diff --git a/ui/src/pages/Admin/AppConfigDetailPage.module.css b/ui/src/pages/Admin/AppConfigDetailPage.module.css
index 6536bedf..b5a2bde9 100644
--- a/ui/src/pages/Admin/AppConfigDetailPage.module.css
+++ b/ui/src/pages/Admin/AppConfigDetailPage.module.css
@@ -90,3 +90,13 @@
   color: var(--text-muted);
   font-family: var(--font-body);
 }
+
+.editBanner {
+  padding: 8px 16px;
+  background: color-mix(in srgb, var(--amber) 8%, transparent);
+  border: 1px solid var(--amber);
+  border-radius: var(--radius-sm);
+  font-size: 13px;
+  color: var(--text-primary);
+  margin-bottom: 16px;
+}
diff --git a/ui/src/pages/Admin/AppConfigDetailPage.tsx b/ui/src/pages/Admin/AppConfigDetailPage.tsx
index 3e4463d4..b8584e24 100644
--- a/ui/src/pages/Admin/AppConfigDetailPage.tsx
+++ b/ui/src/pages/Admin/AppConfigDetailPage.tsx
@@ -317,6 +317,12 @@ export default function AppConfigDetailPage() {
         )}
       </div>
 
+      {editing && (
+        <div className={styles.editBanner}>
+          Editing configuration. Changes are not saved until you click Save.
+        </div>
+      )}
+
       <div className={styles.header}>
         <h2 className={styles.title}><MonoText size="md">{appId}</MonoText></h2>
         <div className={styles.meta}>
diff --git a/ui/src/pages/Admin/EnvironmentsPage.tsx b/ui/src/pages/Admin/EnvironmentsPage.tsx
index 30d80f5b..678c129a 100644
--- a/ui/src/pages/Admin/EnvironmentsPage.tsx
+++ b/ui/src/pages/Admin/EnvironmentsPage.tsx
@@ -392,6 +392,11 @@ function DefaultResourcesSection({ environment, onSave, saving }: {
   return (
     <div className={sectionStyles.section}>
       <SectionHeader>Default Resource Limits</SectionHeader>
+      {editing && (
+        <div className={styles.editBanner}>
+          Editing resource defaults. Changes are not saved until you click Save.
+        </div>
+      )}
       <p className={styles.inheritedNote}>
         These defaults apply to new apps in this environment unless overridden per-app.
       </p>
@@ -485,6 +490,11 @@ function JarRetentionSection({ environment, onSave, saving }: {
   return (
     <div className={sectionStyles.section}>
       <SectionHeader>JAR Retention</SectionHeader>
+      {editing && (
+        <div className={styles.editBanner}>
+          Editing resource defaults. Changes are not saved until you click Save.
+        </div>
+      )}
       <p className={styles.inheritedNote}>
         Old JAR versions are cleaned up nightly. Currently deployed versions are never deleted.
       </p>
diff --git a/ui/src/pages/Admin/OidcConfigPage.tsx b/ui/src/pages/Admin/OidcConfigPage.tsx
index 1dd316c2..c630a787 100644
--- a/ui/src/pages/Admin/OidcConfigPage.tsx
+++ b/ui/src/pages/Admin/OidcConfigPage.tsx
@@ -1,4 +1,5 @@
 import { useEffect, useState } from 'react';
+import { Eye, EyeOff } from 'lucide-react';
 import {
   Button, Input, Toggle, FormField, SectionHeader, Tag, ConfirmDialog,
 } from '@cameleer/design-system';
@@ -41,6 +42,7 @@ export default function OidcConfigPage() {
   const [editing, setEditing] = useState(false);
   const [formDraft, setFormDraft] = useState<OidcFormData | null>(null);
   const [newRole, setNewRole] = useState('');
+  const [showSecret, setShowSecret] = useState(false);
   const [deleteOpen, setDeleteOpen] = useState(false);
   const [saving, setSaving] = useState(false);
   const [testing, setTesting] = useState(false);
@@ -200,13 +202,25 @@ export default function OidcConfigPage() {
           />
         </FormField>
         <FormField label="Client Secret" htmlFor="client-secret">
-          <Input
-            id="client-secret"
-            type="password"
-            value={current?.clientSecret ?? ''}
-            onChange={(e) => updateDraft('clientSecret', e.target.value)}
-            disabled={!editing}
-          />
+          <div style={{ position: 'relative' }}>
+            <Input
+              id="client-secret"
+              type={showSecret ? 'text' : 'password'}
+              value={current?.clientSecret ?? ''}
+              onChange={(e) => updateDraft('clientSecret', e.target.value)}
+              disabled={!editing}
+            />
+            {editing && (
+              <Button
+                variant="ghost"
+                size="sm"
+                style={{ position: 'absolute', right: 4, top: '50%', transform: 'translateY(-50%)' }}
+                onClick={() => setShowSecret(!showSecret)}
+              >
+                {showSecret ? <EyeOff size={14} /> : <Eye size={14} />}
+              </Button>
+            )}
+          </div>
         </FormField>
         <FormField label="Audience / API Resource" htmlFor="audience" hint="RFC 8707 resource indicator sent in the authorization request">
           <Input
diff --git a/ui/src/pages/Admin/UserManagement.module.css b/ui/src/pages/Admin/UserManagement.module.css
index d2b0b423..489232fc 100644
--- a/ui/src/pages/Admin/UserManagement.module.css
+++ b/ui/src/pages/Admin/UserManagement.module.css
@@ -161,3 +161,13 @@
   font-size: 12px;
   color: var(--text-muted);
 }
+
+.editBanner {
+  padding: 8px 16px;
+  background: color-mix(in srgb, var(--amber) 8%, transparent);
+  border: 1px solid var(--amber);
+  border-radius: var(--radius-sm);
+  font-size: 13px;
+  color: var(--text-primary);
+  margin-bottom: 16px;
+}
diff --git a/ui/src/pages/AppsTab/AppsTab.tsx b/ui/src/pages/AppsTab/AppsTab.tsx
index 2b592f08..c85c2712 100644
--- a/ui/src/pages/AppsTab/AppsTab.tsx
+++ b/ui/src/pages/AppsTab/AppsTab.tsx
@@ -6,6 +6,7 @@ import {
   Button,
   ConfirmDialog,
   DataTable,
+  EmptyState,
   Input,
   MonoText,
   SectionHeader,
@@ -714,7 +715,7 @@ function OverviewSubTab({ app, deployments, versions, environments, envMap, sele
           <span className={tableStyles.tableTitle}>Deployments</span>
         </div>
         {deploymentRows.length === 0
-          ? <p className={styles.emptyNote} style={{ padding: '12px 16px', margin: 0 }}>No deployments yet.</p>
+          ? <EmptyState title="No deployments" description="Deploy this application to see deployment history." />
           : <DataTable<DeploymentRow> columns={deploymentColumns} data={deploymentRows} flush />
         }
       </div>
@@ -726,7 +727,7 @@ function OverviewSubTab({ app, deployments, versions, environments, envMap, sele
       ))}
 
       <SectionHeader>Versions ({versions.length})</SectionHeader>
-      {versions.length === 0 && <p className={styles.emptyNote}>No versions uploaded yet.</p>}
+      {versions.length === 0 && <EmptyState title="No versions" description="Upload a JAR to create the first version." />}
       {versions.map((v) => (
         <VersionRow key={v.id} version={v} environments={environments} onDeploy={(envId) => onDeploy(v.id, envId)} />
       ))}
@@ -1005,7 +1006,7 @@ function ConfigSubTab({ app, environment }: { app: App; environment?: Environmen
           {editing && (
             <Button size="sm" variant="secondary" onClick={() => setEnvVars([...envVars, { key: '', value: '' }])}>+ Add Variable</Button>
           )}
-          {envVars.length === 0 && !editing && <p className={styles.emptyNote}>No environment variables configured.</p>}
+          {envVars.length === 0 && !editing && <EmptyState title="No variables" description="No environment variables configured." />}
         </div>
       )}
 
@@ -1075,7 +1076,7 @@ function ConfigSubTab({ app, environment }: { app: App; environment?: Environmen
           <span className={styles.sectionSummary}>{tracedCount} traced &middot; {tapCount} taps</span>
           {tracedTapRows.length > 0
             ? <DataTable<TracedTapRow> columns={tracedTapColumns} data={tracedTapRows} pageSize={20} flush />
-            : <p className={styles.emptyNote}>No processor traces or taps configured.</p>}
+            : <EmptyState title="No traces or taps" description="No processor traces or taps configured." />}
         </div>
       )}
 
@@ -1085,7 +1086,7 @@ function ConfigSubTab({ app, environment }: { app: App; environment?: Environmen
           <span className={styles.sectionSummary}>{recordingCount} of {routeRecordingRows.length} routes recording</span>
           {routeRecordingRows.length > 0
             ? <DataTable<RouteRecordingRow> columns={routeRecordingColumns} data={routeRecordingRows} pageSize={20} flush />
-            : <p className={styles.emptyNote}>No routes found for this application.</p>}
+            : <EmptyState title="No routes" description="No routes found for this application. Routes appear once agents report data." />}
         </div>
       )}
 
diff --git a/ui/src/pages/Routes/RouteDetail.tsx b/ui/src/pages/Routes/RouteDetail.tsx
index 1ae332c6..1f9637ee 100644
--- a/ui/src/pages/Routes/RouteDetail.tsx
+++ b/ui/src/pages/Routes/RouteDetail.tsx
@@ -6,6 +6,7 @@ import {
   Badge,
   StatusDot,
   DataTable,
+  EmptyState,
   Tabs,
   AreaChart,
   LineChart,
@@ -702,9 +703,7 @@ export default function RouteDetail() {
           {diagramFlows.length > 0 ? (
             <RouteFlow flows={diagramFlows} />
           ) : (
-            <div className={styles.emptyText}>
-              No diagram available for this route.
-            </div>
+            <EmptyState title="No diagram" description="No diagram available for this route." />
           )}
         </div>
         <div className={styles.statsPane}>
@@ -714,9 +713,7 @@ export default function RouteDetail() {
           ) : processorRows.length > 0 ? (
             <DataTable columns={processorColumns} data={processorRows} sortable pageSize={10} />
           ) : (
-            <div className={styles.emptyText}>
-              No processor data available.
-            </div>
+            <EmptyState title="No processor data" description="No processor data available." />
           )}
         </div>
       </div>
@@ -819,9 +816,7 @@ export default function RouteDetail() {
         {activeTab === 'errors' && (
           <div className={styles.errorPatterns} style={{ marginTop: 16 }}>
             {errorPatterns.length === 0 ? (
-              <div className={styles.emptyText}>
-                No error patterns found in the selected time range.
-              </div>
+              <EmptyState title="No error patterns" description="No error patterns found in the selected time range." />
             ) : (
               errorPatterns.map((ep, i) => (
                 <div key={i} className={styles.errorRow}>
@@ -841,9 +836,7 @@ export default function RouteDetail() {
               <Button variant="primary" size="sm" onClick={() => openTapModal(null)}>+ Add Tap</Button>
             </div>
             {routeTaps.length === 0 ? (
-              <div className={styles.emptyState}>
-                No taps configured for this route. Add a tap to extract business attributes from exchange data.
-              </div>
+              <EmptyState title="No taps" description="No taps configured for this route. Add a tap to extract business attributes from exchange data." />
             ) : (
               <DataTable
                 columns={tapColumns}