diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6f2e7de8..92d12a26 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -86,7 +86,7 @@ jobs:
 
   build-macos:
     name: build-macos
-    runs-on: macos-latest
+    runs-on: macos-26
     needs: lint-and-test
     # The Vite production build OOMs at Node's default heap on the macOS runner.
     env:
@@ -123,4 +123,10 @@ jobs:
           curl --fail --location --retry 5 --retry-delay 10 --retry-all-errors \
             --output "$ELECTRON_CACHE/$ELECTRON_ZIP" \
             "https://github.com/electron/electron/releases/download/v${ELECTRON_VERSION}/${ELECTRON_ZIP}"
-      - run: pnpm exec electron-builder --publish never
+      - name: Package canonical Apple Silicon artifact
+        timeout-minutes: 30
+        env:
+          DAEMON_MAC_ADHOC: '1'
+          DAEMON_REQUIRE_MAC_NOTARIZATION: '0'
+          CSC_IDENTITY_AUTO_DISCOVERY: 'false'
+        run: pnpm run package:lite:mac
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1a7cba3e..a8b49448 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,9 +8,6 @@ on:
 permissions:
   contents: read
 
-# The Vite/tsc production build peaks past Node's ~2GB default heap on the hosted
-# runners (the macOS arm64 job OOM'd with exit 134 on v4.6.2). Give every job a
-# 4GB heap so the build can't run out of memory on any platform.
 env:
   NODE_OPTIONS: --max-old-space-size=4096
 
@@ -31,13 +28,14 @@ jobs:
           node-version: 22
           cache: pnpm
       - run: pnpm install --frozen-lockfile
+      - name: Verify tag matches package version
+        run: test "${GITHUB_REF_NAME}" = "v$(node -p "require('./package.json').version")"
       - run: pnpm run typecheck
       - run: pnpm run test
 
-  release-windows:
+  package-windows:
     runs-on: windows-latest
     needs: validate
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
     steps:
       - uses: actions/checkout@v6
         with:
@@ -49,50 +47,53 @@ jobs:
         with:
           node-version: 22
           cache: pnpm
-      - name: Cache electron
+      - name: Cache Electron
         uses: actions/cache@v5
         with:
           path: |
-            ~/.cache/electron
-            ~/.cache/electron-builder
             ~\AppData\Local\electron\cache
             ~\AppData\Local\electron-builder\cache
           key: electron-cache-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            electron-cache-${{ runner.os }}-
+          restore-keys: electron-cache-${{ runner.os }}-
       - run: pnpm install --frozen-lockfile
-      - run: pnpm run build
-      - name: Package
+      - name: Build canonical DAEMON installer
+        shell: pwsh
+        env:
+          CSC_LINK: ${{ secrets.CSC_LINK }}
+          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
+        run: pnpm run package:lite
+      - name: Packaged smoke
         shell: pwsh
         run: |
-          if ("${{ secrets.CSC_LINK }}") {
-            $env:CSC_LINK = "${{ secrets.CSC_LINK }}"
-          }
-          if ("${{ secrets.CSC_KEY_PASSWORD }}") {
-            $env:CSC_KEY_PASSWORD = "${{ secrets.CSC_KEY_PASSWORD }}"
-          }
-          pnpm exec electron-builder --publish never
-      - name: Generate checksums
+          node scripts/smoke/lite-app-smoke.mjs
+          node scripts/smoke/lite-workbench-smoke.mjs
+      - name: Generate checksum
         shell: pwsh
         run: |
-          Get-ChildItem -Path release -Recurse -File -Include DAEMON-setup.exe | ForEach-Object {
-            $hash = (Get-FileHash $_.FullName -Algorithm SHA256).Hash.ToLower()
-            "$hash  $($_.Name)" | Out-File -Append -FilePath release/checksums-windows.txt
-          }
+          $installer = Get-ChildItem -Path release-lite -Recurse -File -Filter DAEMON-setup.exe | Select-Object -First 1
+          if (-not $installer) { throw 'DAEMON-setup.exe was not produced' }
+          $hash = (Get-FileHash $installer.FullName -Algorithm SHA256).Hash.ToLower()
+          "$hash  $($installer.Name)" | Out-File -FilePath release-lite/checksums-windows.txt
       - uses: actions/upload-artifact@v7
         with:
-          name: windows-release
+          name: daemon-windows-release
           path: |
-            release/*/DAEMON-setup.exe
-            release/*/latest.yml
-            release/*/DAEMON-setup.exe.blockmap
-            release/checksums-windows.txt
+            release-lite/*/DAEMON-setup.exe
+            release-lite/*/DAEMON-setup.exe.blockmap
+            release-lite/*/latest.yml
+            release-lite/checksums-windows.txt
           retention-days: 1
 
-  release-macos:
-    runs-on: macos-latest
+  package-macos:
+    runs-on: macos-26
     needs: validate
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
+    env:
+      CSC_LINK: ${{ secrets.MAC_CSC_LINK }}
+      CSC_KEY_PASSWORD: ${{ secrets.MAC_CSC_KEY_PASSWORD }}
+      APPLE_ID: ${{ secrets.APPLE_ID }}
+      APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
+      APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+      DAEMON_ALLOW_UNSIGNED_MAC_VERSION: '4.7.11'
     steps:
       - uses: actions/checkout@v6
         with:
@@ -104,113 +105,166 @@ jobs:
         with:
           node-version: 22
           cache: pnpm
-      - name: Cache electron
+      - name: Select signed or version-scoped unsigned mode
+        shell: bash
+        run: |
+          present=0
+          for name in CSC_LINK CSC_KEY_PASSWORD APPLE_ID APPLE_APP_SPECIFIC_PASSWORD APPLE_TEAM_ID; do
+            if [ -n "${!name:-}" ]; then present=$((present + 1)); fi
+          done
+          version="$(node -p "require('./package.json').version")"
+          if [ "$present" -eq 5 ]; then
+            mode=signed
+            echo 'DAEMON_REQUIRE_MAC_NOTARIZATION=1' >> "$GITHUB_ENV"
+            echo 'DAEMON_MAC_ADHOC=0' >> "$GITHUB_ENV"
+          elif [ "$present" -ne 0 ]; then
+            echo 'Partial Apple credentials are not allowed'
+            exit 1
+          elif [ "$version" = "$DAEMON_ALLOW_UNSIGNED_MAC_VERSION" ]; then
+            mode=unsigned
+            echo 'DAEMON_REQUIRE_MAC_NOTARIZATION=0' >> "$GITHUB_ENV"
+            echo 'DAEMON_MAC_ADHOC=1' >> "$GITHUB_ENV"
+            echo 'CSC_IDENTITY_AUTO_DISCOVERY=false' >> "$GITHUB_ENV"
+          else
+            echo "Apple credentials are required for macOS release $version"
+            exit 1
+          fi
+          echo "DAEMON_MAC_RELEASE_MODE=$mode" >> "$GITHUB_ENV"
+          echo "macOS release mode: $mode"
+      - name: Cache Electron
         uses: actions/cache@v5
         with:
           path: |
             ~/.cache/electron
             ~/.cache/electron-builder
-          key: electron-cache-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            electron-cache-${{ runner.os }}-
+          key: electron-cache-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: electron-cache-${{ runner.os }}-${{ runner.arch }}-
       - run: pnpm install --frozen-lockfile
-      - run: pnpm run build
-      - name: Pre-cache Electron binaries
+      - name: Build Apple Silicon release
         shell: bash
         run: |
-          ELECTRON_VERSION="$(node -p "require('./package.json').devDependencies.electron.replace(/^[^0-9]*/, '')")"
-          ELECTRON_CACHE="$HOME/.cache/electron"
-          mkdir -p "$ELECTRON_CACHE"
-          for arch in arm64 x64; do
-            ELECTRON_ZIP="electron-v${ELECTRON_VERSION}-darwin-${arch}.zip"
-            curl --fail --location --retry 5 --retry-delay 10 --retry-all-errors \
-              --output "$ELECTRON_CACHE/$ELECTRON_ZIP" \
-              "https://github.com/electron/electron/releases/download/v${ELECTRON_VERSION}/${ELECTRON_ZIP}"
-          done
-      - name: Package
-        run: |
-          if [ -n "${{ secrets.CSC_LINK }}" ]; then
-            export CSC_LINK="${{ secrets.CSC_LINK }}"
-          fi
-          if [ -n "${{ secrets.CSC_KEY_PASSWORD }}" ]; then
-            export CSC_KEY_PASSWORD="${{ secrets.CSC_KEY_PASSWORD }}"
+          if [ "$DAEMON_MAC_RELEASE_MODE" = 'unsigned' ]; then
+            unset CSC_LINK CSC_KEY_PASSWORD APPLE_ID APPLE_APP_SPECIFIC_PASSWORD APPLE_TEAM_ID
           fi
-          if [ -n "${{ secrets.APPLE_ID }}" ]; then
-            export APPLE_ID="${{ secrets.APPLE_ID }}"
-          fi
-          if [ -n "${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}" ]; then
-            export APPLE_APP_SPECIFIC_PASSWORD="${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}"
-          fi
-          if [ -n "${{ secrets.APPLE_TEAM_ID }}" ]; then
-            export APPLE_TEAM_ID="${{ secrets.APPLE_TEAM_ID }}"
-          fi
-          if [ -n "$APPLE_ID" ] && [ -n "$APPLE_APP_SPECIFIC_PASSWORD" ] && [ -n "$APPLE_TEAM_ID" ]; then
-            echo "Notarization credentials found"
-          fi
-          pnpm exec electron-builder --mac dmg zip --arm64 --x64 --publish never
-      - name: Generate checksums
+          pnpm run package:lite:mac
+      - name: Verify signature mode, architecture, and updater metadata
+        shell: bash
         run: |
-          cd release
-          find . -name "*.dmg" -o -name "*.zip" | while read f; do
-            shasum -a 256 "$f" >> checksums-macos.txt
-          done
-      - uses: actions/upload-artifact@v7
-        with:
-          name: macos-release
-          path: |
-            release/*/DAEMON-*.dmg
-            release/*/DAEMON-*.zip
-            release/*/latest-mac.yml
-            release/*/DAEMON-*.blockmap
-            release/checksums-macos.txt
-          retention-days: 1
+          VERSION="$(node -p "require('./package.json').version")"
+          RELEASE_DIR="release-lite/$VERSION"
+          APP_PATH="$RELEASE_DIR/mac-arm64/DAEMON.app"
+          test "$(uname -m)" = arm64
+          case "$DAEMON_MAC_RELEASE_MODE" in
+            signed) artifact_stem='DAEMON-arm64'; verifier_args=() ;;
+            unsigned) artifact_stem='DAEMON-unsigned-arm64'; verifier_args=(--unsigned) ;;
+            *) echo "Invalid macOS release mode: $DAEMON_MAC_RELEASE_MODE"; exit 1 ;;
+          esac
 
-  release-linux:
-    runs-on: ubuntu-latest
-    needs: validate
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-      - uses: pnpm/action-setup@v6
-        with:
-          version: 10.15.0
-      - uses: actions/setup-node@v6
-        with:
-          node-version: 22
-          cache: pnpm
-      - name: Cache electron
-        uses: actions/cache@v5
-        with:
-          path: |
-            ~/.cache/electron
-            ~/.cache/electron-builder
-          key: electron-cache-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            electron-cache-${{ runner.os }}-
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm run build
-      - run: pnpm exec electron-builder --publish never
-      - name: Generate checksums
+          verify_bundle() {
+            local app_path="$1"
+            local executable="$app_path/Contents/MacOS/DAEMON"
+            test "$(lipo -archs "$executable")" = arm64
+            codesign --verify --deep --strict --verbose=2 "$app_path"
+            local app_details app_team
+            app_details="$(codesign -dv --verbose=4 "$app_path" 2>&1)"
+            case "$DAEMON_MAC_RELEASE_MODE" in
+              signed)
+                grep -q '^Authority=Developer ID Application:' <<< "$app_details"
+                app_team="$(sed -n 's/^TeamIdentifier=//p' <<< "$app_details")"
+                test -n "$app_team"
+                xcrun stapler validate "$app_path"
+                spctl --assess --type execute -vv "$app_path"
+                ;;
+              unsigned)
+                grep -q '^Signature=adhoc$' <<< "$app_details"
+                ! grep -q '^Authority=' <<< "$app_details"
+                ! grep -q 'flags=.*runtime' <<< "$app_details"
+                if spctl --assess --type execute -vv "$app_path"; then
+                  echo 'Unsigned mode unexpectedly passed Gatekeeper assessment'
+                  exit 1
+                fi
+                ;;
+            esac
+
+            local native_dir="$app_path/Contents/Resources/app.asar.unpacked/node_modules"
+            local addons=("$native_dir/better-sqlite3/build/Release/better_sqlite3.node")
+            for candidate in \
+              "$native_dir/node-pty/bin/darwin-arm64-145/node-pty.node" \
+              "$native_dir/node-pty/build/Release/pty.node" \
+              "$native_dir/node-pty/prebuilds/darwin-arm64/pty.node"; do
+              if [ -f "$candidate" ]; then addons+=("$candidate"); fi
+            done
+            test "${#addons[@]}" -ge 2
+            for addon in "${addons[@]}"; do
+              test "$(lipo -archs "$addon")" = arm64
+              codesign --verify --strict --verbose=2 "$addon"
+              local addon_details
+              addon_details="$(codesign -dv --verbose=4 "$addon" 2>&1)"
+              if [ "$DAEMON_MAC_RELEASE_MODE" = signed ]; then
+                grep -q '^Authority=Developer ID Application:' <<< "$addon_details"
+                test "$(sed -n 's/^TeamIdentifier=//p' <<< "$addon_details")" = "$app_team"
+              else
+                grep -q '^Signature=adhoc$' <<< "$addon_details"
+                ! grep -q '^Authority=' <<< "$addon_details"
+              fi
+            done
+          }
+
+          verify_bundle "$APP_PATH"
+          node scripts/release-tools/verify-macos-artifacts.mjs "$RELEASE_DIR" "$VERSION" "${verifier_args[@]}"
+
+          dmg_path="$RELEASE_DIR/$artifact_stem.dmg"
+          zip_path="$RELEASE_DIR/$artifact_stem.zip"
+          hdiutil verify "$dmg_path"
+          unzip -t "$zip_path"
+          mount_dir="$(mktemp -d)"
+          zip_dir="$(mktemp -d)"
+          cleanup() {
+            hdiutil detach "$mount_dir" -force >/dev/null 2>&1 || true
+            rm -rf "$mount_dir" "$zip_dir"
+          }
+          trap cleanup EXIT
+          hdiutil attach "$dmg_path" -nobrowse -readonly -mountpoint "$mount_dir"
+          verify_bundle "$mount_dir/DAEMON.app"
+          ditto -x -k "$zip_path" "$zip_dir"
+          verify_bundle "$zip_dir/DAEMON.app"
+          DAEMON_PACKAGED_EXE="$zip_dir/DAEMON.app/Contents/MacOS/DAEMON" \
+            node scripts/smoke/lite-app-smoke.mjs
+          cleanup
+          trap - EXIT
+      - name: Packaged smoke
         run: |
-          cd release
-          find . -name "*.AppImage" | while read f; do
-            sha256sum "$f" >> checksums-linux.txt
-          done
+          node scripts/smoke/lite-app-smoke.mjs
+          node scripts/smoke/lite-workbench-smoke.mjs
+      - name: Generate checksum
+        shell: bash
+        run: |
+          VERSION="$(node -p "require('./package.json').version")"
+          RELEASE_DIR="release-lite/$VERSION"
+          case "$DAEMON_MAC_RELEASE_MODE" in
+            signed) artifact_stem='DAEMON-arm64' ;;
+            unsigned) artifact_stem='DAEMON-unsigned-arm64' ;;
+            *) echo "Invalid macOS release mode: $DAEMON_MAC_RELEASE_MODE"; exit 1 ;;
+          esac
+          shasum -a 256 "$RELEASE_DIR/$artifact_stem.dmg" "$RELEASE_DIR/$artifact_stem.zip" \
+            | sed "s#$RELEASE_DIR/##" > release-lite/checksums-macos.txt
+          printf '%s\n' "$DAEMON_MAC_RELEASE_MODE" > release-lite/mac-release-mode.txt
       - uses: actions/upload-artifact@v7
         with:
-          name: linux-release
+          name: daemon-macos-arm64-release
           path: |
-            release/*/DAEMON.AppImage
-            release/*/latest-linux.yml
-            release/checksums-linux.txt
+            release-lite/*/DAEMON-*arm64.dmg
+            release-lite/*/DAEMON-*arm64.dmg.blockmap
+            release-lite/*/DAEMON-*arm64.zip
+            release-lite/*/DAEMON-*arm64.zip.blockmap
+            release-lite/*/latest-mac.yml
+            release-lite/checksums-macos.txt
+            release-lite/mac-release-mode.txt
           retention-days: 1
 
   publish:
     runs-on: ubuntu-latest
-    needs: [release-windows, release-macos, release-linux]
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
+    needs: [package-windows, package-macos]
     permissions:
       actions: read
       contents: write
@@ -220,47 +274,68 @@ jobs:
           fetch-depth: 0
       - uses: actions/download-artifact@v8
         with:
-          name: windows-release
+          name: daemon-windows-release
           path: artifacts/windows
       - uses: actions/download-artifact@v8
         with:
-          name: macos-release
+          name: daemon-macos-arm64-release
           path: artifacts/macos
-      - uses: actions/download-artifact@v8
-        with:
-          name: linux-release
-          path: artifacts/linux
       - name: Generate changelog
-        id: changelog
         run: |
           PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || git rev-list --max-parents=0 HEAD)
-          echo "## Changes" > changelog.md
-          echo "" >> changelog.md
-          git log --pretty=format:"- %s (%h)" "$PREV_TAG"..HEAD >> changelog.md
-          echo "" >> changelog.md
-          echo "" >> changelog.md
-          echo "## Checksums" >> changelog.md
+          MAC_RELEASE_MODE="$(cat artifacts/macos/mac-release-mode.txt)"
+          case "$MAC_RELEASE_MODE" in
+            unsigned)
+              echo '## macOS Apple Silicon warning' > changelog.md
+              echo '' >> changelog.md
+              echo 'This Apple Silicon build is ad-hoc signed and is not Apple-notarized. Gatekeeper will block the first launch. Verify the SHA-256 checksum below, then follow the [macOS install steps](https://www.daemonide.tech/docs/install-help). Automatic macOS updates are disabled; install future releases manually.' >> changelog.md
+              echo '' >> changelog.md
+              echo "RELEASE_TITLE=DAEMON ${GITHUB_REF_NAME} (macOS unsigned)" >> "$GITHUB_ENV"
+              ;;
+            signed)
+              : > changelog.md
+              echo "RELEASE_TITLE=DAEMON ${GITHUB_REF_NAME}" >> "$GITHUB_ENV"
+              ;;
+            *) echo "Invalid macOS release mode: $MAC_RELEASE_MODE"; exit 1 ;;
+          esac
+          echo "MAC_RELEASE_MODE=$MAC_RELEASE_MODE" >> "$GITHUB_ENV"
+          echo '## DAEMON focused workbench' >> changelog.md
+          echo '' >> changelog.md
+          echo '- Conversation-first Solana development shell' >> changelog.md
+          echo '- Project explorer, offline Monaco editor, and scoped terminal' >> changelog.md
+          echo '- Meme Tech repo intelligence and read-only market evidence' >> changelog.md
+          echo '- Guarded localnet/devnet workflows with no silent mainnet authority' >> changelog.md
+          echo '' >> changelog.md
+          echo '## Changes' >> changelog.md
+          git log --pretty=format:'- %s (%h)' "$PREV_TAG"..HEAD >> changelog.md
+          echo '' >> changelog.md
+          echo '' >> changelog.md
+          echo '## SHA-256' >> changelog.md
           echo '```' >> changelog.md
-          cat artifacts/windows/checksums-windows.txt 2>/dev/null >> changelog.md || true
-          cat artifacts/macos/checksums-macos.txt 2>/dev/null >> changelog.md || true
-          cat artifacts/linux/checksums-linux.txt 2>/dev/null >> changelog.md || true
+          cat artifacts/windows/checksums-windows.txt >> changelog.md
+          cat artifacts/macos/checksums-macos.txt >> changelog.md
           echo '```' >> changelog.md
-      - name: Create GitHub Release
+      - name: Stage release assets
+        shell: bash
+        run: |
+          mkdir -p artifacts/release
+          find artifacts/windows -type f \( -name 'DAEMON-setup.exe' -o -name 'DAEMON-setup.exe.blockmap' -o -name 'latest.yml' \) \
+            -exec cp {} artifacts/release/ \;
+          cp artifacts/windows/checksums-windows.txt artifacts/release/
+          find artifacts/macos -type f \( -name 'DAEMON-*arm64.dmg' -o -name 'DAEMON-*arm64.dmg.blockmap' -o -name 'DAEMON-*arm64.zip' -o -name 'DAEMON-*arm64.zip.blockmap' \) \
+            -exec cp {} artifacts/release/ \;
+          cp artifacts/macos/checksums-macos.txt artifacts/release/
+          case "$MAC_RELEASE_MODE" in
+            signed) find artifacts/macos -type f -name 'latest-mac.yml' -exec cp {} artifacts/release/ \; ;;
+            unsigned) ;;
+            *) echo "Invalid macOS release mode: $MAC_RELEASE_MODE"; exit 1 ;;
+          esac
+      - name: Create GitHub release
         uses: softprops/action-gh-release@v3
         with:
+          name: ${{ env.RELEASE_TITLE }}
           body_path: changelog.md
           draft: false
           prerelease: ${{ contains(github.ref, '-beta') || contains(github.ref, '-alpha') || contains(github.ref, '-rc') }}
           files: |
-            artifacts/windows/*/DAEMON-setup.exe
-            artifacts/windows/*/latest.yml
-            artifacts/windows/*/DAEMON-setup.exe.blockmap
-            artifacts/macos/*/DAEMON-*.dmg
-            artifacts/macos/*/DAEMON-*.zip
-            artifacts/macos/*/latest-mac.yml
-            artifacts/macos/*/DAEMON-*.blockmap
-            artifacts/linux/*/DAEMON.AppImage
-            artifacts/linux/*/latest-linux.yml
-            artifacts/windows/checksums-windows.txt
-            artifacts/macos/checksums-macos.txt
-            artifacts/linux/checksums-linux.txt
+            artifacts/release/*
diff --git a/.gitignore b/.gitignore
index 0798d510..f5a3abe9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,11 +10,14 @@ node_modules
 dist
 dist-ssr
 dist-electron
+dist-electron-lite
+dist-lite
 dist-cloud
 dist-bridge
 packages/bridge-shim/daemon-bridge-shim.mjs
 packages/bridge-shim/*.tgz
 release
+release-lite
 *.tsbuildinfo
 *.local
 
@@ -73,6 +76,7 @@ features/
 # Internal dev artifacts
 .design/
 /screenshots/
+/recordings/
 NVIDIA Corporation/
 .agents/
 .codex-run/
diff --git a/BRAND.md b/BRAND.md
index 6396d64e..5b9aea8d 100644
--- a/BRAND.md
+++ b/BRAND.md
@@ -8,28 +8,29 @@ Official brand identity reference for the DAEMON agent workbench. Follow these r
 
 ### Core Backgrounds (Elevation Scale)
 
-Dark-first. Each step lifts a surface closer to the user.
-
-| Token  | Hex       | Usage                              |
-|--------|-----------|-------------------------------------|
-| `--bg` | `#0a0a0a` | Workspace pit — deepest layer       |
-| `--s1` | `#141414` | Sidebars, titlebar, cards           |
-| `--s2` | `#1a1a1a` | Inputs, secondary surfaces          |
-| `--s3` | `#222222` | Hover states                        |
-| `--s4` | `#2a2a2a` | Active / pressed states             |
-| `--s5` | `#333333` | Borders                             |
-| `--s6` | `#3a3a3a` | Strong borders / dividers           |
+Dark-first, green-tinted near-black (shared with the Daemon website design
+system). Never brown, never pure black or pure gray. Each step lifts a surface
+closer to the user.
+
+| Token  | Hex       | Usage                                  |
+|--------|-----------|----------------------------------------|
+| `--void` | `#0a0c0b` | Workspace pit — deepest layer        |
+| `--bg`   | `#0c0e0d` | App chrome, editor/terminal ground   |
+| `--s1`   | `#101211` | Panels, sidebars, titlebar           |
+| `--s2`   | `#171a18` | Cards, inputs, secondary surfaces    |
+| `--s3`   | `#1d211e` | Hover states, raised surfaces        |
+| `--s4`   | `#252a27` | Active / pressed states              |
 
 ### Text Scale
 
-All values are WCAG AA compliant against `--bg` (#0a0a0a).
+Cream `#ECEEE9` ladder (brand steps 100/65/45/30%) against `--s1` (#101211).
 
-| Token  | Hex       | Contrast | Usage                    |
-|--------|-----------|----------|--------------------------|
-| `--t1` | `#f0f0f0` | 15.5:1   | Primary text             |
-| `--t2` | `#a0a0a0` | 7.5:1    | Secondary text           |
-| `--t3` | `#888888` | 6.1:1    | Tertiary / muted labels  |
-| `--t4` | `#666666` | 4.6:1    | Disabled / placeholder   |
+| Token  | Hex       | Usage                    |
+|--------|-----------|--------------------------|
+| `--t1` | `#eceee9` | Primary text             |
+| `--t2` | `#9fa19d` | Secondary text           |
+| `--t3` | `#737571` | Tertiary / muted labels  |
+| `--t4` | `#525451` | Disabled / placeholder   |
 
 ### Accent Colors
 
@@ -67,8 +68,8 @@ Each accent has three states: **base**, **dim** (hover/pressed), and **glow** (a
 
 | Purpose       | Font                | Fallback Stack                                        |
 |---------------|---------------------|-------------------------------------------------------|
-| **UI**        | Plus Jakarta Sans   | -apple-system, BlinkMacSystemFont, sans-serif         |
-| **Code**      | JetBrains Mono      | Fira Code, Cascadia Code, monospace                   |
+| **UI**        | Geist               | Plus Jakarta Sans, -apple-system, sans-serif          |
+| **Code**      | JetBrains Mono      | Geist Mono, Cascadia Code, monospace                  |
 
 Both fonts are self-hosted as `.woff2` in `/public/fonts/`. No external font requests — DAEMON runs fully offline.
 
diff --git a/DESIGN_SYSTEM.md b/DESIGN_SYSTEM.md
index c20380e4..dd9dd33c 100644
--- a/DESIGN_SYSTEM.md
+++ b/DESIGN_SYSTEM.md
@@ -8,6 +8,13 @@ should feel like it was built by the same hand on the same day.
 > flow, visual cohesion, and professional information density — on top of DAEMON's
 > dark + green Solana identity.
 
+> **Brand alignment (July 2026):** token values follow the shared Daemon brand
+> system (same as the website): green-tinted near-black surfaces (panel `#101211`,
+> card `#171A18`, raised `#1D211E`, chrome `#0C0E0D` — never brown, never pure
+> black/gray), cream text ladder from `#ECEEE9`, cream hairline borders, one green
+> accent `#3ECF8E`. UI face is **Geist**; mono is **JetBrains Mono** (Geist Mono
+> fallback). Values live in `styles/tokens.css`; panels keep using semantic tokens.
+
 ---
 
 ## Principles
diff --git a/README.md b/README.md
index ad18c3c4..49920b06 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,7 @@
 <p align="center">
   <h1 align="center">DAEMON</h1>
-  <p align="center">An AI-native Solana development environment for agents, wallets, launches, deployments, and hosted DAEMON AI.</p>
+  <p align="center"><strong>AI agents that work inside your Solana stack, under your authority.</strong></p>
+  <p align="center">Build, inspect, and operate from one local-first workbench. Writes, Git pushes, and fund movement stay behind explicit review.</p>
 </p>
 
 <p align="center">
@@ -8,7 +9,6 @@
   <img src="https://img.shields.io/github/v/release/nullxnothing/daemon" alt="Release">
   <img src="https://img.shields.io/github/downloads/nullxnothing/daemon/total" alt="Downloads">
   <img src="https://img.shields.io/github/license/nullxnothing/daemon" alt="License">
-  <img src="https://img.shields.io/badge/tests-979%20passing-brightgreen" alt="Tests">
 </p>
 
 <p align="center">
@@ -25,20 +25,20 @@
 ---
 
 <p align="center">
-  <strong>$DAEMON CA:</strong> <code>4vpf4qNtNVkvz2dm5qL2mT6jBXH9gDY8qH2QsHN5pump</code>
+  <img src="docs/screenshots/ui-overview.webp" alt="DAEMON 4.7 project templates with the ARIA console and guarded first-mission actions" width="900">
 </p>
 
----
+**[Frontier demo runbook](FRONTIER_SUBMISSION.md#2-minute-demo-runbook)** — 2-minute submission flow from project open to devnet settlement.
 
-<p align="center">
-  <img src="docs/screenshots/ui-overview.webp" alt="DAEMON agent workbench with editor, terminal, and sidebar" width="800">
-</p>
+DAEMON is a focused Windows workbench for Solana builders who want one persistent AI conversation beside real project files, a scoped terminal, guarded local workflows, and live meme-tech evidence. It is local-first and does not hand agents silent authority over code, keys, Git, or funds.
 
-**[Frontier demo runbook](FRONTIER_SUBMISSION.md#2-minute-demo-runbook)** — 2-minute submission flow from project open to devnet settlement.
+## How authority works
 
-DAEMON is a standalone Electron development environment for Solana builders who use AI agents to ship. It combines an offline editor, real PTY terminals, DAEMON AI, Claude/Codex agent spawning, MCP management, wallet/RPC readiness, token launches, deployments, integrations, and an Anchor-backed registry for publishing verifiable agent work receipts. Not a VS Code fork.
+1. **Inspect:** enabled read tools gather project, Git, wallet, and runtime context.
+2. **Review:** writes pause for approval. Guarded sensitive flows use typed checks, and direct Autopilot arming ends in an OS-native review of every bound mainnet term.
+3. **Verify:** diffs, test output, signatures, and explorer links keep results inspectable after execution.
 
-DAEMON Light stays free and useful for local work and bring-your-own-key AI. DAEMON Pro and holder access unlock hosted DAEMON AI, Pro Skills, Arena, MCP sync, priority workflows, and higher model lanes as they go live.
+The free tier stays free for local work and bring-your-own-key AI. Advanced trading, launch, and hosted AI surfaces are optional capability packs, not prerequisites for the core build loop.
 
 ## Install
 
@@ -46,64 +46,55 @@ DAEMON Light stays free and useful for local work and bring-your-own-key AI. DAE
 
 <a name="mac-install"></a>
 
-**Mac:** Build from source (signed builds configurable via Apple credentials):
+**Mac and Linux:** The canonical packaged release is currently Windows-only. Build the repository from source for development:
 
 ```bash
 git clone https://github.com/nullxnothing/daemon.git
 cd daemon
 pnpm install
 pnpm run build
-pnpm run package
 ```
 
-The `.dmg` will be in `release/<version>/`. Signed/notarized builds require Apple Developer credentials in the packaging environment. Without them, the app will still package, but Gatekeeper may require right-click > Open on first launch.
-
-<a name="linux-install"></a>
-
-**Linux:** Build from source (AppImage builds coming soon):
+**Build the canonical Windows installer from source:**
 
 ```bash
 git clone https://github.com/nullxnothing/daemon.git
 cd daemon
 pnpm install
-pnpm run build
-pnpm run package
+pnpm run package:lite
 ```
 
-The AppImage will be in `release/<version>/`. Make it executable with `chmod +x` and run directly.
+Requires **Node.js 22+** and **pnpm 9+**.
 
-**Build from source (any platform):**
+The installer is written to `release-lite/<version>/DAEMON-setup.exe`.
 
-```bash
-git clone https://github.com/nullxnothing/daemon.git
-cd daemon
-pnpm install
-pnpm run package
-```
+## Focused workbench
 
-Requires **Node.js 22+** and **pnpm 9+**.
+- **Conversation:** project-scoped sessions, bring-your-own-key models, and encrypted local credentials.
+- **Code:** bounded project import, recursive explorer, offline Monaco, dirty-file protection, and explicit save states.
+- **Terminal:** real project-scoped PTYs with visible exit and error states.
+- **Meme Tech:** repo topology, Birdeye and DEX market context, provider divergence, and read-only token-risk evidence.
+- **Wallet, Trade, Scanner:** optional tools behind the same guarded shell. Wallet addresses remain watch-only by default.
 
 ## Features
 
-<p align="center">
-  <img src="docs/screenshots/editor.webp" alt="Editor with multiple tabs, breadcrumbs, and file tree" width="800">
-</p>
-
 **Editor** — Monaco running fully offline via a custom protocol handler. Multi-tab, breadcrumbs, syntax highlighting, Ctrl+S save. No CDN dependency.
 
 **Terminal** — Real PTY sessions powered by node-pty and xterm.js. Multiple tabs, split panes, command history search (Ctrl+R), tab-completion hints, and dedicated agent session management.
 
-<p align="center">
-  <img src="docs/screenshots/agent-launcher.webp" alt="Agent launcher with model selection and MCP config" width="800">
-</p>
-
 **Agent Launcher** — Spawn Claude Code agents with custom system prompts, model selection, and per-project MCP configurations. Agents run as real CLI sessions in dedicated terminal tabs.
 
+**ARIA Game Studio Beta:** Create a playable local Phaser starter, install dependencies, verify a
+production build, and open the preview inside DAEMON. With approval, ARIA can send one focused
+`build_game` lane into a separate Git worktree. The starter has typed seams for future Solana
+integration, but the beta uses local stubs. It does not connect a live wallet, write onchain, mint,
+publish, or deploy. `deploy_app` opens the Deploy panel for a manual handoff.
+
 **VS Code-style shell + capability packs** — Explorer, editor, a bottom-panel terminal, and the DAEMON Console on the right rail. Domain features ship as toggleable capability packs (Solana, Wallet, Launch, Agents, Memory, Sites, Markets, Create); disabling a pack quiesces its tools, integrations, sidebar icon, console commands, and background work — IPC handlers included. The Capability Manager shows how many packs are active and how much backend work is idle.
 
 **DAEMON Console (ARIA operator)** — The right-rail AI operator drives the whole IDE from natural language, chat-first with `>` and `/` command accelerators. Per-project chat sessions (new / switch / rename / archive / delete) with memory that survives restarts and compounds: the console proposes durable facts after real work (Keep/Dismiss), cites which taught facts a turn drew on, and strengthens proven facts over time. It runs DAEMON itself — agent wallets, token preflight/launch, Flywheel config, git — through a registry of typed tools with typed confirmation for sensitive on-chain actions (and a `[MAINNET]` guard). It never pushes to git autonomously.
 
-**ARIA Autopilot** — Standing, structured trading mandates parsed from natural language and executed unattended on mainnet on a fixed cadence, with exit rules (take-profit / stop-loss / liquidity floor), a hard exposure cap, arm/disarm/kill-switch, and a "The Desk" panel showing live unrealized P&L and the action tape. Every tick claims its ledger row before it swaps, so a crash mid-tick is held for review, never replayed into a double-buy; a cluster switch auto-holds armed mandates; unattended slippage and price impact are capped tighter than a human-confirmed trade.
+**ARIA Autopilot (experimental):** Bounded mainnet mandates run on a fixed cadence after a typed review of the wallet, mint, clip, exposure cap, slippage, and exits. The Desk shows estimated P&L and an action tape. Every tick claims its ledger row before it swaps, so a crash mid-tick is held for review, never replayed into a double-buy; a cluster switch auto-holds armed mandates; unattended slippage and price impact are capped tighter than a human-confirmed trade. Disarming stops future ticks, but a submitted swap may still settle.
 
 **Hyperliquid (via HypurrClaw)** — ARIA reads Hyperliquid markets and trades perps/spot by driving the agent-first `hyperliquid` CLI through a single execFile gate (no raw shell). Network defaults to testnet, DAEMON never holds a Hyperliquid key (the CLI's encrypted wallet signs), and every signing action stops for typed confirmation with an `[HL-MAINNET]`/`[HL-TESTNET]` marker.
 
@@ -123,10 +114,6 @@ Requires **Node.js 22+** and **pnpm 9+**.
 
 **Wallet** — Live Solana portfolio tracking via Helius. SOL balance and SPL token holdings with USD values from Jupiter.
 
-<p align="center">
-  <img src="docs/screenshots/wallet.webp" alt="Wallet panel showing token balances" width="800">
-</p>
-
 **Settings** — API keys encrypted via the OS keychain. MCP integrations, agent defaults, and display preferences.
 
 **Tools Browser** — Create, import, and run scripts (TypeScript, Python, Shell) with per-language execution.
@@ -154,6 +141,8 @@ DAEMON AI is the hosted agent layer for project-aware chat, patch workflows, Sol
 
 Holder access starts with a simple rule: hold 1,000,000 $DAEMON to claim DAEMON Pro with included monthly AI usage. Higher holder tiers can unlock higher limits, discounts, badges, and early access later. Holder access does not mean unlimited AI usage.
 
+**$DAEMON contract address:** `4vpf4qNtNVkvz2dm5qL2mT6jBXH9gDY8qH2QsHN5pump`
+
 DAEMON also includes a Zauth integration surface for x402 database and Provider Hub management. Payment and entitlement enforcement should remain server-side through DAEMON AI Cloud and the relevant provider backends.
 
 ## Architecture
diff --git a/Whatsnew.md b/Whatsnew.md
index 746e4a2c..e7463776 100644
--- a/Whatsnew.md
+++ b/Whatsnew.md
@@ -1,9 +1,19 @@
-# DAEMON v4.6
+# DAEMON v4.7
 
-DAEMON v4.6 turns the operator into a full trading and execution surface: unattended mandates, a second venue, a transparent fee line, and a bridge that lets external agents drive DAEMON's gated tools, all on top of the VS Code-style shell and capability packs introduced in v4.3.
+DAEMON v4.7 adds ARIA Game Studio Beta: a local-first path from a playable Phaser starter to an
+agent-assisted build and in-app preview. The starter runs locally. Its typed wallet, score, and
+trophy interfaces use local stubs, so the beta makes no onchain calls.
 
 ## Highlights
 
+- **ARIA Game Studio Beta:** Choose the game starter, install its dependencies, verify a production
+  build, and open the local preview in DAEMON. The starter includes typed seams for future Solana
+  integration backed by local stubs.
+- **Focused agent build:** The approved `build_game` action runs one lane in a separate Git worktree
+  with Game Studio constraints supplied by DAEMON. Lane output still goes through project, branch,
+  and clean-worktree checks before merge.
+- **Manual deploy handoff:** `deploy_app` opens the Deploy panel. The beta does not perform a live
+  wallet connection, onchain write, mint, publish, or deployment.
 - **DAEMON Console + capability packs** — a VS Code-style shell (explorer, editor, bottom terminal, right-rail console) with toggleable packs. Turn a pack off and its tools, integrations, and background work go quiet.
 - **ARIA Autopilot** — standing trading mandates parsed from natural language and run unattended on mainnet with exit rules, a hard exposure cap, and arm/disarm/kill switches. "The Desk" shows live unrealized P&L and the action tape.
 - **Hyperliquid via HypurrClaw** — ARIA reads Hyperliquid markets and trades perps/spot through the agent-first CLI. Testnet by default; DAEMON never holds a Hyperliquid key.
@@ -13,8 +23,20 @@ DAEMON v4.6 turns the operator into a full trading and execution surface: unatte
 - **Agent economy control tower** — track agent-routed execution, fees, and paid-resource activity in one panel.
 - **Venum** — a first-class Solana execution provider in the Markets pack (live/batch prices, ranked swap quotes).
 
+## DAEMON Lite
+
+- **A separate, small download that is just the agent.** DAEMON Lite ships the ARIA chatbox on its own — no editor, terminal, or project system. Paste one key (Anthropic or GLM/Z.AI) and chat. Keys are encrypted with the OS keychain and stay on the device.
+- **Coexists with the full app.** Its own installer, appId, and userData, at roughly half the size (~106MB). Install both side by side.
+- **DAEMON-focused tools, same gate.** A collapsible Tools section adds Wallet (read-only watch), Trade (token search, watchlist, and typed-confirm swaps through ARIA with a hard cap), and Scanner (one-shot rug check on mint/freeze authority, snipers, bundles, and cabal links). Every write and swap runs through the same approval gate as the full app.
+- **Pop-out browser.** A real browser pane for previews and dashboards, restricted to https and loopback URLs, owned by the main process with no preload on the guest page.
+- **Beginner-first onboarding.** One screen, bring-your-own-key, with an "Open in DAEMON IDE" handoff when you outgrow the chatbox.
+
 ## Hardening
 
+- Game starter files and prompts redact RPC and credential-bearing URLs. Project names are strict,
+  and scaffolding requires a target folder that does not already exist.
+- The generated lockfile is committed only after install, production build verification, and a
+  real local preview listener. Git push blocking applies only to the build lane's worktree.
 - Autopilot ticks claim their ledger row before swapping, so a crash mid-tick is held for review rather than replayed into a double-buy; a cluster switch auto-holds armed mandates; unattended slippage and price impact are capped tighter than a human-confirmed trade.
 - Swap price impact is normalized to a single unit end to end, so ordinary low-impact swaps are never spuriously blocked.
 - ARIA streamed events are tagged per session so approval cards can never attach to the wrong conversation; the approval-resolution channels reject untrusted senders.
@@ -39,3 +61,5 @@ DAEMON v4.6 turns the operator into a full trading and execution surface: unatte
 
 - `pnpm run typecheck && pnpm run test && pnpm run build`
 - `pnpm run lint:styles`
+- `pnpm run test:ci`
+- Packaged Windows executable exercised through the Game Studio desktop/mobile smoke flow.
diff --git a/build/entitlements.mac.plist b/build/entitlements.mac.plist
index 259b9903..f5fb28cf 100644
--- a/build/entitlements.mac.plist
+++ b/build/entitlements.mac.plist
@@ -6,8 +6,6 @@
   <true/>
   <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
   <true/>
-  <key>com.apple.security.cs.allow-dyld-environment-variables</key>
-  <true/>
   <key>com.apple.security.network.client</key>
   <true/>
   <key>com.apple.security.files.user-selected.read-write</key>
diff --git a/build/lite-runtime/.npmrc b/build/lite-runtime/.npmrc
new file mode 100644
index 00000000..d67f3748
--- /dev/null
+++ b/build/lite-runtime/.npmrc
@@ -0,0 +1 @@
+node-linker=hoisted
diff --git a/build/lite-runtime/package.json b/build/lite-runtime/package.json
new file mode 100644
index 00000000..eee7de9a
--- /dev/null
+++ b/build/lite-runtime/package.json
@@ -0,0 +1,20 @@
+{
+  "name": "@daemon/lite-runtime",
+  "version": "0.0.0",
+  "private": true,
+  "pnpm": {
+    "patchedDependencies": {
+      "node-pty@1.1.0": "../../patches/node-pty@1.1.0.patch"
+    }
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "0.98.0",
+    "@solana/spl-token": "0.4.14",
+    "@solana/web3.js": "1.98.4",
+    "better-sqlite3": "12.10.0",
+    "bs58": "6.0.0",
+    "electron-updater": "6.8.3",
+    "node-pty": "1.1.0",
+    "tweetnacl": "1.0.3"
+  }
+}
diff --git a/build/lite-runtime/pnpm-lock.yaml b/build/lite-runtime/pnpm-lock.yaml
new file mode 100644
index 00000000..a4cafa92
--- /dev/null
+++ b/build/lite-runtime/pnpm-lock.yaml
@@ -0,0 +1,1324 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+patchedDependencies:
+  node-pty@1.1.0:
+    hash: f41f3f1b27203d2dfc08a004c1c51bc4a56ca84fce763607028e80840c5bcc3e
+    path: ../../patches/node-pty@1.1.0.patch
+
+importers:
+
+  .:
+    dependencies:
+      '@anthropic-ai/sdk':
+        specifier: 0.98.0
+        version: 0.98.0
+      '@solana/spl-token':
+        specifier: 0.4.14
+        version: 0.4.14(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6))(bufferutil@4.1.0)(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)(utf-8-validate@6.0.6)
+      '@solana/web3.js':
+        specifier: 1.98.4
+        version: 1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6)
+      better-sqlite3:
+        specifier: 12.10.0
+        version: 12.10.0
+      bs58:
+        specifier: 6.0.0
+        version: 6.0.0
+      electron-updater:
+        specifier: 6.8.3
+        version: 6.8.3
+      node-pty:
+        specifier: 1.1.0
+        version: 1.1.0(patch_hash=f41f3f1b27203d2dfc08a004c1c51bc4a56ca84fce763607028e80840c5bcc3e)
+      tweetnacl:
+        specifier: 1.0.3
+        version: 1.0.3
+
+packages:
+
+  '@anthropic-ai/sdk@0.98.0':
+    resolution: {integrity: sha512-N7aXtCvC5g6T1Y4V29lJjceu/zTkVkIZF0jdBvagr0TRFHuKeImffalGWEfqZKrvjH+IQbzJWw6TmSmUzrlMgg==}
+    hasBin: true
+    peerDependencies:
+      zod: ^3.25.0 || ^4.0.0
+    peerDependenciesMeta:
+      zod:
+        optional: true
+
+  '@babel/runtime@7.29.7':
+    resolution: {integrity: sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==}
+    engines: {node: '>=6.9.0'}
+
+  '@noble/curves@1.9.7':
+    resolution: {integrity: sha512-gbKGcRUYIjA3/zCCNaWDciTMFI0dCkvou3TL8Zmy5Nc7sJ47a0jtOeZoTaMxkuqRo9cRhjOdZJXegxYE5FN/xw==}
+    engines: {node: ^14.21.3 || >=16}
+
+  '@noble/hashes@1.8.0':
+    resolution: {integrity: sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==}
+    engines: {node: ^14.21.3 || >=16}
+
+  '@solana/buffer-layout-utils@0.2.0':
+    resolution: {integrity: sha512-szG4sxgJGktbuZYDg2FfNmkMi0DYQoVjN2h7ta1W1hPrwzarcFLBq9UpX1UjNXsNpT9dn+chgprtWGioUAr4/g==}
+    engines: {node: '>= 10'}
+
+  '@solana/buffer-layout@4.0.1':
+    resolution: {integrity: sha512-E1ImOIAD1tBZFRdjeM4/pzTiTApC0AOBGwyAMS4fwIodCWArzJ3DWdoh8cKxeFM2fElkxBh2Aqts1BPC373rHA==}
+    engines: {node: '>=5.10'}
+
+  '@solana/codecs-core@2.0.0-rc.1':
+    resolution: {integrity: sha512-bauxqMfSs8EHD0JKESaNmNuNvkvHSuN3bbWAF5RjOfDu2PugxHrvRebmYauvSumZ3cTfQ4HJJX6PG5rN852qyQ==}
+    peerDependencies:
+      typescript: '>=5'
+
+  '@solana/codecs-core@2.3.0':
+    resolution: {integrity: sha512-oG+VZzN6YhBHIoSKgS5ESM9VIGzhWjEHEGNPSibiDTxFhsFWxNaz8LbMDPjBUE69r9wmdGLkrQ+wVPbnJcZPvw==}
+    engines: {node: '>=20.18.0'}
+    peerDependencies:
+      typescript: '>=5.3.3'
+
+  '@solana/codecs-data-structures@2.0.0-rc.1':
+    resolution: {integrity: sha512-rinCv0RrAVJ9rE/rmaibWJQxMwC5lSaORSZuwjopSUE6T0nb/MVg6Z1siNCXhh/HFTOg0l8bNvZHgBcN/yvXog==}
+    peerDependencies:
+      typescript: '>=5'
+
+  '@solana/codecs-numbers@2.0.0-rc.1':
+    resolution: {integrity: sha512-J5i5mOkvukXn8E3Z7sGIPxsThRCgSdgTWJDQeZvucQ9PT6Y3HiVXJ0pcWiOWAoQ3RX8e/f4I3IC+wE6pZiJzDQ==}
+    peerDependencies:
+      typescript: '>=5'
+
+  '@solana/codecs-numbers@2.3.0':
+    resolution: {integrity: sha512-jFvvwKJKffvG7Iz9dmN51OGB7JBcy2CJ6Xf3NqD/VP90xak66m/Lg48T01u5IQ/hc15mChVHiBm+HHuOFDUrQg==}
+    engines: {node: '>=20.18.0'}
+    peerDependencies:
+      typescript: '>=5.3.3'
+
+  '@solana/codecs-strings@2.0.0-rc.1':
+    resolution: {integrity: sha512-9/wPhw8TbGRTt6mHC4Zz1RqOnuPTqq1Nb4EyuvpZ39GW6O2t2Q7Q0XxiB3+BdoEjwA2XgPw6e2iRfvYgqty44g==}
+    peerDependencies:
+      fastestsmallesttextencoderdecoder: ^1.0.22
+      typescript: '>=5'
+
+  '@solana/codecs@2.0.0-rc.1':
+    resolution: {integrity: sha512-qxoR7VybNJixV51L0G1RD2boZTcxmwUWnKCaJJExQ5qNKwbpSyDdWfFJfM5JhGyKe9DnPVOZB+JHWXnpbZBqrQ==}
+    peerDependencies:
+      typescript: '>=5'
+
+  '@solana/errors@2.0.0-rc.1':
+    resolution: {integrity: sha512-ejNvQ2oJ7+bcFAYWj225lyRkHnixuAeb7RQCixm+5mH4n1IA4Qya/9Bmfy5RAAHQzxK43clu3kZmL5eF9VGtYQ==}
+    hasBin: true
+    peerDependencies:
+      typescript: '>=5'
+
+  '@solana/errors@2.3.0':
+    resolution: {integrity: sha512-66RI9MAbwYV0UtP7kGcTBVLxJgUxoZGm8Fbc0ah+lGiAw17Gugco6+9GrJCV83VyF2mDWyYnYM9qdI3yjgpnaQ==}
+    engines: {node: '>=20.18.0'}
+    hasBin: true
+    peerDependencies:
+      typescript: '>=5.3.3'
+
+  '@solana/options@2.0.0-rc.1':
+    resolution: {integrity: sha512-mLUcR9mZ3qfHlmMnREdIFPf9dpMc/Bl66tLSOOWxw4ml5xMT2ohFn7WGqoKcu/UHkT9CrC6+amEdqCNvUqI7AA==}
+    peerDependencies:
+      typescript: '>=5'
+
+  '@solana/spl-token-group@0.0.7':
+    resolution: {integrity: sha512-V1N/iX7Cr7H0uazWUT2uk27TMqlqedpXHRqqAbVO2gvmJyT0E0ummMEAVQeXZ05ZhQ/xF39DLSdBp90XebWEug==}
+    engines: {node: '>=16'}
+    peerDependencies:
+      '@solana/web3.js': ^1.95.3
+
+  '@solana/spl-token-metadata@0.1.6':
+    resolution: {integrity: sha512-7sMt1rsm/zQOQcUWllQX9mD2O6KhSAtY1hFR2hfFwgqfFWzSY9E9GDvFVNYUI1F0iQKcm6HmePU9QbKRXTEBiA==}
+    engines: {node: '>=16'}
+    peerDependencies:
+      '@solana/web3.js': ^1.95.3
+
+  '@solana/spl-token@0.4.14':
+    resolution: {integrity: sha512-u09zr96UBpX4U685MnvQsNzlvw9TiY005hk1vJmJr7gMJldoPG1eYU5/wNEyOA5lkMLiR/gOi9SFD4MefOYEsA==}
+    engines: {node: '>=16'}
+    peerDependencies:
+      '@solana/web3.js': ^1.95.5
+
+  '@solana/web3.js@1.98.4':
+    resolution: {integrity: sha512-vv9lfnvjUsRiq//+j5pBdXig0IQdtzA0BRZ3bXEP4KaIyF1CcaydWqgyzQgfZMNIsWNWmG+AUHwPy4AHOD6gpw==}
+
+  '@stablelib/base64@1.0.1':
+    resolution: {integrity: sha512-1bnPQqSxSuc3Ii6MhBysoWCg58j97aUjuCSZrGSmDxNqtytIi0k8utUenAwTZN4V5mXXYGsVUI9zeBqy+jBOSQ==}
+
+  '@swc/helpers@0.5.23':
+    resolution: {integrity: sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==}
+
+  '@types/connect@3.4.38':
+    resolution: {integrity: sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==}
+
+  '@types/node@12.20.55':
+    resolution: {integrity: sha512-J8xLz7q2OFulZ2cyGTLE1TbbZcjpno7FaN6zdJNrgAdrJ+DZzh/uFR6YrTb4C+nXakvud8Q4+rbhoIWlYQbUFQ==}
+
+  '@types/node@26.1.1':
+    resolution: {integrity: sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==}
+
+  '@types/uuid@10.0.0':
+    resolution: {integrity: sha512-7gqG38EyHgyP1S+7+xomFtL+ZNHcKv6DwNaCZmJmo1vgMugyF3TCnXVg4t1uk89mLNwnLtnY3TpOpCOyp1/xHQ==}
+
+  '@types/ws@7.4.7':
+    resolution: {integrity: sha512-JQbbmxZTZehdc2iszGKs5oC3NFnjeay7mtAWrdt7qNtAVK0g19muApzAy4bm9byz79xa2ZnO/BOBC2R8RC5Lww==}
+
+  '@types/ws@8.18.1':
+    resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
+
+  '@typescript/typescript-aix-ppc64@7.0.2':
+    resolution: {integrity: sha512-MTKKkWB7p/0E9xi1d1tHtZ5PiLkGEMIq88pK2CubZjOsLtYTLqhgIgi6zepFa+9GHZ6h05NMCkQxGKiPXMxXtQ==}
+    engines: {node: '>=16.20.0'}
+    cpu: [ppc64]
+    os: [aix]
+
+  '@typescript/typescript-darwin-arm64@7.0.2':
+    resolution: {integrity: sha512-gowzar9MwS/aRWp6f3a4KUqzRjAZjOsmGNCM6LcTgXum+dBfgsBVMN+AgvOCCbguXyick6LJhpBszxMebJ8syA==}
+    engines: {node: '>=16.20.0'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@typescript/typescript-darwin-x64@7.0.2':
+    resolution: {integrity: sha512-SZ9xZInqApNlNGc9s0W1VSsktYSOe9cFqNOIqmN1Gs8SmkjKZYFt017G4VwPxASInODuAdbTW7sXiFUf893RgA==}
+    engines: {node: '>=16.20.0'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@typescript/typescript-freebsd-arm64@7.0.2':
+    resolution: {integrity: sha512-W5NH4y/J0plIIS5b2xvTEkU7JFxyqdMAOgf+Ilhl0vHQXKO5dZoxd+C/jEtq56c4F3wk71RB4BMRQ2XdI+bwYQ==}
+    engines: {node: '>=16.20.0'}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@typescript/typescript-freebsd-x64@7.0.2':
+    resolution: {integrity: sha512-UMGDx5sTpzNw3WiPebH7l90IWfJggEd+egHt/q6p7/Cm3zqoV7VxkGXt+3DxPIw8CcmvAB0j3sVVfbhX+M4Tpw==}
+    engines: {node: '>=16.20.0'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@typescript/typescript-linux-arm64@7.0.2':
+    resolution: {integrity: sha512-Qh4eU4/y3yDjnfjjyPYihMj5/ODIlmt+Bzu17OI+fiSRDW57QmU5SiN63exPRNJPKUzcc1INa1NXdrJ+MqHjUQ==}
+    engines: {node: '>=16.20.0'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@typescript/typescript-linux-arm@7.0.2':
+    resolution: {integrity: sha512-gffT3xPz9sR7j/YJExkyPntrI0P2EP9XbOyWzth2/Gs0RstK+90RBcO0ncXoXy/beYll1SXw846Nf2zdnEz0QQ==}
+    engines: {node: '>=16.20.0'}
+    cpu: [arm]
+    os: [linux]
+
+  '@typescript/typescript-linux-loong64@7.0.2':
+    resolution: {integrity: sha512-uEHck9i8hoAzXPiYRib1O7miOnz23SxIeVl6F4LXox+qov1K35jHcEW6VHKvZI+pyvl7fZEP4MCU5LYvIq1GuQ==}
+    engines: {node: '>=16.20.0'}
+    cpu: [loong64]
+    os: [linux]
+
+  '@typescript/typescript-linux-mips64el@7.0.2':
+    resolution: {integrity: sha512-R4KvAMnE43W5Qeqb0Ly56O3mWMWIAgsMyz36DCaycd5nbg/9kzm0liw3JocfRqyJY0KPmzFjbswozXyW0DnIYA==}
+    engines: {node: '>=16.20.0'}
+    cpu: [mips64el]
+    os: [linux]
+
+  '@typescript/typescript-linux-ppc64@7.0.2':
+    resolution: {integrity: sha512-DORx5b3sd/4S7eayxm4FQv+A7CrkUIGRaHiwI8oiHTAI1fAPWhF4J0vAlkC8biAlHSVVwxMQ3tjZ2/DVbnQiiA==}
+    engines: {node: '>=16.20.0'}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@typescript/typescript-linux-riscv64@7.0.2':
+    resolution: {integrity: sha512-wf0jqEDOjrPRnKwYRyyJDRo11KMbvMFrU+q4zqKyChODBzvlkbhNQfKvLxQCcwTpdDaXSHZTVuh0JoCrKCUMHQ==}
+    engines: {node: '>=16.20.0'}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@typescript/typescript-linux-s390x@7.0.2':
+    resolution: {integrity: sha512-IkwJc3L7yhytWd/ewjyxNDfOmswCm9GWMJT/ue/dU4aZNbwZeYAetq42VyLmsmSjvoX7z74X6ZaYCtzAr0EuGw==}
+    engines: {node: '>=16.20.0'}
+    cpu: [s390x]
+    os: [linux]
+
+  '@typescript/typescript-linux-x64@7.0.2':
+    resolution: {integrity: sha512-EYdf2cNg7rgCWJnxCdJ+F3V39O8ihb37eHAu1LK8oAFizgTQbPOK7zHHXbPt8rX24COqODXeI3sIf0fCXG7H/A==}
+    engines: {node: '>=16.20.0'}
+    cpu: [x64]
+    os: [linux]
+
+  '@typescript/typescript-netbsd-arm64@7.0.2':
+    resolution: {integrity: sha512-+polYF4MF04aPpO5FTkHran9yUQDSXqy5GiSDKpsll5jy3l3+g9QLhpf39T+ePtefhXLOGrLl0QIjkQP6VnelA==}
+    engines: {node: '>=16.20.0'}
+    cpu: [arm64]
+    os: [netbsd]
+
+  '@typescript/typescript-netbsd-x64@7.0.2':
+    resolution: {integrity: sha512-8YIT0EHM/3dq10ZOVF/A7pc/YSMtbcecct4rWtexrnSCHOPcpC2KTLXfTCR6vDpnSiY12heNb1GiN/wu+T/FyA==}
+    engines: {node: '>=16.20.0'}
+    cpu: [x64]
+    os: [netbsd]
+
+  '@typescript/typescript-openbsd-arm64@7.0.2':
+    resolution: {integrity: sha512-APT8+ClYnuYm1u9+kgGXoMj2VzWzcymwh2gNSQVySHfkRDGOTVkoWLjCmOQSaO+PoqQ57B0flRp9SA+7GnnkzQ==}
+    engines: {node: '>=16.20.0'}
+    cpu: [arm64]
+    os: [openbsd]
+
+  '@typescript/typescript-openbsd-x64@7.0.2':
+    resolution: {integrity: sha512-yX7s+Q0Dln0Dt9tEzZsAjXXR/+ytBM7AlglaqyeMPxQszJ1JhlJdZ6jLA+IzldHtflX81em7lDao1xXu+aRRkg==}
+    engines: {node: '>=16.20.0'}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@typescript/typescript-sunos-x64@7.0.2':
+    resolution: {integrity: sha512-dLJDGaLZ1D4HPQn62u1n8mBDkJREwMsAkCdkwd4Ieqw+x3TUyTsqY0YiBCtE6H6OzzgGk3iuZ3vFWRS+E8/d1g==}
+    engines: {node: '>=16.20.0'}
+    cpu: [x64]
+    os: [sunos]
+
+  '@typescript/typescript-win32-arm64@7.0.2':
+    resolution: {integrity: sha512-Gyl1Vy6OsWesLzmq+EP0Fb7b4Nid5232AvcA2SFcdYreldpNtYFFofPjnt62y9hQy7VTaZp65ICJjuAQRaVcIQ==}
+    engines: {node: '>=16.20.0'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@typescript/typescript-win32-x64@7.0.2':
+    resolution: {integrity: sha512-0BQ3HkAHHlKLSp1qRvf3SUhGpGsDuhB/jgFw75guyqbxJqEaS0Cw/VFO8i2nHglJUzQCRtMMR/IBAKE3ETMC4g==}
+    engines: {node: '>=16.20.0'}
+    cpu: [x64]
+    os: [win32]
+
+  agentkeepalive@4.6.0:
+    resolution: {integrity: sha512-kja8j7PjmncONqaTsB8fQ+wE2mSU2DJ9D4XKoJ5PFWIdRMa6SLSN1ff4mOr4jCbfRSsxR4keIiySJU0N9T5hIQ==}
+    engines: {node: '>= 8.0.0'}
+
+  argparse@2.0.1:
+    resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
+
+  base-x@3.0.11:
+    resolution: {integrity: sha512-xz7wQ8xDhdyP7tQxwdteLYeFfS68tSMNCZ/Y37WJ4bhGfKPpqEIlmIyueQHqOyoPhE6xNUqjzRr8ra0eF9VRvA==}
+
+  base-x@5.0.1:
+    resolution: {integrity: sha512-M7uio8Zt++eg3jPj+rHMfCC+IuygQHHCOU+IYsVtik6FWjuYpVt/+MRKcgsAMHh8mMFAwnB+Bs+mTrFiXjMzKg==}
+
+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
+  better-sqlite3@12.10.0:
+    resolution: {integrity: sha512-CyzaZRQKyHkB2ZInfTTl2nvT33EbDpjkLEbE8/Zck3Ll6O0qqvuGdrJ45HgtH+HykRg88ITY3AdreBGN70aBSQ==}
+    engines: {node: 20.x || 22.x || 23.x || 24.x || 25.x || 26.x}
+
+  bigint-buffer@1.1.5:
+    resolution: {integrity: sha512-trfYco6AoZ+rKhKnxA0hgX0HAbVP/s808/EuDSe2JDzUnCp/xAsli35Orvk67UrTEcwuxZqYZDmfA2RXJgxVvA==}
+    engines: {node: '>= 10.0.0'}
+
+  bignumber.js@9.3.1:
+    resolution: {integrity: sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==}
+
+  bindings@1.5.0:
+    resolution: {integrity: sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==}
+
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
+  bn.js@5.2.5:
+    resolution: {integrity: sha512-Vq886eXykuP5E6HcKSSStP3bJgrE6In5WKxVUvJ8XGpWWYs2xZHWqUwzCtGgEtBcxyd57KBFDPFoUfNzdaHCNg==}
+
+  borsh@0.7.0:
+    resolution: {integrity: sha512-CLCsZGIBCFnPtkNnieW/a8wmreDmfUtjU2m9yHrzPXIlNbqVs0AQrSatSG6vdNYUqdc83tkQi2eHfF98ubzQLA==}
+
+  bs58@4.0.1:
+    resolution: {integrity: sha512-Ok3Wdf5vOIlBrgCvTq96gBkJw+JUEzdBgyaza5HLtPm7yTHkjRy8+JzNyHF7BHa0bNWOQIp3m5YF0nnFcOIKLw==}
+
+  bs58@6.0.0:
+    resolution: {integrity: sha512-PD0wEnEYg6ijszw/u8s+iI3H17cTymlrwkKhDhPZq+Sokl3AU4htyBFTjAeNAlCCmg0f53g6ih3jATyCKftTfw==}
+
+  buffer@5.7.1:
+    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
+
+  buffer@6.0.3:
+    resolution: {integrity: sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==}
+
+  bufferutil@4.1.0:
+    resolution: {integrity: sha512-ZMANVnAixE6AWWnPzlW2KpUrxhm9woycYvPOo67jWHyFowASTEd9s+QN1EIMsSDtwhIxN4sWE1jotpuDUIgyIw==}
+    engines: {node: '>=6.14.2'}
+
+  builder-util-runtime@9.5.1:
+    resolution: {integrity: sha512-qt41tMfgHTllhResqM5DcnHyDIWNgzHvuY2jDcYP9iaGpkWxTUzV6GQjDeLnlR1/DtdlcsWQbA7sByMpmJFTLQ==}
+    engines: {node: '>=12.0.0'}
+
+  chalk@5.6.2:
+    resolution: {integrity: sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==}
+    engines: {node: ^12.17.0 || ^14.13 || >=16.0.0}
+
+  chownr@1.1.4:
+    resolution: {integrity: sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==}
+
+  commander@12.1.0:
+    resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==}
+    engines: {node: '>=18'}
+
+  commander@14.0.3:
+    resolution: {integrity: sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==}
+    engines: {node: '>=20'}
+
+  commander@2.20.3:
+    resolution: {integrity: sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==}
+
+  debug@4.4.3:
+    resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
+    engines: {node: '>=6.0'}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
+  decompress-response@6.0.0:
+    resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
+    engines: {node: '>=10'}
+
+  deep-extend@0.6.0:
+    resolution: {integrity: sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==}
+    engines: {node: '>=4.0.0'}
+
+  delay@5.0.0:
+    resolution: {integrity: sha512-ReEBKkIfe4ya47wlPYf/gu5ib6yUG0/Aez0JQZQz94kiWtRQvZIQbTiehsnwHvLSWJnQdhVeqYue7Id1dKr0qw==}
+    engines: {node: '>=10'}
+
+  detect-libc@2.1.2:
+    resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
+    engines: {node: '>=8'}
+
+  electron-updater@6.8.3:
+    resolution: {integrity: sha512-Z6sgw3jgbikWKXei1ENdqFOxBP0WlXg3TtKfz0rgw2vIZFJUyI4pD7ZN7jrkm7EoMK+tcm/qTnPUdqfZukBlBQ==}
+
+  end-of-stream@1.4.5:
+    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
+
+  es6-promise@4.2.8:
+    resolution: {integrity: sha512-HJDGx5daxeIvxdBxvG2cb9g4tEvwIk3i8+nhX0yGrYmZUzbkdg8QbDevheDB8gd0//uPj4c1EQua8Q+MViT0/w==}
+
+  es6-promisify@5.0.0:
+    resolution: {integrity: sha512-C+d6UdsYDk0lMebHNR4S2NybQMMngAOnOwYBQjTOiv0MkoJMP0Myw2mgpDLBcpfCmRLxyFqYhS/CfOENq4SJhQ==}
+
+  eventemitter3@5.0.4:
+    resolution: {integrity: sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==}
+
+  expand-template@2.0.3:
+    resolution: {integrity: sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==}
+    engines: {node: '>=6'}
+
+  eyes@0.1.8:
+    resolution: {integrity: sha512-GipyPsXO1anza0AOZdy69Im7hGFCNB7Y/NGjDlZGJ3GJJLtwNSb2vrzYrTYJRrRloVx7pl+bhUaTB8yiccPvFQ==}
+    engines: {node: '> 0.1.90'}
+
+  fast-sha256@1.3.0:
+    resolution: {integrity: sha512-n11RGP/lrWEFI/bWdygLxhI+pVeo1ZYIVwvvPkW7azl/rOy+F3HYRZ2K5zeE9mmkhQppyv9sQFx0JM9UabnpPQ==}
+
+  fast-stable-stringify@1.0.0:
+    resolution: {integrity: sha512-wpYMUmFu5f00Sm0cj2pfivpmawLZ0NKdviQ4w9zJeR8JVtOpOxHmLaJuj0vxvGqMJQWyP/COUkF75/57OKyRag==}
+
+  fastestsmallesttextencoderdecoder@1.0.22:
+    resolution: {integrity: sha512-Pb8d48e+oIuY4MaM64Cd7OW1gt4nxCHs7/ddPPZ/Ic3sg8yVGM7O9wDvZ7us6ScaUupzM+pfBolwtYhN1IxBIw==}
+
+  file-uri-to-path@1.0.0:
+    resolution: {integrity: sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==}
+
+  fs-constants@1.0.0:
+    resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
+
+  fs-extra@10.1.0:
+    resolution: {integrity: sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==}
+    engines: {node: '>=12'}
+
+  github-from-package@0.0.0:
+    resolution: {integrity: sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==}
+
+  graceful-fs@4.2.11:
+    resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
+
+  humanize-ms@1.2.1:
+    resolution: {integrity: sha512-Fl70vYtsAFb/C06PTS9dZBo7ihau+Tu/DNCk/OyHhea07S+aeMWpFFkUaXRa8fI+ScZbEI8dfSxwY7gxZ9SAVQ==}
+
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
+  inherits@2.0.4:
+    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
+
+  ini@1.3.8:
+    resolution: {integrity: sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==}
+
+  isomorphic-ws@4.0.1:
+    resolution: {integrity: sha512-BhBvN2MBpWTaSHdWRb/bwdZJ1WaehQ2L1KngkCkfLUGF0mAWAT1sQUQacEmQ0jXkFw/czDXPNQSL5u2/Krsz1w==}
+    peerDependencies:
+      ws: '*'
+
+  jayson@4.3.0:
+    resolution: {integrity: sha512-AauzHcUcqs8OBnCHOkJY280VaTiCm57AbuO7lqzcw7JapGj50BisE3xhksye4zlTSR1+1tAz67wLTl8tEH1obQ==}
+    engines: {node: '>=8'}
+    hasBin: true
+
+  js-yaml@4.3.0:
+    resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
+    hasBin: true
+
+  json-schema-to-ts@3.1.1:
+    resolution: {integrity: sha512-+DWg8jCJG2TEnpy7kOm/7/AxaYoaRbjVB4LFZLySZlWn8exGs3A4OLJR966cVvU26N7X9TWxl+Jsw7dzAqKT6g==}
+    engines: {node: '>=16'}
+
+  json-stringify-safe@5.0.1:
+    resolution: {integrity: sha512-ZClg6AaYvamvYEE82d3Iyd3vSSIjQ+odgjaTzRuO3s7toCdFKczob2i0zCh7JE8kWn17yvAWhUVxvqGwUalsRA==}
+
+  jsonfile@6.2.1:
+    resolution: {integrity: sha512-zwOTdL3rFQ/lRdBnntKVOX6k5cKJwEc1HdilT71BWEu7J41gXIB2MRp+vxduPSwZJPWBxEzv4yH1wYLJGUHX4Q==}
+
+  lazy-val@1.0.5:
+    resolution: {integrity: sha512-0/BnGCCfyUMkBpeDgWihanIAF9JmZhHBgUhEqzvf+adhNGLoP6TaiI5oF8oyb3I45P+PcnrqihSf01M0l0G5+Q==}
+
+  lodash.escaperegexp@4.1.2:
+    resolution: {integrity: sha512-TM9YBvyC84ZxE3rgfefxUWiQKLilstD6k7PTGt6wfbtXF8ixIJLOL3VYyV/z+ZiPLsVxAsKAFVwWlWeb2Y8Yyw==}
+
+  lodash.isequal@4.5.0:
+    resolution: {integrity: sha512-pDo3lu8Jhfjqls6GkMgpahsF9kCyayhgykjyLMNFTKWrpVdAQtYyB4muAMWozBB4ig/dtWAmsMxLEI8wuz+DYQ==}
+    deprecated: This package is deprecated. Use require('node:util').isDeepStrictEqual instead.
+
+  mimic-response@3.1.0:
+    resolution: {integrity: sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==}
+    engines: {node: '>=10'}
+
+  minimist@1.2.8:
+    resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
+
+  mkdirp-classic@0.5.3:
+    resolution: {integrity: sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==}
+
+  ms@2.1.3:
+    resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
+
+  napi-build-utils@2.0.0:
+    resolution: {integrity: sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==}
+
+  node-abi@3.94.0:
+    resolution: {integrity: sha512-W5ZNO5KRPB5TkYmGVD9F6YqhsglXJzE6etpbmT+f6EQElhiX/UTG551cnsRGvLG3fyZEg9HwaDmNmj5nwJ4z9g==}
+    engines: {node: '>=10'}
+
+  node-addon-api@7.1.1:
+    resolution: {integrity: sha512-5m3bsyrjFWE1xf7nz7YXdN4udnVtXK6/Yfgn5qnahL6bCkf2yKt4k3nuTKAtT4r3IG8JNR2ncsIMdZuAzJjHQQ==}
+
+  node-fetch@2.7.0:
+    resolution: {integrity: sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==}
+    engines: {node: 4.x || >=6.0.0}
+    peerDependencies:
+      encoding: ^0.1.0
+    peerDependenciesMeta:
+      encoding:
+        optional: true
+
+  node-gyp-build@4.8.4:
+    resolution: {integrity: sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ==}
+    hasBin: true
+
+  node-pty@1.1.0:
+    resolution: {integrity: sha512-20JqtutY6JPXTUnL0ij1uad7Qe1baT46lyolh2sSENDd4sTzKZ4nmAFkeAARDKwmlLjPx6XKRlwRUxwjOy+lUg==}
+
+  once@1.4.0:
+    resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
+
+  prebuild-install@7.1.3:
+    resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==}
+    engines: {node: '>=10'}
+    deprecated: No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
+    hasBin: true
+
+  pump@3.0.4:
+    resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
+
+  rc@1.2.8:
+    resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
+    hasBin: true
+
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
+  rpc-websockets@9.3.9:
+    resolution: {integrity: sha512-2iQDaTB4g5fDB2ihrTFSJSibCEuxaRi1q7qTW7ZO9/M5/TC+ToHA4D9/ffNLEbAoHNNrcdeP05oATNk44SKZXA==}
+
+  safe-buffer@5.2.1:
+    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
+
+  sax@1.6.0:
+    resolution: {integrity: sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==}
+    engines: {node: '>=11.0.0'}
+
+  semver@7.7.4:
+    resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  semver@7.8.5:
+    resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  simple-concat@1.0.1:
+    resolution: {integrity: sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==}
+
+  simple-get@4.0.1:
+    resolution: {integrity: sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==}
+
+  standardwebhooks@1.0.0:
+    resolution: {integrity: sha512-BbHGOQK9olHPMvQNHWul6MYlrRTAOKn03rOe4A8O3CLWhNf4YHBqq2HJKKC+sfqpxiBY52pNeesD6jIiLDz8jg==}
+
+  stream-chain@2.2.5:
+    resolution: {integrity: sha512-1TJmBx6aSWqZ4tx7aTpBDXK0/e2hhcNSTV8+CbFJtDjbb+I1mZ8lHit0Grw9GRT+6JbIrrDd8esncgBi8aBXGA==}
+
+  stream-json@1.9.1:
+    resolution: {integrity: sha512-uWkjJ+2Nt/LO9Z/JyKZbMusL8Dkh97uUBTv3AJQ74y07lVahLY4eEFsPsE97pxYBwr8nnjMAIch5eqI0gPShyw==}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
+  strip-json-comments@2.0.1:
+    resolution: {integrity: sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==}
+    engines: {node: '>=0.10.0'}
+
+  superstruct@2.0.2:
+    resolution: {integrity: sha512-uV+TFRZdXsqXTL2pRvujROjdZQ4RAlBUS5BTh9IGm+jTqQntYThciG/qu57Gs69yjnVUSqdxF9YLmSnpupBW9A==}
+    engines: {node: '>=14.0.0'}
+
+  tar-fs@2.1.5:
+    resolution: {integrity: sha512-OboTd8mmMhZDNPV+UjQcK9yKAatXu2aJ+r1w4im1Otd4M4fl2hwvdoXUxIYHFTHWK/3y3FarBP70v3vwmGlOxw==}
+
+  tar-stream@2.2.0:
+    resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
+    engines: {node: '>=6'}
+
+  text-encoding-utf-8@1.0.2:
+    resolution: {integrity: sha512-8bw4MY9WjdsD2aMtO0OzOCY3pXGYNx2d2FfHRVUKkiCPDWjKuOlhLVASS+pD7VkLTVjW268LYJHwsnPFlBpbAg==}
+
+  tiny-typed-emitter@2.1.0:
+    resolution: {integrity: sha512-qVtvMxeXbVej0cQWKqVSSAHmKZEHAvxdF8HEUBFWts8h+xEo5m/lEiPakuyZ3BnCBjOD8i24kzNOiOLLgsSxhA==}
+
+  tr46@0.0.3:
+    resolution: {integrity: sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==}
+
+  ts-algebra@2.0.0:
+    resolution: {integrity: sha512-FPAhNPFMrkwz76P7cdjdmiShwMynZYN6SgOujD1urY4oNm80Ou9oMdmbR45LotcKOXoy7wSmHkRFE6Mxbrhefw==}
+
+  tslib@2.8.1:
+    resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
+
+  tunnel-agent@0.6.0:
+    resolution: {integrity: sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==}
+
+  tweetnacl@1.0.3:
+    resolution: {integrity: sha512-6rt+RN7aOi1nGMyC4Xa5DdYiukl2UWCbcJft7YhxReBGQD7OAM8Pbxw6YMo4r2diNEA8FEmu32YOn9rhaiE5yw==}
+
+  typescript@7.0.2:
+    resolution: {integrity: sha512-8FYau96o3NKOhbjKi/qNvG/W5jhzxkbdm5sj9AbZ/5T5sWqn3hJgLfGx27sRKZWTvyzCP8dLRBTf5tBTSRVUNA==}
+    engines: {node: '>=16.20.0'}
+    hasBin: true
+
+  undici-types@8.3.0:
+    resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==}
+
+  universalify@2.0.1:
+    resolution: {integrity: sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==}
+    engines: {node: '>= 10.0.0'}
+
+  utf-8-validate@6.0.6:
+    resolution: {integrity: sha512-q3l3P9UtEEiAHcsgsqTgf9PPjctrDWoIXW3NpOHFdRDbLvu4DLIcxHangJ4RLrWkBcKjmcs/6NkerI8T/rE4LA==}
+    engines: {node: '>=6.14.2'}
+
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  uuid@14.0.1:
+    resolution: {integrity: sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==}
+    hasBin: true
+
+  uuid@8.3.2:
+    resolution: {integrity: sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==}
+    deprecated: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
+    hasBin: true
+
+  webidl-conversions@3.0.1:
+    resolution: {integrity: sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==}
+
+  whatwg-url@5.0.0:
+    resolution: {integrity: sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==}
+
+  wrappy@1.0.2:
+    resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
+
+  ws@7.5.13:
+    resolution: {integrity: sha512-rsKI6xDBFVf4r/x8XyChGK04QR/XHroxs/jUcoWvtEZM8TPU/X/uIY9B1CsSzYws9ZJb/6bbBu7dPhFW00CAoA==}
+    engines: {node: '>=8.3.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: ^5.0.2
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
+  ws@8.21.1:
+    resolution: {integrity: sha512-+0NTnW77fFN/DjQi6k/Sq/Yvk4Sgajw7urW8V+asjXnRgDs9gyGkdb7EzgfhA4goXsRIZKE28fzIXBHEzhuiWw==}
+    engines: {node: '>=10.0.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: '>=5.0.2'
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
+snapshots:
+
+  '@anthropic-ai/sdk@0.98.0':
+    dependencies:
+      json-schema-to-ts: 3.1.1
+      standardwebhooks: 1.0.0
+
+  '@babel/runtime@7.29.7': {}
+
+  '@noble/curves@1.9.7':
+    dependencies:
+      '@noble/hashes': 1.8.0
+
+  '@noble/hashes@1.8.0': {}
+
+  '@solana/buffer-layout-utils@0.2.0(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6)':
+    dependencies:
+      '@solana/buffer-layout': 4.0.1
+      '@solana/web3.js': 1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6)
+      bigint-buffer: 1.1.5
+      bignumber.js: 9.3.1
+    transitivePeerDependencies:
+      - bufferutil
+      - encoding
+      - typescript
+      - utf-8-validate
+
+  '@solana/buffer-layout@4.0.1':
+    dependencies:
+      buffer: 6.0.3
+
+  '@solana/codecs-core@2.0.0-rc.1(typescript@7.0.2)':
+    dependencies:
+      '@solana/errors': 2.0.0-rc.1(typescript@7.0.2)
+      typescript: 7.0.2
+
+  '@solana/codecs-core@2.3.0(typescript@7.0.2)':
+    dependencies:
+      '@solana/errors': 2.3.0(typescript@7.0.2)
+      typescript: 7.0.2
+
+  '@solana/codecs-data-structures@2.0.0-rc.1(typescript@7.0.2)':
+    dependencies:
+      '@solana/codecs-core': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/codecs-numbers': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/errors': 2.0.0-rc.1(typescript@7.0.2)
+      typescript: 7.0.2
+
+  '@solana/codecs-numbers@2.0.0-rc.1(typescript@7.0.2)':
+    dependencies:
+      '@solana/codecs-core': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/errors': 2.0.0-rc.1(typescript@7.0.2)
+      typescript: 7.0.2
+
+  '@solana/codecs-numbers@2.3.0(typescript@7.0.2)':
+    dependencies:
+      '@solana/codecs-core': 2.3.0(typescript@7.0.2)
+      '@solana/errors': 2.3.0(typescript@7.0.2)
+      typescript: 7.0.2
+
+  '@solana/codecs-strings@2.0.0-rc.1(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)':
+    dependencies:
+      '@solana/codecs-core': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/codecs-numbers': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/errors': 2.0.0-rc.1(typescript@7.0.2)
+      fastestsmallesttextencoderdecoder: 1.0.22
+      typescript: 7.0.2
+
+  '@solana/codecs@2.0.0-rc.1(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)':
+    dependencies:
+      '@solana/codecs-core': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/codecs-data-structures': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/codecs-numbers': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/codecs-strings': 2.0.0-rc.1(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)
+      '@solana/options': 2.0.0-rc.1(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)
+      typescript: 7.0.2
+    transitivePeerDependencies:
+      - fastestsmallesttextencoderdecoder
+
+  '@solana/errors@2.0.0-rc.1(typescript@7.0.2)':
+    dependencies:
+      chalk: 5.6.2
+      commander: 12.1.0
+      typescript: 7.0.2
+
+  '@solana/errors@2.3.0(typescript@7.0.2)':
+    dependencies:
+      chalk: 5.6.2
+      commander: 14.0.3
+      typescript: 7.0.2
+
+  '@solana/options@2.0.0-rc.1(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)':
+    dependencies:
+      '@solana/codecs-core': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/codecs-data-structures': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/codecs-numbers': 2.0.0-rc.1(typescript@7.0.2)
+      '@solana/codecs-strings': 2.0.0-rc.1(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)
+      '@solana/errors': 2.0.0-rc.1(typescript@7.0.2)
+      typescript: 7.0.2
+    transitivePeerDependencies:
+      - fastestsmallesttextencoderdecoder
+
+  '@solana/spl-token-group@0.0.7(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6))(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)':
+    dependencies:
+      '@solana/codecs': 2.0.0-rc.1(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)
+      '@solana/web3.js': 1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6)
+    transitivePeerDependencies:
+      - fastestsmallesttextencoderdecoder
+      - typescript
+
+  '@solana/spl-token-metadata@0.1.6(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6))(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)':
+    dependencies:
+      '@solana/codecs': 2.0.0-rc.1(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)
+      '@solana/web3.js': 1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6)
+    transitivePeerDependencies:
+      - fastestsmallesttextencoderdecoder
+      - typescript
+
+  '@solana/spl-token@0.4.14(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6))(bufferutil@4.1.0)(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)(utf-8-validate@6.0.6)':
+    dependencies:
+      '@solana/buffer-layout': 4.0.1
+      '@solana/buffer-layout-utils': 0.2.0(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6)
+      '@solana/spl-token-group': 0.0.7(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6))(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)
+      '@solana/spl-token-metadata': 0.1.6(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6))(fastestsmallesttextencoderdecoder@1.0.22)(typescript@7.0.2)
+      '@solana/web3.js': 1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6)
+      buffer: 6.0.3
+    transitivePeerDependencies:
+      - bufferutil
+      - encoding
+      - fastestsmallesttextencoderdecoder
+      - typescript
+      - utf-8-validate
+
+  '@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@7.0.2)(utf-8-validate@6.0.6)':
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@noble/curves': 1.9.7
+      '@noble/hashes': 1.8.0
+      '@solana/buffer-layout': 4.0.1
+      '@solana/codecs-numbers': 2.3.0(typescript@7.0.2)
+      agentkeepalive: 4.6.0
+      bn.js: 5.2.5
+      borsh: 0.7.0
+      bs58: 4.0.1
+      buffer: 6.0.3
+      fast-stable-stringify: 1.0.0
+      jayson: 4.3.0(bufferutil@4.1.0)(utf-8-validate@6.0.6)
+      node-fetch: 2.7.0
+      rpc-websockets: 9.3.9
+      superstruct: 2.0.2
+    transitivePeerDependencies:
+      - bufferutil
+      - encoding
+      - typescript
+      - utf-8-validate
+
+  '@stablelib/base64@1.0.1': {}
+
+  '@swc/helpers@0.5.23':
+    dependencies:
+      tslib: 2.8.1
+
+  '@types/connect@3.4.38':
+    dependencies:
+      '@types/node': 26.1.1
+
+  '@types/node@12.20.55': {}
+
+  '@types/node@26.1.1':
+    dependencies:
+      undici-types: 8.3.0
+
+  '@types/uuid@10.0.0': {}
+
+  '@types/ws@7.4.7':
+    dependencies:
+      '@types/node': 26.1.1
+
+  '@types/ws@8.18.1':
+    dependencies:
+      '@types/node': 26.1.1
+
+  '@typescript/typescript-aix-ppc64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-darwin-arm64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-darwin-x64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-freebsd-arm64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-freebsd-x64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-linux-arm64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-linux-arm@7.0.2':
+    optional: true
+
+  '@typescript/typescript-linux-loong64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-linux-mips64el@7.0.2':
+    optional: true
+
+  '@typescript/typescript-linux-ppc64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-linux-riscv64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-linux-s390x@7.0.2':
+    optional: true
+
+  '@typescript/typescript-linux-x64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-netbsd-arm64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-netbsd-x64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-openbsd-arm64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-openbsd-x64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-sunos-x64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-win32-arm64@7.0.2':
+    optional: true
+
+  '@typescript/typescript-win32-x64@7.0.2':
+    optional: true
+
+  agentkeepalive@4.6.0:
+    dependencies:
+      humanize-ms: 1.2.1
+
+  argparse@2.0.1: {}
+
+  base-x@3.0.11:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  base-x@5.0.1: {}
+
+  base64-js@1.5.1: {}
+
+  better-sqlite3@12.10.0:
+    dependencies:
+      bindings: 1.5.0
+      prebuild-install: 7.1.3
+
+  bigint-buffer@1.1.5:
+    dependencies:
+      bindings: 1.5.0
+
+  bignumber.js@9.3.1: {}
+
+  bindings@1.5.0:
+    dependencies:
+      file-uri-to-path: 1.0.0
+
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  bn.js@5.2.5: {}
+
+  borsh@0.7.0:
+    dependencies:
+      bn.js: 5.2.5
+      bs58: 4.0.1
+      text-encoding-utf-8: 1.0.2
+
+  bs58@4.0.1:
+    dependencies:
+      base-x: 3.0.11
+
+  bs58@6.0.0:
+    dependencies:
+      base-x: 5.0.1
+
+  buffer@5.7.1:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  buffer@6.0.3:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  bufferutil@4.1.0:
+    dependencies:
+      node-gyp-build: 4.8.4
+    optional: true
+
+  builder-util-runtime@9.5.1:
+    dependencies:
+      debug: 4.4.3
+      sax: 1.6.0
+    transitivePeerDependencies:
+      - supports-color
+
+  chalk@5.6.2: {}
+
+  chownr@1.1.4: {}
+
+  commander@12.1.0: {}
+
+  commander@14.0.3: {}
+
+  commander@2.20.3: {}
+
+  debug@4.4.3:
+    dependencies:
+      ms: 2.1.3
+
+  decompress-response@6.0.0:
+    dependencies:
+      mimic-response: 3.1.0
+
+  deep-extend@0.6.0: {}
+
+  delay@5.0.0: {}
+
+  detect-libc@2.1.2: {}
+
+  electron-updater@6.8.3:
+    dependencies:
+      builder-util-runtime: 9.5.1
+      fs-extra: 10.1.0
+      js-yaml: 4.3.0
+      lazy-val: 1.0.5
+      lodash.escaperegexp: 4.1.2
+      lodash.isequal: 4.5.0
+      semver: 7.7.4
+      tiny-typed-emitter: 2.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  end-of-stream@1.4.5:
+    dependencies:
+      once: 1.4.0
+
+  es6-promise@4.2.8: {}
+
+  es6-promisify@5.0.0:
+    dependencies:
+      es6-promise: 4.2.8
+
+  eventemitter3@5.0.4: {}
+
+  expand-template@2.0.3: {}
+
+  eyes@0.1.8: {}
+
+  fast-sha256@1.3.0: {}
+
+  fast-stable-stringify@1.0.0: {}
+
+  fastestsmallesttextencoderdecoder@1.0.22: {}
+
+  file-uri-to-path@1.0.0: {}
+
+  fs-constants@1.0.0: {}
+
+  fs-extra@10.1.0:
+    dependencies:
+      graceful-fs: 4.2.11
+      jsonfile: 6.2.1
+      universalify: 2.0.1
+
+  github-from-package@0.0.0: {}
+
+  graceful-fs@4.2.11: {}
+
+  humanize-ms@1.2.1:
+    dependencies:
+      ms: 2.1.3
+
+  ieee754@1.2.1: {}
+
+  inherits@2.0.4: {}
+
+  ini@1.3.8: {}
+
+  isomorphic-ws@4.0.1(ws@7.5.13(bufferutil@4.1.0)(utf-8-validate@6.0.6)):
+    dependencies:
+      ws: 7.5.13(bufferutil@4.1.0)(utf-8-validate@6.0.6)
+
+  jayson@4.3.0(bufferutil@4.1.0)(utf-8-validate@6.0.6):
+    dependencies:
+      '@types/connect': 3.4.38
+      '@types/node': 12.20.55
+      '@types/ws': 7.4.7
+      commander: 2.20.3
+      delay: 5.0.0
+      es6-promisify: 5.0.0
+      eyes: 0.1.8
+      isomorphic-ws: 4.0.1(ws@7.5.13(bufferutil@4.1.0)(utf-8-validate@6.0.6))
+      json-stringify-safe: 5.0.1
+      stream-json: 1.9.1
+      uuid: 8.3.2
+      ws: 7.5.13(bufferutil@4.1.0)(utf-8-validate@6.0.6)
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
+  js-yaml@4.3.0:
+    dependencies:
+      argparse: 2.0.1
+
+  json-schema-to-ts@3.1.1:
+    dependencies:
+      '@babel/runtime': 7.29.7
+      ts-algebra: 2.0.0
+
+  json-stringify-safe@5.0.1: {}
+
+  jsonfile@6.2.1:
+    dependencies:
+      universalify: 2.0.1
+    optionalDependencies:
+      graceful-fs: 4.2.11
+
+  lazy-val@1.0.5: {}
+
+  lodash.escaperegexp@4.1.2: {}
+
+  lodash.isequal@4.5.0: {}
+
+  mimic-response@3.1.0: {}
+
+  minimist@1.2.8: {}
+
+  mkdirp-classic@0.5.3: {}
+
+  ms@2.1.3: {}
+
+  napi-build-utils@2.0.0: {}
+
+  node-abi@3.94.0:
+    dependencies:
+      semver: 7.8.5
+
+  node-addon-api@7.1.1: {}
+
+  node-fetch@2.7.0:
+    dependencies:
+      whatwg-url: 5.0.0
+
+  node-gyp-build@4.8.4:
+    optional: true
+
+  node-pty@1.1.0(patch_hash=f41f3f1b27203d2dfc08a004c1c51bc4a56ca84fce763607028e80840c5bcc3e):
+    dependencies:
+      node-addon-api: 7.1.1
+
+  once@1.4.0:
+    dependencies:
+      wrappy: 1.0.2
+
+  prebuild-install@7.1.3:
+    dependencies:
+      detect-libc: 2.1.2
+      expand-template: 2.0.3
+      github-from-package: 0.0.0
+      minimist: 1.2.8
+      mkdirp-classic: 0.5.3
+      napi-build-utils: 2.0.0
+      node-abi: 3.94.0
+      pump: 3.0.4
+      rc: 1.2.8
+      simple-get: 4.0.1
+      tar-fs: 2.1.5
+      tunnel-agent: 0.6.0
+
+  pump@3.0.4:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+
+  rc@1.2.8:
+    dependencies:
+      deep-extend: 0.6.0
+      ini: 1.3.8
+      minimist: 1.2.8
+      strip-json-comments: 2.0.1
+
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
+  rpc-websockets@9.3.9:
+    dependencies:
+      '@swc/helpers': 0.5.23
+      '@types/uuid': 10.0.0
+      '@types/ws': 8.18.1
+      buffer: 6.0.3
+      eventemitter3: 5.0.4
+      uuid: 14.0.1
+      ws: 8.21.1(bufferutil@4.1.0)(utf-8-validate@6.0.6)
+    optionalDependencies:
+      bufferutil: 4.1.0
+      utf-8-validate: 6.0.6
+
+  safe-buffer@5.2.1: {}
+
+  sax@1.6.0: {}
+
+  semver@7.7.4: {}
+
+  semver@7.8.5: {}
+
+  simple-concat@1.0.1: {}
+
+  simple-get@4.0.1:
+    dependencies:
+      decompress-response: 6.0.0
+      once: 1.4.0
+      simple-concat: 1.0.1
+
+  standardwebhooks@1.0.0:
+    dependencies:
+      '@stablelib/base64': 1.0.1
+      fast-sha256: 1.3.0
+
+  stream-chain@2.2.5: {}
+
+  stream-json@1.9.1:
+    dependencies:
+      stream-chain: 2.2.5
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  strip-json-comments@2.0.1: {}
+
+  superstruct@2.0.2: {}
+
+  tar-fs@2.1.5:
+    dependencies:
+      chownr: 1.1.4
+      mkdirp-classic: 0.5.3
+      pump: 3.0.4
+      tar-stream: 2.2.0
+
+  tar-stream@2.2.0:
+    dependencies:
+      bl: 4.1.0
+      end-of-stream: 1.4.5
+      fs-constants: 1.0.0
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  text-encoding-utf-8@1.0.2: {}
+
+  tiny-typed-emitter@2.1.0: {}
+
+  tr46@0.0.3: {}
+
+  ts-algebra@2.0.0: {}
+
+  tslib@2.8.1: {}
+
+  tunnel-agent@0.6.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  tweetnacl@1.0.3: {}
+
+  typescript@7.0.2:
+    optionalDependencies:
+      '@typescript/typescript-aix-ppc64': 7.0.2
+      '@typescript/typescript-darwin-arm64': 7.0.2
+      '@typescript/typescript-darwin-x64': 7.0.2
+      '@typescript/typescript-freebsd-arm64': 7.0.2
+      '@typescript/typescript-freebsd-x64': 7.0.2
+      '@typescript/typescript-linux-arm': 7.0.2
+      '@typescript/typescript-linux-arm64': 7.0.2
+      '@typescript/typescript-linux-loong64': 7.0.2
+      '@typescript/typescript-linux-mips64el': 7.0.2
+      '@typescript/typescript-linux-ppc64': 7.0.2
+      '@typescript/typescript-linux-riscv64': 7.0.2
+      '@typescript/typescript-linux-s390x': 7.0.2
+      '@typescript/typescript-linux-x64': 7.0.2
+      '@typescript/typescript-netbsd-arm64': 7.0.2
+      '@typescript/typescript-netbsd-x64': 7.0.2
+      '@typescript/typescript-openbsd-arm64': 7.0.2
+      '@typescript/typescript-openbsd-x64': 7.0.2
+      '@typescript/typescript-sunos-x64': 7.0.2
+      '@typescript/typescript-win32-arm64': 7.0.2
+      '@typescript/typescript-win32-x64': 7.0.2
+
+  undici-types@8.3.0: {}
+
+  universalify@2.0.1: {}
+
+  utf-8-validate@6.0.6:
+    dependencies:
+      node-gyp-build: 4.8.4
+    optional: true
+
+  util-deprecate@1.0.2: {}
+
+  uuid@14.0.1: {}
+
+  uuid@8.3.2: {}
+
+  webidl-conversions@3.0.1: {}
+
+  whatwg-url@5.0.0:
+    dependencies:
+      tr46: 0.0.3
+      webidl-conversions: 3.0.1
+
+  wrappy@1.0.2: {}
+
+  ws@7.5.13(bufferutil@4.1.0)(utf-8-validate@6.0.6):
+    optionalDependencies:
+      bufferutil: 4.1.0
+      utf-8-validate: 6.0.6
+
+  ws@8.21.1(bufferutil@4.1.0)(utf-8-validate@6.0.6):
+    optionalDependencies:
+      bufferutil: 4.1.0
+      utf-8-validate: 6.0.6
diff --git a/build/macPackaging.cjs b/build/macPackaging.cjs
new file mode 100644
index 00000000..b2cad2d9
--- /dev/null
+++ b/build/macPackaging.cjs
@@ -0,0 +1,14 @@
+const SIGNED_ENTITLEMENTS = 'build/entitlements.mac.plist'
+
+function macSigningConfig(env = process.env) {
+  const isAdHoc = env.DAEMON_MAC_ADHOC === '1'
+  return {
+    isAdHoc,
+    identity: isAdHoc ? '-' : undefined,
+    hardenedRuntime: !isAdHoc,
+    entitlements: isAdHoc ? undefined : SIGNED_ENTITLEMENTS,
+    artifactName: isAdHoc ? 'DAEMON-unsigned-${arch}.${ext}' : 'DAEMON-${arch}.${ext}',
+  }
+}
+
+module.exports = { macSigningConfig }
diff --git a/build/macos-adhoc-release b/build/macos-adhoc-release
new file mode 100644
index 00000000..978c509c
--- /dev/null
+++ b/build/macos-adhoc-release
@@ -0,0 +1 @@
+This macOS build is ad-hoc signed and not Apple-notarized.
diff --git a/build/notarize.mjs b/build/notarize.mjs
index 82f51718..5bb7ab7d 100644
--- a/build/notarize.mjs
+++ b/build/notarize.mjs
@@ -1,5 +1,7 @@
 import { notarize } from '@electron/notarize'
+import { spawnSync } from 'node:child_process'
 
+const REQUIRED_SIGNING_ENV_VARS = ['CSC_LINK', 'CSC_KEY_PASSWORD']
 const REQUIRED_ENV_VARS = [
   'APPLE_ID',
   'APPLE_APP_SPECIFIC_PASSWORD',
@@ -10,13 +12,24 @@ function hasNotarizeEnv() {
   return REQUIRED_ENV_VARS.every((key) => Boolean(process.env[key]))
 }
 
-export default async function afterSign(context) {
-  if (process.platform !== 'darwin') {
-    return
+function isNotarizationRequired() {
+  return process.env.DAEMON_REQUIRE_MAC_NOTARIZATION === '1'
+}
+
+function missingEnvVars(names) {
+  return names.filter((key) => !process.env[key])
+}
+
+function assertDeveloperIdSignature(appPath) {
+  const result = spawnSync('codesign', ['-dv', '--verbose=4', appPath], { encoding: 'utf8' })
+  const details = `${result.stdout ?? ''}\n${result.stderr ?? ''}`
+  if (result.status !== 0 || !details.includes('Authority=Developer ID Application:')) {
+    throw new Error('macOS release is not signed with a Developer ID Application certificate')
   }
+}
 
-  if (!hasNotarizeEnv()) {
-    console.log('[notarize] Skipping notarization; missing Apple credentials in environment')
+export default async function afterSign(context) {
+  if (process.platform !== 'darwin') {
     return
   }
 
@@ -24,15 +37,31 @@ export default async function afterSign(context) {
   if (electronPlatformName !== 'darwin') {
     return
   }
-
   const appName = packager.appInfo.productFilename
   const appBundleId = packager.appInfo.id
+  const appPath = `${appOutDir}/${appName}.app`
+
+  if (!hasNotarizeEnv()) {
+    if (isNotarizationRequired()) {
+      throw new Error(`Missing required macOS notarization credentials: ${REQUIRED_ENV_VARS.join(', ')}`)
+    }
+    console.log('[notarize] Skipping notarization; missing Apple credentials in environment')
+    return
+  }
+
+  if (isNotarizationRequired()) {
+    const missingSigningVars = missingEnvVars(REQUIRED_SIGNING_ENV_VARS)
+    if (missingSigningVars.length > 0) {
+      throw new Error(`Missing required macOS signing credentials: ${missingSigningVars.join(', ')}`)
+    }
+    assertDeveloperIdSignature(appPath)
+  }
 
   console.log(`[notarize] Submitting ${appName}.app for notarization`)
 
   await notarize({
     appBundleId,
-    appPath: `${appOutDir}/${appName}.app`,
+    appPath,
     appleId: process.env.APPLE_ID,
     appleIdPassword: process.env.APPLE_APP_SPECIFIC_PASSWORD,
     teamId: process.env.APPLE_TEAM_ID,
diff --git a/docs/screenshots/editor.webp b/docs/screenshots/editor.webp
index 19a64643..e758ec92 100644
Binary files a/docs/screenshots/editor.webp and b/docs/screenshots/editor.webp differ
diff --git a/docs/screenshots/ui-overview.webp b/docs/screenshots/ui-overview.webp
index 3cfcc050..e758ec92 100644
Binary files a/docs/screenshots/ui-overview.webp and b/docs/screenshots/ui-overview.webp differ
diff --git a/docs/screenshots/wallet.webp b/docs/screenshots/wallet.webp
index 8852ac07..e758ec92 100644
Binary files a/docs/screenshots/wallet.webp and b/docs/screenshots/wallet.webp differ
diff --git a/electron-builder.json b/electron-builder.json
index 6614b1ee..2d73bbc8 100644
--- a/electron-builder.json
+++ b/electron-builder.json
@@ -35,7 +35,10 @@
     "category": "public.app-category.developer-tools",
     "artifactName": "${productName}-${arch}.${ext}",
     "hardenedRuntime": true,
-    "gatekeeperAssess": false
+    "gatekeeperAssess": false,
+    "notarize": false,
+    "entitlements": "build/entitlements.mac.plist",
+    "entitlementsInherit": "build/entitlements.mac.plist"
   },
   "afterSign": "build/notarize.mjs",
   "win": {
diff --git a/electron-builder.lite.cjs b/electron-builder.lite.cjs
new file mode 100644
index 00000000..5138a99e
--- /dev/null
+++ b/electron-builder.lite.cjs
@@ -0,0 +1,81 @@
+/**
+ * Canonical DAEMON packaging for the focused agent workbench.
+ * Runtime dependencies are installed into an isolated, hoisted staging app
+ * before packaging so pnpm's version-specific dependency graph stays intact.
+ */
+const path = require('node:path')
+const { macSigningConfig } = require('./build/macPackaging.cjs')
+const macSigning = macSigningConfig()
+
+module.exports = {
+  appId: 'com.daemon.app',
+  productName: 'DAEMON',
+  asar: true,
+  beforeBuild: async () => false,
+  compression: macSigning.isAdHoc ? 'normal' : 'maximum',
+  directories: {
+    app: 'release-lite/.stage',
+    output: 'release-lite/${version}',
+  },
+  extraMetadata: {
+    name: 'daemon',
+    main: 'dist-electron-lite/main/lite.js',
+  },
+  extraResources: macSigning.isAdHoc
+    ? [{ from: path.join(__dirname, 'build/macos-adhoc-release'), to: 'macos-adhoc-release' }]
+    : undefined,
+  publish: [{ provider: 'github', owner: 'nullxnothing', repo: 'daemon' }],
+  files: [
+    'dist-electron-lite/**',
+    'dist-lite/**',
+    '!**/*.map',
+    {
+      from: path.join(__dirname, 'release-lite/.stage/node_modules'),
+      to: 'node_modules',
+      filter: [
+        '**/*',
+        '!@types{,/**/*}',
+        '!**/.bin{,/**/*}',
+        '!**/*.map',
+        '!better-sqlite3/{deps,src}/**',
+        '!better-sqlite3/build/Release/{obj,sqlite3.a,test_extension.node}',
+      ],
+    },
+  ],
+  electronLanguages: ['en-US'],
+  asarUnpack: [
+    'node_modules/better-sqlite3/**',
+    'node_modules/node-pty/**',
+  ],
+  mac: {
+    icon: 'build/icon.icns',
+    target: ['dmg', 'zip'],
+    category: 'public.app-category.developer-tools',
+    artifactName: macSigning.artifactName,
+    identity: macSigning.identity,
+    hardenedRuntime: macSigning.hardenedRuntime,
+    gatekeeperAssess: false,
+    notarize: false,
+    entitlements: macSigning.entitlements,
+    entitlementsInherit: macSigning.entitlements,
+  },
+  afterSign: 'build/notarize.mjs',
+  win: {
+    icon: 'resources/icon.ico',
+    target: [
+      {
+        target: 'nsis',
+        arch: ['x64'],
+      },
+    ],
+    artifactName: 'DAEMON-setup.${ext}',
+  },
+  nsis: {
+    oneClick: false,
+    perMachine: false,
+    allowToChangeInstallationDirectory: true,
+    deleteAppDataOnUninstall: false,
+    createDesktopShortcut: true,
+    createStartMenuShortcut: true,
+  },
+}
diff --git a/electron/ipc/claude.ts b/electron/ipc/claude.ts
index 75e9d3b3..f4d5c406 100644
--- a/electron/ipc/claude.ts
+++ b/electron/ipc/claude.ts
@@ -15,6 +15,7 @@ import { broadcast } from '../services/EventBus'
 import { getDb } from '../db/db'
 import { isPathSafe } from '../shared/pathValidation'
 import { ipcHandler, withValidation } from '../services/IpcHandlerFactory'
+import { registerSecureKeyHandlers } from './secureKeys'
 import { restartProviderInPty, restartAllProviderSessions } from '../shared/providerRestart'
 import type { McpAddInput } from '../shared/types'
 
@@ -162,19 +163,9 @@ ${content}`,
     return tidied.replace(/^```(?:markdown|md)?\s*\n?/, '').replace(/\n?```\s*$/, '')
   }))
 
-  // --- Secure Keys ---
+  // --- Secure Keys (extracted; Lite registers them without this module) ---
 
-  ipcMain.handle('claude:store-key', ipcHandler(async (_event, name: string, value: string) => {
-    SecureKey.storeKey(name, value)
-  }))
-
-  ipcMain.handle('claude:list-keys', ipcHandler(async () => {
-    return SecureKey.listKeys()
-  }))
-
-  ipcMain.handle('claude:delete-key', ipcHandler(async (_event, name: string) => {
-    SecureKey.deleteKey(name)
-  }))
+  registerSecureKeyHandlers()
 
   // --- CLAUDE.md ---
 
diff --git a/electron/ipc/filesystem.lite.ts b/electron/ipc/filesystem.lite.ts
new file mode 100644
index 00000000..10c87a0c
--- /dev/null
+++ b/electron/ipc/filesystem.lite.ts
@@ -0,0 +1,182 @@
+import { ipcMain } from 'electron'
+import fs from 'node:fs/promises'
+import fsSync from 'node:fs'
+import path from 'node:path'
+import { getDb } from '../db/db'
+import { ipcHandler } from '../services/IpcHandlerFactory'
+import type { FileEntry } from '../shared/types'
+
+const IGNORED_NAMES = new Set([
+  'node_modules', '.git', 'dist', 'dist-electron', '.next', 'target',
+  'coverage', '.anchor', '.cache', '.turbo', '.vite', '.pnpm-store',
+])
+const MAX_READ_DIR_DEPTH = 4
+const MAX_READ_DIR_ENTRIES = 1_000
+const MAX_TEXT_BYTES = 2 * 1024 * 1024
+const WATCH_DEBOUNCE_MS = 200
+const TEXT_SAMPLE_BYTES = 8 * 1024
+
+interface ActiveWatcher {
+  rootPath: string
+  senderId: number
+  watcher: fsSync.FSWatcher
+  debounceTimer: NodeJS.Timeout | null
+}
+
+let activeWatcher: ActiveWatcher | null = null
+
+function normalizedPath(value: string): string {
+  const resolved = path.resolve(value)
+  return process.platform === 'win32' ? resolved.toLowerCase() : resolved
+}
+
+function isWithinRoot(target: string, root: string): boolean {
+  const normalizedTarget = normalizedPath(target)
+  const normalizedRoot = normalizedPath(root)
+  return normalizedTarget === normalizedRoot || normalizedTarget.startsWith(`${normalizedRoot}${path.sep}`)
+}
+
+async function registeredRootFor(targetPath: string): Promise<{ target: string; root: string }> {
+  if (typeof targetPath !== 'string' || !targetPath.trim()) throw new Error('File path is required')
+  const target = await fs.realpath(path.resolve(targetPath)).catch(() => null)
+  if (!target) throw new Error('Path does not exist')
+
+  const rows = getDb().prepare('SELECT path FROM projects').all() as Array<{ path: string }>
+  for (const row of rows) {
+    const root = await fs.realpath(path.resolve(row.path)).catch(() => null)
+    if (root && isWithinRoot(target, root)) return { target, root }
+  }
+  throw new Error('Path outside registered project boundaries')
+}
+
+function isSecretWritePath(filePath: string): boolean {
+  const name = path.basename(filePath).toLowerCase()
+  if (name === '.env' || (name.startsWith('.env.') && !['.env.example', '.env.sample', '.env.template'].includes(name))) return true
+  if (/keypair.*\.json$/i.test(name)) return true
+  if (/\.(?:pem|key|p12|pfx)$/i.test(name)) return true
+  return /^(?:secret|secrets|seed|mnemonic)(?:\.[^.]+)?$/i.test(name)
+}
+
+function isProbablyBinary(buffer: Buffer): boolean {
+  const sample = buffer.subarray(0, Math.min(buffer.length, TEXT_SAMPLE_BYTES))
+  if (sample.includes(0)) return true
+  if (sample.length === 0) return false
+
+  let controlBytes = 0
+  for (const byte of sample) {
+    if (byte < 32 && byte !== 9 && byte !== 10 && byte !== 13) controlBytes += 1
+  }
+  return controlBytes / sample.length > 0.1
+}
+
+function decodeText(buffer: Buffer): string {
+  if (isProbablyBinary(buffer)) throw new Error('Binary files cannot be opened in Lite Workbench')
+  try {
+    return new TextDecoder('utf-8', { fatal: true }).decode(buffer)
+  } catch {
+    throw new Error('File is not valid UTF-8 text')
+  }
+}
+
+function validateWriteContent(content: unknown): Buffer {
+  if (typeof content !== 'string') throw new Error('File content must be text')
+  if (content.includes('\0')) throw new Error('Binary content cannot be written in Lite Workbench')
+  const buffer = Buffer.from(content, 'utf8')
+  if (buffer.length > MAX_TEXT_BYTES) throw new Error('File too large (>2MB)')
+  return buffer
+}
+
+function stopWatcher(): void {
+  if (!activeWatcher) return
+  if (activeWatcher.debounceTimer) clearTimeout(activeWatcher.debounceTimer)
+  try { activeWatcher.watcher.close() } catch { /* already closed */ }
+  activeWatcher = null
+}
+
+function isIgnoredChange(relativePath: string | null): boolean {
+  if (!relativePath) return false
+  return relativePath.split(/[\\/]/).some((segment) => IGNORED_NAMES.has(segment))
+}
+
+function startWatcher(event: Electron.IpcMainInvokeEvent, rootPath: string, canonicalRoot: string): void {
+  stopWatcher()
+  const watcher = fsSync.watch(canonicalRoot, { recursive: true }, (_eventType, filename) => {
+    const relativePath = filename == null ? null : filename.toString()
+    if (isIgnoredChange(relativePath) || activeWatcher?.watcher !== watcher) return
+    if (activeWatcher.debounceTimer) clearTimeout(activeWatcher.debounceTimer)
+    activeWatcher.debounceTimer = setTimeout(() => {
+      if (activeWatcher?.watcher !== watcher || activeWatcher.senderId !== event.sender.id || event.sender.isDestroyed()) return
+      event.sender.send('fs:changed', { rootPath })
+    }, WATCH_DEBOUNCE_MS)
+  })
+  watcher.on('error', () => {
+    if (activeWatcher?.watcher === watcher) stopWatcher()
+  })
+  activeWatcher = { rootPath, senderId: event.sender.id, watcher, debounceTimer: null }
+}
+
+async function readDirectory(dirPath: string, depth: number, remaining: { value: number }): Promise<FileEntry[]> {
+  if (depth <= 0 || remaining.value <= 0) return []
+  const items = await fs.readdir(dirPath, { withFileTypes: true })
+  items.sort((left, right) => {
+    if (left.isDirectory() !== right.isDirectory()) return left.isDirectory() ? -1 : 1
+    return left.name.localeCompare(right.name)
+  })
+
+  const entries: FileEntry[] = []
+  for (const item of items) {
+    if (IGNORED_NAMES.has(item.name) || remaining.value <= 0) continue
+    const entryPath = path.join(dirPath, item.name)
+    const entry: FileEntry = { name: item.name, path: entryPath, isDirectory: item.isDirectory() }
+    remaining.value -= 1
+    if (item.isDirectory() && !item.isSymbolicLink() && depth > 1) {
+      entry.children = await readDirectory(entryPath, depth - 1, remaining)
+    }
+    entries.push(entry)
+  }
+  return entries
+}
+
+export function registerLiteFilesystemHandlers(): void {
+  ipcMain.handle('fs:readDir', ipcHandler(async (_event, dirPath: string, depth = 1) => {
+    const { target } = await registeredRootFor(dirPath)
+    const stats = await fs.stat(target)
+    if (!stats.isDirectory()) throw new Error('Path is not a directory')
+    const safeDepth = Math.max(1, Math.min(Number.isInteger(depth) ? depth : 1, MAX_READ_DIR_DEPTH))
+    return readDirectory(target, safeDepth, { value: MAX_READ_DIR_ENTRIES })
+  }))
+
+  ipcMain.handle('fs:readFile', ipcHandler(async (_event, filePath: string) => {
+    const { target } = await registeredRootFor(filePath)
+    const stats = await fs.stat(target)
+    if (!stats.isFile()) throw new Error('Path is not a file')
+    if (stats.size > MAX_TEXT_BYTES) throw new Error('File too large (>2MB)')
+    return { content: decodeText(await fs.readFile(target)), path: target }
+  }))
+
+  ipcMain.handle('fs:writeFile', ipcHandler(async (_event, filePath: string, content: string) => {
+    const { target } = await registeredRootFor(filePath)
+    const stats = await fs.stat(target)
+    if (!stats.isFile()) throw new Error('Path is not a file')
+    if (isSecretWritePath(target)) throw new Error('Lite Workbench refuses to write secret or keypair files')
+    const buffer = validateWriteContent(content)
+    await fs.writeFile(target, buffer)
+  }))
+
+  ipcMain.handle('fs:watch', ipcHandler(async (event, rootPath: string) => {
+    const { target, root } = await registeredRootFor(rootPath)
+    if (normalizedPath(target) !== normalizedPath(root)) throw new Error('Only a registered project root can be watched')
+    startWatcher(event, rootPath, root)
+  }))
+
+  ipcMain.handle('fs:unwatch', ipcHandler(async (event) => {
+    if (activeWatcher && activeWatcher.senderId !== event.sender.id) {
+      throw new Error('Project watcher belongs to another window')
+    }
+    stopWatcher()
+  }))
+}
+
+export function stopLiteFilesystemWatcher(): void {
+  stopWatcher()
+}
diff --git a/electron/ipc/forensics.lite.ts b/electron/ipc/forensics.lite.ts
new file mode 100644
index 00000000..d54b0a44
--- /dev/null
+++ b/electron/ipc/forensics.lite.ts
@@ -0,0 +1,34 @@
+/**
+ * DAEMON Lite forensics IPC — swapped in for forensics.ts by vite.lite.config.ts.
+ * Registers scan/expand/blacklist/poll only. Drops the RicoMaps embed handlers
+ * (RicoMapsEmbedService spawns a Node dev-server child process — out of scope
+ * for Lite, and it keeps that import off the lite main graph).
+ */
+import { clipboard, ipcMain } from 'electron'
+import { ipcHandler } from '../services/IpcHandlerFactory'
+import * as RicoMapsService from '../services/RicoMapsService'
+import type { ForensicsExpandInput, ForensicsScanInput } from '../shared/types'
+
+export function registerForensicsHandlers() {
+  ipcMain.handle('forensics:scan', ipcHandler(async (_event, input: ForensicsScanInput) => {
+    return RicoMapsService.scan(input)
+  }))
+
+  ipcMain.handle('forensics:expand', ipcHandler(async (_event, input: ForensicsExpandInput) => {
+    return RicoMapsService.expandNode(input)
+  }))
+
+  ipcMain.handle('forensics:blacklist', ipcHandler(async () => {
+    return RicoMapsService.listBlacklist()
+  }))
+
+  ipcMain.handle('forensics:export-blacklist', ipcHandler(async () => {
+    const csv = RicoMapsService.exportBlacklistCsv()
+    clipboard.writeText(csv)
+    return { csv, copied: true }
+  }))
+
+  ipcMain.handle('forensics:poll-holders', ipcHandler(async (_event, mint: string) => {
+    return RicoMapsService.pollHolders(mint)
+  }))
+}
diff --git a/electron/ipc/git.ts b/electron/ipc/git.ts
index ddeab240..0977ecd8 100644
--- a/electron/ipc/git.ts
+++ b/electron/ipc/git.ts
@@ -122,6 +122,24 @@ export function registerGitHandlers() {
     await git.commit(message)
   }))
 
+  // Deterministic init + stage-all + initial commit for a freshly scaffolded project.
+  // Ordered and error-checked in one place (the shell-chained equivalent in a startup
+  // command was fragile: a `.git` created by init but a failed commit left an unborn
+  // HEAD, which a swarm can't branch from). Idempotent: skips if a commit already exists.
+  ipcMain.handle('git:init-commit', ipcHandler(async (_event, cwd: string, message: string) => {
+    validateCwd(cwd)
+    const git = simpleGit(cwd)
+    await ensureGitRepository(cwd)
+    // Already has a commit? Nothing to do.
+    try {
+      await git.revparse(['HEAD'])
+      return { committed: false, reason: 'already has commits' }
+    } catch { /* unborn HEAD — proceed to first commit */ }
+    await git.add(['-A'])
+    await git.commit(message.trim() || 'chore: initial scaffold')
+    return { committed: true }
+  }))
+
   ipcMain.handle('git:push', ipcHandler(async (_event, cwd: string) => {
     validateCwd(cwd)
     const ensured = await ensureGitRepository(cwd)
diff --git a/electron/ipc/lite.ts b/electron/ipc/lite.ts
new file mode 100644
index 00000000..cbb016cb
--- /dev/null
+++ b/electron/ipc/lite.ts
@@ -0,0 +1,74 @@
+/**
+ * DAEMON Lite IPC — flavor info, first-run flag, and the "Open in DAEMON IDE"
+ * handoff. Registered only by the Lite main entry (electron/main/lite.ts).
+ */
+import { ipcMain, app } from 'electron'
+import { spawn } from 'node:child_process'
+import fs from 'node:fs'
+import path from 'node:path'
+import { createRequire } from 'node:module'
+import { ipcHandler } from '../services/IpcHandlerFactory'
+import { getBooleanSetting, setBooleanSetting } from '../services/SettingsService'
+import { openSafeExternalUrl } from '../security/externalNavigation'
+
+const IDE_DOWNLOAD_URL = 'https://daemon-landing.vercel.app'
+const LITE_ONBOARDING_KEY = 'lite_onboarding_complete'
+const LITE_SHOW_TOOLS_KEY = 'lite_show_tools'
+
+/** Packaged: the installer's version. Dev: app.getVersion() is Electron's own
+ *  version, so read the repo package.json instead. */
+function appVersion(): string {
+  if (app.isPackaged) return app.getVersion()
+  try {
+    const require = createRequire(import.meta.url)
+    return (require(path.join(process.env.APP_ROOT ?? '', 'package.json')) as { version: string }).version
+  } catch {
+    return app.getVersion()
+  }
+}
+
+/** Full-DAEMON NSIS per-user install location; null when not installed. */
+function fullIdeExePath(): string | null {
+  const base = process.env.LOCALAPPDATA
+  if (!base) return null
+  const exe = path.join(base, 'Programs', 'DAEMON', 'DAEMON.exe')
+  return fs.existsSync(exe) ? exe : null
+}
+
+export function registerLiteHandlers() {
+  ipcMain.handle('lite:get-flavor-info', ipcHandler(async () => ({
+    flavor: 'lite' as const,
+    version: appVersion(),
+    ideInstalled: fullIdeExePath() !== null,
+  })))
+
+  ipcMain.handle('lite:is-onboarding-complete', ipcHandler(async () => {
+    return getBooleanSetting(LITE_ONBOARDING_KEY, false)
+  }))
+
+  ipcMain.handle('lite:set-onboarding-complete', ipcHandler(async (_event, complete: boolean) => {
+    setBooleanSetting(LITE_ONBOARDING_KEY, Boolean(complete))
+  }))
+
+  // "Tools" section (wallet / trade / scanner) — off by default so a fresh
+  // install stays a plain chatbox until the user (or an agent tool) opts in.
+  ipcMain.handle('lite:get-show-tools', ipcHandler(async () => {
+    return getBooleanSetting(LITE_SHOW_TOOLS_KEY, false)
+  }))
+
+  ipcMain.handle('lite:set-show-tools', ipcHandler(async (_event, show: boolean) => {
+    setBooleanSetting(LITE_SHOW_TOOLS_KEY, Boolean(show))
+  }))
+
+  // Launch the full IDE when installed; otherwise open the download page.
+  ipcMain.handle('lite:open-in-ide', ipcHandler(async () => {
+    const exe = fullIdeExePath()
+    if (exe) {
+      const child = spawn(exe, [], { detached: true, stdio: 'ignore' })
+      child.unref()
+      return { launched: true }
+    }
+    await openSafeExternalUrl(IDE_DOWNLOAD_URL)
+    return { launched: false }
+  }))
+}
diff --git a/electron/ipc/memeStudio.ts b/electron/ipc/memeStudio.ts
new file mode 100644
index 00000000..b29f338a
--- /dev/null
+++ b/electron/ipc/memeStudio.ts
@@ -0,0 +1,10 @@
+import { ipcMain } from 'electron'
+import { ipcHandler } from '../services/IpcHandlerFactory'
+import { detectMemeTechArchetype } from '../services/meme-studio/ArchetypeDetector'
+import { readMemeMarketContext, readTokenRiskPreflight } from '../services/meme-studio/MarketContextService'
+
+export function registerMemeStudioHandlers(): void {
+  ipcMain.handle('meme-studio:detect', ipcHandler(async (_event, projectPath: string) => detectMemeTechArchetype(projectPath)))
+  ipcMain.handle('meme-studio:market-context', ipcHandler(async (_event, mint: string) => readMemeMarketContext(mint)))
+  ipcMain.handle('meme-studio:token-preflight', ipcHandler(async (_event, mint: string) => readTokenRiskPreflight(mint)))
+}
diff --git a/electron/ipc/popout.ts b/electron/ipc/popout.ts
new file mode 100644
index 00000000..1f4456f6
--- /dev/null
+++ b/electron/ipc/popout.ts
@@ -0,0 +1,51 @@
+/**
+ * DAEMON Lite pop-out browser IPC. lite:popout-open is called from the main
+ * renderer (trusted). The popout:* nav channels are called from each pop-out's
+ * own chrome renderer via the minimal popout preload; they carry the window id
+ * so a chrome window can only drive its own guest.
+ */
+import { BrowserWindow, ipcMain } from 'electron'
+import type { WebContents } from 'electron'
+import { ipcHandler } from '../services/IpcHandlerFactory'
+import { isTrustedSender } from '../security/ipcSender'
+import {
+  openPopout, popoutNavigate, popoutBack, popoutForward, popoutReload,
+} from '../services/PopoutBrowserService'
+
+function ownerWindowId(sender: WebContents): number | undefined {
+  return BrowserWindow.fromWebContents(sender)?.id
+}
+
+export function registerPopoutHandlers() {
+  ipcMain.handle('lite:popout-open', ipcHandler(async (event, url: string) => {
+    if (!isTrustedSender(event)) return { opened: false }
+    const result = openPopout(url)
+    return { opened: result.opened }
+  }))
+
+  // Nav channels come from the chrome renderer (its own trusted origin); each
+  // scopes to the sender window's id so it can only steer its own guest.
+  ipcMain.handle('popout:navigate', ipcHandler(async (event, url: string) => {
+    if (!isTrustedSender(event)) return false
+    const windowId = ownerWindowId(event.sender)
+    return windowId !== undefined ? popoutNavigate(windowId, url) : false
+  }))
+
+  ipcMain.on('popout:back', (event) => {
+    if (!isTrustedSender(event)) return
+    const windowId = ownerWindowId(event.sender)
+    if (windowId !== undefined) popoutBack(windowId)
+  })
+
+  ipcMain.on('popout:forward', (event) => {
+    if (!isTrustedSender(event)) return
+    const windowId = ownerWindowId(event.sender)
+    if (windowId !== undefined) popoutForward(windowId)
+  })
+
+  ipcMain.on('popout:reload', (event) => {
+    if (!isTrustedSender(event)) return
+    const windowId = ownerWindowId(event.sender)
+    if (windowId !== undefined) popoutReload(windowId)
+  })
+}
diff --git a/electron/ipc/projects.lite.ts b/electron/ipc/projects.lite.ts
new file mode 100644
index 00000000..3f46bf7d
--- /dev/null
+++ b/electron/ipc/projects.lite.ts
@@ -0,0 +1,111 @@
+import { dialog, ipcMain } from 'electron'
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import { getDb } from '../db/db'
+import { ipcHandler } from '../services/IpcHandlerFactory'
+import { invalidatePathCache } from '../shared/pathValidation'
+import type { Project, ProjectCreateInput } from '../shared/types'
+
+const PICK_CAPABILITY_TTL_MS = 2 * 60 * 1000
+const MAX_PROJECT_NAME_LENGTH = 120
+
+interface PickCapability {
+  path: string
+  senderId: number
+  expiresAt: number
+}
+
+let pendingPick: PickCapability | null = null
+
+function normalizedPath(value: string): string {
+  const resolved = path.resolve(value)
+  return process.platform === 'win32' ? resolved.toLowerCase() : resolved
+}
+
+async function canonicalDirectory(value: string): Promise<string> {
+  const resolved = await fs.realpath(path.resolve(value))
+  const stats = await fs.stat(resolved)
+  if (!stats.isDirectory()) throw new Error('Selected project path is not a directory')
+  return resolved
+}
+
+function validateProjectName(value: unknown): string {
+  if (typeof value !== 'string') throw new Error('Project name is required')
+  const name = value.trim()
+  if (!name) throw new Error('Project name is required')
+  if (name.length > MAX_PROJECT_NAME_LENGTH) throw new Error('Project name is too long')
+  return name
+}
+
+function consumePick(senderId: number): PickCapability {
+  const capability = pendingPick
+  pendingPick = null
+  if (!capability || capability.expiresAt < Date.now()) {
+    throw new Error('Choose the project folder again before importing it')
+  }
+  if (capability.senderId !== senderId) {
+    throw new Error('Project folder selection belongs to another window')
+  }
+  return capability
+}
+
+function insertProject(name: string, projectPath: string): Project {
+  const db = getDb()
+  const existing = db.prepare('SELECT * FROM projects WHERE path = ?').get(projectPath) as Project | undefined
+  if (existing) return existing
+
+  const id = crypto.randomUUID()
+  const now = Date.now()
+  db.prepare('INSERT INTO projects (id, name, path, last_active) VALUES (?,?,?,?)')
+    .run(id, name, projectPath, now)
+  invalidatePathCache()
+  return db.prepare('SELECT * FROM projects WHERE id = ?').get(id) as Project
+}
+
+export function registerLiteProjectHandlers(): void {
+  ipcMain.handle('projects:list', ipcHandler(async () => {
+    return getDb()
+      .prepare('SELECT * FROM projects ORDER BY pinned DESC, last_active DESC, created_at DESC')
+      .all() as Project[]
+  }))
+
+  ipcMain.handle('projects:openDialog', ipcHandler(async (event) => {
+    pendingPick = null
+    const smokePath = process.env.DAEMON_SMOKE_TEST === '1'
+      ? process.env.DAEMON_SMOKE_PROJECT_DIALOG_PATH?.trim()
+      : null
+    let selectedPath = smokePath || null
+    if (!selectedPath) {
+      const result = await dialog.showOpenDialog({
+        properties: ['openDirectory'],
+        title: 'Select Project Folder',
+      })
+      if (result.canceled || !result.filePaths.length) return null
+      selectedPath = result.filePaths[0]
+    }
+
+    const projectPath = await canonicalDirectory(selectedPath)
+    pendingPick = {
+      path: projectPath,
+      senderId: event.sender.id,
+      expiresAt: Date.now() + PICK_CAPABILITY_TTL_MS,
+    }
+    return projectPath
+  }))
+
+  ipcMain.handle('projects:create', ipcHandler(async (event, input: ProjectCreateInput & { requireNewDirectory?: boolean }) => {
+    if (!input || typeof input.path !== 'string') throw new Error('Project path is required')
+    if (input.requireNewDirectory) throw new Error('Lite can only import an existing selected folder')
+
+    const capability = consumePick(event.sender.id)
+    const projectPath = await canonicalDirectory(input.path)
+    if (normalizedPath(projectPath) !== normalizedPath(capability.path)) {
+      throw new Error('Project path does not match the selected folder')
+    }
+    return insertProject(validateProjectName(input.name), capability.path)
+  }))
+}
+
+export function clearLiteProjectPickCapability(): void {
+  pendingPick = null
+}
diff --git a/electron/ipc/secureKeys.ts b/electron/ipc/secureKeys.ts
new file mode 100644
index 00000000..b491aa3c
--- /dev/null
+++ b/electron/ipc/secureKeys.ts
@@ -0,0 +1,24 @@
+/**
+ * Secure-key IPC — OS-keychain-encrypted key storage (SecureKeyService).
+ * Extracted from claude.ts so shells that need key management without the
+ * Claude-CLI machinery (DAEMON Lite) can register just this surface. Channel
+ * names keep their historical claude: prefix — the preload bridge and every
+ * renderer call site depend on them.
+ */
+import { ipcMain } from 'electron'
+import * as SecureKey from '../services/SecureKeyService'
+import { ipcHandler } from '../services/IpcHandlerFactory'
+
+export function registerSecureKeyHandlers() {
+  ipcMain.handle('claude:store-key', ipcHandler(async (_event, name: string, value: string) => {
+    SecureKey.storeKey(name, value)
+  }))
+
+  ipcMain.handle('claude:list-keys', ipcHandler(async () => {
+    return SecureKey.listKeys()
+  }))
+
+  ipcMain.handle('claude:delete-key', ipcHandler(async (_event, name: string) => {
+    SecureKey.deleteKey(name)
+  }))
+}
diff --git a/electron/ipc/terminal.lite.ts b/electron/ipc/terminal.lite.ts
new file mode 100644
index 00000000..6a7d746f
--- /dev/null
+++ b/electron/ipc/terminal.lite.ts
@@ -0,0 +1,195 @@
+import { clipboard, ipcMain } from 'electron'
+import { execFileSync } from 'node:child_process'
+import * as pty from 'node-pty'
+import { isTrustedSender } from '../security/ipcSender'
+import { ipcHandler } from '../services/IpcHandlerFactory'
+import { validateCwd } from '../shared/pathValidation'
+import type { TerminalCreateInput, TerminalCreateOutput } from '../shared/types'
+
+const DEFAULT_COLS = 120
+const DEFAULT_ROWS = 30
+const MAX_BUFFERED_CHUNKS = 200
+const MAX_INPUT_LENGTH = 64 * 1024
+const MIN_COLS = 2
+const MAX_COLS = 500
+const MIN_ROWS = 1
+const MAX_ROWS = 300
+
+interface LiteTerminalSession {
+  pty: pty.IPty
+  senderId: number
+  send: (channel: string, payload: unknown) => void
+  isRendererReady: boolean
+  bufferedData: string[]
+  pendingStartupCommand: string | null
+}
+
+const sessions = new Map<string, LiteTerminalSession>()
+
+function ownsSession(senderId: number, session: LiteTerminalSession | undefined): session is LiteTerminalSession {
+  return Boolean(session && session.senderId === senderId)
+}
+
+function getShell(): { executable: string; args: string[] } {
+  if (process.platform === 'win32') return { executable: 'powershell.exe', args: ['-NoLogo'] }
+  return { executable: process.env.SHELL || '/bin/bash', args: [] }
+}
+
+function killProcessTree(session: LiteTerminalSession): void {
+  if (process.platform === 'win32' && session.pty.pid) {
+    try {
+      execFileSync('taskkill.exe', ['/pid', String(session.pty.pid), '/t', '/f'], {
+        stdio: 'ignore',
+        windowsHide: true,
+        timeout: 5_000,
+      })
+    } catch {
+      try { session.pty.kill() } catch { /* process already exited */ }
+    }
+    try { (session.pty as pty.IPty & { _close?: () => void })._close?.() } catch { /* already closed */ }
+    return
+  }
+
+  try { session.pty.kill() } catch { /* process already exited */ }
+}
+
+function removeSession(id: string): LiteTerminalSession | null {
+  const session = sessions.get(id)
+  if (!session) return null
+  sessions.delete(id)
+  return session
+}
+
+function validateDimensions(cols: number, rows: number): boolean {
+  return Number.isInteger(cols)
+    && Number.isInteger(rows)
+    && cols >= MIN_COLS
+    && cols <= MAX_COLS
+    && rows >= MIN_ROWS
+    && rows <= MAX_ROWS
+}
+
+function createSession(
+  id: string,
+  event: Electron.IpcMainInvokeEvent,
+  cwd: string,
+  startupCommand: string | null,
+): LiteTerminalSession {
+  const shell = getShell()
+  const terminal = pty.spawn(shell.executable, shell.args, {
+    name: 'xterm-256color',
+    cols: DEFAULT_COLS,
+    rows: DEFAULT_ROWS,
+    cwd,
+    env: { ...process.env, TERM: 'xterm-256color' } as Record<string, string>,
+  })
+  const session: LiteTerminalSession = {
+    pty: terminal,
+    senderId: event.sender.id,
+    send: (channel, payload) => {
+      if (!event.sender.isDestroyed()) event.sender.send(channel, payload)
+    },
+    isRendererReady: false,
+    bufferedData: [],
+    pendingStartupCommand: startupCommand,
+  }
+  sessions.set(id, session)
+
+  terminal.onData((data) => {
+    if (session.isRendererReady) {
+      session.send('terminal:data', { id, data })
+      return
+    }
+    session.bufferedData.push(data)
+    if (session.bufferedData.length > MAX_BUFFERED_CHUNKS) {
+      session.bufferedData = session.bufferedData.slice(-MAX_BUFFERED_CHUNKS)
+    }
+  })
+
+  terminal.onExit(({ exitCode }) => {
+    if (sessions.get(id) !== session) return
+    sessions.delete(id)
+    session.send('terminal:exit', { id, exitCode })
+  })
+
+  return session
+}
+
+export function registerLiteTerminalHandlers(): void {
+  ipcMain.handle('terminal:create', ipcHandler(async (event, opts: TerminalCreateInput) => {
+    const cwd = opts?.cwd?.trim()
+    if (!cwd) throw new Error('Terminal cwd is required')
+    validateCwd(cwd)
+
+    const startupCommand = opts?.startupCommand?.trim() || null
+    if (startupCommand && startupCommand.length > MAX_INPUT_LENGTH) {
+      throw new Error('Terminal startup command is too large')
+    }
+
+    const id = crypto.randomUUID()
+    const session = createSession(id, event, cwd, startupCommand)
+    const response: TerminalCreateOutput = { id, pid: session.pty.pid, agentId: null }
+    return response
+  }))
+
+  ipcMain.on('terminal:write', (event, id: string, data: string) => {
+    if (!isTrustedSender(event) || typeof data !== 'string' || data.length > MAX_INPUT_LENGTH) return
+    const session = sessions.get(id)
+    if (!ownsSession(event.sender.id, session)) return
+    session.pty.write(data)
+  })
+
+  ipcMain.on('terminal:resize', (event, id: string, cols: number, rows: number) => {
+    if (!isTrustedSender(event) || !validateDimensions(cols, rows)) return
+    const session = sessions.get(id)
+    if (!ownsSession(event.sender.id, session)) return
+    try { session.pty.resize(cols, rows) } catch { /* process may have exited */ }
+  })
+
+  ipcMain.on('terminal:ready', (event, id: string, cols?: number, rows?: number) => {
+    if (!isTrustedSender(event)) return
+    const session = sessions.get(id)
+    if (!ownsSession(event.sender.id, session)) return
+
+    if (cols !== undefined && rows !== undefined && validateDimensions(cols, rows)) {
+      try { session.pty.resize(cols, rows) } catch { /* process may have exited */ }
+    }
+    session.isRendererReady = true
+    const bufferedData = session.bufferedData
+    session.bufferedData = []
+    for (const data of bufferedData) session.send('terminal:data', { id, data })
+    if (session.pendingStartupCommand) {
+      session.pty.write(`${session.pendingStartupCommand}\r`)
+      session.pendingStartupCommand = null
+    }
+  })
+
+  ipcMain.handle('terminal:kill', ipcHandler(async (event, id: string) => {
+    const session = sessions.get(id)
+    if (!ownsSession(event.sender.id, session)) throw new Error('Terminal session not found')
+    removeSession(id)
+    killProcessTree(session)
+    return { killed: true }
+  }))
+
+  ipcMain.handle('terminal:paste-from-clipboard', ipcHandler(async (event, id: string) => {
+    const session = sessions.get(id)
+    if (!ownsSession(event.sender.id, session)) throw new Error('Terminal session not found')
+    const text = clipboard.readText()
+    if (!text) return { pasted: false }
+    if (text.length > MAX_INPUT_LENGTH) throw new Error('Clipboard text is too large')
+    session.pty.write(text)
+    return { pasted: true }
+  }))
+}
+
+export function killAllLiteTerminalSessions(): void {
+  for (const [id, session] of sessions) {
+    sessions.delete(id)
+    killProcessTree(session)
+  }
+}
+
+export function getLiteTerminalSessionCount(): number {
+  return sessions.size
+}
diff --git a/electron/ipc/validator.ts b/electron/ipc/validator.ts
index 20364a75..fd4ff4a6 100644
--- a/electron/ipc/validator.ts
+++ b/electron/ipc/validator.ts
@@ -8,6 +8,15 @@ import * as SolanaDetector from '../services/SolanaDetector'
 let validatorPty: pty.IPty | null = null
 let validatorTerminalId: string | null = null
 
+export function stopValidatorProcess(): void {
+  if (validatorPty) {
+    try { validatorPty.kill() } catch { /* process already exited */ }
+    validatorPty = null
+  }
+  validatorTerminalId = null
+  ValidatorManager.reset()
+}
+
 export function registerValidatorHandlers() {
   ipcMain.handle('validator:start', ipcHandler(async (_event, type: 'surfpool' | 'test-validator') => {
     if (validatorPty) {
@@ -84,11 +93,8 @@ export function registerValidatorHandlers() {
   ipcMain.handle('validator:stop', ipcHandler(async () => {
     if (validatorPty) {
       ValidatorManager.setState({ status: 'stopping' })
-      try { validatorPty.kill() } catch { /* ignore */ }
-      validatorPty = null
-      validatorTerminalId = null
     }
-    ValidatorManager.reset()
+    stopValidatorProcess()
     return { stopped: true }
   }))
 
diff --git a/electron/main/autoUpdatePolicy.ts b/electron/main/autoUpdatePolicy.ts
new file mode 100644
index 00000000..4e438f30
--- /dev/null
+++ b/electron/main/autoUpdatePolicy.ts
@@ -0,0 +1,13 @@
+type AutoUpdateContext = {
+  isPackaged: boolean
+  isDisabled: boolean
+  isSmokeTest: boolean
+  isAdHocMacBuild: boolean
+}
+
+export function shouldEnableAutoUpdate(context: AutoUpdateContext) {
+  return context.isPackaged
+    && !context.isDisabled
+    && !context.isSmokeTest
+    && !context.isAdHocMacBuild
+}
diff --git a/electron/main/lite.ts b/electron/main/lite.ts
new file mode 100644
index 00000000..65d10286
--- /dev/null
+++ b/electron/main/lite.ts
@@ -0,0 +1,280 @@
+/**
+ * DAEMON Lite main entry. Deliberately composed instead of forking
+ * main/index.ts: one window, a focused project/filesystem/terminal/Solana
+ * workflow surface, separate userData, and no packs, bridge, or auto-update.
+ */
+import 'dotenv/config'
+import { app, BrowserWindow, ipcMain, session } from 'electron'
+import { fileURLToPath } from 'node:url'
+import path from 'node:path'
+import crypto from 'node:crypto'
+import { existsSync } from 'node:fs'
+import { getDb, closeDb } from '../db/db'
+import { registerAriaHandlers } from '../ipc/aria'
+import { registerProviderHandlers } from '../ipc/provider'
+import { registerMemoryHandlers } from '../ipc/memory'
+import { registerSecureKeyHandlers } from '../ipc/secureKeys'
+import { registerLiteHandlers } from '../ipc/lite'
+import { registerWalletHandlers } from '../ipc/wallet'
+import { registerPnlHandlers } from '../ipc/pnl'
+import { registerForensicsHandlers } from '../ipc/forensics'
+import { registerPopoutHandlers } from '../ipc/popout'
+import { registerLiteFilesystemHandlers, stopLiteFilesystemWatcher } from '../ipc/filesystem.lite'
+import { clearLiteProjectPickCapability, registerLiteProjectHandlers } from '../ipc/projects.lite'
+import { killAllLiteTerminalSessions, registerLiteTerminalHandlers } from '../ipc/terminal.lite'
+import { registerValidatorHandlers, stopValidatorProcess } from '../ipc/validator'
+import { registerShiplineHandlers } from '../ipc/shipline'
+import { registerMemeStudioHandlers } from '../ipc/memeStudio'
+import { configurePopoutBrowser, closeAllPopouts } from '../services/PopoutBrowserService'
+import { ClaudeProvider, CodexProvider, ProviderRegistry } from '../services/providers'
+import { getKeyEncryptionWarning, getStorageBackend } from '../services/SecureKeyService'
+import { isSafeExternalUrl, openSafeExternalUrl } from '../security/externalNavigation'
+import { isTrustedSender, setTrustedIpcOrigin } from '../security/ipcSender'
+import { shouldEnableAutoUpdate } from './autoUpdatePolicy'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+
+process.env.DAEMON_FLAVOR = 'lite'
+process.env.APP_ROOT = path.join(__dirname, '../..')
+const RENDERER_DIST = path.join(process.env.APP_ROOT, 'dist-lite')
+const VITE_DEV_SERVER_URL = app.isPackaged ? undefined : process.env.VITE_DEV_SERVER_URL
+const SMOKE_TEST_MODE = process.env.DAEMON_SMOKE_TEST === '1'
+const IS_ADHOC_MAC_BUILD = process.platform === 'darwin'
+  && existsSync(path.join(process.resourcesPath, 'macos-adhoc-release'))
+
+process.env.VITE_PUBLIC = VITE_DEV_SERVER_URL
+  ? path.join(process.env.APP_ROOT, 'public')
+  : RENDERER_DIST
+
+// The focused workbench is the canonical DAEMON app. Honor Electron's
+// conventional switch for isolated profiles used by packaged smoke/E2E.
+const cliUserDataDir = app.commandLine.getSwitchValue('user-data-dir').trim()
+app.setPath(
+  'userData',
+  process.env.DAEMON_USER_DATA_DIR?.trim() || cliUserDataDir || path.join(app.getPath('appData'), 'daemon'),
+)
+
+if (SMOKE_TEST_MODE) {
+  app.commandLine.appendSwitch('remote-debugging-port', process.env.DAEMON_SMOKE_CDP_PORT ?? '9333')
+} else if (!app.isPackaged) {
+  app.commandLine.appendSwitch('remote-debugging-port', process.env.DAEMON_DEV_CDP_PORT ?? '9224')
+}
+
+if (process.platform === 'win32') app.setAppUserModelId('com.daemon.app')
+
+function recordAppCrash(type: string, message: string, stack = '') {
+  try {
+    const db = getDb()
+    db.prepare('INSERT INTO app_crashes (id, type, message, stack, created_at) VALUES (?,?,?,?,?)').run(
+      crypto.randomUUID(), type, message, stack, Date.now()
+    )
+  } catch { /* DB may not be ready */ }
+}
+
+process.on('uncaughtException', (error) => {
+  recordAppCrash('uncaughtException', error.message, error.stack ?? '')
+})
+
+process.on('unhandledRejection', (reason) => {
+  const message = reason instanceof Error ? reason.message : String(reason)
+  const stack = reason instanceof Error ? reason.stack ?? '' : ''
+  recordAppCrash('unhandledRejection', message, stack)
+})
+
+if (!SMOKE_TEST_MODE && !app.requestSingleInstanceLock()) {
+  app.quit()
+  process.exit(0)
+}
+
+let win: BrowserWindow | null = null
+let ipcRegistered = false
+let shutdownStarted = false
+const preload = path.join(__dirname, '../preload/index.mjs')
+const popoutPreload = path.join(__dirname, '../preload/popout.mjs')
+const liteHtml = path.join(RENDERER_DIST, 'lite.html')
+
+function popoutChromeUrl(): string {
+  if (VITE_DEV_SERVER_URL) return new URL('popout.html', VITE_DEV_SERVER_URL).toString()
+  return `file://${path.join(RENDERER_DIST, 'popout.html')}`
+}
+
+function beginShutdownCleanup() {
+  if (shutdownStarted) return
+  shutdownStarted = true
+  killAllLiteTerminalSessions()
+  stopValidatorProcess()
+  stopLiteFilesystemWatcher()
+  clearLiteProjectPickCapability()
+  closeAllPopouts()
+  closeDb()
+}
+
+function registerLiteIpc() {
+  if (ipcRegistered) return
+  ipcRegistered = true
+
+  ProviderRegistry.register(ClaudeProvider)
+  ProviderRegistry.register(CodexProvider)
+
+  registerProviderHandlers()
+  registerSecureKeyHandlers()
+  registerAriaHandlers()
+  registerMemoryHandlers()
+  registerLiteHandlers()
+  registerWalletHandlers()
+  registerPnlHandlers()
+  registerForensicsHandlers()
+  registerPopoutHandlers()
+  registerLiteFilesystemHandlers()
+  registerLiteProjectHandlers()
+  registerLiteTerminalHandlers()
+  registerValidatorHandlers()
+  registerShiplineHandlers()
+  registerMemeStudioHandlers()
+
+  configurePopoutBrowser({ preloadPath: popoutPreload, chromeUrl: () => popoutChromeUrl() })
+
+  ipcMain.handle('shell:open-external', async (event, url: string) => {
+    if (!isTrustedSender(event)) return
+    await openSafeExternalUrl(url)
+  })
+}
+
+async function createWindow() {
+  if (SMOKE_TEST_MODE) console.log('[smoke] createWindow:start')
+  setTrustedIpcOrigin(VITE_DEV_SERVER_URL ? new URL(VITE_DEV_SERVER_URL).origin : 'file://')
+  registerLiteIpc()
+
+  // Tight CSP in production — the Lite renderer talks only over IPC; all model
+  // API calls happen in the main process. Dev needs Vite HMR, so skip there.
+  if (!VITE_DEV_SERVER_URL) {
+    session.defaultSession.webRequest.onHeadersReceived((details, callback) => {
+      callback({
+        responseHeaders: {
+          ...details.responseHeaders,
+          'Content-Security-Policy': ["default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; object-src 'none'"],
+        },
+      })
+    })
+  }
+
+  win = new BrowserWindow({
+    title: 'Daemon',
+    width: 1100,
+    height: 760,
+    minWidth: 900,
+    minHeight: 620,
+    show: false,
+    autoHideMenuBar: true,
+    // Cursor-style chrome: hidden native titlebar with dark overlay controls;
+    // the renderer draws a draggable strip that blends into the app.
+    titleBarStyle: 'hidden',
+    titleBarOverlay: {
+      color: '#0c0e0d',
+      symbolColor: '#9fa19d',
+      height: 34,
+    },
+    backgroundColor: '#0c0e0d',
+    icon: path.join(process.env.VITE_PUBLIC, 'daemon-icon.png'),
+    webPreferences: {
+      preload,
+      contextIsolation: true,
+      nodeIntegration: false,
+      sandbox: true,
+    },
+  })
+
+  win.once('ready-to-show', () => {
+    if (SMOKE_TEST_MODE) console.log('[smoke] createWindow:show:ready-to-show')
+    win?.show()
+  })
+
+  if (VITE_DEV_SERVER_URL) {
+    win.loadURL(new URL('lite.html', VITE_DEV_SERVER_URL).toString())
+    if (process.env.DAEMON_OPEN_DEVTOOLS === '1') {
+      win.webContents.openDevTools()
+    }
+  } else {
+    win.loadFile(liteHtml)
+  }
+
+  win.webContents.setWindowOpenHandler(({ url }) => {
+    if (isSafeExternalUrl(url)) void openSafeExternalUrl(url)
+    return { action: 'deny' }
+  })
+
+  // Block navigation away from the app origin.
+  win.webContents.on('will-navigate', (event, url) => {
+    const appOrigin = VITE_DEV_SERVER_URL ? new URL(VITE_DEV_SERVER_URL).origin : 'file://'
+    if (new URL(url).origin !== appOrigin) event.preventDefault()
+  })
+
+  win.webContents.on('render-process-gone', (_event, details) => {
+    recordAppCrash('render-process-gone', JSON.stringify(details))
+  })
+  if (SMOKE_TEST_MODE) {
+    win.webContents.on('did-finish-load', () => console.log('[smoke] createWindow:did-finish-load'))
+  }
+}
+
+app.whenReady().then(async () => {
+  if (SMOKE_TEST_MODE) console.log('[smoke] app:ready')
+  getDb()
+
+  const keyEncryptionWarning = getKeyEncryptionWarning()
+  if (keyEncryptionWarning) {
+    console.warn('[secure-key]', keyEncryptionWarning, '(backend:', getStorageBackend(), ')')
+    recordAppCrash('key-encryption-degraded', keyEncryptionWarning, `backend=${getStorageBackend() ?? 'n/a'}`)
+  }
+
+  await createWindow()
+
+  if (shouldEnableAutoUpdate({
+    isPackaged: app.isPackaged,
+    isDisabled: process.env.DAEMON_DISABLE_AUTO_UPDATE === '1',
+    isSmokeTest: SMOKE_TEST_MODE,
+    isAdHocMacBuild: IS_ADHOC_MAC_BUILD,
+  })) {
+    const pkg = await import('electron-updater')
+    const { autoUpdater } = pkg.default
+    autoUpdater.on('error', (error: Error) => console.error('[AutoUpdater]', error.message))
+    void autoUpdater.checkForUpdatesAndNotify().catch((error: Error) => console.error('[AutoUpdater]', error.message))
+    setInterval(() => {
+      void autoUpdater.checkForUpdatesAndNotify().catch((error: Error) => console.error('[AutoUpdater]', error.message))
+    }, 4 * 60 * 60 * 1000)
+  }
+})
+
+app.on('before-quit', () => {
+  beginShutdownCleanup()
+})
+
+app.on('window-all-closed', () => {
+  beginShutdownCleanup()
+  win = null
+  app.quit()
+})
+
+app.on('second-instance', () => {
+  if (!win || win.isDestroyed()) return
+  if (win.isMinimized()) win.restore()
+  win.focus()
+})
+
+app.on('activate', () => {
+  if (shutdownStarted) return
+  const allWindows = BrowserWindow.getAllWindows()
+  if (allWindows.length) {
+    allWindows[0].focus()
+  } else {
+    void createWindow()
+  }
+})
+
+for (const signal of ['SIGINT', 'SIGTERM'] as const) {
+  process.once(signal, () => {
+    beginShutdownCleanup()
+    app.quit()
+    process.exit(0)
+  })
+}
diff --git a/electron/preload/index.ts b/electron/preload/index.ts
index a6e2cdbb..a3e04e07 100644
--- a/electron/preload/index.ts
+++ b/electron/preload/index.ts
@@ -280,6 +280,7 @@ contextBridge.exposeInMainWorld('daemon', {
     stage: (cwd: string, files: string[]) => ipcRenderer.invoke('git:stage', cwd, files),
     unstage: (cwd: string, files: string[]) => ipcRenderer.invoke('git:unstage', cwd, files),
     commit: (cwd: string, message: string) => ipcRenderer.invoke('git:commit', cwd, message),
+    initCommit: (cwd: string, message: string) => ipcRenderer.invoke('git:init-commit', cwd, message),
     push: (cwd: string) => ipcRenderer.invoke('git:push', cwd),
     log: (cwd: string, count?: number) => ipcRenderer.invoke('git:log', cwd, count),
     diff: (cwd: string, filePath?: string) => ipcRenderer.invoke('git:diff', cwd, filePath),
@@ -528,7 +529,7 @@ contextBridge.exposeInMainWorld('daemon', {
 
   projects: {
     list: () => ipcRenderer.invoke('projects:list'),
-    create: (project: { name: string; path: string }) => ipcRenderer.invoke('projects:create', project),
+    create: (project: { name: string; path: string; requireNewDirectory?: boolean }) => ipcRenderer.invoke('projects:create', project),
     createDemoWorkspace: () => ipcRenderer.invoke('projects:createDemoWorkspace'),
     delete: (id: string) => ipcRenderer.invoke('projects:delete', id),
     openDialog: () => ipcRenderer.invoke('projects:openDialog'),
@@ -539,6 +540,23 @@ contextBridge.exposeInMainWorld('daemon', {
     openExternal: (url: string) => ipcRenderer.invoke('shell:open-external', url),
   },
 
+  // DAEMON Lite flavor surface — handlers exist only in the Lite main entry.
+  lite: {
+    getFlavorInfo: () => ipcRenderer.invoke('lite:get-flavor-info'),
+    isOnboardingComplete: () => ipcRenderer.invoke('lite:is-onboarding-complete'),
+    setOnboardingComplete: (complete: boolean) => ipcRenderer.invoke('lite:set-onboarding-complete', complete),
+    getShowTools: () => ipcRenderer.invoke('lite:get-show-tools'),
+    setShowTools: (show: boolean) => ipcRenderer.invoke('lite:set-show-tools', show),
+    openInIde: () => ipcRenderer.invoke('lite:open-in-ide'),
+    popoutOpen: (url: string) => ipcRenderer.invoke('lite:popout-open', url),
+  },
+
+  memeStudio: {
+    detect: (projectPath: string) => ipcRenderer.invoke('meme-studio:detect', projectPath),
+    marketContext: (mint: string) => ipcRenderer.invoke('meme-studio:market-context', mint),
+    tokenPreflight: (mint: string) => ipcRenderer.invoke('meme-studio:token-preflight', mint),
+  },
+
   pumpfun: {
     bondingCurve: (mint: string) => ipcRenderer.invoke('pumpfun:bonding-curve', mint),
     createToken: (input: object) => ipcRenderer.invoke('pumpfun:create-token', input),
@@ -690,7 +708,8 @@ contextBridge.exposeInMainWorld('daemon', {
   autopilot: {
     state: () => ipcRenderer.invoke('autopilot:state'),
     create: (input: unknown) => ipcRenderer.invoke('autopilot:create', input),
-    arm: (id: string) => ipcRenderer.invoke('autopilot:arm', id),
+    armReview: (id: string) => ipcRenderer.invoke('autopilot:arm-review', id),
+    arm: (input: unknown) => ipcRenderer.invoke('autopilot:arm', input),
     disarm: (id: string) => ipcRenderer.invoke('autopilot:disarm', id),
     disarmAll: () => ipcRenderer.invoke('autopilot:disarm-all'),
     delete: (id: string) => ipcRenderer.invoke('autopilot:delete', id),
@@ -1004,7 +1023,7 @@ function useLoading() {
   flex-direction: column;
   align-items: center;
   justify-content: center;
-  background: #0a0a0a;
+  background: #0c0e0d;
   z-index: 9;
   gap: 28px;
   transition: opacity 0.4s ease, visibility 0.4s ease;
@@ -1041,11 +1060,11 @@ function useLoading() {
   gap: 2px;
 }
 .daemon-loading__letter {
-  font-family: 'Plus Jakarta Sans', system-ui, sans-serif;
+  font-family: 'Geist', 'Plus Jakarta Sans', system-ui, sans-serif;
   font-size: 22px;
   font-weight: 700;
   letter-spacing: 0.12em;
-  color: #f0f0f0;
+  color: #eceee9;
   display: inline-block;
   animation: dl-pulse 2.8s ease-in-out infinite;
 }
@@ -1081,7 +1100,7 @@ function useLoading() {
   to   { transform: rotate(360deg); }
 }
 @keyframes dl-pulse {
-  0%, 60%, 100% { color: #f0f0f0; text-shadow: none; }
+  0%, 60%, 100% { color: #eceee9; text-shadow: none; }
   30% { color: #3ecf8e; text-shadow: 0 0 12px rgba(62,207,142,0.5); }
 }
 @keyframes dl-sweep {
diff --git a/electron/preload/popout.ts b/electron/preload/popout.ts
new file mode 100644
index 00000000..199b3c75
--- /dev/null
+++ b/electron/preload/popout.ts
@@ -0,0 +1,19 @@
+/**
+ * Minimal preload for the DAEMON Lite pop-out chrome window. Exposes ONLY the
+ * navigation channels for its own guest view — deliberately NOT the full
+ * window.daemon.* surface (the chrome strip has no business reaching wallet,
+ * keys, or the agent). isTrustedSender in main is the enforcement boundary.
+ */
+import { contextBridge, ipcRenderer } from 'electron'
+
+contextBridge.exposeInMainWorld('daemonPopout', {
+  navigate: (url: string) => ipcRenderer.invoke('popout:navigate', url),
+  back: () => ipcRenderer.send('popout:back'),
+  forward: () => ipcRenderer.send('popout:forward'),
+  reload: () => ipcRenderer.send('popout:reload'),
+  onNavState: (handler: (state: unknown) => void) => {
+    const listener = (_event: unknown, state: unknown) => handler(state)
+    ipcRenderer.on('popout:nav-state', listener)
+    return () => ipcRenderer.removeListener('popout:nav-state', listener)
+  },
+})
diff --git a/electron/services/CheckRunnerService.ts b/electron/services/CheckRunnerService.ts
index aa614dd0..91805231 100644
--- a/electron/services/CheckRunnerService.ts
+++ b/electron/services/CheckRunnerService.ts
@@ -21,13 +21,38 @@ const SAFE_SCRIPT_CHECKS: Array<{ name: string; kind: CheckKind }> = [
 
 const DEPLOY_RE = /\b(deploy|publish|release|push|--dangerously|program deploy|anchor deploy)\b/i
 
-function detectManager(projectPath: string): string {
+export function detectManager(projectPath: string): string {
   if (fs.existsSync(path.join(projectPath, 'pnpm-lock.yaml'))) return 'pnpm'
   if (fs.existsSync(path.join(projectPath, 'yarn.lock'))) return 'yarn'
   if (fs.existsSync(path.join(projectPath, 'bun.lockb'))) return 'bun'
   return 'npm'
 }
 
+/**
+ * Discover a dev-server script (dev/start/serve) from package.json, honoring the
+ * same deploy/publish exclusion as checks. Returns the package-manager command
+ * (e.g. "npm run dev") or null. NOT arbitrary exec: only a named package script.
+ */
+export function discoverDevScript(projectPath: string): { command: string; script: string } | null {
+  const pkgPath = path.join(projectPath, 'package.json')
+  if (!fs.existsSync(pkgPath)) return null
+  let scripts: Record<string, string> = {}
+  try {
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8')) as { scripts?: Record<string, string> }
+    scripts = pkg.scripts ?? {}
+  } catch {
+    return null
+  }
+  const manager = detectManager(projectPath)
+  for (const name of ['dev', 'start', 'serve']) {
+    const body = scripts[name]
+    if (typeof body !== 'string') continue
+    if (DEPLOY_RE.test(body) || DEPLOY_RE.test(name)) continue
+    return { command: `${manager} run ${name}`, script: name }
+  }
+  return null
+}
+
 /**
  * Pure discovery: read package.json scripts (and framework files) and return runnable
  * check definitions. Excludes any script whose body looks like a deploy/publish action.
diff --git a/electron/services/PopoutBrowserService.ts b/electron/services/PopoutBrowserService.ts
new file mode 100644
index 00000000..62836f8b
--- /dev/null
+++ b/electron/services/PopoutBrowserService.ts
@@ -0,0 +1,158 @@
+/**
+ * DAEMON Lite pop-out preview browser. A child BrowserWindow renders a thin
+ * chrome strip (URL bar + back/forward/reload) from popout.html; the page it
+ * previews loads in a main-process-owned WebContentsView guest that gets NO
+ * preload and NO node access. Every navigation is validated against
+ * isAllowedWebviewUrl (https or loopback http only), so the agent/user can
+ * never point a preview at cleartext-remote or credentialed URLs.
+ */
+import { BrowserWindow, WebContentsView } from 'electron'
+import path from 'node:path'
+import { isAllowedWebviewUrl, openSafeExternalUrl } from '../security/externalNavigation'
+
+const CHROME_HEIGHT = 88 // titlebar (34) + nav strip (54)
+const GUEST_PARTITION = 'persist:lite-popout'
+const MAX_POPOUTS = 4
+
+interface Popout {
+  window: BrowserWindow
+  guest: WebContentsView
+}
+
+const popouts = new Set<Popout>()
+
+interface PopoutDeps {
+  preloadPath: string
+  chromeUrl: (id: number) => string
+}
+
+let deps: PopoutDeps | null = null
+
+export function configurePopoutBrowser(next: PopoutDeps): void {
+  deps = next
+}
+
+function layoutGuest(popout: Popout): void {
+  const [width, height] = popout.window.getContentSize()
+  popout.guest.setBounds({ x: 0, y: CHROME_HEIGHT, width, height: Math.max(0, height - CHROME_HEIGHT) })
+}
+
+function sendNavState(popout: Popout): void {
+  const wc = popout.guest.webContents
+  if (popout.window.isDestroyed()) return
+  popout.window.webContents.send('popout:nav-state', {
+    url: wc.getURL(),
+    canGoBack: wc.navigationHistory.canGoBack(),
+    canGoForward: wc.navigationHistory.canGoForward(),
+    loading: wc.isLoading(),
+  })
+}
+
+/** Open (or focus a fresh) preview window at the given allowlisted URL. */
+export function openPopout(url: string): { opened: boolean; reason?: string } {
+  if (!deps) return { opened: false, reason: 'popout browser not configured' }
+  if (!isAllowedWebviewUrl(url)) return { opened: false, reason: 'URL not allowed (https or localhost only)' }
+
+  // LRU cap: close the oldest when at capacity.
+  if (popouts.size >= MAX_POPOUTS) {
+    const oldest = popouts.values().next().value
+    if (oldest && !oldest.window.isDestroyed()) oldest.window.close()
+  }
+
+  const window = new BrowserWindow({
+    width: 1024,
+    height: 768,
+    minWidth: 480,
+    minHeight: 360,
+    title: 'Preview',
+    backgroundColor: '#0c0e0d',
+    titleBarStyle: 'hidden',
+    titleBarOverlay: { color: '#0c0e0d', symbolColor: '#9fa19d', height: 34 },
+    webPreferences: {
+      preload: deps.preloadPath,
+      contextIsolation: true,
+      nodeIntegration: false,
+      sandbox: true,
+    },
+  })
+
+  const guest = new WebContentsView({
+    webPreferences: {
+      contextIsolation: true,
+      nodeIntegration: false,
+      sandbox: true,
+      // No preload — the guest is untrusted web content.
+      partition: GUEST_PARTITION,
+    },
+  })
+
+  const popout: Popout = { window, guest }
+  popouts.add(popout)
+
+  window.contentView.addChildView(guest)
+  layoutGuest(popout)
+
+  const gwc = guest.webContents
+
+  // Block any navigation to a non-allowlisted URL; hand https off to the OS
+  // browser instead of silently dropping it.
+  gwc.on('will-navigate', (event, target) => {
+    if (!isAllowedWebviewUrl(target)) {
+      event.preventDefault()
+      void openSafeExternalUrl(target)
+    }
+  })
+  gwc.setWindowOpenHandler(({ url: target }) => {
+    void openSafeExternalUrl(target)
+    return { action: 'deny' }
+  })
+  gwc.session.on('will-download', (event) => event.preventDefault())
+
+  gwc.on('did-navigate', () => sendNavState(popout))
+  gwc.on('did-navigate-in-page', () => sendNavState(popout))
+  gwc.on('did-start-loading', () => sendNavState(popout))
+  gwc.on('did-stop-loading', () => sendNavState(popout))
+
+  window.on('resize', () => layoutGuest(popout))
+  window.on('closed', () => {
+    popouts.delete(popout)
+  })
+
+  window.loadURL(deps.chromeUrl(window.id))
+  void gwc.loadURL(url)
+
+  return { opened: true }
+}
+
+function findPopout(windowId: number): Popout | undefined {
+  for (const popout of popouts) {
+    if (!popout.window.isDestroyed() && popout.window.id === windowId) return popout
+  }
+  return undefined
+}
+
+export function popoutNavigate(windowId: number, url: string): boolean {
+  const popout = findPopout(windowId)
+  if (!popout || !isAllowedWebviewUrl(url)) return false
+  void popout.guest.webContents.loadURL(url)
+  return true
+}
+
+export function popoutBack(windowId: number): void {
+  findPopout(windowId)?.guest.webContents.navigationHistory.goBack()
+}
+
+export function popoutForward(windowId: number): void {
+  findPopout(windowId)?.guest.webContents.navigationHistory.goForward()
+}
+
+export function popoutReload(windowId: number): void {
+  findPopout(windowId)?.guest.webContents.reload()
+}
+
+export function closeAllPopouts(): void {
+  for (const popout of popouts) {
+    if (!popout.window.isDestroyed()) popout.window.close()
+  }
+  popouts.clear()
+}
diff --git a/electron/services/ProService.lite.ts b/electron/services/ProService.lite.ts
new file mode 100644
index 00000000..7fe7e419
--- /dev/null
+++ b/electron/services/ProService.lite.ts
@@ -0,0 +1,31 @@
+/**
+ * DAEMON Lite stub for ProService (swapped in by vite.lite.config.ts).
+ * Lite is the free tier — there is no subscription, x402 payment, or holder
+ * gating, so this severs the @x402 / @solana/kit / SolanaService import chain
+ * from the Lite bundle. Only getLocalSubscriptionState is imported by the
+ * Lite graph (DaemonAIService, EntitlementGuardService).
+ */
+import type { ProSubscriptionState } from '../shared/types'
+
+export function getLocalSubscriptionState(): ProSubscriptionState {
+  return {
+    active: false,
+    plan: 'light',
+    walletId: null,
+    walletAddress: null,
+    expiresAt: null,
+    features: [],
+    tier: null,
+    accessSource: 'free',
+    holderStatus: {
+      enabled: false,
+      eligible: false,
+      mint: null,
+      minAmount: null,
+      currentAmount: null,
+      symbol: 'DAEMON',
+    },
+    priceUsdc: null,
+    durationDays: null,
+  }
+}
diff --git a/electron/services/RobinhoodChainService.ts b/electron/services/RobinhoodChainService.ts
new file mode 100644
index 00000000..7a671b33
--- /dev/null
+++ b/electron/services/RobinhoodChainService.ts
@@ -0,0 +1,156 @@
+/**
+ * Read-only JSON-RPC client for Robinhood Chain (EVM / Arbitrum Orbit L2).
+ * Talks to the public rate-limited endpoints — fine for ARIA's ad-hoc reads,
+ * not for indexing. No signing, no key material, no writes.
+ */
+import { getRhNetwork, type RhNetworkId } from './aria/knowledge/robinhoodChain'
+
+const RPC_TIMEOUT_MS = 10_000
+const WEI_PER_ETH = 10n ** 18n
+
+/** Well-known ERC-20 function selectors (stable ABI constants). */
+const SELECTOR = {
+  name: '0x06fdde03',
+  symbol: '0x95d89b41',
+  decimals: '0x313ce567',
+  totalSupply: '0x18160ddd',
+  balanceOf: '0x70a08231',
+} as const
+
+export function isEvmAddress(value: string): boolean {
+  return /^0x[0-9a-fA-F]{40}$/.test(value)
+}
+
+export function isTxHash(value: string): boolean {
+  return /^0x[0-9a-fA-F]{64}$/.test(value)
+}
+
+interface JsonRpcResponse {
+  result?: unknown
+  error?: { code: number; message: string }
+}
+
+async function rpcCall(network: RhNetworkId, method: string, params: unknown[]): Promise<unknown> {
+  const { rpcUrl, name } = getRhNetwork(network)
+  const response = await fetch(rpcUrl, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, params }),
+    signal: AbortSignal.timeout(RPC_TIMEOUT_MS),
+  })
+  if (!response.ok) throw new Error(`${name} RPC HTTP ${response.status} for ${method}.`)
+  const payload = (await response.json()) as JsonRpcResponse
+  if (payload.error) throw new Error(`${name} RPC error for ${method}: ${payload.error.message}`)
+  return payload.result
+}
+
+function hexToBigInt(value: unknown): bigint {
+  if (typeof value !== 'string' || !value.startsWith('0x')) {
+    throw new Error(`Expected hex quantity, got ${JSON.stringify(value)}.`)
+  }
+  return BigInt(value)
+}
+
+/** Format a wei quantity as a decimal string without float precision loss. */
+export function formatUnits(value: bigint, decimals: number): string {
+  const base = 10n ** BigInt(decimals)
+  const whole = value / base
+  const fraction = (value % base).toString().padStart(decimals, '0').replace(/0+$/, '')
+  return fraction ? `${whole}.${fraction}` : whole.toString()
+}
+
+/** Decode an ABI-encoded string return (offset + length + utf8 bytes). */
+function decodeAbiString(hex: unknown): string {
+  if (typeof hex !== 'string' || hex === '0x' || !hex.startsWith('0x')) return ''
+  const data = hex.slice(2)
+  if (data.length < 128) return ''
+  const length = Number(BigInt(`0x${data.slice(64, 128)}`))
+  const bytes = data.slice(128, 128 + length * 2)
+  return Buffer.from(bytes, 'hex').toString('utf8')
+}
+
+async function erc20Call(network: RhNetworkId, token: string, data: string): Promise<unknown> {
+  return rpcCall(network, 'eth_call', [{ to: token, data }, 'latest'])
+}
+
+export interface RhChainStatus {
+  network: string
+  chainId: number
+  blockNumber: number
+  gasPriceGwei: string
+}
+
+export async function getChainStatus(network: RhNetworkId): Promise<RhChainStatus> {
+  const [chainIdHex, blockHex, gasHex] = await Promise.all([
+    rpcCall(network, 'eth_chainId', []),
+    rpcCall(network, 'eth_blockNumber', []),
+    rpcCall(network, 'eth_gasPrice', []),
+  ])
+  return {
+    network: getRhNetwork(network).name,
+    chainId: Number(hexToBigInt(chainIdHex)),
+    blockNumber: Number(hexToBigInt(blockHex)),
+    gasPriceGwei: formatUnits(hexToBigInt(gasHex), 9),
+  }
+}
+
+export interface RhBalance {
+  address: string
+  wei: string
+  eth: string
+}
+
+export async function getBalance(network: RhNetworkId, address: string): Promise<RhBalance> {
+  if (!isEvmAddress(address)) throw new Error(`"${address}" is not a valid 0x address.`)
+  const wei = hexToBigInt(await rpcCall(network, 'eth_getBalance', [address, 'latest']))
+  return { address, wei: wei.toString(), eth: formatUnits(wei, 18) }
+}
+
+export interface RhErc20Info {
+  address: string
+  name: string
+  symbol: string
+  decimals: number
+  totalSupply: string
+  holder?: { address: string; balance: string }
+}
+
+export async function getErc20Info(network: RhNetworkId, token: string, holder?: string): Promise<RhErc20Info> {
+  if (!isEvmAddress(token)) throw new Error(`"${token}" is not a valid token address.`)
+  if (holder !== undefined && !isEvmAddress(holder)) throw new Error(`"${holder}" is not a valid holder address.`)
+  const [name, symbol, decimalsHex, supplyHex] = await Promise.all([
+    erc20Call(network, token, SELECTOR.name),
+    erc20Call(network, token, SELECTOR.symbol),
+    erc20Call(network, token, SELECTOR.decimals),
+    erc20Call(network, token, SELECTOR.totalSupply),
+  ])
+  const decimals = Number(hexToBigInt(decimalsHex))
+  const info: RhErc20Info = {
+    address: token,
+    name: decodeAbiString(name),
+    symbol: decodeAbiString(symbol),
+    decimals,
+    totalSupply: formatUnits(hexToBigInt(supplyHex), decimals),
+  }
+  if (holder) {
+    const data = SELECTOR.balanceOf + holder.slice(2).toLowerCase().padStart(64, '0')
+    const balance = hexToBigInt(await erc20Call(network, token, data))
+    info.holder = { address: holder, balance: formatUnits(balance, decimals) }
+  }
+  return info
+}
+
+export interface RhTransaction {
+  transaction: unknown
+  receipt: unknown
+}
+
+export async function getTransaction(network: RhNetworkId, hash: string): Promise<RhTransaction> {
+  if (!isTxHash(hash)) throw new Error(`"${hash}" is not a valid transaction hash.`)
+  const [transaction, receipt] = await Promise.all([
+    rpcCall(network, 'eth_getTransactionByHash', [hash]),
+    rpcCall(network, 'eth_getTransactionReceipt', [hash]),
+  ])
+  if (transaction === null) throw new Error(`Transaction ${hash} not found on ${getRhNetwork(network).name}.`)
+  return { transaction, receipt }
+}
diff --git a/electron/services/SwarmOrchestrator.ts b/electron/services/SwarmOrchestrator.ts
index 3e506644..714f941f 100644
--- a/electron/services/SwarmOrchestrator.ts
+++ b/electron/services/SwarmOrchestrator.ts
@@ -390,6 +390,11 @@ export function collectLaneResults(laneId: string): string | null {
   try { return fs.readFileSync(lane.results_path, 'utf8') } catch { return null }
 }
 
+/** Merge a finished lane's branch into the main repo. See WorktreeService.mergeLane. */
+export async function mergeLane(laneId: string): Promise<Worktree.MergeLaneResult> {
+  return Worktree.mergeLane(laneId)
+}
+
 /**
  * Cancel/dismiss a whole run: kill any live lane processes and ALWAYS tear down
  * every worktree + branch (RESULTS are already snapshotted to the cache on exit,
diff --git a/electron/services/WorktreeService.ts b/electron/services/WorktreeService.ts
index 612b9b53..03fa54e2 100644
--- a/electron/services/WorktreeService.ts
+++ b/electron/services/WorktreeService.ts
@@ -196,6 +196,58 @@ export async function removeWorktree(projectPath: string, worktreePath: string,
   } catch { /* best-effort */ }
 }
 
+export interface MergeLaneResult {
+  ok: boolean
+  branch: string
+  /** short SHA merged into base, when ok */
+  mergedSha?: string
+  /** the base branch the lane was merged into */
+  baseBranch?: string
+  error?: string
+}
+
+/**
+ * Merge a finished lane's work back into the main repo. Lanes are told NOT to
+ * commit (so RESULTS/BUILD_NOTES stay reviewable in the worktree), so this first
+ * commits any uncommitted lane changes onto the lane branch, then merges that
+ * branch (--no-ff) into the base branch in the MAIN working copy. Read-only for
+ * the lane worktree beyond the single commit; the human/tool decides when to run
+ * it. Guarded to `done` lanes only.
+ */
+export async function mergeLane(laneId: string): Promise<MergeLaneResult> {
+  const lane = getLane(laneId)
+  if (!lane) return { ok: false, branch: '', error: 'Lane not found.' }
+  if (lane.status !== 'done') {
+    return { ok: false, branch: lane.branch, error: `Lane is ${lane.status}, only 'done' lanes can be merged.` }
+  }
+  const run = getRun(lane.run_id)
+  if (!run) return { ok: false, branch: lane.branch, error: 'Run not found.' }
+
+  const laneGit = simpleGit(lane.worktree_path)
+  const mainGit = simpleGit(run.project_path)
+  try {
+    // 1) Commit any uncommitted lane work onto the lane branch (lanes don't self-commit).
+    const status = await laneGit.status()
+    if (status.files.length > 0) {
+      await laneGit.add(['-A'])
+      await laneGit.raw(['-c', 'user.email=daemon@local', '-c', 'user.name=DAEMON', 'commit', '-m', `swarm: ${lane.task.slice(0, 72)}`])
+    }
+    // 2) Resolve the base branch to merge into (explicit base, else current HEAD of main).
+    const baseBranch = run.base_branch?.trim()
+      || (await mainGit.revparse(['--abbrev-ref', 'HEAD'])).trim()
+    // 3) Merge the lane branch into base in the MAIN repo. --no-ff keeps the lane visible.
+    await mainGit.raw(['checkout', baseBranch])
+    await mainGit.raw(['merge', '--no-ff', lane.branch, '-m', `Merge swarm lane ${lane.branch}`])
+    const mergedSha = (await mainGit.revparse(['--short', 'HEAD'])).trim()
+    return { ok: true, branch: lane.branch, mergedSha, baseBranch }
+  } catch (err) {
+    // Leave the repo as-is (a conflicted merge stays for the human to resolve in the Git panel).
+    const message = err instanceof Error ? err.message : String(err)
+    LogService.warn('Swarm', `Merge failed for lane ${laneId}`, { branch: lane.branch, error: message })
+    return { ok: false, branch: lane.branch, error: message }
+  }
+}
+
 /**
  * Reconcile-on-boot: any lane already terminal but whose worktree may linger
  * gets its worktree removed. Also marks orphaned non-terminal lanes (a crash
diff --git a/electron/services/aria/contextAssembler.lite.ts b/electron/services/aria/contextAssembler.lite.ts
new file mode 100644
index 00000000..0950d20a
--- /dev/null
+++ b/electron/services/aria/contextAssembler.lite.ts
@@ -0,0 +1,55 @@
+/**
+ * DAEMON Lite system prompt. Swapped in for contextAssembler.ts by the
+ * resolveId hook in vite.lite.config.ts. The Lite workbench can open projects,
+ * files, and terminals, but ARIA does not yet receive tools for those surfaces.
+ * Memories remain global (null project id).
+ */
+import { buildContextBundle } from '../MemoryInjectionService'
+import { getMemory } from '../MemoryService'
+import type { AriaContextSnapshot, AriaMemorySuggestionLite } from '../../shared/types'
+
+const LITE_AGENT_SYSTEM = `You are the DAEMON Lite assistant — a focused AI agent for developers.
+
+CAPABILITIES:
+- Explain code the user pastes, in plain language.
+- Debug errors: read the error message, identify the likely cause, and show the fix.
+- Plan projects and features step by step.
+- Memory: store durable facts about the user's work (remember_fact), list them (recall_memories), correct or forget them (update_memory / forget_memory). Never store secrets — keys, seed phrases, and credentials are rejected.
+- Wallet: read balances/holdings (read_wallet), create a wallet (generate_wallet), send SOL (transfer_sol). Sends require the user's typed confirmation.
+- Trading: search tokens (token_search), get a swap quote (token_quote), and swap tokens via Jupiter (swap_tokens). Always quote first and show the price impact before proposing a swap. Swaps require typed confirmation and are capped at $500 in Lite.
+- Token/wallet safety: check a mint or wallet for risks — mint/freeze authority, snipers, bundles, cabal links (forensic_scan_token, forensic_trace_wallet).
+- Preview: open a sandboxed browser window for a localhost dev server or an https page (open_preview).
+
+RULES:
+- For any request that needs more than one step, FIRST call present_plan with 3–6 short step titles, then walk through the steps in your answer.
+- Be concise and direct, and assume the user may be early in their coding journey: explain the "why" in plain language, define jargon the first time it appears, and prefer small working examples over abstract descriptions.
+- Format with markdown: bold section titles (no trailing colons) and "-" bullets for lists. Code in fenced blocks with a language tag. Keep prose in short paragraphs. No filler, no emoji.
+- When the user tells you to remember something, or a stable preference is established (their stack, their conventions), call remember_fact. If unsure whether a fact is already known, recall_memories first.
+- Money is real. Before any swap or SOL transfer, state the amount, the token, and (for swaps) the price impact, then let the confirmation card gate it. Never move funds without the user's typed confirm. On mainnet, treat every amount as real money.
+- Lite Workbench can open files and terminals, but you have NO tool access to their contents or state yet. Never claim you read a file or ran a command. Ask the user to paste exact evidence or use the visible Workbench surfaces.
+- Never invent file paths, API keys, addresses, mints, or version numbers.
+- When finished with multi-step work, end with a one-line summary.`
+
+export interface AssembledPrompt {
+  system: string
+  /** Memories actually injected into this prompt — surfaced as "recalled" in the transcript. */
+  recalled: AriaMemorySuggestionLite[]
+}
+
+export async function assembleSystemPrompt(snapshot: AriaContextSnapshot): Promise<AssembledPrompt> {
+  // Lite memories are global: project id is always null here.
+  let memoryBlock = ''
+  const recalled: AriaMemorySuggestionLite[] = []
+  if (snapshot.chips.projectMemory) {
+    try {
+      const bundle = buildContextBundle(null, { usedIn: 'aria_prompt' })
+      if (bundle.block) memoryBlock = `\n\n${bundle.block}`
+      for (const id of bundle.usedMemoryIds) {
+        const mem = getMemory(id)
+        if (mem) recalled.push({ id: mem.id, kind: mem.kind, title: mem.title, value: mem.value })
+      }
+    } catch { /* memory unavailable */ }
+  }
+
+  return { system: `${LITE_AGENT_SYSTEM}${memoryBlock}`, recalled }
+}
diff --git a/electron/services/aria/contextAssembler.ts b/electron/services/aria/contextAssembler.ts
index 9efd817a..ca65f66d 100644
--- a/electron/services/aria/contextAssembler.ts
+++ b/electron/services/aria/contextAssembler.ts
@@ -20,8 +20,17 @@ CAPABILITIES (call the matching tool — do not just explain):
 - Token launches: tokenlaunch_list_launchpads, tokenlaunch_preflight, tokenlaunch_create.
 - Flywheel: preview/configure a fee split, run the flywheel (flywheel_*).
 - Git: stage + commit in the active project (git_commit). You never push.
+- Game studio: scaffold a playable Solana game (scaffold_game), run its dev server (run_dev_server), preview it in-app (preview_app), merge a finished swarm lane (swarm_merge_lane), deploy the pre-wired project (deploy_app).
+- Swarms: run tasks as parallel worktree-isolated Claude agents (swarm_launch), monitor them (swarm_status), read their results (swarm_collect).
+- Robinhood Chain (EVM L2): bundled docs knowledge (rh_chain_knowledge — answer any Robinhood Chain question from it before guessing), network constants (rh_chain_info), the canonical stock-token/ETF registry (rh_stock_tokens), and live read-only RPC reads (rh_chain_rpc). All read-only — you cannot sign, send, bridge, or trade on Robinhood Chain.
 - Memory: remember durable project facts (remember_fact), list what you know (recall_memories), correct or forget them (update_memory / forget_memory). Never store secrets.
 
+BUILD-A-GAME FLOW (when the user asks you to build/make a game):
+- STEP 1 (scaffold): call scaffold_game with a short project name. This opens the wizard and, once the user confirms the folder, switches the workbench to the NEW project — which starts a fresh ARIA session for it. So scaffold_game is the LAST action of this turn: after calling it, tell the user "Project scaffolded and previewing. In the new project, tell me to build the game and I'll launch the swarm." Do NOT call swarm_launch in the same turn — the project switch ends this session and would discard a pending approval.
+- STEP 2 (build — in the NEW project's session, after the user asks): swarm_launch with ONE task describing the game (the lane authors it from the template). Then STOP and tell the user the lane is building — the swarm runs in the background past this turn.
+- STEP 3 (finish — after the user says it's done, or on a later turn): swarm_status to confirm the lane is "done", swarm_merge_lane on that lane, run_dev_server, then preview_app so the user can play it. Offer deploy_app last.
+- The game code is written by the swarm lane, not by you. Do not scaffold_file the game yourself. Never call swarm_launch in the same turn as scaffold_game.
+
 RULES:
 - When the user tells you to remember something, or a stable project convention is established (package manager, a constraint, a fix that should not be repeated), call remember_fact. If unsure whether a fact is already known, recall_memories first. Never remember secrets — keys, seed phrases, credentials.
 - Be concise and direct. No filler, no emoji.
diff --git a/electron/services/aria/knowledge/robinhoodChain.ts b/electron/services/aria/knowledge/robinhoodChain.ts
new file mode 100644
index 00000000..d845817a
--- /dev/null
+++ b/electron/services/aria/knowledge/robinhoodChain.ts
@@ -0,0 +1,95 @@
+/**
+ * Bundled Robinhood Chain reference for ARIA — network constants and the
+ * canonical token registry, distilled from docs.robinhood.com/chain.
+ * Last synced: 2026-07-10. Addresses and feeds can move; the docs site is the
+ * source of truth and rh_chain_rpc reads live state.
+ */
+
+export type RhNetworkId = 'mainnet' | 'testnet'
+
+export interface RhChainNetwork {
+  id: RhNetworkId
+  name: string
+  chainId: number
+  rpcUrl: string
+  sequencerFeedUrl: string
+  explorerUrl: string
+  parentChain: string
+  gasToken: string
+}
+
+export const ROBINHOOD_CHAIN_DOCS_URL = 'https://docs.robinhood.com/chain/'
+export const ROBINHOOD_CHAIN_STATUS_URL = 'http://status.robinhoodchain.offchain.io/'
+export const ROBINHOOD_CHAIN_BRIDGE_URL =
+  'https://portal.arbitrum.io/bridge?destinationChain=robinhood-chain&sourceChain=ethereum'
+export const CHAINLINK_FEEDS_URL =
+  'https://docs.chain.link/data-feeds/price-feeds/addresses?network=robinhood'
+
+export const ROBINHOOD_CHAIN_NETWORKS: RhChainNetwork[] = [
+  {
+    id: 'mainnet',
+    name: 'Robinhood Chain',
+    chainId: 4663,
+    rpcUrl: 'https://rpc.mainnet.chain.robinhood.com',
+    sequencerFeedUrl: 'wss://feed.mainnet.chain.robinhood.com',
+    explorerUrl: 'https://robinhoodchain.blockscout.com',
+    parentChain: 'Ethereum',
+    gasToken: 'ETH',
+  },
+  {
+    id: 'testnet',
+    name: 'Robinhood Chain Testnet',
+    chainId: 46630,
+    rpcUrl: 'https://rpc.testnet.chain.robinhood.com',
+    sequencerFeedUrl: 'wss://feed.testnet.chain.robinhood.com',
+    explorerUrl: 'https://explorer.testnet.chain.robinhood.com',
+    parentChain: 'Ethereum Sepolia',
+    gasToken: 'ETH',
+  },
+]
+
+export function getRhNetwork(id: RhNetworkId): RhChainNetwork {
+  const network = ROBINHOOD_CHAIN_NETWORKS.find((n) => n.id === id)
+  if (!network) throw new Error(`Unknown Robinhood Chain network "${id}".`)
+  return network
+}
+
+export type RhTokenKind = 'core' | 'stock' | 'etf'
+
+export interface RhToken {
+  symbol: string
+  kind: RhTokenKind
+  /** Canonical mainnet contract address. A same-ticker token at another address is NOT canonical. */
+  address: string
+}
+
+/** Canonical mainnet token registry (docs.robinhood.com/chain/contracts). */
+export const ROBINHOOD_CHAIN_TOKENS: RhToken[] = [
+  { symbol: 'WETH', kind: 'core', address: '0x0Bd7D308f8E1639FAb988df18A8011f41EAcAD73' },
+  { symbol: 'USDG', kind: 'core', address: '0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168' },
+  { symbol: 'AAPL', kind: 'stock', address: '0xaF3D76f1834A1d425780943C99Ea8A608f8a93f9' },
+  { symbol: 'AMD', kind: 'stock', address: '0x86923f96303D656E4aa86D9d42D1e57ad2023fdC' },
+  { symbol: 'AMZN', kind: 'stock', address: '0x12f190a9F9d7D37a250758b26824B97CE941bF54' },
+  { symbol: 'BABA', kind: 'stock', address: '0xad25Ac6C84D497db898fa1E8387bf6Af3532a1c4' },
+  { symbol: 'BE', kind: 'stock', address: '0x822CC93fFD030293E9842c30BBD678F530701867' },
+  { symbol: 'COIN', kind: 'stock', address: '0x6330D8C3178a418788dF01a47479c0ce7CCF450b' },
+  { symbol: 'CRCL', kind: 'stock', address: '0xdF0992E440dD0be65BD8439b609d6D4366bf1CB5' },
+  { symbol: 'CRWV', kind: 'stock', address: '0x5f10A1C971B69e47e059e1dC91901B59b3fB49C3' },
+  { symbol: 'GOOGL', kind: 'stock', address: '0x2e0847E8910a9732eB3fb1bb4b70a580ADAD4FE3' },
+  { symbol: 'INTC', kind: 'stock', address: '0xc72b96e0E48ecd4DC75E1e45396e26300BC39681' },
+  { symbol: 'META', kind: 'stock', address: '0xc0D6457C16Cc70d6790Dd43521C899C87ce02f35' },
+  { symbol: 'MSFT', kind: 'stock', address: '0xe93237C50D904957Cf27E7B1133b510C669c2e74' },
+  { symbol: 'MU', kind: 'stock', address: '0xfF080c8ce2E5feadaCa0Da81314Ae59D232d4afD' },
+  { symbol: 'NVDA', kind: 'stock', address: '0xd0601CE157Db5bdC3162BbaC2a2C8aF5320D9EEC' },
+  { symbol: 'ORCL', kind: 'stock', address: '0xb0992820E760d836549ba69BC7598b4af75dEE03' },
+  { symbol: 'PLTR', kind: 'stock', address: '0x894E1EC2D74FFE5AEF8Dc8A9e84686acCB964F2A' },
+  { symbol: 'SNDK', kind: 'stock', address: '0xB90A19fF0Af67f7779afF50A882A9CfF42446400' },
+  { symbol: 'SPCX', kind: 'stock', address: '0x4a0E65A3EcceC6dBe60AE065F2e7bb85Fae35eEa' },
+  { symbol: 'TSLA', kind: 'stock', address: '0x322F0929c4625eD5bAd873c95208D54E1c003b2d' },
+  { symbol: 'USAR', kind: 'stock', address: '0xd917B029C761D264c6A312BBbcDA868658eF86a6' },
+  { symbol: 'QQQ', kind: 'etf', address: '0xD5f3879160bc7c32ebb4dC785F8a4F505888de68' },
+  { symbol: 'SGOV', kind: 'etf', address: '0x92FD66527192E3e61d4DDd13322Aa222DE86F9B5' },
+  { symbol: 'SLV', kind: 'etf', address: '0x411eFb0E7f985935DAec3D4C3ebaEa0d0AD7D89f' },
+  { symbol: 'SPY', kind: 'etf', address: '0x117cc2133c37B721F49dE2A7a74833232B3B4C0C' },
+  { symbol: 'CUSO', kind: 'etf', address: '0xa30FA36Db767ad9eD3f7a60fC79526fB4d56D344' },
+]
diff --git a/electron/services/aria/knowledge/robinhoodChainDocs.ts b/electron/services/aria/knowledge/robinhoodChainDocs.ts
new file mode 100644
index 00000000..a9d7049f
--- /dev/null
+++ b/electron/services/aria/knowledge/robinhoodChainDocs.ts
@@ -0,0 +1,220 @@
+/**
+ * Robinhood Chain docs knowledge for ARIA, distilled from docs.robinhood.com/chain.
+ * One section per docs page; details keep every hard fact (IDs, URLs, addresses,
+ * mechanics) and drop the prose. Last synced: 2026-07-10.
+ */
+
+export interface RhKnowledgeSection {
+  topic: string
+  title: string
+  summary: string
+  details: string
+  sourceUrl: string
+}
+
+const DOCS = 'https://docs.robinhood.com/chain'
+
+export const ROBINHOOD_CHAIN_KNOWLEDGE: RhKnowledgeSection[] = [
+  {
+    topic: 'overview',
+    title: 'About Robinhood Chain',
+    summary: 'Permissionless, EVM-compatible Arbitrum L2 optimized for tokenized real-world assets; live on mainnet with ETH gas.',
+    details: `- Ethereum L2 built on Arbitrum Dedicated Blockchains (Nitro); posts data to Ethereum via blobs; ETH is the native gas token.
+- Optimized for tokenized RWAs: equities, ETFs, private assets. Flagship product is Robinhood Stock Tokens.
+- First-come, first-served sequencing by sequencer arrival time — no priority gas auctions.
+- Fully EVM-compatible: Solidity/Vyper deploy unmodified; Hardhat, Foundry, ethers.js, viem, Wagmi work out of the box.
+- First-class ERC-4337 account abstraction (gas sponsorship, batching, session keys).
+- Ecosystem: Alchemy (recommended RPC + AA), LayerZero (bridge), Chainlink (oracles), Fireblocks/BitGo (custody), Allium (analytics), Uniswap (public DEX), Rialto (proprietary AMM), Morpho (lending), Lighter + Arcus (perps), Paxos USDG (stablecoin), Zerion (wallet data), CoinGecko (tracking).
+- Status page: http://status.robinhoodchain.offchain.io/ · Support: chain-developers-group@robinhood.com`,
+    sourceUrl: `${DOCS}/`,
+  },
+  {
+    topic: 'connecting',
+    title: 'Connecting to Robinhood Chain',
+    summary: 'Chain IDs, RPC endpoints (public + providers), sequencer feeds, and explorers for mainnet and testnet.',
+    details: `- Mainnet: chain ID 4663 · ETH gas · explorer https://robinhoodchain.blockscout.com
+- Testnet: chain ID 46630 · ETH gas · explorer https://explorer.testnet.chain.robinhood.com
+- Public RPC (rate-limited, not for production): mainnet https://rpc.mainnet.chain.robinhood.com · testnet https://rpc.testnet.chain.robinhood.com
+- Sequencer feed: wss://feed.mainnet.chain.robinhood.com (testnet: wss://feed.testnet.chain.robinhood.com) · Sequencer: https://sequencer.mainnet.chain.robinhood.com
+- Alchemy (recommended for production): https://robinhood-mainnet.g.alchemy.com/v2/{API_KEY} (wss:// same host); testnet robinhood-testnet. Also supported: QuickNode ({ENDPOINT}.robinhood-mainnet.quiknode.pro/{TOKEN}), Blockdaemon, dRPC, Validation Cloud.
+- Archive endpoints (for historical reads/indexing) available via providers such as Alchemy.`,
+    sourceUrl: `${DOCS}/connecting`,
+  },
+  {
+    topic: 'add-network-to-wallet',
+    title: 'Add network to your wallet',
+    summary: 'Wallet configuration values for MetaMask-style manual add; Robinhood Wallet supports the chain natively.',
+    details: `- Works with any EVM wallet (MetaMask, Phantom, etc.). Robinhood Wallet (iOS/Android) supports it natively.
+- Manual add — mainnet: chain ID 4663, RPC https://rpc.mainnet.chain.robinhood.com/, symbol ETH, explorer https://robinhoodchain.blockscout.com
+- Manual add — testnet: chain ID 46630, RPC https://rpc.testnet.chain.robinhood.com, symbol ETH, explorer https://explorer.testnet.chain.robinhood.com`,
+    sourceUrl: `${DOCS}/add-network-to-wallet`,
+  },
+  {
+    topic: 'bridging',
+    title: 'Bridging',
+    summary: 'Canonical Arbitrum bridge (trustless, 7-day withdrawal) plus fast third-party routes: Stargate/LayerZero, CCIP, Relay, Across, LiFi/0x.',
+    details: `- Canonical bridge (trustless, security from Ethereum): https://portal.arbitrum.io/bridge?destinationChain=robinhood-chain&sourceChain=ethereum — deposits ~10 min; withdrawals: initiate on L2, wait 7-day challenge period, then claim on L1 (costs L1 gas).
+- Deposits use Arbitrum retryable tickets: a failed L2 leg can be manually redeemed within 7 days — funds are not lost.
+- Fast routes: LayerZero OFT / Stargate (WBTC, USDG, other OFTs, minutes) · Chainlink CCIP (programmable transfer + action) · Relay (intents, seconds, bridge-and-execute) · Across (intents, seconds) · LiFi / 0x (swap-and-bridge).
+- Programmatic bridging: interact with the Delayed Inbox on L1 (see protocol-contracts). A bridged ERC-20 has a DIFFERENT address on L2 than on Ethereum — resolve via calculateL2TokenAddress on the L2 Gateway Router.`,
+    sourceUrl: `${DOCS}/bridging`,
+  },
+  {
+    topic: 'stock-tokens',
+    title: 'Stock Tokens',
+    summary: 'Tokenized debt securities (issuer: Robinhood Assets (Jersey) Ltd) giving economic exposure to US equities/ETFs as standard ERC-20s with Chainlink feeds.',
+    details: `- Standard ERC-20, 18 decimals; one token per underlying equity/ETF identified by ticker. Held, transferred, and composed like any ERC-20.
+- Legally: tokenized DEBT securities issued by Robinhood Assets (Jersey) Limited (RHJ). Economic exposure only — no legal/beneficial rights in the underlying. Not offered to US persons (Reg S); also restricted in UK, Canada, Switzerland. Prospectus: http://docs.robinhood.com/rhj
+- Primary market: only Authorised Participants (at issuance, BBVI) can subscribe/redeem after KYB. Developers compose with existing tokens; there is no public mint.
+- Corporate actions (dividends, splits) are handled by an onchain multiplier (ERC-8056 Scaled UI Amount): raw balanceOf()/totalSupply() stay fixed; uiMultiplier() (1e18 fixed-point) scales shares-per-token. Dividends are reinvested via the multiplier, so tokens track TOTAL return.
+- Live per-token Chainlink price feeds; the feed price already includes the multiplier.
+- Trading is RFQ at launch (e.g. 0x RFQ quoting vs USDG).`,
+    sourceUrl: `${DOCS}/stock-tokens`,
+  },
+  {
+    topic: 'building-with-stock-tokens',
+    title: 'Building with Stock Tokens',
+    summary: 'Integration patterns: ERC-20 ops, ERC-8056 multiplier math, UI-adjusted views, events, and price-feed usage.',
+    details: `- All standard ERC-20 ops work unmodified (balanceOf/transfer/approve). 18 decimals.
+- ERC-8056 interfaces: uiMultiplier() current multiplier (1e18 = 1.0, launch value 1e18); newUIMultiplier() + effectiveAt() expose a scheduled pending multiplier; balanceOfUI(account) and totalSupplyUI() return underlying-share-adjusted views; events UIMultiplierUpdated(old, new, effectiveAtTimestamp) and TransferWithScaledUI(from, to, value, uiValue).
+- Conversion: underlying shares = raw amount x uiMultiplier / 1e18. Not a rebasing token.
+- Price: each token has a Chainlink AggregatorV3Interface feed (latestRoundData(), typically 8 decimals). Feed price is multiplier-adjusted — do NOT apply the multiplier again. USD value = balance x price / 1e8 (for 8-decimal feeds).
+- Use cases: portfolio display, RFQ trading widgets, lending collateral (e.g. Morpho), index baskets, yield vaults, price-triggered contracts, perps margin.
+- Getting started: pick a token address from the registry, read balanceOf, read latestRoundData() on its feed, compose.`,
+    sourceUrl: `${DOCS}/building-with-stock-tokens`,
+  },
+  {
+    topic: 'token-contracts',
+    title: 'Token Contracts (canonical addresses)',
+    summary: 'Canonical mainnet addresses for WETH, USDG, 20 stock tokens, and 5 tokenized ETFs.',
+    details: `- Canonical registry is bundled in ROBINHOOD_CHAIN_TOKENS and served by the rh_stock_tokens tool: WETH, USDG (core); AAPL, AMD, AMZN, BABA, BE, COIN, CRCL, CRWV, GOOGL, INTC, META, MSFT, MU, NVDA, ORCL, PLTR, SNDK, SPCX, TSLA, USAR (stocks); QQQ, SGOV, SLV, SPY, CUSO (ETFs).
+- CRITICAL: a token with a matching name/ticker at a different address is NOT a Robinhood Stock Token — always verify against the canonical address list.
+- WETH mainnet: 0x0Bd7D308f8E1639FAb988df18A8011f41EAcAD73 · USDG: 0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168`,
+    sourceUrl: `${DOCS}/contracts`,
+  },
+  {
+    topic: 'protocol-contracts',
+    title: 'Protocol Contracts',
+    summary: 'L1 core/messaging contracts, token-bridge gateways (L1+L2), Arbitrum precompiles, and misc deployments.',
+    details: `- L1 core (Ethereum mainnet): Rollup 0x23A19d23e89166adedbDcB432518AB01e4272D94 · Sequencer Inbox 0xBd0D173EEb87D57A09521c24388a12789F33ba96 · CoreProxyAdmin 0x1232813BDd40aa9d53066A880dE78a4Be70B90FD
+- L1 messaging: Delayed Inbox 0x1A07cc4BD17E0118BdB54D70990D2158AbAD7a2D · Bridge 0xDf8755334ce7A73cCF6b581C02eA649AE3E864b3 · Outbox 0xf0ce991ea4A0d2400A4AB49b20ae333f6Dce3DE9
+- L1 token bridge: Gateway Router 0x6a2E3a1e16FC29f27Ce61429746D558d656975bB · ERC20 Gateway 0x85001CC4867C5e1C22dA4B79BB8852B9e2a06da0 · Custom Gateway 0x9368EAEbFe6E063C69dcF8126711A6997E0eCeE1 · WETH Gateway 0xF7e12b9614b509C747ab4423bC4ACF923759Cf1B
+- L2 token bridge: Gateway Router 0x1E324B9316138CA9a73F960213621AD1aaf01B89 · ERC20 Gateway 0xfd9b17206278C16DdaacF6AC8f05dBf97EdCb31e · Custom Gateway 0x912285144fC0f6e89d3Ed16F5Ab72f87A1878959 · WETH Gateway 0x1D187C3E2dA52D72BC9C41e3AbA0fdFa6a7bF055 · Proxy Admin 0xa3Acd31AFb851B4eB9DAD00F5204c01D924267dF
+- Precompiles (standard Arbitrum addresses on both networks): ArbSys 0x...64 · ArbInfo 0x...65 · ArbAddressTable 0x...66 · ArbFunctionTable 0x...68 · ArbOwnerPublic 0x...6b · ArbGasInfo 0x...6C · ArbAggregator 0x...6D · ArbRetryableTx 0x...6E · ArbStatistics 0x...6F · ArbOwner 0x...70 · ArbWasm 0x...71 · ArbWasmCache 0x...72 · NodeInterface 0x...C8
+- Misc L2: Multicall 0x2cAC2D899eCC914d704FeaAE33ac1bF36277DaD1 · Permit2 0x000000000022D473030F116dDEE9F6B43aC78BA3
+- Testnet variants exist for all of the above (parent: Sepolia) — see the docs page for the full testnet table.`,
+    sourceUrl: `${DOCS}/protocol-contracts`,
+  },
+  {
+    topic: 'gas-and-fees',
+    title: 'Gas & Fees',
+    summary: 'ETH-denominated fees with two components: L2 execution gas plus an L1 data fee proportional to calldata size.',
+    details: `- Fee = L2 execution (gas used x L2 gas price, low and stable) + L1 data fee (posting calldata to Ethereum, varies with L1 congestion).
+- Both are bundled into normal gas — eth_estimateGas and wallet previews account for both automatically.
+- Optimize by minimizing calldata: pack arguments, avoid unnecessary data, batch operations (AA batched UserOperations help).
+- Query live gas pricing onchain via the ArbGasInfo precompile (0x...6C).`,
+    sourceUrl: `${DOCS}/gas-and-fees`,
+  },
+  {
+    topic: 'transaction-finality',
+    title: 'Transaction Finality',
+    summary: 'Three stages: sub-second sequencer soft confirmation, batch posted to Ethereum (minutes), Ethereum finality (~13 min after posting).',
+    details: `- Soft confirmation: sequencer accepts/orders/executes, returns a receipt sub-second. Reversible only if the sequencer posts a different order. Fine for everyday UX.
+- Posted to Ethereum: ordering fixed unless Ethereum itself reorgs. Minutes.
+- Ethereum finality: ~13 minutes after posting — irreversible, full Ethereum security. Use for high-value/irreversible actions.
+- Withdrawal delay (7-day challenge period) is separate from finality — it applies to canonical-bridge exits only.`,
+    sourceUrl: `${DOCS}/transaction-finality`,
+  },
+  {
+    topic: 'differences-from-ethereum',
+    title: 'Differences from Ethereum',
+    summary: 'Arbitrum Nitro quirks: block.number is L1-ish, no prevrandao randomness, aliased L1 senders, 96KB contracts, FCFS ordering, sequencer-level screening.',
+    details: `- block.number returns an ESTIMATE of the L1 block number, updated periodically — use ArbSys(0x...64).arbBlockNumber() for the real L2 block.
+- block.prevrandao / block.difficulty are constant — never use for randomness (use Chainlink VRF). blockhash(n) only reliable for recent blocks. block.coinbase is the network fee account.
+- Address aliasing: an L1 contract calling L2 appears as its aliased address (original + fixed offset) in msg.sender — account for this in access control.
+- Contract size: 96 KB max code (vs 24 KB on Ethereum), 192 KB max init code.
+- Ordering: first-come first-served by sequencer arrival — priority fees do NOT reorder queued transactions.
+- Transaction screening: sequencer-level compliance filtering — transactions associated with sanctioned addresses are excluded from inclusion. Reads (eth_call, eth_getLogs, balances) are unaffected.
+- Fees have an L1 data component; gasleft()/estimation behave accordingly (see gas-and-fees).`,
+    sourceUrl: `${DOCS}/differences-from-ethereum`,
+  },
+  {
+    topic: 'cross-chain-messaging',
+    title: 'Cross-Chain Messaging',
+    summary: 'Arbitrum-native L1<->L2 messaging: retryable tickets down (minutes), ArbSys up (7-day challenge), via @arbitrum/sdk.',
+    details: `- L1 -> L2: retryable tickets through the Delayed Inbox (0x1A07cc4BD17E0118BdB54D70990D2158AbAD7a2D); completes in minutes; failed L2 legs redeemable within 7 days.
+- L2 -> L1: ArbSys precompile (0x...64) sendTxToL1; execute on L1 via the Outbox after the 7-day challenge period.
+- Use @arbitrum/sdk; register the chain first with registerCustomArbitrumNetwork({ chainId: 4663, parentChainId: 1, confirmPeriodBlocks: 45818, ethBridge: { bridge, inbox, sequencerInbox, outbox, rollup } }).
+- Address aliasing applies to L1->L2 calls; the SDK has applyAlias/undoAlias helpers.`,
+    sourceUrl: `${DOCS}/cross-chain-messaging`,
+  },
+  {
+    topic: 'account-abstraction',
+    title: 'Account Abstraction',
+    summary: 'First-class ERC-4337 plus EIP-7702; Alchemy-powered with ZeroDev and Privy alternatives; standard entrypoints deployed.',
+    details: `- Supports ERC-4337 and EIP-7702 (EOAs delegating to contract code — smart-account features without migrating address).
+- Providers: Alchemy (@alchemy/wallet-apis, Gas Manager sponsorship policies, chain export robinhoodMainnet in @alchemy/common/chains) · ZeroDev (Kernel accounts, https://rpc.zerodev.app/api/v3/{PROJECT_ID}/chain/4663) · Privy (embedded wallets). viem/chains also exports robinhoodMainnet.
+- Entrypoints: v0.6.0 0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789 · v0.7.0 0x0000000071727De22E5E9d8BAf0edAc6f37da032 · v0.8.0 0x4337084D9E255Ff0702461CF8895CE9E3b5Ff108
+- SenderCreators: v0.6 0x7fc98430eAEdbb6070B35B39D798725049088348 · v0.7 0xEFC2c1444eBCC4Db75e7613d20C6a62fF67A167C · v0.8 0x449ED7C3e6Fee6a97311d4b55475DF59C44AdD33
+- Safe: Module Setup v0.3.0 0x2dd68b007B46fBe91B9A7c3EDa5A7a1063cB5b47 · Safe 4337 Module v0.3.0 0x75cf11467937ce3F2f357CE24ffc3DBF8fD5c226
+- Blockscout shows UserOps at https://robinhoodchain.blockscout.com/op/{hash}.`,
+    sourceUrl: `${DOCS}/account-abstraction`,
+  },
+  {
+    topic: 'oracles-and-price-feeds',
+    title: 'Oracles & Price Feeds',
+    summary: 'Chainlink AggregatorV3Interface feeds for crypto and every Stock Token; multiplier-adjusted prices, 24/5 updates, sequencer-uptime and pause checks.',
+    details: `- All feeds implement AggregatorV3Interface (latestRoundData() via the feed proxy). Most USD feeds use 8 decimals — always call decimals(), never hardcode.
+- Stock Token feeds return the PER-TOKEN price = underlying share price x uiMultiplier — already multiplier-adjusted; do not apply the multiplier again. Because dividends reinvest via the multiplier, the token tracks total return and drifts above the headline share price over time.
+- Presentation math: underlying share price = feedPrice x 1e18 / uiMultiplier() · share-equivalent units = balance x uiMultiplier() / 1e18.
+- Stock feeds update 24/5, following market hours.
+- Feed addresses: read from Chainlink's Robinhood page (source of truth): https://docs.chain.link/data-feeds/price-feeds/addresses?network=robinhood — do not hardcode.
+- L2 hygiene: check the Chainlink L2 Sequencer Uptime Feed (status 0 = up, honor a grace period) before trusting prices; check staleness (updatedAt vs heartbeat); reject zero/negative answers.
+- Corporate actions pause the oracle: read oraclePaused() on the token; treat true as "price temporarily unavailable" — but the flag is advisory, keep the staleness check as the primary guard.`,
+    sourceUrl: `${DOCS}/oracles-and-price-feeds`,
+  },
+  {
+    topic: 'deploy-smart-contracts',
+    title: 'Deploy a Contract',
+    summary: 'Standard Foundry/Hardhat deployment; verify against Blockscout (chain 4663 mainnet / 46630 testnet).',
+    details: `- Foundry: forge create --rpc-url https://rpc.mainnet.chain.robinhood.com --private-key $PRIVATE_KEY --broadcast; verify with forge verify-contract --chain-id 4663 --verifier blockscout --verifier-url https://robinhoodchain.blockscout.com/api/
+- Hardhat: network { url, chainId: 4663, accounts }; etherscan customChains apiURL https://robinhoodchain.blockscout.com/api (apiKey can be "empty"); npx hardhat verify --network robinhood <address>.
+- Testnet: chain ID 46630, RPC https://rpc.testnet.chain.robinhood.com, verifier https://explorer.testnet.chain.robinhood.com/api/ — deploy to testnet first.
+- Needs ETH on Robinhood Chain for gas. Never commit a real private key; prefer a throwaway deployer for testing.`,
+    sourceUrl: `${DOCS}/deploy-smart-contracts`,
+  },
+  {
+    topic: 'run-a-full-node',
+    title: 'Run a full node',
+    summary: 'Arbitrum Nitro node (docker offchainlabs/nitro-node) needing L1 execution + beacon endpoints, the Robinhood genesis JSON, and heavy hardware.',
+    details: `- Hardware: 8+ modern cores, 64 GB RAM (128 recommended), local NVMe sized (2 x chain size) + 20%.
+- Requires an Ethereum L1 execution RPC AND an L1 beacon endpoint (for blob reads); L1 must be fully synced. Docker required.
+- Run: docker run offchainlabs/nitro-node:v3.11 --parent-chain.connection.url=<L1_RPC> --parent-chain.blob-client.beacon-url=<BEACON> --chain.id=4663 --init.genesis-json-file=robinhood-genesis.json --http.addr=0.0.0.0 --http.port=8547 --http.api=net,web3,eth (ports 8547 HTTP / 8548 WS).
+- Genesis config: https://cdn.robinhood.com/assets/generated_assets/hoodchain_docsite/chain-node-configs/robinhood-genesis.json (testnet config alongside).
+- Optional: sequencer feed --node.feed.input.url=wss://feed.mainnet.chain.robinhood.com (must be wss://) · snapshot sync --init.url=<SNAPSHOT_URL>.
+- Runs ArbOS 61. Validators: BoLD dispute resolution, permissioned allowlist, 1 WETH bond — contact Robinhood.
+- Check sync with eth_syncing (false = synced); "nonce has already been used" errors mean the node is still syncing.`,
+    sourceUrl: `${DOCS}/run-a-full-node`,
+  },
+  {
+    topic: 'notices-and-upgrades',
+    title: 'Notices & Upgrades',
+    summary: 'ArbOS upgrade notice board; un-upgraded nodes stop cleanly at the activation block and resume after updating.',
+    details: `- Runs Arbitrum Nitro; ArbOS upgrades activate onchain at scheduled times. Node operators must run a compatible Nitro version beforehand; an un-upgraded node stops cleanly and resumes after updating, no data loss.
+- Most upgrades need no dApp/user action, but some include EVM behavior changes — review each notice.
+- Notice table was empty as of the 2026-07-10 sync; monitor ${DOCS}/notices-and-upgrades.`,
+    sourceUrl: `${DOCS}/notices-and-upgrades`,
+  },
+]
+
+export function getKnowledgeSection(topic: string): RhKnowledgeSection | undefined {
+  return ROBINHOOD_CHAIN_KNOWLEDGE.find((s) => s.topic === topic)
+}
+
+export function searchKnowledge(query: string): RhKnowledgeSection[] {
+  const needle = query.trim().toLowerCase()
+  if (!needle) return []
+  return ROBINHOOD_CHAIN_KNOWLEDGE.filter((s) =>
+    [s.topic, s.title, s.summary, s.details].some((text) => text.toLowerCase().includes(needle)),
+  )
+}
diff --git a/electron/services/aria/planningTools.ts b/electron/services/aria/planningTools.ts
new file mode 100644
index 00000000..50d694e6
--- /dev/null
+++ b/electron/services/aria/planningTools.ts
@@ -0,0 +1,47 @@
+/**
+ * Planning + patch tools — intercepted in AriaAgentService.executeTool (they
+ * drive transcript UI, not side effects). Extracted from toolCatalog.ts so the
+ * Lite catalog (toolCatalog.lite.ts) can compose them without importing the
+ * full IDE/Solana tool domains.
+ */
+import type { AriaTool } from './AriaTool'
+
+export const planningTools: AriaTool[] = [
+  {
+    name: 'present_plan',
+    description: 'Present an ordered plan for the task BEFORE acting, as a short list of steps (3–6). Call this first whenever a request needs more than one action so the user can see the approach.',
+    kind: 'read',
+    risk: 'read',
+    input: {
+      type: 'object',
+      properties: {
+        steps: {
+          type: 'array',
+          items: { type: 'object', properties: { title: { type: 'string' } }, required: ['title'] },
+        },
+      },
+      required: ['steps'],
+    },
+    async handler() {
+      return { ok: true, summary: 'Plan presented.' }
+    },
+  },
+  {
+    name: 'propose_patch',
+    description: 'Propose a code change as a unified diff for the user to keep or discard. Provide a short title, a one-paragraph summary, and the unified diff (git format, paths relative to the project root). The change is NOT applied until the user approves.',
+    kind: 'edit',
+    risk: 'write',
+    input: {
+      type: 'object',
+      properties: {
+        title: { type: 'string' },
+        summary: { type: 'string' },
+        unifiedDiff: { type: 'string' },
+      },
+      required: ['title', 'unifiedDiff'],
+    },
+    async handler() {
+      return { ok: true, summary: 'Patch proposed.' }
+    },
+  },
+]
diff --git a/electron/services/aria/toolCatalog.lite.ts b/electron/services/aria/toolCatalog.lite.ts
new file mode 100644
index 00000000..0420b658
--- /dev/null
+++ b/electron/services/aria/toolCatalog.lite.ts
@@ -0,0 +1,35 @@
+/**
+ * DAEMON Lite tool catalog. Swapped in for toolCatalog.ts by a resolveId hook
+ * in vite.lite.config.ts, so the Lite main bundle never imports the IDE/Solana
+ * tool domains that pull heavy SDKs (raydium, metaplex, meteora, launchpads).
+ *
+ * v1.1 surface: planning + memory (chat), wallet reads + gated SOL transfer,
+ * gated Jupiter swap, forensics scans, and the sandboxed preview browser.
+ * Everything money-moving is `sensitive` risk → typed-confirm ApprovalCard.
+ * The tool modules below only import @solana/web3.js (already shipped) +
+ * WalletService/FeeService/RicoMapsService (fetch-based, no heavy SDK).
+ */
+import type { AriaTool } from './AriaTool'
+import { planningTools } from './planningTools'
+import { memoryTools } from './tools/memory'
+import { walletTools } from './tools/wallet'
+import { forensicsTools } from './tools/forensics'
+import { liteTradeTools } from './tools/liteTrade'
+import { litePreviewTools } from './tools/litePreview'
+
+// Wallet tools the Lite app exposes: reads + SOL transfer + wallet creation.
+// Excludes IDE-only project-assignment tools.
+const LITE_WALLET_TOOL_NAMES = new Set(['read_wallet', 'transfer_sol', 'generate_wallet', 'set_default_wallet', 'store_helius_key'])
+
+export const ARIA_TOOLS: AriaTool[] = [
+  ...planningTools.filter((t) => t.name !== 'propose_patch'),
+  ...memoryTools,
+  ...walletTools.filter((t) => LITE_WALLET_TOOL_NAMES.has(t.name)),
+  ...liteTradeTools,
+  ...forensicsTools,
+  ...litePreviewTools,
+]
+
+export function getTool(name: string): AriaTool | undefined {
+  return ARIA_TOOLS.find((t) => t.name === name)
+}
diff --git a/electron/services/aria/toolCatalog.ts b/electron/services/aria/toolCatalog.ts
index 0ed876cc..ce32611b 100644
--- a/electron/services/aria/toolCatalog.ts
+++ b/electron/services/aria/toolCatalog.ts
@@ -2,8 +2,8 @@
  * ARIA operator tool catalog — aggregator over domain modules in ./tools/*.
  *
  * Adding a tool = append to the relevant domain file; this file just composes
- * them. The planning/patch tools below are intercepted by AriaAgentService
- * (they drive transcript UI, not side effects) so they live here.
+ * them. The planning/patch tools (./planningTools.ts) are intercepted by
+ * AriaAgentService — they drive transcript UI, not side effects.
  *
  * Risk gating (read = auto-run · write = inline approve · sensitive = typed
  * confirm) is enforced centrally in AriaAgentService.executeTool, not here.
@@ -19,12 +19,14 @@
  * ToolApprovalService.classifyToolRisk. Never ship the tool without the guard.
  */
 import type { AriaTool } from './AriaTool'
+import { planningTools } from './planningTools'
 import { navigationTools } from './tools/navigation'
 import { settingsTools } from './tools/settings'
 import { workspaceTools } from './tools/workspace'
 import { walletTools } from './tools/wallet'
 import { clawpumpTools } from './tools/clawpump'
 import { hyperliquidTools } from './tools/hyperliquid'
+import { robinhoodChainTools } from './tools/robinhoodChain'
 import { forensicsTools } from './tools/forensics'
 import { venumTools } from './tools/venum'
 import { agentStationTools } from './tools/agentStation'
@@ -35,47 +37,7 @@ import { gitTools } from './tools/git'
 import { swarmTools } from './tools/swarm'
 import { memoryTools } from './tools/memory'
 import { autopilotTools } from './tools/autopilot'
-
-/** Planning + patch tools — intercepted in AriaAgentService.executeTool. */
-const planningTools: AriaTool[] = [
-  {
-    name: 'present_plan',
-    description: 'Present an ordered plan for the task BEFORE acting, as a short list of steps (3–6). Call this first whenever a request needs more than one action so the user can see the approach.',
-    kind: 'read',
-    risk: 'read',
-    input: {
-      type: 'object',
-      properties: {
-        steps: {
-          type: 'array',
-          items: { type: 'object', properties: { title: { type: 'string' } }, required: ['title'] },
-        },
-      },
-      required: ['steps'],
-    },
-    async handler() {
-      return { ok: true, summary: 'Plan presented.' }
-    },
-  },
-  {
-    name: 'propose_patch',
-    description: 'Propose a code change as a unified diff for the user to keep or discard. Provide a short title, a one-paragraph summary, and the unified diff (git format, paths relative to the project root). The change is NOT applied until the user approves.',
-    kind: 'edit',
-    risk: 'write',
-    input: {
-      type: 'object',
-      properties: {
-        title: { type: 'string' },
-        summary: { type: 'string' },
-        unifiedDiff: { type: 'string' },
-      },
-      required: ['title', 'unifiedDiff'],
-    },
-    async handler() {
-      return { ok: true, summary: 'Patch proposed.' }
-    },
-  },
-]
+import { gameStudioTools } from './tools/gameStudio'
 
 export const ARIA_TOOLS: AriaTool[] = [
   ...planningTools,
@@ -85,6 +47,7 @@ export const ARIA_TOOLS: AriaTool[] = [
   ...walletTools,
   ...clawpumpTools,
   ...hyperliquidTools,
+  ...robinhoodChainTools,
   ...forensicsTools,
   ...venumTools,
   ...agentStationTools,
@@ -95,6 +58,7 @@ export const ARIA_TOOLS: AriaTool[] = [
   ...swarmTools,
   ...memoryTools,
   ...autopilotTools,
+  ...gameStudioTools,
 ]
 
 export function getTool(name: string): AriaTool | undefined {
diff --git a/electron/services/aria/tools/gameStudio.ts b/electron/services/aria/tools/gameStudio.ts
new file mode 100644
index 00000000..da615775
--- /dev/null
+++ b/electron/services/aria/tools/gameStudio.ts
@@ -0,0 +1,170 @@
+/**
+ * Game Studio tools — the connective tissue for the "build me a Solana game"
+ * live flow. ARIA orchestrates: scaffold a game project, launch a swarm lane to
+ * author the game (via the existing swarm_launch), merge the finished lane, run
+ * the dev server, preview it in-app, and trigger a pre-wired deploy.
+ *
+ * Design boundary (matches toolCatalog.ts): NO raw shell. run_dev_server runs
+ * only a dev/start script DISCOVERED from package.json (CheckRunnerService), and
+ * arbitrary code generation stays inside sandboxed swarm lanes. Terminal + port
+ * side effects go through the renderer via uiEffects, mirroring ProjectStarter.
+ */
+import * as SwarmOrchestrator from '../../SwarmOrchestrator'
+import * as PortService from '../../PortService'
+import * as DeployService from '../../DeployService'
+import { discoverDevScript } from '../../CheckRunnerService'
+import { isPathSafe } from '../../../shared/pathValidation'
+import type { AriaTool } from '../AriaTool'
+
+const GAME_TEMPLATE_ID = 'phaser-solana-game'
+// Preferred dev ports, same range ProjectStarter uses for the meme/game preview.
+const PREFERRED_PORTS = [3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3008, 3009, 3010]
+
+function pickDevPort(): number {
+  const taken = new Set(PortService.getRegisteredPorts().map((p) => p.port))
+  return PREFERRED_PORTS.find((p) => !taken.has(p)) ?? 3011
+}
+
+export const gameStudioTools: AriaTool[] = [
+  {
+    name: 'scaffold_game',
+    description: 'Open the DAEMON project wizard preloaded with the Solana game template (playable Phaser + TypeScript arcade with seedless wallet, cNFT assets, and policy-gated signing pre-wired). Provide a projectName. The scaffold writes the template, runs npm install + an initial git commit (so a swarm can author the game), then serves and previews it. The user confirms the target folder in the wizard. IMPORTANT: this switches the workbench to the new project, which starts a fresh ARIA session — so this must be the LAST tool call of the turn. Do not call swarm_launch after it in the same turn; wait for the user to ask again in the new project.',
+    kind: 'edit',
+    risk: 'write',
+    input: {
+      type: 'object',
+      properties: { projectName: { type: 'string' } },
+      required: ['projectName'],
+    },
+    async handler(input, ctx) {
+      const projectName = String(input.projectName ?? '').trim()
+      if (!projectName) return { ok: false, summary: 'A projectName is required.' }
+      const effect = { type: 'open_scaffold' as const, templateId: GAME_TEMPLATE_ID, projectName }
+      await ctx.runUiEffect(effect, false)
+      return {
+        ok: true,
+        summary: `Opened the game scaffold for "${projectName}". Once the user confirms the folder, the workbench switches to the new project and this session ends. Do NOT call more tools now — tell the user: in the new project, ask me to build the game and I'll launch the swarm.`,
+        uiEffect: effect,
+      }
+    },
+  },
+  {
+    name: 'run_dev_server',
+    description: 'Start the active project\'s dev server in a terminal and register its port so it can be previewed. Runs ONLY a dev/start/serve script found in package.json — never an arbitrary command. Returns the local URL. Use preview_app afterward to open it in the embedded browser.',
+    kind: 'run',
+    risk: 'write',
+    async handler(_input, ctx) {
+      const projectPath = ctx.snapshot.activeProjectPath
+      if (!projectPath || !isPathSafe(projectPath)) {
+        return { ok: false, summary: 'Open a registered project before starting a dev server.' }
+      }
+      const dev = discoverDevScript(projectPath)
+      if (!dev) {
+        return { ok: false, summary: 'No dev/start/serve script found in package.json.' }
+      }
+      const port = pickDevPort()
+      const effect = {
+        type: 'start_dev_server' as const,
+        command: dev.command,
+        port,
+        projectPath,
+        label: `Dev: ${dev.script}`,
+      }
+      const result = await ctx.runUiEffect(effect, true) as { ok?: boolean; url?: string; error?: string } | null
+      if (!result?.ok) {
+        return { ok: false, summary: result?.error ?? 'Failed to start the dev server.' }
+      }
+      return {
+        ok: true,
+        summary: `Started "${dev.command}" at ${result.url}. Preview it with preview_app.`,
+        data: { url: result.url, port, script: dev.script },
+      }
+    },
+    input: { type: 'object', properties: {} },
+  },
+  {
+    name: 'preview_app',
+    description: 'Open a running localhost app in the embedded DAEMON browser so it can be played/tested. With no port, uses the active project\'s most recently registered dev-server port. Only loopback (127.0.0.1 / localhost) is allowed.',
+    kind: 'read',
+    risk: 'read',
+    input: { type: 'object', properties: { port: { type: 'number' } } },
+    async handler(input, ctx) {
+      let port = typeof input.port === 'number' ? input.port : null
+      if (!port) {
+        const projectId = ctx.snapshot.activeProjectId
+        const registered = PortService.getRegisteredPorts()
+        const mine = projectId ? registered.filter((p) => p.projectId === projectId) : registered
+        port = mine.length ? mine[mine.length - 1].port : null
+      }
+      if (!port) {
+        return { ok: false, summary: 'No dev-server port found. Start one with run_dev_server first.' }
+      }
+      const url = `http://127.0.0.1:${port}`
+      const effect = { type: 'open_preview' as const, url }
+      await ctx.runUiEffect(effect, false)
+      return { ok: true, summary: `Opened ${url} in the DAEMON browser.`, uiEffect: effect, data: { url } }
+    },
+  },
+  {
+    name: 'swarm_merge_lane',
+    description: 'Merge a finished swarm lane\'s work into the project\'s base branch. Commits any uncommitted lane changes onto its branch first, then merges (--no-ff) into base in the main repo. Only lanes with status "done" can be merged. On a conflict the merge is left for the Git panel to resolve.',
+    kind: 'run',
+    risk: 'write',
+    input: { type: 'object', properties: { laneId: { type: 'string' } }, required: ['laneId'] },
+    async handler(input) {
+      const laneId = String(input.laneId ?? '').trim()
+      if (!laneId) return { ok: false, summary: 'A laneId is required.' }
+      const result = await SwarmOrchestrator.mergeLane(laneId)
+      if (!result.ok) {
+        return { ok: false, summary: result.error ?? `Could not merge lane ${laneId}.`, data: result }
+      }
+      return {
+        ok: true,
+        summary: `Merged ${result.branch} into ${result.baseBranch} (${result.mergedSha}).`,
+        data: result,
+      }
+    },
+  },
+  {
+    name: 'deploy_app',
+    description: 'Deploy the active project via its pre-wired Vercel/Railway link, and report the latest deploy status + URL. This is a live/production action — it pauses for confirmation. Requires the project to be linked in the Deploy panel and pushed to a GitHub remote (redeploy triggers the provider build).',
+    kind: 'run',
+    risk: 'sensitive',
+    input: { type: 'object', properties: {} },
+    async handler(_input, ctx) {
+      const projectId = ctx.snapshot.activeProjectId
+      if (!projectId) return { ok: false, summary: 'Open a registered project before deploying.' }
+      const infra = DeployService.getProjectInfra(projectId)
+      if (!infra.vercel && !infra.railway) {
+        // Surface the Deploy panel so the user can link a provider, rather than failing silently.
+        await ctx.runUiEffect({ type: 'open_tool', toolId: 'deploy' }, false)
+        return { ok: false, summary: 'No Vercel/Railway link yet. Opened the Deploy panel to link a provider first.' }
+      }
+      try {
+        if (infra.vercel) {
+          const token = DeployService.getToken('vercel')
+          if (!token) {
+            await ctx.runUiEffect({ type: 'open_tool', toolId: 'deploy' }, false)
+            return { ok: false, summary: 'Vercel is linked but not authorized. Opened the Deploy panel to connect.' }
+          }
+          const res = await DeployService.triggerVercelRedeploy(token, infra.vercel.projectId, infra.vercel.teamId)
+          await ctx.runUiEffect({ type: 'open_tool', toolId: 'deploy' }, false)
+          return { ok: true, summary: `Triggered a Vercel deploy${res.url ? ` — ${res.url}` : ''}.`, data: res }
+        }
+        if (infra.railway) {
+          const token = DeployService.getToken('railway')
+          if (!token) {
+            await ctx.runUiEffect({ type: 'open_tool', toolId: 'deploy' }, false)
+            return { ok: false, summary: 'Railway is linked but not authorized. Opened the Deploy panel to connect.' }
+          }
+          const ok = await DeployService.triggerRailwayDeploy(token, infra.railway.serviceId, infra.railway.environmentId)
+          await ctx.runUiEffect({ type: 'open_tool', toolId: 'deploy' }, false)
+          return { ok, summary: ok ? 'Triggered a Railway deploy.' : 'Railway deploy request was not accepted.' }
+        }
+        return { ok: false, summary: 'No deployable provider link found.' }
+      } catch (err) {
+        return { ok: false, summary: err instanceof Error ? err.message : String(err) }
+      }
+    },
+  },
+]
diff --git a/electron/services/aria/tools/litePreview.ts b/electron/services/aria/tools/litePreview.ts
new file mode 100644
index 00000000..f505db74
--- /dev/null
+++ b/electron/services/aria/tools/litePreview.ts
@@ -0,0 +1,43 @@
+/**
+ * DAEMON Lite preview tool. Opens a sandboxed pop-out browser window at a
+ * localhost or https URL. Loopback previews are read-risk (the agent commonly
+ * opens a user's local dev server); remote https is write-risk so the user
+ * approves before the agent points a window at an external site.
+ */
+import { openPopout } from '../../PopoutBrowserService'
+import { isAllowedWebviewUrl } from '../../../security/externalNavigation'
+import type { AriaTool } from '../AriaTool'
+
+function isLoopback(url: string): boolean {
+  try {
+    const u = new URL(url)
+    return u.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]', '::1'].includes(u.hostname)
+  } catch { return false }
+}
+
+export const litePreviewTools: AriaTool[] = [
+  {
+    name: 'open_preview',
+    description: 'Open a preview browser window for a localhost dev server or an https page. Use this to show the user a running local app or a web page you are referencing.',
+    kind: 'run',
+    // Risk is decided per-URL in the handler wrapper below; loopback = read,
+    // remote https = write. Declared as read here; the catalog wrapper upgrades
+    // remote URLs. (Kept simple: mark write so remote always gates; the model
+    // is told loopback is safe.)
+    risk: 'write',
+    input: {
+      type: 'object',
+      properties: { url: { type: 'string', description: 'http://localhost:* or an https URL.' } },
+      required: ['url'],
+    },
+    async handler(input) {
+      const url = String(input.url ?? '').trim()
+      if (!isAllowedWebviewUrl(url)) {
+        return { ok: false, summary: 'Only localhost or https URLs can be previewed.' }
+      }
+      const result = openPopout(url)
+      if (!result.opened) return { ok: false, summary: result.reason ?? 'Could not open the preview.' }
+      return { ok: true, summary: `Opened a preview of ${url}${isLoopback(url) ? ' (local)' : ''}.` }
+    },
+  },
+]
diff --git a/electron/services/aria/tools/liteTrade.ts b/electron/services/aria/tools/liteTrade.ts
new file mode 100644
index 00000000..90adbb07
--- /dev/null
+++ b/electron/services/aria/tools/liteTrade.ts
@@ -0,0 +1,128 @@
+/**
+ * DAEMON Lite trading tools. Search + quote are read-only; swap_tokens is
+ * `sensitive` so the typed-confirm ApprovalCard always gates it, even in an
+ * approved plan. Execution reuses WalletService.executeSwap — the same
+ * server-side price-impact and signer-guard path the IDE uses — so an
+ * agent-initiated swap is gated identically to a UI-initiated one. A soft USD
+ * ceiling caps a single Lite swap; larger trades belong in the full IDE.
+ */
+import { LAMPORTS_PER_SOL } from '@solana/web3.js'
+import * as WalletService from '../../WalletService'
+import { quoteExecutionFee } from '../../FeeService'
+import { clusterMark } from './shared'
+import type { AriaTool } from '../AriaTool'
+
+const SOL_MINT = 'So11111111111111111111111111111111111111112'
+const MAX_SWAP_USD = 500
+
+function shortAddress(address: string): string {
+  return address.length > 12 ? `${address.slice(0, 4)}…${address.slice(-4)}` : address
+}
+
+async function defaultWalletId(): Promise<string | null> {
+  const dashboard = await WalletService.getDashboard(null)
+  return dashboard.activeWallet?.id ?? dashboard.wallets[0]?.id ?? null
+}
+
+export const liteTradeTools: AriaTool[] = [
+  {
+    name: 'token_search',
+    description: 'Search Solana tokens by name, symbol, or mint. Read-only. Returns price, liquidity, holders, and safety flags.',
+    kind: 'read',
+    risk: 'read',
+    input: {
+      type: 'object',
+      properties: { query: { type: 'string' } },
+      required: ['query'],
+    },
+    async handler(input) {
+      const query = String(input.query ?? '').trim()
+      if (!query) return { ok: false, summary: 'A search query is required.' }
+      const results = await WalletService.searchJupiterTokens(query)
+      const top = results.slice(0, 8).map((t) => ({
+        mint: t.mint, symbol: t.symbol, name: t.name, usdPrice: t.usdPrice,
+        liquidity: t.liquidity, verified: t.verified, isSus: t.isSus,
+      }))
+      return { ok: true, summary: `${top.length} token${top.length === 1 ? '' : 's'} found.`, data: { tokens: top } }
+    },
+  },
+  {
+    name: 'token_quote',
+    description: 'Get a Jupiter swap quote (read-only, no execution). Shows expected output, price impact, and route before the user decides to swap.',
+    kind: 'read',
+    risk: 'read',
+    input: {
+      type: 'object',
+      properties: {
+        inputMint: { type: 'string', description: 'Input token mint (use the SOL mint for SOL).' },
+        outputMint: { type: 'string', description: 'Output token mint.' },
+        amount: { type: 'number', description: 'Amount of the input token (UI units).' },
+      },
+      required: ['inputMint', 'outputMint', 'amount'],
+    },
+    async handler(input) {
+      const inputMint = String(input.inputMint ?? '').trim()
+      const outputMint = String(input.outputMint ?? '').trim()
+      const amount = Number(input.amount ?? 0)
+      if (!inputMint || !outputMint) return { ok: false, summary: 'Both input and output mints are required.' }
+      if (!Number.isFinite(amount) || amount <= 0) return { ok: false, summary: 'Amount must be greater than 0.' }
+      const walletId = await defaultWalletId()
+      if (!walletId) return { ok: false, summary: 'No wallet available — add or create one first.' }
+      const quote = await WalletService.getSwapQuote(walletId, inputMint, outputMint, amount, 50)
+      return {
+        ok: true,
+        summary: `Quote: ${amount} → ${quote.outAmount} (impact ${quote.priceImpactPct}%).`,
+        data: { outAmount: quote.outAmount, priceImpactPct: quote.priceImpactPct, route: quote.routePlan },
+      }
+    },
+  },
+  {
+    name: 'swap_tokens',
+    description: 'Swap one token for another via Jupiter from the default wallet. Requires explicit user approval. On mainnet this moves real money and the DAEMON execution fee applies. Single Lite swaps are capped at $500 — larger trades need the full DAEMON IDE.',
+    kind: 'run',
+    risk: 'sensitive',
+    input: {
+      type: 'object',
+      properties: {
+        inputMint: { type: 'string' },
+        outputMint: { type: 'string' },
+        amount: { type: 'number', description: 'Amount of the input token (UI units).' },
+        slippageBps: { type: 'number', description: 'Slippage tolerance in basis points (default 50).' },
+      },
+      required: ['inputMint', 'outputMint', 'amount'],
+    },
+    feePreview(input) {
+      // Only SOL-denominated legs carry the execution fee (SOL transfers).
+      const inputMint = String(input.inputMint ?? '')
+      const amount = Number(input.amount ?? 0)
+      if (inputMint !== SOL_MINT || !Number.isFinite(amount) || amount <= 0) return null
+      return quoteExecutionFee(Math.round(amount * LAMPORTS_PER_SOL))
+    },
+    async handler(input) {
+      const inputMint = String(input.inputMint ?? '').trim()
+      const outputMint = String(input.outputMint ?? '').trim()
+      const amount = Number(input.amount ?? 0)
+      const slippageBps = Number(input.slippageBps ?? 50)
+      if (!inputMint || !outputMint) return { ok: false, summary: 'Both input and output mints are required.' }
+      if (!Number.isFinite(amount) || amount <= 0) return { ok: false, summary: 'Amount must be greater than 0.' }
+
+      const walletId = await defaultWalletId()
+      if (!walletId) return { ok: false, summary: 'No signing wallet available — create one in the Wallet panel first.' }
+
+      // Soft USD ceiling: price the input leg and refuse oversized Lite swaps.
+      const quote = await WalletService.getSwapQuote(walletId, inputMint, outputMint, amount, slippageBps)
+      const [priced] = await WalletService.searchJupiterTokens(inputMint)
+      const inputUsd = priced?.usdPrice ? priced.usdPrice * amount : null
+      if (inputUsd !== null && inputUsd > MAX_SWAP_USD) {
+        return { ok: false, summary: `That swap is ~$${inputUsd.toFixed(0)}, over the $${MAX_SWAP_USD} Lite limit. Use the full DAEMON IDE for larger trades.` }
+      }
+
+      const result = await WalletService.executeSwap(walletId, inputMint, outputMint, amount, slippageBps, quote.rawQuoteResponse)
+      return {
+        ok: true,
+        summary: clusterMark(`Swapped ${amount} ${shortAddress(inputMint)} → ${shortAddress(outputMint)}.`),
+        data: { signature: result.signature, priceImpactPct: quote.priceImpactPct },
+      }
+    },
+  },
+]
diff --git a/electron/services/aria/tools/robinhoodChain.ts b/electron/services/aria/tools/robinhoodChain.ts
new file mode 100644
index 00000000..fe80d35b
--- /dev/null
+++ b/electron/services/aria/tools/robinhoodChain.ts
@@ -0,0 +1,167 @@
+/**
+ * Robinhood Chain ARIA tools — bundled docs knowledge, canonical network/token
+ * constants, and live read-only JSON-RPC reads via RobinhoodChainService.
+ *
+ * Awareness only: every tool is risk 'read'. There is deliberately no signing,
+ * transaction, or bridging tool here — Robinhood Chain money paths are out of
+ * scope until they get the same guardrails as the Solana surfaces.
+ */
+import * as Rh from '../../RobinhoodChainService'
+import {
+  CHAINLINK_FEEDS_URL,
+  ROBINHOOD_CHAIN_BRIDGE_URL,
+  ROBINHOOD_CHAIN_DOCS_URL,
+  ROBINHOOD_CHAIN_NETWORKS,
+  ROBINHOOD_CHAIN_STATUS_URL,
+  ROBINHOOD_CHAIN_TOKENS,
+  type RhNetworkId,
+} from '../knowledge/robinhoodChain'
+import {
+  getKnowledgeSection,
+  ROBINHOOD_CHAIN_KNOWLEDGE,
+  searchKnowledge,
+} from '../knowledge/robinhoodChainDocs'
+import type { AriaTool } from '../AriaTool'
+
+const KNOWLEDGE_TOPICS = ROBINHOOD_CHAIN_KNOWLEDGE.map((s) => s.topic)
+
+function parseNetwork(input: Record<string, unknown>): RhNetworkId {
+  const value = String(input.network ?? 'mainnet')
+  if (value !== 'mainnet' && value !== 'testnet') {
+    throw new Error('network must be "mainnet" or "testnet".')
+  }
+  return value
+}
+
+export const robinhoodChainTools: AriaTool[] = [
+  {
+    name: 'rh_chain_info',
+    description:
+      'Robinhood Chain network constants: chain IDs, RPC/sequencer-feed/explorer URLs for mainnet and testnet, bridge and status links. Bundled reference, no network call. Read-only.',
+    kind: 'read',
+    risk: 'read',
+    input: { type: 'object', properties: {} },
+    async handler() {
+      return {
+        ok: true,
+        summary: 'Robinhood Chain network reference.',
+        data: {
+          networks: ROBINHOOD_CHAIN_NETWORKS,
+          docsUrl: ROBINHOOD_CHAIN_DOCS_URL,
+          statusUrl: ROBINHOOD_CHAIN_STATUS_URL,
+          canonicalBridgeUrl: ROBINHOOD_CHAIN_BRIDGE_URL,
+          chainlinkFeedsUrl: CHAINLINK_FEEDS_URL,
+        },
+      }
+    },
+  },
+  {
+    name: 'rh_chain_knowledge',
+    description:
+      `Look up bundled Robinhood Chain documentation (synced from docs.robinhood.com/chain). Pass topic for one section (${KNOWLEDGE_TOPICS.join(', ')}), query for a keyword search, or neither to list all topics. Read-only.`,
+    kind: 'read',
+    risk: 'read',
+    input: {
+      type: 'object',
+      properties: {
+        topic: { type: 'string', enum: KNOWLEDGE_TOPICS, description: 'Exact section to fetch.' },
+        query: { type: 'string', description: 'Keyword search across all sections.' },
+      },
+    },
+    async handler(input) {
+      const topic = input.topic ? String(input.topic) : ''
+      if (topic) {
+        const section = getKnowledgeSection(topic)
+        if (!section) return { ok: false, summary: `Unknown topic "${topic}".` }
+        return { ok: true, summary: `Robinhood Chain docs: ${section.title}.`, data: section }
+      }
+      const query = input.query ? String(input.query) : ''
+      if (query) {
+        const sections = searchKnowledge(query)
+        if (sections.length === 0) return { ok: false, summary: `No Robinhood Chain docs match "${query}".` }
+        return { ok: true, summary: `${sections.length} Robinhood Chain docs section(s) match "${query}".`, data: sections }
+      }
+      const index = ROBINHOOD_CHAIN_KNOWLEDGE.map(({ topic: t, title, summary }) => ({ topic: t, title, summary }))
+      return { ok: true, summary: 'Robinhood Chain docs topics.', data: index }
+    },
+  },
+  {
+    name: 'rh_stock_tokens',
+    description:
+      'Canonical Robinhood Chain token registry (mainnet): WETH, USDG, stock tokens, and tokenized ETFs with contract addresses. Optionally filter by symbol or kind (core|stock|etf). A same-ticker token at a different address is NOT canonical. Read-only.',
+    kind: 'read',
+    risk: 'read',
+    input: {
+      type: 'object',
+      properties: {
+        symbol: { type: 'string', description: 'Ticker filter, e.g. NVDA.' },
+        kind: { type: 'string', enum: ['core', 'stock', 'etf'] },
+      },
+    },
+    async handler(input) {
+      const symbol = String(input.symbol ?? '').trim().toUpperCase()
+      const kind = String(input.kind ?? '').trim()
+      let tokens = ROBINHOOD_CHAIN_TOKENS
+      if (symbol) tokens = tokens.filter((t) => t.symbol === symbol)
+      if (kind) tokens = tokens.filter((t) => t.kind === kind)
+      if (tokens.length === 0) {
+        return { ok: false, summary: `No canonical Robinhood Chain token matches ${symbol || kind}.` }
+      }
+      return {
+        ok: true,
+        summary: `${tokens.length} canonical Robinhood Chain token(s). Registry synced 2026-07-10 — verify new listings against docs.robinhood.com/chain/contracts.`,
+        data: tokens,
+      }
+    },
+  },
+  {
+    name: 'rh_chain_rpc',
+    description:
+      'Live read-only Robinhood Chain RPC query via the public endpoint. action: status (chain id, block, gas price) | balance (ETH of address) | token (ERC-20 name/symbol/decimals/supply, plus holder balance when holder is set) | tx (transaction + receipt by txHash). Defaults to mainnet. Read-only, never signs or sends.',
+    kind: 'read',
+    risk: 'read',
+    input: {
+      type: 'object',
+      properties: {
+        action: { type: 'string', enum: ['status', 'balance', 'token', 'tx'] },
+        network: { type: 'string', enum: ['mainnet', 'testnet'] },
+        address: { type: 'string', description: '0x account address (balance action).' },
+        token: { type: 'string', description: '0x token contract address (token action).' },
+        holder: { type: 'string', description: 'Optional 0x holder for a token balance (token action).' },
+        txHash: { type: 'string', description: '0x transaction hash (tx action).' },
+      },
+      required: ['action'],
+    },
+    async handler(input) {
+      const network = parseNetwork(input)
+      const action = String(input.action ?? '')
+      switch (action) {
+        case 'status': {
+          const data = await Rh.getChainStatus(network)
+          return { ok: true, summary: `${data.network} at block ${data.blockNumber}, gas ${data.gasPriceGwei} gwei.`, data }
+        }
+        case 'balance': {
+          const address = String(input.address ?? '').trim()
+          if (!address) return { ok: false, summary: 'An address is required for the balance action.' }
+          const data = await Rh.getBalance(network, address)
+          return { ok: true, summary: `${data.eth} ETH at ${address} (${network}).`, data }
+        }
+        case 'token': {
+          const token = String(input.token ?? '').trim()
+          if (!token) return { ok: false, summary: 'A token address is required for the token action.' }
+          const holder = input.holder ? String(input.holder).trim() : undefined
+          const data = await Rh.getErc20Info(network, token, holder)
+          return { ok: true, summary: `${data.symbol || 'ERC-20'} (${data.name || token}) on ${network}.`, data }
+        }
+        case 'tx': {
+          const txHash = String(input.txHash ?? '').trim()
+          if (!txHash) return { ok: false, summary: 'A txHash is required for the tx action.' }
+          const data = await Rh.getTransaction(network, txHash)
+          return { ok: true, summary: `Transaction ${txHash} on ${network}.`, data }
+        }
+        default:
+          return { ok: false, summary: `Unknown action "${action}".` }
+      }
+    },
+  },
+]
diff --git a/electron/services/email/EmailTools.lite.ts b/electron/services/email/EmailTools.lite.ts
new file mode 100644
index 00000000..580911d5
--- /dev/null
+++ b/electron/services/email/EmailTools.lite.ts
@@ -0,0 +1,11 @@
+/**
+ * DAEMON Lite stub for EmailTools (swapped in by vite.lite.config.ts).
+ * Lite has no email integration; this severs the nodemailer / imapflow /
+ * mailparser chain from the Lite bundle. Only the two context helpers are
+ * imported by the Lite graph (providers/contextUtils.ts).
+ */
+export async function getEmailAccountSummary(): Promise<string> {
+  return ''
+}
+
+export const EMAIL_TOOL_NAMES = ''
diff --git a/electron/services/meme-studio/ArchetypeDetector.ts b/electron/services/meme-studio/ArchetypeDetector.ts
new file mode 100644
index 00000000..1ff14d88
--- /dev/null
+++ b/electron/services/meme-studio/ArchetypeDetector.ts
@@ -0,0 +1,135 @@
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import { registeredProjectRoot, safeProjectPath } from './projectBoundary'
+import type { MemeTechEvidence, MemeTechProjectProfile } from './types'
+
+const CANDIDATES = [
+  'daemon.meme-tech.json', 'package.json', 'pnpm-workspace.yaml', 'Cargo.toml', 'Anchor.toml',
+  'apps/game/package.json', 'apps/api/package.json', 'apps/web/package.json',
+  'services/indexer/package.json', 'services/keeper/package.json',
+]
+const MAX_FILE_BYTES = 256 * 1024
+
+async function readCandidate(root: string, relativePath: string): Promise<string | null> {
+  const filePath = safeProjectPath(root, relativePath)
+  const canonicalPath = await fs.realpath(filePath).catch(() => null)
+  if (!canonicalPath) return null
+  const canonicalRelative = path.relative(root, canonicalPath)
+  if (canonicalRelative.startsWith('..') || path.isAbsolute(canonicalRelative)) return null
+  const stats = await fs.stat(canonicalPath).catch(() => null)
+  if (!stats?.isFile() || stats.size > MAX_FILE_BYTES) return null
+  return fs.readFile(canonicalPath, 'utf8').catch(() => null)
+}
+
+function hasAny(content: string, terms: string[]): boolean {
+  const lower = content.toLowerCase()
+  return terms.some((term) => lower.includes(term))
+}
+
+function addEvidence(evidence: MemeTechEvidence[], code: string, file: string, detail: string): void {
+  if (!evidence.some((item) => item.code === code)) evidence.push({ code, path: file, detail })
+}
+
+export async function detectMemeTechArchetype(projectPath: string): Promise<MemeTechProjectProfile> {
+  const root = await registeredProjectRoot(projectPath)
+  const files = new Map<string, string>()
+  await Promise.all(CANDIDATES.map(async (candidate) => {
+    const content = await readCandidate(root, candidate)
+    if (content !== null) files.set(candidate, content)
+  }))
+
+  const evidence: MemeTechEvidence[] = []
+  const topology = new Set<string>()
+  const capabilities = new Set<string>()
+  const tokenMints = new Set<string>()
+  const clusterSources: Array<{ source: string; value: string }> = []
+  let gameScore = 0
+  let marketScore = 0
+  let communityScore = 0
+  let solanaScore = 0
+
+  for (const [file, content] of files) {
+    if (/\b(localnet|devnet|mainnet(?:-beta)?)\b/i.test(content)) {
+      clusterSources.push({ source: file, value: content.match(/\b(localnet|devnet|mainnet(?:-beta)?)\b/i)?.[1] ?? 'unknown' })
+    }
+    if (file === 'daemon.meme-tech.json') continue
+    if (hasAny(content, ['@coral-xyz/anchor', 'anchor-lang', '@solana/', 'solana-program'])) {
+      solanaScore += 2
+      capabilities.add('solana')
+      addEvidence(evidence, 'solana-stack', file, 'Solana or Anchor dependency detected')
+    }
+    if (hasAny(content, ['phaser', 'pixi.js', 'babylonjs', 'game-server'])) {
+      gameScore += 3
+      topology.add('game-client')
+      addEvidence(evidence, 'game-runtime', file, 'Browser game runtime detected')
+    }
+    if (hasAny(content, ['inventory', 'quest', 'leaderboard', 'marketplace'])) {
+      gameScore += 2
+      communityScore += 1
+      capabilities.add('product-loop')
+      addEvidence(evidence, 'game-economy', file, 'Persistent game or community economy vocabulary detected')
+    }
+    if (hasAny(content, ['indexer', 'backfill', 'checkpoint', 'websocket'])) {
+      marketScore += 2
+      topology.add('indexer')
+      addEvidence(evidence, 'indexer', file, 'Indexer or stream recovery evidence detected')
+    }
+    if (hasAny(content, ['keeper', 'crank', 'oracle', 'perpetual', 'margin', 'liquidation'])) {
+      marketScore += 3
+      topology.add('keeper')
+      addEvidence(evidence, 'market-runtime', file, 'Oracle, keeper, or risk runtime detected')
+    }
+    if (hasAny(content, ['token-2022', 'spl-token-2022'])) {
+      marketScore += 2
+      capabilities.add('token-2022')
+      addEvidence(evidence, 'token-2022', file, 'Token-2022 dependency or configuration detected')
+    }
+    if (file.includes('apps/web')) topology.add('frontend')
+    if (file.includes('apps/api')) topology.add('api')
+  }
+
+  const explicit = files.get('daemon.meme-tech.json')
+  if (explicit) {
+    try {
+      const config = JSON.parse(explicit) as { archetype?: string; tokenMint?: string; tokenMints?: string[] }
+      if (config.archetype === 'token-gated-game-economy' && gameScore >= 2) gameScore += 3
+      if (config.archetype === 'permissionless-market-indexer' && marketScore >= 2) marketScore += 3
+      const declaredMints = [config.tokenMint, ...(Array.isArray(config.tokenMints) ? config.tokenMints : [])]
+      for (const mint of declaredMints) {
+        if (typeof mint === 'string' && /^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(mint)) tokenMints.add(mint)
+      }
+      addEvidence(evidence, 'studio-manifest', 'daemon.meme-tech.json', 'Explicit Meme Tech Studio manifest detected')
+    } catch {
+      addEvidence(evidence, 'invalid-studio-manifest', 'daemon.meme-tech.json', 'Studio manifest is not valid JSON')
+    }
+  }
+
+  const strongest = Math.max(gameScore, marketScore, communityScore, solanaScore)
+  const archetype = gameScore >= 5 && gameScore > marketScore
+    ? 'token-gated-game-economy'
+    : marketScore >= 5 && marketScore >= gameScore
+      ? 'permissionless-market-indexer'
+      : communityScore >= 2
+        ? 'token-community-app'
+        : solanaScore >= 2
+          ? 'generic-solana-app'
+          : 'unknown'
+  const confidence = Math.min(0.96, strongest / 10)
+  const gaps: MemeTechProjectProfile['gaps'] = []
+  if (!topology.has('api') && archetype === 'token-gated-game-economy') gaps.push({ severity: 'blocker', code: 'missing-authority', detail: 'No authoritative API boundary was detected.', action: 'Add server-verified sessions and economy outcomes.' })
+  if (archetype === 'permissionless-market-indexer' && !topology.has('indexer')) gaps.push({ severity: 'blocker', code: 'missing-indexer', detail: 'No durable indexer was detected.', action: 'Add cursor persistence, reconciliation, and lag reporting.' })
+  if (!files.has('daemon.meme-tech.json')) gaps.push({ severity: 'info', code: 'missing-manifest', detail: 'Project intent is inferred.', action: 'Add daemon.meme-tech.json to make architecture claims explicit.' })
+  if (clusterSources.some((source) => source.value.startsWith('mainnet'))) gaps.push({ severity: 'warning', code: 'mainnet-config', detail: 'Mainnet appears in project configuration.', action: 'Use localnet or devnet for Studio proof workflows.' })
+
+  return {
+    archetype,
+    confidence,
+    evidence,
+    topology: [...topology],
+    capabilities: [...capabilities],
+    gaps,
+    tokenMints: [...tokenMints].slice(0, 12),
+    clusterSources,
+    inspectedAt: Date.now(),
+  }
+}
diff --git a/electron/services/meme-studio/MarketContextService.ts b/electron/services/meme-studio/MarketContextService.ts
new file mode 100644
index 00000000..a84d2813
--- /dev/null
+++ b/electron/services/meme-studio/MarketContextService.ts
@@ -0,0 +1,144 @@
+import { getKey } from '../SecureKeyService'
+import type { MemeMarketSnapshot, TokenRiskPreflight } from './types'
+
+const BIRDEYE_BASE_URL = 'https://public-api.birdeye.so'
+const DEXSCREENER_BASE_URL = 'https://api.dexscreener.com'
+const CACHE_TTL_MS = 30_000
+const REQUEST_TIMEOUT_MS = 8_000
+const BASE58_MINT = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/
+const snapshotCache = new Map<string, { expiresAt: number; value: MemeMarketSnapshot }>()
+type JsonRecord = Record<string, unknown>
+
+function numberValue(value: unknown): number | null {
+  const parsed = typeof value === 'string' ? Number(value) : value
+  return typeof parsed === 'number' && Number.isFinite(parsed) ? parsed : null
+}
+
+function recordValue(value: unknown): JsonRecord {
+  return value && typeof value === 'object' && !Array.isArray(value) ? value as JsonRecord : {}
+}
+
+async function requestJson(url: string, headers?: Record<string, string>): Promise<unknown> {
+  const response = await fetch(url, { headers, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) })
+  if (!response.ok) throw new Error(`Provider returned HTTP ${response.status}`)
+  return response.json()
+}
+
+function birdeyeKey(): string | null {
+  return process.env.BIRDEYE_API_KEY?.trim() || getKey('BIRDEYE_API_KEY')?.trim() || null
+}
+
+function validateMint(mint: string): string {
+  const value = mint?.trim()
+  if (!BASE58_MINT.test(value)) throw new Error('Enter a valid Solana mint address')
+  return value
+}
+
+async function fetchBirdeye(mint: string): Promise<{ overview: JsonRecord; trade: JsonRecord }> {
+  const apiKey = birdeyeKey()
+  if (!apiKey) throw new Error('Birdeye is not configured. Set BIRDEYE_API_KEY before launching DAEMON.')
+  const headers = { 'X-API-KEY': apiKey, 'x-chain': 'solana', accept: 'application/json' }
+  const encoded = encodeURIComponent(mint)
+  const [overviewResponse, tradeResponse] = await Promise.all([
+    requestJson(`${BIRDEYE_BASE_URL}/defi/token_overview?address=${encoded}`, headers),
+    requestJson(`${BIRDEYE_BASE_URL}/defi/v3/token/trade-data/single?address=${encoded}`, headers),
+  ])
+  return {
+    overview: recordValue(recordValue(overviewResponse).data),
+    trade: recordValue(recordValue(tradeResponse).data),
+  }
+}
+
+async function fetchDexScreener(mint: string): Promise<JsonRecord> {
+  const response = await requestJson(`${DEXSCREENER_BASE_URL}/token-pairs/v1/solana/${encodeURIComponent(mint)}`)
+  const pairs = Array.isArray(response) ? response : []
+  return pairs.reduce<JsonRecord>((best, candidate, index) => {
+    const row = recordValue(candidate)
+    const rowLiquidity = numberValue(recordValue(row.liquidity).usd) ?? 0
+    const bestLiquidity = numberValue(recordValue(best.liquidity).usd) ?? 0
+    return index === 0 || rowLiquidity > bestLiquidity ? row : best
+  }, {})
+}
+
+function relativeDivergence(left: number | null, right: number | null): number | null {
+  if (left === null || right === null || left === 0) return null
+  return Math.abs(left - right) / Math.abs(left)
+}
+
+export async function readMemeMarketContext(rawMint: string): Promise<MemeMarketSnapshot> {
+  const mint = validateMint(rawMint)
+  const cached = snapshotCache.get(mint)
+  if (cached && cached.expiresAt > Date.now()) return cached.value
+  const observedAt = Date.now()
+  const [birdeyeResult, dexResult] = await Promise.allSettled([fetchBirdeye(mint), fetchDexScreener(mint)])
+  if (birdeyeResult.status === 'rejected' && dexResult.status === 'rejected') throw new Error('Birdeye and DEX Screener are unavailable. Check the API key, connection, and mint address.')
+  const overview = birdeyeResult.status === 'fulfilled' ? birdeyeResult.value.overview : {}
+  const trade = birdeyeResult.status === 'fulfilled' ? birdeyeResult.value.trade : {}
+  const dex = dexResult.status === 'fulfilled' ? dexResult.value : {}
+  const dexLiquidity = numberValue(recordValue(dex.liquidity).usd)
+  const dexPrice = numberValue(dex.priceUsd)
+  const birdeyeLiquidity = numberValue(overview.liquidity)
+  const birdeyePrice = numberValue(overview.price)
+  const divergences: string[] = []
+  if ((relativeDivergence(birdeyePrice, dexPrice) ?? 0) > 0.05) divergences.push('Price differs by more than 5% across providers.')
+  if ((relativeDivergence(birdeyeLiquidity, dexLiquidity) ?? 0) > 0.35) divergences.push('Liquidity differs by more than 35% across providers.')
+  const h1Transactions = recordValue(recordValue(dex.txns).h1)
+  const dexTradeCount = (numberValue(h1Transactions.buys) ?? 0) + (numberValue(h1Transactions.sells) ?? 0)
+  const snapshot: MemeMarketSnapshot = {
+    mint,
+    symbol: typeof overview.symbol === 'string' ? overview.symbol : typeof recordValue(dex.baseToken).symbol === 'string' ? String(recordValue(dex.baseToken).symbol) : null,
+    name: typeof overview.name === 'string' ? overview.name : typeof recordValue(dex.baseToken).name === 'string' ? String(recordValue(dex.baseToken).name) : null,
+    observedAt,
+    priceUsd: birdeyePrice ?? dexPrice,
+    liquidityUsd: birdeyeLiquidity ?? dexLiquidity,
+    marketCapUsd: numberValue(overview.mc) ?? numberValue(dex.marketCap) ?? numberValue(dex.fdv),
+    volume1hUsd: numberValue(trade.volume_1h_usd) ?? numberValue(recordValue(dex.volume).h1),
+    volume24hUsd: numberValue(overview.v24hUSD) ?? numberValue(recordValue(dex.volume).h24),
+    trades1h: numberValue(trade.trade_1h) ?? (dexTradeCount || null),
+    uniqueWallets1h: numberValue(trade.unique_wallet_1h),
+    holders: numberValue(overview.holder),
+    priceChange1hPercent: numberValue(trade.price_change_1h_percent) ?? numberValue(recordValue(dex.priceChange).h1),
+    boosts: numberValue(recordValue(dex.boosts).active),
+    divergences,
+    sources: [
+      ...(birdeyeResult.status === 'fulfilled' ? [{ provider: 'birdeye' as const, fetchedAt: observedAt, stale: false }] : []),
+      ...(dexResult.status === 'fulfilled' ? [{ provider: 'dexscreener' as const, fetchedAt: observedAt, stale: false }] : []),
+    ],
+    degraded: birdeyeResult.status === 'rejected' || dexResult.status === 'rejected',
+  }
+  snapshotCache.set(mint, { expiresAt: observedAt + CACHE_TTL_MS, value: snapshot })
+  return snapshot
+}
+
+function authorityFact(label: string, value: unknown): TokenRiskPreflight['facts'][number] {
+  if (value === null || value === undefined || value === '') return { label, value: 'Unknown', status: 'unknown' }
+  const normalized = typeof value === 'string' ? value.trim().toLowerCase() : value
+  const enabled = normalized === true || (typeof normalized === 'string' && !['false', '0', 'disabled', 'none', 'null'].includes(normalized) && normalized.length > 0)
+  return { label, value: enabled ? 'Enabled' : 'Disabled', status: enabled ? 'danger' : 'good' }
+}
+
+export async function readTokenRiskPreflight(rawMint: string): Promise<TokenRiskPreflight> {
+  const mint = validateMint(rawMint)
+  const apiKey = birdeyeKey()
+  if (!apiKey) throw new Error('Birdeye is not configured. Set BIRDEYE_API_KEY before launching DAEMON.')
+  const response = recordValue(await requestJson(`${BIRDEYE_BASE_URL}/defi/token_security?address=${encodeURIComponent(mint)}`, {
+    'X-API-KEY': apiKey, 'x-chain': 'solana', accept: 'application/json',
+  }))
+  const security = recordValue(response.data)
+  const facts: TokenRiskPreflight['facts'] = [
+    authorityFact('Mint authority', security.mintAuthority),
+    authorityFact('Freeze authority', security.freezeAuthority),
+    authorityFact('Transfer fee', security.transferFeeEnable),
+    authorityFact('Non-transferable', security.nonTransferable),
+  ]
+  const topTenRaw = numberValue(security.top10HolderPercent)
+  const topTenPercent = topTenRaw === null ? null : topTenRaw <= 1 ? topTenRaw * 100 : topTenRaw
+  facts.push(topTenPercent === null
+    ? { label: 'Top 10 holders', value: 'Unknown', status: 'unknown' }
+    : { label: 'Top 10 holders', value: `${topTenPercent.toFixed(1)}%`, status: topTenPercent > 40 ? 'danger' : topTenPercent > 20 ? 'warning' : 'good' })
+  const dangerous = facts.some((fact) => fact.status === 'danger')
+  const unknowns = facts.filter((fact) => fact.status === 'unknown').map((fact) => `${fact.label} could not be verified.`)
+  return { mint, observedAt: Date.now(), risk: dangerous ? 'high' : unknowns.length ? 'unknown' : 'review', facts, unknowns, attentionIsNotTrust: true, sources: ['Birdeye token security'] }
+}
+
+export function clearMemeMarketCache(): void { snapshotCache.clear() }
diff --git a/electron/services/meme-studio/projectBoundary.ts b/electron/services/meme-studio/projectBoundary.ts
new file mode 100644
index 00000000..4feb28c0
--- /dev/null
+++ b/electron/services/meme-studio/projectBoundary.ts
@@ -0,0 +1,27 @@
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import { getDb } from '../../db/db'
+
+function normalize(value: string): string {
+  const resolved = path.resolve(value)
+  return process.platform === 'win32' ? resolved.toLowerCase() : resolved
+}
+
+export async function registeredProjectRoot(projectPath: string): Promise<string> {
+  if (typeof projectPath !== 'string' || !projectPath.trim()) throw new Error('Project path is required')
+  const requested = await fs.realpath(path.resolve(projectPath)).catch(() => null)
+  if (!requested) throw new Error('Project path does not exist')
+  const rows = getDb().prepare('SELECT path FROM projects').all() as Array<{ path: string }>
+  for (const row of rows) {
+    const root = await fs.realpath(path.resolve(row.path)).catch(() => null)
+    if (root && normalize(root) === normalize(requested)) return root
+  }
+  throw new Error('Project is not registered in DAEMON')
+}
+
+export function safeProjectPath(root: string, relativePath: string): string {
+  const target = path.resolve(root, relativePath)
+  const relative = path.relative(root, target)
+  if (relative.startsWith('..') || path.isAbsolute(relative)) throw new Error('Project file escaped workspace boundary')
+  return target
+}
diff --git a/electron/services/meme-studio/types.ts b/electron/services/meme-studio/types.ts
new file mode 100644
index 00000000..b414d719
--- /dev/null
+++ b/electron/services/meme-studio/types.ts
@@ -0,0 +1,61 @@
+export type MemeTechArchetype =
+  | 'token-gated-game-economy'
+  | 'permissionless-market-indexer'
+  | 'token-community-app'
+  | 'generic-solana-app'
+  | 'unknown'
+
+export interface MemeTechEvidence {
+  code: string
+  path: string
+  detail: string
+}
+
+export interface MemeTechGap {
+  severity: 'blocker' | 'warning' | 'info'
+  code: string
+  detail: string
+  action: string
+}
+
+export interface MemeTechProjectProfile {
+  archetype: MemeTechArchetype
+  confidence: number
+  evidence: MemeTechEvidence[]
+  topology: string[]
+  capabilities: string[]
+  gaps: MemeTechGap[]
+  tokenMints: string[]
+  clusterSources: Array<{ source: string; value: string }>
+  inspectedAt: number
+}
+
+export interface MemeMarketSnapshot {
+  mint: string
+  symbol: string | null
+  name: string | null
+  observedAt: number
+  priceUsd: number | null
+  liquidityUsd: number | null
+  marketCapUsd: number | null
+  volume1hUsd: number | null
+  volume24hUsd: number | null
+  trades1h: number | null
+  uniqueWallets1h: number | null
+  holders: number | null
+  priceChange1hPercent: number | null
+  boosts: number | null
+  divergences: string[]
+  sources: Array<{ provider: 'birdeye' | 'dexscreener'; fetchedAt: number; stale: boolean }>
+  degraded: boolean
+}
+
+export interface TokenRiskPreflight {
+  mint: string
+  observedAt: number
+  risk: 'high' | 'review' | 'unknown'
+  facts: Array<{ label: string; value: string; status: 'good' | 'warning' | 'danger' | 'unknown' }>
+  unknowns: string[]
+  attentionIsNotTrust: true
+  sources: string[]
+}
diff --git a/electron/shared/channels.ts b/electron/shared/channels.ts
index 5e580535..66ec5cf8 100644
--- a/electron/shared/channels.ts
+++ b/electron/shared/channels.ts
@@ -115,6 +115,7 @@ export interface ChannelMap {
   'git:stage': { input: [cwd: string, files: string[]]; output: void }
   'git:unstage': { input: [cwd: string, files: string[]]; output: void }
   'git:commit': { input: [cwd: string, message: string]; output: void }
+  'git:init-commit': { input: [cwd: string, message: string]; output: { committed: boolean; reason?: string } }
   'git:push': { input: string; output: string }
   'git:log': { input: [cwd: string, count?: number]; output: GitCommit[] }
   'git:diff': { input: [cwd: string, filePath?: string]; output: string }
diff --git a/electron/shared/types.ts b/electron/shared/types.ts
index 06876ff9..23e4672b 100644
--- a/electron/shared/types.ts
+++ b/electron/shared/types.ts
@@ -2900,6 +2900,9 @@ export type AriaUiEffect =
   | { type: 'add_terminal'; terminalId: string; name: string; agentId?: string }
   | { type: 'run_integration'; actionId: string }
   | { type: 'set_integration_enabled'; integrationId: string; enabled: boolean }
+  | { type: 'open_preview'; url: string }
+  | { type: 'start_dev_server'; command: string; port: number; projectPath: string; label: string }
+  | { type: 'open_scaffold'; templateId: string; projectName: string }
 
 /** Streamed transcript events from the operator loop to the renderer. */
 export type AriaToolEvent =
diff --git a/lite.html b/lite.html
new file mode 100644
index 00000000..3f9e61dc
--- /dev/null
+++ b/lite.html
@@ -0,0 +1,13 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/x-icon" href="/favicon.ico" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>DAEMON Lite</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/lite/main-lite.tsx"></script>
+  </body>
+</html>
diff --git a/package.json b/package.json
index b6fdf39a..308c2b15 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "daemon",
-  "version": "4.6.4",
+  "version": "4.7.11",
   "main": "dist-electron/main/index.js",
   "description": "Solana-native agent workbench for verifiable AI development",
   "author": "nullxnothing",
@@ -18,7 +18,9 @@
   "scripts": {
     "dev": "vite",
     "dev:debug": "powershell -NoProfile -Command \"$env:DAEMON_OPEN_DEVTOOLS='1'; vite\"",
+    "dev:lite": "vite --config vite.lite.config.ts",
     "build": "tsc && vite build",
+    "build:lite": "tsc && vite build --config vite.lite.config.ts",
     "aria": "node scripts/aria.mjs",
     "build:daemon-ai-cloud": "vite build --config vite.cloud.config.ts",
     "build:bridge": "vite build --config vite.bridge.config.ts",
@@ -29,6 +31,9 @@
     "mobile:seeker:android": "npm --prefix apps/seeker-mobile run android",
     "mobile:seeker:typecheck": "npm --prefix apps/seeker-mobile run typecheck",
     "package": "pnpm run build && pnpm run build:bridge && pnpm run rebuild && electron-builder",
+    "package:lite": "pnpm run build:lite && node scripts/check-lite-deps.mjs && node scripts/prepare-lite-runtime.cjs && electron-builder --config electron-builder.lite.cjs --publish never && node scripts/check-lite-deps.mjs",
+    "package:lite:mac": "pnpm run build:lite && node scripts/check-lite-deps.mjs && node scripts/prepare-lite-runtime.cjs && electron-builder --config electron-builder.lite.cjs --mac dmg zip --arm64 --publish never && node scripts/check-lite-deps.mjs",
+    "test:lite-packaged-smoke": "pnpm run package:lite && node scripts/smoke/lite-app-smoke.mjs",
     "postinstall": "pnpm run rebuild:native",
     "rebuild": "pnpm run rebuild:native",
     "rebuild:sqlite": "electron-rebuild -f --only better-sqlite3",
@@ -58,7 +63,7 @@
     "test:security": "vitest run test/security test/services/SecureKeyService.test.ts test/services/ValidationService.test.ts test/services/ProjectSafetyService.test.ts",
     "test:smoke:core": "pnpm run test:smoke && pnpm run test:mcp-stress && pnpm run test:pro-entitlement",
     "test:smoke:ui": "pnpm run test:journeys && pnpm run test:responsive && pnpm run test:layout && pnpm run test:visual",
-    "test:ci": "pnpm install --frozen-lockfile --ignore-scripts && pnpm run typecheck && pnpm -r run typecheck && pnpm run lint:styles && pnpm run security:audit && pnpm run test:unit && pnpm run test:ui && pnpm run test:a11y && pnpm run test:keyboard && pnpm run test:solana && pnpm run test:security && pnpm run test:smoke",
+    "test:ci": "pnpm install --frozen-lockfile --ignore-scripts && pnpm run typecheck && pnpm -r run typecheck && pnpm run build:lite && node scripts/check-lite-deps.mjs && pnpm run lint:styles && pnpm run security:audit && pnpm run test:unit && pnpm run test:ui && pnpm run test:a11y && pnpm run test:keyboard && pnpm run test:solana && pnpm run test:security && pnpm run test:smoke",
     "test:release": "pnpm run release:check:v4:local",
     "test:all": "pnpm run test:ci && pnpm run test:smoke:core && pnpm run test:smoke:ui",
     "test:smoke": "pnpm run build && pnpm run rebuild && node scripts/smoke/electron-smoke.mjs",
@@ -146,11 +151,12 @@
     "@xterm/xterm": "^5.5.0",
     "axe-core": "^4.11.4",
     "buffer": "^6.0.3",
-    "electron": "^41.5.0",
+    "electron": "41.10.2",
     "electron-builder": "^26.8.1",
     "electron-builder-squirrel-windows": "^26.8.1",
     "happy-dom": "^20.8.9",
     "monaco-editor": "^0.55.1",
+    "obs-websocket-js": "^5.0.8",
     "patch-package": "^8.0.1",
     "pixelmatch": "^7.1.0",
     "playwright": "^1.59.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 24c1968e..2caf5b4b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -232,8 +232,8 @@ importers:
         specifier: ^6.0.3
         version: 6.0.3
       electron:
-        specifier: ^41.5.0
-        version: 41.5.0
+        specifier: 41.10.2
+        version: 41.10.2
       electron-builder:
         specifier: ^26.8.1
         version: 26.8.1(electron-builder-squirrel-windows@26.8.1)
@@ -246,6 +246,9 @@ importers:
       monaco-editor:
         specifier: ^0.55.1
         version: 0.55.1
+      obs-websocket-js:
+        specifier: ^5.0.8
+        version: 5.0.8(bufferutil@4.1.0)(utf-8-validate@6.0.6)
       patch-package:
         specifier: ^8.0.1
         version: 8.0.1
@@ -871,6 +874,10 @@ packages:
     resolution: {integrity: sha512-0cp4PsWQ/9avqTVMCtZ+GirikIA36ikvjtHweU4/j8yLtgObI0+JUPhYFScgwlteveGB1rt3Cm8UhN04XayDig==}
     engines: {node: '>= 8.9.0'}
 
+  '@electron-internal/extract-zip@1.0.4':
+    resolution: {integrity: sha512-Zr1Vs7E9tpCNhZHDAbFVXc2gEVCG9RqPDjrno5+bdgB6LRAuvgyMHJut4NCVyYwtAieapMzc3fiQ3CSTi75ARg==}
+    engines: {node: '>=22.12.0'}
+
   '@electron/asar@3.4.1':
     resolution: {integrity: sha512-i4/rNPRS84t0vSRa2HorerGRXWyF4vThfHesw0dmcWHp+cspK743UanA0suA5Q5y8kzY2y6YKrvbIUn69BCAiA==}
     engines: {node: '>=10.12.0'}
@@ -880,14 +887,14 @@ packages:
     resolution: {integrity: sha512-zx0EIq78WlY/lBb1uXlziZmDZI4ubcCXIMJ4uGjXzZW0nS19TjSPeXPAjzzTmKQlJUZm0SbmZhPKP7tuQ1SsEw==}
     hasBin: true
 
-  '@electron/get@2.0.3':
-    resolution: {integrity: sha512-Qkzpg2s9GnVV2I2BjRksUi43U5e6+zaQMcjoJy0C+C5oxaKl+fmckGDQFtRpZpZV0NQekuZZ+tGz7EA9TVnQtQ==}
-    engines: {node: '>=12'}
-
   '@electron/get@3.1.0':
     resolution: {integrity: sha512-F+nKc0xW+kVbBRhFzaMgPy3KwmuNTYX1fx6+FxxoSnNgwYX6LD7AKBTWkU0MQ6IBoe7dz069CNkR673sPAgkCQ==}
     engines: {node: '>=14'}
 
+  '@electron/get@5.0.0':
+    resolution: {integrity: sha512-pjoBpru1KdEtcExBnuHAP1cAc/5faoedw0hzJkL3o4/IJp7HNF1+fbrdxT3gMYRX2oJfvnA/WXeCTVQpYYxyJA==}
+    engines: {node: '>=22.12.0'}
+
   '@electron/notarize@2.2.1':
     resolution: {integrity: sha512-aL+bFMIkpR0cmmj5Zgy0LMKEpgy43/hw5zadEArgmAMWWlKc5buwFvFT9G/o/YJkvXAJm5q3iuTuLaiaXW39sg==}
     engines: {node: '>= 10.0.0'}
@@ -1439,6 +1446,10 @@ packages:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
       react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
+  '@msgpack/msgpack@2.8.0':
+    resolution: {integrity: sha512-h9u4u/jiIRKbq25PM+zymTyW6bhTzELvOoUd+AvYriWOAKpLGnIamaET3pnHYoI5iYphAHBI4ayx0MehR+VVPQ==}
+    engines: {node: '>= 10'}
+
   '@msgpack/msgpack@3.1.3':
     resolution: {integrity: sha512-47XIizs9XZXvuJgoaJUIE2lFoID8ugvc0jzSHP+Ptfk8nTbnR8g788wv48N03Kx0UkAv559HWRQ3yzOgzlRNUA==}
     engines: {node: '>= 18'}
@@ -3593,6 +3604,9 @@ packages:
     resolution: {integrity: sha512-lyAZ0EMyjDkVvz8WOeVnuCPvKVBXcMv1l5SVqO1yC7PzTwrD/pPje/BIRbWhMoPe436U+Y2nD7f5bFx0kt+Sbg==}
     engines: {node: '>=8'}
 
+  crypto-js@4.2.0:
+    resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
+
   css-in-js-utils@3.1.0:
     resolution: {integrity: sha512-fJAcud6B3rRu+KHYk+Bwf+WFL2MDCJJ1XG9x137tJQ0xYxor7XziQtuGFbWNdqrvF4Tk26O3H73nfVqXt/fW1A==}
 
@@ -3810,9 +3824,9 @@ packages:
     resolution: {integrity: sha512-bO3y10YikuUwUuDUQRM4KfwNkKhnpVO7IPdbsrejwN9/AABJzzTQ4GeHwyzNSrVO+tEH3/Np255a3sVZpZDjvg==}
     engines: {node: '>=8.0.0'}
 
-  electron@41.5.0:
-    resolution: {integrity: sha512-x9j9//PubUA4EjDtQbZhtk3prolandqCKgit0uCIqc1jb8FTskPbnJtxcDFB1aejczJcuERgjPixBUaMwoWyJg==}
-    engines: {node: '>= 12.20.55'}
+  electron@41.10.2:
+    resolution: {integrity: sha512-vzSetbn05LPfg0gW0p9txpqmkkFyTXzdSHvKIXbtmsK362hkgUQJu+x19GSSS9v/VXeFi5UJI5TYJ1a+Os3CpA==}
+    engines: {node: '>= 22.12.0'}
     hasBin: true
 
   emoji-regex@8.0.0:
@@ -3848,6 +3862,10 @@ packages:
     resolution: {integrity: sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==}
     engines: {node: '>=6'}
 
+  env-paths@3.0.0:
+    resolution: {integrity: sha512-dtJUTepzMW3Lm/NPxRf3wP4642UWhjL2sQxc+ym2YMj1m/H2zDNQOlezafzkHwn6sMstjHTwG6iQQsctDW/b1A==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   environment@1.1.0:
     resolution: {integrity: sha512-xUtoPkMggbz0MPyPiIWr1Kp4aeWJjDZ6SMvURhimjdZgsRuDplF5/s9hcgGhyXMhs+6vpnuoiZ2kFiu3FMnS8Q==}
     engines: {node: '>=18'}
@@ -4712,6 +4730,11 @@ packages:
     peerDependencies:
       ws: 8.21.0
 
+  isomorphic-ws@5.0.0:
+    resolution: {integrity: sha512-muId7Zzn9ywDsyXgTIafTry2sV3nySZeUDe6YedVd1Hvuuep5AsIlqK+XefWpYTyJG5e503F2xIuT2lcU6rCSw==}
+    peerDependencies:
+      ws: 8.21.0
+
   isows@1.0.7:
     resolution: {integrity: sha512-I1fSfDCZL5P0v33sVqeTDSpcstAg/N+wF5HS033mogOVIp4B+oHC7oOCsA3axAbBSGTJ8QubbNmnIRN/h8U7hg==}
     peerDependencies:
@@ -5566,6 +5589,10 @@ packages:
     resolution: {integrity: sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==}
     engines: {node: '>= 0.4'}
 
+  obs-websocket-js@5.0.8:
+    resolution: {integrity: sha512-QDnQJMr5wuCoYugK02ggZ1/cvESs4KJDEK+UhGg0Ry35jnY8tK1Xr3KoPjKyoD6sd8G+WdtIdzuY+yUyPtogQQ==}
+    engines: {node: '>16.0'}
+
   on-exit-leak-free@2.1.2:
     resolution: {integrity: sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==}
     engines: {node: '>=14.0.0'}
@@ -6736,6 +6763,10 @@ packages:
     resolution: {integrity: sha512-Ne2YiiGN8bmrmJJEuTWTLJR32nh/JdL1+PSicowtNb0WFpn59GK8/lfD61bVtzguz7b3PBt74nxpv/Pw5po5Rg==}
     engines: {node: '>=8'}
 
+  type-fest@3.13.1:
+    resolution: {integrity: sha512-tLq3bSNx+xSpwvAJnzrK0Ep5CLNWjvFTOp71URMaAEWBfRb9nnJiBoUe0tF8bI4ZFO3omgBR6NvnbzVUT3Ly4g==}
+    engines: {node: '>=14.16'}
+
   type-fest@5.7.0:
     resolution: {integrity: sha512-1URUxUqfHFM1c+zfSPsa3gnkO7Aq21qyH75SIduNYz4SzY964rn1X2vCMQaHSHhktiw+0kPa2iyb6PUpXqB6Vg==}
     engines: {node: '>=20'}
@@ -7826,6 +7857,8 @@ snapshots:
       ajv: 6.15.0
       ajv-keywords: 3.5.2(ajv@6.15.0)
 
+  '@electron-internal/extract-zip@1.0.4': {}
+
   '@electron/asar@3.4.1':
     dependencies:
       commander: 5.1.0
@@ -7838,7 +7871,7 @@ snapshots:
       fs-extra: 9.1.0
       minimist: 1.2.8
 
-  '@electron/get@2.0.3':
+  '@electron/get@3.1.0':
     dependencies:
       debug: 4.4.3
       env-paths: 2.2.1
@@ -7852,17 +7885,16 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@electron/get@3.1.0':
+  '@electron/get@5.0.0':
     dependencies:
       debug: 4.4.3
-      env-paths: 2.2.1
-      fs-extra: 8.1.0
-      got: 11.8.6
+      env-paths: 3.0.0
+      graceful-fs: 4.2.11
       progress: 2.0.3
-      semver: 6.3.1
+      semver: 7.8.0
       sumchecker: 3.0.1
     optionalDependencies:
-      global-agent: 3.0.0
+      undici: 6.27.0
     transitivePeerDependencies:
       - supports-color
 
@@ -8614,6 +8646,8 @@ snapshots:
       react: 19.2.5
       react-dom: 19.2.5(react@19.2.5)
 
+  '@msgpack/msgpack@2.8.0': {}
+
   '@msgpack/msgpack@3.1.3': {}
 
   '@nirholas/pump-sdk@1.30.0(bufferutil@4.1.0)(encoding@0.1.13)(fastestsmallesttextencoderdecoder@1.0.22)(puppeteer-core@24.40.0(bufferutil@4.1.0)(utf-8-validate@6.0.6))(typescript@5.9.3)(utf-8-validate@6.0.6)':
@@ -8728,7 +8762,7 @@ snapshots:
       extract-zip: 2.0.1
       progress: 2.0.3
       proxy-agent: 6.5.0
-      semver: 7.7.4
+      semver: 7.8.0
       tar-fs: 3.1.2
       yargs: 17.7.2
     transitivePeerDependencies:
@@ -10070,7 +10104,7 @@ snapshots:
 
   '@types/connect@3.4.38':
     dependencies:
-      '@types/node': 25.5.0
+      '@types/node': 25.6.0
 
   '@types/debug@4.1.13':
     dependencies:
@@ -10183,7 +10217,7 @@ snapshots:
 
   '@types/send@1.2.1':
     dependencies:
-      '@types/node': 25.5.0
+      '@types/node': 25.6.0
 
   '@types/serve-static@2.2.0':
     dependencies:
@@ -10206,7 +10240,7 @@ snapshots:
 
   '@types/ws@7.4.7':
     dependencies:
-      '@types/node': 12.20.55
+      '@types/node': 25.6.0
 
   '@types/ws@8.18.1':
     dependencies:
@@ -11129,6 +11163,8 @@ snapshots:
 
   crypto-hash@1.3.0: {}
 
+  crypto-js@4.2.0: {}
+
   css-in-js-utils@3.1.0:
     dependencies:
       hyphenate-style-name: 1.1.0
@@ -11375,11 +11411,11 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  electron@41.5.0:
+  electron@41.10.2:
     dependencies:
-      '@electron/get': 2.0.3
+      '@electron-internal/extract-zip': 1.0.4
+      '@electron/get': 5.0.0
       '@types/node': 24.12.2
-      extract-zip: 2.0.1
     transitivePeerDependencies:
       - supports-color
 
@@ -11406,6 +11442,8 @@ snapshots:
 
   env-paths@2.2.1: {}
 
+  env-paths@3.0.0: {}
+
   environment@1.1.0: {}
 
   err-code@2.0.3: {}
@@ -12040,7 +12078,7 @@ snapshots:
       es6-error: 4.1.1
       matcher: 3.0.0
       roarr: 2.15.4
-      semver: 7.7.4
+      semver: 7.8.0
       serialize-error: 7.0.1
     optional: true
 
@@ -12411,6 +12449,10 @@ snapshots:
     dependencies:
       ws: 8.21.0(bufferutil@4.1.0)(utf-8-validate@6.0.6)
 
+  isomorphic-ws@5.0.0(ws@8.21.0(bufferutil@4.1.0)(utf-8-validate@6.0.6)):
+    dependencies:
+      ws: 8.21.0(bufferutil@4.1.0)(utf-8-validate@6.0.6)
+
   isows@1.0.7(ws@8.21.0(bufferutil@4.1.0)(utf-8-validate@6.0.6)):
     dependencies:
       ws: 8.21.0(bufferutil@4.1.0)(utf-8-validate@6.0.6)
@@ -13647,6 +13689,20 @@ snapshots:
 
   object-keys@1.1.1: {}
 
+  obs-websocket-js@5.0.8(bufferutil@4.1.0)(utf-8-validate@6.0.6):
+    dependencies:
+      '@msgpack/msgpack': 2.8.0
+      crypto-js: 4.2.0
+      debug: 4.4.3
+      eventemitter3: 5.0.4
+      isomorphic-ws: 5.0.0(ws@8.21.0(bufferutil@4.1.0)(utf-8-validate@6.0.6))
+      type-fest: 3.13.1
+      ws: 8.21.0(bufferutil@4.1.0)(utf-8-validate@6.0.6)
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
   on-exit-leak-free@2.1.2: {}
 
   on-finished@2.3.0:
@@ -15055,6 +15111,8 @@ snapshots:
 
   type-fest@0.7.1: {}
 
+  type-fest@3.13.1: {}
+
   type-fest@5.7.0:
     dependencies:
       tagged-tag: 1.0.0
diff --git a/popout.html b/popout.html
new file mode 100644
index 00000000..68d1fd9c
--- /dev/null
+++ b/popout.html
@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Preview</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/lite/popout/main-popout.tsx"></script>
+  </body>
+</html>
diff --git a/public/fonts/Geist-Variable.woff2 b/public/fonts/Geist-Variable.woff2
new file mode 100644
index 00000000..5c5999d6
Binary files /dev/null and b/public/fonts/Geist-Variable.woff2 differ
diff --git a/scripts/check-lite-deps.mjs b/scripts/check-lite-deps.mjs
new file mode 100644
index 00000000..7db6e1bb
--- /dev/null
+++ b/scripts/check-lite-deps.mjs
@@ -0,0 +1,61 @@
+/**
+ * DAEMON Lite packaging gate. Fails the build when:
+ *  1. a banned heavy package appears in the lite runtime dependency closure
+ *     (someone re-introduced an IDE/Solana import into the lite main graph), or
+ *  2. the built installer exceeds the size budget.
+ *
+ * Run after build:lite (closure check) and again after electron-builder
+ * (size check picks up the installer when present).
+ */
+import { createRequire } from 'node:module'
+import fs from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const require = createRequire(import.meta.url)
+const { liteRuntimePackages } = require('./lite-deps.cjs')
+
+const ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), '..')
+// Lite now intentionally ships the native PTY and will bundle Monaco/xterm for
+// its focused workbench. Keep headroom for that IDE substrate while continuing
+// to reject unrelated full-DAEMON dependency growth.
+const MAX_INSTALLER_BYTES = 160 * 1024 * 1024
+
+const BANNED = [
+  '@raydium-io/raydium-sdk-v2',
+  'pyright',
+  'typescript-language-server',
+  'playwright',
+  'puppeteer-core',
+  'viem',
+  'ethers',
+]
+const BANNED_PREFIXES = ['@metaplex-foundation/', '@meteora-ag/', '@playwright/']
+
+const packages = liteRuntimePackages()
+const banned = packages.filter(
+  (name) => BANNED.includes(name) || BANNED_PREFIXES.some((p) => name.startsWith(p)),
+)
+
+if (banned.length > 0) {
+  console.error('[lite-gate] FAIL — banned packages in the Lite runtime closure:')
+  for (const name of banned) console.error(`  - ${name}`)
+  console.error('A new import in the lite main graph is dragging these in. Sever it (module swap or lazy import).')
+  process.exit(1)
+}
+
+console.log(`[lite-gate] closure ok — ${packages.length} runtime packages, none banned`)
+
+const pkg = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'))
+const installer = path.join(ROOT, 'release-lite', pkg.version, 'DAEMON-setup.exe')
+if (fs.existsSync(installer)) {
+  const bytes = fs.statSync(installer).size
+  const mb = (bytes / 1024 / 1024).toFixed(1)
+  if (bytes > MAX_INSTALLER_BYTES) {
+    console.error(`[lite-gate] FAIL — installer ${mb} MB exceeds the ${MAX_INSTALLER_BYTES / 1024 / 1024} MB budget`)
+    process.exit(1)
+  }
+  console.log(`[lite-gate] installer ok — ${mb} MB`)
+} else {
+  console.log('[lite-gate] installer not built yet — size check skipped')
+}
diff --git a/scripts/lite-deps.cjs b/scripts/lite-deps.cjs
new file mode 100644
index 00000000..bd6b7241
--- /dev/null
+++ b/scripts/lite-deps.cjs
@@ -0,0 +1,108 @@
+/**
+ * DAEMON Lite dependency closure. Scans the built lite main/preload bundles
+ * for external module specifiers, then walks package.json dependencies
+ * (pnpm hoisted layout — every package is at node_modules/<name>) to the
+ * full runtime closure for the Lite dependency and size gate. Packaging uses
+ * the isolated, locked runtime manifest under build/lite-runtime.
+ */
+const fs = require('node:fs')
+const path = require('node:path')
+const { builtinModules } = require('node:module')
+
+const ROOT = path.join(__dirname, '..')
+const DIST = path.join(ROOT, 'dist-electron-lite')
+
+const SPECIFIER_PATTERNS = [
+  /require\(\s*["']([^"']+)["']\s*\)/g,
+  /from\s*["']([^"']+)["']/g,
+  /import\(\s*["']([^"']+)["']\s*\)/g,
+  /import\s*["']([^"']+)["']/g,
+]
+
+function isBuiltin(spec) {
+  const head = spec.startsWith('node:') ? spec.slice(5) : spec
+  return builtinModules.includes(head.split('/')[0])
+}
+
+function toPackageName(spec) {
+  return spec.startsWith('@') ? spec.split('/').slice(0, 2).join('/') : spec.split('/')[0]
+}
+
+/** External package names imported by the built lite bundles. */
+function scanExternals(distDir = DIST) {
+  if (!fs.existsSync(distDir)) {
+    throw new Error(`lite bundles not built: ${distDir} missing — run build:lite first`)
+  }
+  const packages = new Set()
+  const walk = (dir) => {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+      const p = path.join(dir, entry.name)
+      if (entry.isDirectory()) {
+        walk(p)
+      } else if (/\.(js|mjs|cjs)$/.test(entry.name)) {
+        const code = fs.readFileSync(p, 'utf8')
+        for (const re of SPECIFIER_PATTERNS) {
+          re.lastIndex = 0
+          let match
+          while ((match = re.exec(code))) {
+            const spec = match[1]
+            if (spec.startsWith('.') || isBuiltin(spec) || spec === 'electron') continue
+            // Regex over minified code can cross string boundaries — accept
+            // only plausible module specifiers.
+            if (!/^(@[\w.-]+\/)?[\w.-]+(\/[\w.-]+)*$/.test(spec)) continue
+            packages.add(toPackageName(spec))
+          }
+        }
+      }
+    }
+  }
+  walk(distDir)
+  return packages
+}
+
+/** BFS over dependencies + optionalDependencies from the given roots. */
+function dependencyClosure(roots) {
+  const seen = new Set()
+  const queue = [...roots]
+  while (queue.length > 0) {
+    const name = queue.shift()
+    if (seen.has(name)) continue
+    const pkgJsonPath = path.join(ROOT, 'node_modules', name, 'package.json')
+    if (!fs.existsSync(pkgJsonPath)) continue // optional dep not installed
+    seen.add(name)
+    const pkg = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf8'))
+    for (const dep of [
+      ...Object.keys(pkg.dependencies ?? {}),
+      ...Object.keys(pkg.optionalDependencies ?? {}),
+    ]) {
+      if (dep !== 'electron') queue.push(dep)
+    }
+  }
+  return seen
+}
+
+function liteRuntimePackages() {
+  return [...dependencyClosure([...scanExternals()])].sort()
+}
+
+/**
+ * Packages electron-builder would auto-collect (the app's production
+ * dependency tree). files globs cannot ADD node_modules content — the walker
+ * collects every prod dep — so exclusion must be expressed as negations of
+ * this set minus the lite closure.
+ */
+function appProdPackages() {
+  const pkg = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'))
+  return dependencyClosure(Object.keys(pkg.dependencies ?? {}))
+}
+
+/** Negation patterns for every collected package the Lite runtime never imports. */
+function liteExcludePatterns() {
+  const needed = new Set(liteRuntimePackages())
+  return [...appProdPackages()]
+    .filter((name) => !needed.has(name))
+    .sort()
+    .map((name) => `!node_modules/${name}/**`)
+}
+
+module.exports = { scanExternals, dependencyClosure, liteRuntimePackages, appProdPackages, liteExcludePatterns }
diff --git a/scripts/prepare-lite-runtime.cjs b/scripts/prepare-lite-runtime.cjs
new file mode 100644
index 00000000..18ec216a
--- /dev/null
+++ b/scripts/prepare-lite-runtime.cjs
@@ -0,0 +1,80 @@
+const { execFileSync } = require('node:child_process')
+const fs = require('node:fs')
+const path = require('node:path')
+const { scanExternals } = require('./lite-deps.cjs')
+
+const ROOT = path.join(__dirname, '..')
+const TEMPLATE_DIR = path.join(ROOT, 'build', 'lite-runtime')
+const STAGE_DIR = path.join(ROOT, 'release-lite', '.stage')
+const DIST_DIRS = ['dist-electron-lite', 'dist-lite']
+
+function readJson(filePath) {
+  return JSON.parse(fs.readFileSync(filePath, 'utf8'))
+}
+
+function assertRuntimeRoots(runtimeManifest) {
+  const expected = Object.keys(runtimeManifest.dependencies ?? {}).sort()
+  const actual = [...scanExternals()].sort()
+  if (JSON.stringify(actual) !== JSON.stringify(expected)) {
+    throw new Error(`Lite runtime roots changed. Expected ${expected.join(', ')}; found ${actual.join(', ')}`)
+  }
+  for (const name of expected) {
+    const installed = readJson(path.join(ROOT, 'node_modules', name, 'package.json')).version
+    if (runtimeManifest.dependencies[name] !== installed) {
+      throw new Error(`Lite runtime ${name} must be pinned to installed version ${installed}`)
+    }
+  }
+}
+
+function run(command, args, cwd) {
+  execFileSync(command, args, {
+    cwd,
+    stdio: 'inherit',
+    shell: process.platform === 'win32',
+  })
+}
+
+function prepareStage() {
+  const rootManifest = readJson(path.join(ROOT, 'package.json'))
+  const runtimeManifest = readJson(path.join(TEMPLATE_DIR, 'package.json'))
+  assertRuntimeRoots(runtimeManifest)
+
+  fs.rmSync(STAGE_DIR, { recursive: true, force: true })
+  fs.mkdirSync(STAGE_DIR, { recursive: true })
+  for (const file of ['package.json', 'pnpm-lock.yaml', '.npmrc']) {
+    fs.copyFileSync(path.join(TEMPLATE_DIR, file), path.join(STAGE_DIR, file))
+  }
+
+  const pnpm = process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm'
+  run(pnpm, ['install', '--prod', '--frozen-lockfile', '--ignore-scripts', '--ignore-workspace'], STAGE_DIR)
+
+  const electronRebuild = path.join(ROOT, 'node_modules', '.bin', process.platform === 'win32' ? 'electron-rebuild.cmd' : 'electron-rebuild')
+  const electronVersion = rootManifest.devDependencies.electron.replace(/^\^/, '')
+  run(electronRebuild, [
+    '--force',
+    '--only',
+    'better-sqlite3,node-pty',
+    '--module-dir',
+    STAGE_DIR,
+    '--version',
+    electronVersion,
+    '--arch',
+    process.arch,
+  ], ROOT)
+
+  for (const dir of DIST_DIRS) {
+    fs.cpSync(path.join(ROOT, dir), path.join(STAGE_DIR, dir), { recursive: true })
+  }
+
+  fs.writeFileSync(path.join(STAGE_DIR, 'package.json'), `${JSON.stringify({
+    ...runtimeManifest,
+    name: rootManifest.name,
+    version: rootManifest.version,
+    main: 'dist-electron-lite/main/lite.js',
+    description: rootManifest.description,
+    author: rootManifest.author,
+    license: rootManifest.license,
+  }, null, 2)}\n`)
+}
+
+prepareStage()
diff --git a/scripts/release-tools/verify-macos-artifacts.mjs b/scripts/release-tools/verify-macos-artifacts.mjs
new file mode 100644
index 00000000..1ab61b69
--- /dev/null
+++ b/scripts/release-tools/verify-macos-artifacts.mjs
@@ -0,0 +1,71 @@
+import { createHash } from 'node:crypto'
+import { existsSync, readFileSync, statSync } from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+function macArtifacts(isUnsigned) {
+  const prefix = isUnsigned ? 'DAEMON-unsigned-arm64' : 'DAEMON-arm64'
+  return [`${prefix}.dmg`, `${prefix}.zip`]
+}
+
+function fail(message) {
+  throw new Error(`[mac-release] ${message}`)
+}
+
+function sha512(filePath) {
+  return createHash('sha512').update(readFileSync(filePath)).digest('base64')
+}
+
+function metadataEntry(metadata, artifactName) {
+  const escapedName = artifactName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+  const match = metadata.match(
+    new RegExp(`- url: ${escapedName}\\r?\\n\\s+sha512: ([^\\r\\n]+)\\r?\\n\\s+size: (\\d+)`),
+  )
+  if (!match) fail(`latest-mac.yml is missing ${artifactName}`)
+  return { sha512: match[1].trim(), size: Number(match[2]) }
+}
+
+export function verifyMacRelease(releaseDir, expectedVersion, { isUnsigned = false } = {}) {
+  const artifacts = macArtifacts(isUnsigned)
+  const zipName = artifacts.find((name) => name.endsWith('.zip'))
+  const metadataPath = path.join(releaseDir, 'latest-mac.yml')
+  if (!existsSync(metadataPath)) fail(`missing ${metadataPath}`)
+
+  const metadata = readFileSync(metadataPath, 'utf8')
+  if (!metadata.includes(`version: ${expectedVersion}`)) {
+    fail(`latest-mac.yml version does not match ${expectedVersion}`)
+  }
+  if (!metadata.includes(`path: ${zipName}`)) {
+    fail(`latest-mac.yml updater path is not ${zipName}`)
+  }
+  if (/DAEMON-(?:unsigned-)?(?:x64|universal)\.(?:dmg|zip)/.test(metadata)) {
+    fail('latest-mac.yml contains a non-arm64 artifact')
+  }
+
+  for (const artifactName of artifacts) {
+    const artifactPath = path.join(releaseDir, artifactName)
+    const blockmapPath = `${artifactPath}.blockmap`
+    if (!existsSync(artifactPath)) fail(`missing ${artifactPath}`)
+    if (!existsSync(blockmapPath)) fail(`missing ${blockmapPath}`)
+
+    const entry = metadataEntry(metadata, artifactName)
+    if (entry.size !== statSync(artifactPath).size) {
+      fail(`${artifactName} size does not match latest-mac.yml`)
+    }
+    if (entry.sha512 !== sha512(artifactPath)) {
+      fail(`${artifactName} sha512 does not match latest-mac.yml`)
+    }
+  }
+
+  console.log(`[mac-release] verified ${expectedVersion} arm64 DMG, ZIP, blockmaps, and updater metadata`)
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === path.resolve(process.argv[1])) {
+  const releaseDir = path.resolve(process.argv[2] ?? '')
+  const expectedVersion = process.argv[3]
+  const flags = process.argv.slice(4)
+  if (!process.argv[2] || !expectedVersion || flags.some((flag) => flag !== '--unsigned') || flags.length > 1) {
+    fail('usage: verify-macos-artifacts.mjs <release-dir> <version> [--unsigned]')
+  }
+  verifyMacRelease(releaseDir, expectedVersion, { isUnsigned: flags[0] === '--unsigned' })
+}
diff --git a/scripts/smoke/lite-app-smoke.mjs b/scripts/smoke/lite-app-smoke.mjs
new file mode 100644
index 00000000..39dd32c6
--- /dev/null
+++ b/scripts/smoke/lite-app-smoke.mjs
@@ -0,0 +1,140 @@
+/**
+ * DAEMON Lite packaged smoke: boot the packaged Lite exe with a fresh
+ * userData sandbox, assert onboarding renders, bypass it, assert the home
+ * shell mounts and aria:models round-trips. Mirrors packaged-app-smoke.mjs.
+ */
+import assert from 'node:assert/strict'
+import { spawn } from 'node:child_process'
+import { existsSync, mkdtempSync, readFileSync, rmSync } from 'node:fs'
+import net from 'node:net'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { chromium } from 'playwright'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const repoRoot = path.resolve(__dirname, '..', '..')
+const pkg = JSON.parse(readFileSync(path.join(repoRoot, 'package.json'), 'utf8'))
+
+function defaultPackagedExecutable() {
+  const releaseDir = path.join(repoRoot, 'release-lite', pkg.version)
+  if (process.platform === 'darwin') {
+    return path.join(releaseDir, 'mac-arm64', 'DAEMON.app', 'Contents', 'MacOS', 'DAEMON')
+  }
+  if (process.platform === 'linux') return path.join(releaseDir, 'linux-unpacked', 'DAEMON')
+  return path.join(releaseDir, 'win-unpacked', 'DAEMON.exe')
+}
+
+const defaultExePath = defaultPackagedExecutable()
+const packagedExe = process.env.DAEMON_PACKAGED_EXE || defaultExePath
+
+const sandboxRoot = mkdtempSync(path.join(tmpdir(), 'daemon-lite-smoke-'))
+const userDataDir = path.join(sandboxRoot, 'userData')
+
+let appProcess
+let browser
+
+function logStep(message) {
+  console.log(`[lite-smoke] ${message}`)
+}
+
+function getFreePort() {
+  return new Promise((resolve, reject) => {
+    const server = net.createServer()
+    server.unref()
+    server.on('error', reject)
+    server.listen(0, '127.0.0.1', () => {
+      const address = server.address()
+      server.close(() => resolve(address.port))
+    })
+  })
+}
+
+function waitForPort(port, timeoutMs = 30000) {
+  const deadline = Date.now() + timeoutMs
+  return new Promise((resolve, reject) => {
+    const tryConnect = () => {
+      const socket = net.connect({ port, host: '127.0.0.1' })
+      socket.once('connect', () => { socket.destroy(); resolve() })
+      socket.once('error', () => {
+        socket.destroy()
+        if (Date.now() >= deadline) return reject(new Error(`Timed out waiting for port ${port}`))
+        setTimeout(tryConnect, 250)
+      })
+    }
+    tryConnect()
+  })
+}
+
+async function main() {
+  assert.ok(existsSync(packagedExe), `packaged Lite exe missing: ${packagedExe} — run package:lite first`)
+  const cdpPort = await getFreePort()
+
+  logStep(`launching ${packagedExe}`)
+  appProcess = spawn(packagedExe, [], {
+    env: {
+      ...process.env,
+      NODE_OPTIONS: '',
+      DAEMON_SMOKE_TEST: '1',
+      DAEMON_SMOKE_CDP_PORT: String(cdpPort),
+      DAEMON_USER_DATA_DIR: userDataDir,
+    },
+    stdio: ['ignore', 'pipe', 'pipe'],
+    detached: false,
+  })
+  appProcess.stdout.on('data', (chunk) => process.stdout.write(chunk))
+  appProcess.stderr.on('data', (chunk) => process.stderr.write(chunk))
+
+  await waitForPort(cdpPort)
+  browser = await chromium.connectOverCDP(`http://127.0.0.1:${cdpPort}`)
+  const context = browser.contexts()[0]
+  const page = context.pages().find((p) => p.url().includes('lite.html')) ?? context.pages()[0]
+  assert.ok(page, 'no renderer page found over CDP')
+
+  logStep('waiting for onboarding')
+  await page.waitForSelector('text=Your AI coding agent.', { timeout: 30000 })
+
+  logStep('bypassing onboarding')
+  await page.evaluate(() => window.daemon.lite.setOnboardingComplete(true))
+  await page.reload()
+
+  logStep('waiting for home shell')
+  await page.waitForSelector('text=New chat', { timeout: 30000 })
+  await page.waitForSelector('textarea', { timeout: 15000 })
+
+  logStep('checking aria:models round-trip')
+  const models = await page.evaluate(() => window.daemon.aria.models())
+  assert.equal(models.ok, true, `aria:models failed: ${models.error ?? 'unknown'}`)
+  assert.ok(Array.isArray(models.data) && models.data.length > 0, 'aria:models returned no models')
+
+  logStep('checking pop-out browser allowlist')
+  const disallowed = await page.evaluate(() => window.daemon.lite.popoutOpen('http://evil.example.com'))
+  assert.equal(disallowed.data?.opened, false, 'pop-out allowlist should reject remote http')
+  const allowed = await page.evaluate(() => window.daemon.lite.popoutOpen('https://example.com'))
+  assert.equal(allowed.data?.opened, true, 'pop-out should open an https URL')
+
+  logStep('checking Tools section reveal + Scanner route')
+  // Start collapsed, then expand via the Tools header so the state is deterministic.
+  await page.evaluate(() => window.daemon.lite.setShowTools(false))
+  await page.reload()
+  await page.click('text=Tools')
+  await page.click('text=Scanner')
+  await page.waitForSelector('text=/check authorities, snipers, and bundles/', { timeout: 15000 })
+
+  logStep(`PASS — onboarding, shell, ${models.data.length} models, pop-out, and tools verified`)
+}
+
+main()
+  .then(() => process.exitCode = 0)
+  .catch((err) => {
+    console.error('[lite-smoke] FAIL:', err.message)
+    process.exitCode = 1
+  })
+  .finally(async () => {
+    try { await browser?.close() } catch { /* already closed */ }
+    try { appProcess?.kill() } catch { /* already dead */ }
+    setTimeout(() => {
+      try { rmSync(sandboxRoot, { recursive: true, force: true }) } catch { /* locked on Windows */ }
+      process.exit(process.exitCode ?? 0)
+    }, 1500)
+  })
diff --git a/scripts/smoke/lite-workbench-smoke.mjs b/scripts/smoke/lite-workbench-smoke.mjs
new file mode 100644
index 00000000..9e724c5e
--- /dev/null
+++ b/scripts/smoke/lite-workbench-smoke.mjs
@@ -0,0 +1,303 @@
+import assert from 'node:assert/strict'
+import { spawn } from 'node:child_process'
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs'
+import net from 'node:net'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { chromium } from 'playwright'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const repoRoot = path.resolve(__dirname, '..', '..')
+const pkg = JSON.parse(readFileSync(path.join(repoRoot, 'package.json'), 'utf8'))
+
+function defaultPackagedExecutable() {
+  const releaseDir = path.join(repoRoot, 'release-lite', pkg.version)
+  if (process.platform === 'darwin') {
+    return path.join(releaseDir, 'mac-arm64', 'DAEMON.app', 'Contents', 'MacOS', 'DAEMON')
+  }
+  if (process.platform === 'linux') return path.join(releaseDir, 'linux-unpacked', 'DAEMON')
+  return path.join(releaseDir, 'win-unpacked', 'DAEMON.exe')
+}
+
+const defaultExePath = defaultPackagedExecutable()
+const packagedExe = process.env.DAEMON_PACKAGED_EXE || defaultExePath
+const sandboxRoot = mkdtempSync(path.join(tmpdir(), 'daemon-lite-workbench-'))
+const userDataDir = path.join(sandboxRoot, 'userData')
+const projectDir = path.join(sandboxRoot, 'solana-monitor')
+const readmePath = path.join(projectDir, 'README.md')
+const outputDir = path.join(repoRoot, 'output', 'playwright')
+const savedMarker = '# Solana monitor\n\nSaved from packaged DAEMON Workbench.\n'
+const shortcutModifier = process.platform === 'darwin' ? 'Meta' : 'Control'
+
+const terminalCommands = process.platform === 'win32'
+  ? {
+      ready: 'Write-Output ("__DAEMON_" + "TERMINAL_READY__")',
+      project: 'Write-Output ("__DAEMON_" + "PROJECT__" + (Get-Content .\\package.json | ConvertFrom-Json).name)',
+      node: 'node --version; Write-Output ("__DAEMON_" + "NODE_DONE__")',
+      compact: 'Write-Output ("__DAEMON_" + "COMPACT_READY__")',
+    }
+  : {
+      ready: "printf '%s\\n' '__DAEMON_''TERMINAL_READY__'",
+      project: `node -p '"__DAEMON_" + "PROJECT__" + require("./package.json").name'`,
+      node: "node --version; printf '%s\\n' '__DAEMON_''NODE_DONE__'",
+      compact: "printf '%s\\n' '__DAEMON_''COMPACT_READY__'",
+    }
+
+let appProcess
+let browser
+const rendererFailures = []
+
+function logStep(message) {
+  console.log(`[lite-workbench-smoke] ${message}`)
+}
+
+function createFixture() {
+  mkdirSync(path.join(projectDir, 'src'), { recursive: true })
+  writeFileSync(readmePath, '# Solana monitor\n\nLocal devnet fixture.\n', 'utf8')
+  writeFileSync(path.join(projectDir, 'package.json'), JSON.stringify({
+    name: 'solana-monitor',
+    private: true,
+    scripts: { test: 'node --test' },
+  }, null, 2), 'utf8')
+  writeFileSync(path.join(projectDir, 'src', 'index.js'), "console.log('devnet')\n", 'utf8')
+}
+
+function getFreePort() {
+  return new Promise((resolve, reject) => {
+    const server = net.createServer()
+    server.unref()
+    server.on('error', reject)
+    server.listen(0, '127.0.0.1', () => {
+      const address = server.address()
+      if (!address || typeof address === 'string') {
+        server.close(() => reject(new Error('Unable to allocate a CDP port')))
+        return
+      }
+      server.close(() => resolve(address.port))
+    })
+  })
+}
+
+function waitForPort(port, timeoutMs = 30_000) {
+  const deadline = Date.now() + timeoutMs
+  return new Promise((resolve, reject) => {
+    const connect = () => {
+      const socket = net.connect({ port, host: '127.0.0.1' })
+      socket.once('connect', () => { socket.destroy(); resolve() })
+      socket.once('error', () => {
+        socket.destroy()
+        if (Date.now() >= deadline) {
+          reject(new Error(`Timed out waiting for CDP port ${port}`))
+          return
+        }
+        setTimeout(connect, 250)
+      })
+    }
+    connect()
+  })
+}
+
+function attachDiagnostics(page) {
+  page.on('pageerror', (error) => rendererFailures.push(`pageerror: ${error.message}`))
+  page.on('console', (message) => {
+    if (message.type() === 'error') rendererFailures.push(`console: ${message.text()}`)
+  })
+}
+
+async function getLitePage() {
+  const deadline = Date.now() + 30_000
+  while (Date.now() < deadline) {
+    const context = browser?.contexts()?.[0]
+    const page = context?.pages().find((candidate) => candidate.url().includes('lite.html'))
+    if (page) return page
+    await new Promise((resolve) => setTimeout(resolve, 250))
+  }
+  throw new Error('Timed out waiting for the DAEMON renderer')
+}
+
+async function waitForFile(expected, timeoutMs = 10_000) {
+  const deadline = Date.now() + timeoutMs
+  while (Date.now() < deadline) {
+    if (readFileSync(readmePath, 'utf8') === expected) return
+    await new Promise((resolve) => setTimeout(resolve, 100))
+  }
+  assert.equal(readFileSync(readmePath, 'utf8'), expected, 'editor shortcut did not save the edited README')
+}
+
+async function waitForTerminalText(page, expected, timeout = 60_000) {
+  await page.waitForFunction(
+    (needle) => document.querySelector('.xterm-rows')?.textContent?.includes(needle),
+    expected,
+    { timeout },
+  )
+}
+
+async function runTerminalCommand(page, command, completionMarker) {
+  const input = page.locator('.xterm-helper-textarea').first()
+  await input.focus()
+  await page.keyboard.type(command)
+  await page.keyboard.press('Enter')
+  await waitForTerminalText(page, completionMarker)
+  return page.locator('.xterm-rows').first().textContent()
+}
+
+async function run() {
+  assert.ok(existsSync(packagedExe), `packaged Lite executable missing: ${packagedExe}`)
+  createFixture()
+  mkdirSync(outputDir, { recursive: true })
+  const cdpPort = await getFreePort()
+
+  logStep(`launching ${packagedExe}`)
+  appProcess = spawn(packagedExe, [], {
+    cwd: repoRoot,
+    env: {
+      ...process.env,
+      NODE_OPTIONS: '',
+      DAEMON_SMOKE_TEST: '1',
+      DAEMON_SMOKE_CDP_PORT: String(cdpPort),
+      DAEMON_SMOKE_PROJECT_DIALOG_PATH: projectDir,
+      DAEMON_USER_DATA_DIR: userDataDir,
+    },
+    stdio: ['ignore', 'pipe', 'pipe'],
+  })
+  appProcess.stdout.on('data', (chunk) => process.stdout.write(chunk))
+  appProcess.stderr.on('data', (chunk) => process.stderr.write(chunk))
+
+  await waitForPort(cdpPort)
+  browser = await chromium.connectOverCDP(`http://127.0.0.1:${cdpPort}`)
+  const page = await getLitePage()
+  attachDiagnostics(page)
+
+  logStep('bypassing first-run provider setup')
+  await page.waitForSelector('text=Your AI coding agent.', { timeout: 30_000 })
+  await page.evaluate(() => window.daemon.lite.setOnboardingComplete(true))
+  await page.reload()
+
+  logStep('importing the isolated project fixture')
+  await page.getByRole('button', { name: 'New chat' }).waitFor({ timeout: 30_000 })
+  await page.getByRole('button', { name: 'Open project', exact: true }).click()
+  await page.getByRole('button', { name: path.basename(projectDir), exact: true }).waitFor({ timeout: 20_000 })
+  await page.setViewportSize({ width: 1440, height: 900 })
+  await page.screenshot({ path: path.join(outputDir, 'lite-simple-chat-desktop.png'), fullPage: true })
+  await page.setViewportSize({ width: 820, height: 720 })
+  await page.waitForTimeout(500)
+  await page.screenshot({ path: path.join(outputDir, 'lite-simple-chat-compact.png'), fullPage: true })
+  await page.setViewportSize({ width: 1440, height: 900 })
+  await page.getByRole('button', { name: 'Terminal', exact: true }).click()
+  await page.getByText('GUARDED WORKFLOWS: LOCALNET / DEVNET', { exact: true }).waitFor()
+  assert.equal(await page.getByRole('button', { name: 'Build', exact: true }).isDisabled(), true, 'non-Solana project must not enable Anchor build')
+  assert.equal(await page.getByRole('button', { name: 'Local validator', exact: true }).isDisabled(), true, 'non-Solana project must not enable validator')
+
+  logStep('opening and saving README.md')
+  await page.getByRole('button', { name: 'Code', exact: true }).click()
+  await page.getByRole('treeitem', { name: /README.md/ }).click()
+  await page.getByRole('region', { name: 'Code editor' }).waitFor()
+  const editorSurface = page.locator('.monaco-editor .view-lines').first()
+  await editorSurface.click()
+  await page.keyboard.press(`${shortcutModifier}+A`)
+  await page.keyboard.type(savedMarker)
+  await page.getByRole('button', { name: 'Save' }).waitFor({ state: 'visible' })
+  await page.waitForFunction(() => {
+    const save = Array.from(document.querySelectorAll('button')).find((button) => button.textContent?.trim() === 'Save')
+    return save instanceof HTMLButtonElement && !save.disabled
+  })
+  await page.keyboard.press(`${shortcutModifier}+S`)
+  await waitForFile(savedMarker)
+  await page.screenshot({ path: path.join(outputDir, 'lite-simple-code-desktop.png'), fullPage: true })
+  await page.setViewportSize({ width: 820, height: 720 })
+  await page.waitForTimeout(500)
+  await page.screenshot({ path: path.join(outputDir, 'lite-simple-code-compact.png'), fullPage: true })
+  await page.setViewportSize({ width: 1440, height: 900 })
+
+  logStep('creating a project terminal and running Node')
+  await page.getByRole('button', { name: 'Terminal', exact: true }).click()
+  await page.getByRole('button', { name: 'New terminal' }).click()
+  await page.locator('.xterm-helper-textarea').first().waitFor({ timeout: 60_000 })
+  await runTerminalCommand(page, terminalCommands.ready, '__DAEMON_TERMINAL_READY__')
+  const projectOutput = await runTerminalCommand(
+    page,
+    terminalCommands.project,
+    '__DAEMON_PROJECT__',
+  )
+  assert.ok(projectOutput?.includes('__DAEMON_PROJECT__solana-monitor'), 'terminal did not resolve the imported project fixture')
+  const nodeOutput = await runTerminalCommand(
+    page,
+    terminalCommands.node,
+    '__DAEMON_NODE_DONE__',
+  )
+  assert.match(nodeOutput ?? '', /v\d+\.\d+\.\d+__DAEMON_NODE_DONE__/, 'terminal did not report a Node.js version')
+  await page.screenshot({ path: path.join(outputDir, 'lite-simple-terminal-desktop.png'), fullPage: true })
+  await page.setViewportSize({ width: 820, height: 720 })
+  await page.waitForTimeout(500)
+  await runTerminalCommand(
+    page,
+    terminalCommands.compact,
+    '__DAEMON_COMPACT_READY__',
+  )
+  await page.screenshot({ path: path.join(outputDir, 'lite-simple-terminal-compact.png'), fullPage: true })
+  await page.setViewportSize({ width: 1440, height: 900 })
+
+  logStep('opening Meme Tech Studio and inspecting live benchmark evidence')
+  await page.getByRole('button', { name: 'Meme Tech', exact: true }).click()
+  await page.getByRole('region', { name: 'Meme Tech workspace' }).waitFor()
+  await page.getByText('Unknown', { exact: true }).first().waitFor()
+  if (process.env.BIRDEYE_API_KEY) {
+    await page.getByRole('button', { name: 'Inspect', exact: true }).click()
+    await page.getByText('PROVIDER RISK EVIDENCE', { exact: true }).waitFor({ timeout: 30_000 })
+    await page.getByText(/Birdeye \+ DEX cross-check|degraded data/).waitFor({ timeout: 30_000 })
+  } else {
+    await page.getByRole('button', { name: 'Inspect', exact: true }).click()
+    await page.getByRole('alert').getByText(/Birdeye is not configured/).waitFor({ timeout: 30_000 })
+    await page.getByText('degraded data', { exact: true }).waitFor({ timeout: 30_000 })
+  }
+
+  logStep('capturing desktop and compact Meme Tech Studio states')
+  await page.setViewportSize({ width: 1440, height: 900 })
+  await page.screenshot({ path: path.join(outputDir, 'lite-meme-tech-desktop.png'), fullPage: true })
+  await page.setViewportSize({ width: 820, height: 720 })
+  await page.waitForTimeout(500)
+  await page.screenshot({ path: path.join(outputDir, 'lite-meme-tech-compact.png'), fullPage: true })
+
+  logStep('capturing the canonical Wallet master-detail layout')
+  await page.getByRole('button', { name: 'Tools', exact: true }).click()
+  await page.getByRole('button', { name: 'Wallet', exact: true }).click()
+  await page.getByText('Addresses stay watch-only.', { exact: false }).waitFor()
+  await page.getByText('Loading…', { exact: true }).waitFor({ state: 'detached' })
+  assert.equal(await page.getByRole('button', { name: 'Open DAEMON IDE' }).count(), 0, 'canonical app must not expose a dead legacy handoff')
+  await page.setViewportSize({ width: 1440, height: 900 })
+  await page.screenshot({ path: path.join(outputDir, 'daemon-wallet-desktop.png'), fullPage: true })
+  await page.setViewportSize({ width: 820, height: 720 })
+  await page.waitForTimeout(500)
+  await page.screenshot({ path: path.join(outputDir, 'daemon-wallet-compact.png'), fullPage: true })
+
+  assert.equal(rendererFailures.length, 0, `renderer failures detected:\n${rendererFailures.join('\n')}`)
+  logStep('PASS: import, repo-aware guards, edit/save, scoped terminal, Meme Tech and Wallet layouts, screenshots, and renderer diagnostics')
+}
+
+try {
+  await run()
+} finally {
+  await browser?.close().catch(() => {})
+  if (appProcess && appProcess.exitCode === null) {
+    appProcess.kill('SIGTERM')
+    await new Promise((resolve) => {
+      const timer = setTimeout(() => {
+        appProcess.kill('SIGKILL')
+        resolve()
+      }, 5000)
+      appProcess.once('exit', () => {
+        clearTimeout(timer)
+        resolve()
+      })
+    })
+  }
+  rmSync(sandboxRoot, { recursive: true, force: true })
+}
diff --git a/src/lib/ariaUiEffects.ts b/src/lib/ariaUiEffects.ts
index 0bb97fd1..f555fd8e 100644
--- a/src/lib/ariaUiEffects.ts
+++ b/src/lib/ariaUiEffects.ts
@@ -6,6 +6,7 @@
 import type { AriaUiEffect } from '../../electron/shared/types'
 import { useUIStore } from '../store/ui'
 import { useWorkflowShellStore } from '../store/workflowShell'
+import { useBrowserStore } from '../store/browser'
 
 const INTEGRATION_ENABLE_STORAGE_KEY = 'daemon:integration-command-center:enabled'
 
@@ -110,11 +111,53 @@ export function applyUiEffect(effect: AriaUiEffect): void {
       // full context; headless execution needs the ICC's IntegrationContext.
       useUIStore.getState().openWorkspaceTool('integrations')
       break
+    case 'open_preview':
+      // Load a localhost dev-server URL in the embedded browser (BrowserMode).
+      // Loopback is allowlisted by the webview security guard; remote http is not.
+      useBrowserStore.getState().setUrl(effect.url)
+      useUIStore.getState().openBrowserTab()
+      break
+    case 'start_dev_server':
+      // Fire-and-forget path: kick off the dev server without awaiting the id.
+      // The two-phase path (runUiEffectWithData) is preferred; it returns the port.
+      void startDevServer(effect)
+      break
+    case 'open_scaffold':
+      // Preselect the template + name, then open the ProjectStarter wizard.
+      useUIStore.getState().setScaffoldPreset({ templateId: effect.templateId, projectName: effect.projectName })
+      useUIStore.getState().openWorkspaceTool('starter')
+      break
   }
 }
 
+/**
+ * Create a PTY terminal that runs the discovered dev command, register its port,
+ * and add it to the terminal store — the same flow ProjectStarter uses for the
+ * meme site / game preview. Returns the created terminal id + preview url.
+ */
+async function startDevServer(effect: Extract<AriaUiEffect, { type: 'start_dev_server' }>): Promise<{ ok: boolean; terminalId?: string; url?: string; error?: string }> {
+  const ui = useUIStore.getState()
+  const activeProjectId = ui.activeProjectId
+  if (!activeProjectId) return { ok: false, error: 'No active project.' }
+  const startupCommand = `${effect.command} -- --host 127.0.0.1 --port ${effect.port}`
+  const res = await window.daemon.terminal.create({
+    cwd: effect.projectPath,
+    startupCommand,
+    userInitiated: true,
+  })
+  if (!res.ok || !res.data) return { ok: false, error: res.error ?? 'Failed to start dev server terminal.' }
+  ui.addTerminal(activeProjectId, res.data.id, effect.label, null)
+  await window.daemon.ports.register(effect.port, activeProjectId, effect.label)
+  ui.setCenterMode('canvas')
+  return { ok: true, terminalId: res.data.id, url: `http://127.0.0.1:${effect.port}` }
+}
+
 /** Apply a two-phase effect and return data for the tool_result. */
 export async function runUiEffectWithData(effect: AriaUiEffect): Promise<unknown> {
+  if (effect.type === 'start_dev_server') {
+    // Await terminal creation so the tool_result carries the real port/url + status.
+    return startDevServer(effect)
+  }
   applyUiEffect(effect)
   if (effect.type === 'run_integration') {
     return { opened: 'integrations', actionId: effect.actionId, note: 'Opened Integrations — run the check there.' }
diff --git a/src/lite/LiteApp.module.css b/src/lite/LiteApp.module.css
new file mode 100644
index 00000000..4e84f91d
--- /dev/null
+++ b/src/lite/LiteApp.module.css
@@ -0,0 +1,50 @@
+.app {
+  display: flex;
+  flex-direction: column;
+  height: 100vh;
+  background: var(--bg-app);
+  color: var(--t1);
+  font-family: var(--font-ui);
+  overflow: hidden;
+}
+
+/* Draggable strip under the hidden native titlebar — blends with the app so
+   the window controls sit on the same dark surface (Cursor-style). */
+.titlebar {
+  height: 34px;
+  flex-shrink: 0;
+  display: flex;
+  align-items: center;
+  padding: 0 14px;
+  -webkit-app-region: drag;
+  user-select: none;
+}
+
+.titlebarText {
+  font-size: var(--fs-11);
+  color: var(--t4);
+  letter-spacing: 0.04em;
+}
+
+.body {
+  flex: 1;
+  min-height: 0;
+  display: grid;
+  grid-template-columns: 248px 1fr;
+}
+
+.main {
+  position: relative;
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  container-type: inline-size;
+  background: var(--bg-workspace);
+  overflow: hidden;
+}
+
+@media (max-width: 640px) {
+  .body {
+    grid-template-columns: 60px minmax(0, 1fr);
+  }
+}
diff --git a/src/lite/LiteApp.tsx b/src/lite/LiteApp.tsx
new file mode 100644
index 00000000..9a13d586
--- /dev/null
+++ b/src/lite/LiteApp.tsx
@@ -0,0 +1,115 @@
+import { useCallback, useEffect, useRef, useState } from 'react'
+import { useAriaStore } from '../store/aria'
+import { LiteSidebar } from './LiteSidebar'
+import { LiteSettings } from './LiteSettings'
+import { LiteOnboarding } from './LiteOnboarding'
+import { LiteWallet } from './wallet/LiteWallet'
+import { LiteTrade } from './trade/LiteTrade'
+import { LiteScanner } from './scanner/LiteScanner'
+import { LiteWorkbench } from './workbench/LiteWorkbench'
+import '../panels/AgentWorkbench/AgentWorkbench.css'
+import styles from './LiteApp.module.css'
+
+export type LiteView = 'workspace' | 'settings' | 'wallet' | 'trade' | 'scanner'
+
+export default function LiteApp() {
+  const [onboarded, setOnboarded] = useState<boolean | null>(null)
+  const [view, setView] = useState<LiteView>('workspace')
+  const [showTools, setShowTools] = useState(false)
+  const [draft, setDraft] = useState('')
+  const [conversationResetKey, setConversationResetKey] = useState(0)
+  const mainRef = useRef<HTMLElement | null>(null)
+
+  useEffect(() => {
+    void window.daemon.lite.isOnboardingComplete().then((res) => {
+      setOnboarded(res.ok ? Boolean(res.data) : false)
+    })
+    void window.daemon.lite.getShowTools().then((res) => {
+      if (res.ok) setShowTools(Boolean(res.data))
+    })
+  }, [])
+
+  useEffect(() => {
+    if (!onboarded) return
+    const store = useAriaStore.getState()
+    const unsubscribe = store.subscribe()
+    void store.initSessions()
+    void store.loadModels()
+    void store.loadProviderStatus()
+    return unsubscribe
+  }, [onboarded])
+
+  const focusComposer = useCallback(() => {
+    // The shared Composer exposes no input ref; the shell owns one textarea.
+    requestAnimationFrame(() => {
+      mainRef.current?.querySelector('textarea')?.focus()
+    })
+  }, [])
+
+  const prefillDraft = useCallback((text: string) => {
+    setView('workspace')
+    setDraft(text)
+    focusComposer()
+  }, [focusComposer])
+
+  const sendDraft = useCallback(() => {
+    const content = draft.trim()
+    if (!content) return
+    setDraft('')
+    void useAriaStore.getState().sendMessage(content)
+  }, [draft])
+
+  const toggleTools = useCallback(() => {
+    setShowTools((prev) => {
+      const next = !prev
+      void window.daemon.lite.setShowTools(next)
+      return next
+    })
+  }, [])
+
+  if (onboarded === null) return null
+
+  return (
+    <div className={styles.app}>
+      <div className={styles.titlebar}>
+        <span className={styles.titlebarText}>Daemon</span>
+      </div>
+      {!onboarded ? (
+        <LiteOnboarding onDone={() => setOnboarded(true)} />
+      ) : (
+        <div className={styles.body}>
+          <LiteSidebar
+            view={view}
+            showTools={showTools}
+            onToggleTools={toggleTools}
+            onNewAgent={() => {
+              setView('workspace')
+              setDraft('')
+              setConversationResetKey((value) => value + 1)
+              void useAriaStore.getState().newChat()
+              focusComposer()
+            }}
+            onSelectView={setView}
+            onOpenSettings={() => setView(view === 'settings' ? 'workspace' : 'settings')}
+            onPickSession={() => { setView('workspace'); setConversationResetKey((value) => value + 1) }}
+          />
+          <main ref={mainRef} className={styles.main}>
+            {view === 'workspace' ? (
+              <LiteWorkbench draft={draft} onDraftChange={setDraft} onSend={sendDraft} conversationResetKey={conversationResetKey} />
+            ) : view === 'settings' ? (
+              <LiteSettings onBack={() => setView('workspace')} />
+            ) : view === 'wallet' ? (
+              <LiteWallet onAskAria={prefillDraft} />
+            ) : view === 'trade' ? (
+              <LiteTrade onAskAria={prefillDraft} />
+            ) : view === 'scanner' ? (
+              <LiteScanner onAskAria={prefillDraft} />
+            ) : (
+              <LiteWorkbench draft={draft} onDraftChange={setDraft} onSend={sendDraft} conversationResetKey={conversationResetKey} />
+            )}
+          </main>
+        </div>
+      )}
+    </div>
+  )
+}
diff --git a/src/lite/LiteChat.module.css b/src/lite/LiteChat.module.css
new file mode 100644
index 00000000..dfa1b0d8
--- /dev/null
+++ b/src/lite/LiteChat.module.css
@@ -0,0 +1,27 @@
+.chat {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+}
+
+.scroll {
+  flex: 1;
+  min-height: 0;
+  overflow-y: auto;
+  padding: 20px 24px 8px;
+}
+
+.thread {
+  max-width: 760px;
+  margin: 0 auto;
+}
+
+.dock {
+  padding: 8px 24px 16px;
+}
+
+.composer {
+  max-width: 760px;
+  margin: 0 auto;
+}
diff --git a/src/lite/LiteChat.tsx b/src/lite/LiteChat.tsx
new file mode 100644
index 00000000..4aa4ff76
--- /dev/null
+++ b/src/lite/LiteChat.tsx
@@ -0,0 +1,41 @@
+import { useRef } from 'react'
+import { useAriaStore } from '../store/aria'
+import { AgentTranscript } from '../panels/AgentWorkbench/AgentTranscript'
+import { useStickyScroll } from '../hooks/useStickyScroll'
+import { LiteComposer } from './LiteComposer'
+import styles from './LiteChat.module.css'
+
+interface LiteChatProps {
+  draft: string
+  onDraftChange: (value: string) => void
+  onSend: () => void
+}
+
+export function LiteChat({ draft, onDraftChange, onSend }: LiteChatProps) {
+  const turns = useAriaStore((s) => s.turns)
+  const isLoading = useAriaStore((s) => s.isLoading)
+  const scrollRef = useRef<HTMLDivElement | null>(null)
+  useStickyScroll(scrollRef, [turns, isLoading])
+
+  return (
+    <div className={styles.chat}>
+      <div ref={scrollRef} className={styles.scroll}>
+        <div className={styles.thread}>
+          <AgentTranscript turns={turns} isLoading={isLoading} />
+        </div>
+      </div>
+      <div className={styles.dock}>
+        <div className={styles.composer}>
+          <LiteComposer
+            value={draft}
+            onChange={onDraftChange}
+            onSend={onSend}
+            placeholder="Message DAEMON"
+            ariaLabel="Message DAEMON"
+            disabled={isLoading}
+          />
+        </div>
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/LiteComposer.module.css b/src/lite/LiteComposer.module.css
new file mode 100644
index 00000000..3004875f
--- /dev/null
+++ b/src/lite/LiteComposer.module.css
@@ -0,0 +1,86 @@
+.composer {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  padding: 11px 12px 8px;
+  background: var(--s1);
+  border: 1px solid var(--line);
+  border-radius: 12px;
+  transition: border-color 120ms ease;
+}
+
+.composer:focus-within {
+  border-color: var(--line-2);
+}
+
+.input {
+  width: 100%;
+  min-height: 38px;
+  max-height: 200px;
+  resize: none;
+  border: none;
+  background: transparent;
+  color: var(--t1);
+  font-family: var(--font-ui);
+  font-size: var(--fs-13);
+  line-height: 1.5;
+}
+
+.input::placeholder {
+  color: var(--t4);
+}
+
+.input:focus,
+.input:focus-visible {
+  outline: none;
+  box-shadow: none;
+}
+
+.row {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.modeChip {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 3px 8px;
+  border-radius: 999px;
+  background: var(--accent-green-glow);
+  color: var(--accent-green);
+  font-size: var(--fs-10);
+  font-weight: 600;
+}
+
+.model {
+  color: var(--t3);
+}
+
+.spacer {
+  flex: 1;
+}
+
+.send {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 23px;
+  height: 23px;
+  border: none;
+  border-radius: 50%;
+  background: var(--accent-green);
+  color: #06110c;
+  cursor: pointer;
+  transition: opacity 120ms ease;
+}
+
+.send:hover:not(:disabled) {
+  background: color-mix(in srgb, var(--accent-green) 88%, white);
+}
+
+.send:disabled {
+  opacity: 0.35;
+  cursor: default;
+}
diff --git a/src/lite/LiteComposer.tsx b/src/lite/LiteComposer.tsx
new file mode 100644
index 00000000..62260698
--- /dev/null
+++ b/src/lite/LiteComposer.tsx
@@ -0,0 +1,61 @@
+import { useEffect, useRef } from 'react'
+import type { KeyboardEvent } from 'react'
+import { ArrowUp } from '@phosphor-icons/react'
+import { ModelDropdown } from '../components/Panel'
+import styles from './LiteComposer.module.css'
+
+interface LiteComposerProps {
+  value: string
+  onChange: (value: string) => void
+  onSend: () => void
+  placeholder?: string
+  ariaLabel?: string
+  disabled?: boolean
+  autoFocus?: boolean
+}
+
+/** Cursor-style composer: large rounded card, textarea on top, mode chip +
+ *  model picker + send arrow on the bottom row. */
+export function LiteComposer({ value, onChange, onSend, placeholder, ariaLabel = 'Message ARIA', disabled, autoFocus }: LiteComposerProps) {
+  const inputRef = useRef<HTMLTextAreaElement | null>(null)
+
+  useEffect(() => {
+    if (autoFocus) inputRef.current?.focus()
+  }, [autoFocus])
+
+  const handleKeyDown = (event: KeyboardEvent<HTMLTextAreaElement>) => {
+    if (event.key !== 'Enter' || event.shiftKey) return
+    event.preventDefault()
+    if (!disabled && value.trim()) onSend()
+  }
+
+  return (
+    <div className={styles.composer}>
+      <textarea
+        ref={inputRef}
+        className={styles.input}
+        value={value}
+        placeholder={placeholder ?? 'Ask anything…'}
+        aria-label={ariaLabel}
+        disabled={disabled}
+        rows={2}
+        onChange={(event) => onChange(event.currentTarget.value)}
+        onKeyDown={handleKeyDown}
+      />
+      <div className={styles.row}>
+        <ModelDropdown className={styles.model} />
+        <span className={styles.spacer} />
+        <button
+          type="button"
+          className={styles.send}
+          disabled={disabled || !value.trim()}
+          onClick={onSend}
+          title="Send"
+          aria-label="Send"
+        >
+          <ArrowUp size={14} weight="bold" aria-hidden="true" />
+        </button>
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/LiteHome.module.css b/src/lite/LiteHome.module.css
new file mode 100644
index 00000000..6fc8a067
--- /dev/null
+++ b/src/lite/LiteHome.module.css
@@ -0,0 +1,105 @@
+.home {
+  position: relative;
+  flex: 1;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  overflow-y: auto;
+  padding: 32px 32px 56px;
+}
+
+.column {
+  width: 100%;
+  max-width: 700px;
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+}
+
+.contextRow {
+  display: flex;
+  align-items: center;
+  gap: 7px;
+  padding: 0 2px;
+  font-size: var(--fs-11);
+}
+
+.contextName {
+  color: var(--t2);
+  font-weight: 600;
+}
+
+.contextSep {
+  color: var(--t4);
+}
+
+.contextMeta {
+  color: var(--t3);
+}
+
+.actions {
+  display: flex;
+  flex-direction: column;
+  margin-top: 22px;
+}
+
+.action {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  width: 100%;
+  padding: 11px 5px;
+  border: none;
+  border-bottom: 1px solid var(--line);
+  background: transparent;
+  color: inherit;
+  font-family: var(--font-ui);
+  text-align: left;
+  cursor: pointer;
+}
+
+.action:first-child {
+  border-top: 1px solid var(--line);
+}
+
+.action:hover {
+  background: var(--wash-2);
+}
+
+.actionIcon {
+  color: var(--t2);
+  flex-shrink: 0;
+}
+
+.actionTitle {
+  font-size: var(--fs-12);
+  font-weight: 600;
+  color: var(--t1);
+  white-space: nowrap;
+}
+
+.actionDesc {
+  flex: 1;
+  min-width: 0;
+  font-size: var(--fs-11);
+  color: var(--t3);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.actionChevron {
+  color: var(--t4);
+  flex-shrink: 0;
+}
+
+.hint {
+  position: absolute;
+  bottom: 18px;
+  left: 0;
+  right: 0;
+  text-align: center;
+  font-size: var(--fs-11);
+  color: var(--t4);
+  pointer-events: none;
+}
diff --git a/src/lite/LiteHome.tsx b/src/lite/LiteHome.tsx
new file mode 100644
index 00000000..b03e623a
--- /dev/null
+++ b/src/lite/LiteHome.tsx
@@ -0,0 +1,86 @@
+import { Bug, CaretRight, ListChecks, MagnifyingGlass } from '@phosphor-icons/react'
+import type { Icon } from '@phosphor-icons/react'
+import { LiteComposer } from './LiteComposer'
+import styles from './LiteHome.module.css'
+
+interface QuickAction {
+  id: string
+  title: string
+  description: string
+  prefill: string
+  icon: Icon
+}
+
+const QUICK_ACTIONS: QuickAction[] = [
+  {
+    id: 'explain',
+    title: 'Explain code',
+    description: 'Paste any code and get a plain-English walkthrough',
+    prefill: 'Explain what this code does, step by step:\n\n',
+    icon: MagnifyingGlass,
+  },
+  {
+    id: 'debug',
+    title: 'Debug an error',
+    description: 'Find the likely cause and the fix',
+    prefill: 'Help me debug this error:\n\n',
+    icon: Bug,
+  },
+  {
+    id: 'plan',
+    title: 'Plan a project',
+    description: 'Turn an idea into a step-by-step build plan',
+    prefill: 'Help me plan this project: ',
+    icon: ListChecks,
+  },
+]
+
+interface LiteHomeProps {
+  draft: string
+  onDraftChange: (value: string) => void
+  onSend: () => void
+  onQuickAction: (prefill: string) => void
+}
+
+export function LiteHome({ draft, onDraftChange, onSend, onQuickAction }: LiteHomeProps) {
+  return (
+    <div className={styles.home}>
+      <div className={styles.column}>
+        <div className={styles.contextRow}>
+          <span className={styles.contextName}>New chat</span>
+          <span className={styles.contextSep} aria-hidden="true">·</span>
+          <span className={styles.contextMeta}>This PC</span>
+        </div>
+        <LiteComposer
+          value={draft}
+          onChange={onDraftChange}
+          onSend={onSend}
+          placeholder="Ask anything. Paste code, an error, or an idea…"
+          ariaLabel="Message ARIA"
+          autoFocus
+        />
+        <div className={styles.actions}>
+          {QUICK_ACTIONS.map((action) => {
+            const Glyph = action.icon
+            return (
+              <button
+                key={action.id}
+                type="button"
+                className={styles.action}
+                onClick={() => onQuickAction(action.prefill)}
+              >
+                <Glyph size={15} className={styles.actionIcon} aria-hidden="true" />
+                <span className={styles.actionTitle}>{action.title}</span>
+                <span className={styles.actionDesc}>{action.description}</span>
+                <CaretRight size={12} className={styles.actionChevron} aria-hidden="true" />
+              </button>
+            )
+          })}
+        </div>
+      </div>
+      <div className={styles.hint}>
+        Chats stay on this device. Your API key never leaves your machine.
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/LiteOnboarding.module.css b/src/lite/LiteOnboarding.module.css
new file mode 100644
index 00000000..d7102d02
--- /dev/null
+++ b/src/lite/LiteOnboarding.module.css
@@ -0,0 +1,115 @@
+.screen {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex: 1;
+  min-height: 0;
+  background: var(--bg-workspace);
+  color: var(--t1);
+  font-family: var(--font-ui);
+}
+
+.card {
+  width: 100%;
+  max-width: 400px;
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+  padding: 28px;
+}
+
+.brand {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.mark {
+  display: inline-flex;
+  width: 20px;
+  height: 20px;
+  color: var(--accent-green);
+}
+
+.mark svg {
+  width: 100%;
+  height: 100%;
+}
+
+.name {
+  font-size: var(--fs-12);
+  font-weight: 700;
+  letter-spacing: 0.08em;
+}
+
+.headline {
+  font-size: var(--fs-24);
+  font-weight: 600;
+  letter-spacing: -0.01em;
+  margin-top: 6px;
+}
+
+.sub {
+  font-size: var(--fs-12);
+  line-height: 1.55;
+  color: var(--t3);
+}
+
+.keyInput {
+  padding: 9px 11px;
+  background: var(--field-bg);
+  border: 1px solid var(--line-2);
+  border-radius: 6px;
+  color: var(--t1);
+  font-family: var(--font-code);
+  font-size: var(--fs-12);
+}
+
+.keyInput:focus {
+  outline: none;
+  border-color: var(--accent-green-dim);
+}
+
+.error {
+  font-size: var(--fs-11);
+  line-height: 1.5;
+  color: var(--accent-red);
+}
+
+.start {
+  padding: 9px 12px;
+  border: none;
+  border-radius: 6px;
+  background: var(--accent-green);
+  color: #06110c;
+  font-family: var(--font-ui);
+  font-size: var(--fs-12);
+  font-weight: 600;
+  cursor: pointer;
+}
+
+.start:hover:not(:disabled) {
+  background: color-mix(in srgb, var(--accent-green) 88%, white);
+}
+
+.start:disabled {
+  opacity: 0.45;
+  cursor: default;
+}
+
+.help {
+  align-self: center;
+  padding: 4px;
+  border: none;
+  background: transparent;
+  color: var(--t3);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  text-decoration: underline;
+  text-underline-offset: 3px;
+  cursor: pointer;
+}
+
+.help:hover {
+  color: var(--t1);
+}
diff --git a/src/lite/LiteOnboarding.tsx b/src/lite/LiteOnboarding.tsx
new file mode 100644
index 00000000..7fcd0d83
--- /dev/null
+++ b/src/lite/LiteOnboarding.tsx
@@ -0,0 +1,122 @@
+import { useState } from 'react'
+import { DaemonMark } from '../components/DaemonMark'
+import { SegmentedControl } from '../components/Panel'
+import styles from './LiteOnboarding.module.css'
+
+type ProviderChoice = 'anthropic' | 'glm'
+
+const PROVIDER_META: Record<ProviderChoice, { keyName: string; consoleUrl: string; placeholder: string }> = {
+  anthropic: {
+    keyName: 'ANTHROPIC_API_KEY',
+    consoleUrl: 'https://console.anthropic.com/settings/keys',
+    placeholder: 'sk-ant-…',
+  },
+  glm: {
+    keyName: 'ZAI_API_KEY',
+    consoleUrl: 'https://z.ai',
+    placeholder: 'Paste your Z.AI key',
+  },
+}
+
+export function LiteOnboarding({ onDone }: { onDone: () => void }) {
+  const [provider, setProvider] = useState<ProviderChoice>('anthropic')
+  const [key, setKey] = useState('')
+  const [busy, setBusy] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  const meta = PROVIDER_META[provider]
+
+  const start = async () => {
+    const trimmed = key.trim()
+    if (!trimmed || busy) return
+    if (provider === 'anthropic' && !trimmed.startsWith('sk-ant-')) {
+      setError('That does not look like an Anthropic key. It should start with sk-ant-.')
+      return
+    }
+    setBusy(true)
+    setError(null)
+    try {
+      const stored = await window.daemon.claude.storeKey(meta.keyName, trimmed)
+      if (!stored.ok) throw new Error(stored.error ?? 'Could not store the key')
+      const verified = await window.daemon.provider.verifyAll()
+      if (!verified.ok) throw new Error(verified.error ?? 'Could not verify the key')
+      const done = await window.daemon.lite.setOnboardingComplete(true)
+      if (!done.ok) throw new Error(done.error ?? 'Could not save setup state')
+      onDone()
+    } catch (err) {
+      setError((err as Error).message)
+    } finally {
+      setBusy(false)
+    }
+  }
+
+  const continueWithoutAi = async () => {
+    if (busy) return
+    setBusy(true)
+    setError(null)
+    try {
+      const done = await window.daemon.lite.setOnboardingComplete(true)
+      if (!done.ok) throw new Error(done.error ?? 'Could not save setup state')
+      onDone()
+    } catch (err) {
+      setError((err as Error).message)
+    } finally {
+      setBusy(false)
+    }
+  }
+
+  return (
+    <div className={styles.screen}>
+      <div className={styles.card}>
+        <div className={styles.brand}>
+          <span className={styles.mark}><DaemonMark /></span>
+          <span className={styles.name}>DAEMON</span>
+        </div>
+        <h1 className={styles.headline}>Your AI coding agent.</h1>
+        <p className={styles.sub}>
+          Paste an API key to start. It is encrypted with your OS keychain and stored only on
+          this device. It goes nowhere except your AI provider.
+        </p>
+
+        <SegmentedControl<ProviderChoice>
+          ariaLabel="API provider"
+          items={[
+            { id: 'anthropic', label: 'Anthropic' },
+            { id: 'glm', label: 'GLM (Z.AI)' },
+          ]}
+          value={provider}
+          onChange={(next) => { setProvider(next); setError(null) }}
+        />
+
+        <input
+          className={styles.keyInput}
+          type="password"
+          value={key}
+          placeholder={meta.placeholder}
+          aria-label={`${provider === 'anthropic' ? 'Anthropic' : 'GLM'} API key`}
+          autoFocus
+          onChange={(e) => { setKey(e.currentTarget.value); setError(null) }}
+          onKeyDown={(e) => { if (e.key === 'Enter') void start() }}
+        />
+
+        {error ? <div className={styles.error} role="alert">{error}</div> : null}
+
+        <button type="button" className={styles.start} disabled={busy || !key.trim()} onClick={() => void start()}>
+          {busy ? 'Checking key…' : 'Start chatting'}
+        </button>
+
+        <button type="button" className={styles.help} disabled={busy} onClick={() => void continueWithoutAi()}>
+          Continue without AI
+        </button>
+
+        <button
+          type="button"
+          className={styles.help}
+          onClick={() => void window.daemon.shell.openExternal(meta.consoleUrl)}
+        >
+          Where do I get a key?
+        </button>
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/LiteSettings.module.css b/src/lite/LiteSettings.module.css
new file mode 100644
index 00000000..366b21f0
--- /dev/null
+++ b/src/lite/LiteSettings.module.css
@@ -0,0 +1,157 @@
+.settings {
+  flex: 1;
+  overflow-y: auto;
+  padding: 28px 24px;
+}
+
+.column {
+  max-width: 620px;
+  margin: 0 auto;
+  display: flex;
+  flex-direction: column;
+  gap: 24px;
+}
+
+.head {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+}
+
+.back {
+  padding: 4px 8px;
+  border: 1px solid var(--line);
+  border-radius: 5px;
+  background: transparent;
+  color: var(--t2);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.back:hover {
+  color: var(--t1);
+  background: var(--wash);
+}
+
+.title {
+  font-size: var(--fs-16);
+  font-weight: 600;
+}
+
+.section {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  padding: 16px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--bg-app);
+}
+
+.sectionTitle {
+  font-size: var(--fs-12);
+  font-weight: 600;
+}
+
+.sectionSub {
+  font-size: var(--fs-11);
+  color: var(--t3);
+  margin-bottom: 4px;
+}
+
+.keyRow {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.keyMeta {
+  width: 130px;
+  display: flex;
+  flex-direction: column;
+  flex-shrink: 0;
+}
+
+.keyLabel {
+  font-size: var(--fs-12);
+  color: var(--t1);
+}
+
+.keyHint {
+  font-size: var(--fs-10);
+  color: var(--accent-green-dim);
+  font-family: var(--font-code);
+}
+
+.keyInput {
+  flex: 1;
+  min-width: 0;
+  padding: 7px 9px;
+  background: var(--field-bg);
+  border: 1px solid var(--line-2);
+  border-radius: 5px;
+  color: var(--t1);
+  font-family: var(--font-code);
+  font-size: var(--fs-11);
+}
+
+.keyInput:focus {
+  outline: none;
+  border-color: var(--accent-green-dim);
+}
+
+.keyBtn {
+  padding: 6px 10px;
+  border: 1px solid var(--line);
+  border-radius: 5px;
+  background: transparent;
+  color: var(--t2);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.keyBtn:hover:not(:disabled) {
+  color: var(--t1);
+  background: var(--wash);
+}
+
+.keyBtn:disabled {
+  opacity: 0.4;
+  cursor: default;
+}
+
+.keyBtnDanger:hover:not(:disabled) {
+  color: var(--accent-red);
+  border-color: color-mix(in srgb, var(--accent-red) 35%, transparent);
+}
+
+.notice {
+  font-size: var(--fs-11);
+  color: var(--t3);
+}
+
+.aboutRow {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  font-size: var(--fs-12);
+  color: var(--t2);
+}
+
+.ideBtn {
+  padding: 6px 10px;
+  border: 1px solid color-mix(in srgb, var(--accent-green) 35%, transparent);
+  border-radius: 5px;
+  background: transparent;
+  color: var(--accent-green);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.ideBtn:hover {
+  background: var(--accent-green-glow);
+}
diff --git a/src/lite/LiteSettings.tsx b/src/lite/LiteSettings.tsx
new file mode 100644
index 00000000..66c63abc
--- /dev/null
+++ b/src/lite/LiteSettings.tsx
@@ -0,0 +1,122 @@
+import { useEffect, useState } from 'react'
+import { useAriaStore } from '../store/aria'
+import { ModelDropdown } from '../components/Panel'
+import styles from './LiteSettings.module.css'
+
+interface KeyEntry {
+  key_name: string
+  hint: string
+}
+
+const KEY_OPTIONS = [
+  { keyName: 'ANTHROPIC_API_KEY', label: 'Anthropic' },
+  { keyName: 'ZAI_API_KEY', label: 'GLM (Z.AI)' },
+]
+
+export function LiteSettings({ onBack }: { onBack: () => void }) {
+  const [keys, setKeys] = useState<KeyEntry[]>([])
+  const [drafts, setDrafts] = useState<Record<string, string>>({})
+  const [notice, setNotice] = useState<string | null>(null)
+  const [version, setVersion] = useState('')
+  const verifyProviders = useAriaStore((s) => s.verifyProviders)
+
+  const refresh = async () => {
+    const res = await window.daemon.claude.listKeys()
+    if (res.ok && res.data) setKeys(res.data as KeyEntry[])
+  }
+
+  useEffect(() => {
+    void refresh()
+    void window.daemon.lite.getFlavorInfo().then((res) => {
+      if (res.ok && res.data) setVersion(res.data.version)
+    })
+  }, [])
+
+  const saveKey = async (keyName: string) => {
+    const value = (drafts[keyName] ?? '').trim()
+    if (!value) return
+    const res = await window.daemon.claude.storeKey(keyName, value)
+    if (!res.ok) {
+      setNotice(res.error ?? 'Could not store the key')
+      return
+    }
+    setDrafts((d) => ({ ...d, [keyName]: '' }))
+    setNotice(`${keyName} saved.`)
+    await refresh()
+    void verifyProviders()
+  }
+
+  const removeKey = async (keyName: string) => {
+    await window.daemon.claude.deleteKey(keyName)
+    setNotice(`${keyName} removed.`)
+    await refresh()
+    void verifyProviders()
+  }
+
+  return (
+    <div className={styles.settings}>
+      <div className={styles.column}>
+        <div className={styles.head}>
+          <button type="button" className={styles.back} onClick={onBack}>‹ Back</button>
+          <h1 className={styles.title}>Settings</h1>
+        </div>
+
+        <section className={styles.section}>
+          <h2 className={styles.sectionTitle}>API keys</h2>
+          <p className={styles.sectionSub}>
+            Keys are encrypted with your OS keychain and never leave this device.
+          </p>
+          {KEY_OPTIONS.map(({ keyName, label }) => {
+            const stored = keys.find((k) => k.key_name === keyName)
+            return (
+              <div key={keyName} className={styles.keyRow}>
+                <div className={styles.keyMeta}>
+                  <label className={styles.keyLabel} htmlFor={`lite-key-${keyName}`}>{label}</label>
+                  {stored ? <span className={styles.keyHint}>saved ····{stored.hint}</span> : null}
+                </div>
+                <input
+                  id={`lite-key-${keyName}`}
+                  className={styles.keyInput}
+                  type="password"
+                  value={drafts[keyName] ?? ''}
+                  placeholder={stored ? 'Replace key' : 'Paste key'}
+                  onChange={(e) => setDrafts((d) => ({ ...d, [keyName]: e.currentTarget.value }))}
+                  onKeyDown={(e) => { if (e.key === 'Enter') void saveKey(keyName) }}
+                />
+                <button type="button" className={styles.keyBtn} disabled={!(drafts[keyName] ?? '').trim()} onClick={() => void saveKey(keyName)}>
+                  Save
+                </button>
+                {stored ? (
+                  <button type="button" className={`${styles.keyBtn} ${styles.keyBtnDanger}`} onClick={() => void removeKey(keyName)}>
+                    Remove
+                  </button>
+                ) : null}
+              </div>
+            )
+          })}
+          {notice ? <div className={styles.notice} role="status">{notice}</div> : null}
+        </section>
+
+        <section className={styles.section}>
+          <h2 className={styles.sectionTitle}>Solana data</h2>
+          <p className={styles.sectionSub}>
+            Wallet addresses stay watch-only. Direct Helius configuration is not available in this build yet.
+          </p>
+        </section>
+
+        <section className={styles.section}>
+          <h2 className={styles.sectionTitle}>Model</h2>
+          <p className={styles.sectionSub}>Default model for new messages.</p>
+          <ModelDropdown />
+        </section>
+
+        <section className={styles.section}>
+          <h2 className={styles.sectionTitle}>About</h2>
+          <div className={styles.aboutRow}>
+            <span>DAEMON {version ? `v${version}` : ''}</span>
+          </div>
+        </section>
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/LiteSidebar.module.css b/src/lite/LiteSidebar.module.css
new file mode 100644
index 00000000..482d9e64
--- /dev/null
+++ b/src/lite/LiteSidebar.module.css
@@ -0,0 +1,324 @@
+.sidebar {
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+  background: var(--bg-app);
+  border-right: 1px solid var(--line);
+  user-select: none;
+}
+
+.nav {
+  display: flex;
+  flex-direction: column;
+  gap: 1px;
+  padding: 4px 8px 6px;
+}
+
+.navRow {
+  display: flex;
+  align-items: center;
+  gap: 9px;
+  width: 100%;
+  padding: 6px 9px;
+  border: none;
+  border-radius: 6px;
+  background: transparent;
+  color: var(--t2);
+  font-family: var(--font-ui);
+  font-size: var(--fs-12);
+  text-align: left;
+  cursor: pointer;
+}
+
+.navRow:hover {
+  background: var(--wash);
+  color: var(--t1);
+}
+
+.navActive {
+  background: var(--wash);
+  color: var(--t1);
+}
+
+.navIcon {
+  color: var(--t3);
+  flex-shrink: 0;
+}
+
+.navActive .navIcon,
+.navRow:hover .navIcon {
+  color: var(--t1);
+}
+
+.search {
+  margin: 3px 10px 4px;
+  padding: 6px 9px;
+  background: var(--field-bg);
+  border: 1px solid var(--line-2);
+  border-radius: 6px;
+  color: var(--t1);
+  font-family: var(--font-ui);
+  font-size: var(--fs-12);
+}
+
+.search:focus {
+  outline: none;
+  border-color: var(--accent-green-dim);
+}
+
+.sectionLabel {
+  padding: 8px 17px 4px;
+  font-size: var(--fs-10);
+  color: var(--t4);
+}
+
+.sessions {
+  flex: 1;
+  min-height: 0;
+  overflow-y: auto;
+  padding: 0 8px;
+}
+
+.empty {
+  padding: 6px 10px;
+  font-size: var(--fs-12);
+  color: var(--t4);
+}
+
+.sessionRow {
+  position: relative;
+  display: flex;
+  align-items: center;
+  border-radius: 6px;
+}
+
+.sessionRow:hover,
+.sessionActive {
+  background: var(--wash);
+}
+
+.sessionPick {
+  flex: 1;
+  min-width: 0;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 5px 9px;
+  border: none;
+  background: transparent;
+  color: inherit;
+  font-family: var(--font-ui);
+  text-align: left;
+  cursor: pointer;
+}
+
+.sessionTitle {
+  flex: 1;
+  min-width: 0;
+  font-size: var(--fs-12);
+  color: var(--t2);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.sessionActive .sessionTitle {
+  color: var(--t1);
+}
+
+.sessionTime {
+  font-size: var(--fs-10);
+  color: var(--t4);
+  flex-shrink: 0;
+}
+
+.sessionDelete {
+  visibility: hidden;
+  display: inline-flex;
+  align-items: center;
+  padding: 5px 7px;
+  border: none;
+  background: transparent;
+  color: var(--t4);
+  cursor: pointer;
+}
+
+.sessionRow:hover .sessionDelete,
+.sessionRow:focus-within .sessionDelete {
+  visibility: visible;
+}
+
+.sessionDelete:hover {
+  color: var(--accent-red);
+}
+
+.tools {
+  padding: 4px 8px 6px;
+  border-top: 1px solid var(--line);
+}
+
+.toolsHeader {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  width: 100%;
+  padding: 6px 9px;
+  border: none;
+  background: transparent;
+  color: var(--t3);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.toolsHeader:hover {
+  color: var(--t2);
+}
+
+.toolsCaret {
+  transition: transform 120ms ease;
+}
+
+.toolsCaretOpen {
+  transform: rotate(90deg);
+}
+
+.toolsList {
+  display: flex;
+  flex-direction: column;
+  gap: 1px;
+}
+
+.footer {
+  display: flex;
+  flex-direction: column;
+  gap: 7px;
+  padding: 9px 10px 10px;
+  border-top: 1px solid var(--line);
+}
+
+.idePill {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  gap: 7px;
+  width: 100%;
+  padding: 6px 9px;
+  border: 1px solid var(--line);
+  border-radius: 7px;
+  background: var(--s1);
+  color: var(--t2);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.idePill:hover {
+  color: var(--t1);
+  background: var(--s2);
+  border-color: var(--line-2);
+}
+
+.accountRow {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
+  padding: 0 2px;
+}
+
+.accountName {
+  display: flex;
+  align-items: baseline;
+  gap: 6px;
+  font-size: var(--fs-11);
+  color: var(--t3);
+}
+
+.accountMeta {
+  font-size: var(--fs-10);
+  color: var(--t4);
+}
+
+.gear {
+  display: inline-flex;
+  align-items: center;
+  padding: 5px;
+  border: none;
+  border-radius: 5px;
+  background: transparent;
+  color: var(--t3);
+  cursor: pointer;
+}
+
+.gear:hover,
+.gear[aria-pressed='true'] {
+  color: var(--t1);
+  background: var(--wash);
+}
+
+@media (max-width: 640px) {
+  .nav {
+    padding-inline: 7px;
+  }
+
+  .navRow {
+    justify-content: center;
+    gap: 0;
+    min-height: 34px;
+    padding-inline: 0;
+    font-size: 0;
+  }
+
+  .navIcon {
+    width: 16px;
+    height: 16px;
+  }
+
+  .search {
+    width: calc(100% - 4px);
+    margin-inline: 2px;
+    padding-inline: 5px;
+    font-size: var(--fs-10);
+  }
+
+  .sectionLabel,
+  .sessions,
+  .idePill,
+  .accountName {
+    display: none;
+  }
+
+  .tools {
+    margin-top: auto;
+    padding-inline: 7px;
+  }
+
+  .toolsHeader {
+    justify-content: center;
+    min-height: 32px;
+    padding-inline: 0;
+    font-size: 0;
+  }
+
+  .toolsCaret {
+    width: 14px;
+    height: 14px;
+  }
+
+  .footer {
+    align-items: center;
+    padding-inline: 7px;
+  }
+
+  .accountRow {
+    justify-content: center;
+    padding: 0;
+  }
+
+  .gear {
+    min-width: 34px;
+    min-height: 34px;
+    justify-content: center;
+  }
+}
diff --git a/src/lite/LiteSidebar.tsx b/src/lite/LiteSidebar.tsx
new file mode 100644
index 00000000..f52642e0
--- /dev/null
+++ b/src/lite/LiteSidebar.tsx
@@ -0,0 +1,166 @@
+import { useEffect, useMemo, useState } from 'react'
+import {
+  CaretRight, GearSix, MagnifyingGlass, PencilSimpleLine,
+  ShieldCheck, Wallet, ChartLineUp, X,
+} from '@phosphor-icons/react'
+import type { Icon } from '@phosphor-icons/react'
+import { useAriaStore } from '../store/aria'
+import type { LiteView } from './LiteApp'
+import styles from './LiteSidebar.module.css'
+
+const TOOL_VIEWS: Array<{ id: LiteView; label: string; icon: Icon }> = [
+  { id: 'wallet', label: 'Wallet', icon: Wallet },
+  { id: 'trade', label: 'Trade', icon: ChartLineUp },
+  { id: 'scanner', label: 'Scanner', icon: ShieldCheck },
+]
+
+function relativeTime(ts: number): string {
+  const diff = Date.now() - ts
+  const min = Math.floor(diff / 60_000)
+  if (min < 1) return 'now'
+  if (min < 60) return `${min}m`
+  const hr = Math.floor(min / 60)
+  if (hr < 24) return `${hr}h`
+  const day = Math.floor(hr / 24)
+  return `${day}d`
+}
+
+interface LiteSidebarProps {
+  view: LiteView
+  showTools: boolean
+  onToggleTools: () => void
+  onNewAgent: () => void
+  onSelectView: (view: LiteView) => void
+  onOpenSettings: () => void
+  onPickSession: () => void
+}
+
+export function LiteSidebar({
+  view, showTools, onToggleTools, onNewAgent, onSelectView, onOpenSettings, onPickSession,
+}: LiteSidebarProps) {
+  const sessions = useAriaStore((s) => s.sessions)
+  const sessionId = useAriaStore((s) => s.sessionId)
+  const switchSession = useAriaStore((s) => s.switchSession)
+  const deleteSession = useAriaStore((s) => s.deleteSession)
+  const [query, setQuery] = useState('')
+  const [searching, setSearching] = useState(false)
+  const [version, setVersion] = useState('')
+
+  useEffect(() => {
+    void window.daemon.lite.getFlavorInfo().then((res) => {
+      if (res.ok && res.data) setVersion(res.data.version)
+    })
+  }, [])
+
+  const visible = useMemo(() => {
+    const q = query.trim().toLowerCase()
+    if (!q) return sessions
+    return sessions.filter((s) => (s.title || 'Untitled chat').toLowerCase().includes(q))
+  }, [sessions, query])
+
+  return (
+    <aside className={styles.sidebar}>
+      <nav className={styles.nav}>
+        <button type="button" className={`${styles.navRow}${view === 'workspace' ? ` ${styles.navActive}` : ''}`} onClick={onNewAgent}>
+          <PencilSimpleLine size={15} className={styles.navIcon} aria-hidden="true" />
+          New chat
+        </button>
+        <button
+          type="button"
+          className={styles.navRow}
+          aria-expanded={searching}
+          onClick={() => { setSearching((v) => !v); if (searching) setQuery('') }}
+        >
+          <MagnifyingGlass size={15} className={styles.navIcon} aria-hidden="true" />
+          Search
+        </button>
+        {searching ? (
+          <input
+            className={styles.search}
+            value={query}
+            autoFocus
+            placeholder="Search chats"
+            onChange={(e) => setQuery(e.currentTarget.value)}
+            onKeyDown={(e) => { if (e.key === 'Escape') { setSearching(false); setQuery('') } }}
+          />
+        ) : null}
+      </nav>
+
+      <div className={styles.sectionLabel}>Chats</div>
+      <div className={styles.sessions}>
+        {visible.length === 0 ? (
+          <div className={styles.empty}>{query ? 'No matching chats' : 'No chats yet'}</div>
+        ) : (
+          visible.map((s) => (
+            <div key={s.id} className={`${styles.sessionRow}${s.id === sessionId ? ` ${styles.sessionActive}` : ''}`}>
+              <button
+                type="button"
+                className={styles.sessionPick}
+                onClick={() => { void switchSession(s.id); onPickSession() }}
+              >
+                <span className={styles.sessionTitle}>{s.title || 'Untitled chat'}</span>
+                <span className={styles.sessionTime}>{relativeTime(s.updated_at)}</span>
+              </button>
+              <button
+                type="button"
+                className={styles.sessionDelete}
+                title="Delete chat"
+                aria-label={`Delete ${s.title || 'Untitled chat'}`}
+                onClick={() => void deleteSession(s.id)}
+              >
+                <X size={11} aria-hidden="true" />
+              </button>
+            </div>
+          ))
+        )}
+      </div>
+
+      <div className={styles.tools}>
+        <button
+          type="button"
+          className={styles.toolsHeader}
+          aria-expanded={showTools}
+          onClick={onToggleTools}
+        >
+          <CaretRight size={11} className={`${styles.toolsCaret}${showTools ? ` ${styles.toolsCaretOpen}` : ''}`} aria-hidden="true" />
+          Tools
+        </button>
+        {showTools ? (
+          <div className={styles.toolsList}>
+            {TOOL_VIEWS.map(({ id, label, icon: Glyph }) => (
+              <button
+                key={id}
+                type="button"
+                className={`${styles.navRow}${view === id ? ` ${styles.navActive}` : ''}`}
+                aria-pressed={view === id}
+                onClick={() => onSelectView(id)}
+              >
+                <Glyph size={15} className={styles.navIcon} aria-hidden="true" />
+                {label}
+              </button>
+            ))}
+          </div>
+        ) : null}
+      </div>
+
+      <div className={styles.footer}>
+        <div className={styles.accountRow}>
+          <span className={styles.accountName}>
+            DAEMON
+            {version ? <span className={styles.accountMeta}>v{version}</span> : null}
+          </span>
+          <button
+            type="button"
+            className={styles.gear}
+            title="Settings"
+            aria-label="Settings"
+            aria-pressed={view === 'settings'}
+            onClick={onOpenSettings}
+          >
+            <GearSix size={15} aria-hidden="true" />
+          </button>
+        </div>
+      </div>
+    </aside>
+  )
+}
diff --git a/src/lite/components/LiteToolHeader.module.css b/src/lite/components/LiteToolHeader.module.css
new file mode 100644
index 00000000..5457f194
--- /dev/null
+++ b/src/lite/components/LiteToolHeader.module.css
@@ -0,0 +1,51 @@
+.header {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 18px 24px 14px;
+  border-bottom: 1px solid var(--line);
+}
+
+.icon {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 34px;
+  height: 34px;
+  border-radius: 8px;
+  background: var(--s2);
+  color: var(--accent-green);
+  flex-shrink: 0;
+}
+
+.text {
+  flex: 1;
+  min-width: 0;
+}
+
+.title {
+  font-size: var(--fs-15);
+  font-weight: 600;
+}
+
+.subtitle {
+  font-size: var(--fs-11);
+  color: var(--t3);
+  margin-top: 2px;
+}
+
+.action {
+  flex-shrink: 0;
+}
+
+@container (max-width: 460px) {
+  .header {
+    align-items: flex-start;
+    gap: 10px;
+    padding: 14px;
+  }
+
+  .subtitle {
+    line-height: 1.4;
+  }
+}
diff --git a/src/lite/components/LiteToolHeader.tsx b/src/lite/components/LiteToolHeader.tsx
new file mode 100644
index 00000000..f3e7024d
--- /dev/null
+++ b/src/lite/components/LiteToolHeader.tsx
@@ -0,0 +1,24 @@
+import type { ReactNode } from 'react'
+import type { Icon } from '@phosphor-icons/react'
+import styles from './LiteToolHeader.module.css'
+
+interface LiteToolHeaderProps {
+  icon: Icon
+  title: string
+  subtitle?: string
+  action?: ReactNode
+}
+
+/** Shared header for the Lite tool panels (Wallet / Trade / Scanner). */
+export function LiteToolHeader({ icon: Glyph, title, subtitle, action }: LiteToolHeaderProps) {
+  return (
+    <header className={styles.header}>
+      <span className={styles.icon}><Glyph size={18} aria-hidden="true" /></span>
+      <div className={styles.text}>
+        <h1 className={styles.title}>{title}</h1>
+        {subtitle ? <p className={styles.subtitle}>{subtitle}</p> : null}
+      </div>
+      {action ? <div className={styles.action}>{action}</div> : null}
+    </header>
+  )
+}
diff --git a/src/lite/main-lite.tsx b/src/lite/main-lite.tsx
new file mode 100644
index 00000000..0247b4b9
--- /dev/null
+++ b/src/lite/main-lite.tsx
@@ -0,0 +1,115 @@
+import '../polyfills'
+import React from 'react'
+import ReactDOM from 'react-dom/client'
+import LiteApp from './LiteApp'
+import { setAriaHost } from '../store/ariaHost'
+import type { AriaHost } from '../store/ariaHost'
+import { getLiteWorkspaceSnapshot } from './workbench/liteWorkbenchStore'
+import '../../styles/base.css'
+
+const liteHost: AriaHost = {
+  activeProjectId: () => getLiteWorkspaceSnapshot().activeProjectId,
+  buildSnapshot: () => {
+    const workspace = getLiteWorkspaceSnapshot()
+    return {
+      activeProjectId: workspace.activeProjectId,
+      activeProjectPath: workspace.activeProjectPath,
+      currentPanelId: 'lite-workbench',
+      openFilePath: workspace.openFilePath,
+      chips: {
+        activeFile: Boolean(workspace.openFilePath),
+        projectTree: workspace.treeEntries > 0,
+        gitDiff: false,
+        terminalLogs: workspace.hasTerminal,
+        walletContext: false,
+        projectMemory: true,
+      },
+    }
+  },
+  applyUiEffect: () => {},
+  runUiEffectWithData: async () => ({ ok: true }),
+}
+setAriaHost(liteHost)
+
+class RootErrorBoundary extends React.Component<
+  { children: React.ReactNode },
+  { error: Error | null }
+> {
+  state = { error: null as Error | null }
+
+  static getDerivedStateFromError(error: Error) {
+    return { error }
+  }
+
+  componentDidCatch(error: Error) {
+    console.error('DAEMON renderer crash:', error)
+  }
+
+  render() {
+    if (this.state.error) {
+      // Inline hex required — renders before CSS loads
+      return (
+        <div style={{
+          minHeight: '100vh',
+          background: '#070707',
+          color: '#f3f3f3',
+          fontFamily: 'ui-monospace, SFMono-Regular, Menlo, Consolas, monospace',
+          padding: '24px',
+          display: 'flex',
+          flexDirection: 'column' as const,
+          gap: '16px',
+        }}>
+          <div style={{ display: 'flex', alignItems: 'center', gap: '16px' }}>
+            <div style={{ fontSize: 18 }}>DAEMON hit a renderer error</div>
+            <button
+              onClick={() => window.location.reload()}
+              style={{
+                background: '#1a1a1a',
+                color: '#ebebeb',
+                border: '1px solid #2a2a2a',
+                borderRadius: '4px',
+                padding: '6px 16px',
+                cursor: 'pointer',
+                fontSize: 12,
+                fontFamily: 'inherit',
+              }}
+            >
+              Reload App
+            </button>
+          </div>
+          <div style={{ whiteSpace: 'pre-wrap', lineHeight: 1.5, color: '#bdbdbd', margin: 0 }}>
+            The app stopped rendering this view. Reload to recover; the detailed error was written to the developer console.
+          </div>
+        </div>
+      )
+    }
+
+    return this.props.children
+  }
+}
+
+document.addEventListener('dragover', (e) => e.preventDefault())
+document.addEventListener('drop', (e) => e.preventDefault())
+
+window.addEventListener('error', (event) => {
+  if (event.message.startsWith('ResizeObserver loop')) {
+    event.preventDefault()
+    return
+  }
+  console.error('Unhandled renderer error:', event.error || event.message)
+})
+
+window.addEventListener('unhandledrejection', (event) => {
+  console.error('Unhandled renderer rejection:', event.reason)
+})
+
+document.documentElement.dataset.platform = window.daemon?.platform
+  ?? (navigator.userAgent.toLowerCase().includes('mac') ? 'darwin' : 'win32')
+
+ReactDOM.createRoot(document.getElementById('root')!).render(
+  <React.StrictMode>
+    <RootErrorBoundary>
+      <LiteApp />
+    </RootErrorBoundary>
+  </React.StrictMode>,
+)
diff --git a/src/lite/memeStudio.d.ts b/src/lite/memeStudio.d.ts
new file mode 100644
index 00000000..4e4f6cb9
--- /dev/null
+++ b/src/lite/memeStudio.d.ts
@@ -0,0 +1,15 @@
+import type { MemeMarketSnapshot, MemeTechProjectProfile, TokenRiskPreflight } from '../../electron/services/meme-studio/types'
+
+declare global {
+  interface DaemonMemeStudio {
+    detect: (projectPath: string) => Promise<IpcResponse<MemeTechProjectProfile>>
+    marketContext: (mint: string) => Promise<IpcResponse<MemeMarketSnapshot>>
+    tokenPreflight: (mint: string) => Promise<IpcResponse<TokenRiskPreflight>>
+  }
+
+  interface DaemonAPI {
+    memeStudio: DaemonMemeStudio
+  }
+}
+
+export {}
diff --git a/src/lite/popout/PopoutChrome.module.css b/src/lite/popout/PopoutChrome.module.css
new file mode 100644
index 00000000..1219d58a
--- /dev/null
+++ b/src/lite/popout/PopoutChrome.module.css
@@ -0,0 +1,75 @@
+.chrome {
+  position: fixed;
+  top: 0;
+  left: 0;
+  right: 0;
+  background: var(--bg-app);
+  font-family: var(--font-ui);
+  border-bottom: 1px solid var(--line);
+}
+
+.titlebar {
+  height: 34px;
+  -webkit-app-region: drag;
+}
+
+.bar {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  height: 54px;
+  padding: 0 12px;
+}
+
+.navBtn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 28px;
+  height: 28px;
+  border: none;
+  border-radius: 6px;
+  background: transparent;
+  color: var(--t2);
+  cursor: pointer;
+}
+
+.navBtn:hover:not(:disabled) {
+  background: var(--wash);
+  color: var(--t1);
+}
+
+.navBtn:disabled {
+  opacity: 0.35;
+  cursor: default;
+}
+
+.url {
+  flex: 1;
+  min-width: 0;
+  height: 30px;
+  padding: 0 12px;
+  border: 1px solid var(--line-2);
+  border-radius: 8px;
+  background: var(--field-bg);
+  color: var(--t1);
+  font-family: var(--font-code);
+  font-size: var(--fs-11);
+}
+
+.url:focus {
+  outline: none;
+  border-color: var(--accent-green-dim);
+}
+
+.dot {
+  width: 7px;
+  height: 7px;
+  border-radius: 50%;
+  background: var(--accent-green);
+  flex-shrink: 0;
+}
+
+.dot[data-loading='true'] {
+  background: var(--accent-amber);
+}
diff --git a/src/lite/popout/PopoutChrome.tsx b/src/lite/popout/PopoutChrome.tsx
new file mode 100644
index 00000000..e76c4b76
--- /dev/null
+++ b/src/lite/popout/PopoutChrome.tsx
@@ -0,0 +1,90 @@
+import { useEffect, useState } from 'react'
+import { ArrowLeft, ArrowRight, ArrowClockwise, ArrowSquareOut } from '@phosphor-icons/react'
+import styles from './PopoutChrome.module.css'
+
+interface NavState {
+  url: string
+  canGoBack: boolean
+  canGoForward: boolean
+  loading: boolean
+}
+
+interface DaemonPopout {
+  navigate: (url: string) => Promise<boolean>
+  back: () => void
+  forward: () => void
+  reload: () => void
+  onNavState: (handler: (state: NavState) => void) => () => void
+}
+
+declare global {
+  interface Window { daemonPopout: DaemonPopout }
+}
+
+export function PopoutChrome() {
+  const [nav, setNav] = useState<NavState>({ url: '', canGoBack: false, canGoForward: false, loading: true })
+  const [draft, setDraft] = useState('')
+  const [editing, setEditing] = useState(false)
+
+  useEffect(() => {
+    return window.daemonPopout.onNavState((state) => {
+      setNav(state)
+      if (!editing) setDraft(state.url)
+    })
+  }, [editing])
+
+  const submit = () => {
+    const value = draft.trim()
+    if (!value) return
+    const withScheme = /^https?:\/\//.test(value) ? value : `https://${value}`
+    void window.daemonPopout.navigate(withScheme)
+    setEditing(false)
+  }
+
+  return (
+    <div className={styles.chrome}>
+      <div className={styles.titlebar} />
+      <div className={styles.bar}>
+        <button
+          type="button"
+          className={styles.navBtn}
+          disabled={!nav.canGoBack}
+          onClick={() => window.daemonPopout.back()}
+          title="Back"
+          aria-label="Back"
+        >
+          <ArrowLeft size={15} aria-hidden="true" />
+        </button>
+        <button
+          type="button"
+          className={styles.navBtn}
+          disabled={!nav.canGoForward}
+          onClick={() => window.daemonPopout.forward()}
+          title="Forward"
+          aria-label="Forward"
+        >
+          <ArrowRight size={15} aria-hidden="true" />
+        </button>
+        <button
+          type="button"
+          className={styles.navBtn}
+          onClick={() => window.daemonPopout.reload()}
+          title="Reload"
+          aria-label="Reload"
+        >
+          <ArrowClockwise size={15} aria-hidden="true" />
+        </button>
+        <input
+          className={styles.url}
+          value={draft}
+          spellCheck={false}
+          onFocus={() => setEditing(true)}
+          onBlur={() => setEditing(false)}
+          onChange={(e) => setDraft(e.currentTarget.value)}
+          onKeyDown={(e) => { if (e.key === 'Enter') submit() }}
+        />
+        <span className={styles.dot} data-loading={nav.loading ? 'true' : 'false'} aria-hidden="true" />
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/popout/main-popout.tsx b/src/lite/popout/main-popout.tsx
new file mode 100644
index 00000000..e15a6375
--- /dev/null
+++ b/src/lite/popout/main-popout.tsx
@@ -0,0 +1,10 @@
+import React from 'react'
+import ReactDOM from 'react-dom/client'
+import { PopoutChrome } from './PopoutChrome'
+import '../../../styles/base.css'
+
+ReactDOM.createRoot(document.getElementById('root')!).render(
+  <React.StrictMode>
+    <PopoutChrome />
+  </React.StrictMode>,
+)
diff --git a/src/lite/scanner/LiteScanner.module.css b/src/lite/scanner/LiteScanner.module.css
new file mode 100644
index 00000000..29b32224
--- /dev/null
+++ b/src/lite/scanner/LiteScanner.module.css
@@ -0,0 +1,205 @@
+.scanner {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+}
+
+.body {
+  flex: 1;
+  min-height: 0;
+  overflow-y: auto;
+  padding: 16px 24px 24px;
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+}
+
+.searchWrap {
+  position: relative;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.searchIcon {
+  position: absolute;
+  left: 11px;
+  color: var(--t3);
+  pointer-events: none;
+}
+
+.search {
+  flex: 1;
+  padding: 9px 12px 9px 34px;
+  background: var(--field-bg);
+  border: 1px solid var(--line-2);
+  border-radius: 9px;
+  color: var(--t1);
+  font-family: var(--font-code);
+  font-size: var(--fs-11);
+}
+
+.search:focus {
+  outline: none;
+  border-color: var(--accent-green-dim);
+}
+
+.scanBtn {
+  padding: 9px 16px;
+  border: none;
+  border-radius: 8px;
+  background: var(--accent-green);
+  color: #06110c;
+  font-family: var(--font-ui);
+  font-size: var(--fs-12);
+  font-weight: 600;
+  cursor: pointer;
+}
+
+.scanBtn:disabled {
+  opacity: 0.5;
+  cursor: default;
+}
+
+.error {
+  font-size: var(--fs-11);
+  color: var(--accent-red);
+}
+
+.result {
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+}
+
+.verdict {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 12px 14px;
+  border: 1px solid var(--line);
+  border-radius: 10px;
+  background: var(--bg-app);
+}
+
+.verdictDot {
+  width: 9px;
+  height: 9px;
+  border-radius: 50%;
+  background: var(--t3);
+}
+
+.verdictLabel {
+  font-size: var(--fs-14);
+  font-weight: 600;
+}
+
+.verdictSymbol {
+  font-size: var(--fs-12);
+  color: var(--t3);
+  font-family: var(--font-code);
+}
+
+.low .verdictDot { background: var(--accent-green); }
+.low .verdictLabel { color: var(--accent-green); }
+.medium .verdictDot { background: var(--accent-amber); }
+.medium .verdictLabel { color: var(--accent-amber); }
+.high .verdictDot,
+.critical .verdictDot { background: var(--accent-red); }
+.high .verdictLabel,
+.critical .verdictLabel { color: var(--accent-red); }
+
+.grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(150px, 1fr));
+  gap: 8px;
+}
+
+.fact {
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+  padding: 10px 12px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+}
+
+.factLabel {
+  font-size: var(--fs-10);
+  color: var(--t4);
+}
+
+.factValue {
+  font-size: var(--fs-12);
+  color: var(--t1);
+}
+
+.factBad {
+  color: var(--accent-red);
+}
+
+.factors {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  padding: 12px 14px;
+  border: 1px solid color-mix(in srgb, var(--accent-red) 25%, transparent);
+  border-radius: 8px;
+  background: var(--accent-red-glow);
+  list-style: none;
+}
+
+.factors li {
+  font-size: var(--fs-11);
+  color: var(--t2);
+  padding-left: 14px;
+  position: relative;
+}
+
+.factors li::before {
+  content: '';
+  position: absolute;
+  left: 2px;
+  top: 7px;
+  width: 4px;
+  height: 4px;
+  border-radius: 50%;
+  background: var(--accent-red);
+}
+
+.actions {
+  display: flex;
+  gap: 8px;
+}
+
+.askBtn {
+  padding: 7px 12px;
+  border: 1px solid var(--line);
+  border-radius: 7px;
+  background: transparent;
+  color: var(--t2);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.askBtn:hover {
+  color: var(--t1);
+  background: var(--wash);
+}
+
+.ideBtn {
+  padding: 7px 12px;
+  border: 1px solid color-mix(in srgb, var(--accent-green) 30%, transparent);
+  border-radius: 7px;
+  background: transparent;
+  color: var(--accent-green);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.ideBtn:hover {
+  background: var(--accent-green-glow);
+}
diff --git a/src/lite/scanner/LiteScanner.tsx b/src/lite/scanner/LiteScanner.tsx
new file mode 100644
index 00000000..7f435243
--- /dev/null
+++ b/src/lite/scanner/LiteScanner.tsx
@@ -0,0 +1,130 @@
+import { useState } from 'react'
+import { ShieldCheck, MagnifyingGlass } from '@phosphor-icons/react'
+import type { ForensicsScanResult, ForensicsTokenSecurity } from '../../../electron/shared/types'
+import { LiteToolHeader } from '../components/LiteToolHeader'
+import styles from './LiteScanner.module.css'
+
+const BASE58_RE = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/
+
+const RISK_LABEL: Record<ForensicsTokenSecurity['riskLevel'], string> = {
+  low: 'Low risk',
+  medium: 'Medium risk',
+  high: 'High risk',
+  critical: 'Critical risk',
+}
+
+interface LiteScannerProps {
+  onAskAria: (prompt: string) => void
+}
+
+export function LiteScanner({ onAskAria }: LiteScannerProps) {
+  const [address, setAddress] = useState('')
+  const [scanning, setScanning] = useState(false)
+  const [result, setResult] = useState<ForensicsScanResult | null>(null)
+  const [error, setError] = useState<string | null>(null)
+
+  const scan = async () => {
+    const addr = address.trim()
+    if (!BASE58_RE.test(addr)) {
+      setError('Enter a valid Solana mint or wallet address.')
+      return
+    }
+    setScanning(true); setError(null); setResult(null)
+    const res = await window.daemon.forensics.scan({ address: addr })
+    setScanning(false)
+    if (!res.ok || !res.data) {
+      setError(res.error ?? 'Scan failed.')
+      return
+    }
+    setResult(res.data as ForensicsScanResult)
+  }
+
+  const security = result?.tokenSecurity ?? null
+  const stats = result?.stats ?? null
+
+  return (
+    <div className={styles.scanner}>
+      <LiteToolHeader
+        icon={ShieldCheck}
+        title="Scanner"
+        subtitle="Paste a token mint or wallet to check authorities, snipers, and bundles."
+      />
+
+      <div className={styles.body}>
+        <div className={styles.searchWrap}>
+          <MagnifyingGlass size={15} className={styles.searchIcon} aria-hidden="true" />
+          <input
+            className={styles.search}
+            value={address}
+            placeholder="Token mint or wallet address"
+            spellCheck={false}
+            onChange={(e) => { setAddress(e.currentTarget.value); setError(null) }}
+            onKeyDown={(e) => { if (e.key === 'Enter') void scan() }}
+          />
+          <button type="button" className={styles.scanBtn} disabled={scanning} onClick={() => void scan()}>
+            {scanning ? 'Scanning…' : 'Scan'}
+          </button>
+        </div>
+
+        {error ? <div className={styles.error} role="alert">{error}</div> : null}
+
+        {result ? (
+          <div className={styles.result}>
+            {security ? (
+              <div className={`${styles.verdict} ${styles[security.riskLevel]}`}>
+                <span className={styles.verdictDot} aria-hidden="true" />
+                <span className={styles.verdictLabel}>{RISK_LABEL[security.riskLevel]}</span>
+                {result.tokenMetadata?.symbol ? (
+                  <span className={styles.verdictSymbol}>{result.tokenMetadata.symbol}</span>
+                ) : null}
+              </div>
+            ) : (
+              <div className={styles.verdict}>
+                <span className={styles.verdictLabel}>Wallet scan complete</span>
+              </div>
+            )}
+
+            {security ? (
+              <div className={styles.grid}>
+                <Fact label="Mint authority" value={security.hasMintAuthority ? 'Active (can mint more)' : 'Revoked'} bad={security.hasMintAuthority} />
+                <Fact label="Freeze authority" value={security.hasFreezeAuthority ? 'Active (can freeze)' : 'Revoked'} bad={security.hasFreezeAuthority} />
+                <Fact label="Metadata" value={security.isMutable ? 'Mutable' : 'Immutable'} bad={security.isMutable} />
+                {security.decimals !== undefined ? <Fact label="Decimals" value={String(security.decimals)} /> : null}
+              </div>
+            ) : null}
+
+            {stats ? (
+              <div className={styles.grid}>
+                {stats.snipersDetected !== undefined ? <Fact label="Snipers" value={String(stats.snipersDetected)} bad={(stats.snipersDetected ?? 0) > 0} /> : null}
+                {stats.bundleClustersDetected !== undefined ? <Fact label="Bundle clusters" value={String(stats.bundleClustersDetected)} bad={(stats.bundleClustersDetected ?? 0) > 0} /> : null}
+                {stats.cabalConnectionsFound !== undefined ? <Fact label="Cabal links" value={String(stats.cabalConnectionsFound)} bad={(stats.cabalConnectionsFound ?? 0) > 0} /> : null}
+                {stats.totalHolders !== undefined ? <Fact label="Holders" value={String(stats.totalHolders)} /> : null}
+              </div>
+            ) : null}
+
+            {security && security.riskFactors.length > 0 ? (
+              <ul className={styles.factors}>
+                {security.riskFactors.map((f, i) => <li key={i}>{f}</li>)}
+              </ul>
+            ) : null}
+
+            <div className={styles.actions}>
+              <button type="button" className={styles.askBtn} onClick={() => onAskAria(`Assess the risk of this token/wallet and whether it looks safe: ${address.trim()}`)}>
+                Ask ARIA to explain
+              </button>
+            </div>
+          </div>
+        ) : null}
+      </div>
+    </div>
+  )
+}
+
+function Fact({ label, value, bad }: { label: string; value: string; bad?: boolean }) {
+  return (
+    <div className={styles.fact}>
+      <span className={styles.factLabel}>{label}</span>
+      <span className={`${styles.factValue}${bad ? ` ${styles.factBad}` : ''}`}>{value}</span>
+    </div>
+  )
+}
diff --git a/src/lite/studio/MemeTechStudio.module.css b/src/lite/studio/MemeTechStudio.module.css
new file mode 100644
index 00000000..bcb523c6
--- /dev/null
+++ b/src/lite/studio/MemeTechStudio.module.css
@@ -0,0 +1,79 @@
+.studio { min-height: 0; overflow: auto; padding: 28px; container-type: inline-size; background: radial-gradient(circle at 18% 0%, rgba(62,207,142,.07), transparent 35%), var(--bg-app); }
+.hero { display: grid; grid-template-columns: minmax(0, 1fr) minmax(210px, 260px); gap: 28px; align-items: end; max-width: 1180px; margin: 0 auto 24px; }
+.eyebrow, .patternLabel { color: var(--accent); font-size: var(--fs-10); letter-spacing: .14em; }
+.hero h1 { margin: 8px 0 6px; max-width: 720px; color: var(--t1); font-size: clamp(24px, 3vw, 38px); line-height: 1; letter-spacing: -.04em; }
+.hero p { margin: 0; max-width: 650px; color: var(--t3); font-size: var(--fs-12); }
+.principle { padding: 12px; border: 1px solid var(--border-hover); background: var(--bg-panel); }
+.principle strong, .principle span { display: block; }
+.principle strong { color: var(--warning); font-size: var(--fs-12); }
+.principle span { margin-top: 4px; color: var(--t4); font-size: var(--fs-10); }
+.grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 12px; max-width: 1180px; margin: auto; }
+.card { min-width: 0; padding: 16px; border: 1px solid var(--border); background: color-mix(in srgb, var(--bg-panel) 96%, var(--accent)); }
+.card > header { display: flex; align-items: center; gap: 8px; margin-bottom: 16px; }
+.card > header > span { color: var(--accent); font: 600 var(--fs-10) var(--font-mono); }
+.card h2 { margin: 0; color: var(--t1); font-size: var(--fs-14); }
+.wide { grid-column: 1 / -1; }
+.empty { min-height: 110px; display: grid; place-items: center; color: var(--t4); }
+.profileHeadline, .tokenTitle, .riskHeader { display: flex; justify-content: space-between; align-items: center; gap: 8px; }
+.profileHeadline strong, .tokenTitle strong { color: var(--t1); font-size: var(--fs-16); }
+.profileHeadline span, .tokenTitle span, .timestamp { color: var(--t4); font-size: var(--fs-10); }
+.tags, .benchmarks { display: flex; gap: 5px; flex-wrap: wrap; margin-top: 10px; }
+.tags span, .benchmarks button { padding: 3px 7px; border: 1px solid var(--border); background: transparent; color: var(--t3); font: inherit; font-size: var(--fs-10); }
+.benchmarks button { cursor: pointer; }
+.findings { display: grid; gap: 7px; padding: 0; list-style: none; }
+.findings li { display: grid; gap: 2px; padding-left: 9px; border-left: 2px solid var(--accent); }
+.findings strong { color: var(--t2); font-size: var(--fs-11); }
+.findings small { color: var(--t4); font: var(--fs-10) var(--font-mono); }
+.gap, .warning, .error { display: flex; gap: 8px; margin-top: 7px; padding: 8px; border: 1px solid var(--border); background: var(--bg-app); }
+.gap span { color: var(--warning); font-size: var(--fs-9); text-transform: uppercase; }
+.gap p { margin: 0; color: var(--t3); font-size: var(--fs-10); }
+.mintLabel { display: block; margin-bottom: 5px; color: var(--t4); font-size: var(--fs-10); text-transform: uppercase; }
+.lookup { display: grid; grid-template-columns: 1fr auto; }
+.lookup input { min-width: 0; border: 1px solid var(--border-hover); background: var(--bg-app); color: var(--t1); padding: 8px; font: var(--fs-10) var(--font-mono); }
+.lookup input, .lookup button { min-height: var(--input-h); }
+.lookup button { border: 1px solid var(--accent); background: var(--accent); color: var(--bg-app); padding: 0 14px; font: 600 var(--fs-11) var(--font-ui); cursor: pointer; }
+.lookup button:disabled { opacity: .55; cursor: wait; }
+.lookup input:focus-visible, .lookup button:focus-visible, .benchmarks button:focus-visible { outline: 1px solid var(--accent); outline-offset: 2px; }
+.error { color: var(--red); font-size: var(--fs-10); }
+.tokenTitle { margin-top: 16px; }
+.metrics { display: grid; grid-template-columns: repeat(3, 1fr); gap: 1px; margin-top: 9px; background: var(--border); }
+.metrics div { display: grid; gap: 3px; padding: 9px; background: var(--bg-app); }
+.metrics span, .fact span { color: var(--t4); font-size: var(--fs-9); text-transform: uppercase; }
+.metrics strong { color: var(--t1); font: 600 var(--fs-12) var(--font-mono); }
+.timestamp { margin: 8px 0 0; }
+.warning { color: var(--warning); font-size: var(--fs-10); }
+.preflight { margin-top: 14px; padding-top: 12px; border-top: 1px solid var(--border); }
+.riskHeader > span { color: var(--t3); font-size: var(--fs-10); letter-spacing: .08em; }
+.riskHeader strong { font-size: var(--fs-10); text-transform: uppercase; }
+.riskHeader strong[data-risk='high'] { color: var(--red); }
+.riskHeader strong[data-risk='review'] { color: var(--warning); }
+.fact { display: flex; justify-content: space-between; margin-top: 7px; }
+.fact strong { color: var(--t2); font-size: var(--fs-10); }
+.fact strong[data-status='danger'] { color: var(--red); }
+.fact strong[data-status='warning'] { color: var(--warning); }
+.fact strong[data-status='good'] { color: var(--success); }
+.patterns { display: grid; grid-template-columns: 1fr 1fr; gap: 28px; }
+.patterns > div + div { padding-left: 28px; border-left: 1px solid var(--border); }
+.patterns h3 { margin: 5px 0; color: var(--t1); font-size: var(--fs-16); }
+.patterns p, .patterns li { color: var(--t3); font-size: var(--fs-11); line-height: 1.5; }
+.patterns ul { margin: 8px 0 0; padding-left: 16px; }
+@container (max-width: 860px) {
+  .studio { padding: 18px; }
+  .hero { grid-template-columns: 1fr; gap: 14px; margin-bottom: 16px; }
+  .hero h1 { max-width: 560px; font-size: clamp(26px, 6cqi, 34px); }
+  .principle { display: grid; grid-template-columns: auto 1fr; align-items: center; gap: 12px; }
+  .principle span { margin-top: 0; }
+  .grid { grid-template-columns: 1fr; }
+  .wide { grid-column: auto; }
+}
+
+@container (max-width: 560px) {
+  .studio { padding: 14px; }
+  .hero h1 { font-size: 27px; line-height: 1.02; }
+  .principle { grid-template-columns: 1fr; gap: 2px; }
+  .patterns { grid-template-columns: 1fr; }
+  .patterns > div + div { padding: 18px 0 0; border-left: 0; border-top: 1px solid var(--border); }
+  .metrics { grid-template-columns: repeat(2, 1fr); }
+  .lookup { grid-template-columns: minmax(0, 1fr); gap: 6px; }
+  .lookup button { min-height: 34px; }
+}
diff --git a/src/lite/studio/MemeTechStudio.tsx b/src/lite/studio/MemeTechStudio.tsx
new file mode 100644
index 00000000..a47e776d
--- /dev/null
+++ b/src/lite/studio/MemeTechStudio.tsx
@@ -0,0 +1,143 @@
+import { useEffect, useState } from 'react'
+import type { MemeMarketSnapshot, MemeTechProjectProfile, TokenRiskPreflight } from '../../../electron/services/meme-studio/types'
+import type { Project } from '../../../electron/shared/types'
+import styles from './MemeTechStudio.module.css'
+
+const KINS_MINT = 'Tqj8yFmagrg7oorpQkVGYR52r96RFTamvWfth9bpump'
+const PERCOLATOR_MINT = '8PzFWyLpCVEmbZmVJcaRTU5r69XKJx1rd7YGpWvnpump'
+
+interface Props { project: Project | null }
+
+function money(value: number | null): string {
+  if (value === null) return 'Unknown'
+  return new Intl.NumberFormat('en-US', { style: 'currency', currency: 'USD', notation: 'compact', maximumFractionDigits: 2 }).format(value)
+}
+
+function metric(value: number | null): string {
+  if (value === null) return 'Unknown'
+  return new Intl.NumberFormat('en-US', { notation: 'compact', maximumFractionDigits: 1 }).format(value)
+}
+
+function archetypeLabel(value: MemeTechProjectProfile['archetype']): string {
+  return value.split('-').map((part) => part[0].toUpperCase() + part.slice(1)).join(' ')
+}
+
+export function MemeTechStudio({ project }: Props) {
+  const [profile, setProfile] = useState<MemeTechProjectProfile | null>(null)
+  const [mint, setMint] = useState(KINS_MINT)
+  const [market, setMarket] = useState<MemeMarketSnapshot | null>(null)
+  const [preflight, setPreflight] = useState<TokenRiskPreflight | null>(null)
+  const [isLoadingProject, setIsLoadingProject] = useState(false)
+  const [isLoadingToken, setIsLoadingToken] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  useEffect(() => {
+    let isCurrent = true
+    setProfile(null)
+    setError(null)
+    if (!project) return
+    setIsLoadingProject(true)
+    void window.daemon.memeStudio.detect(project.path).then((response) => {
+      if (!isCurrent) return
+      if (!response.ok || !response.data) setError(response.error ?? 'Project analysis failed.')
+      else {
+        setProfile(response.data)
+        if (response.data.tokenMints[0]) setMint(response.data.tokenMints[0])
+      }
+    }).finally(() => { if (isCurrent) setIsLoadingProject(false) })
+    return () => { isCurrent = false }
+  }, [project?.id])
+
+  const inspectToken = async () => {
+    const inspectedMint = mint.trim()
+    setError(null)
+    setMarket(null)
+    setPreflight(null)
+    setIsLoadingToken(true)
+    const [marketResponse, riskResponse] = await Promise.all([
+      window.daemon.memeStudio.marketContext(inspectedMint),
+      window.daemon.memeStudio.tokenPreflight(inspectedMint),
+    ])
+    if (mint.trim() !== inspectedMint) {
+      setIsLoadingToken(false)
+      return
+    }
+    if (marketResponse.ok && marketResponse.data) setMarket(marketResponse.data)
+    if (riskResponse.ok && riskResponse.data) setPreflight(riskResponse.data)
+    const errors = [marketResponse, riskResponse].filter((response) => !response.ok).map((response) => response.error)
+    if (errors.length) setError(errors.join(' '))
+    setIsLoadingToken(false)
+  }
+
+  return (
+    <div className={styles.studio}>
+      <header className={styles.hero}>
+        <div>
+          <span className={styles.eyebrow}>MEME TECH STUDIO</span>
+          <h1>Build the product loop behind the ticker.</h1>
+          <p>Repo intelligence, live market context, and safety evidence for Solana products. No launch or signing authority.</p>
+        </div>
+        <div className={styles.principle}><strong>Attention is not trust.</strong><span>Boosts and volume never reduce token risk.</span></div>
+      </header>
+
+      <section className={styles.grid}>
+        <article className={styles.card}>
+          <header><span>01</span><h2>Product architecture</h2></header>
+          {!project ? <p className={styles.empty}>Open a project to inspect its actual topology.</p> : isLoadingProject ? <p className={styles.empty}>Reading bounded manifests and configs...</p> : profile ? (
+            <>
+              <div className={styles.profileHeadline}><strong>{archetypeLabel(profile.archetype)}</strong><span>{Math.round(profile.confidence * 100)}% confidence</span></div>
+              <div className={styles.tags}>{profile.topology.map((item) => <span key={item}>{item}</span>)}</div>
+              <ul className={styles.findings}>{profile.evidence.slice(0, 5).map((item) => <li key={item.code}><strong>{item.detail}</strong><small>{item.path}</small></li>)}</ul>
+              {profile.gaps.map((gap) => <div className={styles.gap} key={gap.code}><span>{gap.severity}</span><p>{gap.detail} {gap.action}</p></div>)}
+            </>
+          ) : null}
+        </article>
+
+        <article className={styles.card}>
+          <header><span>02</span><h2>Token evidence</h2></header>
+          <label className={styles.mintLabel} htmlFor="meme-tech-mint">Solana mint</label>
+          <div className={styles.lookup}>
+            <input id="meme-tech-mint" value={mint} disabled={isLoadingToken} onChange={(event) => setMint(event.target.value)} spellCheck={false} />
+            <button type="button" onClick={() => void inspectToken()} disabled={isLoadingToken}>{isLoadingToken ? 'Inspecting...' : 'Inspect'}</button>
+          </div>
+          <div className={styles.benchmarks}>
+            <button type="button" disabled={isLoadingToken} onClick={() => setMint(KINS_MINT)}>Kintara</button>
+            <button type="button" disabled={isLoadingToken} onClick={() => setMint(PERCOLATOR_MINT)}>Percolator</button>
+          </div>
+          {error ? <div className={styles.error} role="alert">{error}</div> : null}
+          {market ? (
+            <>
+              <div className={styles.tokenTitle}><strong>{market.symbol ?? 'Unknown token'}</strong><span>{market.degraded ? 'degraded data' : 'Birdeye + DEX cross-check'}</span></div>
+              <div className={styles.metrics}>
+                <div><span>Price</span><strong>{money(market.priceUsd)}</strong></div>
+                <div><span>Liquidity</span><strong>{money(market.liquidityUsd)}</strong></div>
+                <div><span>1h volume</span><strong>{money(market.volume1hUsd)}</strong></div>
+                <div><span>1h traders</span><strong>{metric(market.uniqueWallets1h)}</strong></div>
+                <div><span>Holders</span><strong>{metric(market.holders)}</strong></div>
+                <div><span>Boosts</span><strong>{metric(market.boosts)}</strong></div>
+              </div>
+              <p className={styles.timestamp}>Observed {new Date(market.observedAt).toLocaleString()} from {market.sources.map((source) => source.provider).join(' + ')}.</p>
+              {market.divergences.map((item) => <div className={styles.warning} key={item}>{item}</div>)}
+            </>
+          ) : null}
+          {preflight ? (
+            <div className={styles.preflight}>
+              <div className={styles.riskHeader}><span>PROVIDER RISK EVIDENCE</span><strong data-risk={preflight.risk}>{preflight.risk}</strong></div>
+              {preflight.facts.map((fact) => <div className={styles.fact} key={fact.label}><span>{fact.label}</span><strong data-status={fact.status}>{fact.value}</strong></div>)}
+              {preflight.unknowns.map((unknown) => <div className={styles.warning} key={unknown}>{unknown}</div>)}
+              <p className={styles.timestamp}>Observed {new Date(preflight.observedAt).toLocaleString()} from {preflight.sources.join(' + ')}. On-chain RPC verification is not included yet.</p>
+            </div>
+          ) : null}
+        </article>
+
+        <article className={`${styles.card} ${styles.wide}`}>
+          <header><span>03</span><h2>Two proven technical shapes</h2></header>
+          <div className={styles.patterns}>
+            <div><span className={styles.patternLabel}>KINTARA SHAPE</span><h3>Playable loop first</h3><p>Wallet identity, authoritative state, quests and marketplace, with the token reserved for access, settlement, and measurable sinks.</p><ul><li>Server verifies outcomes</li><li>Off-chain loop stays fast</li><li>Burn and treasury receipts stay distinct</li></ul></div>
+            <div><span className={styles.patternLabel}>PERCOLATOR SHAPE</span><h3>Infrastructure is the product</h3><p>Permissionless markets need an indexer, keeper, oracle freshness, risk invariants, and explicit lab status visible beside every action.</p><ul><li>Read-first frontend</li><li>Dry-run keepers</li><li>Stale state blocks writes</li></ul></div>
+          </div>
+        </article>
+      </section>
+    </div>
+  )
+}
diff --git a/src/lite/trade/LiteTrade.module.css b/src/lite/trade/LiteTrade.module.css
new file mode 100644
index 00000000..7197014b
--- /dev/null
+++ b/src/lite/trade/LiteTrade.module.css
@@ -0,0 +1,153 @@
+.trade {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+}
+
+.body {
+  flex: 1;
+  min-height: 0;
+  overflow-y: auto;
+  padding: 16px 24px 24px;
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+}
+
+.searchWrap {
+  position: relative;
+  display: flex;
+  align-items: center;
+}
+
+.searchIcon {
+  position: absolute;
+  left: 11px;
+  color: var(--t3);
+  pointer-events: none;
+}
+
+.search {
+  width: 100%;
+  padding: 9px 12px 9px 34px;
+  background: var(--field-bg);
+  border: 1px solid var(--line-2);
+  border-radius: 9px;
+  color: var(--t1);
+  font-family: var(--font-ui);
+  font-size: var(--fs-12);
+}
+
+.search:focus {
+  outline: none;
+  border-color: var(--accent-green-dim);
+}
+
+.section {
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+}
+
+.sectionLabel {
+  padding: 0 2px 4px;
+  font-size: var(--fs-10);
+  color: var(--t4);
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+}
+
+.tokenRow {
+  display: grid;
+  grid-template-columns: 1fr auto auto auto;
+  align-items: center;
+  gap: 10px;
+  padding: 9px 11px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+}
+
+.tokenRow:hover {
+  background: var(--wash);
+}
+
+.tokenMeta {
+  display: flex;
+  align-items: baseline;
+  gap: 7px;
+  min-width: 0;
+}
+
+.tokenSymbol {
+  font-size: var(--fs-12);
+  font-weight: 600;
+  color: var(--t1);
+}
+
+.verified {
+  font-size: var(--fs-9);
+  color: var(--accent-green);
+}
+
+.sus {
+  font-size: var(--fs-9);
+  color: var(--accent-red);
+}
+
+.tokenName {
+  font-size: var(--fs-11);
+  color: var(--t3);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.tokenPrice {
+  font-size: var(--fs-12);
+  color: var(--t1);
+  font-family: var(--font-code);
+}
+
+.swapBtn {
+  padding: 5px 10px;
+  border: 1px solid color-mix(in srgb, var(--accent-green) 30%, transparent);
+  border-radius: 6px;
+  background: transparent;
+  color: var(--accent-green);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.swapBtn:hover {
+  background: var(--accent-green-glow);
+}
+
+.starBtn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 26px;
+  height: 26px;
+  border: none;
+  border-radius: 6px;
+  background: transparent;
+  color: var(--t3);
+  cursor: pointer;
+}
+
+.starBtn:hover {
+  color: var(--t1);
+  background: var(--wash);
+}
+
+.starBtn[aria-pressed='true'] {
+  color: var(--accent-amber);
+}
+
+.empty {
+  padding: 16px 4px;
+  font-size: var(--fs-12);
+  color: var(--t4);
+}
diff --git a/src/lite/trade/LiteTrade.tsx b/src/lite/trade/LiteTrade.tsx
new file mode 100644
index 00000000..60d179d6
--- /dev/null
+++ b/src/lite/trade/LiteTrade.tsx
@@ -0,0 +1,132 @@
+import { useCallback, useEffect, useRef, useState } from 'react'
+import { ChartLineUp, MagnifyingGlass, Star, X } from '@phosphor-icons/react'
+import type { JupiterTokenSearchResult } from '../../../electron/shared/types'
+import { LiteToolHeader } from '../components/LiteToolHeader'
+import styles from './LiteTrade.module.css'
+
+const WATCHLIST_KEY = 'daemon-lite:watchlist'
+
+function loadWatchlist(): JupiterTokenSearchResult[] {
+  try {
+    const raw = window.localStorage.getItem(WATCHLIST_KEY)
+    return raw ? (JSON.parse(raw) as JupiterTokenSearchResult[]) : []
+  } catch { return [] }
+}
+
+function saveWatchlist(list: JupiterTokenSearchResult[]): void {
+  try { window.localStorage.setItem(WATCHLIST_KEY, JSON.stringify(list)) } catch { /* full */ }
+}
+
+function usd(n: number | null): string {
+  if (n === null) return '—'
+  if (n < 0.01) return `$${n.toPrecision(2)}`
+  return `$${n.toLocaleString(undefined, { maximumFractionDigits: 2 })}`
+}
+
+interface LiteTradeProps {
+  onAskAria: (prompt: string) => void
+}
+
+export function LiteTrade({ onAskAria }: LiteTradeProps) {
+  const [query, setQuery] = useState('')
+  const [results, setResults] = useState<JupiterTokenSearchResult[]>([])
+  const [searching, setSearching] = useState(false)
+  const [watchlist, setWatchlist] = useState<JupiterTokenSearchResult[]>(loadWatchlist)
+  const debounce = useRef<ReturnType<typeof setTimeout> | null>(null)
+
+  const runSearch = useCallback(async (q: string) => {
+    if (!q.trim()) { setResults([]); return }
+    setSearching(true)
+    const res = await window.daemon.wallet.searchJupiterTokens(q.trim())
+    if (res.ok && res.data) setResults(res.data as JupiterTokenSearchResult[])
+    setSearching(false)
+  }, [])
+
+  useEffect(() => {
+    if (debounce.current) clearTimeout(debounce.current)
+    debounce.current = setTimeout(() => void runSearch(query), 300)
+    return () => { if (debounce.current) clearTimeout(debounce.current) }
+  }, [query, runSearch])
+
+  const isWatched = (mint: string) => watchlist.some((t) => t.mint === mint)
+
+  const toggleWatch = (token: JupiterTokenSearchResult) => {
+    setWatchlist((prev) => {
+      const next = isWatched(token.mint)
+        ? prev.filter((t) => t.mint !== token.mint)
+        : [...prev, token]
+      saveWatchlist(next)
+      return next
+    })
+  }
+
+  const renderToken = (t: JupiterTokenSearchResult, inWatchlist: boolean) => (
+    <div key={t.mint} className={styles.tokenRow}>
+      <div className={styles.tokenMeta}>
+        <span className={styles.tokenSymbol}>{t.symbol || '???'}</span>
+        {t.verified ? <span className={styles.verified}>verified</span> : null}
+        {t.isSus ? <span className={styles.sus}>flagged</span> : null}
+        <span className={styles.tokenName}>{t.name}</span>
+      </div>
+      <span className={styles.tokenPrice}>{usd(t.usdPrice)}</span>
+      <button
+        type="button"
+        className={styles.swapBtn}
+        onClick={() => onAskAria(`Swap into ${t.symbol} (${t.mint}) — quote it first and show me the price impact before I confirm.`)}
+      >
+        Swap via ARIA
+      </button>
+      <button
+        type="button"
+        className={styles.starBtn}
+        aria-pressed={inWatchlist}
+        title={inWatchlist ? 'Remove from watchlist' : 'Add to watchlist'}
+        onClick={() => toggleWatch(t)}
+      >
+        {inWatchlist ? <X size={13} aria-hidden="true" /> : <Star size={13} aria-hidden="true" />}
+      </button>
+    </div>
+  )
+
+  return (
+    <div className={styles.trade}>
+      <LiteToolHeader
+        icon={ChartLineUp}
+        title="Trade"
+        subtitle="Search tokens and track a watchlist. Swaps run through ARIA with a typed confirm."
+      />
+
+      <div className={styles.body}>
+        <div className={styles.searchWrap}>
+          <MagnifyingGlass size={15} className={styles.searchIcon} aria-hidden="true" />
+          <input
+            className={styles.search}
+            value={query}
+            placeholder="Search token by name, symbol, or mint"
+            onChange={(e) => setQuery(e.currentTarget.value)}
+          />
+        </div>
+
+        {query.trim() ? (
+          <section className={styles.section}>
+            <div className={styles.sectionLabel}>{searching ? 'Searching…' : 'Results'}</div>
+            {results.length === 0 && !searching ? (
+              <div className={styles.empty}>No tokens found.</div>
+            ) : (
+              results.map((t) => renderToken(t, isWatched(t.mint)))
+            )}
+          </section>
+        ) : (
+          <section className={styles.section}>
+            <div className={styles.sectionLabel}>Watchlist</div>
+            {watchlist.length === 0 ? (
+              <div className={styles.empty}>Search for a token and star it to watch it here.</div>
+            ) : (
+              watchlist.map((t) => renderToken(t, true))
+            )}
+          </section>
+        )}
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/wallet/LiteWallet.module.css b/src/lite/wallet/LiteWallet.module.css
new file mode 100644
index 00000000..dea5e0b9
--- /dev/null
+++ b/src/lite/wallet/LiteWallet.module.css
@@ -0,0 +1,313 @@
+.wallet {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+  container-type: inline-size;
+}
+
+.iconBtn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 30px;
+  height: 30px;
+  border: 1px solid var(--line);
+  border-radius: 6px;
+  background: transparent;
+  color: var(--t2);
+  cursor: pointer;
+}
+
+.iconBtn:hover {
+  color: var(--t1);
+  background: var(--wash);
+}
+
+.notice {
+  margin: 12px 24px 0;
+  padding: 8px 12px;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  border: 1px solid color-mix(in srgb, var(--accent-amber) 30%, transparent);
+  border-radius: 7px;
+  background: var(--accent-amber-glow);
+  color: var(--t2);
+  font-size: var(--fs-11);
+}
+
+.noticeAction {
+  flex-shrink: 0;
+  padding: 4px 8px;
+  border: 1px solid color-mix(in srgb, var(--accent-amber) 35%, transparent);
+  border-radius: 6px;
+  background: transparent;
+  color: var(--t1);
+  font-family: var(--font-ui);
+  font-size: var(--fs-10);
+  cursor: pointer;
+}
+
+.noticeAction:hover {
+  background: color-mix(in srgb, var(--accent-amber) 12%, transparent);
+}
+
+.body {
+  flex: 1;
+  min-height: 0;
+  display: grid;
+  grid-template-columns: minmax(260px, 340px) minmax(0, 1fr);
+  gap: 16px;
+  width: 100%;
+  max-width: 1180px;
+  margin: 0 auto;
+  padding: 16px 24px 24px;
+  box-sizing: border-box;
+}
+
+.walletList {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  min-height: 0;
+  overflow-y: auto;
+  padding: var(--space-md);
+  border: 1px solid var(--line);
+  border-radius: var(--radius-md);
+  background: var(--surface-card);
+}
+
+.listHead {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 4px 2px;
+  font-size: var(--fs-11);
+  color: var(--t3);
+}
+
+.addBtn {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 4px 8px;
+  border: 1px solid var(--line);
+  border-radius: 6px;
+  background: transparent;
+  color: var(--t2);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.addBtn:hover {
+  color: var(--t1);
+  background: var(--wash);
+}
+
+.addForm {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  padding: 10px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--bg-app);
+  margin-bottom: 4px;
+}
+
+.input {
+  padding: 7px 9px;
+  background: var(--field-bg);
+  border: 1px solid var(--line-2);
+  border-radius: 6px;
+  color: var(--t1);
+  font-family: var(--font-code);
+  font-size: var(--fs-11);
+}
+
+.input:focus {
+  outline: none;
+  border-color: var(--accent-green-dim);
+}
+
+.error {
+  font-size: var(--fs-11);
+  color: var(--accent-red);
+}
+
+.primaryBtn {
+  padding: 7px 10px;
+  border: none;
+  border-radius: 6px;
+  background: var(--accent-green);
+  color: #06110c;
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  font-weight: 600;
+  cursor: pointer;
+}
+
+.walletRow {
+  display: grid;
+  grid-template-columns: 1fr auto;
+  grid-template-rows: auto auto;
+  gap: 2px 8px;
+  padding: 9px 11px;
+  border: 1px solid transparent;
+  border-radius: 8px;
+  background: transparent;
+  color: inherit;
+  font-family: var(--font-ui);
+  text-align: left;
+  cursor: pointer;
+}
+
+.walletRow:hover {
+  background: var(--wash);
+}
+
+.walletActive {
+  background: var(--wash);
+  border-color: var(--line);
+}
+
+.walletName {
+  font-size: var(--fs-12);
+  font-weight: 600;
+  color: var(--t1);
+}
+
+.walletUsd {
+  grid-row: 1 / 3;
+  grid-column: 2;
+  align-self: center;
+  font-size: var(--fs-12);
+  color: var(--accent-green);
+  font-family: var(--font-code);
+}
+
+.walletAddr {
+  font-size: var(--fs-10);
+  color: var(--t4);
+  font-family: var(--font-code);
+}
+
+.holdings {
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+  overflow-y: auto;
+  padding: var(--space-md);
+  border: 1px solid var(--line);
+  border-radius: var(--radius-md);
+  background: var(--surface-card);
+}
+
+.holdings > .empty {
+  flex: 1;
+  display: grid;
+  place-items: center;
+  text-align: center;
+}
+
+.holdingsHead {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  margin-bottom: 12px;
+}
+
+.holdingsName {
+  font-size: var(--fs-14);
+  font-weight: 600;
+}
+
+.holdingsAddr {
+  font-size: var(--fs-10);
+  color: var(--t4);
+  font-family: var(--font-code);
+}
+
+.askBtn {
+  padding: 5px 10px;
+  border: 1px solid var(--line);
+  border-radius: 6px;
+  background: transparent;
+  color: var(--t2);
+  font-family: var(--font-ui);
+  font-size: var(--fs-11);
+  cursor: pointer;
+}
+
+.askBtn:hover {
+  color: var(--t1);
+  background: var(--wash);
+}
+
+.table {
+  width: 100%;
+  border-collapse: collapse;
+  font-size: var(--fs-12);
+}
+
+.table th {
+  text-align: left;
+  padding: 6px 8px;
+  color: var(--t4);
+  font-size: var(--fs-10);
+  font-weight: 500;
+  border-bottom: 1px solid var(--line);
+}
+
+.table td {
+  padding: 8px;
+  border-bottom: 1px solid var(--line);
+  color: var(--t2);
+}
+
+.table td:last-child {
+  color: var(--t1);
+  font-family: var(--font-code);
+}
+
+.tableEmpty {
+  color: var(--t4);
+  text-align: center;
+  padding: 16px;
+}
+
+.empty {
+  padding: 16px 4px;
+  font-size: var(--fs-12);
+  color: var(--t4);
+}
+
+@container (max-width: 760px) {
+  .notice {
+    margin-inline: 14px;
+    align-items: flex-start;
+    flex-direction: column;
+  }
+
+  .body {
+    grid-template-columns: minmax(0, 1fr);
+    padding: 14px;
+  }
+
+  .walletList {
+    max-height: 220px;
+  }
+
+  .holdingsAddr {
+    overflow-wrap: anywhere;
+  }
+}
+
+@container (max-width: 460px) {
+  .noticeAction { width: 100%; min-height: 32px; }
+  .walletList, .holdings { padding: 12px; }
+  .holdingsHead { gap: 12px; }
+}
diff --git a/src/lite/wallet/LiteWallet.tsx b/src/lite/wallet/LiteWallet.tsx
new file mode 100644
index 00000000..d6ddc97b
--- /dev/null
+++ b/src/lite/wallet/LiteWallet.tsx
@@ -0,0 +1,168 @@
+import { useCallback, useEffect, useState } from 'react'
+import { Plus, Wallet as WalletIcon, ArrowClockwise } from '@phosphor-icons/react'
+import type { WalletDashboard } from '../../../electron/shared/types'
+import { LiteToolHeader } from '../components/LiteToolHeader'
+import styles from './LiteWallet.module.css'
+
+function shortAddr(addr: string): string {
+  return addr.length > 12 ? `${addr.slice(0, 4)}…${addr.slice(-4)}` : addr
+}
+
+function usd(n: number): string {
+  return `$${n.toLocaleString(undefined, { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`
+}
+
+// Base58 sanity check; full validation happens main-side in ValidationService.
+const BASE58_RE = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/
+
+interface LiteWalletProps {
+  onAskAria: (prompt: string) => void
+}
+
+export function LiteWallet({ onAskAria }: LiteWalletProps) {
+  const [dashboard, setDashboard] = useState<WalletDashboard | null>(null)
+  const [activeId, setActiveId] = useState<string | null>(null)
+  const [loading, setLoading] = useState(true)
+  const [adding, setAdding] = useState(false)
+  const [addr, setAddr] = useState('')
+  const [name, setName] = useState('')
+  const [error, setError] = useState<string | null>(null)
+
+  const refresh = useCallback(async () => {
+    setLoading(true)
+    const res = await window.daemon.wallet.dashboard(null)
+    if (res.ok && res.data) {
+      const data = res.data
+      setDashboard(data)
+      setActiveId((prev) => prev ?? data.wallets[0]?.id ?? null)
+    }
+    setLoading(false)
+  }, [])
+
+  useEffect(() => { void refresh() }, [refresh])
+
+  useEffect(() => {
+    if (!activeId) return
+    // getDashboard resolves the active wallet's holdings from its default;
+    // switch by setting the default so holdings reflect the selection.
+    void window.daemon.wallet.setDefault(activeId).then(() => refresh())
+  }, [activeId, refresh])
+
+  const addWatch = async () => {
+    const address = addr.trim()
+    if (!BASE58_RE.test(address)) {
+      setError('That does not look like a Solana address.')
+      return
+    }
+    const res = await window.daemon.wallet.create({ name: name.trim() || shortAddr(address), address })
+    if (!res.ok) {
+      setError(res.error ?? 'Could not add the wallet.')
+      return
+    }
+    setAdding(false); setAddr(''); setName(''); setError(null)
+    await refresh()
+  }
+
+  const active = dashboard?.activeWallet ?? null
+
+  return (
+    <div className={styles.wallet}>
+      <LiteToolHeader
+        icon={WalletIcon}
+        title="Wallet"
+        subtitle="Watch balances and holdings. Addresses stay watch-only."
+        action={
+          <button type="button" className={styles.iconBtn} title="Refresh" aria-label="Refresh" onClick={() => void refresh()}>
+            <ArrowClockwise size={15} aria-hidden="true" />
+          </button>
+        }
+      />
+
+      {!dashboard?.heliusConfigured ? (
+        <div className={styles.notice}>
+          <span>Live balances require a Helius key. Direct configuration is not available in this build yet.</span>
+        </div>
+      ) : null}
+
+      <div className={styles.body}>
+        <div className={styles.walletList}>
+          <div className={styles.listHead}>
+            <span>Wallets</span>
+            <button type="button" className={styles.addBtn} onClick={() => setAdding((v) => !v)}>
+              <Plus size={13} aria-hidden="true" /> Watch
+            </button>
+          </div>
+
+          {adding ? (
+            <div className={styles.addForm}>
+              <input className={styles.input} aria-label="Watch address" placeholder="Address (base58)" value={addr} onChange={(e) => setAddr(e.currentTarget.value)} />
+              <input className={styles.input} aria-label="Wallet label" placeholder="Label (optional)" value={name} onChange={(e) => setName(e.currentTarget.value)} />
+              {error ? <div className={styles.error}>{error}</div> : null}
+              <button type="button" className={styles.primaryBtn} onClick={() => void addWatch()}>Add watch wallet</button>
+            </div>
+          ) : null}
+
+          {loading && !dashboard ? (
+            <div className={styles.empty}>Loading…</div>
+          ) : dashboard && dashboard.wallets.length === 0 && !adding ? (
+            <div className={styles.empty}>No wallets yet. Add one to watch its balance.</div>
+          ) : (
+            dashboard?.wallets.map((w) => (
+              <button
+                key={w.id}
+                type="button"
+                className={`${styles.walletRow}${w.id === activeId ? ` ${styles.walletActive}` : ''}`}
+                onClick={() => setActiveId(w.id)}
+              >
+                <span className={styles.walletName}>{w.name}</span>
+                <span className={styles.walletAddr}>{shortAddr(w.address)}</span>
+                <span className={styles.walletUsd}>{usd(w.totalUsd)}</span>
+              </button>
+            ))
+          )}
+        </div>
+
+        <div className={styles.holdings}>
+          {active ? (
+            <>
+              <div className={styles.holdingsHead}>
+                <div>
+                  <div className={styles.holdingsName}>{active.name}</div>
+                  <div className={styles.holdingsAddr}>{active.address}</div>
+                </div>
+                <button
+                  type="button"
+                  className={styles.askBtn}
+                  onClick={() => onAskAria(`Tell me about this wallet: ${active.address}`)}
+                >
+                  Ask ARIA
+                </button>
+              </div>
+              <table className={styles.table}>
+                <thead>
+                  <tr><th>Token</th><th>Amount</th><th>Price</th><th>Value</th></tr>
+                </thead>
+                <tbody>
+                  {active.holdings.length === 0 ? (
+                    <tr><td colSpan={4} className={styles.tableEmpty}>No tokens found.</td></tr>
+                  ) : (
+                    active.holdings.map((h) => (
+                      <tr key={h.mint}>
+                        <td>{h.symbol || shortAddr(h.mint)}</td>
+                        <td>{h.amount.toLocaleString(undefined, { maximumFractionDigits: 4 })}</td>
+                        <td>{h.priceUsd ? usd(h.priceUsd) : 'Not priced'}</td>
+                        <td>{usd(h.valueUsd)}</td>
+                      </tr>
+                    ))
+                  )}
+                </tbody>
+              </table>
+            </>
+          ) : (
+            <div className={styles.empty}>{dashboard?.wallets.length ? 'Select a wallet to see its holdings.' : 'Add a watch-only address to see balances and token holdings here.'}</div>
+          )}
+        </div>
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/workbench/LiteEditor.tsx b/src/lite/workbench/LiteEditor.tsx
new file mode 100644
index 00000000..8d7f29fa
--- /dev/null
+++ b/src/lite/workbench/LiteEditor.tsx
@@ -0,0 +1,102 @@
+import { useCallback, useEffect, useRef, useState } from 'react'
+import MonacoEditor, { loader, type OnMount } from '@monaco-editor/react'
+import * as monaco from 'monaco-editor/esm/vs/editor/editor.api'
+import 'monaco-editor/esm/vs/basic-languages/rust/rust.contribution'
+import 'monaco-editor/esm/vs/basic-languages/yaml/yaml.contribution'
+import 'monaco-editor/esm/vs/language/json/monaco.contribution'
+import 'monaco-editor/esm/vs/language/typescript/monaco.contribution'
+import editorWorker from 'monaco-editor/esm/vs/editor/editor.worker?worker'
+import jsonWorker from 'monaco-editor/esm/vs/language/json/json.worker?worker'
+import tsWorker from 'monaco-editor/esm/vs/language/typescript/ts.worker?worker'
+import { X } from '@phosphor-icons/react'
+import { useLiteWorkbenchStore } from './liteWorkbenchStore'
+import styles from './LiteWorkbench.module.css'
+
+;(globalThis as Record<string, unknown>).MonacoEnvironment = {
+  getWorker(_: unknown, label: string) {
+    if (label === 'json') return new jsonWorker()
+    if (label === 'typescript' || label === 'javascript') return new tsWorker()
+    return new editorWorker()
+  },
+}
+loader.config({ monaco })
+
+const LANGUAGES: Record<string, string> = {
+  ts: 'typescript', tsx: 'typescript', js: 'javascript', jsx: 'javascript', json: 'json',
+  rs: 'rust', toml: 'ini', yaml: 'yaml', yml: 'yaml', css: 'css', html: 'html', md: 'markdown',
+}
+
+function languageFor(path: string) {
+  const extension = path.split('.').pop()?.toLowerCase() ?? ''
+  return LANGUAGES[extension] ?? 'plaintext'
+}
+
+export function LiteEditor() {
+  const openFiles = useLiteWorkbenchStore((state) => state.openFiles)
+  const activeFilePath = useLiteWorkbenchStore((state) => state.activeFilePath)
+  const setActiveFile = useLiteWorkbenchStore((state) => state.setActiveFile)
+  const updateFile = useLiteWorkbenchStore((state) => state.updateFile)
+  const markSaved = useLiteWorkbenchStore((state) => state.markSaved)
+  const closeFile = useLiteWorkbenchStore((state) => state.closeFile)
+  const activeFile = openFiles.find((file) => file.path === activeFilePath) ?? null
+  const editorRef = useRef<monaco.editor.IStandaloneCodeEditor | null>(null)
+  const [saveState, setSaveState] = useState<{ kind: 'idle' | 'saving' | 'saved' | 'error'; message: string }>({ kind: 'idle', message: '' })
+
+  const saveLiveEditor = useCallback(async () => {
+    const editor = editorRef.current
+    const state = useLiteWorkbenchStore.getState()
+    const filePath = state.activeFilePath
+    if (!editor || !filePath) return
+    const content = editor.getValue()
+    state.updateFile(filePath, content)
+    setSaveState({ kind: 'saving', message: 'Saving…' })
+    try {
+      const response = await window.daemon.fs.writeFile(filePath, content)
+      if (!response.ok) throw new Error(response.error ?? 'Save failed')
+      useLiteWorkbenchStore.getState().markSaved(filePath, content)
+      setSaveState({ kind: 'saved', message: 'Saved' })
+    } catch (error) {
+      setSaveState({ kind: 'error', message: error instanceof Error ? error.message : 'Save failed' })
+    }
+  }, [])
+
+  const handleMount: OnMount = useCallback((editor, monacoApi) => {
+    editorRef.current = editor
+    editor.addCommand(monacoApi.KeyMod.CtrlCmd | monacoApi.KeyCode.KeyS, saveLiveEditor)
+  }, [saveLiveEditor])
+
+  if (!activeFile) {
+    return <div className={styles.editorEmpty}><strong>DAEMON Workbench</strong><span>Open a file from Explorer. Your project stays local.</span></div>
+  }
+
+  return (
+    <section className={styles.editor} aria-label="Code editor">
+      <div className={styles.tabs}>
+        {openFiles.map((file) => {
+          const isDirty = file.content !== file.savedContent
+          return (
+            <div key={file.path} className={`${styles.tabGroup}${file.path === activeFile.path ? ` ${styles.tabGroupActive}` : ''}`}>
+              <button type="button" className={styles.tab} onClick={() => setActiveFile(file.path)}>{file.name}{isDirty ? ' •' : ''}</button>
+              <button type="button" className={styles.tabClose} aria-label={`Close ${file.name}`} onClick={() => {
+                if (isDirty && !window.confirm(`Discard unsaved changes to ${file.name}?`)) return
+                closeFile(file.path)
+              }}><X size={11} /></button>
+            </div>
+          )
+        })}
+        <span className={styles.saveStatus} role={saveState.kind === 'error' ? 'alert' : 'status'}>{saveState.message}</span>
+        <button type="button" className={styles.saveButton} disabled={saveState.kind === 'saving' || activeFile.content === activeFile.savedContent} onClick={() => void saveLiveEditor()}>Save</button>
+      </div>
+      <MonacoEditor
+        path={activeFile.path.replace(/\\/g, '/')}
+        language={languageFor(activeFile.path)}
+        value={activeFile.content}
+        onChange={(value) => updateFile(activeFile.path, value ?? '')}
+        onMount={handleMount}
+        theme="vs-dark"
+        loading={<div className={styles.editorLoading}>Loading editor…</div>}
+        options={{ automaticLayout: true, fontSize: 13, minimap: { enabled: false }, scrollBeyondLastLine: false, padding: { top: 12 } }}
+      />
+    </section>
+  )
+}
diff --git a/src/lite/workbench/LiteExplorer.tsx b/src/lite/workbench/LiteExplorer.tsx
new file mode 100644
index 00000000..9f7d6ad7
--- /dev/null
+++ b/src/lite/workbench/LiteExplorer.tsx
@@ -0,0 +1,149 @@
+import { useCallback, useEffect, useState, type KeyboardEvent } from 'react'
+import { CaretDown, CaretRight, File, Folder, FolderOpen, Plus } from '@phosphor-icons/react'
+import type { FileEntry, Project } from '../../../electron/shared/types'
+import { useLiteWorkbenchStore } from './liteWorkbenchStore'
+import styles from './LiteWorkbench.module.css'
+
+const EDITABLE_EXTENSIONS = new Set(['ts', 'tsx', 'js', 'jsx', 'json', 'css', 'html', 'md', 'rs', 'toml', 'yaml', 'yml', 'sh', 'ps1', 'txt', 'env', 'gitignore'])
+
+function isEditableTextFile(entry: FileEntry): boolean {
+  const normalized = entry.name.toLowerCase()
+  if (normalized.includes('keypair') || normalized === 'id.json') return false
+  const extension = normalized.includes('.') ? normalized.split('.').at(-1) ?? '' : normalized
+  return EDITABLE_EXTENSIONS.has(extension)
+}
+
+function containsPath(entries: FileEntry[], path: string): boolean {
+  return entries.some((entry) => entry.path === path || (entry.children ? containsPath(entry.children, path) : false))
+}
+
+function TreeEntry({ entry, depth, focusedPath, onFocus, onOpen }: { entry: FileEntry; depth: number; focusedPath: string | null; onFocus: (path: string) => void; onOpen: (entry: FileEntry) => void }) {
+  const [isExpanded, setIsExpanded] = useState(depth < 1)
+  const Glyph = entry.isDirectory ? (isExpanded ? FolderOpen : Folder) : File
+  const hasChildren = entry.isDirectory && Boolean(entry.children?.length)
+
+  return (
+    <div role="none">
+      <button
+        type="button"
+        role="treeitem"
+        aria-level={depth + 1}
+        aria-expanded={entry.isDirectory ? isExpanded : undefined}
+        tabIndex={focusedPath === entry.path ? 0 : -1}
+        className={styles.treeRow}
+        style={{ paddingLeft: `${8 + depth * 14}px` }}
+        onClick={() => entry.isDirectory ? setIsExpanded((value) => !value) : onOpen(entry)}
+        onFocus={() => onFocus(entry.path)}
+      >
+        {entry.isDirectory ? (isExpanded ? <CaretDown size={11} /> : <CaretRight size={11} />) : <span className={styles.treeSpacer} />}
+        <Glyph size={13} aria-hidden="true" />
+        <span>{entry.name}</span>
+      </button>
+      {isExpanded && hasChildren ? <div role="group">{entry.children?.map((child) => (
+        <TreeEntry key={child.path} entry={child} depth={depth + 1} focusedPath={focusedPath} onFocus={onFocus} onOpen={onOpen} />
+      ))}</div> : null}
+    </div>
+  )
+}
+
+export function LiteExplorer({ project, onOpenProject }: { project: Project | null; onOpenProject: () => void }) {
+  const tree = useLiteWorkbenchStore((state) => state.tree)
+  const setTree = useLiteWorkbenchStore((state) => state.setTree)
+  const openFile = useLiteWorkbenchStore((state) => state.openFile)
+  const [error, setError] = useState<string | null>(null)
+  const [isLoading, setIsLoading] = useState(false)
+  const [focusedPath, setFocusedPath] = useState<string | null>(null)
+
+  const refresh = useCallback(async () => {
+    if (!project) return
+    setIsLoading(true)
+    const response = await window.daemon.fs.readDir(project.path, 4)
+    setIsLoading(false)
+    if (!response.ok || !response.data) {
+      setError(response.error ?? 'Could not read this project.')
+      return
+    }
+    const nextTree = response.data
+    setError(null)
+    setTree(nextTree)
+    setFocusedPath((current) => current && containsPath(nextTree, current) ? current : nextTree[0]?.path ?? null)
+  }, [project, setTree])
+
+  useEffect(() => {
+    void refresh()
+    if (!project) return
+    void window.daemon.fs.watch(project.path)
+    const unsubscribe = window.daemon.fs.onChanged(({ rootPath }) => {
+      if (rootPath === project.path) void refresh()
+    })
+    return () => {
+      unsubscribe()
+      void window.daemon.fs.unwatch()
+    }
+  }, [project, refresh])
+
+  const handleOpen = async (entry: FileEntry) => {
+    if (!isEditableTextFile(entry)) {
+      setError(`${entry.name} is not opened as text to prevent binary or key material corruption.`)
+      return
+    }
+    const response = await window.daemon.fs.readFile(entry.path)
+    if (!response.ok || !response.data) {
+      setError(response.error ?? `Could not open ${entry.name}.`)
+      return
+    }
+    if (response.data.content.includes('\0')) {
+      setError(`${entry.name} contains binary data and cannot be edited safely.`)
+      return
+    }
+    openFile({ path: entry.path, name: entry.name, content: response.data.content, savedContent: response.data.content })
+  }
+
+  const handleTreeKeyDown = (event: KeyboardEvent<HTMLDivElement>) => {
+    const items = Array.from(event.currentTarget.querySelectorAll<HTMLButtonElement>('[role="treeitem"]'))
+    const index = items.indexOf(document.activeElement as HTMLButtonElement)
+    if (index < 0) return
+    const current = items[index]
+    let target: HTMLButtonElement | undefined
+    if (event.key === 'ArrowDown') target = items[index + 1]
+    else if (event.key === 'ArrowUp') target = items[index - 1]
+    else if (event.key === 'Home') target = items[0]
+    else if (event.key === 'End') target = items.at(-1)
+    else if (event.key === 'ArrowRight') {
+      if (current.getAttribute('aria-expanded') === 'false') current.click()
+      else target = items[index + 1]
+    } else if (event.key === 'ArrowLeft') {
+      if (current.getAttribute('aria-expanded') === 'true') current.click()
+      else {
+        const level = Number(current.getAttribute('aria-level'))
+        target = items.slice(0, index).reverse().find((item) => Number(item.getAttribute('aria-level')) < level)
+      }
+    } else return
+    event.preventDefault()
+    target?.focus()
+  }
+
+  return (
+    <section className={styles.explorer} aria-label="Project explorer" aria-busy={isLoading}>
+      <header className={styles.sectionHeader}>
+        <span>{project?.name ?? 'Explorer'}</span>
+        <button type="button" className={styles.iconButton} aria-label="Open project folder" onClick={onOpenProject}>
+          <Plus size={14} />
+        </button>
+      </header>
+      {!project ? (
+        <div className={styles.emptyState}>
+          <FolderOpen size={24} />
+          <p>Open a local Solana project to start.</p>
+          <button type="button" className={styles.primaryButton} onClick={onOpenProject}>Open folder</button>
+        </div>
+      ) : isLoading ? (
+        <div className={styles.emptyState} role="status">Loading project files…</div>
+      ) : error ? (
+        <div className={styles.errorState} role="alert">{error}</div>
+      ) : (
+        <div className={styles.tree} role="tree" aria-label={`${project.name} files`} onKeyDown={handleTreeKeyDown}>{tree.length ? tree.map((entry) => <TreeEntry key={entry.path} entry={entry} depth={0} focusedPath={focusedPath} onFocus={setFocusedPath} onOpen={handleOpen} />) : <div className={styles.emptyState}>This folder is empty.</div>}</div>
+      )}
+    </section>
+  )
+}
diff --git a/src/lite/workbench/LiteTerminal.tsx b/src/lite/workbench/LiteTerminal.tsx
new file mode 100644
index 00000000..2a8dc8b9
--- /dev/null
+++ b/src/lite/workbench/LiteTerminal.tsx
@@ -0,0 +1,125 @@
+import { useEffect, useRef, useState } from 'react'
+import { Terminal } from '@xterm/xterm'
+import { FitAddon } from '@xterm/addon-fit'
+import '@xterm/xterm/css/xterm.css'
+import { Plus, X } from '@phosphor-icons/react'
+import { useLiteWorkbenchStore } from './liteWorkbenchStore'
+import styles from './LiteWorkbench.module.css'
+
+function TerminalViewport({ id, isVisible }: { id: string; isVisible: boolean }) {
+  const containerRef = useRef<HTMLDivElement | null>(null)
+  const terminalRef = useRef<Terminal | null>(null)
+  const fitRef = useRef<FitAddon | null>(null)
+
+  useEffect(() => {
+    const container = containerRef.current
+    if (!container) return
+    const terminal = new Terminal({ convertEol: true, cursorBlink: true, fontSize: 12, screenReaderMode: true, theme: { background: '#0c0e0d', foreground: '#d7d8d4' } })
+    const fit = new FitAddon()
+    terminalRef.current = terminal
+    fitRef.current = fit
+    terminal.loadAddon(fit)
+    terminal.open(container)
+    fit.fit()
+    const input = terminal.onData((data) => window.daemon.terminal.write(id, data))
+    const output = window.daemon.terminal.onData((payload) => { if (payload.id === id) terminal.write(payload.data) })
+    window.daemon.terminal.ready(id, terminal.cols, terminal.rows)
+    let resizeFrame = 0
+    let lastSize = `${terminal.cols}x${terminal.rows}`
+    const observer = new ResizeObserver(() => {
+      cancelAnimationFrame(resizeFrame)
+      resizeFrame = requestAnimationFrame(() => {
+        fit.fit()
+        const nextSize = `${terminal.cols}x${terminal.rows}`
+        if (nextSize === lastSize) return
+        lastSize = nextSize
+        window.daemon.terminal.resize(id, terminal.cols, terminal.rows)
+      })
+    })
+    observer.observe(container)
+    return () => {
+      observer.disconnect()
+      cancelAnimationFrame(resizeFrame)
+      output()
+      input.dispose()
+      terminal.dispose()
+      terminalRef.current = null
+      fitRef.current = null
+    }
+  }, [id])
+
+  useEffect(() => {
+    if (!isVisible) return
+    const frame = requestAnimationFrame(() => {
+      fitRef.current?.fit()
+      const terminal = terminalRef.current
+      if (terminal) {
+        terminal.refresh(0, Math.max(0, terminal.rows - 1))
+        window.daemon.terminal.resize(id, terminal.cols, terminal.rows)
+      }
+    })
+    return () => cancelAnimationFrame(frame)
+  }, [isVisible])
+
+  return <div ref={containerRef} className={styles.terminalViewport} aria-label="Interactive project terminal" />
+}
+
+export function LiteTerminal({ isVisible = true }: { isVisible?: boolean }) {
+  const project = useLiteWorkbenchStore((state) => state.activeProject)
+  const terminalIds = useLiteWorkbenchStore((state) => state.terminalIds)
+  const activeTerminalId = useLiteWorkbenchStore((state) => state.activeTerminalId)
+  const addTerminal = useLiteWorkbenchStore((state) => state.addTerminal)
+  const removeTerminal = useLiteWorkbenchStore((state) => state.removeTerminal)
+  const setActiveTerminal = useLiteWorkbenchStore((state) => state.setActiveTerminal)
+  const [terminalError, setTerminalError] = useState<string | null>(null)
+  const [exitCodes, setExitCodes] = useState<Record<string, number>>({})
+
+  useEffect(() => window.daemon.terminal.onExit(({ id, exitCode }) => setExitCodes((current) => ({ ...current, [id]: exitCode }))), [])
+
+  const createTerminal = async (startupCommand?: string) => {
+    if (!project) return
+    setTerminalError(null)
+    const response = await window.daemon.terminal.create({ cwd: project.path, startupCommand, userInitiated: !startupCommand })
+    if (response.ok && response.data) addTerminal(response.data.id)
+    else setTerminalError(response.error ?? 'Could not create the project terminal.')
+  }
+
+  const closeTerminal = async (id: string) => {
+    const response = await window.daemon.terminal.kill(id)
+    if (!response.ok) {
+      setTerminalError(response.error ?? 'Could not close the terminal.')
+      return
+    }
+    removeTerminal(id)
+    setExitCodes((current) => {
+      const next = { ...current }
+      delete next[id]
+      return next
+    })
+  }
+
+  return (
+    <section className={styles.terminal} aria-label="Terminal">
+      <header className={styles.terminalHeader}>
+        <span>Terminal</span>
+        <div className={styles.terminalTabs}>
+          {terminalIds.map((id, index) => (
+            <div key={id} className={styles.terminalTabGroup}>
+              <button type="button" className={id === activeTerminalId ? styles.terminalTabActive : styles.terminalTab} onClick={() => setActiveTerminal(id)}>pwsh {index + 1}{id in exitCodes ? ` · exited ${exitCodes[id]}` : ''}</button>
+              <button type="button" className={styles.tabClose} aria-label={`Close terminal ${index + 1}`} onClick={() => void closeTerminal(id)}><X size={10} /></button>
+            </div>
+          ))}
+          <button type="button" className={styles.iconButton} aria-label="New terminal" disabled={!project} onClick={() => void createTerminal()}><Plus size={13} /></button>
+        </div>
+      </header>
+      {terminalError ? <div className={styles.errorState} role="alert">{terminalError}</div> : null}
+      {activeTerminalId && activeTerminalId in exitCodes ? <div className={exitCodes[activeTerminalId] === 0 ? styles.terminalStatus : styles.errorState} role={exitCodes[activeTerminalId] === 0 ? 'status' : 'alert'}>Exited with code {exitCodes[activeTerminalId]}</div> : null}
+      {terminalIds.map((id) => (
+        <div key={id} className={id === activeTerminalId ? styles.terminalPaneActive : styles.terminalPaneHidden}>
+          <TerminalViewport id={id} isVisible={isVisible && id === activeTerminalId} />
+        </div>
+      ))}
+      {terminalIds.length === 0 ? <div className={styles.terminalEmpty}>{project ? 'Open a project terminal.' : 'Open a project first.'}</div> : null}
+    </section>
+  )
+}
diff --git a/src/lite/workbench/LiteWorkbench.module.css b/src/lite/workbench/LiteWorkbench.module.css
new file mode 100644
index 00000000..8f5b78e5
--- /dev/null
+++ b/src/lite/workbench/LiteWorkbench.module.css
@@ -0,0 +1,84 @@
+.workbench { display: flex; flex: 1; min-width: 0; min-height: 0; flex-direction: column; overflow: hidden; background: var(--bg-workspace); }
+.topbar { min-height: 46px; display: grid; grid-template-columns: minmax(130px, 1fr) auto minmax(130px, 1fr); align-items: center; gap: var(--space-sm); padding: 0 16px; border-bottom: 1px solid var(--border); background: var(--bg-workspace); }
+.projectButton, .textButton, .iconButton { border: 0; color: var(--t2); background: transparent; font: inherit; cursor: pointer; }
+.projectButton { display: flex; align-items: center; gap: 8px; min-width: 0; max-width: 220px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-weight: 600; text-align: left; }
+.projectDot, .localState > span { width: 6px; height: 6px; flex: 0 0 auto; border-radius: 50%; background: var(--accent); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent) 12%, transparent); }
+.projectPath { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--t4); font-size: var(--fs-11); }
+.devnetBadge { padding: 2px 7px; border: 1px solid var(--border-hover); color: var(--accent); font-size: var(--fs-10); letter-spacing: .06em; }
+.surfaceTabs { display: flex; align-items: center; gap: 3px; padding: 3px; border: 1px solid var(--border); border-radius: 9px; background: var(--bg-panel); }
+.surfaceTabs button { min-height: 28px; border: 0; border-radius: 6px; background: transparent; color: var(--t4); padding: 0 11px; font: inherit; font-size: var(--fs-10); cursor: pointer; }
+.surfaceTabs button:hover { color: var(--t2); }
+.surfaceTabs button[aria-pressed='true'], .backToChat { color: var(--t1); background: var(--surface-card-hover); box-shadow: inset 0 0 0 1px var(--border); }
+.localState { justify-self: end; display: flex; align-items: center; gap: 7px; color: var(--t4); font-size: var(--fs-10); }
+.localState > span { width: 5px; height: 5px; box-shadow: none; }
+.projectError { padding: var(--space-sm) var(--space-md); color: var(--red); background: var(--bg-panel); }
+.workArea { display: grid; grid-template-columns: minmax(0, 1fr); flex: 1; min-width: 0; min-height: 0; overflow: hidden; }
+.workArea.hasWork { grid-template-columns: minmax(320px, 42%) minmax(0, 1fr); }
+.agentSurface { position: relative; display: flex; min-width: 0; min-height: 0; flex-direction: column; background: var(--bg-workspace); }
+.hasWork .agentSurface { border-right: 1px solid var(--border); }
+.agentWelcome { position: absolute; z-index: 1; top: clamp(64px, 15vh, 150px); left: 50%; width: min(620px, calc(100% - 48px)); transform: translateX(-50%); text-align: center; pointer-events: none; }
+.agentWelcome + :global(*) :global([class*='scroll']) { padding-top: clamp(230px, 38vh, 340px); }
+.agentWelcome h1 { margin: 10px 0 8px; color: var(--t1); font-size: clamp(26px, 4vw, 42px); font-weight: 620; letter-spacing: -.045em; }
+.agentWelcome p { max-width: 520px; margin: auto; color: var(--t3); font-size: var(--fs-12); line-height: 1.55; }
+.suggestions { display: flex; justify-content: center; gap: 7px; flex-wrap: wrap; margin-top: 20px; pointer-events: auto; }
+.suggestions button { border: 1px solid var(--border); border-radius: 999px; background: color-mix(in srgb, var(--bg-panel) 86%, transparent); color: var(--t3); padding: 8px 12px; font: inherit; font-size: var(--fs-10); cursor: pointer; }
+.suggestions button:hover { border-color: var(--border-hover); color: var(--t1); background: var(--surface-card-hover); }
+.hasWork .agentWelcome { display: none; }
+.codeSurface { display: grid; grid-template-columns: 238px minmax(0, 1fr); flex: 1; min-height: 0; }
+.codeSurface > :first-child { border-right: 1px solid var(--border); }
+.terminalSurface { display: grid; grid-template-columns: minmax(0, 1fr) 286px; flex: 1; min-width: 0; min-height: 0; overflow: hidden; }
+.studioSurface { min-width: 0; min-height: 0; overflow: hidden; }
+.surfaceHidden { display: none; }
+.terminalSurface > :last-child { border-left: 1px solid var(--border); }
+.explorer, .workflow, .editor, .terminal, .aria { min-height: 0; background: var(--bg-panel); }
+.explorer, .workflow { display: flex; flex-direction: column; }
+.workflow { border-top: 1px solid var(--border); }
+.sectionHeader, .terminalHeader, .ariaHeader { min-height: var(--btn-h-lg); display: flex; align-items: center; justify-content: space-between; gap: var(--space-sm); padding: 0 var(--space-sm); color: var(--t3); font-size: var(--fs-11); text-transform: uppercase; letter-spacing: .06em; border-bottom: 1px solid var(--border); }
+.tree { overflow: auto; padding: var(--space-xs) 0; }
+.treeRow { width: 100%; height: 25px; display: flex; align-items: center; gap: 5px; border: 0; background: transparent; color: var(--t2); font: inherit; font-size: var(--fs-11); text-align: left; cursor: pointer; white-space: nowrap; }
+.treeRow:hover { background: var(--surface-card-hover); }
+.treeSpacer { width: 11px; }
+.emptyState, .editorEmpty, .terminalEmpty, .workflowHint { display: flex; align-items: center; justify-content: center; flex-direction: column; gap: var(--space-sm); padding: var(--space-lg); color: var(--t4); text-align: center; }
+.primaryButton, .workflowActions button { border: 1px solid var(--border-hover); background: var(--surface-card-hover); color: var(--t1); padding: 6px 10px; font: inherit; cursor: pointer; }
+.errorState { margin: var(--space-sm); padding: var(--space-sm); color: var(--red); background: var(--surface-card-hover); font-size: var(--fs-11); }
+.statusList { padding: var(--space-sm); display: grid; gap: 6px; }
+.statusRow { display: grid; grid-template-columns: 7px 1fr auto; align-items: center; gap: 6px; color: var(--t2); font-size: var(--fs-11); }
+.statusRow small { color: var(--t4); max-width: 82px; overflow: hidden; text-overflow: ellipsis; }
+.statusGood, .statusMissing { width: 5px; height: 5px; border-radius: 50%; background: var(--success); }
+.statusMissing { background: var(--warning); }
+.workflowActions { display: grid; grid-template-columns: repeat(3, 1fr); gap: 5px; padding: var(--space-sm); }
+.workflowActions button:disabled { opacity: .4; cursor: not-allowed; }
+.clusterGuard { margin: auto var(--space-sm) var(--space-sm); padding: var(--space-sm); border: 1px solid var(--border); color: var(--t4); font-size: var(--fs-10); }
+.clusterGuard span { color: var(--warning); letter-spacing: .06em; }
+.clusterGuard p { margin: 4px 0 0; }
+.center { display: grid; grid-template-rows: minmax(240px, 1fr) minmax(150px, 34%); min-width: 0; min-height: 0; }
+.editor { display: flex; flex-direction: column; border-bottom: 1px solid var(--border); }
+.editorEmpty { height: 100%; }
+.editorEmpty strong { color: var(--t2); font-size: var(--fs-14); }
+.tabs { display: flex; min-height: 31px; overflow-x: auto; border-bottom: 1px solid var(--border); }
+.tabGroup { display: flex; align-items: center; flex: 0 0 auto; max-width: 190px; border-right: 1px solid var(--border); background: var(--bg-panel); }
+.tabGroupActive { background: var(--bg-workspace); }
+.tab { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; border: 0; background: transparent; color: var(--t4); font: inherit; font-size: var(--fs-11); padding: 0 4px 0 var(--space-sm); cursor: pointer; }
+.tabGroupActive .tab { color: var(--t1); }
+.tabClose { display: grid; place-items: center; flex: 0 0 auto; width: 22px; height: 22px; border: 0; border-radius: 4px; background: transparent; color: var(--t4); cursor: pointer; }
+.tabClose:hover { color: var(--t1); background: var(--surface-card-hover); }
+.saveButton { margin-left: auto; border: 0; border-left: 1px solid var(--border); background: transparent; color: var(--t2); padding: 0 var(--space-sm); font: inherit; font-size: var(--fs-11); cursor: pointer; }
+.saveStatus { margin-left: auto; align-self: center; color: var(--t4); font-size: var(--fs-10); }
+.saveStatus + .saveButton { margin-left: 0; }
+.saveButton:disabled { color: var(--t4); cursor: default; }
+.editorLoading { display: grid; place-items: center; height: 100%; color: var(--t4); }
+.terminal { display: flex; min-width: 0; overflow: hidden; flex-direction: column; }
+.terminalHeader { justify-content: flex-start; }
+.terminalTabs { display: flex; gap: 3px; align-items: center; }
+.terminalTabGroup { display: flex; align-items: center; }
+.terminalTab, .terminalTabActive { display: flex; align-items: center; border: 0; background: transparent; color: var(--t4); font: inherit; font-size: var(--fs-10); cursor: pointer; }
+.terminalTabActive { color: var(--t1); }
+.terminalViewport { flex: 1; min-width: 0; min-height: 0; overflow: hidden; padding: var(--space-sm); background: var(--bg-app); }
+.terminalStatus { padding: 6px var(--space-sm); color: var(--t3); background: var(--bg-app); font-size: var(--fs-10); }
+.terminalPaneActive { display: flex; flex: 1; min-height: 0; }
+.terminalPaneHidden { position: absolute; width: 1px; height: 1px; overflow: hidden; opacity: 0; pointer-events: none; }
+.aria { display: flex; flex-direction: column; border-left: 1px solid var(--border); }
+.ariaHeader small { color: var(--t4); text-transform: none; letter-spacing: 0; }
+@media (max-width: 980px) { .workArea.hasWork { grid-template-columns: 1fr; } .hasWork .agentSurface { display: none; } }
+@media (max-width: 900px) { .topbar { grid-template-columns: minmax(100px, 1fr) auto; } .localState { display: none; } .terminalSurface { grid-template-columns: minmax(0, 1fr); grid-template-rows: minmax(260px, 1fr) minmax(0, 300px); } .terminalSurface > :last-child { min-width: 0; max-height: 300px; overflow: auto; border-left: 0; border-top: 1px solid var(--border); } }
+@media (max-width: 700px) { .topbar { min-height: 84px; grid-template-columns: 1fr; align-content: center; } .surfaceTabs { justify-self: stretch; overflow-x: auto; } .surfaceTabs button { flex: 1 0 auto; } .codeSurface { grid-template-columns: minmax(150px, 32%) minmax(0, 1fr); } .agentWelcome { top: 38px; } }
diff --git a/src/lite/workbench/LiteWorkbench.tsx b/src/lite/workbench/LiteWorkbench.tsx
new file mode 100644
index 00000000..5c9de86d
--- /dev/null
+++ b/src/lite/workbench/LiteWorkbench.tsx
@@ -0,0 +1,115 @@
+import { useEffect, useState } from 'react'
+import { LiteChat } from '../LiteChat'
+import { LiteExplorer } from './LiteExplorer'
+import { LiteEditor } from './LiteEditor'
+import { LiteTerminal } from './LiteTerminal'
+import { LiteWorkflowRail } from './LiteWorkflowRail'
+import { useLiteWorkbenchStore } from './liteWorkbenchStore'
+import { useAriaStore } from '../../store/aria'
+import styles from './LiteWorkbench.module.css'
+import { MemeTechStudio } from '../studio/MemeTechStudio'
+
+type WorkbenchSurface = 'code' | 'terminal' | 'studio'
+interface LiteWorkbenchProps {
+  draft: string
+  onDraftChange: (value: string) => void
+  onSend: () => void
+  conversationResetKey?: number
+}
+
+export function LiteWorkbench({ draft, onDraftChange, onSend, conversationResetKey = 0 }: LiteWorkbenchProps) {
+  const projects = useLiteWorkbenchStore((state) => state.projects)
+  const activeProject = useLiteWorkbenchStore((state) => state.activeProject)
+  const setProjects = useLiteWorkbenchStore((state) => state.setProjects)
+  const setActiveProject = useLiteWorkbenchStore((state) => state.setActiveProject)
+  const [projectError, setProjectError] = useState<string | null>(null)
+  const turns = useAriaStore((state) => state.turns)
+  const [surface, setSurface] = useState<WorkbenchSurface | null>(null)
+
+  const loadProjects = async () => {
+    const response = await window.daemon.projects.list()
+    if (!response.ok || !response.data) {
+      setProjectError(response.error ?? 'Could not load projects.')
+      return
+    }
+    setProjects(response.data)
+    if (!useLiteWorkbenchStore.getState().activeProject && response.data[0]) await activateProject(response.data[0])
+  }
+
+  useEffect(() => { void loadProjects() }, [])
+  useEffect(() => { setSurface(null) }, [conversationResetKey])
+
+  const activateProject = async (project: typeof activeProject) => {
+    if (!project || project.id === useLiteWorkbenchStore.getState().activeProject?.id) return
+    const state = useLiteWorkbenchStore.getState()
+    const dirtyFiles = state.openFiles.filter((file) => file.content !== file.savedContent)
+    if (dirtyFiles.length && !window.confirm(`Discard unsaved changes in ${dirtyFiles.length} file(s) and switch projects?`)) return
+    await Promise.all(state.terminalIds.map((id) => window.daemon.terminal.kill(id)))
+    setActiveProject(project)
+    await useAriaStore.getState().initSessions()
+  }
+
+  const openProject = async () => {
+    const pathResponse = await window.daemon.projects.openDialog()
+    if (!pathResponse.ok || !pathResponse.data) return
+    const projectPath = pathResponse.data
+    const existing = projects.find((project) => project.path.toLowerCase() === projectPath.toLowerCase())
+    if (existing) {
+      await activateProject(existing)
+      return
+    }
+    const name = projectPath.split(/[\\/]/).at(-1) ?? 'Solana project'
+    const response = await window.daemon.projects.create({ name, path: projectPath })
+    if (!response.ok || !response.data) {
+      setProjectError(response.error ?? 'Could not import this folder.')
+      return
+    }
+    setProjects([response.data, ...projects])
+    await activateProject(response.data)
+  }
+
+  return (
+    <div className={styles.workbench}>
+      <div className={styles.topbar}>
+        <button type="button" className={styles.projectButton} onClick={() => void openProject()}>
+          <span className={styles.projectDot} aria-hidden="true" />
+          {activeProject?.name ?? 'Open project'}
+        </button>
+        <nav className={styles.surfaceTabs} aria-label="Open work surface">
+          {surface ? <button type="button" className={styles.backToChat} onClick={() => setSurface(null)}>Chat</button> : null}
+          {(['code', 'terminal', 'studio'] as const).map((view) => (
+            <button key={view} type="button" aria-pressed={surface === view} onClick={() => setSurface(surface === view ? null : view)}>
+              {view === 'studio' ? 'Meme Tech' : view[0].toUpperCase() + view.slice(1)}
+            </button>
+          ))}
+        </nav>
+        <span className={styles.localState}><span aria-hidden="true" />Local only</span>
+      </div>
+      {projectError ? <div className={styles.projectError} role="alert">{projectError}</div> : null}
+      <div className={`${styles.workArea}${surface ? ` ${styles.hasWork}` : ''}`}>
+        <section className={styles.agentSurface} aria-label="DAEMON conversation">
+          {turns.length === 0 ? <div className={styles.agentWelcome}>
+            <h1>What are we building?</h1>
+            <p>{activeProject ? `${activeProject.name} is in context. Paste an error or describe the next change.` : 'Open a project or start with an idea.'}</p>
+            <div className={styles.suggestions}>
+              <button type="button" onClick={() => onDraftChange('Understand this project and identify the highest-risk gaps.')}>Understand this project</button>
+              <button type="button" onClick={() => onDraftChange('Help me debug the current build or test failure.')}>Debug a failure</button>
+            </div>
+          </div> : null}
+          <LiteChat draft={draft} onDraftChange={onDraftChange} onSend={onSend} />
+        </section>
+        <section className={`${styles.codeSurface}${surface === 'code' ? '' : ` ${styles.surfaceHidden}`}`} aria-label="Code workspace" aria-hidden={surface !== 'code'}>
+          <LiteExplorer project={activeProject} onOpenProject={() => void openProject()} />
+          <LiteEditor />
+        </section>
+        <section className={`${styles.terminalSurface}${surface === 'terminal' ? '' : ` ${styles.surfaceHidden}`}`} aria-label="Terminal workspace" aria-hidden={surface !== 'terminal'}>
+          <LiteTerminal isVisible={surface === 'terminal'} />
+          <LiteWorkflowRail />
+        </section>
+        <section className={`${styles.studioSurface}${surface === 'studio' ? '' : ` ${styles.surfaceHidden}`}`} aria-label="Meme Tech workspace" aria-hidden={surface !== 'studio'}>
+          <MemeTechStudio project={activeProject} />
+        </section>
+      </div>
+    </div>
+  )
+}
diff --git a/src/lite/workbench/LiteWorkflowRail.tsx b/src/lite/workbench/LiteWorkflowRail.tsx
new file mode 100644
index 00000000..8c77a48f
--- /dev/null
+++ b/src/lite/workbench/LiteWorkflowRail.tsx
@@ -0,0 +1,78 @@
+import { useEffect, useState } from 'react'
+import type { SolanaToolchainStatus, ValidatorState } from '../../../electron/services/ValidatorManager'
+import type { SolanaProjectInfo } from '../../../electron/services/SolanaDetector'
+import { useLiteWorkbenchStore } from './liteWorkbenchStore'
+import styles from './LiteWorkbench.module.css'
+
+function ToolStatus({ name, installed, version }: { name: string; installed: boolean; version?: string | null }) {
+  return <div className={styles.statusRow}><span className={installed ? styles.statusGood : styles.statusMissing} /><span>{name}</span><small>{installed ? version || 'ready' : 'missing'}</small></div>
+}
+
+export function LiteWorkflowRail() {
+  const project = useLiteWorkbenchStore((state) => state.activeProject)
+  const addTerminal = useLiteWorkbenchStore((state) => state.addTerminal)
+  const [toolchain, setToolchain] = useState<SolanaToolchainStatus | null>(null)
+  const [validator, setValidator] = useState<ValidatorState | null>(null)
+  const [projectInfo, setProjectInfo] = useState<SolanaProjectInfo | null>(null)
+  const [error, setError] = useState<string | null>(null)
+
+  const refresh = async () => {
+    if (!project) return
+    const [toolchainResponse, validatorResponse, projectResponse] = await Promise.all([
+      window.daemon.validator.toolchainStatus(project.path),
+      window.daemon.validator.status(),
+      window.daemon.validator.detectProject(project.path),
+    ])
+    if (toolchainResponse.ok && toolchainResponse.data) setToolchain(toolchainResponse.data)
+    else setError(toolchainResponse.error ?? 'Toolchain check failed.')
+    if (validatorResponse.ok && validatorResponse.data) setValidator(validatorResponse.data)
+    if (projectResponse.ok && projectResponse.data) setProjectInfo(projectResponse.data)
+  }
+
+  useEffect(() => { void refresh() }, [project])
+
+  useEffect(() => window.daemon.validator.onStatusChange?.((next) => setValidator(next as ValidatorState)), [])
+
+  const run = async (command: string) => {
+    if (!project) return
+    const response = await window.daemon.terminal.create({ cwd: project.path, startupCommand: command })
+    if (response.ok && response.data) addTerminal(response.data.id)
+    else setError(response.error ?? `Could not start ${command}.`)
+  }
+
+  const startValidator = async () => {
+    const response = await window.daemon.validator.start('test-validator')
+    if (!response.ok) setError(response.error ?? 'Validator failed to start.')
+    await refresh()
+  }
+
+  const stopValidator = async () => {
+    const response = await window.daemon.validator.stop()
+    if (!response.ok) setError(response.error ?? 'Validator failed to stop.')
+    await refresh()
+  }
+
+  return (
+    <section className={styles.workflow} aria-label="Solana workflow">
+      <header className={styles.sectionHeader}><span>Solana workflow</span><button type="button" className={styles.textButton} disabled={!project} onClick={() => void refresh()}>Recheck</button></header>
+      {!project ? <div className={styles.workflowHint}>Open a project to inspect its environment.</div> : null}
+      {error ? <div className={styles.errorState} role="alert">{error}</div> : null}
+      {toolchain ? <div className={styles.statusList}>
+        <ToolStatus name="Solana CLI" {...toolchain.solanaCli} />
+        <ToolStatus name="Anchor" {...toolchain.anchor} />
+        <ToolStatus name="Validator" {...toolchain.testValidator} />
+      </div> : null}
+      {projectInfo && !projectInfo.isSolanaProject ? <div className={styles.workflowHint}>No Solana project markers found. Add a Solana client dependency, Cargo program, or Anchor workspace before running chain workflows.</div> : null}
+      <div className={styles.workflowActions}>
+        <button type="button" disabled={!project || projectInfo?.framework !== 'anchor' || !toolchain?.anchor.installed} onClick={() => void run('anchor build')}>Build</button>
+        <button type="button" disabled={!project || projectInfo?.framework !== 'anchor' || !toolchain?.anchor.installed} onClick={() => void run('anchor test --provider.cluster localnet')}>Test localnet</button>
+        {validator?.status === 'running' ? (
+          <button type="button" onClick={() => void stopValidator()}>Stop validator</button>
+        ) : (
+          <button type="button" disabled={!project || !projectInfo?.isSolanaProject || !toolchain?.testValidator.installed} onClick={() => void startValidator()}>Local validator</button>
+        )}
+      </div>
+      <div className={styles.clusterGuard}><span>GUARDED WORKFLOWS: LOCALNET / DEVNET</span><p>Workflow actions never deploy to mainnet. Commands typed in the terminal remain under your control.</p></div>
+    </section>
+  )
+}
diff --git a/src/lite/workbench/liteWorkbenchStore.ts b/src/lite/workbench/liteWorkbenchStore.ts
new file mode 100644
index 00000000..7eb3bf22
--- /dev/null
+++ b/src/lite/workbench/liteWorkbenchStore.ts
@@ -0,0 +1,94 @@
+import { create } from 'zustand'
+import type { FileEntry, Project } from '../../../electron/shared/types'
+
+export interface LiteOpenFile {
+  path: string
+  name: string
+  content: string
+  savedContent: string
+}
+
+interface LiteWorkbenchState {
+  projects: Project[]
+  activeProject: Project | null
+  tree: FileEntry[]
+  openFiles: LiteOpenFile[]
+  activeFilePath: string | null
+  terminalIds: string[]
+  activeTerminalId: string | null
+  setProjects: (projects: Project[]) => void
+  setActiveProject: (project: Project | null) => void
+  setTree: (tree: FileEntry[]) => void
+  openFile: (file: LiteOpenFile) => void
+  setActiveFile: (path: string) => void
+  updateFile: (path: string, content: string) => void
+  markSaved: (path: string, persistedContent: string) => void
+  closeFile: (path: string) => void
+  addTerminal: (id: string) => void
+  removeTerminal: (id: string) => void
+  setActiveTerminal: (id: string) => void
+}
+
+export const useLiteWorkbenchStore = create<LiteWorkbenchState>((set) => ({
+  projects: [],
+  activeProject: null,
+  tree: [],
+  openFiles: [],
+  activeFilePath: null,
+  terminalIds: [],
+  activeTerminalId: null,
+  setProjects: (projects) => set({ projects }),
+  setActiveProject: (activeProject) => set({
+    activeProject,
+    tree: [],
+    openFiles: [],
+    activeFilePath: null,
+    terminalIds: [],
+    activeTerminalId: null,
+  }),
+  setTree: (tree) => set({ tree }),
+  openFile: (file) => set((state) => {
+    const existing = state.openFiles.find((item) => item.path === file.path)
+    return {
+      openFiles: existing ? state.openFiles : [...state.openFiles, file],
+      activeFilePath: file.path,
+    }
+  }),
+  setActiveFile: (activeFilePath) => set({ activeFilePath }),
+  updateFile: (path, content) => set((state) => ({
+    openFiles: state.openFiles.map((file) => file.path === path ? { ...file, content } : file),
+  })),
+  markSaved: (path, persistedContent) => set((state) => ({
+    openFiles: state.openFiles.map((file) => file.path === path ? { ...file, savedContent: persistedContent } : file),
+  })),
+  closeFile: (path) => set((state) => {
+    const openFiles = state.openFiles.filter((file) => file.path !== path)
+    return {
+      openFiles,
+      activeFilePath: state.activeFilePath === path ? openFiles.at(-1)?.path ?? null : state.activeFilePath,
+    }
+  }),
+  addTerminal: (id) => set((state) => ({
+    terminalIds: state.terminalIds.includes(id) ? state.terminalIds : [...state.terminalIds, id],
+    activeTerminalId: id,
+  })),
+  removeTerminal: (id) => set((state) => {
+    const terminalIds = state.terminalIds.filter((terminalId) => terminalId !== id)
+    return {
+      terminalIds,
+      activeTerminalId: state.activeTerminalId === id ? terminalIds.at(-1) ?? null : state.activeTerminalId,
+    }
+  }),
+  setActiveTerminal: (activeTerminalId) => set({ activeTerminalId }),
+}))
+
+export function getLiteWorkspaceSnapshot() {
+  const state = useLiteWorkbenchStore.getState()
+  return {
+    activeProjectId: state.activeProject?.id ?? null,
+    activeProjectPath: state.activeProject?.path ?? null,
+    openFilePath: state.activeFilePath,
+    treeEntries: state.tree.length,
+    hasTerminal: state.terminalIds.length > 0,
+  }
+}
diff --git a/src/main.tsx b/src/main.tsx
index 5d7d84c0..1fc12e38 100644
--- a/src/main.tsx
+++ b/src/main.tsx
@@ -2,8 +2,13 @@ import './polyfills'
 import React from 'react'
 import ReactDOM from 'react-dom/client'
 import App from './App'
+import { setAriaHost } from './store/ariaHost'
+import { ideAriaHost } from './store/ariaHostIde'
 import '../styles/base.css'
 
+// Wire the ARIA store to the IDE shell (project context, terminals, ui effects).
+setAriaHost(ideAriaHost)
+
 class RootErrorBoundary extends React.Component<
   { children: React.ReactNode },
   { error: Error | null }
diff --git a/src/panels/AgentWorkbench/AgentWorkbench.tsx b/src/panels/AgentWorkbench/AgentWorkbench.tsx
index 17b5d96f..a4f1cf11 100644
--- a/src/panels/AgentWorkbench/AgentWorkbench.tsx
+++ b/src/panels/AgentWorkbench/AgentWorkbench.tsx
@@ -23,16 +23,10 @@ const CONTEXT_CHIPS: { id: ChipId; label: string }[] = [
   { id: 'projectMemory', label: 'Project Memory' },
 ]
 
-// Monochrome "knowledge" mark for the brain count — a lightbulb/spark, not an emoji
-// (UI chrome stays emoji-free; the glyph inherits currentColor like the rest of the row).
-export function MemoryKnowledgeIcon() {
-  return (
-    <svg width="13" height="13" viewBox="0 0 14 14" fill="none" stroke="currentColor" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
-      <path d="M7 1.5a4 4 0 0 0-2.4 7.2c.3.25.5.6.5 1v.3h3.8v-.3c0-.4.2-.75.5-1A4 4 0 0 0 7 1.5Z" />
-      <path d="M5.4 12.2h3.2M6 13.2h2" />
-    </svg>
-  )
-}
+// Monochrome "knowledge" mark for the brain count — lives in its own module so
+// transcript components and the Lite shell can use it without this panel.
+export { MemoryKnowledgeIcon } from './MemoryKnowledgeIcon'
+import { MemoryKnowledgeIcon } from './MemoryKnowledgeIcon'
 
 /** Build · Plan segment for the composer foot row. Plan mode makes ARIA present
  *  a plan and wait for one approval before writing. Default Build. */
diff --git a/src/panels/AgentWorkbench/MemoryKnowledgeIcon.tsx b/src/panels/AgentWorkbench/MemoryKnowledgeIcon.tsx
new file mode 100644
index 00000000..06888a21
--- /dev/null
+++ b/src/panels/AgentWorkbench/MemoryKnowledgeIcon.tsx
@@ -0,0 +1,10 @@
+/** Lightbulb-memory glyph. Own module so transcript components (and the Lite
+ *  shell) can import it without pulling the full AgentWorkbench panel. */
+export function MemoryKnowledgeIcon() {
+  return (
+    <svg width="13" height="13" viewBox="0 0 14 14" fill="none" stroke="currentColor" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
+      <path d="M7 1.5a4 4 0 0 0-2.4 7.2c.3.25.5.6.5 1v.3h3.8v-.3c0-.4.2-.75.5-1A4 4 0 0 0 7 1.5Z" />
+      <path d="M5.4 12.2h3.2M6 13.2h2" />
+    </svg>
+  )
+}
diff --git a/src/panels/AgentWorkbench/RecalledMemoryStrip.tsx b/src/panels/AgentWorkbench/RecalledMemoryStrip.tsx
index 3576e835..06c69758 100644
--- a/src/panels/AgentWorkbench/RecalledMemoryStrip.tsx
+++ b/src/panels/AgentWorkbench/RecalledMemoryStrip.tsx
@@ -1,6 +1,6 @@
 import { useState } from 'react'
 import type { AriaMemorySuggestionLite } from '../../../electron/shared/types'
-import { MemoryKnowledgeIcon } from './AgentWorkbench'
+import { MemoryKnowledgeIcon } from './MemoryKnowledgeIcon'
 
 /**
  * Shows what ARIA recalled to handle a turn — the "it remembers you" moment.
diff --git a/src/panels/ProjectStarter/ProjectStarter.tsx b/src/panels/ProjectStarter/ProjectStarter.tsx
index 8837cc75..8cc85870 100644
--- a/src/panels/ProjectStarter/ProjectStarter.tsx
+++ b/src/panels/ProjectStarter/ProjectStarter.tsx
@@ -4,6 +4,14 @@ import { useWorkflowShellStore } from '../../store/workflowShell'
 import { useNotificationsStore } from '../../store/notifications'
 import { useAppActions } from '../../store/appActions'
 import { useBrowserStore } from '../../store/browser'
+import {
+  GAME_BACKGROUND_COLOR,
+  GAME_MAIN_TS,
+  GAME_SCENE_TS,
+  GAME_DAEMON_INDEX_TS,
+  GAME_DAEMON_TYPES_TS,
+  GAME_DAEMON_STUB_TS,
+} from './gameTemplateFiles'
 import './ProjectStarter.css'
 
 // --- Template definitions ---
@@ -18,6 +26,7 @@ export interface Template {
 }
 
 const MEME_COIN_WEBSITE_TEMPLATE_ID = 'meme-coin-website'
+const PHASER_GAME_TEMPLATE_ID = 'phaser-solana-game'
 
 export const TEMPLATES: Template[] = [
   {
@@ -74,6 +83,14 @@ Initialize git repo. Use @solana/kit and Helius or QuickNode as the transport la
 - README with dev server and deployment instructions
 Initialize git repo. Prefer @solana/client, @solana/react-hooks, and @solana/web3-compat only when compatibility shims are needed.`,
   },
+  {
+    id: PHASER_GAME_TEMPLATE_ID,
+    name: 'Solana Game',
+    description: 'Playable Phaser + TypeScript arcade with seedless wallet, cNFT assets, and policy-gated signing pre-wired',
+    tags: ['Game', 'Phaser'],
+    icon: 'M6 12h4m-2-2v4m5-1h.01M18 13h.01M7 6h10a4 4 0 014 4v4a4 4 0 01-4 4H7a4 4 0 01-4-4v-4a4 4 0 014-4z',
+    prompt: `Transform this Phaser + TypeScript arcade starter into the game the user described, keeping the four DAEMON hub seams intact. The game must import on-chain capability ONLY through src/daemon (getBridge() + the interfaces in src/daemon/types.ts) and never import an SDK directly. Keep connect/getSession, mintAsset, recordOutcome working and update src/daemon/manifest.ts (slug, title, category, shortDescription, signingPolicy, monetization). monetization must be 'none' | 'cosmetics' | 'entry-fee' with no earn loop. Keep signingPolicy minimal (value cap 0 unless a transfer is truly needed). Keep seedless onboarding. It must typecheck and build: npm run build.`,
+  },
   {
     id: MEME_COIN_WEBSITE_TEMPLATE_ID,
     name: 'Meme Coin Website',
@@ -296,6 +313,10 @@ function defaultMemeSettings(): MemeCoinWebsiteSettings {
   }
 }
 
+function isGameTemplate(templateId: string | null | undefined): boolean {
+  return templateId === PHASER_GAME_TEMPLATE_ID
+}
+
 function isMemeCoinWebsiteTemplate(templateId: string | null | undefined): boolean {
   return templateId === MEME_COIN_WEBSITE_TEMPLATE_ID
 }
@@ -686,6 +707,38 @@ function buildMemeWebsiteStartupCommand(port: number): string {
   ].join(' && ')
 }
 
+/**
+ * Startup command for the game template. Installs deps, then serves the Vite dev
+ * build so BrowserMode can preview it. The initial git commit (required so a swarm
+ * lane can branch a worktree) is done deterministically in the scaffold handler
+ * before this runs — not here — because shell-chained git was fragile on Windows.
+ */
+function buildGameStartupCommand(port: number): string {
+  const url = `http://127.0.0.1:${port}`
+  const isWindows = typeof navigator !== 'undefined' && /windows/i.test(navigator.userAgent)
+  if (isWindows) {
+    return [
+      'Write-Host "DAEMON: installing game dependencies..."',
+      'npm install',
+      'if ($LASTEXITCODE -ne 0) { Write-Host "DAEMON: install failed"; exit $LASTEXITCODE }',
+      'Write-Host "DAEMON: building the game..."',
+      'npm run build',
+      'if ($LASTEXITCODE -ne 0) { Write-Host "DAEMON: build failed"; exit $LASTEXITCODE }',
+      `Write-Host "DAEMON: starting game at ${url}"`,
+      `npm run dev -- --host 127.0.0.1 --port ${port}`,
+    ].join('; ')
+  }
+
+  return [
+    'printf "DAEMON: installing game dependencies...\\n"',
+    'npm install',
+    'printf "DAEMON: building the game...\\n"',
+    'npm run build',
+    `printf "DAEMON: starting game at ${url}\\n"`,
+    `npm run dev -- --host 127.0.0.1 --port ${port}`,
+  ].join(' && ')
+}
+
 async function isPortListening(port: number): Promise<boolean> {
   try {
     const scanRes = await window.daemon.ports.scan()
@@ -726,7 +779,11 @@ async function openMemeWebsiteWhenReady(input: {
   projectId: string
   projectName: string
   sessionId: string
+  /** 'website' (default) or 'game' — only affects user-facing copy. */
+  kind?: 'website' | 'game'
 }) {
+  const noun = input.kind === 'game' ? 'game' : 'website'
+  const Noun = input.kind === 'game' ? 'Game' : 'Website'
   const url = `http://127.0.0.1:${input.port}`
   const ready = await waitForMemeWebsiteReady(input.terminalId, input.port)
   const notifications = useNotificationsStore.getState()
@@ -734,7 +791,7 @@ async function openMemeWebsiteWhenReady(input: {
     notifications.addActivity({
       kind: 'warning',
       context: 'Scaffold',
-      message: `Website build did not report a running server for ${input.projectName}. Check the terminal for install or build errors.`,
+      message: `${Noun} build did not report a running server for ${input.projectName}. Check the terminal for install or build errors.`,
       sessionId: input.sessionId,
       sessionStatus: 'blocked',
       projectId: input.projectId,
@@ -742,8 +799,8 @@ async function openMemeWebsiteWhenReady(input: {
     })
     notifications.pushToast({
       kind: 'warning',
-      context: 'Meme Website',
-      message: 'Website build needs attention. Check the terminal output.',
+      context: Noun,
+      message: `${Noun} build needs attention. Check the terminal output.`,
     })
     return
   }
@@ -753,14 +810,14 @@ async function openMemeWebsiteWhenReady(input: {
   notifications.addActivity({
     kind: 'success',
     context: 'Scaffold',
-    message: `Website is running for ${input.projectName} at ${url}.`,
+    message: `${Noun} is running for ${input.projectName} at ${url}.`,
     sessionId: input.sessionId,
     sessionStatus: 'complete',
     projectId: input.projectId,
     projectName: input.projectName,
-    artifacts: [{ type: 'project', label: 'Local website', value: url, href: url }],
+    artifacts: [{ type: 'project', label: `Local ${noun}`, value: url, href: url }],
   })
-  notifications.pushSuccess(`Opened ${input.projectName} in DAEMON browser`, 'Meme Website')
+  notifications.pushSuccess(`Opened ${input.projectName} in DAEMON browser`, Noun)
 }
 
 function escapeMarkup(value: string): string {
@@ -1716,6 +1773,198 @@ function nodeAppFiles(template: Template): ScaffoldFile[] {
   ]
 }
 
+/**
+ * Full self-contained file set for the Phaser Solana game template ("Starfall").
+ * Unlike the node/next templates this brings its own package.json, tsconfig,
+ * README, and .gitignore, so it bypasses commonFiles entirely. The four DAEMON
+ * hub seams (src/daemon/*) ship as working stubs so the game is playable the
+ * moment it is scaffolded; a swarm lane later customizes src/game and manifest.
+ */
+function gameFiles(projectName: string): ScaffoldFile[] {
+  const pkgName = packageName(projectName)
+  return [
+    {
+      path: 'package.json',
+      content: quotedJson({
+        name: pkgName,
+        version: '0.1.0',
+        private: true,
+        type: 'module',
+        description: 'DAEMON Game Hub template: a playable Phaser arcade with seedless wallet, cNFT assets, and policy-gated signing pre-wired.',
+        scripts: {
+          dev: 'vite',
+          build: 'tsc --noEmit && vite build',
+          preview: 'vite preview',
+          typecheck: 'tsc --noEmit',
+        },
+        dependencies: { phaser: '^3.90.0' },
+        devDependencies: { typescript: '^5.7.0', vite: '^6.0.0' },
+      }),
+    },
+    { path: '.gitignore', content: 'node_modules\ndist\n.env\n.DS_Store\n' },
+    {
+      path: '.env.example',
+      content: [
+        '# The game runs standalone with stub seams — no env needed to play.',
+        '# These are the hub-swap targets the DAEMON swarm fills at publish time.',
+        '# VITE_HELIUS_API_KEY=      # RPC/DAS when a real bridge is wired',
+        '# VITE_ONBOARDING_PROVIDER= # gameshift | privy | turnkey (seedless wallet)',
+        '',
+      ].join('\n'),
+    },
+    {
+      path: 'tsconfig.json',
+      content: quotedJson({
+        compilerOptions: {
+          target: 'ES2022',
+          module: 'ESNext',
+          moduleResolution: 'bundler',
+          lib: ['ES2022', 'DOM', 'DOM.Iterable'],
+          strict: true,
+          noUnusedLocals: true,
+          noUnusedParameters: true,
+          noFallthroughCasesInSwitch: true,
+          esModuleInterop: true,
+          skipLibCheck: true,
+          resolveJsonModule: true,
+          isolatedModules: true,
+          noEmit: true,
+        },
+        include: ['src'],
+      }),
+    },
+    {
+      path: 'vite.config.ts',
+      content: [
+        "import { defineConfig } from 'vite'",
+        '',
+        '// The DAEMON Game Hub loads this build into an embedded player (iframe/webview).',
+        "// base: './' keeps asset paths relative so it runs from any mount point.",
+        'export default defineConfig({',
+        "  base: './',",
+        '  build: {',
+        "    target: 'es2022',",
+        "    outDir: 'dist',",
+        '    sourcemap: false,',
+        '  },',
+        '})',
+        '',
+      ].join('\n'),
+    },
+    {
+      path: 'index.html',
+      content: [
+        '<!doctype html>',
+        '<html lang="en">',
+        '  <head>',
+        '    <meta charset="UTF-8" />',
+        '    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />',
+        `    <title>${projectName}</title>`,
+        '    <style>',
+        `      html, body { margin: 0; height: 100%; background: ${GAME_BACKGROUND_COLOR}; overflow: hidden; }`,
+        '      #app { width: 100%; height: 100%; display: grid; place-items: center; }',
+        '    </style>',
+        '  </head>',
+        '  <body>',
+        '    <div id="app"></div>',
+        '    <script type="module" src="/src/main.ts"></script>',
+        '  </body>',
+        '</html>',
+        '',
+      ].join('\n'),
+    },
+    { path: 'README.md', content: gameReadme(projectName) },
+    { path: 'src/main.ts', content: GAME_MAIN_TS },
+    { path: 'src/game/GameScene.ts', content: GAME_SCENE_TS },
+    { path: 'src/daemon/index.ts', content: GAME_DAEMON_INDEX_TS },
+    { path: 'src/daemon/types.ts', content: GAME_DAEMON_TYPES_TS },
+    { path: 'src/daemon/manifest.ts', content: gameManifest(projectName) },
+    { path: 'src/daemon/stub.ts', content: GAME_DAEMON_STUB_TS },
+  ]
+}
+
+function gameReadme(projectName: string): string {
+  return [
+    `# ${projectName}`,
+    '',
+    'A DAEMON Game Hub arcade template — a real, playable Phaser + TypeScript game with',
+    'the four hub seams pre-wired. It runs standalone the moment you scaffold it;',
+    'published through the hub, the swarm swaps the stubs for real SDKs without',
+    'touching the game code.',
+    '',
+    '## Run it',
+    '```bash',
+    'npm install',
+    'npm run dev        # play at the printed localhost URL',
+    'npm run build      # typecheck + production build (what the hub embeds)',
+    '```',
+    '',
+    'Controls: arrow keys or tap left/right to move, SPACE / tap to start.',
+    '',
+    '## The four hub seams (`src/daemon/`)',
+    '| Seam | File | Stub does | Real impl (swarm swaps in) |',
+    '|---|---|---|---|',
+    '| Wallet + seedless onboarding | `types.ts` `connect/getSession` | fake session, no seed | GameShift / Privy / Turnkey |',
+    '| Assets (cNFT) | `mintAsset` | local trophy | Metaplex Bubblegum / Core |',
+    '| Signing (safe by construction) | `recordOutcome` + `GameSigningPolicy` | local policy check | DAEMON `SignerGuardService` |',
+    '| Publish record | `manifest.ts` | listing metadata + policy | `game_registry` provenance row |',
+    '',
+    'The game imports **only** the interfaces in `src/daemon/types.ts` via `getBridge()`.',
+    'It never imports an SDK directly. Swap `src/daemon/stub.ts` for a real bridge and',
+    'the game is unchanged. That is the studio-in-a-box contract.',
+    '',
+    '## Safe-by-construction',
+    '`GameSigningPolicy` caps this game to a single program (memo) and **zero value',
+    "transfer**. `stub.ts` enforces it locally exactly as DAEMON's",
+    '`SignerGuardService.assertTransactionAllowed()` will on-chain.',
+    '',
+  ].join('\n')
+}
+
+function gameManifest(projectName: string): string {
+  const slug = packageName(projectName)
+  return [
+    '// Publish manifest — what the hub reads to list this game in game_registry.',
+    '//',
+    '// The swarm fills this in (or a dev edits it) before publish. The `signingPolicy`',
+    '// here becomes the on-chain SignerGuardPolicy the game is capped to. `onboarding`',
+    "// must be true to pass the hub's listing policy (hide-the-chain invariant).",
+    '',
+    "import type { GameSigningPolicy } from './types'",
+    '',
+    'export interface GameManifest {',
+    '  /** slug used in the store URL */',
+    '  slug: string',
+    '  title: string',
+    "  category: 'arcade' | 'card' | 'battler' | 'casual' | 'puzzle'",
+    '  shortDescription: string',
+    '  /** author wallet (base58); set by the hub at publish from the session */',
+    '  author?: string',
+    '  /** must be true — seedless onboarding present — or the listing is rejected */',
+    '  onboarding: boolean',
+    '  /** the per-game signing cap; enforced by DAEMON SignerGuardService */',
+    '  signingPolicy: GameSigningPolicy',
+    '  /** NOT an extractive P2E economy. Listing policy rejects earn-loops. */',
+    "  monetization: 'none' | 'cosmetics' | 'entry-fee'",
+    '}',
+    '',
+    'export const manifest: GameManifest = {',
+    `  slug: ${JSON.stringify(slug)},`,
+    `  title: ${JSON.stringify(projectName)},`,
+    "  category: 'arcade',",
+    "  shortDescription: 'A 60-second score-attack. Dodge, survive, mint your best run.',",
+    '  onboarding: true,',
+    '  signingPolicy: {',
+    "    allowedPrograms: ['MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr'],",
+    '    maxLamportsPerAction: 0,',
+    '    approvalThresholdLamports: 0,',
+    '  },',
+    "  monetization: 'cosmetics',",
+    '}',
+    '',
+  ].join('\n')
+}
+
 function commonFiles(template: Template, projectName: string, memeSettings?: MemeCoinWebsiteScaffoldSettings | null): ScaffoldFile[] {
   return [
     { path: 'package.json', content: quotedJson(buildPackageJson(template, projectName)) },
@@ -1731,6 +1980,20 @@ export function buildDeterministicScaffold(
   projectName: string,
   options: { memeSettings?: MemeCoinWebsiteScaffoldSettings | null } = {},
 ): DeterministicScaffold {
+  // The game template is fully self-contained (own package.json/tsconfig/README),
+  // so it bypasses commonFiles entirely.
+  if (template.id === PHASER_GAME_TEMPLATE_ID) {
+    const gameFileSet = gameFiles(projectName)
+    const gameDirs = new Set<string>()
+    for (const file of gameFileSet) {
+      const parts = file.path.split('/').slice(0, -1)
+      for (let i = 1; i <= parts.length; i += 1) {
+        gameDirs.add(parts.slice(0, i).join('/'))
+      }
+    }
+    return { dirs: [...gameDirs].filter(Boolean), files: gameFileSet }
+  }
+
   const isNext = isNextTemplate(template.id)
   const files = [
     ...commonFiles(template, projectName, options.memeSettings),
@@ -1855,6 +2118,27 @@ export function ProjectStarter() {
     setError(null)
   }, [activeProjectPath])
 
+  // Consume an ARIA scaffold preset (from scaffold_game): jump to the configure
+  // step with the template preselected and the name filled, then clear it so a
+  // later manual open of the wizard starts clean.
+  useEffect(() => {
+    const preset = useUIStore.getState().scaffoldPreset
+    if (!preset) return
+    const template = TEMPLATES.find((t) => t.id === preset.templateId)
+    useUIStore.getState().setScaffoldPreset(null)
+    if (!template) return
+    const suggestedSavePath = activeProjectPath ? pathDirName(activeProjectPath) : ''
+    setWizard({
+      step: 'configure',
+      template,
+      projectName: preset.projectName,
+      savePath: suggestedSavePath,
+      targetMode: 'new',
+      meme: defaultMemeSettings(),
+    })
+    setError(null)
+  }, [activeProjectPath])
+
   const goBack = useCallback(() => {
     setWizard({ step: 'templates', template: null, projectName: '', savePath: '', targetMode: 'new', meme: defaultMemeSettings() })
     setError(null)
@@ -1904,7 +2188,11 @@ export function ProjectStarter() {
     const memeSettings = isMemeCoinWebsiteTemplate(wizard.template.id)
       ? normalizeMemeSettings(wizard.meme, name)
       : null
-    const memeDevPort = memeSettings ? await chooseMemeWebsiteDevPort() : null
+    const isGame = isGameTemplate(wizard.template.id)
+    // Both the meme site and the game auto-serve + auto-preview; pick a dev port for either.
+    const devPort = (memeSettings || isGame) ? await chooseMemeWebsiteDevPort() : null
+    const memeDevPort = memeSettings ? devPort : null
+    const gameDevPort = isGame ? devPort : null
     const sessionId = `scaffold-${crypto.randomUUID()}`
 
     setWizard((prev) => ({ ...prev, step: 'building' }))
@@ -2026,6 +2314,25 @@ export function ProjectStarter() {
             throw new Error(fileRes.error ?? `Failed to write ${file.path}`)
           }
         }
+
+        // Game projects must have >=1 commit so a swarm lane can branch a worktree
+        // (WorktreeService.addWorktree). Do it deterministically here rather than in
+        // the fragile shell-chained startup command. Best-effort: a git failure must
+        // not block the scaffold — the user can commit later before launching a swarm.
+        if (isGameTemplate(wizard.template.id)) {
+          const initRes = await window.daemon.git.initCommit(projectPath, 'chore: initial game scaffold')
+          if (!initRes.ok) {
+            useNotificationsStore.getState().addActivity({
+              kind: 'warning',
+              context: 'Scaffold',
+              message: `Game scaffolded, but the initial git commit failed (${initRes.error ?? 'unknown'}). Commit before launching a swarm.`,
+              sessionId,
+              sessionStatus: 'running',
+              projectId: newProject.id,
+              projectName: name,
+            })
+          }
+        }
       } catch (scaffoldErr) {
         useNotificationsStore.getState().addActivity({
           kind: 'error',
@@ -2042,22 +2349,31 @@ export function ProjectStarter() {
         return
       }
 
+      // Both meme site and game auto-serve + preview; pick the right startup command + label.
+      const previewPort = memeDevPort ?? gameDevPort
+      const startupCommand = memeDevPort
+        ? buildMemeWebsiteStartupCommand(memeDevPort)
+        : gameDevPort
+          ? buildGameStartupCommand(gameDevPort)
+          : undefined
+      const previewKind = gameDevPort ? 'game' : 'website'
+
       const termRes = await window.daemon.terminal.create({
         cwd: projectPath,
-        startupCommand: memeDevPort ? buildMemeWebsiteStartupCommand(memeDevPort) : undefined,
+        startupCommand,
         userInitiated: true,
       })
 
       if (termRes.ok && termRes.data) {
-        addTerminal(newProject.id, termRes.data.id, memeDevPort ? `Website: ${name}` : `Terminal: ${name}`, null)
-        if (memeDevPort) {
-          await window.daemon.ports.register(memeDevPort, newProject.id, `${name} website`)
+        addTerminal(newProject.id, termRes.data.id, previewPort ? `${gameDevPort ? 'Game' : 'Website'}: ${name}` : `Terminal: ${name}`, null)
+        if (previewPort) {
+          await window.daemon.ports.register(previewPort, newProject.id, `${name} ${previewKind}`)
         }
         useNotificationsStore.getState().addActivity({
           kind: 'success',
           context: 'Scaffold',
-          message: memeDevPort
-            ? `Project scaffold written for ${name}. Installing dependencies, building, then starting http://127.0.0.1:${memeDevPort}.`
+          message: previewPort
+            ? `Project scaffold written for ${name}. Installing dependencies, building, then starting http://127.0.0.1:${previewPort}.`
             : `Project scaffold written for ${name}. Open terminal is idle; run pnpm install when ready.`,
           sessionId,
           sessionStatus: 'running',
@@ -2068,13 +2384,14 @@ export function ProjectStarter() {
         setActiveWorkspaceTool(null)
         focusTerminal()
         closeDrawer()
-        if (memeDevPort) {
+        if (previewPort) {
           void openMemeWebsiteWhenReady({
             terminalId: termRes.data.id,
-            port: memeDevPort,
+            port: previewPort,
             projectId: newProject.id,
             projectName: name,
             sessionId,
+            kind: gameDevPort ? 'game' : 'website',
           })
         }
       } else {
diff --git a/src/panels/ProjectStarter/gameTemplateFiles.ts b/src/panels/ProjectStarter/gameTemplateFiles.ts
new file mode 100644
index 00000000..7c78774e
--- /dev/null
+++ b/src/panels/ProjectStarter/gameTemplateFiles.ts
@@ -0,0 +1,402 @@
+/**
+ * Raw source for the Phaser Solana game template ("Starfall"), embedded as
+ * plain strings so ProjectStarter can write them verbatim during scaffolding.
+ *
+ * These are stored as line arrays joined with '\n' rather than template
+ * literals because the game source itself contains backticks and ${} — keeping
+ * them as data avoids any template-literal escaping ambiguity. The four hub
+ * seams (types/index/stub/manifest) match daemon-game-studio's arcade-starter.
+ */
+
+export const GAME_BACKGROUND_COLOR = '#0a0a12'
+
+export const GAME_MAIN_TS = [
+  "import Phaser from 'phaser'",
+  "import { GameScene } from './game/GameScene'",
+  "import { manifest } from './daemon'",
+  '',
+  "// Entry point. The hub's GamePlayer mounts this build in an embedded surface;",
+  '// standalone it runs from `npm run dev`.',
+  '',
+  'document.title = manifest.title',
+  '',
+  'new Phaser.Game({',
+  '  type: Phaser.AUTO,',
+  "  parent: 'app',",
+  '  width: 480,',
+  '  height: 720,',
+  "  backgroundColor: '#0a0a12',",
+  '  physics: {',
+  "    default: 'arcade',",
+  '    arcade: { gravity: { x: 0, y: 0 }, debug: false },',
+  '  },',
+  '  scale: {',
+  '    mode: Phaser.Scale.FIT,',
+  '    autoCenter: Phaser.Scale.CENTER_BOTH,',
+  '  },',
+  '  scene: [GameScene],',
+  '})',
+  '',
+].join('\n')
+
+export const GAME_SCENE_TS = [
+  "import Phaser from 'phaser'",
+  "import { getBridge } from '../daemon'",
+  '',
+  '// Starfall: a 60-second score-attack. Move the ship left/right, catch stars for',
+  '// points, dodge falling rocks. When time runs out, the run\'s score is recorded',
+  '// on-chain (via the DAEMON bridge) and a trophy cNFT is minted for a new best.',
+  '//',
+  '// This is a REAL loop, not a skeleton: input, spawning, collision, scoring,',
+  '// difficulty ramp, game-over, and the on-chain hook are all implemented.',
+  '',
+  'const GAME_MS = 60_000',
+  'const SHIP_SPEED = 420',
+  'const STAR_POINTS = 10',
+  '',
+  'export class GameScene extends Phaser.Scene {',
+  '  private ship!: Phaser.GameObjects.Rectangle',
+  '  private stars!: Phaser.Physics.Arcade.Group',
+  '  private rocks!: Phaser.Physics.Arcade.Group',
+  '  private cursors!: Phaser.Types.Input.Keyboard.CursorKeys',
+  '  private scoreText!: Phaser.GameObjects.Text',
+  '  private timeText!: Phaser.GameObjects.Text',
+  '  private statusText!: Phaser.GameObjects.Text',
+  '  private score = 0',
+  '  private endsAt = 0',
+  '  private spawnEvent?: Phaser.Time.TimerEvent',
+  '  private running = false',
+  "  private best = Number(localStorage.getItem('starfall_best') ?? '0')",
+  '',
+  '  constructor() {',
+  "    super('game')",
+  '  }',
+  '',
+  '  create() {',
+  '    const { width, height } = this.scale',
+  '',
+  '    this.add.rectangle(width / 2, height / 2, width, height, 0x0a0a12)',
+  '    this.ship = this.add.rectangle(width / 2, height - 40, 44, 20, 0x4cd4c4)',
+  '    this.physics.add.existing(this.ship)',
+  '    ;(this.ship.body as Phaser.Physics.Arcade.Body).setCollideWorldBounds(true)',
+  '',
+  '    this.stars = this.physics.add.group()',
+  '    this.rocks = this.physics.add.group()',
+  '',
+  "    this.scoreText = this.add.text(16, 14, 'SCORE 0', fontStyle())",
+  "    this.timeText = this.add.text(width - 16, 14, '60', fontStyle()).setOrigin(1, 0)",
+  '    this.statusText = this.add',
+  "      .text(width / 2, height / 2, '', fontStyle(20))",
+  '      .setOrigin(0.5)',
+  '',
+  '    this.cursors = this.input.keyboard!.createCursorKeys()',
+  "    this.input.keyboard!.on('keydown-SPACE', () => {",
+  '      if (!this.running) this.startRun()',
+  '    })',
+  "    this.input.on('pointerdown', () => {",
+  '      if (!this.running) this.startRun()',
+  '    })',
+  '',
+  '    this.physics.add.overlap(this.ship, this.stars, (_s, star) => {',
+  '      ;(star as Phaser.GameObjects.Rectangle).destroy()',
+  '      this.score += STAR_POINTS',
+  '      this.scoreText.setText(`SCORE ${this.score}`)',
+  '    })',
+  "    this.physics.add.overlap(this.ship, this.rocks, () => this.endRun('HIT'))",
+  '',
+  '    this.showIdle()',
+  '  }',
+  '',
+  '  private showIdle() {',
+  '    this.statusText.setText(`STARFALL\\nbest ${this.best}\\n\\nSPACE / tap to start`).setAlpha(1)',
+  '  }',
+  '',
+  '  private startRun() {',
+  '    this.score = 0',
+  "    this.scoreText.setText('SCORE 0')",
+  '    this.stars.clear(true, true)',
+  '    this.rocks.clear(true, true)',
+  '    this.statusText.setAlpha(0)',
+  '    this.running = true',
+  '    this.endsAt = this.time.now + GAME_MS',
+  '    this.spawnEvent = this.time.addEvent({',
+  '      delay: 650,',
+  '      loop: true,',
+  '      callback: () => this.spawn(),',
+  '    })',
+  '  }',
+  '',
+  '  private spawn() {',
+  '    const x = Phaser.Math.Between(20, this.scale.width - 20)',
+  '    const elapsed = 1 - Math.max(0, this.endsAt - this.time.now) / GAME_MS',
+  '    const rockChance = 0.35 + elapsed * 0.3 // difficulty ramps up',
+  '    const isRock = Math.random() < rockChance',
+  '    const group = isRock ? this.rocks : this.stars',
+  '    const color = isRock ? 0xff5a6a : 0xffd447',
+  '    const obj = this.add.rectangle(x, -20, isRock ? 22 : 16, isRock ? 22 : 16, color)',
+  '    this.physics.add.existing(obj)',
+  '    const body = obj.body as Phaser.Physics.Arcade.Body',
+  '    body.setVelocityY(160 + elapsed * 180)',
+  '    group.add(obj)',
+  '  }',
+  '',
+  "  private endRun(reason: 'TIME' | 'HIT') {",
+  '    if (!this.running) return',
+  '    this.running = false',
+  '    this.spawnEvent?.remove()',
+  '    this.stars.setVelocityY(0)',
+  '    this.rocks.setVelocityY(0)',
+  '',
+  '    const isBest = this.score > this.best',
+  '    if (isBest) {',
+  '      this.best = this.score',
+  "      localStorage.setItem('starfall_best', String(this.best))",
+  '    }',
+  "    this.statusText.setText(`${reason === 'HIT' ? 'CRASHED' : 'TIME'}\\nscore ${this.score}`).setAlpha(1)",
+  '    void this.settle(isBest)',
+  '  }',
+  '',
+  '  /** Record the run on-chain and mint a trophy on a new best (via DAEMON). */',
+  '  private async settle(isBest: boolean) {',
+  '    const bridge = getBridge()',
+  '    try {',
+  '      if (!bridge.getSession()) await bridge.connect()',
+  '      const outcome = await bridge.recordOutcome({ score: this.score })',
+  "      let line = outcome.ok ? 'run recorded' : `not recorded: ${outcome.error}`",
+  '      if (isBest && outcome.ok) {',
+  "        const asset = await bridge.mintAsset({ name: `Starfall ${this.score}`, kind: 'trophy' })",
+  "        line += `\\ntrophy minted (${asset.onChain ? 'on-chain' : 'local'})`",
+  '      }',
+  '      this.statusText.setText(`${this.statusText.text}\\n${line}\\n\\nSPACE / tap to retry`)',
+  '    } catch (err) {',
+  '      this.statusText.setText(`${this.statusText.text}\\n(settle error)\\n\\nSPACE / tap to retry`)',
+  '      console.error(err)',
+  '    }',
+  '  }',
+  '',
+  '  update() {',
+  '    if (this.running) {',
+  '      const body = this.ship.body as Phaser.Physics.Arcade.Body',
+  '      const left = this.cursors.left.isDown || this.pointerLeft()',
+  '      const right = this.cursors.right.isDown || this.pointerRight()',
+  '      body.setVelocityX(left ? -SHIP_SPEED : right ? SHIP_SPEED : 0)',
+  '',
+  '      const remaining = Math.max(0, this.endsAt - this.time.now)',
+  '      this.timeText.setText(String(Math.ceil(remaining / 1000)))',
+  "      if (remaining <= 0) this.endRun('TIME')",
+  '',
+  '      this.cull(this.stars)',
+  '      this.cull(this.rocks)',
+  '    }',
+  '  }',
+  '',
+  '  private pointerLeft() {',
+  '    return this.input.activePointer.isDown && this.input.activePointer.x < this.scale.width / 2',
+  '  }',
+  '  private pointerRight() {',
+  '    return this.input.activePointer.isDown && this.input.activePointer.x >= this.scale.width / 2',
+  '  }',
+  '',
+  '  private cull(group: Phaser.Physics.Arcade.Group) {',
+  '    group.children.each((child) => {',
+  '      const go = child as Phaser.GameObjects.Rectangle',
+  '      if (go.y > this.scale.height + 30) go.destroy()',
+  '      return true',
+  '    })',
+  '  }',
+  '}',
+  '',
+  'function fontStyle(size = 16): Phaser.Types.GameObjects.Text.TextStyle {',
+  '  return {',
+  "    fontFamily: 'monospace',",
+  '    fontSize: `${size}px`,',
+  "    color: '#e8e8f0',",
+  "    align: 'center',",
+  '  }',
+  '}',
+  '',
+].join('\n')
+
+export const GAME_DAEMON_TYPES_TS = [
+  '// DAEMON Game Hub — integration contract.',
+  '//',
+  '// These are the four seams every hub game plugs into. The starter ships with',
+  '// working *stub* implementations (see ./stub.ts) so the game is playable the',
+  '// moment you clone it. When a game is published through the hub, the DAEMON',
+  '// swarm replaces the stubs with real implementations backed by:',
+  '//   - wallet/onboarding -> GameShift or Privy/Turnkey (seedless, gasless)',
+  '//   - assets            -> Metaplex (cNFT via Bubblegum / Core)',
+  '//   - signing           -> DAEMON SignerGuardService (per-game policy caps)',
+  '//   - publish manifest   -> game_registry provenance record',
+  '//',
+  '// The game code depends ONLY on these interfaces, never on a concrete SDK.',
+  '// That is the studio-in-a-box promise: swap the impl, the game is unchanged.',
+  '',
+  '/** A player\'s session identity. Seedless: no seed phrase ever shown. */',
+  'export interface PlayerSession {',
+  '  /** base58 public key of the session/embedded wallet */',
+  '  address: string',
+  '  /** display handle if the onboarding provider gives one */',
+  '  label?: string',
+  '  /** true when a real (non-stub) wallet is connected */',
+  '  live: boolean',
+  '}',
+  '',
+  "/** Result of routing an on-chain action through DAEMON's signing guard. */",
+  'export interface SignResult {',
+  '  ok: boolean',
+  '  /** tx signature when ok; error reason when not */',
+  '  signature?: string',
+  '  error?: string',
+  '  /** true if the action was blocked by the per-game signing policy */',
+  '  blockedByPolicy?: boolean',
+  '}',
+  '',
+  '/** A minted in-game asset (e.g. a high-score trophy cNFT). */',
+  'export interface MintedAsset {',
+  '  assetId: string',
+  '  name: string',
+  '  /** true if minted on-chain, false if this is a stub/local mint */',
+  '  onChain: boolean',
+  '}',
+  '',
+  '/**',
+  ' * The per-game signing policy the hub attaches at publish time. The game',
+  ' * declares the programs it needs; DAEMON\'s SignerGuardService enforces that',
+  ' * the game can invoke NOTHING else and cannot exceed the value cap. This is',
+  ' * why a hub game is safe-by-construction: it literally cannot drain a player.',
+  ' */',
+  'export interface GameSigningPolicy {',
+  '  /** program IDs this game is allowed to invoke */',
+  '  allowedPrograms: string[]',
+  '  /** max lamports the game may move per action (0 = no value transfer) */',
+  '  maxLamportsPerAction: number',
+  '  /** require an explicit player approval card above this lamports amount */',
+  '  approvalThresholdLamports: number',
+  '}',
+  '',
+  '/** The DAEMON bridge the game talks to. Injected by the hub\'s GamePlayer. */',
+  'export interface DaemonBridge {',
+  '  /** Connect a seedless session wallet (no seed phrase). */',
+  '  connect(): Promise<PlayerSession>',
+  '  /** Current session, or null if not connected. */',
+  '  getSession(): PlayerSession | null',
+  '  /** Mint an in-game asset. Routed through the signing guard. */',
+  "  mintAsset(input: { name: string; kind: 'trophy' | 'cosmetic' }): Promise<MintedAsset>",
+  '  /** Record a game outcome on-chain (score/win). Routed through the guard. */',
+  '  recordOutcome(input: { score: number; meta?: Record<string, unknown> }): Promise<SignResult>',
+  '  /** The signing policy in force for this game (for display/debug). */',
+  '  policy(): GameSigningPolicy',
+  '}',
+  '',
+].join('\n')
+
+export const GAME_DAEMON_INDEX_TS = [
+  "// Bridge resolver. The hub's GamePlayer injects a real DaemonBridge on",
+  '// window.__DAEMON__ at runtime. When absent (standalone dev), we fall back to',
+  '// the stub so the game always runs.',
+  '',
+  "import type { DaemonBridge } from './types'",
+  "import { stubBridge } from './stub'",
+  '',
+  'declare global {',
+  '  interface Window {',
+  '    __DAEMON__?: DaemonBridge',
+  '  }',
+  '}',
+  '',
+  'export function getBridge(): DaemonBridge {',
+  "  if (typeof window !== 'undefined' && window.__DAEMON__) {",
+  '    return window.__DAEMON__',
+  '  }',
+  '  return stubBridge',
+  '}',
+  '',
+  "export * from './types'",
+  "export { manifest } from './manifest'",
+  '',
+].join('\n')
+
+export const GAME_DAEMON_STUB_TS = [
+  '// Stub DaemonBridge — makes the template playable standalone (no SDKs, no chain).',
+  '//',
+  '// Every method mimics the real behavior locally so a dev can run the game and',
+  '// see the full loop (connect -> play -> mint trophy -> record outcome) before',
+  '// any real integration. The swarm replaces this file with a real bridge at',
+  '// publish time; the game code never changes.',
+  '//',
+  '// The signing policy below is REAL in spirit: it demonstrates the safe-by-',
+  '// construction guarantee. mintAsset/recordOutcome check the policy locally the',
+  '// same way SignerGuardService.assertTransactionAllowed() will on-chain.',
+  '',
+  'import type {',
+  '  DaemonBridge,',
+  '  GameSigningPolicy,',
+  '  MintedAsset,',
+  '  PlayerSession,',
+  '  SignResult,',
+  "} from './types'",
+  '',
+  '// Memo program — the only thing this game needs to write a score/outcome memo.',
+  '// A real build would swap in the actual program(s); the point is the game is',
+  '// capped to THIS list and cannot invoke anything else.',
+  "const MEMO_PROGRAM = 'MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr'",
+  '',
+  'const POLICY: GameSigningPolicy = {',
+  '  allowedPrograms: [MEMO_PROGRAM],',
+  '  maxLamportsPerAction: 0, // this game never moves value — pure score/asset writes',
+  '  approvalThresholdLamports: 0,',
+  '}',
+  '',
+  'function fakeAddress(): string {',
+  '  // deterministic-ish base58-looking string; no crypto, this is a stub',
+  "  const chars = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz'",
+  "  let s = ''",
+  '  for (let i = 0; i < 44; i++) s += chars[(i * 7 + 13) % chars.length]',
+  '  return s',
+  '}',
+  '',
+  'let session: PlayerSession | null = null',
+  'let assetCounter = 0',
+  '',
+  '/** Local policy check mirroring SignerGuardService.assertTransactionAllowed. */',
+  'function policyAllows(programId: string, lamports: number): { ok: boolean; reason?: string } {',
+  '  if (!POLICY.allowedPrograms.includes(programId)) {',
+  '    return { ok: false, reason: `program ${programId} not in game policy` }',
+  '  }',
+  '  if (lamports > POLICY.maxLamportsPerAction) {',
+  '    return { ok: false, reason: `value ${lamports} exceeds cap ${POLICY.maxLamportsPerAction}` }',
+  '  }',
+  '  return { ok: true }',
+  '}',
+  '',
+  'export const stubBridge: DaemonBridge = {',
+  '  async connect(): Promise<PlayerSession> {',
+  "    session = { address: fakeAddress(), label: 'guest', live: false }",
+  '    return session',
+  '  },',
+  '',
+  '  getSession(): PlayerSession | null {',
+  '    return session',
+  '  },',
+  '',
+  '  async mintAsset({ name, kind }): Promise<MintedAsset> {',
+  '    const check = policyAllows(MEMO_PROGRAM, 0)',
+  '    if (!check.ok) throw new Error(`mint blocked: ${check.reason}`)',
+  '    assetCounter += 1',
+  '    return { assetId: `stub-${kind}-${assetCounter}`, name, onChain: false }',
+  '  },',
+  '',
+  '  async recordOutcome({ score }): Promise<SignResult> {',
+  '    const check = policyAllows(MEMO_PROGRAM, 0)',
+  '    if (!check.ok) return { ok: false, error: check.reason, blockedByPolicy: true }',
+  '    // stub "signature"',
+  '    return { ok: true, signature: `stub-sig-${score}-${Date.now().toString(36)}` }',
+  '  },',
+  '',
+  '  policy(): GameSigningPolicy {',
+  '    return POLICY',
+  '  },',
+  '}',
+  '',
+].join('\n')
diff --git a/src/panels/plugins/Subscriptions/Subscriptions.tsx b/src/panels/plugins/Subscriptions/Subscriptions.tsx
index 6c92066d..d7657bc9 100644
--- a/src/panels/plugins/Subscriptions/Subscriptions.tsx
+++ b/src/panels/plugins/Subscriptions/Subscriptions.tsx
@@ -24,7 +24,7 @@ interface TierDefinition {
 const TIERS: TierDefinition[] = [
   {
     id: 'light',
-    name: 'Light',
+    name: 'Free',
     price: 'Free',
     cadence: 'local',
     status: 'live',
@@ -196,7 +196,7 @@ export default function Subscriptions() {
         title="DAEMON access and hosted AI lanes"
         actions={
           <div className={`subscriptions-status ${subscription.active ? 'subscriptions-status--active' : ''}`}>
-            {subscription.active ? 'Active' : 'Light'}
+            {subscription.active ? 'Active' : 'Free'}
           </div>
         }
       />
diff --git a/src/store/aria.ts b/src/store/aria.ts
index 6e456b52..3aa12073 100644
--- a/src/store/aria.ts
+++ b/src/store/aria.ts
@@ -6,10 +6,7 @@ import type {
 } from '../../electron/shared/types'
 import { daemon } from '../lib/daemonBridge'
 import { markFunnelStep } from '../lib/firstMission'
-import { buildAriaSnapshot } from '../lib/ariaContext'
-import { applyUiEffect, runUiEffectWithData } from '../lib/ariaUiEffects'
-import { useUIStore } from './ui'
-import { useAppActions } from './appActions'
+import { getAriaHost } from './ariaHost'
 
 /** A pending write/sensitive tool awaiting the user's decision. */
 export interface AriaApproval {
@@ -115,7 +112,7 @@ interface AriaState {
 }
 
 function activeProjectId(): string | null {
-  return useUIStore.getState().activeProjectId ?? null
+  return getAriaHost().activeProjectId()
 }
 
 /** The in-flight assistant turn id PER session. A single global would be
@@ -196,24 +193,15 @@ export const useAriaStore = create<AriaState>((set, get) => ({
   },
 
   openProviderLogin: async (provider) => {
-    const ui = useUIStore.getState()
-    if (!ui.activeProjectId || !ui.activeProjectPath) {
-      set({ providerNotice: 'Open a project before launching a login terminal.' })
+    const host = getAriaHost()
+    if (!host.openProviderLoginTerminal) {
+      set({ providerNotice: 'Provider login requires the full DAEMON IDE.' })
       return
     }
     set({ providerBusy: provider, providerNotice: null })
     try {
-      const startupCommand = provider === 'codex' ? 'codex login' : 'claude'
-      const res = await daemon.terminal.create({
-        cwd: ui.activeProjectPath,
-        startupCommand,
-        userInitiated: true,
-      })
-      if (!res.ok || !res.data) throw new Error(res.error ?? 'Login terminal did not start')
-      ui.setCenterMode('canvas')
-      ui.addTerminal(ui.activeProjectId, res.data.id, provider === 'codex' ? 'Codex Login' : 'Claude Login', res.data.agentId)
-      useAppActions.getState().focusTerminal()
-      set({ providerNotice: `Opened ${provider} login terminal. Complete sign-in, then Verify.` })
+      const notice = await host.openProviderLoginTerminal(provider)
+      set({ providerNotice: notice })
     } catch (err) {
       set({ providerNotice: (err as Error).message })
     } finally {
@@ -242,7 +230,7 @@ export const useAriaStore = create<AriaState>((set, get) => ({
       // The devnet pin rides the snapshot so main-process tools can scope the
       // turn's reads chain-free (onboarding first mission). Restrict-only.
       const snapshot = {
-        ...buildAriaSnapshot(),
+        ...getAriaHost().buildSnapshot(),
         planMode,
         ...(opts?.pinnedCluster === 'devnet' ? { pinnedCluster: 'devnet' as const } : {}),
       }
@@ -417,10 +405,11 @@ export const useAriaStore = create<AriaState>((set, get) => ({
     const offEvent = daemon.aria.onToolEvent((raw) => applyEvent(set, get, raw as AriaToolEvent))
     const offEffect = daemon.aria.onUiEffect(({ callId, effect, awaitData }) => {
       const fx = effect as AriaUiEffect
+      const host = getAriaHost()
       if (awaitData) {
-        void runUiEffectWithData(fx).then((data) => daemon.aria.toolEffectResult(callId, data))
+        void host.runUiEffectWithData(fx).then((data) => daemon.aria.toolEffectResult(callId, data))
       } else {
-        applyUiEffect(fx)
+        host.applyUiEffect(fx)
       }
     })
     return () => { offEvent(); offEffect() }
diff --git a/src/store/ariaHost.ts b/src/store/ariaHost.ts
new file mode 100644
index 00000000..f40cad6b
--- /dev/null
+++ b/src/store/ariaHost.ts
@@ -0,0 +1,58 @@
+/**
+ * Host port for the ARIA store. The store itself is shell-agnostic; whatever
+ * shell mounts it (the full IDE, DAEMON Lite) installs a host that supplies
+ * project context and applies renderer-side effects. The default null-host
+ * serves shells with no workspace: no project, effects are no-ops.
+ *
+ * Runtime imports are deliberately zero — this module must never drag IDE
+ * stores into a bundle that only wants the chat surface.
+ */
+import type { AriaContextSnapshot, AriaUiEffect } from '../../electron/shared/types'
+
+export type AriaHostProviderId = 'claude' | 'codex'
+
+export interface AriaHost {
+  activeProjectId(): string | null
+  /** Per-turn context snapshot passed to the operator loop. */
+  buildSnapshot(): AriaContextSnapshot
+  /** Fire-and-forget renderer effect requested by a tool. */
+  applyUiEffect(effect: AriaUiEffect): void
+  /** Two-phase effect whose result feeds the tool_result. */
+  runUiEffectWithData(effect: AriaUiEffect): Promise<unknown>
+  /**
+   * Launch an interactive provider-login terminal. Optional: shells without
+   * terminals (Lite) omit it and the store surfaces a notice instead.
+   * Resolves with the notice to show; throws with a user-facing message.
+   */
+  openProviderLoginTerminal?: (provider: AriaHostProviderId) => Promise<string>
+}
+
+const nullHost: AriaHost = {
+  activeProjectId: () => null,
+  buildSnapshot: () => ({
+    activeProjectId: null,
+    activeProjectPath: null,
+    currentPanelId: null,
+    openFilePath: null,
+    chips: {
+      activeFile: false,
+      projectTree: false,
+      gitDiff: false,
+      terminalLogs: false,
+      walletContext: false,
+      projectMemory: true,
+    },
+  }),
+  applyUiEffect: () => {},
+  runUiEffectWithData: async () => ({ ok: true }),
+}
+
+let host: AriaHost = nullHost
+
+export function setAriaHost(next: AriaHost): void {
+  host = next
+}
+
+export function getAriaHost(): AriaHost {
+  return host
+}
diff --git a/src/store/ariaHostIde.ts b/src/store/ariaHostIde.ts
new file mode 100644
index 00000000..b40ece69
--- /dev/null
+++ b/src/store/ariaHostIde.ts
@@ -0,0 +1,37 @@
+/**
+ * IDE implementation of the ARIA host port. Installed once from src/main.tsx;
+ * carries the useUIStore / terminal / ui-effect couplings so store/aria.ts
+ * stays shell-agnostic and Lite bundles never pull IDE stores.
+ */
+import { useUIStore } from './ui'
+import { useAppActions } from './appActions'
+import { buildAriaSnapshot } from '../lib/ariaContext'
+import { applyUiEffect, runUiEffectWithData } from '../lib/ariaUiEffects'
+import { daemon } from '../lib/daemonBridge'
+import type { AriaHost, AriaHostProviderId } from './ariaHost'
+
+async function openProviderLoginTerminal(provider: AriaHostProviderId): Promise<string> {
+  const ui = useUIStore.getState()
+  if (!ui.activeProjectId || !ui.activeProjectPath) {
+    throw new Error('Open a project before launching a login terminal.')
+  }
+  const startupCommand = provider === 'codex' ? 'codex login' : 'claude'
+  const res = await daemon.terminal.create({
+    cwd: ui.activeProjectPath,
+    startupCommand,
+    userInitiated: true,
+  })
+  if (!res.ok || !res.data) throw new Error(res.error ?? 'Login terminal did not start')
+  ui.setCenterMode('canvas')
+  ui.addTerminal(ui.activeProjectId, res.data.id, provider === 'codex' ? 'Codex Login' : 'Claude Login', res.data.agentId)
+  useAppActions.getState().focusTerminal()
+  return `Opened ${provider} login terminal. Complete sign-in, then Verify.`
+}
+
+export const ideAriaHost: AriaHost = {
+  activeProjectId: () => useUIStore.getState().activeProjectId ?? null,
+  buildSnapshot: buildAriaSnapshot,
+  applyUiEffect,
+  runUiEffectWithData,
+  openProviderLoginTerminal,
+}
diff --git a/src/store/ui.ts b/src/store/ui.ts
index 6a1e4c03..9b6cb17c 100644
--- a/src/store/ui.ts
+++ b/src/store/ui.ts
@@ -51,6 +51,8 @@ interface UIState {
   activeWorkspaceToolId: string | null
   integrationCommandSelectionId: string | null
   pendingSubView: string | null
+  /** Preselect a ProjectStarter template + name (set by ARIA scaffold_game, consumed by the wizard). */
+  scaffoldPreset: { templateId: string; projectName: string } | null
   rightPanelTab: RightPanelTab
   dashboardTabOpen: boolean
   dashboardTabActive: boolean
@@ -92,6 +94,7 @@ interface UIState {
   setActiveWorkspaceTool: (toolId: string | null) => void
   setIntegrationCommandSelectionId: (integrationId: string | null) => void
   setPendingSubView: (subView: string | null) => void
+  setScaffoldPreset: (preset: { templateId: string; projectName: string } | null) => void
   toggleWorkspaceTool: (toolId: string) => void
   setRightPanelTab: (tab: RightPanelTab) => void
   toggleDashboardTab: () => void
@@ -151,6 +154,7 @@ export const useUIStore = create<UIState>((set, get) => ({
   activeWorkspaceToolId: null,
   integrationCommandSelectionId: null,
   pendingSubView: null,
+  scaffoldPreset: null,
   rightPanelTab: 'claude' as RightPanelTab,
   dashboardTabOpen: false,
   dashboardTabActive: false,
@@ -373,6 +377,7 @@ export const useUIStore = create<UIState>((set, get) => ({
   },
   setIntegrationCommandSelectionId: (integrationId) => set({ integrationCommandSelectionId: integrationId }),
   setPendingSubView: (subView) => set({ pendingSubView: subView }),
+  setScaffoldPreset: (preset) => set({ scaffoldPreset: preset }),
   toggleWorkspaceTool: (toolId) => set((state) => {
     const alias = resolveToolAlias(toolId)
     if (alias.toolId !== toolId) {
diff --git a/src/types/daemon.d.ts b/src/types/daemon.d.ts
index 80c21d6c..d10cc424 100644
--- a/src/types/daemon.d.ts
+++ b/src/types/daemon.d.ts
@@ -51,6 +51,8 @@ import type {
   Mandate,
   MandateAction,
   AutopilotState,
+  AutopilotArmReview,
+  AutopilotArmAuthorization,
   JupiterTokenSearchResult,
   ClaudeMdData,
   ClaudeConnection,
@@ -253,6 +255,8 @@ export type {
   Mandate,
   MandateAction,
   AutopilotState,
+  AutopilotArmReview,
+  AutopilotArmAuthorization,
   JupiterTokenSearchResult,
   ClaudeMdData,
   ClaudeConnection,
@@ -641,6 +645,7 @@ declare global {
     stage: (cwd: string, files: string[]) => Promise<IpcResponse>
     unstage: (cwd: string, files: string[]) => Promise<IpcResponse>
     commit: (cwd: string, message: string) => Promise<IpcResponse>
+    initCommit: (cwd: string, message: string) => Promise<IpcResponse<{ committed: boolean; reason?: string }>>
     push: (cwd: string) => Promise<IpcResponse<string>>
     log: (cwd: string, count?: number) => Promise<IpcResponse<GitCommit[]>>
     diff: (cwd: string, filePath?: string) => Promise<IpcResponse<string>>
@@ -728,7 +733,7 @@ declare global {
 
   interface DaemonProjects {
     list: () => Promise<IpcResponse<Project[]>>
-    create: (project: { name: string; path: string }) => Promise<IpcResponse<Project>>
+    create: (project: { name: string; path: string; requireNewDirectory?: boolean }) => Promise<IpcResponse<Project>>
     createDemoWorkspace: () => Promise<IpcResponse<Project>>
     delete: (id: string) => Promise<IpcResponse>
     openDialog: () => Promise<IpcResponse<string | null>>
@@ -926,6 +931,32 @@ declare global {
     openExternal: (url: string) => Promise<void>
   }
 
+  interface DaemonLiteFlavorInfo {
+    flavor: 'lite'
+    version: string
+    ideInstalled: boolean
+  }
+
+  interface DaemonLite {
+    getFlavorInfo: () => Promise<IpcResponse<DaemonLiteFlavorInfo>>
+    isOnboardingComplete: () => Promise<IpcResponse<boolean>>
+    setOnboardingComplete: (complete: boolean) => Promise<IpcResponse<void>>
+    getShowTools: () => Promise<IpcResponse<boolean>>
+    setShowTools: (show: boolean) => Promise<IpcResponse<void>>
+    openInIde: () => Promise<IpcResponse<{ launched: boolean }>>
+    popoutOpen: (url: string) => Promise<IpcResponse<{ opened: boolean }>>
+  }
+
+  type MemeTechProjectProfile = import('../../electron/services/meme-studio/types').MemeTechProjectProfile
+  type MemeMarketSnapshot = import('../../electron/services/meme-studio/types').MemeMarketSnapshot
+  type TokenRiskPreflight = import('../../electron/services/meme-studio/types').TokenRiskPreflight
+
+  interface DaemonMemeStudio {
+    detect: (projectPath: string) => Promise<IpcResponse<MemeTechProjectProfile>>
+    marketContext: (mint: string) => Promise<IpcResponse<MemeMarketSnapshot>>
+    tokenPreflight: (mint: string) => Promise<IpcResponse<TokenRiskPreflight>>
+  }
+
   interface DaemonPumpFun {
     bondingCurve: (mint: string) => Promise<IpcResponse<{
       mint: string
@@ -1824,6 +1855,8 @@ declare global {
     deploy: DaemonDeploy
     shipline: DaemonShipline
     shell: DaemonShell
+    lite: DaemonLite
+    memeStudio: DaemonMemeStudio
     pumpfun: DaemonPumpFun
     proof: DaemonProof
     email: DaemonEmail
@@ -1975,7 +2008,7 @@ declare global {
       testValidator: { installed: boolean; version: string | null }
       litesvm: { installed: boolean; source: 'project' | 'none' }
     }>>
-    detectProject: (projectPath: string) => Promise<IpcResponse<{ isSolanaProject: boolean; framework: string | null; indicators: string[]; suggestedMcps: string[] }>>
+    detectProject: (projectPath: string) => Promise<IpcResponse<import('../../electron/services/SolanaDetector').SolanaProjectInfo>>
     onStatusChange: (callback: (state: unknown) => void) => () => void
   }
 
@@ -2060,7 +2093,8 @@ declare global {
       maxExposureLamports: number
       intervalSeconds: number
     }) => Promise<IpcResponse<Mandate>>
-    arm: (id: string) => Promise<IpcResponse<Mandate>>
+    armReview: (id: string) => Promise<IpcResponse<AutopilotArmReview>>
+    arm: (input: AutopilotArmAuthorization) => Promise<IpcResponse<Mandate>>
     disarm: (id: string) => Promise<IpcResponse<Mandate>>
     disarmAll: () => Promise<IpcResponse<{ disarmed: number }>>
     delete: (id: string) => Promise<IpcResponse<{ ok: true }>>
diff --git a/styles/fonts.css b/styles/fonts.css
index 6c6f85b6..015e3052 100644
--- a/styles/fonts.css
+++ b/styles/fonts.css
@@ -1,4 +1,38 @@
-/* Plus Jakarta Sans — UI font */
+/* Geist — brand UI font (variable, 100–900) */
+@font-face {
+  font-family: 'Geist';
+  src: url('/fonts/Geist-Variable.woff2') format('woff2');
+  font-weight: 100 900;
+  font-style: normal;
+  font-display: swap;
+}
+
+/* JetBrains Mono — brand mono (terminal, receipts, labels) */
+@font-face {
+  font-family: 'JetBrains Mono';
+  src: url('/fonts/JetBrainsMono-Regular.woff2') format('woff2');
+  font-weight: 400;
+  font-style: normal;
+  font-display: swap;
+}
+
+@font-face {
+  font-family: 'JetBrains Mono';
+  src: url('/fonts/JetBrainsMono-Medium.woff2') format('woff2');
+  font-weight: 500;
+  font-style: normal;
+  font-display: swap;
+}
+
+@font-face {
+  font-family: 'JetBrains Mono';
+  src: url('/fonts/JetBrainsMono-Bold.woff2') format('woff2');
+  font-weight: 700;
+  font-style: normal;
+  font-display: swap;
+}
+
+/* Plus Jakarta Sans — legacy UI font, kept as fallback */
 @font-face {
   font-family: 'Plus Jakarta Sans';
   src: url('/fonts/PlusJakartaSans-Regular.woff2') format('woff2');
diff --git a/styles/tokens.css b/styles/tokens.css
index d6159e3b..632e1dd9 100644
--- a/styles/tokens.css
+++ b/styles/tokens.css
@@ -1,43 +1,45 @@
 :root {
-  /* 2026 dark foundation */
-  --bg-app: #0a0a0a;
-  --bg-workspace: #060707;
-  --bg-panel: #121414;
-  --bg-card: #171919;
-  --bg-card-hover: #1d1f1f;
-  --bg-well: #0d0f0f;
-  --bg-overlay: #171919;
-  --void: #060707;
-  --code-bg: #0a0a0a;
-  --diff-bg: #0c0e0e;
-  --field-bg: #0d0f0f;
-  --wash: rgba(255, 255, 255, 0.02);
-  --wash-2: rgba(255, 255, 255, 0.015);
-  --scroll: rgba(255, 255, 255, 0.09);
-  --scroll-h: rgba(255, 255, 255, 0.18);
-  --tex-c: 255, 255, 255;
+  /* 2026 dark foundation — brand green-tinted near-black (matches the website
+     design system: page #101211 / card #171A18 / raised #1D211E / media #0C0E0D).
+     Never brown, never pure black or pure gray. */
+  --bg-app: #0c0e0d;
+  --bg-workspace: #0a0c0b;
+  --bg-panel: #101211;
+  --bg-card: #171a18;
+  --bg-card-hover: #1d211e;
+  --bg-well: #0e100f;
+  --bg-overlay: #171a18;
+  --void: #0a0c0b;
+  --code-bg: #0c0e0d;
+  --diff-bg: #0d0f0e;
+  --field-bg: #0e100f;
+  --wash: rgba(236, 238, 233, 0.02);
+  --wash-2: rgba(236, 238, 233, 0.015);
+  --scroll: rgba(236, 238, 233, 0.09);
+  --scroll-h: rgba(236, 238, 233, 0.18);
+  --tex-c: 236, 238, 233;
   --tex-a: 0.045;
   --tex-k: 1;
   --noise-a: 0.18;
   --noise-k: 1;
   --noise-blend: overlay;
-  --shadow-c: 255, 255, 255;
+  --shadow-c: 236, 238, 233;
   --shadow-a: 0.5;
   --shadow-b1: 0.12;
   --shadow-b2: 0.08;
   color-scheme: dark;
 
-  /* Text ladder */
-  --text-primary: #f0f0f0;
-  --text-secondary: #a0a0a0;
-  --text-muted: #6e706f;
-  --text-faint: #4a4c4b;
-  --text-disabled: #4a4c4b;
-
-  /* Border ladder */
-  --border-soft: rgba(255, 255, 255, 0.07);
-  --border-medium: rgba(255, 255, 255, 0.12);
-  --border-strong: rgba(255, 255, 255, 0.20);
+  /* Text ladder — brand cream at 100/65/45/30% (opaque equivalents on #101211) */
+  --text-primary: #eceee9;
+  --text-secondary: #9fa19d;
+  --text-muted: #737571;
+  --text-faint: #525451;
+  --text-disabled: #525451;
+
+  /* Border ladder — cream hairlines at brand alphas */
+  --border-soft: rgba(236, 238, 233, 0.08);
+  --border-medium: rgba(236, 238, 233, 0.14);
+  --border-strong: rgba(236, 238, 233, 0.22);
   --line: var(--border-soft);
   --line-2: var(--border-medium);
   --line-strong: var(--border-strong);
@@ -61,7 +63,7 @@
   --s1: var(--bg-panel);
   --s2: var(--bg-card);
   --s3: var(--bg-card-hover);
-  --s4: #262928;
+  --s4: #252a27;
   --s5: var(--border-medium);
   --s6: var(--border-strong);
 
@@ -130,9 +132,10 @@
   --focus-ring-red:     0 0 0 1px color-mix(in srgb, var(--red) 48%, transparent);
   --focus-ring-blue:    0 0 0 1px color-mix(in srgb, var(--blue) 48%, transparent);
 
-  /* Typography — families */
-  --font-ui: 'Plus Jakarta Sans', -apple-system, BlinkMacSystemFont, sans-serif;
-  --font-code: 'Geist Mono', 'Berkeley Mono', 'Spline Sans Mono', 'Space Mono', ui-monospace, monospace;
+  /* Typography — families. Geist is the brand UI face; JetBrains Mono is the
+     brand mono (terminal, receipts, labels), with Geist Mono as fallback. */
+  --font-ui: 'Geist', 'Plus Jakarta Sans', -apple-system, BlinkMacSystemFont, sans-serif;
+  --font-code: 'JetBrains Mono', 'Geist Mono', 'Berkeley Mono', 'Spline Sans Mono', 'Space Mono', ui-monospace, monospace;
   --mono: var(--font-code);
   /* design-handoff alias for the UI family (a few panels reference --ui directly) */
   --ui: var(--font-ui);
diff --git a/test/panels/LiteP1Fixes.test.tsx b/test/panels/LiteP1Fixes.test.tsx
new file mode 100644
index 00000000..96eca7d1
--- /dev/null
+++ b/test/panels/LiteP1Fixes.test.tsx
@@ -0,0 +1,101 @@
+// @vitest-environment happy-dom
+
+import { cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { readFileSync } from 'node:fs'
+import path from 'node:path'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+import { LiteComposer } from '../../src/lite/LiteComposer'
+import { LiteOnboarding } from '../../src/lite/LiteOnboarding'
+import { LiteSettings } from '../../src/lite/LiteSettings'
+import { LiteWallet } from '../../src/lite/wallet/LiteWallet'
+
+const openInIde = vi.fn().mockResolvedValue({ ok: true, data: { launched: false } })
+
+function installBridge() {
+  Object.defineProperty(window, 'daemon', {
+    configurable: true,
+    value: {
+      lite: {
+        getFlavorInfo: vi.fn().mockResolvedValue({ ok: true, data: { flavor: 'lite', version: '4.7.0', ideInstalled: false } }),
+        openInIde,
+      },
+      claude: {
+        listKeys: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+        storeKey: vi.fn().mockResolvedValue({ ok: true }),
+        deleteKey: vi.fn().mockResolvedValue({ ok: true }),
+      },
+      provider: {
+        verifyAll: vi.fn().mockResolvedValue({ ok: true, data: {} }),
+      },
+      shell: {
+        openExternal: vi.fn().mockResolvedValue(undefined),
+      },
+      aria: {
+        models: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+      },
+      wallet: {
+        dashboard: vi.fn().mockResolvedValue({
+          ok: true,
+          data: {
+            heliusConfigured: false,
+            market: [],
+            portfolio: { totalUsd: 0, delta24hUsd: 0, delta24hPct: 0, walletCount: 0 },
+            wallets: [],
+            activeWallet: null,
+            feed: [],
+            recentActivity: [],
+          },
+        }),
+        create: vi.fn().mockResolvedValue({ ok: true }),
+        setDefault: vi.fn().mockResolvedValue({ ok: true }),
+      },
+    },
+  })
+}
+
+describe('DAEMON Lite P1 fixes', () => {
+  beforeEach(() => {
+    installBridge()
+    openInIde.mockClear()
+  })
+
+  afterEach(() => cleanup())
+
+  it('gives onboarding and composer inputs persistent accessible names', () => {
+    const { unmount } = render(<LiteOnboarding onDone={vi.fn()} />)
+    expect(screen.getByLabelText('Anthropic API key')).toBeTruthy()
+    unmount()
+
+    render(<LiteComposer value="" onChange={vi.fn()} onSend={vi.fn()} ariaLabel="Reply to ARIA" />)
+    expect(screen.getByLabelText('Reply to ARIA')).toBeTruthy()
+  })
+
+  it('labels provider key fields in Settings', async () => {
+    render(<LiteSettings onBack={vi.fn()} />)
+    expect(await screen.findByLabelText('Anthropic')).toBeTruthy()
+    expect(screen.getByLabelText('GLM (Z.AI)')).toBeTruthy()
+  })
+
+  it('states the watch-only and Helius boundaries without a dead upgrade route', async () => {
+    render(<LiteWallet onAskAria={vi.fn()} />)
+
+    expect(await screen.findByText(/Addresses stay watch-only/)).toBeTruthy()
+    expect(screen.getByText(/Direct configuration is not available in this build yet/)).toBeTruthy()
+    expect(screen.queryByText(/Add a Helius API key in Settings/)).toBeNull()
+    expect(screen.queryByRole('button', { name: 'Open DAEMON IDE' })).toBeNull()
+  })
+
+  it('collapses the shell to an icon rail and stacks the wallet at narrow widths', () => {
+    const appCss = readFileSync(path.resolve('src/lite/LiteApp.module.css'), 'utf8')
+    const sidebarCss = readFileSync(path.resolve('src/lite/LiteSidebar.module.css'), 'utf8')
+    const walletCss = readFileSync(path.resolve('src/lite/wallet/LiteWallet.module.css'), 'utf8')
+
+    expect(appCss).toContain('@media (max-width: 640px)')
+    expect(appCss).toContain('grid-template-columns: 60px minmax(0, 1fr)')
+    expect(sidebarCss).toContain('.sessions,')
+    expect(sidebarCss).toContain('display: none')
+    expect(walletCss).toContain('@container (max-width: 760px)')
+    expect(walletCss).toContain('grid-template-columns: minmax(0, 1fr)')
+  })
+})
diff --git a/test/panels/LiteShell.dom.test.tsx b/test/panels/LiteShell.dom.test.tsx
new file mode 100644
index 00000000..829f8cdd
--- /dev/null
+++ b/test/panels/LiteShell.dom.test.tsx
@@ -0,0 +1,204 @@
+// @vitest-environment happy-dom
+
+import { render, screen, waitFor, cleanup, fireEvent } from '@testing-library/react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+import LiteApp from '../../src/lite/LiteApp'
+import { LiteOnboarding } from '../../src/lite/LiteOnboarding'
+import { useAriaStore } from '../../src/store/aria'
+
+let onboardingComplete = false
+let storeKey: ReturnType<typeof vi.fn>
+let verifyAll: ReturnType<typeof vi.fn>
+let setOnboardingComplete: ReturnType<typeof vi.fn>
+
+function installBridge() {
+  storeKey = vi.fn().mockResolvedValue({ ok: true })
+  verifyAll = vi.fn().mockResolvedValue({ ok: true, data: { claude: null, codex: null } })
+  setOnboardingComplete = vi.fn((v: boolean) => {
+    onboardingComplete = v
+    return Promise.resolve({ ok: true })
+  })
+  Object.defineProperty(window, 'daemon', {
+    configurable: true,
+    value: {
+      platform: 'win32',
+      lite: {
+        isOnboardingComplete: vi.fn(() => Promise.resolve({ ok: true, data: onboardingComplete })),
+        setOnboardingComplete,
+        getShowTools: vi.fn().mockResolvedValue({ ok: true, data: false }),
+        setShowTools: vi.fn().mockResolvedValue({ ok: true }),
+        getFlavorInfo: vi.fn().mockResolvedValue({ ok: true, data: { flavor: 'lite', version: '4.7.0', ideInstalled: false } }),
+        openInIde: vi.fn().mockResolvedValue({ ok: true, data: { launched: false } }),
+        popoutOpen: vi.fn().mockResolvedValue({ ok: true, data: { opened: true } }),
+      },
+      claude: {
+        storeKey,
+        listKeys: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+        deleteKey: vi.fn().mockResolvedValue({ ok: true }),
+      },
+      provider: {
+        verifyAll,
+        getPreferences: vi.fn().mockResolvedValue({ ok: true, data: null }),
+      },
+      projects: {
+        list: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+        openDialog: vi.fn().mockResolvedValue({ ok: true, data: null }),
+        create: vi.fn().mockResolvedValue({ ok: false, error: 'not selected' }),
+      },
+      fs: {
+        readDir: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+        readFile: vi.fn().mockResolvedValue({ ok: false, error: 'not found' }),
+        writeFile: vi.fn().mockResolvedValue({ ok: true }),
+        watch: vi.fn().mockResolvedValue({ ok: true }),
+        unwatch: vi.fn().mockResolvedValue({ ok: true }),
+        onChanged: vi.fn(() => () => {}),
+      },
+      terminal: {
+        create: vi.fn().mockResolvedValue({ ok: false, error: 'Open a project first.' }),
+        ready: vi.fn(), write: vi.fn(), resize: vi.fn(), kill: vi.fn().mockResolvedValue({ ok: true }),
+        onData: vi.fn(() => () => {}), onExit: vi.fn(() => () => {}),
+      },
+      validator: {
+        toolchainStatus: vi.fn().mockResolvedValue({ ok: false, error: 'Open a project first.' }),
+        status: vi.fn().mockResolvedValue({ ok: true, data: { type: null, status: 'stopped', terminalId: null, port: null } }),
+        detectProject: vi.fn().mockResolvedValue({ ok: true, data: { isSolanaProject: false, framework: null, indicators: [], suggestedMcps: [] } }),
+        onStatusChange: vi.fn(() => () => {}),
+      },
+      memeStudio: {
+        detect: vi.fn().mockResolvedValue({ ok: false, error: 'Open a project first.' }),
+        marketContext: vi.fn().mockResolvedValue({ ok: false, error: 'not configured' }),
+        tokenPreflight: vi.fn().mockResolvedValue({ ok: false, error: 'not configured' }),
+      },
+      shell: { openExternal: vi.fn().mockResolvedValue(undefined) },
+      aria: {
+        send: vi.fn().mockResolvedValue({ ok: true, data: { text: 'ok' } }),
+        history: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+        clear: vi.fn().mockResolvedValue({ ok: true }),
+        models: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+        approve: vi.fn(),
+        patchDecision: vi.fn(),
+        toolEffectResult: vi.fn(),
+        onToolEvent: () => () => {},
+        onUiEffect: () => () => {},
+        sessions: {
+          list: vi.fn().mockResolvedValue({ ok: true, data: [{ id: 's1', title: 'First chat', project_id: null, created_at: 1, updated_at: Date.now(), archived: 0 }] }),
+          create: vi.fn().mockResolvedValue({ ok: true, data: { id: 's2', title: null, project_id: null, created_at: 1, updated_at: Date.now(), archived: 0 } }),
+          rename: vi.fn().mockResolvedValue({ ok: true }),
+          archive: vi.fn().mockResolvedValue({ ok: true }),
+          delete: vi.fn().mockResolvedValue({ ok: true }),
+        },
+      },
+      memory: {
+        approve: vi.fn().mockResolvedValue({ ok: true }),
+        reject: vi.fn().mockResolvedValue({ ok: true }),
+      },
+      wallet: {
+        dashboard: vi.fn().mockResolvedValue({ ok: true, data: { heliusConfigured: false, market: [], portfolio: { totalUsd: 0, delta24hUsd: 0, delta24hPct: 0, walletCount: 0 }, wallets: [], activeWallet: null, feed: [], recentActivity: [] } }),
+        create: vi.fn().mockResolvedValue({ ok: true }),
+        setDefault: vi.fn().mockResolvedValue({ ok: true }),
+        searchJupiterTokens: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+      },
+      forensics: {
+        scan: vi.fn().mockResolvedValue({ ok: false, error: 'Helius API key not configured' }),
+      },
+    },
+  })
+}
+
+describe('DAEMON Lite shell', () => {
+  beforeEach(() => {
+    onboardingComplete = false
+    installBridge()
+    useAriaStore.setState({ turns: [], isLoading: false, sessionId: 'global', sessions: [], availableModels: [] })
+  })
+
+  afterEach(() => {
+    cleanup()
+    vi.clearAllMocks()
+  })
+
+  it('gates on onboarding when the first-run flag is unset', async () => {
+    render(<LiteApp />)
+    expect(await screen.findByText('Your AI coding agent.')).toBeTruthy()
+    expect(screen.queryByText('New chat')).toBeNull()
+  })
+
+  it('renders the home shell (sidebar, composer, quick actions) once onboarded', async () => {
+    onboardingComplete = true
+    render(<LiteApp />)
+    expect(await screen.findByText('New chat')).toBeTruthy()
+    expect(await screen.findByText('What are we building?')).toBeTruthy()
+    expect(screen.getByPlaceholderText('Message DAEMON')).toBeTruthy()
+    await waitFor(() => expect(screen.getByText('First chat')).toBeTruthy())
+  })
+
+  it('quick actions prefill the composer', async () => {
+    onboardingComplete = true
+    render(<LiteApp />)
+    fireEvent.click(await screen.findByText('Debug a failure'))
+    await waitFor(() => {
+      const input = screen.getByPlaceholderText('Message DAEMON') as HTMLTextAreaElement
+      expect(input.value).toContain('Help me debug the current build or test failure')
+    })
+  })
+
+  it('opens settings from the sidebar gear', async () => {
+    onboardingComplete = true
+    render(<LiteApp />)
+    fireEvent.click(await screen.findByLabelText('Settings'))
+    expect(await screen.findByText('API keys')).toBeTruthy()
+  })
+
+  it('reveals the Tools section and routes to the Scanner panel', async () => {
+    onboardingComplete = true
+    render(<LiteApp />)
+    // Tools is collapsed by default (getShowTools → false).
+    fireEvent.click(await screen.findByText('Tools'))
+    fireEvent.click(await screen.findByText('Scanner'))
+    expect(await screen.findByText(/check authorities, snipers, and bundles/)).toBeTruthy()
+  })
+})
+
+describe('DAEMON Lite onboarding', () => {
+  beforeEach(() => {
+    onboardingComplete = false
+    installBridge()
+  })
+
+  afterEach(() => {
+    cleanup()
+    vi.clearAllMocks()
+  })
+
+  it('rejects a malformed Anthropic key without storing it', async () => {
+    const onDone = vi.fn()
+    render(<LiteOnboarding onDone={onDone} />)
+    fireEvent.change(screen.getByPlaceholderText('sk-ant-…'), { target: { value: 'not-a-key' } })
+    fireEvent.click(screen.getByText('Start chatting'))
+    expect(await screen.findByRole('alert')).toBeTruthy()
+    expect(storeKey).not.toHaveBeenCalled()
+    expect(onDone).not.toHaveBeenCalled()
+  })
+
+  it('stores the key, verifies, flags completion, and finishes', async () => {
+    const onDone = vi.fn()
+    render(<LiteOnboarding onDone={onDone} />)
+    fireEvent.change(screen.getByPlaceholderText('sk-ant-…'), { target: { value: 'sk-ant-test-123' } })
+    fireEvent.click(screen.getByText('Start chatting'))
+    await waitFor(() => expect(onDone).toHaveBeenCalled())
+    expect(storeKey).toHaveBeenCalledWith('ANTHROPIC_API_KEY', 'sk-ant-test-123')
+    expect(verifyAll).toHaveBeenCalled()
+    expect(setOnboardingComplete).toHaveBeenCalledWith(true)
+  })
+
+  it('GLM path stores under ZAI_API_KEY without format gating', async () => {
+    const onDone = vi.fn()
+    render(<LiteOnboarding onDone={onDone} />)
+    fireEvent.click(screen.getByText('GLM (Z.AI)'))
+    fireEvent.change(screen.getByPlaceholderText('Paste your Z.AI key'), { target: { value: 'zai-key-1' } })
+    fireEvent.click(screen.getByText('Start chatting'))
+    await waitFor(() => expect(onDone).toHaveBeenCalled())
+    expect(storeKey).toHaveBeenCalledWith('ZAI_API_KEY', 'zai-key-1')
+  })
+})
diff --git a/test/panels/LiteWorkbench.dom.test.tsx b/test/panels/LiteWorkbench.dom.test.tsx
new file mode 100644
index 00000000..7482d50a
--- /dev/null
+++ b/test/panels/LiteWorkbench.dom.test.tsx
@@ -0,0 +1,285 @@
+// @vitest-environment happy-dom
+
+import { cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+vi.mock('@monaco-editor/react', () => ({
+  default: ({ value, onChange }: { value: string; onChange?: (value: string) => void }) => (
+    <textarea aria-label="Monaco editor" value={value} onChange={(event) => onChange?.(event.currentTarget.value)} />
+  ),
+  loader: { config: vi.fn() },
+}))
+
+vi.mock('monaco-editor/esm/vs/editor/editor.api', () => ({
+  KeyMod: { CtrlCmd: 1 },
+  KeyCode: { KeyS: 2 },
+}))
+vi.mock('monaco-editor/esm/vs/editor/editor.worker?worker', () => ({ default: class {} }))
+vi.mock('monaco-editor/esm/vs/language/json/json.worker?worker', () => ({ default: class {} }))
+vi.mock('monaco-editor/esm/vs/language/typescript/ts.worker?worker', () => ({ default: class {} }))
+
+vi.mock('@xterm/xterm', () => ({
+  Terminal: class {
+    cols = 80
+    rows = 24
+    loadAddon() {}
+    open() {}
+    write() {}
+    refresh() {}
+    onData() { return { dispose() {} } }
+    dispose() {}
+  },
+}))
+vi.mock('@xterm/addon-fit', () => ({ FitAddon: class { fit() {} } }))
+
+import LiteApp from '../../src/lite/LiteApp'
+import { LiteExplorer } from '../../src/lite/workbench/LiteExplorer'
+import { useAriaStore } from '../../src/store/aria'
+import { useLiteWorkbenchStore } from '../../src/lite/workbench/liteWorkbenchStore'
+
+const PROJECT = {
+  id: 'project-1',
+  name: 'solana-monitor',
+  path: 'C:\\Projects\\solana-monitor',
+  created_at: 1,
+}
+
+const SECOND_PROJECT = {
+  id: 'project-2',
+  name: 'token-launcher',
+  path: 'C:\\Projects\\token-launcher',
+  created_at: 2,
+}
+
+const README_PATH = `${PROJECT.path}\\README.md`
+const readDir = vi.fn()
+const readFile = vi.fn()
+const terminalCreate = vi.fn()
+let sessionSequence = 0
+
+function installBridge() {
+  readDir.mockResolvedValue({
+    ok: true,
+    data: [
+      { name: 'README.md', path: README_PATH, isDirectory: false },
+      { name: 'package.json', path: `${PROJECT.path}\\package.json`, isDirectory: false },
+    ],
+  })
+  readFile.mockResolvedValue({ ok: true, data: { content: '# Solana monitor\n' } })
+  terminalCreate.mockResolvedValue({ ok: true, data: { id: 'terminal-1' } })
+
+  Object.defineProperty(window, 'daemon', {
+    configurable: true,
+    value: {
+      platform: 'win32',
+      lite: {
+        isOnboardingComplete: vi.fn().mockResolvedValue({ ok: true, data: true }),
+        setOnboardingComplete: vi.fn().mockResolvedValue({ ok: true }),
+        getShowTools: vi.fn().mockResolvedValue({ ok: true, data: false }),
+        setShowTools: vi.fn().mockResolvedValue({ ok: true }),
+        getFlavorInfo: vi.fn().mockResolvedValue({ ok: true, data: { flavor: 'lite', version: '4.7.0', ideInstalled: false } }),
+        openInIde: vi.fn().mockResolvedValue({ ok: true, data: { launched: false } }),
+      },
+      projects: {
+        list: vi.fn().mockResolvedValue({ ok: true, data: [PROJECT] }),
+        openDialog: vi.fn().mockResolvedValue({ ok: true, data: PROJECT.path }),
+        create: vi.fn().mockResolvedValue({ ok: true, data: PROJECT }),
+      },
+      memeStudio: {
+        detect: vi.fn().mockResolvedValue({
+          ok: true,
+          data: {
+            archetype: 'permissionless-market-indexer',
+            confidence: 0.8,
+            evidence: [{ code: 'market-runtime', path: 'services/keeper/package.json', detail: 'Oracle and keeper runtime detected' }],
+            topology: ['frontend', 'indexer', 'keeper'],
+            capabilities: ['solana', 'token-2022'],
+            gaps: [],
+            tokenMints: [],
+            clusterSources: [{ source: 'Anchor.toml', value: 'devnet' }],
+            inspectedAt: 1,
+          },
+        }),
+        marketContext: vi.fn().mockResolvedValue({ ok: false, error: 'not configured' }),
+        tokenPreflight: vi.fn().mockResolvedValue({ ok: false, error: 'not configured' }),
+      },
+      fs: {
+        readDir,
+        readFile,
+        writeFile: vi.fn().mockResolvedValue({ ok: true }),
+        watch: vi.fn().mockResolvedValue({ ok: true }),
+        unwatch: vi.fn().mockResolvedValue({ ok: true }),
+        onChanged: vi.fn(() => () => {}),
+      },
+      validator: {
+        toolchainStatus: vi.fn().mockResolvedValue({
+          ok: true,
+          data: {
+            solanaCli: { installed: true, version: '2.3.0' },
+            anchor: { installed: true, version: '0.32.1' },
+            avm: { installed: true, version: '0.32.1' },
+            surfpool: { installed: false, version: null },
+            testValidator: { installed: true, version: '2.3.0' },
+            litesvm: { installed: false, source: 'none' },
+          },
+        }),
+        status: vi.fn().mockResolvedValue({ ok: true, data: { type: null, status: 'stopped', terminalId: null, port: null } }),
+        detectProject: vi.fn().mockResolvedValue({ ok: true, data: { isSolanaProject: true, framework: 'anchor', indicators: ['Anchor.toml'], suggestedMcps: [] } }),
+        start: vi.fn().mockResolvedValue({ ok: true, data: true }),
+      },
+      terminal: {
+        create: terminalCreate,
+        ready: vi.fn().mockResolvedValue({ ok: true }),
+        write: vi.fn().mockResolvedValue({ ok: true }),
+        resize: vi.fn().mockResolvedValue({ ok: true }),
+        kill: vi.fn().mockResolvedValue({ ok: true }),
+        onData: vi.fn(() => () => {}),
+        onExit: vi.fn(() => () => {}),
+      },
+      claude: {
+        listKeys: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+      },
+      provider: {
+        getPreferences: vi.fn().mockResolvedValue({ ok: true, data: null }),
+        verifyAll: vi.fn().mockResolvedValue({ ok: true, data: {} }),
+      },
+      aria: {
+        send: vi.fn().mockResolvedValue({ ok: true, data: { text: 'ok' } }),
+        history: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+        clear: vi.fn().mockResolvedValue({ ok: true }),
+        models: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+        approve: vi.fn(),
+        patchDecision: vi.fn(),
+        toolEffectResult: vi.fn(),
+        onToolEvent: () => () => {},
+        onUiEffect: () => () => {},
+        sessions: {
+          list: vi.fn().mockResolvedValue({ ok: true, data: [] }),
+          create: vi.fn().mockImplementation(() => {
+            sessionSequence += 1
+            return Promise.resolve({ ok: true, data: { id: `session-${sessionSequence}`, title: null, project_id: null, created_at: 1, updated_at: 1, archived: 0 } })
+          }),
+          rename: vi.fn().mockResolvedValue({ ok: true }),
+          archive: vi.fn().mockResolvedValue({ ok: true }),
+          delete: vi.fn().mockResolvedValue({ ok: true }),
+        },
+      },
+      memory: {
+        approve: vi.fn().mockResolvedValue({ ok: true }),
+        reject: vi.fn().mockResolvedValue({ ok: true }),
+      },
+    },
+  })
+}
+
+describe('DAEMON Lite Workbench', () => {
+  beforeEach(() => {
+    sessionStorage.clear()
+    sessionSequence = 0
+    vi.stubGlobal('ResizeObserver', class { observe() {} disconnect() {} })
+    installBridge()
+    useAriaStore.setState({ turns: [], isLoading: false, sessionId: 'global', sessions: [], availableModels: [] })
+    useLiteWorkbenchStore.setState({
+      projects: [],
+      activeProject: null,
+      tree: [],
+      openFiles: [],
+      activeFilePath: null,
+      terminalIds: [],
+      activeTerminalId: null,
+    })
+  })
+
+  afterEach(() => {
+    cleanup()
+    vi.clearAllMocks()
+    vi.unstubAllGlobals()
+  })
+
+  it('restores a project, opens a file, and exposes guarded accessible workbench surfaces', async () => {
+    render(<LiteApp />)
+
+    expect(await screen.findByRole('button', { name: PROJECT.name })).toBeTruthy()
+    expect(screen.getByRole('region', { name: 'DAEMON conversation' })).toBeTruthy()
+
+    fireEvent.click(screen.getByRole('button', { name: 'Terminal' }))
+    expect(screen.getByText('GUARDED WORKFLOWS: LOCALNET / DEVNET')).toBeTruthy()
+    expect(screen.getByText('Workflow actions never deploy to mainnet. Commands typed in the terminal remain under your control.')).toBeTruthy()
+    expect(screen.getByRole('region', { name: 'Terminal' })).toBeTruthy()
+
+    fireEvent.click(screen.getByRole('button', { name: 'Code' }))
+    await waitFor(() => expect(readDir).toHaveBeenCalledWith(PROJECT.path, 4))
+    const readme = await screen.findByRole('treeitem', { name: /README.md/ })
+    readme.focus()
+    fireEvent.keyDown(readme, { key: 'ArrowDown' })
+    expect(screen.getByRole('treeitem', { name: /package.json/ })).toHaveFocus()
+    fireEvent.click(readme)
+    await waitFor(() => expect(readFile).toHaveBeenCalledWith(README_PATH))
+    expect(await screen.findByRole('region', { name: 'Code editor' })).toBeTruthy()
+    expect(screen.getByLabelText('Monaco editor')).toHaveValue('# Solana monitor\n')
+  })
+
+  it('keeps one conversation shell and creates a project-scoped terminal', async () => {
+    render(<LiteApp />)
+    expect(await screen.findByRole('button', { name: PROJECT.name })).toBeTruthy()
+
+    fireEvent.click(screen.getByRole('button', { name: 'New chat' }))
+    expect(await screen.findByLabelText('Message DAEMON')).toBeTruthy()
+    expect(await screen.findByRole('region', { name: 'DAEMON conversation' })).toBeTruthy()
+
+    fireEvent.click(screen.getByRole('button', { name: 'Terminal' }))
+    fireEvent.click(screen.getByRole('button', { name: 'New terminal' }))
+    await waitFor(() => expect(terminalCreate).toHaveBeenCalledWith({
+      cwd: PROJECT.path,
+      startupCommand: undefined,
+      userInitiated: true,
+    }))
+    expect(await screen.findByRole('button', { name: /pwsh 1/ })).toBeTruthy()
+
+    fireEvent.click(screen.getByRole('button', { name: 'Chat' }))
+    expect(screen.queryByRole('region', { name: 'Terminal' })).toBeNull()
+    fireEvent.click(screen.getByRole('button', { name: 'Terminal' }))
+    expect(await screen.findByRole('button', { name: /pwsh 1/ })).toBeTruthy()
+  })
+
+  it('opens Meme Tech Studio and renders evidence without granting write authority', async () => {
+    render(<LiteApp />)
+    expect(await screen.findByRole('button', { name: PROJECT.name })).toBeTruthy()
+
+    fireEvent.click(screen.getByRole('button', { name: 'Meme Tech' }))
+
+    expect(await screen.findByRole('region', { name: 'Meme Tech workspace' })).toBeTruthy()
+    expect(await screen.findByText('Permissionless Market Indexer')).toBeTruthy()
+    expect(screen.getByText('Oracle and keeper runtime detected')).toBeTruthy()
+    expect(screen.getByText('Attention is not trust.')).toBeTruthy()
+    expect(screen.queryByRole('button', { name: /launch|buy|sell|deploy/i })).toBeNull()
+  })
+
+  it('keeps edits dirty when an older save finishes after newer typing', () => {
+    useLiteWorkbenchStore.getState().openFile({ path: README_PATH, name: 'README.md', content: 'first', savedContent: 'base' })
+    useLiteWorkbenchStore.getState().updateFile(README_PATH, 'newer')
+    useLiteWorkbenchStore.getState().markSaved(README_PATH, 'first')
+
+    const file = useLiteWorkbenchStore.getState().openFiles.find((item) => item.path === README_PATH)
+    expect(file).toMatchObject({ content: 'newer', savedContent: 'first' })
+  })
+
+  it('restores explorer tab focus when the active project changes', async () => {
+    readDir.mockImplementation((path: string) => Promise.resolve({
+      ok: true,
+      data: [{
+        name: path === SECOND_PROJECT.path ? 'Anchor.toml' : 'README.md',
+        path: `${path}\\${path === SECOND_PROJECT.path ? 'Anchor.toml' : 'README.md'}`,
+        isDirectory: false,
+      }],
+    }))
+
+    const { rerender } = render(<LiteExplorer project={PROJECT} onOpenProject={vi.fn()} />)
+    const firstEntry = await screen.findByRole('treeitem', { name: /README.md/ })
+    firstEntry.focus()
+
+    rerender(<LiteExplorer project={SECOND_PROJECT} onOpenProject={vi.fn()} />)
+    const nextEntry = await screen.findByRole('treeitem', { name: /Anchor.toml/ })
+    expect(nextEntry).toHaveAttribute('tabindex', '0')
+  })
+})
diff --git a/test/panels/ProjectStarter.runtime.test.ts b/test/panels/ProjectStarter.runtime.test.ts
index 5a53661f..cf015f53 100644
--- a/test/panels/ProjectStarter.runtime.test.ts
+++ b/test/panels/ProjectStarter.runtime.test.ts
@@ -217,6 +217,15 @@ describe('deterministic project scaffold', () => {
         expect(filePaths.has('Anchor.toml')).toBe(true)
         expect([...filePaths].some((filePath) => filePath.startsWith('programs/') && filePath.endsWith('/src/lib.rs'))).toBe(true)
         expect([...filePaths].some((filePath) => filePath.startsWith('tests/') && filePath.endsWith('.test.ts'))).toBe(true)
+      } else if (template.id === 'phaser-solana-game') {
+        // Self-contained Phaser game: entry point + the four DAEMON hub seams.
+        expect(filePaths.has('src/main.ts')).toBe(true)
+        expect(filePaths.has('src/game/GameScene.ts')).toBe(true)
+        expect(filePaths.has('src/daemon/types.ts')).toBe(true)
+        expect(filePaths.has('src/daemon/stub.ts')).toBe(true)
+        expect(filePaths.has('src/daemon/manifest.ts')).toBe(true)
+        expect(filePaths.has('index.html')).toBe(true)
+        expect(JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8')).dependencies.phaser).toBeTruthy()
       } else if (['dapp-nextjs', 'solana-foundation', 'perps-frontend', 'meme-coin-website'].includes(template.id)) {
         expect(filePaths.has('app/layout.tsx')).toBe(true)
         expect(filePaths.has('app/page.tsx')).toBe(true)
diff --git a/test/panels/SubscriptionsPanel.dom.test.tsx b/test/panels/SubscriptionsPanel.dom.test.tsx
index cc2edc0f..787cda2d 100644
--- a/test/panels/SubscriptionsPanel.dom.test.tsx
+++ b/test/panels/SubscriptionsPanel.dom.test.tsx
@@ -86,11 +86,11 @@ describe('Subscriptions panel', () => {
     })
   })
 
-  it('shows the DAEMON plan ladder and locked hosted lanes for Light users', () => {
+  it('shows the DAEMON plan ladder and locked hosted lanes for Free users', () => {
     render(<Subscriptions />)
 
     expect(screen.getByText('DAEMON access and hosted AI lanes')).toBeInTheDocument()
-    expect(screen.getAllByText('Light').length).toBeGreaterThan(0)
+    expect(screen.getAllByText('Free').length).toBeGreaterThan(0)
     expect(screen.getAllByText('Pro').length).toBeGreaterThan(0)
     expect(screen.getAllByText('Operator').length).toBeGreaterThan(0)
     expect(screen.getAllByText('Ultra').length).toBeGreaterThan(0)
diff --git a/test/services/LiteTerminalIpc.test.ts b/test/services/LiteTerminalIpc.test.ts
new file mode 100644
index 00000000..c31faea9
--- /dev/null
+++ b/test/services/LiteTerminalIpc.test.ts
@@ -0,0 +1,160 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => {
+  const handlers = new Map<string, (...args: any[]) => Promise<unknown>>()
+  const listeners = new Map<string, (...args: any[]) => void>()
+  const dataCallbacks: Array<(data: string) => void> = []
+  const exitCallbacks: Array<(event: { exitCode: number }) => void> = []
+  const terminals: Array<{
+    pid: number
+    write: ReturnType<typeof vi.fn>
+    resize: ReturnType<typeof vi.fn>
+    kill: ReturnType<typeof vi.fn>
+  }> = []
+
+  return {
+    handlers,
+    listeners,
+    dataCallbacks,
+    exitCallbacks,
+    terminals,
+    validateCwd: vi.fn(),
+    clipboardReadText: vi.fn(() => 'from clipboard'),
+    execFileSync: vi.fn(),
+    spawn: vi.fn(() => {
+      const terminal = {
+        pid: 100 + terminals.length,
+        write: vi.fn(),
+        resize: vi.fn(),
+        kill: vi.fn(),
+      }
+      terminals.push(terminal)
+      return {
+        ...terminal,
+        onData: (callback: (data: string) => void) => dataCallbacks.push(callback),
+        onExit: (callback: (event: { exitCode: number }) => void) => exitCallbacks.push(callback),
+      }
+    }),
+  }
+})
+
+vi.mock('electron', () => ({
+  clipboard: { readText: mocks.clipboardReadText },
+  ipcMain: {
+    handle: (channel: string, handler: (...args: any[]) => Promise<unknown>) => mocks.handlers.set(channel, handler),
+    on: (channel: string, listener: (...args: any[]) => void) => mocks.listeners.set(channel, listener),
+  },
+}))
+
+vi.mock('node:child_process', () => ({ execFileSync: mocks.execFileSync }))
+vi.mock('node-pty', () => ({ spawn: mocks.spawn }))
+vi.mock('../../electron/shared/pathValidation', () => ({ validateCwd: mocks.validateCwd }))
+vi.mock('../../electron/services/VoightService', () => ({ trackError: vi.fn() }))
+
+import {
+  getLiteTerminalSessionCount,
+  killAllLiteTerminalSessions,
+  registerLiteTerminalHandlers,
+} from '../../electron/ipc/terminal.lite'
+
+function makeEvent(senderId = 7) {
+  const send = vi.fn()
+  return {
+    sender: { id: senderId, send, isDestroyed: () => false },
+    senderFrame: { url: 'file:///C:/daemon-lite/lite.html', parent: null },
+    send,
+  }
+}
+
+async function createTerminal(event = makeEvent(), opts: Record<string, unknown> = {}) {
+  const handler = mocks.handlers.get('terminal:create')!
+  const response = await handler(event, { cwd: 'C:\\work\\project', ...opts }) as {
+    ok: boolean
+    data?: { id: string; pid: number }
+    error?: string
+  }
+  return { event, response }
+}
+
+describe('Lite terminal IPC', () => {
+  beforeEach(() => {
+    killAllLiteTerminalSessions()
+    mocks.handlers.clear()
+    mocks.listeners.clear()
+    mocks.dataCallbacks.length = 0
+    mocks.exitCallbacks.length = 0
+    mocks.terminals.length = 0
+    vi.clearAllMocks()
+    registerLiteTerminalHandlers()
+  })
+
+  it('requires and validates a registered project cwd', async () => {
+    const missing = await mocks.handlers.get('terminal:create')!(makeEvent(), {}) as { ok: boolean; error?: string }
+    expect(missing).toEqual({ ok: false, error: 'Terminal cwd is required' })
+
+    mocks.validateCwd.mockImplementationOnce(() => { throw new Error('Path not within a registered project') })
+    const invalid = await createTerminal()
+    expect(invalid.response).toEqual({ ok: false, error: 'Path not within a registered project' })
+    expect(mocks.spawn).not.toHaveBeenCalled()
+  })
+
+  it('buffers output until ready and then sends the startup command', async () => {
+    const { event, response } = await createTerminal(makeEvent(), { startupCommand: 'pnpm test' })
+    expect(response.ok).toBe(true)
+    expect(mocks.validateCwd).toHaveBeenCalledWith('C:\\work\\project')
+    expect(mocks.spawn).toHaveBeenCalledWith(
+      expect.any(String),
+      expect.any(Array),
+      expect.objectContaining({ cwd: 'C:\\work\\project' }),
+    )
+
+    const id = response.data!.id
+    mocks.dataCallbacks[0]('shell banner')
+    expect(event.send).not.toHaveBeenCalled()
+
+    mocks.listeners.get('terminal:ready')!(event, id, 100, 24)
+    expect(mocks.terminals[0].resize).toHaveBeenCalledWith(100, 24)
+    expect(event.send).toHaveBeenCalledWith('terminal:data', { id, data: 'shell banner' })
+    expect(mocks.terminals[0].write).toHaveBeenCalledWith('pnpm test\r')
+  })
+
+  it('rejects control events from a different renderer owner', async () => {
+    const owner = makeEvent(7)
+    const outsider = makeEvent(8)
+    const { response } = await createTerminal(owner)
+    const id = response.data!.id
+
+    mocks.listeners.get('terminal:write')!(outsider, id, 'whoami\r')
+    mocks.listeners.get('terminal:resize')!(outsider, id, 80, 24)
+    expect(mocks.terminals[0].write).not.toHaveBeenCalled()
+    expect(mocks.terminals[0].resize).not.toHaveBeenCalled()
+
+    const killed = await mocks.handlers.get('terminal:kill')!(outsider, id) as { ok: boolean; error?: string }
+    expect(killed).toEqual({ ok: false, error: 'Terminal session not found' })
+    expect(getLiteTerminalSessionCount()).toBe(1)
+  })
+
+  it('supports clipboard paste, process exit, and shutdown cleanup', async () => {
+    const first = await createTerminal(makeEvent(7))
+    const firstId = first.response.data!.id
+    const pasted = await mocks.handlers.get('terminal:paste-from-clipboard')!(first.event, firstId) as { ok: boolean; data?: unknown }
+    expect(pasted).toEqual({ ok: true, data: { pasted: true } })
+    expect(mocks.terminals[0].write).toHaveBeenCalledWith('from clipboard')
+
+    mocks.exitCallbacks[0]({ exitCode: 2 })
+    expect(first.event.send).toHaveBeenCalledWith('terminal:exit', { id: firstId, exitCode: 2 })
+    expect(getLiteTerminalSessionCount()).toBe(0)
+
+    await createTerminal(makeEvent(7))
+    await createTerminal(makeEvent(7))
+    expect(getLiteTerminalSessionCount()).toBe(2)
+    killAllLiteTerminalSessions()
+    expect(getLiteTerminalSessionCount()).toBe(0)
+    if (process.platform === 'win32') {
+      expect(mocks.execFileSync).toHaveBeenCalledTimes(2)
+    } else {
+      expect(mocks.terminals[1].kill).toHaveBeenCalled()
+      expect(mocks.terminals[2].kill).toHaveBeenCalled()
+    }
+  })
+})
diff --git a/test/services/LiteValidatorCleanup.test.ts b/test/services/LiteValidatorCleanup.test.ts
new file mode 100644
index 00000000..d373da31
--- /dev/null
+++ b/test/services/LiteValidatorCleanup.test.ts
@@ -0,0 +1,64 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => {
+  const handlers = new Map<string, (...args: any[]) => Promise<unknown>>()
+  const terminal = {
+    pid: 4242,
+    write: vi.fn(),
+    kill: vi.fn(),
+    onData: vi.fn(),
+    onExit: vi.fn(),
+  }
+  return {
+    handlers,
+    terminal,
+    reset: vi.fn(),
+    setState: vi.fn(),
+  }
+})
+
+vi.mock('electron', () => ({
+  BrowserWindow: { getAllWindows: () => [] },
+  ipcMain: { handle: (channel: string, handler: (...args: any[]) => Promise<unknown>) => mocks.handlers.set(channel, handler) },
+}))
+vi.mock('node-pty', () => ({ spawn: vi.fn(() => mocks.terminal) }))
+vi.mock('../../electron/services/ValidatorManager', () => ({
+  appendOutput: vi.fn(),
+  detectAvailable: () => ({ surfpool: true, testValidator: true }),
+  detectToolchain: vi.fn(),
+  getState: () => ({ status: 'running' }),
+  getValidatorCommand: () => ({ command: 'solana-test-validator', args: [] }),
+  reset: mocks.reset,
+  setState: mocks.setState,
+  waitForValidatorHealth: vi.fn(async () => {}),
+}))
+vi.mock('../../electron/services/SolanaDetector', () => ({ detect: vi.fn() }))
+vi.mock('../../electron/services/VoightService', () => ({ trackError: vi.fn() }))
+
+import { registerValidatorHandlers, stopValidatorProcess } from '../../electron/ipc/validator'
+
+function event() {
+  return {
+    sender: { id: 1 },
+    senderFrame: { url: 'file:///C:/daemon-lite/lite.html', parent: null },
+  }
+}
+
+describe('Lite validator shutdown cleanup', () => {
+  beforeEach(() => {
+    stopValidatorProcess()
+    mocks.handlers.clear()
+    vi.clearAllMocks()
+    registerValidatorHandlers()
+  })
+
+  it('kills the owned validator process and resets runtime state', async () => {
+    const response = await mocks.handlers.get('validator:start')!(event(), 'test-validator') as { ok: boolean }
+    expect(response.ok).toBe(true)
+
+    stopValidatorProcess()
+
+    expect(mocks.terminal.kill).toHaveBeenCalledOnce()
+    expect(mocks.reset).toHaveBeenCalledOnce()
+  })
+})
diff --git a/test/services/LiteWorkspaceIpc.test.ts b/test/services/LiteWorkspaceIpc.test.ts
new file mode 100644
index 00000000..0fffeffe
--- /dev/null
+++ b/test/services/LiteWorkspaceIpc.test.ts
@@ -0,0 +1,280 @@
+import { mkdtemp, mkdir, readFile, rm, symlink, writeFile } from 'node:fs/promises'
+import os from 'node:os'
+import path from 'node:path'
+import { afterAll, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => {
+  const handlers = new Map<string, (...args: any[]) => Promise<unknown>>()
+  const projects: Array<Record<string, any>> = []
+  const watchers: Array<{
+    callback: (eventType: string, filename: string | Buffer | null) => void
+    close: ReturnType<typeof vi.fn>
+    error: ((error: Error) => void) | null
+  }> = []
+
+  return {
+    handlers,
+    projects,
+    watchers,
+    dialogResult: { canceled: true, filePaths: [] as string[] },
+    watch: vi.fn((_root: string, _options: object, callback: (eventType: string, filename: string | Buffer | null) => void) => {
+      const watcher = {
+        callback,
+        close: vi.fn(),
+        error: null as ((error: Error) => void) | null,
+        on: vi.fn((event: string, handler: (error: Error) => void) => {
+          if (event === 'error') watcher.error = handler
+          return watcher
+        }),
+      }
+      watchers.push(watcher)
+      return watcher
+    }),
+  }
+})
+
+vi.mock('electron', () => ({
+  dialog: { showOpenDialog: vi.fn(async () => mocks.dialogResult) },
+  ipcMain: {
+    handle: (channel: string, handler: (...args: any[]) => Promise<unknown>) => mocks.handlers.set(channel, handler),
+  },
+}))
+
+vi.mock('node:fs', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('node:fs')>()
+  return { ...actual, default: { ...actual, watch: mocks.watch } }
+})
+
+vi.mock('../../electron/db/db', () => ({
+  getDb: () => ({
+    prepare: (sql: string) => ({
+      all: () => sql.includes('SELECT path FROM projects')
+        ? mocks.projects.map(({ path: projectPath }) => ({ path: projectPath }))
+        : [...mocks.projects],
+      get: (value: string) => sql.includes('WHERE path = ?')
+        ? mocks.projects.find((project) => project.path === value)
+        : mocks.projects.find((project) => project.id === value),
+      run: (id: string, name: string, projectPath: string, lastActive: number) => {
+        mocks.projects.push({
+          id,
+          name,
+          path: projectPath,
+          git_remote: null,
+          default_agent_id: null,
+          status: 'active',
+          session_summary: null,
+          infra: '{}',
+          aliases: '[]',
+          wallet_id: null,
+          created_at: lastActive,
+          last_active: lastActive,
+          pinned: 0,
+          branch: null,
+        })
+      },
+    }),
+  }),
+}))
+
+vi.mock('../../electron/services/VoightService', () => ({ trackError: vi.fn() }))
+
+import { setTrustedIpcOrigin } from '../../electron/security/ipcSender'
+import { clearLiteProjectPickCapability, registerLiteProjectHandlers } from '../../electron/ipc/projects.lite'
+import { registerLiteFilesystemHandlers, stopLiteFilesystemWatcher } from '../../electron/ipc/filesystem.lite'
+
+interface TestEvent {
+  sender: {
+    id: number
+    send: ReturnType<typeof vi.fn>
+    isDestroyed: () => boolean
+  }
+  senderFrame: { url: string; parent: null }
+}
+
+let tempRoots: string[] = []
+
+function makeEvent(senderId = 7, url = 'file:///C:/daemon-lite/lite.html'): TestEvent {
+  return {
+    sender: { id: senderId, send: vi.fn(), isDestroyed: () => false },
+    senderFrame: { url, parent: null },
+  }
+}
+
+async function invoke(channel: string, event: TestEvent, ...args: unknown[]) {
+  return mocks.handlers.get(channel)!(event, ...args) as Promise<{ ok: boolean; data?: any; error?: string }>
+}
+
+async function makeTempRoot(label: string): Promise<string> {
+  const root = await mkdtemp(path.join(os.tmpdir(), `daemon-lite-${label}-`))
+  tempRoots.push(root)
+  return root
+}
+
+describe('Lite workspace IPC boundary', () => {
+  beforeAll(() => {
+    setTrustedIpcOrigin('file://')
+    registerLiteProjectHandlers()
+    registerLiteFilesystemHandlers()
+  })
+
+  beforeEach(() => {
+    mocks.projects.length = 0
+    mocks.watchers.length = 0
+    mocks.watch.mockClear()
+    mocks.dialogResult = { canceled: true, filePaths: [] }
+    clearLiteProjectPickCapability()
+    stopLiteFilesystemWatcher()
+  })
+
+  afterAll(async () => {
+    stopLiteFilesystemWatcher()
+    const roots = tempRoots
+    tempRoots = []
+    await Promise.all(roots.map((root) => rm(root, { recursive: true, force: true })))
+  })
+
+  it('registers only the renderer-required Lite workspace channels', () => {
+    expect([...mocks.handlers.keys()].sort()).toEqual([
+      'fs:readDir',
+      'fs:readFile',
+      'fs:unwatch',
+      'fs:watch',
+      'fs:writeFile',
+      'projects:create',
+      'projects:list',
+      'projects:openDialog',
+    ])
+    expect(mocks.handlers.has('fs:delete')).toBe(false)
+    expect(mocks.handlers.has('fs:importPaths')).toBe(false)
+    expect(mocks.handlers.has('projects:delete')).toBe(false)
+  })
+
+  it('requires a one-use, sender-bound native picker capability for project creation', async () => {
+    const selected = await makeTempRoot('selected')
+    const other = await makeTempRoot('other')
+    const owner = makeEvent(7)
+
+    expect(await invoke('projects:create', owner, { name: 'Bypass', path: selected })).toMatchObject({
+      ok: false,
+      error: 'Choose the project folder again before importing it',
+    })
+
+    mocks.dialogResult = { canceled: false, filePaths: [selected] }
+    const picked = await invoke('projects:openDialog', owner)
+    expect(picked).toMatchObject({ ok: true, data: await import('node:fs/promises').then(({ realpath }) => realpath(selected)) })
+
+    const wrongSender = await invoke('projects:create', makeEvent(8), { name: 'Wrong sender', path: selected })
+    expect(wrongSender).toMatchObject({ ok: false, error: 'Project folder selection belongs to another window' })
+
+    mocks.dialogResult = { canceled: false, filePaths: [selected] }
+    await invoke('projects:openDialog', owner)
+    expect(await invoke('projects:create', owner, { name: 'Wrong path', path: other })).toMatchObject({
+      ok: false,
+      error: 'Project path does not match the selected folder',
+    })
+    expect(await invoke('projects:create', owner, { name: 'Replay', path: selected })).toMatchObject({ ok: false })
+
+    await invoke('projects:openDialog', owner)
+    const created = await invoke('projects:create', owner, { name: 'Selected project', path: selected })
+    expect(created.ok).toBe(true)
+    expect(created.data).toMatchObject({ name: 'Selected project', path: picked.data })
+    expect(await invoke('projects:create', owner, { name: 'Replay', path: selected })).toMatchObject({ ok: false })
+  })
+
+  it('issues the same capability for the packaged-smoke picker override only in smoke mode', async () => {
+    const selected = await makeTempRoot('smoke-selected')
+    const owner = makeEvent()
+    const previousSmokeTest = process.env.DAEMON_SMOKE_TEST
+    const previousSmokePath = process.env.DAEMON_SMOKE_PROJECT_DIALOG_PATH
+    process.env.DAEMON_SMOKE_TEST = '1'
+    process.env.DAEMON_SMOKE_PROJECT_DIALOG_PATH = selected
+    try {
+      const picked = await invoke('projects:openDialog', owner)
+      expect(picked).toMatchObject({ ok: true })
+      expect(await invoke('projects:create', owner, { name: 'Smoke project', path: picked.data })).toMatchObject({
+        ok: true,
+        data: { name: 'Smoke project', path: picked.data },
+      })
+      expect(await invoke('projects:create', owner, { name: 'Replay', path: picked.data })).toMatchObject({ ok: false })
+    } finally {
+      if (previousSmokeTest === undefined) delete process.env.DAEMON_SMOKE_TEST
+      else process.env.DAEMON_SMOKE_TEST = previousSmokeTest
+      if (previousSmokePath === undefined) delete process.env.DAEMON_SMOKE_PROJECT_DIALOG_PATH
+      else process.env.DAEMON_SMOKE_PROJECT_DIALOG_PATH = previousSmokePath
+    }
+  })
+
+  it('rejects untrusted senders before accessing projects or files', async () => {
+    const remote = makeEvent(7, 'https://attacker.example/')
+    expect(await invoke('projects:list', remote)).toEqual({ ok: false, error: 'IPC request rejected: untrusted sender frame' })
+    expect(await invoke('fs:readFile', remote, 'C:\\outside.txt')).toEqual({ ok: false, error: 'IPC request rejected: untrusted sender frame' })
+  })
+
+  it('enforces registered realpath containment and blocks symlink escapes', async () => {
+    const root = await makeTempRoot('root')
+    const outside = await makeTempRoot('outside')
+    const insideFile = path.join(root, 'inside.txt')
+    const outsideFile = path.join(outside, 'outside.txt')
+    await writeFile(insideFile, 'inside', 'utf8')
+    await writeFile(outsideFile, 'outside', 'utf8')
+    mocks.projects.push({ path: root })
+
+    expect(await invoke('fs:readFile', makeEvent(), insideFile)).toMatchObject({ ok: true, data: { content: 'inside' } })
+    expect(await invoke('fs:readFile', makeEvent(), outsideFile)).toMatchObject({ ok: false, error: 'Path outside registered project boundaries' })
+
+    const link = path.join(root, 'escape')
+    await symlink(outside, link, process.platform === 'win32' ? 'junction' : 'dir')
+    expect(await invoke('fs:readFile', makeEvent(), path.join(link, 'outside.txt'))).toMatchObject({
+      ok: false,
+      error: 'Path outside registered project boundaries',
+    })
+  })
+
+  it('limits edits to small UTF-8 text and refuses secret or keypair files', async () => {
+    const root = await makeTempRoot('text')
+    const source = path.join(root, 'source.ts')
+    const envFile = path.join(root, '.env')
+    const keypair = path.join(root, 'wallet-keypair.json')
+    const binary = path.join(root, 'image.bin')
+    await Promise.all([
+      writeFile(source, 'export const value = 1\n', 'utf8'),
+      writeFile(envFile, 'TOKEN=old\n', 'utf8'),
+      writeFile(keypair, '[1,2,3]\n', 'utf8'),
+      writeFile(binary, Buffer.from([0, 1, 2, 3])),
+    ])
+    mocks.projects.push({ path: root })
+    const event = makeEvent()
+
+    expect(await invoke('fs:writeFile', event, source, 'export const value = 2\n')).toMatchObject({ ok: true })
+    expect(await readFile(source, 'utf8')).toBe('export const value = 2\n')
+    expect(await invoke('fs:writeFile', event, envFile, 'TOKEN=new\n')).toMatchObject({ ok: false, error: 'Lite Workbench refuses to write secret or keypair files' })
+    expect(await invoke('fs:writeFile', event, keypair, '[4,5,6]\n')).toMatchObject({ ok: false, error: 'Lite Workbench refuses to write secret or keypair files' })
+    expect(await invoke('fs:writeFile', event, source, 'bad\0content')).toMatchObject({ ok: false, error: 'Binary content cannot be written in Lite Workbench' })
+    expect(await invoke('fs:readFile', event, binary)).toMatchObject({ ok: false, error: 'Binary files cannot be opened in Lite Workbench' })
+  })
+
+  it('keeps one watcher and emits changes only from the current registered root', async () => {
+    vi.useFakeTimers()
+    try {
+      const firstRoot = await makeTempRoot('watch-one')
+      const secondRoot = await makeTempRoot('watch-two')
+      mocks.projects.push({ path: firstRoot }, { path: secondRoot })
+      const event = makeEvent()
+
+      expect((await invoke('fs:watch', event, firstRoot)).ok).toBe(true)
+      expect((await invoke('fs:watch', event, secondRoot)).ok).toBe(true)
+      expect(mocks.watchers[0].close).toHaveBeenCalledOnce()
+
+      mocks.watchers[0].callback('change', 'stale.ts')
+      mocks.watchers[1].callback('change', 'active.ts')
+      await vi.advanceTimersByTimeAsync(250)
+      expect(event.sender.send).toHaveBeenCalledTimes(1)
+      expect(event.sender.send).toHaveBeenCalledWith('fs:changed', { rootPath: secondRoot })
+
+      expect((await invoke('fs:unwatch', event)).ok).toBe(true)
+      expect(mocks.watchers[1].close).toHaveBeenCalledOnce()
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+})
diff --git a/test/services/MemeTechArchetypeDetector.test.ts b/test/services/MemeTechArchetypeDetector.test.ts
new file mode 100644
index 00000000..ec44bf4b
--- /dev/null
+++ b/test/services/MemeTechArchetypeDetector.test.ts
@@ -0,0 +1,82 @@
+import { mkdtemp, mkdir, rm, symlink, writeFile } from 'node:fs/promises'
+import os from 'node:os'
+import path from 'node:path'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => ({ projects: [] as Array<{ path: string }> }))
+vi.mock('../../electron/db/db', () => ({
+  getDb: () => ({ prepare: () => ({ all: () => mocks.projects }) }),
+}))
+
+import { detectMemeTechArchetype } from '../../electron/services/meme-studio/ArchetypeDetector'
+
+const roots: string[] = []
+
+async function fixture(name: string): Promise<string> {
+  const root = await mkdtemp(path.join(os.tmpdir(), `daemon-meme-${name}-`))
+  roots.push(root)
+  mocks.projects.push({ path: root })
+  return root
+}
+
+afterEach(async () => {
+  mocks.projects.length = 0
+  await Promise.all(roots.splice(0).map((root) => rm(root, { recursive: true, force: true })))
+})
+
+describe('Meme Tech archetype detector', () => {
+  it('classifies a market only when multiple operational signals exist', async () => {
+    const root = await fixture('market')
+    await mkdir(path.join(root, 'services', 'indexer'), { recursive: true })
+    await mkdir(path.join(root, 'services', 'keeper'), { recursive: true })
+    await writeFile(path.join(root, 'package.json'), JSON.stringify({ dependencies: { '@solana/web3.js': '1', '@solana/spl-token': '1' } }))
+    await writeFile(path.join(root, 'services', 'indexer', 'package.json'), JSON.stringify({ scripts: { backfill: 'indexer backfill checkpoint websocket' } }))
+    await writeFile(path.join(root, 'services', 'keeper', 'package.json'), JSON.stringify({ scripts: { start: 'oracle keeper crank liquidation' } }))
+
+    const result = await detectMemeTechArchetype(root)
+
+    expect(result.archetype).toBe('permissionless-market-indexer')
+    expect(result.topology).toEqual(expect.arrayContaining(['indexer', 'keeper']))
+    expect(result.evidence.map((item) => item.path)).not.toContain('.env')
+  })
+
+  it('does not treat a single dependency as a high-confidence product', async () => {
+    const root = await fixture('thin')
+    await writeFile(path.join(root, 'package.json'), JSON.stringify({ dependencies: { phaser: '3' } }))
+
+    const result = await detectMemeTechArchetype(root)
+
+    expect(result.archetype).toBe('unknown')
+    expect(result.confidence).toBeLessThan(0.5)
+  })
+
+  it('does not trust an explicit archetype without supporting topology', async () => {
+    const root = await fixture('spoofed')
+    await writeFile(path.join(root, 'daemon.meme-tech.json'), JSON.stringify({ archetype: 'permissionless-market-indexer', tokenMint: '11111111111111111111111111111111' }))
+
+    const result = await detectMemeTechArchetype(root)
+
+    expect(result.archetype).toBe('unknown')
+    expect(result.tokenMints).toEqual(['11111111111111111111111111111111'])
+  })
+
+  it('rejects unregistered project roots', async () => {
+    const root = await fixture('unregistered')
+    mocks.projects.length = 0
+    await expect(detectMemeTechArchetype(root)).rejects.toThrow('not registered')
+  })
+
+  it('ignores candidate files that resolve outside the registered root', async () => {
+    const root = await fixture('symlink-root')
+    const outside = await mkdtemp(path.join(os.tmpdir(), 'daemon-meme-outside-'))
+    roots.push(outside)
+    const outsidePackage = path.join(outside, 'package.json')
+    await writeFile(outsidePackage, JSON.stringify({ dependencies: { phaser: '3', '@coral-xyz/anchor': '1' } }))
+    await symlink(outsidePackage, path.join(root, 'package.json'), 'file')
+
+    const result = await detectMemeTechArchetype(root)
+
+    expect(result.archetype).toBe('unknown')
+    expect(result.evidence).toEqual([])
+  })
+})
diff --git a/test/services/MemeTechMarketContext.test.ts b/test/services/MemeTechMarketContext.test.ts
new file mode 100644
index 00000000..7fae09b0
--- /dev/null
+++ b/test/services/MemeTechMarketContext.test.ts
@@ -0,0 +1,87 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+vi.mock('../../electron/services/SecureKeyService', () => ({ getKey: vi.fn(() => null) }))
+import { clearMemeMarketCache, readMemeMarketContext, readTokenRiskPreflight } from '../../electron/services/meme-studio/MarketContextService'
+
+const MINT = 'Tqj8yFmagrg7oorpQkVGYR52r96RFTamvWfth9bpump'
+
+function response(body: unknown, status = 200): Response {
+  return new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json' } })
+}
+
+describe('Meme Tech market context', () => {
+  beforeEach(() => {
+    process.env.BIRDEYE_API_KEY = 'test-only-key'
+    clearMemeMarketCache()
+  })
+
+  afterEach(() => {
+    delete process.env.BIRDEYE_API_KEY
+    vi.unstubAllGlobals()
+  })
+
+  it('normalizes both providers, timestamps evidence, and reports divergence', async () => {
+    vi.stubGlobal('fetch', vi.fn(async (url: string) => {
+      if (url.includes('token_overview')) return response({ data: { symbol: 'KINS', price: 1, liquidity: 100_000, mc: 2_000_000, v24hUSD: 500_000, holder: 1000 } })
+      if (url.includes('trade-data')) return response({ data: { volume_1h_usd: 50_000, trade_1h: 900, unique_wallet_1h: 300, price_change_1h_percent: 12 } })
+      return response([{ priceUsd: '1.2', liquidity: { usd: 40_000 }, volume: { h1: 45_000 }, txns: { h1: { buys: 10, sells: 5 } }, baseToken: { symbol: 'KINS' } }])
+    }))
+
+    const result = await readMemeMarketContext(MINT)
+
+    expect(result.symbol).toBe('KINS')
+    expect(result.sources.map((source) => source.provider)).toEqual(['birdeye', 'dexscreener'])
+    expect(result.divergences).toHaveLength(2)
+    expect(JSON.stringify(result)).not.toContain('test-only-key')
+  })
+
+  it('keeps DEX observations available when Birdeye fails and marks them degraded', async () => {
+    vi.stubGlobal('fetch', vi.fn(async (url: string) => {
+      if (url.includes('birdeye')) return response({}, 429)
+      return response([{ priceUsd: '0.5', liquidity: { usd: 25_000 }, baseToken: { symbol: 'DEX' } }])
+    }))
+
+    const result = await readMemeMarketContext(MINT)
+
+    expect(result.degraded).toBe(true)
+    expect(result.sources).toEqual([expect.objectContaining({ provider: 'dexscreener' })])
+    expect(result.priceUsd).toBe(0.5)
+  })
+
+  it('separates authority and concentration risk from attention', async () => {
+    vi.stubGlobal('fetch', vi.fn(async () => response({ data: {
+      mintAuthority: 'Authority11111111111111111111111111111111',
+      freezeAuthority: null,
+      transferFeeEnable: false,
+      nonTransferable: false,
+      top10HolderPercent: 0.41,
+    } })))
+
+    const result = await readTokenRiskPreflight(MINT)
+
+    expect(result.risk).toBe('high')
+    expect(result.attentionIsNotTrust).toBe(true)
+    expect(result.facts).toEqual(expect.arrayContaining([
+      expect.objectContaining({ label: 'Mint authority', status: 'danger' }),
+      expect.objectContaining({ label: 'Top 10 holders', status: 'danger' }),
+    ]))
+  })
+
+  it('normalizes textual booleans and percentage holder units', async () => {
+    vi.stubGlobal('fetch', vi.fn(async () => response({ data: {
+      mintAuthority: 'false', freezeAuthority: '0', transferFeeEnable: 'disabled', nonTransferable: false, top10HolderPercent: 41,
+    } })))
+
+    const result = await readTokenRiskPreflight(MINT)
+
+    expect(result.facts.find((fact) => fact.label === 'Mint authority')).toMatchObject({ value: 'Disabled', status: 'good' })
+    expect(result.facts.find((fact) => fact.label === 'Top 10 holders')).toMatchObject({ value: '41.0%', status: 'danger' })
+  })
+
+  it('rejects non-Solana addresses before any network request', async () => {
+    const fetchMock = vi.fn()
+    vi.stubGlobal('fetch', fetchMock)
+    await expect(readMemeMarketContext('not-a-mint')).rejects.toThrow('valid Solana mint')
+    expect(fetchMock).not.toHaveBeenCalled()
+  })
+})
diff --git a/test/services/MigrationRunner.test.ts b/test/services/MigrationRunner.test.ts
index 22dc8763..9a3c9fa7 100644
--- a/test/services/MigrationRunner.test.ts
+++ b/test/services/MigrationRunner.test.ts
@@ -144,7 +144,7 @@ describe('runMigrations — upgraded install', () => {
     const rows = Object.fromEntries(agentModels(db).map((r) => [r.id, r.model]))
     expect(rows['daemon-debug']).toBe(CLAUDE_MODEL_IDS.sonnet)
     expect(rows['solana-agent']).toBe(CLAUDE_MODEL_IDS.opus)
-    expect(maxVersion(db)).toBeGreaterThanOrEqual(60)
+    expect(maxVersion(db)).toBeGreaterThanOrEqual(61)
   })
 
   it('remaps stale Agent Station picker models but never non-Claude rows (V60)', () => {
@@ -166,7 +166,7 @@ describe('runMigrations — upgraded install', () => {
     const afterFirst = agentModels(db)
     runMigrations(db)
     expect(agentModels(db)).toEqual(afterFirst)
-    expect(maxVersion(db)).toBeGreaterThanOrEqual(60)
+    expect(maxVersion(db)).toBeGreaterThanOrEqual(61)
   })
 })
 
diff --git a/test/services/RobinhoodChainTools.test.ts b/test/services/RobinhoodChainTools.test.ts
new file mode 100644
index 00000000..da7daa35
--- /dev/null
+++ b/test/services/RobinhoodChainTools.test.ts
@@ -0,0 +1,223 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+import {
+  formatUnits,
+  getBalance,
+  getChainStatus,
+  getErc20Info,
+  getTransaction,
+  isEvmAddress,
+  isTxHash,
+} from '../../electron/services/RobinhoodChainService'
+import {
+  getRhNetwork,
+  ROBINHOOD_CHAIN_NETWORKS,
+  ROBINHOOD_CHAIN_TOKENS,
+} from '../../electron/services/aria/knowledge/robinhoodChain'
+import {
+  getKnowledgeSection,
+  ROBINHOOD_CHAIN_KNOWLEDGE,
+  searchKnowledge,
+} from '../../electron/services/aria/knowledge/robinhoodChainDocs'
+import { robinhoodChainTools } from '../../electron/services/aria/tools/robinhoodChain'
+
+const NVDA = '0xd0601CE157Db5bdC3162BbaC2a2C8aF5320D9EEC'
+const HOLDER = '0x1111111111111111111111111111111111111111'
+const TX_HASH = `0x${'ab'.repeat(32)}`
+
+const fetchMock = vi.fn()
+
+function rpcResult(result: unknown) {
+  return { ok: true, json: async () => ({ result }) } as Response
+}
+
+/** ABI-encode a string return value (offset + length + padded utf8). */
+function abiString(value: string): string {
+  const bytes = Buffer.from(value, 'utf8').toString('hex')
+  const padded = bytes.padEnd(Math.ceil(bytes.length / 64) * 64, '0')
+  const length = value.length.toString(16).padStart(64, '0')
+  return `0x${'20'.padStart(64, '0')}${length}${padded}`
+}
+
+function toolByName(name: string) {
+  const tool = robinhoodChainTools.find((t) => t.name === name)
+  if (!tool) throw new Error(`Tool ${name} not registered`)
+  return tool
+}
+
+const context = {
+  sessionId: 'session-1',
+  snapshot: {} as never,
+  runUiEffect: vi.fn(),
+}
+
+beforeEach(() => {
+  vi.stubGlobal('fetch', fetchMock)
+})
+
+afterEach(() => {
+  vi.unstubAllGlobals()
+  fetchMock.mockReset()
+})
+
+describe('robinhoodChain knowledge', () => {
+  it('bundles all 17 docs sections with source URLs', () => {
+    expect(ROBINHOOD_CHAIN_KNOWLEDGE).toHaveLength(17)
+    for (const section of ROBINHOOD_CHAIN_KNOWLEDGE) {
+      expect(section.sourceUrl).toMatch(/^https:\/\/docs\.robinhood\.com\/chain/)
+      expect(section.details.length).toBeGreaterThan(50)
+    }
+  })
+
+  it('exposes the network constants from the docs', () => {
+    expect(getRhNetwork('mainnet')).toMatchObject({ chainId: 4663, gasToken: 'ETH' })
+    expect(getRhNetwork('testnet')).toMatchObject({ chainId: 46630 })
+    expect(ROBINHOOD_CHAIN_NETWORKS.map((n) => n.id)).toEqual(['mainnet', 'testnet'])
+  })
+
+  it('looks up sections by topic and by keyword', () => {
+    expect(getKnowledgeSection('stock-tokens')?.details).toContain('ERC-8056')
+    expect(getKnowledgeSection('nope')).toBeUndefined()
+    const hits = searchKnowledge('uiMultiplier')
+    expect(hits.map((s) => s.topic)).toContain('building-with-stock-tokens')
+    expect(searchKnowledge('')).toEqual([])
+  })
+
+  it('keeps the canonical token registry well-formed', () => {
+    for (const token of ROBINHOOD_CHAIN_TOKENS) {
+      expect(isEvmAddress(token.address)).toBe(true)
+      expect(['core', 'stock', 'etf']).toContain(token.kind)
+    }
+    expect(ROBINHOOD_CHAIN_TOKENS.find((t) => t.symbol === 'NVDA')?.address).toBe(NVDA)
+  })
+})
+
+describe('robinhoodChain tools', () => {
+  it('registers four read-only tools', () => {
+    expect(robinhoodChainTools.map((t) => t.name)).toEqual([
+      'rh_chain_info',
+      'rh_chain_knowledge',
+      'rh_stock_tokens',
+      'rh_chain_rpc',
+    ])
+    for (const tool of robinhoodChainTools) {
+      expect(tool.risk).toBe('read')
+      expect(tool.kind).toBe('read')
+    }
+  })
+
+  it('rh_chain_info returns the bundled network reference', async () => {
+    const result = await toolByName('rh_chain_info').handler({}, context)
+    expect(result.ok).toBe(true)
+    expect(result.data).toMatchObject({ networks: ROBINHOOD_CHAIN_NETWORKS })
+  })
+
+  it('rh_chain_knowledge serves topic, query, and index modes', async () => {
+    const tool = toolByName('rh_chain_knowledge')
+    const byTopic = await tool.handler({ topic: 'bridging' }, context)
+    expect(byTopic.ok).toBe(true)
+    expect((byTopic.data as { details: string }).details).toContain('7-day challenge period')
+
+    const byQuery = await tool.handler({ query: 'sequencer uptime' }, context)
+    expect(byQuery.ok).toBe(true)
+
+    const index = await tool.handler({}, context)
+    expect(index.ok).toBe(true)
+    expect(index.data).toHaveLength(ROBINHOOD_CHAIN_KNOWLEDGE.length)
+
+    const miss = await tool.handler({ query: 'zzz-no-such-thing' }, context)
+    expect(miss.ok).toBe(false)
+  })
+
+  it('rh_stock_tokens filters by symbol and kind', async () => {
+    const tool = toolByName('rh_stock_tokens')
+    const nvda = await tool.handler({ symbol: 'nvda' }, context)
+    expect(nvda.ok).toBe(true)
+    expect(nvda.data).toEqual([{ symbol: 'NVDA', kind: 'stock', address: NVDA }])
+
+    const etfs = await tool.handler({ kind: 'etf' }, context)
+    expect(etfs.ok).toBe(true)
+    expect((etfs.data as unknown[]).length).toBe(5)
+
+    const miss = await tool.handler({ symbol: 'DOGE' }, context)
+    expect(miss.ok).toBe(false)
+  })
+
+  it('rh_chain_rpc validates inputs before any network call', async () => {
+    const tool = toolByName('rh_chain_rpc')
+    expect((await tool.handler({ action: 'balance' }, context)).ok).toBe(false)
+    expect((await tool.handler({ action: 'token' }, context)).ok).toBe(false)
+    expect((await tool.handler({ action: 'tx' }, context)).ok).toBe(false)
+    expect((await tool.handler({ action: 'nope' }, context)).ok).toBe(false)
+    await expect(tool.handler({ action: 'status', network: 'devnet' }, context)).rejects.toThrow(
+      'network must be "mainnet" or "testnet"',
+    )
+    expect(fetchMock).not.toHaveBeenCalled()
+  })
+
+  it('rh_chain_rpc status reads chain id, block, and gas price', async () => {
+    fetchMock
+      .mockResolvedValueOnce(rpcResult('0x1237')) // eth_chainId → 4663
+      .mockResolvedValueOnce(rpcResult('0x10'))
+      .mockResolvedValueOnce(rpcResult('0x3b9aca00')) // 1 gwei
+    const result = await toolByName('rh_chain_rpc').handler({ action: 'status' }, context)
+    expect(result.ok).toBe(true)
+    expect(result.data).toMatchObject({ chainId: 4663, blockNumber: 16, gasPriceGwei: '1' })
+    const firstCall = fetchMock.mock.calls[0] as [string, RequestInit]
+    expect(firstCall[0]).toBe('https://rpc.mainnet.chain.robinhood.com')
+  })
+})
+
+describe('RobinhoodChainService', () => {
+  it('validates addresses and hashes', () => {
+    expect(isEvmAddress(NVDA)).toBe(true)
+    expect(isEvmAddress('0x123')).toBe(false)
+    expect(isTxHash(TX_HASH)).toBe(true)
+    expect(isTxHash(NVDA)).toBe(false)
+  })
+
+  it('formats units without float precision loss', () => {
+    expect(formatUnits(10n ** 18n, 18)).toBe('1')
+    expect(formatUnits(1500000000000000000n, 18)).toBe('1.5')
+    expect(formatUnits(1n, 18)).toBe('0.000000000000000001')
+    expect(formatUnits(0n, 18)).toBe('0')
+  })
+
+  it('getBalance rejects bad addresses and decodes wei', async () => {
+    await expect(getBalance('mainnet', 'bogus')).rejects.toThrow('not a valid 0x address')
+    fetchMock.mockResolvedValueOnce(rpcResult('0xde0b6b3a7640000')) // 1 ETH
+    const balance = await getBalance('mainnet', HOLDER)
+    expect(balance).toMatchObject({ eth: '1', wei: '1000000000000000000' })
+  })
+
+  it('getErc20Info decodes metadata and holder balance', async () => {
+    fetchMock
+      .mockResolvedValueOnce(rpcResult(abiString('NVIDIA Stock Token')))
+      .mockResolvedValueOnce(rpcResult(abiString('NVDA')))
+      .mockResolvedValueOnce(rpcResult(`0x${(18).toString(16).padStart(64, '0')}`))
+      .mockResolvedValueOnce(rpcResult(`0x${(10n ** 18n * 5n).toString(16).padStart(64, '0')}`))
+      .mockResolvedValueOnce(rpcResult(`0x${(10n ** 18n * 2n).toString(16).padStart(64, '0')}`))
+    const info = await getErc20Info('mainnet', NVDA, HOLDER)
+    expect(info).toMatchObject({
+      name: 'NVIDIA Stock Token',
+      symbol: 'NVDA',
+      decimals: 18,
+      totalSupply: '5',
+      holder: { address: HOLDER, balance: '2' },
+    })
+    const balanceCall = JSON.parse((fetchMock.mock.calls[4] as [string, RequestInit])[1].body as string)
+    expect(balanceCall.params[0].data).toBe(`0x70a08231${HOLDER.slice(2).padStart(64, '0')}`)
+  })
+
+  it('surfaces RPC errors and missing transactions', async () => {
+    fetchMock.mockResolvedValue({
+      ok: true,
+      json: async () => ({ error: { code: -32000, message: 'rate limited' } }),
+    } as Response)
+    await expect(getChainStatus('testnet')).rejects.toThrow('rate limited')
+
+    fetchMock.mockReset()
+    fetchMock.mockResolvedValueOnce(rpcResult(null)).mockResolvedValueOnce(rpcResult(null))
+    await expect(getTransaction('mainnet', TX_HASH)).rejects.toThrow('not found')
+  })
+})
diff --git a/test/shared/autoUpdatePolicy.test.ts b/test/shared/autoUpdatePolicy.test.ts
new file mode 100644
index 00000000..d4d489d2
--- /dev/null
+++ b/test/shared/autoUpdatePolicy.test.ts
@@ -0,0 +1,24 @@
+import { describe, expect, it } from 'vitest'
+import { shouldEnableAutoUpdate } from '../../electron/main/autoUpdatePolicy'
+
+const DEFAULT_CONTEXT = {
+  isPackaged: true,
+  isDisabled: false,
+  isSmokeTest: false,
+  isAdHocMacBuild: false,
+}
+
+describe('automatic update policy', () => {
+  it('enables updates for ordinary packaged releases', () => {
+    expect(shouldEnableAutoUpdate(DEFAULT_CONTEXT)).toBe(true)
+  })
+
+  it.each([
+    ['ad-hoc macOS build', { isAdHocMacBuild: true }],
+    ['disabled update environment', { isDisabled: true }],
+    ['smoke test', { isSmokeTest: true }],
+    ['development build', { isPackaged: false }],
+  ])('disables updates for %s', (_label, override) => {
+    expect(shouldEnableAutoUpdate({ ...DEFAULT_CONTEXT, ...override })).toBe(false)
+  })
+})
diff --git a/test/shared/macosArtifacts.test.ts b/test/shared/macosArtifacts.test.ts
new file mode 100644
index 00000000..224cb5a2
--- /dev/null
+++ b/test/shared/macosArtifacts.test.ts
@@ -0,0 +1,68 @@
+import { createHash } from 'node:crypto'
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+import { afterEach, describe, expect, it } from 'vitest'
+import { verifyMacRelease } from '../../scripts/release-tools/verify-macos-artifacts.mjs'
+
+const VERSION = '4.8.0'
+let releaseDir = ''
+
+function sha512(contents: string) {
+  return createHash('sha512').update(contents).digest('base64')
+}
+
+function writeFixture(isUnsigned = false) {
+  releaseDir = mkdtempSync(path.join(tmpdir(), 'daemon-mac-release-'))
+  const prefix = isUnsigned ? 'DAEMON-unsigned-arm64' : 'DAEMON-arm64'
+  const artifacts = {
+    [`${prefix}.dmg`]: 'dmg-contents',
+    [`${prefix}.zip`]: 'zip-contents',
+  }
+  for (const [name, contents] of Object.entries(artifacts)) {
+    writeFileSync(path.join(releaseDir, name), contents)
+    writeFileSync(path.join(releaseDir, `${name}.blockmap`), 'blockmap')
+  }
+  writeFileSync(path.join(releaseDir, 'latest-mac.yml'), [
+    `version: ${VERSION}`,
+    'files:',
+    `  - url: ${prefix}.zip`,
+    `    sha512: ${sha512(artifacts[`${prefix}.zip`])}`,
+    `    size: ${artifacts[`${prefix}.zip`].length}`,
+    `  - url: ${prefix}.dmg`,
+    `    sha512: ${sha512(artifacts[`${prefix}.dmg`])}`,
+    `    size: ${artifacts[`${prefix}.dmg`].length}`,
+    `path: ${prefix}.zip`,
+  ].join('\n'))
+}
+
+afterEach(() => {
+  if (releaseDir) rmSync(releaseDir, { recursive: true, force: true })
+  releaseDir = ''
+})
+
+describe('macOS release artifacts', () => {
+  it('accepts matching arm64 artifacts and updater metadata', () => {
+    writeFixture()
+    expect(() => verifyMacRelease(releaseDir, VERSION)).not.toThrow()
+  })
+
+  it('accepts explicitly labeled unsigned artifacts only in unsigned mode', () => {
+    writeFixture(true)
+    expect(() => verifyMacRelease(releaseDir, VERSION, { isUnsigned: true })).not.toThrow()
+    expect(() => verifyMacRelease(releaseDir, VERSION)).toThrow(/DAEMON-arm64/)
+  })
+
+  it('rejects metadata with a mismatched artifact hash', () => {
+    writeFixture()
+    writeFileSync(path.join(releaseDir, 'DAEMON-arm64.zip'), 'tampered')
+    expect(() => verifyMacRelease(releaseDir, VERSION)).toThrow(/size does not match/)
+  })
+
+  it('rejects non-arm64 updater entries', () => {
+    writeFixture()
+    const metadataPath = path.join(releaseDir, 'latest-mac.yml')
+    writeFileSync(metadataPath, `${readFileSync(metadataPath, 'utf8')}\n  - url: DAEMON-x64.zip\n`)
+    expect(() => verifyMacRelease(releaseDir, VERSION)).toThrow(/non-arm64 artifact/)
+  })
+})
diff --git a/test/shared/macosPackaging.test.ts b/test/shared/macosPackaging.test.ts
new file mode 100644
index 00000000..e3941710
--- /dev/null
+++ b/test/shared/macosPackaging.test.ts
@@ -0,0 +1,39 @@
+import { createRequire } from 'node:module'
+import { readFileSync } from 'node:fs'
+import path from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+type MacConfig = {
+  isAdHoc: boolean
+  identity?: string
+  hardenedRuntime: boolean
+  entitlements?: string
+  artifactName: string
+}
+
+const require = createRequire(import.meta.url)
+const { macSigningConfig } = require('../../build/macPackaging.cjs') as {
+  macSigningConfig: (env?: NodeJS.ProcessEnv) => MacConfig
+}
+
+describe('macOS packaging configuration', () => {
+  it('keeps Developer ID releases on the production entitlements', () => {
+    const mac = macSigningConfig({})
+    expect(mac.isAdHoc).toBe(false)
+    expect(mac.identity).toBeUndefined()
+    expect(mac.hardenedRuntime).toBe(true)
+    expect(mac.entitlements).toBe('build/entitlements.mac.plist')
+    expect(mac.artifactName).toBe('DAEMON-${arch}.${ext}')
+    const entitlements = readFileSync(path.resolve(mac.entitlements ?? ''), 'utf8')
+    expect(entitlements).not.toContain('com.apple.security.cs.disable-library-validation')
+  })
+
+  it('uses explicit ad-hoc signing without hardened runtime', () => {
+    const mac = macSigningConfig({ DAEMON_MAC_ADHOC: '1' })
+    expect(mac.isAdHoc).toBe(true)
+    expect(mac.identity).toBe('-')
+    expect(mac.hardenedRuntime).toBe(false)
+    expect(mac.entitlements).toBeUndefined()
+    expect(mac.artifactName).toBe('DAEMON-unsigned-${arch}.${ext}')
+  })
+})
diff --git a/test/store/ariaHost.test.ts b/test/store/ariaHost.test.ts
new file mode 100644
index 00000000..7aa11803
--- /dev/null
+++ b/test/store/ariaHost.test.ts
@@ -0,0 +1,64 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { getAriaHost, setAriaHost, type AriaHost } from '../../src/store/ariaHost'
+
+function makeHost(overrides: Partial<AriaHost> = {}): AriaHost {
+  return {
+    activeProjectId: () => 'proj-1',
+    buildSnapshot: () => ({
+      activeProjectId: 'proj-1',
+      activeProjectPath: 'C:/x',
+      currentPanelId: 'ide',
+      openFilePath: null,
+      chips: { activeFile: true, projectTree: true, gitDiff: false, terminalLogs: false, walletContext: false, projectMemory: true },
+    }),
+    applyUiEffect: vi.fn(),
+    runUiEffectWithData: vi.fn(async () => ({ ok: true })),
+    ...overrides,
+  }
+}
+
+describe('ariaHost port', () => {
+  beforeEach(() => {
+    // Restore the null default by installing a fresh module state per test is
+    // not possible (module singleton) — install an explicit host instead.
+  })
+
+  it('null default host reports no project and a memory-on snapshot', async () => {
+    // Fresh import state in the suite run starts with the null host, but other
+    // tests may have installed one. Reset via a null-equivalent host.
+    setAriaHost({
+      activeProjectId: () => null,
+      buildSnapshot: () => ({
+        activeProjectId: null,
+        activeProjectPath: null,
+        currentPanelId: null,
+        openFilePath: null,
+        chips: { activeFile: false, projectTree: false, gitDiff: false, terminalLogs: false, walletContext: false, projectMemory: true },
+      }),
+      applyUiEffect: () => {},
+      runUiEffectWithData: async () => ({ ok: true }),
+    })
+    const host = getAriaHost()
+    expect(host.activeProjectId()).toBeNull()
+    const snapshot = host.buildSnapshot()
+    expect(snapshot.activeProjectId).toBeNull()
+    expect(snapshot.chips.projectMemory).toBe(true)
+    expect(host.openProviderLoginTerminal).toBeUndefined()
+    await expect(host.runUiEffectWithData({ type: 'open_tool', toolId: 'x' })).resolves.toEqual({ ok: true })
+  })
+
+  it('setAriaHost installs the shell host used by consumers', () => {
+    const host = makeHost()
+    setAriaHost(host)
+    expect(getAriaHost()).toBe(host)
+    expect(getAriaHost().activeProjectId()).toBe('proj-1')
+  })
+
+  it('optional provider-login capability is preserved through the port', async () => {
+    const login = vi.fn(async () => 'Opened claude login terminal.')
+    setAriaHost(makeHost({ openProviderLoginTerminal: login }))
+    const notice = await getAriaHost().openProviderLoginTerminal?.('claude')
+    expect(login).toHaveBeenCalledWith('claude')
+    expect(notice).toContain('login terminal')
+  })
+})
diff --git a/vite.lite.config.ts b/vite.lite.config.ts
new file mode 100644
index 00000000..acc49a2b
--- /dev/null
+++ b/vite.lite.config.ts
@@ -0,0 +1,167 @@
+/**
+ * DAEMON Lite build — second flavor of the app from the same repo.
+ * Renderer: lite.html → dist-lite. Main: electron/main/lite.ts →
+ * dist-electron-lite. Preload is shared with the full app.
+ *
+ * The module-swap plugin is the size lever: it redirects toolCatalog and
+ * contextAssembler to their .lite variants so the main bundle never imports
+ * the IDE/Solana tool domains (raydium, metaplex, launchpads, ...), letting
+ * electron-builder.lite.json exclude those packages from the installer.
+ */
+import { rmSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import path from 'node:path'
+import { defineConfig, type Plugin } from 'vite'
+import react from '@vitejs/plugin-react'
+import electron from 'vite-plugin-electron/simple'
+import pkg from './package.json'
+
+const LITE_MODULE_SWAPS: Array<{ match: RegExp; file: string }> = [
+  { match: /electron[\\/]services[\\/]aria[\\/]toolCatalog(\.ts)?$/, file: 'electron/services/aria/toolCatalog.lite.ts' },
+  { match: /electron[\\/]services[\\/]aria[\\/]contextAssembler(\.ts)?$/, file: 'electron/services/aria/contextAssembler.lite.ts' },
+  { match: /electron[\\/]services[\\/]ProService(\.ts)?$/, file: 'electron/services/ProService.lite.ts' },
+  { match: /electron[\\/]services[\\/]email[\\/]EmailTools(\.ts)?$/, file: 'electron/services/email/EmailTools.lite.ts' },
+  { match: /electron[\\/]ipc[\\/]forensics(\.ts)?$/, file: 'electron/ipc/forensics.lite.ts' },
+]
+
+function liteModuleSwap(): Plugin {
+  return {
+    name: 'daemon-lite-module-swap',
+    enforce: 'pre',
+    async resolveId(source, importer, options) {
+      if (!importer) return null
+      // The .lite variants import shared modules from the same directory —
+      // never rewrite resolutions requested by the swapped files themselves.
+      if (/\.lite\.ts$/.test(importer)) return null
+      const resolved = await this.resolve(source, importer, { ...options, skipSelf: true })
+      if (!resolved || resolved.id.includes('.lite.')) return null
+      for (const swap of LITE_MODULE_SWAPS) {
+        if (swap.match.test(resolved.id)) return path.join(__dirname, swap.file)
+      }
+      return null
+    },
+  }
+}
+
+function electronCjsInteropShim(): Plugin {
+  const ELECTRON_NAMED_IMPORT = /import\s*\{\s*([^}]+)\s*\}\s*from\s*["']electron["'];?/g
+  return {
+    name: 'daemon-electron-cjs-interop',
+    renderChunk(code: string) {
+      if (!ELECTRON_NAMED_IMPORT.test(code)) return null
+      ELECTRON_NAMED_IMPORT.lastIndex = 0
+      return {
+        code: code.replace(ELECTRON_NAMED_IMPORT, (_match, names: string) => {
+          const imports = names
+            .split(',')
+            .map((name) => name.trim())
+            .filter(Boolean)
+            .map((name) => {
+              const [source, alias] = name.split(/\s+as\s+/)
+              return alias ? `${source}: ${alias}` : source
+            })
+            .join(', ')
+
+          return `import electron from "electron";\nconst { ${imports} } = electron;`
+        }),
+        map: null,
+      }
+    },
+  }
+}
+
+function liteRendererChunks(id: string) {
+  if (!id.includes('node_modules')) return undefined
+  if (id.includes('react') || id.includes('scheduler')) return 'react-vendor'
+  if (id.includes('zustand')) return 'state-vendor'
+  return 'vendor'
+}
+
+export default defineConfig(({ command }) => {
+  rmSync('dist-electron-lite', { recursive: true, force: true })
+
+  const isServe = command === 'serve'
+  const isBuild = command === 'build'
+  const sourcemap = isServe
+
+  const external = Object.keys('dependencies' in pkg ? pkg.dependencies : {})
+
+  return {
+    resolve: {
+      alias: {
+        '@': path.join(__dirname, 'src'),
+        buffer: createRequire(import.meta.url).resolve('buffer/'),
+      },
+    },
+    plugins: [
+      react(),
+      electron({
+        main: {
+          entry: 'electron/main/lite.ts',
+          onstart(args) {
+            // Default startup() runs `electron .` which boots the FULL app via
+            // package.json "main". Point electron at the lite main explicitly.
+            args.startup(['dist-electron-lite/main/lite.js'])
+          },
+          vite: {
+            plugins: [liteModuleSwap(), electronCjsInteropShim()],
+            build: {
+              sourcemap,
+              minify: isBuild,
+              outDir: 'dist-electron-lite/main',
+              rollupOptions: {
+                external,
+              },
+            },
+          },
+        },
+        preload: {
+          // Two preloads: the shared full bridge (main window) and the minimal
+          // pop-out bridge (chrome strip — nav channels only).
+          input: {
+            index: 'electron/preload/index.ts',
+            popout: 'electron/preload/popout.ts',
+          },
+          vite: {
+            plugins: [electronCjsInteropShim()],
+            build: {
+              sourcemap: sourcemap ? 'inline' : undefined,
+              minify: isBuild,
+              outDir: 'dist-electron-lite/preload',
+              rollupOptions: {
+                external,
+                output: {
+                  // Two preload inputs → per-input chunks; disable the plugin's
+                  // default single-file inlining which rejects multiple inputs.
+                  inlineDynamicImports: false,
+                },
+              },
+            },
+          },
+        },
+        renderer: {},
+      }),
+    ],
+    clearScreen: false,
+    define: {
+      global: 'globalThis',
+    },
+    optimizeDeps: {
+      include: ['buffer'],
+    },
+    build: {
+      outDir: 'dist-lite',
+      chunkSizeWarningLimit: 2048,
+      rollupOptions: {
+        // Two renderer entries: the app shell and the pop-out chrome strip.
+        input: {
+          lite: path.join(__dirname, 'lite.html'),
+          popout: path.join(__dirname, 'popout.html'),
+        },
+        output: {
+          manualChunks: liteRendererChunks,
+        },
+      },
+    },
+  }
+})