isUserMessage was computed by comparing the active key against
groupEvent.pubKey -- the kind:445's signer. That is a fresh random
ephemeral key on every send (`NostrSignerInternal(KeyPair())` in
encryptAndSendMarmotInnerEvent), so it could never equal anybody's
identity. The comparison was false for every Marmot message in every room,
which means every message a member sent themselves rendered as somebody
else's: wrong side of the transcript, wrong colour, and no delivery
status, which is drawn only for our own lines.
All fourteen arms now read the MLS sender identity, which is authenticated
to a leaf and is the only thing this can honestly be computed from. For
the four results that carry no leaf index -- the commit and proposal
statuses -- it is null and yields false, exactly what they got before.
Separated from the direct message work that exposed it because it changes
bubble alignment in every existing MLS room, and that is worth being able
to revert on its own.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
79e62d8239