@ai-matrx/meet 0.11.52 → 0.11.53

package/dist/index.js

@@ -3551,6 +3551,7 @@ function consentPending(policy, role, recordingOn, given) {
 function mayAdmitNow(role, participants, policy) {
   if (role === "none") return false;
   if (role === "host" || role === "cohost") return true;
+  if (role === "viewer") return false;
   const hostIn = participants.some((p) => p.role === "host" || p.role === "cohost");
   return !hostIn && policy.headlessPowers === "members_admit";
 }
@@ -5255,6 +5256,17 @@ function createMeetingSession(options) {
     }
     return identity.userId;
   }
+  function requireAdmitterUser(operation) {
+    const snapshot = store.snapshot();
+    if (identity.userId === null || !mayAdmitNow(effectiveRole(snapshot), snapshot.participants, snapshot.livePolicy)) {
+      throw new MeetError(
+        "forbidden",
+        `${operation}: this participant may not let people in`,
+        "Only a host or co-host admits people, unless the meeting has no host in it and lets members admit."
+      );
+    }
+    return identity.userId;
+  }
   function requireMeeting(operation) {
     const meeting = store.snapshot().meeting;
     if (meeting === null) {
@@ -5661,7 +5673,7 @@ function createMeetingSession(options) {
       meetingChannel.requestBackfill("manual");
     },
     async admit(entry, admitted) {
-      const by = requireHostUser("meet.admit");
+      const by = requireAdmitterUser("meet.admit");
       const meeting = requireMeeting("meet.admit");
       const row = await repository.decideAdmission({
         meetingId: meeting.id,
@@ -5679,7 +5691,7 @@ function createMeetingSession(options) {
       hint();
     },
     async undeny(entry) {
-      const by = requireHostUser("meet.undeny");
+      const by = requireAdmitterUser("meet.undeny");
       const meeting = requireMeeting("meet.undeny");
       const row = await repository.decideAdmission({
         meetingId: meeting.id,
@@ -5692,7 +5704,7 @@ function createMeetingSession(options) {
       hint();
     },
     async admitAll() {
-      const by = requireHostUser("meet.admitAll");
+      const by = requireAdmitterUser("meet.admitAll");
       const meeting = requireMeeting("meet.admitAll");
       const rows = await repository.admitAll(meeting.id, by);
       for (const row of rows) {