@ai-matrx/meet 0.7.73 → 0.7.75

package/dist/index.d.cts

@@ -2813,6 +2813,12 @@ declare const MEET_ROUTES: {
     readonly record: "/api/v1/meet/record";
     /** A host chooses what guests may read of ONE meeting (MRF-1). */
     readonly recordAccess: "/api/v1/meet/record/access";
+    /**
+     * KEEP YOUR NOTES (2026-10-01): a guest who just created an account presents
+     * their kept pass in `x-meet-room-token` with their new session, and the
+     * meeting they attended becomes theirs to read. Idempotent; never a grant.
+     */
+    readonly claim: "/api/v1/meet/claim";
     /**
      * Meet wave 1 (0.8): bring every invitee up to date after a write — sends the
      * invitation / update / cancellation emails with their `.ics` and re-queues
@@ -3087,6 +3093,13 @@ declare function loadGuestMeetingRecord(args: {
     meetingId: MeetingId;
     meeting: MeetingRecord;
     roomToken: RoomToken | null;
+    /**
+     * A SIGNED-IN reader the database refused (from another organization, or a
+     * guest who later created an account). Their session stands in for the
+     * pass: the server reads their `user:<id>` admission or the attendance they
+     * claimed, and shares what guests may read (2026-10-01).
+     */
+    session?: boolean;
 }): Promise<MeetingRecordBundle>;
 /**
  * A HOST chooses what guests may read of THIS meeting.

package/dist/index.d.ts

@@ -2813,6 +2813,12 @@ declare const MEET_ROUTES: {
     readonly record: "/api/v1/meet/record";
     /** A host chooses what guests may read of ONE meeting (MRF-1). */
     readonly recordAccess: "/api/v1/meet/record/access";
+    /**
+     * KEEP YOUR NOTES (2026-10-01): a guest who just created an account presents
+     * their kept pass in `x-meet-room-token` with their new session, and the
+     * meeting they attended becomes theirs to read. Idempotent; never a grant.
+     */
+    readonly claim: "/api/v1/meet/claim";
     /**
      * Meet wave 1 (0.8): bring every invitee up to date after a write — sends the
      * invitation / update / cancellation emails with their `.ics` and re-queues
@@ -3087,6 +3093,13 @@ declare function loadGuestMeetingRecord(args: {
     meetingId: MeetingId;
     meeting: MeetingRecord;
     roomToken: RoomToken | null;
+    /**
+     * A SIGNED-IN reader the database refused (from another organization, or a
+     * guest who later created an account). Their session stands in for the
+     * pass: the server reads their `user:<id>` admission or the attendance they
+     * claimed, and shares what guests may read (2026-10-01).
+     */
+    session?: boolean;
 }): Promise<MeetingRecordBundle>;
 /**
  * A HOST chooses what guests may read of THIS meeting.

package/dist/index.js

@@ -199,6 +199,12 @@ var MEET_ROUTES = {
   record: "/api/v1/meet/record",
   /** A host chooses what guests may read of ONE meeting (MRF-1). */
   recordAccess: "/api/v1/meet/record/access",
+  /**
+   * KEEP YOUR NOTES (2026-10-01): a guest who just created an account presents
+   * their kept pass in `x-meet-room-token` with their new session, and the
+   * meeting they attended becomes theirs to read. Idempotent; never a grant.
+   */
+  claim: "/api/v1/meet/claim",
   /**
    * Meet wave 1 (0.8): bring every invitee up to date after a write — sends the
    * invitation / update / cancellation emails with their `.ics` and re-queues
@@ -5639,7 +5645,7 @@ import { formatDurationMs as formatDurationMs2 } from "@ai-matrx/kit/format";
 function activeWrapUpSummary(notes) {
   return notes.find((note) => note.role === "summary" && note.supersededBy === null) ?? null;
 }
-var RESTRICTION_REMEDY = "The people in this meeting's organization can read it. Sign in with an account in that organization \u2014 following the link is enough to join a meeting, but not to read its record.";
+var RESTRICTION_REMEDY = "Open it from the meeting link in the browser you attended with, or ask the host to share it.";
 var PART_LABEL = {
   transcript: "The transcript of this meeting is not readable from this account.",
   notes: "The notes, decisions and action items are not readable from this account.",
@@ -5898,7 +5904,8 @@ function summarizeMeetingRecordRestrictions(restrictions) {
 }
 async function loadGuestMeetingRecord(args) {
   const { api, repository, meetingId, meeting, roomToken } = args;
-  if (roomToken === null) {
+  const session = args.session === true;
+  if (roomToken === null && !session) {
     return refusedBundle(
       meeting,
       "This meeting's record is only readable by the people who were in it.",
@@ -5911,9 +5918,9 @@ async function loadGuestMeetingRecord(args) {
       path: `${MEET_ROUTES.record}?meeting_id=${encodeURIComponent(meetingId)}`,
       method: "GET",
       // A GUEST HAS NO SESSION AND IS STILL A FIRST-CLASS READER (D6).
-      requireAuth: false,
+      requireAuth: session,
       operation: "meet.record",
-      headers: { [ROOM_TOKEN_HEADER]: roomToken.token }
+      headers: roomToken === null ? {} : { [ROOM_TOKEN_HEADER]: roomToken.token }
     });
   } catch (error) {
     return refusedBundle(