🐛(backend) acknowledge unknown LiveKit webhook events instead of 422

Around 0.76% of incoming LiveKit webhooks were being flagged as
unprocessable and returned a 422, even though LiveKit was sending
legitimate data — just with event types we do not handle. This
inflated error metrics and made real webhook issues harder to spot.

Return a 200 for these webhooks instead. When a new, unhandled
event type shows up, log a warning so we can decide whether it is
worth adding explicit handling.

.github/workflows/ci.yml

@@ -252,13 +252,13 @@ jobs:
 
       - name: Start MinIO
         run: |
-          docker pull quay.io/minio/minio
+          docker pull minio/minio
           docker run -d --name minio \
             -p 9000:9000 \
             -e "MINIO_ACCESS_KEY=meet" \
             -e "MINIO_SECRET_KEY=password" \
             -v /data/media:/data \
-            quay.io/minio/minio server --console-address :9001 /data
+            minio/minio server --console-address :9001 /data
 
       # Tool to wait for a service to be ready
       - name: Install Dockerize

CHANGELOG.md

@@ -8,29 +8,10 @@ and this project adheres to
 
 ## [Unreleased]
 
-### Added
-
-- ✨(backend) make the LiveKit default video codec configurable
-
-### Changed
-
-- 📈(frontend) include LiveKit SIDs in the connection analytics event
-- 🔇(backend) silence expected 401 warnings on /me
-- 🔇(backend) silence noisy request summary info logs
-- ⚡️(frontend) defer loading the Crisp script until idle
-- ⬆️(frontend) upgrade react-i18next from 17.0.10 to 17.0.12
-- ⬆️(frontend) upgrade posthog-js from 1.414.0 to 1.418.10
-- ⬆️(addons) upgrade i18next from 26.3.6 to 26.4.0
-- ⬆️(frontend) upgrade humanize-duration from 3.33.2 to 3.34.1
-- ♻️(backend) delete files synchronously
-
 ### Fixed
 
-- 🐛(backend) remove the temporary upload object when a file is deleted
 - 🐛(backend) acknowledge unknown LiveKit webhook events instead of 422
 - 🔒️(backend) enforce display name setting on rename API
-- 🔒️(backend) reject inactive users in resource server backend
-- 🐛(frontend) fix file permissions in the Docker image
 
 ## [1.31.0] - 2026-09-08
 

compose.yml

@@ -17,7 +17,7 @@ services:
 
   minio:
     user: ${DOCKER_USER:-1000}
-    image: quay.io/minio/minio
+    image: minio/minio
     environment:
       - MINIO_ROOT_USER=meet
       - MINIO_ROOT_PASSWORD=password
@@ -35,7 +35,7 @@ services:
       - ./data/media:/data
 
   createbuckets:
-    image: quay.io/minio/mc
+    image: minio/mc
     depends_on:
       minio:
         condition: service_healthy

src/addons/outlook/package-lock.json

@@ -10,7 +10,7 @@
       "license": "MIT",
       "dependencies": {
         "core-js": "3.50.0",
-        "i18next": "26.4.0",
+        "i18next": "26.3.6",
         "i18next-browser-languagedetector": "8.2.1",
         "regenerator-runtime": "0.14.1"
       },
@@ -9367,9 +9367,9 @@
       }
     },
     "node_modules/i18next": {
-      "version": "26.4.0",
-      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.4.0.tgz",
-      "integrity": "sha512-rsmK5bFqsD1AetSFSIa43wtNR4WpvvH4p0tLEsTxkC7QTrfdFm06nbQ95bh8Og4wwaCnUEcm9DVYL2cgxitiQg==",
+      "version": "26.3.6",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.3.6.tgz",
+      "integrity": "sha512-Bu5Z2nAXgfVyM8xvW3jk9EKRIuX37PudsrBViThNFx7CR7aaYTpP01cxNB/E4c4UUzTDiAZRstEhsRfPOL/8xA==",
       "funding": [
         {
           "type": "individual",

src/addons/outlook/package.json

@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "core-js": "3.50.0",
-    "i18next": "26.4.0",
+    "i18next": "26.3.6",
     "i18next-browser-languagedetector": "8.2.1",
     "regenerator-runtime": "0.14.1"
   },

src/backend/core/admin.py

@@ -3,25 +3,48 @@
 from django import forms
 from django.contrib import admin, messages
 from django.contrib.auth import admin as auth_admin
+from django.db import transaction
 from django.utils.html import format_html
 from django.utils.translation import gettext_lazy as _
 
 from core.recording.event import notification
 
 from . import models
+from .tasks.file import process_file_deletion
 from .utils import generate_download_s3_url
 
 
+def hard_delete_file(file):
+    """Hard delete a file, soft deleting it first when needed."""
+    if file.deleted_at is None:
+        file.soft_delete()
+    file.hard_delete()
+    transaction.on_commit(lambda: process_file_deletion.delay(file.id))
+
+
+class FileInlineFormSet(forms.BaseInlineFormSet):
+    """Inline formset overriding delete behavior for files."""
+
+    def delete_existing(self, obj, commit=True):
+        """Hard delete files instead of calling model.delete()."""
+        hard_delete_file(obj)
+
+
 class FileInline(admin.TabularInline):
     """Inline class for the File model."""
 
     model = models.File
+    formset = FileInlineFormSet
     fk_name = "creator"
     extra = 0
     fields = ("id", "title", "type", "upload_state", "created_at")
     readonly_fields = ("id", "created_at", "upload_state", "type")
     show_change_link = True
 
+    def get_queryset(self, request):
+        """Hide hard deleted files in the inline."""
+        return super().get_queryset(request).filter(hard_deleted_at__isnull=True)
+
 
 @admin.register(models.User)
 class UserAdmin(auth_admin.UserAdmin):
@@ -123,6 +146,7 @@ class FileAdmin(admin.ModelAdmin):
         "creator",
         "upload_state",
         "deleted_at",
+        "hard_deleted_at",
         "created_at",
         "updated_at",
     )
@@ -132,6 +156,7 @@ class FileAdmin(admin.ModelAdmin):
         "created_at",
         "updated_at",
         "deleted_at",
+        "hard_deleted_at",
     )
     search_fields = (
         "id",
@@ -149,6 +174,7 @@ class FileAdmin(admin.ModelAdmin):
         "created_at",
         "updated_at",
         "deleted_at",
+        "hard_deleted_at",
         "description",
         "malware_detection_info",
         "is_ready",
@@ -187,7 +213,15 @@ class FileAdmin(admin.ModelAdmin):
                 )
             },
         ),
-        (_("Deletion"), {"fields": ("deleted_at",)}),
+        (
+            _("Deletion"),
+            {
+                "fields": (
+                    "deleted_at",
+                    "hard_deleted_at",
+                )
+            },
+        ),
         (
             _("Derived info"),
             {
@@ -214,10 +248,18 @@ class FileAdmin(admin.ModelAdmin):
             '<a href="{}" target="_blank" rel="noopener noreferrer">Open File</a>', url
         )
 
+    def get_queryset(self, request):
+        """Hide hard deleted files in admin listing and lookups."""
+        return super().get_queryset(request).filter(hard_deleted_at__isnull=True)
+
+    def delete_model(self, request, obj):
+        """Hard delete instead of calling model.delete()."""
+        hard_delete_file(obj)
+
     def delete_queryset(self, request, queryset):
-        """Delete one by one so storage is cleaned up too."""
+        """Hard delete all selected files."""
         for file in queryset:
-            file.delete()
+            hard_delete_file(file)
 
     def has_add_permission(self, request):
         return False

src/backend/core/api/__init__.py

@@ -71,7 +71,6 @@ def get_frontend_configuration(request):
             "force_wss_protocol": settings.LIVEKIT_FORCE_WSS_PROTOCOL,
             "enable_firefox_proxy_workaround": settings.LIVEKIT_ENABLE_FIREFOX_PROXY_WORKAROUND,
             "default_sources": settings.LIVEKIT_DEFAULT_SOURCES,
-            "default_video_codec": settings.LIVEKIT_DEFAULT_VIDEO_CODEC,
         },
         "authenticated_users_can_edit_display_name": (
             settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME

src/backend/core/api/permissions.py

@@ -134,7 +134,7 @@ class FilePermission(IsAuthenticated):
         Return a 404 on deleted files or if the user is not the owner
         """
 
-        if obj.is_deleted:
+        if obj.deleted_at is not None or obj.hard_deleted_at is not None:
             raise Http404
 
         if obj.creator != request.user:

src/backend/core/api/serializers.py

@@ -456,6 +456,7 @@ class ListFileSerializer(serializers.ModelSerializer):
             "type",
             "creator",
             "deleted_at",
+            "hard_deleted_at",
             "filename",
             "upload_state",
             "mimetype",
@@ -470,6 +471,7 @@ class ListFileSerializer(serializers.ModelSerializer):
             "updated_at",
             "creator",
             "deleted_at",
+            "hard_deleted_at",
             "filename",
             "upload_state",
             "mimetype",

src/backend/core/api/viewsets.py

@@ -82,6 +82,7 @@ from core.services.room_roles import (
 )
 from core.services.subtitle import SubtitleException, SubtitleService
 from core.tasks.connection_test import delete_connection_test_room
+from core.tasks.file import process_file_deletion
 from core.utils import generate_token
 
 from ..authentication.livekit import LiveKitTokenAuthentication
@@ -1198,7 +1199,7 @@ class FileViewSet(
     permission_classes = [
         permissions.FilePermission,
     ]
-    queryset = models.File.objects.all()
+    queryset = models.File.objects.filter(hard_deleted_at__isnull=True)
     default_serializer_class = serializers.FileSerializer
     serializer_classes = {
         "list": serializers.ListFileSerializer,
@@ -1352,7 +1353,7 @@ class FileViewSet(
                         )
 
             if validation_error is not None:
-                file.delete()
+                self._complete_file_deletion(file)
             else:
                 file.upload_state = models.FileUploadStateChoices.READY
                 file.mimetype = mimetype
@@ -1394,6 +1395,12 @@ class FileViewSet(
 
         return drf_response.Response(serializer.data, status=drf_status.HTTP_200_OK)
 
+    def _complete_file_deletion(self, file):
+        """Delete a file completely."""
+        file.soft_delete()
+        file.hard_delete()
+        transaction.on_commit(lambda: process_file_deletion.delay(file.id))
+
     def _authorize_subrequest(self, request, pattern):
         """
         Authorize access based on the original URL of an Nginx subrequest

src/backend/core/external_api/authentication.py

@@ -286,10 +286,6 @@ class ResourceServerBackend(LaSuiteBackend):
         if user is None and settings.OIDC_CREATE_USER:
             user = self.create_user(sub)
 
-        if user is not None and not user.is_active:
-            logger.warning("Inactive user attempted authentication: %s", user.pk)
-            raise SuspiciousOperation("User account is disabled.")
-
         return user
 
     def create_user(self, sub):

src/backend/core/logging_filters.py

@@ -1,25 +0,0 @@
-"""Logging filters for the core application."""
-
-import logging
-
-from django.conf import settings
-
-
-class SilenceExpected401(logging.Filter):
-    """Drop the expected 401 from anonymous hits on the /me endpoint.
-
-    The frontend probes `/users/me/` to check authentication; a 401 for
-    anonymous users is normal, not a warning worth logging.
-    """
-
-    def filter(self, record):
-        """Return False for a 401 on a silenced path, True otherwise."""
-        if getattr(record, "status_code", None) != 401:
-            return True
-
-        request = getattr(record, "request", None)
-        path = getattr(request, "path", None)
-        if not path:
-            return True
-
-        return path not in settings.LOGGING_SILENCED_401_PATHS

src/backend/core/management/commands/clean_pending_files.py

@@ -6,6 +6,7 @@ from django.core.management.base import BaseCommand, CommandError
 from django.utils import timezone
 
 from core.models import File, FileUploadStateChoices
+from core.tasks.file import process_file_deletion
 
 
 class Command(BaseCommand):
@@ -31,19 +32,16 @@ class Command(BaseCommand):
         files = File.objects.filter(
             upload_state=FileUploadStateChoices.PENDING,
             created_at__lt=threshold,
+            hard_deleted_at__isnull=True,
         )
 
         count = 0
-        failed = []
         for file in files.iterator():
-            try:
-                file.delete()
-                count += 1
-            except Exception as exc:  # noqa: BLE001 # pylint: disable=broad-exception-caught
-                failed.append(file.pk)
-                self.stderr.write(f"[ERROR] Failed to clean file '{file.pk}': {exc}")
+            # This check shouldn't happen, but just in case we do it to avoid an error
+            if not file.deleted_at:
+                file.soft_delete()
+            file.hard_delete()
+            process_file_deletion(file.id)
+            count += 1
 
         self.stdout.write(f"Cleaned {count} stale pending file(s).")
-
-        if failed:
-            raise CommandError(f"Failed to clean {len(failed)} file(s).")

src/backend/core/management/commands/purge_deleted_files.py

@@ -3,33 +3,38 @@
 from datetime import timedelta
 
 from django.conf import settings
-from django.core.management.base import BaseCommand, CommandError
+from django.core.management.base import BaseCommand
+from django.db.models import Q
 from django.utils import timezone
 
 from core.models import File
+from core.tasks.file import process_file_deletion
 
 
 class Command(BaseCommand):
-    """Purge files (object storage and database object) whose trash bin retention has expired."""
+    """
+    Purge deleted files (object storage and database object):
+    - files marked as hard deleted in database
+    - files marked as soft deleted and for which the trashbin retention period has expired
+    """
 
     help = "Purge deleted files"
 
     def handle(self, *args, **options):
-        """Delete files soft deleted for longer than the grace period."""
+        """Browse purgeable files and queue them through the file deletion task."""
 
-        threshold = timezone.now() - timedelta(days=settings.FILE_PURGE_GRACE_DAYS)
+        is_hard_deleted = Q(hard_deleted_at__isnull=False)
+        is_purgeable = Q(
+            deleted_at__lte=timezone.now()
+            - timedelta(days=settings.FILE_PURGE_GRACE_DAYS)
+        )
 
         count = 0
-        failed = []
-        for file in File.objects.filter(deleted_at__lte=threshold).iterator():
-            try:
-                file.delete()
-                count += 1
-            except Exception as exc:  # noqa: BLE001 # pylint: disable=broad-exception-caught
-                failed.append(file.pk)
-                self.stderr.write(f"[ERROR] Failed to purge file '{file.pk}': {exc}")
+        for file in File.objects.filter(is_hard_deleted | is_purgeable).iterator():
+            if file.hard_deleted_at is None:
+                file.hard_delete()
+
+            process_file_deletion.delay(file.id)
+            count += 1
 
         self.stdout.write(f"Purged {count} deleted file(s).")
-
-        if failed:
-            raise CommandError(f"Failed to purge {len(failed)} file(s).")

src/backend/core/migrations/0023_remove_file_hard_deleted_at.py

@@ -1,15 +0,0 @@
-from django.db import migrations
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ("core", "0022_user_default_room_access_level_and_more"),
-    ]
-
-    operations = [
-        migrations.RemoveField(
-            model_name="file",
-            name="hard_deleted_at",
-        ),
-    ]

src/backend/core/models.py

@@ -17,8 +17,7 @@ from django.contrib.auth.base_user import AbstractBaseUser
 from django.contrib.postgres.fields import ArrayField
 from django.core import mail, validators
 from django.core.exceptions import PermissionDenied, ValidationError
-from django.core.files.storage import default_storage
-from django.db import models
+from django.db import models, transaction
 from django.utils import timezone
 from django.utils.text import capfirst, slugify
 from django.utils.translation import gettext_lazy as _
@@ -917,6 +916,7 @@ class File(BaseModel):
         null=True,
     )
     deleted_at = models.DateTimeField(null=True, blank=True)
+    hard_deleted_at = models.DateTimeField(null=True, blank=True)
 
     filename = models.CharField(max_length=255, null=False, blank=False)
 
@@ -954,10 +954,11 @@ class File(BaseModel):
 
         return super().save(*args, **kwargs)
 
-    @property
-    def is_deleted(self):
-        """Return whether the file is in the trash bin."""
-        return self.deleted_at is not None
+    def delete(self, using=None, keep_parents=False):
+        if self.deleted_at is None:
+            raise RuntimeError("The file must be soft deleted before being deleted.")
+
+        return super().delete(using, keep_parents)
 
     @property
     def is_ready(self):
@@ -1017,33 +1018,60 @@ class File(BaseModel):
         """
         Compute and return abilities for a given user on the file.
         """
+        # Characteristics that are based only on specific access
         is_creator = user == self.creator
-        can_edit = is_creator and not self.is_deleted
+        retrieve = is_creator
+        is_deleted = self.deleted_at is not None
+        can_update = is_creator and not is_deleted and user.is_authenticated
+        can_hard_delete = is_creator and user.is_authenticated
+        can_destroy = can_hard_delete and not is_deleted
 
         return {
-            "destroy": can_edit,
-            "retrieve": is_creator,
-            "media_auth": can_edit,
-            "partial_update": can_edit,
-            "update": can_edit,
-            "upload_ended": can_edit,
+            "destroy": can_destroy,
+            "hard_delete": can_hard_delete,
+            "retrieve": retrieve,
+            "media_auth": retrieve and not is_deleted,
+            "partial_update": can_update,
+            "update": can_update,
+            "upload_ended": can_update and user.is_authenticated,
         }
 
+    @transaction.atomic
     def soft_delete(self):
-        """Move the file to the trash bin."""
+        """
+        Soft delete the file.
+        We still keep the .delete() method untouched for programmatic purposes.
+        """
         if self.deleted_at:
             raise RuntimeError("This file is already deleted.")
 
         self.deleted_at = timezone.now()
         self.save(update_fields=["deleted_at"])
 
-    def delete(self, using=None, keep_parents=False):
+    def hard_delete(self):
         """
-        Remove the file's objects from storage, then its row from the database.
+        Hard delete the file.
+        We still keep the .delete() method untouched for programmatic purposes.
+        """
+        if self.hard_deleted_at:
+            raise ValidationError(
+                {
+                    "hard_deleted_at": ValidationError(
+                        _("This file is already hard deleted."),
+                        code="file_hard_delete_already_effective",
+                    )
+                }
+            )
 
-        Storage is removed first so that a storage failure leaves the row in place
-        and the periodic purge commands retry it on their next run.
-        """
-        default_storage.delete(self.temporary_file_key)  # Pending
-        default_storage.delete(self.file_key)  # Final
-        return super().delete(using, keep_parents)
+        if self.deleted_at is None:
+            raise ValidationError(
+                {
+                    "hard_deleted_at": ValidationError(
+                        _("To hard delete a file, it must first be soft deleted."),
+                        code="file_hard_delete_should_soft_delete_first",
+                    )
+                }
+            )
+
+        self.hard_deleted_at = timezone.now()
+        self.save(update_fields=["hard_deleted_at"])

src/backend/core/tasks/__init__.py

@@ -1,5 +1,9 @@
 """Celery tasks for the core app."""
 
 from core.tasks.connection_test import delete_connection_test_room
+from core.tasks.file import process_file_deletion
 
-__all__ = ("delete_connection_test_room",)
+__all__ = (
+    "delete_connection_test_room",
+    "process_file_deletion",
+)

src/backend/core/tasks/file.py

@@ -0,0 +1,36 @@
+"""
+Tasks related to files.
+"""
+
+import logging
+
+from django.core.files.storage import default_storage
+
+from core.models import File
+from core.tasks._task import task
+
+logger = logging.getLogger(__name__)
+
+
+@task
+def process_file_deletion(file_id):
+    """
+    Process the deletion of a file.
+    Definitely delete it in the database.
+    Delete the files from the storage.
+    """
+    logger.info("Processing item deletion for %s", file_id)
+    try:
+        file = File.objects.get(id=file_id)
+    except File.DoesNotExist:
+        logger.error("Item %s does not exist", file_id)
+        return
+
+    if file.hard_deleted_at is None:
+        logger.error("To process an item deletion, it must be hard deleted first.")
+        return
+
+    logger.info("Deleting file %s", file.file_key)
+    default_storage.delete(file.file_key)
+
+    file.delete()

src/backend/core/tests/commands/test_clean_pending_files.py

@@ -1,11 +1,9 @@
 """Tests for the clean_pending_files management command."""
 
 from datetime import timedelta
-from io import BytesIO, StringIO
-from unittest.mock import patch
 
 from django.core.files.storage import default_storage
-from django.core.management import CommandError, call_command
+from django.core.management import call_command
 from django.utils import timezone
 
 import pytest
@@ -25,32 +23,31 @@ def test_clean_pending_files_recent_pending_not_deleted():
     file = factories.FileFactory(
         type=models.FileTypeChoices.BACKGROUND_IMAGE,
         update_upload_state=models.FileUploadStateChoices.PENDING,
+        upload_bytes=b"hello",
     )
-    # A pending upload only lives under the temporary key
-    default_storage.save(file.temporary_file_key, BytesIO(b"hello"))
 
     call_command("clean_pending_files")
 
     file.refresh_from_db()
     assert file.deleted_at is None
-    assert default_storage.exists(file.temporary_file_key)
+    assert default_storage.exists(file.file_key)
 
 
 def test_clean_pending_files_old_pending_deleted():
-    """Pending files older than the threshold should be deleted, temporary object included."""
+    """Pending files older than the threshold should be deleted."""
     old_date = timezone.now() - timedelta(hours=49)
     file = factories.FileFactory(
         type=models.FileTypeChoices.BACKGROUND_IMAGE,
         update_upload_state=models.FileUploadStateChoices.PENDING,
+        upload_bytes=b"hello",
     )
-    # A pending upload only lives under the temporary key
-    default_storage.save(file.temporary_file_key, BytesIO(b"hello"))
+    assert default_storage.exists(file.file_key)
     models.File.objects.filter(pk=file.pk).update(created_at=old_date)
 
     call_command("clean_pending_files")
 
     assert not models.File.objects.filter(pk=file.pk).exists()
-    assert not default_storage.exists(file.temporary_file_key)
+    assert not default_storage.exists(file.file_key)
 
 
 def test_clean_pending_files_old_non_pending_not_deleted():
@@ -66,6 +63,7 @@ def test_clean_pending_files_old_non_pending_not_deleted():
 
     file.refresh_from_db()
     assert file.deleted_at is None
+    assert file.hard_deleted_at is None
 
 
 def test_clean_pending_files_custom_hours():
@@ -74,8 +72,8 @@ def test_clean_pending_files_custom_hours():
     file = factories.FileFactory(
         type=models.FileTypeChoices.BACKGROUND_IMAGE,
         update_upload_state=models.FileUploadStateChoices.PENDING,
+        upload_bytes=b"hello",
     )
-    default_storage.save(file.temporary_file_key, BytesIO(b"hello"))
     models.File.objects.filter(pk=file.pk).update(created_at=old_date)
 
     # Default 24h threshold -> file not deleted
@@ -83,58 +81,10 @@ def test_clean_pending_files_custom_hours():
 
     file.refresh_from_db()
     assert file.deleted_at is None
-    assert default_storage.exists(file.temporary_file_key)
+    assert default_storage.exists(file.file_key)
 
     # 8h threshold -> file deleted
     call_command("clean_pending_files", "--hours=8")
 
     assert not models.File.objects.filter(pk=file.pk).exists()
-    assert not default_storage.exists(file.temporary_file_key)
-
-
-def test_clean_pending_files_storage_failure_keeps_row_and_continues():
-    """
-    A storage failure on one file leaves its row in place for the next run,
-    does not stop the other files from being cleaned, and exits non-zero.
-    """
-    out = StringIO()
-    err = StringIO()
-    old_date = timezone.now() - timedelta(hours=49)
-
-    failing_file = factories.FileFactory(
-        type=models.FileTypeChoices.BACKGROUND_IMAGE,
-        update_upload_state=models.FileUploadStateChoices.PENDING,
-    )
-    default_storage.save(failing_file.temporary_file_key, BytesIO(b"hello"))
-    stale_file = factories.FileFactory(
-        type=models.FileTypeChoices.BACKGROUND_IMAGE,
-        update_upload_state=models.FileUploadStateChoices.PENDING,
-    )
-    default_storage.save(stale_file.temporary_file_key, BytesIO(b"hello"))
-    models.File.objects.filter(pk__in=[failing_file.pk, stale_file.pk]).update(
-        created_at=old_date
-    )
-
-    original_delete = default_storage.delete
-
-    def flaky_delete(name):
-        if name == failing_file.temporary_file_key:
-            raise OSError("boom")
-        return original_delete(name)
-
-    with (
-        patch.object(default_storage, "delete", side_effect=flaky_delete),
-        pytest.raises(CommandError, match="Failed to clean 1 file"),
-    ):
-        call_command("clean_pending_files", stdout=out, stderr=err)
-
-    assert "Cleaned 1 stale pending file(s)." in out.getvalue()
-    assert f"Failed to clean file '{failing_file.pk}': boom" in err.getvalue()
-
-    # The failing file is retried on the next run
-    assert models.File.objects.filter(pk=failing_file.pk).exists()
-    assert default_storage.exists(failing_file.temporary_file_key)
-
-    # The other file was cleaned despite the earlier failure
-    assert not models.File.objects.filter(pk=stale_file.pk).exists()
-    assert not default_storage.exists(stale_file.temporary_file_key)
+    assert not default_storage.exists(file.file_key)

src/backend/core/tests/commands/test_purge_deleted_files.py

@@ -6,12 +6,13 @@ from random import randint
 from unittest.mock import patch
 
 from django.core.files.storage import default_storage
-from django.core.management import CommandError, call_command
+from django.core.management import call_command
 from django.utils import timezone
 
 import pytest
 
 from core import factories, models
+from core.tasks.file import process_file_deletion
 
 pytestmark = pytest.mark.django_db
 
@@ -24,7 +25,11 @@ def test_purge_deleted_files_no_deleted_files(django_assert_num_queries):
 
 @pytest.mark.django_db(transaction=True)
 def test_purge_deleted_files_success(settings):
-    """Only soft deleted files past the grace period are purged."""
+    """
+    Queue deletion for:
+    - hard-deleted files
+    - soft-deleted files past retention period + grace period.
+    """
     out = StringIO()
 
     settings.FILE_PURGE_GRACE_DAYS = grace = randint(1, 20)
@@ -51,63 +56,30 @@ def test_purge_deleted_files_success(settings):
         )
         purgeable_file.soft_delete()
 
-    call_command("purge_deleted_files", stdout=out)
+    hard_deleted_file = factories.FileFactory(
+        type=models.FileTypeChoices.BACKGROUND_IMAGE,
+        upload_bytes=b"hello",
+    )
+    hard_deleted_file.soft_delete()
+    hard_deleted_file.hard_delete()
 
-    assert "Purged 1 deleted file(s)." in out.getvalue()
+    with patch(
+        "core.management.commands.purge_deleted_files.process_file_deletion.delay",
+        side_effect=process_file_deletion,
+    ) as mock_delay:
+        call_command("purge_deleted_files", stdout=out)
+
+    assert "Purged 2 deleted file(s)." in out.getvalue()
+    assert mock_delay.call_count == 2
+    called_ids = {call.args[0] for call in mock_delay.call_args_list}
+    assert called_ids == {purgeable_file.id, hard_deleted_file.id}
 
     assert models.File.objects.filter(id=not_deleted_file.id).exists()
     assert models.File.objects.filter(id=not_purgeable_file.id).exists()
     assert not models.File.objects.filter(id=purgeable_file.id).exists()
+    assert not models.File.objects.filter(id=hard_deleted_file.id).exists()
 
     assert default_storage.exists(not_deleted_file.file_key)
     assert default_storage.exists(not_purgeable_file.file_key)
     assert not default_storage.exists(purgeable_file.file_key)
-
-
-@pytest.mark.django_db(transaction=True)
-def test_purge_deleted_files_storage_failure_keeps_row_and_continues(settings):
-    """
-    A storage failure on one file leaves its row in place for the next run,
-    does not stop the other files from being purged, and exits non-zero.
-    """
-    out = StringIO()
-    err = StringIO()
-
-    settings.FILE_PURGE_GRACE_DAYS = 1
-    purge_now = timezone.now() - timedelta(days=2)
-
-    with patch("django.utils.timezone.now", return_value=purge_now):
-        failing_file = factories.FileFactory(
-            type=models.FileTypeChoices.BACKGROUND_IMAGE,
-            upload_bytes=b"hello",
-        )
-        failing_file.soft_delete()
-        purgeable_file = factories.FileFactory(
-            type=models.FileTypeChoices.BACKGROUND_IMAGE,
-            upload_bytes=b"hello",
-        )
-        purgeable_file.soft_delete()
-
-    original_delete = default_storage.delete
-
-    def flaky_delete(name):
-        if name == failing_file.file_key:
-            raise OSError("boom")
-        return original_delete(name)
-
-    with (
-        patch.object(default_storage, "delete", side_effect=flaky_delete),
-        pytest.raises(CommandError, match="Failed to purge 1 file"),
-    ):
-        call_command("purge_deleted_files", stdout=out, stderr=err)
-
-    assert "Purged 1 deleted file(s)." in out.getvalue()
-    assert f"Failed to purge file '{failing_file.pk}': boom" in err.getvalue()
-
-    # The failing file is retried on the next run
-    assert models.File.objects.filter(id=failing_file.id).exists()
-    assert default_storage.exists(failing_file.file_key)
-
-    # The other file was purged despite the earlier failure
-    assert not models.File.objects.filter(id=purgeable_file.id).exists()
-    assert not default_storage.exists(purgeable_file.file_key)
+    assert not default_storage.exists(hard_deleted_file.file_key)

src/backend/core/tests/files/test_api_files_list.py

@@ -4,6 +4,8 @@ Tests for files API endpoint in meet's core app: list
 
 from unittest import mock
 
+from django.utils import timezone
+
 import pytest
 from faker import Faker
 from rest_framework.pagination import PageNumberPagination
@@ -54,6 +56,14 @@ def test_api_files_list_format():
         title="item 2",
     )
 
+    # hard deleted item should not appear
+    factories.FileFactory(
+        type=models.FileTypeChoices.BACKGROUND_IMAGE,
+        hard_deleted_at=timezone.now(),
+        title="hard deleted item",
+        creator=user,
+    )
+
     response = client.get("/api/v1.0/files/")
 
     assert response.status_code == 200
@@ -84,8 +94,10 @@ def test_api_files_list_format():
             "size": None,
             "description": None,
             "deleted_at": None,
+            "hard_deleted_at": None,
             "abilities": {
                 "destroy": True,
+                "hard_delete": True,
                 "media_auth": True,
                 "partial_update": True,
                 "retrieve": True,

src/backend/core/tests/files/test_api_files_upload_ended.py

@@ -3,7 +3,6 @@
 import logging
 from concurrent.futures import ThreadPoolExecutor
 from io import BytesIO
-from unittest import mock
 
 from django.core.files.storage import default_storage
 
@@ -137,40 +136,6 @@ def test_api_file_upload_ended_mimetype_not_allowed(settings, caplog):
 
     assert not models.File.objects.filter(id=file.id).exists()
     assert not default_storage.exists(file.file_key)
-    assert not default_storage.exists(file.temporary_file_key)
-
-
-def test_api_file_upload_ended_rejected_storage_failure_keeps_row(settings):
-    """
-    When a rejected upload cannot be removed from storage, the row must survive
-    (reverted to pending) so the cleanup can be retried, and no phantom file
-    must be re-inserted under a new id.
-    """
-    settings.FILE_UPLOAD_RESTRICTIONS = {
-        "background_image": {
-            **settings.FILE_UPLOAD_RESTRICTIONS["background_image"],
-            "allowed_mimetypes": ["application/pdf"],
-        }
-    }
-
-    user = factories.UserFactory()
-    client = APIClient()
-    client.force_login(user)
-
-    file = factories.FileFactory(
-        type=FileTypeChoices.BACKGROUND_IMAGE, filename="my_file.txt", creator=user
-    )
-    default_storage.save(file.temporary_file_key, BytesIO(b"my prose"))
-
-    with (
-        mock.patch.object(default_storage, "delete", side_effect=OSError("boom")),
-        pytest.raises(OSError, match="boom"),
-    ):
-        client.post(f"/api/v1.0/files/{file.id!s}/upload-ended/")
-
-    assert models.File.objects.count() == 1
-    file.refresh_from_db()
-    assert file.upload_state == FileUploadStateChoices.PENDING
 
 
 def test_api_file_upload_ended_mimetype_not_allowed_not_checking_mimetype(settings):
@@ -308,7 +273,6 @@ def test_api_upload_ended_file_size_exceeded(settings, caplog):
 
     assert not models.File.objects.filter(id=file.id).exists()
     assert not default_storage.exists(file.file_key)
-    assert not default_storage.exists(file.temporary_file_key)
 
 
 @pytest.mark.django_db(transaction=True)

src/backend/core/tests/test_external_api_authentication.py

@@ -1,96 +0,0 @@
-"""Tests for the external API ResourceServerBackend."""
-
-from django.core.exceptions import SuspiciousOperation
-
-import pytest
-import responses
-from rest_framework.test import APIClient
-
-from core.external_api.authentication import ResourceServerBackend
-from core.factories import UserFactory
-from core.models import User
-
-pytestmark = pytest.mark.django_db
-
-
-def _payload(sub):
-    return {"sub": sub, "active": True, "scope": "lasuite_meet", "client_id": "app"}
-
-
-def test_resource_server_backend_get_or_create_user_active():
-    """An existing active user matching the sub should be returned."""
-
-    user = UserFactory()
-
-    result = ResourceServerBackend().get_or_create_user(
-        access_token="token", id_token=None, payload=_payload(user.sub)
-    )
-
-    assert result == user
-
-
-def test_resource_server_backend_get_or_create_user_inactive():
-    """An inactive user should be rejected even with a valid token."""
-
-    user = UserFactory(is_active=False)
-
-    with pytest.raises(SuspiciousOperation, match="User account is disabled."):
-        ResourceServerBackend().get_or_create_user(
-            access_token="token", id_token=None, payload=_payload(user.sub)
-        )
-
-
-def test_resource_server_backend_get_or_create_user_creates(settings):
-    """An unknown sub should create an active user when OIDC_CREATE_USER is set."""
-
-    settings.OIDC_CREATE_USER = True
-
-    result = ResourceServerBackend().get_or_create_user(
-        access_token="token", id_token=None, payload=_payload("new-sub")
-    )
-
-    assert result.sub == "new-sub"
-    assert result.is_active is True
-    assert User.objects.filter(sub="new-sub").exists()
-
-
-def test_resource_server_backend_get_or_create_user_no_creation(settings):
-    """An unknown sub should return None when OIDC_CREATE_USER is unset."""
-
-    settings.OIDC_CREATE_USER = False
-
-    result = ResourceServerBackend().get_or_create_user(
-        access_token="token", id_token=None, payload=_payload("new-sub")
-    )
-
-    assert result is None
-    assert not User.objects.filter(sub="new-sub").exists()
-
-
-@responses.activate
-def test_api_rooms_list_resource_server_inactive_user(settings):
-    """End to end: a valid introspected token for an inactive user should get 401."""
-
-    settings.OIDC_OP_INTROSPECTION_ENDPOINT = "https://oidc.example.com/introspect"
-    settings.OIDC_OP_URL = "https://oidc.example.com"
-
-    user = UserFactory(is_active=False)
-
-    responses.add(
-        responses.POST,
-        "https://oidc.example.com/introspect",
-        json={
-            "iss": "https://oidc.example.com",
-            "active": True,
-            "sub": user.sub,
-            "scope": "openid lasuite_meet rooms:list",
-            "client_id": "app",
-        },
-    )
-
-    client = APIClient()
-    client.credentials(HTTP_AUTHORIZATION="Bearer rs-token")
-    response = client.get("/external-api/v1.0/rooms/")
-
-    assert response.status_code == 401
-    assert "login failed" in str(response.data).lower()

src/backend/core/tests/test_models_files.py

@@ -1,75 +0,0 @@
-"""
-Unit tests for the File model deletion flow
-"""
-
-from io import BytesIO
-from unittest import mock
-
-from django.core.files.storage import default_storage
-from django.utils import timezone
-
-import pytest
-
-from core.factories import FileFactory
-from core.models import File
-
-pytestmark = pytest.mark.django_db
-
-
-def test_models_files_soft_delete():
-    """Soft deleting should only set the deletion timestamp."""
-    file = FileFactory()
-    assert file.is_deleted is False
-
-    file.soft_delete()
-
-    file.refresh_from_db()
-    assert file.is_deleted is True
-    assert FileFactory(deleted_at=timezone.now()).is_deleted is True
-
-
-def test_models_files_soft_delete_twice():
-    """Soft deleting an already soft deleted file should fail."""
-    file = FileFactory()
-    file.soft_delete()
-
-    with pytest.raises(RuntimeError, match="already deleted"):
-        file.soft_delete()
-
-
-def test_models_files_delete():
-    """Deleting should remove the row and both the final and temporary objects."""
-    file = FileFactory(upload_bytes=b"hello")
-    default_storage.save(file.temporary_file_key, BytesIO(b"hello"))
-    # Captured up front: Django nulls the pk after delete, and the keys depend on it
-    pk, key, temporary_key = file.pk, file.file_key, file.temporary_file_key
-
-    file.delete()
-
-    assert not File.objects.filter(pk=pk).exists()
-    assert not default_storage.exists(key)
-    assert not default_storage.exists(temporary_key)
-
-
-def test_models_files_delete_without_storage_object():
-    """Deleting a file that has nothing in storage should still remove the row."""
-    file = FileFactory()
-    pk = file.pk
-
-    file.delete()
-
-    assert not File.objects.filter(pk=pk).exists()
-
-
-def test_models_files_delete_storage_failure_keeps_row():
-    """A storage failure must leave the row in place so the deletion can be retried."""
-    file = FileFactory(upload_bytes=b"hello")
-
-    with (
-        mock.patch.object(default_storage, "delete", side_effect=OSError("boom")),
-        pytest.raises(OSError, match="boom"),
-    ):
-        file.delete()
-
-    assert File.objects.filter(pk=file.pk).exists()
-    assert default_storage.exists(file.file_key)

src/backend/core/tests/test_settings_video_codec.py

@@ -1,22 +0,0 @@
-"""Unit tests for the LIVEKIT_DEFAULT_VIDEO_CODEC setting value."""
-
-import pytest
-
-from meet.settings import VideoCodecValue
-
-
-@pytest.mark.parametrize(
-    "raw,expected",
-    [("vp9", "vp9"), ("AV1", "av1"), ("  h264  ", "h264")],
-)
-def test_video_codec_value_normalizes(raw, expected):
-    """Whitespace is trimmed and the name is lowercased before it is checked."""
-    # environ=False keeps __new__ from resolving the value, so the instance survives.
-    assert VideoCodecValue(environ=False).to_python(raw) == expected
-
-
-@pytest.mark.parametrize("raw", ["vp10", "", "h.264"])
-def test_video_codec_value_rejects_unsupported(raw):
-    """A name outside the accepted list stops the settings module loading."""
-    with pytest.raises(ValueError, match="Unsupported video codec"):
-        VideoCodecValue(environ=False).to_python(raw)

src/backend/meet/settings.py

@@ -53,26 +53,6 @@ def get_release():
         return "NA"  # Default: not available
 
 
-class VideoCodecValue(values.Value):
-    """
-    A video codec name, normalized to lowercase and validated against the codecs
-    supported by the LiveKit client, so that a typo fails at startup instead of
-    silently downgrading every publisher to another codec.
-    """
-
-    codecs = frozenset(("vp8", "h264", "vp9", "av1"))
-
-    def to_python(self, value):
-        """Normalize the codec name and ensure it is a supported one."""
-        codec = super().to_python(value).strip().lower()
-        if codec not in self.codecs:
-            raise ValueError(
-                f"Unsupported video codec {value!r}, "
-                f"expected one of: {', '.join(sorted(self.codecs))}."
-            )
-        return codec
-
-
 class Base(Configuration):
     """
     This is the base configuration every configuration (aka environment) should inherit from. It
@@ -489,9 +469,6 @@ class Base(Configuration):
 
     # Sentry
     SENTRY_DSN = values.Value(None, environ_name="SENTRY_DSN")
-    SENTRY_TRACES_SAMPLE_RATE = values.FloatValue(
-        0.0, environ_name="SENTRY_TRACES_SAMPLE_RATE", environ_prefix=None
-    )
 
     # Easy thumbnails
     THUMBNAIL_EXTENSION = "webp"
@@ -698,9 +675,6 @@ class Base(Configuration):
         environ_prefix=None,
         default=False,
     )
-    LIVEKIT_DEFAULT_VIDEO_CODEC = VideoCodecValue(
-        "vp9", environ_name="LIVEKIT_DEFAULT_VIDEO_CODEC", environ_prefix=None
-    )
     CONNECTION_TEST_ENABLED = values.BooleanValue(
         environ_name="CONNECTION_TEST_ENABLED",
         environ_prefix=None,
@@ -1136,12 +1110,6 @@ class Base(Configuration):
         environ_prefix=None,
     )
 
-    LOGGING_SILENCED_401_PATHS = values.ListValue(
-        default=["/api/v1.0/users/me/"],
-        environ_name="LOGGING_SILENCED_401_PATHS",
-        environ_prefix=None,
-    )
-
     # Logging
     # We want to make it easy to log to console but by default we log production
     # to Sentry and don't want to log to console.
@@ -1154,16 +1122,10 @@ class Base(Configuration):
                 "style": "{",
             },
         },
-        "filters": {
-            "silence_expected_401": {
-                "()": "core.logging_filters.SilenceExpected401",
-            },
-        },
         "handlers": {
             "console": {
                 "class": "logging.StreamHandler",
                 "formatter": "simple",
-                "filters": ["silence_expected_401"],
             },
         },
         # Override root logger to send it to console
@@ -1174,13 +1136,6 @@ class Base(Configuration):
             ),
         },
         "loggers": {
-            "request.summary": {
-                "level": values.Value(
-                    "WARNING",
-                    environ_name="LOGGING_LEVEL_REQUEST_SUMMARY",
-                    environ_prefix="",
-                )
-            },
             "core": {
                 "handlers": ["console"],
                 "level": values.Value(
@@ -1256,14 +1211,7 @@ class Base(Configuration):
                 dsn=cls.SENTRY_DSN,
                 environment=cls.__name__.lower(),  # build, test, development, production
                 release=get_release(),
-                traces_sample_rate=cls.SENTRY_TRACES_SAMPLE_RATE,
-                integrations=[
-                    DjangoIntegration(
-                        transaction_style="url",
-                        middleware_spans=True,
-                        cache_spans=True,
-                    )
-                ],
+                integrations=[DjangoIntegration()],
             )
             sentry_sdk.set_tag("application", "backend")
 

src/frontend/Dockerfile

@@ -4,12 +4,12 @@ USER node
 
 WORKDIR /home/frontend/
 
-COPY --chown=node:node ./src/frontend/package.json ./package.json
-COPY --chown=node:node ./src/frontend/package-lock.json ./package-lock.json
+COPY ./src/frontend/package.json ./package.json
+COPY ./src/frontend/package-lock.json ./package-lock.json
 
 RUN npm ci
 
-COPY --chown=node:node .dockerignore ./.dockerignore
+COPY .dockerignore ./.dockerignore
 COPY --chown=node:node ./src/frontend/ .
 
 ### ---- Front-end builder image ----

src/frontend/package-lock.json

@@ -23,18 +23,18 @@
         "@timephy/rnnoise-wasm": "1.0.0",
         "crisp-sdk-web": "1.1.2",
         "hoofd": "1.7.3",
-        "humanize-duration": "3.34.1",
+        "humanize-duration": "3.33.2",
         "i18next": "26.3.6",
         "i18next-browser-languagedetector": "8.2.1",
         "i18next-parser": "9.4.0",
         "i18next-resources-to-backend": "1.2.3",
         "livekit-client": "2.21.0",
-        "posthog-js": "1.418.10",
+        "posthog-js": "1.414.0",
         "react": "18.3.1",
         "react-aria": "3.50.0",
         "react-aria-components": "1.19.0",
         "react-dom": "18.3.1",
-        "react-i18next": "17.0.12",
+        "react-i18next": "17.0.10",
         "react-stately": "3.48.0",
         "use-sound": "5.0.0",
         "valtio": "2.3.2",
@@ -1720,28 +1720,28 @@
       "license": "MIT"
     },
     "node_modules/@posthog/browser-common": {
-      "version": "0.5.2",
-      "resolved": "https://registry.npmjs.org/@posthog/browser-common/-/browser-common-0.5.2.tgz",
-      "integrity": "sha512-8GvfEshFdeKIccuy3kpp6mDBxawQtRamMYRCwzy1r1ixLKQVLAGs3afhOf6r75yp59ZQBi5mtXQgUJ2Jz8eHuw==",
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/@posthog/browser-common/-/browser-common-0.4.0.tgz",
+      "integrity": "sha512-W9DCGVks15docUMPvJ2nd8NS16Gn74bsGWuaeg31beEKFSjdW8wvnQ1ETY6WSql5pYxZb3GdJmEUZVVstKSrBQ==",
       "license": "MIT",
       "dependencies": {
-        "@posthog/core": "^1.48.11",
-        "@posthog/types": "^1.405.3"
+        "@posthog/core": "^1.46.8",
+        "@posthog/types": "^1.402.0"
       }
     },
     "node_modules/@posthog/core": {
-      "version": "1.53.2",
-      "resolved": "https://registry.npmjs.org/@posthog/core/-/core-1.53.2.tgz",
-      "integrity": "sha512-Knx8442G2LyPVIzLvhcBX/TIdeHpZhrYrtZou3Uw8FWfbr9gQtQeOZDCog3MWcDxJ+4vAnMAAOzf5cYpc7Gxyw==",
+      "version": "1.49.1",
+      "resolved": "https://registry.npmjs.org/@posthog/core/-/core-1.49.1.tgz",
+      "integrity": "sha512-jdZh85tG56OXLH881CVwBZyiXCPPaZasfYeWwm9kVUvxC/Rb+lz7wYN9GuqSEmNPJgVnK4v8wS0bCaFc3OmVEA==",
       "license": "MIT",
       "dependencies": {
-        "@posthog/types": "^1.411.1"
+        "@posthog/types": "^1.407.0"
       }
     },
     "node_modules/@posthog/types": {
-      "version": "1.411.1",
-      "resolved": "https://registry.npmjs.org/@posthog/types/-/types-1.411.1.tgz",
-      "integrity": "sha512-Gd7tnSYctcSXup3naVlAgavvenByRao6rsSYdMgWgP35KE9jFn+rMHNRJeI5LNjJuLzMXHEVcgzAN7xcATefdw==",
+      "version": "1.407.1",
+      "resolved": "https://registry.npmjs.org/@posthog/types/-/types-1.407.1.tgz",
+      "integrity": "sha512-WhbkXPC2rgylXqmxHqv70ffI3k+KxyR6s7DBIfr5NvIqHkxp6v0pk31D/jbz0DNVbzwkLjyll2pxr4FNbJiYzg==",
       "license": "MIT"
     },
     "node_modules/@react-aria/overlays": {
@@ -6354,12 +6354,11 @@
       "integrity": "sha512-iARIBPgcQrwtEr+tALF+rapJ8qSc+Set2GJQl7xT1MQzWaVkFebdJhR3alVlSiUf5U7nAANKuj3aWpwerocD5w=="
     },
     "node_modules/html-parse-stringify": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/html-parse-stringify/-/html-parse-stringify-4.0.1.tgz",
-      "integrity": "sha512-0zHsZJrK7S3K2aucXWL6ycoYJ/iNtIcFHC/nYQgFklPtrv5LpJctIiSCroWZWeuoXvuyFdzp6KzjJQ+OT5MfFw==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://locize.com"
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/html-parse-stringify/-/html-parse-stringify-3.0.1.tgz",
+      "integrity": "sha512-KknJ50kTInJ7qIScF3jeaFRpMpE8/lfiTdzf/twXyPBLAGrLRTmkz3AdTnKeh40X8k9L2fdYwEp/42WGXIRGcg==",
+      "dependencies": {
+        "void-elements": "3.1.0"
       }
     },
     "node_modules/htmlparser2": {
@@ -6402,9 +6401,9 @@
       }
     },
     "node_modules/humanize-duration": {
-      "version": "3.34.1",
-      "resolved": "https://registry.npmjs.org/humanize-duration/-/humanize-duration-3.34.1.tgz",
-      "integrity": "sha512-YIiigjQ+O31rvcyDJPK1ptTZtvSErjBtmHy93VhbwxB/VwMG0FszKs2IB667tFxmOhNapePQQxa24luQRDkKFQ==",
+      "version": "3.33.2",
+      "resolved": "https://registry.npmjs.org/humanize-duration/-/humanize-duration-3.33.2.tgz",
+      "integrity": "sha512-K7Ny/ULO1hDm2nnhvAY+SJV1skxFb61fd073SG1IWJl+D44ULrruCuTyjHKjBVVcSuTlnY99DKtgEG39CM5QOQ==",
       "license": "Unlicense",
       "funding": {
         "url": "https://github.com/sponsors/EvanHahn"
@@ -9132,16 +9131,16 @@
       "license": "MIT"
     },
     "node_modules/posthog-js": {
-      "version": "1.418.10",
-      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.418.10.tgz",
-      "integrity": "sha512-XMvmmnuFoesSPjFo+wvzXkvuzYqIho8CVqxugG1Wt768offFARYNZDd1/xWfm9vk/pJTJ4RhUEHRzLpggmGx9Q==",
+      "version": "1.414.0",
+      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.414.0.tgz",
+      "integrity": "sha512-dtZd4asdskr8lNyltAEX6zyn48uO1pO0EMvx6AXJU65PFhu6yn2LPbKtQcyLysjcN57FJPNT9QYL6St5SBJHqw==",
       "license": "(Apache-2.0 AND MIT)",
       "dependencies": {
-        "@posthog/browser-common": "^0.5.0",
-        "@posthog/core": "^1.48.8",
-        "@posthog/types": "^1.405.1",
+        "@posthog/browser-common": "^0.4.0",
+        "@posthog/core": "^1.46.9",
+        "@posthog/types": "^1.402.2",
         "core-js": "^3.49.0",
-        "dompurify": "^3.4.13",
+        "dompurify": "^3.4.12",
         "fflate": "^0.4.8",
         "preact": "^10.29.3",
         "query-selector-shadow-dom": "^1.0.1",
@@ -9436,13 +9435,13 @@
       }
     },
     "node_modules/react-i18next": {
-      "version": "17.0.12",
-      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.0.12.tgz",
-      "integrity": "sha512-lFWPEGkxQ6RhusdUkysFBD58VHfSSzvHBzqMgN0SvfVpdQGfwtNkStTqdy08/sJd7s807qqutgx93fRpD0DJ3Q==",
+      "version": "17.0.10",
+      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.0.10.tgz",
+      "integrity": "sha512-XneHftyYA774MJkkccSkZ5oKrUpCnXIPmxio3wemqrVzCRLWiGXOMbIzObrer03fNDEnm8g8R5yYls4HcE+esg==",
       "license": "MIT",
       "dependencies": {
-        "@babel/runtime": "^7.29.7",
-        "html-parse-stringify": "^4.0.1",
+        "@babel/runtime": "^7.29.2",
+        "html-parse-stringify": "^3.0.1",
         "use-sync-external-store": "^1.6.0"
       },
       "peerDependencies": {
@@ -11609,6 +11608,14 @@
         "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
+    "node_modules/void-elements": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/void-elements/-/void-elements-3.1.0.tgz",
+      "integrity": "sha512-Dhxzh5HZuiHQhbvTW9AMetFfBHDMYpo23Uo9btPXgdYP+3T5S+p+jgNy7spra+veYhBP2dCSgxR/i2Y02h5/6w==",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/walk-sync": {
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/walk-sync/-/walk-sync-2.2.0.tgz",

src/frontend/package.json

@@ -30,18 +30,18 @@
     "@timephy/rnnoise-wasm": "1.0.0",
     "crisp-sdk-web": "1.1.2",
     "hoofd": "1.7.3",
-    "humanize-duration": "3.34.1",
+    "humanize-duration": "3.33.2",
     "i18next": "26.3.6",
     "i18next-browser-languagedetector": "8.2.1",
     "i18next-parser": "9.4.0",
     "i18next-resources-to-backend": "1.2.3",
     "livekit-client": "2.21.0",
-    "posthog-js": "1.418.10",
+    "posthog-js": "1.414.0",
     "react": "18.3.1",
     "react-aria": "3.50.0",
     "react-aria-components": "1.19.0",
     "react-dom": "18.3.1",
-    "react-i18next": "17.0.12",
+    "react-i18next": "17.0.10",
     "react-stately": "3.48.0",
     "use-sound": "5.0.0",
     "valtio": "2.3.2",

src/frontend/src/api/useConfig.ts

@@ -3,7 +3,7 @@ import { keys } from './queryKeys'
 import { useQuery } from '@tanstack/react-query'
 import { RecordingMode } from '@/features/recording'
 import type { ApiAccessLevel } from '@/features/rooms/api/ApiRoom'
-import type { Track, VideoCodec } from 'livekit-client'
+import type { Track } from 'livekit-client'
 type Source = Track.Source
 
 export interface ApiConfig {
@@ -62,7 +62,6 @@ export interface ApiConfig {
     force_wss_protocol: boolean
     enable_firefox_proxy_workaround: boolean
     default_sources: Source[]
-    default_video_codec: VideoCodec
   }
   transcription_destination?: string
   max_participants_for_sound: number

src/frontend/src/features/files/api/types.ts

@@ -15,6 +15,7 @@ export type ApiFileItem = {
   type: ApiFileType
   creator: ApiFileCreator
   deleted_at: string | null
+  hard_deleted_at: string | null
   filename: string
   upload_state: ApiFileUploadState
   mimetype: string // e.g. "image/png"

src/frontend/src/features/rooms/components/Conference.tsx

@@ -107,7 +107,7 @@ export const Conference = ({
       adaptiveStream: true,
       dynacast: true,
       publishDefaults: {
-        videoCodec: apiConfig?.livekit.default_video_codec ?? 'vp9',
+        videoCodec: 'vp9',
       },
       videoCaptureDefaults: {
         deviceId: userConfig.videoDeviceId ?? undefined,
@@ -129,7 +129,6 @@ export const Conference = ({
     userConfig.videoPublishResolution,
     userConfig.audioDeviceId,
     userConfig.audioOutputDeviceId,
-    apiConfig?.livekit.default_video_codec,
   ])
 
   const room = useMemo(() => new Room(roomOptions), [roomOptions])

src/frontend/src/features/rooms/livekit/components/ConnectionObserver.tsx

@@ -71,30 +71,20 @@ export const ConnectionObserver = () => {
   useEffect(() => {
     if (!isAnalyticsEnabled) return
 
-    const handleConnection = async () => {
+    const handleConnection = () => {
       // Preserve original connection timestamp across reconnections to measure
       // total session duration from first connect to final disconnect.
       if (connectionStartTimeRef.current != null) return
       connectionStartTimeRef.current = Date.now()
-      const participantSid = room.localParticipant.sid
-      const roomSid = await room.getSid().catch(() => undefined)
-      void captureMediaEvent('connection-event', {
-        livekit_room_sid: roomSid,
-        livekit_participant_sid: participantSid,
-      })
+      void captureMediaEvent('connection-event', {})
     }
 
     const handleReconnect = () => {
       captureEvent('reconnect-event')
     }
 
-    const handleReconnected = async () => {
-      const participantSid = room.localParticipant.sid
-      const roomSid = await room.getSid().catch(() => undefined)
-      captureEvent('reconnected-event', {
-        livekit_room_sid: roomSid,
-        livekit_participant_sid: participantSid,
-      })
+    const handleReconnected = () => {
+      captureEvent('reconnected-event')
     }
 
     const handleSignalingConnect = () => {

src/frontend/src/features/rooms/livekit/components/controls/Options/SupportMenuItem.tsx

@@ -2,23 +2,23 @@ import { RiQuestionLine } from '@remixicon/react'
 import { MenuItem } from 'react-aria-components'
 import { useTranslation } from 'react-i18next'
 import { menuRecipe } from '@/primitives/menuRecipe'
-import {
-  useIsSupportEnabled,
-  openSupportChat,
-} from '@/features/support/hooks/useSupport'
+import { Crisp } from 'crisp-sdk-web'
+import { useIsSupportEnabled } from '@/features/support/hooks/useSupport'
 
 export const SupportMenuItem = () => {
   const { t } = useTranslation('rooms', { keyPrefix: 'options.items' })
   const isSupportEnabled = useIsSupportEnabled()
 
-  if (!isSupportEnabled) {
+  if (!isSupportEnabled || !Crisp) {
     return
   }
 
   return (
     <MenuItem
       className={menuRecipe({ icon: true, variant: 'dark' }).item}
-      onAction={openSupportChat}
+      onAction={() => {
+        Crisp?.chat.open()
+      }}
     >
       <RiQuestionLine size={20} />
       {t('support')}

src/frontend/src/features/support/hooks/useSupport.tsx

@@ -1,45 +1,20 @@
-import { useEffect, useState } from 'react'
+import { useEffect } from 'react'
+import { Crisp } from 'crisp-sdk-web'
 import { type ApiUser } from '@/features/auth/api/ApiUser'
 import { useUser } from '@/features/auth/api/useUser'
 import { useConfig } from '@/api/useConfig'
 
-type CrispSdk = (typeof import('crisp-sdk-web'))['Crisp']
-
-let crisp: CrispSdk | undefined
-let crispPromise: Promise<CrispSdk> | undefined
-
-const loadCrisp = (): Promise<CrispSdk> => {
-  crispPromise ??= import('crisp-sdk-web')
-    .then((module) => {
-      crisp = module.Crisp
-      return module.Crisp
-    })
-    .catch((error) => {
-      crispPromise = undefined
-      throw error
-    })
-
-  return crispPromise
-}
-
-export const openSupportChat = () => {
-  if (!crisp?.isCrispInjected()) return
-  crisp.chat.open()
-}
-
 export const initializeSupportSession = (user: ApiUser) => {
-  if (!crisp?.isCrispInjected()) return
-
+  if (!Crisp.isCrispInjected()) return
   const { id, email } = user
-  crisp.setTokenId(`meet-${id}`)
-  if (email) crisp.user.setEmail(email)
+  Crisp.setTokenId(`meet-${id}`)
+  if (email) Crisp.user.setEmail(email)
 }
 
 export const terminateSupportSession = () => {
-  if (!crisp?.isCrispInjected()) return
-
-  crisp.setTokenId()
-  crisp.session.reset()
+  if (!Crisp.isCrispInjected()) return
+  Crisp.setTokenId()
+  Crisp.session.reset()
 }
 
 export type useSupportProps = {
@@ -47,70 +22,26 @@ export type useSupportProps = {
   isDisabled?: boolean
 }
 
-const IDLE_TIMEOUT_MS = 10_000
-
-const scheduleWhenIdle = (callback: () => void): (() => void) => {
-  if (typeof window.requestIdleCallback === 'function') {
-    const handle = window.requestIdleCallback(callback, {
-      timeout: IDLE_TIMEOUT_MS,
-    })
-    return () => window.cancelIdleCallback(handle)
-  }
-
-  const handle = window.setTimeout(callback, 1)
-  return () => window.clearTimeout(handle)
-}
-
+// Configure Crisp chat for real-time support across all pages.
 export const useSupport = ({ id, isDisabled }: useSupportProps) => {
   const { user } = useUser()
-  const [isInjected, setIsInjected] = useState(
-    () => crisp?.isCrispInjected() ?? false
-  )
 
   useEffect(() => {
-    if (!id || isDisabled) return
-
-    if (crisp?.isCrispInjected()) {
-      setIsInjected(true)
-      return
-    }
-
-    let cancelled = false
-
-    const cancelIdle = scheduleWhenIdle(() => {
-      void loadCrisp()
-        .then((sdk) => {
-          if (cancelled) return
-
-          if (!sdk.isCrispInjected()) {
-            sdk.configure(id)
-            sdk.setHideOnMobile(true)
-          }
-
-          setIsInjected(true)
-        })
-        .catch((error) => {
-          if (!cancelled) {
-            console.error('Failed to initialize support chat', error)
-          }
-        })
-    })
-
-    return () => {
-      cancelled = true
-      cancelIdle()
-    }
+    if (!id || Crisp.isCrispInjected() || isDisabled) return
+    Crisp.configure(id)
+    Crisp.setHideOnMobile(true)
   }, [id, isDisabled])
 
   useEffect(() => {
-    if (!user || !isInjected || isDisabled) return
+    if (!user) return
     initializeSupportSession(user)
-  }, [user, isInjected, isDisabled])
+  }, [user])
 
   return null
 }
 
-// Some users block the chat widget, so check its availability safely.
+// Some users may block Crisp chat widget with browser ad blockers or anti-tracking plugins
+// So we need to safely check if Crisp is available and not blocked
 const isCrispAvailable = () => {
   try {
     return !!window?.$crisp?.is

src/frontend/src/locales/de/rooms.json

@@ -480,7 +480,7 @@
       "destination": "Ein neues Dokument wird erstellt auf",
       "destinationUnknown": "Ein neues Dokument wird erstellt",
       "language": "Meeting-Sprache:",
-      "recording": "Auch eine Videoaufzeichnung starten"
+      "recording": "Auch eine Aufzeichnung starten"
     },
     "button": {
       "start": "Meeting-Transkription starten",

src/frontend/src/locales/en/rooms.json

@@ -480,7 +480,7 @@
       "destination": "A new document will be created on",
       "destinationUnknown": "A new document will be created",
       "language": "Meeting language:",
-      "recording": "Also start a video recording"
+      "recording": "Also start a recording"
     },
     "button": {
       "start": "Start transcribing the meeting",

src/frontend/src/locales/es/rooms.json

@@ -479,7 +479,7 @@
       "destination": "Se creará un nuevo documento en",
       "destinationUnknown": "Se creará un nuevo documento",
       "language": "Idioma de la reunión:",
-      "recording": "Iniciar también una grabación de vídeo"
+      "recording": "Iniciar también una grabación"
     },
     "button": {
       "start": "Empezar a transcribir la reunión",

src/frontend/src/locales/fr/rooms.json

@@ -480,7 +480,7 @@
       "destination": "Un nouveau document sera créé sur",
       "destinationUnknown": "Un nouveau document sera créé",
       "language": "Langue de la réunion :",
-      "recording": "Démarrer aussi un enregistrement vidéo"
+      "recording": "Démarrer aussi un enregistrement"
     },
     "button": {
       "start": "Commencer à transcrire la réunion",

src/frontend/src/locales/nl/rooms.json

@@ -480,7 +480,7 @@
       "destination": "Er wordt een nieuw document aangemaakt op",
       "destinationUnknown": "Een nieuw document wordt aangemaakt",
       "language": "Vergadertalen:",
-      "recording": "Start ook een video-opname"
+      "recording": "Start ook een opname"
     },
     "button": {
       "start": "Begin met het transcriberen van de vergadering",

src/helm/env.d/common.yaml.gotmpl

@@ -150,7 +150,6 @@ backend:
     # Frontend
     LIVEKIT_FORCE_WSS_PROTOCOL: True
     LIVEKIT_ENABLE_FIREFOX_PROXY_WORKAROUND: True
-    LIVEKIT_DEFAULT_VIDEO_CODEC: vp9
     FRONTEND_IDLE_DISCONNECT_WARNING_DELAY: 9000
     FRONTEND_SILENCE_LIVEKIT_DEBUG: False
     FRONTEND_SUPPORT: "{'id': '58ea6697-8eba-4492-bc59-ad6562585041', 'help_article_transcript': 'https://lasuite.crisp.help/fr/article/visio-transcript-1sjq43x', 'help_article_recording': 'https://lasuite.crisp.help/fr/article/visio-enregistrement-wgc8o0', 'help_article_more_tools': 'https://lasuite.crisp.help/fr/article/visio-tools-bvxj23'}"