🔖(minor) bump release to 1.20.0

🩹(frontend) fix CSP regression breaking inline styles and ProConnect
A previous CSP change suggested by CodeRabbit was not properly tested and broke inline styling as well as the loading of the ProConnect image. Adjust the CSP directives to allow these resources again.
2026-07-27 04:09:26 +00:00 · 2026-06-12 17:25:56 +02:00 · 2026-06-12 15:54:26 +02:00 · 2026-06-12 09:38:53 +02:00 · 2026-06-12 09:11:07 +02:00 · 2026-06-11 16:26:13 +02:00
47 changed files with 937 additions and 2552 deletions
@@ -8,9 +8,16 @@ and this project adheres to

 ## [Unreleased]

-### Added
+## [1.20.0] - 2026-06-12

- ✨(backend) add structured audit logging
+### Changed
+
+- ♻️(addon) improve Outlook add-on: i18n support, feedback link, smarter link
+- ⬆️(frontend) upgrade react-i18next from 15.1.1 to 17.0.8
+
+### Fixed
+
+- 🐛(frontend) fix noise reduction left-channel-only audio

 ## [1.19.0] - 2026-06-04

@@ -60,6 +60,8 @@ USER root

 # Security patches for known CVEs
 RUN apk update && apk upgrade  \
+    libcrypto3>=3.5.7-r0 \
+    libssl3>=3.5.7-r0 \
    musl \
    musl-utils \
    zlib>=1.3.2-r0 \
@@ -48,9 +48,12 @@ server {

      set $nonce $request_id;

-      set $csp "upgrade-insecure-requests; ";
+      set $csp "default-src 'self'; upgrade-insecure-requests; ";
      set $csp "${csp}frame-ancestors ${ms_domains}; ";
      set $csp "${csp}script-src 'nonce-${nonce}' 'strict-dynamic'; ";
+      set $csp "${csp}style-src 'self' 'unsafe-inline'; ";
+      set $csp "${csp}img-src 'self' data:; ";
+      set $csp "${csp}font-src 'self' data:; ";
      set $csp "${csp}connect-src 'self' ${ms_domains}; ";
      set $csp "${csp}frame-src 'none'; ";
      set $csp "${csp}object-src 'none'; ";
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:mailappor="http://schemas.microsoft.com/office/mailappversionoverrides/1.0" xsi:type="MailApp">
  <Id>a025f0f6-757a-4790-97f3-99c66c4a5795</Id>
-  <Version>0.0.1.0</Version>
+  <Version>0.0.2.0</Version>
  <ProviderName>__APP_NAME__</ProviderName>
  <DefaultLocale>fr-FR</DefaultLocale>
  <DisplayName DefaultValue="__APP_NAME__"/>
@@ -87,9 +87,9 @@
                    <Description resid="GenerateLink.Tooltip"/>
                  </Supertip>
                  <Icon>
-                    <bt:Image size="16" resid="Add.16x16"/>
-                    <bt:Image size="32" resid="Add.32x32"/>
-                    <bt:Image size="80" resid="Add.80x80"/>
+                    <bt:Image size="16" resid="Icon.16x16"/>
+                    <bt:Image size="32" resid="Icon.32x32"/>
+                    <bt:Image size="80" resid="Icon.80x80"/>
                  </Icon>
                  <Action xsi:type="ExecuteFunction">
                    <FunctionName>generateMeetingLinkFromMail</FunctionName>
@@ -126,9 +126,9 @@
                    <Description resid="GenerateLink.Tooltip"/>
                  </Supertip>
                  <Icon>
-                    <bt:Image size="16" resid="Add.16x16"/>
-                    <bt:Image size="32" resid="Add.32x32"/>
-                    <bt:Image size="80" resid="Add.80x80"/>
+                    <bt:Image size="16" resid="Icon.16x16"/>
+                    <bt:Image size="32" resid="Icon.32x32"/>
+                    <bt:Image size="80" resid="Icon.80x80"/>
                  </Icon>
                  <Action xsi:type="ExecuteFunction">
                    <FunctionName>generateMeetingLinkFromCalendar</FunctionName>
@@ -175,15 +175,34 @@
        <bt:Url id="Taskpane.Url" DefaultValue="https://localhost:3000/taskpane.html"/>
      </bt:Urls>
      <bt:ShortStrings>
+        <!-- Default (French) -->
        <bt:String id="GroupLabel" DefaultValue="__APP_NAME__"/>
-        <bt:String id="TaskpaneButton.Label" DefaultValue="Ouvrir les paramètres"/>
-        <bt:String id="GenerateLink.Label" DefaultValue="Ajouter un lien __APP_NAME__"/>
-        <bt:String id="OpenSettings.Label" DefaultValue="Paramètres"/>
+        <bt:String id="GenerateLink.Label" DefaultValue="Ajouter un lien __APP_NAME__">
+          <bt:Override Locale="en-US" Value="Add a __APP_NAME__ link"/>
+          <bt:Override Locale="de-DE" Value="__APP_NAME__-Link hinzufügen"/>
+        </bt:String>
+        <bt:String id="TaskpaneButton.Label" DefaultValue="Ouvrir les paramètres">
+          <bt:Override Locale="en-US" Value="Open settings"/>
+          <bt:Override Locale="de-DE" Value="Einstellungen öffnen"/>
+        </bt:String>
+        <bt:String id="OpenSettings.Label" DefaultValue="Paramètres">
+          <bt:Override Locale="en-US" Value="Settings"/>
+          <bt:Override Locale="de-DE" Value="Einstellungen"/>
+        </bt:String>
      </bt:ShortStrings>
      <bt:LongStrings>
-        <bt:String id="TaskpaneButton.Tooltip" DefaultValue="Ouvre les paramètres de connexion __APP_NAME__."/>
-        <bt:String id="GenerateLink.Tooltip" DefaultValue="Génère un lien de réunion __APP_NAME__ et l'insère dans l'événement."/>
-        <bt:String id="OpenSettings.Tooltip" DefaultValue="Ouvre les paramètres de connexion __APP_NAME__."/>
+        <bt:String id="GenerateLink.Tooltip" DefaultValue="Génère un lien de réunion __APP_NAME__ et l'insère dans l'événement.">
+          <bt:Override Locale="de-DE" Value="Generiert einen __APP_NAME__-Besprechungslink und fügt ihn in den Termin ein."/>
+          <bt:Override Locale="en-US" Value="Generates a __APP_NAME__ meeting link and inserts it into the item."/>
+        </bt:String>
+        <bt:String id="TaskpaneButton.Tooltip" DefaultValue="Ouvre les paramètres de connexion __APP_NAME__.">
+          <bt:Override Locale="de-DE" Value="Öffnet die __APP_NAME__-Verbindungseinstellungen."/>
+          <bt:Override Locale="en-US" Value="Opens the __APP_NAME__ connection settings."/>
+        </bt:String>
+        <bt:String id="OpenSettings.Tooltip" DefaultValue="Ouvre les paramètres de connexion __APP_NAME__.">
+          <bt:Override Locale="de-DE" Value="Öffnet die __APP_NAME__-Verbindungseinstellungen."/>
+          <bt:Override Locale="en-US" Value="Opens the __APP_NAME__ connection settings."/>
+        </bt:String>
      </bt:LongStrings>
    </Resources>
  </VersionOverrides>
@@ -9,33 +9,35 @@
      "version": "0.0.1",
      "license": "MIT",
      "dependencies": {
-        "core-js": "^3.49.0",
-        "regenerator-runtime": "^0.14.1"
+        "core-js": "3.49.0",
+        "i18next": "26.3.1",
+        "i18next-browser-languagedetector": "8.2.1",
+        "regenerator-runtime": "0.14.1"
      },
      "devDependencies": {
-        "@babel/core": "^7.24.0",
-        "@babel/preset-env": "^7.25.4",
-        "@types/office-js": "^1.0.377",
-        "@types/office-runtime": "^1.0.35",
-        "acorn": "^8.11.3",
-        "babel-loader": "^9.1.3",
-        "copy-webpack-plugin": "^14.0.0",
-        "eslint-plugin-office-addins": "^4.0.3",
-        "file-loader": "^6.2.0",
-        "html-loader": "^5.0.0",
-        "html-webpack-inject-attributes-plugin": "^1.0.6",
-        "html-webpack-plugin": "^5.6.0",
-        "office-addin-cli": "^2.0.3",
-        "office-addin-debugging": "^6.0.3",
-        "office-addin-dev-certs": "^2.0.3",
-        "office-addin-lint": "^3.0.3",
-        "office-addin-manifest": "^2.0.3",
-        "office-addin-prettier-config": "^2.0.1",
-        "os-browserify": "^0.3.0",
-        "process": "^0.11.10",
-        "source-map-loader": "^5.0.0",
-        "webpack": "^5.95.0",
-        "webpack-cli": "^5.1.4",
+        "@babel/core": "7.29.0",
+        "@babel/preset-env": "7.29.0",
+        "@types/office-js": "1.0.582",
+        "@types/office-runtime": "1.0.36",
+        "acorn": "8.16.0",
+        "babel-loader": "9.2.1",
+        "copy-webpack-plugin": "14.0.0",
+        "eslint-plugin-office-addins": "4.0.6",
+        "file-loader": "6.2.0",
+        "html-loader": "5.1.0",
+        "html-webpack-inject-attributes-plugin": "1.0.6",
+        "html-webpack-plugin": "5.6.6",
+        "office-addin-cli": "2.0.6",
+        "office-addin-debugging": "6.0.6",
+        "office-addin-dev-certs": "2.0.6",
+        "office-addin-lint": "3.0.6",
+        "office-addin-manifest": "2.1.2",
+        "office-addin-prettier-config": "2.0.1",
+        "os-browserify": "0.3.0",
+        "process": "0.11.10",
+        "source-map-loader": "5.0.0",
+        "webpack": "5.105.4",
+        "webpack-cli": "5.1.4",
        "webpack-dev-server": "5.2.4"
      }
    },
@@ -2111,9 +2113,7 @@
      "version": "7.28.6",
      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.28.6.tgz",
      "integrity": "sha512-05WQkdpL9COIMz4LjTxGpPNCdlpyimKppYNoJ5Di5EUObifl8t4tuLuUBBZEpoLYOmfvIWrsp9fCl0HoPRVTdA==",
-      "dev": true,
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">=6.9.0"
      }
@@ -9363,6 +9363,43 @@
        "node": ">=10.18"
      }
    },
+    "node_modules/i18next": {
+      "version": "26.3.1",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.3.1.tgz",
+      "integrity": "sha512-txQqd5EULsqEh9OJqRH15aCaOuy/nLJyhw5EHCSKLKJE1aBbb3Zve2+uQIxgWhPm1QqUQoWyQBm2kfmmIrzkcQ==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://www.locize.com/i18next"
+        },
+        {
+          "type": "individual",
+          "url": "https://www.i18next.com/how-to/faq#i18next-is-awesome.-how-can-i-support-the-project"
+        },
+        {
+          "type": "individual",
+          "url": "https://www.locize.com"
+        }
+      ],
+      "license": "MIT",
+      "peerDependencies": {
+        "typescript": "^5 || ^6"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/i18next-browser-languagedetector": {
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/i18next-browser-languagedetector/-/i18next-browser-languagedetector-8.2.1.tgz",
+      "integrity": "sha512-bZg8+4bdmaOiApD7N7BPT9W8MLZG+nPTOFlLiJiT8uzKXFjhxw4v2ierCXOwB5sFDMtuA5G4kgYZ0AznZxQ/cw==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/runtime": "^7.23.2"
+      }
+    },
    "node_modules/iconv-lite": {
      "version": "0.6.3",
      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
@@ -15213,7 +15250,7 @@
      "version": "5.9.3",
      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
-      "dev": true,
+      "devOptional": true,
      "license": "Apache-2.0",
      "bin": {
        "tsc": "bin/tsc",
@@ -26,33 +26,35 @@
    "watch": "webpack --mode development --watch"
  },
  "dependencies": {
-    "core-js": "^3.49.0",
-    "regenerator-runtime": "^0.14.1"
+    "core-js": "3.49.0",
+    "i18next": "26.3.1",
+    "i18next-browser-languagedetector": "8.2.1",
+    "regenerator-runtime": "0.14.1"
  },
  "devDependencies": {
-    "@babel/core": "^7.24.0",
-    "@babel/preset-env": "^7.25.4",
-    "@types/office-js": "^1.0.377",
-    "@types/office-runtime": "^1.0.35",
-    "acorn": "^8.11.3",
-    "babel-loader": "^9.1.3",
-    "copy-webpack-plugin": "^14.0.0",
-    "eslint-plugin-office-addins": "^4.0.3",
-    "file-loader": "^6.2.0",
-    "html-loader": "^5.0.0",
-    "html-webpack-inject-attributes-plugin": "^1.0.6",
-    "html-webpack-plugin": "^5.6.0",
-    "office-addin-cli": "^2.0.3",
-    "office-addin-debugging": "^6.0.3",
-    "office-addin-dev-certs": "^2.0.3",
-    "office-addin-lint": "^3.0.3",
-    "office-addin-manifest": "^2.0.3",
-    "office-addin-prettier-config": "^2.0.1",
-    "os-browserify": "^0.3.0",
-    "process": "^0.11.10",
-    "source-map-loader": "^5.0.0",
-    "webpack": "^5.95.0",
-    "webpack-cli": "^5.1.4",
+    "@babel/core": "7.29.0",
+    "@babel/preset-env": "7.29.0",
+    "@types/office-js": "1.0.582",
+    "@types/office-runtime": "1.0.36",
+    "acorn": "8.16.0",
+    "babel-loader": "9.2.1",
+    "copy-webpack-plugin": "14.0.0",
+    "eslint-plugin-office-addins": "4.0.6",
+    "file-loader": "6.2.0",
+    "html-loader": "5.1.0",
+    "html-webpack-inject-attributes-plugin": "1.0.6",
+    "html-webpack-plugin": "5.6.6",
+    "office-addin-cli": "2.0.6",
+    "office-addin-debugging": "6.0.6",
+    "office-addin-dev-certs": "2.0.6",
+    "office-addin-lint": "3.0.6",
+    "office-addin-manifest": "2.1.2",
+    "office-addin-prettier-config": "2.0.1",
+    "os-browserify": "0.3.0",
+    "process": "0.11.10",
+    "source-map-loader": "5.0.0",
+    "webpack": "5.105.4",
+    "webpack-cli": "5.1.4",
    "webpack-dev-server": "5.2.4"
  },
  "prettier": "office-addin-prettier-config",
@@ -1,12 +1,18 @@
 /* global Office */
+const { APP_NAME } = require("../common/index");
 const { createRoom, initSession } = require("../common/api");
 const { startPolling } = require("../common/polling");
 const { saveSession, loadSession } = require("../common/session");
 const { openTransitDialog } = require("../common/transitDialog");
 const { buildMeetingMessage } = require("../common/messageBuilder");
 const { applyAppName } = require("../common/helpers");
+const { initI18n, t } = require("../common/i18n");
+const { isMeetingAlreadyAdded } = require("../common/meetingDetector");
+
+Office.onReady(async function (info) {
+
+  await initI18n()

-Office.onReady(function (info) {
  if (info.host === Office.HostType.Outlook) {
    applyAppName();
  }
@@ -22,41 +28,52 @@ function notify(message) {
 }

 function insertMeetingLink(event, session) {
+  const item = Office.context.mailbox.item;
+
+  isMeetingAlreadyAdded(item)
+    .then((alreadyAdded) => {
+      if (alreadyAdded) {
+        notify(t("meeting.already_added", { app_name: APP_NAME }));
+        event.completed();
+        return;
+      }
+      return _doInsertMeetingLink(event, session);
+    })
+    .catch((err) => {
+      notify(t("meeting.error.details", { message: err.message }));
+      event.completed();
+    });
+}
+
+function _doInsertMeetingLink(event, session) {
  createRoom(session)
    .then((data) => {
-      const { url, message } = buildMeetingMessage(data);
+      const isWeb = Office.context.diagnostics.platform === "OfficeOnline";
+      const { url, text } = buildMeetingMessage(data, isWeb);
      const item = Office.context.mailbox.item;
+      const coercionType = isWeb ? Office.CoercionType.Html : Office.CoercionType.Text;

      return new Promise((resolve, reject) => {
-        item.body.getAsync(Office.CoercionType.Html, (getResult) => {
-          if (getResult.status !== Office.AsyncResultStatus.Succeeded) {
-            notify(`Erreur de lecture : ${getResult.error.message}`);
+        item.body.setSelectedDataAsync(text, { coercionType }, (setResult) => {
+          if (setResult.status !== Office.AsyncResultStatus.Succeeded) {
+            notify(t("meeting.error.details", { message: setResult.error.message }));
            resolve();
            return;
          }

-          const newBody = getResult.value + message;
-          item.body.setAsync(newBody, { coercionType: Office.CoercionType.Html }, (setResult) => {
-            if (setResult.status !== Office.AsyncResultStatus.Succeeded) {
-              notify(`Erreur d'insertion : ${setResult.error.message}`);
-              resolve();
-              return;
-            }
+          if (item.itemType !== Office.MailboxEnums.ItemType.Appointment) {
+            notify(t("meeting.link_inserted"));
+            resolve();
+            return;
+          }

-            if (item.itemType !== Office.MailboxEnums.ItemType.Appointment) {
-              notify("Lien de réunion inséré !");
-              resolve();
-              return;
+          item.location.setAsync(url, (locationResult) => {
+            if (locationResult.status !== Office.AsyncResultStatus.Succeeded) {
+              notify(t("meeting.error.details", { message: locationResult.error.message }));
+            } else {
+              notify(t("meeting.link_inserted"));
            }
-
-            item.location.setAsync(url, (locationResult) => {
-              if (locationResult.status !== Office.AsyncResultStatus.Succeeded) {
-                notify(`Erreur de localisation : ${locationResult.error.message}`);
-              } else {
-                notify("Lien de réunion inséré !");
-              }
-              resolve();
-            });
+            resolve();
          });
        });
      });
@@ -79,11 +96,11 @@ function connect(event) {
          });
        },
        onTimeout: () => {
-          notify("Connexion expirée, veuillez réessayer.");
+          notify(t("meeting.error.auth"));
          event.completed();
        },
        onError: (err) => {
-          notify("Une erreur est survenue, veuillez ré-essayer");
+          notify(t("meeting.error.retry"));
          event.completed();
        },
      });
@@ -99,7 +116,7 @@ function connect(event) {
      });
    })
    .catch((err) => {
-      notify(`Erreur : ${err.message}`);
+      notify(t("meeting.error.details", { message: err.message }));
      event.completed();
    });
 }
@@ -0,0 +1,48 @@
+const { APP_NAME } = require("../common");
+
+const i18nextModule = require("i18next");
+const i18next = i18nextModule.default || i18nextModule;
+
+const fr = require("../locales/fr/translation.json");
+const en = require("../locales/en/translation.json");
+const de = require("../locales/de/translation.json");
+
+async function initI18n() {
+  const lng = typeof Office !== "undefined" ? Office.context.displayLanguage : navigator.language;
+
+  await i18next.init({
+    lng,
+    fallbackLng: "fr",
+    interpolation: { escapeValue: false },
+    resources: {
+      fr: { translation: fr },
+      en: { translation: en },
+      de: { translation: de },
+    },
+  });
+}
+
+function t(key, vars) {
+  return i18next.t(key, vars);
+}
+
+function translateUI() {
+  document.querySelectorAll("[data-i18n]").forEach((el) => {
+    const key = el.getAttribute("data-i18n");
+    el.textContent = t(key, { app_name: APP_NAME });
+  });
+
+  document.querySelectorAll("[data-i18n-attr]").forEach((el) => {
+    const pairs = el.getAttribute("data-i18n-attr").split(",");
+    pairs.forEach((pair) => {
+      const [attr, key] = pair.split(":");
+      el.setAttribute(attr, t(key, { app_name: APP_NAME }));
+    });
+  });
+
+  document.querySelectorAll("[data-i18n-aria]").forEach((el) => {
+    el.setAttribute("aria-label", t(el.getAttribute("data-i18n-aria")));
+  });
+}
+
+module.exports = { initI18n, t, translateUI };
@@ -1,7 +1,11 @@
 const BASE_URL = window.__APP_CONFIG__?.BASE_URL || "https://meet.127.0.0.1.nip.io";
 const APP_NAME = window.__APP_CONFIG__?.APP_NAME || "LaSuite Meet";
+const ENABLE_SOURCE_TRACKING = window.__APP_CONFIG__?.ENABLE_SOURCE_TRACKING === "true";
+const FEEDBACK_FORM = window.__APP_CONFIG__?.FEEDBACK_FORM || null;

 module.exports = {
  BASE_URL,
  APP_NAME,
+  ENABLE_SOURCE_TRACKING,
+  FEEDBACK_FORM
 };
@@ -0,0 +1,107 @@
+const { BASE_URL } = require("./index");
+
+/**
+ * Returns a promise that resolves to true if a meeting link is already present
+ */
+function isMeetingAlreadyAdded(item) {
+  return Promise.all([_checkBody(item), _checkLocation(item)]).then(
+    ([inBody, inLocation]) => inBody || inLocation
+  );
+}
+
+function _checkBody(item) {
+  return new Promise((resolve) => {
+    item.body.getAsync(Office.CoercionType.Text, (result) => {
+      if (result.status !== Office.AsyncResultStatus.Succeeded) {
+        resolve(false);
+        return;
+      }
+      resolve(_containsMeetingUrl(result.value));
+    });
+  });
+}
+
+function _checkLocation(item) {
+  // Location only exists on appointments
+  if (item.itemType !== Office.MailboxEnums.ItemType.Appointment) {
+    return Promise.resolve(false);
+  }
+  return new Promise((resolve) => {
+    item.location.getAsync((result) => {
+      if (result.status !== Office.AsyncResultStatus.Succeeded) {
+        resolve(false);
+        return;
+      }
+      resolve(_containsMeetingUrl(result.value));
+    });
+  });
+}
+
+function _containsMeetingUrl(text) {
+  if (!text) return false;
+  return text.includes(BASE_URL);
+}
+
+function removeMeetingLink(item) {
+  return Promise.all([_removeFromBody(item), _removeFromLocation(item)]);
+}
+
+function _removeFromBody(item) {
+  return new Promise((resolve) => {
+    item.body.getAsync(Office.CoercionType.Html, (result) => {
+      if (result.status !== Office.AsyncResultStatus.Succeeded) {
+        resolve();
+        return;
+      }
+      const cleaned = _cleanBody(result.value || "");
+      if (cleaned === null) {
+        resolve();
+        return;
+      }
+      item.body.setAsync(cleaned, { coercionType: Office.CoercionType.Html }, () => resolve());
+    });
+  });
+}
+
+function _removeFromLocation(item) {
+  if (item.itemType !== Office.MailboxEnums.ItemType.Appointment) {
+    return Promise.resolve();
+  }
+  return new Promise((resolve) => {
+    item.location.getAsync((result) => {
+      if (
+        result.status === Office.AsyncResultStatus.Succeeded &&
+        _containsMeetingUrl(result.value)
+      ) {
+        item.location.setAsync("", () => resolve());
+      } else {
+        resolve();
+      }
+    });
+  });
+}
+
+const SEPARATOR = /─{10,}/;
+
+/**
+ * Returns cleaned HTML, or null if no meeting block was found.
+ */
+function _cleanBody(html) {
+  const doc = new DOMParser().parseFromString(html, "text/html");
+
+  const hits = [];
+  const walker = doc.createTreeWalker(doc.body, NodeFilter.SHOW_TEXT);
+  while (walker.nextNode()) {
+    if (SEPARATOR.test(walker.currentNode.nodeValue)) hits.push(walker.currentNode);
+  }
+  if (hits.length < 2) return null;
+
+  const range = doc.createRange();
+  range.setStartBefore(hits[0]);
+  range.setEndAfter(hits[hits.length - 1]);
+  range.deleteContents();
+
+  return doc.documentElement.outerHTML;
+}
+
+module.exports = { isMeetingAlreadyAdded, removeMeetingLink };
@@ -1,4 +1,5 @@
-const { APP_NAME } = require("./index");
+const { APP_NAME, ENABLE_SOURCE_TRACKING } = require("./index");
+const { t } = require("./i18n");

 function _formatPin(pin) {
  if (!pin) return "";
@@ -20,33 +21,59 @@ function _formatPhone(phone) {
  return clean;
 }

+function _appendTrackingParams(url) {
+  if (!ENABLE_SOURCE_TRACKING) return url;
+  const u = new URL(url);
+  u.searchParams.set("from", "outlook-addin");
+  return u.toString();
+}
+
+
 // todo - escape html / link
-function buildMeetingMessage(data) {
+function buildMeetingMessage(data, isWeb) {
  if (!data?.url) {
    throw new Error("buildMeetingMessage: missing url in data");
  }

-  const url = data.url;
+  const url = _appendTrackingParams(data.url);
  const phone = _formatPhone(data.telephony?.phone_number);
  const pin = _formatPin(data.telephony?.pin_code);

-  const telephonyBlock =
-    phone && pin
-      ? `
+  let textLines = "";
+  let phoneLines = [];

-Ou appelez (audio uniquement)
-(FR) ${phone}
-Code : ${pin}`
-      : "";
+  const join = t("meeting_message.join", { app_name: APP_NAME });
+  const phoneOnly = t("meeting_message.phone_only");
+  const phoneFr = t("meeting_message.phone_fr", { phone });
+  const pinCode = t("meeting_message.pin_code", { pin });

-  const message = `<pre style="font-family:inherit; font-size:inherit; border:none; background:none; margin:16px 0;">
-────────────────────────────────────────
-Rejoindre la réunion ${APP_NAME}
+  if (isWeb) {
+    phoneLines = phone && pin ? [`<br><br>${phoneOnly}`, `<br>${phoneFr}`, `<br>${pinCode}`] : [];

-<a href="${url}">${url}</a>${telephonyBlock}
-────────────────────────────────────────</pre>`;
+    textLines = [
+      "<br><br>────────────────────────────────────────",
+      `<br>${join}`,
+      `<br><br><a href="${url}" target="_blank">${url}</a>`,
+      ...phoneLines,
+      "<br>────────────────────────────────────────<br>",
+    ];

-  return { url, message };
+  } else {
+
+    phoneLines = phone && pin ? [`\n\n${phoneOnly}`, `\n${phoneFr}`, `\n${pinCode}`] : [];
+
+    textLines = [
+      "\n\n────────────────────────────────────────",
+      `\n${join}`,
+      `\n\n${url}`,
+      ...phoneLines,
+      "\n────────────────────────────────────────\n",
+    ];
+  }
+
+  const text = textLines.join("");
+
+  return { url, text };
 }

 module.exports = { buildMeetingMessage };
@@ -0,0 +1,40 @@
+{
+  "app": {
+    "sideload": "Laden Sie das Add-In.",
+    "loading": "Wird geladen..."
+  },
+  "unauth": {
+    "intro": "Fügen Sie Ihren Outlook-Terminen ganz einfach einen {{app_name}}-Besprechungslink hinzu.",
+    "proconnect_btn": "Aanmelden met ProConnect",
+    "proconnect_link": "Wat is ProConnect?",
+    "proconnect_link_title": "Wat is ProConnect? - nieuw venster"
+  },
+  "success": {
+    "close_window": "Falls sich dieses Fenster nicht automatisch schließt, schließen Sie es bitte manuell."
+  },
+  "auth": {
+    "disconnect": "Abmelden"
+  },
+  "meeting": {
+    "already_added": "Es wurde bereits ein {{app_name}}-Meeting hinzugefügt.",
+    "link_inserted": "Besprechungslink erfolgreich eingefügt",
+    "generating": "Wird erstellt...",
+    "add_meeting": "{{app_name}}-Besprechung hinzufügen",
+    "remove_meeting": "{{app_name}}-Besprechung entfernen",
+    "removing": "Wird entfernt...",
+    "error": {
+      "auth": "Ihre Sitzung ist abgelaufen. Bitte versuchen Sie es erneut.",
+      "retry": "Es ist ein Fehler aufgetreten. Bitte versuchen Sie es erneut.",
+      "details": "Fehler: {{message}}"
+    }
+  },
+  "meeting_message": {
+    "join": "An der {{app_name}}-Besprechung teilnehmen",
+    "phone_only": "Oder per Telefon teilnehmen (nur Audio)",
+    "phone_fr": "(FR) {{phone}}",
+    "pin_code": "Code {{pin}}"
+  },
+  "footer": {
+    "feedback": "Teilen Sie uns Ihr Feedback mit"
+  }
+}
@@ -0,0 +1,40 @@
+{
+  "app": {
+    "sideload": "Please load the add-in.",
+    "loading": "Loading..."
+  },
+  "unauth": {
+    "intro": "Easily add a {{app_name}} meeting link to your Outlook events.",
+    "proconnect_btn": "Sign in with ProConnect",
+    "proconnect_link": "What is ProConnect?",
+    "proconnect_link_title": "What is ProConnect? - new window"
+  },
+  "success": {
+    "close_window": "If this window does not close automatically, please close it manually."
+  },
+  "auth": {
+    "disconnect": "Sign out"
+  },
+  "meeting": {
+    "already_added": "A {{app_name}} meeting has already been added.",
+    "link_inserted": "Meeting link inserted successfully",
+    "generating": "Generating...",
+    "add_meeting": "Add a {{app_name}} meeting",
+    "remove_meeting": "Remove the {{app_name}} meeting",
+    "removing": "Removing...",
+    "error": {
+      "auth": "Your session has expired. Please try again.",
+      "retry": "An error occurred. Please try again.",
+      "details": "Error: {{message}}"
+    }
+  },
+  "meeting_message": {
+    "join": "Join the {{app_name}} meeting",
+    "phone_only": "Or call in (audio only)",
+    "phone_fr": "(FR) {{phone}}",
+    "pin_code": "Code {{pin}}"
+  },
+  "footer": {
+    "feedback": "Share your feedback"
+  }
+}
@@ -0,0 +1,40 @@
+{
+  "app": {
+    "sideload": "Veuillez charger le complément.",
+    "loading": "Chargement..."
+  },
+  "unauth": {
+    "intro": "Ajoutez facilement un lien de réunion {{app_name}} à vos événements Outlook.",
+    "proconnect_btn": "S'identifier avec ProConnect",
+    "proconnect_link": "Qu'est-ce que ProConnect ?",
+    "proconnect_link_title": "Qu'est-ce que ProConnect ? - nouvelle fenêtre"
+  },
+  "success": {
+    "close_window": "Si cette fenêtre ne se ferme pas toute seule, veuillez la fermer manuellement."
+  },
+  "auth": {
+    "disconnect": "Se déconnecter"
+  },
+  "meeting": {
+    "already_added": "Une réunion {{app_name}} a déjà été ajoutée.",
+    "link_inserted": "Lien de réunion inséré avec succès",
+    "generating": "Génération...",
+    "add_meeting": "Ajouter une réunion {{app_name}}",
+    "remove_meeting": "Supprimer la réunion {{app_name}}",
+    "removing": "Suppression en cours...",
+    "error": {
+      "auth": "Connexion expirée, veuillez réessayer.",
+      "retry": "Une erreur est survenue, veuillez ré-essayer",
+      "details": "Erreur : {{message}}"
+    }
+  },
+  "meeting_message": {
+    "join": "Rejoindre la réunion {{app_name}}",
+    "phone_only": "Ou appelez (audio uniquement)",
+    "phone_fr": "(FR) {{phone}}",
+    "pin_code": "Code {{pin}}"
+  },
+  "footer": {
+    "feedback": "Partagez-nous vos retours"
+  }
+}
@@ -9,10 +9,10 @@
    <script nonce="NONCE_PLACEHOLDER" src="/addons/outlook/config.js"></script>
 </head>
    <body>
-        <div id="sideload-msg">Veuillez charger le complément.</div>
+        <div id="sideload-msg" data-i18n="app.sideload"></div>
        <div class="spinner-container"
             role="progressbar"
-             aria-label="Chargement..."
+             data-i18n-aria="app.loading"
        >
            <svg class="spinner-svg"
                 viewBox="0 0 28 28"
@@ -40,5 +40,6 @@
                        </svg>
                    </span>
        </div>
+        <p id="close-msg" style="display: none; text-align: center; font-size: 13px; color: #666; margin-top: 16px;" data-i18n="success.close_window"></p>
    </body>
 </html>
@@ -1,20 +1,35 @@
 const { applyAppName } = require("../common/helpers");
 const { exchangeSession } = require("../common/api");
 const { consume } = require("../common/transitToken");
+const { initI18n, translateUI } = require("../common/i18n");

-applyAppName();
+(async () => {
+  await initI18n();

-const transitToken = consume();
+  applyAppName();
+  translateUI();

-if (!transitToken) {
-  console.error("Transit token not found in sessionStorage");
-  window.close();
-} else {
-  exchangeSession(transitToken)
-    .catch((e) => {
-      console.error(`Error occured: ${e}`);
-    })
-    .finally(() => {
-      window.close();
-    });
-}
+  const transitToken = consume();
+
+  if (!transitToken) {
+    console.error("Transit token not found in sessionStorage");
+    window.close();
+  } else {
+    exchangeSession(transitToken)
+      .then(() => {
+        document.querySelector(".spinner-container").style.display = "none";
+        document.querySelector("#close-msg").style.display = "block";
+      })
+      .catch((e) => {
+        console.error(`Error occured: ${e}`);
+      })
+      .finally(() => {
+        // NOTE: doesn't work with the desktop client — the browser considers
+        // this window wasn't opened by this script (it was opened externally),
+        // so it blocks window.close() for security reasons. The "#close-msg"
+        // shown above is the fallback for that case.g
+
+        window.close();
+      });
+  }
+})();
@@ -115,15 +115,39 @@ button {
    background-color: #f5f5f5;
 }

+/* ── Danger button (remove meeting) ── */
+
+#btn-remove {
+    background-color: #CA3632; /* error.400 */
+    color: #FFFFFF;
+    border: none;
+}
+
+#btn-remove:hover {
+    background-color: #EE6A66; /* error.600 */
+}
+
+#btn-remove:active {
+    background-color: #F28D8A; /* error.700 */
+    color: #F6AFAD;            /* error.200 */
+}
+
+#btn-remove:disabled {
+    background-color: #F6AFAD; /* error.800 */
+    color: #FAD2D1;            /* error.900 */
+    cursor: not-allowed;
+}
+
 /* ── Version ── */

 #version-tag {
    position: fixed;
    bottom: 8px;
+    left: 8px;
    right: 8px;
-    display: inline-flex;
+    display: flex;
+    justify-content: space-between;
    align-items: center;
-    gap: 4px;
    font-size: 11px;
    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
    color: #6b7280;
@@ -131,9 +155,29 @@ button {
    pointer-events: none;
 }

+#feedback-link {
+    font-size: 11px;
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+    color: #6b7280;
+    text-decoration: underline;
+    pointer-events: all; /* override parent's pointer-events: none */
+    cursor: pointer;
+}
+
+#feedback-link:hover {
+    color: #374151;
+}
+
+#footer-right {
+    display: inline-flex;
+    align-items: center;
+    gap: 4px;
+    margin-left: auto;
+}
+
 .version-badge {
-    background: #fef3c7;
-    color: #92400e;
+    background: #EEF1F4;
+    color: #2845C1;
    padding: 1px 6px;
    border-radius: 3px;
    font-weight: 600;
@@ -10,47 +10,56 @@
    <script nonce="NONCE_PLACEHOLDER" src="https://appsforoffice.microsoft.com/lib/1/hosted/office.js"></script>
 </head>
 <body>
-<div id="sideload-msg">Veuillez charger le complément.</div>
+<div id="sideload-msg" data-i18n="app.sideload"></div>

 <div id="app-body">

    <!-- Loading -->
    <div id="view-loading">
-        <p class="intro-text">Chargement...</p>
+        <p class="intro-text" data-i18n="app.loading"></p>
    </div>

    <!-- Unauthenticated -->
    <div id="view-unauth" style="display:none;">
        <p class="intro-text">
-            <span>Ajoutez facilement un lien de réunion <span data-app-name></span> à vos événements Outlook.</span>
+            <span data-i18n="unauth.intro"></span>
        </p>
        <hr class="divider" />
        <button class="proconnect-button" id="btn-connect">
-            <span class="proconnect-sr-only">S'identifier avec ProConnect</span>
+            <span class="proconnect-sr-only" data-i18n="unauth.proconnect_btn"></span>
        </button>
        <p>
-            <a
-                    href="https://www.proconnect.gouv.fr/"
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    title="Qu’est-ce que ProConnect ? - nouvelle fenêtre"
-            >
-                Qu’est-ce que ProConnect ?
-            </a>
+            <a href="https://www.proconnect.gouv.fr/"
+               target="_blank"
+               rel="noopener noreferrer"
+               data-i18n-attr="title:unauth.proconnect_link_title"
+               data-i18n="unauth.proconnect_link"
+            ></a>
        </p>
    </div>

    <!-- Authenticated -->
    <div id="view-auth" style="display:none;">
        <div id="btn-container">
-            <button id="btn-generate">Ajouter une réunion <span data-app-name></span></button>
-            <button id="btn-disconnect">Se déconnecter</button>
+            <!-- shown when no meeting is present -->
+            <button id="btn-generate" data-i18n="meeting.add_meeting"></button>
+            <!-- shown when a meeting is already present -->
+            <button id="btn-remove" style="display:none;" data-i18n="meeting.remove_meeting"></button>
+            <button id="btn-disconnect" data-i18n="auth.disconnect"></button>
        </div>
    </div>
 </div>
 <footer id="version-tag">
-    <span class="version-badge">alpha</span>
-    <span class="version-number">0.0.1</span>
+    <a id="feedback-link"
+       style="display:none;"
+       target="_blank"
+       rel="noopener noreferrer"
+       data-i18n="footer.feedback"
+    ></a>
+    <div id="footer-right">
+        <span class="version-badge">beta</span>
+        <span class="version-number">0.0.2</span>
+    </div>
 </footer>
 </body>
 </html>
@@ -1,22 +1,77 @@
-const { APP_NAME } = require("../common");
-
+/* global Office */
+const { APP_NAME, FEEDBACK_FORM } = require("../common");
 const { applyAppName } = require("../common/helpers");
 const { initSession, createRoom } = require("../common/api");
 const { startPolling } = require("../common/polling");
 const { openTransitDialog } = require("../common/transitDialog");
 const { loadSession, saveSession, clearSession } = require("../common/session");
-
 const { buildMeetingMessage } = require("../common/messageBuilder");
+const { initI18n, t, translateUI } = require("../common/i18n");
+const { isMeetingAlreadyAdded, removeMeetingLink } = require("../common/meetingDetector");
+
+// ── Views ────────────────────────────────────────────────────

-// todo - support loading view while polling
-// todo - support error view
 function showView(name) {
  document.getElementById("view-loading").style.display = "none";
  document.getElementById("view-unauth").style.display = "none";
  document.getElementById("view-auth").style.display = "none";
  document.getElementById(`view-${name}`).style.display = "block";
+
+  if (name === "auth") {
+    _refreshMeetingButtonState();
+  }
 }

+// ── Button state ─────────────────────────────────────────────
+
+function _showAddButton() {
+  document.getElementById("btn-generate").style.display = "block";
+  document.getElementById("btn-remove").style.display = "none";
+}
+
+function _showRemoveButton() {
+  document.getElementById("btn-generate").style.display = "none";
+  document.getElementById("btn-remove").style.display = "block";
+}
+
+function _setButtonLoading() {
+  const btn = document.getElementById("btn-generate");
+  btn.disabled = true;
+  btn.textContent = t("meeting.generating");
+}
+
+function _setButtonIdle() {
+  const btn = document.getElementById("btn-generate");
+  btn.disabled = false;
+  btn.textContent = t("meeting.add_meeting", { app_name: APP_NAME });
+}
+
+function _setRemoveLoading() {
+  const btn = document.getElementById("btn-remove");
+  btn.disabled = true;
+  btn.textContent = t("meeting.removing");
+}
+
+function _setRemoveIdle() {
+  const btn = document.getElementById("btn-remove");
+  btn.disabled = false;
+  btn.textContent = t("meeting.remove_meeting", { app_name: APP_NAME });
+}
+
+function _refreshMeetingButtonState() {
+  const item = Office.context.mailbox.item;
+  if (!item) return;
+  isMeetingAlreadyAdded(item).then((alreadyAdded) => {
+    if (alreadyAdded) {
+      _showRemoveButton();
+    } else {
+      _showAddButton();
+    }
+  });
+}
+
+// ── Auth ─────────────────────────────────────────────────────
+
 function connect() {
  initSession()
    .then((data) => {
@@ -47,22 +102,11 @@ function disconnect() {
  clearSession().finally(() => showView("unauth"));
 }

-function _setButtonLoading() {
-  const btn = document.getElementById("btn-generate");
-  btn.disabled = true;
-  btn.textContent = "Génération...";
-}
-
-function _setButtonIdle() {
-  const btn = document.getElementById("btn-generate");
-  btn.disabled = false;
-  btn.textContent = `Ajouter une réunion ${APP_NAME}`;
-}
+// ── Meeting ──────────────────────────────────────────────────

 function generateMeetingLink() {
  const session = loadSession();
  if (!session?.access_token) {
-    console.error("Session introuvable. Veuillez vous reconnecter.");
    showView("unauth");
    return;
  }
@@ -71,36 +115,28 @@ function generateMeetingLink() {

  createRoom(session)
    .then((data) => {
-      const { url, message } = buildMeetingMessage(data);
+      const isWeb = Office.context.diagnostics.platform === "OfficeOnline";
+      const { url, text } = buildMeetingMessage(data, isWeb);
      const item = Office.context.mailbox.item;
+      const coercionType = isWeb ? Office.CoercionType.Html : Office.CoercionType.Text;
+
      return new Promise((resolve, reject) => {
-        item.body.getAsync(Office.CoercionType.Html, (getResult) => {
-          if (getResult.status !== Office.AsyncResultStatus.Succeeded) {
-            reject(getResult.error);
+        item.body.setSelectedDataAsync(text, { coercionType }, (setResult) => {
+          if (setResult.status !== Office.AsyncResultStatus.Succeeded) {
+            reject(setResult.error);
            return;
          }
-
-          item.body.setAsync(
-            getResult.value + message,
-            { coercionType: Office.CoercionType.Html },
-            (setResult) => {
-              if (setResult.status !== Office.AsyncResultStatus.Succeeded) {
-                reject(setResult.error);
-                return;
-              }
-
-              // ─── If calendar event, also set location ──────────────
-              if (item.itemType === Office.MailboxEnums.ItemType.Appointment) {
-                item.location.setAsync(url, () => resolve());
-                return;
-              }
-
-              resolve();
-            }
-          );
+          if (item.itemType === Office.MailboxEnums.ItemType.Appointment) {
+            item.location.setAsync(url, () => resolve());
+            return;
+          }
+          resolve();
        });
      });
    })
+    .then(() => {
+      _showRemoveButton();
+    })
    .catch((err) => {
      console.error(err);
    })
@@ -109,7 +145,41 @@ function generateMeetingLink() {
    });
 }

-Office.onReady((info) => {
+function removeMeetingLinkFromItem() {
+  const session = loadSession();
+  if (!session?.access_token) {
+    showView("unauth");
+    return;
+  }
+
+  _setRemoveLoading();
+
+  const item = Office.context.mailbox.item;
+
+  removeMeetingLink(item)
+    .then(() => {
+      _showAddButton();
+    })
+    .catch((err) => {
+      console.error(err);
+    })
+    .finally(() => {
+      _setRemoveIdle();
+    });
+}
+
+// ── Init ─────────────────────────────────────────────────────
+
+Office.onReady(async (info) => {
+  await initI18n();
+  translateUI();
+
+  if (FEEDBACK_FORM) {
+    const link = document.getElementById("feedback-link");
+    link.href = FEEDBACK_FORM;
+    link.style.display = "inline";
+  }
+
  if (info.host === Office.HostType.Outlook) {
    applyAppName();
    document.getElementById("sideload-msg").style.display = "none";
@@ -117,10 +187,11 @@ Office.onReady((info) => {
    document.getElementById("btn-connect").onclick = connect;
    document.getElementById("btn-disconnect").onclick = disconnect;
    document.getElementById("btn-generate").onclick = generateMeetingLink;
+    document.getElementById("btn-remove").onclick = removeMeetingLinkFromItem;

    const session = loadSession();
    if (session?.state === "authenticated" && session?.access_token) {
-      showView("auth");
+      showView("auth"); // this already calls _refreshMeetingButtonState internally
    } else {
      showView("unauth");
    }
@@ -10,11 +10,11 @@
        <script nonce="NONCE_PLACEHOLDER" src="https://appsforoffice.microsoft.com/lib/1/hosted/office.js"></script>
    </head>
    <body>
-        <div id="sideload-msg">Veuillez charger le complément.</div>
+        <div id="sideload-msg" data-i18n="app.sideload"></div>
        <div
            class="spinner-container"
            role="progressbar"
-            aria-label="Chargement..."
+            data-i18n-aria="app.loading"
        >
            <svg
                class="spinner-svg"
@@ -2,6 +2,7 @@ const { applyAppName } = require("../common/helpers");
 const { URLS } = require("../common/urls");
 const { save } = require("../common/transitToken");
 const { DIALOG_SIGNALS } = require("../common/transitDialog");
+const { initI18n, translateUI } = require("../common/i18n");

 // Initiate the authentication flow, then return to the success page
 function getAuthenticateUrl() {
@@ -10,7 +11,11 @@ function getAuthenticateUrl() {
  return url.toString();
 }

-Office.onReady(function (info) {
+Office.onReady(async function (info) {
+
+  await initI18n();
+  translateUI();
+
  if (info.host === Office.HostType.Outlook) {
    applyAppName();
  }
@@ -1,7 +1,7 @@

 [project]
 name = "agents"
-version = "1.19.0"
+version = "1.20.0"
 requires-python = ">=3.12"
 dependencies = [
    "livekit-agents==1.5.13",
@@ -9,7 +9,7 @@ resolution-markers = [

 [[package]]
 name = "agents"
-version = "1.19.0"
+version = "1.20.0"
 source = { virtual = "." }
 dependencies = [
    { name = "livekit-agents" },
@@ -1,194 +0,0 @@
-"""Structured audit logging."""
-
-# Audit helpers intentionally expose many optional keyword fields.
-# pylint: disable=R0913,R0917
-# ruff: noqa: PLR0913
-
-import json
-import logging
-from datetime import datetime, timezone
-from functools import partialmethod
-from typing import TYPE_CHECKING, Any, Protocol
-
-from django.http import HttpRequest
-
-AUDIT_LOGGER_NAME = "audit"
-
-
-def resolve_source_ip(request: HttpRequest):
-    """Return the best-effort client IP for ``request``.
-
-    Reads the original client from ``X-Forwarded-For`` when present,
-    falling back to ``REMOTE_ADDR``.
-
-    NB: behind a proxy/load-balancer chain, correctness depends on the ingress
-    being configured to set and trust ``X-Forwarded-For``. Confirm the
-    trusted-proxy chain before relying on this value for security decisions.
-    """
-    forwarded = request.META.get("HTTP_X_FORWARDED_FOR")
-    if forwarded:
-        return forwarded.split(",")[0].strip()
-    return request.META.get("REMOTE_ADDR")
-
-
-def extract_request_fields(request: HttpRequest) -> dict[str, Any]:
-    """Return the audit fields derivable from ``request``."""
-    meta = request.META
-    return {
-        "source_ip": resolve_source_ip(request),
-        "source_port": meta.get("REMOTE_PORT"),
-        "request_path": request.path,
-        "request_url": request.build_absolute_uri(),
-        "request_method": request.method,
-        "request_body_bytes": meta.get("CONTENT_LENGTH"),
-        "http_version": meta.get("SERVER_PROTOCOL"),
-        "user_agent": meta.get("HTTP_USER_AGENT"),
-        "referer": meta.get("HTTP_REFERER"),
-        "server_user": meta.get("REMOTE_USER"),
-    }
-
-
-class AuditJsonFormatter(logging.Formatter):
-    """Render audit records as single-line JSON.
-
-    Read the structured payload attached to the record under ``audit`` and
-    wrap it in a small envelope.
-    """
-
-    def format(self, record):
-        payload = {"log_type": "audit"}
-
-        audit = getattr(record, "audit", None)
-        if isinstance(audit, dict):
-            payload.update(audit)
-        else:
-            payload["event_type"] = record.getMessage()
-
-        payload.setdefault(
-            "timestamp",
-            datetime.fromtimestamp(record.created, tz=timezone.utc).isoformat(),
-        )
-        payload["level"] = record.levelname
-        payload["logger"] = record.name
-
-        # ``default=str`` serialises UUIDs, datetimes, etc.; ``ensure_ascii``
-        # off keeps emails and non-ASCII identifiers readable.
-        return json.dumps(payload, default=str, ensure_ascii=False)
-
-
-class _AuditEmit(Protocol):
-    """Public signature shared by the per-level audit methods.
-
-    Declared so editors and type checkers see the real keyword fields despite using `partialwrapper`.
-    """
-
-    def __call__(
-        self,
-        event_type: str,
-        *,
-        auth_type: str | None = ...,
-        actor: dict[str, Any] | None = ...,
-        source_ip: str | None = ...,
-        target: dict[str, Any] | None = ...,
-        request: HttpRequest | None = ...,
-        **extra: Any,
-    ) -> None:
-        pass
-
-
-class AuditLogger:
-    """Wrapper around the named ``audit`` logger."""
-
-    def __init__(
-        self,
-        logger_name=AUDIT_LOGGER_NAME,
-        custom_serializers: list[tuple] | None = None,
-    ):
-        self._logger = logging.getLogger(logger_name)
-        self._serializers = []
-        if custom_serializers is not None:
-            self._serializers = custom_serializers
-
-    def _emit(
-        self,
-        level,
-        event_type,
-        request: HttpRequest | None,  # Intentionnaly mandatory
-        *,
-        exc_info: bool = False,
-        **extra,
-    ):
-        """Assemble the structured payload and emit it on the audit logger.
-
-        ``exc_info`` is forwarded to the stdlib logger (set by ``exception``) so
-        the active traceback is captured; it is a logging concern and never
-        enters the audit payload.
-        """
-
-        request_fields = extract_request_fields(request) if request is not None else {}
-
-        # Create fields from custom serializers
-        new_extra = {}
-        for key, value in extra.items():
-            for cls, serializer in self._serializers:
-                if isinstance(value, cls):
-                    new_extra = new_extra | {
-                        f"{key}.{ser_key}": ser_field
-                        for ser_key, ser_field in serializer(value).items()
-                    }
-                    break
-            else:
-                new_extra[key] = value
-
-        audit = {
-            "timestamp": datetime.now(timezone.utc).isoformat(),
-            "event_type": event_type,
-            **request_fields,
-            **new_extra,
-        }
-        audit = {key: value for key, value in audit.items() if value is not None}
-
-        self._logger.log(level, event_type, extra={"audit": audit}, exc_info=exc_info)
-
-    # One public method per standard logging level, all sharing ``_emit``.
-    # The ``TYPE_CHECKING`` declarations expose the real signature to editors;
-    # the ``else`` branch is what runs, binding the level via ``partialmethod``.
-    if TYPE_CHECKING:
-        debug: _AuditEmit
-        info: _AuditEmit
-        warning: _AuditEmit
-        error: _AuditEmit
-        critical: _AuditEmit
-        # ``exception`` mirrors stdlib: ERROR level with the active traceback.
-        exception: _AuditEmit
-    else:
-        debug = partialmethod(_emit, logging.DEBUG)
-        info = partialmethod(_emit, logging.INFO)
-        warning = partialmethod(_emit, logging.WARNING)
-        error = partialmethod(_emit, logging.ERROR)
-        critical = partialmethod(_emit, logging.CRITICAL)
-        exception = partialmethod(_emit, logging.ERROR, exc_info=True)
-
-
-def getLogger(
-    name: str | None = None, custom_serializers: list[tuple | None] = None
-) -> AuditLogger:
-    """Return an :class:`AuditLogger`, mirroring :func:`logging.getLogger`.
-
-    Pass ``__name__`` to tag audit records with the calling module while still
-    emitting on the dedicated ``audit`` handler::
-
-        from core import audit
-
-        logger = audit.getLogger(__name__)
-        logger.info("external_api.token.issued", ...)
-
-    Names are nested under ``AUDIT_LOGGER_NAME`` (e.g. ``audit.core.foo``) so
-    they inherit its handlers through the standard logging hierarchy, keeping
-    the module visible in the ``logger`` field of the emitted JSON.
-    """
-    if not name or name == AUDIT_LOGGER_NAME:
-        return AuditLogger(AUDIT_LOGGER_NAME, custom_serializers=custom_serializers)
-    return AuditLogger(
-        f"{AUDIT_LOGGER_NAME}.{name}", custom_serializers=custom_serializers
-    )
@@ -1,19 +0,0 @@
-"""Audit logging with custom serializers."""
-
-from core.audit import getLogger as get_logger_base
-from core.models import Room
-
-
-def serialize_room(room: Room):
-    return {
-        "name": room.name,
-        "slug": room.slug,
-        "access_level": room.access_level,
-    }
-
-
-custom_serializers = [(Room, serialize_room)]
-
-
-def getLogger(name: str | None = None):
-    return get_logger_base(name=name, custom_serializers=custom_serializers)
@@ -1,5 +1,7 @@
 """External API endpoints"""

+from logging import getLogger
+
 from django.conf import settings
 from django.contrib.auth.hashers import check_password
 from django.core.exceptions import ValidationError
@@ -19,7 +21,6 @@ from rest_framework import (

 from core import api, models
 from core.api.feature_flag import FeatureFlag
-from core.audit_meet import getLogger
 from core.services.jwt_token import JwtTokenService

 from ..services.provisional_user_service import (
@@ -29,7 +30,7 @@ from ..services.provisional_user_service import (
 )
 from . import authentication, permissions, serializers

-audit_logger = getLogger(__name__)
+logger = getLogger(__name__)


 class ApplicationViewSet(viewsets.ViewSet):
@@ -85,11 +86,10 @@ class ApplicationViewSet(viewsets.ViewSet):
            )

        if not application.can_delegate_email(email):
-            audit_logger.warning(
-                "Application denied delegation",
-                request=request,
-                application_client_id=application.client_id,
-                email=email,
+            logger.warning(
+                "Application %s denied delegation for %s",
+                application.client_id,
+                email,
            )
            return drf_response.Response(
                {
@@ -195,10 +195,9 @@ class RoomViewSet(
        )

        # Log for auditing
-        audit_logger.info(
-            "room_created_via_application",
-            request=self.request,
-            # Extra
-            room=room,
-            client_id=getattr(self.request.auth, "client_id", "unknown"),
+        logger.info(
+            "Room created via application: room_id=%s, user_id=%s, client_id=%s",
+            room.id,
+            self.request.user.id,
+            getattr(self.request.auth, "client_id", "unknown"),
        )
@@ -1,206 +0,0 @@
-"""
-Test audit.py
-"""
-
-# pylint: disable=W0621,redefined-outer-name
-
-import json
-import logging
-
-from django.test import RequestFactory
-
-import pytest
-
-from core.audit import AuditJsonFormatter, extract_request_fields, getLogger
-
-
-class ExampleRoomModel:
-    """Example for an audited object."""
-
-    def __init__(self, name, slug, access_level):
-        self.name = name
-        self.slug = slug
-        self.access_level = access_level
-
-
-def serialize_example_room(room):
-    """Flatten a ``ExampleRoomModel`` into the audit fields a service would expose."""
-    return {
-        "name": room.name,
-        "slug": room.slug,
-        "access_level": room.access_level,
-    }
-
-
-# Audit logger wired with the local serializer, mirroring how a service
-# registers its own object serializers.
-test_audit_logger = getLogger(
-    "core.tests.test_audit_2",
-    custom_serializers=[(ExampleRoomModel, serialize_example_room)],
-)
-
-
-class _CaptureHandler(logging.Handler):
-    """Collect every record routed to the ``audit`` logger tree."""
-
-    def __init__(self):
-        super().__init__()
-        self.records = []
-
-    def emit(self, record):
-        self.records.append(record)
-
-
-@pytest.fixture
-def audit_records():
-    """Yield audit records, capturing children via propagation to ``audit``.
-
-    The viewsets log on ``audit.core.external_api.viewsets``; attaching to the
-    root ``audit`` logger captures those propagated records as well as ones
-    emitted directly on it.
-    """
-    handler = _CaptureHandler()
-    logger = logging.getLogger("audit")
-    logger.addHandler(handler)
-    previous_level = logger.level
-    logger.setLevel(logging.DEBUG)
-    try:
-        yield handler.records
-    finally:
-        logger.removeHandler(handler)
-        logger.setLevel(previous_level)
-
-
-def _payloads(records, event_type):
-    """Return the audit payloads matching ``event_type``."""
-    return [r.audit for r in records if r.audit.get("event_type") == event_type]
-
-
-# ---------------------------------------------------------------------------
-# core.audit - custom serializer flattening
-# ---------------------------------------------------------------------------
-
-
-def test_room_extra_is_flattened_via_custom_serializer(audit_records):
-    """A ``Room`` keyword is expanded into dotted ``room.<field>`` keys."""
-    room = ExampleRoomModel(
-        name="Talking About Vacation",
-        slug="talking-about-vacations",
-        access_level="restricted",
-    )
-
-    test_audit_logger.info("event", request=None, room=room)
-
-    audit = audit_records[0].audit
-    assert audit["room.name"] == "Talking About Vacation"
-    assert audit["room.slug"] == "talking-about-vacations"
-    assert audit["room.access_level"] == "restricted"
-    # The raw object is replaced by its serialized fields, not kept.
-    assert "room" not in audit
-
-
-def test_non_registered_extras_pass_through_unchanged(audit_records):
-    """Values without a matching serializer are kept verbatim."""
-    room = ExampleRoomModel(
-        name="Back To Work", slug="back-to-work", access_level="public"
-    )
-
-    test_audit_logger.info(
-        "event",
-        request=None,
-        room=room,
-        client_id="test-id",
-        target={"user_id": "u1"},
-    )
-
-    audit = audit_records[0].audit
-    assert audit["client_id"] == "test-id"
-    # A dict has no registered serializer, so it stays nested as-is.
-    assert audit["target"] == {"user_id": "u1"}
-    # The Room alongside it is still flattened.
-    assert audit["room.name"] == "Back To Work"
-
-
-# ---------------------------------------------------------------------------
-# core.audit - getLogger naming & request field extraction
-# ---------------------------------------------------------------------------
-
-
-def test_getlogger_nests_module_name_under_audit():
-    """A named logger sits under ``audit.`` so it inherits its handlers."""
-    assert getLogger("core.foo")._logger.name == "audit.core.foo"
-
-
-def test_getlogger_without_name_uses_base_audit_logger():
-    """Empty ``audit`` names resolve to the bare ``audit`` logger."""
-    assert getLogger()._logger.name == "audit"
-    assert getLogger("audit")._logger.name == "audit"
-
-
-def test_extract_request_fields_collects_request_metadata():
-    """All request-derived fields are populated from request META."""
-    request = RequestFactory().post(
-        "/external-api/v1.0/rooms/",
-        REMOTE_ADDR="10.0.0.5",
-        REMOTE_PORT="54321",
-        HTTP_USER_AGENT="pytest-agent",
-        HTTP_REFERER="https://example.test/from",
-        HTTP_X_FORWARDED_FOR="203.0.113.7, 10.0.0.5",
-    )
-
-    fields = extract_request_fields(request)
-
-    # X-Forwarded-For wins over REMOTE_ADDR for the client IP.
-    assert fields["source_ip"] == "203.0.113.7"
-    assert fields["source_port"] == "54321"
-    assert fields["request_path"] == "/external-api/v1.0/rooms/"
-    assert fields["request_method"] == "POST"
-    assert fields["user_agent"] == "pytest-agent"
-    assert fields["referer"] == "https://example.test/from"
-    assert fields["request_url"].endswith("/external-api/v1.0/rooms/")
-
-
-# ---------------------------------------------------------------------------
-# core.audit - exception level & JSON rendering of flattened fields
-# ---------------------------------------------------------------------------
-
-
-@pytest.mark.parametrize(
-    "method_name,expected_level",
-    [
-        ("debug", logging.DEBUG),
-        ("info", logging.INFO),
-        ("warning", logging.WARNING),
-        ("error", logging.ERROR),
-        ("critical", logging.CRITICAL),
-    ],
-)
-def test_level_is_passed_to_record(audit_records, method_name, expected_level):
-    """Each per-level method emits a record carrying that level."""
-    getattr(test_audit_logger, method_name)("event", request=None)
-
-    record = audit_records[0]
-    assert record.levelno == expected_level
-    assert record.levelname == method_name.upper()
-
-
-def test_level_is_rendered_in_json_payload(audit_records):
-    """The JSON formatter surfaces the record level under ``level``."""
-    test_audit_logger.warning("event", request=None)
-
-    rendered = json.loads(AuditJsonFormatter().format(audit_records[0]))
-    assert rendered["level"] == "WARNING"
-
-
-def test_exception_logs_error_with_active_traceback(audit_records):
-    """``exception`` emits at ERROR and captures the active traceback."""
-    try:
-        raise ValueError("boom")
-    except ValueError:
-        test_audit_logger.exception("operation.failed", request=None)
-
-    record = audit_records[0]
-    assert record.levelno == logging.ERROR
-    # exc_info is the live traceback tuple, never part of the audit payload.
-    assert record.exc_info is not None
-    assert "exc_info" not in record.audit
@@ -1025,22 +1025,12 @@ class Base(Configuration):
                "format": "{asctime} {name} {levelname} {message}",
                "style": "{",
            },
-            "audit_json": {
-                "()": "core.audit.AuditJsonFormatter",
-            },
        },
        "handlers": {
            "console": {
                "class": "logging.StreamHandler",
                "formatter": "simple",
            },
-            # Audit events go to stdout on their own handler so they stay
-            # distinguishable from regular application logs.
-            "audit_console": {
-                "class": "logging.StreamHandler",
-                "stream": "ext://sys.stdout",
-                "formatter": "audit_json",
-            },
        },
        # Override root logger to send it to console
        "root": {
@@ -1059,15 +1049,6 @@ class Base(Configuration):
                ),
                "propagate": False,
            },
-            "audit": {
-                "handlers": ["audit_console"],
-                "level": values.Value(
-                    "INFO",
-                    environ_name="LOGGING_LEVEL_LOGGERS_AUDIT",
-                    environ_prefix=None,
-                ),
-                "propagate": False,
-            },
        },
    }

@@ -1177,31 +1158,16 @@ class Test(Base):
        {
            "version": 1,
            "disable_existing_loggers": False,
-            "formatters": {
-                "audit_json": {
-                    "()": "core.audit.AuditJsonFormatter",
-                },
-            },
            "handlers": {
                "console": {
                    "class": "logging.StreamHandler",
                },
-                "audit_console": {
-                    "class": "logging.StreamHandler",
-                    "stream": "ext://sys.stdout",
-                    "formatter": "audit_json",
-                },
            },
            "loggers": {
                "meet": {
                    "handlers": ["console"],
                    "level": "DEBUG",
                },
-                "audit": {
-                    "handlers": ["audit_console"],
-                    "level": "INFO",
-                    "propagate": False,
-                },
            },
        }
    )
@@ -7,7 +7,7 @@ build-backend = "uv_build"

 [project]
 name = "meet"
-version = "1.19.0"
+version = "1.20.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
    "Development Status :: 5 - Production/Stable",
@@ -1187,7 +1187,7 @@ wheels = [

 [[package]]
 name = "meet"
-version = "1.19.0"
+version = "1.20.0"
 source = { editable = "." }
 dependencies = [
    { name = "aiohttp" },
@@ -45,6 +45,8 @@ USER root

 # Security patches for known CVEs
 RUN apk update && apk upgrade  \
+    libcrypto3>=3.5.7-r0 \
+    libssl3>=3.5.7-r0 \
    musl \
    musl-utils \
    zlib>=1.3.2-r0 \
@@ -1,12 +1,12 @@
 {
  "name": "meet",
-  "version": "1.19.0",
+  "version": "1.20.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "meet",
-      "version": "1.19.0",
+      "version": "1.20.0",
      "dependencies": {
        "@fontsource-variable/atkinson-hyperlegible-next": "5.2.6",
        "@fontsource-variable/lexend": "5.2.11",
@@ -33,7 +33,7 @@
        "react": "18.3.1",
        "react-aria-components": "1.14.0",
        "react-dom": "18.3.1",
-        "react-i18next": "15.1.1",
+        "react-i18next": "17.0.8",
        "use-sound": "5.0.0",
        "valtio": "2.3.2",
        "wouter": "3.10.0"
@@ -338,9 +338,9 @@
      }
    },
    "node_modules/@babel/runtime": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.28.6.tgz",
-      "integrity": "sha512-05WQkdpL9COIMz4LjTxGpPNCdlpyimKppYNoJ5Di5EUObifl8t4tuLuUBBZEpoLYOmfvIWrsp9fCl0HoPRVTdA==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz",
+      "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==",
      "license": "MIT",
      "engines": {
        "node": ">=6.9.0"
@@ -11235,17 +11235,19 @@
      }
    },
    "node_modules/react-i18next": {
-      "version": "15.1.1",
-      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-15.1.1.tgz",
-      "integrity": "sha512-R/Vg9wIli2P3FfeI8o1eNJUJue5LWpFsQePCHdQDmX0Co3zkr6kdT8gAseb/yGeWbNz1Txc4bKDQuZYsC0kQfw==",
+      "version": "17.0.8",
+      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.0.8.tgz",
+      "integrity": "sha512-0ooKbGLU8JXhe1zwpQUWIeXSgLPOfwJmgheWRIUpcoA0CpyabpGhayjdG+/eA5esC1AQ8h2jWpXjJfzQzeDOCw==",
      "license": "MIT",
      "dependencies": {
-        "@babel/runtime": "^7.25.0",
-        "html-parse-stringify": "^3.0.1"
+        "@babel/runtime": "^7.29.2",
+        "html-parse-stringify": "^3.0.1",
+        "use-sync-external-store": "^1.6.0"
      },
      "peerDependencies": {
-        "i18next": ">= 23.2.3",
-        "react": ">= 16.8.0"
+        "i18next": ">= 26.2.0",
+        "react": ">= 16.8.0",
+        "typescript": "^5 || ^6"
      },
      "peerDependenciesMeta": {
        "react-dom": {
@@ -11253,6 +11255,9 @@
        },
        "react-native": {
          "optional": true
+        },
+        "typescript": {
+          "optional": true
        }
      }
    },
@@ -1,7 +1,7 @@
 {
  "name": "meet",
  "private": true,
-  "version": "1.19.0",
+  "version": "1.20.0",
  "type": "module",
  "scripts": {
    "dev": "panda codegen && vite",
@@ -40,7 +40,7 @@
    "react": "18.3.1",
    "react-aria-components": "1.14.0",
    "react-dom": "18.3.1",
-    "react-i18next": "15.1.1",
+    "react-i18next": "17.0.8",
    "use-sound": "5.0.0",
    "valtio": "2.3.2",
    "wouter": "3.10.0"
@@ -43,7 +43,16 @@ export class RnnNoiseProcessor implements AudioProcessorInterface {

    this.noiseSuppressionNode = new AudioWorkletNode(
      audioContext,
-      NoiseSuppressorWorklet_Name
+      NoiseSuppressorWorklet_Name,
+      {
+        // RNNoise is a mono algorithm. Its worklet only denoises and writes
+        // channel 0. Force any (possibly stereo) input to down-mix to a single
+        // channel and emit a single channel, so we don't produce a stereo frame
+        // whose right channel is left silent.
+        channelCount: 1,
+        channelCountMode: 'explicit',
+        outputChannelCount: [1],
+      }
    )

    this.destinationNode = audioContext.createMediaStreamDestination()
@@ -23,6 +23,9 @@ frontend:
    - name: outlook-addon-manifest
      configMap:
        name: outlook-addon-manifest
+    - name: frontend-nginx-config
+      configMap:
+        name: frontend-nginx-config

  extraVolumeMounts:
    - name: outlook-addon-config
@@ -33,9 +36,18 @@ frontend:
      mountPath: /usr/share/nginx/html/addons/outlook/manifest.xml
      subPath: manifest.xml
      readOnly: true
+    - name: frontend-nginx-config
+      mountPath: /etc/nginx/conf.d/default.conf
+      subPath: default.conf
+      readOnly: true

  outlookAddon:
    enabled: true
    baseUrl: "https://meet.127.0.0.1.nip.io"
+    enableSourceTracking: true
+    feedbackForm: "https://tests.com/"
    appName: "Visio"
    id: "a025f0f6-757a-4790-97f3-99c66c4a5795"
+
+frontendNginxConfig:
+  enabled: true
@@ -53,3 +53,6 @@ agentSubtitles:
        items:
        - key: cacert.pem
          path: cert.pem
+
+frontendNginxConfig:
+  enabled: false
@@ -0,0 +1,94 @@
+{{- if .Values.frontendNginxConfig.enabled }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: frontend-nginx-config
+  namespace: {{ .Release.Namespace }}
+data:
+  default.conf: |
+    server {
+        listen 8080;
+        server_name localhost;
+        server_tokens off;
+
+        root /usr/share/nginx/html;
+
+        location = /.well-known/windows-app-web-link {
+            default_type application/json;
+            alias /usr/share/nginx/html/.well-known/windows-app-web-link;
+            add_header Content-Disposition "attachment; filename=windows-app-web-link";
+        }
+
+        # Manifest — fetched, never iframed
+        location = /addons/outlook/manifest.xml {
+            alias /usr/share/nginx/html/addons/outlook/manifest.xml;
+
+            add_header Access-Control-Allow-Origin "*";
+            add_header Cache-Control "no-cache, no-store, must-revalidate";
+            add_header X-Frame-Options "DENY";
+            add_header Content-Security-Policy "frame-ancestors 'none'";
+        }
+
+        location = /addons/outlook/assets/ {
+            return 404;
+        }
+
+        location ~* ^/addons/outlook/assets/(.+\.(?:css|js|json|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot))/?$ {
+            root /usr/share/nginx/html;
+            expires 30d;
+            add_header Cache-Control "public, max-age=2592000, immutable" always;
+            add_header Access-Control-Allow-Origin "*";
+            add_header Vary "Origin" always;
+        }
+
+        location = /addons/outlook/ {
+            return 404;
+        }
+
+        location ~ ^/addons/outlook(/.*)?$ {
+            alias /usr/share/nginx/html/addons/outlook$1;
+            error_page 404 =200 /index.html;
+            add_header Cache-Control "no-cache, no-store, must-revalidate";
+            add_header Pragma "no-cache" always;
+            add_header Expires 0 always;
+
+            set $ms_domains "https://*.live.com https://*.office.com https://*.microsoft.com https://*.office365.com https://*.sharepoint.com";
+
+            set $nonce $request_id;
+
+            set $csp "default-src 'self'; upgrade-insecure-requests; ";
+            set $csp "${csp}frame-ancestors ${ms_domains}; ";
+            set $csp "${csp}script-src 'nonce-${nonce}' 'strict-dynamic'; ";
+            set $csp "${csp}style-src 'self' 'unsafe-inline'; ";
+            set $csp "${csp}img-src 'self' data:; ";
+            set $csp "${csp}font-src 'self' data:; ";
+            set $csp "${csp}connect-src 'self' ${ms_domains}; ";
+            set $csp "${csp}frame-src 'none'; ";
+            set $csp "${csp}object-src 'none'; ";
+            set $csp "${csp}base-uri 'none'; ";
+
+            add_header Content-Security-Policy $csp;
+
+            sub_filter 'NONCE_PLACEHOLDER' $nonce;
+            sub_filter_once off;
+        }
+
+        # Serve static files with caching
+        location ~* ^/assets/.*\.(css|js|json|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
+            expires 30d;
+            add_header Cache-Control "public, max-age=2592000";
+        }
+
+        # Serve static files
+        location / {
+            try_files $uri $uri/ /index.html;
+            # Add no-cache headers
+            add_header Cache-Control "no-cache, no-store, must-revalidate";
+            add_header Pragma "no-cache";  # HTTP 1.0 header for backward compatibility
+            add_header Expires 0;
+        }
+
+        # Optionally, handle 404 errors by redirecting to index.html
+        error_page 404 =200 /index.html;
+    }
+{{- end }}
@@ -1,4 +1,4 @@
 apiVersion: v2
 type: application
 name: meet
-version: 0.0.22
+version: 0.0.23
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:mailappor="http://schemas.microsoft.com/office/mailappversionoverrides/1.0" xsi:type="MailApp">
  <Id>{{ .id }}</Id>
-  <Version>0.0.1.0</Version>
+  <Version>0.0.2.0</Version>
  <ProviderName>{{ .appName }}</ProviderName>
  <DefaultLocale>fr-FR</DefaultLocale>
  <DisplayName DefaultValue="{{ .appName }}"/>
@@ -87,9 +87,9 @@
                    <Description resid="GenerateLink.Tooltip"/>
                  </Supertip>
                  <Icon>
-                    <bt:Image size="16" resid="Add.16x16"/>
-                    <bt:Image size="32" resid="Add.32x32"/>
-                    <bt:Image size="80" resid="Add.80x80"/>
+                    <bt:Image size="16" resid="Icon.16x16"/>
+                    <bt:Image size="32" resid="Icon.32x32"/>
+                    <bt:Image size="80" resid="Icon.80x80"/>
                  </Icon>
                  <Action xsi:type="ExecuteFunction">
                    <FunctionName>generateMeetingLinkFromMail</FunctionName>
@@ -126,9 +126,9 @@
                    <Description resid="GenerateLink.Tooltip"/>
                  </Supertip>
                  <Icon>
-                    <bt:Image size="16" resid="Add.16x16"/>
-                    <bt:Image size="32" resid="Add.32x32"/>
-                    <bt:Image size="80" resid="Add.80x80"/>
+                    <bt:Image size="16" resid="Icon.16x16"/>
+                    <bt:Image size="32" resid="Icon.32x32"/>
+                    <bt:Image size="80" resid="Icon.80x80"/>
                  </Icon>
                  <Action xsi:type="ExecuteFunction">
                    <FunctionName>generateMeetingLinkFromCalendar</FunctionName>
@@ -175,15 +175,34 @@
        <bt:Url id="Taskpane.Url" DefaultValue="{{ .baseUrl }}/taskpane.html"/>
      </bt:Urls>
      <bt:ShortStrings>
+        <!-- Default (French) -->
        <bt:String id="GroupLabel" DefaultValue="{{ .appName }}"/>
-        <bt:String id="TaskpaneButton.Label" DefaultValue="Ouvrir les paramètres"/>
-        <bt:String id="GenerateLink.Label" DefaultValue="Ajouter un lien {{ .appName }}"/>
-        <bt:String id="OpenSettings.Label" DefaultValue="Paramètres"/>
+        <bt:String id="GenerateLink.Label" DefaultValue="Ajouter un lien {{ .appName }}">
+          <bt:Override Locale="en-US" Value="Add a {{ .appName }} link"/>
+          <bt:Override Locale="de-DE" Value="{{ .appName }}-Link hinzufügen"/>
+        </bt:String>
+        <bt:String id="TaskpaneButton.Label" DefaultValue="Ouvrir les paramètres">
+          <bt:Override Locale="en-US" Value="Open settings"/>
+          <bt:Override Locale="de-DE" Value="Einstellungen öffnen"/>
+        </bt:String>
+        <bt:String id="OpenSettings.Label" DefaultValue="Paramètres">
+          <bt:Override Locale="en-US" Value="Settings"/>
+          <bt:Override Locale="de-DE" Value="Einstellungen"/>
+        </bt:String>
      </bt:ShortStrings>
      <bt:LongStrings>
-        <bt:String id="TaskpaneButton.Tooltip" DefaultValue="Ouvre les paramètres de connexion {{ .appName }}."/>
-        <bt:String id="GenerateLink.Tooltip" DefaultValue="Génère un lien de réunion {{ .appName }} et l'insère dans l'événement."/>
-        <bt:String id="OpenSettings.Tooltip" DefaultValue="Ouvre les paramètres de connexion {{ .appName }}."/>
+        <bt:String id="GenerateLink.Tooltip" DefaultValue="Génère un lien de réunion {{ .appName }} et l'insère dans l'événement.">
+          <bt:Override Locale="de-DE" Value="Generiert einen {{ .appName }}-Besprechungslink und fügt ihn in den Termin ein."/>
+          <bt:Override Locale="en-US" Value="Generates a {{ .appName }} meeting link and inserts it into the item."/>
+        </bt:String>
+        <bt:String id="TaskpaneButton.Tooltip" DefaultValue="Ouvre les paramètres de connexion {{ .appName }}.">
+          <bt:Override Locale="de-DE" Value="Öffnet die {{ .appName }}-Verbindungseinstellungen."/>
+          <bt:Override Locale="en-US" Value="Opens the {{ .appName }} connection settings."/>
+        </bt:String>
+        <bt:String id="OpenSettings.Tooltip" DefaultValue="Ouvre les paramètres de connexion {{ .appName }}.">
+          <bt:Override Locale="de-DE" Value="Öffnet die {{ .appName }}-Verbindungseinstellungen."/>
+          <bt:Override Locale="en-US" Value="Opens the {{ .appName }} connection settings."/>
+        </bt:String>
      </bt:LongStrings>
    </Resources>
  </VersionOverrides>
@@ -8,6 +8,8 @@ data:
  config.js: |
    window.__APP_CONFIG__ = {
      BASE_URL: {{ .Values.frontend.outlookAddon.baseUrl | quote }},
-      APP_NAME: {{ .Values.frontend.outlookAddon.appName | quote }}
+      APP_NAME: {{ .Values.frontend.outlookAddon.appName | quote }},
+      ENABLE_SOURCE_TRACKING: {{ .Values.frontend.outlookAddon.enableSourceTracking | quote }},
+      FEEDBACK_FORM: {{ .Values.frontend.outlookAddon.feedbackForm | quote }}
    };
 {{- end }}
@@ -448,12 +448,17 @@ frontend:
  ## @param frontend.outlookAddon.enabled Enable the Outlook add-in ConfigMap (config.js + manifest.xml)
  ## @param frontend.outlookAddon.appName Display name used in the Outlook add-in (manifest + runtime config)
  ## @param frontend.outlookAddon.baseUrl Public base URL where the add-in is served (no trailing slash)
+  ## @param frontend.outlookAddon.enableSourceTracking Enable appending ?from=outlook-addon to the URL
+  ## @param frontend.outlookAddon.feedbackForm Add a link to the footer opening a feedback form
  outlookAddon:
    enabled: false
    appName: ""
    baseUrl: ""
+    enableSourceTracking: false
+    feedbackForm: ""
    id: ""

+
 ## @section posthog

 posthog:
@@ -1,12 +1,12 @@
 {
  "name": "mail_mjml",
-  "version": "1.19.0",
+  "version": "1.20.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "mail_mjml",
-      "version": "1.19.0",
+      "version": "1.20.0",
      "license": "MIT",
      "dependencies": {
        "@html-to/text-cli": "0.5.4",
@@ -1,6 +1,6 @@
 {
  "name": "mail_mjml",
-  "version": "1.19.0",
+  "version": "1.20.0",
  "description": "An util to generate html and text django's templates from mjml templates",
  "type": "module",
  "dependencies": {
@@ -1,12 +1,12 @@
 {
  "name": "sdk",
-  "version": "1.19.0",
+  "version": "1.20.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "sdk",
-      "version": "1.19.0",
+      "version": "1.20.0",
      "license": "ISC",
      "workspaces": [
        "./library",
@@ -1,6 +1,6 @@
 {
  "name": "sdk",
-  "version": "1.19.0",
+  "version": "1.20.0",
  "author": "",
  "license": "ISC",
  "description": "",
@@ -1,7 +1,7 @@

 [project]
 name = "summary"
-version = "1.19.0"
+version = "1.20.0"
 dependencies = [
    "fastapi[standard]>=0.105.0",
    "uvicorn>=0.24.0",
Author	SHA1	Message	Date
lebaudantoine	64819b3696	🔖(minor) bump release to 1.20.0	2026-06-12 17:25:56 +02:00
lebaudantoine	53722ad1bc	🩹(frontend) fix CSP regression breaking inline styles and ProConnect A previous CSP change suggested by CodeRabbit was not properly tested and broke inline styling as well as the loading of the ProConnect image. Adjust the CSP directives to allow these resources again.	2026-06-12 15:54:26 +02:00
lebaudantoine	dcfdd35c82	🔖(helm) release chart 0.0.23	2026-06-12 09:38:53 +02:00
snyk-bot	16f465432d	fix: upgrade react-i18next from 15.1.1 to 17.0.8 Snyk has created this PR to upgrade react-i18next from 15.1.1 to 17.0.8. See this package in npm: react-i18next See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/96ea03d8-8d09-493d-86bf-363f274e129e?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-06-12 09:11:07 +02:00
lebaudantoine	90f95ab2a9	⬆️(frontend) upgrade libcrypto3 and libssl3 to 3.5.7-r0 Patches CVE-2026-45447 (HIGH), heap use-after-free in OpenSSL PKCS7_verify(), flagged by Trivy scan of the frontend image. - libcrypto3: 3.5.6-r0 -> 3.5.7-r0 - libssl3: 3.5.6-r0 -> 3.5.7-r0 Ref: https://avd.aquasec.com/nvd/cve-2026-45447	2026-06-11 16:26:13 +02:00
leo	61f7ad05e9	🐛(frontend) fix noise reduction left-channel-only audio Fix bug with RNNoise noise reduction which interprets mono input as left channel with some browsers.	2026-06-11 16:26:13 +02:00
lebaudantoine	69a6dd1463	🩹(frontend) fix missing default-src in CSP configuration The CSP was missing a default-src directive (flagged by CodeRabbit). Without it, styles, images, fonts, and media are completely unrestricted, which undercuts the otherwise strict policy. Set default-src to 'self' and add an explicit style-src directive since we rely on inline styles (e.g. #close-msg and the view toggling use inline style attributes), so style-src needs to allow 'self' and 'unsafe-inline'.	2026-06-11 15:16:52 +02:00
lebaudantoine	6d06aee92d	📝(addon) update the changelog please refer the previous commits where I enhanced the whole addin features.	2026-06-11 15:16:52 +02:00
lebaudantoine	54908b9caa	🔧(addon) parametrize the frontend nginx configuration via a volume Mount the nginx configuration used by the frontend image as a volume so the default one can be overridden by a custom configuration at deployment time. Based on suggestions from @rouja to help parametrize the configuration at deployment time.	2026-06-11 15:16:52 +02:00
lebaudantoine	08af6e77bb	📌(addon) pin dependencies to their currently installed versions Improve code quality and reproducibility by pinning project dependencies to the exact versions currently installed.	2026-06-11 15:16:52 +02:00
lebaudantoine	4525c9c255	💄(addon) align the beta tag with the UI kit styling Update the beta tag to follow the UI kit styling so it clearly signals that the plugin is in beta.	2026-06-11 15:16:52 +02:00
lebaudantoine	44d3ed8f2e	✨(addon) add a feedback form link in the footer Add the possibility to display a feedback form link in the footer to help collect feedback from the first users of the plugin. Once the plugin is in production at scale, this will be replaced with a link to the support page.	2026-06-11 15:16:52 +02:00
lebaudantoine	9522dc72ac	📈(addon) allow appending an Outlook source query param to the URL Offer the possibility to append a query parameter at the end of the meeting URL to flag links created from the Outlook plugin, inspired by Zoom. The behavior is toggled via an environment variable.	2026-06-11 15:16:52 +02:00
lebaudantoine	09dbb250a7	🚸(addon) switch add button to remove when a link already exists From the task panel, change the "add" button to "remove" when a meeting link is already present. This will be updated to "update" once the external API supports updating an existing room.	2026-06-11 15:16:52 +02:00
lebaudantoine	321cb99f82	🩹(addon) skip link generation when one already exists in the event Detect whether a meeting link is already present in the calendar event item or its body, and prevent generating a new link if one is found. Detection is based on the presence of the app URL in the text. This is imperfect but covers the most naive scenarios.	2026-06-11 15:16:52 +02:00
lebaudantoine	52bad6faaf	🔖(addons) bump plugin version to 0.0.2 Update the plugin version displayed to the user to 0.0.2 and move the tag from alpha to beta.	2026-06-11 15:16:52 +02:00
lebaudantoine	0065527a5e	🌐(addon) internationalize the addon Refactor the plugin to support internationalization and ship it in three languages. Internationalizing requires updating the manifest, which involves touching the Helm chart and releasing a new version. Ship a beta version of the plugin once the i18n work is done to bundle these changes together.	2026-06-11 15:16:52 +02:00
lebaudantoine	818d20888e	💄(addons) use the app logo for the "create a meeting link" ribbon action In the ribbon, the "create a meeting link" action was displayed with the generic add icon, which is fitting in the context of a menu but not explicit enough on its own. Following feedback from the social ministries, replace the add icon with the app logo to make it clear that this button creates a videoconference link.	2026-06-11 15:16:52 +02:00
lebaudantoine	f1fce4431f	♻️(addons) insert meeting link at the cursor position Instead of appending the meeting link at the end of the email, insert it where the user's cursor is. This ensures the link is not placed after the email signature, or below the quoted thread in a reply.	2026-06-11 15:16:52 +02:00
lebaudantoine	491866e584	♻️(addons) try using the default client font Refactor the message builder so that rendered messages are displayed in a nicer way. Based on user feedback from the social ministries. Go for a hybrid approach: on the desktop client, insert plain text so it picks up the default font configured by the client theme; on the web client, insert HTML, as the editor there is rendered using HTML.	2026-06-11 15:16:52 +02:00
lebaudantoine	f777f2fdeb	🩹(addon) show fallback message when dialog cannot auto-close The dialog window does not close itself on Outlook Desktop, which opens links in a webview that behaves like a different browser. Calling window.close() fails because, for security reasons, JS is prevented from closing the window. The browser considers that the JS script is not the one that opened the dialog. The dialog also loses its reference to the opener due to the redirection, so there is no way to message the parent to trigger a close. Keeping the dialog reference on the parent side does not help either: since the opener is lost, the parent cannot call close on the dialog. After investigation, go with a temporary solution that shows an explicit message hinting the user to close the dialog manually if it does not close automatically.	2026-06-11 15:16:52 +02:00