && raw.starts_with(&[0x89, b'P', b'N', b'G', 0x0D, 0x0A, 0x1A, 0x0A]) {
-		return Some(ImageFormat::Png);
-	}
-	if raw.len() >= 3 && raw.starts_with(&[0xFF, 0xD8, 0xFF]) {
-		return Some(ImageFormat::Jpeg);
-	}
-	if raw.len() >= 12 && &raw[0..4] == b"RIFF" && &raw[8..12] == b"WEBP" {
-		return Some(ImageFormat::WebP);
-	}
-	None
-}
-
-/// Read a picked picture file and normalize it to the canonical 256×256
-/// PNG (EXIF orientation applied, every byte of metadata destroyed).
-pub fn process_avatar_file(path: &str) -> Result<Vec<u8>, String> {
-	let meta = std::fs::metadata(path).map_err(|_| "Couldn't read that file".to_string())?;
-	if meta.len() > MAX_FILE_BYTES {
-		return Err("That picture is too large (10 MB max)".to_string());
-	}
-	let raw = std::fs::read(path).map_err(|_| "Couldn't read that file".to_string())?;
-	process_avatar_bytes(&raw)
-}
-
-/// Normalize raw image bytes to the canonical avatar PNG.
-pub fn process_avatar_bytes(raw: &[u8]) -> Result<Vec<u8>, String> {
-	let err = || "That file doesn't look like a usable picture".to_string();
-	let format = sniff(raw).ok_or_else(err)?;
-	let mut reader = ImageReader::with_format(Cursor::new(raw), format);
-	let mut limits = Limits::default();
-	limits.max_image_width = Some(8192);
-	limits.max_image_height = Some(8192);
-	limits.max_alloc = Some(128 * 1024 * 1024);
-	reader.limits(limits);
-	let mut decoder = reader.into_decoder().map_err(|_| err())?;
-	let orientation = decoder.orientation().unwrap_or(Orientation::NoTransforms);
-	let mut img = DynamicImage::from_decoder(decoder).map_err(|_| err())?;
-	img.apply_orientation(orientation);
-	let (w, h) = (img.width(), img.height());
-	if w == 0 || h == 0 {
-		return Err(err());
-	}
-	let side = w.min(h);
-	let img = img.crop_imm((w - side) / 2, (h - side) / 2, side, side);
-	let img = img.resize_exact(SIZE, SIZE, image::imageops::FilterType::Lanczos3);
-	let rgba = img.to_rgba8();
-	let mut out = Vec::new();
-	rgba.write_with_encoder(PngEncoder::new(&mut out))
-		.map_err(|_| err())?;
-	Ok(out)
-}
-
 /// One cached profile probe.
 #[derive(Serialize, Deserialize, Clone)]
 pub struct CacheEntry {
@@ -196,33 +132,6 @@ impl AvatarCache {
 #[cfg(test)]
 mod tests {
 	use super::*;
-	use image::RgbaImage;
-
-	fn png_bytes(w: u32, h: u32) -> Vec<u8> {
-		let img = RgbaImage::from_fn(w, h, |x, y| {
-			image::Rgba([(x % 256) as u8, (y % 256) as u8, 7, 255])
-		});
-		let mut out = Vec::new();
-		image::DynamicImage::ImageRgba8(img)
-			.write_with_encoder(PngEncoder::new(&mut out))
-			.unwrap();
-		out
-	}
-
-	#[test]
-	fn processes_to_canonical_png() {
-		let out = process_avatar_bytes(&png_bytes(500, 300)).unwrap();
-		assert!(out.starts_with(&[0x89, b'P', b'N', b'G']));
-		let img = image::load_from_memory(&out).unwrap();
-		assert_eq!((img.width(), img.height()), (SIZE, SIZE));
-	}
-
-	#[test]
-	fn rejects_non_images() {
-		assert!(process_avatar_bytes(b"<svg onload=alert(1)></svg>").is_err());
-		assert!(process_avatar_bytes(b"GIF89a....").is_err());
-		assert!(process_avatar_bytes(&[]).is_err());
-	}

 	#[test]
 	fn cache_round_trip_and_remove() {
@@ -23,7 +23,7 @@ use crate::nostr::relays::{DEFAULT_NIP05_SERVER, DEFAULT_RELAYS};
 /// Policy for accepting incoming payments (Standard1 slates).
 #[derive(Serialize, Deserialize, Clone, Copy, PartialEq, Eq, Debug)]
 pub enum AcceptPolicy {
-	/// Accept payments from anyone automatically (default, Cash App feel).
+	/// Accept payments from anyone automatically (default, instant-pay feel).
 	Everyone,
 	/// Auto-accept contacts, surface unknown senders for approval.
 	Contacts,
@@ -32,7 +32,7 @@ pub enum AcceptPolicy {
 }

 /// Per-wallet nostr configuration.
-#[derive(Serialize, Deserialize, Clone)]
+#[derive(Serialize, Deserialize, Clone, Default)]
 pub struct NostrConfig {
 	/// Whether the nostr subsystem runs for this wallet.
 	enabled: Option<bool>,
@@ -45,6 +45,10 @@ pub struct NostrConfig {
 	/// Seconds after which a still-pending transaction is auto-canceled/expired.
 	/// Default 24h; lower it (e.g. 60) in nostr.toml to test the expiry flow.
 	expiry_secs: Option<i64>,
+	/// Seconds before the manual "Cancel payment" button appears on a still-
+	/// pending send (one that never reached a relay shows it immediately).
+	/// Default 10 min; lower it in nostr.toml to test the cancel flow.
+	cancel_grace_secs: Option<i64>,
 	/// Whether incoming payment requests (Invoice1) are accepted. Opt-out: on
 	/// by default. When off, incoming requests are dropped and the preference is
 	/// advertised in our kind-0 profile so requesters see it before sending.
@@ -55,20 +59,6 @@ pub struct NostrConfig {
 	path: Option<PathBuf>,
 }

-impl Default for NostrConfig {
-	fn default() -> Self {
-		Self {
-			enabled: None,
-			relays: None,
-			accept_from: None,
-			nip05_server: None,
-			expiry_secs: None,
-			allow_incoming_requests: None,
-			path: None,
-		}
-	}
-}
-
 impl NostrConfig {
 	/// Nostr configuration file name inside the wallet directory.
 	pub const FILE_NAME: &'static str = "nostr.toml";
@@ -99,12 +89,16 @@ impl NostrConfig {
 	}

 	pub fn relays(&self) -> Vec<String> {
-		self.relays
-			.clone()
-			.filter(|r| !r.is_empty())
+		self.relays_override()
 			.unwrap_or_else(|| DEFAULT_RELAYS.iter().map(|s| s.to_string()).collect())
 	}

+	/// The relay list explicitly set by the user in nostr.toml, if any. An
+	/// override disables the per-identity advertised-set selection entirely.
+	pub fn relays_override(&self) -> Option<Vec<String>> {
+		self.relays.clone().filter(|r| !r.is_empty())
+	}
+
 	pub fn set_relays(&mut self, relays: Vec<String>) {
 		self.relays = Some(relays);
 		self.save();
@@ -125,11 +119,42 @@ impl NostrConfig {
 			.unwrap_or_else(|| DEFAULT_NIP05_SERVER.to_string())
 	}

+	/// The name-authority HOST derived from the configured server URL (e.g.
+	/// `goblin.st`). This is "home": bare names (`alice`) resolve here and own/
+	/// home-domain names display without their domain. Federation: a different
+	/// authority makes `alice` mean `alice@thatdomain`, while a full
+	/// `bob@goblin.st` always resolves against goblin.st.
+	pub fn home_domain(&self) -> String {
+		let server = self.nip05_server();
+		server
+			.trim_start_matches("https://")
+			.trim_start_matches("http://")
+			.split('/')
+			.next()
+			.unwrap_or("")
+			.split(':')
+			.next()
+			.unwrap_or("")
+			.to_string()
+	}
+
+	/// Set the name-authority server (e.g. `https://other.example`). Pass an
+	/// empty string to reset to the default (goblin.st).
+	pub fn set_nip05_server(&mut self, server: Option<String>) {
+		self.nip05_server = server.filter(|s| !s.trim().is_empty());
+		self.save();
+	}
+
 	/// Seconds after which a still-pending transaction is auto-canceled/expired.
 	pub fn expiry_secs(&self) -> i64 {
 		self.expiry_secs.unwrap_or(24 * 60 * 60)
 	}

+	/// Seconds before the manual cancel button appears on a pending send.
+	pub fn cancel_grace_secs(&self) -> i64 {
+		self.cancel_grace_secs.unwrap_or(600)
+	}
+
 	pub fn allow_incoming_requests(&self) -> bool {
 		self.allow_incoming_requests.unwrap_or(true)
 	}
@@ -12,23 +12,24 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.

-//! Per-wallet nostr identity: NIP-06 derived from the wallet mnemonic by
-//! default (one seed restores money AND identity) or imported from an nsec.
+//! Per-wallet nostr identity: a random standalone nsec (or an imported one),
+//! deliberately independent of the wallet seed — the seed proves nothing about
+//! the identity and cannot resurrect it; the nsec is its own backup.
 //! Stored at rest as NIP-49 ncryptsec encrypted with the wallet password.

+use nostr_sdk::nips::nip44;
 use nostr_sdk::nips::nip49::{EncryptedSecretKey, KeySecurity};
-use nostr_sdk::prelude::FromMnemonic;
 use nostr_sdk::{FromBech32, Keys, SecretKey, ToBech32};
 use serde_derive::{Deserialize, Serialize};
 use std::fs;
 use std::path::PathBuf;

-/// Where the keys came from.
+/// Where the keys came from. The legacy NIP-06 `Derived` source is gone: a
+/// pre-Build-8 `"source":"Derived"` file no longer parses, so `load()` returns
+/// `None` and wallet init writes a fresh random identity (the wanted behavior;
+/// binding a messaging identity to the money seed was the dangerous design).
 #[derive(Serialize, Deserialize, Clone, Copy, PartialEq, Eq, Debug)]
 pub enum IdentitySource {
-	/// NIP-06 derivation from the wallet BIP-39 mnemonic (legacy: binds the
-	/// identity to the seed forever; superseded by `Random`).
-	Derived,
 	/// Imported nsec.
 	Imported,
 	/// Freshly generated random key, independent of the wallet seed: the
@@ -41,8 +42,6 @@ pub enum IdentitySource {
 pub struct NostrIdentity {
 	pub ver: u8,
 	pub source: IdentitySource,
-	/// NIP-06 account index used for derivation.
-	pub derivation_account: u32,
 	/// NIP-49 encrypted secret key (bech32 ncryptsec).
 	pub ncryptsec: String,
 	/// Public key, bech32 npub (plaintext so the UI can render pre-unlock).
@@ -54,6 +53,12 @@ pub struct NostrIdentity {
 	/// Previous npubs from key rotations (newest last), for reference.
 	#[serde(default)]
 	pub prev_npubs: Vec<String>,
+	/// Advertised DM relays (kind 10050): the Goblin relay plus 1-2 pool
+	/// relays picked once for this identity and kept sticky — no timer
+	/// rotation, since 10050 churn breaks payers' cached routing. Empty until
+	/// the first service start selects them.
+	#[serde(default)]
+	pub dm_relays: Vec<String>,
 }

 /// NIP-49 scrypt work factor (~64 MiB, interactive-grade).
@@ -141,24 +146,6 @@ impl NostrIdentity {
 		let _ = fs::remove_file(Self::path(nostr_dir));
 	}

-	/// Derive keys from a BIP-39 mnemonic phrase via NIP-06.
-	pub fn derive_keys(mnemonic: &str, account: u32) -> Result<Keys, IdentityError> {
-		Keys::from_mnemonic_with_account(mnemonic, None, Some(account))
-			.map_err(|e| IdentityError::Key(format!("{e}")))
-	}
-
-	/// Create a derived identity from the wallet mnemonic, encrypting the
-	/// secret key with the wallet password.
-	pub fn create_derived(
-		mnemonic: &str,
-		password: &str,
-		account: u32,
-	) -> Result<(NostrIdentity, Keys), IdentityError> {
-		let keys = Self::derive_keys(mnemonic, account)?;
-		let identity = Self::from_keys(&keys, password, IdentitySource::Derived, account)?;
-		Ok((identity, keys))
-	}
-
 	/// Build an identity from already-unlocked keys under a (possibly
 	/// different) password — used when importing a backup that was exported
 	/// under another wallet's password.
@@ -166,15 +153,14 @@ impl NostrIdentity {
 		keys: &Keys,
 		password: &str,
 		source: IdentitySource,
-		account: u32,
 	) -> Result<NostrIdentity, IdentityError> {
-		Self::from_keys(keys, password, source, account)
+		Self::from_keys(keys, password, source)
 	}

 	/// Create a brand-new random identity, independent of the wallet seed.
 	pub fn create_random(password: &str) -> Result<(NostrIdentity, Keys), IdentityError> {
 		let keys = Keys::generate();
-		let identity = Self::from_keys(&keys, password, IdentitySource::Random, 0)?;
+		let identity = Self::from_keys(&keys, password, IdentitySource::Random)?;
 		Ok((identity, keys))
 	}

@@ -186,7 +172,7 @@ impl NostrIdentity {
 		let secret = SecretKey::parse(nsec.trim())
 			.map_err(|e| IdentityError::Key(format!("invalid nsec: {e}")))?;
 		let keys = Keys::new(secret);
-		let identity = Self::from_keys(&keys, password, IdentitySource::Imported, 0)?;
+		let identity = Self::from_keys(&keys, password, IdentitySource::Imported)?;
 		Ok((identity, keys))
 	}

@@ -194,7 +180,6 @@ impl NostrIdentity {
 		keys: &Keys,
 		password: &str,
 		source: IdentitySource,
-		account: u32,
 	) -> Result<NostrIdentity, IdentityError> {
 		let encrypted = EncryptedSecretKey::new(
 			keys.secret_key(),
@@ -213,12 +198,12 @@ impl NostrIdentity {
 		Ok(NostrIdentity {
 			ver: 1,
 			source,
-			derivation_account: account,
 			ncryptsec,
 			npub,
 			nip05: None,
 			anonymous: true,
 			prev_npubs: Vec::new(),
+			dm_relays: Vec::new(),
 		})
 	}

@@ -243,6 +228,67 @@ impl NostrIdentity {
 			.map_err(|e| IdentityError::Key(format!("bech32 failed: {e}")))?;
 		Ok(())
 	}
+
+	/// A single, fully-encrypted, portable backup of this identity (the contents
+	/// of a `GOBLIN-*.backup` file). Two sealed layers, no plaintext: the secret
+	/// key is the password-protected NIP-49 ncryptsec, and the rest of the
+	/// identity (username, history, source) is NIP-44-sealed to our own key. An
+	/// outside party sees only ciphertext — no npub, no name. Any Goblin wallet
+	/// reopens it with the backup's password. `keys` must be this identity's
+	/// unlocked keys (the caller unlocks with the password first).
+	pub fn to_encrypted_backup(&self, keys: &Keys) -> Result<String, IdentityError> {
+		let json = serde_json::to_string(self)?;
+		let sealed = nip44::encrypt(
+			keys.secret_key(),
+			&keys.public_key(),
+			json,
+			nip44::Version::V2,
+		)
+		.map_err(|e| IdentityError::Key(format!("seal failed: {e}")))?;
+		let envelope = serde_json::json!({
+			"goblin_backup": 1,
+			"k": self.ncryptsec,
+			"d": sealed,
+		});
+		serde_json::to_string(&envelope).map_err(IdentityError::from)
+	}
+
+	/// True if `s` is a Goblin encrypted-backup envelope (vs a bare nsec or the
+	/// legacy plaintext identity JSON).
+	pub fn is_encrypted_backup(s: &str) -> bool {
+		serde_json::from_str::<serde_json::Value>(s.trim())
+			.ok()
+			.and_then(|v| v.get("goblin_backup").cloned())
+			.is_some()
+	}
+
+	/// Open an encrypted backup with its password, returning the embedded
+	/// identity and its unlocked keys.
+	pub fn from_encrypted_backup(
+		envelope: &str,
+		password: &str,
+	) -> Result<(NostrIdentity, Keys), IdentityError> {
+		let v: serde_json::Value = serde_json::from_str(envelope.trim())?;
+		let k = v
+			.get("k")
+			.and_then(|x| x.as_str())
+			.ok_or_else(|| IdentityError::Key("backup missing key".into()))?;
+		let d = v
+			.get("d")
+			.and_then(|x| x.as_str())
+			.ok_or_else(|| IdentityError::Key("backup missing data".into()))?;
+		// Unlock the wrapper key with the password, then open the sealed JSON.
+		let enc = EncryptedSecretKey::from_bech32(k)
+			.map_err(|e| IdentityError::Key(format!("invalid backup: {e}")))?;
+		let secret = enc
+			.decrypt(password)
+			.map_err(|_| IdentityError::WrongPassword)?;
+		let keys = Keys::new(secret);
+		let json = nip44::decrypt(keys.secret_key(), &keys.public_key(), d)
+			.map_err(|_| IdentityError::WrongPassword)?;
+		let identity: NostrIdentity = serde_json::from_str(&json)?;
+		Ok((identity, keys))
+	}
 }

 #[cfg(test)]
@@ -256,18 +302,33 @@ mod tests {
 		let json = serde_json::to_string(&a).unwrap();
 		let parsed: NostrIdentity = serde_json::from_str(&json).unwrap();
 		let keys = parsed.unlock("old-pw").unwrap();
-		let b = NostrIdentity::from_unlocked_keys(
-			&keys,
-			"new-pw",
-			parsed.source,
-			parsed.derivation_account,
-		)
-		.unwrap();
+		let b = NostrIdentity::from_unlocked_keys(&keys, "new-pw", parsed.source).unwrap();
 		assert_eq!(b.npub, a.npub);
 		assert!(b.unlock("new-pw").is_ok());
 		assert!(b.unlock("old-pw").is_err());
 	}

+	#[test]
+	fn encrypted_backup_roundtrips_and_is_opaque() {
+		// A .backup file: sealed under one password, reopened with it. The
+		// envelope must carry no plaintext npub/name, and a wrong password fails.
+		let (mut a, keys) = NostrIdentity::create_random("pw-1").unwrap();
+		a.nip05 = Some("jimbob@goblin.st".to_string());
+		a.anonymous = false;
+		let envelope = a.to_encrypted_backup(&keys).unwrap();
+		assert!(NostrIdentity::is_encrypted_backup(&envelope));
+		// Opaque: neither the public key nor the username leaks in the file.
+		assert!(!envelope.contains(&a.npub));
+		assert!(!envelope.contains("jimbob"));
+		// Reopen with the password → same identity.
+		let (restored, rkeys) = NostrIdentity::from_encrypted_backup(&envelope, "pw-1").unwrap();
+		assert_eq!(restored.npub, a.npub);
+		assert_eq!(restored.nip05.as_deref(), Some("jimbob@goblin.st"));
+		assert_eq!(rkeys.public_key(), keys.public_key());
+		// Wrong password can't open it.
+		assert!(NostrIdentity::from_encrypted_backup(&envelope, "wrong").is_err());
+	}
+
 	#[test]
 	fn random_identities_are_unlinked_and_unlock() {
 		let (a, ka) = NostrIdentity::create_random("pw-1").unwrap();
@@ -281,21 +342,10 @@ mod tests {
 		assert!(a.unlock("wrong").is_err());
 	}

-	// NIP-06 test vector: this mnemonic must derive this npub (account 0).
-	const NIP06_MNEMONIC: &str =
-		"leader monkey parrot ring guide accident before fence cannon height naive bean";
-	const NIP06_NPUB: &str = "npub1zutzeysacnf9rru6zqwmxd54mud0k44tst6l70ja5mhv8jjumytsd2x7nu";
-
-	#[test]
-	fn nip06_derivation_vector() {
-		let keys = NostrIdentity::derive_keys(NIP06_MNEMONIC, 0).unwrap();
-		assert_eq!(keys.public_key().to_bech32().unwrap(), NIP06_NPUB);
-	}
-
 	#[test]
 	fn encrypt_unlock_roundtrip() {
-		let (identity, keys) = NostrIdentity::create_derived(NIP06_MNEMONIC, "hunter2", 0).unwrap();
-		assert_eq!(identity.source, IdentitySource::Derived);
+		let (identity, keys) = NostrIdentity::create_random("hunter2").unwrap();
+		assert_eq!(identity.source, IdentitySource::Random);
 		assert!(identity.anonymous);
 		let unlocked = identity.unlock("hunter2").unwrap();
 		assert_eq!(unlocked.public_key(), keys.public_key());
@@ -318,7 +368,7 @@ mod tests {
 	fn identity_file_is_owner_only() {
 		use std::os::unix::fs::PermissionsExt;
 		let dir = std::env::temp_dir().join(format!("goblin-id-test-{}", std::process::id()));
-		let (identity, _) = NostrIdentity::create_derived(NIP06_MNEMONIC, "pw", 0).unwrap();
+		let (identity, _) = NostrIdentity::create_random("pw").unwrap();
 		identity.save(&dir).unwrap();
 		let meta = std::fs::metadata(NostrIdentity::path(&dir)).unwrap();
 		// The ncryptsec blob must never be group/world readable.
@@ -332,7 +382,7 @@ mod tests {

 	#[test]
 	fn reencrypt_changes_password() {
-		let (mut identity, keys) = NostrIdentity::create_derived(NIP06_MNEMONIC, "old", 0).unwrap();
+		let (mut identity, keys) = NostrIdentity::create_random("old").unwrap();
 		identity.reencrypt("old", "new").unwrap();
 		assert!(identity.unlock("old").is_err());
 		assert_eq!(
@@ -269,6 +269,25 @@ mod tests {
 		assert!(matches!(decide(&c), IngestDecision::Drop(_)));
 	}

+	#[test]
+	fn s2_on_cancelled_send_drops() {
+		// Safety backstop for the cancel/reclaim race: once a manual "Cancel
+		// payment" (or 24h expiry) marks the meta Cancelled, a late S2 from a
+		// recipient who finally came online must be DROPPED — never re-finalized
+		// onto outputs the sender already reclaimed.
+		let m = meta(NostrTxDirection::Sent, NostrSendStatus::Cancelled, ALICE);
+		let c = ctx(SlateState::Standard2, 100, ALICE, Some(&m), true);
+		assert!(matches!(decide(&c), IngestDecision::Drop(_)));
+	}
+
+	#[test]
+	fn s2_on_finalized_send_drops() {
+		// Idempotency: a duplicate S2 after we already finalized is dropped.
+		let m = meta(NostrTxDirection::Sent, NostrSendStatus::Finalized, ALICE);
+		let c = ctx(SlateState::Standard2, 100, ALICE, Some(&m), true);
+		assert!(matches!(decide(&c), IngestDecision::Drop(_)));
+	}
+
 	#[test]
 	fn s2_finalizes_from_pre_dispatch_states() {
 		// Created/SendFailed are deliberately accepted: a crash between
@@ -22,6 +22,7 @@ pub use types::*;
 pub mod config;
 pub use config::{AcceptPolicy, NostrConfig};

+pub mod pool;
 pub mod relays;

 mod store;
@@ -33,6 +34,8 @@ pub use identity::{IdentitySource, NostrIdentity};
 pub mod protocol;
 pub use protocol::*;

+pub mod wrapv3;
+
 pub mod ingest;
 pub use ingest::*;

@@ -41,3 +44,5 @@ pub use client::{NostrProfile, NostrService, send_phase};

 pub mod avatar;
 pub mod nip05;
+
+pub mod payuri;
@@ -13,7 +13,7 @@
 // limitations under the License.

 //! NIP-05 username resolution/verification and goblin.st registration,
-//! all HTTP routed through the Nym mixnet (the local SOCKS5 sidecar). Nothing
+//! all HTTP routed through the Nym mixnet (the in-process smolmix tunnel). Nothing
 //! here touches clearnet.

 use base64::Engine;
@@ -23,6 +23,32 @@ use sha2::{Digest, Sha256};

 use crate::nostr::relays::HOME_NIP05_DOMAIN;
 use crate::nym;
+use parking_lot::RwLock;
+
+/// The active name-authority "home" domain, mirrored here from the wallet config
+/// once per frame so resolution + display (some on worker threads) can read it
+/// without threading the config through every call site. `None` = the default
+/// (goblin.st). Federation: set this to another authority and bare names resolve
+/// there and own-domain names display without a domain suffix.
+static HOME_DOMAIN: RwLock<Option<String>> = RwLock::new(None);
+
+/// Mirror the configured name authority's host (e.g. `goblin.st`). Empty resets
+/// to the default.
+pub fn set_home_domain(domain: &str) {
+	*HOME_DOMAIN.write() = if domain.trim().is_empty() {
+		None
+	} else {
+		Some(domain.trim().to_lowercase())
+	};
+}
+
+/// The current name-authority home domain (configured or the goblin.st default).
+pub fn home_domain() -> String {
+	HOME_DOMAIN
+		.read()
+		.clone()
+		.unwrap_or_else(|| HOME_NIP05_DOMAIN.to_string())
+}

 /// Result of resolving a NIP-05 identifier.
 #[derive(Debug, Clone)]
@@ -47,7 +73,7 @@ pub fn split_identifier(input: &str) -> Option<(String, String)> {
 			Some((name.to_lowercase(), domain))
 		}
 		Some(_) => None,
-		None => Some((trimmed.to_lowercase(), HOME_NIP05_DOMAIN.to_string())),
+		None => Some((trimmed.to_lowercase(), home_domain())),
 	}
 }

@@ -80,6 +106,28 @@ pub async fn resolve(name: &str, domain: &str) -> Option<Nip05Resolution> {
 	parse_well_known(&body, name)
 }

+/// Reverse lookup against an authority: the active `@name` a pubkey holds, if
+/// any. Authoritative and single-request — unlike fetching the peer's kind-0 off
+/// a relay and verifying the NIP-05 it advertises, this needs no profile fetch,
+/// so a contact's name resolves even when their profile can't be retrieved.
+/// `Some(name)` = server-confirmed; `None` = the key has no name on this
+/// authority OR the server was unreachable (the two are indistinguishable here,
+/// so callers must NOT treat `None` as "released" — fall back to the kind-0 +
+/// verify path, which can tell a definitive miss from a network blip).
+pub async fn name_by_pubkey(domain: &str, pubkey_hex: &str) -> Option<String> {
+	let url = format!(
+		"https://{}/api/v1/by-pubkey/{}",
+		domain,
+		urlencode(pubkey_hex)
+	);
+	let body = nym::http_request("GET", url, None, vec![]).await?;
+	let doc: Value = serde_json::from_str(&body).ok()?;
+	doc.get("name")
+		.and_then(|v| v.as_str())
+		.filter(|s| !s.is_empty())
+		.map(|s| s.to_string())
+}
+
 /// Verify that a pubkey matches its claimed NIP-05 identifier.
 pub async fn verify(pubkey: &PublicKey, name: &str, domain: &str) -> bool {
 	match resolve(name, domain).await {
@@ -88,6 +136,52 @@ pub async fn verify(pubkey: &PublicKey, name: &str, domain: &str) -> bool {
 	}
 }

+/// Outcome of re-checking whether a name still belongs to a key — distinguishes
+/// a definitive "no longer ours" from a transient network failure, so a cached
+/// name is only cleared when the server actually says it's gone/reassigned.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum Nip05Check {
+	/// Server reachable; the name maps to this key.
+	Verified,
+	/// Server reachable and answered, but the name is absent or maps to a
+	/// DIFFERENT key (released, or reassigned to someone else).
+	Mismatch,
+	/// Couldn't reach/parse the server — unknown; keep what we have.
+	Unreachable,
+}
+
+/// Freshness-aware NIP-05 check (see [`Nip05Check`]). Only returns `Mismatch`
+/// when the server gives a well-formed answer that doesn't include this key —
+/// any network error or non-well-known response is `Unreachable`.
+pub async fn check(pubkey: &PublicKey, name: &str, domain: &str) -> Nip05Check {
+	let url = format!(
+		"https://{}/.well-known/nostr.json?name={}",
+		domain,
+		urlencode(name)
+	);
+	let Some(body) = nym::http_request("GET", url, None, vec![]).await else {
+		return Nip05Check::Unreachable;
+	};
+	check_body(&body, pubkey, name)
+}
+
+/// Decide a [`Nip05Check`] from a fetched well-known body (split out for tests).
+fn check_body(body: &str, pubkey: &PublicKey, name: &str) -> Nip05Check {
+	// A reachable server that returns non-JSON, or a doc without a `names` map,
+	// is treated as Unreachable — never clear a good name on a server hiccup.
+	let Ok(doc) = serde_json::from_str::<Value>(body) else {
+		return Nip05Check::Unreachable;
+	};
+	let Some(names) = doc.get("names").and_then(|n| n.as_object()) else {
+		return Nip05Check::Unreachable;
+	};
+	match names.get(name).and_then(|v| v.as_str()) {
+		Some(hex) if PublicKey::from_hex(hex).ok().as_ref() == Some(pubkey) => Nip05Check::Verified,
+		// Name absent, or present but a different key → definitively not ours.
+		_ => Nip05Check::Mismatch,
+	}
+}
+
 /// Parse a .well-known/nostr.json document for a specific name.
 pub fn parse_well_known(body: &str, name: &str) -> Option<Nip05Resolution> {
 	let doc: Value = serde_json::from_str(body).ok()?;
@@ -211,48 +305,6 @@ pub async fn register(server: &str, name: &str, keys: &Keys) -> RegisterResult {
 	}
 }

-/// Atomically move an owned name to a new pubkey (key rotation).
-/// Signed by the OLD key; the server enforces ownership and the
-/// one-name-per-pubkey rule for the target key.
-pub async fn transfer(
-	server: &str,
-	name: &str,
-	old_keys: &Keys,
-	new_pubkey_hex: &str,
-) -> Result<(), String> {
-	let server = server.trim_end_matches('/');
-	let url = format!("{}/api/v1/transfer", server);
-	let body = serde_json::json!({
-		"name": name.to_lowercase(),
-		"new_pubkey": new_pubkey_hex,
-	})
-	.to_string();
-	let Some(auth) = nip98_auth(old_keys, &url, "POST", Some(body.as_bytes())) else {
-		return Err("auth event build failed".to_string());
-	};
-	let headers = vec![
-		("Authorization".to_string(), auth),
-		("Content-Type".to_string(), "application/json".to_string()),
-	];
-	let Some(resp) = nym::http_request("POST", url, Some(body), headers).await else {
-		return Err("network unavailable".to_string());
-	};
-	if resp.contains("\"transferred\":true") {
-		return Ok(());
-	}
-	let err = serde_json::from_str::<Value>(&resp)
-		.ok()
-		.and_then(|d| d.get("error").and_then(|e| e.as_str()).map(String::from))
-		.unwrap_or_else(|| {
-			if resp.trim().is_empty() {
-				"name server does not support transfer yet".to_string()
-			} else {
-				format!("unexpected response: {}", resp)
-			}
-		});
-	Err(err)
-}
-
 /// Release a registered name (NIP-98 authed by the owner).
 pub async fn unregister(server: &str, name: &str, keys: &Keys) -> Result<(), String> {
 	let server = server.trim_end_matches('/');
@@ -271,57 +323,6 @@ pub async fn unregister(server: &str, name: &str, keys: &Keys) -> Result<(), Str
 	}
 }

-/// Upload a processed avatar PNG for an owned name. Returns the content
-/// hash on success. NIP-98 payload hashing makes the request replay-proof.
-pub async fn upload_avatar(
-	server: &str,
-	name: &str,
-	keys: &Keys,
-	png: Vec<u8>,
-) -> Result<String, String> {
-	let server = server.trim_end_matches('/');
-	let url = format!("{}/api/v1/avatar/{}", server, urlencode(name));
-	let Some(auth) = nip98_auth(keys, &url, "POST", Some(&png)) else {
-		return Err("couldn't sign the request".to_string());
-	};
-	let headers = vec![
-		("Authorization".to_string(), auth),
-		(
-			"Content-Type".to_string(),
-			"application/octet-stream".to_string(),
-		),
-	];
-	match nym::http_request_bytes("POST", url, Some(png), headers).await {
-		Some((201, raw)) => serde_json::from_slice::<serde_json::Value>(&raw)
-			.ok()
-			.and_then(|v| v.get("avatar").and_then(|h| h.as_str()).map(String::from))
-			.ok_or_else(|| "unexpected server response".to_string()),
-		Some((429, _)) => Err("Avatar limit reached — try again tomorrow".to_string()),
-		Some((413, _)) => Err("Image too large".to_string()),
-		Some((422, _)) => Err("That file doesn't look like a usable image".to_string()),
-		Some((code, raw)) => Err(serde_json::from_slice::<serde_json::Value>(&raw)
-			.ok()
-			.and_then(|v| v.get("error").and_then(|e| e.as_str()).map(String::from))
-			.unwrap_or_else(|| format!("server error ({code})"))),
-		None => Err("network unreachable".to_string()),
-	}
-}
-
-/// Remove the avatar for an owned name.
-pub async fn delete_avatar(server: &str, name: &str, keys: &Keys) -> Result<(), String> {
-	let server = server.trim_end_matches('/');
-	let url = format!("{}/api/v1/avatar/{}", server, urlencode(name));
-	let Some(auth) = nip98_auth(keys, &url, "DELETE", None) else {
-		return Err("couldn't sign the request".to_string());
-	};
-	let headers = vec![("Authorization".to_string(), auth)];
-	match nym::http_request_bytes("DELETE", url, None, headers).await {
-		Some((200, _)) => Ok(()),
-		Some((code, _)) => Err(format!("server error ({code})")),
-		None => Err("network unreachable".to_string()),
-	}
-}
-
 /// Public profile probe: `None` = network failure, `Some(None)` = name has
 /// no avatar (or no such name), `Some(Some(hash))` = avatar content hash.
 pub async fn fetch_profile(server: &str, name: &str) -> Option<Option<String>> {
@@ -396,11 +397,43 @@ mod tests {
 	fn parses_well_known() {
 		let body = r#"{
 			"names": {"ada": "91cf9dbbea5e6511fd2bbb190b112055ee4131c5d2bbb9faedf3ee8cbeac0d05"},
-			"relays": {"91cf9dbbea5e6511fd2bbb190b112055ee4131c5d2bbb9faedf3ee8cbeac0d05": ["wss://nrelay.us-ea.st"]}
+			"relays": {"91cf9dbbea5e6511fd2bbb190b112055ee4131c5d2bbb9faedf3ee8cbeac0d05": ["wss://relay.goblin.st"]}
 		}"#;
 		let res = parse_well_known(body, "ada").unwrap();
-		assert_eq!(res.relays, vec!["wss://nrelay.us-ea.st".to_string()]);
+		assert_eq!(res.relays, vec!["wss://relay.goblin.st".to_string()]);
 		assert!(parse_well_known(body, "bob").is_none());
 		assert!(parse_well_known("not json", "ada").is_none());
 	}
+
+	#[test]
+	fn check_body_classifies() {
+		let ada_hex = "91cf9dbbea5e6511fd2bbb190b112055ee4131c5d2bbb9faedf3ee8cbeac0d05";
+		let ada = PublicKey::from_hex(ada_hex).unwrap();
+		let other =
+			PublicKey::from_hex("0000000000000000000000000000000000000000000000000000000000000001")
+				.unwrap();
+		let body = format!(r#"{{"names":{{"ada":"{ada_hex}"}},"relays":{{}}}}"#);
+
+		// Name maps to this key → Verified.
+		assert_eq!(check_body(&body, &ada, "ada"), Nip05Check::Verified);
+		// Name present but a DIFFERENT key (reassigned) → Mismatch.
+		assert_eq!(check_body(&body, &other, "ada"), Nip05Check::Mismatch);
+		// Name absent from a valid doc (released) → Mismatch.
+		assert_eq!(check_body(&body, &ada, "bob"), Nip05Check::Mismatch);
+		// Empty names map (the exact "released" shape) → Mismatch.
+		assert_eq!(
+			check_body(r#"{"names":{},"relays":{}}"#, &ada, "testuser"),
+			Nip05Check::Mismatch
+		);
+		// Non-JSON / server error → Unreachable (never clears a good name).
+		assert_eq!(
+			check_body("503 Service Unavailable", &ada, "ada"),
+			Nip05Check::Unreachable
+		);
+		// Valid JSON but no `names` map (unexpected response) → Unreachable.
+		assert_eq!(
+			check_body(r#"{"error":"oops"}"#, &ada, "ada"),
+			Nip05Check::Unreachable
+		);
+	}
 }
@@ -0,0 +1,385 @@
+// Copyright 2026 The Goblin Developers
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//! Pay-URI parser for scanned payment QRs.
+//!
+//! A GoblinPay checkout QR extends the plain `nostr:` URI with an optional
+//! amount (and memo):
+//!
+//! ```text
+//! nostr:<nprofile-or-npub>?amount=<decimal GRIN>&memo=<percent-encoded>
+//! ```
+//!
+//! This module is a PURE, side-effect-free parser over UNTRUSTED scan input.
+//! It never sends, never resolves — it only extracts a recipient string to
+//! feed the existing recipient resolver plus a validated amount/memo to
+//! prefill. Every failure mode degrades to "recipient only, manual amount"
+//! (fail-closed): a bad amount is dropped, a bad memo is dropped, and a
+//! non-`nostr:` payload is returned verbatim exactly as the scanner treated it
+//! before this URI existed.
+//!
+//! Trust model: the recipient bech32 is the ONLY trust anchor (verified later
+//! by the resolver). Amount, memo and any relay hints are untrusted hints.
+
+use grin_core::core::amount_from_hr_string;
+
+/// Total scanned-payload byte cap. Anything larger is abuse, not an address.
+const MAX_URI_LEN: usize = 4096;
+/// Memo byte cap (post control-strip), display / tx-message only.
+const MAX_MEMO_BYTES: usize = 256;
+
+/// A parsed pay-URI. `recipient` is fed to the existing resolver as-is (the
+/// bech32/name that used to go straight into the search box). `amount` is the
+/// raw decimal-GRIN string, present only when `amount_from_hr_string` accepted
+/// it and it is strictly positive. `memo` is already control-stripped and
+/// length-capped.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct PayUri {
+	pub recipient: String,
+	pub amount: Option<String>,
+	pub memo: Option<String>,
+}
+
+impl PayUri {
+	/// A recipient-only result with no prefilled amount/memo (today's behavior).
+	fn bare(recipient: String) -> Self {
+		PayUri {
+			recipient,
+			amount: None,
+			memo: None,
+		}
+	}
+}
+
+/// Parse a scanned payload into a [`PayUri`]. Pure and total: never panics,
+/// never performs I/O, always returns a value. On any problem it falls back to
+/// recipient-only (fail-closed).
+pub fn parse(scanned: &str) -> PayUri {
+	let text = scanned.trim();
+
+	// Fail closed on clear abuse: oversize payload or an embedded NUL. Return
+	// nothing usable rather than feeding a hostile blob to the resolver.
+	if text.len() > MAX_URI_LEN || text.as_bytes().contains(&0) {
+		return PayUri::bare(String::new());
+	}
+
+	// Strict scheme: only the `nostr:` prefix (case-insensitive) unlocks
+	// amount/memo parsing, matching the scanner's existing strip logic. Any
+	// other payload (a bare npub, or some other scheme) is returned verbatim,
+	// exactly as the scanner treated it before pay-URIs existed.
+	let rest = match strip_nostr_prefix(text) {
+		Some(rest) => rest,
+		None => return PayUri::bare(text.to_string()),
+	};
+
+	// Split `<recipient>?<query>`. A bare `nostr:<nprofile>` has no `?`, so the
+	// whole remainder is the recipient — identical to the pre-URI behavior.
+	let (recipient, query) = match rest.split_once('?') {
+		Some((r, q)) => (r.to_string(), Some(q)),
+		None => (rest.to_string(), None),
+	};
+
+	let mut amount = None;
+	let mut memo = None;
+	if let Some(query) = query {
+		for pair in query.split('&') {
+			let Some((key, val)) = pair.split_once('=') else {
+				continue; // valueless / malformed segment — ignore
+			};
+			match key {
+				// First occurrence wins; later duplicates are ignored so a
+				// second `amount=` can't override a validated one.
+				"amount" if amount.is_none() => amount = validate_amount(val),
+				"memo" if memo.is_none() => memo = validate_memo(val),
+				// Unknown params are ignored for forward-compat.
+				_ => {}
+			}
+		}
+	}
+
+	PayUri {
+		recipient,
+		amount,
+		memo,
+	}
+}
+
+/// Strip a case-insensitive `nostr:` scheme prefix, returning the remainder.
+/// Byte-safe against a leading multibyte char (no `[..6]` slice panic).
+fn strip_nostr_prefix(text: &str) -> Option<&str> {
+	let head = text.get(..6)?;
+	if head.eq_ignore_ascii_case("nostr:") {
+		Some(&text[6..])
+	} else {
+		None
+	}
+}
+
+/// Validate an `amount` value: percent-decode, then accept it ONLY if the
+/// wallet's own `amount_from_hr_string` parses it to a strictly positive
+/// atomic amount. Never custom float parsing; any error → `None` (fall back to
+/// manual entry). Returns the clean decoded decimal string on success.
+fn validate_amount(raw: &str) -> Option<String> {
+	let decoded = String::from_utf8_lossy(&percent_decode(raw)).into_owned();
+	match amount_from_hr_string(&decoded) {
+		Ok(atomic) if atomic > 0 => Some(decoded),
+		_ => None,
+	}
+}
+
+/// Validate a `memo` value: percent-decode, strip ASCII control chars and
+/// newlines (untrusted free text — display / tx-message only, never a path or
+/// route), then hard-cap at [`MAX_MEMO_BYTES`] on a UTF-8 boundary. Empty →
+/// `None`.
+fn validate_memo(raw: &str) -> Option<String> {
+	let decoded = percent_decode(raw);
+	// Drop ASCII control bytes (< 0x20, covering NUL / newline / tab) and DEL.
+	let cleaned: Vec<u8> = decoded
+		.into_iter()
+		.filter(|&b| b >= 0x20 && b != 0x7f)
+		.collect();
+	let text = String::from_utf8_lossy(&cleaned).into_owned();
+	let text = truncate_on_char_boundary(text, MAX_MEMO_BYTES);
+	let text = text.trim().to_string();
+	if text.is_empty() { None } else { Some(text) }
+}
+
+/// Truncate a string to at most `max` bytes without splitting a UTF-8 char.
+fn truncate_on_char_boundary(s: String, max: usize) -> String {
+	if s.len() <= max {
+		return s;
+	}
+	let mut end = max;
+	while end > 0 && !s.is_char_boundary(end) {
+		end -= 1;
+	}
+	s[..end].to_string()
+}
+
+/// Minimal, correct RFC-3986 percent-decode over bytes. `%XX` (hex) becomes one
+/// byte; a stray `%` or a non-hex escape is passed through literally. No new
+/// dependency — the wallet has no direct percent-encoding crate and this is a
+/// few lines. `+` is left literal (RFC-3986 query, not form-encoding).
+fn percent_decode(s: &str) -> Vec<u8> {
+	let bytes = s.as_bytes();
+	let mut out = Vec::with_capacity(bytes.len());
+	let mut i = 0;
+	while i < bytes.len() {
+		if bytes[i] == b'%' && i + 2 < bytes.len() {
+			if let (Some(hi), Some(lo)) = (hex_val(bytes[i + 1]), hex_val(bytes[i + 2])) {
+				out.push((hi << 4) | lo);
+				i += 3;
+				continue;
+			}
+		}
+		out.push(bytes[i]);
+		i += 1;
+	}
+	out
+}
+
+/// Hex-nibble value for an ASCII hex digit, or `None`.
+fn hex_val(b: u8) -> Option<u8> {
+	match b {
+		b'0'..=b'9' => Some(b - b'0'),
+		b'a'..=b'f' => Some(b - b'a' + 10),
+		b'A'..=b'F' => Some(b - b'A' + 10),
+		_ => None,
+	}
+}
+
+#[cfg(test)]
+mod tests {
+	use super::*;
+
+	const NPROFILE: &str =
+		"nprofile1qqsw3v0m5v6h9q8n0hkxg6l4l5xk2z7z0n6f6q9m8x0q5v4l3k2j1h0gpz3mhxue69uhhyetvv9uju";
+
+	#[test]
+	fn bare_nprofile_unchanged() {
+		let uri = format!("nostr:{NPROFILE}");
+		let out = parse(&uri);
+		assert_eq!(out.recipient, NPROFILE);
+		assert_eq!(out.amount, None);
+		assert_eq!(out.memo, None);
+	}
+
+	#[test]
+	fn bare_npub_no_scheme_is_verbatim() {
+		// No scheme at all → returned exactly as today (fed to the resolver).
+		let out = parse("npub1abcdef");
+		assert_eq!(out.recipient, "npub1abcdef");
+		assert_eq!(out.amount, None);
+		assert_eq!(out.memo, None);
+	}
+
+	#[test]
+	fn uppercase_scheme_accepted() {
+		let out = parse(&format!("NOSTR:{NPROFILE}?amount=2"));
+		assert_eq!(out.recipient, NPROFILE);
+		assert_eq!(out.amount.as_deref(), Some("2"));
+	}
+
+	#[test]
+	fn with_amount() {
+		let out = parse(&format!("nostr:{NPROFILE}?amount=1.5"));
+		assert_eq!(out.recipient, NPROFILE);
+		assert_eq!(out.amount.as_deref(), Some("1.5"));
+		assert_eq!(out.memo, None);
+	}
+
+	#[test]
+	fn with_amount_and_memo() {
+		let out = parse(&format!("nostr:{NPROFILE}?amount=0.25&memo=Coffee"));
+		assert_eq!(out.recipient, NPROFILE);
+		assert_eq!(out.amount.as_deref(), Some("0.25"));
+		assert_eq!(out.memo.as_deref(), Some("Coffee"));
+	}
+
+	#[test]
+	fn negative_amount_rejected() {
+		let out = parse(&format!("nostr:{NPROFILE}?amount=-1"));
+		assert_eq!(out.recipient, NPROFILE);
+		assert_eq!(out.amount, None);
+	}
+
+	#[test]
+	fn zero_and_empty_amount_rejected() {
+		assert_eq!(parse(&format!("nostr:{NPROFILE}?amount=0")).amount, None);
+		assert_eq!(parse(&format!("nostr:{NPROFILE}?amount=")).amount, None);
+	}
+
+	#[test]
+	fn garbage_amount_rejected() {
+		for bad in ["abc", "1.5xyz", "1,5", "0x10", "1 5", " 1"] {
+			let out = parse(&format!("nostr:{NPROFILE}?amount={bad}"));
+			assert_eq!(out.amount, None, "expected {bad:?} to be rejected");
+		}
+	}
+
+	#[test]
+	fn overlong_memo_truncated() {
+		let long = "a".repeat(500);
+		let out = parse(&format!("nostr:{NPROFILE}?memo={long}"));
+		let memo = out.memo.expect("memo present");
+		assert_eq!(memo.len(), 256);
+		assert!(memo.bytes().all(|b| b == b'a'));
+	}
+
+	#[test]
+	fn memo_control_chars_stripped() {
+		// Percent-encoded NUL, newline, tab and a raw CR are all removed.
+		let out = parse(&format!("nostr:{NPROFILE}?memo=A%00B%0AC%09D\rE"));
+		assert_eq!(out.memo.as_deref(), Some("ABCDE"));
+	}
+
+	#[test]
+	fn memo_percent_decoded() {
+		// "Hi there & co =2" with reserved chars percent-encoded.
+		let out = parse(&format!(
+			"nostr:{NPROFILE}?memo=Hi%20there%20%26%20co%20%3D2"
+		));
+		assert_eq!(out.memo.as_deref(), Some("Hi there & co =2"));
+	}
+
+	#[test]
+	fn non_nostr_scheme_treated_as_today() {
+		// A different scheme is NOT parsed for amount/memo; returned verbatim.
+		let out = parse("bitcoin:bc1qxyz?amount=1.5");
+		assert_eq!(out.recipient, "bitcoin:bc1qxyz?amount=1.5");
+		assert_eq!(out.amount, None);
+		assert_eq!(out.memo, None);
+	}
+
+	#[test]
+	fn unknown_params_ignored() {
+		let out = parse(&format!(
+			"nostr:{NPROFILE}?lightning=zzz&amount=3&foo=bar&memo=Hey"
+		));
+		assert_eq!(out.recipient, NPROFILE);
+		assert_eq!(out.amount.as_deref(), Some("3"));
+		assert_eq!(out.memo.as_deref(), Some("Hey"));
+	}
+
+	#[test]
+	fn over_length_rejected() {
+		let huge = format!("nostr:{}", "a".repeat(5000));
+		let out = parse(&huge);
+		assert_eq!(out.recipient, "");
+		assert_eq!(out.amount, None);
+		assert_eq!(out.memo, None);
+	}
+
+	#[test]
+	fn embedded_nul_rejected() {
+		let out = parse(&format!("nostr:{NPROFILE}\0?amount=1"));
+		assert_eq!(out.recipient, "");
+		assert_eq!(out.amount, None);
+	}
+
+	#[test]
+	fn duplicate_amount_first_wins() {
+		let out = parse(&format!("nostr:{NPROFILE}?amount=1&amount=999"));
+		assert_eq!(out.amount.as_deref(), Some("1"));
+	}
+
+	#[test]
+	fn leading_trailing_whitespace_trimmed() {
+		let out = parse(&format!("  nostr:{NPROFILE}?amount=1.5  "));
+		assert_eq!(out.recipient, NPROFILE);
+		assert_eq!(out.amount.as_deref(), Some("1.5"));
+	}
+
+	#[test]
+	fn empty_input_is_bare_empty() {
+		let out = parse("");
+		assert_eq!(out.recipient, "");
+		assert_eq!(out.amount, None);
+		assert_eq!(out.memo, None);
+	}
+
+	// --- magick.market interop contract -------------------------------------
+	// These guard the magick.market <-> Goblin pay-URI contract: a checkout QR
+	// from magick MUST parse here to the exact recipient / amount / memo. magick
+	// emits this canonical format from `buildGoblinPayUri` in src/lib/grin.ts,
+	// converting its internal integer nanogrin to a decimal-GRIN `amount` string
+	// and carrying the opaque `MM-<hex>` invoice number as the `memo`.
+
+	#[test]
+	fn magick_market_checkout_uri_round_trips() {
+		// 1_500_000_000 nanogrin == "1.5" GRIN (magick's formatGrin() output);
+		// memo is the opaque invoice number that bridges payment <-> order.
+		let invoice = "MM-1A2B3C4D5E6F7A8B9C0D1E2F";
+		let uri = format!("nostr:{NPROFILE}?amount=1.5&memo={invoice}");
+		let out = parse(&uri);
+		assert_eq!(out.recipient, NPROFILE);
+		assert_eq!(out.amount.as_deref(), Some("1.5"));
+		assert_eq!(out.memo.as_deref(), Some(invoice));
+	}
+
+	#[test]
+	fn magick_market_amount_precision_range() {
+		// Whole GRIN and the smallest Grin unit (1 nanogrin == 0.000000001 GRIN),
+		// the two ends of the decimal-GRIN strings magick can emit.
+		let whole = parse(&format!("nostr:{NPROFILE}?amount=1&memo=MM-ABC123"));
+		assert_eq!(whole.amount.as_deref(), Some("1"));
+		assert_eq!(whole.memo.as_deref(), Some("MM-ABC123"));
+
+		let smallest = parse(&format!(
+			"nostr:{NPROFILE}?amount=0.000000001&memo=MM-ABC123"
+		));
+		assert_eq!(smallest.amount.as_deref(), Some("0.000000001"));
+		assert_eq!(smallest.memo.as_deref(), Some("MM-ABC123"));
+	}
+}
@@ -0,0 +1,558 @@
+// Copyright 2026 The Goblin Developers
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//! Relay candidate pool: a maintained list of vetted public relays fetched
+//! from the project gist over the Nym mixnet, cached on disk, with a pinned
+//! copy compiled in for first-run/offline. Pool relays are gated LAZILY: a
+//! NIP-11 probe (also over Nym) runs only right before a relay is actually
+//! used — no background sweeps.
+
+use lazy_static::lazy_static;
+use log::{info, warn};
+use parking_lot::RwLock;
+use serde_derive::{Deserialize, Serialize};
+use std::collections::HashMap;
+use std::path::PathBuf;
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::time::Duration;
+
+use crate::Settings;
+use crate::nostr::types::unix_time;
+
+/// Raw gist URL serving the maintained candidate pool (schema v1). Fetched
+/// UNSIGNED: authenticity rests on the gist account's public edit history.
+/// TODO(signing): verify a maintainer signature (minisign or a signed nostr
+/// event) before trusting a fetched pool.
+const POOL_URL: &str = "https://gist.githubusercontent.com/2ro/79cd885540c88d074fe52f8388a3e5b4/raw/goblin-relay-pool.json";
+
+/// Pool cache file name inside the app base dir (`~/.goblin`).
+const CACHE_FILE: &str = "relay-pool.json";
+
+/// Refresh the disk cache on start when older than this (7 days).
+const CACHE_MAX_AGE_SECS: u64 = 7 * 86_400;
+
+/// NIP-11 probe results are reused for this long (24 h, in memory).
+const PROBE_TTL_SECS: i64 = 24 * 3600;
+
+/// Per-probe cap: a dead relay must not stall the caller for the full mixnet
+/// HTTP timeout — a failed probe just skips the relay this time.
+const PROBE_TIMEOUT: Duration = Duration::from_secs(12);
+
+/// Gift-wrap size floor: a worst-case Goblin payment (30 KB slatepack) is a
+/// ~66 KB event on the wire, so a DM relay must accept at least 128 KiB
+/// messages for 2x headroom. The gist can only RAISE this, never lower it.
+pub const MIN_MESSAGE_LENGTH: u64 = 131_072;
+
+/// NIP-59 backdates wrap timestamps up to 2 days; a relay whose
+/// `created_at_lower_limit` is tighter than this rejects our wraps.
+const MIN_BACKDATE_SECS: u64 = 172_800;
+
+/// Pinned fallback pool, byte-for-byte the gist contents, so first-run and
+/// offline behave exactly like a fresh fetch.
+const PINNED_POOL: &str = r#"{
+  "version": 1,
+  "updated": "2026-07-02",
+  "notes": "Goblin wallet relay candidate pool. Clients verify each entry locally (NIP-11 probe) before use. Requirements: max_message_length >= 131072, no payment or auth required for writes, tolerates NIP-59 backdating. The optional per-relay 'exit' is that operator's co-located scoped mixnet exit (Recipient address): a MixnetStream the wallet dials directly to reach the relay with no public DNS and no public IPR — the fast money path.",
+  "min_message_length": 131072,
+  "relays": [
+    { "url": "wss://relay.floonet.dev", "roles": ["dm", "discovery"], "vetted": "2026-07-02", "exit": "EqbUPt7aYkar2CTmjBVnyWaKzb2WT8NdojUGXU4mrfNG.AF5YCD8hgEUqByamrPqZz72h7GE599LbqQrhaew9bBip@HfyUPUv4z8uMQoZYuZGMWf6oe2vaKBVPrfgHk6WvwFPe" },
+    { "url": "wss://relay.primal.net",   "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://relay.damus.io",     "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://nos.lol",            "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://relay.0xchat.com",   "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://offchain.pub",       "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://relay.snort.social", "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://nostr.mom",          "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://nostr.oxtr.dev",     "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://relay.nostr.net",    "roles": ["dm"],              "vetted": "2026-07-01" },
+    { "url": "wss://purplepag.es",           "roles": ["discovery"],   "vetted": "2026-07-01" },
+    { "url": "wss://indexer.coracle.social", "roles": ["discovery"],   "vetted": "2026-07-01" }
+  ]
+}"#;
+
+/// One pool entry.
+#[derive(Serialize, Deserialize, Clone, Debug)]
+pub struct PoolRelay {
+	pub url: String,
+	/// Roles: "dm" (gift-wrap inbox duty) and/or "discovery" (indexer for the
+	/// replaceable identity events 0/10002/10050 — never a wrap target).
+	pub roles: Vec<String>,
+	/// Last-vetted date; presence marks the entry as vetted.
+	#[serde(default)]
+	pub vetted: Option<String>,
+	/// This relay operator's CO-LOCATED Nym exit address, when they run one (the
+	/// bundled floonet-rs / floonet-strfry `exit = true` feature). It is a Nym
+	/// `Recipient` (`<client>.<enc>@<gateway>`) for a SCOPED MixnetStream proxy
+	/// that forwards ONLY to this relay — so the wallet can reach the relay over
+	/// the mixnet WITHOUT public DNS and WITHOUT depending on a public IPR exit
+	/// (the anchor; see [`crate::nym::nymproc`]). Absent → this relay is reached
+	/// the old way (public-IPR smolmix + in-tunnel DoT). Carried in the pinned
+	/// pool so the money-path default relay's exit bootstraps OFFLINE, before any
+	/// network — breaking the chicken-and-egg of learning it over the very path
+	/// it is meant to replace.
+	#[serde(default)]
+	pub exit: Option<String>,
+}
+
+impl PoolRelay {
+	fn has_role(&self, role: &str) -> bool {
+		self.roles.iter().any(|r| r == role)
+	}
+}
+
+/// The candidate pool (gist schema v1).
+#[derive(Serialize, Deserialize, Clone, Debug)]
+pub struct RelayPool {
+	pub version: u32,
+	pub updated: String,
+	pub min_message_length: u64,
+	pub relays: Vec<PoolRelay>,
+}
+
+impl RelayPool {
+	/// Parse and validate a pool document; `None` for anything unusable so the
+	/// caller falls back rather than trusting a broken or hostile file.
+	pub fn parse(raw: &str) -> Option<RelayPool> {
+		let pool: RelayPool = serde_json::from_str(raw).ok()?;
+		// Bound the probe/cache work a fetched file can demand.
+		if pool.version != 1 || pool.relays.is_empty() || pool.relays.len() > 64 {
+			return None;
+		}
+		Some(pool)
+	}
+
+	/// Entries carrying the "dm" role.
+	pub fn dm_relays(&self) -> Vec<PoolRelay> {
+		self.relays
+			.iter()
+			.filter(|r| r.has_role("dm"))
+			.cloned()
+			.collect()
+	}
+
+	/// Urls of entries carrying the "discovery" role.
+	pub fn discovery_relays(&self) -> Vec<String> {
+		self.relays
+			.iter()
+			.filter(|r| r.has_role("discovery"))
+			.map(|r| r.url.clone())
+			.collect()
+	}
+
+	/// The operator's co-located Nym exit address for `url`, if the pool
+	/// advertises one (url compared modulo a trailing slash). `None` → reach the
+	/// relay over the public-IPR path as before. This is how the wallet learns
+	/// the anchor exit for its money-path relay (see [`PoolRelay::exit`]).
+	pub fn exit_for(&self, url: &str) -> Option<String> {
+		let want = url.trim_end_matches('/');
+		self.relays
+			.iter()
+			.find(|r| r.url.trim_end_matches('/') == want)
+			.and_then(|r| r.exit.clone())
+			.filter(|e| !e.trim().is_empty())
+	}
+
+	/// Like [`Self::exit_for`], but keyed on the HOSTNAME — the HTTP dial site
+	/// ([`crate::nym::request_once`]) knows only `host`, never the relay's ws
+	/// URL. HTTPS to a host whose relay advertises a co-located exit (its
+	/// NIP-11 probe, in practice) rides that exit too.
+	pub fn exit_for_host(&self, host: &str) -> Option<String> {
+		self.relays
+			.iter()
+			.find(|r| {
+				url::Url::parse(&r.url)
+					.ok()
+					.and_then(|u| u.host_str().map(|h| h.eq_ignore_ascii_case(host)))
+					.unwrap_or(false)
+			})
+			.and_then(|r| r.exit.clone())
+			.filter(|e| !e.trim().is_empty())
+	}
+
+	/// Whether ANY relay in the pool advertises a co-located exit. The cold-start
+	/// sequencer ([`crate::nym::nymproc`]) reads this to decide whether to give
+	/// the scoped-exit client its bandwidth-grant head start before building the
+	/// public-IPR tunnel — no exit anywhere → no wait, unchanged behavior.
+	pub fn has_exit(&self) -> bool {
+		self.relays
+			.iter()
+			.any(|r| r.exit.as_deref().is_some_and(|e| !e.trim().is_empty()))
+	}
+}
+
+/// Disk path of the cached pool file.
+fn cache_path() -> PathBuf {
+	Settings::config_path(CACHE_FILE, None)
+}
+
+/// Current pool: the disk cache when present and valid, the pinned copy
+/// otherwise.
+pub fn load() -> RelayPool {
+	std::fs::read_to_string(cache_path())
+		.ok()
+		.and_then(|raw| RelayPool::parse(&raw))
+		// A cache written by a pre-exit build parses fine but hides the
+		// scoped-exit money path (and the current primary relay) for up to
+		// CACHE_MAX_AGE_SECS after an app update — relay connects then ride
+		// the slow public-IPR path for days. The pinned pool is newer than
+		// any exit-less file, so prefer it until the next gist refresh.
+		.filter(RelayPool::has_exit)
+		.unwrap_or_else(|| RelayPool::parse(PINNED_POOL).expect("pinned pool parses"))
+}
+
+/// Refresh the disk cache from the gist — over the Nym mixnet, like all other
+/// HTTP — when it is absent or older than 7 days. At most one attempt per app
+/// run; call only once the Nym tunnel is up.
+pub async fn refresh_if_stale() {
+	static TRIED: AtomicBool = AtomicBool::new(false);
+	if TRIED.swap(true, Ordering::SeqCst) {
+		return;
+	}
+	let path = cache_path();
+	let fresh = std::fs::metadata(&path)
+		.ok()
+		.and_then(|m| m.modified().ok())
+		.and_then(|t| t.elapsed().ok())
+		.map(|age| age.as_secs() < CACHE_MAX_AGE_SECS)
+		.unwrap_or(false)
+		// An exit-less cache predates the current pool shape (see `load`,
+		// which already ignores it) — replace it now instead of serving the
+		// pinned fallback for the rest of the file's 7 days.
+		&& std::fs::read_to_string(&path)
+			.ok()
+			.and_then(|raw| RelayPool::parse(&raw))
+			.is_some_and(|p| p.has_exit());
+	if fresh {
+		return;
+	}
+	let Some(raw) = crate::nym::http_request("GET", POOL_URL.to_string(), None, vec![]).await
+	else {
+		warn!("relay pool: refresh fetch failed, keeping current pool");
+		return;
+	};
+	match RelayPool::parse(&raw) {
+		Some(pool) => {
+			if let Err(e) = std::fs::write(&path, &raw) {
+				warn!("relay pool: cache write failed: {e}");
+			} else {
+				info!(
+					"relay pool: refreshed (v{}, {} relays, updated {})",
+					pool.version,
+					pool.relays.len(),
+					pool.updated
+				);
+			}
+		}
+		None => warn!("relay pool: fetched file failed validation, keeping current pool"),
+	}
+}
+
+lazy_static! {
+	/// Probe cache: url → (passed, checked_at unix secs).
+	static ref PROBES: RwLock<HashMap<String, (bool, i64)>> = RwLock::new(HashMap::new());
+}
+
+/// The NIP-11 gate: a pool relay is usable only when its info document does
+/// not advertise a constraint that breaks gift-wrapped payments. Absent
+/// fields pass (most relays publish sparse documents); `min_len` is the
+/// message-size floor.
+fn nip11_pass(doc: &serde_json::Value, min_len: u64) -> bool {
+	let lim = doc.get("limitation");
+	let field = |k: &str| lim.and_then(|l| l.get(k));
+	let off = |k: &str| !field(k).and_then(|v| v.as_bool()).unwrap_or(false);
+	// Our worst-case wrap must fit.
+	field("max_message_length")
+		.and_then(|v| v.as_u64())
+		.map(|n| n >= min_len)
+		.unwrap_or(true)
+		// Free, open writes; phase 1 speaks no NIP-42 AUTH.
+		&& off("payment_required")
+		&& off("restricted_writes")
+		&& off("auth_required")
+		// Must admit NIP-59's up-to-2-day backdated timestamps.
+		&& field("created_at_lower_limit")
+			.and_then(|v| v.as_u64())
+			.map(|n| n >= MIN_BACKDATE_SECS)
+			.unwrap_or(true)
+}
+
+/// Lazy per-use probe: fetch the relay's NIP-11 document (HTTP over Nym,
+/// `Accept: application/nostr+json`) and apply the gate. Results are cached
+/// for 24 h; an unreachable or unparseable document fails, which just skips
+/// the relay this time.
+pub async fn probe(url: &str) -> bool {
+	let now = unix_time();
+	if let Some(&(ok, at)) = PROBES.read().get(url)
+		&& now - at < PROBE_TTL_SECS
+	{
+		return ok;
+	}
+	let http_url = url
+		.replacen("wss://", "https://", 1)
+		.replacen("ws://", "http://", 1);
+	let min_len = load().min_message_length.max(MIN_MESSAGE_LENGTH);
+	let headers = vec![("Accept".to_string(), "application/nostr+json".to_string())];
+	let ok = tokio::time::timeout(
+		PROBE_TIMEOUT,
+		crate::nym::http_request("GET", http_url, None, headers),
+	)
+	.await
+	.ok()
+	.flatten()
+	.and_then(|body| serde_json::from_str::<serde_json::Value>(&body).ok())
+	.map(|doc| nip11_pass(&doc, min_len))
+	.unwrap_or(false);
+	if !ok {
+		info!("relay pool: NIP-11 gate failed for {url}, skipping");
+	}
+	PROBES.write().insert(url.to_string(), (ok, now));
+	ok
+}
+
+/// The pool's "discovery" relays that pass the lazy NIP-11 gate right now.
+pub async fn usable_discovery_relays() -> Vec<String> {
+	// Probe every candidate CONCURRENTLY (each is a NIP-11 HTTP round trip over
+	// the mixnet — sequentially this cost ~N × a full round trip). The PROBES
+	// cache is RwLock-safe under concurrent access. Zip the pass/fail results back
+	// to the urls and keep the passing ones in the original pool order.
+	let urls = load().discovery_relays();
+	let results = futures::future::join_all(urls.iter().map(|url| probe(url))).await;
+	urls.into_iter()
+		.zip(results)
+		.filter_map(|(url, ok)| ok.then_some(url))
+		.collect()
+}
+
+/// Weighted-random candidate ORDER for the advertised set: the Goblin relay
+/// first, then every "dm" candidate exactly once, drawn without replacement
+/// with vetted entries weighted 3:1. The caller walks the order and keeps the
+/// first candidates that pass the NIP-11 gate, so only relays about to be
+/// used are probed. `pick` receives the remaining total weight and returns a
+/// roll below it (injectable for tests).
+pub fn weighted_order(
+	goblin_relay: &str,
+	candidates: &[PoolRelay],
+	mut pick: impl FnMut(u64) -> u64,
+) -> Vec<String> {
+	let goblin = goblin_relay.trim_end_matches('/').to_string();
+	let mut out = vec![goblin.clone()];
+	let mut pool: Vec<(&PoolRelay, u64)> = candidates
+		.iter()
+		.filter(|r| r.url.trim_end_matches('/') != goblin)
+		.map(|r| (r, if r.vetted.is_some() { 3 } else { 1 }))
+		.collect();
+	while !pool.is_empty() {
+		let total: u64 = pool.iter().map(|(_, w)| w).sum();
+		let mut roll = pick(total) % total.max(1);
+		let idx = pool
+			.iter()
+			.position(|(_, w)| {
+				if roll < *w {
+					true
+				} else {
+					roll -= w;
+					false
+				}
+			})
+			.unwrap_or(0);
+		out.push(pool.remove(idx).0.url.clone());
+	}
+	out
+}
+
+#[cfg(test)]
+mod tests {
+	use super::*;
+
+	#[test]
+	fn pinned_pool_parses() {
+		let pool = RelayPool::parse(PINNED_POOL).expect("pinned pool must parse");
+		assert_eq!(pool.version, 1);
+		assert_eq!(pool.min_message_length, MIN_MESSAGE_LENGTH);
+		assert_eq!(pool.relays.len(), 12);
+		let dm = pool.dm_relays();
+		assert_eq!(dm.len(), 10);
+		assert!(dm.iter().any(|r| r.url == "wss://relay.floonet.dev"));
+		assert!(dm.iter().all(|r| r.vetted.is_some()));
+		let disc = pool.discovery_relays();
+		// relay.floonet.dev carries both roles; the two indexers
+		// are discovery-only.
+		assert_eq!(disc.len(), 3);
+		assert!(disc.contains(&"wss://purplepag.es".to_string()));
+		assert!(disc.contains(&"wss://indexer.coracle.social".to_string()));
+	}
+
+	#[test]
+	fn exit_field_is_optional_and_looked_up_by_url() {
+		// The pinned pool advertises the money-path relay's co-located scoped
+		// exit (the .AF floonet-mixexit) so it bootstraps OFFLINE, before any
+		// network; every other relay is exit-less (reached over the tunnel).
+		let pinned = RelayPool::parse(PINNED_POOL).unwrap();
+		assert!(pinned.has_exit());
+		assert!(pinned.exit_for("wss://relay.floonet.dev").is_some());
+		assert!(pinned.exit_for("wss://nos.lol").is_none());
+
+		// A pool that DOES advertise an exit for one relay.
+		let pool = RelayPool::parse(
+			r#"{"version":1,"updated":"x","min_message_length":131072,"relays":[
+			  {"url":"wss://relay.goblin.st/","roles":["dm"],"exit":"aaa.bbb@ccc"},
+			  {"url":"wss://nos.lol","roles":["dm"]},
+			  {"url":"wss://blank.example","roles":["dm"],"exit":"  "}
+			]}"#,
+		)
+		.unwrap();
+		// Trailing-slash-insensitive lookup.
+		assert_eq!(
+			pool.exit_for("wss://relay.goblin.st"),
+			Some("aaa.bbb@ccc".to_string())
+		);
+		// No exit field → None; blank exit → None (treated as unset).
+		assert!(pool.exit_for("wss://nos.lol").is_none());
+		assert!(pool.exit_for("wss://blank.example").is_none());
+		// Unknown url → None.
+		assert!(pool.exit_for("wss://unknown.example").is_none());
+
+		// Host-keyed lookup (the HTTP dial site): same answers by hostname.
+		assert_eq!(
+			pool.exit_for_host("relay.goblin.st"),
+			Some("aaa.bbb@ccc".to_string())
+		);
+		assert_eq!(
+			pool.exit_for_host("RELAY.GOBLIN.ST"),
+			Some("aaa.bbb@ccc".to_string())
+		);
+		assert!(pool.exit_for_host("nos.lol").is_none());
+		assert!(pool.exit_for_host("blank.example").is_none());
+		assert!(pool.exit_for_host("unknown.example").is_none());
+	}
+
+	#[test]
+	fn pool_validation_rejects_bad_documents() {
+		assert!(RelayPool::parse("not json").is_none());
+		assert!(RelayPool::parse("{}").is_none());
+		// Wrong schema version.
+		assert!(
+			RelayPool::parse(
+				r#"{"version":2,"updated":"x","min_message_length":1,
+				"relays":[{"url":"wss://a","roles":["dm"]}]}"#
+			)
+			.is_none()
+		);
+		// Empty relay list.
+		assert!(
+			RelayPool::parse(r#"{"version":1,"updated":"x","min_message_length":1,"relays":[]}"#)
+				.is_none()
+		);
+		// Unknown fields (like the gist's "notes") are tolerated; a missing
+		// "vetted" parses as unvetted.
+		let pool = RelayPool::parse(
+			r#"{"version":1,"updated":"x","notes":"n","min_message_length":131072,
+			"relays":[{"url":"wss://a","roles":["dm"]}]}"#,
+		)
+		.unwrap();
+		assert!(pool.relays[0].vetted.is_none());
+	}
+
+	fn doc(limitation: &str) -> serde_json::Value {
+		serde_json::from_str(&format!(r#"{{"name":"r","limitation":{limitation}}}"#)).unwrap()
+	}
+
+	#[test]
+	fn nip11_gate_predicate() {
+		let min = MIN_MESSAGE_LENGTH;
+		// Sparse documents pass: absent limitation and absent fields.
+		assert!(nip11_pass(&serde_json::json!({}), min));
+		assert!(nip11_pass(&doc("{}"), min));
+		// Size floor.
+		assert!(nip11_pass(&doc(r#"{"max_message_length":131072}"#), min));
+		assert!(nip11_pass(&doc(r#"{"max_message_length":1000000}"#), min));
+		assert!(!nip11_pass(&doc(r#"{"max_message_length":65535}"#), min));
+		// Paid / restricted / AUTH-gated relays fail; explicit false passes.
+		assert!(!nip11_pass(&doc(r#"{"payment_required":true}"#), min));
+		assert!(!nip11_pass(&doc(r#"{"restricted_writes":true}"#), min));
+		assert!(!nip11_pass(&doc(r#"{"auth_required":true}"#), min));
+		assert!(nip11_pass(
+			&doc(r#"{"payment_required":false,"auth_required":false}"#),
+			min
+		));
+		// created_at window must admit 2-day backdating.
+		assert!(nip11_pass(
+			&doc(r#"{"created_at_lower_limit":94608000}"#),
+			min
+		));
+		assert!(!nip11_pass(&doc(r#"{"created_at_lower_limit":3600}"#), min));
+		// One bad field fails the whole gate.
+		assert!(!nip11_pass(
+			&doc(r#"{"max_message_length":1000000,"payment_required":true}"#),
+			min
+		));
+	}
+
+	fn candidates() -> Vec<PoolRelay> {
+		let mk = |url: &str, vetted: bool| PoolRelay {
+			url: url.to_string(),
+			roles: vec!["dm".to_string()],
+			vetted: vetted.then(|| "2026-07-01".to_string()),
+			exit: None,
+		};
+		vec![
+			mk("wss://a.example", false),
+			mk("wss://b.example", true),
+			mk("wss://c.example", true),
+		]
+	}
+
+	#[test]
+	fn weighted_order_selection() {
+		// Goblin relay always first; every candidate appears exactly once.
+		let order = weighted_order("wss://relay.goblin.st", &candidates(), |_| 0);
+		assert_eq!(order[0], "wss://relay.goblin.st");
+		assert_eq!(order.len(), 4);
+		for url in ["wss://a.example", "wss://b.example", "wss://c.example"] {
+			assert_eq!(order.iter().filter(|u| *u == url).count(), 1);
+		}
+
+		// The goblin relay is never duplicated when it is also a pool entry.
+		let mut with_goblin = candidates();
+		with_goblin.push(PoolRelay {
+			url: "wss://relay.goblin.st".to_string(),
+			roles: vec!["dm".to_string()],
+			vetted: Some("2026-07-01".to_string()),
+			exit: None,
+		});
+		let order = weighted_order("wss://relay.goblin.st", &with_goblin, |_| 0);
+		assert_eq!(order.len(), 4);
+		assert_eq!(
+			order
+				.iter()
+				.filter(|u| *u == "wss://relay.goblin.st")
+				.count(),
+			1
+		);
+
+		// Weights: [a:1, b:3, c:3]. A roll of 0 lands on a (first weight
+		// bracket); a roll of 1 skips a's single unit and lands on vetted b.
+		let order = weighted_order("wss://g", &candidates(), |_| 1);
+		assert_eq!(order[1], "wss://b.example");
+		// Total weight offered to the first draw is 1 + 3 + 3 = 7.
+		let mut seen_total = 0;
+		let _ = weighted_order("wss://g", &candidates(), |total| {
+			if seen_total == 0 {
+				seen_total = total;
+			}
+			0
+		});
+		assert_eq!(seen_total, 7);
+	}
+}
@@ -35,6 +35,12 @@ pub const MAX_NOTE_CHARS: usize = 256;
 pub const GOBLIN_TAG: &str = "goblin";
 /// Protocol version value.
 pub const PROTOCOL_VERSION: &str = "1";
+/// Control-message tag name: carries `[action, slate_id]` for a request that is
+/// being voided (a decline by the payer or a cancel by the requester).
+pub const GOBLIN_ACTION_TAG: &str = "goblin-action";
+/// The one control action: void an unpaid request. Decline and cancel are the
+/// same wire message — "this request is off" — they only differ by who sends it.
+pub const ACTION_VOID: &str = "void";

 /// Human readable preamble other NIP-17 clients render.
 pub const PREAMBLE: &str =
@@ -76,6 +82,44 @@ pub fn build_rumor_tags(note: Option<&str>) -> Vec<Tag> {
 	tags
 }

+/// Build the kind-14 rumor content for a request-void control message. Carries
+/// NO slatepack — other NIP-17 clients render the human-readable line.
+pub fn build_control_content() -> String {
+	"[Goblin] Payment request withdrawn — open in Goblin (https://goblin.st).".to_string()
+}
+
+/// Build rumor tags for a control message: protocol marker plus the action +
+/// slate id the control refers to.
+pub fn build_control_tags(slate_id: &str) -> Vec<Tag> {
+	vec![
+		Tag::custom(TagKind::custom(GOBLIN_TAG), [PROTOCOL_VERSION.to_string()]),
+		Tag::custom(
+			TagKind::custom(GOBLIN_ACTION_TAG),
+			[ACTION_VOID.to_string(), slate_id.to_string()],
+		),
+	]
+}
+
+/// Read a control action from rumor tags. Returns the referenced slate id when a
+/// well-formed `goblin-action` void tag is present, else `None`. Classification
+/// NEVER trusts this for payment processing — it only voids a pending request,
+/// and the caller still binds the sender to the stored counterparty.
+pub fn extract_control(tags: &Tags) -> Option<String> {
+	for tag in tags.iter() {
+		let parts = tag.as_slice();
+		if parts.first().map(|s| s.as_str()) == Some(GOBLIN_ACTION_TAG) {
+			let action = parts.get(1).map(|s| s.as_str());
+			let slate_id = parts.get(2).map(|s| s.to_string());
+			if action == Some(ACTION_VOID) {
+				if let Some(id) = slate_id.filter(|s| !s.is_empty()) {
+					return Some(id);
+				}
+			}
+		}
+	}
+	None
+}
+
 /// Extract exactly one slatepack armor block from rumor content.
 /// More than one block, none at all, or an oversized block returns `None`.
 pub fn extract_slatepack(content: &str) -> Option<String> {
@@ -195,4 +239,22 @@ mod tests {
 		assert!(c.starts_with(PREAMBLE));
 		assert!(extract_slatepack(&c).is_some());
 	}
+
+	#[test]
+	fn control_round_trips_slate_id() {
+		let tags = Tags::from_list(build_control_tags("abc-123"));
+		assert_eq!(extract_control(&tags), Some("abc-123".to_string()));
+		// A control message carries no slatepack.
+		assert!(extract_slatepack(&build_control_content()).is_none());
+	}
+
+	#[test]
+	fn control_absent_or_malformed_returns_none() {
+		// Ordinary payment tags have no action tag.
+		let tags = Tags::from_list(build_rumor_tags(Some("lunch")));
+		assert!(extract_control(&tags).is_none());
+		// Action present but empty slate id is rejected.
+		let bad = Tags::from_list(build_control_tags(""));
+		assert!(extract_control(&bad).is_none());
+	}
 }
@@ -14,9 +14,9 @@

 //! Default relay set and relay list helpers.

-/// Default DM relays: the Goblin relay plus large public relays for redundancy.
+/// Default DM relays: the Floonet relay plus large public relays for redundancy.
 pub const DEFAULT_RELAYS: &[&str] = &[
-	"wss://nrelay.us-ea.st",
+	"wss://relay.floonet.dev",
 	"wss://relay.damus.io",
 	"wss://nos.lol",
 ];
@@ -55,8 +55,8 @@ mod tests {
 	#[test]
 	fn normalizes_relay_urls() {
 		assert_eq!(
-			normalize_relay_url("nrelay.us-ea.st"),
-			Some("wss://nrelay.us-ea.st".to_string())
+			normalize_relay_url("relay.goblin.st"),
+			Some("wss://relay.goblin.st".to_string())
 		);
 		assert_eq!(
 			normalize_relay_url("wss://relay.damus.io/"),
@@ -170,10 +170,6 @@ impl NostrStore {
 		self.put_json(&self.contacts, &contact.npub, contact);
 	}

-	pub fn delete_contact(&self, npub_hex: &str) {
-		self.delete(&self.contacts, npub_hex);
-	}
-
 	pub fn all_contacts(&self) -> Vec<Contact> {
 		self.all_json(&self.contacts)
 	}
@@ -272,6 +268,26 @@ impl NostrStore {
 		let _ = writer.commit();
 	}

+	/// Unix time of the last contact-name re-verify sweep (persisted across
+	/// restarts so a fresh launch only re-sweeps if it's been a while).
+	pub fn last_name_sweep_at(&self) -> Option<i64> {
+		let env = self.env.read().unwrap_or_else(|e| e.into_inner());
+		let reader = env.read().unwrap();
+		if let Ok(Some(Value::I64(v))) = self.settings.get(&reader, "last_name_sweep_at") {
+			return Some(v);
+		}
+		None
+	}
+
+	pub fn set_last_name_sweep_at(&self, ts: i64) {
+		let env = self.env.read().unwrap_or_else(|e| e.into_inner());
+		let mut writer = env.write().unwrap();
+		let _ = self
+			.settings
+			.put(&mut writer, "last_name_sweep_at", &Value::I64(ts));
+		let _ = writer.commit();
+	}
+
 	// ── archive control (user-facing) ───────────────────────────────────────

 	/// Export the whole archive as a JSON document.
@@ -292,11 +308,4 @@ impl NostrStore {
 		self.clear(&self.requests);
 		self.clear(&self.processed);
 	}
-
-	/// Wipe everything including contacts.
-	pub fn wipe_all(&self) {
-		self.wipe_archive();
-		self.clear(&self.contacts);
-		self.clear(&self.settings);
-	}
 }
@@ -52,6 +52,17 @@ pub enum NostrSendStatus {
 	Cancelled,
 }

+/// Outcome of a manual payment-cancel, surfaced transiently on the receipt so
+/// the user knows whether their funds came back or the payment had already
+/// completed in the race window.
+#[derive(Clone, Copy, PartialEq, Eq, Debug)]
+pub enum CancelOutcome {
+	/// The pending payment was cancelled and the locked funds released.
+	Cancelled,
+	/// The payment had already gone through; nothing was cancelled.
+	AlreadyCompleted,
+}
+
 /// Per-transaction nostr metadata, joined to wallet txs by slate id.
 #[derive(Serialize, Deserialize, Clone, Debug)]
 pub struct TxNostrMeta {
@@ -86,6 +97,11 @@ pub struct Contact {
 	pub nip05_verified_at: Option<i64>,
 	/// Known DM relays (kind 10050) of the contact.
 	pub relays: Vec<String>,
+	/// The contact advertises NIP-44 v3 in the `encryption` tag of the same
+	/// kind 10050 the relays come from (NIP-17 backward-compat extension).
+	/// Absent tag = v2 only, hence the conservative default.
+	#[serde(default)]
+	pub nip44_v3: bool,
 	/// Avatar palette index.
 	pub hue: u8,
 	/// Auto-added from an incoming payment, not yet confirmed by the user.
@@ -105,6 +121,8 @@ pub enum RequestStatus {
 	Approved,
 	Declined,
 	Expired,
+	/// Withdrawn by the requester (we received their cancel control message).
+	Cancelled,
 }

 /// An incoming Invoice1 payment request awaiting explicit user approval.
--- a/Show More
+++ b/Show More