diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1acc26b6e4..a3400f3ffa 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -80,13 +80,23 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       libs_tag: ${{ steps.libs_commit.outputs.tag }}
+      core_changed: ${{ steps.core.outputs.core }}
     steps:
       - name: Clone project
-        if: github.event_name == 'push'
+        if: github.event_name == 'push' || github.event_name == 'pull_request'
         uses: actions/checkout@v3
         with:
           fetch-depth: 2
 
+      - name: Check chat core change
+        id: core
+        if: github.event_name == 'pull_request'
+        env:
+          BASE: ${{ github.event.pull_request.base.sha }}
+        run: |
+          git fetch -q --depth=1 origin "$BASE"
+          python3 scripts/ci/packages_release.py changes "$BASE" | grep '^core=' >> "$GITHUB_OUTPUT"
+
       - name: Build changelog
         id: build_changelog
         if: startsWith(github.ref, 'refs/tags/v')
@@ -122,35 +132,26 @@ jobs:
             echo "version=$version" >> $GITHUB_OUTPUT
           fi
 
-      - name: Clone libs repo
-        if: steps.check_version.outputs.version
-        uses: actions/checkout@v3
-        with:
-          repository: ${{ github.repository }}-libs
-          token: ${{ secrets.NODEJS_REPO_TOKEN }}
-          path: libs-repo
-
-      - name: Commit and tag libs release
+      - name: Record libs release
         id: libs_commit
         if: steps.check_version.outputs.version
-        working-directory: libs-repo
+        env:
+          GH_TOKEN: ${{ secrets.NODEJS_REPO_TOKEN }}
+          LIBS_REPOSITORY: ${{ github.repository }}-libs
+          VERSION: ${{ steps.check_version.outputs.version }}
         run: |
-          tag=core-${{ steps.check_version.outputs.version }}
-          printf 'version: %s\ncommit: %s\n' "${{ steps.check_version.outputs.version }}" "${{ github.sha }}" > core-release
-          git config user.name "SimpleX Chat"
-          git config user.email "build@simplex.chat"
-          git add core-release
-          git commit -m "$tag"
-          git tag "$tag"
-          git push --atomic origin HEAD "$tag"
-          echo "tag=$tag" >> $GITHUB_OUTPUT
+          commit=$(python3 scripts/ci/packages_release.py record --core "$VERSION" --commit "$GITHUB_SHA")
+          echo "tag=core-$VERSION" >> "$GITHUB_OUTPUT"
+          echo "commit=$commit" >> "$GITHUB_OUTPUT"
 
+      # creates the tag on the commit that recorded the release
       - name: Create libs release
         if: steps.check_version.outputs.version
         uses: softprops/action-gh-release@v2
         with:
           repository: ${{ github.repository }}-libs
           tag_name: ${{ steps.libs_commit.outputs.tag }}
+          target_commitish: ${{ steps.libs_commit.outputs.commit }}
           token: ${{ secrets.NODEJS_REPO_TOKEN }}
 
 # =========================
@@ -300,8 +301,9 @@ jobs:
           done
           strip /out/simplex-chat
 
+      # Also for pull requests that change the chat core, for the package tests (packages-pr).
       - name: Build library
-        if: needs.maybe-release.outputs.libs_tag && matrix.libs
+        if: matrix.libs && (needs.maybe-release.outputs.libs_tag || (needs.maybe-release.outputs.core_changed && matrix.arch == 'x86_64'))
         shell: docker exec -t builder sh -eu {0}
         run: |
           SKIP_VLC=1 scripts/desktop/build-lib-linux.sh
@@ -310,6 +312,14 @@ jobs:
           find apps/multiplatform/common/src/commonMain/cpp/desktop/libs/linux-${{ matrix.arch }} -maxdepth 1 -type f -exec cp {} release-libs/$name/libs/ \;
           (cd release-libs/$name && zip -r ../$name.zip libs)
 
+      - name: Upload library artifact
+        if: matrix.libs && needs.maybe-release.outputs.core_changed && matrix.arch == 'x86_64'
+        uses: actions/upload-artifact@v7
+        with:
+          name: simplex-chat-libs-linux-${{ matrix.arch }}
+          path: release-libs/simplex-chat-libs-linux-${{ matrix.arch }}.zip
+          if-no-files-found: error
+
       - name: Upload library
         if: needs.maybe-release.outputs.libs_tag && matrix.libs
         uses: softprops/action-gh-release@v2
@@ -837,3 +847,34 @@ jobs:
           bin_hash: ${{ steps.windows_desktop_build.outputs.package_hash }}
           github_ref: ${{ github.ref }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
+
+# =========================
+#   Packages release
+# =========================
+
+# A new library release is tested with the Node.js and Python packages and updates them in a release PR.
+
+  packages:
+    needs: [maybe-release, build-linux, build-linux-postgres, build-macos, build-windows]
+    if: ${{ !cancelled() && needs.maybe-release.outputs.libs_tag }}
+    # the called workflow can't be granted more than its caller, and its publish job needs these
+    permissions:
+      contents: read
+      id-token: write
+    uses: ./.github/workflows/packages.yml
+    with:
+      libs_release: ${{ needs.maybe-release.outputs.libs_tag }}
+    secrets: inherit
+
+# A pull request that changes the chat core is tested with the Node.js and Python packages.
+
+  packages-pr:
+    needs: [maybe-release, build-linux]
+    # build-linux uploads the library before its chat tests run
+    if: ${{ !cancelled() && needs.maybe-release.outputs.core_changed }}
+    permissions:
+      contents: read
+      id-token: write
+    uses: ./.github/workflows/packages.yml
+    with:
+      libs_artifact: true
diff --git a/.github/workflows/desktop-linux.yml b/.github/workflows/desktop-linux.yml
new file mode 100644
index 0000000000..f826ccbbfc
--- /dev/null
+++ b/.github/workflows/desktop-linux.yml
@@ -0,0 +1,500 @@
+name: desktop-linux
+
+# A push runs the jobs only when its head commit's message asks for them: see scripts/ci/desktop-linux/README.md.
+on:
+  push:
+    branches:
+      - "**"
+      # a squash merge's message lists the merged commits' subjects, with their tags
+      - "!master"
+      - "!stable"
+  workflow_dispatch:
+    inputs:
+      claude:
+        description: Also run the Claude job, which spends the Claude subscription's usage limits
+        type: boolean
+        default: false
+      backend:
+        description: Also start the test backend and test the released app
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+  actions: read
+
+concurrency:
+  # a push that asks for no run doesn't cancel one that does
+  group: desktop-linux-${{ github.ref }}-${{ github.event_name == 'workflow_dispatch' || contains(github.event.head_commit.message, '[app-ci]') || contains(github.event.head_commit.message, '[app-ci:desktop]') || contains(github.event.head_commit.message, '[claude-test]') || contains(github.event.head_commit.message, '[claude-test:desktop]') }}
+  cancel-in-progress: true
+
+env:
+  GHC_VER: 9.6.3
+  CABAL_VER: 3.10.2.0
+  JAVA_VER: 17
+  CORE_PKG: desktop-core-linux-x86_64.tar.gz
+  BACKEND_PKG: desktop-linux-backend.tar.gz
+
+jobs:
+  plan:
+    name: choose jobs, find earlier builds
+    if: >-
+      github.event_name == 'workflow_dispatch' ||
+      contains(github.event.head_commit.message, '[app-ci]') ||
+      contains(github.event.head_commit.message, '[app-ci:desktop]') ||
+      contains(github.event.head_commit.message, '[claude-test]') ||
+      contains(github.event.head_commit.message, '[claude-test:desktop]')
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    outputs:
+      run-claude: ${{ steps.jobs.outputs.claude }}
+      run-backend: ${{ steps.jobs.outputs.backend }}
+      backend: ${{ steps.names.outputs.backend }}
+      backend-run: ${{ steps.backend.outputs.run-id }}
+    steps:
+      - name: Choose jobs
+        id: jobs
+        env:
+          CLAUDE: ${{ inputs.claude || contains(github.event.head_commit.message, '[claude-test]') || contains(github.event.head_commit.message, '[claude-test:desktop]') }}
+          BACKEND: ${{ inputs.backend || contains(github.event.head_commit.message, '[ci-backend]') }}
+        run: |
+          echo "claude=$CLAUDE" | tee -a "$GITHUB_OUTPUT"
+          echo "backend=$BACKEND" | tee -a "$GITHUB_OUTPUT"
+
+      - name: Checkout code
+        if: steps.jobs.outputs.backend == 'true'
+        uses: actions/checkout@v5
+
+      # artifacts are named after the sources they are built from, so a run uses one that an earlier run uploaded
+      - name: Artifact names
+        id: names
+        if: steps.jobs.outputs.backend == 'true'
+        run: echo "backend=desktop-linux-backend-${{ hashFiles('src/**', 'apps/simplex-chat/**', 'apps/simplex-directory-service/Main.hs', 'apps/simplex-directory-service/src/**', 'cabal.project', 'simplex-chat.cabal', 'scripts/ci/desktop-linux/build-backend.sh') }}" >> "$GITHUB_OUTPUT"
+
+      - name: Find backend
+        id: backend
+        if: steps.jobs.outputs.backend == 'true'
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: scripts/ci/desktop-linux/earlier-run.sh "${{ steps.names.outputs.backend }}"
+
+  backend:
+    name: test backend for the app
+    needs: plan
+    if: needs.plan.outputs.run-backend == 'true' && needs.plan.outputs.backend-run == ''
+    runs-on: ubuntu-24.04
+    timeout-minutes: 150
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Show runner
+        run: |
+          lsb_release -ds
+          nproc
+          free -h
+          df -h /
+
+      - name: Setup Haskell
+        id: haskell
+        uses: simplex-chat/setup-haskell-action@v2
+        with:
+          ghc-version: ${{ env.GHC_VER }}
+          cabal-version: ${{ env.CABAL_VER }}
+
+      # before the first backend store exists, the core library's has most of the same Hackage dependencies
+      - name: Restore cabal store
+        id: cabal-cache
+        uses: actions/cache/restore@v5
+        with:
+          path: |
+            ${{ steps.haskell.outputs.cabal-store }}
+            dist-newstyle
+          key: desktop-linux-backend-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-${{ github.run_id }}
+          restore-keys: |
+            desktop-linux-backend-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-
+            desktop-linux-backend-store-ghc${{ env.GHC_VER }}-
+            desktop-linux-core-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-
+
+      - name: Install libraries
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libffi-dev libgmp-dev libnuma-dev libssl-dev zlib1g-dev
+
+      - name: Build backend
+        run: scripts/ci/desktop-linux/build-backend.sh ~/backend/${{ env.BACKEND_PKG }}
+
+      - name: Save cabal store
+        if: ${{ !cancelled() }}
+        uses: actions/cache/save@v5
+        with:
+          path: |
+            ${{ steps.haskell.outputs.cabal-store }}
+            dist-newstyle
+          key: ${{ steps.cabal-cache.outputs.cache-primary-key }}
+
+      - name: Upload backend
+        uses: actions/upload-artifact@v6
+        with:
+          name: ${{ needs.plan.outputs.backend }}
+          path: ~/backend/${{ env.BACKEND_PKG }}
+          compression-level: 0
+          retention-days: 30
+          if-no-files-found: error
+
+  core:
+    name: core library for Linux
+    needs: plan
+    runs-on: ubuntu-24.04
+    timeout-minutes: 150
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Show runner
+        run: |
+          lsb_release -ds
+          nproc
+          free -h
+          df -h /
+
+      - name: Restore core library
+        id: core-cache
+        uses: actions/cache/restore@v5
+        with:
+          path: ~/core/${{ env.CORE_PKG }}
+          key: desktop-linux-core-${{ hashFiles('src/**', 'cabal.project', 'simplex-chat.cabal', 'PRIVACY.md', 'scripts/desktop/build-lib-linux.sh', 'scripts/ci/desktop-linux/build-core.sh') }}
+
+      - name: Setup Haskell
+        id: haskell
+        if: steps.core-cache.outputs.cache-hit != 'true'
+        uses: simplex-chat/setup-haskell-action@v2
+        with:
+          ghc-version: ${{ env.GHC_VER }}
+          cabal-version: ${{ env.CABAL_VER }}
+
+      - name: Restore cabal store
+        id: cabal-cache
+        if: steps.core-cache.outputs.cache-hit != 'true'
+        uses: actions/cache/restore@v5
+        with:
+          path: |
+            ${{ steps.haskell.outputs.cabal-store }}
+            dist-newstyle
+          key: desktop-linux-core-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-${{ github.run_id }}
+          restore-keys: |
+            desktop-linux-core-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-
+            desktop-linux-core-store-ghc${{ env.GHC_VER }}-
+
+      - name: Install libraries
+        if: steps.core-cache.outputs.cache-hit != 'true'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libffi-dev libgmp-dev libnuma-dev libssl-dev zlib1g-dev patchelf
+
+      - name: Build core library
+        if: steps.core-cache.outputs.cache-hit != 'true'
+        run: scripts/ci/desktop-linux/build-core.sh ~/core/${{ env.CORE_PKG }}
+
+      - name: Save cabal store
+        if: ${{ !cancelled() && steps.core-cache.outputs.cache-hit != 'true' }}
+        uses: actions/cache/save@v5
+        with:
+          path: |
+            ${{ steps.haskell.outputs.cabal-store }}
+            dist-newstyle
+          key: ${{ steps.cabal-cache.outputs.cache-primary-key }}
+
+      - name: Save core library
+        if: steps.core-cache.outputs.cache-hit != 'true'
+        uses: actions/cache/save@v5
+        with:
+          path: ~/core/${{ env.CORE_PKG }}
+          key: ${{ steps.core-cache.outputs.cache-primary-key }}
+
+      - name: Upload core library
+        uses: actions/upload-artifact@v6
+        with:
+          name: desktop-core-linux-x86_64
+          path: ~/core/${{ env.CORE_PKG }}
+          compression-level: 0
+          retention-days: 3
+          if-no-files-found: error
+
+  app:
+    name: desktop app under Xvfb
+    needs: [plan, core, backend]
+    # backend is skipped when it isn't asked for or an earlier run built it
+    if: ${{ !cancelled() && !failure() && needs.plan.result == 'success' }}
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+        with:
+          submodules: recursive
+
+      - name: Show runner
+        run: |
+          lsb_release -ds
+          nproc
+          free -h
+          df -h /
+          echo "ANDROID_HOME=$ANDROID_HOME"
+          ls "$ANDROID_HOME/platforms" "$ANDROID_HOME/build-tools" || true
+
+      - name: Install tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y xvfb xdotool openbox imagemagick tesseract-ocr sqlite3 fonts-dejavu-core
+          dpkg-query -W xvfb xdotool openbox imagemagick tesseract-ocr sqlite3 fonts-dejavu-core
+
+      - name: Download core library
+        uses: actions/download-artifact@v7
+        with:
+          name: desktop-core-linux-x86_64
+          path: ~/core
+
+      - name: Install core library
+        id: core
+        run: scripts/ci/desktop-linux/install-core.sh ~/core/${{ env.CORE_PKG }}
+
+      - name: Download backend
+        if: needs.plan.outputs.run-backend == 'true'
+        uses: actions/download-artifact@v7
+        with:
+          name: ${{ needs.plan.outputs.backend }}
+          path: ~/backend
+          run-id: ${{ needs.plan.outputs.backend-run || github.run_id }}
+          github-token: ${{ github.token }}
+
+      - name: Start test backend
+        id: backend
+        if: needs.plan.outputs.run-backend == 'true'
+        timeout-minutes: 30
+        run: scripts/ci/desktop-linux/backend.sh start ~/backend/${{ env.BACKEND_PKG }} "$RUNNER_TEMP/backend"
+
+      # the app and its tests are still built when the backend fails
+      - name: Setup Java
+        if: ${{ !cancelled() && steps.core.outcome == 'success' }}
+        uses: actions/setup-java@v5
+        with:
+          distribution: corretto
+          java-version: ${{ env.JAVA_VER }}
+          cache: gradle
+
+      - name: Build app
+        id: build
+        if: ${{ !cancelled() && steps.core.outcome == 'success' }}
+        working-directory: apps/multiplatform
+        run: |
+          ./gradlew --no-daemon --console=plain -Psimplex.assets.dir=../../assets :desktop:createDistributable
+          app=release/main/app/simplex
+          ls -la "$app/bin" "$app/lib/app/resources"
+          du -sh "$app"
+          LD_LIBRARY_PATH="$app/lib/app/resources" ldd "$app/lib/app/resources/libapp-lib.so"
+
+      - name: Run desktop tests
+        if: ${{ !cancelled() && steps.build.outcome == 'success' }}
+        working-directory: apps/multiplatform
+        run: ./gradlew --no-daemon --console=plain -Psimplex.assets.dir=../../assets :common:desktopTest
+
+      - name: Report desktop tests
+        if: ${{ !cancelled() && steps.build.outcome == 'success' }}
+        run: scripts/ci/desktop-linux/test-summary.py apps/multiplatform/common/build/test-results/desktopTest
+
+      - name: Run smoke test
+        if: ${{ !cancelled() && steps.build.outcome == 'success' && steps.backend.outcome != 'failure' }}
+        env:
+          BACKEND: ${{ steps.backend.outcome }}
+        run: |
+          if [ "$BACKEND" = success ]; then
+            export NAMES_SERVER=$(cat "$RUNNER_TEMP/backend/names-server")
+            cases=backend
+          fi
+          scripts/ci/desktop-linux/smoke-test.sh apps/multiplatform/release/main/app/simplex "$RUNNER_TEMP/smoke-test" ${cases:-}
+
+      - name: Stop test backend
+        if: ${{ !cancelled() && steps.backend.outcome != 'skipped' }}
+        run: scripts/ci/desktop-linux/backend.sh stop "$RUNNER_TEMP/backend"
+
+      - name: Upload smoke test results
+        if: ${{ !cancelled() }}
+        uses: actions/upload-artifact@v6
+        with:
+          name: desktop-smoke-test
+          path: ${{ runner.temp }}/smoke-test
+          retention-days: 3
+          if-no-files-found: warn
+
+      - name: Upload desktop test report
+        if: ${{ !cancelled() }}
+        uses: actions/upload-artifact@v6
+        with:
+          name: desktop-test-report
+          path: |
+            apps/multiplatform/common/build/reports/tests/desktopTest
+            apps/multiplatform/common/build/test-results/desktopTest
+          retention-days: 3
+          if-no-files-found: warn
+
+      - name: Upload backend logs
+        if: ${{ !cancelled() && steps.backend.outcome != 'skipped' }}
+        uses: actions/upload-artifact@v6
+        with:
+          name: desktop-backend-logs
+          path: ${{ runner.temp }}/backend/*.log
+          retention-days: 3
+          if-no-files-found: warn
+
+  # Claude Code repeats the smoke test with the ui helper. Each run spends the Claude subscription's usage
+  # limits, so it runs only when asked for. The app-sim-claude environment's branch rule decides which branches
+  # may use the token.
+  claude:
+    name: Claude tests the desktop app
+    needs: [plan, core, backend]
+    if: ${{ !cancelled() && !failure() && needs.plan.outputs.run-claude == 'true' }}
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    environment:
+      name: app-sim-claude
+      deployment: false
+    concurrency:
+      group: desktop-linux-claude-${{ github.ref }}
+      cancel-in-progress: true
+    env:
+      # the first release with Haiku 5.5's token counts right (2.1.293 added the model, 2.1.296 fixed its counts)
+      CLAUDE_CODE_VERSION: 2.1.296
+      CLAUDE_MODEL: claude-haiku-5-5
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+        with:
+          submodules: recursive
+          persist-credentials: false
+
+      - name: Install tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y xvfb xdotool openbox imagemagick tesseract-ocr sqlite3 fonts-dejavu-core
+          dpkg-query -W xvfb xdotool openbox imagemagick tesseract-ocr sqlite3 fonts-dejavu-core
+
+      - name: Download core library
+        uses: actions/download-artifact@v7
+        with:
+          name: desktop-core-linux-x86_64
+          path: ~/core
+
+      - name: Install core library
+        run: scripts/ci/desktop-linux/install-core.sh ~/core/${{ env.CORE_PKG }}
+
+      - name: Download backend
+        if: needs.plan.outputs.run-backend == 'true'
+        uses: actions/download-artifact@v7
+        with:
+          name: ${{ needs.plan.outputs.backend }}
+          path: ~/backend
+          run-id: ${{ needs.plan.outputs.backend-run || github.run_id }}
+          github-token: ${{ github.token }}
+
+      - name: Start test backend
+        if: needs.plan.outputs.run-backend == 'true'
+        timeout-minutes: 30
+        run: scripts/ci/desktop-linux/backend.sh start ~/backend/${{ env.BACKEND_PKG }} "$RUNNER_TEMP/backend"
+
+      - name: Setup Java
+        uses: actions/setup-java@v5
+        with:
+          distribution: corretto
+          java-version: ${{ env.JAVA_VER }}
+          cache: gradle
+
+      - name: Build app
+        working-directory: apps/multiplatform
+        run: ./gradlew --no-daemon --console=plain -Psimplex.assets.dir=../../assets :desktop:createDistributable
+
+      # ui goes on every shell's PATH, where Claude's Bash tool finds it whatever environment it builds
+      - name: Install Claude Code and the ui command
+        run: |
+          npm install --prefix "$RUNNER_TEMP/claude-code" "@anthropic-ai/claude-code@$CLAUDE_CODE_VERSION"
+          echo "$RUNNER_TEMP/claude-code/node_modules/.bin" >> "$GITHUB_PATH"
+          printf '#!/bin/sh\nexec %s/scripts/ci/desktop-linux/ui "$@"\n' "$PWD" | sudo tee /usr/local/bin/ui
+          sudo chmod +x /usr/local/bin/ui
+
+      - name: Start the app
+        run: scripts/ci/desktop-linux/smoke-test.sh apps/multiplatform/release/main/app/simplex "$RUNNER_TEMP/claude-test/screens" start
+
+      # Claude's Bash is limited to single ui commands by the guard hook in claude-test.sh. Claude Code's credential
+      # scrub stays off: on Linux it forces its whole Bash sandbox (bubblewrap, socat), which ui isn't set up for.
+      - name: Run Claude
+        id: claude
+        env:
+          CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: 1
+        run: scripts/ci/desktop-linux/claude-test.sh "$RUNNER_TEMP/claude-test" "$RUNNER_TEMP/claude-transcript.jsonl"
+
+      - name: Report Claude usage
+        if: ${{ !cancelled() && steps.claude.outcome != 'skipped' }}
+        run: scripts/ci/desktop-linux/claude-usage.py "$RUNNER_TEMP/claude-transcript.jsonl" "$RUNNER_TEMP/claude-usage.json"
+
+      - name: Stop test backend
+        if: ${{ !cancelled() && needs.plan.outputs.run-backend == 'true' }}
+        run: scripts/ci/desktop-linux/backend.sh stop "$RUNNER_TEMP/backend"
+
+      - name: Upload Claude test results
+        if: ${{ !cancelled() }}
+        uses: actions/upload-artifact@v6
+        with:
+          name: desktop-claude-test
+          path: |
+            ${{ runner.temp }}/claude-test
+            ${{ runner.temp }}/claude-transcript.jsonl
+            ${{ runner.temp }}/claude-transcript.jsonl.stderr
+            ${{ runner.temp }}/claude-transcript.jsonl.guard.log
+            ${{ runner.temp }}/claude-usage.json
+          retention-days: 7
+          if-no-files-found: warn
+
+      - name: Upload backend logs
+        if: ${{ !cancelled() && needs.plan.outputs.run-backend == 'true' }}
+        uses: actions/upload-artifact@v6
+        with:
+          name: desktop-claude-backend-logs
+          path: ${{ runner.temp }}/backend/*.log
+          retention-days: 3
+          if-no-files-found: warn
+
+  # the latest release's onboarding, to tell a branch's own failure from the runner's
+  release:
+    name: released app under Xvfb
+    needs: plan
+    if: needs.plan.outputs.run-backend == 'true'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+          filter: tree:0
+
+      - name: Download released app
+        run: scripts/ci/desktop-linux/release-app.sh "$RUNNER_TEMP/release"
+
+      - name: Install UI tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y xvfb xdotool openbox imagemagick tesseract-ocr
+          dpkg-query -W xvfb xdotool openbox imagemagick tesseract-ocr
+
+      - name: Run smoke test
+        run: scripts/ci/desktop-linux/smoke-test.sh "$RUNNER_TEMP/release/app/opt/simplex" "$RUNNER_TEMP/smoke-test" onboarding
+
+      - name: Upload smoke test results
+        if: ${{ !cancelled() }}
+        uses: actions/upload-artifact@v6
+        with:
+          name: desktop-release-smoke-test
+          path: ${{ runner.temp }}/smoke-test
+          retention-days: 3
+          if-no-files-found: warn
diff --git a/.github/workflows/ios-sim.yml b/.github/workflows/ios-sim.yml
new file mode 100644
index 0000000000..5d44162369
--- /dev/null
+++ b/.github/workflows/ios-sim.yml
@@ -0,0 +1,348 @@
+name: ios-sim
+
+on:
+  push:
+    branches:
+      - '**'
+      # a squash merge's message lists the merged commits' subjects, with their tags
+      - '!master'
+      - '!stable'
+  workflow_dispatch:
+    inputs:
+      claude:
+        description: Also run the Claude session
+        type: boolean
+        default: false
+      backend:
+        description: Start the test backend
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+  actions: read
+
+concurrency:
+  # a push that asks for no run must not cancel one that does
+  group: ios-sim-${{ github.ref }}-${{ (github.event_name == 'workflow_dispatch' || contains(github.event.head_commit.message, '[app-ci]') || contains(github.event.head_commit.message, '[app-ci:ios]') || contains(github.event.head_commit.message, '[claude-test]') || contains(github.event.head_commit.message, '[claude-test:ios]')) && 'requested' || github.run_id }}
+  cancel-in-progress: true
+
+env:
+  GHC_VER: 9.6.3
+  CABAL_VER: 3.10.2.0
+  CORE_PKG: pkg-ios-aarch64-swift-json.zip
+  BACKEND_PKG: ios-sim-backend.zip
+  HOMEBREW_NO_AUTO_UPDATE: 1
+  HOMEBREW_NO_INSTALL_CLEANUP: 1
+  # newer images add Command Line Tools whose macOS SDK the default Xcode's linker cannot read
+  DEVELOPER_DIR: /Applications/Xcode.app/Contents/Developer
+
+jobs:
+  plan:
+    name: find earlier builds
+    if: >-
+      github.event_name == 'workflow_dispatch' ||
+      contains(github.event.head_commit.message, '[app-ci]') ||
+      contains(github.event.head_commit.message, '[app-ci:ios]') ||
+      contains(github.event.head_commit.message, '[claude-test]') ||
+      contains(github.event.head_commit.message, '[claude-test:ios]')
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    outputs:
+      core: ${{ steps.names.outputs.core }}
+      backend: ${{ steps.names.outputs.backend }}
+      core-run: ${{ steps.core.outputs.run-id }}
+      backend-run: ${{ steps.backend.outputs.run-id }}
+      claude: ${{ inputs.claude || contains(github.event.head_commit.message, '[claude-test]') || contains(github.event.head_commit.message, '[claude-test:ios]') }}
+      start-backend: ${{ inputs.backend || contains(github.event.head_commit.message, '[ci-backend]') }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      # artifacts are named after the sources they are built from, so a run uses one that an earlier run uploaded
+      - name: Artifact names
+        id: names
+        run: |
+          echo "core=ios-sim-core-${{ hashFiles('src/**', 'cabal.project', 'simplex-chat.cabal', 'scripts/ci/ios-sim/build-core.sh') }}" >> "$GITHUB_OUTPUT"
+          echo "backend=ios-sim-backend-${{ hashFiles('src/**', 'apps/simplex-chat/**', 'apps/simplex-directory-service/Main.hs', 'apps/simplex-directory-service/src/**', 'cabal.project', 'simplex-chat.cabal', 'scripts/ci/ios-sim/build-backend.sh') }}" >> "$GITHUB_OUTPUT"
+
+      - name: Find core library
+        id: core
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: scripts/ci/ios-sim/earlier-run.sh "${{ steps.names.outputs.core }}"
+
+      - name: Find backend
+        id: backend
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: scripts/ci/ios-sim/earlier-run.sh "${{ steps.names.outputs.backend }}"
+
+  core:
+    name: core library for the iOS simulator
+    needs: plan
+    if: needs.plan.outputs.core-run == ''
+    runs-on: macos-latest
+    timeout-minutes: 240
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Show runner
+        run: |
+          sw_vers
+          sysctl -n hw.ncpu hw.memsize
+          df -h /
+          xcodebuild -version
+          xcrun --show-sdk-path
+          ls /Library/Developer/CommandLineTools/SDKs || true
+
+      - name: Use the macOS 26 SDK
+        run: scripts/ci/ios-sim/use-macos26-sdk.sh
+
+      # without ~/.cabal, cabal 3.10 keeps its store in XDG directories, not where setup-haskell reports it
+      - name: Use ~/.cabal for cabal
+        run: echo "CABAL_DIR=$HOME/.cabal" >> "$GITHUB_ENV"
+
+      - name: Setup Haskell
+        id: haskell
+        uses: simplex-chat/setup-haskell-action@v2
+        with:
+          ghc-version: ${{ env.GHC_VER }}
+          cabal-version: ${{ env.CABAL_VER }}
+
+      - name: Restore cabal store
+        id: cabal-cache
+        uses: actions/cache/restore@v4
+        with:
+          path: |
+            ${{ steps.haskell.outputs.cabal-store }}
+            dist-newstyle
+          key: ios-sim-core-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-${{ github.run_id }}
+          restore-keys: |
+            ios-sim-core-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-
+            ios-sim-core-store-ghc${{ env.GHC_VER }}-
+
+      - name: Install libraries
+        run: brew install openssl@3 libffi gmp
+
+      - name: Build core library
+        id: build
+        run: scripts/ci/ios-sim/build-core.sh ~/Downloads/${{ env.CORE_PKG }}
+
+      - name: Save cabal store
+        if: ${{ !cancelled() }}
+        uses: actions/cache/save@v4
+        with:
+          path: |
+            ${{ steps.haskell.outputs.cabal-store }}
+            dist-newstyle
+          key: ${{ steps.cabal-cache.outputs.cache-primary-key }}
+
+      - name: Patch core library for the simulator
+        run: scripts/ci/ios-sim/prepare-libs.sh
+
+      - name: Upload core library
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ needs.plan.outputs.core }}
+          path: ~/Downloads/${{ env.CORE_PKG }}
+          compression-level: 0
+          retention-days: 30
+          if-no-files-found: error
+
+  backend:
+    name: test backend for the app
+    needs: plan
+    if: needs.plan.outputs.start-backend == 'true' && needs.plan.outputs.backend-run == ''
+    runs-on: macos-latest
+    timeout-minutes: 240
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Show runner
+        run: |
+          sw_vers
+          xcodebuild -version
+          xcrun --show-sdk-path
+          ls /Library/Developer/CommandLineTools/SDKs || true
+
+      - name: Use the macOS 26 SDK
+        run: scripts/ci/ios-sim/use-macos26-sdk.sh
+
+      - name: Use ~/.cabal for cabal
+        run: echo "CABAL_DIR=$HOME/.cabal" >> "$GITHUB_ENV"
+
+      - name: Setup Haskell
+        id: haskell
+        uses: simplex-chat/setup-haskell-action@v2
+        with:
+          ghc-version: ${{ env.GHC_VER }}
+          cabal-version: ${{ env.CABAL_VER }}
+
+      - name: Restore cabal store
+        id: cabal-cache
+        uses: actions/cache/restore@v4
+        with:
+          path: |
+            ${{ steps.haskell.outputs.cabal-store }}
+            dist-newstyle
+          key: ios-sim-backend-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-${{ github.run_id }}
+          restore-keys: |
+            ios-sim-backend-store-ghc${{ env.GHC_VER }}-${{ hashFiles('cabal.project', 'simplex-chat.cabal') }}-
+            ios-sim-backend-store-ghc${{ env.GHC_VER }}-
+
+      - name: Build backend
+        run: scripts/ci/ios-sim/build-backend.sh ~/Downloads/${{ env.BACKEND_PKG }}
+
+      - name: Save cabal store
+        if: ${{ !cancelled() }}
+        uses: actions/cache/save@v4
+        with:
+          path: |
+            ${{ steps.haskell.outputs.cabal-store }}
+            dist-newstyle
+          key: ${{ steps.cabal-cache.outputs.cache-primary-key }}
+
+      - name: Upload backend
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ needs.plan.outputs.backend }}
+          path: ~/Downloads/${{ env.BACKEND_PKG }}
+          compression-level: 0
+          retention-days: 30
+          if-no-files-found: error
+
+  app:
+    name: app in the iOS simulator
+    needs: [plan, core, backend]
+    # core and backend are skipped when an earlier run built them, and backend also when the run doesn't start it
+    if: ${{ !cancelled() && !failure() && needs.plan.result == 'success' }}
+    runs-on: macos-latest
+    environment:
+      name: ${{ needs.plan.outputs.claude == 'true' && 'app-sim-claude' || '' }}
+      deployment: false
+    timeout-minutes: 330
+    env:
+      CLAUDE_RUN: ${{ needs.plan.outputs.claude }}
+      START_BACKEND: ${{ needs.plan.outputs.start-backend }}
+    steps:
+      # the job later holds the Claude token, so the checkout's GitHub token is not left in .git/config
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Show runner
+        run: |
+          sw_vers
+          df -h /
+          xcodebuild -version
+          xcrun --show-sdk-path
+          ls /Library/Developer/CommandLineTools/SDKs || true
+          xcrun simctl list runtimes
+
+      - name: Use the macOS 26 SDK
+        run: scripts/ci/ios-sim/use-macos26-sdk.sh
+
+      - name: Download core library
+        uses: actions/download-artifact@v4
+        with:
+          name: ${{ needs.plan.outputs.core }}
+          path: ~/Downloads
+          run-id: ${{ needs.plan.outputs.core-run || github.run_id }}
+          github-token: ${{ github.token }}
+
+      - name: Prepare libraries
+        run: |
+          scripts/ci/ios-sim/prepare-libs.sh
+          scripts/ios/update-pbxproj.sh
+
+      - name: Download backend
+        if: env.START_BACKEND == 'true'
+        uses: actions/download-artifact@v4
+        with:
+          name: ${{ needs.plan.outputs.backend }}
+          path: ~/Downloads
+          run-id: ${{ needs.plan.outputs.backend-run || github.run_id }}
+          github-token: ${{ github.token }}
+
+      - name: Start test backend
+        if: env.START_BACKEND == 'true'
+        timeout-minutes: 30
+        run: scripts/ci/ios-sim/backend.sh start ~/Downloads/${{ env.BACKEND_PKG }} "$RUNNER_TEMP/backend"
+
+      - name: Build app
+        run: |
+          xcodebuild build -quiet \
+            -project apps/ios/SimpleX.xcodeproj \
+            -scheme "SimpleX (iOS)" \
+            -configuration Debug \
+            -destination 'generic/platform=iOS Simulator' \
+            -derivedDataPath "$RUNNER_TEMP/DerivedData" \
+            -onlyUsePackageVersionsFromResolvedFile \
+            -skipPackagePluginValidation \
+            -skipMacroValidation \
+            ARCHS=arm64 \
+            CODE_SIGN_STYLE=Manual \
+            CODE_SIGN_IDENTITY=- \
+            DEVELOPMENT_TEAM= \
+            PROVISIONING_PROFILE_SPECIFIER=
+
+      - name: Install AXe
+        run: scripts/ci/ios-sim/install-axe.sh
+
+      - name: Run smoke test
+        run: scripts/ci/ios-sim/smoke-test.sh "$RUNNER_TEMP/DerivedData/Build/Products/Debug-iphonesimulator/SimpleX.app" "$RUNNER_TEMP/smoke-test"
+
+      - name: Install Claude Code
+        if: env.CLAUDE_RUN == 'true'
+        run: |
+          npm install -g @anthropic-ai/claude-code@2.1.300
+          claude --version
+
+      - name: Run the device test plan with Claude
+        if: env.CLAUDE_RUN == 'true'
+        timeout-minutes: 240
+        env:
+          CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          BACKEND_DIR: ${{ env.START_BACKEND == 'true' && format('{0}/backend', runner.temp) || '' }}
+        run: scripts/ci/ios-sim/claude-test.sh "$RUNNER_TEMP/claude-test"
+
+      - name: Report Claude usage
+        if: ${{ always() && env.CLAUDE_RUN == 'true' }}
+        run: scripts/ci/ios-sim/claude-usage.sh "$RUNNER_TEMP/claude-test"
+
+      - name: Stop test backend
+        if: ${{ !cancelled() && env.START_BACKEND == 'true' }}
+        run: scripts/ci/ios-sim/backend.sh stop "$RUNNER_TEMP/backend"
+
+      - name: Upload smoke test results
+        if: ${{ !cancelled() }}
+        uses: actions/upload-artifact@v4
+        with:
+          name: ios-sim-smoke-test
+          path: ${{ runner.temp }}/smoke-test
+          retention-days: 3
+          if-no-files-found: warn
+
+      - name: Upload backend logs
+        if: ${{ !cancelled() && env.START_BACKEND == 'true' }}
+        uses: actions/upload-artifact@v4
+        with:
+          name: ios-sim-backend-logs
+          path: |
+            ${{ runner.temp }}/backend/*.log
+            ${{ runner.temp }}/backend/seed.md
+          retention-days: 3
+          if-no-files-found: warn
+
+      - name: Upload Claude test results
+        if: ${{ always() && env.CLAUDE_RUN == 'true' }}
+        uses: actions/upload-artifact@v4
+        with:
+          name: ios-sim-claude-test
+          path: ${{ runner.temp }}/claude-test
+          retention-days: 14
+          if-no-files-found: warn
diff --git a/.github/workflows/packages.yml b/.github/workflows/packages.yml
new file mode 100644
index 0000000000..01c2c1be33
--- /dev/null
+++ b/.github/workflows/packages.yml
@@ -0,0 +1,382 @@
+name: packages
+
+# Releases simplex-chat (npm, PyPI) and @simplex-chat/types (npm) from master and stable:
+# 1. A missing Node.js add-on release (nodejs-addon-<hash of its sources>) is built and uploaded to simplex-chat-libs.
+# 2. Versions that are not published yet are published, and recorded in releases.toml of simplex-chat-libs.
+#    npm prerelease versions get dist-tag beta, others latest.
+# 3. The release PR packages-release/<branch> pins new library and add-on releases with their SHA-256
+#    and bumps the versions of changed packages. Merging it publishes them (step 2).
+# Package tests run on every platform with the pinned libsimplex. build.yml runs them with the libsimplex it builds:
+# for pull requests that change the chat core (linux-x86_64), and for a new library release before its release PR.
+
+# Publishing uses trusted publishing (OIDC) for this workflow on npm and PyPI,
+# or the NPM_TOKEN and PYPI_API_TOKEN secrets when they are set.
+# Test repositories: variables NPM_SCOPE, PYPI_PROJECT and PYPI_URL / PYPI_UPLOAD_URL (TestPyPI)
+# publish under other names.
+
+# Secrets:
+# -------
+# NODEJS_REPO_TOKEN
+#  Only select repositories: simplex-chat-libs
+#  Permissions:
+#   * Contents (Read and Write)
+# RELEASE_PR_TOKEN
+#  Only select repositories: simplex-chat
+#  Permissions:
+#   * Contents (Read and Write)
+#   * Pull requests (Read and Write)
+#  A PR opened with GITHUB_TOKEN does not run the checks of other workflows.
+
+on:
+  workflow_dispatch:
+    inputs:
+      nodejs_version:
+        description: "simplex-chat npm version, bumped when needed by default"
+        required: false
+      types_version:
+        description: "@simplex-chat/types version, bumped when needed by default"
+        required: false
+      python_version:
+        description: "simplex-chat PyPI version, bumped when needed by default"
+        required: false
+  # build.yml: a pull request that changes the chat core, or a new library release
+  workflow_call:
+    inputs:
+      libs_artifact:
+        description: "test with simplex-chat-libs-linux-x86_64 built by the calling run"
+        type: boolean
+        default: false
+      libs_release:
+        description: "test with this simplex-chat-libs release"
+        type: string
+        default: ""
+  push:
+    branches:
+      - master
+      - stable
+    paths:
+      - "packages/simplex-chat-nodejs/**"
+      - "packages/simplex-chat-client/types/typescript/**"
+      - "packages/simplex-chat-python/**"
+      - ".github/workflows/packages.yml"
+  pull_request:
+    paths:
+      - "packages/simplex-chat-nodejs/**"
+      - "packages/simplex-chat-client/types/typescript/**"
+      - "packages/simplex-chat-python/**"
+      - ".github/workflows/packages.yml"
+
+concurrency:
+  # build.yml and this workflow both run for a pull request that changes the core and the packages
+  group: ${{ github.workflow }}-packages-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+permissions:
+  contents: read
+
+env:
+  NPM_SCOPE: ${{ vars.NPM_SCOPE }}
+  PYPI_PROJECT: ${{ vars.PYPI_PROJECT }}
+  PYPI_URL: ${{ vars.PYPI_URL }}
+
+jobs:
+  addon:
+    runs-on: ubuntu-latest
+    outputs:
+      tag: ${{ steps.tag.outputs.tag }}
+      release_branch: ${{ steps.branch.outputs.release_branch }}
+      missing: ${{ steps.release.outputs.missing }}
+      platforms: ${{ steps.plan.outputs.platforms }}
+      test: ${{ steps.plan.outputs.test }}
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v6
+
+      - name: Add-on release tag
+        id: tag
+        run: echo "tag=$(python3 scripts/ci/packages_release.py addon-tag)" >> "$GITHUB_OUTPUT"
+
+      - name: Release branch
+        id: branch
+        if: github.event_name != 'pull_request' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/stable')
+        run: echo "release_branch=true" >> "$GITHUB_OUTPUT"
+
+      - name: Check the add-on release
+        id: release
+        if: steps.branch.outputs.release_branch
+        env:
+          GH_TOKEN: ${{ secrets.NODEJS_REPO_TOKEN }}
+          LIBS_REPOSITORY: ${{ github.repository }}-libs
+          TAG: ${{ steps.tag.outputs.tag }}
+        run: |
+          if ! gh release view "$TAG" --repo "$LIBS_REPOSITORY" > /dev/null 2>&1; then
+            echo "missing=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Build plan
+        id: plan
+        env:
+          EVENT: ${{ github.event_name }}
+          BASE: ${{ github.event.pull_request.base.sha }}
+          RELEASE_MISSING: ${{ steps.release.outputs.missing }}
+          LIBS_ARTIFACT: ${{ inputs.libs_artifact }}
+          LIBS_RELEASE: ${{ inputs.libs_release }}
+        run: |
+          if [ -n "$BASE" ]; then git fetch -q --depth=1 origin "$BASE"; fi
+          python3 scripts/ci/packages_release.py build-plan --event "$EVENT" --base "$BASE" \
+            --release-missing "$RELEASE_MISSING" --libs-artifact "$LIBS_ARTIFACT" --libs-release "$LIBS_RELEASE" >> "$GITHUB_OUTPUT"
+
+  build:
+    name: "build ${{ matrix.platform }}"
+    needs: addon
+    if: needs.addon.outputs.platforms != '[]'
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 30
+    strategy:
+      fail-fast: false
+      matrix:
+        include: ${{ fromJSON(needs.addon.outputs.platforms) }}
+    defaults:
+      run:
+        shell: bash
+        working-directory: packages/simplex-chat-nodejs
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: 22
+
+      - name: Setup Python
+        uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+
+      # The local types: the dependency can be bumped to a version that is not published yet.
+      - name: Build simplex-chat (npm) and add-on
+        run: |
+          (cd ../simplex-chat-client/types/typescript && npm install --no-audit --no-fund && npx tsc)
+          npm install --ignore-scripts --no-save --no-audit --no-fund ../simplex-chat-client/types/typescript
+          npx --yes node-gyp rebuild
+          npx tsc && cp src/simplex.* dist
+          cp build/Release/simplex.node build/simplex-chat-nodejs-${{ matrix.platform }}.node
+
+      - name: Download libsimplex of this run
+        if: needs.addon.outputs.test && inputs.libs_artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: simplex-chat-libs-${{ matrix.platform }}
+          path: ${{ runner.temp }}/libsimplex
+
+      - name: Download libsimplex release
+        if: needs.addon.outputs.test && inputs.libs_release
+        env:
+          URL: https://github.com/${{ github.repository }}-libs/releases/download/${{ inputs.libs_release }}/simplex-chat-libs-${{ matrix.platform }}.zip
+        run: curl -fsSL --create-dirs -o "$RUNNER_TEMP/libsimplex/simplex-chat-libs-${{ matrix.platform }}.zip" "$URL"
+
+      - name: Unpack libsimplex
+        if: needs.addon.outputs.test && (inputs.libs_artifact || inputs.libs_release)
+        run: python -m zipfile -e "$RUNNER_TEMP/libsimplex/simplex-chat-libs-${{ matrix.platform }}.zip" "$RUNNER_TEMP/libsimplex"
+
+      - name: Test simplex-chat (npm)
+        if: needs.addon.outputs.test
+        env:
+          SIMPLEX_LIBS_DIR: ${{ (inputs.libs_artifact || inputs.libs_release) && format('{0}/libsimplex/libs', runner.temp) || '' }}
+        # A failed test can leave chat controllers running, and jest then waits for them.
+        # Tests on the public preset servers fail in CI when a server is slow to connect.
+        run: npx jest --forceExit --testNamePattern '^(?!.*use preset servers)'
+
+      - name: Test simplex-chat (PyPI)
+        if: needs.addon.outputs.test
+        working-directory: packages/simplex-chat-python
+        run: |
+          python -m pip install -e ".[test]"
+          python -m pytest -q
+
+      - name: Upload add-on artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: simplex-nodejs-addon-${{ matrix.platform }}
+          path: packages/simplex-chat-nodejs/build/simplex-chat-nodejs-${{ matrix.platform }}.node
+          if-no-files-found: error
+
+  publish:
+    needs: addon
+    # Trusted publishing accepts this workflow only when it is not called by another one (build.yml).
+    if: needs.addon.outputs.release_branch && contains(github.workflow_ref, '/.github/workflows/packages.yml@')
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    # set by a publish step after it succeeds, so a failed publish still reports the earlier ones
+    outputs:
+      types: ${{ steps.types.outputs.version }}
+      nodejs: ${{ steps.nodejs.outputs.version }}
+      python: ${{ steps.python.outputs.version }}
+    env:
+      NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v6
+
+      - name: Versions to publish
+        id: plan
+        env:
+          GH_TOKEN: ${{ github.token }}
+          LIBS_REPOSITORY: ${{ github.repository }}-libs
+        run: python3 scripts/ci/packages_release.py publish-plan >> "$GITHUB_OUTPUT"
+
+      - name: Setup Node.js
+        if: steps.plan.outputs.types_version || steps.plan.outputs.nodejs_version
+        uses: actions/setup-node@v7
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org
+
+      - name: Setup Python
+        if: steps.plan.outputs.python_version
+        uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+
+      # Before the test names: the build installs @simplex-chat/types from this repository.
+      - name: Build and test simplex-chat (npm)
+        if: steps.plan.outputs.nodejs_version
+        working-directory: packages/simplex-chat-nodejs
+        run: |
+          (cd ../simplex-chat-client/types/typescript && npm install --no-audit --no-fund && npx tsc)
+          npm install --ignore-scripts --no-save --no-audit --no-fund ../simplex-chat-client/types/typescript
+          npx tsc && cp src/simplex.* dist
+          npx jest tests/libs.test.ts tests/api.unit.test.ts
+
+      - name: Use test package names
+        if: vars.NPM_SCOPE || vars.PYPI_PROJECT
+        run: python3 scripts/ci/packages_release.py test-names
+
+      - name: Publish @simplex-chat/types
+        id: types
+        if: steps.plan.outputs.types_version
+        working-directory: packages/simplex-chat-client/types/typescript
+        env:
+          VERSION: ${{ steps.plan.outputs.types_version }}
+          DIST_TAG: ${{ steps.plan.outputs.types_dist_tag }}
+        run: |
+          npm install --no-audit --no-fund
+          npm publish --provenance --access public --tag "$DIST_TAG"
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Publish simplex-chat (npm)
+        id: nodejs
+        if: steps.plan.outputs.nodejs_version
+        working-directory: packages/simplex-chat-nodejs
+        env:
+          VERSION: ${{ steps.plan.outputs.nodejs_version }}
+          DIST_TAG: ${{ steps.plan.outputs.nodejs_dist_tag }}
+        run: |
+          npm publish --provenance --access public --tag "$DIST_TAG"
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Build and test simplex-chat (PyPI)
+        if: steps.plan.outputs.python_version
+        working-directory: packages/simplex-chat-python
+        run: |
+          python -m pip install build -e ".[test]"
+          python -m pytest -q
+          python -m build
+
+      - name: Publish simplex-chat (PyPI)
+        if: steps.plan.outputs.python_version
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: packages/simplex-chat-python/dist
+          repository-url: ${{ vars.PYPI_UPLOAD_URL || 'https://upload.pypi.org/legacy/' }}
+          password: ${{ secrets.PYPI_API_TOKEN }}
+
+      - name: Report the published PyPI version
+        id: python
+        if: steps.plan.outputs.python_version
+        env:
+          VERSION: ${{ steps.plan.outputs.python_version }}
+        run: echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+  # The only job here that writes to simplex-chat-libs; publish runs npm and pip installs without its token.
+  record:
+    needs: publish
+    if: ${{ !cancelled() && (needs.publish.outputs.types || needs.publish.outputs.nodejs || needs.publish.outputs.python) }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v6
+
+      - name: Record published versions
+        env:
+          GH_TOKEN: ${{ secrets.NODEJS_REPO_TOKEN }}
+          LIBS_REPOSITORY: ${{ github.repository }}-libs
+          TYPES: ${{ needs.publish.outputs.types }}
+          NODEJS: ${{ needs.publish.outputs.nodejs }}
+          PYTHON: ${{ needs.publish.outputs.python }}
+        run: |
+          python3 scripts/ci/packages_release.py record --commit "$GITHUB_SHA" \
+            --types "$TYPES" --nodejs "$NODEJS" --python "$PYTHON"
+
+  release:
+    needs: [addon, build]
+    # A merged release PR changes only versions and pins.
+    if: >-
+      !cancelled() && needs.addon.outputs.release_branch && needs.build.result != 'failure'
+      && !startsWith(github.event.head_commit.message, 'packages: release')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      # Outside the checkout: the release PR commits every change in it.
+      - name: Download add-on artifacts
+        if: needs.addon.outputs.missing
+        uses: actions/download-artifact@v8
+        with:
+          pattern: simplex-nodejs-addon-*
+          merge-multiple: true
+          path: ${{ runner.temp }}/addons
+
+      - name: Create add-on release
+        if: needs.addon.outputs.missing
+        uses: softprops/action-gh-release@v3
+        with:
+          repository: ${{ github.repository }}-libs
+          tag_name: ${{ needs.addon.outputs.tag }}
+          files: ${{ runner.temp }}/addons/*.node
+          token: ${{ secrets.NODEJS_REPO_TOKEN }}
+
+      - name: Update pins and versions
+        id: prepare
+        env:
+          GH_TOKEN: ${{ secrets.NODEJS_REPO_TOKEN }}
+          LIBS_REPOSITORY: ${{ github.repository }}-libs
+          NODEJS_VERSION: ${{ inputs.nodejs_version }}
+          TYPES_VERSION: ${{ inputs.types_version }}
+          PYTHON_VERSION: ${{ inputs.python_version }}
+        run: |
+          python3 scripts/ci/packages_release.py prepare \
+            --nodejs-version "$NODEJS_VERSION" \
+            --types-version "$TYPES_VERSION" \
+            --python-version "$PYTHON_VERSION" \
+            --summary "$RUNNER_TEMP/summary.md"
+          echo "title=$(head -n 1 "$RUNNER_TEMP/summary.md")" >> "$GITHUB_OUTPUT"
+
+      - name: Create or update release PR
+        uses: peter-evans/create-pull-request@v8
+        with:
+          token: ${{ secrets.RELEASE_PR_TOKEN }}
+          branch: packages-release/${{ github.ref_name }}
+          base: ${{ github.ref_name }}
+          title: ${{ steps.prepare.outputs.title }}
+          commit-message: ${{ steps.prepare.outputs.title }}
+          body-path: ${{ runner.temp }}/summary.md
+          author: SimpleX Chat <build@simplex.chat>
+          committer: SimpleX Chat <build@simplex.chat>
+          delete-branch: true
diff --git a/apps/ios/Shared/Model/ChatModel.swift b/apps/ios/Shared/Model/ChatModel.swift
index 8f9496976c..ce2376989f 100644
--- a/apps/ios/Shared/Model/ChatModel.swift
+++ b/apps/ios/Shared/Model/ChatModel.swift
@@ -492,10 +492,27 @@ final class ChatModel: ObservableObject {
     // another in its place; only the badge alert shows regardless. Set while rendering, so not published.
     var chatListBanner: ChatListBanner?
 
+    var fileToOpen: (fileId: Int64, chatId: String?, open: (CIFile) -> Void)?
+
     func bannerSlotFree(for banner: ChatListBanner) -> Bool {
         chatListBanner == nil || chatListBanner == banner
     }
 
+    func openWhenReceived(_ file: CIFile, open: @escaping (CIFile) -> Void) {
+        fileToOpen = (fileId: file.fileId, chatId: chatId, open: open)
+    }
+
+    func receivedFileToOpen(_ file: CIFile) -> Bool {
+        if let f = fileToOpen { f.fileId == file.fileId && f.chatId == chatId } else { false }
+    }
+
+    func openReceivedFile(_ file: CIFile) {
+        if let f = fileToOpen, receivedFileToOpen(file) {
+            fileToOpen = nil
+            f.open(file)
+        }
+    }
+
     static let shared = ChatModel()
 
     let im = ItemsModel.shared
diff --git a/apps/ios/Shared/Model/SimpleXAPI.swift b/apps/ios/Shared/Model/SimpleXAPI.swift
index 2c82349bc8..58495a63ca 100644
--- a/apps/ios/Shared/Model/SimpleXAPI.swift
+++ b/apps/ios/Shared/Model/SimpleXAPI.swift
@@ -2899,6 +2899,9 @@ func processReceivedMsg(_ res: ChatEvent) async {
         await chatItemSimpleUpdate(user, aChatItem)
     case let .rcvFileComplete(user, aChatItem):
         await chatItemSimpleUpdate(user, aChatItem)
+        if active(user), let file = aChatItem.chatItem.file, m.receivedFileToOpen(file) {
+            await MainActor.run { m.openReceivedFile(file) }
+        }
     case let .rcvFileSndCancelled(user, aChatItem, _):
         await chatItemSimpleUpdate(user, aChatItem)
         Task { cleanupFile(aChatItem) }
diff --git a/apps/ios/Shared/Views/Chat/ChatItem/CIFileView.swift b/apps/ios/Shared/Views/Chat/ChatItem/CIFileView.swift
index 8bb76ca155..5c65a310b5 100644
--- a/apps/ios/Shared/Views/Chat/ChatItem/CIFileView.swift
+++ b/apps/ios/Shared/Views/Chat/ChatItem/CIFileView.swift
@@ -26,7 +26,7 @@ struct CIFileView: View {
     var body: some View {
         if smallViewSize != nil {
             fileIndicator()
-            .simultaneousGesture(TapGesture().onEnded(fileAction))
+            .simultaneousGesture(TapGesture().onEnded { fileAction(file) })
         } else {
             // reserve exact space for the overlaid meta (timestamp + all icons), rendered transparently - matches MsgContentView
             let encrypted: Bool? = if let fileSource = file?.fileSource { fileSource.cryptoArgs != nil } else { nil }
@@ -56,7 +56,7 @@ struct CIFileView: View {
             .padding(.bottom, 6)
             .padding(.leading, 10)
             .padding(.trailing, 12)
-            .simultaneousGesture(TapGesture().onEnded(fileAction))
+            .simultaneousGesture(TapGesture().onEnded { fileAction(file) })
             .disabled(!itemInteractive)
         }
     }
@@ -85,7 +85,7 @@ struct CIFileView: View {
         return false
     }
 
-    private func fileAction() {
+    private func fileAction(_ file: CIFile?) {
         logger.debug("CIFileView fileAction")
         if let file = file {
             switch (file.fileStatus) {
@@ -93,6 +93,7 @@ struct CIFileView: View {
                 if let prohibited = file.fileProhibited {
                     showProhibitedFileAlert(file, prohibited)
                 } else {
+                    m.openWhenReceived(file) { fileAction($0) }
                     Task {
                         logger.debug("CIFileView fileAction - in .rcvInvitation, .rcvAborted, in Task")
                         if let user = m.currentUser {
@@ -117,7 +118,7 @@ struct CIFileView: View {
             case .rcvComplete:
                 logger.debug("CIFileView fileAction - in .rcvComplete")
                 if let fileSource = getLoadedFileSource(file) {
-                    saveCryptoFile(fileSource)
+                    openFile(file, fileSource)
                 }
             case let .rcvError(rcvFileError):
                 logger.debug("CIFileView fileAction - in .rcvError")
@@ -128,12 +129,12 @@ struct CIFileView: View {
             case .sndStored:
                 logger.debug("CIFileView fileAction - in .sndStored")
                 if file.fileProtocol == .local, let fileSource = getLoadedFileSource(file) {
-                    saveCryptoFile(fileSource)
+                    openFile(file, fileSource)
                 }
             case .sndComplete:
                 logger.debug("CIFileView fileAction - in .sndComplete")
                 if let fileSource = getLoadedFileSource(file) {
-                    saveCryptoFile(fileSource)
+                    openFile(file, fileSource)
                 }
             case let .sndError(sndFileError):
                 logger.debug("CIFileView fileAction - in .sndError")
@@ -146,6 +147,14 @@ struct CIFileView: View {
         }
     }
 
+    private func openFile(_ file: CIFile, _ fileSource: CryptoFile) {
+        if isMarkdownFile(file) {
+            showMarkdownFile(file)
+        } else {
+            saveCryptoFile(fileSource)
+        }
+    }
+
     @ViewBuilder private func fileIndicator() -> some View {
         if let file = file {
             switch file.fileStatus {
diff --git a/apps/ios/Shared/Views/Chat/ChatItem/CIImageView.swift b/apps/ios/Shared/Views/Chat/ChatItem/CIImageView.swift
index fb6ccb1ea3..469fc5a3fc 100644
--- a/apps/ios/Shared/Views/Chat/ChatItem/CIImageView.swift
+++ b/apps/ios/Shared/Views/Chat/ChatItem/CIImageView.swift
@@ -54,6 +54,7 @@ struct CIImageView: View {
                                 if let prohibited = file.fileProhibited {
                                     showProhibitedFileAlert(file, prohibited)
                                 } else {
+                                    m.openWhenReceived(file) { _ in showFullScreenImage = true }
                                     Task {
                                         if let user = m.currentUser {
                                             await receiveFile(user: user, fileId: file.fileId)
diff --git a/apps/ios/Shared/Views/Chat/ChatItem/CILinkView.swift b/apps/ios/Shared/Views/Chat/ChatItem/CILinkView.swift
index 4eb187bcac..42259361b7 100644
--- a/apps/ios/Shared/Views/Chat/ChatItem/CILinkView.swift
+++ b/apps/ios/Shared/Views/Chat/ChatItem/CILinkView.swift
@@ -52,7 +52,7 @@ struct CILinkView: View {
 func openBrowserAlert(uri: String) {
     let (url, err) = sanitizeUri(uri)
     if let url {
-        let uriStr = url.uri.absoluteString
+        let uriStr = displayedUri(url.uri.absoluteString)
         showAlert(
             NSLocalizedString("Open link?", comment: "alert title"),
             message: uriStr.count > 160 ? "\(uriStr.prefix(160))…" : uriStr,
@@ -90,9 +90,9 @@ func openBrowserAlert(uri: String) {
 
 func showInvalidLinkAlert(_ uri: String, error: String? = nil) {
     let message = if let error, !error.isEmpty {
-        error + "\n" + uri
+        error + "\n" + displayedUri(uri)
     } else {
-        uri
+        displayedUri(uri)
     }
     showAlert(
         NSLocalizedString("Invalid link", comment: "alert title"),
@@ -101,6 +101,25 @@ func showInvalidLinkAlert(_ uri: String, error: String? = nil) {
     )
 }
 
+func unicodeMarker(_ s: Unicode.Scalar) -> String {
+    String(format: "[U+%04X]", s.value)
+}
+
+func displayedUri(_ uri: String) -> String {
+    let authorityStart = uri.range(of: "://")?.upperBound ?? uri.startIndex
+    let authority = authorityStart ..< (uri[authorityStart...].firstIndex(where: { "/?#".contains($0) }) ?? uri.endIndex)
+    var shown = ""
+    for i in uri.unicodeScalars.indices {
+        let s = uri.unicodeScalars[i]
+        if s.properties.generalCategory == .format || (!s.isASCII && authority.contains(i)) {
+            shown += unicodeMarker(s)
+        } else {
+            shown.unicodeScalars.append(s)
+        }
+    }
+    return shown
+}
+
 func sanitizeUri(_ s: String) -> (url: (uri: URL, sanitizedUri: URL?)?, error: String?) {
     let parsed = parseSanitizeUri(s, safe: false)
     return if let uri = URL(string: s), let uriInfo = parsed?.uriInfo {
diff --git a/apps/ios/Shared/Views/Chat/ChatItem/CIVideoView.swift b/apps/ios/Shared/Views/Chat/ChatItem/CIVideoView.swift
index 0df17dfe3d..339d119362 100644
--- a/apps/ios/Shared/Views/Chat/ChatItem/CIVideoView.swift
+++ b/apps/ios/Shared/Views/Chat/ChatItem/CIVideoView.swift
@@ -120,6 +120,25 @@ struct CIVideoView: View {
         }
     }
 
+    private func playReceived(_ file: CIFile) {
+        setupPlayer(file)
+        if urlDecrypted == nil {
+            decrypt(file: file, completed: playVideo)
+        } else {
+            playVideo()
+        }
+    }
+
+    private func playVideo() {
+        if smallView {
+            showFullScreenPlayer = urlDecrypted != nil
+        } else if let urlDecrypted {
+            m.stopPreviousRecPlay = urlDecrypted
+            videoPlaying = true
+            player?.play()
+        }
+    }
+
     private func setupPlayer(_ file: CIFile?) {
         let newUrl = getLoadedVideo(file)
         if newUrl == url {
@@ -424,6 +443,7 @@ struct CIVideoView: View {
         if let prohibited = file.fileProhibited {
             showProhibitedFileAlert(file, prohibited)
         } else {
+            m.openWhenReceived(file, open: playReceived)
             Task {
                 if let user = m.currentUser {
                     await receiveFile(user, file.fileId, false, false)
diff --git a/apps/ios/Shared/Views/Chat/ChatItem/CIVoiceView.swift b/apps/ios/Shared/Views/Chat/ChatItem/CIVoiceView.swift
index 64fa2a4dd3..6c89a5f788 100644
--- a/apps/ios/Shared/Views/Chat/ChatItem/CIVoiceView.swift
+++ b/apps/ios/Shared/Views/Chat/ChatItem/CIVoiceView.swift
@@ -303,6 +303,11 @@ struct VoiceMessagePlayer: View {
     private func downloadButton(_ recordingFile: CIFile, _ icon: String) -> some View {
         playPauseIcon(icon, theme.colors.primary)
             .simultaneousGesture(TapGesture().onEnded {
+                chatModel.openWhenReceived(recordingFile) { file in
+                    if let recordingSource = getLoadedFileSource(file) {
+                        startPlayback(recordingSource)
+                    }
+                }
                 Task {
                     if let user = chatModel.currentUser {
                         await receiveFile(user: user, fileId: recordingFile.fileId)
diff --git a/apps/ios/Shared/Views/Chat/ChatItem/MarkdownFileView.swift b/apps/ios/Shared/Views/Chat/ChatItem/MarkdownFileView.swift
new file mode 100644
index 0000000000..aa7e827d6b
--- /dev/null
+++ b/apps/ios/Shared/Views/Chat/ChatItem/MarkdownFileView.swift
@@ -0,0 +1,215 @@
+import SwiftUI
+import SimpleXChat
+import Ink
+
+private let MAX_MARKDOWN_VIEW_SIZE: Int64 = 1_048_576
+private let MAX_MARKDOWN_LINE_LENGTH = 15_000
+private let MAX_MARKDOWN_NESTING = 16
+private let MAX_MARKDOWN_LINK_NESTING = 4
+private let MAX_MARKDOWN_TABLE_ROWS = 200
+private let MAX_MARKDOWN_IMAGE_DIMENSION: CGFloat = 4320
+private let MAX_MARKDOWN_IMAGE_PIXELS: CGFloat = 2160 * 4320
+
+func isMarkdownFile(_ file: CIFile) -> Bool {
+    let ext = (file.fileName as NSString).pathExtension.lowercased()
+    return file.fileSize <= MAX_MARKDOWN_VIEW_SIZE && (ext == "md" || ext == "markdown")
+}
+
+func showMarkdownFile(_ file: CIFile) {
+    guard let fileSource = getLoadedFileSource(file) else { return }
+    Task {
+        do {
+            let data = try getFileData(getAppFilePath(fileSource.filePath), fileSource.cryptoArgs)
+            let text = decodedText(data)
+            let lines = text.components(separatedBy: "\n")
+            let html = withinMarkdownLimits(lines)
+                ? MarkdownParser(modifiers: [Modifier(target: .html) { escapedHTML($0.markdown) }, imagesWithinBudget()]).html(from: text)
+                : nil
+            let shownLines = lines.flatMap(chunkedLine)
+            let hasBidiControls = text.unicodeScalars.contains(where: isBidiControl)
+            await MainActor.run {
+                showAppSheet {
+                    MarkdownFileView(file: file, fileSource: fileSource, lines: shownLines, html: html, hasBidiControls: hasBidiControls)
+                }
+            }
+        } catch {
+            await MainActor.run {
+                showAlert(NSLocalizedString("Error reading file", comment: "alert title"), message: error.localizedDescription)
+            }
+        }
+    }
+}
+
+private func decodedText(_ data: Data) -> String {
+    var text = String.UnicodeScalarView()
+    var parser = Unicode.UTF8.ForwardParser()
+    var bytes = data.makeIterator()
+    while true {
+        switch parser.parseScalar(from: &bytes) {
+        case let .valid(encoded): text.append(replacingControlChar(Unicode.UTF8.decode(encoded)))
+        case let .error(length): text.append(contentsOf: repeatElement("?" as Unicode.Scalar, count: length))
+        case .emptyInput: return String(text).replacingOccurrences(of: "\r\n", with: "\n").replacingOccurrences(of: "\r", with: "\n")
+        }
+    }
+}
+
+private func replacingControlChar(_ s: Unicode.Scalar) -> Unicode.Scalar {
+    s.value < 0x20 && s != "\t" && s != "\n" && s != "\r" ? "?" : s
+}
+
+private func withinMarkdownLimits(_ lines: [String]) -> Bool {
+    var tableRows = 0
+    var linkNesting = 0
+    for line in lines {
+        tableRows = line.contains("|") ? tableRows + 1 : 0
+        if line.count > MAX_MARKDOWN_LINE_LENGTH || nestingLevel(line) > MAX_MARKDOWN_NESTING || tableRows > MAX_MARKDOWN_TABLE_ROWS || !linkNestingWithinLimit(line, &linkNesting) {
+            return false
+        }
+    }
+    return true
+}
+
+private func linkNestingWithinLimit(_ line: String, _ nesting: inout Int) -> Bool {
+    if line.isEmpty { nesting = 0 }
+    for c in line {
+        if c == "[" {
+            nesting += 1
+            if nesting > MAX_MARKDOWN_LINK_NESTING { return false }
+        } else if c == "]" && nesting > 0 {
+            nesting -= 1
+        }
+    }
+    return true
+}
+
+private func nestingLevel(_ line: String) -> Int {
+    let content = line.drop(while: { $0 == " " || $0 == "\t" || $0 == ">" })
+    let prefix = line[..<content.startIndex]
+    let quotes = prefix.filter { $0 == ">" }.count
+    let listItem = content.first.map { "-*+".contains($0) || $0.isNumber } ?? false
+    return quotes + (listItem ? (prefix.count - quotes) / 2 : 0)
+}
+
+private func chunkedLine(_ line: String) -> [String] {
+    let chars = Array(line)
+    return stride(from: 0, to: max(chars.count, 1), by: MAX_MARKDOWN_LINE_LENGTH).map {
+        String(chars[$0 ..< min($0 + MAX_MARKDOWN_LINE_LENGTH, chars.count)])
+    }
+}
+
+private func escapedHTML(_ s: Substring) -> String {
+    s.replacingOccurrences(of: "&", with: "&amp;")
+        .replacingOccurrences(of: "<", with: "&lt;")
+        .replacingOccurrences(of: ">", with: "&gt;")
+}
+
+private func imagesWithinBudget() -> Modifier {
+    var pixels = MAX_MARKDOWN_IMAGE_PIXELS
+    return Modifier(target: .images) { image in
+        let src = image.html.dropFirst("<img src=\"".count).prefix(while: { $0 != "\"" })
+        guard src.hasPrefix("data:image/") else { return escapedHTML(image.markdown) }
+        let parts = src.split(separator: ",", maxSplits: 1)
+        guard parts.count == 2,
+              parts[0].hasSuffix(";base64"),
+              let data = Data(base64Encoded: String(parts[1])),
+              let size = UIImage(data: data)?.size,
+              size.width <= MAX_MARKDOWN_IMAGE_DIMENSION,
+              size.height <= MAX_MARKDOWN_IMAGE_DIMENSION,
+              size.width * size.height <= pixels
+        else { return "" }
+        pixels -= size.width * size.height
+        return "<img src=\"\(src)\"/>"
+    }
+}
+
+private func isBidiControl(_ s: Unicode.Scalar) -> Bool {
+    [0x061C, 0x200E, 0x200F].contains(s.value) || (0x202A...0x202E).contains(s.value) || (0x2066...0x2069).contains(s.value)
+}
+
+private func withInvisibleCharMarkers(_ line: String) -> Text {
+    var text = Text(verbatim: "")
+    var plain = ""
+    for s in line.unicodeScalars {
+        if s.properties.generalCategory == .format {
+            text = text + Text(verbatim: plain) + Text(verbatim: unicodeMarker(s)).foregroundColor(.orange)
+            plain = ""
+        } else {
+            plain.unicodeScalars.append(s)
+        }
+    }
+    return text + Text(verbatim: plain)
+}
+
+private func openMarkdownFileLink(_ url: URL) {
+    let uri = url.absoluteString
+    let parsed = parseSimpleXMarkdown(uri)
+    let format = parsed?.count == 1 ? parsed?.first?.format : nil
+    switch format {
+    case let .simplexLink(_, _, simplexUri, _)?:
+        if let simplexUrl = URL(string: simplexUri) {
+            ChatModel.shared.appOpenUrl = simplexUrl
+        } else {
+            showInvalidLinkAlert(uri)
+        }
+    case .uri? where uri.hasPrefix("https://") || uri.hasPrefix("http://"):
+        openBrowserAlert(uri: uri)
+    default:
+        showInvalidLinkAlert(uri)
+    }
+}
+
+struct MarkdownFileView: View {
+    @AppStorage(DEFAULT_MARKDOWN_FILE_TEXT_VIEW) private var textView = false
+    let file: CIFile
+    let fileSource: CryptoFile
+    let lines: [String]
+    let html: String?
+    let hasBidiControls: Bool
+
+    var body: some View {
+        NavigationView {
+            VStack(spacing: 0) {
+                if hasBidiControls {
+                    Text("This file has text direction characters. The text can be shown in a different order than it is written.")
+                        .foregroundColor(.orange)
+                        .padding()
+                }
+                if let html, !textView {
+                    ConditionsWebView(html: html, openLink: openMarkdownFileLink)
+                        .padding(.horizontal)
+                } else {
+                    ScrollView {
+                        LazyVStack(alignment: .leading, spacing: 0) {
+                            ForEach(lines.indices, id: \.self) { i in
+                                withInvisibleCharMarkers(lines[i])
+                                    .font(.system(.body, design: .monospaced))
+                                    .textSelection(.enabled)
+                            }
+                        }
+                        .padding()
+                    }
+                }
+            }
+            .modifier(ThemedBackground())
+            .navigationTitle(file.fileName)
+            .navigationBarTitleDisplayMode(.inline)
+            .toolbar {
+                ToolbarItemGroup(placement: .navigationBarTrailing) {
+                    if html != nil {
+                        Button {
+                            textView.toggle()
+                        } label: {
+                            Image(systemName: textView ? "doc.richtext" : "chevron.left.forwardslash.chevron.right")
+                        }
+                    }
+                    Button {
+                        saveCryptoFile(fileSource)
+                    } label: {
+                        Image(systemName: "square.and.arrow.up")
+                    }
+                }
+            }
+        }
+        .navigationViewStyle(.stack)
+    }
+}
diff --git a/apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift b/apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift
index c9d8858fa1..f95e31369e 100644
--- a/apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift
+++ b/apps/ios/Shared/Views/Chat/ChatItem/MsgContentView.swift
@@ -490,6 +490,7 @@ func messageText(
                     attrs[webLinkAttrKey] = true
                     handleTaps = true
                 }
+                t = displayedUri(t)
             case let .hyperLink(text, uri):
                 attrs = linkAttrs()
                 if let text { t = text }
diff --git a/apps/ios/Shared/Views/Helpers/ShareSheet.swift b/apps/ios/Shared/Views/Helpers/ShareSheet.swift
index 56e437e5c8..ebe74b2a50 100644
--- a/apps/ios/Shared/Views/Helpers/ShareSheet.swift
+++ b/apps/ios/Shared/Views/Helpers/ShareSheet.swift
@@ -98,7 +98,7 @@ func openExternalLink(_ url: URL) {
     } else {
         showAlert(
             title: NSLocalizedString("Open external link?", comment: "alert title"),
-            message: s,
+            message: displayedUri(s),
             buttonTitle: NSLocalizedString("Open", comment: "alert button"),
             buttonAction: { UIApplication.shared.open(url) },
             cancelButton: true
diff --git a/apps/ios/Shared/Views/UserSettings/NetworkAndServers/ConditionsWebView.swift b/apps/ios/Shared/Views/UserSettings/NetworkAndServers/ConditionsWebView.swift
index 5abbbf8d2e..6a05851c63 100644
--- a/apps/ios/Shared/Views/UserSettings/NetworkAndServers/ConditionsWebView.swift
+++ b/apps/ios/Shared/Views/UserSettings/NetworkAndServers/ConditionsWebView.swift
@@ -12,11 +12,15 @@ import WebKit
 
 struct ConditionsWebView: UIViewRepresentable {
     @State var html: String
+    var openLink: (URL) -> Void = openExternalLink
     @EnvironmentObject var theme: AppTheme
     @State var pageLoaded = false
 
     func makeUIView(context: Context) -> WKWebView {
-        let view = WKWebView()
+        let config = WKWebViewConfiguration()
+        config.defaultWebpagePreferences.allowsContentJavaScript = false
+        config.websiteDataStore = .nonPersistent()
+        let view = WKWebView(frame: .zero, configuration: config)
         view.backgroundColor = .clear
         view.isOpaque = false
         view.navigationDelegate = context.coordinator
@@ -35,8 +39,9 @@ struct ConditionsWebView: UIViewRepresentable {
     }
 
     private func loadPage(_ webView: WKWebView) {
+        let nonce = UUID().uuidString
         let styles = """
-        <style>
+        <style nonce="\(nonce)">
         body {
             color: \(theme.colors.onBackground.toHTMLHex());
             font-family: Helvetica;
@@ -48,9 +53,23 @@ struct ConditionsWebView: UIViewRepresentable {
             font-family: Menlo;
             background: \(theme.colors.secondary.opacity(theme.colors.isLight ? 0.2 : 0.3).toHTMLHex());
         }
+        pre {
+            overflow-x: auto;
+        }
+        table {
+            border-collapse: collapse;
+        }
+        th, td {
+            border: 1px solid \(theme.colors.secondary.toHTMLHex());
+            padding: 4px 8px;
+        }
+        img {
+            max-width: 100%;
+        }
         </style>
         """
-        let head = "<head><meta name='viewport' content='width=device-width, initial-scale=1.0, minimum-scale=1.0, user-scalable=no'>\(styles)</head>"
+        let csp = "<meta http-equiv='Content-Security-Policy' content=\"default-src 'none'; style-src 'nonce-\(nonce)'; img-src data:; base-uri 'none'; form-action 'none'\">"
+        let head = "<head>\(csp)<meta name='viewport' content='width=device-width, initial-scale=1.0, minimum-scale=1.0, user-scalable=no'>\(styles)</head>"
         webView.loadHTMLString(head + html, baseURL: nil)
         DispatchQueue.main.async {
             pageLoaded = true
@@ -58,10 +77,16 @@ struct ConditionsWebView: UIViewRepresentable {
     }
 
     func makeCoordinator() -> Cordinator {
-        Cordinator()
+        Cordinator(openLink: openLink)
     }
 
     class Cordinator: NSObject, WKNavigationDelegate {
+        let openLink: (URL) -> Void
+
+        init(openLink: @escaping (URL) -> Void) {
+            self.openLink = openLink
+        }
+
         func webView(_ webView: WKWebView,
                      decidePolicyFor navigationAction: WKNavigationAction,
                      decisionHandler: @escaping (WKNavigationActionPolicy) -> Void) {
@@ -71,9 +96,9 @@ struct ConditionsWebView: UIViewRepresentable {
             switch navigationAction.navigationType {
             case .linkActivated:
                 decisionHandler(.cancel)
-                openExternalLink(url)
+                openLink(url)
             default:
-                decisionHandler(.allow)
+                decisionHandler(url.scheme == "about" ? .allow : .cancel)
             }
         }
     }
diff --git a/apps/ios/Shared/Views/UserSettings/SettingsView.swift b/apps/ios/Shared/Views/UserSettings/SettingsView.swift
index bc823a1227..b1b786c8b8 100644
--- a/apps/ios/Shared/Views/UserSettings/SettingsView.swift
+++ b/apps/ios/Shared/Views/UserSettings/SettingsView.swift
@@ -85,6 +85,7 @@ let DEFAULT_SHOW_DELETE_CONVERSATION_NOTICE = "showDeleteConversationNotice"
 let DEFAULT_SHOW_DELETE_CONTACT_NOTICE = "showDeleteContactNotice"
 let DEFAULT_SHOW_SENT_VIA_RPOXY = "showSentViaProxy"
 let DEFAULT_SHOW_SUBSCRIPTION_PERCENTAGE = "showSubscriptionPercentage"
+let DEFAULT_MARKDOWN_FILE_TEXT_VIEW = "markdownFileTextView"
 
 let DEFAULT_CURRENT_THEME = "currentTheme"
 let DEFAULT_SYSTEM_DARK_THEME = "systemDarkTheme"
@@ -147,6 +148,7 @@ let appDefaults: [String: Any] = [
     DEFAULT_SHOW_DELETE_CONTACT_NOTICE: true,
     DEFAULT_SHOW_SENT_VIA_RPOXY: false,
     DEFAULT_SHOW_SUBSCRIPTION_PERCENTAGE: false,
+    DEFAULT_MARKDOWN_FILE_TEXT_VIEW: false,
     ANDROID_DEFAULT_CALL_ON_LOCK_SCREEN: AppSettingsLockScreenCalls.show.rawValue,
 
     DEFAULT_THEME_OVERRIDES: "{}",
diff --git a/apps/ios/SimpleX NSE/NSEAPITypes.swift b/apps/ios/SimpleX NSE/NSEAPITypes.swift
index 35a838fff9..28073ef342 100644
--- a/apps/ios/SimpleX NSE/NSEAPITypes.swift	
+++ b/apps/ios/SimpleX NSE/NSEAPITypes.swift	
@@ -89,6 +89,7 @@ enum NSEChatEvent: Decodable, ChatAPIResult {
     case contactConnected(user: UserRef, contact: Contact, userCustomProfile: Profile?)
     case receivedContactRequest(user: UserRef, contactRequest: UserContactRequest)
     case newChatItems(user: UserRef, chatItems: [AChatItem])
+    case duplicateGroupMessage(user: UserRef, member: GroupMember)
     case rcvFileSndCancelled(user: UserRef, chatItem: AChatItem, rcvFileTransfer: RcvFileTransfer)
     case sndFileComplete(user: UserRef, chatItem: AChatItem, sndFileTransfer: SndFileTransfer)
     case sndFileRcvCancelled(user: UserRef, chatItem_: AChatItem?, sndFileTransfer: SndFileTransfer)
@@ -101,6 +102,7 @@ enum NSEChatEvent: Decodable, ChatAPIResult {
         case .contactConnected: "contactConnected"
         case .receivedContactRequest: "receivedContactRequest"
         case .newChatItems: "newChatItems"
+        case .duplicateGroupMessage: "duplicateGroupMessage"
         case .rcvFileSndCancelled: "rcvFileSndCancelled"
         case .sndFileComplete: "sndFileComplete"
         case .sndFileRcvCancelled: "sndFileRcvCancelled"
@@ -117,6 +119,7 @@ enum NSEChatEvent: Decodable, ChatAPIResult {
         case let .newChatItems(u, chatItems):
             let itemsString = chatItems.map { chatItem in String(describing: chatItem) }.joined(separator: "\n")
             return withUser(u, itemsString)
+        case let .duplicateGroupMessage(u, member): return withUser(u, String(describing: member))
         case let .rcvFileSndCancelled(u, chatItem, _): return withUser(u, String(describing: chatItem))
         case let .sndFileComplete(u, chatItem, _): return withUser(u, String(describing: chatItem))
         case let .sndFileRcvCancelled(u, chatItem, _): return withUser(u, String(describing: chatItem))
diff --git a/apps/ios/SimpleX NSE/NotificationService.swift b/apps/ios/SimpleX NSE/NotificationService.swift
index 25df063f82..38e1b604be 100644
--- a/apps/ios/SimpleX NSE/NotificationService.swift	
+++ b/apps/ios/SimpleX NSE/NotificationService.swift	
@@ -73,6 +73,16 @@ public enum NSENotificationData {
         default: nil
         }
     }
+
+    func replaces(_ bestAttempt: NSENotificationData) -> Bool {
+        switch (self, bestAttempt) {
+        case (.noNtf, .connectionEvent): true
+        case (.noNtf, _): false
+        case (.callInvitation, _): true
+        case (_, .callInvitation): false
+        default: true
+        }
+    }
 }
 
 // Once the last thread in the process completes processing chat controller is suspended, and the database is closed, to avoid
@@ -573,9 +583,9 @@ class NotificationService: UNNotificationServiceExtension {
             // A better logic could be to check whether we have a call in the best attempt while processing .msgInfo marker above.
             // If the best attempt is a call, and its marker is received, and the call is recent (e.g., the last 30 seconds), it would deliver at once,
             // instead of requesting further messages.
-            if ntfEntity.msgBestAttemptNtf.callInvitation == nil || ntf.callInvitation != nil {
+            if let bestAttempt = notificationEntities[id]?.msgBestAttemptNtf, ntf.replaces(bestAttempt) {
                 notificationEntities[id]?.msgBestAttemptNtf = ntf
-            } // otherwise keep call as best attempt
+            }
             return false
         } else {
             // We should not get to this branch, as notifications are not delivered for muted users.
@@ -1022,8 +1032,8 @@ func receivedMsgNtf(_ res: NSEChatEvent) async -> (String, NSENotificationData)?
                 cItem = autoReceiveFile(file) ?? cItem
             }
             let ntf: NSENotificationData = (cInfo.ntfsEnabled(chatItem: cItem) && cItem.showNotification) ? .messageReceived(user, cInfo, cItem) : .noNtf
-            let chatIdOrMemberId = if case let .groupRcv(groupMember) = chatItem.chatItem.chatDir {
-                groupMember.id
+            let chatIdOrMemberId = if case let .group(groupInfo, _) = cInfo, let memberId = cItem.meta.forwardedByMember ?? cItem.chatDir.groupMemberId {
+                groupMemberEntityId(groupInfo.groupId, memberId)
             } else {
                 chatItem.chatInfo.id
             }
@@ -1031,6 +1041,8 @@ func receivedMsgNtf(_ res: NSEChatEvent) async -> (String, NSENotificationData)?
         } else {
             return nil
         }
+    case let .duplicateGroupMessage(_, member):
+        return (member.id, .noNtf)
     case let .rcvFileSndCancelled(_, aChatItem, _):
         cleanupFile(aChatItem)
         return nil
diff --git a/apps/ios/SimpleX.xcodeproj/project.pbxproj b/apps/ios/SimpleX.xcodeproj/project.pbxproj
index f1f9e583d3..3d9bbd111a 100644
--- a/apps/ios/SimpleX.xcodeproj/project.pbxproj
+++ b/apps/ios/SimpleX.xcodeproj/project.pbxproj
@@ -168,6 +168,7 @@
 		647C9E293061362A0032110E /* GetStakeBanner.swift in Sources */ = {isa = PBXBuildFile; fileRef = 647C9E283061362A0032110E /* GetStakeBanner.swift */; };
 		647F090E288EA27B00644C40 /* GroupMemberInfoView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 647F090D288EA27B00644C40 /* GroupMemberInfoView.swift */; };
 		648010AB281ADD15009009B9 /* CIFileView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 648010AA281ADD15009009B9 /* CIFileView.swift */; };
+		6F3B2A1C2E8D4F0A9B7C1D21 /* MarkdownFileView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6F3B2A1C2E8D4F0A9B7C1D22 /* MarkdownFileView.swift */; };
 		648679AB2BC96A74006456E7 /* ChatItemForwardingView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 648679AA2BC96A74006456E7 /* ChatItemForwardingView.swift */; };
 		6495D7042F48CFC50060512B /* ChannelMembersView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6495D7032F48CFC50060512B /* ChannelMembersView.swift */; };
 		6495D7062F48CFFD0060512B /* ChannelRelaysView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6495D7052F48CFFD0060512B /* ChannelRelaysView.swift */; };
@@ -193,8 +194,8 @@
 		64C3B0212A0D359700E19930 /* CustomTimePicker.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64C3B0202A0D359700E19930 /* CustomTimePicker.swift */; };
 		64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829982D54AEED006B9E89 /* libgmp.a */; };
 		64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C829992D54AEEE006B9E89 /* libffi.a */; };
-		64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8-ghc9.6.3.a */; };
-		64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8.a */; };
+		64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum-ghc9.6.3.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum-ghc9.6.3.a */; };
+		64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum.a */; };
 		64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 64C8299C2D54AEEE006B9E89 /* libgmpxx.a */; };
 		64D0C2C029F9688300B38D5F /* UserAddressView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2BF29F9688300B38D5F /* UserAddressView.swift */; };
 		64D0C2C229FA57AB00B38D5F /* UserAddressLearnMore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */; };
@@ -562,6 +563,7 @@
 		647C9E283061362A0032110E /* GetStakeBanner.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = GetStakeBanner.swift; sourceTree = "<group>"; };
 		647F090D288EA27B00644C40 /* GroupMemberInfoView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = GroupMemberInfoView.swift; sourceTree = "<group>"; };
 		648010AA281ADD15009009B9 /* CIFileView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CIFileView.swift; sourceTree = "<group>"; };
+		6F3B2A1C2E8D4F0A9B7C1D22 /* MarkdownFileView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = MarkdownFileView.swift; sourceTree = "<group>"; };
 		648679AA2BC96A74006456E7 /* ChatItemForwardingView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChatItemForwardingView.swift; sourceTree = "<group>"; };
 		6493D667280ED77F007A76FB /* en */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = en; path = en.lproj/Localizable.strings; sourceTree = "<group>"; };
 		6495D7032F48CFC50060512B /* ChannelMembersView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChannelMembersView.swift; sourceTree = "<group>"; };
@@ -588,8 +590,8 @@
 		64C3B0202A0D359700E19930 /* CustomTimePicker.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = CustomTimePicker.swift; sourceTree = "<group>"; };
 		64C829982D54AEED006B9E89 /* libgmp.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmp.a; sourceTree = "<group>"; };
 		64C829992D54AEEE006B9E89 /* libffi.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libffi.a; sourceTree = "<group>"; };
-		64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8-ghc9.6.3.a"; sourceTree = "<group>"; };
-		64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8.a"; sourceTree = "<group>"; };
+		64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum-ghc9.6.3.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum-ghc9.6.3.a"; sourceTree = "<group>"; };
+		64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = "libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum.a"; sourceTree = "<group>"; };
 		64C8299C2D54AEEE006B9E89 /* libgmpxx.a */ = {isa = PBXFileReference; lastKnownFileType = archive.ar; path = libgmpxx.a; sourceTree = "<group>"; };
 		64D0C2BF29F9688300B38D5F /* UserAddressView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressView.swift; sourceTree = "<group>"; };
 		64D0C2C129FA57AB00B38D5F /* UserAddressLearnMore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UserAddressLearnMore.swift; sourceTree = "<group>"; };
@@ -764,8 +766,8 @@
 				64C8299D2D54AEEE006B9E89 /* libgmp.a in Frameworks */,
 				64C8299E2D54AEEE006B9E89 /* libffi.a in Frameworks */,
 				64C829A12D54AEEE006B9E89 /* libgmpxx.a in Frameworks */,
-				64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8-ghc9.6.3.a in Frameworks */,
-				64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8.a in Frameworks */,
+				64C8299F2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum-ghc9.6.3.a in Frameworks */,
+				64C829A02D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum.a in Frameworks */,
 				CE38A29C2C3FCD72005ED185 /* SwiftyGif in Frameworks */,
 			);
 			runOnlyForDeploymentPostprocessing = 0;
@@ -852,8 +854,8 @@
 				64C829992D54AEEE006B9E89 /* libffi.a */,
 				64C829982D54AEED006B9E89 /* libgmp.a */,
 				64C8299C2D54AEEE006B9E89 /* libgmpxx.a */,
-				64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8-ghc9.6.3.a */,
-				64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.10-1nt2m8GM0NE8NSirknFyt8.a */,
+				64C8299A2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum-ghc9.6.3.a */,
+				64C8299B2D54AEEE006B9E89 /* libHSsimplex-chat-7.1.0.11-LxOKYAQgszM3XevVjyMHum.a */,
 			);
 			path = Libraries;
 			sourceTree = "<group>";
@@ -1129,6 +1131,7 @@
 				649BCDA12805D6EF00C3A862 /* CIImageView.swift */,
 				5C10D88928F187F300E58BF0 /* FullScreenMediaView.swift */,
 				648010AA281ADD15009009B9 /* CIFileView.swift */,
+				6F3B2A1C2E8D4F0A9B7C1D22 /* MarkdownFileView.swift */,
 				644EFFDF292CFD7F00525D5B /* CIVoiceView.swift */,
 				3CDBCF4727FF621E00354CDD /* CILinkView.swift */,
 				64AA1C6B27F3537400AC7277 /* DeletedItemView.swift */,
@@ -1608,6 +1611,7 @@
 				5CB634A829E437960066AD6B /* PasscodeEntry.swift in Sources */,
 				5CFA59C42860BC6200863A68 /* MigrateToAppGroupView.swift in Sources */,
 				648010AB281ADD15009009B9 /* CIFileView.swift in Sources */,
+				6F3B2A1C2E8D4F0A9B7C1D21 /* MarkdownFileView.swift in Sources */,
 				644EFFE2292D089800525D5B /* FramedCIVoiceView.swift in Sources */,
 				5C4B3B0A285FB130003915F2 /* DatabaseView.swift in Sources */,
 				5CB2084F28DA4B4800D024EC /* RTCServers.swift in Sources */,
diff --git a/apps/ios/SimpleXChat/ChatTypes.swift b/apps/ios/SimpleXChat/ChatTypes.swift
index a8c5de3672..186d7dab64 100644
--- a/apps/ios/SimpleXChat/ChatTypes.swift
+++ b/apps/ios/SimpleXChat/ChatTypes.swift
@@ -3255,7 +3255,7 @@ public struct GroupMember: Identifiable, Decodable, Hashable {
     public var relayLink: String?
     public var memberVerifiedCode: SecurityCode?
 
-    public var id: String { "#\(groupId) @\(groupMemberId)" }
+    public var id: String { groupMemberEntityId(groupId, groupMemberId) }
     public var ready: Bool { get { activeConn?.connStatus == .ready } }
     public var sndReady: Bool { get { ready || activeConn?.connStatus == .sndReady } }
     public var sendMsgEnabled: Bool { get {
@@ -3444,6 +3444,10 @@ public struct GroupMember: Identifiable, Decodable, Hashable {
     )
 }
 
+public func groupMemberEntityId(_ groupId: Int64, _ groupMemberId: Int64) -> String {
+    "#\(groupId) @\(groupMemberId)"
+}
+
 public struct GroupSupportChat: Codable, Hashable {
     public var chatTs: Date
     public var unread: Int
@@ -4217,6 +4221,10 @@ public enum CIDirection: Decodable, Hashable {
         }
     }
 
+    public var groupMemberId: Int64? {
+        if case let .groupRcv(groupMember) = self { groupMember.groupMemberId } else { nil }
+    }
+
     public func sameDirection(_ dir: CIDirection) -> Bool {
         switch (self, dir) {
         case let (.groupRcv(m1), .groupRcv(m2)): m1.groupMemberId == m2.groupMemberId
@@ -4242,6 +4250,7 @@ public struct CIMeta: Decodable, Hashable {
     public var userMention: Bool
     public var deletable: Bool
     public var editable: Bool
+    public var forwardedByMember: Int64?
     public var showGroupAsSender: Bool
     public var msgVerified: MsgVerified?
 
diff --git a/apps/ios/spec/client/chat-view.md b/apps/ios/spec/client/chat-view.md
index 7f4d98e787..a7b1fec2a3 100644
--- a/apps/ios/spec/client/chat-view.md
+++ b/apps/ios/spec/client/chat-view.md
@@ -238,6 +238,12 @@ Renders voice messages with waveform visualization, play/pause control, and dura
 
 Renders file attachments with filename, size, and download/open actions. Shows transfer progress during upload/download.
 
+### MarkdownFileView
+
+**File**: [`Shared/Views/Chat/ChatItem/MarkdownFileView.swift`](../../Shared/Views/Chat/ChatItem/MarkdownFileView.swift)
+
+Sheet with a viewer of Markdown files up to `MAX_MARKDOWN_VIEW_SIZE` (1 MB), formatted or as text, with Save. Opened by a tap on the file item, or when reception completes after the tap that started it.
+
 ### [CILinkView](../../Shared/Views/Chat/ChatItem/CILinkView.swift#L14)
 
 **File**: [`Shared/Views/Chat/ChatItem/CILinkView.swift`](../../Shared/Views/Chat/ChatItem/CILinkView.swift)
diff --git a/apps/multiplatform/common/build.gradle.kts b/apps/multiplatform/common/build.gradle.kts
index 0ff63fa8de..e9503bc6ce 100644
--- a/apps/multiplatform/common/build.gradle.kts
+++ b/apps/multiplatform/common/build.gradle.kts
@@ -77,8 +77,8 @@ kotlin {
         api("dev.icerock.moko:resources-compose:0.27.1")
 
         // Markdown
-        implementation("com.mikepenz:multiplatform-markdown-renderer:0.27.0")
-        implementation("com.mikepenz:multiplatform-markdown-renderer-m2:0.27.0")
+        implementation("com.mikepenz:multiplatform-markdown-renderer:0.34.0")
+        implementation("com.mikepenz:multiplatform-markdown-renderer-m2:0.34.0")
       }
     }
     val commonTest by getting {
diff --git a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/platform/Images.android.kt b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/platform/Images.android.kt
index 1a3703822d..df2e6ccadc 100644
--- a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/platform/Images.android.kt
+++ b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/platform/Images.android.kt
@@ -13,6 +13,7 @@ import androidx.core.graphics.scale
 import boofcv.android.ConvertBitmap
 import boofcv.struct.image.GrayU8
 import chat.simplex.common.R
+import chat.simplex.common.views.helpers.decodeSampledBitmapFromByteArray
 import chat.simplex.common.views.helpers.errorBitmap
 import chat.simplex.common.views.helpers.getFileName
 import java.io.ByteArrayOutputStream
@@ -41,6 +42,14 @@ actual fun base64ToBitmap(base64ImageString: String): ImageBitmap {
   }
 }
 
+actual fun decodeBase64Image(base64: String, width: Int): ImageBitmap? =
+  try {
+    decodeSampledBitmapFromByteArray(Base64.decode(base64, Base64.DEFAULT), width, width, MAX_IMAGE_DIMENSION).asImageBitmap()
+  } catch (e: Exception) {
+    Log.e(TAG, "decodeBase64Image error: $e")
+    null
+  }
+
 actual fun resizeImageToStrSize(image: ImageBitmap, maxDataSize: Long): String {
   var img = image
   var str = compressImageStr(img)
diff --git a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.android.kt b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.android.kt
new file mode 100644
index 0000000000..0bb9179299
--- /dev/null
+++ b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.android.kt
@@ -0,0 +1,7 @@
+package chat.simplex.common.views.chat
+
+import androidx.compose.runtime.*
+
+// Android keyboards have their own emoji panel
+@Composable
+actual fun ComposeEmojiButton(pickerShown: MutableState<Boolean>, enabled: Boolean, onEmoji: (String) -> Unit) {}
diff --git a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/helpers/Utils.android.kt b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/helpers/Utils.android.kt
index 371bd7676b..7b2f53d365 100644
--- a/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/helpers/Utils.android.kt
+++ b/apps/multiplatform/common/src/androidMain/kotlin/chat/simplex/common/views/helpers/Utils.android.kt
@@ -194,11 +194,12 @@ actual suspend fun getLoadedImage(file: CIFile?): Pair<ImageBitmap, ByteArray>?
 }
 
 // https://developer.android.com/topic/performance/graphics/load-bitmap#load-bitmap
-private fun decodeSampledBitmapFromByteArray(data: ByteArray, reqWidth: Int, reqHeight: Int): Bitmap {
+internal fun decodeSampledBitmapFromByteArray(data: ByteArray, reqWidth: Int, reqHeight: Int, maxDimension: Int = Int.MAX_VALUE): Bitmap {
   // First decode with inJustDecodeBounds=true to check dimensions
   return BitmapFactory.Options().run {
     inJustDecodeBounds = true
     BitmapFactory.decodeByteArray(data, 0, data.size, this)
+    if (outWidth > maxDimension || outHeight > maxDimension) throw IOException("Image dimensions exceed limit")
     // Calculate inSampleSize
     inSampleSize = calculateInSampleSize(this, reqWidth, reqHeight)
     // Decode bitmap with inSampleSize set
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/App.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/App.kt
index 656911443a..ce1152de6a 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/App.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/App.kt
@@ -415,7 +415,10 @@ fun CenterPartOfScreen() {
         }
       }
     }
-    else -> ChatView(chatsCtx = chatModel.chatsContext, currentChatId) {}
+    else -> {
+      ChatView(chatsCtx = chatModel.chatsContext, currentChatId) {}
+      ModalManager.center.showInView()
+    }
   }
 }
 
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt
index a4280e9d5b..65ce8a4438 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/ChatModel.kt
@@ -147,6 +147,8 @@ object BadgeModel {
 
 enum class ChatListBanner { BadgeExpired, BadgeIssueFailed, BadgePitch, GetStake }
 
+data class FileToOpen(val fileId: Long, val inChatList: Boolean)
+
 /*
  * Without this annotation an animation from ChatList to ChatView has 1 frame per the whole animation. Don't delete it
  * */
@@ -220,8 +222,21 @@ object ChatModel {
   // another in its place; only the badge alert shows regardless. Set while rendering, so not a state.
   var chatListBanner: ChatListBanner? = null
 
+  var fileToOpen: FileToOpen? = null
+
   fun bannerSlotFree(banner: ChatListBanner): Boolean = chatListBanner == null || chatListBanner == banner
 
+  fun openWhenReceived(file: CIFile, inChatList: Boolean) {
+    fileToOpen = FileToOpen(file.fileId, inChatList)
+  }
+
+  fun receivedFileToOpen(file: CIFile, inChatList: Boolean): Boolean {
+    val f = fileToOpen
+    if (f == null || f.fileId != file.fileId || f.inChatList != inChatList || !file.loaded) return false
+    fileToOpen = null
+    return !inChatList || appPlatform.isDesktop || chatId.value == null
+  }
+
   // preferences
   val notificationPreviewMode by lazy {
     mutableStateOf(
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt
index eced5e6cd5..e06653b5eb 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/model/SimpleXAPI.kt
@@ -142,6 +142,7 @@ class AppPreferences {
   val appearanceBarsBlurRadius = mkIntPreference(SHARED_PREFS_APPEARANCE_BARS_BLUR_RADIUS, if (deviceSupportsBlur) 50 else 0)
   val experimentalCalls = mkBoolPreference(SHARED_PREFS_EXPERIMENTAL_CALLS, false)
   val showUnreadAndFavorites = mkBoolPreference(SHARED_PREFS_SHOW_UNREAD_AND_FAVORITES, false)
+  val markdownFileTextView = mkBoolPreference(SHARED_PREFS_MARKDOWN_FILE_TEXT_VIEW, false)
   val chatArchiveName = mkStrPreference(SHARED_PREFS_CHAT_ARCHIVE_NAME, null)
   val chatArchiveTime = mkDatePreference(SHARED_PREFS_CHAT_ARCHIVE_TIME, null)
   val chatLastStart = mkDatePreference(SHARED_PREFS_CHAT_LAST_START, null)
@@ -431,6 +432,7 @@ class AppPreferences {
     const val SHARED_PREFS_PRIVACY_FULL_BACKUP = "FullBackup"
     private const val SHARED_PREFS_EXPERIMENTAL_CALLS = "ExperimentalCalls"
     private const val SHARED_PREFS_SHOW_UNREAD_AND_FAVORITES = "ShowUnreadAndFavorites"
+    private const val SHARED_PREFS_MARKDOWN_FILE_TEXT_VIEW = "MarkdownFileTextView"
     private const val SHARED_PREFS_CHAT_ARCHIVE_NAME = "ChatArchiveName"
     private const val SHARED_PREFS_CHAT_ARCHIVE_TIME = "ChatArchiveTime"
     private const val SHARED_PREFS_APP_LANGUAGE = "AppLanguage"
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/platform/Images.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/platform/Images.kt
index d7a241d5ee..47cc034bfb 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/platform/Images.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/platform/Images.kt
@@ -15,6 +15,7 @@ import java.io.InputStream
 import java.net.URI
 
 expect fun base64ToBitmap(base64ImageString: String): ImageBitmap
+expect fun decodeBase64Image(base64: String, width: Int): ImageBitmap?
 expect fun resizeImageToStrSize(image: ImageBitmap, maxDataSize: Long): String
 expect fun resizeImageToDataSize(image: ImageBitmap, usePng: Boolean, maxDataSize: Long): ByteArrayOutputStream
 expect fun cropToSquare(image: ImageBitmap): ImageBitmap
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.kt
new file mode 100644
index 0000000000..ff8482ed7b
--- /dev/null
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.kt
@@ -0,0 +1,14 @@
+package chat.simplex.common.views.chat
+
+import androidx.compose.runtime.*
+import androidx.compose.ui.text.TextRange
+import kotlin.math.min
+
+@Composable
+expect fun ComposeEmojiButton(pickerShown: MutableState<Boolean>, enabled: Boolean, onEmoji: (String) -> Unit)
+
+fun ComposeMessage.insertingEmoji(emoji: String): ComposeMessage {
+  val start = min(selection.min, text.length)
+  val end = min(selection.max, text.length)
+  return ComposeMessage(text.replaceRange(start, end, emoji), TextRange(start + emoji.length))
+}
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt
index 92ccd92f93..357a010d2c 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt
@@ -454,6 +454,7 @@ fun ComposeView(
   val smallFont = MaterialTheme.typography.body1.copy(color = MaterialTheme.colors.onBackground)
   val textStyle = remember(MaterialTheme.colors.isLight) { mutableStateOf(smallFont) }
   val recState: MutableState<RecordingState> = remember { mutableStateOf(RecordingState.NotStarted) }
+  val emojiPickerShown = rememberSaveable { mutableStateOf(false) }
   AttachmentSelection(composeState, attachmentOption, composeState::processPickedFile) { uris, text -> CoroutineScope(Dispatchers.IO).launch { composeState.processPickedMedia(uris, text) } }
 
   suspend fun fetchAndUpdateLinkPreview(url: String) {
@@ -1278,6 +1279,17 @@ fun ComposeView(
   val userCantSendReason = rememberUpdatedState(chat.chatInfo.userCantSendReason((ownerRelayState?.noActiveRelays ?: subscriberRelayState?.noActiveRelays) == true))
   val sendMsgEnabled = rememberUpdatedState(userCantSendReason.value == null)
   val nextSendGrpInv = rememberUpdatedState(chat.nextSendGrpInv)
+  val emojiEnabled = sendMsgEnabled.value && composeState.value.preview !is ComposePreview.VoicePreview
+  LaunchedEffect(emojiEnabled) {
+    if (!emojiEnabled) emojiPickerShown.value = false
+  }
+  KeyChangeEffect(emojiPickerShown.value) {
+    if (!emojiPickerShown.value && emojiEnabled) focusRequester?.requestFocus()
+  }
+
+  fun onEmoji(emoji: String) {
+    if (!composeState.value.inProgress) onMessageChange(composeState.value.message.insertingEmoji(emoji))
+  }
 
   @Composable
   fun CommandsButton() {
@@ -1332,7 +1344,7 @@ fun ComposeView(
   }
 
   @Composable
-  fun AttachmentAndCommandsButtons() {
+  fun ComposeActionButtons() {
     val cInfo = chat.chatInfo
     Row(
       Modifier.padding(start = 3.dp, end = 1.dp, bottom = if (appPlatform.isAndroid) 2.sp.toDp() else 5.sp.toDp() * fontSizeSqrtMultiplier),
@@ -1346,6 +1358,7 @@ fun ComposeView(
       if (showAttachment) {
         AttachmentButton()
       }
+      ComposeEmojiButton(emojiPickerShown, emojiEnabled, ::onEmoji)
     }
   }
 
@@ -1784,7 +1797,7 @@ fun ComposeView(
           ContextSendMessageToConnect(generalGetString(MR.strings.compose_send_direct_message_to_connect))
           Divider()
           Row(Modifier.padding(end = 8.dp), verticalAlignment = Alignment.Bottom) {
-            AttachmentAndCommandsButtons()
+            ComposeActionButtons()
             SendMsgView_(
               disableSendButton = disableSendButton,
               sendToConnect = { withApi { sendMemberContactInvitation() } }
@@ -1839,7 +1852,7 @@ fun ComposeView(
         )
       } else {
         Row(Modifier.padding(end = 8.dp), verticalAlignment = Alignment.Bottom) {
-          AttachmentAndCommandsButtons()
+          ComposeActionButtons()
           val broadcastPlaceholder = (chat.chatInfo as? ChatInfo.Group)?.groupInfo?.let { gi ->
             if (gi.useRelays && gi.membership.memberRole >= GroupMemberRole.Owner && chat.chatInfo.groupChatScope() == null) generalGetString(MR.strings.compose_view_broadcast)
             else null
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt
index a3c2b63f8f..42cbff3a2f 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIFileView.kt
@@ -80,6 +80,7 @@ fun CIFileView(
           if (prohibited != null) {
             showProhibitedFileAlert(file, prohibited)
           } else {
+            chatModel.openWhenReceived(file, smallView)
             receiveFile(file.fileId)
           }
         }
@@ -105,6 +106,8 @@ fun CIFileView(
           showFileErrorAlert(file.fileStatus.sndFileError)
         file.fileStatus is CIFileStatus.SndWarning ->
           showFileErrorAlert(file.fileStatus.sndFileError, temporary = true)
+        isMarkdownFile(file) && file.loaded ->
+          showMarkdownFile(file)
         file.forwardingAllowed() -> {
           withLongRunningApi(slow = 600_000) {
             var filePath = getLoadedFilePath(file)
@@ -183,21 +186,23 @@ fun CIFileView(
 
   val showOpenSaveMenu = rememberSaveable(file?.fileId) { mutableStateOf(false) }
   val ext = file?.fileSource?.filePath?.substringAfterLast(".")?.takeIf { it.isNotBlank() }
-  val loadedFilePath = if (appPlatform.isAndroid && file?.fileSource != null) getLoadedFilePath(file) else null
+  val loadedFilePath = if (appPlatform.isAndroid && file?.fileSource != null && !isMarkdownFile(file)) getLoadedFilePath(file) else null
   if (loadedFilePath != null && file?.fileSource != null) {
     val encrypted = file.fileSource.cryptoArgs != null
     SaveOrOpenFileMenu(showOpenSaveMenu, encrypted, ext, File(loadedFilePath).toURI(), file.fileSource, saveFile = { fileAction() })
   }
+  val onClick: () -> Unit = {
+    if (appPlatform.isAndroid && loadedFilePath != null) {
+      showOpenSaveMenu.value = true
+    } else {
+      fileAction()
+    }
+  }
+  if (file != null) OpenWhenReceivedEffect(file, smallView, onClick)
   Row(
     Modifier
       .combinedClickable(
-        onClick = {
-          if (appPlatform.isAndroid && loadedFilePath != null) {
-            showOpenSaveMenu.value = true
-          } else {
-            fileAction()
-          }
-        },
+        onClick = onClick,
         onLongClick = { showMenu.value = true }
       )
       .padding(if (smallView) PaddingValues() else PaddingValues(top = 4.sp.toDp(), bottom = 6.sp.toDp(), start = 6.sp.toDp(), end = 12.sp.toDp())),
@@ -239,6 +244,13 @@ fun CIFileView(
 // the core decides whether a received file is above the size the sender's badge allows
 fun fileSizeValid(file: CIFile): Boolean = file.fileProhibited == null
 
+@Composable
+fun OpenWhenReceivedEffect(file: CIFile, inChatList: Boolean, open: () -> Unit) {
+  KeyChangeEffect(file.loaded) {
+    if (chatModel.receivedFileToOpen(file, inChatList)) open()
+  }
+}
+
 fun showProhibitedFileAlert(file: CIFile, prohibited: FileProhibited) {
   val badgeIssue = when (prohibited.badgeStatus) {
     null, BadgeStatus.Active -> ""
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt
index d5ea44126b..a49884beeb 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.kt
@@ -173,6 +173,15 @@ fun CIImageView(
     return null
   }
 
+  val view = LocalMultiplatformView()
+  if (file != null) {
+    OpenWhenReceivedEffect(file, smallView) {
+      hideKeyboard(view)
+      ModalManager.fullscreen.showCustomModal(animated = false) { close ->
+        ImageFullScreenView(imageProvider, close)
+      }
+    }
+  }
   Box(
     Modifier.layoutId(CHAT_IMAGE_LAYOUT_ID)
       .then(
@@ -222,6 +231,7 @@ fun CIImageView(
               if (file.fileProhibited != null) {
                 showProhibitedFileAlert(file, file.fileProhibited)
               } else {
+                chatModel.openWhenReceived(file, smallView)
                 receiveFile(file.fileId)
               }
             file.fileStatus is CIFileStatus.RcvAccepted ->
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVideoView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVideoView.kt
index 21f406db18..62e1b9f737 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVideoView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVideoView.kt
@@ -70,6 +70,8 @@ fun CIVideoView(
       }
     }
     val f = filePath.value
+    val autoPlay = remember { mutableStateOf(false) }
+    if (file != null) OpenWhenReceivedEffect(file, smallView) { autoPlay.value = true }
     if (file != null && f != null) {
       val view = LocalMultiplatformView()
       val openFullscreen = {
@@ -80,7 +82,6 @@ fun CIVideoView(
       }
 
       val uri = remember(filePath) { getAppFileUri(f.substringAfterLast(File.separator))  }
-      val autoPlay = remember { mutableStateOf(false) }
       val uriDecrypted = remember(filePath) { mutableStateOf(if (file.fileSource?.cryptoArgs == null) uri else file.fileSource.decryptedGet()) }
       val decrypted = uriDecrypted.value
       if (decrypted != null && smallView) {
@@ -98,7 +99,7 @@ fun CIVideoView(
           if (file != null) {
             when (file.fileStatus) {
               CIFileStatus.RcvInvitation, CIFileStatus.RcvAborted ->
-                receiveFileIfValidSize(file, receiveFile)
+                receiveFileIfValidSize(file, smallView, receiveFile)
               CIFileStatus.RcvAccepted ->
                 when (file.fileProtocol) {
                   FileProtocol.XFTP ->
@@ -128,7 +129,7 @@ fun CIVideoView(
           DurationProgress(file, remember { mutableStateOf(false) }, remember { mutableStateOf(duration * 1000L) }, remember { mutableStateOf(0L) }/*, soundEnabled*/)
         }
         if (showDownloadButton(file?.fileStatus) && !blurred.value && file != null) {
-          PlayButton(error = false, sizeMultiplier, { showMenu.value = true }) { receiveFileIfValidSize(file, receiveFile) }
+          PlayButton(error = false, sizeMultiplier, { showMenu.value = true }) { receiveFileIfValidSize(file, smallView, receiveFile) }
         }
       }
     }
@@ -156,22 +157,26 @@ private fun VideoViewEncrypted(
 ) {
   var decryptionInProgress by rememberSaveable(file.fileName) { mutableStateOf(false) }
   val onLongClick = { showMenu.value = true }
+  val play: () -> Unit = {
+    decryptionInProgress = true
+    withBGApi {
+      try {
+        uriUnencrypted.value = file.fileSource?.decryptedGetOrCreate()
+        autoPlay.value = uriUnencrypted.value != null
+      } finally {
+        decryptionInProgress = false
+      }
+    }
+  }
+  LaunchedEffect(autoPlay.value) {
+    if (autoPlay.value) play()
+  }
   Box {
     VideoPreviewImageView(defaultPreview, smallView = false, blurred = blurred, if (decryptionInProgress) {{}} else openFullscreen, onLongClick)
     if (decryptionInProgress) {
       VideoDecryptionProgress(1f, onLongClick = onLongClick)
     } else if (!blurred.value) {
-      PlayButton(false, 1f, onLongClick = onLongClick) {
-        decryptionInProgress = true
-        withBGApi {
-          try {
-            uriUnencrypted.value = file.fileSource?.decryptedGetOrCreate()
-            autoPlay.value = uriUnencrypted.value != null
-          } finally {
-            decryptionInProgress = false
-          }
-        }
-      }
+      PlayButton(false, 1f, onLongClick = onLongClick, onClick = play)
     }
     DurationProgress(file, remember { mutableStateOf(false) }, remember { mutableStateOf(defaultDuration) }, remember { mutableStateOf(0L) })
   }
@@ -190,22 +195,26 @@ private fun SmallVideoViewEncrypted(
 ) {
   var decryptionInProgress by rememberSaveable(file.fileName) { mutableStateOf(false) }
   val onLongClick = { showMenu.value = true }
+  val play: () -> Unit = {
+    decryptionInProgress = true
+    withBGApi {
+      try {
+        uriUnencrypted.value = file.fileSource?.decryptedGetOrCreate()
+        autoPlay.value = uriUnencrypted.value != null
+      } finally {
+        decryptionInProgress = false
+      }
+    }
+  }
+  LaunchedEffect(autoPlay.value) {
+    if (autoPlay.value) play()
+  }
   Box {
     VideoPreviewImageView(defaultPreview, smallView = true, blurred = blurred, onClick = if (decryptionInProgress) {{}} else openFullscreen, onLongClick = onLongClick)
     if (decryptionInProgress) {
       VideoDecryptionProgress(sizeMultiplier, onLongClick = onLongClick)
     } else if (!file.showStatusIconInSmallView && !blurHidesMedia(true, blurred)) {
-      PlayButton(false, sizeMultiplier, onLongClick = onLongClick) {
-        decryptionInProgress = true
-        withBGApi {
-          try {
-            uriUnencrypted.value = file.fileSource?.decryptedGetOrCreate()
-            autoPlay.value = uriUnencrypted.value != null
-          } finally {
-            decryptionInProgress = false
-          }
-        }
-      }
+      PlayButton(false, sizeMultiplier, onLongClick = onLongClick, onClick = play)
     }
   }
 }
@@ -240,7 +249,7 @@ private fun SmallVideoView(
       PlayButton(brokenVideo, sizeMultiplier, onLongClick = {}, onClick = openFullscreen)
     }
   }
-  LaunchedEffect(uri) {
+  LaunchedEffect(uri, autoPlay.value) {
     if (autoPlay.value) openFullscreen()
   }
 }
@@ -272,7 +281,7 @@ private fun VideoView(
     player.stop()
   }
   val showPreview = remember { derivedStateOf { !videoPlaying.value || progress.value == 0L } }
-  LaunchedEffect(uri) {
+  LaunchedEffect(uri, autoPlay.value) {
     if (autoPlay.value) play()
   }
   // Drop autoPlay only when show preview changes to prevent blinking of the view
@@ -566,10 +575,11 @@ private fun fileStatusIcon(file: CIFile?, smallView: Boolean) {
 private fun showDownloadButton(status: CIFileStatus?): Boolean =
   status is CIFileStatus.RcvInvitation || status is CIFileStatus.RcvAborted
 
-private fun receiveFileIfValidSize(file: CIFile, receiveFile: (Long) -> Unit) {
+private fun receiveFileIfValidSize(file: CIFile, smallView: Boolean, receiveFile: (Long) -> Unit) {
   if (file.fileProhibited != null) {
     showProhibitedFileAlert(file, file.fileProhibited)
   } else {
+    chatModel.openWhenReceived(file, smallView)
     receiveFile(file.fileId)
   }
 }
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVoiceView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVoiceView.kt
index 3b3c835e0a..5aeefd9668 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVoiceView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/CIVoiceView.kt
@@ -87,7 +87,7 @@ fun CIVoiceView(
           durationText(time / 1000)
         }
       }
-      VoiceLayout(file, ci, text, audioPlaying, progress, duration, brokenAudio, sent, hasText, timedMessagesTTL, showViaProxy, showTimestamp, sizeMultiplier, play, pause, longClick, receiveFile) {
+      VoiceLayout(file, ci, text, audioPlaying, progress, duration, brokenAudio, sent, hasText, timedMessagesTTL, showViaProxy, showTimestamp, sizeMultiplier, play, pause, longClick, { chatModel.openWhenReceived(file, smallView); receiveFile(it) }) {
         AudioPlayer.seekTo(it, progress, fileSource.value?.filePath)
       }
       if (smallView) {
@@ -95,6 +95,7 @@ fun CIVoiceView(
           AudioPlayer.stop()
         }
       }
+      OpenWhenReceivedEffect(file, smallView, play)
     } else if (smallView) {
       VoiceMsgIndicator(null, false, sent, hasText, null, null, false, sizeMultiplier, {}, {}, longClick, receiveFile)
     } else {
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/MarkdownFileView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/MarkdownFileView.kt
new file mode 100644
index 0000000000..189e69a925
--- /dev/null
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/MarkdownFileView.kt
@@ -0,0 +1,284 @@
+package chat.simplex.common.views.chat.item
+
+import SectionBottomSpacer
+import androidx.compose.foundation.layout.*
+import androidx.compose.foundation.lazy.LazyListScope
+import androidx.compose.foundation.lazy.items
+import androidx.compose.foundation.text.selection.SelectionContainer
+import androidx.compose.material.*
+import androidx.compose.runtime.*
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.graphics.ImageBitmap
+import androidx.compose.ui.graphics.painter.BitmapPainter
+import androidx.compose.ui.platform.LocalDensity
+import androidx.compose.ui.platform.LocalUriHandler
+import androidx.compose.ui.platform.UriHandler
+import androidx.compose.ui.text.AnnotatedString
+import androidx.compose.ui.text.SpanStyle
+import androidx.compose.ui.text.buildAnnotatedString
+import androidx.compose.ui.text.font.FontFamily
+import androidx.compose.ui.text.font.FontWeight
+import androidx.compose.ui.text.withStyle
+import androidx.compose.ui.unit.dp
+import androidx.compose.ui.unit.sp
+import chat.simplex.common.model.*
+import chat.simplex.common.model.ChatController.appPrefs
+import chat.simplex.common.platform.*
+import chat.simplex.common.ui.theme.DEFAULT_PADDING
+import chat.simplex.common.ui.theme.WarningOrange
+import chat.simplex.common.views.chat.topPaddingToContent
+import chat.simplex.common.views.helpers.*
+import chat.simplex.common.views.usersettings.networkAndServers.documentMarkdownStyle
+import chat.simplex.res.*
+import com.mikepenz.markdown.compose.MarkdownElement
+import com.mikepenz.markdown.m2.Markdown
+import com.mikepenz.markdown.model.ImageData
+import com.mikepenz.markdown.model.ImageTransformer
+import com.mikepenz.markdown.model.State
+import com.mikepenz.markdown.model.markdownAnnotator
+import com.mikepenz.markdown.model.parseMarkdownFlow
+import dev.icerock.moko.resources.compose.painterResource
+import dev.icerock.moko.resources.compose.stringResource
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.flow.first
+import kotlinx.coroutines.withContext
+import org.intellij.markdown.MarkdownElementTypes
+import org.intellij.markdown.ast.ASTNode
+import org.intellij.markdown.ast.getTextInNode
+import org.intellij.markdown.flavours.gfm.GFMElementTypes
+import java.io.ByteArrayInputStream
+import java.io.File
+import java.net.URI
+import java.nio.ByteBuffer
+import java.nio.charset.CodingErrorAction
+
+private const val DATA_IMAGE = "data:image/"
+private const val MAX_MARKDOWN_VIEW_SIZE: Long = 1_048_576
+private const val MAX_MARKDOWN_LINE_LENGTH = 15_000
+private const val MAX_MARKDOWN_DEPTH = 32
+private const val MAX_MARKDOWN_TABLE_ROWS = 200
+private const val MAX_MARKDOWN_IMAGE_PIXELS = 2160L * 4320
+
+private val controlChar = Regex("[\\x00-\\x08\\x0B\\x0C\\x0E-\\x1F]")
+
+private val bidiControlChar = Regex("[\\u061C\\u200E\\u200F\\u202A-\\u202E\\u2066-\\u2069]")
+
+private val invisibleCharMarkerStyle = SpanStyle(color = WarningOrange)
+
+private class MarkdownDocument(val lines: List<String>, val formatted: State.Success?, val hasBidiControls: Boolean)
+
+fun isMarkdownFile(file: CIFile): Boolean =
+  file.fileSize <= MAX_MARKDOWN_VIEW_SIZE && file.fileName.substringAfterLast('.', "").lowercase() in listOf("md", "markdown")
+
+fun showMarkdownFile(file: CIFile) {
+  withLongRunningApi(slow = 600_000) {
+    var filePath = getLoadedFilePath(file)
+    if (chatModel.connectedToRemote() && filePath == null) {
+      file.loadRemoteFile(true)
+      filePath = getLoadedFilePath(file)
+    }
+    if (filePath == null) {
+      AlertManager.shared.showAlertMsg(MR.strings.file_not_found)
+      return@withLongRunningApi
+    }
+    val bytes = try {
+      val cryptoArgs = file.fileSource?.cryptoArgs
+      if (cryptoArgs != null) readCryptoFile(filePath, cryptoArgs) else File(filePath).readBytes()
+    } catch (e: Exception) {
+      AlertManager.shared.showAlertMsg(generalGetString(MR.strings.error), e.message)
+      return@withLongRunningApi
+    }
+    val text = decodedText(bytes)
+    val lines = text.lines()
+    val formatted = if (lines.all { it.length <= MAX_MARKDOWN_LINE_LENGTH }) formattedWithinLimits(text) else null
+    val document = MarkdownDocument(
+      lines.flatMap { line -> line.chunked(MAX_MARKDOWN_LINE_LENGTH).ifEmpty { listOf("") } },
+      formatted,
+      bidiControlChar.containsMatchIn(text)
+    )
+    ModalManager.center.showModal(endButtons = {
+      if (formatted != null) MarkdownViewSwitch()
+      MarkdownFileSaveButton(file, bytes)
+    }) {
+      MarkdownFileView(file.fileName, document)
+    }
+  }
+}
+
+private fun decodedText(bytes: ByteArray): String =
+  Charsets.UTF_8.newDecoder()
+    .onMalformedInput(CodingErrorAction.REPLACE)
+    .onUnmappableCharacter(CodingErrorAction.REPLACE)
+    .replaceWith("?")
+    .decode(ByteBuffer.wrap(bytes))
+    .toString()
+    .replace(controlChar, "?")
+
+private suspend fun formattedWithinLimits(text: String): State.Success? =
+  (parseMarkdownFlow(text).first { it !is State.Loading } as? State.Success)?.takeIf { treeWithinLimits(it.node) }
+
+private fun treeWithinLimits(root: ASTNode): Boolean {
+  val nodes = ArrayDeque(listOf(root to 1))
+  while (nodes.isNotEmpty()) {
+    val (node, depth) = nodes.removeLast()
+    if (depth > MAX_MARKDOWN_DEPTH) return false
+    if (node.type == GFMElementTypes.TABLE && node.children.count { it.type == GFMElementTypes.ROW } > MAX_MARKDOWN_TABLE_ROWS) return false
+    node.children.forEach { nodes.addLast(it to depth + 1) }
+  }
+  return true
+}
+
+@Composable
+private fun MarkdownViewSwitch() {
+  val textView = remember { appPrefs.markdownFileTextView.state }
+  IconButton({ appPrefs.markdownFileTextView.set(!textView.value) }) {
+    Icon(
+      painterResource(if (textView.value) MR.images.ic_article else MR.images.ic_code),
+      stringResource(if (textView.value) MR.strings.markdown_formatted_view else MR.strings.markdown_text_view),
+      tint = MaterialTheme.colors.primary
+    )
+  }
+}
+
+@Composable
+private fun MarkdownFileSaveButton(file: CIFile, bytes: ByteArray) {
+  val saveFileLauncher = rememberFileChooserLauncher(false, bytes) { to: URI? ->
+    if (to != null) copyBytesToFile(ByteArrayInputStream(bytes), to) {}
+  }
+  IconButton({ withLongRunningApi { saveFileLauncher.launch(file.fileName) } }) {
+    Icon(painterResource(MR.images.ic_download), stringResource(MR.strings.save_verb), tint = MaterialTheme.colors.primary)
+  }
+}
+
+@Composable
+private fun MarkdownFileView(fileName: String, document: MarkdownDocument) {
+  val textView = remember { appPrefs.markdownFileTextView.state }
+  val formatted = document.formatted
+  if (textView.value || formatted == null) {
+    SelectionContainer {
+      MarkdownFileColumn(fileName, document.hasBidiControls) {
+        items(document.lines) { line ->
+          Text(remember(line) { withInvisibleCharMarkers(line) }, Modifier.padding(horizontal = DEFAULT_PADDING), fontFamily = FontFamily.Monospace)
+        }
+      }
+    }
+  } else {
+    FormattedMarkdown(fileName, formatted, document.hasBidiControls)
+  }
+}
+
+private fun withInvisibleCharMarkers(line: String): AnnotatedString = buildAnnotatedString {
+  var start = 0
+  invisibleChar.findAll(line).forEach {
+    append(line.substring(start, it.range.first))
+    withStyle(invisibleCharMarkerStyle) { append(unicodeMarker(it.value)) }
+    start = it.range.last + 1
+  }
+  append(line.substring(start))
+}
+
+@Composable
+private fun FormattedMarkdown(fileName: String, formatted: State.Success, hasBidiControls: Boolean) {
+  val style = documentMarkdownStyle(h1 = MaterialTheme.typography.h2.copy(fontSize = 26.sp, fontWeight = FontWeight.Bold))
+  val codeSpanStyle = style.typography.inlineCode.toSpanStyle().copy(background = style.colors.inlineCodeBackground)
+  val annotator = remember(codeSpanStyle) {
+    markdownAnnotator { content, child ->
+      when (child.type) {
+        MarkdownElementTypes.CODE_SPAN -> {
+          withStyle(codeSpanStyle) { append(" ${child.getTextInNode(content).trim('`')} ") }
+          true
+        }
+        MarkdownElementTypes.IMAGE ->
+          if (imageLink(content, child)?.startsWith(DATA_IMAGE) == true) {
+            false
+          } else {
+            append(child.getTextInNode(content).toString())
+            true
+          }
+        else -> false
+      }
+    }
+  }
+  val imageTransformer = remember { DataImageTransformer() }
+  val parentUriHandler = LocalUriHandler.current
+  CompositionLocalProvider(LocalUriHandler provides remember { markdownFileUriHandler(parentUriHandler) }) {
+    Markdown(
+      formatted,
+      colors = style.colors,
+      typography = style.typography,
+      padding = style.padding,
+      imageTransformer = imageTransformer,
+      annotator = annotator,
+      components = style.components,
+      success = { state, components, _ ->
+        MarkdownFileColumn(fileName, hasBidiControls) {
+          items(state.node.children) { node ->
+            Column(Modifier.padding(horizontal = DEFAULT_PADDING)) {
+              MarkdownElement(node, components, state.content, skipLinkDefinition = state.linksLookedUp)
+            }
+          }
+        }
+      }
+    )
+  }
+}
+
+@Composable
+private fun MarkdownFileColumn(fileName: String, hasBidiControls: Boolean, content: LazyListScope.() -> Unit) {
+  val oneHandUI = remember { appPrefs.oneHandUI.state }
+  LazyColumnWithScrollBar(
+    contentPadding = PaddingValues(
+      top = if (oneHandUI.value) WindowInsets.statusBars.asPaddingValues().calculateTopPadding() + DEFAULT_PADDING + 5.dp else topPaddingToContent(false)
+    )
+  ) {
+    item { AppBarTitle(fileName) }
+    if (hasBidiControls) {
+      item {
+        Text(stringResource(MR.strings.markdown_file_bidi_warning), Modifier.padding(start = DEFAULT_PADDING, end = DEFAULT_PADDING, bottom = DEFAULT_PADDING), color = WarningOrange)
+      }
+    }
+    content()
+    item { SectionBottomSpacer() }
+  }
+}
+
+private fun imageLink(content: String, image: ASTNode): String? =
+  image.children.firstOrNull { it.type == MarkdownElementTypes.INLINE_LINK }
+    ?.children?.firstOrNull { it.type == MarkdownElementTypes.LINK_DESTINATION }
+    ?.getTextInNode(content)?.toString()
+
+private fun markdownFileUriHandler(parentUriHandler: UriHandler): UriHandler = object: UriHandler {
+  override fun openUri(uri: String) {
+    val format = parseToMarkdown(uri)?.singleOrNull()?.format
+    when {
+      format is Format.SimplexLink -> parentUriHandler.openVerifiedSimplexUri(format.simplexUri)
+      format is Format.Uri && (uri.startsWith("https://") || uri.startsWith("http://")) -> openBrowserAlert(uri, parentUriHandler)
+      else -> showInvalidLinkAlert(uri)
+    }
+  }
+}
+
+private class DataImageTransformer : ImageTransformer {
+  private var pixels = MAX_MARKDOWN_IMAGE_PIXELS
+  private val images = mutableMapOf<String, ImageBitmap?>()
+
+  @Composable
+  override fun transform(link: String): ImageData? {
+    val width = with(LocalDensity.current) { LocalWindowWidth().roundToPx() }
+    val bitmap by produceState<ImageBitmap?>(null, link) {
+      value = withContext(Dispatchers.Default) { decodedImage(link, width) }
+    }
+    return remember(bitmap) { bitmap?.let { ImageData(BitmapPainter(it)) } }
+  }
+
+  private fun decodedImage(link: String, width: Int): ImageBitmap? = synchronized(this) {
+    if (link !in images) images[link] = imageWithinBudget(link, width)
+    images[link]
+  }
+
+  private fun imageWithinBudget(link: String, width: Int): ImageBitmap? =
+    link.takeIf { it.startsWith(DATA_IMAGE) }
+      ?.let { decodeBase64Image(it.substringAfter("base64,"), width) }
+      ?.takeIf { it.width.toLong() * it.height <= pixels }
+      ?.also { pixels -= it.width.toLong() * it.height }
+}
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/TextItemView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/TextItemView.kt
index da64862c03..c198451464 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/TextItemView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chat/item/TextItemView.kt
@@ -96,6 +96,7 @@ fun itemSegmentDisplayText(ft: FormattedText, ci: ChatItem, linkMode: SimplexLin
       } else if (mention != null) mentionText(ft.format.memberName)
       else ft.text
     }
+    is Format.Uri -> displayedUri(ft.text)
     is Format.HyperLink -> ft.format.showText ?: ft.text
     is Format.SimplexLink -> {
       val t = ft.format.showText
@@ -283,7 +284,7 @@ fun MarkdownText (
               val s = ft.text
               val link = if (s.startsWith("http://") || s.startsWith("https://")) s else "https://$s"
               withAnnotation(tag = "WEB_URL", annotation = link) {
-                withStyle(ftStyle) { append(ft.text) }
+                withStyle(ftStyle) { append(displayedUri(ft.text)) }
               }
             }
             is Format.HyperLink -> {
@@ -535,19 +536,22 @@ fun openBrowserAlert(uri: String, uriHandler: UriHandler) {
   if (res == null) {
     showInvalidLinkAlert(uri, err)
   } else {
-    val message = if (uri.count() > 160) uri.substring(0, 159) + "…" else uri
+    val shownUri = displayedUri(uri)
+    val message = if (shownUri.count() > 160) shownUri.substring(0, 159) + "…" else shownUri
     val sanitizedUri = res.second
     if (sanitizedUri == null) {
       AlertManager.shared.showAlertDialog(
         generalGetString(MR.strings.privacy_chat_list_open_web_link_question),
         message,
         confirmText = generalGetString(MR.strings.open_verb),
-        onConfirm = { safeOpenUri(uri, uriHandler) }
+        onConfirm = { safeOpenUri(uri, uriHandler) },
+        parseHtml = false
       )
     } else {
       AlertManager.shared.showAlertDialogButtonsColumn(
         generalGetString(MR.strings.privacy_chat_list_open_web_link_question),
         message,
+        parseHtml = false,
         buttons = {
         Column {
           SectionItemView({
@@ -585,7 +589,7 @@ fun safeOpenUri(uri: String, uriHandler: UriHandler) {
 }
 
 fun showInvalidLinkAlert(uri: String, error: String? = null) {
-  val message = if (error.isNullOrEmpty()) { uri } else { error + "\n" + uri }
+  val message = if (error.isNullOrEmpty()) { displayedUri(uri) } else { error + "\n" + displayedUri(uri) }
   AlertManager.shared.showAlertMsg(generalGetString(MR.strings.error_parsing_uri_title), message)
 }
 
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt
index 489ebb8c39..32e0befa3f 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/ChatListNavLinkView.kt
@@ -586,7 +586,7 @@ fun ContactConnectionMenuItems(rhId: Long?, chatInfo: ChatInfo.ContactConnection
     onClick = {
       ModalManager.center.closeModals()
       ModalManager.end.closeModals()
-      ModalManager.center.showModalCloseable(settings = true, showClose = appPlatform.isAndroid, cardScreen = true) { close ->
+      ModalManager.center.showModalCloseable(settings = true, cardScreen = true) { close ->
         ContactConnectionInfoView(chatModel, rhId, chatInfo.contactConnection.connLinkInv, chatInfo.contactConnection, true, close)
       }
       showMenu.value = false
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.kt
index 652d072c9c..ea567d7da6 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/chatlist/UserPicker.kt
@@ -217,23 +217,43 @@ fun UserPicker(
 
     @Composable
     fun SecondSection() {
-      UserPickerOptionRow(
-        painterResource(MR.images.ic_qr_code),
-        if (chatModel.userAddress.value != null) generalGetString(MR.strings.your_simplex_contact_address) else generalGetString(MR.strings.create_simplex_address),
-        showCustomModal { it, close -> UserAddressView(it, shareViaProfile = it.currentUser.value!!.addressShared, close = close) }, disabled = stopped
-      )
-      UserPickerOptionRow(
-        painterResource(MR.images.ic_toggle_on),
-        stringResource(MR.strings.chat_preferences),
-        click = if (stopped) null else ({
-          showCustomModal { m, close ->
-            PreferencesView(m, m.currentUser.value ?: return@showCustomModal, close)
-          }()
-        }),
-        disabled = stopped
-      )
+      if (!chatModel.desktopNoUserNoRemote) {
+        UserPickerOptionRow(
+          painterResource(MR.images.ic_qr_code),
+          if (chatModel.userAddress.value != null) generalGetString(MR.strings.your_simplex_contact_address) else generalGetString(MR.strings.create_simplex_address),
+          showCustomModal { it, close ->
+            val user = it.currentUser.value
+            if (user != null) {
+              UserAddressView(it, shareViaProfile = user.addressShared, close = close)
+            } else {
+              val modal = this
+              LaunchedEffect(modal, ModalManager.start.modalCount.value) {
+                if (ModalManager.start.isLastModal(modal)) close()
+              }
+            }
+          }, disabled = stopped
+        )
+        UserPickerOptionRow(
+          painterResource(MR.images.ic_toggle_on),
+          stringResource(MR.strings.chat_preferences),
+          click = if (stopped) null else ({
+            showCustomModal { m, close ->
+              val user = m.currentUser.value
+              if (user != null) {
+                PreferencesView(m, user, close)
+              } else {
+                val modal = this
+                LaunchedEffect(modal, ModalManager.start.modalCount.value) {
+                  if (ModalManager.start.isLastModal(modal)) close()
+                }
+              }
+            }()
+          }),
+          disabled = stopped
+        )
+      }
       if (appPlatform.isDesktop) {
-        Divider(Modifier.padding(DEFAULT_PADDING))
+        if (!chatModel.desktopNoUserNoRemote) Divider(Modifier.padding(DEFAULT_PADDING))
 
         val inactiveUsers = users.filter { !it.user.activeUser }
 
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/ModalView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/ModalView.kt
index 02c0b45de4..f8e81c8ee2 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/ModalView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/ModalView.kt
@@ -10,7 +10,6 @@ import androidx.compose.ui.Alignment
 import androidx.compose.ui.Modifier
 import androidx.compose.ui.graphics.Color
 import chat.simplex.common.model.ChatController.appPrefs
-import chat.simplex.common.model.ChatModel
 import chat.simplex.common.platform.*
 import LocalCardScreen
 import chat.simplex.common.ui.theme.*
@@ -116,6 +115,8 @@ class ModalManager(private val placement: ModalPlacement? = null) {
 
   fun isLastModalOpen(id: ModalViewId): Boolean = modalViews.lastOrNull()?.id == id
 
+  fun isLastModal(data: ModalData): Boolean = modalViews.getOrNull(modalViews.size - toRemove.size - 1)?.data === data
+
   fun showModal(settings: Boolean = false, showClose: Boolean = true, id: ModalViewId? = null, forceAnimated: Boolean = false, cardScreen: Boolean = false, endButtons: @Composable RowScope.() -> Unit = {}, content: @Composable ModalData.() -> Unit) {
     showCustomModal(id = id, forceAnimated = forceAnimated) { close ->
       ModalView(close, showClose = showClose, cardScreen = cardScreen, endButtons = endButtons, content = { content() })
@@ -142,9 +143,7 @@ class ModalManager(private val placement: ModalPlacement? = null) {
     modalViews.add(ModalViewHolder(id, anim, data, modal))
     _modalCount.value = modalViews.size - toRemove.size
 
-    if (placement == ModalPlacement.CENTER) {
-      ChatModel.chatId.value = null
-    } else if (placement == ModalPlacement.END) {
+    if (placement == ModalPlacement.END) {
       desktopExpandWindowToWidth(DEFAULT_START_MODAL_WIDTH * sqrt(appPrefs.fontScale.get()) + DEFAULT_MIN_CENTER_MODAL_WIDTH + DEFAULT_END_MODAL_WIDTH * sqrt(appPrefs.fontScale.get()))
     }
   }
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt
index dfe33e3595..81a64cb527 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/helpers/Utils.kt
@@ -617,13 +617,27 @@ fun UriHandler.openExternalLink(uri: String) {
   } else {
     AlertManager.shared.showAlertDialog(
       title = generalGetString(MR.strings.open_external_link_title),
-      text = uri,
+      text = displayedUri(uri),
       confirmText = generalGetString(MR.strings.open_verb),
-      onConfirm = { uriHandler.openUriCatching(uri) }
+      onConfirm = { uriHandler.openUriCatching(uri) },
+      parseHtml = false
     )
   }
 }
 
+val invisibleChar = Regex("\\p{Cf}")
+
+private val nonAsciiChar = Regex("[^\\x00-\\x7F]")
+
+fun unicodeMarker(c: String): String = "[U+" + Integer.toHexString(c.codePointAt(0)).uppercase().padStart(4, '0') + "]"
+
+fun displayedUri(uri: String): String {
+  val authorityStart = uri.indexOf("://").takeIf { it >= 0 }?.plus(3) ?: 0
+  val authorityEnd = uri.indexOfAny(charArrayOf('/', '?', '#'), authorityStart).takeIf { it >= 0 } ?: uri.length
+  val authority = uri.substring(authorityStart, authorityEnd).replace(nonAsciiChar) { unicodeMarker(it.value) }
+  return uri.replaceRange(authorityStart, authorityEnd, authority).replace(invisibleChar) { unicodeMarker(it.value) }
+}
+
 fun IntSize.Companion.Saver(): Saver<IntSize, *> = Saver(
   save = { it.width to it.height },
   restore = { IntSize(it.first, it.second) }
diff --git a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/networkAndServers/OperatorView.kt b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/networkAndServers/OperatorView.kt
index 1e46091ea3..20a182551c 100644
--- a/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/networkAndServers/OperatorView.kt
+++ b/apps/multiplatform/common/src/commonMain/kotlin/chat/simplex/common/views/usersettings/networkAndServers/OperatorView.kt
@@ -33,10 +33,14 @@ import chat.simplex.common.views.helpers.*
 import chat.simplex.common.views.onboarding.*
 import chat.simplex.res.*
 import com.mikepenz.markdown.compose.Markdown
+import com.mikepenz.markdown.compose.components.MarkdownComponents
 import com.mikepenz.markdown.compose.components.markdownComponents
 import com.mikepenz.markdown.compose.elements.MarkdownHeader
 import com.mikepenz.markdown.m2.markdownColor
 import com.mikepenz.markdown.m2.markdownTypography
+import com.mikepenz.markdown.model.MarkdownColors
+import com.mikepenz.markdown.model.MarkdownPadding
+import com.mikepenz.markdown.model.MarkdownTypography
 import com.mikepenz.markdown.model.markdownPadding
 import dev.icerock.moko.resources.compose.painterResource
 import dev.icerock.moko.resources.compose.stringResource
@@ -771,22 +775,36 @@ expect fun ConditionsBox(modifier: Modifier, scrollState: ScrollState, content:
 
 @Composable
 private fun ConditionsMarkdown(text: String) {
+  val style = documentMarkdownStyle()
   Markdown(text,
-    markdownColor(linkText = MaterialTheme.colors.primary),
+    style.colors,
+    style.typography,
+    Modifier.padding(8.dp),
+    // using CommonMarkFlavourDescriptor instead of GFMFlavourDescriptor because it shows `https://simplex.chat/` (link inside backticks) incorrectly
+    flavour = CommonMarkFlavourDescriptor(),
+    components = style.components,
+    padding = style.padding
+  )
+}
+
+class DocumentMarkdownStyle(val colors: MarkdownColors, val typography: MarkdownTypography, val components: MarkdownComponents, val padding: MarkdownPadding)
+
+@Composable
+fun documentMarkdownStyle(h1: TextStyle = MaterialTheme.typography.body1): DocumentMarkdownStyle =
+  DocumentMarkdownStyle(
+    markdownColor(),
     markdownTypography(
-      h1 = MaterialTheme.typography.body1,
+      h1 = h1,
       h2 = MaterialTheme.typography.h3.copy(fontSize = 22.sp, fontWeight = FontWeight.Bold),
       h3 = MaterialTheme.typography.h4.copy(fontWeight = FontWeight.Bold),
       h4 = MaterialTheme.typography.h5.copy(fontSize = 16.sp, fontWeight = FontWeight.Bold),
       h5 = MaterialTheme.typography.h6.copy(fontWeight = FontWeight.Bold),
       link = MaterialTheme.typography.body1.copy(
+        color = MaterialTheme.colors.primary,
         textDecoration = TextDecoration.Underline
       )
     ),
-    Modifier.padding(8.dp),
-    // using CommonMarkFlavourDescriptor instead of GFMFlavourDescriptor because it shows `https://simplex.chat/` (link inside backticks) incorrectly
-    flavour = CommonMarkFlavourDescriptor(),
-    components = markdownComponents(
+    markdownComponents(
       heading2 = {
         Spacer(Modifier.height(10.dp))
         MarkdownHeader(it.content, it.node, it.typography.h2)
@@ -803,9 +821,8 @@ private fun ConditionsMarkdown(text: String) {
         Spacer(Modifier.height(4.dp))
       },
     ),
-    padding = markdownPadding(block = 4.dp)
+    markdownPadding(block = 4.dp)
   )
-}
 
 @Composable
 private fun ConditionsLinkView(conditionsLink: String) {
diff --git a/apps/multiplatform/common/src/commonMain/moko-resources/base/strings.xml b/apps/multiplatform/common/src/commonMain/moko-resources/base/strings.xml
index 5c505ed819..2f6a768a5e 100644
--- a/apps/multiplatform/common/src/commonMain/moko-resources/base/strings.xml
+++ b/apps/multiplatform/common/src/commonMain/moko-resources/base/strings.xml
@@ -597,6 +597,17 @@
 
   <!-- ComposeView.kt, helpers -->
   <string name="attach">Attach</string>
+  <string name="icon_descr_emoji">Emoji</string>
+  <string name="emoji_category_smileys">Smileys &amp; emotion</string>
+  <string name="emoji_category_people">People &amp; body</string>
+  <string name="emoji_category_animals">Animals &amp; nature</string>
+  <string name="emoji_category_food">Food &amp; drink</string>
+  <string name="emoji_category_travel">Travel &amp; places</string>
+  <string name="emoji_category_activities">Activities</string>
+  <string name="emoji_category_objects">Objects</string>
+  <string name="emoji_category_symbols">Symbols</string>
+  <string name="emoji_category_flags">Flags</string>
+  <string name="no_emoji_found">No emoji found</string>
   <string name="icon_descr_context">Context icon</string>
   <string name="icon_descr_cancel_image_preview">Cancel image preview</string>
   <string name="icon_descr_cancel_file_preview">Cancel file preview</string>
@@ -697,6 +708,9 @@
   <string name="file_saved">File saved</string>
   <string name="file_not_found">File not found</string>
   <string name="error_saving_file">Error saving file</string>
+  <string name="markdown_formatted_view">Formatted view</string>
+  <string name="markdown_text_view">Text view</string>
+  <string name="markdown_file_bidi_warning">This file has text direction characters. The text can be shown in a different order than it is written.</string>
   <string name="loading_remote_file_title">Loading the file </string>
   <string name="loading_remote_file_desc">Please, wait while the file is being loaded from the linked mobile</string>
   <string name="file_error">File error</string>
diff --git a/apps/multiplatform/common/src/commonTest/kotlin/chat/simplex/app/ComposeEmojiTest.kt b/apps/multiplatform/common/src/commonTest/kotlin/chat/simplex/app/ComposeEmojiTest.kt
new file mode 100644
index 0000000000..da2fecff60
--- /dev/null
+++ b/apps/multiplatform/common/src/commonTest/kotlin/chat/simplex/app/ComposeEmojiTest.kt
@@ -0,0 +1,42 @@
+package chat.simplex.app
+
+import androidx.compose.ui.text.TextRange
+import chat.simplex.common.views.chat.ComposeMessage
+import chat.simplex.common.views.chat.insertingEmoji
+import kotlin.test.Test
+import kotlin.test.assertEquals
+
+// use this command for testing:
+// ./gradlew desktopTest
+class ComposeEmojiTest {
+  @Test
+  fun testInsertIntoEmptyMessage() {
+    assertEquals(ComposeMessage("😀", TextRange(2)), ComposeMessage().insertingEmoji("😀"))
+  }
+
+  @Test
+  fun testInsertAtCursor() {
+    assertEquals(ComposeMessage("hi😀 there", TextRange(4)), ComposeMessage("hi there", TextRange(2)).insertingEmoji("😀"))
+    assertEquals(ComposeMessage("😀hi", TextRange(2)), ComposeMessage("hi", TextRange(0)).insertingEmoji("😀"))
+    assertEquals(ComposeMessage("hi👍", TextRange(4)), ComposeMessage("hi").insertingEmoji("👍"))
+  }
+
+  @Test
+  fun testReplaceSelection() {
+    assertEquals(ComposeMessage("say ❤️!", TextRange(6)), ComposeMessage("say love!", TextRange(4, 8)).insertingEmoji("❤️"))
+    // selection made right to left has start > end
+    assertEquals(ComposeMessage("say ❤️!", TextRange(6)), ComposeMessage("say love!", TextRange(8, 4)).insertingEmoji("❤️"))
+  }
+
+  @Test
+  fun testInsertAfterEmoji() {
+    val flag = "🏴󠁧󠁢󠁷󠁬󠁳󠁿"
+    val withFlag = ComposeMessage(flag)
+    assertEquals(ComposeMessage(flag + "👩‍💻", TextRange(flag.length + "👩‍💻".length)), withFlag.insertingEmoji("👩‍💻"))
+  }
+
+  @Test
+  fun testSelectionBeyondTextIsClamped() {
+    assertEquals(ComposeMessage("ab😀", TextRange(4)), ComposeMessage("ab", TextRange(5)).insertingEmoji("😀"))
+  }
+}
diff --git a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/Images.desktop.kt b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/Images.desktop.kt
index 9c6139b493..925698154e 100644
--- a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/Images.desktop.kt
+++ b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/platform/Images.desktop.kt
@@ -5,6 +5,7 @@ import androidx.compose.ui.unit.IntOffset
 import androidx.compose.ui.unit.IntSize
 import boofcv.io.image.ConvertBufferedImage
 import boofcv.struct.image.GrayU8
+import chat.simplex.common.views.helpers.decodeBoundedBufferedImage
 import chat.simplex.res.*
 import org.jetbrains.skia.Image
 import java.awt.RenderingHints
@@ -54,6 +55,14 @@ actual fun base64ToBitmap(base64ImageString: String): ImageBitmap {
   }
 }
 
+actual fun decodeBase64Image(base64: String, width: Int): ImageBitmap? =
+  try {
+    decodeBoundedBufferedImage(Base64.getMimeDecoder().decode(base64), width).toComposeImageBitmap()
+  } catch (e: Throwable) {
+    Log.e(TAG, "decodeBase64Image error: $e")
+    null
+  }
+
 actual fun resizeImageToStrSize(image: ImageBitmap, maxDataSize: Long): String {
   var img = image
   var str = compressImageStr(img)
diff --git a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt
new file mode 100644
index 0000000000..65a3bb8c5a
--- /dev/null
+++ b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt
@@ -0,0 +1,248 @@
+package chat.simplex.common.views.chat
+
+import androidx.compose.foundation.*
+import androidx.compose.foundation.layout.*
+import androidx.compose.foundation.lazy.grid.*
+import androidx.compose.foundation.shape.CircleShape
+import androidx.compose.foundation.shape.RoundedCornerShape
+import androidx.compose.material.*
+import androidx.compose.runtime.*
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.draw.clip
+import androidx.compose.ui.focus.focusProperties
+import androidx.compose.ui.graphics.Color
+import androidx.compose.ui.graphics.painter.Painter
+import androidx.compose.ui.input.key.*
+import androidx.compose.ui.layout.onGloballyPositioned
+import androidx.compose.ui.layout.positionInWindow
+import androidx.compose.ui.platform.LocalDensity
+import androidx.compose.ui.unit.*
+import androidx.compose.ui.window.*
+import chat.simplex.common.ui.theme.DEFAULT_PADDING_HALF
+import chat.simplex.common.ui.theme.EmojiFont
+import chat.simplex.common.views.helpers.KeyChangeEffect
+import chat.simplex.common.views.helpers.SearchTextField
+import chat.simplex.res.*
+import dev.icerock.moko.resources.StringResource
+import dev.icerock.moko.resources.compose.painterResource
+import dev.icerock.moko.resources.compose.stringResource
+import kotlinx.coroutines.launch
+
+private const val EMOJI_DATA_RESOURCE = "/emoji/emoji.txt"
+private const val EMOJI_GROUP_PREFIX = "@"
+private val EMOJI_POPUP_WIDTH = 360.dp
+private val EMOJI_POPUP_HEIGHT = 420.dp
+private val EMOJI_CELL_SIZE = 38.dp
+private val EMOJI_SIZE = 26.dp
+private val EMOJI_TAB_SIZE = 32.dp
+private val EMOJI_TAB_ICON_SIZE = 20.dp
+// the buttons left of the message field overlap by 8 dp, this keeps the emoji button a little apart
+private val EMOJI_BUTTON_START_PADDING = 4.dp
+
+enum class EmojiCategory(val unicodeGroup: String, val icon: String, val title: StringResource) {
+  Smileys("Smileys & Emotion", "😀", MR.strings.emoji_category_smileys),
+  People("People & Body", "👋", MR.strings.emoji_category_people),
+  Animals("Animals & Nature", "🐻", MR.strings.emoji_category_animals),
+  Food("Food & Drink", "🍔", MR.strings.emoji_category_food),
+  Travel("Travel & Places", "🚗", MR.strings.emoji_category_travel),
+  Activities("Activities", "⚽", MR.strings.emoji_category_activities),
+  Objects("Objects", "💡", MR.strings.emoji_category_objects),
+  Symbols("Symbols", "🔣", MR.strings.emoji_category_symbols),
+  Flags("Flags", "🏁", MR.strings.emoji_category_flags),
+}
+
+data class EmojiData(val emoji: String, val name: String)
+
+data class EmojiSection(val category: EmojiCategory, val emojis: List<EmojiData>)
+
+fun parseEmojiData(lines: Sequence<String>): List<EmojiSection> {
+  val sections = mutableListOf<EmojiSection>()
+  var emojis = mutableListOf<EmojiData>()
+  for (line in lines) {
+    if (line.isEmpty()) continue
+    if (line.startsWith(EMOJI_GROUP_PREFIX)) {
+      val group = line.removePrefix(EMOJI_GROUP_PREFIX)
+      val category = EmojiCategory.entries.firstOrNull { it.unicodeGroup == group }
+        ?: throw IllegalArgumentException("unknown emoji group: $group")
+      emojis = mutableListOf()
+      sections.add(EmojiSection(category, emojis))
+    } else {
+      val (emoji, name) = line.split("\t", limit = 2)
+      emojis.add(EmojiData(emoji, name))
+    }
+  }
+  return sections
+}
+
+val emojiSections: List<EmojiSection> by lazy {
+  val stream = EmojiCategory::class.java.getResourceAsStream(EMOJI_DATA_RESOURCE)
+    ?: throw IllegalStateException("missing resource $EMOJI_DATA_RESOURCE")
+  stream.bufferedReader().useLines(::parseEmojiData)
+}
+
+fun searchEmoji(sections: List<EmojiSection>, query: String): List<EmojiData> {
+  val q = query.trim()
+  return sections.flatMap { s -> s.emojis.filter { it.name.contains(q, ignoreCase = true) } }
+}
+
+@Composable
+actual fun ComposeEmojiButton(pickerShown: MutableState<Boolean>, enabled: Boolean, onEmoji: (String) -> Unit) {
+  // the popup opens above the button, so in a short window it must not be taller than the space there
+  var spaceAbove by remember { mutableStateOf(EMOJI_POPUP_HEIGHT) }
+  val density = LocalDensity.current
+  Box(Modifier.padding(start = EMOJI_BUTTON_START_PADDING).onGloballyPositioned { spaceAbove = with(density) { it.positionInWindow().y.toDp() } }) {
+    EmojiIconButton(painterResource(MR.images.ic_add_reaction), stringResource(MR.strings.icon_descr_emoji), enabled) {
+      pickerShown.value = !pickerShown.value
+    }
+    if (pickerShown.value) {
+      Popup(
+        popupPositionProvider = AboveAnchorPositionProvider,
+        onDismissRequest = { pickerShown.value = false },
+        properties = PopupProperties(focusable = true),
+        // closing on KeyUp, as the window does, so that the same key release does not also close the top modal
+        onKeyEvent = {
+          if (it.key == Key.Escape) {
+            if (it.type == KeyEventType.KeyUp) pickerShown.value = false
+            true
+          } else false
+        }
+      ) {
+        EmojiPicker(height = minOf(EMOJI_POPUP_HEIGHT, spaceAbove), onEmoji = onEmoji)
+      }
+    }
+  }
+}
+
+private object AboveAnchorPositionProvider : PopupPositionProvider {
+  override fun calculatePosition(anchorBounds: IntRect, windowSize: IntSize, layoutDirection: LayoutDirection, popupContentSize: IntSize): IntOffset {
+    val x = if (layoutDirection == LayoutDirection.Ltr) anchorBounds.left else anchorBounds.right - popupContentSize.width
+    return IntOffset(
+      x.coerceIn(0, maxOf(0, windowSize.width - popupContentSize.width)),
+      (anchorBounds.top - popupContentSize.height).coerceAtLeast(0)
+    )
+  }
+}
+
+@Composable
+private fun EmojiPicker(height: Dp, onEmoji: (String) -> Unit) {
+  val sections = remember { emojiSections }
+  val query = remember { mutableStateOf("") }
+  val found = remember { derivedStateOf { if (query.value.isBlank()) null else searchEmoji(sections, query.value) } }
+  val gridState = rememberLazyGridState()
+  KeyChangeEffect(found.value) { gridState.scrollToItem(0) }
+  val headerIndexes = remember(sections) {
+    var index = 0
+    sections.map { s -> index.also { index += s.emojis.size + 1 } }
+  }
+  Surface(
+    Modifier.size(EMOJI_POPUP_WIDTH, height),
+    shape = RoundedCornerShape(12.dp),
+    elevation = 8.dp,
+    border = BorderStroke(1.dp, MaterialTheme.colors.secondary.copy(alpha = 0.2f))
+  ) {
+    Column {
+      Row(verticalAlignment = Alignment.CenterVertically) {
+        Icon(
+          painterResource(MR.images.ic_search),
+          contentDescription = null,
+          Modifier.padding(start = DEFAULT_PADDING_HALF, end = DEFAULT_PADDING_HALF).size(22.dp),
+          tint = MaterialTheme.colors.secondary
+        )
+        SearchTextField(Modifier.weight(1f), alwaysVisible = false) { query.value = it }
+      }
+      if (found.value == null) {
+        EmojiCategoryTabs(sections, headerIndexes, gridState)
+      }
+      Divider()
+      LazyVerticalGrid(
+        columns = GridCells.Adaptive(EMOJI_CELL_SIZE),
+        state = gridState,
+        modifier = Modifier.fillMaxSize(),
+        contentPadding = PaddingValues(6.dp)
+      ) {
+        val foundEmojis = found.value
+        if (foundEmojis == null) {
+          sections.forEach { s ->
+            sectionHeader(s.category.title)
+            items(s.emojis) { EmojiCell(it.emoji, onEmoji) }
+          }
+        } else if (foundEmojis.isEmpty()) {
+          sectionHeader(MR.strings.no_emoji_found)
+        } else {
+          items(foundEmojis) { EmojiCell(it.emoji, onEmoji) }
+        }
+      }
+    }
+  }
+}
+
+@Composable
+private fun EmojiCategoryTabs(sections: List<EmojiSection>, headerIndexes: List<Int>, gridState: LazyGridState) {
+  val scope = rememberCoroutineScope()
+  val selected = remember {
+    derivedStateOf { headerIndexes.indexOfLast { it <= gridState.firstVisibleItemIndex } }
+  }
+  Row(Modifier.fillMaxWidth().padding(horizontal = 6.dp), horizontalArrangement = Arrangement.SpaceBetween) {
+    sections.forEachIndexed { i, s ->
+      EmojiTab(selected = selected.value == i, onClick = { scope.launch { gridState.scrollToItem(headerIndexes[i]) } }) {
+        Text(s.category.icon, fontFamily = EmojiFont, fontSize = with(LocalDensity.current) { EMOJI_TAB_ICON_SIZE.toSp() })
+      }
+    }
+  }
+}
+
+@Composable
+private fun EmojiTab(selected: Boolean, onClick: () -> Unit, content: @Composable () -> Unit) {
+  Box(
+    Modifier
+      .size(EMOJI_TAB_SIZE)
+      .clip(RoundedCornerShape(8.dp))
+      .background(if (selected) MaterialTheme.colors.secondary.copy(alpha = 0.15f) else Color.Transparent)
+      .focusProperties { canFocus = false }
+      .clickable(onClick = onClick),
+    contentAlignment = Alignment.Center
+  ) {
+    content()
+  }
+}
+
+private fun LazyGridScope.sectionHeader(title: StringResource) {
+  item(span = { GridItemSpan(maxLineSpan) }) {
+    Text(
+      stringResource(title),
+      Modifier.padding(start = 4.dp, top = 8.dp, bottom = 4.dp),
+      style = MaterialTheme.typography.body2,
+      color = MaterialTheme.colors.secondary
+    )
+  }
+}
+
+@Composable
+private fun EmojiCell(emoji: String, onEmoji: (String) -> Unit) {
+  Box(
+    Modifier
+      .size(EMOJI_CELL_SIZE)
+      .clip(RoundedCornerShape(8.dp))
+      // not focusable, so that the search field keeps focus and typing after a click goes to search
+      .focusProperties { canFocus = false }
+      .clickable { onEmoji(emoji) },
+    contentAlignment = Alignment.Center
+  ) {
+    Text(emoji, fontFamily = EmojiFont, fontSize = with(LocalDensity.current) { EMOJI_SIZE.toSp() }, maxLines = 1)
+  }
+}
+
+@Composable
+private fun EmojiIconButton(icon: Painter, contentDescription: String, enabled: Boolean, onClick: () -> Unit) {
+  IconButton(onClick, enabled = enabled) {
+    Icon(
+      icon,
+      contentDescription = contentDescription,
+      tint = if (enabled) MaterialTheme.colors.primary else MaterialTheme.colors.secondary,
+      modifier = Modifier
+        .size(28.dp)
+        .clip(CircleShape)
+    )
+  }
+}
diff --git a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.desktop.kt b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.desktop.kt
index 98ffa7c8a4..dd76e86c81 100644
--- a/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.desktop.kt
+++ b/apps/multiplatform/common/src/desktopMain/kotlin/chat/simplex/common/views/chat/item/CIImageView.desktop.kt
@@ -23,7 +23,7 @@ actual fun SimpleAndAnimatedImageView(
   // still image. A full screen modal is shown beside the chat rather than in place of it, so this item keeps
   // composing under one and would otherwise decode where nobody can see it.
   val frame = if (smallView) imageBitmap
-  else rememberAnimatedImage(data, imageBitmap) { blurred.value || ModalManager.fullscreen.hasModalsOpen() }
+  else rememberAnimatedImage(data, imageBitmap) { blurred.value || ModalManager.fullscreen.hasModalsOpen() || ModalManager.center.hasModalsOpen() }
   ImageView(BitmapPainter(frame)) {
     if (getLoadedFilePath(file) != null) {
       ModalManager.fullscreen.showCustomModal(animated = false) { close ->
diff --git a/apps/multiplatform/common/src/desktopMain/resources/emoji/emoji.txt b/apps/multiplatform/common/src/desktopMain/resources/emoji/emoji.txt
new file mode 100644
index 0000000000..2a25c14c9f
--- /dev/null
+++ b/apps/multiplatform/common/src/desktopMain/resources/emoji/emoji.txt
@@ -0,0 +1,1879 @@
+@Smileys & Emotion
+😀	grinning face
+😃	grinning face with big eyes
+😄	grinning face with smiling eyes
+😁	beaming face with smiling eyes
+😆	grinning squinting face
+😅	grinning face with sweat
+🤣	rolling on the floor laughing
+😂	face with tears of joy
+🙂	slightly smiling face
+🙃	upside-down face
+🫠	melting face
+😉	winking face
+😊	smiling face with smiling eyes
+😇	smiling face with halo
+🥰	smiling face with hearts
+😍	smiling face with heart-eyes
+🤩	star-struck
+😘	face blowing a kiss
+😗	kissing face
+☺️	smiling face
+😚	kissing face with closed eyes
+😙	kissing face with smiling eyes
+🥲	smiling face with tear
+😋	face savoring food
+😛	face with tongue
+😜	winking face with tongue
+🤪	zany face
+😝	squinting face with tongue
+🤑	money-mouth face
+🤗	smiling face with open hands
+🤭	face with hand over mouth
+🫢	face with open eyes and hand over mouth
+🫣	face with peeking eye
+🤫	shushing face
+🤔	thinking face
+🫡	saluting face
+🤐	zipper-mouth face
+🤨	face with raised eyebrow
+😐	neutral face
+😑	expressionless face
+😶	face without mouth
+🫥	dotted line face
+😶‍🌫️	face in clouds
+😏	smirking face
+😒	unamused face
+🙄	face with rolling eyes
+😬	grimacing face
+😮‍💨	face exhaling
+🤥	lying face
+🫨	shaking face
+😌	relieved face
+😔	pensive face
+😪	sleepy face
+🤤	drooling face
+😴	sleeping face
+😷	face with medical mask
+🤒	face with thermometer
+🤕	face with head-bandage
+🤢	nauseated face
+🤮	face vomiting
+🤧	sneezing face
+🥵	hot face
+🥶	cold face
+🥴	woozy face
+😵	face with crossed-out eyes
+😵‍💫	face with spiral eyes
+🤯	exploding head
+🤠	cowboy hat face
+🥳	partying face
+🥸	disguised face
+😎	smiling face with sunglasses
+🤓	nerd face
+🧐	face with monocle
+😕	confused face
+🫤	face with diagonal mouth
+😟	worried face
+🙁	slightly frowning face
+☹️	frowning face
+😮	face with open mouth
+😯	hushed face
+😲	astonished face
+😳	flushed face
+🥺	pleading face
+🥹	face holding back tears
+😦	frowning face with open mouth
+😧	anguished face
+😨	fearful face
+😰	anxious face with sweat
+😥	sad but relieved face
+😢	crying face
+😭	loudly crying face
+😱	face screaming in fear
+😖	confounded face
+😣	persevering face
+😞	disappointed face
+😓	downcast face with sweat
+😩	weary face
+😫	tired face
+🥱	yawning face
+😤	face with steam from nose
+😡	enraged face
+😠	angry face
+🤬	face with symbols on mouth
+😈	smiling face with horns
+👿	angry face with horns
+💀	skull
+☠️	skull and crossbones
+💩	pile of poo
+🤡	clown face
+👹	ogre
+👺	goblin
+👻	ghost
+👽	alien
+👾	alien monster
+🤖	robot
+😺	grinning cat
+😸	grinning cat with smiling eyes
+😹	cat with tears of joy
+😻	smiling cat with heart-eyes
+😼	cat with wry smile
+😽	kissing cat
+🙀	weary cat
+😿	crying cat
+😾	pouting cat
+🙈	see-no-evil monkey
+🙉	hear-no-evil monkey
+🙊	speak-no-evil monkey
+💌	love letter
+💘	heart with arrow
+💝	heart with ribbon
+💖	sparkling heart
+💗	growing heart
+💓	beating heart
+💞	revolving hearts
+💕	two hearts
+💟	heart decoration
+❣️	heart exclamation
+💔	broken heart
+❤️‍🔥	heart on fire
+❤️‍🩹	mending heart
+❤️	red heart
+🩷	pink heart
+🧡	orange heart
+💛	yellow heart
+💚	green heart
+💙	blue heart
+🩵	light blue heart
+💜	purple heart
+🤎	brown heart
+🖤	black heart
+🩶	grey heart
+🤍	white heart
+💋	kiss mark
+💯	hundred points
+💢	anger symbol
+💥	collision
+💫	dizzy
+💦	sweat droplets
+💨	dashing away
+🕳️	hole
+💬	speech balloon
+👁️‍🗨️	eye in speech bubble
+🗨️	left speech bubble
+🗯️	right anger bubble
+💭	thought balloon
+💤	ZZZ
+@People & Body
+👋	waving hand
+🤚	raised back of hand
+🖐️	hand with fingers splayed
+✋	raised hand
+🖖	vulcan salute
+🫱	rightwards hand
+🫲	leftwards hand
+🫳	palm down hand
+🫴	palm up hand
+🫷	leftwards pushing hand
+🫸	rightwards pushing hand
+👌	OK hand
+🤌	pinched fingers
+🤏	pinching hand
+✌️	victory hand
+🤞	crossed fingers
+🫰	hand with index finger and thumb crossed
+🤟	love-you gesture
+🤘	sign of the horns
+🤙	call me hand
+👈	backhand index pointing left
+👉	backhand index pointing right
+👆	backhand index pointing up
+🖕	middle finger
+👇	backhand index pointing down
+☝️	index pointing up
+🫵	index pointing at the viewer
+👍	thumbs up
+👎	thumbs down
+✊	raised fist
+👊	oncoming fist
+🤛	left-facing fist
+🤜	right-facing fist
+👏	clapping hands
+🙌	raising hands
+🫶	heart hands
+👐	open hands
+🤲	palms up together
+🤝	handshake
+🙏	folded hands
+✍️	writing hand
+💅	nail polish
+🤳	selfie
+💪	flexed biceps
+🦾	mechanical arm
+🦿	mechanical leg
+🦵	leg
+🦶	foot
+👂	ear
+🦻	ear with hearing aid
+👃	nose
+🧠	brain
+🫀	anatomical heart
+🫁	lungs
+🦷	tooth
+🦴	bone
+👀	eyes
+👁️	eye
+👅	tongue
+👄	mouth
+🫦	biting lip
+👶	baby
+🧒	child
+👦	boy
+👧	girl
+🧑	person
+👱	person: blond hair
+👨	man
+🧔	person: beard
+🧔‍♂️	man: beard
+🧔‍♀️	woman: beard
+👨‍🦰	man: red hair
+👨‍🦱	man: curly hair
+👨‍🦳	man: white hair
+👨‍🦲	man: bald
+👩	woman
+👩‍🦰	woman: red hair
+🧑‍🦰	person: red hair
+👩‍🦱	woman: curly hair
+🧑‍🦱	person: curly hair
+👩‍🦳	woman: white hair
+🧑‍🦳	person: white hair
+👩‍🦲	woman: bald
+🧑‍🦲	person: bald
+👱‍♀️	woman: blond hair
+👱‍♂️	man: blond hair
+🧓	older person
+👴	old man
+👵	old woman
+🙍	person frowning
+🙍‍♂️	man frowning
+🙍‍♀️	woman frowning
+🙎	person pouting
+🙎‍♂️	man pouting
+🙎‍♀️	woman pouting
+🙅	person gesturing NO
+🙅‍♂️	man gesturing NO
+🙅‍♀️	woman gesturing NO
+🙆	person gesturing OK
+🙆‍♂️	man gesturing OK
+🙆‍♀️	woman gesturing OK
+💁	person tipping hand
+💁‍♂️	man tipping hand
+💁‍♀️	woman tipping hand
+🙋	person raising hand
+🙋‍♂️	man raising hand
+🙋‍♀️	woman raising hand
+🧏	deaf person
+🧏‍♂️	deaf man
+🧏‍♀️	deaf woman
+🙇	person bowing
+🙇‍♂️	man bowing
+🙇‍♀️	woman bowing
+🤦	person facepalming
+🤦‍♂️	man facepalming
+🤦‍♀️	woman facepalming
+🤷	person shrugging
+🤷‍♂️	man shrugging
+🤷‍♀️	woman shrugging
+🧑‍⚕️	health worker
+👨‍⚕️	man health worker
+👩‍⚕️	woman health worker
+🧑‍🎓	student
+👨‍🎓	man student
+👩‍🎓	woman student
+🧑‍🏫	teacher
+👨‍🏫	man teacher
+👩‍🏫	woman teacher
+🧑‍⚖️	judge
+👨‍⚖️	man judge
+👩‍⚖️	woman judge
+🧑‍🌾	farmer
+👨‍🌾	man farmer
+👩‍🌾	woman farmer
+🧑‍🍳	cook
+👨‍🍳	man cook
+👩‍🍳	woman cook
+🧑‍🔧	mechanic
+👨‍🔧	man mechanic
+👩‍🔧	woman mechanic
+🧑‍🏭	factory worker
+👨‍🏭	man factory worker
+👩‍🏭	woman factory worker
+🧑‍💼	office worker
+👨‍💼	man office worker
+👩‍💼	woman office worker
+🧑‍🔬	scientist
+👨‍🔬	man scientist
+👩‍🔬	woman scientist
+🧑‍💻	technologist
+👨‍💻	man technologist
+👩‍💻	woman technologist
+🧑‍🎤	singer
+👨‍🎤	man singer
+👩‍🎤	woman singer
+🧑‍🎨	artist
+👨‍🎨	man artist
+👩‍🎨	woman artist
+🧑‍✈️	pilot
+👨‍✈️	man pilot
+👩‍✈️	woman pilot
+🧑‍🚀	astronaut
+👨‍🚀	man astronaut
+👩‍🚀	woman astronaut
+🧑‍🚒	firefighter
+👨‍🚒	man firefighter
+👩‍🚒	woman firefighter
+👮	police officer
+👮‍♂️	man police officer
+👮‍♀️	woman police officer
+🕵️	detective
+🕵️‍♂️	man detective
+🕵️‍♀️	woman detective
+💂	guard
+💂‍♂️	man guard
+💂‍♀️	woman guard
+🥷	ninja
+👷	construction worker
+👷‍♂️	man construction worker
+👷‍♀️	woman construction worker
+🫅	person with crown
+🤴	prince
+👸	princess
+👳	person wearing turban
+👳‍♂️	man wearing turban
+👳‍♀️	woman wearing turban
+👲	person with skullcap
+🧕	woman with headscarf
+🤵	person in tuxedo
+🤵‍♂️	man in tuxedo
+🤵‍♀️	woman in tuxedo
+👰	person with veil
+👰‍♂️	man with veil
+👰‍♀️	woman with veil
+🤰	pregnant woman
+🫃	pregnant man
+🫄	pregnant person
+🤱	breast-feeding
+👩‍🍼	woman feeding baby
+👨‍🍼	man feeding baby
+🧑‍🍼	person feeding baby
+👼	baby angel
+🎅	Santa Claus
+🤶	Mrs. Claus
+🧑‍🎄	mx claus
+🦸	superhero
+🦸‍♂️	man superhero
+🦸‍♀️	woman superhero
+🦹	supervillain
+🦹‍♂️	man supervillain
+🦹‍♀️	woman supervillain
+🧙	mage
+🧙‍♂️	man mage
+🧙‍♀️	woman mage
+🧚	fairy
+🧚‍♂️	man fairy
+🧚‍♀️	woman fairy
+🧛	vampire
+🧛‍♂️	man vampire
+🧛‍♀️	woman vampire
+🧜	merperson
+🧜‍♂️	merman
+🧜‍♀️	mermaid
+🧝	elf
+🧝‍♂️	man elf
+🧝‍♀️	woman elf
+🧞	genie
+🧞‍♂️	man genie
+🧞‍♀️	woman genie
+🧟	zombie
+🧟‍♂️	man zombie
+🧟‍♀️	woman zombie
+🧌	troll
+💆	person getting massage
+💆‍♂️	man getting massage
+💆‍♀️	woman getting massage
+💇	person getting haircut
+💇‍♂️	man getting haircut
+💇‍♀️	woman getting haircut
+🚶	person walking
+🚶‍♂️	man walking
+🚶‍♀️	woman walking
+🧍	person standing
+🧍‍♂️	man standing
+🧍‍♀️	woman standing
+🧎	person kneeling
+🧎‍♂️	man kneeling
+🧎‍♀️	woman kneeling
+🧑‍🦯	person with white cane
+👨‍🦯	man with white cane
+👩‍🦯	woman with white cane
+🧑‍🦼	person in motorized wheelchair
+👨‍🦼	man in motorized wheelchair
+👩‍🦼	woman in motorized wheelchair
+🧑‍🦽	person in manual wheelchair
+👨‍🦽	man in manual wheelchair
+👩‍🦽	woman in manual wheelchair
+🏃	person running
+🏃‍♂️	man running
+🏃‍♀️	woman running
+💃	woman dancing
+🕺	man dancing
+🕴️	person in suit levitating
+👯	people with bunny ears
+👯‍♂️	men with bunny ears
+👯‍♀️	women with bunny ears
+🧖	person in steamy room
+🧖‍♂️	man in steamy room
+🧖‍♀️	woman in steamy room
+🧗	person climbing
+🧗‍♂️	man climbing
+🧗‍♀️	woman climbing
+🤺	person fencing
+🏇	horse racing
+⛷️	skier
+🏂	snowboarder
+🏌️	person golfing
+🏌️‍♂️	man golfing
+🏌️‍♀️	woman golfing
+🏄	person surfing
+🏄‍♂️	man surfing
+🏄‍♀️	woman surfing
+🚣	person rowing boat
+🚣‍♂️	man rowing boat
+🚣‍♀️	woman rowing boat
+🏊	person swimming
+🏊‍♂️	man swimming
+🏊‍♀️	woman swimming
+⛹️	person bouncing ball
+⛹️‍♂️	man bouncing ball
+⛹️‍♀️	woman bouncing ball
+🏋️	person lifting weights
+🏋️‍♂️	man lifting weights
+🏋️‍♀️	woman lifting weights
+🚴	person biking
+🚴‍♂️	man biking
+🚴‍♀️	woman biking
+🚵	person mountain biking
+🚵‍♂️	man mountain biking
+🚵‍♀️	woman mountain biking
+🤸	person cartwheeling
+🤸‍♂️	man cartwheeling
+🤸‍♀️	woman cartwheeling
+🤼	people wrestling
+🤼‍♂️	men wrestling
+🤼‍♀️	women wrestling
+🤽	person playing water polo
+🤽‍♂️	man playing water polo
+🤽‍♀️	woman playing water polo
+🤾	person playing handball
+🤾‍♂️	man playing handball
+🤾‍♀️	woman playing handball
+🤹	person juggling
+🤹‍♂️	man juggling
+🤹‍♀️	woman juggling
+🧘	person in lotus position
+🧘‍♂️	man in lotus position
+🧘‍♀️	woman in lotus position
+🛀	person taking bath
+🛌	person in bed
+🧑‍🤝‍🧑	people holding hands
+👭	women holding hands
+👫	woman and man holding hands
+👬	men holding hands
+💏	kiss
+👩‍❤️‍💋‍👨	kiss: woman, man
+👨‍❤️‍💋‍👨	kiss: man, man
+👩‍❤️‍💋‍👩	kiss: woman, woman
+💑	couple with heart
+👩‍❤️‍👨	couple with heart: woman, man
+👨‍❤️‍👨	couple with heart: man, man
+👩‍❤️‍👩	couple with heart: woman, woman
+👪	family
+👨‍👩‍👦	family: man, woman, boy
+👨‍👩‍👧	family: man, woman, girl
+👨‍👩‍👧‍👦	family: man, woman, girl, boy
+👨‍👩‍👦‍👦	family: man, woman, boy, boy
+👨‍👩‍👧‍👧	family: man, woman, girl, girl
+👨‍👨‍👦	family: man, man, boy
+👨‍👨‍👧	family: man, man, girl
+👨‍👨‍👧‍👦	family: man, man, girl, boy
+👨‍👨‍👦‍👦	family: man, man, boy, boy
+👨‍👨‍👧‍👧	family: man, man, girl, girl
+👩‍👩‍👦	family: woman, woman, boy
+👩‍👩‍👧	family: woman, woman, girl
+👩‍👩‍👧‍👦	family: woman, woman, girl, boy
+👩‍👩‍👦‍👦	family: woman, woman, boy, boy
+👩‍👩‍👧‍👧	family: woman, woman, girl, girl
+👨‍👦	family: man, boy
+👨‍👦‍👦	family: man, boy, boy
+👨‍👧	family: man, girl
+👨‍👧‍👦	family: man, girl, boy
+👨‍👧‍👧	family: man, girl, girl
+👩‍👦	family: woman, boy
+👩‍👦‍👦	family: woman, boy, boy
+👩‍👧	family: woman, girl
+👩‍👧‍👦	family: woman, girl, boy
+👩‍👧‍👧	family: woman, girl, girl
+🗣️	speaking head
+👤	bust in silhouette
+👥	busts in silhouette
+🫂	people hugging
+👣	footprints
+@Animals & Nature
+🐵	monkey face
+🐒	monkey
+🦍	gorilla
+🦧	orangutan
+🐶	dog face
+🐕	dog
+🦮	guide dog
+🐕‍🦺	service dog
+🐩	poodle
+🐺	wolf
+🦊	fox
+🦝	raccoon
+🐱	cat face
+🐈	cat
+🐈‍⬛	black cat
+🦁	lion
+🐯	tiger face
+🐅	tiger
+🐆	leopard
+🐴	horse face
+🫎	moose
+🫏	donkey
+🐎	horse
+🦄	unicorn
+🦓	zebra
+🦌	deer
+🦬	bison
+🐮	cow face
+🐂	ox
+🐃	water buffalo
+🐄	cow
+🐷	pig face
+🐖	pig
+🐗	boar
+🐽	pig nose
+🐏	ram
+🐑	ewe
+🐐	goat
+🐪	camel
+🐫	two-hump camel
+🦙	llama
+🦒	giraffe
+🐘	elephant
+🦣	mammoth
+🦏	rhinoceros
+🦛	hippopotamus
+🐭	mouse face
+🐁	mouse
+🐀	rat
+🐹	hamster
+🐰	rabbit face
+🐇	rabbit
+🐿️	chipmunk
+🦫	beaver
+🦔	hedgehog
+🦇	bat
+🐻	bear
+🐻‍❄️	polar bear
+🐨	koala
+🐼	panda
+🦥	sloth
+🦦	otter
+🦨	skunk
+🦘	kangaroo
+🦡	badger
+🐾	paw prints
+🦃	turkey
+🐔	chicken
+🐓	rooster
+🐣	hatching chick
+🐤	baby chick
+🐥	front-facing baby chick
+🐦	bird
+🐧	penguin
+🕊️	dove
+🦅	eagle
+🦆	duck
+🦢	swan
+🦉	owl
+🦤	dodo
+🪶	feather
+🦩	flamingo
+🦚	peacock
+🦜	parrot
+🪽	wing
+🐦‍⬛	black bird
+🪿	goose
+🐸	frog
+🐊	crocodile
+🐢	turtle
+🦎	lizard
+🐍	snake
+🐲	dragon face
+🐉	dragon
+🦕	sauropod
+🦖	T-Rex
+🐳	spouting whale
+🐋	whale
+🐬	dolphin
+🦭	seal
+🐟	fish
+🐠	tropical fish
+🐡	blowfish
+🦈	shark
+🐙	octopus
+🐚	spiral shell
+🪸	coral
+🪼	jellyfish
+🐌	snail
+🦋	butterfly
+🐛	bug
+🐜	ant
+🐝	honeybee
+🪲	beetle
+🐞	lady beetle
+🦗	cricket
+🪳	cockroach
+🕷️	spider
+🕸️	spider web
+🦂	scorpion
+🦟	mosquito
+🪰	fly
+🪱	worm
+🦠	microbe
+💐	bouquet
+🌸	cherry blossom
+💮	white flower
+🪷	lotus
+🏵️	rosette
+🌹	rose
+🥀	wilted flower
+🌺	hibiscus
+🌻	sunflower
+🌼	blossom
+🌷	tulip
+🪻	hyacinth
+🌱	seedling
+🪴	potted plant
+🌲	evergreen tree
+🌳	deciduous tree
+🌴	palm tree
+🌵	cactus
+🌾	sheaf of rice
+🌿	herb
+☘️	shamrock
+🍀	four leaf clover
+🍁	maple leaf
+🍂	fallen leaf
+🍃	leaf fluttering in wind
+🪹	empty nest
+🪺	nest with eggs
+🍄	mushroom
+@Food & Drink
+🍇	grapes
+🍈	melon
+🍉	watermelon
+🍊	tangerine
+🍋	lemon
+🍌	banana
+🍍	pineapple
+🥭	mango
+🍎	red apple
+🍏	green apple
+🍐	pear
+🍑	peach
+🍒	cherries
+🍓	strawberry
+🫐	blueberries
+🥝	kiwi fruit
+🍅	tomato
+🫒	olive
+🥥	coconut
+🥑	avocado
+🍆	eggplant
+🥔	potato
+🥕	carrot
+🌽	ear of corn
+🌶️	hot pepper
+🫑	bell pepper
+🥒	cucumber
+🥬	leafy green
+🥦	broccoli
+🧄	garlic
+🧅	onion
+🥜	peanuts
+🫘	beans
+🌰	chestnut
+🫚	ginger root
+🫛	pea pod
+🍞	bread
+🥐	croissant
+🥖	baguette bread
+🫓	flatbread
+🥨	pretzel
+🥯	bagel
+🥞	pancakes
+🧇	waffle
+🧀	cheese wedge
+🍖	meat on bone
+🍗	poultry leg
+🥩	cut of meat
+🥓	bacon
+🍔	hamburger
+🍟	french fries
+🍕	pizza
+🌭	hot dog
+🥪	sandwich
+🌮	taco
+🌯	burrito
+🫔	tamale
+🥙	stuffed flatbread
+🧆	falafel
+🥚	egg
+🍳	cooking
+🥘	shallow pan of food
+🍲	pot of food
+🫕	fondue
+🥣	bowl with spoon
+🥗	green salad
+🍿	popcorn
+🧈	butter
+🧂	salt
+🥫	canned food
+🍱	bento box
+🍘	rice cracker
+🍙	rice ball
+🍚	cooked rice
+🍛	curry rice
+🍜	steaming bowl
+🍝	spaghetti
+🍠	roasted sweet potato
+🍢	oden
+🍣	sushi
+🍤	fried shrimp
+🍥	fish cake with swirl
+🥮	moon cake
+🍡	dango
+🥟	dumpling
+🥠	fortune cookie
+🥡	takeout box
+🦀	crab
+🦞	lobster
+🦐	shrimp
+🦑	squid
+🦪	oyster
+🍦	soft ice cream
+🍧	shaved ice
+🍨	ice cream
+🍩	doughnut
+🍪	cookie
+🎂	birthday cake
+🍰	shortcake
+🧁	cupcake
+🥧	pie
+🍫	chocolate bar
+🍬	candy
+🍭	lollipop
+🍮	custard
+🍯	honey pot
+🍼	baby bottle
+🥛	glass of milk
+☕	hot beverage
+🫖	teapot
+🍵	teacup without handle
+🍶	sake
+🍾	bottle with popping cork
+🍷	wine glass
+🍸	cocktail glass
+🍹	tropical drink
+🍺	beer mug
+🍻	clinking beer mugs
+🥂	clinking glasses
+🥃	tumbler glass
+🫗	pouring liquid
+🥤	cup with straw
+🧋	bubble tea
+🧃	beverage box
+🧉	mate
+🧊	ice
+🥢	chopsticks
+🍽️	fork and knife with plate
+🍴	fork and knife
+🥄	spoon
+🔪	kitchen knife
+🫙	jar
+🏺	amphora
+@Travel & Places
+🌍	globe showing Europe-Africa
+🌎	globe showing Americas
+🌏	globe showing Asia-Australia
+🌐	globe with meridians
+🗺️	world map
+🗾	map of Japan
+🧭	compass
+🏔️	snow-capped mountain
+⛰️	mountain
+🌋	volcano
+🗻	mount fuji
+🏕️	camping
+🏖️	beach with umbrella
+🏜️	desert
+🏝️	desert island
+🏞️	national park
+🏟️	stadium
+🏛️	classical building
+🏗️	building construction
+🧱	brick
+🪨	rock
+🪵	wood
+🛖	hut
+🏘️	houses
+🏚️	derelict house
+🏠	house
+🏡	house with garden
+🏢	office building
+🏣	Japanese post office
+🏤	post office
+🏥	hospital
+🏦	bank
+🏨	hotel
+🏩	love hotel
+🏪	convenience store
+🏫	school
+🏬	department store
+🏭	factory
+🏯	Japanese castle
+🏰	castle
+💒	wedding
+🗼	Tokyo tower
+🗽	Statue of Liberty
+⛪	church
+🕌	mosque
+🛕	hindu temple
+🕍	synagogue
+⛩️	shinto shrine
+🕋	kaaba
+⛲	fountain
+⛺	tent
+🌁	foggy
+🌃	night with stars
+🏙️	cityscape
+🌄	sunrise over mountains
+🌅	sunrise
+🌆	cityscape at dusk
+🌇	sunset
+🌉	bridge at night
+♨️	hot springs
+🎠	carousel horse
+🛝	playground slide
+🎡	ferris wheel
+🎢	roller coaster
+💈	barber pole
+🎪	circus tent
+🚂	locomotive
+🚃	railway car
+🚄	high-speed train
+🚅	bullet train
+🚆	train
+🚇	metro
+🚈	light rail
+🚉	station
+🚊	tram
+🚝	monorail
+🚞	mountain railway
+🚋	tram car
+🚌	bus
+🚍	oncoming bus
+🚎	trolleybus
+🚐	minibus
+🚑	ambulance
+🚒	fire engine
+🚓	police car
+🚔	oncoming police car
+🚕	taxi
+🚖	oncoming taxi
+🚗	automobile
+🚘	oncoming automobile
+🚙	sport utility vehicle
+🛻	pickup truck
+🚚	delivery truck
+🚛	articulated lorry
+🚜	tractor
+🏎️	racing car
+🏍️	motorcycle
+🛵	motor scooter
+🦽	manual wheelchair
+🦼	motorized wheelchair
+🛺	auto rickshaw
+🚲	bicycle
+🛴	kick scooter
+🛹	skateboard
+🛼	roller skate
+🚏	bus stop
+🛣️	motorway
+🛤️	railway track
+🛢️	oil drum
+⛽	fuel pump
+🛞	wheel
+🚨	police car light
+🚥	horizontal traffic light
+🚦	vertical traffic light
+🛑	stop sign
+🚧	construction
+⚓	anchor
+🛟	ring buoy
+⛵	sailboat
+🛶	canoe
+🚤	speedboat
+🛳️	passenger ship
+⛴️	ferry
+🛥️	motor boat
+🚢	ship
+✈️	airplane
+🛩️	small airplane
+🛫	airplane departure
+🛬	airplane arrival
+🪂	parachute
+💺	seat
+🚁	helicopter
+🚟	suspension railway
+🚠	mountain cableway
+🚡	aerial tramway
+🛰️	satellite
+🚀	rocket
+🛸	flying saucer
+🛎️	bellhop bell
+🧳	luggage
+⌛	hourglass done
+⏳	hourglass not done
+⌚	watch
+⏰	alarm clock
+⏱️	stopwatch
+⏲️	timer clock
+🕰️	mantelpiece clock
+🕛	twelve o’clock
+🕧	twelve-thirty
+🕐	one o’clock
+🕜	one-thirty
+🕑	two o’clock
+🕝	two-thirty
+🕒	three o’clock
+🕞	three-thirty
+🕓	four o’clock
+🕟	four-thirty
+🕔	five o’clock
+🕠	five-thirty
+🕕	six o’clock
+🕡	six-thirty
+🕖	seven o’clock
+🕢	seven-thirty
+🕗	eight o’clock
+🕣	eight-thirty
+🕘	nine o’clock
+🕤	nine-thirty
+🕙	ten o’clock
+🕥	ten-thirty
+🕚	eleven o’clock
+🕦	eleven-thirty
+🌑	new moon
+🌒	waxing crescent moon
+🌓	first quarter moon
+🌔	waxing gibbous moon
+🌕	full moon
+🌖	waning gibbous moon
+🌗	last quarter moon
+🌘	waning crescent moon
+🌙	crescent moon
+🌚	new moon face
+🌛	first quarter moon face
+🌜	last quarter moon face
+🌡️	thermometer
+☀️	sun
+🌝	full moon face
+🌞	sun with face
+🪐	ringed planet
+⭐	star
+🌟	glowing star
+🌠	shooting star
+🌌	milky way
+☁️	cloud
+⛅	sun behind cloud
+⛈️	cloud with lightning and rain
+🌤️	sun behind small cloud
+🌥️	sun behind large cloud
+🌦️	sun behind rain cloud
+🌧️	cloud with rain
+🌨️	cloud with snow
+🌩️	cloud with lightning
+🌪️	tornado
+🌫️	fog
+🌬️	wind face
+🌀	cyclone
+🌈	rainbow
+🌂	closed umbrella
+☂️	umbrella
+☔	umbrella with rain drops
+⛱️	umbrella on ground
+⚡	high voltage
+❄️	snowflake
+☃️	snowman
+⛄	snowman without snow
+☄️	comet
+🔥	fire
+💧	droplet
+🌊	water wave
+@Activities
+🎃	jack-o-lantern
+🎄	Christmas tree
+🎆	fireworks
+🎇	sparkler
+🧨	firecracker
+✨	sparkles
+🎈	balloon
+🎉	party popper
+🎊	confetti ball
+🎋	tanabata tree
+🎍	pine decoration
+🎎	Japanese dolls
+🎏	carp streamer
+🎐	wind chime
+🎑	moon viewing ceremony
+🧧	red envelope
+🎀	ribbon
+🎁	wrapped gift
+🎗️	reminder ribbon
+🎟️	admission tickets
+🎫	ticket
+🎖️	military medal
+🏆	trophy
+🏅	sports medal
+🥇	1st place medal
+🥈	2nd place medal
+🥉	3rd place medal
+⚽	soccer ball
+⚾	baseball
+🥎	softball
+🏀	basketball
+🏐	volleyball
+🏈	american football
+🏉	rugby football
+🎾	tennis
+🥏	flying disc
+🎳	bowling
+🏏	cricket game
+🏑	field hockey
+🏒	ice hockey
+🥍	lacrosse
+🏓	ping pong
+🏸	badminton
+🥊	boxing glove
+🥋	martial arts uniform
+🥅	goal net
+⛳	flag in hole
+⛸️	ice skate
+🎣	fishing pole
+🤿	diving mask
+🎽	running shirt
+🎿	skis
+🛷	sled
+🥌	curling stone
+🎯	bullseye
+🪀	yo-yo
+🪁	kite
+🔫	water pistol
+🎱	pool 8 ball
+🔮	crystal ball
+🪄	magic wand
+🎮	video game
+🕹️	joystick
+🎰	slot machine
+🎲	game die
+🧩	puzzle piece
+🧸	teddy bear
+🪅	piñata
+🪩	mirror ball
+🪆	nesting dolls
+♠️	spade suit
+♥️	heart suit
+♦️	diamond suit
+♣️	club suit
+♟️	chess pawn
+🃏	joker
+🀄	mahjong red dragon
+🎴	flower playing cards
+🎭	performing arts
+🖼️	framed picture
+🎨	artist palette
+🧵	thread
+🪡	sewing needle
+🧶	yarn
+🪢	knot
+@Objects
+👓	glasses
+🕶️	sunglasses
+🥽	goggles
+🥼	lab coat
+🦺	safety vest
+👔	necktie
+👕	t-shirt
+👖	jeans
+🧣	scarf
+🧤	gloves
+🧥	coat
+🧦	socks
+👗	dress
+👘	kimono
+🥻	sari
+🩱	one-piece swimsuit
+🩲	briefs
+🩳	shorts
+👙	bikini
+👚	woman’s clothes
+🪭	folding hand fan
+👛	purse
+👜	handbag
+👝	clutch bag
+🛍️	shopping bags
+🎒	backpack
+🩴	thong sandal
+👞	man’s shoe
+👟	running shoe
+🥾	hiking boot
+🥿	flat shoe
+👠	high-heeled shoe
+👡	woman’s sandal
+🩰	ballet shoes
+👢	woman’s boot
+🪮	hair pick
+👑	crown
+👒	woman’s hat
+🎩	top hat
+🎓	graduation cap
+🧢	billed cap
+🪖	military helmet
+⛑️	rescue worker’s helmet
+📿	prayer beads
+💄	lipstick
+💍	ring
+💎	gem stone
+🔇	muted speaker
+🔈	speaker low volume
+🔉	speaker medium volume
+🔊	speaker high volume
+📢	loudspeaker
+📣	megaphone
+📯	postal horn
+🔔	bell
+🔕	bell with slash
+🎼	musical score
+🎵	musical note
+🎶	musical notes
+🎙️	studio microphone
+🎚️	level slider
+🎛️	control knobs
+🎤	microphone
+🎧	headphone
+📻	radio
+🎷	saxophone
+🪗	accordion
+🎸	guitar
+🎹	musical keyboard
+🎺	trumpet
+🎻	violin
+🪕	banjo
+🥁	drum
+🪘	long drum
+🪇	maracas
+🪈	flute
+📱	mobile phone
+📲	mobile phone with arrow
+☎️	telephone
+📞	telephone receiver
+📟	pager
+📠	fax machine
+🔋	battery
+🪫	low battery
+🔌	electric plug
+💻	laptop
+🖥️	desktop computer
+🖨️	printer
+⌨️	keyboard
+🖱️	computer mouse
+🖲️	trackball
+💽	computer disk
+💾	floppy disk
+💿	optical disk
+📀	dvd
+🧮	abacus
+🎥	movie camera
+🎞️	film frames
+📽️	film projector
+🎬	clapper board
+📺	television
+📷	camera
+📸	camera with flash
+📹	video camera
+📼	videocassette
+🔍	magnifying glass tilted left
+🔎	magnifying glass tilted right
+🕯️	candle
+💡	light bulb
+🔦	flashlight
+🏮	red paper lantern
+🪔	diya lamp
+📔	notebook with decorative cover
+📕	closed book
+📖	open book
+📗	green book
+📘	blue book
+📙	orange book
+📚	books
+📓	notebook
+📒	ledger
+📃	page with curl
+📜	scroll
+📄	page facing up
+📰	newspaper
+🗞️	rolled-up newspaper
+📑	bookmark tabs
+🔖	bookmark
+🏷️	label
+💰	money bag
+🪙	coin
+💴	yen banknote
+💵	dollar banknote
+💶	euro banknote
+💷	pound banknote
+💸	money with wings
+💳	credit card
+🧾	receipt
+💹	chart increasing with yen
+✉️	envelope
+📧	e-mail
+📨	incoming envelope
+📩	envelope with arrow
+📤	outbox tray
+📥	inbox tray
+📦	package
+📫	closed mailbox with raised flag
+📪	closed mailbox with lowered flag
+📬	open mailbox with raised flag
+📭	open mailbox with lowered flag
+📮	postbox
+🗳️	ballot box with ballot
+✏️	pencil
+✒️	black nib
+🖋️	fountain pen
+🖊️	pen
+🖌️	paintbrush
+🖍️	crayon
+📝	memo
+💼	briefcase
+📁	file folder
+📂	open file folder
+🗂️	card index dividers
+📅	calendar
+📆	tear-off calendar
+🗒️	spiral notepad
+🗓️	spiral calendar
+📇	card index
+📈	chart increasing
+📉	chart decreasing
+📊	bar chart
+📋	clipboard
+📌	pushpin
+📍	round pushpin
+📎	paperclip
+🖇️	linked paperclips
+📏	straight ruler
+📐	triangular ruler
+✂️	scissors
+🗃️	card file box
+🗄️	file cabinet
+🗑️	wastebasket
+🔒	locked
+🔓	unlocked
+🔏	locked with pen
+🔐	locked with key
+🔑	key
+🗝️	old key
+🔨	hammer
+🪓	axe
+⛏️	pick
+⚒️	hammer and pick
+🛠️	hammer and wrench
+🗡️	dagger
+⚔️	crossed swords
+💣	bomb
+🪃	boomerang
+🏹	bow and arrow
+🛡️	shield
+🪚	carpentry saw
+🔧	wrench
+🪛	screwdriver
+🔩	nut and bolt
+⚙️	gear
+🗜️	clamp
+⚖️	balance scale
+🦯	white cane
+🔗	link
+⛓️	chains
+🪝	hook
+🧰	toolbox
+🧲	magnet
+🪜	ladder
+⚗️	alembic
+🧪	test tube
+🧫	petri dish
+🧬	dna
+🔬	microscope
+🔭	telescope
+📡	satellite antenna
+💉	syringe
+🩸	drop of blood
+💊	pill
+🩹	adhesive bandage
+🩼	crutch
+🩺	stethoscope
+🩻	x-ray
+🚪	door
+🛗	elevator
+🪞	mirror
+🪟	window
+🛏️	bed
+🛋️	couch and lamp
+🪑	chair
+🚽	toilet
+🪠	plunger
+🚿	shower
+🛁	bathtub
+🪤	mouse trap
+🪒	razor
+🧴	lotion bottle
+🧷	safety pin
+🧹	broom
+🧺	basket
+🧻	roll of paper
+🪣	bucket
+🧼	soap
+🫧	bubbles
+🪥	toothbrush
+🧽	sponge
+🧯	fire extinguisher
+🛒	shopping cart
+🚬	cigarette
+⚰️	coffin
+🪦	headstone
+⚱️	funeral urn
+🧿	nazar amulet
+🪬	hamsa
+🗿	moai
+🪧	placard
+🪪	identification card
+@Symbols
+🏧	ATM sign
+🚮	litter in bin sign
+🚰	potable water
+♿	wheelchair symbol
+🚹	men’s room
+🚺	women’s room
+🚻	restroom
+🚼	baby symbol
+🚾	water closet
+🛂	passport control
+🛃	customs
+🛄	baggage claim
+🛅	left luggage
+⚠️	warning
+🚸	children crossing
+⛔	no entry
+🚫	prohibited
+🚳	no bicycles
+🚭	no smoking
+🚯	no littering
+🚱	non-potable water
+🚷	no pedestrians
+📵	no mobile phones
+🔞	no one under eighteen
+☢️	radioactive
+☣️	biohazard
+⬆️	up arrow
+↗️	up-right arrow
+➡️	right arrow
+↘️	down-right arrow
+⬇️	down arrow
+↙️	down-left arrow
+⬅️	left arrow
+↖️	up-left arrow
+↕️	up-down arrow
+↔️	left-right arrow
+↩️	right arrow curving left
+↪️	left arrow curving right
+⤴️	right arrow curving up
+⤵️	right arrow curving down
+🔃	clockwise vertical arrows
+🔄	counterclockwise arrows button
+🔙	BACK arrow
+🔚	END arrow
+🔛	ON! arrow
+🔜	SOON arrow
+🔝	TOP arrow
+🛐	place of worship
+⚛️	atom symbol
+🕉️	om
+✡️	star of David
+☸️	wheel of dharma
+☯️	yin yang
+✝️	latin cross
+☦️	orthodox cross
+☪️	star and crescent
+☮️	peace symbol
+🕎	menorah
+🔯	dotted six-pointed star
+🪯	khanda
+♈	Aries
+♉	Taurus
+♊	Gemini
+♋	Cancer
+♌	Leo
+♍	Virgo
+♎	Libra
+♏	Scorpio
+♐	Sagittarius
+♑	Capricorn
+♒	Aquarius
+♓	Pisces
+⛎	Ophiuchus
+🔀	shuffle tracks button
+🔁	repeat button
+🔂	repeat single button
+▶️	play button
+⏩	fast-forward button
+⏭️	next track button
+⏯️	play or pause button
+◀️	reverse button
+⏪	fast reverse button
+⏮️	last track button
+🔼	upwards button
+⏫	fast up button
+🔽	downwards button
+⏬	fast down button
+⏸️	pause button
+⏹️	stop button
+⏺️	record button
+⏏️	eject button
+🎦	cinema
+🔅	dim button
+🔆	bright button
+📶	antenna bars
+🛜	wireless
+📳	vibration mode
+📴	mobile phone off
+♀️	female sign
+♂️	male sign
+⚧️	transgender symbol
+✖️	multiply
+➕	plus
+➖	minus
+➗	divide
+🟰	heavy equals sign
+♾️	infinity
+‼️	double exclamation mark
+⁉️	exclamation question mark
+❓	red question mark
+❔	white question mark
+❕	white exclamation mark
+❗	red exclamation mark
+〰️	wavy dash
+💱	currency exchange
+💲	heavy dollar sign
+⚕️	medical symbol
+♻️	recycling symbol
+⚜️	fleur-de-lis
+🔱	trident emblem
+📛	name badge
+🔰	Japanese symbol for beginner
+⭕	hollow red circle
+✅	check mark button
+☑️	check box with check
+✔️	check mark
+❌	cross mark
+❎	cross mark button
+➰	curly loop
+➿	double curly loop
+〽️	part alternation mark
+✳️	eight-spoked asterisk
+✴️	eight-pointed star
+❇️	sparkle
+©️	copyright
+®️	registered
+™️	trade mark
+#️⃣	keycap: #
+*️⃣	keycap: *
+0️⃣	keycap: 0
+1️⃣	keycap: 1
+2️⃣	keycap: 2
+3️⃣	keycap: 3
+4️⃣	keycap: 4
+5️⃣	keycap: 5
+6️⃣	keycap: 6
+7️⃣	keycap: 7
+8️⃣	keycap: 8
+9️⃣	keycap: 9
+🔟	keycap: 10
+🔠	input latin uppercase
+🔡	input latin lowercase
+🔢	input numbers
+🔣	input symbols
+🔤	input latin letters
+🅰️	A button (blood type)
+🆎	AB button (blood type)
+🅱️	B button (blood type)
+🆑	CL button
+🆒	COOL button
+🆓	FREE button
+ℹ️	information
+🆔	ID button
+Ⓜ️	circled M
+🆕	NEW button
+🆖	NG button
+🅾️	O button (blood type)
+🆗	OK button
+🅿️	P button
+🆘	SOS button
+🆙	UP! button
+🆚	VS button
+🈁	Japanese “here” button
+🈂️	Japanese “service charge” button
+🈷️	Japanese “monthly amount” button
+🈶	Japanese “not free of charge” button
+🈯	Japanese “reserved” button
+🉐	Japanese “bargain” button
+🈹	Japanese “discount” button
+🈚	Japanese “free of charge” button
+🈲	Japanese “prohibited” button
+🉑	Japanese “acceptable” button
+🈸	Japanese “application” button
+🈴	Japanese “passing grade” button
+🈳	Japanese “vacancy” button
+㊗️	Japanese “congratulations” button
+㊙️	Japanese “secret” button
+🈺	Japanese “open for business” button
+🈵	Japanese “no vacancy” button
+🔴	red circle
+🟠	orange circle
+🟡	yellow circle
+🟢	green circle
+🔵	blue circle
+🟣	purple circle
+🟤	brown circle
+⚫	black circle
+⚪	white circle
+🟥	red square
+🟧	orange square
+🟨	yellow square
+🟩	green square
+🟦	blue square
+🟪	purple square
+🟫	brown square
+⬛	black large square
+⬜	white large square
+◼️	black medium square
+◻️	white medium square
+◾	black medium-small square
+◽	white medium-small square
+▪️	black small square
+▫️	white small square
+🔶	large orange diamond
+🔷	large blue diamond
+🔸	small orange diamond
+🔹	small blue diamond
+🔺	red triangle pointed up
+🔻	red triangle pointed down
+💠	diamond with a dot
+🔘	radio button
+🔳	white square button
+🔲	black square button
+@Flags
+🏁	chequered flag
+🚩	triangular flag
+🎌	crossed flags
+🏴	black flag
+🏳️	white flag
+🏳️‍🌈	rainbow flag
+🏳️‍⚧️	transgender flag
+🏴‍☠️	pirate flag
+🇦🇨	flag: Ascension Island
+🇦🇩	flag: Andorra
+🇦🇪	flag: United Arab Emirates
+🇦🇫	flag: Afghanistan
+🇦🇬	flag: Antigua & Barbuda
+🇦🇮	flag: Anguilla
+🇦🇱	flag: Albania
+🇦🇲	flag: Armenia
+🇦🇴	flag: Angola
+🇦🇶	flag: Antarctica
+🇦🇷	flag: Argentina
+🇦🇸	flag: American Samoa
+🇦🇹	flag: Austria
+🇦🇺	flag: Australia
+🇦🇼	flag: Aruba
+🇦🇽	flag: Åland Islands
+🇦🇿	flag: Azerbaijan
+🇧🇦	flag: Bosnia & Herzegovina
+🇧🇧	flag: Barbados
+🇧🇩	flag: Bangladesh
+🇧🇪	flag: Belgium
+🇧🇫	flag: Burkina Faso
+🇧🇬	flag: Bulgaria
+🇧🇭	flag: Bahrain
+🇧🇮	flag: Burundi
+🇧🇯	flag: Benin
+🇧🇱	flag: St. Barthélemy
+🇧🇲	flag: Bermuda
+🇧🇳	flag: Brunei
+🇧🇴	flag: Bolivia
+🇧🇶	flag: Caribbean Netherlands
+🇧🇷	flag: Brazil
+🇧🇸	flag: Bahamas
+🇧🇹	flag: Bhutan
+🇧🇻	flag: Bouvet Island
+🇧🇼	flag: Botswana
+🇧🇾	flag: Belarus
+🇧🇿	flag: Belize
+🇨🇦	flag: Canada
+🇨🇨	flag: Cocos (Keeling) Islands
+🇨🇩	flag: Congo - Kinshasa
+🇨🇫	flag: Central African Republic
+🇨🇬	flag: Congo - Brazzaville
+🇨🇭	flag: Switzerland
+🇨🇮	flag: Côte d’Ivoire
+🇨🇰	flag: Cook Islands
+🇨🇱	flag: Chile
+🇨🇲	flag: Cameroon
+🇨🇳	flag: China
+🇨🇴	flag: Colombia
+🇨🇵	flag: Clipperton Island
+🇨🇷	flag: Costa Rica
+🇨🇺	flag: Cuba
+🇨🇻	flag: Cape Verde
+🇨🇼	flag: Curaçao
+🇨🇽	flag: Christmas Island
+🇨🇾	flag: Cyprus
+🇨🇿	flag: Czechia
+🇩🇪	flag: Germany
+🇩🇬	flag: Diego Garcia
+🇩🇯	flag: Djibouti
+🇩🇰	flag: Denmark
+🇩🇲	flag: Dominica
+🇩🇴	flag: Dominican Republic
+🇩🇿	flag: Algeria
+🇪🇦	flag: Ceuta & Melilla
+🇪🇨	flag: Ecuador
+🇪🇪	flag: Estonia
+🇪🇬	flag: Egypt
+🇪🇭	flag: Western Sahara
+🇪🇷	flag: Eritrea
+🇪🇸	flag: Spain
+🇪🇹	flag: Ethiopia
+🇪🇺	flag: European Union
+🇫🇮	flag: Finland
+🇫🇯	flag: Fiji
+🇫🇰	flag: Falkland Islands
+🇫🇲	flag: Micronesia
+🇫🇴	flag: Faroe Islands
+🇫🇷	flag: France
+🇬🇦	flag: Gabon
+🇬🇧	flag: United Kingdom
+🇬🇩	flag: Grenada
+🇬🇪	flag: Georgia
+🇬🇫	flag: French Guiana
+🇬🇬	flag: Guernsey
+🇬🇭	flag: Ghana
+🇬🇮	flag: Gibraltar
+🇬🇱	flag: Greenland
+🇬🇲	flag: Gambia
+🇬🇳	flag: Guinea
+🇬🇵	flag: Guadeloupe
+🇬🇶	flag: Equatorial Guinea
+🇬🇷	flag: Greece
+🇬🇸	flag: South Georgia & South Sandwich Islands
+🇬🇹	flag: Guatemala
+🇬🇺	flag: Guam
+🇬🇼	flag: Guinea-Bissau
+🇬🇾	flag: Guyana
+🇭🇰	flag: Hong Kong SAR China
+🇭🇲	flag: Heard & McDonald Islands
+🇭🇳	flag: Honduras
+🇭🇷	flag: Croatia
+🇭🇹	flag: Haiti
+🇭🇺	flag: Hungary
+🇮🇨	flag: Canary Islands
+🇮🇩	flag: Indonesia
+🇮🇪	flag: Ireland
+🇮🇱	flag: Israel
+🇮🇲	flag: Isle of Man
+🇮🇳	flag: India
+🇮🇴	flag: British Indian Ocean Territory
+🇮🇶	flag: Iraq
+🇮🇷	flag: Iran
+🇮🇸	flag: Iceland
+🇮🇹	flag: Italy
+🇯🇪	flag: Jersey
+🇯🇲	flag: Jamaica
+🇯🇴	flag: Jordan
+🇯🇵	flag: Japan
+🇰🇪	flag: Kenya
+🇰🇬	flag: Kyrgyzstan
+🇰🇭	flag: Cambodia
+🇰🇮	flag: Kiribati
+🇰🇲	flag: Comoros
+🇰🇳	flag: St. Kitts & Nevis
+🇰🇵	flag: North Korea
+🇰🇷	flag: South Korea
+🇰🇼	flag: Kuwait
+🇰🇾	flag: Cayman Islands
+🇰🇿	flag: Kazakhstan
+🇱🇦	flag: Laos
+🇱🇧	flag: Lebanon
+🇱🇨	flag: St. Lucia
+🇱🇮	flag: Liechtenstein
+🇱🇰	flag: Sri Lanka
+🇱🇷	flag: Liberia
+🇱🇸	flag: Lesotho
+🇱🇹	flag: Lithuania
+🇱🇺	flag: Luxembourg
+🇱🇻	flag: Latvia
+🇱🇾	flag: Libya
+🇲🇦	flag: Morocco
+🇲🇨	flag: Monaco
+🇲🇩	flag: Moldova
+🇲🇪	flag: Montenegro
+🇲🇫	flag: St. Martin
+🇲🇬	flag: Madagascar
+🇲🇭	flag: Marshall Islands
+🇲🇰	flag: North Macedonia
+🇲🇱	flag: Mali
+🇲🇲	flag: Myanmar (Burma)
+🇲🇳	flag: Mongolia
+🇲🇴	flag: Macao SAR China
+🇲🇵	flag: Northern Mariana Islands
+🇲🇶	flag: Martinique
+🇲🇷	flag: Mauritania
+🇲🇸	flag: Montserrat
+🇲🇹	flag: Malta
+🇲🇺	flag: Mauritius
+🇲🇻	flag: Maldives
+🇲🇼	flag: Malawi
+🇲🇽	flag: Mexico
+🇲🇾	flag: Malaysia
+🇲🇿	flag: Mozambique
+🇳🇦	flag: Namibia
+🇳🇨	flag: New Caledonia
+🇳🇪	flag: Niger
+🇳🇫	flag: Norfolk Island
+🇳🇬	flag: Nigeria
+🇳🇮	flag: Nicaragua
+🇳🇱	flag: Netherlands
+🇳🇴	flag: Norway
+🇳🇵	flag: Nepal
+🇳🇷	flag: Nauru
+🇳🇺	flag: Niue
+🇳🇿	flag: New Zealand
+🇴🇲	flag: Oman
+🇵🇦	flag: Panama
+🇵🇪	flag: Peru
+🇵🇫	flag: French Polynesia
+🇵🇬	flag: Papua New Guinea
+🇵🇭	flag: Philippines
+🇵🇰	flag: Pakistan
+🇵🇱	flag: Poland
+🇵🇲	flag: St. Pierre & Miquelon
+🇵🇳	flag: Pitcairn Islands
+🇵🇷	flag: Puerto Rico
+🇵🇸	flag: Palestinian Territories
+🇵🇹	flag: Portugal
+🇵🇼	flag: Palau
+🇵🇾	flag: Paraguay
+🇶🇦	flag: Qatar
+🇷🇪	flag: Réunion
+🇷🇴	flag: Romania
+🇷🇸	flag: Serbia
+🇷🇺	flag: Russia
+🇷🇼	flag: Rwanda
+🇸🇦	flag: Saudi Arabia
+🇸🇧	flag: Solomon Islands
+🇸🇨	flag: Seychelles
+🇸🇩	flag: Sudan
+🇸🇪	flag: Sweden
+🇸🇬	flag: Singapore
+🇸🇭	flag: St. Helena
+🇸🇮	flag: Slovenia
+🇸🇯	flag: Svalbard & Jan Mayen
+🇸🇰	flag: Slovakia
+🇸🇱	flag: Sierra Leone
+🇸🇲	flag: San Marino
+🇸🇳	flag: Senegal
+🇸🇴	flag: Somalia
+🇸🇷	flag: Suriname
+🇸🇸	flag: South Sudan
+🇸🇹	flag: São Tomé & Príncipe
+🇸🇻	flag: El Salvador
+🇸🇽	flag: Sint Maarten
+🇸🇾	flag: Syria
+🇸🇿	flag: Eswatini
+🇹🇦	flag: Tristan da Cunha
+🇹🇨	flag: Turks & Caicos Islands
+🇹🇩	flag: Chad
+🇹🇫	flag: French Southern Territories
+🇹🇬	flag: Togo
+🇹🇭	flag: Thailand
+🇹🇯	flag: Tajikistan
+🇹🇰	flag: Tokelau
+🇹🇱	flag: Timor-Leste
+🇹🇲	flag: Turkmenistan
+🇹🇳	flag: Tunisia
+🇹🇴	flag: Tonga
+🇹🇷	flag: Turkey
+🇹🇹	flag: Trinidad & Tobago
+🇹🇻	flag: Tuvalu
+🇹🇼	flag: Taiwan
+🇹🇿	flag: Tanzania
+🇺🇦	flag: Ukraine
+🇺🇬	flag: Uganda
+🇺🇲	flag: U.S. Outlying Islands
+🇺🇳	flag: United Nations
+🇺🇸	flag: United States
+🇺🇾	flag: Uruguay
+🇺🇿	flag: Uzbekistan
+🇻🇦	flag: Vatican City
+🇻🇨	flag: St. Vincent & Grenadines
+🇻🇪	flag: Venezuela
+🇻🇬	flag: British Virgin Islands
+🇻🇮	flag: U.S. Virgin Islands
+🇻🇳	flag: Vietnam
+🇻🇺	flag: Vanuatu
+🇼🇫	flag: Wallis & Futuna
+🇼🇸	flag: Samoa
+🇽🇰	flag: Kosovo
+🇾🇪	flag: Yemen
+🇾🇹	flag: Mayotte
+🇿🇦	flag: South Africa
+🇿🇲	flag: Zambia
+🇿🇼	flag: Zimbabwe
+🏴󠁧󠁢󠁥󠁮󠁧󠁿	flag: England
+🏴󠁧󠁢󠁳󠁣󠁴󠁿	flag: Scotland
+🏴󠁧󠁢󠁷󠁬󠁳󠁿	flag: Wales
diff --git a/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/EmojiPickerDataTest.kt b/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/EmojiPickerDataTest.kt
new file mode 100644
index 0000000000..c5860ed9de
--- /dev/null
+++ b/apps/multiplatform/common/src/desktopTest/kotlin/chat/simplex/app/EmojiPickerDataTest.kt
@@ -0,0 +1,55 @@
+package chat.simplex.app
+
+import chat.simplex.common.views.chat.*
+import kotlin.test.*
+
+// use this command for testing:
+// ./gradlew desktopTest
+class EmojiPickerDataTest {
+  private val skinToneModifiers = 0x1F3FB..0x1F3FF
+
+  @Test
+  fun testBundledDataHasAllCategoriesInOrder() {
+    assertEquals(EmojiCategory.entries.toList(), emojiSections.map { it.category })
+    emojiSections.forEach { assertTrue(it.emojis.isNotEmpty(), "empty category ${it.category}") }
+    assertEquals(1870, emojiSections.sumOf { it.emojis.size })
+  }
+
+  @Test
+  fun testBundledDataEntries() {
+    val all = emojiSections.flatMap { it.emojis }
+    assertEquals(all.size, all.map { it.emoji }.toSet().size, "duplicate emoji")
+    all.forEach {
+      assertTrue(it.emoji.isNotEmpty() && it.name.isNotBlank(), "bad entry $it")
+      assertFalse(it.emoji.codePoints().anyMatch { cp -> cp in skinToneModifiers }, "skin tone variant ${it.name}")
+    }
+    assertEquals(EmojiData("😀", "grinning face"), emojiSections.first().emojis.first())
+    assertEquals(EmojiData("🏴󠁧󠁢󠁷󠁬󠁳󠁿", "flag: Wales"), emojiSections.last().emojis.last())
+  }
+
+  @Test
+  fun testParseEmojiData() {
+    val sections = parseEmojiData(sequenceOf("@Smileys & Emotion", "😀\tgrinning face", "", "@Flags", "🏁\tchequered flag", "#️⃣\tkeycap: #"))
+    assertEquals(
+      listOf(
+        EmojiSection(EmojiCategory.Smileys, listOf(EmojiData("😀", "grinning face"))),
+        EmojiSection(EmojiCategory.Flags, listOf(EmojiData("🏁", "chequered flag"), EmojiData("#️⃣", "keycap: #"))),
+      ),
+      sections
+    )
+  }
+
+  @Test
+  fun testParseUnknownGroupFails() {
+    assertFailsWith<IllegalArgumentException> { parseEmojiData(sequenceOf("@Component", "🏻\tlight skin tone")) }
+  }
+
+  @Test
+  fun testSearchEmoji() {
+    assertEquals(listOf("❤️"), searchEmoji(emojiSections, "red heart").map { it.emoji })
+    assertEquals(searchEmoji(emojiSections, "red heart"), searchEmoji(emojiSections, "  RED Heart "))
+    val flags = searchEmoji(emojiSections, "flag: ")
+    assertTrue(flags.size > 250, "found ${flags.size} flags")
+    assertTrue(searchEmoji(emojiSections, "no such emoji name").isEmpty())
+  }
+}
diff --git a/apps/multiplatform/product/README.md b/apps/multiplatform/product/README.md
index 5dc606a50e..3dff974366 100644
--- a/apps/multiplatform/product/README.md
+++ b/apps/multiplatform/product/README.md
@@ -307,7 +307,7 @@ UserPicker
 |                           |  OR (when no chat selected):     |  GroupProfileView          |
 |  UserPicker (overlay)     |    "No selected chat"            |  AddGroupMembersView       |
 |    - profile switcher     |                                  |  MemberAdmission           |
-|    - quick settings       |  OR (when modal open):           |  VerifyCodeView            |
+|    - quick settings       |  Over them (when modal open):    |  VerifyCodeView            |
 |                           |    ModalManager.center content   |  SettingsView subtabs      |
 |  ModalManager.start       |    (settings, new chat, etc.)    |                            |
 |    - secondary modals     |                                  |  ModalManager.end          |
@@ -316,7 +316,7 @@ UserPicker
 
 ModalManager Placement (Desktop):
   - ModalManager.start  -> left panel overlay (settings subviews)
-  - ModalManager.center -> center panel (replaces chat, used when chatId is null)
+  - ModalManager.center -> center panel (drawn over the chat or the placeholder)
   - ModalManager.end    -> right panel (detail/info views)
   - ModalManager.fullscreen -> full window overlay (onboarding, auth, call)
 
diff --git a/apps/multiplatform/product/concepts.md b/apps/multiplatform/product/concepts.md
index be6048554c..b349f2819a 100644
--- a/apps/multiplatform/product/concepts.md
+++ b/apps/multiplatform/product/concepts.md
@@ -22,7 +22,7 @@ This document provides a structured mapping between product-level concepts, thei
 | PC1 | Chat List | [README.md](README.md) (Navigation Map) | [spec/client/chat-list.md](../spec/client/chat-list.md) | `common/.../views/chatlist/ChatListView.kt`, `ChatListNavLinkView.kt`, `ChatPreviewView.kt`, `GetStakeBanner.kt` | `Controller.hs` (`APIGetChats`) |
 | PC2 | Direct Chat | [README.md](README.md) (Messaging) | [spec/client/chat-view.md](../spec/client/chat-view.md) | `common/.../views/chat/ChatView.kt`, `ChatInfoView.kt` | `Types.hs` (`Contact`), `Messages.hs` |
 | PC3 | Group Chat | [README.md](README.md) (Groups) | [spec/client/chat-view.md](../spec/client/chat-view.md) | `common/.../views/chat/ChatView.kt`, `group/GroupChatInfoView.kt` | `Types.hs` (`GroupInfo`, `GroupMember`) |
-| PC4 | Message Composition | [README.md](README.md) (Messaging) | [spec/client/compose.md](../spec/client/compose.md) | `common/.../views/chat/ComposeView.kt`, `SendMsgView.kt`, `ComposeVoiceView.kt`, `ComposeImageView.kt`, `ComposeFileView.kt` | `Controller.hs` (`APISendMessages`) |
+| PC4 | Message Composition | [README.md](README.md) (Messaging) | [spec/client/compose.md](../spec/client/compose.md) | `common/.../views/chat/ComposeView.kt`, `SendMsgView.kt`, `ComposeVoiceView.kt`, `ComposeImageView.kt`, `ComposeFileView.kt`, `ComposeEmojiPicker.kt` | `Controller.hs` (`APISendMessages`) |
 | PC5 | Message Reactions | [README.md](README.md) (Messaging) | [spec/api.md](../spec/api.md) | `common/.../views/chat/ChatItemView.kt` (ChatItemReactions composable) | `Controller.hs` (`APIChatItemReaction`) |
 | PC6 | Message Editing | [README.md](README.md) (Messaging) | [spec/client/compose.md](../spec/client/compose.md) | `common/.../views/chat/ComposeView.kt`, `ChatItemInfoView.kt` | `Controller.hs` (`APIUpdateChatItem`) |
 | PC7 | Message Deletion | [README.md](README.md) (Messaging) | [spec/api.md](../spec/api.md) | `common/.../views/chat/item/MarkedDeletedItemView.kt`, `DeletedItemView.kt` | `Controller.hs` (`APIDeleteChatItem`) |
diff --git a/apps/multiplatform/product/gaps.md b/apps/multiplatform/product/gaps.md
index 871e3f31ca..203a725346 100644
--- a/apps/multiplatform/product/gaps.md
+++ b/apps/multiplatform/product/gaps.md
@@ -13,9 +13,10 @@ This document catalogs known gaps in the multiplatform codebase (Android and Des
 5. [Documentation: Haskell Store Layer Not Fully Specified](#gap-05-documentation-haskell-store-layer-not-fully-specified)
 6. [Desktop: Recording Not Implemented](#gap-06-desktop-recording-not-implemented)
 7. [Desktop: Cryptor Not Implemented](#gap-07-desktop-cryptor-not-implemented)
-8. [Online Search: Groups Joined Through Another Link Still Appear as Directory Results](#gap-08-online-search-groups-joined-through-another-link-still-appear-as-directory-results)
-9. [Online Search: First-Search Alert Does Not Mention the Server Hosting a Resolved Address](#gap-09-online-search-first-search-alert-does-not-mention-the-server-hosting-a-resolved-address)
-10. [Online Search: New Chat Does Not Narrow Contacts by Name While Typing](#gap-10-online-search-new-chat-does-not-narrow-contacts-by-name-while-typing)
+8. [Desktop: Emoji Picker Without Skin Tones and Localized Search](#gap-08-desktop-emoji-picker-without-skin-tones-and-localized-search)
+9. [Online Search: Groups Joined Through Another Link Still Appear as Directory Results](#gap-09-online-search-groups-joined-through-another-link-still-appear-as-directory-results)
+10. [Online Search: First-Search Alert Does Not Mention the Server Hosting a Resolved Address](#gap-10-online-search-first-search-alert-does-not-mention-the-server-hosting-a-resolved-address)
+11. [Online Search: New Chat Does Not Narrow Contacts by Name While Typing](#gap-11-online-search-new-chat-does-not-narrow-contacts-by-name-while-typing)
 
 ---
 
@@ -295,7 +296,33 @@ This directly undermines RULE-02 (Database Encryption at Rest) and RULE-04 (Self
 
 ---
 
-## GAP-08: Online Search: Groups Joined Through Another Link Still Appear as Directory Results
+## GAP-08: Desktop: Emoji Picker Without Skin Tones and Localized Search
+
+**Severity:** Low
+**Category:** Feature / Platform
+**Platform:** Desktop only
+
+### Description
+
+The desktop compose emoji picker lists emoji without skin tone variants, and its search matches English Unicode emoji names only.
+
+### Affected Locations
+
+- `common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt`
+- `scripts/desktop/generate-emoji-data.py` (`../../scripts/desktop/` relative to `apps/multiplatform/`) -- drops skin tone variants
+
+### Impact
+
+Desktop users cannot pick a skin tone in the picker, and search in other languages finds nothing.
+
+### Recommendation
+
+1. Keep the skin tone variants in the generated data, grouped by base emoji, and add a skin tone choice to the picker.
+2. Add localized names (CLDR annotations) to the generated data for search.
+
+---
+
+## GAP-09: Online Search: Groups Joined Through Another Link Still Appear as Directory Results
 
 **Severity:** Low
 **Category:** UI / UX
@@ -321,7 +348,7 @@ Have the directory send a stable group identifier the core can match locally, or
 
 ---
 
-## GAP-09: Online Search: First-Search Alert Does Not Mention the Server Hosting a Resolved Address
+## GAP-10: Online Search: First-Search Alert Does Not Mention the Server Hosting a Resolved Address
 
 **Severity:** Low
 **Category:** Privacy / UX
@@ -347,7 +374,7 @@ Decide whether the alert copy should also say that the address a name points to
 
 ---
 
-## GAP-10: Online Search: New Chat Does Not Narrow Contacts by Name While Typing
+## GAP-11: Online Search: New Chat Does Not Narrow Contacts by Name While Typing
 
 **Severity:** Low
 **Category:** UI / UX
diff --git a/apps/multiplatform/product/rules.md b/apps/multiplatform/product/rules.md
index 1b69e96a3f..6dc1e0022e 100644
--- a/apps/multiplatform/product/rules.md
+++ b/apps/multiplatform/product/rules.md
@@ -300,7 +300,7 @@ This document specifies invariants enforced by the Android and Desktop (Kotlin/C
 
 ### RULE-22: Nothing Is Shown Twice
 
-**Invariant:** A name result whose chat is shown in the local list MUST be hidden. A directory result MUST be hidden when its link refers, in the local store, to a chat shown in the local list or found by name, or when its link is the link a name was resolved through. Only store-derived chat ids and links resolved by the core may hide a row. Limit: a regular group joined through another link (or the directory's full link) is not found by the lookup and still appears as a directory result (GAP-08).
+**Invariant:** A name result whose chat is shown in the local list MUST be hidden. A directory result MUST be hidden when its link refers, in the local store, to a chat shown in the local list or found by name, or when its link is the link a name was resolved through. Only store-derived chat ids and links resolved by the core may hide a row. Limit: a regular group joined through another link (or the directory's full link) is not found by the lookup and still appears as a directory result (GAP-09).
 
 **Enforcement:** `OnlineSearchModel.rows(shownChatIds)` filters at render time with the ids of the chats each screen shows; `planLocalChatId` derives a result's local chat id from the connection plan, and `NameSearchResult.resolvedLink` is the link the core resolved.
 
diff --git a/apps/multiplatform/product/views/chat.md b/apps/multiplatform/product/views/chat.md
index 7862574f04..c920e40146 100644
--- a/apps/multiplatform/product/views/chat.md
+++ b/apps/multiplatform/product/views/chat.md
@@ -95,6 +95,7 @@ Bottom input area for composing messages:
 |---|---|
 | Text field | `PlatformTextField` with markdown support, `@mention` autocomplete, file paste support |
 | Attachment button | Opens `ModalBottomSheetLayout` with options: camera, gallery (image/video), file |
+| Emoji button | Desktop only (Android keyboards have their own emoji panel). Opens a popup with search and categories; a picked emoji is inserted at the cursor and the picker stays open. With text selected the emoji goes after it, as the text field drops its selection when the picker takes focus. Picked emoji are not remembered, for privacy. Esc, a click outside or the button closes it |
 | Send button | Sends message; changes to checkmark for reports; animated size/alpha |
 | Voice record button | Shown when text is empty and voice allowed; hold to record, release to preview |
 | Live message button | Start/update live typing message (if `liveMessageAlertShown`) |
@@ -132,4 +133,5 @@ When `timedMessageAllowed` is true, compose bar includes a timer icon for settin
 | `ChatView.kt` | `views/chat/ChatView.kt` |
 | `ComposeView.kt` | `views/chat/ComposeView.kt` |
 | `SendMsgView.kt` | `views/chat/SendMsgView.kt` |
+| `ComposeEmojiPicker.kt` | `views/chat/ComposeEmojiPicker.kt` (+ `.android.kt`, `.desktop.kt`) |
 | Chat item views | `views/chat/item/*.kt` |
diff --git a/apps/multiplatform/product/views/user-profiles.md b/apps/multiplatform/product/views/user-profiles.md
index dfc37a5e8d..38a0e13874 100644
--- a/apps/multiplatform/product/views/user-profiles.md
+++ b/apps/multiplatform/product/views/user-profiles.md
@@ -28,8 +28,8 @@ Overlay panel triggered from `ChatListView` toolbar:
 | Device picker row | `DevicePickerRow` showing local device and connected remote hosts (Desktop only); pill-shaped buttons with connect/disconnect actions |
 | Active user profile | `ProfilePreview` of current user (Desktop: single row; Android: full user list) |
 | User list | `UserPickerUsersSection` with all visible non-hidden profiles; tap to switch, long-press disabled |
-| SimpleX address | Row to open `UserAddressView` (create or view address) |
-| Chat preferences | Row to open `PreferencesView` |
+| SimpleX address | Row to open `UserAddressView` (create or view address); hidden on Desktop when there is no active profile and no mobile is in use; a screen shown with no active profile closes itself (if another screen covers it, when the user goes back to it) |
+| Chat preferences | Row to open `PreferencesView`; hidden on Desktop when there is no active profile and no mobile is in use; a screen shown with no active profile closes itself (if another screen covers it, when the user goes back to it) |
 | Chat profiles | Row to open `UserProfilesView` (or `CreateProfile` when no users exist on Desktop) |
 | Use from desktop/mobile | Android: "Use from desktop" (`ConnectDesktopView`); Desktop: "Link a mobile" / "Linked mobiles" (`ConnectMobileView`) |
 | Settings | Row to open `SettingsView` with `ColorModeSwitcher` trailing |
diff --git a/apps/multiplatform/spec/client/chat-list.md b/apps/multiplatform/spec/client/chat-list.md
index e3676477a1..9b1784d48a 100644
--- a/apps/multiplatform/spec/client/chat-list.md
+++ b/apps/multiplatform/spec/client/chat-list.md
@@ -281,6 +281,9 @@ fun UserPicker(
 - **Android:** Renders as a slide-up overlay panel on the chat list, triggered by tapping the user profile button in the toolbar.
 - **Desktop:** Rendered inline in the left column of `DesktopScreen`, always accessible.
 - Closes automatically when any `ModalManager.start` modal opens.
+- On Desktop, when there is no active user and no mobile is in use (`desktopNoUserNoRemote`), the SimpleX address and Chat preferences rows and the divider below them are hidden.
+- The SimpleX address row opens `UserAddressView` in `ModalManager.start`. With no active user (`currentUser == null`) the modal draws nothing and closes itself when it is the top modal (`ModalManager.start.isLastModal`); if another screen covers it, it closes when the user goes back to it.
+- The Chat preferences row closes its modal the same way when there is no active user.
 
 ### Content
 
@@ -457,7 +460,7 @@ For each new entry of a page (not already shown, not repeated in the page), the
 
 Only store-derived chat ids and the link the core resolved can hide a row, never a field the directory or a name's owner wrote. A mismatch in link encoding can only produce a duplicate row.
 
-[GAP] A regular group the user joined through a different link, or through the directory's full link, is not found by the store lookup and still appears as a Directory row; tapping it goes through `planAndConnect`. See [GAP-08](../../product/gaps.md#gap-08-online-search-groups-joined-through-another-link-still-appear-as-directory-results).
+[GAP] A regular group the user joined through a different link, or through the directory's full link, is not found by the store lookup and still appears as a Directory row; tapping it goes through `planAndConnect`. See [GAP-09](../../product/gaps.md#gap-09-online-search-groups-joined-through-another-link-still-appear-as-directory-results).
 
 ### Rendering
 
@@ -479,4 +482,4 @@ Each part renders only when it has rows: the Names part when `rows.names` is not
 
 A name or directory row tap first hides the keyboard (`hideKeyboard(view)`), then runs `planAndConnect` with `withBGApi`. Text from the directory and from name owners is rendered with `Text(String)` (never parsed as markdown) with line limits.
 
-[GAP] Resolving a SimpleX name with `PRMUnknown` also loads the resolved address's link data from the server that hosts it; the alert names only the directory and the name-resolving server. See [GAP-09](../../product/gaps.md#gap-09-online-search-first-search-alert-does-not-mention-the-server-hosting-a-resolved-address).
+[GAP] Resolving a SimpleX name with `PRMUnknown` also loads the resolved address's link data from the server that hosts it; the alert names only the directory and the name-resolving server. See [GAP-10](../../product/gaps.md#gap-10-online-search-first-search-alert-does-not-mention-the-server-hosting-a-resolved-address).
diff --git a/apps/multiplatform/spec/client/chat-view.md b/apps/multiplatform/spec/client/chat-view.md
index adf8ad0224..3bad2e09c4 100644
--- a/apps/multiplatform/spec/client/chat-view.md
+++ b/apps/multiplatform/spec/client/chat-view.md
@@ -313,6 +313,7 @@ Key sections: group profile, group link, member list with roles, group preferenc
 | `EmojiItemView.kt` | Large emoji-only message |
 | `FramedItemView.kt` | Message bubble frame (quoted item, text, media) |
 | `ImageFullScreenView.kt` | Fullscreen image gallery |
+| `MarkdownFileView.kt` | Markdown file viewer, formatted or as text |
 | `IntegrityErrorItemView.kt` | Message integrity error |
 | `MarkedDeletedItemView.kt` | Marked-as-deleted / moderated message |
 | `TextItemView.kt` | Plain text message with markdown |
diff --git a/apps/multiplatform/spec/client/compose.md b/apps/multiplatform/spec/client/compose.md
index 241dcf667b..e7f879f5b0 100644
--- a/apps/multiplatform/spec/client/compose.md
+++ b/apps/multiplatform/spec/client/compose.md
@@ -14,6 +14,7 @@ Source: `common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView
 6. [Attachment Handling](#6-attachment-handling)
 7. [Draft Persistence](#7-draft-persistence)
 8. [Source Files](#8-source-files)
+9. [Emoji Picker](#9-emoji-picker)
 
 ---
 
@@ -41,9 +42,10 @@ ComposeView
 |   |-- ComposeImageView                   [media thumbnails]
 |   |-- ComposeVoiceView                   [voice recording waveform]
 |   +-- ComposeFileView                    [file name display]
-|-- AttachmentAndCommandsButtons
+|-- ComposeActionButtons
 |   |-- CommandsButton                     [bot commands "//"]
-|   +-- AttachmentButton                   [paperclip icon]
+|   |-- AttachmentButton                   [paperclip icon]
+|   +-- ComposeEmojiButton                 [desktop emoji picker popup]
 +-- SendMsgView
     |-- PlatformTextField                  [multiline text input]
     |-- DeleteTextButton                   [clear text, shown on long text]
@@ -348,7 +350,7 @@ When `privacyLinkPreviews` is enabled and the message contains a URL:
 
 ## 7. Draft Persistence
 
-**Location:** [`ComposeView.kt#L1230`](../../common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt#L1230) (`KeyChangeEffect(chatModel.chatId.value)`)
+**Location:** [`ComposeView.kt#L1394`](../../common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt#L1394) (`KeyChangeEffect(chatModel.chatId.value)`)
 
 Controlled by the `privacySaveLastDraft` preference.
 
@@ -397,3 +399,27 @@ When a draft exists for a chat, `ChatPreviewView` shows a pencil icon with the d
 | `ComposeContextPendingMemberActionsView.kt` | Pending member compose actions |
 | `ComposeContextProfilePickerView.kt` | Profile picker in compose context |
 | `SelectableChatItemToolbars.kt` | Multi-select mode toolbar (delete, forward, moderate) |
+| `ComposeEmojiPicker.kt` (+ `.android.kt`, `.desktop.kt`) | Desktop emoji button and picker, emoji insertion |
+
+---
+
+<a id="EmojiPicker"></a>
+
+## 9. Emoji Picker
+
+**Source:** [`ComposeEmojiPicker.kt`](../../common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.kt), [`ComposeEmojiPicker.desktop.kt`](../../common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt)
+
+Desktop only; on Android the [`ComposeEmojiButton()`](../../common/src/androidMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.android.kt) actual is empty, as keyboards have their own emoji panel.
+
+An emoji button in [`ComposeActionButtons()`](../../common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt#L1346-L1363) toggles `emojiPickerShown`, owned by `ComposeView`. A picked emoji goes through [`onEmoji()`](../../common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt#L1290-L1292): [`insertingEmoji()`](../../common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.kt#L10-L14) replaces the selection (clamped to the text) and moves the cursor after the emoji, then `onMessageChange` applies markdown parsing, link sanitizing and the large-emoji font. Emoji are ignored while a message is in progress. The picker stays open after picking. The text field collapses its selection to the end when the popup takes focus, so the emoji goes after selected text.
+
+[`emojiEnabled`](../../common/src/commonMain/kotlin/chat/simplex/common/views/chat/ComposeView.kt#L1282-L1288) is false when sending is not allowed or a voice message is previewed; the picker closes then. When the picker closes, the text field gets focus through `focusRequester`.
+
+| Function | Behavior |
+|---|---|
+| [`ComposeEmojiButton()`](../../common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt#L89-L115) | Button 4 dp after the attachment button (`EMOJI_BUTTON_START_PADDING`, against the row's -8 dp overlap). Focusable `Popup` above the button; closes on Esc (on key release, so the window does not also close its top modal), outside click or the button; its height is capped to the space above the button |
+| [`EmojiPicker()`](../../common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt#L127-L178) | Search field, category tabs, `LazyVerticalGrid` with one section per `EmojiCategory`; tabs and cells are not focusable, so typing after a click goes to search. Picked emoji are not stored, so nothing about what the user typed is kept in preferences |
+
+Data: `desktopMain/resources/emoji/emoji.txt` is generated by `scripts/desktop/generate-emoji-data.py` from Unicode `emoji-test.txt` 15.0 (the version covered by the bundled NotoColorEmoji): fully-qualified emoji without skin tone variants, `@<group>` lines followed by `<emoji>\t<name>` lines. [`parseEmojiData()`](../../common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt#L59-L76) maps groups to `EmojiCategory` and fails on an unknown group; [`emojiSections`](../../common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt#L78-L82) loads it lazily. [`searchEmoji()`](../../common/src/desktopMain/kotlin/chat/simplex/common/views/chat/ComposeEmojiPicker.desktop.kt#L84-L87) matches the English name case-insensitively.
+
+[GAP] No skin tone selection, and search uses English emoji names only.
diff --git a/apps/multiplatform/spec/client/navigation.md b/apps/multiplatform/spec/client/navigation.md
index 36c878176b..ad3357cfc3 100644
--- a/apps/multiplatform/spec/client/navigation.md
+++ b/apps/multiplatform/spec/client/navigation.md
@@ -179,7 +179,7 @@ fun DesktopScreen(userPickerState: MutableStateFlow<AnimatedViewState>)
 |---|---|---|
 | **Left** | `DEFAULT_START_MODAL_WIDTH * fontSizeSqrtMultiplier` (fixed) | `StartPartOfScreen` (ChatListView) + `UserPicker` overlay |
 | **Left overlay** | Same as left column | `ModalManager.start` modals + `SwitchingUsersView` |
-| **Center** | `min = DEFAULT_MIN_CENTER_MODAL_WIDTH`, `weight = 1f` (flexible) | `CenterPartOfScreen` (ChatView or "no selected chat" placeholder, or `ModalManager.center`) |
+| **Center** | `min = DEFAULT_MIN_CENTER_MODAL_WIDTH`, `weight = 1f` (flexible) | `CenterPartOfScreen` (ChatView with `ModalManager.center` over it; without a chat: `ModalManager.center` or "no selected chat" placeholder) |
 | **Right** | `max = DEFAULT_END_MODAL_WIDTH * fontSizeSqrtMultiplier` (flexible, 0 when empty) | `ModalManager.end` (ChatInfoView, GroupChatInfoView, ChatItemInfoView, etc.) |
 
 ### Column Separators
@@ -197,7 +197,7 @@ When the UserPicker is visible or a start modal is open (but no center modal), a
 
 - When `chatId` is null and no center modals: shows "No selected chat" placeholder.
 - When `chatId` is null and center modals open: shows `ModalManager.center`.
-- When `chatId` is set: shows `ChatView`.
+- When `chatId` is set: shows `ChatView`, and `ModalManager.center` over it.
 - Automatically closes center modals when a chat is selected.
 
 ### StartPartOfScreen
@@ -224,7 +224,7 @@ class ModalManager(private val placement: ModalPlacement?)
 | Zone | Android Behavior | Desktop Behavior |
 |---|---|---|
 | `start` | Shared (same as all others) | Left column overlay, slides from start |
-| `center` | Shared | Center column overlay, replaces ChatView |
+| `center` | Shared | Center column overlay, drawn over ChatView |
 | `end` | Shared | Right column, slides from end |
 | `fullscreen` | Shared | Fullscreen overlay |
 
@@ -257,6 +257,7 @@ Each `ModalManager` maintains a stack of `ModalViewHolder` objects with:
 | `closeModals` | Pop all modals from the stack |
 | `closeModalsExceptFirst` | Pop all but the bottom modal |
 | `hasModalsOpen()` | Check if any modals are on the stack |
+| `isLastModal(data)` | Check if the modal with this `ModalData` is the top modal not being removed |
 | `showInView` | Render the current modal stack into the composable tree |
 
 ### Usage Pattern
@@ -404,4 +405,4 @@ Both triggers do nothing for empty text or a pasted link ([`searchTrimmed()`](..
 
 **Archived contacts.** [`DeletedContactsView`](../../common/src/commonMain/kotlin/chat/simplex/common/views/newchat/NewChatSheet.kt#L755-L869) passes no `onSearch` to `ContactsSearchBar`: its field keeps the Search IME label (every `SearchTextField` uses `ImeAction.Search`), the key does nothing, and it shows no online rows; its empty state is unchanged.
 
-[GAP] New chat does not resolve a typed name locally while typing (the `ContactsSearchBar` collector resolves a name only when its "Connect to …" row is tapped), so a known contact whose name does not contain the typed text is not in "Your contacts" and appears as a Names row; tapping it opens the existing chat. See [GAP-10](../../product/gaps.md#gap-10-online-search-new-chat-does-not-narrow-contacts-by-name-while-typing).
+[GAP] New chat does not resolve a typed name locally while typing (the `ContactsSearchBar` collector resolves a name only when its "Connect to …" row is tapped), so a known contact whose name does not contain the typed text is not in "Your contacts" and appears as a Names row; tapping it opens the existing chat. See [GAP-11](../../product/gaps.md#gap-11-online-search-new-chat-does-not-narrow-contacts-by-name-while-typing).
diff --git a/apps/multiplatform/spec/impact.md b/apps/multiplatform/spec/impact.md
index 4c7045f961..69cc463ea7 100644
--- a/apps/multiplatform/spec/impact.md
+++ b/apps/multiplatform/spec/impact.md
@@ -114,6 +114,7 @@ Path prefix: `common/src/commonMain/kotlin/chat/simplex/common/`
 | `views/chat/ChatView.kt` | PC2, PC3, PC4, PC5, PC6, PC7, PC8, PC9, PC11 | High | Core conversation UI — most messaging features |
 | `views/chat/ComposeView.kt` | PC4, PC6, PC9, PC10, PC11 | High | Message composition — send path for all messages |
 | `views/chat/SendMsgView.kt` | PC4, PC9 | Medium | Send button and voice record toggle |
+| `views/chat/ComposeEmojiPicker.kt` | PC4 | Low | Emoji button expect declaration, emoji insertion |
 | `views/chat/ComposeVoiceView.kt` | PC9 | Medium | Voice message recording UI |
 | `views/chat/ComposeFileView.kt` | PC10 | Low | File attachment preview in compose area |
 | `views/chat/ComposeImageView.kt` | PC10 | Low | Image attachment preview in compose area |
@@ -368,6 +369,7 @@ Path prefix: `common/src/androidMain/kotlin/chat/simplex/common/`
 | `views/call/CallAudioDeviceManager.kt` | PC17 | Medium | Android audio routing (speaker, earpiece, bluetooth) |
 | `views/chat/ComposeView.android.kt` | PC4, PC10 | Low | Android compose view extensions |
 | `views/chat/SendMsgView.android.kt` | PC4 | Low | Android send button extensions |
+| `views/chat/ComposeEmojiPicker.android.kt` | PC4 | Low | Empty emoji button actual (no picker on Android) |
 | `views/chat/item/ChatItemView.android.kt` | PC2, PC3 | Low | Android chat item extensions |
 | `views/chat/item/CIImageView.android.kt` | PC10 | Low | Android image rendering extensions |
 | `views/chat/item/CIVideoView.android.kt` | PC10 | Low | Android video rendering extensions |
@@ -442,6 +444,7 @@ Path prefix: `common/src/desktopMain/kotlin/chat/simplex/common/`
 | `views/call/CallView.desktop.kt` | PC17 | Medium | Desktop WebView-based WebRTC call |
 | `views/chat/ComposeView.desktop.kt` | PC4, PC10 | Low | Desktop compose view (drag-and-drop, paste) |
 | `views/chat/SendMsgView.desktop.kt` | PC4 | Low | Desktop send shortcut (Enter key handling) |
+| `views/chat/ComposeEmojiPicker.desktop.kt` | PC4 | Low | Desktop emoji picker popup (data from `resources/emoji/emoji.txt`, search) |
 | `views/chat/item/ChatItemView.desktop.kt` | PC2, PC3 | Low | Desktop chat item extensions |
 | `views/chat/item/CIImageView.desktop.kt` | PC10 | Low | Desktop image rendering |
 | `views/chat/item/CIVideoView.desktop.kt` | PC10 | Low | Desktop video rendering |
diff --git a/apps/simplex-calculator-bot/README.md b/apps/simplex-calculator-bot/README.md
index 028e470964..d8985700cd 100644
--- a/apps/simplex-calculator-bot/README.md
+++ b/apps/simplex-calculator-bot/README.md
@@ -25,7 +25,7 @@ The bot prints its address and keeps its data in `./data`.
 
 To add a SimpleX name to the address, register the name with the address short link, and run `npm start -- --domain yourname.simplex`. The name is kept when the bot starts without `--domain`.
 
-To use the library from this repository, build it and run `npm install --no-save ../../packages/simplex-chat-nodejs` instead of `npm install`.
+To use the library from this repository, build it and run `npm install --no-save ../../packages/simplex-chat-nodejs` instead of `npm install`, then start the bot with `SIMPLEX_ADDON_PATH=../../packages/simplex-chat-nodejs/build/Release/simplex.node`.
 
 ## Test
 
diff --git a/apps/simplex-support-bot/README.md b/apps/simplex-support-bot/README.md
index 19b9ab8bd6..d95aa5b59b 100644
--- a/apps/simplex-support-bot/README.md
+++ b/apps/simplex-support-bot/README.md
@@ -12,30 +12,18 @@ A business-address bot that triages incoming support chats, optionally runs them
 
 ```bash
 cd apps/simplex-support-bot
-npm install      # downloads native libs + transitive deps
+npm install
 npm run build    # tsc
 ```
 
-By default this installs the **SQLite** backend.
+The native library is downloaded on first start into the user cache. To download it ahead of time (for example in a Dockerfile), run as the user that runs the bot:
 
-To use **PostgreSQL** instead, drop a `.npmrc` next to `package.json` *before* `npm install`:
-
-```bash
-echo 'simplex_backend=postgres' > .npmrc
-npm install      # now pulls postgres-flavored native libs
-npm run build
+```sh
+npx simplex-chat install --backend sqlite
+npx simplex-chat install --backend postgres   # Linux x86_64 only
 ```
 
-`.npmrc` lives next to the package — npm reads it natively, no extra setup.
-
-### Switching backends
-
-`npm install` is a no-op for already-installed deps, so editing `.npmrc` and re-running `npm install` will *not* re-trigger `simplex-chat`'s preinstall. To switch backends, force a clean install:
-
-```bash
-rm -rf node_modules
-npm install      # download-libs.js re-runs and pulls the right native lib
-```
+Select the database with `--db sqlite` (default) or `--db postgres`.
 
 ## Run
 
@@ -47,11 +35,9 @@ npm start -- --team-group "Support Team"
 
 # PostgreSQL
 npm start -- --team-group "Support Team" \
-             --pg-conn "postgres://user:pass@host/db"
+             --db postgres --pg-conn "postgres://user:pass@host/db"
 ```
 
-The bot runs via `npm start` so npm can expose `.npmrc` settings to the process — `detectBackend()` reads `npm_config_simplex_backend` to know which backend was installed.
-
 ## Flags
 
 Run `npm start -- --help` for the auto-generated reference. Summary:
@@ -60,6 +46,7 @@ Run `npm start -- --help` for the auto-generated reference. Summary:
 |---|---|---|---|---|
 | `--team-group` | both | yes | — | team group display name |
 | `--state-file` | both | no | `./data/state.json` | path to bot state JSON |
+| `--db` | both | no | `sqlite` | `sqlite` or `postgres` |
 | `--sqlite-file-prefix` | sqlite | no | `./data/simplex` | DB file prefix (creates `<prefix>_chat.db`, `<prefix>_agent.db`) |
 | `--sqlite-key` | sqlite | no | (unencrypted) | SQLCipher encryption key |
 | `--pg-conn` | postgres | yes | — | PostgreSQL connection string |
@@ -76,7 +63,8 @@ Run `npm start -- --help` for the auto-generated reference. Summary:
 | Var | Purpose |
 |---|---|
 | `GROK_API_KEY` | xAI API key; enables Grok replies |
-| `SIMPLEX_BACKEND` | alternative to `.npmrc` for selecting the install backend (`sqlite` or `postgres`) |
+| `SIMPLEX_LIBS_DIR` | directory with a local libsimplex build for the `--db` backend, instead of the downloaded one |
+| `SIMPLEX_ADDON_PATH` | locally built Node.js add-on (`simplex.node`), instead of the downloaded one |
 
 ## Local development against unreleased lib changes
 
@@ -84,18 +72,18 @@ This package depends on `simplex-chat` from npm. To test against an in-tree vers
 
 ```bash
 # In packages/simplex-chat-nodejs
+npm install && npm run build
 npm link
 
 # In apps/simplex-support-bot
 npm link simplex-chat
+export SIMPLEX_ADDON_PATH=../../packages/simplex-chat-nodejs/build/Release/simplex.node
 ```
 
 `npm unlink simplex-chat && npm install` reverts to the registry version.
 
 ## Troubleshooting
 
-- **`--pg-conn is required when backend is postgres`** — the postgres backend is installed but you didn't pass a connection string.
+- **`--pg-conn is required with --db postgres`** — pass a connection string, or use `--db sqlite`.
 - **`libpq5` errors at startup** — install `libpq5` on the host (`apt install libpq5` on Debian/Ubuntu).
 - **`ENOENT: no such file or directory, open './data/state.json'`** — the parent directory of `--state-file` must exist; `mkdir -p data` before starting.
-- **Wrong backend installed** — check `node_modules/simplex-chat/libs/installed.txt`. Edit `.npmrc`, then `rm -rf node_modules && npm install` to switch (`npm install` alone won't re-run the dep's preinstall).
-- **`libpq` connection error** at startup with sqlite-flavored config (or vice versa) — `.npmrc` was changed but libs weren't reinstalled. See "Switching backends" above.
diff --git a/apps/simplex-support-bot/bot.test.ts b/apps/simplex-support-bot/bot.test.ts
index 37521e49dc..a9785de1e3 100644
--- a/apps/simplex-support-bot/bot.test.ts
+++ b/apps/simplex-support-bot/bot.test.ts
@@ -2403,54 +2403,48 @@ describe("parseConfig Validation", () => {
       .toThrow(/--complete-hours must be a non-negative integer, got "abc"/)
   })
 
-  test("postgres backend without --pg-conn → throws", () => {
-    const prev = process.env.SIMPLEX_BACKEND
-    process.env.SIMPLEX_BACKEND = "postgres"
-    try {
-      expect(() => parseConfig(baseArgs))
-        .toThrow(/--pg-conn is required when backend is postgres/)
-    } finally {
-      if (prev === undefined) delete process.env.SIMPLEX_BACKEND
-      else process.env.SIMPLEX_BACKEND = prev
-    }
+  test("--db postgres without --pg-conn → throws", () => {
+    expect(() => parseConfig([...baseArgs, "--db", "postgres"]))
+      .toThrow(/--pg-conn is required with --db postgres/)
   })
 
-  test("postgres backend with --pg-conn → db is postgres DbConfig", () => {
-    const prev = process.env.SIMPLEX_BACKEND
-    process.env.SIMPLEX_BACKEND = "postgres"
-    try {
-      const cfg = parseConfig([...baseArgs, "--pg-conn", "postgres://user:pass@localhost/db"])
-      expect(cfg.db).toEqual({type: "postgres", connectionString: "postgres://user:pass@localhost/db"})
-    } finally {
-      if (prev === undefined) delete process.env.SIMPLEX_BACKEND
-      else process.env.SIMPLEX_BACKEND = prev
-    }
+  test("--db postgres with --pg-conn → db is postgres DbConfig", () => {
+    const cfg = parseConfig([...baseArgs, "--db", "postgres", "--pg-conn", "postgres://user:pass@localhost/db"])
+    expect(cfg.db).toEqual({type: "postgres", connectionString: "postgres://user:pass@localhost/db"})
   })
 
-  test("postgres backend with --pg-schema → DbConfig carries schemaPrefix", () => {
-    const prev = process.env.SIMPLEX_BACKEND
-    process.env.SIMPLEX_BACKEND = "postgres"
-    try {
-      const cfg = parseConfig([...baseArgs, "--pg-conn", "postgres://localhost/db", "--pg-schema", "bot"])
-      expect(cfg.db).toEqual({type: "postgres", connectionString: "postgres://localhost/db", schemaPrefix: "bot"})
-    } finally {
-      if (prev === undefined) delete process.env.SIMPLEX_BACKEND
-      else process.env.SIMPLEX_BACKEND = prev
-    }
+  test("--db postgres with --pg-schema → DbConfig carries schemaPrefix", () => {
+    const cfg = parseConfig([...baseArgs, "--db", "postgres", "--pg-conn", "postgres://localhost/db", "--pg-schema", "bot"])
+    expect(cfg.db).toEqual({type: "postgres", connectionString: "postgres://localhost/db", schemaPrefix: "bot"})
   })
 
-  test("sqlite backend (default) → db is sqlite DbConfig with default filePrefix", () => {
-    const prevBackend = process.env.SIMPLEX_BACKEND
-    const prevNpm = process.env.npm_config_simplex_backend
-    delete process.env.SIMPLEX_BACKEND
-    delete process.env.npm_config_simplex_backend
-    try {
-      const cfg = parseConfig(baseArgs)
-      expect(cfg.db).toEqual({type: "sqlite", filePrefix: "./data/simplex"})
-    } finally {
-      if (prevBackend !== undefined) process.env.SIMPLEX_BACKEND = prevBackend
-      if (prevNpm !== undefined) process.env.npm_config_simplex_backend = prevNpm
-    }
+  test("default --db → sqlite DbConfig with default filePrefix", () => {
+    const cfg = parseConfig(baseArgs)
+    expect(cfg.db).toEqual({type: "sqlite", filePrefix: "./data/simplex"})
+  })
+
+  test("--pg-conn with sqlite → throws", () => {
+    expect(() => parseConfig([...baseArgs, "--pg-conn", "postgres://localhost/db"]))
+      .toThrow(/--pg-conn and --pg-schema require --db postgres/)
+  })
+
+  test("--pg-schema with sqlite → throws", () => {
+    expect(() => parseConfig([...baseArgs, "--pg-schema", "bot"]))
+      .toThrow(/--pg-conn and --pg-schema require --db postgres/)
+  })
+
+  test("--sqlite-key with postgres → throws", () => {
+    expect(() => parseConfig([...baseArgs, "--db", "postgres", "--pg-conn", "c", "--sqlite-key", "k"]))
+      .toThrow(/--sqlite-file-prefix and --sqlite-key require --db sqlite/)
+  })
+
+  test("--sqlite-file-prefix with postgres → throws", () => {
+    expect(() => parseConfig([...baseArgs, "--db", "postgres", "--pg-conn", "c", "--sqlite-file-prefix", "./x"]))
+      .toThrow(/--sqlite-file-prefix and --sqlite-key require --db sqlite/)
+  })
+
+  test("invalid --db → throws", () => {
+    expect(() => parseConfig([...baseArgs, "--db", "mysql"])).toThrow(/Allowed choices are sqlite, postgres/)
   })
 
   test("sqlite backend with --sqlite-key → DbConfig carries encryptionKey", () => {
@@ -2468,18 +2462,6 @@ describe("parseConfig Validation", () => {
       .toThrow(/required option '--team-group/)
   })
 
-  test("invalid SIMPLEX_BACKEND → throws", () => {
-    const prev = process.env.SIMPLEX_BACKEND
-    process.env.SIMPLEX_BACKEND = "mysql"
-    try {
-      expect(() => parseConfig(baseArgs))
-        .toThrow(/Invalid SIMPLEX_BACKEND: "mysql"/)
-    } finally {
-      if (prev === undefined) delete process.env.SIMPLEX_BACKEND
-      else process.env.SIMPLEX_BACKEND = prev
-    }
-  })
-
   test("--complete-hours negative → throws", () => {
     // parseArgs refuses "-1" as a bare arg (ambiguous with a short flag), so use `=` form
     expect(() => parseConfig([...baseArgs, "--complete-hours", "-1"]))
diff --git a/apps/simplex-support-bot/src/config.ts b/apps/simplex-support-bot/src/config.ts
index 8fbd006aef..be33db0c38 100644
--- a/apps/simplex-support-bot/src/config.ts
+++ b/apps/simplex-support-bot/src/config.ts
@@ -1,4 +1,4 @@
-import {Command} from "commander"
+import {Command, Option} from "commander"
 import {api} from "simplex-chat"
 
 export interface IdName {
@@ -6,8 +6,6 @@ export interface IdName {
   name: string
 }
 
-export type Backend = "sqlite" | "postgres"
-
 export interface Config {
   stateFile: string          // local path to the bot's state JSON
   db: api.DbConfig           // passed to ChatApi.init / bot.run
@@ -21,18 +19,6 @@ export interface Config {
   grokApiKey: string | null
 }
 
-// Mirrors packages/simplex-chat-nodejs/src/download-libs.js so runtime detection
-// matches what was used at install time. Works whether the user installed via
-// SIMPLEX_BACKEND env var, .npmrc (→ npm_config_simplex_backend), or the
-// --simplex_backend=postgres CLI flag (also surfaced as npm_config_*).
-export function detectBackend(): Backend {
-  const raw = (process.env.SIMPLEX_BACKEND || process.env.npm_config_simplex_backend || "sqlite").toLowerCase()
-  if (raw !== "sqlite" && raw !== "postgres") {
-    throw new Error(`Invalid SIMPLEX_BACKEND: "${raw}". Must be "sqlite" or "postgres".`)
-  }
-  return raw
-}
-
 export function parseIdName(s: string): IdName {
   const i = s.indexOf(":")
   if (i < 1) throw new Error(`Invalid ID:name format: "${s}"`)
@@ -57,21 +43,23 @@ function buildCommand(): Command {
     .description("business-address triage bot")
     .requiredOption("--team-group <name>", "team group display name")
     .option("--state-file <path>", "state JSON path", "./data/state.json")
+    .addOption(new Option("--db <backend>", "database backend").choices(["sqlite", "postgres"]).default("sqlite"))
     .option("--sqlite-file-prefix <path>", "SQLite DB file prefix", "./data/simplex")
     .option("--sqlite-key <key>", "SQLCipher encryption key (default: unencrypted)")
-    .option("--pg-conn <conn>", "PostgreSQL connection string (required for postgres)")
+    .option("--pg-conn <conn>", "PostgreSQL connection string (required with --db postgres)")
     .option("--pg-schema <prefix>", "PostgreSQL schema prefix (default: simplex_v1)")
     .option("-a, --auto-add-team-members <list>", "comma-separated ID:name pairs (e.g. 1:Alice,2:Bob)")
     .option("--timezone <iana>", "IANA timezone for weekend detection", "UTC")
     .option("--complete-hours <n>", "auto-complete chats after N hours idle (0 disables)", parseNonNegativeInt("--complete-hours"), 3)
     .option("--card-flush-seconds <n>", "debounce card state writes", parseNonNegativeInt("--card-flush-seconds"), 300)
     .option("--context-file <path>", "text file with Grok system context (required if GROK_API_KEY set)")
-    .addHelpText("after", "\nEnvironment:\n  GROK_API_KEY     xAI API key — enables Grok replies\n  SIMPLEX_BACKEND  sqlite | postgres — alternative to .npmrc for backend selection\n")
+    .addHelpText("after", "\nEnvironment:\n  GROK_API_KEY        xAI API key — enables Grok replies\n  SIMPLEX_LIBS_DIR    local libsimplex build for the --db backend\n  SIMPLEX_ADDON_PATH  locally built Node.js add-on\n")
 }
 
 interface RawOpts {
   teamGroup: string
   stateFile: string
+  db: api.DbConfig["type"]
   sqliteFilePrefix: string
   sqliteKey?: string
   pgConn?: string
@@ -93,19 +81,19 @@ export function parseConfig(args: string[]): Config {
     throw err
   }
   const opts = cmd.opts<RawOpts>()
+  const given = (option: keyof RawOpts) => cmd.getOptionValueSource(option) === "cli"
 
   const grokApiKey = process.env.GROK_API_KEY || null
 
-  const backend = detectBackend()
   let db: api.DbConfig
-  if (backend === "sqlite") {
+  if (opts.db === "sqlite") {
+    if (given("pgConn") || given("pgSchema")) throw new Error("--pg-conn and --pg-schema require --db postgres")
     db = opts.sqliteKey
       ? {type: "sqlite", filePrefix: opts.sqliteFilePrefix, encryptionKey: opts.sqliteKey}
       : {type: "sqlite", filePrefix: opts.sqliteFilePrefix}
   } else {
-    if (!opts.pgConn) {
-      throw new Error("--pg-conn is required when backend is postgres (PostgreSQL connection string)")
-    }
+    if (given("sqliteFilePrefix") || given("sqliteKey")) throw new Error("--sqlite-file-prefix and --sqlite-key require --db sqlite")
+    if (!opts.pgConn) throw new Error("--pg-conn is required with --db postgres")
     db = opts.pgSchema
       ? {type: "postgres", connectionString: opts.pgConn, schemaPrefix: opts.pgSchema}
       : {type: "postgres", connectionString: opts.pgConn}
diff --git a/apps/simplex-support-bot/vitest.config.ts b/apps/simplex-support-bot/vitest.config.ts
index c143572a87..3a70f6c5e7 100644
--- a/apps/simplex-support-bot/vitest.config.ts
+++ b/apps/simplex-support-bot/vitest.config.ts
@@ -5,13 +5,6 @@ export default defineConfig({
   test: {
     globals: true,
     testTimeout: 10000,
-    // Clear backend signals — .npmrc next to package.json otherwise injects
-    // npm_config_simplex_backend into every test's env, breaking sqlite-default
-    // assumptions in parseConfig tests.
-    env: {
-      SIMPLEX_BACKEND: "",
-      npm_config_simplex_backend: "",
-    },
   },
   resolve: {
     alias: {
diff --git a/blog/20230925-simplex-chat-v5-3-desktop-app-local-file-encryption-directory-service.md b/blog/20230925-simplex-chat-v5-3-desktop-app-local-file-encryption-directory-service.md
index 3c3fb7b515..b0e84ada28 100644
--- a/blog/20230925-simplex-chat-v5-3-desktop-app-local-file-encryption-directory-service.md
+++ b/blog/20230925-simplex-chat-v5-3-desktop-app-local-file-encryption-directory-service.md
@@ -50,7 +50,7 @@ Other limitations of the desktop app:
 - you cannot send voice messages.
 - there is no support for calls yet.
 
-You can download the desktop app for Linux and Mac via [downloads page](../docs/DOWNLOADS.md). Windows version will be available soon.
+You can download the desktop app for Linux and Mac via [downloads page](https://simplex.chat/downloads/). Windows version will be available soon.
 
 ## Group directory service and other group improvements
 
diff --git a/blog/20231125-simplex-chat-v5-4-link-mobile-desktop-quantum-resistant-better-groups.md b/blog/20231125-simplex-chat-v5-4-link-mobile-desktop-quantum-resistant-better-groups.md
index 539d719af4..1a0019216a 100644
--- a/blog/20231125-simplex-chat-v5-4-link-mobile-desktop-quantum-resistant-better-groups.md
+++ b/blog/20231125-simplex-chat-v5-4-link-mobile-desktop-quantum-resistant-better-groups.md
@@ -40,7 +40,7 @@ This is only possible when both devices are connected to the same local network.
 
 **On desktop**
 
-If you don't have desktop app installed yet, [download it](../docs/DOWNLOADS.md) and create any chat profile - you don't need to use it, and when you create it there are no server requests sent and no accounts are created. Think about it as about user profile on your computer.
+If you don't have desktop app installed yet, [download it](https://simplex.chat/downloads/) and create any chat profile - you don't need to use it, and when you create it there are no server requests sent and no accounts are created. Think about it as about user profile on your computer.
 
 Then in desktop app settings choose *Link a mobile* - it will show a QR code.
 
diff --git a/blog/20240604-simplex-chat-v5.8-private-message-routing-chat-themes.md b/blog/20240604-simplex-chat-v5.8-private-message-routing-chat-themes.md
index e06f7c2084..9bd342a146 100644
--- a/blog/20240604-simplex-chat-v5.8-private-message-routing-chat-themes.md
+++ b/blog/20240604-simplex-chat-v5.8-private-message-routing-chat-themes.md
@@ -110,7 +110,7 @@ We [wrote previously](https://github.com/simplex-chat/simplexmq/blob/master/rfcs
 
 While we cannot require the operators of self-hosted and private servers to disclose any information about them (apart from which server code they use - this is the requirement of the AGPLv3 license to share this information with users connecting to the server), as we add other server operators to the app, it is important for the users to have all important information about these operators and servers location.
 
-This server release adds server information page where all this information can be made available to the users. For example, this is <a href="https://smp8.simplex.im" target="_blank">the information</a> about one of the servers preset in the app.
+This server release adds server information page where all this information can be made available to the users. For example, this is <a href="https://smp8.simplex.im" target="_blank" rel="noopener">the information</a> about one of the servers preset in the app.
 
 The updated server guide also includes [the instruction](../docs/SERVER.md#) about how to host this page for your server. It is generated as a static page when the server starts. We recommend using Caddy webserver to serve it.
 
diff --git a/blog/20260919-simplex-supporter-badges.md b/blog/20260919-simplex-supporter-badges.md
index 7aa2b2e4ac..50e2ebcb4b 100644
--- a/blog/20260919-simplex-supporter-badges.md
+++ b/blog/20260919-simplex-supporter-badges.md
@@ -11,7 +11,7 @@ permalink: "/blog/20260919-simplex-supporter-badges.html"
 
 **Published:** Sep 19, 2026
 
-You can now support SimpleX Chat and get a supporter badge, larger files and longer file storage &mdash; from v7.1 beta[^beta]. Watch <a href="https://youtu.be/7D1tI5sQWFU" target="_blank">how to buy a badge</a>.
+You can now support SimpleX Chat and get a supporter badge, larger files and longer file storage &mdash; from v7.1 beta[^beta]. Watch <a href="https://youtu.be/7D1tI5sQWFU" target="_blank" rel="noopener">how to buy a badge</a>.
 
 ## A paid feature that cannot identify you
 
@@ -28,7 +28,7 @@ Read more about badges in the [whitepaper](https://github.com/simplex-chat/simpl
 
 ## How to get a badge
 
-<a href="https://youtu.be/7D1tI5sQWFU" target="_blank"><img src="./images/20260919-buy-badge.jpg" width="40%" class="float-to-right"></a>
+<a href="https://youtu.be/7D1tI5sQWFU" target="_blank" rel="noopener"><img src="./images/20260919-buy-badge.jpg" width="40%" class="float-to-right"></a>
 
 Buy a code on [simplex.chat/badges](https://simplex.chat/badges/), paying by card, Bitcoin or Monero, and redeem it in the app: open Settings, tap **Supporter perks**, and enter the code. The badge appears on your profile. The badge does not renew by itself, and no account is created.
 
diff --git a/bots/src/API/Docs/Events.hs b/bots/src/API/Docs/Events.hs
index 48f307f6e4..e310fd54ef 100644
--- a/bots/src/API/Docs/Events.hs
+++ b/bots/src/API/Docs/Events.hs
@@ -203,6 +203,7 @@ undocumentedEvents =
     "CEvtContactRequestRejected",
     "CEvtContactSwitch",
     "CEvtCustomChatEvent",
+    "CEvtDuplicateGroupMessage",
     "CEvtGroupMemberRatchetSync",
     "CEvtGroupMemberSwitch",
     "CEvtServiceSubStatus",
diff --git a/docs/DOWNLOADS.md b/docs/DOWNLOADS.md
index 95cf972c0d..92c0dac545 100644
--- a/docs/DOWNLOADS.md
+++ b/docs/DOWNLOADS.md
@@ -1,11 +1,12 @@
 ---
 title: Download SimpleX apps
-permalink: /downloads/index.html
 revision: 09.09.2024
 ---
 
 # Download SimpleX apps
 
+Download the app for your platform: https://simplex.chat/downloads/
+
 You can get the latest beta releases from [GitHub](https://github.com/simplex-chat/simplex-chat/releases).
 
 If you cannot access GitHub, you can download SimpleX Chat apps from our mirror at [git.simplex.chat](https://git.simplex.chat/simplex-chat/simplex-chat/releases)
diff --git a/docs/JOIN_TEAM.md b/docs/JOIN_TEAM.md
index edf3ba199b..44e99a42a9 100644
--- a/docs/JOIN_TEAM.md
+++ b/docs/JOIN_TEAM.md
@@ -49,6 +49,6 @@ This is a part-time remote contract. You must be in UTC +/- 8 hours timezone.
 
 ## How to join the team
 
-To apply, please [install SimpleX Chat app](./DOWNLOADS.md) and send your achievements to this [SimpleX address](https://smp16.simplex.im/a#OGL3qf7utOrUERFoFOROgdQaAkj_znzoeACNKDAsFNA).
+To apply, please [install SimpleX Chat app](https://simplex.chat/downloads/) and send your achievements to this [SimpleX address](https://smp16.simplex.im/a#OGL3qf7utOrUERFoFOROgdQaAkj_znzoeACNKDAsFNA).
 
 **We do NOT review CVs at the initial stage, please only send the links to your achievements**.
diff --git a/packages/simplex-chat-nodejs/.gitignore b/packages/simplex-chat-nodejs/.gitignore
index 322e38bfda..4fa6477e38 100644
--- a/packages/simplex-chat-nodejs/.gitignore
+++ b/packages/simplex-chat-nodejs/.gitignore
@@ -2,7 +2,7 @@ node_modules/
 package-lock.json
 .vscode
 build/
-libs/
 dist/
 coverage/
 tmp/
+libs/
diff --git a/packages/simplex-chat-nodejs/.npmignore b/packages/simplex-chat-nodejs/.npmignore
index 26fdd85dff..3e2e84b087 100644
--- a/packages/simplex-chat-nodejs/.npmignore
+++ b/packages/simplex-chat-nodejs/.npmignore
@@ -1,3 +1,2 @@
-libs/
 build/
 node_modules/
diff --git a/packages/simplex-chat-nodejs/README.md b/packages/simplex-chat-nodejs/README.md
index 05c99eca5c..6ccd26fc05 100644
--- a/packages/simplex-chat-nodejs/README.md
+++ b/packages/simplex-chat-nodejs/README.md
@@ -55,40 +55,38 @@ If you cloned this repository, you can:
 cd ./packages/simplex-chat-nodejs
 npm install
 npm run build
-node ./examples/squaring-bot-readme.js
+SIMPLEX_ADDON_PATH=build/Release/simplex.node node ./examples/squaring-bot-readme.js
 ```
 
+Building the Node.js add-on from source needs [node-gyp](https://github.com/nodejs/node-gyp) build tools.
+
 There is an example with more options in [./examples/squaring-bot.ts](./examples/squaring-bot.ts).
 
 You can run it with: `npx ts-node ./examples/squaring-bot.ts`
 
 A larger example, with a business address and commands as keys: [SimpleX Calculator](../../apps/simplex-calculator-bot/).
 
-## PostgreSQL backend
+## Native library
 
-By default, the package uses SQLite. To use PostgreSQL instead:
+`libsimplex` and the prebuilt Node.js add-on are downloaded on first use into the user cache (`$XDG_CACHE_HOME/simplex-chat` or `~/.cache/simplex-chat` on Linux, `~/Library/Caches/simplex-chat` on macOS, `%LOCALAPPDATA%\simplex-chat` on Windows), shared with the Python library. To download them ahead of time, for example in a Dockerfile, run as the user that runs the app:
 
 ```bash
-npm install simplex-chat --simplex_backend=postgres
+npx simplex-chat install                     # sqlite (default)
+npx simplex-chat install --backend postgres  # Linux x86_64 only
 ```
 
-Or persist the setting in `.npmrc`:
+Set `SIMPLEX_LIBS_DIR` to a directory with a local build of `libsimplex` and its dependencies to use it instead; it must be built for the backend in use. Set `SIMPLEX_ADDON_PATH` to a locally built add-on (`build/Release/simplex.node`) to use it instead of the downloaded one.
 
-```ini
-simplex_backend=postgres
-```
+`ChatApi.init` loads the library for `DbConfig.type`; the low-level `core` functions require `core.loadLibrary(backend)` first.
 
-### Prerequisites (PostgreSQL)
+## PostgreSQL backend
+
+`DbConfig.type` selects the backend; one backend per process.
 
 - `libpq5` must be installed on the host system (`apt install libpq5` on Debian/Ubuntu)
 - PostgreSQL backend is only available for Linux x86_64
 - A PostgreSQL server accessible via connection string
 
-### Passing PostgreSQL connection
-
-The `DbConfig` type is a discriminated union — pick the variant that matches
-the backend you installed:
-
 ```ts
 // SQLite (default)
 dbOpts: {type: "sqlite", filePrefix: "./data/bot"}
diff --git a/packages/simplex-chat-nodejs/binding.gyp b/packages/simplex-chat-nodejs/binding.gyp
index cfa6d61039..de6dbfbfd4 100644
--- a/packages/simplex-chat-nodejs/binding.gyp
+++ b/packages/simplex-chat-nodejs/binding.gyp
@@ -15,36 +15,8 @@
       "msvs_settings": { "VCCLCompilerTool": { "ExceptionHandling": 1 } },
       "defines": [ "NAPI_DISABLE_CPP_EXCEPTIONS" ],
       "conditions": [
-        ["OS=='mac'", {
-          "libraries": [
-            "-L<(module_root_dir)/libs",
-            "-lsimplex"
-          ],
-          "xcode_settings": {
-            "OTHER_LDFLAGS": [
-              "-Wl,-rpath,@loader_path/../../libs"
-            ]
-          }
-        }],
         ["OS=='linux'", {
-          "libraries": [
-            "-L<(module_root_dir)/libs",
-            "-lsimplex"
-          ],
-          "ldflags": [
-            "-Wl,-rpath,'$$ORIGIN'/../../libs"
-          ]
-        }],
-        ["OS=='win'", {
-          "libraries": [
-            "<(module_root_dir)/libs/libsimplex.lib"
-          ],
-          "copies": [{
-            "destination": "<(PRODUCT_DIR)",
-            "files": [
-              "<(module_root_dir)/libs/*"
-            ]
-          }]
+          "libraries": [ "-ldl" ]
         }]
       ]
     }
diff --git a/packages/simplex-chat-nodejs/cpp/simplex.cc b/packages/simplex-chat-nodejs/cpp/simplex.cc
index bcca2b994a..6cc2172ee1 100644
--- a/packages/simplex-chat-nodejs/cpp/simplex.cc
+++ b/packages/simplex-chat-nodejs/cpp/simplex.cc
@@ -8,15 +8,102 @@
 #include <thread>
 #include <system_error>
 #include <mutex>
+#include <atomic>
 #include <condition_variable>
 #include <deque>
 #include <unordered_map>
+#ifdef _WIN32
+#include <windows.h>
+#else
+#include <dlfcn.h>
+#endif
 #include "simplex.h"
 
 namespace simplex {
 
 using namespace Napi;
 
+struct Library {
+  std::string path;
+  hs_init_with_rtsopts_fn hs_init_with_rtsopts = nullptr;
+  hs_thread_done_fn hs_thread_done = nullptr;
+  chat_migrate_init_fn chat_migrate_init = nullptr;
+  chat_migrate_init_queue_fn chat_migrate_init_queue = nullptr;
+  chat_close_store_fn chat_close_store = nullptr;
+  chat_send_cmd_fn chat_send_cmd = nullptr;
+  chat_recv_msg_wait_fn chat_recv_msg_wait = nullptr;
+  chat_write_file_fn chat_write_file = nullptr;
+  chat_read_file_fn chat_read_file = nullptr;
+  chat_encrypt_file_fn chat_encrypt_file = nullptr;
+  chat_decrypt_file_fn chat_decrypt_file = nullptr;
+};
+
+static Library lib;
+static std::atomic<bool> loaded{false};
+static std::mutex load_mutex;
+
+#ifdef _WIN32
+typedef HMODULE LibHandle;
+
+static LibHandle OpenLibrary(const std::string& path) {
+  int n = MultiByteToWideChar(CP_UTF8, 0, path.c_str(), -1, nullptr, 0);
+  std::wstring wpath(n, L'\0');
+  MultiByteToWideChar(CP_UTF8, 0, path.c_str(), -1, &wpath[0], n);
+  // dependencies resolve from the libsimplex.dll, application and system dirs, not the cwd or PATH
+  return LoadLibraryExW(wpath.c_str(), nullptr, LOAD_LIBRARY_SEARCH_DLL_LOAD_DIR | LOAD_LIBRARY_SEARCH_DEFAULT_DIRS);
+}
+
+static void CloseLibrary(LibHandle h) {
+  FreeLibrary(h);
+}
+
+static void* FindSymbol(LibHandle h, const char* name) {
+  return reinterpret_cast<void*>(GetProcAddress(h, name));
+}
+
+static std::string LastLoadError() {
+  DWORD code = GetLastError();
+  char* msg = nullptr;
+  FormatMessageA(FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS,
+                 nullptr, code, 0, reinterpret_cast<LPSTR>(&msg), 0, nullptr);
+  std::string err = msg ? msg : "error " + std::to_string(code);
+  LocalFree(msg);
+  // system messages end with CRLF
+  err.erase(err.find_last_not_of("\r\n") + 1);
+  return err;
+}
+#else
+typedef void* LibHandle;
+
+static LibHandle OpenLibrary(const std::string& path) {
+  return dlopen(path.c_str(), RTLD_NOW | RTLD_LOCAL);
+}
+
+static void CloseLibrary(LibHandle h) {
+  dlclose(h);
+}
+
+static void* FindSymbol(LibHandle h, const char* name) {
+  return dlsym(h, name);
+}
+
+static std::string LastLoadError() {
+  const char* err = dlerror();
+  return err ? err : "unknown error";
+}
+#endif
+
+template <typename F>
+static void Resolve(LibHandle h, const char* name, F& fn) {
+  fn = reinterpret_cast<F>(FindSymbol(h, name));
+}
+
+template <typename F>
+static void ResolveRequired(LibHandle h, const char* name, F& fn, std::string& missing) {
+  Resolve(h, name, fn);
+  if (fn == nullptr && missing.empty()) missing = name;
+}
+
 void haskell_init() {
 #ifdef _WIN32
   // non-moving GC is broken on windows with GHC 9.4-9.6.3
@@ -40,7 +127,57 @@ void haskell_init() {
       nullptr};
 #endif
   char **pargv = const_cast<char **>(argv);
-  hs_init_with_rtsopts(&argc, &pargv);
+  lib.hs_init_with_rtsopts(&argc, &pargv);
+}
+
+static bool RequireLoaded(Env env) {
+  if (loaded) return true;
+  Error::New(env, "libsimplex is not loaded, call core.loadLibrary(backend) first").ThrowAsJavaScriptException();
+  return false;
+}
+
+Value Load(const CallbackInfo& args) {
+  Env env = args.Env();
+  if (args.Length() < 1 || !args[0].IsString()) {
+    TypeError::New(env, "Expected string (libPath)").ThrowAsJavaScriptException();
+    return env.Undefined();
+  }
+  std::string path = args[0].As<String>().Utf8Value();
+  // worker_threads may load concurrently; the Haskell runtime must be initialized once per process
+  std::lock_guard<std::mutex> lock(load_mutex);
+  if (loaded) {
+    if (path != lib.path) Error::New(env, "libsimplex already loaded from " + lib.path).ThrowAsJavaScriptException();
+    return env.Undefined();
+  }
+  LibHandle h = OpenLibrary(path);
+  if (h == nullptr) {
+    std::string err = LastLoadError();
+    Error::New(env, "cannot load " + path + ": " + err).ThrowAsJavaScriptException();
+    return env.Undefined();
+  }
+  Library l;
+  l.path = path;
+  std::string missing;
+  ResolveRequired(h, "hs_init_with_rtsopts", l.hs_init_with_rtsopts, missing);
+  ResolveRequired(h, "chat_migrate_init", l.chat_migrate_init, missing);
+  ResolveRequired(h, "chat_close_store", l.chat_close_store, missing);
+  ResolveRequired(h, "chat_send_cmd", l.chat_send_cmd, missing);
+  ResolveRequired(h, "chat_recv_msg_wait", l.chat_recv_msg_wait, missing);
+  ResolveRequired(h, "chat_write_file", l.chat_write_file, missing);
+  ResolveRequired(h, "chat_read_file", l.chat_read_file, missing);
+  ResolveRequired(h, "chat_encrypt_file", l.chat_encrypt_file, missing);
+  ResolveRequired(h, "chat_decrypt_file", l.chat_decrypt_file, missing);
+  if (!missing.empty()) {
+    CloseLibrary(h);
+    Error::New(env, path + " does not export " + missing).ThrowAsJavaScriptException();
+    return env.Undefined();
+  }
+  Resolve(h, "chat_migrate_init_queue", l.chat_migrate_init_queue);
+  Resolve(h, "hs_thread_done", l.hs_thread_done);
+  lib = l;
+  haskell_init();
+  loaded = true;
+  return env.Undefined();
 }
 
 class ResultAsyncWorker : public AsyncWorker {
@@ -287,7 +424,7 @@ class Receiver {
         request = std::move(queue_.front());
         queue_.pop_front();
       }
-      char* c_res = chat_recv_msg_wait(ctrl_, request.wait);
+      char* c_res = lib.chat_recv_msg_wait(ctrl_, request.wait);
       napi_status status = Settle(request.deferred, [c_res](Napi::Env env, Promise::Deferred& deferred) {
         if (c_res == nullptr) {
           deferred.Reject(Error::New(env, "chat_recv_msg_wait failed").Value());
@@ -312,7 +449,7 @@ class Receiver {
     }
     pending_->Tsfn().Release();
     // Each OS thread that enters Haskell keeps an RTS task record until it calls hs_thread_done.
-    hs_thread_done();
+    if (lib.hs_thread_done) lib.hs_thread_done();
   }
 
   template <typename SettleFn>
@@ -361,6 +498,7 @@ ResultAsyncWorker::ResultProcessor MigrateResultProcessor() {
 
 Value ChatMigrateInit(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
   if (args.Length() < 3 || !args[0].IsString() || !args[1].IsString() || !args[2].IsString()) {
     TypeError::New(env, "Expected three string arguments").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -375,7 +513,7 @@ Value ChatMigrateInit(const CallbackInfo& args) {
 
   auto execute_fn = [path, key, confirm](ResultAsyncWorker* worker) {
     chat_ctrl ctrl = nullptr;
-    char* c_res = chat_migrate_init(path.c_str(), key.c_str(), confirm.c_str(), &ctrl);
+    char* c_res = lib.chat_migrate_init(path.c_str(), key.c_str(), confirm.c_str(), &ctrl);
     worker->SetCtrl(reinterpret_cast<uintptr_t>(ctrl));
     HandleCResult(worker, c_res, "chat_migrate_init");
   };
@@ -388,6 +526,11 @@ Value ChatMigrateInit(const CallbackInfo& args) {
 
 Value ChatMigrateInitQueue(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
+  if (lib.chat_migrate_init_queue == nullptr) {
+    Error::New(env, "loaded libsimplex does not export chat_migrate_init_queue; queue size needs a newer libsimplex").ThrowAsJavaScriptException();
+    return env.Undefined();
+  }
   if (args.Length() < 4 || !args[0].IsString() || !args[1].IsString() || !args[2].IsString() || !args[3].IsNumber()) {
     TypeError::New(env, "Expected three string arguments and number").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -408,7 +551,7 @@ Value ChatMigrateInitQueue(const CallbackInfo& args) {
 
   auto execute_fn = [path, key, confirm, queue_size](ResultAsyncWorker* worker) {
     chat_ctrl ctrl = nullptr;
-    char* c_res = chat_migrate_init_queue(path.c_str(), key.c_str(), confirm.c_str(), queue_size, &ctrl);
+    char* c_res = lib.chat_migrate_init_queue(path.c_str(), key.c_str(), confirm.c_str(), queue_size, &ctrl);
     worker->SetCtrl(reinterpret_cast<uintptr_t>(ctrl));
     HandleCResult(worker, c_res, "chat_migrate_init_queue");
   };
@@ -421,6 +564,7 @@ Value ChatMigrateInitQueue(const CallbackInfo& args) {
 
 Value ChatCloseStore(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
   if (args.Length() < 1 || !args[0].IsBigInt()) {
     TypeError::New(env, "Expected bigint (ctrl)").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -436,7 +580,7 @@ Value ChatCloseStore(const CallbackInfo& args) {
     if (receiver) {
       receiver->Stop();
     }
-    char* c_res = chat_close_store(ctrl);
+    char* c_res = lib.chat_close_store(ctrl);
     HandleCResult(worker, c_res, "chat_close_store");
   };
 
@@ -448,6 +592,7 @@ Value ChatCloseStore(const CallbackInfo& args) {
 
 Value ChatSendCmd(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
   if (args.Length() < 2 || !args[0].IsBigInt() || !args[1].IsString()) {
     TypeError::New(env, "Expected bigint (ctrl) and string (cmd)").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -460,7 +605,7 @@ Value ChatSendCmd(const CallbackInfo& args) {
   Promise promise = CreatePromiseAndCallback(env, cb);
 
   auto execute_fn = [ctrl, cmd](ResultAsyncWorker* worker) {
-    char* c_res = chat_send_cmd(ctrl, cmd.c_str());
+    char* c_res = lib.chat_send_cmd(ctrl, cmd.c_str());
     HandleCResult(worker, c_res, "chat_send_cmd");
   };
 
@@ -472,6 +617,7 @@ Value ChatSendCmd(const CallbackInfo& args) {
 
 Value ChatRecvMsgWait(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
   if (args.Length() < 2 || !args[0].IsBigInt() || !args[1].IsNumber()) {
     TypeError::New(env, "Expected bigint (ctrl), number (wait)").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -503,6 +649,7 @@ Value ChatRecvMsgWait(const CallbackInfo& args) {
 
 Value ChatWriteFile(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
   if (args.Length() < 3 || !args[0].IsBigInt() || !args[1].IsString() || !(args[2].IsArrayBuffer() || args[2].IsTypedArray())) {
     TypeError::New(env, "Expected bigint (ctrl), string (path), ArrayBuffer or Uint8Array").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -530,7 +677,7 @@ Value ChatWriteFile(const CallbackInfo& args) {
   Promise promise = CreatePromiseAndCallback(env, cb);
 
   auto execute_fn = [ctrl, path, data, len](ResultAsyncWorker* worker) {
-    char* c_res = chat_write_file(ctrl, path.c_str(), data, static_cast<int>(len));
+    char* c_res = lib.chat_write_file(ctrl, path.c_str(), data, static_cast<int>(len));
     HandleCResult(worker, c_res, "chat_write_file");
   };
 
@@ -543,6 +690,7 @@ Value ChatWriteFile(const CallbackInfo& args) {
 
 Value ChatReadFile(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
   if (args.Length() < 3 || !args[0].IsString() || !args[1].IsString() || !args[2].IsString()) {
     TypeError::New(env, "Expected three strings (path, key, nonce)").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -556,7 +704,7 @@ Value ChatReadFile(const CallbackInfo& args) {
   Promise promise = CreatePromiseAndCallback(env, cb);
 
   auto execute_fn = [path, key, nonce](BinaryAsyncWorker* worker) {
-    char* buf = chat_read_file(path.c_str(), key.c_str(), nonce.c_str());
+    char* buf = lib.chat_read_file(path.c_str(), key.c_str(), nonce.c_str());
     if (buf == nullptr) {
       worker->SetWorkerError("chat_read_file failed");
       return;
@@ -586,6 +734,7 @@ Value ChatReadFile(const CallbackInfo& args) {
 
 Value ChatEncryptFile(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
   if (args.Length() < 3 || !args[0].IsBigInt() || !args[1].IsString() || !args[2].IsString()) {
     TypeError::New(env, "Expected bigint (ctrl), two strings (fromPath, toPath)").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -599,7 +748,7 @@ Value ChatEncryptFile(const CallbackInfo& args) {
   Promise promise = CreatePromiseAndCallback(env, cb);
 
   auto execute_fn = [ctrl, fromPath, toPath](ResultAsyncWorker* worker) {
-    char* c_res = chat_encrypt_file(ctrl, fromPath.c_str(), toPath.c_str());
+    char* c_res = lib.chat_encrypt_file(ctrl, fromPath.c_str(), toPath.c_str());
     HandleCResult(worker, c_res, "chat_encrypt_file");
   };
 
@@ -611,6 +760,7 @@ Value ChatEncryptFile(const CallbackInfo& args) {
 
 Value ChatDecryptFile(const CallbackInfo& args) {
   Env env = args.Env();
+  if (!RequireLoaded(env)) return env.Undefined();
   if (args.Length() < 4 || !args[0].IsString() || !args[1].IsString() || !args[2].IsString() || !args[3].IsString()) {
     TypeError::New(env, "Expected four strings (fromPath, key, nonce, toPath)").ThrowAsJavaScriptException();
     return env.Undefined();
@@ -625,7 +775,7 @@ Value ChatDecryptFile(const CallbackInfo& args) {
   Promise promise = CreatePromiseAndCallback(env, cb);
 
   auto execute_fn = [fromPath, key, nonce, toPath](ResultAsyncWorker* worker) {
-    char* c_res = chat_decrypt_file(fromPath.c_str(), key.c_str(), nonce.c_str(), toPath.c_str());
+    char* c_res = lib.chat_decrypt_file(fromPath.c_str(), key.c_str(), nonce.c_str(), toPath.c_str());
     HandleCResult(worker, c_res, "chat_decrypt_file");
   };
 
@@ -636,7 +786,7 @@ Value ChatDecryptFile(const CallbackInfo& args) {
 }
 
 Object Init(Env env, Object exports) {
-  haskell_init();
+  exports.Set("load", Function::New(env, Load));
   auto* receivers = new Receivers();
   // Stopping all receivers before joining any bounds teardown by the longest in-flight receive.
   env.AddCleanupHook([receivers]() {
diff --git a/packages/simplex-chat-nodejs/cpp/simplex.h b/packages/simplex-chat-nodejs/cpp/simplex.h
index ddc052946a..7c44313295 100644
--- a/packages/simplex-chat-nodejs/cpp/simplex.h
+++ b/packages/simplex-chat-nodejs/cpp/simplex.h
@@ -9,40 +9,30 @@
 #ifndef SimpleX_h
 #define SimpleX_h
 
-extern "C" void hs_init(int argc, char **argv[]);
-extern "C" void hs_init_with_rtsopts(int * argc, char **argv[]);
-extern "C" void hs_thread_done(void);
-
 typedef long* chat_ctrl;
 
+typedef void (*hs_init_with_rtsopts_fn)(int *argc, char **argv[]);
+typedef void (*hs_thread_done_fn)(void);
 // the last parameter is used to return the pointer to chat controller
-extern "C" char *chat_migrate_init(const char *path, const char *key, const char *confirm, chat_ctrl *ctrl);
-extern "C" char *chat_migrate_init_queue(const char *path, const char *key, const char *confirm, const int queueSize, chat_ctrl *ctrl);
-extern "C" char *chat_close_store(chat_ctrl ctrl);
-extern "C" char *chat_reopen_store(chat_ctrl ctrl);
-extern "C" char *chat_send_cmd(chat_ctrl ctrl, const char *cmd);
-extern "C" char *chat_recv_msg_wait(chat_ctrl ctrl, const int wait);
-extern "C" char *chat_parse_markdown(const char *str);
-extern "C" char *chat_parse_server(const char *str);
-extern "C" char *chat_password_hash(const char *pwd, const char *salt);
-extern "C" char *chat_valid_name(const char *name);
-extern "C" int chat_json_length(const char *str);
-extern "C" char *chat_encrypt_media(chat_ctrl ctrl, const char *key, const char *frame, const int len);
-extern "C" char *chat_decrypt_media(const char *key, const char *frame, const int len);
+typedef char *(*chat_migrate_init_fn)(const char *path, const char *key, const char *confirm, chat_ctrl *ctrl);
+typedef char *(*chat_migrate_init_queue_fn)(const char *path, const char *key, const char *confirm, int queueSize, chat_ctrl *ctrl);
+typedef char *(*chat_close_store_fn)(chat_ctrl ctrl);
+typedef char *(*chat_send_cmd_fn)(chat_ctrl ctrl, const char *cmd);
+typedef char *(*chat_recv_msg_wait_fn)(chat_ctrl ctrl, int wait);
 
 // chat_write_file returns null-terminated string with JSON of WriteFileResult
-extern "C" char *chat_write_file(chat_ctrl ctrl, const char *path, const char *data, const int len);
+typedef char *(*chat_write_file_fn)(chat_ctrl ctrl, const char *path, const char *data, int len);
 
 // chat_read_file returns a buffer with:
 // result status (1 byte), then if
 //   status == 0 (success): buffer length (uint32, 4 bytes), buffer of specified length.
 //   status == 1 (error): null-terminated error message string.
-extern "C" char *chat_read_file(const char *path, const char *key, const char *nonce);
+typedef char *(*chat_read_file_fn)(const char *path, const char *key, const char *nonce);
 
 // chat_encrypt_file returns null-terminated string with JSON of WriteFileResult
-extern "C" char *chat_encrypt_file(chat_ctrl ctrl, const char *fromPath, const char *toPath);
+typedef char *(*chat_encrypt_file_fn)(chat_ctrl ctrl, const char *fromPath, const char *toPath);
 
 // chat_decrypt_file returns null-terminated string with the error message
-extern "C" char *chat_decrypt_file(const char *fromPath, const char *key, const char *nonce, const char *toPath);
+typedef char *(*chat_decrypt_file_fn)(const char *fromPath, const char *key, const char *nonce, const char *toPath);
 
 #endif /* simplex_h */
\ No newline at end of file
diff --git a/packages/simplex-chat-nodejs/docs/Namespace.core.md b/packages/simplex-chat-nodejs/docs/Namespace.core.md
index 82b0d9ffba..fdf9f8b4dd 100644
--- a/packages/simplex-chat-nodejs/docs/Namespace.core.md
+++ b/packages/simplex-chat-nodejs/docs/Namespace.core.md
@@ -32,6 +32,7 @@ You are unlikely to ever need to use this module directly.
 
 ## Type Aliases
 
+- [Backend](core.TypeAlias.Backend.md)
 - [DBMigrationError](core.TypeAlias.DBMigrationError.md)
 - [MigrationError](core.TypeAlias.MigrationError.md)
 - [MTRError](core.TypeAlias.MTRError.md)
@@ -46,3 +47,4 @@ You are unlikely to ever need to use this module directly.
 - [chatRecvMsgWait](core.Function.chatRecvMsgWait.md)
 - [chatSendCmd](core.Function.chatSendCmd.md)
 - [chatWriteFile](core.Function.chatWriteFile.md)
+- [loadLibrary](core.Function.loadLibrary.md)
diff --git a/packages/simplex-chat-nodejs/docs/api.Class.ChatApi.md b/packages/simplex-chat-nodejs/docs/api.Class.ChatApi.md
index 287099906b..cf293f55d9 100644
--- a/packages/simplex-chat-nodejs/docs/api.Class.ChatApi.md
+++ b/packages/simplex-chat-nodejs/docs/api.Class.ChatApi.md
@@ -6,7 +6,7 @@
 
 # Class: ChatApi
 
-Defined in: [src/api.ts:97](../src/api.ts#L97)
+Defined in: [src/api.ts:95](../src/api.ts#L95)
 
 Main API class for interacting with the chat core library.
 
@@ -16,7 +16,7 @@ Main API class for interacting with the chat core library.
 
 > `protected` **ctrl\_**: `bigint` \| `undefined`
 
-Defined in: [src/api.ts:103](../src/api.ts#L103)
+Defined in: [src/api.ts:101](../src/api.ts#L101)
 
 ## Accessors
 
@@ -26,7 +26,7 @@ Defined in: [src/api.ts:103](../src/api.ts#L103)
 
 > **get** **ctrl**(): `bigint`
 
-Defined in: [src/api.ts:344](../src/api.ts#L344)
+Defined in: [src/api.ts:343](../src/api.ts#L343)
 
 Chat controller reference
 
@@ -42,7 +42,7 @@ Chat controller reference
 
 > **get** **initialized**(): `boolean`
 
-Defined in: [src/api.ts:330](../src/api.ts#L330)
+Defined in: [src/api.ts:329](../src/api.ts#L329)
 
 Chat controller is initialized
 
@@ -58,7 +58,7 @@ Chat controller is initialized
 
 > **get** **started**(): `boolean`
 
-Defined in: [src/api.ts:337](../src/api.ts#L337)
+Defined in: [src/api.ts:336](../src/api.ts#L336)
 
 Chat controller is started
 
@@ -72,7 +72,7 @@ Chat controller is started
 
 > **apiAcceptContactRequest**(`contactReqId`): `Promise`\<`Contact`\>
 
-Defined in: [src/api.ts:750](../src/api.ts#L750)
+Defined in: [src/api.ts:770](../src/api.ts#L770)
 
 Accept contact request.
 Network usage: interactive.
@@ -93,7 +93,7 @@ Network usage: interactive.
 
 > **apiAcceptMember**(`groupId`, `groupMemberId`, `memberRole`): `Promise`\<`GroupMember`\>
 
-Defined in: [src/api.ts:570](../src/api.ts#L570)
+Defined in: [src/api.ts:590](../src/api.ts#L590)
 
 Accept group member. Requires Admin role.
 Network usage: background.
@@ -122,7 +122,7 @@ Network usage: background.
 
 > **apiAddMember**(`groupId`, `contactId`, `memberRole`): `Promise`\<`GroupMember`\>
 
-Defined in: [src/api.ts:550](../src/api.ts#L550)
+Defined in: [src/api.ts:560](../src/api.ts#L560)
 
 Add contact to group. Requires bot to have Admin role.
 Network usage: interactive.
@@ -147,11 +147,44 @@ Network usage: interactive.
 
 ***
 
+### apiAddMemberViaGroup()
+
+> **apiAddMemberViaGroup**(`groupId`, `viaGroupId`, `groupMemberId`, `memberRole`): `Promise`\<`GroupMember`\>
+
+Defined in: [src/api.ts:570](../src/api.ts#L570)
+
+Add member of another group to group. Requires bot to have Admin role in the group, and direct messages allowed for its role in another group.
+Network usage: interactive.
+
+#### Parameters
+
+##### groupId
+
+`number`
+
+##### viaGroupId
+
+`number`
+
+##### groupMemberId
+
+`number`
+
+##### memberRole
+
+`GroupMemberRole`
+
+#### Returns
+
+`Promise`\<`GroupMember`\>
+
+***
+
 ### apiBlockMembersForAll()
 
 > **apiBlockMembersForAll**(`groupId`, `groupMemberIds`, `blocked`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:590](../src/api.ts#L590)
+Defined in: [src/api.ts:610](../src/api.ts#L610)
 
 Block members. Requires Moderator role.
 Network usage: background.
@@ -180,7 +213,7 @@ Network usage: background.
 
 > **apiCancelFile**(`fileId`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:540](../src/api.ts#L540)
+Defined in: [src/api.ts:550](../src/api.ts#L550)
 
 Cancel file.
 Network usage: background.
@@ -201,7 +234,7 @@ Network usage: background.
 
 > **apiChatItemReaction**(`chatType`, `chatId`, `chatItemId`, `add`, `reaction`): `Promise`\<`ACIReaction`\>
 
-Defined in: [src/api.ts:513](../src/api.ts#L513)
+Defined in: [src/api.ts:523](../src/api.ts#L523)
 
 Add/remove message reaction.
 Network usage: background.
@@ -238,7 +271,7 @@ Network usage: background.
 
 > **apiConnect**(`userId`, `incognito`, `preparedLink`): `Promise`\<[`ConnReqType`](api.Enumeration.ConnReqType.md)\>
 
-Defined in: [src/api.ts:719](../src/api.ts#L719)
+Defined in: [src/api.ts:739](../src/api.ts#L739)
 
 Connect via prepared SimpleX link. The link can be 1-time invitation link, contact address or group link
 Network usage: interactive.
@@ -267,7 +300,7 @@ Network usage: interactive.
 
 > **apiConnectActiveUser**(`connLink`): `Promise`\<[`ConnReqType`](api.Enumeration.ConnReqType.md)\>
 
-Defined in: [src/api.ts:728](../src/api.ts#L728)
+Defined in: [src/api.ts:748](../src/api.ts#L748)
 
 Connect via SimpleX link as string in the active user profile.
 Network usage: interactive.
@@ -288,7 +321,7 @@ Network usage: interactive.
 
 > **apiConnectPlan**(`userId`, `connectionLink`): `Promise`\<\[`ConnectionPlan`, `CreatedConnLink`\]\>
 
-Defined in: [src/api.ts:709](../src/api.ts#L709)
+Defined in: [src/api.ts:729](../src/api.ts#L729)
 
 Determine SimpleX link type and if the bot is already connected via this link.
 Network usage: interactive.
@@ -313,7 +346,7 @@ Network usage: interactive.
 
 > **apiCreateActiveUser**(`profile?`): `Promise`\<`User`\>
 
-Defined in: [src/api.ts:887](../src/api.ts#L887)
+Defined in: [src/api.ts:907](../src/api.ts#L907)
 
 Create new user profile
 Network usage: no.
@@ -334,7 +367,7 @@ Network usage: no.
 
 > **apiCreateGroupLink**(`groupId`, `memberRole`): `Promise`\<`string`\>
 
-Defined in: [src/api.ts:650](../src/api.ts#L650)
+Defined in: [src/api.ts:670](../src/api.ts#L670)
 
 Create group link.
 Network usage: interactive.
@@ -359,7 +392,7 @@ Network usage: interactive.
 
 > **apiCreateLink**(`userId`): `Promise`\<`string`\>
 
-Defined in: [src/api.ts:696](../src/api.ts#L696)
+Defined in: [src/api.ts:716](../src/api.ts#L716)
 
 Create 1-time invitation link.
 Network usage: interactive.
@@ -380,7 +413,7 @@ Network usage: interactive.
 
 > **apiCreateMemberContact**(`groupId`, `groupMemberId`): `Promise`\<`Contact`\>
 
-Defined in: [src/api.ts:953](../src/api.ts#L953)
+Defined in: [src/api.ts:973](../src/api.ts#L973)
 
 Create a direct message contact with a group member.
 Returns the created contact.
@@ -406,7 +439,7 @@ Network usage: interactive.
 
 > **apiCreateUserAddress**(`userId`): `Promise`\<`CreatedConnLink`\>
 
-Defined in: [src/api.ts:361](../src/api.ts#L361)
+Defined in: [src/api.ts:360](../src/api.ts#L360)
 
 Create bot address.
 Network usage: interactive.
@@ -427,7 +460,7 @@ Network usage: interactive.
 
 > **apiDeleteChat**(`chatType`, `chatId`, `deleteMode?`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:809](../src/api.ts#L809)
+Defined in: [src/api.ts:829](../src/api.ts#L829)
 
 Delete chat.
 Network usage: background.
@@ -456,7 +489,7 @@ Network usage: background.
 
 > **apiDeleteChatItems**(`chatType`, `chatId`, `chatItemIds`, `deleteMode`): `Promise`\<`ChatItemDeletion`[]\>
 
-Defined in: [src/api.ts:488](../src/api.ts#L488)
+Defined in: [src/api.ts:498](../src/api.ts#L498)
 
 Delete message.
 Network usage: background.
@@ -489,7 +522,7 @@ Network usage: background.
 
 > **apiDeleteGroupLink**(`groupId`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:672](../src/api.ts#L672)
+Defined in: [src/api.ts:692](../src/api.ts#L692)
 
 Delete group link.
 Network usage: background.
@@ -510,7 +543,7 @@ Network usage: background.
 
 > **apiDeleteMemberChatItem**(`groupId`, `chatItemIds`): `Promise`\<`ChatItemDeletion`[]\>
 
-Defined in: [src/api.ts:503](../src/api.ts#L503)
+Defined in: [src/api.ts:513](../src/api.ts#L513)
 
 Moderate message. Requires Moderator role (and higher than message author's).
 Network usage: background.
@@ -535,7 +568,7 @@ Network usage: background.
 
 > **apiDeleteUser**(`userId`, `delSMPQueues`, `viewPwd?`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:917](../src/api.ts#L917)
+Defined in: [src/api.ts:937](../src/api.ts#L937)
 
 Delete user profile.
 Network usage: background.
@@ -564,7 +597,7 @@ Network usage: background.
 
 > **apiDeleteUserAddress**(`userId`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:371](../src/api.ts#L371)
+Defined in: [src/api.ts:370](../src/api.ts#L370)
 
 Deletes a user address.
 Network usage: background.
@@ -585,7 +618,7 @@ Network usage: background.
 
 > **apiGetActiveUser**(): `Promise`\<`User` \| `undefined`\>
 
-Defined in: [src/api.ts:867](../src/api.ts#L867)
+Defined in: [src/api.ts:887](../src/api.ts#L887)
 
 Get active user profile
 Network usage: no.
@@ -600,7 +633,7 @@ Network usage: no.
 
 > **apiGetChat**(`chatType`, `chatId`, `count`): `Promise`\<`any`\>
 
-Defined in: [src/api.ts:857](../src/api.ts#L857)
+Defined in: [src/api.ts:877](../src/api.ts#L877)
 
 Get chat items.
 Network usage: no.
@@ -629,7 +662,7 @@ Network usage: no.
 
 > **apiGetChats**(`userId`, `pagination`, `query?`, `pendingConnections?`): `Promise`\<`AChat`[]\>
 
-Defined in: [src/api.ts:794](../src/api.ts#L794)
+Defined in: [src/api.ts:814](../src/api.ts#L814)
 
 Get chat previews (paginated).
 Network usage: no.
@@ -666,7 +699,7 @@ on large databases.
 
 > **apiGetGroupLink**(`groupId`): `Promise`\<`GroupLink`\>
 
-Defined in: [src/api.ts:681](../src/api.ts#L681)
+Defined in: [src/api.ts:701](../src/api.ts#L701)
 
 Get group link.
 Network usage: no.
@@ -687,7 +720,7 @@ Network usage: no.
 
 > **apiGetGroupLinkStr**(`groupId`): `Promise`\<`string`\>
 
-Defined in: [src/api.ts:687](../src/api.ts#L687)
+Defined in: [src/api.ts:707](../src/api.ts#L707)
 
 #### Parameters
 
@@ -705,7 +738,7 @@ Defined in: [src/api.ts:687](../src/api.ts#L687)
 
 > **apiGetUserAddress**(`userId`): `Promise`\<`UserContactLink` \| `undefined`\>
 
-Defined in: [src/api.ts:381](../src/api.ts#L381)
+Defined in: [src/api.ts:380](../src/api.ts#L380)
 
 Get bot address and settings.
 Network usage: no.
@@ -726,7 +759,7 @@ Network usage: no.
 
 > **apiJoinGroup**(`groupId`): `Promise`\<`GroupInfo`\>
 
-Defined in: [src/api.ts:560](../src/api.ts#L560)
+Defined in: [src/api.ts:580](../src/api.ts#L580)
 
 Join group.
 Network usage: interactive.
@@ -747,7 +780,7 @@ Network usage: interactive.
 
 > **apiLeaveGroup**(`groupId`): `Promise`\<`GroupInfo`\>
 
-Defined in: [src/api.ts:610](../src/api.ts#L610)
+Defined in: [src/api.ts:630](../src/api.ts#L630)
 
 Leave group.
 Network usage: background.
@@ -768,7 +801,7 @@ Network usage: background.
 
 > **apiListContacts**(`userId`): `Promise`\<`Contact`[]\>
 
-Defined in: [src/api.ts:770](../src/api.ts#L770)
+Defined in: [src/api.ts:790](../src/api.ts#L790)
 
 Get contacts.
 Network usage: no.
@@ -789,7 +822,7 @@ Network usage: no.
 
 > **apiListGroups**(`userId`, `contactId?`, `search?`): `Promise`\<`GroupInfo`[]\>
 
-Defined in: [src/api.ts:780](../src/api.ts#L780)
+Defined in: [src/api.ts:800](../src/api.ts#L800)
 
 Get groups.
 Network usage: no.
@@ -818,7 +851,7 @@ Network usage: no.
 
 > **apiListMembers**(`groupId`): `Promise`\<`GroupMember`[]\>
 
-Defined in: [src/api.ts:620](../src/api.ts#L620)
+Defined in: [src/api.ts:640](../src/api.ts#L640)
 
 Get group members.
 Network usage: no.
@@ -839,7 +872,7 @@ Network usage: no.
 
 > **apiListUsers**(): `Promise`\<`UserInfo`[]\>
 
-Defined in: [src/api.ts:897](../src/api.ts#L897)
+Defined in: [src/api.ts:917](../src/api.ts#L917)
 
 Get all user profiles
 Network usage: no.
@@ -854,7 +887,7 @@ Network usage: no.
 
 > **apiNewGroup**(`userId`, `groupProfile`): `Promise`\<`GroupInfo`\>
 
-Defined in: [src/api.ts:630](../src/api.ts#L630)
+Defined in: [src/api.ts:650](../src/api.ts#L650)
 
 Create group.
 Network usage: no.
@@ -879,7 +912,7 @@ Network usage: no.
 
 > **apiReceiveFile**(`fileId`): `Promise`\<`AChatItem`\>
 
-Defined in: [src/api.ts:529](../src/api.ts#L529)
+Defined in: [src/api.ts:539](../src/api.ts#L539)
 
 Receive file.
 Network usage: no.
@@ -900,7 +933,7 @@ Network usage: no.
 
 > **apiRejectContactRequest**(`contactReqId`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:760](../src/api.ts#L760)
+Defined in: [src/api.ts:780](../src/api.ts#L780)
 
 Reject contact request. The user who sent the request is **not notified**.
 Network usage: no.
@@ -921,7 +954,7 @@ Network usage: no.
 
 > **apiRemoveMembers**(`groupId`, `memberIds`, `withMessages?`): `Promise`\<`GroupMember`[]\>
 
-Defined in: [src/api.ts:600](../src/api.ts#L600)
+Defined in: [src/api.ts:620](../src/api.ts#L620)
 
 Remove members. Requires Admin role.
 Network usage: background.
@@ -950,7 +983,7 @@ Network usage: background.
 
 > **apiSendMemberContactInvitation**(`contactId`, `message?`): `Promise`\<`Contact`\>
 
-Defined in: [src/api.ts:964](../src/api.ts#L964)
+Defined in: [src/api.ts:984](../src/api.ts#L984)
 
 Send a direct message invitation to a group member contact.
 The contact must have been created with [apiCreateMemberContact](#apicreatemembercontact).
@@ -976,7 +1009,7 @@ Network usage: interactive.
 
 > **apiSendMessages**(`chat`, `messages`, `liveMessage?`): `Promise`\<`AChatItem`[]\>
 
-Defined in: [src/api.ts:432](../src/api.ts#L432)
+Defined in: [src/api.ts:442](../src/api.ts#L442)
 
 Send messages.
 Network usage: background.
@@ -1005,7 +1038,7 @@ Network usage: background.
 
 > **apiSendTextMessage**(`chat`, `text`, `inReplyTo?`): `Promise`\<`AChatItem`[]\>
 
-Defined in: [src/api.ts:455](../src/api.ts#L455)
+Defined in: [src/api.ts:465](../src/api.ts#L465)
 
 Send text message.
 Network usage: background.
@@ -1034,7 +1067,7 @@ Network usage: background.
 
 > **apiSendTextReply**(`chatItem`, `text`): `Promise`\<`AChatItem`[]\>
 
-Defined in: [src/api.ts:463](../src/api.ts#L463)
+Defined in: [src/api.ts:473](../src/api.ts#L473)
 
 Send text message in reply to received message.
 Network usage: background.
@@ -1059,7 +1092,7 @@ Network usage: background.
 
 > **apiSetActiveUser**(`userId`, `viewPwd?`): `Promise`\<`User`\>
 
-Defined in: [src/api.ts:907](../src/api.ts#L907)
+Defined in: [src/api.ts:927](../src/api.ts#L927)
 
 Set active user profile
 Network usage: no.
@@ -1084,7 +1117,7 @@ Network usage: no.
 
 > **apiSetAddressSettings**(`userId`, `__namedParameters`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:415](../src/api.ts#L415)
+Defined in: [src/api.ts:414](../src/api.ts#L414)
 
 Set bot address settings.
 Network usage: interactive.
@@ -1109,7 +1142,7 @@ Network usage: interactive.
 
 > **apiSetAutoAcceptMemberContacts**(`userId`, `onOff`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:846](../src/api.ts#L846)
+Defined in: [src/api.ts:866](../src/api.ts#L866)
 
 Set auto-accept member contacts.
 Network usage: no.
@@ -1134,7 +1167,7 @@ Network usage: no.
 
 > **apiSetContactCustomData**(`contactId`, `customData?`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:836](../src/api.ts#L836)
+Defined in: [src/api.ts:856](../src/api.ts#L856)
 
 Set contact custom data.
 Network usage: no.
@@ -1159,7 +1192,7 @@ Network usage: no.
 
 > **apiSetContactPrefs**(`contactId`, `preferences`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:943](../src/api.ts#L943)
+Defined in: [src/api.ts:963](../src/api.ts#L963)
 
 Configure chat preference overrides for the contact.
 Network usage: background.
@@ -1184,7 +1217,7 @@ Network usage: background.
 
 > **apiSetGroupCustomData**(`groupId`, `customData?`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:826](../src/api.ts#L826)
+Defined in: [src/api.ts:846](../src/api.ts#L846)
 
 Set group custom data.
 Network usage: no.
@@ -1209,7 +1242,7 @@ Network usage: no.
 
 > **apiSetGroupLinkMemberRole**(`groupId`, `memberRole`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:663](../src/api.ts#L663)
+Defined in: [src/api.ts:683](../src/api.ts#L683)
 
 Set member role for group link.
 Network usage: no.
@@ -1234,7 +1267,7 @@ Network usage: no.
 
 > **apiSetMembersRole**(`groupId`, `groupMemberIds`, `memberRole`): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:580](../src/api.ts#L580)
+Defined in: [src/api.ts:600](../src/api.ts#L600)
 
 Set members role. Requires Admin role.
 Network usage: background.
@@ -1263,7 +1296,7 @@ Network usage: background.
 
 > **apiSetProfileAddress**(`userId`, `enable`): `Promise`\<`UserProfileUpdateSummary`\>
 
-Defined in: [src/api.ts:399](../src/api.ts#L399)
+Defined in: [src/api.ts:398](../src/api.ts#L398)
 
 Add address to bot profile.
 Network usage: interactive.
@@ -1284,11 +1317,33 @@ Network usage: interactive.
 
 ***
 
+### apiSetUserDomain()
+
+> **apiSetUserDomain**(`userId`, `simplexDomain?`): `Promise`\<`User`\>
+
+Defined in: [src/api.ts:427](../src/api.ts#L427)
+
+#### Parameters
+
+##### userId
+
+`number`
+
+##### simplexDomain?
+
+`string`
+
+#### Returns
+
+`Promise`\<`User`\>
+
+***
+
 ### apiUpdateChatItem()
 
 > **apiUpdateChatItem**(`chatType`, `chatId`, `chatItemId`, `msgContent`, `liveMessage`): `Promise`\<`ChatItem`\>
 
-Defined in: [src/api.ts:471](../src/api.ts#L471)
+Defined in: [src/api.ts:481](../src/api.ts#L481)
 
 Update message.
 Network usage: background.
@@ -1325,7 +1380,7 @@ Network usage: background.
 
 > **apiUpdateGroupProfile**(`groupId`, `groupProfile`): `Promise`\<`GroupInfo`\>
 
-Defined in: [src/api.ts:640](../src/api.ts#L640)
+Defined in: [src/api.ts:660](../src/api.ts#L660)
 
 Update group profile.
 Network usage: background.
@@ -1350,7 +1405,7 @@ Network usage: background.
 
 > **apiUpdateProfile**(`userId`, `profile`): `Promise`\<`UserProfileUpdateSummary` \| `undefined`\>
 
-Defined in: [src/api.ts:927](../src/api.ts#L927)
+Defined in: [src/api.ts:947](../src/api.ts#L947)
 
 Update user profile.
 Network usage: background.
@@ -1375,7 +1430,7 @@ Network usage: background.
 
 > **close**(): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:158](../src/api.ts#L158)
+Defined in: [src/api.ts:157](../src/api.ts#L157)
 
 Stop chat controller and close chat database.
 The database is not closed if stopping fails.
@@ -1391,7 +1446,7 @@ Usually doesn't need to be called in chat bots.
 
 > **off**\<`K`\>(`event`, `subscriber?`): `void`
 
-Defined in: [src/api.ts:302](../src/api.ts#L302)
+Defined in: [src/api.ts:301](../src/api.ts#L301)
 
 Unsubscribe all or a specific handler from a specific event.
 
@@ -1425,7 +1480,7 @@ An optional subscriber function for the event.
 
 > **offAny**(`receiver?`): `void`
 
-Defined in: [src/api.ts:318](../src/api.ts#L318)
+Defined in: [src/api.ts:317](../src/api.ts#L317)
 
 Unsubscribe all or a specific handler from any events.
 
@@ -1449,7 +1504,7 @@ An optional subscriber function for the event.
 
 > **on**\<`K`\>(`subscribers`): `void`
 
-Defined in: [src/api.ts:212](../src/api.ts#L212)
+Defined in: [src/api.ts:211](../src/api.ts#L211)
 
 Subscribe multiple event handlers at once.
 
@@ -1479,7 +1534,7 @@ If the same function is subscribed to event.
 
 > **on**\<`K`\>(`event`, `subscriber`): `void`
 
-Defined in: [src/api.ts:220](../src/api.ts#L220)
+Defined in: [src/api.ts:219](../src/api.ts#L219)
 
 Subscribe a handler to a specific event.
 
@@ -1517,7 +1572,7 @@ If the same function is subscribed to event.
 
 > **onAny**(`receiver`): `void`
 
-Defined in: [src/api.ts:243](../src/api.ts#L243)
+Defined in: [src/api.ts:242](../src/api.ts#L242)
 
 Subscribe a handler to any event.
 
@@ -1543,7 +1598,7 @@ If the same function is subscribed to event.
 
 > **once**\<`K`\>(`event`, `subscriber`): `void`
 
-Defined in: [src/api.ts:254](../src/api.ts#L254)
+Defined in: [src/api.ts:253](../src/api.ts#L253)
 
 Subscribe a handler to a specific event to be delivered one time.
 
@@ -1581,7 +1636,7 @@ If the same function is subscribed to event.
 
 > **recvChatEvent**(`wait?`): `Promise`\<`ChatEvent` \| `undefined`\>
 
-Defined in: [src/api.ts:353](../src/api.ts#L353)
+Defined in: [src/api.ts:352](../src/api.ts#L352)
 
 #### Parameters
 
@@ -1599,7 +1654,7 @@ Defined in: [src/api.ts:353](../src/api.ts#L353)
 
 > **sendChatCmd**(`cmd`): `Promise`\<`ChatResponse`\>
 
-Defined in: [src/api.ts:349](../src/api.ts#L349)
+Defined in: [src/api.ts:348](../src/api.ts#L348)
 
 #### Parameters
 
@@ -1617,7 +1672,7 @@ Defined in: [src/api.ts:349](../src/api.ts#L349)
 
 > **startChat**(): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:124](../src/api.ts#L124)
+Defined in: [src/api.ts:123](../src/api.ts#L123)
 
 Start chat controller. Must be called with the existing user profile.
 
@@ -1631,7 +1686,7 @@ Start chat controller. Must be called with the existing user profile.
 
 > **stopChat**(): `Promise`\<`void`\>
 
-Defined in: [src/api.ts:147](../src/api.ts#L147)
+Defined in: [src/api.ts:146](../src/api.ts#L146)
 
 Stop chat controller.
 `close` calls it before closing the database.
@@ -1649,7 +1704,7 @@ Usually doesn't need to be called in chat bots.
 
 > **wait**\<`K`\>(`event`): `Promise`\<`ChatEvent` & `object`\>
 
-Defined in: [src/api.ts:262](../src/api.ts#L262)
+Defined in: [src/api.ts:261](../src/api.ts#L261)
 
 Waits for specific event, with an optional predicate.
 Returns `undefined` on timeout if specified.
@@ -1674,7 +1729,7 @@ Returns `undefined` on timeout if specified.
 
 > **wait**\<`K`\>(`event`, `predicate`): `Promise`\<`ChatEvent` & `object`\>
 
-Defined in: [src/api.ts:263](../src/api.ts#L263)
+Defined in: [src/api.ts:262](../src/api.ts#L262)
 
 Waits for specific event, with an optional predicate.
 Returns `undefined` on timeout if specified.
@@ -1703,7 +1758,7 @@ Returns `undefined` on timeout if specified.
 
 > **wait**\<`K`\>(`event`, `timeout`): `Promise`\<ChatEvent & \{ type: K; \} \| `undefined`\>
 
-Defined in: [src/api.ts:264](../src/api.ts#L264)
+Defined in: [src/api.ts:263](../src/api.ts#L263)
 
 Waits for specific event, with an optional predicate.
 Returns `undefined` on timeout if specified.
@@ -1732,7 +1787,7 @@ Returns `undefined` on timeout if specified.
 
 > **wait**\<`K`\>(`event`, `predicate`, `timeout`): `Promise`\<ChatEvent & \{ type: K; \} \| `undefined`\>
 
-Defined in: [src/api.ts:265](../src/api.ts#L265)
+Defined in: [src/api.ts:264](../src/api.ts#L264)
 
 Waits for specific event, with an optional predicate.
 Returns `undefined` on timeout if specified.
@@ -1767,9 +1822,9 @@ Returns `undefined` on timeout if specified.
 
 > `static` **init**(`db`, `confirm?`, `queueSize?`): `Promise`\<`ChatApi`\>
 
-Defined in: [src/api.ts:111](../src/api.ts#L111)
+Defined in: [src/api.ts:109](../src/api.ts#L109)
 
-Initializes the ChatApi.
+Initializes the ChatApi, loading libsimplex for `db.type` (downloaded on first use).
 
 #### Parameters
 
diff --git a/packages/simplex-chat-nodejs/docs/api.TypeAlias.DbConfig.md b/packages/simplex-chat-nodejs/docs/api.TypeAlias.DbConfig.md
index 7fe255327c..26934a9c6b 100644
--- a/packages/simplex-chat-nodejs/docs/api.TypeAlias.DbConfig.md
+++ b/packages/simplex-chat-nodejs/docs/api.TypeAlias.DbConfig.md
@@ -8,12 +8,10 @@
 
 > **DbConfig** = \{ `encryptionKey?`: `string`; `filePrefix`: `string`; `type`: `"sqlite"`; \} \| \{ `connectionString`: `string`; `schemaPrefix?`: `string`; `type`: `"postgres"`; \}
 
-Defined in: [src/api.ts:65](../src/api.ts#L65)
+Defined in: [src/api.ts:63](../src/api.ts#L63)
 
-Database configuration. The native library is built against exactly one
-backend (see `simplex_backend` / `SIMPLEX_BACKEND` at install time); this
-type makes the caller state which one they are targeting so field names
-can't lie about their meaning.
+Database configuration. `type` selects the libsimplex backend loaded by
+`ChatApi.init`; one backend per process.
 
 ## Union Members
 
diff --git a/packages/simplex-chat-nodejs/docs/bot.Function.run.md b/packages/simplex-chat-nodejs/docs/bot.Function.run.md
index 0af2644bc2..bc31ad01a8 100644
--- a/packages/simplex-chat-nodejs/docs/bot.Function.run.md
+++ b/packages/simplex-chat-nodejs/docs/bot.Function.run.md
@@ -8,7 +8,7 @@
 
 > **run**(`__namedParameters`): `Promise`\<\[[`ChatApi`](api.Class.ChatApi.md), `User`, `UserContactLink` \| `undefined`\]\>
 
-Defined in: [src/bot.ts:48](../src/bot.ts#L48)
+Defined in: [src/bot.ts:49](../src/bot.ts#L49)
 
 ## Parameters
 
diff --git a/packages/simplex-chat-nodejs/docs/bot.Function.subscribeChatItems.md b/packages/simplex-chat-nodejs/docs/bot.Function.subscribeChatItems.md
index 8fbb699f80..0bcc49cbc6 100644
--- a/packages/simplex-chat-nodejs/docs/bot.Function.subscribeChatItems.md
+++ b/packages/simplex-chat-nodejs/docs/bot.Function.subscribeChatItems.md
@@ -8,7 +8,7 @@
 
 > **subscribeChatItems**(`bot`, `onMessage`, `commands`): `void`
 
-Defined in: [src/bot.ts:108](../src/bot.ts#L108)
+Defined in: [src/bot.ts:110](../src/bot.ts#L110)
 
 ## Parameters
 
diff --git a/packages/simplex-chat-nodejs/docs/bot.Interface.BotConfig.md b/packages/simplex-chat-nodejs/docs/bot.Interface.BotConfig.md
index 3f7757041b..036afe64d4 100644
--- a/packages/simplex-chat-nodejs/docs/bot.Interface.BotConfig.md
+++ b/packages/simplex-chat-nodejs/docs/bot.Interface.BotConfig.md
@@ -14,7 +14,7 @@ Defined in: [src/bot.ts:36](../src/bot.ts#L36)
 
 > **dbOpts**: [`BotDbOpts`](bot.TypeAlias.BotDbOpts.md)
 
-Defined in: [src/bot.ts:38](../src/bot.ts#L38)
+Defined in: [src/bot.ts:39](../src/bot.ts#L39)
 
 ***
 
@@ -22,7 +22,7 @@ Defined in: [src/bot.ts:38](../src/bot.ts#L38)
 
 > `optional` **events?**: [`EventSubscribers`](api.TypeAlias.EventSubscribers.md)
 
-Defined in: [src/bot.ts:45](../src/bot.ts#L45)
+Defined in: [src/bot.ts:46](../src/bot.ts#L46)
 
 ***
 
@@ -30,7 +30,7 @@ Defined in: [src/bot.ts:45](../src/bot.ts#L45)
 
 > `optional` **onCommands?**: `object`
 
-Defined in: [src/bot.ts:42](../src/bot.ts#L42)
+Defined in: [src/bot.ts:43](../src/bot.ts#L43)
 
 #### Index Signature
 
@@ -42,7 +42,7 @@ Defined in: [src/bot.ts:42](../src/bot.ts#L42)
 
 > `optional` **onMessage?**: (`chatItem`, `content`, `chat`) => `void` \| `Promise`\<`void`\>
 
-Defined in: [src/bot.ts:40](../src/bot.ts#L40)
+Defined in: [src/bot.ts:41](../src/bot.ts#L41)
 
 #### Parameters
 
@@ -68,7 +68,7 @@ Defined in: [src/bot.ts:40](../src/bot.ts#L40)
 
 > **options**: [`BotOptions`](bot.Interface.BotOptions.md)
 
-Defined in: [src/bot.ts:39](../src/bot.ts#L39)
+Defined in: [src/bot.ts:40](../src/bot.ts#L40)
 
 ***
 
@@ -77,3 +77,11 @@ Defined in: [src/bot.ts:39](../src/bot.ts#L39)
 > **profile**: `Profile`
 
 Defined in: [src/bot.ts:37](../src/bot.ts#L37)
+
+***
+
+### simplexDomain?
+
+> `optional` **simplexDomain?**: `string` \| `null`
+
+Defined in: [src/bot.ts:38](../src/bot.ts#L38)
diff --git a/packages/simplex-chat-nodejs/docs/core.Class.ChatAPIError.md b/packages/simplex-chat-nodejs/docs/core.Class.ChatAPIError.md
index 3953d777da..64e3e764df 100644
--- a/packages/simplex-chat-nodejs/docs/core.Class.ChatAPIError.md
+++ b/packages/simplex-chat-nodejs/docs/core.Class.ChatAPIError.md
@@ -6,7 +6,7 @@
 
 # Class: ChatAPIError
 
-Defined in: [src/core.ts:95](../src/core.ts#L95)
+Defined in: [src/core.ts:117](../src/core.ts#L117)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:95](../src/core.ts#L95)
 
 > **new ChatAPIError**(`message`, `chatError?`): `ChatAPIError`
 
-Defined in: [src/core.ts:96](../src/core.ts#L96)
+Defined in: [src/core.ts:118](../src/core.ts#L118)
 
 #### Parameters
 
@@ -44,7 +44,7 @@ Defined in: [src/core.ts:96](../src/core.ts#L96)
 
 > **chatError**: `ChatError` \| `undefined` = `undefined`
 
-Defined in: [src/core.ts:96](../src/core.ts#L96)
+Defined in: [src/core.ts:118](../src/core.ts#L118)
 
 ***
 
@@ -52,7 +52,7 @@ Defined in: [src/core.ts:96](../src/core.ts#L96)
 
 > **message**: `string`
 
-Defined in: [src/core.ts:96](../src/core.ts#L96)
+Defined in: [src/core.ts:118](../src/core.ts#L118)
 
 #### Inherited from
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Class.ChatInitError.md b/packages/simplex-chat-nodejs/docs/core.Class.ChatInitError.md
index 649090e3ac..aefc4b9073 100644
--- a/packages/simplex-chat-nodejs/docs/core.Class.ChatInitError.md
+++ b/packages/simplex-chat-nodejs/docs/core.Class.ChatInitError.md
@@ -6,7 +6,7 @@
 
 # Class: ChatInitError
 
-Defined in: [src/core.ts:119](../src/core.ts#L119)
+Defined in: [src/core.ts:141](../src/core.ts#L141)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:119](../src/core.ts#L119)
 
 > **new ChatInitError**(`message`, `dbMigrationError`): `ChatInitError`
 
-Defined in: [src/core.ts:120](../src/core.ts#L120)
+Defined in: [src/core.ts:142](../src/core.ts#L142)
 
 #### Parameters
 
@@ -44,7 +44,7 @@ Defined in: [src/core.ts:120](../src/core.ts#L120)
 
 > **dbMigrationError**: [`DBMigrationError`](core.TypeAlias.DBMigrationError.md)
 
-Defined in: [src/core.ts:120](../src/core.ts#L120)
+Defined in: [src/core.ts:142](../src/core.ts#L142)
 
 ***
 
@@ -52,7 +52,7 @@ Defined in: [src/core.ts:120](../src/core.ts#L120)
 
 > **message**: `string`
 
-Defined in: [src/core.ts:120](../src/core.ts#L120)
+Defined in: [src/core.ts:142](../src/core.ts#L142)
 
 #### Inherited from
 
diff --git a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorMigration.md b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorMigration.md
index fea7bfb531..9b6ad3c099 100644
--- a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorMigration.md
+++ b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorMigration.md
@@ -6,7 +6,7 @@
 
 # Interface: ErrorMigration
 
-Defined in: [src/core.ts:152](../src/core.ts#L152)
+Defined in: [src/core.ts:174](../src/core.ts#L174)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:152](../src/core.ts#L152)
 
 > **dbFile**: `string`
 
-Defined in: [src/core.ts:154](../src/core.ts#L154)
+Defined in: [src/core.ts:176](../src/core.ts#L176)
 
 ***
 
@@ -26,7 +26,7 @@ Defined in: [src/core.ts:154](../src/core.ts#L154)
 
 > **migrationError**: [`MigrationError`](core.TypeAlias.MigrationError.md)
 
-Defined in: [src/core.ts:155](../src/core.ts#L155)
+Defined in: [src/core.ts:177](../src/core.ts#L177)
 
 ***
 
@@ -34,7 +34,7 @@ Defined in: [src/core.ts:155](../src/core.ts#L155)
 
 > **type**: `"errorMigration"`
 
-Defined in: [src/core.ts:153](../src/core.ts#L153)
+Defined in: [src/core.ts:175](../src/core.ts#L175)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorNotADatabase.md b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorNotADatabase.md
index eb0bfb11cb..d54f59003f 100644
--- a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorNotADatabase.md
+++ b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorNotADatabase.md
@@ -6,7 +6,7 @@
 
 # Interface: ErrorNotADatabase
 
-Defined in: [src/core.ts:147](../src/core.ts#L147)
+Defined in: [src/core.ts:169](../src/core.ts#L169)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:147](../src/core.ts#L147)
 
 > **dbFile**: `string`
 
-Defined in: [src/core.ts:149](../src/core.ts#L149)
+Defined in: [src/core.ts:171](../src/core.ts#L171)
 
 ***
 
@@ -26,7 +26,7 @@ Defined in: [src/core.ts:149](../src/core.ts#L149)
 
 > **type**: `"errorNotADatabase"`
 
-Defined in: [src/core.ts:148](../src/core.ts#L148)
+Defined in: [src/core.ts:170](../src/core.ts#L170)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorSQL.md b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorSQL.md
index ffaa364f9b..e76de932f6 100644
--- a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorSQL.md
+++ b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.ErrorSQL.md
@@ -6,7 +6,7 @@
 
 # Interface: ErrorSQL
 
-Defined in: [src/core.ts:158](../src/core.ts#L158)
+Defined in: [src/core.ts:180](../src/core.ts#L180)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:158](../src/core.ts#L158)
 
 > **dbFile**: `string`
 
-Defined in: [src/core.ts:160](../src/core.ts#L160)
+Defined in: [src/core.ts:182](../src/core.ts#L182)
 
 ***
 
@@ -26,7 +26,7 @@ Defined in: [src/core.ts:160](../src/core.ts#L160)
 
 > **migrationSQLError**: `string`
 
-Defined in: [src/core.ts:161](../src/core.ts#L161)
+Defined in: [src/core.ts:183](../src/core.ts#L183)
 
 ***
 
@@ -34,7 +34,7 @@ Defined in: [src/core.ts:161](../src/core.ts#L161)
 
 > **type**: `"errorSQL"`
 
-Defined in: [src/core.ts:159](../src/core.ts#L159)
+Defined in: [src/core.ts:181](../src/core.ts#L181)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.InvalidConfirmation.md b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.InvalidConfirmation.md
index 67711030da..30157c808d 100644
--- a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.InvalidConfirmation.md
+++ b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.InvalidConfirmation.md
@@ -6,7 +6,7 @@
 
 # Interface: InvalidConfirmation
 
-Defined in: [src/core.ts:139](../src/core.ts#L139)
+Defined in: [src/core.ts:161](../src/core.ts#L161)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:139](../src/core.ts#L139)
 
 > **type**: `"invalidConfirmation"`
 
-Defined in: [src/core.ts:140](../src/core.ts#L140)
+Defined in: [src/core.ts:162](../src/core.ts#L162)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.InvalidQueueSize.md b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.InvalidQueueSize.md
index 9093b5e9b1..5264e4977f 100644
--- a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.InvalidQueueSize.md
+++ b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.Interface.InvalidQueueSize.md
@@ -6,7 +6,7 @@
 
 # Interface: InvalidQueueSize
 
-Defined in: [src/core.ts:143](../src/core.ts#L143)
+Defined in: [src/core.ts:165](../src/core.ts#L165)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:143](../src/core.ts#L143)
 
 > **type**: `"invalidQueueSize"`
 
-Defined in: [src/core.ts:144](../src/core.ts#L144)
+Defined in: [src/core.ts:166](../src/core.ts#L166)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.TypeAlias.Tag.md b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.TypeAlias.Tag.md
index b04f2f5af1..d94d5893ad 100644
--- a/packages/simplex-chat-nodejs/docs/core.DBMigrationError.TypeAlias.Tag.md
+++ b/packages/simplex-chat-nodejs/docs/core.DBMigrationError.TypeAlias.Tag.md
@@ -8,4 +8,4 @@
 
 > **Tag** = `"invalidConfirmation"` \| `"invalidQueueSize"` \| `"errorNotADatabase"` \| `"errorMigration"` \| `"errorSQL"`
 
-Defined in: [src/core.ts:133](../src/core.ts#L133)
+Defined in: [src/core.ts:155](../src/core.ts#L155)
diff --git a/packages/simplex-chat-nodejs/docs/core.Enumeration.MigrationConfirmation.md b/packages/simplex-chat-nodejs/docs/core.Enumeration.MigrationConfirmation.md
index 48e250c7d4..cc2dea3901 100644
--- a/packages/simplex-chat-nodejs/docs/core.Enumeration.MigrationConfirmation.md
+++ b/packages/simplex-chat-nodejs/docs/core.Enumeration.MigrationConfirmation.md
@@ -6,7 +6,7 @@
 
 # Enumeration: MigrationConfirmation
 
-Defined in: [src/core.ts:104](../src/core.ts#L104)
+Defined in: [src/core.ts:126](../src/core.ts#L126)
 
 Migration confirmation mode
 
@@ -16,7 +16,7 @@ Migration confirmation mode
 
 > **Console**: `"console"`
 
-Defined in: [src/core.ts:107](../src/core.ts#L107)
+Defined in: [src/core.ts:129](../src/core.ts#L129)
 
 ***
 
@@ -24,7 +24,7 @@ Defined in: [src/core.ts:107](../src/core.ts#L107)
 
 > **Error**: `"error"`
 
-Defined in: [src/core.ts:108](../src/core.ts#L108)
+Defined in: [src/core.ts:130](../src/core.ts#L130)
 
 ***
 
@@ -32,7 +32,7 @@ Defined in: [src/core.ts:108](../src/core.ts#L108)
 
 > **YesUp**: `"yesUp"`
 
-Defined in: [src/core.ts:105](../src/core.ts#L105)
+Defined in: [src/core.ts:127](../src/core.ts#L127)
 
 ***
 
@@ -40,4 +40,4 @@ Defined in: [src/core.ts:105](../src/core.ts#L105)
 
 > **YesUpDown**: `"yesUpDown"`
 
-Defined in: [src/core.ts:106](../src/core.ts#L106)
+Defined in: [src/core.ts:128](../src/core.ts#L128)
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.chatCloseStore.md b/packages/simplex-chat-nodejs/docs/core.Function.chatCloseStore.md
index 4b0324b92c..69be845ed3 100644
--- a/packages/simplex-chat-nodejs/docs/core.Function.chatCloseStore.md
+++ b/packages/simplex-chat-nodejs/docs/core.Function.chatCloseStore.md
@@ -8,7 +8,7 @@
 
 > **chatCloseStore**(`ctrl`): `Promise`\<`void`\>
 
-Defined in: [src/core.ts:20](../src/core.ts#L20)
+Defined in: [src/core.ts:42](../src/core.ts#L42)
 
 Close chat store
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.chatDecryptFile.md b/packages/simplex-chat-nodejs/docs/core.Function.chatDecryptFile.md
index b6786fe1cb..a2a901ddc5 100644
--- a/packages/simplex-chat-nodejs/docs/core.Function.chatDecryptFile.md
+++ b/packages/simplex-chat-nodejs/docs/core.Function.chatDecryptFile.md
@@ -8,7 +8,7 @@
 
 > **chatDecryptFile**(`fromPath`, `__namedParameters`, `toPath`): `Promise`\<`void`\>
 
-Defined in: [src/core.ts:76](../src/core.ts#L76)
+Defined in: [src/core.ts:98](../src/core.ts#L98)
 
 Decrypt file
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.chatEncryptFile.md b/packages/simplex-chat-nodejs/docs/core.Function.chatEncryptFile.md
index 9e30e55a23..8f4c7815c4 100644
--- a/packages/simplex-chat-nodejs/docs/core.Function.chatEncryptFile.md
+++ b/packages/simplex-chat-nodejs/docs/core.Function.chatEncryptFile.md
@@ -8,7 +8,7 @@
 
 > **chatEncryptFile**(`ctrl`, `fromPath`, `toPath`): `Promise`\<[`CryptoArgs`](core.Interface.CryptoArgs.md)\>
 
-Defined in: [src/core.ts:68](../src/core.ts#L68)
+Defined in: [src/core.ts:90](../src/core.ts#L90)
 
 Encrypt file
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.chatMigrateInit.md b/packages/simplex-chat-nodejs/docs/core.Function.chatMigrateInit.md
index dbe4912520..c6ad146aa1 100644
--- a/packages/simplex-chat-nodejs/docs/core.Function.chatMigrateInit.md
+++ b/packages/simplex-chat-nodejs/docs/core.Function.chatMigrateInit.md
@@ -8,7 +8,7 @@
 
 > **chatMigrateInit**(`dbPath`, `dbKey`, `confirm`, `queueSize?`): `Promise`\<`bigint`\>
 
-Defined in: [src/core.ts:8](../src/core.ts#L8)
+Defined in: [src/core.ts:30](../src/core.ts#L30)
 
 Initialize chat controller
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.chatReadFile.md b/packages/simplex-chat-nodejs/docs/core.Function.chatReadFile.md
index f6713f22d8..f9413c4d74 100644
--- a/packages/simplex-chat-nodejs/docs/core.Function.chatReadFile.md
+++ b/packages/simplex-chat-nodejs/docs/core.Function.chatReadFile.md
@@ -8,7 +8,7 @@
 
 > **chatReadFile**(`path`, `__namedParameters`): `Promise`\<`Buffer`\<`ArrayBufferLike`\>\>
 
-Defined in: [src/core.ts:61](../src/core.ts#L61)
+Defined in: [src/core.ts:83](../src/core.ts#L83)
 
 Read buffer from encrypted file
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.chatRecvMsgWait.md b/packages/simplex-chat-nodejs/docs/core.Function.chatRecvMsgWait.md
index 719cf610a1..8aaa2e1590 100644
--- a/packages/simplex-chat-nodejs/docs/core.Function.chatRecvMsgWait.md
+++ b/packages/simplex-chat-nodejs/docs/core.Function.chatRecvMsgWait.md
@@ -8,7 +8,7 @@
 
 > **chatRecvMsgWait**(`ctrl`, `wait`): `Promise`\<`ChatEvent` \| `undefined`\>
 
-Defined in: [src/core.ts:40](../src/core.ts#L40)
+Defined in: [src/core.ts:62](../src/core.ts#L62)
 
 Receive chat event
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.chatSendCmd.md b/packages/simplex-chat-nodejs/docs/core.Function.chatSendCmd.md
index 4296a714cf..9f8c34be0f 100644
--- a/packages/simplex-chat-nodejs/docs/core.Function.chatSendCmd.md
+++ b/packages/simplex-chat-nodejs/docs/core.Function.chatSendCmd.md
@@ -8,7 +8,7 @@
 
 > **chatSendCmd**(`ctrl`, `cmd`): `Promise`\<`ChatResponse`\>
 
-Defined in: [src/core.ts:28](../src/core.ts#L28)
+Defined in: [src/core.ts:50](../src/core.ts#L50)
 
 Send chat command as string
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.chatWriteFile.md b/packages/simplex-chat-nodejs/docs/core.Function.chatWriteFile.md
index 4ca640d8c4..bd22e9d2c6 100644
--- a/packages/simplex-chat-nodejs/docs/core.Function.chatWriteFile.md
+++ b/packages/simplex-chat-nodejs/docs/core.Function.chatWriteFile.md
@@ -8,7 +8,7 @@
 
 > **chatWriteFile**(`ctrl`, `path`, `buffer`): `Promise`\<[`CryptoArgs`](core.Interface.CryptoArgs.md)\>
 
-Defined in: [src/core.ts:53](../src/core.ts#L53)
+Defined in: [src/core.ts:75](../src/core.ts#L75)
 
 Write buffer to encrypted file
 
diff --git a/packages/simplex-chat-nodejs/docs/core.Function.loadLibrary.md b/packages/simplex-chat-nodejs/docs/core.Function.loadLibrary.md
new file mode 100644
index 0000000000..a2034b953d
--- /dev/null
+++ b/packages/simplex-chat-nodejs/docs/core.Function.loadLibrary.md
@@ -0,0 +1,24 @@
+[**simplex-chat**](README.md)
+
+***
+
+[simplex-chat](README.md) / [core](Namespace.core.md) / loadLibrary
+
+# Function: loadLibrary()
+
+> **loadLibrary**(`backend`): `Promise`\<`void`\>
+
+Defined in: [src/core.ts:13](../src/core.ts#L13)
+
+Resolve (downloading on first use) and load libsimplex for the backend.
+One libsimplex per process: the Haskell runtime is initialized once, and another backend is rejected.
+
+## Parameters
+
+### backend
+
+[`Backend`](core.TypeAlias.Backend.md)
+
+## Returns
+
+`Promise`\<`void`\>
diff --git a/packages/simplex-chat-nodejs/docs/core.Interface.APIResult.md b/packages/simplex-chat-nodejs/docs/core.Interface.APIResult.md
index 2ede6d9ffb..63b0caba85 100644
--- a/packages/simplex-chat-nodejs/docs/core.Interface.APIResult.md
+++ b/packages/simplex-chat-nodejs/docs/core.Interface.APIResult.md
@@ -6,7 +6,7 @@
 
 # Interface: APIResult\<R\>
 
-Defined in: [src/core.ts:90](../src/core.ts#L90)
+Defined in: [src/core.ts:112](../src/core.ts#L112)
 
 ## Type Parameters
 
@@ -20,7 +20,7 @@ Defined in: [src/core.ts:90](../src/core.ts#L90)
 
 > `optional` **error?**: `ChatError`
 
-Defined in: [src/core.ts:92](../src/core.ts#L92)
+Defined in: [src/core.ts:114](../src/core.ts#L114)
 
 ***
 
@@ -28,4 +28,4 @@ Defined in: [src/core.ts:92](../src/core.ts#L92)
 
 > `optional` **result?**: `R`
 
-Defined in: [src/core.ts:91](../src/core.ts#L91)
+Defined in: [src/core.ts:113](../src/core.ts#L113)
diff --git a/packages/simplex-chat-nodejs/docs/core.Interface.CryptoArgs.md b/packages/simplex-chat-nodejs/docs/core.Interface.CryptoArgs.md
index 51a55b86b6..939b3f7430 100644
--- a/packages/simplex-chat-nodejs/docs/core.Interface.CryptoArgs.md
+++ b/packages/simplex-chat-nodejs/docs/core.Interface.CryptoArgs.md
@@ -6,7 +6,7 @@
 
 # Interface: CryptoArgs
 
-Defined in: [src/core.ts:114](../src/core.ts#L114)
+Defined in: [src/core.ts:136](../src/core.ts#L136)
 
 File encryption key and nonce
 
@@ -16,7 +16,7 @@ File encryption key and nonce
 
 > **fileKey**: `string`
 
-Defined in: [src/core.ts:115](../src/core.ts#L115)
+Defined in: [src/core.ts:137](../src/core.ts#L137)
 
 ***
 
@@ -24,4 +24,4 @@ Defined in: [src/core.ts:115](../src/core.ts#L115)
 
 > **fileNonce**: `string`
 
-Defined in: [src/core.ts:116](../src/core.ts#L116)
+Defined in: [src/core.ts:138](../src/core.ts#L138)
diff --git a/packages/simplex-chat-nodejs/docs/core.Interface.UpMigration.md b/packages/simplex-chat-nodejs/docs/core.Interface.UpMigration.md
index 9e1fca49b4..30a7f0b060 100644
--- a/packages/simplex-chat-nodejs/docs/core.Interface.UpMigration.md
+++ b/packages/simplex-chat-nodejs/docs/core.Interface.UpMigration.md
@@ -6,7 +6,7 @@
 
 # Interface: UpMigration
 
-Defined in: [src/core.ts:193](../src/core.ts#L193)
+Defined in: [src/core.ts:215](../src/core.ts#L215)
 
 ## Properties
 
@@ -14,7 +14,7 @@ Defined in: [src/core.ts:193](../src/core.ts#L193)
 
 > **upName**: `string`
 
-Defined in: [src/core.ts:194](../src/core.ts#L194)
+Defined in: [src/core.ts:216](../src/core.ts#L216)
 
 ***
 
@@ -22,4 +22,4 @@ Defined in: [src/core.ts:194](../src/core.ts#L194)
 
 > **withDown**: `boolean`
 
-Defined in: [src/core.ts:195](../src/core.ts#L195)
+Defined in: [src/core.ts:217](../src/core.ts#L217)
diff --git a/packages/simplex-chat-nodejs/docs/core.MTRError.Interface.MTREDifferent.md b/packages/simplex-chat-nodejs/docs/core.MTRError.Interface.MTREDifferent.md
index f85fb492be..aaaa506f1e 100644
--- a/packages/simplex-chat-nodejs/docs/core.MTRError.Interface.MTREDifferent.md
+++ b/packages/simplex-chat-nodejs/docs/core.MTRError.Interface.MTREDifferent.md
@@ -6,7 +6,7 @@
 
 # Interface: MTREDifferent
 
-Defined in: [src/core.ts:214](../src/core.ts#L214)
+Defined in: [src/core.ts:236](../src/core.ts#L236)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:214](../src/core.ts#L214)
 
 > **downMigrations**: `string`[]
 
-Defined in: [src/core.ts:216](../src/core.ts#L216)
+Defined in: [src/core.ts:238](../src/core.ts#L238)
 
 ***
 
@@ -26,7 +26,7 @@ Defined in: [src/core.ts:216](../src/core.ts#L216)
 
 > **type**: `"different"`
 
-Defined in: [src/core.ts:215](../src/core.ts#L215)
+Defined in: [src/core.ts:237](../src/core.ts#L237)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.MTRError.Interface.MTRENoDown.md b/packages/simplex-chat-nodejs/docs/core.MTRError.Interface.MTRENoDown.md
index f031ac8982..e088536be9 100644
--- a/packages/simplex-chat-nodejs/docs/core.MTRError.Interface.MTRENoDown.md
+++ b/packages/simplex-chat-nodejs/docs/core.MTRError.Interface.MTRENoDown.md
@@ -6,7 +6,7 @@
 
 # Interface: MTRENoDown
 
-Defined in: [src/core.ts:209](../src/core.ts#L209)
+Defined in: [src/core.ts:231](../src/core.ts#L231)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:209](../src/core.ts#L209)
 
 > **dbMigrations**: `string`[]
 
-Defined in: [src/core.ts:211](../src/core.ts#L211)
+Defined in: [src/core.ts:233](../src/core.ts#L233)
 
 ***
 
@@ -26,7 +26,7 @@ Defined in: [src/core.ts:211](../src/core.ts#L211)
 
 > **type**: `"noDown"`
 
-Defined in: [src/core.ts:210](../src/core.ts#L210)
+Defined in: [src/core.ts:232](../src/core.ts#L232)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.MTRError.TypeAlias.Tag.md b/packages/simplex-chat-nodejs/docs/core.MTRError.TypeAlias.Tag.md
index 59501b539a..058c64d396 100644
--- a/packages/simplex-chat-nodejs/docs/core.MTRError.TypeAlias.Tag.md
+++ b/packages/simplex-chat-nodejs/docs/core.MTRError.TypeAlias.Tag.md
@@ -8,4 +8,4 @@
 
 > **Tag** = `"noDown"` \| `"different"`
 
-Defined in: [src/core.ts:203](../src/core.ts#L203)
+Defined in: [src/core.ts:225](../src/core.ts#L225)
diff --git a/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MEDowngrade.md b/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MEDowngrade.md
index f6202b9456..523fe8fe1e 100644
--- a/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MEDowngrade.md
+++ b/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MEDowngrade.md
@@ -6,7 +6,7 @@
 
 # Interface: MEDowngrade
 
-Defined in: [src/core.ts:182](../src/core.ts#L182)
+Defined in: [src/core.ts:204](../src/core.ts#L204)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:182](../src/core.ts#L182)
 
 > **downMigrations**: `string`[]
 
-Defined in: [src/core.ts:184](../src/core.ts#L184)
+Defined in: [src/core.ts:206](../src/core.ts#L206)
 
 ***
 
@@ -26,7 +26,7 @@ Defined in: [src/core.ts:184](../src/core.ts#L184)
 
 > **type**: `"downgrade"`
 
-Defined in: [src/core.ts:183](../src/core.ts#L183)
+Defined in: [src/core.ts:205](../src/core.ts#L205)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MEUpgrade.md b/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MEUpgrade.md
index 7467895b74..c5856f1943 100644
--- a/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MEUpgrade.md
+++ b/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MEUpgrade.md
@@ -6,7 +6,7 @@
 
 # Interface: MEUpgrade
 
-Defined in: [src/core.ts:177](../src/core.ts#L177)
+Defined in: [src/core.ts:199](../src/core.ts#L199)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:177](../src/core.ts#L177)
 
 > **type**: `"upgrade"`
 
-Defined in: [src/core.ts:178](../src/core.ts#L178)
+Defined in: [src/core.ts:200](../src/core.ts#L200)
 
 #### Overrides
 
@@ -30,4 +30,4 @@ Defined in: [src/core.ts:178](../src/core.ts#L178)
 
 > **upMigrations**: [`UpMigration`](core.Interface.UpMigration.md)[]
 
-Defined in: [src/core.ts:179](../src/core.ts#L179)
+Defined in: [src/core.ts:201](../src/core.ts#L201)
diff --git a/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MigrationError.md b/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MigrationError.md
index 7b2546fcd5..f3f7d9bc1f 100644
--- a/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MigrationError.md
+++ b/packages/simplex-chat-nodejs/docs/core.MigrationError.Interface.MigrationError.md
@@ -6,7 +6,7 @@
 
 # Interface: MigrationError
 
-Defined in: [src/core.ts:187](../src/core.ts#L187)
+Defined in: [src/core.ts:209](../src/core.ts#L209)
 
 ## Extends
 
@@ -18,7 +18,7 @@ Defined in: [src/core.ts:187](../src/core.ts#L187)
 
 > **mtrError**: [`MTRError`](core.TypeAlias.MTRError.md)
 
-Defined in: [src/core.ts:189](../src/core.ts#L189)
+Defined in: [src/core.ts:211](../src/core.ts#L211)
 
 ***
 
@@ -26,7 +26,7 @@ Defined in: [src/core.ts:189](../src/core.ts#L189)
 
 > **type**: `"migrationError"`
 
-Defined in: [src/core.ts:188](../src/core.ts#L188)
+Defined in: [src/core.ts:210](../src/core.ts#L210)
 
 #### Overrides
 
diff --git a/packages/simplex-chat-nodejs/docs/core.MigrationError.TypeAlias.Tag.md b/packages/simplex-chat-nodejs/docs/core.MigrationError.TypeAlias.Tag.md
index e2e1dcb33f..92f649e615 100644
--- a/packages/simplex-chat-nodejs/docs/core.MigrationError.TypeAlias.Tag.md
+++ b/packages/simplex-chat-nodejs/docs/core.MigrationError.TypeAlias.Tag.md
@@ -8,4 +8,4 @@
 
 > **Tag** = `"upgrade"` \| `"downgrade"` \| `"migrationError"`
 
-Defined in: [src/core.ts:171](../src/core.ts#L171)
+Defined in: [src/core.ts:193](../src/core.ts#L193)
diff --git a/packages/simplex-chat-nodejs/docs/core.TypeAlias.Backend.md b/packages/simplex-chat-nodejs/docs/core.TypeAlias.Backend.md
new file mode 100644
index 0000000000..9b32c20d5b
--- /dev/null
+++ b/packages/simplex-chat-nodejs/docs/core.TypeAlias.Backend.md
@@ -0,0 +1,11 @@
+[**simplex-chat**](README.md)
+
+***
+
+[simplex-chat](README.md) / [core](Namespace.core.md) / Backend
+
+# Type Alias: Backend
+
+> **Backend** = `"sqlite"` \| `"postgres"`
+
+Defined in: [src/core.ts:5](../src/core.ts#L5)
diff --git a/packages/simplex-chat-nodejs/docs/core.TypeAlias.DBMigrationError.md b/packages/simplex-chat-nodejs/docs/core.TypeAlias.DBMigrationError.md
index 3f4797fb8e..159ce87391 100644
--- a/packages/simplex-chat-nodejs/docs/core.TypeAlias.DBMigrationError.md
+++ b/packages/simplex-chat-nodejs/docs/core.TypeAlias.DBMigrationError.md
@@ -8,4 +8,4 @@
 
 > **DBMigrationError** = [`InvalidConfirmation`](core.DBMigrationError.Interface.InvalidConfirmation.md) \| [`InvalidQueueSize`](core.DBMigrationError.Interface.InvalidQueueSize.md) \| [`ErrorNotADatabase`](core.DBMigrationError.Interface.ErrorNotADatabase.md) \| [`ErrorMigration`](core.DBMigrationError.Interface.ErrorMigration.md) \| [`ErrorSQL`](core.DBMigrationError.Interface.ErrorSQL.md)
 
-Defined in: [src/core.ts:125](../src/core.ts#L125)
+Defined in: [src/core.ts:147](../src/core.ts#L147)
diff --git a/packages/simplex-chat-nodejs/docs/core.TypeAlias.MTRError.md b/packages/simplex-chat-nodejs/docs/core.TypeAlias.MTRError.md
index 66d6a092dc..1c4ceb16e9 100644
--- a/packages/simplex-chat-nodejs/docs/core.TypeAlias.MTRError.md
+++ b/packages/simplex-chat-nodejs/docs/core.TypeAlias.MTRError.md
@@ -8,4 +8,4 @@
 
 > **MTRError** = [`MTRENoDown`](core.MTRError.Interface.MTRENoDown.md) \| [`MTREDifferent`](core.MTRError.Interface.MTREDifferent.md)
 
-Defined in: [src/core.ts:198](../src/core.ts#L198)
+Defined in: [src/core.ts:220](../src/core.ts#L220)
diff --git a/packages/simplex-chat-nodejs/docs/core.TypeAlias.MigrationError.md b/packages/simplex-chat-nodejs/docs/core.TypeAlias.MigrationError.md
index 6c0ba77541..485311f0de 100644
--- a/packages/simplex-chat-nodejs/docs/core.TypeAlias.MigrationError.md
+++ b/packages/simplex-chat-nodejs/docs/core.TypeAlias.MigrationError.md
@@ -8,4 +8,4 @@
 
 > **MigrationError** = [`MEUpgrade`](core.MigrationError.Interface.MEUpgrade.md) \| [`MEDowngrade`](core.MigrationError.Interface.MEDowngrade.md) \| [`MigrationError`](core.MigrationError.Interface.MigrationError.md)
 
-Defined in: [src/core.ts:165](../src/core.ts#L165)
+Defined in: [src/core.ts:187](../src/core.ts#L187)
diff --git a/packages/simplex-chat-nodejs/jest.config.js b/packages/simplex-chat-nodejs/jest.config.js
index 18c5ddf0e5..ac94fe9001 100644
--- a/packages/simplex-chat-nodejs/jest.config.js
+++ b/packages/simplex-chat-nodejs/jest.config.js
@@ -1,6 +1,13 @@
+const path = require("path")
+
+// Tests load the locally built add-on instead of downloading the released one.
+process.env.SIMPLEX_ADDON_PATH ??= path.join(__dirname, "build", "Release", "simplex.node")
+
 module.exports = {
   preset: "ts-jest",
   maxWorkers: 1,
+  // a test with a new database runs every migration, each committed with a disk flush: seconds on slow CI runners
+  testTimeout: 30000,
   testEnvironment: "node",
   transform: {
     '^.+\\.ts$': ['ts-jest', {
diff --git a/packages/simplex-chat-nodejs/package.json b/packages/simplex-chat-nodejs/package.json
index a482bafae8..67eefdee4a 100644
--- a/packages/simplex-chat-nodejs/package.json
+++ b/packages/simplex-chat-nodejs/package.json
@@ -1,22 +1,22 @@
 {
   "name": "simplex-chat",
-  "version": "7.1.0-beta.6.2",
+  "version": "7.1.0-beta.6.3",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "gypfile": false,
+  "bin": {
+    "simplex-chat": "dist/cli.js"
+  },
   "files": [
     "src",
-    "cpp",
     "dist",
-    "binding.gyp",
     "tsconfig.json",
     "docs",
     "examples"
   ],
   "scripts": {
-    "preinstall": "node src/download-libs.js",
-    "install": "node-gyp configure; node-gyp rebuild --release",
     "install-tools": "npm install -g node-gyp",
-    "configure": "node-gyp configure; mkdir libs 2> /dev/null | true",
+    "configure": "node-gyp configure",
     "build": "node-gyp rebuild && tsc && cp ./src/simplex.* ./dist",
     "run": "node src/index.js",
     "build-run": "node-gyp build && node src/index.js",
@@ -26,13 +26,13 @@
   "dependencies": {
     "@simplex-chat/types": "^0.12.1",
     "extract-zip": "^2.0.1",
-    "fast-deep-equal": "^3.1.3",
-    "node-addon-api": "^8.5.0"
+    "fast-deep-equal": "^3.1.3"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",
     "@types/node": "^25.0.5",
     "jest": "^30.2.0",
+    "node-addon-api": "^8.5.0",
     "ts-jest": "^29.4.6",
     "typedoc": "^0.28.15",
     "typedoc-plugin-markdown": "^4.9.0",
diff --git a/packages/simplex-chat-nodejs/src/api.ts b/packages/simplex-chat-nodejs/src/api.ts
index 95d942ebf1..4ee4e4b3b9 100644
--- a/packages/simplex-chat-nodejs/src/api.ts
+++ b/packages/simplex-chat-nodejs/src/api.ts
@@ -57,10 +57,8 @@ interface EventSubscriber<K extends CEvt.Tag> {
 }
 
 /**
- * Database configuration. The native library is built against exactly one
- * backend (see `simplex_backend` / `SIMPLEX_BACKEND` at install time); this
- * type makes the caller state which one they are targeting so field names
- * can't lie about their meaning.
+ * Database configuration. `type` selects the libsimplex backend loaded by
+ * `ChatApi.init`; one backend per process.
  */
 export type DbConfig =
   | {
@@ -108,7 +106,7 @@ export class ChatApi {
   private constructor(protected ctrl_: bigint | undefined) {}
 
   /**
-   * Initializes the ChatApi.
+   * Initializes the ChatApi, loading libsimplex for `db.type` (downloaded on first use).
    * @param {DbConfig} db - Database configuration (sqlite or postgres).
    * @param {core.MigrationConfirmation} [confirm=core.MigrationConfirmation.YesUp] - Migration confirmation mode.
    * @param {number} [queueSize] - Size of internal queues, the core default is used when omitted.
@@ -119,6 +117,7 @@ export class ChatApi {
     queueSize?: number
   ): Promise<ChatApi> {
     const [path, key] = dbConfigToMigrateArgs(db)
+    await core.loadLibrary(db.type)
     const ctrl = await core.chatMigrateInit(path, key, confirm, queueSize)
     return new ChatApi(ctrl)
   }
diff --git a/packages/simplex-chat-nodejs/src/cli.ts b/packages/simplex-chat-nodejs/src/cli.ts
new file mode 100644
index 0000000000..8f24e5a89d
--- /dev/null
+++ b/packages/simplex-chat-nodejs/src/cli.ts
@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import {parseArgs} from "util"
+import type {Backend} from "./core"
+import {resolveAddonPath, resolveLibsDir} from "./libs"
+
+const USAGE = "usage: simplex-chat install [--backend sqlite|postgres]"
+const EXIT_INSTALL_FAILED = 1
+const EXIT_USAGE = 2
+
+export function parseInstallArgs(argv: string[]): Backend {
+  const {positionals, values: {backend = "sqlite"}} = parseArgs({args: argv, allowPositionals: true, options: {backend: {type: "string"}}})
+  if (positionals.length !== 1 || positionals[0] !== "install") throw new Error("expected command: install")
+  if (backend !== "sqlite" && backend !== "postgres") throw new Error(`invalid backend: ${backend}`)
+  return backend
+}
+
+export async function main(argv: string[]): Promise<number> {
+  if (argv.includes("-h") || argv.includes("--help")) {
+    console.log(USAGE)
+    return 0
+  }
+  let backend: Backend
+  try {
+    backend = parseInstallArgs(argv)
+  } catch (e) {
+    console.error(`${(e as Error).message}\n${USAGE}`)
+    return EXIT_USAGE
+  }
+  try {
+    const [dir, addon] = await Promise.all([resolveLibsDir(backend), resolveAddonPath()])
+    console.log(`libsimplex installed at: ${dir}`)
+    console.log(`Node.js add-on installed at: ${addon}`)
+    return 0
+  } catch (e) {
+    console.error(`install failed: ${(e as Error).message}`)
+    return EXIT_INSTALL_FAILED
+  }
+}
+
+if (require.main === module) {
+  main(process.argv.slice(2)).then(code => { process.exitCode = code })
+}
diff --git a/packages/simplex-chat-nodejs/src/core.ts b/packages/simplex-chat-nodejs/src/core.ts
index 49664fed71..5c246cf5c1 100644
--- a/packages/simplex-chat-nodejs/src/core.ts
+++ b/packages/simplex-chat-nodejs/src/core.ts
@@ -1,6 +1,28 @@
 import {ChatEvent, ChatResponse, T} from "@simplex-chat/types"
+import * as libs from "./libs"
 import * as simplex from "./simplex"
 
+export type Backend = "sqlite" | "postgres"
+
+let loading: {backend: Backend, promise: Promise<void>} | undefined
+
+/**
+ * Resolve (downloading on first use) and load libsimplex for the backend.
+ * One libsimplex per process: the Haskell runtime is initialized once, and another backend is rejected.
+ */
+export function loadLibrary(backend: Backend): Promise<void> {
+  if (loading) {
+    if (loading.backend === backend) return loading.promise
+    return Promise.reject(new Error(`libsimplex already loaded with backend=${loading.backend}; cannot switch to ${backend} in the same process`))
+  }
+  const promise = Promise.all([libs.resolveLibsDir(backend), libs.resolveAddonPath()])
+    .then(([dir, addon]) => simplex.load(addon, libs.libPath(dir)))
+  loading = {backend, promise}
+  // a failed download or load can be retried
+  promise.catch(() => { loading = undefined })
+  return promise
+}
+
 /**
  * Initialize chat controller
  * @param {number} [queueSize] - Size of internal queues, the core default is used when omitted.
diff --git a/packages/simplex-chat-nodejs/src/download-libs.js b/packages/simplex-chat-nodejs/src/download-libs.js
deleted file mode 100644
index fc4560fe81..0000000000
--- a/packages/simplex-chat-nodejs/src/download-libs.js
+++ /dev/null
@@ -1,266 +0,0 @@
-const https = require('https');
-const fs = require('fs');
-const path = require('path');
-const extract = require('extract-zip');
-
-const GITHUB_REPO = 'simplex-chat/simplex-chat-libs';
-const RELEASE_TAG = 'core-7.1.0.11';
-const BACKEND = (process.env.SIMPLEX_BACKEND || process.env.npm_config_simplex_backend || 'sqlite').toLowerCase();
-// A locally built libsimplex, copied into libs/ rather than loaded in place:
-// the addon's RUNPATH is $ORIGIN/../../libs.
-const LIBS_DIR_OVERRIDE = process.env.SIMPLEX_LIBS_DIR || process.env.npm_config_simplex_libs_dir;
-const LIB_NAMES = ['libsimplex.so', 'libsimplex.dylib', 'libsimplex.dll'];
-
-if (BACKEND !== 'sqlite' && BACKEND !== 'postgres') {
-  console.error(`✗ Invalid SIMPLEX_BACKEND: "${BACKEND}". Must be "sqlite" or "postgres".`);
-  process.exit(1);
-}
-
-if (BACKEND === 'postgres' && (process.platform !== 'linux' || process.arch !== 'x64')) {
-  console.error(`✗ SIMPLEX_BACKEND=postgres is only supported on Linux x86_64.`);
-  process.exit(1);
-}
-
-const ROOT_DIR = process.cwd(); // Root of the package being installed
-const LIBS_DIR = path.join(ROOT_DIR, 'libs')
-const INSTALLED_FILE = path.join(LIBS_DIR, 'installed.txt');
-
-// Detect platform and architecture
-function getPlatformInfo() {
-  const platform = process.platform;
-  const arch = process.arch;
-
-  let platformName;
-  let archName;
-
-  if (platform === 'linux') {
-    platformName = 'linux';
-  } else if (platform === 'darwin') {
-    platformName = 'macos';
-  } else if (platform === 'win32') {
-    platformName = 'windows';
-  } else {
-    throw new Error(`Unsupported platform: ${platform}`);
-  }
-
-  if (arch === 'x64') {
-    archName = 'x86_64';
-  } else if (arch === 'arm64') {
-    archName = 'aarch64';
-  } else {
-    throw new Error(`Unsupported architecture: ${arch}`);
-  }
-
-  return { platformName, archName };
-}
-
-// Cleanup on libs version mismatch
-function cleanLibsDirectory() {
-  if (fs.existsSync(LIBS_DIR)) {
-    console.log('Cleaning old libraries...');
-    fs.rmSync(LIBS_DIR, { recursive: true, force: true });
-    fs.mkdirSync(LIBS_DIR, { recursive: true });
-    console.log('✓ Old libraries removed');
-  }
-}
-
-// Check if libraries are already installed with the correct version
-function isAlreadyInstalled() {
-  if (!fs.existsSync(INSTALLED_FILE)) {
-    return false;
-  }
-
-  try {
-    const installedVersion = fs.readFileSync(INSTALLED_FILE, 'utf-8').trim();
-    const expectedVersion = `${RELEASE_TAG}:${BACKEND}`;
-    if (installedVersion === expectedVersion) {
-      console.log(`✓ Libraries version ${RELEASE_TAG}:${BACKEND} already installed`);
-      return true;
-    } else {
-      console.log(`Version mismatch: installed ${installedVersion}, need ${expectedVersion}`);
-      cleanLibsDirectory();
-      return false;
-    }
-  } catch (err) {
-    console.warn(`Could not read installed.txt: ${err.message}`);
-    return false;
-  }
-}
-
-// No version check: the files behind SIMPLEX_LIBS_DIR change on every rebuild.
-function installFromOverride() {
-  if (!fs.existsSync(LIBS_DIR_OVERRIDE)) {
-    throw new Error(`SIMPLEX_LIBS_DIR does not exist: ${LIBS_DIR_OVERRIDE}`);
-  }
-  const lib = LIB_NAMES.find((name) => fs.existsSync(path.join(LIBS_DIR_OVERRIDE, name)));
-  if (!lib) {
-    throw new Error(`No ${LIB_NAMES.join(' / ')} in SIMPLEX_LIBS_DIR: ${LIBS_DIR_OVERRIDE}`);
-  }
-  console.log(`Using libraries from SIMPLEX_LIBS_DIR: ${LIBS_DIR_OVERRIDE}`);
-  cleanLibsDirectory();
-  copyDirSync(LIBS_DIR_OVERRIDE, LIBS_DIR);
-  // Not a release tag: a later install without the variable sees a mismatch
-  // and replaces these files with the released ones.
-  fs.writeFileSync(INSTALLED_FILE, `${LIBS_DIR_OVERRIDE}:${BACKEND}`, 'utf-8');
-  console.log(`✓ Installed ${lib} and its runtime libraries from ${LIBS_DIR_OVERRIDE}`);
-}
-
-async function install() {
-  try {
-    if (LIBS_DIR_OVERRIDE) {
-      installFromOverride();
-      return;
-    }
-
-    // Check if already installed
-    if (isAlreadyInstalled()) {
-      return;
-    }
-
-    const { platformName, archName } = getPlatformInfo();
-    const repoName = GITHUB_REPO.split('/')[1];
-    const backendSuffix = BACKEND === 'postgres' ? '-postgres' : '';
-    const zipFilename = `${repoName}-${platformName}-${archName}${backendSuffix}.zip`;
-    const ZIP_URL = `https://github.com/${GITHUB_REPO}/releases/download/${RELEASE_TAG}/${zipFilename}`;
-    const ZIP_PATH = path.join(ROOT_DIR, zipFilename);
-    const TEMP_EXTRACT_DIR = path.join(ROOT_DIR, '.temp-extract');
-
-    console.log(`Detected: ${platformName} ${archName}`);
-    console.log(`Backend: ${BACKEND}`);
-    console.log(`Downloading: ${zipFilename}`);
-
-    // Create libs directory
-    if (!fs.existsSync(LIBS_DIR)) {
-      fs.mkdirSync(LIBS_DIR, { recursive: true });
-    }
-
-    // Download zip with error handling
-    await downloadFile(ZIP_URL, ZIP_PATH);
-
-    // Extract to temporary directory
-    console.log('Extracting to temporary directory...');
-    if (!fs.existsSync(TEMP_EXTRACT_DIR)) {
-      fs.mkdirSync(TEMP_EXTRACT_DIR, { recursive: true });
-    }
-    await extract(ZIP_PATH, { dir: TEMP_EXTRACT_DIR });
-
-    // Move libs folder contents to final location
-    console.log('Moving libraries to libs/...');
-    const libsSourcePath = path.join(TEMP_EXTRACT_DIR, 'libs');
-
-    if (fs.existsSync(libsSourcePath)) {
-      // Copy all files from libs folder to LIBS_DIR
-      const files = fs.readdirSync(libsSourcePath);
-      files.forEach(file => {
-        const src = path.join(libsSourcePath, file);
-        const dest = path.join(LIBS_DIR, file);
-
-        if (fs.statSync(src).isDirectory()) {
-          copyDirSync(src, dest);
-        } else {
-          fs.copyFileSync(src, dest);
-        }
-      });
-    } else {
-      throw new Error('libs folder not found in zip archive');
-    }
-
-    // Write installed.txt with version
-    fs.writeFileSync(INSTALLED_FILE, `${RELEASE_TAG}:${BACKEND}`, 'utf-8');
-    console.log(`✓ Wrote version ${RELEASE_TAG}:${BACKEND} to installed.txt`);
-
-    // Cleanup
-    fs.rmSync(TEMP_EXTRACT_DIR, { recursive: true, force: true });
-    fs.unlinkSync(ZIP_PATH);
-    console.log('✓ Installation complete');
-  } catch (err) {
-    console.error('✗ Failed:', err.message);
-    process.exit(1);
-  }
-}
-
-// Helper function to recursively copy directories
-function copyDirSync(src, dest) {
-  if (!fs.existsSync(dest)) {
-    fs.mkdirSync(dest, { recursive: true });
-  }
-  const files = fs.readdirSync(src);
-  files.forEach(file => {
-    const srcFile = path.join(src, file);
-    const destFile = path.join(dest, file);
-    if (fs.statSync(srcFile).isDirectory()) {
-      copyDirSync(srcFile, destFile);
-    } else {
-      fs.copyFileSync(srcFile, destFile);
-    }
-  });
-}
-
-function downloadFile(url, dest) {
-  return new Promise((resolve, reject) => {
-    const file = fs.createWriteStream(dest);
-
-    https.get(url, { headers: { 'User-Agent': 'Node.js' } }, (response) => {
-      // Handle redirects
-      if (response.statusCode === 302 || response.statusCode === 301) {
-        file.destroy();
-        fs.unlink(dest, () => {});
-        return downloadFile(response.headers.location, dest)
-          .then(resolve)
-          .catch(reject);
-      }
-
-      // Handle 404
-      if (response.statusCode === 404) {
-        file.destroy();
-        fs.unlink(dest, () => {});
-        reject(new Error(
-          `Release artifact not found (404). Check:\n` +
-          `  - Repository exists: ${url.split('/releases')[0]}\n` +
-          `  - Release tag exists: ${RELEASE_TAG}\n` +
-          `  - Artifact filename is correct`
-        ));
-        return;
-      }
-
-      // Handle 403
-      if (response.statusCode === 403) {
-        file.destroy();
-        fs.unlink(dest, () => {});
-        reject(new Error(
-          `Access denied (403). The repository may be private.\n` +
-          `Set GITHUB_TOKEN environment variable for private repos.`
-        ));
-        return;
-      }
-
-      // Handle other HTTP errors
-      if (response.statusCode < 200 || response.statusCode >= 300) {
-        file.destroy();
-        fs.unlink(dest, () => {});
-        reject(new Error(
-          `HTTP ${response.statusCode}: Failed to download from ${url}`
-        ));
-        return;
-      }
-
-      response.pipe(file);
-
-      file.on('finish', () => {
-        file.close();
-        resolve();
-      });
-
-      file.on('error', (err) => {
-        fs.unlink(dest, () => {});
-        reject(new Error(`File write error: ${err.message}`));
-      });
-    }).on('error', (err) => {
-      file.destroy();
-      fs.unlink(dest, () => {});
-      reject(new Error(`Download error: ${err.message}`));
-    });
-  });
-}
-
-install();
diff --git a/packages/simplex-chat-nodejs/src/libs.ts b/packages/simplex-chat-nodejs/src/libs.ts
new file mode 100644
index 0000000000..013e49f5d0
--- /dev/null
+++ b/packages/simplex-chat-nodejs/src/libs.ts
@@ -0,0 +1,202 @@
+import * as crypto from "crypto"
+import * as fs from "fs"
+import * as http from "http"
+import * as https from "https"
+import * as os from "os"
+import * as path from "path"
+import {pipeline} from "stream/promises"
+import extract = require("extract-zip")
+import type {Backend} from "./core"
+import {ADDON_RELEASE, LIBS_RELEASE, SHA256} from "./release"
+
+const GITHUB_REPO = "simplex-chat/simplex-chat-libs"
+const REQUEST_TIMEOUT_MS = 60_000
+export const MAX_REDIRECTS = 5
+const PLATFORMS: {[platform: string]: {name: string, lib: string} | undefined} = {
+  linux: {name: "linux", lib: "libsimplex.so"},
+  darwin: {name: "macos", lib: "libsimplex.dylib"},
+  win32: {name: "windows", lib: "libsimplex.dll"},
+}
+const ARCHS: {[arch: string]: string | undefined} = {x64: "x86_64", arm64: "aarch64"}
+const SUPPORTED = ["linux-x86_64", "linux-aarch64", "macos-x86_64", "macos-aarch64", "windows-x86_64"]
+
+function unsupported(platform: string, arch: string): Error {
+  return new Error(`Unsupported platform: ${platform}/${arch}; supported: ${SUPPORTED.join(", ")}`)
+}
+
+export function platformTag(platform: string, arch: string): string {
+  const tag = `${PLATFORMS[platform]?.name}-${ARCHS[arch]}`
+  if (!SUPPORTED.includes(tag)) throw unsupported(platform, arch)
+  return tag
+}
+
+function libName(platform: string = process.platform, arch: string = process.arch): string {
+  const lib = PLATFORMS[platform]?.lib
+  if (!lib) throw unsupported(platform, arch)
+  return lib
+}
+
+export function cacheRoot(platform: string, env: NodeJS.ProcessEnv, home: string = os.homedir()): string {
+  if (platform === "darwin") return path.join(home, "Library", "Caches", "simplex-chat")
+  if (platform === "win32") {
+    if (!env.LOCALAPPDATA) throw new Error("LOCALAPPDATA is not set")
+    return path.join(env.LOCALAPPDATA, "simplex-chat")
+  }
+  return path.join(env.XDG_CACHE_HOME || path.join(home, ".cache"), "simplex-chat")
+}
+
+export function libsAsset(backend: Backend, tag: string): string {
+  const suffix = backend === "postgres" ? "-postgres" : ""
+  return `simplex-chat-libs-${tag}${suffix}.zip`
+}
+
+export function addonAsset(tag: string): string {
+  return `simplex-chat-nodejs-${tag}.node`
+}
+
+export function releaseUrl(release: string, asset: string): string {
+  return `https://github.com/${GITHUB_REPO}/releases/download/${release}/${asset}`
+}
+
+function pinnedSha256(asset: string): string {
+  const sha256 = SHA256[asset]
+  if (!sha256) throw new Error(`no SHA-256 is pinned for ${asset}`)
+  return sha256
+}
+
+export function libPath(dir: string): string {
+  return path.join(dir, libName())
+}
+
+export async function resolveLibsDir(
+  backend: Backend,
+  env: NodeJS.ProcessEnv = process.env,
+  platform: string = process.platform,
+  arch: string = process.arch
+): Promise<string> {
+  const lib = libName(platform, arch)
+  if (env.SIMPLEX_LIBS_DIR) {
+    const dir = path.resolve(env.SIMPLEX_LIBS_DIR)
+    if (!fs.existsSync(path.join(dir, lib))) throw new Error(`SIMPLEX_LIBS_DIR has no ${lib}: ${dir}`)
+    return dir
+  }
+  const tag = platformTag(platform, arch)
+  if (backend === "postgres" && tag !== "linux-x86_64") {
+    throw new Error(`postgres backend is only supported on linux-x86_64; current platform is ${tag}`)
+  }
+  const target = path.resolve(cacheRoot(platform, env), LIBS_RELEASE, backend)
+  if (!fs.existsSync(path.join(target, lib))) {
+    const asset = libsAsset(backend, tag)
+    await installLibs(releaseUrl(LIBS_RELEASE, asset), pinnedSha256(asset), target, lib)
+  }
+  return target
+}
+
+export async function resolveAddonPath(
+  env: NodeJS.ProcessEnv = process.env,
+  platform: string = process.platform,
+  arch: string = process.arch
+): Promise<string> {
+  if (env.SIMPLEX_ADDON_PATH) {
+    const file = path.resolve(env.SIMPLEX_ADDON_PATH)
+    if (!fs.existsSync(file)) throw new Error(`SIMPLEX_ADDON_PATH does not exist: ${file}`)
+    return file
+  }
+  if (!ADDON_RELEASE) throw new Error("no prebuilt Node.js add-on is pinned in this version; set SIMPLEX_ADDON_PATH")
+  const asset = addonAsset(platformTag(platform, arch))
+  const target = path.resolve(cacheRoot(platform, env), ADDON_RELEASE, asset)
+  if (!fs.existsSync(target)) await installAddon(releaseUrl(ADDON_RELEASE, asset), pinnedSha256(asset), target)
+  return target
+}
+
+export function installLibs(url: string, sha256: string, target: string, lib: string, timeoutMs: number = REQUEST_TIMEOUT_MS): Promise<void> {
+  return inTempDir(target, async tmp => {
+    process.stderr.write(`Downloading libsimplex from ${url} ...\n`)
+    const zipPath = path.join(tmp, "libs.zip")
+    await download(url, zipPath, timeoutMs)
+    await verifySha256(zipPath, sha256, url)
+    await extract(zipPath, {dir: tmp})
+    const extracted = path.join(tmp, "libs")
+    if (!fs.existsSync(path.join(extracted, lib))) throw new Error(`libs/${lib} missing from ${url}`)
+    await renameInto(extracted, target, path.join(target, lib))
+  })
+}
+
+export function installAddon(url: string, sha256: string, target: string, timeoutMs: number = REQUEST_TIMEOUT_MS): Promise<void> {
+  return inTempDir(target, async tmp => {
+    process.stderr.write(`Downloading the Node.js add-on from ${url} ...\n`)
+    const file = path.join(tmp, path.basename(target))
+    await download(url, file, timeoutMs)
+    await verifySha256(file, sha256, url)
+    await renameInto(file, target, target)
+  })
+}
+
+async function verifySha256(file: string, expected: string, url: string): Promise<void> {
+  const hash = crypto.createHash("sha256")
+  for await (const chunk of fs.createReadStream(file)) hash.update(chunk)
+  const actual = hash.digest("hex")
+  if (actual !== expected) throw new Error(`SHA-256 of ${url} is ${actual}, expected ${expected}`)
+}
+
+// The temp dir is next to the target, so the final rename stays on one filesystem.
+async function inTempDir(target: string, install: (tmp: string) => Promise<void>): Promise<void> {
+  const parent = path.dirname(target)
+  await fs.promises.mkdir(parent, {recursive: true})
+  const tmp = await fs.promises.mkdtemp(path.join(parent, ".download-"))
+  try {
+    await install(tmp)
+  } finally {
+    await fs.promises.rm(tmp, {recursive: true, force: true})
+  }
+}
+
+async function renameInto(from: string, target: string, installed: string): Promise<void> {
+  try {
+    await fs.promises.rename(from, target)
+  } catch (e) {
+    // Another process installed the same version first; its files are identical.
+    // Windows reports renaming onto an existing directory or a loaded file as EPERM.
+    const code = (e as NodeJS.ErrnoException).code
+    const lost = (code === "EEXIST" || code === "ENOTEMPTY" || code === "EPERM") && fs.existsSync(target)
+    if (!lost) throw e
+    if (!fs.existsSync(installed)) {
+      throw new Error(`another process partially populated ${target} but ${path.basename(installed)} is missing; remove it manually and retry`)
+    }
+  }
+}
+
+function download(url: string, dest: string, timeoutMs: number, redirects = 0): Promise<void> {
+  return new Promise((resolve, reject) => {
+    const get = url.startsWith("https:") ? https.get : http.get
+    // Once a response arrives, request errors are ignored: a download settles via pipeline, which
+    // waits for the file to close, so tmp cleanup cannot fail with EBUSY on Windows.
+    let res: http.IncomingMessage | undefined
+    const req = get(url, {headers: {"User-Agent": "simplex-chat-nodejs"}, timeout: timeoutMs}, response => {
+      res = response
+      const status = response.statusCode ?? 0
+      const location = response.headers.location
+      if (status >= 300 && status < 400 && location) {
+        response.resume()
+        if (redirects >= MAX_REDIRECTS) return reject(new Error(`too many redirects downloading ${url}`))
+        let next: URL
+        try {
+          next = new URL(location, url)
+        } catch (e) {
+          return reject(e)
+        }
+        if (next.protocol !== new URL(url).protocol) return reject(new Error(`redirect from ${url} to ${next} changes protocol`))
+        download(next.toString(), dest, timeoutMs, redirects + 1).then(resolve, reject)
+        return
+      }
+      if (status !== 200) {
+        response.resume()
+        return reject(new Error(`HTTP ${status} downloading ${url}`))
+      }
+      pipeline(response, fs.createWriteStream(dest)).then(resolve, reject)
+    })
+    const abort = (err: Error) => (res ? res.destroy(err) : req.destroy(err))
+    req.on("timeout", () => abort(new Error(`timeout downloading ${url}`)))
+    req.on("error", e => { if (!res) reject(e) })
+  })
+}
diff --git a/packages/simplex-chat-nodejs/src/release.ts b/packages/simplex-chat-nodejs/src/release.ts
new file mode 100644
index 0000000000..b56435e210
--- /dev/null
+++ b/packages/simplex-chat-nodejs/src/release.ts
@@ -0,0 +1,19 @@
+// Written by scripts/ci/packages_release.py from the simplex-chat-libs releases.
+
+export const LIBS_RELEASE = "core-7.1.0.11"
+
+export const ADDON_RELEASE: string | undefined = "nodejs-addon-308c0960c707"
+
+export const SHA256: {readonly [asset: string]: string} = {
+  "simplex-chat-libs-linux-aarch64.zip": "d66aa1b30b9fa20225dad8ef75a9c605961e1c0adde2ba0283e2fcac4e15d260",
+  "simplex-chat-libs-linux-x86_64-postgres.zip": "925b3166f969b12082ff8ee659e5f2a9933fe40120deb80c9aa3002a5ba6c803",
+  "simplex-chat-libs-linux-x86_64.zip": "dabad0824e8813ea4a084fbf37e1ba4cf6dcea9cd8ccadc521fec200f246208a",
+  "simplex-chat-libs-macos-aarch64.zip": "aa74608b149fff7508a47eaac4284dcc6d189c6ed8b7c18428df9158bc176a61",
+  "simplex-chat-libs-macos-x86_64.zip": "a0e21457e1077be7f71b46c1c27452945b2cee2b6c50efb0004412ce5b7042ec",
+  "simplex-chat-libs-windows-x86_64.zip": "c01dad574daa101a1cbfd31ddbf2b3d0d986a4a42f97d789d2f878b2050b2b4b",
+  "simplex-chat-nodejs-linux-aarch64.node": "3636a82c56c48229e0326fa03d6ceb5c16dd3afbcc1e86337783dc53a7328d67",
+  "simplex-chat-nodejs-linux-x86_64.node": "55f3479b03fdb57591179ed730da744f1aa362e7529df55221b60028415746e9",
+  "simplex-chat-nodejs-macos-aarch64.node": "a3472872fb0816f435f52ee5471088e6545ebffb95e89fbf8e1ab82275f2d56e",
+  "simplex-chat-nodejs-macos-x86_64.node": "290901f7f227019a8cee3acc832541c930c4926fc08110df25169810a9002f5a",
+  "simplex-chat-nodejs-windows-x86_64.node": "ec689373b4f0fef73253a8328f60b8e902a45ea67e756d42a1f759b44dfd7339",
+}
diff --git a/packages/simplex-chat-nodejs/src/simplex.d.ts b/packages/simplex-chat-nodejs/src/simplex.d.ts
index 1e0ca825a6..0187556afd 100644
--- a/packages/simplex-chat-nodejs/src/simplex.d.ts
+++ b/packages/simplex-chat-nodejs/src/simplex.d.ts
@@ -1,5 +1,6 @@
 // These functions are defined in CPP add-on ../cpp/simplex.cc
 
+export function load(addonPath: string, libPath: string): void
 export function chat_migrate_init(dbPath: string, dbKey: string, confirm: string): Promise<[bigint, string]>
 export function chat_migrate_init_queue(dbPath: string, dbKey: string, confirm: string, queueSize: number): Promise<[bigint, string]>
 export function chat_close_store(ctrl: bigint): Promise<string>
diff --git a/packages/simplex-chat-nodejs/src/simplex.js b/packages/simplex-chat-nodejs/src/simplex.js
index fd26c67438..3bdfb528df 100644
--- a/packages/simplex-chat-nodejs/src/simplex.js
+++ b/packages/simplex-chat-nodejs/src/simplex.js
@@ -1 +1,22 @@
-module.exports = require("../build/Release/simplex")
+// The add-on is downloaded from the libsimplex release, so it is loaded at runtime by core.loadLibrary.
+const NOT_LOADED = "libsimplex is not loaded, call core.loadLibrary(backend) first"
+const BINDINGS = ["chat_migrate_init", "chat_migrate_init_queue", "chat_close_store", "chat_send_cmd", "chat_recv_msg_wait",
+  "chat_write_file", "chat_read_file", "chat_encrypt_file", "chat_decrypt_file"]
+
+let addon
+
+exports.load = (addonPath, libPath) => {
+  if (!addon) {
+    const addonModule = {exports: {}}
+    process.dlopen(addonModule, addonPath)
+    addon = addonModule.exports
+  }
+  addon.load(libPath)
+}
+
+for (const name of BINDINGS) {
+  exports[name] = (...args) => {
+    if (!addon) throw new Error(NOT_LOADED)
+    return addon[name](...args)
+  }
+}
diff --git a/packages/simplex-chat-nodejs/tests/api.unit.test.ts b/packages/simplex-chat-nodejs/tests/api.unit.test.ts
index 8bfecc3347..b4ae456af9 100644
--- a/packages/simplex-chat-nodejs/tests/api.unit.test.ts
+++ b/packages/simplex-chat-nodejs/tests/api.unit.test.ts
@@ -5,6 +5,7 @@ import * as core from "../src/core"
 const user = {userId: 1} as T.User
 
 async function chatWithResponse(response: object): Promise<api.ChatApi> {
+  jest.spyOn(core, "loadLibrary").mockResolvedValue()
   jest.spyOn(core, "chatMigrateInit").mockResolvedValue(BigInt(1))
   jest.spyOn(core, "chatSendCmd").mockResolvedValue(response as ChatResponse)
   return api.ChatApi.init({type: "sqlite", filePrefix: "unused"})
@@ -45,6 +46,7 @@ describe("documented success responses", () => {
 
 describe("startChat lifecycle", () => {
   function chatWithResponses(...responses: object[]): Promise<api.ChatApi> {
+    jest.spyOn(core, "loadLibrary").mockResolvedValue()
     jest.spyOn(core, "chatMigrateInit").mockResolvedValue(BigInt(1))
     jest.spyOn(core, "chatRecvMsgWait").mockImplementation(() => new Promise(resolve => setTimeout(() => resolve(undefined), 10)))
     const send = jest.spyOn(core, "chatSendCmd")
@@ -126,3 +128,24 @@ describe("startChat lifecycle", () => {
     expect(core.chatRecvMsgWait).toHaveBeenCalledWith(BigInt(1), 500_000)
   })
 })
+
+describe("ChatApi.init", () => {
+  it("loads the library for the configured backend before opening the database", async () => {
+    let loaded!: () => void
+    const load = jest.spyOn(core, "loadLibrary").mockReturnValue(new Promise(resolve => { loaded = resolve }))
+    const migrate = jest.spyOn(core, "chatMigrateInit").mockResolvedValue(BigInt(1))
+    const init = api.ChatApi.init({type: "postgres", connectionString: "postgres://unused"})
+    await new Promise(setImmediate)
+    expect(load).toHaveBeenCalledWith("postgres")
+    expect(migrate).not.toHaveBeenCalled()
+    loaded()
+    await init
+    expect(migrate).toHaveBeenCalled()
+  })
+
+  it("rejects an invalid config before loading the library", async () => {
+    const load = jest.spyOn(core, "loadLibrary").mockResolvedValue()
+    await expect(api.ChatApi.init({type: "mysql"} as unknown as api.DbConfig)).rejects.toThrow('Invalid DbConfig: {"type":"mysql"}')
+    expect(load).not.toHaveBeenCalled()
+  })
+})
diff --git a/packages/simplex-chat-nodejs/tests/core.test.ts b/packages/simplex-chat-nodejs/tests/core.test.ts
index 8eb106a5b5..608c3939cd 100644
--- a/packages/simplex-chat-nodejs/tests/core.test.ts
+++ b/packages/simplex-chat-nodejs/tests/core.test.ts
@@ -2,8 +2,19 @@ import {execFile, spawnSync} from "child_process";
 import * as fs from "fs";
 import * as path from "path";
 import {core} from "../src/index";
+import * as libs from "../src/libs";
+import * as simplex from "../src/simplex";
 
 describe("Core tests", () => {
+  let libPath: string;
+  let addonPath: string;
+  // the first run downloads libsimplex
+  beforeAll(async () => {
+    const libsDir = await libs.resolveLibsDir("sqlite");
+    libPath = libs.libPath(libsDir);
+    addonPath = await libs.resolveAddonPath();
+    await core.loadLibrary("sqlite");
+  }, 300000);
   const tmpDir = "./tests/tmp";
   const dbPath = path.join(tmpDir, "simplex_v1");
 
@@ -125,9 +136,10 @@ describe("Core tests", () => {
     const start = Date.now();
     await fs.promises.stat(tmpDir);
     expect(Date.now() - start).toBeLessThan(200);
+    // one receiver thread per controller runs the 4 receives in turn
     await Promise.all(receives);
     await stopAndClose(ctrl);
-  }, 10000);
+  }, 30000);
 
   const itOnLinux = process.platform === "linux" ? it : it.skip;
 
@@ -157,7 +169,7 @@ describe("Core tests", () => {
     expect(elapsed).toBeLessThan(1800);
     await stopAndClose(ctrlA);
     await stopAndClose(ctrlB);
-  }, 10000);
+  });
 
   it("should receive events of one controller in order", async () => {
     const ctrl = await core.chatMigrateInit(dbPath, "key", core.MigrationConfirmation.YesUp);
@@ -171,7 +183,7 @@ describe("Core tests", () => {
       {type: "timedAction", action: "second"}
     ]);
     await stopAndClose(ctrl);
-  }, 10000);
+  });
 
   it("should close the store while a receive is in flight", async () => {
     const ctrl = await core.chatMigrateInit(dbPath, "key", core.MigrationConfirmation.YesUp);
@@ -189,36 +201,70 @@ describe("Core tests", () => {
     expect({closed, timerDelayBelow100ms: timerDelay < 100}).toEqual({closed: false, timerDelayBelow100ms: true});
     await close;
     expect(await receives).toEqual([{event: undefined}, {error: "chat receiver stopped"}]);
-  }, 10000);
+  });
+
+  it("should accept loading libsimplex again from the same path", () => {
+    expect(() => simplex.load(addonPath, libPath)).not.toThrow();
+  });
+
+  it("should refuse to load libsimplex from another path", () => {
+    expect(() => simplex.load(addonPath, path.resolve("other", "libsimplex.so"))).toThrow(`libsimplex already loaded from ${libPath}`);
+  });
+
+  it("should load libsimplex after a failed load and in several workers", () => {
+    const addon = path.resolve(__dirname, "..", "build", "Release", "simplex.node");
+    const childDbPath = path.resolve(tmpDir, "simplex_workers");
+    const script = `
+      const {Worker} = require("worker_threads");
+      const simplex = require(${JSON.stringify(addon)});
+      try { simplex.load(${JSON.stringify(addon)}) } catch (e) { console.log(JSON.stringify(e.message.endsWith("does not export hs_init_with_rtsopts"))) }
+      const load = ${JSON.stringify(`require(${JSON.stringify(addon)}).load(${JSON.stringify(libPath)})`)};
+      const workers = Array.from({length: 4}, () => new Worker(load, {eval: true}));
+      Promise.all(workers.map((w) => new Promise((resolve, reject) => w.on("exit", resolve).on("error", reject))))
+        .then(async (codes) => {
+          simplex.load(${JSON.stringify(libPath)});
+          const [ctrl] = await simplex.chat_migrate_init(${JSON.stringify(childDbPath)}, "key", "yesUp");
+          await simplex.chat_send_cmd(ctrl, "/_stop");
+          console.log(JSON.stringify({codes, closed: await simplex.chat_close_store(ctrl) === ""}));
+        });
+    `;
+    const child = spawnSync(process.execPath, ["-e", script], {timeout: 30000, encoding: "utf8"});
+    if (child.status !== 0 || child.signal !== null) console.log("child stderr:", child.stderr);
+    expect({status: child.status, signal: child.signal, stdout: child.stdout.trim()})
+      .toEqual({status: 0, signal: null, stdout: 'true\n{"codes":[0,0,0,0],"closed":true}'});
+  }, 35000);
 
   it("should let the process exit while a receiver is idle", () => {
     const childDbPath = path.resolve(tmpDir, "simplex_child");
     const script = `
       const simplex = require("./build/Release/simplex.node");
+      simplex.load(${JSON.stringify(libPath)});
       simplex.chat_migrate_init(${JSON.stringify(childDbPath)}, "key", "yesUp")
         .then(([ctrl]) => simplex.chat_recv_msg_wait(ctrl, 1))
         .then((res) => console.log("received " + JSON.stringify(res)));
     `;
-    const child = spawnSync(process.execPath, ["-e", script], {cwd: path.join(__dirname, ".."), timeout: 10000, encoding: "utf8"});
+    const child = spawnSync(process.execPath, ["-e", script], {cwd: path.join(__dirname, ".."), timeout: 25000, encoding: "utf8"});
     if (child.status !== 0 || child.signal !== null) console.log("child stderr:", child.stderr);
     expect({status: child.status, signal: child.signal, stdout: child.stdout.trim()})
       .toEqual({status: 0, signal: null, stdout: 'received ""'});
-  }, 15000);
+  });
 
   it("should not crash when closing stopped controllers repeatedly", async () => {
     const script = `
       const fs = require("fs"), path = require("path");
       const simplex = require("./build/Release/simplex.node");
+      simplex.load(${JSON.stringify(libPath)});
       (async () => {
+        // a new database runs every migration, each committed with a disk flush that takes up to 30 ms on CI runners
+        const dir = fs.mkdtempSync(path.join(${JSON.stringify(path.resolve(tmpDir))}, "close-"));
         for (let i = 0; i < 40; i++) {
-          const dir = fs.mkdtempSync(path.join(${JSON.stringify(path.resolve(tmpDir))}, "close-"));
           const [ctrl] = await simplex.chat_migrate_init(path.join(dir, "simplex"), "key", "yesUp");
           await simplex.chat_send_cmd(ctrl, "/v");
           await simplex.chat_send_cmd(ctrl, "/_stop");
           const res = await simplex.chat_close_store(ctrl);
-          fs.rmSync(dir, {recursive: true, force: true});
           if (res !== "") throw new Error("close failed: " + res);
         }
+        fs.rmSync(dir, {recursive: true, force: true});
       })();
     `;
     const runChild = () => new Promise<{code: number | null, signal: NodeJS.Signals | null, stderr: string}>((resolve) => {
diff --git a/packages/simplex-chat-nodejs/tests/libs.test.ts b/packages/simplex-chat-nodejs/tests/libs.test.ts
new file mode 100644
index 0000000000..c8a65f6bdd
--- /dev/null
+++ b/packages/simplex-chat-nodejs/tests/libs.test.ts
@@ -0,0 +1,466 @@
+import * as fs from "fs"
+import * as http from "http"
+import * as https from "https"
+import * as os from "os"
+import * as path from "path"
+import {AddressInfo} from "net"
+import * as crypto from "crypto"
+import {addonAsset, cacheRoot, installAddon, installLibs, libPath, libsAsset, MAX_REDIRECTS, platformTag, releaseUrl, resolveAddonPath, resolveLibsDir} from "../src/libs"
+import * as release from "../src/release"
+import {main, parseInstallArgs} from "../src/cli"
+import * as libs from "../src/libs"
+import {storedZip} from "./zip"
+
+jest.mock("../src/release", () => ({LIBS_RELEASE: "core-test", ADDON_RELEASE: "nodejs-addon-test", SHA256: {}}))
+
+const LIB = "libtest.so"
+const ADDON = Buffer.from("addon")
+const PINNED = release.SHA256 as {[asset: string]: string}
+
+function sha256(data: Buffer): string {
+  return crypto.createHash("sha256").update(data).digest("hex")
+}
+const LINUX_LIB = "libsimplex.so"
+const {XDG_CACHE_HOME, LOCALAPPDATA, SIMPLEX_LIBS_DIR, SIMPLEX_ADDON_PATH} = process.env
+
+function setEnv(name: string, value: string | undefined): void {
+  if (value === undefined) delete process.env[name]
+  else process.env[name] = value
+}
+
+// A path resolution regression must neither download nor write into the real user cache.
+let home: string
+beforeEach(() => {
+  home = fs.mkdtempSync(path.join(os.tmpdir(), "libs-home-"))
+  jest.spyOn(os, "homedir").mockReturnValue(home)
+  jest.spyOn(https, "get").mockImplementation(() => { throw new Error("unexpected download") })
+  setEnv("XDG_CACHE_HOME", home)
+  setEnv("LOCALAPPDATA", home)
+  setEnv("SIMPLEX_LIBS_DIR", undefined)
+  setEnv("SIMPLEX_ADDON_PATH", undefined)
+})
+afterEach(() => {
+  jest.restoreAllMocks()
+  setEnv("XDG_CACHE_HOME", XDG_CACHE_HOME)
+  setEnv("LOCALAPPDATA", LOCALAPPDATA)
+  setEnv("SIMPLEX_LIBS_DIR", SIMPLEX_LIBS_DIR)
+  setEnv("SIMPLEX_ADDON_PATH", SIMPLEX_ADDON_PATH)
+  fs.rmSync(home, {recursive: true, force: true})
+})
+
+describe("paths", () => {
+  let libsDir: string
+
+  beforeEach(() => {
+    libsDir = fs.mkdtempSync(path.join(os.tmpdir(), "libs-dir-"))
+    fs.writeFileSync(libPath(libsDir), "lib")
+  })
+  afterEach(() => fs.rmSync(libsDir, {recursive: true, force: true}))
+
+  it("uses the Python cache layout", () => {
+    expect(cacheRoot("linux", {XDG_CACHE_HOME: "/x"}, "/h")).toBe(path.join("/x", "simplex-chat"))
+    expect(cacheRoot("linux", {}, "/h")).toBe(path.join("/h", ".cache", "simplex-chat"))
+    expect(cacheRoot("darwin", {}, "/h")).toBe(path.join("/h", "Library", "Caches", "simplex-chat"))
+    expect(cacheRoot("win32", {LOCALAPPDATA: "C:\\L"}, "/h")).toBe(path.join("C:\\L", "simplex-chat"))
+    expect(() => cacheRoot("win32", {}, "/h")).toThrow("LOCALAPPDATA is not set")
+  })
+
+  it.each([
+    ["linux", "x64", "linux-x86_64"],
+    ["linux", "arm64", "linux-aarch64"],
+    ["darwin", "x64", "macos-x86_64"],
+    ["darwin", "arm64", "macos-aarch64"],
+    ["win32", "x64", "windows-x86_64"],
+  ])("tags %s/%s as %s", (platform, arch, tag) => {
+    expect(platformTag(platform, arch)).toBe(tag)
+  })
+
+  it("rejects unsupported platforms", () => {
+    expect(() => platformTag("win32", "arm64")).toThrow("Unsupported platform")
+  })
+
+  it("rejects an unsupported OS with its arch", async () => {
+    await expect(resolveLibsDir("sqlite", {}, "freebsd", "riscv64")).rejects.toThrow("Unsupported platform: freebsd/riscv64; supported: ")
+  })
+
+  it("uses the release URLs", () => {
+    const releases = "https://github.com/simplex-chat/simplex-chat-libs/releases/download"
+    expect(releaseUrl("core-7.1.0.11", libsAsset("sqlite", "macos-aarch64"))).toBe(`${releases}/core-7.1.0.11/simplex-chat-libs-macos-aarch64.zip`)
+    expect(releaseUrl("core-7.1.0.11", libsAsset("postgres", "linux-x86_64"))).toBe(`${releases}/core-7.1.0.11/simplex-chat-libs-linux-x86_64-postgres.zip`)
+    expect(releaseUrl("nodejs-addon-1", addonAsset("windows-x86_64"))).toBe(`${releases}/nodejs-addon-1/simplex-chat-nodejs-windows-x86_64.node`)
+  })
+
+  it("resolves an absolute SIMPLEX_LIBS_DIR", async () => {
+    await expect(resolveLibsDir("postgres", {SIMPLEX_LIBS_DIR: libsDir})).resolves.toBe(libsDir)
+  })
+
+  it("uses SIMPLEX_LIBS_DIR on an unsupported CPU", async () => {
+    fs.writeFileSync(path.join(libsDir, LINUX_LIB), "lib")
+    await expect(resolveLibsDir("sqlite", {SIMPLEX_LIBS_DIR: libsDir}, "linux", "arm")).resolves.toBe(libsDir)
+  })
+
+  it("uses SIMPLEX_LIBS_DIR for postgres outside linux-x86_64", async () => {
+    fs.writeFileSync(path.join(libsDir, LINUX_LIB), "lib")
+    await expect(resolveLibsDir("postgres", {SIMPLEX_LIBS_DIR: libsDir}, "linux", "arm64")).resolves.toBe(libsDir)
+  })
+
+  it("returns a relative SIMPLEX_LIBS_DIR as absolute", async () => {
+    await expect(resolveLibsDir("sqlite", {SIMPLEX_LIBS_DIR: path.relative(process.cwd(), libsDir)})).resolves.toBe(libsDir)
+  })
+
+  it.each([
+    ["linux", "x64", "libsimplex.so"],
+    ["darwin", "arm64", "libsimplex.dylib"],
+    ["win32", "x64", "libsimplex.dll"],
+  ])("looks for the %s library name", async (platform, arch, lib) => {
+    fs.rmSync(libPath(libsDir))
+    await expect(resolveLibsDir("sqlite", {SIMPLEX_LIBS_DIR: libsDir}, platform, arch)).rejects.toThrow(`SIMPLEX_LIBS_DIR has no ${lib}: `)
+  })
+
+  it("returns a relative SIMPLEX_ADDON_PATH as absolute", async () => {
+    const addon = path.join(libsDir, "simplex.node")
+    fs.writeFileSync(addon, "addon")
+    await expect(resolveAddonPath({SIMPLEX_ADDON_PATH: path.relative(process.cwd(), addon)})).resolves.toBe(addon)
+  })
+
+  it("rejects a missing SIMPLEX_ADDON_PATH", async () => {
+    const addon = path.join(libsDir, "simplex.node")
+    await expect(resolveAddonPath({SIMPLEX_ADDON_PATH: addon})).rejects.toThrow(`SIMPLEX_ADDON_PATH does not exist: ${addon}`)
+  })
+
+  it("rejects a SIMPLEX_LIBS_DIR without libsimplex", async () => {
+    fs.rmSync(libPath(libsDir))
+    await expect(resolveLibsDir("sqlite", {SIMPLEX_LIBS_DIR: libsDir})).rejects.toThrow(`SIMPLEX_LIBS_DIR has no ${path.basename(libPath(libsDir))}: ${libsDir}`)
+  })
+})
+
+describe("installLibs", () => {
+  let server: http.Server
+  let base: string
+  let tmp: string
+  const routes: {[p: string]: (res: http.ServerResponse) => void} = {}
+
+  beforeAll(async () => {
+    server = http.createServer((req, res) => {
+      const route = routes[req.url ?? ""]
+      if (route) route(res)
+      else res.writeHead(404).end()
+    })
+    await new Promise<void>(resolve => server.listen(0, "127.0.0.1", resolve))
+    base = `http://127.0.0.1:${(server.address() as AddressInfo).port}`
+  })
+
+  afterAll(() => new Promise<void>(resolve => server.close(() => resolve())))
+
+  beforeEach(() => { tmp = fs.mkdtempSync(path.join(os.tmpdir(), "libs-test-")) })
+  afterEach(() => fs.rmSync(tmp, {recursive: true, force: true}))
+
+  const good = storedZip({[`libs/${LIB}`]: "lib", "libs/libHSdep.so": "dep"})
+  const GOOD_SHA = sha256(good)
+  routes["/good.zip"] = res => res.writeHead(200).end(good)
+  routes["/redirect.zip"] = res => res.writeHead(302, {location: "/good.zip"}).end()
+  const nolib = storedZip({"other/file": "x"})
+  routes["/nolib.zip"] = res => res.writeHead(200).end(nolib)
+  routes["/stall.zip"] = res => { res.writeHead(200); res.write(good.subarray(0, 10)) }
+  let loopRequests = 0
+  routes["/loop.zip"] = res => { loopRequests++; res.writeHead(302, {location: "/loop.zip"}).end() }
+  routes["/to-http.zip"] = res => res.writeHead(302, {location: `${base}/good.zip`}).end()
+  routes["/bad-location.zip"] = res => res.writeHead(302, {location: "http://[bad"}).end()
+  routes["/no-location.zip"] = res => res.writeHead(302).end()
+  routes["/hang.zip"] = () => {}
+  routes["/cross-host.zip"] = res => res.writeHead(302, {location: "https://objects.libs.test/good.zip"}).end()
+  let downloadDirs: string[] = []
+  routes["/observed.zip"] = res => { downloadDirs = leftovers(); res.writeHead(200).end(good) }
+
+  function leftovers(): string[] {
+    return fs.readdirSync(tmp).filter(f => f.startsWith(".download-"))
+  }
+
+  // Serves https requests from a local http route (the requested path by default), recording the requested URLs.
+  function mockHttps(route?: string): string[] {
+    const requested: string[] = []
+    jest.spyOn(https, "get").mockImplementation(((url: string, options: http.RequestOptions, cb: (res: http.IncomingMessage) => void) => {
+      requested.push(url)
+      return http.get(`${base}${route ?? new URL(url).pathname}`, options, cb)
+    }) as unknown as typeof https.get)
+    return requested
+  }
+
+  function renameFails(code: string): void {
+    jest.spyOn(fs.promises, "rename").mockRejectedValue(Object.assign(new Error(code), {code}))
+  }
+
+  beforeEach(() => { jest.spyOn(console, "error").mockImplementation(() => {}) })
+
+  it("follows a redirect and installs libs/", async () => {
+    const target = path.join(tmp, "v1", "sqlite")
+    await installLibs(`${base}/redirect.zip`, GOOD_SHA, target, LIB)
+    expect(fs.readFileSync(path.join(target, LIB), "utf8")).toBe("lib")
+    expect(fs.existsSync(path.join(target, "libHSdep.so"))).toBe(true)
+  })
+
+  it("downloads into a temp dir next to the target", async () => {
+    await installLibs(`${base}/observed.zip`, GOOD_SHA, path.join(tmp, "sqlite"), LIB)
+    expect(downloadDirs).toHaveLength(1)
+    expect(leftovers()).toEqual([])
+  })
+
+  it("stops following a redirect loop", async () => {
+    loopRequests = 0
+    await expect(installLibs(`${base}/loop.zip`, GOOD_SHA, path.join(tmp, "sqlite"), LIB)).rejects.toThrow("too many redirects")
+    expect(loopRequests).toBe(MAX_REDIRECTS + 1)
+    expect(leftovers()).toEqual([])
+  })
+
+  it("follows an https redirect to another host", async () => {
+    const requested = mockHttps()
+    const target = path.join(tmp, "sqlite")
+    await installLibs("https://libs.test/cross-host.zip", GOOD_SHA, target, LIB)
+    expect(requested).toEqual(["https://libs.test/cross-host.zip", "https://objects.libs.test/good.zip"])
+    expect(fs.readFileSync(path.join(target, LIB), "utf8")).toBe("lib")
+  })
+
+  it("rejects a redirect from https to http", async () => {
+    mockHttps("/to-http.zip")
+    await expect(installLibs("https://libs.test/libs.zip", GOOD_SHA, path.join(tmp, "sqlite"), LIB)).rejects.toThrow("changes protocol")
+    expect(leftovers()).toEqual([])
+  })
+
+  it("rejects an invalid redirect location", async () => {
+    await expect(installLibs(`${base}/bad-location.zip`, GOOD_SHA, path.join(tmp, "sqlite"), LIB)).rejects.toThrow("Invalid URL")
+    expect(leftovers()).toEqual([])
+  })
+
+  it("rejects a redirect without a location", async () => {
+    await expect(installLibs(`${base}/no-location.zip`, GOOD_SHA, path.join(tmp, "sqlite"), LIB)).rejects.toThrow("HTTP 302")
+    expect(leftovers()).toEqual([])
+  })
+
+  it("rejects 404 and cleans up", async () => {
+    const target = path.join(tmp, "sqlite")
+    await expect(installLibs(`${base}/missing.zip`, GOOD_SHA, target, LIB)).rejects.toThrow("HTTP 404")
+    expect(leftovers()).toEqual([])
+    expect(fs.existsSync(target)).toBe(false)
+  })
+
+  it("rejects a zip without the lib", async () => {
+    const target = path.join(tmp, "sqlite")
+    await expect(installLibs(`${base}/nolib.zip`, sha256(nolib), target, LIB)).rejects.toThrow(`libs/${LIB} missing`)
+    expect(leftovers()).toEqual([])
+  })
+
+  it("times out a request without a response", async () => {
+    await expect(installLibs(`${base}/hang.zip`, GOOD_SHA, path.join(tmp, "sqlite"), LIB, 200)).rejects.toThrow("timeout")
+    expect(leftovers()).toEqual([])
+  })
+
+  it("times out a stalled download", async () => {
+    const target = path.join(tmp, "sqlite")
+    await expect(installLibs(`${base}/stall.zip`, GOOD_SHA, target, LIB, 200)).rejects.toThrow("timeout")
+    expect(leftovers()).toEqual([])
+  })
+
+  it.each(["sqlite", "postgres"] as const)("installs %s into a relative XDG_CACHE_HOME and returns an absolute path", async backend => {
+    const zip = storedZip({[`libs/${LINUX_LIB}`]: "lib"})
+    const asset = libsAsset(backend, "linux-x86_64")
+    PINNED[asset] = sha256(zip)
+    routes["/libsimplex.zip"] = res => res.writeHead(200).end(zip)
+    const requested = mockHttps("/libsimplex.zip")
+    const cache = path.relative(process.cwd(), path.join(tmp, "cache"))
+    const dir = await resolveLibsDir(backend, {XDG_CACHE_HOME: cache}, "linux", "x64")
+    expect(requested).toEqual([releaseUrl("core-test", asset)])
+    expect(path.isAbsolute(dir)).toBe(true)
+    expect(dir).toBe(path.join(tmp, "cache", "simplex-chat", "core-test", backend))
+    expect(fs.readFileSync(path.join(dir, LINUX_LIB), "utf8")).toBe("lib")
+  })
+
+  it("downloads the add-on into the cache", async () => {
+    routes["/addon.node"] = res => res.writeHead(200).end(ADDON)
+    PINNED[addonAsset("linux-x86_64")] = sha256(ADDON)
+    const requested = mockHttps("/addon.node")
+    const addon = await resolveAddonPath({XDG_CACHE_HOME: tmp}, "linux", "x64")
+    const version = path.join(tmp, "simplex-chat", "nodejs-addon-test")
+    expect(requested).toEqual([releaseUrl("nodejs-addon-test", addonAsset("linux-x86_64"))])
+    expect(addon).toBe(path.join(version, "simplex-chat-nodejs-linux-x86_64.node"))
+    expect(fs.readFileSync(addon, "utf8")).toBe("addon")
+    expect(fs.readdirSync(version)).toEqual(["simplex-chat-nodejs-linux-x86_64.node"])
+  })
+
+  it("does not download a cached add-on", async () => {
+    const requested = mockHttps("/addon.node")
+    const cached = path.join(cacheRoot("darwin", {}), "nodejs-addon-test", "simplex-chat-nodejs-macos-aarch64.node")
+    fs.mkdirSync(path.dirname(cached), {recursive: true})
+    fs.writeFileSync(cached, "addon")
+    await expect(resolveAddonPath({}, "darwin", "arm64")).resolves.toBe(cached)
+    expect(requested).toEqual([])
+  })
+
+  it("rejects a download with another SHA-256 and cleans up", async () => {
+    const target = path.join(tmp, "sqlite")
+    await expect(installLibs(`${base}/good.zip`, sha256(ADDON), target, LIB)).rejects.toThrow(`SHA-256 of ${base}/good.zip is ${GOOD_SHA}, expected ${sha256(ADDON)}`)
+    expect(fs.readdirSync(tmp)).toEqual([])
+  })
+
+  it("rejects an add-on with another SHA-256", async () => {
+    routes["/addon.node"] = res => res.writeHead(200).end(ADDON)
+    const target = path.join(tmp, "simplex.node")
+    await expect(installAddon(`${base}/addon.node`, GOOD_SHA, target)).rejects.toThrow("SHA-256 of")
+    expect(fs.readdirSync(tmp)).toEqual([])
+  })
+
+  it("rejects an asset without a pinned SHA-256", async () => {
+    mockHttps("/good.zip")
+    await expect(resolveLibsDir("sqlite", {XDG_CACHE_HOME: tmp}, "darwin", "x64"))
+      .rejects.toThrow("no SHA-256 is pinned for simplex-chat-libs-macos-x86_64.zip")
+  })
+
+  it("requires SIMPLEX_ADDON_PATH without a pinned add-on release", async () => {
+    jest.replaceProperty(release, "ADDON_RELEASE", undefined)
+    await expect(resolveAddonPath({XDG_CACHE_HOME: tmp}, "linux", "x64"))
+      .rejects.toThrow("no prebuilt Node.js add-on is pinned in this version; set SIMPLEX_ADDON_PATH")
+  })
+
+  it("rejects a missing add-on and cleans up", async () => {
+    const target = path.join(tmp, "simplex.node")
+    await expect(installAddon(`${base}/missing.node`, sha256(ADDON), target)).rejects.toThrow("HTTP 404")
+    expect(fs.readdirSync(tmp)).toEqual([])
+  })
+
+  it("accepts EPERM from rename onto an installed add-on", async () => {
+    routes["/addon.node"] = res => res.writeHead(200).end(ADDON)
+    const target = path.join(tmp, "simplex.node")
+    fs.writeFileSync(target, "addon")
+    renameFails("EPERM")
+    await expect(installAddon(`${base}/addon.node`, sha256(ADDON), target)).resolves.toBeUndefined()
+    expect(leftovers()).toEqual([])
+  })
+
+  it("does not download a cached lib", async () => {
+    const requested = mockHttps("/good.zip")
+    const cached = path.join(tmp, "simplex-chat", "core-test", "postgres")
+    fs.mkdirSync(cached, {recursive: true})
+    fs.writeFileSync(path.join(cached, LINUX_LIB), "lib")
+    await expect(resolveLibsDir("postgres", {XDG_CACHE_HOME: tmp}, "linux", "x64")).resolves.toBe(cached)
+    expect(requested).toEqual([])
+  })
+
+  it("rejects a target populated without the lib", async () => {
+    const target = path.join(tmp, "sqlite")
+    fs.mkdirSync(target)
+    fs.writeFileSync(path.join(target, "other"), "x")
+    await expect(installLibs(`${base}/good.zip`, GOOD_SHA, target, LIB)).rejects.toThrow(`another process partially populated ${target}`)
+    expect(leftovers()).toEqual([])
+  })
+
+  it.each([["linux", "arm64"], ["darwin", "arm64"]])("rejects postgres on %s/%s without downloading", async (platform, arch) => {
+    const requested = mockHttps("/good.zip")
+    await expect(resolveLibsDir("postgres", {XDG_CACHE_HOME: tmp}, platform, arch)).rejects.toThrow("postgres backend is only supported on linux-x86_64")
+    expect(requested).toEqual([])
+  })
+
+  it.each(["EPERM", "EEXIST"])("accepts %s from rename onto an installed target", async code => {
+    const target = path.join(tmp, "sqlite")
+    fs.mkdirSync(target)
+    fs.writeFileSync(path.join(target, LIB), "lib")
+    renameFails(code)
+    await expect(installLibs(`${base}/good.zip`, GOOD_SHA, target, LIB)).resolves.toBeUndefined()
+    expect(leftovers()).toEqual([])
+  })
+
+  it("rethrows EPERM from rename when the target does not exist", async () => {
+    renameFails("EPERM")
+    await expect(installLibs(`${base}/good.zip`, GOOD_SHA, path.join(tmp, "sqlite"), LIB)).rejects.toThrow("EPERM")
+    expect(leftovers()).toEqual([])
+  })
+
+  it("lets concurrent installs share one target", async () => {
+    const target = path.join(tmp, "sqlite")
+    await Promise.all([
+      installLibs(`${base}/good.zip`, GOOD_SHA, target, LIB),
+      installLibs(`${base}/good.zip`, GOOD_SHA, target, LIB),
+    ])
+    expect(fs.readFileSync(path.join(target, LIB), "utf8")).toBe("lib")
+    expect(leftovers()).toEqual([])
+  })
+})
+
+describe("cli", () => {
+  function installWith(libsDir: string, addon: string): Promise<number> {
+    setEnv("SIMPLEX_LIBS_DIR", libsDir)
+    setEnv("SIMPLEX_ADDON_PATH", addon)
+    return main(["install"])
+  }
+
+  it("parses install arguments", () => {
+    expect(parseInstallArgs(["install"])).toBe("sqlite")
+    expect(parseInstallArgs(["install", "--backend", "postgres"])).toBe("postgres")
+    expect(parseInstallArgs(["install", "--backend=postgres"])).toBe("postgres")
+    expect(() => parseInstallArgs(["install", "--backend", "mysql"])).toThrow("invalid backend: mysql")
+    expect(() => parseInstallArgs(["install", "--backend"])).toThrow("argument missing")
+    expect(() => parseInstallArgs(["install", "--force"])).toThrow("Unknown option '--force'")
+    expect(() => parseInstallArgs(["run"])).toThrow("expected command: install")
+    expect(() => parseInstallArgs(["install", "extra"])).toThrow("expected command: install")
+    expect(() => parseInstallArgs([])).toThrow("expected command: install")
+  })
+
+  it("prints the libs directory and the add-on", async () => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "libs-cli-"))
+    const addon = path.join(dir, "simplex.node")
+    fs.writeFileSync(libPath(dir), "lib")
+    fs.writeFileSync(addon, "addon")
+    const log = jest.spyOn(console, "log").mockImplementation(() => {})
+    try {
+      await expect(installWith(dir, addon)).resolves.toBe(0)
+      expect(log.mock.calls).toEqual([[`libsimplex installed at: ${dir}`], [`Node.js add-on installed at: ${addon}`]])
+    } finally {
+      fs.rmSync(dir, {recursive: true, force: true})
+    }
+  })
+
+  it("returns 1 without the add-on", async () => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "libs-cli-"))
+    fs.writeFileSync(libPath(dir), "lib")
+    const log = jest.spyOn(console, "log").mockImplementation(() => {})
+    const error = jest.spyOn(console, "error").mockImplementation(() => {})
+    try {
+      await expect(installWith(dir, path.join(dir, "simplex.node"))).resolves.toBe(1)
+      expect(log).not.toHaveBeenCalled()
+      expect(error).toHaveBeenCalledWith(expect.stringContaining("install failed: SIMPLEX_ADDON_PATH does not exist"))
+    } finally {
+      fs.rmSync(dir, {recursive: true, force: true})
+    }
+  })
+
+  it("returns 1 when install fails", async () => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "libs-cli-"))
+    const addon = path.join(dir, "simplex.node")
+    fs.writeFileSync(addon, "addon")
+    const error = jest.spyOn(console, "error").mockImplementation(() => {})
+    try {
+      await expect(installWith(dir, addon)).resolves.toBe(1)
+      expect(error).toHaveBeenCalledWith(expect.stringContaining("install failed: SIMPLEX_LIBS_DIR has no"))
+    } finally {
+      fs.rmSync(dir, {recursive: true, force: true})
+    }
+  })
+
+  it("installs the requested backend", async () => {
+    const resolve = jest.spyOn(libs, "resolveLibsDir").mockResolvedValue("/libs")
+    jest.spyOn(libs, "resolveAddonPath").mockResolvedValue("/addon.node")
+    jest.spyOn(console, "log").mockImplementation(() => {})
+    await expect(main(["install", "--backend", "postgres"])).resolves.toBe(0)
+    expect(resolve).toHaveBeenCalledWith("postgres")
+  })
+
+  it.each(["--help", "-h"])("prints usage on %s", async flag => {
+    const log = jest.spyOn(console, "log").mockImplementation(() => {})
+    await expect(main(["install", flag])).resolves.toBe(0)
+    expect(log).toHaveBeenCalledWith("usage: simplex-chat install [--backend sqlite|postgres]")
+  })
+
+  it("returns 2 with usage on invalid arguments", async () => {
+    const error = jest.spyOn(console, "error").mockImplementation(() => {})
+    await expect(main(["install", "--backend", "mysql"])).resolves.toBe(2)
+    expect(error).toHaveBeenCalledWith("invalid backend: mysql\nusage: simplex-chat install [--backend sqlite|postgres]")
+  })
+})
diff --git a/packages/simplex-chat-nodejs/tests/loader.test.ts b/packages/simplex-chat-nodejs/tests/loader.test.ts
new file mode 100644
index 0000000000..6a03fe8feb
--- /dev/null
+++ b/packages/simplex-chat-nodejs/tests/loader.test.ts
@@ -0,0 +1,107 @@
+import {spawnSync} from "child_process"
+import * as path from "path"
+
+jest.mock("../src/simplex", () => ({load: jest.fn()}))
+jest.mock("../src/libs", () => ({libPath: jest.requireActual("../src/libs").libPath, resolveLibsDir: jest.fn(), resolveAddonPath: jest.fn()}))
+
+const PACKAGE_DIR = path.join(__dirname, "..")
+const ADDON = path.join(PACKAGE_DIR, "build", "Release", "simplex.node")
+const CHILD_TIMEOUT_MS = 10000
+const LIBS_DIR = path.resolve("libs")
+const SWITCH_ERROR = "libsimplex already loaded with backend=sqlite; cannot switch to postgres in the same process"
+const ADDON_PATH = path.resolve("simplex.node")
+const {libPath} = jest.requireActual<typeof import("../src/libs")>("../src/libs")
+
+function runAddon(script: string): string {
+  const r = spawnSync(process.execPath, ["-e", `const simplex = require(${JSON.stringify(ADDON)});\n${script}`], {encoding: "utf8", timeout: CHILD_TIMEOUT_MS})
+  return `${r.stdout}${r.stderr}status=${r.status} signal=${r.signal}`
+}
+
+function freshCore(): {core: typeof import("../src/core"), resolveLibsDir: jest.Mock, load: jest.Mock} {
+  let modules!: ReturnType<typeof freshCore>
+  jest.isolateModules(() => {
+    const libs = require("../src/libs")
+    libs.resolveAddonPath.mockResolvedValue(ADDON_PATH)
+    modules = {
+      core: require("../src/core"),
+      resolveLibsDir: libs.resolveLibsDir,
+      load: require("../src/simplex").load,
+    }
+  })
+  return modules
+}
+
+describe("native load", () => {
+  it("requires load before every FFI call", () => {
+    const out = runAddon(`
+      for (const name of Object.keys(simplex).filter(n => n !== "load").sort()) {
+        try { simplex[name](); console.log(name + ": no error") } catch (e) { console.log(name + ": " + e.message) }
+      }`)
+    const bindings = ["chat_close_store", "chat_decrypt_file", "chat_encrypt_file", "chat_migrate_init", "chat_migrate_init_queue",
+      "chat_read_file", "chat_recv_msg_wait", "chat_send_cmd", "chat_write_file"]
+    const expected = bindings.map(name => `${name}: libsimplex is not loaded, call core.loadLibrary(backend) first\n`).join("")
+    expect(out).toBe(`${expected}status=0 signal=null`)
+  })
+
+  it("reports the path of a library that cannot be opened", () => {
+    const out = runAddon(`try { simplex.load("/nonexistent/libsimplex.so") } catch (e) { console.log(e.message) }`)
+    expect(out).toContain("cannot load /nonexistent/libsimplex.so")
+  })
+
+  it("rejects a non-string library path", () => {
+    const out = runAddon(`try { simplex.load(1) } catch (e) { console.log(e.name + ": " + e.message) }`)
+    expect(out).toContain("TypeError: Expected string (libPath)")
+  })
+
+  it("rejects a library without the chat exports", () => {
+    const out = runAddon(`try { simplex.load(${JSON.stringify(ADDON)}) } catch (e) { console.log(e.message) }`)
+    expect(out).toContain(`${ADDON} does not export hs_init_with_rtsopts`)
+  })
+})
+
+describe("add-on module", () => {
+  it("rejects FFI calls before the add-on is loaded", () => {
+    const simplex = jest.requireActual<typeof import("../src/simplex")>("../src/simplex")
+    expect(() => simplex.chat_send_cmd(BigInt(1), "/v")).toThrow("libsimplex is not loaded, call core.loadLibrary(backend) first")
+  })
+})
+
+describe("loadLibrary", () => {
+  it("shares one load between concurrent calls", async () => {
+    const {core, resolveLibsDir, load} = freshCore()
+    resolveLibsDir.mockResolvedValue(LIBS_DIR)
+    const first = core.loadLibrary("sqlite")
+    const second = core.loadLibrary("sqlite")
+    expect(second).toBe(first)
+    await Promise.all([first, second])
+    expect(resolveLibsDir).toHaveBeenCalledTimes(1)
+    expect(load.mock.calls).toEqual([[ADDON_PATH, libPath(LIBS_DIR)]])
+  })
+
+  it("refuses to switch backend while the first load is in progress", async () => {
+    const {core, resolveLibsDir} = freshCore()
+    resolveLibsDir.mockResolvedValue(LIBS_DIR)
+    const first = core.loadLibrary("sqlite")
+    await expect(core.loadLibrary("postgres")).rejects.toThrow(SWITCH_ERROR)
+    await first
+  })
+
+  it("keeps a completed load for the process", async () => {
+    const {core, resolveLibsDir, load} = freshCore()
+    resolveLibsDir.mockResolvedValue(LIBS_DIR)
+    await core.loadLibrary("sqlite")
+    await core.loadLibrary("sqlite")
+    await expect(core.loadLibrary("postgres")).rejects.toThrow(SWITCH_ERROR)
+    expect(resolveLibsDir).toHaveBeenCalledTimes(1)
+    expect(load).toHaveBeenCalledTimes(1)
+  })
+
+  it("retries after a failed load", async () => {
+    const {core, resolveLibsDir, load} = freshCore()
+    resolveLibsDir.mockRejectedValueOnce(new Error("HTTP 503")).mockResolvedValue(LIBS_DIR)
+    await expect(core.loadLibrary("sqlite")).rejects.toThrow("HTTP 503")
+    await expect(core.loadLibrary("postgres")).resolves.toBeUndefined()
+    expect(resolveLibsDir.mock.calls).toEqual([["sqlite"], ["postgres"]])
+    expect(load).toHaveBeenCalledTimes(1)
+  })
+})
diff --git a/packages/simplex-chat-nodejs/tests/zip.ts b/packages/simplex-chat-nodejs/tests/zip.ts
new file mode 100644
index 0000000000..547c8c211c
--- /dev/null
+++ b/packages/simplex-chat-nodejs/tests/zip.ts
@@ -0,0 +1,47 @@
+import * as zlib from "zlib"
+
+const LOCAL_FILE_HEADER = 0x04034b50
+const CENTRAL_DIRECTORY_HEADER = 0x02014b50
+const END_OF_CENTRAL_DIRECTORY = 0x06054b50
+const ZIP_VERSION = 20
+const LOCAL_HEADER_SIZE = 30
+const CENTRAL_ENTRY_SIZE = 46
+const END_RECORD_SIZE = 22
+
+export function storedZip(files: {[name: string]: string}): Buffer {
+  const local: Buffer[] = []
+  const central: Buffer[] = []
+  let offset = 0
+  for (const [name, content] of Object.entries(files)) {
+    const nameBuf = Buffer.from(name)
+    const data = Buffer.from(content)
+    const crc = zlib.crc32(data)
+    const header = Buffer.alloc(LOCAL_HEADER_SIZE)
+    header.writeUInt32LE(LOCAL_FILE_HEADER, 0)
+    header.writeUInt16LE(ZIP_VERSION, 4)
+    header.writeUInt32LE(crc, 14)
+    header.writeUInt32LE(data.length, 18)
+    header.writeUInt32LE(data.length, 22)
+    header.writeUInt16LE(nameBuf.length, 26)
+    local.push(header, nameBuf, data)
+    const entry = Buffer.alloc(CENTRAL_ENTRY_SIZE)
+    entry.writeUInt32LE(CENTRAL_DIRECTORY_HEADER, 0)
+    entry.writeUInt16LE(ZIP_VERSION, 4)
+    entry.writeUInt16LE(ZIP_VERSION, 6)
+    entry.writeUInt32LE(crc, 16)
+    entry.writeUInt32LE(data.length, 20)
+    entry.writeUInt32LE(data.length, 24)
+    entry.writeUInt16LE(nameBuf.length, 28)
+    entry.writeUInt32LE(offset, 42)
+    central.push(entry, nameBuf)
+    offset += header.length + nameBuf.length + data.length
+  }
+  const centralBuf = Buffer.concat(central)
+  const end = Buffer.alloc(END_RECORD_SIZE)
+  end.writeUInt32LE(END_OF_CENTRAL_DIRECTORY, 0)
+  end.writeUInt16LE(Object.keys(files).length, 8)
+  end.writeUInt16LE(Object.keys(files).length, 10)
+  end.writeUInt32LE(centralBuf.length, 12)
+  end.writeUInt32LE(offset, 16)
+  return Buffer.concat([...local, centralBuf, end])
+}
diff --git a/packages/simplex-chat-python/src/simplex_chat/_native.py b/packages/simplex-chat-python/src/simplex_chat/_native.py
index 009ff9a1e0..009ec685f4 100644
--- a/packages/simplex-chat-python/src/simplex_chat/_native.py
+++ b/packages/simplex-chat-python/src/simplex_chat/_native.py
@@ -7,6 +7,7 @@ from __future__ import annotations
 
 import ctypes
 import errno
+import hashlib
 import os
 import platform
 import sys
@@ -18,7 +19,7 @@ from ctypes import POINTER, c_char_p, c_int, c_uint8, c_void_p
 from pathlib import Path
 from typing import Any, Literal
 
-from ._version import LIBS_VERSION
+from ._version import LIBS_RELEASE, LIBS_SHA256
 
 Backend = Literal["sqlite", "postgres"]
 
@@ -59,11 +60,14 @@ def _libname() -> str:
     return _LIBNAME[sys.platform]
 
 
-def _libs_url(backend: Backend) -> str:
+def _libs_asset(backend: Backend) -> str:
     suffix = "-postgres" if backend == "postgres" else ""
+    return f"simplex-chat-libs-{_platform_tag()}{suffix}.zip"
+
+
+def _libs_url(backend: Backend) -> str:
     return (
-        f"https://github.com/{_GITHUB_REPO}/releases/download/"
-        f"v{LIBS_VERSION}/simplex-chat-libs-{_platform_tag()}{suffix}.zip"
+        f"https://github.com/{_GITHUB_REPO}/releases/download/{LIBS_RELEASE}/{_libs_asset(backend)}"
     )
 
 
@@ -84,7 +88,7 @@ def _resolve_libs_dir(backend: Backend) -> Path:
             "postgres backend is only supported on linux-x86_64; "
             f"current platform is {_platform_tag()}"
         )
-    target = _cache_root() / f"v{LIBS_VERSION}" / backend
+    target = _cache_root() / LIBS_RELEASE / backend
     if not (target / _libname()).exists():
         _download(target, backend)
     return target
@@ -125,16 +129,21 @@ def _download(target: Path, backend: Backend) -> None:
     what we need and proceed. NEVER rmtree the target: that creates a TOCTOU
     window where another process is reading/loading the file we're deleting.
     """
+    asset = _libs_asset(backend)
+    sha256 = LIBS_SHA256.get(asset)
+    if sha256 is None:
+        raise RuntimeError(f"no SHA-256 is pinned for {asset}")
     target.parent.mkdir(parents=True, exist_ok=True)
     url = _libs_url(backend)
     print(
-        f"Downloading libsimplex ({_platform_tag()}, {backend}) v{LIBS_VERSION} from {url} ...",
+        f"Downloading libsimplex ({_platform_tag()}, {backend}) {LIBS_RELEASE} from {url} ...",
         file=sys.stderr,
         flush=True,
     )
     with tempfile.TemporaryDirectory(dir=target.parent) as tmp:
         zip_path = Path(tmp) / "libs.zip"
         _stream_to_file(url, zip_path, timeout=60.0)
+        _verify_sha256(zip_path, sha256, url)
         with zipfile.ZipFile(zip_path) as zf:
             zf.extractall(tmp)
         # zip layout: <tmp>/libs/libsimplex.* + libHS*.*
@@ -158,6 +167,16 @@ def _download(target: Path, backend: Backend) -> None:
                 ) from e
 
 
+def _verify_sha256(file: Path, expected: str, url: str) -> None:
+    digest = hashlib.sha256()
+    with file.open("rb") as f:
+        while chunk := f.read(_DOWNLOAD_CHUNK):
+            digest.update(chunk)
+    actual = digest.hexdigest()
+    if actual != expected:
+        raise RuntimeError(f"SHA-256 of {url} is {actual}, expected {expected}")
+
+
 _lock = threading.Lock()
 _lib: ctypes.CDLL | None = None
 _libc: ctypes.CDLL | None = None
@@ -230,8 +249,8 @@ def lib_for(backend: Backend) -> ctypes.CDLL:
         if _lib is not None:
             if _backend != backend:
                 raise RuntimeError(
-                    f"libsimplex already loaded with backend={_backend!r}; "
-                    f"cannot switch to {backend!r} in the same process"
+                    f"libsimplex already loaded with backend={_backend}; "
+                    f"cannot switch to {backend} in the same process"
                 )
             return _lib
         libs_dir = _resolve_libs_dir(backend)
diff --git a/packages/simplex-chat-python/src/simplex_chat/_version.py b/packages/simplex-chat-python/src/simplex_chat/_version.py
index c6c24a1e59..0786a81795 100644
--- a/packages/simplex-chat-python/src/simplex_chat/_version.py
+++ b/packages/simplex-chat-python/src/simplex_chat/_version.py
@@ -1,9 +1,16 @@
-"""Single source of truth for both the Python package version and the
-simplex-chat-libs release tag we depend on.
+"""Package version and the simplex-chat-libs release it loads.
 
-Bump both together for normal releases. For wrapper-only fixes use a PEP 440
-post-release: __version__ = "6.5.2.post1", LIBS_VERSION unchanged.
+Written by scripts/ci/packages_release.py: the release PR bumps the version
+and pins new library releases with the SHA-256 of their assets.
 """
 
 __version__ = "7.1.0b6"  # PEP 440 — read by hatchling for wheel metadata
-LIBS_VERSION = "7.1.0-beta.6"  # simplex-chat-libs release tag (no 'v' prefix)
+LIBS_RELEASE = "core-7.1.0.11"  # simplex-chat-libs release tag
+LIBS_SHA256 = {
+    "simplex-chat-libs-linux-aarch64.zip": "d66aa1b30b9fa20225dad8ef75a9c605961e1c0adde2ba0283e2fcac4e15d260",
+    "simplex-chat-libs-linux-x86_64-postgres.zip": "925b3166f969b12082ff8ee659e5f2a9933fe40120deb80c9aa3002a5ba6c803",
+    "simplex-chat-libs-linux-x86_64.zip": "dabad0824e8813ea4a084fbf37e1ba4cf6dcea9cd8ccadc521fec200f246208a",
+    "simplex-chat-libs-macos-aarch64.zip": "aa74608b149fff7508a47eaac4284dcc6d189c6ed8b7c18428df9158bc176a61",
+    "simplex-chat-libs-macos-x86_64.zip": "a0e21457e1077be7f71b46c1c27452945b2cee2b6c50efb0004412ce5b7042ec",
+    "simplex-chat-libs-windows-x86_64.zip": "c01dad574daa101a1cbfd31ddbf2b3d0d986a4a42f97d789d2f878b2050b2b4b",
+}
diff --git a/packages/simplex-chat-python/tests/test_native_cache.py b/packages/simplex-chat-python/tests/test_native_cache.py
index 6c4f2a923d..ec10879077 100644
--- a/packages/simplex-chat-python/tests/test_native_cache.py
+++ b/packages/simplex-chat-python/tests/test_native_cache.py
@@ -1,10 +1,12 @@
+import hashlib
 import zipfile
 from pathlib import Path
 
 import pytest
 
-from simplex_chat._native import _cache_root, _download, _resolve_libs_dir
-from simplex_chat._version import LIBS_VERSION
+from simplex_chat import _native
+from simplex_chat._native import _cache_root, _download, _resolve_libs_dir, lib_for
+from simplex_chat._version import LIBS_RELEASE
 
 
 def test_cache_root_linux(tmp_path, monkeypatch):
@@ -42,7 +44,7 @@ def test_resolve_downloads_when_missing(tmp_path, monkeypatch):
 
     monkeypatch.setattr("simplex_chat._native._download", fake_download)
     libs_dir = _resolve_libs_dir("sqlite")
-    assert libs_dir == tmp_path / "simplex-chat" / f"v{LIBS_VERSION}" / "sqlite"
+    assert libs_dir == tmp_path / "simplex-chat" / LIBS_RELEASE / "sqlite"
     assert called["backend"] == "sqlite"
     assert (libs_dir / "libsimplex.so").exists()
 
@@ -50,7 +52,7 @@ def test_resolve_downloads_when_missing(tmp_path, monkeypatch):
 def test_resolve_uses_cache_on_second_call(tmp_path, monkeypatch):
     monkeypatch.setenv("XDG_CACHE_HOME", str(tmp_path))
     monkeypatch.setattr("sys.platform", "linux")
-    cached = tmp_path / "simplex-chat" / f"v{LIBS_VERSION}" / "sqlite"
+    cached = tmp_path / "simplex-chat" / LIBS_RELEASE / "sqlite"
     cached.mkdir(parents=True)
     (cached / "libsimplex.so").touch()
     # Should NOT call _download — use the cached file.
@@ -67,9 +69,8 @@ def test_postgres_on_macos_rejected(monkeypatch):
         _resolve_libs_dir("postgres")
 
 
-def test_atomic_install(tmp_path, monkeypatch):
-    """Build a fake libs zip, mock _stream_to_file, verify extraction + atomic rename."""
-    # Build zip: libs/libsimplex.so + libs/libHS-stub.so
+def fake_libs_zip(tmp_path, monkeypatch, sha256=None) -> None:
+    """Serve a zip with libs/libsimplex.so + libs/libHS-stub.so, pinned with `sha256` (its own by default)."""
     src = tmp_path / "src" / "libs"
     src.mkdir(parents=True)
     (src / "libsimplex.so").write_text("fake-so")
@@ -84,20 +85,54 @@ def test_atomic_install(tmp_path, monkeypatch):
 
         shutil.copy(zip_path, dest)
 
+    pinned = sha256 or hashlib.sha256(zip_path.read_bytes()).hexdigest()
     monkeypatch.setattr("simplex_chat._native._stream_to_file", fake_stream)
     monkeypatch.setattr("simplex_chat._native._platform_tag", lambda: "linux-x86_64")
+    monkeypatch.setattr(
+        "simplex_chat._native.LIBS_SHA256", {"simplex-chat-libs-linux-x86_64.zip": pinned}
+    )
 
+
+def test_atomic_install(tmp_path, monkeypatch):
+    fake_libs_zip(tmp_path, monkeypatch)
     target = tmp_path / "out"
     _download(target, "sqlite")
     assert (target / "libsimplex.so").read_text() == "fake-so"
     assert (target / "libHS-stub.so").read_text() == "fake-hs"
 
 
+def test_download_rejects_another_sha256(tmp_path, monkeypatch):
+    fake_libs_zip(tmp_path, monkeypatch, sha256="0" * 64)
+    target = tmp_path / "out"
+    with pytest.raises(RuntimeError, match=f"expected {'0' * 64}"):
+        _download(target, "sqlite")
+    assert sorted(p.name for p in tmp_path.iterdir()) == ["fake-libs.zip", "src"]
+
+
+def test_download_requires_pinned_sha256(tmp_path, monkeypatch):
+    fake_libs_zip(tmp_path, monkeypatch)
+    with pytest.raises(
+        RuntimeError, match="no SHA-256 is pinned for simplex-chat-libs-linux-x86_64-postgres.zip"
+    ):
+        _download(tmp_path / "out", "postgres")
+
+
 def test_libc_on_windows_is_ucrt(monkeypatch):
     loaded: list[str | None] = []
     monkeypatch.setattr("sys.platform", "win32")
     monkeypatch.setattr("ctypes.CDLL", lambda name: loaded.append(name))
-    from simplex_chat import _native
-
     _native._load_libc()
     assert loaded == ["ucrtbase"]
+
+
+def test_lib_for_rejects_backend_switch(monkeypatch):
+    monkeypatch.setattr(_native, "_lib", object())
+    monkeypatch.setattr(_native, "_backend", "sqlite")
+    monkeypatch.setattr(
+        _native, "_resolve_libs_dir", lambda _: pytest.fail("must not resolve libs")
+    )
+    with pytest.raises(RuntimeError) as exc:
+        lib_for("postgres")
+    assert str(exc.value) == (
+        "libsimplex already loaded with backend=sqlite; cannot switch to postgres in the same process"
+    )
diff --git a/packages/simplex-chat-python/tests/test_native_url.py b/packages/simplex-chat-python/tests/test_native_url.py
index 12270c9db1..f1d60d5170 100644
--- a/packages/simplex-chat-python/tests/test_native_url.py
+++ b/packages/simplex-chat-python/tests/test_native_url.py
@@ -3,7 +3,7 @@ from unittest.mock import patch
 import pytest
 
 from simplex_chat._native import _libname, _libs_url, _platform_tag
-from simplex_chat._version import LIBS_VERSION
+from simplex_chat._version import LIBS_RELEASE
 
 
 @patch("sys.platform", "linux")
@@ -45,7 +45,7 @@ def test_url_sqlite(_):
     assert (
         _libs_url("sqlite")
         == "https://github.com/simplex-chat/simplex-chat-libs/releases/download/"
-        f"v{LIBS_VERSION}/simplex-chat-libs-linux-x86_64.zip"
+        f"{LIBS_RELEASE}/simplex-chat-libs-linux-x86_64.zip"
     )
 
 
@@ -54,5 +54,5 @@ def test_url_postgres(_):
     assert (
         _libs_url("postgres")
         == "https://github.com/simplex-chat/simplex-chat-libs/releases/download/"
-        f"v{LIBS_VERSION}/simplex-chat-libs-linux-x86_64-postgres.zip"
+        f"{LIBS_RELEASE}/simplex-chat-libs-linux-x86_64-postgres.zip"
     )
diff --git a/plans/2026-10-10-desktop-address-no-profile-crash.md b/plans/2026-10-10-desktop-address-no-profile-crash.md
new file mode 100644
index 0000000000..c51eeaff04
--- /dev/null
+++ b/plans/2026-10-10-desktop-address-no-profile-crash.md
@@ -0,0 +1,99 @@
+# Crash in the SimpleX address screen when there is no profile
+
+## Problem
+
+A Windows user who uses the desktop app only through a linked mobile reported this crash:
+
+```
+java.lang.NullPointerException
+  at chat.simplex.common.views.chatlist.ComposableSingletons$UserPickerKt$lambda$-1608374373$1.invoke(UserPicker.kt:223)
+  at chat.simplex.common.views.chatlist.UserPickerKt$UserPicker$6$showCustomModal$1$1$1.invoke(UserPicker.kt:157)
+  at chat.simplex.common.views.helpers.ModalManager$showInView$4$1$1.invoke(ModalView.kt:218)
+```
+
+The "SimpleX address" screen crashes whenever it is shown while there is no active user.
+
+## Solution summary
+
+When there is no current user, the address modal closes itself instead of composing `UserAddressView`. It closes only while it is the top modal, so it does not close a different screen. The new `ModalManager.isLastModal` checks that.
+
+The "Chat preferences" row, which in paths 1 and 2 below left an invisible modal instead of crashing, closes itself the same way.
+
+## Technical design
+
+### Cause
+
+The "SimpleX address" row of the user picker opens `UserAddressView` with `shareViaProfile = it.currentUser.value!!.addressShared`. The modal content reads `currentUser`, so it recomposes whenever `currentUser` changes. It throws whenever it is composed while `currentUser` is null, that is, when there is no active user. A desktop that was only used with a linked mobile has no active user of its own.
+
+The screen can be shown in that state in three ways:
+
+1. **The mobile disconnects.** The screen was opened for the mobile's profile, and then the mobile disconnects. `switchUIRemoteHost(null)` sets `currentUser` to the local user, which is null, and the left-panel modals stay open.
+   - If the address screen is on top, it crashes when it recomposes.
+   - If another screen is on top of it, it crashes when the user goes back to it.
+
+   `UserAddressView` closes itself when the user changes (`KeyChangeEffect` on the user), but with a null user it is never reached.
+2. **The row is clicked with no active user.** With no active profile, the user picker still shows the "Create SimpleX address" row. With no profile and no mobile in use, the picker even opens by itself, at startup or when the state begins while no left-panel screen is open (`App.kt`, `desktopNoUserNoRemote`). Clicking the row crashes immediately.
+
+   At startup, no profile and no connected mobile needs a mobile that was linked before; with no linked mobile, startup shows onboarding instead (`Core.kt`).
+
+   No active user also follows from deleting the active profile when no other visible profile remains, including the only profile, and including the last visible profile of a connected mobile. `doRemoveUser` (`UserProfilesView.kt`) then calls `changeActiveUser_` with no user, which sets `currentUser` from `apiGetActiveUser`. After the deletion there is no active user, so it is null.
+
+3. **The self-destruct passcode is entered while the screen is open.** `deleteStorageAndRestart` (`LocalAuthView.kt`) calls `reinitChatController`. That calls `initChatController`, which sets `currentUser` from the new empty database to null (`Core.kt`). Only later does `deleteStorageAndRestart` create the new profile and call `closeAllModalsEverywhere`.
+   - On Android, the shared modal stack stays composed under the lock screen, so the address screen can recompose with a null user and throw. It throws only if a frame falls after `currentUser` becomes null and before onboarding replaces the main screen, so it does not happen on every run. Android's main loop catches exceptions (`SimplexApp.kt`). `GlobalExceptionsHandler` (`UI.android.kt`) then closes the top modal, recreates the activity and posts a crash alert, and the self-destruct flow hides all alerts at its end, so no crash is visible.
+   - On desktop, `initChatController` replaces the main screen with the splash screen shortly afterwards (`localUserCreated = null`), so the crash needs a frame to fall in that short window. This was not tested.
+
+The "Chat preferences" row has the same cause without the crash. It opens `PreferencesView(m, m.currentUser.value ?: return@showCustomModal, close)`, so with no active user the modal content returns early. `PreferencesView` closes itself when the user changes (`KeyChangeEffect` on the user, `Preferences.kt`), but with a null user it is never reached either. The modal stays on the left-panel stack with nothing drawn and no back button, in paths 1 and 2 above.
+
+### Self-closing modal
+
+Both rows use the same effect. `ModalManager.closeModal` closes the top modal that is not already being removed, whichever modal calls it. So the effect closes only when `ModalManager.isLastModal(data)` reports that this modal is that one.
+
+The effect is keyed on the modal and on the modal count of `ModalManager.start` (the left panel on desktop, the shared stack on Android). So it checks again when the count changes, or when its composition is reused for another modal, while this content is still composed. Other than the top modal, a modal stays composed only while it animates out (250 ms, longer if the animation is interrupted). For example, a quick second click on the row reuses the composition of the first modal, which is still animating out.
+
+A modal that is covered after an animation ends is disposed. It is composed afresh when it becomes the top again, for example when the user goes back to it, and the effect runs then.
+
+With the `isLastModal` check, the effect does not close a different screen, such as one opened just before or just after the address screen during an animation. This holds for stack changes on the main thread. As before, `ModalManager` is not synchronized with background calls such as `closeAllModalsEverywhere`.
+
+### Visible behaviour
+
+When there is no active user:
+- Clicking either row now only hides the picker, as opening any modal does. The modal closes itself, and the picker is not reopened.
+- After the mobile disconnects with the address or preferences screen open, the picker does not reopen by itself (observed in testing). When the state with no user and no mobile in use begins, the app checks for open left-panel modals, and the modal closes itself only after that check. Master does the same when any other left-panel screen is open.
+
+The change is in common code. On Android the user picker is not reachable without an active user, because deleting the last visible profile returns to onboarding. In the self-destruct case on Android, the screen can no longer throw, so `GlobalExceptionsHandler` does not have to recover. With an active user, behaviour does not change on any platform.
+
+### Security
+
+The change is UI-only and crosses no trust boundary: it reads local state and closes a local screen. It sends nothing and changes no stored data.
+
+### Rejected alternative
+
+An early `return@showCustomModal`, as the "Chat preferences" row did, would avoid the crash. But it would leave an invisible modal on the left-panel stack, with no back button. It stays until something closes the left-panel modals, such as a click on the centre panel. If a profile is created first, it comes back as the address screen. The "Chat preferences" row has this behaviour on master; this change gives it the self-closing effect too.
+
+## Implementation steps
+
+1. `views/helpers/ModalView.kt`: add `ModalManager.isLastModal(data)`, true when `data` belongs to the top modal that is not being removed.
+2. `views/chatlist/UserPicker.kt`: in the "SimpleX address" row, compose `UserAddressView` only when `currentUser` is not null. Otherwise run `LaunchedEffect(modal, ModalManager.start.modalCount.value)`, which closes the modal when `isLastModal(modal)` is true. Do the same in the "Chat preferences" row for `PreferencesView`.
+3. Documentation, under `apps/multiplatform/`:
+   - `spec/client/navigation.md`: list `isLastModal` among the `ModalManager` methods.
+   - `spec/client/chat-list.md`, UserPicker section: describe the address and preferences rows closing themselves with no active user.
+   - `product/views/user-profiles.md`: describe both rows with no active profile.
+
+## Verification
+
+Desktop AppImages from master and from this branch, each with a fresh database, unless stated otherwise. The v7.1.0-beta.6 CLI (core v7.1.0.10) acts as the linked mobile (`/connect remote ctrl`). "Leftover" is checked by creating a profile afterwards: a leftover modal reappears as the address screen when onboarding finishes.
+
+- master (at the merge base), case 1: NPE at `UserPicker.kt:223`.
+- master (at the merge base), case 2: NPE at `UserPicker.kt:223` with the reported stack (`showCustomModal` 157, `ModalView.kt:218`).
+- This branch, case 1 with the address screen on top: no crash, and the screen closes.
+- This branch, case 1 with the "Address or 1-time link?" screen (opened from "SimpleX address or 1-time link?") on top: no crash. That screen stays open after the disconnect, as on master. Going back closes the address screen and shows the chat list.
+- This branch, case 2, double click (seven runs, 8 to 40 ms apart): no crash, and no leftover. With `LaunchedEffect(Unit)` the address screen reappeared after onboarding in 2 of 3 runs at 30 ms.
+- This branch, case 2, "Settings" then "Create SimpleX address" 100 ms apart: no crash, and Settings stays open. With the close keyed on the modal count but without the `isLastModal` check, Settings was closed too.
+- This branch, with a local profile: the address screen opens and closes normally. When the mobile disconnects with its address screen open, the screen closes through `UserAddressView`'s own user-change effect, and the app returns to the local profile.
+- "Chat preferences", desktop with no profile, the same CLI linked as the mobile:
+  - Preferences open, then the mobile disconnects. Before this change the screen disappeared, and after a profile was created it came back as "Your preferences" over the chat. With this change it does not come back, and there is no crash.
+  - Row clicked with no profile and no mobile: nothing opens, and nothing comes back after a profile is created.
+  - With a profile: the screen opens and closes normally.
+- Android (Waydroid: Android 13 with arm64 translation), debug APKs of master and of this branch, fresh app data, case 3 with the address screen opened from the user picker:
+  - master, two runs: in one, logcat shows `App crashed, thread name: main` with the NPE at `UserPicker.kt:223`; in the other, no exception. No crash is visible in either, as in an earlier manual test.
+  - This branch: one run completed to the new profile with no exception in logcat. As master did not throw on every run, this checks for no new failure rather than proving the fix. An earlier run hung during self-destruct, with the main thread, a coroutine thread and a Haskell worker all waiting for the native allocator lock under arm64 translation.
diff --git a/plans/2026-10-11-markdown-file-viewer.md b/plans/2026-10-11-markdown-file-viewer.md
new file mode 100644
index 0000000000..c5152ea485
--- /dev/null
+++ b/plans/2026-10-11-markdown-file-viewer.md
@@ -0,0 +1,319 @@
+# Markdown file viewer: implementation plan
+
+Markdown files from chats are viewed in the Android, desktop and iOS apps, formatted or as text.
+
+## 1. Files that qualify
+
+By name and size only:
+
+```
+name      file.fileName ends with .md or .markdown, case-insensitive
+size      file.fileSize <= MAX_MARKDOWN_VIEW_SIZE
+```
+
+```
+MAX_MARKDOWN_VIEW_SIZE    1_048_576
+Kotlin                    views/chat/item/MarkdownFileView.kt, private
+iOS                       Shared/Views/Chat/ChatItem/MarkdownFileView.swift, private
+```
+
+Function, in each viewer file:
+
+```
+Kotlin    fun isMarkdownFile(file: CIFile): Boolean
+iOS       func isMarkdownFile(_ file: CIFile) -> Bool
+```
+
+Other files, and Markdown files over the limit: tap actions unchanged.
+
+## 2. Tap and long press
+
+Tap on a qualifying file, every platform:
+
+```
+file status                     action
+received or sent, file loaded   viewer
+desktop with a linked mobile    loadRemoteFile, then viewer
+RcvInvitation, RcvAborted       reception started; viewer shown on completion, in the same place
+other statuses                  as now: waiting alerts, error alerts
+```
+
+Long press: the existing Save item of the item menu (`ChatItemView.kt`, `ChatView.swift`).
+
+Places:
+
+```
+Kotlin    CIFileView.kt, onClick and fileAction
+iOS       CIFileView.swift, fileAction
+```
+
+- Android: "Open with" of `SaveOrOpenFileMenu` is not shown for qualifying files; "Share" in the item menu stays.
+- Present locally: `getLoadedFilePath(file)` (Kotlin), `getLoadedFileSource(file)` (iOS), as for other files.
+
+## 3. Open on completion
+
+In master (#7700), for images, voice messages, video and files. The viewer adds only the Markdown case to the file tap action.
+
+A tap that starts reception registers the file. On completion the tap action of the received file is performed:
+
+```
+image    full screen view
+voice    playback
+video    playback; locally encrypted: decrypted first; chat list preview: full screen player
+file     Markdown: viewer
+         other: share sheet (iOS), open/save menu (Android), save dialog (desktop)
+```
+
+Kotlin, chat model:
+
+```
+fileToOpen                              file ID of the last tapped file
+                                        inChatList: tap in a chat list preview
+openWhenReceived(file, inChatList)      sets fileToOpen
+receivedFileToOpen(file, inChatList)    false unless fileToOpen has file.fileId and inChatList, and the file is loaded
+                                        then fileToOpen cleared
+                                        chat view: true
+                                        chat list preview: true on desktop, or when no chat is open
+```
+
+Item views: `OpenWhenReceivedEffect(file, inChatList, open)` (`CIFileView.kt`), on a change of `file.loaded`; in `CIImageView.kt`, `CIVoiceView.kt`, `CIVideoView.kt`, `CIFileView.kt`.
+
+iOS, chat model:
+
+```
+fileToOpen                      file ID of the last tapped file
+                                chat ID at the tap; nil in the chat list
+                                open callback of the tapped view
+openWhenReceived(file, open)    sets fileToOpen
+receivedFileToOpen(file)        fileToOpen has file.fileId, and the open chat is the chat at the tap
+openReceivedFile(file)          receivedFileToOpen rechecked; fileToOpen cleared; open(file)
+```
+
+Event `rcvFileComplete` (`SimpleXAPI.swift`): for the active user, when `receivedFileToOpen(file)`: `openReceivedFile(file)` on the main actor.
+
+`fileToOpen` is replaced by a later tap.
+
+## 4. Reading in memory
+
+The file is read and decoded off the main thread, before the viewer is shown.
+
+```
+Kotlin    withLongRunningApi
+          encrypted: readCryptoFile(path, cryptoArgs) (CryptoFile.kt:36)
+          plain: File(path).readBytes()
+          text: UTF-8 CharsetDecoder, REPLACE with "?"
+          parsed: parseMarkdownFlow (renderer), once, before the viewer is shown
+iOS       Task
+          getFileData(path, cryptoArgs) (SimpleXChat/ImageUtils.swift:41)
+          text: Unicode.UTF8.ForwardParser, "?" for each invalid byte
+          html: MarkdownParser with an .html modifier, raw HTML escaped
+```
+
+Text decoding, as the core safeDecodeUtf8 (simplexmq Util.hs:383-386):
+
+```
+invalid UTF-8    "?" for each invalid byte
+C0 controls      U+0000-U+001F replaced with "?", except tab, line feed, carriage return
+line endings     CRLF and CR are line breaks: Kotlin text.lines(); iOS: replaced with LF before parsing
+```
+
+Limits, checked before rendering; over a limit: text view only, the switch hidden:
+
+```
+line length          15 000 characters
+nesting              Kotlin: 32 levels of the parsed tree; iOS: 16 levels estimated from line prefixes
+link nesting         iOS: 4 open square brackets, counted until an empty line
+table rows           200
+parse error          Kotlin: text view only
+```
+
+Text view: lines longer than 15 000 characters are split.
+
+- `readCryptoFile`: core `chatReadFile` (`Mobile/File.hs:87`); the file is decrypted by `CF.readFile` into memory.
+- Bytes, text and HTML are held only in memory, in the viewer's state.
+- Read error: alert with the error text; the viewer is not shown.
+- File absent: "File not found" alert (Kotlin); no action (iOS), as for other files.
+
+## 5. Viewer
+
+```
+presentation   Android: full screen, like the image viewer
+               desktop: over the conversation
+               iOS: sheet
+toolbar        back (Kotlin)
+               switch between the formatted and the text view
+               save
+title          file name
+preference     view chosen last; default formatted
+```
+
+### 5.1. Kotlin
+
+Renderer: `com.mikepenz:multiplatform-markdown-renderer` and `-m2`, 0.27.0 → 0.34.0 (`common/build.gradle.kts:80-81`).
+
+```
+0.34.0 dependencies   kotlin-stdlib 2.1.20, org.jetbrains:markdown 0.7.3, kotlinx-collections-immutable 0.3.8
+compose               compileOnly; built with Compose 1.8.0, the app uses 1.8.2
+app                   Kotlin 2.1.20, Compose Multiplatform 1.8.2
+added                 table component, LazyMarkdownSuccess, success lambda of Markdown()
+```
+
+New file `views/chat/item/MarkdownFileView.kt`:
+
+```
+isMarkdownFile(file)
+showMarkdownFile(file)     loadRemoteFile if needed, read, ModalManager.center.showModal
+MarkdownFileView           formatted or text view by appPrefs.markdownFileTextView
+```
+
+Formatted view:
+
+```
+renderer      m2 Markdown(state), GFM flavour, the parsed state from showMarkdownFile
+styles        documentMarkdownStyle(h1) (OperatorView.kt), shared with the operator conditions
+              h1: typography h2, 26 sp, bold
+lazy          success lambda: LazyColumnWithScrollBar, title item, one item per top-level node: MarkdownElement in a Column
+links         LocalUriHandler: markdownFileUriHandler
+code spans    annotator: source text between the backticks; inlineCode style, inlineCodeBackground
+images        data:image URIs: DataImageTransformer, decoded off the main thread by decodeBase64Image
+              other image links: the annotator appends the source text; nothing is fetched
+tables        default table component
+```
+
+Links, classified by the core markdown parser (`parseToMarkdown`), as message links:
+
+```
+SimplexLink              openVerifiedSimplexUri
+Uri, http or https       openBrowserAlert
+other                    showInvalidLinkAlert
+```
+
+Displayed link targets (`displayedUri`, Kotlin and iOS; also in message link alerts and the external-link alert):
+
+```
+format characters (Cf)        [U+XXXX]
+non-ASCII in the authority    [U+XXXX]
+HTML                          not parsed (parseHtml = false)
+```
+
+Images:
+
+```
+decode          decodeBase64Image(base64, window width): power-of-two subsampling, both sides kept at or above the window width
+                Android: decodeSampledBitmapFromByteArray, 4320 px per side
+                desktop: decodeBoundedBufferedImage, 16384 px per side, 4320 × 4320 decoded pixels
+budget          2160 × 4320 decoded pixels per document; images over the budget are not shown
+cache           per document, in the transformer; the desktop base64BitmapCache is not used
+```
+
+Text view: `LazyColumnWithScrollBar`, title item, one monospace `Text` per line, inside `SelectionContainer`; format characters shown as `[U+XXXX]` markers.
+
+Bidi controls (U+061C, U+200E, U+200F, U+202A-U+202E, U+2066-U+2069): warning under the title, both views.
+
+Toolbar end buttons:
+
+```
+switch   ic_code in the formatted view, ic_article in the text view; sets appPrefs.markdownFileTextView; hidden over the limits
+save     ic_download; rememberFileChooserLauncher; copyBytesToFile(ByteArrayInputStream(bytes)) (Files.kt:65)
+```
+
+`OperatorView.kt`:
+
+```
+markdownColor(linkText = primary)   markdownColor(); link colour moved to the link text style (linkText deprecated in 0.34.0)
+ConditionsMarkdown styles           moved to documentMarkdownStyle(h1): DocumentMarkdownStyle (colors, typography, components, padding)
+                                    h1: body1 by default, as in the conditions
+```
+
+`SimpleXAPI.kt`: `markdownFileTextView = mkBoolPreference(SHARED_PREFS_MARKDOWN_FILE_TEXT_VIEW, false)`.
+
+Centre placement on desktop: modals are drawn over the open conversation.
+
+```
+ModalView.kt             showCustomModal: chatId is not changed
+App.kt                   CenterPartOfScreen: ModalManager.center.showInView() after ChatView
+ChatListNavLinkView.kt   "Set contact name": back button on desktop
+```
+
+`moko-resources/base/strings.xml`:
+
+```
+markdown_formatted_view      Formatted view
+markdown_text_view           Text view
+markdown_file_bidi_warning   This file has text direction characters. The text can be shown in a different order than it is written.
+```
+
+### 5.2. iOS
+
+New file `Shared/Views/Chat/ChatItem/MarkdownFileView.swift`, added to the SimpleX target in `project.pbxproj`.
+
+```
+isMarkdownFile(file)
+showMarkdownFile(file)     read, parse, showAppSheet
+MarkdownFileView           NavigationView; toolbar: switch, save
+```
+
+```
+formatted   ConditionsWebView(html:openLink:), Ink 0.6.0, raw HTML escaped by an .html modifier
+text        ScrollView, LazyVStack, one monospace Text per line, text selection, format characters as [U+XXXX]
+switch      @AppStorage(DEFAULT_MARKDOWN_FILE_TEXT_VIEW); hidden over the limits
+save        saveCryptoFile(fileSource) (CIFileView.swift)
+close       swipe down
+links       openMarkdownFileLink: parseSimpleXMarkdown; simplexLink: appOpenUrl; uri, http or https: openBrowserAlert; other: showInvalidLinkAlert
+```
+
+`SettingsView.swift`: `DEFAULT_MARKDOWN_FILE_TEXT_VIEW = "markdownFileTextView"`, default false.
+
+`ConditionsWebView.swift`, shared with the operator conditions:
+
+```
+configuration   allowsContentJavaScript = false; websiteDataStore = .nonPersistent()
+head            Content-Security-Policy: default-src 'none'; style-src 'nonce-<UUID per load>'; img-src data:; base-uri 'none'; form-action 'none'
+style           the app's style block with the nonce; table, th, td borders; pre overflow-x auto; img max-width 100%
+navigation      linkActivated: openLink (openExternalLink by default)
+                other navigation: allowed for about: URLs only
+```
+
+- Ink 0.6.0 applies `.html` modifiers to block and inline HTML fragments (`HTMLConvertible.swift`); the viewer's modifier escapes `&`, `<`, `>`; code spans and blocks are escaped by Ink itself.
+
+Images, an `.images` modifier (`imagesWithinBudget`):
+
+```
+data:image, base64     shown as <img src>, rebuilt from the source only
+                       4320 px per side; 2160 × 4320 pixels per document; size read by UIImage(data:)
+over a limit           not shown
+other data URIs        not shown
+other image links      the source text; nothing is fetched
+```
+
+## 6. Size limit
+
+1 MB.
+4 MB: formatted views render lazily (Kotlin: one lazy item per top-level node; iOS: WKWebView); text views render one lazy item per line.
+A single top-level block (one table, code block or paragraph) is still laid out at once.
+
+## 7. Checks
+
+1. Plain and encrypted files: formatted and text views on Android, desktop and iOS.
+2. Desktop linked to a mobile: file loaded from the mobile, then shown.
+3. File over 1 MB: tap action as before.
+4. File not received: one tap; viewer shown on completion in the same chat; not shown after leaving the chat.
+5. Same for images, voice messages, video and other files, each with its tap action.
+6. Tap in a chat list preview: opened on completion while the chat list is shown; Android, iOS: not opened after a chat is opened; desktop: opened while a chat is open.
+7. Not opened after a reception error, cancel or abort. Kotlin: not opened after the item scrolled out of view.
+8. Invalid UTF-8 and control characters: shown as "?".
+9. Lines over 15 000 characters, 33 tree levels (Kotlin), 17 nesting levels (iOS), 5 nested square brackets (iOS), 201 table rows: text view only, long lines split.
+10. Bidi controls: warning; format characters as [U+XXXX] in the text view.
+11. Data images: decoded to the window width (Kotlin); images over 4320 px per side (Android, iOS) or beyond 2160 × 4320 pixels per document not shown.
+12. Links: SimpleX links to the connect flow; http(s) links to the "Open web link?" alert; other schemes and relative links: "Invalid link"; targets with invisible or non-ASCII host characters shown with [U+XXXX].
+13. View switch kept after closing the viewer and after a restart.
+14. Save: the file at the chosen destination equals the original.
+15. Link inside backticks: shown as code.
+16. Remote image: not loaded, the source text shown; data URI image: shown.
+17. iOS inline HTML with `<script>`, `<img src=https:...>`, `<iframe>`, `<style>`, `<meta http-equiv="refresh">`: shown as text.
+18. Tables on both platforms.
+19. Operator conditions: rendering unchanged, links in the primary colour.
+20. File with CRLF line endings: same formatted and text views as with LF.
+21. Level 1 heading in the Kotlin formatted view: larger than level 2.
+22. Desktop: the viewer covers the conversation only; back or Escape returns to the conversation; opening another chat closes the viewer.
+23. Desktop, other centre modals over an open chat (What's New, create profile, "Set contact name", invalid data item): the chat is shown again after back.
diff --git a/plans/2026-10-13-compose-emoji-picker.md b/plans/2026-10-13-compose-emoji-picker.md
new file mode 100644
index 0000000000..ded2a0ce47
--- /dev/null
+++ b/plans/2026-10-13-compose-emoji-picker.md
@@ -0,0 +1,51 @@
+# Desktop: emoji picker in the compose field
+
+## Problem
+
+The desktop compose field has no way to choose an emoji: Linux has no system emoji picker, and on Windows and macOS the system pickers are shortcuts most users do not know. Android keyboards have their own emoji panel, so Android is not changed.
+
+## Solution
+
+On desktop, an emoji button next to the attachment button opens a popup emoji picker: search field, category tabs, grid of emoji. A picked emoji is inserted at the cursor and the cursor moves after it; the picker stays open, so several emoji can be picked in a row. Esc, a click outside or the button closes it, and focus returns to the text field. The text field collapses its selection to the end when the popup takes focus, so with text selected the emoji goes after it.
+
+No protocol or core changes: picked emoji are ordinary message text.
+
+## Technical design
+
+### Common (`views/chat/ComposeEmojiPicker.kt`)
+
+- `expect fun ComposeEmojiButton(pickerShown, enabled, onEmoji)`. It sits in `ComposeActionButtons` (renamed from `AttachmentAndCommandsButtons`) after the attachment button. The Android actual is empty.
+- `fun ComposeMessage.insertingEmoji(emoji: String): ComposeMessage` replaces `selection` (clamped to the text) with the emoji and puts the cursor after it. `ComposeView.onEmoji` passes the result to `onMessageChange`, so markdown parsing, link sanitizing and the large-emoji font apply as for typed text. Ignored while a message is being sent.
+
+`ComposeView` owns `emojiPickerShown` (`rememberSaveable`). It is closed when sending becomes disabled or a voice message is recorded (`emojiEnabled`). When it closes, focus returns to the text field through the existing `focusRequester`.
+
+### Desktop (`ComposeEmojiPicker.desktop.kt`)
+
+- Button: same look as the attachment button. The row keeps its `spacedBy(-8.dp)` overlap; the emoji button adds `EMOJI_BUTTON_START_PADDING` (4 dp), so its centre is 44 dp from the attachment button.
+- Data: `desktopMain/resources/emoji/emoji.txt`, generated by `scripts/desktop/generate-emoji-data.py` from Unicode `emoji-test.txt` 15.0, the version covered by the bundled NotoColorEmoji 2.038 (all 1870 sequences checked against the font cmap). Fully-qualified emoji only, without the Component group and without skin tone variants. Format: `@<group>` lines, then `<emoji>\t<name>` lines. Parsed once, lazily (`emojiSections`).
+- `EmojiCategory` maps Unicode group names to a tab emoji and a localized title.
+- Popup: focusable `Popup` above the button (`AboveAnchorPositionProvider`), 360×420 dp, or shorter when the window has less space above the button. Search field (auto-focused), category tabs, then a `LazyVerticalGrid` with section headers; tabs and cells are not focusable, so typing after a click still goes to search. Esc (handled on key release, as the window does, so it does not also close the top modal), a click outside, or the button closes it.
+- Search: case-insensitive substring of the English Unicode name (`searchEmoji`).
+- No recently used list: storing picked emoji in preferences would keep a trace of what the user wrote outside the encrypted database.
+- Rendering uses `EmojiFont` (Noto on Windows/Linux, system font on macOS), as emoji-only messages do.
+
+## Affected docs
+
+- `product/views/chat.md` — Compose Bar table: emoji button.
+- `spec/client/compose.md` — emoji picker functions.
+- `spec/impact.md` — new source files.
+- `product/concepts.md` — PC4 source list.
+
+## Not included
+
+- Android emoji picker: the keyboard's emoji panel covers it. An in-app panel was built and tested in simulation, then dropped; it would also need its own recents disabled for privacy.
+- Skin tone selection.
+- Emoji shortcode autocomplete (`:smile:`).
+- Localized emoji names for search.
+- Custom (image) emoji.
+
+## Verification
+
+- Unit tests: `insertingEmoji` (empty, cursor, selection, surrogate pairs); desktop data loads, every group maps to a category, no skin tone modifiers, search.
+- The real desktop app run under Xvfb with screenshots and a screen recording: button in a group compose bar and its spacing, insert at cursor, several picks, search, no results, category tabs, close by Esc / outside click / button with focus returned, emoji-only message in large font, light and dark themes, editing, live messages, chat switching, small window, large font, right-to-left layout.
+- Android: `compileDebugKotlinAndroid` passes; the compose bar is unchanged from before.
diff --git a/plans/2026-10-13-forwarded-notification-flag.md b/plans/2026-10-13-forwarded-notification-flag.md
new file mode 100644
index 0000000000..a1962a6e0f
--- /dev/null
+++ b/plans/2026-10-13-forwarded-notification-flag.md
@@ -0,0 +1,330 @@
+# Notification flag of forwarded messages
+
+Date: 2026-10-13.
+
+A message forwarded by a chat relay or by a forwarding group host is sent with the SMP notification flag when its original event has the flag by the rule of `hasNotification`.
+
+References are to `/code/simplex-chat-4`, branch `master`, commit `2f4a443dd`. Haskell paths without a directory are in `src/Simplex/Chat/`. `SMQ/` is `dist-newstyle/src/simplexmq-f058c38b0eecb6c0/src/Simplex/Messaging/`. `NSE` is `apps/ios/SimpleX NSE/NotificationService.swift`.
+
+## 1. Present behaviour
+Path of a forwarded message:
+```
+received    Library/Subscriber.hs:1014         MSG of a member connection; the flag of the received SMP message is ignored
+            Library/Subscriber.hs:1069-1144    processEvent: a NewMessageDeliveryTask is returned for each event to forward
+task        Library/Subscriber.hs:1022         created when the user is the relay of a channel, or an admin or owner of a group (:3800), and the author is not blocked by an admin
+            Library/Subscriber.hs:1158-1176    createDeliveryTasks; createMsgDeliveryTask (Store/Delivery.hs:78) is called at :1165 and :1172 only
+            Store/Delivery.hs:137-170          the task is read with its message: msg_body is decoded to verifiedMsg, the original event
+job         Library/Subscriber.hs:4233-4240    DJDeliveryJob: accepted tasks of one scope (Store/Delivery.hs:178) are batched into one job (Messages/Batch.hs:84)
+            Library/Subscriber.hs:4246-4251    DJRelayRemoved: one job for one task
+            Library/Commands.hs:3256-3265      leaveChannelRelay: one job with the x.grp.leave of the relay
+            Store/Delivery.hs:285-328          the job is read as scope, sender ids, body and cursor; its events are stored only as the encoded body
+sent        Library/Subscriber.hs:4379-4423    channel: for each recipient, overflow profile batches, then the body; MsgFlags False (:4416)
+            Library/Subscriber.hs:4424-4487    channel support scope and regular group: deliver; MsgFlags False (:4483)
+```
+Types (`Delivery.hs`):
+```
+DeliveryTaskContext :48
+  jobScope :: DeliveryJobScope
+  sentAsGroup :: ShowGroupAsSender
+DeliveryJobScope :54
+  DJSGroup {jobSpec :: DeliveryJobSpec}
+  DJSMemberSupport {supportGMId :: GroupMemberId}
+DeliveryJobSpec :60
+  DJDeliveryJob {includePending :: Bool}
+  DJRelayRemoved
+NewMessageDeliveryTask :122
+  messageId :: MessageId
+  taskContext :: DeliveryTaskContext
+MessageDeliveryTask :128
+  taskId :: Int64
+  jobScope :: DeliveryJobScope
+  senderGMId :: GroupMemberId
+  fwdSender :: FwdSender
+  brokerTs :: UTCTime
+  verifiedMsg :: VerifiedMsg 'Json
+MessageDeliveryJob :161
+  jobId :: Int64
+  jobScope :: DeliveryJobScope
+  senderGMIds :: [GroupMemberId]
+  body :: ByteString
+  cursorGMId_ :: Maybe GroupMemberId
+```
+Tables (`Store/SQLite/Migrations/M20250813_delivery_tasks.hs:54, :103`, `M20260529_delivery_job_senders.hs:17`; the same columns in Postgres):
+```
+both tables
+  group_id
+  worker_scope
+  job_scope_spec_tag
+  job_scope_include_pending
+  job_scope_support_gm_id
+  failed
+  created_at
+  updated_at
+delivery_tasks
+  delivery_task_id
+  sender_group_member_id
+  message_id                 -- messages.chat_msg_event: the tag; messages.msg_body: the original event
+  message_from_channel
+  task_status
+  task_err_reason
+delivery_jobs
+  delivery_job_id
+  sender_group_member_ids
+  body
+  cursor_group_member_id
+  job_status
+  job_err_reason
+```
+The flag, from the forwarder to the notification:
+```
+forwarder agent        SMQ/Agent.hs:2186-2203, 2563         one flag for each MsgReq, stored with the sent message; a body shared by VRRef is sent with the flag of each request
+                       SMQ/Agent.hs:2637-2644               the flag is a parameter of SEND
+SMP server             SMQ/Server.hs:2038-2039              a notification is stored for a flagged message to a queue with notifier credentials (:2131-2136), and for such a message only
+                       SMQ/Server.hs:361-414                the stored notification is sent as NMSG to the subscriber of the notifier, the notification server
+notification server    SMQ/Notifications/Server.hs:545-553  NMSG: a push notification with the last notifications of the device token is sent to the push provider (:693-702)
+recipient              Library/Subscriber.hs:890            the notification subscription of a member connection is created unless the chat is muted, MFNone (Library/Commands.hs:1922-1929; SMQ/Agent.hs:3345-3361)
+                       SMQ/Agent.hs:2093-2144, 3741         the agent gets the message of the notified queue and passes MSG with the flag; forwarded content is opaque to the agent
+                       Library/Subscriber.hs:1014           the core ignores the flag; the item is created from the forwarded event (:4008-4064)
+```
+iOS notification extension, for a forwarded message:
+```
+entity key        NSE:489-498      id of the notified connection: "#<groupId> @<groupMemberId>" of the relay or the host (apps/ios/SimpleXChat/ChatTypes.swift:3624-3632, :3258)
+item key          NSE:1025-1029    the member of the item, its author, for groupRcv; "#<groupId>" for channelRcv
+forwarded item    NSE:173-187      the keys are different: the notification of the item is added to droppedNotifications, outside the entity of the notified connection
+shown             NSE:1196-1216    the default of the connection: MFAll: title "#<group> <relay>:", text "message received" (apps/ios/SimpleXChat/Notifications.swift:102); MFMentions: empty content
+```
+- With the flag alone the push notification is sent, and the message is received by the core of the NSE: the item is created. The shown notification is the default one. The NSE change of section 7 is required for a notification with the message text.
+
+Regular groups, the same message sent to a member by its author and by the host:
+```
+author    Library/Internal.hs:2847-2865      member with a ready connection: sent to the member; otherwise forwarded by the host (MSAForwarded) or stored as pending
+host      Library/Subscriber.hs:4447-4458    job recipients: members whose relation with the sender is MRIntroduced
+both      sent while the author is connected to the member and the relation at the host is MRIntroduced
+          the second copy is a duplicate: one item; the recipient sends x.grp.mem.con (Library/Internal.hs:2939-2945, 2958-2968), the host stops forwarding (Library/Subscriber.hs:3724-3729)
+rule      each copy of x.msg.new is flagged: two notifications for one item in that interval, one otherwise
+```
+
+## 2. Rule
+```
+forwarded message    flag = hasNotification of the tag of its original event (Protocol.hs:1338)
+                     the flag of the received SMP message is unused
+SMP message          notification = True when the flag of any forwarded message of its body is True, as for sent events (Library/Internal.hs:2248, 2748)
+job                  one value for the body, computed when the job is created; the same for every recipient, scope and cursor page
+channel pieces       body (id 0) and extBody, profiles with the body (id 1): the job value
+                     overflow profile batches (id 2 and above): False; their elements are x.grp.mem.new of the relay (Library/Subscriber.hs:4277)
+```
+Events (handlers at `Library/Subscriber.hs:1080-1132`; forwarded events are those of `isForwardedGroupMsg`, `Protocol.hs:528`):
+```
+event                 flag
+x.msg.new             True     every content message, with or without a file
+x.grp.del             True     forwarded by the relay-removed job (:1118)
+x.msg.file.descr      False
+x.msg.update          False
+x.msg.del             False
+x.msg.react           False
+x.file.cancel         False
+x.info                False
+x.grp.relay.new       False
+x.grp.mem.new         False
+x.grp.mem.role        False
+x.grp.mem.restrict    False
+x.grp.mem.del         False    also the relay-removed job of a removed relay or host (:3746)
+x.grp.leave           False    also the job of a relay that leaves (Library/Commands.hs:3263)
+x.grp.info            False
+x.grp.prefs           False
+x.grp.roster          False
+x.file                True     handled without a delivery task (:1096)
+x.grp.mem.fwd         True     handled without a delivery task (:1110)
+x.grp.inv             True     handled without a delivery task (:1124)
+x.call.inv            True     handled without a delivery task (:1132)
+x.contact             True     handled without a delivery task (:1132)
+```
+
+## 3. Core changes
+```
+Protocol.hs
+  msgHasNotification              new, next to hasNotification (:1338): VerifiedMsg e -> Bool
+                                    hasNotification of the tag of the event of the message (verifiedChatMsg, :1583)
+Delivery.hs
+  MessageDeliveryJob (:161)       notification :: Bool     -- new, after body
+Store/Delivery.hs
+  createMsgDeliveryJob (:251)     new parameter notification :: Bool, before body; written to delivery_jobs.notification
+  MessageDeliveryJobRow (:283)    BoolInt added after the body
+  getNextDeliveryJob (:309-328)   notification selected after body; set in MessageDeliveryJob
+Library/Subscriber.hs
+  processDeliveryTask (:4235)     notification: True when msgHasNotification of verifiedMsg is True for any of acceptedTasks; computed next to senderGMIds, passed at :4237
+                      (:4250)     msgHasNotification verifiedMsg of the task is passed
+  processDeliveryJob (:4331)      notification is bound from the job
+  recipientBodyPieces (:4417)     each piece is returned with its flag: overflow batch False; extBody and body: notification
+  addPiece (:4410-4416)           MsgFlags {notification = the flag of the piece}
+  deliver (:4483)                 MsgFlags {notification}
+Library/Commands.hs
+  leaveChannelRelay (:3263)       hasNotification XGrpLeave_ is passed
+Library/Internal.hs
+  sendFwdMemberMessage (:2903)    MsgFlags {notification = msgHasNotification verifiedMsg}
+                                    False for both callers: x.grp.roster (:1307), x.grp.mem.del (Library/Subscriber.hs:3798)
+```
+Sites with a fixed flag, unchanged:
+```
+Library/Internal.hs:1428    sendHistory: history for a new member, with the welcome message of a group; MsgFlags False (open question 1)
+Library/Internal.hs:2459    sendGroupMemberMessages: events of the user to one member; notification = True
+Library/Internal.hs:2910    sendPendingGroupMessages: pending messages of the user to one member; notification = True
+tests/ChatTests/Groups.hs:5681, 10907, 13320, 13452, 13608, 13701    elements sent by tests through the agent; MsgFlags False
+```
+- Every other `MsgFlags` value of the repository is built for events of the user, from `hasNotification` of their tags: `Library/Internal.hs:2248, 2552, 2748`; `Library/Commands.hs:2672, 4131`; `Library/Subscriber.hs:356`.
+- Forwarded content is sent as `>` elements only (`encodeFwdElement`, `Messages/Batch.hs:125`; used at `:98`, `Library/Subscriber.hs:4248`, `Library/Internal.hs:1423, 2902`). `XGrpMsgForward` events are only received (`Library/Subscriber.hs:1127`).
+
+## 4. Storage
+Migration `M20261012_delivery_job_notification`, SQLite and Postgres, registered in `Store/SQLite/Migrations.hs` (`:180`, `:358`), `Store/Postgres/Migrations.hs` (`:57`, `:112`) and `simplex-chat.cabal` (`:172`, `:351`). It is one `ADD COLUMN`; indexes are unchanged.
+```
+delivery_jobs
+  notification INTEGER NOT NULL DEFAULT 0    -- SMALLINT in Postgres
+```
+- Down migration: the column is dropped. `delivery_tasks` is unchanged: the event of a task is read with its message.
+- Applied migrations must be a prefix of the list sorted by name (`SMQ/Agent/Store/Migrations.hs:23-34`; `Store/SQLite/Migrations.hs:363`). The name is ordered after `20261010_invite_member_via_group` and before the unreleased `20261013_chat_layout` and `20261013_msg_priority` of branch `ep/llm-ux` (open question 3).
+- The schema dumps and `chat_query_plans.txt` are regenerated by the tests "verify and overwrite schema dump" (`tests/SchemaDump.hs:58`, `tests/PostgresSchemaDump.hs:29`) and "verify and overwrite query plans" (`tests/SchemaDump.hs:165`); they are never edited by hand.
+
+## 5. Compatibility and cost
+```
+chat protocol               unchanged; the flag is a parameter of SMP SEND (SMQ/Protocol.hs:598)
+recipient                   every version; the flag is used by the SMP server only
+earlier relay or host       sends without the flag, as now; a channel member is notified by each relay of this release
+job of an earlier release   notification = 0: sent without the flag
+downgrade                   the column is dropped
+traffic                     count and size of SMP messages unchanged
+notifications               one for each flagged SMP message to a queue with notifier credentials: a device with a notification token and the chat set to MFAll or MFMentions
+                            one job is one flagged SMP message for a recipient, for all its events
+channel                     a post is sent by each relay to each member (Library/Internal.hs:2843-2845; Store/Delivery.hs:352)
+                            with N members and R relays up to N × R notifications are sent for a post; one item is created (Library/Internal.hs:2958-2959)
+                            shown on iOS: one notification for a post; a duplicate copy is shown with empty content (section 7)
+profile overflow batches    unflagged
+```
+
+## 6. Tests
+`tests/ChatTests/Groups.hs`, helpers next to `relayConnIdToMember` (`:13140`):
+```
+agentSendBody cc connId body   body sent to the connection by the agent of cc, MsgFlags False; a failure is a test failure
+lastSndMsgFlags cc connId n    msg_flags, "T" or "F", of the last n sent rows of type A_MSG ("M") of agent table messages for the connection, in sending order; withCCAgentTransaction (tests/ChatTests/Utils.hs:675)
+lastJobNotification cc         notification of the last row of delivery_jobs; withCCTransaction
+```
+- The agent row of a sent message is kept after delivery until its receipt (`SMQ/Agent/Store/AgentStore.hs:1318-1349`; `SMQ/Agent.hs:2866-2869`): recipients run `/set receipts all off` before the checked messages (as `:1561`).
+
+New tests:
+```
+group message forwarding (:191)
+  testGroupMsgForwardNotification           createGroup3, setupGroupForwarding (:5802); bob sends a message: alice to cath "T", job True; bob edits it: "F", job False
+relay delivery, single relay (:283)
+  testChannels1RelayDeliverNotification     createChannel1Relay (:9523); alice posts: bob to cath, dan and eve "T", job True; cath adds a reaction: bob to dan and eve "F", job False
+deliver member profiles via relay (:295)
+  testChannelOverflowProfileNotification    the scenario of testChannelLargeProfileFits (:9956) with an image of 10000 characters and a message of 7000 characters, so that the profile is sent in an overflow batch: bob to dan, the rows added by the message: "F" for the overflow profile batch, "T" for the message
+```
+- One sender and one message give one job.
+Assertions added to present tests, on `delivery_jobs` only (the connections and their agent rows are deleted after the job, `Library/Subscriber.hs:4328`):
+```
+testGroupMsgForwardGroupDeletion (:6135)    alice: job True, x.grp.del
+testChannelDeleteGroupSigned (:11031)       bob: job True, x.grp.del
+testGroupMsgForwardAdminRemoval (:6096)     alice: job False, x.grp.mem.del
+testChannelRelayLeave (:11220)              bob: job False, x.grp.leave
+```
+Present tests of delivery jobs, unchanged: "group message forwarding" (`:191-206`), "group scoped messages" (`:255-264`), "relay delivery" (`:282-292`), "deliver member profiles via relay" (`:295-301`), `testRelayBatchAllLarge` and `testRelayBatchSingletonOverflow` (`tests/MessageBatching.hs:164, 186`).
+
+## 7. iOS notification of a forwarded message and of a duplicate copy
+Event, `Controller.hs:1048`, next to `CEvtUnknownMemberAnnounced`:
+```
+CEvtDuplicateGroupMessage       JSON type duplicateGroupMessage
+  user :: User
+  member :: GroupMember         -- the member whose connection delivered the copy
+```
+Emission, `Library/Internal.hs`, before the present handling of the duplicate, only when the chat is started with `main=off` (the NSE and the share extension):
+```
+isMainApp :2976                 subscriptionMode is SMSubscribe; startChatController sets SMOnlyCreate for main=off (Library/Commands.hs:235)
+saveGroupRcvMsg :2925           direct copy; member: the member of the connection; every SEDuplicateGroupMessage
+                                x.grp.mem.con to the forwarding member when the stored copy was forwarded, as now (:2940-2944)
+saveGroupFwdRcvMsg :2959        channel; member: the forwarding relay; Nothing is returned, as now
+                   :2960-2969   group; member: the forwarding host; x.grp.mem.con and the error, as now
+```
+Consumers:
+```
+terminal view       View.hs:471: no output, as CEvtNtfMessage (:547)
+API docs            bots/src/API/Docs/Events.hs:205: in undocumentedEvents, as CEvtUnknownMemberCreated
+apps, CLI, bots     not emitted: started with main=on
+NSE                 decoded: case duplicateGroupMessage (SimpleX NSE/NSEAPITypes.swift:91)
+```
+Swift types, `apps/ios/SimpleXChat/ChatTypes.swift`:
+```
+CIMeta.forwardedByMember :4253     Int64?, after editable, as in core CIMeta (Messages.hs:525); omitted in JSON for Nothing
+groupMemberEntityId :3447          (groupId, groupMemberId) -> "#<groupId> @<groupMemberId>"; used by GroupMember.id (:3258) and the NSE
+CIDirection.groupMemberId :4224    groupMemberId of the member of groupRcv; nil for other directions
+```
+
+NSE, `apps/ios/SimpleX NSE/NotificationService.swift`:
+```
+receivedMsgNtf (:1035-1039)
+  newChatItems              key of a group item: groupMemberEntityId of the group and of the member whose connection delivered the item:
+                              forwardedByMember, otherwise chatDir.groupMemberId; the id of the connection entity (ChatTypes.swift:3624-3632)
+                            other items, and channelRcv without forwardedByMember: chatInfo.id, as now
+  duplicateGroupMessage     key: member.id; notification: .noNtf
+processReceivedNtf (:586-588): the best attempt of the entity is read from notificationEntities[id] and replaced when ntf.replaces(bestAttempt)
+NSENotificationData.replaces (:77-85), new notification, best attempt:
+  .noNtf, .connectionEvent  true: the default of the connection
+  .noNtf, other             false
+  .callInvitation, any      true
+  other, .callInvitation    false
+  other, other              true
+```
+- `.noNtf` is used: `.connectionEvent` is created only as the default (`defaultBestAttemptNtf`, `:1208-1229`). A received item, a contact event and a call are never replaced by `.noNtf`.
+- The best attempt is read from `notificationEntities[id]`: `processDroppedNotifications` (`:514-529`) passes the entity copied before its notifications are processed.
+
+Results:
+```
+forwarded post, MFAll         the text of the post (createMessageReceivedNtf, apps/ios/SimpleXChat/Notifications.swift:66)
+forwarded post, MFMentions    the text for a mention or a reply; empty content otherwise
+duplicate copy                empty content, unless an item of the same push notification is shown
+mention, then other item      the mention is shown; before this patch, .noNtf of the other item replaced it
+```
+Tests, `tests/ChatTests/Groups.hs`; helpers next to `lastJobNotification`:
+```
+duplicateMessageEventsCfg    testCfg with an eventHook (Controller.hs:257) that records the member names of CEvtDuplicateGroupMessage
+setMainAppOff cc             subscriptionMode of cc set to SMOnlyCreate, as by /_start main=off; called after the group is created
+```
+Copies are sent through the agent of the sender by `agentSendBody`, as in `testGroupMsgForwardOwnMembershipRejected` (`:5666`), so that the order of copies is fixed:
+```
+group message forwarding (:191)
+  testGroupMsgForwardDuplicateEvent    createGroup3; bob's message is received by cath directly; alice's agent sends a forwarded copy
+                                         (Library/Internal.hs:2960-2969): cath "duplicate group message, group id: 1"; no event
+                                       setMainAppOff cath; alice's agent sends the copy again: the same line; event member alice
+  testGroupMsgDirectDuplicateEvent     alice's agent sends a forwarded copy; setMainAppOff cath; bob's agent sends the direct copy
+                                         (Library/Internal.hs:2939-2946): cath "duplicate group message, group id: 1"; event member bob
+relay delivery, single relay (:283)
+  testChannelDuplicateEvent            createChannel1Relay; alice posts; setMainAppOff cath; bob's agent sends a second forwarded copy
+                                         (Library/Internal.hs:2959): event member bob; cath without output
+```
+- The NSE and the Swift types are not compiled on this machine. Manual checks on iOS: a post in a channel with 2 relays, with MFAll and with MFMentions; a forwarded message in a group; a mention followed by an ordinary message in one push notification.
+
+## Interfaces
+```
+core functions    msgHasNotification :: VerifiedMsg e -> Bool
+                  createMsgDeliveryJob, new parameter notification
+                  isMainApp :: CM Bool
+core types        MessageDeliveryJob.notification
+core events       CEvtDuplicateGroupMessage, JSON type duplicateGroupMessage
+storage           delivery_jobs.notification
+                  migration M20261012_delivery_job_notification
+iOS               CIMeta.forwardedByMember
+                  groupMemberEntityId
+                  CIDirection.groupMemberId
+                  NSEChatEvent.duplicateGroupMessage
+                  NSENotificationData.replaces
+test helpers      agentSendBody
+                  lastSndMsgFlags
+                  lastJobNotification
+                  duplicateMessageEventsCfg
+                  setMainAppOff
+```
+- `eventHasNotification :: ChatMsgEvent e -> Bool` of `2026-10-13-message-priority.md` is accepted by one change: `msgHasNotification` is computed as `eventHasNotification` of the event of the message. Its three uses, the job column and `hasNotification XGrpLeave_` in `leaveChannelRelay` are unchanged.
+- With that change a forwarded `x.msg.update` that raises priority is flagged. The line of the priority plan, section 4, "delivery jobs of relays and forwarding hosts, MsgFlags False for every message" is replaced by this plan.
+
+## Open questions
+1. History and the welcome message (`sendHistory`), flagged until commit `93831a0f2` (2026-07-17) and unflagged since: apply the rule? Recommended: unchanged, sent without the flag.
+2. The job flag as a column, or computed by the job worker from the decoded body, without a migration? Recommended: the column, computed where the events of the tasks are read.
+3. Release order with `ep/llm-ux`. Recommended: this correction first, with date `20261012` in the migration name; otherwise a date after the last released migration.
diff --git a/plans/2026-10-14-desktop-hide-profile-rows-without-profile.md b/plans/2026-10-14-desktop-hide-profile-rows-without-profile.md
new file mode 100644
index 0000000000..e906a6f275
--- /dev/null
+++ b/plans/2026-10-14-desktop-hide-profile-rows-without-profile.md
@@ -0,0 +1,49 @@
+# Hide the address and preferences rows when there is no profile and no mobile in use
+
+## Problem
+
+On a desktop with no active profile and no mobile in use, the user picker shows "Create SimpleX address" as its first option row, then "Chat preferences" and, below a divider, "Create chat profile". The picker opens by itself in this state when no left-panel screen is open (`App.kt`). Neither of the first two rows can work without a profile:
+
+- "Create SimpleX address" crashed with a NullPointerException at `UserPicker.kt:223` (`:216` in v6.1, `:222` in v6.2–v6.4) before #7679. GitHub reports from using the row: #5068, #5476, #6194, #7067 (Linux; comments on #5068 and #6194 report the same on Windows 11).
+- "Chat preferences" left an invisible modal with no back button.
+- With #7679 both screens close themselves instead, so a click only hides the picker and nothing opens.
+
+Users have told the team that the crash stops them from creating a profile. On v7.0.4 a profile can still be created from "Create chat profile" after the crash, but the first row the user tries is one that cannot work.
+
+The same crash also happens when a mobile disconnects while its address screen is open (#6452, macOS: the same stack, reported alongside phone disconnects). That path is fixed by #7679, not by this change.
+
+## Solution summary
+
+Hide the "SimpleX address" and "Chat preferences" rows when the desktop has no active user and no mobile in use (`chatModel.desktopNoUserNoRemote`). The divider below them is hidden with them. This is the state in which the picker already shows "Create chat profile" instead of "Your chat profiles". While a connected mobile is in use, both rows stay and act on the mobile's profile; if the mobile has no active profile, the screens close themselves (#7679).
+
+Before the new user picker (#4796), `SettingsView` showed both rows only inside `if (profile != null)`, with "Create chat profile" in the `else if (chatModel.localUserCreated.value == false)` branch.
+
+## Technical design
+
+`SecondSection` in `UserPicker.kt` emits both rows inside `if (!chatModel.desktopNoUserNoRemote)`. The desktop divider below them belongs to the same group and is drawn under the same condition. The composable getter reads `currentUser` and `currentRemoteHost` state, so the picker updates as soon as a profile is created, a mobile is connected, selected or disconnected, or the desktop is switched to "This device" with no profile. On Android `desktopNoUserNoRemote` is always false, so nothing changes there.
+
+The self-closing modals from #7679 stay. Hiding the rows only removes the entry point in that state. A screen shown with no active user in any other state still relies on #7679's handling; #7679's plan lists the paths. For example:
+- a screen opened while there was a user, which then loses it: a mobile disconnects, or the self-destruct passcode is entered, with the address or preferences screen open;
+- a mobile in use with no active profile (its last visible profile deleted): the rows are shown, and the screens close themselves.
+
+### Security
+
+UI-only: it hides two rows and the divider below them, based on local state. No data or trust boundary is involved.
+
+## Implementation steps
+
+1. `views/chatlist/UserPicker.kt`: in `SecondSection`, wrap the "SimpleX address" and "Chat preferences" rows in `if (!chatModel.desktopNoUserNoRemote)`, and draw the desktop divider below them under the same condition.
+2. Documentation, under `apps/multiplatform/`:
+   - `spec/client/chat-list.md`, UserPicker section: when the two rows are hidden.
+   - `product/views/user-profiles.md`: when both rows are hidden.
+
+## Verification
+
+Desktop AppImage of this branch, fresh database, the v7.1.0-beta.6 CLI as the linked mobile; Android debug APK of this branch on Waydroid.
+
+- Mobile connected, no desktop profile: both rows are shown for the mobile's profile. "Create SimpleX address" creates the address on the mobile (`/show_address` on the CLI returns it).
+- Mobile connected, switched to "This device" (no profile): both rows are hidden and "Create chat profile" is shown. Switching back to the mobile shows them again.
+- Address screen open, then the mobile disconnects: the screen closes (#7679), no crash, and the picker then shows no address or preferences rows.
+- "Create chat profile" from that state: the profile is created, both rows appear and open their screens.
+- No profile, mobile linked but not in use: the device row, then "Create chat profile", with no divider. After deleting the linked mobile ("Linked mobiles", right-click, "Delete"): "Create chat profile" is the first row. The spacing matches the gap between rows. After creating a profile, both rows and the divider are back.
+- Android, with a profile: both rows are shown and open their screens; no crash in logcat.
diff --git a/scripts/calculator-bot/Dockerfile b/scripts/calculator-bot/Dockerfile
index 6e049ec3d6..4b0728484c 100644
--- a/scripts/calculator-bot/Dockerfile
+++ b/scripts/calculator-bot/Dockerfile
@@ -66,8 +66,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     rm -rf /var/lib/apt/lists/*
 
 COPY --from=libsimplex /libs /opt/simplex/libs
-# Without it, npm re-running the library's preinstall downloads the released libs.
-ENV SIMPLEX_LIBS_DIR=/opt/simplex/libs
+# The library loads libsimplex and the add-on built below instead of downloading the released ones.
+ENV SIMPLEX_LIBS_DIR=/opt/simplex/libs \
+    SIMPLEX_ADDON_PATH=/src/packages/simplex-chat-nodejs/build/Release/simplex.node
 
 WORKDIR /src
 COPY packages/simplex-chat-client/types/typescript packages/simplex-chat-client/types/typescript
@@ -79,6 +80,7 @@ COPY packages/simplex-chat-nodejs packages/simplex-chat-nodejs
 RUN cd packages/simplex-chat-nodejs && \
     npm install --no-audit --no-fund && \
     npm install --no-save --no-audit --no-fund ../simplex-chat-client/types/typescript && \
+    npx node-gyp rebuild && \
     npx tsc && \
     cp src/simplex.* dist/
 
@@ -105,7 +107,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
         ca-certificates dumb-init libffi8 libgmp10 libssl3 zlib1g && \
     rm -rf /var/lib/apt/lists/*
 
+COPY --from=build /opt/simplex/libs /opt/simplex/libs
 COPY --from=build --chown=node:node /src /src
+ENV SIMPLEX_LIBS_DIR=/opt/simplex/libs \
+    SIMPLEX_ADDON_PATH=/src/packages/simplex-chat-nodejs/build/Release/simplex.node
 
 # A named volume takes this ownership; a bind mount must be owned by uid 1000.
 RUN mkdir -p /src/apps/simplex-calculator-bot/data && \
diff --git a/scripts/ci/desktop-linux/README.md b/scripts/ci/desktop-linux/README.md
new file mode 100644
index 0000000000..a9080e1c87
--- /dev/null
+++ b/scripts/ci/desktop-linux/README.md
@@ -0,0 +1,61 @@
+# Desktop app CI on Linux
+
+`.github/workflows/desktop-linux.yml` builds the desktop app from the branch on a GitHub runner (Ubuntu 24.04), runs its JVM tests (`:common:desktopTest`), and drives the app on a virtual display: onboarding to the chat list, then the chat list with the toolbar at the bottom (the default) and at the top. On request it also runs Claude Code driving the same path, a test backend, and the latest release as a baseline.
+
+## Running it
+
+On any branch, in either of two ways:
+
+- **Dispatch:** Actions → desktop-linux → Run workflow, with the `claude` and `backend` checkboxes (both off by default).
+- **Push** with a tag in the head commit's message, which is how agents in push sessions ask for a run:
+
+| Tag | Runs |
+|---|---|
+| `[app-ci]` | the scripted test, here and in the iOS app's workflow where the branch has it |
+| `[app-ci:desktop]` | the scripted test, here only |
+| `[claude-test]` | the scripted test and the Claude job, here and in the iOS app's workflow where the branch has it |
+| `[claude-test:desktop]` | the scripted test and the Claude job, here only |
+| `[ci-backend]` | with one of the above: also the test backend and the release job |
+
+A push without these tags (or with only iOS tags) starts a run whose jobs are all skipped, and it doesn't cancel a run in progress. A newer run that was asked for cancels an older one on the same branch. Pushes to master and stable never start it, because a squash merge's message lists the merged commits' subjects with their tags; dispatch it there instead.
+
+Every run builds the core library, and the backend when it's asked for, from the branch's own Haskell code. It reuses an earlier build only when the sources are unchanged: the core by a cache keyed on `src/**`, `cabal.project`, `simplex-chat.cabal`, `PRIVACY.md` and the build scripts; the backend by an artifact of the same branch named after a hash of its sources (30 days). So a branch that changes core and app code together tests both.
+
+## Jobs
+
+| Job | Does | Time |
+|---|---|---|
+| `plan` | chooses the jobs, finds an earlier backend build | 10 s |
+| `core` | `scripts/desktop/build-lib-linux.sh` via `build-core.sh` | 15 s cached, about 23 min not |
+| `app` | the app (`:desktop:createDistributable`), desktopTest, `smoke-test.sh` | about 10 min: build 4.5, desktopTest 0.5, smoke test 3.5 |
+| `claude` (opt-in) | the app at its first screen, then Claude Code drives it | about 7 min, Claude 2.5 |
+| `backend` (opt-in) | `build-backend.sh`: `simplex-chat`, `simplex-directory-service`, and `smp-server` from the simplexmq commit `cabal.project` pins | about 27 min, skipped when reused |
+| `release` (opt-in) | the latest release's .deb for this Ubuntu, onboarding only, to tell a branch's failure from the runner's | 1.5 min |
+
+Queueing for a runner adds from under a minute to 20 minutes. Results are artifacts: `desktop-smoke-test` (numbered screenshots, the text OCR read from each, `steps.log`, `checks.txt`, `app.log`), `desktop-test-report`, `desktop-claude-test`, and the backend's logs. The job summaries list the checks, the desktopTest results and the Claude usage.
+
+## Scripts
+
+- `ui`: the UI driver. Compose for Desktop has no accessibility tree on Linux, so it finds text on screenshots by OCR (tesseract) and acts with xdotool on an Xvfb display. `ui` alone prints its commands: start (with app settings), shot, text, find, wait, click, click-text, scroll, type, key, avatar (a profile image's colour), ink (a text's height), do (several in a row), stop. `screen-text.py`, `screen-colour.py` and `screen-ink.py` are its helpers.
+- `smoke-test.sh <app dir> <out dir> [start|onboarding|setup|backend]`: the scripted cases; the default is onboarding and both layouts. `setup` also creates a local group and makes the test SMP server the app's only names server; `backend` does that, connects to the seeded name, and checks both layouts.
+- `backend.sh start <tar.gz> <dir>` / `stop <dir>`: the test backend, below.
+- `claude-test.sh`, `claude-test.md` (the prompt), `claude-guard.py`, `claude-usage.py`: the Claude job.
+- `build-core.sh`, `install-core.sh`, `build-backend.sh`, `earlier-run.sh`, `release-app.sh`, `test-summary.py`: builds, reuse and reports.
+
+## The test backend
+
+`backend.sh` starts, on the runner, with CLI peers:
+
+- a chat relay (`--relay --headless`) and a directory service on the preset servers;
+- a group `ci_group` and a channel `ci_channel` with letter avatars as large as the apps make them (`avatar`), registered and approved by the admin `ci_admin`, and found by a new user who sends the directory "ci seed";
+- an SMP server on 127.0.0.1:5223 whose `[NAMES]` section asks `names-resolver.py`, and a contact `ci_contact` whose address it resolves as `seeded.testing`, checked with a connect plan from another client.
+
+It writes the directory's address to `<dir>/directory-link` and the SMP server's to `<dir>/names-server`. The app reaches the names server only with private routing set to unknown servers (`ui start … NetworkSMPProxyMode=Unknown`), since the preset proxies can't reach 127.0.0.1, and with the test server's receiving role off: a directory can't answer requests whose reply queue is on it.
+
+## The Claude job
+
+It needs the GitHub environment `app-sim-claude` with the secret `CLAUDE_CODE_OAUTH_TOKEN`, a Claude subscription token. Which branches may use it is decided only by that environment's branch rule in the repository settings: on a branch the rule doesn't allow, a requested Claude run fails at the environment check. The token goes only to the step that runs `claude`, and every `ui` call unsets it. With `[ci-backend]` the job also starts the test backend for prompts that use it, and waits for its build; this smoke path's prompt doesn't use it. The job installs Claude Code 2.1.296 and runs `claude-haiku-5-5` with `--max-turns 60` and `--max-budget-usd 3`. Its Bash runs only single `ui` commands (`claude-guard.py`, a PreToolUse hook: Claude Code runs read-only commands without asking in every permission mode). Before anything the session wrote is printed or uploaded, `claude-test.sh` checks it for the token; if it's there, the output, transcript, Claude Code's stderr and the guard log are deleted and the job fails. It passes when Claude's final message ends with `CLAUDE-TEST: PASS`; `report.md`, the transcript, the guard's log and `claude-usage.json` are in `desktop-claude-test`.
+
+## Cost
+
+The runners are free for this public repository. A Claude run spends the subscription's usage limits, which interactive sessions share: Haiku 5.5 does this smoke path in 15 to 17 turns, about 0.008 USD estimated at API prices (Claude Code's estimate, not a bill on a subscription).
diff --git a/scripts/ci/desktop-linux/backend.sh b/scripts/ci/desktop-linux/backend.sh
new file mode 100755
index 0000000000..836f09d275
--- /dev/null
+++ b/scripts/ci/desktop-linux/backend.sh
@@ -0,0 +1,341 @@
+#!/bin/bash
+
+# Test backend on the app runner: a chat relay and a directory service on the preset servers, with one group
+# and one channel registered and approved by a CLI peer, and another CLI peer that must find both by sending the
+# directory the search text. Both have profile images as large as the apps make them.
+# For SimpleX names, an SMP server on 127.0.0.1 resolves .testing names through a local resolver, and a CLI peer
+# with an address on it claims the name seeded.testing.
+# Usage:
+#   scripts/ci/desktop-linux/backend.sh start <backend .tar.gz> <work dir>   writes the directory's short address to <work dir>/directory-link
+#                                                                            and the names server's address to <work dir>/names-server
+#   scripts/ci/desktop-linux/backend.sh stop <work dir>                      stops the servers, prints their logs
+# The relay, the directory, the SMP server and the resolver keep running between start and stop.
+
+set -euo pipefail
+
+here=$(cd "$(dirname "$0")" && pwd)
+directory_name="SimpleX Directory"
+admin=ci_admin
+search_text="ci seed"
+# the longest profile image data URI the apps make and the core accepts (maxProfileImageSize)
+max_image_size=12500
+name_label=seeded
+resolver_port=8090
+
+# Runs one chat command in a CLI client that stays online for <secs> after it; the output is in $work/out.
+chat() {
+  local db=$1 secs=$2 cmd=$3
+  shift 3
+  local status=0
+  "$bin/simplex-chat" -d "$work/$db" -e "$cmd" -t "$secs" --execute-log all "$@" < /dev/null > "$work/out" 2>&1 || status=$?
+  cat "$work/out" >> "$work/$db-cli.log"
+  # commands with images are thousands of characters long
+  echo "::group::$db: ${cmd:0:200}"
+  cat "$work/out"
+  echo "::endgroup::"
+  return "$status"
+}
+
+admin() {
+  chat "$admin" "$1" "$2" --user-display-name "$admin"
+}
+
+expect_out() {
+  if ! grep -qE "$1" "$work/out"; then
+    echo "error: \"$1\" not in the output"
+    return 1
+  fi
+}
+
+# Each run keeps the client online for a few seconds, which also lets the handshakes it waits for progress.
+until_shown() {
+  local client=$1 pattern=$2 secs=$3 cmd=$4
+  local deadline=$((SECONDS + secs))
+  until "$client" 5 "$cmd" && grep -qE "$pattern" "$work/out"; do
+    if [ "$SECONDS" -ge "$deadline" ]; then
+      echo "error: \"$pattern\" not shown by \"$cmd\" after $secs s"
+      return 1
+    fi
+  done
+}
+
+admin_until() {
+  until_shown admin "$@"
+}
+
+db_query() {
+  sqlite3 "$work/$1_chat.db" "$2"
+}
+
+# Prints a profile image data URI made as the apps make one: JPEG at quality 85, scaled down by the square root
+# of its excess, at most halved per step, until it is at most max_image_size characters. The picture fills the
+# whole square, a gradient between two shades of one colour with a large white letter; noise keeps JPEG from
+# compressing it much, so the image ends up near the limit.
+avatar() {
+  local top=$1 bottom=$2 letter=$3 source=$work/avatar-source.png file=$work/avatar.jpg size=512 uri font
+  font=$(fc-match -f '%{file}' 'DejaVu Sans:bold')
+  convert -size 512x512 gradient:"$top-$bottom" -seed 1 -attenuate 0.5 +noise Gaussian \
+    -font "$font" -pointsize 320 -fill white -gravity center -annotate +0+0 "$letter" "$source"
+  while :; do
+    convert "$source" -resize "${size}x${size}" -quality 85 "$file"
+    uri="data:image/jpg;base64,$(base64 -w 0 "$file")"
+    [ "${#uri}" -gt "$max_image_size" ] || break
+    size=$(awk -v s="$size" -v n="${#uri}" -v m="$max_image_size" 'BEGIN { r = sqrt(n / m); if (r > 2) r = 2; print int(s / r) }')
+  done
+  echo "avatar \"$letter\" over $top to $bottom: ${size}x${size} px, ${#uri} characters, mean colour $(convert "$file" -resize '1x1!' -format '%[pixel:p{0,0}]' info:)" >&2
+  echo "$uri"
+}
+
+start_relay() {
+  nohup "$bin/simplex-chat" -d "$work/relay" --relay --headless --user-display-name ci_relay < /dev/null > "$work/relay.log" 2>&1 &
+  echo $! > "$work/relay.pid"
+  local deadline=$((SECONDS + 120))
+  until grep -qE '^https://[^ ]+/r#' "$work/relay.log"; do
+    if ! kill -0 "$(cat "$work/relay.pid")" 2> /dev/null || [ "$SECONDS" -ge "$deadline" ]; then
+      echo "error: the relay did not create its address"
+      cat "$work/relay.log"
+      return 1
+    fi
+    sleep 1
+  done
+  relay_link=$(grep -m 1 -oE '^https://[^ ]+/r#[^ ]+' "$work/relay.log")
+  echo "relay address: $relay_link"
+}
+
+# The address is created here, like the directory tests do, with auto-accept on before the service subscribes to it.
+create_directory() {
+  chat directory 1 "/ad pq_ratchet=on" --create-bot-display-name "$directory_name"
+  directory_link=$(awk '/Your new chat address is created!/ {getline; getline; print; exit}' "$work/out")
+  case "$directory_link" in
+    https://*/a#*) ;;
+    *)
+      echo "error: no short directory address in the output"
+      return 1
+      ;;
+  esac
+  chat directory 1 "/auto_accept on"
+  expect_out "^auto_accept on"
+  echo "$directory_link" > "$work/directory-link"
+  echo "directory address: $directory_link"
+}
+
+start_directory() {
+  # -y: the service adds its own tables to the database the CLI created, and would otherwise ask on stdin
+  nohup "$bin/simplex-directory-service" -d "$work/directory" -y --super-users "$1" < /dev/null >> "$work/directory.log" 2>&1 &
+  echo $! > "$work/directory.pid"
+  sleep 5
+  if ! kill -0 "$(cat "$work/directory.pid")" 2> /dev/null; then
+    echo "error: the directory service exited"
+    cat "$work/directory.log"
+    return 1
+  fi
+}
+
+stop_directory() {
+  local pid deadline
+  pid=$(cat "$work/directory.pid")
+  kill -INT "$pid" 2> /dev/null || true
+  deadline=$((SECONDS + 30))
+  while kill -0 "$pid" 2> /dev/null; do
+    if [ "$SECONDS" -ge "$deadline" ]; then
+      kill -KILL "$pid" 2> /dev/null || true
+    fi
+    sleep 1
+  done
+}
+
+# A super user is known by contact ID, which exists only after the admin connects, so the service starts
+# with nobody and is restarted with the admin.
+connect_admin() {
+  admin 10 "/c $directory_link"
+  expect_out "connection request sent!"
+  admin_until "Welcome to $directory_name" 180 "/tail @'$directory_name' 10"
+  local id
+  id=$(db_query directory "SELECT contact_id FROM contacts WHERE local_display_name = '$admin'")
+  stop_directory
+  start_directory "$id:$admin"
+  echo "directory restarted with super user $id:$admin"
+}
+
+# The directory sends each registration to super users as a message with the exact /approve command.
+approve() {
+  local name=$1 reply=$2
+  admin_until "/approve [0-9]+:$name [0-9]+" 300 "/tail @'$directory_name' 20"
+  local cmd
+  cmd=$(grep -oE "/approve [0-9]+:$name [0-9]+" "$work/out" | tail -n 1)
+  admin 5 "@'$directory_name' $cmd"
+  admin_until "$reply" 120 "/tail @'$directory_name' 20"
+}
+
+# The CLI's group commands can't set an image, so groups are created with the API commands, with the profiles
+# that "/g" and "/public group" make plus the image.
+group_json() {
+  local name=$1 descr=$2 image=$3 prefs=$4
+  echo "{\"displayName\":\"$name\",\"fullName\":\"\",\"shortDescr\":\"$descr\",\"image\":\"$image\",\"groupPreferences\":{\"directMessages\":{\"enable\":\"on\"},\"history\":{\"enable\":\"on\"}$prefs}}"
+}
+
+seed_group() {
+  local user_id
+  user_id=$(db_query "$admin" "SELECT user_id FROM users WHERE local_display_name = '$admin'")
+  group_image=$(avatar "rgb(235,80,70)" "rgb(150,25,30)" G)
+  admin 1 "/_group $user_id $(group_json ci_group "CI seeded group" "$group_image" "")"
+  expect_out "group #ci_group \(CI seeded group\) is created"
+  admin 5 "/a ci_group '$directory_name' admin"
+  expect_out "invitation to join the group #ci_group sent to"
+  approve ci_group "Group approved!"
+}
+
+seed_channel() {
+  admin 1 "/relays name=ci_relay $relay_link"
+  expect_out "^ok$"
+  local user_id relay_id
+  user_id=$(db_query "$admin" "SELECT user_id FROM users WHERE local_display_name = '$admin'")
+  relay_id=$(db_query "$admin" "SELECT chat_relay_id FROM chat_relays WHERE display_name = 'ci_relay' AND deleted = 0")
+  channel_image=$(avatar "rgb(80,200,90)" "rgb(25,120,45)" C)
+  admin 10 "/_public group $user_id $relay_id $(group_json ci_channel "CI seeded channel" "$channel_image" ",\"support\":{\"enable\":\"off\"}")"
+  expect_out "group #ci_channel \(CI seeded channel\) is created"
+  local group_id
+  group_id=$(db_query "$admin" "SELECT group_id FROM groups WHERE local_display_name = 'ci_channel'")
+  admin_until "relay id [0-9]+: active" 180 "/_get relays #$group_id"
+  admin 5 "/share chat #ci_channel @'$directory_name'"
+  expect_out "link to join channel #ci_channel"
+  approve ci_channel "Channel approved!"
+}
+
+# An SMP server on 127.0.0.1 whose [NAMES] section asks the local resolver, which answers from names.json.
+start_names_server() {
+  local cfg=$work/smp/etc logs=$work/smp/var ini deadline
+  echo '{}' > "$work/names.json"
+  nohup python3 "$here/names-resolver.py" "$resolver_port" "$work/names.json" < /dev/null > "$work/resolver.log" 2>&1 &
+  echo $! > "$work/resolver.pid"
+  SMP_SERVER_CFG_PATH=$cfg SMP_SERVER_LOG_PATH=$logs "$bin/smp-server" init -y --ip 127.0.0.1 --no-password --disable-web
+  ini=$cfg/smp-server.ini
+  # only 5223: 443 needs root
+  sed -i -e 's/^port = 5223,443$/port = 5223/' \
+    -e '/^\[NAMES\]/,/^\[/{s/^enable: off$/enable: on/;s|^# resolver_endpoint: http://127.0.0.1:8000$|resolver_endpoint: http://127.0.0.1:'"$resolver_port"'|}' "$ini"
+  if ! grep -qx 'port = 5223' "$ini" ||
+    ! sed -n '/^\[NAMES\]/,/^\[/p' "$ini" | grep -qx 'enable: on' ||
+    ! sed -n '/^\[NAMES\]/,/^\[/p' "$ini" | grep -qx "resolver_endpoint: http://127.0.0.1:$resolver_port"; then
+    echo "error: $ini has a different port or [NAMES] than expected:"
+    grep -E '^port|^\[NAMES\]|enable|resolver' "$ini"
+    return 1
+  fi
+  SMP_SERVER_CFG_PATH=$cfg SMP_SERVER_LOG_PATH=$logs nohup "$bin/smp-server" start < /dev/null > "$work/smp-server.log" 2>&1 &
+  echo $! > "$work/smp-server.pid"
+  deadline=$((SECONDS + 60))
+  until (exec 3<> /dev/tcp/127.0.0.1/5223) 2> /dev/null; do
+    if ! kill -0 "$(cat "$work/smp-server.pid")" 2> /dev/null || [ "$SECONDS" -ge "$deadline" ]; then
+      echo "error: the SMP server is not listening on 5223"
+      cat "$work/smp-server.log"
+      return 1
+    fi
+    sleep 1
+  done
+  names_server="smp://$(cat "$cfg/fingerprint")@127.0.0.1"
+  echo "$names_server" > "$work/names-server"
+  echo "names server: $names_server"
+}
+
+# A CLI client started with -s uses only that server and, once its user exists, gives it every role, names included.
+names_client() {
+  local db=$1
+  shift
+  chat "$db" "$@" --user-display-name "$db" -s "$names_server"
+}
+
+# ci_contact's address is on the names server; the resolver maps seeded.testing to it, and ci_contact claims the name.
+seed_name() {
+  local image link
+  image=$(avatar "rgb(70,130,240)" "rgb(30,50,170)" N)
+  names_client ci_contact 1 "/_profile 1 {\"displayName\":\"ci_contact\",\"fullName\":\"\",\"shortDescr\":\"CI seeded contact\",\"image\":\"$image\"}"
+  names_client ci_contact 3 "/ad"
+  link=$(awk '/Your new chat address is created!/ {getline; getline; print; exit}' "$work/out")
+  case "$link" in
+    https://*/a#*) ;;
+    *)
+      echo "error: no short address for ci_contact in the output"
+      return 1
+      ;;
+  esac
+  jq -n --arg n "$name_label" --arg l "$link" '{($n): {simplexContact: [$l]}}' > "$work/names.json"
+  names_client ci_contact 5 "/_set domain 1 $name_label.testing"
+  # what the app does on the Search key, from a client that knows nothing but the names server; it finds the
+  # address only if ci_contact's claim is in the address data
+  names_client name_probe 1 "/user"
+  names_client name_probe 5 "/_connect plan 1 @$name_label.testing"
+  expect_out "contact address: ok to connect"
+  echo "@$name_label.testing resolves to ci_contact's address"
+}
+
+searcher() {
+  chat searcher "$1" "$2" --user-display-name ci_searcher
+}
+
+# A new user connects to the directory and sends the search text; it replies with the count, then one message per
+# group or channel found, with its image.
+search_by_message() {
+  searcher 10 "/c $directory_link"
+  expect_out "connection request sent!"
+  until_shown searcher "Welcome to $directory_name" 180 "/tail @'$directory_name' 10"
+  searcher 5 "@'$directory_name' $search_text"
+  until_shown searcher "Found 2 group\(s\)" 120 "/tail @'$directory_name' 10"
+  until_shown searcher "ci_group" 60 "/tail @'$directory_name' 10"
+  until_shown searcher "ci_channel" 60 "/tail @'$directory_name' 10"
+  echo "search for \"$search_text\" by message found ci_group and ci_channel"
+}
+
+dump_directory() {
+  echo "::group::directory registrations"
+  db_query directory "SELECT group_id, group_reg_status FROM sx_directory_group_regs" || true
+  echo "::endgroup::"
+}
+
+start() {
+  bin=$work/bin
+  mkdir -p "$bin"
+  tar -C "$bin" -xzf "$1"
+  "$bin/simplex-chat" --version
+  "$bin/simplex-directory-service" --version
+
+  start_relay
+  create_directory
+  start_directory "0:nobody"
+  trap dump_directory EXIT
+  connect_admin
+  seed_group
+  seed_channel
+  search_by_message
+  start_names_server
+  seed_name
+}
+
+stop() {
+  local p
+  for p in directory relay smp-server resolver; do
+    if [ -f "$work/$p.pid" ]; then
+      kill -INT "$(cat "$work/$p.pid")" 2> /dev/null || true
+    fi
+  done
+  sleep 3
+  for p in directory relay smp-server resolver; do
+    echo "::group::$p log"
+    cat "$work/$p.log" 2> /dev/null || true
+    echo "::endgroup::"
+  done
+}
+
+case "${1:-}" in
+  start)
+    work=$3
+    mkdir -p "$work"
+    start "$2"
+    ;;
+  stop)
+    work=$2
+    stop
+    ;;
+  *)
+    echo "usage: $0 start <backend .tar.gz> <work dir> | stop <work dir>"
+    exit 1
+    ;;
+esac
diff --git a/scripts/ci/desktop-linux/build-backend.sh b/scripts/ci/desktop-linux/build-backend.sh
new file mode 100755
index 0000000000..adda90dcfe
--- /dev/null
+++ b/scripts/ci/desktop-linux/build-backend.sh
@@ -0,0 +1,46 @@
+#!/bin/bash
+
+# Builds the CLI, the directory service and the SMP server that the app job runs as its test backend.
+# Usage: scripts/ci/desktop-linux/build-backend.sh <output .tar.gz>
+# They need the server-capable configuration (no client_library), as build.yml's Linux job builds the CLI.
+# The SMP server, which resolves the test's SimpleX names, comes from a clone of the simplexmq commit that
+# cabal.project pins: cabal builds only the libraries of a source-repository-package.
+
+set -euo pipefail
+
+mkdir -p "$(dirname "$1")"
+out="$(cd "$(dirname "$1")" && pwd)/$(basename "$1")"
+
+ghc --version
+cabal --version
+du -sh ~/.cabal/store dist-newstyle 2> /dev/null || true
+
+cat > cabal.project.local << EOF
+ignore-project: False
+jobs: \$ncpus
+
+package direct-sqlcipher
+    flags: +openssl
+EOF
+
+cabal build exe:simplex-chat exe:simplex-directory-service
+
+simplexmq_tag=$(sed -n '/simplex-chat\/simplexmq.git/{n;s/^ *tag: *//p}' cabal.project)
+smq=$(mktemp -d)
+git -C "$smq" init -q
+git -C "$smq" fetch -q --depth 1 https://github.com/simplex-chat/simplexmq.git "$simplexmq_tag"
+git -C "$smq" checkout -q FETCH_HEAD
+git -C "$smq" submodule update -q --init --recursive
+cp cabal.project.local "$smq"
+(cd "$smq" && cabal build exe:smp-server)
+
+pkg=$(mktemp -d)
+for exe in simplex-chat simplex-directory-service; do
+  cp "$(cabal list-bin "exe:$exe")" "$pkg"
+done
+# in a fresh project list-bin first prints git's output from syncing the source-repository-packages
+cp "$(cd "$smq" && cabal list-bin exe:smp-server | tail -n 1)" "$pkg"
+ldd "$pkg"/*
+
+tar -C "$pkg" -czf "$out" .
+ls -la "$out"
diff --git a/scripts/ci/desktop-linux/build-core.sh b/scripts/ci/desktop-linux/build-core.sh
new file mode 100755
index 0000000000..13ab52eb30
--- /dev/null
+++ b/scripts/ci/desktop-linux/build-core.sh
@@ -0,0 +1,39 @@
+#!/bin/bash
+
+# Builds the desktop core library for Linux with scripts/desktop/build-lib-linux.sh, as build.yml does, and packs its libs directory.
+# Usage: scripts/ci/desktop-linux/build-core.sh <output .tar.gz>
+
+set -euo pipefail
+
+mkdir -p "$(dirname "$1")"
+out="$(cd "$(dirname "$1")" && pwd)/$(basename "$1")"
+arch=$(uname -m)
+ghc_ver=$(ghc --numeric-version)
+version=$(sed -n 's/^version: *//p' simplex-chat.cabal)
+libs_dir=apps/multiplatform/common/src/commonMain/cpp/desktop/libs/linux-$arch
+
+ghc --version
+cabal --version
+du -sh ~/.local/state/cabal/store ~/.cabal/store dist-newstyle 2> /dev/null || true
+
+cat > cabal.project.local << EOF
+ignore-project: False
+jobs: \$ncpus
+
+package direct-sqlcipher
+    flags: +openssl
+EOF
+
+# a restored dist-newstyle can hold an older version's build directory, which breaks the script's simplex-chat-* glob
+find "dist-newstyle/build/$arch-linux/ghc-$ghc_ver" -maxdepth 1 -name 'simplex-chat-*' ! -name "simplex-chat-$version" -exec rm -rf {} + 2> /dev/null || true
+
+SKIP_VLC=1 scripts/desktop/build-lib-linux.sh
+
+ls -la "$libs_dir"
+readelf -d "$libs_dir/libsimplex.so" | grep -E 'SONAME|RUNPATH|NEEDED'
+echo "Selected symbols defined in libsimplex.so:"
+nm -D --defined-only "$libs_dir/libsimplex.so" | awk '$NF ~ /^(chat_migrate_init_key|chat_send_cmd_retry|chat_recv_msg_wait)$/ {print "  " $NF}'
+du -sh "$libs_dir"
+
+tar -C "$libs_dir" -czf "$out" .
+ls -la "$out"
diff --git a/scripts/ci/desktop-linux/claude-guard.py b/scripts/ci/desktop-linux/claude-guard.py
new file mode 100755
index 0000000000..7b004584b2
--- /dev/null
+++ b/scripts/ci/desktop-linux/claude-guard.py
@@ -0,0 +1,25 @@
+#!/usr/bin/env python3
+
+# PreToolUse hook for Claude on the runner: lets through only Bash commands that run the ui helper, with plain
+# arguments, so the session has no general shell. Claude Code runs read-only commands such as cat and echo without
+# asking in every permission mode, so permission rules alone can't exclude them.
+# Exits 2 for anything else; Claude sees the message as the reason. Each decision is appended to CLAUDE_GUARD_LOG
+# when it is set, as evidence that the hook ran.
+
+import json
+import os
+import re
+import sys
+
+# nothing that chains, pipes, redirects, substitutes, expands or escapes
+UI_COMMAND = re.compile(r"ui( [^;&|<>$`()\\\r\n]*)?")
+
+call = json.load(sys.stdin)
+command = (call.get("tool_input") or {}).get("command", "").strip()
+allowed = call.get("tool_name") != "Bash" or UI_COMMAND.fullmatch(command)
+if os.environ.get("CLAUDE_GUARD_LOG"):
+    with open(os.environ["CLAUDE_GUARD_LOG"], "a") as log:
+        log.write(f"{'allow' if allowed else 'refuse'} {call.get('tool_name')}: {command[:200]!r}\n")
+if not allowed:
+    print(f"Only the ui helper runs here, as one command: ui <command> [args]. Refused: {command[:200]}", file=sys.stderr)
+    sys.exit(2)
diff --git a/scripts/ci/desktop-linux/claude-test.md b/scripts/ci/desktop-linux/claude-test.md
new file mode 100644
index 0000000000..94982805f1
--- /dev/null
+++ b/scripts/ci/desktop-linux/claude-test.md
@@ -0,0 +1,52 @@
+# Test: onboarding and the chat list in the SimpleX Chat desktop app
+
+You are testing the SimpleX Chat desktop app, which runs on a virtual display on this machine. Drive it only with the `ui` helper, through Bash, one command per call: `ui <command> [args]`. Anything else is refused; don't look for ways around that, and if something blocks the test, report it. The commands are listed at the end.
+
+Your working directory is where your output goes. `ui shot <name>` saves `screens/NN-<name>.png` and prints the text read from it, one phrase per line after its centre `x,y` in screen pixels. Read the PNG to see the screen (1440×900, the app window at the top left). OCR can misread or split words; when the text and the picture disagree, trust the picture. "Above" means a smaller y.
+
+## What is set up
+
+- The app is already running, on its first screen, with a new, empty database: never run `ui start` or `ui stop`. Begin with `ui shot start` to see it.
+- After onboarding, the chat list is in the left pane (x 1 to 389), and the right pane shows the empty chat list's cards. An empty chat list shows only its toolbar, with the profile picture at about 27,730 and a pencil at about 363,730: the search field "Search or paste SimpleX link" appears once there is a chat. In the default "Reachable app toolbars" layout, the toolbar and the search field are at the bottom of the left pane.
+
+## The test
+
+**A. Onboarding.** Each screen waits for the one before it; wait for a text before clicking it.
+
+1. The first screen has "Create your profile": click it.
+2. On "Create profile", click the field "Enter profile name", type `citester`, and click "Create profile".
+3. The next screen offers a database passphrase: click "Use random passphrase", then "OK" in the alert that follows.
+4. Click "Continue", then "Accept" on the screen after it.
+5. Wait up to 60 s for the chat list: the right pane shows "Talk to someone". Take a shot.
+
+**B. A group, and the chat list with the toolbar at the bottom.**
+
+1. Click the pencil (about 363,730) to open New chat, then "Create group". Click the name field, about 40 px below the text "Enter group name", type `seeded notes`, and click "Create group". If "Skip inviting members" shows, click it.
+2. The group opens in the right pane, and stays there. Press Escape until the left pane shows the chat list again, then take a shot.
+3. Check, noting the evidence (screenshot names, positions):
+   - "seeded notes" is listed in the left pane;
+   - the search field "Search or paste SimpleX link" is at the bottom of the left pane (y over 600), and "Add list" is just above it;
+   - nothing is cut off, overlapping or garbled.
+
+**Between the layouts:** click the profile picture at the left end of the bottom toolbar (about 27,730) to open the menu, open "Settings", then "Appearance", and turn off the switch of "Reachable app toolbars", at the right end of its row (about x 335). Press Escape until the chat list shows again; its search field should now be at the top.
+
+**C. The chat list, toolbar at the top.** Check, noting the evidence:
+
+- "seeded notes" is still listed;
+- the search field is at the top of the left pane (y under 200), and "Add list" is just below it;
+- nothing is cut off, overlapping or garbled. The pencil is now a floating button at the bottom right of the left pane, drawn over whatever the list shows there: note what it covers, but that alone is not a failure.
+
+You have at most 60 turns, and the whole test fits in about 25 if you chain steps whose outcome you can predict with `ui do` and look at the screen after each chain. For example:
+
+- `ui do click-text "Create your profile" -- wait "Enter profile name" -- click-text "Enter profile name" -- type citester -- shot profile`
+- `ui do click-text "Create profile" -- wait "Use random passphrase" 60 -- shot passphrase`
+- `ui do click 363 730 -- click-text "Create group" 10 -- wait "Enter group name" -- shot new-group`
+- `ui do click 27 730 -- click-text Settings 10 -- click-text Appearance 10 -- wait "Reachable app toolbars" -- shot appearance`
+
+`ui do` stops at the first command that fails, so a failed chain tells you where it stopped.
+
+## Report
+
+Write `report.md` in your working directory: for each of A, B and C, each check you ran as PASS or FAIL with its evidence, and anything else unexpected. End your final message with one line: `CLAUDE-TEST: PASS` if every check you ran passed, otherwise `CLAUDE-TEST: FAIL` followed by the checks that failed.
+
+## The ui helper
diff --git a/scripts/ci/desktop-linux/claude-test.sh b/scripts/ci/desktop-linux/claude-test.sh
new file mode 100755
index 0000000000..d254226b75
--- /dev/null
+++ b/scripts/ci/desktop-linux/claude-test.sh
@@ -0,0 +1,81 @@
+#!/bin/bash
+
+# Runs Claude Code to repeat the smoke test with the ui helper, as claude-test.md describes, and passes when
+# its final message ends with "CLAUDE-TEST: PASS".
+# Usage: scripts/ci/desktop-linux/claude-test.sh <output dir> <transcript .jsonl>
+# Expects the app started (smoke-test.sh ... start) with UI_OUT under <output dir>, claude and ui on PATH,
+# CLAUDE_MODEL and CLAUDE_CODE_OAUTH_TOKEN. Claude works in <output dir>: the screenshots, its report.md and the
+# prompt it was given end up there. The transcript, Claude Code's stderr (<transcript>.stderr) and the guard hook's
+# log (<transcript>.guard.log) are kept outside it, where Claude can't write. If any of them holds the token, all are
+# deleted and the run fails.
+
+set -euo pipefail
+
+: "${CLAUDE_CODE_OAUTH_TOKEN:?CLAUDE_CODE_OAUTH_TOKEN must be set}"
+here=$(cd "$(dirname "$0")" && pwd)
+out=$(cd "$1" && pwd)
+transcript=$2
+stderr=$transcript.stderr
+settings=$(mktemp)
+export CLAUDE_GUARD_LOG=$transcript.guard.log
+: > "$CLAUDE_GUARD_LOG"
+
+{
+  cat "$here/claude-test.md"
+  echo
+  echo '```'
+  "$here/ui" || true
+  echo '```'
+} > "$out/prompt.md"
+
+cat > "$settings" << EOF
+{"hooks": {"PreToolUse": [{"matcher": "Bash", "hooks": [{"type": "command", "command": "$here/claude-guard.py"}]}]}}
+EOF
+
+claude --version
+cd "$out"
+status=0
+claude -p "$(cat prompt.md)" \
+  --model "$CLAUDE_MODEL" \
+  --max-turns 60 \
+  --max-budget-usd 3 \
+  --output-format stream-json \
+  --verbose \
+  --tools Bash,Read,Write \
+  --permission-mode dontAsk \
+  --allowedTools "Bash(ui *)" "Read(/$out/**)" "Edit(/$out/**)" \
+  --disallowedTools "mcp__*" \
+  --strict-mcp-config \
+  --disable-slash-commands \
+  --no-session-persistence \
+  --settings "$settings" \
+  < /dev/null > "$transcript" 2> "$stderr" || status=$?
+
+# A second safeguard to the file tools' limits: what the session wrote is printed and uploaded only when it is known
+# not to hold the token. grep reads the token from a pipe, so it is in no process's arguments.
+leak=0
+printf '%s\n' "$CLAUDE_CODE_OAUTH_TOKEN" | grep -rqF -f - -- "$out" "$transcript" "$stderr" "$CLAUDE_GUARD_LOG" || leak=$?
+if [ "$leak" -ne 1 ]; then
+  rm -rf -- "$out" "$transcript" "$stderr" "$CLAUDE_GUARD_LOG"
+  echo "error: the token is in the Claude session's output, or checking for it failed (grep exited $leak); the output, transcript, stderr and guard log are deleted"
+  exit 1
+fi
+
+echo "::group::claude stderr"
+cat "$stderr"
+echo "::endgroup::"
+echo "::group::report.md"
+cat report.md 2> /dev/null || echo "no report.md"
+echo "::endgroup::"
+echo "::group::guard hook decisions"
+cat "$CLAUDE_GUARD_LOG"
+echo "::endgroup::"
+result=$(jq -r 'select(.type == "result") | .result // empty' "$transcript" 2> /dev/null | tail -n 20 || true)
+echo "final message, last lines:"
+echo "$result"
+if [ "$status" -ne 0 ]; then
+  echo "error: claude exited with $status"
+  exit 1
+fi
+last=$(grep -v '^[[:space:]]*$' <<< "$result" | tail -n 1 || true)
+grep -qxE '[*`]*CLAUDE-TEST: PASS[*`]*' <<< "$last"
diff --git a/scripts/ci/desktop-linux/claude-usage.py b/scripts/ci/desktop-linux/claude-usage.py
new file mode 100755
index 0000000000..1cf9f8678d
--- /dev/null
+++ b/scripts/ci/desktop-linux/claude-usage.py
@@ -0,0 +1,62 @@
+#!/usr/bin/env python3
+
+# Reports what a Claude Code run spent, from the result event at the end of its stream-json transcript: prints it,
+# adds it to the job summary, and writes it as JSON. Without a result event (a timeout or a crash) it says so
+# rather than reporting zero.
+# Usage: scripts/ci/desktop-linux/claude-usage.py <transcript .jsonl> <output .json>
+
+import json
+import os
+import sys
+
+FIELDS = ["subtype", "is_error", "num_turns", "duration_ms", "total_cost_usd", "usage", "modelUsage"]
+
+
+def last_result(path):
+    result = None
+    try:
+        with open(path) as f:
+            for line in f:
+                try:
+                    event = json.loads(line)
+                except json.JSONDecodeError:
+                    continue
+                if isinstance(event, dict) and event.get("type") == "result":
+                    result = event
+    except FileNotFoundError:
+        pass
+    return result
+
+
+def summary(result):
+    lines = ["### Claude run usage", ""]
+    if result is None:
+        return lines + ["No result event in the transcript (timeout or crash): usage unknown, not zero."]
+    usage = result.get("usage") or {}
+    lines += [
+        f"- result: {result.get('subtype')}{' (error)' if result.get('is_error') else ''}",
+        f"- turns: {result.get('num_turns')}",
+        f"- duration: {(result.get('duration_ms') or 0) / 1000:.0f} s",
+        f"- tokens: input {usage.get('input_tokens')}, output {usage.get('output_tokens')}, "
+        f"cache read {usage.get('cache_read_input_tokens')}, cache write {usage.get('cache_creation_input_tokens')}",
+        f"- total_cost_usd: {result.get('total_cost_usd')}, estimated at API prices "
+        "(computed by Claude Code; on a subscription it is not a bill)",
+    ]
+    for model, model_usage in (result.get("modelUsage") or {}).items():
+        lines.append(f"- {model}: {json.dumps(model_usage)}")
+    return lines
+
+
+def main():
+    transcript, out = sys.argv[1], sys.argv[2]
+    result = last_result(transcript)
+    with open(out, "w") as f:
+        json.dump({k: result.get(k) for k in FIELDS} if result else {"result": None}, f, indent=2)
+    text = "\n".join(summary(result))
+    print(text)
+    if os.environ.get("GITHUB_STEP_SUMMARY"):
+        with open(os.environ["GITHUB_STEP_SUMMARY"], "a") as f:
+            f.write(text + "\n")
+
+
+main()
diff --git a/scripts/ci/desktop-linux/earlier-run.sh b/scripts/ci/desktop-linux/earlier-run.sh
new file mode 100755
index 0000000000..d83e516249
--- /dev/null
+++ b/scripts/ci/desktop-linux/earlier-run.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+# Finds the newest run of this branch in this repository that uploaded an unexpired artifact with this name,
+# and writes its id as run-id to GITHUB_OUTPUT. Needs GH_TOKEN with actions: read.
+# Usage: scripts/ci/desktop-linux/earlier-run.sh <artifact name>
+# Artifacts from forks and other branches are not used: their workflows could upload anything under this name.
+
+set -euo pipefail
+
+name=$1
+run_id=$(gh api "repos/$GITHUB_REPOSITORY/actions/artifacts?name=$name&per_page=100" | jq -r --arg branch "$GITHUB_REF_NAME" '
+  [.artifacts[]
+    | select((.expired | not) and .workflow_run.head_branch == $branch and .workflow_run.head_repository_id == .workflow_run.repository_id)]
+  | sort_by(.created_at) | last | .workflow_run.id // empty')
+if [ -n "$run_id" ]; then
+  echo "$name: from run $run_id"
+  echo "run-id=$run_id" >> "$GITHUB_OUTPUT"
+else
+  echo "$name: not built yet"
+fi
diff --git a/scripts/ci/desktop-linux/install-core.sh b/scripts/ci/desktop-linux/install-core.sh
new file mode 100755
index 0000000000..c521fbd588
--- /dev/null
+++ b/scripts/ci/desktop-linux/install-core.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+
+# Unpacks the core package from build-core.sh where scripts/desktop/build-lib-linux.sh leaves the libraries,
+# and links them as the desktop app's resources, as that script does.
+# Usage: scripts/ci/desktop-linux/install-core.sh <core .tar.gz>
+
+set -euo pipefail
+
+arch=$(uname -m)
+case "$arch" in
+  aarch64) compose_arch=arm64 ;;
+  *) compose_arch=x64 ;;
+esac
+libs_dir=apps/multiplatform/common/src/commonMain/cpp/desktop/libs/linux-$arch
+
+mkdir -p "$libs_dir"
+tar -C "$libs_dir" -xzf "$1"
+ls -la "$libs_dir"
+
+mkdir -p apps/multiplatform/build/links
+ln -sfT "../../common/src/commonMain/cpp/desktop/libs/linux-$arch/" "apps/multiplatform/build/links/linux-$compose_arch"
+ls -la apps/multiplatform/build/links
diff --git a/scripts/ci/desktop-linux/names-resolver.py b/scripts/ci/desktop-linux/names-resolver.py
new file mode 100644
index 0000000000..34ff8cfd8b
--- /dev/null
+++ b/scripts/ci/desktop-linux/names-resolver.py
@@ -0,0 +1,124 @@
+#!/usr/bin/env python3
+
+# A SimpleX name resolver for the test SMP server's [NAMES] section, as simplexmq's test resolver answers:
+# GET /v2/resolve/<query> with a NameResponse for every name, registered or not, and GET /health.
+# Names are read from the registry file on each request: {"<label>": {"simplexContact": [...], "simplexChannel": [...]}},
+# all under .testing. A v22 router asks by label hash, "[<keccak-256 hex>].testing", so names are matched by hash.
+# Usage: names-resolver.py <port> <registry .json>
+
+import json
+import sys
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from urllib.parse import unquote
+
+MASK = (1 << 64) - 1
+ROTATIONS = [[0, 36, 3, 41, 18], [1, 44, 10, 45, 2], [62, 6, 43, 15, 61], [28, 55, 25, 21, 56], [27, 20, 39, 8, 14]]
+
+
+def round_constants():
+    r, constants = 1, []
+    for _ in range(24):
+        c = 0
+        for j in range(7):
+            if r & 1:
+                c |= 1 << ((1 << j) - 1)
+            r = ((r << 1) ^ 0x71) & 0xFF if r & 0x80 else r << 1
+        constants.append(c)
+    return constants
+
+
+ROUND_CONSTANTS = round_constants()
+
+
+def rotate(x, n):
+    return ((x << n) | (x >> (64 - n))) & MASK if n else x
+
+
+def keccak_f(a):
+    for rc in ROUND_CONSTANTS:
+        c = [a[x][0] ^ a[x][1] ^ a[x][2] ^ a[x][3] ^ a[x][4] for x in range(5)]
+        d = [c[x - 1] ^ rotate(c[(x + 1) % 5], 1) for x in range(5)]
+        a = [[a[x][y] ^ d[x] for y in range(5)] for x in range(5)]
+        b = [[0] * 5 for _ in range(5)]
+        for x in range(5):
+            for y in range(5):
+                b[y][(2 * x + 3 * y) % 5] = rotate(a[x][y], ROTATIONS[x][y])
+        a = [[b[x][y] ^ (~b[(x + 1) % 5][y] & b[(x + 2) % 5][y]) for y in range(5)] for x in range(5)]
+        a[0][0] ^= rc
+    return a
+
+
+# Keccak-256 as Ethereum uses it (padding 0x01, not SHA3-256's 0x06), which labelHash in SimplexName.hs is
+def keccak256(data):
+    rate = 136
+    padded = bytearray(data) + b"\x01" + bytes(-(len(data) + 1) % rate)
+    padded[-1] |= 0x80
+    a = [[0] * 5 for _ in range(5)]
+    for block in range(0, len(padded), rate):
+        for i in range(rate // 8):
+            a[i % 5][i // 5] ^= int.from_bytes(padded[block + 8 * i:block + 8 * i + 8], "little")
+        a = keccak_f(a)
+    return b"".join(a[i % 5][i // 5].to_bytes(8, "little") for i in range(4))
+
+
+def query_key(label):
+    return "[" + keccak256(label.lower().encode()).hex() + "].testing"
+
+
+def record(label, links):
+    return {
+        "name": label + ".testing",
+        "nickname": "",
+        "website": "",
+        "location": "",
+        "simplexContact": links.get("simplexContact", []),
+        "simplexChannel": links.get("simplexChannel", []),
+        "eth": None,
+        "btc": None,
+        "xmr": None,
+        "dot": None,
+        "owner": "",
+        "resolver": "",
+    }
+
+
+def name_response(query, registry_file):
+    with open(registry_file) as f:
+        registry = json.load(f)
+    for label, links in registry.items():
+        if query in (query_key(label), label.lower() + ".testing"):
+            return {"registration": {"type": "registered", "nameRecord": record(label, links)}}
+    return {"registration": {"type": "available", "pricing": {"registrationPrices": {}, "basePrice": 1000, "minLabelLength": 1}}}
+
+
+class Resolver(BaseHTTPRequestHandler):
+    def do_GET(self):
+        prefix = "/v2/resolve/"
+        if self.path == "/health":
+            self.reply(200, {})
+        elif self.path.startswith(prefix):
+            query = unquote(self.path[len(prefix):])
+            response = name_response(query, self.server.registry_file)
+            print(f"resolve {query}: {response['registration']['type']}", flush=True)
+            self.reply(200, response)
+        else:
+            self.reply(404, {})
+
+    def reply(self, status, body):
+        data = json.dumps(body).encode()
+        self.send_response(status)
+        self.send_header("Content-Type", "application/json")
+        self.send_header("Content-Length", str(len(data)))
+        self.end_headers()
+        self.wfile.write(data)
+
+
+def main():
+    server = ThreadingHTTPServer(("127.0.0.1", int(sys.argv[1])), Resolver)
+    server.registry_file = sys.argv[2]
+    print(f"names resolver on 127.0.0.1:{sys.argv[1]}, registry {sys.argv[2]}", flush=True)
+    server.serve_forever()
+
+
+if __name__ == "__main__":
+    main()
diff --git a/scripts/ci/desktop-linux/release-app.sh b/scripts/ci/desktop-linux/release-app.sh
new file mode 100755
index 0000000000..d08f51554e
--- /dev/null
+++ b/scripts/ci/desktop-linux/release-app.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+# Downloads the released desktop app for this runner's Ubuntu at the branch's latest release tag, and unpacks it.
+# Usage: scripts/ci/desktop-linux/release-app.sh <dir>
+# The app is then in <dir>/app/opt/simplex, laid out as release/main/app/simplex of a branch build.
+
+set -euo pipefail
+
+dir=$1
+tag=$(git describe --tags --abbrev=0 --match 'v*' --exclude '*-armv7a' --exclude '*-fdroid')
+. /etc/os-release
+asset=simplex-desktop-ubuntu-${VERSION_ID/./_}-$(uname -m).deb
+echo "release $tag, asset $asset"
+
+mkdir -p "$dir"
+curl -fsSL -o "$dir/$asset" "https://github.com/simplex-chat/simplex-chat/releases/download/$tag/$asset"
+dpkg-deb -x "$dir/$asset" "$dir/app"
+rm "$dir/$asset"
+ls -la "$dir/app/opt/simplex/bin"
+du -sh "$dir/app/opt/simplex"
diff --git a/scripts/ci/desktop-linux/screen-colour.py b/scripts/ci/desktop-linux/screen-colour.py
new file mode 100755
index 0000000000..5135f33afe
--- /dev/null
+++ b/scripts/ci/desktop-linux/screen-colour.py
@@ -0,0 +1,45 @@
+#!/usr/bin/env python3
+
+# Prints how many pixels of an image stand out from its background (its most common colour), and their mean colour.
+# With a colour, fails unless enough pixels stand out and that channel of their mean exceeds the other two by a margin.
+# Usage: screen-colour.py <image.ppm> [red|green|blue]
+
+import re
+import sys
+from collections import Counter
+
+# A pixel stands out when one of its channels differs from the background's by more than this.
+DIFFERENCE = 48
+# A 42 px profile image has about 1200 pixels; fewer than this standing out is no image.
+MIN_PIXELS = 300
+DOMINANCE = 50
+CHANNELS = {"red": 0, "green": 1, "blue": 2}
+
+
+def read_ppm(path):
+    with open(path, "rb") as f:
+        data = f.read()
+    header = re.match(rb"P6\s+(\d+)\s+(\d+)\s+(\d+)\s", data)
+    if int(header[3]) != 255:
+        sys.exit(f"{path}: expected 8-bit samples, got maximum {int(header[3])}")
+    samples = data[header.end():]
+    return [tuple(samples[i:i + 3]) for i in range(0, len(samples) - 2, 3)]
+
+
+def main():
+    pixels = read_ppm(sys.argv[1])
+    colour = sys.argv[2] if len(sys.argv) > 2 else None
+    if colour is not None and colour not in CHANNELS:
+        sys.exit(f"unknown colour: {colour}")
+    background = Counter(pixels).most_common(1)[0][0]
+    standing_out = [p for p in pixels if max(abs(a - b) for a, b in zip(p, background)) > DIFFERENCE]
+    n = len(standing_out)
+    mean = [round(sum(p[c] for p in standing_out) / n) if n else 0 for c in range(3)]
+    print(f"{n} px, mean {mean[0]},{mean[1]},{mean[2]}")
+    if colour is not None:
+        c = CHANNELS[colour]
+        if n < MIN_PIXELS or any(mean[c] - mean[o] < DOMINANCE for o in range(3) if o != c):
+            sys.exit(1)
+
+
+main()
diff --git a/scripts/ci/desktop-linux/screen-ink.py b/scripts/ci/desktop-linux/screen-ink.py
new file mode 100755
index 0000000000..427f4c6875
--- /dev/null
+++ b/scripts/ci/desktop-linux/screen-ink.py
@@ -0,0 +1,27 @@
+#!/usr/bin/env python3
+
+# Prints the height in pixels of the ink in a box of a screenshot: from the first to the last row with a pixel darker than
+# halfway between the box's lightest and darkest. OCR's boxes are padded, so they hardly tell text sizes apart.
+#
+#   screen-ink.py <gray.pgm> <left> <top> <right> <bottom>
+#
+# <gray.pgm> is the screenshot in 8-bit grayscale; the box is in its pixels, edges included.
+
+import re
+import sys
+
+
+def main():
+    path, left, top, right, bottom = sys.argv[1], *map(int, sys.argv[2:6])
+    with open(path, "rb") as f:
+        data = f.read()
+    header = re.match(rb"P5\s+(\d+)\s+(\d+)\s+(\d+)\s", data)
+    width, height, pixels = int(header[1]), int(header[2]), data[header.end():]
+    columns = range(max(left, 0), min(right, width - 1) + 1)
+    rows = [[pixels[y * width + x] for x in columns] for y in range(max(top, 0), min(bottom, height - 1) + 1)]
+    threshold = (max(map(max, rows)) + min(map(min, rows))) / 2
+    ink = [i for i, row in enumerate(rows) if min(row) < threshold]
+    print(ink[-1] - ink[0] + 1 if ink else 0)
+
+
+main()
diff --git a/scripts/ci/desktop-linux/screen-text.py b/scripts/ci/desktop-linux/screen-text.py
new file mode 100755
index 0000000000..2e6537b956
--- /dev/null
+++ b/scripts/ci/desktop-linux/screen-text.py
@@ -0,0 +1,146 @@
+#!/usr/bin/env python3
+
+# Reads the words tesseract found on a screenshot and prints the phrases on screen, or where one text is.
+#
+#   screen-text.py <scale> <ocr dir> lines         one phrase per line: centre x,y and its words
+#   screen-text.py <scale> <ocr dir> find <text>   "x y left top right bottom": centre and box of the text, from the phrase
+#                                                  that is exactly the text, else the first one containing it; fails if none does
+#
+# <ocr dir> has tesseract's TSV of the dark-text and the light-text pass (dark.tsv, light.tsv), in pixels of the
+# screenshot enlarged by <scale>, and gray.pgm, the screenshot in 8-bit grayscale. Printed coordinates are
+# screen pixels. Text is compared ignoring case, spaces and punctuation.
+
+import csv
+import os
+import re
+import statistics
+import sys
+
+# Luminance (0-255) below which a background is dark enough for light text: blue buttons are about 115, disabled grey
+# ones about 137, light ones (window, fields, cards) over 230.
+LIGHT_BACKGROUND = 190
+
+
+# In the app's font a capital I looks like a lowercase l, and OCR reads it as one, so the two compare equal.
+def key(text):
+    return re.sub(r"[^0-9a-z]", "", text.lower()).replace("l", "i")
+
+
+def read_words(path, scale):
+    words = []
+    with open(path, newline="") as f:
+        for row in csv.DictReader(f, delimiter="\t", quoting=csv.QUOTE_NONE):
+            text = (row["text"] or "").strip()
+            if row["level"] != "5" or not key(text):
+                continue
+            left, top, width, height = (int(row[k]) / scale for k in ("left", "top", "width", "height"))
+            words.append({"text": text, "key": key(text), "l": left, "t": top, "r": left + width, "b": top + height})
+    return words
+
+
+def read_gray(path):
+    with open(path, "rb") as f:
+        data = f.read()
+    header = re.match(rb"P5\s+(\d+)\s+(\d+)\s+(\d+)\s", data)
+    if int(header[3]) != 255:
+        sys.exit(f"{path}: expected 8-bit samples, got maximum {int(header[3])}")
+    return int(header[1]), int(header[2]), data[header.end():]
+
+
+# The median of the rows 2 to 4 pixels above and below the word: its background, free of its own letters.
+def background(gray, w):
+    width, height, luminance = gray
+    left, right = max(int(w["l"]), 0), min(int(w["r"]), width - 1)
+    rows = [int(w["t"]) - d for d in (2, 3, 4)] + [int(w["b"]) + d for d in (2, 3, 4)]
+    return statistics.median(luminance[y * width + x] for y in rows if 0 <= y < height for x in range(left, right + 1))
+
+
+def box(words):
+    return min(w["l"] for w in words), min(w["t"] for w in words), max(w["r"] for w in words), max(w["b"] for w in words)
+
+
+def centre(words):
+    left, top, right, bottom = box(words)
+    return (left + right) / 2, (top + bottom) / 2
+
+
+# Each pass also reads noise where its polarity doesn't apply (the gaps between dark letters look like light text),
+# so a word counts only from the pass that matches the background under it.
+def screen_words(ocr_dir, scale):
+    gray = read_gray(os.path.join(ocr_dir, "gray.pgm"))
+
+    def on_light_background(w):
+        return background(gray, w) >= LIGHT_BACKGROUND
+
+    dark = read_words(os.path.join(ocr_dir, "dark.tsv"), scale)
+    light = read_words(os.path.join(ocr_dir, "light.tsv"), scale)
+    return [w for w in dark if on_light_background(w)] + [w for w in light if not on_light_background(w)]
+
+
+# A word continues a phrase when it is on the same line as the phrase's last word and at most 1.5 of their height after it;
+# wider gaps separate UI elements.
+def follows(a, b):
+    h = min(a["b"] - a["t"], b["b"] - b["t"])
+    return min(a["b"], b["b"]) - max(a["t"], b["t"]) >= 0.5 * h and -0.5 * h <= b["l"] - a["r"] <= 1.5 * h
+
+
+def phrases(words):
+    result = []
+    for w in sorted(words, key=lambda w: w["l"]):
+        phrase = next((p for p in result if follows(p[-1], w)), None)
+        if phrase:
+            phrase.append(w)
+        else:
+            result.append([w])
+    return sorted(result, key=lambda p: (min(w["t"] for w in p), p[0]["l"]))
+
+
+# OCR can split or join words ("#ci_group" read as "#ci_ group"), so words are compared by their joined characters.
+# It can also glue an icon to the first word, or punctuation or the text cursor to the last, so the text may start
+# inside the first word and end inside the last when at least 4 of its characters are in that word.
+def span_matches(words, target):
+    keys = [w["key"] for w in words]
+    joined = "".join(keys)
+    start = joined.find(target)
+    while start >= 0:
+        end = start + len(target)
+        first_ok = start == 0 or len(keys[0]) - start >= 4
+        last_ok = end == len(joined) or len(keys[-1]) - (len(joined) - end) >= 4
+        if start < len(keys[0]) and end > len(joined) - len(keys[-1]) and first_ok and last_ok:
+            return True
+        start = joined.find(target, start + 1)
+    return False
+
+
+def find(all_phrases, text):
+    target = key(text)
+    if not target:
+        return None
+    for phrase in all_phrases:
+        if "".join(w["key"] for w in phrase) == target:
+            return phrase
+    for phrase in all_phrases:
+        for i in range(len(phrase)):
+            for j in range(i + 1, len(phrase) + 1):
+                if span_matches(phrase[i:j], target):
+                    return phrase[i:j]
+    return None
+
+
+def main():
+    scale, ocr_dir, command, args = float(sys.argv[1]), sys.argv[2], sys.argv[3], sys.argv[4:]
+    on_screen = phrases(screen_words(ocr_dir, scale))
+    if command == "lines":
+        for phrase in on_screen:
+            x, y = centre(phrase)
+            print(f"{round(x)},{round(y)} {' '.join(w['text'] for w in phrase)}")
+    elif command == "find":
+        words = find(on_screen, args[0])
+        if not words:
+            sys.exit(1)
+        print(" ".join(str(round(v)) for v in centre(words) + box(words)))
+    else:
+        sys.exit(f"unknown command: {command}")
+
+
+main()
diff --git a/scripts/ci/desktop-linux/smoke-test.sh b/scripts/ci/desktop-linux/smoke-test.sh
new file mode 100755
index 0000000000..a3561865d9
--- /dev/null
+++ b/scripts/ci/desktop-linux/smoke-test.sh
@@ -0,0 +1,374 @@
+#!/bin/bash
+
+# Starts the desktop app on a virtual display and runs the scripted UI cases with the ui helper: onboarding to the
+# chat list, a local group, then the chat list with the toolbar at the bottom (the default) and at the top.
+# Usage: scripts/ci/desktop-linux/smoke-test.sh <app dir> <output dir> [start|onboarding|layouts|setup|backend]
+# With "start" it stops at the first screen, for an agent to go on from; with "onboarding", at the chat list.
+# "setup" creates the group, makes the test SMP server (backend.sh) the one that resolves SimpleX names, and stops;
+# "backend" does the same, connects to the name that backend.sh registered, and goes on to both layouts.
+# Both need NAMES_SERVER, the test SMP server's address.
+# Each step saves a numbered screenshot and the text read from it to the output dir, prints the text to the log,
+# and adds a line to steps.log there. What the screens show is checked without stopping: every check is listed in
+# checks.txt and the job summary, and the test fails at the end if any failed. The app keeps running for later
+# steps of the job, which get UI_OUT.
+
+set -euo pipefail
+
+app_dir=$1
+export UI_OUT=$2
+cases=${3:-layouts}
+case "$cases" in
+  start | onboarding | layouts | setup | backend) ;;
+  *)
+    echo "error: unknown case \"$cases\": start, onboarding, layouts (the default), setup or backend"
+    exit 1
+    ;;
+esac
+# backend.sh registered seeded.testing for ci_contact
+name_label=seeded
+local_chat="seeded notes"
+ui=$(dirname "$0")/ui
+checks=$UI_OUT/checks.txt
+# switches are at the right of the left pane, where Settings open
+switch_x=335
+mkdir -p "$UI_OUT"
+: > "$checks"
+if [ -n "${GITHUB_ENV:-}" ]; then
+  echo "UI_OUT=$UI_OUT" >> "$GITHUB_ENV"
+fi
+
+report_checks() {
+  [ -s "$checks" ] || return 0
+  echo "::group::checks"
+  cat "$checks"
+  echo "::endgroup::"
+  if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+    {
+      echo "### Smoke test checks"
+      echo
+      sed 's/^/- /' "$checks"
+    } >> "$GITHUB_STEP_SUMMARY"
+  fi
+}
+
+finish() {
+  local status=$?
+  if [ "$status" -ne 0 ]; then
+    "$ui" shot final || true
+  fi
+  echo "::group::app log, last 300 lines"
+  tail -n 300 "$UI_OUT/app.log" || true
+  echo "::endgroup::"
+  report_checks
+  exit "$status"
+}
+trap finish EXIT
+
+fail() {
+  echo "error: $*"
+  exit 1
+}
+
+check() {
+  local what=$1
+  shift
+  if "$@"; then
+    echo "PASS $what" | tee -a "$checks"
+  else
+    echo "FAIL $what" | tee -a "$checks"
+    echo "::error::$what"
+  fi
+}
+
+# text compared as ui compares it: letters and digits, lowercase, a lowercase l read as i
+normalise() {
+  tr -cd '[:alnum:]' <<< "$1" | tr '[:upper:]' '[:lower:]' | tr l i
+}
+
+# Prints "x y" of the text in the chat list pane, left of x 390: a phrase equal to it, else, unless the second argument
+# is "exact", the first containing it. The chats, results and Settings are there; the right pane shows the open chat,
+# which can have the same names.
+left_pane_position() {
+  local target line x y found=""
+  target=$(normalise "$1")
+  while IFS= read -r line; do
+    x=${line%%,*}
+    y=${line#*,}
+    y=${y%% *}
+    [ "$x" -lt 390 ] || continue
+    case "$(normalise "${line#* }")" in
+      "$target")
+        echo "$x $y"
+        return 0
+        ;;
+      *"$target"*)
+        found=${found:-"$x $y"}
+        ;;
+    esac
+  done < <("$ui" text)
+  [ -n "$found" ] && [ "${2:-}" != exact ] || return 1
+  echo "$found"
+}
+
+on_screen() {
+  left_pane_position "$1" > /dev/null
+}
+
+not_on_screen() {
+  ! left_pane_position "$1" > /dev/null
+}
+
+y_of() {
+  local pos
+  pos=$(left_pane_position "$1") || return 1
+  cut -d ' ' -f 2 <<< "$pos"
+}
+
+above() {
+  local a b
+  a=$(y_of "$1") || return 1
+  b=$(y_of "$2") || return 1
+  [ "$a" -lt "$b" ]
+}
+
+# the value is on the same line as its setting's title
+in_line_with() {
+  local value title
+  value=$(y_of "$1") || return 1
+  title=$(y_of "$2") || return 1
+  [ $((value - title)) -lt 10 ] && [ $((title - value)) -lt 10 ]
+}
+
+# Scrolls the left pane down until the text shows above its bottom toolbar.
+scroll_to() {
+  local y
+  for _ in 1 2 3 4 5 6 7 8; do
+    if y=$(y_of "$1") && [ "$y" -lt 640 ]; then
+      return 0
+    fi
+    "$ui" scroll 195 400 down
+  done
+  return 1
+}
+
+# Escape closes one screen at a time, and clears the search field
+back_to_chat_list() {
+  for _ in 1 2 3 4 5 6; do
+    on_chat_list && return 0
+    "$ui" key Escape
+  done
+  on_chat_list
+}
+
+# New chat has the same search field
+on_chat_list() {
+  not_on_screen "Settings" && not_on_screen "Chat preferences" && not_on_screen "Network" && not_on_screen "New chat" && on_screen "Search or paste SimpleX link"
+}
+
+# Opens Settings from the user menu, behind the profile picture at the left of the bottom toolbar.
+open_settings() {
+  "$ui" click 27 730
+  "$ui" click-text "Settings" 10
+}
+
+# Turns "Reachable app toolbars" off in Settings > Appearance, which moves the toolbar and the search field to the top.
+use_top_toolbar() {
+  local y
+  "$ui" key Escape
+  open_settings
+  "$ui" click-text "Appearance" 10
+  "$ui" wait "Reachable app toolbars" 10
+  "$ui" shot appearance
+  y=$(y_of "Reachable app toolbars")
+  "$ui" click "$switch_x" "$y"
+  "$ui" shot appearance-toolbar-switched
+  back_to_chat_list || true
+  "$ui" shot top-chat-list
+  y=$(y_of "Search or paste SimpleX link") || fail "no search field after closing Settings"
+  [ "$y" -lt 200 ] || fail "the search field is still at the bottom (y $y) after switching Reachable app toolbars"
+}
+
+# The search field and "Add list" next to it: at the bottom of the chat list, "Add list" above the field; at the top, below it.
+check_layout() {
+  local layout=$1 field
+  field=$(y_of "Search or paste SimpleX link") || field=""
+  "$ui" shot "$layout-layout"
+  check "$layout: \"$local_chat\" listed" on_screen "$local_chat"
+  if [ "$layout" = bottom ]; then
+    check "bottom: the search field is at the bottom" [ "${field:-0}" -gt 600 ]
+    check "bottom: \"Add list\" above the search field" above "Add list" "Search or paste SimpleX link"
+  else
+    check "top: the search field is at the top" [ "${field:-900}" -lt 200 ]
+    check "top: \"Add list\" below the search field" above "Search or paste SimpleX link" "Add list"
+  fi
+}
+
+# A group of the user's own: without chats the chat list shows no search field.
+create_local_chat() {
+  local y
+  # the pencil at the right of the bottom toolbar opens New chat
+  "$ui" click 363 730
+  "$ui" click-text "Create group" 10
+  "$ui" wait "Enter group name" 10
+  y=$(y_of "Enter group name")
+  "$ui" click 195 $((y + 40))
+  "$ui" type "$local_chat"
+  "$ui" shot new-group
+  "$ui" click-text "Create group" 10
+  "$ui" click-text "Skip inviting members" 10 || true
+  "$ui" shot group-created
+  "$ui" key Escape
+  back_to_chat_list || fail "no chat list after creating the group"
+  # the group stays open in the right pane: Escape doesn't close a chat on desktop
+  on_screen "$local_chat" || fail "\"$local_chat\" is not in the chat list"
+  "$ui" shot local-chat
+}
+
+# Clicks a server role's value until its dropdown shows. The menu is open when an item reads exactly "yes", which no
+# role's value does ("default (yes)", "default (no)", "no"); it can take longer to show than OCR takes to read the screen.
+open_role_menu() {
+  for _ in 1 2 3; do
+    "$ui" click-text "$1" 10 || return 1
+    for _ in 1 2 3; do
+      left_pane_position yes exact > /dev/null && return 0
+      sleep 1
+    done
+  done
+  return 1
+}
+
+# Settings > Network & servers: the test SMP server added with the names role, and names off for the preset
+# operators, so that only the test server resolves names.
+use_names_server() {
+  local x y operator
+  open_settings
+  # OCR reads "Network & servers" as two phrases
+  "$ui" click-text "Network" 10
+  "$ui" click-text "Your servers" 10
+  "$ui" click-text "Add server" 10
+  "$ui" click-text "Enter server manually" 10
+  "$ui" wait "Your server address" 10
+  y=$(y_of "Your server address")
+  "$ui" click 195 $((y + 50))
+  "$ui" type "$NAMES_SERVER"
+  y=$(y_of "Use for new connections")
+  "$ui" click "$switch_x" "$y"
+  "$ui" shot new-server
+  "$ui" key Escape
+  # the New server screen shows the address with "127.0.0.1" too, until it closes
+  "$ui" wait "Add server" 10
+  "$ui" wait "Test servers" 10
+  "$ui" click-text "127.0.0.1" 10
+  "$ui" wait "SMP server" 10
+  scroll_to "To resolve names" || fail "no \"To resolve names\" in the test server's settings"
+  # A dropdown opens from its value; a custom server's roles default to yes, yes and no, so the first "default (yes)"
+  # is the receiving one. A directory service can't reply to queues on this server, so it only resolves names.
+  open_role_menu "default (yes)" || fail "no menu for the test server's \"To receive\""
+  # OCR misreads the short "no", the item after "yes"
+  read -r x y < <(left_pane_position yes exact) || fail "the \"To receive\" menu closed"
+  "$ui" click "$x" $((y + 48))
+  open_role_menu "default (no)" || fail "no menu for the test server's \"To resolve names\""
+  read -r x y < <(left_pane_position yes exact) || fail "the \"To resolve names\" menu closed"
+  "$ui" click "$x" "$y"
+  "$ui" shot names-server-roles
+  # the first "default (yes)" and the first "yes" are on the lines after "To receive", so it is no
+  in_line_with "default (yes)" "For private routing" || fail "the test server's \"To receive\" is still its default"
+  in_line_with "yes" "To resolve names" || fail "the test server's \"To resolve names\" is not yes, or \"To receive\" is"
+  "$ui" key Escape
+  "$ui" wait "Add server" 10
+  "$ui" key Escape
+  for operator in "SimpleX Chat" Flux; do
+    "$ui" click-text "$operator" 10
+    # the operator's own toggle: the title "<operator> servers" can wrap
+    "$ui" wait "Use servers" 10
+    scroll_to "To resolve names" || fail "no \"To resolve names\" in the $operator settings"
+    y=$(y_of "To resolve names")
+    "$ui" click "$switch_x" "$y"
+    "$ui" shot "names-off-$(tr -cd 'a-zA-Z' <<< "$operator")"
+    "$ui" key Escape
+    "$ui" wait "Your servers" 10
+  done
+  scroll_to "Save servers" || fail "no \"Save servers\" in Network & servers"
+  "$ui" click-text "Save servers" 10
+  sleep 2
+  "$ui" shot servers-saved
+  back_to_chat_list || fail "no chat list after saving the servers"
+}
+
+# A bare name in the search field is offered with the .testing domain; the test SMP server resolves it to ci_contact's
+# address, and the app shows that profile before connecting.
+connect_by_name() {
+  "$ui" click-text "Search or paste SimpleX link"
+  "$ui" type "$name_label"
+  "$ui" wait "Connect to $name_label.testing" 15
+  "$ui" shot name-typed
+  "$ui" click-text "Connect to $name_label.testing"
+  check "$name_label.testing resolves to ci_contact" "$ui" wait ci_contact 60
+  check "the app offers to open a new chat with ci_contact" "$ui" wait "Open new chat" 10
+  "$ui" shot name-resolved
+  "$ui" click-text Cancel 10 || "$ui" key Escape
+  back_to_chat_list || fail "no chat list after the name's alert"
+}
+
+# private routing to unknown servers only: the preset servers that would proxy name lookups can't reach the test SMP
+# server on 127.0.0.1; developer tools at the debug level put the app's debug log in app.log
+"$ui" start "$app_dir" NetworkSMPProxyMode=Unknown DeveloperTools=true LogLevel=DEBUG
+
+# onboarding to the chat list
+"$ui" wait "Create your profile" 180
+"$ui" shot first-screen
+if [ "$cases" = start ]; then
+  echo "smoke test: the app shows its first screen"
+  exit 0
+fi
+"$ui" click-text "Create your profile"
+
+"$ui" wait "Create profile" 30
+"$ui" click-text "Enter profile name"
+"$ui" type citester
+"$ui" shot profile-name
+"$ui" click-text "Create profile"
+
+# a new desktop database gets a random passphrase, which onboarding offers to replace
+"$ui" wait "Use random passphrase" 60
+"$ui" shot database-passphrase
+"$ui" click-text "Use random passphrase"
+"$ui" wait "OK" 10
+"$ui" shot random-passphrase-alert
+"$ui" click-text "OK"
+
+"$ui" wait "Continue" 60
+"$ui" shot your-network
+"$ui" click-text "Continue"
+
+"$ui" wait "Accept" 30
+"$ui" shot network-commitments
+"$ui" click-text "Accept"
+
+"$ui" wait "Talk to someone" 60
+sleep 3
+"$ui" shot chat-list
+if [ "$cases" = onboarding ]; then
+  echo "smoke test passed: onboarding reached the chat list"
+  exit 0
+fi
+
+create_local_chat
+if [ "$cases" = setup ] || [ "$cases" = backend ]; then
+  : "${NAMES_SERVER:?NAMES_SERVER must be the test SMP server address}"
+  use_names_server
+  if [ "$cases" = setup ]; then
+    echo "smoke test setup done: \"$local_chat\" created, $NAMES_SERVER resolves names"
+    exit 0
+  fi
+  connect_by_name
+fi
+
+check_layout bottom
+use_top_toolbar
+check_layout top
+
+if grep -q '^FAIL' "$checks"; then
+  fail "the smoke test failed checks: $(grep -c '^FAIL' "$checks") of $(grep -cE '^(PASS|FAIL)' "$checks")"
+fi
+echo "smoke test passed: onboarding reached the chat list, which shows \"$local_chat\" with the toolbar at the bottom and at the top"
diff --git a/scripts/ci/desktop-linux/test-summary.py b/scripts/ci/desktop-linux/test-summary.py
new file mode 100755
index 0000000000..579ce3fe00
--- /dev/null
+++ b/scripts/ci/desktop-linux/test-summary.py
@@ -0,0 +1,34 @@
+#!/usr/bin/env python3
+
+# Prints the results in the JUnit XML reports of a Gradle test task, and adds them to the job summary on GitHub.
+# Usage: scripts/ci/desktop-linux/test-summary.py <test-results dir>
+
+import glob
+import os
+import sys
+import xml.etree.ElementTree as ET
+
+results_dir = sys.argv[1]
+suites = [ET.parse(path).getroot() for path in sorted(glob.glob(os.path.join(results_dir, "*.xml")))]
+if not suites:
+    sys.exit(f"no test results in {results_dir}")
+
+rows = ["| Suite | Tests | Failed | Skipped | Seconds |", "|---|---|---|---|---|"]
+failures = []
+totals = [0, 0, 0]
+for suite in suites:
+    tests, failed, skipped = (int(suite.get(k, 0)) for k in ("tests", "failures", "skipped"))
+    failed += int(suite.get("errors", 0))
+    totals = [totals[0] + tests, totals[1] + failed, totals[2] + skipped]
+    rows.append(f"| {suite.get('name')} | {tests} | {failed} | {skipped} | {suite.get('time')} |")
+    for case in suite.iter("testcase"):
+        for problem in list(case.findall("failure")) + list(case.findall("error")):
+            failures.append(f"{case.get('classname')}.{case.get('name')}: {problem.get('message')}")
+
+summary = [f"### desktopTest: {totals[0]} tests, {totals[1]} failed, {totals[2]} skipped", ""] + rows
+if failures:
+    summary += ["", "Failures:", ""] + [f"- {f}" for f in failures]
+print("\n".join(summary))
+if os.environ.get("GITHUB_STEP_SUMMARY"):
+    with open(os.environ["GITHUB_STEP_SUMMARY"], "a") as f:
+        f.write("\n".join(summary) + "\n")
diff --git a/scripts/ci/desktop-linux/ui b/scripts/ci/desktop-linux/ui
new file mode 100755
index 0000000000..83c6f74bc0
--- /dev/null
+++ b/scripts/ci/desktop-linux/ui
@@ -0,0 +1,283 @@
+#!/bin/bash
+
+# Drives the desktop app on a virtual X display, for the scripted cases and for an agent on the runner.
+# Compose for Desktop has no accessibility tree on Linux, so text is found on screenshots by OCR (tesseract);
+# coordinates are screen pixels, as in the screenshots. Screenshots, the text read from them and
+# a log of every command (steps.log) go to UI_OUT; the app's data stays in UI_STATE between starts.
+#
+#   ui start <app dir> [<setting>=<value>...]
+#                                 start Xvfb, openbox and <app dir>/bin/simplex, and wait for its window; the app gets
+#                                 the settings given when UI_STATE has none yet
+#   ui shot <name>                save UI_OUT/NN-<name>.png and NN-<name>.txt (OCR's input and output in UI_OUT/ocr), and print the text on screen
+#   ui text                       print the text on screen, one phrase per line after its centre x,y
+#   ui find <text>                print "x y left top right bottom", the text's centre and box; fail if it is not on screen
+#   ui ink <text>                 print the height in pixels of the text's ink, to compare text sizes
+#   ui wait <text> [secs]         wait up to secs (30) until the text is on screen
+#   ui click <x> <y>              click at x,y
+#   ui click-text <text> [secs]   wait up to secs (20) for the text and click its centre
+#   ui scroll <x> <y> <up|down> [clicks]
+#                                 turn the mouse wheel over x,y, 3 clicks unless given
+#   ui avatar <text> [colour]     print how many pixels of the profile image left of a list row's name (the text) stand out
+#                                 from the background, and their mean colour, saving the area as UI_OUT/NN-avatar-<text>.png;
+#                                 with red, green or blue, fail unless that colour dominates
+#   ui type <text>                type into the focused field
+#   ui key <key>...               press keys named as in xdotool (Return, Escape, ctrl+a)
+#   ui do <command> [args] -- <command> [args] ...
+#                                 run the commands in order, stopping at the first that fails
+#   ui stop                       stop the app, openbox and Xvfb
+#
+# Text is compared ignoring case, spaces and punctuation, with a capital I and a lowercase l alike; a phrase that is
+# exactly the text wins over one that contains it.
+
+set -euo pipefail
+# an agent on the runner runs this, and nothing it starts needs the agent's credentials
+unset CLAUDE_CODE_OAUTH_TOKEN
+
+: "${UI_OUT:?UI_OUT must be the output directory}"
+export DISPLAY=${UI_DISPLAY:-:99}
+state=${UI_STATE:-${RUNNER_TEMP:-/tmp}/ui}
+here=$(cd "$(dirname "$0")" && pwd)
+mkdir -p "$UI_OUT" "$state/ocr"
+
+log() {
+  echo "$(date -u +%H:%M:%S) $*" | tee -a "$UI_OUT/steps.log"
+}
+
+running() {
+  [ -f "$state/$1.pid" ] && kill -0 "$(cat "$state/$1.pid")" 2> /dev/null
+}
+
+stop_process() {
+  local name=$1 secs=$2 pid
+  if ! running "$name"; then
+    rm -f "$state/$name.pid"
+    return
+  fi
+  pid=$(cat "$state/$name.pid")
+  kill "$pid" 2> /dev/null || true
+  for _ in $(seq "$secs"); do
+    kill -0 "$pid" 2> /dev/null || break
+    sleep 1
+  done
+  kill -9 "$pid" 2> /dev/null || true
+  rm -f "$state/$name.pid"
+}
+
+start() {
+  local app_dir settings=$state/config/simplex/settings.properties
+  app_dir=$(cd "$1" && pwd)
+  shift
+  if running app; then
+    echo "error: the app is already running"
+    return 1
+  fi
+  stop_process openbox 2
+  stop_process xvfb 2
+
+  setsid Xvfb "$DISPLAY" -screen 0 1440x900x24 -nolisten tcp < /dev/null > "$UI_OUT/xvfb.log" 2>&1 &
+  echo $! > "$state/xvfb.pid"
+  for _ in $(seq 20); do
+    xdotool getdisplaygeometry > /dev/null 2>&1 && break
+    sleep 0.5
+  done
+  xdotool getdisplaygeometry
+
+  setsid openbox --sm-disable < /dev/null > "$UI_OUT/openbox.log" 2>&1 &
+  echo $! > "$state/openbox.pid"
+
+  mkdir -p "$state/data" "$state/config" "$state/tmp"
+  if [ $# -gt 0 ] && [ ! -f "$settings" ]; then
+    mkdir -p "$(dirname "$settings")"
+    printf '%s\n' "$@" > "$settings"
+  fi
+  XDG_DATA_HOME="$state/data" \
+    XDG_CONFIG_HOME="$state/config" \
+    JAVA_TOOL_OPTIONS="-Djava.io.tmpdir=$state/tmp -Dskiko.renderApi=SOFTWARE" \
+    LD_LIBRARY_PATH="$app_dir/lib/app/resources" \
+    setsid "$app_dir/bin/simplex" < /dev/null >> "$UI_OUT/app.log" 2>&1 &
+  echo $! > "$state/app.pid"
+
+  if ! timeout 120 xdotool search --sync --onlyvisible --name '^SimpleX$' > "$state/window"; then
+    echo "error: no app window after 120 s"
+    return 1
+  fi
+  xdotool getwindowgeometry "$(head -n 1 "$state/window")"
+}
+
+# ocr <png> lines | ocr <png> find <text>
+# Dark text is cut out by a local threshold, light text (labels on coloured buttons) by the difference from a morphological open:
+# a local threshold of the negative rings the buttons, and tesseract reads nothing inside a ring.
+ocr() {
+  local png=$1 o=$state/ocr
+  shift
+  convert "$png" -colorspace Gray -depth 8 "$o/gray.pgm"
+  convert "$o/gray.pgm" -resize 200% -lat 60x60-5% "$o/dark.png"
+  convert "$o/gray.pgm" \( +clone -morphology Erode Rectangle:9x1 -morphology Erode Rectangle:1x9 -morphology Dilate Rectangle:9x1 -morphology Dilate Rectangle:1x9 \) -compose Difference -composite -negate -resize 200% "$o/light.png"
+  tesseract "$o/dark.png" "$o/dark" --psm 11 tsv > /dev/null 2>&1
+  tesseract "$o/light.png" "$o/light" --psm 11 tsv > /dev/null 2>&1
+  python3 "$here/screen-text.py" 2 "$o" "$@"
+}
+
+screen_ocr() {
+  import -window root "$state/ocr/screen.png"
+  ocr "$state/ocr/screen.png" "$@"
+}
+
+# prints "x y left top right bottom" of the text once it is on screen
+wait_for() {
+  local text=$1 deadline=$((SECONDS + $2))
+  until screen_ocr find "$text"; do
+    [ "$SECONDS" -lt "$deadline" ] || return 1
+    sleep 1
+  done
+}
+
+# prints UI_OUT/NN-<name>, numbered after the files already saved
+next_file() {
+  local n
+  n=$(find "$UI_OUT" -maxdepth 1 -name '[0-9][0-9]-*.png' | wc -l)
+  printf '%s/%02d-%s' "$UI_OUT" $((n + 1)) "$1"
+}
+
+shot() {
+  local f
+  f=$(next_file "$1")
+  import -window root "$f.png"
+  ocr "$f.png" lines > "$f.txt"
+  mkdir -p "$UI_OUT/ocr"
+  for pass in dark light; do
+    cp "$state/ocr/$pass.png" "$UI_OUT/ocr/$(basename "$f")-$pass.png"
+    cp "$state/ocr/$pass.tsv" "$UI_OUT/ocr/$(basename "$f")-$pass.tsv"
+  done
+  echo "::group::text on screen: $(basename "$f")"
+  cat "$f.txt"
+  echo "::endgroup::"
+  log "shot $(basename "$f").png"
+}
+
+click() {
+  xdotool mousemove --sync "$1" "$2" click 1
+  sleep 1
+}
+
+# X buttons 4 and 5 are the wheel turned up and down
+scroll() {
+  local button
+  case "$3" in
+    up) button=4 ;;
+    down) button=5 ;;
+    *)
+      echo "error: scroll up or down, not \"$3\""
+      return 1
+      ;;
+  esac
+  xdotool mousemove --sync "$1" "$2" click --repeat "$4" --delay 100 "$button"
+  sleep 1
+}
+
+# A list row's profile image is 42 px square, 8 px left of the row's name, and starts a little below the name's top:
+# the area allows for OCR's box being a few pixels off, and leaves out the rows above and below.
+avatar() {
+  local text=$1 colour=${2:-} pos x y l t r b f stats
+  if ! pos=$(screen_ocr find "$text"); then
+    log "avatar \"$text\": not on screen"
+    return 1
+  fi
+  read -r x y l t r b <<< "$pos"
+  f=$(next_file "avatar-$(tr -cd 'a-zA-Z0-9_' <<< "$text")")
+  convert "$state/ocr/screen.png" -crop "52x64+$((l > 56 ? l - 56 : 0))+$((t > 6 ? t - 6 : 0))" +repage "$f.png"
+  convert "$f.png" -depth 8 "$state/ocr/avatar.ppm"
+  if ! stats=$(python3 "$here/screen-colour.py" "$state/ocr/avatar.ppm" ${colour:+"$colour"}); then
+    log "avatar \"$text\": $stats, not $colour"
+    return 1
+  fi
+  log "avatar \"$text\": $stats${colour:+, $colour}"
+}
+
+case "${1:-}" in
+  start)
+    shift
+    log "start $*"
+    start "$@"
+    ;;
+  shot) shot "$2" ;;
+  text) screen_ocr lines ;;
+  find)
+    if ! pos=$(screen_ocr find "$2"); then
+      log "find \"$2\": not on screen" >&2
+      exit 1
+    fi
+    log "find \"$2\": $pos" > /dev/null
+    echo "$pos"
+    ;;
+  ink)
+    if ! pos=$(screen_ocr find "$2"); then
+      log "ink \"$2\": not on screen" >&2
+      exit 1
+    fi
+    read -r _ _ l t r b <<< "$pos"
+    # 2 px around OCR's box, less than the gap between lines
+    h=$(python3 "$here/screen-ink.py" "$state/ocr/gray.pgm" "$l" $((t - 2)) "$r" $((b + 2)))
+    log "ink \"$2\": $h px" > /dev/null
+    echo "$h"
+    ;;
+  wait)
+    secs=${3:-30}
+    if ! pos=$(wait_for "$2" "$secs"); then
+      log "wait \"$2\": not on screen after $secs s"
+      exit 1
+    fi
+    read -r x y _ <<< "$pos"
+    log "wait \"$2\": at $x,$y"
+    ;;
+  click)
+    click "$2" "$3"
+    log "click $2,$3"
+    ;;
+  click-text)
+    secs=${3:-20}
+    if ! pos=$(wait_for "$2" "$secs"); then
+      log "click-text \"$2\": not on screen after $secs s"
+      exit 1
+    fi
+    read -r x y _ <<< "$pos"
+    click "$x" "$y"
+    log "click-text \"$2\" at $x,$y"
+    ;;
+  scroll)
+    scroll "$2" "$3" "$4" "${5:-3}"
+    log "scroll $4 at $2,$3, ${5:-3} clicks"
+    ;;
+  avatar) avatar "$2" "${3:-}" ;;
+  type)
+    xdotool type --delay 50 -- "$2"
+    log "type \"$2\""
+    ;;
+  key)
+    shift
+    xdotool key --delay 100 -- "$@"
+    log "key $*"
+    ;;
+  do)
+    shift
+    command=()
+    for arg in "$@" --; do
+      if [ "$arg" != -- ]; then
+        command+=("$arg")
+      elif [ ${#command[@]} -gt 0 ]; then
+        "$0" "${command[@]}"
+        command=()
+      fi
+    done
+    ;;
+  stop)
+    stop_process app 10
+    stop_process openbox 2
+    stop_process xvfb 2
+    log "stop"
+    ;;
+  *)
+    sed -n '3,/^$/s/^# \{0,1\}//p' "$0"
+    exit 1
+    ;;
+esac
diff --git a/scripts/ci/ios-sim/README.md b/scripts/ci/ios-sim/README.md
new file mode 100644
index 0000000000..dd2c37c030
--- /dev/null
+++ b/scripts/ci/ios-sim/README.md
@@ -0,0 +1,57 @@
+# iOS app in the simulator on GitHub's runners
+
+`.github/workflows/ios-sim.yml` builds the core library and the iOS app from the branch's code on a macOS runner, starts the app in an iPhone 17 simulator, and drives it through onboarding to the chat list with a scripted smoke test. On request it also runs a Claude session that follows a device test plan, and a test backend (relay, directory, names server, contacts) for tests that need servers and peers.
+
+## Running it
+
+The workflow runs only when asked, on any branch:
+
+- **Dispatch** it from the Actions tab (workflow "ios-sim", "Run workflow"), with the inputs `claude` (also run the Claude session) and `backend` (also start the test backend), both off by default.
+- **Push** a commit whose message carries a tag: `[app-ci]` runs the scripted tests of both apps (iOS and desktop), `[app-ci:ios]` only this one; `[claude-test]` (both apps) or `[claude-test:ios]` runs the scripted test and then the Claude session; add `[ci-backend]` to build and start the test backend. Only the pushed head commit counts, and a tag matches anywhere in its message, body included, so don't quote a tag in a message that shouldn't run it.
+
+A push without a tag starts nothing and doesn't cancel a running test; a newer requested run on the same branch cancels the older one. Pushes to master and stable never start it, because a squash merge's message lists the merged commits' subjects with their tags; dispatch it there instead. Which branches may run the Claude session is decided only by the `app-sim-claude` environment's branch rule in the repository settings: on a branch it doesn't allow, a run that asks for Claude fails at the environment check, and because the app job holds the environment, its scripted test fails with it. Ask for Claude only on branches the rule allows.
+
+Results: the job log, the job summary (Claude's usage) and the artifacts `ios-sim-smoke-test` (a screenshot, a 1000-px view and an accessibility tree per step, the app log), `ios-sim-backend-logs` and `ios-sim-claude-test` (per session: `prompt.md`, `report.md`, `shots/`, `transcript.jsonl`, `usage.json`). Read them with `gh run view <id> --log` and `gh run download <id> -n <artifact>`.
+
+## How long it takes, what it costs
+
+- `plan` (ubuntu, 15 s) names the core library and the backend after their sources, `hashFiles` over the Haskell sources, `cabal.project`, `simplex-chat.cabal` and the build script, and reuses an artifact of the same name that an earlier run of the same branch uploaded (30 days). So every run builds the core library, and the backend when asked, from the branch's own Haskell code, and rebuilds only when those sources change.
+- `core` (macOS, 35–45 min when not reused): `build-core.sh` builds `lib:simplex-chat` with cabal and the iOS flags, as the Nix iOS build does, into the package `scripts/ios/prepare.sh` expects, and `prepare-libs.sh` marks it for the simulator (`mac2ios`).
+- `backend` (macOS, 20–30 min when not reused, only when asked): `build-backend.sh` builds `simplex-chat`, `simplex-directory-service` and `smp-server`.
+- `app` (macOS): the Xcode build 8–22 min, the smoke test about 10 min, the backend start about 10 min when asked, Claude as long as its plan needs.
+
+A run with reused builds and no extras takes about 26 minutes plus the wait for a macOS runner. Hosted minutes are free for this public repository; the limit is the repository's five concurrent macOS jobs, shared with PR builds (each `build.yml` run takes two), so queue waits can be long. Caches are evicted within hours (the repository is over its cache limit); the artifacts are what make runs fast.
+
+## The Claude session
+
+It runs after the smoke test, in the same job, on the simulator the smoke test leaves running, once per layout listed in `claude-scope`, with Claude Code installed from npm at a pinned version. The job then references the environment `app-sim-claude`, which holds the secret `CLAUDE_CODE_OAUTH_TOKEN` (a Claude subscription token) and admits the branches its rule allows; jobs without Claude reference no environment. Only the Claude step gets the token, and `claude-test.sh` passes it to the `claude` processes alone. The job checks out without persisting its GitHub token and installs a pinned AXe (`install-axe.sh`), since it later holds the Claude token.
+
+- `claude-scope`: the model, the layouts, the cases per layout, optional entries per layout, `max-turns` and `max-budget-usd` per session.
+- `device-test-plan.md`: the plan (`| ID | Do | Expect |` tables). On master it is a three-case smoke plan; a feature branch replaces it with its own and names its cases in `claude-scope`.
+- `claude-prompt.md`: what any session needs to know about the app, the `ui` helper and the test backend; `claude-test.sh` adds the `ui` help, the session's cases, layout, start state and limits, the seeded backend and the plan.
+- `claude-guard.py`: a PreToolUse hook that lets through only one plain `ui` command per Bash call, since read-only commands run without asking in every permission mode and Bash inherits the token. Read, Write and Edit are allowed only in the session's own directory, so a session can't change `ui` or the scripts it runs. After each session `claude-test.sh` deletes the session's files if the token appears in them.
+- `claude-usage.sh`: each session's turns, duration, tokens and cost "estimated at API prices" (Claude Code's own estimate, not a bill) to the job summary and `claude-usage.json`.
+
+Haiku 5.5 drives the app well: the smoke plan takes a few dozen turns and cents; a 50-case feature plan took 300–450 turns, 30–60 minutes and $1.1–1.7 per session, estimated at API prices. Every run spends the subscription's usage limits, which interactive sessions share.
+
+## Driving the app: `ui`
+
+`ui` wraps AXe (`install-axe.sh`) for scripts and for Claude: tap by label, value or point, swipe, type, paste, keys, wait for text, find, screenshots with trees, switch the layout (one-hand UI or top bar), relaunch, text size, and the backend's directory (`ui` with no arguments lists them). It needs `SIM_UDID` and `UI_OUT`, which the smoke test exports to the job. Lessons kept in its comments and in the smoke test: text fields have no label (tap them by value), the keyboard capitalizes and autocorrects (compare typed text case-insensitively), the closed user picker is always in the tree, "Cancel" clears the search field and its "Close" image doesn't, the keyboard's keys are below the screen.
+
+## The test backend
+
+`backend.sh start <backend zip> <work dir>` (with `[ci-backend]` or the `backend` input) starts, on the runner, against the preset SMP and XFTP servers:
+
+- a chat relay for channels, and a SimpleX Directory whose address it writes to `<work dir>/directory-link`;
+- a CLI peer `ci_admin` that creates, registers and gets approved groups and channels with the profile JSON the app sends: `ci_group` and `ci_channel` ("ci seed"), `ci_cards`, six entries with app-size avatars made by `avatar.swift` ("ci avatar"), a long name, markdown in a description, and `cinews`, `cinews_digest`, `cinews_weekly`;
+- a local SMP server with a `[NAMES]` section and `names-resolver.py`, the names `cinews.testing`, `ciboth.testing`, `cialice.testing` and `cibobby.testing` claimed by their owners, and the contacts cialice and Robert, online and accepting connections; its address goes to `<work dir>/names-server`;
+- checks before the app starts: a search sent to the directory as a message must list `ci_group` and `ci_channel`, and `/_connect plan` must resolve each name from a fresh peer.
+
+Not yet verified on master: the backend ran on `f/directory-search`'s code, and its checks were rewritten for master's (the directory answers searches sent as messages there; service requests need the feature branch).
+
+It writes what it seeded to `<work dir>/seed.md` (the Claude sessions get it) and logs to `<work dir>/*.log`; `stop`, `directory-stop`, `directory-start` and `listings` are its other commands. The app reaches it through the simulator, which shares the runner's network; pointing the app at the names server is a few steps in Settings, described in `claude-prompt.md`.
+
+## Other files
+
+- `use-macos26-sdk.sh`: runner images from 20261013 add Command Line Tools with a macOS 27 SDK that Xcode 26.6's linker can't read; every macOS job points the default SDK back at macOS 26.5.
+- `earlier-run.sh <artifact name>`: finds the newest run of this branch in this repository with that artifact; artifacts from forks and other branches are never used.
diff --git a/scripts/ci/ios-sim/avatar.swift b/scripts/ci/ios-sim/avatar.swift
new file mode 100644
index 0000000000..e1b0925335
--- /dev/null
+++ b/scripts/ci/ios-sim/avatar.swift
@@ -0,0 +1,87 @@
+// Makes a group avatar the way the app makes profile images (resizeImageToStrSize in apps/ios/SimpleXChat/ImageUtils.swift):
+// a JPEG at quality 0.85 drawn at scale 1, shrunk by sqrt(size / 12500), at most halved per step,
+// until its data URI is at most 12500 characters. The picture is synthetic and photo-like: a gradient,
+// discs and noise, with more noise for a higher detail.
+// Usage: avatar <seed> <detail 0...1> <output file> [side in pixels, default 1024]
+
+import CoreGraphics
+import Foundation
+import ImageIO
+
+let maxDataSize = 12500
+let colorSpace = CGColorSpace(name: CGColorSpace.sRGB)!
+
+struct Random {
+    var state: UInt64
+
+    mutating func next() -> Double {
+        state = state &* 6364136223846793005 &+ 1442695040888963407
+        return Double(state >> 11) / Double(UInt64(1) << 53)
+    }
+
+    mutating func color(alpha: Double = 1) -> CGColor {
+        let components: [CGFloat] = [next(), next(), next(), alpha]
+        return CGColor(colorSpace: colorSpace, components: components)!
+    }
+}
+
+func context(_ width: Int, _ height: Int) -> CGContext {
+    CGContext(data: nil, width: width, height: height, bitsPerComponent: 8, bytesPerRow: 0, space: colorSpace, bitmapInfo: CGImageAlphaInfo.noneSkipLast.rawValue)!
+}
+
+func picture(side: Int, detail: Double, random: inout Random) -> CGImage {
+    let ctx = context(side, side)
+    let gradient = CGGradient(colorsSpace: colorSpace, colors: [random.color(), random.color()] as CFArray, locations: [0, 1])!
+    ctx.drawLinearGradient(gradient, start: .zero, end: CGPoint(x: 0, y: side), options: [])
+    for _ in 0..<24 {
+        let r = Double(side) * (0.05 + 0.25 * random.next())
+        let alpha = 0.4 + 0.5 * random.next()
+        ctx.setFillColor(random.color(alpha: alpha))
+        ctx.fillEllipse(in: CGRect(x: Double(side) * random.next() - r, y: Double(side) * random.next() - r, width: 2 * r, height: 2 * r))
+    }
+    let pixels = ctx.data!.bindMemory(to: UInt8.self, capacity: ctx.bytesPerRow * side)
+    let amplitude = 96 * detail
+    for y in 0..<side {
+        for x in 0..<side {
+            let i = y * ctx.bytesPerRow + x * 4
+            for c in 0..<3 {
+                let v = Double(pixels[i + c]) + amplitude * (random.next() - 0.5)
+                pixels[i + c] = UInt8(max(0, min(255, v)))
+            }
+        }
+    }
+    return ctx.makeImage()!
+}
+
+func jpegDataURI(_ image: CGImage) -> String {
+    let data = NSMutableData()
+    let destination = CGImageDestinationCreateWithData(data as CFMutableData, "public.jpeg" as CFString, 1, nil)!
+    CGImageDestinationAddImage(destination, image, [kCGImageDestinationLossyCompressionQuality: 0.85] as CFDictionary)
+    CGImageDestinationFinalize(destination)
+    return "data:image/jpg;base64," + (data as Data).base64EncodedString()
+}
+
+func reduced(_ image: CGImage, ratio: Double) -> CGImage {
+    let width = Int(floor(Double(image.width) / ratio))
+    let height = Int(floor(Double(image.height) / ratio))
+    let ctx = context(width, height)
+    ctx.draw(image, in: CGRect(x: 0, y: 0, width: width, height: height))
+    return ctx.makeImage()!
+}
+
+let args = CommandLine.arguments
+guard args.count == 4 || args.count == 5, let seed = UInt64(args[1]), let detail = Double(args[2]), let side = Int(args.count == 5 ? args[4] : "1024") else {
+    print("usage: avatar <seed> <detail 0...1> <output file> [side in pixels, default 1024]")
+    exit(1)
+}
+var generator = Random(state: seed)
+var image = picture(side: side, detail: detail, random: &generator)
+var uri = jpegDataURI(image)
+var steps = 0
+while uri.count > maxDataSize {
+    image = reduced(image, ratio: min((Double(uri.count) / Double(maxDataSize)).squareRoot(), 2))
+    uri = jpegDataURI(image)
+    steps += 1
+}
+try uri.write(toFile: args[3], atomically: true, encoding: .utf8)
+print("\(args[3]): \(image.width)x\(image.height) px after \(steps) steps, \(uri.count) characters")
diff --git a/scripts/ci/ios-sim/backend.sh b/scripts/ci/ios-sim/backend.sh
new file mode 100755
index 0000000000..02b293a9f9
--- /dev/null
+++ b/scripts/ci/ios-sim/backend.sh
@@ -0,0 +1,477 @@
+#!/bin/bash
+
+# Test backend on the app runner: a chat relay and a directory service on the preset servers, with groups and
+# channels registered and approved by a CLI peer, and a search that must find them; and for SimpleX names,
+# a local SMP server with a name resolver, names claimed by channels and by contacts that accept connections.
+# Usage:
+#   scripts/ci/ios-sim/backend.sh start <backend zip> <work dir>   writes the directory's short address to <work dir>/directory-link,
+#                                                                  the names server's address to <work dir>/names-server
+#                                                                  and what was seeded to <work dir>/seed.md
+#   scripts/ci/ios-sim/backend.sh stop <work dir>                  stops everything it started, prints the logs
+#   scripts/ci/ios-sim/backend.sh directory-stop <work dir>        stops the directory only
+#   scripts/ci/ios-sim/backend.sh directory-start <work dir>       starts it again
+#   scripts/ci/ios-sim/backend.sh listings <work dir>              prints the directory's listed groups and channels
+# Everything it starts keeps running between start and stop.
+
+set -euo pipefail
+
+directory_name="SimpleX Directory"
+admin=ci_admin
+search_text="ci seed"
+avatar_search_text="ci avatar"
+long_name=ci_long_name_entry_for_layout_truncation_checks
+names_resolver_port=18080
+
+# Runs one chat command in a CLI client that stays online for <secs> after it; the output is in $work/out.
+chat() {
+  local db=$1 secs=$2 cmd=$3
+  shift 3
+  local status=0
+  "$bin/simplex-chat" -d "$work/$db" -e "$cmd" -t "$secs" --execute-log all "$@" < /dev/null > "$work/out" 2>&1 || status=$?
+  cat "$work/out" >> "$work/$db-cli.log"
+  echo "::group::$db: $(cut -c1-200 <<< "$cmd")"
+  cat "$work/out"
+  echo "::endgroup::"
+  return "$status"
+}
+
+admin() {
+  chat "$admin" "$1" "$2" --user-display-name "$admin"
+}
+
+# A command that resolves a SimpleX name: given -s, the client uses that server alone, with every role, names included.
+# -s also saves it among the user's servers, and later runs would put queues on it that the directory can't reach
+# (it routes to unknown servers through a preset proxy), so it is then kept for names only.
+named() {
+  local db=$1 user=$2 secs=$3 cmd=$4
+  local status=0
+  chat "$db" "$secs" "$cmd" --user-display-name "$user" -s "$names_server" || status=$?
+  db_query "$db" "UPDATE protocol_servers SET role_storage = 0, role_proxy = 0, role_names = 1 WHERE host = 'localhost'"
+  return "$status"
+}
+
+expect_out() {
+  if ! grep -qE "$1" "$work/out"; then
+    echo "error: \"$1\" not in the output"
+    return 1
+  fi
+}
+
+expect_no_error() {
+  if grep -qiE "error" "$work/out"; then
+    echo "error: the command failed"
+    return 1
+  fi
+}
+
+# Each run keeps the client online for a few seconds, which also lets the handshakes it waits for progress.
+admin_until() {
+  local pattern=$1 secs=$2 cmd=$3
+  local deadline=$((SECONDS + secs))
+  until admin 5 "$cmd" && grep -qE "$pattern" "$work/out"; do
+    if [ "$SECONDS" -ge "$deadline" ]; then
+      echo "error: \"$pattern\" not shown by \"$cmd\" after $secs s"
+      return 1
+    fi
+  done
+}
+
+db_query() {
+  sqlite3 "$work/$1_chat.db" "$2"
+}
+
+listings_query="SELECT gp.display_name AS name, gp.short_descr AS description, g.summary_current_members_count AS members, length(gp.image) AS image_characters
+  FROM sx_directory_group_regs r
+  JOIN groups g ON g.group_id = r.group_id
+  JOIN group_profiles gp ON gp.group_profile_id = g.group_profile_id
+  WHERE r.group_reg_status = 'active'
+  ORDER BY g.summary_current_members_count DESC, r.group_id"
+
+start_relay() {
+  nohup "$bin/simplex-chat" -d "$work/relay" --relay --headless --user-display-name ci_relay < /dev/null > "$work/relay.log" 2>&1 &
+  echo $! > "$work/relay.pid"
+  local deadline=$((SECONDS + 120))
+  until grep -qE '^https://[^ ]+/r#' "$work/relay.log"; do
+    if ! kill -0 "$(cat "$work/relay.pid")" 2> /dev/null || [ "$SECONDS" -ge "$deadline" ]; then
+      echo "error: the relay did not create its address"
+      cat "$work/relay.log"
+      return 1
+    fi
+    sleep 1
+  done
+  relay_link=$(grep -m 1 -oE '^https://[^ ]+/r#[^ ]+' "$work/relay.log")
+  echo "relay address: $relay_link"
+}
+
+# The address is created here, like the directory tests do, with auto-accept on before the service subscribes to it.
+create_directory() {
+  chat directory 1 "/ad pq_ratchet=on" --create-bot-display-name "$directory_name"
+  directory_link=$(new_address)
+  chat directory 1 "/auto_accept on"
+  expect_out "^auto_accept on"
+  echo "$directory_link" > "$work/directory-link"
+  echo "directory address: $directory_link"
+}
+
+start_directory() {
+  # -y: the service adds its own tables to the database the CLI created, and would otherwise ask on stdin
+  nohup "$bin/simplex-directory-service" -d "$work/directory" -y --super-users "$1" < /dev/null >> "$work/directory.log" 2>&1 &
+  echo $! > "$work/directory.pid"
+  echo "$1" > "$work/super-user"
+  sleep 5
+  if ! kill -0 "$(cat "$work/directory.pid")" 2> /dev/null; then
+    echo "error: the directory service exited"
+    cat "$work/directory.log"
+    return 1
+  fi
+}
+
+stop_directory() {
+  local pid deadline
+  pid=$(cat "$work/directory.pid")
+  kill -INT "$pid" 2> /dev/null || true
+  deadline=$((SECONDS + 30))
+  while kill -0 "$pid" 2> /dev/null; do
+    if [ "$SECONDS" -ge "$deadline" ]; then
+      kill -KILL "$pid" 2> /dev/null || true
+    fi
+    sleep 1
+  done
+}
+
+# A super user is known by contact ID, which exists only after the admin connects, so the service starts
+# with nobody and is restarted with the admin.
+connect_admin() {
+  admin 10 "/c $directory_link"
+  expect_out "connection request sent!"
+  admin_until "Welcome to $directory_name" 180 "/tail @'$directory_name' 10"
+  local id
+  id=$(db_query directory "SELECT contact_id FROM contacts WHERE local_display_name = '$admin'")
+  stop_directory
+  start_directory "$id:$admin"
+  echo "directory restarted with super user $id:$admin"
+}
+
+# The directory sends each registration to super users as a message with the exact /approve command,
+# and tells the owner "The group ID N (name) is approved".
+approve() {
+  local name=$1
+  admin_until "/approve [0-9]+:$name [0-9]+" 300 "/tail @'$directory_name' 20"
+  local cmd
+  cmd=$(grep -oE "/approve [0-9]+:$name [0-9]+" "$work/out" | tail -n 1)
+  admin 5 "@'$directory_name' $cmd"
+  admin_until "\($name\) is approved" 120 "/tail @'$directory_name' 20"
+}
+
+# The profile the app sends to create a group or a channel (AddGroupView, AddChannelView), with an optional image file.
+group_profile() {
+  local name=$1 descr=$2 prefs=$3 image_file=${4:-}
+  if [ -n "$image_file" ]; then
+    jq -cn --arg n "$name" --arg d "$descr" --argjson p "$prefs" --rawfile i "$image_file" '{displayName: $n, fullName: "", shortDescr: $d, image: $i, groupPreferences: $p}'
+  else
+    jq -cn --arg n "$name" --arg d "$descr" --argjson p "$prefs" '{displayName: $n, fullName: "", shortDescr: $d, groupPreferences: $p}'
+  fi
+}
+
+seed_group() {
+  local name=$1 descr=$2 image_file=${3:-}
+  admin 1 "/_group 1 $(group_profile "$name" "$descr" '{"history":{"enable":"on"}}' "$image_file")"
+  expect_out "group #$name .*is created"
+  admin 5 "/a $name '$directory_name' admin"
+  expect_out "invitation to join the group #$name sent to"
+  approve "$name"
+}
+
+setup_relay() {
+  admin 1 "/relays name=ci_relay $relay_link"
+  expect_out "^ok$"
+  relay_id=$(db_query "$admin" "SELECT chat_relay_id FROM chat_relays WHERE display_name = 'ci_relay' AND deleted = 0")
+}
+
+create_channel() {
+  local name=$1 descr=$2 image_file=${3:-}
+  admin 10 "/_public group 1 $relay_id $(group_profile "$name" "$descr" '{"history":{"enable":"on"},"support":{"enable":"off"}}' "$image_file")"
+  expect_out "group #$name .*is created"
+  local group_id
+  group_id=$(db_query "$admin" "SELECT group_id FROM groups WHERE local_display_name = '$name'")
+  admin_until "relay id [0-9]+: active" 180 "/_get relays #$group_id"
+}
+
+list_channel() {
+  local name=$1
+  admin 5 "/share chat #$name @'$directory_name'"
+  expect_out "link to join channel #$name"
+  approve "$name"
+}
+
+seed_channel() {
+  create_channel "$@"
+  list_channel "$1"
+}
+
+channel_link() {
+  admin 1 "/show link #$1" >&2
+  grep -m 1 -oE 'https://[^ ]+/c#[^ ]+' "$work/out"
+}
+
+# The short address that /ad printed.
+new_address() {
+  local address
+  address=$(awk '/Your new chat address is created!/ {getline; getline; print; exit}' "$work/out")
+  case "$address" in
+    https://*/a#*) echo "$address" ;;
+    *)
+      echo "error: no short address in the output" >&2
+      return 1
+      ;;
+  esac
+}
+
+# Avatars at the size the app makes them (avatar.swift), with different amounts of detail;
+# and small ones for ci_group, ci_channel and ci_cards, so that several fit in one size-limited search response.
+make_avatars() {
+  xcrun swiftc -O -o "$work/avatar" "$(dirname "$0")/avatar.swift"
+  local i
+  for i in 1 2 3 4 5 6; do
+    "$work/avatar" "$i" "0.$((i + 2))" "$work/avatar-$i.txt"
+  done
+  for i in 7 8 9; do
+    "$work/avatar" "$i" 0 "$work/avatar-$i.txt" 64
+  done
+}
+
+seed_avatars() {
+  local i
+  for i in 1 2 3; do
+    seed_group "ci_avatar_g$i" "CI avatar group $i" "$work/avatar-$i.txt"
+    seed_channel "ci_avatar_c$i" "CI avatar channel $i" "$work/avatar-$((i + 3)).txt"
+  done
+}
+
+# A local SMP server whose [NAMES] section points at names-resolver.py, which answers from names.json.
+start_names() {
+  echo "{}" > "$work/names.json"
+  nohup python3 "$(dirname "$0")/names-resolver.py" "$names_resolver_port" "$work/names.json" < /dev/null > "$work/names-resolver.log" 2>&1 &
+  echo $! > "$work/names-resolver.pid"
+  export SMP_SERVER_CFG_PATH=$work/smp-server/etc SMP_SERVER_LOG_PATH=$work/smp-server/log
+  "$bin/smp-server" init -y --disable-store-log --no-password --fqdn localhost --disable-web > "$work/out" 2>&1 || {
+    cat "$work/out"
+    return 1
+  }
+  cat "$work/out"
+  names_server=$(grep -m 1 -oE 'smp://[^ ]+@localhost' "$work/out")
+  sed -i '' \
+    -e 's/^enable: off$/enable: on/' \
+    -e "s|^# resolver_endpoint: http://127.0.0.1:8000\$|resolver_endpoint: http://127.0.0.1:$names_resolver_port|" \
+    -e 's/^port = 5223,443$/port = 5223/' \
+    "$SMP_SERVER_CFG_PATH/smp-server.ini"
+  grep -E '^(enable: on|resolver_endpoint|port = )' "$SMP_SERVER_CFG_PATH/smp-server.ini"
+  nohup "$bin/smp-server" start < /dev/null > "$work/smp-server.log" 2>&1 &
+  echo $! > "$work/smp-server.pid"
+  local deadline=$((SECONDS + 60))
+  until nc -z 127.0.0.1 5223 2> /dev/null; do
+    if ! kill -0 "$(cat "$work/smp-server.pid")" 2> /dev/null || [ "$SECONDS" -ge "$deadline" ]; then
+      echo "error: the names server did not start"
+      cat "$work/smp-server.log" "$work/names-resolver.log"
+      return 1
+    fi
+    sleep 1
+  done
+  echo "$names_server" > "$work/names-server"
+  echo "names server: $names_server"
+}
+
+register_name() {
+  local name=$1 contact=$2 channel=$3
+  jq --arg n "$name" --arg ct "$contact" --arg ch "$channel" \
+    '.[$n] = {simplexContact: ([$ct] | map(select(. != ""))), simplexChannel: ([$ch] | map(select(. != "")))}' \
+    "$work/names.json" > "$work/names.json.new"
+  mv "$work/names.json.new" "$work/names.json"
+}
+
+# A contact that claims a name and accepts every connection; it keeps running, so the app can connect to it.
+start_contact() {
+  local db=$1 display_name=$2 name=$3
+  chat "$db" 1 "/ad" --user-display-name "$display_name"
+  local address
+  address=$(new_address)
+  chat "$db" 1 "/auto_accept on" --user-display-name "$display_name"
+  expect_out "^auto_accept on"
+  register_name "$name" "$address" ""
+  named "$db" "$display_name" 5 "/_set domain 1 $name"
+  expect_no_error
+  # --headless is for relays only; a command with a long -t keeps the client online, accepting contacts, for 6 hours
+  nohup "$bin/simplex-chat" -d "$work/$db" -e "/auto_accept on" -t 21600 --user-display-name "$display_name" < /dev/null > "$work/$db.log" 2>&1 &
+  echo $! > "$work/$db.pid"
+}
+
+# A name is claimed before its channel is listed: a profile change after approval hides it until approved again.
+seed_names() {
+  local address link
+  create_channel cinews "CI news channel"
+  link=$(channel_link cinews)
+  register_name cinews.testing "" "$link"
+  named "$admin" "$admin" 5 "/public group access #cinews domain=cinews.testing"
+  expect_out "updated public group access: domain=cinews.testing"
+  list_channel cinews
+  seed_group cinews_digest "CI news digest"
+  seed_group cinews_weekly "CI news weekly"
+
+  create_channel ciboth "CI both channel"
+  admin 1 "/ad"
+  address=$(new_address)
+  link=$(channel_link ciboth)
+  register_name ciboth.testing "$address" "$link"
+  named "$admin" "$admin" 5 "/_set domain 1 ciboth.testing"
+  expect_no_error
+  named "$admin" "$admin" 5 "/public group access #ciboth domain=ciboth.testing"
+  expect_out "updated public group access: domain=ciboth.testing"
+
+  start_contact ci_alice cialice cialice.testing
+  start_contact ci_robert Robert cibobby.testing
+}
+
+# What the app will resolve, from a client that knows none of the names' owners.
+probe_names() {
+  local target pattern
+  for target in "#cinews.testing|ok to connect via relays" "@cialice.testing|contact address: ok to connect" "@cibobby.testing|contact address: ok to connect" "ciboth.testing|You can also connect to @ciboth"; do
+    pattern=${target#*|}
+    target=${target%%|*}
+    named probe ci_probe 5 "/_connect plan 1 $target"
+    expect_out "$pattern"
+  done
+  named probe ci_probe 5 "/_connect plan 1 #cinone.testing" || true
+  echo "names resolve: cinews, cialice, cibobby, ciboth; cinone is not registered"
+}
+
+# The directory's reply to a search starts with "Found N group(s)"; earlier messages name the same groups.
+in_search_reply() {
+  local reply
+  reply=$(sed -n '/Found [0-9]* group(s)/,$p' "$work/out")
+  grep -qF "$1" <<< "$reply"
+}
+
+# A search sent as a message, which any client can send.
+probe_search() {
+  admin 5 "@'$directory_name' $search_text"
+  local deadline=$((SECONDS + 120))
+  until admin 5 "/tail @'$directory_name' 10" && in_search_reply "ci_group (CI seed group)" && in_search_reply "ci_channel (CI seed channel)"; do
+    if [ "$SECONDS" -ge "$deadline" ]; then
+      echo "error: the directory's reply to \"$search_text\" does not list ci_group and ci_channel"
+      return 1
+    fi
+  done
+  echo "search for \"$search_text\" found ci_group and ci_channel"
+}
+
+write_seed() {
+  {
+    echo "# Test directory"
+    echo
+    echo "Directory address: $directory_link"
+    echo
+    echo "## Listed groups and channels"
+    echo
+    echo "| Search with | Entries | Seeded for |"
+    echo "|---|---|---|"
+    echo "| \`$search_text\` | ci_group (group), ci_channel (channel), each with a small avatar (64 px) | a group and a channel to find |"
+    echo "| \`ci cards\` | ci_cards (channel, with a small avatar) | a channel to join, so that the profile has a conversation |"
+    echo "| \`$avatar_search_text\` | ci_avatar_g1…3 (groups), ci_avatar_c1…3 (channels), each with an avatar the size the app makes | images at the size limit |"
+    echo "| \`ci long\` | $long_name (group): a long name and a two-line description | truncation |"
+    echo "| \`ci markdown\` | ci_markdown (group): markdown in the description | markdown shown literally |"
+    echo "| \`cinews\` | cinews (channel, with the name cinews.testing), cinews_digest and cinews_weekly (groups) | a search that matches a SimpleX name and listed entries |"
+    echo
+    sqlite3 -markdown "$work/directory_chat.db" "$listings_query"
+    echo
+    echo "## SimpleX names"
+    echo
+    echo "Names server, to add in the app for resolving names: \`$names_server\`"
+    echo
+    echo "| Name | Resolves to |"
+    echo "|---|---|"
+    echo "| cinews.testing | the channel cinews, listed in the directory (\"CI news channel\") |"
+    echo "| ciboth.testing | a contact address (ci_admin) and the channel ciboth, not listed |"
+    echo "| cialice.testing | the contact cialice, online and accepting connections |"
+    echo "| cibobby.testing | the contact Robert (display name without the name), online and accepting connections |"
+    echo "| any other, e.g. cinone.testing | not registered |"
+    echo
+  } > "$work/seed.md"
+}
+
+dump_directory() {
+  echo "::group::directory registrations"
+  db_query directory "SELECT group_id, group_reg_status FROM sx_directory_group_regs" || true
+  echo "::endgroup::"
+}
+
+start() {
+  bin=$work/bin
+  mkdir -p "$bin"
+  unzip -o -q "$1" -d "$bin"
+  "$bin/simplex-chat" --version
+  "$bin/simplex-directory-service" --version
+  "$bin/smp-server" --version
+  make_avatars
+
+  start_names
+  start_relay
+  create_directory
+  start_directory "0:nobody"
+  trap dump_directory EXIT
+  connect_admin
+  seed_group ci_group "CI seed group" "$work/avatar-7.txt"
+  setup_relay
+  seed_channel ci_channel "CI seed channel" "$work/avatar-8.txt"
+  seed_channel ci_cards "CI cards channel" "$work/avatar-9.txt"
+  seed_avatars
+  seed_group "$long_name" "CI long entry: a description long enough to take two lines in the directory results, to check how the row truncates"
+  seed_group ci_markdown "CI markdown *bold* _italic_ [x](https://example.com)"
+  seed_names
+  probe_search
+  probe_names
+  write_seed
+}
+
+stop() {
+  local p processes="directory relay ci_alice ci_robert smp-server names-resolver"
+  for p in $processes; do
+    if [ -f "$work/$p.pid" ]; then
+      kill -INT "$(cat "$work/$p.pid")" 2> /dev/null || true
+    fi
+  done
+  sleep 3
+  for p in $processes; do
+    echo "::group::$p log"
+    cat "$work/$p.log" 2> /dev/null || true
+    echo "::endgroup::"
+  done
+}
+
+case "${1:-}" in
+  start)
+    work=$3
+    mkdir -p "$work"
+    start "$2"
+    ;;
+  stop)
+    work=$2
+    stop
+    ;;
+  directory-stop)
+    work=$2
+    stop_directory
+    ;;
+  directory-start)
+    work=$2
+    bin=$work/bin
+    start_directory "$(cat "$work/super-user")"
+    ;;
+  listings)
+    work=$2
+    sqlite3 -markdown "$work/directory_chat.db" "$listings_query"
+    ;;
+  *)
+    echo "usage: $0 start <backend zip> <work dir> | stop <work dir> | directory-stop <work dir> | directory-start <work dir> | listings <work dir>"
+    exit 1
+    ;;
+esac
diff --git a/scripts/ci/ios-sim/build-backend.sh b/scripts/ci/ios-sim/build-backend.sh
new file mode 100755
index 0000000000..44b6c4c0c0
--- /dev/null
+++ b/scripts/ci/ios-sim/build-backend.sh
@@ -0,0 +1,53 @@
+#!/bin/bash
+
+# Builds the CLI, the directory service and the SMP server (for SimpleX names) that the app job runs as its test backend.
+# Usage: scripts/ci/ios-sim/build-backend.sh <output zip>
+# They need the server-capable configuration (no client_library), as build.yml's macOS job builds the CLI.
+
+set -euo pipefail
+
+mkdir -p "$(dirname "$1")"
+out="$(cd "$(dirname "$1")" && pwd)/$(basename "$1")"
+openssl_dir=$(brew --prefix openssl@3)
+
+ghc --version
+cabal --version
+du -sh ~/.cabal/store dist-newstyle || true
+
+cat > cabal.project.local <<EOF
+ignore-project: False
+
+package simplexmq
+    extra-include-dirs: $openssl_dir/include
+    extra-lib-dirs: $openssl_dir/lib
+
+package direct-sqlcipher
+    flags: +openssl
+    extra-include-dirs: $openssl_dir/include
+    extra-lib-dirs: $openssl_dir/lib
+EOF
+
+targets="exe:simplex-chat exe:simplex-directory-service"
+cabal build -j $targets
+
+# simplexmq's sdist leaves out apps/common/Web/static/.well-known, which smp-server embeds, so it is built from a clone
+simplexmq=$(mktemp -d)/simplexmq
+git clone --quiet --filter=blob:none https://github.com/simplex-chat/simplexmq.git "$simplexmq"
+git -C "$simplexmq" checkout --quiet "$(awk '/simplexmq.git/ {getline; print $2; exit}' cabal.project)"
+git -C "$simplexmq" submodule update --init --quiet
+git -C "$simplexmq" log -1 --format='simplexmq %H %s'
+git -C "$simplexmq" submodule status
+cp cabal.project.local "$simplexmq/"
+(cd "$simplexmq" && cabal build -j exe:smp-server)
+
+pkg=$(mktemp -d)
+for target in $targets; do
+  cp "$(cabal list-bin "$target")" "$pkg"
+done
+# in the clone, list-bin first prints git's output from syncing the source packages
+cp "$(cd "$simplexmq" && cabal list-bin exe:smp-server | tail -n 1)" "$pkg"
+otool -L "$pkg"/*
+
+rm -f "$out"
+(cd "$pkg" && zip -9 "$out" *)
+ls -la "$out"
diff --git a/scripts/ci/ios-sim/build-core.sh b/scripts/ci/ios-sim/build-core.sh
new file mode 100755
index 0000000000..c34a9306f9
--- /dev/null
+++ b/scripts/ci/ios-sim/build-core.sh
@@ -0,0 +1,66 @@
+#!/bin/bash
+
+# Builds the iOS core library package with cabal, as flake.nix builds aarch64-darwin-ios:lib:simplex-chat.
+# Usage: scripts/ci/ios-sim/build-core.sh <output zip>
+# The zip has the same files as the Hydra package that scripts/ios/prepare.sh expects.
+
+set -euo pipefail
+
+mkdir -p "$(dirname "$1")"
+out="$(cd "$(dirname "$1")" && pwd)/$(basename "$1")"
+ghc_ver=$(ghc --numeric-version)
+version=$(sed -n 's/^version: *//p' simplex-chat.cabal)
+openssl_dir=$(brew --prefix openssl@3)
+ffi_dir=$(brew --prefix libffi)
+gmp_dir=$(brew --prefix gmp)
+
+ghc --version
+cabal --version
+echo "rts extra-libraries: $(ghc-pkg field rts extra-libraries --simple-output)"
+echo "ghc-bignum extra-libraries: $(ghc-pkg field ghc-bignum extra-libraries --simple-output)"
+find "$(ghc --print-libdir)" -name 'lib*ffi*.a' -o -name 'libgmp*.a' -o -name 'libHSrts*_thr.a'
+du -sh ~/.cabal/store dist-newstyle || true
+
+cat > cabal.project.local <<EOF
+ignore-project: False
+
+package simplex-chat
+    flags: +swift +client_library
+    static: True
+    shared: False
+    ghc-options: -threaded -DIOS
+
+package simplexmq
+    flags: +swift +client_library +commoncrypto
+    extra-include-dirs: $openssl_dir/include
+    extra-lib-dirs: $openssl_dir/lib
+
+package direct-sqlcipher
+    flags: +commoncrypto
+
+package entropy
+    flags: +DoNotGetEntropy
+EOF
+
+cabal build -j lib:simplex-chat
+
+build_dir=dist-newstyle/build/aarch64-osx/ghc-$ghc_ver/simplex-chat-$version/build
+ls -la "$build_dir"/libHSsimplex-chat-*
+
+ghc_lib=$(ls "$build_dir"/libHSsimplex-chat-*-ghc"$ghc_ver".a)
+echo "Selected symbols defined in $ghc_lib:"
+{ nm -gU "$ghc_lib" 2>/dev/null || true; } \
+  | awk '$NF ~ /^_(ffi_call|__gmpz_init|hs_init_with_rtsopts|chat_migrate_init_key|EVP_CIPHER_CTX_new|sqlite3_key)$/ {print "  " $NF}' \
+  | sort -u
+
+pkg=$(mktemp -d)
+cp "$build_dir"/libHSsimplex-chat-*.a "$ffi_dir"/lib/libffi.a "$gmp_dir"/lib/libgmp.a "$gmp_dir"/lib/libgmpxx.a "$pkg"
+chmod u+w "$pkg"/*.a
+for f in "$pkg"/libHSsimplex-chat-*.a; do
+  strip -x "$f"
+done
+ls -la "$pkg"
+
+rm -f "$out"
+(cd "$pkg" && zip -9 "$out" *.a)
+ls -la "$out"
diff --git a/scripts/ci/ios-sim/claude-guard.py b/scripts/ci/ios-sim/claude-guard.py
new file mode 100755
index 0000000000..ab131ae997
--- /dev/null
+++ b/scripts/ci/ios-sim/claude-guard.py
@@ -0,0 +1,25 @@
+#!/usr/bin/env python3
+
+# PreToolUse hook for Claude on the runner: lets through only Bash commands that run the ui helper, with plain
+# arguments, so the session has no general shell. Claude Code runs read-only commands such as cat, echo and env without
+# asking in every permission mode, and Bash inherits CLAUDE_CODE_OAUTH_TOKEN, so permission rules alone are not enough.
+# Exits 2 for anything else; Claude sees the message as the reason. Each decision is appended to CLAUDE_GUARD_LOG
+# when it is set, as evidence that the hook ran.
+
+import json
+import os
+import re
+import sys
+
+# nothing that chains, pipes, redirects, substitutes, expands or escapes
+UI_COMMAND = re.compile(r"ui( [^;&|<>$`()\\\r\n]*)?")
+
+call = json.load(sys.stdin)
+command = (call.get("tool_input") or {}).get("command", "").strip()
+allowed = call.get("tool_name") != "Bash" or UI_COMMAND.fullmatch(command)
+if os.environ.get("CLAUDE_GUARD_LOG"):
+    with open(os.environ["CLAUDE_GUARD_LOG"], "a") as log:
+        log.write(f"{'allow' if allowed else 'refuse'} {call.get('tool_name')}: {command[:200]!r}\n")
+if not allowed:
+    print(f"Only the ui helper runs here, as one command: ui <command> [args]. Refused: {command[:200]}", file=sys.stderr)
+    sys.exit(2)
diff --git a/scripts/ci/ios-sim/claude-prompt.md b/scripts/ci/ios-sim/claude-prompt.md
new file mode 100644
index 0000000000..84c3903f82
--- /dev/null
+++ b/scripts/ci/ios-sim/claude-prompt.md
@@ -0,0 +1,59 @@
+# Device test session: SimpleX Chat iOS
+
+You are testing the SimpleX Chat iOS app in an iPhone 17 simulator (iOS 26.5, screen 402 x 874 points) on a GitHub Actions runner. You run the cases of the device test plan (at the end of this prompt) that the section "This session" names, in the layout it names, and write a report. You cannot change the app or the runner; anything wrong you find is a finding for the report.
+
+## Tools
+
+- **Bash runs only the `ui` helper**, one command per call: `ui tap "Create profile"`, `ui find Settings`. Any other program, a pipe, a redirection, `;` or `&&` is denied. Its commands are listed under "The ui commands" below.
+- **Read, Write and Edit work only in the current directory.** Screenshots go to `shots/` (look at the `-view.jpg` files, they are smaller), and you write `report.md` here. This whole prompt, with the plan, is also `prompt.md` here: read it again when you are unsure, and after the conversation has been compacted.
+
+## What you need to know about the app and the helper
+
+- **Layouts.** With the one-hand UI (reachable toolbar, the default) the chat list is drawn from the bottom up: the toolbar (your profile image and the "Compose" pencil) is at the bottom, the search field just above it (y about 754), the list tags ("Add list" when there are no lists) above the field, and chats stack upwards from there. With the top bar the toolbar and the search field are at the top. A profile without conversations sees onboarding pages ("Talk to someone") in place of the list, without the search field. Stay in the layout the session names; the app starts in it, and `ui relaunch` keeps it.
+- **Positions.** "Above" means a smaller y. Judge order and position from the tree's coordinates, and look at a screenshot when you judge layout (truncation, overlap, images).
+- **The search field** has no label; tap it with `ui tap-value "Search or paste SimpleX link"` when empty, or by its text. To clear it, tap the field so it is focused, then "Cancel" next to it ("Cancel" exists only while the field is focused; it also hides the keyboard); tapping the "Close" image inside the field did not clear it in an earlier run. Type text as one quoted argument (`ui type "ci seed"`). The keyboard capitalizes the first letter and autocorrects words (an earlier run saw "ci" become "Ci" and a typed name become another word when a button was tapped), so check the field's value in the tree after typing, and before typing check that the field shows its placeholder. The keyboard's Search key is `ui key return`; the keyboard's keys are below the screen and not listed in the tree, and the screenshots do not show the keyboard.
+- **Pasting**: `ui clipboard "<link>"`, tap the empty field once to focus it and once more to open its menu, then tap its "Paste" item (two elements carry that label: use `ui tap-xy` on the one `ui find Paste` shows in the menu).
+- **Disabled elements** end with "disabled" in the tree.
+- **Ambiguous labels.** When `ui tap` says several elements match a label (seen for "Paste", "Channels", "Account"), tap the one you mean with `ui tap-xy` at its centre, taken from `ui find`.
+- **Hidden elements.** The tree always contains the closed user picker: the profile name, "Create SimpleX address", "Chat preferences", "Your chat profiles", "Use from desktop", "Settings", at coordinates on the screen even while it is hidden. Do not tap them unless you opened the picker by tapping your profile image in the toolbar (`Image "Account"`, 32 x 32; tap its centre with `ui tap-xy`).
+- **Settings → Reset all hints:** open the picker, "Settings", scroll to the bottom, the app version row ("v…"), "Developer", "Reset all hints". Go back with the navigation back buttons and close Settings by swiping it down.
+- **New chat** is the "Compose" button (the pencil) in the toolbar. With the top bar the toolbar is hidden while the search field is focused.
+- **Joining** (the app's normal flow, from `NewChatView.swift`; an earlier session took its first step for a failure). Tapping a group or channel the profile does not know yet, from a link or a list, shows an alert with its name (and subscriber count for a channel) and "Cancel" / "Open channel" or "Open group": that is the start of joining, not a sign that the entry is known. "Open …" opens the chat, not yet joined, with "Tap Join channel" in it and a "Join channel" / "Join group" bar at the bottom; tapping that bar joins (a channel then shows "you are subscriber"; a group may stay "connecting"). A contact works the same way: "Open new chat", then the chat's connect button. An entry already opened, joined or connecting shows the same kind of alert, plus your role ("You are a subscriber", "You are a member") once joined. So each case that joins uses the entry named for it under "This session", which no earlier case has touched. Opened and joined chats appear in the chat list, and the profile is no longer "without conversations".
+- **A second profile:** open the picker, "Your chat profiles", add a profile; a new profile has no conversations. Switch back to the first profile when done.
+- **Text size:** `ui text-size accessibility-large`, and back to `ui text-size medium` afterwards. Only one phone size is available.
+- **If the app gets stuck**, `ui relaunch` restarts it (search text is cleared, everything else stays).
+- Waiting: prefer `ui wait <text> <secs>` over repeated trees; `ui wait` returns at once when the text is already shown.
+
+## The test backend
+
+When "This session" gives the test directory's address, the runner also runs a test backend: a chat relay, a SimpleX Directory with the groups and channels listed under "Test directory" below, a server that resolves SimpleX names, and contacts that accept connections. `ui directory stop|start` stops and starts the directory (after `ui directory start`, wait about 15 s before using it), and `ui listings` prints what it lists.
+
+**SimpleX names**: the names server's address is under "This session"; the names it knows are under "Test directory" → "SimpleX names" (all end in `.testing`; a bare word of 5 or more letters is completed with `.testing`, so `cinews` is `cinews.testing`). Set the app up for it once, before the first case that needs names (if an earlier session in this run did it, check it instead: the server is listed under "Your servers"):
+
+1. Open the picker (your profile image), "Settings", "Network & servers".
+2. Under "Preset servers", open each operator ("SimpleX Chat", "Flux"), turn "To resolve names" off, and go back. Otherwise the app may ask the real servers, which do not know the test names.
+3. "Your servers" → "Add server" → "Enter server manually". Put the names server's address in the address field by pasting it (typing it would let the keyboard capitalize it), check it in the tree, and go back.
+4. In "Your servers", open the new server and set "To receive" to "no", "For private routing" to "no" and "To resolve names" to "yes" (each is a picker), then go back.
+5. On "Network & servers", tap "Save servers" (and "Save" if asked). Close Settings.
+
+## How to run the cases
+
+- Run each case of the session's list, in the plan's order unless a case needs another first.
+- The plan's tables (ID, Do, Expect) are at the end of `prompt.md` in the current directory: read the row before running a case and do exactly what it says. An earlier session did not find them and filed other actions under some IDs.
+- For each case, do what the plan says, decide pass or fail against the plan's "Expect" column, and take at least one `ui shot` at the moment that shows the result, named after the case and layout without a number, for example `ui shot S1-reachable` (the helper numbers the files).
+- Pass only what you saw: quote the evidence (element labels, values and coordinates from the tree, or what a screenshot shows). If an expectation cannot be checked here, say which part and why, and mark the case passed for the parts you checked only if those parts are the substance of the case; otherwise skipped.
+- **Skip** any case that needs something this runner lacks, saying exactly what is missing. Do not skip a case only because it takes several steps.
+- Other app bugs you notice are findings: write what you did, what you saw, what you expected, and the screenshot.
+- Mind the session's turn limit under "This session": every `ui` command and every file edit is a turn.
+
+## The report
+
+Write `report.md` in the current directory as you go, so a session that is cut short still leaves its results. **Before the first case, create it with the Results table already holding one row for every case of the session's list, Result `todo`**, and fill a row in as soon as its case is done. Before each case, and always after the conversation has been compacted, read `report.md` to see which cases are left (and `prompt.md` for anything else you need). The session is finished only when no row says `todo`. Its sections:
+
+1. `# Device test report: <layout>` and one line on the app state at the start.
+2. `## Results`: a table with one row per case of the session's list: `| ID | Result | Evidence | Screenshots |`, Result being pass, fail or skipped (with the reason).
+3. Any section the plan asks for.
+4. `## Findings`: app bugs, each with steps, what you saw, what you expected, screenshots.
+5. `## Harness notes`: anything about `ui` or the runner that got in the way.
+
+End the session by making sure `report.md` is complete and no row says `todo`; your final message is a three-line summary: passed, failed and skipped counts, and the most important finding.
diff --git a/scripts/ci/ios-sim/claude-scope b/scripts/ci/ios-sim/claude-scope
new file mode 100644
index 0000000000..a846ae4ac5
--- /dev/null
+++ b/scripts/ci/ios-sim/claude-scope
@@ -0,0 +1,8 @@
+# What claude-test.sh runs: one Claude session per layout (reachable, top), each with its cases, and each session's bounds.
+# A case runs in both layouts only when the layouts render it differently; the rest run in one.
+# entries-<layout> (optional) tells that session which directory entries and names its cases use, so none meets an entry already known.
+model: claude-haiku-5-5
+layouts: reachable
+cases-reachable: S1-S3
+max-turns: 60
+max-budget-usd: 3
diff --git a/scripts/ci/ios-sim/claude-test.sh b/scripts/ci/ios-sim/claude-test.sh
new file mode 100755
index 0000000000..5d72d03a9b
--- /dev/null
+++ b/scripts/ci/ios-sim/claude-test.sh
@@ -0,0 +1,143 @@
+#!/bin/bash
+
+# Runs the device test plan with Claude Code on this runner after the smoke test, one session per layout,
+# as claude-scope says. A session drives the app only through the ui helper, and reads and writes only its
+# own directory <output dir>/<layout>: prompt.md, report.md, shots/, transcript.jsonl (stream-json).
+# Usage: scripts/ci/ios-sim/claude-test.sh <output dir>
+# Needs CLAUDE_CODE_OAUTH_TOKEN, SIM_UDID (the booted simulator with the app) and, when the test backend runs, BACKEND_DIR.
+
+set -euo pipefail
+
+token=${CLAUDE_CODE_OAUTH_TOKEN:?CLAUDE_CODE_OAUTH_TOKEN must be set}
+# only the claude processes get the token, nothing else this script starts
+unset CLAUDE_CODE_OAUTH_TOKEN
+
+mkdir -p "$1"
+out=$(cd "$1" && pwd)
+dir=$(cd "$(dirname "$0")" && pwd)
+: "${SIM_UDID:?SIM_UDID must be the simulator UDID}"
+BACKEND_DIR=${BACKEND_DIR:-}
+
+scope() {
+  sed -n "s/^$1: *//p" "$dir/claude-scope"
+}
+
+model=$(scope model)
+layouts=$(scope layouts)
+max_turns=$(scope max-turns)
+max_budget=$(scope max-budget-usd)
+
+export PATH="$dir:$PATH" BACKEND_DIR APP_LOG=$out/app.log CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1
+if [ -n "$BACKEND_DIR" ]; then
+  cp "$BACKEND_DIR/seed.md" "$out/seed.md"
+fi
+settings=$out/settings.json
+cat > "$settings" << EOF
+{"hooks": {"PreToolUse": [{"matcher": "Bash", "hooks": [{"type": "command", "command": "$dir/claude-guard.py"}]}]}}
+EOF
+
+xcrun simctl spawn "$SIM_UDID" log stream --level debug --style compact --predicate 'process == "SimpleX"' > "$APP_LOG" 2>&1 &
+log_pid=$!
+trap 'kill "$log_pid" 2> /dev/null || true' EXIT
+
+layout_name() {
+  case "$1" in
+    reachable) echo "the one-hand UI (reachable toolbar)" ;;
+    top) echo "the top bar" ;;
+  esac
+}
+
+write_prompt() {
+  local layout=$1 previous=$2
+  cat "$dir/claude-prompt.md"
+  echo
+  echo "## The ui commands"
+  echo
+  echo '```'
+  ui || true
+  echo '```'
+  echo
+  echo "## This session"
+  echo
+  echo "- Layout: $(layout_name "$layout")."
+  echo "- Cases: $(scope "cases-$layout")."
+  local entries
+  entries=$(scope "entries-$layout")
+  if [ -n "$entries" ]; then
+    echo "- Entries to use: $entries."
+  fi
+  if [ -n "$BACKEND_DIR" ]; then
+    echo "- The test directory's address: $(cat "$BACKEND_DIR/directory-link")."
+    echo "- Names server to add in the app: $(cat "$BACKEND_DIR/names-server")."
+  else
+    echo "- No test backend runs in this session."
+  fi
+  if [ -z "$previous" ]; then
+    echo "- At the start: the smoke test onboarded a profile (typed as \"citester\"; the keyboard may have autocorrected the name) and checked the chat list in both layouts; the profile has no conversations."
+  else
+    echo "- At the start: an earlier session ran the cases in $(layout_name "$previous") on this app, so the profile may have chats, other profiles may exist and hints may be changed; look at the state first."
+  fi
+  echo "- Limits: $max_turns turns and \$$max_budget (estimated at API prices). Keep report.md current as you go."
+  echo
+  if [ -n "$BACKEND_DIR" ]; then
+    cat "$out/seed.md"
+    echo
+  fi
+  cat "$dir/device-test-plan.md"
+}
+
+status=0
+previous=""
+for layout in $layouts; do
+  session=$out/$layout
+  mkdir -p "$session/shots"
+  ui layout "$layout"
+  write_prompt "$layout" "$previous" > "$session/prompt.md"
+  echo "::group::Claude session: $layout, $model, $max_turns turns, \$$max_budget"
+  session_status=0
+  # outside the session's directory, so the session cannot change it
+  export CLAUDE_GUARD_LOG=$out/$layout-guard.log
+  : > "$CLAUDE_GUARD_LOG"
+  (
+    cd "$session"
+    UI_OUT=$session/shots CLAUDE_CODE_OAUTH_TOKEN=$token claude -p \
+      --model "$model" \
+      --effort high \
+      --restricted \
+      --tools Bash,Read,Write,Edit \
+      --allowedTools "Bash(ui)" "Bash(ui *)" "Read(/$session/**)" "Edit(/$session/**)" \
+      --permission-mode dontAsk \
+      --permission-prompts none \
+      --strict-mcp-config \
+      --max-turns "$max_turns" \
+      --max-budget-usd "$max_budget" \
+      --autocompact 200k \
+      --no-session-persistence \
+      --settings "$settings" \
+      --output-format stream-json \
+      --verbose \
+      < prompt.md > transcript.jsonl 2> stderr.log
+  ) || session_status=$?
+  echo "claude exited with $session_status"
+  # the token must never be printed or uploaded, whatever the session did; grep reads it from a pipe, not from its arguments
+  if grep -rqF -f <(printf '%s\n' "$token") "$session" "$CLAUDE_GUARD_LOG"; then
+    rm -rf "$session" "$CLAUDE_GUARD_LOG"
+    echo "::error::the $layout session's files contained the token, so they were deleted before the upload"
+    session_status=1
+  else
+    tail -n 20 "$session/stderr.log"
+    if [ -f "$session/report.md" ]; then
+      cat "$session/report.md"
+    else
+      echo "no report.md"
+    fi
+    echo "guard hook: $(grep -c '^allow' "$CLAUDE_GUARD_LOG" || true) allowed, $(grep -c '^refuse' "$CLAUDE_GUARD_LOG" || true) refused"
+    grep '^refuse' "$CLAUDE_GUARD_LOG" || true
+  fi
+  echo "::endgroup::"
+  if [ "$session_status" -ne 0 ]; then
+    status=$session_status
+  fi
+  previous=$layout
+done
+exit "$status"
diff --git a/scripts/ci/ios-sim/claude-usage.sh b/scripts/ci/ios-sim/claude-usage.sh
new file mode 100755
index 0000000000..79132707cb
--- /dev/null
+++ b/scripts/ci/ios-sim/claude-usage.sh
@@ -0,0 +1,42 @@
+#!/bin/bash
+
+# Reports what each Claude session of claude-test.sh spent, from the final result event of its transcript,
+# to the job summary and to <output dir>/claude-usage.json. total_cost_usd is Claude Code's own estimate
+# at API prices, not a bill.
+# Usage: scripts/ci/ios-sim/claude-usage.sh <output dir>
+
+set -euo pipefail
+
+out=$1
+summary=${GITHUB_STEP_SUMMARY:-/dev/stdout}
+sessions=0
+mkdir -p "$out"
+
+{
+  echo "## Claude sessions"
+  echo
+  echo "| Session | Result | Turns | Duration | Input | Output | Cache read | Cache write | Per model, estimated at API prices | Total, estimated at API prices | Permission denials |"
+  echo "|---|---|---|---|---|---|---|---|---|---|---|"
+} >> "$summary"
+
+for transcript in "$out"/*/transcript.jsonl; do
+  [ -f "$transcript" ] || continue
+  session=$(basename "$(dirname "$transcript")")
+  sessions=$((sessions + 1))
+  result=$(jq -c -R 'fromjson? | select(.type == "result")' "$transcript" | tail -n 1)
+  if [ -z "$result" ]; then
+    echo "| $session | no result event: the session timed out or crashed | | | | | | | | | |" >> "$summary"
+    jq -n --arg s "$session" '{session: $s, result: "missing"}' > "$out/$session/usage.json"
+    continue
+  fi
+  jq --arg s "$session" '{session: $s, subtype, is_error, num_turns, duration_ms, usage: (.usage | {input_tokens, output_tokens, cache_read_input_tokens, cache_creation_input_tokens}), modelUsage, total_cost_usd, permission_denials: (.permission_denials // [] | length)}' <<< "$result" > "$out/$session/usage.json"
+  jq -r --arg s "$session" '"| \($s) | \(.subtype)\(if .is_error then " (error)" else "" end) | \(.num_turns) | \(.duration_ms / 60000 | floor) min | \(.usage.input_tokens) | \(.usage.output_tokens) | \(.usage.cache_read_input_tokens) | \(.usage.cache_creation_input_tokens) | \([.modelUsage // {} | to_entries[] | "\(.key) $\(.value.costUSD // 0 | . * 100 | round / 100)"] | join(", ")) | $\(.total_cost_usd // 0 | . * 100 | round / 100) | \(.permission_denials // [] | length) |"' <<< "$result" >> "$summary"
+done
+
+if [ "$sessions" -eq 0 ]; then
+  echo "No Claude session ran." >> "$summary"
+  echo "[]" > "$out/claude-usage.json"
+else
+  jq -s '.' "$out"/*/usage.json > "$out/claude-usage.json"
+fi
+cat "$out/claude-usage.json"
diff --git a/scripts/ci/ios-sim/device-test-plan.md b/scripts/ci/ios-sim/device-test-plan.md
new file mode 100644
index 0000000000..cf82b7daf0
--- /dev/null
+++ b/scripts/ci/ios-sim/device-test-plan.md
@@ -0,0 +1,9 @@
+# Device test plan: smoke test
+
+The app as the scripted smoke test leaves it: a profile created through onboarding, without conversations. A branch that tests a feature replaces this plan with its own (same table format) and names its cases in `claude-scope`.
+
+| ID | Do | Expect |
+|----|----|--------|
+| S1 | Look at the screen: `ui tree`, then `ui shot S1-<layout>` | The chat list of a profile without conversations: the heading "Talk to someone", the cards "Let someone connect to you" and "Connect via link or QR code", and the toolbar with your profile image (`Image "Account"`, 32 x 32) and "Compose": at the bottom of the screen with the one-hand UI, at the top with the top bar |
+| S2 | Tap "Let someone connect to you", then "Back" | The page "Create your link" with the cards "Invite someone privately" and "Create your public address" and a "Back" button; after "Back", "Talk to someone" again |
+| S3 | Open the profile picker by tapping the toolbar's profile image, tap "Settings", then close Settings by swiping it down | The picker shows your profile name and "Settings"; Settings opens with "Your settings" and "Network & servers"; after closing, "Talk to someone" again |
diff --git a/scripts/ci/ios-sim/earlier-run.sh b/scripts/ci/ios-sim/earlier-run.sh
new file mode 100755
index 0000000000..752bea6292
--- /dev/null
+++ b/scripts/ci/ios-sim/earlier-run.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+# Finds the newest run of this branch in this repository that uploaded an unexpired artifact with this name,
+# and writes its id as run-id to GITHUB_OUTPUT. Needs GH_TOKEN with actions: read.
+# Usage: scripts/ci/ios-sim/earlier-run.sh <artifact name>
+# Artifacts from forks and other branches are not used: their workflows could upload anything under this name.
+
+set -euo pipefail
+
+name=$1
+run_id=$(gh api "repos/$GITHUB_REPOSITORY/actions/artifacts?name=$name&per_page=100" --jq "
+  [.artifacts[]
+    | select((.expired | not) and .workflow_run.head_branch == \"$GITHUB_REF_NAME\" and .workflow_run.head_repository_id == .workflow_run.repository_id)]
+  | sort_by(.created_at) | last | .workflow_run.id // empty")
+if [ -n "$run_id" ]; then
+  echo "$name: from run $run_id"
+  echo "run-id=$run_id" >> "$GITHUB_OUTPUT"
+else
+  echo "$name: not built yet"
+fi
diff --git a/scripts/ci/ios-sim/install-axe.sh b/scripts/ci/ios-sim/install-axe.sh
new file mode 100755
index 0000000000..4b09cde437
--- /dev/null
+++ b/scripts/ci/ios-sim/install-axe.sh
@@ -0,0 +1,21 @@
+#!/bin/bash
+
+# Installs a pinned AXe release the way its Homebrew formula (cameroncooke/homebrew-axe) does, rather than the tap's
+# latest version, because it runs in the job that later holds the Claude token. Puts axe on the job's PATH.
+
+set -euo pipefail
+
+version=1.8.0
+sha256=87eb09cd49dfc74fa8f7f5a46a03dfe2f14518b01d819f6a4094eab0d344ea7f
+dir=$RUNNER_TEMP/axe
+mkdir -p "$dir/release"
+curl --proto '=https' --tlsv1.2 -sSfL -o "$dir/axe.tar.gz" "https://github.com/cameroncooke/AXe/releases/download/v$version/AXe-macOS-homebrew-v$version.tar.gz"
+echo "$sha256  $dir/axe.tar.gz" | shasum -a 256 -c
+tar -xzf "$dir/axe.tar.gz" -C "$dir/release"
+axe=$(find "$dir/release" -type f -name axe -print -quit)
+for framework in "$(dirname "$axe")"/Frameworks/*.framework; do
+  codesign --force --sign - --timestamp=none "$framework"
+done
+codesign --force --sign - --timestamp=none "$axe"
+"$axe" --version
+dirname "$axe" >> "$GITHUB_PATH"
diff --git a/scripts/ci/ios-sim/names-resolver.py b/scripts/ci/ios-sim/names-resolver.py
new file mode 100755
index 0000000000..0e56318431
--- /dev/null
+++ b/scripts/ci/ios-sim/names-resolver.py
@@ -0,0 +1,116 @@
+#!/usr/bin/env python3
+
+# The name resolver that the test smp-server's [NAMES] section points at, as simplexmq's Server/Names/HttpResolver.hs
+# calls it: GET /v2/resolve/<query> answers a NameResponse for the query "[<keccak-256 of the lowercased label, hex>]<.tld>"
+# (or the plain name, which older clients send), GET /health answers {}. Registered names come from a JSON file, read on every request, so names can be added while it runs:
+#   {"cinews.testing": {"simplexChannel": ["https://..."], "simplexContact": []}, ...}
+# Every other name is answered as available.
+# Usage: names-resolver.py <port> <names json>
+
+import json
+import sys
+import urllib.parse
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+
+ROUND_CONSTANTS = [
+    0x0000000000000001, 0x0000000000008082, 0x800000000000808A, 0x8000000080008000,
+    0x000000000000808B, 0x0000000080000001, 0x8000000080008081, 0x8000000000008009,
+    0x000000000000008A, 0x0000000000000088, 0x0000000080008009, 0x000000008000000A,
+    0x000000008000808B, 0x800000000000008B, 0x8000000000008089, 0x8000000000008003,
+    0x8000000000008002, 0x8000000000000080, 0x000000000000800A, 0x800000008000000A,
+    0x8000000080008081, 0x8000000000008080, 0x0000000080000001, 0x8000000080008008,
+]
+ROTATIONS = [[0, 36, 3, 41, 18], [1, 44, 10, 45, 2], [62, 6, 43, 15, 61], [28, 55, 25, 21, 56], [27, 20, 39, 8, 14]]
+MASK = (1 << 64) - 1
+
+
+def rol(v, n):
+    return ((v << n) | (v >> (64 - n))) & MASK if n else v
+
+
+def keccak_f(a):
+    for rc in ROUND_CONSTANTS:
+        c = [a[x][0] ^ a[x][1] ^ a[x][2] ^ a[x][3] ^ a[x][4] for x in range(5)]
+        d = [c[(x - 1) % 5] ^ rol(c[(x + 1) % 5], 1) for x in range(5)]
+        a = [[a[x][y] ^ d[x] for y in range(5)] for x in range(5)]
+        b = [[0] * 5 for _ in range(5)]
+        for x in range(5):
+            for y in range(5):
+                b[y][(2 * x + 3 * y) % 5] = rol(a[x][y], ROTATIONS[x][y])
+        a = [[b[x][y] ^ (~b[(x + 1) % 5][y] & b[(x + 2) % 5][y]) for y in range(5)] for x in range(5)]
+        a[0][0] ^= rc
+    return a
+
+
+# Keccak-256 as Ethereum uses it (padding 0x01, not SHA3's 0x06), which hashlib does not have
+def keccak256(data):
+    rate = 136
+    padded = bytearray(data) + b"\x01" + bytes(-(len(data) + 1) % rate)
+    padded[-1] |= 0x80
+    a = [[0] * 5 for _ in range(5)]
+    for offset in range(0, len(padded), rate):
+        for i in range(rate // 8):
+            a[i % 5][i // 5] ^= int.from_bytes(padded[offset + 8 * i:offset + 8 * i + 8], "little")
+        a = keccak_f(a)
+    return b"".join(a[i % 5][i // 5].to_bytes(8, "little") for i in range(4))
+
+
+def name_query(name):
+    label, tld = name.lower().split(".", 1)
+    return "[" + keccak256(label.encode()).hex() + "]." + tld
+
+
+def name_response(names_file, query):
+    with open(names_file) as f:
+        names = json.load(f)
+    for name, links in names.items():
+        # hashed from SMP v22 (NQHash), the plain name before (NQDomain)
+        if query.lower() in (name_query(name), name.lower()):
+            record = {
+                "name": name,
+                "nickname": "",
+                "website": "",
+                "location": "",
+                "simplexContact": links.get("simplexContact", []),
+                "simplexChannel": links.get("simplexChannel", []),
+                "eth": None,
+                "btc": None,
+                "xmr": None,
+                "dot": None,
+                "owner": "",
+                "resolver": "",
+            }
+            return name, {"registration": {"type": "registered", "nameRecord": record}}
+    return None, {"registration": {"type": "available", "pricing": {"registrationPrices": {}, "basePrice": 1000, "minLabelLength": 1}}}
+
+
+class Handler(BaseHTTPRequestHandler):
+    def do_GET(self):
+        path = urllib.parse.unquote(self.path)
+        if path == "/health":
+            self.reply(200, {})
+        elif path.startswith("/v2/resolve/"):
+            query = path[len("/v2/resolve/"):]
+            name, response = name_response(self.server.names_file, query)
+            print(f"resolve {query}: {name or 'not registered'}", flush=True)
+            self.reply(200, response)
+        else:
+            self.reply(404, {})
+
+    def reply(self, status, body):
+        data = json.dumps(body).encode()
+        self.send_response(status)
+        self.send_header("Content-Type", "application/json")
+        self.send_header("Content-Length", str(len(data)))
+        self.end_headers()
+        self.wfile.write(data)
+
+    def log_message(self, format, *args):
+        pass
+
+
+if __name__ == "__main__":
+    server = ThreadingHTTPServer(("127.0.0.1", int(sys.argv[1])), Handler)
+    server.names_file = sys.argv[2]
+    print(f"names resolver on 127.0.0.1:{sys.argv[1]}, names from {sys.argv[2]}", flush=True)
+    server.serve_forever()
diff --git a/scripts/ci/ios-sim/prepare-libs.sh b/scripts/ci/ios-sim/prepare-libs.sh
new file mode 100755
index 0000000000..78287b5ccf
--- /dev/null
+++ b/scripts/ci/ios-sim/prepare-libs.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+
+# Builds mac2ios, runs scripts/ios/prepare.sh on ~/Downloads/pkg-ios-aarch64-swift-json.zip,
+# and fails unless every object in apps/ios/Libraries/sim is marked for the iOS simulator.
+
+set -euo pipefail
+
+mac2ios_rev=4dcb77d5ea896d749381806dfab5358851b08951
+tools=$(mktemp -d)
+for f in mac2ios.c ar.h macho.h; do
+  curl --proto '=https' --tlsv1.2 -sSfL -o "$tools/$f" "https://raw.githubusercontent.com/zw3rk/mobile-core-tools/$mac2ios_rev/$f"
+done
+cc -O2 -o "$tools/mac2ios" "$tools/mac2ios.c"
+
+PATH="$tools:$PATH" scripts/ios/prepare.sh
+
+for f in apps/ios/Libraries/sim/*.a; do
+  echo "$f: $(du -h "$f" | cut -f1), $(lipo -info "$f")"
+  platforms=$({ otool -l "$f" || true; } | awk '$1 == "platform" {print $2}' | sort | uniq -c)
+  echo "${platforms:-  no LC_BUILD_VERSION found}"
+  if echo "$platforms" | awk 'NF {print $2}' | grep -vE '^(7|IOSSIMULATOR)$' > /dev/null; then
+    echo "error: $f has objects for a platform other than the iOS simulator"
+    exit 1
+  fi
+done
diff --git a/scripts/ci/ios-sim/smoke-test.sh b/scripts/ci/ios-sim/smoke-test.sh
new file mode 100755
index 0000000000..e9e245a1ab
--- /dev/null
+++ b/scripts/ci/ios-sim/smoke-test.sh
@@ -0,0 +1,124 @@
+#!/bin/bash
+
+# Installs the app in a new iPhone simulator and runs the scripted UI cases with the ui helper: onboarding to the
+# chat list with the one-hand UI (the default), then the chat list again with the top bar. It leaves the app in the one-hand UI.
+# Usage: scripts/ci/ios-sim/smoke-test.sh <path to SimpleX.app> <output dir>
+# Each step saves a screenshot and an accessibility tree to the output dir and prints the tree to the log.
+# Later steps of the job get SIM_UDID and UI_OUT, with the simulator still running.
+
+set -euo pipefail
+
+app=$1
+export UI_OUT=$2
+bundle_id=chat.simplex.app
+ui=$(dirname "$0")/ui
+mkdir -p "$UI_OUT"
+
+axe --version
+runtime=com.apple.CoreSimulator.SimRuntime.iOS-$(xcrun --sdk iphonesimulator --show-sdk-version | tr . -)
+SIM_UDID=$(xcrun simctl create ci-iphone com.apple.CoreSimulator.SimDeviceType.iPhone-17 "$runtime")
+export SIM_UDID
+echo "simulator $SIM_UDID, runtime $runtime"
+if [ -n "${GITHUB_ENV:-}" ]; then
+  echo "SIM_UDID=$SIM_UDID" >> "$GITHUB_ENV"
+  echo "UI_OUT=$UI_OUT" >> "$GITHUB_ENV"
+fi
+xcrun simctl boot "$SIM_UDID"
+xcrun simctl bootstatus "$SIM_UDID" -b
+open -a Simulator --args -CurrentDeviceUDID "$SIM_UDID"
+
+xcrun simctl spawn "$SIM_UDID" log stream --level debug --style compact --predicate 'process == "SimpleX"' > "$UI_OUT/app.log" 2>&1 &
+log_pid=$!
+
+finish() {
+  local status=$?
+  "$ui" shot final || true
+  kill "$log_pid" || true
+  echo "::group::core start in the app log"
+  grep -E 'chatMigrateInit|startChat' "$UI_OUT/app.log" || true
+  echo "::endgroup::"
+  echo "::group::app log, last 300 lines"
+  tail -n 300 "$UI_OUT/app.log"
+  echo "::endgroup::"
+  find ~/Library/Logs/DiagnosticReports -name 'SimpleX*' -newer "$app" 2>/dev/null | while read -r report; do
+    echo "::group::crash report $report"
+    head -n 200 "$report"
+    echo "::endgroup::"
+  done || true
+  exit "$status"
+}
+trap finish EXIT
+
+expect_in_tree() {
+  local tree
+  tree=$("$ui" tree)
+  if ! grep -q "$@" <<< "$tree"; then
+    echo "error: ${*: -1} is not in the accessibility tree"
+    exit 1
+  fi
+}
+
+# iOS asks once whether the app may send notifications. The tree sometimes shows the app under this alert rather than
+# the alert (run 38895987656), so its Allow button is also looked for at its place.
+allow_notifications() {
+  local deadline=$((SECONDS + 30)) element
+  while [ "$SECONDS" -lt "$deadline" ]; do
+    if "$ui" tap Allow 1; then
+      return
+    fi
+    element=$("$ui" point 275 518 || true)
+    if grep -qF '"Allow"' <<< "$element"; then
+      "$ui" tap-xy 275 518
+      return
+    fi
+    sleep 2
+  done
+  echo "no notifications alert to allow"
+}
+
+# a profile without conversations sees the onboarding pages in place of the list
+expect_chat_list() {
+  expect_in_tree -F '"Talk to someone"'
+  expect_in_tree -F 'Button "Let someone connect to you"'
+  expect_in_tree -F 'Button "Connect via link or QR code"'
+  expect_in_tree -F 'Button "Compose"'
+  echo "in the $1 layout the chat list shows the onboarding pages and the toolbar"
+}
+
+xcrun simctl install "$SIM_UDID" "$app"
+xcrun simctl launch "$SIM_UDID" "$bundle_id"
+
+# onboarding to the chat list
+"$ui" wait "Get started" 180
+"$ui" shot first-screen
+"$ui" tap "Get started"
+
+"$ui" wait "Create profile" 30
+"$ui" tap-value "Enter profile name..."
+"$ui" type citester
+"$ui" shot profile-name
+"$ui" tap "Create profile"
+
+"$ui" wait "Continue" 60
+"$ui" shot your-network
+"$ui" tap "Continue"
+
+"$ui" wait "Accept" 30
+"$ui" shot network-commitments
+"$ui" tap "Accept"
+
+sleep 5
+"$ui" shot after-onboarding
+allow_notifications
+"$ui" shot notifications-allowed
+
+"$ui" wait "Talk to someone" 60
+"$ui" shot chat-list
+expect_chat_list reachable
+
+# ui layout checks that the toolbar moved
+"$ui" layout top
+"$ui" shot chat-list-top
+expect_chat_list top
+"$ui" layout reachable
+echo "smoke test passed: onboarding reaches the chat list, which shows its onboarding pages and toolbar with the one-hand UI and with the top bar"
diff --git a/scripts/ci/ios-sim/ui b/scripts/ci/ios-sim/ui
new file mode 100755
index 0000000000..6738dac5c2
--- /dev/null
+++ b/scripts/ci/ios-sim/ui
@@ -0,0 +1,237 @@
+#!/bin/bash
+
+# Drives the app in the simulator SIM_UDID with AXe, for the scripted cases and for an agent on the runner.
+# Screenshots and accessibility trees go to UI_OUT.
+#
+#   ui tap <label> [secs]           tap the element with this exact accessibility label, waiting up to secs (10) for it
+#   ui tap-value <text> [secs]      tap the element with this exact value: text fields have no label, only their placeholder or text
+#   ui tap-xy <x> <y>               tap this point (points, as in the tree)
+#   ui swipe <x1> <y1> <x2> <y2>    swipe from one point to the other, e.g. to scroll a list
+#   ui type <text>                  type into the focused field (US keyboard characters only)
+#   ui clipboard <text>             put the text on the clipboard, to paste it with the text field's Paste menu
+#   ui key <return|delete> [count]  press a keyboard key: return submits the field (the Search key), delete erases a character
+#   ui wait <text> [secs]           wait up to secs (30) until a label or value contains the text (case-sensitive)
+#   ui find <text>                  print the elements whose label or value contains the text (any case)
+#   ui shot <name>                  save UI_OUT/NN-<name>.png, a smaller NN-<name>-view.jpg and NN-<name>.json, and print the tree
+#   ui tree                         print the tree, one element per line: type, label, value, top-left corner and size in points,
+#                                   and "disabled" for a disabled element
+#   ui point <x> <y>                print the element at this point, also when it belongs to a system alert that the tree misses
+#   ui layout <reachable|top>       restart the app with the one-hand UI (reachable toolbar) or the top bar
+#   ui relaunch                     restart the app
+#   ui text-size <category>         set Dynamic Type: medium (the default), large, extra-large, extra-extra-large,
+#                                   extra-extra-extra-large, accessibility-medium ... accessibility-extra-extra-extra-large
+#   ui directory <stop|start>       stop or start the test directory (searches fail while it is stopped)
+#   ui listings                     the groups and channels listed in the test directory
+#   ui requests                     how many directory searches the app sent and how many were answered (needs APP_LOG)
+
+set -euo pipefail
+
+# nothing this helper runs needs the token of the Claude session that calls it
+unset CLAUDE_CODE_OAUTH_TOKEN
+
+: "${SIM_UDID:?SIM_UDID must be the simulator UDID}"
+
+bundle_id=chat.simplex.app
+app_group=group.chat.simplex.app
+# the toolbar's new chat button: shown with and without conversations, unlike the search field
+toolbar_button=Compose
+
+# Elements below the screen, such as the keyboard's keys, are counted rather than listed; the screen is the first
+# element's frame, or the given height.
+compact_tree() {
+  jq -r --argjson screen "${1:-null}" '($screen // .[0].frame.height // 100000) as $h
+    | [.. | objects | select(.AXLabel or .AXValue)]
+    | (.[] | select((.frame.y // 0) < $h)
+        | "\(.type) \(.AXLabel | tojson) value=\(.AXValue | tojson) at \(.frame.x // 0 | round),\(.frame.y // 0 | round) size \(.frame.width // 0 | round)x\(.frame.height // 0 | round)\(if .enabled == false then " disabled" else "" end)"),
+      (map(select((.frame.y // 0) >= $h)) | length | select(. > 0) | "(\(.) elements below the screen not listed, such as keyboard keys)")'
+}
+
+# describe-ui failed once while a system alert was appearing, and read the tree a few seconds later (run 38895987656)
+describe() {
+  local attempt
+  for attempt in 1 2 3 4; do
+    if axe describe-ui --udid "$SIM_UDID" "$@"; then
+      return
+    fi
+    sleep 2
+  done
+  axe describe-ui --udid "$SIM_UDID" "$@"
+}
+
+tree() {
+  describe | compact_tree
+}
+
+point() {
+  number "$1"
+  number "$2"
+  describe --point "$1,$2" | compact_tree 100000
+}
+
+wait_for() {
+  local text=$1 secs=${2:-30}
+  local deadline=$((SECONDS + secs)) t
+  until t=$(tree 2> /dev/null) && grep -qF -- "$text" <<< "$t"; do
+    if [ "$SECONDS" -ge "$deadline" ]; then
+      echo "error: \"$text\" not shown after $secs s"
+      return 1
+    fi
+    sleep 2
+  done
+}
+
+find_text() {
+  local t
+  t=$(tree)
+  if ! grep -iF -- "$1" <<< "$t"; then
+    echo "no element contains \"$1\""
+    return 1
+  fi
+}
+
+shot() {
+  : "${UI_OUT:?UI_OUT must be the output directory}"
+  if ! [[ "$1" =~ ^[A-Za-z0-9_-]+$ ]]; then
+    echo "error: a shot name has only letters, digits, - and _"
+    return 1
+  fi
+  mkdir -p "$UI_OUT"
+  local n f
+  n=$(find "$UI_OUT" -maxdepth 1 -name '*.png' | wc -l)
+  f=$(printf '%s/%02d-%s' "$UI_OUT" $((n + 1)) "$1")
+  xcrun simctl io "$SIM_UDID" screenshot "$f.png" > /dev/null
+  sips -Z 1000 -s format jpeg -s formatOptions 70 "$f.png" --out "$f-view.jpg" > /dev/null
+  describe > "$f.json"
+  echo "::group::accessibility tree: $1"
+  echo "saved $f.png, and $f-view.jpg to look at"
+  compact_tree < "$f.json"
+  echo "::endgroup::"
+}
+
+number() {
+  if ! [[ "$1" =~ ^[0-9]+(\.[0-9]+)?$ ]]; then
+    echo "error: \"$1\" is not a number"
+    exit 1
+  fi
+}
+
+key() {
+  local code count=${2:-1} i
+  case "$1" in
+    return) code=40 ;;
+    delete) code=42 ;;
+    *)
+      echo "error: key is return or delete"
+      return 1
+      ;;
+  esac
+  number "$count"
+  for ((i = 0; i < count; i++)); do
+    axe key "$code" --udid "$SIM_UDID"
+  done
+  sleep 1
+}
+
+launch() {
+  xcrun simctl terminate "$SIM_UDID" "$bundle_id" 2> /dev/null || true
+  "$@"
+  xcrun simctl launch "$SIM_UDID" "$bundle_id" > /dev/null
+  wait_for "$toolbar_button" 90
+}
+
+toolbar_y() {
+  tree | grep -F "Button \"$toolbar_button\" " | sed -E 's/.* at [0-9-]+,([0-9-]+) .*/\1/' | head -n 1
+}
+
+# The preference is set in the app group's defaults while the app is not running; Settings shows the same switch.
+layout() {
+  local one_hand
+  case "$1" in
+    reachable) one_hand=true ;;
+    top) one_hand=false ;;
+    *)
+      echo "error: layout is reachable or top"
+      return 1
+      ;;
+  esac
+  local prefs
+  prefs=$(xcrun simctl get_app_container "$SIM_UDID" "$bundle_id" "$app_group")/Library/Preferences/$app_group
+  launch xcrun simctl spawn "$SIM_UDID" defaults write "$prefs" oneHandUI -bool "$one_hand"
+  local y
+  y=$(toolbar_y)
+  if { [ "$one_hand" = true ] && [ "$y" -lt 437 ]; } || { [ "$one_hand" = false ] && [ "$y" -ge 437 ]; }; then
+    echo "error: the toolbar is at y=$y, not where the $1 layout puts it"
+    return 1
+  fi
+  echo "layout $1: the toolbar is at y=$y"
+}
+
+text_size() {
+  case "$1" in
+    medium | large | extra-large | extra-extra-large | extra-extra-extra-large | accessibility-medium | accessibility-large | accessibility-extra-large | accessibility-extra-extra-large | accessibility-extra-extra-extra-large) ;;
+    *)
+      echo "error: unknown text size \"$1\""
+      return 1
+      ;;
+  esac
+  xcrun simctl ui "$SIM_UDID" content_size "$1"
+  sleep 2
+}
+
+backend() {
+  : "${BACKEND_DIR:?BACKEND_DIR must be the work dir of the test backend}"
+  "$(dirname "$0")/backend.sh" "$@" "$BACKEND_DIR"
+}
+
+directory() {
+  case "$1" in
+    stop) backend directory-stop ;;
+    start) backend directory-start ;;
+    *)
+      echo "error: directory stop or directory start"
+      return 1
+      ;;
+  esac
+  echo "test directory: $1"
+}
+
+requests() {
+  : "${APP_LOG:?APP_LOG must be the app log}"
+  local sent answered results
+  sent=$(grep -c 'chatSendCmd apiSendServiceRequest$' "$APP_LOG" || true)
+  results=$(grep -c 'chatSendCmd apiSendServiceRequest: ' "$APP_LOG" || true)
+  answered=$(grep -c 'chatSendCmd apiSendServiceRequest: serviceResponse' "$APP_LOG" || true)
+  echo "directory searches sent: $sent, answered: $answered, failed: $((results - answered)), waiting: $((sent - results))"
+}
+
+case "${1:-}" in
+  tap) axe tap --label "$2" --wait-timeout "${3:-10}" --post-delay 2 --udid "$SIM_UDID" ;;
+  tap-value) axe tap --value "$2" --wait-timeout "${3:-10}" --post-delay 2 --udid "$SIM_UDID" ;;
+  tap-xy)
+    number "$2"
+    number "$3"
+    axe tap -x "$2" -y "$3" --post-delay 2 --udid "$SIM_UDID"
+    ;;
+  swipe)
+    for n in "$2" "$3" "$4" "$5"; do number "$n"; done
+    axe swipe --start-x "$2" --start-y "$3" --end-x "$4" --end-y "$5" --duration 0.5 --post-delay 1 --udid "$SIM_UDID"
+    ;;
+  type) axe type "$2" --udid "$SIM_UDID" ;;
+  clipboard) printf '%s' "$2" | xcrun simctl pbcopy "$SIM_UDID" ;;
+  key) key "$2" "${3:-1}" ;;
+  wait) wait_for "$2" "${3:-30}" ;;
+  find) find_text "$2" ;;
+  shot) shot "$2" ;;
+  tree) tree ;;
+  point) point "$2" "$3" ;;
+  layout) layout "$2" ;;
+  relaunch) launch true ;;
+  text-size) text_size "$2" ;;
+  directory) directory "$2" ;;
+  listings) backend listings ;;
+  requests) requests ;;
+  *)
+    sed -n '3,26s/^# \{0,1\}//p' "$0"
+    exit 1
+    ;;
+esac
diff --git a/scripts/ci/ios-sim/use-macos26-sdk.sh b/scripts/ci/ios-sim/use-macos26-sdk.sh
new file mode 100755
index 0000000000..d69a6a6af8
--- /dev/null
+++ b/scripts/ci/ios-sim/use-macos26-sdk.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+# Runner images from 20261013 add Command Line Tools whose default SDK is macOS 27, which Xcode 26.6's linker cannot read
+# ("tapi error: malformed file"); GHC's links reach it despite DEVELOPER_DIR, so the default goes back to macOS 26.5.
+
+set -euo pipefail
+
+sdks=/Library/Developer/CommandLineTools/SDKs
+if [ -L "$sdks/MacOSX.sdk" ] && [ -d "$sdks/MacOSX26.5.sdk" ]; then
+  sudo ln -sfn MacOSX26.5.sdk "$sdks/MacOSX.sdk"
+fi
+ls -l "$sdks"
diff --git a/scripts/ci/packages_release.py b/scripts/ci/packages_release.py
new file mode 100644
index 0000000000..488d35bb8c
--- /dev/null
+++ b/scripts/ci/packages_release.py
@@ -0,0 +1,670 @@
+#!/usr/bin/env python3
+"""Release automation for simplex-chat and @simplex-chat/types on npm and simplex-chat on PyPI.
+
+addon-tag      print the add-on release tag for the current sources
+changes        print whether the changes since a commit touch the chat core and the add-on
+build-plan     print the platforms to build the add-on on and whether to run the package tests
+prepare        update pins and versions for a release PR
+publish-plan   print the package versions that are not published yet
+record         record releases and published versions in releases.toml of simplex-chat-libs
+test-names     rename the packages to NPM_SCOPE and PYPI_PROJECT (test repositories)
+"""
+
+from __future__ import annotations
+
+import argparse
+import base64
+import copy
+import hashlib
+import json
+import os
+import re
+import subprocess
+import sys
+import tomllib
+import urllib.error
+import urllib.request
+from collections.abc import Callable
+from dataclasses import dataclass, field, replace
+from typing import Any
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[2]
+NODEJS_DIR = "packages/simplex-chat-nodejs"
+TYPES_DIR = "packages/simplex-chat-client/types/typescript"
+PYTHON_DIR = "packages/simplex-chat-python"
+RELEASE_FILE = f"{NODEJS_DIR}/src/release.ts"
+PYTHON_VERSION_FILE = f"{PYTHON_DIR}/src/simplex_chat/_version.py"
+ADDON_SOURCES = [f"{NODEJS_DIR}/binding.gyp", f"{NODEJS_DIR}/cpp"]
+CORE_SOURCES = ["src", "simplex-chat.cabal", "cabal.project"]
+ADDON_TAG_HASH_LENGTH = 12
+LIBS_ASSETS = [
+    "simplex-chat-libs-linux-aarch64.zip",
+    "simplex-chat-libs-linux-x86_64-postgres.zip",
+    "simplex-chat-libs-linux-x86_64.zip",
+    "simplex-chat-libs-macos-aarch64.zip",
+    "simplex-chat-libs-macos-x86_64.zip",
+    "simplex-chat-libs-windows-x86_64.zip",
+]
+ADDON_RUNNERS = {
+    "linux-aarch64": "ubuntu-22.04-arm",
+    "linux-x86_64": "ubuntu-22.04",
+    "macos-aarch64": "macos-latest",
+    "macos-x86_64": "macos-15-intel",
+    "windows-x86_64": "windows-latest",
+}
+ADDON_PLATFORMS = list(ADDON_RUNNERS)
+# build.yml builds libsimplex of pull requests on this platform only
+CORE_TEST_PLATFORM = "linux-x86_64"
+ADDON_ASSETS = [f"simplex-chat-nodejs-{platform}.node" for platform in ADDON_PLATFORMS]
+SHA256_HEX = re.compile(r"^[0-9a-f]{64}$")
+RELEASES_FILE = "releases.toml"
+RECORD_ATTEMPTS = 5
+TOML_BARE_KEY = re.compile(r"^[A-Za-z0-9_-]+$")
+
+
+# Pure functions
+
+
+def addon_tag(files: dict[str, bytes], node_addon_api: str) -> str:
+    digest = hashlib.sha256()
+    for name in sorted(files):
+        digest.update(name.encode() + b"\0" + files[name] + b"\0")
+    digest.update(f"node-addon-api@{node_addon_api}".encode())
+    return f"nodejs-addon-{digest.hexdigest()[:ADDON_TAG_HASH_LENGTH]}"
+
+
+def bump_npm_version(version: str) -> str:
+    """A package release of app version 7.1.0-beta.6 is 7.1.0-beta.6.1, then 7.1.0-beta.6.2."""
+    _, _, prerelease = version.partition("-")
+    if len(prerelease.split(".")) == 2:
+        return f"{version}.1"
+    head, _, last = version.rpartition(".")
+    return f"{head}.{int(last) + 1}" if last.isdigit() else f"{version}.1"
+
+
+def bump_python_version(version: str) -> str:
+    """A package release of app version 7.1.0b6 is 7.1.0b6.post1, then 7.1.0b6.post2."""
+    post = re.search(r"\.post(\d+)$", version)
+    return f"{version[: post.start()]}.post{int(post[1]) + 1}" if post else f"{version}.post1"
+
+
+def dist_tag(version: str) -> str:
+    return "beta" if "-" in version else "latest"
+
+
+def registry_name(name: str, scope: str | None) -> str:
+    """Package name on npm: test repositories publish under their own scope."""
+    return f"{scope}/{name.split('/')[-1]}" if scope else name
+
+
+@dataclass(frozen=True)
+class Pins:
+    libs_release: str
+    sha256: dict[str, str]
+    addon_release: str | None = None
+
+
+def parse_release(source: str) -> Pins:
+    libs = re.search(r'export const LIBS_RELEASE = "([^"]+)"', source)
+    addon = re.search(r'export const ADDON_RELEASE: string \| undefined = (?:"([^"]+)"|undefined)', source)
+    if not libs or not addon:
+        raise ValueError(f"cannot parse {RELEASE_FILE}")
+    hashes = dict(re.findall(r'^ {2}"([^"]+)": "([0-9a-f]{64})",$', source, re.M))
+    return Pins(libs[1], hashes, addon[1])
+
+
+def render_release(pins: Pins) -> str:
+    hashes = "".join(f'  "{asset}": "{pins.sha256[asset]}",\n' for asset in sorted(pins.sha256))
+    addon = f'"{pins.addon_release}"' if pins.addon_release else "undefined"
+    return (
+        "// Written by scripts/ci/packages_release.py from the simplex-chat-libs releases.\n"
+        "\n"
+        f'export const LIBS_RELEASE = "{pins.libs_release}"\n'
+        "\n"
+        f"export const ADDON_RELEASE: string | undefined = {addon}\n"
+        "\n"
+        "export const SHA256: {readonly [asset: string]: string} = {\n"
+        f"{hashes}}}\n"
+    )
+
+
+def parse_python_version(source: str) -> tuple[str, Pins]:
+    version = re.search(r'^__version__ = "([^"]+)"', source, re.M)
+    libs = re.search(r'^LIBS_RELEASE = "([^"]+)"', source, re.M)
+    if not version or not libs:
+        raise ValueError(f"cannot parse {PYTHON_VERSION_FILE}")
+    hashes = dict(re.findall(r'^ {4}"([^"]+)": "([0-9a-f]{64})",$', source, re.M))
+    return version[1], Pins(libs[1], hashes)
+
+
+def render_python_version(version: str, pins: Pins) -> str:
+    hashes = "".join(f'    "{asset}": "{pins.sha256[asset]}",\n' for asset in sorted(pins.sha256))
+    return (
+        '"""Package version and the simplex-chat-libs release it loads.\n'
+        "\n"
+        "Written by scripts/ci/packages_release.py: the release PR bumps the version\n"
+        "and pins new library releases with the SHA-256 of their assets.\n"
+        '"""\n'
+        "\n"
+        f'__version__ = "{version}"  # PEP 440 — read by hatchling for wheel metadata\n'
+        f'LIBS_RELEASE = "{pins.libs_release}"  # simplex-chat-libs release tag\n'
+        "LIBS_SHA256 = {\n"
+        f"{hashes}}}\n"
+    )
+
+
+def release_digests(release: dict | None, assets: list[str]) -> dict[str, str] | None:
+    """Asset digests of a GitHub release, or None when the release is missing or incomplete."""
+    if release is None:
+        return None
+    digests = {a["name"]: (a.get("digest") or "").removeprefix("sha256:") for a in release["assets"]}
+    if not all(SHA256_HEX.match(digests.get(asset, "")) for asset in assets):
+        return None
+    return {asset: digests[asset] for asset in assets}
+
+
+@dataclass(frozen=True)
+class Package:
+    version: str
+    changed: bool
+    published: bool
+
+
+@dataclass(frozen=True)
+class State:
+    libs_tag: str
+    libs_digests: dict[str, str] | None
+    addon_tag: str
+    addon_digests: dict[str, str] | None
+    nodejs_pins: Pins
+    python_pins: Pins
+    types: Package
+    nodejs: Package
+    python: Package
+    types_version: str | None = None
+    nodejs_version: str | None = None
+    python_version: str | None = None
+
+
+@dataclass(frozen=True)
+class Plan:
+    nodejs_pins: Pins
+    python_pins: Pins
+    types_version: str
+    types_bumped: bool
+    nodejs_version: str
+    nodejs_changed: bool
+    python_version: str
+    python_changed: bool
+    notes: list[str] = field(default_factory=list)
+
+    @property
+    def types_dependency(self) -> str | None:
+        return f"^{self.types_version}" if self.types_bumped else None
+
+    @property
+    def title(self) -> str:
+        parts = []
+        if self.types_bumped:
+            parts.append(f"types {self.types_version}")
+        if self.nodejs_changed:
+            parts.append(f"nodejs {self.nodejs_version}")
+        if self.python_changed:
+            parts.append(f"python {self.python_version}")
+        return f"packages: release {', '.join(parts)}"
+
+
+def plan(state: State) -> Plan:
+    """What a release PR changes, from the state of the branch and the releases."""
+    notes: list[str] = []
+
+    def pin(pins: Pins, field_name: str, tag: str, digests: dict[str, str] | None, what: str) -> tuple[Pins, bool]:
+        current = getattr(pins, field_name)
+        if current == tag:
+            return pins, False
+        if digests is None:
+            notes.append(f"{what} release {tag} is missing or incomplete; {current or 'none'} stays pinned")
+            return pins, False
+        notes.append(f"{what}: {tag}")
+        return replace(pins, **{field_name: tag, "sha256": {**pins.sha256, **digests}}), True
+
+    nodejs_pins, nodejs_libs = pin(
+        state.nodejs_pins, "libs_release", state.libs_tag, state.libs_digests, "Node.js libsimplex"
+    )
+    nodejs_pins, addon = pin(nodejs_pins, "addon_release", state.addon_tag, state.addon_digests, "Node.js add-on")
+    python_pins, python_libs = pin(
+        state.python_pins, "libs_release", state.libs_tag, state.libs_digests, "Python libsimplex"
+    )
+
+    def next_version(pkg: Package, changed: bool, override: str | None, bump) -> str:
+        if override:
+            return override
+        return bump(pkg.version) if changed and pkg.published else pkg.version
+
+    types_version = next_version(state.types, state.types.changed, state.types_version, bump_npm_version)
+    types_bumped = types_version != state.types.version
+    nodejs_changed = nodejs_libs or addon or types_bumped or state.nodejs.changed
+    nodejs_version = next_version(state.nodejs, nodejs_changed, state.nodejs_version, bump_npm_version)
+    python_changed = python_libs or state.python.changed
+    python_version = next_version(state.python, python_changed, state.python_version, bump_python_version)
+    for name, old, new in [
+        ("@simplex-chat/types", state.types.version, types_version),
+        ("simplex-chat (npm)", state.nodejs.version, nodejs_version),
+        ("simplex-chat (PyPI)", state.python.version, python_version),
+    ]:
+        if old != new:
+            notes.append(f"{name}: {old} → {new}")
+    return Plan(
+        nodejs_pins=nodejs_pins,
+        python_pins=python_pins,
+        types_version=types_version,
+        types_bumped=types_bumped,
+        nodejs_version=nodejs_version,
+        nodejs_changed=nodejs_changed or nodejs_version != state.nodejs.version,
+        python_version=python_version,
+        python_changed=python_changed or python_version != state.python.version,
+        notes=notes,
+    )
+
+
+@dataclass(frozen=True)
+class BuildPlan:
+    platforms: list[str]
+    test: bool
+
+
+def build_plan(
+    event: str, release_missing: bool, libs_artifact: bool, libs_release: str, core_changed: bool, addon_changed: bool
+) -> BuildPlan:
+    """Each package test runs once, against the libsimplex of the change: a pull request that changes the core
+    is tested by build.yml with its own libsimplex (libs_artifact), a new library release with that release."""
+    if libs_artifact:
+        return BuildPlan([CORE_TEST_PLATFORM], test=True)
+    if libs_release:
+        return BuildPlan(ADDON_PLATFORMS, test=True)
+    if event == "pull_request":
+        if core_changed:
+            return BuildPlan(ADDON_PLATFORMS if addon_changed else [], test=False)
+        return BuildPlan(ADDON_PLATFORMS, test=True)
+    return BuildPlan(ADDON_PLATFORMS if release_missing else [], test=True)
+
+
+def build_matrix(platforms: list[str]) -> str:
+    return json.dumps([{"platform": platform, "os": ADDON_RUNNERS[platform]} for platform in platforms])
+
+
+def recorded_commit(releases: dict, key: str, version: str) -> str | None:
+    """The simplex-chat commit recorded for a version; key is "core", "npm/<name>" or "pypi/<name>"."""
+    table = releases
+    for part in key.split("/", 1):
+        table = table.get(part, {})
+    commit = table.get(version)
+    return commit if isinstance(commit, str) else None
+
+
+def add_releases(releases: dict, entries: list[tuple[str, str]], commit: str) -> dict:
+    """A recorded version keeps its first commit: re-running a release does not rewrite history."""
+    result = copy.deepcopy(releases)
+    for key, version in entries:
+        table = result
+        for part in key.split("/", 1):
+            table = table.setdefault(part, {})
+        table.setdefault(version, commit)
+    return result
+
+
+def render_releases(releases: dict) -> str:
+    def toml_key(key: str) -> str:
+        return key if TOML_BARE_KEY.match(key) else json.dumps(key)
+
+    sections: list[str] = []
+
+    # in the order of recording: entries are only added, so that order is chronological
+    def walk(path: list[str], table: dict) -> None:
+        values = [(k, v) for k, v in table.items() if isinstance(v, str)]
+        if values:
+            lines = [f"[{'.'.join(toml_key(part) for part in path)}]"]
+            lines += [f"{toml_key(version)} = {json.dumps(commit)}" for version, commit in values]
+            sections.append("\n".join(lines) + "\n")
+        for name, child in table.items():
+            if isinstance(child, dict):
+                walk([*path, name], child)
+
+    walk([], releases)
+    return "\n".join(sections)
+
+
+# Repository and registry access
+
+
+def git(*args: str) -> str:
+    return subprocess.run(["git", *args], cwd=ROOT, check=True, capture_output=True, text=True).stdout.strip()
+
+
+def read_text(file: str) -> str:
+    return (ROOT / file).read_text()
+
+
+def read_field(file: str, pattern: str) -> str:
+    found = re.search(pattern, read_text(file), re.M)
+    if not found:
+        raise ValueError(f"no match for {pattern} in {file}")
+    return found[1]
+
+
+def read_json(file: str) -> dict:
+    return json.loads(read_text(file))
+
+
+def write_json(file: str, value: dict) -> None:
+    (ROOT / file).write_text(json.dumps(value, indent=2, ensure_ascii=False) + "\n")
+
+
+def current_addon_tag() -> str:
+    files = {
+        path.relative_to(ROOT).as_posix(): path.read_bytes()
+        for source in ADDON_SOURCES
+        for path in ([ROOT / source] if (ROOT / source).is_file() else sorted((ROOT / source).rglob("*")))
+        if path.is_file()
+    }
+    return addon_tag(files, read_json(f"{NODEJS_DIR}/package.json")["devDependencies"]["node-addon-api"])
+
+
+def changed_since(base: str, sources: list[str]) -> bool:
+    diff = subprocess.run(["git", "diff", "--quiet", base, "HEAD", "--", *sources], cwd=ROOT)
+    return diff.returncode != 0
+
+
+def changes(base: str) -> None:
+    print(f"core={'true' if changed_since(base, CORE_SOURCES) else ''}")
+    print(f"addon={'true' if changed_since(base, ADDON_SOURCES) else ''}")
+
+
+def print_build_plan(args: argparse.Namespace) -> None:
+    pull_request = args.event == "pull_request" and not args.libs_artifact
+    result = build_plan(
+        args.event,
+        release_missing=args.release_missing,
+        libs_artifact=args.libs_artifact,
+        libs_release=args.libs_release,
+        core_changed=pull_request and changed_since(args.base, CORE_SOURCES),
+        addon_changed=pull_request and changed_since(args.base, ADDON_SOURCES),
+    )
+    print(f"platforms={build_matrix(result.platforms)}")
+    print(f"test={'true' if result.test else ''}")
+
+
+def package_state(
+    key: str,
+    version: str,
+    directory: str,
+    version_file: str,
+    version_pattern: str,
+    releases: dict,
+    registry_published: Callable[[], bool],
+) -> Package:
+    """A recorded version is published from its recorded commit; the registry is asked about other versions,
+    which are compared with the commit that set them."""
+    recorded = recorded_commit(releases, key, version)
+    base = (
+        recorded
+        if recorded and commit_exists(recorded)
+        else git("log", "-1", "--format=%H", "-G", version_pattern, "--", version_file)
+    )
+    changed = changed_since(base, [directory, f":!{directory}/tests"])
+    return Package(version, changed, recorded is not None or registry_published())
+
+
+def http_json(url: str, headers: dict[str, str] | None = None, method: str = "GET", body: dict | None = None) -> Any:
+    """The JSON response, or None for 404."""
+    request = urllib.request.Request(
+        url,
+        headers={"User-Agent": "simplex-chat-release", **(headers or {})},
+        method=method,
+        data=json.dumps(body).encode() if body is not None else None,
+    )
+    try:
+        with urllib.request.urlopen(request, timeout=60) as response:
+            return json.load(response)
+    except urllib.error.HTTPError as e:
+        if e.code == 404:
+            return None
+        raise
+
+
+# Workflows pass unset repository variables as empty strings.
+def npm_published(name: str, version: str) -> bool:
+    registry = os.environ.get("NPM_REGISTRY") or "https://registry.npmjs.org"
+    package = registry_name(name, os.environ.get("NPM_SCOPE")).replace("/", "%2F")
+    return http_json(f"{registry}/{package}/{version}") is not None
+
+
+def python_project() -> str:
+    return read_field(f"{PYTHON_DIR}/pyproject.toml", r'^name = "([^"]+)"')
+
+
+def pypi_published(version: str) -> bool:
+    index = os.environ.get("PYPI_URL") or "https://pypi.org"
+    project = os.environ.get("PYPI_PROJECT") or python_project()
+    return http_json(f"{index}/pypi/{project}/{version}/json") is not None
+
+
+def libs_api(path: str, method: str = "GET", body: dict | None = None) -> Any:
+    """GitHub API of the simplex-chat-libs repository."""
+    repo = os.environ.get("LIBS_REPOSITORY") or "simplex-chat/simplex-chat-libs"
+    headers = {"Accept": "application/vnd.github+json"}
+    if token := os.environ.get("GH_TOKEN"):
+        headers["Authorization"] = f"Bearer {token}"
+    return http_json(f"https://api.github.com/repos/{repo}/{path}", headers, method, body)
+
+
+def github_release(tag: str) -> dict | None:
+    return libs_api(f"releases/tags/{tag}")
+
+
+def read_releases() -> tuple[dict, str | None]:
+    """The releases and the blob of the file, which a change must name."""
+    file = libs_api(f"contents/{RELEASES_FILE}")
+    if file is None:
+        return {}, None
+    return tomllib.loads(base64.b64decode(file["content"]).decode()), file["sha"]
+
+
+def record_releases(entries: list[tuple[str, str]], commit: str) -> str:
+    """Adds the entries in one commit of simplex-chat-libs and returns that commit."""
+    message = ", ".join(f"{key} {version}" for key, version in entries)
+    attempt = 1
+    while True:
+        releases, blob = read_releases()
+        updated = add_releases(releases, entries, commit)
+        if blob and updated == releases:
+            return libs_api(f"commits?path={RELEASES_FILE}&per_page=1")[0]["sha"]
+        body = {
+            "message": message,
+            "content": base64.b64encode(render_releases(updated).encode()).decode(),
+            "committer": {"name": "SimpleX Chat", "email": "build@simplex.chat"},
+            **({"sha": blob} if blob else {}),
+        }
+        try:
+            return libs_api(f"contents/{RELEASES_FILE}", "PUT", body)["commit"]["sha"]
+        except urllib.error.HTTPError as e:
+            # 409 and 422: another writer changed or created the file since it was read
+            if e.code not in (409, 422) or attempt == RECORD_ATTEMPTS:
+                raise
+            attempt += 1
+
+
+def commit_exists(commit: str) -> bool:
+    found = subprocess.run(["git", "cat-file", "-e", f"{commit}^{{commit}}"], cwd=ROOT, capture_output=True)
+    return found.returncode == 0
+
+
+def npm_key(directory: str) -> str:
+    return f"npm/{read_json(f'{directory}/package.json')['name']}"
+
+
+def pypi_key() -> str:
+    return f"pypi/{python_project()}"
+
+
+def npm_package(directory: str, releases: dict) -> Package:
+    package = read_json(f"{directory}/package.json")
+    name, version = package["name"], package["version"]
+    return package_state(
+        npm_key(directory),
+        version,
+        directory,
+        f"{directory}/package.json",
+        '"version":',
+        releases,
+        lambda: npm_published(name, version),
+    )
+
+
+def prepare(args: argparse.Namespace) -> None:
+    cabal_version = read_field("simplex-chat.cabal", r"^version:\s*(\S+)")
+    libs_tag = f"core-{cabal_version}"
+    addon = current_addon_tag()
+    python_version, python_pins = parse_python_version(read_text(PYTHON_VERSION_FILE))
+    releases, _ = read_releases()
+    result = plan(
+        State(
+            libs_tag=libs_tag,
+            libs_digests=release_digests(github_release(libs_tag), LIBS_ASSETS),
+            addon_tag=addon,
+            addon_digests=release_digests(github_release(addon), ADDON_ASSETS),
+            nodejs_pins=parse_release(read_text(RELEASE_FILE)),
+            python_pins=python_pins,
+            types=npm_package(TYPES_DIR, releases),
+            nodejs=npm_package(NODEJS_DIR, releases),
+            python=package_state(
+                pypi_key(),
+                python_version,
+                PYTHON_DIR,
+                PYTHON_VERSION_FILE,
+                "^__version__ =",
+                releases,
+                lambda: pypi_published(python_version),
+            ),
+            types_version=args.types_version,
+            nodejs_version=args.nodejs_version,
+            python_version=args.python_version,
+        )
+    )
+    (ROOT / RELEASE_FILE).write_text(render_release(result.nodejs_pins))
+    (ROOT / PYTHON_VERSION_FILE).write_text(render_python_version(result.python_version, result.python_pins))
+    types = read_json(f"{TYPES_DIR}/package.json")
+    write_json(f"{TYPES_DIR}/package.json", {**types, "version": result.types_version})
+    nodejs = read_json(f"{NODEJS_DIR}/package.json")
+    dependencies = nodejs["dependencies"]
+    if result.types_dependency:
+        dependencies = {**dependencies, "@simplex-chat/types": result.types_dependency}
+    write_json(f"{NODEJS_DIR}/package.json", {**nodejs, "version": result.nodejs_version, "dependencies": dependencies})
+    summary = result.title + "\n\n" + "".join(f"- {note}\n" for note in result.notes)
+    if args.summary:
+        Path(args.summary).write_text(summary)
+    print(summary, end="")
+
+
+def publish_plan() -> None:
+    """A recorded version is published: npm and PyPI list a new version minutes after it is published."""
+    releases, _ = read_releases()
+    for key, directory in [("types", TYPES_DIR), ("nodejs", NODEJS_DIR)]:
+        package = read_json(f"{directory}/package.json")
+        published = recorded_commit(releases, npm_key(directory), package["version"]) or npm_published(
+            package["name"], package["version"]
+        )
+        print(f"{key}_version={'' if published else package['version']}")
+        print(f"{key}_dist_tag={dist_tag(package['version'])}")
+    version, _ = parse_python_version(read_text(PYTHON_VERSION_FILE))
+    published = recorded_commit(releases, pypi_key(), version) or pypi_published(version)
+    print(f"python_version={'' if published else version}")
+
+
+def record(args: argparse.Namespace) -> None:
+    versions = [
+        ("core", args.core),
+        (npm_key(TYPES_DIR), args.types),
+        (npm_key(NODEJS_DIR), args.nodejs),
+        (pypi_key(), args.python),
+    ]
+    entries = [(key, version) for key, version in versions if version]
+    if not entries:
+        sys.exit("nothing to record")
+    print(record_releases(entries, args.commit))
+
+
+def test_names() -> None:
+    if scope := os.environ.get("NPM_SCOPE"):
+        # npm provenance requires the repository of the publishing workflow.
+        url = f"git+https://github.com/{os.environ['GITHUB_REPOSITORY']}.git"
+        types = read_json(f"{TYPES_DIR}/package.json")
+        write_json(
+            f"{TYPES_DIR}/package.json",
+            {**types, "name": registry_name(types["name"], scope), "repository": {**types["repository"], "url": url}},
+        )
+        nodejs = read_json(f"{NODEJS_DIR}/package.json")
+        alias = f"npm:{registry_name(types['name'], scope)}@{nodejs['dependencies'][types['name']]}"
+        write_json(
+            f"{NODEJS_DIR}/package.json",
+            {
+                **nodejs,
+                "name": registry_name(nodejs["name"], scope),
+                "repository": {**nodejs["repository"], "url": url},
+                "dependencies": {**nodejs["dependencies"], types["name"]: alias},
+            },
+        )
+    if project := os.environ.get("PYPI_PROJECT"):
+        pyproject = ROOT / PYTHON_DIR / "pyproject.toml"
+        pyproject.write_text(
+            re.sub(r'^name = "[^"]+"', f'name = "{project}"', pyproject.read_text(), count=1, flags=re.M)
+        )
+
+
+def github_bool(value: str) -> bool:
+    """GitHub expressions pass booleans to the shell as "true", "false" or ""."""
+    return value == "true"
+
+
+def main(argv: list[str]) -> None:
+    parser = argparse.ArgumentParser(description=__doc__, formatter_class=argparse.RawDescriptionHelpFormatter)
+    commands = parser.add_subparsers(dest="command", required=True)
+    commands.add_parser("addon-tag")
+    changes_parser = commands.add_parser("changes")
+    changes_parser.add_argument("base", help="the commit to compare with")
+    build_parser = commands.add_parser("build-plan")
+    build_parser.add_argument("--event", required=True, help="github.event_name")
+    build_parser.add_argument("--base", default="", help="the base commit of a pull request")
+    build_parser.add_argument("--release-missing", type=github_bool, default=False)
+    build_parser.add_argument("--libs-artifact", type=github_bool, default=False)
+    build_parser.add_argument("--libs-release", default="")
+    prepare_parser = commands.add_parser("prepare")
+    for package in ["nodejs", "types", "python"]:
+        prepare_parser.add_argument(f"--{package}-version", help="this version instead of a bump when needed")
+    prepare_parser.add_argument("--summary", help="file for the PR title and body")
+    commands.add_parser("publish-plan")
+    record_parser = commands.add_parser("record")
+    record_parser.add_argument("--commit", required=True, help="the simplex-chat commit released or published from")
+    for name in ["core", "types", "nodejs", "python"]:
+        record_parser.add_argument(f"--{name}", default="", help=f"{name} version, recorded when not empty")
+    commands.add_parser("test-names")
+    args = parser.parse_args(argv)
+    if args.command == "addon-tag":
+        print(current_addon_tag())
+    elif args.command == "changes":
+        changes(args.base)
+    elif args.command == "build-plan":
+        print_build_plan(args)
+    elif args.command == "prepare":
+        prepare(args)
+    elif args.command == "publish-plan":
+        publish_plan()
+    elif args.command == "record":
+        record(args)
+    else:
+        test_names()
+
+
+if __name__ == "__main__":
+    main(sys.argv[1:])
diff --git a/scripts/ci/test_packages_release.py b/scripts/ci/test_packages_release.py
new file mode 100644
index 0000000000..634260cabc
--- /dev/null
+++ b/scripts/ci/test_packages_release.py
@@ -0,0 +1,476 @@
+import base64
+import contextlib
+import email.message
+import io
+import subprocess
+import tomllib
+import urllib.error
+import tempfile
+import unittest
+from dataclasses import replace
+from pathlib import Path
+from unittest import mock
+
+import packages_release
+from packages_release import (
+    ADDON_ASSETS,
+    NODEJS_DIR,
+    PYTHON_VERSION_FILE,
+    TYPES_DIR,
+    ADDON_PLATFORMS,
+    BuildPlan,
+    LIBS_ASSETS,
+    Package,
+    Pins,
+    State,
+    addon_tag,
+    build_matrix,
+    build_plan,
+    bump_npm_version,
+    bump_python_version,
+    changed_since,
+    add_releases,
+    package_state,
+    publish_plan,
+    record_releases,
+    recorded_commit,
+    render_releases,
+    dist_tag,
+    npm_published,
+    parse_python_version,
+    parse_release,
+    plan,
+    pypi_published,
+    registry_name,
+    release_digests,
+    render_python_version,
+    render_release,
+)
+
+
+def sha(n: int) -> str:
+    return f"{n:x}" * 64
+
+
+def digests(assets: list[str], n: int) -> dict[str, str]:
+    return {asset: sha(n) for asset in assets}
+
+
+def github_release(assets: list[str], n: int) -> dict:
+    return {"assets": [{"name": name, "digest": f"sha256:{sha(n)}"} for name in assets]}
+
+
+def state(**overrides) -> State:
+    current = State(
+        libs_tag="core-1.0.0.1",
+        libs_digests=digests(LIBS_ASSETS, 1),
+        addon_tag="nodejs-addon-aaa",
+        addon_digests=digests(ADDON_ASSETS, 2),
+        nodejs_pins=Pins("core-1.0.0.1", {**digests(LIBS_ASSETS, 1), **digests(ADDON_ASSETS, 2)}, "nodejs-addon-aaa"),
+        python_pins=Pins("core-1.0.0.1", digests(LIBS_ASSETS, 1)),
+        types=Package("0.12.1", changed=False, published=True),
+        nodejs=Package("7.1.0-beta.6.1", changed=False, published=True),
+        python=Package("7.1.0b6", changed=False, published=True),
+    )
+    return replace(current, **overrides)
+
+
+NEW_LIBS = {"libs_tag": "core-1.0.0.2", "libs_digests": digests(LIBS_ASSETS, 3)}
+NEW_ADDON = {"addon_tag": "nodejs-addon-bbb", "addon_digests": digests(ADDON_ASSETS, 4)}
+
+
+class VersionTest(unittest.TestCase):
+    def test_npm_bump_adds_a_package_release_to_an_app_version(self):
+        self.assertEqual(bump_npm_version("7.1.0-beta.6"), "7.1.0-beta.6.1")
+        self.assertEqual(bump_npm_version("7.1.0-beta.6.1"), "7.1.0-beta.6.2")
+        self.assertEqual(bump_npm_version("0.12.9"), "0.12.10")
+        self.assertEqual(bump_npm_version("7.0.2"), "7.0.3")
+
+    def test_python_bump_uses_post_releases(self):
+        self.assertEqual(bump_python_version("7.1.0b6"), "7.1.0b6.post1")
+        self.assertEqual(bump_python_version("7.1.0b6.post9"), "7.1.0b6.post10")
+        self.assertEqual(bump_python_version("7.0.2"), "7.0.2.post1")
+
+    def test_prereleases_publish_as_beta(self):
+        self.assertEqual(dist_tag("7.1.0-beta.6.2"), "beta")
+        self.assertEqual(dist_tag("7.1.0"), "latest")
+
+    def test_test_scope_renames_npm_packages(self):
+        self.assertEqual(registry_name("@simplex-chat/types", "@test"), "@test/types")
+        self.assertEqual(registry_name("simplex-chat", "@test"), "@test/simplex-chat")
+        self.assertEqual(registry_name("simplex-chat", None), "simplex-chat")
+
+
+class AddonTagTest(unittest.TestCase):
+    def test_depends_on_sources_and_node_addon_api(self):
+        files = {"a.cc": b"1", "b.h": b"2"}
+        tag = addon_tag(files, "^8.5.0")
+        self.assertRegex(tag, r"^nodejs-addon-[0-9a-f]{12}$")
+        self.assertEqual(addon_tag(dict(reversed(files.items())), "^8.5.0"), tag)
+        self.assertNotEqual(addon_tag({**files, "b.h": b"3"}, "^8.5.0"), tag)
+        self.assertNotEqual(addon_tag({"a.cc": b"1", "c.h": b"2"}, "^8.5.0"), tag)
+        self.assertNotEqual(addon_tag(files, "^8.6.0"), tag)
+
+
+class PinFilesTest(unittest.TestCase):
+    def test_release_ts_round_trip(self):
+        pins = Pins("core-1.0.0.1", {"b.zip": sha(2), "a.zip": sha(1)}, "nodejs-addon-aaa")
+        self.assertEqual(parse_release(render_release(pins)), pins)
+        self.assertIsNone(parse_release(render_release(replace(pins, addon_release=None))).addon_release)
+
+    def test_python_version_round_trip(self):
+        pins = Pins("core-1.0.0.1", {"b.zip": sha(2), "a.zip": sha(1)})
+        self.assertEqual(parse_python_version(render_python_version("7.1.0b6.post1", pins)), ("7.1.0b6.post1", pins))
+
+
+class ReleaseDigestsTest(unittest.TestCase):
+    def test_requires_every_asset_with_a_digest(self):
+        self.assertEqual(release_digests(github_release(LIBS_ASSETS, 3), LIBS_ASSETS), digests(LIBS_ASSETS, 3))
+        self.assertIsNone(release_digests(github_release(LIBS_ASSETS[1:], 3), LIBS_ASSETS))
+        self.assertIsNone(release_digests(None, LIBS_ASSETS))
+        no_digests = {"assets": [{"name": name, "digest": None} for name in LIBS_ASSETS]}
+        self.assertIsNone(release_digests(no_digests, LIBS_ASSETS))
+
+
+class PlanTest(unittest.TestCase):
+    def test_nothing_changes_when_current(self):
+        result = plan(state())
+        self.assertEqual((result.nodejs_changed, result.python_changed, result.types_bumped), (False, False, False))
+        self.assertEqual(result.notes, [])
+
+    def test_new_libs_release_updates_both_libraries(self):
+        result = plan(state(**NEW_LIBS))
+        self.assertEqual(result.nodejs_pins.libs_release, "core-1.0.0.2")
+        self.assertEqual(result.python_pins.libs_release, "core-1.0.0.2")
+        self.assertEqual(result.nodejs_pins.sha256[LIBS_ASSETS[0]], sha(3))
+        self.assertEqual(result.nodejs_pins.sha256[ADDON_ASSETS[0]], sha(2))
+        self.assertEqual(result.python_pins.sha256[LIBS_ASSETS[0]], sha(3))
+        self.assertEqual(result.title, "packages: release nodejs 7.1.0-beta.6.2, python 7.1.0b6.post1")
+
+    def test_new_addon_release_updates_nodejs_only(self):
+        result = plan(state(**NEW_ADDON))
+        self.assertEqual(result.nodejs_pins.addon_release, "nodejs-addon-bbb")
+        self.assertEqual(result.nodejs_pins.sha256[ADDON_ASSETS[0]], sha(4))
+        self.assertEqual(result.title, "packages: release nodejs 7.1.0-beta.6.2")
+
+    def test_incomplete_release_keeps_the_pins(self):
+        result = plan(state(addon_tag="nodejs-addon-bbb", addon_digests=None))
+        self.assertEqual(result.nodejs_pins.addon_release, "nodejs-addon-aaa")
+        self.assertFalse(result.nodejs_changed)
+        self.assertEqual(
+            result.notes,
+            ["Node.js add-on release nodejs-addon-bbb is missing or incomplete; nodejs-addon-aaa stays pinned"],
+        )
+
+    def test_source_changes_bump_their_package(self):
+        self.assertEqual(
+            plan(state(nodejs=Package("7.1.0-beta.6.1", True, True))).title, "packages: release nodejs 7.1.0-beta.6.2"
+        )
+        self.assertEqual(
+            plan(state(python=Package("7.1.0b6", True, True))).title, "packages: release python 7.1.0b6.post1"
+        )
+
+    def test_types_bump_updates_the_nodejs_dependency(self):
+        result = plan(state(types=Package("0.12.1", True, True)))
+        self.assertEqual(result.types_dependency, "^0.12.2")
+        self.assertEqual(result.title, "packages: release types 0.12.2, nodejs 7.1.0-beta.6.2")
+
+    def test_all_changes_combine_into_one_release(self):
+        result = plan(
+            state(
+                **NEW_LIBS,
+                **NEW_ADDON,
+                types=Package("0.12.1", True, True),
+                nodejs=Package("7.1.0-beta.6.1", True, True),
+                python=Package("7.1.0b6", True, True),
+            )
+        )
+        self.assertEqual(
+            (result.nodejs_pins.libs_release, result.nodejs_pins.addon_release), ("core-1.0.0.2", "nodejs-addon-bbb")
+        )
+        self.assertEqual(result.title, "packages: release types 0.12.2, nodejs 7.1.0-beta.6.2, python 7.1.0b6.post1")
+
+    def test_unpublished_versions_are_not_bumped_again(self):
+        result = plan(
+            state(
+                **NEW_LIBS, nodejs=Package("7.1.0-beta.6.2", True, False), python=Package("7.1.0b6.post1", False, False)
+            )
+        )
+        self.assertEqual(result.title, "packages: release nodejs 7.1.0-beta.6.2, python 7.1.0b6.post1")
+
+    def test_requested_versions_win(self):
+        result = plan(state(nodejs_version="7.2.0", types_version="0.13.0", python_version="7.2.0"))
+        self.assertEqual(result.types_dependency, "^0.13.0")
+        self.assertEqual(result.title, "packages: release types 0.13.0, nodejs 7.2.0, python 7.2.0")
+
+
+class BuildPlanTest(unittest.TestCase):
+    def plan(self, event="push", release_missing=False, libs_artifact=False, libs_release="", core=False, addon=False):
+        return build_plan(event, release_missing, libs_artifact, libs_release, core, addon)
+
+    def test_push_builds_a_missing_addon_release_and_tests_it(self):
+        self.assertEqual(self.plan(release_missing=True), BuildPlan(ADDON_PLATFORMS, test=True))
+        self.assertEqual(self.plan(), BuildPlan([], test=True))
+
+    def test_pull_request_tests_with_the_pinned_libs(self):
+        self.assertEqual(self.plan("pull_request"), BuildPlan(ADDON_PLATFORMS, test=True))
+        self.assertEqual(self.plan("pull_request", addon=True), BuildPlan(ADDON_PLATFORMS, test=True))
+
+    def test_core_change_leaves_tests_to_build_yml(self):
+        self.assertEqual(self.plan("pull_request", core=True), BuildPlan([], test=False))
+        self.assertEqual(self.plan("pull_request", core=True, addon=True), BuildPlan(ADDON_PLATFORMS, test=False))
+
+    def test_libsimplex_of_the_pull_request_is_tested_on_its_platform(self):
+        self.assertEqual(
+            self.plan("pull_request", libs_artifact=True, core=True), BuildPlan(["linux-x86_64"], test=True)
+        )
+
+    def test_new_library_release_is_tested_on_every_platform(self):
+        self.assertEqual(self.plan(libs_release="core-1.0.0.2"), BuildPlan(ADDON_PLATFORMS, test=True))
+
+    def test_matrix_names_the_runner_of_each_platform(self):
+        self.assertEqual(
+            build_matrix(["linux-x86_64", "windows-x86_64"]),
+            '[{"platform": "linux-x86_64", "os": "ubuntu-22.04"}, {"platform": "windows-x86_64", "os": "windows-latest"}]',
+        )
+
+
+class RegistryUrlTest(unittest.TestCase):
+    def urls(self, env: dict[str, str]) -> list[str]:
+        with (
+            mock.patch.dict("os.environ", env),
+            mock.patch.object(packages_release, "http_json", return_value={}) as get,
+        ):
+            npm_published("simplex-chat", "1.0.0")
+            pypi_published("1.0.0")
+            packages_release.github_release("core-1.0.0.1")
+        return [call.args[0] for call in get.call_args_list]
+
+    def test_empty_variables_use_the_public_registries(self):
+        self.assertEqual(
+            self.urls({"NPM_REGISTRY": "", "NPM_SCOPE": "", "PYPI_URL": "", "PYPI_PROJECT": "", "LIBS_REPOSITORY": ""}),
+            [
+                "https://registry.npmjs.org/simplex-chat/1.0.0",
+                "https://pypi.org/pypi/simplex-chat/1.0.0/json",
+                "https://api.github.com/repos/simplex-chat/simplex-chat-libs/releases/tags/core-1.0.0.1",
+            ],
+        )
+
+    def test_variables_select_test_registries(self):
+        self.assertEqual(
+            self.urls(
+                {
+                    "NPM_SCOPE": "@test",
+                    "PYPI_URL": "https://test.pypi.org",
+                    "PYPI_PROJECT": "sx-test",
+                    "LIBS_REPOSITORY": "a/b-libs",
+                }
+            ),
+            [
+                "https://registry.npmjs.org/@test%2Fsimplex-chat/1.0.0",
+                "https://test.pypi.org/pypi/sx-test/1.0.0/json",
+                "https://api.github.com/repos/a/b-libs/releases/tags/core-1.0.0.1",
+            ],
+        )
+
+
+class ReleasesFileTest(unittest.TestCase):
+    RELEASES = {
+        "core": {"7.1.0.11": "c1"},
+        "npm": {"simplex-chat": {"7.1.0-beta.6.3": "n1"}, "@simplex-chat/types": {"0.12.2": "t1"}},
+        "pypi": {"simplex-chat": {"7.1.0b6": "p1"}},
+    }
+
+    def test_renders_toml_that_reads_back(self):
+        text = render_releases(self.RELEASES)
+        self.assertEqual(tomllib.loads(text), self.RELEASES)
+        self.assertIn('[core]\n"7.1.0.11" = "c1"\n', text)
+        self.assertIn('[npm."@simplex-chat/types"]\n', text)
+        self.assertIn("[npm.simplex-chat]\n", text)
+
+    def test_keeps_the_order_of_recording(self):
+        releases = {"npm": {"simplex-chat": {"7.1.0-beta.6.9": "a"}}}
+        updated = add_releases(releases, [("npm/simplex-chat", "7.1.0-beta.6.10"), ("core", "7.1.0.15")], "b")
+        self.assertEqual(
+            render_releases(updated),
+            '[npm.simplex-chat]\n"7.1.0-beta.6.9" = "a"\n"7.1.0-beta.6.10" = "b"\n\n[core]\n"7.1.0.15" = "b"\n',
+        )
+
+    def test_finds_the_recorded_commit(self):
+        self.assertEqual(recorded_commit(self.RELEASES, "npm/@simplex-chat/types", "0.12.2"), "t1")
+        self.assertEqual(recorded_commit(self.RELEASES, "core", "7.1.0.11"), "c1")
+        self.assertIsNone(recorded_commit(self.RELEASES, "npm/simplex-chat", "7.1.0-beta.6.4"))
+        self.assertIsNone(recorded_commit({}, "pypi/simplex-chat", "7.1.0b6"))
+
+    def test_adds_entries_and_keeps_recorded_commits(self):
+        updated = add_releases(self.RELEASES, [("npm/simplex-chat", "7.1.0-beta.6.4"), ("core", "7.1.0.11")], "x")
+        self.assertEqual(updated["npm"]["simplex-chat"], {"7.1.0-beta.6.3": "n1", "7.1.0-beta.6.4": "x"})
+        self.assertEqual(updated["core"], {"7.1.0.11": "c1"})
+        self.assertEqual(self.RELEASES["npm"]["simplex-chat"], {"7.1.0-beta.6.3": "n1"})
+
+
+class RecordReleasesTest(unittest.TestCase):
+    def file(self, releases, blob):
+        return {"content": base64.b64encode(render_releases(releases).encode()).decode(), "sha": blob}
+
+    def conflict(self):
+        error = urllib.error.HTTPError("url", 409, "Conflict", email.message.Message(), io.BytesIO())
+        self.addCleanup(error.close)
+        return error
+
+    def test_creates_the_file_and_returns_the_commit(self):
+        calls = []
+
+        def api(path, method="GET", body=None):
+            calls.append((path, method, body))
+            return None if method == "GET" else {"commit": {"sha": "libs1"}}
+
+        with mock.patch.object(packages_release, "libs_api", api):
+            self.assertEqual(record_releases([("core", "7.1.0.12")], "sx1"), "libs1")
+        _, method, body = calls[1]
+        self.assertEqual((method, body["message"], "sha" in body), ("PUT", "core 7.1.0.12", False))
+        self.assertEqual(tomllib.loads(base64.b64decode(body["content"]).decode()), {"core": {"7.1.0.12": "sx1"}})
+
+    def test_retries_when_another_writer_changed_the_file(self):
+        reads = iter([self.file({"core": {"1": "a"}}, "blob1"), self.file({"core": {"1": "a", "2": "b"}}, "blob2")])
+        puts = []
+
+        def api(path, method="GET", body=None):
+            if method == "GET":
+                return next(reads)
+            puts.append(body)
+            if len(puts) == 1:
+                raise self.conflict()
+            return {"commit": {"sha": "libs2"}}
+
+        with mock.patch.object(packages_release, "libs_api", api):
+            self.assertEqual(record_releases([("npm/simplex-chat", "3")], "sx3"), "libs2")
+        self.assertEqual([body["sha"] for body in puts], ["blob1", "blob2"])
+        self.assertEqual(
+            tomllib.loads(base64.b64decode(puts[1]["content"]).decode()),
+            {"core": {"1": "a", "2": "b"}, "npm": {"simplex-chat": {"3": "sx3"}}},
+        )
+
+    def test_recorded_entries_return_the_last_commit_of_the_file(self):
+        def api(path, method="GET", body=None):
+            self.assertEqual(method, "GET")
+            return [{"sha": "libs0"}] if path.startswith("commits") else self.file({"core": {"1": "a"}}, "blob1")
+
+        with mock.patch.object(packages_release, "libs_api", api):
+            self.assertEqual(record_releases([("core", "1")], "other"), "libs0")
+
+
+class PackageStateTest(unittest.TestCase):
+    def setUp(self):
+        self.repo = Path(tempfile.mkdtemp())
+        self.git("init", "-q")
+        self.write("pkg/version.txt", 'version = "1"\n')
+        self.write("pkg/src.txt", "a")
+        self.commit("set version")
+
+    def git(self, *args):
+        subprocess.run(["git", "-c", "user.name=t", "-c", "user.email=t@t", *args], cwd=self.repo, check=True)
+
+    def write(self, file, text):
+        (self.repo / file).parent.mkdir(parents=True, exist_ok=True)
+        (self.repo / file).write_text(text)
+
+    def commit(self, message):
+        self.git("add", "-A")
+        self.git("commit", "-q", "-m", message)
+
+    def state(self, releases=None, registry_published=False):
+        with mock.patch.object(packages_release, "ROOT", self.repo):
+            return package_state(
+                "npm/pkg", "1", "pkg", "pkg/version.txt", "^version =", releases or {}, lambda: registry_published
+            )
+
+    def changed(self):
+        return self.state().changed
+
+    def head(self):
+        return subprocess.run(
+            ["git", "rev-parse", "HEAD"], cwd=self.repo, capture_output=True, text=True
+        ).stdout.strip()
+
+    def test_recorded_version_is_published_and_compared_with_its_commit(self):
+        self.write("pkg/src.txt", "b")
+        self.commit("change published with version 1")
+        releases = {"npm": {"pkg": {"1": self.head()}}}
+        self.assertEqual(self.state(releases), Package("1", changed=False, published=True))
+        self.write("pkg/src.txt", "c")
+        self.commit("change after the publish")
+        self.assertEqual(self.state(releases), Package("1", changed=True, published=True))
+
+    def test_unrecorded_version_asks_the_registry(self):
+        self.assertFalse(self.state(registry_published=False).published)
+        self.assertTrue(self.state(registry_published=True).published)
+
+    def test_publish_plan_skips_recorded_versions_before_the_registries_list_them(self):
+        self.write(f"{TYPES_DIR}/package.json", '{"name": "@simplex-chat/types", "version": "0.1.0"}')
+        self.write(f"{NODEJS_DIR}/package.json", '{"name": "simplex-chat", "version": "1.0.0-beta.1.1"}')
+        self.write(PYTHON_VERSION_FILE, render_python_version("1.0.0b1.post1", Pins("core-1", {})))
+        self.write("pyproject.toml", "")
+        self.commit("packages")
+        releases = {"npm": {"simplex-chat": {"1.0.0-beta.1.1": "c"}}, "pypi": {"simplex-chat": {"1.0.0b1.post1": "c"}}}
+        output = io.StringIO()
+        with (
+            mock.patch.object(packages_release, "ROOT", self.repo),
+            mock.patch.object(packages_release, "read_releases", return_value=(releases, "blob")),
+            mock.patch.object(packages_release, "python_project", return_value="simplex-chat"),
+            mock.patch.object(packages_release, "npm_published", return_value=False),
+            mock.patch.object(packages_release, "pypi_published", return_value=False),
+            contextlib.redirect_stdout(output),
+        ):
+            publish_plan()
+        self.assertEqual(
+            output.getvalue().splitlines(),
+            [
+                "types_version=0.1.0",
+                "types_dist_tag=latest",
+                "nodejs_version=",
+                "nodejs_dist_tag=beta",
+                "python_version=",
+            ],
+        )
+
+    def test_unknown_recorded_commit_falls_back_to_the_version_commit(self):
+        self.write("pkg/src.txt", "b")
+        self.commit("change")
+        state = self.state({"npm": {"pkg": {"1": "0" * 40}}})
+        self.assertEqual(state, Package("1", changed=True, published=True))
+
+    def test_compares_with_the_commit_that_set_the_version(self):
+        self.assertFalse(self.changed())
+        self.write("pkg/src.txt", "b")
+        self.commit("change")
+        self.assertTrue(self.changed())
+
+    def test_new_version_resets_the_comparison(self):
+        self.write("pkg/src.txt", "b")
+        self.commit("change")
+        self.write("pkg/version.txt", 'version = "2"\n')
+        self.commit("set version 2")
+        self.assertFalse(self.changed())
+
+    def test_changed_since_looks_only_at_the_sources(self):
+        base = subprocess.run(
+            ["git", "rev-parse", "HEAD"], cwd=self.repo, capture_output=True, text=True
+        ).stdout.strip()
+        self.write("other/file.txt", "o")
+        self.commit("other change")
+        with mock.patch.object(packages_release, "ROOT", self.repo):
+            self.assertFalse(changed_since(base, ["pkg"]))
+            self.write("pkg/src.txt", "b")
+            self.commit("source change")
+            self.assertTrue(changed_since(base, ["pkg"]))
+
+    def test_ignores_tests_and_other_directories(self):
+        self.write("pkg/tests/t.txt", "t")
+        self.write("other/file.txt", "o")
+        self.commit("tests and other files")
+        self.assertFalse(self.changed())
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/scripts/desktop/generate-emoji-data.py b/scripts/desktop/generate-emoji-data.py
new file mode 100644
index 0000000000..47f18adeb0
--- /dev/null
+++ b/scripts/desktop/generate-emoji-data.py
@@ -0,0 +1,44 @@
+#!/usr/bin/env python3
+# Generates the desktop emoji picker data from Unicode emoji-test.txt.
+# Emoji version must not exceed the bundled NotoColorEmoji font (2.038 covers Emoji 15.0):
+#   curl -O https://unicode.org/Public/emoji/15.0/emoji-test.txt
+#   python3 scripts/desktop/generate-emoji-data.py emoji-test.txt apps/multiplatform/common/src/desktopMain/resources/emoji/emoji.txt
+# Output: "@<group>" lines followed by "<emoji>\t<name>" lines, in CLDR order.
+
+import sys
+
+SKIPPED_GROUPS = {"Component"}
+SKIN_TONE_MODIFIERS = {0x1F3FB, 0x1F3FC, 0x1F3FD, 0x1F3FE, 0x1F3FF}
+
+
+def parse(lines):
+    group = None
+    for line in lines:
+        line = line.rstrip("\n")
+        if line.startswith("# group: "):
+            group = line[len("# group: "):]
+            if group not in SKIPPED_GROUPS:
+                yield "@" + group
+        elif line and not line.startswith("#") and group not in SKIPPED_GROUPS:
+            codes, rest = line.split(";", 1)
+            status, comment = rest.split("#", 1)
+            if status.strip() != "fully-qualified":
+                continue
+            code_points = [int(c, 16) for c in codes.split()]
+            if SKIN_TONE_MODIFIERS.intersection(code_points):
+                continue
+            # comment is "<emoji> E<version> <name>"
+            name = comment.strip().split(" ", 2)[2]
+            yield "".join(map(chr, code_points)) + "\t" + name
+
+
+def main():
+    src, dst = sys.argv[1], sys.argv[2]
+    with open(src, encoding="utf-8") as f:
+        out = list(parse(f))
+    with open(dst, "w", encoding="utf-8", newline="\n") as f:
+        f.write("\n".join(out) + "\n")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/simplex-chat.cabal b/simplex-chat.cabal
index a313b9b62f..ded7e0aa80 100644
--- a/simplex-chat.cabal
+++ b/simplex-chat.cabal
@@ -170,6 +170,7 @@ library
           Simplex.Chat.Store.Postgres.Migrations.M20260923_preferences_json
           Simplex.Chat.Store.Postgres.Migrations.M20260925_badge_bindings
           Simplex.Chat.Store.Postgres.Migrations.M20261010_invite_member_via_group
+          Simplex.Chat.Store.Postgres.Migrations.M20261012_delivery_job_notification
   else
       exposed-modules:
           Simplex.Chat.Archive
@@ -349,6 +350,7 @@ library
           Simplex.Chat.Store.SQLite.Migrations.M20260923_preferences_json
           Simplex.Chat.Store.SQLite.Migrations.M20260925_badge_bindings
           Simplex.Chat.Store.SQLite.Migrations.M20261010_invite_member_via_group
+          Simplex.Chat.Store.SQLite.Migrations.M20261012_delivery_job_notification
   other-modules:
       Paths_simplex_chat
   hs-source-dirs:
diff --git a/src/Simplex/Chat/Controller.hs b/src/Simplex/Chat/Controller.hs
index 39f319d55b..fc4dcc5f6b 100644
--- a/src/Simplex/Chat/Controller.hs
+++ b/src/Simplex/Chat/Controller.hs
@@ -1047,6 +1047,7 @@ data ChatEvent
   | CEvtUnknownMemberCreated {user :: User, groupInfo :: GroupInfo, forwardedByMember :: GroupMember, member :: GroupMember}
   | CEvtUnknownMemberBlocked {user :: User, groupInfo :: GroupInfo, blockedByMember :: GroupMember, member :: GroupMember}
   | CEvtUnknownMemberAnnounced {user :: User, groupInfo :: GroupInfo, announcingMember :: GroupMember, unknownMember :: GroupMember, announcedMember :: GroupMember}
+  | CEvtDuplicateGroupMessage {user :: User, member :: GroupMember}
   | CEvtGroupDeleted {user :: User, groupInfo :: GroupInfo, member :: GroupMember, msgSigned :: Maybe MsgSigStatus}
   | CEvtGroupUpdated {user :: User, fromGroup :: GroupInfo, toGroup :: GroupInfo, member_ :: Maybe GroupMember, msgSigned :: Maybe MsgSigStatus} -- there is the same command response
   | CEvtAcceptingGroupJoinRequestMember {user :: User, groupInfo :: GroupInfo, member :: GroupMember}
diff --git a/src/Simplex/Chat/Delivery.hs b/src/Simplex/Chat/Delivery.hs
index a6ccc74247..a83c624274 100644
--- a/src/Simplex/Chat/Delivery.hs
+++ b/src/Simplex/Chat/Delivery.hs
@@ -163,6 +163,7 @@ data MessageDeliveryJob = MessageDeliveryJob
     jobScope :: DeliveryJobScope,
     senderGMIds :: [GroupMemberId],
     body :: ByteString,
+    notification :: Bool,
     cursorGMId_ :: Maybe GroupMemberId
   }
   deriving (Show)
diff --git a/src/Simplex/Chat/Library/Commands.hs b/src/Simplex/Chat/Library/Commands.hs
index dfccf16815..014dc8f6c2 100644
--- a/src/Simplex/Chat/Library/Commands.hs
+++ b/src/Simplex/Chat/Library/Commands.hs
@@ -3266,7 +3266,7 @@ processChatCommand cxt nm = \case
         withFastStore' $ \db -> do
           deleteGroupDeliveryTasks db gInfo
           deleteGroupDeliveryJobs db gInfo
-          createMsgDeliveryJob db gInfo (DJSGroup {jobSpec = DJRelayRemoved}) [] body
+          createMsgDeliveryJob db gInfo (DJSGroup {jobSpec = DJRelayRemoved}) [] (hasNotification XGrpLeave_) body
         lift . void $ getDeliveryJobWorker True (groupId, DWSGroup)
         pure msg
       leaveGroupSendMsg user g@(GIK gInfo _) = do
diff --git a/src/Simplex/Chat/Library/Internal.hs b/src/Simplex/Chat/Library/Internal.hs
index c9752c3a39..2bc6918c6b 100644
--- a/src/Simplex/Chat/Library/Internal.hs
+++ b/src/Simplex/Chat/Library/Internal.hs
@@ -2892,7 +2892,7 @@ sendFwdMemberMessage :: GroupMember -> GrpMsgForward -> VerifiedMsg 'Json -> CM
 sendFwdMemberMessage member fwd verifiedMsg =
   forM_ (readyMemberConn member) $ \(_, conn) -> do
     let body = encodeBinaryBatch [encodeFwdElement fwd verifiedMsg]
-    void $ withAgent $ \a -> sendMessages a [(aConnId conn, PQEncOff, MsgFlags False, VRValue Nothing body)]
+    void $ withAgent $ \a -> sendMessages a [(aConnId conn, PQEncOff, MsgFlags {notification = msgHasNotification verifiedMsg}, VRValue Nothing body)]
 
 -- TODO ensure order - pending messages interleave with user input messages
 sendPendingGroupMessages :: User -> GroupInfo -> GroupMember -> Connection -> CM ()
@@ -2929,11 +2929,13 @@ saveGroupRcvMsg user groupId authorMember conn@Connection {connId} agentMsgMeta
   msg <-
     withStore (\db -> createNewMessageAndRcvMsgDelivery db (GroupId groupId) newMsg sharedMsgId_ rcvMsgDelivery $ Just amGroupMemId)
       `catchAllErrors` \e -> case e of
-        ChatErrorStore (SEDuplicateGroupMessage _ _ _ (Just forwardedByGroupMemberId)) -> do
-          cxt <- chatStoreCxt
-          fm <- withStore $ \db -> getGroupMember db cxt user groupId forwardedByGroupMemberId
-          forM_ (memberConn fm) $ \fmConn ->
-            void $ sendDirectMemberMessage fmConn (XGrpMemCon amMemId) groupId
+        ChatErrorStore (SEDuplicateGroupMessage _ _ _ forwardedByGroupMemberId_) -> do
+          unlessM isMainApp $ toView $ CEvtDuplicateGroupMessage user am'
+          forM_ forwardedByGroupMemberId_ $ \forwardedByGroupMemberId -> do
+            cxt <- chatStoreCxt
+            fm <- withStore $ \db -> getGroupMember db cxt user groupId forwardedByGroupMemberId
+            forM_ (memberConn fm) $ \fmConn ->
+              void $ sendDirectMemberMessage fmConn (XGrpMemCon amMemId) groupId
           throwError e
         _ -> throwError e
   pure (am', conn', msg)
@@ -2947,20 +2949,25 @@ saveGroupFwdRcvMsg user gInfo@GroupInfo {groupId} forwardingMember refAuthorMemb
   -- TODO [relays] TBC highlighting difference between deduplicated messages (useRelays branch)
   withStore' (\db -> runExceptT $ createNewRcvMessage db (GroupId groupId) newMsg sharedMsgId_ refAuthorId fwdMemberId) >>= \case
     Right msg -> pure $ Just msg
-    Left e@SEDuplicateGroupMessage {authorGroupMemberId, forwardedByGroupMemberId}
-      | useRelays' gInfo -> pure Nothing -- with chat relays, duplicates are expected
-      | otherwise -> case (authorGroupMemberId, forwardedByGroupMemberId) of
-          (Just authorGMId, Nothing) -> do
-            cxt <- chatStoreCxt
-            am@GroupMember {memberId = amMemberId} <- withStore $ \db -> getGroupMember db cxt user groupId authorGMId
-            if maybe False (\ref -> sameMemberId (memberId' ref) am) refAuthorMember_
-              then forM_ (memberConn forwardingMember) $ \fmConn ->
-                void $ sendDirectMemberMessage fmConn (XGrpMemCon amMemberId) groupId
-              else toView $ CEvtMessageError user "error" "saveGroupFwdRcvMsg: referenced author member id doesn't match message member id"
-            throwError $ ChatErrorStore e
-          _ -> throwError $ ChatErrorStore e
+    Left e@SEDuplicateGroupMessage {authorGroupMemberId, forwardedByGroupMemberId} -> do
+      unlessM isMainApp $ toView $ CEvtDuplicateGroupMessage user forwardingMember
+      if
+        | useRelays' gInfo -> pure Nothing -- with chat relays, duplicates are expected
+        | otherwise -> case (authorGroupMemberId, forwardedByGroupMemberId) of
+            (Just authorGMId, Nothing) -> do
+              cxt <- chatStoreCxt
+              am@GroupMember {memberId = amMemberId} <- withStore $ \db -> getGroupMember db cxt user groupId authorGMId
+              if maybe False (\ref -> sameMemberId (memberId' ref) am) refAuthorMember_
+                then forM_ (memberConn forwardingMember) $ \fmConn ->
+                  void $ sendDirectMemberMessage fmConn (XGrpMemCon amMemberId) groupId
+                else toView $ CEvtMessageError user "error" "saveGroupFwdRcvMsg: referenced author member id doesn't match message member id"
+              throwError $ ChatErrorStore e
+            _ -> throwError $ ChatErrorStore e
     Left e -> throwError $ ChatErrorStore e
 
+isMainApp :: CM Bool
+isMainApp = (SMSubscribe ==) <$> chatReadVar subscriptionMode
+
 saveSndChatItem :: ChatTypeI c => User -> ChatDirection c 'MDSnd -> SndMessage -> CIContent 'MDSnd -> CM (ChatItem c 'MDSnd)
 saveSndChatItem user cd msg content = saveSndChatItem' user cd msg content Nothing Nothing Nothing Nothing False
 
diff --git a/src/Simplex/Chat/Library/Subscriber.hs b/src/Simplex/Chat/Library/Subscriber.hs
index 0912a263b0..d1a6cddb76 100644
--- a/src/Simplex/Chat/Library/Subscriber.hs
+++ b/src/Simplex/Chat/Library/Subscriber.hs
@@ -4233,8 +4233,9 @@ runDeliveryTaskWorker a deliveryKey Worker {doWork} = do
                   withWorkItems a doWork (withStore' $ \db -> getNextDeliveryTasks db gInfo task) $ \nextTasks -> do
                     let (body_, acceptedTasks, largeTasks) = batchDeliveryTasks1 (vr cxt) maxForwardBatchLength nextTasks
                         senderGMIds = S.toList . S.fromList $ map (\MessageDeliveryTask {senderGMId} -> senderGMId) acceptedTasks
+                        notification = any (\MessageDeliveryTask {verifiedMsg} -> msgHasNotification verifiedMsg) acceptedTasks
                     withStore' $ \db -> do
-                      forM_ body_ $ \body -> createMsgDeliveryJob db gInfo jobScope senderGMIds body
+                      forM_ body_ $ \body -> createMsgDeliveryJob db gInfo jobScope senderGMIds notification body
                       forM_ acceptedTasks $ \t -> updateDeliveryTaskStatus db (deliveryTaskId t) DTSProcessed
                       forM_ largeTasks $ \t -> setDeliveryTaskErrStatus db (deliveryTaskId t) "large"
                     when (isJust body_) . lift . void $ getDeliveryJobWorker True deliveryKey
@@ -4247,7 +4248,7 @@ runDeliveryTaskWorker a deliveryKey Worker {doWork} = do
                       fwd = GrpMsgForward {fwdSender, fwdBrokerTs}
                       body = encodeBinaryBatch [encodeFwdElement fwd verifiedMsg]
                   withStore' $ \db -> do
-                    createMsgDeliveryJob db gInfo jobScope [senderGMId] body
+                    createMsgDeliveryJob db gInfo jobScope [senderGMId] (msgHasNotification verifiedMsg) body
                     updateDeliveryTaskStatus db (deliveryTaskId task) DTSProcessed
                   lift . void $ getDeliveryJobWorker True deliveryKey
 
@@ -4328,7 +4329,7 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do
                   deleteGroupConnections user gInfo True
                   withStore' $ \db -> updateDeliveryJobStatus db jobId DJSComplete
           where
-            MessageDeliveryJob {jobId, jobScope, senderGMIds, body, cursorGMId_ = startingCursor} = job
+            MessageDeliveryJob {jobId, jobScope, senderGMIds, body, notification, cursorGMId_ = startingCursor} = job
             singleSenderGMId_ = case senderGMIds of
               [s] -> Just s
               _ -> Nothing
@@ -4407,16 +4408,16 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do
                               addRecipient acc r = case readyMemberConn r of
                                 Just (_, conn) -> snd $ foldl' (addPiece conn) (0 :: Int, acc) (recipientBodyPieces r)
                                 Nothing -> acc
-                              addPiece conn (k, (issued, reqs)) (bid, msgBody) =
+                              addPiece conn (k, (issued, reqs)) (bid, ntf, msgBody) =
                                 let vor
                                       | IS.member bid issued = VRRef bid
                                       | otherwise = VRValue (Just bid) msgBody
                                     issued' = IS.insert bid issued
                                     connId = if k == 0 then aConnId conn else B.empty
-                                 in (k + 1, (issued', (connId, PQEncOff, MsgFlags False, vor) : reqs))
+                                 in (k + 1, (issued', (connId, PQEncOff, MsgFlags {notification = ntf}, vor) : reqs))
                               recipientBodyPieces r =
-                                [(i, b) | (i, (b, ss)) <- overflowWithIds, any missing ss]
-                                  <> [if any missing inBodySenders then (1, extBody) else (0, body)]
+                                [(i, False, b) | (i, (b, ss)) <- overflowWithIds, any missing ss]
+                                  <> [if any missing inBodySenders then (1, notification, extBody) else (0, notification, body)]
                                 where
                                   missing s = case M.lookup (groupMemberId' s) senderVec of
                                     Just vec -> getRelation (indexInGroup r) vec == MRNew
@@ -4480,7 +4481,7 @@ runDeliveryJobWorker a deliveryKey Worker {doWork} = do
                         addReq conn (memIdx_, reqs) =
                           (subtract 1 <$> memIdx_, req : reqs)
                           where
-                            req = (aConnId conn, PQEncOff, MsgFlags False, vrValue_)
+                            req = (aConnId conn, PQEncOff, MsgFlags {notification}, vrValue_)
                             vrValue_ = case memIdx_ of
                               Nothing -> VRValue Nothing msgBody -- sending to one member, do not reference body
                               Just 1 -> VRValue (Just 1) msgBody
diff --git a/src/Simplex/Chat/Protocol.hs b/src/Simplex/Chat/Protocol.hs
index 8865d98263..1b04a990e3 100644
--- a/src/Simplex/Chat/Protocol.hs
+++ b/src/Simplex/Chat/Protocol.hs
@@ -1397,6 +1397,11 @@ hasNotification = \case
   XCallInv_ -> True
   _ -> False
 
+msgHasNotification :: VerifiedMsg e -> Bool
+msgHasNotification verifiedMsg = hasNotification $ toCMEventTag chatMsgEvent
+  where
+    ChatMessage {chatMsgEvent} = verifiedChatMsg verifiedMsg
+
 hasDeliveryReceipt :: CMEventTag e -> Bool
 hasDeliveryReceipt = \case
   XMsgNew_ -> True
diff --git a/src/Simplex/Chat/Store/Delivery.hs b/src/Simplex/Chat/Store/Delivery.hs
index c80264da7a..c8875baab2 100644
--- a/src/Simplex/Chat/Store/Delivery.hs
+++ b/src/Simplex/Chat/Store/Delivery.hs
@@ -248,8 +248,8 @@ deleteDoneDeliveryTasks db createdAtCutoff = do
     |]
     (createdAtCutoff, DTSProcessed, DTSError)
 
-createMsgDeliveryJob :: DB.Connection -> GroupInfo -> DeliveryJobScope -> [GroupMemberId] -> ByteString -> IO ()
-createMsgDeliveryJob db gInfo jobScope senderGMIds body = do
+createMsgDeliveryJob :: DB.Connection -> GroupInfo -> DeliveryJobScope -> [GroupMemberId] -> Bool -> ByteString -> IO ()
+createMsgDeliveryJob db gInfo jobScope senderGMIds notification body = do
   currentTs <- getCurrentTime
   DB.execute
     db
@@ -257,10 +257,10 @@ createMsgDeliveryJob db gInfo jobScope senderGMIds body = do
       INSERT INTO delivery_jobs (
         group_id,
         worker_scope, job_scope_spec_tag, job_scope_include_pending, job_scope_support_gm_id,
-        sender_group_member_ids, body, job_status, created_at, updated_at
-      ) VALUES (?,?,?,?,?,?,?,?,?,?)
+        sender_group_member_ids, body, notification, job_status, created_at, updated_at
+      ) VALUES (?,?,?,?,?,?,?,?,?,?,?)
     |]
-    ((Only groupId) :. jobScopeRow_ jobScope :. (senderColumn, Binary body, DJSPending, currentTs, currentTs))
+    ((Only groupId) :. jobScopeRow_ jobScope :. (senderColumn, Binary body, BI notification, DJSPending, currentTs, currentTs))
   where
     GroupInfo {groupId} = gInfo
     -- NULL ↔ []; non-empty list ↔ comma-separated decimal Int64s.
@@ -280,7 +280,7 @@ getPendingDeliveryJobScopes db =
     |]
     (Only DJSPending)
 
-type MessageDeliveryJobRow = (Only Int64) :. DeliveryJobScopeRow :. (Maybe Text, Binary ByteString, Maybe GroupMemberId)
+type MessageDeliveryJobRow = (Only Int64) :. DeliveryJobScopeRow :. (Maybe Text, Binary ByteString, BoolInt, Maybe GroupMemberId)
 
 getNextDeliveryJob :: DB.Connection -> DeliveryWorkerKey -> IO (Either StoreError (Maybe MessageDeliveryJob))
 getNextDeliveryJob db deliveryKey = do
@@ -310,14 +310,14 @@ getNextDeliveryJob db deliveryKey = do
             SELECT
               delivery_job_id,
               worker_scope, job_scope_spec_tag, job_scope_include_pending, job_scope_support_gm_id,
-              sender_group_member_ids, body, cursor_group_member_id
+              sender_group_member_ids, body, notification, cursor_group_member_id
             FROM delivery_jobs
             WHERE delivery_job_id = ?
           |]
           (Only jobId)
       where
         toDeliveryJob :: MessageDeliveryJobRow -> Either StoreError MessageDeliveryJob
-        toDeliveryJob ((Only jobId') :. jobScopeRow :. (senderGMIdsText_, Binary body, cursorGMId_)) = do
+        toDeliveryJob ((Only jobId') :. jobScopeRow :. (senderGMIdsText_, Binary body, BI notification, cursorGMId_)) = do
           jobScope <- maybe (Left $ SEInvalidDeliveryJob jobId') Right $ toJobScope_ jobScopeRow
           -- NULL or empty string means []; otherwise the value must parse
           -- as a comma-separated decimal Int64 list. An unparseable
@@ -325,7 +325,7 @@ getNextDeliveryJob db deliveryKey = do
           senderGMIds <- case senderGMIdsText_ of
             Nothing -> Right []
             Just t -> maybe (Left $ SEInvalidDeliveryJob jobId') Right $ parseSenderGMIds t
-          Right $ MessageDeliveryJob {jobId = jobId', jobScope, senderGMIds, body, cursorGMId_}
+          Right $ MessageDeliveryJob {jobId = jobId', jobScope, senderGMIds, body, notification, cursorGMId_}
         parseSenderGMIds :: Text -> Maybe [GroupMemberId]
         parseSenderGMIds t
           | T.null t = Just []
diff --git a/src/Simplex/Chat/Store/Postgres/Migrations.hs b/src/Simplex/Chat/Store/Postgres/Migrations.hs
index dc2de08739..7fceb20dfe 100644
--- a/src/Simplex/Chat/Store/Postgres/Migrations.hs
+++ b/src/Simplex/Chat/Store/Postgres/Migrations.hs
@@ -55,6 +55,7 @@ import Simplex.Chat.Store.Postgres.Migrations.M20260918_badge_issue_errors
 import Simplex.Chat.Store.Postgres.Migrations.M20260923_preferences_json
 import Simplex.Chat.Store.Postgres.Migrations.M20260925_badge_bindings
 import Simplex.Chat.Store.Postgres.Migrations.M20261010_invite_member_via_group
+import Simplex.Chat.Store.Postgres.Migrations.M20261012_delivery_job_notification
 import Simplex.Messaging.Agent.Store.Shared (Migration (..))
 
 schemaMigrations :: [(String, Text, Maybe Text)]
@@ -109,7 +110,8 @@ schemaMigrations =
     ("20260918_badge_issue_errors", m20260918_badge_issue_errors, Just down_m20260918_badge_issue_errors),
     ("20260923_preferences_json", m20260923_preferences_json, Just down_m20260923_preferences_json),
     ("20260925_badge_bindings", m20260925_badge_bindings, Just down_m20260925_badge_bindings),
-    ("20261010_invite_member_via_group", m20261010_invite_member_via_group, Just down_m20261010_invite_member_via_group)
+    ("20261010_invite_member_via_group", m20261010_invite_member_via_group, Just down_m20261010_invite_member_via_group),
+    ("20261012_delivery_job_notification", m20261012_delivery_job_notification, Just down_m20261012_delivery_job_notification)
   ]
 
 -- | The list of migrations in ascending order by date
diff --git a/src/Simplex/Chat/Store/Postgres/Migrations/M20261012_delivery_job_notification.hs b/src/Simplex/Chat/Store/Postgres/Migrations/M20261012_delivery_job_notification.hs
new file mode 100644
index 0000000000..b8e025f53e
--- /dev/null
+++ b/src/Simplex/Chat/Store/Postgres/Migrations/M20261012_delivery_job_notification.hs
@@ -0,0 +1,19 @@
+{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE QuasiQuotes #-}
+
+module Simplex.Chat.Store.Postgres.Migrations.M20261012_delivery_job_notification where
+
+import Data.Text (Text)
+import Text.RawString.QQ (r)
+
+m20261012_delivery_job_notification :: Text
+m20261012_delivery_job_notification =
+  [r|
+ALTER TABLE delivery_jobs ADD COLUMN notification SMALLINT NOT NULL DEFAULT 0;
+|]
+
+down_m20261012_delivery_job_notification :: Text
+down_m20261012_delivery_job_notification =
+  [r|
+ALTER TABLE delivery_jobs DROP COLUMN notification;
+|]
diff --git a/src/Simplex/Chat/Store/SQLite/Migrations.hs b/src/Simplex/Chat/Store/SQLite/Migrations.hs
index 3e6d6694c6..6ed3e81d1f 100644
--- a/src/Simplex/Chat/Store/SQLite/Migrations.hs
+++ b/src/Simplex/Chat/Store/SQLite/Migrations.hs
@@ -178,6 +178,7 @@ import Simplex.Chat.Store.SQLite.Migrations.M20260918_badge_issue_errors
 import Simplex.Chat.Store.SQLite.Migrations.M20260923_preferences_json
 import Simplex.Chat.Store.SQLite.Migrations.M20260925_badge_bindings
 import Simplex.Chat.Store.SQLite.Migrations.M20261010_invite_member_via_group
+import Simplex.Chat.Store.SQLite.Migrations.M20261012_delivery_job_notification
 import Simplex.Messaging.Agent.Store.Shared (Migration (..))
 
 schemaMigrations :: [(String, Query, Maybe Query)]
@@ -355,7 +356,8 @@ schemaMigrations =
     ("20260918_badge_issue_errors", m20260918_badge_issue_errors, Just down_m20260918_badge_issue_errors),
     ("20260923_preferences_json", m20260923_preferences_json, Just down_m20260923_preferences_json),
     ("20260925_badge_bindings", m20260925_badge_bindings, Just down_m20260925_badge_bindings),
-    ("20261010_invite_member_via_group", m20261010_invite_member_via_group, Just down_m20261010_invite_member_via_group)
+    ("20261010_invite_member_via_group", m20261010_invite_member_via_group, Just down_m20261010_invite_member_via_group),
+    ("20261012_delivery_job_notification", m20261012_delivery_job_notification, Just down_m20261012_delivery_job_notification)
   ]
 
 -- | The list of migrations in ascending order by date
diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/M20261012_delivery_job_notification.hs b/src/Simplex/Chat/Store/SQLite/Migrations/M20261012_delivery_job_notification.hs
new file mode 100644
index 0000000000..9a582823b5
--- /dev/null
+++ b/src/Simplex/Chat/Store/SQLite/Migrations/M20261012_delivery_job_notification.hs
@@ -0,0 +1,18 @@
+{-# LANGUAGE QuasiQuotes #-}
+
+module Simplex.Chat.Store.SQLite.Migrations.M20261012_delivery_job_notification where
+
+import Database.SQLite.Simple (Query)
+import Database.SQLite.Simple.QQ (sql)
+
+m20261012_delivery_job_notification :: Query
+m20261012_delivery_job_notification =
+  [sql|
+ALTER TABLE delivery_jobs ADD COLUMN notification INTEGER NOT NULL DEFAULT 0;
+|]
+
+down_m20261012_delivery_job_notification :: Query
+down_m20261012_delivery_job_notification =
+  [sql|
+ALTER TABLE delivery_jobs DROP COLUMN notification;
+|]
diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/agent_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/agent_query_plans.txt
index d12b3c98cf..dc8ad0f248 100644
--- a/src/Simplex/Chat/Store/SQLite/Migrations/agent_query_plans.txt
+++ b/src/Simplex/Chat/Store/SQLite/Migrations/agent_query_plans.txt
@@ -614,15 +614,6 @@ Query:
 Plan:
 SEARCH address_ratchet_keys USING INDEX idx_address_ratchet_keys (conn_id=? AND ratchet_key_id=?)
 
-Query: 
-        UPDATE rcv_messages
-        SET receive_attempts = receive_attempts + 1
-        WHERE conn_id = ? AND internal_id = ?
-        RETURNING receive_attempts
-      
-Plan:
-SEARCH rcv_messages USING COVERING INDEX idx_rcv_messages_conn_id_internal_id (conn_id=? AND internal_id=?)
-
 Query: 
       DELETE FROM address_ratchet_keys
       WHERE conn_id = ?
@@ -1431,6 +1422,10 @@ Query: SELECT last_insert_rowid()
 Plan:
 SCAN CONSTANT ROW
 
+Query: SELECT msg_flags FROM messages WHERE conn_id = ? AND internal_snd_id IS NOT NULL AND msg_type = ? ORDER BY internal_id DESC LIMIT ?
+Plan:
+SEARCH messages USING PRIMARY KEY (conn_id=?)
+
 Query: SELECT ratchet_state FROM ratchets WHERE conn_id = ?
 Plan:
 SEARCH ratchets USING PRIMARY KEY (conn_id=?)
diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt
index 433c2ec43f..64aea20620 100644
--- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt
+++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_query_plans.txt
@@ -774,7 +774,7 @@ Query:
             SELECT
               delivery_job_id,
               worker_scope, job_scope_spec_tag, job_scope_include_pending, job_scope_support_gm_id,
-              sender_group_member_ids, body, cursor_group_member_id
+              sender_group_member_ids, body, notification, cursor_group_member_id
             FROM delivery_jobs
             WHERE delivery_job_id = ?
           
@@ -5058,8 +5058,8 @@ Query:
       INSERT INTO delivery_jobs (
         group_id,
         worker_scope, job_scope_spec_tag, job_scope_include_pending, job_scope_support_gm_id,
-        sender_group_member_ids, body, job_status, created_at, updated_at
-      ) VALUES (?,?,?,?,?,?,?,?,?,?)
+        sender_group_member_ids, body, notification, job_status, created_at, updated_at
+      ) VALUES (?,?,?,?,?,?,?,?,?,?,?)
     
 Plan:
 
@@ -7838,6 +7838,10 @@ Query: SELECT note_folder_id FROM note_folders WHERE user_id = ? LIMIT 1
 Plan:
 SEARCH note_folders USING COVERING INDEX note_folders_user_id (user_id=?)
 
+Query: SELECT notification FROM delivery_jobs ORDER BY delivery_job_id DESC LIMIT 1
+Plan:
+SCAN delivery_jobs
+
 Query: SELECT purchase_key FROM badge_code_redemptions
 Plan:
 SCAN badge_code_redemptions
diff --git a/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql b/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql
index d60a41047f..71abf5d37f 100644
--- a/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql
+++ b/src/Simplex/Chat/Store/SQLite/Migrations/chat_schema.sql
@@ -806,7 +806,8 @@ CREATE TABLE delivery_jobs(
   created_at TEXT NOT NULL DEFAULT(datetime('now')),
   updated_at TEXT NOT NULL DEFAULT(datetime('now'))
   ,
-  sender_group_member_ids TEXT
+  sender_group_member_ids TEXT,
+  notification INTEGER NOT NULL DEFAULT 0
 ) STRICT;
 CREATE TABLE group_member_status_predicates(
   member_status TEXT NOT NULL PRIMARY KEY,
diff --git a/src/Simplex/Chat/View.hs b/src/Simplex/Chat/View.hs
index e3e58cdf49..03b116202b 100644
--- a/src/Simplex/Chat/View.hs
+++ b/src/Simplex/Chat/View.hs
@@ -469,6 +469,7 @@ chatEventToView hu ChatConfig {logLevel, showReactions, showReceipts, testView}
   CEvtUnknownMemberCreated u g fwdM um -> ttyUser u [ttyGroup' g <> ": " <> ttyMember fwdM <> " forwarded a message from an unknown member, creating unknown member record " <> ttyMember um]
   CEvtUnknownMemberBlocked u g byM um -> ttyUser u [ttyGroup' g <> ": " <> ttyMember byM <> " blocked an unknown member, creating unknown member record " <> ttyMember um]
   CEvtUnknownMemberAnnounced u g _ um m -> ttyUser u [ttyGroup' g <> ": unknown member " <> ttyMember um <> " updated to " <> ttyMember m]
+  CEvtDuplicateGroupMessage {} -> []
   CEvtRcvFileDescrReady _ _ _ _ -> []
   CEvtRcvFileAccepted u ci -> ttyUser u $ savingFile' ci
   CEvtRcvFileAcceptedSndCancelled u ft -> ttyUser u $ viewRcvFileSndCancelled ft
diff --git a/tests/ChatTests/Direct.hs b/tests/ChatTests/Direct.hs
index e5b4f4d6b5..a736298102 100644
--- a/tests/ChatTests/Direct.hs
+++ b/tests/ChatTests/Direct.hs
@@ -48,13 +48,13 @@ import Simplex.Messaging.Util (safeDecodeUtf8)
 import Simplex.Messaging.Version
 import System.Directory (copyFile, doesDirectoryExist, doesFileExist)
 import System.Mem.Weak (deRefWeak)
+import System.FilePath ((</>))
 import Test.Hspec hiding (it)
 #if defined(dbPostgres)
 import Database.PostgreSQL.Simple (Only (..))
 #else
 import Database.SQLite.Simple (Only (..))
 import Simplex.Chat.Options.DB
-import System.FilePath ((</>))
 #endif
 
 chatDirectTests :: SpecWith TestParams
diff --git a/tests/ChatTests/Groups.hs b/tests/ChatTests/Groups.hs
index d319d50bf1..58c1c9c51c 100644
--- a/tests/ChatTests/Groups.hs
+++ b/tests/ChatTests/Groups.hs
@@ -18,7 +18,7 @@ import ChatTests.Profiles (addTestBadge, futureDate, issueTestBadge, testBadgeKe
 import ChatTests.Utils
 import Control.Concurrent (threadDelay)
 import Control.Concurrent.Async (concurrently_)
-import Control.Concurrent.STM (atomically)
+import Control.Concurrent.STM (TVar, atomically, modifyTVar', newTVarIO, readTVarIO, writeTVar)
 import Control.Monad (forM_, void, when)
 import Control.Monad.Except (runExceptT)
 import Control.Monad.Reader (runReaderT)
@@ -32,14 +32,14 @@ import Data.List (intercalate, isInfixOf, isSuffixOf)
 import qualified Data.Map.Strict as M
 import qualified Data.Text as T
 import Simplex.Chat.Badges (FileSizeLimits (..))
-import Simplex.Chat.Controller (ChatController (ChatController, smpAgent), ChatConfig (..), ChatHooks (..), ChatLogLevel (..), defaultChatHooks, withAgent)
+import Simplex.Chat.Controller (ChatController (ChatController, smpAgent, subscriptionMode), ChatConfig (..), ChatEvent (CEvtDuplicateGroupMessage), ChatHooks (..), ChatLogLevel (..), defaultChatHooks, withAgent)
 import Simplex.Chat.Library.Internal (encodeConnInfo, getShortLinkConnReq, uniqueMsgMentions, updatedMentionNames)
 import Simplex.Chat.Markdown (parseMaybeMarkdownList)
 import Simplex.Chat.Messages (CIMention (..), CIMentionMember (..), ChatItemId)
 import Simplex.Chat.Messages.Batch (encodeBinaryBatch, encodeFwdElement)
 import Simplex.Chat.Messages.CIContent (publicGroupNoE2EText)
 import Simplex.Chat.Options
-import Simplex.Chat.Protocol (ChatMessage (ChatMessage), ChatMsgEvent (XGrpMemNew, XGrpRelayInv, XInfo, XMsgUpdate, XMsgNew, XMsgDel), FwdSender (FwdMember, FwdChannel), GrpMsgForward (GrpMsgForward), MsgContainer (..), MsgMention (..), MsgContent (..), VerifiedMsg (VMUnsigned), mcSimple, msgContentText)
+import Simplex.Chat.Protocol (ChatMessage (ChatMessage), ChatMsgEvent (XGrpMemNew, XGrpRelayInv, XInfo, XMsgUpdate, XMsgNew, XMsgDel), FwdSender (FwdMember, FwdChannel), GrpMsgForward (GrpMsgForward), MsgContainer (..), MsgMention (..), MsgContent (..), VerifiedMsg (VMUnsigned), chatMsgToBody, mcSimple, msgContentText)
 import Simplex.Chat.Types
 import Simplex.Chat.Types.MemberRelations (MemberRelation (..), getRelation, setRelation)
 import Simplex.Chat.Types.Shared (GroupMemberRole (..), GroupAcceptance (..))
@@ -47,7 +47,7 @@ import Simplex.Messaging.Agent (joinConnection, prepareConnectionToJoin, sendMes
 import Simplex.Messaging.Agent.Env.SQLite
 import Simplex.Messaging.Agent.RetryInterval
 import qualified Simplex.Messaging.Agent.Store.DB as DB
-import Simplex.Messaging.Agent.Store.DB (Binary (..))
+import Simplex.Messaging.Agent.Store.DB (Binary (..), BoolInt (..))
 import qualified Simplex.Messaging.Crypto as C
 import Simplex.Messaging.Crypto.BBS (bbsKeyGen)
 import Simplex.Messaging.Client (pattern NRMInteractive)
@@ -58,6 +58,7 @@ import Simplex.Messaging.Server.Env.STM hiding (subscriptions)
 import Simplex.Messaging.Transport
 import Simplex.Messaging.Version
 import System.Directory (copyFile, doesFileExist)
+import System.FilePath ((</>))
 import Test.Hspec hiding (it)
 #if defined(dbPostgres)
 import Database.PostgreSQL.Simple (Only (..))
@@ -66,7 +67,6 @@ import Database.PostgreSQL.Simple.SqlQQ (sql)
 import Database.SQLite.Simple (Only (..))
 import Database.SQLite.Simple.QQ (sql)
 import Simplex.Chat.Options.DB
-import System.FilePath ((</>))
 #endif
 
 chatGroupTests :: SpecWith TestParams
@@ -194,7 +194,10 @@ chatGroupTests = do
     it "forward batched messages" testGroupMsgForwardBatched
     it "forward reports to moderators, don't forward to members (x.msg.new, MCReport)" testGroupMsgForwardReport
     it "deduplicate forwarded messages" testGroupMsgForwardDeduplicate
+    it "report duplicate when forwarded copy is received after direct copy" testGroupMsgForwardDuplicateEvent
+    it "report duplicate when direct copy is received after forwarded copy" testGroupMsgDirectDuplicateEvent
     it "forward message edit (x.msg.update)" testGroupMsgForwardEdit
+    it "set notification flag of forwarded messages by the original event" testGroupMsgForwardNotification
     it "forward message reaction (x.msg.react)" testGroupMsgForwardReaction
     it "forward message deletion (x.msg.del)" testGroupMsgForwardDeletion
     it "forward file (x.msg.file.descr)" testGroupMsgForwardFile
@@ -282,6 +285,8 @@ chatGroupTests = do
     describe "relay delivery" $ do
       describe "single relay" $ do
         it "should deliver messages to members" testChannels1RelayDeliver
+        it "should set notification flag of delivered messages" testChannels1RelayDeliverNotification
+        it "should report duplicate message delivered by relay" testChannelDuplicateEvent
         describe "should deliver messages in a loop over members" $ do
           it "number of recipients is multiple of bucket size (3/1)" (testChannels1RelayDeliverLoop 1)
           it "number of recipients is NOT multiple of bucket size (3/2)" (testChannels1RelayDeliverLoop 2)
@@ -298,6 +303,7 @@ chatGroupTests = do
       it "multi senders disseminate independently" testChannelMultiSendersIndependent
       it "large profile fits in body" testChannelLargeProfileFits
       it "multiple large profiles pack across batches in one multi-sender job" testChannelMultipleLargeProfiles
+      it "overflow profile batch is sent without notification flag" testChannelOverflowProfileNotification
       it "profile update reuses existing announcement (no re-prepend)" testChannelProfileUpdateNoRePrepend
     describe "channel operations" $ do
       it "should update channel profile (signed)" testChannelUpdateProfileSigned
@@ -5912,6 +5918,53 @@ testGroupMsgForwardDeduplicate =
       cath <#. "#team bob> hi there"
       cath <# "#team hey team"
 
+testGroupMsgForwardDuplicateEvent :: HasCallStack => TestParams -> IO ()
+testGroupMsgForwardDuplicateEvent ps = do
+  (dups, cfg) <- duplicateMessageEventsCfg
+  withNewTestChat ps "alice" aliceProfile $ \alice ->
+    withNewTestChat ps "bob" bobProfile $ \bob ->
+      withNewTestChatCfg ps cfg "cath" cathProfile $ \cath -> do
+        createGroup3 "team" alice bob cath
+        groupForwardingRelations alice "bob" "cath" `shouldEventuallyReturn` (MRConnected, MRConnected)
+
+        bob #> "#team hi there"
+        [alice, cath] *<# "#team bob> hi there"
+
+        sharedMsgId <- itemSharedMsgId cath
+        bobMemId <- memberIdByName cath "bob"
+        connId <- relayConnIdToMember alice "cath"
+        ts <- getCurrentTime
+        let chatMsg = ChatMessage chatInitialVRange (Just sharedMsgId) (XMsgNew $ mcSimple $ MCText "hi there")
+            sendForwardedCopy = agentSendBody alice connId $ encodeBinaryBatch [encodeFwdElement (GrpMsgForward (FwdMember bobMemId "bob") ts) (VMUnsigned chatMsg)]
+        sendForwardedCopy
+        cath <##. "duplicate group message, group id: 1"
+        readTVarIO dups `shouldReturn` []
+        setMainAppOff cath
+        sendForwardedCopy
+        cath <##. "duplicate group message, group id: 1"
+        readTVarIO dups `shouldReturn` ["alice"]
+
+testGroupMsgDirectDuplicateEvent :: HasCallStack => TestParams -> IO ()
+testGroupMsgDirectDuplicateEvent ps = do
+  (dups, cfg) <- duplicateMessageEventsCfg
+  withNewTestChat ps "alice" aliceProfile $ \alice ->
+    withNewTestChat ps "bob" bobProfile $ \bob ->
+      withNewTestChatCfg ps cfg "cath" cathProfile $ \cath -> do
+        createGroup3 "team" alice bob cath
+
+        bobMemId <- memberIdByName cath "bob"
+        aliceConnId <- relayConnIdToMember alice "cath"
+        bobConnId <- relayConnIdToMember bob "cath"
+        ts <- getCurrentTime
+        let chatMsg = ChatMessage chatInitialVRange (Just $ SharedMsgId "duplicate_msg1") (XMsgNew $ mcSimple $ MCText "hi there")
+        agentSendBody alice aliceConnId $ encodeBinaryBatch [encodeFwdElement (GrpMsgForward (FwdMember bobMemId "bob") ts) (VMUnsigned chatMsg)]
+        cath <# "#team bob> hi there [>>]"
+
+        setMainAppOff cath
+        agentSendBody bob bobConnId $ chatMsgToBody chatMsg
+        cath <##. "duplicate group message, group id: 1"
+        readTVarIO dups `shouldReturn` ["bob"]
+
 testGroupMsgForwardEdit :: HasCallStack => TestParams -> IO ()
 testGroupMsgForwardEdit =
   testChat3 aliceProfile bobProfile cathProfile $
@@ -5936,6 +5989,29 @@ testGroupMsgForwardEdit =
       cath ##> "/tail #team 1"
       cath <# "#team bob> hello there [>>]"
 
+testGroupMsgForwardNotification :: HasCallStack => TestParams -> IO ()
+testGroupMsgForwardNotification =
+  testChat3 aliceProfile bobProfile cathProfile $
+    \alice bob cath -> do
+      createGroup3 "team" alice bob cath
+      setupGroupForwarding alice bob cath
+      cath ##> "/set receipts all off"
+      cath <## "ok"
+      cathConnId <- relayConnIdToMember alice "cath"
+
+      bob #> "#team hi there"
+      alice <# "#team bob> hi there"
+      cath <# "#team bob> hi there [>>]"
+      lastSndMsgFlags alice cathConnId 1 `shouldReturn` ["T"]
+      lastJobNotification alice `shouldReturn` True
+
+      bob ##> "! #team hello there"
+      bob <# "#team [edited] hello there"
+      alice <# "#team bob> [edited] hello there"
+      cath <# "#team bob> [edited] hello there"
+      lastSndMsgFlags alice cathConnId 1 `shouldReturn` ["F"]
+      lastJobNotification alice `shouldReturn` False
+
 testGroupMsgForwardReaction :: HasCallStack => TestParams -> IO ()
 testGroupMsgForwardReaction =
   testChat3 aliceProfile bobProfile cathProfile $
@@ -6118,6 +6194,7 @@ testGroupMsgForwardAdminRemoval =
             alice <## "use /d #team to delete the group",
           cath <## "#team: bob removed alice from the group (signed)"
         ]
+      lastJobNotification alice `shouldReturn` False
 
       -- there is no forwarding admin anymore between bob and cath, so messages don't get delivered
       -- (this is not a desired behavior, just a test demonstration/proof of current implementation)
@@ -6159,6 +6236,7 @@ testGroupMsgForwardGroupDeletion =
             cath <## "#team: bob deleted the group (signed)"
             cath <## "use /d #team to delete the local copy of the group"
         ]
+      lastJobNotification alice `shouldReturn` True
 
       alice ##> "/groups"
       alice <## "#team (group deleted, delete local copy: /d #team)"
@@ -9520,6 +9598,65 @@ testChannels1RelayDeliver ps =
             cath <## "group ID: 1"
             cath <## "subscribers: 4"
 
+testChannels1RelayDeliverNotification :: HasCallStack => TestParams -> IO ()
+testChannels1RelayDeliverNotification ps =
+  withNewTestChat ps "alice" aliceProfile $ \alice -> do
+    withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> do
+      withNewTestChat ps "cath" cathProfile $ \cath -> do
+        withNewTestChat ps "dan" danProfile $ \dan -> do
+          withNewTestChat ps "eve" eveProfile $ \eve -> do
+            createChannel1Relay "team" alice bob cath dan eve
+            forM_ [cath, dan, eve] $ \cc -> do
+              cc ##> "/set receipts all off"
+              cc <## "ok"
+            cathConnId <- relayConnIdToMember bob "cath"
+            danConnId <- relayConnIdToMember bob "dan"
+            eveConnId <- relayConnIdToMember bob "eve"
+
+            alice #> "#team hi"
+            bob <# "#team> hi"
+            [cath, dan, eve] *<# "#team> hi [>>]"
+            forM_ [cathConnId, danConnId, eveConnId] $ \connId ->
+              lastSndMsgFlags bob connId 1 `shouldReturn` ["T"]
+            lastJobNotification bob `shouldReturn` True
+
+            cath ##> "+1 #team hi"
+            cath <## "added 👍"
+            bob <# "#team cath> > hi"
+            bob <## "    + 👍"
+            alice <# "#team cath> > hi"
+            alice <## "    + 👍"
+            dan <## "#team: bob introduced cath (Catherine) in the channel"
+            dan <# "#team cath> > hi"
+            dan <## "    + 👍"
+            eve <## "#team: bob introduced cath (Catherine) in the channel"
+            eve <# "#team cath> > hi"
+            eve <## "    + 👍"
+            forM_ [danConnId, eveConnId] $ \connId ->
+              lastSndMsgFlags bob connId 1 `shouldReturn` ["F"]
+            lastJobNotification bob `shouldReturn` False
+
+testChannelDuplicateEvent :: HasCallStack => TestParams -> IO ()
+testChannelDuplicateEvent ps = do
+  (dups, cfg) <- duplicateMessageEventsCfg
+  withNewTestChat ps "alice" aliceProfile $ \alice ->
+    withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob ->
+      withNewTestChatCfg ps cfg "cath" cathProfile $ \cath ->
+        withNewTestChat ps "dan" danProfile $ \dan ->
+          withNewTestChat ps "eve" eveProfile $ \eve -> do
+            createChannel1Relay "team" alice bob cath dan eve
+            alice #> "#team hi"
+            bob <# "#team> hi"
+            [cath, dan, eve] *<# "#team> hi [>>]"
+
+            sharedMsgId <- itemSharedMsgId cath
+            connId <- relayConnIdToMember bob "cath"
+            ts <- getCurrentTime
+            let chatMsg = ChatMessage chatInitialVRange (Just sharedMsgId) (XMsgNew $ mcSimple $ MCText "hi")
+            setMainAppOff cath
+            agentSendBody bob connId $ encodeBinaryBatch [encodeFwdElement (GrpMsgForward FwdChannel ts) (VMUnsigned chatMsg)]
+            readTVarIO dups `shouldEventuallyReturn` ["bob"]
+
 createChannel1Relay :: String -> TestCC -> TestCC -> TestCC -> TestCC -> TestCC -> IO ()
 createChannel1Relay gName owner relay cath dan eve = do
   (shortLink, fullLink) <- prepareChannel1Relay gName owner relay
@@ -9979,6 +10116,34 @@ testChannelLargeProfileFits ps =
 
           memberIntroducedTo bob "cath" "dan"
 
+testChannelOverflowProfileNotification :: HasCallStack => TestParams -> IO ()
+testChannelOverflowProfileNotification ps =
+  withNewTestChat ps "alice" aliceProfile $ \alice -> do
+    withNewTestChatOpts ps relayTestOpts "bob" bobProfile $ \bob -> do
+      withNewTestChat ps "cath" cathProfile $ \cath -> do
+        withNewTestChat ps "dan" danProfile $ \dan -> do
+          (shortLink, fullLink) <- prepareChannel1Relay "team" alice bob
+          memberJoinChannel "team" [bob] [alice] shortLink fullLink cath
+          memberJoinChannel "team" [bob] [alice] shortLink fullLink dan
+          promoteChannelMember "team" alice bob cath [dan]
+          dan ##> "/set receipts all off"
+          dan <## "ok"
+          danConnId <- relayConnIdToMember bob "dan"
+
+          let bigImage = T.pack ("data:image/png;base64," <> replicate 10000 'A')
+              longText = replicate 7000 'x'
+          withCCTransaction bob $ \db ->
+            DB.execute db "UPDATE contact_profiles SET image = ? WHERE display_name = ?" (bigImage, "cath" :: T.Text)
+          sentBefore <- length <$> lastSndMsgFlags bob danConnId 100
+
+          cath #> ("#team " <> longText)
+          bob <# ("#team cath> " <> longText)
+          alice <# ("#team cath> " <> longText <> " [>>]")
+          dan <### [EndsWith "updated to cath"]
+          dan <## "#team: bob introduced cath (Catherine) in the channel"
+          dan <# ("#team cath> " <> longText <> " [>>]")
+          drop sentBefore <$> lastSndMsgFlags bob danConnId 100 `shouldReturn` ["F", "T"]
+
 testChannelMultipleLargeProfiles :: HasCallStack => TestParams -> IO ()
 testChannelMultipleLargeProfiles ps =
   withNewTestChat ps "alice" aliceProfile $ \alice -> do
@@ -11053,6 +11218,7 @@ testChannelDeleteGroupSigned ps =
                   eve <## "#team: alice deleted the group (signed)"
                   eve <## "use /d #team to delete the local copy of the group"
               ]
+            lastJobNotification bob `shouldReturn` True
 
 testChannelDeleteGroupCleanup :: HasCallStack => TestParams -> IO ()
 testChannelDeleteGroupCleanup ps =
@@ -11246,6 +11412,7 @@ testChannelRelayLeave ps =
                   dan <## "#team: bob left the group (signed)",
                   eve <## "#team: bob left the group (signed)"
                 ]
+              lastJobNotification bob `shouldReturn` False
 
               -- verify relay1 member status is "left" on all clients that know bob
               checkMemberStatus alice "bob" (Just "left")
@@ -13149,6 +13316,39 @@ relayConnIdToMember cc name = do
     (Only connId : _) -> pure connId
     _ -> fail $ "no relay connection to member " <> T.unpack name
 
+agentSendBody :: TestCC -> ByteString -> ByteString -> IO ()
+agentSendBody cc connId body = do
+  let ChatController {smpAgent} = chatController cc
+  runExceptT (sendMessages smpAgent [(connId, PQEncOff, MsgFlags False, vrValue body)]) >>= either (fail . show) (const $ pure ())
+
+lastSndMsgFlags :: TestCC -> ByteString -> Int -> IO [T.Text]
+lastSndMsgFlags cc connId n = do
+  rows <- withCCAgentTransaction cc $ \db ->
+    DB.query
+      db
+      "SELECT msg_flags FROM messages WHERE conn_id = ? AND internal_snd_id IS NOT NULL AND msg_type = ? ORDER BY internal_id DESC LIMIT ?"
+      (connId, Binary ("M" :: ByteString), n)
+  pure $ reverse $ map fromOnly rows
+
+lastJobNotification :: TestCC -> IO Bool
+lastJobNotification cc = do
+  [Only (BI ntf)] <- withCCTransaction cc $ \db ->
+    DB.query_ db "SELECT notification FROM delivery_jobs ORDER BY delivery_job_id DESC LIMIT 1"
+  pure ntf
+
+duplicateMessageEventsCfg :: IO (TVar [ContactName], ChatConfig)
+duplicateMessageEventsCfg = do
+  dups <- newTVarIO []
+  let hook _ evt = do
+        case evt of
+          Right (CEvtDuplicateGroupMessage _ GroupMember {localDisplayName}) -> atomically $ modifyTVar' dups (<> [localDisplayName])
+          _ -> pure ()
+        pure evt
+  pure (dups, testCfg {chatHooks = defaultChatHooks {eventHook = Just hook}})
+
+setMainAppOff :: TestCC -> IO ()
+setMainAppOff cc = atomically $ writeTVar (subscriptionMode $ chatController cc) SMOnlyCreate
+
 itemSharedMsgId :: TestCC -> IO SharedMsgId
 itemSharedMsgId cc = do
   rows <- withCCTransaction cc $ \db ->
diff --git a/tests/Test.hs b/tests/Test.hs
index 4517a8edb2..42adbfda52 100644
--- a/tests/Test.hs
+++ b/tests/Test.hs
@@ -17,7 +17,6 @@ import Bots.DirectoryTests
 import ChatClient
 import ChatTests
 import ChatTests.DBUtils
-import ChatTests.Names (chatNamesTests)
 import ChatTests.Utils (xdescribe'')
 import Control.Logger.Simple
 import Data.Time.Clock.System
@@ -44,6 +43,7 @@ import Simplex.Chat.Store.Postgres.Migrations (migrations)
 import Simplex.Messaging.Agent.Store.Postgres.Util (createDBAndUserIfNotExists, dropDatabaseAndUser)
 #else
 import APIDocs
+import ChatTests.Names (chatNamesTests)
 import qualified Simplex.Messaging.TMap as TM
 import MobileTests
 import SchemaDump
diff --git a/website/.eleventy.js b/website/.eleventy.js
index dcd0f67916..5659db8d42 100644
--- a/website/.eleventy.js
+++ b/website/.eleventy.js
@@ -172,6 +172,17 @@ fs.readdir(translationsDirectoryPath, (err, files) => {
 
 const translations = require("./translations.json")
 
+const translatedPages = {
+  "": "src/index.html",
+  why: "src/why.html",
+  downloads: "src/_includes/downloads_hero.html",
+}
+
+const translatedPageKeys = Object.fromEntries(Object.entries(translatedPages).map(([route, file]) => {
+  const template = fs.readFileSync(path.resolve(__dirname, file), "utf8")
+  return [route, [...new Set(Array.from(template.matchAll(/["']([\w-]+)["']\s*\|\s*i18n/g), (match) => match[1]))]]
+}))
+
 const outputDir = '_site'
 
 module.exports = function (ty) {
@@ -402,6 +413,12 @@ module.exports = function (ty) {
     return strings[locale] ?? strings.en ?? key
   })
 
+  ty.addFilter("translated", (lang, url) => {
+    const [first, second] = url.split("/").slice(1)
+    const keys = translatedPageKeys[supportedLangs.includes(first) ? second : first]
+    return !keys || keys.every((key) => translations[key]?.[lang] !== undefined)
+  })
+
   ty.on("eleventy.before", () => unknownStrings.clear())
 
   ty.on("eleventy.after", () => {
@@ -413,6 +430,20 @@ module.exports = function (ty) {
       console.warn(`[i18n] Untranslated of ${allStrings.length} strings, English used: ${untranslated.map(([lang, count]) => `${lang} ${count}`).join(", ")}`)
     }
     if (unknownStrings.size > 0) console.warn(`[i18n] Missing in en.json: ${Array.from(unknownStrings).join(", ")}`)
+    const hiddenTranslations = supportedLangs.filter((lang) => lang !== "en").sort()
+      .flatMap((lang) => Object.entries(translatedPageKeys).map(([route, keys]) =>
+        ({ lang, page: route || "home", keys, missing: keys.filter((key) => translations[key]?.[lang] === undefined) })))
+      .filter(({ keys, missing }) => missing.length > 0 && missing.length <= keys.length / 4)
+    if (hiddenTranslations.length > 0) {
+      const banner = "!".repeat(100)
+      console.warn([
+        banner,
+        "[i18n] LANGUAGES HIDDEN FROM PAGE LANGUAGE MENUS - translate the missing strings:",
+        ...hiddenTranslations.map(({ lang, page, keys, missing }) =>
+          `[i18n]   ${page} page, ${lang}: ${keys.length - missing.length}/${keys.length} strings, missing ${missing.join(", ")}`),
+        banner,
+      ].join("\n"))
+    }
   })
 
   // Keeps the same directory structure.
diff --git a/website/copy_sources.js b/website/copy_sources.js
index 124179ac3c..95f08816f4 100644
--- a/website/copy_sources.js
+++ b/website/copy_sources.js
@@ -7,7 +7,7 @@ const repoDir = path.resolve(__dirname, "..")
 const docs = {
   from: "docs",
   to: "src/docs",
-  exclude: [/^contributing\//, /^rfcs\//, /^dependencies\//, /^LINKS\.md$/, /^lang\/[^/]+\/README\.md$/],
+  exclude: [/^contributing\//, /^rfcs\//, /^dependencies\//, /^LINKS\.md$/, /^DOWNLOADS\.md$/, /^lang\/[^/]+\/README\.md$/],
 }
 
 const sources = [
diff --git a/website/langs/ar.json b/website/langs/ar.json
index 3f5c220f19..306ae4f857 100644
--- a/website/langs/ar.json
+++ b/website/langs/ar.json
@@ -82,7 +82,7 @@
     "hero-overlay-card-1-p-5": "الأجهزة العميلة فقط هي التي تخزن ملفات تعريف المستخدمين، جهات الاتصال والمجموعات؛ يتم إرسال الرسائل بتعمية ثنائية الطبقة بين الطرفين.",
     "hero-overlay-card-2-p-2": "يمكنهم بعد ذلك ربط هذه المعلومات بالشبكات الاجتماعية العامة الحالية، وتحديد بعض الهويات الحقيقية.",
     "simplex-network-overlay-card-1-li-3": "P2P لا يحل مشكلة <a href=\"https://en.wikipedia.org/wiki/Man-in-the-middle_attack\">هجوم الوسيط (MITM)</a>، ومعظم التطبيقات الحالية لا تستخدم خارج النطاق رسائل للتبادل الأولي للمفاتيح. يستخدم SimpleX رسائل خارج النطاق أو، في بعض الحالات، اتصالات آمنة وموثوق بها موجودة مسبقًا لتبادل المفاتيح الأولي.",
-    "privacy-matters-overlay-card-1-p-3": "تستخدم بعض الشركات المالية والتأمين رسوماً بيانية اجتماعية لتحديد أسعار الفائدة وأقساط التأمين. عادةً ما تجعل الأشخاص ذوي الدخل المنخفض يدفعون أكثر &mdash; أو كما يسمى <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">\"علاوة الفقر\"</a>.",
+    "privacy-matters-overlay-card-1-p-3": "تستخدم بعض الشركات المالية والتأمين رسوماً بيانية اجتماعية لتحديد أسعار الفائدة وأقساط التأمين. عادةً ما تجعل الأشخاص ذوي الدخل المنخفض يدفعون أكثر &mdash; أو كما يسمى <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">\"علاوة الفقر\"</a>.",
     "privacy-matters-overlay-card-1-p-2": "يعرف تجار التجزئة عبر الإنترنت أن الأشخاص ذوي الدخل المنخفض هم أكثر عرضة لإجراء عمليات شراء عاجلة، لذلك قد يفرضون أسعارًا أعلى أو يزيلون الخصومات.",
     "simplex-private-6-title": "تبديل <br> خارج النطاق",
     "simplex-private-9-title": "قوائم انتظار <br> أحادية الاتجاه",
@@ -90,7 +90,7 @@
     "simplex-private-card-1-point-1": "بروتوكول Double-ratchet &mdash; <br> رسائل OTR مع السرية المستمرة واستعادة الاختراق.",
     "simplex-private-card-1-point-2": "NaCL cryptobox في كل قائمة انتظار لمنع ارتباط حركة مرور البيانات بين قوائم انتظار الرسائل في حالة اختراق TLS.",
     "simplex-private-card-2-point-1": "طبقة إضافية من تعمية الخادم للتسليم إلى المُستلم، لمنع الارتباط بين حركة مرور بيانات الخادم المُستلمة والمُرسلة في حالة اختراق TLS.",
-    "simplex-private-card-4-point-2": "لاستخدام SimpleX عبر تور، يُرجى تثبيت <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\"> تطبيق Orbot </a> وتمكّين وكيل SOCKS5 (أو VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">على iOS </a>).",
+    "simplex-private-card-4-point-2": "لاستخدام SimpleX عبر تور، يُرجى تثبيت <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\"> تطبيق Orbot </a> وتمكّين وكيل SOCKS5 (أو VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">على iOS </a>).",
     "simplex-private-card-5-point-2": "يجعل الرسائل ذات الأحجام المختلفة تبدو متشابهة للخوادم ومراقبي الشبكة.",
     "simplex-private-card-6-point-1": "العديد من شبكات التواصل عرضة لهجمات الوسيط (MITM) من قِبل الخوادم أو موفري الشبكات.",
     "simplex-private-card-7-point-1": "لضمان سلامة الرسائل يتم ترقيمها بالتسلسل وتضمين تجزئة الرسالة السابقة.",
@@ -103,7 +103,7 @@
     "hero-overlay-card-1-p-2": "لتسليم الرسائل، بدلاً من معرّفات المُستخدم المُستخدمة من قِبل جميع الشبكات الأخرى، يستخدم SimpleX معرّفات زوجية مجهولة مؤقتة لقوائم الرسائل، منفصلة لكل اتصال من اتصالاتك &mdash; ولا توجد معرّفات طويلة الأجل.",
     "simplex-network-overlay-card-1-p-1": "بروتوكولات المُراسلة والتطبيقات <a href=\"https://en.wikipedia.org/wiki/Peer-to-peer\">P2P</a> بها مشاكل مختلفة تجعلها أقل موثوقية من SimpleX وأكثر تعقيدًا في التحليل و عرضة لعدة أنواع من الهجمات.",
     "hero-overlay-card-2-p-1": "عندما يكون لدى المستخدمين هويات ثابتة، حتى لو كان هذا مجرد رقم عشوائي، مثل معرّف الجلسة، فهناك خطر يتمثل في أن الموفر أو المهاجم يمكنه مراقبة كيفية اتصال المستخدمين وعدد الرسائل التي يرسلونها.",
-    "hero-overlay-card-1-p-6": "اقرأ المزيد في <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX whitepaper</a>.",
+    "hero-overlay-card-1-p-6": "اقرأ المزيد في <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX whitepaper</a>.",
     "hero-overlay-card-2-p-3": "حتى مع معظم التطبيقات الخاصة التي تستخدم خدمات Tor v3، إذا تحدثت إلى جهتي اتصال مختلفتين عبر نفس الملف الشخصي، فيمكنهما إثبات أنهما متصلان بنفس الشخص.",
     "hero-overlay-card-2-p-4": "يحمي SimpleX من هذه الهجمات من خلال عدم وجود أي معرّفات مستخدم في تصميمه. وإذا كنت تستخدم وضع التخفي، فسيكون لديك اسم عرض مختلف لكل جهة اتصال، مع تجنب أي بيانات مشتركة بينهما.",
     "simplex-network-overlay-card-1-li-6": "قد تكون شبكات P2P عرضة <a href=\"https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent\">DRDoS attack</a>، عندما يتمكّن العملاء من إعادة بث حركة مرور البيانات وتضخيمها، مما يؤدي إلى رفض الخدمة على مستوى الشبكة. يقوم عملاء SimpleX فقط بترحيل حركة مرور البيانات من اتصال معروف ولا يمكن للمهاجم استخدامها لتضخيم حركة مرور البيانات في الشبكة بالكامل.",
@@ -119,17 +119,17 @@
     "simplex-unique-overlay-card-3-p-2": "يتم الاحتفاظ بالرسائل المُعمَّاة بين الطرفين مؤقتًا على خوادم ترحيل SimpleX حتى يتم استلامها، ثُمَّ تُحذف نهائيًا.",
     "simplex-unique-overlay-card-3-p-4": "لا توجد معرفّات أو نص مُعَمَّى مشترك بين حركة مرور بيانات الخادم المُرسلة والمُستلمة &mdash; إذا كان أي شخص يراقب ذلك، فلن يتمكّن بسهولة من تحديد من يتواصل مع من، حتى لو اختُرق TLS.",
     "simplex-unique-card-1-p-1": "يحمي SimpleX خصوصية ملف تعريفك، جهات اتصالك والبيانات الوصفية، ويخفيه عن خوادم شبكة SimpleX وأي مراقبين.",
-    "privacy-matters-overlay-card-2-p-1": "منذ وقت ليس ببعيد، لاحظنا أن الانتخابات الرئيسية يتم التلاعب بها بواسطة <a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\">شركة استشارية ذات سمعة طيبة </a> التي استخدمت الرسوم البيانية الاجتماعية لتشويه نظرتنا للعالم الحقيقي والتلاعب بأصواتنا.",
+    "privacy-matters-overlay-card-2-p-1": "منذ وقت ليس ببعيد، لاحظنا أن الانتخابات الرئيسية يتم التلاعب بها بواسطة <a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\" rel=\"noopener\">شركة استشارية ذات سمعة طيبة </a> التي استخدمت الرسوم البيانية الاجتماعية لتشويه نظرتنا للعالم الحقيقي والتلاعب بأصواتنا.",
     "privacy-matters-overlay-card-2-p-2": "لكي تكون موضوعيًا وتتخذ قرارات مستقلة، عليك التحكم في مساحة معلوماتك. لا يمكن تحقيق ذلك إلا باستخدام شبكة اتصال خاصة لا يمكنها الوصول إلى حسابك على مواقع التواصل الاجتماعي.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX هي أول شبكة لا تحتوي على أي معرّفات مستخدم من حيث التصميم، وبهذه الطريقة تحمي مخطط اتصالاتك بشكل أفضل من أي بديل معروف.",
-    "privacy-matters-overlay-card-3-p-2": "واحدة من أكثر القصص إثارة للصدمة هي تجربة <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">محمدو ولد صلاحي</a> الموصوفة في مذكراته والموضحة في فيلم موريتاني. تم وضعه في معتقل غوانتانامو بدون محاكمة، وتعرض للتعذيب هناك لمدة 15 عامًا بعد مكالمة هاتفية مع قريبه في أفغانستان، للاشتباه في تورطه في هجمات 11 سبتمبر، على الرغم من أنه عاش في ألمانيا طوال السنوات العشر الماضية.",
-    "privacy-matters-overlay-card-3-p-3": "يتم القبض على الأشخاص العاديين بسبب ما يشاركونه عبر الإنترنت، حتى عبر حساباتهم \"المجهولة\"، <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">وحتى في البلدان الديمقراطية</a>.",
+    "privacy-matters-overlay-card-3-p-2": "واحدة من أكثر القصص إثارة للصدمة هي تجربة <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">محمدو ولد صلاحي</a> الموصوفة في مذكراته والموضحة في فيلم موريتاني. تم وضعه في معتقل غوانتانامو بدون محاكمة، وتعرض للتعذيب هناك لمدة 15 عامًا بعد مكالمة هاتفية مع قريبه في أفغانستان، للاشتباه في تورطه في هجمات 11 سبتمبر، على الرغم من أنه عاش في ألمانيا طوال السنوات العشر الماضية.",
+    "privacy-matters-overlay-card-3-p-3": "يتم القبض على الأشخاص العاديين بسبب ما يشاركونه عبر الإنترنت، حتى عبر حساباتهم \"المجهولة\"، <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">وحتى في البلدان الديمقراطية</a>.",
     "simplex-unique-overlay-card-1-p-1": "على عكس شبكات المُراسلة الأخرى، <strong>لا يحتوي SimpleX على معرّفات مخصصة للمستخدمين</strong>. لا يعتمد على أرقام الهواتف أو العناوين المستندة إلى النطاقات (مثل البريد الإلكتروني أو XMPP)، أسماء المستخدمين، المفاتيح العامة أو حتى الأرقام العشوائية لتحديد مستخدميها &mdash; مُشغلي خادم SimpleX لا يعرفون عدد الأشخاص الذين يستخدمون خوادمهم.",
     "simplex-unique-overlay-card-1-p-2": "لتسليم الرسائل، يستخدم <a href=\"https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier\">العناوين المزدوجة المجهولة </a> لقوائم انتظار الرسائل أحادية الاتجاه، منفصلة عن الرسائل المُستلمة والمُرسلة، عادةً عبر خوادم مختلفة.",
     "simplex-unique-overlay-card-3-p-1": "يخزن SimpleX Chat جميع بيانات المستخدم على أجهزة العميل فقط باستخدام <strong> تنسيق قاعدة بيانات محمولة مُعمَّاة </strong> يمكّن تصديرها ونقلها إلى أي جهاز مدعوم.",
     "simplex-unique-overlay-card-3-p-3": "على عكس خوادم الشبكات الاتحادية (البريد الإلكتروني أو XMPP أو Matrix)، لا تقوم خوادم SimpleX بتخزين حسابات المستخدمين، فهي تقوم فقط بترحيل الرسائل، مما يحمي خصوصية كلا الطرفين.",
     "simplex-unique-overlay-card-4-p-1": "يمكنك <strong> استخدام SimpleX مع خوادمك </strong> والاستمرار في التواصل مع الأشخاص الذين يستخدمون الخوادم المُهيأة مسبقًا في التطبيقات.",
-    "simplex-unique-overlay-card-4-p-3": "إذا كنت تفكر في التطوير شبكة SimpleX، على سبيل المثال، بوت الدردشة لمستخدمي تطبيق SimpleX، أو دمج مكتبة SimpleX Chat في تطبيقات الأجهزة المحمولة، من فضلك <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">تواصل معي</a> لأي نصيحة والدعم.",
+    "simplex-unique-overlay-card-4-p-3": "إذا كنت تفكر في التطوير شبكة SimpleX، على سبيل المثال، بوت الدردشة لمستخدمي تطبيق SimpleX، أو دمج مكتبة SimpleX Chat في تطبيقات الأجهزة المحمولة، من فضلك <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">تواصل معي</a> لأي نصيحة والدعم.",
     "donate-here-to-help-us": "تبرّع هنا لمساعدتنا",
     "sign-up-to-receive-our-updates": "اشترك للحصول على آخر مستجداتنا",
     "enter-your-email-address": "أدخل عنوان بريدك الإلكتروني",
@@ -209,7 +209,7 @@
     "simplex-network-2-desc": "لا تقوم خوادم الترحيل SimpleX بتخزين ملفات تعريف المستخدمين وجهات الاتصال والرسائل التي تم تسليمها، ولا تتصل ببعضها البعض، ولا يوجد دليل خوادم.",
     "comparison-point-1-text": "يتطلب هوية عالمية",
     "protocol-3-text": "بروتوكولات P2P",
-    "simplex-unique-overlay-card-4-p-2": "تستخدم شبكة <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">بروتوكول مفتوح</a> وتوفر<a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK لإنشاء روبوتات دردشة</a>، مما يسمح بتنفيذ الخدمات التي يمكن للمستخدمين التفاعل معها عبر تطبيقات SimpleX Chat &mdash; التي تتطلع حقًا لمعرفة خدمات SimpleX التي ستبنيها.",
+    "simplex-unique-overlay-card-4-p-2": "تستخدم شبكة <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">بروتوكول مفتوح</a> وتوفر<a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK لإنشاء روبوتات دردشة</a>، مما يسمح بتنفيذ الخدمات التي يمكن للمستخدمين التفاعل معها عبر تطبيقات SimpleX Chat &mdash; التي تتطلع حقًا لمعرفة خدمات SimpleX التي ستبنيها.",
     "guide-dropdown-1": "بداية سريعة",
     "guide-dropdown-2": "إرسال الرسائل",
     "guide-dropdown-3": "مجموعات سرية",
@@ -261,7 +261,13 @@
     "about-and-contact-us": "عن واتصل بنا",
     "index-hero-h1": "كن<br>حراً",
     "index-hero-h2": "في شبكتك",
-    "index-hero-p1": "أول شبكة بدون معرّفات مستخدمين.<br>أنت تملك جهات اتصالك ومجموعاتك وقنواتك.",
+    "index-hero-p1": "<span class=\"nowrap\">شبكة المراسلة الوحيدة</span> <span class=\"nowrap\">بدون أي معرّفات للمستخدمين.</span><br>أنت تملك جهات اتصالك ومجموعاتك وقنواتك.",
+    "index-hero-own-part": "امتلك جزءًا منها.",
+    "index-hero-invest": "استثمر في SimpleX Chat.",
+    "index-hero-downloads": "تنزيلات",
+    "index-hero-monthly-users": "مستخدمون شهريًا",
+    "index-hero-countdown-lead": "إطلاق نطاقات SimpleX",
+    "index-hero-countdown-done": "احصل على نطاق SimpleX",
     "index-hero-download-desktop-btn-title": "نزّل تطبيق سطح مكتب SimpleX",
     "index-testflight-title": "إصدار SimpleX التجريبي ل iOS على TestFlight",
     "index-f-droid-title": "تطبيق SimpleX من خلال F-Droid",
@@ -296,7 +302,7 @@
     "index-roadmap-3-title": "اجعل مجتمعاتك تنمو",
     "index-roadmap-3-desc": "أدوات لتعزيز مجتمعاتك",
     "index-directory-h2": "انضم إلى مجتمعات SimpleX",
-    "index-directory-p1": "أكثر من 2 مليون شخص قاموا بتنزيل تطبيقات SimpleX.",
+    "index-directory-p1": "أكثر من 3 ملايين شخص قاموا بتنزيل تطبيقات SimpleX.",
     "index-directory-p2": "ابحث عن قنواتك ومجتمعاتك في الدليل وأنشئ قنواتك الخاصة!",
     "index-directory-cta": "اعرض دليل SimpleX",
     "index-directory-users-group-title": "مجموعة مستخدمي SimpleX",
@@ -318,5 +324,6 @@
     "navbar-token": "رمز",
     "index-token-cta": "اعرف المزيد عن أرصدة المجتمع",
     "navbar-old-site": "الموقع القديم",
-    "send-file": "إرسال ملف"
+    "send-file": "إرسال ملف",
+    "why-footer-link": "لماذا نبنيها"
 }
diff --git a/website/langs/cs.json b/website/langs/cs.json
index 90bad228aa..82f659acff 100644
--- a/website/langs/cs.json
+++ b/website/langs/cs.json
@@ -1,7 +1,7 @@
 {
     "simplex-private-card-10-point-2": "Umožňuje doručovat zprávy bez identifikátoru uživatelských profilů, což poskytuje lepší soukromí metadat než alternativy.",
     "simplex-unique-4-overlay-1-title": "Plně decentralizované &mdash; uživatelé vlastní síť SimpleX",
-    "hero-overlay-card-1-p-6": "Více v <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX whitepaper</a>.",
+    "hero-overlay-card-1-p-6": "Více v <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX whitepaper</a>.",
     "hero-overlay-card-1-p-2": "K doručování zpráv používá SimpleX namísto ID uživatelů používaných všemi ostatními sítěmi, dočasné anonymní párové identifikátory front zpráv, oddělené pro každé z vašich připojení &mdash; neexistují žádné dlouhodobé identifikátory.",
     "hero-overlay-card-1-p-3": "Definujete, které servery se mají používat k přijímání zpráv, vašich kontaktů &mdash; servery, které používáte k odesílání zpráv. Každá konverzace bude pravděpodobně používat dva různé servery.",
     "hero-overlay-card-2-p-3": "I v těch nejsoukromějších aplikacích, které používají služby Tor v3, pokud mluvíte se dvěma různými kontakty prostřednictvím stejného profilu, může být prokázáno, že jsou spojeni se stejnou osobou.",
@@ -89,11 +89,11 @@
     "simplex-network-overlay-card-1-li-3": "P2P neřeší problém <a href=\"https://en.wikipedia.org/wiki/Man-in-the-middle_attack\">MITM útoku</a> a většina existujících implementací nepoužívá out-of-band zprávy pro počáteční výměnu klíčů. SimpleX používá out-of-band zprávy nebo v některých případech již existující zabezpečená a důvěryhodná připojení pro počáteční výměnu klíčů.",
     "simplex-network-overlay-card-1-li-4": "Implementace P2P mohou být některými poskytovateli internetu blokovány (například <a href=\"https://cs.wikipedia.org/wiki/BitTorrent\">BitTorrent</a>). SimpleX je transportně nezávislý &mdash; může pracovat přes standardní webové protokoly, např. WebSockety.",
     "privacy-matters-overlay-card-1-p-1": "Mnoho velkých společností používá informace o tom, s kým jste ve spojení, k odhadu vašich příjmů, prodeji produktů, které ve skutečnosti nepotřebujete, a ke stanovení cen.",
-    "privacy-matters-overlay-card-1-p-3": "Některé finanční a pojišťovací společnosti používají sociální grafy k určení úrokových sazeb a pojistného. Často přiměje lidi s nižšími příjmy platit více &mdash;, je to známé jako <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">\"prémie za chudobu\"</a>.",
-    "privacy-matters-overlay-card-2-p-1": "Není to tak dávno, co jsme pozorovali, jak velké volby zmanipulovala <a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\">renomovaná poradenská společnost</a>, která používala naše sociální grafy ke zkreslení našeho pohledu na skutečný svět a manipulovala s našimi hlasy.",
+    "privacy-matters-overlay-card-1-p-3": "Některé finanční a pojišťovací společnosti používají sociální grafy k určení úrokových sazeb a pojistného. Často přiměje lidi s nižšími příjmy platit více &mdash;, je to známé jako <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">\"prémie za chudobu\"</a>.",
+    "privacy-matters-overlay-card-2-p-1": "Není to tak dávno, co jsme pozorovali, jak velké volby zmanipulovala <a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\" rel=\"noopener\">renomovaná poradenská společnost</a>, která používala naše sociální grafy ke zkreslení našeho pohledu na skutečný svět a manipulovala s našimi hlasy.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX je první síť, která nemá žádné uživatelské identifikátory záměrně, a tímto způsobem chrání váš graf připojení lépe než jakákoli známá alternativa.",
     "privacy-matters-overlay-card-3-p-1": "Každý by se měl starat o soukromí a bezpečnost své komunikace &mdash; neškodné rozhovory vás mohou vystavit nebezpečí, i když nemáte co skrývat.",
-    "privacy-matters-overlay-card-3-p-3": "Obyčejní lidé jsou zatčeni za to, co sdílejí online, dokonce i prostřednictvím svých \"anonymních\" účtů, <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">i v demokratických zemích</a>.",
+    "privacy-matters-overlay-card-3-p-3": "Obyčejní lidé jsou zatčeni za to, co sdílejí online, dokonce i prostřednictvím svých \"anonymních\" účtů, <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">i v demokratických zemích</a>.",
     "privacy-matters-overlay-card-3-p-4": "Nestačí používat end-to-end šifrovaný messenger, všichni bychom měli používat messengery, které chrání soukromí našich osobních sítí &mdash; s kým jsme spojeni.",
     "simplex-unique-overlay-card-1-p-3": "Tento design chrání soukromí těch, s kým komunikujete, skrývá ho před servery sítě SimpleX a před jakýmikoli pozorovateli. Pro skrytí své IP adresy před servery, můžete se <strong>připojit k serverům SimpleX přes Tor</strong>.",
     "simplex-unique-overlay-card-2-p-1": "Protože na síti SimpleX nemáte žádný identifikátor, nikdo vás nemůže kontaktovat pokud nenasdílíte jednorázovou nebo dočasnou uživatelskou adresu, jako QR kód nebo odkaz.",
@@ -101,7 +101,7 @@
     "simplex-unique-overlay-card-3-p-2": "End-to-end šifrované zprávy jsou dočasně uchovávány na přenosových serverech SimpleX, dokud nejsou přijaty, poté jsou trvale odstraněny.",
     "simplex-unique-overlay-card-3-p-3": "Na rozdíl od serverů federovaných sítí (e-mail, XMPP nebo Matrix) servery SimpleX neukládají uživatelské účty, pouze předávají zprávy, čímž chrání soukromí obou stran.",
     "simplex-unique-overlay-card-4-p-1": "Můžete <strong>použít SimpleX se svými vlastními servery</strong> a přesto komunikovat s lidmi, kteří používají přednastavené servery v aplikacích.",
-    "simplex-unique-overlay-card-4-p-3": "Pokud uvažujete o vývoji pro SimpleX síť, například chat bot pro uživatele aplikace SimpleX nebo integraci knihovny SimpleX chat do Vasí mobilní aplikace, prosím <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">buďte ve spojení</a> pro jakoukoli radu a podporu.",
+    "simplex-unique-overlay-card-4-p-3": "Pokud uvažujete o vývoji pro SimpleX síť, například chat bot pro uživatele aplikace SimpleX nebo integraci knihovny SimpleX chat do Vasí mobilní aplikace, prosím <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">buďte ve spojení</a> pro jakoukoli radu a podporu.",
     "simplex-unique-card-1-p-1": "SimpleX chrání soukromí vašeho profilu, kontaktů a metadat a skrývá je před servery SimpleX sítě a jakýmikoli pozorovateli.",
     "simplex-unique-card-1-p-2": "Na rozdíl od jakékoli jiné existující síti pro zasílání zpráv nemá SimpleX žádné identifikátory přiřazené uživatelům &mdash; <strong>ani náhodná čísla</strong>.",
     "simplex-unique-card-3-p-1": "SimpleX Chat ukládá všechna uživatelská data pouze na klientských zařízeních pomocí <strong>přenosného šifrovaného databázového formátu</strong>, který lze exportovat a přenést na jakékoli podporované zařízení.",
@@ -181,14 +181,14 @@
     "privacy-matters-overlay-card-1-p-4": "SimpleX síť chrání soukromí vašich připojení lépe než jakákoli jiná alternativa a plně zabraňuje tomu, aby byl váš sociální graf dostupný všem společnostem nebo organizacím. I když lidé používají servery přednastavené v aplikaci SimpleX Chat, operátoři serverů neznají počet uživatelů ani jejich připojení.",
     "privacy-matters-overlay-card-2-p-2": "Chcete-li být objektivní a činit nezávislá rozhodnutí, musíte mít svůj informační prostor pod kontrolou. Je to možné pouze v případě, že používáte soukromou komunikační síť, která nemá přístup k vašemu sociálnímu grafu.",
     "simplex-unique-overlay-card-1-p-2": "K doručování zpráv SimpleX používá <a href=\"https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier\">párové anonymní adresy</a> jednosměrných front zpráv, oddělených pro přijaté a odeslané zprávy, obvykle přes různé servery.",
-    "privacy-matters-overlay-card-3-p-2": "Jedním z nejvíce šokujících příběhů je zkušenost <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedoua Oulda Salahiho</a> popsaná v jeho pamětech a zobrazená v Mauritánském filmu. Byl umístěn do tábora na Guantánamu bez soudu a byl tam 15 let mučen po telefonátu svému příbuznému v Afghánistánu pro podezření z účasti na útocích z 11. září, i když předchozích 10 let žil v Německu.",
+    "privacy-matters-overlay-card-3-p-2": "Jedním z nejvíce šokujících příběhů je zkušenost <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedoua Oulda Salahiho</a> popsaná v jeho pamětech a zobrazená v Mauritánském filmu. Byl umístěn do tábora na Guantánamu bez soudu a byl tam 15 let mučen po telefonátu svému příbuznému v Afghánistánu pro podezření z účasti na útocích z 11. září, i když předchozích 10 let žil v Německu.",
     "simplex-unique-overlay-card-1-p-1": "Na rozdíl od jiných sítí pro zasílání zpráv nemá SimpleX <strong>žádné identifikátory přiřazené uživatelům</strong>. Nespoléhá na telefonní čísla, adresy založené na doméně (jako e-mail nebo XMPP), uživatelská jména, veřejné klíče nebo dokonce náhodná čísla k identifikaci svých uživatelů &mdash; Operátoři SimpleX serverů neví, kolik lidí používá jejich servery.",
     "invitation-hero-header": "Byl vám zaslán odkaz pro připojení na SimpleX Chat",
     "simplex-unique-overlay-card-3-p-1": "SimpleX Chat ukládá všechna uživatelská data pouze na klientských zařízeních pomocí <strong>přenosného šifrovaného databázového formátu</strong>, který lze exportovat a přenést na jakékoli podporované zařízení.",
     "contact-hero-p-1": "Veřejné klíče a adresa fronty zpráv v tomto odkazu NEJSOU při zobrazení této stránky odesílány přes síť &mdash; jsou obsaženy ve fragmentu kontrolního součtu adresy URL odkazu.",
     "simplex-unique-overlay-card-3-p-4": "Mezi odeslaným a přijatým provozem serveru nejsou žádné společné identifikátory ani šifrovaný text &mdash; pokud to někdo pozoruje, nemůže snadno určit, kdo s kým komunikuje, i když je TLS kompromitován.",
     "simplex-unique-card-2-p-1": "Protože na SimpleX síti nemáte žádný identifikátor nebo pevnou adresu, nikdo vás nemůže kontaktovat pokud nenasdílíte jednorázovou nebo dočasnou uživatelskou adresu, jako QR kód nebo odkaz.",
-    "simplex-unique-overlay-card-4-p-2": "SimpleX síť používá <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">otevřený protokol</a> a poskytuje <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK k vytváření chat botů</a>, což umožní implementaci služeb, díky nimž boudou moci uživatelé komunikovat prostřednictvím aplikací SimpleX Chat &mdash; Opravdu se těšíme, jaké služby SimpleX vytvoříte.",
+    "simplex-unique-overlay-card-4-p-2": "SimpleX síť používá <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">otevřený protokol</a> a poskytuje <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK k vytváření chat botů</a>, což umožní implementaci služeb, díky nimž boudou moci uživatelé komunikovat prostřednictvím aplikací SimpleX Chat &mdash; Opravdu se těšíme, jaké služby SimpleX vytvoříte.",
     "simplex-network": "SimpleX síť",
     "simplex-explained-tab-2-p-1": "Pro každé připojení používáte dvě samostatné fronty zasílání zpráv k odesílání a přijímání zpráv prostřednictvím různých serverů.",
     "simplex-explained-tab-1-p-1": "Můžete vytvářet kontakty a skupiny a vést obousměrné konverzace, stejně jako v jakémkoli jiném messengeru.",
@@ -201,7 +201,7 @@
     "simplex-private-8-title": "Smíchání zpráv<br>ke snížení korelace",
     "simplex-unique-1-overlay-1-title": "Úplné soukromí vaší identity, profilu, kontaktů a metadat",
     "simplex-private-card-2-point-1": "Další vrstva šifrování serveru pro doručení příjemci, aby se zabránilo korelaci mezi přijatým a odeslaným serverovým provozem, pokud je protokol TLS ohrožen.",
-    "simplex-private-card-4-point-2": "Pro použití SimpleX přes Tor prosím nainstalujte <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot aplikaci</a> a povolte SOCKS5 proxy (nebo VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">na iOS</a>).",
+    "simplex-private-card-4-point-2": "Pro použití SimpleX přes Tor prosím nainstalujte <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot aplikaci</a> a povolte SOCKS5 proxy (nebo VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">na iOS</a>).",
     "simplex-private-card-5-point-1": "SimpleX používá odsazení obsahu pro každou šifrovací vrstvu, aby zmařil útoky na velikost zprávy.",
     "simplex-private-card-6-point-2": "Aby se tomu zabránilo, aplikace SimpleX předávají jednorázové klíče mimo pásmo, když sdílíte adresu jako odkaz nebo QR kód.",
     "simplex-private-card-8-point-1": "Servery SimpleX fungují jako smíšené uzly s nízkou latencí &mdash; příchozí a odchozí zprávy mají různá pořadí.",
@@ -262,7 +262,13 @@
     "navbar-token": "Token",
     "index-hero-h1": "<div class=\"small\">Žijte<br>svobodně</dev>",
     "index-hero-h2": "Ve Své Síti",
-    "index-hero-p1": "První síť bez uživatelských ID.<br>Vaše kontakty, skupiny a kanály patří vám.",
+    "index-hero-p1": "<span class=\"nowrap\">Jediná síť pro zasílání zpráv</span> <span class=\"nowrap\">bez jakýchkoli uživatelských identifikátorů.</span><br>Vaše kontakty, skupiny a kanály patří vám.",
+    "index-hero-own-part": "Vlastněte její část.",
+    "index-hero-invest": "Investujte do SimpleX Chat.",
+    "index-hero-downloads": "Stažení",
+    "index-hero-monthly-users": "Uživatelů měsíčně",
+    "index-hero-countdown-lead": "Spuštění domén SimpleX",
+    "index-hero-countdown-done": "Získejte doménu SimpleX",
     "index-hero-download-desktop-btn-title": "Stáhněte si desktopovou aplikaci SimpleX",
     "index-testflight-title": "Beta verze SimpleX pro iOS na TestFlight",
     "index-f-droid-title": "Stáhnout aplikaci SimpleX přes F-Droid",
@@ -300,7 +306,7 @@
     "index-roadmap-3-title": "Pomozte své komunitě růst",
     "index-roadmap-3-desc": "Nástroje na podporu vašich komunit",
     "index-directory-h2": "Zapojte se do komunit SimpleX",
-    "index-directory-p1": "Více než 2 miliony lidí si stáhly aplikace SimpleX.",
+    "index-directory-p1": "Více než 3 miliony lidí si stáhly aplikace SimpleX.",
     "index-directory-p2": "Najděte své kanály a komunity v katalogu a vytvořte si vlastní!",
     "index-directory-cta": "Zobrazit katalog SimpleX",
     "index-directory-users-group-title": "Uživatelské skupiny SimpleX",
@@ -375,5 +381,6 @@
     "send-file": "Odeslat soubor",
     "links": "Odkazy",
     "links-title": "Komunitní odkazy",
-    "links-all-languages": "Všechny jazyky"
+    "links-all-languages": "Všechny jazyky",
+    "why-film": "Podívejte se na 2minutový film na YouTube"
 }
diff --git a/website/langs/de.json b/website/langs/de.json
index ac35879b3a..dcf17e443f 100644
--- a/website/langs/de.json
+++ b/website/langs/de.json
@@ -62,7 +62,7 @@
     "simplex-private-card-3-point-2": "Server-Fingerabdrücke und Kanalbindung verhindern MITM- und Replay-Angriffe.",
     "simplex-private-card-3-point-3": "Die Wiederaufnahme von Verbindungen ist deaktiviert, um Sitzungs-Angriffe zu verhindern.",
     "simplex-private-card-4-point-1": "Um Ihre IP-Adresse zu schützen, können Sie per Tor oder irgendeinem anderen Transportschichten-Netzwerk auf Server zugreifen.",
-    "simplex-private-card-4-point-2": "Um SimpleX per Tor zu nutzen, installieren Sie unter Android bitte die <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot-App</a> und aktivieren Sie den SOCKS5-Proxy oder <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">unter iOS</a> per VPN.",
+    "simplex-private-card-4-point-2": "Um SimpleX per Tor zu nutzen, installieren Sie unter Android bitte die <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot-App</a> und aktivieren Sie den SOCKS5-Proxy oder <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">unter iOS</a> per VPN.",
     "simplex-private-card-5-point-1": "SimpleX nutzt Inhalteauffüllung für jede Verschlüsselungs-Schicht, um Angriffe auf die Nachrichtengröße zu vereiteln.",
     "simplex-private-card-5-point-2": "Erzeugt Nachrichten mit unterschiedlichen Größen, die für Server und Netzwerk-Beobachter identisch aussehen.",
     "simplex-private-card-6-point-1": "Viele Kommunikations-Netzwerke sind für MITM-Angriffe durch Server oder Netzwerk-Anbieter anfällig.",
@@ -93,7 +93,7 @@
     "simplex-private-card-8-point-1": "Die SimpleX-Server arbeiten als Mix-Knoten mit geringer Verzögerung &mdash; eingehende und ausgehende Nachrichten haben eine unterschiedliche Reihenfolge.",
     "hero-overlay-card-1-p-3": "Sie definieren, welche(n) Server Sie für den Empfang von Nachrichten nutzen. Ihre Kontakte &mdash; nutzen diese Server, um ihnen Nachrichten darüber zu senden. Jede Konversation nutzt üblicherweise also zwei unterschiedliche Server.",
     "hero-overlay-card-1-p-5": "Die Benutzer-Profile, Kontakte und Gruppen werden nur auf den Endgerät des Nutzers gespeichert. Die Nachrichten werden mit einer 2-Schichten-Ende-zu-Ende-Verschlüsselung versendet.",
-    "hero-overlay-card-1-p-6": "Lesen Sie mehr darüber im <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX Whitepaper</a>.",
+    "hero-overlay-card-1-p-6": "Lesen Sie mehr darüber im <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX Whitepaper</a>.",
     "hero-overlay-card-2-p-2": "Sie können diese Informationen mit bestehenden öffentlichen sozialen Netzwerken korrelieren und damit wahre Identitäten herausfinden.",
     "hero-overlay-card-2-p-3": "Wenn Sie sich mit zwei unterschiedlichen Kontakten über dasselbe Profil unterhalten, können sie, selbst bei sehr auf Privatsphäre bedachten Apps, die Tor-v3-Dienste nutzen, feststellen, dass diese Kontakte mit derselben Person verbunden sind.",
     "hero-overlay-card-1-p-2": "Um Nachrichten auszuliefern, nutzt SimpleX statt Benutzerkennungen wie alle anderen Netzwerke nur temporäre, anonyme und paarweise Kennungen für Nachrichten-Warteschlangen, die für jede Ihrer Verbindungen unterschiedlich sind &mdash; es gibt keinerlei Langzeit-Kennungen.",
@@ -106,7 +106,7 @@
     "simplex-network-overlay-card-1-li-6": "P2P-Netzwerke können anfällig für <a href=\"https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent\">DRDoS-Angriffe</a> sein, wenn die Clients den Datenverkehr erneut senden und verstärken können, was zu einem netzwerkweiten Denial-of-Service führt. SimpleX-Clients leiten nur Datenverkehr von bekannten Verbindungen weiter und können von einem Angreifer nicht dazu verwendet werden, den Datenverkehr im gesamten Netzwerk zu verstärken.",
     "privacy-matters-overlay-card-1-p-1": "Viele große Unternehmen nutzen Informationen, mit wem Sie in Verbindung stehen, um Ihr Einkommen zu schätzen, Ihnen Produkte zu verkaufen, die Sie nicht wirklich benötigen und um die Preise zu bestimmen.",
     "privacy-matters-overlay-card-1-p-2": "Online-Händler wissen, dass Menschen mit geringerem Einkommen eher dringende Einkäufe tätigen, sodass sie möglicherweise höhere Preise verlangen können oder Rabatte streichen.",
-    "privacy-matters-overlay-card-1-p-3": "Einige Finanz- und Versicherungsunternehmen verwenden soziale Graphen, um Zinssätze und Prämien zu ermitteln. Menschen mit niedrigerem Einkommen zahlen so häufig mehr &mdash; dies ist als <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">\"Armutsprämie\"</a> bekannt.",
+    "privacy-matters-overlay-card-1-p-3": "Einige Finanz- und Versicherungsunternehmen verwenden soziale Graphen, um Zinssätze und Prämien zu ermitteln. Menschen mit niedrigerem Einkommen zahlen so häufig mehr &mdash; dies ist als <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">\"Armutsprämie\"</a> bekannt.",
     "privacy-matters-overlay-card-2-p-2": "Um objektiv zu sein und unabhängige Entscheidungen treffen zu können, müssen Sie die Kontrolle über Ihren Informationsraum haben. Dies ist nur möglich, wenn Sie ein privates Kommunikations-Netzwerk verwenden, welches keinen Zugriff auf Ihren sozialen Graphen hat.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX ist das erste Netzwerk, das konzeptionell ohne Benutzerkennungen auskommt und dadurch Ihren Verbindungsgraphen besser schützt als jede bekannte Alternative.",
     "privacy-matters-overlay-card-3-p-1": "Jede Person sollte sich um ihre Privatsphäre und die Sicherheit ihrer Kommunikation kümmern &mdash; Harmlose Gespräche könnten Sie in Gefahr bringen, selbst wenn Sie nichts zu verbergen haben.",
@@ -176,8 +176,8 @@
     "comparison-section-list-point-7": "P2P-Netzwerke haben entweder eine zentrale Verwaltung oder das gesamte Netzwerk kann kompromittiert werden",
     "see-here": "Siehe hier",
     "simplex-unique-card-4-p-1": "Das SimpleX-Netzwerk ist vollständig dezentralisiert und unabhängig von Kryptowährungen oder anderen Netzwerken außer dem Internet.",
-    "privacy-matters-overlay-card-2-p-1": "Vor nicht allzu langer Zeit beobachteten wir, wie große Wahlen von einem <a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\">angesehenen Beratungsunternehmen</a> manipuliert wurden, welches unsere sozialen Graphen nutzte, um unsere Sicht auf die reale Welt zu verzerren und unsere Stimmen zu manipulieren.",
-    "privacy-matters-overlay-card-3-p-2": "Eine der schockierendsten Geschichten ist die Erfahrung von <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedou Ould Salahi</a>, welche in seinen Memoiren beschrieben und im Film „The Mauritanian“ gezeigt wird. Er kam nach einem Anruf bei seinen Verwandten in Afghanistan und ohne Gerichtsverfahren in das Guantanamo-Lager und wurde dort einige Jahre lang gefoltert, weil er verdächtigt wurde, an den 9/11-Angriffen beteiligt gewesen zu sein, obwohl er die vorhergehenden 10 Jahre in Deutschland gelebt hatte.",
+    "privacy-matters-overlay-card-2-p-1": "Vor nicht allzu langer Zeit beobachteten wir, wie große Wahlen von einem <a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\" rel=\"noopener\">angesehenen Beratungsunternehmen</a> manipuliert wurden, welches unsere sozialen Graphen nutzte, um unsere Sicht auf die reale Welt zu verzerren und unsere Stimmen zu manipulieren.",
+    "privacy-matters-overlay-card-3-p-2": "Eine der schockierendsten Geschichten ist die Erfahrung von <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedou Ould Salahi</a>, welche in seinen Memoiren beschrieben und im Film „The Mauritanian“ gezeigt wird. Er kam nach einem Anruf bei seinen Verwandten in Afghanistan und ohne Gerichtsverfahren in das Guantanamo-Lager und wurde dort einige Jahre lang gefoltert, weil er verdächtigt wurde, an den 9/11-Angriffen beteiligt gewesen zu sein, obwohl er die vorhergehenden 10 Jahre in Deutschland gelebt hatte.",
     "simplex-unique-overlay-card-1-p-1": "Im Gegensatz zu anderen Nachrichten-Netzwerken weist SimpleX <strong>den Benutzern keine Kennungen</strong> zu. Es verlässt sich nicht auf Telefonnummern, domänenbasierte Adressen (wie E-Mail oder XMPP), Benutzernamen, öffentliche Schlüssel oder Zufallszahlen, um seine Benutzer zu identifizieren &mdash; selbst SimpleX Server-Betreiber wissen nicht, wie viele Personen deren Server verwenden.",
     "simplex-unique-overlay-card-1-p-2": "Um Nachrichten auszuliefern nutzt SimpleX <a href=\"https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier\">paarweise anonyme Adressen</a> aus unidirektionalen Nachrichten-Warteschlangen, die für empfangene und gesendete Nachrichten separiert sind und gewöhnlich über verschiedene Server gesendet werden.",
     "simplex-network-overlay-card-1-li-5": "Alle bekannten P2P-Netzwerke können anfällig für <a href=\"https://en.wikipedia.org/wiki/Sybil_attack\">Sybil-Angriffe</a> sein, da jeder Knoten ermittelbar ist und das Netzwerk als Ganzes funktioniert. Bekannte Maßnahmen zur Verhinderung erfordern entweder eine zentralisierte Komponente oder einen teuren <a href=\"https://en.wikipedia.org/wiki/Proof_of_work\">Ausführungsnachweis</a>. Das SimpleX-Netzwerk bietet keine Ermittlung der Server, ist fragmentiert und arbeitet mit mehreren isolierten Subnetzwerken, wodurch netzwerkweite Angriffe unmöglich werden.",
@@ -197,14 +197,14 @@
     "comparison-section-list-point-5": "Die Privatsphäre-Metadaten des Nutzers werden nicht geschützt",
     "simplex-network-overlay-card-1-li-1": "P2P-Netzwerke vertrauen auf Varianten von <a href=\"https://en.wikipedia.org/wiki/Distributed_hash_table\">DHT</a>, um Nachrichten zu routen. DHT-Designs müssen zwischen Zustellungsgarantie und Latenz ausgleichen. Verglichen mit P2P bietet SimpleX sowohl eine bessere Zustellungsgarantie als auch eine niedrigere Latenz, weil eine Nachricht redundant und parallel über mehrere Server gesendet werden kann, wobei die durch den Empfänger ausgewählten Server genutzt werden. In P2P-Netzwerken werden Nachrichten sequentiell über <em>O(log N)</em>-Knoten gesendet, wobei die Knoten durch einen Algorithmus ausgewählt werden.",
     "simplex-unique-overlay-card-3-p-4": "Zwischen dem gesendeten und dem empfangenen Serververkehr gibt es keine gemeinsamen Kennungen oder Chiffriertexte &mdash; sodass ein Beobachter nicht ohne weiteres feststellen kann, wer mit wem kommuniziert, selbst wenn TLS kompromittiert wurde.",
-    "simplex-unique-overlay-card-4-p-3": "Falls Sie Interesse daran haben, aktiv bei der Entwicklung des SimpleX-Netzwerks mitzuhelfen, z.B. einen Chatbot für SimpleX App-Nutzer zu entwickeln oder die Integration der SimpleX Chat-Bibliothek in mobile Apps voranzutreiben, <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">kontaktieren Sie uns bitte</a> für eine weitere Beratung und Unterstützung.",
+    "simplex-unique-overlay-card-4-p-3": "Falls Sie Interesse daran haben, aktiv bei der Entwicklung des SimpleX-Netzwerks mitzuhelfen, z.B. einen Chatbot für SimpleX App-Nutzer zu entwickeln oder die Integration der SimpleX Chat-Bibliothek in mobile Apps voranzutreiben, <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">kontaktieren Sie uns bitte</a> für eine weitere Beratung und Unterstützung.",
     "privacy-matters-overlay-card-1-p-4": "Das SimpleX-Netzwerk schützt die Privatsphäre Ihrer Verbindungen besser als jede Alternative und verhindert vollständig, dass Ihr sozialer Graph für Unternehmen oder Organisationen einsehbar wird. Selbst wenn Anwender die in der SimpleX Chat-App vorkonfigurierten Server verwenden, kennen die Server-Betreiber die Anzahl der Benutzer oder deren Verbindungen nicht.",
     "contact-hero-header": "Sie haben eine Adresse zur Verbindung mit SimpleX Chat erhalten",
     "invitation-hero-header": "Sie haben einen Einmal-Link zur Verbindung mit SimpleX Chat erhalten",
-    "privacy-matters-overlay-card-3-p-3": "<a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">Selbst in demokratischen Ländern</a> werden normale Menschen, auch unter Nutzung ihrer „anonymen“ Benutzerkonten, für das, was sie online teilen, verhaftet.",
+    "privacy-matters-overlay-card-3-p-3": "<a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">Selbst in demokratischen Ländern</a> werden normale Menschen, auch unter Nutzung ihrer „anonymen“ Benutzerkonten, für das, was sie online teilen, verhaftet.",
     "simplex-unique-overlay-card-3-p-1": "SimpleX Chat speichert alle Benutzerdaten ausschließlich auf den Endgeräten in einem <strong>portablen und verschlüsselten Datenbankformat</strong>, welches exportiert und auf jedes unterstützte Gerät übertragen werden kann.",
     "simplex-unique-overlay-card-2-p-2": "Auch wenn die optionale Benutzeradresse zum Versenden von Spam-Kontaktanfragen verwendet werden kann, können Sie sie ändern oder ganz löschen, ohne dass Ihre Verbindungen verloren gehen.",
-    "simplex-unique-overlay-card-4-p-2": "Das SimpleX-Netzwerk verwendet ein <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">offenes Protokoll</a> und bietet ein <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK zur Erstellung von Chatbots</a> an. Dies ermöglicht die Erstellung von Diensten, mit denen Nutzer über SimpleX Chat-Apps interagieren können &mdash; wir freuen uns sehr darauf zu sehen, welche SimpleX-Dienste Sie entwickeln werden.",
+    "simplex-unique-overlay-card-4-p-2": "Das SimpleX-Netzwerk verwendet ein <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">offenes Protokoll</a> und bietet ein <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK zur Erstellung von Chatbots</a> an. Dies ermöglicht die Erstellung von Diensten, mit denen Nutzer über SimpleX Chat-Apps interagieren können &mdash; wir freuen uns sehr darauf zu sehen, welche SimpleX-Dienste Sie entwickeln werden.",
     "simplex-unique-card-4-p-2": "Sie können <strong>SimpleX mit eigenen Servern</strong> oder mit den von uns zur Verfügung gestellten Servern verwenden &mdash; und sich trotzdem mit jedem Benutzer verbinden.",
     "why-simplex-is-unique": "Warum ist SimpleX <span class=\"gradient-text\">einmalig</span>",
     "contact-hero-p-1": "Die öffentlichen Schlüssel und die Adresse der Nachrichtenwarteschlange in diesem Link werden NICHT über das Netzwerk gesendet, wenn Sie diese Seite aufrufen &mdash; sie sind in dem Hash-Fragment der Link-URL enthalten.",
@@ -261,7 +261,12 @@
     "directory": "Verzeichnis",
     "index-hero-h1": "Sei<br>frei",
     "index-hero-h2": "In Deinem Netzwerk",
-    "index-hero-p1": "Das erste Netzwerk ohne Benutzer-IDs.<br>Ihre Kontakte, Gruppen und Kanäle gehören Ihnen.",
+    "index-hero-p1": "<span class=\"nowrap\">Das einzige Messaging-Netzwerk</span> <span class=\"nowrap\">ohne jegliche Benutzerkennungen.</span><br>Ihre Kontakte, Gruppen und Kanäle gehören Ihnen.",
+    "index-hero-own-part": "Besitzen Sie einen Teil davon.",
+    "index-hero-downloads": "Downloads",
+    "index-hero-monthly-users": "Monatliche Nutzer",
+    "index-hero-countdown-lead": "Start der SimpleX-Domains",
+    "index-hero-countdown-done": "SimpleX-Domain sichern",
     "index-hero-download-desktop-btn-title": "Download der SimpleX Desktop-App",
     "index-testflight-title": "Öffentlicher iOS-Preview auf TestFlight",
     "index-f-droid-title": "SimpleX-App über das F-Droid-Repository",
@@ -299,7 +304,7 @@
     "index-roadmap-3-title": "Lassen Sie Ihre Communitys wachsen",
     "index-roadmap-3-desc": "Tools zur Förderung Ihrer Communitys",
     "index-directory-h2": "Treten Sie SimpleX-Communitys bei",
-    "index-directory-p1": "Mehr als 2 Millionen Nutzer haben schon SimpleX-Apps heruntergeladen.",
+    "index-directory-p1": "Mehr als 3 Millionen Nutzer haben schon SimpleX-Apps heruntergeladen.",
     "index-directory-p2": "Finden Sie Kanäle und Communitys im Verzeichnis oder erstellen Sie Ihre Eigenen!",
     "index-directory-cta": "SimpleX-Verzeichnis anzeigen",
     "index-directory-users-group-title": "SimpleX-Nutzergruppe",
@@ -378,5 +383,28 @@
     "links-all-languages": "Alle Sprachen",
     "docs-dropdown-16": "Ein Chat-Relais hosten",
     "index-hero-invest": "Investieren Sie in SimpleX Chat.",
-    "index-hero-invest-cta": "Erfahren Sie mehr auf Wefunder."
+    "index-hero-invest-cta": "Erfahren Sie mehr auf Wefunder.",
+    "downloads-h1": "SimpleX Chat herunterladen",
+    "downloads-lead-1": "Das einzige Messaging-Netzwerk ohne jegliche Benutzerkennungen.",
+    "downloads-lead-2": "Kostenlos, quelloffen, dezentral.",
+    "downloads-lead-device": "Ihr Profil ist nur auf Ihrem Gerät.",
+    "downloads-lead-phone": "Ihr Profil ist nur auf Ihrem Smartphone.",
+    "downloads-for-mac": "Für macOS herunterladen",
+    "downloads-for-windows": "Für Windows herunterladen",
+    "downloads-for-linux": "Für Linux herunterladen",
+    "downloads-beta": "Beta",
+    "downloads-more": "Mehr",
+    "downloads-other-devices": "Andere Geräte",
+    "downloads-all-h2": "Alle Downloads",
+    "downloads-desktop": "Desktop",
+    "downloads-terminal": "Terminal",
+    "downloads-terminal-desc": "Kommandozeilen-App für Server, Bots und Entwickler.",
+    "downloads-terminal-guide": "Die Terminal-App verwenden",
+    "downloads-phone": "Smartphone",
+    "downloads-link-desktop": "Sie können Ihr Smartphone mit der Desktop-App verbinden, um dasselbe Profil zu nutzen, wenn beide im selben lokalen Netzwerk sind.",
+    "downloads-advanced-h2": "Für fortgeschrittene Nutzer",
+    "downloads-github": "Alle Releases auf GitHub",
+    "downloads-mirror": "Spiegel: git.simplex.chat",
+    "downloads-fdroid-repo": "F-Droid-Repository",
+    "why-film": "Sehen Sie sich den 2-minütigen Film auf YouTube an"
 }
diff --git a/website/langs/en.json b/website/langs/en.json
index 24dde29b39..fba4892e9a 100644
--- a/website/langs/en.json
+++ b/website/langs/en.json
@@ -66,7 +66,7 @@
     "simplex-private-card-3-point-2": "Server fingerprint and channel binding prevent MITM and replay attacks.",
     "simplex-private-card-3-point-3": "Connection resumption is disabled to prevent session attacks.",
     "simplex-private-card-4-point-1": "To protect your IP address you can access the servers via Tor or some other transport overlay network.",
-    "simplex-private-card-4-point-2": "To use SimpleX via Tor please install <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot app</a> and enable SOCKS5 proxy (or VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">on iOS</a>).",
+    "simplex-private-card-4-point-2": "To use SimpleX via Tor please install <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot app</a> and enable SOCKS5 proxy (or VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">on iOS</a>).",
     "simplex-private-card-5-point-1": "SimpleX uses content padding for each encryption layer to frustrate message size attacks.",
     "simplex-private-card-5-point-2": "It makes messages of different sizes look the same to the servers and network observers.",
     "simplex-private-card-6-point-1": "Many communication networks are vulnerable to MITM attacks by servers or network providers.",
@@ -100,7 +100,7 @@
     "hero-overlay-card-1-p-3": "You define which server(s) to use to receive the messages, your contacts &mdash; the servers you use to send the messages to them. Every conversation is likely to use two different servers.",
     "hero-overlay-card-1-p-4": "This design prevents leaking any users&apos; metadata on the application level. To further improve privacy and protect your IP address you can connect to messaging servers via Tor.",
     "hero-overlay-card-1-p-5": "Only client devices store user profiles, contacts and groups; the messages are sent with 2-layer end-to-end encryption.",
-    "hero-overlay-card-1-p-6": "Read more in <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX whitepaper</a>.",
+    "hero-overlay-card-1-p-6": "Read more in <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX whitepaper</a>.",
     "hero-overlay-card-2-p-1": "When users have persistent identities, even if this is just a random number, like a Session ID, there is a risk that the provider or an attacker can observe how the users are connected and how many messages they send.",
     "hero-overlay-card-2-p-2": "They could then correlate this information with the existing public social networks, and determine some real identities.",
     "hero-overlay-card-2-p-3": "Even with the most private apps that use Tor v3 services, if you talk to two different contacts via the same profile they can prove that they are connected to the same person.",
@@ -117,14 +117,14 @@
     "simplex-network-overlay-card-1-li-6": "P2P networks may be vulnerable to <a href=\"https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent\">DRDoS attack</a>, when the clients can rebroadcast and amplify traffic, resulting in network-wide denial of service. SimpleX clients only relay traffic from known connections and cannot be used by an attacker to amplify the traffic in the whole network.",
     "privacy-matters-overlay-card-1-p-1": "Many large companies use information about who you are connected with to estimate your income, sell you the products you don&apos;t really need, and to determine the prices.",
     "privacy-matters-overlay-card-1-p-2": "Online retailers know that people with lower incomes are more likely to make urgent purchases, so they may charge higher prices or remove discounts.",
-    "privacy-matters-overlay-card-1-p-3": "Some financial and insurance companies use social graphs to determine interest rates and premiums. It often makes people with lower incomes pay more &mdash; it is known as <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">\"poverty premium\"</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Some financial and insurance companies use social graphs to determine interest rates and premiums. It often makes people with lower incomes pay more &mdash; it is known as <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">\"poverty premium\"</a>.",
     "privacy-matters-overlay-card-1-p-4": "SimpleX network protects the privacy of your connections better than any alternative, fully preventing your social graph from becoming available to any companies or organizations. Even when people use servers preconfigured in SimpleX Chat apps, server operators do not know the number of users or their connections.",
-    "privacy-matters-overlay-card-2-p-1": "Not so long ago we observed the major elections being manipulated by <a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\">a reputable consulting company</a> that used our social graphs to distort our view of the real world and manipulate our votes.",
+    "privacy-matters-overlay-card-2-p-1": "Not so long ago we observed the major elections being manipulated by <a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\" rel=\"noopener\">a reputable consulting company</a> that used our social graphs to distort our view of the real world and manipulate our votes.",
     "privacy-matters-overlay-card-2-p-2": "To be objective and to make independent decisions you need to be in control of your information space. It is only possible if you use a private communication network that does not have access to your social graph.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX is the first network that doesn&apos;t have any user identifiers by design, in this way protecting your connections graph better than any known alternative.",
     "privacy-matters-overlay-card-3-p-1": "Everyone should care about privacy and security of their communications &mdash; harmless conversations can put you in danger, even if you have nothing to hide.",
-    "privacy-matters-overlay-card-3-p-2": "One of the most shocking stories is the experience of <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedou Ould Salahi</a> described in his memoir and shown in The Mauritanian movie. He was put into Guantanamo camp, without trial, and was tortured there for 15 years after a phone call to his relative in Afghanistan, under suspicion of being involved in 9/11 attacks, even though he lived in Germany for the previous 10 years.",
-    "privacy-matters-overlay-card-3-p-3": "Ordinary people get arrested for what they share online, even via their \"anonymous\" accounts, <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">even in democratic countries</a>.",
+    "privacy-matters-overlay-card-3-p-2": "One of the most shocking stories is the experience of <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedou Ould Salahi</a> described in his memoir and shown in The Mauritanian movie. He was put into Guantanamo camp, without trial, and was tortured there for 15 years after a phone call to his relative in Afghanistan, under suspicion of being involved in 9/11 attacks, even though he lived in Germany for the previous 10 years.",
+    "privacy-matters-overlay-card-3-p-3": "Ordinary people get arrested for what they share online, even via their \"anonymous\" accounts, <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">even in democratic countries</a>.",
     "privacy-matters-overlay-card-3-p-4": "It is not enough to use an end-to-end encrypted messenger, we all should use the messengers that protect the privacy of our personal networks &mdash; who we are connected with.",
     "simplex-unique-overlay-card-1-p-1": "Unlike other messaging networks, SimpleX has <strong>no identifiers assigned to the users</strong>. It does not rely on phone numbers, domain-based addresses (like email or XMPP), usernames, public keys or even random numbers to identify its users &mdash; SimpleX server operators don&apos;t know how many people use their servers.",
     "simplex-unique-overlay-card-1-p-2": "To deliver messages SimpleX uses <a href=\"https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier\">pairwise anonymous addresses</a> of unidirectional message queues, separate for received and sent messages, usually via different servers.",
@@ -136,8 +136,8 @@
     "simplex-unique-overlay-card-3-p-3": "Unlike federated networks servers (email, XMPP or Matrix), SimpleX servers don&apos;t store user accounts, they only relay messages, protecting the privacy of both parties.",
     "simplex-unique-overlay-card-3-p-4": "There are no identifiers or ciphertext in common between sent and received server traffic &mdash; if anybody is observing it, they cannot easily determine who communicates with whom, even if TLS is compromised.",
     "simplex-unique-overlay-card-4-p-1": "You can <strong>use SimpleX with your own servers</strong> and still communicate with people who use the servers preconfigured in the apps.",
-    "simplex-unique-overlay-card-4-p-2": "SimpleX network uses an <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">open protocol</a> and provides <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK to create chat bots</a>, allowing implementation of services that users can interact with via SimpleX Chat apps &mdash; we&apos;re really looking forward to seeing what SimpleX services you will build.",
-    "simplex-unique-overlay-card-4-p-3": "If you are considering developing for the SimpleX network, for example, the chat bot for SimpleX app users, or the integration of the SimpleX Chat library into your mobile apps, please <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">get in touch</a> for any advice and support.",
+    "simplex-unique-overlay-card-4-p-2": "SimpleX network uses an <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">open protocol</a> and provides <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK to create chat bots</a>, allowing implementation of services that users can interact with via SimpleX Chat apps &mdash; we&apos;re really looking forward to seeing what SimpleX services you will build.",
+    "simplex-unique-overlay-card-4-p-3": "If you are considering developing for the SimpleX network, for example, the chat bot for SimpleX app users, or the integration of the SimpleX Chat library into your mobile apps, please <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">get in touch</a> for any advice and support.",
     "simplex-unique-card-1-p-1": "SimpleX protects the privacy of your profile, contacts and metadata, hiding it from SimpleX network servers and any observers.",
     "simplex-unique-card-1-p-2": "Unlike any other existing messaging network, SimpleX has no identifiers assigned to the users &mdash; <strong>not even random numbers</strong>.",
     "simplex-unique-card-2-p-1": "Because you have no identifier or fixed address on the SimpleX network, nobody can contact you unless you share a one-time or temporary user address, as a QR code or a link.",
@@ -255,6 +255,7 @@
     "stable-and-beta-versions-built-by-developers": "Stable and beta versions built by the developers",
     "f-droid-page-simplex-chat-repo-section-text": "To add it to your F-Droid client, <span class=\"hide-on-mobile\">scan the QR code or</span> use this URL:",
     "signing-key-fingerprint": "Signing key fingerprint (SHA-256)",
+    "f-droid-page-apk-text": "Or download the APK directly:",
     "f-droid-org-repo": "F-Droid.org repo",
     "stable-versions-built-by-f-droid-org": "Stable versions built by F-Droid.org",
     "releases-to-this-repo-are-done-1-2-days-later": "The releases to this repo are done several days later",
@@ -264,9 +265,14 @@
     "please-use-link-in-mobile-app": "Please use the link in the mobile app",
     "index-hero-h1": "Be<br>Free",
     "index-hero-h2": "In Your Network",
-    "index-hero-p1": "The first network without user IDs.<br>You own your contacts, groups and channels.",
+    "index-hero-p1": "<span class=\"nowrap\">The only messaging network</span> <span class=\"nowrap\">without any user identifiers.</span><br>You own your contacts, groups and channels.",
     "index-hero-invest": "Invest in SimpleX Chat.",
     "index-hero-invest-cta": "Learn more on Wefunder.",
+    "index-hero-own-part": "Own a part of it.",
+    "index-hero-downloads": "Downloads",
+    "index-hero-monthly-users": "Monthly users",
+    "index-hero-countdown-lead": "SimpleX domains launch",
+    "index-hero-countdown-done": "Get SimpleX domain",
     "index-hero-download-desktop-btn-title": "Download SimpleX Desktop App",
     "index-testflight-title": "SimpleX iOS beta-release on TestFlight",
     "index-f-droid-title": "SimpleX app via F-Droid",
@@ -291,7 +297,7 @@
     "index-token-p2": "This will cover infrastructure, software development and network governance.",
     "index-token-cta": "Learn more about Community Credits",
     "index-token-p2-cf": "And the users can now invest in SimpleX Chat &mdash; the equity crowdfunding is live!",
-    "index-token-cta-cf": "Get a stake in SimpleX Chat",
+    "index-token-cta-cf": "Invest in SimpleX Chat",
     "index-roadmap-h2": "SimpleX Roadmap to Free Internet",
     "index-roadmap-now": "Now",
     "index-roadmap-1": "2026",
@@ -304,7 +310,7 @@
     "index-roadmap-3-title": "Make Your Communities Grow",
     "index-roadmap-3-desc": "Tools to promote your communities",
     "index-directory-h2": "Join SimpleX Communities",
-    "index-directory-p1": "More than 2 million people downloaded SimpleX apps.",
+    "index-directory-p1": "More than 3 million people downloaded SimpleX apps.",
     "index-directory-p2": "Find your channels and communities in directory and create your own!",
     "index-directory-cta": "View SimpleX Directory",
     "index-directory-users-group-title": "SimpleX users group",
@@ -331,7 +337,7 @@
     "why-p7": "The oldest human freedom &mdash; to speak to another person without being watched &mdash; built on infrastructure that cannot betray it.",
     "why-p8": "Because we destroyed the power to know who you are. So that <em>your</em> power can never be taken.",
     "why-tagline": "Be free in your network.",
-    "why-film": "Watch the film",
+    "why-film": "Watch 2-min film on YouTube",
     "why-footer-link": "Why we are building it",
     "send-file": "Send file",
     "file-desc": "Send files securely with end-to-end encryption — no accounts, no tracking.",
@@ -378,5 +384,27 @@
     "file-proto-spec": "Read the XFTP protocol specification →",
     "links": "Community",
     "links-title": "Community Links",
-    "links-all-languages": "All languages"
+    "links-all-languages": "All languages",
+    "downloads-h1": "Get SimpleX Chat",
+    "downloads-lead-1": "The only messaging network without any user identifiers.",
+    "downloads-lead-2": "Free, open-source, decentralized.",
+    "downloads-lead-device": "Your profile is only on your device.",
+    "downloads-lead-phone": "Your profile is only on your phone.",
+    "downloads-for-mac": "Download for macOS",
+    "downloads-for-windows": "Download for Windows",
+    "downloads-for-linux": "Download for Linux",
+    "downloads-beta": "Beta",
+    "downloads-more": "More",
+    "downloads-other-devices": "Other devices",
+    "downloads-all-h2": "All downloads",
+    "downloads-phone": "Phone",
+    "downloads-desktop": "Desktop",
+    "downloads-terminal": "Terminal",
+    "downloads-terminal-desc": "Command-line app for servers, bots and developers.",
+    "downloads-terminal-guide": "Using the terminal app",
+    "downloads-link-desktop": "You can link your phone to the desktop app to use the same profile, when both are on the same local network.",
+    "downloads-advanced-h2": "For advanced users",
+    "downloads-github": "All releases on GitHub",
+    "downloads-mirror": "Mirror: git.simplex.chat",
+    "downloads-fdroid-repo": "F-Droid repository"
 }
diff --git a/website/langs/es.json b/website/langs/es.json
index c5d4c5291e..5a0182add8 100644
--- a/website/langs/es.json
+++ b/website/langs/es.json
@@ -32,7 +32,7 @@
     "hero-p-1": "Las demás aplicaciones usan ID de usuario: Signal, Matrix, Session, Briar, Jami, Cwtch, etc.<br> SimpleX no los tiene, <strong>ni siquiera usa números aleatorios</strong>.<br> Esto mejora radicalmente tu privacidad.",
     "hero-2-header-desc": "El vídeo muestra cómo te conectas con tus amistades a través del código QR de un solo uso, en persona o a través de videollamada. También puedes conectarte compartiendo un enlace de invitación.",
     "feature-7-title": "Almacenamiento portable y cifrado, podrás transferir tu perfil a otro dispositivo",
-    "simplex-private-card-4-point-2": "Para usar SimpleX a través de Tor, instala la aplicación <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot</a> y activa el proxy SOCKS5 (o VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">en iOS</a>).",
+    "simplex-private-card-4-point-2": "Para usar SimpleX a través de Tor, instala la aplicación <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot</a> y activa el proxy SOCKS5 (o VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">en iOS</a>).",
     "simplex-private-card-3-point-1": "Para las conexiones cliente servidor se usan exclusivamente el protocolo TLS 1.2/1.3 con algoritmos robustos.",
     "simplex-private-card-4-point-1": "Para proteger tu dirección IP, puedes acceder a los servidores a través Tor u otra red superpuesta de transporte.",
     "simplex-private-card-5-point-2": "Esto hace que mensajes de distintos tamaños parezcan iguales desde el punto de vista de servidores y observadores de red.",
@@ -84,7 +84,7 @@
     "simplex-unique-4-title": "La red SimpleX te pertenece",
     "hero-overlay-card-1-p-1": "Muchos usuarios se preguntan: <em>si SimpleX no tiene identificadores de usuario, ¿cómo puede saber dónde entregar los mensajes?</em>",
     "hero-overlay-card-1-p-4": "Este diseño evita que se filtren metadatos de usuario a nivel de aplicación. Para mejorar aún más la privacidad y proteger tu dirección IP, puedes conectarte a los servidores de mensajería a través de la red Tor.",
-    "hero-overlay-card-1-p-6": "Encontrarás más información en el <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX whitepaper</a>.",
+    "hero-overlay-card-1-p-6": "Encontrarás más información en el <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX whitepaper</a>.",
     "hero-overlay-card-2-p-1": "Cuando los usuarios asumen identidades persistentes, aunque sólo se trate de un número aleatorio como un identificador de sesión, existe el riesgo de que el proveedor de red o un atacante puedan observar cómo se conectan y la cantidad de mensajes que envían.",
     "hero-overlay-card-2-p-2": "A continuación podrían correlacionar esta información con las redes sociales públicas existentes y averiguar las identidades reales de los usuarios.",
     "hero-overlay-card-2-p-3": "Incluso con las aplicaciones más privadas que usan los servicios de Tor v3, si hablas con dos contactos a través de un mismo perfil se puede probar que estos están conectados con la misma persona.",
@@ -105,7 +105,7 @@
     "simplex-network-overlay-card-1-li-3": "P2P no resuelve el problema del <a href=\"https://es.wikipedia.org/wiki/Ataque_de_intermediario\">ataque MITM</a> , y la mayoría de implementaciones existentes no usan mensajes fuera de banda para el intercambio de claves inicial. SimpleX usa mensajes fuera de banda, o en algunos casos conexiones seguras y de confianza preexistentes para el intercambio inicial de claves.",
     "simplex-network-overlay-card-1-li-4": "Algunos proveedores de Internet pueden bloquear las aplicaciones P2P (como <a href=\"https://en.wikipedia.org/wiki/BitTorrent\">BitTorrent</a>). SimpleX es independiente del transporte. Puede trabajar con protocolos web estándar, por ejemplo WebSockets.",
     "privacy-matters-overlay-card-1-p-4": "La red SimpleX protege la privacidad de tus conexiones mejor que cualquier alternativa, impidiendo por completo que tu gráfica social esté disponible para empresas u organizaciones. Incluso cuando se emplean los servidores configurados en SimpleX Chat, los operadores de servidores desconocen el número de usuarios o sus conexiones.",
-    "privacy-matters-overlay-card-2-p-1": "Hace poco vimos cómo las principales elecciones eran manipuladas por <a href=\"https://es.wikipedia.org/wiki/Escándalo_Facebook-Cambridge_Analytica\" target=\"_blank\">una reputada compañía consultora</a> que usaba nuestras gráficas sociales para distorsionar nuestra visión del mundo real y manipular nuestros votos.",
+    "privacy-matters-overlay-card-2-p-1": "Hace poco vimos cómo las principales elecciones eran manipuladas por <a href=\"https://es.wikipedia.org/wiki/Escándalo_Facebook-Cambridge_Analytica\" target=\"_blank\" rel=\"noopener\">una reputada compañía consultora</a> que usaba nuestras gráficas sociales para distorsionar nuestra visión del mundo real y manipular nuestros votos.",
     "privacy-matters-overlay-card-2-p-2": "Para ser objetivo y tomar decisiones independientes necesitas tener el controlar de tu espacio de información. Sólo es posible si usas una red de comunicaciónes privada que no tenga acceso a tu gráfica social.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX es la primera red que por diseño no tiene identificadores de usuario, protegiendo así tu gráfica de conexiones mejor que cualquier alternativa conocida.",
     "privacy-matters-overlay-card-3-p-1": "Todos deberían preocuparse por la privacidad y la seguridad de sus comunicaciones. Las conversaciones inofensivas pueden ponerte en peligro incluso aunque no tengas nada que ocultar.",
@@ -119,10 +119,10 @@
     "simplex-network-overlay-card-1-li-6": "Las redes P2P pueden ser vulnerables al <a href=\"https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent\">ataque DRDoS</a>, en el que los clientes retransmiten y amplifican el tráfico provocando el bloqueo del servicio en la red. Los clientes SimpleX sólo transmiten el tráfico desde conexiones conocidas y no pueden ser usados por un atacante para amplificar el tráfico en toda la red.",
     "privacy-matters-overlay-card-1-p-1": "Las grandes empresas usan la información relativa a tus contactos para calcular tus ingresos, venderte productos que realmente no necesitas y para determinar sus precios.",
     "privacy-matters-overlay-card-1-p-2": "Los minoristas en línea saben que las personas con menos ingresos son más propensas a hacer compras urgentes, por lo que pueden cobrar precios más altos o eliminar descuentos.",
-    "privacy-matters-overlay-card-1-p-3": "Algunas compañías financieras y de seguros usan las gráficas sociales para determinar primas y tipos de interés. Eso genera a menudo un mayor desembolso a personas con menores ingresos, conocido como <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">\"prima de pobreza\"</a>.",
-    "privacy-matters-overlay-card-3-p-2": "Una de las historias más estremecedoras es la experiencia de <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedou Ould Salahi</a> descrita en sus memorias y plasmada en la película The Mauritanian. Fue internado en la prisión militar de Guantánamo sin juicio previo, donde fue torturado durante 15 años tras una llamada telefónica a su pariente en Afganistán, bajo la sospecha de estar implicado en los atentados del 11-S a pesar de que vivía en Alemania desde hacía 10 años.",
+    "privacy-matters-overlay-card-1-p-3": "Algunas compañías financieras y de seguros usan las gráficas sociales para determinar primas y tipos de interés. Eso genera a menudo un mayor desembolso a personas con menores ingresos, conocido como <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">\"prima de pobreza\"</a>.",
+    "privacy-matters-overlay-card-3-p-2": "Una de las historias más estremecedoras es la experiencia de <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedou Ould Salahi</a> descrita en sus memorias y plasmada en la película The Mauritanian. Fue internado en la prisión militar de Guantánamo sin juicio previo, donde fue torturado durante 15 años tras una llamada telefónica a su pariente en Afganistán, bajo la sospecha de estar implicado en los atentados del 11-S a pesar de que vivía en Alemania desde hacía 10 años.",
     "privacy-matters-overlay-card-3-p-4": "No basta con usar mensajería cifrada de extremo a extremo, todos deberíamos usar las aplicaciones de mensajería que protejan la privacidad de nuestras redes personales y con quién nos comunicamos.",
-    "privacy-matters-overlay-card-3-p-3": "Personas corrientes son detenidas por lo que comparten en Internet, incluso a través de sus cuentas \"anónimas\" e <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">incluso en países democráticos</a>.",
+    "privacy-matters-overlay-card-3-p-3": "Personas corrientes son detenidas por lo que comparten en Internet, incluso a través de sus cuentas \"anónimas\" e <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">incluso en países democráticos</a>.",
     "simplex-unique-overlay-card-1-p-2": "Para la entrega de mensajes, SimpleX usa <a href=\"https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier\">direcciones anónimas por pares</a> de colas de mensajes unidireccionales separadas para mensajes salientes y entrantes a través de servidores diferentes.",
     "simplex-unique-overlay-card-3-p-1": "SimpleX Chat almacena todos los datos de usuario únicamente en los dispositivos cliente usando un <strong>formato cifrado y portable de la base de datos</strong>, la cual puede ser exportada y transferida a cualquier dispositivo compatible.",
     "simplex-unique-overlay-card-3-p-3": "A diferencia de los servidores de redes federadas (correo electrónico, XMPP o Matrix), los servidores SimpleX no almacenan cuentas de usuario, sólo retransmiten mensajes, protegiendo así la privacidad de ambas partes.",
@@ -185,8 +185,8 @@
     "comparison-section-list-point-6": "A pesar de que las redes P2P son distribuidas, no son federadas. Funcionan como una única red",
     "comparison-section-list-point-7": "Las redes P2P, o bien disponen de una autoridad central, o bien la red completa podría verse comprometida",
     "see-here": "ver aquí",
-    "simplex-unique-overlay-card-4-p-2": "La red SimpleX usa un <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">protocolo abierto</a> y proporciona el <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK para crear chatbots</a>, permitiendo implementar servicios con los que los usuarios interactúen con las aplicaciones SimpleX Chat &mdash; esperamos ver con interés los servicios SimpleX que creará usted.",
-    "simplex-unique-overlay-card-4-p-3": "Si estás considerando desarrollar para la red SimpleX, por ejemplo un chatbot para los usuarios de SimpleX o la integración de las librerías SimpleX Chat en tus aplicaciones móviles, por favor <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">ponte en contacto</a> para consejos y soporte.",
+    "simplex-unique-overlay-card-4-p-2": "La red SimpleX usa un <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">protocolo abierto</a> y proporciona el <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK para crear chatbots</a>, permitiendo implementar servicios con los que los usuarios interactúen con las aplicaciones SimpleX Chat &mdash; esperamos ver con interés los servicios SimpleX que creará usted.",
+    "simplex-unique-overlay-card-4-p-3": "Si estás considerando desarrollar para la red SimpleX, por ejemplo un chatbot para los usuarios de SimpleX o la integración de las librerías SimpleX Chat en tus aplicaciones móviles, por favor <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">ponte en contacto</a> para consejos y soporte.",
     "simplex-unique-card-1-p-2": "A diferencia de cualquier otra red de mensajería existente, SimpleX no tiene identificadores asignados a los usuarios, <strong>ni siquiera números aleatorios</strong>.",
     "simplex-unique-card-2-p-1": "Al no tener identificadores o dirección permanente en la red SimpleX, nadie puede ponerse en contacto contigo salvo que compartas una dirección de usuario de un solo uso o una dirección temporal en forma de enlace o código QR.",
     "simplex-unique-card-4-p-1": "La red SimpleX está completamente descentralizada y es independiente de cualquier criptodivisa o de cualquier red salvo Internet.",
@@ -261,7 +261,12 @@
     "about-and-contact-us": "Quiénes somos & Contacto",
     "index-hero-h1": "Sé<br>Libre",
     "index-hero-h2": "En Tu Red",
-    "index-hero-p1": "La primera red sin IDs de usuario.<br>Tus contactos, grupos y canales te pertenecen.",
+    "index-hero-p1": "<span class=\"nowrap\">La única red de mensajería</span> <span class=\"nowrap\">sin ningún identificador de usuario.</span><br>Tus contactos, grupos y canales te pertenecen.",
+    "index-hero-own-part": "Hazte dueño de una parte.",
+    "index-hero-downloads": "Descargas",
+    "index-hero-monthly-users": "Usuarios mensuales",
+    "index-hero-countdown-lead": "Lanzamiento de dominios SimpleX",
+    "index-hero-countdown-done": "Obtén un dominio SimpleX",
     "index-hero-download-desktop-btn-title": "Descargar SimpleX Desktop App",
     "index-testflight-title": "Betas SimpleX para iOS en TestFlight",
     "index-f-droid-title": "SimpleX app vía F-Droid",
@@ -299,7 +304,7 @@
     "index-roadmap-3-title": "Haz Crecer Tus Comunidades",
     "index-roadmap-3-desc": "Herramientas para la promoción",
     "index-directory-h2": "Únete a las Comunidades SimpleX",
-    "index-directory-p1": "Más de 2 millones de personas descargaron las aplicaciones SimpleX.",
+    "index-directory-p1": "Más de 3 millones de personas descargaron las aplicaciones SimpleX.",
     "index-directory-p2": "¡Encuentra tus canales y comunidades en el directorio y crea los tuyos!",
     "index-directory-cta": "Ir al Directorio SimpleX",
     "index-directory-users-group-title": "SimpleX users group",
@@ -378,5 +383,28 @@
     "links-all-languages": "Todos los idiomas",
     "docs-dropdown-16": "Alojar un servidor de chat",
     "index-hero-invest": "Invierte en SimpleX Chat.",
-    "index-hero-invest-cta": "Descubre más en Wefunder."
+    "index-hero-invest-cta": "Descubre más en Wefunder.",
+    "downloads-h1": "Descarga SimpleX Chat",
+    "downloads-lead-1": "La única red de mensajería sin ningún identificador de usuario.",
+    "downloads-lead-2": "Gratis, de código abierto, descentralizada.",
+    "downloads-lead-device": "Tu perfil solo está en tu dispositivo.",
+    "downloads-lead-phone": "Tu perfil solo está en tu teléfono.",
+    "downloads-for-mac": "Descargar para macOS",
+    "downloads-for-windows": "Descargar para Windows",
+    "downloads-for-linux": "Descargar para Linux",
+    "downloads-beta": "Beta",
+    "downloads-more": "Más",
+    "downloads-other-devices": "Otros dispositivos",
+    "downloads-all-h2": "Todas las descargas",
+    "downloads-desktop": "Escritorio",
+    "downloads-terminal": "Terminal",
+    "downloads-terminal-desc": "Aplicación de línea de comandos para servidores, bots y desarrolladores.",
+    "downloads-terminal-guide": "Cómo usar la aplicación de terminal",
+    "downloads-phone": "Teléfono",
+    "downloads-link-desktop": "Puedes vincular tu teléfono a la aplicación de escritorio para usar el mismo perfil cuando ambos estén en la misma red local.",
+    "downloads-advanced-h2": "Para usuarios avanzados",
+    "downloads-github": "Todas las versiones en GitHub",
+    "downloads-mirror": "Espejo: git.simplex.chat",
+    "downloads-fdroid-repo": "Repositorio de F-Droid",
+    "why-film": "Mira el corto de 2 minutos en YouTube"
 }
diff --git a/website/langs/fa.json b/website/langs/fa.json
index 0afd6a8f83..5a369c86e2 100644
--- a/website/langs/fa.json
+++ b/website/langs/fa.json
@@ -63,14 +63,14 @@
     "simplex-network-overlay-card-1-li-6": "شبکه‌های P2P ممکن است در معرض <a href='https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent'>حمله DRDoS</a> قرار بگیرند، زمانی که کلاینت‌ها می‌توانند ترافیک را دوباره پخش و تقویت کنند که منجر به عدم دسترسی به خدمات در سطح شبکه می‌شود. کلاینت‌های SimpleX تنها ترافیک را از اتصالات شناخته‌شده منتقل می‌کنند و نمی‌توانند توسط یک مهاجم برای تقویت ترافیک در کل شبکه استفاده شوند.",
     "privacy-matters-overlay-card-1-p-1": "بسیاری از شرکت‌های بزرگ از اطلاعات مربوط به اینکه با چه کسانی ارتباط دارید، برای تخمین درآمد شما، فروش محصولات غیرضروری به شما و تعیین قیمت‌ها استفاده می‌کنند.",
     "privacy-matters-overlay-card-1-p-2": "فروشگاه‌های آنلاین می‌دانند که افراد با درآمد پایین‌تر بیشتر احتمال دارد خریدهای فوری انجام دهند، بنابراین ممکن است قیمت‌های بالاتری تعیین کنند یا تخفیف‌ها را حذف کنند.",
-    "privacy-matters-overlay-card-1-p-3": "برخی از شرکت‌های مالی و بیمه از نمودارهای اجتماعی برای تعیین نرخ‌های بهره و حق بیمه‌ها استفاده می‌کنند. این اغلب باعث می‌شود که افراد با درآمد پایین‌تر بیشتر پرداخت کنند &mdash; که به آن <a href='https://fairbydesign.com/povertypremium/' target='_blank'>'حق بیمه فقر'</a> گفته می‌شود.",
+    "privacy-matters-overlay-card-1-p-3": "برخی از شرکت‌های مالی و بیمه از نمودارهای اجتماعی برای تعیین نرخ‌های بهره و حق بیمه‌ها استفاده می‌کنند. این اغلب باعث می‌شود که افراد با درآمد پایین‌تر بیشتر پرداخت کنند &mdash; که به آن <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>'حق بیمه فقر'</a> گفته می‌شود.",
     "privacy-matters-overlay-card-1-p-4": "شبکه SimpleX حریم خصوصی ارتباطات شما را بهتر از هر گزینه دیگری محافظت می‌کند و به‌طور کامل از در دسترس قرار گرفتن نمودار اجتماعی شما برای هر شرکت یا سازمانی جلوگیری می‌کند. حتی زمانی که افراد از سرورهای پیش‌پیکربندی‌شده در برنامه‌های چت SimpleX استفاده می‌کنند، اپراتورهای سرور از تعداد کاربران یا ارتباطات آن‌ها اطلاعی ندارند.",
-    "privacy-matters-overlay-card-2-p-1": "مدتی پیش، ما شاهد دستکاری در انتخابات بزرگ توسط <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>یک شرکت مشاوره معتبر</a> بودیم که از نمودارهای اجتماعی ما برای تحریف دیدگاه‌مان نسبت به دنیای واقعی و دستکاری در رأی‌گیری‌مان استفاده کرد.",
+    "privacy-matters-overlay-card-2-p-1": "مدتی پیش، ما شاهد دستکاری در انتخابات بزرگ توسط <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>یک شرکت مشاوره معتبر</a> بودیم که از نمودارهای اجتماعی ما برای تحریف دیدگاه‌مان نسبت به دنیای واقعی و دستکاری در رأی‌گیری‌مان استفاده کرد.",
     "privacy-matters-overlay-card-2-p-2": "برای اینکه عینی باشید و تصمیمات مستقل بگیرید، باید کنترل فضای اطلاعات خود را در دست داشته باشید. این تنها در صورتی ممکن است که از یک شبکه ارتباطی خصوصی استفاده کنید که به نمودار اجتماعی شما دسترسی نداشته باشد.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX اولین شبکه‌ای است که به‌طور ذاتی هیچ شناسه کاربری ندارد و به این ترتیب نمودار ارتباطات شما را بهتر از هر گزینه شناخته‌شده دیگری محافظت می‌کند.",
     "privacy-matters-overlay-card-3-p-1": "همه باید به حریم خصوصی و امنیت ارتباطات خود اهمیت دهند &mdash; گفتگوهای بی‌ضرر می‌توانند شما را در خطر قرار دهند، حتی اگر چیزی برای پنهان کردن نداشته باشید.",
-    "privacy-matters-overlay-card-3-p-2": "یکی از شگفت‌انگیزترین داستان‌ها، تجربه <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>محمدو ولد صلاحی</a> است که در یادداشت‌هایش توصیف شده و در فیلم \"موریتانی\" به نمایش درآمده است. او بدون محاکمه به اردوگاه گوانتانامو منتقل شد و به مدت ۱۵ سال تحت شکنجه قرار گرفت. این اتفاق پس از یک تماس تلفنی با یکی از بستگانش در افغانستان رخ داد. او به ظن ارتباط با حملات ۱۱ سپتامبر، بدون محاکمه به اردوگاه گوانتانامو منتقل شد.",
-    "privacy-matters-overlay-card-3-p-3": "افراد عادی به خاطر آنچه که به‌صورت آنلاین به اشتراک می‌گذارند، حتی از طریق حساب‌های 'ناشناس' خود، <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>حتی در کشورهای دموکراتیک</a> دستگیر می‌شوند.",
+    "privacy-matters-overlay-card-3-p-2": "یکی از شگفت‌انگیزترین داستان‌ها، تجربه <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>محمدو ولد صلاحی</a> است که در یادداشت‌هایش توصیف شده و در فیلم \"موریتانی\" به نمایش درآمده است. او بدون محاکمه به اردوگاه گوانتانامو منتقل شد و به مدت ۱۵ سال تحت شکنجه قرار گرفت. این اتفاق پس از یک تماس تلفنی با یکی از بستگانش در افغانستان رخ داد. او به ظن ارتباط با حملات ۱۱ سپتامبر، بدون محاکمه به اردوگاه گوانتانامو منتقل شد.",
+    "privacy-matters-overlay-card-3-p-3": "افراد عادی به خاطر آنچه که به‌صورت آنلاین به اشتراک می‌گذارند، حتی از طریق حساب‌های 'ناشناس' خود، <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>حتی در کشورهای دموکراتیک</a> دستگیر می‌شوند.",
     "privacy-matters-overlay-card-3-p-4": "استفاده از یک پیام‌رسان رمزنگاری شده انتها به انتها کافی نیست؛ همه ما باید از پیام‌رسان‌هایی استفاده کنیم که حریم خصوصی شبکه‌های شخصی ما را محافظت می‌کنند &mdash; اینکه با چه کسانی ارتباط داریم.",
     "simplex-unique-overlay-card-1-p-1": "برخلاف سایر شبکه‌های پیام‌رسان، SimpleX <strong>هیچ شناسه‌ای به کاربران اختصاص نمی‌دهد</strong>. این شبکه به شماره‌های تلفن، آدرس‌های مبتنی بر دامنه (مانند ایمیل یا XMPP)، نام‌های کاربری، کلیدهای عمومی یا حتی شماره‌های تصادفی برای شناسایی کاربران خود تکیه نمی‌کند &mdash; اپراتورهای سرور SimpleX نمی‌دانند چند نفر از سرورهای آن‌ها استفاده می‌کنند.",
     "simplex-unique-overlay-card-1-p-2": "برای ارسال پیام‌ها، SimpleX از <a href='https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier'>آدرس‌های ناشناس جفتی</a> در صف‌های پیام یک‌طرفه استفاده می‌کند که برای پیام‌های دریافتی و ارسال‌شده جداگانه هستند و معمولاً از طریق سرورهای مختلف انجام می‌شود.",
@@ -82,8 +82,8 @@
     "simplex-unique-overlay-card-3-p-3": "برخلاف سرورهای شبکه‌های فدرال (ایمیل، XMPP یا Matrix)، سرورهای SimpleX حساب‌های کاربری را ذخیره نمی‌کنند و تنها پیام‌ها را منتقل می‌کنند، که حریم خصوصی هر دو طرف را محافظت می‌کند.",
     "simplex-unique-overlay-card-3-p-4": "هیچ شناسه یا متن رمز مشترکی بین ترافیک سرور ارسال‌شده و دریافتی وجود ندارد &mdash; اگر کسی در حال نظارت باشد، نمی‌تواند به‌راحتی تشخیص دهد که چه کسی با چه کسی ارتباط برقرار می‌کند، حتی اگر TLS به خطر بیفتد.",
     "simplex-unique-overlay-card-4-p-1": "شما می‌توانید <strong>از SimpleX با سرورهای خود استفاده کنید</strong> و همچنان با افرادی که از سرورهای پیش‌پیکربندی‌شده در برنامه‌ها استفاده می‌کنند، ارتباط برقرار کنید.",
-    "simplex-unique-overlay-card-4-p-2": "شبکه SimpleX از یک <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>پروتکل باز</a> استفاده می‌کند و <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>SDK برای ایجاد ربات‌های چت</a> ارائه می‌دهد، که امکان پیاده‌سازی خدماتی را فراهم می‌کند که کاربران می‌توانند از طریق برنامه‌های چت SimpleX با آن‌ها تعامل داشته باشند &mdash; ما واقعاً منتظر هستیم ببینیم چه خدماتی را با SimpleX ایجاد خواهید کرد.",
-    "simplex-unique-overlay-card-4-p-3": "اگر به توسعه برای شبکه SimpleX فکر می‌کنید، مثلاً ربات چت برای کاربران برنامه SimpleX یا ادغام کتابخانه چت SimpleX در برنامه‌های موبایل خود، لطفاً برای هرگونه مشاوره و پشتیبانی <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>با ما تماس بگیرید</a>.",
+    "simplex-unique-overlay-card-4-p-2": "شبکه SimpleX از یک <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>پروتکل باز</a> استفاده می‌کند و <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>SDK برای ایجاد ربات‌های چت</a> ارائه می‌دهد، که امکان پیاده‌سازی خدماتی را فراهم می‌کند که کاربران می‌توانند از طریق برنامه‌های چت SimpleX با آن‌ها تعامل داشته باشند &mdash; ما واقعاً منتظر هستیم ببینیم چه خدماتی را با SimpleX ایجاد خواهید کرد.",
+    "simplex-unique-overlay-card-4-p-3": "اگر به توسعه برای شبکه SimpleX فکر می‌کنید، مثلاً ربات چت برای کاربران برنامه SimpleX یا ادغام کتابخانه چت SimpleX در برنامه‌های موبایل خود، لطفاً برای هرگونه مشاوره و پشتیبانی <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>با ما تماس بگیرید</a>.",
     "simplex-unique-card-1-p-1": "SimpleX حریم خصوصی پروفایل، مخاطبین و فراداده‌های شما را محافظت می‌کند و آن‌ها را از سرورهای شبکه SimpleX و هر ناظر دیگری پنهان می‌سازد.",
     "simplex-unique-card-1-p-2": "برخلاف هر شبکه پیام‌رسان دیگری، SimpleX هیچ شناسه‌ای به کاربران اختصاص نمی‌دهد &mdash; <strong>حتی شماره‌های تصادفی</strong> نیز وجود ندارد.",
     "simplex-unique-card-2-p-1": "از آنجا که شما هیچ شناسه یا آدرس ثابتی در شبکه SimpleX ندارید، هیچ‌کس نمی‌تواند با شما تماس بگیرد مگر اینکه یک آدرس کاربری یک‌بار مصرف یا موقتی را به‌عنوان کد QR یا لینک به اشتراک بگذارید.",
@@ -214,7 +214,7 @@
     "simplex-private-card-3-point-2": "اثر انگشت سرور و اتصال کانال از حملات MITM و حملات replay جلوگیری می‌کنند.",
     "simplex-private-card-3-point-3": "برای جلوگیری از حملات نشست، از سرگیری اتصال غیرفعال شده است.",
     "simplex-private-card-4-point-1": "برای محافظت از آدرس IP خود، می‌توانید از طریق Tor یا برخی دیگر از شبکه‌های حمل و نقل پوششی به سرورها دسترسی پیدا کنید.",
-    "simplex-private-card-4-point-2": "برای استفاده از SimpleX از طریق Tor، لطفاً <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">برنامه Orbot</a> را نصب کرده و پروکسی SOCKS5 (یا VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">در iOS</a>) را فعال کنید.",
+    "simplex-private-card-4-point-2": "برای استفاده از SimpleX از طریق Tor، لطفاً <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">برنامه Orbot</a> را نصب کرده و پروکسی SOCKS5 (یا VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">در iOS</a>) را فعال کنید.",
     "simplex-private-card-5-point-1": "SimpleX از padding محتوا برای هر لایه رمزنگاری استفاده می‌کند تا از حملات اندازه پیام جلوگیری کند.",
     "simplex-private-card-5-point-2": "این کار باعث می‌شود که پیام‌های با اندازه‌های مختلف برای سرورها و ناظران شبکه یکسان به نظر برسند.",
     "simplex-private-card-6-point-1": "بسیاری از شبکه‌های ارتباطی در برابر حملات MITM توسط سرورها یا ارائه‌دهندگان شبکه آسیب‌پذیر هستند.",
@@ -248,7 +248,7 @@
     "hero-overlay-card-1-p-3": "شما سرورهایی را که برای ارسال پیام‌ها به مخاطبین خود استفاده می‌کنید مشخص می‌کنید و همچنین از کدام سرور(ها) برای دریافت پیام‌ها بهره می‌برید. هر مکالمه احتمالاً از دو سرور مختلف استفاده می‌کند.",
     "hero-overlay-card-1-p-4": "این طراحی از نشت هرگونه فراداده کاربران در سطح برنامه جلوگیری می‌کند. برای بهبود بیشتر حریم خصوصی و محافظت از آدرس IP خود، می‌توانید از طریق Tor به سرورهای پیام‌رسانی متصل شوید.",
     "hero-overlay-card-1-p-5": "فقط دستگاه‌های کلاینت پروفایل‌های کاربری، مخاطبین و گروه‌ها را ذخیره می‌کنند؛ پیام‌ها با رمزنگاری انتها به انتهای دو لایه ارسال می‌شوند.",
-    "hero-overlay-card-1-p-6": "برای اطلاعات بیشتر به <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>وایت پیپر SimpleX</a> مراجعه کنید.",
+    "hero-overlay-card-1-p-6": "برای اطلاعات بیشتر به <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>وایت پیپر SimpleX</a> مراجعه کنید.",
     "hero-overlay-card-2-p-1": "زمانی که کاربران هویت‌های پایدار دارند، حتی اگر این فقط یک شماره تصادفی مانند شناسه جلسه باشد، خطر این وجود دارد که ارائه‌دهنده یا یک مهاجم بتوانند مشاهده کنند که کاربران چگونه متصل شده‌اند و چند پیام ارسال می‌کنند.",
     "hero-overlay-card-2-p-2": "سپس آن‌ها می‌توانند این اطلاعات را با شبکه‌های اجتماعی عمومی موجود همبسته کرده و برخی هویت‌های واقعی را شناسایی کنند.",
     "hero-overlay-card-2-p-3": "حتی با خصوصی‌ترین برنامه‌ها که از خدمات Tor v3 استفاده می‌کنند، اگر شما با دو مخاطب مختلف از طریق یک پروفایل یکسان صحبت کنید، آن‌ها می‌توانند ثابت کنند که به یک شخص واحد متصل هستند.",
diff --git a/website/langs/fi.json b/website/langs/fi.json
index 3a138aa7c4..363697b8fb 100644
--- a/website/langs/fi.json
+++ b/website/langs/fi.json
@@ -37,7 +37,7 @@
     "simplex-private-9-title": "Yksisuuntaisia<br>viestijonoja",
     "simplex-private-10-title": "Väliaikaiset nimettömät parittaiset tunnisteet",
     "simplex-private-card-3-point-1": "Vain TLS 1.2/1.3 vahvoilla algoritmeilla käytetään asiakas-palvelin-yhteyksiin.",
-    "simplex-private-card-4-point-2": "Käyttääksesi SimpleX:ää Torin kautta, asenna <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot-sovellus</a> ja ota käyttöön SOCKS5-välityspalvelin (tai VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">iOS:lla</a>).",
+    "simplex-private-card-4-point-2": "Käyttääksesi SimpleX:ää Torin kautta, asenna <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot-sovellus</a> ja ota käyttöön SOCKS5-välityspalvelin (tai VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">iOS:lla</a>).",
     "simplex-private-card-7-point-1": "Viestien eheyden varmistamiseksi ne numeroituvat peräkkäin ja sisältävät edellisen viestin tiivisteen.",
     "simplex-private-card-7-point-2": "Jos viestiä lisätään, poistetaan tai muutetaan, vastaanottaja saa ilmoituksen.",
     "simplex-private-card-8-point-1": "SimpleX-palvelimet toimivat matalan viiveen sekoitussolmuina &mdash; saapuvilla ja lähtevillä viesteillä on erilainen järjestys.",
@@ -152,7 +152,7 @@
     "simplex-unique-4-overlay-1-title": "Täysin hajautettu &mdash; käyttäjät omistavat SimpleX-verkon",
     "hero-overlay-card-1-p-1": "Monet käyttäjät ovat kysyneet: <em>jos SimpleX ei käytä käyttäjätunnisteita, miten se tietää minne viestit toimitetaan?</em>",
     "hero-overlay-card-1-p-3": "Määrität, minkä palvelimen(t) valitset viestien vastaanottamiseen, sekä kontaktisi &mdash; palvelimet, joita käytät viestien lähettämiseen heille. Jokainen keskustelu käyttää todennäköisesti kahta eri palvelinta.",
-    "hero-overlay-card-1-p-6": "Lue lisää <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>SimpleX whitepaperista</a>.",
+    "hero-overlay-card-1-p-6": "Lue lisää <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>SimpleX whitepaperista</a>.",
     "hero-overlay-card-1-p-2": "Viestien toimittamiseen SimpleX ei käytä muiden alustojen käyttäjätunnuksia, vaan sen sijaan se käyttää väliaikaisia nimettömiä parittaisia tunnisteita viestijonoille, jotka ovat erillisiä jokaiselle yhteydelle &mdash; pitkäaikaisia tunnisteita ei ole.",
     "hero-overlay-card-2-p-3": "Jopa yksityisimmillä sovelluksilla, jotka käyttävät Tor v3 -palveluja, jos puhut kahdelle eri yhteyshenkilölle saman profiilin kautta, he voivat todistaa olevansa yhteydessä samaan henkilöön.",
     "hero-overlay-card-2-p-4": "SimpleX suojaa näitä hyökkäyksiä vastaan, sillä siinä ei ole käyttäjätunnuksia toteutuksessaan. Ja jos käytät Incognito-tilaa, sinulla on eri näyttönimi jokaiselle yhteyshenkilölle, mikä estää yhteisten tietojen jakamisen heidän välillään.",
@@ -163,14 +163,14 @@
     "simplex-network-overlay-card-1-li-3": "P2P ei ratkaise <a href='https://fi.wikipedia.org/wiki/V%C3%A4lik%C3%A4den_hy%C3%B6kk%C3%A4ys'>välikäden hyökkäys</a> -ongelmaa, ja useimmat olemassa olevat toteutukset eivät käytä kanavan ulkopuolisia viestejä alkuperäiseen avaimenvaihtoon. SimpleX käyttää kanavan ulkopuolisia viestejä tai, joissakin tapauksissa, jo valmiiksi turvallisia ja luotettuja yhteyksiä alkuperäiseen avaimenvaihtoon.",
     "simplex-network-overlay-card-1-li-4": "P2P-toteutukset voivat estyä joidenkin Internet-palveluntarjoajien (kuten <a href='https://fi.wikipedia.org/wiki/BitTorrent'>BitTorrent</a>) toimesta. SimpleX on kuljetusprotokollasta riippumaton - se voi toimia yleisten verkkoprotokollien kautta, kuten esimerkiksi WebSockets.",
     "simplex-network-overlay-card-1-li-5": "Kaikki tunnetut P2P-verkot saattavat olla alttiita <a href='https://fi.wikipedia.org/wiki/Sybil-hy%C3%B6kk%C3%A4ys'>Sybil-hyökkäykselle</a>, koska jokainen solmu on löydettävissä, ja verkko toimii kokonaisuutena. Tunnetut keinot sen lieventämiseksi vaativat joko keskitetyn komponentin tai kalliin <a href='https://fi.wikipedia.org/wiki/Proof_of_work'>työn todistuksen</a>. SimpleX-verkolla ei ole palvelimen löydettävyyttä, se on fragmentoitunut ja toimii useina eristettyinä aliverkkoina, mikä tekee verkko-laajuisista hyökkäyksistä mahdottomia.",
-    "privacy-matters-overlay-card-1-p-3": "Jotkut rahoitus- ja vakuutusyhtiöt käyttävät sosiaalisia verkostoja määrittääkseen korkoja ja vakuutusmaksuja. Se tekee usein alhaisempiin tuloihin kuuluvien ihmisten maksavan enemmän &mdash; sitä kutsutaan <a href='https://fairbydesign.com/povertypremium/' target='_blank'>'köyhyyslisäksi'</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Jotkut rahoitus- ja vakuutusyhtiöt käyttävät sosiaalisia verkostoja määrittääkseen korkoja ja vakuutusmaksuja. Se tekee usein alhaisempiin tuloihin kuuluvien ihmisten maksavan enemmän &mdash; sitä kutsutaan <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>'köyhyyslisäksi'</a>.",
     "privacy-matters-overlay-card-1-p-4": "SimpleX-alusta suojaa yhteyksiesi yksityisyyttä paremmin kuin mikään vaihtoehto, estäen täysin yhteysverkkosi tulemisen saataville mille tahansa yrityksille tai organisaatioille. Vaikka ihmiset käyttävät SimpleX Chatin tarjoamia palvelimia, emme tiedä käyttäjien määrää tai heidän yhteyksiään.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX on ensimmäinen alusta, jolla ei ole mitään käyttäjätunnisteita suunnittelussaan, suojaten siten yhteyksesi verkkoa paremmin kuin mikään tunnettu vaihtoehto.",
-    "privacy-matters-overlay-card-2-p-1": "Ei niin kauan sitten huomasimme merkittävien vaalien olevan manipuloitavissa <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>kunnioitetun konsulttiyrityksen</a> toimesta, joka käytti sosiaalisia verkostoja vääristämään käsitystämme todellisesta maailmasta ja manipuloimaan ääniämme.",
+    "privacy-matters-overlay-card-2-p-1": "Ei niin kauan sitten huomasimme merkittävien vaalien olevan manipuloitavissa <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>kunnioitetun konsulttiyrityksen</a> toimesta, joka käytti sosiaalisia verkostoja vääristämään käsitystämme todellisesta maailmasta ja manipuloimaan ääniämme.",
     "privacy-matters-overlay-card-3-p-1": "Kaikkien pitäisi välittää viestinnän yksityisyydestä ja turvallisuudesta &mdash; harmittomat keskustelut voivat asettaa sinut vaaraan, vaikka sinulla ei olisi mitään piilotettavaa.",
     "privacy-matters-overlay-card-2-p-2": "Ollaksesi objektiivinen ja tehdäksesi itsenäisiä päätöksiä, sinun on hallittava tietotilaasi. Se on mahdollista vain, jos käytät yksityistä viestintäalustaa, jolla ei ole pääsyä sosiaaliseen verkostoosi.",
-    "privacy-matters-overlay-card-3-p-2": "Yksi järkyttävimmistä tarinoista on <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>Mohamedou Ould Salahi'n</a> kokemus, joka on kuvattu hänen muistelmissaan ja esitetty The Mauritanian -elokuvassa. Hänet laitettiin Guantanamo-leirille ilman oikeudenkäyntiä ja häntä kidutettiin siellä 15 vuotta puhelun jälkeen sukulaiselleen Afganistanissa, epäiltynä osallisuudesta 9/11-iskuihin, vaikka hän oli asunut Saksassa edelliset 10 vuotta.",
-    "privacy-matters-overlay-card-3-p-3": "Tavalliset ihmiset pidätetään siitä, mitä he jakavat verkossa, jopa 'anonyymien' tiliensä kautta, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>jopa demokraattisissa maissa</a>.",
+    "privacy-matters-overlay-card-3-p-2": "Yksi järkyttävimmistä tarinoista on <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>Mohamedou Ould Salahi'n</a> kokemus, joka on kuvattu hänen muistelmissaan ja esitetty The Mauritanian -elokuvassa. Hänet laitettiin Guantanamo-leirille ilman oikeudenkäyntiä ja häntä kidutettiin siellä 15 vuotta puhelun jälkeen sukulaiselleen Afganistanissa, epäiltynä osallisuudesta 9/11-iskuihin, vaikka hän oli asunut Saksassa edelliset 10 vuotta.",
+    "privacy-matters-overlay-card-3-p-3": "Tavalliset ihmiset pidätetään siitä, mitä he jakavat verkossa, jopa 'anonyymien' tiliensä kautta, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>jopa demokraattisissa maissa</a>.",
     "privacy-matters-overlay-card-3-p-4": "Ei riitä, että käytät päästä päähän salattua viestintäsovellusta, meidän kaikkien pitäisi käyttää viestintäsovelluksia, jotka suojelevat henkilökohtaisten verkostojemme yksityisyyttä &mdash; keiden kanssa olemme yhteydessä.",
     "simplex-unique-overlay-card-1-p-1": "Toisin kuin muut viestintäalustat, SimpleX:llä ei ole <strong>mitään tunnisteita käyttäjille</strong>. Se ei luota puhelinnumeroihin, verkkotunnuksiin perustuviin osoitteisiin (kuten sähköposti tai XMPP), käyttäjänimiin, julkisiin avaimiin tai edes satunnaisiin numeroihin tunnistaakseen käyttäjänsä &mdash; emme tiedä kuinka monta ihmistä käyttää SimpleX-palvelimiamme.",
     "simplex-unique-overlay-card-1-p-2": "Viestien toimittamiseksi SimpleX käyttää <a href='https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier'>parittaisia nimettömiä osoitteita</a> kaksisuuntaisille viestijonoille, jotka ovat erilliset vastaanotetuille ja lähetetyille viesteille, yleensä eri palvelimien kautta.",
@@ -179,9 +179,9 @@
     "simplex-unique-overlay-card-2-p-2": "Jopa valinnaisen käyttäjäosoitteen kanssa, vaikka sitä voitaisiin käyttää roskapostiyhteyspyyntöjen lähettämiseen, voit vaihtaa sen tai poistaa sen kokonaan menettämättä mitään yhteyksiäsi.",
     "simplex-unique-overlay-card-3-p-3": "Toisin kuin liitettyjen verkkojen palvelimet (sähköposti, XMPP tai Matrix), SimpleX-palvelimet eivät tallenna käyttäjätilejä, ne vain välittävät viestejä, suojaten molempien osapuolien yksityisyyttä.",
     "simplex-unique-overlay-card-3-p-4": "Lähetetyssä ja vastaanotetussa palvelimen liikenteessä ei ole yhteisiä tunnisteita tai salaustekstiä &mdash; jos joku havaitsee sen, he eivät voi helposti selvittää kuka kommunikoi kenen kanssa, vaikka TLS olisi vaarantunut.",
-    "simplex-unique-overlay-card-4-p-3": "Jos harkitset kehittämistä SimpleX-alustalle, esimerkiksi chat-botin luomista SimpleX-sovelluksen käyttäjille tai SimpleX Chat -kirjaston integrointia mobiilisovelluksiisi, ole hyvä ja <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>ota yhteyttä</a> saadaksesi neuvoja ja tukea.",
+    "simplex-unique-overlay-card-4-p-3": "Jos harkitset kehittämistä SimpleX-alustalle, esimerkiksi chat-botin luomista SimpleX-sovelluksen käyttäjille tai SimpleX Chat -kirjaston integrointia mobiilisovelluksiisi, ole hyvä ja <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>ota yhteyttä</a> saadaksesi neuvoja ja tukea.",
     "simplex-unique-overlay-card-4-p-1": "Voit <strong>käyttää SimpleX:ää omien palvelimiesi kanssa</strong> ja silti kommunikoida ihmisten kanssa, jotka käyttävät meille tarjottuja valmiiksi määritettyjä palvelimia.",
-    "simplex-unique-overlay-card-4-p-2": "SimpleX-alusta käyttää <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>avoimeen protokollaan</a> ja tarjoaa <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>SDK:n chatbotien luomiseen</a>, mahdollistaen palvelujen toteuttamisen, joiden kanssa käyttäjät voivat olla vuorovaikutuksessa SimpleX Chat -sovellusten kautta &mdash; odotamme innolla nähdä, millaisia SimpleX-palveluja voit rakentaa.",
+    "simplex-unique-overlay-card-4-p-2": "SimpleX-alusta käyttää <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>avoimeen protokollaan</a> ja tarjoaa <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>SDK:n chatbotien luomiseen</a>, mahdollistaen palvelujen toteuttamisen, joiden kanssa käyttäjät voivat olla vuorovaikutuksessa SimpleX Chat -sovellusten kautta &mdash; odotamme innolla nähdä, millaisia SimpleX-palveluja voit rakentaa.",
     "simplex-unique-card-3-p-1": "SimpleX tallentaa kaikki käyttäjätiedot asiakaslaitteille <strong>siirrettävässä salatussa tietokannan muodossa</strong> &mdash; se voidaan siirtää toiseen laitteeseen.",
     "simplex-unique-card-3-p-2": "Päästä päähän salatut viestit säilytetään väliaikaisesti SimpleX-releay-palvelimilla, kunnes ne vastaanotetaan, minkä jälkeen ne poistetaan pysyvästi.",
     "we-invite-you-to-join-the-conversation": "Kutsumme sinut mukaan keskusteluun",
diff --git a/website/langs/fr.json b/website/langs/fr.json
index bd91c36e22..11ca715812 100644
--- a/website/langs/fr.json
+++ b/website/langs/fr.json
@@ -61,7 +61,7 @@
     "simplex-private-card-3-point-2": "L'empreinte du serveur et la fixation des canaux empêchent les attaques MITM et les attaques par rejeu.",
     "simplex-private-card-3-point-3": "La reprise de connexion est désactivée pour empêcher les attaques de session.",
     "simplex-private-card-4-point-1": "Pour protéger votre adresse IP, vous pouvez accéder aux serveurs via Tor ou un autre réseau de transport superposé.",
-    "simplex-private-card-4-point-2": "Pour utiliser SimpleX via Tor, veuillez installer <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">l'application Orbot</a> et activez le proxy SOCKS5 (ou le mode VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\"> sur iOS</a>).",
+    "simplex-private-card-4-point-2": "Pour utiliser SimpleX via Tor, veuillez installer <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">l'application Orbot</a> et activez le proxy SOCKS5 (ou le mode VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\"> sur iOS</a>).",
     "simplex-private-card-5-point-1": "SimpleX utilise une couverture de contenu pour chaque couche de chiffrement afin de résister aux attaques ciblant la taille des messages.",
     "simplex-private-card-5-point-2": "Cela rend les messages de différentes tailles identiques pour les serveurs et les observateurs du réseau.",
     "simplex-private-card-6-point-1": "De nombreux réseaux de communication sont vulnérables aux attaques MITM par des serveurs ou des fournisseurs de réseau.",
@@ -95,7 +95,7 @@
     "hero-overlay-card-1-p-3": "Vous définissez le ou les serveurs que vous souhaitez utiliser pour recevoir les messages et vos contacts &mdash; les serveurs que vous utilisez pour leur envoyer des messages. Chaque conversation est susceptible d'utiliser deux serveurs différents.",
     "hero-overlay-card-1-p-4": "Cette méthode empêche la fuite de métadonnées des utilisateurs au niveau de l'application. Pour améliorer encore la protection de votre vie privée et protéger votre adresse IP, vous pouvez vous connecter aux serveurs de messagerie via Tor.",
     "hero-overlay-card-1-p-5": "Seuls les appareils clients stockent les profils des utilisateurs, les contacts et les groupes ; les messages sont envoyés avec un chiffrement de bout en bout à deux couches.",
-    "hero-overlay-card-1-p-6": "En savoir plus sur le <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>livre blanc de SimpleX</a>.",
+    "hero-overlay-card-1-p-6": "En savoir plus sur le <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>livre blanc de SimpleX</a>.",
     "hero-overlay-card-2-p-1": "Lorsque les utilisateurs ont des identités persistantes, même s'il ne s'agit que d'un nombre aléatoire, comme un ID de session, il y a un risque que le fournisseur ou un attaquant puisse observer comment les utilisateurs sont connectés et combien de messages ils envoient.",
     "hero-overlay-card-2-p-2": "Ils pourraient ensuite corréler ces informations avec les réseaux sociaux publics existants, et déterminer de véritables identités.",
     "hero-overlay-card-2-p-3": "Même avec les applications les plus privées qui utilisent les services Tor v3, si vous parlez à deux contacts différents via le même profil, ils peuvent prouver qu'ils sont connectés à la même personne.",
@@ -109,14 +109,14 @@
     "simplex-network-overlay-card-1-li-6": "Les réseaux P2P peuvent être vulnérables aux <a href=\"https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent\">attaques DRDoS</a>, lorsque les clients peuvent retransmettre et amplifier le trafic, entraînant un déni de service à l’échelle du réseau. Les clients SimpleX ne relaient le trafic que depuis des connexions connues et ne peuvent pas être utilisés par un attaquant pour amplifier le trafic sur l’ensemble du réseau.",
     "privacy-matters-overlay-card-1-p-1": "De nombreuses grandes entreprises utilisent les informations sur vos relations pour estimer vos revenus, vous vendre des produits dont vous n’avez pas vraiment besoin et déterminer les prix.",
     "privacy-matters-overlay-card-1-p-2": "Les vendeurs en ligne savent que les personnes à faible revenu sont plus susceptibles d'effectuer des achats urgents. Ils peuvent donc pratiquer des prix plus élevés ou supprimer des remises.",
-    "privacy-matters-overlay-card-1-p-3": "Certaines entreprises financières et d’assurance utilisent les graphes sociaux pour déterminer les taux d’intérêt et les primes d’assurance. Cela conduit souvent les personnes aux revenus modestes à payer davantage &mdash; on parle de <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">« prime de pauvreté »</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Certaines entreprises financières et d’assurance utilisent les graphes sociaux pour déterminer les taux d’intérêt et les primes d’assurance. Cela conduit souvent les personnes aux revenus modestes à payer davantage &mdash; on parle de <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">« prime de pauvreté »</a>.",
     "privacy-matters-overlay-card-1-p-4": "Le réseau SimpleX protège mieux la confidentialité de vos connexions que toute autre solution, empêchant totalement que votre graphe social soit accessible à des entreprises ou des organisations. Même lorsque les utilisateurs utilisent les serveurs préconfigurés dans les applications SimpleX Chat, les opérateurs des serveurs ne connaissent ni le nombre d’utilisateurs ni leurs connexions.",
-    "privacy-matters-overlay-card-2-p-1": "Il n’y a pas si longtemps, nous avons vu des élections majeures être manipulées par <a href=\"https://fr.wikipedia.org/wiki/Scandale_Facebook-Cambridge_Analytica\" target=\"_blank\">une société de conseil réputée</a> qui a utilisé nos graphes sociaux pour fausser notre perception du monde réel et manipuler nos votes.",
+    "privacy-matters-overlay-card-2-p-1": "Il n’y a pas si longtemps, nous avons vu des élections majeures être manipulées par <a href=\"https://fr.wikipedia.org/wiki/Scandale_Facebook-Cambridge_Analytica\" target=\"_blank\" rel=\"noopener\">une société de conseil réputée</a> qui a utilisé nos graphes sociaux pour fausser notre perception du monde réel et manipuler nos votes.",
     "privacy-matters-overlay-card-2-p-2": "Pour être objectif et prendre des décisions indépendantes, vous devez garder le contrôle de votre espace informationnel. Cela n’est possible que si vous utilisez un réseau de communication privé qui n’a pas accès à votre graphe social.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX est le premier réseau qui ne possède aucun identifiant utilisateur par conception, protégeant ainsi votre graphe de connexions mieux que toute autre solution connue.",
     "privacy-matters-overlay-card-3-p-1": "Tout le monde devrait se soucier de la confidentialité et de la sécurité de ses communications &mdash; des conversations lambda peuvent vous mettre en danger, même si vous n'avez rien à cacher.",
-    "privacy-matters-overlay-card-3-p-2": "L’une des histoires les plus choquantes est celle de <a href=\"https://fr.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedou Ould Salahi</a>, relatée dans ses mémoires et dans le film Désigné coupable (The Mauritanian). Il a été détenu au camp de Guantánamo, sans procès, et y a été torturé pendant 15 ans après un appel téléphonique à un proche en Afghanistan, étant soupçonné d’être impliqué dans les attentats du 11 septembre, alors qu’il vivait en Allemagne depuis 10 ans.",
-    "privacy-matters-overlay-card-3-p-3": "Des personnes ordinaires sont arrêtées pour ce qu’elles partagent en ligne, même via leurs comptes « anonymes », <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">même dans les pays démocratiques</a>.",
+    "privacy-matters-overlay-card-3-p-2": "L’une des histoires les plus choquantes est celle de <a href=\"https://fr.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedou Ould Salahi</a>, relatée dans ses mémoires et dans le film Désigné coupable (The Mauritanian). Il a été détenu au camp de Guantánamo, sans procès, et y a été torturé pendant 15 ans après un appel téléphonique à un proche en Afghanistan, étant soupçonné d’être impliqué dans les attentats du 11 septembre, alors qu’il vivait en Allemagne depuis 10 ans.",
+    "privacy-matters-overlay-card-3-p-3": "Des personnes ordinaires sont arrêtées pour ce qu’elles partagent en ligne, même via leurs comptes « anonymes », <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">même dans les pays démocratiques</a>.",
     "privacy-matters-overlay-card-3-p-4": "Il ne suffit pas d'utiliser une messagerie chiffrée de bout en bout, nous devrions tous utiliser des messageries qui protègent la vie privée de nos réseaux personnels &mdash; les personnes avec lesquelles nous sommes connectés.",
     "simplex-unique-overlay-card-1-p-1": "Contrairement aux autres réseaux de messagerie, SimpleX n’attribue <strong>aucun identifiant aux utilisateurs</strong>. Il ne repose ni sur les numéros de téléphone, ni sur les adresses basées sur des domaines (comme les adresses e-mail ou XMPP), ni sur les noms d’utilisateur, les clés publiques ou même les nombres aléatoires pour identifier ses utilisateurs &mdash; les opérateurs des serveurs SimpleX ne savent pas combien de personnes utilisent leurs serveurs.",
     "simplex-unique-overlay-card-1-p-2": "Pour acheminer les messages, SimpleX utilise des <a href=\"https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier\">adresses anonymes distinctes pour chaque interlocuteur</a> de files de messages unidirectionnelles, séparées pour les messages reçus et envoyés, généralement via des serveurs différents.",
@@ -128,8 +128,8 @@
     "simplex-unique-overlay-card-3-p-3": "Contrairement aux serveurs de réseaux fédérés (e-mail, XMPP ou Matrix), les serveurs SimpleX ne stockent pas les comptes d'utilisateurs, ils ne font que relayer les messages, protégeant ainsi la vie privée des deux parties.",
     "simplex-unique-overlay-card-3-p-4": "Il n'y a pas d'identifiant ou de texte chiffré en commun entre le trafic serveur envoyé et reçu - si quelqu'un l'observe, il ne peut pas facilement déterminer qui communique avec qui, même si le TLS est compromis.",
     "simplex-unique-overlay-card-4-p-1": "Vous pouvez <strong>utiliser SimpleX avec vos propres serveurs</strong> et continuer à communiquer avec les personnes qui utilisent les serveurs préconfigurés dans les applications.",
-    "simplex-unique-overlay-card-4-p-2": "Le réseau SimpleX utilise un <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">protocole ouvert</a> et fournit un <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK pour créer des chatbots</a>, permettant de mettre en œuvre des services avec lesquels les utilisateurs peuvent interagir via les applications SimpleX Chat &mdash; nous avons hâte de voir quels services SimpleX vous allez créer.",
-    "simplex-unique-overlay-card-4-p-3": "Si vous envisagez de développer pour le réseau SimpleX, par exemple un chatbot pour les utilisateurs de l’application SimpleX ou d’intégrer la bibliothèque SimpleX Chat à vos applications mobiles, n’hésitez pas à <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">nous contacter</a> pour obtenir des conseils et de l’aide.",
+    "simplex-unique-overlay-card-4-p-2": "Le réseau SimpleX utilise un <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">protocole ouvert</a> et fournit un <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK pour créer des chatbots</a>, permettant de mettre en œuvre des services avec lesquels les utilisateurs peuvent interagir via les applications SimpleX Chat &mdash; nous avons hâte de voir quels services SimpleX vous allez créer.",
+    "simplex-unique-overlay-card-4-p-3": "Si vous envisagez de développer pour le réseau SimpleX, par exemple un chatbot pour les utilisateurs de l’application SimpleX ou d’intégrer la bibliothèque SimpleX Chat à vos applications mobiles, n’hésitez pas à <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">nous contacter</a> pour obtenir des conseils et de l’aide.",
     "simplex-unique-card-1-p-1": "SimpleX protège la confidentialité de votre profil, de vos contacts et de vos métadonnées, en les cachant des serveurs du réseau SimpleX et de tout observateur.",
     "simplex-unique-card-1-p-2": "Contrairement à tout autre réseau  de messagerie existant, SimpleX n'a aucun identifiant attribué aux utilisateurs &mdash; <strong>pas même de nombres aléatoires</strong>.",
     "simplex-unique-card-2-p-1": "Parce que vous n'avez pas d'identifiant ou d'adresse fixe sur le réseau SimpleX, personne ne peut vous contacter sauf si vous partagez une adresse d'utilisateur unique ou temporaire, comme un code QR ou un lien.",
@@ -263,7 +263,12 @@
     "about-and-contact-us": "À propos & Contactez-nous",
     "index-hero-h1": "Soyez<br>Libre",
     "index-hero-h2": "Dans Votre Réseau",
-    "index-hero-p1": "Le premier réseau sans identifiants d'utilisateur.<br>Vos contacts, groupes et canaux vous appartiennent.",
+    "index-hero-p1": "<span class=\"nowrap\">Le seul réseau de messagerie</span> <span class=\"nowrap\">sans aucun identifiant d'utilisateur.</span><br>Vos contacts, groupes et canaux vous appartiennent.",
+    "index-hero-own-part": "Possédez-en une part.",
+    "index-hero-downloads": "Téléchargements",
+    "index-hero-monthly-users": "Utilisateurs mensuels",
+    "index-hero-countdown-lead": "Lancement des domaines SimpleX",
+    "index-hero-countdown-done": "Obtenez un domaine SimpleX",
     "index-hero-download-desktop-btn-title": "Téléchargez l’application de bureau SimpleX",
     "index-testflight-title": "Version bêta de SimpleX pour iOS sur TestFlight",
     "index-f-droid-title": "Application SimpleX via F-Droid",
@@ -301,7 +306,7 @@
     "index-token-cta-cf": "Investir dans SimpleX Chat",
     "index-token-p2": "Cela couvrira l'infrastructure, le développement logiciel et la gouvernance du réseau.",
     "index-directory-h2": "Rejoindre les communautés SimpleX",
-    "index-directory-p1": "Plus de 2 millions de personnes ont téléchargé les applications SimpleX.",
+    "index-directory-p1": "Plus de 3 millions de personnes ont téléchargé les applications SimpleX.",
     "index-directory-p2": "Trouvez vos chaînes et communautés dans l'annuaire et créez-en les vôtres !",
     "index-directory-cta": "Afficher l’annuaire SimpleX",
     "index-directory-users-group-title": "Groupe d'utilisateurs SimpleX",
@@ -378,5 +383,6 @@
     "file-proto-spec": "Lire la spécification du protocole XFTP →",
     "links": "Communauté",
     "links-title": "Liens de la communauté",
-    "links-all-languages": "Toutes les langues"
+    "links-all-languages": "Toutes les langues",
+    "why-film": "Regardez le film de 2 minutes sur YouTube"
 }
diff --git a/website/langs/he.json b/website/langs/he.json
index 11dc4a0b4d..8e1fd0aaf5 100644
--- a/website/langs/he.json
+++ b/website/langs/he.json
@@ -73,7 +73,7 @@
     "simplex-private-5-title": "שכבות מרובות של<br>ריפוד תוכן",
     "simplex-private-card-3-point-3": "חידוש החיבור מושבת כדי למנוע התקפות הפעלה.",
     "simplex-private-card-4-point-1": "כדי להגן על כתובת ה-IP שלכם, אתם יכולים לגשת לשרתים דרך Tor או רשת שכבת-על אחרת של תעבורה.",
-    "simplex-private-card-4-point-2": "כדי להשתמש ב-SimpleX דרך Tor, התקן את <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">אפליקציית Orbot</a> והפעל את SOCKS5 proxy (או VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">ב-iOS</a>).",
+    "simplex-private-card-4-point-2": "כדי להשתמש ב-SimpleX דרך Tor, התקן את <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">אפליקציית Orbot</a> והפעל את SOCKS5 proxy (או VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">ב-iOS</a>).",
     "simplex-private-card-7-point-2": "אם הודעה כלשהי תתווסף, תוסר או תשתנה, הנמען יקבל התראה.",
     "simplex-private-card-9-point-1": "כל תור הודעות מעביר הודעות בכיוון אחד, עם כתובות השליחה והקבלה השונות.",
     "privacy-matters-1-overlay-1-title": "פרטיות חוסכת לכם כסף",
@@ -99,13 +99,13 @@
     "privacy-matters-overlay-card-1-p-2": "קמעונאים מקוונים יודעים שאנשים עם הכנסה נמוכה יותר נוטים יותר לבצע רכישות דחופות, ולכן הם עשויים לגבות מחירים גבוהים יותר או להסיר הנחות.",
     "hero-overlay-card-1-p-2": "כדי להעביר הודעות, במקום מזהי משתמש המשמשים את כל הרשתות האחרות, SimpleX משתמש במזהים זמניים אנונימיים של תורי הודעות, נפרדים לכל אחד מהחיבורים שלך - אין מזהים ארוכי טווח.",
     "hero-overlay-card-2-p-2": "לאחר מכן הם יוכלו לקשר מידע זה עם הרשתות החברתיות הציבוריות הקיימות, ולקבוע כמה זהויות אמיתיות.",
-    "privacy-matters-overlay-card-1-p-3": "חלק מחברות פיננסיות וביטוח משתמשות בגרפים חברתיים כדי לקבוע שיעורי ריבית ופרמיות. לעתים קרובות זה גורם לאנשים עם הכנסה נמוכה יותר לשלם יותר &mdash; זה ידוע בתור <a href='https://fairbydesign.com/povertypremium/' target='_blank'>'פרמיית עוני'</a>.",
+    "privacy-matters-overlay-card-1-p-3": "חלק מחברות פיננסיות וביטוח משתמשות בגרפים חברתיים כדי לקבוע שיעורי ריבית ופרמיות. לעתים קרובות זה גורם לאנשים עם הכנסה נמוכה יותר לשלם יותר &mdash; זה ידוע בתור <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>'פרמיית עוני'</a>.",
     "hero-overlay-card-1-p-4": "עיצוב זה מונע דליפה כלשהי של משתמשים&apos; מטא נתונים ברמת האפליקציה. כדי לשפר עוד יותר את הפרטיות ולהגן על כתובת ה-IP שלך, תוכל להתחבר לשרתי הודעות באמצעות Tor.",
     "hero-overlay-card-2-p-3": "אפילו עם האפליקציות הפרטיות ביותר המשתמשות בשירותי Tor v3, אם אתה מדבר עם שני אנשי קשר שונים דרך אותו פרופיל הם יכולים להוכיח שהם מחוברים לאותו אדם.",
     "hero-overlay-card-3-p-1": "<a href=\"https://www.trailofbits.com/about/\">Trail of Bits</a> היא חברת ייעוץ מובילה בתחום אבטחה וטכנולוגיה שלקוחותיה כוללים ביג טק, סוכנויות ממשלתיות ופרויקטי בלוקצ'יין גדולים.",
     "hero-overlay-card-1-p-1": "משתמשים רבים שאלו: <em>אם ל-SimpleX אין מזהי משתמש, איך הוא יכול לדעת לאן להעביר הודעות?</em>",
     "simplex-network-overlay-card-1-li-2": "לעיצוב של SimpleX, בניגוד לרוב רשתות ה-P2P, אין מזהי משתמש גלובלי מכל סוג שהוא, אפילו זמני, והוא משתמש רק במזהים זמניים זוגיים, המספקים אנונימיות טובה יותר והגנה על מטא נתונים.",
-    "hero-overlay-card-1-p-6": "קרא עוד ב<a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>סקירה הטכנית של SimpleX</a>.",
+    "hero-overlay-card-1-p-6": "קרא עוד ב<a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>סקירה הטכנית של SimpleX</a>.",
     "simplex-network-overlay-card-1-p-1": "לפרוטוקולי הודעות ואפליקציות <a href='https://en.wikipedia.org/wiki/Peer-to-peer'>P2P</a> יש בעיות שונות שהופכות אותן לפחות אמינות מ-SimpleX, מורכבות יותר לניתוח, ופגיעות למספר סוגי התקפות.",
     "hero-overlay-card-1-p-3": "אתה מגדיר באילו שרתים להשתמש כדי לקבל את ההודעות, אנשי הקשר שלך &mdash; השרתים שבהם אתה משתמש כדי לשלוח את ההודעות אליהם. סביר שכל שיחה תהשתמש בשני שרתים שונים.",
     "copy-the-command-below-text": "העתיקו את הפקודה למטה והשתמש בה בצ'אט:",
@@ -113,7 +113,7 @@
     "scan-the-qr-code-with-the-simplex-chat-app": "סרקו את קוד ה-QR באפליקציית SimpleX Chat",
     "simplex-unique-card-3-p-2": "ההודעות המוצפנות מקצה לקצה מוחזקות באופן זמני בשרתי ממסר של SimpleX עד שמתקבלות, ואז הן נמחקות לצמיתות.",
     "simplex-unique-overlay-card-3-p-3": "שלא כמו שרתי רשת מאוחדים (דוא\"ל, XMPP או Matrix), שרתי SimpleX אינם מאחסנים חשבונות משתמשים, הם רק מעבירים הודעות, ומגנים על הפרטיות של שני הצדדים.",
-    "privacy-matters-overlay-card-3-p-2": "אחד הסיפורים המזעזעים ביותר הוא החוויה של <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>מוחמד אולד סלאחי</a> המתוארת בספר הזיכרונות שלו ומוצגת בסרט \"המאוריטני\". הוא הוכנס למתקן המעצר בגואנטנמו, ללא משפט, ועונה שם במשך 15 שנים לאחר שיחת טלפון לקרוב משפחתו באפגניסטן, בחשד שהיה מעורב בפיגועים ב-11 בספטמבר, למרות שחי בגרמניה בעשר השנים הקודמות.",
+    "privacy-matters-overlay-card-3-p-2": "אחד הסיפורים המזעזעים ביותר הוא החוויה של <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>מוחמד אולד סלאחי</a> המתוארת בספר הזיכרונות שלו ומוצגת בסרט \"המאוריטני\". הוא הוכנס למתקן המעצר בגואנטנמו, ללא משפט, ועונה שם במשך 15 שנים לאחר שיחת טלפון לקרוב משפחתו באפגניסטן, בחשד שהיה מעורב בפיגועים ב-11 בספטמבר, למרות שחי בגרמניה בעשר השנים הקודמות.",
     "simplex-network-2-desc": "שרתי ממסר SimpleX אינם מאחסנים פרופילי משתמש, אנשי קשר והודעות שנמסרו, אינם מתחברים זה לזה, ואין ספריית שרתים.",
     "installing-simplex-chat-to-terminal": "התקנת SimpleX Chat למסוף שורת הפקודה",
     "use-this-command": "השתמשו בפקודה הזו:",
@@ -160,13 +160,13 @@
     "simplex-unique-overlay-card-3-p-4": "אין מזהים או טקסט מוצפן משותף בין תעבורת שרת שנשלחה ומתקבלת &mdash; אם מישהו צופה בזה, הם לא יכולים לקבוע בקלות מי מתקשר עם מי, גם אם ה-TLS נפרץ.",
     "get-simplex": "הורידו את <a href=\"/downloads\">אפליקציית שולחן העבודה</a> SimpleX",
     "privacy-matters-overlay-card-3-p-1": "לכולם צריך להיות אכפת מהפרטיות והאבטחה של התקשורת שלהם &mdash; שיחות לא מזיקות עלולות להעמיד אתכם בסכנה, גם אם אין לכם מה להסתיר.",
-    "simplex-unique-overlay-card-4-p-3": "אם אתם שוקלים לפתח עבור רשת SimpleX, למשל, את הצ'אט בוט עבור משתמשי אפליקציית SimpleX, או שילוב של ספריית SimpleX Chat באפליקציות לנייד שלכם, אנא <a href='https://simplex.chat/contact# /?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JB38MZG9NLUZ_8JB38t%2ADKeAyGeee 8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>צרו קשר</a> לכל עצה ותמיכה.",
+    "simplex-unique-overlay-card-4-p-3": "אם אתם שוקלים לפתח עבור רשת SimpleX, למשל, את הצ'אט בוט עבור משתמשי אפליקציית SimpleX, או שילוב של ספריית SimpleX Chat באפליקציות לנייד שלכם, אנא <a href='https://simplex.chat/contact# /?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JB38MZG9NLUZ_8JB38t%2ADKeAyGeee 8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>צרו קשר</a> לכל עצה ותמיכה.",
     "simplex-network-3-header": "רשת SimpleX",
     "simplex-unique-card-2-p-1": "מכיוון שאין לך מזהה או כתובת קבועה ברשת SimpleX, אף אחד לא יכול ליצור איתך קשר אלא אם כן אתה משתף כתובת משתמש חד-פעמית או זמנית, כקוד QR או קישור.",
     "join-the-REDDIT-community": "הצטרפו לקהילת REDDIT",
-    "privacy-matters-overlay-card-3-p-3": "אנשים רגילים נעצרים על מה שהם משתפים באינטרנט, אפילו דרך החשבונות ה'אנונימיים' שלהם, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout -catholic-mother-malicious-online-posts.html' target='_blank'>אפילו במדינות דמוקרטיות</a>.",
+    "privacy-matters-overlay-card-3-p-3": "אנשים רגילים נעצרים על מה שהם משתפים באינטרנט, אפילו דרך החשבונות ה'אנונימיים' שלהם, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout -catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>אפילו במדינות דמוקרטיות</a>.",
     "simplex-unique-overlay-card-3-p-2": "ההודעות המוצפנות מקצה לקצה מוחזקות באופן זמני בשרתי ממסר של SimpleX עד שמתקבלות, ואז הן נמחקות לצמיתות.",
-    "simplex-unique-overlay-card-4-p-2": "רשת SimpleX משתמשת ב<a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>פרוטוקול פתוח</a> ומספקת <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>SDK ליצירת צ'אט בוטים</a>, המאפשר הטמעה של שירותים שמשתמשים יכולים לתקשר איתם באמצעות אפליקציות SimpleX Chat &mdash; אנחנו ממש מצפים לראות אילו שירותי SimpleX אתם יכולים לבנות.",
+    "simplex-unique-overlay-card-4-p-2": "רשת SimpleX משתמשת ב<a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>פרוטוקול פתוח</a> ומספקת <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>SDK ליצירת צ'אט בוטים</a>, המאפשר הטמעה של שירותים שמשתמשים יכולים לתקשר איתם באמצעות אפליקציות SimpleX Chat &mdash; אנחנו ממש מצפים לראות אילו שירותי SimpleX אתם יכולים לבנות.",
     "contact-hero-p-2": "עדיין לא הורדתם את ה-SimpleX Chat?",
     "why-simplex-is-unique": "מדוע SimpleX הוא <span class='gradient-text'>ייחודי</span>",
     "simplex-network-section-header": "<span class='gradient-text'>רשת</span> SimpleX",
@@ -174,7 +174,7 @@
     "simplex-network-1-overlay-linktext": "בעיות של רשתות P2P",
     "protocol-2-text": "XMPP, Matrix",
     "simplex-network-overlay-card-1-li-4": "יישומי P2P עלולים להיחסם על ידי ספקי אינטרנט מסוימים (כמו <a href='https://en.wikipedia.org/wiki/BitTorrent'>BitTorrent</a>). SimpleX אינו תלוי בתעבורה - הוא יכול לעבוד על פרוטוקולי אינטרנט סטנדרטיים, למשל WebSockets.",
-    "privacy-matters-overlay-card-2-p-1": "לפני זמן לא רב ראינו את הבחירות הראשיות שעברו מניפולציות על ידי <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>חברת ייעוץ מכובדת</a> שהשתמשה בגרפים החברתיים שלנו כדי לעוות את השקפתנו על העולם האמיתי ולתמרן את ההצבעות שלנו.",
+    "privacy-matters-overlay-card-2-p-1": "לפני זמן לא רב ראינו את הבחירות הראשיות שעברו מניפולציות על ידי <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>חברת ייעוץ מכובדת</a> שהשתמשה בגרפים החברתיים שלנו כדי לעוות את השקפתנו על העולם האמיתי ולתמרן את ההצבעות שלנו.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX היא הרשת הראשונה שאין לה מזהי משתמש מטבעה, ובכך מגינה על גרף החיבורים שלך טוב יותר מכל חלופה מוכרת.",
     "learn-more": "למדו עוד",
     "scan-qr-code-from-mobile-app": "סרקו קוד QR באפליקציה לנייד",
diff --git a/website/langs/hu.json b/website/langs/hu.json
index 80a5c614e1..7a97605a73 100644
--- a/website/langs/hu.json
+++ b/website/langs/hu.json
@@ -90,7 +90,7 @@
     "hero-overlay-card-1-p-2": "Az üzenetek kézbesítéséhez az összes többi hálózat által használt felhasználói azonosítók helyett a SimpleX az üzenetek várólistába rendezéséhez ideiglenes, névtelen, páros azonosítókat használ, külön-külön minden egyes kapcsolathoz &mdash; nincsenek hosszú távú azonosítók.",
     "hero-overlay-card-1-p-4": "Ez a kialakítás megakadályozza a felhasználók metaadatainak kiszivárgását az alkalmazás szintjén. Az adatvédelem további javítása és az IP-cím védelme érdekében az üzenetküldő kiszolgálókhoz Tor hálózaton keresztül is kapcsolódhat.",
     "hero-overlay-card-1-p-5": "Csak a kliensek tárolják a felhasználói profilokat, partnereket és csoportokat; az üzenetek küldése kétrétegű végpontok közötti titkosítással történik.",
-    "hero-overlay-card-1-p-6": "További leírást a <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX ismertetőben</a> olvashat.",
+    "hero-overlay-card-1-p-6": "További leírást a <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX ismertetőben</a> olvashat.",
     "hero-overlay-card-2-p-1": "Ha a felhasználók állandó azonosítóval rendelkeznek, még akkor is, ha ez csak egy véletlenszerű szám, például egy munkamenet-azonosító, fennáll annak a veszélye, hogy a szolgáltató vagy egy támadó megfigyelheti, azt hogy hogyan kapcsolódnak a felhasználók egymáshoz, és hány üzenetet küldenek egymásnak.",
     "hero-overlay-card-2-p-2": "Ezt az információt aztán összefüggésbe hozhatják a meglévő nyilvános közösségi hálózatokkal, és meghatározhatnak néhány valódi személyazonosságot.",
     "hero-overlay-card-2-p-3": "Még a Tor v3 szolgáltatásokat használó, legprivátabb alkalmazások esetében is, ha két különböző partnerével beszél ugyanazon a profilon keresztül, bizonyítani tudják, hogy ugyanahhoz a személyhez kapcsolódnak.",
@@ -104,14 +104,14 @@
     "simplex-network-overlay-card-1-li-5": "Minden ismert P2P-hálózat sebezhető <a href=\"https://en.wikipedia.org/wiki/Sybil_attack\">Sybil támadással</a>, mert minden egyes csomópont felderíthető, és a hálózat egészként működik. A támadások enyhítésére szolgáló ismert intézkedés lehet egy központi kiszolgáló (például: tracker), vagy egy drága <a href=\"https://en.wikipedia.org/wiki/Proof_of_work\">tanúsítvány</a>. A SimpleX hálózat nem ismeri fel a kiszolgálókat, töredezett és több elszigetelt alhálózatként működik, ami lehetetlenné teszi az egész hálózatra kiterjedő támadásokat.",
     "privacy-matters-overlay-card-1-p-1": "Sok nagyvállalat arra használja fel a felhasználóival kapcsolatban álló személyek adatait, hogy megbecsülje a jövedelmi helyzetüket és olyan termékeket kínáljon fel, amelyekre valójában nincs is szükségük, valamint hogy meghatározza az árakat.",
     "privacy-matters-overlay-card-1-p-2": "Az online kiskereskedők tudják, hogy az alacsonyabb jövedelműek nagyobb valószínűséggel vásárolnak azonnal, ezért magasabb árakat számíthatnak fel, vagy eltörölhetik a kedvezményeket.",
-    "privacy-matters-overlay-card-1-p-3": "Egyes pénzügyi és biztosítótársaságok szociális grafikonokat használnak a kamatlábak és a díjak meghatározásához. Ez gyakran arra készteti az alacsonyabb jövedelmű embereket, hogy többet fizessenek &mdash; ez az úgynevezett <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">„szegénységi prémium”</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Egyes pénzügyi és biztosítótársaságok szociális grafikonokat használnak a kamatlábak és a díjak meghatározásához. Ez gyakran arra készteti az alacsonyabb jövedelmű embereket, hogy többet fizessenek &mdash; ez az úgynevezett <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">„szegénységi prémium”</a>.",
     "privacy-matters-overlay-card-1-p-4": "A SimpleX hálózat minden alternatívánál jobban védi a kapcsolatai adatait, teljes mértékben megakadályozva, hogy az ismeretségi-hálója bármilyen vállalat vagy szervezet számára elérhetővé váljon. Még ha az emberek a SimpleX Chat által előre beállított kiszolgálókat is használják, sem az alkalmazások, sem a kiszolgálók üzemeltetői nem ismerik, sem felhasználók számát, sem a kapcsolataikat.",
-    "privacy-matters-overlay-card-2-p-1": "Nem is olyan régen megfigyelhettük, hogy a nagy választásokat manipulálta egy <a href=\"https://en.wikipedia.org/wiki/Facebook-Cambridge_Analytica_data_scandal\" target=\"_blank\">neves tanácsadó cég</a>, amely az ismeretségi-háló segítségével eltorzította a valós világról alkotott képünket, és manipulálta a szavazatainkat.",
+    "privacy-matters-overlay-card-2-p-1": "Nem is olyan régen megfigyelhettük, hogy a nagy választásokat manipulálta egy <a href=\"https://en.wikipedia.org/wiki/Facebook-Cambridge_Analytica_data_scandal\" target=\"_blank\" rel=\"noopener\">neves tanácsadó cég</a>, amely az ismeretségi-háló segítségével eltorzította a valós világról alkotott képünket, és manipulálta a szavazatainkat.",
     "privacy-matters-overlay-card-2-p-2": "Ahhoz, hogy objektív legyen és független döntéseket tudjon hozni, az információs terét is kézben kell tartania. Ez csak akkor lehetséges, ha egy privát kommunikációs hálózatot használ, amely nem fér hozzá az ismeretségi hálójához.",
     "privacy-matters-overlay-card-2-p-3": "A SimpleX az első olyan hálózat, amely eleve nem rendelkezik felhasználói azonosítókkal, így jobban védi az ismeretségi-hálóját, mint bármely ismert alternatíva.",
     "privacy-matters-overlay-card-3-p-1": "Mindenkinek törődnie kell a magánélet és a kommunikáció biztonságával &mdash; az ártalmatlan beszélgetések veszélybe sodorhatják, még akkor is, ha nincs semmi rejtegetnivalója.",
-    "privacy-matters-overlay-card-3-p-2": "Az egyik legmegdöbbentőbb a <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedou Ould Salahi</a> memoárjában leírt és az „A mauritániai” c. filmben bemutatott történet. Őt bírósági tárgyalás nélkül a guantánamói táborba zárták, és ott kínozták 15 éven át, miután egy afganisztáni rokonát telefonon felhívta, akit azzal gyanúsítottak a hatóságok, hogy köze van a 9/11-es merényletekhez, holott Salahi az előző 10 évben Németországban élt.",
-    "privacy-matters-overlay-card-3-p-3": "Átlagos embereket letartóztatnak azért, amit online megosztanak, még „névtelen” fiókjaikon keresztül is, <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">még demokratikus országokban is</a>.",
+    "privacy-matters-overlay-card-3-p-2": "Az egyik legmegdöbbentőbb a <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedou Ould Salahi</a> memoárjában leírt és az „A mauritániai” c. filmben bemutatott történet. Őt bírósági tárgyalás nélkül a guantánamói táborba zárták, és ott kínozták 15 éven át, miután egy afganisztáni rokonát telefonon felhívta, akit azzal gyanúsítottak a hatóságok, hogy köze van a 9/11-es merényletekhez, holott Salahi az előző 10 évben Németországban élt.",
+    "privacy-matters-overlay-card-3-p-3": "Átlagos embereket letartóztatnak azért, amit online megosztanak, még „névtelen” fiókjaikon keresztül is, <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">még demokratikus országokban is</a>.",
     "privacy-matters-overlay-card-3-p-4": "Nem elég csak egy végpontok között titkosított üzenetváltó alkalmazást használnunk, mindannyiunknak olyan üzenetváltó alkalmazásokat kell használnunk, amelyek védik a személyes partnereink magánéletét &mdash; akikkel kapcsolatban állunk.",
     "simplex-unique-overlay-card-1-p-1": "Más üzenetküldő hálózatoktól eltérően a SimpleX <strong>nem rendel azonosítókat a felhasználókhoz</strong>. Nem támaszkodik telefonszámokra, tartomány-alapú címekre (mint az e-mail, XMPP vagy a Matrix), felhasználónevekre, nyilvános kulcsokra vagy akár véletlenszerű számokra a felhasználók azonosításához &mdash; a SimpleX kiszolgálók üzemeltetői nem tudják, hogy hányan használják a kiszolgálóikat.",
     "simplex-unique-overlay-card-1-p-2": "Az üzenetek kézbesítéséhez a SimpleX egyirányú várólistákat használ az üzenetekhez, <a href=\"https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier\">páronkénti, névtelen címekkel</a>, külön a fogadott és külön az elküldött üzenetekhez, általában különböző kiszolgálókon keresztül.",
@@ -123,8 +123,8 @@
     "simplex-unique-overlay-card-3-p-3": "A föderált hálózatok kiszolgálóitól (e-mail, XMPP vagy Matrix) eltérően a SimpleX kiszolgálók nem tárolják a felhasználói fiókokat, csak továbbítják az üzeneteket, így védve mindkét fél magánéletét.",
     "simplex-unique-overlay-card-3-p-4": "A küldött és a fogadott kiszolgálóforgalom között nincsenek közös azonosítók vagy titkosított szövegek &mdash; ha bárki megfigyeli, nem tudja könnyen megállapítani, hogy ki kivel kommunikál, még akkor sem, ha a TLS-t kompromittálják.",
     "simplex-unique-overlay-card-4-p-1": "Használhatja <strong>a SimpleXet a saját kiszolgálóival</strong>, és továbbra is kommunikálhat azokkal, akik az előre beállított kiszolgálókat használják az alkalmazásban.",
-    "simplex-unique-overlay-card-4-p-2": "A SimpleX hálózat <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">nyitott protokollt</a> használ és <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK-t biztosít a csevegési botok létrehozásához</a>, lehetővé téve olyan szolgáltatások megvalósítását, amelyekkel a felhasználók a SimpleX Chat alkalmazásokon keresztül léphetnek kapcsolatba &mdash; mi már nagyon várjuk, hogy milyen SimpleX szolgáltatásokat készítenek a lelkes közreműködők.",
-    "simplex-unique-overlay-card-4-p-3": "Ha a SimpleX hálózatra való fejlesztést fontolgatja, például a SimpleX alkalmazások felhasználóinak szánt csevegési botot, vagy a SimpleX Chat könyvtárbotjának integrálását más mobilalkalmazásba, <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">lépjen velünk kapcsolatba</a>, ha bármilyen tanácsot vagy támogatást szeretne kapni.",
+    "simplex-unique-overlay-card-4-p-2": "A SimpleX hálózat <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">nyitott protokollt</a> használ és <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK-t biztosít a csevegési botok létrehozásához</a>, lehetővé téve olyan szolgáltatások megvalósítását, amelyekkel a felhasználók a SimpleX Chat alkalmazásokon keresztül léphetnek kapcsolatba &mdash; mi már nagyon várjuk, hogy milyen SimpleX szolgáltatásokat készítenek a lelkes közreműködők.",
+    "simplex-unique-overlay-card-4-p-3": "Ha a SimpleX hálózatra való fejlesztést fontolgatja, például a SimpleX alkalmazások felhasználóinak szánt csevegési botot, vagy a SimpleX Chat könyvtárbotjának integrálását más mobilalkalmazásba, <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">lépjen velünk kapcsolatba</a>, ha bármilyen tanácsot vagy támogatást szeretne kapni.",
     "simplex-unique-card-1-p-1": "A SimpleX megvédi a profilhoz tartozó partnereket és azok metaadatait is, elrejtve azokat a SimpleX hálózat kiszolgálói és a megfigyelők elől.",
     "simplex-unique-card-1-p-2": "Minden más létező üzenetküldő hálózattól eltérően a SimpleX nem rendelkezik a felhasználókhoz rendelt azonosítókkal &mdash; <strong>még véletlenszerű számokkal sem</strong>.",
     "simplex-unique-card-2-p-1": "Mivel a SimpleX hálózaton senkinek sincs azonosítója vagy állandó címe, ezért senki sem tud kapcsolatba lépni a felhasználókkal, hacsak nem osztanak meg egy egyszeri vagy ideiglenes felhasználói címet, például QR-kódot vagy hivatkozást.",
@@ -224,7 +224,7 @@
     "contact-hero-header": "Ez egy meghívó a SimpleX Chaten való beszélgetéshez",
     "invitation-hero-header": "Kapott egy egyszer használható meghívót a SimpleX Chaten való beszélgetéshez",
     "simplex-network-overlay-card-1-li-4": "A P2P-megvalósításokat egyes internetszolgáltatók blokkolhatják (mint például a <a href=\"https://en.wikipedia.org/wiki/BitTorrent\">BitTorrent</a>). A SimpleX átvitel-független &mdash; a szabványos webes protokollokon, például WebSocketsen keresztül is működik.",
-    "simplex-private-card-4-point-2": "A SimpleX, Tor hálózaton keresztüli használatához telepítse az <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot alkalmazást</a> és engedélyezze a SOCKS5 proxyt (vagy a VPN-t <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">az iOS-ban</a>).",
+    "simplex-private-card-4-point-2": "A SimpleX, Tor hálózaton keresztüli használatához telepítse az <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot alkalmazást</a> és engedélyezze a SOCKS5 proxyt (vagy a VPN-t <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">az iOS-ban</a>).",
     "simplex-private-card-5-point-1": "A SimpleX minden titkosítási réteghez tartalomkitöltést használ az üzenetméretre irányuló támadások meghiúsítása érdekében.",
     "simplex-private-card-5-point-2": "A kiszolgálók és a hálózatot megfigyelők számára a különböző méretű üzenetek egyformának tűnnek.",
     "privacy-matters-1-title": "Hirdetés és árdiszkrimináció",
@@ -260,7 +260,12 @@
     "directory": "Csoportjegyzék",
     "about-and-contact-us": "Névjegy és kapcsolat",
     "index-hero-h1": "<div class=\"medium\">Legyen<br>szabad</div>",
-    "index-hero-p1": "Az első hálózat felhasználói azonosítók nélkül.<br>A saját partnerei, csoportjai és csatornái felett Ön rendelkezik.",
+    "index-hero-p1": "<span class=\"nowrap\">Az egyetlen üzenetküldő hálózat</span> <span class=\"nowrap\">semmilyen felhasználói azonosító nélkül.</span><br>A saját partnerei, csoportjai és csatornái felett Ön rendelkezik.",
+    "index-hero-own-part": "Legyen résztulajdonos.",
+    "index-hero-downloads": "Letöltés",
+    "index-hero-monthly-users": "Havi felhasználó",
+    "index-hero-countdown-lead": "A SimpleX domainek indulása",
+    "index-hero-countdown-done": "Szerezzen SimpleX domaint",
     "index-hero-download-desktop-btn-title": "SimpleX számítógépes alkalmazásának letöltése",
     "index-security-assessment-title": "Biztonsági auditok",
     "index-security-review-2022-title": "Biztonsági audit 2022",
@@ -299,7 +304,7 @@
     "index-roadmap-3-title": "Közösségek növelése",
     "index-roadmap-3-desc": "Eszközök biztosítása a közösségek népszerűsítéséhez",
     "index-directory-h2": "Csatlakozzon a SimpleX közösségekhez",
-    "index-directory-p1": "Több mint 2 millió ember töltötte le a SimpleX alkalmazások egyikét.",
+    "index-directory-p1": "Több mint 3 millió ember töltötte le a SimpleX alkalmazások egyikét.",
     "index-directory-p2": "Találja meg a kedvenc csatornáit és közösségeit a csoportjegyzékben, vagy hozza létre a sajátját!",
     "index-directory-cta": "SimpleX-csoportjegyzék megtekintése",
     "index-directory-users-group-title": "SimpleX felhasználók csoportja",
@@ -378,5 +383,6 @@
     "links-all-languages": "Összes nyelv",
     "docs-dropdown-16": "Csevegési átjátszó üzemeltetése",
     "index-hero-invest": "Fektessen be a SimpleX Chatbe.",
-    "index-hero-invest-cta": "Bővebben a Wefunderen."
+    "index-hero-invest-cta": "Bővebben a Wefunderen.",
+    "why-film": "Nézze meg a 2 perces filmet a YouTube-on"
 }
diff --git a/website/langs/id.json b/website/langs/id.json
index 2811873b46..64dddfa10a 100644
--- a/website/langs/id.json
+++ b/website/langs/id.json
@@ -126,7 +126,7 @@
     "simplex-private-card-3-point-1": "Hanya TLS 1.2/1.3 dengan algoritma kuat yang digunakan untuk koneksi client-server.",
     "simplex-private-card-3-point-2": "Sidikjari server dan pengikatan saluran mencegah serangan MITM secara berulang.",
     "simplex-private-card-3-point-3": "Pemulihan koneksi dinonaktifkan untuk mencegah serangan sesi.",
-    "simplex-private-card-4-point-2": "Untuk menggunakan SimpleX melalui Tor, silakan instal <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">aplikasi Orbot</a> dan aktifkan proksi SOCKS5 (atau VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">di iOS</a>).",
+    "simplex-private-card-4-point-2": "Untuk menggunakan SimpleX melalui Tor, silakan instal <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">aplikasi Orbot</a> dan aktifkan proksi SOCKS5 (atau VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">di iOS</a>).",
     "simplex-private-card-5-point-1": "SimpleX menggunakan pengunci konten untuk setiap lapisan enkripsi guna menggagalkan serangan pesan.",
     "simplex-private-card-5-point-2": "Ini membuat pesan dengan ukuran berbeda terlihat sama bagi server dan pengamat jaringan.",
     "simplex-private-card-6-point-1": "Banyak jaringan komunikasi yang rentan terhadap serangan MITM oleh server atau penyedia jaringan.",
@@ -145,7 +145,7 @@
     "simplex-private-card-1-point-2": "Kotak kripto NaCL di setiap antrean untuk mencegah korelasi lalu lintas antara antrean pesan jika TLS disusupi.",
     "simplex-private-card-2-point-1": "Lapisan enkripsi server tambahan untuk pengiriman ke penerima, untuk mencegah korelasi antara lalu lintas server yang diterima dan dikirim jika TLS disusupi.",
     "hero-overlay-card-1-p-5": "Hanya perangkat klien yang menyimpan profil pengguna, kontak, dan grup; pesan dikirim dengan enkripsi end-to-end 2 lapis.",
-    "hero-overlay-card-1-p-6": "Selengkapnya di <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">whitepaper SimpleX</a>.",
+    "hero-overlay-card-1-p-6": "Selengkapnya di <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">whitepaper SimpleX</a>.",
     "hero-overlay-card-2-p-1": "Bila pengguna memiliki identitas persisten, meskipun ini hanya angka acak, seperti ID Sesi, ada risiko bahwa penyedia atau penyerang dapat mengamati bagaimana pengguna terhubung dan berapa banyak pesan yang mereka kirim.",
     "hero-overlay-card-2-p-2": "Mereka kemudian dapat menghubungkan informasi ini dengan jaringan sosial publik yang ada, dan menentukan beberapa identitas sebenarnya.",
     "hero-overlay-card-2-p-3": "Bahkan dengan aplikasi paling pribadi yang menggunakan layanan Tor v3, jika Anda berbicara dengan dua kontak berbeda melalui profil yang sama, mereka dapat membuktikan bahwa mereka terhubung dengan orang yang sama.",
@@ -236,14 +236,14 @@
     "simplex-network-overlay-card-1-li-6": "Jaringan P2P mungkin rentan terhadap <a href='https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent'>serangan DRDoS</a>, ketika klien dapat menyiarkan ulang dan memperkuat lalu lintas, yang mengakibatkan penolakan layanan di seluruh jaringan. Klien SimpleX hanya meneruskan lalu lintas dari koneksi yang diketahui dan tidak dapat digunakan oleh penyerang untuk memperkuat lalu lintas di seluruh jaringan.",
     "privacy-matters-overlay-card-1-p-1": "Banyak perusahaan besar menggunakan informasi mengenai siapa yang terhubung dengan Anda untuk memperkirakan pendapatan Anda, menjual produk yang sebenarnya tidak Anda butuhkan, dan menentukan harga.",
     "privacy-matters-overlay-card-1-p-2": "Pengecer daring mengetahui bahwa orang-orang berpenghasilan rendah cenderung melakukan pembelian mendesak, sehingga mereka mungkin mengenakan harga lebih tinggi atau menghapus diskon.",
-    "privacy-matters-overlay-card-1-p-3": "Beberapa perusahaan keuangan dan asuransi menggunakan grafik sosial untuk menentukan suku bunga dan premium. Hal ini seringkali membuat orang berpenghasilan rendah membayar lebih banyak — dikenal sebagai <a href='https://fairbydesign.com/povertypremium/' target='_blank'>'premium kemelaratan'</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Beberapa perusahaan keuangan dan asuransi menggunakan grafik sosial untuk menentukan suku bunga dan premium. Hal ini seringkali membuat orang berpenghasilan rendah membayar lebih banyak — dikenal sebagai <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>'premium kemelaratan'</a>.",
     "privacy-matters-overlay-card-1-p-4": "Jaringan SimpleX melindungi privasi koneksi Anda lebih baik daripada alternatif lainnya, sepenuhnya mencegah grafik sosial Anda diakses oleh perusahaan atau organisasi mana pun. Bahkan ketika orang menggunakan server yang telah dikonfigurasi sebelumnya di aplikasi SimpleX Chat, operator server tidak mengetahui jumlah pengguna atau koneksi mereka.",
-    "privacy-matters-overlay-card-2-p-1": "Belum lama ini kita menyaksikan pemilu besar dimanipulasi oleh <a href='https://id.wikipedia.org/wiki/Skandal_data_Facebook–Cambridge_Analytica' target='_blank'>sebuah perusahaan konsultan terkemuka</a> yang menggunakan grafik sosial kita untuk mendistorsi pandangan kita terhadap dunia nyata dan memanipulasi suara kita.",
+    "privacy-matters-overlay-card-2-p-1": "Belum lama ini kita menyaksikan pemilu besar dimanipulasi oleh <a href='https://id.wikipedia.org/wiki/Skandal_data_Facebook–Cambridge_Analytica' target='_blank' rel='noopener'>sebuah perusahaan konsultan terkemuka</a> yang menggunakan grafik sosial kita untuk mendistorsi pandangan kita terhadap dunia nyata dan memanipulasi suara kita.",
     "privacy-matters-overlay-card-2-p-2": "Agar objektif dan dapat membuat keputusan yang independen, Anda perlu mengendalikan ruang informasi Anda. Hal ini hanya mungkin jika Anda menggunakan jaringan komunikasi pribadi yang tidak memiliki akses ke grafik sosial Anda.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX adalah jaringan pertama yang tidak memiliki ID pengguna apa pun secara desain, dengan cara ini melindungi grafik koneksi Anda lebih baik daripada alternatif yang diketahui.",
     "privacy-matters-overlay-card-3-p-1": "Setiap orang harus peduli dengan privasi dan keamanan komunikasi mereka — percakapan yang tidak berbahaya dapat membahayakan Anda, bahkan jika Anda tidak menyembunyikan apa pun.",
-    "privacy-matters-overlay-card-3-p-2": "Salah satu kisah paling mengejutkan adalah pengalaman <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>Mohamedou Ould Salahi</a> yang diceritakan dalam memoarnya dan ditampilkan dalam film The Mauritanian. Ia dimasukkan ke kamp Guantanamo tanpa diadili, dan disiksa di sana selama 15 tahun setelah menelepon kerabatnya di Afghanistan, karena dicurigai terlibat dalam serangan 9/11, meskipun ia pernah tinggal di Jerman selama 10 tahun sebelumnya.",
-    "privacy-matters-overlay-card-3-p-3": "Orang biasa ditangkap karena apa yang mereka bagikan secara daring, bahkan melalui akun 'anonim' mereka, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>bahkan di negara demokrasi</a>.",
+    "privacy-matters-overlay-card-3-p-2": "Salah satu kisah paling mengejutkan adalah pengalaman <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>Mohamedou Ould Salahi</a> yang diceritakan dalam memoarnya dan ditampilkan dalam film The Mauritanian. Ia dimasukkan ke kamp Guantanamo tanpa diadili, dan disiksa di sana selama 15 tahun setelah menelepon kerabatnya di Afghanistan, karena dicurigai terlibat dalam serangan 9/11, meskipun ia pernah tinggal di Jerman selama 10 tahun sebelumnya.",
+    "privacy-matters-overlay-card-3-p-3": "Orang biasa ditangkap karena apa yang mereka bagikan secara daring, bahkan melalui akun 'anonim' mereka, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>bahkan di negara demokrasi</a>.",
     "privacy-matters-overlay-card-3-p-4": "Tidaklah cukup jika hanya menggunakan layanan pesan terenkripsi end-to-end, kita semua harus menggunakan layanan pesan yang melindungi privasi jaringan pribadi kita &mdash; dengan siapa kita terhubung.",
     "simplex-unique-overlay-card-1-p-1": "Berbeda dengan jaringan perpesanan lainnya, SimpleX <strong>tidak memiliki ID tetap kepada pengguna</strong>. SimpleX tidak bergantung pada nomor telepon, alamat berbasis domain (seperti email atau XMPP), nama pengguna, kunci publik, atau bahkan angka acak untuk mengidentifikasi penggunanya — operator server SimpleX tidak tahu berapa banyak orang yang menggunakan server mereka.",
     "simplex-unique-overlay-card-1-p-2": "Untuk menyampaikan pesan, SimpleX menggunakan <a href='https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier'>alamat anonim penghubung</a> dari antrean pesan searah, terpisah untuk pesan yang diterima dan dikirim, biasanya melalui server yang berbeda.",
@@ -255,13 +255,19 @@
     "simplex-unique-overlay-card-3-p-3": "Tidak seperti server jaringan terfederasi (email, XMPP atau Matrix), server SimpleX tidak menyimpan akun pengguna, mereka hanya menyampaikan pesan, melindungi privasi kedua belah pihak.",
     "simplex-unique-overlay-card-3-p-4": "Tidak ada pengenal atau teks sandi yang sama antara lalu lintas server yang dikirim dan diterima — jika ada orang yang mengamatinya, mereka tidak dapat dengan mudah menentukan siapa yang berkomunikasi dengan siapa, bahkan jika TLS disusupi.",
     "simplex-unique-overlay-card-4-p-1": "Anda dapat <strong>menggunakan SimpleX dengan server Anda sendiri</strong> dan tetap berkomunikasi dengan orang yang menggunakan server yang dikonfigurasikan sebelumnya dalam aplikasi.",
-    "simplex-unique-overlay-card-4-p-2": "Jaringan SimpleX menggunakan <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>protokol terbuka</a> dan menyediakan <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>SDK untuk membuat bot obrolan</a>, yang memungkinkan penerapan layanan yang dapat berinteraksi dengan pengguna melalui aplikasi SimpleX Chat &mdash; kami benar-benar menantikan untuk melihat layanan SimpleX apa yang akan Anda buat.",
-    "simplex-unique-overlay-card-4-p-3": "Jika Anda mempertimbangkan pengembangan untuk jaringan SimpleX, misalnya, bot obrolan untuk pengguna aplikasi SimpleX, atau integrasi pustaka Obrolan SimpleX ke dalam aplikasi seluler Anda, silakan <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>hubungi kami</a> untuk saran dan dukungan apa pun.",
+    "simplex-unique-overlay-card-4-p-2": "Jaringan SimpleX menggunakan <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>protokol terbuka</a> dan menyediakan <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>SDK untuk membuat bot obrolan</a>, yang memungkinkan penerapan layanan yang dapat berinteraksi dengan pengguna melalui aplikasi SimpleX Chat &mdash; kami benar-benar menantikan untuk melihat layanan SimpleX apa yang akan Anda buat.",
+    "simplex-unique-overlay-card-4-p-3": "Jika Anda mempertimbangkan pengembangan untuk jaringan SimpleX, misalnya, bot obrolan untuk pengguna aplikasi SimpleX, atau integrasi pustaka Obrolan SimpleX ke dalam aplikasi seluler Anda, silakan <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>hubungi kami</a> untuk saran dan dukungan apa pun.",
     "simplex-unique-card-1-p-1": "SimpleX melindungi privasi profil, kontak, dan metadata Anda, menyembunyikannya dari server jaringan SimpleX dan pengamat mana pun.",
     "get-simplex": "Dapatkan <a href=\"/downloads\">aplikasi desktop</a> SimpleX",
     "index-hero-h1": "<div class=\"small\">Bebaslah</div>",
     "index-hero-h2": "Di Jaringan Anda",
-    "index-hero-p1": "Jaringan pertama tanpa ID pengguna.<br>Anda pemilik kontak, grup, dan kanal Anda.",
+    "index-hero-p1": "<span class=\"nowrap\">Satu-satunya jaringan pesan</span> <span class=\"nowrap\">tanpa pengenal pengguna apa pun.</span><br>Anda pemilik kontak, grup, dan kanal Anda.",
+    "index-hero-own-part": "Miliki sebagian darinya.",
+    "index-hero-invest": "Berinvestasi di SimpleX Chat.",
+    "index-hero-downloads": "Unduhan",
+    "index-hero-monthly-users": "Pengguna bulanan",
+    "index-hero-countdown-lead": "Peluncuran domain SimpleX",
+    "index-hero-countdown-done": "Dapatkan domain SimpleX",
     "index-hero-download-desktop-btn-title": "Unduh Aplikasi Desktop SimpleX",
     "index-testflight-title": "Pratinjau iOS publik di TestFlight",
     "index-f-droid-title": "Aplikasi SimpleX via F-Droid",
@@ -299,7 +305,7 @@
     "index-roadmap-3-title": "Buat Komunitas Anda Meningkat",
     "index-roadmap-3-desc": "Alat untuk promosikan komunitas Anda",
     "index-directory-h2": "Gabung ke Komunitas SimpleX",
-    "index-directory-p1": "Lebih dari 2 juta orang telah mengunduh aplikasi SimpleX.",
+    "index-directory-p1": "Lebih dari 3 juta orang telah mengunduh aplikasi SimpleX.",
     "index-directory-p2": "Temukan kanal dan komunitas Anda di direktori dan buat milik Anda sendiri!",
     "index-directory-cta": "Lihat Direktori SimpleX",
     "index-directory-users-group-title": "Grup pengguna SimpleX",
@@ -374,5 +380,6 @@
     "file-proto-spec": "Baca spesifikasi protokol XFTP →",
     "links": "Tautan",
     "links-title": "Tautan Komunitas",
-    "links-all-languages": "Semua Bahasa"
+    "links-all-languages": "Semua Bahasa",
+    "why-film": "Tonton film 2 menit di YouTube"
 }
diff --git a/website/langs/it.json b/website/langs/it.json
index a482d23c03..3eacc8178c 100644
--- a/website/langs/it.json
+++ b/website/langs/it.json
@@ -57,7 +57,7 @@
     "hero-overlay-card-1-p-1": "Molti utenti hanno chiesto: <em>se SimpleX non ha identificatori utente, come può sapere dove recapitare i messaggi? </em>",
     "hero-overlay-card-1-p-3": "Sei tu a definire quale/i server usare per ricevere i messaggi, i tuoi contatti i server che usi per inviare loro i messaggi. È probabile che ogni conversazione utilizzi due server diversi.",
     "hero-overlay-card-1-p-5": "Solo i dispositivi client conservano profili utente, contatti e gruppi; i messaggi vengono inviati con crittografia end-to-end a 2 livelli.",
-    "hero-overlay-card-1-p-6": "Maggiori informazioni nel <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">libro bianco di SimpleX</a>.",
+    "hero-overlay-card-1-p-6": "Maggiori informazioni nel <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">libro bianco di SimpleX</a>.",
     "hero-overlay-card-2-p-2": "Potrebbero quindi correlare queste informazioni con i social network pubblici esistenti e determinare alcune identità reali.",
     "hero-overlay-card-2-p-4": "SimpleX protegge da questi attacchi non avendo alcun ID utente per design. Inoltre, se usi la modalità di modalità in incognito, il tuo nome mostrato sarà diverso per ogni contatto, evitando dati condivisi tra di loro.",
     "simplex-network-overlay-card-1-li-2": "Il design di SimpleX, a differenza della maggior parte delle reti P2P, non ha identificatori utente globali di alcun tipo, nemmeno temporanei, e usa solo identificatori temporanei a coppie, garantendo una maggiore protezione dell'anonimato e dei metadati.",
@@ -67,14 +67,14 @@
     "privacy-matters-overlay-card-1-p-4": "La rete di SimpleX protegge la privacy delle tue connessioni meglio di qualsiasi alternativa, impedendo completamente che il tuo grafico sociale diventi disponibile a qualsiasi azienda o organizzazione. Anche quando le persone usano i server preconfigurati in SimpleX Chat, gli operatori dei server non conoscono il numero di utenti o le loro connessioni.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX è la prima rete che non ha alcun identificatore utente per design, proteggendo così il tuo grafico delle connessioni meglio di qualsiasi alternativa conosciuta.",
     "privacy-matters-overlay-card-3-p-1": "Tutti dovrebbero preoccuparsi della privacy e della sicurezza delle proprie comunicazioni &mdash; conversazioni innocue possono metterti in pericolo, anche se non hai nulla da nascondere.",
-    "privacy-matters-overlay-card-3-p-3": "Le persone comuni vengono arrestate per ciò che condividono online, anche tramite i loro account \"anonimi\", <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">anche nei Paesi democratici</a>.",
+    "privacy-matters-overlay-card-3-p-3": "Le persone comuni vengono arrestate per ciò che condividono online, anche tramite i loro account \"anonimi\", <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">anche nei Paesi democratici</a>.",
     "simplex-unique-overlay-card-1-p-3": "Questo design protegge la privacy di chi stai comunicando, nascondendola ai server della rete SimpleX e a qualsiasi osservatore. Per nascondere il tuo indirizzo IP ai server, puoi <strong>connetterti ai server SimpleX tramite Tor</strong>.",
     "simplex-unique-overlay-card-2-p-1": "Poiché non hai alcun identificatore sulla rete SimpleX, nessuno può contattarti a meno che tu non condivida un indirizzo utente una tantum o temporaneo, come un codice QR o un link.",
     "simplex-unique-overlay-card-2-p-2": "Anche l'indirizzo utente opzionale, che può essere usato per inviare richieste di contatto spam, è possibile modificarlo o eliminarlo completamente senza perdere alcuna connessione.",
     "simplex-unique-overlay-card-3-p-1": "SimpleX Chat conserva tutti i dati utente solo sui dispositivi client usando un <strong>formato trasferibile di database crittografato</strong> che può essere esportato e trasferito su qualsiasi dispositivo supportato.",
     "simplex-unique-overlay-card-3-p-2": "I messaggi crittografati end-to-end vengono conservati temporaneamente sui server di inoltro SimpleX fino alla ricezione, quindi vengono eliminati definitivamente.",
     "simplex-unique-overlay-card-4-p-1": "Puoi <strong>usare SimpleX con i tuoi server personali</strong> e continuare a comunicare con le persone che usano i server preconfigurati nelle app.",
-    "simplex-unique-overlay-card-4-p-3": "Se stai pensando di sviluppare per la rete SimpleX, ad esempio, il chat bot per gli utenti dell'app SimpleX o l'integrazione della libreria SimpleX Chat nelle tue app mobili, <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">contattaci</a> per qualsiasi consiglio e supporto.",
+    "simplex-unique-overlay-card-4-p-3": "Se stai pensando di sviluppare per la rete SimpleX, ad esempio, il chat bot per gli utenti dell'app SimpleX o l'integrazione della libreria SimpleX Chat nelle tue app mobili, <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">contattaci</a> per qualsiasi consiglio e supporto.",
     "simplex-unique-card-1-p-1": "SimpleX protegge la privacy del tuo profilo, contatti e metadati, nascondendoli ai server della rete SimpleX e ad eventuali osservatori.",
     "simplex-unique-card-1-p-2": "A differenza di qualsiasi altra rete di messaggistica esistente, SimpleX non ha identificatori assegnati agli utenti &mdash; <strong>nemmeno numeri casuali</strong>.",
     "simplex-unique-card-2-p-1": "Poiché non hai un identificatore o un indirizzo fisso sulla rete SimpleX, nessuno può contattarti a meno che tu non condivida un indirizzo utente una tantum o temporaneo, come codice un QR o un link.",
@@ -155,7 +155,7 @@
     "developers": "Sviluppatori",
     "simplex-explained-tab-1-p-1": "Puoi creare contatti e gruppi, ed avere conversazioni bidirezionali, come in qualsiasi altro messenger.",
     "feature-2-title": "Immagini, video e file<br>crittografati E2E",
-    "simplex-private-card-4-point-2": "Per usare SimpleX tramite Tor, installa <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">l'app Orbot</a> e attiva il proxy SOCKS5 (o VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">su iOS</a>).",
+    "simplex-private-card-4-point-2": "Per usare SimpleX tramite Tor, installa <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">l'app Orbot</a> e attiva il proxy SOCKS5 (o VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">su iOS</a>).",
     "reference": "Riferimenti",
     "simplex-explained-tab-3-text": "3. Cosa vedono i server",
     "chat-bot-example": "Esempio di chat bot",
@@ -180,10 +180,10 @@
     "privacy-matters-overlay-card-1-p-1": "Molte grandi aziende usano le informazioni sulle persone con cui sei connesso per stimare il tuo reddito, venderti i prodotti di cui non hai realmente bisogno e determinare i prezzi.",
     "simplex-network-overlay-card-1-li-5": "Tutte le reti P2P conosciute possono essere vulnerabili all'<a href=\"https://it.wikipedia.org/wiki/Attacco_di_Sybil\">attacco di Sybil</a>, perché ogni nodo è rilevabile e la rete opera come un tutt'uno. Le misure note per mitigarlo richiedono un componente centralizzato o <a href=\"https://it.wikipedia.org/wiki/Proof-of-work\">proof-of-work</a> costosi. La rete di SimpleX non ha la possibilità di scoprire i server, è frammentata e opera come più sottoreti isolate, rendendo impossibili gli attacchi a livello di rete.",
     "privacy-matters-overlay-card-1-p-2": "I rivenditori online sanno che le persone con redditi più bassi sono più propense a fare acquisti urgenti, quindi possono applicare prezzi più alti o rimuovere sconti.",
-    "privacy-matters-overlay-card-1-p-3": "Alcune società finanziarie e assicurative usano grafici sociali per determinare i tassi di interesse e i premi. Spesso ciò fa pagare di più le persone con redditi più bassi &mdash; è noto come <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">\"premio di povertà\"</a>.",
-    "privacy-matters-overlay-card-2-p-1": "Non molto tempo fa abbiamo assistito alla manipolazione delle principali elezioni da <a href=\"https://it.wikipedia.org/wiki/Scandalo_Facebook-Cambridge_Analytica\" target=\"_blank\">una rispettabile società di consulenza</a> che ha usato i nostri grafici sociali per distorcere la nostra visione del mondo reale e manipolare i nostri voti.",
+    "privacy-matters-overlay-card-1-p-3": "Alcune società finanziarie e assicurative usano grafici sociali per determinare i tassi di interesse e i premi. Spesso ciò fa pagare di più le persone con redditi più bassi &mdash; è noto come <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">\"premio di povertà\"</a>.",
+    "privacy-matters-overlay-card-2-p-1": "Non molto tempo fa abbiamo assistito alla manipolazione delle principali elezioni da <a href=\"https://it.wikipedia.org/wiki/Scandalo_Facebook-Cambridge_Analytica\" target=\"_blank\" rel=\"noopener\">una rispettabile società di consulenza</a> che ha usato i nostri grafici sociali per distorcere la nostra visione del mondo reale e manipolare i nostri voti.",
     "privacy-matters-overlay-card-2-p-2": "Per essere obiettivi e prendere decisioni indipendenti devi avere il controllo del tuo spazio informativo. È possibile solo se usi una rete di comunicazione privata che non ha accesso al tuo grafico sociale.",
-    "privacy-matters-overlay-card-3-p-2": "Una delle storie più scioccanti è l'esperienza di <a href=\"https://it.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedou Ould Salahi</a> descritta nel suo libro di memorie e mostrata nel film The Mauritanian. È stato rinchiuso nel campo di Guantánamo, senza processo, e lì è stato torturato per 15 anni dopo una telefonata a un suo parente in Afghanistan, sospettato di essere coinvolto negli attacchi dell'11/9, nonostante avesse vissuto in Germania per i precedenti 10 anni.",
+    "privacy-matters-overlay-card-3-p-2": "Una delle storie più scioccanti è l'esperienza di <a href=\"https://it.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedou Ould Salahi</a> descritta nel suo libro di memorie e mostrata nel film The Mauritanian. È stato rinchiuso nel campo di Guantánamo, senza processo, e lì è stato torturato per 15 anni dopo una telefonata a un suo parente in Afghanistan, sospettato di essere coinvolto negli attacchi dell'11/9, nonostante avesse vissuto in Germania per i precedenti 10 anni.",
     "join-us-on-GitHub": "Unisciti a noi su GitHub",
     "simplex-chat-for-the-terminal": "SimpleX Chat per il terminale",
     "privacy-matters-overlay-card-3-p-4": "Non è sufficiente usare un messenger crittografato end-to-end, tutti dovremmo usare i messenger che proteggono la privacy delle nostre reti personali &mdash; con chi siamo connessi.",
@@ -195,7 +195,7 @@
     "join-the-REDDIT-community": "Unisciti alla comunità di REDDIT",
     "sign-up-to-receive-our-updates": "Iscriviti per ricevere i nostri aggiornamenti",
     "simplex-unique-overlay-card-3-p-4": "Non ci sono identificatori o testi cifrati in comune tra il traffico del server inviato e quello ricevuto &mdash; se qualcuno lo osserva, non può determinare facilmente chi comunica con chi, anche se il TLS è compromesso.",
-    "simplex-unique-overlay-card-4-p-2": "La rete di SimpleX usa un <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">protocollo aperto</a> e fornisce un <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK per creare chat bot</a>, consentendo l'implementazione di servizi con cui gli utenti possono interagire tramite le app SimpleX Chat &mdash; siamo impazienti di vedere quali servizi SimpleX creerai.",
+    "simplex-unique-overlay-card-4-p-2": "La rete di SimpleX usa un <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">protocollo aperto</a> e fornisce un <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK per creare chat bot</a>, consentendo l'implementazione di servizi con cui gli utenti possono interagire tramite le app SimpleX Chat &mdash; siamo impazienti di vedere quali servizi SimpleX creerai.",
     "simplex-unique-card-4-p-1": "La rete SimpleX è completamente decentralizzata e indipendente da qualsiasi criptovaluta o altra rete, ad eccezione di internet.",
     "donate-here-to-help-us": "Dona qui per aiutarci",
     "to-make-a-connection": "Per stabilire una connessione:",
@@ -260,7 +260,12 @@
     "about-and-contact-us": "Informazioni e contatti",
     "directory": "Directory",
     "index-hero-h2": "nella tua rete",
-    "index-hero-p1": "La prima rete senza ID utente.<br>I tuoi contatti, gruppi e canali sono tuoi.",
+    "index-hero-p1": "<span class=\"nowrap\">L'unica rete di messaggistica</span> <span class=\"nowrap\">senza alcun identificatore utente.</span><br>I tuoi contatti, gruppi e canali sono tuoi.",
+    "index-hero-own-part": "Possiedine una parte.",
+    "index-hero-downloads": "Download",
+    "index-hero-monthly-users": "Utenti mensili",
+    "index-hero-countdown-lead": "Lancio dei domini SimpleX",
+    "index-hero-countdown-done": "Ottieni un dominio SimpleX",
     "index-hero-download-desktop-btn-title": "Scarica l'app desktop di SimpleX",
     "index-testflight-title": "Anteprima pubblica per iOS su TestFlight",
     "index-f-droid-title": "SimpleX via F-Droid",
@@ -299,7 +304,7 @@
     "index-roadmap-3-title": "Fare crescere le tue comunità",
     "index-roadmap-3-desc": "Strumenti per promuovere le tue comunità",
     "index-directory-h2": "Unisciti alle comunità di SimpleX",
-    "index-directory-p1": "Più di 2 milioni di persone hanno scaricato le app SimpleX.",
+    "index-directory-p1": "Più di 3 milioni di persone hanno scaricato le app SimpleX.",
     "index-directory-p2": "Trova i tuoi canali e le comunità nella directory e creane di tuoi!",
     "index-directory-cta": "Vedi la directory di SimpleX",
     "index-directory-users-group-title": "Gruppo utenti SimpleX",
@@ -378,5 +383,6 @@
     "links-all-languages": "Tutte le lingue",
     "docs-dropdown-16": "Ospita un relay di chat",
     "index-hero-invest": "Investi in SimpleX Chat.",
-    "index-hero-invest-cta": "Scopri di più su Wefunder."
+    "index-hero-invest-cta": "Scopri di più su Wefunder.",
+    "why-film": "Guarda il film di 2 minuti su YouTube"
 }
diff --git a/website/langs/ja.json b/website/langs/ja.json
index 087a18ac6a..cee68d3300 100644
--- a/website/langs/ja.json
+++ b/website/langs/ja.json
@@ -24,8 +24,8 @@
     "guide-dropdown-8": "アプリ設定",
     "menu": "メニュー",
     "simplex-unique-card-1-p-1": "SimpleXは、SimpleXネットワークのサーバやその他の観察者から隠すことで、あなたのプロフィール、連絡先やメタデータのプライバシーを守ります。",
-    "simplex-unique-overlay-card-4-p-3": "例えば、SimpleXアプリユーザへのチャットボットやSimpleX Chatライブラリーの携帯アプリへの統合など、SimpleXネットワークに関する開発を検討してくださっているようでしたら、どのようなアドバイスや支援のことでも<a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>ご連絡ください</a> 。",
-    "simplex-unique-overlay-card-4-p-2": "SimpleXネットワークは、SimpleX Chatアプリを介してユーザが交流するサービスを実装させつつ<a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>オープンプロトコル</a>を使い、<a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>チャットボットを作成するためにSDK</a>を提供します&mdash;私たちはあなた達がどのようなSimpleXのサービスを築くか本当に楽しみです。",
+    "simplex-unique-overlay-card-4-p-3": "例えば、SimpleXアプリユーザへのチャットボットやSimpleX Chatライブラリーの携帯アプリへの統合など、SimpleXネットワークに関する開発を検討してくださっているようでしたら、どのようなアドバイスや支援のことでも<a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>ご連絡ください</a> 。",
+    "simplex-unique-overlay-card-4-p-2": "SimpleXネットワークは、SimpleX Chatアプリを介してユーザが交流するサービスを実装させつつ<a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>オープンプロトコル</a>を使い、<a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>チャットボットを作成するためにSDK</a>を提供します&mdash;私たちはあなた達がどのようなSimpleXのサービスを築くか本当に楽しみです。",
     "simplex-unique-overlay-card-4-p-1": "あなたが、<strong>自分自身のサーバでSimpleXを使っても</strong>、アプリで予め設定されたサーバを使う方々と連絡を取ることができます。",
     "reference": "リファレンス",
     "simplex-explained-tab-1-text": "1. ユーザーが経験すること",
@@ -64,7 +64,7 @@
     "feature-7-title": "ポータブルな暗号化データベース &mdash; プロファイルを別のデバイスに移動する",
     "no-federated": "いいえ - 連合型",
     "simplex-unique-overlay-card-3-p-3": "電子メール、XMPP、Matrixなどの連携ネットワークサーバーとは異なり、SimpleXサーバーはユーザーアカウントを保存せず、メッセージの中継のみを行い、双方のプライバシーを保護します。",
-    "privacy-matters-overlay-card-3-p-2": "最も衝撃的な話の 1 つは、<a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>Mohamedou Ould Salahi</a>の経験であり、彼の回顧録に記述され、『モーリタニア映画』で紹介されています。彼はアフガニスタンの親戚に電話をかけた後、アメリカ同時多発テロへの関与の疑いで拘束されました。 彼は裁判も受けずにグアンタナモ収容所に入れられ、そこで15年間拷問を受けました。",
+    "privacy-matters-overlay-card-3-p-2": "最も衝撃的な話の 1 つは、<a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>Mohamedou Ould Salahi</a>の経験であり、彼の回顧録に記述され、『モーリタニア映画』で紹介されています。彼はアフガニスタンの親戚に電話をかけた後、アメリカ同時多発テロへの関与の疑いで拘束されました。 彼は裁判も受けずにグアンタナモ収容所に入れられ、そこで15年間拷問を受けました。",
     "signing-key-fingerprint": "署名キーのフィンガープリント (SHA-256)",
     "simplex-network-2-desc": "SimpleX リレー サーバーは、ユーザー プロファイル、連絡先、配信されたメッセージを保存せず、相互に接続せず、サーバー ディレクトリもありません。",
     "docs-dropdown-5": "ホストXFTPサーバー",
@@ -109,7 +109,7 @@
     "no": "いいえ",
     "contact-hero-header": "SimpleX Chatで接続するためのアドレスを受信しました",
     "feature-8-title": "シークレット モード &mdash; <br>SimpleX Chat に固有の",
-    "simplex-private-card-4-point-2": "Tor経由でSimpleXを使用するには、<a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbotアプリ</a>をインストールし、SOCKS5プロキシを有効にしてください（iOSの場合は<a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">VPN</a>）。",
+    "simplex-private-card-4-point-2": "Tor経由でSimpleXを使用するには、<a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbotアプリ</a>をインストールし、SOCKS5プロキシを有効にしてください（iOSの場合は<a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">VPN</a>）。",
     "contact-hero-subheader": "スマホ・タブレットのSimpleX ChatアプリでQRコードを読み取ってください。",
     "simplex-unique-2-overlay-1-title": "スパムと悪用からの最高の保護",
     "simplex-private-6-title": "帯域外の<br>鍵交換",
@@ -128,7 +128,7 @@
     "comparison-point-1-text": "グローバル ID が必要",
     "comparison-section-list-point-5": "ユーザーのメタデータのプライバシーを保護しない",
     "hero-overlay-card-2-p-2": "その後、この情報を既存の公開ソーシャル ネットワークと関連付けて、本当の身元を特定することができます。",
-    "privacy-matters-overlay-card-1-p-3": "一部の金融会社や保険会社は、ソーシャル グラフを使用して金利や保険料を決定しています。 多くの場合、収入の低い人にはより多くの料金を支払わなければなりません。 &mdash;これは、<a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">\"「貧困プレミアム」\"</a> として知られています。",
+    "privacy-matters-overlay-card-1-p-3": "一部の金融会社や保険会社は、ソーシャル グラフを使用して金利や保険料を決定しています。 多くの場合、収入の低い人にはより多くの料金を支払わなければなりません。 &mdash;これは、<a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">\"「貧困プレミアム」\"</a> として知られています。",
     "comparison-point-3-text": "DNS への依存",
     "yes": "はい",
     "docs-dropdown-6": "WebRTC サーバー",
@@ -190,7 +190,7 @@
     "feature-6-title": "E2E暗号化された<br>音声通話とビデオ通話",
     "simplex-network-overlay-card-1-li-2": "SimpleX 設計は、ほとんどの P2P ネットワークとは異なり、一時的であってもいかなる種類のグローバル ユーザー識別子も持たず、一時的なペアごとの識別子のみを使用するため、より優れた匿名性とメタデータ保護が提供されます。",
     "simplex-unique-4-title": "SimpleX ネットワークを所有",
-    "privacy-matters-overlay-card-3-p-3": "一般の人が、たとえ「匿名」アカウント経由であっても、オンラインで共有した内容で逮捕されます。<a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout -catholic-mother-malicious-online-posts.html' target='_blank'>それは、たとえ民主主義の国であったとしても同じです</a>。",
+    "privacy-matters-overlay-card-3-p-3": "一般の人が、たとえ「匿名」アカウント経由であっても、オンラインで共有した内容で逮捕されます。<a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout -catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>それは、たとえ民主主義の国であったとしても同じです</a>。",
     "simplex-unique-overlay-card-3-p-2": "エンドツーエンドで暗号化されたメッセージは、SimpleXのリレーサーバーで受信するまで一時的に保持され、その後永久に削除されます。",
     "simplex-private-card-7-point-1": "整合性を保証するために、メッセージには連続した番号が付けられ、前のメッセージのハッシュが含まれます。",
     "contact-hero-p-2": "SimpleX Chat をまだダウンロードしていませんか?",
@@ -209,7 +209,7 @@
     "hero-overlay-2-title": "ユーザー ID がプライバシーに悪影響を与えるのはなぜですか?",
     "docs-dropdown-4": "ホストSMPサーバー",
     "feature-4-title": "E2E暗号化された音声メッセージ",
-    "privacy-matters-overlay-card-2-p-1": "つい最近まで、主要な選挙が <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>有名なコンサルティング会社</a>によって操作されていました。 ソーシャルグラフは私たちの現実世界の見方を歪め、投票を操作しています。",
+    "privacy-matters-overlay-card-2-p-1": "つい最近まで、主要な選挙が <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>有名なコンサルティング会社</a>によって操作されていました。 ソーシャルグラフは私たちの現実世界の見方を歪め、投票を操作しています。",
     "privacy-matters-overlay-card-2-p-3": "SimpleX は、設計上ユーザー識別子を持たない最初のネットワークであり、この方法で既知の代替手段よりも接続グラフを保護します。",
     "learn-more": "さらに詳しく",
     "simplex-private-8-title": "メッセージのミキシング<br>相関性を減らす",
@@ -233,7 +233,7 @@
     "simplex-unique-overlay-card-1-p-3": "この設計により、通信相手のプライバシーが保護され、SimpleX ネットワークサーバや監視者からプライバシーが隠されます。 IP アドレスをサーバから隠すには、<strong>Tor 経由で SimpleX サーバーに接続</strong>します。",
     "simplex-private-7-title": "メッセージの整合性<br>検証",
     "privacy-matters-overlay-card-1-p-4": "SimpleXネットワークは、他のどのプラットフォームよりも接続のプライバシーを保護し、ソーシャル グラフが企業や組織に利用されることを完全に防ぎます。 SimpleX Chatアプリに予め設定されたサーバを利用している場合でも、サーバオペレータはユーザーの数や接続数を知ることはできません。",
-    "hero-overlay-card-1-p-6": "詳細については、<a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX ホワイトペーパー</a>をご覧ください。",
+    "hero-overlay-card-1-p-6": "詳細については、<a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX ホワイトペーパー</a>をご覧ください。",
     "simplex-network-overlay-card-1-p-1": "<a href='https://en.wikipedia.org/wiki/Peer-to-peer'>P2P</a> メッセージング プロトコルとアプリには、SimpleX よりも信頼性が低く、分析がより複雑になるさまざまな問題があり、また、いくつかの種類の攻撃に対して脆弱です。",
     "simplex-network-overlay-card-1-li-1": "P2P ネットワークは、メッセージをルーティングするために <a href=\"https://en.wikipedia.org/wiki/Distributed_hash_table\">DHT</a> の一部の変種に依存します。 DHT の設計では、配信保証と遅延のバランスを取る必要があります。 SimpleX は、受信者が選択したサーバーを使用して、メッセージを複数のサーバーを介して並行して冗長的に渡すことができるため、P2P よりも優れた配信保証と低い遅延の両方を備えています。 P2P ネットワークでは、メッセージはアルゴリズムによって選択されたノードを使用して、<em>O(log N)</em> 個のノードを順番に通過します。",
     "privacy-matters-section-label": "メッセージアプリがあなたのデータにアクセスできないようにしてください！",
@@ -261,7 +261,13 @@
     "about-and-contact-us": "概要・お問い合わせ",
     "index-hero-h1": "自由で<br>あれ",
     "index-hero-h2": "あなたのネットワークで",
-    "index-hero-p1": "ユーザーIDのない世界初のネットワーク。<br>連絡先、グループ、チャンネルはあなたのものです。",
+    "index-hero-p1": "<span class=\"nowrap\">ユーザー識別子を一切持たない</span><span class=\"nowrap\">唯一のメッセージングネットワーク。</span><br>連絡先、グループ、チャンネルはあなたのものです。",
+    "index-hero-own-part": "その一部を所有しよう。",
+    "index-hero-invest": "SimpleX Chatに投資しよう。",
+    "index-hero-downloads": "ダウンロード",
+    "index-hero-monthly-users": "月間ユーザー",
+    "index-hero-countdown-lead": "SimpleXドメイン公開",
+    "index-hero-countdown-done": "SimpleXドメインを取得",
     "index-hero-download-desktop-btn-title": "SimpleX デスクトップアプリをダウンロード",
     "index-security-assessment-title": "セキュリティ監査",
     "index-security-review-2022-title": "セキュリティ監査 2022",
@@ -291,7 +297,7 @@
     "index-roadmap-3-title": "コミュニティの成長",
     "index-roadmap-3-desc": "コミュニティを広げるツール",
     "index-directory-h2": "SimpleXコミュニティに参加する",
-    "index-directory-p1": "200万人以上がSimpleXアプリをダウンロードしました。",
+    "index-directory-p1": "300万人以上がSimpleXアプリをダウンロードしました。",
     "index-directory-p2": "ディレクトリでチャンネルやコミュニティを見つけて、あなた自身のものを作成しましょう！",
     "index-directory-cta": "SimpleXディレクトリを見る",
     "index-directory-users-group-title": "SimpleXユーザグループ",
@@ -308,5 +314,7 @@
     "how-secure-forward-secrecy": "前方秘匿性",
     "how-secure-two-factor-key-exchange": "2ファクタ鍵交換",
     "how-secure-post-quantum-hybrid-crypto": "ポスト量子ハイブリッド暗号",
-    "messengers-comparison-section-list-point-2": "否認可能性の対象には、クライアントとサーバー間の接続は含まれません。"
+    "messengers-comparison-section-list-point-2": "否認可能性の対象には、クライアントとサーバー間の接続は含まれません。",
+    "why-footer-link": "私たちがこれを作る理由",
+    "index-testflight-title": "TestFlight の SimpleX iOS ベータ版"
 }
diff --git a/website/langs/nl.json b/website/langs/nl.json
index aebab52842..a7d3741e27 100644
--- a/website/langs/nl.json
+++ b/website/langs/nl.json
@@ -70,7 +70,7 @@
     "simplex-private-6-title": "Out-of-band<br>sleuteluitwisseling",
     "simplex-private-7-title": "Bericht integriteit<br>verificatie",
     "simplex-private-card-4-point-1": "Om uw IP-adres te beschermen kunt u via Tor of een ander transport overlay netwerk toegang krijgen tot de servers.",
-    "simplex-private-card-4-point-2": "Installeer de <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot-app </a> en schakel de SOCKS5-proxy in (of VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\"> op iOS </a>) om SimpleX via Tor te gebruiken.",
+    "simplex-private-card-4-point-2": "Installeer de <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot-app </a> en schakel de SOCKS5-proxy in (of VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\"> op iOS </a>) om SimpleX via Tor te gebruiken.",
     "simplex-private-card-6-point-2": "Om te voorkomen dat SimpleX apps eenmalige sleutels out-of-band doorgeven, wanneer u een adres deelt als een link of een QR-code.",
     "simplex-private-card-7-point-1": "Om de integriteit te garanderen, zijn de berichten opeenvolgend genummerd en bevatten ze de hash van het vorige bericht.",
     "simplex-private-card-9-point-1": "Elke berichten wachtrij geeft berichten in één richting door, met verschillende verzend en ontvangst adressen.",
@@ -96,7 +96,7 @@
     "hero-overlay-card-2-p-1": "Wanneer gebruikers een blijvende identiteit hebben, zelfs als dit slechts een willekeurig nummer is, zoals een sessie ID, bestaat het risico dat de provider of een aanvaller kan zien hoe de gebruikers zijn verbonden en hoeveel berichten ze verzenden.",
     "hero-overlay-card-1-p-4": "Dit ontwerp voorkomt het lekken van eventuele gebruikersgegevens en metadata op applicatie niveau. Om de privacy verder te verbeteren en uw IP-adres te beschermen kunt u via Tor verbinding maken met berichten servers.",
     "hero-overlay-card-1-p-5": "Alleen client apparaten slaan gebruikers profielen, contacten en groepen op; de berichten worden verzonden met 2-laags end-to-end versleuteling.",
-    "hero-overlay-card-1-p-6": "Lees meer in <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>SimpleX-whitepaper</a>.",
+    "hero-overlay-card-1-p-6": "Lees meer in <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>SimpleX-whitepaper</a>.",
     "hero-overlay-card-2-p-2": "Ze zouden deze informatie vervolgens kunnen correleren met de bestaande openbare sociale netwerken en een aantal echte identiteiten kunnen bepalen.",
     "privacy-matters-3-overlay-1-linkText": "Privacy beschermt uw vrijheid",
     "simplex-unique-2-overlay-1-title": "De beste bescherming tegen spam en misbruik",
@@ -178,14 +178,14 @@
     "simplex-network-overlay-card-1-li-6": "P2P netwerken kunnen kwetsbaar zijn voor <a href='https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent'>DRDoS-aanvallen</a>, wanneer de clients het verkeer opnieuw kunnen uitzenden en versterken, wat resulteert in netwerkbrede denial of service. SimpleX clients sturen alleen verkeer van een bekende verbinding door en kunnen niet door een aanvaller worden gebruikt om het verkeer in het hele netwerk te versterken.",
     "privacy-matters-overlay-card-1-p-1": "Veel grote bedrijven gebruiken informatie over met wie u verbonden bent om uw inkomen te schatten, u de producten te verkopen die u niet echt nodig heeft en om de prijzen te bepalen.",
     "privacy-matters-overlay-card-1-p-2": "Webwinkels weten dat mensen met lagere inkomens eerder geneigd zijn om dringende aankopen te doen, dus kunnen ze hogere prijzen vragen of kortingen intrekken.",
-    "privacy-matters-overlay-card-1-p-3": "Sommige financiële en verzekeringsmaatschappijen gebruiken sociale grafieken om rentetarieven en premies te bepalen. Het zorgt er vaak voor dat mensen met lagere inkomens meer betalen &mdash; het staat bekend als <a href='https://fairbydesign.com/povertypremium/' target='_blank'>'armoedepremie'</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Sommige financiële en verzekeringsmaatschappijen gebruiken sociale grafieken om rentetarieven en premies te bepalen. Het zorgt er vaak voor dat mensen met lagere inkomens meer betalen &mdash; het staat bekend als <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>'armoedepremie'</a>.",
     "privacy-matters-overlay-card-1-p-4": "SimpleX Network beschermt de privacy van uw verbindingen beter dan welk alternatief dan ook en voorkomt dat uw sociale netwerk beschikbaar wordt voor bedrijven of organisaties. Zelfs wanneer gebruikers servers gebruiken die vooraf zijn geconfigureerd in SimpleX Chat-apps, weten serverbeheerders niet hoeveel gebruikers er zijn of hoeveel verbindingen ze hebben.",
     "privacy-matters-overlay-card-2-p-2": "Om objectief te zijn en onafhankelijke beslissingen te nemen, moet je de controle hebben over je informatieruimte. Dit is alleen mogelijk als je gebruikmaakt van een privécommunicatienetwerk dat geen toegang heeft tot je sociale media-account.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX is het eerste netwerk dat standaard geen gebruikers-ID's gebruikt. Hierdoor is uw verbindingsgrafiek beter beschermd dan elk ander bekend alternatief.",
     "privacy-matters-overlay-card-3-p-1": "Iedereen zou zich zorgen moeten maken over de privacy en veiligheid van hun communicatie &mdash; onschuldige gesprekken kunnen je in gevaar brengen, zelfs als je niets te verbergen hebt.",
     "simplex-unique-overlay-card-1-p-1": "In tegenstelling tot andere berichtennetwerken heeft SimpleX geen identificatiegegevens toegewezen aan de gebruikers. Het maakt geen gebruik van telefoonnummers, domeingebaseerde adressen (zoals e-mail of XMPP), gebruikersnamen, openbare sleutels of zelfs willekeurige getallen om gebruikers te identificeren – SimpleX-serverbeheerders weten niet hoeveel mensen hun servers gebruiken.",
-    "privacy-matters-overlay-card-3-p-2": "Een van de meest schokkende verhalen is de ervaring van <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>Mohamedou Ould Salahi</a> beschreven in zijn memoires en getoond in The Mauritanian movie. Hij werd zonder proces in het Guantanamo kamp geplaatst en werd daar 15 jaar lang gemarteld na een telefoontje naar zijn familielid in Afghanistan, op verdenking van betrokkenheid bij aanslagen van 9/11, ook al woonde hij de afgelopen 10 jaar in Duitsland.",
-    "privacy-matters-overlay-card-3-p-3": "Gewone mensen worden gearresteerd voor wat ze online delen, zelfs via hun 'anonieme' accounts, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>zelfs in democratische landen</a>.",
+    "privacy-matters-overlay-card-3-p-2": "Een van de meest schokkende verhalen is de ervaring van <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>Mohamedou Ould Salahi</a> beschreven in zijn memoires en getoond in The Mauritanian movie. Hij werd zonder proces in het Guantanamo kamp geplaatst en werd daar 15 jaar lang gemarteld na een telefoontje naar zijn familielid in Afghanistan, op verdenking van betrokkenheid bij aanslagen van 9/11, ook al woonde hij de afgelopen 10 jaar in Duitsland.",
+    "privacy-matters-overlay-card-3-p-3": "Gewone mensen worden gearresteerd voor wat ze online delen, zelfs via hun 'anonieme' accounts, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>zelfs in democratische landen</a>.",
     "privacy-matters-overlay-card-3-p-4": "Het is niet genoeg om een end-to-end versleutelde messenger te gebruiken, we zouden allemaal de messengers moeten gebruiken die de privacy van onze persoonlijke netwerken beschermen &mdash; met wie we verbonden zijn.",
     "simplex-unique-overlay-card-1-p-2": "Om berichten af te leveren gebruikt SimpleX <a href='https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier'>paarsgewijze anonieme adressen</a> van unidirectionele  berichten wachtrijen, gescheiden voor ontvangen en verzonden berichten, meestal via verschillende servers.",
     "simplex-unique-overlay-card-1-p-3": "Dit ontwerp beschermt de privacy van uw communicatiepartner door deze te verbergen voor SimpleX-netwerkservers en andere buitenstaanders. Om uw IP-adres voor de servers te verbergen, kunt u <strong>via Tor verbinding maken met SimpleX-servers</strong>.",
@@ -195,16 +195,16 @@
     "simplex-unique-overlay-card-3-p-2": "De end-to-end versleutelde berichten worden tijdelijk op SimpleX relayservers bewaard totdat ze zijn ontvangen, waarna ze permanent worden verwijderd.",
     "simplex-unique-overlay-card-3-p-3": "In tegenstelling tot gefedereerde netwerkservers (e-mail, XMPP of Matrix), slaan SimpleX servers geen gebruikers account op, ze sturen alleen berichten door, waardoor de privacy van beide partijen wordt beschermd.",
     "simplex-unique-overlay-card-4-p-1": "U kunt <strong>SimpleX gebruiken met uw eigen servers</strong> en toch communiceren met mensen die de servers gebruiken die vooraf in de apps zijn geconfigureerd.",
-    "simplex-unique-overlay-card-4-p-3": "Als u overweegt om voor het SimpleX-netwerk te ontwikkelen, bijvoorbeeld de chatbot voor SimpleX-appgebruikers of de integratie van de SimpleX Chat-bibliotheek in uw mobiele apps, neem dan <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>contact</a> op voor advies en ondersteuning.",
+    "simplex-unique-overlay-card-4-p-3": "Als u overweegt om voor het SimpleX-netwerk te ontwikkelen, bijvoorbeeld de chatbot voor SimpleX-appgebruikers of de integratie van de SimpleX Chat-bibliotheek in uw mobiele apps, neem dan <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>contact</a> op voor advies en ondersteuning.",
     "simplex-unique-card-1-p-1": "SimpleX beschermt de privacy van uw profiel, contacten en metagegevens door deze te verbergen voor de netwerkservers van SimpleX en andere buitenstaanders.",
     "enter-your-email-address": "Voer uw e-mail adres in",
     "get-simplex": "Verkrijg SimpleX <a href=\"/downloads\">desktop app</a>",
     "tap-to-close": "Tik om te sluiten",
     "contact-hero-header": "Je hebt een adres ontvangen om verbinding te maken met SimpleX Chat",
     "invitation-hero-header": "Je hebt een eenmalige link ontvangen om verbinding te maken met SimpleX Chat",
-    "privacy-matters-overlay-card-2-p-1": "Nog niet zo lang geleden zagen we dat de grote verkiezingen werden gemanipuleerd door <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>een gerenommeerd adviesbureau</a> dat onze sociale grafieken gebruikte om ons beeld van de echte wereld te vervormen en onze stemmen te manipuleren.",
+    "privacy-matters-overlay-card-2-p-1": "Nog niet zo lang geleden zagen we dat de grote verkiezingen werden gemanipuleerd door <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>een gerenommeerd adviesbureau</a> dat onze sociale grafieken gebruikte om ons beeld van de echte wereld te vervormen en onze stemmen te manipuleren.",
     "simplex-unique-overlay-card-3-p-4": "Er zijn geen identifiers of gecodeerde tekst tussen verzonden en ontvangen serververkeer &mdash; als iemand het waarneemt, kunnen ze niet gemakkelijk bepalen wie met wie communiceert, zelfs als TLS is gecompromitteerd.",
-    "simplex-unique-overlay-card-4-p-2": "SimpleX Network maakt gebruik van een <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>open protocol</a> en biedt <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>SDK om chatbots te maken</a>. Dit maakt de implementatie van services mogelijk waarmee gebruikers via SimpleX Chat-apps kunnen communiceren. We zijn erg benieuwd welke SimpleX-services jullie gaan bouwen.",
+    "simplex-unique-overlay-card-4-p-2": "SimpleX Network maakt gebruik van een <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>open protocol</a> en biedt <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>SDK om chatbots te maken</a>. Dit maakt de implementatie van services mogelijk waarmee gebruikers via SimpleX Chat-apps kunnen communiceren. We zijn erg benieuwd welke SimpleX-services jullie gaan bouwen.",
     "simplex-unique-card-1-p-2": "In tegenstelling tot andere bestaande berichtennetwerken worden bij SimpleX geen identificatiegegevens aan de gebruikers toegewezen – <strong>zelfs geen willekeurige getallen</strong>.",
     "comparison-section-list-point-1": "Meestal op basis van een telefoonnummer, in sommige gevallen op gebruikersnamen",
     "comparison-section-list-point-2": "Op DNS gebaseerde adressen",
diff --git a/website/langs/pl.json b/website/langs/pl.json
index 21a3576cb8..3d268c6e9a 100644
--- a/website/langs/pl.json
+++ b/website/langs/pl.json
@@ -68,7 +68,7 @@
     "simplex-private-card-6-point-2": "Aby temu zapobiec aplikacje SimpleX przekazują klucze jednorazowe out-of-band, gdy udostępniasz adres jako link lub kod QR.",
     "simplex-private-card-7-point-1": "Aby zagwarantować integralność, wiadomości są kolejno numerowane i zawierają hash poprzedniej wiadomości.",
     "simplex-private-card-7-point-2": "Jeśli jakaś wiadomość zostanie dodana, usunięta lub zmieniona, odbiorca zostanie o tym powiadomiony.",
-    "simplex-private-card-4-point-2": "Aby użyć SimpleX przez Tor zainstaluj <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">aplikację Orbot na android</a> i włącz proxy SOCKS5 (lub VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">na iOS</a>).",
+    "simplex-private-card-4-point-2": "Aby użyć SimpleX przez Tor zainstaluj <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">aplikację Orbot na android</a> i włącz proxy SOCKS5 (lub VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">na iOS</a>).",
     "simplex-private-card-5-point-1": "SimpleX używa paddingu treści dla każdej warstwy szyfrowania, aby udaremnić ataki na rozmiar wiadomości.",
     "simplex-private-card-5-point-2": "Dzięki temu wiadomości o różnych rozmiarach wyglądają tak samo dla serwerów i obserwatorów sieci.",
     "simplex-private-card-8-point-1": "Serwery SimpleX działają jak węzły mieszania o niskim opóźnieniu &mdash; wiadomości przychodzące i wychodzące mają inną kolejność.",
@@ -115,23 +115,23 @@
     "hero-overlay-card-1-p-1": "Wielu użytkowników pytało: <em>jeśli SimpleX nie ma identyfikatorów użytkowników, skąd może wiedzieć, gdzie dostarczyć wiadomości?</em>",
     "hero-overlay-card-1-p-2": "Aby dostarczyć wiadomości, zamiast identyfikatorów użytkownika używanych przez wszystkie inne sieci, SimpleX używa tymczasowych anonimowych identyfikatorów kolejek wiadomości, oddzielnych dla każdego z twoich połączeń &mdash; nie ma żadnych długoterminowych identyfikatorów.",
     "simplex-network-overlay-card-1-li-1": "Sieci P2P opierają się na pewnym wariancie <a href='https://en.wikipedia.org/wiki/Distributed_hash_table'>DHT</a> do przekazywania wiadomości. DHT muszą równoważyć gwarancję dostarczenia i opóźnienie. SimpleX ma zarówno lepszą gwarancję dostarczenia, jak i mniejsze opóźnienia niż P2P, ponieważ wiadomość może być nadmiarowo przepuszczona przez kilka serwerów równolegle, z wykorzystaniem serwerów wybranych przez odbiorcę. W sieciach P2P wiadomość jest przepuszczana przez , <em>O(log N)</em> węzłów sekwencyjnie, z wykorzystaniem węzłów wybranych przez algorytm.",
-    "privacy-matters-overlay-card-3-p-3": "Zwykli ludzie są aresztowani za to, co udostępniają w sieci, nawet za pośrednictwem swoich \"anonimowych\" kont, <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">nawet w krajach demokratycznych</a>.",
-    "hero-overlay-card-1-p-6": "Więcej w <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX whitepaper</a>.",
+    "privacy-matters-overlay-card-3-p-3": "Zwykli ludzie są aresztowani za to, co udostępniają w sieci, nawet za pośrednictwem swoich \"anonimowych\" kont, <a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">nawet w krajach demokratycznych</a>.",
+    "hero-overlay-card-1-p-6": "Więcej w <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX whitepaper</a>.",
     "hero-overlay-card-2-p-1": "Gdy użytkownicy mają trwałe tożsamości, nawet jeśli jest to tylko losowa liczba, jak ID sesji, istnieje ryzyko, że dostawca lub atakujący może obserwować, jak użytkownicy są połączeni i ile wiadomości wysyłają.",
     "hero-overlay-card-2-p-2": "Następnie mogliby skorelować te informacje z istniejącymi publicznymi sieciami społecznymi i określić niektóre prawdziwe tożsamości.",
     "hero-overlay-card-2-p-4": "SimpleX chroni przed tymi atakami, nie mając w swojej konstrukcji żadnych identyfikatorów użytkowników. A jeśli używasz trybu Incognito, będziesz miał inną nazwę wyświetlania dla każdego kontaktu, unikając wszelkich wspólnych danych między nimi.",
     "simplex-network-overlay-card-1-p-1": "Protokoły <a href=\"https://en.wikipedia.org/wiki/Peer-to-peer\">P2P</a> i aplikacje do przesyłania wiadomości mają różne problemy, które czynią je mniej niezawodnymi niż SimpleX, bardziej skomplikowanymi w analizie i podatnymi na kilka rodzajów ataków.",
     "simplex-network-overlay-card-1-li-2": "Projekt SimpleX, w przeciwieństwie do większości sieci P2P, nie posiada żadnych globalnych identyfikatorów użytkowników, nawet tymczasowych, a jedynie używa tymczasowych identyfikatorów parami, zapewniając lepszą anonimowość i ochronę metadanych.",
     "simplex-network-overlay-card-1-li-4": "Implementacje P2P mogą być blokowane przez niektórych dostawców Internetu (np. <a href='https://en.wikipedia.org/wiki/BitTorrent'>BitTorrent</a>). SimpleX jest agnostykiem transportowym &mdash; może działać przez standardowe protokoły internetowe, np. WebSockets.",
-    "privacy-matters-overlay-card-1-p-3": "Niektóre firmy finansowe i ubezpieczeniowe wykorzystują wykresy społeczne do określania stóp procentowych i składek. Często powoduje to, że osoby o niższych dochodach płacą więcej &mdash; jest to znane jako <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">\"premia za ubóstwo\"</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Niektóre firmy finansowe i ubezpieczeniowe wykorzystują wykresy społeczne do określania stóp procentowych i składek. Często powoduje to, że osoby o niższych dochodach płacą więcej &mdash; jest to znane jako <a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">\"premia za ubóstwo\"</a>.",
     "privacy-matters-overlay-card-1-p-4": "Sieć SimpleX chroni prywatność Twoich połączeń lepiej niż jakakolwiek alternatywa, w pełni zapobiegając udostępnieniu Twojego wykresu społecznego jakimkolwiek firmom lub organizacjom. Nawet gdy ludzie korzystają z serwerów prekonfigurowanych przez SimpleX Chat, aplikacje i operatorzy serwerów nie znają liczby użytkowników ani ich połączeń.",
     "privacy-matters-overlay-card-1-p-2": "Sprzedawcy internetowi wiedzą, że osoby o niższych dochodach częściej dokonują pilnych zakupów, więc mogą naliczać wyższe ceny lub usuwać rabaty.",
     "privacy-matters-overlay-card-2-p-2": "Aby być obiektywnym i podejmować niezależne decyzje musisz mieć kontrolę nad swoją przestrzenią informacyjną. Jest to możliwe tylko wtedy, gdy korzystasz z prywatnej sieci komunikacyjnej, która nie ma dostępu do Twojego wykresu społecznego.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX to pierwsza sieć, która z założenia nie posiada żadnych identyfikatorów użytkowników, w ten sposób chroniąc Twój graf połączeń lepiej niż jakakolwiek znana alternatywa.",
     "simplex-network-overlay-card-1-li-5": "Wszystkie znane sieci P2P mogą być podatne na <a href=\"https://en.wikipedia.org/wiki/Sybil_attack\">atak Sybil</a>, ponieważ każdy węzeł jest możliwy do odkrycia, a sieć działa jako całość. Znane środki łagodzące wymagają albo scentralizowanego komponentu, albo kosztownego <a href=\"https://en.wikipedia.org/wiki/Proof_of_work\">proof of work</a>. SimpleX nie ma możliwości odkrywania serwerów, jest pofragmentowana i działa jako wiele odizolowanych podsieci, co uniemożliwia ataki na całą sieć.",
-    "privacy-matters-overlay-card-2-p-1": "Jeszcze nie tak dawno obserwowaliśmy, jak główne wybory były manipulowane przez <a href=\"https://en.wikipedia.org/wiki/Facebook-Cambridge_Analytica_data_scandal\" target=\"_blank\">szacowną firmę konsultingową</a>, która wykorzystywała nasze wykresy społeczne do zniekształcania naszego spojrzenia na świat rzeczywisty i manipulowania naszymi głosami.",
+    "privacy-matters-overlay-card-2-p-1": "Jeszcze nie tak dawno obserwowaliśmy, jak główne wybory były manipulowane przez <a href=\"https://en.wikipedia.org/wiki/Facebook-Cambridge_Analytica_data_scandal\" target=\"_blank\" rel=\"noopener\">szacowną firmę konsultingową</a>, która wykorzystywała nasze wykresy społeczne do zniekształcania naszego spojrzenia na świat rzeczywisty i manipulowania naszymi głosami.",
     "privacy-matters-overlay-card-3-p-1": "Każdy powinien dbać o prywatność i bezpieczeństwo swojej komunikacji &mdash; nieszkodliwe rozmowy mogą narazić Cię na niebezpieczeństwo, nawet jeśli nie masz nic do ukrycia.",
-    "privacy-matters-overlay-card-3-p-2": "Jedną z najbardziej wstrząsających historii jest doświadczenie <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedou Ould Salahi</a> opisane w jego pamiętniku i pokazane w filmie Mauretańczyk (2021). Został on umieszczony w obozie Guantanamo, bez procesu, i był tam torturowany przez 15 lat po telefonie do swojego krewnego w Afganistanie, pod zarzutem udziału w atakach 9/11, mimo że przez poprzednie 10 lat mieszkał w Niemczech.",
+    "privacy-matters-overlay-card-3-p-2": "Jedną z najbardziej wstrząsających historii jest doświadczenie <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedou Ould Salahi</a> opisane w jego pamiętniku i pokazane w filmie Mauretańczyk (2021). Został on umieszczony w obozie Guantanamo, bez procesu, i był tam torturowany przez 15 lat po telefonie do swojego krewnego w Afganistanie, pod zarzutem udziału w atakach 9/11, mimo że przez poprzednie 10 lat mieszkał w Niemczech.",
     "privacy-matters-overlay-card-3-p-4": "Nie wystarczy używać komunikatora szyfrowanego end-to-end, wszyscy powinniśmy używać komunikatorów, które chronią prywatność naszych sieci osobistych &mdash; z kim jesteśmy połączeni.",
     "simplex-unique-overlay-card-1-p-1": "W przeciwieństwie do innych sieci komunikacyjnych, SimpleX ma <strong>brak identyfikatorów przypisanych do użytkowników</strong>. Nie polega na numerach telefonów, adresach opartych na domenie (jak e-mail lub XMPP), nazwach użytkowników, kluczach publicznych czy nawet losowych liczbach, aby zidentyfikować swoich użytkowników &mdash; operatorzy serwerów SimpleX nie wiedzą, ile osób korzysta z ich serwerów.",
     "hero-overlay-card-2-p-3": "Nawet w przypadku najbardziej prywatnych aplikacji, które korzystają z trzeciej wersji usług Tor, jeśli rozmawiasz z dwoma różnymi kontaktami za pośrednictwem tego samego profilu, mogą one udowodnić, że są połączone z tą samą osobą.",
@@ -149,9 +149,9 @@
     "simplex-unique-overlay-card-3-p-3": "W przeciwieństwie do serwerów sieci federacyjnych (e-mail, XMPP czy Matrix), serwery SimpleX nie przechowują kont użytkowników, a jedynie przekazują wiadomości, chroniąc prywatność obu stron.",
     "simplex-unique-overlay-card-4-p-1": "Możesz <strong>używać SimpleX z własnymi serwerami</strong> i nadal komunikować się z osobami, które korzystają z prekonfigurowanych w aplikacji serwerów.",
     "donate-here-to-help-us": "Przekaż darowiznę tutaj, aby nam pomóc",
-    "simplex-unique-overlay-card-4-p-3": "Jeśli rozważasz rozwój dla sieci SimpleX, na przykład czatbotu dla użytkowników aplikacji SimpleX lub integrację biblioteki SimpleX Chat w swoich aplikacjach mobilnych, prosimy o <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">kontakt</a> dla wszelkich porad i wsparcia.",
+    "simplex-unique-overlay-card-4-p-3": "Jeśli rozważasz rozwój dla sieci SimpleX, na przykład czatbotu dla użytkowników aplikacji SimpleX lub integrację biblioteki SimpleX Chat w swoich aplikacjach mobilnych, prosimy o <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">kontakt</a> dla wszelkich porad i wsparcia.",
     "simplex-unique-card-1-p-1": "SimpleX chroni prywatność Twojego profilu, kontaktów i metadanych, ukrywając je przed serwerami sieci SimpleX i wszelkimi obserwatorami.",
-    "simplex-unique-overlay-card-4-p-2": "Sieć SimpleX wykorzystuje <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">otwarty protokół</a> i udostępnia <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK do tworzenia chatbotów</a>, umożliwiając implementację usług, z którymi użytkownicy mogą wchodzić w interakcje za pośrednictwem aplikacji SimpleX Chat &mdash; naprawdę nie możemy się doczekać, aby zobaczyć, jakie usługi SimpleX zbudujesz.",
+    "simplex-unique-overlay-card-4-p-2": "Sieć SimpleX wykorzystuje <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">otwarty protokół</a> i udostępnia <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK do tworzenia chatbotów</a>, umożliwiając implementację usług, z którymi użytkownicy mogą wchodzić w interakcje za pośrednictwem aplikacji SimpleX Chat &mdash; naprawdę nie możemy się doczekać, aby zobaczyć, jakie usługi SimpleX zbudujesz.",
     "simplex-unique-card-1-p-2": "W przeciwieństwie do każdej innej istniejącej sieci komunikacyjnej, SimpleX nie ma żadnych identyfikatorów przypisanych do użytkowników &mdash; <strong>nawet losowych liczb</strong>.",
     "tap-the-connect-button-in-the-app": "Stuknij przycisk <span class=\"text-active-blue\">\"połącz się\"</span> w aplikacji",
     "join-the-REDDIT-community": "Dołącz do społeczności REDDIT",
@@ -262,7 +262,13 @@
     "about-and-contact-us": "O nas i Kontakt",
     "index-hero-h1": "Bądź<br>Wolny",
     "index-hero-h2": "W Swojej Sieci",
-    "index-hero-p1": "Pierwsza sieć bez identyfikatorów użytkowników.<br>Twoje kontakty, grupy i kanały należą do Ciebie.",
+    "index-hero-p1": "<span class=\"nowrap\">Jedyna sieć komunikacyjna</span> <span class=\"nowrap\">bez żadnych identyfikatorów użytkowników.</span><br>Twoje kontakty, grupy i kanały należą do Ciebie.",
+    "index-hero-own-part": "Miej w niej udział.",
+    "index-hero-invest": "Zainwestuj w SimpleX Chat.",
+    "index-hero-downloads": "Pobrań",
+    "index-hero-monthly-users": "Użytkowników miesięcznie",
+    "index-hero-countdown-lead": "Start domen SimpleX",
+    "index-hero-countdown-done": "Zdobądź domenę SimpleX",
     "index-hero-download-desktop-btn-title": "Pobierz Aplikację SimpleX na Komputer",
     "index-testflight-title": "SimpleX iOS beta-wydanie na TestFlight",
     "index-f-droid-title": "SimpleX app z F-Droid",
@@ -300,7 +306,7 @@
     "index-roadmap-3-title": "Spraw, aby Twoje społeczności Rosły",
     "index-roadmap-3-desc": "Narzędzia do promowania Twoich społeczności",
     "index-directory-h2": "Dołącz do Społeczności SimpleX",
-    "index-directory-p1": "Ponad 2 miliony osób pobrało aplikacje SimpleX.",
+    "index-directory-p1": "Ponad 3 miliony osób pobrało aplikacje SimpleX.",
     "index-directory-p2": "Znajdź swoje kanały i społeczności w katalogu i stwórz własne!",
     "index-directory-cta": "Zobacz katalog SimpleX",
     "index-directory-users-group-title": "Grupa użytkowników SimpleX",
@@ -372,5 +378,6 @@
     "file-proto-h-4": "Niezależne routery danych",
     "file-proto-p-4": "Gdy plik jest dzielony na fragmenty, jest on wysyłany przez routery sieciowe obsługiwane przez niezależne podmioty. Żaden operator nie może zobaczyć rzeczywistego rozmiaru ani nazwy pliku. Nawet jeśli router zostanie naruszony, może on zobaczyć tylko zaszyfrowane fragmenty o stałym rozmiarze. Fragmenty plików są przechowywane w pamięci podręcznej routerów sieciowych przez około 48 godzin.",
     "file-proto-spec": "Zapoznaj się ze specyfikacją protokołu XFTP →",
-    "send-file": "Wyślij plik"
+    "send-file": "Wyślij plik",
+    "why-film": "Obejrzyj 2-minutowy film na YouTube"
 }
diff --git a/website/langs/pt_BR.json b/website/langs/pt_BR.json
index 52848e5cea..f588e2f9a9 100644
--- a/website/langs/pt_BR.json
+++ b/website/langs/pt_BR.json
@@ -46,7 +46,7 @@
     "simplex-private-3-title": "Transporte TLS<br>seguro e autenticado",
     "simplex-private-card-2-point-1": "Camada adicional de criptografia de servidor para entrega ao destinatário, para evitar a correlação entre o tráfego de servidor recebido e enviado se o TLS for comprometido.",
     "simplex-private-card-4-point-1": "Para proteger seu endereço IP, você pode acessar os servidores por meio do Tor ou de alguma outra rede de sobreposição de transporte.",
-    "simplex-private-card-4-point-2": "Para usar o SimpleX via Tor, instale o aplicativo <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot</a> e ative o proxy SOCKS5 (ou VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">no iOS</a>).",
+    "simplex-private-card-4-point-2": "Para usar o SimpleX via Tor, instale o aplicativo <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot</a> e ative o proxy SOCKS5 (ou VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">no iOS</a>).",
     "simplex-private-card-7-point-2": "Se alguma mensagem for adicionada, removida ou alterada, o destinatário será alertado.",
     "simplex-private-card-10-point-1": "O SimpleX usa endereços anônimos temporários em pares e credenciais para cada contato de usuário ou membro de grupo.",
     "privacy-matters-1-overlay-1-title": "A privacidade economiza seu dinheiro",
@@ -68,13 +68,13 @@
     "privacy-matters-overlay-card-2-p-2": "Para ser objetivo e tomar decisões independentes, você precisa ter o controle do seu espaço de informações. Isso só é possível se você usar uma rede de comunicação privada que não tenha acesso ao seu gráfico social.",
     "privacy-matters-overlay-card-3-p-1": "Todos devem se preocupar com a privacidade e a segurança de suas comunicações &mdash; conversas inofensivas podem colocá-lo em perigo, mesmo que você não tenha nada a esconder.",
     "simplex-unique-overlay-card-3-p-1": "O SimpleX Chat armazena todos os dados do usuário somente em dispositivos clientes usando um <strong>formato de banco de dados criptografado portátil</strong> que pode ser exportado e transferido para qualquer dispositivo compatível.",
-    "privacy-matters-overlay-card-3-p-2": "Uma das histórias mais chocantes é a experiência de <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>Mohamedou Ould Salahi</a>, descrita em seu livro de memórias e mostrada no filme O Mauritano. Ele foi colocado no campo de Guantánamo, sem julgamento, e lá foi torturado por 15 anos após um telefonema para seu parente no Afeganistão, sob suspeita de estar envolvido nos ataques de 11 de setembro, embora tenha vivido na Alemanha nos 10 anos anteriores.",
+    "privacy-matters-overlay-card-3-p-2": "Uma das histórias mais chocantes é a experiência de <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>Mohamedou Ould Salahi</a>, descrita em seu livro de memórias e mostrada no filme O Mauritano. Ele foi colocado no campo de Guantánamo, sem julgamento, e lá foi torturado por 15 anos após um telefonema para seu parente no Afeganistão, sob suspeita de estar envolvido nos ataques de 11 de setembro, embora tenha vivido na Alemanha nos 10 anos anteriores.",
     "simplex-unique-overlay-card-1-p-1": "Ao contrário de outras redes de mensagens, o SimpleX <strong>não tem identificadores atribuídos aos usuários</strong>. Ele não depende de números de telefone, endereços baseados em domínio (como email ou XMPP), nomes de usuário, chaves públicas ou mesmo números aleatórios para identificar seus usuários &mdash; Os operadores dos servidores não sabem quantas pessoas usam os servidores SimpleX.",
     "simplex-private-card-1-point-1": "Protocolo de dupla catraca &mdash;<br>mensagens OTR com Sigilo de Encaminhamento Perfeito (Perfect Forward Secrecy) e recuperação de invasão.",
     "simplex-private-8-title": "Mistura de mensagens<br>para reduzir a correlação",
-    "simplex-unique-overlay-card-4-p-2": "A rede SimpleX usa um <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>protocolo aberto</a> e fornece um <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>SDK para criar bots de chat</a>, permitindo a implementação de serviços com os quais os usuários podem interagir por meio dos aplicativos SimpleX Chat &mdash; estamos&apos; realmente ansiosos para ver quais serviços SimpleX você pode criar.",
+    "simplex-unique-overlay-card-4-p-2": "A rede SimpleX usa um <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>protocolo aberto</a> e fornece um <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>SDK para criar bots de chat</a>, permitindo a implementação de serviços com os quais os usuários podem interagir por meio dos aplicativos SimpleX Chat &mdash; estamos&apos; realmente ansiosos para ver quais serviços SimpleX você pode criar.",
     "simplex-unique-overlay-card-3-p-4": "Não há identificadores ou texto cifrado em comum entre o tráfego de servidor enviado e recebido &mdash; se alguém estiver observando, não poderá determinar facilmente quem se comunica com quem, mesmo que o TLS esteja comprometido.",
-    "simplex-unique-overlay-card-4-p-3": "Se estiver pensando em desenvolver para a rede SimpleX, por exemplo, o bot de chat para os usuários do aplicativo SimpleX ou a integração da biblioteca SimpleX Chat em seus aplicativos móveis, <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>entre em contato</a> para qualquer orientação e suporte.",
+    "simplex-unique-overlay-card-4-p-3": "Se estiver pensando em desenvolver para a rede SimpleX, por exemplo, o bot de chat para os usuários do aplicativo SimpleX ou a integração da biblioteca SimpleX Chat em seus aplicativos móveis, <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>entre em contato</a> para qualquer orientação e suporte.",
     "simplex-unique-card-2-p-1": "Como você não tem um identificador ou endereço fixo na rede SimpleX, ninguém pode entrar em contato com você, a menos que você compartilhe um endereço de usuário único ou temporário, como um QR code ou um link.",
     "simplex-unique-card-3-p-1": "O SimpleX armazena todos os dados do usuário nos dispositivos clientes em um <strong>formato de banco de dados criptografado portátil</strong> &mdash; que pode ser transferido para outro dispositivo.",
     "hide-info": "Ocultar informações",
@@ -116,17 +116,17 @@
     "simplex-unique-4-overlay-1-title": "Totalmente descentralizado &mdash; os usuários são proprietários da rede SimpleX",
     "hero-overlay-card-1-p-3": "Você define o(s) servidor(es) a ser(em) usado(s) para receber as mensagens, seus contatos &mdash; os servidores que você usa para enviar as mensagens a eles. É provável que cada conversa use dois servidores diferentes.",
     "hero-overlay-card-1-p-4": "Esse design evita o vazamento de metadados de qualquer usuário&apos; no nível do aplicativo. Para aumentar ainda mais a privacidade e proteger seu endereço IP, você pode se conectar aos servidores de mensagens via Tor.",
-    "hero-overlay-card-1-p-6": "Leia mais no <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>informativo técnico do SimpleX</a>.",
+    "hero-overlay-card-1-p-6": "Leia mais no <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>informativo técnico do SimpleX</a>.",
     "hero-overlay-card-2-p-2": "Eles poderiam então correlacionar essas informações com as redes sociais públicas existentes e determinar algumas identidades reais.",
     "hero-overlay-card-2-p-4": "O SimpleX se protege contra esses ataques por não ter nenhum ID de usuário em seu design. E, se você usar o modo Anônimo, terá um nome de exibição diferente para cada contato, evitando qualquer compartilhamento de dados entre eles.",
     "simplex-network-overlay-card-1-p-1": "Os protocolos e aplicativos de mensagens <a href=\"https://pt.wikipedia.org/wiki/Peer-to-peer\">P2P</a> têm vários problemas que os tornam menos confiáveis do que o SimpleX, mais complexos de analisar e vulneráveis a vários tipos de ataque.",
     "simplex-network-overlay-card-1-li-2": "O design do SimpleX, ao contrário da maioria das redes P2P, não tem identificadores de usuário globais de qualquer tipo, mesmo temporários, e usa apenas identificadores temporários em pares, proporcionando melhor anonimato e proteção de metadados.",
     "simplex-network-overlay-card-1-li-3": "O P2P não resolve o problema do <a href='https://pt.wikipedia.org/wiki/Ataque_man-in-the-middle'>ataque MITM</a>, e a maioria das implementações existentes não usa mensagens fora de banda para a troca de chaves inicial. O SimpleX usa mensagens fora de banda ou, em alguns casos, conexões pré-existentes seguras e confiáveis para a troca de chaves inicial.",
     "simplex-network-overlay-card-1-li-6": "As redes P2P podem ser vulneráveis a <a href='https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent'>ataques DRDoS</a>, quando os clientes podem retransmitir e amplificar o tráfego, resultando em uma negação de serviço em toda a rede. Os clientes SimpleX apenas retransmitem o tráfego de uma conexão conhecida e não podem ser usados por um invasor para amplificar o tráfego em toda a rede.",
-    "privacy-matters-overlay-card-1-p-3": "Algumas empresas financeiras e de seguros usam gráficos sociais para determinar taxas de juros e prêmios. Isso geralmente faz com que as pessoas com renda mais baixa paguem mais &mdash; isso é conhecido como <a href='https://fairbydesign.com/povertypremium/' target='_blank'>\"prêmio de pobreza\"</a>.",
-    "privacy-matters-overlay-card-2-p-1": "Não faz muito tempo que observamos as eleições sendo manipuladas por <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>uma empresa de consultoria respeitável</a> que usou nossos gráficos sociais para distorcer nossa visão do mundo real e manipular nossos votos.",
+    "privacy-matters-overlay-card-1-p-3": "Algumas empresas financeiras e de seguros usam gráficos sociais para determinar taxas de juros e prêmios. Isso geralmente faz com que as pessoas com renda mais baixa paguem mais &mdash; isso é conhecido como <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>\"prêmio de pobreza\"</a>.",
+    "privacy-matters-overlay-card-2-p-1": "Não faz muito tempo que observamos as eleições sendo manipuladas por <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>uma empresa de consultoria respeitável</a> que usou nossos gráficos sociais para distorcer nossa visão do mundo real e manipular nossos votos.",
     "privacy-matters-overlay-card-2-p-3": "O SimpleX é a primeira rede que não tem nenhum identificador de usuário por design, protegendo assim seu gráfico de conexões melhor do que qualquer alternativa conhecida.",
-    "privacy-matters-overlay-card-3-p-3": "Pessoas comuns são presas pelo que compartilham online, mesmo por meio de suas contas \"anônimas\", <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>mesmo em países democráticos</a>.",
+    "privacy-matters-overlay-card-3-p-3": "Pessoas comuns são presas pelo que compartilham online, mesmo por meio de suas contas \"anônimas\", <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>mesmo em países democráticos</a>.",
     "privacy-matters-overlay-card-3-p-4": "Não basta usar um mensageiro criptografado de ponta-a-ponta, todos nós devemos usar os mensageiros que protegem a privacidade de nossas redes pessoais &mdash; com quem estamos conectados.",
     "simplex-unique-overlay-card-1-p-2": "Para entregar mensagens, o SimpleX usa <a href='https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier'>endereços anônimos em pares</a> de filas de mensagens unidirecionais, separadas para mensagens recebidas e enviadas, geralmente por meio de servidores diferentes.",
     "simplex-unique-overlay-card-1-p-3": "Esse design protege a privacidade com quem você está se comunicando, ocultando-a dos servidores da rede SimpleX e de quaisquer observadores. Para ocultar seu endereço IP dos servidores, você pode <strong>se conectar aos servidores do SimpleX via Tor</strong>.",
@@ -262,7 +262,13 @@
     "navbar-token": "Token",
     "index-hero-h1": "Seja<br>Livre",
     "index-hero-h2": "Na Sua Rede",
-    "index-hero-p1": "A primeira rede sem IDs de usuário.<br>Seus contatos, grupos e canais pertencem a você.",
+    "index-hero-p1": "<span class=\"nowrap\">A única rede de mensagens</span> <span class=\"nowrap\">sem nenhum identificador de usuário.</span><br>Seus contatos, grupos e canais pertencem a você.",
+    "index-hero-own-part": "Seja dono de uma parte dela.",
+    "index-hero-invest": "Invista no SimpleX Chat.",
+    "index-hero-downloads": "Downloads",
+    "index-hero-monthly-users": "Usuários mensais",
+    "index-hero-countdown-lead": "Lançamento de domínios SimpleX",
+    "index-hero-countdown-done": "Obtenha um domínio SimpleX",
     "index-hero-download-desktop-btn-title": "Baixe o aplicativo SimpleX Desktop",
     "index-testflight-title": "SimpleX iOS - versão beta no TestFlight",
     "index-f-droid-title": "Aplicativo SimpleX no F-Droid",
@@ -300,7 +306,7 @@
     "index-roadmap-3-title": "Faça Suas Comunidades Crescerem",
     "index-roadmap-3-desc": "Ferramentas para promover suas comunidades",
     "index-directory-h2": "Participe das Comunidades SimpleX",
-    "index-directory-p1": "Mais de 2 milhões de pessoas baixaram os aplicativos SimpleX.",
+    "index-directory-p1": "Mais de 3 milhões de pessoas baixaram os aplicativos SimpleX.",
     "index-directory-p2": "Encontre seus canais e comunidades no diretório e crie os seus próprios!",
     "index-directory-cta": "Ver diretório do SimpleX",
     "how-secure-comparison-title": "Comparação da segurança da criptografia de ponta a ponta em diferentes mensageiros",
@@ -318,5 +324,6 @@
     "messengers-comparison-section-list-point-6": "O acordo de chaves pós-quântico é 'esparso' &mdash; ele protege apenas algumas das etapas da catraca (ratchet).",
     "navbar-old-site": "Site antigo",
     "index-directory-users-group-title": "Grupos de usuários do SimpleX",
-    "send-file": "Enviar arquivo"
+    "send-file": "Enviar arquivo",
+    "why-footer-link": "Por que a estamos construindo"
 }
diff --git a/website/langs/ru.json b/website/langs/ru.json
index 9e714e59ff..e9e1c5a49f 100644
--- a/website/langs/ru.json
+++ b/website/langs/ru.json
@@ -14,7 +14,7 @@
     "hero-2-header": "Установите конфиденциальное соединение",
     "simplex-unique-overlay-card-3-p-3": "В отличие от серверов федеративных сетей (электронной почты, XMPP или Matrix), серверы SimpleX не хранят учетные записи пользователей, они только ретранслируют сообщения, защищая конфиденциальность обеих сторон.",
     "hero-subheader": "Первый мессенджер<br>без идентификаторов пользователей",
-    "privacy-matters-overlay-card-3-p-2": "Одна из самых шокирующих историй &mdash; это опыт <a href='https://ru.wikipedia.org/wiki/Слахи,_Мохаммед_Ульд' target='_blank'>Слахи, Мохаммеда Ульда</a>, описанный в его мемуарах и показанный в фильме <a href='https://ru.wikipedia.org/wiki/Мавританец' target='_blank'>Мавританец</a>. Он был помещен в лагерь Гуантанамо без суда и следствия и подвергался там пыткам в течение 15 лет после телефонного звонка своему родственнику в Афганистане, из-за подозрения в причастности к терактам 11 сентября, хотя предыдущие 10 лет он жил в Германии.",
+    "privacy-matters-overlay-card-3-p-2": "Одна из самых шокирующих историй &mdash; это опыт <a href='https://ru.wikipedia.org/wiki/Слахи,_Мохаммед_Ульд' target='_blank' rel='noopener'>Слахи, Мохаммеда Ульда</a>, описанный в его мемуарах и показанный в фильме <a href='https://ru.wikipedia.org/wiki/Мавританец' target='_blank' rel='noopener'>Мавританец</a>. Он был помещен в лагерь Гуантанамо без суда и следствия и подвергался там пыткам в течение 15 лет после телефонного звонка своему родственнику в Афганистане, из-за подозрения в причастности к терактам 11 сентября, хотя предыдущие 10 лет он жил в Германии.",
     "signing-key-fingerprint": "Идентификатор ключа подписи (SHA-256)",
     "simplex-network-2-desc": "Серверные узлы SimpleX НЕ хранят профили пользователей, контакты и доставленные сообщения, НЕ подключаются друг к другу, и НЕ имеют каталога серверов.",
     "simplex-privacy": "Конфиденциальность SimpleX",
@@ -73,7 +73,7 @@
     "contact-hero-header": "Вы получили адрес контакта для соединения в SimpleX Chat",
     "feature-8-title": "Режим инкогнито &mdash;<br>уникальный для SimpleX Chat",
     "why-simplex": "Почему SimpleX",
-    "simplex-private-card-4-point-2": "Чтобы использовать SimpleX через сеть Tor, пожалуйста, установите <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">приложение Orbot</a> и включите прокси (или режим VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">на iOS</a>).",
+    "simplex-private-card-4-point-2": "Чтобы использовать SimpleX через сеть Tor, пожалуйста, установите <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">приложение Orbot</a> и включите прокси (или режим VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">на iOS</a>).",
     "contact-hero-subheader": "Отсканируйте QR-код с помощью приложения SimpleX Chat на Вашем телефоне или планшете.",
     "simplex-unique-2-overlay-1-title": "Лучшая защита от спама и злоупотреблений",
     "simplex-private-6-title": "Обмен ключами<br>вне протокола",
@@ -95,7 +95,7 @@
     "comparison-point-1-text": "Требуется глобальный идентификатор",
     "comparison-section-list-point-5": "Не защищает конфиденциальность пользовательских метаданных",
     "hero-overlay-card-2-p-2": "Эта информация может быть сопоставлена с социальными сетями, чтобы определить реальные личности пользователей.",
-    "privacy-matters-overlay-card-1-p-3": "Некоторые финансовые и страховые компании используют социальные сети для определения процентных ставок и премий. Это часто заставляет людей с более низкими доходами платить больше &mdash; это известно как <a href='https://fairbydesign.com/povertypremium/' target='_blank'>\"наценка за бедность\"</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Некоторые финансовые и страховые компании используют социальные сети для определения процентных ставок и премий. Это часто заставляет людей с более низкими доходами платить больше &mdash; это известно как <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>\"наценка за бедность\"</a>.",
     "comparison-point-3-text": "Зависимость от DNS",
     "yes": "Да",
     "docs-dropdown-6": "Сервера WebRTC",
@@ -157,7 +157,7 @@
     "get-simplex": "Скачать SimpleX <a href=\"/downloads/#desktop-app\">для компьютера</a>",
     "privacy-matters-overlay-card-3-p-1": "Каждый должен заботиться о конфиденциальности и безопасности своих коммуникаций &mdash; безобидные разговоры могут подвергнуть Вас опасности, например за Ваши политические взгляды, даже если кажется, что Вам \"нечего скрывать\".",
     "simplex-unique-2-title": "Вы защищены от<br>спама и злоупотреблений",
-    "simplex-unique-overlay-card-4-p-3": "Если Вы рассматриваете возможность разработки для сети SimpleX, например, чат-бота для пользователей SimpleX или интеграции библиотеки SimpleX Chat в Ваше мобильное приложение, пожалуйста, <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>обращайтесь</a> за любыми советами и поддержкой.",
+    "simplex-unique-overlay-card-4-p-3": "Если Вы рассматриваете возможность разработки для сети SimpleX, например, чат-бота для пользователей SimpleX или интеграции библиотеки SimpleX Chat в Ваше мобильное приложение, пожалуйста, <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>обращайтесь</a> за любыми советами и поддержкой.",
     "comparison-section-list-point-2": "Адреса на основе DNS",
     "stable-and-beta-versions-built-by-developers": "Стабильные и бета-версии, созданные разработчиками",
     "simplex-network-3-header": "Сеть SimpleX",
@@ -180,11 +180,11 @@
     "hero-p-1": "Другие приложения используют ID пользователей: Signal, Matrix, Session, Briar, Jami, Cwtch и т. п.<br>SimpleX не использует, <strong>даже случайных цифр</strong>.<br>Это значительно повышает Вашу конфиденциальность.",
     "simplex-network-overlay-card-1-li-2": "В отличие от многих P2P сетей, SimpleX спроектирован так, чтобы не нуждаться в глобальных идентификаторах пользователей, даже временных, используя только временные попарные идентификаторы, обеспечивая лучшую анонимность и защиту метаданных пользователей.",
     "simplex-unique-4-title": "Вы владеете<br>сетью SimpleX",
-    "privacy-matters-overlay-card-3-p-3": "Обычных людей арестовывают за то, чем они делятся в Интернете, даже через свои \"анонимные\" аккаунты, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>даже в демократических странах</a>.",
+    "privacy-matters-overlay-card-3-p-3": "Обычных людей арестовывают за то, чем они делятся в Интернете, даже через свои \"анонимные\" аккаунты, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>даже в демократических странах</a>.",
     "simplex-unique-overlay-card-3-p-2": "Сквозные зашифрованные сообщения временно хранятся на серверах SimpleX до получения, после чего они удаляются безвозвратно.",
     "blog": "Блог",
     "simplex-private-card-7-point-1": "Для обеспечения неизменности, сообщения нумеруются по порядку и содержат хеш предыдущего сообщения.",
-    "simplex-unique-overlay-card-4-p-2": "Сеть SimpleX использует <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">открытый протокол</a> и предоставляет <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">SDK для создания чат-ботов</a>, позволяя внедрять сервисы, с которыми пользователи могут взаимодействовать через приложение SimpleX Chat &mdash; мы с нетерпением ждем сервисы SimpleX, которые Вы создадите.",
+    "simplex-unique-overlay-card-4-p-2": "Сеть SimpleX использует <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">открытый протокол</a> и предоставляет <a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">SDK для создания чат-ботов</a>, позволяя внедрять сервисы, с которыми пользователи могут взаимодействовать через приложение SimpleX Chat &mdash; мы с нетерпением ждем сервисы SimpleX, которые Вы создадите.",
     "simplex-explained-tab-1-p-1": "Вы можете создавать контакты и группы, а также вести двусторонние беседы, как и в любом другом мессенджере.",
     "contact-hero-p-2": "Еще не скачали SimpleX Chat?",
     "why-simplex-is-unique": "Почему SimpleX <span class='gradient-text'>уникален</span>",
@@ -203,7 +203,7 @@
     "simplex-explained-tab-2-text": "2. Как это работает",
     "docs-dropdown-4": "Свой SMP Сервер",
     "feature-4-title": "Голосовые сообщения с E2E-шифрованием",
-    "privacy-matters-overlay-card-2-p-1": "Не так давно мы наблюдали, как <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>авторитетная консалтинговая компания</a> манипулировала крупными выборами, используя наши контакты в социальных сетях, чтобы изменять наши мнения и манипулировать нашими голосами.",
+    "privacy-matters-overlay-card-2-p-1": "Не так давно мы наблюдали, как <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>авторитетная консалтинговая компания</a> манипулировала крупными выборами, используя наши контакты в социальных сетях, чтобы изменять наши мнения и манипулировать нашими голосами.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX &mdash; это первая сеть, которая не имеет никаких идентификаторов пользователей, таким образом защищая Ваши контакты лучше, чем любая известная альтернатива.",
     "learn-more": "Узнать больше",
     "donate": "Пожертвовать",
@@ -234,7 +234,7 @@
     "developers": "Разработчики",
     "simplex-private-7-title": "Проверка неизменности<br>сообщений",
     "privacy-matters-overlay-card-1-p-4": "Сеть SimpleX обеспечивает более высокий уровень конфиденциальности ваших связей, чем любое другое решение, полностью предотвращая доступ компаний и организаций к вашему социальному графу. Даже если пользователи используют серверы, предварительно настроенные в приложениях SimpleX Chat, операторы этих серверов не знают ни количества пользователей, ни их связей.",
-    "hero-overlay-card-1-p-6": "Подробнее читайте в <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>техническом описании SimpleX</a>.",
+    "hero-overlay-card-1-p-6": "Подробнее читайте в <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>техническом описании SimpleX</a>.",
     "simplex-network-overlay-card-1-p-1": "Протоколы и приложения для обмена сообщениями <a href='https://ru.wikipedia.org/wiki/Одноранговая_сеть'>P2P</a> имеют различные проблемы, которые делают их менее надежными, чем SimpleX, более сложными для анализа и уязвимыми для нескольких типов атак.",
     "terms-and-privacy-policy": "Политика Конфиденциальности",
     "about-and-contact-us": "O нас и наши контакты",
@@ -261,7 +261,13 @@
     "docs-dropdown-14": "SimpleX для бизнеса",
     "index-hero-h1": "<div class=\"small\">Будь<br>Свободен</div>",
     "index-hero-h2": "В Своей Сети",
-    "index-hero-p1": "Первая сеть без идентификаторов пользователей.<br>Ваши контакты, группы и каналы принадлежат Вам.",
+    "index-hero-p1": "<span class=\"nowrap\">Единственная сеть обмена сообщениями</span> <span class=\"nowrap\">без идентификаторов пользователей.</span><br>Ваши контакты, группы и каналы принадлежат Вам.",
+    "index-hero-own-part": "Владейте её частью.",
+    "index-hero-invest": "Инвестируйте в SimpleX Chat.",
+    "index-hero-downloads": "Загрузок",
+    "index-hero-monthly-users": "Пользователей в месяц",
+    "index-hero-countdown-lead": "Запуск доменов SimpleX",
+    "index-hero-countdown-done": "Получите домен SimpleX",
     "index-hero-download-desktop-btn-title": "Загрузить приложение SimpleX для компьютера",
     "index-testflight-title": "Бета-релиз для iOS на TestFlight",
     "index-f-droid-title": "Загрузить через F-Droid",
@@ -299,7 +305,7 @@
     "index-roadmap-3-title": "Поддержка роста Ваших групп",
     "index-roadmap-3-desc": "Инструменты для продвижения групп",
     "index-directory-h2": "Вступайте в Группы SimpleX",
-    "index-directory-p1": "Более 2 миллионов человек скачали приложения SimpleX.",
+    "index-directory-p1": "Более 3 миллионов человек скачали приложения SimpleX.",
     "index-directory-p2": "Найдите каналы и сообщества в каталоге и создайте свои!",
     "index-directory-cta": "Открыть каталог SimpleX",
     "index-directory-users-group-title": "Группа пользователей SimpleX",
@@ -332,5 +338,29 @@
     "file-desc": "Отправьте файлы безопасно со сквозным шифрованием — без учётных записей, без отслеживания.",
     "file-noscript": "JavaScript необходим для передачи файлов.",
     "file-e2e-note": "Сквозное шифрование — сервер никогда не видит ваш файл.",
-    "file-learn-more": "Узнайте больше о протоколе XFTP"
+    "file-learn-more": "Узнайте больше о протоколе XFTP",
+    "docs-dropdown-15": "Проверка и воспроизведение сборок",
+    "downloads-h1": "Скачать SimpleX Chat",
+    "downloads-lead-1": "Единственная сеть обмена сообщениями без идентификаторов пользователей.",
+    "downloads-lead-2": "Бесплатна, открыта, децентрализована.",
+    "downloads-lead-device": "Ваш профиль — только на устройстве.",
+    "downloads-lead-phone": "Ваш профиль — только на телефоне.",
+    "downloads-for-mac": "Скачать для macOS",
+    "downloads-for-windows": "Скачать для Windows",
+    "downloads-for-linux": "Скачать для Linux",
+    "downloads-beta": "Бета",
+    "downloads-more": "Ещё",
+    "downloads-other-devices": "Другие устройства",
+    "downloads-all-h2": "Все версии",
+    "downloads-desktop": "Компьютер",
+    "downloads-terminal": "Терминал",
+    "downloads-terminal-desc": "Консольное приложение для серверов, ботов и разработчиков.",
+    "downloads-terminal-guide": "Как пользоваться консольным приложением",
+    "downloads-phone": "Телефон",
+    "downloads-link-desktop": "Вы можете связать телефон с приложением для компьютера и использовать один профиль, когда оба устройства находятся в одной локальной сети.",
+    "downloads-advanced-h2": "Для опытных пользователей",
+    "downloads-github": "Все релизы на GitHub",
+    "downloads-mirror": "Зеркало: git.simplex.chat",
+    "downloads-fdroid-repo": "Репозиторий F-Droid",
+    "why-film": "Посмотрите 2-минутный фильм на YouTube"
 }
diff --git a/website/langs/tr.json b/website/langs/tr.json
index de607f689a..216e03b43c 100644
--- a/website/langs/tr.json
+++ b/website/langs/tr.json
@@ -67,7 +67,7 @@
     "simplex-private-card-3-point-2": "Sunucu parmak izleri ve kanal bağlama, MITM ve tekrar saldırılarını önler.",
     "simplex-private-card-3-point-3": "Oturum saldırılarını önlemek için bağlantı devamı devre dışı bırakılmıştır.",
     "simplex-private-card-4-point-1": "IP adresinizi korumak için Tor veya başka bir taşıma katmanı ağı üzerinden sunuculara erişebilirsiniz.",
-    "simplex-private-card-4-point-2": "Android'de Tor ile SimpleX kullanmak için <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot uygulamasını</a> yükleyin ve SOCKS5 proxy'yi etkinleştirin veya <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">iOS'ta</a> VPN kullanın.",
+    "simplex-private-card-4-point-2": "Android'de Tor ile SimpleX kullanmak için <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot uygulamasını</a> yükleyin ve SOCKS5 proxy'yi etkinleştirin veya <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">iOS'ta</a> VPN kullanın.",
     "simplex-private-card-5-point-1": "SimpleX, mesaj boyutu saldırılarını önlemek için her şifreleme katmanında içerik doldurma kullanır.",
     "simplex-private-card-5-point-2": "Sunucu ve ağ gözlemcileri için aynı görünen farklı boyutlarda mesajlar üretir.",
     "simplex-private-card-6-point-1": "Birçok iletişim ağı, sunucu veya ağ sağlayıcıları tarafından yapılan MITM saldırılarına karşı savunmasızdır.",
@@ -101,7 +101,7 @@
     "hero-overlay-card-1-p-3": "Hangi sunucuları mesaj almak için kullanacağınızı siz belirlersiniz. Kişileriniz &mdash; bu sunucuları size mesaj göndermek için kullanır. Her konuşma genellikle iki farklı sunucu kullanır.",
     "hero-overlay-card-1-p-4": "Bu tasarım, uygulama düzeyinde kullanıcı meta verilerinin sızmasını önler. Mesaj sunucularına Tor üzerinden bağlanarak gizliliğinizi ve IP adresinizi koruyabilirsiniz.",
     "hero-overlay-card-1-p-5": "Kullanıcı profilleri, kişiler ve gruplar yalnızca kullanıcının cihazında saklanır. Mesajlar, iki katmanlı uçtan uca şifreleme ile gönderilir.",
-    "hero-overlay-card-1-p-6": "Daha fazla bilgi için <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX teknik dokümanını</a> okuyun.",
+    "hero-overlay-card-1-p-6": "Daha fazla bilgi için <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX teknik dokümanını</a> okuyun.",
     "hero-overlay-card-2-p-1": "Kullanıcıların kalıcı kimlikleri olduğunda, bu bir oturum kimliği gibi rastgele bir sayı olsa bile, sağlayıcıların veya saldırganların kullanıcıların birbirleriyle nasıl bağlantılı olduğunu ve kaç mesaj gönderdiklerini tespit etme riski vardır.",
     "hero-overlay-card-2-p-2": "Bu bilgiler, mevcut halka açık sosyal ağlarla ilişkilendirilebilir ve gerçek kimlikler ortaya çıkarılabilir.",
     "hero-overlay-card-2-p-3": "Aynı profil üzerinden iki farklı kişiyle sohbet ederseniz, en gizlilik odaklı uygulamalarda bile (ör. Tor v3 hizmetleri kullananlar) bu kişiler, aynı kişiyle bağlantılı olduklarını anlayabilir.",
@@ -118,14 +118,14 @@
     "simplex-network-overlay-card-1-li-6": "P2P ağları, istemciler trafiği tekrar gönderip güçlendirebildiğinde <a href='https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent'>DRDoS saldırılarına</a> karşı savunmasız olabilir ve bu da tüm ağda hizmet reddine yol açabilir. SimpleX istemcileri yalnızca bilinen bağlantılardan gelen trafiği iletir ve bir saldırgan tarafından ağ genelinde trafiği güçlendirmek için kullanılamaz.",
     "privacy-matters-overlay-card-1-p-1": "Birçok büyük şirket, kiminle bağlantılı olduğunuz bilgisini gelir seviyenizi tahmin etmek, size gerçekten ihtiyacınız olmayan ürünleri satmak ve fiyatları belirlemek için kullanır.",
     "privacy-matters-overlay-card-1-p-2": "Çevrimiçi satıcılar, daha düşük gelire sahip kişilerin daha acil alışverişler yaptığını bilir ve bu nedenle daha yüksek fiyatlar talep edebilir veya indirimleri kaldırabilir.",
-    "privacy-matters-overlay-card-1-p-3": "Bazı finans ve sigorta şirketleri, faiz oranlarını ve primleri belirlemek için sosyal grafikleri kullanır. Düşük gelirliler genellikle daha fazla öder &mdash; bu, <a href='https://fairbydesign.com/povertypremium/' target='_blank'>\"yoksulluk primi\"</a> olarak bilinir.",
+    "privacy-matters-overlay-card-1-p-3": "Bazı finans ve sigorta şirketleri, faiz oranlarını ve primleri belirlemek için sosyal grafikleri kullanır. Düşük gelirliler genellikle daha fazla öder &mdash; bu, <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>\"yoksulluk primi\"</a> olarak bilinir.",
     "privacy-matters-overlay-card-1-p-4": "SimpleX ağı, bağlantılarınızın gizliliğini diğer tüm alternatiflerden daha iyi korur ve sosyal grafiğinizin şirketler veya kuruluşlar tarafından erişilmesini tamamen engeller. Kullanıcılar SimpleX Chat uygulamasının önceden yapılandırılmış sunucularını kullansa bile, sunucu sahipleri kullanıcı sayısını veya bağlantılarını bilmez.",
-    "privacy-matters-overlay-card-2-p-1": "Çok da uzun olmayan bir süre önce, büyük seçimlerin <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>saygın bir danışmanlık şirketi</a> tarafından sosyal grafiklerimiz kullanılarak manipüle edildiğine tanık olduk; bu, gerçek dünyaya bakışımızı çarpıttı ve oylarımızı etkiledi.",
+    "privacy-matters-overlay-card-2-p-1": "Çok da uzun olmayan bir süre önce, büyük seçimlerin <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>saygın bir danışmanlık şirketi</a> tarafından sosyal grafiklerimiz kullanılarak manipüle edildiğine tanık olduk; bu, gerçek dünyaya bakışımızı çarpıttı ve oylarımızı etkiledi.",
     "privacy-matters-overlay-card-2-p-2": "Tarafsız olmak ve bağımsız kararlar verebilmek için bilgi alanınız üzerinde kontrol sahibi olmalısınız. Bu, yalnızca sosyal grafiğinize erişimi olmayan özel bir iletişim ağı kullanıyorsanız mümkündür.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX, tasarımı gereği hiçbir kullanıcı kimliği olmayan ilk ağdır ve bağlantı grafiğinizi diğer tüm bilinen alternatiflerden daha iyi korur.",
     "privacy-matters-overlay-card-3-p-1": "Herkes gizliliğine ve iletişiminin güvenliğine önem vermelidir &mdash; zararsız sohbetler bile, saklayacak bir şeyiniz olmasa da sizi tehlikeye atabilir.",
-    "privacy-matters-overlay-card-3-p-2": "En çarpıcı hikayelerden biri, <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>Mohamedou Ould Slahi</a>'nin yaşadıklarıdır; anılarını yazdığı kitapta ve \"The Mauritanian\" filminde anlatılır. Afganistan'daki akrabalarını aradıktan sonra, Almanya'da 10 yıl yaşamasına rağmen, Guantanamo'ya gönderildi ve yıllarca yargılanmadan işkence gördü çünkü 11 Eylül saldırılarına karıştığından şüpheleniliyordu.",
-    "privacy-matters-overlay-card-3-p-3": "Normal insanlar bile, çevrimiçi olarak paylaştıkları şeyler nedeniyle, hatta \"anonim\" hesaplarını kullansalar bile, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>demokratik ülkelerde bile</a> tutuklanabiliyor.",
+    "privacy-matters-overlay-card-3-p-2": "En çarpıcı hikayelerden biri, <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>Mohamedou Ould Slahi</a>'nin yaşadıklarıdır; anılarını yazdığı kitapta ve \"The Mauritanian\" filminde anlatılır. Afganistan'daki akrabalarını aradıktan sonra, Almanya'da 10 yıl yaşamasına rağmen, Guantanamo'ya gönderildi ve yıllarca yargılanmadan işkence gördü çünkü 11 Eylül saldırılarına karıştığından şüpheleniliyordu.",
+    "privacy-matters-overlay-card-3-p-3": "Normal insanlar bile, çevrimiçi olarak paylaştıkları şeyler nedeniyle, hatta \"anonim\" hesaplarını kullansalar bile, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>demokratik ülkelerde bile</a> tutuklanabiliyor.",
     "privacy-matters-overlay-card-3-p-4": "Sadece uçtan uca şifreli bir mesajlaşma uygulaması kullanmak yeterli değildir. Hepimiz, bağlı olduğumuz kişisel ağlarımızın gizliliğini koruyan bir mesajlaşma uygulaması kullanmalıyız.",
     "simplex-unique-overlay-card-1-p-1": "Diğer mesajlaşma ağlarının aksine, SimpleX <strong>kullanıcılara hiçbir kimlik atamaz</strong>. Kullanıcıları tanımlamak için telefon numaralarına, alan adı tabanlı adreslere (e-posta veya XMPP gibi), kullanıcı adlarına, genel anahtarlara veya rastgele sayılara dayanmaz &mdash; SimpleX sunucu sahipleri bile sunucularını kaç kişinin kullandığını bilmez.",
     "simplex-unique-overlay-card-1-p-2": "SimpleX, mesajları iletmek için <a href='https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier'>ikili anonim adresler</a> kullanır; bunlar tek yönlü mesaj kuyruklarından oluşur ve alınan ve gönderilen mesajlar için ayrıdır, genellikle farklı sunucular üzerinden iletilir.",
@@ -137,8 +137,8 @@
     "simplex-unique-overlay-card-3-p-3": "Federasyonlu ağ sunucularının (ör. e-posta, XMPP veya Matrix) aksine, SimpleX sunucuları kullanıcı hesabı saklamaz, yalnızca mesajları iletir ve böylece tarafların gizliliği korunur.",
     "simplex-unique-overlay-card-3-p-4": "Gönderilen ve alınan sunucu trafiği arasında ortak bir kimlik veya şifreli metin yoktur &mdash; bu nedenle, bir gözlemci TLS ele geçirilse bile kimin kiminle iletişim kurduğunu kolayca tespit edemez.",
     "simplex-unique-overlay-card-4-p-1": "<strong>Kendi sunucularınızla SimpleX kullanabilirsiniz</strong> ve yine de uygulamanın önceden yapılandırılmış sunucularını kullanan kişilerle iletişim kurabilirsiniz.",
-    "simplex-unique-overlay-card-4-p-2": "SimpleX ağı <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>açık bir protokol</a> kullanır ve <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>sohbet botları geliştirmek için bir SDK</a> sunar. Bu sayede kullanıcıların SimpleX Chat uygulamalarıyla etkileşime geçebileceği servisler oluşturabilirsiniz &mdash; hangi SimpleX servislerini geliştireceğinizi merakla bekliyoruz.",
-    "simplex-unique-overlay-card-4-p-3": "SimpleX ağının geliştirilmesine aktif olarak katkıda bulunmak, örneğin SimpleX uygulama kullanıcıları için bir sohbet botu geliştirmek veya SimpleX Chat kütüphanesinin mobil uygulamalara entegrasyonunu ilerletmek isterseniz, <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>bizimle iletişime geçin</a> ve destek alın.",
+    "simplex-unique-overlay-card-4-p-2": "SimpleX ağı <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>açık bir protokol</a> kullanır ve <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>sohbet botları geliştirmek için bir SDK</a> sunar. Bu sayede kullanıcıların SimpleX Chat uygulamalarıyla etkileşime geçebileceği servisler oluşturabilirsiniz &mdash; hangi SimpleX servislerini geliştireceğinizi merakla bekliyoruz.",
+    "simplex-unique-overlay-card-4-p-3": "SimpleX ağının geliştirilmesine aktif olarak katkıda bulunmak, örneğin SimpleX uygulama kullanıcıları için bir sohbet botu geliştirmek veya SimpleX Chat kütüphanesinin mobil uygulamalara entegrasyonunu ilerletmek isterseniz, <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>bizimle iletişime geçin</a> ve destek alın.",
     "simplex-unique-card-1-p-1": "SimpleX, profilinizin, kişilerin ve meta verilerinizin gizliliğini korur ve bunları SimpleX ağ sunucularından ve diğer olası gözlemcilerden gizler.",
     "simplex-unique-card-1-p-2": "Mevcut tüm diğer mesajlaşma ağlarının aksine, SimpleX kullanıcılarına hiçbir kimlik atamaz &mdash; <strong>rastgele sayılar bile yoktur</strong>.",
     "simplex-unique-card-2-p-1": "SimpleX ağında kimliğiniz veya sabit bir adresiniz olmadığı için, kimse size ulaşamaz; yalnızca tek kullanımlık veya geçici bir kullanıcı adresini QR kodu veya bağlantı olarak paylaşırsanız iletişim kurabilir.",
diff --git a/website/langs/uk.json b/website/langs/uk.json
index 1848b5ce96..d681517200 100644
--- a/website/langs/uk.json
+++ b/website/langs/uk.json
@@ -13,13 +13,13 @@
     "simplex-network-overlay-card-1-li-5": "Всі відомі P2P-мережі можуть бути вразливими до атаки <a href='https://en.wikipedia.org/wiki/Sybil_attack'>Sybil</a>, оскільки кожен вузол є відкритим, і мережа працює як ціле. Відомі заходи для пом'якшення цієї атаки вимагають або централізованого компонента, або дорогого <a href='https://en.wikipedia.org/wiki/Proof_of_work'>доказу роботи</a>. Мережа SimpleX не має виявності сервера, вона роздроблена і працює як кілька ізольованих підмереж, що робить неможливими атаки на всю мережу.",
     "simplex-network-overlay-card-1-li-6": "P2P-мережі можуть бути вразливими до атаки <a href='https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent'>DRDoS</a>, коли клієнти можуть ребродкастити та збільшувати трафік, що призводить до відмови в обслуговуванні на рівні всієї мережі. Клієнти SimpleX лише пересилають трафік від відомого підключення і не можуть бути використані зловмисником для збільшення трафіку в усій мережі.",
     "privacy-matters-overlay-card-1-p-2": "Інтернет-роздрібники знають, що люди з низьким доходом частіше роблять термінові покупки, тому вони можуть встановлювати вищі ціни або скасовувати знижки.",
-    "privacy-matters-overlay-card-1-p-3": "Деякі фінансові та страхові компанії використовують соціальні графи для визначення ставок та страхових премій. Це часто змушує людей з низькими доходами платити більше &mdash; це відомо як <a href='https://fairbydesign.com/povertypremium/' target='_blank'>'поширений преміум'</a>.",
+    "privacy-matters-overlay-card-1-p-3": "Деякі фінансові та страхові компанії використовують соціальні графи для визначення ставок та страхових премій. Це часто змушує людей з низькими доходами платити більше &mdash; це відомо як <a href='https://fairbydesign.com/povertypremium/' target='_blank' rel='noopener'>'поширений преміум'</a>.",
     "privacy-matters-overlay-card-1-p-4": "Мережа SimpleX краще захищає конфіденційність ваших з'єднань, ніж будь-яка інша альтернатива, повністю запобігаючи тому, щоб ваш соціальний граф став доступним для будь-яких компаній чи організацій. Навіть коли люди використовують сервери, попередньо налаштовані в додатках SimpleX Chat, оператори серверів не знають кількості користувачів або їхніх з'єднань.",
-    "privacy-matters-overlay-card-2-p-1": "Не так давно ми спостерігали, як великі вибори маніпулювалися <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank'>поважною консалтинговою компанією</a>, яка використовувала наші соціальні графи для спотворення нашого уявлення про реальний світ та маніпулювання нашими голосами.",
+    "privacy-matters-overlay-card-2-p-1": "Не так давно ми спостерігали, як великі вибори маніпулювалися <a href='https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>поважною консалтинговою компанією</a>, яка використовувала наші соціальні графи для спотворення нашого уявлення про реальний світ та маніпулювання нашими голосами.",
     "privacy-matters-overlay-card-2-p-2": "Щоб бути об'єктивним та приймати незалежні рішення, вам потрібно контролювати ваш інформаційний простір. Це можливо лише за умови використання приватної мережі для спілкування, яка не має доступу до вашого соціального графа.",
     "privacy-matters-overlay-card-2-p-3": "SimpleX - це перша мережа, яка не має жодних ідентифікаторів користувачів за своїм дизайном, таким чином, захищаючи ваш графік з'єднань краще, ніж будь-яка відома альтернатива.",
     "privacy-matters-overlay-card-3-p-1": "Кожен повинен турбуватися про конфіденційність та безпеку свого спілкування &mdash; безпечні розмови можуть поставити вас під загрозу, навіть якщо у вас немає чого приховувати.",
-    "privacy-matters-overlay-card-3-p-2": "Однією з найшокуючих історій є досвід <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>Мохамеду Ульд Слахі</a>, описаний в його мемуарах і показаний у фільмі \"Мавританець\". Його посадили в табір Гуантанамо без суду і мукили там 15 років після телефонного дзвінка йому родичеві в Афганістані, під підозрою в причетності до атак 11 вересня, навіть не дивлячись на те, що він проживав у Німеччині протягом попередніх 10 років.",
+    "privacy-matters-overlay-card-3-p-2": "Однією з найшокуючих історій є досвід <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>Мохамеду Ульд Слахі</a>, описаний в його мемуарах і показаний у фільмі \"Мавританець\". Його посадили в табір Гуантанамо без суду і мукили там 15 років після телефонного дзвінка йому родичеві в Афганістані, під підозрою в причетності до атак 11 вересня, навіть не дивлячись на те, що він проживав у Німеччині протягом попередніх 10 років.",
     "privacy-matters-overlay-card-3-p-4": "Недостатньо використовувати зашифрований від кінця до кінця месенджер; ми всі повинні використовувати месенджери, які захищають конфіденційність наших особистих мереж &mdash; з ким ми з'єднані.",
     "simplex-unique-overlay-card-1-p-1": "На відміну від інших мереж для обміну повідомленнями, у SimpleX <strong>немає ідентифікаторів, призначених користувачам</strong>. Він не покладається на номери телефонів, адреси на основі доменів (як електронна пошта або XMPP), імена користувачів, публічні ключі або навіть випадкові числа для ідентифікації своїх користувачів — оператори серверів SimpleX не знають, скільки людей використовують їхні сервери.",
     "simplex-unique-overlay-card-3-p-3": "На відміну від федеративних мереж серверів (електронна пошта, XMPP або Matrix), сервери SimpleX не зберігають облікові записи користувачів, вони лише ретранслюють повідомлення, захищаючи приватність обох сторін.",
@@ -118,7 +118,7 @@
     "simplex-private-card-3-point-1": "Використовується лише TLS 1.2/1.3 із сильними алгоритмами для з'єднань клієнт-сервер.",
     "simplex-private-card-3-point-2": "Відбиток сервера та зв'язування каналу запобігають MITM та атакам повтору.",
     "simplex-private-card-4-point-1": "Для захисту вашої IP-адреси ви можете отримати доступ до серверів через Tor чи іншу транспортну оверлейну мережу.",
-    "simplex-private-card-4-point-2": "Для використання SimpleX через Tor, будь ласка, встановіть <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">додаток Orbot</a> та активуйте SOCKS5-проксі (або VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">на iOS</a>).",
+    "simplex-private-card-4-point-2": "Для використання SimpleX через Tor, будь ласка, встановіть <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">додаток Orbot</a> та активуйте SOCKS5-проксі (або VPN <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">на iOS</a>).",
     "simplex-private-card-5-point-1": "SimpleX використовує наповнення вмісту для кожного шару шифрування для ускладнення атак за розміром повідомлень.",
     "simplex-private-card-5-point-2": "Це забезпечує, що повідомлення різних розмірів виглядають однаково для серверів та спостерігачів мережі.",
     "simplex-private-card-6-point-1": "Багато комунікаційних мереж вразливі до MITM-атак серверів чи постачальників мережі.",
@@ -148,7 +148,7 @@
     "hero-overlay-card-1-p-2": "Для доставки повідомлень, замість ідентифікаторів користувачів, які використовують усі інші мережі, SimpleX використовує тимчасові анонімні парні ідентифікатори черг повідомлень, окремі для кожного вашого підключення &mdash; тут немає довгострокових ідентифікаторів.",
     "hero-overlay-card-1-p-3": "Ви визначаєте, який(кі) сервер(и) використовувати для отримання повідомлень, ваші контакти &mdash; сервери, які ви використовуєте для відправки повідомлень їм. Кожна розмова, ймовірно, використовує два різних сервери.",
     "hero-overlay-card-1-p-4": "Цей дизайн запобігає витоку метаданих будь-яких користувачів на рівні додатка. Для подальшого покращення конфіденційності та захисту вашої IP-адреси ви можете підключитися до серверів обміну повідомленнями через Tor.",
-    "hero-overlay-card-1-p-6": "Докладніше читайте у <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>білетному запису SimpleX</a>.",
+    "hero-overlay-card-1-p-6": "Докладніше читайте у <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>білетному запису SimpleX</a>.",
     "hero-overlay-card-2-p-2": "Вони можуть потім корелювати цю інформацію з існуючими громадськими соціальними мережами та визначати деякі реальні ідентифікатори.",
     "hero-overlay-card-2-p-3": "Навіть з найбільш приватними додатками, які використовують служби Tor v3, якщо ви розмовляєте з двома різними контактами через той самий профіль, вони можуть довести, що вони підключені до однієї й тієї ж особи.",
     "hero-overlay-card-2-p-4": "SimpleX захищає від цих атак, не маючи жодних ідентифікаторів користувачів в своєму дизайні. І, якщо ви використовуєте режим інкогніто, у вас буде різне відображення для кожного контакту, уникнення будь-яких спільних даних між ними.",
@@ -156,7 +156,7 @@
     "simplex-network-overlay-card-1-li-1": "P2P-мережі покладаються на якусь варіацію <a href='https://en.wikipedia.org/wiki/Distributed_hash_table'>розподіленої хеш-таблиці (DHT)</a> для маршрутизації повідомлень. Дизайни DHT повинні балансувати гарантію доставки та затримку. У SimpleX є як краща гарантія доставки, так і менша затримка порівняно із P2P, оскільки повідомлення може передаватися паралельно кількома серверами, використовуючи сервери, обрані отримувачем. У P2P-мережах повідомлення проходить через вузли <em>O(log N)</em> послідовно, використовуючи вузли, обрані алгоритмом.",
     "simplex-network-overlay-card-1-li-2": "У дизайні SimpleX, на відміну від більшості P2P-мереж, немає жодних глобальних ідентифікаторів користувачів будь-якого виду, навіть тимчасових, та використовуються лише тимчасові парні ідентифікатори, що забезпечує кращу анонімність та захист метаданих.",
     "privacy-matters-overlay-card-1-p-1": "Багато великих компаній використовують інформацію про те, з ким ви з'єднані, щоб оцінити ваш дохід, продавати вам продукти, які вам дійсно не потрібні, і визначати ціни.",
-    "privacy-matters-overlay-card-3-p-3": "Звичайних людей арештовують за те, що вони публікують онлайн, навіть через свої 'анонімні' облікові записи, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>навіть у демократичних країнах</a>.",
+    "privacy-matters-overlay-card-3-p-3": "Звичайних людей арештовують за те, що вони публікують онлайн, навіть через свої 'анонімні' облікові записи, <a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>навіть у демократичних країнах</a>.",
     "simplex-unique-overlay-card-1-p-2": "Для доставки повідомлень SimpleX використовує <a href='https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier'>парні анонімні адреси</a> однобічних черг повідомлень, окремо для отриманих та відправлених повідомлень, зазвичай через різні сервери.",
     "simplex-unique-overlay-card-1-p-3": "Цей дизайн захищає конфіденційність того, з ким ви спілкуєтесь, приховуючи це від серверів мережі SimpleX та від будь-яких спостерігачів. Щоб приховати вашу IP-адресу від серверів, ви можете <strong>підключатися до серверів SimpleX через Tor</strong>.",
     "simplex-unique-overlay-card-2-p-1": "Оскільки у вас немає ідентифікатора в мережі SimpleX, ніхто не може зв'язатися з вами, якщо ви не поділитеся одноразовою або тимчасовою адресою користувача, як QR-кодом або посиланням.",
@@ -165,8 +165,8 @@
     "simplex-unique-overlay-card-3-p-2": "Зашифровані повідомлення від кінця до кінця тимчасово зберігаються на ретрансляційних серверах SimpleX до їх отримання, після чого вони назавжди видаляються.",
     "simplex-unique-overlay-card-3-p-4": "Між надісланим і отриманим серверним трафіком немає спільних ідентифікаторів чи шифрованого тексту &mdash; якщо хтось його спостерігає, він не може легко визначити, хто спілкується з ким, навіть якщо TLS скомпрометовано.",
     "simplex-unique-overlay-card-4-p-1": "Ви можете <strong>використовувати SimpleX зі своїми власними серверами</strong> і при цьому спілкуватися з людьми, які використовують сервери, попередньо налаштовані в додатках.",
-    "simplex-unique-overlay-card-4-p-2": "Мережа SimpleX використовує <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>відкритий протокол</a> і надає <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>SDK для створення чат-ботів</a>, що дозволяє реалізувати сервіси, з якими користувачі можуть взаємодіяти через додатки SimpleX Chat — ми справді чекаємо, щоб побачити, які сервіси SimpleX ви створите.",
-    "simplex-unique-overlay-card-4-p-3": "Якщо ви плануєте розробляти для мережі SimpleX, наприклад, чат-бота для користувачів додатка SimpleX або інтеграцію бібліотеки SimpleX Chat у ваші мобільні додатки, будь ласка, <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>зв'яжіться з нами</a> для отримання порад та підтримки.",
+    "simplex-unique-overlay-card-4-p-2": "Мережа SimpleX використовує <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>відкритий протокол</a> і надає <a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>SDK для створення чат-ботів</a>, що дозволяє реалізувати сервіси, з якими користувачі можуть взаємодіяти через додатки SimpleX Chat — ми справді чекаємо, щоб побачити, які сервіси SimpleX ви створите.",
+    "simplex-unique-overlay-card-4-p-3": "Якщо ви плануєте розробляти для мережі SimpleX, наприклад, чат-бота для користувачів додатка SimpleX або інтеграцію бібліотеки SimpleX Chat у ваші мобільні додатки, будь ласка, <a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>зв'яжіться з нами</a> для отримання порад та підтримки.",
     "simplex-unique-card-1-p-1": "SimpleX захищає конфіденційність вашого профілю, контактів та метаданих, приховуючи їх від серверів мережі SimpleX та будь-яких спостерігачів.",
     "simplex-unique-card-1-p-2": "На відміну від будь-якої іншої існуючої мережі для обміну повідомленнями, у SimpleX немає ідентифікаторів, призначених користувачам — <strong>не навіть випадкових чисел</strong>.",
     "simplex-unique-card-2-p-1": "Оскільки у вас немає ідентифікатора або фіксованої адреси в мережі SimpleX, ніхто не може зв'язатися з вами, якщо ви не поділитеся одноразовою або тимчасовою адресою користувача, як QR-кодом або посиланням.",
diff --git a/website/langs/zh_Hans.json b/website/langs/zh_Hans.json
index 2ead3da487..392262680c 100644
--- a/website/langs/zh_Hans.json
+++ b/website/langs/zh_Hans.json
@@ -86,7 +86,7 @@
     "simplex-private-card-3-point-1": "客户端与服务器之间的连接只使用强加密的 TLS 1.2/1.3。",
     "privacy-matters-3-overlay-1-title": "隐私保您自由",
     "privacy-matters-3-overlay-1-linkText": "隐私保您自由",
-    "simplex-private-card-4-point-2": "要通过 Tor 使用 SimpleX，请安装 <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\">Orbot</a> 应用并启用 SOCKS5 代理（在 <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\">iOS</a>上需要使用 VPN 模式）。",
+    "simplex-private-card-4-point-2": "要通过 Tor 使用 SimpleX，请安装 <a href=\"https://guardianproject.info/apps/org.torproject.android/\" target=\"_blank\" rel=\"noopener\">Orbot</a> 应用并启用 SOCKS5 代理（在 <a href=\"https://apps.apple.com/us/app/orbot/id1609461599?platform=iphone\" target=\"_blank\" rel=\"noopener\">iOS</a>上需要使用 VPN 模式）。",
     "simplex-unique-1-overlay-1-title": "您的身份、个人资料、联系人和元数据的完整隐私",
     "simplex-unique-2-title": "您可以免受垃圾消息和平台滥用的侵害",
     "simplex-unique-1-title": "您有完整的隐私",
@@ -110,7 +110,7 @@
     "hero-overlay-card-1-p-4": "此设计可防止在应用程序级别泄漏任何用户元数据。 为了进一步改善隐私并保护您的 IP 地址，您可以通过 Tor 连接到消息服务器。",
     "hero-overlay-card-1-p-5": "只有客户端设备存储用户配置文件、联系人和群组； 消息均使用两层端到端加密发送。",
     "simplex-network-overlay-card-1-p-1": "<a href=\"https://en.wikipedia.org/wiki/Peer-to-peer\">P2P</a> 消息传递协议和应用程序存在各种问题，使得它们不如 SimpleX 可靠，分析起来更复杂，并且 容易受到多种类型的攻击。",
-    "hero-overlay-card-1-p-6": "阅读 <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">SimpleX 白皮书</a>了解更多信息。",
+    "hero-overlay-card-1-p-6": "阅读 <a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">SimpleX 白皮书</a>了解更多信息。",
     "hero-overlay-card-2-p-2": "然后他们可以将这些信息与现有的公共社交网络相关联，并确定一些真实身份。",
     "hero-overlay-card-2-p-1": "当用户具有持久身份时，即使这只是一个随机数（如会话 ID），提供商或攻击者也有可能观察到用户如何连接以及他们发送了多少消息。",
     "hero-overlay-card-2-p-3": "即使是使用 Tor v3 服务的最私密的应用程序，如果您通过同一个人资料与两个不同的联系人交谈，他们也可以证明他们与同一个人有联系。",
@@ -121,14 +121,14 @@
     "simplex-network-overlay-card-1-li-5": "所有已知的 P2P 网络都可能受到<a href=\"https://en.wikipedia.org/wiki/Sybil_attack\">Sybil 攻击</a>，因为每个节点都是可发现的，并且网络作为一个整体运行。 已知的缓解措施不是需要一个中心化的组件就是需要昂贵的<a href=\"https://en.wikipedia.org/wiki/Proof_of_work\">工作量证明</a>。而 SimpleX 网络没有服务器可发现性，它是碎片化的并且作为多个隔离的子网运行，这样全网络范围的攻击便无从实现。",
     "simplex-network-overlay-card-1-li-6": "P2P 网络可能受到 <a href=\"https://www.usenix.org/conference/woot15/workshop-program/presentation/p2p-file-sharing-hell-exploiting-bittorrent\">分布式反射拒绝服务攻击</a> 。客户端有能力重新广播和放大流量，从而导致整个网络范围内的服务中断。 SimpleX 客户端仅中继来自已知连接的流量，因此不能被攻击者用来放大整个网络的流量。",
     "privacy-matters-overlay-card-1-p-2": "在线零售商知道收入较低的人更有可能在紧急情况下购买商品，因此他们可能会收取更高的价格或取消折扣。",
-    "privacy-matters-overlay-card-1-p-3": "一些金融和保险公司使用社交图谱来确定利率和保费。 它通常会让收入较低的人支付更多&mdash;它被称为<a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\">“贫困溢价”</a>。",
+    "privacy-matters-overlay-card-1-p-3": "一些金融和保险公司使用社交图谱来确定利率和保费。 它通常会让收入较低的人支付更多&mdash;它被称为<a href=\"https://fairbydesign.com/povertypremium/\" target=\"_blank\" rel=\"noopener\">“贫困溢价”</a>。",
     "privacy-matters-overlay-card-1-p-4": "SimpleX 网络比任何替代方案都能更好地保护您人际关系层面的隐私，彻底防止您的社交图谱被任何公司或组织使用。 即使人们使用 SimpleX Chat 应用预配置的服务器，服务器运营方也不知道用户数量或他们的连接数。",
-    "privacy-matters-overlay-card-2-p-1": "不久前，我们观察到几次大选被<a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\">一家知名咨询公司</a>操纵，该公司使用我们的社交图谱扭曲我们对现实世界的看法并操纵我们的选票。",
+    "privacy-matters-overlay-card-2-p-1": "不久前，我们观察到几次大选被<a href=\"https://en.wikipedia.org/wiki/Facebook–Cambridge_Analytica_data_scandal\" target=\"_blank\" rel=\"noopener\">一家知名咨询公司</a>操纵，该公司使用我们的社交图谱扭曲我们对现实世界的看法并操纵我们的选票。",
     "privacy-matters-overlay-card-2-p-2": "为了客观并做出独立的决定，您需要控制您的信息空间。 而这只有当您使用没有能力访问您的社交图谱的，注重隐私的通信网络时，这才有可能。",
     "privacy-matters-overlay-card-2-p-3": "SimpleX 是第一个没有设计任何用户标识符的网络，这样能比任何已知的替代方案都更好地保护您的连接图谱。",
-    "privacy-matters-overlay-card-3-p-2": "最令人震惊的故事之一是 <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\">Mohamedou Ould Salahi</a> 在他的回忆录中描述并在毛里塔尼亚电影中展示的经历。 他在未经审判的情况下被关进关塔那摩集中营，并在打电话给他在阿富汗的亲戚后在那里遭受了 15 年的折磨，他被怀疑参与了 9/11 袭击，尽管他在过去 10 年住在德国。",
+    "privacy-matters-overlay-card-3-p-2": "最令人震惊的故事之一是 <a href=\"https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi\" target=\"_blank\" rel=\"noopener\">Mohamedou Ould Salahi</a> 在他的回忆录中描述并在毛里塔尼亚电影中展示的经历。 他在未经审判的情况下被关进关塔那摩集中营，并在打电话给他在阿富汗的亲戚后在那里遭受了 15 年的折磨，他被怀疑参与了 9/11 袭击，尽管他在过去 10 年住在德国。",
     "privacy-matters-overlay-card-3-p-1": "每个人都应该关心他们通信的隐私和安全——无害的谈话会让您处于危险之中，即使您没有什么可隐瞒的。",
-    "privacy-matters-overlay-card-3-p-3": "普通人会因为他们在网上分享的内容而被捕，即使是通过他们的“匿名”账户，<a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\">即使是在民主国家</a>。",
+    "privacy-matters-overlay-card-3-p-3": "普通人会因为他们在网上分享的内容而被捕，即使是通过他们的“匿名”账户，<a href=\"https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html\" target=\"_blank\" rel=\"noopener\">即使是在民主国家</a>。",
     "privacy-matters-overlay-card-3-p-4": "使用端到端加密的即时通讯软件还不够，我们都应该使用保护我们个人网络隐私——即我们与谁有联系的即时通讯软件。",
     "simplex-unique-overlay-card-1-p-1": "与其他消息网络不同，SimpleX <strong>没有分配给用户的标识符</strong>。 它不依赖电话号码、基于域的地址（如电子邮件或 XMPP）、用户名、公钥甚至随机数来识别其用户—— SimpleX 服务器运营方不知道有多少人使用其服务器。",
     "simplex-unique-overlay-card-1-p-2": "为了传递消息，SimpleX 使用单向消息队列的<a href=\"https://csrc.nist.gov/glossary/term/Pairwise_Pseudonymous_Identifier\">成对匿名地址</a>，通常通过不同的服务器将接收和发送的消息分开。",
@@ -136,7 +136,7 @@
     "simplex-unique-overlay-card-4-p-1": "您可以<strong>将 SimpleX 与您自己的服务器一起使用</strong>，并且仍然可以与使用应用中预配置服务器的人们进行通信。",
     "simplex-unique-card-3-p-2": "端到端加密的消息在被收到前会暂时保存在 SimpleX 中继服务器上，传送完成后它们会被永久删除。",
     "simplex-unique-card-1-p-1": "SimpleX 保护您的个人资料、联系人和元数据的隐私，不让 SimpleX 网络服务器和任何观察者看到它们。",
-    "simplex-unique-overlay-card-4-p-3": "如果您正在考虑为在SimpleX 网络上开发，例如，为 SimpleX 应用程序用户开发聊天机器人，或将 SimpleX 聊天库集成到您的移动应用，请 <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\">联系我们</a>获取建议和支持。",
+    "simplex-unique-overlay-card-4-p-3": "如果您正在考虑为在SimpleX 网络上开发，例如，为 SimpleX 应用程序用户开发聊天机器人，或将 SimpleX 聊天库集成到您的移动应用，请 <a href=\"https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D\" target=\"_blank\" rel=\"noopener\">联系我们</a>获取建议和支持。",
     "simplex-unique-card-4-p-2": "您可以<strong>搭配自己的服务器来使用 SimpleX </strong> 或使用我们提供的服务器 &mdash; 并仍然连接到任何用户。",
     "simplex-unique-card-2-p-1": "因为您在 SimpleX 网络上没有标识符或固定地址，所以除非您以二维码或链接的形式分享一次性或临时用户地址，没有人可以联系您。",
     "simplex-unique-card-3-p-1": "SimpleX 以<strong>便携式加密数据库格式</strong>将所有用户数据存储在客户端设备上—— 它可以转移到另一个设备。",
@@ -202,7 +202,7 @@
     "see-here": "参见此处",
     "comparison-section-list-point-7": "P2P 网络要么拥有中央权威，要么整个网络可能被攻陷",
     "simplex-private-card-5-point-1": "SimpleX 为每个加密层进行内容填充来对抗长度扩展攻击。",
-    "simplex-unique-overlay-card-4-p-2": "SimpleX 网络使用<a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\">开放协议</a>并提供<a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\">用于创建聊天机器人的 SDK</a>， 允许用户实现通过 SimpleX Chat 应用程序与之交互的服务&mdash;我们真的很期待看到您会依托SimpleX构建哪些服务。",
+    "simplex-unique-overlay-card-4-p-2": "SimpleX 网络使用<a href=\"https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md\" target=\"_blank\" rel=\"noopener\">开放协议</a>并提供<a href=\"https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript\" target=\"_blank\" rel=\"noopener\">用于创建聊天机器人的 SDK</a>， 允许用户实现通过 SimpleX Chat 应用程序与之交互的服务&mdash;我们真的很期待看到您会依托SimpleX构建哪些服务。",
     "simplex-unique-overlay-card-2-p-2": "即使使用可选的用户地址，当它被用于发送垃圾邮件联系请求，您可以更改或完全删除它而不会丢失任何连接。",
     "simplex-unique-overlay-card-3-p-1": "SimpleX Chat 使用<strong>便携式加密数据库格式</strong>仅将所有用户数据存储在客户端设备上，该格式可以导出并传输到任何支持的设备。",
     "donate-here-to-help-us": "在这里捐款来帮助我们",
@@ -296,7 +296,7 @@
     "index-roadmap-3-title": "促进社区发展",
     "index-roadmap-3-desc": "用于推广社区的工具",
     "index-directory-h2": "加入 SimpleX 社区",
-    "index-directory-p1": "超过 200 万人下载了 SimpleX 应用。",
+    "index-directory-p1": "超过 300 万人下载了 SimpleX 应用。",
     "index-directory-p2": "在目录中找到您的频道和社区，并创建您自己的！",
     "index-directory-cta": "查看 SimpleX 目录",
     "index-directory-users-group-title": "SimpleX 用户群组",
@@ -372,5 +372,12 @@
     "index-roadmap-1": "2026",
     "index-roadmap-2": "2027年6月",
     "index-roadmap-3": "2027年12月",
-    "send-file": "发送文件"
+    "send-file": "发送文件",
+    "why-film": "在 YouTube 上观看 2 分钟短片",
+    "index-hero-countdown-lead": "SimpleX 域名上线",
+    "index-hero-countdown-done": "获取 SimpleX 域名",
+    "index-hero-own-part": "拥有它的一部分。",
+    "index-hero-invest": "投资 SimpleX Chat。",
+    "index-hero-downloads": "下载量",
+    "index-hero-monthly-users": "月活跃用户"
 }
diff --git a/website/langs/zh_Hant.json b/website/langs/zh_Hant.json
index ced46c6b69..bf7403e053 100644
--- a/website/langs/zh_Hant.json
+++ b/website/langs/zh_Hant.json
@@ -69,12 +69,12 @@
     "see-here": "見此",
     "privacy-matters-overlay-card-3-p-4": "僅使用端對端加密的通訊工具是不夠的，我們都應使用能保護個人網路隱私的通訊工具。",
     "hero-overlay-card-1-p-1": "很多用戶問： <em>如果 SimpleX 沒有用戶標識符，它何以知道向何處傳送訊息？</em>",
-    "simplex-unique-overlay-card-4-p-2": "SimpleX網路使用<a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>開源協議</a>並提供<a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank'>開發包以編寫聊天機器人</a>，允許使用者透過SimpleX Chat應用程式與服務互動&mdash;我們非常期待看到您的SimpleX服務之作！",
+    "simplex-unique-overlay-card-4-p-2": "SimpleX網路使用<a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>開源協議</a>並提供<a href='https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript' target='_blank' rel='noopener'>開發包以編寫聊天機器人</a>，允許使用者透過SimpleX Chat應用程式與服務互動&mdash;我們非常期待看到您的SimpleX服務之作！",
     "hero-overlay-card-1-p-2": "為傳送訊息，SimpleX 使用消息佇列中的臨時匿名標識符對，每連線各異，而不像其他網路一樣使用用戶ID&mdash; SimpleX 沒有長期標識符。",
-    "privacy-matters-overlay-card-3-p-2": "最令人震驚的故事之一是 <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank'>Mohamedou Ould Salahi</a> 的經歷，描述於他的回憶錄中，並在《The Mauritanian movie》中呈現。他在未經審訊的情況下被送進關塔納摩集中營，並在那裏遭受了長達 15 年的酷刑，原因是他被懷疑參與了 9/11 襲擊事件，而此前 10 年他一直住在德國。",
+    "privacy-matters-overlay-card-3-p-2": "最令人震驚的故事之一是 <a href='https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi' target='_blank' rel='noopener'>Mohamedou Ould Salahi</a> 的經歷，描述於他的回憶錄中，並在《The Mauritanian movie》中呈現。他在未經審訊的情況下被送進關塔納摩集中營，並在那裏遭受了長達 15 年的酷刑，原因是他被懷疑參與了 9/11 襲擊事件，而此前 10 年他一直住在德國。",
     "simplex-private-2-title": "伺服器附加加密層",
     "hero-overlay-card-2-p-1": "如使用者擁有持久性身份，即使只是一個隨機數，例如 Session ID，也會有服務提供者或攻擊者可以觀察使用者如何連線以及傳送了多少條訊息的風險。",
-    "simplex-unique-overlay-card-4-p-3": "如您正考慮針對 SimpleX 網路進行開發，例如針對 SimpleX 使用者的聊天機器人，或將 SimpleX 聊天函式庫整合至您的手機應用程式，請<a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank'>與我們聯絡</a>以獲取支持與建議。",
+    "simplex-unique-overlay-card-4-p-3": "如您正考慮針對 SimpleX 網路進行開發，例如針對 SimpleX 使用者的聊天機器人，或將 SimpleX 聊天函式庫整合至您的手機應用程式，請<a href='https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23MCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%3D' target='_blank' rel='noopener'>與我們聯絡</a>以獲取支持與建議。",
     "simplex-network-overlay-card-1-li-1": "點對點網路依賴 <a href='https://en.wikipedia.org/wiki/Distributed_hash_table'>DHT</a> 的某些變體來路由訊息。DHT 設計必須平衡傳送保證和延遲。與點對點相比，SimpleX 具有更好的傳送保證和更低的延遲，因為訊息可以使用收件者選擇的伺服器，經由多個伺服器並行冗餘地傳送。在點對點網路中，訊息依次經由<em>O(log N)</em>個由演算法選擇的節點。",
     "simplex-private-card-3-point-3": "連線恢復被停用，以防止會話攻擊。",
     "simplex-private-card-2-point-1": "傳送至收件者的伺服器加密附加層，以防止 TLS 遭到攻擊時，接收和傳送的伺服器流量之間的關聯。",
@@ -127,7 +127,7 @@
     "simplex-unique-3-overlay-1-title": "您的數據的擁有權、控制與安全",
     "hero-overlay-card-2-p-4": "SimpleX 通過在設計中不使用任何使用者 ID以防止這些攻擊。而且，如果您使用匿名聊天模式，每個聯絡人都會有不同的顯示名稱，避免他們之間有任何共用資料。",
     "hero-overlay-card-2-p-3": "即使是使用 Tor v3 服務的最隱私的應用程式，如果您透過相同的設定檔與兩個不同的人交談，他們也可以證明他們連線的是同一個人。",
-    "hero-overlay-card-1-p-6": "請參閱 <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank'>SimpleX 白皮書</a>以閱讀更多資訊。",
+    "hero-overlay-card-1-p-6": "請參閱 <a href='https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md' target='_blank' rel='noopener'>SimpleX 白皮書</a>以閱讀更多資訊。",
     "hero-overlay-card-3-p-1": "<a href=\"https://www.trailofbits.com/about/\">Trail of Bits</a> 是一家領先的安全和技術顧問公司，客戶包括大型科技公司、政府機構和主要的區塊鏈專案。",
     "simplex-network-overlay-card-1-p-1": "<a href='https://en.wikipedia.org/wiki/Peer-to-peer'>點對點</a>通訊協定和應用程式有多種問題，使得它們不如 SimpleX 可靠、分析起來更複雜，而且易受幾種類型的攻擊。",
     "simplex-network-overlay-card-1-li-2": "SimpleX 的設計與大多數點對點網路不同，沒有任何類型的全局使用者標識符，即使是臨時標識符。SimpleX 只使用臨時的標識符對，提供更好的匿名性和元資料保護。",
@@ -145,8 +145,8 @@
     "simplex-unique-overlay-card-3-p-4": "傳送與接收的伺服器流量之間沒有共同的標識符或密文&mdash;如果有人觀察，即使 TLS 遭到破壞，也無法輕易確定誰與誰通訊。",
     "join-the-REDDIT-community": "加入Reddit社群",
     "privacy-matters-overlay-card-3-p-1": "人人都應關心自己通訊的隱私和安全；無害的對話可能會讓您陷入危險，即使您沒有什麼要隱瞞的。",
-    "privacy-matters-overlay-card-3-p-3": "普通人會因為他們在網路上分享的內容而被捕，即使是透過他們的「匿名」帳號，<a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank'>即使是在民主國家</a>。",
-    "privacy-matters-overlay-card-2-p-1": "不久前我們觀察到大選被<a href='https://en.wikipedia.org/wiki/Facebook-Cambridge_Analytica_data_scandal' target='_blank'>一家聲譽良好的顧問公司</a>操縱，該公司利用我們的社交圖來扭曲我們對真實世界的看法，並操縱我們的選票。",
+    "privacy-matters-overlay-card-3-p-3": "普通人會因為他們在網路上分享的內容而被捕，即使是透過他們的「匿名」帳號，<a href='https://www.dailymail.co.uk/news/article-11282263/Moment-police-swoop-house-devout-catholic-mother-malicious-online-posts.html' target='_blank' rel='noopener'>即使是在民主國家</a>。",
+    "privacy-matters-overlay-card-2-p-1": "不久前我們觀察到大選被<a href='https://en.wikipedia.org/wiki/Facebook-Cambridge_Analytica_data_scandal' target='_blank' rel='noopener'>一家聲譽良好的顧問公司</a>操縱，該公司利用我們的社交圖來扭曲我們對真實世界的看法，並操縱我們的選票。",
     "comparison-section-list-point-2": "基於DNS的位址",
     "comparison-section-list-point-1": "通常基於電話號碼，有時用戶名",
     "simplex-private-card-6-point-1": "許多通訊網路容易受到伺服器或網路供應商的中間人攻擊。",
diff --git a/website/markdown_pages.js b/website/markdown_pages.js
index 2671de3690..d94ad0ea93 100644
--- a/website/markdown_pages.js
+++ b/website/markdown_pages.js
@@ -20,6 +20,7 @@ const htmlPages = new Set([
   "blog",
   "links",
   "directory",
+  "downloads",
 ])
 
 const removedTags = new Set([
diff --git a/website/src/_data/docs_sidebar.json b/website/src/_data/docs_sidebar.json
index aab46dfa28..920efab26e 100644
--- a/website/src/_data/docs_sidebar.json
+++ b/website/src/_data/docs_sidebar.json
@@ -29,7 +29,6 @@
                 "WEBRTC.md",
                 "XFTP-SERVER.md",
                 "CHAT-RELAY.md",
-                "DOWNLOADS.md",
                 "REPRODUCE.md",
                 "TRANSPARENCY.md",
                 "SECURITY.md",
diff --git a/website/src/_data/languages.json b/website/src/_data/languages.json
index 65ffa53fd5..d8a26c6f51 100644
--- a/website/src/_data/languages.json
+++ b/website/src/_data/languages.json
@@ -4,9 +4,7 @@
             "label": "en",
             "name": "English",
             "flag": "/img/flags/en.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "ar",
@@ -15,32 +13,25 @@
             "textColor": "white",
             "iconBg": "green",
             "enabled": true,
-            "home": true,
             "rtl": true
         },
         {
             "label": "cs",
             "name": "Čeština",
             "flag": "/img/flags/cs.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "de",
             "name": "Deutsch",
             "flag": "/img/flags/de.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "es",
             "name": "Español",
             "flag": "/img/flags/es.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "fi",
@@ -52,9 +43,7 @@
             "label": "fr",
             "name": "Français",
             "flag": "/img/flags/fr.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "he",
@@ -67,32 +56,25 @@
             "label": "hu",
             "name": "Magyar",
             "flag": "/img/flags/hu.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "id",
             "name": "Indonesia",
             "flag": "/img/flags/id.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "it",
             "name": "Italiano",
             "flag": "/img/flags/it.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "ja",
             "name": "日本語",
             "flag": "/img/flags/jp.svg",
-            "enabled": true,
-            "home": true
+            "enabled": true
         },
         {
             "label": "nl",
@@ -104,16 +86,13 @@
             "label": "pl",
             "name": "Polski",
             "flag": "/img/flags/pl.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "pt_BR",
             "name": "Português",
             "flag": "/img/flags/br.svg",
-            "enabled": true,
-            "home": true
+            "enabled": true
         },
         {
             "label": "uk",
@@ -125,8 +104,7 @@
             "label": "zh_Hans",
             "name": "简体中文",
             "flag": "/img/flags/cn.svg",
-            "enabled": true,
-            "why": true
+            "enabled": true
         },
         {
             "label": "nb_NO",
@@ -138,9 +116,7 @@
             "label": "ru",
             "name": "Русский",
             "flag": "/img/flags/ru.svg",
-            "enabled": true,
-            "home": true,
-            "why": true
+            "enabled": true
         }
    ]
-}
\ No newline at end of file
+}
diff --git a/website/src/_includes/blog_previews/20221108.html b/website/src/_includes/blog_previews/20221108.html
index f07180a17b..64174a0bcb 100644
--- a/website/src/_includes/blog_previews/20221108.html
+++ b/website/src/_includes/blog_previews/20221108.html
@@ -2,7 +2,7 @@
 
 <p class="mb-[12px]">
     SimpleX Chat security has been assessed by
-    <a href="https://www.trailofbits.com/about" target="_blank">Trail of Bits</a>,
+    <a href="https://www.trailofbits.com/about" target="_blank" rel="noopener">Trail of Bits</a>,
     4 issues were identified, and 3 of them are fixed in v4.2.
 </p>
 
diff --git a/website/src/_includes/blog_previews/20221206.html b/website/src/_includes/blog_previews/20221206.html
index 55530cd301..df7e113250 100644
--- a/website/src/_includes/blog_previews/20221206.html
+++ b/website/src/_includes/blog_previews/20221206.html
@@ -1,9 +1,9 @@
 <p>SimpleX Chat November reviews:</p>
 
-<p><a href="https://www.privacyguides.org/real-time-communication/#simplex-chat" target="_blank">Privacy Guides</a> recommendations.</p>
-<p><a href="https://www.kuketz-blog.de/simplex-eindruecke-vom-messenger-ohne-identifier/" target="_blank">Review by Mike Kuketz</a>.</p>
-<p><a href="https://www.messenger-matrix.de" target="_blank">The messenger matrix</a>.</p>
-<p class="mb-[12px]"><a href="https://supernovas.space/detailed_reviews.html#simplex" target="_blank">Supernova review</a> and <a href="https://supernovas.space/messengers.html" target="_blank">messenger ratings</a>.</p>
+<p><a href="https://www.privacyguides.org/real-time-communication/#simplex-chat" target="_blank" rel="noopener">Privacy Guides</a> recommendations.</p>
+<p><a href="https://www.kuketz-blog.de/simplex-eindruecke-vom-messenger-ohne-identifier/" target="_blank" rel="noopener">Review by Mike Kuketz</a>.</p>
+<p><a href="https://www.messenger-matrix.de" target="_blank" rel="noopener">The messenger matrix</a>.</p>
+<p class="mb-[12px]"><a href="https://supernovas.space/detailed_reviews.html#simplex" target="_blank" rel="noopener">Supernova review</a> and <a href="https://supernovas.space/messengers.html" target="_blank" rel="noopener">messenger ratings</a>.</p>
 
 <p>v4.3 is released:</p>
 
diff --git a/website/src/_includes/contact_page.html b/website/src/_includes/contact_page.html
index 0616665a70..5fbd13c1f2 100644
--- a/website/src/_includes/contact_page.html
+++ b/website/src/_includes/contact_page.html
@@ -17,11 +17,11 @@
             <p class="text-grey-black dark:text-white text-base mb-[24px]">{{ "contact-hero-p-3" | i18n({}, lang ) | safe }}</p>
 
             <div class="flex items-center justify-center gap-4 flex-wrap">
-                <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" alt="App Store" /></a>
-                <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" title="Google Play"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" alt="Google Play" /></a>
+                <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" alt="App Store" /></a>
+                <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener" title="Google Play"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" alt="Google Play" /></a>
                 <a href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid"  title="SimpleX F-Droid Repository"><img class="h-[40px] w-auto" src="/img/new/f_droid.svg" /></a>
-                <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank"><img class="h-[40px] w-auto" src="/img/new/testflight.png" alt="TestFlight" /></a>
-                <a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apk_icon.png" alt="Android APK" /></a>
+                <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/testflight.png" alt="TestFlight" /></a>
+                <a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apk_icon.png" alt="Android APK" /></a>
             </div>
         </div>
 
@@ -54,8 +54,8 @@
             <div class="flex flex-col justify-center items-center p-4 w-full max-w-[468px] min-h-[131px] rounded-[30px] border-[1px] border-[#A8B0B4] dark:border-white border-opacity-60 mb-6 relative">
                 <p class="text-xl font-medium text-grey-black dark:text-white mb-4">{{ "install-simplex-app" | i18n({}, lang ) | safe }}</p>
                 <div class="flex flex-wrap items-center justify-center gap-2">
-                    <a class="apple-store-btn hidden" href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" alt="App Store" /></a>
-                    <a class="google-play-btn hidden" href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" title="Google Play"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" alt="Google Play" /></a>
+                    <a class="apple-store-btn hidden" href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" alt="App Store" /></a>
+                    <a class="google-play-btn hidden" href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener" title="Google Play"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" alt="Google Play" /></a>
                     <a class="f-droid-btn hidden" href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid"  title="SimpleX F-Droid Repository"><img class="h-[40px] w-auto" src="/img/new/f_droid.svg" /></a>
                 </div>
 
diff --git a/website/src/_includes/downloads_hero.html b/website/src/_includes/downloads_hero.html
new file mode 100644
index 0000000000..b23b10503b
--- /dev/null
+++ b/website/src/_includes/downloads_hero.html
@@ -0,0 +1,53 @@
+<section class="dl-hero">
+    <div class="dl-wrap dl-intro">
+        <h1>{{ "downloads-h1" | i18n({}, lang) }}</h1>
+        <p class="dl-lead"><span class="dl-lead-intro">{{ "downloads-lead-1" | i18n({}, lang) }}<br></span><span class="dl-nowrap">{{ "downloads-lead-2" | i18n({}, lang) }}</span><br class="dl-br-mobile"> <span class="dl-nowrap dl-lead-device">{{ "downloads-lead-device" | i18n({}, lang) }}</span><span class="dl-nowrap dl-lead-phone">{{ "downloads-lead-phone" | i18n({}, lang) }}</span></p>
+    </div>
+
+    <div class="dl-wrap dl-devices">
+        <div class="dl-device" data-device="desktop">
+            <div class="dl-shot dl-shot-desktop">
+                <img class="dark:hidden" src="/img/downloads/desktop-light.webp" alt="SimpleX Chat desktop app" width="1311" height="880">
+                <img class="hidden dark:block" src="/img/downloads/desktop-dark.webp" alt="SimpleX Chat desktop app" width="1311" height="880">
+            </div>
+            <a class="dl-primary dl-os dl-os-mac" href="{{ release }}simplex-desktop-macos-aarch64.dmg">{{ "downloads-for-mac" | i18n({}, lang) }}</a>
+            <a class="dl-primary dl-os dl-os-windows" href="{{ release }}simplex-desktop-windows-x86_64.msi">{{ "downloads-for-windows" | i18n({}, lang) }}</a>
+            <a class="dl-primary dl-os dl-os-linux" href="{{ release }}simplex-desktop-x86_64.AppImage">{{ "downloads-for-linux" | i18n({}, lang) }}</a>
+            <p class="dl-alt dl-os dl-os-mac">Apple Silicon · <a href="{{ release }}simplex-desktop-macos-x86_64.dmg">Intel</a> · <a href="#dl-all">{{ "downloads-more" | i18n({}, lang) }}</a></p>
+            <p class="dl-alt dl-os dl-os-windows">x86_64 · <a href="#dl-all">{{ "downloads-more" | i18n({}, lang) }}</a></p>
+            <p class="dl-alt dl-os dl-os-linux">AppImage x86_64 · <a href="https://flathub.org/apps/chat.simplex.simplex" target="_blank" rel="noopener">Flatpak</a> · <a href="#dl-all">{{ "downloads-more" | i18n({}, lang) }}</a></p>
+        </div>
+
+        <div class="dl-device" data-device="iphone">
+            <div class="dl-shot dl-shot-phone">
+                <img src="/img/crowdfunding/phone.png" alt="SimpleX Chat on iPhone" width="504" height="1020">
+            </div>
+            <a class="dl-badge" href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener"><img src="/img/new/apple_store.svg" alt="Download on the App Store"></a>
+            <p class="dl-alt">{{ "downloads-beta" | i18n({}, lang) }}: <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank" rel="noopener">TestFlight</a></p>
+        </div>
+
+        <div class="dl-device" data-device="android">
+            <div class="dl-shot dl-shot-phone">
+                <img class="dark:hidden" src="/img/downloads/android-light.webp" alt="SimpleX Chat on Android" width="440" height="965">
+                <img class="hidden dark:block" src="/img/downloads/android-dark.webp" alt="SimpleX Chat on Android" width="440" height="965">
+            </div>
+            <a class="dl-badge" href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener"><img src="/img/new/google_play.svg" alt="Get it on Google Play"></a>
+            <p class="dl-alt"><a href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid">F-Droid</a> · APK <a href="{{ release }}simplex-aarch64.apk">aarch64</a> · <a href="{{ release }}simplex-armv7a.apk">armv7</a></p>
+        </div>
+    </div>
+    <p class="dl-wrap dl-other"><a href="#dl-all">{{ "downloads-other-devices" | i18n({}, lang) }}</a></p>
+
+    <div class="dl-wrap dl-proof">
+        <div class="dl-stat"><b>3M</b> <span>{{ "index-hero-downloads" | i18n({}, lang) }}</span></div>
+        <div class="dl-stat"><b>600K</b> <span>{{ "index-hero-monthly-users" | i18n({}, lang) }}</span></div>
+        <div class="dl-audits">
+            <a href="https://www.trailofbits.com/about" target="_blank" rel="noopener" title="{{ 'index-security-assessment-title' | i18n({}, lang) }}">
+                <img class="dark:hidden" src="/img/trail-of-bits-light.png" alt="Trail of Bits">
+                <img class="hidden dark:block" src="/img/design_3/publications/trail-of-bits.png" alt="Trail of Bits">
+            </a>
+            <a class="box-btn btn-1" href="/blog/20221108-simplex-chat-v4.2-security-audit-new-website.html" title="{{ 'index-security-review-2022-title' | i18n({}, lang) }}">2022</a>
+            <a class="box-btn gold-gradient" href="/blog/20241014-simplex-network-v6-1-security-review-better-calls-user-experience.html" title="{{ 'index-security-review-2024-title' | i18n({}, lang) }}">2024</a>
+            <p>{{ "index-security-audits-label" | i18n({}, lang) | safe }}</p>
+        </div>
+    </div>
+</section>
diff --git a/website/src/_includes/events.js b/website/src/_includes/events.js
new file mode 100644
index 0000000000..c1098da5f1
--- /dev/null
+++ b/website/src/_includes/events.js
@@ -0,0 +1,13 @@
+var pageEvents = {
+    domain: 'simplex.chat',
+    endpoint: 'https://api.simplex.chat/api/event',
+    logging: false,
+    outboundLinks: true,
+    transformRequest: function (event) {
+        if (window !== window.top || location.hostname.endsWith('.onion')) return null;
+        if (location.pathname.startsWith('/directory')) event.u = event.u.split('#')[0];
+        // remove hash from outbound links
+        if (event.p && event.p.url) event.p.url = event.p.url.split('#')[0];
+        return event;
+    }
+};
diff --git a/website/src/_includes/footer.html b/website/src/_includes/footer.html
index 31c9d9e557..521e717eb5 100644
--- a/website/src/_includes/footer.html
+++ b/website/src/_includes/footer.html
@@ -8,9 +8,11 @@
 
                 <div class="flex flex-col items-center lg:items-start lg:flex-row gap-[150px] lg:gap-[350px]">
                     <div class="flex flex-col items-center lg:items-start">
-                        <a href="/{{ '' if lang == 'en' else lang ~ '/' }}why"
+                        <a href="https://wefunder.com/simplex.chat?utm_source={{ 'home' if active_home else 'website' }}"
+                            target="_blank" rel="noopener"
                             class="text-grey-black dark:text-white text-[14px] font-medium leading-[28px] tracking-[0.01em] mb-3 flex items-center gap-1">
-                            {{ "why-footer-link" | i18n({}, lang ) | safe }}
+                            {{ "index-token-cta-cf" | i18n({}, lang ) | safe }}
+                            <svg class="float-right" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                         </a>
                         <a href="/about/"
                             class="text-grey-black dark:text-white text-[14px] font-medium leading-[28px] tracking-[0.01em] mb-3 flex items-center gap-1">
@@ -24,34 +26,28 @@
                             class="text-grey-black dark:text-white text-[14px] font-medium leading-[28px] tracking-[0.01em] mb-3 flex items-center gap-1">
                             {{ "jobs" | i18n({}, lang ) | safe }}
                         </a>
-                        <a href="https://github.com/simplex-chat/simplex-chat#please-support-us-with-your-donations"
-                            target="_blank"
-                            class="text-grey-black dark:text-white text-[14px] font-medium leading-[28px] tracking-[0.01em] mb-3 flex items-center gap-1">
-                            {{ "donate" | i18n({}, lang ) | safe }}
-                            <svg class="float-right" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
-                        </a>
                     </div>
                     <div class="flex flex-col items-center lg:items-start">
                         <a href="https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md"
-                            target="_blank"
+                            target="_blank" rel="noopener"
                             class="text-grey-black dark:text-white text-[14px] font-medium leading-[28px] tracking-[0.01em] mb-3 flex items-center gap-1">
                             SimpleX Whitepaper
                             <svg class="float-right" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                         </a>
                         <a href="https://github.com/simplex-chat/simplex-chat/blob/stable/docs/protocol/simplex-chat.md"
-                            target="_blank"
+                            target="_blank" rel="noopener"
                             class="text-grey-black dark:text-white text-[14px] font-medium leading-[28px] tracking-[0.01em] mb-3 flex items-center gap-1">
                             {{ "simplex-chat-protocol" | i18n({}, lang ) | safe }}
                             <svg class="float-right" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                         </a>
                         <a href="https://github.com/simplex-chat/simplex-chat/blob/stable/docs/CLI.md"
-                            target="_blank"
+                            target="_blank" rel="noopener"
                             class="text-grey-black dark:text-white text-[14px] font-medium leading-[28px] tracking-[0.01em] mb-3 flex items-center gap-1">
                             {{ "terminal-cli" | i18n({}, lang ) | safe }}
                             <svg class="float-right" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                         </a>
                         <a href="https://github.com/simplex-chat/simplex-chat/tree/stable/bots"
-                            target="_blank"
+                            target="_blank" rel="noopener"
                             class="text-grey-black dark:text-white text-[14px] font-medium leading-[28px] tracking-[0.01em] mb-3 flex items-center gap-1">
                             SimpleX bots API
                             <svg class="float-right" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
@@ -68,17 +64,17 @@
                                 <path fill-rule="evenodd" clip-rule="evenodd" d="M26.585 0C11.9025 0 0 11.9025 0 26.585C0 41.2674 11.9025 53.1699 26.585 53.1699C41.2674 53.1699 53.1699 41.2674 53.1699 26.585C53.1699 11.9025 41.2674 0 26.585 0ZM11.3862 17.3518L17.6366 23.4373L23.9313 17.3088L17.6787 11.2209L20.866 8.1179L27.1187 14.2061L33.4932 8L36.6199 11.044L30.2448 17.25L36.4982 23.3379L42.8733 17.1321L46 20.1761L39.6249 26.3818L45.8789 32.4702L42.6916 35.5732L36.4376 29.4848L30.0631 35.6906L36.3171 41.7791L33.1299 44.8821L26.8759 38.7936L20.5026 45L17.3759 41.956L23.8003 35.693L17.5493 29.6073L11.1255 35.8621L8 32.8194L14.4244 26.5646L8.17397 20.4792L11.3862 17.3518ZM27.0125 32.5656L33.311 26.4408L27.0576 20.3535L27.0568 20.3516L20.7615 26.4799L27.0125 32.5656Z"/>
                             </svg>
                         </a>
-                        <a href="https://primal.net/p/npub1exv22uulqnmlluszc4yk92jhs2e5ajcs6mu3t00a6avzjcalj9csm7d828" target="_blank">
+                        <a href="https://primal.net/p/npub1exv22uulqnmlluszc4yk92jhs2e5ajcs6mu3t00a6avzjcalj9csm7d828" target="_blank" rel="noopener">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 512 512" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path fill-rule="evenodd" clip-rule="evenodd" d="M256 512C397.385 512 512 397.385 512 256C512 114.615 397.385 0 256 0C114.615 0 0 114.615 0 256C0 397.385 114.615 512 256 512ZM348.077 268.251C347.047 271.254 346.018 274.257 344.263 277.017C337.633 287.302 327.867 292.139 315.221 292.951C302.173 293.789 289.233 295.487 276.333 297.437C274.064 297.779 271.793 298.108 269.521 298.438C258.687 300.005 247.858 301.572 237.36 304.645C189.946 318.517 148.927 341.344 115.048 374.257C109.197 379.941 103.451 385.688 98.1836 391.819C95.7632 394.637 93.0278 397.201 89.1831 398.521L89.1304 398.538C87.9731 398.938 86.7466 399.359 85.6548 398.491C84.7729 397.79 84.9731 396.874 85.1665 395.992C85.1948 395.862 85.2231 395.733 85.248 395.605C85.6963 393.277 86.7407 391.14 88.1821 389.194C90.146 386.544 92.084 383.878 94.022 381.213C99.7344 373.356 105.446 365.5 111.82 358.036C121.707 346.457 133.167 336.2 144.787 326.072C168.56 305.352 195.75 289.087 225.833 276.646C228.757 275.438 231.732 274.327 234.707 273.217C236.528 272.538 238.349 271.858 240.158 271.155C240.361 271.076 240.574 271.007 240.789 270.938C241.635 270.663 242.518 270.377 243.024 269.423C242.177 268.706 241.15 268.783 240.177 268.857C239.968 268.873 239.762 268.889 239.561 268.896C217.297 269.744 195.694 273.47 174.884 280.725C167.117 283.432 159.668 286.729 152.295 290.172C149.855 291.311 147.46 292.248 145.208 290.121C142.917 287.958 143.432 285.598 144.912 283.182C154.453 267.61 165.746 253.295 179.889 240.66C197.997 224.483 219.395 213.954 244.032 208.49C276.996 201.18 306.323 208.416 332.639 226.84L333.331 227.326C337.818 230.48 342.154 233.529 348.424 232.938C356.094 232.213 362.589 229.362 367.853 224.391C376.977 215.774 378.435 205.5 372.124 194.314C365.358 182.325 356.674 171.414 347.996 160.512L347.97 160.479C344.757 156.442 341.94 152.257 340.075 147.559C337.776 141.771 339.282 136.798 343.771 132.374C346.562 129.623 349.879 127.444 353.499 125.654C352.84 124.302 351.792 124.372 350.828 124.437C350.692 124.445 350.558 124.454 350.427 124.459C349.885 124.479 349.345 124.565 348.806 124.651C348.214 124.745 347.624 124.839 347.031 124.847C346.607 124.852 346.152 124.89 345.689 124.929C343.945 125.074 342.084 125.23 341.357 123.684C340.391 121.631 341.399 119.227 343.191 117.554C347.403 113.623 352.741 112.595 358.621 113.133C364.851 113.703 370.044 116.374 374.959 119.561C377.904 121.469 380.753 123.504 383.548 125.587C386.107 127.494 385.938 128.352 382.863 129.358C378.374 130.828 373.854 132.237 369.158 133.088C368.043 133.29 366.97 133.568 365.925 133.915C365.13 134.178 364.353 134.481 363.586 134.82C356.43 137.985 354.645 142.229 357.784 148.742C360.525 154.429 364.434 159.469 368.344 164.509C369.887 166.498 371.431 168.487 372.902 170.517C373.603 171.483 374.306 172.449 375.008 173.415C379.468 179.541 383.926 185.666 387.914 192.062C400.479 212.217 392.457 231.471 374.209 243.009C372.334 244.194 370.384 245.277 368.434 246.36C365.527 247.975 362.621 249.589 359.962 251.543C354.495 255.563 350.765 260.588 348.648 266.601C348.455 267.149 348.266 267.7 348.077 268.251ZM364.513 333.922C365.149 335.249 364.924 336.668 364.888 338.06C364.714 340.459 365.214 342.489 363.518 344.059C362.183 344.074 361.458 343.352 360.753 342.65C360.563 342.461 360.375 342.273 360.177 342.103C356.286 338.75 352.875 334.988 348.808 331.769C341.752 326.184 333.477 324.483 324.302 324.521C315.342 324.559 307.177 327.164 299.004 329.771C297.717 330.183 296.429 330.594 295.138 330.995L289.747 332.666C278.586 336.121 267.42 339.577 256.422 343.413C246.833 346.757 238.413 339.996 239.31 331.924C240.31 322.924 243.14 314.443 250.956 307.944C254.783 304.762 259.324 303.146 264.323 302.431C267.762 301.938 271.221 301.553 274.679 301.168C276.062 301.014 277.446 300.859 278.828 300.698C279.451 300.625 280.078 300.607 280.639 301.144C280.923 302.208 280.246 302.979 279.585 303.731C279.429 303.91 279.273 304.088 279.131 304.268C274.998 309.516 270.639 314.606 265.876 319.418C265.727 319.568 265.549 319.722 265.365 319.879C264.61 320.528 263.763 321.258 264.454 322.215C265.352 323.459 266.887 322.692 268.166 322.415C273.744 321.205 279.287 319.864 284.829 318.523C294.818 316.107 304.808 313.69 315.003 312.043C328.089 309.928 340.422 311.512 351.549 318.553C357.728 322.463 361.604 327.85 364.513 333.922Z" />
                             </svg>
                         </a>
-                        <a rel="me" href="https://mastodon.social/@simplex" target="_blank">
+                        <a rel="me noopener" href="https://mastodon.social/@simplex" target="_blank">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 512 512" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path fill-rule="evenodd" clip-rule="evenodd" d="M256 512C397.385 512 512 397.385 512 256C512 114.615 397.385 0 256 0C114.615 0 0 114.615 0 256C0 397.385 114.615 512 256 512ZM339.329 99.0275C317.654 93.9388 295.564 92.2207 273.231 91.3254C272.186 91.2944 271.157 91.2596 270.14 91.2251C268.091 91.1557 266.089 91.0879 264.086 91.0567C246.35 90.7812 228.654 91.5123 210.994 93.1846C197.065 94.5035 183.244 96.4768 169.675 99.9727C162.199 101.899 154.73 103.994 147.977 107.812C134.904 115.202 125.174 125.999 117.725 138.921C108.323 155.228 103.916 173.02 103.377 191.682C102.882 208.853 102.937 226.049 103.186 243.227C103.396 257.66 104.034 272.095 104.854 286.507C105.678 300.995 107.728 315.348 110.963 329.508C114.411 344.606 119.377 359.13 127.439 372.451C138.635 390.948 154.331 403.859 174.933 410.499C187.604 414.582 200.649 417.051 213.826 418.828C237.461 422.015 261.021 421.897 284.461 417.12C294.296 415.115 303.892 412.325 313.09 408.232C314.413 407.643 314.878 406.946 314.79 405.46C314.549 401.383 314.383 397.303 314.217 393.222C314.143 391.401 314.069 389.581 313.989 387.761C313.915 386.091 313.827 384.422 313.737 382.714C313.695 381.925 313.653 381.128 313.612 380.318C313.426 380.354 313.261 380.382 313.11 380.408C312.825 380.457 312.591 380.497 312.364 380.56C294.125 385.58 275.582 388.162 256.641 387.555C245.877 387.21 235.125 386.735 224.588 384.226C217.159 382.457 210.199 379.654 204.32 374.599C197.016 368.318 193.251 360.094 191.688 350.786C191.199 347.876 190.939 344.927 190.672 341.898C190.548 340.499 190.423 339.084 190.274 337.647C190.638 337.712 190.939 337.764 191.198 337.808C191.658 337.888 191.989 337.945 192.317 338.012C193.433 338.242 194.548 338.478 195.663 338.714C197.9 339.188 200.137 339.662 202.384 340.08C217.874 342.967 233.476 344.947 249.2 346.01C261.24 346.825 273.283 346.962 285.306 346.061C292.653 345.511 299.987 344.776 307.32 344.042C310.694 343.704 314.068 343.366 317.444 343.046C329.993 341.856 342.163 339.055 353.868 334.339C368.08 328.613 381.069 320.958 391.661 309.671C397.704 303.232 402.22 295.971 403.793 287.033C406.787 270.025 408.278 252.868 409.117 235.648C409.506 227.659 409.68 219.659 409.854 211.661C409.877 210.641 409.899 209.622 409.922 208.602C410.225 194.937 409.755 181.331 406.589 167.943C402.18 149.303 393.93 132.763 380.157 119.248C373.506 112.723 366.119 107.246 357.182 104.291C351.293 102.344 345.36 100.443 339.329 99.0275ZM206.301 147.05C215.154 146.705 223.699 148.074 231.686 152.148C239.099 156.066 244.656 161.596 248.834 168.559C250.24 170.904 251.634 173.256 253.028 175.609C253.877 177.042 254.725 178.475 255.577 179.906C255.751 180.198 255.939 180.481 256.169 180.825C256.289 181.005 256.42 181.202 256.567 181.426C256.835 180.985 257.092 180.564 257.34 180.156C257.857 179.31 258.338 178.52 258.815 177.728C259.514 176.567 260.2 175.397 260.885 174.228C262.344 171.739 263.803 169.25 265.39 166.845C274.175 153.529 286.908 147.555 302.51 147.037C311.492 146.739 320.132 148.161 328.153 152.407C340.022 158.69 347.454 168.621 351.49 181.281C353.776 188.451 354.772 195.835 354.782 203.337C354.809 224.399 354.804 245.462 354.8 266.525C354.798 274.145 354.797 281.765 354.796 289.385C354.796 291.539 354.794 291.541 352.618 291.541C345.311 291.541 338.005 291.541 330.699 291.541L322.729 291.541L320.556 291.541V289.22C320.556 282.775 320.555 276.331 320.555 269.886C320.555 249.152 320.555 228.417 320.557 207.683C320.557 203.313 320.182 198.991 318.855 194.802C316.363 186.935 311.094 182.212 302.904 181.058C297.135 180.245 291.436 180.588 286.145 183.355C279.524 186.817 276.269 192.781 274.923 199.777C274.066 204.228 273.672 208.827 273.621 213.366C273.507 223.706 273.527 234.048 273.547 244.39C273.555 248.39 273.563 252.389 273.563 256.389V258.442H239.519C239.519 257.757 239.52 257.127 239.519 256.498C239.515 252.169 239.515 247.841 239.515 243.512C239.515 232.533 239.514 221.553 239.453 210.574C239.422 205.073 238.685 199.648 236.607 194.488C233.57 186.946 228.11 182.277 220.046 181.187C216.643 180.726 213.072 180.737 209.67 181.204C202.089 182.246 197.072 186.701 194.521 193.923C193.001 198.228 192.528 202.699 192.528 207.236C192.526 227.665 192.526 248.094 192.526 268.522C192.526 275.434 192.527 282.345 192.527 289.256V291.425H158.285V289.671C158.285 281.418 158.28 273.166 158.274 264.914C158.259 244.215 158.245 223.516 158.321 202.817C158.362 191.725 160.39 180.983 165.938 171.217C174.826 155.574 188.484 147.745 206.301 147.05Z" />
                             </svg>
                         </a>
-                        <a href="https://lemmy.ml/c/simplex" target="_blank">
+                        <a href="https://lemmy.ml/c/simplex" target="_blank" rel="noopener">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 512 512" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path d="M211.627 320.142L211.601 320.334C209.791 327.491 205.635 332.28 198.898 334.602C186.776 338.78 174.062 329.797 173.658 317.008C173.314 306.088 182.578 296.189 194.836 297.369C205.769 298.421 213.652 308.883 211.697 319.667C211.669 319.825 211.647 319.984 211.627 320.142Z" />
                                 <path d="M330.616 332.344C330.429 332.469 330.237 332.586 330.048 332.707C318.654 339.342 304.653 333.087 301.724 320.752C299.125 309.809 306.901 298.809 318.043 297.573C326.881 296.592 335.193 301.875 338.096 309.993C341.069 318.313 338.059 327.36 330.616 332.344Z" />
@@ -87,7 +83,7 @@
                                 <path d="M329.711 333.271C318.43 340.029 304.431 333.604 301.503 320.932C298.905 309.69 306.679 298.39 317.818 297.12C326.654 296.113 334.965 301.539 337.867 309.879C340.84 318.426 337.83 327.72 330.389 332.84C330.202 332.968 330.01 333.089 329.711 333.271Z" />
                             </svg>
                         </a>
-                        <a href="mailto:chat@simplex.chat" target="_blank">
+                        <a href="mailto:chat@simplex.chat" target="_blank" rel="noopener">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 512 512" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path fill-rule="evenodd" clip-rule="evenodd" d="M512 256C512 397.385 397.385 512 256 512C114.615 512 0 397.385 0 256C0 114.615 114.615 0 256 0C397.385 0 512 114.615 512 256ZM149.744 205.384L166.479 218.68C192.394 239.268 218.153 259.732 243.918 280.188C254.117 288.285 257.065 288.23 267.363 280.05C310.416 245.847 353.478 211.655 396.54 177.463L400.139 174.605L413.302 164.153C414.537 163.173 415.803 162.232 418.049 160.511V167.062L418.05 212.292C418.05 257.522 418.051 302.752 418.045 347.982C418.044 359.363 414.904 362.477 403.495 362.477L283.932 362.479C225.163 362.479 166.395 362.479 107.626 362.477C96.1521 362.477 93.0066 359.391 93.0051 348.06C92.9968 287.587 93.001 227.114 93.001 166.641V160.359C112.401 175.751 130.933 190.456 149.744 205.384ZM116.095 149C126.458 157.244 135.905 164.758 145.633 172.489C166.835 189.321 187.943 206.083 209.045 222.84L255.556 259.775L395.017 149H116.095Z" />
                             </svg>
@@ -95,31 +91,31 @@
                     </div>
 
                     <div class="flex gap-2 justify-center">
-                        <a href="https://github.com/simplex-chat" target="_blank">
+                        <a href="https://github.com/simplex-chat" target="_blank" rel="noopener">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 41 41" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path d="M20.2907 0.926758C9.24635 0.926758 0.290527 10.1075 0.290527 21.4331C0.290527 30.4933 6.02118 38.18 13.9679 40.8915C14.9674 41.0813 15.3344 40.4467 15.3344 39.905C15.3344 39.4161 15.3158 37.8007 15.3072 36.0872C9.74314 37.3277 8.56906 33.6677 8.56906 33.6677C7.65927 31.2975 6.3484 30.6672 6.3484 30.6672C4.53379 29.3945 6.48519 29.4206 6.48519 29.4206C8.49355 29.5653 9.55105 31.5338 9.55105 31.5338C11.3349 34.6688 14.2298 33.7624 15.3711 33.2385C15.5506 31.9131 16.069 31.0085 16.6409 30.4964C12.1986 29.9779 7.52878 28.2195 7.52878 20.3621C7.52878 18.1232 8.31007 16.294 9.58947 14.8579C9.38181 14.3414 8.69723 12.2557 9.78322 9.43111C9.78322 9.43111 11.4627 8.87998 15.2847 11.5331C16.8801 11.0787 18.591 10.8509 20.2907 10.8431C21.9904 10.8509 23.7027 11.0787 25.301 11.5331C29.1183 8.87998 30.7955 9.43111 30.7955 9.43111C31.8842 12.2557 31.1992 14.3414 30.9916 14.8579C32.274 16.294 33.05 18.1232 33.05 20.3621C33.05 28.2382 28.3712 29.9724 23.9176
                                     30.4801C24.635 31.1165 25.2742 32.3644 25.2742 34.2776C25.2742 37.0214 25.251 39.2296 25.251 39.905C25.251 40.4507 25.611 41.0902 26.6248 40.8888C34.5672 38.1742 40.2905 30.4903 40.2905 21.4331C40.2905 10.1075 31.336 0.926758 20.2907 0.926758Z" />
                             </svg>
                         </a>
-                        <a href="https://www.reddit.com/r/SimpleXChat/" target="_blank">
+                        <a href="https://www.reddit.com/r/SimpleXChat/" target="_blank" rel="noopener">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 41 41" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path fill-rule="evenodd" clip-rule="evenodd" d="M20.874 40.9268C31.9197 40.9268 40.874 31.9724 40.874 20.9268C40.874 9.88108 31.9197 0.926758 20.874 0.926758C9.82834 0.926758 0.874023 9.88108 0.874023 20.9268C0.874023 31.9724 9.82834 40.9268 20.874 40.9268ZM30.4091 16.615C31.9031 16.615 33.1157 17.8276 33.1157 19.3216C33.1157 20.426 32.4445 21.3787 31.5567 21.8118C31.6 22.0716 31.6217 22.3315 31.6217 22.613C31.6217 26.7705 26.7929 30.1268 20.8165 30.1268C14.8402 30.1268 10.0114 26.7705 10.0114 22.613C10.0114 22.3315 10.0331 22.05 10.0764 21.7902C9.12362 21.3571 8.47402 20.426 8.47402 19.3216C8.47402 17.8276 9.68662 16.615 11.1807 16.615C11.8953 16.615 12.5665 16.9181 13.0429 17.3728C14.9051 16.0086 17.4819 15.1642 20.3618 15.0776L21.726 8.6248C21.7693 8.49488 21.8343 8.3866 21.9425 8.32164C22.0508 8.25668 22.1807 8.23504 22.3106 8.25668L26.7929 9.20944C27.0961 8.55984 27.7457 8.12676 28.5035 8.12676C29.5646 8.12676 30.4307 8.99292 30.4307
                                     10.0539C30.4307 11.115 29.5646 11.9811 28.5035 11.9811C27.4642 11.9811 26.6197 11.1582 26.5764 10.1406L22.5705 9.29604L21.3362 15.0776C24.1512 15.1858 26.7063 16.052 28.5469 17.3728C29.0232 16.8964 29.6728 16.615 30.4091 16.615ZM16.5291 19.3216C15.4681 19.3216 14.602 20.1878 14.602 21.2488C14.602 22.3098 15.4681 23.176 16.5291 23.176C17.5902 23.176 18.4563 22.3098 18.4563 21.2488C18.4563 20.1878 17.5902 19.3216 16.5291 19.3216ZM20.7949 27.7449C21.5311 27.7449 24.0429 27.6582 25.3638 26.3374C25.5587 26.1425 25.5587 25.8394 25.4071 25.6228C25.2122 25.428 24.8874 25.428 24.6925 25.6228C23.848 26.4456 22.0941 26.7488 20.8165 26.7488C19.539 26.7488 17.7634 26.4456 16.9405 25.6228C16.7457 25.428 16.4209 25.428 16.226 25.6228C16.0311 25.8177 16.0311 26.1425 16.226 26.3374C17.5252 27.6366 20.0587 27.7449 20.7949 27.7449ZM23.0902 21.2488C23.0902 22.3098 23.9563 23.176 25.0173 23.176C26.0783 23.176 26.9445 22.3098 26.9445 21.2488C26.9445 20.1878 26.0783
                                     19.3216 25.0173 19.3216C23.9563 19.3216 23.0902 20.1878 23.0902 21.2488Z" />
                             </svg>
                         </a>
-                        <a href="https://x.com/simplexchat" target="_blank">
+                        <a href="https://x.com/simplexchat" target="_blank" rel="noopener">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 41 41" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path fill-rule="evenodd" clip-rule="evenodd" d="M20.4575 40.9268C31.5032 40.9268 40.4575 31.9725 40.4575 20.9268C40.4575 9.88106 31.5032 0.926758 20.4575 0.926758C9.41182 0.926758 0.45752 9.88106 0.45752 20.9268C0.45752 31.9725 9.41182 40.9268 20.4575 40.9268ZM29.916 16.7766C29.916 23.1157 25.014 30.4265 16.0519 30.4265V30.423C13.4038 30.4265 10.8115 29.6795 8.58252 28.2719C8.96846 28.3174 9.35558 28.3397 9.74271 28.3409C11.9372 28.3432 14.0688 27.6182 15.7942 26.283C13.7101 26.2444 11.8802 24.9055 11.2425 22.9507C11.9716 23.0898 12.7245 23.0619 13.4418 22.869C11.1689 22.4165 9.53371 20.4504 9.53252 18.1671V18.1062C10.2106 18.478 10.9694 18.6835 11.7448 18.7057C9.60377 17.2981 8.94233 14.4948 10.2355 12.3026C12.7103 15.2992 16.3606 17.1207 20.2782 17.3147C19.8851 15.6487 20.4231 13.902 21.6878 12.7306C23.6507 10.9137 26.737 11.0073 28.5824 12.9387C29.6737 12.7271 30.7199 12.3327 31.677 11.7738C31.3125 12.8857 30.5513 13.828 29.5348 14.4277C30.5002
                                     14.3155 31.4443 14.0609 32.3325 13.6728C31.6782 14.6362 30.8553 15.4781 29.9017 16.1562C29.916 16.362 29.916 16.5685 29.916 16.7766Z" />
                             </svg>
                         </a>
-                        <a href="https://www.linkedin.com/company/simplex-chat/" target="_blank">
+                        <a href="https://www.linkedin.com/company/simplex-chat/" target="_blank" rel="noopener">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 41 41" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path fill-rule="evenodd" clip-rule="evenodd" d="M20.0408 0.926758C8.9951 0.926758 0.0407715 9.88109 0.0407715 20.9268C0.0407715 31.9724 8.9951 40.9268 20.0408 40.9268C31.0864 40.9268 40.0408 31.9724 40.0408 20.9268C40.0408 9.88109 31.0864 0.926758 20.0408 0.926758ZM9.6421 17.4916H14.1745V31.1098H9.6421V17.4916ZM14.4731 13.279C14.4437 11.9438 13.4889 10.9268 11.9383 10.9268C10.3878 10.9268 9.3741 11.9438 9.3741 13.279C9.3741 14.5866 10.3579 15.6328 11.8794 15.6328H11.9084C13.4889 15.6328 14.4731 14.5866 14.4731 13.279ZM25.3017 17.1718C28.2843 17.1718 30.5203 19.1187 30.5203 23.3015L30.5201 31.1098H25.9879V23.824C25.9879 21.994 25.3319 20.7453 23.6912 20.7453C22.439 20.7453 21.6932 21.5871 21.3656 22.4003C21.2458 22.6916 21.2164 23.0976 21.2164 23.5046V31.1101H16.6834C16.6834 31.1101 16.7431 18.7698 16.6834 17.492H21.2164V19.4208C21.8179 18.4936 22.8953 17.1718 25.3017 17.1718Z" />
                             </svg>
                         </a>
-                        <a href="https://simplex.chat/feed.rss" target="_blank">
+                        <a href="https://simplex.chat/feed.rss" target="_blank" rel="noopener">
                             <svg class="fill-primary-light dark:fill-primary-dark" width="32" height="32" viewBox="0 0 512 512" fill="none" xmlns="http://www.w3.org/2000/svg">
                                 <path fill-rule="evenodd" clip-rule="evenodd" d="M256 512C397.385 512 512 397.385 512 256C512 114.615 397.385 0 256 0C114.615 0 0 114.615 0 256C0 397.385 114.615 512 256 512ZM132.791 157.572C215.586 161.137 279.503 196.841 323.612 267.517C344.138 302.436 354.186 339.959 354.57 380.122H406.814C409.639 231.301 280.977 103.1 132.791 106.05V157.572ZM309.994 343.843C311.593 356.035 313.096 367.877 314.65 380.116H261.161C260.496 344.968 248.303 314.452 223.472 289.485C198.613 264.491 168.097 252.282 132.755 251.38V199.743C198.318 196.346 288.694 244.344 309.994 343.843ZM132.766 336.706C129.293 354.261 137.796 370.323 154.848 378.004L155.461 378.242C156.267 378.558 156.912 378.81 157.577 378.985C173.012 383.066 186.298 379.318 196.604 367.168C206.463 355.544 208.397 342.145 201.87 328.354C195.205 314.271 183.419 307.215 167.834 307.356C151.188 307.509 135.971 320.504 132.766 336.706Z" />
                             </svg>
diff --git a/website/src/_includes/hero.html b/website/src/_includes/hero.html
index e74f3f31f3..b3a37be52a 100644
--- a/website/src/_includes/hero.html
+++ b/website/src/_includes/hero.html
@@ -23,27 +23,27 @@
 
                     <article class="w-full xl:max-w-[600px]">
                         <div id="simplex-reviews" class="flex items-center justify-center xl:justify-start flex-wrap gap-4 my-10">
-                            <a class="block rounded overflow-hidden" title="security assessment" href="https://simplex.chat/blog/20221108-simplex-chat-v4.2-security-audit-new-website.html" target="_blank">
+                            <a class="block rounded overflow-hidden" title="security assessment" href="https://simplex.chat/blog/20221108-simplex-chat-v4.2-security-audit-new-website.html" target="_blank" rel="noopener">
                                 <img class="h-[40px] w-auto block dark:hidden" src="/img/trail-of-bits-light.png" alt="Trail of Bits">
                                 <img class="h-[40px] w-auto hidden dark:block" src="/img/trail-of-bits-dark.png" alt="Trail of Bits">
                             </a>
-                            <a class="block rounded overflow-hidden" title="messenger recommendations" href="https://www.privacyguides.org/en/real-time-communication/#simplex-chat" target="_blank">
+                            <a class="block rounded overflow-hidden" title="messenger recommendations" href="https://www.privacyguides.org/en/real-time-communication/#simplex-chat" target="_blank" rel="noopener">
                                 <img class="h-[40px] w-auto block dark:hidden" src="/img/privacy-guides-light.png" alt="Privacy Guides">
                                 <img class="h-[40px] w-auto hidden dark:block" src="/img/privacy-guides-dark.png" alt="Privacy Guides">
                             </a>
-                            <a class="block rounded overflow-hidden" title="Whonix messenger recommendations" href="https://www.whonix.org/wiki/Chat#Recommendation" target="_blank">
+                            <a class="block rounded overflow-hidden" title="Whonix messenger recommendations" href="https://www.whonix.org/wiki/Chat#Recommendation" target="_blank" rel="noopener">
                                 <img class="h-[24px] mb-[8px] w-auto block dark:hidden" src="/img/whonix-light.png" alt="Whonix">
                                 <img class="h-[24px] mb-[8px] w-auto hidden dark:block" src="/img/whonix-dark.png" alt="Whonix">
                             </a>
-                            <a class="block rounded overflow-hidden" title="publication" href="https://www.heise.de/suche/?q=simplex+chat&sort_by=date&rm=search" target="_blank">
+                            <a class="block rounded overflow-hidden" title="publication" href="https://www.heise.de/suche/?q=simplex+chat&sort_by=date&rm=search" target="_blank" rel="noopener">
                                 <img class="h-[40px] w-auto block dark:hidden" src="/img/heise-light.png" alt="Heise Online">
                                 <img class="h-[40px] w-auto hidden dark:block" src="/img/heise-dark.png" alt="Heise Online">
                             </a>
-                            <a class="block rounded overflow-hidden" title="review" href="https://www.kuketz-blog.de/simplex-eindruecke-vom-messenger-ohne-identifier/" target="_blank">
+                            <a class="block rounded overflow-hidden" title="review" href="https://www.kuketz-blog.de/simplex-eindruecke-vom-messenger-ohne-identifier/" target="_blank" rel="noopener">
                                 <img class="h-[40px] w-auto block dark:hidden" src="/img/kuketz-blog-light.png" alt="Mike Kuketz blog">
                                 <img class="h-[40px] w-auto hidden dark:block" src="/img/kuketz-blog-dark.png" alt="Mike Kuketz blog">
                             </a>
-                            <a class="block rounded overflow-hidden" title="podcast interview" href="https://optoutpod.com/episodes/s3e02-simplexchat/" target="_blank">
+                            <a class="block rounded overflow-hidden" title="podcast interview" href="https://optoutpod.com/episodes/s3e02-simplexchat/" target="_blank" rel="noopener">
                                 <img class="h-[40px] w-auto" src="/img/optout.jpg" alt="Opt Out Podcast">
                             </a>
                         </div>
@@ -51,11 +51,11 @@
                         <div>
                             <p class="text-black dark:text-white hidden md:block text-center xl:text-left xl:rtl:text-right text-[16px] leading-[26px] mb-[11px] md:mt-6">{{ "get-simplex" | i18n({}, lang ) | safe }}</p>
                             <div class="socials flex items-center justify-center xl:justify-start gap-4 flex-wrap mt-[30px]">
-                                <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" /></a>
-                                <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" title="Public iOS preview on TestFlight"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" /></a>
+                                <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" /></a>
+                                <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener" title="Public iOS preview on TestFlight"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" /></a>
                                 <a href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid" title="SimpleX F-Droid Repository"><img class="h-[40px] w-auto" src="/img/new/f_droid.svg" /></a>
-                                <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank"><img class="h-[40px] w-auto" src="/img/new/testflight.png" /></a>
-                                <a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apk_icon.png" /></a>
+                                <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/testflight.png" /></a>
+                                <a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apk_icon.png" /></a>
                             </div>
                         </div>
                     </article>
diff --git a/website/src/_includes/layouts/token.html b/website/src/_includes/layouts/token.html
index 1dea4b378f..be63a23413 100644
--- a/website/src/_includes/layouts/token.html
+++ b/website/src/_includes/layouts/token.html
@@ -586,7 +586,7 @@
                             } else {
                                 content.innerHTML += `<p class="no-metamask"><img src="/img/design_3/simplex_nft_smpx.jpg"></p>
                                     <p class="no-metamask">
-                                        <a href="https://metamask.io/download/" target="_blank">Install MetaMask wallet</a>
+                                        <a href="https://metamask.io/download/" target="_blank" rel="noopener">Install MetaMask wallet</a>
                                     </p>`;
                             }
                             break;
@@ -620,7 +620,7 @@
                                 html += renderAttributes(meta.attributes, appState.openedTraits);
                                 html += '<p>';
                                 html += `<strong>${appState.totalMinted} NFTs minted</strong>. `;
-                                html += `<a href="https://${currentConfig.explorerHost}/nft/${appState.nftAddress}/${appState.tokenId}" target="_blank"><span>Explorer ${linkSvg}</span></a>`;
+                                html += `<a href="https://${currentConfig.explorerHost}/nft/${appState.nftAddress}/${appState.tokenId}" target="_blank" rel="noopener"><span>Explorer ${linkSvg}</span></a>`;
                                 html += '</p>';
                             }
                             html += `</div></div>`;
@@ -674,7 +674,7 @@
                         if (nextMeta.description) html += `<p>${nextMeta.description}</p>`;
                         html += '<p>';
                         html += `<strong>${appState.totalMinted} NFTs minted</strong>. `;
-                        html += `<a href="https://${currentConfig.explorerHost}/token/${appState.nftAddress}" target="_blank"><span>Explorer ${linkSvg}</span></a>`;
+                        html += `<a href="https://${currentConfig.explorerHost}/token/${appState.nftAddress}" target="_blank" rel="noopener"><span>Explorer ${linkSvg}</span></a>`;
                         html += '</p>';
                         if (withAttributes) {
                             html += renderAttributes(nextMeta.attributes, appState.nextOpenedTraits);
diff --git a/website/src/_includes/navbar.html b/website/src/_includes/navbar.html
index 6de0c372e3..efe079f441 100644
--- a/website/src/_includes/navbar.html
+++ b/website/src/_includes/navbar.html
@@ -67,12 +67,12 @@
 
                 <ul class="sub-menu">
                     <li><a href="https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md"
-                        target="_blank">Whitepaper
+                        target="_blank" rel="noopener">Whitepaper
                         <svg xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                     </a></li>
                     <li><a href="/privacy">{{ "terms-and-privacy-policy" | i18n({}, lang ) | safe }}</a></li>
                     <li><a href="https://github.com/simplex-chat/simplexmq/blob/stable/protocol/simplex-messaging.md"
-                        target="_blank">{{ "smp-protocol" | i18n({}, lang ) | safe }}
+                        target="_blank" rel="noopener">{{ "smp-protocol" | i18n({}, lang ) | safe }}
                         <svg xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                     </a></li>
                     <li><a href="/docs/protocol/simplex-chat.html">{{ "chat-protocol" | i18n({}, lang ) | safe }}</a></li>
@@ -93,16 +93,16 @@
                     >{{ "docs-dropdown-2" | i18n({}, lang ) | safe }}
                     </a></li>
                     <li><a href="https://github.com/simplex-chat/simplex-chat/blob/stable/apps/simplex-bot-advanced/Main.hs"
-                        target="_blank">{{ "chat-bot-example" | i18n({}, lang ) | safe }}
+                        target="_blank" rel="noopener">{{ "chat-bot-example" | i18n({}, lang ) | safe }}
                         <svg xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                     </a></li>
                     <li><a href="https://github.com/simplex-chat/simplex-chat/tree/stable/packages/simplex-chat-client/typescript"
-                        target="_blank">TypeScript SDK
+                        target="_blank" rel="noopener">TypeScript SDK
                         <svg xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                     </a></li>
                     <li><a href="/docs/cli.html">{{ "terminal-cli" | i18n({}, lang ) | safe }}</a></li>
                     <li><a href="https://github.com/simplex-chat/simplexmq"
-                        target="_blank">SimpleXMQ
+                        target="_blank" rel="noopener">SimpleXMQ
                         <svg xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" x="0px" y="0px" viewBox="0 0 100 100" width="15" height="15"><path fill="currentColor" d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path> <polygon fill="currentColor" points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg>
                     </a></li>
                 </ul>
@@ -126,7 +126,7 @@
 
     <div class="right-links">
         {% if ('/crowdfunding/' not in page.url) %}
-            <a class="box-btn token md:hidden" href="/crowdfunding/">
+            <a class="box-btn token md:hidden" href="https://wefunder.com/simplex.chat?utm_source={{ 'home' if active_home else 'website' }}" target="_blank" rel="noopener">
                 {{ 'invest' | i18n({}, lang) }}
             </a>
         {% endif %}
@@ -162,7 +162,7 @@
             </a>
 
             <ul class="sub-menu">
-                {% if ("docs" in page.url) or ('downloads' in page.url) or ('security' in page.url) or ('reproduce' in page.url) or ('transparency' in page.url) or ('jobs' in page.url) or ('faq' in page.url) %}
+                {% if ("docs" in page.url) or ('security' in page.url) or ('reproduce' in page.url) or ('transparency' in page.url) or ('jobs' in page.url) or ('faq' in page.url) %}
                     {% for supportedLang in supportedLangsForDoc %}
                         {% for language in languages.languages %}
                             {% if language.label == supportedLang %}
@@ -176,7 +176,7 @@
                     {% endfor %}
                 {% else %}
                     {% for language in languages.languages %}
-                        {% if language.enabled and (language.home or (page.url != '/' and page.url != '/' + lang + '/')) and (language.why or ('why' not in page.url)) %}
+                        {% if language.enabled and (language.label | translated(page.url)) %}
                             <li>
                                 <a href="{% completeRoute {url: page.url, lang: language.label} %}">
                                     <p>{{ language.name }}</p>
@@ -212,6 +212,14 @@
 
 <script>{% include "utm.js" %}</script>
 
+{% if not noEvents %}
+<script type="module">
+import { init, track } from '/js/page.js';
+{% include "events.js" %}
+init(pageEvents);
+</script>
+{% endif %}
+
 <script>
 // switch theme
 const sunIcon = document.querySelector('.sun');
diff --git a/website/src/_includes/sections/join_simplex.html b/website/src/_includes/sections/join_simplex.html
index 9615e60df9..c21b9ede83 100644
--- a/website/src/_includes/sections/join_simplex.html
+++ b/website/src/_includes/sections/join_simplex.html
@@ -28,11 +28,11 @@
 
         <p class="text-grey-black dark:text-white text-center mb-7">{{ "get-simplex" | i18n({}, lang ) | safe }}</p>
         <div class="flex items-center justify-center gap-4 flex-wrap">
-            <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" /></a>
-            <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" title="Public iOS preview on TestFlight"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" /></a>
+            <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" /></a>
+            <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener" title="Public iOS preview on TestFlight"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" /></a>
             <a href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid"  title="SimpleX F-Droid Repository"><img class="h-[40px] w-auto" src="/img/new/f_droid.svg" /></a>
-            <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank"><img class="h-[40px] w-auto" src="/img/new/testflight.png" /></a>
-            <a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apk_icon.png" /></a>
+            <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/testflight.png" /></a>
+            <a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apk_icon.png" /></a>
         </div>
     </div>
 </section>
diff --git a/website/src/blog.html b/website/src/blog.html
index 5e8a2f8dfa..6fd78cbdc3 100644
--- a/website/src/blog.html
+++ b/website/src/blog.html
@@ -41,7 +41,7 @@ active_blog: true
 
 <section class="py-10 px-5 mt-[66px]" id="blog-list">
     <div class="container">
-        <h1 class="text-[38px] text-center font-bold mb-2">Latest news</h1>
+        <h1 class="text-[38px] md:text-[45px] text-center font-bold mb-2">Latest news</h1>
         <p class="text-right mb-9"><a class="text-primary-light dark:text-[#70F0F9] text-sm font-medium tracking-[0.03em]" href="/news">Open SimpleX Network News channel</a></p>
 
         {% for blog in collections.blogs %}
diff --git a/website/src/contact.html b/website/src/contact.html
index 1ec57f97f0..bfd571950f 100644
--- a/website/src/contact.html
+++ b/website/src/contact.html
@@ -3,6 +3,7 @@ layout: layouts/main.html
 title: "SimpleX Chat - Contact"
 header: "contact-hero-header"
 templateEngineOverride: njk
+noEvents: true
 ---
 
 {% include "contact_page.html" %}
\ No newline at end of file
diff --git a/website/src/crowdfunding.html b/website/src/crowdfunding.html
index ee345a837c..11d28742b9 100644
--- a/website/src/crowdfunding.html
+++ b/website/src/crowdfunding.html
@@ -65,7 +65,7 @@ templateEngineOverride: njk
             --cf-area-off: calc((var(--sec-h) - 100svh) / 2);
         }
 
-        @media screen and (max-width: 959px) and (orientation: portrait) {
+        @media screen and (max-width: 1015px) and (orientation: portrait) {
             :root {
                 --cf-grad-light: linear-gradient(30deg, #e8f3ff 0%, #c0e2ff 40%, #e9ffff 80%, #ffefd6 90%);
                 --cf-grad-dark: linear-gradient(30deg, #000000 0%, #131d49 52%, #3f5598 65%, #c3faff 85%, #fff6e0 90%);
@@ -379,7 +379,7 @@ templateEngineOverride: njk
 
         .cf-pill svg { height: 30px; width: auto; display: block; transform: translateY(-3.5px); }
 
-        @media screen and (min-width: 960px), screen and (max-width: 959px) and (orientation: landscape) {
+        @media screen and (min-width: 1016px), screen and (max-width: 1015px) and (orientation: landscape) {
             .cf-pill { width: 252px; justify-content: center; }
         }
 
@@ -389,7 +389,7 @@ templateEngineOverride: njk
         .cf-cta-link:hover,
         .cf .text-container a.gradient-text:hover { filter: brightness(1.12); }
 
-        @media screen and (min-width: 960px), screen and (max-width: 959px) and (orientation: landscape) {
+        @media screen and (min-width: 1016px), screen and (max-width: 1015px) and (orientation: landscape) {
             .cf-network .text-container h2 { max-width: calc(var(--sec-vwu) * 23.5) !important; }
             .cf-network .text-container p { max-width: calc(var(--sec-vwu) * 31) !important; }
             .cf-network .text-container a { max-width: calc(var(--sec-vwu) * 31) !important; }
@@ -429,7 +429,7 @@ templateEngineOverride: njk
         #navbar.on-light > a.logo.logo-light { display: flex; }
         #navbar.on-light > a.logo.logo-dark { display: none; }
 
-        @media screen and (min-width: 960px), screen and (max-width: 959px) and (orientation: landscape) {
+        @media screen and (min-width: 1016px), screen and (max-width: 1015px) and (orientation: landscape) {
             header#navbar { height: 74px; }
             header#navbar > a.logo {
                 top: 0;
@@ -443,7 +443,7 @@ templateEngineOverride: njk
         }
 
         /* keep the navbar visible on mobile (no slide-in menu here) */
-        @media screen and (max-width: 959px) {
+        @media screen and (max-width: 1015px) {
             header#navbar {
                 visibility: visible !important;
                 opacity: 1 !important;
@@ -451,7 +451,7 @@ templateEngineOverride: njk
                 background: transparent !important;
             }
         }
-        @media screen and (max-width: 959px) and (orientation: portrait) {
+        @media screen and (max-width: 1015px) and (orientation: portrait) {
             header#navbar { height: 54px !important; }
             header#navbar > a.logo { top: 0 !important; height: 100% !important; align-items: center; transform: translateY(var(--cf-nav-shift)); }
             [dir="ltr"] header#navbar > a.logo { padding-left: var(--cf-text-pad); }
@@ -459,7 +459,7 @@ templateEngineOverride: njk
         }
 
         /* ---- mobile: portrait art on top, text at the bottom (home page system) ---- */
-        @media screen and (max-width: 959px) and (orientation: portrait) {
+        @media screen and (max-width: 1015px) and (orientation: portrait) {
             .cf .text-container h2 { font-size: calc(var(--sec-vwu) * 9.4); }
             .cf .text-container {
                 margin-left: 0 !important;
@@ -751,15 +751,15 @@ templateEngineOverride: njk
         .cf-tag .n { font-weight: 700; font-size: calc(var(--sec-vwu) * 1.5); line-height: 1.35; }
         .cf-tag .v { font-weight: 500; font-size: calc(var(--sec-vwu) * 1.2); line-height: 1.45; }
         .cf-tag .v b { font-weight: 700; }
-        @media screen and (min-width: 960px), screen and (max-width: 959px) and (orientation: landscape) {
+        @media screen and (min-width: 1016px), screen and (max-width: 1015px) and (orientation: landscape) {
             .cf-tags-art,
             .cf-art { display: none; }
         }
-        @media screen and (max-width: 959px) and (orientation: portrait) {
+        @media screen and (max-width: 1015px) and (orientation: portrait) {
             .cf-tag .n { font-size: 3.54cqh; line-height: 1.3; }
         }
 
-        @media screen and (max-width: 959px) and (orientation: portrait) and (max-aspect-ratio: 62/100) {
+        @media screen and (max-width: 1015px) and (orientation: portrait) and (max-aspect-ratio: 62/100) {
             .cf-hero h1 { font-size: calc(var(--sec-vwu) * 9.6); }
             :root { --cf-hero-text-b: calc(var(--cf-top-base) + max(0px, calc(-1 * var(--cf-area-off))) + 72.8vw); }
         }
@@ -800,7 +800,7 @@ templateEngineOverride: njk
         .cf-fine-links a { color: #9fb2d8; text-decoration: none; }
         .cf-fine-links a:hover { color: #ffffff; }
 
-        @media screen and (max-width: 959px) and (orientation: portrait) {
+        @media screen and (max-width: 1015px) and (orientation: portrait) {
             /* padding-bottom comes from .safari-ios section.page, which a
                fit-content footer does not need */
             section.page.cf.cf-footer { height: fit-content; min-height: fit-content; padding-bottom: 0; }
@@ -935,7 +935,7 @@ templateEngineOverride: njk
             .cf-modal-panel { padding: 28px 20px; }
             .cf-form-submit { padding: 0 12px; font-size: 15px; }
         }
-        @media screen and (max-width: 959px) and (orientation: landscape) {
+        @media screen and (max-width: 1015px) and (orientation: landscape) {
             :root {
                 --cover-bg-w: calc(min((3200 / 1920) * 100vw, (3200 / 1080) * 100svh));
                 --cover-bg-h: calc(min((1800 / 1920) * 100vw, (1800 / 1080) * 100svh));
@@ -1149,7 +1149,7 @@ templateEngineOverride: njk
         <section class="page cf cf-dark cf-close" id="invest" data-section="invest">
             <div class="area">
                 <div class="cf-hero-text">
-                    <h1><span class="cf-close-l1">Get a stake</span><br><span class="cf-close-l2">in SimpleX Chat</span></h1>
+                    <h1><span class="cf-close-l1">Own a part</span><br><span class="cf-close-l2">of SimpleX Chat</span></h1>
                     <p class="cf-close-call">We are building a network that people own.<br>We invite you to invest and become part of it.</p>
                     <div class="cf-hero-cta">
                         <a class="cf-pill cf-primary" href="https://wefunder.com/simplex.chat?utm_source=landing" target="_blank" rel="noopener" aria-label="Invest on Wefunder">
@@ -1322,7 +1322,7 @@ templateEngineOverride: njk
             var hero = block.closest('section');
             var leadShort = document.querySelector('.cf-hero .lead-short');
             var logos = document.querySelectorAll('#navbar .logo img');
-            var narrow = window.matchMedia('(max-width: 959px) and (orientation: portrait)');
+            var narrow = window.matchMedia('(max-width: 1015px) and (orientation: portrait)');
             function logoBottom() {
                 var bottom = 0;
                 for (var i = 0; i < logos.length; i++) { var r = logos[i].getBoundingClientRect(); if (r.height > 0) bottom = Math.max(bottom, r.bottom); }
@@ -1358,7 +1358,8 @@ templateEngineOverride: njk
     </script>
     <script type="module">
         import { init, track } from '/js/page.js'
-        init({ domain: 'simplex.chat', endpoint: 'https://api.simplex.chat/api/event', logging: false })
+        {% include "events.js" %}
+        init(pageEvents)
         var sections = Array.prototype.slice.call(document.querySelectorAll('section.page.cf[data-section]'))
         var seen = {}
         var current = 'hero'
@@ -1381,13 +1382,6 @@ templateEngineOverride: njk
         })
         var bar = document.querySelector('#cf-cta-invest')
         if (bar) bar.addEventListener('click', function () { track('Invest', { props: { place: 'bar', section: current } }) })
-        var exits = [['#navbar .logo', 'home', 'logo'], ['.cf-fine-links a[href="/"]', 'home', 'footer'], ['.cf-fine-links a[href="/privacy"]', 'privacy', 'footer'],
-            ['.cf-simplex-link', 'chat', 'request'], ['.cf-deck-link', 'deck', 'request'], ['.cf-modal-footnote a', 'source', 'ai-threat']]
-        exits.forEach(function (x) {
-            document.querySelectorAll(x[0]).forEach(function (el) {
-                el.addEventListener('click', function () { track('Exit', { props: { to: x[1], place: x[2] } }) })
-            })
-        })
         document.addEventListener('mc:result', function (e) { track('Subscribed', { props: { status: e.detail.status } }) })
         window.addEventListener('hashchange', function () {
             var id = location.hash.slice(1)
diff --git a/website/src/css/design3-nav.css b/website/src/css/design3-nav.css
index f6f91a8567..1e3883caaa 100644
--- a/website/src/css/design3-nav.css
+++ b/website/src/css/design3-nav.css
@@ -10,7 +10,7 @@ body.change-nav-color {
     --nav-color: #001796;
 }
 
-@media screen and (min-width: 960px) {
+@media screen and (min-width: 1016px) {
     .logo {
         background: rgba(255, 255, 255, 0.05);
         backdrop-filter: blur(10px);
@@ -182,7 +182,7 @@ header#navbar ul a {
     white-space: nowrap;
 }
 
-@media screen and (min-width: 960px) {
+@media screen and (min-width: 1016px) {
     header#navbar ul .nav-link a,
     header#navbar ul .nav-link-text {
         font-size: 18px;
@@ -258,7 +258,7 @@ header#navbar ul a span svg {
     fill: #fff;
 }
 
-@media screen and (min-width: 960px) {
+@media screen and (min-width: 1016px) {
     header#navbar nav#menu>ul>li>a {
         color: var(--nav-color);
     }
@@ -366,7 +366,7 @@ header#navbar .nav-link:focus-within .sub-menu {
     fill: white;
 }
 
-@media screen and (min-width: 960px) {
+@media screen and (min-width: 1016px) {
     .flag-container>a {
         color: var(--nav-color) !important;
     }
@@ -427,7 +427,7 @@ header#navbar button.theme-switch-btn svg path {
     fill: white;
 }
 
-@media screen and (min-width: 960px) {
+@media screen and (min-width: 1016px) {
     header#navbar button.theme-switch-btn svg path {
         fill: var(--nav-color) !important;
         transition: all 0.3s ease;
@@ -497,7 +497,7 @@ button#cross-btn {
     height: auto;
 }
 
-@media (min-width: 960px) {
+@media (min-width: 1016px) {
     @media (max-width: 1050px) {
         header#navbar nav#menu .nav-link.send-file {
             display: none;
@@ -505,7 +505,7 @@ button#cross-btn {
     }
 }
 
-@media (max-width: 959px) {
+@media (max-width: 1015px) {
     #mobile-header {
         position: fixed;
         top: 0;
diff --git a/website/src/css/design3.css b/website/src/css/design3.css
index 4b645804eb..6ebbf92198 100644
--- a/website/src/css/design3.css
+++ b/website/src/css/design3.css
@@ -171,7 +171,7 @@
             #fff6e0 90%);
 }
 
-@media screen and (max-width: 959px) {
+@media screen and (max-width: 1015px) {
     :root {
         --bg-grad: linear-gradient(30deg,
                 #e8f3ff 0%,
@@ -225,7 +225,7 @@ body {
     background: #0a0f2b;
 }
 
-@media screen and (min-width: 960px) {
+@media screen and (min-width: 1016px) {
     html {
         overscroll-behavior: none;
     }
@@ -364,55 +364,104 @@ section.page .area {
 
 /* --- COVER --- */
 section.cover {
+    --cover-area-off: calc((var(--sec-h) - 100svh) / 2);
+    --cover-fade-rgb: 33, 70, 110;
     background-image: url("/img/design_3/cover-light.webp");
     background-size: var(--cover-bg-w) var(--cover-bg-h);
-    background-position: center;
+    background-position: calc(50% + var(--sec-vwu) * 8.5) center;
     background-repeat: no-repeat;
+    overflow: hidden;
     z-index: 12;
 }
 
 .dark section.cover {
+    --cover-fade-rgb: 2, 7, 29;
     background-image: url("/img/design_3/cover.webp");
 }
 
 .chrome-ios section.cover,
 .safari-ios section.cover {
-    background-position: center calc(50% - calc(110lvh - 100svh) / 2);
+    --cover-bottom-ext: calc(110lvh - 100svh);
+    background-position: calc(50% + var(--sec-vwu) * 8.5) calc(50% - calc(110lvh - 100svh) / 2);
 }
 
 .chrome-android section.cover {
-    background-position: center calc(50% - calc(100lvh - 100svh) / 2);
+    --cover-bottom-ext: calc(100lvh - 100svh);
+    background-position: calc(50% + var(--sec-vwu) * 8.5) calc(50% - calc(100lvh - 100svh) / 2);
+}
+
+.cover-art {
+    position: absolute;
+    width: var(--sec-w);
+    height: var(--sec-h);
+    z-index: 1;
+    pointer-events: none;
+}
+
+.cover-phone {
+    position: absolute;
+    right: calc(var(--sec-vwu) * 4);
+    bottom: calc(var(--sec-vhu) * -55.56);
+    height: calc(var(--sec-vhu) * 129.96);
+    width: auto;
+}
+
+.cover-fade {
+    position: absolute;
+    right: calc(var(--sec-vwu) * 4);
+    width: calc(var(--sec-vhu) * 129.96 * 0.4914);
+    bottom: var(--cover-area-off);
+    height: calc(var(--sec-vhu) * 38);
+    background: linear-gradient(to top, rgb(var(--cover-fade-rgb)) 22%, rgba(var(--cover-fade-rgb), .8) 52%, rgba(var(--cover-fade-rgb), 0) 100%);
 }
 
 section.cover div.content {
     display: flex;
     flex-direction: column;
     justify-content: center;
-    align-items: center;
-    text-align: center;
+    align-items: flex-start;
+    text-align: start;
     gap: calc(var(--sec-vhu) * 3.5);
     width: var(--sec-w);
     height: var(--sec-h);
+    padding-left: calc(var(--sec-vwu) * 4);
+}
+
+@media (min-width: 1016px), (max-width: 1015px) and (orientation: landscape) {
+    [dir="rtl"] section.cover div.content {
+        padding-left: 0;
+        padding-right: calc(var(--sec-vwu) * 4);
+    }
+
+    [dir="rtl"] .cover-phone,
+    [dir="rtl"] .cover-fade {
+        left: calc(var(--sec-vwu) * 4);
+        right: auto;
+    }
+
+    [dir="rtl"] .cover-stats {
+        left: 30px;
+        right: auto;
+    }
 }
 
 section.cover div.content h1 {
     font-family: "GT-Walsheim", sans-serif;
     font-weight: 700;
-    font-size: calc(var(--sec-vwu) * 11.7);
+    font-size: calc(var(--sec-vwu) * 10);
     line-height: 0.9;
     letter-spacing: -0.025em;
     color: #ffffff;
-    text-align: center;
 }
 
 section.cover div.content h1 .small {
-    font-size: calc(var(--sec-vwu) * 8);
+    font-size: calc(var(--sec-vwu) * 6.85);
     line-height: 1;
     margin-bottom: -10px;
 }
 
 section.cover div.content h1 .medium {
-    font-size: calc(var(--sec-vwu) * 10);
+    font-size: calc(var(--sec-vwu) * 8.55);
     line-height: 1;
     margin-bottom: -10px;
 }
@@ -431,7 +480,12 @@ section.cover div.content p {
     font-size: calc(var(--sec-vwu) * 2.14);
     align-items: center;
     color: #ffffff;
-    max-width: calc(var(--sec-vwu) * 53);
+    max-width: calc(var(--sec-vwu) * 55);
+    text-wrap: balance;
+}
+
+section.cover div.content p .nowrap {
+    white-space: nowrap;
 }
 
 section.cover div.content p.invest {
@@ -444,39 +498,65 @@ section.cover div.content p.invest a {
     white-space: nowrap;
 }
 
-.publications-btns {
+html:not(.dark) section.cover div.content p {
+    font-weight: 300;
+    max-width: calc(var(--sec-vwu) * 55.2);
+}
+
+html:not(.dark) section.cover div.content p.invest {
+    font-weight: 400;
+}
+
+html:not(.dark) section.cover div.content p.invest a {
+    font-weight: 600;
+}
+
+html:not(.dark) section.cover div.content .gradient-text {
+    background: linear-gradient(90deg,
+            #ffb55d 0%,
+            #fff494 50%,
+            #fbffdd 100%);
+    -webkit-background-clip: text;
+    background-clip: text;
+}
+
+.cover-stats {
     position: absolute;
-    bottom: 24px;
-    display: flex;
-    flex-wrap: wrap;
-    align-items: center;
-    justify-content: center;
-    gap: 12px;
-}
-
-[dir="ltr"] .publications-btns {
-    left: 30px;
-}
-
-[dir="rtl"] .publications-btns {
     right: 30px;
+    bottom: calc(74px + var(--cover-bottom-ext, 0px));
+    display: flex;
+    align-items: center;
+    gap: 48px;
 }
 
-.publications-btns img {
-    width: 32px;
+.cover-stat {
+    display: flex;
+    align-items: center;
+    gap: 13px;
 }
 
-.publications-btns img.kuketz {
-    width: 38px;
+.cover-stat b {
+    font-family: "Manrope", sans-serif;
+    font-weight: 700;
+    font-size: 37px;
+    line-height: 1.1;
+    color: #ffffff;
 }
 
-.publications-btns img.whonix {
-    width: 30px;
+.cover-stat span {
+    font-family: "Manrope", sans-serif;
+    font-weight: 400;
+    font-size: 18px;
+    color: #ffffff;
+}
+
+.dark .cover-stat span {
+    color: #dfeaff;
 }
 
 .security-btns {
     position: absolute;
-    bottom: 24px;
+    bottom: calc(24px + var(--cover-bottom-ext, 0px));
     display: flex;
     flex-wrap: wrap;
     align-items: center;
@@ -485,13 +565,11 @@ section.cover div.content p.invest a {
 }
 
 [dir="ltr"] .security-btns {
-    left: 0;
-    transform: translateX(calc((100vw / 2) - 50%));
+    left: 30px;
 }
 
 [dir="rtl"] .security-btns {
-    right: 0;
-    transform: translateX(calc(-1 * ((100vw / 2) - 50%)));
+    right: 30px;
 }
 
 .security-btns img {
@@ -514,26 +592,9 @@ section.cover div.content p.invest a {
     text-align: right;
 }
 
-@media screen and (max-width: 1279px) {
-    .publications-btns {
-        display: none;
-        visibility: hidden;
-    }
-
-    [dir="ltr"] .security-btns {
-        transform: translateX(0);
-        left: 16px;
-    }
-
-    [dir="rtl"] .security-btns {
-        transform: translateX(0);
-        right: 16px;
-    }
-}
-
 .socials {
     position: absolute;
-    bottom: 22px;
+    bottom: calc(22px + var(--cover-bottom-ext, 0px));
     display: flex;
     align-items: center;
     justify-content: center;
@@ -541,7 +602,7 @@ section.cover div.content p.invest a {
     flex-wrap: wrap;
 }
 
-@media (min-width: 960px) {
+@media (min-width: 1016px) {
     .socials .desktop-app-btn,
     .socials .apple-store-btn,
     .socials .google-play-btn {
@@ -603,14 +664,7 @@ section.cover div.content p.invest a {
     gap: 6px;
 }
 
-@media screen and (max-width: 959px) {
-
-    .publications-btns,
-    .security-btns,
-    .socials {
-        position: static;
-    }
-
+@media screen and (max-width: 1015px) and (orientation: portrait) {
     .socials {
         min-height: 42px;
     }
@@ -722,7 +776,7 @@ main .section-bg {
     background-image: url("/img/design_3/section-5-desktop.webp");
 }
 
-@media screen and (max-width: 959px) {
+@media screen and (max-width: 1015px) {
     .page-2 {
         background-image: url("/img/design_3/section-2-mobile-light.webp");
         background-size: auto calc(var(--cover-bg-h) * 0.84);
@@ -967,41 +1021,154 @@ main .section-bg {
     display: none;
 }
 
-@media (max-width: 959px) {
-    section.cover div.content {
-        gap: calc(var(--sec-vhu) * 2.5);
-        transform: translateY(calc(var(--sec-vhu) * 3));
+@media (max-width: 1015px) and (orientation: portrait) {
+    section.cover {
+        --cover-crest: 10px;
+        --cover-text-top: calc(var(--cover-crest) + var(--cover-bg-w) * 0.0125);
+        --cover-text-b: calc(var(--cover-text-top) + var(--cover-bg-w) * 0.19);
+        --cover-phone-w: 82vw;
+        --cover-phone-top: calc(var(--cover-text-b) + 16px + var(--cover-area-off));
+        --cover-cta-bottom: max(12px, env(safe-area-inset-bottom, 0px));
+        --cover-audits-top: calc(100svh - var(--cover-cta-bottom) - 36px);
+        --cover-socials-top: calc(var(--cover-audits-top) - 66px);
+        --cover-row-gap: clamp(14px, 4.5vw, 20px);
+        --cover-row-start: calc(50% - (var(--cover-socials-w, 165px) + var(--cover-row-gap) + var(--cover-stats-w, 141px)) / 2);
+        --cover-fade-ext: max(0px, calc(110lvh - 100svh));
+        --cover-fade-dyn: max(0px, calc(110lvh - 100dvh));
+        --cover-fade-base: calc(var(--cover-fade-dyn) + var(--cover-cta-bottom) + 114px);
+        --cover-fade-ramp: 48px;
     }
 
-    .publications-btns,
-    .security-btns,
-    .socials {
-        margin-top: calc(var(--sec-vhu) * 2);
+    section.cover,
+    .chrome-ios section.cover,
+    .safari-ios section.cover,
+    .chrome-android section.cover {
+        background-position: 50% calc(var(--cover-crest) - var(--cover-bg-h) * 0.2678);
+    }
+
+    .cover-phone {
+        left: 50%;
+        right: auto;
+        transform: translateX(-50%);
+        top: var(--cover-phone-top);
+        bottom: auto;
+        width: var(--cover-phone-w);
+        height: auto;
+    }
+
+    .cover-fade {
+        left: 50%;
+        right: auto;
+        transform: translateX(-50%);
+        width: 100vw;
+        bottom: calc(var(--cover-area-off) - var(--cover-fade-ext));
+        height: calc(var(--cover-fade-base) + var(--cover-fade-ramp));
+        background: linear-gradient(to top, rgba(var(--cover-fade-rgb), .9) var(--cover-fade-base), rgba(var(--cover-fade-rgb), 0) 100%);
+    }
+
+    [dir="ltr"] .socials {
+        top: var(--cover-socials-top);
+        bottom: auto;
+        left: var(--cover-row-start);
+        right: auto;
+    }
+
+    [dir="rtl"] .socials {
+        top: var(--cover-socials-top);
+        bottom: auto;
+        left: auto;
+        right: var(--cover-row-start);
+    }
+
+    [dir="ltr"] .cover-stats {
+        top: var(--cover-socials-top);
+        bottom: auto;
+        left: calc(var(--cover-row-start) + var(--cover-socials-w, 165px) + var(--cover-row-gap));
+        right: auto;
+    }
+
+    [dir="rtl"] .cover-stats {
+        top: var(--cover-socials-top);
+        bottom: auto;
+        left: auto;
+        right: calc(var(--cover-row-start) + var(--cover-socials-w, 165px) + var(--cover-row-gap));
+    }
+
+    [dir="ltr"] .security-btns,
+    [dir="rtl"] .security-btns {
+        top: var(--cover-audits-top);
+        bottom: auto;
+        left: 0;
+        right: 0;
+    }
+}
+
+@media (max-width: 1015px) and (orientation: landscape) {
+    section.cover {
+        --cover-bg-w: calc(min((3200 / 1920) * 100vw, (3200 / 1080) * 100svh));
+        --cover-bg-h: calc(min((1800 / 1920) * 100vw, (1800 / 1080) * 100svh));
+        --sec-w: calc(min(100vw, (1920 / 1080) * 100svh));
+        --sec-h: calc(min((1080 / 1920) * 100vw, 100svh));
+        --sec-vwu: calc(var(--sec-w) / 100);
+        --sec-vhu: calc(var(--sec-h) / 100);
+    }
+}
+
+@media (max-width: 1015px) and (orientation: landscape) and (max-height: 500px) {
+    section.cover div.content h1 br {
+        display: none;
+    }
+
+    .cover-stats {
+        gap: 24px;
+    }
+
+    .cover-stat {
+        gap: 8px;
+    }
+
+    .cover-stat b {
+        font-size: 24px;
+    }
+
+    .cover-stat span {
+        font-size: 13px;
+    }
+}
+
+@media (max-width: 1015px) and (orientation: portrait) {
+    section.cover div.content {
+        justify-content: flex-start;
+        align-items: center;
+        text-align: center;
+        gap: calc(var(--sec-vwu) * 3);
+        margin-top: min(0px, calc(var(--cover-text-top) + var(--cover-area-off)));
+        padding: max(0px, calc(var(--cover-text-top) + var(--cover-area-off))) 21.6px 0;
     }
 
     section.cover div.content h1 {
         line-height: 0.85;
         font-weight: 700;
-        font-size: calc(var(--sec-vwu) * 30);
+        font-size: calc(var(--sec-vwu) * 24.75);
     }
 
     section.cover div.content h1 .small {
-        font-size: calc(var(--sec-vwu) * 16);
+        font-size: calc(var(--sec-vwu) * 13.2);
     }
 
     section.cover div.content h1 .medium {
-        font-size: calc(var(--sec-vwu) * 24);
+        font-size: calc(var(--sec-vwu) * 19.8);
     }
 
     section.cover div.content h2 {
         font-weight: 500;
-        font-size: calc(var(--sec-vwu) * 12.85);
+        font-size: calc(var(--sec-vwu) * 10.6);
     }
 
     section.cover div.content p {
         font-weight: 400;
-        font-size: calc(var(--sec-vwu) * 5.5);
-        max-width: calc(var(--sec-vwu) * 93);
+        font-size: calc(var(--sec-vwu) * 4.1);
+        max-width: none;
     }
 
     section.cover div.content p.invest {
@@ -1012,6 +1179,40 @@ main .section-bg {
         font-weight: 600;
     }
 
+    html:not(.dark) section.cover div.content p,
+    html:not(.dark) section.cover div.content p.invest {
+        font-weight: 500;
+        max-width: none;
+    }
+
+    html:not(.dark) section.cover div.content p.invest a {
+        font-weight: 700;
+    }
+
+    .cover-stats {
+        height: 42px;
+        gap: clamp(12px, 4vw, 16px);
+    }
+
+    .cover-stat {
+        display: block;
+        text-align: start;
+    }
+
+    .cover-stat b {
+        display: block;
+        font-size: clamp(19px, 5.6vw, 22px);
+        line-height: 1.05;
+    }
+
+    .cover-stat span {
+        display: block;
+        font-size: clamp(10px, 2.8vw, 11px);
+        line-height: 1.25;
+    }
+}
+
+@media (max-width: 1015px) {
     /* --- MAIN SECTIONS --- */
     .page .text-container {
         justify-content: flex-end;
@@ -1108,7 +1309,7 @@ main .section-bg {
     border-radius: calc(var(--sec-vhu) * 1.8);
 }
 
-@media screen and (max-width: 959px) {
+@media screen and (max-width: 1015px) {
     .page-6 .group-images {
         width: 100%;
         height: 10%;
@@ -1321,7 +1522,7 @@ main .section-bg {
     margin: calc(var(--sec-vhu) * 2);
 }
 
-@media screen and (max-width: 959px) {
+@media screen and (max-width: 1015px) {
     .page-6 .group-images>a.group-image:nth-child(1) {
         --c: 3;
         --r: 1;
@@ -1525,7 +1726,7 @@ section.page.footer {
     min-height: fit-content;
 }
 
-@media screen and (max-width: 959px) {
+@media screen and (max-width: 1015px) {
     section.page.footer {
         height: 100lvh;
         min-height: 100lvh;
@@ -1560,7 +1761,7 @@ section.page.footer {
     }
 }
 
-@media (min-width: 960px) {
+@media (min-width: 1016px) {
 
     .footer .container-md,
     .footer .container-sm,
diff --git a/website/src/css/downloads.css b/website/src/css/downloads.css
new file mode 100644
index 0000000000..1aecf034bf
--- /dev/null
+++ b/website/src/css/downloads.css
@@ -0,0 +1,474 @@
+.dl-page {
+    --dl-text: #000000;
+    --dl-muted: #3f484b;
+    --dl-heading: #023789;
+    --dl-link: #0053d0;
+    --dl-card: #ffffff;
+    --dl-card-border: #d6e8fb;
+    --dl-hero-bg: #c4e2fc;
+    --dl-page-bg: #f3faff;
+    --dl-hero-image: url("/img/design_3/cover-light.webp");
+    color: var(--dl-text);
+    font-family: "Manrope", sans-serif;
+}
+
+.dark .dl-page {
+    --dl-text: #ffffff;
+    --dl-muted: #c4d0ea;
+    --dl-heading: #ffffff;
+    --dl-link: #70f0f9;
+    --dl-card: #071c46;
+    --dl-card-border: rgba(255, 255, 255, 0.1);
+    --dl-hero-bg: #02071d;
+    --dl-page-bg: #000832;
+    --dl-hero-image: url("/img/design_3/cover.webp");
+}
+
+.dl-page a {
+    color: var(--dl-link);
+}
+
+.dl-page a:hover {
+    text-decoration: underline;
+    text-underline-offset: 3px;
+}
+
+.dl-wrap {
+    max-width: 1360px;
+    margin: 0 auto;
+    padding-left: 56px;
+    padding-right: 56px;
+}
+
+.dl-hero {
+    --dl-bg-w: min(166.667vw, 296.296vh);
+    --dl-bg-h: min(93.75vw, 166.667vh);
+    --dl-pad: 56px;
+    --dl-h1: 60px;
+    position: relative;
+    overflow: hidden;
+    display: flex;
+    flex-direction: column;
+    justify-content: space-between;
+    gap: var(--dl-pad);
+    min-height: min(100svh, 1080px);
+    --dl-crest: calc(132px + 1.5 * var(--dl-pad) + var(--dl-h1));
+    padding: calc(54px + var(--dl-pad)) 0 22px;
+    background-color: var(--dl-hero-bg);
+    background-image: var(--dl-hero-image);
+    background-size: var(--dl-bg-w) var(--dl-bg-h);
+    background-position: 50% calc(var(--dl-crest) - var(--dl-bg-h) * 0.2678);
+    background-repeat: no-repeat;
+}
+
+.dl-hero::after {
+    content: "";
+    position: absolute;
+    left: 0;
+    right: 0;
+    bottom: 0;
+    height: 46%;
+    background: linear-gradient(to bottom, transparent 0%, var(--dl-page-bg) 62%);
+}
+
+.dl-hero > * {
+    position: relative;
+    z-index: 1;
+}
+
+.dl-intro {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    gap: 18px;
+    text-align: center;
+}
+
+.dl-intro h1 {
+    font-family: "GT-Walsheim", sans-serif;
+    font-weight: 700;
+    font-size: var(--dl-h1);
+    line-height: 1;
+    letter-spacing: -0.025em;
+    color: var(--dl-heading);
+}
+
+.dl-lead {
+    font-size: 20px;
+    line-height: 1.5;
+    color: var(--dl-heading);
+}
+
+.dl-nowrap {
+    white-space: nowrap;
+}
+
+.dl-br-mobile,
+.dl-lead-phone,
+.dl-page[data-device="iphone"] .dl-lead-device,
+.dl-page[data-device="android"] .dl-lead-device {
+    display: none;
+}
+
+.dl-page[data-device="iphone"] .dl-lead-phone,
+.dl-page[data-device="android"] .dl-lead-phone {
+    display: inline;
+}
+
+.dl-devices {
+    --dl-gap: clamp(28px, 4vw, 56px);
+    --dl-shot-h: min(calc((100vw - 112px - 2 * var(--dl-gap)) / 2.44), calc(clamp(728px, 100svh, 1080px) - 3 * var(--dl-pad) - var(--dl-h1) - 309px));
+    display: flex;
+    justify-content: center;
+    align-items: flex-start;
+    gap: var(--dl-gap);
+    max-width: none;
+}
+
+.dl-device {
+    flex-shrink: 0;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    gap: 12px;
+    text-align: center;
+}
+
+.dl-shot {
+    margin-bottom: 10px;
+}
+
+.dl-shot img {
+    vertical-align: top;
+    height: var(--dl-shot-h);
+    width: auto;
+}
+
+.dl-shot-desktop {
+    border-radius: 12px;
+    overflow: hidden;
+    box-shadow: 0 30px 70px rgba(2, 7, 29, 0.35);
+    border: 1px solid rgba(255, 255, 255, 0.2);
+}
+
+.dl-shot-phone {
+    filter: drop-shadow(0 24px 36px rgba(2, 7, 29, 0.4));
+}
+
+.dl-primary {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    height: 56px;
+    padding: 0 30px;
+    border-radius: 999px;
+    background: linear-gradient(90deg, #019bfe 0%, #2e3fa0 100%);
+    color: #ffffff !important;
+    font-size: 18px;
+    font-weight: 600;
+    text-decoration: none !important;
+}
+
+.dl-primary:hover {
+    filter: brightness(1.08);
+}
+
+.dl-badge img {
+    height: 48px;
+    width: auto;
+    border: 1px solid #4f4f4f;
+    border-radius: 9px;
+}
+
+.dl-alt {
+    font-size: 15px;
+    color: var(--dl-muted);
+}
+
+.dl-os {
+    display: none;
+}
+
+.dl-page[data-os="mac"] a.dl-os-mac,
+.dl-page[data-os="windows"] a.dl-os-windows,
+.dl-page[data-os="linux"] a.dl-os-linux {
+    display: inline-flex;
+}
+
+.dl-page[data-os="mac"] p.dl-os-mac,
+.dl-page[data-os="windows"] p.dl-os-windows,
+.dl-page[data-os="linux"] p.dl-os-linux {
+    display: block;
+}
+
+.dl-other {
+    display: none;
+    margin-top: 28px;
+    text-align: center;
+    font-size: 15px;
+    font-weight: 600;
+}
+
+.dl-proof {
+    display: flex;
+    flex-wrap: wrap;
+    justify-content: center;
+    align-items: center;
+    gap: 24px 56px;
+}
+
+.dl-stat {
+    display: flex;
+    align-items: baseline;
+    gap: 12px;
+}
+
+.dl-stat b {
+    font-size: 36px;
+    line-height: 1.1;
+    font-weight: 700;
+    color: var(--dl-heading);
+}
+
+.dl-stat span {
+    font-size: 17px;
+    color: var(--dl-muted);
+}
+
+.dl-audits {
+    display: flex;
+    align-items: center;
+    gap: 12px;
+}
+
+.dl-audits img {
+    height: 36px;
+    width: auto;
+}
+
+.dl-audits .box-btn {
+    color: #000000;
+    text-decoration: none;
+}
+
+.dl-audits p {
+    font-size: 14px;
+    font-weight: 300;
+    line-height: 1.2;
+    text-align: start;
+}
+
+.dl-section {
+    padding-top: 112px;
+}
+
+.dl-section h2 {
+    margin-bottom: 36px;
+    font-family: "GT-Walsheim", sans-serif;
+    font-weight: 500;
+    font-size: 48px;
+    letter-spacing: -0.02em;
+    color: var(--dl-heading);
+}
+
+.dl-cards {
+    display: grid;
+    grid-template-columns: repeat(3, minmax(0, 1fr));
+    gap: 24px;
+}
+
+.dl-page[data-device="iphone"] .dl-card-phone,
+.dl-page[data-device="android"] .dl-card-phone {
+    order: -1;
+}
+
+.dl-cards article {
+    display: flex;
+    flex-direction: column;
+    gap: 16px;
+    padding: 30px;
+    border-radius: 20px;
+    background: var(--dl-card);
+    border: 1px solid var(--dl-card-border);
+}
+
+.dl-cards h3 {
+    font-family: "GT-Walsheim", sans-serif;
+    font-weight: 500;
+    font-size: 26px;
+    color: var(--dl-heading);
+}
+
+.dl-cards ul {
+    display: flex;
+    flex-direction: column;
+    gap: 10px;
+    list-style: none;
+    padding: 0;
+    font-size: 16px;
+}
+
+.dl-cards p {
+    font-size: 15px;
+    line-height: 1.5;
+    color: var(--dl-muted);
+}
+
+.dl-advanced {
+    padding-bottom: 96px;
+}
+
+.dl-advanced h2 {
+    font-size: 28px;
+    margin-bottom: 18px;
+}
+
+.dl-advanced p {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 12px 28px;
+    font-size: 17px;
+}
+
+@media (max-height: 1023px) {
+    .dl-hero {
+        --dl-h1: 48px;
+    }
+}
+
+@media (max-width: 1015px) and (orientation: portrait) {
+    .dl-hero {
+        --dl-bg-w: min(516.13vw, 296.296vh);
+        --dl-bg-h: min(290.323vw, 166.667vh);
+    }
+}
+
+@media (max-width: 1015px) {
+    .dl-wrap {
+        padding-left: 24px;
+        padding-right: 24px;
+    }
+
+    .dl-hero {
+        --dl-crest: 232px;
+        display: block;
+        min-height: 0;
+        padding: 100px 0 48px;
+    }
+
+    .dl-intro h1 {
+        font-size: min(46px, 9.6vw);
+    }
+
+    .dl-lead {
+        font-size: 16px;
+    }
+
+    .dl-devices {
+        --dl-shot-h: 440px;
+        flex-direction: column;
+        align-items: center;
+        margin-top: 56px;
+        gap: 48px;
+    }
+
+    .dl-page[data-device] .dl-device:not(.dl-detected) {
+        display: none;
+    }
+
+    .dl-br-mobile {
+        display: inline;
+    }
+
+    .dl-lead-intro {
+        display: none;
+    }
+
+    html:not(.dark) .dl-hero .dl-alt,
+    html:not(.dark) .dl-hero .dl-alt a {
+        color: #ffffff;
+        text-shadow: 0 1px 4px rgba(2, 7, 29, 0.7);
+    }
+
+    .dl-shot {
+        order: 1;
+        margin: 20px 0 0;
+    }
+
+    .dl-shot-desktop {
+        width: 100%;
+        max-width: 560px;
+    }
+
+    .dl-shot-desktop img {
+        width: 100%;
+        height: auto;
+    }
+
+    .dl-shot-phone {
+        width: min(80vw, 360px);
+        aspect-ratio: 20 / 21;
+        overflow: hidden;
+        filter: none;
+        -webkit-mask-image: linear-gradient(to bottom, #000 60%, transparent 100%);
+        mask-image: linear-gradient(to bottom, #000 60%, transparent 100%);
+    }
+
+    .dl-shot-phone img {
+        width: 100%;
+        height: auto;
+    }
+
+    .dl-badge img {
+        height: 54px;
+    }
+
+    .dl-proof {
+        gap: 20px 36px;
+        margin-top: 36px;
+    }
+
+    .dl-stat {
+        flex-direction: column;
+        align-items: center;
+        gap: 0;
+    }
+
+    .dl-stat b {
+        font-size: 28px;
+        line-height: 1.5;
+    }
+
+    .dl-stat span {
+        font-size: 14px;
+    }
+
+    .dl-other {
+        display: block;
+    }
+
+    .dl-section {
+        padding-top: 64px;
+    }
+
+    .dl-section h2 {
+        font-size: 32px;
+        margin-bottom: 24px;
+    }
+
+    .dl-cards {
+        grid-template-columns: minmax(0, 1fr);
+    }
+
+    .dl-cards article {
+        padding: 22px;
+    }
+
+    .dl-advanced {
+        padding-bottom: 64px;
+    }
+
+    .dl-advanced p {
+        flex-direction: column;
+    }
+}
diff --git a/website/src/css/livestream.css b/website/src/css/livestream.css
index 831f4a0569..bb8ab8d373 100644
--- a/website/src/css/livestream.css
+++ b/website/src/css/livestream.css
@@ -126,7 +126,7 @@ main .section-bg {
     color: #000000;
 }
 
-@media screen and (max-width: 959px) {
+@media screen and (max-width: 1015px) {
     .livestream {
         background-image: url("/img/design_3/section-4-mobile-light.webp");
         background-size: auto calc(var(--cover-bg-h) * 0.78);
diff --git a/website/src/directory.html b/website/src/directory.html
index 08bb047aa5..3505cccc4b 100644
--- a/website/src/directory.html
+++ b/website/src/directory.html
@@ -264,10 +264,10 @@ active_directory: true
 
 <section class="py-10 px-5 mt-[66px] dark:text-white">
   <div class="container">
-    <h1 class="text-[38px] text-center font-bold text-active-blue mb-8">SimpleX Directory</h1>
+    <h1 class="text-[38px] md:text-[45px] text-center font-bold text-active-blue mb-8">SimpleX Directory</h1>
     <p>Welcome to the selected users' communities that you can join via <a href="/downloads">SimpleX Chat
         app</a>.</p>
-    <p>SimpleX Directory is also available as a <a href="https://smp4.simplex.im/a#lXUjJW5vHYQzoLYgmi8GbxkGP41_kjefFvBrdwg-0Ok" target="_blank">SimpleX chat bot</a>.</p>
+    <p>SimpleX Directory is also available as a <a href="https://smp4.simplex.im/a#lXUjJW5vHYQzoLYgmi8GbxkGP41_kjefFvBrdwg-0Ok" target="_blank" rel="noopener">SimpleX chat bot</a>.</p>
     <p>Read about <a href="/docs/directory.html">how to add</a> your community.</p>
     <template data-markdown><p>All listed groups and channels in JSON, with names, descriptions, member counts, join links and activity times: <a href="https://directory.simplex.chat/data/listing.json">directory.simplex.chat/data/listing.json</a>.</p></template>
     <div class="search-container">
diff --git a/website/src/downloads.html b/website/src/downloads.html
new file mode 100644
index 0000000000..7c12178af9
--- /dev/null
+++ b/website/src/downloads.html
@@ -0,0 +1,74 @@
+---
+layout: layouts/main.html
+title: "Download SimpleX Chat for iPhone, Android, Mac, Windows and Linux"
+description: "Get SimpleX Chat – the only messaging network without any user identifiers. Free and open-source apps for iPhone, Android, Mac, Windows and Linux."
+templateEngineOverride: njk
+noGlossary: true
+---
+{% set lang = page.url | getlang %}
+{% set release = "https://github.com/simplex-chat/simplex-chat/releases/latest/download/" %}
+<link rel="stylesheet" href="/css/downloads.css">
+
+<div class="dl-page" id="dl-page" data-os="mac">
+{% include "downloads_hero.html" %}
+
+<section class="dl-wrap dl-section" id="dl-all">
+    <h2>{{ "downloads-all-h2" | i18n({}, lang) }}</h2>
+    <div class="dl-cards">
+        <article>
+            <h3>{{ "downloads-desktop" | i18n({}, lang) }}</h3>
+            <ul>
+                <li>Windows: <a href="{{ release }}simplex-desktop-windows-x86_64.msi">x86_64</a></li>
+                <li>macOS: <a href="{{ release }}simplex-desktop-macos-aarch64.dmg">Apple Silicon</a> · <a href="{{ release }}simplex-desktop-macos-x86_64.dmg">Intel</a></li>
+                <li>Linux AppImage: <a href="{{ release }}simplex-desktop-x86_64.AppImage">x86_64</a> · <a href="{{ release }}simplex-desktop-aarch64.AppImage">aarch64</a></li>
+                <li>Linux: <a href="https://flathub.org/apps/chat.simplex.simplex" target="_blank" rel="noopener">Flatpak</a></li>
+                <li>Ubuntu 22.04, Debian: <a href="{{ release }}simplex-desktop-ubuntu-22_04-x86_64.deb">x86_64</a> · <a href="{{ release }}simplex-desktop-ubuntu-22_04-aarch64.deb">aarch64</a></li>
+                <li>Ubuntu 24.04: <a href="{{ release }}simplex-desktop-ubuntu-24_04-x86_64.deb">x86_64</a> · <a href="{{ release }}simplex-desktop-ubuntu-24_04-aarch64.deb">aarch64</a></li>
+            </ul>
+            <p>{{ "downloads-link-desktop" | i18n({}, lang) }}</p>
+        </article>
+        <article>
+            <h3>{{ "downloads-terminal" | i18n({}, lang) }}</h3>
+            <ul>
+                <li>Windows: <a href="{{ release }}simplex-chat-windows-x86-64">x86_64</a></li>
+                <li>macOS: <a href="{{ release }}simplex-chat-macos-aarch64">Apple Silicon</a> · <a href="{{ release }}simplex-chat-macos-x86-64">Intel</a></li>
+                <li>Ubuntu 22.04: <a href="{{ release }}simplex-chat-ubuntu-22_04-x86_64">x86_64</a> · <a href="{{ release }}simplex-chat-ubuntu-22_04-aarch64">aarch64</a></li>
+                <li>Ubuntu 24.04: <a href="{{ release }}simplex-chat-ubuntu-24_04-x86_64">x86_64</a> · <a href="{{ release }}simplex-chat-ubuntu-24_04-aarch64">aarch64</a></li>
+            </ul>
+            <p>{{ "downloads-terminal-desc" | i18n({}, lang) }} <a href="/docs/cli.html">{{ "downloads-terminal-guide" | i18n({}, lang) }}</a></p>
+        </article>
+        <article class="dl-card-phone">
+            <h3>{{ "downloads-phone" | i18n({}, lang) }}</h3>
+            <ul>
+                <li>iOS: <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener">App Store</a> · <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank" rel="noopener">TestFlight</a></li>
+                <li>Android: <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener">Google Play</a> · <a href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid">F-Droid</a></li>
+                <li>Android APK: <a href="{{ release }}simplex-aarch64.apk">aarch64</a> · <a href="{{ release }}simplex-armv7a.apk">armv7</a></li>
+            </ul>
+        </article>
+    </div>
+</section>
+
+<section class="dl-wrap dl-section dl-advanced">
+    <h2>{{ "downloads-advanced-h2" | i18n({}, lang) }}</h2>
+    <p>
+        <a href="https://github.com/simplex-chat/simplex-chat/releases" target="_blank" rel="noopener">{{ "downloads-github" | i18n({}, lang) }}</a>
+        <a href="https://git.simplex.chat/simplex-chat/simplex-chat/releases" target="_blank" rel="noopener">{{ "downloads-mirror" | i18n({}, lang) }}</a>
+        <a href="/reproduce/">{{ "docs-dropdown-15" | i18n({}, lang) }}</a>
+        <a href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid">{{ "downloads-fdroid-repo" | i18n({}, lang) }}</a>
+    </p>
+</section>
+</div>
+
+<script>
+    (function () {
+        var ua = navigator.userAgent;
+        var platform = (navigator.userAgentData && navigator.userAgentData.platform) || navigator.platform || "";
+        var page = document.getElementById("dl-page");
+        var device = "desktop";
+        if (/Android|CrOS/i.test(ua)) device = "android";
+        else if (/iPhone|iPad|iPod/i.test(ua) || (/Mac/i.test(platform) && navigator.maxTouchPoints > 1)) device = "iphone";
+        else page.dataset.os = /Win/i.test(platform) ? "windows" : /Linux|X11/i.test(platform) ? "linux" : "mac";
+        page.dataset.device = device;
+        page.querySelector('.dl-device[data-device="' + device + '"]').classList.add("dl-detected");
+    })();
+</script>
diff --git a/website/src/fdroid.html b/website/src/fdroid.html
index ff56b9cc95..c3441d9680 100644
--- a/website/src/fdroid.html
+++ b/website/src/fdroid.html
@@ -38,6 +38,11 @@ templateEngineOverride: njk
                                 9F 35 8F F2 84 D1 F7 16 56 A2 BF AF 0E 00 5D EA E6 AA 14 14 37 20 E0 89 F1 1F F2 DD CF EB 01 BA
                             </blockquote>
                         </p>
+                        <p class="mt-6">
+                            {{ "f-droid-page-apk-text" | i18n({}, lang ) | safe }}
+                            <a class="text-primary-light dark:text-primary-dark underline underline-offset-2" href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank" rel="noopener">aarch64</a>,
+                            <a class="text-primary-light dark:text-primary-dark underline underline-offset-2" href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-armv7a.apk" target="_blank" rel="noopener">armv7</a>
+                        </p>
                     </div>
 
                     <div class="hidden sm:block max-w-[280px] md:max-w-[220px] lg:max-w-[240px]">
@@ -48,7 +53,7 @@ templateEngineOverride: njk
 
             <div class="w-full lg:w-2/5">
                 <h3 class="text-grey-black dark:text-white text-[24px] lg:text-[32px] font-bold mb-6">{{ "f-droid-org-repo" | i18n({}, lang ) | safe }}</h3>
-                <a class="inline-block" href="https://f-droid.org/en/packages/chat.simplex.app/" target="_blank" title="SimpleX F-Droid Repository"><img class="h-[40px] w-auto" src="/img/new/f_droid.svg" /></a>
+                <a class="inline-block" href="https://f-droid.org/en/packages/chat.simplex.app/" target="_blank" rel="noopener" title="SimpleX F-Droid Repository"><img class="h-[40px] w-auto" src="/img/new/f_droid.svg" /></a>
                 <p class="mb-2 text-lg font-medium mt-6">{{ "stable-versions-built-by-f-droid-org" | i18n({}, lang ) | safe }}</p>
                 <p class="mb-2">{{ "releases-to-this-repo-are-done-1-2-days-later" | i18n({}, lang ) | safe }}.</p>
                 <p class="mb-2">{{ "f-droid-page-f-droid-org-repo-section-text" | i18n({}, lang ) | safe }}</p>
diff --git a/website/src/file.html b/website/src/file.html
index c6174ce33b..e5a25b446b 100644
--- a/website/src/file.html
+++ b/website/src/file.html
@@ -4,6 +4,7 @@ title: "SimpleX File Transfer"
 description: "Send files securely with end-to-end encryption"
 templateEngineOverride: njk
 active_file: true
+noEvents: true
 ---
 {% set lang = page.url | getlang %}
 {% from "components/macro.njk" import overlay %}
@@ -229,11 +230,11 @@ active_file: true
       {{ "file-cta-subheading" | i18n({}, lang) | safe }}
     </p>
     <div class="flex items-center justify-center gap-4 flex-wrap">
-      <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" /></a>
-      <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" /></a>
+      <a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apple_store.svg" /></a>
+      <a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/google_play.svg" /></a>
       <a href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid"><img class="h-[40px] w-auto" src="/img/new/f_droid.svg" /></a>
-      <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank"><img class="h-[40px] w-auto" src="/img/new/testflight.png" /></a>
-      <a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank"><img class="h-[40px] w-auto" src="/img/new/apk_icon.png" /></a>
+      <a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/testflight.png" /></a>
+      <a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank" rel="noopener"><img class="h-[40px] w-auto" src="/img/new/apk_icon.png" /></a>
     </div>
   </div>
 </section>
diff --git a/website/src/img/downloads/android-dark.webp b/website/src/img/downloads/android-dark.webp
new file mode 100644
index 0000000000..085bf28992
Binary files /dev/null and b/website/src/img/downloads/android-dark.webp differ
diff --git a/website/src/img/downloads/android-light.webp b/website/src/img/downloads/android-light.webp
new file mode 100644
index 0000000000..96afe5e362
Binary files /dev/null and b/website/src/img/downloads/android-light.webp differ
diff --git a/website/src/img/downloads/desktop-dark.webp b/website/src/img/downloads/desktop-dark.webp
new file mode 100644
index 0000000000..ba81d2d699
Binary files /dev/null and b/website/src/img/downloads/desktop-dark.webp differ
diff --git a/website/src/img/downloads/desktop-light.webp b/website/src/img/downloads/desktop-light.webp
new file mode 100644
index 0000000000..2de2ea64ac
Binary files /dev/null and b/website/src/img/downloads/desktop-light.webp differ
diff --git a/website/src/img/new/f_droid_icon.svg b/website/src/img/new/f_droid_icon.svg
new file mode 100644
index 0000000000..f71032cfbf
--- /dev/null
+++ b/website/src/img/new/f_droid_icon.svg
@@ -0,0 +1,50 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg width="164" height="164" viewBox="6.4 0 164 164" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+  <defs>
+    <linearGradient id="a">
+      <stop offset="0" stop-color="#fff" stop-opacity=".098" />
+      <stop offset="1" stop-color="#fff" stop-opacity="0" />
+    </linearGradient>
+    <radialGradient xlink:href="#a" id="b" cx="113" cy="-12.89" fx="113" fy="-12.89" r="59.661999" gradientTransform="matrix(0,1.96105,-1.97781,0,254.507,78.763)" gradientUnits="userSpaceOnUse" />
+  </defs>
+  <g transform="translate(-332,-355.362)">
+    <rect width="164" height="164" x="338.4" y="355.362" rx="20" ry="20" />
+    <g fill-rule="evenodd">
+      <path d="m 2.589,1006.862 4.25,5.5" fill="#8ab000" stroke="#769616" stroke-width="2.5" stroke-linecap="round" transform="matrix(-2.63159,0,0,2.63157,483.158,-2270.475)" />
+      <path d="m 476.286,375.862 c 1.193,0.031 2.004,0.497 2.58,1.18 -5.333,6.34 -6.232,7.347 -13.514,16.372 -2.683,3.472 -5.478,1.678 -2.795,-1.793 l 11.185,-14.474 c 0.602,-0.804 1.54,-1.258 2.544,-1.285 z" fill="#ffffff" fill-opacity="0.298" />
+      <path d="m 478.89,377.075 c 0.325,0.39 1.476,2.118 0.058,4.096 l -11.184,14.473 c -2.683,3.471 -3.026,-1.611 -3.026,-1.611 0,0 9.828,-11.869 14.151,-16.958 z" fill="#263238" fill-opacity="0.2" />
+      <path d="m 477.006,376.48 c 1.153,0 2.525,0.373 2.169,2.102 -0.273,1.32 -12.266,15.985 -12.266,15.985 -2.683,3.47 -6.562,1.78 -3.879,-1.691 l 11.143,-14.402 c 0.685,-0.763 1.602,-1.957 2.833,-1.994 z" fill="#8ab000" />
+    </g>
+    <g fill-rule="evenodd">
+      <path d="m 2.589,1006.862 4.25,5.5" fill="#8ab000" stroke="#769616" stroke-width="2.5" stroke-linecap="round" transform="matrix(2.63159,0,0,2.63157,356.842,-2270.475)" />
+      <path d="m 363.714,375.862 c -1.193,0.031 -2.004,0.497 -2.58,1.18 5.333,6.34 6.232,7.347 13.514,16.372 2.683,3.472 5.478,1.678 2.795,-1.793 l -11.185,-14.474 c -0.602,-0.804 -1.54,-1.258 -2.544,-1.285 z" fill="#ffffff" fill-opacity="0.298" />
+      <path d="m 361.11,377.075 c -0.325,0.39 -1.476,2.118 -0.058,4.096 l 11.184,14.473 c 2.683,3.471 3.026,-1.611 3.026,-1.611 0,0 -9.828,-11.869 -14.151,-16.958 z" fill="#263238" fill-opacity="0.2" />
+      <path d="m 362.995,376.48 c -1.153,0 -2.526,0.373 -2.17,2.102 0.273,1.32 12.266,15.985 12.266,15.985 2.683,3.47 6.562,1.78 3.879,-1.691 l -11.143,-14.402 c -0.685,-0.763 -1.602,-1.957 -2.832,-1.994 z" fill="#8ab000" />
+    </g>
+    <g transform="matrix(2.63159,0,0,2.63157,467.369,-2270.475)">
+      <rect ry="3" rx="3" y="1010.36" x="-37" height="12.92" width="38" fill="#aeea00" />
+      <rect width="38" height="10" x="-37" y="1013.279" rx="3" ry="3" fill="#263238" fill-opacity="0.2" />
+      <rect width="38" height="10" x="-37" y="1010.362" rx="3" ry="3" fill="#ffffff" fill-opacity="0.298" />
+      <rect width="38" height="10.641" x="-37" y="1011.5" rx="3" ry="2.4560001" fill="#aeea00" />
+    </g>
+    <g transform="matrix(2.63159,0,0,2.63157,356.842,-2270.745)">
+      <rect ry="3" rx="3" y="1024.522" x="5" height="25.84" width="38" fill="#1976d2" />
+      <rect width="38" height="13" x="5" y="1037.3621" rx="3" ry="3" fill="#263238" fill-opacity="0.2" />
+      <rect width="38" height="13" x="5" y="1024.442" rx="3" ry="3" fill="#ffffff" fill-opacity="0.2" />
+      <rect width="38" height="23.559999" x="5" y="1025.662" rx="3" ry="2.7179999" fill="#1976d2" />
+    </g>
+    <g transform="matrix(2.63159,0,0,2.63157,356.842,396.264)">
+      <path d="m 24,17.75 c -2.88,0 -5.32,1.985 -6.033,4.65 H 21.18 A 3.215,3.215 0 0 1 24,20.75 3.228,3.228 0 0 1 27.25,24 3.228,3.228 0 0 1 24,27.25 3.219,3.219 0 0 1 21.07,25.4 h -3.154 c 0.642,2.766 3.132,4.85 6.084,4.85 3.434,0 6.25,-2.816 6.25,-6.25 0,-3.434 -2.816,-6.25 -6.25,-6.25 z" fill="#0d47a1" />
+      <circle r="9.5500002" cy="24" cx="24" fill="none" stroke="#0d47a1" stroke-width="1.9" stroke-linecap="round" />
+    </g>
+    <g transform="matrix(2.63159,0,0,2.63157,356.842,-2269.159)">
+      <ellipse ry="3.875" rx="3.375" cx="14.375" cy="1016.487" fill="#263238" fill-opacity="0.2" />
+      <circle r="3.375" cy="1016.987" cx="14.375" fill="#ffffff" />
+    </g>
+    <g transform="matrix(2.63159,0,0,2.63157,408.158,-2269.159)">
+      <ellipse cy="1016.487" cx="14.375" rx="3.375" ry="3.875" fill="#263238" fill-opacity="0.2" />
+      <circle cx="14.375" cy="1016.987" r="3.375" fill="#ffffff" />
+    </g>
+    <path d="m 282.715,299.835 a 3.29,3.29 0 0 0 -2.662,5.336 l 9.474,12.261 A 7.894,7.894 0 0 0 289,320.257 v 18.21 a 7.877,7.877 0 0 0 7.895,7.895 h 84.21 A 7.877,7.877 0 0 0 389,338.468 v -18.211 c 0,-0.999 -0.19,-1.949 -0.525,-2.826 l 9.472,-12.26 a 3.29,3.29 0 0 0 -2.433,-5.334 3.29,3.29 0 0 0 -2.772,1.31 l -9.013,11.666 a 7.91,7.91 0 0 0 -2.624,-0.45 h -84.21 c -0.922,0 -1.8,0.163 -2.622,0.45 l -9.015,-11.666 a 3.29,3.29 0 0 0 -2.543,-1.312 z m 14.18,49.527 A 7.877,7.877 0 0 0 289,357.257 v 52.21 a 7.877,7.877 0 0 0 7.895,7.895 h 84.21 A 7.877,7.877 0 0 0 389,409.468 v -52.211 a 7.877,7.877 0 0 0 -7.895,-7.895 z" fill="url(#b)" fill-rule="evenodd" transform="translate(81,76)" />
+  </g>
+</svg>
diff --git a/website/src/img/why/why-video.jpg b/website/src/img/why/why-video.jpg
new file mode 100644
index 0000000000..4b81483661
Binary files /dev/null and b/website/src/img/why/why-video.jpg differ
diff --git a/website/src/index.html b/website/src/index.html
index 57580c1f4d..31e6e086f8 100644
--- a/website/src/index.html
+++ b/website/src/index.html
@@ -42,11 +42,6 @@ active_home: true
     <link rel="preload" href="/img/new/logo-dark.png" as="image">
     <link rel="preload" href="/img/new/logo-light.png" as="image" media="(prefers-color-scheme: light)">
     <link rel="preload" href="/img/design_3/publications/trail-of-bits.png" as="image">
-    <link rel="preload" href="/img/design_3/publications/privacy-guides.png" as="image">
-    <link rel="preload" href="/img/design_3/publications/whonix.png" as="image">
-    <link rel="preload" href="/img/design_3/publications/heise.png" as="image">
-    <link rel="preload" href="/img/design_3/publications/kuketz-blog.png" as="image">
-    <link rel="preload" href="/img/design_3/publications/optout.png" as="image">
 
     <link rel="preload" href="/fonts/GT-Walsheim/GT-Walsheim-LC-Bold.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/fonts/GT-Walsheim/GT-Walsheim-LC-Regular.woff2" as="font" type="font/woff2" crossorigin>
@@ -57,12 +52,11 @@ active_home: true
 
     <link rel="preload" href="/img/new/apple_store.svg" as="image">
     <link rel="preload" href="/img/new/google_play.svg" as="image">
-    <link rel="preload" href="/img/new/f_droid.svg" as="image" media="(max-width: 959px)">
-    <link rel="preload" href="/img/design_3/testflight-dark.png" as="image" media="(max-width: 959px)">
-    <link rel="preload" href="/img/design_3/android-dark.png" as="image" media="(max-width: 959px)">
-    <link rel="preload" href="/img/design_3/socials/linux.png" as="image" media="(min-width: 960px)">
-    <link rel="preload" href="/img/design_3/socials/apple.png" as="image" media="(min-width: 960px)">
-    <link rel="preload" href="/img/design_3/socials/windows.png" as="image" media="(min-width: 960px)">
+    <link rel="preload" href="/img/new/f_droid_icon.svg" as="image" media="(max-width: 1015px)">
+    <link rel="preload" href="/img/design_3/testflight-dark.png" as="image" media="(max-width: 1015px)">
+    <link rel="preload" href="/img/design_3/socials/linux.png" as="image" media="(min-width: 1016px)">
+    <link rel="preload" href="/img/design_3/socials/apple.png" as="image" media="(min-width: 1016px)">
+    <link rel="preload" href="/img/design_3/socials/windows.png" as="image" media="(min-width: 1016px)">
 
     <link href="/css/tailwind.css" rel="stylesheet"/>
     <link rel="stylesheet" href="/css/design3.css">
@@ -86,26 +80,14 @@ active_home: true
         .sd-icon { display: inline-block; width: 0.85em; height: 0.85em; vertical-align: -0.08em; margin-left: 0.35em; }
         .sd-icon path, .sd-icon polygon { fill: #0095e7; }
         .dark .sd-icon path, .dark .sd-icon polygon { fill: #c8feff; }
-        @media screen and (max-width: 959px) {
-            .sd-sale-banner { top: 0; left: 0; right: 0; transform: none; z-index: 50001; pointer-events: none; }
-            .sd-lead, .sd-tail {
-                position: absolute;
-                left: 50%;
-                transform: translateX(-50%);
-                white-space: nowrap;
-                pointer-events: auto;
-                font-size: calc(var(--sec-vwu) * 4.675);
-                font-weight: 500;
-                background-image: linear-gradient(90deg, #001aa7 0%, #0095e7 100%);
-                -webkit-background-clip: text;
-                background-clip: text;
-                -webkit-text-fill-color: transparent;
-            }
-            .dark .sd-lead, .dark .sd-tail {
-                background-image: linear-gradient(90deg, #019bfe 0%, #64fdff 58%, #c8feff 100%);
-            }
-            .sd-lead { top: 0; line-height: 54px; }
-            .sd-tail { top: min(56px, calc(27px + var(--sec-vwu) * 29 / 6.2)); }
+        @media screen and (min-width: 1016px), screen and (max-width: 1015px) and (orientation: landscape) {
+            .sd-sale-banner { top: auto; bottom: calc(22px + var(--cover-bottom-ext, 0px)); transform: translateX(calc(-50% - max(0px, 50% + var(--cover-socials-w, 435px) + 54px - 50vw))); font-size: 16px; text-align: center; background-image: none; -webkit-text-fill-color: #ffffff; color: #ffffff; }
+            [dir="rtl"] .sd-sale-banner { transform: translateX(calc(-50% + max(0px, 50% + var(--cover-socials-w, 435px) + 54px - 50vw))); }
+            .sd-lead, .sd-tail { display: block; }
+            .sd-icon path, .sd-icon polygon { fill: #ffffff; }
+        }
+        @media screen and (max-width: 1015px) and (orientation: portrait), screen and (max-width: 1015px) and (orientation: landscape) and (max-height: 500px) {
+            .sd-sale-banner { display: none; }
         }
     </style>
     <script src="/js/flag-anchor.js"></script>
@@ -137,12 +119,13 @@ active_home: true
 
     <div class="screen">
         <section class="page-1 cover page">
-            <a class="sd-sale-banner gradient-text" href="https://simplex.domains/" target="_blank" rel="noopener"><span class="sd-lead" id="sd-lead">SimpleX domains launch </span><span class="sd-tail" id="sd-tail"><span class="sd-digits" id="sd-cd"></span>&#8288;<svg class="sd-icon" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" viewBox="0 0 100 100"><path d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path><polygon points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg></span></a>
+            <a class="sd-sale-banner gradient-text" href="https://simplex.domains/" target="_blank" rel="noopener"><span class="sd-lead" id="sd-lead">{{ "index-hero-countdown-lead" | i18n({}, lang) }} </span><span class="sd-tail" id="sd-tail"><span class="sd-digits" id="sd-cd"></span>&#8288;<svg class="sd-icon" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" viewBox="0 0 100 100"><path d="M18.8,85.1h56l0,0c2.2,0,4-1.8,4-4v-32h-8v28h-48v-48h28v-8h-32l0,0c-2.2,0-4,1.8-4,4v56C14.8,83.3,16.6,85.1,18.8,85.1z"></path><polygon points="45.7,48.7 51.3,54.3 77.2,28.5 77.2,37.2 85.2,37.2 85.2,14.9 62.8,14.9 62.8,22.9 71.5,22.9"></polygon></svg></span></a>
             <script>
                 (function () {
                     var target = Date.UTC(2026, 11, 12, 18, 0, 0);
                     var lead = document.getElementById("sd-lead");
                     var cd = document.getElementById("sd-cd");
+                    var days = new Intl.RelativeTimeFormat({{ lang | replace("_", "-") | dump | safe }} + "-u-nu-latn", { numeric: "always" });
                     var timer;
                     function pad(n) { return String(n).padStart(2, "0"); }
                     function tick() {
@@ -150,26 +133,34 @@ active_home: true
                         if (ms <= 0) {
                             clearInterval(timer);
                             lead.style.display = "none";
-                            cd.textContent = "Get SimpleX domain";
+                            cd.textContent = {{ "index-hero-countdown-done" | i18n({}, lang) | dump | safe }};
                             return;
                         }
                         var s = Math.floor(ms / 1000);
                         var d = Math.floor(s / 86400);
-                        cd.textContent = "in " + d + (d === 1 ? " day " : " days ") + pad(Math.floor((s % 86400) / 3600)) + ":" + pad(Math.floor((s % 3600) / 60)) + ":" + pad(s % 60);
+                        cd.textContent = days.format(d, "day") + " " + pad(Math.floor((s % 86400) / 3600)) + ":" + pad(Math.floor((s % 3600) / 60)) + ":" + pad(s % 60);
                     }
                     timer = setInterval(tick, 1000);
                     tick();
                 })();
             </script>
+            <div class="cover-art" aria-hidden="true">
+                <img class="cover-phone" src="/img/crowdfunding/phone.png" alt="">
+                <div class="cover-fade"></div>
+            </div>
             <div class="area">
                 <div class="content">
-                    <h1>{{ "index-hero-h1" | i18n({}, lang) | safe }}</h1>
+                    <h1>{{ "index-hero-h1" | i18n({}, lang) | replace("<br>", " <br>") | safe }}</h1>
                     <h2 class="gradient-text">{{ "index-hero-h2" | i18n({}, lang) | safe }}</h2>
                     <p>{{ "index-hero-p1" | i18n({}, lang) | safe }}</p>
-                    <p class="invest">{{ "index-hero-invest" | i18n({}, lang) | safe }} <a class="gradient-text" href="/crowdfunding/">{{ "learn-more" | i18n({}, lang) }}.</a></p>
+                    <p class="invest">{{ "index-hero-own-part" | i18n({}, lang) | safe }} <a class="gradient-text" href="https://wefunder.com/simplex.chat?utm_source=home" target="_blank" rel="noopener">{{ "index-hero-invest" | i18n({}, lang) | safe }}</a></p>
+                    <div class="cover-stats">
+                        <div class="cover-stat"><b>3M</b><span>{{ "index-hero-downloads" | i18n({}, lang) }}</span></div>
+                        <div class="cover-stat"><b>600K</b><span>{{ "index-hero-monthly-users" | i18n({}, lang) }}</span></div>
+                    </div>
 
                     <div class="socials">
-                        <a href="/downloads" class="desktop-app-btn hidden" title="{{ 'index-hero-download-desktop-btn-title' | i18n({}, lang) }}">
+                        <a href="{{ '' if lang == 'en' or not (lang | translated('/downloads/')) else '/' ~ lang }}/downloads" class="desktop-app-btn hidden" title="{{ 'index-hero-download-desktop-btn-title' | i18n({}, lang) }}">
                             <div class="btn-content">
                                 <div>
                                     <img class="no-border" src="/img/design_3/socials/linux.png">
@@ -179,14 +170,13 @@ active_home: true
                                 <p>Download<br>Desktop App</p>
                             </div>
                         </a>
-                        <a class="apple-store-btn hidden" href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank"><img src="/img/new/apple_store.svg" alt="App Store"></a>
-                        <a class="google-play-btn hidden" href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank"><img src="/img/new/google_play.svg" alt="Google Play"></a>
-                        <a class="f-droid-btn hidden" href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid" title="{{ 'index-f-droid-title' | i18n({}, lang) }}"><img src="/img/new/f_droid.svg"></a>
-                        <a class="testflight-btn hidden" href="https://testflight.apple.com/join/DWuT2LQu" target="_blank"><img class="no-border" src="/img/design_3/testflight-dark.png" title="{{ 'index-testflight-title' | i18n({}, lang) }}" alt="TestFlight"></a>
-                        <a class="android-btn hidden" href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank"><img src="/img/design_3/android-dark.png" alt="Android APK"></a>
+                        <a class="apple-store-btn hidden" href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener"><img src="/img/new/apple_store.svg" alt="App Store"></a>
+                        <a class="google-play-btn hidden" href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener"><img src="/img/new/google_play.svg" alt="Google Play"></a>
+                        <a class="f-droid-btn hidden" href="{{ '' if lang == 'en' else '/' ~ lang }}/fdroid" title="{{ 'index-f-droid-title' | i18n({}, lang) }}"><img src="/img/new/f_droid_icon.svg" alt="F-Droid"></a>
+                        <a class="testflight-btn hidden" href="https://testflight.apple.com/join/DWuT2LQu" target="_blank" rel="noopener"><img class="no-border" src="/img/design_3/testflight-dark.png" title="{{ 'index-testflight-title' | i18n({}, lang) }}" alt="TestFlight"></a>
                     </div>
                     <div class="security-btns">
-                        <a title="{{ 'index-security-assessment-title' | i18n({}, lang) }}" href="https://www.trailofbits.com/about" target="_blank">
+                        <a title="{{ 'index-security-assessment-title' | i18n({}, lang) }}" href="https://www.trailofbits.com/about" target="_blank" rel="noopener">
                             <img src="/img/design_3/publications/trail-of-bits.png" alt="Trail of Bits">
                         </a>
                         <a class="box-btn btn-1" title="{{ 'index-security-review-2022-title' | i18n({}, lang) }}" href="/blog/20221108-simplex-chat-v4.2-security-audit-new-website.html">
@@ -199,23 +189,6 @@ active_home: true
                             {{ 'index-security-audits-label' | i18n({}, lang) | safe }}
                         </p>
                     </div>
-                    <div class="publications-btns">
-                        <a title="{{ 'index-publications-privacy-guides-title' | i18n({}, lang) }}" href="https://www.privacyguides.org/en/real-time-communication/#simplex-chat" target="_blank">
-                            <img src="/img/design_3/publications/privacy-guides.png" alt="Privacy Guides">
-                        </a>
-                        <a title="{{ 'index-publications-whonix-title' | i18n({}, lang) }}" href="https://www.whonix.org/wiki/Chat#Recommendation" target="_blank">
-                            <img src="/img/design_3/publications/whonix.png" alt="Whonix" class="whonix">
-                        </a>
-                        <a title="{{ 'index-publications-heise-title' | i18n({}, lang) }}" href="https://www.heise.de/suche/?q=simplex+chat&sort_by=date&rm=search" target="_blank">
-                            <img src="/img/design_3/publications/heise.png" alt="Heise">
-                        </a>
-                        <a title="{{ 'index-publications-kuketz-title' | i18n({}, lang) }}" href="https://www.kuketz-blog.de/simplex-eindruecke-vom-messenger-ohne-identifier/" target="_blank">
-                            <img src="/img/design_3/publications/kuketz-blog.png" alt="Kuketz Blog" class="kuketz">
-                        </a>
-                        <a title="{{ 'index-publications-optout-title' | i18n({}, lang) }}" href="https://optoutpod.com/episodes/s3e02-simplexchat/" target="_blank">
-                            <img src="/img/design_3/publications/optout.png" alt="Opt Out">
-                        </a>
-                    </div>
                 </div>
             </div>
         </section>
@@ -251,7 +224,7 @@ active_home: true
                         <h2>{{ "index-token-h2" | i18n({}, lang) }}</h2>
                         <p>{{ "index-token-p1" | i18n({}, lang) }}</p>
                         <p>{{ "index-token-p2-cf" | i18n({}, lang) | safe }}</p>
-                        <a class="gradient-text" href="/crowdfunding/">{{ "index-token-cta-cf" | i18n({}, lang) | safe }}</a>
+                        <a class="gradient-text" href="https://wefunder.com/simplex.chat?utm_source=home" target="_blank" rel="noopener">{{ "index-token-cta-cf" | i18n({}, lang) | safe }}</a>
                     </div>
                 </div>
             </section>
@@ -288,36 +261,36 @@ active_home: true
         <section id="directory" class="page-6 page">
             <div class="area">
                 <div class="group-images">
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="https://smp4.simplex.im/g#hr4lvFeBmndWMKTwqiodPz3VBo_6UmdGWocXd1SupsM" class="simplex-image" title="{{ 'index-directory-users-group-title' | i18n({}, lang) }}" target="_blank">
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="https://smp4.simplex.im/g#hr4lvFeBmndWMKTwqiodPz3VBo_6UmdGWocXd1SupsM" class="simplex-image" title="{{ 'index-directory-users-group-title' | i18n({}, lang) }}" target="_blank" rel="noopener">
                         <img class="block dark:hidden" src="/img/new/logo-symbol-light.svg">
                         <img class="hidden dark:block" src="/img/new/logo-symbol-dark.svg">
                     </a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
-                    <a href="/directory" class="group-image" target="_blank"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
+                    <a href="/directory" class="group-image" target="_blank" rel="noopener"><img src="/img/group.svg"></a>
                 </div>
                 <div class="text-container">
                     <h2>{{ "index-directory-h2" | i18n({}, lang) }}</h2>
@@ -353,6 +326,20 @@ active_home: true
     })();
     </script>
     <script>
+    (function coverMetrics(){
+        const cover = document.querySelector('.page-1.cover');
+        const invest = cover.querySelector('.content > p.invest');
+        const socials = cover.querySelector('.socials');
+        const stats = cover.querySelector('.cover-stats');
+        const observer = new ResizeObserver(() => {
+            cover.style.setProperty('--cover-text-b', `${invest.getBoundingClientRect().bottom - cover.getBoundingClientRect().top}px`);
+            cover.style.setProperty('--cover-socials-w', `${socials.offsetWidth}px`);
+            cover.style.setProperty('--cover-stats-w', `${stats.offsetWidth}px`);
+        });
+        cover.querySelectorAll('.content > *').forEach((el) => observer.observe(el));
+    })();
+    </script>
+    <script>
     (function sectionHeaderState(){
         const mobileHeader = document.getElementById('mobile-header');
         if (!mobileHeader) return;
diff --git a/website/src/invitation.html b/website/src/invitation.html
index f197438760..f1d20eb07d 100644
--- a/website/src/invitation.html
+++ b/website/src/invitation.html
@@ -3,6 +3,7 @@ layout: layouts/main.html
 title: "SimpleX Chat - Invitation"
 header: "invitation-hero-header"
 templateEngineOverride: njk
+noEvents: true
 ---
 
 {% include "contact_page.html" %}
\ No newline at end of file
diff --git a/website/src/js/channel-preview.jsc b/website/src/js/channel-preview.jsc
index 2f88e885b9..b0a1696010 100644
--- a/website/src/js/channel-preview.jsc
+++ b/website/src/js/channel-preview.jsc
@@ -1037,11 +1037,11 @@ function renderInfoContent(container, data, channelLink, subscriberCount, showAp
   }
 }
 
-var BADGE_APPLE = '<a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank"><img src="https://simplex.chat/img/new/apple_store.svg" alt="App Store"></a>';
-var BADGE_GOOGLE = '<a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank"><img src="https://simplex.chat/img/new/google_play.svg" alt="Google Play"></a>';
-var BADGE_FDROID = '<a href="https://simplex.chat/fdroid" target="_blank"><img src="https://simplex.chat/img/new/f_droid.svg" alt="F-Droid"></a>';
-var BADGE_APK = '<a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank"><img src="https://simplex.chat/img/design_3/android-dark.png" alt="APK Download"></a>';
-var BADGE_TESTFLIGHT = '<a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank"><img src="https://simplex.chat/img/design_3/testflight-dark.png" alt="TestFlight"></a>';
+var BADGE_APPLE = '<a href="https://apps.apple.com/us/app/simplex-chat/id1605771084" target="_blank" rel="noopener"><img src="https://simplex.chat/img/new/apple_store.svg" alt="App Store"></a>';
+var BADGE_GOOGLE = '<a href="https://play.google.com/store/apps/details?id=chat.simplex.app" target="_blank" rel="noopener"><img src="https://simplex.chat/img/new/google_play.svg" alt="Google Play"></a>';
+var BADGE_FDROID = '<a href="https://simplex.chat/fdroid" target="_blank" rel="noopener"><img src="https://simplex.chat/img/new/f_droid.svg" alt="F-Droid"></a>';
+var BADGE_APK = '<a href="https://github.com/simplex-chat/simplex-chat/releases/latest/download/simplex-aarch64.apk" target="_blank" rel="noopener"><img src="https://simplex.chat/img/design_3/android-dark.png" alt="APK Download"></a>';
+var BADGE_TESTFLIGHT = '<a href="https://testflight.apple.com/join/DWuT2LQu" target="_blank" rel="noopener"><img src="https://simplex.chat/img/design_3/testflight-dark.png" alt="TestFlight"></a>';
 
 function renderAppBadges(container) {
   const title = document.createElement('p');
diff --git a/website/src/js/design3.js b/website/src/js/design3.js
index bc725ac7ce..90b9db3b83 100644
--- a/website/src/js/design3.js
+++ b/website/src/js/design3.js
@@ -16,16 +16,14 @@ function initializePage() {
     const appleStoreBtn = document.querySelector('.apple-store-btn');
     const fDroidBtn = document.querySelector('.f-droid-btn');
     const testflightBtn = document.querySelector('.testflight-btn');
-    const androidBtn = document.querySelector('.android-btn');
     const desktopAppBtn = document.querySelector('.desktop-app-btn');
 
-    if (!googlePlayBtn || !appleStoreBtn || !fDroidBtn || !testflightBtn || !androidBtn || !desktopAppBtn) return;
+    if (!googlePlayBtn || !appleStoreBtn || !fDroidBtn || !testflightBtn || !desktopAppBtn) return;
 
 
     if (isMobile.Android()) {
         googlePlayBtn.classList.remove('hidden');
         fDroidBtn.classList.remove('hidden');
-        androidBtn.classList.remove('hidden');
     }
     else if (isMobile.iOS()) {
         appleStoreBtn.classList.remove('hidden');
@@ -37,7 +35,6 @@ function initializePage() {
         desktopAppBtn.classList.remove('hidden');
         // fDroidBtn.classList.remove('hidden');
         // testflightBtn.classList.remove('hidden');
-        // androidBtn.classList.remove('hidden');
     }
 
     showPromotedGroups();
diff --git a/website/src/js/directory.jsc b/website/src/js/directory.jsc
index 7d99e71dad..5ca3b7fbcf 100644
--- a/website/src/js/directory.jsc
+++ b/website/src/js/directory.jsc
@@ -338,6 +338,7 @@ function displayEntries(entries) {
         imgLinkElement.href = groupLinkUri;
       }
       imgLinkElement.target = "_blank";
+      imgLinkElement.rel = "noopener";
       imgLinkElement.title = `Join ${displayName}`;
 
       const imgElement = document.createElement('img');
diff --git a/website/src/js/simplex-lib.jsc b/website/src/js/simplex-lib.jsc
index ffec278ca2..d05dd6a931 100644
--- a/website/src/js/simplex-lib.jsc
+++ b/website/src/js/simplex-lib.jsc
@@ -51,7 +51,7 @@ function isCurrentSite(uri) {
 }
 
 function targetBlank(uri) {
-  return isCurrentSite(uri) ? '' : ' target="_blank"'
+  return isCurrentSite(uri) ? '' : ' target="_blank" rel="noopener"'
 }
 
 function renderMarkdown(fts) {
@@ -98,7 +98,7 @@ function renderMarkdown(fts) {
         case 'simplexLink': {
           const { showText, linkType, simplexUri, smpHosts } = format;
           const linkText = showText ? escapeHtml(showText) : getSimplexLinkDescr(linkType);
-          html += `<a href="${safeHref(platformSimplexUri(simplexUri))}" target="_blank">${linkText} <em>(${escapeHtml(viaHost(smpHosts))})</em></a>`;
+          html += `<a href="${safeHref(platformSimplexUri(simplexUri))}" target="_blank" rel="noopener">${linkText} <em>(${escapeHtml(viaHost(smpHosts))})</em></a>`;
           break;
         }
         case 'command':
diff --git a/website/src/links.html b/website/src/links.html
index 269f3a46a9..015520f765 100644
--- a/website/src/links.html
+++ b/website/src/links.html
@@ -233,7 +233,7 @@ active_links: true
 
 <section class="py-10 px-5 mt-[66px]" id="links-page">
     <div class="container">
-        <h1 class="text-[38px] text-center font-bold mb-8">{{ "links-title" | i18n({}, lang) | safe }}</h1>
+        <h1 class="text-[38px] md:text-[45px] text-center font-bold mb-8">{{ "links-title" | i18n({}, lang) | safe }}</h1>
 
         <div id="links-filters">
             <select id="filter-language">
diff --git a/website/src/livestream.html b/website/src/livestream.html
index a0a6a2762e..45f13b8161 100644
--- a/website/src/livestream.html
+++ b/website/src/livestream.html
@@ -27,10 +27,10 @@ templateEngineOverride: njk
     {% include "markdown-alternate.html" %}
     <meta name="theme-color" content="#C1E3FE">
 
-    <link rel="preload" href="/img/design_3/section-4-desktop.webp" as="image" type="image/webp" media="(min-width: 960px)">
-    <link rel="preload" href="/img/design_3/section-4-desktop-light.webp" as="image" type="image/webp" media="(min-width: 960px) and (prefers-color-scheme: light)">
-    <link rel="preload" href="/img/design_3/section-4-mobile.webp" as="image" type="image/webp" media="(max-width: 959px)">
-    <link rel="preload" href="/img/design_3/section-4-mobile-light.webp" as="image" type="image/webp" media="(max-width: 959px) and (prefers-color-scheme: light)">
+    <link rel="preload" href="/img/design_3/section-4-desktop.webp" as="image" type="image/webp" media="(min-width: 1016px)">
+    <link rel="preload" href="/img/design_3/section-4-desktop-light.webp" as="image" type="image/webp" media="(min-width: 1016px) and (prefers-color-scheme: light)">
+    <link rel="preload" href="/img/design_3/section-4-mobile.webp" as="image" type="image/webp" media="(max-width: 1015px)">
+    <link rel="preload" href="/img/design_3/section-4-mobile-light.webp" as="image" type="image/webp" media="(max-width: 1015px) and (prefers-color-scheme: light)">
 
     <link rel="preload" href="/fonts/GT-Walsheim/GT-Walsheim-LC-Regular.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/fonts/Manrope/Manrope-ExtraLight.ttf" as="font" type="font/ttf" crossorigin>
@@ -79,7 +79,7 @@ templateEngineOverride: njk
                         </div>
 
                         <div class="actions">
-                            <a class="invest-btn" href="/crowdfunding/">Get a stake in SimpleX Chat</a>
+                            <a class="invest-btn" href="/crowdfunding/">Invest in SimpleX Chat</a>
                         </div>
                     </div>
                 </div>
diff --git a/website/src/messaging.html b/website/src/messaging.html
index 994aa37b1b..33b01cfd9e 100644
--- a/website/src/messaging.html
+++ b/website/src/messaging.html
@@ -318,7 +318,7 @@ templateEngineOverride: njk
                     <li> {{ "messengers-comparison-section-list-point-1" | i18n({}, lang ) | safe }}</li>
                     <li> {{ "messengers-comparison-section-list-point-2" | i18n({}, lang ) | safe }}</li>
                     <li> {{ "messengers-comparison-section-list-point-3" | i18n({}, lang ) | safe }}</li>
-                    <li> {{ "messengers-comparison-section-list-point-4" | i18n({}, lang ) | safe }} &mdash; <a class="underline text-primary-light dark:text-primary-dark underline-offset-2" href="https://eprint.iacr.org/2021/626.pdf" target="_blank">{{ "see-here" | i18n({}, lang ) | safe }}</a>.</li>
+                    <li> {{ "messengers-comparison-section-list-point-4" | i18n({}, lang ) | safe }} &mdash; <a class="underline text-primary-light dark:text-primary-dark underline-offset-2" href="https://eprint.iacr.org/2021/626.pdf" target="_blank" rel="noopener">{{ "see-here" | i18n({}, lang ) | safe }}</a>.</li>
                     <li> {{ "messengers-comparison-section-list-point-5" | i18n({}, lang ) | safe }}</li>
                     <li> {{ "messengers-comparison-section-list-point-6" | i18n({}, lang ) | safe }}</li>
                 </ol>
diff --git a/website/src/token.md b/website/src/token.md
index 2c31437165..c463e03521 100644
--- a/website/src/token.md
+++ b/website/src/token.md
@@ -2,6 +2,7 @@
 layout: layouts/token.html
 title: "SimpleX Community Credits"
 permalink: "/credits/index.html"
+noEvents: true
 ---
 
 # SimpleX Crowdfunding to Build Community Credits: Strategy & Vision
diff --git a/website/src/wefunder.html b/website/src/wefunder.html
index c64acf1ce0..bd55cc2e22 100644
--- a/website/src/wefunder.html
+++ b/website/src/wefunder.html
@@ -1,12 +1,24 @@
 ---
 templateEngineOverride: njk
 eleventyExcludeFromCollections: true
+destinationURI: "https://wefunder.com/simplex.chat"
 ---
 <!DOCTYPE html>
 <html lang="en">
     <head>
         <meta charset="UTF-8">
-        <script>location.replace('https://wefunder.com/simplex.chat' + location.search);</script>
+        <script type="module">
+            {% include "node_modules/@plausible-analytics/tracker/plausible.js" %}
+            {% include "events.js" %}
+            try {
+                pageEvents.autoCapturePageviews = false;
+                init(pageEvents);
+                track('pageview');
+            } finally {
+                location.replace('{{ destinationURI }}' + location.search);
+            }
+        </script>
+        <script nomodule>location.replace('{{ destinationURI }}' + location.search);</script>
         <meta http-equiv="X-UA-Compatible" content="IE=edge">
         <meta name="viewport" content="width=device-width, initial-scale=1.0">
         <title>Invest in SimpleX Chat</title>
@@ -18,7 +30,7 @@ eleventyExcludeFromCollections: true
         <meta property="og:image" content="{% cfg 'siteLocation' %}/img/share_simplex.jpg"/>
         <meta name="twitter:card" content="summary"/>
         <link rel="icon" type="image/png" sizes="96x96" href="/img/favicon.ico"/>
-        <noscript><meta http-equiv="refresh" content="0; url=https://wefunder.com/simplex.chat" /></noscript>
+        <noscript><meta http-equiv="refresh" content="0; url={{ destinationURI }}" /></noscript>
     </head>
     <body></body>
 </html>
diff --git a/website/src/why.html b/website/src/why.html
index 618caea632..0b2331d0f5 100644
--- a/website/src/why.html
+++ b/website/src/why.html
@@ -47,9 +47,15 @@ noGlossary: true
       {{ "why-tagline" | i18n({}, lang) | safe }}
     </p>
 
-    <p class="mt-10 md:mt-14 text-[18px] md:text-[20px] lg:text-[22px] font-medium">
-      <a class="underline underline-offset-4 text-primary-light dark:text-primary-dark" href="https://www.youtube.com/watch?v=k-GhLNZm8G0" target="_blank" rel="noopener">{{ "why-film" | i18n({}, lang) | safe }}</a>
-    </p>
+    <a class="block mt-10 md:mt-14" href="https://www.youtube.com/watch?v=k-GhLNZm8G0" target="_blank" rel="noopener">
+      <div class="relative">
+        <img class="w-full rounded-2xl" src="/img/why/why-video.jpg" alt="" loading="lazy" width="960" height="540">
+        <div class="absolute inset-0 m-auto flex items-center justify-center w-14 h-14 md:w-[72px] md:h-[72px] rounded-full bg-white/80" aria-hidden="true">
+          <svg class="w-[38px] h-[38px] md:w-12 md:h-12 fill-[#02071d]" viewBox="0 0 24 24"><path d="M8 5v14l11-7z"></path></svg>
+        </div>
+      </div>
+      <p class="mt-4 text-[18px] md:text-[20px] lg:text-[22px] font-medium underline underline-offset-4 text-primary-light dark:text-primary-dark">{{ "why-film" | i18n({}, lang) | safe }}</p>
+    </a>
 
   </div>
 </section>
diff --git a/website/web.sh b/website/web.sh
index 4ee1ea710d..529590ac80 100755
--- a/website/web.sh
+++ b/website/web.sh
@@ -38,6 +38,7 @@ for lang in "${langs[@]}"; do
   cp src/invitation.html src/$lang
   cp src/fdroid.html src/$lang
   cp src/why.html src/$lang
+  cp src/downloads.html src/$lang
   cp src/file.html src/$lang
   echo "{\"lang\":\"$lang\"}" > src/$lang/$lang.json
   echo "*" > src/$lang/.gitignore