@ai-matrx/meet 0.11.32 → 0.11.34

package/dist/react.cjs

@@ -330,6 +330,139 @@ __export(react_exports, {
 });
 module.exports = __toCommonJS(react_exports);
 
+// src/core/tab-claim.ts
+var TAB_ID_KEY = "mx.meet.tab";
+var TAB_ANSWER_MS = 250;
+function validTabId(value) {
+  return value !== null && /^[A-Za-z0-9_-]{4,64}$/.test(value);
+}
+function wait(ms2) {
+  return new Promise((resolve) => setTimeout(resolve, ms2));
+}
+function createTabClaim(platform = webTabPlatform()) {
+  let mine = null;
+  let current = null;
+  const self = platform.randomId();
+  const unsubscribe = platform.bus?.subscribe((message) => {
+    if (message.kind === "tab-alive?" && mine !== null && message.tabId === mine && message.from !== self) {
+      platform.bus?.post({ kind: "tab-alive", tabId: mine });
+    } else if (message.kind === "who-is-in?" && current !== null && mine !== null && message.from !== self && message.room === current.room && message.person === current.person) {
+      platform.bus?.post({ kind: "in-room", room: current.room, person: current.person, tabId: mine, to: message.from });
+    }
+  }) ?? (() => {
+  });
+  async function someoneAnswersFor(tabId2) {
+    const bus = platform.bus;
+    if (bus === null) return false;
+    let answered = false;
+    const stop = bus.subscribe((message) => {
+      if (message.kind === "tab-alive" && message.tabId === tabId2) answered = true;
+    });
+    bus.post({ kind: "tab-alive?", tabId: tabId2, from: self });
+    await wait(TAB_ANSWER_MS);
+    stop();
+    return answered;
+  }
+  async function claim() {
+    const stored = platform.storage?.get(TAB_ID_KEY) ?? null;
+    let candidate = validTabId(stored) ? stored : platform.randomId();
+    for (let attempt = 0; attempt < 4; attempt++) {
+      const held = await platform.tryLock(`${TAB_ID_KEY}:${candidate}`);
+      if (held) break;
+      if (!await someoneAnswersFor(candidate)) break;
+      candidate = platform.randomId();
+    }
+    mine = candidate;
+    platform.storage?.set(TAB_ID_KEY, candidate);
+    return candidate;
+  }
+  const tabId = claim();
+  return {
+    tabId,
+    inRoom(room, person) {
+      current = { room, person };
+    },
+    left() {
+      current = null;
+    },
+    async presentElsewhere(room, person) {
+      const bus = platform.bus;
+      if (bus === null) return false;
+      let seen = false;
+      const stop = bus.subscribe((message) => {
+        if (message.kind === "in-room" && message.to === self && message.room === room && message.person === person) {
+          seen = true;
+        }
+      });
+      bus.post({ kind: "who-is-in?", room, person, from: self });
+      await wait(TAB_ANSWER_MS);
+      stop();
+      return seen;
+    },
+    dispose() {
+      unsubscribe();
+    }
+  };
+}
+function randomTabId() {
+  const crypto = globalThis.crypto;
+  const raw = crypto?.randomUUID?.() ?? `${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`;
+  return raw.replace(/[^A-Za-z0-9]/g, "").slice(0, 16);
+}
+function webTabPlatform() {
+  const g = globalThis;
+  const session = g.sessionStorage;
+  const storage = session === void 0 ? null : {
+    get(key) {
+      try {
+        return session.getItem(key);
+      } catch {
+        return null;
+      }
+    },
+    set(key, value) {
+      try {
+        session.setItem(key, value);
+      } catch {
+      }
+    }
+  };
+  const channel = g.BroadcastChannel !== void 0 ? new g.BroadcastChannel("mx.meet.tabs") : null;
+  const bus = channel === null ? null : {
+    post(message) {
+      channel.postMessage(message);
+    },
+    subscribe(listener) {
+      const handler = (event) => {
+        const data = event.data;
+        if (data !== null && typeof data === "object" && typeof data.kind === "string") listener(data);
+      };
+      channel.addEventListener("message", handler);
+      return () => channel.removeEventListener("message", handler);
+    }
+  };
+  return {
+    storage,
+    bus,
+    randomId: randomTabId,
+    tryLock(name) {
+      const locks = g.navigator?.locks;
+      if (locks === void 0) return Promise.resolve(false);
+      return new Promise((resolve) => {
+        locks.request(name, { ifAvailable: true }, (lock) => {
+          if (lock === null) {
+            resolve(false);
+            return Promise.resolve();
+          }
+          resolve(true);
+          return new Promise(() => {
+          });
+        }).catch(() => resolve(false));
+      });
+    }
+  };
+}
+
 // src/core/connection-supervisor.ts
 var DEFAULT_CONNECTION_POLICY = {
   bannerDelayMs: 2e3,
@@ -696,12 +829,18 @@ var MeetError = class extends Error {
    * renders `refused:<reason>` (or `ended`) from it — never from the HTTP status.
    */
   reason;
-  constructor(code, message, remedy, cause, reason) {
+  /**
+   * A refusal that lifts by itself says when: whole seconds from the moment the server answered
+   * (a denial's cooldown, `reknock_cooldown_seconds`). Null for every refusal that does not.
+   */
+  retryAfterSeconds;
+  constructor(code, message, remedy, cause, reason, retryAfterSeconds) {
     super(message);
     this.name = "MeetError";
     this.code = code;
     this.remedy = remedy;
     this.reason = reason ?? null;
+    this.retryAfterSeconds = retryAfterSeconds ?? null;
     if (cause !== void 0) this.cause = cause;
   }
   /** True when retrying after the host re-establishes a session is the fix. */
@@ -1035,7 +1174,8 @@ function parseRoomToken(body, roomName) {
   const serverUrl = readString(payload, "server_url") ?? readString(payload, "serverUrl");
   const identity = readString(payload, "identity");
   const expiresAt = readString(payload, "expires_at") ?? readString(payload, "expiresAt");
-  if (token === null || serverUrl === null || identity === null) {
+  const secondDeviceChoice = readString(payload, "second_device_choice");
+  if (token === null && secondDeviceChoice === null || serverUrl === null || identity === null) {
     throw invalidResponse(
       "meet.token",
       "the response is missing token, server_url, or identity \u2014 joining with a partial token would fail inside LiveKit with an opaque error instead of here"
@@ -1047,11 +1187,15 @@ function parseRoomToken(body, roomName) {
       "the response carries no expires_at. Without it the package cannot refresh before the token dies, and a long meeting silently loses its ability to reconnect"
     );
   }
+  const personKey = readString(payload, "person_key") ?? identity;
   return {
-    token,
+    token: token ?? "",
     serverUrl,
     roomName,
-    identity,
+    identity: personKey,
+    connectionIdentity: readString(payload, "connection_identity") ?? personKey,
+    connectionKind: readString(payload, "connection_kind") === "companion" ? "companion" : "main",
+    secondDeviceChoice,
     displayName: readString(payload, "display_name") ?? readString(payload, "displayName") ?? identity,
     expiresAt,
     canPublish: readBoolean(payload, "can_publish", true),
@@ -1126,7 +1270,9 @@ function createTokenClient(options) {
           organization_id: input.identity.organizationId,
           display_name: input.identity.displayName,
           device_id: input.identity.deviceId,
-          guest
+          guest,
+          ...input.tabId !== void 0 ? { tab_id: input.tabId } : {},
+          ...input.secondDevice !== void 0 ? { second_device: input.secondDevice } : {}
         }
       });
     } catch (error) {
@@ -1143,7 +1289,8 @@ function createTokenClient(options) {
         said?.message ?? "You can't join this meeting.",
         said?.remedy ?? "Ask the person who shared the link to let you in, then open the link again.",
         void 0,
-        said?.reason ?? null
+        said?.reason ?? null,
+        said?.retryAfterSeconds ?? null
       );
     }
     if (response.status === 404) {
@@ -1201,6 +1348,10 @@ function createTokenClient(options) {
         if (!expired(entry)) return Promise.resolve(entry.token);
       }
       const pending = request(input, true).then((token) => {
+        if (token.secondDeviceChoice != null) {
+          cache.delete(input.roomName);
+          return token;
+        }
         cache.set(input.roomName, { token, mintedAt: now(), inFlight: null });
         remember(token);
         return token;
@@ -1235,6 +1386,9 @@ function placeholder(roomName) {
     serverUrl: "",
     roomName,
     identity: "",
+    connectionIdentity: "",
+    connectionKind: "main",
+    secondDeviceChoice: null,
     displayName: "",
     expiresAt: (/* @__PURE__ */ new Date(0)).toISOString(),
     canPublish: false,
@@ -1259,7 +1413,9 @@ async function serverSentence(response) {
     if (message === null) return null;
     const remedy = typeof source.remedy === "string" && source.remedy.trim() !== "" ? source.remedy : void 0;
     const reason = typeof source.reason === "string" && source.reason !== "" ? source.reason : null;
-    return { message, remedy, reason };
+    const retry = source.retry_after_seconds;
+    const retryAfterSeconds = typeof retry === "number" && Number.isFinite(retry) && retry > 0 ? Math.ceil(retry) : null;
+    return { message, remedy, reason, retryAfterSeconds };
   } catch {
     return null;
   }
@@ -1710,7 +1866,10 @@ var JOINABLE_FROM = /* @__PURE__ */ new Set([
   "superseded",
   "inactive",
   "denied",
-  "knock_expired"
+  "knock_expired",
+  // A refused knock whose rule lets the person ask again (a cooldown that ran out): the machine
+  // allows the press; the server's gate decides whether it knocks or is refused again.
+  "refused:lobby_rejects"
 ]);
 var NOT_ENDABLE = /* @__PURE__ */ new Set([
   "ended",
@@ -1794,6 +1953,8 @@ function nextPhase(from, event) {
       return WAITING_PHASES.has(from) ? "joining" : null;
     case "connected":
       return from === "joining" ? "in_call" : null;
+    case "second_device":
+      return from === "joining" ? "prejoin" : null;
     case "join_failed":
       return from === "joining" ? refusalPhase(event.reason) : null;
     case "exit":
@@ -1811,7 +1972,7 @@ function nextPhase(from, event) {
     case "call_outcome":
       return RINGING.has(from) ? event.outcome : null;
     case "reset":
-      return LIVE_PHASES.has(from) ? null : "resolving";
+      return LIVE_PHASES.has(from) && event.teardown !== true ? null : "resolving";
   }
 }
 function resolveExit(input) {
@@ -2117,8 +2278,8 @@ function createCallCenter(options) {
           "A late accept must not resurrect a settled call. Close the ringing UI; the caller has already moved on."
         );
       }
-      if (options.store.snapshot().phase === "ringing_in") options.store.dispatch({ type: "call_answered" });
       const settled = await repository.settleCallInvite(id, "connecting", null);
+      if (options.store.snapshot().phase === "ringing_in") options.store.dispatch({ type: "call_answered" });
       options.store.patch({ call: { invite: settled, direction: "incoming" } });
       settleLocal(settled);
       channel?.send(MEET_EVENTS.settled, settled);
@@ -2329,11 +2490,17 @@ function createDeviceManager(options) {
 }
 
 // src/core/names.ts
+var CONNECTION_SEPARATOR = "~";
+function personOf(identity) {
+  const value = String(identity ?? "").trim();
+  const cut = value.indexOf(CONNECTION_SEPARATOR);
+  return cut === -1 ? value : value.slice(0, cut);
+}
 function isGuestIdentity(identity) {
-  return String(identity).startsWith("guest:");
+  return personOf(identity).startsWith("guest:");
 }
 function isAgentIdentity(identity) {
-  return String(identity).startsWith("agent:");
+  return personOf(identity).startsWith("agent:");
 }
 var NOTE_TAKER_PRODUCT_NAME = "Matrx note-taker";
 var AGENT_PRODUCT_NAME = "Matrx agent";
@@ -3933,6 +4100,7 @@ var EMPTY = {
   waiting: null,
   meeting: null,
   localIdentity: null,
+  secondDevice: null,
   grants: NO_GRANTS,
   participants: [],
   activeSpeakers: [],
@@ -4183,7 +4351,8 @@ function createMeetStore(initial = {}) {
       commit({ ...state, media: { ...state.media, [kind]: next } });
     },
     reset() {
-      commit({ ...EMPTY, effects: state.effects });
+      const phase = nextPhase(state.phase, { type: "reset", teardown: true }) ?? EMPTY.phase;
+      commit({ ...EMPTY, effects: state.effects, phase, reason: reasonOf(phase), phaseNotice: null });
     }
   };
 }
@@ -4216,6 +4385,28 @@ function lobbyEntryFrom(attendee, now = Date.now()) {
     decidedBy: null
   };
 }
+function deniedEntryFrom(attendee) {
+  if (attendee.admissionState !== "denied") return null;
+  return {
+    identity: attendee.identity,
+    displayName: attendee.displayName,
+    avatarUrl: attendee.avatarUrl,
+    userId: attendee.userId,
+    state: "denied",
+    knockedAt: attendee.knockedAt ?? attendee.joinedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+    knockExpiresAt: null,
+    decidedAt: null,
+    decidedBy: null
+  };
+}
+function applyDoorRow(store, attendee) {
+  const entry = lobbyEntryFrom(attendee) ?? deniedEntryFrom(attendee);
+  if (entry !== null) {
+    store.upsertLobby(entry);
+    return;
+  }
+  store.setAdmission(attendee.identity, decidedState(attendee.admissionState), null);
+}
 function decidedState(state) {
   return WAITING_ADMISSION_STATES.includes(state) ? "expired" : state;
 }
@@ -4350,6 +4541,7 @@ function createMeetingSession(options) {
       admission,
       admittersPresent: read.admitters_present ?? null,
       reknockAllowed: read.reknock_allowed ?? true,
+      reknockAt: typeof read.reknock_in_seconds === "number" && read.reknock_in_seconds > 0 ? Date.now() + read.reknock_in_seconds * 1e3 : null,
       knockExpiresAt: read.knock_expires_at ?? null,
       pollSeconds: read.poll_seconds ?? snapshot.waiting?.pollSeconds ?? 3,
       liveVersion: read.live_version ?? 0
@@ -4432,11 +4624,7 @@ function createMeetingSession(options) {
     try {
       const attendees = await repository.attendees(meeting.id);
       store.learn(attendees);
-      for (const attendee of attendees) {
-        const entry = lobbyEntryFrom(attendee);
-        if (entry !== null) store.upsertLobby(entry);
-        else store.setAdmission(attendee.identity, decidedState(attendee.admissionState), null);
-      }
+      for (const attendee of attendees) applyDoorRow(store, attendee);
     } catch {
     }
   }
@@ -4518,12 +4706,7 @@ function createMeetingSession(options) {
               if (row === null) return;
               const attendee = repository.projectAttendee(row);
               store.learn([attendee]);
-              const entry = lobbyEntryFrom(attendee);
-              if (entry !== null) {
-                store.upsertLobby(entry);
-                return;
-              }
-              store.setAdmission(attendee.identity, decidedState(attendee.admissionState), null);
+              applyDoorRow(store, attendee);
             }
           },
           {
@@ -4570,14 +4753,7 @@ function createMeetingSession(options) {
             store.setRecording(latest.state, latest.startedBy, "record", latest.id);
           }
           store.learn(attendees);
-          for (const attendee of attendees) {
-            const entry = lobbyEntryFrom(attendee);
-            if (entry !== null) {
-              store.upsertLobby(entry);
-            } else {
-              store.setAdmission(attendee.identity, decidedState(attendee.admissionState), null);
-            }
-          }
+          for (const attendee of attendees) applyDoorRow(store, attendee);
         }
       });
       meetingChannel.requestBackfill("manual");
@@ -4629,9 +4805,9 @@ function createMeetingSession(options) {
     },
     stopWaiting,
     readState: readState2,
-    async readExit(connection) {
+    async readExit(connection, held) {
       const meeting = store.snapshot().meeting;
-      const pass = options.resolvePass?.() ?? null;
+      const pass = held ?? options.resolvePass?.() ?? null;
       if (meeting === null || pass === null) return void 0;
       try {
         const response = await options.api.request({
@@ -5479,6 +5655,7 @@ function SCREEN_SHARE_BLOCKED_REMEDY_FOR(remedy) {
 }
 var PARTICIPANT_ROLE_ATTRIBUTE = "matrx.participant.role";
 var PARTICIPANT_CAN_RECORD_ATTRIBUTE = "matrx.participant.can_record";
+var CONNECTION_KIND_ATTRIBUTE = "matrx.participant.connection_kind";
 var PARTICIPANT_STANDING_ATTRIBUTE = "matrx.participant.standing";
 var KNOWN_STANDINGS = ["member", "invited", "outsider", "guest"];
 function parseStanding(value) {
@@ -5502,7 +5679,8 @@ function projectParticipant(driver, joinedAt) {
   }
   const userId = typeof metadata.user_id === "string" ? asUserId(metadata.user_id) : null;
   return {
-    identity: asParticipantIdentity(driver.identity),
+    // S7: a tile is a PERSON; LiveKit names the tab's connection (`<person>~<tab>`).
+    identity: personOf(driver.identity),
     userId,
     // 🚨 A RAW LIVEKIT IDENTITY IS NEVER A NAME (MRI-A18). Through 0.4.12 this
     // line read `driver.name.length > 0 ? driver.name : driver.identity`, and
@@ -5549,6 +5727,11 @@ function createRoomEngine(options) {
   let ghosts = /* @__PURE__ */ new Map();
   let ghostTimer = null;
   let liveRoster = [];
+  let personConnections = /* @__PURE__ */ new Map();
+  let mainConnection = /* @__PURE__ */ new Map();
+  function connectionsOf(who) {
+    return personConnections.get(personOf(who)) ?? [who];
+  }
   const departures = /* @__PURE__ */ new Map();
   function requestAsNow() {
     if (lastRequest === null) return null;
@@ -5613,7 +5796,12 @@ function createRoomEngine(options) {
   function failJoin(error, operation) {
     const normalized = normalizeMeetError(error, operation);
     store.patch({
-      failure: { message: normalized.message, remedy: normalized.remedy, reason: normalized.reason }
+      failure: {
+        message: normalized.message,
+        remedy: normalized.remedy,
+        reason: normalized.reason,
+        retryAt: normalized.retryAfterSeconds === null ? null : now() + normalized.retryAfterSeconds * 1e3
+      }
     });
     store.dispatch({ type: "join_failed", reason: normalized.reason ?? null });
     report(
@@ -5685,10 +5873,10 @@ function createRoomEngine(options) {
       if (store.snapshot().spotlight !== spotlight) store.patch({ spotlight });
     },
     activeSpeakers(identities) {
-      store.setSpeaking(identities.map(asParticipantIdentity));
+      store.setSpeaking([...new Set(identities.map((who) => personOf(who)))]);
     },
     quality(who, value) {
-      store.setQuality(asParticipantIdentity(who), value);
+      store.setQuality(personOf(who), value);
     },
     connectionState(state) {
       supervisor.driverState(state);
@@ -5708,7 +5896,7 @@ function createRoomEngine(options) {
         );
         return;
       }
-      const speakerIdentity = asParticipantIdentity(event.speakerIdentity);
+      const speakerIdentity = personOf(event.speakerIdentity);
       const speaker = snapshot.participants.find(
         (participant) => participant.identity === speakerIdentity
       );
@@ -5782,7 +5970,7 @@ function createRoomEngine(options) {
         );
         return;
       }
-      const sender = asParticipantIdentity(from ?? "");
+      const sender = personOf(from ?? "");
       switch (topic) {
         case DATA_TOPICS.hand:
           store.setHand(
@@ -5824,7 +6012,8 @@ function createRoomEngine(options) {
     }
   };
   async function resolveExitAndApply(hint) {
-    const connection = current?.identity ?? store.snapshot().localIdentity ?? null;
+    const connection = current?.connectionIdentity ?? current?.identity ?? store.snapshot().localIdentity ?? null;
+    const heldPass = current?.meetingPass ?? null;
     lastRequest = requestAsNow();
     await dropRoom();
     let server;
@@ -5832,7 +6021,7 @@ function createRoomEngine(options) {
       server = void 0;
     } else {
       try {
-        server = await options.readExit(connection);
+        server = await options.readExit(connection, heldPass);
       } catch {
         server = null;
       }
@@ -5862,14 +6051,29 @@ function createRoomEngine(options) {
   }
   async function connect(request) {
     store.patch({ failure: null, waiting: null, roomName: request.roomName, share: NO_SHARE, connection: "stable" });
+    const tabId = options.tabClaim !== void 0 ? await options.tabClaim.tabId : null;
     const token = await tokens.get({
       roomName: request.roomName,
       identity,
       ...request.meetingId !== void 0 ? { meetingId: request.meetingId } : {},
       ...request.slug !== void 0 ? { slug: request.slug } : {},
       ...request.breakoutRoomId != null ? { breakoutRoomId: request.breakoutRoomId } : {},
-      ...request.observe === true ? { observe: true } : {}
+      ...request.observe === true ? { observe: true } : {},
+      ...tabId !== null ? { tabId } : {},
+      ...request.secondDevice !== void 0 ? { secondDevice: request.secondDevice } : {}
     });
+    if (token.secondDeviceChoice != null) {
+      store.patch({ secondDevice: { rule: token.secondDeviceChoice }, localIdentity: token.identity });
+      store.dispatch({ type: "second_device" });
+      report("info", `meet: already in this meeting elsewhere \u2014 offering the choice (${token.secondDeviceChoice})`);
+      return;
+    }
+    if (store.snapshot().secondDevice !== null) store.patch({ secondDevice: null });
+    if (request.secondDevice === "switch_here" && lastRequest !== null) {
+      const { secondDevice: _answered, ...rest } = lastRequest;
+      lastRequest = rest;
+    }
+    options.tabClaim?.inRoom(String(request.roomName), String(token.identity));
     current = token;
     lastServerUrl = token.serverUrl;
     connectionPolicy = token.connectionPolicy ?? DEFAULT_CONNECTION_POLICY;
@@ -5934,7 +6138,7 @@ function createRoomEngine(options) {
     if (request.mode === "video") {
       await enableTrack(created, "camera", true);
     }
-    if (request.microphone !== false) {
+    if (request.microphone !== false && current?.connectionKind !== "companion") {
       await enableTrack(created, "microphone", true);
     }
     media.onConnected();
@@ -5956,7 +6160,8 @@ function createRoomEngine(options) {
   }
   async function publish(topic, body, to) {
     if (driver === null) return;
-    await driver.publishData(topic, JSON.stringify(body), to);
+    const addresses = to === void 0 ? void 0 : to.flatMap((who) => connectionsOf(who));
+    await driver.publishData(topic, JSON.stringify(body), addresses);
   }
   async function applyEffects(target, effects) {
     try {
@@ -5994,8 +6199,19 @@ function createRoomEngine(options) {
     liveRoster = list;
     const merged = mergeGhosts(list, ghosts, at);
     ghosts = merged.kept;
+    const people = /* @__PURE__ */ new Map();
+    const connections = /* @__PURE__ */ new Map();
+    for (const entry of merged.roster) {
+      const person = personOf(entry.identity);
+      connections.set(person, [...connections.get(person) ?? [], entry.identity]);
+      const rank = (entry.isLocal ? 8 : 0) + (entry.reconnecting === true ? 0 : 4) + (entry.attributes[CONNECTION_KIND_ATTRIBUTE] === "companion" ? 0 : 2) + (entry.cameraEnabled || entry.micEnabled ? 1 : 0);
+      const held = people.get(person);
+      if (held === void 0 || rank > held.rank) people.set(person, { entry, rank });
+    }
+    personConnections = connections;
+    mainConnection = new Map([...people].map(([person, { entry }]) => [person, entry.identity]));
     store.setParticipants(
-      merged.roster.map((entry) => {
+      [...people.values()].map(({ entry }) => {
         const projected = projectParticipant(entry, joinedAt);
         return entry.reconnecting === true ? { ...projected, reconnecting: true, quality: "lost" } : projected;
       })
@@ -6172,7 +6388,13 @@ function createRoomEngine(options) {
     },
     async setScreenShareEnabled(enabled) {
       if (driver === null) return;
-      if (enabled && driver.supportsScreenShare?.() === false) {
+      let unsupported = false;
+      try {
+        unsupported = enabled && driver.supportsScreenShare?.() === false;
+      } catch {
+        unsupported = false;
+      }
+      if (unsupported) {
         store.patch({ share: { state: "refused", reason: "unsupported", remedy: null, at: now() } });
         report("warn", "meet: this browser cannot share a screen", "Share from a desktop browser (Chrome, Edge, Firefox or Safari).");
         return;
@@ -6271,7 +6493,7 @@ function createRoomEngine(options) {
     },
     attach(who, kind, element) {
       if (driver === null) return () => void 0;
-      return driver.attach(who, kind, element);
+      return driver.attach(mainConnection.get(personOf(who)) ?? who, kind, element);
     },
     token: () => current,
     async dispose() {
@@ -7005,6 +7227,12 @@ function defaultDiagnostics(event) {
   else if (event.level === "warn") console.warn(line);
   else console.info(line);
 }
+var claimedTab = null;
+function pageTabClaim() {
+  if (typeof window === "undefined") return void 0;
+  claimedTab ??= createTabClaim();
+  return claimedTab;
+}
 function deviceId() {
   const storage = globalThis.localStorage;
   const key = "mx.meet.device";
@@ -7122,13 +7350,15 @@ function MeetRuntime(props) {
       store,
       tokens,
       identity,
+      // S7: this page's tab id (one per page, claimed at load) — the LiveKit identity's tab half.
+      tabClaim: pageTabClaim(),
       resolveMeeting: (slug) => repository.meetingBySlug(slug),
       driverFactory: (handlers) => (driverRef.current ?? createLiveKitDriver)(handlers),
       onDiagnostic: report,
       effectsStorage,
       resolveDevice: (kind) => devicesHolder.current?.resolve(kind) ?? null,
       // §3.4: on every LiveKit disconnect, ask the server what happened to this connection.
-      readExit: (connection) => meetings.readExit(connection),
+      readExit: (connection, pass) => meetings.readExit(connection, pass),
       // S6b: the connection supervisor's ports — the device's network, whether OUR servers (the
       // API and the media server) answer, and the per-tab reload-after-offline marker.
       connection: {
@@ -8197,6 +8427,7 @@ function useRoom() {
     phase: snapshot?.phase ?? "resolving",
     participants: snapshot?.participants ?? [],
     failure: snapshot?.failure ?? null,
+    secondDevice: snapshot?.secondDevice ?? null,
     local,
     canShareScreen: engine?.supportsScreenShare() ?? true,
     join: (0, import_react4.useCallback)(
@@ -8342,6 +8573,7 @@ function useLobby() {
   const session = host?.meetings ?? null;
   return {
     waiting: (snapshot?.lobby ?? []).filter((entry) => entry.state === "knocking"),
+    declined: (snapshot?.lobby ?? []).filter((entry) => entry.state === "denied"),
     // No runtime means no host powers — `<LobbyPanel>` renders nothing rather
     // than an admit button that would throw.
     canAdmit: session !== null && isHost,
@@ -8363,6 +8595,37 @@ function useLobby() {
     )
   };
 }
+function useCountdown(untilMs) {
+  const [now, setNow] = (0, import_react4.useState)(() => Date.now());
+  const active = typeof untilMs === "number" && untilMs > now;
+  (0, import_react4.useEffect)(() => {
+    if (!active) return void 0;
+    setNow(Date.now());
+    const timer = setInterval(() => setNow(Date.now()), 1e3);
+    return () => clearInterval(timer);
+  }, [active, untilMs]);
+  if (typeof untilMs !== "number") return null;
+  return Math.max(0, untilMs - now);
+}
+function useKnockNotice() {
+  const lobby = useLobby();
+  const [dismissed, setDismissed] = (0, import_react4.useState)([]);
+  const keyOf = (entry) => `${entry.identity}@${entry.knockedAt}`;
+  const open = lobby.canAdmit ? lobby.waiting.filter((entry) => !dismissed.includes(keyOf(entry))) : [];
+  const knocker = open[0] ?? null;
+  return {
+    knocker,
+    others: Math.max(0, open.length - 1),
+    admit: (0, import_react4.useCallback)(async () => {
+      if (knocker === null) return;
+      setDismissed((list) => [...list, keyOf(knocker)]);
+      await lobby.admit(knocker);
+    }, [knocker, lobby.admit]),
+    dismiss: (0, import_react4.useCallback)(() => {
+      if (knocker !== null) setDismissed((list) => [...list, keyOf(knocker)]);
+    }, [knocker])
+  };
+}
 function useWaiting() {
   const host = useMeetHost();
   const snapshot = useMeetSnapshot();
@@ -11112,6 +11375,7 @@ function ControlBar({ onLeave }) {
       }
     ) }) }) : null,
     /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(BreakoutBanner, {}),
+    panel !== "people" ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(KnockNotice, { onView: () => setPanel("people") }) : null,
     controls.notice !== null && panel !== "people" ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Toast, { text: controls.notice.text, failed: controls.notice.failed, onDone: controls.clearNotice }) : null,
     /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "mx-meet__controls", children: [
       /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
@@ -11442,10 +11706,21 @@ function MediaNotices() {
   const name = (kind) => kind === "microphone" ? "Microphone" : "Camera";
   if (chips.length === 0 && region.audioOutput !== "blocked" && notice === null && offer === null) return null;
   return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "mx-meet__media-notices", children: [
-    region.audioOutput === "blocked" ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "mx-meet__media-pill", role: "alert", "data-meet-notice": "audio-blocked", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { children: "Sound is paused in this tab" }),
-      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("button", { type: "button", className: "mx-meet__primary mx-meet__primary--small", onClick: () => void enableAudio(), children: "Enable sound" })
-    ] }) : null,
+    region.audioOutput === "blocked" ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+      import_design_system.ErrorBox,
+      {
+        as: "div",
+        className: "mx-meet__media-pill",
+        "data-meet-notice": "audio-blocked",
+        message: "Sound is paused in this tab",
+        operation: "Enable meeting sound",
+        origin: "meet/MediaNotices",
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { children: "Sound is paused in this tab" }),
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("button", { type: "button", className: "mx-meet__primary mx-meet__primary--small", onClick: () => void enableAudio(), children: "Enable sound" })
+        ]
+      }
+    ) : null,
     chips.map(({ kind, reason }) => /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "mx-meet__media-pill", role: "status", "data-meet-notice": deviceNoticeCode(kind, reason), children: [
       /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { children: deviceChipLabel(kind, reason) }),
       /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
@@ -12245,9 +12520,68 @@ function useMicrophoneStream(deviceId2) {
   }, [deviceId2]);
   return stream;
 }
+function KnockNotice({ onView }) {
+  const { knocker, others, admit, dismiss } = useKnockNotice();
+  if (knocker === null) return null;
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "mx-meet__notice-bar", role: "status", "data-meet-notice": "knock-received", "data-meet-participant-name": knocker.displayName, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("span", { children: [
+      knocker.displayName,
+      " wants to join",
+      others > 0 ? ` (+${others} more)` : ""
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("button", { type: "button", className: "mx-meet__link", onClick: () => void admit().catch(() => void 0), children: "Admit" }),
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+      "button",
+      {
+        type: "button",
+        className: "mx-meet__link",
+        onClick: () => {
+          dismiss();
+          onView();
+        },
+        children: "View"
+      }
+    ),
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("button", { type: "button", className: "mx-meet__toast-close", "aria-label": "Dismiss", onClick: dismiss, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(CloseIcon, { width: 14, height: 14 }) })
+  ] });
+}
 function LobbyPanel() {
   const lobby = useLobby();
-  if (!lobby.canAdmit || lobby.waiting.length === 0) return null;
+  if (!lobby.canAdmit || lobby.waiting.length === 0 && lobby.declined.length === 0) return null;
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+    lobby.waiting.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(WaitingList, { lobby }) : null,
+    lobby.declined.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(DeclinedList, { lobby }) : null
+  ] });
+}
+function DeclinedList({ lobby }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("section", { className: "mx-meet__lobby", "aria-label": "Declined requests", "data-meet-declined": "", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("header", { className: "mx-meet__lobby-head", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("h3", { className: "mx-meet__lobby-title", children: "Declined" }) }),
+    /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("ul", { className: "mx-meet__lobby-list", children: lobby.declined.map((entry) => /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+      "li",
+      {
+        className: "mx-meet__lobby-row",
+        "data-meet-declined-entry": "",
+        "data-meet-participant-name": entry.displayName,
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Avatar, { name: entry.displayName, url: entry.avatarUrl, size: 32 }),
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { className: "mx-meet__person-name", children: entry.displayName }),
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+            "button",
+            {
+              type: "button",
+              className: "mx-meet__link",
+              "aria-label": `Let ${entry.displayName} ask again`,
+              onClick: () => void lobby.undeny(entry),
+              children: "Let them ask again"
+            }
+          )
+        ]
+      },
+      entry.identity
+    )) })
+  ] });
+}
+function WaitingList({ lobby }) {
   return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("section", { className: "mx-meet__lobby", "aria-label": "Waiting room", children: [
     /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("header", { className: "mx-meet__lobby-head", children: [
       /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("h3", { className: "mx-meet__lobby-title", children: lobby.waiting.length === 1 ? "1 person is waiting" : `${lobby.waiting.length} people are waiting` }),
@@ -12511,6 +12845,21 @@ function PreJoinBody({
   (0, import_react10.useEffect)(() => {
     void host.devices.refresh();
   }, [host]);
+  const joinWith = (secondDevice) => {
+    setJoining(true);
+    preview.release();
+    void room.join({
+      roomName,
+      // An observer publishes nothing: no camera, no microphone (MD-16). A companion
+      // ("join here too") never opens the microphone (S7).
+      mode: observe2 ? "audio" : mode,
+      microphone: observe2 || secondDevice === "join_too" ? false : microphone,
+      ...meetingId !== void 0 ? { meetingId } : {},
+      ...slug !== void 0 ? { slug } : {},
+      ...observe2 ? { observe: true } : {},
+      ...secondDevice !== void 0 ? { secondDevice } : {}
+    }).then(() => onJoined?.()).catch(() => void 0).finally(() => setJoining(false));
+  };
   return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "mx-meet__prejoin", children: [
     /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "mx-meet__preview", children: [
       mode === "video" && preview.preview !== null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
@@ -12595,27 +12944,34 @@ function PreJoinBody({
           ),
           /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system.Label, { htmlFor: "mx-meet-join-mic", children: "Join with microphone" })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
-          import_design_system.Button,
-          {
-            type: "button",
-            className: "mx-meet__join",
-            disabled: joining,
-            onClick: () => {
-              setJoining(true);
-              preview.release();
-              void room.join({
-                roomName,
-                // An observer publishes nothing: no camera, no microphone (MD-16).
-                mode: observe2 ? "audio" : mode,
-                microphone: observe2 ? false : microphone,
-                ...meetingId !== void 0 ? { meetingId } : {},
-                ...slug !== void 0 ? { slug } : {},
-                ...observe2 ? { observe: true } : {}
-              }).then(() => onJoined?.()).catch(() => void 0).finally(() => setJoining(false));
-            },
-            children: joining ? "Joining\u2026" : observe2 ? "Observe" : "Join now"
-          }
+        room.secondDevice === null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system.Button, { type: "button", className: "mx-meet__join", disabled: joining, onClick: () => joinWith(), children: joining ? "Joining\u2026" : observe2 ? "Observe" : "Join now" }) : (
+          // S7: ALREADY IN THIS MEETING on another tab or device — the meeting's choice
+          // (Meet: Switch here / Join here too; Teams: Transfer here / Add this device).
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { className: "mx-meet__second-device", "data-meet-region": "second-device", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("p", { className: "mx-meet__hint", children: "You're in this meeting on another device" }),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+              import_design_system.Button,
+              {
+                type: "button",
+                className: "mx-meet__join",
+                "data-meet-control": "switch-here",
+                disabled: joining,
+                onClick: () => joinWith("switch_here"),
+                children: room.secondDevice.rule === "ask_transfer_or_add" ? "Transfer here" : "Switch here"
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+              import_design_system.Button,
+              {
+                type: "button",
+                variant: "outline",
+                "data-meet-control": "join-too",
+                disabled: joining,
+                onClick: () => joinWith("join_too"),
+                children: room.secondDevice.rule === "ask_transfer_or_add" ? "Add this device" : "Join here too"
+              }
+            )
+          ] })
         )
       ] }),
       room.failure !== null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("p", { className: "mx-meet__error", children: [
@@ -12813,16 +13169,21 @@ var REFUSED_TITLES = {
   not_invited: "You aren't invited to this meeting",
   locked: "This meeting is locked",
   removed: "You can't rejoin this meeting",
-  lobby_rejects: "You can't ask to join this meeting",
+  lobby_rejects: "The host declined your request",
   meeting_full: "This meeting is full",
   platform_capacity: "Meetings are busy right now",
   verification_required: "Verify your account to join",
   registration_required: "Register to join this meeting"
 };
+function clockText(ms2) {
+  const total = Math.ceil(ms2 / 1e3);
+  return `${Math.floor(total / 60)}:${String(total % 60).padStart(2, "0")}`;
+}
 function ExitScreen({ onLeave }) {
   const { phase, reason, host, snapshot, actions, call, connection } = useMeetCore();
   const [busy, setBusy] = (0, import_react10.useState)(false);
   const failure = snapshot?.failure ?? null;
+  const retryLeft = useCountdown(phase === "refused:lobby_rejects" ? failure?.retryAt ?? null : null);
   const rejoin = /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
     import_design_system.Button,
     {
@@ -12865,6 +13226,33 @@ function ExitScreen({ onLeave }) {
       /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system.Button, { type: "button", variant: "outline", onClick: actions.retry, children: "Try again" }),
       home
     ] });
+    if (code === "lobby_rejects") {
+      if (retryLeft !== null && retryLeft > 0) {
+        line = `You can ask again in ${clockText(retryLeft)}`;
+        notice = "reknock-cooldown";
+        actionsNode = home;
+      } else if (retryLeft === 0) {
+        line = "You can ask to join again";
+        actionsNode = /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+            import_design_system.Button,
+            {
+              type: "button",
+              disabled: busy,
+              onClick: () => {
+                setBusy(true);
+                void actions.rejoin().catch(() => void 0).finally(() => setBusy(false));
+              },
+              children: "Ask to join again"
+            }
+          ),
+          home
+        ] });
+      } else {
+        line = "Ask the host to let you in, then open the link again";
+        actionsNode = home;
+      }
+    }
   } else {
     switch (phase) {
       case "left":
@@ -12925,7 +13313,7 @@ function ExitScreen({ onLeave }) {
     /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Avatar, { name: host?.identity.displayName ?? "", url: host?.identity.avatarUrl ?? null, size: 72 }),
     /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("h1", { className: "mx-meet__prejoin-title", children: title }),
     line !== null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("p", { className: "mx-meet__empty-body", children: line }) : null,
-    notice !== null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { role: "status", "data-meet-notice": notice, className: "mx-meet__sr-only", children: title }) : null,
+    notice !== null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { role: "status", "data-meet-notice": notice, className: "mx-meet__sr-only", children: notice === "reknock-cooldown" && line !== null ? line : title }) : null,
     /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { className: "mx-meet__waiting-actions", children: actionsNode })
   ] });
 }
@@ -12934,6 +13322,7 @@ function WaitingRoom({ host, onLeave }) {
   const { phaseNotice } = useMeetCore();
   const [busy, setBusy] = (0, import_react10.useState)(false);
   const admission = waiting?.admission ?? "knocking";
+  const reknockLeft = useCountdown(admission === "denied" ? waiting?.reknockAt ?? null : null);
   const run = (action) => () => {
     setBusy(true);
     void action().catch(() => void 0).finally(() => setBusy(false));
@@ -12941,6 +13330,7 @@ function WaitingRoom({ host, onLeave }) {
   const home = /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system.Button, { type: "button", variant: "outline", onClick: () => onLeave !== void 0 ? onLeave() : window.location.assign("/"), children: "Back to home" });
   let title;
   let line = null;
+  let cooldownNotice = false;
   let actions;
   switch (admission) {
     case "waiting_host":
@@ -12949,8 +13339,12 @@ function WaitingRoom({ host, onLeave }) {
       break;
     case "denied":
       title = "The host declined your request";
+      if (reknockLeft !== null && reknockLeft > 0) {
+        line = `You can ask again in ${clockText(reknockLeft)}`;
+        cooldownNotice = true;
+      }
       actions = /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-        waiting?.reknockAllowed === true ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system.Button, { type: "button", disabled: busy, onClick: run(askAgain), children: "Ask to join again" }) : null,
+        waiting?.reknockAllowed === true || waiting?.reknockAt != null && reknockLeft === 0 ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_design_system.Button, { type: "button", disabled: busy, onClick: run(askAgain), children: "Ask to join again" }) : null,
         home
       ] });
       break;
@@ -12981,7 +13375,15 @@ function WaitingRoom({ host, onLeave }) {
     /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Avatar, { name: host.identity.displayName, url: host.identity.avatarUrl, size: 72 }),
     /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("h1", { className: "mx-meet__prejoin-title", children: title }),
     phaseNotice === "sent-to-waiting" ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("p", { className: "mx-meet__empty-body", role: "status", "data-meet-notice": "sent-to-waiting", children: "The host moved you back to the waiting room" }) : null,
-    line !== null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("p", { className: "mx-meet__empty-body", role: "status", "data-meet-notice": "host-absent", children: line }) : null,
+    line !== null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+      "p",
+      {
+        className: "mx-meet__empty-body",
+        role: "status",
+        "data-meet-notice": cooldownNotice ? "reknock-cooldown" : "host-absent",
+        children: line
+      }
+    ) : null,
     /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { className: "mx-meet__waiting-actions", children: actions })
   ] });
 }