nostr: Connected flag tracks the fast relay-live probe, not the 30s catch-up fetch

Symptom: after 'Save & reconnect' of the relay list, the home/onboarding UI sat on 'Connecting relays…' for ~30s even though the relays had physically reconnected over the exit in ~2-4s.

Cause: on restart the service clears connected=false, then the UI flag was only restored AFTER publish_identity (serial, untimed per-event sends) AND a catch-up fetch_events_from bounded by FETCH_TIMEOUT=30s. One relay slow to EOSE pinned is_connected() false for the whole window while the connection was already usable. A separate FAST probe task already detects first-relay-Connected at 250ms poll (~2-4s) and reports relay-live to nymproc, but it did not touch the UI flag.

Fix: in that fast probe, when relays first report Connected (same point that calls report_relay_live), also set svc.connected=true. The indicator now tracks the real ~2-4s relay-up signal; publish_identity + the catch-up fetch continue in the background. Tradeoff (documented in code): a relay drop between the probe store(true) and the 2s status loop taking over wouldn't flip the flag for up to ~30s until the post-catch-up re-check re-syncs to reality — the same-order staleness as the old pessimistic gap, just optimistic; the transport watchdog still tracks real exit health independently.

Hardening: publish_identity's per-event send_event_to was untimed, so a stalled relay delayed the catch-up fetch and the kind:1059 subscription that follow it (real incoming-message latency). Each publish is now wrapped in tokio::time::timeout(SEND_TIMEOUT), mirroring dispatch_dm; on timeout it warns and continues to the next event, never aborting the sequence.

Audit: all readers of is_connected() were reviewed for the relaxed invariant (flag can now be true before the giftwrap subscription is established). gui/goblin/mod.rs and gui/goblin/onboarding.rs use it for display + repaint scheduling and to enable the claim-username button — claiming needs relays connected (which the flag now genuinely means), not the incoming kind:1059 subscription. wallet/e2e.rs uses it as a test precondition with downstream waits of 900s/2400s and relays replay stored gift wraps on subscribe, so it still converges. No reader treats is_connected() as 'safe to receive now', so no separate ui_connected flag is needed.

.forgejo/workflows/build.yaml

@@ -1,71 +0,0 @@
-name: Test build
-
-on:
-  push:
-    tags-ignore:
-      - "*"
-    branches-ignore:
-      - master
-      - ci
-
-jobs:
-  build:
-    runs-on: ubuntu
-    steps:
-      - uses: actions/checkout@v6
-      - name: Checkout submodules
-        run: |
-          sed -i 's#https://code\.gri\.mw#${{ secrets.REPO_HOST }}#g' .gitmodules
-          git submodule update --init
-      - name: Check commit
-        id: check
-        run: |
-          git fetch && git checkout master
-          sha=$(git rev-parse HEAD)
-          [[ "${{ github.sha }}" == "${sha}" ]] && test=false || test=true
-          echo "test=${test}" >> "$FORGEJO_OUTPUT"
-      - name: Restore cargo cache
-        id: cache-cargo-restore
-        uses: actions/cache/restore@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-test-cargo-${{ hashFiles('**/Cargo.lock') }}
-      - name: Setup registry
-        run: |
-          echo -e '[registries.nexus]\nindex = "sparse+${{ secrets.MAVEN_HOST }}/repository/cargo/"\n[registry]\ndefault = "nexus"\n[source.crates-io]\nreplace-with = "nexus"\n[source.nexus]\nregistry = "sparse+${{ secrets.MAVEN_HOST }}/repository/cargo/"' > ~/.cargo/config.toml
-      - name: Build
-        if: ${{ steps.check.outputs.test == 'true' }}
-        run: cargo build --release
-      - name: Save cargo cache
-        uses: actions/cache/save@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ steps.cache-cargo-restore.outputs.cache-primary-key }}
-      - name: Telegram Notify Channel
-        if: ${{ steps.check.outputs.test == 'true' && (success() || failure()) }}
-        uses: actions/telegram-notifier@main
-        with:
-          api_url: ${{ secrets.TELEGRAM_API_URL }}
-          token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          chat_id: ${{ secrets.TELEGRAM_CHANNEL_ID }}
-          status: ${{ job.status }}
-          notify_fields: "actor,repository,workflow,branch,commit"
-      - name: Telegram Notify Group
-        if: ${{ steps.check.outputs.test == 'true' && (success() || failure()) }}
-        uses: actions/telegram-notifier@main
-        with:
-          api_url: ${{ secrets.TELEGRAM_API_URL }}
-          token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          chat_id: ${{ secrets.TELEGRAM_GROUP_ID }}
-          status: ${{ job.status }}
-          notify_fields: "actor,repository,workflow,branch,commit"

.forgejo/workflows/pr.yaml

@@ -1,29 +0,0 @@
-name: Pull Request
-
-on:
-  pull_request:
-    types:
-      - closed
-      - opened
-
-jobs:
-  notify:
-    runs-on: debian-release
-
-    steps:
-      - name: Telegram Notify Channel
-        uses: actions/telegram-notifier@main
-        with:
-          api_url: ${{ secrets.TELEGRAM_API_URL }}
-          token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          chat_id: ${{ secrets.TELEGRAM_CHANNEL_ID }}
-          status: ${{ job.status }}
-          notify_fields: "actor,repository"
-      - name: Telegram Notify Group
-        uses: actions/telegram-notifier@main
-        with:
-          api_url: ${{ secrets.TELEGRAM_API_URL }}
-          token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          chat_id: ${{ secrets.TELEGRAM_GROUP_ID }}
-          status: ${{ job.status }}
-          notify_fields: "actor,repository"

.forgejo/workflows/release.yaml

@@ -1,474 +0,0 @@
-name: Release build
-
-on:
-  push:
-    branches:
-      - master
-      - ci
-    tags-ignore:
-      - "*-dev*"
-
-jobs:
-  version:
-    runs-on: debian-release
-    outputs:
-      v: ${{ steps.version.outputs.v }}
-      pre: ${{ steps.version.outputs.pre }}
-      exists: ${{ steps.check.outputs.exists }}
-      last_tag: ${{ steps.check_prev.outputs.last_tag }}
-    steps:
-      - uses: actions/checkout@v6
-      - name: Checkout submodules
-        run: |
-          sed -i 's#https://code\.gri\.mw#${{ secrets.REPO_HOST }}#g' .gitmodules
-          git submodule update --init
-      - name: Get version
-        id: version
-        run: |
-          ver="$(grep -m 1 -Po 'version = "\K[^"]*' Cargo.toml)"
-          [[ $ver == *"-dev"* ]] && ver=${ver} || ver=${ver}-dev
-          [[ ${{ forgejo.ref_type }} == 'tag' ]] && app_ver=${{ forgejo.ref_name }} || app_ver=v${ver}
-          echo "v=${app_ver}" >> "$FORGEJO_OUTPUT"
-          echo $app_ver
-          [[ ${{ forgejo.ref_type }} == 'tag' ]] && pre='false' || pre='true'
-          echo "pre=${pre}" >> "$FORGEJO_OUTPUT"
-          echo "pre-release: ${pre}"
-      - name: Check existing release
-        if: ${{ forgejo.ref_type == 'tag' }}
-        id: check
-        run: |
-          git fetch --tags
-          dev_sha=$(git rev-parse refs/tags/${{ forgejo.ref_name }}-dev) || :
-          [[ "$(git show-ref)" == *"${dev_sha}"* ]] && exists='true' || exists='false'
-          echo "exists=${exists}" >> "$FORGEJO_OUTPUT"
-          echo ${exists}
-          mkdir release
-      - uses: actions/forgejo-release@v2.11.3
-        if: ${{ forgejo.ref_type == 'tag' && steps.check.outputs.exists == 'true' }}
-        with:
-          direction: download
-          token: ${{ secrets.RELEASE_TOKEN }}
-          tag: "${{ forgejo.ref_name }}-dev"
-          release-dir: ./release
-      - name: Rename files
-        if: ${{ forgejo.ref_type == 'tag' && steps.check.outputs.exists == 'true' }}
-        working-directory: release
-        run: for f in *; do mv "$f" "$(echo "$f" | sed s/-dev-/-/)"; done
-      - name: Delete dev release
-        if: ${{ forgejo.ref_type == 'tag' && steps.check.outputs.exists == 'true' }}
-        uses: actions/delete-release@v1
-        with:
-          release_name: "${{ forgejo.ref_name }}-dev"
-      - name: Check previous release
-        id: check_prev
-        run: |
-          git fetch --tags
-          [[ ${{ forgejo.ref_type }} == 'tag' ]] && skip=0 || skip=1
-          last_tag=$(git describe --abbrev=0 --tags $(git rev-list --tags --skip=${skip} --max-count=1)) || true
-          echo "last_tag=${last_tag}" >> "$FORGEJO_OUTPUT"
-      - uses: actions/forgejo-release@v2.11.3
-        if: ${{ forgejo.ref_type == 'tag' && steps.check.outputs.exists == 'true' }}
-        with:
-          direction: upload
-          token: ${{ secrets.RELEASE_TOKEN }}
-          tag: ${{ forgejo.ref_name }}
-          override: false
-          prerelease: false
-          release-dir: ./release
-          release-notes: "Full Changelog: [${{ steps.check_prev.outputs.last_tag }}...${{ steps.version.outputs.v }}](https://code.gri.mw/${{ forgejo.repository }}/compare/${{ steps.check_prev.outputs.last_tag }}...${{ steps.version.outputs.v }})"
-
-  android:
-    if: ${{ forgejo.ref_type == 'branch' || needs.version.outputs.exists == 'false' }}
-    runs-on: macos
-    needs: version
-    steps:
-      - uses: actions/checkout@v6
-      - name: Checkout submodules
-        run: |
-          sed -i -- 's#https://code\.gri\.mw#${{ secrets.REPO_HOST }}#g' .gitmodules
-          git submodule update --init
-      - name: Restore cargo cache
-        id: cache-cargo-restore
-        uses: actions/cache/restore@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: grim-android-cargo-${{ hashFiles('**/Cargo.lock') }}
-      - name: Build libs
-        run: |
-          rustup -q update
-          chmod +x scripts/android.sh && ./scripts/android.sh lib ${{ needs.version.outputs.v }}
-      - name: Save cargo cache
-        uses: actions/cache/save@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ steps.cache-cargo-restore.outputs.cache-primary-key }}
-      - name: Restore gradle cache
-        id: cache-gradle-restore
-        uses: actions/cache/restore@v5
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: grim-android-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-
-      - name: Setup build
-        run: |
-          chmod +x android/gradlew
-          echo "${{ secrets.ANDROID_KEYSTORE }}" > release.keystore.txt
-          base64 -d < release.keystore.txt -o android/keystore
-          echo "${{ secrets.ANDROID_KEYSTORE_PROPS }}" > release.keystore.props.txt
-          base64 -d < release.keystore.props.txt -o android/keystore.properties
-          mkdir ~/.gradle && touch ~/.gradle/gradle.properties
-          printf "mavenHost=${{ secrets.MAVEN_LOCAL_HOST }}\n" >> ~/.gradle/gradle.properties
-          printf "mavenUser=${{ secrets.MAVEN_USER }}\n" >> ~/.gradle/gradle.properties
-          printf "mavenPassword=${{ secrets.MAVEN_PASSWORD }}" >> ~/.gradle/gradle.properties      
-      - name: Release ARMv7+v8 APK
-        working-directory: android
-        run: |
-          jni_path=app/src/main/jniLibs
-          mv ${jni_path}/x86_64 x86_64
-          ./gradlew assembleCiSignedRelease
-          apk_path=app/build/outputs/apk/ci/signedRelease/app-ci-signedRelease.apk
-          name=grim-${{ needs.version.outputs.v }}-android.apk
-          mv ${apk_path} "${name}"
-      - name: Checksum ARM APK
-        working-directory: android
-        run: |
-          name=grim-${{ needs.version.outputs.v }}-android.apk
-          checksum=grim-${{ needs.version.outputs.v }}-android-sha256sum.txt
-          sha256sum "${name}" > "${checksum}"
-      - name: Release x86_64 APK
-        working-directory: android
-        run: |
-          ./gradlew clean
-          jni_path=app/src/main/jniLibs
-          rm -rf ${jni_path}/*
-          mv x86_64 ${jni_path}
-          ./gradlew assembleCiSignedRelease
-          apk_path=app/build/outputs/apk/ci/signedRelease/app-ci-signedRelease.apk
-          name=grim-${{ needs.version.outputs.v }}-android-x86_64.apk
-          mv ${apk_path} "${name}"
-      - name: Save gradle cache
-        uses: actions/cache/save@v5
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ steps.cache-gradle-restore.outputs.cache-primary-key }}
-      - name: Checksum x86_64 APK
-        working-directory: android
-        run: |
-          name=grim-${{ needs.version.outputs.v }}-android.apk
-          checksum=grim-${{ needs.version.outputs.v }}-android-x86_64-sha256sum.txt
-          sha256sum "${name}" > "${checksum}"
-      - name: Upload artifacts
-        run: |
-          mkdir release
-          mv android/grim* release
-          tar -czf android.tar.gz release
-          curl -s -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} --upload-file android.tar.gz ${{ secrets.MAVEN_LOCAL_HOST }}/repository/grim-ci/${{ forgejo.repository }}/android.tar.gz
-
-  linux_arm:
-    if: ${{ forgejo.ref_type == 'branch' || needs.version.outputs.exists == 'false' }}
-    runs-on: debian-rust-arm
-    needs: [version]
-    steps:
-      - uses: actions/checkout@v6
-      - name: Checkout submodules
-        run: |
-          sed -i 's#https://code\.gri\.mw#${{ secrets.REPO_HOST }}#g' .gitmodules
-          git submodule update --init
-      - name: Restore cargo cache
-        id: cache-cargo-restore
-        uses: actions/cache/restore@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: grim-linux-arm-cargo-${{ hashFiles('**/Cargo.lock') }}
-      - name: Setup registry
-        run: |
-          echo -e '[registries.nexus]\nindex = "sparse+${{ secrets.MAVEN_LOCAL_HOST }}/repository/cargo/"\n[registry]\ndefault = "nexus"\n[source.crates-io]\nreplace-with = "nexus"\n[source.nexus]\nregistry = "sparse+${{ secrets.MAVEN_LOCAL_HOST }}/repository/cargo/"' > ~/.cargo/config.toml
-      - name: Release Linux ARM
-        run: |
-          rustup -q update
-          cargo zigbuild --release --target aarch64-unknown-linux-gnu
-      - name: Save cargo cache
-        uses: actions/cache/save@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ steps.cache-cargo-restore.outputs.cache-primary-key }}
-      - name: Upload artifacts
-        run: |
-          curl -s -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} --upload-file target/aarch64-unknown-linux-gnu/release/grim ${{ secrets.MAVEN_LOCAL_HOST }}/repository/grim-ci/${{ forgejo.repository }}/grim-linux-arm
-
-  linux_arm_appimage:
-    if: ${{ forgejo.ref_type == 'branch' || needs.version.outputs.exists == 'false' }}
-    runs-on: debian-arm
-    needs: [version, linux_arm]
-    steps:
-      - uses: actions/checkout@v6
-      - name: Download Artifact
-        run: |
-          wget ${{ secrets.MAVEN_LOCAL_HOST }}/repository/grim-ci/${{ forgejo.repository }}/grim-linux-arm
-      - name: AppImage
-        shell: bash
-        run: |
-          mkdir release
-          chmod +x grim-linux-arm
-          mv grim-linux-arm linux/Grim.AppDir/AppRun
-          ARCH=aarch64 appimagetool linux/Grim.AppDir grim-${{ needs.version.outputs.v }}-linux-arm.AppImage
-          mv grim-${{ needs.version.outputs.v }}-linux-arm.AppImage release/
-      - name: Checksum AppImage ARM
-        working-directory: release
-        run: sha256sum grim-${{ needs.version.outputs.v }}-linux-arm.AppImage > grim-${{ needs.version.outputs.v }}-linux-arm-appimage-sha256sum.txt
-      - name: Upload artifacts
-        run: |
-          tar -czf linux-arm.appimage.tar.gz release
-          curl -s -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} --upload-file linux-arm.appimage.tar.gz ${{ secrets.MAVEN_LOCAL_HOST }}/repository/grim-ci/${{ forgejo.repository }}/linux-arm.appimage.tar.gz
-
-  linux_x86:
-    if: ${{ forgejo.ref_type == 'branch' || needs.version.outputs.exists == 'false' }}
-    runs-on: debian-rust-x86_64
-    needs: [version]
-    steps:
-      - uses: actions/checkout@v6
-      - name: Checkout submodules
-        run: |
-          sed -i 's#https://code\.gri\.mw#${{ secrets.REPO_HOST }}#g' .gitmodules
-          git submodule update --init
-      - name: Restore cargo cache
-        id: cache-cargo-restore
-        uses: actions/cache/restore@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: grim-linux-arm-cargo-${{ hashFiles('**/Cargo.lock') }}
-      - name: Setup registry
-        run: |
-          echo -e '[registries.nexus]\nindex = "sparse+${{ secrets.MAVEN_LOCAL_HOST }}/repository/cargo/"\n[registry]\ndefault = "nexus"\n[source.crates-io]\nreplace-with = "nexus"\n[source.nexus]\nregistry = "sparse+${{ secrets.MAVEN_LOCAL_HOST }}/repository/cargo/"' > ~/.cargo/config.toml
-      - name: Release Linux x86
-        run: |
-          rustup -q update
-          cargo zigbuild --release --target x86_64-unknown-linux-gnu
-      - name: Save cargo cache
-        uses: actions/cache/save@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ steps.cache-cargo-restore.outputs.cache-primary-key }}
-      - name: AppImage x86
-        run: |
-          mkdir release
-          mv target/x86_64-unknown-linux-gnu/release/grim linux/Grim.AppDir/AppRun
-          appimagetool linux/Grim.AppDir grim-${{ needs.version.outputs.v }}-linux-x86_64.AppImage
-          mv grim-${{ needs.version.outputs.v }}-linux-x86_64.AppImage release/
-      - name: Checksum AppImage x86
-        working-directory: release
-        run: sha256sum grim-${{ needs.version.outputs.v }}-linux-x86_64.AppImage > grim-${{ needs.version.outputs.v }}-linux-x86_64-appimage-sha256sum.txt
-      - name: Upload artifacts
-        run: |
-          tar -czf linux-x86_64.appimage.tar.gz release
-          curl -s -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} --upload-file linux-x86_64.appimage.tar.gz ${{ secrets.MAVEN_LOCAL_HOST }}/repository/grim-ci/${{ forgejo.repository }}/linux-x86_64.appimage.tar.gz          
-
-  macos:
-    if: ${{ forgejo.ref_type == 'branch' || needs.version.outputs.exists == 'false' }}
-    runs-on: macos
-    needs: [version, android]
-    steps:
-      - uses: actions/checkout@v6
-      - name: Checkout submodules
-        run: |
-          sed -i -- 's#https://code\.gri\.mw#${{ secrets.REPO_HOST }}#g' .gitmodules
-          git submodule update --init
-      - run: mkdir release
-      - name: Restore cargo cache
-        id: cache-cargo-restore
-        uses: actions/cache/restore@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: grim-macos-cargo-${{ hashFiles('**/Cargo.lock') }}
-      - name: Release MacOS Universal
-        run: |
-          rustup -q update
-          export MACOSX_DEPLOYMENT_TARGET=11.0
-          cargo build --release --target x86_64-apple-darwin
-          cargo build --release --target aarch64-apple-darwin
-          lipo -create -output grim "target/x86_64-apple-darwin/release/grim" "target/aarch64-apple-darwin/release/grim"
-          mv grim macos/Grim.app/Contents/MacOS
-      - name: Save cargo cache
-        uses: actions/cache/save@v5
-        with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ steps.cache-cargo-restore.outputs.cache-primary-key }}
-      - name: Archive Universal
-        working-directory: macos
-        run: |
-          zip -r grim-${{ needs.version.outputs.v }}-macos-universal.zip Grim.app
-          mv grim-${{ needs.version.outputs.v }}-macos-universal.zip ../release
-      - name: Checksum Release Universal
-        working-directory: release
-        run: sha256sum grim-${{ needs.version.outputs.v }}-macos-universal.zip > grim-${{ needs.version.outputs.v }}-macos-universal-sha256sum.txt
-      - name: Upload artifacts
-        run: |
-          tar -czf macos.tar.gz release
-          curl -s -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} --upload-file macos.tar.gz ${{ secrets.MAVEN_LOCAL_HOST }}/repository/grim-ci/${{ forgejo.repository }}/macos.tar.gz
-
-  windows:
-    if: ${{ forgejo.ref_type == 'branch' || needs.version.outputs.exists == 'false' }}
-    runs-on: windows
-    needs: [version]
-    steps:
-      - uses: actions/checkout@v6
-      - name: Checkout submodules
-        run: |
-          (Get-content .gitmodules) | Foreach-Object {$_ -replace "https://code.gri.mw", "${{ secrets.REPO_HOST }}"} | Set-Content .gitmodules
-          git submodule update --init
-      - name: Update UpgradeCode
-        shell: powershell
-        run: |
-          $guid = [guid]::NewGuid().ToString()
-          $wix = [xml](Get-Content wix/main.wxs)
-          $wix.Wix.Product.UpgradeCode = $guid
-          $wix.Save("wix/main.wxs")
-          Get-Content wix/main.wxs
-      - run: mkdir release
-      - name: Release Windows x86
-        run: |
-          rustup -q update
-          cargo wix -p grim -o grim-${{ needs.version.outputs.v }}-win-x86_64.msi --nocapture
-          mv grim-${{ needs.version.outputs.v }}-win-x86_64.msi release\
-          Compress-Archive -Path target\release\grim.exe -DestinationPath grim-${{ needs.version.outputs.v }}-win-x86_64.zip
-          mv grim-${{ needs.version.outputs.v }}-win-x86_64.zip release\
-      - name: Checksum Archive x86
-        working-directory: release
-        run: |
-          certutil -hashfile grim-${{ needs.version.outputs.v }}-win-x86_64.msi SHA256 > grim-${{ needs.version.outputs.v }}-win-x86_64-msi-sha256sum.txt
-          certutil -hashfile grim-${{ needs.version.outputs.v }}-win-x86_64.zip SHA256 > grim-${{ needs.version.outputs.v }}-win-x86_64-sha256sum.txt
-      - name: Upload artifacts
-        run: |
-          tar -czf windows.tar.gz release
-          Remove-Item alias:curl
-          curl -s -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} --upload-file windows.tar.gz ${{ secrets.MAVEN_LOCAL_HOST }}/repository/grim-ci/${{ forgejo.repository }}/windows.tar.gz
-
-  release:
-    if: ${{ forgejo.ref_type == 'branch' || needs.version.outputs.exists == 'false' }}
-    runs-on: debian-release
-    needs: [version, android, linux_x86, linux_arm_appimage, macos, windows]
-    steps:
-      - name: Download All Artifacts
-        run: |
-          curl -s -o android.tar.gz -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} ${{ secrets.MAVEN_HOST }}/repository/grim-ci/${{ forgejo.repository }}/android.tar.gz
-          tar -xzf android.tar.gz
-          rm android.tar.gz
-          curl -s -o linux-x86_64.appimage.tar.gz -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} ${{ secrets.MAVEN_HOST }}/repository/grim-ci/${{ forgejo.repository }}/linux-x86_64.appimage.tar.gz
-          tar -xzf linux-x86_64.appimage.tar.gz
-          rm linux-x86_64.appimage.tar.gz
-          curl -s -o linux-arm.appimage.tar.gz -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} ${{ secrets.MAVEN_HOST }}/repository/grim-ci/${{ forgejo.repository }}/linux-arm.appimage.tar.gz
-          tar -xzf linux-arm.appimage.tar.gz
-          rm linux-arm.appimage.tar.gz
-          curl -s -o macos.tar.gz -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} ${{ secrets.MAVEN_HOST }}/repository/grim-ci/${{ forgejo.repository }}/macos.tar.gz
-          tar -xzf macos.tar.gz
-          rm macos.tar.gz
-          curl -s -o windows.tar.gz -u ${{ secrets.MAVEN_USER }}:${{ secrets.MAVEN_PASSWORD }} ${{ secrets.MAVEN_HOST }}/repository/grim-ci/${{ forgejo.repository }}/windows.tar.gz
-          tar -xzf windows.tar.gz
-          rm windows.tar.gz
-      - name: Upload release to Forgejo
-        uses: actions/forgejo-release@v2.11.3
-        with:
-          direction: upload
-          token: ${{ secrets.RELEASE_TOKEN }}
-          tag: ${{ needs.version.outputs.v }}
-          override: true
-          prerelease: ${{ needs.version.outputs.pre == 'true' }}
-          release-dir: release
-          release-notes: "Full Changelog: [${{ needs.version.outputs.last_tag }}...${{ needs.version.outputs.v }}](https://code.gri.mw/${{ forgejo.repository }}/compare/${{ needs.version.outputs.last_tag }}...${{ needs.version.outputs.v }})"
-      - name: Telegram Notify Channel
-        if: always()
-        uses: actions/telegram-notifier@main
-        with:
-          api_url: ${{ secrets.TELEGRAM_API_URL }}
-          token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          chat_id: ${{ secrets.TELEGRAM_CHANNEL_ID }}
-          status: ${{ job.status }}
-          notify_fields: "actor,repository,workflow,branch,commit"
-      - name: Telegram Notify Group
-        if: always()
-        uses: actions/telegram-notifier@main
-        with:
-          api_url: ${{ secrets.TELEGRAM_API_URL }}
-          token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          chat_id: ${{ secrets.TELEGRAM_GROUP_ID }}
-          status: ${{ job.status }}
-          notify_fields: "actor,repository,workflow,branch,commit"
-
-  release-telegram:
-    runs-on: debian-release
-    needs: [version, release]
-    steps:
-      - name: Download All Artifacts
-        run: |
-          mkdir release
-          cd release
-          wget ${{ secrets.REPO_HOST }}/${{ forgejo.repository }}/releases/download/${{ needs.version.outputs.v }}/grim-${{ needs.version.outputs.v }}-android.apk
-          wget ${{ secrets.REPO_HOST }}/${{ forgejo.repository }}/releases/download/${{ needs.version.outputs.v }}/grim-${{ needs.version.outputs.v }}-android-x86_64.apk
-          wget ${{ secrets.REPO_HOST }}/${{ forgejo.repository }}/releases/download/${{ needs.version.outputs.v }}/grim-${{ needs.version.outputs.v }}-linux-arm.AppImage
-          wget ${{ secrets.REPO_HOST }}/${{ forgejo.repository }}/releases/download/${{ needs.version.outputs.v }}/grim-${{ needs.version.outputs.v }}-linux-x86_64.AppImage
-          wget ${{ secrets.REPO_HOST }}/${{ forgejo.repository }}/releases/download/${{ needs.version.outputs.v }}/grim-${{ needs.version.outputs.v }}-macos-universal.zip
-          wget ${{ secrets.REPO_HOST }}/${{ forgejo.repository }}/releases/download/${{ needs.version.outputs.v }}/grim-${{ needs.version.outputs.v }}-win-x86_64.msi
-          wget ${{ secrets.REPO_HOST }}/${{ forgejo.repository }}/releases/download/${{ needs.version.outputs.v }}/grim-${{ needs.version.outputs.v }}-win-x86_64.zip
-      - name: Upload files to Telegram
-        uses: actions/telegram-send-file@main
-        with:
-          api_url: ${{ secrets.TELEGRAM_API_URL }}
-          chat_ids: |
-            ${{ secrets.TELEGRAM_CHANNEL_ID }}
-            ${{ secrets.TELEGRAM_GROUP_ID }}
-          body: '🎁 Release <a href="https://code.gri.mw/${{ forgejo.repository }}/releases">${{ needs.version.outputs.v }}</a> is ready!'
-          token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          pin: true
-          files: |
-            release/grim-${{ needs.version.outputs.v }}-android.apk
-            release/grim-${{ needs.version.outputs.v }}-android-x86_64.apk
-            release/grim-${{ needs.version.outputs.v }}-linux-arm.AppImage
-            release/grim-${{ needs.version.outputs.v }}-linux-x86_64.AppImage
-            release/grim-${{ needs.version.outputs.v }}-macos-universal.zip
-            release/grim-${{ needs.version.outputs.v }}-win-x86_64.msi
-            release/grim-${{ needs.version.outputs.v }}-win-x86_64.zip

.github/actions/fetch-nip44/action.yml

@@ -0,0 +1,21 @@
+name: Fetch nip44 crate
+description: >
+  Clone the nip44 crate (v2 + v3 encryption) from our mirror
+  (github.com/2ro/nip44, branch `v3`) into ../nip44, so the
+  `nip44 = { path = "../nip44" }` dependency resolves.
+
+runs:
+  using: composite
+  steps:
+    - name: Clone nip44
+      shell: bash
+      run: |
+        set -euo pipefail
+        DEST="$(dirname "$GITHUB_WORKSPACE")/nip44"
+        if [ -e "$DEST/Cargo.toml" ]; then
+          echo "nip44 already present at $DEST"
+          exit 0
+        fi
+        rm -rf "$DEST"
+        git clone --branch v3 --depth 1 https://github.com/2ro/nip44.git "$DEST"
+        echo "nip44 cloned from 2ro/nip44@v3 -> $DEST"

.github/actions/fetch-nym/action.yml

@@ -0,0 +1,23 @@
+name: Fetch patched nym SDK
+description: >
+  Clone the patched nym workspace from our own mirror
+  (git.us-ea.st/GRIN/nym, branch `goblin` = upstream nymtech/nym @ b6eb391 +
+  Goblin's Android webpki-roots patch) into ../nym, so the
+  `nym-sdk = { path = "../nym/sdk/rust/nym-sdk" }` dependency resolves.
+  Self-hosted: no upstream-GitHub fetch and no patch-apply step.
+
+runs:
+  using: composite
+  steps:
+    - name: Clone patched nym
+      shell: bash
+      run: |
+        set -euo pipefail
+        DEST="$(dirname "$GITHUB_WORKSPACE")/nym"
+        if [ -e "$DEST/sdk/rust/nym-sdk/Cargo.toml" ]; then
+          echo "nym already present at $DEST"
+          exit 0
+        fi
+        rm -rf "$DEST"
+        git clone --branch goblin --depth 1 https://git.us-ea.st/GRIN/nym.git "$DEST"
+        echo "nym cloned from GRIN/nym@goblin -> $DEST"

.github/download_release.sh

@@ -1,23 +0,0 @@
-#!/bin/bash
-
-HOST=https://code.gri.mw
-REPO_NAME=$1
-TAG=$2
-DOWNLOAD_URL=${HOST}/${REPO_NAME}/releases/download/${TAG}
-
-FILES=( "grim-${TAG}-android.apk" "grim-${TAG}-android-x86_64.apk" "grim-${TAG}-linux-arm.AppImage" "grim-${TAG}-linux-x86_64.AppImage" "grim-${TAG}-macos-universal.zip" "grim-${TAG}-win-x86_64.msi" "grim-${TAG}-win-x86_64.zip" )
-
-# Download release files
-for f in "${FILES[@]}"; do
-  wget -q ${DOWNLOAD_URL}/${f}
-  echo Downloading ${f}...
-  while [ ! -f ${f} ]; do
-    sleep 5
-    echo Retry ${f}...
-    wget -q ${DOWNLOAD_URL}/${f}
-  done
-done
-
-# Save release notes
-INFO_URL=${HOST}/api/v1/repos/${REPO_NAME}/releases/tags/${TAG}
-curl -s "${INFO_URL}" | jq -r '.body' > release_notes.txt

.github/workflows/build.yml

@@ -1,6 +1,12 @@
 name: Build
 on: [push, pull_request]
 
+# aws-lc-sys (pulled in by nym-sdk) builds AWS-LC, which needs NASM on native
+# Windows. Use the prebuilt NASM objects the crate ships so the runner doesn't
+# need NASM installed; harmless on Linux/macOS.
+env:
+  AWS_LC_SYS_PREBUILT_NASM: 1
+
 jobs:
   linux:
     name: Linux Build
@@ -9,6 +15,10 @@ jobs:
       - uses: actions/checkout@v6
         with:
           submodules: recursive
+      # nym-sdk is a path dep on ../nym; materialize it before building.
+      - uses: ./.github/actions/fetch-nym
+      # nip44 is a path dep on ../nip44; materialize it before building.
+      - uses: ./.github/actions/fetch-nip44
       - name: Release build
         run: cargo build --release
 
@@ -19,9 +29,11 @@ jobs:
       - uses: actions/checkout@v6
         with:
           submodules: recursive
+      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
       - name: Release build
         run: cargo build --release
-  
+
   macos:
     name: MacOS Build
     runs-on: macos-latest
@@ -29,5 +41,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           submodules: recursive
+      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
       - name: Release build
         run: cargo build --release

.github/workflows/release.yml

@@ -1,31 +1,150 @@
+# Release builds on native runners — one per platform, no cross-compilation
+# (nokhwa's camera backends want each platform's own SDK; see NEXT-STEPS judgment).
+#
+# Manually triggered (Actions → Release → Run workflow) against an existing tag
+# until a run has been validated end-to-end; then this can move to a tag trigger.
+# Android is built locally via scripts/android.sh for now — the gradle `ci`
+# flavor expects maven credentials this repository does not carry.
 name: Release
 
 on:
-  push:
-    tags:
-      - "v*.*.*"
+  # macOS builds on its native runner automatically when a release is published
+  # (the macOS job has no dispatch-only gate). Linux/Windows stay dispatch-only —
+  # they are built locally and uploaded with the release; run the workflow by hand
+  # to (re)build those on runners against an existing tag.
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Existing release tag to build and upload artifacts to (e.g. build27)"
+        required: true
+
+permissions:
+  contents: write
+
+env:
+  TAG: ${{ inputs.tag || github.event.release.tag_name }}
+  # aws-lc-sys (via nym-sdk) needs NASM on native Windows; use its prebuilt NASM.
+  AWS_LC_SYS_PREBUILT_NASM: 1
 
 jobs:
-  create_release:
-    name: Create Release
+  linux:
+    name: Linux x86_64
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
+    # Built locally and uploaded with the release; only run on manual dispatch.
+    if: github.event_name == 'workflow_dispatch'
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Download release
-        run: chmod +x .github/download_release.sh && .github/download_release.sh GUI/grim ${{ github.ref_name }}
-      - name: Release
-        uses: softprops/action-gh-release@v2
+      - uses: actions/checkout@v6
         with:
-          body_path: release_notes.txt
-          overwrite_files: true
+          ref: ${{ inputs.tag || github.event.release.tag_name }}
+          submodules: recursive
+      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
+      - name: Build
+        shell: bash
+        run: GOBLIN_BUILD="${TAG#build}" cargo build --release
+      - name: Package
+        run: |
+          tar -C target/release -czf "goblin-$TAG-linux-x86_64.tar.gz" goblin
+          sha256sum "goblin-$TAG-linux-x86_64.tar.gz" > "goblin-$TAG-linux-x86_64-sha256sum.txt"
+      - uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ inputs.tag || github.event.release.tag_name }}
           files: |
-            grim-${{ github.ref_name }}-android.apk
-            grim-${{ github.ref_name }}-android-x86_64.apk
-            grim-${{ github.ref_name }}-linux-arm.AppImage
-            grim-${{ github.ref_name }}-linux-x86_64.AppImage
-            grim-${{ github.ref_name }}-macos-universal.zip
-            grim-${{ github.ref_name }}-win-x86_64.msi
-            grim-${{ github.ref_name }}-win-x86_64.zip
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-linux-x86_64.tar.gz
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-linux-x86_64-sha256sum.txt
+
+  windows:
+    name: Windows x86_64 (MSVC)
+    runs-on: windows-latest
+    # Built locally and uploaded with the release; only run on manual dispatch.
+    if: github.event_name == 'workflow_dispatch'
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ inputs.tag || github.event.release.tag_name }}
+          submodules: recursive
+      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
+      - name: Build
+        shell: bash
+        run: GOBLIN_BUILD="${TAG#build}" cargo build --release
+      - name: Build MSI installer (cargo-wix / WiX 3 — same packaging as GRIM)
+        shell: pwsh
+        run: |
+          # The .msi is built from wix/main.wxs (the cargo-wix default template:
+          # WixUI_Minimal + launch-after-install), so `cargo wix` wires up the
+          # WixUI/WixUtil extensions, cultures and CargoTargetBinDir for us. The
+          # installer + shortcuts + Add/Remove-Programs entry carry wix/Product.ico
+          # (the yellow Goblin icon). --no-build reuses the release exe above so the
+          # embedded GOBLIN_BUILD number is preserved.
+          cargo install cargo-wix --locked
+          $wix = Get-ChildItem 'C:\Program Files (x86)' -Directory -Filter 'WiX Toolset v3*' -ErrorAction SilentlyContinue | Select-Object -Last 1
+          if (-not $wix) {
+            choco install wixtoolset --no-progress -y | Out-Null
+            $wix = Get-ChildItem 'C:\Program Files (x86)' -Directory -Filter 'WiX Toolset v3*' | Select-Object -Last 1
+          }
+          $env:WIX = "$($wix.FullName)\"
+          $env:PATH = "$($wix.FullName)\bin;$env:PATH"
+          $msi = "goblin-$env:TAG-win-x86_64.msi"
+          cargo wix --no-build --nocapture -o "$msi"
+          if ($LASTEXITCODE -ne 0 -or -not (Test-Path "$msi")) { throw "cargo wix failed to produce $msi" }
+          (Get-FileHash "$msi" -Algorithm SHA256).Hash.ToLower() + "  $msi" | Out-File -Encoding ascii "goblin-$env:TAG-win-x86_64-msi-sha256sum.txt"
+      - name: Package portable zip
+        shell: bash
+        run: |
+          7z a "goblin-$TAG-win-x86_64.zip" ./target/release/goblin.exe
+          sha256sum "goblin-$TAG-win-x86_64.zip" > "goblin-$TAG-win-x86_64-sha256sum.txt"
+      - uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ inputs.tag || github.event.release.tag_name }}
+          files: |
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-win-x86_64.msi
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-win-x86_64-msi-sha256sum.txt
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-win-x86_64.zip
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-win-x86_64-sha256sum.txt
+
+  macos:
+    name: macOS universal
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ inputs.tag || github.event.release.tag_name }}
+          submodules: recursive
+      - uses: ./.github/actions/fetch-nym
+      - uses: ./.github/actions/fetch-nip44
+      - name: Build both architectures
+        run: |
+          export GOBLIN_BUILD="${TAG#build}"
+          rustup target add aarch64-apple-darwin x86_64-apple-darwin
+          cargo build --release --target aarch64-apple-darwin
+          cargo build --release --target x86_64-apple-darwin
+      - name: Universal binary into Goblin.app bundle
+        run: |
+          # Combine both arches into one universal Mach-O and drop it into the
+          # app bundle's executable slot (CFBundleExecutable=goblin).
+          lipo -create -output goblin \
+            target/aarch64-apple-darwin/release/goblin \
+            target/x86_64-apple-darwin/release/goblin
+          cp goblin macos/Goblin.app/Contents/MacOS/goblin
+          chmod +x macos/Goblin.app/Contents/MacOS/goblin
+          # Drop the placeholder that kept the empty dir tracked in git.
+          rm -f macos/Goblin.app/Contents/MacOS/.gitignore
+          # Ad-hoc sign (no Apple cert in CI). REQUIRED on Apple Silicon: lipo
+          # strips the per-arch signatures cargo/ld add, and an unsigned arm64
+          # Mach-O is killed by the OS. Ad-hoc gives a valid (if unidentified)
+          # signature; users still right-click → Open past Gatekeeper.
+          codesign --force --sign - macos/Goblin.app/Contents/MacOS/goblin
+          codesign --force --sign - macos/Goblin.app
+          # ditto is the macOS-correct way to zip an .app (preserves the bundle
+          # layout, symlinks and permissions; plain `zip` mangles bundles).
+          ditto -c -k --keepParent macos/Goblin.app "goblin-$TAG-macos-universal.zip"
+          shasum -a 256 "goblin-$TAG-macos-universal.zip" > "goblin-$TAG-macos-universal-sha256sum.txt"
+      - uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ inputs.tag || github.event.release.tag_name }}
+          files: |
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-macos-universal.zip
+            goblin-${{ inputs.tag || github.event.release.tag_name }}-macos-universal-sha256sum.txt

.github/workflows/release.yml.bak

@@ -1,170 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - "v*.*.*"
-
-jobs:
-  linux_release:
-    name: Linux Release
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Download appimagetools
-        run: |
-          wget https://github.com/AppImage/AppImageKit/releases/download/continuous/appimagetool-x86_64.AppImage
-          chmod +x appimagetool-x86_64.AppImage
-          sudo apt install libfuse2
-      - name: Zig Setup
-        uses: goto-bus-stop/setup-zig@v2
-        with:
-          version: 0.12.1
-      - name: Install cargo-zigbuild
-        run: cargo install cargo-zigbuild
-      - name: Release x86
-        run: cargo zigbuild --release --target x86_64-unknown-linux-gnu
-      - name: Release ARM
-        run: |
-          rustup target add aarch64-unknown-linux-gnu
-          cargo zigbuild --release --target aarch64-unknown-linux-gnu
-      - name: AppImage x86
-        run: |
-          cp target/x86_64-unknown-linux-gnu/release/grim linux/Grim.AppDir/AppRun
-          ./appimagetool-x86_64.AppImage linux/Grim.AppDir target/x86_64-unknown-linux-gnu/release/grim-${{ github.ref_name }}-linux-x86_64.AppImage
-      - name: Checksum AppImage x86
-        working-directory: target/x86_64-unknown-linux-gnu/release
-        shell: bash
-        run: sha256sum grim-${{ github.ref_name }}-linux-x86_64.AppImage > grim-${{ github.ref_name }}-linux-x86_64-appimage-sha256sum.txt
-      - name: AppImage ARM
-        run: |
-          cp target/aarch64-unknown-linux-gnu/release/grim linux/Grim.AppDir/AppRun
-          ./appimagetool-x86_64.AppImage linux/Grim.AppDir target/aarch64-unknown-linux-gnu/release/grim-${{ github.ref_name }}-linux-arm.AppImage
-      - name: Checksum AppImage ARM
-        working-directory: target/aarch64-unknown-linux-gnu/release
-        shell: bash
-        run: sha256sum grim-${{ github.ref_name }}-linux-arm.AppImage > grim-${{ github.ref_name }}-linux-arm-appimage-sha256sum.txt
-      - name: Release
-        uses: softprops/action-gh-release@v1
-        with:
-          files: |
-            target/x86_64-unknown-linux-gnu/release/grim-${{ github.ref_name }}-linux-x86_64.AppImage
-            target/x86_64-unknown-linux-gnu/release/grim-${{ github.ref_name }}-linux-x86_64-appimage-sha256sum.txt
-            target/aarch64-unknown-linux-gnu/release/grim-${{ github.ref_name }}-linux-arm.AppImage
-            target/aarch64-unknown-linux-gnu/release/grim-${{ github.ref_name }}-linux-arm-appimage-sha256sum.txt
-
-  windows_release:
-    name: Windows Release
-    runs-on: windows-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Build release
-        run: cargo build --release
-      - name: Archive release
-        uses: vimtor/action-zip@v1
-        with:
-          files: target/release/grim.exe
-          dest: target/release/grim-${{ github.ref_name }}-win-x86_64.zip
-      - name: Checksum release
-        working-directory: target/release
-        shell: bash
-        run: sha256sum grim-${{ github.ref_name }}-win-x86_64.zip > grim-${{ github.ref_name }}-win-x86_64-sha256sum.txt
-      - name: Install cargo-wix
-        run: cargo install cargo-wix
-      - name: Run cargo-wix
-        run: cargo wix -p grim -o ./target/wix/grim-${{ github.ref_name }}-win-x86_64.msi --nocapture
-      - name: Checksum msi
-        working-directory: target/wix
-        shell: bash
-        run: sha256sum grim-${{ github.ref_name }}-win-x86_64.msi > grim-${{ github.ref_name }}-win-x86_64-msi-sha256sum.txt
-      - name: Release
-        uses: softprops/action-gh-release@v1
-        with:
-          files: |
-            target/release/grim-${{ github.ref_name }}-win-x86_64.zip
-            target/release/grim-${{ github.ref_name }}-win-x86_64-sha256sum.txt
-            target/wix/grim-${{ github.ref_name }}-win-x86_64.msi
-            target/wix/grim-${{ github.ref_name }}-win-x86_64-msi-sha256sum.txt
-
-  macos_release:
-    name: MacOS Release
-    runs-on: macos-12
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Install coreutils
-        run: brew install coreutils
-      - name: Zig Setup
-        uses: goto-bus-stop/setup-zig@v2
-        with:
-          version: 0.12.1
-      - name: Install cargo-zigbuild
-        run: cargo install cargo-zigbuild
-      - name: Download SDK
-        run: wget https://github.com/phracker/MacOSX-SDKs/releases/download/11.3/MacOSX11.0.sdk.tar.xz
-      - name: Setup SDK env
-        run: tar xf ${{ github.workspace }}/MacOSX11.0.sdk.tar.xz && echo "SDKROOT=${{ github.workspace }}/MacOSX11.0.sdk" >> $GITHUB_ENV
-      - name: Setup platform env
-        run: echo "MACOSX_DEPLOYMENT_TARGET=11.0" >> $GITHUB_ENV
-      - name: Release x86
-        run: |
-          rustup target add x86_64-apple-darwin
-          cargo zigbuild --release --target x86_64-apple-darwin
-          yes | cp -rf target/x86_64-apple-darwin/release/grim macos/Grim.app/Contents/MacOS
-      - name: Archive x86
-        run: |
-          cd macos
-          zip -r grim-${{ github.ref_name }}-macos-x86_64.zip Grim.app
-          mv grim-${{ github.ref_name }}-macos-x86_64.zip ../target/x86_64-apple-darwin/release
-          cd ..
-      - name: Checksum Release x86
-        working-directory: target/x86_64-apple-darwin/release
-        shell: bash
-        run: sha256sum grim-${{ github.ref_name }}-macos-x86_64.zip > grim-${{ github.ref_name }}-macos-x86_64-sha256sum.txt
-      - name: Release ARM
-        run: |
-          rustup target add aarch64-apple-darwin
-          cargo zigbuild --release --target aarch64-apple-darwin
-          yes | cp -rf target/aarch64-apple-darwin/release/grim macos/Grim.app/Contents/MacOS
-      - name: Archive ARM
-        run: |
-          cd macos
-          zip -r grim-${{ github.ref_name }}-macos-arm.zip Grim.app
-          mv grim-${{ github.ref_name }}-macos-arm.zip ../target/aarch64-apple-darwin/release
-          cd ..
-      - name: Checksum Release ARM
-        working-directory: target/aarch64-apple-darwin/release
-        shell: bash
-        run: sha256sum grim-${{ github.ref_name }}-macos-arm.zip > grim-${{ github.ref_name }}-macos-arm-sha256sum.txt
-      - name: Release Universal
-        run: |
-          cargo zigbuild --release --target universal2-apple-darwin
-          yes | cp -rf target/universal2-apple-darwin/release/grim macos/Grim.app/Contents/MacOS
-      - name: Archive Universal
-        run: |
-          cd macos
-          zip -r grim-${{ github.ref_name }}-macos-universal.zip Grim.app
-          mv grim-${{ github.ref_name }}-macos-universal.zip ../target/universal2-apple-darwin/release
-          cd ..
-      - name: Checksum Release Universal
-        working-directory: target/universal2-apple-darwin/release
-        shell: pwsh
-        run: sha256sum grim-${{ github.ref_name }}-macos-universal.zip > grim-${{ github.ref_name }}-macos-universal-sha256sum.txt
-      - name: Release
-        uses: softprops/action-gh-release@v1
-        with:
-          files: |
-            target/x86_64-apple-darwin/release/grim-${{ github.ref_name }}-macos-x86_64.zip
-            target/x86_64-apple-darwin/release/grim-${{ github.ref_name }}-macos-x86_64-sha256sum.txt
-            target/aarch64-apple-darwin/release/grim-${{ github.ref_name }}-macos-arm.zip
-            target/aarch64-apple-darwin/release/grim-${{ github.ref_name }}-macos-arm-sha256sum.txt
-            target/universal2-apple-darwin/release/grim-${{ github.ref_name }}-macos-universal.zip
-            target/universal2-apple-darwin/release/grim-${{ github.ref_name }}-macos-universal-sha256sum.txt

.gitignore

@@ -18,6 +18,14 @@ target
 .cargo/
 app/src/main/jniLibs
 macos/cert.pem
-linux/Grim.AppDir/AppRun
+linux/Goblin.AppDir/AppRun
 .intentionally-empty-file.o
-Cargo.toml-e
+Cargo.toml-e
+screenshots/
+# GRIM-canonical build toolchains fetched by scripts/toolchain.sh
+.toolchains/
+# Runtime wallet/node artifacts + secrets generated by running locally — NEVER commit
+.owner_api_secret
+.foreign_api_secret
+grin-wallet.log
+grin-wallet.toml

.gitmodules

@@ -5,7 +5,3 @@
 	path = wallet
 	url = https://code.gri.mw/ardocrat/wallet
 	branch = grim
-[submodule "tor/webtunnel"]
-	path = tor/webtunnel
-	url = https://code.gri.mw/WEB/webtunnel
-	branch = grim

Cargo.toml

@@ -2,21 +2,27 @@
 name = "grim"
 version = "0.3.6"
 authors = ["Ardocrat <ardocrat@gri.mw>"]
-description = "Cross-platform GUI for Grin with focus on usability and availability to be used by anyone, anywhere."
+description = "Goblin: a peer-to-peer wallet for Grin. Send and receive instantly with a handle - slatepacks and the Nym mixnet handled for you."
 license = "Apache-2.0"
 repository = "https://code.gri.mw/GUI/grim"
-keywords = [ "crypto", "grin", "mimblewimble" ]
+keywords = [ "crypto", "grin", "mimblewimble", "nostr" ]
 edition = "2024"
 build = "build.rs"
 
 [[bin]]
-name = "grim"
+name = "goblin"
 path = "src/main.rs"
 
 [lib]
 name="grim"
 crate-type = ["rlib"]
 
+# Desktop/CI release binaries ship stripped of debug symbols — the nym + nostr +
+# grin tree leaves a large symbol table that's dead weight for users (~16 MB on
+# Linux). opt-level stays at the default 3 for wallet/runtime speed.
+[profile.release]
+strip = true
+
 [profile.release-apk]
 inherits = "release"
 strip = true
@@ -81,7 +87,7 @@ rkv = "0.20.0"
 usvg = "0.45.1"
 ring = "0.16.20"
 hyper = { version = "1.6.0", features = ["full"], package = "hyper" }
-hyper-util = {  version = "0.1.19", features = ["http1", "client", "client-legacy"] }
+hyper-util = {  version = "0.1.19", features = ["http1", "client", "client-legacy", "tokio"] }
 http-body-util = "0.1.3"
 bytes = "1.11.0"
 hyper-socks2 = "0.9.1"
@@ -91,24 +97,48 @@ async-std = "1.13.2"
 uuid = { version = "0.8.2", features = ["v4"] }
 num-bigint = "0.4.6"
 
-## tor
-arti-client = { version = "0.42.0", features = ["static", "pt-client", "onion-service-service", "onion-service-client"] }
-tor-rtcompat = { version = "0.42.0", features = ["static"] }
-tor-config = "0.42.0"
-fs-mistrust = "0.14.1"
-tor-hsservice = "0.42.0"
-tor-hsrproxy = "0.42.0"
-tor-keymgr = "0.42.0"
-tor-llcrypto = "0.42.0"
-tor-hscrypto = "0.42.0"
-tor-error = "0.42.0"
+## nostr
+nostr-sdk = { version = "0.44", features = ["nip06", "nip44", "nip49", "nip59", "nip98"] }
+nostr-relay-pool = "0.44"
+## NIP-44 v3 (+ v2) encryption for the NIP-17 backward-compat extension (G4).
+## Now published to crates.io as v0.3.0 (the M0 deliverable, all upstream test
+## vectors green) — no local sibling checkout required. secp256k1 0.31, bridged
+## to nostr-sdk's 0.29 in wrapv3.rs (see the secp256k1 note below).
+nip44 = "0.3.0"
+## Only to construct the key types the `nip44` crate takes: nostr-sdk pins
+## secp256k1 0.29, the nip44 crate 0.31 — bridged via byte arrays in wrapv3.rs.
+secp256k1 = "0.31"
+async-wsocket = "0.13"
+tokio-tungstenite = { version = "0.26", features = ["rustls-tls-webpki-roots"] }
+regex = "1"
+base64 = "0.22"
+hex = "0.4"
+## rustls is pulled by both our TLS (tungstenite, ring) and nym-sdk
+## (aws-lc-rs); with two providers present rustls 0.23 can't auto-pick a default,
+## so we install ring explicitly at startup (see lib.rs). Direct dep just to make
+## `rustls::crypto::ring::default_provider()` reachable. NOTHING here may pull
+## rustls-platform-verifier — it panics on Android outside a full app context.
+rustls = { version = "0.23", features = ["ring"] }
+## TLS-over-tunnel for the mixnet HTTP client (webpki roots, never the platform
+## verifier — see the rustls note above).
+tokio-rustls = { version = "0.26", default-features = false, features = ["ring"] }
+webpki-roots = "1"
+
+## Nym mixnet, linked IN-PROCESS (no sidecar subprocess, no bundled binary).
+## Path deps into the local nym checkout, PINNED at rev
+## f6ed17d949cc19fee0fb51db3cb65771fd510d5b: it carries the load-bearing local
+## commit "http-api-client: preconfigured webpki roots on Android". Do not
+## float the checkout past that rev without re-verifying the Android build.
+nym-sdk = { path = "../nym/sdk/rust/nym-sdk" }
+## smolmix: TCP/UDP tunnel over the mixnet with an AUTO-SELECTED IPR exit —
+## the single-network-requester SPOF is structurally gone (plan G14).
+smolmix = { path = "../nym/smolmix/core" }
+## mix-dns wire codec. Already in the dependency graph via nym-http-api-client
+## (Cargo.lock), so we reuse it instead of vendoring a DNS encode/parse.
+hickory-proto = { version = "0.26", default-features = false, features = ["std"] }
+
+## NIP-98 payload hashing
 sha2 = "0.10.8"
-ed25519-dalek = "2.1.1"
-curve25519-dalek = "4.1.3"
-hyper-tor = { version = "0.14.32", features = ["full"], package = "hyper" }
-tls-api = "0.12.0"
-tls-api-native-tls = "0.12.1"
-safelog = "0.8.1"
 
 ## stratum server
 tokio-old = { version = "0.2", features = ["full"], package = "tokio" }
@@ -132,6 +162,18 @@ arboard = "3.2.0"
 rfd = "0.17.2"
 interprocess = { version = "2.2.1", features = ["tokio"] }
 
+## native-tls (via hyper-tls) uses OpenSSL only on Linux/Android. Upstream Grim
+## got a vendored, statically-linked OpenSSL for free through arti's `static`
+## feature; dropping arti for Nym took that with it, breaking Android/cross
+## builds (no system OpenSSL for the target) and leaving desktop dynamically
+## linked to libssl. Restore the vendored build for exactly those two targets so
+## each is self-contained. Windows (SChannel) and macOS (Security.framework)
+## don't use OpenSSL at all, so they must NOT pull it — building openssl-src
+## there is both pointless and fragile (the Windows MSVC runner's bash perl is
+## missing modules its Configure needs).
+[target.'cfg(any(target_os = "linux", target_os = "android"))'.dependencies]
+openssl = { version = "0.10", features = ["vendored"] }
+
 [target.'cfg(target_os = "android")'.dependencies]
 android_logger = "0.15.0"
 jni = "0.21.1"
@@ -141,3 +183,23 @@ eframe = { version = "0.33.2", default-features = false, features = ["glow", "an
 
 [build-dependencies]
 built = "0.8.0"
+
+# Windows hosts only: embed the Goblin icon (wix/Product.ico) into goblin.exe via
+# build.rs. Not compiled on Linux/macOS/Android hosts, so other builds are
+# unaffected.
+[target.'cfg(windows)'.build-dependencies]
+winresource = "0.1"
+
+[dev-dependencies]
+nostr-sdk = { version = "0.44", features = ["nip06", "nip44", "nip49", "nip59", "nip98"] }
+tokio = { version = "1.49.0", features = ["full"] }
+base64 = "0.22"
+sha2 = "0.10"
+hex = "0.4"
+serde_yaml = "0.9"
+## G14 transport-validation harness (tests/xrelay_smoke.rs): re-expose deps that
+## already live in the main graph so the smolmix transport can be exercised and
+## its tunnel/mix-dns logs captured. No new compiles — same versions unify.
+log = "0.4.27"
+env_logger = "0.11.3"
+rustls = { version = "0.23", features = ["ring"] }

README.md

@@ -1,39 +1,77 @@
-# Grim <img height="20" src="img/grin-logo.png"/> <img height="20" src="img/logo.png"/>
-Cross-platform GUI for [GRiN ツ](https://grin.mw) in [Rust](https://www.rust-lang.org/) 
-for maximum compatibility with original [Mimblewimble](https://github.com/mimblewimble/grin) implementation.
-Initially supported platforms are Linux, Mac, Windows, limited Android and possible web support with help of [egui](https://github.com/emilk/egui) - immediate mode GUI library in pure Rust.
+<p align="center">
+  <img src="Goblin-Banner.png" alt="Goblin" width="680"/>
+</p>
 
-Named by the character [Grim](http://harrypotter.wikia.com/wiki/Grim) - the shape of a large, black, menacing, spectral giant dog.
+# Goblin
 
-![image](img/cover.png)
+Goblin is a private, pay-by-username wallet for [GRIN ツ](https://grin.mw) — confidential digital cash on [Mimblewimble](https://github.com/mimblewimble/grin), with no amounts or addresses on the chain.
 
+Instead of passing slatepack files back and forth, you **pay a `username` (or an `npub`)** and the payment is delivered for you as an **end-to-end encrypted message over [nostr](https://github.com/nostr-protocol/nips), routed through the [Nym mixnet](https://nym.com)**. Relays only ever see ciphertext — never the amount, the sender, or the recipient — and the mixnet hides who is talking to whom at the network layer.
 
-## Build instructions
-### Install Rust
+Goblin is a fork of the **Grim** egui GRIN wallet: it keeps Grim's full GRIN node/wallet engine and layers a Nostr-native, mobile-first payments experience on top.
 
-Follow instructions on [Windows](https://forge.rust-lang.org/infra/other-installation-methods.html).
+## What it does
 
-`curl https://sh.rustup.rs -sSf | sh`
+- **Send to people** — pay a `username` or `npub`; the GRIN slatepack travels as a [NIP-17](https://nips.nostr.com/17) gift-wrapped DM ([kind 1059](https://nostrbook.dev/kinds/1059)) over the Nym mixnet and is applied automatically by the recipient's wallet. No files to swap, no need to both be online at once.
+- **Manual slatepacks too** — when you need to pay or get paid without a handle, **Settings → Wallet → Slatepacks** exposes the classic by-hand flow: create a slatepack to send, or paste one to receive, finalize, or pay.
+- **In-app identity** — a nostr payment key that is deliberately *not* part of your seed, so you can rotate it any time to stay unlinkable without touching your funds. An optional human-readable `name` comes from the goblin.st identity service.
+- **Private by construction** — GRIN's address-less, confidential chain; your payments and identity (nostr relays, NIP-05 lookups, price) are routed through the [Nym mixnet](https://nym.com), so who-pays-whom never touches the clear net. The GRIN node connection — block sync and broadcasting your transaction — is direct: public chain data, the same for everyone, and not tied to your identity. Keys, names and history stay on your device.
+- **Configurable amount pairing** — show balances against a world currency, Bitcoin, or sats (rates fetched over the mixnet), or turn the preview off.
+- **Cross-platform** — Linux, macOS, Windows, Android, built in pure Rust on [egui](https://github.com/emilk/egui).
 
-### Desktop
-
-To build and run application go to project directory and run:
+## How a payment travels
 
 ```
+   you ──slatepack──▶ NIP-17 gift wrap (kind 1059, NIP-44 encrypted)
+                          │
+                   Nym mixnet (5-hop)
+                          │
+            ┌─────────────┴─────────────┐
+        your relays              recipient's DM relays (kind 10050)
+            └─────────────┬─────────────┘
+                          ▼
+   recipient ◀──unwrap, verify seal author, apply slatepack
+```
+
+The wrap is [NIP-44](https://nips.nostr.com/44)-encrypted, and delivery uses the recipient's DM relay list ([kind 10050](https://nostrbook.dev/kinds/10050)).
+
+Both parties only need one relay in common. The default set is the Goblin relay plus large public relays (`relay.damus.io`, `nos.lol`), and the set is editable in **Settings → Relays**.
+
+## Build
+
+### Desktop (Linux / macOS / Windows)
+
+Goblin links the [Nym mixnet](https://nym.com) SDK **in-process** — the wallet is a single self-contained binary, no sidecar. The SDK builds from a sibling `../nym` checkout (a pinned nym tree with a small Android TLS patch):
+
+```
+git clone --branch goblin https://git.us-ea.st/GRIN/nym ../nym
 git submodule update --init --recursive
 cargo build --release
-./target/release/grim
+./target/release/goblin
 ```
 
+Goblin's identity and payment traffic — nostr relays, NIP-05 lookups and price fetches — is routed over the mixnet through a network requester (the default is baked into `NETWORK_REQUESTER` in `src/nym/sidecar.rs`); the SDK's SOCKS5 listener is run in-process on `127.0.0.1:1080`. If something is already listening there, Goblin reuses it. The GRIN node connection (block sync and transaction broadcast) is **not** mixed — it connects directly, as it carries only public chain data that isn't linked to your wallet.
+
 ### Android
-#### Set up the environment
 
-Install Android SDK / NDK / Platform Tools for your OS according to this [FAQ](https://github.com/codepath/android_guides/wiki/installing-android-sdk-tools).
+Install the Android SDK / NDK, then from the repo root:
 
-#### Build the project
-Run Android emulator or connect a real device. Command `adb devices` should show at least one device.
-In the root of the repo run `./scripts/android.sh build|release v7|v8|x86`, where is `v7`, `v8`, `x86` - device CPU architecture for `build` type, for `release` specify version number in format `major.minor.patch`.
+```
+./scripts/android.sh build|release v7|v8|x86
+```
+
+`v7`/`v8`/`x86` is the device CPU architecture for `build`; for `release` pass a version in `major.minor.patch` form.
+
+## Identity service (`goblin-nip05d`)
+
+The optional `name` service lives in `goblin-nip05d/` (axum + SQLite) and is deployed at [goblin.st](https://goblin.st). It implements [NIP-05](https://nips.nostr.com/5) resolution, [NIP-98](https://nips.nostr.com/98)-authenticated registration and release (names are never transferred — on a key rotation you release the old name and re-register, or import your existing identity). The wallet is fully usable — and fully anonymous — without it. Avatars aren't stored or served — clients render them from the pubkey (an npub gradient with the username's first letter, else the Grin mark).
 
 ## License
 
 Apache License v2.0.
+
+## Credits
+
+🤖 Built with AI pair-programming assistance (Claude)
+
+The underlying cross-platform GRIN wallet engine is the upstream **Grim** project.

android/app/build.gradle

@@ -8,11 +8,18 @@ android {
     buildToolsVersion = '36.1.0'
 
     defaultConfig {
-        applicationId "mw.gri.android"
+        applicationId "st.goblin.wallet"
         minSdk 24
         targetSdk 36
-        versionCode 5
-        versionName "0.3.6"
+        // Version tracks Goblin's build number (GOBLIN_BUILD) so the Android
+        // package identity moves forward with every release instead of freezing.
+        // Same env the Rust side stamps into crate::BUILD; the in-app updater
+        // compares build numbers, and this keeps versionCode (Android's
+        // upgrade/downgrade integer) in lockstep. Bare local gradle → fallback.
+        // ponytail: fallback keeps a keyless ./gradlew working; CI/release sets the env
+        def goblinBuild = (System.getenv("GOBLIN_BUILD") ?: "").trim()
+        versionCode goblinBuild.isEmpty() ? 5 : goblinBuild.toInteger()
+        versionName goblinBuild.isEmpty() ? "0.3.6" : goblinBuild
     }
 
     lint {
@@ -71,7 +78,9 @@ android {
     applicationVariants.all { variant ->
         def flavor = variant.productFlavors[0].name
 
-        if (flavor == "ci") {
+        // The ci branch reads the private-mirror properties at configuration time,
+        // which runs for every variant — only enter it when the mirror is configured.
+        if (flavor == "ci" && project.hasProperty("mavenHost")) {
             repositories {
                 maven {
                     credentials {

android/app/src/main/AndroidManifest.xml

@@ -8,6 +8,7 @@
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
     <uses-permission android:name="android.permission.WAKE_LOCK" />
+    <uses-permission android:name="android.permission.VIBRATE" />
     <uses-permission android:name="android.permission.CAMERA"/>
     <uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" tools:ignore="ScopedStorage"/>
     <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" tools:ignore="ScopedStorage"/>
@@ -18,7 +19,7 @@
         android:largeHeap="true"
         android:allowBackup="true"
         android:icon="@mipmap/ic_launcher"
-        android:label="Grim"
+        android:label="Goblin"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:theme="@style/Theme.Main"
         android:enableOnBackInvokedCallback="false"
@@ -29,7 +30,7 @@
 
         <provider
             android:name=".FileProvider"
-            android:authorities="mw.gri.android.fileprovider"
+            android:authorities="st.goblin.wallet.fileprovider"
             android:exported="false"
             android:grantUriPermissions="true">
             <meta-data
@@ -40,7 +41,7 @@
         <activity
             android:launchMode="singleTask"
             android:name=".MainActivity"
-            android:configChanges="orientation|screenSize"
+            android:configChanges="orientation|screenSize|smallestScreenSize|screenLayout|uiMode|density|locale|layoutDirection|fontScale|colorMode"
             android:exported="true">
 
             <intent-filter>

android/app/src/main/java/mw/gri/android/BackgroundService.java

@@ -23,6 +23,14 @@ public class BackgroundService extends Service {
     private boolean mStopped = false;
 
     private static final int NOTIFICATION_ID = 1;
+    // One-shot "payment received" notification, separate from the persistent
+    // sync notification above.
+    private static final int PAYMENT_NOTIFICATION_ID = 2;
+    private static final String PAYMENT_CHANNEL_ID = "PaymentReceived";
+    // One-shot "payment requested" notification (someone asking us to pay them),
+    // separate from both the sync (id=1) and received-payment (id=2) notifications.
+    private static final int REQUEST_NOTIFICATION_ID = 3;
+    private static final String REQUEST_CHANNEL_ID = "PaymentRequested";
     private NotificationCompat.Builder mNotificationBuilder;
 
     private String mNotificationContentText = "";
@@ -70,12 +78,13 @@ public class BackgroundService extends Service {
                     if (Build.VERSION.SDK_INT > 25) {
                         startStopIntent.putExtra(EXTRA_NOTIFICATION_ID, NOTIFICATION_ID);
                     }
-                    if (canStart) {
-                        startStopIntent.setAction(ACTION_START_NODE);
-                        PendingIntent i = PendingIntent
-                                .getBroadcast(BackgroundService.this, 1, startStopIntent, PendingIntent.FLAG_IMMUTABLE | PendingIntent.FLAG_ONE_SHOT);
-                        mNotificationBuilder.addAction(R.drawable.ic_start, getStartText(), i);
-                    } else if (canStop) {
+                    // Goblin's background job is the light Nostr-over-Nym payment
+                    // listen (the "Listening for payments" status); the heavy
+                    // integrated node is never STARTED from this notification --
+                    // Goblin defaults to an external node, so the GRIM "Enable"
+                    // action is removed. Only offer STOP as a safety valve if the
+                    // node is somehow already running (started elsewhere).
+                    if (canStop) {
                         startStopIntent.setAction(ACTION_STOP_NODE);
                         PendingIntent i = PendingIntent
                                 .getBroadcast(BackgroundService.this, 1, startStopIntent, PendingIntent.FLAG_IMMUTABLE | PendingIntent.FLAG_ONE_SHOT);
@@ -189,6 +198,74 @@ public class BackgroundService extends Service {
         notificationManager.cancel(NOTIFICATION_ID);
     }
 
+    // Show a one-shot "payment received" notification (id=2), separate from
+    // the persistent sync notification (id=1). Called from native code via
+    // MainActivity when a payment slatepack is received over nostr, possibly
+    // while the app is backgrounded. Localization of the fixed strings is a
+    // follow-up (text is composed here at Java side).
+    public static void notifyPaymentReceived(Context context, String name, String amount) {
+        NotificationManager manager = context.getSystemService(NotificationManager.class);
+        if (manager == null) {
+            return;
+        }
+        // High-importance channel so the notification pops with sound + vibration.
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {
+            NotificationChannel channel = new NotificationChannel(
+                    PAYMENT_CHANNEL_ID, "Payments", NotificationManager.IMPORTANCE_HIGH
+            );
+            manager.createNotificationChannel(channel);
+        }
+        Intent i = context.getPackageManager().getLaunchIntentForPackage(context.getPackageName());
+        PendingIntent pendingIntent = PendingIntent.getActivity(context, 0, i, PendingIntent.FLAG_IMMUTABLE);
+        NotificationCompat.Builder builder = new NotificationCompat.Builder(context, PAYMENT_CHANNEL_ID)
+                .setContentTitle("Payment received")
+                .setContentText(name + " paid " + amount + " ツ")
+                .setSmallIcon(R.drawable.ic_stat_name)
+                .setPriority(NotificationCompat.PRIORITY_HIGH)
+                .setAutoCancel(true)
+                .setDefaults(NotificationCompat.DEFAULT_ALL)
+                .setContentIntent(pendingIntent);
+        try {
+            manager.notify(PAYMENT_NOTIFICATION_ID, builder.build());
+        } catch (SecurityException e) {
+            // POST_NOTIFICATIONS not granted: skip the notification, never the payment.
+        }
+    }
+
+    // Show a one-shot "payment requested" notification (id=3), separate from both
+    // the persistent sync notification (id=1) and the received-payment one (id=2).
+    // Called from native code via MainActivity when a payment request (Invoice1)
+    // arrives over nostr, possibly while the app is backgrounded. Mirrors
+    // notifyPaymentReceived; strings are composed here Java-side.
+    public static void notifyPaymentRequested(Context context, String name, String amount) {
+        NotificationManager manager = context.getSystemService(NotificationManager.class);
+        if (manager == null) {
+            return;
+        }
+        // High-importance channel so the notification pops with sound + vibration.
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {
+            NotificationChannel channel = new NotificationChannel(
+                    REQUEST_CHANNEL_ID, "Payment requests", NotificationManager.IMPORTANCE_HIGH
+            );
+            manager.createNotificationChannel(channel);
+        }
+        Intent i = context.getPackageManager().getLaunchIntentForPackage(context.getPackageName());
+        PendingIntent pendingIntent = PendingIntent.getActivity(context, 0, i, PendingIntent.FLAG_IMMUTABLE);
+        NotificationCompat.Builder builder = new NotificationCompat.Builder(context, REQUEST_CHANNEL_ID)
+                .setContentTitle("Payment requested")
+                .setContentText(name + " requested " + amount + " ツ")
+                .setSmallIcon(R.drawable.ic_stat_name)
+                .setPriority(NotificationCompat.PRIORITY_HIGH)
+                .setAutoCancel(true)
+                .setDefaults(NotificationCompat.DEFAULT_ALL)
+                .setContentIntent(pendingIntent);
+        try {
+            manager.notify(REQUEST_NOTIFICATION_ID, builder.build());
+        } catch (SecurityException e) {
+            // POST_NOTIFICATIONS not granted: skip the notification, never the request.
+        }
+    }
+
     // Start the service.
     public static void start(Context c) {
         if (!isServiceRunning(c)) {

android/app/src/main/java/mw/gri/android/MainActivity.java

@@ -69,6 +69,9 @@ public class MainActivity extends GameActivity {
 
     private ActivityResultLauncher<Intent> mFilePickResult = null;
     private ActivityResultLauncher<Intent> mOpenFilePermissionsResult = null;
+    private ActivityResultLauncher<Intent> mFileSaveResult = null;
+    // Source path (in the share cache) staged by Rust for the next saveFile().
+    private String mPendingSavePath = null;
 
     @SuppressLint("UnspecifiedRegisterReceiverFlag")
     @Override
@@ -145,6 +148,32 @@ public class MainActivity extends GameActivity {
                     }
                 });
 
+        // Register file SAVE result (Storage Access Framework CREATE_DOCUMENT):
+        // copy the staged source file into the user-chosen document.
+        mFileSaveResult = registerForActivityResult(
+                new ActivityResultContracts.StartActivityForResult(),
+                result -> {
+                    String src = mPendingSavePath;
+                    mPendingSavePath = null;
+                    if (result.getResultCode() == Activity.RESULT_OK && src != null) {
+                        Intent data = result.getData();
+                        if (data != null && data.getData() != null) {
+                            Uri uri = data.getData();
+                            try (InputStream is = new FileInputStream(new File(src));
+                                 OutputStream os = getContentResolver().openOutputStream(uri)) {
+                                byte[] buffer = new byte[4096];
+                                int length;
+                                while (is != null && (length = is.read(buffer)) > 0) {
+                                    os.write(buffer, 0, length);
+                                }
+                                if (os != null) os.flush();
+                            } catch (Exception e) {
+                                Log.e("grim", e.toString());
+                            }
+                        }
+                    }
+                });
+
         // Listener for display insets (cutouts) to pass values into native code.
         View content = getWindow().getDecorView().findViewById(android.R.id.content);
         ViewCompat.setOnApplyWindowInsetsListener(content, (v, insets) -> {
@@ -366,18 +395,25 @@ public class MainActivity extends GameActivity {
     @Override
     protected void onDestroy() {
         unregisterReceiver(mBroadcastReceiver);
-        BackgroundService.stop(this);
 
-        // Kill process after 3 secs if app was terminated from recent apps to prevent app hang.
-        new Thread(() -> {
-            try {
-                onTermination();
-                Thread.sleep(3000);
-                Process.killProcess(Process.myPid());
-            } catch (InterruptedException e) {
-                throw new RuntimeException(e);
-            }
-        }).start();
+        // Only tear the process down when the activity is actually finishing.
+        // onDestroy also fires for configuration-change recreations (rotation,
+        // density, uiMode); killing the process there takes the whole app down
+        // right as Android is about to recreate the activity.
+        if (isFinishing()) {
+            BackgroundService.stop(this);
+
+            // Kill process after 3 secs if app was terminated from recent apps to prevent app hang.
+            new Thread(() -> {
+                try {
+                    onTermination();
+                    Thread.sleep(3000);
+                    Process.killProcess(Process.myPid());
+                } catch (InterruptedException e) {
+                    throw new RuntimeException(e);
+                }
+            }).start();
+        }
 
         super.onDestroy();
     }
@@ -385,6 +421,18 @@ public class MainActivity extends GameActivity {
     // Notify native code to stop activity (e.g. node) if app was terminated from recent apps.
     public native void onTermination();
 
+    // Called from native code to show a "payment received" notification
+    // (BackgroundService id=2) when a payment arrives over nostr.
+    public void notifyPaymentReceived(String name, String amount) {
+        BackgroundService.notifyPaymentReceived(this, name, amount);
+    }
+
+    // Called from native code to show a "payment requested" notification
+    // (BackgroundService id=3) when a payment request arrives over nostr.
+    public void notifyPaymentRequested(String name, String amount) {
+        BackgroundService.notifyPaymentRequested(this, name, amount);
+    }
+
     // Called from native code to set text into clipboard.
     public void copyText(String data) {
         ClipboardManager clipboard = (ClipboardManager) getSystemService(Context.CLIPBOARD_SERVICE);
@@ -496,13 +544,84 @@ public class MainActivity extends GameActivity {
     // Called from native code to share data from provided path.
     public void shareData(String path) {
         File file = new File(path);
-        Uri uri = FileProvider.getUriForFile(this, "mw.gri.android.fileprovider", file);
+        Uri uri = FileProvider.getUriForFile(this, "st.goblin.wallet.fileprovider", file);
         Intent intent = new Intent(Intent.ACTION_SEND);
         intent.putExtra(Intent.EXTRA_STREAM, uri);
         intent.setType("text/*");
         startActivity(Intent.createChooser(intent, "Share data"));
     }
 
+    // Called from native code to SAVE a staged file to a user-chosen location.
+    // Launches the Storage Access Framework create-document picker; the result
+    // handler copies the staged source file into the chosen document.
+    public void saveFile(String path, String name) {
+        mPendingSavePath = path;
+        Intent intent = new Intent(Intent.ACTION_CREATE_DOCUMENT);
+        intent.addCategory(Intent.CATEGORY_OPENABLE);
+        intent.setType("application/octet-stream");
+        intent.putExtra(Intent.EXTRA_TITLE, name);
+        try {
+            mFileSaveResult.launch(intent);
+        } catch (android.content.ActivityNotFoundException ex) {
+            Log.e("grim", ex.toString());
+            mPendingSavePath = null;
+        }
+    }
+
+    // Called from native code to share plain text (e.g. a payment link) via the
+    // system share sheet.
+    public void shareText(String text) {
+        Intent intent = new Intent(Intent.ACTION_SEND);
+        intent.putExtra(Intent.EXTRA_TEXT, text);
+        intent.setType("text/plain");
+        startActivity(Intent.createChooser(intent, "Share"));
+    }
+
+    // Called from native code to play a short "error" haptic (rejected payment).
+    public void vibrateError() {
+        Vibrator vibrator = (Vibrator) getSystemService(Context.VIBRATOR_SERVICE);
+        if (vibrator == null || !vibrator.hasVibrator()) {
+            return;
+        }
+        // Two short pulses read as "no" / rejected, distinct from a tap.
+        long[] pattern = new long[]{0, 40, 70, 40};
+        if (Build.VERSION.SDK_INT >= 26) {
+            vibrator.vibrate(VibrationEffect.createWaveform(pattern, -1));
+        } else {
+            vibrator.vibrate(pattern, -1);
+        }
+    }
+
+    // Called from native code to play a tiny "tick" haptic on a successful copy.
+    public void vibrateCopy() {
+        Vibrator vibrator = (Vibrator) getSystemService(Context.VIBRATOR_SERVICE);
+        if (vibrator == null || !vibrator.hasVibrator()) {
+            return;
+        }
+        // One short, light tick — a confirmation, not an alert.
+        if (Build.VERSION.SDK_INT >= 29) {
+            vibrator.vibrate(VibrationEffect.createPredefined(VibrationEffect.EFFECT_TICK));
+        } else if (Build.VERSION.SDK_INT >= 26) {
+            vibrator.vibrate(VibrationEffect.createOneShot(20, VibrationEffect.DEFAULT_AMPLITUDE));
+        } else {
+            vibrator.vibrate(20);
+        }
+    }
+
+    // Called from native code to set status-bar icon color to contrast the
+    // in-app theme. white = light icons for a dark background. The app draws
+    // edge-to-edge, so the OS status-bar background is the app's own content;
+    // the icons must follow the theme or they vanish (dark-on-dark).
+    public void setStatusBarWhiteIcons(boolean white) {
+        runOnUiThread(() -> {
+            androidx.core.view.WindowInsetsControllerCompat c =
+                    androidx.core.view.WindowCompat.getInsetsController(getWindow(),
+                            getWindow().getDecorView());
+            // isAppearanceLightStatusBars == true means DARK icons.
+            c.setAppearanceLightStatusBars(!white);
+        });
+    }
+
     // Called from native code to check if device is using dark theme.
     public boolean useDarkTheme() {
         int currentNightMode = getResources().getConfiguration().uiMode & Configuration.UI_MODE_NIGHT_MASK;
@@ -512,7 +631,12 @@ public class MainActivity extends GameActivity {
     // Called from native code to pick the file.
     public void pickFile() {
         Intent intent = new Intent(Intent.ACTION_GET_CONTENT);
-        intent.setType("text/*");
+        // Permissive type: custom extensions like .backup have no registered
+        // MIME type, so any narrower filter greys them out in the picker and
+        // locks users out of restoring their identity. Content is validated
+        // on the native side after selection.
+        intent.setType("*/*");
+        intent.addCategory(Intent.CATEGORY_OPENABLE);
         try {
             mFilePickResult.launch(Intent.createChooser(intent, "Pick file"));
         } catch (android.content.ActivityNotFoundException ex) {

android/app/src/main/res/values/ic_launcher_background.xml

@@ -1,4 +1,4 @@
 <?xml version="1.0" encoding="utf-8"?>
 <resources>
-    <color name="ic_launcher_background">#FCEF03</color>
+    <color name="ic_launcher_background">#FFD60A</color>
 </resources>

android/settings.gradle

@@ -1,29 +1,26 @@
 pluginManagement {
     repositories {
-        maven {
-            credentials {
-                username "$mavenUser"
-                password "$mavenPassword"
+        // Private mirror only when its coordinates are supplied (-PmavenHost=… as in upstream CI);
+        // everyone else resolves plugins from the public repositories.
+        def mavenHost = providers.gradleProperty("mavenHost")
+        if (mavenHost.present) {
+            def mavenUser = providers.gradleProperty("mavenUser").get()
+            def mavenPassword = providers.gradleProperty("mavenPassword").get()
+            ["gradle-plugin-portal", "google-maven", "maven-central"].each { repo ->
+                maven {
+                    credentials {
+                        username mavenUser
+                        password mavenPassword
+                    }
+                    url "${mavenHost.get()}/repository/${repo}/"
+                    allowInsecureProtocol = true
+                }
             }
-            url "$mavenHost/repository/gradle-plugin-portal/"
-            allowInsecureProtocol = true
-        }
-        maven {
-            credentials {
-                username "$mavenUser"
-                password "$mavenPassword"
-            }
-            url "$mavenHost/repository/google-maven/"
-            allowInsecureProtocol = true
-        }
-        maven {
-            credentials {
-                username "$mavenUser"
-                password "$mavenPassword"
-            }
-            url "$mavenHost/repository/maven-central/"
-            allowInsecureProtocol = true
+        } else {
+            gradlePluginPortal()
+            google()
+            mavenCentral()
         }
     }
 }
-include ':app'
+include ':app'

build.rs

@@ -1,10 +1,43 @@
+use std::env;
 use std::path::PathBuf;
 use std::process::Command;
-use std::{env, fs};
+
+/// The GRIM commit Goblin forked from; builds count commits on top of it.
+const GOBLIN_FORK_BASE: &str = "b51a46b";
 
 fn main() {
 	built::write_built_file().expect("Failed to acquire build-time information");
 
+	// Goblin versioning is build-based: Build N = commits since the fork.
+	// An explicit GOBLIN_BUILD env wins (CI builds from the public single-commit
+	// squash where the fork base isn't an ancestor, so the git count can't run);
+	// otherwise count commits since the fork; "dev" only as a last resort.
+	let build = env::var("GOBLIN_BUILD")
+		.ok()
+		.map(|s| s.trim().to_string())
+		.filter(|s| !s.is_empty())
+		.or_else(|| {
+			Command::new("git")
+				.args([
+					"rev-list",
+					"--count",
+					&format!("{}..HEAD", GOBLIN_FORK_BASE),
+				])
+				.output()
+				.ok()
+				.filter(|o| o.status.success())
+				.and_then(|o| String::from_utf8(o.stdout).ok())
+				.map(|s| s.trim().to_string())
+				.filter(|s| !s.is_empty())
+		})
+		.unwrap_or_else(|| "dev".to_string());
+	println!("cargo:rustc-env=GOBLIN_BUILD={}", build);
+	// .git/HEAD only changes on branch switches; the reflog is appended on
+	// every commit, so the build number stays current.
+	println!("cargo:rerun-if-changed=.git/HEAD");
+	println!("cargo:rerun-if-changed=.git/logs/HEAD");
+	println!("cargo:rerun-if-env-changed=GOBLIN_BUILD");
+
 	// Setting up git hooks in the project: rustfmt and so on.
 	let git_hooks = format!(
 		"git config core.hooksPath {}",
@@ -13,89 +46,43 @@ fn main() {
 
 	if cfg!(target_os = "windows") {
 		Command::new("cmd")
-			.args(&["/C", &git_hooks])
+			.args(["/C", &git_hooks])
 			.output()
 			.expect("failed to execute git config for hooks");
 	} else {
 		Command::new("sh")
-			.args(&["-c", &git_hooks])
+			.args(["-c", &git_hooks])
 			.output()
 			.expect("failed to execute git config for hooks");
 	}
 
-	let out_dir = env::var("OUT_DIR").unwrap();
-	let tor_out_dir = format!("{}/tor", out_dir);
-	let mut webtunnel_file = format!("{}/webtunnel", tor_out_dir);
-	let exists = fs::exists(&webtunnel_file).unwrap();
-	if !exists {
-		// Create empty webtunnel file to allow build with include_bytes! macro.
-		fs::create_dir(&tor_out_dir).unwrap_or_default();
-		fs::File::create(&webtunnel_file).unwrap();
-	}
+	// Goblin links the Nym mixnet SDK in-process (see src/nym/) — no sidecar
+	// subprocess, no bundled/embedded helper binary, and no Tor/webtunnel. There
+	// is nothing transport-related to build or embed here.
 
-	let target = env::var("TARGET").unwrap();
-	let target_os = env::var("CARGO_CFG_TARGET_OS").unwrap();
-	if target_os == "ios" {
+	// Embed the Goblin icon into goblin.exe so Explorer, the taskbar and Alt-Tab
+	// show it even for the bare exe (the .msi shortcuts already carry it). No-op
+	// on every non-Windows platform.
+	embed_windows_icon();
+}
+
+/// Embed `wix/Product.ico` (the yellow Goblin icon) as goblin.exe's application
+/// icon resource. Gated to Windows hosts — that's where the `winresource`
+/// build-dependency is compiled and where the MSVC resource compiler (`rc.exe`,
+/// shipped on the windows-latest runner) is available; our Windows builds are
+/// always native MSVC, so host == target == windows.
+#[cfg(windows)]
+fn embed_windows_icon() {
+	if env::var("CARGO_CFG_TARGET_OS").as_deref() != Ok("windows") {
 		return;
 	}
-
-	let is_android = target_os == "android";
-	if is_android {
-		// Set a path to Android Webtunnel binary.
-		let arch = if target.contains("aarch64") {
-			"arm64-v8a"
-		} else if target.contains("arm") {
-			"armeabi-v7a"
-		} else {
-			"x86_64"
-		};
-		let root = env::var("CARGO_MANIFEST_DIR").unwrap();
-		webtunnel_file = format!(
-			"{}/android/app/src/main/jniLibs/{}/libwebtunnel.so",
-			root, arch
-		);
-	}
-
-	// Build if Webtunnel binary is empty or not exists.
-	let empty = match fs::File::open(&webtunnel_file) {
-		Ok(file) => file.metadata().unwrap().len() == 0,
-		Err(_) => true,
-	};
-	let build = !exists || empty;
-	if build {
-		// Setup GOOS env variable.
-		let go_os = if target_os == "macos" {
-			"darwin"
-		} else {
-			target_os.as_str()
-		};
-		// Setup GOARCH env variable.
-		let go_arch = if target.contains("aarch64") {
-			"arm64"
-		} else if target.contains("arm") {
-			"arm"
-		} else {
-			"amd64"
-		};
-		// Run Webtunnel Go build.
-		let output = if env::consts::OS == "windows" {
-			Command::new("./scripts/webtunnel.bat")
-				.arg(go_os)
-				.arg(go_arch)
-				.arg(webtunnel_file)
-				.output()
-		} else {
-			Command::new("bash")
-				.arg("./scripts/webtunnel.sh")
-				.arg(go_os)
-				.arg(go_arch)
-				.arg(webtunnel_file)
-				.output()
-		};
-		if let Ok(out) = output {
-			if out.status.code().is_none() || out.status.code().unwrap() != 0 {
-				panic!("webtunnel go build failed:\n{:?}", out);
-			}
-		}
+	let mut res = winresource::WindowsResource::new();
+	res.set_icon("wix/Product.ico");
+	if let Err(e) = res.compile() {
+		// Don't fail the build over the icon — just flag it.
+		println!("cargo:warning=winresource icon embed failed: {e}");
 	}
 }
+
+#[cfg(not(windows))]
+fn embed_windows_icon() {}

docs/TRANSACTIONS.md

@@ -0,0 +1,377 @@
+# Goblin transactions — how a payment works, end to end
+
+This document explains the full lifecycle of a Goblin payment: how money moves,
+every status it passes through, and the small guarantees that keep it safe. It is
+written against the code in `src/nostr/` and `src/wallet/` — function names and
+files are cited (line numbers drift, so they aren't).
+
+---
+
+## 1. The big picture: two layers
+
+A Goblin payment is **a Grin transaction wrapped in a private nostr message**.
+
+1. **Grin layer (the money).** Grin/Mimblewimble transactions are *interactive*:
+   the sender and recipient exchange a "slate" that passes through states until
+   it's finalized and posted on-chain. There are no addresses and no amounts on
+   the chain. Goblin reuses GRIM's full Grin node + wallet engine for this.
+
+2. **Nostr layer (the delivery).** Instead of making you hand slate files back
+   and forth, Goblin delivers each slate as an **end-to-end-encrypted nostr
+   direct message**, routed through the **Nym mixnet**. You pay a `username` or
+   `npub`; the recipient's wallet applies the slate automatically.
+
+The slate is the payload; nostr is the transport. Everything below is about how
+those two layers move together and what state is tracked at each step.
+
+### Slate states (Grin layer)
+
+Interactive Grin slates pass through numbered states. Goblin uses two flows:
+
+| Flow | States | Who builds what |
+| --- | --- | --- |
+| **Standard** (sender pushes money) | `Standard1` → `Standard2` → `Standard3` | Sender builds S1 (locks their outputs), recipient replies S2, sender finalizes S3 and posts |
+| **Invoice** (recipient pulls money) | `Invoice1` → `Invoice2` → `Invoice3` | Requester builds I1 (the ask), payer replies I2 (pays), requester finalizes I3 and posts |
+
+### Status + direction (Goblin's nostr metadata)
+
+For each payment Goblin stores a `TxNostrMeta` (`src/nostr/types.rs`) keyed by
+slate id, with a **direction** and a **status**:
+
+`NostrTxDirection`:
+- `Sent` — we pushed funds (we created S1).
+- `Received` — we were paid (we replied S2).
+- `RequestedByUs` — we issued an invoice (we created I1).
+- `RequestedOfUs` — someone invoiced us and we paid it (we replied I2).
+
+`NostrSendStatus`:
+- `Created` — slate built locally, DM not dispatched yet (durable checkpoint).
+- `AwaitingS2` — S1 sent, waiting for the recipient's S2 reply.
+- `ReceivedNoReply` — we processed an incoming S1 (or I1) and built our reply, but haven't dispatched it yet (crash-recovery point).
+- `RepliedS2` — our S2 reply was dispatched (we received a payment).
+- `AwaitingI2` — our I1 invoice was sent, waiting for the payer's I2.
+- `PaidAwaitingFinalize` — we paid an invoice (sent I2); the requester finalizes.
+- `Finalized` — slate finalized and posted on-chain.
+- `SendFailed` — DM dispatch failed; eligible for retry.
+- `Cancelled` — cancelled locally (manual cancel or 24h expiry).
+
+`Finalized` and `Cancelled` are **terminal**.
+
+---
+
+## 2. Identity & addressing
+
+Your nostr identity is a key that is **deliberately not derived from your wallet
+seed** (`src/nostr/identity.rs`) — so you can rotate it any time to stay
+unlinkable without ever touching your funds. It's stored encrypted at rest
+(NIP-49 ncryptsec under your wallet password).
+
+You can optionally claim a human-readable **`username`** from a **name authority**
+(a NIP-05 server). The authority is configurable (Settings → Identity → Name
+authority; `NostrConfig::{nip05_server, home_domain, set_nip05_server}`), which is
+what makes Goblin **federated**: a user on `bob@otherinstance.com` can pay
+`alice@goblin.st`, because a full `name@domain` always resolves against that
+domain's `/.well-known/nostr.json`. Bare names (`alice`) resolve against *your*
+configured home authority.
+
+Display rules (`data::display_name`, no `@` ever shown):
+- A local **petname** wins.
+- A verified name on **your home authority** shows bare (`alice`) + a check.
+- A verified name on a **foreign authority** shows `alice · domain` + a check, so
+  it can never masquerade as a home name.
+- Otherwise: a short npub.
+
+Names are kept fresh: see [§11 Name freshness](#11-contacts--name-freshness).
+
+---
+
+## 3. Transport: NIP-17 gift wraps over Nym
+
+A payment DM is built and sent by `send_payment_dm`; control messages (voids) by
+`send_control_dm` (both in `src/nostr/client.rs`). The message structure
+(`src/nostr/protocol.rs`):
+
+- The **payload** is the raw Grin slatepack armor (`BEGINSLATEPACK… ENDSLATEPACK`)
+  inside a kind-14 rumor, prefixed with a human preamble (`[Goblin] GRIN payment
+  message — open in Goblin …`) so a non-Goblin nostr client shows something sane.
+- **Tags:** a `["goblin","1"]` protocol marker always; an optional `["subject", …]`
+  carrying the user's note (sanitized); control DMs carry
+  `["goblin-action","void", slate_id]` and **no** slatepack.
+- The rumor is sealed and wrapped as a **kind-1059 gift wrap** (NIP-59 + NIP-44
+  encryption) via nostr-sdk's `send_private_msg_to`. Relays only ever see
+  ciphertext — never the amount, sender, or recipient.
+
+**Where it's delivered:** the recipient's **kind-10050 DM-relay list**
+(`fetch_dm_relays`), with our own default relays as fallback, plus any relay
+hints carried by a pasted `nprofile`. Default relays: `relay.goblin.st`,
+`relay.damus.io`, `nos.lol` (`src/nostr/relays.rs`), capped at `MAX_DM_RELAYS`.
+
+**How relays are reached:** every relay connection runs through the in-process
+**Nym mixnet** SOCKS5 proxy (`NymWebSocketTransport`; `run_service` waits for the
+proxy to be ready before dialing). The mixnet hides who-talks-to-whom at the
+network layer. The Grin *node* connection (block sync + broadcasting the final tx)
+is direct clearnet — it's public chain data, the same for everyone, not tied to
+your identity.
+
+The UI tracks an outgoing attempt via a coarse **send phase**
+(`client::send_phase`): `IDLE / WORKING / SENT / FAILED / REQUEST_BLOCKED`, with a
+human-readable failure reason on `FAILED`.
+
+---
+
+## 4. Flow A — Pay by username/npub (Standard, we send)
+
+Dispatched as `WalletTask::NostrSend(amount, npub, note, relay_hints)`; handled in
+`wallet.rs`.
+
+1. `w.send(amount)` builds the **S1** slate and **locks our outputs** (the funds
+   are reserved but not yet spent).
+2. **Save meta `Created`** *before* any network call — this is the durable point
+   a crash recovers from.
+3. `send_payment_dm` delivers S1 → **`AwaitingS2`** (storing the gift-wrap event
+   id). On dispatch failure → **`SendFailed`** (retryable). On success the contact
+   is created/refreshed (so people you pay appear in Suggested) and a background
+   NIP-05 lookup resolves their name.
+4. The recipient replies S2 (Flow B). When their S2 gift wrap arrives, the ingest
+   guard routes it to `nostr_finalize_post`, which finalizes **S3** and posts it
+   on-chain → **`Finalized`**.
+
+```
+Created ──(S1 sent)──▶ AwaitingS2 ──(their S2 arrives)──▶ Finalized
+   └──(dispatch fails)──▶ SendFailed ──(retry)──▶ AwaitingS2
+   └──(manual cancel / 24h expiry)──▶ Cancelled  (outputs unlocked)
+```
+
+---
+
+## 5. Flow B — Receiving (Standard, we're paid)
+
+Our service subscribes to kind-1059 gift wraps addressed to us
+(`run_service`). When an **S1** arrives, `handle_wrap` runs the ingest pipeline
+(§7) and `decide()` classifies it by the **accept policy**:
+
+- `Everyone` → **AutoReceive** (auto-reply S2).
+- `Contacts` → AutoReceive if the sender is a known contact, else **SurfaceIncoming** (an approval card).
+- `Ask` → always SurfaceIncoming.
+
+**AutoReceive:** `nostr_receive` builds the **S2** reply; we save meta
+`Received` / **`ReceivedNoReply`**, mark the message processed, then dispatch S2 →
+**`RepliedS2`**. If the S2 dispatch fails we stay at `ReceivedNoReply` and resend
+on the next start (§9). The sender then finalizes S3 (Flow A step 4).
+
+```
+(incoming S1) ──▶ ReceivedNoReply ──(S2 dispatched)──▶ RepliedS2
+                      └──(dispatch fails)──▶ stays ReceivedNoReply → resent on restart
+```
+
+**SurfaceIncoming** instead stores a `PaymentRequest` (status `Pending`) for the
+user to approve or decline — see Flow D.
+
+---
+
+## 6. Flow C — Request money (Invoice)
+
+**We request** — `WalletTask::NostrRequest(amount, npub, note, …)`:
+
+1. First we check the recipient hasn't opted out: `accepts_requests` reads their
+   kind-0 `goblin_accepts_requests` field; an explicit `false` → phase
+   `REQUEST_BLOCKED` and we stop (fail-open: unknown/unreachable = allowed).
+2. `issue_invoice(amount)` builds **I1** (no outputs locked — it's just an ask).
+3. Save meta `RequestedByUs / Created`, dispatch I1 → **`AwaitingI2`**.
+4. When the payer's **I2** arrives, the ingest guard finalizes **I3** and posts →
+   **`Finalized`**.
+
+**They approve & pay** (the other side of the same flow) is Flow D.
+
+```
+Created ──(I1 sent)──▶ AwaitingI2 ──(their I2 arrives)──▶ Finalized
+   └──(SendFailed → retry)        └──(cancel / expiry)──▶ Cancelled
+```
+
+---
+
+## 7. Flow D — Approving an incoming request (we pay an invoice)
+
+Someone's **I1** is *always* surfaced as a `PaymentRequest`, **never auto-paid**
+(a hard security invariant). It shows in the Requests list. The user can:
+
+- **Approve** → `WalletTask::NostrPayRequest(rumor_id)`: re-parse the stored
+  slatepack (must still be I1), `nostr_pay` builds **I2** (this is where *we* pay),
+  save meta `RequestedOfUs / ReceivedNoReply`, dispatch I2 → **`PaidAwaitingFinalize`**,
+  mark the request `Approved`. The requester then finalizes I3.
+  A "Paying…" spinner shows while this runs; the card clears on success.
+- **Decline** → `WalletTask::NostrDeclineRequest(rumor_id)`: mark `Declined` and
+  send a **void** control DM so the requester's side clears too.
+
+A surfaced incoming *Standard* S1 (from SurfaceIncoming) is approved the same way,
+but routes through `nostr_receive` (Flow B) rather than `nostr_pay`.
+
+`RequestStatus`: `Pending → Approved | Declined | Expired | Cancelled`
+(`Cancelled` = the requester withdrew it via a void).
+
+---
+
+## 8. The ingest guard — `decide()`
+
+Every incoming gift wrap is judged by `decide()` (`src/nostr/ingest.rs`), a
+**positive allow-list**: anything not explicitly accepted is `Drop`ped. This is
+the security core. Summary:
+
+| Incoming state | Condition | Decision |
+| --- | --- | --- |
+| `Standard1` | amount 0, or slate already known | **Drop** |
+| `Standard1` | new, policy `Everyone` (or `Contacts` + known) | **AutoReceive** |
+| `Standard1` | new, policy `Contacts` + unknown, or `Ask` | **SurfaceIncoming** |
+| `Standard2` | matches our pending `Sent` tx (status `AwaitingS2/Created/SendFailed`) **and** sender == stored counterparty **and** the tx exists | **FinalizePost** |
+| `Standard2` | sender mismatch, or status `Cancelled`/`Finalized`, or no meta | **Drop** |
+| `Invoice1` | amount 0, already known, or incoming-requests disabled | **Drop** |
+| `Invoice1` | otherwise | **SurfaceRequest** (never auto-pay) |
+| `Invoice2` | matches our pending `RequestedByUs` tx + sender match | **FinalizePost** |
+| `Invoice3` / unknown | — | **Drop** |
+
+Key consequences:
+- A **late S2 on a cancelled send** falls through to `Drop` — so cancelling is
+  safe even if the recipient's reply is still in flight (the cancel marks the meta
+  `Cancelled` *first*, and `decide()` then drops the S2).
+- Finalize only happens for a slate we are actually waiting on, from the exact key
+  we sent to.
+- Invoices are never auto-paid.
+
+---
+
+## 9. Cancel & reclaim
+
+A stuck outgoing send (recipient never replied) locks your outputs. You can
+reclaim them manually from the receipt's **"Cancel payment"** button, or the 24h
+auto-expiry does it for you (§10).
+
+`WalletTask::NostrCancelSend(slate_id)` (`wallet.rs`):
+1. Take the `cancel_finalize_lock` — this **serializes against a concurrent S2
+   finalize** so the two can't both win (cancel-and-post would be a double action).
+2. **Re-check live state under the lock.** If the tx is already `Finalized`, or
+   confirmed/posted on-chain → do nothing and return `CancelOutcome::AlreadyCompleted`
+   ("This payment already went through and can't be cancelled"). If already
+   `Cancelled` → idempotent success.
+3. Otherwise mark the meta **`Cancelled` first**, then `w.cancel(tx_id)` to unlock
+   the Grin outputs, then best-effort send a **void** control DM to the recipient
+   (they're likely offline). → `CancelOutcome::Cancelled` ("your funds are
+   available again").
+
+**Receipt button visibility** (`cancelable_send` gate): shown only while the send
+is still unanswered — direction `Sent`, status in `{Created, AwaitingS2,
+SendFailed}`, **not** confirmed, **not** already cancelled, and either it never
+reached a relay (`SendFailed`, shown immediately) or the grace window
+(`cancel_grace_secs`, default 600s) has passed. The instant the recipient accepts
+(status leaves that set) the button disappears.
+
+**Recipient side / void ordering:** a void control message marks the slate so that
+if the recipient's wallet later (or earlier) sees the S1, it's dropped — including
+the **void-before-S1** race, where the void arrives first and is recorded as
+`void:{slate_id}:{sender}` so the subsequent S1 is dropped.
+
+There are sibling tasks for the other directions: `NostrCancelOutgoing` (withdraw
+an invoice we issued) and `NostrDeclineRequest` (decline an incoming request) —
+both send a void and mark the local record.
+
+---
+
+## 10. Auto-expiry (24h)
+
+`expire_stale` (`src/nostr/client.rs`) runs from the sync loop. Any non-terminal
+meta older than `expiry_secs` (default 24h) is expired:
+
+- If it **locked our outputs** (`expiry_locks_outputs`: a `Sent` send in
+  `Created/AwaitingS2/SendFailed`, or a `RequestedOfUs` invoice we paid in
+  `PaidAwaitingFinalize`) → cancel the Grin tx to unlock, and mark meta `Cancelled`.
+- If it locked nothing of ours (incoming payments, invoices we issued) → just
+  annotate `Cancelled`.
+- Pending incoming `PaymentRequest`s flip to `Expired`.
+
+This is the same unlock path as manual cancel; the manual button just lets you act
+before the 24h.
+
+---
+
+## 11. Crash recovery (`reconcile`)
+
+On service start, `reconcile` (`client.rs`) re-dispatches any pending outgoing
+message within a 7-day window, by `(direction, status)`:
+
+| Direction · status | Slate | Action |
+| --- | --- | --- |
+| `Sent` · `Created`/`SendFailed` | Standard1 | resend S1 → `AwaitingS2` |
+| `RequestedByUs` · `Created`/`SendFailed` | Invoice1 | resend I1 → `AwaitingI2` |
+| `Received` · `ReceivedNoReply` | Standard2 | resend S2 → `RepliedS2` |
+| `RequestedOfUs` · `ReceivedNoReply` | Invoice2 | resend I2 → `PaidAwaitingFinalize` |
+
+Because the slatepack text is persisted and the meta is written *before* every
+dispatch, a crash at any point is recoverable: re-sending an already-delivered
+message is harmless (the peer dedups it; see §12).
+
+---
+
+## 12. Confirmations (X / N)
+
+A posted Grin tx matures over `min_confirmations` blocks (default 10) before it's
+spendable. Grin marks a tx `confirmed` at the **first** block, but Goblin's
+receipt counts toward the spendable threshold so the number actually moves
+(`data::receipt_detail`):
+
+- broadcast, no block yet → `0 / N`
+- on-chain, immature → `count / N` where `count = tip − inclusion_height + 1`
+- `count ≥ N` → matured (shown as complete; the receipt's network-fee row is shown
+  only for outgoing payments — a recipient pays no fee).
+
+---
+
+## 13. Reliability primitives
+
+- **Dedup / processed markers** (`store::{is_processed, mark_processed,
+  prune_processed}`): every wrap is recorded at three levels — the gift-wrap event
+  id, the inner rumor id, and `slate:{id}:{state}` — so a replayed or re-sent
+  message is processed exactly once. Markers TTL out after 30 days
+  (pruned on start + hourly).
+- **Rate limiting** (`allow_sender`): per-sender sliding window — 30 events/hour
+  for known contacts, 10/hour for unknowns — plus a global decrypt ceiling
+  (~120 NIP-44 unwraps/min) to bound CPU/battery against fresh-keypair spam. A
+  message dropped purely for the *global* ceiling isn't marked processed, so it can
+  be retried later.
+- **Seal integrity:** the gift-wrap seal signer must equal the inner rumor author,
+  and self-addressed messages are dropped.
+- **The cancel/finalize lock** (§9) prevents a cancel and a finalize from both
+  succeeding on the same slate.
+
+---
+
+## 14. Name freshness (contacts)
+
+Cached `@usernames` are re-validated against the name authority on a periodic
+sweep (`NAME_REVERIFY_INTERVAL_SECS`, ~78s, capped per tick), and once at app open
+(persisted `last_name_sweep_at`, gated to the interval).
+`nip05::check` returns `Verified / Mismatch / Unreachable`: a name is only
+**cleared** (falls back to the npub) on a definitive `Mismatch` (the server says
+it's gone or now maps to a different key) — never on a transient network failure.
+This catches released or reassigned names and stops a freed name from
+impersonating someone. A user-set petname is never touched.
+
+---
+
+## 15. File map
+
+| Concern | File |
+| --- | --- |
+| Status / direction / meta types | `src/nostr/types.rs` |
+| Gift-wrap + control message build/parse | `src/nostr/protocol.rs` |
+| Service loop, send/receive/finalize, expiry, reconcile, name sweep | `src/nostr/client.rs` |
+| Ingest allow-list | `src/nostr/ingest.rs` |
+| Wallet task handlers (NostrSend / Request / PayRequest / CancelSend / finalize) | `src/wallet/wallet.rs` |
+| Task definitions | `src/wallet/types.rs` |
+| Metadata + dedup + contacts store | `src/nostr/store.rs` |
+| NIP-05 resolve / verify / register, name authority | `src/nostr/nip05.rs` |
+| Identity (key, NIP-49 backup) | `src/nostr/identity.rs` |
+| Receipt / activity / confirmations / display name | `src/gui/views/goblin/data.rs` |
+| Relay defaults + name-authority defaults | `src/nostr/relays.rs` |
+
+---
+
+🤖 Documentation written with AI pair-programming assistance (Claude).

examples/avatar_ring.rs

@@ -0,0 +1,112 @@
+//! Avatar sizing-checkpoint harness: renders the REAL `avatar_tex` (custom
+//! image, no ring) and `gradient_avatar` across every size the app uses.
+//! Names never affect the avatar — this just checks sizing by eye.
+//! Run: `cargo run --example avatar_ring` (screenshots taken externally).
+
+use eframe::egui;
+use grim::gui::views::goblin::widgets as w;
+
+const SIZES: [f32; 6] = [28.0, 40.0, 48.0, 56.0, 72.0, 96.0];
+const NAMES: [&str; 3] = ["alice", "bob", "carmen"];
+
+struct App {
+	tex: Vec<egui::TextureHandle>,
+}
+
+/// A synthetic "profile photo": diagonal two-tone blend with a light disc, so
+/// sizing is judged against something photo-like rather than a flat fill.
+fn photo(ctx: &egui::Context, name: &str, a: [u8; 3], b: [u8; 3]) -> egui::TextureHandle {
+	const N: usize = 128;
+	let mut px = Vec::with_capacity(N * N);
+	for y in 0..N {
+		for x in 0..N {
+			let t = (x + y) as f32 / (2 * N) as f32;
+			let mut r = a[0] as f32 * (1.0 - t) + b[0] as f32 * t;
+			let mut g = a[1] as f32 * (1.0 - t) + b[1] as f32 * t;
+			let mut bl = a[2] as f32 * (1.0 - t) + b[2] as f32 * t;
+			let dx = x as f32 - 44.0;
+			let dy = y as f32 - 40.0;
+			if (dx * dx + dy * dy).sqrt() < 26.0 {
+				r = (r + 90.0).min(255.0);
+				g = (g + 90.0).min(255.0);
+				bl = (bl + 90.0).min(255.0);
+			}
+			px.push(egui::Color32::from_rgb(r as u8, g as u8, bl as u8));
+		}
+	}
+	let img = egui::ColorImage {
+		size: [N, N],
+		source_size: egui::Vec2::splat(N as f32),
+		pixels: px,
+	};
+	ctx.load_texture(name.to_string(), img, Default::default())
+}
+
+impl App {
+	fn new(cc: &eframe::CreationContext) -> Self {
+		egui_extras::install_image_loaders(&cc.egui_ctx);
+		let tex = vec![
+			photo(&cc.egui_ctx, "alice", [180, 120, 90], [90, 60, 120]),
+			photo(&cc.egui_ctx, "bob", [70, 110, 160], [40, 160, 120]),
+			photo(&cc.egui_ctx, "carmen", [160, 70, 90], [220, 170, 80]),
+		];
+		Self { tex }
+	}
+}
+
+impl eframe::App for App {
+	fn update(&mut self, ctx: &egui::Context, _f: &mut eframe::Frame) {
+		egui::CentralPanel::default()
+			.frame(egui::Frame::default().fill(egui::Color32::from_rgb(0xFA, 0xFA, 0xF7)))
+			.show(ctx, |ui| {
+				ui.add_space(10.0);
+				ui.heading("avatar sizing sheet (no ring — names never affect the avatar)");
+				ui.add_space(12.0);
+				for (i, name) in NAMES.iter().enumerate() {
+					ui.horizontal(|ui| {
+						ui.add_space(12.0);
+						ui.label(format!("{name:>7}"));
+						for size in SIZES {
+							ui.add_space(14.0);
+							w::avatar_tex(ui, &self.tex[i], name, size);
+						}
+					});
+					ui.add_space(14.0);
+				}
+				ui.separator();
+				ui.label("anonymous npub (grinmark gradient):");
+				ui.add_space(8.0);
+				ui.horizontal(|ui| {
+					ui.add_space(12.0);
+					ui.label("        ");
+					for (i, size) in SIZES.iter().enumerate() {
+						ui.add_space(14.0);
+						w::gradient_avatar(ui, &format!("{i}deadbeef{i}"), *size);
+					}
+				});
+				ui.add_space(10.0);
+				ui.horizontal(|ui| {
+					ui.add_space(12.0);
+					ui.label("sizes:  ");
+					for size in SIZES {
+						ui.add_space(14.0);
+						ui.allocate_ui(egui::Vec2::new(size, 16.0), |ui| {
+							ui.centered_and_justified(|ui| ui.small(format!("{size}")));
+						});
+					}
+				});
+			});
+	}
+}
+
+fn main() -> eframe::Result {
+	let opts = eframe::NativeOptions {
+		viewport: egui::ViewportBuilder::default().with_inner_size([900.0, 640.0]),
+		..Default::default()
+	};
+	eframe::run_native(
+		"avatar-ring",
+		opts,
+		Box::new(|cc| Ok(Box::new(App::new(cc)))),
+	)
+}

examples/tunnel_measure.rs

@@ -0,0 +1,105 @@
+// Local network measurement for the Nym read tunnel. Uses the wallet's REAL
+// transport (warm_up + tuned tunnel + reselect + DNS cache + HTTP keep-alive
+// pool), then fetches the live price API over the mixnet on a fixed interval
+// so we can see (a) cold connect time, (b) whether the connection stays warm,
+// (c) per-fetch latency over time.
+//
+//   cargo run --release --example tunnel_measure -- <seconds> [interval_secs]
+//
+// e.g. `-- 300` (5 min) or `-- 600 15` (10 min, every 15s).
+
+use std::time::{Duration, Instant};
+
+const PRICE_URL: &str = "https://api.coingecko.com/api/v3/simple/price?ids=grin&vs_currencies=usd";
+
+#[tokio::main]
+async fn main() {
+	let _ = rustls::crypto::ring::default_provider().install_default();
+
+	let args: Vec<String> = std::env::args().collect();
+	let total_secs: u64 = args.get(1).and_then(|s| s.parse().ok()).unwrap_or(300);
+	let interval_secs: u64 = args.get(2).and_then(|s| s.parse().ok()).unwrap_or(15);
+
+	let run_start = Instant::now();
+	println!("[t=0.0s] warm_up(): starting the tunnel");
+	grim::nym::warm_up();
+
+	// Cold connect time: poll is_ready().
+	let mut connect_ms = None;
+	let t_connect = Instant::now();
+	while t_connect.elapsed() < Duration::from_secs(120) {
+		if grim::nym::is_ready() {
+			connect_ms = Some(t_connect.elapsed().as_millis());
+			break;
+		}
+		tokio::time::sleep(Duration::from_millis(200)).await;
+	}
+	match connect_ms {
+		Some(ms) => println!(
+			"[t={:.1}s] TUNNEL READY (cold connect {} ms)",
+			run_start.elapsed().as_secs_f64(),
+			ms
+		),
+		None => {
+			println!("tunnel never became ready in 120s; aborting");
+			return;
+		}
+	}
+
+	// Warm-loop: fetch price over the mixnet every interval, record latency.
+	let mut lats: Vec<u128> = vec![];
+	let mut fails = 0u32;
+	let deadline = run_start + Duration::from_secs(total_secs);
+	let mut n = 0u32;
+	while Instant::now() < deadline {
+		n += 1;
+		let t = Instant::now();
+		let ok = grim::nym::http_request("GET", PRICE_URL.to_string(), None, vec![]).await;
+		let ms = t.elapsed().as_millis();
+		match ok {
+			Some(body) if body.contains("grin") => {
+				lats.push(ms);
+				println!(
+					"[t={:.1}s] fetch #{n}: {} ms  ready={}",
+					run_start.elapsed().as_secs_f64(),
+					ms,
+					grim::nym::is_ready()
+				);
+			}
+			other => {
+				fails += 1;
+				println!(
+					"[t={:.1}s] fetch #{n}: FAIL after {} ms (ready={}, body={:?})",
+					run_start.elapsed().as_secs_f64(),
+					ms,
+					grim::nym::is_ready(),
+					other.map(|b| b.chars().take(40).collect::<String>())
+				);
+			}
+		}
+		tokio::time::sleep(Duration::from_secs(interval_secs)).await;
+	}
+
+	// Summary.
+	lats.sort_unstable();
+	let n_ok = lats.len();
+	let sum: u128 = lats.iter().sum();
+	let median = lats.get(n_ok / 2).copied().unwrap_or(0);
+	println!(
+		"\n==== SUMMARY ({}s run, {}s interval) ====",
+		total_secs, interval_secs
+	);
+	println!("cold connect: {} ms", connect_ms.unwrap());
+	println!("fetches: {} ok, {} failed", n_ok, fails);
+	if n_ok > 0 {
+		println!(
+			"warm fetch latency ms: min {} / median {} / max {} / mean {}",
+			lats.first().unwrap(),
+			median,
+			lats.last().unwrap(),
+			sum / n_ok as u128
+		);
+		let head: Vec<u128> = lats.iter().take(3).copied().collect();
+		println!("(sorted sample) fastest 3: {:?}", head);
+	}
+}

fonts/GEIST-OFL.txt

@@ -0,0 +1,93 @@
+Copyright 2024 The Geist Project Authors (https://github.com/vercel/geist-font)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+https://openfontlicense.org
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded, 
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.

img/goblin-logo2.svg

@@ -0,0 +1,48 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
+ "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg"
+ width="600.000000pt" height="601.000000pt" viewBox="0 0 600.000000 601.000000"
+ preserveAspectRatio="xMidYMid meet">
+<g transform="translate(0.000000,601.000000) scale(0.050000,-0.050000)"
+fill="#ffffff" stroke="none">
+<path d="M195 11784 c-515 -1551 98 -2966 1520 -3514 171 -66 171 -72 2 -72
+-415 0 -893 215 -1273 572 -178 167 -181 163 -77 -83 478 -1130 1770 -1734
+2963 -1384 283 83 309 101 420 292 376 648 1038 1116 1763 1245 l143 26 100
+202 c887 1780 -911 3344 -3076 2675 l-170 -52 220 -14 c480 -32 818 -114 1118
+-273 258 -137 548 -414 624 -597 l32 -76 -87 76 c-435 375 -938 524 -1557 461
+-273 -28 -340 -39 -740 -120 -893 -182 -1449 24 -1756 650 l-98 200 -71 -214z"/>
+<path d="M9720 10053 c0 -146 -256 -556 -441 -705 -381 -308 -766 -380 -1559
+-290 -1209 137 -2026 -255 -2519 -1208 -78 -151 -82 -156 -72 -77 18 140 128
+450 210 592 43 74 73 135 67 135 -25 0 -397 -184 -512 -253 -966 -580 -1594
+-1674 -1594 -2777 0 -104 -4 -190 -10 -190 -5 0 -65 43 -132 95 -650 503
+-1118 775 -1606 935 -290 95 -302 94 -242 -15 52 -95 166 -372 191 -465 9 -33
+34 -121 56 -195 48 -161 120 -508 194 -935 118 -684 437 -1371 795 -1715 185
+-178 324 -239 594 -262 144 -13 150 -15 147 -63 -1 -27 -14 -174 -28 -326 -83
+-902 258 -1568 1037 -2024 139 -81 161 -80 127 4 -37 96 -85 369 -96 546 l-10
+170 46 -60 c328 -431 869 -753 1497 -891 351 -77 1285 -67 1426 15 9 5 -104
+50 -250 98 -649 217 -1341 668 -1680 1096 -81 102 -88 147 -11 78 157 -142
+653 -406 925 -493 783 -249 1542 -242 2332 20 l274 91 106 -83 c298 -236 798
+-328 1259 -231 197 42 196 38 32 169 -156 124 -344 356 -443 546 l-60 116 70
+52 c544 408 783 906 627 1300 l-41 102 170 138 c442 355 584 624 813 1537 186
+742 257 952 452 1328 l118 227 -145 -14 c-693 -68 -1425 -411 -1729 -810 -99
+-130 -112 -127 -165 44 -54 175 -217 511 -308 636 -64 88 -70 91 -224 117
+-314 52 -637 184 -956 390 -260 168 -509 436 -280 302 127 -74 302 -160 430
+-211 97 -38 146 -55 348 -118 335 -105 983 -129 1280 -47 961 264 1554 1048
+1729 2286 28 199 45 685 23 677 -9 -4 -73 -77 -141 -163 -650 -810 -1594
+-1147 -2451 -873 -251 80 -246 76 -171 121 395 240 638 767 578 1253 -25 209
+-77 395 -77 278z m-682 -4962 c306 -158 601 -1396 416 -1747 -118 -224 -283
+-345 -526 -387 -455 -78 -577 227 -456 1143 96 725 320 1118 566 991z m-3115
+-156 c371 -172 699 -815 799 -1565 34 -251 19 -307 -108 -422 -575 -519 -1624
+-162 -1931 657 -265 709 593 1630 1240 1330z m5261 -120 c20 -377 -135 -912
+-290 -995 -70 -38 -72 -35 -157 230 l-64 200 -24 -90 c-50 -192 -144 -340
+-215 -340 -111 0 -316 804 -228 893 53 53 200 -130 226 -283 l14 -80 36 105
+c100 293 222 333 332 109 l54 -110 35 105 c89 260 271 427 281 256z m-8491
+-284 l75 -230 52 160 c89 272 210 336 295 154 126 -268 210 -757 142 -825 -44
+-44 -163 120 -247 340 -12 33 -19 24 -39 -50 -89 -330 -286 -346 -374 -30
+l-22 80 -35 -125 c-54 -196 -223 -428 -275 -377 -37 37 -29 448 11 608 70 276
+219 524 314 524 17 0 56 -87 103 -229z m4164 -2698 c137 -311 883 -373 1408
+-116 162 78 171 64 42 -61 -317 -305 -854 -408 -1271 -244 -223 87 -516 338
+-516 442 0 53 140 267 212 324 l58 46 14 -152 c8 -84 31 -191 53 -239z"/>
+</g>
+</svg>

img/goblin-mark-black.svg

@@ -0,0 +1,48 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
+ "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg"
+ width="600.000000pt" height="601.000000pt" viewBox="0 0 600.000000 601.000000"
+ preserveAspectRatio="xMidYMid meet">
+<g transform="translate(0.000000,601.000000) scale(0.050000,-0.050000)"
+fill="#000000" stroke="none">
+<path d="M195 11784 c-515 -1551 98 -2966 1520 -3514 171 -66 171 -72 2 -72
+-415 0 -893 215 -1273 572 -178 167 -181 163 -77 -83 478 -1130 1770 -1734
+2963 -1384 283 83 309 101 420 292 376 648 1038 1116 1763 1245 l143 26 100
+202 c887 1780 -911 3344 -3076 2675 l-170 -52 220 -14 c480 -32 818 -114 1118
+-273 258 -137 548 -414 624 -597 l32 -76 -87 76 c-435 375 -938 524 -1557 461
+-273 -28 -340 -39 -740 -120 -893 -182 -1449 24 -1756 650 l-98 200 -71 -214z"/>
+<path d="M9720 10053 c0 -146 -256 -556 -441 -705 -381 -308 -766 -380 -1559
+-290 -1178 133 -2048 -270 -2488 -1152 -57 -115 -92 -149 -92 -89 0 78 123
+415 199 548 43 74 73 135 67 135 -25 0 -397 -184 -512 -253 -962 -578 -1594
+-1675 -1594 -2767 0 -209 -2 -210 -154 -95 -393 297 -523 388 -751 525 -321
+192 -571 311 -843 400 -290 95 -302 94 -242 -15 52 -95 166 -372 191 -465 9
+-33 34 -121 56 -195 48 -161 120 -508 194 -935 118 -684 437 -1371 795 -1715
+185 -178 324 -239 594 -262 144 -13 150 -15 147 -63 -1 -27 -14 -174 -28 -326
+-83 -902 258 -1568 1037 -2024 139 -81 161 -80 127 4 -37 96 -85 369 -96 546
+l-10 170 46 -60 c328 -431 869 -753 1497 -891 351 -77 1285 -67 1426 15 9 5
+-104 50 -250 98 -653 218 -1499 778 -1704 1129 -43 73 -54 78 188 -79 230
+-149 543 -303 750 -369 783 -249 1542 -242 2332 20 l274 91 106 -83 c298 -236
+798 -328 1259 -231 197 42 196 38 32 169 -156 124 -344 356 -443 546 l-60 116
+70 52 c544 408 783 906 627 1300 l-41 102 170 138 c442 355 584 624 813 1537
+186 742 257 952 452 1328 l118 227 -145 -14 c-693 -68 -1425 -411 -1729 -810
+-99 -130 -112 -127 -165 44 -54 175 -217 511 -308 636 -64 88 -70 91 -224 117
+-419 70 -947 328 -1223 597 -98 96 -153 192 -70 122 41 -35 332 -177 487 -238
+97 -38 146 -55 348 -118 335 -105 983 -129 1280 -47 1070 294 1688 1238 1761
+2691 16 304 7 325 -82 190 -88 -134 -504 -535 -669 -645 -618 -412 -1228 -507
+-1895 -296 -192 60 -199 77 -67 163 428 277 628 871 480 1428 -20 75 -38 98
+-38 48z m-682 -4962 c306 -158 601 -1396 416 -1747 -118 -224 -283 -345 -526
+-387 -455 -78 -577 227 -456 1143 96 725 320 1118 566 991z m-3115 -156 c371
+-172 699 -815 799 -1565 34 -251 19 -307 -108 -422 -575 -519 -1624 -162
+-1931 657 -265 709 593 1630 1240 1330z m5261 -120 c20 -377 -135 -912 -290
+-995 -70 -38 -72 -35 -157 230 l-64 200 -24 -90 c-50 -192 -144 -340 -215
+-340 -111 0 -316 804 -228 893 53 53 200 -130 226 -283 l14 -80 36 105 c100
+293 222 333 332 109 l54 -110 35 105 c89 260 271 427 281 256z m-8491 -284
+l75 -230 52 160 c89 272 210 336 295 154 126 -268 210 -757 142 -825 -44 -44
+-163 120 -247 340 -12 33 -19 24 -39 -50 -89 -330 -286 -346 -374 -30 l-22 80
+-35 -125 c-54 -196 -223 -428 -275 -377 -37 37 -29 448 11 608 70 276 219 524
+314 524 17 0 56 -87 103 -229z m4164 -2698 c137 -310 856 -372 1401 -121 175
+81 194 76 89 -23 -356 -336 -878 -447 -1310 -278 -224 88 -517 339 -517 443 0
+53 140 267 212 324 l58 46 14 -152 c8 -84 31 -191 53 -239z"/>
+</g>
+</svg>

img/goblin-mark-white.svg

@@ -0,0 +1,48 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
+ "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg"
+ width="600.000000pt" height="601.000000pt" viewBox="0 0 600.000000 601.000000"
+ preserveAspectRatio="xMidYMid meet">
+<g transform="translate(0.000000,601.000000) scale(0.050000,-0.050000)"
+fill="#ffffff" stroke="none">
+<path d="M195 11784 c-515 -1551 98 -2966 1520 -3514 171 -66 171 -72 2 -72
+-415 0 -893 215 -1273 572 -178 167 -181 163 -77 -83 478 -1130 1770 -1734
+2963 -1384 283 83 309 101 420 292 376 648 1038 1116 1763 1245 l143 26 100
+202 c887 1780 -911 3344 -3076 2675 l-170 -52 220 -14 c480 -32 818 -114 1118
+-273 258 -137 548 -414 624 -597 l32 -76 -87 76 c-435 375 -938 524 -1557 461
+-273 -28 -340 -39 -740 -120 -893 -182 -1449 24 -1756 650 l-98 200 -71 -214z"/>
+<path d="M9720 10053 c0 -146 -256 -556 -441 -705 -381 -308 -766 -380 -1559
+-290 -1209 137 -2026 -255 -2519 -1208 -78 -151 -82 -156 -72 -77 18 140 128
+450 210 592 43 74 73 135 67 135 -25 0 -397 -184 -512 -253 -966 -580 -1594
+-1674 -1594 -2777 0 -104 -4 -190 -10 -190 -5 0 -65 43 -132 95 -650 503
+-1118 775 -1606 935 -290 95 -302 94 -242 -15 52 -95 166 -372 191 -465 9 -33
+34 -121 56 -195 48 -161 120 -508 194 -935 118 -684 437 -1371 795 -1715 185
+-178 324 -239 594 -262 144 -13 150 -15 147 -63 -1 -27 -14 -174 -28 -326 -83
+-902 258 -1568 1037 -2024 139 -81 161 -80 127 4 -37 96 -85 369 -96 546 l-10
+170 46 -60 c328 -431 869 -753 1497 -891 351 -77 1285 -67 1426 15 9 5 -104
+50 -250 98 -649 217 -1341 668 -1680 1096 -81 102 -88 147 -11 78 157 -142
+653 -406 925 -493 783 -249 1542 -242 2332 20 l274 91 106 -83 c298 -236 798
+-328 1259 -231 197 42 196 38 32 169 -156 124 -344 356 -443 546 l-60 116 70
+52 c544 408 783 906 627 1300 l-41 102 170 138 c442 355 584 624 813 1537 186
+742 257 952 452 1328 l118 227 -145 -14 c-693 -68 -1425 -411 -1729 -810 -99
+-130 -112 -127 -165 44 -54 175 -217 511 -308 636 -64 88 -70 91 -224 117
+-314 52 -637 184 -956 390 -260 168 -509 436 -280 302 127 -74 302 -160 430
+-211 97 -38 146 -55 348 -118 335 -105 983 -129 1280 -47 961 264 1554 1048
+1729 2286 28 199 45 685 23 677 -9 -4 -73 -77 -141 -163 -650 -810 -1594
+-1147 -2451 -873 -251 80 -246 76 -171 121 395 240 638 767 578 1253 -25 209
+-77 395 -77 278z m-682 -4962 c306 -158 601 -1396 416 -1747 -118 -224 -283
+-345 -526 -387 -455 -78 -577 227 -456 1143 96 725 320 1118 566 991z m-3115
+-156 c371 -172 699 -815 799 -1565 34 -251 19 -307 -108 -422 -575 -519 -1624
+-162 -1931 657 -265 709 593 1630 1240 1330z m5261 -120 c20 -377 -135 -912
+-290 -995 -70 -38 -72 -35 -157 230 l-64 200 -24 -90 c-50 -192 -144 -340
+-215 -340 -111 0 -316 804 -228 893 53 53 200 -130 226 -283 l14 -80 36 105
+c100 293 222 333 332 109 l54 -110 35 105 c89 260 271 427 281 256z m-8491
+-284 l75 -230 52 160 c89 272 210 336 295 154 126 -268 210 -757 142 -825 -44
+-44 -163 120 -247 340 -12 33 -19 24 -39 -50 -89 -330 -286 -346 -374 -30
+l-22 80 -35 -125 c-54 -196 -223 -428 -275 -377 -37 37 -29 448 11 608 70 276
+219 524 314 524 17 0 56 -87 103 -229z m4164 -2698 c137 -311 883 -373 1408
+-116 162 78 171 64 42 -61 -317 -305 -854 -408 -1271 -244 -223 87 -516 338
+-516 442 0 53 140 267 212 324 l58 46 14 -152 c8 -84 31 -191 53 -239z"/>
+</g>
+</svg>

linux/Goblin.AppDir/.DirIcon

@@ -0,0 +1 @@
+goblin.png

linux/Goblin.AppDir/goblin.desktop

@@ -1,7 +1,7 @@
 [Desktop Entry]
-Name=Grim
-Exec=grim
-Icon=grim
+Name=Goblin
+Exec=goblin
+Icon=goblin
 Type=Application
 Categories=Finance
 MimeType=application/x-slatepack;text/plain;

linux/Grim.AppDir/.DirIcon

@@ -1 +0,0 @@
-grim.png

linux/build_release.sh

@@ -1,27 +1,63 @@
 #!/bin/bash
+#
+# Build a portable, single-file Goblin AppImage.
+#
+# Usage: linux/build_release.sh [platform]
+#   platform: 'x86_64' (default) or 'arm'
+#
+# Goblin links the Nym SDK IN-PROCESS (src/nym/), so the AppImage is one
+# self-contained binary with no sidecar to embed or ship beside it.
 
-case $2 in
-  x86_64|arm)
-    ;;
-  *)
-  echo "Usage: release_linux.sh [platform] [version]\n - platform: 'x86_64', 'arm'" >&2
-  exit 1
+set -euo pipefail
+
+platform="${1:-x86_64}"
+case "${platform}" in
+  x86_64) arch="x86_64-unknown-linux-gnu"; appimage_arch="x86_64" ;;
+  arm)    arch="aarch64-unknown-linux-gnu"; appimage_arch="aarch64" ;;
+  *) echo "Usage: build_release.sh [platform]  (platform: 'x86_64' | 'arm')" >&2; exit 1 ;;
 esac
 
-# Setup build directory
-BASEDIR=$(cd $(dirname $0) && pwd)
-cd ${BASEDIR}
-cd ..
+# Repo root (this script lives in linux/).
+BASEDIR=$(cd "$(dirname "$0")" && pwd)
+cd "${BASEDIR}/.."
 
-# Setup platform argument
-[[ $2 == "x86_64" ]] && arch+=(x86_64-unknown-linux-gnu)
-[[ $2 == "arm" ]] && arch+=(aarch64-unknown-linux-gnu)
+# Prefer the GRIM-canonical toolchains (zig + appimagetool from code.gri.mw/DEV);
+# scripts/toolchain.sh fetches them and writes this env. Falls back to system
+# installs when it's absent.
+[ -f .toolchains/env.sh ] && source .toolchains/env.sh
 
-rustup target add ${arch}
-cargo install cargo-zigbuild
-cargo zigbuild --release --target ${arch}
+rustup target add "${arch}"
+command -v cargo-zigbuild >/dev/null || cargo install cargo-zigbuild
 
-# Create AppImage with https://github.com/AppImage/appimagetool
-cp target/${arch}/release/grim linux/Grim.AppDir/AppRun
-rm target/${arch}/release/*.AppImage
-appimagetool linux/Grim.AppDir target/${arch}/release/grim-v$2-linux-$1.AppImage
+# Portable cross-build to glibc 2.17. Three zig-specific fixes:
+#  - CRoaring's AVX512 path won't compile under zig's clang (evex512 error).
+#  - OpenSSL is vendored in Cargo.toml, so no system libssl is needed.
+#  - v4l2-sys (camera/QR backend) runs bindgen over linux/videodev2.h, a kernel
+#    UAPI header missing from zig 0.12.1's glibc-2.17 sysroot; point bindgen at
+#    the host's kernel headers. This only reads struct layouts — the actual libc
+#    linkage stays glibc-2.17, so portability is unaffected.
+export CFLAGS_x86_64_unknown_linux_gnu="-DCROARING_COMPILER_SUPPORTS_AVX512=0"
+export CXXFLAGS_x86_64_unknown_linux_gnu="-DCROARING_COMPILER_SUPPORTS_AVX512=0"
+export BINDGEN_EXTRA_CLANG_ARGS="${BINDGEN_EXTRA_CLANG_ARGS:-} -I/usr/include"
+cargo zigbuild --release --target "${arch}.2.17"
+
+# Assemble the AppDir: AppRun IS the goblin binary (Nym SDK linked in), plus the
+# icon + desktop entry. Nothing else.
+appdir="linux/Goblin.AppDir"
+cp "target/${arch}/release/goblin" "${appdir}/AppRun"
+chmod +x "${appdir}/AppRun"
+
+out="target/${arch}/release/Goblin-${platform}.AppImage"
+rm -f "target/${arch}/release/"*.AppImage
+# Use the DEV appimagetool + type2 runtime when fetched, else the system tool.
+appimagetool_bin="${GOBLIN_APPIMAGETOOL:-appimagetool}"
+# The type2 runtime must match the target arch. env.sh sets GOBLIN_APPIMAGE_RUNTIME
+# to the x86_64 runtime; for a non-x86_64 target use the sibling runtime-<arch>.
+runtime_file="${GOBLIN_APPIMAGE_RUNTIME:-}"
+if [ "${appimage_arch}" != "x86_64" ] && [ -n "${runtime_file}" ]; then
+  runtime_file="$(dirname "${runtime_file}")/runtime-${appimage_arch}"
+fi
+runtime_arg=()
+[ -n "${runtime_file}" ] && [ -e "${runtime_file}" ] && runtime_arg=(--runtime-file "${runtime_file}")
+ARCH="${appimage_arch}" "${appimagetool_bin}" "${runtime_arg[@]}" "${appdir}" "${out}"
+echo "built: ${out}"

locales/de.yml

@@ -44,7 +44,7 @@ wallets:
   await_fin_amount: Warten auf die Fertigstellung
   locked_amount: Gesperrt
   txs_empty: 'Um Geld manuell oder per Transport zu empfangen oder zu senden, verwenden Sie die Schaltflächen %{message} oder %{transport} unten auf dem Bildschirm. Um die Wallet-Einstellungen zu ändern, drücken Sie %{settings}.'
-  title: Wallets
+  title: Goblin
   create_desc: Erstellen oder importieren Sie ein bestehendes Wallet mit dem Seed-Phrase.
   add: Wallet hinzufügen
   name: 'Name:'
@@ -355,4 +355,468 @@ keyboard:
   m: m
   m1: ','
   m2: .
-  m3: '/'
+  m3: '/'
+goblin:
+  home:
+    anonymous: "Anonym"
+    connected_nym: "Über Nym verbunden"
+    nym_ready: "Nym bereit · Relays…"
+    connecting_nym: "Verbinde mit Nym…"
+    cant_reach_node: "Node nicht erreichbar"
+    node_synced: "Node synchronisiert"
+    syncing: "Synchronisiere…"
+    balance_updating: "Guthaben wird aktualisiert…"
+    listening: "Wartet auf Zahlungen"
+    block: "Block %{height}"
+    waiting_for_chain: "Warte auf Chain…"
+    nav_wallet: "Wallet"
+    nav_pay: "Zahlen"
+    nav_activity: "Aktivität"
+    nav_receive: "Empfangen"
+    nav_settings: "Einstellungen"
+    activity: "Aktivität"
+    empty_title: "Noch keine Aktivität"
+    empty_sub: "Sende oder empfange grin, um zu starten."
+    recent: "Zuletzt"
+    scan_to_pay: "Zum Zahlen scannen"
+    type_amount: "Betrag eingeben"
+    request: "Anfordern"
+    pay: "Zahlen"
+    enter_amount: "Betrag zum Zahlen oder Anfordern eingeben"
+  activity:
+    canceled: "abgebrochen"
+    pending: "ausstehend"
+    earlier: "Früher"
+    today: "Heute"
+    yesterday: "Gestern"
+    title: "Aktivität"
+    requests: "Anfragen"
+    empty_title: "Noch keine Aktivität"
+    empty_sub: "Deine Zahlungen erscheinen hier."
+    pending_header: "Ausstehend"
+  receipt:
+    title: "Beleg"
+    not_found: "Transaktion nicht gefunden"
+    for_note: "Für %{note}"
+    details: "Transaktionsdetails"
+    canceled: "Abgebrochen"
+    expired: "Abgelaufen"
+    funds_returned: "Guthaben zurückerstattet"
+    complete: "Abgeschlossen"
+    payment_received: "Zahlung empfangen"
+    payment_sent: "Zahlung erfolgreich gesendet"
+    pending: "Ausstehend"
+    confs: "%{c}/%{r} Bestätigungen"
+    waiting_to_confirm: "Warte auf Bestätigung"
+    paying: "Zahlung läuft…"
+    you: "Du"
+    to: "An"
+    from: "Von"
+    nostr: "nostr"
+    fee_none: "Keine"
+    network_fee: "Netzwerkgebühr"
+    privacy: "Privatsphäre"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "Transaktion"
+    cancel_request: "Anfrage abbrechen"
+    cancel_send: "Zahlung abbrechen"
+    cancel_send_confirm: "Zum Abbrechen erneut tippen — sie könnten sie noch erhalten"
+    cancel_send_done: "Zahlung abgebrochen — dein Guthaben ist wieder verfügbar"
+    cancel_send_too_late: "Diese Zahlung ist bereits durchgegangen und kann nicht abgebrochen werden"
+    waiting_to_receive: "Warte, bis %{name} empfängt…"
+  request:
+    title: "%{name} fordert an"
+    approve: "Annehmen"
+    decline: "Ablehnen"
+    review_title: "Anfrage prüfen"
+    hold_to_accept: "Zum Annehmen halten"
+    hold_accept_hint: "Halte gedrückt, um diese Anfrage zu bezahlen"
+  receive:
+    title: "Empfangen"
+    requesting: "Fordere %{amt}%{tsu} an — teilen, um bezahlt zu werden"
+    clear_request: "Anfrage löschen"
+    share_handle: "Teile deinen Handle, um bezahlt zu werden"
+    share_npub: "Teile deinen npub, um bezahlt zu werden"
+    copied: "Kopiert"
+    copy_nostr_id: "nostr-ID kopieren"
+    copy_address: "Adresse kopieren"
+    copy_npub: "npub kopieren"
+    share_message: "Bezahl mich auf Goblin (goblin.st) — %{npub}"
+    privacy_note: "Dein Benutzername ist öffentlich. Zahlungsinhalte bleiben im Netzwerk verschlüsselt."
+    privacy_note_npub: "Dein npub ist öffentlich. Zahlungsinhalte bleiben im Netzwerk verschlüsselt."
+  profile:
+    title: "Profil"
+    activity: "Aktivität"
+    no_activity: "Noch keine Aktivität mit ihnen."
+    unblock: "Entsperren"
+    block: "Sperren"
+    blocked_blurb: "Gesperrt — ihre Zahlungen und Anfragen werden verworfen."
+    block_blurb: "Sperren verwirft eingehende Zahlungen und Anfragen von ihnen."
+  settings:
+    title: "Einstellungen"
+    connected_nostr: "Mit nostr verbunden"
+    connecting_relays: "Verbinde mit Relays…"
+    identity: "Identität"
+    copy_npub: "npub kopieren (öffentlich)"
+    rotate_key: "nostr-Schlüssel wechseln"
+    import_identity: "Identität importieren (.backup / nsec)"
+    backup_note: "Gerät wechseln? Sichere BEIDES: deine Seed-Phrase (Guthaben) und deine Identitäts-.backup-Datei (Name + Schlüssel)."
+    wallet: "Wallet"
+    display_unit: "Anzeigeeinheit"
+    relays: "Relays"
+    nostr_relays: "Nostr-Relays"
+    node: "Node"
+    integrated_node: "Einstellungen des integrierten Nodes"
+    node_advanced: "Erweitert"
+    slatepacks: "Slatepacks"
+    slatepacks_value: "Manuelle Transaktion"
+    lock_wallet: "Wallet sperren"
+    switch_wallet: "Wallet wechseln"
+    advanced: "Erweitert"
+    privacy: "Privatsphäre"
+    mixnet_routing: "Mixnet-Routing"
+    messages_lookups: "Nachrichten & Abfragen"
+    auto_accept: "Automatisch annehmen"
+    pairing: "Preiswährung"
+    accept_anyone: "Jeder"
+    accept_contacts: "Nur Kontakte"
+    accept_ask: "Immer fragen"
+    requests: "Anfragen"
+    incoming_requests: "Eingehende Anfragen"
+    incoming_requests_sub: "Erlaube anderen, Geld von dir anzufordern"
+    appearance: "Erscheinungsbild"
+    theme: "Design"
+    theme_light: "Hell"
+    theme_dark: "Dunkel"
+    theme_yellow: "Gelb"
+    archive: "Archiv"
+    export_archive: "Archiv exportieren"
+    wipe_history: "Zahlungsverlauf löschen"
+    wipe_history_confirm: "Zum Löschen erneut tippen — kann nicht rückgängig gemacht werden"
+    about: "Über"
+    goblin: "Goblin"
+    build: "Build %{build}"
+    network: "Netzwerk"
+    network_value: "MW + Nym mixnet + nostr"
+    third_party: "Drittanbieter"
+    grim: "GRIM (Upstream-Wallet)"
+    grin_node: "Grin-Node"
+    sp_intro: "Erweitert — rohe slatepacks von Hand austauschen, so wie GRIM es macht. Nur nutzen, wenn du nicht über einen username zahlen oder bezahlt werden kannst."
+    sp_receive_group: "Empfangen oder abschließen"
+    sp_receive_blurb: "Füge einen slatepack ein, den dir jemand gegeben hat. Goblin empfängt die Zahlung, begleicht die Rechnung oder schließt sie ab und sendet sie."
+    sp_process: "Slatepack verarbeiten"
+    sp_paste_first: "Füge zuerst einen slatepack ein."
+    sp_reply_ready: "Antwort bereit — sende sie an den Absender zurück."
+    sp_finalizing: "Schließe ab und sende an die Chain…"
+    sp_create_group: "Zahlung erstellen"
+    sp_create_blurb: "Erstelle einen slatepack zum Übergeben. Der Empfänger nimmt ihn an, sendet die Antwort zurück, und du schließt sie oben ab."
+    sp_amount_hint: "Betrag in grin"
+    sp_addr_hint: "Empfängeradresse (optional)"
+    sp_create: "Slatepack erstellen"
+    sp_ready: "Slatepack bereit — übergib ihn dem Empfänger."
+    sp_amount_gt_zero: "Gib einen Betrag größer als null ein."
+    sp_to_send: "Zu sendender slatepack"
+    sp_copy: "Slatepack kopieren"
+    rotate_line1: "• Du bekommst einen brandneuen ZUFÄLLIGEN Schlüssel; das alte npub empfängt nichts mehr. Es gibt keine Ableitungskette zwischen beiden."
+    rotate_line2: "• Der neue Schlüssel ist NICHT aus deinem Seed wiederherstellbar — sichere die neue nsec direkt nach dem Wechsel."
+    rotate_line3: "• Dein Benutzername wird FREIGEGEBEN — beanspruche direkt danach denselben oder einen neuen Namen (sobald frei, kann ihn auch jede andere Person nehmen)."
+    rotate_line4: "• Zahlungen, die noch an den alten Schlüssel unterwegs sind, WERDEN gestört — warte zuerst, bis ausstehende Zahlungen abgeschlossen sind."
+    rotate_line5: "• Kontakte, die dein npub direkt gespeichert haben, müssen dich neu finden — teile dein neues npub oder den neu gesicherten username."
+    cancel: "Abbrechen"
+    continue: "Weiter"
+    final_confirmation: "Endgültige Bestätigung"
+    rotate_confirm_blurb: "Dies kann in der App nicht rückgängig gemacht werden. Tippe RESET und gib dein Wallet-Passwort ein, um zu wechseln."
+    type_reset: "RESET tippen"
+    wallet_password: "Wallet-Passwort"
+    rotate_key_btn: "Schlüssel wechseln"
+    rotating_key: "Wechsle Schlüssel…"
+    key_rotated: "Schlüssel gewechselt"
+    new_npub: "Neues npub: %{npub}"
+    backup_new_key: "Sichere jetzt den NEUEN geheimen Schlüssel — dein Seed kann ihn nicht wiederherstellen."
+    copy_new_nsec: "Neues nsec-Backup kopieren"
+    done: "Fertig"
+    rotation_failed: "Wechsel fehlgeschlagen"
+    close: "Schließen"
+    import_identity_title: "Identität importieren"
+    import_blurb: "Ersetzt die nostr-Identität dieser Wallet — wähle eine GOBLIN-.backup-Datei oder füge einen nsec ein. Eine Sicherung stellt auch Benutzername und Verlauf wieder her. Sichere zuerst den aktuellen Schlüssel, falls du ihn noch brauchst."
+    import_nsec_hint: "nsec1… oder eingefügte Sicherung"
+    backup_password_hint: "Backup-Passwort (nur wenn anderswo exportiert)"
+    import_btn: "Importieren"
+    importing: "Importiere…"
+    identity_replaced: "Identität ersetzt"
+    now_using: "Jetzt aktiv: %{npub}"
+    import_failed: "Import fehlgeschlagen"
+    name_authority: "Namensautorität"
+    name_authority_title: "Namensautorität ändern"
+    name_authority_blurb: "Der Server, der Namen registriert und verifiziert. Auf eine andere Instanz zeigen, um dort gehostete Namen zu nutzen und zu bezahlen."
+    name_authority_invalid: "Vollständige URL eingeben (https://…)."
+    reset: "Zurücksetzen"
+    save: "Speichern"
+    backup_file: "In Datei sichern"
+    choose_backup_file: "Eine .backup-Datei wählen"
+    backup_read_failed: "Datei konnte nicht gelesen werden."
+    backup_saved: "Sicherung gespeichert"
+    backup_saved_sub: "Bewahre die .backup-Datei sicher auf — wer sie UND dein Passwort hat, kann deine Identität wiederherstellen."
+    backup_file_title: "Identität sichern"
+    backup_file_blurb: "Erstellt eine verschlüsselte .backup-Datei mit Benutzername und Schlüssel. Gib dein Wallet-Passwort ein, um sie zu versiegeln."
+    backup_write_failed: "Datei konnte nicht gespeichert werden."
+    create_backup: "Sicherung erstellen"
+    registered: "%{name} registriert"
+    released_msg: "Freigegeben — der Name ist frei"
+    release_confirm: "%{name} freigeben?"
+    release_blurb: "Sobald er frei ist, ist er verfügbar — jeder kann ihn beanspruchen, auch dein nächster rotierter Schlüssel. Du kannst 10 Minuten lang keinen anderen Benutzernamen registrieren."
+    releasing: "Gebe frei…"
+    keep_it: "Behalten"
+    release_it: "Freigeben"
+    username: "Benutzername"
+    username_note: "Wird als dein Name angezeigt. Öffentlich auf goblin.st. Zahlungen bleiben verschlüsselt."
+    release_username: "Benutzername freigeben"
+    pick_username: "Benutzernamen wählen — optional"
+    working: "Arbeite…"
+    claim: "Sichern"
+    err_just_taken: "Dieser Benutzername wurde gerade vergeben"
+    err_cooldown: "Du hast kürzlich einen Benutzernamen freigegeben — du kannst innerhalb von 10 Minuten einen neuen registrieren."
+    err_unreachable: "goblin.st nicht erreichbar — Verbindungsproblem. Versuche es erneut."
+    err_release: "Freigabe fehlgeschlagen: %{err}"
+    avail_available: "Verfügbar!"
+    avail_taken: "Vergeben"
+    avail_reserved: "Reserviert"
+    avail_invalid: "Namen haben 3–20 Zeichen: a–z, 0–9, _ oder -"
+    avail_quarantined: "Nicht verfügbar"
+    avail_unknown: "Prüfung fehlgeschlagen — Verbindungsproblem. Versuche es erneut."
+  advanced:
+    title: "Erweitert"
+    intro: "Wallet-Werkzeuge auf niedriger Ebene von GRIM. Normalerweise brauchst du diese nicht."
+    own_node_desc: "Synchronisiere einen vollständigen Grin-Node auf diesem Gerät, statt einem öffentlichen zu vertrauen."
+    own_node_active: "Eigener Node läuft"
+    repair: "Wallet reparieren"
+    repair_desc: "Die Kette neu scannen und fehlende Outputs wiederherstellen. Das kann dauern."
+    repair_unavailable: "Benötigt zuerst eine synchronisierte Node-Verbindung."
+    repairing: "Repariere… %{pct}%"
+    restore: "Wallet wiederherstellen"
+    restore_desc: "Lokale Daten löschen und aus deinem Seed neu aufbauen. Nutze das, wenn eine Reparatur nicht half — danach öffnest du die Wallet erneut."
+    restore_confirm: "Zum Wiederherstellen erneut tippen"
+    show_phrase: "Wiederherstellungsphrase"
+    phrase_desc: "Deine 24 grin-Seed-Wörter — der einzige Weg, Guthaben wiederherzustellen. Halte sie offline und privat."
+    reveal: "Phrase anzeigen"
+    hide: "Verbergen"
+    password: "Wallet-Passwort"
+    wrong_password: "Falsches Passwort."
+    delete: "Wallet löschen"
+    delete_desc: "Diese Wallet dauerhaft von diesem Gerät entfernen. Ohne deinen Seed sind Guthaben nicht wiederherstellbar."
+    delete_confirm: "Zum Löschen erneut tippen"
+    manage_node: "Node-Verbindung verwalten"
+    repair_confirm: "Ja, jetzt reparieren"
+    repair_confirm_note: "Die Reparatur scannt die Chain neu und kann einige Minuten dauern."
+    restore_confirm_note: "Dies löscht lokale Daten und baut sie aus deinem Seed neu auf — das kann einige Minuten dauern."
+    nostr_key: "Nostr-Schlüssel"
+    nostr_key_desc: "Dein nsec, der geheime Schlüssel deiner Nostr-Identität. Kopiere ihn oder zeige den QR-Code, um dich bei Nostr-Apps wie magick.market anzumelden. Wer ihn hat, kontrolliert deine Identität, also halte ihn geheim."
+    reveal_nsec: "Schlüssel anzeigen"
+    copy_nsec: "nsec kopieren"
+    show_qr: "QR anzeigen"
+    hide_qr: "QR ausblenden"
+  privacy:
+    title: "Netzwerk-Privatsphäre"
+    intro: "Goblin sendet seinen privaten Datenverkehr durch das Nym mixnet — ein Netzwerk mit fünf Sprüngen, das verbirgt, wer mit wem kommuniziert, sodass ein Relay eine Zahlung nicht zu dir zurückverfolgen kann."
+    payments: "Zahlungen"
+    payments_blurb: "Jede nostr-Nachricht, die einen slatepack trägt."
+    usernames: "usernames"
+    usernames_blurb: "NIP-05-Namensabfragen zu und von goblin.st."
+    price_avatars: "Preis"
+    price_avatars_blurb: "Der Live-Wechselkurs neben den Beträgen."
+    over_mixnet: "Über das mixnet"
+    direct_connection: "Direkte Verbindung"
+    grin_node: "Grin-Node"
+    grin_node_blurb: "Block-Synchronisierung und Übertragung deiner Transaktion ins Netzwerk. Dies sind öffentliche Chain-Daten, für alle gleich, und nicht mit deiner Identität verknüpft."
+  pairing:
+    title: "Kopplung"
+    intro: "Womit dein Guthaben und deine Beträge verglichen werden."
+    pair_with: "Koppeln mit"
+    rates_note: "Kurse werden über das Nym mixnet abgerufen, nur solange eine Kopplung aktiv ist — aus bedeutet, dass keine Kursanfrage dein Gerät verlässt."
+  relays:
+    title: "Relays"
+    intro: "Zahlungsnachrichten werden an jedes Relay unten gespiegelt; ein erreichbares Relay genügt zum Empfangen."
+    your_relays: "Deine Relays"
+    add_relay: "Relay hinzufügen"
+    add_relay_btn: "Relay hinzufügen"
+    save_reconnect: "Speichern & neu verbinden"
+    none: "keine"
+    count: "%{n} Relays"
+  node:
+    title: "Node"
+    connection: "Verbindung"
+    integrated: "Integrierter Node"
+    applies_after: "Wird wirksam, nachdem das Wallet gesperrt und wieder entsperrt wurde."
+    add_external: "Externen Node hinzufügen"
+    api_secret_hint: "API-Secret (optional)"
+    add_node: "Node hinzufügen"
+    integrated_host: "integrierter Node"
+    summary_syncing: "%{conn} · synchronisiere"
+    summary_block: "Block %{height} · %{conn}"
+  nips:
+    title: "nostr & NIPs"
+    intro1: "Goblin spricht nostr — ein offenes Protokoll signierter Nachrichten, die über einfache Relay-Server weitergereicht werden. Dein Wallet trägt seine eigene nostr-Identität: einen eigenständigen Zufallsschlüssel, bewusst unabhängig von deinem Guthaben und Seed gehalten. Jede Zahlung reist als Ende-zu-Ende-verschlüsselte Direktnachricht zwischen Identitäten, mit dem slatepack im Inneren."
+    intro2: "goblin.st ist Goblins Namensdienst: Das Sichern eines Benutzernamens veröffentlicht dort eine Name → Schlüssel-Zuordnung (NIP-05), sodass Leute you statt eines langen npub bezahlen können. Der Benutzername ist öffentlich; Zahlungsinhalte sind es nie. NIPs sind die Bausteine des Protokolls — tippe auf einen, um die Spezifikation zu lesen."
+    n05_title: "Namen"
+    n05_blurb: "Ordnet username@goblin.st deinem Schlüssel zu, sodass Handles wie Adressen funktionieren."
+    n17_title: "Private Nachrichten"
+    n17_blurb: "Die verschlüsselte DM-Hülle, in der jede Zahlung reist."
+    n44_title: "Verschlüsselung"
+    n44_blurb: "Die authentifizierte Chiffre, die in diesen Nachrichten verwendet wird."
+    n49_title: "Schlüsselverschlüsselung"
+    n49_blurb: "Wie der geheime Schlüssel im Ruhezustand gespeichert wird, gesperrt durch dein Passwort."
+    n59_title: "Gift Wrap"
+    n59_blurb: "Verpackt Nachrichten, sodass Relays nicht sehen können, wer mit wem kommuniziert."
+    n98_title: "HTTP-Auth"
+    n98_blurb: "Signiert die Benutzernamen-Registrierungsanfrage an goblin.st."
+  onboarding:
+    intro:
+      private_money_head: "Privates Geld"
+      private_money_body: "Goblin ist ein Wallet für grin — digitales Bargeld ohne Beträge oder Adressen auf seiner Chain."
+      send_like_message_head: "Senden wie eine Nachricht"
+      send_like_message_body: "Zahle an einen username oder npub und es kommt als Ende-zu-Ende-verschlüsselte Nachricht über nostr und das Nym mixnet an — niemand dazwischen sieht den Betrag oder die Beteiligten."
+      yours_alone_head: "Nur deins"
+      yours_alone_body: "Schlüssel, Namen und Verlauf bleiben auf diesem Gerät. Basiert auf dem GRIM-Wallet."
+      get_started: "Loslegen"
+      footnote: "Dauert etwa eine Minute. Du kannst später alles ändern."
+    node:
+      kicker: "SCHRITT 1 VON 3 · NETZWERK"
+      title: "Wie soll Goblin\ndie Chain beobachten?"
+      own_title: "Eigenen Node betreiben"
+      own_badge: "Privat"
+      own_body: "Vertraut niemandem — dein Wallet prüft die Chain selbst. Synchronisiert im Hintergrund, während du die Einrichtung beendest."
+      connect_title: "Mit einem Node verbinden"
+      connect_badge: "Sofort"
+      connect_body: "Kein Warten auf Sync. Der gewählte Node kann die Abfragen deines Wallets sehen."
+      changeable: "Jederzeit änderbar unter Einstellungen → Node."
+      continue: "Weiter"
+      url_invalid: "Node-URL muss mit http:// oder https:// beginnen"
+    wallet:
+      kicker: "SCHRITT 2 VON 3 · WALLET"
+      title: "Richte dein Wallet ein"
+      create_new: "Neu erstellen"
+      restore_from_seed: "Aus Seed wiederherstellen"
+      name_hint: "Wallet-Name"
+      password_hint: "Passwort"
+      repeat_password_hint: "Passwort wiederholen"
+      restore_hint: "Halte deine Seed-Wörter bereit — du gibst sie als Nächstes ein."
+      create_hint: "Als Nächstes erhältst du 24 Seed-Wörter zum Aufschreiben. Sie sind das Geld — wer sie hat, hält dein Guthaben."
+      continue: "Weiter"
+      passwords_no_match: "Passwörter stimmen nicht überein"
+    words:
+      kicker: "SCHRITT 2 VON 3 · WALLET"
+      title_restore: "Gib deine Seed-Wörter ein"
+      title_create: "Schreibe diese Wörter auf"
+      write_down_hint: "Auf Papier, in Reihenfolge. Wer diese Wörter hat, kann dein Guthaben nehmen; ohne sie bedeutet ein verlorenes Gerät verlorenes Guthaben."
+      paste: "Einfügen"
+      scan_qr: "QR scannen"
+      copy_clipboard: "In Zwischenablage kopieren (vermeiden)"
+      restore_wallet: "Wallet wiederherstellen"
+      wrote_them_down: "Ich habe sie aufgeschrieben"
+      fill_every_word: "Fülle jedes Wort aus — tippe ein Wort an, um es zu bearbeiten, oder füge die Phrase ein."
+    confirm:
+      kicker: "SCHRITT 2 VON 3 · WALLET"
+      title: "Jetzt beweise es"
+      enter_hint: "Gib die soeben aufgeschriebenen Wörter ein. Tippe ein Wort an, um es zu tippen."
+      paste: "Einfügen"
+      create_wallet: "Wallet erstellen"
+      keep_going: "Weiter so — jedes Wort, in Reihenfolge."
+    identity:
+      kicker: "SCHRITT 3 VON 3 · IDENTITÄT"
+      title: "Deine Zahlungsidentität"
+      key_being_made: "Schlüssel wird erstellt…"
+      connected_nym: "über Nym verbunden"
+      connecting_nym: "verbinde über Nym…"
+      fresh_key_blurb: "Ein Zahlungsschlüssel, der nicht Teil deines Seeds ist — jederzeit rotierbar, ohne deine Mittel zu berühren."
+      clean_slate_blurb: "Lust auf einen Neuanfang? Tausche jederzeit einen brandneuen Schlüssel ein — das neue Du ist nicht mit dem alten verknüpft. Gleiches Wallet, frisches Gesicht."
+      pick_username: "Benutzernamen wählen — optional"
+      username_blurb: "Freunde zahlen an deinen Namen statt an einen langen Schlüssel. Optional — jederzeit beanspruchbar."
+      username_field_hint: "deinname"
+      working: "Arbeite…"
+      claim_username: "Benutzernamen sichern"
+      available_when_connected: "Verfügbar, sobald das mixnet verbindet — oder überspringen und später sichern."
+      youre: "Du bist %{name}"
+      claimed_title: "%{name} gehört dir"
+      claimed_blurb: "Freunde können dich jetzt per Namen bezahlen. Alles bereit — öffne dein Wallet."
+      open_wallet: "Mein Wallet öffnen"
+      skip_for_now: "Vorerst überspringen"
+      import_existing: "Schon eine Goblin-Identität? Importieren"
+      import_title: "Identität importieren"
+      import_blurb: "Füge deinen nsec ein oder wähle eine .backup-Datei, um deinen vorhandenen Schlüssel und Benutzernamen zu behalten statt diesen neuen."
+    errors:
+      cant_open: "Wallet konnte nicht geöffnet werden: %{err}"
+      cant_create: "Wallet konnte nicht erstellt werden: %{err}"
+  send:
+    scan_to_request: "Zum Anfordern scannen"
+    scan_to_pay: "Zum Zahlen scannen"
+    tab_scan: "Scannen"
+    tab_my_code: "Mein Code"
+    request_from: "Anfordern von"
+    send_to: "Senden an"
+    search_hint: "handle, npub oder Name"
+    suggested: "%{icon}  Vorgeschlagen"
+    no_contacts: "Noch keine Kontakte. Finde jemanden über seinen handle."
+    no_profile: "kein Profil"
+    tag_contact: "Kontakt"
+    tag_on_nostr: "auf nostr"
+    searching_nostr: "Durchsuche nostr…"
+    unverified_title: "Unverifizierten Schlüssel bezahlen?"
+    unverified_body: "Für diesen Schlüssel ist kein nostr-Profil veröffentlicht — er könnte brandneu, anonym oder vertippt sein. Prüfe genau, ob es der richtige ist, bevor du sendest."
+    keep_looking: "Weitersuchen"
+    pay_anyway: "Trotzdem zahlen"
+    scan_not_recipient: "Dieser QR ist kein goblin-Empfänger — erwartet wurde ein npub oder handle"
+    scan_prompt: "Halte einen goblin-Code ins Bild, um zu aktivieren"
+    scan_to_pay_me: "Scannen, um mich zu bezahlen"
+    share_btn: "%{icon} Teilen"
+    share_message: "Bezahl mich auf Goblin — %{handle}\n%{link}\nnpub: %{npub}"
+    none_found: "Niemand gefunden für %{label}"
+    enter_recipient: "Gib einen handle, npub oder Namen ein"
+    amount_title: "Betrag"
+    to_name: "An %{name}"
+    not_enough: "Du hast nicht genug grin"
+    max: "Max"
+    note_label: "Notiz"
+    note_hint: "Notiz hinzufügen…"
+    add_note: "Notiz hinzufügen"
+    edit_note: "Notiz bearbeiten"
+    note_cancel: "Abbrechen"
+    note_save: "Speichern"
+    review_btn: "Prüfen"
+    confirm_request: "Anfrage bestätigen"
+    review_title: "Prüfen"
+    requesting_from: "Fordere an von %{name}"
+    youre_sending: "Du sendest %{name}"
+    row_from: "Von"
+    row_to: "An"
+    row_note: "Notiz"
+    row_they_pay: "Sie zahlen"
+    row_they_pay_val: "Nur wenn sie zustimmen"
+    row_delivery: "Zustellung"
+    row_delivery_val: "NIP-44-verschlüsselt, über Nym"
+    row_network_fee: "Netzwerkgebühr"
+    row_network_fee_val: "Von deinem Guthaben abgezogen"
+    row_privacy: "Privatsphäre"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "Anfrage senden"
+    request_approve_hint: "Sie erhalten eine Anfrage zum Zustimmen"
+    hold_to_send: "Zum Senden halten"
+    lower_amount: "Zurückgehen und Betrag verringern"
+    hold_confirm_hint: "Gedrückt halten zum Bestätigen"
+    requesting: "Fordere an…"
+    sending: "Sende…"
+    they: "Sie"
+    request_blocked: "%{who} nimmt keine Anfragen an. Bitte sie, dir stattdessen grin zu senden."
+    failed_request_title: "Anfrage fehlgeschlagen"
+    failed_send_title: "Senden fehlgeschlagen"
+    failed_request_body: "Die Anfrage konnte nicht zugestellt werden. Bitte sie, dir stattdessen grin zu senden."
+    failed_send_body: "Die Zahlung wurde nicht zugestellt. Dein grin ist sicher — versuche es erneut."
+    try_again_btn: "Erneut versuchen"
+    close_btn: "Schließen"
+    success:
+      requested: "Angefordert"
+      sent: "Gesendet"
+      from: "von"
+      to: "an"
+      subtitle: "%{dir} %{who} · gerade eben"
+      done_btn: "Fertig"
+      receipt_btn: "Beleg"

locales/en.yml

@@ -44,12 +44,12 @@ wallets:
   await_fin_amount: Awaiting finalization
   locked_amount: Locked
   txs_empty: 'To receive funds manually or over transport use %{message} or %{transport} buttons at the bottom of the screen, to change wallet settings press %{settings} button.'
-  title: Wallets
+  title: Goblin
   create_desc: Create or import existing wallet from saved recovery phrase.
   add: Add wallet
   name: 'Name:'
   pass: 'Password:'
-  pass_empty: Enter password from the wallet
+  pass_empty: Enter the wallet password
   current_pass: 'Current password:'
   new_pass: 'New password:'
   min_tx_conf_count: 'Minimum amount of confirmations for transactions:'
@@ -180,7 +180,7 @@ network:
   available: Available
   not_available: Not available
   availability_check: Availability check
-  android_warning: Attention to Android users. To synchronize integrated node successfully, you must allow access to notifications and remove battery usage restrictions for the Grim application at system settings of your phone. This is necessary operation for correct work of application in the background.
+  android_warning: Attention to Android users. To synchronize integrated node successfully, you must allow access to notifications and remove battery usage restrictions for the Goblin application at system settings of your phone. This is necessary operation for correct work of application in the background.
 sync_status:
   node_restarting: Node is restarting
   node_down: Node is down
@@ -355,4 +355,468 @@ keyboard:
   m: m
   m1: ','
   m2: .
-  m3: /
+  m3: /
+goblin:
+  home:
+    anonymous: "Anonymous"
+    connected_nym: "Connected over Nym"
+    nym_ready: "Nym ready · relays…"
+    connecting_nym: "Connecting to Nym…"
+    cant_reach_node: "Can't reach node"
+    node_synced: "Node synced"
+    syncing: "Syncing…"
+    balance_updating: "Balance updating…"
+    listening: "Listening for payments"
+    block: "Block %{height}"
+    waiting_for_chain: "Waiting for chain…"
+    nav_wallet: "Wallet"
+    nav_pay: "Pay"
+    nav_activity: "Activity"
+    nav_receive: "Receive"
+    nav_settings: "Settings"
+    activity: "Activity"
+    empty_title: "No activity yet"
+    empty_sub: "Send or receive grin to get started."
+    recent: "Recent"
+    scan_to_pay: "Scan to pay"
+    type_amount: "Type an amount"
+    request: "Request"
+    pay: "Pay"
+    enter_amount: "Enter an amount to pay or request"
+  activity:
+    canceled: "canceled"
+    pending: "pending"
+    earlier: "Earlier"
+    today: "Today"
+    yesterday: "Yesterday"
+    title: "Activity"
+    requests: "Requests"
+    empty_title: "No activity yet"
+    empty_sub: "Your payments will appear here."
+    pending_header: "Pending"
+  receipt:
+    title: "Receipt"
+    not_found: "Transaction not found"
+    for_note: "For %{note}"
+    details: "Transaction details"
+    canceled: "Canceled"
+    expired: "Expired"
+    funds_returned: "Funds returned"
+    complete: "Complete"
+    payment_received: "Payment received"
+    payment_sent: "Payment sent successfully"
+    pending: "Pending"
+    confs: "%{c}/%{r} confirmations"
+    waiting_to_confirm: "Waiting to confirm"
+    paying: "Paying…"
+    you: "You"
+    to: "To"
+    from: "From"
+    nostr: "nostr"
+    fee_none: "None"
+    network_fee: "Network fee"
+    privacy: "Privacy"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "Transaction"
+    cancel_request: "Cancel request"
+    cancel_send: "Cancel payment"
+    cancel_send_confirm: "Tap again to cancel — they may still receive it"
+    cancel_send_done: "Payment cancelled — your funds are available again"
+    cancel_send_too_late: "This payment already went through and can't be cancelled"
+    waiting_to_receive: "Waiting for %{name} to receive…"
+  request:
+    title: "%{name} requests"
+    approve: "Approve"
+    decline: "Decline"
+    review_title: "Review request"
+    hold_to_accept: "Hold to accept"
+    hold_accept_hint: "Press and hold to pay this request"
+  receive:
+    title: "Receive"
+    requesting: "Requesting %{amt}%{tsu} — share to get paid"
+    clear_request: "Clear request"
+    share_handle: "Share your handle to get paid"
+    share_npub: "Share your npub to get paid"
+    copied: "Copied"
+    copy_nostr_id: "Copy nostr ID"
+    copy_address: "Copy address"
+    copy_npub: "Copy npub"
+    share_message: "Pay me on Goblin (goblin.st) — %{npub}"
+    privacy_note: "Your username is public. Payment contents stay encrypted over the network."
+    privacy_note_npub: "Your npub is public. Payment contents stay encrypted over the network."
+  profile:
+    title: "Profile"
+    activity: "Activity"
+    no_activity: "No activity with them yet."
+    unblock: "Unblock"
+    block: "Block"
+    blocked_blurb: "Blocked — their payments and requests are dropped."
+    block_blurb: "Blocking drops their incoming payments and requests."
+  settings:
+    title: "Settings"
+    connected_nostr: "Connected to nostr"
+    connecting_relays: "Connecting to relays…"
+    identity: "Identity"
+    copy_npub: "Copy npub (public)"
+    rotate_key: "Rotate nostr key"
+    import_identity: "Import identity (.backup / nsec)"
+    backup_note: "Moving devices? Back up BOTH: your seed phrase (funds) and your identity .backup file (name + key)."
+    wallet: "Wallet"
+    display_unit: "Display unit"
+    relays: "Relays"
+    nostr_relays: "Nostr Relays"
+    node: "Node"
+    integrated_node: "Integrated node settings"
+    node_advanced: "Advanced"
+    slatepacks: "Slatepacks"
+    slatepacks_value: "Manual transaction"
+    lock_wallet: "Lock wallet"
+    switch_wallet: "Switch wallet"
+    advanced: "Advanced"
+    privacy: "Privacy"
+    mixnet_routing: "Mixnet routing"
+    messages_lookups: "Messages & lookups"
+    auto_accept: "Auto-accept"
+    pairing: "Price currency"
+    accept_anyone: "Anyone"
+    accept_contacts: "Contacts only"
+    accept_ask: "Always ask"
+    requests: "Requests"
+    incoming_requests: "Incoming requests"
+    incoming_requests_sub: "Let others request money from you"
+    appearance: "Appearance"
+    theme: "Theme"
+    theme_light: "Light"
+    theme_dark: "Dark"
+    theme_yellow: "Yellow"
+    archive: "Archive"
+    export_archive: "Export archive"
+    wipe_history: "Wipe payment history"
+    wipe_history_confirm: "Tap again to wipe — this can't be undone"
+    about: "About"
+    goblin: "Goblin"
+    build: "Build %{build}"
+    network: "Network"
+    network_value: "MW + Nym mixnet + nostr"
+    third_party: "Third party"
+    grim: "GRIM (upstream wallet)"
+    grin_node: "Grin node"
+    sp_intro: "Advanced — exchange raw slatepacks by hand, the way GRIM does. Use this only when you can't pay or get paid through a username."
+    sp_receive_group: "Receive or finalize"
+    sp_receive_blurb: "Paste a slatepack someone gave you. Goblin receives the payment, pays the invoice, or finalizes and posts it."
+    sp_process: "Process slatepack"
+    sp_paste_first: "Paste a slatepack first."
+    sp_reply_ready: "Reply ready — send it back to the sender."
+    sp_finalizing: "Finalizing and posting to the chain…"
+    sp_create_group: "Create a payment"
+    sp_create_blurb: "Make a slatepack to hand to someone. They receive it, send the reply back, and you finalize it above."
+    sp_amount_hint: "Amount in grin"
+    sp_addr_hint: "Recipient address (optional)"
+    sp_create: "Create slatepack"
+    sp_ready: "Slatepack ready — hand it to the recipient."
+    sp_amount_gt_zero: "Enter an amount greater than zero."
+    sp_to_send: "Slatepack to send"
+    sp_copy: "Copy slatepack"
+    rotate_line1: "• You get a brand-new RANDOM key; the old npub stops receiving. There is no derivation chain between them."
+    rotate_line2: "• The new key is NOT recoverable from your seed — back up the new nsec right after rotating."
+    rotate_line3: "• Your username is RELEASED — claim the same or a new name right after (anyone else can grab it too once it's free)."
+    rotate_line4: "• Payments still in flight to the old key WILL be disrupted — wait for pending payments to finish first."
+    rotate_line5: "• Contacts who saved your npub directly must re-find you — share your new npub or re-claimed username."
+    cancel: "Cancel"
+    continue: "Continue"
+    final_confirmation: "Final confirmation"
+    rotate_confirm_blurb: "This cannot be undone from the app. Type RESET and enter your wallet password to rotate."
+    type_reset: "Type RESET"
+    wallet_password: "Wallet password"
+    rotate_key_btn: "Rotate key"
+    rotating_key: "Rotating key…"
+    key_rotated: "Key rotated"
+    new_npub: "New npub: %{npub}"
+    backup_new_key: "Back up the NEW secret key now — your seed cannot recover it."
+    copy_new_nsec: "Copy new nsec backup"
+    done: "Done"
+    rotation_failed: "Rotation failed"
+    close: "Close"
+    import_identity_title: "Import identity"
+    import_blurb: "Replaces this wallet's nostr identity — choose a GOBLIN .backup file, or paste a bare nsec. A backup also restores your username and history. Back up the current key first if you still need it."
+    import_nsec_hint: "nsec1… or pasted backup"
+    backup_password_hint: "Backup password (only if exported elsewhere)"
+    import_btn: "Import"
+    importing: "Importing…"
+    identity_replaced: "Identity replaced"
+    now_using: "Now using: %{npub}"
+    import_failed: "Import failed"
+    name_authority: "Name authority"
+    name_authority_title: "Change name authority"
+    name_authority_blurb: "The server that registers and verifies names. Point it at another instance to use and pay names hosted there."
+    name_authority_invalid: "Enter a full URL (https://…)."
+    reset: "Reset"
+    save: "Save"
+    backup_file: "Back up to a file"
+    choose_backup_file: "Choose a .backup file"
+    backup_read_failed: "Couldn't read that file."
+    backup_saved: "Backup saved"
+    backup_saved_sub: "Keep the .backup file safe — anyone with it AND your password can restore your identity."
+    backup_file_title: "Back up identity"
+    backup_file_blurb: "Creates one encrypted .backup file with your username and key. Enter your wallet password to seal it."
+    backup_write_failed: "Couldn't save the file."
+    create_backup: "Create backup"
+    registered: "Registered %{name}"
+    released_msg: "Released — the name is up for grabs"
+    release_confirm: "Release %{name}?"
+    release_blurb: "It's up for grabs the moment it's free — anyone can claim it, including the next key you rotate to. You won't be able to register another username for 10 minutes."
+    releasing: "Releasing…"
+    keep_it: "Keep it"
+    release_it: "Release it"
+    username: "Username"
+    username_note: "Shown as your name. Public on goblin.st. Payments stay encrypted."
+    release_username: "Release username"
+    pick_username: "Pick a username — optional"
+    working: "Working…"
+    claim: "Claim"
+    err_just_taken: "That username was just taken"
+    err_cooldown: "You recently released a username — you can register a new one within 10 minutes."
+    err_unreachable: "Couldn't reach goblin.st — connection hiccup. Try again."
+    err_release: "Couldn't release: %{err}"
+    avail_available: "Available!"
+    avail_taken: "Taken"
+    avail_reserved: "Reserved"
+    avail_invalid: "Names are 3–20 chars: a–z, 0–9, _ or -"
+    avail_quarantined: "Not available"
+    avail_unknown: "Couldn't check — connection hiccup. Try again."
+  advanced:
+    title: "Advanced"
+    intro: "Low-level wallet tools from GRIM. You won't normally need these."
+    own_node_desc: "Sync a full Grin node on this device instead of trusting a public one."
+    own_node_active: "Running your own node"
+    repair: "Repair wallet"
+    repair_desc: "Re-scan the chain and restore any missing outputs. This can take a while."
+    repair_unavailable: "Needs a synced node connection first."
+    repairing: "Repairing… %{pct}%"
+    restore: "Restore wallet"
+    restore_desc: "Delete local data and rebuild from your seed. Use this if a repair didn't help — you'll re-open the wallet after."
+    restore_confirm: "Tap again to restore"
+    show_phrase: "Recovery phrase"
+    phrase_desc: "Your 24 grin seed words — the only way to recover funds. Keep them offline and private."
+    reveal: "Show phrase"
+    hide: "Hide"
+    password: "Wallet password"
+    wrong_password: "Wrong password."
+    delete: "Delete wallet"
+    delete_desc: "Permanently remove this wallet from this device. Without your seed, funds can't be recovered."
+    delete_confirm: "Tap again to delete"
+    manage_node: "Manage node connection"
+    repair_confirm: "Yes, repair now"
+    repair_confirm_note: "Repair re-scans the chain and can take a few minutes."
+    restore_confirm_note: "This erases local data and rebuilds it from your seed — it can take several minutes."
+    nostr_key: "Nostr key"
+    nostr_key_desc: "Your nsec, the secret key to your nostr identity. Copy it or show its QR to log in to nostr apps like magick.market. Anyone who has it controls your identity, so keep it private."
+    reveal_nsec: "Show key"
+    copy_nsec: "Copy nsec"
+    show_qr: "Show QR"
+    hide_qr: "Hide QR"
+  privacy:
+    title: "Network privacy"
+    intro: "Goblin sends its private traffic through the Nym mixnet — a five-hop network that hides who is talking to whom, so a relay can't link a payment back to you."
+    payments: "Payments"
+    payments_blurb: "Every nostr message carrying a slatepack."
+    usernames: "usernames"
+    usernames_blurb: "NIP-05 name lookups to and from goblin.st."
+    price_avatars: "Price"
+    price_avatars_blurb: "The live fiat rate shown next to amounts."
+    over_mixnet: "Over the mixnet"
+    direct_connection: "Direct connection"
+    grin_node: "Grin node"
+    grin_node_blurb: "Block sync and broadcasting your transaction to the network. This is public chain data, the same for everyone, and isn't linked to your identity."
+  pairing:
+    title: "Pairing"
+    intro: "What your balance and amounts are shown against."
+    pair_with: "Pair with"
+    rates_note: "Rates fetch over the Nym mixnet, only while a pairing is on — off means no rate request leaves your device."
+  relays:
+    title: "Relays"
+    intro: "Payment messages are mirrored to every relay below; one reachable relay is enough to receive."
+    your_relays: "Your relays"
+    add_relay: "Add relay"
+    add_relay_btn: "Add relay"
+    save_reconnect: "Save & reconnect"
+    none: "none"
+    count: "%{n} relays"
+  node:
+    title: "Node"
+    connection: "Connection"
+    integrated: "Integrated node"
+    applies_after: "Applies after the wallet is locked and unlocked again."
+    add_external: "Add external node"
+    api_secret_hint: "API secret (optional)"
+    add_node: "Add node"
+    integrated_host: "integrated node"
+    summary_syncing: "%{conn} · syncing"
+    summary_block: "Block %{height} · %{conn}"
+  nips:
+    title: "nostr & NIPs"
+    intro1: "Goblin speaks nostr — an open protocol of signed messages passed through simple relay servers. Your wallet carries its own nostr identity: a standalone random key, kept deliberately independent of your funds and seed. Every payment travels as an end-to-end encrypted direct message between identities, with the slatepack riding inside."
+    intro2: "goblin.st is Goblin's name service: claiming a username publishes a name → key mapping there (NIP-05), so people can pay you instead of a long npub. The username is public; payment contents never are. NIPs are the protocol's building blocks — tap one to read the spec."
+    n05_title: "Names"
+    n05_blurb: "Maps username@goblin.st to your key, so handles work like addresses."
+    n17_title: "Private messages"
+    n17_blurb: "The encrypted DM envelope every payment travels in."
+    n44_title: "Encryption"
+    n44_blurb: "The authenticated cipher used inside those messages."
+    n49_title: "Key encryption"
+    n49_blurb: "How the secret key is stored at rest, locked by your password."
+    n59_title: "Gift wrap"
+    n59_blurb: "Wraps messages so relays can't see who is talking to whom."
+    n98_title: "HTTP auth"
+    n98_blurb: "Signs the username registration request to goblin.st."
+  onboarding:
+    intro:
+      private_money_head: "Private money"
+      private_money_body: "Goblin is a wallet for grin — digital cash with no amounts or addresses on its chain."
+      send_like_message_head: "Send like a message"
+      send_like_message_body: "Pay a username or npub and it arrives as an end-to-end encrypted message over nostr and the Nym mixnet — no one in between can see the amount or who's involved."
+      yours_alone_head: "Yours alone"
+      yours_alone_body: "Keys, names and history live on this device. Built on the GRIM wallet."
+      get_started: "Get started"
+      footnote: "Takes about a minute. You can change everything later."
+    node:
+      kicker: "STEP 1 OF 3 · NETWORK"
+      title: "How should Goblin\nwatch the chain?"
+      own_title: "Run my own node"
+      own_badge: "Private"
+      own_body: "Trusts no one — your wallet checks the chain itself. Syncs in the background while you finish setup."
+      connect_title: "Connect to a node"
+      connect_badge: "Instant"
+      connect_body: "No sync wait. The node you pick can see your wallet's queries."
+      changeable: "Changeable any time in Settings → Node."
+      continue: "Continue"
+      url_invalid: "Node URL must start with http:// or https://"
+    wallet:
+      kicker: "STEP 2 OF 3 · WALLET"
+      title: "Set up your wallet"
+      create_new: "Create new"
+      restore_from_seed: "Restore from seed"
+      name_hint: "Wallet name"
+      password_hint: "Password"
+      repeat_password_hint: "Repeat password"
+      restore_hint: "Have your seed words ready — you'll enter them next."
+      create_hint: "Next you'll get 24 seed words to write down. They are the money — anyone holding them holds your funds."
+      continue: "Continue"
+      passwords_no_match: "Passwords don't match"
+    words:
+      kicker: "STEP 2 OF 3 · WALLET"
+      title_restore: "Enter your seed words"
+      title_create: "Write these words down"
+      write_down_hint: "On paper, in order. Anyone with these words can take your funds; without them a lost device means lost funds."
+      paste: "Paste"
+      scan_qr: "Scan QR"
+      copy_clipboard: "Copy to clipboard (avoid this)"
+      restore_wallet: "Restore wallet"
+      wrote_them_down: "I wrote them down"
+      fill_every_word: "Fill every word — tap a word to edit it, or paste the phrase."
+    confirm:
+      kicker: "STEP 2 OF 3 · WALLET"
+      title: "Now prove it"
+      enter_hint: "Enter the words you just wrote down. Tap a word to type it."
+      paste: "Paste"
+      create_wallet: "Create wallet"
+      keep_going: "Keep going — every word, in order."
+    identity:
+      kicker: "STEP 3 OF 3 · IDENTITY"
+      title: "Your payment identity"
+      key_being_made: "key being made…"
+      connected_nym: "connected over Nym"
+      connecting_nym: "connecting over Nym…"
+      fresh_key_blurb: "A payment key that isn't part of your seed — rotate it anytime to stay private, without touching your funds."
+      clean_slate_blurb: "Want a clean slate? Swap in a brand-new key any time — the new you isn't linked to the old one. Same wallet, fresh face."
+      pick_username: "Pick a username — optional"
+      username_blurb: "Friends pay your name instead of a long key. Optional — claim one any time."
+      username_field_hint: "yourname"
+      working: "Working…"
+      claim_username: "Claim username"
+      available_when_connected: "Available once the mixnet connects — or skip and claim later."
+      youre: "You're %{name}"
+      claimed_title: "%{name} is yours"
+      claimed_blurb: "Friends can now pay you by name. You're all set — open your wallet."
+      open_wallet: "Open my wallet"
+      skip_for_now: "Skip for now"
+      import_existing: "Already have a Goblin identity? Import it"
+      import_title: "Import your identity"
+      import_blurb: "Paste your nsec or pick a .backup file to keep your existing key and username instead of this new one."
+    errors:
+      cant_open: "Couldn't open the wallet: %{err}"
+      cant_create: "Couldn't create the wallet: %{err}"
+  send:
+    scan_to_request: "Scan to request"
+    scan_to_pay: "Scan to pay"
+    tab_scan: "Scan"
+    tab_my_code: "My Code"
+    request_from: "Request from"
+    send_to: "Send to"
+    search_hint: "handle, npub, or name"
+    suggested: "%{icon}  Suggested"
+    no_contacts: "No contacts yet. Find someone by their handle."
+    no_profile: "no profile"
+    tag_contact: "contact"
+    tag_on_nostr: "on nostr"
+    searching_nostr: "Searching nostr…"
+    unverified_title: "Pay an unverified key?"
+    unverified_body: "No nostr profile is published for this key — it may be brand new, anonymous, or mistyped. Double-check it's the right one before sending."
+    keep_looking: "Keep looking"
+    pay_anyway: "Pay anyway"
+    scan_not_recipient: "That QR isn't a goblin recipient — expected an npub or handle"
+    scan_prompt: "Position a goblin code in view to activate"
+    scan_to_pay_me: "Scan to pay me"
+    share_btn: "%{icon} Share"
+    share_message: "Pay me on Goblin — %{handle}\n%{link}\nnpub: %{npub}"
+    none_found: "No one found for %{label}"
+    enter_recipient: "Enter a handle, npub, or name"
+    amount_title: "Amount"
+    to_name: "To %{name}"
+    not_enough: "You don't have enough grin"
+    max: "Max"
+    note_label: "Note"
+    note_hint: "Add a note…"
+    add_note: "Add a note"
+    edit_note: "Edit note"
+    note_cancel: "Cancel"
+    note_save: "Save"
+    review_btn: "Review"
+    confirm_request: "Confirm request"
+    review_title: "Review"
+    requesting_from: "Requesting from %{name}"
+    youre_sending: "You're sending %{name}"
+    row_from: "From"
+    row_to: "To"
+    row_note: "Note"
+    row_they_pay: "They pay"
+    row_they_pay_val: "Only if they approve"
+    row_delivery: "Delivery"
+    row_delivery_val: "NIP-44 encrypted, over Nym"
+    row_network_fee: "Network fee"
+    row_network_fee_val: "Deducted from your balance"
+    row_privacy: "Privacy"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "Send request"
+    request_approve_hint: "They'll get a request to approve"
+    hold_to_send: "Hold to send"
+    lower_amount: "Go back and lower the amount"
+    hold_confirm_hint: "Press and hold to confirm"
+    requesting: "Requesting…"
+    sending: "Sending…"
+    they: "They"
+    request_blocked: "%{who} isn't accepting requests. Ask them to send you grin instead."
+    failed_request_title: "Couldn't request"
+    failed_send_title: "Couldn't send"
+    failed_request_body: "We couldn't deliver the request. Ask them to send you grin instead."
+    failed_send_body: "The payment wasn't delivered. Your grin is safe — try again."
+    try_again_btn: "Try again"
+    close_btn: "Close"
+    success:
+      requested: "Requested"
+      sent: "Sent"
+      from: "from"
+      to: "to"
+      subtitle: "%{dir} %{who} · just now"
+      done_btn: "Done"
+      receipt_btn: "Receipt"

locales/fr.yml

@@ -44,7 +44,7 @@ wallets:
   await_fin_amount: En attente de finalisation
   locked_amount: Verrouillé
   txs_empty: "Pour recevoir des fonds manuellement ou par transport, utilisez les boutons %{message} ou %{transport} en bas de l'écran. Pour modifier les paramètres du portefeuille, appuyez sur le bouton %{settings}."
-  title: Portefeuilles
+  title: Goblin
   create_desc: Créer ou importer un portefeuille existant à partir de la phrase de récupération sauvegardée.
   add: Ajouter un portefeuille
   name: 'Nom:'
@@ -355,4 +355,468 @@ keyboard:
   m: ','
   m1: .
   m2: ':'
-  m3: /
+  m3: /
+goblin:
+  home:
+    anonymous: "Anonyme"
+    connected_nym: "Connecté via Nym"
+    nym_ready: "Nym prêt · relais…"
+    connecting_nym: "Connexion à Nym…"
+    cant_reach_node: "Nœud injoignable"
+    node_synced: "Nœud synchronisé"
+    syncing: "Synchronisation…"
+    balance_updating: "Solde en cours de mise à jour…"
+    listening: "En attente de paiements"
+    block: "Bloc %{height}"
+    waiting_for_chain: "En attente de la chaîne…"
+    nav_wallet: "Portefeuille"
+    nav_pay: "Payer"
+    nav_activity: "Activité"
+    nav_receive: "Recevoir"
+    nav_settings: "Réglages"
+    activity: "Activité"
+    empty_title: "Aucune activité"
+    empty_sub: "Envoyez ou recevez des grin pour commencer."
+    recent: "Récent"
+    scan_to_pay: "Scanner pour payer"
+    type_amount: "Saisir un montant"
+    request: "Demander"
+    pay: "Payer"
+    enter_amount: "Saisissez un montant à payer ou demander"
+  activity:
+    canceled: "annulé"
+    pending: "en attente"
+    earlier: "Plus tôt"
+    today: "Aujourd'hui"
+    yesterday: "Hier"
+    title: "Activité"
+    requests: "Demandes"
+    empty_title: "Aucune activité"
+    empty_sub: "Vos paiements apparaîtront ici."
+    pending_header: "En attente"
+  receipt:
+    title: "Reçu"
+    not_found: "Transaction introuvable"
+    for_note: "Pour %{note}"
+    details: "Détails de la transaction"
+    canceled: "Annulé"
+    expired: "Expiré"
+    funds_returned: "Fonds retournés"
+    complete: "Terminé"
+    payment_received: "Paiement reçu"
+    payment_sent: "Paiement envoyé avec succès"
+    pending: "En attente"
+    confs: "%{c}/%{r} confirmations"
+    waiting_to_confirm: "En attente de confirmation"
+    paying: "Paiement…"
+    you: "Vous"
+    to: "À"
+    from: "De"
+    nostr: "nostr"
+    fee_none: "Aucun"
+    network_fee: "Frais de réseau"
+    privacy: "Confidentialité"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "Transaction"
+    cancel_request: "Annuler la demande"
+    cancel_send: "Annuler le paiement"
+    cancel_send_confirm: "Appuyez à nouveau pour annuler — il peut encore le recevoir"
+    cancel_send_done: "Paiement annulé — vos fonds sont à nouveau disponibles"
+    cancel_send_too_late: "Ce paiement est déjà passé et ne peut pas être annulé"
+    waiting_to_receive: "En attente de réception par %{name}…"
+  request:
+    title: "%{name} demande"
+    approve: "Approuver"
+    decline: "Refuser"
+    review_title: "Vérifier la demande"
+    hold_to_accept: "Maintenir pour accepter"
+    hold_accept_hint: "Maintenez pour payer cette demande"
+  receive:
+    title: "Recevoir"
+    requesting: "Demande de %{amt}%{tsu} — partagez pour être payé"
+    clear_request: "Effacer la demande"
+    share_handle: "Partagez votre identifiant pour être payé"
+    share_npub: "Partagez votre npub pour être payé"
+    copied: "Copié"
+    copy_nostr_id: "Copier l'ID nostr"
+    copy_address: "Copier l'adresse"
+    copy_npub: "Copier npub"
+    share_message: "Payez-moi sur Goblin (goblin.st) — %{npub}"
+    privacy_note: "Votre nom d'utilisateur est public. Le contenu des paiements reste chiffré sur le réseau."
+    privacy_note_npub: "Votre npub est public. Le contenu des paiements reste chiffré sur le réseau."
+  profile:
+    title: "Profil"
+    activity: "Activité"
+    no_activity: "Aucune activité avec cette personne."
+    unblock: "Débloquer"
+    block: "Bloquer"
+    blocked_blurb: "Bloqué — ses paiements et demandes sont ignorés."
+    block_blurb: "Le blocage ignore ses paiements et demandes entrants."
+  settings:
+    title: "Réglages"
+    connected_nostr: "Connecté à nostr"
+    connecting_relays: "Connexion aux relais…"
+    identity: "Identité"
+    copy_npub: "Copier le npub (public)"
+    rotate_key: "Renouveler la clé nostr"
+    import_identity: "Importer l'identité (.backup / nsec)"
+    backup_note: "Changement d'appareil ? Sauvegardez les DEUX : votre phrase seed (fonds) et votre fichier .backup d'identité (nom + clé)."
+    wallet: "Portefeuille"
+    display_unit: "Unité d'affichage"
+    relays: "Relais"
+    nostr_relays: "Relais Nostr"
+    node: "Nœud"
+    integrated_node: "Paramètres du nœud intégré"
+    node_advanced: "Avancé"
+    slatepacks: "Slatepacks"
+    slatepacks_value: "Transaction manuelle"
+    lock_wallet: "Verrouiller le portefeuille"
+    switch_wallet: "Changer de portefeuille"
+    advanced: "Avancé"
+    privacy: "Confidentialité"
+    mixnet_routing: "Routage par mixnet"
+    messages_lookups: "Messages et recherches"
+    auto_accept: "Acceptation auto"
+    pairing: "Devise des prix"
+    accept_anyone: "Tout le monde"
+    accept_contacts: "Contacts seulement"
+    accept_ask: "Toujours demander"
+    requests: "Demandes"
+    incoming_requests: "Demandes entrantes"
+    incoming_requests_sub: "Laisser les autres vous demander de l'argent"
+    appearance: "Apparence"
+    theme: "Thème"
+    theme_light: "Clair"
+    theme_dark: "Sombre"
+    theme_yellow: "Jaune"
+    archive: "Archive"
+    export_archive: "Exporter l'archive"
+    wipe_history: "Effacer l'historique des paiements"
+    wipe_history_confirm: "Appuyez à nouveau pour effacer — action irréversible"
+    about: "À propos"
+    goblin: "Goblin"
+    build: "Build %{build}"
+    network: "Réseau"
+    network_value: "MW + mixnet Nym + nostr"
+    third_party: "Tiers"
+    grim: "GRIM (portefeuille amont)"
+    grin_node: "Nœud grin"
+    sp_intro: "Avancé — échangez des slatepacks bruts à la main, comme le fait GRIM. À utiliser seulement si vous ne pouvez pas payer ou être payé via un username."
+    sp_receive_group: "Recevoir ou finaliser"
+    sp_receive_blurb: "Collez un slatepack qu'on vous a donné. Goblin reçoit le paiement, règle la facture, ou le finalise et le publie."
+    sp_process: "Traiter le slatepack"
+    sp_paste_first: "Collez d'abord un slatepack."
+    sp_reply_ready: "Réponse prête — renvoyez-la à l'expéditeur."
+    sp_finalizing: "Finalisation et publication sur la chaîne…"
+    sp_create_group: "Créer un paiement"
+    sp_create_blurb: "Créez un slatepack à remettre à quelqu'un. Il le reçoit, vous renvoie la réponse, et vous le finalisez ci-dessus."
+    sp_amount_hint: "Montant en grin"
+    sp_addr_hint: "Adresse du destinataire (facultatif)"
+    sp_create: "Créer un slatepack"
+    sp_ready: "Slatepack prêt — remettez-le au destinataire."
+    sp_amount_gt_zero: "Saisissez un montant supérieur à zéro."
+    sp_to_send: "Slatepack à envoyer"
+    sp_copy: "Copier le slatepack"
+    rotate_line1: "• Vous obtenez une toute nouvelle clé ALÉATOIRE ; l'ancien npub cesse de recevoir. Il n'y a aucune chaîne de dérivation entre eux."
+    rotate_line2: "• La nouvelle clé n'est PAS récupérable depuis votre phrase de récupération — sauvegardez le nouveau nsec juste après le renouvellement."
+    rotate_line3: "• Votre nom d'utilisateur est LIBÉRÉ — réclamez le même ou un nouveau juste après (une fois libre, n'importe qui peut le prendre)."
+    rotate_line4: "• Les paiements encore en cours vers l'ancienne clé SERONT interrompus — attendez d'abord la fin des paiements en attente."
+    rotate_line5: "• Les contacts qui ont enregistré votre npub directement doivent vous retrouver — partagez votre nouveau npub ou votre username re-réservé."
+    cancel: "Annuler"
+    continue: "Continuer"
+    final_confirmation: "Confirmation finale"
+    rotate_confirm_blurb: "Cette action est irréversible depuis l'app. Tapez RESET et saisissez le mot de passe du portefeuille pour renouveler."
+    type_reset: "Tapez RESET"
+    wallet_password: "Mot de passe du portefeuille"
+    rotate_key_btn: "Renouveler la clé"
+    rotating_key: "Renouvellement de la clé…"
+    key_rotated: "Clé renouvelée"
+    new_npub: "Nouveau npub : %{npub}"
+    backup_new_key: "Sauvegardez la NOUVELLE clé secrète maintenant — votre phrase de récupération ne peut pas la restaurer."
+    copy_new_nsec: "Copier la sauvegarde du nouveau nsec"
+    done: "Terminé"
+    rotation_failed: "Échec du renouvellement"
+    close: "Fermer"
+    import_identity_title: "Importer une identité"
+    import_blurb: "Remplace l'identité nostr de ce portefeuille — choisissez un fichier .backup GOBLIN, ou collez un nsec. Une sauvegarde restaure aussi votre nom d'utilisateur et votre historique. Sauvegardez d'abord la clé actuelle si besoin."
+    import_nsec_hint: "nsec1… ou sauvegarde collée"
+    backup_password_hint: "Mot de passe de sauvegarde (uniquement si exportée ailleurs)"
+    import_btn: "Importer"
+    importing: "Importation…"
+    identity_replaced: "Identité remplacée"
+    now_using: "Utilise maintenant : %{npub}"
+    import_failed: "Échec de l'importation"
+    name_authority: "Autorité de noms"
+    name_authority_title: "Changer l'autorité de noms"
+    name_authority_blurb: "Le serveur qui enregistre et vérifie les noms. Pointez-le vers une autre instance pour utiliser et payer des noms qui y sont hébergés."
+    name_authority_invalid: "Saisissez une URL complète (https://…)."
+    reset: "Réinitialiser"
+    save: "Enregistrer"
+    backup_file: "Sauvegarder dans un fichier"
+    choose_backup_file: "Choisir un fichier .backup"
+    backup_read_failed: "Impossible de lire ce fichier."
+    backup_saved: "Sauvegarde enregistrée"
+    backup_saved_sub: "Conservez le fichier .backup en lieu sûr — quiconque l'a AVEC votre mot de passe peut restaurer votre identité."
+    backup_file_title: "Sauvegarder l'identité"
+    backup_file_blurb: "Crée un fichier .backup chiffré avec votre nom d'utilisateur et votre clé. Saisissez le mot de passe du portefeuille pour le sceller."
+    backup_write_failed: "Impossible d'enregistrer le fichier."
+    create_backup: "Créer la sauvegarde"
+    registered: "%{name} enregistré"
+    released_msg: "Libéré — le nom est disponible"
+    release_confirm: "Libérer %{name} ?"
+    release_blurb: "Dès qu'il est libre, il est disponible — n'importe qui peut le réclamer, y compris votre prochaine clé. Vous ne pourrez pas enregistrer un autre nom d'utilisateur pendant 10 minutes."
+    releasing: "Libération…"
+    keep_it: "Le garder"
+    release_it: "Le libérer"
+    username: "Nom d'utilisateur"
+    username_note: "Affiché comme votre nom. Public sur goblin.st. Les paiements restent chiffrés."
+    release_username: "Libérer le nom d'utilisateur"
+    pick_username: "Choisir un nom d'utilisateur — facultatif"
+    working: "En cours…"
+    claim: "Réserver"
+    err_just_taken: "Ce nom d'utilisateur vient d'être pris"
+    err_cooldown: "Vous avez récemment libéré un nom d'utilisateur — vous pouvez en enregistrer un nouveau dans les 10 minutes."
+    err_unreachable: "Impossible de joindre goblin.st — souci de connexion. Réessayez."
+    err_release: "Impossible de libérer : %{err}"
+    avail_available: "Disponible !"
+    avail_taken: "Pris"
+    avail_reserved: "Réservé"
+    avail_invalid: "Les noms font 3 à 20 caractères : a–z, 0–9, _ ou -"
+    avail_quarantined: "Indisponible"
+    avail_unknown: "Vérification impossible — souci de connexion. Réessayez."
+  advanced:
+    title: "Avancé"
+    intro: "Outils de portefeuille bas niveau de GRIM. Vous n'en aurez normalement pas besoin."
+    own_node_desc: "Synchronisez un nœud Grin complet sur cet appareil au lieu de faire confiance à un nœud public."
+    own_node_active: "Votre propre nœud est actif"
+    repair: "Réparer le portefeuille"
+    repair_desc: "Re-scanner la chaîne et restaurer les sorties manquantes. Cela peut prendre du temps."
+    repair_unavailable: "Nécessite d'abord une connexion à un nœud synchronisé."
+    repairing: "Réparation… %{pct}%"
+    restore: "Restaurer le portefeuille"
+    restore_desc: "Supprimer les données locales et reconstruire depuis votre seed. À utiliser si une réparation n'a pas aidé — vous rouvrirez le portefeuille ensuite."
+    restore_confirm: "Touchez à nouveau pour restaurer"
+    show_phrase: "Phrase de récupération"
+    phrase_desc: "Vos 24 mots de seed grin — le seul moyen de récupérer les fonds. Gardez-les hors ligne et privés."
+    reveal: "Afficher la phrase"
+    hide: "Masquer"
+    password: "Mot de passe du portefeuille"
+    wrong_password: "Mot de passe incorrect."
+    delete: "Supprimer le portefeuille"
+    delete_desc: "Supprimer définitivement ce portefeuille de cet appareil. Sans votre seed, les fonds sont irrécupérables."
+    delete_confirm: "Touchez à nouveau pour supprimer"
+    manage_node: "Gérer la connexion au nœud"
+    repair_confirm: "Oui, réparer maintenant"
+    repair_confirm_note: "La réparation réanalyse la chaîne et peut prendre quelques minutes."
+    restore_confirm_note: "Cela efface les données locales et les reconstruit depuis votre seed — cela peut prendre plusieurs minutes."
+    nostr_key: "Clé Nostr"
+    nostr_key_desc: "Votre nsec, la clé secrète de votre identité Nostr. Copiez-la ou affichez son QR pour vous connecter à des applis Nostr comme magick.market. Quiconque la possède contrôle votre identité, gardez-la privée."
+    reveal_nsec: "Afficher la clé"
+    copy_nsec: "Copier le nsec"
+    show_qr: "Afficher le QR"
+    hide_qr: "Masquer le QR"
+  privacy:
+    title: "Confidentialité réseau"
+    intro: "Goblin envoie son trafic privé via le mixnet Nym — un réseau à cinq sauts qui masque qui parle à qui, afin qu'un relais ne puisse pas relier un paiement à vous."
+    payments: "Paiements"
+    payments_blurb: "Chaque message nostr transportant un slatepack."
+    usernames: "usernames"
+    usernames_blurb: "Recherches de noms NIP-05 vers et depuis goblin.st."
+    price_avatars: "Prix"
+    price_avatars_blurb: "Le taux en temps réel affiché à côté des montants."
+    over_mixnet: "Via le mixnet"
+    direct_connection: "Connexion directe"
+    grin_node: "Nœud grin"
+    grin_node_blurb: "Synchronisation des blocs et diffusion de votre transaction sur le réseau. Ce sont des données de chaîne publiques, identiques pour tous, et non liées à votre identité."
+  pairing:
+    title: "Appairage"
+    intro: "Ce à quoi votre solde et vos montants sont comparés."
+    pair_with: "Apparier avec"
+    rates_note: "Les cours sont récupérés via le mixnet Nym, uniquement tant qu'un appairage est actif — désactivé, aucune requête de cours ne quitte votre appareil."
+  relays:
+    title: "Relais"
+    intro: "Les messages de paiement sont répliqués sur tous les relais ci-dessous ; un seul relais joignable suffit pour recevoir."
+    your_relays: "Vos relais"
+    add_relay: "Ajouter un relais"
+    add_relay_btn: "Ajouter un relais"
+    save_reconnect: "Enregistrer et reconnecter"
+    none: "aucun"
+    count: "%{n} relais"
+  node:
+    title: "Nœud"
+    connection: "Connexion"
+    integrated: "Nœud intégré"
+    applies_after: "S'applique après le verrouillage puis déverrouillage du portefeuille."
+    add_external: "Ajouter un nœud externe"
+    api_secret_hint: "Secret API (facultatif)"
+    add_node: "Ajouter le nœud"
+    integrated_host: "nœud intégré"
+    summary_syncing: "%{conn} · synchronisation"
+    summary_block: "Bloc %{height} · %{conn}"
+  nips:
+    title: "nostr et NIP"
+    intro1: "Goblin parle nostr — un protocole ouvert de messages signés transmis via de simples serveurs relais. Votre portefeuille porte sa propre identité nostr : une clé aléatoire autonome, gardée délibérément indépendante de vos fonds et de votre phrase de récupération. Chaque paiement voyage comme un message direct chiffré de bout en bout entre identités, le slatepack à l'intérieur."
+    intro2: "goblin.st est le service de noms de Goblin : réserver un nom d'utilisateur y publie une correspondance nom → clé (NIP-05), pour qu'on puisse payer you au lieu d'un long npub. Le nom d'utilisateur est public ; le contenu des paiements ne l'est jamais. Les NIP sont les briques du protocole — touchez-en un pour lire la spécification."
+    n05_title: "Noms"
+    n05_blurb: "Associe username@goblin.st à votre clé, pour que les identifiants fonctionnent comme des adresses."
+    n17_title: "Messages privés"
+    n17_blurb: "L'enveloppe de DM chiffré dans laquelle voyage chaque paiement."
+    n44_title: "Chiffrement"
+    n44_blurb: "Le chiffrement authentifié utilisé à l'intérieur de ces messages."
+    n49_title: "Chiffrement de clé"
+    n49_blurb: "Comment la clé secrète est stockée au repos, verrouillée par votre mot de passe."
+    n59_title: "Emballage cadeau"
+    n59_blurb: "Enveloppe les messages pour que les relais ne voient pas qui parle à qui."
+    n98_title: "Auth HTTP"
+    n98_blurb: "Signe la demande d'enregistrement du nom d'utilisateur auprès de goblin.st."
+  onboarding:
+    intro:
+      private_money_head: "Argent privé"
+      private_money_body: "Goblin est un portefeuille pour grin — de l'argent numérique sans montants ni adresses sur sa chaîne."
+      send_like_message_head: "Envoyer comme un message"
+      send_like_message_body: "Payez un username ou un npub et cela arrive comme un message chiffré de bout en bout via nostr et le mixnet Nym — personne entre les deux ne voit le montant ni les personnes impliquées."
+      yours_alone_head: "À vous seul"
+      yours_alone_body: "Clés, noms et historique vivent sur cet appareil. Construit sur le portefeuille GRIM."
+      get_started: "Commencer"
+      footnote: "Environ une minute. Vous pourrez tout changer plus tard."
+    node:
+      kicker: "ÉTAPE 1 SUR 3 · RÉSEAU"
+      title: "Comment Goblin doit-il\nsurveiller la chaîne ?"
+      own_title: "Lancer mon propre nœud"
+      own_badge: "Privé"
+      own_body: "Ne fait confiance à personne — votre portefeuille vérifie la chaîne lui-même. Se synchronise en arrière-plan pendant que vous terminez la configuration."
+      connect_title: "Se connecter à un nœud"
+      connect_badge: "Instantané"
+      connect_body: "Aucune attente de synchronisation. Le nœud que vous choisissez peut voir les requêtes de votre portefeuille."
+      changeable: "Modifiable à tout moment dans Réglages → Nœud."
+      continue: "Continuer"
+      url_invalid: "L'URL du nœud doit commencer par http:// ou https://"
+    wallet:
+      kicker: "ÉTAPE 2 SUR 3 · PORTEFEUILLE"
+      title: "Configurez votre portefeuille"
+      create_new: "Créer un nouveau"
+      restore_from_seed: "Restaurer depuis la phrase"
+      name_hint: "Nom du portefeuille"
+      password_hint: "Mot de passe"
+      repeat_password_hint: "Répéter le mot de passe"
+      restore_hint: "Préparez vos mots de récupération — vous les saisirez ensuite."
+      create_hint: "Vous obtiendrez ensuite 24 mots de récupération à noter. Ce sont l'argent — quiconque les détient détient vos fonds."
+      continue: "Continuer"
+      passwords_no_match: "Les mots de passe ne correspondent pas"
+    words:
+      kicker: "ÉTAPE 2 SUR 3 · PORTEFEUILLE"
+      title_restore: "Saisissez vos mots de récupération"
+      title_create: "Notez ces mots"
+      write_down_hint: "Sur papier, dans l'ordre. Quiconque a ces mots peut prendre vos fonds ; sans eux, un appareil perdu signifie des fonds perdus."
+      paste: "Coller"
+      scan_qr: "Scanner le QR"
+      copy_clipboard: "Copier dans le presse-papiers (à éviter)"
+      restore_wallet: "Restaurer le portefeuille"
+      wrote_them_down: "Je les ai notés"
+      fill_every_word: "Remplissez chaque mot — touchez un mot pour le modifier, ou collez la phrase."
+    confirm:
+      kicker: "ÉTAPE 2 SUR 3 · PORTEFEUILLE"
+      title: "Maintenant prouvez-le"
+      enter_hint: "Saisissez les mots que vous venez de noter. Touchez un mot pour le taper."
+      paste: "Coller"
+      create_wallet: "Créer le portefeuille"
+      keep_going: "Continuez — chaque mot, dans l'ordre."
+    identity:
+      kicker: "ÉTAPE 3 SUR 3 · IDENTITÉ"
+      title: "Votre identité de paiement"
+      key_being_made: "clé en cours de création…"
+      connected_nym: "connecté via Nym"
+      connecting_nym: "connexion via Nym…"
+      fresh_key_blurb: "Une clé de paiement qui ne fait pas partie de votre seed — renouvelable à tout moment, sans toucher à vos fonds."
+      clean_slate_blurb: "Envie de repartir à zéro ? Remplacez par une toute nouvelle clé à tout moment — le nouveau vous n'est pas lié à l'ancien. Même portefeuille, nouveau visage."
+      pick_username: "Choisir un nom d'utilisateur — facultatif"
+      username_blurb: "Vos amis paient votre nom au lieu d'une longue clé. Facultatif — réclamez-en un à tout moment."
+      username_field_hint: "votrenom"
+      working: "En cours…"
+      claim_username: "Réserver le nom d'utilisateur"
+      available_when_connected: "Disponible une fois le mixnet connecté — ou passez et réservez plus tard."
+      youre: "Vous êtes %{name}"
+      claimed_title: "%{name} est à vous"
+      claimed_blurb: "Vos amis peuvent désormais vous payer par votre nom. Tout est prêt — ouvrez votre portefeuille."
+      open_wallet: "Ouvrir mon portefeuille"
+      skip_for_now: "Passer pour l'instant"
+      import_existing: "Vous avez déjà une identité Goblin ? Importez-la"
+      import_title: "Importer votre identité"
+      import_blurb: "Collez votre nsec ou choisissez un fichier .backup pour conserver votre clé et votre nom existants au lieu de ce nouveau."
+    errors:
+      cant_open: "Impossible d'ouvrir le portefeuille : %{err}"
+      cant_create: "Impossible de créer le portefeuille : %{err}"
+  send:
+    scan_to_request: "Scanner pour demander"
+    scan_to_pay: "Scanner pour payer"
+    tab_scan: "Scanner"
+    tab_my_code: "Mon code"
+    request_from: "Demander à"
+    send_to: "Envoyer à"
+    search_hint: "handle, npub ou nom"
+    suggested: "%{icon}  Suggéré"
+    no_contacts: "Aucun contact pour l'instant. Trouvez quelqu'un par son handle."
+    no_profile: "pas de profil"
+    tag_contact: "contact"
+    tag_on_nostr: "sur nostr"
+    searching_nostr: "Recherche sur nostr…"
+    unverified_title: "Payer une clé non vérifiée ?"
+    unverified_body: "Aucun profil nostr n'est publié pour cette clé — elle peut être toute neuve, anonyme ou mal saisie. Vérifiez bien qu'il s'agit de la bonne avant d'envoyer."
+    keep_looking: "Continuer à chercher"
+    pay_anyway: "Payer quand même"
+    scan_not_recipient: "Ce QR n'est pas un destinataire goblin — un npub ou handle est attendu"
+    scan_prompt: "Placez un code goblin dans le champ pour activer"
+    scan_to_pay_me: "Scannez pour me payer"
+    share_btn: "%{icon} Partager"
+    share_message: "Payez-moi sur Goblin — %{handle}\n%{link}\nnpub : %{npub}"
+    none_found: "Personne trouvé pour %{label}"
+    enter_recipient: "Saisissez un handle, un npub ou un nom"
+    amount_title: "Montant"
+    to_name: "À %{name}"
+    not_enough: "Vous n'avez pas assez de grin"
+    max: "Max"
+    note_label: "Note"
+    note_hint: "Ajouter une note…"
+    add_note: "Ajouter une note"
+    edit_note: "Modifier la note"
+    note_cancel: "Annuler"
+    note_save: "Enregistrer"
+    review_btn: "Vérifier"
+    confirm_request: "Confirmer la demande"
+    review_title: "Vérification"
+    requesting_from: "Demande à %{name}"
+    youre_sending: "Vous envoyez %{name}"
+    row_from: "De"
+    row_to: "À"
+    row_note: "Note"
+    row_they_pay: "Ils paient"
+    row_they_pay_val: "Seulement s'ils approuvent"
+    row_delivery: "Livraison"
+    row_delivery_val: "Chiffré NIP-44, via Nym"
+    row_network_fee: "Frais de réseau"
+    row_network_fee_val: "Déduit de votre solde"
+    row_privacy: "Confidentialité"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "Envoyer la demande"
+    request_approve_hint: "Ils recevront une demande à approuver"
+    hold_to_send: "Maintenir pour envoyer"
+    lower_amount: "Revenez et baissez le montant"
+    hold_confirm_hint: "Appuyez et maintenez pour confirmer"
+    requesting: "Demande en cours…"
+    sending: "Envoi…"
+    they: "Ils"
+    request_blocked: "%{who} n'accepte pas les demandes. Demandez-lui de vous envoyer des grin à la place."
+    failed_request_title: "Échec de la demande"
+    failed_send_title: "Échec de l'envoi"
+    failed_request_body: "Impossible de livrer la demande. Demandez-lui de vous envoyer des grin à la place."
+    failed_send_body: "Le paiement n'a pas été livré. Vos grin sont en sécurité — réessayez."
+    try_again_btn: "Réessayer"
+    close_btn: "Fermer"
+    success:
+      requested: "Demandé"
+      sent: "Envoyé"
+      from: "de"
+      to: "à"
+      subtitle: "%{dir} %{who} · à l'instant"
+      done_btn: "Terminé"
+      receipt_btn: "Reçu"

locales/ru.yml

@@ -44,7 +44,7 @@ wallets:
   await_fin_amount: Ожидает завершения
   locked_amount: Заблокировано
   txs_empty: 'Для получения средств вручную или через транспорт используйте кнопки %{message} или %{transport} внизу экрана, для изменения настроек кошелька нажмите кнопку %{settings}.'
-  title: Кошельки
+  title: Goblin
   create_desc: Создайте или импортируйте существующий кошелёк из сохранённой фразы восстановления.
   add: Добавить кошелёк
   name: 'Название:'
@@ -355,4 +355,468 @@ keyboard:
   m: ь
   m1: б
   m2: ю
-  m3: ё
+  m3: ё
+goblin:
+  home:
+    anonymous: "Аноним"
+    connected_nym: "Подключено через Nym"
+    nym_ready: "Nym готов · реле…"
+    connecting_nym: "Подключение к Nym…"
+    cant_reach_node: "Нет связи с узлом"
+    node_synced: "Узел синхронизирован"
+    syncing: "Синхронизация…"
+    balance_updating: "Баланс обновляется…"
+    listening: "Ожидание платежей"
+    block: "Блок %{height}"
+    waiting_for_chain: "Ожидание цепочки…"
+    nav_wallet: "Кошелёк"
+    nav_pay: "Оплатить"
+    nav_activity: "Действия"
+    nav_receive: "Получить"
+    nav_settings: "Настройки"
+    activity: "Действия"
+    empty_title: "Пока нет действий"
+    empty_sub: "Отправьте или получите grin, чтобы начать."
+    recent: "Недавние"
+    scan_to_pay: "Сканируйте для оплаты"
+    type_amount: "Введите сумму"
+    request: "Запросить"
+    pay: "Оплатить"
+    enter_amount: "Введите сумму для оплаты или запроса"
+  activity:
+    canceled: "отменено"
+    pending: "в ожидании"
+    earlier: "Ранее"
+    today: "Сегодня"
+    yesterday: "Вчера"
+    title: "Действия"
+    requests: "Запросы"
+    empty_title: "Пока нет действий"
+    empty_sub: "Здесь появятся ваши платежи."
+    pending_header: "В ожидании"
+  receipt:
+    title: "Квитанция"
+    not_found: "Транзакция не найдена"
+    for_note: "За %{note}"
+    details: "Детали транзакции"
+    canceled: "Отменено"
+    expired: "Истекло"
+    funds_returned: "Средства возвращены"
+    complete: "Завершено"
+    payment_received: "Платёж получен"
+    payment_sent: "Платёж успешно отправлен"
+    pending: "В ожидании"
+    confs: "%{c}/%{r} подтверждений"
+    waiting_to_confirm: "Ожидание подтверждения"
+    paying: "Оплата…"
+    you: "Вы"
+    to: "Кому"
+    from: "От"
+    nostr: "nostr"
+    fee_none: "Нет"
+    network_fee: "Сетевая комиссия"
+    privacy: "Приватность"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "Транзакция"
+    cancel_request: "Отменить запрос"
+    cancel_send: "Отменить платёж"
+    cancel_send_confirm: "Нажмите ещё раз для отмены — он ещё может его получить"
+    cancel_send_done: "Платёж отменён — ваши средства снова доступны"
+    cancel_send_too_late: "Этот платёж уже прошёл и не может быть отменён"
+    waiting_to_receive: "Ожидание, пока %{name} получит…"
+  request:
+    title: "%{name} запрашивает"
+    approve: "Принять"
+    decline: "Отклонить"
+    review_title: "Проверить запрос"
+    hold_to_accept: "Удерживайте, чтобы принять"
+    hold_accept_hint: "Нажмите и удерживайте, чтобы оплатить запрос"
+  receive:
+    title: "Получить"
+    requesting: "Запрос %{amt}%{tsu} — поделитесь, чтобы получить оплату"
+    clear_request: "Очистить запрос"
+    share_handle: "Поделитесь именем, чтобы получить оплату"
+    share_npub: "Поделитесь своим npub, чтобы получить оплату"
+    copied: "Скопировано"
+    copy_nostr_id: "Копировать nostr ID"
+    copy_address: "Копировать адрес"
+    copy_npub: "Копировать npub"
+    share_message: "Заплатите мне в Goblin (goblin.st) — %{npub}"
+    privacy_note: "Ваше имя публично. Содержимое платежей остаётся зашифрованным в сети."
+    privacy_note_npub: "Ваш npub публичен. Содержимое платежей остаётся зашифрованным в сети."
+  profile:
+    title: "Профиль"
+    activity: "Действия"
+    no_activity: "Пока нет действий с ними."
+    unblock: "Разблокировать"
+    block: "Заблокировать"
+    blocked_blurb: "Заблокирован — их платежи и запросы отклоняются."
+    block_blurb: "Блокировка отклоняет их входящие платежи и запросы."
+  settings:
+    title: "Настройки"
+    connected_nostr: "Подключено к nostr"
+    connecting_relays: "Подключение к реле…"
+    identity: "Личность"
+    copy_npub: "Копировать npub (публичный)"
+    rotate_key: "Сменить ключ nostr"
+    import_identity: "Импорт личности (.backup / nsec)"
+    backup_note: "Меняете устройство? Сохраните ОБА: seed-фразу (средства) и файл .backup личности (имя + ключ)."
+    wallet: "Кошелёк"
+    display_unit: "Единица отображения"
+    relays: "Реле"
+    nostr_relays: "Реле Nostr"
+    node: "Узел"
+    integrated_node: "Настройки встроенного узла"
+    node_advanced: "Дополнительно"
+    slatepacks: "Slatepacks"
+    slatepacks_value: "Ручная транзакция"
+    lock_wallet: "Заблокировать кошелёк"
+    switch_wallet: "Сменить кошелёк"
+    advanced: "Дополнительно"
+    privacy: "Приватность"
+    mixnet_routing: "Маршрутизация через mixnet"
+    messages_lookups: "Сообщения и поиск"
+    auto_accept: "Автоприём"
+    pairing: "Валюта цены"
+    accept_anyone: "Любой"
+    accept_contacts: "Только контакты"
+    accept_ask: "Всегда спрашивать"
+    requests: "Запросы"
+    incoming_requests: "Входящие запросы"
+    incoming_requests_sub: "Разрешить другим запрашивать у вас деньги"
+    appearance: "Внешний вид"
+    theme: "Тема"
+    theme_light: "Светлая"
+    theme_dark: "Тёмная"
+    theme_yellow: "Жёлтая"
+    archive: "Архив"
+    export_archive: "Экспорт архива"
+    wipe_history: "Стереть историю платежей"
+    wipe_history_confirm: "Нажмите ещё раз, чтобы стереть — это нельзя отменить"
+    about: "О приложении"
+    goblin: "Goblin"
+    build: "Сборка %{build}"
+    network: "Сеть"
+    network_value: "MW + mixnet Nym + nostr"
+    third_party: "Сторонние"
+    grim: "GRIM (исходный кошелёк)"
+    grin_node: "Узел Grin"
+    sp_intro: "Для опытных — обмен сырыми slatepacks вручную, как в GRIM. Используйте только если не можете платить или получать через username."
+    sp_receive_group: "Получить или завершить"
+    sp_receive_blurb: "Вставьте slatepack, который вам дали. Goblin получит платёж, оплатит счёт или завершит и опубликует его."
+    sp_process: "Обработать slatepack"
+    sp_paste_first: "Сначала вставьте slatepack."
+    sp_reply_ready: "Ответ готов — отправьте его обратно отправителю."
+    sp_finalizing: "Завершение и публикация в цепочку…"
+    sp_create_group: "Создать платёж"
+    sp_create_blurb: "Создайте slatepack для передачи кому-то. Они получат его, отправят ответ, а вы завершите его выше."
+    sp_amount_hint: "Сумма в grin"
+    sp_addr_hint: "Адрес получателя (необязательно)"
+    sp_create: "Создать slatepack"
+    sp_ready: "Slatepack готов — передайте его получателю."
+    sp_amount_gt_zero: "Введите сумму больше нуля."
+    sp_to_send: "Slatepack для отправки"
+    sp_copy: "Копировать slatepack"
+    rotate_line1: "• Вы получите совершенно новый СЛУЧАЙНЫЙ ключ; старый npub перестанет принимать. Между ними нет цепочки вывода."
+    rotate_line2: "• Новый ключ НЕЛЬЗЯ восстановить из seed — сохраните новый nsec сразу после смены."
+    rotate_line3: "• Ваше имя пользователя ОСВОБОЖДАЕТСЯ — сразу после заявите то же или новое имя (как только свободно, его может занять кто угодно)."
+    rotate_line4: "• Платежи, всё ещё идущие к старому ключу, БУДУТ нарушены — сначала дождитесь завершения ожидающих платежей."
+    rotate_line5: "• Контакты, сохранившие ваш npub напрямую, должны найти вас заново — поделитесь новым npub или заново занятым username."
+    cancel: "Отмена"
+    continue: "Продолжить"
+    final_confirmation: "Финальное подтверждение"
+    rotate_confirm_blurb: "Это нельзя отменить из приложения. Введите RESET и пароль кошелька, чтобы сменить."
+    type_reset: "Введите RESET"
+    wallet_password: "Пароль кошелька"
+    rotate_key_btn: "Сменить ключ"
+    rotating_key: "Смена ключа…"
+    key_rotated: "Ключ сменён"
+    new_npub: "Новый npub: %{npub}"
+    backup_new_key: "Сохраните НОВЫЙ секретный ключ сейчас — seed не сможет его восстановить."
+    copy_new_nsec: "Копировать резерв нового nsec"
+    done: "Готово"
+    rotation_failed: "Смена не удалась"
+    close: "Закрыть"
+    import_identity_title: "Импорт личности"
+    import_blurb: "Заменяет nostr-личность этого кошелька — выберите файл GOBLIN .backup или вставьте nsec. Резервная копия также восстанавливает имя и историю. Сначала сохраните текущий ключ, если он ещё нужен."
+    import_nsec_hint: "nsec1… или вставленная копия"
+    backup_password_hint: "Пароль резерва (только если экспортирован в другом месте)"
+    import_btn: "Импорт"
+    importing: "Импорт…"
+    identity_replaced: "Личность заменена"
+    now_using: "Сейчас используется: %{npub}"
+    import_failed: "Импорт не удался"
+    name_authority: "Сервер имён"
+    name_authority_title: "Сменить сервер имён"
+    name_authority_blurb: "Сервер, который регистрирует и проверяет имена. Укажите другой инстанс, чтобы использовать и оплачивать имена оттуда."
+    name_authority_invalid: "Введите полный URL (https://…)."
+    reset: "Сброс"
+    save: "Сохранить"
+    backup_file: "Сохранить в файл"
+    choose_backup_file: "Выбрать файл .backup"
+    backup_read_failed: "Не удалось прочитать файл."
+    backup_saved: "Резервная копия сохранена"
+    backup_saved_sub: "Храните файл .backup в безопасности — любой, у кого есть он И ваш пароль, может восстановить вашу личность."
+    backup_file_title: "Резервная копия личности"
+    backup_file_blurb: "Создаёт один зашифрованный файл .backup с именем и ключом. Введите пароль кошелька, чтобы запечатать его."
+    backup_write_failed: "Не удалось сохранить файл."
+    create_backup: "Создать копию"
+    registered: "Зарегистрировано %{name}"
+    released_msg: "Освобождено — имя свободно для занятия"
+    release_confirm: "Освободить %{name}?"
+    release_blurb: "Как только оно свободно, его можно занять — кто угодно, включая ваш следующий ключ. Вы не сможете зарегистрировать другое имя в течение 10 минут."
+    releasing: "Освобождение…"
+    keep_it: "Оставить"
+    release_it: "Освободить"
+    username: "Имя пользователя"
+    username_note: "Отображается как ваше имя. Публично на goblin.st. Платежи остаются зашифрованными."
+    release_username: "Освободить имя"
+    pick_username: "Выберите имя — необязательно"
+    working: "Обработка…"
+    claim: "Занять"
+    err_just_taken: "Это имя только что заняли"
+    err_cooldown: "Вы недавно освободили имя — можно зарегистрировать новое в течение 10 минут."
+    err_unreachable: "Не удалось связаться с goblin.st — сбой соединения. Попробуйте снова."
+    err_release: "Не удалось освободить: %{err}"
+    avail_available: "Доступно!"
+    avail_taken: "Занято"
+    avail_reserved: "Зарезервировано"
+    avail_invalid: "Имена 3–20 символов: a–z, 0–9, _ или -"
+    avail_quarantined: "Недоступно"
+    avail_unknown: "Не удалось проверить — сбой соединения. Попробуйте снова."
+  advanced:
+    title: "Дополнительно"
+    intro: "Низкоуровневые инструменты кошелька из GRIM. Обычно они вам не нужны."
+    own_node_desc: "Синхронизируйте полный узел Grin на этом устройстве вместо доверия публичному."
+    own_node_active: "Ваш узел запущен"
+    repair: "Починить кошелёк"
+    repair_desc: "Повторно просканировать цепочку и восстановить недостающие выходы. Это может занять время."
+    repair_unavailable: "Сначала нужно синхронизированное подключение к узлу."
+    repairing: "Починка… %{pct}%"
+    restore: "Восстановить кошелёк"
+    restore_desc: "Удалить локальные данные и пересоздать из seed-фразы. Используйте, если починка не помогла — после этого откройте кошелёк заново."
+    restore_confirm: "Нажмите ещё раз для восстановления"
+    show_phrase: "Фраза восстановления"
+    phrase_desc: "Ваши 24 seed-слова grin — единственный способ восстановить средства. Храните их офлайн и в тайне."
+    reveal: "Показать фразу"
+    hide: "Скрыть"
+    password: "Пароль кошелька"
+    wrong_password: "Неверный пароль."
+    delete: "Удалить кошелёк"
+    delete_desc: "Безвозвратно удалить этот кошелёк с этого устройства. Без seed-фразы средства не восстановить."
+    delete_confirm: "Нажмите ещё раз для удаления"
+    manage_node: "Управление подключением к узлу"
+    repair_confirm: "Да, восстановить сейчас"
+    repair_confirm_note: "Восстановление повторно сканирует цепочку и может занять несколько минут."
+    restore_confirm_note: "Это стирает локальные данные и восстанавливает их из seed-фразы — может занять несколько минут."
+    nostr_key: "Ключ Nostr"
+    nostr_key_desc: "Ваш nsec, секретный ключ вашей личности Nostr. Скопируйте его или покажите QR-код, чтобы войти в приложения Nostr, такие как magick.market. Любой, у кого он есть, управляет вашей личностью, держите его в секрете."
+    reveal_nsec: "Показать ключ"
+    copy_nsec: "Копировать nsec"
+    show_qr: "Показать QR"
+    hide_qr: "Скрыть QR"
+  privacy:
+    title: "Сетевая приватность"
+    intro: "Goblin отправляет приватный трафик через mixnet Nym — сеть из пяти переходов, скрывающую, кто с кем общается, чтобы реле не могло связать платёж с вами."
+    payments: "Платежи"
+    payments_blurb: "Каждое nostr-сообщение, несущее slatepack."
+    usernames: "usernames"
+    usernames_blurb: "Поиск имён NIP-05 к и от goblin.st."
+    price_avatars: "Цена"
+    price_avatars_blurb: "Текущий курс рядом с суммами."
+    over_mixnet: "Через mixnet"
+    direct_connection: "Прямое соединение"
+    grin_node: "Узел Grin"
+    grin_node_blurb: "Синхронизация блоков и трансляция транзакции в сеть. Это публичные данные цепочки, одинаковые для всех, и они не связаны с вашей личностью."
+  pairing:
+    title: "Привязка"
+    intro: "К чему привязаны отображаемые баланс и суммы."
+    pair_with: "Привязать к"
+    rates_note: "Курсы загружаются через mixnet Nym только при включённой привязке — выключено означает, что запрос курса не покидает устройство."
+  relays:
+    title: "Реле"
+    intro: "Сообщения о платежах дублируются на каждое реле ниже; для получения достаточно одного доступного реле."
+    your_relays: "Ваши реле"
+    add_relay: "Добавить реле"
+    add_relay_btn: "Добавить реле"
+    save_reconnect: "Сохранить и переподключить"
+    none: "нет"
+    count: "%{n} реле"
+  node:
+    title: "Узел"
+    connection: "Соединение"
+    integrated: "Встроенный узел"
+    applies_after: "Применяется после блокировки и повторной разблокировки кошелька."
+    add_external: "Добавить внешний узел"
+    api_secret_hint: "API-секрет (необязательно)"
+    add_node: "Добавить узел"
+    integrated_host: "встроенный узел"
+    summary_syncing: "%{conn} · синхронизация"
+    summary_block: "Блок %{height} · %{conn}"
+  nips:
+    title: "nostr и NIPs"
+    intro1: "Goblin говорит на nostr — открытом протоколе подписанных сообщений, передаваемых через простые реле-серверы. Ваш кошелёк несёт собственную nostr-личность: отдельный случайный ключ, намеренно независимый от ваших средств и seed. Каждый платёж идёт как сквозно зашифрованное личное сообщение между личностями, со slatepack внутри."
+    intro2: "goblin.st — это служба имён Goblin: занятие имени публикует там сопоставление имя → ключ (NIP-05), чтобы вам платили на you вместо длинного npub. Имя публично; содержимое платежей — никогда. NIPs — это строительные блоки протокола; коснитесь одного, чтобы прочитать спецификацию."
+    n05_title: "Имена"
+    n05_blurb: "Сопоставляет username@goblin.st с вашим ключом, чтобы имена работали как адреса."
+    n17_title: "Личные сообщения"
+    n17_blurb: "Зашифрованный конверт DM, в котором идёт каждый платёж."
+    n44_title: "Шифрование"
+    n44_blurb: "Аутентифицированный шифр, используемый внутри этих сообщений."
+    n49_title: "Шифрование ключа"
+    n49_blurb: "Как секретный ключ хранится в покое, защищённый вашим паролем."
+    n59_title: "Gift wrap"
+    n59_blurb: "Оборачивает сообщения, чтобы реле не видели, кто с кем общается."
+    n98_title: "HTTP-авторизация"
+    n98_blurb: "Подписывает запрос регистрации имени на goblin.st."
+  onboarding:
+    intro:
+      private_money_head: "Приватные деньги"
+      private_money_body: "Goblin — кошелёк для grin: цифровая наличность без сумм и адресов в её цепочке."
+      send_like_message_head: "Отправляйте как сообщение"
+      send_like_message_body: "Заплатите на username или npub, и платёж придёт как сквозно зашифрованное сообщение через nostr и mixnet Nym — никто посередине не увидит сумму или участников."
+      yours_alone_head: "Только ваше"
+      yours_alone_body: "Ключи, имена и история живут на этом устройстве. На базе кошелька GRIM."
+      get_started: "Начать"
+      footnote: "Займёт около минуты. Всё можно изменить позже."
+    node:
+      kicker: "ШАГ 1 ИЗ 3 · СЕТЬ"
+      title: "Как Goblin должен\nследить за цепочкой?"
+      own_title: "Запустить свой узел"
+      own_badge: "Приватно"
+      own_body: "Никому не доверяет — ваш кошелёк проверяет цепочку сам. Синхронизируется в фоне, пока вы завершаете настройку."
+      connect_title: "Подключиться к узлу"
+      connect_badge: "Мгновенно"
+      connect_body: "Без ожидания синхронизации. Выбранный узел может видеть запросы вашего кошелька."
+      changeable: "Меняется в любой момент в Настройки → Узел."
+      continue: "Продолжить"
+      url_invalid: "URL узла должен начинаться с http:// или https://"
+    wallet:
+      kicker: "ШАГ 2 ИЗ 3 · КОШЕЛЁК"
+      title: "Настройте кошелёк"
+      create_new: "Создать новый"
+      restore_from_seed: "Восстановить из seed"
+      name_hint: "Имя кошелька"
+      password_hint: "Пароль"
+      repeat_password_hint: "Повторите пароль"
+      restore_hint: "Подготовьте seed-слова — вы введёте их далее."
+      create_hint: "Далее вы получите 24 seed-слова для записи. Они — это деньги: кто владеет ими, владеет вашими средствами."
+      continue: "Продолжить"
+      passwords_no_match: "Пароли не совпадают"
+    words:
+      kicker: "ШАГ 2 ИЗ 3 · КОШЕЛЁК"
+      title_restore: "Введите seed-слова"
+      title_create: "Запишите эти слова"
+      write_down_hint: "На бумаге, по порядку. Любой с этими словами может забрать ваши средства; без них потеря устройства означает потерю средств."
+      paste: "Вставить"
+      scan_qr: "Сканировать QR"
+      copy_clipboard: "Копировать в буфер (избегайте этого)"
+      restore_wallet: "Восстановить кошелёк"
+      wrote_them_down: "Я записал их"
+      fill_every_word: "Заполните каждое слово — коснитесь слова для редактирования или вставьте фразу."
+    confirm:
+      kicker: "ШАГ 2 ИЗ 3 · КОШЕЛЁК"
+      title: "Теперь подтвердите"
+      enter_hint: "Введите слова, которые только что записали. Коснитесь слова, чтобы ввести его."
+      paste: "Вставить"
+      create_wallet: "Создать кошелёк"
+      keep_going: "Продолжайте — каждое слово, по порядку."
+    identity:
+      kicker: "ШАГ 3 ИЗ 3 · ЛИЧНОСТЬ"
+      title: "Ваша платёжная личность"
+      key_being_made: "ключ создаётся…"
+      connected_nym: "подключено через Nym"
+      connecting_nym: "подключение через Nym…"
+      fresh_key_blurb: "Платёжный ключ, не связанный с seed-фразой — меняйте его в любой момент, не трогая средства."
+      clean_slate_blurb: "Хотите начать с чистого листа? Подставьте совершенно новый ключ в любой момент — новый вы не связан со старым. Тот же кошелёк, новое лицо."
+      pick_username: "Выберите имя — необязательно"
+      username_blurb: "Друзья платят на ваше имя, а не на длинный ключ. Необязательно — можно занять в любой момент."
+      username_field_hint: "yourname"
+      working: "Обработка…"
+      claim_username: "Занять имя"
+      available_when_connected: "Доступно после подключения mixnet — или пропустите и займите позже."
+      youre: "Вы %{name}"
+      claimed_title: "%{name} теперь ваше"
+      claimed_blurb: "Друзья теперь могут платить вам по имени. Всё готово — откройте кошелёк."
+      open_wallet: "Открыть кошелёк"
+      skip_for_now: "Пропустить пока"
+      import_existing: "Уже есть личность Goblin? Импортируйте её"
+      import_title: "Импорт личности"
+      import_blurb: "Вставьте свой nsec или выберите файл .backup, чтобы сохранить существующий ключ и имя вместо нового."
+    errors:
+      cant_open: "Не удалось открыть кошелёк: %{err}"
+      cant_create: "Не удалось создать кошелёк: %{err}"
+  send:
+    scan_to_request: "Сканируйте для запроса"
+    scan_to_pay: "Сканируйте для оплаты"
+    tab_scan: "Сканировать"
+    tab_my_code: "Мой код"
+    request_from: "Запросить у"
+    send_to: "Отправить"
+    search_hint: "handle, npub или имя"
+    suggested: "%{icon}  Рекомендуемые"
+    no_contacts: "Пока нет контактов. Найдите кого-то по их handle."
+    no_profile: "нет профиля"
+    tag_contact: "контакт"
+    tag_on_nostr: "в nostr"
+    searching_nostr: "Поиск в nostr…"
+    unverified_title: "Заплатить непроверенному ключу?"
+    unverified_body: "Для этого ключа не опубликован nostr-профиль — он может быть совсем новым, анонимным или с опечаткой. Дважды проверьте перед отправкой."
+    keep_looking: "Продолжить поиск"
+    pay_anyway: "Всё равно оплатить"
+    scan_not_recipient: "Этот QR — не получатель goblin; ожидался npub или handle"
+    scan_prompt: "Наведите на код goblin, чтобы активировать"
+    scan_to_pay_me: "Сканируйте, чтобы заплатить мне"
+    share_btn: "%{icon} Поделиться"
+    share_message: "Заплатите мне в Goblin — %{handle}\n%{link}\nnpub: %{npub}"
+    none_found: "Никого не найдено по %{label}"
+    enter_recipient: "Введите handle, npub или имя"
+    amount_title: "Сумма"
+    to_name: "Кому %{name}"
+    not_enough: "Недостаточно grin"
+    max: "Макс"
+    note_label: "Заметка"
+    note_hint: "Добавить заметку…"
+    add_note: "Добавить заметку"
+    edit_note: "Изменить заметку"
+    note_cancel: "Отмена"
+    note_save: "Сохранить"
+    review_btn: "Проверить"
+    confirm_request: "Подтвердить запрос"
+    review_title: "Проверка"
+    requesting_from: "Запрос у %{name}"
+    youre_sending: "Вы отправляете %{name}"
+    row_from: "От"
+    row_to: "Кому"
+    row_note: "Заметка"
+    row_they_pay: "Они платят"
+    row_they_pay_val: "Только если они одобрят"
+    row_delivery: "Доставка"
+    row_delivery_val: "Зашифровано NIP-44, через Nym"
+    row_network_fee: "Сетевая комиссия"
+    row_network_fee_val: "Списывается с вашего баланса"
+    row_privacy: "Приватность"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "Отправить запрос"
+    request_approve_hint: "Они получат запрос на одобрение"
+    hold_to_send: "Удерживайте для отправки"
+    lower_amount: "Вернуться и уменьшить сумму"
+    hold_confirm_hint: "Нажмите и удерживайте для подтверждения"
+    requesting: "Запрос…"
+    sending: "Отправка…"
+    they: "Они"
+    request_blocked: "%{who} не принимает запросы. Попросите их отправить вам grin вместо этого."
+    failed_request_title: "Не удалось запросить"
+    failed_send_title: "Не удалось отправить"
+    failed_request_body: "Не удалось доставить запрос. Попросите их отправить вам grin вместо этого."
+    failed_send_body: "Платёж не доставлен. Ваш grin в безопасности — попробуйте снова."
+    try_again_btn: "Попробовать снова"
+    close_btn: "Закрыть"
+    success:
+      requested: "Запрошено"
+      sent: "Отправлено"
+      from: "от"
+      to: "кому"
+      subtitle: "%{dir} %{who} · только что"
+      done_btn: "Готово"
+      receipt_btn: "Квитанция"

locales/tr.yml

@@ -44,7 +44,7 @@ wallets:
   await_fin_amount: Tamamlanma bekleniyor
   locked_amount: Kilitli
   txs_empty: 'Koinleri al/gonder icin ekranin altinda bulunan   %{receive} / %{send} sekmeleri, cuzdan ayarlar icin %{settings} sekmesini kullanin.'
-  title: Cuzdanlar
+  title: Goblin
   create_desc: Yeni cuzdan olustur veya var olan bakiyeli cuzdani kurtarma kelimelerinizle canlandirin.
   add: Cuzdan ekle
   name: 'Ad:'
@@ -355,4 +355,468 @@ keyboard:
   m: m
   m1: ','
   m2: .
-  m3: /
+  m3: /
+goblin:
+  home:
+    anonymous: "Anonim"
+    connected_nym: "Nym üzerinden bağlı"
+    nym_ready: "Nym hazır · relaylar…"
+    connecting_nym: "Nym'e bağlanılıyor…"
+    cant_reach_node: "Düğüme ulaşılamıyor"
+    node_synced: "Düğüm eşitlendi"
+    syncing: "Eşitleniyor…"
+    balance_updating: "Bakiye güncelleniyor…"
+    listening: "Ödemeler bekleniyor"
+    block: "Blok %{height}"
+    waiting_for_chain: "Zincir bekleniyor…"
+    nav_wallet: "Cüzdan"
+    nav_pay: "Öde"
+    nav_activity: "Etkinlik"
+    nav_receive: "Al"
+    nav_settings: "Ayarlar"
+    activity: "Etkinlik"
+    empty_title: "Henüz etkinlik yok"
+    empty_sub: "Başlamak için grin gönder ya da al."
+    recent: "Son işlemler"
+    scan_to_pay: "Ödemek için tara"
+    type_amount: "Bir tutar gir"
+    request: "İste"
+    pay: "Öde"
+    enter_amount: "Ödemek ya da istemek için bir tutar gir"
+  activity:
+    canceled: "iptal edildi"
+    pending: "beklemede"
+    earlier: "Daha önce"
+    today: "Bugün"
+    yesterday: "Dün"
+    title: "Etkinlik"
+    requests: "İstekler"
+    empty_title: "Henüz etkinlik yok"
+    empty_sub: "Ödemelerin burada görünecek."
+    pending_header: "Beklemede"
+  receipt:
+    title: "Makbuz"
+    not_found: "İşlem bulunamadı"
+    for_note: "%{note} için"
+    details: "İşlem ayrıntıları"
+    canceled: "İptal edildi"
+    expired: "Süresi doldu"
+    funds_returned: "Para iade edildi"
+    complete: "Tamamlandı"
+    payment_received: "Ödeme alındı"
+    payment_sent: "Ödeme başarıyla gönderildi"
+    pending: "Beklemede"
+    confs: "%{c}/%{r} onay"
+    waiting_to_confirm: "Onay bekleniyor"
+    paying: "Ödeniyor…"
+    you: "Sen"
+    to: "Alıcı"
+    from: "Gönderen"
+    nostr: "nostr"
+    fee_none: "Yok"
+    network_fee: "Ağ ücreti"
+    privacy: "Gizlilik"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "İşlem"
+    cancel_request: "İsteği iptal et"
+    cancel_send: "Ödemeyi iptal et"
+    cancel_send_confirm: "İptal için tekrar dokun — hâlâ alabilir"
+    cancel_send_done: "Ödeme iptal edildi — paranız yeniden kullanılabilir"
+    cancel_send_too_late: "Bu ödeme zaten geçti ve iptal edilemez"
+    waiting_to_receive: "%{name} alana kadar bekleniyor…"
+  request:
+    title: "%{name} istiyor"
+    approve: "Onayla"
+    decline: "Reddet"
+    review_title: "İsteği incele"
+    hold_to_accept: "Kabul için basılı tut"
+    hold_accept_hint: "Bu isteği ödemek için basılı tutun"
+  receive:
+    title: "Al"
+    requesting: "%{amt}%{tsu} isteniyor — ödeme almak için paylaş"
+    clear_request: "İsteği temizle"
+    share_handle: "Ödeme almak için kullanıcı adını paylaş"
+    share_npub: "Ödeme almak için npub'ını paylaş"
+    copied: "Kopyalandı"
+    copy_nostr_id: "nostr kimliğini kopyala"
+    copy_address: "Adresi kopyala"
+    copy_npub: "npub kopyala"
+    share_message: "Goblin'de bana öde (goblin.st) — %{npub}"
+    privacy_note: "Kullanıcı adın herkese açıktır. Ödeme içeriği ağ üzerinde şifreli kalır."
+    privacy_note_npub: "npub'ın herkese açıktır. Ödeme içeriği ağ üzerinde şifreli kalır."
+  profile:
+    title: "Profil"
+    activity: "Etkinlik"
+    no_activity: "Henüz onlarla etkinlik yok."
+    unblock: "Engeli kaldır"
+    block: "Engelle"
+    blocked_blurb: "Engellendi — ödemeleri ve istekleri reddediliyor."
+    block_blurb: "Engellemek, gelen ödeme ve isteklerini düşürür."
+  settings:
+    title: "Ayarlar"
+    connected_nostr: "nostr'a bağlı"
+    connecting_relays: "Relaylara bağlanılıyor…"
+    identity: "Kimlik"
+    copy_npub: "npub kopyala (genel)"
+    rotate_key: "nostr anahtarını değiştir"
+    import_identity: "Kimlik içe aktar (.backup / nsec)"
+    backup_note: "Cihaz mı değiştiriyorsun? İKİSİNİ de yedekle: seed ifaden (bakiye) ve kimlik .backup dosyan (ad + anahtar)."
+    wallet: "Cüzdan"
+    display_unit: "Görüntüleme birimi"
+    relays: "Relaylar"
+    nostr_relays: "Nostr Relayları"
+    node: "Düğüm"
+    integrated_node: "Tümleşik düğüm ayarları"
+    node_advanced: "Gelişmiş"
+    slatepacks: "Slatepackler"
+    slatepacks_value: "Manuel işlem"
+    lock_wallet: "Cüzdanı kilitle"
+    switch_wallet: "Cüzdan değiştir"
+    advanced: "Gelişmiş"
+    privacy: "Gizlilik"
+    mixnet_routing: "Mixnet yönlendirme"
+    messages_lookups: "Mesajlar ve aramalar"
+    auto_accept: "Otomatik kabul"
+    pairing: "Fiyat para birimi"
+    accept_anyone: "Herkes"
+    accept_contacts: "Yalnızca kişiler"
+    accept_ask: "Her zaman sor"
+    requests: "İstekler"
+    incoming_requests: "Gelen istekler"
+    incoming_requests_sub: "Başkalarının senden para istemesine izin ver"
+    appearance: "Görünüm"
+    theme: "Tema"
+    theme_light: "Açık"
+    theme_dark: "Koyu"
+    theme_yellow: "Sarı"
+    archive: "Arşiv"
+    export_archive: "Arşivi dışa aktar"
+    wipe_history: "Ödeme geçmişini sil"
+    wipe_history_confirm: "Silmek için tekrar dokun — geri alınamaz"
+    about: "Hakkında"
+    goblin: "Goblin"
+    build: "Sürüm %{build}"
+    network: "Ağ"
+    network_value: "MW + Nym mixnet + nostr"
+    third_party: "Üçüncü taraf"
+    grim: "GRIM (üst kaynak cüzdan)"
+    grin_node: "Grin düğümü"
+    sp_intro: "Gelişmiş — GRIM'in yaptığı gibi ham slatepackleri elle değiş tokuş et. Bunu yalnızca bir username üzerinden ödeme yapamadığında ya da alamadığında kullan."
+    sp_receive_group: "Al ya da tamamla"
+    sp_receive_blurb: "Birinin sana verdiği bir slatepack'i yapıştır. Goblin ödemeyi alır, faturayı öder ya da tamamlayıp zincire gönderir."
+    sp_process: "Slatepack işle"
+    sp_paste_first: "Önce bir slatepack yapıştır."
+    sp_reply_ready: "Yanıt hazır — gönderene geri yolla."
+    sp_finalizing: "Tamamlanıp zincire gönderiliyor…"
+    sp_create_group: "Ödeme oluştur"
+    sp_create_blurb: "Birine vermek için bir slatepack oluştur. Onlar alır, yanıtı geri gönderir, sen de yukarıda tamamlarsın."
+    sp_amount_hint: "Grin cinsinden tutar"
+    sp_addr_hint: "Alıcı adresi (isteğe bağlı)"
+    sp_create: "Slatepack oluştur"
+    sp_ready: "Slatepack hazır — alıcıya ver."
+    sp_amount_gt_zero: "Sıfırdan büyük bir tutar gir."
+    sp_to_send: "Gönderilecek slatepack"
+    sp_copy: "Slatepack kopyala"
+    rotate_line1: "• Tamamen yeni RASTGELE bir anahtar alırsın; eski npub artık almaz. Aralarında türetme zinciri yoktur."
+    rotate_line2: "• Yeni anahtar tohumundan kurtarılamaz — anahtarı değiştirdikten hemen sonra yeni nsec'i yedekle."
+    rotate_line3: "• Kullanıcı adın SERBEST BIRAKILIR — hemen ardından aynı adı ya da yeni bir ad al (serbest kaldığında başkası da kapabilir)."
+    rotate_line4: "• Eski anahtara hâlâ yoldaki ödemeler KESİNTİYE uğrar — önce bekleyen ödemelerin bitmesini bekle."
+    rotate_line5: "• npub'unu doğrudan kaydeden kişiler seni yeniden bulmalı — yeni npub'unu ya da yeniden aldığın username'i paylaş."
+    cancel: "İptal"
+    continue: "Devam"
+    final_confirmation: "Son onay"
+    rotate_confirm_blurb: "Bu işlem uygulamadan geri alınamaz. Değiştirmek için RESET yaz ve cüzdan parolanı gir."
+    type_reset: "RESET yaz"
+    wallet_password: "Cüzdan parolası"
+    rotate_key_btn: "Anahtarı değiştir"
+    rotating_key: "Anahtar değiştiriliyor…"
+    key_rotated: "Anahtar değiştirildi"
+    new_npub: "Yeni npub: %{npub}"
+    backup_new_key: "YENİ gizli anahtarı şimdi yedekle — tohumun onu kurtaramaz."
+    copy_new_nsec: "Yeni nsec yedeğini kopyala"
+    done: "Bitti"
+    rotation_failed: "Değiştirme başarısız"
+    close: "Kapat"
+    import_identity_title: "Kimlik içe aktar"
+    import_blurb: "Bu cüzdanın nostr kimliğini değiştirir — bir GOBLIN .backup dosyası seç ya da nsec yapıştır. Yedek ayrıca kullanıcı adını ve geçmişini geri yükler. Hâlâ gerekiyorsa önce mevcut anahtarı yedekle."
+    import_nsec_hint: "nsec1… veya yapıştırılan yedek"
+    backup_password_hint: "Yedek parolası (yalnızca başka yerde dışa aktarıldıysa)"
+    import_btn: "İçe aktar"
+    importing: "İçe aktarılıyor…"
+    identity_replaced: "Kimlik değiştirildi"
+    now_using: "Şu an kullanılan: %{npub}"
+    import_failed: "İçe aktarma başarısız"
+    name_authority: "İsim otoritesi"
+    name_authority_title: "İsim otoritesini değiştir"
+    name_authority_blurb: "Adları kaydeden ve doğrulayan sunucu. Başka bir örneğe yönlendirerek oradaki adları kullan ve öde."
+    name_authority_invalid: "Tam bir URL gir (https://…)."
+    reset: "Sıfırla"
+    save: "Kaydet"
+    backup_file: "Dosyaya yedekle"
+    choose_backup_file: "Bir .backup dosyası seç"
+    backup_read_failed: "Dosya okunamadı."
+    backup_saved: "Yedek kaydedildi"
+    backup_saved_sub: ".backup dosyasını güvende tut — hem ona hem de parolana sahip olan kimliğini geri yükleyebilir."
+    backup_file_title: "Kimliği yedekle"
+    backup_file_blurb: "Kullanıcı adın ve anahtarınla tek bir şifreli .backup dosyası oluşturur. Mühürlemek için cüzdan parolanı gir."
+    backup_write_failed: "Dosya kaydedilemedi."
+    create_backup: "Yedek oluştur"
+    registered: "%{name} kaydedildi"
+    released_msg: "Bırakıldı — ad artık alınabilir"
+    release_confirm: "%{name} bırakılsın mı?"
+    release_blurb: "Serbest kalır kalmaz herkes alabilir — döndüğün bir sonraki anahtar dahil. 10 dakika boyunca başka bir kullanıcı adı kaydedemezsin."
+    releasing: "Bırakılıyor…"
+    keep_it: "Vazgeç"
+    release_it: "Bırak"
+    username: "Kullanıcı adı"
+    username_note: "Adınız olarak gösterilir. goblin.st'de herkese açık. Ödemeler şifreli kalır."
+    release_username: "Kullanıcı adını bırak"
+    pick_username: "Bir kullanıcı adı seç — isteğe bağlı"
+    working: "Çalışıyor…"
+    claim: "Al"
+    err_just_taken: "O kullanıcı adı az önce alındı"
+    err_cooldown: "Yakın zamanda bir kullanıcı adı bıraktın — 10 dakika içinde yenisini kaydedebilirsin."
+    err_unreachable: "goblin.st'ye ulaşılamadı — bağlantı sorunu. Tekrar dene."
+    err_release: "Bırakılamadı: %{err}"
+    avail_available: "Müsait!"
+    avail_taken: "Alınmış"
+    avail_reserved: "Ayrılmış"
+    avail_invalid: "Adlar 3–20 karakter: a–z, 0–9, _ ya da -"
+    avail_quarantined: "Müsait değil"
+    avail_unknown: "Kontrol edilemedi — bağlantı sorunu. Tekrar dene."
+  advanced:
+    title: "Gelişmiş"
+    intro: "GRIM'den düşük seviyeli cüzdan araçları. Bunlara normalde ihtiyacın olmaz."
+    own_node_desc: "Herkese açık bir düğüme güvenmek yerine bu cihazda tam bir Grin düğümü senkronize edin."
+    own_node_active: "Kendi düğümünüz çalışıyor"
+    repair: "Cüzdanı onar"
+    repair_desc: "Zinciri yeniden tara ve eksik çıktıları geri yükle. Bu biraz zaman alabilir."
+    repair_unavailable: "Önce senkronize bir düğüm bağlantısı gerekir."
+    repairing: "Onarılıyor… %{pct}%"
+    restore: "Cüzdanı geri yükle"
+    restore_desc: "Yerel verileri sil ve tohumundan yeniden oluştur. Onarım işe yaramadıysa bunu kullan — sonra cüzdanı yeniden açarsın."
+    restore_confirm: "Geri yüklemek için tekrar dokun"
+    show_phrase: "Kurtarma ifadesi"
+    phrase_desc: "24 grin tohum kelimen — fonları kurtarmanın tek yolu. Onları çevrimdışı ve gizli tut."
+    reveal: "İfadeyi göster"
+    hide: "Gizle"
+    password: "Cüzdan parolası"
+    wrong_password: "Yanlış parola."
+    delete: "Cüzdanı sil"
+    delete_desc: "Bu cüzdanı bu cihazdan kalıcı olarak kaldır. Tohumun olmadan fonlar kurtarılamaz."
+    delete_confirm: "Silmek için tekrar dokun"
+    manage_node: "Düğüm bağlantısını yönet"
+    repair_confirm: "Evet, şimdi onar"
+    repair_confirm_note: "Onarım zinciri yeniden tarar ve birkaç dakika sürebilir."
+    restore_confirm_note: "Bu, yerel verileri siler ve seed'inizden yeniden oluşturur — birkaç dakika sürebilir."
+    nostr_key: "Nostr anahtarı"
+    nostr_key_desc: "nsec'iniz, Nostr kimliğinizin gizli anahtarı. magick.market gibi Nostr uygulamalarında oturum açmak için kopyalayın veya QR kodunu gösterin. Ona sahip olan herkes kimliğinizi kontrol eder, gizli tutun."
+    reveal_nsec: "Anahtarı göster"
+    copy_nsec: "nsec'i kopyala"
+    show_qr: "QR göster"
+    hide_qr: "QR gizle"
+  privacy:
+    title: "Ağ gizliliği"
+    intro: "Goblin özel trafiğini Nym mixnet üzerinden gönderir — kimin kiminle konuştuğunu gizleyen beş atlamalı bir ağ, böylece bir relay bir ödemeyi sana bağlayamaz."
+    payments: "Ödemeler"
+    payments_blurb: "Slatepack taşıyan her nostr mesajı."
+    usernames: "usernamelar"
+    usernames_blurb: "goblin.st'ye ve oradan NIP-05 ad aramaları."
+    price_avatars: "Fiyat"
+    price_avatars_blurb: "Tutarların yanında gösterilen anlık kur."
+    over_mixnet: "Mixnet üzerinden"
+    direct_connection: "Doğrudan bağlantı"
+    grin_node: "Grin düğümü"
+    grin_node_blurb: "Blok eşitleme ve işlemini ağa yayma. Bu, herkes için aynı olan genel zincir verisidir ve kimliğinle ilişkilendirilmez."
+  pairing:
+    title: "Eşleştirme"
+    intro: "Bakiyenin ve tutarların neye göre gösterildiği."
+    pair_with: "Eşleştir"
+    rates_note: "Kurlar yalnızca bir eşleştirme açıkken Nym mixnet üzerinden alınır — kapalıysa cihazından hiçbir kur isteği çıkmaz."
+  relays:
+    title: "Relaylar"
+    intro: "Ödeme mesajları aşağıdaki her relay'e yansıtılır; almak için ulaşılabilir tek bir relay yeterlidir."
+    your_relays: "Relaylarn"
+    add_relay: "Relay ekle"
+    add_relay_btn: "Relay ekle"
+    save_reconnect: "Kaydet ve yeniden bağlan"
+    none: "yok"
+    count: "%{n} relay"
+  node:
+    title: "Düğüm"
+    connection: "Bağlantı"
+    integrated: "Tümleşik düğüm"
+    applies_after: "Cüzdan kilitlenip yeniden açıldıktan sonra geçerli olur."
+    add_external: "Harici düğüm ekle"
+    api_secret_hint: "API gizli anahtarı (isteğe bağlı)"
+    add_node: "Düğüm ekle"
+    integrated_host: "tümleşik düğüm"
+    summary_syncing: "%{conn} · eşitleniyor"
+    summary_block: "Blok %{height} · %{conn}"
+  nips:
+    title: "nostr ve NIPler"
+    intro1: "Goblin nostr konuşur — basit relay sunucuları üzerinden geçen imzalı mesajların açık bir protokolü. Cüzdanın kendi nostr kimliğini taşır: bağımsız rastgele bir anahtar, paran ve tohumundan kasıtlı olarak ayrı tutulur. Her ödeme, slatepack içinde olacak şekilde, kimlikler arasında uçtan uca şifreli bir doğrudan mesaj olarak gider."
+    intro2: "goblin.st, Goblin'in ad servisidir: bir kullanıcı adı almak orada bir ad → anahtar eşlemesi yayımlar (NIP-05), böylece insanlar uzun bir npub yerine you'ya ödeme yapabilir. Kullanıcı adı herkese açıktır; ödeme içeriği asla değil. NIPler protokolün yapı taşlarıdır — özelliği okumak için birine dokun."
+    n05_title: "Adlar"
+    n05_blurb: "username@goblin.st'yi anahtarına eşler, böylece kullanıcı adları adres gibi çalışır."
+    n17_title: "Özel mesajlar"
+    n17_blurb: "Her ödemenin içinde gittiği şifreli DM zarfı."
+    n44_title: "Şifreleme"
+    n44_blurb: "Bu mesajların içinde kullanılan kimlik doğrulamalı şifreleme."
+    n49_title: "Anahtar şifreleme"
+    n49_blurb: "Gizli anahtarın parolanla kilitli olarak nasıl depolandığı."
+    n59_title: "Hediye paketi"
+    n59_blurb: "Mesajları sarar, böylece relaylar kimin kiminle konuştuğunu göremez."
+    n98_title: "HTTP kimlik doğrulama"
+    n98_blurb: "goblin.st'ye gönderilen kullanıcı adı kayıt isteğini imzalar."
+  onboarding:
+    intro:
+      private_money_head: "Özel para"
+      private_money_body: "Goblin, grin için bir cüzdan — zincirinde tutar ya da adres bulunmayan dijital nakit."
+      send_like_message_head: "Mesaj gibi gönder"
+      send_like_message_body: "Bir username ya da npub'a öde, nostr ve Nym mixnet üzerinden uçtan uca şifreli bir mesaj olarak ulaşır — aradaki hiç kimse tutarı ya da kimlerin dahil olduğunu göremez."
+      yours_alone_head: "Yalnızca senin"
+      yours_alone_body: "Anahtarlar, adlar ve geçmiş bu cihazda yaşar. GRIM cüzdanı üzerine kuruludur."
+      get_started: "Başla"
+      footnote: "Yaklaşık bir dakika sürer. Her şeyi sonradan değiştirebilirsin."
+    node:
+      kicker: "ADIM 1 / 3 · AĞ"
+      title: "Goblin zinciri nasıl\nizlesin?"
+      own_title: "Kendi düğümümü çalıştır"
+      own_badge: "Özel"
+      own_body: "Kimseye güvenmez — cüzdanın zinciri kendisi kontrol eder. Sen kurulumu bitirirken arka planda eşitlenir."
+      connect_title: "Bir düğüme bağlan"
+      connect_badge: "Anında"
+      connect_body: "Eşitleme beklemesi yok. Seçtiğin düğüm cüzdanının sorgularını görebilir."
+      changeable: "Ayarlar → Düğüm'den istediğin zaman değiştirilebilir."
+      continue: "Devam"
+      url_invalid: "Düğüm URL'si http:// ya da https:// ile başlamalı"
+    wallet:
+      kicker: "ADIM 2 / 3 · CÜZDAN"
+      title: "Cüzdanını kur"
+      create_new: "Yeni oluştur"
+      restore_from_seed: "Tohumdan geri yükle"
+      name_hint: "Cüzdan adı"
+      password_hint: "Parola"
+      repeat_password_hint: "Parolayı tekrarla"
+      restore_hint: "Tohum kelimelerini hazır tut — onları sonra gireceksin."
+      create_hint: "Sırada yazman için 24 tohum kelimesi var. Onlar paradır — onları elinde tutan paranı elinde tutar."
+      continue: "Devam"
+      passwords_no_match: "Parolalar eşleşmiyor"
+    words:
+      kicker: "ADIM 2 / 3 · CÜZDAN"
+      title_restore: "Tohum kelimelerini gir"
+      title_create: "Bu kelimeleri yaz"
+      write_down_hint: "Kâğıda, sırayla. Bu kelimelere sahip olan paranı alabilir; onlar olmadan kaybolan bir cihaz kaybolan para demektir."
+      paste: "Yapıştır"
+      scan_qr: "QR tara"
+      copy_clipboard: "Panoya kopyala (bundan kaçın)"
+      restore_wallet: "Cüzdanı geri yükle"
+      wrote_them_down: "Onları yazdım"
+      fill_every_word: "Her kelimeyi doldur — düzenlemek için bir kelimeye dokun ya da ifadeyi yapıştır."
+    confirm:
+      kicker: "ADIM 2 / 3 · CÜZDAN"
+      title: "Şimdi kanıtla"
+      enter_hint: "Az önce yazdığın kelimeleri gir. Yazmak için bir kelimeye dokun."
+      paste: "Yapıştır"
+      create_wallet: "Cüzdan oluştur"
+      keep_going: "Devam et — her kelime, sırayla."
+    identity:
+      kicker: "ADIM 3 / 3 · KİMLİK"
+      title: "Ödeme kimliğin"
+      key_being_made: "anahtar oluşturuluyor…"
+      connected_nym: "Nym üzerinden bağlı"
+      connecting_nym: "Nym üzerinden bağlanılıyor…"
+      fresh_key_blurb: "Seed'inin parçası olmayan bir ödeme anahtarı — paranı hiç ellemeden istediğin an döndür."
+      clean_slate_blurb: "Temiz bir sayfa mı istiyorsun? İstediğin zaman yepyeni bir anahtar tak — yeni sen eskisine bağlı değil. Aynı cüzdan, yeni yüz."
+      pick_username: "Bir kullanıcı adı seç — isteğe bağlı"
+      username_blurb: "Arkadaşların uzun bir anahtar yerine adına öder. İsteğe bağlı — istediğin an al."
+      username_field_hint: "adınız"
+      working: "Çalışıyor…"
+      claim_username: "Kullanıcı adı al"
+      available_when_connected: "Mixnet bağlandığında müsait — ya da atla ve sonra al."
+      youre: "Sen %{name}'sin"
+      claimed_title: "%{name} artık senin"
+      claimed_blurb: "Arkadaşların artık sana adınla ödeme yapabilir. Her şey hazır — cüzdanını aç."
+      open_wallet: "Cüzdanımı aç"
+      skip_for_now: "Şimdilik atla"
+      import_existing: "Zaten bir Goblin kimliğin var mı? İçe aktar"
+      import_title: "Kimliğini içe aktar"
+      import_blurb: "Bu yeni anahtar yerine mevcut anahtarını ve kullanıcı adını korumak için nsec'ini yapıştır veya bir .backup dosyası seç."
+    errors:
+      cant_open: "Cüzdan açılamadı: %{err}"
+      cant_create: "Cüzdan oluşturulamadı: %{err}"
+  send:
+    scan_to_request: "İstemek için tara"
+    scan_to_pay: "Ödemek için tara"
+    tab_scan: "Tara"
+    tab_my_code: "Kodum"
+    request_from: "Şundan iste"
+    send_to: "Şuna gönder"
+    search_hint: "handle, npub ya da ad"
+    suggested: "%{icon}  Önerilen"
+    no_contacts: "Henüz kişi yok. Birini handle ile bul."
+    no_profile: "profil yok"
+    tag_contact: "kişi"
+    tag_on_nostr: "nostr'da"
+    searching_nostr: "nostr aranıyor…"
+    unverified_title: "Doğrulanmamış bir anahtara ödeme yapılsın mı?"
+    unverified_body: "Bu anahtar için yayımlanmış bir nostr profili yok — yepyeni, anonim ya da yanlış yazılmış olabilir. Göndermeden önce doğru olduğunu iki kez kontrol et."
+    keep_looking: "Aramaya devam et"
+    pay_anyway: "Yine de öde"
+    scan_not_recipient: "O QR bir goblin alıcısı değil — bir npub ya da handle bekleniyordu"
+    scan_prompt: "Etkinleştirmek için bir goblin kodunu görüntüye getir"
+    scan_to_pay_me: "Bana ödemek için tara"
+    share_btn: "%{icon} Paylaş"
+    share_message: "Goblin'de bana öde — %{handle}\n%{link}\nnpub: %{npub}"
+    none_found: "%{label} için kimse bulunamadı"
+    enter_recipient: "Bir handle, npub ya da ad gir"
+    amount_title: "Tutar"
+    to_name: "%{name} için"
+    not_enough: "Yeterli grin yok"
+    max: "Maks"
+    note_label: "Not"
+    note_hint: "Bir not ekle…"
+    add_note: "Not ekle"
+    edit_note: "Notu düzenle"
+    note_cancel: "İptal"
+    note_save: "Kaydet"
+    review_btn: "İncele"
+    confirm_request: "İsteği onayla"
+    review_title: "İncele"
+    requesting_from: "%{name} kişisinden isteniyor"
+    youre_sending: "%{name} kişisine gönderiyorsun"
+    row_from: "Gönderen"
+    row_to: "Alıcı"
+    row_note: "Not"
+    row_they_pay: "Onlar öder"
+    row_they_pay_val: "Yalnızca onaylarlarsa"
+    row_delivery: "Teslimat"
+    row_delivery_val: "NIP-44 şifreli, Nym üzerinden"
+    row_network_fee: "Ağ ücreti"
+    row_network_fee_val: "Bakiyenden düşülür"
+    row_privacy: "Gizlilik"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "İstek gönder"
+    request_approve_hint: "Onaylamaları için bir istek alacaklar"
+    hold_to_send: "Göndermek için basılı tut"
+    lower_amount: "Geri dön ve tutarı düşür"
+    hold_confirm_hint: "Onaylamak için basılı tut"
+    requesting: "İsteniyor…"
+    sending: "Gönderiliyor…"
+    they: "Onlar"
+    request_blocked: "%{who} istek kabul etmiyor. Bunun yerine sana grin göndermesini iste."
+    failed_request_title: "İstenemedi"
+    failed_send_title: "Gönderilemedi"
+    failed_request_body: "İsteği teslim edemedik. Bunun yerine sana grin göndermesini iste."
+    failed_send_body: "Ödeme teslim edilemedi. Grin'in güvende — tekrar dene."
+    try_again_btn: "Tekrar dene"
+    close_btn: "Kapat"
+    success:
+      requested: "İstendi"
+      sent: "Gönderildi"
+      from: "şuradan"
+      to: "şuraya"
+      subtitle: "%{dir} %{who} · az önce"
+      done_btn: "Bitti"
+      receipt_btn: "Makbuz"

locales/zh-CN.yml

@@ -44,7 +44,7 @@ wallets:
   await_fin_amount: 等待确定中
   locked_amount: 锁定帐户
   txs_empty: '手动接收资金或通过传输接收资金 %{message} or %{transport} 更改钱包设置, 请按屏幕底部的按钮 %{settings} 按钮.'
-  title: 钱包
+  title: Goblin
   create_desc: 创建或种子单词导入已有钱包.
   add: 添加钱包
   name: '用户名:'
@@ -355,4 +355,468 @@ keyboard:
   m: 一
   m1: ','
   m2: .
-  m3: /
+  m3: /
+goblin:
+  home:
+    anonymous: "匿名"
+    connected_nym: "已通过 Nym 连接"
+    nym_ready: "Nym 就绪 · 连接中继…"
+    connecting_nym: "正在连接 Nym…"
+    cant_reach_node: "无法连接节点"
+    node_synced: "节点已同步"
+    syncing: "同步中…"
+    balance_updating: "余额更新中…"
+    listening: "正在监听付款"
+    block: "区块 %{height}"
+    waiting_for_chain: "等待链数据…"
+    nav_wallet: "钱包"
+    nav_pay: "支付"
+    nav_activity: "动态"
+    nav_receive: "收款"
+    nav_settings: "设置"
+    activity: "动态"
+    empty_title: "暂无动态"
+    empty_sub: "收发 grin 即可开始。"
+    recent: "最近"
+    scan_to_pay: "扫码支付"
+    type_amount: "输入金额"
+    request: "请求"
+    pay: "支付"
+    enter_amount: "输入要支付或请求的金额"
+  activity:
+    canceled: "已取消"
+    pending: "待处理"
+    earlier: "更早"
+    today: "今天"
+    yesterday: "昨天"
+    title: "动态"
+    requests: "请求"
+    empty_title: "暂无动态"
+    empty_sub: "你的付款将显示在这里。"
+    pending_header: "待处理"
+  receipt:
+    title: "收据"
+    not_found: "未找到交易"
+    for_note: "用于 %{note}"
+    details: "交易详情"
+    canceled: "已取消"
+    expired: "已过期"
+    funds_returned: "资金已退回"
+    complete: "已完成"
+    payment_received: "已收到付款"
+    payment_sent: "付款发送成功"
+    pending: "待处理"
+    confs: "%{c}/%{r} 次确认"
+    waiting_to_confirm: "等待确认"
+    paying: "支付中…"
+    you: "你"
+    to: "收款方"
+    from: "付款方"
+    nostr: "nostr"
+    fee_none: "无"
+    network_fee: "网络费用"
+    privacy: "隐私"
+    privacy_value: "Mimblewimble + Nym"
+    transaction: "交易"
+    cancel_request: "取消请求"
+    cancel_send: "取消付款"
+    cancel_send_confirm: "再次点按以取消 — 对方可能仍会收到"
+    cancel_send_done: "付款已取消 — 你的资金已重新可用"
+    cancel_send_too_late: "这笔付款已经完成，无法取消"
+    waiting_to_receive: "等待 %{name} 接收…"
+  request:
+    title: "%{name} 发起请求"
+    approve: "同意"
+    decline: "拒绝"
+    review_title: "审核请求"
+    hold_to_accept: "按住以接受"
+    hold_accept_hint: "按住以支付此请求"
+  receive:
+    title: "收款"
+    requesting: "正在请求 %{amt}%{tsu} — 分享以收款"
+    clear_request: "清除请求"
+    share_handle: "分享你的用户名以收款"
+    share_npub: "分享你的 npub 以收款"
+    copied: "已复制"
+    copy_nostr_id: "复制 nostr ID"
+    copy_address: "复制地址"
+    copy_npub: "复制 npub"
+    share_message: "在 Goblin 上向我付款 (goblin.st) — %{npub}"
+    privacy_note: "你的用户名是公开的。付款内容在网络中保持加密。"
+    privacy_note_npub: "你的 npub 是公开的。付款内容在网络中保持加密。"
+  profile:
+    title: "资料"
+    activity: "动态"
+    no_activity: "尚无往来记录。"
+    unblock: "取消屏蔽"
+    block: "屏蔽"
+    blocked_blurb: "已屏蔽 — 其付款和请求会被丢弃。"
+    block_blurb: "屏蔽后将丢弃对方发来的付款和请求。"
+  settings:
+    title: "设置"
+    connected_nostr: "已连接 nostr"
+    connecting_relays: "正在连接中继…"
+    identity: "身份"
+    copy_npub: "复制 npub（公开）"
+    rotate_key: "轮换 nostr 密钥"
+    import_identity: "导入身份（.backup / nsec）"
+    backup_note: "更换设备？两者都要备份：你的助记词（资金）和身份 .backup 文件（名称 + 密钥）。"
+    wallet: "钱包"
+    display_unit: "显示单位"
+    relays: "中继"
+    nostr_relays: "Nostr 中继"
+    node: "节点"
+    integrated_node: "集成节点设置"
+    node_advanced: "高级"
+    slatepacks: "Slatepack"
+    slatepacks_value: "手动交易"
+    lock_wallet: "锁定钱包"
+    switch_wallet: "切换钱包"
+    advanced: "高级"
+    privacy: "隐私"
+    mixnet_routing: "mixnet 路由"
+    messages_lookups: "消息和查询"
+    auto_accept: "自动接受"
+    pairing: "价格货币"
+    accept_anyone: "任何人"
+    accept_contacts: "仅联系人"
+    accept_ask: "每次询问"
+    requests: "请求"
+    incoming_requests: "收到的请求"
+    incoming_requests_sub: "允许他人向你请求付款"
+    appearance: "外观"
+    theme: "主题"
+    theme_light: "浅色"
+    theme_dark: "深色"
+    theme_yellow: "黄色"
+    archive: "存档"
+    export_archive: "导出存档"
+    wipe_history: "清除付款记录"
+    wipe_history_confirm: "再次点按以清除 — 无法撤销"
+    about: "关于"
+    goblin: "Goblin"
+    build: "构建 %{build}"
+    network: "网络"
+    network_value: "MW + Nym mixnet + nostr"
+    third_party: "第三方"
+    grim: "GRIM（上游钱包）"
+    grin_node: "Grin 节点"
+    sp_intro: "高级功能 — 像 GRIM 那样手动交换原始 slatepack。仅在无法通过 username 收付款时使用。"
+    sp_receive_group: "接收或确认"
+    sp_receive_blurb: "粘贴别人给你的 slatepack。Goblin 会接收付款、支付账单，或确认并广播到链上。"
+    sp_process: "处理 slatepack"
+    sp_paste_first: "请先粘贴 slatepack。"
+    sp_reply_ready: "回复已就绪 — 发回给发送方。"
+    sp_finalizing: "正在确认并广播到链上…"
+    sp_create_group: "创建付款"
+    sp_create_blurb: "生成一个 slatepack 交给他人。对方接收后将回复发回，你在上方确认即可。"
+    sp_amount_hint: "金额（grin）"
+    sp_addr_hint: "收款地址（可选）"
+    sp_create: "创建 slatepack"
+    sp_ready: "slatepack 已就绪 — 交给收款方。"
+    sp_amount_gt_zero: "请输入大于零的金额。"
+    sp_to_send: "待发送的 slatepack"
+    sp_copy: "复制 slatepack"
+    rotate_line1: "• 你会得到一个全新的随机密钥；旧 npub 将停止接收。两者之间没有任何派生关系。"
+    rotate_line2: "• 新密钥无法从助记词恢复 — 轮换后请立即备份新的 nsec。"
+    rotate_line3: "• 你的用户名将被释放——请立即认领相同或新的名称（一旦释放，他人也可抢注）。"
+    rotate_line4: "• 正在发往旧密钥的付款将受影响 — 请先等待待处理付款完成。"
+    rotate_line5: "• 直接保存了你 npub 的联系人需要重新查找你 — 分享你的新 npub 或重新注册的 username。"
+    cancel: "取消"
+    continue: "继续"
+    final_confirmation: "最终确认"
+    rotate_confirm_blurb: "此操作在应用内无法撤销。输入 RESET 并输入钱包密码以进行轮换。"
+    type_reset: "输入 RESET"
+    wallet_password: "钱包密码"
+    rotate_key_btn: "轮换密钥"
+    rotating_key: "正在轮换密钥…"
+    key_rotated: "密钥已轮换"
+    new_npub: "新 npub：%{npub}"
+    backup_new_key: "立即备份新私钥 — 助记词无法恢复它。"
+    copy_new_nsec: "复制新 nsec 备份"
+    done: "完成"
+    rotation_failed: "轮换失败"
+    close: "关闭"
+    import_identity_title: "导入身份"
+    import_blurb: "替换此钱包的 nostr 身份——选择一个 GOBLIN .backup 文件，或粘贴 nsec。备份也会恢复你的用户名和历史。如果仍需要当前密钥，请先备份。"
+    import_nsec_hint: "nsec1… 或粘贴的备份"
+    backup_password_hint: "备份密码（仅当在他处导出时需要）"
+    import_btn: "导入"
+    importing: "正在导入…"
+    identity_replaced: "身份已替换"
+    now_using: "当前使用：%{npub}"
+    import_failed: "导入失败"
+    name_authority: "名称授权方"
+    name_authority_title: "更改名称授权方"
+    name_authority_blurb: "注册和验证名称的服务器。指向另一个实例即可使用并支付那里托管的名称。"
+    name_authority_invalid: "请输入完整网址（https://…）。"
+    reset: "重置"
+    save: "保存"
+    backup_file: "备份到文件"
+    choose_backup_file: "选择 .backup 文件"
+    backup_read_failed: "无法读取该文件。"
+    backup_saved: "备份已保存"
+    backup_saved_sub: "妥善保管 .backup 文件——同时拥有它和你密码的人都能恢复你的身份。"
+    backup_file_title: "备份身份"
+    backup_file_blurb: "创建一个包含你的用户名和密钥的加密 .backup 文件。输入钱包密码以封存它。"
+    backup_write_failed: "无法保存文件。"
+    create_backup: "创建备份"
+    registered: "已注册 %{name}"
+    released_msg: "已释放 — 用户名可被抢注"
+    release_confirm: "释放 %{name}？"
+    release_blurb: "一旦释放即可被认领——任何人都可以，包括你接下来轮换到的密钥。10 分钟内你无法注册另一个用户名。"
+    releasing: "正在释放…"
+    keep_it: "保留"
+    release_it: "释放"
+    username: "用户名"
+    username_note: "显示为你的名字。在 goblin.st 上公开。付款保持加密。"
+    release_username: "释放用户名"
+    pick_username: "选择用户名 — 可选"
+    working: "处理中…"
+    claim: "注册"
+    err_just_taken: "该用户名刚被占用"
+    err_cooldown: "你刚释放了一个用户名 — 10 分钟内无法注册新用户名。"
+    err_unreachable: "无法连接 goblin.st — 连接中断。请重试。"
+    err_release: "无法释放：%{err}"
+    avail_available: "可用！"
+    avail_taken: "已被占用"
+    avail_reserved: "已保留"
+    avail_invalid: "用户名为 3–20 个字符：a–z、0–9、_ 或 -"
+    avail_quarantined: "不可用"
+    avail_unknown: "无法检查 — 连接中断。请重试。"
+  advanced:
+    title: "高级"
+    intro: "来自 GRIM 的底层钱包工具。通常你用不到这些。"
+    own_node_desc: "在本设备上同步完整的 Grin 节点，而不是信任公共节点。"
+    own_node_active: "正在运行你自己的节点"
+    repair: "修复钱包"
+    repair_desc: "重新扫描链并恢复任何缺失的输出。这可能需要一些时间。"
+    repair_unavailable: "需要先有已同步的节点连接。"
+    repairing: "修复中… %{pct}%"
+    restore: "恢复钱包"
+    restore_desc: "删除本地数据并从助记词重建。如果修复无效，请使用此功能 — 之后需重新打开钱包。"
+    restore_confirm: "再次点击以恢复"
+    show_phrase: "恢复助记词"
+    phrase_desc: "你的 24 个 grin 助记词 — 恢复资金的唯一方式。请离线且私密保存。"
+    reveal: "显示助记词"
+    hide: "隐藏"
+    password: "钱包密码"
+    wrong_password: "密码错误。"
+    delete: "删除钱包"
+    delete_desc: "从此设备永久移除该钱包。没有助记词，资金将无法找回。"
+    delete_confirm: "再次点击以删除"
+    manage_node: "管理节点连接"
+    repair_confirm: "是的，立即修复"
+    repair_confirm_note: "修复会重新扫描链，可能需要几分钟。"
+    restore_confirm_note: "这会清除本地数据并从助记词重建——可能需要几分钟。"
+    nostr_key: "Nostr 密钥"
+    nostr_key_desc: "您的 nsec，即 Nostr 身份的私钥。复制它或显示二维码，即可登录 magick.market 等 Nostr 应用。持有它的人即可控制您的身份，请妥善保管。"
+    reveal_nsec: "显示密钥"
+    copy_nsec: "复制 nsec"
+    show_qr: "显示二维码"
+    hide_qr: "隐藏二维码"
+  privacy:
+    title: "网络隐私"
+    intro: "Goblin 通过 Nym mixnet 发送其私密流量 — 这是一个五跳网络，可隐藏通信双方的身份，使中继无法将付款关联到你。"
+    payments: "付款"
+    payments_blurb: "每条携带 slatepack 的 nostr 消息。"
+    usernames: "用户名"
+    usernames_blurb: "往返 goblin.st 的 NIP-05 名称查询。"
+    price_avatars: "价格"
+    price_avatars_blurb: "金额旁显示的实时法币汇率。"
+    over_mixnet: "经由 mixnet"
+    direct_connection: "直接连接"
+    grin_node: "Grin 节点"
+    grin_node_blurb: "区块同步及向网络广播你的交易。这是公开的链上数据，对所有人都一样，且不与你的身份关联。"
+  pairing:
+    title: "配对"
+    intro: "你的余额和金额以何种货币显示。"
+    pair_with: "配对货币"
+    rates_note: "汇率仅在开启配对时通过 Nym mixnet 获取 — 关闭后不会有任何汇率请求离开你的设备。"
+  relays:
+    title: "中继"
+    intro: "付款消息会镜像到下方每个中继；只要有一个可达的中继即可收款。"
+    your_relays: "你的中继"
+    add_relay: "添加中继"
+    add_relay_btn: "添加中继"
+    save_reconnect: "保存并重新连接"
+    none: "无"
+    count: "%{n} 个中继"
+  node:
+    title: "节点"
+    connection: "连接"
+    integrated: "集成节点"
+    applies_after: "在钱包锁定并再次解锁后生效。"
+    add_external: "添加外部节点"
+    api_secret_hint: "API 密钥（可选）"
+    add_node: "添加节点"
+    integrated_host: "集成节点"
+    summary_syncing: "%{conn} · 同步中"
+    summary_block: "区块 %{height} · %{conn}"
+  nips:
+    title: "nostr 与 NIPs"
+    intro1: "Goblin 使用 nostr — 一种通过简单中继服务器传递签名消息的开放协议。你的钱包拥有自己的 nostr 身份：一个独立的随机密钥，刻意与你的资金和助记词保持独立。每笔付款都作为身份之间的端到端加密私信传输，slatepack 就包含在其中。"
+    intro2: "goblin.st 是 Goblin 的名称服务：注册用户名会在此发布名称 → 密钥的映射（NIP-05），让人们可以付款给 you 而不必使用冗长的 npub。用户名是公开的；付款内容则永不公开。NIPs 是该协议的构建模块 — 点击任意一项可阅读规范。"
+    n05_title: "名称"
+    n05_blurb: "将 username@goblin.st 映射到你的密钥，让用户名像地址一样使用。"
+    n17_title: "私密消息"
+    n17_blurb: "每笔付款传输所用的加密私信信封。"
+    n44_title: "加密"
+    n44_blurb: "这些消息内部使用的认证加密算法。"
+    n49_title: "密钥加密"
+    n49_blurb: "私钥静态存储的方式，由你的密码锁定。"
+    n59_title: "礼物包装"
+    n59_blurb: "包装消息，使中继无法看到通信双方是谁。"
+    n98_title: "HTTP 认证"
+    n98_blurb: "为向 goblin.st 注册用户名的请求签名。"
+  onboarding:
+    intro:
+      private_money_head: "私密货币"
+      private_money_body: "Goblin 是一个 grin 钱包 — 链上无金额、无地址的数字现金。"
+      send_like_message_head: "像发消息一样付款"
+      send_like_message_body: "向 username 或 npub 付款，款项会作为端到端加密消息通过 nostr 和 Nym mixnet 送达 — 中间任何人都看不到金额或参与者。"
+      yours_alone_head: "完全属于你"
+      yours_alone_body: "密钥、用户名和历史记录都存于本设备。基于 GRIM 钱包构建。"
+      get_started: "开始使用"
+      footnote: "约需一分钟。之后一切均可更改。"
+    node:
+      kicker: "步骤 1 / 3 · 网络"
+      title: "Goblin 该如何\n监视链？"
+      own_title: "运行我自己的节点"
+      own_badge: "私密"
+      own_body: "无需信任任何人 — 钱包自行验证链。完成设置时在后台同步。"
+      connect_title: "连接到节点"
+      connect_badge: "即时"
+      connect_body: "无需等待同步。你选择的节点可看到钱包的查询。"
+      changeable: "随时可在 设置 → 节点 中更改。"
+      continue: "继续"
+      url_invalid: "节点 URL 必须以 http:// 或 https:// 开头"
+    wallet:
+      kicker: "步骤 2 / 3 · 钱包"
+      title: "设置你的钱包"
+      create_new: "新建"
+      restore_from_seed: "从助记词恢复"
+      name_hint: "钱包名称"
+      password_hint: "密码"
+      repeat_password_hint: "重复密码"
+      restore_hint: "准备好你的助记词 — 下一步将输入。"
+      create_hint: "接下来你会得到 24 个助记词以供抄写。它们就是钱 — 谁持有它们，谁就掌握你的资金。"
+      continue: "继续"
+      passwords_no_match: "密码不一致"
+    words:
+      kicker: "步骤 2 / 3 · 钱包"
+      title_restore: "输入你的助记词"
+      title_create: "抄下这些词"
+      write_down_hint: "按顺序写在纸上。任何持有这些词的人都能取走你的资金；丢失这些词又丢失设备，资金将无法找回。"
+      paste: "粘贴"
+      scan_qr: "扫描二维码"
+      copy_clipboard: "复制到剪贴板（不建议）"
+      restore_wallet: "恢复钱包"
+      wrote_them_down: "我已抄好"
+      fill_every_word: "填写每个词 — 点击某个词进行编辑，或粘贴整个短语。"
+    confirm:
+      kicker: "步骤 2 / 3 · 钱包"
+      title: "现在来验证"
+      enter_hint: "输入你刚抄下的词。点击某个词进行输入。"
+      paste: "粘贴"
+      create_wallet: "创建钱包"
+      keep_going: "继续 — 每个词,按顺序。"
+    identity:
+      kicker: "步骤 3 / 3 · 身份"
+      title: "你的付款身份"
+      key_being_made: "正在生成密钥…"
+      connected_nym: "已通过 Nym 连接"
+      connecting_nym: "正在通过 Nym 连接…"
+      fresh_key_blurb: "一个不属于助记词的支付密钥——可随时轮换以保护隐私，且不影响你的资金。"
+      clean_slate_blurb: "想要全新开始？随时换上一个全新密钥 — 新的你与旧的毫无关联。同一个钱包,焕然一新。"
+      pick_username: "选择用户名 — 可选"
+      username_blurb: "朋友支付给你的名称，而不是一长串密钥。可选——随时认领。"
+      username_field_hint: "你的用户名"
+      working: "处理中…"
+      claim_username: "注册用户名"
+      available_when_connected: "mixnet 连接后可用 — 或跳过,稍后注册。"
+      youre: "你是 %{name}"
+      claimed_title: "%{name} 已归你所有"
+      claimed_blurb: "朋友现在可以用你的用户名向你付款。一切就绪——打开钱包吧。"
+      open_wallet: "打开我的钱包"
+      skip_for_now: "暂时跳过"
+      import_existing: "已有 Goblin 身份？导入它"
+      import_title: "导入你的身份"
+      import_blurb: "粘贴你的 nsec 或选择一个 .backup 文件，保留你现有的密钥和用户名，而不是这个新的。"
+    errors:
+      cant_open: "无法打开钱包：%{err}"
+      cant_create: "无法创建钱包：%{err}"
+  send:
+    scan_to_request: "扫码请求"
+    scan_to_pay: "扫码支付"
+    tab_scan: "扫描"
+    tab_my_code: "我的二维码"
+    request_from: "向谁请求"
+    send_to: "发送给"
+    search_hint: "handle、npub 或名称"
+    suggested: "%{icon}  建议"
+    no_contacts: "暂无联系人。通过 handle 查找某人。"
+    no_profile: "无资料"
+    tag_contact: "联系人"
+    tag_on_nostr: "在 nostr 上"
+    searching_nostr: "正在搜索 nostr…"
+    unverified_title: "向未验证的密钥付款？"
+    unverified_body: "此密钥未发布 nostr 资料 — 它可能是全新的、匿名的或输错的。发送前请仔细核对是否正确。"
+    keep_looking: "继续查找"
+    pay_anyway: "仍然付款"
+    scan_not_recipient: "该二维码不是 goblin 收款方 — 应为 npub 或 handle"
+    scan_prompt: "将 goblin 二维码对准取景框以激活"
+    scan_to_pay_me: "扫码向我付款"
+    share_btn: "%{icon} 分享"
+    share_message: "在 Goblin 上向我付款 — %{handle}\n%{link}\nnpub：%{npub}"
+    none_found: "未找到与 %{label} 匹配的人"
+    enter_recipient: "输入 handle、npub 或名称"
+    amount_title: "金额"
+    to_name: "发送给 %{name}"
+    not_enough: "你的 grin 余额不足"
+    max: "最大"
+    note_label: "备注"
+    note_hint: "添加备注…"
+    add_note: "添加备注"
+    edit_note: "编辑备注"
+    note_cancel: "取消"
+    note_save: "保存"
+    review_btn: "查看"
+    confirm_request: "确认请求"
+    review_title: "查看"
+    requesting_from: "向 %{name} 请求"
+    youre_sending: "你正在发送给 %{name}"
+    row_from: "付款方"
+    row_to: "收款方"
+    row_note: "备注"
+    row_they_pay: "对方支付"
+    row_they_pay_val: "仅当对方同意时"
+    row_delivery: "传输"
+    row_delivery_val: "NIP-44 加密,经由 Nym"
+    row_network_fee: "网络费用"
+    row_network_fee_val: "从你的余额中扣除"
+    row_privacy: "隐私"
+    row_privacy_val: "Mimblewimble + Nym"
+    send_request_btn: "发送请求"
+    request_approve_hint: "对方将收到一条待同意的请求"
+    hold_to_send: "长按发送"
+    lower_amount: "返回并降低金额"
+    hold_confirm_hint: "按住以确认"
+    requesting: "正在请求…"
+    sending: "正在发送…"
+    they: "对方"
+    request_blocked: "%{who} 不接受请求。请对方改为向你发送 grin。"
+    failed_request_title: "请求失败"
+    failed_send_title: "发送失败"
+    failed_request_body: "我们无法送达请求。请对方改为向你发送 grin。"
+    failed_send_body: "付款未送达。你的 grin 是安全的 — 请重试。"
+    try_again_btn: "重试"
+    close_btn: "关闭"
+    success:
+      requested: "已请求"
+      sent: "已发送"
+      from: "来自"
+      to: "发往"
+      subtitle: "%{dir} %{who} · 刚刚"
+      done_btn: "完成"
+      receipt_btn: "收据"

macos/Goblin.app/Contents/Info.plist

@@ -5,9 +5,9 @@
 	<key>CFBundleDevelopmentRegion</key>
 	<string>en</string>
 	<key>CFBundleDisplayName</key>
-	<string>Grim</string>
+	<string>Goblin</string>
 	<key>CFBundleExecutable</key>
-	<string>grim</string>
+	<string>goblin</string>
 	<key>CFBundleIconFile</key>
 	<string>AppIcon</string>
 	<key>CFBundleIconName</key>
@@ -17,7 +17,7 @@
 	<key>CFBundleInfoDictionaryVersion</key>
 	<string>6.0</string>
 	<key>CFBundleName</key>
-	<string>Grim</string>
+	<string>Goblin</string>
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
@@ -29,7 +29,7 @@
 	<key>CFBundleVersion</key>
 	<string>1</string>
 	<key>NSCameraUsageDescription</key>
-	<string>Grim needs an access to your camera to scan QR code.</string>
+	<string>Goblin needs an access to your camera to scan QR code.</string>
 	<key>CFBundleDocumentTypes</key>
 	<array>
 		<dict>

macos/Grim.app/Contents/_CodeSignature/CodeResources

@@ -1,128 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-	<key>files</key>
-	<dict>
-		<key>Resources/AppIcon.icns</key>
-		<data>
-		F0XBdu5xI+eXrj78HQf2Qr9SKio=
-		</data>
-	</dict>
-	<key>files2</key>
-	<dict>
-		<key>Resources/AppIcon.icns</key>
-		<dict>
-			<key>hash2</key>
-			<data>
-			ZjAn1LaNzSeTeUtKbWKWE7W2ELzhYyrHjKYOXUkQvcI=
-			</data>
-		</dict>
-	</dict>
-	<key>rules</key>
-	<dict>
-		<key>^Resources/</key>
-		<true/>
-		<key>^Resources/.*\.lproj/</key>
-		<dict>
-			<key>optional</key>
-			<true/>
-			<key>weight</key>
-			<real>1000</real>
-		</dict>
-		<key>^Resources/.*\.lproj/locversion.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>1100</real>
-		</dict>
-		<key>^Resources/Base\.lproj/</key>
-		<dict>
-			<key>weight</key>
-			<real>1010</real>
-		</dict>
-		<key>^version.plist$</key>
-		<true/>
-	</dict>
-	<key>rules2</key>
-	<dict>
-		<key>.*\.dSYM($|/)</key>
-		<dict>
-			<key>weight</key>
-			<real>11</real>
-		</dict>
-		<key>^(.*/)?\.DS_Store$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>2000</real>
-		</dict>
-		<key>^(Frameworks|SharedFrameworks|PlugIns|Plug-ins|XPCServices|Helpers|MacOS|Library/(Automator|Spotlight|LoginItems))/</key>
-		<dict>
-			<key>nested</key>
-			<true/>
-			<key>weight</key>
-			<real>10</real>
-		</dict>
-		<key>^.*</key>
-		<true/>
-		<key>^Info\.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^PkgInfo$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^Resources/</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^Resources/.*\.lproj/</key>
-		<dict>
-			<key>optional</key>
-			<true/>
-			<key>weight</key>
-			<real>1000</real>
-		</dict>
-		<key>^Resources/.*\.lproj/locversion.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>1100</real>
-		</dict>
-		<key>^Resources/Base\.lproj/</key>
-		<dict>
-			<key>weight</key>
-			<real>1010</real>
-		</dict>
-		<key>^[^/]+$</key>
-		<dict>
-			<key>nested</key>
-			<true/>
-			<key>weight</key>
-			<real>10</real>
-		</dict>
-		<key>^embedded\.provisionprofile$</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^version\.plist$</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-	</dict>
-</dict>
-</plist>

macos/build_release.sh

@@ -35,14 +35,14 @@ cargo zigbuild --release --target ${arch}
 
 rm -f .intentionally-empty-file.o
 
-yes | cp -rf target/${arch}/release/grim macos/Grim.app/Contents/MacOS
+yes | cp -rf target/${arch}/release/goblin macos/Goblin.app/Contents/MacOS
 
 # Sign .app resources on change:
 #rcodesign generate-self-signed-certificate
-#rcodesign sign --pem-file cert.pem macos/Grim.app
+#rcodesign sign --pem-file cert.pem macos/Goblin.app
 
 # Create release package
-FILE_NAME=grim-v$2-macos-$1.zip
+FILE_NAME=goblin-v$2-macos-$1.zip
 cd macos
-zip -r ${FILE_NAME} Grim.app
+zip -r ${FILE_NAME} Goblin.app
 mv ${FILE_NAME} ../target/${arch}/release

scripts/android.sh

@@ -24,6 +24,11 @@ BASEDIR=$(cd "$(dirname "$0")" && pwd)
 cd "${BASEDIR}" || exit 1
 cd ..
 
+# Prefer the GRIM-canonical toolchain: the custom NDK r29 (rebuilt LLVM, 16 KB
+# page-aligned) + Android SDK from code.gri.mw/DEV. scripts/toolchain.sh fetches
+# them and writes this env; falls back to whatever NDK/SDK is on the system.
+[ -f .toolchains/env.sh ] && source .toolchains/env.sh
+
 # Install platforms and tools
 rustup target add armv7-linux-androideabi
 rustup target add aarch64-linux-android
@@ -48,12 +53,15 @@ function build_lib() {
 
   sed -i -e 's/"cdylib","rlib"]/"rlib"]/g' Cargo.toml
   rm -f Cargo.toml-e
+
+  # The Nym mixnet is linked INTO libgrim.so (nym-sdk is a regular dependency),
+  # so there is no separate sidecar binary to cross-build or bundle into jniLibs.
 }
 
 ### Build application
 function build_apk() {
   flavor=$3
-  [[ flavor == "" ]] && flavor="local"
+  [[ -z "$flavor" ]] && flavor="local"
   cd android || exit 1
   ./gradlew clean
   # Build signed apk if keystore exists
@@ -72,12 +80,15 @@ function build_apk() {
   fi
 
   if [[ $1 == "" ]] && [ $success -eq 1 ]; then
-    # Launch application at all connected devices.
+    # Launch application at all connected devices. The installed application id
+    # (st.goblin.wallet) differs from the Java namespace (mw.gri.android), so
+    # derive it from build.gradle and launch the fully-qualified activity.
+    app_id=$(grep -m 1 -Po 'applicationId "\K[^"]*' app/build.gradle)
     for SERIAL in $(adb devices | grep -v List | cut -f 1);
       do
         adb -s "$SERIAL" install ${apk_path}
         sleep 1s
-        adb -s "$SERIAL" shell am start -n mw.gri.android/.MainActivity;
+        adb -s "$SERIAL" shell am start -n "${app_id}/mw.gri.android.MainActivity";
     done
   elif [ $success -eq 1 ]; then
     # Get version

scripts/gen_icons.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# Regenerate EVERY platform's app icon from two canonical sources:
+#   img/goblin-icon.png        the gradient app icon (yellow gradient + black mascot)
+#   img/goblin-mark-black.svg  the black mascot mark, vector, transparent bg
+#                              (mirror of site/assets/goblin-mark-black.svg)
+#
+# Square icons (desktop window, Linux AppImage, Android launcher, Windows .ico,
+# macOS .icns) come from the gradient PNG. The Android *adaptive* foreground is
+# the black mascot on transparency, composited by the OS over the yellow
+# background color (res/values/ic_launcher_background.xml = #FFD60A) — which
+# reproduces the gradient icon's look.
+#
+# Requires ImageMagick (magick) and python3 (for the .icns container).
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+ICON=img/goblin-icon.png
+MARK=img/goblin-mark-black.svg
+RES=android/app/src/main/res
+
+# --- Desktop window icon (egui, src/main.rs) + Linux AppImage AppDir icon ---
+magick "$ICON" -resize 256x256 PNG32:img/icon.png
+cp img/icon.png linux/Goblin.AppDir/goblin.png
+
+# --- Android launcher icons (gradient square) + adaptive foreground (mascot) ---
+declare -A SIZES=(    [mdpi]=48  [hdpi]=72  [xhdpi]=96  [xxhdpi]=144 [xxxhdpi]=192 )
+declare -A FG_SIZES=( [mdpi]=108 [hdpi]=162 [xhdpi]=216 [xxhdpi]=324 [xxxhdpi]=432 )
+for d in mdpi hdpi xhdpi xxhdpi xxxhdpi; do
+  s=${SIZES[$d]}; fg=${FG_SIZES[$d]}
+  # Mascot fills ~60% of the adaptive canvas — inside the ~61% safe zone, so no
+  # launcher mask (circle/squircle) ever clips it.
+  art=$(( fg * 60 / 100 ))
+  magick "$ICON" -resize "${s}x${s}"   PNG32:"$RES/mipmap-$d/ic_launcher.png"
+  magick "$ICON" -resize "${s}x${s}"   PNG32:"$RES/mipmap-$d/ic_launcher_round.png"
+  magick -background none "$MARK" -resize "${art}x${art}" \
+    -gravity center -extent "${fg}x${fg}" PNG32:"$RES/mipmap-$d/ic_launcher_foreground.png"
+done
+
+# --- Android notification (status-bar) icon: white-on-transparent mascot ---
+# Android renders ic_stat_name as an alpha-only silhouette, so the RGB channels
+# are forced to pure white; ~90% of the canvas matches the old asset's padding.
+declare -A STAT_SIZES=( [mdpi]=24 [hdpi]=36 [xhdpi]=48 [xxhdpi]=72 [xxxhdpi]=96 )
+for d in mdpi hdpi xhdpi xxhdpi xxxhdpi; do
+  s=${STAT_SIZES[$d]}
+  art=$(( s * 9 / 10 ))
+  magick -background none img/goblin-logo2.svg -resize "${art}x${art}" \
+    -gravity center -extent "${s}x${s}" \
+    -channel RGB -evaluate set 100% +channel PNG32:"$RES/drawable-$d/ic_stat_name.png"
+done
+
+# --- Windows installer + file-type icon (WiX wix/Product.ico) ---
+magick "$ICON" -define icon:auto-resize=256,128,64,48,32,24,16 wix/Product.ico
+
+# --- macOS app bundle icon (Goblin.app) ---
+python3 scripts/make-icns.py "$ICON" macos/Goblin.app/Contents/Resources/AppIcon.icns
+
+echo "icons generated from $ICON + $MARK"

scripts/make-icns.py

@@ -0,0 +1,60 @@
+#!/usr/bin/env python3
+"""Build a macOS .icns from a square PNG, dependency-free.
+
+macOS has `iconutil` and Linux distros have `png2icns`, but neither is reliably
+present, and ImageMagick's own .icns writer only emits a single size. So we
+assemble the multi-resolution PNG-payload .icns container by hand (the format
+macOS 10.7+ accepts): the `icns` magic + big-endian length, then one entry per
+OSType, each carrying an 8-bit PNG. ImageMagick (`magick`) does the resizing.
+
+Usage: make-icns.py <source.png> <out.icns>
+"""
+
+import struct
+import subprocess
+import sys
+
+# OSType -> pixel size. PNG-payload entries. Sizes above the source are
+# Lanczos-upscaled (soft but acceptable for the few large Dock/Finder slots).
+SLOTS = [
+    (b"icp4", 16),
+    (b"icp5", 32),
+    (b"icp6", 64),
+    (b"ic07", 128),
+    (b"ic08", 256),
+    (b"ic11", 32),   # 16@2x
+    (b"ic12", 64),   # 32@2x
+    (b"ic13", 256),  # 128@2x
+    (b"ic09", 512),  # 512
+    (b"ic14", 512),  # 256@2x
+]
+
+
+def render(src, size):
+    out = "/tmp/_icns_%d.png" % size
+    subprocess.run(
+        ["magick", src, "-resize", "%dx%d" % (size, size),
+         "-filter", "Lanczos", "-depth", "8", "PNG32:%s" % out],
+        check=True,
+    )
+    return open(out, "rb").read()
+
+
+def main():
+    if len(sys.argv) != 3:
+        sys.exit("usage: make-icns.py <source.png> <out.icns>")
+    src, out = sys.argv[1], sys.argv[2]
+    cache, entries = {}, []
+    for ostype, size in SLOTS:
+        if size not in cache:
+            cache[size] = render(src, size)
+        data = cache[size]
+        entries.append(ostype + struct.pack(">I", 8 + len(data)) + data)
+    body = b"".join(entries)
+    with open(out, "wb") as f:
+        f.write(b"icns" + struct.pack(">I", 8 + len(body)) + body)
+    print("wrote %s (%d entries)" % (out, len(entries)))
+
+
+if __name__ == "__main__":
+    main()

scripts/toolchain.sh

@@ -0,0 +1,126 @@
+#!/bin/bash
+#
+# Fetch the canonical GRIM build toolchains (code.gri.mw/DEV) into .toolchains/.
+#
+# These mirror exactly what upstream GRIM's CI uses, so Goblin cross-builds every
+# platform from one Linux box the same way GRIM does — instead of relying on
+# whatever NDK/zig/appimagetool happens to be installed on the machine.
+#
+# Idempotent: each tool is skipped if already present. Linux x86_64 host only
+# (the box we build releases on). Writes .toolchains/env.sh with the exports the
+# build scripts source; run nothing else by hand.
+#
+# Usage:
+#   scripts/toolchain.sh                 # core: ndk zig appimage  (what desktop+android need)
+#   scripts/toolchain.sh sdk gradle      # add the Android SDK + Gradle
+#   scripts/toolchain.sh osxcross        # build the macOS cross-toolchain (heavy)
+#   scripts/toolchain.sh all             # everything
+#
+set -euo pipefail
+
+BASEDIR=$(cd "$(dirname "$0")/.." && pwd)
+TC="${BASEDIR}/.toolchains"
+DEV="https://code.gri.mw/DEV"
+mkdir -p "${TC}"
+
+dl() { echo "  ↓ $(basename "$2")"; curl -fSL --retry 3 -o "$2" "$1"; }
+
+# Pinned versions — bump here to track GRIM's DEV releases.
+NDK_TAG="r29"; NDK_ARCHIVE="android-ndk-${NDK_TAG}-x86_64-linux-musl.tar.xz"; NDK_DIR="${TC}/android-ndk-${NDK_TAG}"
+ZIG_VER="0.12.1"; ZIG_DIR="${TC}/zig"
+AT_VER="1.9.1"; RT_TAG="20251108"
+SDK_TAG="r36"; SDK_DIR="${TC}/android-sdk"
+GRADLE_VER="8.13"; GRADLE_DIR="${TC}/gradle-${GRADLE_VER}"
+SDK_VER="12.3"; OSX_DIR="${TC}/osxcross"
+
+fetch_ndk() {
+	[ -e "${NDK_DIR}/source.properties" ] && { echo "ndk r29: present"; return; }
+	echo "ndk: fetching custom NDK ${NDK_TAG} (rebuilt LLVM, 16 KB-aligned)…"
+	dl "${DEV}/android-ndk-custom/releases/download/${NDK_TAG}/${NDK_ARCHIVE}" "${TC}/ndk.tar.xz"
+	tar -xJf "${TC}/ndk.tar.xz" -C "${TC}"; rm -f "${TC}/ndk.tar.xz"
+}
+
+fetch_zig() {
+	[ -x "${ZIG_DIR}/zig" ] && { echo "zig ${ZIG_VER}: present"; return; }
+	echo "zig: fetching ${ZIG_VER} (linker for cargo-zigbuild)…"
+	dl "${DEV}/zig/releases/download/${ZIG_VER}/zig-linux-x86_64-${ZIG_VER}.tar.xz" "${TC}/zig.tar.xz"
+	tar -xJf "${TC}/zig.tar.xz" -C "${TC}"; rm -f "${TC}/zig.tar.xz"
+	rm -rf "${ZIG_DIR}"; mv "${TC}/zig-linux-x86_64-${ZIG_VER}" "${ZIG_DIR}"
+}
+
+fetch_appimage() {
+	[ -x "${TC}/appimagetool" ] && [ -e "${TC}/runtime-x86_64" ] && [ -e "${TC}/runtime-aarch64" ] && { echo "appimagetool ${AT_VER}: present"; return; }
+	echo "appimage: fetching appimagetool ${AT_VER} + type2 runtimes (x86_64 + aarch64)…"
+	dl "${DEV}/appimagetool/releases/download/${AT_VER}/appimagetool-x86_64.AppImage" "${TC}/appimagetool"
+	dl "${DEV}/appimage-type2-runtime/releases/download/${RT_TAG}/runtime-x86_64" "${TC}/runtime-x86_64"
+	dl "${DEV}/appimage-type2-runtime/releases/download/${RT_TAG}/runtime-aarch64" "${TC}/runtime-aarch64"
+	chmod +x "${TC}/appimagetool" "${TC}/runtime-x86_64" "${TC}/runtime-aarch64"
+}
+
+# Assemble a minimal Android SDK (build-tools + platform + platform-tools) from
+# the DEV mirror so gradle has an SDK without a system install.
+fetch_sdk() {
+	[ -d "${SDK_DIR}/platform-tools" ] && { echo "android-sdk ${SDK_TAG}: present"; return; }
+	echo "android-sdk: fetching build-tools + platform-36 + platform-tools (${SDK_TAG})…"
+	local base="${DEV}/android-platform-tools/releases/download/${SDK_TAG}"
+	mkdir -p "${SDK_DIR}/build-tools" "${SDK_DIR}/platforms"
+	dl "${base}/build-tools_r36.1_linux.zip" "${TC}/bt.zip"
+	dl "${base}/platform-36_r02.zip" "${TC}/pf.zip"
+	dl "${base}/platform-tools_r36.0.0-linux.zip" "${TC}/pt.zip"
+	# build-tools zip unzips to android-NN/ → rename to the version dir gradle wants.
+	local tmp; tmp=$(mktemp -d)
+	unzip -q "${TC}/bt.zip" -d "${tmp}"; mv "${tmp}"/*/ "${SDK_DIR}/build-tools/36.1.0"
+	unzip -q "${TC}/pf.zip" -d "${tmp}"; mv "${tmp}"/*/ "${SDK_DIR}/platforms/android-36"
+	unzip -q "${TC}/pt.zip" -d "${SDK_DIR}"
+	rm -rf "${tmp}" "${TC}/bt.zip" "${TC}/pf.zip" "${TC}/pt.zip"
+}
+
+fetch_gradle() {
+	[ -x "${GRADLE_DIR}/bin/gradle" ] && { echo "gradle ${GRADLE_VER}: present"; return; }
+	echo "gradle: fetching ${GRADLE_VER}…"
+	dl "${DEV}/gradle/releases/download/v${GRADLE_VER}/gradle-${GRADLE_VER}-bin.zip" "${TC}/gradle.zip"
+	unzip -q "${TC}/gradle.zip" -d "${TC}"; rm -f "${TC}/gradle.zip"
+}
+
+# osxcross: build the macOS cross-toolchain from source + the DEV macOS SDK.
+# Heavy (compiles cctools/ld64); enables building macOS binaries off-Mac. CI also
+# builds macOS natively, so this is the local/offline path — experimental.
+fetch_osxcross() {
+	[ -x "${OSX_DIR}/target/bin/o64-clang" ] && { echo "osxcross: present"; return; }
+	command -v clang >/dev/null || { echo "osxcross: needs system clang/cmake — skipping"; return; }
+	echo "osxcross: cloning + building with macOS SDK ${SDK_VER} (slow)…"
+	[ -d "${OSX_DIR}/.git" ] || git clone --depth 1 "${DEV}/osxcross" "${OSX_DIR}"
+	dl "${DEV}/macosx-sdks/releases/download/${SDK_VER}/MacOSX${SDK_VER}.sdk.tar.xz" "${OSX_DIR}/tarballs/MacOSX${SDK_VER}.sdk.tar.xz"
+	( cd "${OSX_DIR}" && UNATTENDED=1 ./build.sh )
+}
+
+write_env() {
+	{
+		echo "# Auto-generated by scripts/toolchain.sh — source me for GRIM-canonical builds."
+		[ -e "${NDK_DIR}/source.properties" ] && { echo "export ANDROID_NDK_HOME=\"${NDK_DIR}\""; echo "export ANDROID_NDK_ROOT=\"${NDK_DIR}\""; }
+		[ -d "${SDK_DIR}/platform-tools" ] && echo "export ANDROID_HOME=\"${SDK_DIR}\""
+		local p="${TC}"
+		[ -x "${ZIG_DIR}/zig" ] && p="${ZIG_DIR}:${p}"
+		[ -x "${GRADLE_DIR}/bin/gradle" ] && p="${GRADLE_DIR}/bin:${p}"
+		[ -x "${OSX_DIR}/target/bin/o64-clang" ] && p="${OSX_DIR}/target/bin:${p}"
+		echo "export PATH=\"${p}:\$PATH\""
+		echo "export GOBLIN_APPIMAGETOOL=\"${TC}/appimagetool\""
+		echo "export GOBLIN_APPIMAGE_RUNTIME=\"${TC}/runtime-x86_64\""
+	} > "${TC}/env.sh"
+}
+
+tools=("$@"); [ ${#tools[@]} -eq 0 ] && tools=(ndk zig appimage)
+[ "${tools[0]:-}" = "all" ] && tools=(ndk zig appimage sdk gradle osxcross)
+for t in "${tools[@]}"; do
+	case "$t" in
+		ndk) fetch_ndk ;;
+		zig) fetch_zig ;;
+		appimage) fetch_appimage ;;
+		sdk) fetch_sdk ;;
+		gradle) fetch_gradle ;;
+		osxcross) fetch_osxcross ;;
+		*) echo "unknown tool: $t (ndk|zig|appimage|sdk|gradle|osxcross|all)" >&2; exit 1 ;;
+	esac
+done
+write_env
+echo "toolchain ready → ${TC}/env.sh"

scripts/webtunnel.bat

@@ -1,70 +0,0 @@
-@echo off
-setlocal enabledelayedexpansion
-
-:: Change directory to the script's location
-cd /d "%~dp0"
-
-:: Skip if Go not found.
-where go >nul 2>nul
-if %ERRORLEVEL% neq 0 (
-    echo Go could not be found
-    exit /b 0
-)
-
-set "go_os=%~1"
-set "go_arch=%~2"
-set "output_path=%~3"
-
-echo Go build for os: %go_os%, arch: %go_arch%
-
-:: Setup vars for Android.
-if "%go_os%"=="android" (
-
-    :: Setup NDK root path env.
-    if "%ANDROID_NDK_HOME%"=="" (
-        :: Extract ndkVersion from build.gradle
-        :: Equivalent to: cat ../android/app/build.gradle | grep 'ndkVersion' | cut -d ' -f 2
-        for /f "tokens=2 delims='" %%a in ('findstr "ndkVersion" ..\android\app\build.gradle') do (
-            set "NDK_VERSION=%%a"
-        )
-        set "ANDROID_NDK_HOME=%ANDROID_HOME%\ndk\!NDK_VERSION!"
-    )
-
-    :: Setup NDK host path.
-    :: Since this is a Batch script, the host is Windows.
-    set "arch_host=windows-x86_64"
-
-    :: Setup NDK target arch.
-    if "%go_arch%"=="arm64" (
-        set "arch_bin_prefix=aarch64-linux-android"
-    ) else if "%go_arch%"=="arm" (
-        set "arch_bin_prefix=armv7a-linux-androideabi"
-    ) else (
-        set "arch_bin_prefix=x86_64-linux-android"
-    )
-
-    :: Build for current target.
-    set "CGO_ENABLED=1"
-    set "GOOS=%go_os%"
-    set "GOARCH=%go_arch%"
-
-    :: Define CC and CXX paths
-    set "CC=!ANDROID_NDK_HOME!\toolchains\llvm\prebuilt\!arch_host!\bin\!arch_bin_prefix!35-clang"
-    set "CXX=!ANDROID_NDK_HOME!\toolchains\llvm\prebuilt\!arch_host!\bin\!arch_bin_prefix!35-clang++"
-
-    go build -C "../tor/webtunnel" -ldflags="-s -w" -o "%output_path%" code.gri.mw/WEB/webtunnel/main/client
-
-) else (
-    set "extra_flag="
-    if "%go_os%"=="windows" (
-        set "extra_flag=-H=windowsgui"
-    )
-
-    set "GOOS=%go_os%"
-    set "GOARCH=%go_arch%"
-
-    :: Build for non-android targets
-    go build -C "../tor/webtunnel" -ldflags="-s -w !extra_flag!" -o "%output_path%" code.gri.mw/WEB/webtunnel/main/client
-)
-
-endlocal

scripts/webtunnel.sh

@@ -1,51 +0,0 @@
-#!/bin/bash
-
-cd "$(dirname "$0")"
-
-# Skip if Go not found.
-if ! command -v go >/dev/null 2>&1
-then
-    echo "Go could not be found"
-    exit 0
-fi
-
-go_os=$1
-go_arch=$2
-
-echo "Go build for os: $go_os, arch: $go_arch"
-
-# Setup vars for Android.
-if [[ "$go_os" == "android" ]]; then
-  # Setup NDK root path env.
-  if [[ -z "$ANDROID_NDK_HOME" ]]; then
-    NDK_VERSION=$(cat ../android/app/build.gradle | grep 'ndkVersion' | cut -d \' -f 2)
-    ANDROID_NDK_HOME=$ANDROID_HOME/ndk/$NDK_VERSION
-  fi
-  # Setup NDK host path.
-  if [[ "$(uname)" == "Darwin" ]]; then
-    arch_host=darwin-x86_64
-  else
-    if [[ "$(uname -m)" == "aarch64" ]]; then
-      arch_host=linux-arm64
-    else
-      arch_host=linux-x86_64
-    fi
-  fi
-  # Setup NDK target arch.
-  if [[ "$go_arch" == "arm64" ]]; then
-    arch_bin_prefix=aarch64-linux-android
-  elif [[ "$go_arch" == "arm" ]]; then
-    arch_bin_prefix=armv7a-linux-androideabi
-  else
-    arch_bin_prefix=x86_64-linux-android
-  fi
-
-  # Build for current target.
-  CGO_ENABLED=1 GOOS=$1 GOARCH=$2 CC="${ANDROID_NDK_HOME}/toolchains/llvm/prebuilt/${arch_host}/bin/${arch_bin_prefix}35-clang" CXX="${ANDROID_NDK_HOME}/toolchains/llvm/prebuilt/${arch_path}/bin/${arch_bin_prefix}35-clang++" go build -C "../tor/webtunnel" -ldflags="-s -w" -o "$3" code.gri.mw/WEB/webtunnel/main/client
-else
-  if [[ "$go_os" == "windows" ]]; then
-    extra_flag="-H=windowsgui"
-  fi
-  GOOS=$1 GOARCH=$2 go build -C "../tor/webtunnel" -ldflags="-s -w ${extra_flag}" -o "$3" code.gri.mw/WEB/webtunnel/main/client
-fi
-

src/gui/app.rs

@@ -44,6 +44,8 @@ pub struct App<Platform> {
 	resize_direction: Option<ResizeDirection>,
 	/// Flag to check if it's first draw.
 	first_draw: bool,
+	/// Last status-bar icon state pushed to the platform (Android).
+	status_bar_white: Option<bool>,
 }
 
 impl<Platform: PlatformCallbacks> App<Platform> {
@@ -53,6 +55,7 @@ impl<Platform: PlatformCallbacks> App<Platform> {
 			content: Content::default(),
 			resize_direction: None,
 			first_draw: true,
+			status_bar_white: None,
 		}
 	}
 
@@ -74,6 +77,21 @@ impl<Platform: PlatformCallbacks> App<Platform> {
 			self.first_draw = false;
 		}
 
+		// Heartbeat for "is the app on-screen": stamp this frame, and keep a light
+		// ~2s repaint cadence so the stamp stays fresh while visible. When the app
+		// is backgrounded eframe stops calling this, the stamp goes stale, and
+		// background workers (the @name re-verify sweep) pause until we're back.
+		crate::mark_frame();
+		ctx.request_repaint_after(std::time::Duration::from_secs(2));
+
+		// Keep the Android status-bar icons readable against the in-app theme
+		// (the app draws edge-to-edge over the status bar). Only on change.
+		let white_icons = crate::gui::theme::status_bar_white_icons();
+		if self.status_bar_white != Some(white_icons) {
+			self.platform.set_status_bar_white_icons(white_icons);
+			self.status_bar_white = Some(white_icons);
+		}
+
 		// Handle Esc keyboard key event and platform Back button key event.
 		let back_pressed = BACK_BUTTON_PRESSED.load(Ordering::Relaxed);
 		if back_pressed
@@ -167,6 +185,28 @@ impl<Platform: PlatformCallbacks> App<Platform> {
 
 	/// Draw custom desktop window frame content.
 	fn custom_frame_ui(&mut self, ui: &mut egui::Ui, is_fullscreen: bool) {
+		// Paint the window area inside the frame margin with the theme
+		// background first: surface gaps are otherwise transparent, which X11
+		// without a compositor renders as black (strip under the sidebar in
+		// light/yellow themes). The margin ring itself must STAY transparent —
+		// painting it gives the window a visible border under a compositor.
+		let fill_rect = if is_fullscreen {
+			ui.max_rect()
+		} else {
+			ui.max_rect().shrink(Content::WINDOW_FRAME_MARGIN)
+		};
+		let fill_rounding = if is_fullscreen {
+			CornerRadius::ZERO
+		} else {
+			CornerRadius {
+				nw: 8,
+				ne: 8,
+				sw: 0,
+				se: 0,
+			}
+		};
+		ui.painter()
+			.rect_filled(fill_rect, fill_rounding, Colors::fill());
 		let content_bg_rect = {
 			let mut r = ui.max_rect();
 			if !is_fullscreen {
@@ -290,14 +330,38 @@ impl<Platform: PlatformCallbacks> App<Platform> {
 			ui.ctx().send_viewport_cmd(ViewportCommand::StartDrag);
 		}
 
-		// Paint the title.
-		let title_text = format!("Grim {} ツ", crate::VERSION);
-		painter.text(
-			title_rect.center(),
-			egui::Align2::CENTER_CENTER,
-			title_text,
-			egui::FontId::proportional(15.0),
-			Colors::title(true),
+		// Paint the title. Centering on the full rect runs the tail of the
+		// string under the right-side window buttons at narrow widths (the
+		// "Build NNN" digits collide with the minimize caret at 390px), so
+		// when the centered galley would reach the button cluster, center it
+		// in the free span between the theme toggle and the buttons instead,
+		// eliding if even that span is too tight.
+		let title_text = format!("Goblin ツ · Build {}", crate::BUILD);
+		let title_font = egui::FontId::proportional(15.0);
+		let title_ink = Colors::title(true);
+		const BUTTONS_LEFT_INSET: f32 = 60.0; // theme toggle
+		const BUTTONS_RIGHT_INSET: f32 = 168.0; // minimize + fullscreen + close
+		let free_left = title_rect.min.x + BUTTONS_LEFT_INSET;
+		let free_right = title_rect.max.x - BUTTONS_RIGHT_INSET;
+		let mut galley = painter.layout_no_wrap(title_text.clone(), title_font.clone(), title_ink);
+		let mut center_x = title_rect.center().x;
+		if center_x + galley.size().x / 2.0 > free_right {
+			center_x = (free_left + free_right) / 2.0;
+			if galley.size().x > free_right - free_left {
+				let mut job =
+					egui::text::LayoutJob::simple_singleline(title_text, title_font, title_ink);
+				job.wrap =
+					egui::text::TextWrapping::truncate_at_width((free_right - free_left).max(0.0));
+				galley = painter.layout_job(job);
+			}
+		}
+		painter.galley(
+			egui::pos2(
+				center_x - galley.size().x / 2.0,
+				title_rect.center().y - galley.size().y / 2.0,
+			),
+			galley,
+			title_ink,
 		);
 
 		ui.scope_builder(UiBuilder::new().max_rect(title_rect), |ui| {

src/gui/colors.rs

@@ -1,4 +1,5 @@
 // Copyright 2023 The Grim Developers
+// Copyright 2026 The Goblin Developers
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -12,95 +13,39 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
+//! Legacy color API mapped onto the Goblin design tokens in [`crate::gui::theme`].
+//! Existing call sites keep compiling; everything sources from the active theme.
+
 use egui::Color32;
 
-use crate::AppConfig;
+use crate::gui::theme;
 
-/// Provides colors values based on current theme.
+/// Provides color values based on the current theme tokens.
 pub struct Colors;
 
-const WHITE: Color32 = Color32::from_gray(253);
-const BLACK: Color32 = Color32::from_gray(12);
-
 const SEMI_TRANSPARENT: Color32 = Color32::from_black_alpha(100);
 const DARK_SEMI_TRANSPARENT: Color32 = Color32::from_black_alpha(170);
 
-const GOLD: Color32 = Color32::from_rgb(255, 215, 0);
-const GOLD_DARK: Color32 = Color32::from_rgb(240, 203, 1);
+const INK: Color32 = Color32::from_rgb(0x0E, 0x0E, 0x0C);
+const PAPER: Color32 = Color32::from_rgb(0xFA, 0xFA, 0xF7);
 
-const YELLOW: Color32 = Color32::from_rgb(254, 241, 2);
-const YELLOW_DARK: Color32 = Color32::from_rgb(239, 229, 3);
-
-const GREEN: Color32 = Color32::from_rgb(0, 0x64, 0);
-const GREEN_DARK: Color32 = Color32::from_rgb(0, (0x64 as f32 * 1.3 + 0.5) as u8, 0);
-
-const RED: Color32 = Color32::from_rgb(0x8B, 0, 0);
-const RED_DARK: Color32 = Color32::from_rgb((0x8B as f32 * 1.3 + 0.5) as u8, 50, 30);
-
-const BLUE: Color32 = Color32::from_rgb(0, 0x66, 0xE4);
-const BLUE_DARK: Color32 = Color32::from_rgb(
-	0,
-	(0x66 as f32 * 1.3 + 0.5) as u8,
-	(0xE4 as f32 * 1.3 + 0.5) as u8,
-);
-
-const FILL: Color32 = Color32::from_gray(244);
-const FILL_DARK: Color32 = Color32::from_gray(26);
-
-const FILL_DEEP_DARK: Color32 = Color32::from_gray(32);
-
-const FILL_LITE: Color32 = Color32::from_gray(249);
-const FILL_LITE_DARK: Color32 = Color32::from_gray(21);
-
-const TEXT: Color32 = Color32::from_gray(80);
-const TEXT_DARK: Color32 = Color32::from_gray(185);
-
-const CHECKBOX: Color32 = Color32::from_gray(100);
-const CHECKBOX_DARK: Color32 = Color32::from_gray(175);
-
-const TEXT_BUTTON: Color32 = Color32::from_gray(70);
-const TEXT_BUTTON_DARK: Color32 = Color32::from_gray(195);
-
-const TITLE: Color32 = Color32::from_gray(60);
-const TITLE_DARK: Color32 = Color32::from_gray(205);
-
-const GRAY: Color32 = Color32::from_gray(120);
-const GRAY_DARK: Color32 = Color32::from_gray(145);
-
-const STROKE_DARK: Color32 = Color32::from_gray(50);
-
-const INACTIVE_TEXT: Color32 = Color32::from_gray(150);
-const INACTIVE_TEXT_DARK: Color32 = Color32::from_gray(115);
-
-const ITEM_BUTTON: Color32 = Color32::from_gray(90);
-const ITEM_BUTTON_DARK: Color32 = Color32::from_gray(175);
-
-const ITEM_STROKE: Color32 = Color32::from_gray(220);
-const ITEM_STROKE_DARK: Color32 = Color32::from_gray(40);
-
-const ITEM_HOVER: Color32 = Color32::from_gray(205);
-const ITEM_HOVER_DARK: Color32 = Color32::from_gray(48);
-
-/// Check if dark theme should be used.
-fn use_dark() -> bool {
-	AppConfig::dark_theme().unwrap_or(false)
+fn dark_base() -> bool {
+	theme::tokens().dark_base
 }
 
 impl Colors {
-	pub const FILL_DEEP: Color32 = Color32::from_gray(238);
+	pub const FILL_DEEP: Color32 = Color32::from_rgb(0xF2, 0xF1, 0xEC);
 	pub const TRANSPARENT: Color32 = Color32::from_rgba_premultiplied(0, 0, 0, 0);
-	pub const STROKE: Color32 = Color32::from_gray(200);
+	pub const STROKE: Color32 = Color32::from_rgba_premultiplied(1, 1, 1, 20);
 
+	/// Ink when `true`, paper when `false` (theme aware: maps to text/bg).
 	pub fn white_or_black(black_in_white: bool) -> Color32 {
-		if use_dark() {
-			if black_in_white { WHITE } else { BLACK }
-		} else {
-			if black_in_white { BLACK } else { WHITE }
-		}
+		let t = theme::tokens();
+		if black_in_white { t.text } else { t.bg }
 	}
 
 	pub fn semi_transparent() -> Color32 {
-		if use_dark() {
+		if dark_base() {
 			DARK_SEMI_TRANSPARENT
 		} else {
 			SEMI_TRANSPARENT
@@ -108,130 +53,115 @@ impl Colors {
 	}
 
 	pub fn gold() -> Color32 {
-		if use_dark() {
-			GOLD.gamma_multiply(0.9)
-		} else {
-			GOLD
-		}
+		theme::tokens().accent
 	}
 
 	pub fn gold_dark() -> Color32 {
-		if use_dark() {
-			GOLD_DARK.gamma_multiply(0.9)
-		} else {
-			GOLD_DARK
-		}
+		theme::tokens().accent_dark
 	}
 
 	pub fn yellow() -> Color32 {
-		YELLOW
+		theme::tokens().accent
 	}
 
 	pub fn yellow_dark() -> Color32 {
-		YELLOW_DARK
+		theme::tokens().accent_dark
+	}
+
+	/// Ink color to draw on top of accent fills.
+	pub fn accent_ink() -> Color32 {
+		theme::tokens().accent_ink
 	}
 
 	pub fn green() -> Color32 {
-		if use_dark() { GREEN_DARK } else { GREEN }
+		theme::tokens().pos
 	}
 
 	pub fn red() -> Color32 {
-		if use_dark() { RED_DARK } else { RED }
+		theme::tokens().neg
 	}
 
 	pub fn blue() -> Color32 {
-		if use_dark() { BLUE_DARK } else { BLUE }
+		if dark_base() {
+			Color32::from_rgb(0x7B, 0xA7, 0xFF)
+		} else {
+			Color32::from_rgb(0x0E, 0x62, 0xD0)
+		}
 	}
 
 	pub fn fill() -> Color32 {
-		if use_dark() { FILL_DARK } else { FILL }
+		theme::tokens().bg
 	}
 
 	pub fn fill_deep() -> Color32 {
-		if use_dark() {
-			FILL_DEEP_DARK
-		} else {
-			Self::FILL_DEEP
-		}
+		theme::tokens().surface2
 	}
 
 	pub fn fill_lite() -> Color32 {
-		if use_dark() {
-			FILL_LITE_DARK
-		} else {
-			FILL_LITE
-		}
+		theme::tokens().surface
 	}
 
 	pub fn checkbox() -> Color32 {
-		if use_dark() { CHECKBOX_DARK } else { CHECKBOX }
+		theme::tokens().text_dim
 	}
 
 	pub fn text(always_light: bool) -> Color32 {
-		if use_dark() && !always_light {
-			TEXT_DARK
+		if always_light {
+			// Forced light-theme ink, used over always-light surfaces like QR cards.
+			Color32::from_rgb(0x6B, 0x6A, 0x63)
 		} else {
-			TEXT
+			theme::tokens().text_dim
 		}
 	}
 
 	pub fn text_button() -> Color32 {
-		if use_dark() {
-			TEXT_BUTTON_DARK
-		} else {
-			TEXT_BUTTON
-		}
+		theme::tokens().text
 	}
 
 	pub fn title(always_light: bool) -> Color32 {
-		if use_dark() && !always_light {
-			TITLE_DARK
+		if always_light {
+			INK
 		} else {
-			TITLE
+			theme::tokens().text
 		}
 	}
 
 	pub fn gray() -> Color32 {
-		if use_dark() { GRAY_DARK } else { GRAY }
+		theme::tokens().text_mute
 	}
 
 	pub fn stroke() -> Color32 {
-		if use_dark() {
-			STROKE_DARK
-		} else {
-			Self::STROKE
-		}
+		theme::tokens().line
 	}
 
 	pub fn inactive_text() -> Color32 {
-		if use_dark() {
-			INACTIVE_TEXT_DARK
-		} else {
-			INACTIVE_TEXT
-		}
+		theme::tokens().text_mute
 	}
 
 	pub fn item_button_text() -> Color32 {
-		if use_dark() {
-			ITEM_BUTTON_DARK
-		} else {
-			ITEM_BUTTON
-		}
+		theme::tokens().text_dim
 	}
 
 	pub fn item_stroke() -> Color32 {
-		if use_dark() {
-			ITEM_STROKE_DARK
-		} else {
-			ITEM_STROKE
-		}
+		theme::tokens().line
 	}
 
 	pub fn item_hover() -> Color32 {
-		if use_dark() {
-			ITEM_HOVER_DARK
-		} else {
-			ITEM_HOVER
-		}
+		theme::tokens().hover
+	}
+
+	/// Positive amount color.
+	pub fn pos() -> Color32 {
+		theme::tokens().pos
+	}
+
+	/// Always-dark ink (brand black).
+	pub const fn ink() -> Color32 {
+		INK
+	}
+
+	/// Always-light paper (brand white).
+	pub const fn paper() -> Color32 {
+		PAPER
 	}
 }

src/gui/mod.rs

@@ -18,6 +18,8 @@ pub use app::App;
 mod colors;
 pub use colors::Colors;
 
+pub mod theme;
+
 pub mod icons;
 pub mod platform;
 pub mod views;

src/gui/platform/android/mod.rs

@@ -40,6 +40,12 @@ pub struct Android {
 impl Android {
 	/// Create new Android platform instance from provided [`AndroidApp`].
 	pub fn new(app: AndroidApp) -> Self {
+		// Keep a process-wide handle so non-GUI threads (the nostr service)
+		// can reach Java too (see `notify_payment_received`).
+		{
+			let mut w_app = ANDROID_APP.write();
+			*w_app = Some(app.clone());
+		}
 		Self {
 			android_app: app,
 			ctx: Arc::new(RwLock::new(None)),
@@ -158,6 +164,51 @@ impl PlatformCallbacks for Android {
 		Ok(())
 	}
 
+	fn save_file(&self, name: String, data: Vec<u8>) -> Result<(), std::io::Error> {
+		// Stage the bytes in the share cache (same dir the FileProvider exposes),
+		// then let Java copy them to the user-chosen Storage Access Framework
+		// document. Mirrors `share_data`, but the Java side uses CREATE_DOCUMENT.
+		let default_cache = OsString::from(dirs::cache_dir().unwrap());
+		let mut file = PathBuf::from(env::var_os("XDG_CACHE_HOME").unwrap_or(default_cache));
+		file.push("share");
+		if !file.exists() {
+			std::fs::create_dir(file.clone())?;
+		}
+		file.push(&name);
+		if file.exists() {
+			std::fs::remove_file(file.clone())?;
+		}
+		let mut f = File::create_new(file.clone())?;
+		f.write_all(data.as_slice())?;
+		f.sync_all()?;
+		let vm = unsafe { jni::JavaVM::from_raw(self.android_app.vm_as_ptr() as _) }.unwrap();
+		let env = vm.attach_current_thread().unwrap();
+		let path_arg = env.new_string(file.to_str().unwrap()).unwrap();
+		let name_arg = env.new_string(&name).unwrap();
+		let _ = self.call_java_method(
+			"saveFile",
+			"(Ljava/lang/String;Ljava/lang/String;)V",
+			&[
+				JValue::Object(&JObject::from(path_arg)),
+				JValue::Object(&JObject::from(name_arg)),
+			],
+		);
+		Ok(())
+	}
+
+	fn share_text(&self, text: String) {
+		let vm = unsafe { jni::JavaVM::from_raw(self.android_app.vm_as_ptr() as _) }.unwrap();
+		let env = vm.attach_current_thread().unwrap();
+		let Ok(arg_value) = env.new_string(text) else {
+			return;
+		};
+		let _ = self.call_java_method(
+			"shareText",
+			"(Ljava/lang/String;)V",
+			&[JValue::Object(&JObject::from(arg_value))],
+		);
+	}
+
 	fn pick_file(&self) -> Option<String> {
 		// Clear previous result.
 		let mut w_path = PICKED_FILE_PATH.write();
@@ -199,6 +250,22 @@ impl PlatformCallbacks for Android {
 	}
 
 	fn clear_user_attention(&self) {}
+
+	fn set_status_bar_white_icons(&self, white: bool) {
+		self.call_java_method(
+			"setStatusBarWhiteIcons",
+			"(Z)V",
+			&[JValue::Bool(white as u8)],
+		);
+	}
+
+	fn vibrate_error(&self) {
+		let _ = self.call_java_method("vibrateError", "()V", &[]);
+	}
+
+	fn vibrate_copy(&self) {
+		let _ = self.call_java_method("vibrateCopy", "()V", &[]);
+	}
 }
 
 lazy_static! {
@@ -206,6 +273,89 @@ lazy_static! {
 	static ref LAST_CAMERA_IMAGE: Arc<RwLock<Option<(Vec<u8>, u32)>>> = Arc::new(RwLock::new(None));
 	/// Picked file path.
 	static ref PICKED_FILE_PATH: Arc<RwLock<Option<String>>> = Arc::new(RwLock::new(None));
+	/// App handle for JNI calls from threads without a platform reference.
+	static ref ANDROID_APP: Arc<RwLock<Option<AndroidApp>>> = Arc::new(RwLock::new(None));
+}
+
+/// Show the one-shot "payment received" system notification (Java side
+/// `BackgroundService.notifyPaymentReceived`, id=2, separate from the
+/// persistent sync notification id=1). Called by the nostr service on
+/// slatepack receipt from a non-GUI thread, hence the stored [`AndroidApp`]
+/// handle instead of a platform reference. Fail-open: a missing handle or
+/// JNI error just skips the notification, never the payment.
+pub fn notify_payment_received(name: &str, amount: &str) {
+	let app = {
+		let r_app = ANDROID_APP.read();
+		r_app.clone()
+	};
+	let Some(app) = app else {
+		return;
+	};
+	let platform = Android {
+		android_app: app,
+		ctx: Arc::new(RwLock::new(None)),
+	};
+	let Ok(vm) = (unsafe { jni::JavaVM::from_raw(platform.android_app.vm_as_ptr() as _) }) else {
+		return;
+	};
+	let Ok(env) = vm.attach_current_thread() else {
+		return;
+	};
+	let Ok(j_name) = env.new_string(name) else {
+		return;
+	};
+	let Ok(j_amount) = env.new_string(amount) else {
+		return;
+	};
+	let _ = platform.call_java_method(
+		"notifyPaymentReceived",
+		"(Ljava/lang/String;Ljava/lang/String;)V",
+		&[
+			JValue::Object(&JObject::from(j_name)),
+			JValue::Object(&JObject::from(j_amount)),
+		],
+	);
+}
+
+/// Show the one-shot "payment requested" system notification (Java side
+/// `BackgroundService.notifyPaymentRequested`, id=3, separate from both the
+/// persistent sync notification id=1 and the received-payment one id=2). Called
+/// by the nostr service when a payment request (Invoice1) is ingested from a
+/// non-GUI thread, hence the stored [`AndroidApp`] handle instead of a platform
+/// reference. Fail-open: a missing handle or JNI error just skips the
+/// notification, never the request. Mirrors [`notify_payment_received`].
+pub fn notify_payment_requested(name: &str, amount: &str) {
+	let app = {
+		let r_app = ANDROID_APP.read();
+		r_app.clone()
+	};
+	let Some(app) = app else {
+		return;
+	};
+	let platform = Android {
+		android_app: app,
+		ctx: Arc::new(RwLock::new(None)),
+	};
+	let Ok(vm) = (unsafe { jni::JavaVM::from_raw(platform.android_app.vm_as_ptr() as _) }) else {
+		return;
+	};
+	let Ok(env) = vm.attach_current_thread() else {
+		return;
+	};
+	let Ok(j_name) = env.new_string(name) else {
+		return;
+	};
+	let Ok(j_amount) = env.new_string(amount) else {
+		return;
+	};
+	let _ = platform.call_java_method(
+		"notifyPaymentRequested",
+		"(Ljava/lang/String;Ljava/lang/String;)V",
+		&[
+			JValue::Object(&JObject::from(j_name)),
+			JValue::Object(&JObject::from(j_amount)),
+		],
+	);
 }
 
 /// Callback from Java code with last entered character from soft keyboard.

src/gui/platform/desktop/mod.rs

@@ -62,17 +62,22 @@ impl Desktop {
 		use nokhwa::Camera;
 		use nokhwa::pixel_format::RgbFormat;
 		use nokhwa::utils::ApiBackend;
-		use nokhwa::utils::{CameraIndex, RequestedFormat, RequestedFormatType};
-
-		let devices = nokhwa::query(ApiBackend::Auto).unwrap();
-		cameras_amount.store(devices.len(), Ordering::Relaxed);
-		let index = camera_index.load(Ordering::Relaxed);
-		if devices.is_empty() || index >= devices.len() {
-			return;
-		}
+		use nokhwa::utils::{FrameFormat, RequestedFormat, RequestedFormatType};
 
 		thread::spawn(move || {
-			let index = CameraIndex::Index(camera_index.load(Ordering::Relaxed) as u32);
+			// Device enumeration does IO — keep it off the UI thread, and
+			// treat a backend error the same as "no cameras".
+			let devices = nokhwa::query(ApiBackend::Auto).unwrap_or_default();
+			cameras_amount.store(devices.len(), Ordering::Relaxed);
+			let index = camera_index.load(Ordering::Relaxed);
+			if devices.is_empty() || index >= devices.len() {
+				return;
+			}
+
+			// Open by the enumerated device's own index, not the list
+			// position: on v4l they differ whenever /dev/video0 is absent
+			// (first camera at video1, loopback-only setups, …).
+			let index = devices[index].index().clone();
 			let requested =
 				RequestedFormat::new::<RgbFormat>(RequestedFormatType::AbsoluteHighestFrameRate);
 			// Create and open camera.
@@ -89,9 +94,29 @@ impl Desktop {
 						}
 						// Get a frame.
 						if let Ok(frame) = camera.frame() {
-							// Save image.
-							let mut w_image = LAST_CAMERA_IMAGE.write();
-							*w_image = Some((frame.buffer().to_vec(), 0));
+							// Consumers expect an encoded image. MJPEG frames
+							// already are; anything else (YUYV, NV12, …) must
+							// be decoded to RGB and re-encoded, or the readers
+							// fail on the raw buffer and show a spinner forever.
+							let bytes = if frame.source_frame_format() == FrameFormat::MJPEG {
+								Some(frame.buffer().to_vec())
+							} else if let Ok(image) = frame.decode_image::<RgbFormat>() {
+								let mut bytes: Vec<u8> = Vec::new();
+								image
+									.write_to(
+										&mut std::io::Cursor::new(&mut bytes),
+										image::ImageFormat::Jpeg,
+									)
+									.ok()
+									.map(|_| bytes)
+							} else {
+								None
+							};
+							if let Some(bytes) = bytes {
+								// Save image.
+								let mut w_image = LAST_CAMERA_IMAGE.write();
+								*w_image = Some((bytes, 0));
+							}
 						} else {
 							// Clear image.
 							let mut w_image = LAST_CAMERA_IMAGE.write();
@@ -99,7 +124,7 @@ impl Desktop {
 							break;
 						}
 					}
-					camera.stop_stream().unwrap();
+					let _ = camera.stop_stream();
 				};
 			}
 		});
@@ -267,6 +292,15 @@ impl PlatformCallbacks for Desktop {
 		None
 	}
 
+	fn pick_image_file(&self) -> Option<String> {
+		let file = FileDialog::new()
+			.set_title(t!("choose_file"))
+			.add_filter("Images", &["png", "jpg", "jpeg", "webp"])
+			.set_directory(dirs::home_dir().unwrap())
+			.pick_file();
+		file.and_then(|f| f.to_str().map(|s| s.to_string()))
+	}
+
 	fn pick_folder(&self) -> Option<String> {
 		let file = FileDialog::new()
 			.set_title(t!("choose_folder"))

src/gui/platform/mod.rs

@@ -32,10 +32,40 @@ pub trait PlatformCallbacks {
 	fn can_switch_camera(&self) -> bool;
 	fn switch_camera(&self);
 	fn share_data(&self, name: String, data: Vec<u8>) -> Result<(), std::io::Error>;
+
+	/// Save bytes to a user-chosen location on the device (a "save as" dialog).
+	/// Desktop already does this via `share_data` (rfd save dialog); Android
+	/// overrides to use the Storage Access Framework (ACTION_CREATE_DOCUMENT)
+	/// instead of the share sheet.
+	fn save_file(&self, name: String, data: Vec<u8>) -> Result<(), std::io::Error> {
+		self.share_data(name, data)
+	}
+	/// Share plain text via the platform's native share sheet (e.g. a payment
+	/// link). Defaults to copying to the clipboard on platforms without a share
+	/// sheet (desktop).
+	fn share_text(&self, text: String) {
+		self.copy_string_to_buffer(text);
+	}
 	fn pick_file(&self) -> Option<String>;
+	/// Native picker filtered to picture files; defaults to the plain picker
+	/// on platforms without filter support (magic-byte sniffing protects).
+	fn pick_image_file(&self) -> Option<String> {
+		self.pick_file()
+	}
 	fn pick_folder(&self) -> Option<String>;
 	fn picked_file(&self) -> Option<String>;
 	fn request_user_attention(&self);
 	fn user_attention_required(&self) -> bool;
 	fn clear_user_attention(&self);
+
+	/// Set the status-bar icon color to contrast the current theme. `white` =
+	/// light icons (for a dark background). No-op off Android.
+	fn set_status_bar_white_icons(&self, _white: bool) {}
+
+	/// Play a short "error" haptic (e.g. a rejected over-balance payment).
+	/// No-op off Android.
+	fn vibrate_error(&self) {}
+
+	/// Play a tiny "tick" haptic confirming a successful copy. No-op off Android.
+	fn vibrate_copy(&self) {}
 }

src/gui/theme.rs

@@ -0,0 +1,357 @@
+// Copyright 2026 The Goblin Developers
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//! Goblin design tokens: three themes (light/dark/yellow) and density scales,
+//! taken verbatim from the Goblin design handoff.
+
+use std::cell::Cell;
+
+use egui::Color32;
+
+use crate::AppConfig;
+
+/// Available color themes.
+#[derive(Clone, Copy, PartialEq, Eq, Debug)]
+pub enum ThemeKind {
+	Light,
+	Dark,
+	Yellow,
+}
+
+impl ThemeKind {
+	pub fn id(&self) -> &'static str {
+		match self {
+			ThemeKind::Light => "light",
+			ThemeKind::Dark => "dark",
+			ThemeKind::Yellow => "yellow",
+		}
+	}
+
+	pub fn from_id(id: &str) -> Option<ThemeKind> {
+		match id {
+			"light" => Some(ThemeKind::Light),
+			"dark" => Some(ThemeKind::Dark),
+			"yellow" => Some(ThemeKind::Yellow),
+			_ => None,
+		}
+	}
+}
+
+/// Color tokens for a theme.
+pub struct ThemeTokens {
+	pub bg: Color32,
+	pub surface: Color32,
+	pub surface2: Color32,
+	pub text: Color32,
+	pub text_dim: Color32,
+	pub text_mute: Color32,
+	/// Text on surface/surface2 fills. Matches `text` in light/dark, but the
+	/// yellow theme has dark surfaces on a bright bg, so on-surface text must
+	/// be light there while `text` stays dark for the bg.
+	pub surface_text: Color32,
+	pub surface_text_dim: Color32,
+	pub surface_text_mute: Color32,
+	pub line: Color32,
+	pub accent: Color32,
+	pub accent_dark: Color32,
+	pub accent_ink: Color32,
+	pub pos: Color32,
+	pub neg: Color32,
+	pub chip: Color32,
+	pub hover: Color32,
+	/// Avatar background palette (initial ink picked by luminance).
+	pub avatar_pairs: [(Color32, Color32); 8],
+	/// Whether egui widgets should use the dark base style.
+	pub dark_base: bool,
+}
+
+/// Avatar (background, ink) pairs shared by all themes — bright pastels
+/// carry dark ink, saturated darks carry light ink.
+const AVATAR_PAIRS: [(Color32, Color32); 8] = [
+	(
+		Color32::from_rgb(0xFF, 0xD6, 0x0A),
+		Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	), // accent yellow / ink
+	(
+		Color32::from_rgb(0xFF, 0x8E, 0x3C),
+		Color32::from_rgb(0x26, 0x10, 0x02),
+	), // orange / deep brown
+	(
+		Color32::from_rgb(0x5B, 0xD2, 0x7A),
+		Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	), // light green / black
+	(
+		Color32::from_rgb(0x7B, 0xA7, 0xFF),
+		Color32::from_rgb(0x0B, 0x14, 0x33),
+	), // periwinkle / navy ink
+	(
+		Color32::from_rgb(0x6B, 0x4F, 0xC8),
+		Color32::from_rgb(0xF4, 0xF0, 0xFF),
+	), // purple / light text
+	(
+		Color32::from_rgb(0xE1, 0x74, 0xD0),
+		Color32::from_rgb(0x32, 0x07, 0x2B),
+	), // pink / dark plum
+	(
+		Color32::from_rgb(0x1F, 0x7A, 0x5C),
+		Color32::from_rgb(0xE7, 0xFF, 0xF4),
+	), // deep teal / light mint
+	(
+		Color32::from_rgb(0xA0, 0xE6, 0x6E),
+		Color32::from_rgb(0x14, 0x22, 0x0A),
+	), // lime / dark moss
+];
+
+pub const LIGHT: ThemeTokens = ThemeTokens {
+	bg: Color32::from_rgb(0xFA, 0xFA, 0xF7),
+	surface: Color32::from_rgb(0xFF, 0xFF, 0xFF),
+	surface2: Color32::from_rgb(0xF2, 0xF1, 0xEC),
+	text: Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	text_dim: Color32::from_rgb(0x6B, 0x6A, 0x63),
+	text_mute: Color32::from_rgb(0xA6, 0xA3, 0x9B),
+	surface_text: Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	surface_text_dim: Color32::from_rgb(0x6B, 0x6A, 0x63),
+	surface_text_mute: Color32::from_rgb(0xA6, 0xA3, 0x9B),
+	// rgba(14,14,12,0.08) premultiplied.
+	line: Color32::from_rgba_premultiplied(1, 1, 1, 20),
+	accent: Color32::from_rgb(0xFF, 0xD6, 0x0A),
+	accent_dark: Color32::from_rgb(0xEF, 0xC8, 0x00),
+	accent_ink: Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	pos: Color32::from_rgb(0x0E, 0x7C, 0x3A),
+	neg: Color32::from_rgb(0xB0, 0x48, 0x1E),
+	chip: Color32::from_rgb(0xF2, 0xF1, 0xEC),
+	hover: Color32::from_rgb(0xE9, 0xE7, 0xE0),
+	avatar_pairs: AVATAR_PAIRS,
+	dark_base: false,
+};
+
+pub const DARK: ThemeTokens = ThemeTokens {
+	bg: Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	surface: Color32::from_rgb(0x1A, 0x1A, 0x17),
+	surface2: Color32::from_rgb(0x24, 0x24, 0x20),
+	text: Color32::from_rgb(0xFA, 0xFA, 0xF7),
+	text_dim: Color32::from_rgb(0x9A, 0x98, 0x8F),
+	text_mute: Color32::from_rgb(0x60, 0x5E, 0x58),
+	surface_text: Color32::from_rgb(0xFA, 0xFA, 0xF7),
+	surface_text_dim: Color32::from_rgb(0x9A, 0x98, 0x8F),
+	surface_text_mute: Color32::from_rgb(0x60, 0x5E, 0x58),
+	// rgba(255,255,255,0.08) premultiplied.
+	line: Color32::from_rgba_premultiplied(20, 20, 20, 20),
+	accent: Color32::from_rgb(0xFF, 0xD6, 0x0A),
+	accent_dark: Color32::from_rgb(0xEF, 0xC8, 0x00),
+	accent_ink: Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	pos: Color32::from_rgb(0x5B, 0xD2, 0x7A),
+	neg: Color32::from_rgb(0xFF, 0x8B, 0x5E),
+	chip: Color32::from_rgb(0x24, 0x24, 0x20),
+	hover: Color32::from_rgb(0x2E, 0x2E, 0x29),
+	avatar_pairs: AVATAR_PAIRS,
+	dark_base: true,
+};
+
+pub const YELLOW: ThemeTokens = ThemeTokens {
+	bg: Color32::from_rgb(0xFF, 0xD6, 0x0A),
+	surface: Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	surface2: Color32::from_rgb(0x1A, 0x1A, 0x17),
+	text: Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	text_dim: Color32::from_rgb(0x3A, 0x3A, 0x36),
+	// Muted on-bg tier darkened for the bright yellow bg: #6B6A63 was only
+	// 3.85:1 (sub-WCAG-AA); #55534A is 5.5:1 and still the faintest tier.
+	text_mute: Color32::from_rgb(0x55, 0x53, 0x4A),
+	surface_text: Color32::from_rgb(0xFA, 0xFA, 0xF7),
+	surface_text_dim: Color32::from_rgb(0x9A, 0x98, 0x8F),
+	surface_text_mute: Color32::from_rgb(0x60, 0x5E, 0x58),
+	// rgba(14,14,12,0.18) premultiplied.
+	line: Color32::from_rgba_premultiplied(2, 2, 2, 46),
+	accent: Color32::from_rgb(0x0E, 0x0E, 0x0C),
+	accent_dark: Color32::from_rgb(0x24, 0x24, 0x20),
+	accent_ink: Color32::from_rgb(0xFF, 0xD6, 0x0A),
+	pos: Color32::from_rgb(0x0E, 0x7C, 0x3A),
+	neg: Color32::from_rgb(0x9E, 0x2E, 0x0E),
+	chip: Color32::from_rgba_premultiplied(2, 2, 2, 20),
+	hover: Color32::from_rgb(0xEF, 0xC8, 0x00),
+	avatar_pairs: AVATAR_PAIRS,
+	dark_base: false,
+};
+
+thread_local! {
+	/// Per-frame theme override (see [`scoped`]). egui renders on one thread, so
+	/// a thread-local Cell scopes a different theme to a single surface without
+	/// touching the persisted app config.
+	static OVERRIDE: Cell<Option<ThemeKind>> = const { Cell::new(None) };
+}
+
+/// RAII guard that forces [`kind`]/[`tokens`] to a specific theme for its
+/// lifetime, restoring the previous value on drop (panic-safe). Used to paint
+/// one surface — the Pay tab — in the yellow theme regardless of the user's
+/// chosen theme, à la a modern pay app's brand-colored pay screen.
+#[must_use = "the override only lasts while the guard is alive"]
+pub struct ScopedTheme(Option<ThemeKind>);
+
+impl Drop for ScopedTheme {
+	fn drop(&mut self) {
+		OVERRIDE.with(|c| c.set(self.0.take()));
+	}
+}
+
+/// Override the active theme until the returned guard drops.
+pub fn scoped(kind: ThemeKind) -> ScopedTheme {
+	ScopedTheme(OVERRIDE.with(|c| c.replace(Some(kind))))
+}
+
+/// Current theme kind: a scoped override if one is active, else app config
+/// (dark is the product default).
+pub fn kind() -> ThemeKind {
+	OVERRIDE.with(|c| c.get()).unwrap_or_else(AppConfig::theme)
+}
+
+/// Current theme tokens.
+pub fn tokens() -> &'static ThemeTokens {
+	match kind() {
+		ThemeKind::Light => &LIGHT,
+		ThemeKind::Dark => &DARK,
+		ThemeKind::Yellow => &YELLOW,
+	}
+}
+
+/// Set each frame by the Pay surface (which paints a bright yellow top under a
+/// possibly-dark global theme), so the status bar can pick readable icons for it.
+static YELLOW_SURFACE: std::sync::atomic::AtomicBool = std::sync::atomic::AtomicBool::new(false);
+
+/// Flag whether the bright Pay/yellow surface is currently on screen.
+pub fn set_status_surface_yellow(yellow: bool) {
+	YELLOW_SURFACE.store(yellow, std::sync::atomic::Ordering::Relaxed);
+}
+
+/// Whether the status bar should use light (white) icons: true on the dark
+/// theme (dark top), false on the light/yellow themes (bright top). The bright
+/// Pay surface forces dark icons even when the global theme is dark.
+pub fn status_bar_white_icons() -> bool {
+	if YELLOW_SURFACE.load(std::sync::atomic::Ordering::Relaxed) {
+		return false;
+	}
+	tokens().dark_base
+}
+
+/// Density scales from the design handoff.
+#[derive(Clone, Copy, PartialEq, Eq, Debug)]
+pub enum DensityKind {
+	Compact,
+	Regular,
+	Comfy,
+}
+
+impl DensityKind {
+	pub fn id(&self) -> &'static str {
+		match self {
+			DensityKind::Compact => "compact",
+			DensityKind::Regular => "regular",
+			DensityKind::Comfy => "comfy",
+		}
+	}
+
+	pub fn from_id(id: &str) -> Option<DensityKind> {
+		match id {
+			"compact" => Some(DensityKind::Compact),
+			"regular" => Some(DensityKind::Regular),
+			"comfy" => Some(DensityKind::Comfy),
+			_ => None,
+		}
+	}
+}
+
+/// Spacing tokens for a density.
+#[derive(Clone, Copy)]
+pub struct DensityTokens {
+	pub pad: f32,
+	pub gap: f32,
+	pub radius: f32,
+	pub row: f32,
+}
+
+pub const COMPACT: DensityTokens = DensityTokens {
+	pad: 12.0,
+	gap: 10.0,
+	radius: 10.0,
+	row: 56.0,
+};
+pub const REGULAR: DensityTokens = DensityTokens {
+	pad: 16.0,
+	gap: 14.0,
+	radius: 16.0,
+	row: 64.0,
+};
+pub const COMFY: DensityTokens = DensityTokens {
+	pad: 20.0,
+	gap: 18.0,
+	radius: 22.0,
+	row: 72.0,
+};
+
+/// Current density tokens from app config (comfy is the product default).
+pub fn density() -> DensityTokens {
+	match AppConfig::density() {
+		DensityKind::Compact => COMPACT,
+		DensityKind::Regular => REGULAR,
+		DensityKind::Comfy => COMFY,
+	}
+}
+
+/// Font family helpers for the Geist weight stack registered in `setup_fonts`.
+pub mod fonts {
+	use egui::{FontFamily, FontId};
+
+	pub fn regular() -> FontFamily {
+		FontFamily::Proportional
+	}
+
+	pub fn medium() -> FontFamily {
+		FontFamily::Name("geist-medium".into())
+	}
+
+	pub fn semibold() -> FontFamily {
+		FontFamily::Name("geist-semibold".into())
+	}
+
+	pub fn bold() -> FontFamily {
+		FontFamily::Name("geist-bold".into())
+	}
+
+	pub fn mono() -> FontFamily {
+		FontFamily::Monospace
+	}
+
+	pub fn mono_semibold() -> FontFamily {
+		FontFamily::Name("geist-mono-sb".into())
+	}
+
+	/// Uppercase kicker label size (11px in the design).
+	pub fn kicker() -> FontId {
+		FontId::new(11.0, semibold())
+	}
+}
+
+/// Pick a readable ink (black or white) for the given background by luminance.
+pub fn ink_for(bg: Color32) -> Color32 {
+	let lum = 0.299 * bg.r() as f32 + 0.587 * bg.g() as f32 + 0.114 * bg.b() as f32;
+	if lum > 140.0 {
+		Color32::from_rgb(0x0E, 0x0E, 0x0C)
+	} else {
+		Color32::from_rgb(0xFA, 0xFA, 0xF7)
+	}
+}
+
+/// Number of avatar color pairs (hue derivation modulus).
+pub fn avatar_pairs_len() -> usize {
+	tokens().avatar_pairs.len()
+}

src/gui/views/camera.rs

@@ -36,6 +36,8 @@ pub struct CameraContent {
 	qr_scan_state: Arc<RwLock<QrScanState>>,
 	/// Uniform Resources URIs collected from QR code scanning.
 	ur_data: Arc<RwLock<Option<(Vec<String>, usize)>>>,
+	/// When waiting for the first frame started, to surface missing cameras.
+	wait_start: std::time::Instant,
 }
 
 impl Default for CameraContent {
@@ -43,6 +45,7 @@ impl Default for CameraContent {
 		Self {
 			qr_scan_state: Arc::new(RwLock::new(QrScanState::default())),
 			ur_data: Arc::new(RwLock::new(None)),
+			wait_start: std::time::Instant::now(),
 		}
 	}
 }
@@ -153,8 +156,24 @@ impl CameraContent {
 		}
 	}
 
-	/// Draw camera loading progress content.
+	/// Draw camera loading progress content, or a missing-camera notice when
+	/// no frame ever arrives (no device, device busy, or capture failed).
 	fn loading_ui(&self, ui: &mut egui::Ui) -> Rect {
+		if self.wait_start.elapsed().as_secs() >= 5 {
+			let space = ui.available_width() / 3.0;
+			return ui
+				.vertical_centered(|ui| {
+					ui.add_space(space);
+					ui.label(
+						RichText::new("No camera found")
+							.size(17.0)
+							.color(Colors::inactive_text()),
+					);
+					ui.add_space(space);
+				})
+				.response
+				.rect;
+		}
 		let space = (ui.available_width() - View::BIG_SPINNER_SIZE) / 2.0;
 		ui.vertical_centered(|ui| {
 			ui.add_space(space);
@@ -448,3 +467,62 @@ impl CameraContent {
 		None
 	}
 }
+
+#[cfg(test)]
+mod tests {
+	use super::*;
+
+	/// Render a QR the way the goblin receive card paints it (dark modules
+	/// on a white plate with ~5% padding, goblin mark covering the center)
+	/// and prove the camera scanner pipeline (rqrr) decodes it. Guards both
+	/// the scan path and the card's scannability by third-party apps.
+	#[test]
+	fn goblin_receive_qr_decodes_with_center_mark() {
+		let uri = "nostr:npub15l60z00nm4ptmnsj9lcp4husnaltytw85eu05dt7ksdmsje0p98su2f0ch";
+		let qr = qrcodegen::QrCode::encode_text(uri, qrcodegen::QrCodeEcc::High).unwrap();
+		let n = qr.size();
+
+		// Mirror widgets::qr_code geometry at its receive-card size.
+		let size = 220.0f32;
+		let pad = (size * 0.05).max(8.0);
+		let dim = (size + pad * 2.0).ceil() as u32;
+		let cell = size / n as f32;
+		let mut img = image::GrayImage::from_pixel(dim, dim, image::Luma([255u8]));
+		let mut fill = |x0: f32, y0: f32, w: f32, h: f32, v: u8| {
+			for y in y0.max(0.0) as u32..((y0 + h).min(dim as f32) as u32) {
+				for x in x0.max(0.0) as u32..((x0 + w).min(dim as f32) as u32) {
+					img.put_pixel(x, y, image::Luma([v]));
+				}
+			}
+		};
+		for y in 0..n {
+			for x in 0..n {
+				if qr.get_module(x, y) {
+					fill(pad + x as f32 * cell, pad + y as f32 * cell, cell, cell, 14);
+				}
+			}
+		}
+		// The goblin mark backing square over the center modules.
+		let backing = size * 0.19;
+		let c = dim as f32 / 2.0;
+		fill(c - backing / 2.0, c - backing / 2.0, backing, backing, 255);
+
+		let mut prepared = rqrr::PreparedImage::prepare(img);
+		let grids = prepared.detect_grids();
+		assert_eq!(grids.len(), 1, "scanner should find exactly one QR");
+		let mut data = vec![];
+		grids[0].decode_to(&mut data).expect("QR should decode");
+		assert_eq!(String::from_utf8(data).unwrap(), uri);
+	}
+
+	/// A scanned nostr URI must come back as plain text (the send flow
+	/// strips the scheme and resolves the npub), never as another variant.
+	#[test]
+	fn nostr_uri_parses_as_text() {
+		let uri = "nostr:npub15l60z00nm4ptmnsj9lcp4husnaltytw85eu05dt7ksdmsje0p98su2f0ch";
+		match CameraContent::parse_qr_code(uri.as_bytes().to_vec()) {
+			QrScanResult::Text(text) => assert_eq!(text.to_string(), uri),
+			other => panic!("expected Text, got {:?}", other.text()),
+		}
+	}
+}

src/gui/views/content.rs

@@ -94,6 +94,25 @@ impl ContentContainer for Content {
 		if self.network.showing_settings() {
 			panel_width = ui.available_width();
 		}
+		// The open-wallet (Goblin) surface is full-bleed: node info lives in
+		// its sidebar, so the network column stays hidden while it shows.
+		// Same for first-run onboarding, which owns the whole window.
+		let wallet_open = self.wallets.showing_wallet() || self.wallets.onboarding_active();
+		// On the returning-user wallet list the node is demoted to a chip:
+		// the panel opens only when explicitly toggled, never forced open by
+		// dual-panel mode (otherwise GRIM's node column dominates the list).
+		let list_screen = self.wallets.wallet_list_screen();
+		// The app-settings (cog) screen owns the node now: it lives in the
+		// cog's own section, and the full panel opens only when explicitly
+		// requested from there — never auto-docked beside settings, which
+		// would expose the node twice on a wide screen.
+		let app_settings = self.wallets.showing_settings();
+		let show_network = !wallet_open
+			&& if list_screen || app_settings {
+				Self::is_network_panel_open()
+			} else {
+				is_panel_open
+			};
 
 		// Show network content.
 		egui::SidePanel::left("network_panel")
@@ -102,7 +121,7 @@ impl ContentContainer for Content {
 			.frame(egui::Frame {
 				..Default::default()
 			})
-			.show_animated_inside(ui, is_panel_open, |ui| {
+			.show_animated_inside(ui, show_network, |ui| {
 				self.network.ui(ui, cb);
 			});
 
@@ -125,6 +144,9 @@ impl ContentContainer for Content {
 					.show();
 			} else if OperatingSystem::from_target_os() == OperatingSystem::Android
 				&& AppConfig::android_integrated_node_warning_needed()
+				// The warning is about INTEGRATED-node background sync; on the
+				// external-node default it nags about a node we do not run.
+				&& AppConfig::autostart_node()
 			{
 				Modal::new(ANDROID_INTEGRATED_NODE_WARNING_MODAL)
 					.title(t!("network.node"))

src/gui/views/goblin/avatars.rs

@@ -0,0 +1,177 @@
+// Copyright 2026 The Goblin Developers
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//! Texture layer over the avatar disk cache: hands the UI ready
+//! [`egui::TextureHandle`]s for usernames, fetching stale entries from the
+//! NIP-05 server on background threads. Textures are only created on the UI
+//! thread; workers send raw PNG bytes back over a channel.
+
+use std::collections::{HashMap, HashSet};
+use std::sync::mpsc::{Receiver, Sender, channel};
+
+use crate::nostr::avatar::AvatarCache;
+use crate::nostr::nip05;
+use crate::settings::Settings;
+
+/// Worker outcome for one name's avatar probe.
+enum Fetched {
+	/// A custom avatar (content hash, png bytes).
+	Found(String, Vec<u8>),
+	/// The server confirmed the name has no avatar.
+	Absent,
+	/// The probe failed (network) — do NOT cache; retry later.
+	Failed,
+}
+type FetchResult = (String, Fetched);
+
+pub struct AvatarTextures {
+	cache: AvatarCache,
+	/// Ready textures; `None` records a known letter-fallback (no avatar).
+	textures: HashMap<String, Option<egui::TextureHandle>>,
+	inflight: HashSet<String>,
+	tx: Sender<FetchResult>,
+	rx: Receiver<FetchResult>,
+}
+
+impl Default for AvatarTextures {
+	fn default() -> Self {
+		let (tx, rx) = channel();
+		Self {
+			cache: AvatarCache::new(Settings::base_path(Some("cache/avatars".to_string()))),
+			textures: HashMap::new(),
+			inflight: HashSet::new(),
+			tx,
+			rx,
+		}
+	}
+}
+
+fn decode(png: &[u8]) -> Option<egui::ColorImage> {
+	// Server-fed bytes: decode under explicit limits so a hostile or breached
+	// avatar host can't blow up memory on the texture path. `fetch_avatar`
+	// only checks ≤1 MiB + PNG magic, not the decoded dimensions.
+	let mut reader = image::ImageReader::new(std::io::Cursor::new(png));
+	reader.set_format(image::ImageFormat::Png);
+	let mut limits = image::Limits::default();
+	limits.max_image_width = Some(1024);
+	limits.max_image_height = Some(1024);
+	limits.max_alloc = Some(8 * 1024 * 1024);
+	reader.limits(limits);
+	let img = reader.decode().ok()?.to_rgba8();
+	Some(egui::ColorImage::from_rgba_unmultiplied(
+		[img.width() as usize, img.height() as usize],
+		img.as_raw(),
+	))
+}
+
+impl AvatarTextures {
+	/// Texture for a bare username (no `@`), if it has a custom avatar.
+	/// Triggers a background refresh when the cache entry is stale.
+	pub fn texture_for(
+		&mut self,
+		ctx: &egui::Context,
+		server: &str,
+		name: &str,
+	) -> Option<egui::TextureHandle> {
+		self.drain(ctx);
+		let name = name.trim_start_matches('@').to_lowercase();
+		if name.is_empty() {
+			return None;
+		}
+		if let Some(t) = self.textures.get(&name).cloned() {
+			// A known state (texture or confirmed-absent); refresh if stale.
+			if self.cache.stale(&name) {
+				self.spawn_fetch(server, &name);
+			}
+			return t;
+		}
+		// Disk cache hit → texture now, refresh in background if stale.
+		if let Some((_, bytes)) = self.cache.cached(&name) {
+			let tex = decode(&bytes)
+				.map(|img| ctx.load_texture(format!("avatar_{name}"), img, Default::default()));
+			self.textures.insert(name.clone(), tex.clone());
+			if self.cache.stale(&name) {
+				self.spawn_fetch(server, &name);
+			}
+			return tex;
+		}
+		if self.cache.stale(&name) {
+			self.spawn_fetch(server, &name);
+		} else {
+			// Fresh negative entry: letter fallback without re-probing.
+			self.textures.insert(name.clone(), None);
+		}
+		None
+	}
+
+	/// Forget a name (released or rotated away).
+	pub fn invalidate(&mut self, name: &str) {
+		let name = name.trim_start_matches('@').to_lowercase();
+		self.cache.remove(&name);
+		self.textures.remove(&name);
+	}
+
+	fn drain(&mut self, ctx: &egui::Context) {
+		while let Ok((name, fetched)) = self.rx.try_recv() {
+			self.inflight.remove(&name);
+			match fetched {
+				Fetched::Found(hash, png) => {
+					self.cache.store(&name, &hash, &png);
+					let tex = decode(&png).map(|img| {
+						ctx.load_texture(format!("avatar_{name}"), img, Default::default())
+					});
+					self.textures.insert(name, tex);
+				}
+				Fetched::Absent => {
+					self.cache.mark_absent(&name);
+					self.textures.insert(name, None);
+				}
+				// Network failure: leave the entry stale so the next frame
+				// retries. Never cache it as a confirmed "no avatar".
+				Fetched::Failed => {}
+			}
+			ctx.request_repaint();
+		}
+	}
+
+	fn spawn_fetch(&mut self, server: &str, name: &str) {
+		if self.inflight.contains(name) {
+			return;
+		}
+		self.inflight.insert(name.to_string());
+		let tx = self.tx.clone();
+		let server = server.to_string();
+		let name = name.to_string();
+		std::thread::spawn(move || {
+			let rt = match tokio::runtime::Builder::new_current_thread()
+				.enable_all()
+				.build()
+			{
+				Ok(rt) => rt,
+				Err(_) => return,
+			};
+			let fetched = rt.block_on(async {
+				match nip05::fetch_profile(&server, &name).await {
+					Some(Some(hash)) => match nip05::fetch_avatar(&server, &hash).await {
+						Some(png) => Fetched::Found(hash, png),
+						None => Fetched::Failed,
+					},
+					Some(None) => Fetched::Absent,
+					None => Fetched::Failed,
+				}
+			});
+			let _ = tx.send((name, fetched));
+		});
+	}
+}

src/gui/views/goblin/data.rs

@@ -0,0 +1,380 @@
+// Copyright 2026 The Goblin Developers
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//! Activity model: wallet transactions joined with nostr metadata.
+
+use grin_wallet_libwallet::TxLogEntryType;
+
+use crate::nostr::{Contact, NostrSendStatus, NostrStore, TxNostrMeta};
+use crate::wallet::Wallet;
+use crate::wallet::types::WalletTx;
+
+/// A unified activity entry for the Goblin feed.
+pub struct ActivityItem {
+	pub tx_id: u32,
+	pub title: String,
+	pub note: Option<String>,
+	pub amount: u64,
+	pub incoming: bool,
+	pub confirmed: bool,
+	/// Canceled/expired before completing (wallet-cancelled tx or expired meta).
+	pub canceled: bool,
+	pub system: bool,
+	pub time: i64,
+	/// Counterparty npub hex, when known.
+	pub npub: Option<String>,
+}
+
+/// Full detail for the receipt / transaction-detail screen: GRIM tx data
+/// joined with the nostr counterparty + note. Mimblewimble keeps the chain
+/// private, but this is a LOCAL archive (like GRIM), so we surface whatever
+/// the wallet recorded plus the npub/username we exchanged with.
+pub struct ReceiptDetail {
+	pub tx_id: u32,
+	pub title: String,
+	pub npub: Option<String>,
+	pub amount: u64,
+	pub incoming: bool,
+	pub confirmed: bool,
+	/// Canceled/expired before completing.
+	pub canceled: bool,
+	/// Whether the counterparty has a real identity (petname / verified NIP-05)
+	/// rather than just a bare npub. Gates the redundant To/From name rows.
+	pub has_identity: bool,
+	/// (current confirmations, required) when still pending and computable.
+	pub confs: Option<(u64, u64)>,
+	pub time: i64,
+	pub note: Option<String>,
+	/// Network fee in atomic units (sends only; unknown for receives).
+	pub fee: Option<u64>,
+	pub slate_id: Option<String>,
+}
+
+/// Build the receipt detail for a transaction id.
+pub fn receipt_detail(wallet: &Wallet, tx_id: u32) -> Option<ReceiptDetail> {
+	let data = wallet.get_data()?;
+	let txs = data.txs.as_ref()?;
+	let tx = txs.iter().find(|t| t.data.id == tx_id)?;
+	let incoming = matches!(
+		tx.data.tx_type,
+		TxLogEntryType::TxReceived | TxLogEntryType::ConfirmedCoinbase
+	);
+	let system = matches!(tx.data.tx_type, TxLogEntryType::ConfirmedCoinbase);
+	let slate_id = tx.data.tx_slate_id.map(|u| u.to_string());
+	let store = wallet.nostr_service().map(|s| s.store.clone());
+	let store_ref = store.as_deref();
+	let meta: Option<TxNostrMeta> = slate_id
+		.as_ref()
+		.and_then(|sid| store_ref.and_then(|s| s.tx_meta(sid)));
+	let title = if system {
+		"Mining reward".to_string()
+	} else if let Some(m) = &meta {
+		store_ref
+			.map(|s| contact_title(s, &m.npub))
+			.unwrap_or_else(|| short_npub(&m.npub))
+	} else if incoming {
+		"Received".to_string()
+	} else {
+		"Sent".to_string()
+	};
+	let note = meta.as_ref().and_then(|m| m.note.clone());
+	let time = tx
+		.data
+		.confirmation_ts
+		.or(Some(tx.data.creation_ts))
+		.map(|t| t.timestamp())
+		.unwrap_or(0);
+	// The actual network fee from the tx kernel; a receive doesn't pay one.
+	let fee = if incoming {
+		None
+	} else {
+		Some(tx.data.fee.map(|f| f.fee()).unwrap_or(0))
+	};
+	// Confirmation progress toward the spendable threshold (min_confirmations).
+	// grin flips `confirmed` to true at the FIRST on-chain block, but a payment
+	// isn't spendable until min_confirmations — so keep counting 1/10 … 10/10
+	// instead of jumping straight to "complete" at one block (which is why the
+	// count never appeared to move).
+	let min_conf = data.info.minimum_confirmations;
+	let confs = match tx.height {
+		Some(h) if h > 0 && data.info.last_confirmed_height >= h => {
+			let count = data.info.last_confirmed_height - h + 1;
+			if count >= min_conf {
+				None // matured — fully spendable
+			} else {
+				Some((count, min_conf))
+			}
+		}
+		// On-chain but exact height not yet known: at least one block in.
+		_ if tx.data.confirmed => Some((1.min(min_conf), min_conf)),
+		// Broadcast but not yet mined.
+		_ => Some((0, min_conf)),
+	};
+	let canceled = is_canceled(tx, meta.as_ref());
+	let has_identity = meta
+		.as_ref()
+		.and_then(|m| store_ref.map(|s| has_real_identity(s, &m.npub)))
+		.unwrap_or(false);
+	Some(ReceiptDetail {
+		tx_id,
+		title,
+		npub: meta.map(|m| m.npub),
+		amount: tx.amount,
+		incoming,
+		confirmed: tx.data.confirmed,
+		canceled,
+		has_identity,
+		confs,
+		time,
+		note,
+		fee,
+		slate_id,
+	})
+}
+
+/// Activity entries exchanged with a single counterparty (for their profile).
+pub fn history_with(wallet: &Wallet, npub: &str) -> Vec<ActivityItem> {
+	activity_items(wallet)
+		.into_iter()
+		.filter(|i| i.npub.as_deref() == Some(npub))
+		.collect()
+}
+
+/// True when a counterparty has a real, human identity (a local petname or a
+/// verified NIP-05) rather than just a bare npub. Used to suppress the
+/// redundant To/From name rows on the receipt when the name would just be the
+/// same truncated npub shown in the "nostr" row.
+pub fn has_real_identity(store: &NostrStore, npub: &str) -> bool {
+	store
+		.contact(npub)
+		.map(|c| {
+			c.petname.as_deref().map(|p| !p.is_empty()).unwrap_or(false)
+				|| c.nip05_verified_at.is_some()
+		})
+		.unwrap_or(false)
+}
+
+/// Whether a transaction was canceled/expired before completing: a wallet-level
+/// cancel (GRIM `TxSentCancelled`/`TxReceivedCancelled`), or expired nostr
+/// metadata while still unconfirmed (a late on-chain confirmation still wins).
+fn is_canceled(tx: &WalletTx, meta: Option<&TxNostrMeta>) -> bool {
+	matches!(
+		tx.data.tx_type,
+		TxLogEntryType::TxSentCancelled | TxLogEntryType::TxReceivedCancelled
+	) || (!tx.data.confirmed
+		&& meta
+			.map(|m| m.status == NostrSendStatus::Cancelled)
+			.unwrap_or(false))
+}
+
+/// Resolve the display title for a contact npub.
+pub fn contact_title(store: &NostrStore, npub: &str) -> String {
+	if let Some(contact) = store.contact(npub) {
+		display_name(&contact)
+	} else {
+		short_npub(npub)
+	}
+}
+
+/// Display rule: petname → bare name (verified, home authority) → `name · domain`
+/// (verified, foreign authority — never bare, so a foreign "alice" can't pose as
+/// your home "alice") → short npub. We never show the `@`.
+pub fn display_name(contact: &Contact) -> String {
+	if let Some(petname) = &contact.petname {
+		if !petname.is_empty() {
+			return petname.clone();
+		}
+	}
+	if let (Some(nip05), Some(_)) = (&contact.nip05, contact.nip05_verified_at) {
+		if let Some((name, domain)) = nip05.split_once('@') {
+			if domain == crate::nostr::nip05::home_domain() {
+				return name.to_string();
+			}
+			// Foreign authority: show the domain (no @) so it can't masquerade
+			// as a home name.
+			return format!("{name} · {domain}");
+		}
+	}
+	short_npub(&contact.npub)
+}
+
+/// Whether this contact's name is verified against a name authority (gets the
+/// little check), and the foreign domain to surface (None when it's the home
+/// authority, where the domain is implied).
+pub fn name_verification(contact: &Contact) -> Option<Option<String>> {
+	let nip05 = contact.nip05.as_ref()?;
+	contact.nip05_verified_at?;
+	let (_, domain) = nip05.split_once('@')?;
+	if domain == crate::nostr::nip05::home_domain() {
+		Some(None)
+	} else {
+		Some(Some(domain.to_string()))
+	}
+}
+
+/// Avatar hue index derived from a hex pubkey (stable per identity, spread
+/// across the full color-pair palette). Only fills the persisted
+/// `Contact.hue` field these days — nothing reads it for rendering anymore.
+pub fn hue_of(hex: &str) -> usize {
+	usize::from_str_radix(&hex[..2.min(hex.len())], 16).unwrap_or(0)
+		% crate::gui::theme::avatar_pairs_len()
+}
+
+/// Single-line display form of a handle for narrow chips: middle-ellipsis
+/// past 16 chars, keeping the tail (names often differ at the end).
+pub fn short_handle(handle: &str) -> String {
+	let chars: Vec<char> = handle.chars().collect();
+	if chars.len() <= 16 {
+		return handle.to_string();
+	}
+	let head: String = chars[..10].iter().collect();
+	let tail: String = chars[chars.len() - 4..].iter().collect();
+	format!("{head}…{tail}")
+}
+
+/// Short npub display (npub1abcd…wxyz) from a hex pubkey.
+pub fn short_npub(hex: &str) -> String {
+	use nostr_sdk::{PublicKey, ToBech32};
+	if let Ok(pk) = PublicKey::from_hex(hex) {
+		// `to_bech32` for a valid key is infallible.
+		let Ok(npub) = pk.to_bech32();
+		// Standard truncation: "npub1" + 7 head chars … 6 tail chars.
+		if npub.len() > 18 {
+			return format!("{}…{}", &npub[..12], &npub[npub.len() - 6..]);
+		}
+		return npub;
+	}
+	format!("{}…", &hex[..8.min(hex.len())])
+}
+
+/// Full bech32 npub (no truncation), for the recipient picker's grey subtitle
+/// where showing the complete key is more useful than repeating the truncation.
+pub fn full_npub(hex: &str) -> String {
+	use nostr_sdk::{PublicKey, ToBech32};
+	PublicKey::from_hex(hex)
+		.ok()
+		.and_then(|pk| pk.to_bech32().ok())
+		.unwrap_or_else(|| hex.to_string())
+}
+
+/// Build the activity feed for a wallet, newest first.
+pub fn activity_items(wallet: &Wallet) -> Vec<ActivityItem> {
+	let data = match wallet.get_data() {
+		Some(d) => d,
+		None => return vec![],
+	};
+	let txs = data.txs.unwrap_or_default();
+	let store = wallet.nostr_service().map(|s| s.store.clone());
+	let mut items: Vec<ActivityItem> = txs
+		.iter()
+		.map(|tx| build_item(tx, store.as_deref()))
+		.collect();
+	items.sort_by_key(|i| std::cmp::Reverse(i.time));
+	items
+}
+
+fn build_item(tx: &WalletTx, store: Option<&NostrStore>) -> ActivityItem {
+	let incoming = matches!(
+		tx.data.tx_type,
+		TxLogEntryType::TxReceived | TxLogEntryType::ConfirmedCoinbase
+	);
+	let system = matches!(tx.data.tx_type, TxLogEntryType::ConfirmedCoinbase);
+	let slate_id = tx.data.tx_slate_id.map(|u| u.to_string());
+	let meta: Option<TxNostrMeta> = slate_id
+		.as_ref()
+		.and_then(|sid| store.and_then(|s| s.tx_meta(sid)));
+
+	let title = if system {
+		"Mining reward".to_string()
+	} else if let Some(meta) = &meta {
+		store
+			.map(|s| contact_title(s, &meta.npub))
+			.unwrap_or_else(|| short_npub(&meta.npub))
+	} else if incoming {
+		// Fall back to a generic label when there's no nostr counterparty.
+		"Received".to_string()
+	} else {
+		"Sent".to_string()
+	};
+
+	let note = meta.as_ref().and_then(|m| m.note.clone());
+	let time = tx
+		.data
+		.confirmation_ts
+		.or(Some(tx.data.creation_ts))
+		.map(|t| t.timestamp())
+		.unwrap_or(0);
+	let canceled = is_canceled(tx, meta.as_ref());
+
+	ActivityItem {
+		tx_id: tx.data.id,
+		title,
+		note,
+		amount: tx.amount,
+		incoming,
+		confirmed: tx.data.confirmed,
+		canceled,
+		system,
+		time,
+		npub: meta.map(|m| m.npub),
+	}
+}
+
+/// Recent unique peers for the home strip (most recent first), as
+/// `(display name, npub hex)`.
+pub fn recent_peers(wallet: &Wallet, limit: usize) -> Vec<(String, String)> {
+	let store = match wallet.nostr_service() {
+		Some(s) => s.store.clone(),
+		None => return vec![],
+	};
+	let mut contacts = store.all_contacts();
+	contacts.sort_by_key(|c| std::cmp::Reverse(c.last_paid_at.unwrap_or(c.added_at)));
+	contacts
+		.into_iter()
+		.take(limit)
+		.map(|c| (display_name(&c), c.npub))
+		.collect()
+}
+
+/// Local contacts whose petname / nip05 / npub contains `query` (case-
+/// insensitive) — the instant, no-network half of the recipient search.
+/// Returns `(display name, npub hex)` pairs.
+pub fn search_contacts(wallet: &Wallet, query: &str, limit: usize) -> Vec<(String, String)> {
+	let store = match wallet.nostr_service() {
+		Some(s) => s.store.clone(),
+		None => return vec![],
+	};
+	let q = query.trim().trim_start_matches('@').to_lowercase();
+	if q.is_empty() {
+		return vec![];
+	}
+	let mut hits: Vec<(String, String)> = store
+		.all_contacts()
+		.into_iter()
+		.filter(|c| {
+			c.petname
+				.as_deref()
+				.map(|p| p.to_lowercase().contains(&q))
+				.unwrap_or(false)
+				|| c.nip05
+					.as_deref()
+					.map(|n| n.to_lowercase().contains(&q))
+					.unwrap_or(false)
+				|| c.npub.to_lowercase().contains(&q)
+		})
+		.map(|c| (display_name(&c), c.npub))
+		.collect();
+	hits.truncate(limit);
+	hits
+}

src/gui/views/goblin/identicon.rs

@@ -0,0 +1,101 @@
+// Copyright 2026 The Goblin Developers
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//! Deterministic gradient avatars for anonymous nostr users.
+//!
+//! `avatar = f(pubkey)`: a two-tone gradient tile seeded by the pubkey, with the
+//! Grin mark composited on top. Same key → identical SVG on every device, so
+//! there is nothing to upload, store, or sync — each surface regenerates the
+//! same bytes locally. The fallback avatar for anyone with no @handle and no
+//! kind-0 `picture`, instead of a meaningless lettered tile.
+//!
+//! Seed = the **lowercase 64-char hex pubkey** hashed as UTF-8. Keep this byte
+//! identical to the shared reference port (`identicon.rs` / `avatar.ts`): same
+//! SHA-256 input, f64 math, and constants — or two surfaces draw two different
+//! avatars for one person. All math is f64 (f32 drifts ±1 per channel vs JS).
+
+use nostr_sdk::{FromBech32, PublicKey};
+use sha2::{Digest, Sha256};
+
+/// The Grin nav mark in its native 61×61 coordinate space.
+const GRIN_PATH: &str = "M43.341 20.2793C42.6915 18.8211 42.0862 15.94 40.4204 15.2994C38.2758 14.4747 36.9501 19.8734 36.6342 21.2375H36.3149C35.7742 18.9002 35.0485 15.5878 32.4824 14.85C31.2943 19.8399 33.7235 25.2229 35.9955 29.5411C38.4215 28.3818 39.6035 24.7512 39.8279 22.1956H40.1473L42.7023 29.8605C44.7578 29.2697 45.4729 27.2356 46.2151 25.3893C47.8084 21.4265 49.1453 16.5529 48.1317 12.295C45.0641 13.1637 44.1309 17.5503 43.341 20.2793ZM12.6813 30.4993C15.4263 29.1886 16.7325 25.0399 17.1525 22.1956H17.4719C17.7967 23.5666 18.665 27.1037 20.3781 27.3307C22.5607 27.6195 23.7051 22.7765 23.8593 21.2375H24.1787C24.8746 23.642 25.6079 26.769 28.0112 27.9443C28.8978 24.2204 27.8361 20.249 26.4744 16.7662C26.1243 15.8707 25.4054 13.4562 24.1707 13.4562C22.1478 13.4562 21.0105 18.7885 20.6656 20.2793H20.3462L17.7913 12.6144C13.297 14.7605 10.8557 26.1727 12.6813 30.4993ZM7.89066 34.3317C11.2259 48.8795 26.6098 57.1266 40.4667 50.9832C45.5099 48.7472 49.5104 44.7634 51.8169 39.7611C52.4128 38.4686 53.5834 36.1291 52.9008 34.4333C52.2212 32.7441 45.6297 35.5041 43.9827 36.225C43.7514 36.3278 43.5883 36.5411 43.5503 36.7915C43.4963 37.1457 43.5921 37.5066 43.8153 37.7874C44.0383 38.0681 44.3682 38.2431 44.7256 38.2706C45.9331 38.3635 47.4929 38.4836 47.4929 38.4836C42.4829 48.1813 28.9371 52.4692 19.3881 44.7215C17.2509 42.9877 15.3442 40.9274 14.061 38.4836C13.4404 37.3019 12.8649 35.7906 11.81 34.9797C10.7966 34.2004 9.25919 33.9335 7.89066 34.3317Z";
+
+/// Mark spans 90% of the tile; black at 67% opacity (matches the nav styling).
+const LOGO_FRAC: f64 = 0.90;
+const LOGO_OPACITY: f64 = 0.67;
+const GRIN_NATIVE: f64 = 61.0;
+
+/// Standard HSL → RGB bytes. f64 throughout for cross-port byte-identity.
+pub(super) fn hsl_rgb8(h: f64, s: f64, l: f64) -> (u8, u8, u8) {
+	let c = (1.0 - (2.0 * l - 1.0).abs()) * s;
+	let hp = h / 60.0;
+	let x = c * (1.0 - ((hp % 2.0) - 1.0).abs());
+	let (r, g, b) = match hp.floor() as i32 {
+		0 => (c, x, 0.0),
+		1 => (x, c, 0.0),
+		2 => (0.0, c, x),
+		3 => (0.0, x, c),
+		4 => (x, 0.0, c),
+		_ => (c, 0.0, x),
+	};
+	let m = l - c / 2.0;
+	let to = |v: f64| ((v + m) * 255.0).round() as u8;
+	(to(r), to(g), to(b))
+}
+
+/// Standard HSL → RGB → `#rrggbb`.
+fn hsl_to_rgb(h: f64, s: f64, l: f64) -> String {
+	let (r, g, b) = hsl_rgb8(h, s, l);
+	format!("#{r:02x}{g:02x}{b:02x}")
+}
+
+/// Normalise any caller-supplied id (npub bech32 OR raw hex) to the canonical
+/// lowercase hex pubkey used as the seed everywhere.
+pub fn to_hex_seed(id: &str) -> String {
+	if let Ok(pk) = PublicKey::from_bech32(id) {
+		pk.to_hex()
+	} else {
+		id.to_lowercase()
+	}
+}
+
+/// Gradient stop colors (`#rrggbb`) + rotation angle derived from the seed `hex`.
+/// Shared by the Grin-mark avatar and the bare-background variant so both draw
+/// the byte-identical gradient for one key. Keep this math in lockstep with the
+/// shared reference port.
+fn gradient_params(hex: &str) -> (String, String, f64) {
+	let hash = Sha256::digest(hex.as_bytes());
+	let base = ((u16::from(hash[0]) << 8 | u16::from(hash[1])) as f64 / 65_535.0) * 360.0;
+	let offset = 40.0 + (hash[2] as f64 / 255.0) * 120.0;
+	let h2 = (base + offset) % 360.0;
+	let angle = (hash[3] as f64 / 255.0) * 360.0;
+	let c1 = hsl_to_rgb(base, 0.62, 0.55);
+	let c2 = hsl_to_rgb(h2, 0.62, 0.42);
+	(c1, c2, angle)
+}
+
+/// The gradient avatar as a standalone SVG document, seeded by `hex` (lowercase
+/// hex pubkey). `id_suffix` makes the gradient element id unique when several
+/// are inlined into ONE html document; for a standalone document (how egui
+/// rasterizes each one) `""` is fine.
+pub fn gradient_avatar_svg(hex: &str, size: u32, id_suffix: &str) -> String {
+	let (c1, c2, angle) = gradient_params(hex);
+
+	let target = size as f64 * LOGO_FRAC;
+	let scale = target / GRIN_NATIVE;
+	let off = (size as f64 - target) / 2.0;
+	format!(
+		r##"<svg xmlns="http://www.w3.org/2000/svg" width="{size}" height="{size}" viewBox="0 0 {size} {size}" role="img"><defs><linearGradient id="g{id_suffix}" gradientUnits="objectBoundingBox" gradientTransform="rotate({angle:.1},0.5,0.5)"><stop offset="0" stop-color="{c1}"/><stop offset="1" stop-color="{c2}"/></linearGradient></defs><rect width="{size}" height="{size}" fill="url(#g{id_suffix})"/><g transform="translate({off:.2},{off:.2}) scale({scale:.4})"><path d="{GRIN_PATH}" fill="#000000" fill-opacity="{LOGO_OPACITY}"/></g></svg>"##
+	)
+}