v0.18.9: Sensitive meetings + a real consent gate
Sensitive meetings: a first-class no-capture mode. Some conversations should produce notes but never audio. Designate a meeting sensitive (palette, tray, or minutes sensitive start) and Minutes records nothing: no recorder, no microphone, no audio objects constructed at all. You still get a real meeting file, built from timestamped markers you type during the conversation and a guided debrief at stop, stamped capture: none and sensitivity: restricted so the agent-policy layers coming in a future release can enforce it. A crashed session can never wedge recording (stale sessions self-recover), and a sensitive session and a recording cannot run at the same time, in either order. (#306)
Require mode now truly gates desktop recording. With [consent] mode = "require", every desktop entry point (the Start button, command palette, tray, hotkeys, and desktop automation) routes to the same blocking confirmation before any capture starts. The dialog frames it honestly: confirm everyone will be told, with your disclosure script on hand for when the moment comes. Cancel leaves zero artifacts. Previously the palette silently did nothing under Require and automation hard-errored. (#306)
Calendar permission status tells the truth. macOS can silently downgrade calendar access to Add-Only (it happened to us during an OS migration), which kills meeting reminders while every surface claims healthy. The readiness panel and tray now report the observed access state, name the consequence, and link the exact System Settings fix. An empty meeting list caused by missing permission is no longer indistinguishable from a free afternoon. (#300, #301)
In-window Cmd+K. Plain Cmd+K opens the command palette when the Minutes window has focus. The global binding stays Cmd+Shift+K so it never shadows your other apps. (#308)
Sensitive meeting cards are useful. Opening a no-capture meeting shows a purposeful card: the no-audio-by-design status, markers, and a one-click Run debrief that hands the meeting to your assistant with the debrief prompt. (#308)
Debrief lifecycle. Debriefs now have terminal states (complete, not-applicable), and the /minutes-debrief skill knows the no-capture path explicitly: debrief from memory with your markers as joggers, written back into the meeting file, with restricted content never propagating beyond it. (#310)
Fixes. CLI/MCP version parsing respects semver prerelease and build-metadata suffixes, so 0.18.9-rc1 no longer masquerades as the GA release (#185, #304). The repo's install steps use rm-then-copy, so rebuilding the CLI can never invalidate the running binary's code signature and SIGKILL every new launch (#303). Three parallel-test races fixed. A new Using Minutes user guide covers the desktop app end to end (#307).
Install: brew install silverstein/tap/minutes or cargo install minutes-cli, or grab the DMG below. npx minutes-mcp for the MCP server + dashboard.