@ai-matrx/meet 0.7.72 → 0.7.75

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog — `@ai-matrx/meet`
 
+## 0.7.75
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/meet/v0.7.73..npm/meet/v0.7.75 -- apps/shared/meet`).
+No source changes intended and no consumer action required.
+
+## 0.7.74
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/meet/v0.7.73..npm/meet/v0.7.74 -- apps/shared/meet`).
+No source changes intended and no consumer action required.
+
+## 0.7.73
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/meet/v0.7.72..npm/meet/v0.7.73 -- apps/shared/meet`).
+No source changes intended and no consumer action required.
+
 ## 0.7.72
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see

package/dist/index.cjs

@@ -406,6 +406,12 @@ var MEET_ROUTES = {
   record: "/api/v1/meet/record",
   /** A host chooses what guests may read of ONE meeting (MRF-1). */
   recordAccess: "/api/v1/meet/record/access",
+  /**
+   * KEEP YOUR NOTES (2026-10-01): a guest who just created an account presents
+   * their kept pass in `x-meet-room-token` with their new session, and the
+   * meeting they attended becomes theirs to read. Idempotent; never a grant.
+   */
+  claim: "/api/v1/meet/claim",
   /**
    * Meet wave 1 (0.8): bring every invitee up to date after a write — sends the
    * invitation / update / cancellation emails with their `.ics` and re-queues
@@ -5846,7 +5852,7 @@ var import_format2 = require("@ai-matrx/kit/format");
 function activeWrapUpSummary(notes) {
   return notes.find((note) => note.role === "summary" && note.supersededBy === null) ?? null;
 }
-var RESTRICTION_REMEDY = "The people in this meeting's organization can read it. Sign in with an account in that organization \u2014 following the link is enough to join a meeting, but not to read its record.";
+var RESTRICTION_REMEDY = "Open it from the meeting link in the browser you attended with, or ask the host to share it.";
 var PART_LABEL = {
   transcript: "The transcript of this meeting is not readable from this account.",
   notes: "The notes, decisions and action items are not readable from this account.",
@@ -6105,7 +6111,8 @@ function summarizeMeetingRecordRestrictions(restrictions) {
 }
 async function loadGuestMeetingRecord(args) {
   const { api, repository, meetingId, meeting, roomToken } = args;
-  if (roomToken === null) {
+  const session = args.session === true;
+  if (roomToken === null && !session) {
     return refusedBundle(
       meeting,
       "This meeting's record is only readable by the people who were in it.",
@@ -6118,9 +6125,9 @@ async function loadGuestMeetingRecord(args) {
       path: `${MEET_ROUTES.record}?meeting_id=${encodeURIComponent(meetingId)}`,
       method: "GET",
       // A GUEST HAS NO SESSION AND IS STILL A FIRST-CLASS READER (D6).
-      requireAuth: false,
+      requireAuth: session,
       operation: "meet.record",
-      headers: { [ROOM_TOKEN_HEADER]: roomToken.token }
+      headers: roomToken === null ? {} : { [ROOM_TOKEN_HEADER]: roomToken.token }
     });
   } catch (error) {
     return refusedBundle(