@qwen-code/qwen-code 0.23.1-preview.1 → 0.23.1-preview.2

package/chunks/{startInteractiveUI-JYAFCMHL.js → startInteractiveUI-FQX7LUYP.js}

@@ -41,17 +41,17 @@ import {
   useLogger,
   useProviderSetupFlow,
   writeTerminalTitle
-} from "./chunk-GVVCLL2P.js";
+} from "./chunk-MFCWL4LI.js";
 import {
   buildPermissionSuggestions
 } from "./chunk-BFSFJR3D.js";
 import {
   TUI_CHAT_RECORDING_FAILURE_MESSAGE
-} from "./chunk-RVNS7NWN.js";
-import "./chunk-LK7S2D6V.js";
+} from "./chunk-R7TKFIQO.js";
+import "./chunk-RRCNEW2A.js";
 import {
   startPostRenderPrefetches
-} from "./chunk-G34YLYCS.js";
+} from "./chunk-ANVC5CSK.js";
 import {
   AboutBox,
   BaseSelectionList,
@@ -126,7 +126,7 @@ import {
   useUIActions,
   useUIState,
   useVirtualViewport
-} from "./chunk-7BZS4ZDV.js";
+} from "./chunk-B5FF3LRF.js";
 import {
   SessionStatsProvider,
   TOOL_DISPLAY_BY_NAME,
@@ -138,7 +138,7 @@ import {
   getStatusColor,
   keyMatchers,
   useSessionStats
-} from "./chunk-IQN2CCIE.js";
+} from "./chunk-KP5QK3FB.js";
 import {
   ICON,
   RespondingSpinner,
@@ -156,19 +156,19 @@ import {
   useStreamingContext,
   waitForGoalRuntime,
   wrapAnsi
-} from "./chunk-JBTZUFR4.js";
+} from "./chunk-T7TP5UQL.js";
 import {
   stopAndGetCapturedInput
 } from "./chunk-EWNKP4V4.js";
 import {
   useAutoAcceptIndicator
-} from "./chunk-GZWW2QWR.js";
+} from "./chunk-C4NXRR7T.js";
 import {
   KeypressProvider,
   useFocus,
   useKeypress,
   useKeypressContext
-} from "./chunk-Z6WZPXQH.js";
+} from "./chunk-AWDF462I.js";
 import {
   classifyApiError
 } from "./chunk-V7RNNPGC.js";
@@ -189,7 +189,7 @@ import {
   matchMcpServerPrefix,
   resolveAtCommandQuery,
   sanitizeDisplayText
-} from "./chunk-HJ34U5J4.js";
+} from "./chunk-XNC2TCUO.js";
 import {
   BuiltinCommandLoader,
   BundledSkillLoader,
@@ -240,22 +240,22 @@ import {
   resolveOutputStyleChoice,
   serializeUserPromptExpansionPrompt,
   supportsMatchers
-} from "./chunk-WR3SH3EY.js";
+} from "./chunk-VMFPZXRT.js";
 import {
   EXTENSION_RELOAD_FAILED_REASON,
   ExtensionRefreshState,
   appEvents,
   cleanupReviewWorktreeLeases,
   loadHierarchicalMemory
-} from "./chunk-ZAZ3NFL6.js";
+} from "./chunk-P5Z7VD23.js";
 import {
   getCommandDisplayName,
   getCommandSourceBadge
-} from "./chunk-XHGGYCTA.js";
+} from "./chunk-VYCJITND.js";
 import {
   computeSessionStats,
   levelLabel
-} from "./chunk-2RYWGYB3.js";
+} from "./chunk-I67KJGM6.js";
 import {
   formatDuration,
   formatRelativeTime,
@@ -280,9 +280,9 @@ import {
   saveClipboardImage,
   writeOsc52
 } from "./chunk-HY3DXYZK.js";
-import "./chunk-JOPC3FND.js";
+import "./chunk-XX4MBBFW.js";
 import "./chunk-4WGODMVR.js";
-import "./chunk-SN5FV4FY.js";
+import "./chunk-LYHYXJJ3.js";
 import "./chunk-KW7NOTN6.js";
 import {
   MaxSizedBox,
@@ -316,40 +316,40 @@ import {
 import {
   require_react
 } from "./chunk-5QWWOFGG.js";
-import "./chunk-SFMCYMVF.js";
+import "./chunk-SHK2SIR5.js";
 import {
   getErrorMessage as getErrorMessage2
-} from "./chunk-54TF2ZIQ.js";
+} from "./chunk-YLFICBYK.js";
 import {
   relaunchApp
-} from "./chunk-4VZCORNT.js";
-import "./chunk-6UIACMGH.js";
-import "./chunk-N7VURC4O.js";
+} from "./chunk-22QOQKG4.js";
+import "./chunk-ZRVFHLLK.js";
+import "./chunk-WXFCI3O5.js";
 import {
   MAX_INLINE_IMAGES_PER_ITEM,
   collectInlineImages,
   getInlineImageData
-} from "./chunk-N7EYO2E7.js";
+} from "./chunk-XQ4RDO5B.js";
 import {
   setUpdateHandler
-} from "./chunk-JLWFGYXU.js";
+} from "./chunk-IGOIYZBG.js";
 import {
   isHistoryItemVisibleAfterRestore
 } from "./chunk-EKTCKZV5.js";
-import "./chunk-43JNQAHO.js";
+import "./chunk-FXYNIZPW.js";
 import "./chunk-YAF2MQZ6.js";
 import "./chunk-24FVUD5P.js";
-import "./chunk-IKLFS6SC.js";
+import "./chunk-L36LLVA5.js";
 import "./chunk-6H67XLET.js";
 import {
   openQwenAsrRealtimeStream,
   openVoiceStream,
   openVoiceStreamWithRetry
 } from "./chunk-Q2SAQTEJ.js";
-import "./chunk-KK2GZGBK.js";
+import "./chunk-PMGWY6ZP.js";
 import "./chunk-M3JGHRMQ.js";
 import "./chunk-VFFQAOPR.js";
-import "./chunk-ZTAVGFKA.js";
+import "./chunk-37SOBIA3.js";
 import {
   cpLen,
   cpSlice,
@@ -381,58 +381,58 @@ import {
   isStreamingVoiceModel,
   resolveVoiceStreamConfig,
   transcribeVoiceAudio
-} from "./chunk-4MCY33Y2.js";
+} from "./chunk-Z6DDPSGJ.js";
 import {
   formatUnsupportedVoiceModelMessage,
   isSelectableVoiceModel
-} from "./chunk-XOVVCGZX.js";
+} from "./chunk-JOV46WGX.js";
 import "./chunk-Y53DG2HA.js";
 import {
   getExtendedSystemInfo
-} from "./chunk-P6LATTDG.js";
-import "./chunk-YCDL2SAS.js";
+} from "./chunk-FWH4736Q.js";
+import "./chunk-TDHVOZ65.js";
 import "./chunk-7U5G6JXI.js";
 import "./chunk-WCCLLK7X.js";
 import {
   isInlineModelOverrideAllowed
-} from "./chunk-O2GG7H4C.js";
+} from "./chunk-I7UNCY24.js";
 import {
   computeWorkspaceSkillListUpdates,
   skillSettingStrings
 } from "./chunk-HWVUSYSN.js";
 import "./chunk-537SQ2AI.js";
-import "./chunk-IXSGOSEG.js";
+import "./chunk-3RMVM33U.js";
 import {
   requestConsentInteractive,
   requestConsentOrFail
-} from "./chunk-AHBLRVD5.js";
+} from "./chunk-2C3XDBGL.js";
 import "./chunk-57OAHC2Y.js";
-import "./chunk-TMWB67LS.js";
-import "./chunk-4IQKBLTQ.js";
-import "./chunk-WXC6OAWD.js";
+import "./chunk-BNWIX6BM.js";
+import "./chunk-RGAQDQ3Z.js";
+import "./chunk-RH344FKI.js";
 import "./chunk-V6WHFGST.js";
-import "./chunk-4F2QRVW6.js";
-import "./chunk-P4RUUG64.js";
+import "./chunk-UTVIIA7N.js";
+import "./chunk-LTCI6ZOJ.js";
 import "./chunk-2AUM35J5.js";
 import "./chunk-N6VQ37ZZ.js";
-import "./chunk-WEXA2DNG.js";
+import "./chunk-Z6KFLEG7.js";
 import "./chunk-6PLDPT2C.js";
 import "./chunk-FYJ7W2PI.js";
 import "./chunk-STUJ7IMZ.js";
-import "./chunk-4JAGXZR3.js";
+import "./chunk-5V4B3EWA.js";
 import "./chunk-GYTKQYDB.js";
 import "./chunk-ALMR3E6Q.js";
 import "./chunk-RKFGE7JH.js";
 import "./chunk-UDG5EZJI.js";
 import "./chunk-M5GB774H.js";
 import "./chunk-3VUENPWF.js";
-import "./chunk-VDXYYVCD.js";
+import "./chunk-65GHQ4FX.js";
 import "./chunk-IW6RQPQB.js";
 import "./chunk-5HBA2Z7V.js";
 import "./chunk-X35VIWWJ.js";
 import {
   loadMcpApprovals
-} from "./chunk-DNPHKA72.js";
+} from "./chunk-C55CR5I4.js";
 import {
   CORRUPTED_SUFFIX,
   getDefaultValue,
@@ -452,10 +452,10 @@ import {
   setPendingSettingValueAny,
   validateSettingValue,
   writeOutputLanguageAndRegisterPath
-} from "./chunk-AQ5NAGWI.js";
+} from "./chunk-RUMSY4ES.js";
 import {
   TOGGLE_TYPES
-} from "./chunk-ER273QE6.js";
+} from "./chunk-QW7BUOSI.js";
 import "./chunk-RKUWKYED.js";
 import "./chunk-BW4333PP.js";
 import "./chunk-IDS7MSUP.js";
@@ -464,20 +464,20 @@ import {
   localizeToolDisplayName,
   t,
   ta
-} from "./chunk-MUZCSTOO.js";
+} from "./chunk-LD53HMPV.js";
 import "./chunk-5EJZE3FP.js";
-import "./chunk-H3UDNQLO.js";
+import "./chunk-4OCYWXKF.js";
 import "./chunk-NUQFUXOG.js";
 import "./chunk-2EAZ43JQ.js";
 import "./chunk-NF5J2WFA.js";
 import {
   getCliVersion
-} from "./chunk-XUSOYE2I.js";
+} from "./chunk-SHX2HIE7.js";
 import "./chunk-W3N5XAZ6.js";
 import {
   isWorkspaceTrusted,
   loadTrustedFolders
-} from "./chunk-XY3USGFE.js";
+} from "./chunk-GEV66YGE.js";
 import {
   require_strip_json_comments
 } from "./chunk-NPQ5ZKRP.js";
@@ -507,37 +507,40 @@ import {
   generateToolUseSummary,
   getDefaultModelIds,
   getLastPeerInboxFailure,
+  getPeerControllerRegistryPath,
   getProjectSummaryInfo,
   getWelcomeBackState,
   isApiUserPrompt,
   isWsl,
+  readPeerControllerRegistrySync,
   renderGoalContinuationPrompt,
+  resolveControllerToken,
   resolveMetadataKey,
   saveWelcomeBackRestartChoice,
   startPeerInbox,
   startSpeculation,
   subagentGenerator
-} from "./chunk-UEZOXZNI.js";
+} from "./chunk-TXAEXF2B.js";
 import "./chunk-GELRJXE2.js";
 import "./chunk-32CM56LO.js";
 import {
   saveWorkflowScript,
   validateWorkflowName
-} from "./chunk-JPEAQJNS.js";
+} from "./chunk-C7M445SS.js";
 import "./chunk-XFSFZCM5.js";
-import "./chunk-WTW36TJ3.js";
+import "./chunk-2EKVPSIJ.js";
 import "./chunk-LJZSMWOH.js";
 import {
   clearWorktreeSession,
   isSessionRuntimeActive,
   readWorktreeSession,
   restoreWorktreeContext
-} from "./chunk-VUSSAGKI.js";
-import "./chunk-O45WBTNS.js";
+} from "./chunk-E4VX6LXB.js";
+import "./chunk-RSU3I6UL.js";
 import "./chunk-DJXSOEFB.js";
-import "./chunk-2WGJG2KW.js";
-import "./chunk-QMFOYPGV.js";
-import "./chunk-LDS57224.js";
+import "./chunk-KTLT7VCX.js";
+import "./chunk-J3VZF2AL.js";
+import "./chunk-OWCFKIFQ.js";
 import "./chunk-ZPJWUGCS.js";
 import {
   InboundGate,
@@ -545,19 +548,20 @@ import {
   canonicalizeMsgId,
   describeDeliveryStatus,
   describeHoldCause,
+  flattenPeerLabel,
   formatPeerDisplay,
   formatPeerEnvelope,
   parseHeldExpiry,
   sendDeliveryStatus,
   settleSentPeerMessage
-} from "./chunk-HFTB354P.js";
+} from "./chunk-5Z4FCEPY.js";
 import "./chunk-BUQN5LTI.js";
 import {
   osc8Hyperlink,
   supportsHyperlinks,
   wrapForMultiplexer
 } from "./chunk-VU7O7CGQ.js";
-import "./chunk-QSC5YOEC.js";
+import "./chunk-SD7Y2PMC.js";
 import "./chunk-VNOVK4I7.js";
 import {
   ConditionalRulesRegistry,
@@ -629,7 +633,7 @@ import {
   resolveBranchName,
   stripTerminalControlSequences,
   watchRepoBranch
-} from "./chunk-I72PHOKL.js";
+} from "./chunk-TSLRORQR.js";
 import "./chunk-GOFAQQZA.js";
 import "./chunk-3K65MUKD.js";
 import "./chunk-6HUXPLB5.js";
@@ -638,13 +642,13 @@ import {
 } from "./chunk-TWPJO254.js";
 import "./chunk-CQ35AJ4Z.js";
 import "./chunk-YHDGABDC.js";
-import "./chunk-RDKXZ2LS.js";
+import "./chunk-LYT2OU7D.js";
 import "./chunk-B54PFQS5.js";
 import {
   GitWorktreeService,
   readWorktreeSessionMarker,
   writeRuntimeStatus
-} from "./chunk-43NOB5NM.js";
+} from "./chunk-ERMAXPXA.js";
 import "./chunk-6PVPNMXU.js";
 import {
   resolveModelId
@@ -658,18 +662,18 @@ import {
   readCronTasks,
   taskHasLegacyCondition
 } from "./chunk-F53KKZUD.js";
-import "./chunk-PZV2FASB.js";
+import "./chunk-TRWQQBVH.js";
 import {
   glob
 } from "./chunk-QJNDUTOL.js";
-import "./chunk-OECNP26L.js";
+import "./chunk-N6S3NUYJ.js";
 import {
   promptIdContext
 } from "./chunk-O6GEWCJA.js";
 import {
   formatMemoryUsage
 } from "./chunk-CHEIIBT3.js";
-import "./chunk-UKKYOIVT.js";
+import "./chunk-QAZ2MGYT.js";
 import {
   registerSession
 } from "./chunk-B44JBZBB.js";
@@ -677,16 +681,13 @@ import "./chunk-BF3RUIVP.js";
 import {
   APPROVAL_MODES
 } from "./chunk-JX6XHPTX.js";
-import "./chunk-R355CUNQ.js";
-import {
-  HOOKS_CONFIG_FIELDS
-} from "./chunk-4VUVBN3Y.js";
+import "./chunk-CLKE4IY3.js";
 import "./chunk-ZSTCM3MX.js";
 import "./chunk-NXWYCSPL.js";
 import "./chunk-MLXTMF7H.js";
 import {
   BUILT_IN_OUTPUT_STYLES
-} from "./chunk-GXZHYPHZ.js";
+} from "./chunk-OFB36ZBA.js";
 import {
   getGitBranch
 } from "./chunk-3CZ2BQV6.js";
@@ -694,7 +695,7 @@ import "./chunk-PQEISIKS.js";
 import "./chunk-3K456UJF.js";
 import {
   runOutsideAgentContext
-} from "./chunk-VEFRT7NX.js";
+} from "./chunk-H3Q3RSKZ.js";
 import "./chunk-S6LOFUVP.js";
 import {
   openBrowserSecurely
@@ -749,7 +750,7 @@ import {
   runVisionBridge,
   shouldRunVisionBridge,
   splitImageParts
-} from "./chunk-P5LDR7FI.js";
+} from "./chunk-WQBR7LN5.js";
 import "./chunk-5ETULJLP.js";
 import "./chunk-XBVNNDPK.js";
 import "./chunk-VGC4I5JJ.js";
@@ -773,7 +774,7 @@ import {
 import "./chunk-TIGXX4PA.js";
 import {
   MAINLINE_CODER_MODEL
-} from "./chunk-5MTARK4Y.js";
+} from "./chunk-PLUAIHZO.js";
 import {
   atomicWriteFileSync
 } from "./chunk-XFFRI3WM.js";
@@ -786,19 +787,21 @@ import {
   redactUrlCredentials
 } from "./chunk-7VEYUF3N.js";
 import "./chunk-74TONY4F.js";
-import "./chunk-GMNLYQOS.js";
+import "./chunk-E6TI726I.js";
 import {
   getStartupContextLength
-} from "./chunk-D6PIMKY3.js";
-import "./chunk-NGX4NUNP.js";
-import "./chunk-FKJM6JKY.js";
+} from "./chunk-4VY3ITHR.js";
+import "./chunk-O2FEO2CB.js";
+import {
+  HOOKS_CONFIG_FIELDS
+} from "./chunk-G6UUOCUT.js";
 import {
   isPathWithinRoot
 } from "./chunk-IZ2U57NY.js";
 import {
   ToolNames,
   isShellProgressData
-} from "./chunk-RPBMP6BN.js";
+} from "./chunk-MWIO7MF6.js";
 import {
   Storage,
   UnauthorizedError,
@@ -816,12 +819,12 @@ import {
   MESSAGING_TOKEN_ENV,
   clearInheritedPeerMessagingEnv
 } from "./chunk-V5U2NZNJ.js";
-import "./chunk-TDP7UULF.js";
+import "./chunk-Y3C5COGI.js";
 import "./chunk-HRPFBHW7.js";
 import {
   registerCleanup,
   runExitCleanup
-} from "./chunk-BKNY7PDI.js";
+} from "./chunk-HPE4LEWX.js";
 import {
   finalizeStartupProfile,
   profileCheckpoint
@@ -876,6 +879,8 @@ var PeerMessaging = class _PeerMessaging {
   receiptListeners = /* @__PURE__ */ new Set();
   submitFn = null;
   buffered = [];
+  controllerRegistryPath = null;
+  validControllerIds = null;
   /**
    * Accepted frames whose 'delivered' receipt has not been earned yet:
    * still buffered here or still queued in the session's input queue.
@@ -898,13 +903,16 @@ var PeerMessaging = class _PeerMessaging {
    */
   static async start(options) {
     const messaging = new _PeerMessaging();
+    const controllerRegistryPath = options.controllerRegistryPath ?? getPeerControllerRegistryPath();
+    messaging.controllerRegistryPath = controllerRegistryPath;
     const gate = new InboundGate({
       getApprovalMode: options.getApprovalMode,
       getPolicySetting: options.getPolicySetting,
       ...options.getHeldExpiryMs !== void 0 ? { getHeldExpiryMs: options.getHeldExpiryMs } : {},
       ...options.getPolicyScope ? { getPolicyScope: options.getPolicyScope } : {},
+      isControllerValid: /* @__PURE__ */ __name((id) => messaging.validControllerIds?.has(id) ?? true, "isControllerValid"),
       getSessionId: options.getSessionId,
-      deliver: /* @__PURE__ */ __name((frame, origin) => messaging.deliver(frame, origin.selfSent), "deliver"),
+      deliver: /* @__PURE__ */ __name((frame, origin) => messaging.deliver(frame, origin), "deliver"),
       reportStatus: /* @__PURE__ */ __name((frame, status) => {
         if (!frame.from) return;
         return sendDeliveryStatus(
@@ -930,7 +938,14 @@ var PeerMessaging = class _PeerMessaging {
       ...options.socketPath !== void 0 ? { socketPath: options.socketPath } : {},
       requiredToken: ipcToken,
       childToken,
-      onFrame: /* @__PURE__ */ __name((frame, auth) => messaging.onFrame(frame, auth === "child"), "onFrame")
+      // Read from disk per auth line rather than captured here: a grant
+      // the user mints or revokes mid-session must take effect on the
+      // next connection, with nothing to restart.
+      resolveController: /* @__PURE__ */ __name((presented) => resolveControllerToken(presented, controllerRegistryPath), "resolveController"),
+      onFrame: /* @__PURE__ */ __name((frame, auth, controller) => messaging.onFrame(frame, {
+        selfSent: auth === "child",
+        ...controller ? { controller } : {}
+      }), "onFrame")
     });
     if (!inbox) return null;
     messaging.inbox = inbox;
@@ -949,12 +964,14 @@ var PeerMessaging = class _PeerMessaging {
    */
   setSubmitFn(fn) {
     if (this.closed) return;
-    this.submitFn = fn;
-    while (this.buffered.length > 0) {
-      const head = this.buffered[0];
-      if (!head || !this.submit(head.frame, head.selfSent)) break;
-      this.buffered.shift();
-    }
+    this.withControllerValidity(() => {
+      this.submitFn = fn;
+      while (this.buffered.length > 0) {
+        const head = this.buffered[0];
+        if (!head || !this.submit(head.frame, head.origin)) break;
+        this.buffered.shift();
+      }
+    });
   }
   /**
    * Register a counter for the peer entries still waiting in the
@@ -967,7 +984,7 @@ var PeerMessaging = class _PeerMessaging {
     this.queuedPeerCount = fn;
   }
   getHeld() {
-    return this.gate?.getHeld() ?? [];
+    return this.withControllerValidity(() => this.gate?.getHeld() ?? []);
   }
   /**
    * How long a held message has to live, in milliseconds, or null when
@@ -1032,11 +1049,21 @@ var PeerMessaging = class _PeerMessaging {
     return false;
   }
   decide(msgId, decision) {
-    return this.gate?.decide(msgId, decision) ?? "gone";
+    return this.withControllerValidity(
+      () => this.gate?.decide(msgId, decision) ?? "gone"
+    );
+  }
+  /** Remove a revoked grant's authority from messages already waiting. */
+  forgetController(id) {
+    return this.withControllerValidity(
+      () => this.gate?.forgetController(id) ?? 0
+    );
   }
   /** Release everything the gate now considers acceptable. */
   reevaluate(reason) {
-    return this.gate?.reevaluate(reason) ?? 0;
+    return this.withControllerValidity(
+      () => this.gate?.reevaluate(reason) ?? 0
+    );
   }
   onHeldChange(listener) {
     this.heldListeners.add(listener);
@@ -1100,10 +1127,11 @@ var PeerMessaging = class _PeerMessaging {
     await Promise.allSettled(receipts);
   }
   /**
-   * `selfSent` is the transport's finding that the connection presented
-   * the child token; it is never read off the frame.
+   * `origin` is what the transport established from the connection's auth
+   * line — the child token, or a controller grant the user minted. None
+   * of it is ever read off the frame.
    */
-  onFrame(frame, selfSent) {
+  onFrame(frame, origin) {
     if (frame.type === "control") {
       const settled = this.settleSentMessage(frame.origMsgId, frame.status);
       if (!settled) {
@@ -1146,25 +1174,29 @@ var PeerMessaging = class _PeerMessaging {
       });
       return;
     }
-    this.gate?.admit(frame, { selfSent });
+    this.gate?.admit(frame, origin);
   }
-  deliver(frame, selfSent) {
+  deliver(frame, origin) {
     if (!this.submitFn) {
       if (this.buffered.length >= MAX_ACCEPTED_BACKLOG) {
         throw new Error("accepted-message backlog is full");
       }
-      this.buffered.push({ frame, selfSent });
+      this.buffered.push({ frame, origin });
       this.trackOutstanding(frame);
       return;
     }
-    while (this.buffered.length > 0) {
-      const head = this.buffered[0];
-      if (!head || !this.submit(head.frame, head.selfSent)) {
-        throw new Error("accepted-message backlog is full");
-      }
-      this.buffered.shift();
+    if (this.buffered.length > 0) {
+      this.withControllerValidity(() => {
+        while (this.buffered.length > 0) {
+          const head = this.buffered[0];
+          if (!head || !this.submit(head.frame, head.origin)) {
+            throw new Error("accepted-message backlog is full");
+          }
+          this.buffered.shift();
+        }
+      });
     }
-    if (!this.submit(frame, selfSent)) {
+    if (!this.submit(frame, origin)) {
       throw new Error("accepted-message backlog is full");
     }
     this.trackOutstanding(frame);
@@ -1175,20 +1207,45 @@ var PeerMessaging = class _PeerMessaging {
       this.outstanding.shift();
     }
   }
-  submit(frame, selfSent) {
-    const from = frame.from ?? (selfSent ? "own process" : "unknown session");
+  withControllerValidity(action) {
+    if (this.controllerRegistryPath === null || this.validControllerIds) {
+      return action();
+    }
+    this.validControllerIds = new Set(
+      readPeerControllerRegistrySync(
+        this.controllerRegistryPath
+      ).controllers.map((controller) => controller.id)
+    );
+    for (const delivery of this.buffered) {
+      const controller = delivery.origin.controller;
+      if (controller && !this.validControllerIds.has(controller.id)) {
+        delete delivery.origin.controller;
+      }
+    }
+    try {
+      return action();
+    } finally {
+      this.validControllerIds = null;
+    }
+  }
+  submit(frame, origin) {
+    const from = frame.from ?? (origin.controller ? "controller" : origin.selfSent ? "own process" : "unknown session");
+    const attribution = {
+      selfSent: origin.selfSent,
+      ...origin.controller ? { controller: origin.controller } : {}
+    };
     return this.submitFn?.(
       formatPeerEnvelope({
         from,
         ...frame.fromName !== void 0 ? { fromName: frame.fromName } : {},
         content: frame.message.content,
-        selfSent
+        ...attribution
       }),
       formatPeerDisplay({
         from,
         ...frame.fromName !== void 0 ? { fromName: frame.fromName } : {},
         content: frame.message.content,
-        selfSent
+        ...attribution
       }),
       {
         msgId: frame.msgId,
@@ -16894,7 +16951,10 @@ function UninstallConfirmStep({
   }
   return /* @__PURE__ */ (0, import_jsx_runtime75.jsxs)(Box_default, { flexDirection: "column", gap: 1, children: [
     /* @__PURE__ */ (0, import_jsx_runtime75.jsx)(Text, { color: theme.status.error, children: t('Are you sure you want to uninstall extension "{{name}}"?', {
-      name: getExtensionDisplayName(selectedExtension, getCurrentLanguage())
+      name: getExtensionDisplayName(
+        selectedExtension,
+        getCurrentLanguage()
+      )
     }) }),
     /* @__PURE__ */ (0, import_jsx_runtime75.jsx)(Text, { color: theme.status.error, children: t("Note: Uninstall permanently removes this extension.") })
   ] });
@@ -46020,7 +46080,9 @@ var AppContainer = /* @__PURE__ */ __name((props) => {
       historyManager.addItem(
         {
           type: "info" /* INFO */,
-          text: `Held a message from ${newest.selfSent ? "a process this session started" : "another session"} (${describeHoldCause(newest.cause, newest.policyScope)}). ${held.length} waiting \u2014 /peers to review.`
+          text: `Held a message from ${newest.controller ? `a trusted controller (${flattenPeerLabel(
+            newest.controller.label
+          )})` : newest.selfSent ? "a process this session started" : "another session"} (${describeHoldCause(newest.cause, newest.policyScope)}). ${held.length} waiting \u2014 /peers to review.`
         },
         Date.now()
       );