@ai-matrx/meet 0.8.0 → 0.9.0

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog — `@ai-matrx/meet`
 
+## 0.9.0
+### S3: the meeting pass, the role/standing vocabulary, refusal phases
+
+- **The meeting pass.** `RoomToken` gains `meetingPass`, `meetingPassExpiresAt`, `sessionId`,
+  `standing`. Every aidream meet route (record, claim, chat, collab, moderate, Q&A, captions)
+  now reads `x-meet-pass` (`MEETING_PASS_HEADER`, `meetingPassHeaders`); the LiveKit `token` is
+  for media only. `ROOM_TOKEN_HEADER` is removed (no shim). `rememberedMeetingPass(room)` reads
+  a guest's kept pass.
+- **Role vocabulary** `host · cohost · presenter · participant · viewer`; being a guest is the
+  STANDING `guest` (`ParticipantStanding`, `isLinkFollower`, attribute
+  `matrx.participant.standing`). `data-meet-role` still renders `guest` for a link follower.
+- **Refusals are phases.** `MeetError.reason` carries the join gate's reason code; a refused
+  join renders `refused:<reason>` (`ended` renders the `ended` phase), never pre-join.
+- **Session-aware record:** `loadGuestMeetingRecord({ sessionId })`.
+- **Removed:** `RPCS.endMeeting` / `repository.endMeeting` (the `meet_end_meeting` RPC is
+  dropped; `/v1/meet/end` is the one end door).
+
+Consumer action: send `meetingPass` (not `token`) as `x-meet-pass`; read the guest badge from
+`standing`, not `role === "guest"`; replace `ROOM_TOKEN_HEADER` with `MEETING_PASS_HEADER`.
+
+## 0.8.1
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/meet/v0.8.0..npm/meet/v0.8.1 -- apps/shared/meet`).
+No source changes intended and no consumer action required.
+
 ## 0.8.0 — session identity and global slots have one home
 
 - The session reader is `@ai-matrx/data/session-identity` (meet supplies its words and branded

package/dist/{collab-Bss-_Jfp.d.cts → collab-B6scmSST.d.cts}

@@ -57,19 +57,23 @@ declare function isGuest(identity: MeetIdentity): boolean;
 /**
  * WHO SOMEBODY IS IN A ROOM — the SERVER's word, never this client's (MRI-A11).
  *
- * `host` is `meet_meetings.host_user_id` or a real `iam` grant on the meeting;
- * `participant` is an authenticated member of the meeting's organization;
- * `guest` is a link-follower with no session. Organization membership is
- * TENANCY and never permission, which is why "member of the org" lands on
- * `participant` and not on `host`.
- *
- * `cohost` has no server-side minter yet and is kept because the rank ladder
- * below is the thing that stops a co-host from removing the host; the moment a
- * co-host grant exists it slots in without a second vocabulary.
+ * THE ROLE VOCABULARY (CORE-DESIGN §2.1, S3): `host · cohost · presenter · participant ·
+ * viewer`. `host` is `meet_meetings.host_user_id`; `cohost` is a real `iam` grant on the
+ * meeting. Being a guest is a STANDING (`ParticipantStanding`), never a role: a guest is a
+ * `participant` whose standing is `guest`. Pinned against aidream's `config.py` by
+ * `test_meet_service.py`.
+ */
+type ParticipantRole = "host" | "cohost" | "presenter" | "participant" | "viewer";
+/**
+ * Where a person stands with the meeting, beside the role: `member` of its organization,
+ * `invited` (shared with them), `outsider` (signed in, followed the link), `guest` (no
+ * session). The server mints it (attribute `matrx.participant.standing`).
  */
-type ParticipantRole = "host" | "cohost" | "participant" | "guest";
+type ParticipantStanding = "member" | "invited" | "outsider" | "guest";
 /** Rank, so "can this actor do that to that participant" is one comparison. */
 declare const ROLE_RANK: Readonly<Record<ParticipantRole, number>>;
+/** Does this standing follow the link-holder (guest) rules? `outsider` and `guest`. */
+declare function isLinkFollower(standing: ParticipantStanding | null | undefined): boolean;
 /**
  * 🚨 THE ONE PREDICATE FOR "DOES THIS PERSON HOLD HOST POWERS".
  *
@@ -102,6 +106,8 @@ interface MeetParticipant {
     readonly displayName: string;
     readonly avatarUrl: string | null;
     readonly role: ParticipantRole;
+    /** Where they stand with the meeting (server-minted); null when the server sent none. */
+    readonly standing?: ParticipantStanding | null;
     /**
      * Whether the SERVER granted this participant the power to start a recording
      * (MRI-A11). It is not `role === "host"`: a meeting whose recording policy is
@@ -800,6 +806,6 @@ interface MeetingActivities {
  * The same `GET /v1/meet/collab` the room reads on join; a refusal is returned as data,
  * so the record still renders everything else.
  */
-declare function loadMeetingActivities(api: MeetApi, meetingId: string, roomToken?: string | null): Promise<MeetingActivities>;
+declare function loadMeetingActivities(api: MeetApi, meetingId: string, meetingPass?: string | null): Promise<MeetingActivities>;
 
-export { type NoteTakerState as $, type AccessTokenSource as A, type MeetPollState as B, type CollabPanel as C, type MeetQuestion as D, EMPTY_COLLAB as E, FILE_SESSION_PATH as F, type MeetQuestionState as G, type MeetStroke as H, type InviteeInput as I, type JsonObject as J, type MeetingActivities as K, type LobbyEntry as L, type MeetingRecord as M, type MeetingAttendee as N, type OrganizationId as O, type ParticipantIdentity as P, type MeetingChanges as Q, type RoomName as R, type StageLayout as S, type TranscriptSource as T, type UserId as U, type MeetingInvitee as V, type WrapUpAnnouncement as W, type MeetingKind as X, type MeetingNoteKind as Y, type MeetingOccurrence as Z, type MeetingSettings as _, type MeetParticipant as a, ORGANIZATION_HEADER as a0, type OccurrenceOverride as a1, type OccurrenceState as a2, ROLE_RANK as a3, type RecordingPolicy as a4, type RecordingRecord as a5, type RecordingState as a6, type RoomPhase as a7, type RsvpAnswer as a8, type RsvpInvitation as a9, type RsvpState as aa, type TranscriptSegment as ab, type UpcomingOccurrence as ac, applyCollabPacket as ad, asCallId as ae, asMeetingId as af, asOrganizationId as ag, asParticipantIdentity as ah, asRoomName as ai, asUserId as aj, assignedRoom as ak, autoAssign as al, breakoutRemainingMs as am, collabFromState as an, createMeetApi as ao, defaultCaptionLanguage as ap, fileDownloadPath as aq, isGuest as ar, isHostRole as as, loadMeetingActivities as at, withItem as au, type RecordingSource as av, type MeetApi as b, type MeetIdentity as c, type CallInvite as d, type ParticipantRole as e, type CallMode as f, type MeetingNote as g, type MeetingId as h, type CollabSnapshot as i, type AdmissionState as j, CAPTION_LANGUAGES as k, type CallId as l, type CallState as m, type CallablePerson as n, type ConnectionQuality as o, type InviteeRole as p, type JsonValue as q, type MeetApiOptions as r, type MeetApiRequest as s, type MeetBreakoutBroadcast as t, type MeetBreakoutPlan as u, type MeetBreakoutRoom as v, type MeetCollabSettings as w, type MeetFileMedia as x, type MeetPoll as y, type MeetPollOption as z };
+export { type NoteTakerState as $, type AccessTokenSource as A, type MeetPollState as B, type CollabPanel as C, type MeetQuestion as D, EMPTY_COLLAB as E, FILE_SESSION_PATH as F, type MeetQuestionState as G, type MeetStroke as H, type InviteeInput as I, type JsonObject as J, type MeetingActivities as K, type LobbyEntry as L, type MeetingRecord as M, type MeetingAttendee as N, type OrganizationId as O, type ParticipantIdentity as P, type MeetingChanges as Q, type RoomName as R, type StageLayout as S, type TranscriptSource as T, type UserId as U, type MeetingInvitee as V, type WrapUpAnnouncement as W, type MeetingKind as X, type MeetingNoteKind as Y, type MeetingOccurrence as Z, type MeetingSettings as _, type MeetParticipant as a, ORGANIZATION_HEADER as a0, type OccurrenceOverride as a1, type OccurrenceState as a2, type ParticipantStanding as a3, ROLE_RANK as a4, type RecordingPolicy as a5, type RecordingRecord as a6, type RecordingState as a7, type RoomPhase as a8, type RsvpAnswer as a9, type RsvpInvitation as aa, type RsvpState as ab, type TranscriptSegment as ac, type UpcomingOccurrence as ad, applyCollabPacket as ae, asCallId as af, asMeetingId as ag, asOrganizationId as ah, asParticipantIdentity as ai, asRoomName as aj, asUserId as ak, assignedRoom as al, autoAssign as am, breakoutRemainingMs as an, collabFromState as ao, createMeetApi as ap, defaultCaptionLanguage as aq, fileDownloadPath as ar, isGuest as as, isHostRole as at, isLinkFollower as au, loadMeetingActivities as av, withItem as aw, type RecordingSource as ax, type MeetApi as b, type MeetIdentity as c, type CallInvite as d, type ParticipantRole as e, type CallMode as f, type MeetingNote as g, type MeetingId as h, type CollabSnapshot as i, type AdmissionState as j, CAPTION_LANGUAGES as k, type CallId as l, type CallState as m, type CallablePerson as n, type ConnectionQuality as o, type InviteeRole as p, type JsonValue as q, type MeetApiOptions as r, type MeetApiRequest as s, type MeetBreakoutBroadcast as t, type MeetBreakoutPlan as u, type MeetBreakoutRoom as v, type MeetCollabSettings as w, type MeetFileMedia as x, type MeetPoll as y, type MeetPollOption as z };

package/dist/{collab-Bss-_Jfp.d.ts → collab-B6scmSST.d.ts}

@@ -57,19 +57,23 @@ declare function isGuest(identity: MeetIdentity): boolean;
 /**
  * WHO SOMEBODY IS IN A ROOM — the SERVER's word, never this client's (MRI-A11).
  *
- * `host` is `meet_meetings.host_user_id` or a real `iam` grant on the meeting;
- * `participant` is an authenticated member of the meeting's organization;
- * `guest` is a link-follower with no session. Organization membership is
- * TENANCY and never permission, which is why "member of the org" lands on
- * `participant` and not on `host`.
- *
- * `cohost` has no server-side minter yet and is kept because the rank ladder
- * below is the thing that stops a co-host from removing the host; the moment a
- * co-host grant exists it slots in without a second vocabulary.
+ * THE ROLE VOCABULARY (CORE-DESIGN §2.1, S3): `host · cohost · presenter · participant ·
+ * viewer`. `host` is `meet_meetings.host_user_id`; `cohost` is a real `iam` grant on the
+ * meeting. Being a guest is a STANDING (`ParticipantStanding`), never a role: a guest is a
+ * `participant` whose standing is `guest`. Pinned against aidream's `config.py` by
+ * `test_meet_service.py`.
+ */
+type ParticipantRole = "host" | "cohost" | "presenter" | "participant" | "viewer";
+/**
+ * Where a person stands with the meeting, beside the role: `member` of its organization,
+ * `invited` (shared with them), `outsider` (signed in, followed the link), `guest` (no
+ * session). The server mints it (attribute `matrx.participant.standing`).
  */
-type ParticipantRole = "host" | "cohost" | "participant" | "guest";
+type ParticipantStanding = "member" | "invited" | "outsider" | "guest";
 /** Rank, so "can this actor do that to that participant" is one comparison. */
 declare const ROLE_RANK: Readonly<Record<ParticipantRole, number>>;
+/** Does this standing follow the link-holder (guest) rules? `outsider` and `guest`. */
+declare function isLinkFollower(standing: ParticipantStanding | null | undefined): boolean;
 /**
  * 🚨 THE ONE PREDICATE FOR "DOES THIS PERSON HOLD HOST POWERS".
  *
@@ -102,6 +106,8 @@ interface MeetParticipant {
     readonly displayName: string;
     readonly avatarUrl: string | null;
     readonly role: ParticipantRole;
+    /** Where they stand with the meeting (server-minted); null when the server sent none. */
+    readonly standing?: ParticipantStanding | null;
     /**
      * Whether the SERVER granted this participant the power to start a recording
      * (MRI-A11). It is not `role === "host"`: a meeting whose recording policy is
@@ -800,6 +806,6 @@ interface MeetingActivities {
  * The same `GET /v1/meet/collab` the room reads on join; a refusal is returned as data,
  * so the record still renders everything else.
  */
-declare function loadMeetingActivities(api: MeetApi, meetingId: string, roomToken?: string | null): Promise<MeetingActivities>;
+declare function loadMeetingActivities(api: MeetApi, meetingId: string, meetingPass?: string | null): Promise<MeetingActivities>;
 
-export { type NoteTakerState as $, type AccessTokenSource as A, type MeetPollState as B, type CollabPanel as C, type MeetQuestion as D, EMPTY_COLLAB as E, FILE_SESSION_PATH as F, type MeetQuestionState as G, type MeetStroke as H, type InviteeInput as I, type JsonObject as J, type MeetingActivities as K, type LobbyEntry as L, type MeetingRecord as M, type MeetingAttendee as N, type OrganizationId as O, type ParticipantIdentity as P, type MeetingChanges as Q, type RoomName as R, type StageLayout as S, type TranscriptSource as T, type UserId as U, type MeetingInvitee as V, type WrapUpAnnouncement as W, type MeetingKind as X, type MeetingNoteKind as Y, type MeetingOccurrence as Z, type MeetingSettings as _, type MeetParticipant as a, ORGANIZATION_HEADER as a0, type OccurrenceOverride as a1, type OccurrenceState as a2, ROLE_RANK as a3, type RecordingPolicy as a4, type RecordingRecord as a5, type RecordingState as a6, type RoomPhase as a7, type RsvpAnswer as a8, type RsvpInvitation as a9, type RsvpState as aa, type TranscriptSegment as ab, type UpcomingOccurrence as ac, applyCollabPacket as ad, asCallId as ae, asMeetingId as af, asOrganizationId as ag, asParticipantIdentity as ah, asRoomName as ai, asUserId as aj, assignedRoom as ak, autoAssign as al, breakoutRemainingMs as am, collabFromState as an, createMeetApi as ao, defaultCaptionLanguage as ap, fileDownloadPath as aq, isGuest as ar, isHostRole as as, loadMeetingActivities as at, withItem as au, type RecordingSource as av, type MeetApi as b, type MeetIdentity as c, type CallInvite as d, type ParticipantRole as e, type CallMode as f, type MeetingNote as g, type MeetingId as h, type CollabSnapshot as i, type AdmissionState as j, CAPTION_LANGUAGES as k, type CallId as l, type CallState as m, type CallablePerson as n, type ConnectionQuality as o, type InviteeRole as p, type JsonValue as q, type MeetApiOptions as r, type MeetApiRequest as s, type MeetBreakoutBroadcast as t, type MeetBreakoutPlan as u, type MeetBreakoutRoom as v, type MeetCollabSettings as w, type MeetFileMedia as x, type MeetPoll as y, type MeetPollOption as z };
+export { type NoteTakerState as $, type AccessTokenSource as A, type MeetPollState as B, type CollabPanel as C, type MeetQuestion as D, EMPTY_COLLAB as E, FILE_SESSION_PATH as F, type MeetQuestionState as G, type MeetStroke as H, type InviteeInput as I, type JsonObject as J, type MeetingActivities as K, type LobbyEntry as L, type MeetingRecord as M, type MeetingAttendee as N, type OrganizationId as O, type ParticipantIdentity as P, type MeetingChanges as Q, type RoomName as R, type StageLayout as S, type TranscriptSource as T, type UserId as U, type MeetingInvitee as V, type WrapUpAnnouncement as W, type MeetingKind as X, type MeetingNoteKind as Y, type MeetingOccurrence as Z, type MeetingSettings as _, type MeetParticipant as a, ORGANIZATION_HEADER as a0, type OccurrenceOverride as a1, type OccurrenceState as a2, type ParticipantStanding as a3, ROLE_RANK as a4, type RecordingPolicy as a5, type RecordingRecord as a6, type RecordingState as a7, type RoomPhase as a8, type RsvpAnswer as a9, type RsvpInvitation as aa, type RsvpState as ab, type TranscriptSegment as ac, type UpcomingOccurrence as ad, applyCollabPacket as ae, asCallId as af, asMeetingId as ag, asOrganizationId as ah, asParticipantIdentity as ai, asRoomName as aj, asUserId as ak, assignedRoom as al, autoAssign as am, breakoutRemainingMs as an, collabFromState as ao, createMeetApi as ap, defaultCaptionLanguage as aq, fileDownloadPath as ar, isGuest as as, isHostRole as at, isLinkFollower as au, loadMeetingActivities as av, withItem as aw, type RecordingSource as ax, type MeetApi as b, type MeetIdentity as c, type CallInvite as d, type ParticipantRole as e, type CallMode as f, type MeetingNote as g, type MeetingId as h, type CollabSnapshot as i, type AdmissionState as j, CAPTION_LANGUAGES as k, type CallId as l, type CallState as m, type CallablePerson as n, type ConnectionQuality as o, type InviteeRole as p, type JsonValue as q, type MeetApiOptions as r, type MeetApiRequest as s, type MeetBreakoutBroadcast as t, type MeetBreakoutPlan as u, type MeetBreakoutRoom as v, type MeetCollabSettings as w, type MeetFileMedia as x, type MeetPoll as y, type MeetPollOption as z };

package/dist/{components-BOUmOiPj.d.cts → components-BeCQ9h0h.d.cts}

@@ -1,5 +1,5 @@
 import { ReactNode } from 'react';
-import { M as MeetingRecord, P as ParticipantIdentity, R as RoomName, a as MeetParticipant } from './collab-Bss-_Jfp.cjs';
+import { M as MeetingRecord, P as ParticipantIdentity, R as RoomName, a as MeetParticipant } from './collab-B6scmSST.cjs';
 
 /**
  * THE PRODUCT UI (R6/R7). Not a headless kernel with a note telling the host to

package/dist/{components-BmgstFx_.d.ts → components-D0TqyeiY.d.ts}

@@ -1,5 +1,5 @@
 import { ReactNode } from 'react';
-import { M as MeetingRecord, P as ParticipantIdentity, R as RoomName, a as MeetParticipant } from './collab-Bss-_Jfp.js';
+import { M as MeetingRecord, P as ParticipantIdentity, R as RoomName, a as MeetParticipant } from './collab-B6scmSST.js';
 
 /**
  * THE PRODUCT UI (R6/R7). Not a headless kernel with a note telling the host to

package/dist/core.cjs

@@ -50,6 +50,7 @@ __export(core_exports, {
   LISTEN_ONLY_NOTICE: () => LISTEN_ONLY_NOTICE,
   MEETING_INVITE_KIND: () => MEETING_INVITE_KIND,
   MEETING_INVITE_VERSION: () => MEETING_INVITE_VERSION,
+  MEETING_PASS_HEADER: () => MEETING_PASS_HEADER,
   MEETING_RECORD_GRACE_MS: () => MEETING_RECORD_GRACE_MS,
   MEET_ANSWER_CONTEXT_EVENT: () => MEET_ANSWER_CONTEXT_EVENT,
   MEET_ANSWER_EVENTS: () => MEET_ANSWER_EVENTS,
@@ -65,12 +66,12 @@ __export(core_exports, {
   ORGANIZATION_HEADER: () => ORGANIZATION_HEADER,
   PARTICIPANT_CAN_RECORD_ATTRIBUTE: () => PARTICIPANT_CAN_RECORD_ATTRIBUTE,
   PARTICIPANT_ROLE_ATTRIBUTE: () => PARTICIPANT_ROLE_ATTRIBUTE,
+  PARTICIPANT_STANDING_ATTRIBUTE: () => PARTICIPANT_STANDING_ATTRIBUTE,
   REACTION_TTL_MS: () => REACTION_TTL_MS,
   REFUSED_ABSENCE: () => REFUSED_ABSENCE,
   ROLE_RANK: () => ROLE_RANK,
   ROOM_EVENTS: () => ROOM_EVENTS,
   ROOM_EVENT_PREFIX: () => ROOM_EVENT_PREFIX,
-  ROOM_TOKEN_HEADER: () => ROOM_TOKEN_HEADER,
   RPCS: () => RPCS,
   TABLES: () => TABLES,
   TRANSCRIPTION_ATTRIBUTES: () => TRANSCRIPTION_ATTRIBUTES,
@@ -141,6 +142,7 @@ __export(core_exports, {
   isGuest: () => isGuest,
   isGuestIdentity: () => isGuestIdentity,
   isHostRole: () => isHostRole,
+  isLinkFollower: () => isLinkFollower,
   isListenOnly: () => isListenOnly,
   isNoteTaker: () => isNoteTaker,
   isRealName: () => isRealName,
@@ -159,6 +161,7 @@ __export(core_exports, {
   meetingInviteAction: () => meetingInviteAction,
   meetingLength: () => meetingLength,
   meetingLink: () => meetingLink,
+  meetingPassHeaders: () => meetingPassHeaders,
   meetingPath: () => meetingPath,
   meetingSlug: () => meetingSlug,
   meetingTopic: () => meetingTopic,
@@ -202,6 +205,7 @@ __export(core_exports, {
   recordingLabel: () => recordingLabel,
   recordingNotice: () => recordingNotice,
   recordingOffsetMs: () => recordingOffsetMs,
+  rememberedMeetingPass: () => rememberedMeetingPass,
   roleOf: () => roleOf,
   roomTopic: () => roomTopic,
   rootAttributes: () => rootAttributes,
@@ -236,11 +240,18 @@ var MeetError = class extends Error {
   /** What to DO. Rendered to the user for the device codes. */
   remedy;
   cause;
-  constructor(code, message, remedy, cause) {
+  /**
+   * The join gate's reason code (CORE-DESIGN §2.5) when the server named one: `not_found`,
+   * `cancelled`, `ended`, `locked`, `removed`, `lobby_rejects`, `not_invited`… The phase
+   * renders `refused:<reason>` (or `ended`) from it — never from the HTTP status.
+   */
+  reason;
+  constructor(code, message, remedy, cause, reason) {
     super(message);
     this.name = "MeetError";
     this.code = code;
     this.remedy = remedy;
+    this.reason = reason ?? null;
     if (cause !== void 0) this.cause = cause;
   }
   /** True when retrying after the host re-establishes a session is the fix. */
@@ -458,6 +469,17 @@ function createWebRoomTokenStorage(onDiagnostic) {
     }
   };
 }
+function rememberedMeetingPass(roomName, storage = createWebRoomTokenStorage()) {
+  const raw = storage.read(roomName);
+  if (raw === null) return null;
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed.standing !== "guest") return null;
+    return typeof parsed.meetingPass === "string" && parsed.meetingPass.length > 0 ? parsed.meetingPass : null;
+  } catch {
+    return null;
+  }
+}
 var MEET_ROUTES = {
   token: "/api/v1/meet/token",
   recordingStart: "/api/v1/meet/recording/start",
@@ -471,7 +493,7 @@ var MEET_ROUTES = {
   /**
    * THE POST-MEETING RECORD FOR A READER WITH NO DATABASE (MRF-1). A `GET`,
    * authorized by the room token this device already holds, carried in the
-   * `x-meet-room-token` header — never a query parameter, because a bearer
+   * `x-meet-pass` header — never a query parameter, because a bearer
    * credential in a URL lands in access logs, referrers and history.
    */
   record: "/api/v1/meet/record",
@@ -479,7 +501,7 @@ var MEET_ROUTES = {
   recordAccess: "/api/v1/meet/record/access",
   /**
    * KEEP YOUR NOTES (2026-10-01): a guest who just created an account presents
-   * their kept pass in `x-meet-room-token` with their new session, and the
+   * their kept pass in `x-meet-pass` with their new session, and the
    * meeting they attended becomes theirs to read. Idempotent; never a grant.
    */
   claim: "/api/v1/meet/claim",
@@ -501,7 +523,7 @@ var MEET_ROUTES = {
    * Meet wave 2: EVERY in-meeting host power (mute, stop video, mute all, ask to
    * unmute, spotlight, lower hands, co-host, hand over, rename, remove, report).
    * Decided by the server from the meeting itself; a guest's pass rides
-   * `x-meet-room-token`.
+   * `x-meet-pass`.
    */
   moderate: "/api/v1/meet/moderate",
   /** Meet wave 2: the SAVED chat — `POST` sends to everyone, `GET ?meeting_id=` reads history. */
@@ -517,7 +539,11 @@ var MEET_ROUTES = {
 function meetingPath(template, meetingId) {
   return template.replace("{meeting_id}", encodeURIComponent(meetingId));
 }
-var ROOM_TOKEN_HEADER = "x-meet-room-token";
+var MEETING_PASS_HEADER = "x-meet-pass";
+function meetingPassHeaders(token) {
+  const pass = token?.meetingPass ?? null;
+  return pass !== null && pass.length > 0 ? { [MEETING_PASS_HEADER]: pass } : {};
+}
 var REFRESH_RATIO = 0.8;
 function readString(source, key) {
   const value = source[key];
@@ -527,7 +553,12 @@ function readBoolean(source, key, fallback) {
   const value = source[key];
   return typeof value === "boolean" ? value : fallback;
 }
-var TOKEN_ROLES = ["host", "cohost", "participant", "guest"];
+var TOKEN_STANDINGS = ["member", "invited", "outsider", "guest"];
+function readStanding(source, key) {
+  const value = source[key];
+  return TOKEN_STANDINGS.includes(value) ? value : null;
+}
+var TOKEN_ROLES = ["host", "cohost", "presenter", "participant", "viewer"];
 function readRole(source, key) {
   const value = source[key];
   return TOKEN_ROLES.includes(value) ? value : null;
@@ -570,7 +601,12 @@ function parseRoomToken(body, roomName) {
     // Deriving the role from what DID arrive keeps a host a host against a
     // server that has not landed MRI-A11 — and never invents a host from
     // silence, because both fallbacks below grant nothing.
-    role: readRole(payload, "role") ?? (isHost ? "host" : identity.startsWith("guest:") ? "guest" : "participant"),
+    // A word this package does not know grants nothing: `participant`, never a host.
+    role: readRole(payload, "role") ?? (isHost ? "host" : "participant"),
+    standing: readStanding(payload, "standing"),
+    meetingPass: readString(payload, "meeting_pass"),
+    meetingPassExpiresAt: readString(payload, "meeting_pass_expires_at"),
+    sessionId: readString(payload, "session_id"),
     lobby: readBoolean(payload, "lobby", false),
     breakoutRoomId: readString(payload, "breakout_room_id") ?? null
   };
@@ -581,7 +617,7 @@ function createTokenClient(options) {
   const storage = options.storage;
   function remember(token) {
     if (storage === void 0) return;
-    if (!token.identity.startsWith("guest:")) return;
+    if (token.standing !== "guest") return;
     storage.write(token.roomName, JSON.stringify(token));
   }
   function recall(roomName) {
@@ -639,22 +675,28 @@ function createTokenClient(options) {
       throw new MeetError(
         "forbidden",
         said?.message ?? "You can't join this meeting.",
-        said?.remedy ?? "Ask the person who shared the link to let you in, then open the link again."
+        said?.remedy ?? "Ask the person who shared the link to let you in, then open the link again.",
+        void 0,
+        said?.reason ?? null
       );
     }
     if (response.status === 404) {
       throw new MeetError(
         "not-found",
         "meet.token: no such meeting",
-        "The link is wrong or the meeting was deleted. Show the 'meeting not found' screen; a durable link that 404s is never a retry."
+        "The link is wrong or the meeting was deleted. Show the 'meeting not found' screen; a durable link that 404s is never a retry.",
+        void 0,
+        "not_found"
       );
     }
     if (response.status === 410) {
-      const reason = (await serverSentence(response))?.message ?? "This meeting was cancelled.";
+      const said = await serverSentence(response);
       throw new MeetError(
         "cancelled",
-        reason,
-        "Nobody can join a cancelled meeting. Show the cancelled screen with this sentence; ask the host to schedule a new one."
+        said?.message ?? "This meeting was cancelled.",
+        "Nobody can join a cancelled meeting. Show the cancelled screen with this sentence; ask the host to schedule a new one.",
+        void 0,
+        said?.reason ?? "cancelled"
       );
     }
     if (response.status === 423) {
@@ -662,7 +704,9 @@ function createTokenClient(options) {
       throw new MeetError(
         "room-locked",
         said?.message ?? "The meeting is locked.",
-        said?.remedy ?? "The host locked the room. Ask them to unlock it, then join again."
+        said?.remedy ?? "The host locked the room. Ask them to unlock it, then join again.",
+        void 0,
+        said?.reason ?? "locked"
       );
     }
     if (response.status === 503) {
@@ -731,6 +775,10 @@ function placeholder(roomName) {
     canRecord: false,
     isHost: false,
     role: "participant",
+    standing: null,
+    meetingPass: null,
+    meetingPassExpiresAt: null,
+    sessionId: null,
     lobby: false,
     breakoutRoomId: null
   };
@@ -743,7 +791,8 @@ async function serverSentence(response) {
     const message = typeof source.user_message === "string" && source.user_message.trim() !== "" ? source.user_message : typeof source.message === "string" && source.message.trim() !== "" ? source.message : null;
     if (message === null) return null;
     const remedy = typeof source.remedy === "string" && source.remedy.trim() !== "" ? source.remedy : void 0;
-    return { message, remedy };
+    const reason = typeof source.reason === "string" && source.reason !== "" ? source.reason : null;
+    return { message, remedy, reason };
   } catch {
     return null;
   }
@@ -932,7 +981,7 @@ function createMeetAi(options) {
         operation: "meet.ai.ask",
         // A GUEST MAY ASK. The server decides whether it can answer.
         requireAuth: false,
-        ...roomToken !== null ? { headers: { [ROOM_TOKEN_HEADER]: roomToken } } : {},
+        ...roomToken !== null ? { headers: { [MEETING_PASS_HEADER]: roomToken } } : {},
         ...signal !== void 0 ? { signal } : {}
       });
       if (!response.ok) {
@@ -1192,11 +1241,15 @@ function isGuest(identity) {
   return identity.userId === null;
 }
 var ROLE_RANK = {
-  host: 3,
-  cohost: 2,
+  host: 4,
+  cohost: 3,
+  presenter: 2,
   participant: 1,
-  guest: 0
+  viewer: 0
 };
+function isLinkFollower(standing) {
+  return standing === "guest" || standing === "outsider";
+}
 function isHostRole(role) {
   return role === "host" || role === "cohost";
 }
@@ -1749,15 +1802,15 @@ var CAPTION_LANGUAGES = [
   { tag: "id", name: "Indonesian" },
   { tag: "sv", name: "Swedish" }
 ];
-async function loadMeetingActivities(api, meetingId, roomToken = null) {
+async function loadMeetingActivities(api, meetingId, meetingPass = null) {
   let response;
   try {
     response = await api.request({
       path: `${MEET_ROUTES.collab}?meeting_id=${encodeURIComponent(meetingId)}`,
       method: "GET",
       operation: "meet.loadMeetingActivities",
-      requireAuth: roomToken === null,
-      ...roomToken !== null ? { headers: { [ROOM_TOKEN_HEADER]: roomToken } } : {}
+      requireAuth: meetingPass === null,
+      ...meetingPass !== null ? { headers: { [MEETING_PASS_HEADER]: meetingPass } } : {}
     });
   } catch (error) {
     return {
@@ -1814,7 +1867,6 @@ var RPCS = {
   meetingBySlug: "meet_meeting_by_slug",
   admit: "meet_admit_participant",
   setLock: "meet_set_lock",
-  endMeeting: "meet_end_meeting",
   recordConsent: "meet_record_consent",
   /*
    * ── MEET WAVE 1 — management (0.8). Every write is a SECURITY DEFINER door
@@ -2228,7 +2280,7 @@ function createMeetRepository(options) {
     const operation = "meet.projectAttendee";
     const role = text(row, "role");
     const admission = text(row, "admission_state");
-    const known = ["host", "cohost", "participant", "guest"];
+    const known = ["host", "cohost", "presenter", "participant", "viewer"];
     const states = ["knocking", "admitted", "denied", "removed"];
     const userId = text(row, "participant_user_id");
     const identity = requireText(row, "identity", operation);
@@ -2543,16 +2595,6 @@ function createMeetRepository(options) {
       );
       return projectMeeting(row);
     },
-    async endMeeting(meetingId, byUserId) {
-      const row = await guard(
-        "meet.endMeeting",
-        () => db.rpc(RPCS.endMeeting, {
-          p_meeting_id: meetingId,
-          p_by_user_id: byUserId
-        })
-      );
-      return projectMeeting(row);
-    },
     async transcript(meetingId, limit = 1e3) {
       const response = await db.from(TABLES.transcripts).select(SEGMENT_COLUMNS).eq("meeting_id", meetingId).order("started_at", { ascending: true }).order("id", { ascending: true }).limit(limit);
       if (response.error !== null) throw normalizeMeetError(response.error, "meet.transcript");
@@ -2881,6 +2923,7 @@ var DEFAULT_EFFECTS = {
 };
 var NO_GRANTS = {
   role: "participant",
+  standing: null,
   canRecord: false,
   canPublish: false,
   canSubscribe: false
@@ -2927,6 +2970,11 @@ function effectiveRole(snapshot) {
   const fromToken = snapshot.grants.role;
   return ROLE_RANK[fromRoster] >= ROLE_RANK[fromToken] ? fromRoster : fromToken;
 }
+function effectiveStanding(snapshot) {
+  if (snapshot.grants.standing != null) return snapshot.grants.standing;
+  const me = snapshot.participants.find((p) => p.identity === snapshot.localIdentity);
+  return me?.standing ?? null;
+}
 var REACTION_TTL_MS = 5e3;
 var CHAT_LIMIT = 200;
 function createMeetStore(initial = {}) {
@@ -3419,7 +3467,7 @@ function applyModeration(store, payload, now) {
       return ignored(`a moderation kind this version does not know: ${String(kind)}`);
   }
 }
-var ROLES = ["host", "cohost", "participant", "guest"];
+var ROLES = ["host", "cohost", "presenter", "participant", "viewer"];
 
 // src/core/devices.ts
 var KINDS = ["audioinput", "videoinput", "audiooutput"];
@@ -4614,7 +4662,6 @@ function kindOf(person) {
   if (person.isAgent) return "assistant";
   if (person.role === "host") return "host";
   if (person.role === "cohost") return "cohost";
-  if (person.role === "guest") return person.userId !== null ? "signed-in guest" : "guest";
   if (person.userId === null) return "guest";
   return "member";
 }
@@ -4899,7 +4946,7 @@ function meetingLength(meeting) {
   if (start === null || end === null || end < start) return null;
   return (0, import_format.formatDurationMs)(end - start, { style: "long" });
 }
-async function loadMeetingChat(api, meetingId, roomToken = null) {
+async function loadMeetingChat(api, meetingId, meetingPass = null) {
   const operation = "meet.loadMeetingChat";
   let response;
   try {
@@ -4907,8 +4954,8 @@ async function loadMeetingChat(api, meetingId, roomToken = null) {
       path: `${MEET_ROUTES.chat}?meeting_id=${encodeURIComponent(meetingId)}`,
       method: "GET",
       operation,
-      requireAuth: roomToken === null,
-      ...roomToken !== null ? { headers: { [ROOM_TOKEN_HEADER]: roomToken } } : {}
+      requireAuth: meetingPass === null,
+      ...meetingPass !== null ? { headers: { [MEETING_PASS_HEADER]: meetingPass } } : {}
     });
   } catch (error) {
     return {
@@ -5052,7 +5099,12 @@ async function pushMeetingToGoogleCalendar(api, meetingId, target) {
 // src/core/room.ts
 var PARTICIPANT_ROLE_ATTRIBUTE = "matrx.participant.role";
 var PARTICIPANT_CAN_RECORD_ATTRIBUTE = "matrx.participant.can_record";
-var KNOWN_ROLES = ["host", "cohost", "participant", "guest"];
+var PARTICIPANT_STANDING_ATTRIBUTE = "matrx.participant.standing";
+var KNOWN_STANDINGS = ["member", "invited", "outsider", "guest"];
+function parseStanding(value) {
+  return KNOWN_STANDINGS.includes(value) ? value : null;
+}
+var KNOWN_ROLES = ["host", "cohost", "presenter", "participant", "viewer"];
 function parseRole(value) {
   return KNOWN_ROLES.includes(value) ? value : "participant";
 }
@@ -5086,6 +5138,9 @@ function projectParticipant(driver, joinedAt) {
     // ATTRIBUTE FIRST, metadata second — see the constants above. Both are the
     // server's; the attribute is simply the one that always arrives.
     role: parseRole(driver.attributes[PARTICIPANT_ROLE_ATTRIBUTE] ?? metadata.role),
+    standing: parseStanding(
+      driver.attributes[PARTICIPANT_STANDING_ATTRIBUTE] ?? metadata.standing
+    ),
     canRecord: driver.attributes[PARTICIPANT_CAN_RECORD_ATTRIBUTE] === "true" || metadata.can_record === true,
     isLocal: driver.isLocal,
     isAgent: metadata.is_agent === true,
@@ -5158,7 +5213,7 @@ function createRoomEngine(options) {
     const normalized = normalizeMeetError(error, operation);
     store.patch({
       phase: "failed",
-      failure: { message: normalized.message, remedy: normalized.remedy }
+      failure: { message: normalized.message, remedy: normalized.remedy, reason: normalized.reason }
     });
     report(
       normalized.code === "session-unavailable" ? "warn" : "error",
@@ -5362,6 +5417,7 @@ function createRoomEngine(options) {
       breakoutRoomId: token.breakoutRoomId ?? null,
       grants: {
         role: token.role,
+        standing: token.standing,
         canRecord: token.canRecord,
         canPublish: token.canPublish,
         canSubscribe: token.canSubscribe
@@ -5707,7 +5763,7 @@ function createInRoomClient(options) {
   }
   function headers() {
     const token = options.resolveRoomToken();
-    return token === null ? void 0 : { [ROOM_TOKEN_HEADER]: token };
+    return token === null ? void 0 : { [MEETING_PASS_HEADER]: token };
   }
   function refusal2(response, operation, remedy) {
     return refusalFromResponse(response, operation, remedy);
@@ -6188,7 +6244,7 @@ function summarizeMeetingRecordRestrictions(restrictions) {
 async function loadGuestMeetingRecord(args) {
   const { api, repository, meetingId, meeting, roomToken } = args;
   const session = args.session === true;
-  if (roomToken === null && !session) {
+  if (roomToken?.meetingPass == null && !session) {
     return refusedBundle(
       meeting,
       "This meeting's record is only readable by the people who were in it.",
@@ -6198,12 +6254,12 @@ async function loadGuestMeetingRecord(args) {
   let response;
   try {
     response = await api.request({
-      path: `${MEET_ROUTES.record}?meeting_id=${encodeURIComponent(meetingId)}`,
+      path: `${MEET_ROUTES.record}?meeting_id=${encodeURIComponent(meetingId)}` + (args.sessionId ? `&session_id=${encodeURIComponent(args.sessionId)}` : ""),
       method: "GET",
       // A GUEST HAS NO SESSION AND IS STILL A FIRST-CLASS READER (D6).
       requireAuth: session,
       operation: "meet.record",
-      headers: roomToken === null ? {} : { [ROOM_TOKEN_HEADER]: roomToken.token }
+      headers: roomToken?.meetingPass != null ? { [MEETING_PASS_HEADER]: roomToken.meetingPass } : {}
     });
   } catch (error) {
     return refusedBundle(
@@ -6591,6 +6647,10 @@ function takeMoveRequest(store) {
 }
 
 // src/core/observation.ts
+function observedRole(role, standing) {
+  if (role === "host" || role === "cohost") return role;
+  return isLinkFollower(standing) ? "guest" : "participant";
+}
 function observedDevice(track) {
   if (track.enabled) return "on";
   const refused = track.unavailable;
@@ -6618,6 +6678,8 @@ function observedPhase(input) {
   const raw = snapshot.phase;
   const live = raw === "connected" || raw === "reconnecting";
   if (endedRecord(snapshot, input.meeting ?? null) && !live) return "ended";
+  const reason = raw === "failed" ? snapshot.failure?.reason ?? null : null;
+  if (reason !== null) return reason === "ended" ? "ended" : `refused:${reason}`;
   switch (raw) {
     case "idle":
     case "failed":
@@ -6638,12 +6700,13 @@ function observe(input) {
   const { snapshot } = input;
   const phase = observedPhase(input);
   const inCall = phase === "in_call";
-  const role = inCall && snapshot !== null ? effectiveRole(snapshot) : "none";
-  const canAdmit = role !== "none" && ADMITTER_ROLES.has(role);
+  const actual = inCall && snapshot !== null ? effectiveRole(snapshot) : "none";
+  const canAdmit = actual !== "none" && ADMITTER_ROLES.has(actual);
+  const role = actual === "none" || snapshot === null ? "none" : observedRole(actual, effectiveStanding(snapshot));
   const deviceInPlay = phase === "joining" || inCall;
   return {
     phase,
-    reason: null,
+    reason: phase.startsWith("refused:") ? phase.slice("refused:".length) : null,
     role,
     connection: snapshot?.phase === "reconnecting" ? "reconnecting" : "stable",
     hostPresent: inCall && snapshot !== null ? snapshot.participants.some((p) => ADMITTER_ROLES.has(p.role)) : null,
@@ -6709,7 +6772,7 @@ function participantAttributes(p) {
     "data-meet-participant": "",
     "data-meet-participant-identity": p.identity,
     "data-meet-participant-name": p.displayName,
-    "data-meet-participant-role": p.role,
+    "data-meet-participant-role": observedRole(p.role, p.standing),
     "data-meet-participant-self": String(p.isLocal)
   };
   const quality = observedQuality(p.quality);