chore: release v1.7.89-alpha

- update.rs: post-OTA probe falls back to http://127.0.0.1/ on connect
  error (nginx binds :80, not :443) so good updates are no longer rolled
  back; recover stuck update_in_progress; avoid ETXTBSY on running binary
- LND: REST client bypasses proxy, GET newaddress p2wkh, wallet
  readiness/unlock after restart
- Dashboard.vue: chat route back to plain h-full (desktop bottom-gap fix)
- vite.config.ts: dev-only /aiui proxy
- tests/release/run.sh: release gate harness (static+frontend+backend)
- CHANGELOG: v1.7.89-alpha notes

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## v1.7.89-alpha (2026-06-12)
+
+- The AI assistant looks the way it always did again: no extra back button or close button on phones, and the desktop view fills the whole screen without a gap at the bottom.
+- System updates are much more reliable: updates that previously got stuck partway or failed to install now complete cleanly, and a failed update can no longer block all future updates.
+- After an update, the system now checks itself correctly on every node type, so working updates are no longer mistakenly undone.
+- Generating a Bitcoin receive address works again on nodes where a network proxy previously got in the way.
+- The Lightning wallet now recovers and unlocks itself properly after restarts.
+
+## v1.7.88-alpha (2026-06-12)
+
+- AIUI now loads immediately again instead of waiting on a production availability probe and cache-busted iframe URL, restoring the lighter launch behavior from before the regression.
+- Bitcoin receive now uses LND's GET-based newaddress flow with the native SegWit address type, fixing the `501 Method Not Allowed` response from the previous POST attempt.
+- Validation pending on the AIUI rollback; the rest of the release train remains unchanged.
+
+## v1.7.87-alpha (2026-06-12)
+
+- Bitcoin receive now calls LND's on-chain address endpoint with the correct REST method, and backend failures keep the specific address-generation error instead of collapsing into the generic operation-failed message.
+- App launch credential interstitials now render as true full-screen overlays, and the launcher loading indicator uses the neutral brand palette instead of a blue spinner.
+- Validation passed with `git diff --check`, `npm run type-check`, and the focused frontend tests for `bitcoinReceive` and `AppIconGrid`.
+
 ## v1.7.86-alpha (2026-06-12)
 
 - Fleet now preserves the last known node list, alerts, and selection locally while telemetry refreshes in the background, so the dashboard no longer blanks on tab switches or update scans.

core/Cargo.lock

@@ -80,7 +80,7 @@ checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
 
 [[package]]
 name = "archipelago"
-version = "1.7.86-alpha"
+version = "1.7.89-alpha"
 dependencies = [
  "anyhow",
  "archipelago-container",

core/archipelago/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "archipelago"
-version = "1.7.86-alpha"
+version = "1.7.89-alpha"
 edition = "2021"
 description = "Archipelago Bitcoin Node OS - Native backend"
 authors = ["Archipelago Team"]

core/archipelago/src/api/rpc/lnd/info.rs

@@ -38,6 +38,7 @@ impl RpcHandler {
         let macaroon_hex = hex::encode(&macaroon_bytes);
 
         let client = reqwest::Client::builder()
+            .no_proxy()
             .timeout(std::time::Duration::from_secs(10))
             .danger_accept_invalid_certs(true)
             .build()
@@ -180,6 +181,7 @@ impl RpcHandler {
         let macaroon_hex = hex::encode(&macaroon_bytes);
 
         let client = reqwest::Client::builder()
+            .no_proxy()
             .danger_accept_invalid_certs(true)
             .timeout(std::time::Duration::from_secs(10))
             .build()

core/archipelago/src/api/rpc/lnd/mod.rs

@@ -63,6 +63,7 @@ impl RpcHandler {
         let macaroon_bytes = read_lnd_admin_macaroon().await?;
         let macaroon_hex = hex::encode(&macaroon_bytes);
         let client = reqwest::Client::builder()
+            .no_proxy()
             .timeout(std::time::Duration::from_secs(15))
             .danger_accept_invalid_certs(true)
             .build()

core/archipelago/src/api/rpc/lnd/wallet.rs

@@ -13,22 +13,27 @@ impl RpcHandler {
 
         let resp = client
             .get(format!("{LND_REST_BASE_URL}/v1/newaddress"))
-            .query(&[("type", "WITNESS_PUBKEY_HASH")])
+            .query(&[("type", "p2wkh")])
             .header("Grpc-Metadata-macaroon", &macaroon_hex)
             .send()
             .await
             .context("LND REST connection failed")?;
 
         let status = resp.status();
-        let body: serde_json::Value = resp
-            .json()
+        let raw_body = resp
+            .text()
             .await
-            .context("Failed to parse newaddress response")?;
+            .context("LND address response could not be read")?;
+        let body: serde_json::Value = serde_json::from_str(&raw_body).unwrap_or_else(|_| {
+            serde_json::json!({
+                "raw": raw_body,
+            })
+        });
 
         if !status.is_success() {
             let message = lnd_error_message(&body);
             anyhow::bail!(
-                "LND could not generate a Bitcoin address ({}): {}",
+                "Bitcoin address generation failed ({}): {}",
                 status,
                 message
             );
@@ -39,14 +44,14 @@ impl RpcHandler {
             .or_else(|| body.get("message"))
             .and_then(|v| v.as_str())
         {
-            anyhow::bail!("LND could not generate a Bitcoin address: {}", error);
+            anyhow::bail!("Bitcoin address generation failed: {}", error);
         }
 
         let address = body
             .get("address")
             .and_then(|v| v.as_str())
             .filter(|addr| !addr.trim().is_empty())
-            .ok_or_else(|| anyhow::anyhow!("LND did not return a Bitcoin address. The wallet may still be locked, uninitialized, or waiting for Bitcoin to sync."))?
+            .ok_or_else(|| anyhow::anyhow!("Bitcoin address generation failed: LND did not return a Bitcoin address. The wallet may still be locked, uninitialized, or waiting for Bitcoin to sync."))?
             .to_string();
 
         Ok(serde_json::json!({ "address": address }))
@@ -525,6 +530,7 @@ impl RpcHandler {
         // Call LND REST API to initialize wallet with derived entropy.
         // LND must be running but NOT yet initialized (no existing wallet).
         let client = reqwest::Client::builder()
+            .no_proxy()
             .timeout(std::time::Duration::from_secs(30))
             .danger_accept_invalid_certs(true)
             .build()

core/archipelago/src/api/rpc/middleware.rs

@@ -63,6 +63,7 @@ pub(super) fn sanitize_error_message(msg: &str) -> String {
         "Failed to start",
         "Container",
         "Image",
+        "Bitcoin address",
     ];
     for prefix in &user_facing_prefixes {
         if msg.starts_with(prefix) {

core/archipelago/src/container/lnd.rs

@@ -76,7 +76,7 @@ pub async fn ensure_wallet_initialized() -> Result<()> {
     let admin_macaroon = "/var/lib/archipelago/lnd/data/chain/bitcoin/mainnet/admin.macaroon";
     let wallet_db = "/var/lib/archipelago/lnd/data/chain/bitcoin/mainnet/wallet.db";
     if file_exists_as_root(wallet_db).await {
-        if file_exists_as_root(admin_macaroon).await {
+        if file_exists_as_root(admin_macaroon).await && lnd_getinfo_ready(admin_macaroon).await {
             return Ok(());
         }
         unlock_existing_wallet().await?;
@@ -127,6 +127,7 @@ async fn unlock_existing_wallet() -> Result<()> {
 
 async fn unlock_existing_wallet_via_rest() -> Result<()> {
     let client = reqwest::Client::builder()
+        .no_proxy()
         .timeout(std::time::Duration::from_secs(20))
         .danger_accept_invalid_certs(true)
         .build()
@@ -204,6 +205,7 @@ struct InitWalletRequest {
 
 async fn init_wallet_via_rest() -> Result<()> {
     let client = reqwest::Client::builder()
+        .no_proxy()
         .timeout(std::time::Duration::from_secs(20))
         .danger_accept_invalid_certs(true)
         .build()
@@ -305,12 +307,12 @@ async fn decode_lnd_unlocker_response<T: for<'de> Deserialize<'de>>(
     anyhow::bail!("LND REST {path} returned {status}: {text}")
 }
 
-#[allow(dead_code)]
 async fn lnd_getinfo_ready(admin_macaroon: &str) -> bool {
     let Ok(macaroon) = read_file_as_root(admin_macaroon).await else {
         return false;
     };
     let Ok(client) = reqwest::Client::builder()
+        .no_proxy()
         .timeout(std::time::Duration::from_secs(5))
         .danger_accept_invalid_certs(true)
         .build()

core/archipelago/src/container/prod_orchestrator.rs

@@ -3220,11 +3220,11 @@ app:
       - /data/.filebrowser.json
   volumes:
     - type: bind
-      source: /tmp/filebrowser-srv
+      source: /var/lib/archipelago/filebrowser-srv
       target: /srv
       options: [rw]
     - type: bind
-      source: /tmp/filebrowser-data
+      source: /var/lib/archipelago/filebrowser-data
       target: /data
       options: [rw]
 "#;
@@ -3244,7 +3244,7 @@ app:
         secret_file: bitcoin-rpc-password
   volumes:
     - type: bind
-      source: /tmp/lnd
+      source: /var/lib/archipelago/lnd
       target: /root/.lnd
 "#;
         AppManifest::parse(yaml).unwrap()

core/archipelago/src/update.rs

@@ -367,12 +367,20 @@ async fn probe_frontend_once() -> Result<()> {
         .context("build probe client")?;
     // Prefer HTTPS since that's the failure mode we're catching (nginx
     // 500 on the PWA). HTTP usually redirects to HTTPS and would mask
-    // the bug.
-    let resp = client
-        .get("https://127.0.0.1/")
-        .send()
-        .await
-        .context("probe GET https://127.0.0.1/")?;
+    // the bug. BUT not every node binds 443 on loopback (.116 serves
+    // plain HTTP; 443 there belongs to tailscale) — on a *connect*
+    // error, fall back to HTTP so a healthy node isn't "verified" into
+    // a rollback. An HTTP error status stays fatal on whichever scheme
+    // answered.
+    let resp = match client.get("https://127.0.0.1/").send().await {
+        Ok(resp) => resp,
+        Err(e) if e.is_connect() => client
+            .get("http://127.0.0.1/")
+            .send()
+            .await
+            .context("probe GET http://127.0.0.1/ (https not bound on loopback)")?,
+        Err(e) => return Err(e).context("probe GET https://127.0.0.1/"),
+    };
     let status = resp.status();
     if status.is_success() || status.is_redirection() {
         return Ok(());
@@ -1078,6 +1086,17 @@ pub async fn apply_update(data_dir: &Path) -> Result<()> {
     let current_binary = Path::new("/usr/local/bin/archipelago");
     if current_binary.exists() {
         let backup_path = backup_dir.join("archipelago");
+        // A leftover backup from an earlier rollback can be root-owned
+        // (rollback used to chown it in place), and fs::copy O_TRUNCs the
+        // existing file — EACCES as the service user, wedging every apply
+        // (seen on .116, v1.7.86 OTA). Unlink first; the dir is
+        // service-owned so unlink works even when the file isn't ours.
+        if backup_path.exists() {
+            if let Err(e) = fs::remove_file(&backup_path).await {
+                tracing::warn!(error = %e, "unlink of stale binary backup failed, retrying via host_sudo");
+                let _ = host_sudo(&["rm", "-f", &backup_path.to_string_lossy()]).await;
+            }
+        }
         fs::copy(current_binary, &backup_path)
             .await
             .context("Failed to backup current binary")?;
@@ -1415,21 +1434,38 @@ pub async fn rollback_update(data_dir: &Path) -> Result<()> {
 
     let backup_binary = backup_dir.join("archipelago");
     if backup_binary.exists() {
-        // Use host_sudo + mv so we escape the archipelago service's
-        // ProtectSystem=strict mount namespace. A plain fs::copy or
-        // `sudo cp` from inside the service hits EROFS on /usr/local/bin,
-        // which would silently orphan the rollback — exactly the
-        // opposite of what auto-rollback is for. Pattern matches
-        // apply_update()'s binary swap above.
+        // Same two namespace gotchas as apply_update()'s binary swap:
+        // `cp` straight onto the running binary is O_TRUNC and fails
+        // ETXTBSY (exit 1 — exactly what broke the .116 rollback), and
+        // plain sudo inherits ProtectSystem=strict, so everything goes
+        // through host_sudo. Copy to a temp name on the same filesystem,
+        // fix ownership on the TEMP file (never the stored backup — an
+        // in-place chown is what later wedged apply_update), then mv,
+        // which is an atomic rename and tolerates a busy destination.
         let backup_str = backup_binary.to_string_lossy().to_string();
-        let _ = host_sudo(&["chmod", "0755", &backup_str]).await;
-        let _ = host_sudo(&["chown", "root:root", &backup_str]).await;
-        let status = host_sudo(&["cp", &backup_str, "/usr/local/bin/archipelago"])
+        let tmp = format!(
+            "/usr/local/bin/.archipelago.rollback.{}",
+            chrono::Utc::now().timestamp_millis()
+        );
+        let copy = host_sudo(&["cp", &backup_str, &tmp])
+            .await
+            .context("Failed to stage backup binary via host_sudo")?;
+        if !copy.success() {
+            anyhow::bail!(
+                "cp backup binary to {} failed (exit {:?})",
+                tmp,
+                copy.code()
+            );
+        }
+        let _ = host_sudo(&["chmod", "0755", &tmp]).await;
+        let _ = host_sudo(&["chown", "root:root", &tmp]).await;
+        let status = host_sudo(&["mv", &tmp, "/usr/local/bin/archipelago"])
             .await
             .context("Failed to restore backup binary via host_sudo")?;
         if !status.success() {
+            let _ = host_sudo(&["rm", "-f", &tmp]).await;
             anyhow::bail!(
-                "cp backup binary into /usr/local/bin failed (exit {:?})",
+                "mv backup binary into /usr/local/bin failed (exit {:?})",
                 status.code()
             );
         }

neode-ui/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "neode-ui",
-  "version": "1.7.86-alpha",
+  "version": "1.7.89-alpha",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "neode-ui",
-      "version": "1.7.86-alpha",
+      "version": "1.7.89-alpha",
       "dependencies": {
         "@types/dompurify": "^3.0.5",
         "@vue-leaflet/vue-leaflet": "^0.10.1",

neode-ui/package.json

@@ -1,7 +1,7 @@
 {
   "name": "neode-ui",
   "private": true,
-  "version": "1.7.86-alpha",
+  "version": "1.7.89-alpha",
   "type": "module",
   "scripts": {
     "start": "./start-dev.sh",

neode-ui/src/components/AppLauncherOverlay.vue

@@ -3,16 +3,17 @@
     <Transition name="app-launcher">
       <div
         v-if="store.isOpen"
-        class="fixed inset-0 z-[2400] flex items-center justify-center p-0 md:p-10"
+        class="fixed inset-0 z-[2400] flex items-stretch justify-stretch p-0"
         @click.self="store.close()"
       >
         <!-- Backdrop - blur like spotlight -->
-        <div class="app-launcher-backdrop absolute inset-0 bg-black/60 backdrop-blur-md"></div>
+        <div class="app-launcher-backdrop absolute inset-0 bg-black/75 backdrop-blur-md"></div>
 
-        <!-- Panel - inset with margins, glass style like spotlight -->
+        <!-- Panel - full-screen overlay -->
         <div
-          class="app-launcher-panel relative z-10 flex flex-col overflow-hidden rounded-none md:rounded-2xl shadow-2xl"
+          class="app-launcher-panel relative z-10 flex flex-col overflow-hidden rounded-none shadow-2xl"
           :class="panelClasses"
+          style="border-radius: 0;"
         >
           <!-- Header bar - sticky on mobile -->
           <div class="sticky top-0 z-10 flex items-center gap-3 border-b border-white/10 px-4 py-3 bg-black/60 backdrop-blur-md md:bg-transparent md:backdrop-blur-none">
@@ -69,7 +70,7 @@
             <!-- Loading indicator -->
             <Transition name="content-fade">
               <div v-if="iframeLoading" class="absolute inset-0 z-10 flex items-center justify-center bg-black/40">
-                <svg class="animate-spin h-8 w-8 text-blue-400" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
+                <svg class="animate-spin h-8 w-8 text-white/70" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
                   <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
                   <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z"></path>
                 </svg>
@@ -398,7 +399,7 @@ function injectScrollbarHideIfSameOrigin() {
 const panelClasses = [
   'glass-card',
   'w-full h-full',
-  'md:max-w-[calc(100vw-5rem)] md:max-h-[calc(100vh-5rem)]',
+  'max-w-none max-h-none',
 ]
 
 function onKeyDown(e: KeyboardEvent) {

neode-ui/src/style.css

@@ -556,8 +556,8 @@ input[type="radio"]:active + * {
      context) stay above the tab bar instead of sliding underneath it. */
   @media (max-width: 767px) {
     .chat-iframe-mobile {
-      height: calc(100vh - var(--mobile-tab-bar-height, 72px) - var(--safe-area-top, env(safe-area-inset-top, 0px))) !important;
-      height: calc(100dvh - var(--mobile-tab-bar-height, 72px) - var(--safe-area-top, env(safe-area-inset-top, 0px))) !important;
+      height: calc(100vh - var(--mobile-tab-bar-height, 72px) - var(--safe-area-top, env(safe-area-inset-top, 0px)) - 16px) !important;
+      height: calc(100dvh - var(--mobile-tab-bar-height, 72px) - var(--safe-area-top, env(safe-area-inset-top, 0px)) - 16px) !important;
       flex: none;
     }
   }

neode-ui/src/utils/__tests__/bitcoinReceive.test.ts

@@ -17,4 +17,8 @@ describe('explainReceiveAddressFailure', () => {
   it('explains lnd transport failures', () => {
     expect(explainReceiveAddressFailure(new Error('LND REST connection failed'))).toContain('not responding cleanly')
   })
+
+  it('keeps bitcoin address generation failures visible', () => {
+    expect(explainReceiveAddressFailure(new Error('Bitcoin address generation failed: LND is not ready'))).toContain('Bitcoin address generation failed')
+  })
 })

neode-ui/src/views/Apps.vue

@@ -244,10 +244,10 @@
     <Transition name="fade">
       <div
         v-if="credentialModal.show"
-        class="credential-modal-overlay fixed inset-0 z-[2700] flex items-center justify-center bg-black/60 backdrop-blur-md p-4 md:p-6"
+        class="credential-modal-overlay fixed inset-0 z-[2700] flex items-stretch justify-stretch bg-black/80 backdrop-blur-md p-0"
         @click.self="closeCredentialModal"
       >
-        <div class="sideload-modal credential-modal">
+        <div class="credential-modal-panel">
           <div class="flex items-start justify-between gap-4 mb-5">
             <div>
               <h2 class="text-lg font-semibold text-white">{{ credentialModal.title }}</h2>
@@ -259,7 +259,7 @@
             <div v-for="cred in credentialModal.credentials" :key="cred.label" class="rounded-lg border border-white/10 bg-white/[0.04] p-3">
               <div class="flex items-center justify-between gap-3 mb-1">
                 <span class="text-white/60 text-xs uppercase tracking-wide">{{ cred.label }}</span>
-                <button type="button" class="text-xs text-blue-300 hover:text-blue-200" @click="copyModalCredential(cred.label, cred.value)">{{ credentialModal.copied === cred.label ? 'Copied' : 'Copy' }}</button>
+                <button type="button" class="text-xs text-orange-300 hover:text-orange-200" @click="copyModalCredential(cred.label, cred.value)">{{ credentialModal.copied === cred.label ? 'Copied' : 'Copy' }}</button>
               </div>
               <p class="font-mono text-sm text-white break-all">{{ cred.value }}</p>
             </div>
@@ -802,15 +802,24 @@ async function submitSideload() {
 }
 .sideload-input::placeholder { color: rgba(255, 255, 255, 0.38); }
 .sideload-input:focus { border-color: rgba(255, 255, 255, 0.38); }
-.credential-modal {
+.credential-modal-panel {
   display: flex;
   flex-direction: column;
-  max-height: calc(100dvh - var(--safe-area-top, env(safe-area-inset-top, 0px)) - var(--safe-area-bottom, env(safe-area-inset-bottom, 0px)) - 2rem);
-  border-radius: 1.25rem;
-  padding-bottom: 1.25rem;
-  box-shadow: 0 25px 80px rgba(0, 0, 0, 0.55);
+  width: 100%;
+  height: 100%;
+  min-height: 0;
+  max-width: none;
+  max-height: none;
+  overflow: hidden;
+  border: 0;
+  border-radius: 0;
+  background: rgba(8, 10, 18, 0.98);
+  padding: 1.25rem;
+  padding-bottom: calc(1.25rem + var(--safe-area-bottom, env(safe-area-inset-bottom, 0px)));
+  box-shadow: none;
 }
 .credential-modal-body {
+  flex: 1 1 auto;
   min-height: 0;
   overflow-y: auto;
   -webkit-overflow-scrolling: touch;
@@ -818,11 +827,4 @@ async function submitSideload() {
 .credential-modal-actions {
   flex-shrink: 0;
 }
-@media (min-width: 768px) {
-  .sideload-modal {
-    border-radius: 1.25rem;
-    padding: 1.5rem;
-    box-shadow: 0 25px 80px rgba(0, 0, 0, 0.55);
-  }
-}
 </style>

neode-ui/src/views/Chat.vue

@@ -1,6 +1,6 @@
 <template>
   <div class="chat-fullscreen">
-    <!-- Close button (desktop: top-right pill) -->
+    <!-- Close button + connection indicator (desktop: top-right pill) -->
     <div class="chat-mode-pill hidden md:flex">
       <button class="chat-close-btn" :aria-label="t('chat.closeAssistant')" @click="closeChat">
         <svg class="w-4 h-4" aria-hidden="true" fill="none" stroke="currentColor" viewBox="0 0 24 24">
@@ -8,11 +8,16 @@
         </svg>
         <span class="text-xs font-medium">{{ t('chat.close') }}</span>
       </button>
+      <div
+        v-if="aiuiConnected"
+        class="w-2 h-2 rounded-full bg-green-400 ml-2 shadow-[0_0_6px_rgba(74,222,128,0.5)]"
+        :title="t('chat.aiuiConnected')"
+      />
     </div>
 
-    <!-- Loading indicator while checking availability -->
+    <!-- Loading indicator while iframe loads -->
     <Transition name="fade">
-      <div v-if="aiuiAvailable === null" class="chat-loading" role="status" aria-live="polite">
+      <div v-if="aiuiUrl && !aiuiConnected" class="chat-loading" role="status" aria-live="polite">
         <div class="glass-card p-8 flex flex-col items-center gap-4">
           <div class="chat-loading-spinner" aria-hidden="true" />
           <p class="text-sm text-white/60">{{ t('chat.loadingAssistant') }}</p>
@@ -27,24 +32,23 @@
       :src="aiuiUrl"
       :title="t('chat.aiAssistant')"
       class="chat-iframe chat-iframe-mobile"
-
       allow="microphone"
       style="background: transparent"
     />
 
-    <!-- Fallback when AIUI is not deployed -->
-    <div v-else-if="aiuiAvailable === false" class="chat-placeholder">
-      <div class="chat-placeholder-inner glass-card p-8">
+    <!-- Fallback when no AIUI URL configured -->
+    <div v-else class="chat-placeholder">
+      <div class="chat-placeholder-inner">
         <div class="chat-placeholder-icon">
           <svg class="w-8 h-8 text-white/40" aria-hidden="true" fill="none" stroke="currentColor" viewBox="0 0 24 24">
             <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 12h.01M12 12h.01M16 12h.01M21 12c0 4.418-4.03 8-9 8a9.863 9.863 0 01-4.255-.949L3 20l1.395-3.72C3.512 15.042 3 13.574 3 12c0-4.418 4.03-8 9-8s9 3.582 9 8z" />
           </svg>
         </div>
         <h2 class="text-2xl font-semibold text-white mb-2">{{ t('chat.aiAssistant') }}</h2>
-        <p class="text-white/80 mb-4 leading-relaxed">
+        <p class="text-white/60 mb-4 leading-relaxed">
           {{ t('chat.notConfigured') }}
         </p>
-        <p class="text-sm text-white/50">
+        <p class="text-xs text-white/30">
           {{ t('chat.deployCta') }}
         </p>
       </div>
@@ -63,37 +67,16 @@ const { t } = useI18n()
 
 const router = useRouter()
 const aiuiFrame = ref<HTMLIFrameElement | null>(null)
+const aiuiConnected = ref(false)
 let broker: ContextBroker | null = null
 
-const aiuiAvailable = ref<boolean | null>(null) // null = checking, true/false = result
-
 const aiuiUrl = computed(() => {
   const envUrl = import.meta.env.VITE_AIUI_URL
   if (envUrl) return `${envUrl}?embedded=true&hideClose=true`
-  // In production, only return the URL if we've confirmed AIUI files exist
-  if (import.meta.env.PROD && aiuiAvailable.value === true) return `/aiui/?embedded=true&hideClose=true&v=${Date.now()}`
+  if (import.meta.env.PROD) return '/aiui/?embedded=true&hideClose=true'
   return ''
 })
 
-/** Check if AIUI is actually deployed by fetching its index.html */
-async function checkAiuiAvailable() {
-  if (import.meta.env.VITE_AIUI_URL) {
-    aiuiAvailable.value = true
-    return
-  }
-  if (!import.meta.env.PROD) {
-    aiuiAvailable.value = false
-    return
-  }
-  try {
-    const res = await fetch('/aiui/', { method: 'HEAD' })
-    // If we get HTML back (200), AIUI is deployed. If 404/403, it's not.
-    aiuiAvailable.value = res.ok
-  } catch {
-    aiuiAvailable.value = false
-  }
-}
-
 function closeChat() {
   if (window.history.length > 1) {
     router.back()
@@ -111,13 +94,12 @@ function onAiuiMessage(event: MessageEvent) {
   } catch { return }
   // Listen for ready messages from AIUI iframe
   if (event.data?.type === 'ready') {
-    // AIUI connected - could use for future features
+    aiuiConnected.value = true
   }
 }
 
-onMounted(async () => {
+onMounted(() => {
   window.addEventListener('message', onAiuiMessage)
-  await checkAiuiAvailable()
   if (aiuiUrl.value) {
     broker = new ContextBroker(aiuiFrame, aiuiUrl.value)
     broker.start()

neode-ui/src/views/Dashboard.vue

@@ -86,8 +86,8 @@
                 <div
                   v-if="route.path === '/dashboard/chat' || route.path === '/dashboard/mesh'"
                   :class="[
-                    'h-full dashboard-scroll-panel mobile-scroll-pad',
-                    route.path === '/dashboard/mesh' ? 'mesh-dashboard-panel' : '',
+                    'h-full',
+                    route.path === '/dashboard/mesh' ? 'dashboard-scroll-panel mobile-scroll-pad mesh-dashboard-panel' : '',
                     mobileTabPaddingTop ? 'overflow-y-auto' : ''
                   ]"
                   :style="{ paddingTop: mobileTabPaddingTop ? (mobileTabPaddingTop + 16) + 'px' : undefined }"

neode-ui/src/views/apps/AppIconGrid.vue

@@ -85,8 +85,8 @@
     </div>
 
     <Transition name="fade">
-      <div v-if="credentialModal.show" class="credential-modal-overlay fixed inset-0 z-[2700] flex items-center justify-center bg-black/60 backdrop-blur-md p-4 md:p-6" @click.self="closeCredentialModal">
-        <div class="sideload-modal credential-modal">
+      <div v-if="credentialModal.show" class="credential-modal-overlay fixed inset-0 z-[2700] flex items-stretch justify-stretch bg-black/80 backdrop-blur-md p-0" @click.self="closeCredentialModal">
+        <div class="credential-modal-panel">
           <div class="flex items-start justify-between gap-4 mb-5">
             <div>
               <h2 class="text-lg font-semibold text-white">{{ credentialModal.title }}</h2>
@@ -98,7 +98,7 @@
             <div v-for="cred in credentialModal.credentials" :key="cred.label" class="rounded-lg border border-white/10 bg-white/[0.04] p-3">
               <div class="flex items-center justify-between gap-3 mb-1">
                 <span class="text-white/60 text-xs uppercase tracking-wide">{{ cred.label }}</span>
-                <button type="button" class="text-xs text-blue-300 hover:text-blue-200" @click="copyModalCredential(cred.label, cred.value)">{{ credentialModal.copied === cred.label ? 'Copied' : 'Copy' }}</button>
+                <button type="button" class="text-xs text-orange-300 hover:text-orange-200" @click="copyModalCredential(cred.label, cred.value)">{{ credentialModal.copied === cred.label ? 'Copied' : 'Copy' }}</button>
               </div>
               <p class="font-mono text-sm text-white break-all">{{ cred.value }}</p>
             </div>
@@ -328,24 +328,28 @@ function scrollToPage(index: number) {
   background: rgba(255, 255, 255, 0.06);
 }
 .credential-modal-body {
+  flex: 1 1 auto;
   min-height: 0;
   overflow-y: auto;
   -webkit-overflow-scrolling: touch;
 }
-.credential-modal {
-  max-height: calc(100dvh - var(--safe-area-top, env(safe-area-inset-top, 0px)) - var(--safe-area-bottom, env(safe-area-inset-bottom, 0px)) - 2rem);
-  border-radius: 1.25rem;
-  padding-bottom: 1.25rem;
-  box-shadow: 0 25px 80px rgba(0, 0, 0, 0.55);
+.credential-modal-panel {
+  display: flex;
+  flex-direction: column;
+  width: 100%;
+  height: 100%;
+  min-height: 0;
+  max-width: none;
+  max-height: none;
+  overflow: hidden;
+  border: 0;
+  border-radius: 0;
+  background: rgba(8, 10, 18, 0.98);
+  padding: 1.25rem;
+  padding-bottom: calc(1.25rem + var(--safe-area-bottom, env(safe-area-inset-bottom, 0px)));
+  box-shadow: none;
 }
 .credential-modal-actions {
   flex-shrink: 0;
 }
-@media (min-width: 768px) {
-  .sideload-modal {
-    border-radius: 1.25rem;
-    padding: 1.5rem;
-    box-shadow: 0 25px 80px rgba(0, 0, 0, 0.55);
-  }
-}
 </style>

neode-ui/vite.config.ts

@@ -150,6 +150,12 @@ export default defineConfig({
         changeOrigin: true,
         secure: false,
       },
+      // Serve the node's deployed AIUI same-origin like production (set VITE_AIUI_URL=/aiui/)
+      '/aiui': {
+        target: process.env.AIUI_PROXY_TARGET || 'http://127.0.0.1:80',
+        changeOrigin: true,
+        secure: false,
+      },
     },
   },
   build: {

release-manifest.json

@@ -1,30 +1,29 @@
 {
-  "version": "1.7.86-alpha",
-  "release_date": "2026-06-12",
+  "version": "1.7.89-alpha",
+  "release_date": "2026-06-13",
   "changelog": [
-    "Fleet now preserves the last known node list, alerts, and selection locally while telemetry refreshes in the background, so the dashboard no longer blanks on tab switches or update scans.",
-    "Connected nodes and identities now reuse their last loaded data instead of reloading the visible list every time the user revisits the tab.",
-    "The Fleet matrix and detail views now show actual node names and host information instead of raw node id prefixes.",
-    "The network map only redraws when its graph data actually changes, which stops the D3 scene from visually resetting on every refresh tick.",
-    "Mobile federation and system-update actions now stack full width, and the ElectrumX app health check allows a long startup window so slow sync nodes do not restart mid-index.",
-    "Validation passed with `git diff --check`, focused frontend tests, and `npm run type-check`."
+    "The AI assistant looks the way it always did again: no extra back button or close button on phones, and the desktop view fills the whole screen without a gap at the bottom.",
+    "System updates are much more reliable: updates that previously got stuck partway or failed to install now complete cleanly, and a failed update can no longer block all future updates.",
+    "After an update, the system now checks itself correctly on every node type, so working updates are no longer mistakenly undone.",
+    "Generating a Bitcoin receive address works again on nodes where a network proxy previously got in the way.",
+    "The Lightning wallet now recovers and unlocks itself properly after restarts."
   ],
   "components": [
     {
       "name": "archipelago",
-      "current_version": "1.7.86-alpha",
-      "new_version": "1.7.86-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.86-alpha/archipelago",
-      "sha256": "2eb936fe188df25947a2d626af1b22be2f7ef9dcbc927542389de3b38e80f9e6",
-      "size_bytes": 44050232
+      "current_version": "1.7.89-alpha",
+      "new_version": "1.7.89-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.89-alpha/archipelago",
+      "sha256": "ecf8b0e5ad4cb0f30e0da85241cf56937502d1d77594b4a7fedafde4e0e8908a",
+      "size_bytes": 44260776
     },
     {
-      "name": "archipelago-frontend-1.7.86-alpha.tar.gz",
-      "current_version": "1.7.86-alpha",
-      "new_version": "1.7.86-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.86-alpha/archipelago-frontend-1.7.86-alpha.tar.gz",
-      "sha256": "9f6f146eaf709cd3e778550bb7a56877dce551cb6d631bccf08e80ed977dd17b",
-      "size_bytes": 184060614
+      "name": "archipelago-frontend-1.7.89-alpha.tar.gz",
+      "current_version": "1.7.89-alpha",
+      "new_version": "1.7.89-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.89-alpha/archipelago-frontend-1.7.89-alpha.tar.gz",
+      "sha256": "b8b282a55a29661c4bb62702f4cdbbbe0bf4716dacb800199ff99f415a69d840",
+      "size_bytes": 184055902
     }
   ]
 }

releases/manifest.json

@@ -1,30 +1,29 @@
 {
-  "version": "1.7.86-alpha",
-  "release_date": "2026-06-12",
+  "version": "1.7.89-alpha",
+  "release_date": "2026-06-13",
   "changelog": [
-    "Fleet now preserves the last known node list, alerts, and selection locally while telemetry refreshes in the background, so the dashboard no longer blanks on tab switches or update scans.",
-    "Connected nodes and identities now reuse their last loaded data instead of reloading the visible list every time the user revisits the tab.",
-    "The Fleet matrix and detail views now show actual node names and host information instead of raw node id prefixes.",
-    "The network map only redraws when its graph data actually changes, which stops the D3 scene from visually resetting on every refresh tick.",
-    "Mobile federation and system-update actions now stack full width, and the ElectrumX app health check allows a long startup window so slow sync nodes do not restart mid-index.",
-    "Validation passed with `git diff --check`, focused frontend tests, and `npm run type-check`."
+    "The AI assistant looks the way it always did again: no extra back button or close button on phones, and the desktop view fills the whole screen without a gap at the bottom.",
+    "System updates are much more reliable: updates that previously got stuck partway or failed to install now complete cleanly, and a failed update can no longer block all future updates.",
+    "After an update, the system now checks itself correctly on every node type, so working updates are no longer mistakenly undone.",
+    "Generating a Bitcoin receive address works again on nodes where a network proxy previously got in the way.",
+    "The Lightning wallet now recovers and unlocks itself properly after restarts."
   ],
   "components": [
     {
       "name": "archipelago",
-      "current_version": "1.7.86-alpha",
-      "new_version": "1.7.86-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.86-alpha/archipelago",
-      "sha256": "2eb936fe188df25947a2d626af1b22be2f7ef9dcbc927542389de3b38e80f9e6",
-      "size_bytes": 44050232
+      "current_version": "1.7.89-alpha",
+      "new_version": "1.7.89-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.89-alpha/archipelago",
+      "sha256": "ecf8b0e5ad4cb0f30e0da85241cf56937502d1d77594b4a7fedafde4e0e8908a",
+      "size_bytes": 44260776
     },
     {
-      "name": "archipelago-frontend-1.7.86-alpha.tar.gz",
-      "current_version": "1.7.86-alpha",
-      "new_version": "1.7.86-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.86-alpha/archipelago-frontend-1.7.86-alpha.tar.gz",
-      "sha256": "9f6f146eaf709cd3e778550bb7a56877dce551cb6d631bccf08e80ed977dd17b",
-      "size_bytes": 184060614
+      "name": "archipelago-frontend-1.7.89-alpha.tar.gz",
+      "current_version": "1.7.89-alpha",
+      "new_version": "1.7.89-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.89-alpha/archipelago-frontend-1.7.89-alpha.tar.gz",
+      "sha256": "b8b282a55a29661c4bb62702f4cdbbbe0bf4716dacb800199ff99f415a69d840",
+      "size_bytes": 184055902
     }
   ]
 }

tests/release/run.sh

@@ -0,0 +1,104 @@
+#!/bin/bash
+# Release gate harness — seed of the full-system test harness.
+#
+# Ties together the checks that already exist in this repo (catalog drift,
+# release manifest, lifecycle bats, vitest, cargo tests) plus live-node
+# smoke probes, so "is this release OK?" is one command instead of folklore.
+#
+# Usage:
+#   tests/release/run.sh                 # static + frontend + backend stages
+#   tests/release/run.sh --quick         # static + frontend unit only
+#   tests/release/run.sh --with-build    # also production-build the frontend
+#                                        # and verify the dist version changed
+#   tests/release/run.sh --manifest      # also validate releases/manifest.json
+#                                        # (run AFTER create-release staged it)
+#   tests/release/run.sh --live [URL]    # also smoke-probe a running node
+#                                        # (default http://127.0.0.1)
+#
+# Flags compose. Exits non-zero on the first failing stage.
+#
+# CAUTION (.116 and other dev nodes): full `cargo test -p archipelago` has
+# hung tool PTYs here before — every cargo invocation below is wrapped in
+# `timeout` and scoped to focused module filters.
+
+set -u
+REPO="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+cd "$REPO"
+
+QUICK=0 WITH_BUILD=0 MANIFEST=0 LIVE=0 LIVE_URL="http://127.0.0.1"
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --quick) QUICK=1 ;;
+    --with-build) WITH_BUILD=1 ;;
+    --manifest) MANIFEST=1 ;;
+    --live) LIVE=1; [[ "${2:-}" == http* ]] && { LIVE_URL="$2"; shift; } ;;
+    *) echo "unknown flag: $1" >&2; exit 2 ;;
+  esac
+  shift
+done
+
+PASS=() FAIL=()
+stage() { # stage <name> <cmd...>
+  local name="$1"; shift
+  echo
+  echo "=== [$name] $*"
+  if "$@"; then
+    echo "=== [$name] PASS"
+    PASS+=("$name")
+  else
+    echo "=== [$name] FAIL (exit $?)"
+    FAIL+=("$name")
+    summary 1
+  fi
+}
+summary() {
+  echo
+  echo "──────── release gate summary ────────"
+  printf 'PASS: %s\n' "${PASS[@]:-none}"
+  [[ ${#FAIL[@]} -gt 0 ]] && printf 'FAIL: %s\n' "${FAIL[@]}"
+  exit "${1:-0}"
+}
+
+# ── Stage 1: static ──────────────────────────────────────────────────
+stage "git-diff-check"   git diff --check
+stage "cargo-fmt"        timeout 240 cargo fmt --manifest-path core/Cargo.toml --all --check
+stage "catalog-drift"    python3 scripts/check-app-catalog-drift.py
+if [[ $MANIFEST -eq 1 ]]; then
+  stage "release-manifest" scripts/check-release-manifest.sh
+fi
+
+# ── Stage 2: frontend ────────────────────────────────────────────────
+stage "ui-type-check"    bash -c 'cd neode-ui && npm run --silent type-check'
+stage "ui-unit-tests"    bash -c 'cd neode-ui && npx vitest run --silent 2>&1 | tail -4; exit ${PIPESTATUS[0]}'
+
+if [[ $WITH_BUILD -eq 1 ]]; then
+  # npm run build can fail silently (vue-tsc EACCES burned us before) —
+  # require the packaged output to actually contain the current version.
+  VERSION=$(grep -m1 '^version' core/archipelago/Cargo.toml | cut -d'"' -f2)
+  stage "ui-build"       bash -c 'cd neode-ui && npm run build'
+  stage "ui-dist-version" bash -c "grep -rqo '${VERSION}' web/dist/neode-ui/assets/*.js"
+fi
+
+[[ $QUICK -eq 1 ]] && summary 0
+
+# ── Stage 3: backend ─────────────────────────────────────────────────
+stage "cargo-check"      timeout 580 cargo check --manifest-path core/Cargo.toml -p archipelago
+# Focused suites for the subsystems this release train touched:
+#   update::   — OTA download/apply/rollback/probe (v1.7.89 hardening)
+#   lnd        — receive address + wallet readiness (v1.7.85–.89)
+#   container::image_versions — image pinning / false-update detection
+#   scanner    — RAII in-flight guard (v1.7.84)
+# 1500s: the non-incremental test-profile compile alone takes ~9 min on the
+# .116 ThinkPad; 580s expires mid-compile (exit 124) before a single test runs.
+stage "cargo-test-weekly" timeout 1500 env CARGO_INCREMENTAL=0 \
+  cargo test --manifest-path core/Cargo.toml -p archipelago -- \
+  update:: lnd container::image_versions scanner
+
+# ── Stage 4: live node smoke ─────────────────────────────────────────
+if [[ $LIVE -eq 1 ]]; then
+  stage "live-frontend"  bash -c "curl -skf -o /dev/null '$LIVE_URL/' || curl -skf -o /dev/null '${LIVE_URL/http:/https:}/'"
+  stage "live-aiui"      curl -sf -o /dev/null "$LIVE_URL/aiui/"
+  stage "live-rpc"       bash -c "curl -s -X POST '$LIVE_URL/rpc/v1' -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"update.status\",\"params\":{}}' | grep -qE '\"(result|error)\"'"
+fi
+
+summary 0