@ai-matrx/meet 0.11.52 → 0.11.53

package/CHANGELOG.md

@@ -1,11 +1,23 @@
 # Changelog — `@ai-matrx/meet`
 
+## 0.11.53
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/meet/v0.11.52..npm/meet/v0.11.53 -- apps/shared/meet`).
+No source changes intended and no consumer action required.
+
 ## 0.11.52
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see
 `git diff npm/meet/v0.11.51..npm/meet/v0.11.52 -- apps/shared/meet`).
 No source changes intended and no consumer action required.
 
+## 0.11.51
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/meet/v0.11.50..npm/meet/v0.11.51 -- apps/shared/meet`).
+No source changes intended and no consumer action required.
+
 ## 0.11.50
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see

package/dist/core.cjs

@@ -3835,6 +3835,7 @@ function consentPending(policy, role, recordingOn, given) {
 function mayAdmitNow(role, participants, policy) {
   if (role === "none") return false;
   if (role === "host" || role === "cohost") return true;
+  if (role === "viewer") return false;
   const hostIn = participants.some((p) => p.role === "host" || p.role === "cohost");
   return !hostIn && policy.headlessPowers === "members_admit";
 }
@@ -5539,6 +5540,17 @@ function createMeetingSession(options) {
     }
     return identity.userId;
   }
+  function requireAdmitterUser(operation) {
+    const snapshot = store.snapshot();
+    if (identity.userId === null || !mayAdmitNow(effectiveRole(snapshot), snapshot.participants, snapshot.livePolicy)) {
+      throw new MeetError(
+        "forbidden",
+        `${operation}: this participant may not let people in`,
+        "Only a host or co-host admits people, unless the meeting has no host in it and lets members admit."
+      );
+    }
+    return identity.userId;
+  }
   function requireMeeting(operation) {
     const meeting = store.snapshot().meeting;
     if (meeting === null) {
@@ -5945,7 +5957,7 @@ function createMeetingSession(options) {
       meetingChannel.requestBackfill("manual");
     },
     async admit(entry, admitted) {
-      const by = requireHostUser("meet.admit");
+      const by = requireAdmitterUser("meet.admit");
       const meeting = requireMeeting("meet.admit");
       const row = await repository.decideAdmission({
         meetingId: meeting.id,
@@ -5963,7 +5975,7 @@ function createMeetingSession(options) {
       hint();
     },
     async undeny(entry) {
-      const by = requireHostUser("meet.undeny");
+      const by = requireAdmitterUser("meet.undeny");
       const meeting = requireMeeting("meet.undeny");
       const row = await repository.decideAdmission({
         meetingId: meeting.id,
@@ -5976,7 +5988,7 @@ function createMeetingSession(options) {
       hint();
     },
     async admitAll() {
-      const by = requireHostUser("meet.admitAll");
+      const by = requireAdmitterUser("meet.admitAll");
       const meeting = requireMeeting("meet.admitAll");
       const rows = await repository.admitAll(meeting.id, by);
       for (const row of rows) {