wip for performance use a component instead of a hook to avoid render children

wip add endpoint to promote user
🔖(minor) bump release to 1.17.0
2026-07-26 20:08:24 +00:00 · 2026-06-01 15:22:01 +02:00 · 2026-06-01 15:13:02 +02:00 · 2026-05-31 18:18:00 +02:00 · 2026-05-31 00:16:26 +02:00 · 2026-05-31 00:01:49 +02:00
271 changed files with 5098 additions and 4211 deletions
@@ -305,6 +305,7 @@ jobs:
        working-directory: src/summary

    env:
+      V1_TENANT_ID: 'test-tenant'
      AUTHORIZED_TENANTS: '[{"id": "test-tenant", "api_key": "test-api-token", "webhook_url": "https://example.com/webhook", "webhook_api_key": "test-webhook-api-key"}]'
      AWS_STORAGE_BUCKET_NAME: "http://meet-media-storage"
      AWS_S3_ENDPOINT_URL: "minio:9000"
@@ -83,3 +83,6 @@ docker/livekit/out

 # LiveKit CA configuration
 docker/livekit/rootCA.pem
+
+# Frontend rollup-plugin-visualizer
+/src/frontend/rollup-plugin-visualizer/*
@@ -8,6 +8,8 @@ and this project adheres to

 ## [Unreleased]

+## [1.17.0] - 2026-05-31
+
 ### Added

 - ✨(fullstack) allow participants to mute others based on room configuration
@@ -15,12 +17,21 @@ and this project adheres to
 - ✨(frontend) make reaction toolbar responsive on small viewports
 - ✨(frontend) enable reactions on mobile devices
 - ✨(frontend) introduce picture-in-picture meeting
+- ✨(backend) add core.recording.event.parsers.S3Parser
+- ✨(summary) extended support for all video / audio files #1358

 ### Changed 

 - ♻️(fullstack) simplify source serialization
 - ✨(backend) expose room configuration to all API consumers
 - 🩹(frontend) improve reaction toolbar centering with dynamic positioning
+- 🚀 (paas) remove buildpack requirements.txt to use the new uv.lock #1349
+- ✨(backend) allow room configuration and access level via external api #1260
+- ♻️(backend) prefix Swagger routes with /api
+
+### Fixed
+
+- 🩹(backend) fix swagger and redoc documentation URLs

 ## [1.16.0] - 2026-05-13

@@ -23,8 +23,8 @@ docker_build(
    live_update=[
        sync('../src/backend', '/app'),
        run(
-            'pip install -r /app/requirements.txt',
-            trigger=['./api/requirements.txt']
+            'uv sync --locked --no-dev',
+            trigger=['../src/backend/uv.lock', '../src/backend/pyproject.toml']
        )
    ]
 )
@@ -110,11 +110,20 @@ k8s_resource('meet-celery-backend', resource_deps=['redis'])
 k8s_resource('meet-celery-summarize', resource_deps=['redis'])
 k8s_resource('meet-celery-summary-backend', resource_deps=['redis'])
 k8s_resource('meet-celery-transcribe-default', resource_deps=['redis'])
-k8s_resource('meet-backend-migrate', resource_deps=['meet-backend'])
 k8s_resource('livekit-livekit-server', resource_deps=['redis'])
 k8s_resource('livekit-livekit-server-test-connection', resource_deps=['livekit-livekit-server'])
 k8s_resource('keycloak', resource_deps=['kc-postgresql'])
-k8s_resource('meet-backend-createsuperuser', resource_deps=['meet-backend-migrate'])
+# Trigger once on launch
+k8s_resource(
+    'meet-backend-createsuperuser',
+    resource_deps=['meet-backend-migrate'],
+    trigger_mode=TRIGGER_MODE_MANUAL,
+)
+k8s_resource(
+    'meet-backend-migrate',
+    resource_deps=['meet-backend'],
+    trigger_mode=TRIGGER_MODE_MANUAL,
+)

 migration = '''
 set -eu
@@ -47,4 +47,3 @@ mv src/backend/* ./
 mv deploy/paas/* ./

 echo "3.13" > .python-version
-echo "." > requirements.txt
@@ -185,6 +185,7 @@ paths:
                          pin_code: "123456"
                          phone_number: "+1-555-0100"
                          default_country: "US"
+                        configuration: {}
        '401':
          $ref: '#/components/responses/UnauthorizedError'
        '403':
@@ -198,10 +199,6 @@ paths:
      description: |
        Creates a new room with secure defaults for external API usage.
        
-        **Restrictions:**
-        - Rooms are always created with `trusted` access (no public rooms via API)
-        - Room access_level can be updated from the webapp interface.
-        
        **Defaults:**
        - Delegated user is set as owner
        - Room slug auto-generated for uniqueness
@@ -218,8 +215,17 @@ paths:
              $ref: '#/components/schemas/RoomCreate'
            examples:
              emptyBody:
-                summary: No parameters (default)
-                value: {}
+                summary: No parameters (use all defaults)
+                value: { }
+              withAccessLevel:
+                summary: Specify access level
+                value:
+                  access_level: "trusted"
+              withConfiguration:
+                summary: Provide room configuration
+                value:
+                  configuration:
+                    everyone_can_mute: true
      responses:
        '201':
          description: Room created successfully
@@ -269,6 +275,7 @@ paths:
                      pin_code: "123456"
                      phone_number: "+1-555-0100"
                      default_country: "US"
+                    configuration: {}
        '401':
          $ref: '#/components/responses/UnauthorizedError'
        '403':
@@ -344,8 +351,56 @@ components:

    RoomCreate:
      type: object
-      description: Empty object - all room properties are auto-generated
-      properties: {}
+      description: |
+        Optional fields for room creation. All fields have secure defaults if omitted.
+      properties:
+        access_level:
+          $ref: '#/components/schemas/RoomAccessLevel'
+        configuration:
+          $ref: '#/components/schemas/RoomConfiguration'
+
+    RoomConfiguration:
+      type: object
+      description: |
+        Optional room behaviour settings. Unknown fields are rejected.
+        All fields are optional and default to `null` (server-side defaults apply).
+      properties:
+        can_publish_sources:
+          type: array
+          nullable: true
+          description: |
+            Restricts which media tracks participants are allowed to publish.
+            If `null`, all sources are permitted.
+          items:
+            type: string
+            enum:
+              - camera
+              - microphone
+              - screen_share
+              - screen_share_audio
+          example: [ "camera", "microphone" ]
+        everyone_can_mute:
+          type: boolean
+          nullable: true
+          description: |
+            Whether any participant can mute others, or only the room owner/moderator.
+            If `null`, the server default applies.
+          example: true
+      additionalProperties: false
+
+    RoomAccessLevel:
+      type: string
+      enum:
+        - public
+        - trusted
+        - restricted
+      description: |
+        Controls who can join the room without going through the lobby.
+
+        - `public`: Anyone with the room link can join directly, no authentication required.
+        - `trusted`: Authenticated users join directly. Unauthenticated users wait in the lobby for approval.
+        - `restricted`: Only participants explicitly trusted by the owner bypass the lobby. Everyone else waits for approval regardless of authentication.
+      example: "trusted"

    Room:
      type: object
@@ -362,10 +417,7 @@ components:
          description: URL-friendly room identifier (auto-generated)
          example: "aze-eere-zer"
        access_level:
-          type: string
-          readOnly: true
-          description: Room access level (always 'trusted' for API-created rooms)
-          example: "trusted"
+          $ref: '#/components/schemas/RoomAccessLevel'
        url:
          type: string
          format: uri
@@ -393,6 +445,8 @@ components:
              type: string
              description: Default country code
              example: "US"
+        configuration:
+          $ref: '#/components/schemas/RoomConfiguration'

    OAuthError:
      type: object
@@ -48,7 +48,7 @@ paths:
      summary: List rooms
      description: |
        Returns a list of rooms accessible to the authenticated user.
-        Only rooms where the delegated user has access will be returned.
+        Only rooms where the user has access will be returned.
      operationId: listRooms
      security:
        - BearerAuth: [rooms:list]
@@ -108,6 +108,7 @@ paths:
                          pin_code: "123456"
                          phone_number: "+1-555-0100"
                          default_country: "US"
+                        configuration: { }
        '401':
          $ref: '#/components/responses/UnauthorizedError'
        '403':
@@ -120,13 +121,9 @@ paths:
      summary: Create a room
      description: |
        Creates a new room with secure defaults for external API usage.
-        
-        **Restrictions:**
-        - Rooms are always created with `trusted` access (no public rooms via API)
-        - Room access_level can be updated from the webapp interface.
-        
+
        **Defaults:**
-        - Delegated user is set as owner
+        - user is set as owner
        - Room slug auto-generated for uniqueness
        - Telephony PIN auto-generated when enabled
        - Creation tracked with application client_id for auditing
@@ -141,8 +138,17 @@ paths:
              $ref: '#/components/schemas/RoomCreate'
            examples:
              emptyBody:
-                summary: No parameters (default)
-                value: {}
+                summary: No parameters (use all defaults)
+                value: { }
+              withAccessLevel:
+                summary: Specify access level
+                value:
+                  access_level: "trusted"
+              withConfiguration:
+                summary: Provide room configuration
+                value:
+                  configuration:
+                    everyone_can_mute: true
      responses:
        '201':
          description: Room created successfully
@@ -192,6 +198,7 @@ paths:
                      pin_code: "123456"
                      phone_number: "+1-555-0100"
                      default_country: "US"
+                    configuration: { }
        '401':
          $ref: '#/components/responses/UnauthorizedError'
        '403':
@@ -210,65 +217,58 @@ components:
        Include in requests as: `Authorization: Bearer <token>`

  schemas:
-    TokenRequest:
-      type: object
-      required:
-        - client_id
-        - client_secret
-        - grant_type
-        - scope
-      properties:
-        client_id:
-          type: string
-          description: Application client identifier
-          example: "550e8400-e29b-41d4-a716-446655440000"
-        client_secret:
-          type: string
-          format: password
-          writeOnly: true
-          description: Application secret key
-          example: "1234567890abcdefghijklmnopqrstuvwxyz"
-        grant_type:
-          type: string
-          enum:
-            - client_credentials
-          description: OAuth2 grant type (must be 'client_credentials')
-          example: "client_credentials"
-        scope:
-          type: string
-          format: email
-          description: |
-            Email address of the user to delegate.
-            The application will act on behalf of this user.
-            Note: This parameter is named 'scope' to align with OAuth2 conventions,
-            but accepts an email address to identify the user. This design allows
-            for future extensibility.
-          example: "user@example.com"
-
-    TokenResponse:
-      type: object
-      properties:
-        access_token:
-          type: string
-          description: JWT access token
-          example: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJtZWV0LWFwaSIsImF1ZCI6Im1lZXQtY2xpZW50cyIsImlhdCI6MTcwOTQ5MTIwMCwiZXhwIjoxNzA5NDk0ODAwLCJjbGllbnRfaWQiOiI1NTBlODQwMC1lMjliLTQxZDQtYTcxNi00NDY2NTU0NDAwMDAiLCJzY29wZSI6InJvb21zOmxpc3Qgcm9vbXM6cmV0cmlldmUgcm9vbXM6Y3JlYXRlIiwidXNlcl9pZCI6IjdiOGQ5YzQwLTNhMmItNGVkZi04NzFjLTJmM2Q0ZTVmNmE3YiIsImRlbGVnYXRlZCI6dHJ1ZX0.signature"
-        token_type:
-          type: string
-          description: Token type (always 'Bearer')
-          example: "Bearer"
-        expires_in:
-          type: integer
-          description: Token lifetime in seconds
-          example: 3600
-        scope:
-          type: string
-          description: Space-separated list of granted permission scopes
-          example: "rooms:list rooms:retrieve rooms:create"
-
    RoomCreate:
      type: object
-      description: Empty object - all room properties are auto-generated
-      properties: {}
+      description: |
+        Optional fields for room creation. All fields have secure defaults if omitted.
+      properties:
+        access_level:
+          $ref: '#/components/schemas/RoomAccessLevel'
+        configuration:
+          $ref: '#/components/schemas/RoomConfiguration'
+
+    RoomConfiguration:
+      type: object
+      description: |
+        Optional room behaviour settings. Unknown fields are rejected.
+        All fields are optional and default to `null` (server-side defaults apply).
+      properties:
+        can_publish_sources:
+          type: array
+          nullable: true
+          description: |
+            Restricts which media tracks participants are allowed to publish.
+            If `null`, all sources are permitted.
+          items:
+            type: string
+            enum:
+              - camera
+              - microphone
+              - screen_share
+              - screen_share_audio
+          example: [ "camera", "microphone" ]
+        everyone_can_mute:
+          type: boolean
+          nullable: true
+          description: |
+            Whether any participant can mute others, or only the room owner/moderator.
+            If `null`, the server default applies.
+          example: true
+      additionalProperties: false
+
+    RoomAccessLevel:
+      type: string
+      enum:
+        - public
+        - trusted
+        - restricted
+      description: |
+        Controls who can join the room without going through the lobby.
+
+        - `public`: Anyone with the room link can join directly, no authentication required.
+        - `trusted`: Authenticated users join directly. Unauthenticated users wait in the lobby for approval.
+        - `restricted`: Only participants explicitly trusted by the owner bypass the lobby. Everyone else waits for approval regardless of authentication.
+      example: "trusted"

    Room:
      type: object
@@ -285,10 +285,7 @@ components:
          description: URL-friendly room identifier (auto-generated)
          example: "aze-eere-zer"
        access_level:
-          type: string
-          readOnly: true
-          description: Room access level (always 'trusted' for API-created rooms)
-          example: "trusted"
+          $ref: '#/components/schemas/RoomAccessLevel'
        url:
          type: string
          format: uri
@@ -316,6 +313,8 @@ components:
              type: string
              description: Default country code
              example: "US"
+        configuration:
+          $ref: '#/components/schemas/RoomConfiguration'

    OAuthError:
      type: object
@@ -64,9 +64,8 @@ ALLOW_UNREGISTERED_ROOMS=False
 RECORDING_ENABLE=True
 RECORDING_STORAGE_EVENT_ENABLE=True
 RECORDING_STORAGE_EVENT_TOKEN=password
-SUMMARY_SERVICE_ENDPOINT=http://app-summary-dev:8000/api/v2/async-jobs/transcribe/
+SUMMARY_SERVICE_ENDPOINT=http://app-summary-dev:8000/api/v1/tasks/
 SUMMARY_SERVICE_API_TOKEN=password
-SUMMARY_SERVICE_WEBHOOK_API_TOKEN=webhook-password
 RECORDING_DOWNLOAD_BASE_URL=http://localhost:3000/recording

 # Recording encoding (LiveKit Egress advanced options).
@@ -9,7 +9,7 @@
      "version": "0.0.1",
      "license": "MIT",
      "dependencies": {
-        "core-js": "^3.36.0",
+        "core-js": "^3.49.0",
        "regenerator-runtime": "^0.14.1"
      },
      "devDependencies": {
@@ -6863,9 +6863,9 @@
      }
    },
    "node_modules/core-js": {
-      "version": "3.48.0",
-      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.48.0.tgz",
-      "integrity": "sha512-zpEHTy1fjTMZCKLHUZoVeylt9XrzaIN2rbPXEt0k+q7JE5CkCZdo6bNq55bn24a69CH7ErAVLKijxJja4fw+UQ==",
+      "version": "3.49.0",
+      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.49.0.tgz",
+      "integrity": "sha512-es1U2+YTtzpwkxVLwAFdSpaIMyQaq0PBgm3YD1W3Qpsn1NAmO3KSgZfu+oGSWVu6NvLHoHCV/aYcsE5wiB7ALg==",
      "hasInstallScript": true,
      "license": "MIT",
      "funding": {
@@ -26,7 +26,7 @@
    "watch": "webpack --mode development --watch"
  },
  "dependencies": {
-    "core-js": "^3.36.0",
+    "core-js": "^3.49.0",
    "regenerator-runtime": "^0.14.1"
  },
  "devDependencies": {
@@ -1,7 +1,7 @@

 [project]
 name = "agents"
-version = "1.16.0"
+version = "1.17.0"
 requires-python = ">=3.12"
 dependencies = [
    "livekit-agents==1.4.5",
@@ -9,7 +9,7 @@ resolution-markers = [

 [[package]]
 name = "agents"
-version = "1.16.0"
+version = "1.17.0"
 source = { virtual = "." }
 dependencies = [
    { name = "livekit-agents" },
@@ -8,6 +8,8 @@ from rest_framework import views as drf_views
 from rest_framework.decorators import api_view
 from rest_framework.response import Response

+from core.utils import build_telephony_config
+

 def exception_handler(exc, context):
    """Handle Django ValidationError as an accepted exception.
@@ -58,13 +60,7 @@ def get_frontend_configuration(request):
                "allowed_mimetypes"
            ],
        },
-        "telephony": {
-            "enabled": settings.ROOM_TELEPHONY_ENABLED,
-            "phone_number": settings.ROOM_TELEPHONY_PHONE_NUMBER
-            if settings.ROOM_TELEPHONY_ENABLED
-            else None,
-            "default_country": settings.ROOM_TELEPHONY_DEFAULT_COUNTRY,
-        },
+        "telephony": build_telephony_config(),
        "subtitle": {"enabled": settings.ROOM_SUBTITLE_ENABLED},
        "livekit": {
            "url": settings.LIVEKIT_CONFIGURATION["url"],
@@ -39,10 +39,7 @@ from core import enums, models, utils
 from core.api.filters import ListFileFilter
 from core.enums import MEDIA_STORAGE_URL_PATTERN
 from core.recording.enums import FileExtension
-from core.recording.event.authentication import (
-    RecordingProcessWebhookAuthentication,
-    StorageEventAuthentication,
-)
+from core.recording.event.authentication import StorageEventAuthentication
 from core.recording.event.exceptions import (
    InvalidBucketError,
    InvalidFilepathError,
@@ -74,6 +71,11 @@ from core.services.lobby import (
    LobbyParticipantNotFound,
    LobbyService,
 )
+from core.services.participant_promotion import (
+    AlreadyAdminException,
+    OwnerPromotionException,
+    ParticipantPromotionService,
+)
 from core.services.participants_management import (
    ParticipantNotFoundException,
    ParticipantsManagement,
@@ -878,6 +880,123 @@ class RoomViewSet(
            status=drf_status.HTTP_200_OK,
        )

+    @decorators.action(
+        detail=True,
+        methods=["post"],
+        url_path="promote-participant",
+        url_name="promote-participant",
+        permission_classes=[permissions.HasPrivilegesOnRoom],
+    )
+    # pylint: disable=unused-argument,too-many-return-statements
+    def promote_participant(self, request, pk=None):  # noqa: PLR0911
+        """Promote a live participant to room admin.
+
+        This endpoint is intentionally non-transactional: the DB transaction and the
+        LiveKit attribute update are two separate operations. If the participant
+        leaves the meeting between the presence check and the LiveKit update, the
+        resource access is kept — their role will be effective the next time they join.
+        """
+        room = self.get_object()
+
+        serializer = serializers.BaseParticipantsManagementSerializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+
+        identity = serializer.validated_data["participant_identity"]
+        participant_management = ParticipantsManagement()
+
+        if str(identity) == str(request.user.sub):
+            return drf_response.Response(
+                {"error": "You cannot promote yourself"},
+                status=drf_status.HTTP_403_FORBIDDEN,
+            )
+
+        try:
+            is_in_meeting = participant_management.check_if_in_meeting(
+                room.pk, identity=str(identity)
+            )
+        except (ParticipantNotFoundException, ParticipantsManagementException):
+            logger.warning(
+                "Could not verify presence of participant %s in room %s before promotion; denying",
+                identity,
+                room.pk,
+            )
+            return drf_response.Response(
+                {"error": "Could not verify participant presence"},
+                status=drf_status.HTTP_403_FORBIDDEN,
+            )
+
+        if not is_in_meeting:
+            logger.warning(
+                "Participant %s is not currently in room %s; denying promotion",
+                identity,
+                room.pk,
+            )
+            return drf_response.Response(
+                {"error": "Could not verify participant presence"},
+                status=drf_status.HTTP_403_FORBIDDEN,
+            )
+
+        try:
+            user = models.User.objects.get(sub=identity)
+        except models.User.DoesNotExist:
+            return drf_response.Response(
+                {"error": "Participant not found"},
+                status=drf_status.HTTP_404_NOT_FOUND,
+            )
+
+        if not user.is_active:
+            logger.warning(
+                "Attempted to promote inactive user %s in room %s; denying",
+                identity,
+                room.pk,
+            )
+            return drf_response.Response(
+                {
+                    "error": "This participant account is inactive and cannot be promoted"
+                },
+                status=drf_status.HTTP_403_FORBIDDEN,
+            )
+
+        try:
+            ParticipantPromotionService().promote_to_admin(room=room, user=user)
+        except AlreadyAdminException:
+            return drf_response.Response(
+                {"status": "success"}, status=drf_status.HTTP_200_OK
+            )
+        except OwnerPromotionException:
+            return drf_response.Response(
+                {
+                    "error": "Owners already have the highest privileges and cannot be promoted"
+                },
+                status=drf_status.HTTP_403_FORBIDDEN,
+            )
+
+        # DB transaction is intentionally persisted before the LiveKit update.
+        # If the participant disconnects meanwhile, the role still applies on rejoin.
+        try:
+            participant_management.update(
+                room_name=str(room.pk),
+                identity=str(identity),
+                attributes={"room_admin": "true"},
+            )
+        except (ParticipantNotFoundException, ParticipantsManagementException):
+            logger.exception(
+                "LiveKit update failed for participant %s in room %s; ADMIN role persisted",
+                identity,
+                room.pk,
+            )
+            return drf_response.Response(
+                {
+                    "status": "success",
+                    "warning": "LiveKit update failed; role update persisted",
+                },
+                status=drf_status.HTTP_200_OK,
+            )
+
+        return drf_response.Response(
+            {"status": "success"}, status=drf_status.HTTP_200_OK
+        )
+

 class ResourceAccessViewSet(
    mixins.CreateModelMixin,
@@ -998,47 +1117,6 @@ class RecordingViewSet(
            {"message": "Event processed."},
        )

-    @decorators.action(
-        detail=False,
-        methods=["post"],
-        url_path="external-process-hook",
-        authentication_classes=[RecordingProcessWebhookAuthentication],
-    )
-    def on_external_process_event_received(self, request, pk=None):  # pylint: disable=unused-argument
-        """Handle incoming external process events for recordings."""
-        logger.debug("Processing external process event %s", request.data)
-        data = request.data
-        if not data.get("job_id"):
-            raise drf_exceptions.ValidationError(detail="No job_id provided")
-
-        job_id = data["job_id"]
-        try:
-            recording = models.Recording.objects.get(external_process_id=job_id)
-        except models.Recording.DoesNotExist as e:
-            logger.warning("No recording found for job_id %s: %s", job_id, e)
-            recording = None
-
-        changed = False
-        if recording and data.get("type") == "transcript":
-            if data.get("status") == "success":
-                logger.info("External process received for recording %s", job_id)
-                recording.status = (
-                    models.RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL
-                )
-                changed = True
-            if data.get("status") == "failure":
-                recording.status = models.RecordingStatusChoices.EXTERNAL_PROCESS_FAILED
-                changed = True
-
-        if changed and recording:
-            recording.save()
-        else:
-            logger.info("No changes to save for external process id %s", job_id)
-
-        return drf_response.Response(
-            {"message": "Event processed."},
-        )
-
    def _auth_get_original_url(self, request):
        """
        Extracts and parses the original URL from the "HTTP_X_ORIGINAL_URL" header.
@@ -4,10 +4,11 @@

 from django.conf import settings

+from pydantic import ValidationError
 from rest_framework import serializers

 from core import models, utils
-from core.api.serializers import BaseValidationOnlySerializer
+from core.api.serializers import BaseValidationOnlySerializer, RoomConfiguration

 OAUTH2_GRANT_TYPE_CLIENT_CREDENTIALS = "client_credentials"

@@ -34,10 +35,37 @@ class RoomSerializer(serializers.ModelSerializer):
    following the principle of least privilege.
    """

+    configuration = serializers.JSONField(required=False)
+
    class Meta:
        model = models.Room
-        fields = ["id", "name", "slug", "pin_code", "access_level"]
-        read_only_fields = ["id", "name", "slug", "pin_code", "access_level"]
+        fields = ["id", "name", "slug", "pin_code", "access_level", "configuration"]
+        read_only_fields = ["id", "name", "slug", "pin_code"]
+
+    def validate_configuration(self, value):
+        """Validate room configuration against the RoomConfiguration schema."""
+        if value is None or value == {}:
+            return value
+        try:
+            RoomConfiguration.model_validate(value)
+        except ValidationError as e:
+            raise serializers.ValidationError(e.errors()) from e
+        return value
+
+    def validate_access_level(self, access_level):
+        """Reject public access_level unless explicitly allowed or the default is already public."""
+
+        if settings.EXTERNAL_API_DEFAULT_ACCESS_LEVEL == models.RoomAccessLevel.PUBLIC:
+            return access_level
+
+        if (
+            access_level == models.RoomAccessLevel.PUBLIC
+            and not settings.EXTERNAL_API_ALLOW_PUBLIC_ACCESS
+        ):
+            raise serializers.ValidationError(
+                "Public rooms are disabled for the external API."
+            )
+        return access_level

    def to_representation(self, instance):
        """Enrich response with application-specific computed fields."""
@@ -68,6 +96,9 @@ class RoomSerializer(serializers.ModelSerializer):

        # Set secure defaults
        validated_data["name"] = utils.generate_room_slug()
-        validated_data["access_level"] = models.RoomAccessLevel.TRUSTED
+        validated_data.setdefault(
+            "access_level", settings.EXTERNAL_API_DEFAULT_ACCESS_LEVEL
+        )
+        validated_data.setdefault("configuration", {})

        return super().create(validated_data)
@@ -1,23 +0,0 @@
-# Generated by Django 5.2.14 on 2026-05-26 14:30
-
-from django.db import migrations, models
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ('core', '0018_rename_active_application_is_active'),
-    ]
-
-    operations = [
-        migrations.AddField(
-            model_name='recording',
-            name='external_process_id',
-            field=models.CharField(blank=True, help_text='ID of the external process associated with the recording.', max_length=255, null=True, unique=True, verbose_name='External Process ID'),
-        ),
-        migrations.AlterField(
-            model_name='recording',
-            name='status',
-            field=models.CharField(choices=[('initiated', 'Initiated'), ('active', 'Active'), ('stopped', 'Stopped'), ('saved', 'Saved'), ('aborted', 'Aborted'), ('failed_to_start', 'Failed to Start'), ('failed_to_stop', 'Failed to Stop'), ('notification_succeeded', 'Notification succeeded'), ('external_process_successful', 'External process successful'), ('external_process_failed', 'External process failed')], default='initiated', max_length=50),
-        ),
-    ]
@@ -60,11 +60,6 @@ class RecordingStatusChoices(models.TextChoices):
    FAILED_TO_START = "failed_to_start", _("Failed to Start")
    FAILED_TO_STOP = "failed_to_stop", _("Failed to Stop")
    NOTIFICATION_SUCCEEDED = "notification_succeeded", _("Notification succeeded")
-    EXTERNAL_PROCESS_SUCCESSFUL = (
-        "external_process_successful",
-        _("External process successful"),
-    )
-    EXTERNAL_PROCESS_FAILED = "external_process_failed", _("External process failed")

    @classmethod
    def is_final(cls, status):
@@ -78,8 +73,6 @@ class RecordingStatusChoices(models.TextChoices):
            cls.STOPPED,
            cls.SAVED,
            cls.ABORTED,
-            cls.EXTERNAL_PROCESS_SUCCESSFUL,
-            cls.EXTERNAL_PROCESS_FAILED,
            cls.FAILED_TO_START,
            cls.FAILED_TO_STOP,
        }
@@ -598,14 +591,6 @@ class Recording(BaseModel):
        verbose_name=_("Recording options"),
        help_text=_("Recording options"),
    )
-    external_process_id = models.CharField(
-        max_length=255,
-        null=True,
-        blank=True,
-        unique=True,
-        verbose_name=_("External Process ID"),
-        help_text=_("ID of the external process associated with the recording."),
-    )

    class Meta:
        db_table = "meet_recording"
@@ -661,8 +646,6 @@ class Recording(BaseModel):
        return self.status in {
            RecordingStatusChoices.NOTIFICATION_SUCCEEDED,
            RecordingStatusChoices.SAVED,
-            RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL,
-            RecordingStatusChoices.EXTERNAL_PROCESS_FAILED,
        }

    @property
@@ -14,9 +14,9 @@ logger = logging.getLogger(__name__)
 class MachineUser:
    """Represent a non-interactive system user for automated storage operations."""

-    def __init__(self, username: str = "storage_event_user") -> None:
+    def __init__(self) -> None:
        self.pk = None
-        self.username = username
+        self.username = "storage_event_user"
        self.is_active = True

    @property
@@ -91,29 +91,3 @@ class StorageEventAuthentication(BaseAuthentication):
    def authenticate_header(self, request):
        """Return the WWW-Authenticate header value."""
        return f"{self.TOKEN_TYPE} realm='Storage event API'"
-
-
-class RecordingProcessWebhookAuthentication(BaseAuthentication):
-    """
-    Custom authentication class for recording process webhook requests.
-    Validates the API key in the Authorization header.
-    """
-
-    def authenticate(self, request):
-        """
-        Authenticate the request and return a two-tuple of (user, token).
-        """
-        logger.info("Authentificating")
-        authorization_header: str = request.headers.get("Authorization") or ""
-
-        if not secrets.compare_digest(
-            authorization_header.removeprefix("Bearer "),
-            settings.SUMMARY_SERVICE_WEBHOOK_API_TOKEN,
-        ):
-            logger.warning(
-                "Authentication failed: Bad Authorization header (ip: %s)",
-                request.META.get("REMOTE_ADDR"),
-            )
-            raise AuthenticationFailed()
-
-        return MachineUser("external_process_user"), None
@@ -1,10 +1,8 @@
 """Service to notify external services when a new recording is ready."""

 import asyncio
-import json
 import logging
 import smtplib
-import warnings
 from datetime import datetime, timezone

 from django.conf import settings
@@ -19,7 +17,6 @@ from asgiref.sync import async_to_sync
 from livekit import api as livekit_api

 from core import models, utils
-from core.utils import generate_download_s3_file_url

 logger = logging.getLogger(__name__)

@@ -218,45 +215,18 @@ class NotificationService:
        )(recording.worker_id)

        payload = {
-            # Legacy V1 params to avoid a breaking change
            "owner_id": str(owner_access.user.id),
            "recording_filename": recording.key,
            "metadata_filename": metadata_filename,
            "email": owner_access.user.email,
            "sub": owner_access.user.sub,
            "room": recording.room.name,
+            "language": recording.options.get("language"),
            "owner_timezone": str(owner_access.user.timezone),
            "download_link": f"{get_recording_download_base_url()}/{recording.id}",
+            "context_language": owner_access.user.language,
            "recording_start_at": (started_at.isoformat() if started_at else None),
            "recording_end_at": (ended_at.isoformat() if ended_at else None),
-            # V2 params
-            "user_sub": owner_access.user.sub,
-            "user_email": owner_access.user.email,
-            "cloud_storage_url": generate_download_s3_file_url(
-                recording.key, expires_in=60 * 60 * 24, override_domain=False
-            ),
-            "language": recording.options.get("language", "fr"),
-            "context_language": owner_access.user.language,
-            "push_to_docs_config": {
-                "user_email": owner_access.user.email,
-                "title": "TODO",
-                "download_link": f"{get_recording_download_base_url()}/{recording.id}",
-                # For now the feature flag logic is handled on summary side
-                "auto_create_summary": True,
-            },
-            "metadata": (
-                {
-                    "cloud_storage_url": generate_download_s3_file_url(
-                        metadata_filename,
-                        expires_in=60 * 60 * 24,
-                        override_domain=False,
-                    ),
-                    "started_at": started_at.isoformat(),
-                    "ended_at": ended_at.isoformat(),
-                }
-                if (started_at and ended_at)
-                else None
-            ),
        }

        headers = {
@@ -272,31 +242,6 @@ class NotificationService:
                timeout=30,
            )
            response.raise_for_status()
-            is_v2_implementation = False
-            try:
-                response_json = response.json()
-                # We do not require a job_id to avoid a breaking change
-                if job_id := response_json.get("job_id"):
-                    recording.external_process_id = job_id
-                    recording.save()
-                    is_v2_implementation = True
-            except json.JSONDecodeError:
-                pass
-
-            if not is_v2_implementation:
-                warnings.warn(
-                    "You are likely using your own implementation for the summary / "
-                    "transcribe service."
-                    "We have released a new version and API contract for that service, "
-                    "we recommend checking it out"
-                    # pylint: disable=line-too-long
-                    "https://github.com/suitenumerique/meet/blob/19c2a378e7e66652afbfa3e749badd697e3917ac/src/summary/summary/api/route/tasks_v2.py "
-                    "and mimicking it's behavior. We will remove the legacy "
-                    "handling in a future version.",
-                    DeprecationWarning,
-                    stacklevel=2,
-                )
-
        except requests.RequestException as exc:
            logger.exception(
                "Summary service error for recording %s. URL: %s. Exception: %s",
@@ -1,6 +1,7 @@
 """Meet storage event parser classes."""

 import logging
+import mimetypes
 import re
 from dataclasses import dataclass
 from functools import lru_cache
@@ -18,6 +19,9 @@ from .exceptions import (
    ParsingEventDataError,
 )

+# Additional MIME type mapping
+mimetypes.add_type("audio/ogg", ".ogg")
+
 logger = logging.getLogger(__name__)


@@ -74,8 +78,8 @@ def get_parser() -> EventParser:
    return event_parser_cls(bucket_name=settings.AWS_STORAGE_BUCKET_NAME)


-class MinioParser:
-    """Handle parsing and validation of Minio storage events."""
+class BaseS3Parser:
+    """Base class for handling parsing and validation of S3-compatible storage events."""

    def __init__(self, bucket_name: str, allowed_filetypes=None):
        """Initialize parser with target bucket name and accepted filetypes."""
@@ -91,32 +95,6 @@ class MinioParser:
            rf"(?P<url_encoded_folder_path>(?:[^%]+%2F)+)?{settings.RECORDING_OUTPUT_FOLDER}%2F(?P<recording_id>{UUID_REGEX})\.(?P<extension>{FILE_EXT_REGEX})"
        )

-    @staticmethod
-    def parse(data):
-        """Convert raw Minio event dictionary to StorageEvent object."""
-
-        if not data:
-            raise ParsingEventDataError("Received empty data.")
-
-        try:
-            record = data["Records"][0]
-            s3 = record["s3"]
-            bucket_name = s3["bucket"]["name"]
-            file_object = s3["object"]
-            filepath = file_object["key"]
-            filetype = file_object["contentType"]
-        except (KeyError, IndexError) as e:
-            raise ParsingEventDataError(f"Missing or malformed key: {e}.") from e
-        try:
-            return StorageEvent(
-                filepath=filepath,
-                filetype=filetype,
-                bucket_name=bucket_name,
-                metadata=None,
-            )
-        except TypeError as e:
-            raise ParsingEventDataError(f"Missing essential data fields: {e}") from e
-
    def validate(self, event_data: StorageEvent) -> str:
        """Verify StorageEvent matches bucket, filetype and filepath requirements."""

@@ -141,9 +119,56 @@ class MinioParser:
        return recording_id

    def get_recording_id(self, data):
-        """Extract recording ID from Minio event through parsing and validation."""
+        """Extract recording ID from S3 event through parsing and validation."""

        event_data = self.parse(data)
-        recording_id = self.validate(event_data)
+        return self.validate(event_data)

-        return recording_id
+    def parse(self, data: Dict) -> StorageEvent:
+        """To be implemented by subclasses."""
+        raise NotImplementedError("Subclasses must implement parse()")
+
+
+class MinioParser(BaseS3Parser):
+    """Minio specific event parsing."""
+
+    def parse(self, data: Dict) -> StorageEvent:
+        if not data:
+            raise ParsingEventDataError("Received empty data.")
+        try:
+            record = data["Records"][0]
+            s3 = record["s3"]
+            return StorageEvent(
+                filepath=s3["object"]["key"],
+                filetype=s3["object"]["contentType"],  # Minio-specific field
+                bucket_name=s3["bucket"]["name"],
+                metadata=None,
+            )
+        except (KeyError, IndexError) as e:
+            raise ParsingEventDataError(f"Malformed Minio event: {e}") from e
+        except TypeError as e:
+            raise ParsingEventDataError(f"Missing essential data fields: {e}") from e
+
+
+class S3Parser(BaseS3Parser):
+    """AWS S3 specific event parsing."""
+
+    def parse(self, data: Dict) -> StorageEvent:
+        if not data:
+            raise ParsingEventDataError("Received empty data.")
+        try:
+            # AWS S3 structure can slightly differ from Minio implementation
+            record = data["Records"][0]
+            s3 = record["s3"]
+            filepath = s3["object"]["key"]
+            if not filepath:
+                raise ParsingEventDataError("Missing object key name")
+            filetype, _ = mimetypes.guess_type(filepath)
+            return StorageEvent(
+                filepath=filepath,
+                filetype=filetype,
+                bucket_name=s3["bucket"]["name"],
+                metadata=None,
+            )
+        except (KeyError, IndexError) as e:
+            raise ParsingEventDataError(f"Malformed S3 event: {e}") from e
@@ -0,0 +1,44 @@
+"""Participant promotion service."""
+
+from logging import getLogger
+
+from core import models
+
+logger = getLogger(__name__)
+
+
+class PromotionException(Exception):
+    """Base exception for promotion errors."""
+
+
+class OwnerPromotionException(PromotionException):
+    """Raised when attempting to promote an owner."""
+
+
+class AlreadyAdminException(PromotionException):
+    """Raised when attempting to promote a user who is already an admin."""
+
+
+class ParticipantPromotionService:
+    """Handles the DB side of promoting a participant to room admin."""
+
+    def promote_to_admin(self, room, user) -> None:
+        """Promote a user to ADMIN role for the given room."""
+
+        access = models.ResourceAccess.objects.filter(resource=room, user=user).first()
+
+        if access and access.role == models.RoleChoices.ADMIN:
+            raise AlreadyAdminException(
+                f"User {user.pk} is already an admin of room {room.pk}"
+            )
+
+        if access and access.role == models.RoleChoices.OWNER:
+            raise OwnerPromotionException(
+                f"User {user.pk} is an owner of room {room.pk} and cannot be promoted"
+            )
+
+        models.ResourceAccess.objects.update_or_create(
+            resource=room,
+            user=user,
+            defaults={"role": models.RoleChoices.ADMIN},
+        )
@@ -18,10 +18,13 @@ from core.recording.event.exceptions import (
 )
 from core.recording.event.parsers import (
    MinioParser,
+    S3Parser,
    StorageEvent,
    get_parser,
 )

+# MinioParser
+

@pytest.fixture
 def valid_minio_event():
@@ -47,7 +50,7 @@ def minio_parser():
    return MinioParser(bucket_name="test-bucket")


-def test_parse_valid_event(minio_parser, valid_minio_event):
+def test_minio_parse_valid_event(minio_parser, valid_minio_event):
    """Test parsing a valid Minio event."""
    event = minio_parser.parse(valid_minio_event)
    assert isinstance(event, StorageEvent)
@@ -57,13 +60,33 @@ def test_parse_valid_event(minio_parser, valid_minio_event):
    assert event.metadata is None


-def test_parse_empty_data(minio_parser):
+def test_minio_parse_with_video_type(minio_parser):
+    """Test parsing event with video file type."""
+    video_event = {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "test-bucket"},
+                    "object": {
+                        "key": "46d1a121-2426-484d-8fb3-09b5d886f7a8.mp4",
+                        "contentType": "video/mp4",
+                    },
+                }
+            }
+        ]
+    }
+    event = minio_parser.parse(video_event)
+    assert event.filetype == "video/mp4"
+    assert event.filepath.endswith(".mp4")
+
+
+def test_minio_parse_empty_data(minio_parser):
    """Test parsing empty event data raises error."""
    with pytest.raises(ParsingEventDataError, match="Received empty data."):
        minio_parser.parse({})


-def test_parse_missing_keys(minio_parser):
+def test_minio_parse_missing_keys(minio_parser):
    """Test parsing event with missing key."""

    invalid_minio_event = {
@@ -77,11 +100,11 @@ def test_parse_missing_keys(minio_parser):
        ]
    }

-    with pytest.raises(ParsingEventDataError, match="Missing or malformed key"):
+    with pytest.raises(ParsingEventDataError, match="Malformed Minio event:"):
        minio_parser.parse(invalid_minio_event)


-def test_parse_none_key(minio_parser):
+def test_minio_parse_none_key(minio_parser):
    """Test parsing event with None field."""

    invalid_minio_event = {
@@ -102,7 +125,7 @@ def test_parse_none_key(minio_parser):
        minio_parser.parse(invalid_minio_event)


-def test_validate_invalid_bucket(minio_parser):
+def test_minio_validate_invalid_bucket(minio_parser):
    """Test validation with wrong bucket name."""
    event = StorageEvent(
        filepath="recording%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
@@ -114,7 +137,7 @@ def test_validate_invalid_bucket(minio_parser):
        minio_parser.validate(event)


-def test_validate_invalid_filetype(minio_parser):
+def test_minio_validate_invalid_filetype(minio_parser):
    """Test validation with unsupported file type."""
    event = StorageEvent(
        filepath="recording%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.txt",
@@ -139,7 +162,7 @@ def test_validate_invalid_filetype(minio_parser):
        "folder%2Fuploads%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",  # nested but no recordings/
    ],
 )
-def test_validate_invalid_filepath(invalid_filepath, minio_parser):
+def test_minio_validate_invalid_filepath(invalid_filepath, minio_parser):
    """Test validation with malformed filepath."""
    event = StorageEvent(
        filepath=invalid_filepath,
@@ -151,7 +174,7 @@ def test_validate_invalid_filepath(invalid_filepath, minio_parser):
        minio_parser.validate(event)


-def test_validate_valid_event(minio_parser):
+def test_minio_validate_valid_event(minio_parser):
    """Test validation with valid event data."""
    event = StorageEvent(
        filepath="recordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
@@ -163,13 +186,13 @@ def test_validate_valid_event(minio_parser):
    assert recording_id == "46d1a121-2426-484d-8fb3-09b5d886f7a8"


-def test_get_recording_id_success(minio_parser, valid_minio_event):
+def test_minio_get_recording_id_success(minio_parser, valid_minio_event):
    """Test successful extraction of recording ID."""
    recording_id = minio_parser.get_recording_id(valid_minio_event)
    assert recording_id == "46d1a121-2426-484d-8fb3-09b5d886f7a8"


-def test_validate_filepath_with_folder(minio_parser):
+def test_minio_validate_filepath_with_folder(minio_parser):
    """Test validation of filepath with folder structure."""
    event = StorageEvent(
        filepath="parent_folder%2Frecordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
@@ -181,41 +204,21 @@ def test_validate_filepath_with_folder(minio_parser):
    assert recording_id == "46d1a121-2426-484d-8fb3-09b5d886f7a8"


-def test_parse_with_video_type(minio_parser):
-    """Test parsing event with video file type."""
-    video_event = {
-        "Records": [
-            {
-                "s3": {
-                    "bucket": {"name": "test-bucket"},
-                    "object": {
-                        "key": "46d1a121-2426-484d-8fb3-09b5d886f7a8.mp4",
-                        "contentType": "video/mp4",
-                    },
-                }
-            }
-        ]
-    }
-    event = minio_parser.parse(video_event)
-    assert event.filetype == "video/mp4"
-    assert event.filepath.endswith(".mp4")
-
-
-def test_empty_allowed_filetypes():
+def test_minio_empty_allowed_filetypes():
    """Test MinioParser with empty allowed_filetypes."""
    empty_types = set()
    parser = MinioParser(bucket_name="test-bucket", allowed_filetypes=empty_types)
    assert parser._allowed_filetypes == {"audio/ogg", "video/mp4"}


-def test_custom_allowed_filetypes():
+def test_minio_custom_allowed_filetypes():
    """Test MinioParser with empty allowed_filetypes."""
    custom_types = {"audio/mp3", "video/mov"}
    parser = MinioParser(bucket_name="test-bucket", allowed_filetypes=custom_types)
    assert parser._allowed_filetypes == {"audio/mp3", "video/mov"}


-def test_validate_custom_filetypes():
+def test_minio_validate_custom_filetypes():
    """Test validation of filepath with folder structure."""

    parser = MinioParser(bucket_name="test-bucket", allowed_filetypes={"audio/mp3"})
@@ -229,18 +232,143 @@ def test_validate_custom_filetypes():
    parser.validate(event)


-def test_constructor_none_bucket():
+def test_minio_constructor_none_bucket():
    """Test MinioParser constructor with None bucket name."""
    with pytest.raises(ValueError, match="Bucket name cannot be None or empty"):
        MinioParser(bucket_name=None)


-def test_constructor_empty_bucket():
+def test_minio_constructor_empty_bucket():
    """Test MinioParser constructor with empty bucket name."""
    with pytest.raises(ValueError, match="Bucket name cannot be None or empty"):
        MinioParser(bucket_name="")


+# S3Parser
+
+
+@pytest.fixture
+def valid_s3_event():
+    """Mock a valid S3 event."""
+    return {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "test-bucket"},
+                    "object": {
+                        "key": "recordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg",
+                    },
+                }
+            }
+        ]
+    }
+
+
+@pytest.fixture
+def s3_parser():
+    """Mock an S3 parser."""
+    return S3Parser(bucket_name="test-bucket")
+
+
+def test_s3_parse_valid_event(s3_parser, valid_s3_event):
+    """Test parsing a valid S3 event."""
+    event = s3_parser.parse(valid_s3_event)
+    assert isinstance(event, StorageEvent)
+    assert event.filepath == "recordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.ogg"
+    assert event.filetype == "audio/ogg"
+    assert event.bucket_name == "test-bucket"
+    assert event.metadata is None
+
+
+def test_s3_parse_empty_data(s3_parser):
+    """Test parsing empty S3 event data raises error."""
+    with pytest.raises(ParsingEventDataError, match="Received empty data."):
+        s3_parser.parse({})
+
+
+def test_s3_parse_missing_keys(s3_parser):
+    """Test parsing S3 event with missing key."""
+    invalid_s3_event = {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "test-bucket"},
+                    # Missing 'object' key
+                }
+            }
+        ]
+    }
+
+    with pytest.raises(ParsingEventDataError, match="Malformed S3 event:"):
+        s3_parser.parse(invalid_s3_event)
+
+
+def test_s3_parse_none_key(s3_parser):
+    """Test parsing S3 event with None field."""
+    invalid_s3_event = {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "test-bucket"},
+                    "object": {
+                        "key": None,
+                    },
+                }
+            }
+        ]
+    }
+
+    with pytest.raises(ParsingEventDataError, match="Missing object key name"):
+        s3_parser.parse(invalid_s3_event)
+
+
+def test_s3_parse_with_video_type(s3_parser):
+    """Test parsing S3 event with mp4 file extension."""
+    video_event = {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "test-bucket"},
+                    "object": {
+                        "key": "recordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.mp4",
+                    },
+                }
+            }
+        ]
+    }
+    event = s3_parser.parse(video_event)
+    assert event.filetype == "video/mp4"
+    assert event.filepath.endswith(".mp4")
+
+
+def test_s3_parse_unrecognized_extension(s3_parser):
+    """Test parsing S3 event with unrecognized file extension."""
+    event_with_unknown_ext = {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "test-bucket"},
+                    "object": {
+                        "key": "recordings%2F46d1a121-2426-484d-8fb3-09b5d886f7a8.zzunknown999",
+                    },
+                }
+            }
+        ]
+    }
+
+    with pytest.raises(TypeError, match="filetype cannot be None"):
+        s3_parser.parse(event_with_unknown_ext)
+
+
+def test_s3_get_recording_id_success(s3_parser, valid_s3_event):
+    """Test successful extraction of recording ID from S3 event."""
+    recording_id = s3_parser.get_recording_id(valid_s3_event)
+    assert recording_id == "46d1a121-2426-484d-8fb3-09b5d886f7a8"
+
+
+# get_parser
+
+
@pytest.fixture
 def clear_lru_cache():
    """Fixture to clear the LRU cache between tests."""
@@ -1,134 +0,0 @@
-"""
-Test recordings API endpoints: external process hook.
-"""
-
-# pylint: disable=redefined-outer-name,unused-argument
-
-import pytest
-
-from ...factories import RecordingFactory
-from ...models import RecordingStatusChoices
-
-pytestmark = pytest.mark.django_db
-
-
-@pytest.fixture
-def external_process_settings(settings):
-    """Configure authentication token for the external process webhook."""
-    settings.SUMMARY_SERVICE_WEBHOOK_API_TOKEN = "testWebhookToken"
-    return settings
-
-
-def test_external_process_event_missing_authorization_header(
-    external_process_settings, client
-):
-    """Requests without authorization must be rejected."""
-    response = client.post(
-        "/api/v1.0/recordings/external-process-hook/",
-        {"job_id": "job-1", "type": "transcript", "status": "success"},
-    )
-
-    assert response.status_code == 403
-
-
-def test_external_process_event_wrong_bearer_token(external_process_settings, client):
-    """Requests with invalid bearer token must be rejected."""
-    response = client.post(
-        "/api/v1.0/recordings/external-process-hook/",
-        {"job_id": "job-1", "type": "transcript", "status": "success"},
-        HTTP_AUTHORIZATION="Bearer wrongToken",
-    )
-
-    assert response.status_code == 403
-
-
-def test_external_process_event_missing_job_id(external_process_settings, client):
-    """Payload without job_id must fail validation."""
-    response = client.post(
-        "/api/v1.0/recordings/external-process-hook/",
-        {"type": "transcript", "status": "success"},
-        HTTP_AUTHORIZATION="Bearer testWebhookToken",
-    )
-
-    assert response.status_code == 400
-    assert "No job_id provided" in str(response.json())
-
-
-def test_external_process_event_success_updates_recording_status(
-    external_process_settings, client
-):
-    """A successful transcript process should update recording status."""
-    recording = RecordingFactory(
-        status=RecordingStatusChoices.SAVED,
-        external_process_id="job-123",
-    )
-
-    response = client.post(
-        "/api/v1.0/recordings/external-process-hook/",
-        {"job_id": "job-123", "type": "transcript", "status": "success"},
-        HTTP_AUTHORIZATION="Bearer testWebhookToken",
-    )
-
-    assert response.status_code == 200
-    assert response.json() == {"message": "Event processed."}
-
-    recording.refresh_from_db()
-    assert recording.status == RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL
-
-
-def test_external_process_event_failure_updates_recording_status(
-    external_process_settings, client
-):
-    """A failing transcript process should update recording status."""
-    recording = RecordingFactory(
-        status=RecordingStatusChoices.SAVED,
-        external_process_id="job-456",
-    )
-
-    response = client.post(
-        "/api/v1.0/recordings/external-process-hook/",
-        {"job_id": "job-456", "type": "transcript", "status": "failure"},
-        HTTP_AUTHORIZATION="Bearer testWebhookToken",
-    )
-
-    assert response.status_code == 200
-    assert response.json() == {"message": "Event processed."}
-
-    recording.refresh_from_db()
-    assert recording.status == RecordingStatusChoices.EXTERNAL_PROCESS_FAILED
-
-
-def test_external_process_event_unknown_recording_is_ignored(
-    external_process_settings, client
-):
-    """Unknown job_id should not fail the webhook processing."""
-    response = client.post(
-        "/api/v1.0/recordings/external-process-hook/",
-        {"job_id": "missing-job", "type": "transcript", "status": "success"},
-        HTTP_AUTHORIZATION="Bearer testWebhookToken",
-    )
-
-    assert response.status_code == 200
-    assert response.json() == {"message": "Event processed."}
-
-
-def test_external_process_event_non_transcript_event_does_not_change_status(
-    external_process_settings, client
-):
-    """Only transcript events should update recording status."""
-    recording = RecordingFactory(
-        status=RecordingStatusChoices.SAVED,
-        external_process_id="job-789",
-    )
-
-    response = client.post(
-        "/api/v1.0/recordings/external-process-hook/",
-        {"job_id": "job-789", "type": "thumbnail", "status": "success"},
-        HTTP_AUTHORIZATION="Bearer testWebhookToken",
-    )
-
-    assert response.status_code == 200
-    assert response.json() == {"message": "Event processed."}
-
-    recording.refresh_from_db()
-    assert recording.status == RecordingStatusChoices.SAVED
@@ -0,0 +1,612 @@
+"""
+Test rooms API endpoints: promote participant.
+"""
+
+# pylint: disable=redefined-outer-name,unused-argument,protected-access
+
+import random
+from unittest import mock
+from uuid import uuid4
+
+import pytest
+from rest_framework import status
+from rest_framework.test import APIClient
+
+from core import models
+from core.factories import RoomFactory, UserFactory, UserResourceAccessFactory
+from core.services.participants_management import (
+    ParticipantNotFoundException,
+    ParticipantsManagementException,
+)
+
+pytestmark = pytest.mark.django_db
+
+
+# ---
+# success cases
+# ---
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_success_new_access(mock_participants_management_cls):
+    """Should create a new ResourceAccess with ADMIN role and update LiveKit."""
+    mock_instance = mock.MagicMock()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_200_OK
+    assert response.data == {"status": "success"}
+
+    mock_instance.check_if_in_meeting.assert_called_once_with(
+        room.pk, identity=participant_user.sub
+    )
+
+    assert models.ResourceAccess.objects.filter(
+        resource=room,
+        user=participant_user,
+        role=models.RoleChoices.ADMIN,
+    ).exists()
+
+    mock_instance.update.assert_called_once_with(
+        room_name=str(room.pk),
+        identity=str(participant_user.sub),
+        attributes={"room_admin": "true"},
+    )
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_success_upgrades_member_to_admin(
+    mock_participants_management_cls,
+):
+    """Should upgrade an existing member to ADMIN role."""
+    mock_instance = mock.MagicMock()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+    UserResourceAccessFactory(resource=room, user=participant_user, role="member")
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_200_OK
+    assert response.data == {"status": "success"}
+
+    mock_instance.check_if_in_meeting.assert_called_once_with(
+        room.pk, identity=str(participant_user.sub)
+    )
+
+    access = models.ResourceAccess.objects.get(resource=room, user=participant_user)
+    assert access.role == models.RoleChoices.ADMIN
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_success_already_admin(mock_participants_management_cls):
+    """Should succeed idempotently when the participant is already an admin."""
+    mock_instance = mock.MagicMock()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+    UserResourceAccessFactory(
+        resource=room, user=participant_user, role="administrator"
+    )
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_200_OK
+    assert response.data == {"status": "success"}
+
+    mock_instance.check_if_in_meeting.assert_called_once_with(
+        room.pk, identity=str(participant_user.sub)
+    )
+
+    access = models.ResourceAccess.objects.get(resource=room, user=participant_user)
+    assert access.role == models.RoleChoices.ADMIN
+    mock_instance.update.assert_not_called()
+
+
+# ---
+# permission / auth
+# ---
+
+
+def test_promote_participant_forbidden_without_authentication():
+    """Should return 401 when the request is unauthenticated."""
+    room = RoomFactory()
+
+    response = APIClient().post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(uuid4())},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_401_UNAUTHORIZED
+
+
+def test_promote_participant_forbidden_for_member():
+    """Should return 403 when the requester only has member-level access."""
+    room = RoomFactory()
+    member = UserFactory()
+    UserResourceAccessFactory(resource=room, user=member, role="member")
+
+    client = APIClient()
+    client.force_authenticate(user=member)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(uuid4())},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+
+
+def test_promote_participant_forbidden_for_unrelated_user():
+    """Should return 403 when the requester has no access to the room."""
+    room = RoomFactory()
+    unrelated_user = UserFactory()
+
+    client = APIClient()
+    client.force_authenticate(user=unrelated_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(uuid4())},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+
+
+def test_promote_participant_forbidden_for_admin_on_another_room():
+    """Should return 403 when the requester is admin on a different room, not the target one."""
+    target_room = RoomFactory()
+    other_room = RoomFactory()
+    admin_other_room = UserFactory()
+    UserResourceAccessFactory(
+        resource=other_room,
+        user=admin_other_room,
+        role=random.choice(["administrator", "owner"]),
+    )
+
+    client = APIClient()
+    client.force_authenticate(user=admin_other_room)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{target_room.id}/promote-participant/",
+        {"participant_identity": str(uuid4())},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+
+
+# ---
+# self-promotion
+# ---
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_forbidden_self_promotion(mock_participants_management_cls):
+    """Should return 403 when the requester attempts to promote themselves."""
+    mock_participants_management_cls.return_value = mock.MagicMock()
+
+    room = RoomFactory()
+    admin_user = UserFactory(sub=uuid4())
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(admin_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+    assert response.data == {"error": "You cannot promote yourself"}
+
+    mock_participants_management_cls.check_if_in_meeting.assert_not_called()
+
+
+# ---
+# presence check
+# ---
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_forbidden_when_participant_not_in_meeting(
+    mock_participants_management_cls,
+):
+    """Should return 403 when check_if_in_meeting returns False."""
+    mock_instance = mock.MagicMock()
+    mock_instance.check_if_in_meeting.return_value = False
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+    assert response.data == {"error": "Could not verify participant presence"}
+    mock_instance.update.assert_not_called()
+    assert not models.ResourceAccess.objects.filter(
+        resource=room, user=participant_user
+    ).exists()
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_forbidden_when_presence_check_fails(
+    mock_participants_management_cls,
+):
+    """Should return 403 when the participant is not found in the meeting."""
+    mock_instance = mock.MagicMock()
+    mock_instance.check_if_in_meeting.side_effect = ParticipantNotFoundException()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+    assert response.data == {"error": "Could not verify participant presence"}
+    mock_instance.update.assert_not_called()
+    assert not models.ResourceAccess.objects.filter(
+        resource=room, user=participant_user
+    ).exists()
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_forbidden_when_presence_management_exception(
+    mock_participants_management_cls,
+):
+    """Should return 403 when the presence check raises a management exception."""
+    mock_instance = mock.MagicMock()
+    mock_instance.check_if_in_meeting.side_effect = ParticipantsManagementException()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+    assert response.data == {"error": "Could not verify participant presence"}
+    mock_instance.update.assert_not_called()
+    assert not models.ResourceAccess.objects.filter(
+        resource=room, user=participant_user
+    ).exists()
+
+
+# ---
+# user resolution
+# ---
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_not_found_when_user_never_logged_in(
+    mock_participants_management_cls,
+):
+    """Should return 404 when the identity has no matching db user."""
+    mock_instance = mock.MagicMock()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    unknown_sub = uuid4()
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(unknown_sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_404_NOT_FOUND
+    assert response.data == {"error": "Participant not found"}
+    mock_instance.update.assert_not_called()
+
+    assert models.ResourceAccess.objects.filter(resource=room).count() == 1
+    assert models.ResourceAccess.objects.filter(resource=room, user=admin_user).exists()
+
+
+# ---
+# inactive user
+# ---
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_forbidden_when_user_is_inactive(
+    mock_participants_management_cls,
+):
+    """Should return 403 when the target participant account is inactive."""
+    mock_instance = mock.MagicMock()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4(), is_active=False)
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+    assert response.data == {
+        "error": "This participant account is inactive and cannot be promoted"
+    }
+    mock_instance.update.assert_not_called()
+    assert not models.ResourceAccess.objects.filter(
+        resource=room, user=participant_user
+    ).exists()
+
+
+# ---
+# owner protection
+# ---
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_forbidden_when_target_is_owner(
+    mock_participants_management_cls,
+):
+    """Should return 403 when trying to promote a participant who is already an owner."""
+    mock_instance = mock.MagicMock()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+    UserResourceAccessFactory(resource=room, user=participant_user, role="owner")
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+    assert response.data == {
+        "error": "Owners already have the highest privileges and cannot be promoted"
+    }
+    mock_instance.update.assert_not_called()
+
+    assert models.ResourceAccess.objects.filter(
+        resource=room,
+        user=participant_user,
+        role=models.RoleChoices.OWNER,
+    ).exists()
+
+
+# ---
+# LiveKit update failures
+# ---
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_partial_success_when_livekit_participant_missing(
+    mock_participants_management_cls,
+):
+    """Should return 200 with warning when participant left during the promotion.
+
+    The DB resource access is kept — they will have admin privileges on rejoin.
+    """
+    mock_instance = mock.MagicMock()
+    mock_instance.update.side_effect = ParticipantNotFoundException()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_200_OK
+    assert response.data == {
+        "status": "success",
+        "warning": "LiveKit update failed; role update persisted",
+    }
+
+    assert models.ResourceAccess.objects.filter(
+        resource=room,
+        user=participant_user,
+        role=models.RoleChoices.ADMIN,
+    ).exists()
+
+
+@mock.patch("core.api.viewsets.ParticipantsManagement")
+def test_promote_participant_partial_success_on_livekit_management_exception(
+    mock_participants_management_cls,
+):
+    """Should return 200 with warning when LiveKit update fails but DB transaction succeeded."""
+    mock_instance = mock.MagicMock()
+    mock_instance.update.side_effect = ParticipantsManagementException()
+    mock_participants_management_cls.return_value = mock_instance
+
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+    participant_user = UserFactory(sub=uuid4())
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        {"participant_identity": str(participant_user.sub)},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_200_OK
+    assert response.data == {
+        "status": "success",
+        "warning": "LiveKit update failed; role update persisted",
+    }
+
+    assert models.ResourceAccess.objects.filter(
+        resource=room,
+        user=participant_user,
+        role=models.RoleChoices.ADMIN,
+    ).exists()
+
+
+# ---
+# payload validation
+# ---
+
+
+@pytest.mark.parametrize(
+    "payload",
+    [
+        {"participant_identity": "not-a-uuid"},
+        {"participant_identity": ""},
+        {"participant_identity": "   "},
+        {"participant_identity": None},
+        {},
+    ],
+)
+def test_promote_participant_invalid_payload(payload):
+    """Should return 400 for invalid, empty, whitespace, null, or missing participant_identity."""
+    room = RoomFactory()
+    admin_user = UserFactory()
+    UserResourceAccessFactory(
+        resource=room, user=admin_user, role=random.choice(["administrator", "owner"])
+    )
+
+    client = APIClient()
+    client.force_authenticate(user=admin_user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{room.id}/promote-participant/",
+        payload,
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_400_BAD_REQUEST
+
+
+# ---
+# room not found
+# ---
+
+
+def test_promote_participant_room_not_found():
+    """Should return 404 when the room does not exist."""
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_authenticate(user=user)
+
+    response = client.post(
+        f"/api/v1.0/rooms/{uuid4()}/promote-participant/",
+        {"participant_identity": str(uuid4())},
+        format="json",
+    )
+
+    assert response.status_code == status.HTTP_404_NOT_FOUND
@@ -4,6 +4,7 @@ Test suite for generated openapi schema.

 import json
 from io import StringIO
+from unittest.mock import patch

 from django.core.management import call_command
 from django.test import Client
@@ -33,10 +34,26 @@ def test_openapi_client_schema():
    )
    assert output.getvalue() == ""

-    response = Client().get("/v1.0/swagger.json")
+    response = Client().get("/api/v1.0/swagger.json")

    assert response.status_code == 200
    with open(
        "core/tests/swagger/swagger.json", "r", encoding="utf-8"
    ) as expected_schema:
        assert response.json() == json.load(expected_schema)
+
+
+@patch(
+    "django.contrib.staticfiles.storage.staticfiles_storage.url",
+    side_effect=lambda name: f"/static/{name}",
+)
+# pylint: disable=unused-argument
+def test_openapi_documentation_routes(mock_staticfiles):
+    """Swagger and ReDoc documentation should be served on canonical URLs."""
+    client = Client()
+
+    swagger_response = client.get("/api/v1.0/swagger/")
+    redoc_response = client.get("/api/v1.0/redoc/")
+
+    assert swagger_response.status_code == 200
+    assert redoc_response.status_code == 200
@@ -250,6 +250,112 @@ def test_api_rooms_list_filters_by_user():
    assert str(room2.id) not in returned_ids


+def test_api_rooms_list_access_level_in_results():
+    """Rooms should include the correct access_level for each room."""
+    user = UserFactory()
+    room_trusted = RoomFactory(
+        users=[(user, RoleChoices.OWNER)], access_level=RoomAccessLevel.TRUSTED
+    )
+    room_restricted = RoomFactory(
+        users=[(user, RoleChoices.OWNER)], access_level=RoomAccessLevel.RESTRICTED
+    )
+
+    token = generate_test_token(user, [ApplicationScope.ROOMS_LIST])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.get("/external-api/v1.0/rooms/")
+
+    assert response.status_code == 200
+    results = {r["id"]: r for r in response.data["results"]}
+    assert results[str(room_trusted.id)]["access_level"] == RoomAccessLevel.TRUSTED
+    assert (
+        results[str(room_restricted.id)]["access_level"] == RoomAccessLevel.RESTRICTED
+    )
+
+
+def test_api_rooms_list_does_not_expose_sensitive_fields():
+    """Rooms should not expose pin_code or accesses."""
+    user = UserFactory()
+    RoomFactory(users=[(user, RoleChoices.OWNER)])
+
+    token = generate_test_token(user, [ApplicationScope.ROOMS_LIST])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.get("/external-api/v1.0/rooms/")
+
+    assert response.status_code == 200
+    result = response.data["results"][0]
+    assert "pin_code" not in result
+    assert "accesses" not in result
+    assert "livekit" not in result
+
+
+def test_api_rooms_list_expected_fields(settings):
+    """Rooms should expose exactly the expected fields."""
+
+    settings.APPLICATION_BASE_URL = "https://example.com"
+    settings.ROOM_TELEPHONY_ENABLED = True
+
+    user = UserFactory()
+    RoomFactory(users=[(user, RoleChoices.OWNER)])
+
+    token = generate_test_token(user, [ApplicationScope.ROOMS_LIST])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.get("/external-api/v1.0/rooms/")
+
+    assert response.status_code == 200
+    assert set(response.data["results"][0].keys()) == {
+        "id",
+        "name",
+        "slug",
+        "access_level",
+        "configuration",
+        "telephony",
+        "url",
+    }
+
+
+def test_api_rooms_list_expected_fields_without_telephony(settings):
+    """Rooms shouldn't expose telephony related fields when disabled."""
+
+    settings.APPLICATION_BASE_URL = "https://example.com"
+    settings.ROOM_TELEPHONY_ENABLED = False
+
+    user = UserFactory()
+    RoomFactory(users=[(user, RoleChoices.OWNER)])
+
+    token = generate_test_token(user, [ApplicationScope.ROOMS_LIST])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.get("/external-api/v1.0/rooms/")
+
+    assert response.status_code == 200
+    assert "telephony" not in set(response.data["results"][0].keys())
+
+
+def test_api_rooms_list_expected_fields_missing_base_url(settings):
+    """Rooms shouldn't expose URL field when the application base url is missing."""
+
+    settings.APPLICATION_BASE_URL = None
+
+    user = UserFactory()
+    RoomFactory(users=[(user, RoleChoices.OWNER)])
+
+    token = generate_test_token(user, [ApplicationScope.ROOMS_LIST])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.get("/external-api/v1.0/rooms/")
+
+    assert response.status_code == 200
+    assert "url" not in set(response.data["results"][0].keys())
+
+
 def test_api_rooms_retrieve_requires_authentication():
    """Retrieving rooms without authentication should return 401."""

@@ -383,6 +489,7 @@ def test_api_rooms_retrieve_success(settings):
        "name": room.name,
        "slug": room.slug,
        "access_level": str(room.access_level),
+        "configuration": room.configuration,
        "url": f"http://your-application.com/{room.slug}",
        "telephony": {
            "enabled": True,
@@ -565,11 +672,40 @@ def test_api_rooms_create_success():
    assert "slug" in response.data
    assert "name" in response.data
    assert response.data["name"] == response.data["slug"]
+    assert response.data["configuration"] == {}

    # Verify room was created with user as owner
    room = Room.objects.get(id=response.data["id"])
    assert room.get_role(user) == RoleChoices.OWNER
    assert room.access_level == "trusted"
+    assert room.configuration == {}
+
+
+def test_api_rooms_create_with_configuration_success():
+    """Creating a room with a validated configuration should succeed."""
+
+    user = UserFactory()
+
+    token = generate_test_token(
+        user, [ApplicationScope.ROOMS_CREATE, ApplicationScope.ROOMS_LIST]
+    )
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.post(
+        "/external-api/v1.0/rooms/",
+        {
+            "access_level": RoomAccessLevel.RESTRICTED,
+            "configuration": {"can_publish_sources": ["camera"]},
+        },
+        format="json",
+    )
+
+    assert response.status_code == 201
+    room = Room.objects.get(id=response.data["id"])
+    assert room.access_level == RoomAccessLevel.RESTRICTED
+    assert room.configuration == {"can_publish_sources": ["camera"]}
+    assert response.data["configuration"] == {"can_publish_sources": ["camera"]}


 def test_api_rooms_create_readonly_enforcement():
@@ -587,7 +723,6 @@ def test_api_rooms_create_readonly_enforcement():
            "id": "fake-id",
            "slug": "fake-slug",
            "name": "fake-name",
-            "access_level": "public",
        },
        format="json",
    )
@@ -599,41 +734,150 @@ def test_api_rooms_create_readonly_enforcement():
    assert response.data["slug"] != "fake-slug"
    assert "id" in response.data
    assert response.data["name"] != "fake-name"
+    assert response.data["configuration"] == {}

    # Verify room was created with user as owner
    room = Room.objects.get(id=response.data["id"])
    assert room.get_role(user) == RoleChoices.OWNER
    assert room.access_level == "trusted"
+    assert room.configuration == {}


-def test_api_rooms_unknown_actions():
-    """Updating or deleting a room are not supported yet."""
+def test_api_rooms_create_rejects_invalid_configuration():
+    """Creating a room with unsupported configuration keys should fail."""

    user = UserFactory()
-    room = RoomFactory(users=[(user, RoleChoices.OWNER)])
+    token = generate_test_token(user, [ApplicationScope.ROOMS_CREATE])

-    token = generate_test_token(
-        user,
-        [
-            ApplicationScope.ROOMS_RETRIEVE,
-            ApplicationScope.ROOMS_DELETE,
-            ApplicationScope.ROOMS_UPDATE,
-        ],
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.post(
+        "/external-api/v1.0/rooms/",
+        {
+            "configuration": {
+                "unsupported_flag": True,
+            }
+        },
+        format="json",
    )

-    client = APIClient()
-    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
-    response = client.delete(f"/external-api/v1.0/rooms/{room.id}/")
+    assert response.status_code == 400
+    assert "extra inputs are not permitted" in str(response.data).lower()

-    assert response.status_code == 405
-    assert 'method "delete" not allowed.' in str(response.data).lower()
+
+@pytest.mark.parametrize(
+    "invalid_configuration",
+    [
+        {"can_publish_sources": ["invalid-source"]},
+        {"everyone_can_mute": "invalid-value"},
+    ],
+)
+def test_api_rooms_create_rejects_invalid_configuration_values(invalid_configuration):
+    """Creating a room with invalid configuration values should fail."""
+
+    user = UserFactory()
+    token = generate_test_token(user, [ApplicationScope.ROOMS_CREATE])

    client = APIClient()
    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
-    response = client.patch(f"/external-api/v1.0/rooms/{room.id}/")
+    response = client.post(
+        "/external-api/v1.0/rooms/",
+        {"configuration": invalid_configuration},
+        format="json",
+    )

-    assert response.status_code == 405
-    assert 'method "patch" not allowed.' in str(response.data).lower()
+    assert response.status_code == 400
+
+
+def test_api_rooms_create_public_access_disabled_by_default():
+    """Public rooms should be disabled for the external API by default."""
+
+    user = UserFactory()
+    token = generate_test_token(user, [ApplicationScope.ROOMS_CREATE])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.post(
+        "/external-api/v1.0/rooms/",
+        {"access_level": RoomAccessLevel.PUBLIC},
+        format="json",
+    )
+
+    assert response.status_code == 400
+    assert "public rooms are disabled" in str(response.data).lower()
+
+
+def test_api_rooms_create_public_access_enabled_with_settings(settings):
+    """Public rooms should be creatable when explicitly enabled."""
+
+    settings.EXTERNAL_API_ALLOW_PUBLIC_ACCESS = True
+
+    user = UserFactory()
+    token = generate_test_token(user, [ApplicationScope.ROOMS_CREATE])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.post(
+        "/external-api/v1.0/rooms/",
+        {"access_level": RoomAccessLevel.PUBLIC},
+        format="json",
+    )
+
+    assert response.status_code == 201
+    room = Room.objects.get(id=response.data["id"])
+    assert room.access_level == RoomAccessLevel.PUBLIC
+    assert response.data["access_level"] == RoomAccessLevel.PUBLIC
+
+
+def test_api_rooms_create_default_access_level_respects_settings(settings):
+    """Room creation should reflect the EXTERNAL_API_DEFAULT_ACCESS_LEVEL setting."""
+
+    user = UserFactory()
+    token = generate_test_token(user, [ApplicationScope.ROOMS_CREATE])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+    response = client.post(
+        "/external-api/v1.0/rooms/",
+        format="json",
+    )
+    assert response.status_code == 201
+    assert response.data["access_level"] == RoomAccessLevel.TRUSTED
+
+    settings.EXTERNAL_API_DEFAULT_ACCESS_LEVEL = "public"
+
+    response = client.post(
+        "/external-api/v1.0/rooms/",
+        format="json",
+    )
+    assert response.status_code == 201
+    assert response.data["access_level"] == RoomAccessLevel.PUBLIC
+
+
+def test_api_rooms_create_public_access_level_when_default_is_public(settings):
+    """Explicit public access_level is accepted when the default is already public."""
+    settings.EXTERNAL_API_ALLOW_PUBLIC_ACCESS = False
+    settings.EXTERNAL_API_DEFAULT_ACCESS_LEVEL = "public"
+
+    user = UserFactory()
+    token = generate_test_token(user, [ApplicationScope.ROOMS_CREATE])
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION=f"Bearer {token}")
+
+    # No access_level in body — default kicks in, public room is created.
+    response = client.post("/external-api/v1.0/rooms/", {}, format="json")
+    assert response.status_code == 201
+    assert response.data["access_level"] == RoomAccessLevel.PUBLIC
+
+    # Explicit access_level=public in body — still rejected.
+    response = client.post(
+        "/external-api/v1.0/rooms/",
+        {"access_level": RoomAccessLevel.PUBLIC},
+        format="json",
+    )
+    assert response.status_code == 201
+    assert response.data["access_level"] == RoomAccessLevel.PUBLIC


 def test_api_rooms_response_no_url(settings):
@@ -0,0 +1,58 @@
+"""
+Test utils.build_telephony_config
+"""
+
+import logging
+
+from core.utils import build_telephony_config
+
+
+def test_build_telephony_config_disabled(settings):
+    """Returns {"enabled": False} when telephony is disabled."""
+    settings.ROOM_TELEPHONY_ENABLED = False
+    config = build_telephony_config()
+    assert config == {"enabled": False}
+
+
+def test_build_telephony_config_enabled_with_valid_number(settings):
+    """Returns full config with country and international number when telephony is enabled."""
+    settings.ROOM_TELEPHONY_ENABLED = True
+    settings.ROOM_TELEPHONY_PHONE_NUMBER = "0123456789"
+    settings.ROOM_TELEPHONY_DEFAULT_COUNTRY = "FR"
+    config = build_telephony_config()
+    assert config == {
+        "enabled": True,
+        "default_country": "FR",
+        "international_phone_number": "+33 1 23 45 67 89",
+    }
+
+
+def test_build_telephony_config_enabled_with_invalid_number(settings):
+    """Returns {"enabled": False} when phone number cannot be parsed."""
+    settings.ROOM_TELEPHONY_ENABLED = True
+    settings.ROOM_TELEPHONY_PHONE_NUMBER = "not-a-number"
+    settings.ROOM_TELEPHONY_DEFAULT_COUNTRY = "FR"
+    config = build_telephony_config()
+    assert config == {"enabled": False}
+
+
+def test_build_telephony_config_enabled_with_missing_number(settings):
+    """Returns {"enabled": False} when phone number is not configured."""
+    settings.ROOM_TELEPHONY_ENABLED = True
+    settings.ROOM_TELEPHONY_PHONE_NUMBER = ""
+    settings.ROOM_TELEPHONY_DEFAULT_COUNTRY = "FR"
+    config = build_telephony_config()
+    assert config == {"enabled": False}
+
+
+def test_build_telephony_config_enabled_with_missing_number_warns(settings, caplog):
+    """Logs a warning when telephony is enabled but phone number is not configured."""
+
+    settings.ROOM_TELEPHONY_ENABLED = True
+    settings.ROOM_TELEPHONY_PHONE_NUMBER = ""
+    settings.ROOM_TELEPHONY_DEFAULT_COUNTRY = "FR"
+
+    with caplog.at_level(logging.WARNING):
+        build_telephony_config()
+
+    assert "ROOM_TELEPHONY_PHONE_NUMBER" in caplog.text
@@ -0,0 +1,102 @@
+"""
+Test utils._format_telephony_phone_number
+"""
+
+import logging
+
+import pytest
+
+from core.utils import _format_telephony_phone_number
+
+
+@pytest.fixture(autouse=True)
+def clear_lru_cache():
+    """Clear the lru_cache before each test to ensure isolation."""
+    _format_telephony_phone_number.cache_clear()
+    yield
+    _format_telephony_phone_number.cache_clear()
+
+
+def test_format_telephony_phone_number_missing_raw_number():
+    """Returns (None, None) when raw_number is empty."""
+    country, international = _format_telephony_phone_number("", "FR")
+    assert country is None
+    assert international is None
+
+
+def test_format_telephony_phone_number_none_raw_number():
+    """Returns (None, None) when raw_number is None."""
+    country, international = _format_telephony_phone_number(None, "FR")
+    assert country is None
+    assert international is None
+
+
+def test_format_telephony_phone_number_missing_default_country():
+    """Returns (None, None) when default_country is empty."""
+    country, international = _format_telephony_phone_number("+33123456789", "")
+    assert country is None
+    assert international is None
+
+
+def test_format_telephony_phone_number_none_default_country():
+    """Returns (None, None) when default_country is None."""
+    country, international = _format_telephony_phone_number("+33123456789", None)
+    assert country is None
+    assert international is None
+
+
+def test_format_telephony_phone_number_both_missing():
+    """Returns (None, None) when both inputs are missing."""
+    country, international = _format_telephony_phone_number(None, None)
+    assert country is None
+    assert international is None
+
+
+def test_format_telephony_phone_number_invalid_number(caplog):
+    """Returns (None, None) and logs a warning when the number cannot be parsed."""
+
+    with caplog.at_level(logging.WARNING):
+        country, international = _format_telephony_phone_number("not-a-number", "FR")
+
+    assert country is None
+    assert international is None
+    assert "not-a-number" in caplog.text
+    assert "FR" in caplog.text
+
+
+def test_format_telephony_phone_number_valid_french_number():
+    """Returns correct country and international format for a valid French number."""
+    country, international = _format_telephony_phone_number("0123456789", "FR")
+    assert country == "FR"
+    assert international == "+33 1 23 45 67 89"
+
+
+def test_format_telephony_phone_number_valid_e164_number():
+    """Returns correct result for an E.164-formatted number (no default country needed)."""
+    country, international = _format_telephony_phone_number("+33123456789", "US")
+    assert country == "FR"
+    assert international == "+33 1 23 45 67 89"
+
+
+def test_format_telephony_phone_number_valid_us_number():
+    """Returns correct country and international format for a valid US number."""
+    country, international = _format_telephony_phone_number("2025550123", "US")
+    assert country == "US"
+    assert international == "+1 202-555-0123"
+
+
+def test_format_telephony_phone_number_valid_german_number():
+    """Returns correct country and international format for a valid German number."""
+    country, international = _format_telephony_phone_number("03012345678", "DE")
+    assert country == "DE"
+    assert international == "+49 30 12345678"
+
+
+def test_format_telephony_phone_number_lru_cache():
+    """Results are cached: the same inputs return the same object."""
+    result1 = _format_telephony_phone_number("0123456789", "FR")
+    result2 = _format_telephony_phone_number("0123456789", "FR")
+    assert result1 is result2
+    # pylint: disable=no-value-for-parameter
+    cache_info = _format_telephony_phone_number.cache_info()
+    assert cache_info.hits >= 1
@@ -12,6 +12,7 @@ import mimetypes
 import random
 import secrets
 import string
+from functools import lru_cache
 from typing import List, Optional
 from uuid import uuid4

@@ -22,6 +23,7 @@ import aiohttp
 import boto3
 import botocore
 import magic
+import phonenumbers
 from asgiref.sync import async_to_sync
 from livekit.api import (  # pylint: disable=E0611
    AccessToken,
@@ -457,36 +459,56 @@ def generate_upload_policy(file):
    return policy


-def generate_download_s3_file_url(
-    key, *, expires_in: int, override_domain: bool = True
-):
-    """
-    Generate a S3 signed download url for a given key.
-    """
+@lru_cache(maxsize=1)
+def _format_telephony_phone_number(raw_number, default_country):
+    """Parse a configured phone number and return (country, international_format).

-    # This settings should be used if the backend application and the frontend application
-    # can't connect to the object storage with the same domain. This is the case in the
-    # docker compose stack used in development. The frontend application will use localhost
-    # to connect to the object storage while the backend application will use the object storage
-    # service name declared in the docker compose stack.
-    # This is needed because the domain name is used to compute the signature. So it can't be
-    # changed dynamically by the frontend application.
-    if settings.AWS_S3_DOMAIN_REPLACE and override_domain:
-        s3_client = boto3.client(
-            "s3",
-            aws_access_key_id=settings.AWS_S3_ACCESS_KEY_ID,
-            aws_secret_access_key=settings.AWS_S3_SECRET_ACCESS_KEY,
-            endpoint_url=settings.AWS_S3_DOMAIN_REPLACE,
-            config=botocore.client.Config(
-                region_name=settings.AWS_S3_REGION_NAME,
-                signature_version=settings.AWS_S3_SIGNATURE_VERSION,
-            ),
+    Returns (None, None) if the inputs are missing or the number cannot be
+    parsed. Logs a warning on parse failure so operators see the misconfiguration.
+    """
+    if not raw_number or not default_country:
+        return None, None
+
+    try:
+        parsed = phonenumbers.parse(raw_number, default_country)
+    except phonenumbers.NumberParseException:
+        logger.warning(
+            "ROOM_TELEPHONY_PHONE_NUMBER %r is not a valid phone number for "
+            "default country %r; telephony block will be returned without "
+            "formatted number.",
+            raw_number,
+            default_country,
        )
-    else:
-        s3_client = default_storage.connection.meta.client
+        return None, None

-    return s3_client.generate_presigned_url(
-        ClientMethod="get_object",
-        Params={"Bucket": default_storage.bucket_name, "Key": key},
-        ExpiresIn=expires_in,
+    country = phonenumbers.region_code_for_number(parsed)
+    international = phonenumbers.format_number(
+        parsed, phonenumbers.PhoneNumberFormat.INTERNATIONAL
    )
+    return country, international
+
+
+def build_telephony_config():
+    """Build the telephony block of the frontend configuration."""
+    if not settings.ROOM_TELEPHONY_ENABLED:
+        return {"enabled": False}
+
+    country, international = _format_telephony_phone_number(
+        settings.ROOM_TELEPHONY_PHONE_NUMBER,
+        settings.ROOM_TELEPHONY_DEFAULT_COUNTRY,
+    )
+
+    if international is None:
+        logger.warning(
+            "Telephony is enabled but ROOM_TELEPHONY_PHONE_NUMBER %r with "
+            "default country %r could not be formatted; telephony will be disabled.",
+            settings.ROOM_TELEPHONY_PHONE_NUMBER,
+            settings.ROOM_TELEPHONY_DEFAULT_COUNTRY,
+        )
+        return {"enabled": False}
+
+    return {
+        "enabled": True,
+        "default_country": country,
+        "international_phone_number": international,
+    }
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-26 16:20+0000\n"
+"POT-Creation-Date: 2026-04-21 14:09+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -88,17 +88,17 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Ersteller bin ich"

-#: core/api/serializers.py:89
+#: core/api/serializers.py:88
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Sie müssen Administrator oder Eigentümer eines Raums sein, um Zugriffe "
 "hinzuzufügen."

-#: core/api/serializers.py:534
+#: core/api/serializers.py:509
 msgid "This file extension is not allowed."
 msgstr "Diese Dateiendung ist nicht erlaubt."

-#: core/api/viewsets.py:1228
+#: core/api/viewsets.py:1090
 msgid "You have reached the maximum number of files for this type."
 msgstr "Sie haben die maximale Anzahl an Dateien dieses Typs erreicht."

@@ -146,59 +146,51 @@ msgstr "Stopp fehlgeschlagen"
 msgid "Notification succeeded"
 msgstr "Benachrichtigung erfolgreich"

-#: core/models.py:65
-msgid "External process successful"
-msgstr ""
-
-#: core/models.py:67
-msgid "External process failed"
-msgstr ""
-
-#: core/models.py:96
+#: core/models.py:89
 msgid "SCREEN_RECORDING"
 msgstr "BILDSCHIRMAUFZEICHNUNG"

-#: core/models.py:97
+#: core/models.py:90
 msgid "TRANSCRIPT"
 msgstr "TRANSKRIPT"

-#: core/models.py:103
+#: core/models.py:96
 msgid "Public Access"
 msgstr "Öffentlicher Zugriff"

-#: core/models.py:104
+#: core/models.py:97
 msgid "Trusted Access"
 msgstr "Vertrauenswürdiger Zugriff"

-#: core/models.py:105
+#: core/models.py:98
 msgid "Restricted Access"
 msgstr "Eingeschränkter Zugriff"

-#: core/models.py:117
+#: core/models.py:110
 msgid "id"
 msgstr "ID"

-#: core/models.py:118
+#: core/models.py:111
 msgid "primary key for the record as UUID"
 msgstr "Primärschlüssel des Eintrags als UUID"

-#: core/models.py:124
+#: core/models.py:117
 msgid "created on"
 msgstr "erstellt am"

-#: core/models.py:125
+#: core/models.py:118
 msgid "date and time at which a record was created"
 msgstr "Datum und Uhrzeit der Erstellung eines Eintrags"

-#: core/models.py:130
+#: core/models.py:123
 msgid "updated on"
 msgstr "aktualisiert am"

-#: core/models.py:131
+#: core/models.py:124
 msgid "date and time at which a record was last updated"
 msgstr "Datum und Uhrzeit der letzten Aktualisierung eines Eintrags"

-#: core/models.py:151
+#: core/models.py:144
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -206,11 +198,11 @@ msgstr ""
 "Geben Sie einen gültigen Sub ein. Dieser Wert darf nur Buchstaben, Zahlen "
 "und die Zeichen @/./+/-/_ enthalten."

-#: core/models.py:157
+#: core/models.py:150
 msgid "sub"
 msgstr "Sub"

-#: core/models.py:159
+#: core/models.py:152
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -218,55 +210,55 @@ msgstr ""
 "Optional für ausstehende Benutzer; erforderlich nach Kontoaktivierung. "
 "Maximal 255 Zeichen. Nur Buchstaben, Zahlen und @/./+/-/_ Zeichen erlaubt."

-#: core/models.py:168
+#: core/models.py:161
 msgid "identity email address"
 msgstr "Identitäts-E-Mail-Adresse"

-#: core/models.py:173
+#: core/models.py:166
 msgid "admin email address"
 msgstr "Administrator-E-Mail-Adresse"

-#: core/models.py:175
+#: core/models.py:168
 msgid "full name"
 msgstr "Vollständiger Name"

-#: core/models.py:177
+#: core/models.py:170
 msgid "short name"
 msgstr "Kurzname"

-#: core/models.py:183
+#: core/models.py:176
 msgid "language"
 msgstr "Sprache"

-#: core/models.py:184
+#: core/models.py:177
 msgid "The language in which the user wants to see the interface."
 msgstr "Die Sprache, in der der Benutzer die Oberfläche sehen möchte."

-#: core/models.py:190
+#: core/models.py:183
 msgid "The timezone in which the user wants to see times."
 msgstr "Die Zeitzone, in der der Benutzer die Zeiten sehen möchte."

-#: core/models.py:193
+#: core/models.py:186
 msgid "device"
 msgstr "Gerät"

-#: core/models.py:195
+#: core/models.py:188
 msgid "Whether the user is a device or a real user."
 msgstr "Ob es sich um ein Gerät oder einen echten Benutzer handelt."

-#: core/models.py:198
+#: core/models.py:191
 msgid "staff status"
 msgstr "Mitarbeiterstatus"

-#: core/models.py:200
+#: core/models.py:193
 msgid "Whether the user can log into this admin site."
 msgstr "Ob der Benutzer sich bei dieser Admin-Seite anmelden kann."

-#: core/models.py:203
+#: core/models.py:196
 msgid "active"
 msgstr "aktiv"

-#: core/models.py:206
+#: core/models.py:199
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -274,66 +266,66 @@ msgstr ""
 "Ob dieser Benutzer als aktiv behandelt werden soll. Deaktivieren Sie dies "
 "anstelle des Löschens des Kontos."

-#: core/models.py:219
+#: core/models.py:212
 msgid "user"
 msgstr "Benutzer"

-#: core/models.py:220
+#: core/models.py:213
 msgid "users"
 msgstr "Benutzer"

-#: core/models.py:279
+#: core/models.py:272
 msgid "Resource"
 msgstr "Ressource"

-#: core/models.py:280
+#: core/models.py:273
 msgid "Resources"
 msgstr "Ressourcen"

-#: core/models.py:338
+#: core/models.py:331
 msgid "Resource access"
 msgstr "Ressourcenzugriff"

-#: core/models.py:339
+#: core/models.py:332
 msgid "Resource accesses"
 msgstr "Ressourcenzugriffe"

-#: core/models.py:345
+#: core/models.py:338
 msgid "Resource access with this User and Resource already exists."
 msgstr ""
 "Ein Ressourcenzugriff mit diesem Benutzer und dieser Ressource existiert "
 "bereits."

-#: core/models.py:402
+#: core/models.py:394
 msgid "Visio room configuration"
 msgstr "Visio-Raumkonfiguration"

-#: core/models.py:403
+#: core/models.py:395
 msgid "Values for Visio parameters to configure the room."
 msgstr "Werte für Visio-Parameter zur Konfiguration des Raums."

-#: core/models.py:410
+#: core/models.py:402
 msgid "Room PIN code"
 msgstr "PIN-Code für den Raum"

-#: core/models.py:411
+#: core/models.py:403
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Eindeutiger n-stelliger Code, der diesen Raum im Telephonmodus identifiziert."

-#: core/models.py:417 core/models.py:571
+#: core/models.py:409 core/models.py:563
 msgid "Room"
 msgstr "Raum"

-#: core/models.py:418
+#: core/models.py:410
 msgid "Rooms"
 msgstr "Räume"

-#: core/models.py:582
+#: core/models.py:574
 msgid "Worker ID"
 msgstr "Worker-ID"

-#: core/models.py:584
+#: core/models.py:576
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -342,149 +334,141 @@ msgstr ""
 "erhalten, auch wenn der Worker stoppt, was ein einfaches Nachverfolgen "
 "ermöglicht."

-#: core/models.py:592
+#: core/models.py:584
 msgid "Recording mode"
 msgstr "Aufzeichnungsmodus"

-#: core/models.py:593
+#: core/models.py:585
 msgid "Defines the mode of recording being called."
 msgstr "Definiert den aufgerufenen Aufzeichnungsmodus."

-#: core/models.py:598 core/models.py:599
+#: core/models.py:590 core/models.py:591
 msgid "Recording options"
 msgstr "Aufnahmeoptionen"

-#: core/models.py:606
-msgid "External Process ID"
-msgstr ""
-
-#: core/models.py:607
-msgid "ID of the external process associated with the recording."
-msgstr ""
-
-#: core/models.py:613
+#: core/models.py:597
 msgid "Recording"
 msgstr "Aufzeichnung"

-#: core/models.py:614
+#: core/models.py:598
 msgid "Recordings"
 msgstr "Aufzeichnungen"

-#: core/models.py:724
+#: core/models.py:706
 msgid "Recording/user relation"
 msgstr "Beziehung Aufzeichnung/Benutzer"

-#: core/models.py:725
+#: core/models.py:707
 msgid "Recording/user relations"
 msgstr "Beziehungen Aufzeichnung/Benutzer"

-#: core/models.py:731
+#: core/models.py:713
 msgid "This user is already in this recording."
 msgstr "Dieser Benutzer ist bereits Teil dieser Aufzeichnung."

-#: core/models.py:737
+#: core/models.py:719
 msgid "This team is already in this recording."
 msgstr "Dieses Team ist bereits Teil dieser Aufzeichnung."

-#: core/models.py:743
+#: core/models.py:725
 msgid "Either user or team must be set, not both."
 msgstr "Entweder Benutzer oder Team muss festgelegt werden, nicht beides."

-#: core/models.py:760
+#: core/models.py:742
 msgid "Create rooms"
 msgstr "Räume erstellen"

-#: core/models.py:761
+#: core/models.py:743
 msgid "List rooms"
 msgstr "Räume auflisten"

-#: core/models.py:762
+#: core/models.py:744
 msgid "Retrieve room details"
 msgstr "Raumdetails abrufen"

-#: core/models.py:763
+#: core/models.py:745
 msgid "Update rooms"
 msgstr "Räume aktualisieren"

-#: core/models.py:764
+#: core/models.py:746
 msgid "Delete rooms"
 msgstr "Räume löschen"

-#: core/models.py:777
+#: core/models.py:759
 msgid "Application name"
 msgstr "Anwendungsname"

-#: core/models.py:778
+#: core/models.py:760
 msgid "Descriptive name for this application."
 msgstr "Beschreibender Name für diese Anwendung."

-#: core/models.py:788
+#: core/models.py:770
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Beim Speichern gehasht. Jetzt kopieren, wenn dies ein neues Geheimnis ist."

-#: core/models.py:799
+#: core/models.py:781
 msgid "Application"
 msgstr "Anwendung"

-#: core/models.py:800
+#: core/models.py:782
 msgid "Applications"
 msgstr "Anwendungen"

-#: core/models.py:823
+#: core/models.py:805
 msgid "Enter a valid domain"
 msgstr "Geben Sie eine gültige Domain ein"

-#: core/models.py:826
+#: core/models.py:808
 msgid "Domain"
 msgstr "Domain"

-#: core/models.py:827
+#: core/models.py:809
 msgid "Email domain this application can act on behalf of."
 msgstr "E-Mail-Domain, im Namen der diese Anwendung handeln kann."

-#: core/models.py:839
+#: core/models.py:821
 msgid "Application domain"
 msgstr "Anwendungsdomain"

-#: core/models.py:840
+#: core/models.py:822
 msgid "Application domains"
 msgstr "Anwendungsdomains"

-#: core/models.py:858
+#: core/models.py:840
 msgid "Pending"
 msgstr "Ausstehend"

-#: core/models.py:866
+#: core/models.py:848
 msgid "Ready"
 msgstr "Bereit"

-#: core/models.py:872
+#: core/models.py:854
 msgid "Background image"
 msgstr "Hintergrundbild"

-#: core/models.py:884
+#: core/models.py:866
 msgid "title"
 msgstr "Titel"

-#: core/models.py:908
+#: core/models.py:890
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr ""
 "Informationen zur Malware-Erkennung, wenn der Analyse-Status unsicher ist."

-#: core/models.py:913
+#: core/models.py:895
 msgid "File"
 msgstr "Datei"

-#: core/models.py:914
+#: core/models.py:896
 msgid "Files"
 msgstr "Dateien"

-#: core/models.py:1018
+#: core/models.py:1000
 msgid "This file is already hard deleted."
 msgstr "Diese Datei wurde bereits endgültig gelöscht."

-#: core/models.py:1028
+#: core/models.py:1010
 #, fuzzy
 #| msgid "To hard delete a file, it must first be soft deleted."
 msgid "To hard delete a file, it must first be soft deleted."
@@ -492,7 +476,7 @@ msgstr ""
 "Um eine Datei endgültig zu löschen, muss sie zuvor weich gelöscht worden "
 "sein."

-#: core/recording/event/notification.py:124
+#: core/recording/event/notification.py:116
 msgid "Your recording is ready"
 msgstr "Ihre Aufzeichnung ist bereit"

@@ -592,9 +576,7 @@ msgstr "So speichern Sie diese Aufzeichnung dauerhaft:"

 #: core/templates/mail/html/screen_recording.html:208
 #: core/templates/mail/text/screen_recording.txt:13
-#, fuzzy
-#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
-msgid "Click the \"Open\" button below "
+msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Klicken Sie auf den Link „<a href=\"%(link)s\">Öffnen</a>\" unten "

 #: core/templates/mail/html/screen_recording.html:209
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-26 16:20+0000\n"
+"POT-Creation-Date: 2026-04-21 14:09+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -88,15 +88,15 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Creator is me"

-#: core/api/serializers.py:89
+#: core/api/serializers.py:88
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr "You must be administrator or owner of a room to add accesses to it."

-#: core/api/serializers.py:534
+#: core/api/serializers.py:509
 msgid "This file extension is not allowed."
 msgstr "This file extension is not allowed."

-#: core/api/viewsets.py:1228
+#: core/api/viewsets.py:1090
 msgid "You have reached the maximum number of files for this type."
 msgstr "You have reached the maximum number of files for this type."

@@ -144,59 +144,51 @@ msgstr "Failed to Stop"
 msgid "Notification succeeded"
 msgstr "Notification succeeded"

-#: core/models.py:65
-msgid "External process successful"
-msgstr ""
-
-#: core/models.py:67
-msgid "External process failed"
-msgstr ""
-
-#: core/models.py:96
+#: core/models.py:89
 msgid "SCREEN_RECORDING"
 msgstr "SCREEN_RECORDING"

-#: core/models.py:97
+#: core/models.py:90
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPT"

-#: core/models.py:103
+#: core/models.py:96
 msgid "Public Access"
 msgstr "Public Access"

-#: core/models.py:104
+#: core/models.py:97
 msgid "Trusted Access"
 msgstr "Trusted Access"

-#: core/models.py:105
+#: core/models.py:98
 msgid "Restricted Access"
 msgstr "Restricted Access"

-#: core/models.py:117
+#: core/models.py:110
 msgid "id"
 msgstr "id"

-#: core/models.py:118
+#: core/models.py:111
 msgid "primary key for the record as UUID"
 msgstr "primary key for the record as UUID"

-#: core/models.py:124
+#: core/models.py:117
 msgid "created on"
 msgstr "created on"

-#: core/models.py:125
+#: core/models.py:118
 msgid "date and time at which a record was created"
 msgstr "date and time at which a record was created"

-#: core/models.py:130
+#: core/models.py:123
 msgid "updated on"
 msgstr "updated on"

-#: core/models.py:131
+#: core/models.py:124
 msgid "date and time at which a record was last updated"
 msgstr "date and time at which a record was last updated"

-#: core/models.py:151
+#: core/models.py:144
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -204,11 +196,11 @@ msgstr ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."

-#: core/models.py:157
+#: core/models.py:150
 msgid "sub"
 msgstr "sub"

-#: core/models.py:159
+#: core/models.py:152
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -216,55 +208,55 @@ msgstr ""
 "Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
 "characters only."

-#: core/models.py:168
+#: core/models.py:161
 msgid "identity email address"
 msgstr "identity email address"

-#: core/models.py:173
+#: core/models.py:166
 msgid "admin email address"
 msgstr "admin email address"

-#: core/models.py:175
+#: core/models.py:168
 msgid "full name"
 msgstr "full name"

-#: core/models.py:177
+#: core/models.py:170
 msgid "short name"
 msgstr "short name"

-#: core/models.py:183
+#: core/models.py:176
 msgid "language"
 msgstr "language"

-#: core/models.py:184
+#: core/models.py:177
 msgid "The language in which the user wants to see the interface."
 msgstr "The language in which the user wants to see the interface."

-#: core/models.py:190
+#: core/models.py:183
 msgid "The timezone in which the user wants to see times."
 msgstr "The timezone in which the user wants to see times."

-#: core/models.py:193
+#: core/models.py:186
 msgid "device"
 msgstr "device"

-#: core/models.py:195
+#: core/models.py:188
 msgid "Whether the user is a device or a real user."
 msgstr "Whether the user is a device or a real user."

-#: core/models.py:198
+#: core/models.py:191
 msgid "staff status"
 msgstr "staff status"

-#: core/models.py:200
+#: core/models.py:193
 msgid "Whether the user can log into this admin site."
 msgstr "Whether the user can log into this admin site."

-#: core/models.py:203
+#: core/models.py:196
 msgid "active"
 msgstr "active"

-#: core/models.py:206
+#: core/models.py:199
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -272,63 +264,63 @@ msgstr ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."

-#: core/models.py:219
+#: core/models.py:212
 msgid "user"
 msgstr "user"

-#: core/models.py:220
+#: core/models.py:213
 msgid "users"
 msgstr "users"

-#: core/models.py:279
+#: core/models.py:272
 msgid "Resource"
 msgstr "Resource"

-#: core/models.py:280
+#: core/models.py:273
 msgid "Resources"
 msgstr "Resources"

-#: core/models.py:338
+#: core/models.py:331
 msgid "Resource access"
 msgstr "Resource access"

-#: core/models.py:339
+#: core/models.py:332
 msgid "Resource accesses"
 msgstr "Resource accesses"

-#: core/models.py:345
+#: core/models.py:338
 msgid "Resource access with this User and Resource already exists."
 msgstr "Resource access with this User and Resource already exists."

-#: core/models.py:402
+#: core/models.py:394
 msgid "Visio room configuration"
 msgstr "Visio room configuration"

-#: core/models.py:403
+#: core/models.py:395
 msgid "Values for Visio parameters to configure the room."
 msgstr "Values for Visio parameters to configure the room."

-#: core/models.py:410
+#: core/models.py:402
 msgid "Room PIN code"
 msgstr "Room PIN code"

-#: core/models.py:411
+#: core/models.py:403
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr "Unique n-digit code that identifies this room in telephony mode."

-#: core/models.py:417 core/models.py:571
+#: core/models.py:409 core/models.py:563
 msgid "Room"
 msgstr "Room"

-#: core/models.py:418
+#: core/models.py:410
 msgid "Rooms"
 msgstr "Rooms"

-#: core/models.py:582
+#: core/models.py:574
 msgid "Worker ID"
 msgstr "Worker ID"

-#: core/models.py:584
+#: core/models.py:576
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -336,159 +328,151 @@ msgstr ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."

-#: core/models.py:592
+#: core/models.py:584
 msgid "Recording mode"
 msgstr "Recording mode"

-#: core/models.py:593
+#: core/models.py:585
 msgid "Defines the mode of recording being called."
 msgstr "Defines the mode of recording being called."

-#: core/models.py:598 core/models.py:599
+#: core/models.py:590 core/models.py:591
 msgid "Recording options"
 msgstr "Recording options"

-#: core/models.py:606
-msgid "External Process ID"
-msgstr ""
-
-#: core/models.py:607
-msgid "ID of the external process associated with the recording."
-msgstr ""
-
-#: core/models.py:613
+#: core/models.py:597
 msgid "Recording"
 msgstr "Recording"

-#: core/models.py:614
+#: core/models.py:598
 msgid "Recordings"
 msgstr "Recordings"

-#: core/models.py:724
+#: core/models.py:706
 msgid "Recording/user relation"
 msgstr "Recording/user relation"

-#: core/models.py:725
+#: core/models.py:707
 msgid "Recording/user relations"
 msgstr "Recording/user relations"

-#: core/models.py:731
+#: core/models.py:713
 msgid "This user is already in this recording."
 msgstr "This user is already in this recording."

-#: core/models.py:737
+#: core/models.py:719
 msgid "This team is already in this recording."
 msgstr "This team is already in this recording."

-#: core/models.py:743
+#: core/models.py:725
 msgid "Either user or team must be set, not both."
 msgstr "Either user or team must be set, not both."

-#: core/models.py:760
+#: core/models.py:742
 #, fuzzy
 #| msgid "created on"
 msgid "Create rooms"
 msgstr "Create rooms"

-#: core/models.py:761
+#: core/models.py:743
 msgid "List rooms"
 msgstr "List rooms"

-#: core/models.py:762
+#: core/models.py:744
 msgid "Retrieve room details"
 msgstr "Retrieve room details"

-#: core/models.py:763
+#: core/models.py:745
 #, fuzzy
 #| msgid "updated on"
 msgid "Update rooms"
 msgstr "Update rooms"

-#: core/models.py:764
+#: core/models.py:746
 msgid "Delete rooms"
 msgstr "Delete rooms"

-#: core/models.py:777
+#: core/models.py:759
 msgid "Application name"
 msgstr "Application name"

-#: core/models.py:778
+#: core/models.py:760
 msgid "Descriptive name for this application."
 msgstr "Descriptive name for this application."

-#: core/models.py:788
+#: core/models.py:770
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr "Hashed on Save. Copy it now if this is a new secret."

-#: core/models.py:799
+#: core/models.py:781
 msgid "Application"
 msgstr "Application"

-#: core/models.py:800
+#: core/models.py:782
 msgid "Applications"
 msgstr "Applications"

-#: core/models.py:823
+#: core/models.py:805
 msgid "Enter a valid domain"
 msgstr "Enter a valid domain"

-#: core/models.py:826
+#: core/models.py:808
 msgid "Domain"
 msgstr "Domain"

-#: core/models.py:827
+#: core/models.py:809
 msgid "Email domain this application can act on behalf of."
 msgstr "Email domain this application can act on behalf of."

-#: core/models.py:839
+#: core/models.py:821
 msgid "Application domain"
 msgstr "Application domain"

-#: core/models.py:840
+#: core/models.py:822
 msgid "Application domains"
 msgstr "Application domains"

-#: core/models.py:858
+#: core/models.py:840
 #, fuzzy
 #| msgid "Recording"
 msgid "Pending"
 msgstr "Pending"

-#: core/models.py:866
+#: core/models.py:848
 msgid "Ready"
 msgstr "Ready"

-#: core/models.py:872
+#: core/models.py:854
 msgid "Background image"
 msgstr "Background image"

-#: core/models.py:884
+#: core/models.py:866
 msgid "title"
 msgstr "title"

-#: core/models.py:908
+#: core/models.py:890
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr "Malware detection info when the analysis status is unsafe."

-#: core/models.py:913
+#: core/models.py:895
 msgid "File"
 msgstr "File"

-#: core/models.py:914
+#: core/models.py:896
 msgid "Files"
 msgstr "Files"

-#: core/models.py:1018
+#: core/models.py:1000
 #, fuzzy
 #| msgid "This user is already in this recording."
 msgid "This file is already hard deleted."
 msgstr "This file is already hard deleted."

-#: core/models.py:1028
+#: core/models.py:1010
 msgid "To hard delete a file, it must first be soft deleted."
 msgstr "To hard delete a file, it must first be soft deleted."

-#: core/recording/event/notification.py:124
+#: core/recording/event/notification.py:116
 msgid "Your recording is ready"
 msgstr "Your recording is ready"

@@ -588,9 +572,7 @@ msgstr "To keep this recording permanently:"

 #: core/templates/mail/html/screen_recording.html:208
 #: core/templates/mail/text/screen_recording.txt:13
-#, fuzzy
-#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
-msgid "Click the \"Open\" button below "
+msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Click the \"<a href=\"%(link)s\">Open</a>\" link below "

 #: core/templates/mail/html/screen_recording.html:209
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-26 16:20+0000\n"
+"POT-Creation-Date: 2026-04-21 14:09+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: antoine.lebaud@mail.numerique.gouv.fr\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -89,17 +89,17 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Je suis le créateur"

-#: core/api/serializers.py:89
+#: core/api/serializers.py:88
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Vous devez être administrateur ou propriétaire d'une salle pour y ajouter "
 "des accès."

-#: core/api/serializers.py:534
+#: core/api/serializers.py:509
 msgid "This file extension is not allowed."
 msgstr "Cette extension n'est pas autorisée"

-#: core/api/viewsets.py:1228
+#: core/api/viewsets.py:1090
 msgid "You have reached the maximum number of files for this type."
 msgstr "Vous avez atteint le nombre maximum de fichiers de ce type"

@@ -147,61 +147,53 @@ msgstr "Échec à l'arrêt"
 msgid "Notification succeeded"
 msgstr "Notification réussie"

-#: core/models.py:65
-msgid "External process successful"
-msgstr ""
-
-#: core/models.py:67
-msgid "External process failed"
-msgstr ""
-
-#: core/models.py:96
+#: core/models.py:89
 msgid "SCREEN_RECORDING"
 msgstr "ENREGISTREMENT_ÉCRAN"

-#: core/models.py:97
+#: core/models.py:90
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPTION"

-#: core/models.py:103
+#: core/models.py:96
 msgid "Public Access"
 msgstr "Accès public"

-#: core/models.py:104
+#: core/models.py:97
 msgid "Trusted Access"
 msgstr "Accès de confiance"

-#: core/models.py:105
+#: core/models.py:98
 msgid "Restricted Access"
 msgstr "Accès restreint"

-#: core/models.py:117
+#: core/models.py:110
 msgid "id"
 msgstr "id"

-#: core/models.py:118
+#: core/models.py:111
 msgid "primary key for the record as UUID"
 msgstr "clé primaire pour l'enregistrement sous forme d'UUID"

-#: core/models.py:124
+#: core/models.py:117
 msgid "created on"
 msgstr "créé le"

-#: core/models.py:125
+#: core/models.py:118
 msgid "date and time at which a record was created"
 msgstr "date et heure auxquelles un enregistrement a été créé"

-#: core/models.py:130
+#: core/models.py:123
 msgid "updated on"
 msgstr "mis à jour le"

-#: core/models.py:131
+#: core/models.py:124
 msgid "date and time at which a record was last updated"
 msgstr ""
 "date et heure auxquelles un enregistrement a été mis à jour pour la dernière "
 "fois"

-#: core/models.py:151
+#: core/models.py:144
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -209,11 +201,11 @@ msgstr ""
 "Entrez un sub valide. Cette valeur ne peut contenir que des lettres, des "
 "chiffres et les caractères @/./+/-/_."

-#: core/models.py:157
+#: core/models.py:150
 msgid "sub"
 msgstr "sub"

-#: core/models.py:159
+#: core/models.py:152
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -221,55 +213,55 @@ msgstr ""
 "Optionnel pour les utilisateurs en attente ; requis lors de l'activation du "
 "compte. 255 caractères maximum. Lettres, chiffres et @/./+/-/_ uniquement."

-#: core/models.py:168
+#: core/models.py:161
 msgid "identity email address"
 msgstr "adresse e-mail d'identité"

-#: core/models.py:173
+#: core/models.py:166
 msgid "admin email address"
 msgstr "adresse e-mail d'administrateur"

-#: core/models.py:175
+#: core/models.py:168
 msgid "full name"
 msgstr "nom complet"

-#: core/models.py:177
+#: core/models.py:170
 msgid "short name"
 msgstr "nom court"

-#: core/models.py:183
+#: core/models.py:176
 msgid "language"
 msgstr "langue"

-#: core/models.py:184
+#: core/models.py:177
 msgid "The language in which the user wants to see the interface."
 msgstr "La langue dans laquelle l'utilisateur souhaite voir l'interface."

-#: core/models.py:190
+#: core/models.py:183
 msgid "The timezone in which the user wants to see times."
 msgstr "Le fuseau horaire dans lequel l'utilisateur souhaite voir les heures."

-#: core/models.py:193
+#: core/models.py:186
 msgid "device"
 msgstr "appareil"

-#: core/models.py:195
+#: core/models.py:188
 msgid "Whether the user is a device or a real user."
 msgstr "Si l'utilisateur est un appareil ou un utilisateur réel."

-#: core/models.py:198
+#: core/models.py:191
 msgid "staff status"
 msgstr "statut du personnel"

-#: core/models.py:200
+#: core/models.py:193
 msgid "Whether the user can log into this admin site."
 msgstr "Si l'utilisateur peut se connecter à ce site d'administration."

-#: core/models.py:203
+#: core/models.py:196
 msgid "active"
 msgstr "actif"

-#: core/models.py:206
+#: core/models.py:199
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -277,65 +269,65 @@ msgstr ""
 "Si cet utilisateur doit être traité comme actif. Désélectionnez cette option "
 "au lieu de supprimer des comptes."

-#: core/models.py:219
+#: core/models.py:212
 msgid "user"
 msgstr "utilisateur"

-#: core/models.py:220
+#: core/models.py:213
 msgid "users"
 msgstr "utilisateurs"

-#: core/models.py:279
+#: core/models.py:272
 msgid "Resource"
 msgstr "Ressource"

-#: core/models.py:280
+#: core/models.py:273
 msgid "Resources"
 msgstr "Ressources"

-#: core/models.py:338
+#: core/models.py:331
 msgid "Resource access"
 msgstr "Accès aux ressources"

-#: core/models.py:339
+#: core/models.py:332
 msgid "Resource accesses"
 msgstr "Accès aux ressources"

-#: core/models.py:345
+#: core/models.py:338
 msgid "Resource access with this User and Resource already exists."
 msgstr ""
 "L'accès à la ressource avec cet utilisateur et cette ressource existe déjà."

-#: core/models.py:402
+#: core/models.py:394
 msgid "Visio room configuration"
 msgstr "Configuration de la salle de visioconférence"

-#: core/models.py:403
+#: core/models.py:395
 msgid "Values for Visio parameters to configure the room."
 msgstr "Valeurs des paramètres de visioconférence pour configurer la salle."

-#: core/models.py:410
+#: core/models.py:402
 msgid "Room PIN code"
 msgstr "Code PIN de la salle"

-#: core/models.py:411
+#: core/models.py:403
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Code unique à n chiffres qui identifie cette salle en mode téléphonique."

-#: core/models.py:417 core/models.py:571
+#: core/models.py:409 core/models.py:563
 msgid "Room"
 msgstr "Salle"

-#: core/models.py:418
+#: core/models.py:410
 msgid "Rooms"
 msgstr "Salles"

-#: core/models.py:582
+#: core/models.py:574
 msgid "Worker ID"
 msgstr "ID du Worker"

-#: core/models.py:584
+#: core/models.py:576
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -343,158 +335,150 @@ msgstr ""
 "Entrez un identifiant pour l'enregistrement du Worker. Cet identifiant est "
 "conservé même lorsque le Worker s'arrête, permettant un suivi facile."

-#: core/models.py:592
+#: core/models.py:584
 msgid "Recording mode"
 msgstr "Mode d'enregistrement"

-#: core/models.py:593
+#: core/models.py:585
 msgid "Defines the mode of recording being called."
 msgstr "Définit le mode d'enregistrement appelé."

-#: core/models.py:598 core/models.py:599
+#: core/models.py:590 core/models.py:591
 msgid "Recording options"
 msgstr "Options d'enregistrement"

-#: core/models.py:606
-msgid "External Process ID"
-msgstr ""
-
-#: core/models.py:607
-msgid "ID of the external process associated with the recording."
-msgstr ""
-
-#: core/models.py:613
+#: core/models.py:597
 msgid "Recording"
 msgstr "Enregistrement"

-#: core/models.py:614
+#: core/models.py:598
 msgid "Recordings"
 msgstr "Enregistrements"

-#: core/models.py:724
+#: core/models.py:706
 msgid "Recording/user relation"
 msgstr "Relation enregistrement/utilisateur"

-#: core/models.py:725
+#: core/models.py:707
 msgid "Recording/user relations"
 msgstr "Relations enregistrement/utilisateur"

-#: core/models.py:731
+#: core/models.py:713
 msgid "This user is already in this recording."
 msgstr "Cet utilisateur est déjà dans cet enregistrement."

-#: core/models.py:737
+#: core/models.py:719
 msgid "This team is already in this recording."
 msgstr "Cette équipe est déjà dans cet enregistrement."

-#: core/models.py:743
+#: core/models.py:725
 msgid "Either user or team must be set, not both."
 msgstr "Soit l'utilisateur, soit l'équipe doit être défini, pas les deux."

-#: core/models.py:760
+#: core/models.py:742
 msgid "Create rooms"
 msgstr "Créer des salles"

-#: core/models.py:761
+#: core/models.py:743
 msgid "List rooms"
 msgstr "Lister les salles"

-#: core/models.py:762
+#: core/models.py:744
 msgid "Retrieve room details"
 msgstr "Afficher les détails d’une salle"

-#: core/models.py:763
+#: core/models.py:745
 msgid "Update rooms"
 msgstr "Mettre à jour les salles"

-#: core/models.py:764
+#: core/models.py:746
 msgid "Delete rooms"
 msgstr "Supprimer les salles"

-#: core/models.py:777
+#: core/models.py:759
 msgid "Application name"
 msgstr "Nom de l’application"

-#: core/models.py:778
+#: core/models.py:760
 msgid "Descriptive name for this application."
 msgstr "Nom descriptif de cette application."

-#: core/models.py:788
+#: core/models.py:770
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Haché lors de l’enregistrement. Copiez-le maintenant s’il s’agit d’un "
 "nouveau secret."

-#: core/models.py:799
+#: core/models.py:781
 msgid "Application"
 msgstr "Application"

-#: core/models.py:800
+#: core/models.py:782
 msgid "Applications"
 msgstr "Applications"

-#: core/models.py:823
+#: core/models.py:805
 msgid "Enter a valid domain"
 msgstr "Saisissez un domaine valide"

-#: core/models.py:826
+#: core/models.py:808
 msgid "Domain"
 msgstr "Domaine"

-#: core/models.py:827
+#: core/models.py:809
 msgid "Email domain this application can act on behalf of."
 msgstr "Domaine de messagerie au nom duquel cette application peut agir."

-#: core/models.py:839
+#: core/models.py:821
 msgid "Application domain"
 msgstr "Domaine d’application"

-#: core/models.py:840
+#: core/models.py:822
 msgid "Application domains"
 msgstr "Domaines d’application"

-#: core/models.py:858
+#: core/models.py:840
 msgid "Pending"
 msgstr "En attente"

-#: core/models.py:866
+#: core/models.py:848
 msgid "Ready"
 msgstr "Prêt"

-#: core/models.py:872
+#: core/models.py:854
 msgid "Background image"
 msgstr "Image de fond"

-#: core/models.py:884
+#: core/models.py:866
 msgid "title"
 msgstr "Titre"

-#: core/models.py:908
+#: core/models.py:890
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr ""
 "Information concernant la détection de Malware cand le statut n'est pas sain"

-#: core/models.py:913
+#: core/models.py:895
 msgid "File"
 msgstr "Fichier"

-#: core/models.py:914
+#: core/models.py:896
 msgid "Files"
 msgstr "Fichiers"

-#: core/models.py:1018
+#: core/models.py:1000
 #, fuzzy
 #| msgid "This user is already in this recording."
 msgid "This file is already hard deleted."
 msgstr "Ce fichier a été supprimé."

-#: core/models.py:1028
+#: core/models.py:1010
 msgid "To hard delete a file, it must first be soft deleted."
 msgstr ""
 "Pour supprimer définitivement un fichier il doit d'abord avoir été marqué "
 "comme supprimé (soft delete)"

-#: core/recording/event/notification.py:124
+#: core/recording/event/notification.py:116
 msgid "Your recording is ready"
 msgstr "Votre enregistrement est prêt"

@@ -594,9 +578,7 @@ msgstr "Pour conserver cet enregistrement de façon permanente :"

 #: core/templates/mail/html/screen_recording.html:208
 #: core/templates/mail/text/screen_recording.txt:13
-#, fuzzy
-#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
-msgid "Click the \"Open\" button below "
+msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Cliquez sur le lien \"<a href=\"%(link)s\">Ouvrir</a>\" ci-dessous "

 #: core/templates/mail/html/screen_recording.html:209
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-05-26 16:20+0000\n"
+"POT-Creation-Date: 2026-04-21 14:09+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -88,16 +88,16 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Maker ben ik"

-#: core/api/serializers.py:89
+#: core/api/serializers.py:88
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Je moet beheerder of eigenaar van een ruimte zijn om toegang toe te voegen."

-#: core/api/serializers.py:534
+#: core/api/serializers.py:509
 msgid "This file extension is not allowed."
 msgstr "Deze bestandsextensie is niet toegestaan."

-#: core/api/viewsets.py:1228
+#: core/api/viewsets.py:1090
 msgid "You have reached the maximum number of files for this type."
 msgstr "Het maximale aantal bestanden voor dit type is bereikt."

@@ -145,59 +145,51 @@ msgstr "Stoppen mislukt"
 msgid "Notification succeeded"
 msgstr "Notificatie geslaagd"

-#: core/models.py:65
-msgid "External process successful"
-msgstr ""
-
-#: core/models.py:67
-msgid "External process failed"
-msgstr ""
-
-#: core/models.py:96
+#: core/models.py:89
 msgid "SCREEN_RECORDING"
 msgstr "SCHERM_OPNAME"

-#: core/models.py:97
+#: core/models.py:90
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPT"

-#: core/models.py:103
+#: core/models.py:96
 msgid "Public Access"
 msgstr "Openbare toegang"

-#: core/models.py:104
+#: core/models.py:97
 msgid "Trusted Access"
 msgstr "Vertrouwde toegang"

-#: core/models.py:105
+#: core/models.py:98
 msgid "Restricted Access"
 msgstr "Beperkte toegang"

-#: core/models.py:117
+#: core/models.py:110
 msgid "id"
 msgstr "id"

-#: core/models.py:118
+#: core/models.py:111
 msgid "primary key for the record as UUID"
 msgstr "primaire sleutel voor het record als UUID"

-#: core/models.py:124
+#: core/models.py:117
 msgid "created on"
 msgstr "aangemaakt op"

-#: core/models.py:125
+#: core/models.py:118
 msgid "date and time at which a record was created"
 msgstr "datum en tijd waarop een record werd aangemaakt"

-#: core/models.py:130
+#: core/models.py:123
 msgid "updated on"
 msgstr "bijgewerkt op"

-#: core/models.py:131
+#: core/models.py:124
 msgid "date and time at which a record was last updated"
 msgstr "datum en tijd waarop een record voor het laatst werd bijgewerkt"

-#: core/models.py:151
+#: core/models.py:144
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -205,11 +197,11 @@ msgstr ""
 "Voer een geldige sub in. Deze waarde mag alleen letters, cijfers en @/./+/-/"
 "_ tekens bevatten."

-#: core/models.py:157
+#: core/models.py:150
 msgid "sub"
 msgstr "sub"

-#: core/models.py:159
+#: core/models.py:152
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -217,55 +209,55 @@ msgstr ""
 "Optioneel voor gebruikers in afwachting; vereist bij accountactivering. "
 "Maximum 255 tekens. Alleen letters, cijfers en @/./+/-/_ toegestaan."

-#: core/models.py:168
+#: core/models.py:161
 msgid "identity email address"
 msgstr "identiteit e-mailadres"

-#: core/models.py:173
+#: core/models.py:166
 msgid "admin email address"
 msgstr "beheerder e-mailadres"

-#: core/models.py:175
+#: core/models.py:168
 msgid "full name"
 msgstr "volledige naam"

-#: core/models.py:177
+#: core/models.py:170
 msgid "short name"
 msgstr "korte naam"

-#: core/models.py:183
+#: core/models.py:176
 msgid "language"
 msgstr "taal"

-#: core/models.py:184
+#: core/models.py:177
 msgid "The language in which the user wants to see the interface."
 msgstr "De taal waarin de gebruiker de interface wil zien."

-#: core/models.py:190
+#: core/models.py:183
 msgid "The timezone in which the user wants to see times."
 msgstr "De tijdzone waarin de gebruiker tijden wil zien."

-#: core/models.py:193
+#: core/models.py:186
 msgid "device"
 msgstr "apparaat"

-#: core/models.py:195
+#: core/models.py:188
 msgid "Whether the user is a device or a real user."
 msgstr "Of de gebruiker een apparaat is of een echte gebruiker."

-#: core/models.py:198
+#: core/models.py:191
 msgid "staff status"
 msgstr "personeelsstatus"

-#: core/models.py:200
+#: core/models.py:193
 msgid "Whether the user can log into this admin site."
 msgstr "Of de gebruiker kan inloggen op deze beheersite."

-#: core/models.py:203
+#: core/models.py:196
 msgid "active"
 msgstr "actief"

-#: core/models.py:206
+#: core/models.py:199
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -273,64 +265,64 @@ msgstr ""
 "Of deze gebruiker als actief moet worden behandeld. Deselecteer dit in "
 "plaats van accounts te verwijderen."

-#: core/models.py:219
+#: core/models.py:212
 msgid "user"
 msgstr "gebruiker"

-#: core/models.py:220
+#: core/models.py:213
 msgid "users"
 msgstr "gebruikers"

-#: core/models.py:279
+#: core/models.py:272
 msgid "Resource"
 msgstr "Bron"

-#: core/models.py:280
+#: core/models.py:273
 msgid "Resources"
 msgstr "Bronnen"

-#: core/models.py:338
+#: core/models.py:331
 msgid "Resource access"
 msgstr "Brontoegang"

-#: core/models.py:339
+#: core/models.py:332
 msgid "Resource accesses"
 msgstr "Brontoegangsrechten"

-#: core/models.py:345
+#: core/models.py:338
 msgid "Resource access with this User and Resource already exists."
 msgstr "Brontoegang met deze gebruiker en bron bestaat al."

-#: core/models.py:402
+#: core/models.py:394
 msgid "Visio room configuration"
 msgstr "Visio-ruimteconfiguratie"

-#: core/models.py:403
+#: core/models.py:395
 msgid "Values for Visio parameters to configure the room."
 msgstr "Waarden voor Visio-parameters om de ruimte te configureren."

-#: core/models.py:410
+#: core/models.py:402
 msgid "Room PIN code"
 msgstr "Pincode van de kamer"

-#: core/models.py:411
+#: core/models.py:403
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Unieke n-cijferige code die deze kamer identificeert in telefonie-modus."

-#: core/models.py:417 core/models.py:571
+#: core/models.py:409 core/models.py:563
 msgid "Room"
 msgstr "Ruimte"

-#: core/models.py:418
+#: core/models.py:410
 msgid "Rooms"
 msgstr "Ruimtes"

-#: core/models.py:582
+#: core/models.py:574
 msgid "Worker ID"
 msgstr "Worker ID"

-#: core/models.py:584
+#: core/models.py:576
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -338,148 +330,140 @@ msgstr ""
 "Voer een identificatie in voor de worker-opname. Deze ID blijft behouden, "
 "zelfs wanneer de worker stopt, waardoor eenvoudige tracking mogelijk is."

-#: core/models.py:592
+#: core/models.py:584
 msgid "Recording mode"
 msgstr "Opnamemodus"

-#: core/models.py:593
+#: core/models.py:585
 msgid "Defines the mode of recording being called."
 msgstr "Definieert de modus van opname die wordt aangeroepen."

-#: core/models.py:598 core/models.py:599
+#: core/models.py:590 core/models.py:591
 msgid "Recording options"
 msgstr "Opnameopties"

-#: core/models.py:606
-msgid "External Process ID"
-msgstr ""
-
-#: core/models.py:607
-msgid "ID of the external process associated with the recording."
-msgstr ""
-
-#: core/models.py:613
+#: core/models.py:597
 msgid "Recording"
 msgstr "Opname"

-#: core/models.py:614
+#: core/models.py:598
 msgid "Recordings"
 msgstr "Opnames"

-#: core/models.py:724
+#: core/models.py:706
 msgid "Recording/user relation"
 msgstr "Opname/gebruiker-relatie"

-#: core/models.py:725
+#: core/models.py:707
 msgid "Recording/user relations"
 msgstr "Opname/gebruiker-relaties"

-#: core/models.py:731
+#: core/models.py:713
 msgid "This user is already in this recording."
 msgstr "Deze gebruiker is al in deze opname."

-#: core/models.py:737
+#: core/models.py:719
 msgid "This team is already in this recording."
 msgstr "Dit team is al in deze opname."

-#: core/models.py:743
+#: core/models.py:725
 msgid "Either user or team must be set, not both."
 msgstr "Ofwel gebruiker of team moet worden ingesteld, niet beide."

-#: core/models.py:760
+#: core/models.py:742
 msgid "Create rooms"
 msgstr "Ruimtes aanmaken"

-#: core/models.py:761
+#: core/models.py:743
 msgid "List rooms"
 msgstr "Ruimtes weergeven"

-#: core/models.py:762
+#: core/models.py:744
 msgid "Retrieve room details"
 msgstr "Details van een ruimte ophalen"

-#: core/models.py:763
+#: core/models.py:745
 msgid "Update rooms"
 msgstr "Ruimtes bijwerken"

-#: core/models.py:764
+#: core/models.py:746
 msgid "Delete rooms"
 msgstr "Ruimtes verwijderen"

-#: core/models.py:777
+#: core/models.py:759
 msgid "Application name"
 msgstr "Naam van de applicatie"

-#: core/models.py:778
+#: core/models.py:760
 msgid "Descriptive name for this application."
 msgstr "Beschrijvende naam voor deze applicatie."

-#: core/models.py:788
+#: core/models.py:770
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Wordt gehasht bij het opslaan. Kopieer het nu als dit een nieuw geheim is."

-#: core/models.py:799
+#: core/models.py:781
 msgid "Application"
 msgstr "Applicatie"

-#: core/models.py:800
+#: core/models.py:782
 msgid "Applications"
 msgstr "Applicaties"

-#: core/models.py:823
+#: core/models.py:805
 msgid "Enter a valid domain"
 msgstr "Voer een geldig domein in"

-#: core/models.py:826
+#: core/models.py:808
 msgid "Domain"
 msgstr "Domein"

-#: core/models.py:827
+#: core/models.py:809
 msgid "Email domain this application can act on behalf of."
 msgstr "E-maildomein namens welke deze applicatie kan handelen."

-#: core/models.py:839
+#: core/models.py:821
 msgid "Application domain"
 msgstr "Applicatiedomein"

-#: core/models.py:840
+#: core/models.py:822
 msgid "Application domains"
 msgstr "Applicatiedomeinen"

-#: core/models.py:858
+#: core/models.py:840
 msgid "Pending"
 msgstr "In afwachting"

-#: core/models.py:866
+#: core/models.py:848
 msgid "Ready"
 msgstr "Klaar"

-#: core/models.py:872
+#: core/models.py:854
 msgid "Background image"
 msgstr "Achtergrondafbeelding"

-#: core/models.py:884
+#: core/models.py:866
 msgid "title"
 msgstr "Titel"

-#: core/models.py:908
+#: core/models.py:890
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr "Informatie over malwaredetectie wanneer de analysestatus onveilig is."

-#: core/models.py:913
+#: core/models.py:895
 msgid "File"
 msgstr "Bestand"

-#: core/models.py:914
+#: core/models.py:896
 msgid "Files"
 msgstr "Bestanden"

-#: core/models.py:1018
+#: core/models.py:1000
 msgid "This file is already hard deleted."
 msgstr "Dit bestand is al definitief verwijderd."

-#: core/models.py:1028
+#: core/models.py:1010
 #, fuzzy
 #| msgid "To hard delete a file, it must first be soft deleted."
 msgid "To hard delete a file, it must first be soft deleted."
@@ -487,7 +471,7 @@ msgstr ""
 "Om een bestand definitief te verwijderen, moet het eerst zacht verwijderd "
 "zijn."

-#: core/recording/event/notification.py:124
+#: core/recording/event/notification.py:116
 msgid "Your recording is ready"
 msgstr "Je opname is klaar"

@@ -587,9 +571,7 @@ msgstr "Om deze opname permanent te bewaren:"

 #: core/templates/mail/html/screen_recording.html:208
 #: core/templates/mail/text/screen_recording.txt:13
-#, fuzzy
-#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
-msgid "Click the \"Open\" button below "
+msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Klik op de \"<a href=\"%(link)s\">Openen</a>\"-link hieronder "

 #: core/templates/mail/html/screen_recording.html:209
@@ -744,9 +744,6 @@ class Base(Configuration):
    SUMMARY_SERVICE_API_TOKEN = SecretFileValue(
        None, environ_name="SUMMARY_SERVICE_API_TOKEN", environ_prefix=None
    )
-    SUMMARY_SERVICE_WEBHOOK_API_TOKEN = SecretFileValue(
-        None, environ_name="SUMMARY_SERVICE_WEBHOOK_API_TOKEN", environ_prefix=None
-    )
    SCREEN_RECORDING_BASE_URL = values.Value(
        None, environ_name="SCREEN_RECORDING_BASE_URL", environ_prefix=None
    )
@@ -911,6 +908,18 @@ class Base(Configuration):
        environ_name="APPLICATION_BASE_URL",
        environ_prefix=None,
    )
+    # Warning: EXTERNAL_API_ALLOW_PUBLIC_ACCESS is ignored when
+    # EXTERNAL_API_DEFAULT_ACCESS_LEVEL=public.
+    EXTERNAL_API_ALLOW_PUBLIC_ACCESS = values.BooleanValue(
+        False,
+        environ_name="EXTERNAL_API_ALLOW_PUBLIC_ACCESS",
+        environ_prefix=None,
+    )
+    EXTERNAL_API_DEFAULT_ACCESS_LEVEL = values.Value(
+        "trusted",
+        environ_name="EXTERNAL_API_DEFAULT_ACCESS_LEVEL",
+        environ_prefix=None,
+    )
    # Allows third-party platforms to create users with email-only identification.
    # Required for external integrations, but fragile due to deferred user reconciliation
    # on sub. Enable it with care /!\
@@ -4,7 +4,7 @@ from django.conf import settings
 from django.conf.urls.static import static
 from django.contrib import admin
 from django.contrib.staticfiles.urls import staticfiles_urlpatterns
-from django.urls import include, path, re_path
+from django.urls import include, path

 from drf_spectacular.views import (
    SpectacularJSONAPIView,
@@ -29,7 +29,7 @@ if settings.DEBUG:
 if settings.USE_SWAGGER or settings.DEBUG:
    urlpatterns += [
        path(
-            f"{settings.API_VERSION}/swagger.json",
+            f"api/{settings.API_VERSION}/swagger.json",
            SpectacularJSONAPIView.as_view(
                api_version=settings.API_VERSION,
                urlconf="core.urls",
@@ -37,12 +37,12 @@ if settings.USE_SWAGGER or settings.DEBUG:
            name="client-api-schema",
        ),
        path(
-            f"{settings.API_VERSION}//swagger/",
+            f"api/{settings.API_VERSION}/swagger/",
            SpectacularSwaggerView.as_view(url_name="client-api-schema"),
            name="swagger-ui-schema",
        ),
-        re_path(
-            f"{settings.API_VERSION}//redoc/",
+        path(
+            f"api/{settings.API_VERSION}/redoc/",
            SpectacularRedocView.as_view(url_name="client-api-schema"),
            name="redoc-schema",
        ),
@@ -7,7 +7,7 @@ build-backend = "uv_build"

 [project]
 name = "meet"
-version = "1.16.0"
+version = "1.17.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
    "Development Status :: 5 - Production/Stable",
@@ -62,6 +62,7 @@ dependencies = [
    "livekit-api==1.1.0",
    "aiohttp==3.13.4",
    "urllib3==2.7.0",
+    "phonenumbers==9.0.30",
 ]

 [project.urls]
@@ -1173,7 +1173,7 @@ wheels = [

 [[package]]
 name = "meet"
-version = "1.16.0"
+version = "1.17.0"
 source = { editable = "." }
 dependencies = [
    { name = "aiohttp" },
@@ -1204,6 +1204,7 @@ dependencies = [
    { name = "markdown" },
    { name = "mozilla-django-oidc" },
    { name = "nested-multipart-parser" },
+    { name = "phonenumbers" },
    { name = "psycopg", extra = ["binary"] },
    { name = "pydantic" },
    { name = "pyjwt" },
@@ -1266,6 +1267,7 @@ requires-dist = [
    { name = "markdown", specifier = "==3.10.2" },
    { name = "mozilla-django-oidc", specifier = "==5.0.2" },
    { name = "nested-multipart-parser", specifier = "==1.6.0" },
+    { name = "phonenumbers", specifier = "==9.0.30" },
    { name = "psycopg", extras = ["binary"], specifier = "==3.3.3" },
    { name = "pydantic", specifier = "==2.12.5" },
    { name = "pyjwt", specifier = "==2.12.1" },
@@ -1430,6 +1432,15 @@ wheels = [
    { url = "https://files.pythonhosted.org/packages/9e/c3/059298687310d527a58bb01f3b1965787ee3b40dce76752eda8b44e9a2c5/pexpect-4.9.0-py2.py3-none-any.whl", hash = "sha256:7236d1e080e4936be2dc3e326cec0af72acf9212a7e1d060210e70a47e253523", size = 63772, upload-time = "2023-11-25T06:56:14.81Z" },
 ]

+[[package]]
+name = "phonenumbers"
+version = "9.0.30"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/a6/f1/249f843f4107c6a6ed17e5ece17620d75e532c2a355106e26d889a0c72c7/phonenumbers-9.0.30.tar.gz", hash = "sha256:d42d232ccde69c1af1bb5916a7e46f4edbcc72975b02759830f4ea1fba7b00c9", size = 2306521, upload-time = "2026-05-07T10:20:38.884Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/83/22/e4442aabea04daf16fda50d89bce2ff585e44f204089986b2cc6679cae10/phonenumbers-9.0.30-py2.py3-none-any.whl", hash = "sha256:e0890d4cda206ef6ac18ef07e8f3ab225c31c7edce237ac870b4729d4c1d2520", size = 2595222, upload-time = "2026-05-07T10:20:35.387Z" },
+]
+
 [[package]]
 name = "pillow"
 version = "12.2.0"
@@ -6,22 +6,6 @@
    <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
    <link rel="manifest" href="/site.webmanifest">
-    <!-- Font URLs are resolved and replaced by Vite during the build process. Font loading failures will not break the application. -->
-    <link
-      rel="preload"
-      as="font"
-      crossorigin="anonymous"
-      href="/node_modules/@fontsource/material-icons-outlined/files/material-icons-outlined-latin-400-normal.woff2"
-      type="font/woff2"
-    />
-    <!-- Font URLs are resolved and replaced by Vite during the build process. Font loading failures will not break the application. -->
-    <link
-      rel="preload"
-      as="font"
-      crossorigin="anonymous"
-      href="/node_modules/@fontsource-variable/material-symbols-outlined/files/material-symbols-outlined-latin-wght-normal.woff2"
-      type="font/woff2"
-    />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>%VITE_APP_TITLE%</title>
  </head>
@@ -1,11 +1,12 @@
 {
  "name": "meet",
  "private": true,
-  "version": "1.16.0",
+  "version": "1.17.0",
  "type": "module",
  "scripts": {
    "dev": "panda codegen && vite",
    "build": "panda codegen && tsc -b && vite build",
+    "build:debug": "VITE_ANALYZE=true npm run build -- --debug",
    "lint": "eslint . --ext ts,tsx --report-unused-disable-directives --max-warnings 0",
    "preview": "vite preview",
    "i18n:extract": "npx i18next -c i18next-parser.config.json",
@@ -15,8 +16,6 @@
  "dependencies": {
    "@fontsource-variable/atkinson-hyperlegible-next": "5.2.6",
    "@fontsource-variable/lexend": "5.2.11",
-    "@fontsource-variable/material-symbols-outlined": "5.2.34",
-    "@fontsource/material-icons-outlined": "5.2.6",
    "@fontsource/opendyslexic": "5.2.5",
    "@livekit/components-react": "2.9.19",
    "@livekit/components-styles": "1.2.0",
@@ -35,7 +34,6 @@
    "i18next-browser-languagedetector": "8.2.1",
    "i18next-parser": "9.3.0",
    "i18next-resources-to-backend": "1.2.1",
-    "libphonenumber-js": "1.12.10",
    "livekit-client": "2.17.1",
    "posthog-js": "1.342.1",
    "react": "18.3.1",
@@ -64,8 +62,10 @@
    "eslint-plugin-react-refresh": "0.4.20",
    "postcss": "8.5.14",
    "prettier": "3.8.1",
+    "rollup-plugin-visualizer": "7.0.1",
    "typescript": "5.8.3",
    "vite": "7.3.2",
+    "vite-plugin-svgr": "5.2.0",
    "vite-tsconfig-paths": "6.1.1"
  }
 }
@@ -1,4 +1,3 @@
-import '@livekit/components-styles'
 import '@/styles/index.css'
 import { Suspense } from 'react'
 import { ReactQueryDevtools } from '@tanstack/react-query-devtools'
@@ -2,8 +2,8 @@ import { fetchApi } from './fetchApi'
 import { keys } from './queryKeys'
 import { useQuery } from '@tanstack/react-query'
 import { RecordingMode } from '@/features/recording'
-import { Track } from 'livekit-client'
-import Source = Track.Source
+import type { Track } from 'livekit-client'
+type Source = Track.Source

 export interface ApiConfig {
  analytics?: {
@@ -44,7 +44,7 @@ export interface ApiConfig {
  }
  telephony: {
    enabled: boolean
-    phone_number?: string
+    international_phone_number?: string
    default_country?: string
  }
  manifest_link?: string
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M280-280h280v-80H280v80Zm0-160h400v-80H280v80Zm0-160h400v-80H280v80Zm-80 480q-33 0-56.5-23.5T120-200v-560q0-33 23.5-56.5T200-840h560q33 0 56.5 23.5T840-760v560q0 33-23.5 56.5T760-120H200Zm0-80h560v-560H200v560Zm0-560v560-560Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M504-480 320-664l56-56 240 240-240 240-56-56 184-184Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M260-160q-91 0-155.5-63T40-377q0-78 47-139t123-78q17-72 85-137t145-65q33 0 56.5 23.5T520-716v242l64-62 56 56-160 160-160-160 56-56 64 62v-242q-76 14-118 73.5T280-520h-20q-58 0-99 41t-41 99q0 58 41 99t99 41h480q42 0 71-29t29-71q0-42-29-71t-71-29h-60v-80q0-48-22-89.5T600-680v-93q74 35 117 103.5T760-520q69 8 114.5 59.5T920-340q0 75-52.5 127.5T740-160H260Zm220-358Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M325-111.5q-73-31.5-127.5-86t-86-127.5Q80-398 80-480.5t31.5-155q31.5-72.5 86-127t127.5-86Q398-880 480.5-880t155 31.5q72.5 31.5 127 86t86 127Q880-563 880-480.5T848.5-325q-31.5 73-86 127.5t-127 86Q563-80 480.5-80T325-111.5ZM480-162q26-36 45-75t31-83H404q12 44 31 83t45 75Zm-104-16q-18-33-31.5-68.5T322-320H204q29 50 72.5 87t99.5 55Zm208 0q56-18 99.5-55t72.5-87H638q-9 38-22.5 73.5T584-178ZM170-400h136q-3-20-4.5-39.5T300-480q0-21 1.5-40.5T306-560H170q-5 20-7.5 39.5T160-480q0 21 2.5 40.5T170-400Zm216 0h188q3-20 4.5-39.5T580-480q0-21-1.5-40.5T574-560H386q-3 20-4.5 39.5T380-480q0 21 1.5 40.5T386-400Zm268 0h136q5-20 7.5-39.5T800-480q0-21-2.5-40.5T790-560H654q3 20 4.5 39.5T660-480q0 21-1.5 40.5T654-400Zm-16-240h118q-29-50-72.5-87T584-782q18 33 31.5 68.5T638-640Zm-234 0h152q-12-44-31-83t-45-75q-26 36-45 75t-31 83Zm-200 0h118q9-38 22.5-73.5T376-782q-56 18-99.5 55T204-640Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M480-120v-80h280v-560H480v-80h280q33 0 56.5 23.5T840-760v560q0 33-23.5 56.5T760-120H480Zm-80-160-55-58 102-102H120v-80h327L345-622l55-58 200 200-200 200Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M160-160q-33 0-56.5-23.5T80-240v-480q0-33 23.5-56.5T160-800h640q33 0 56.5 23.5T880-720v480q0 33-23.5 56.5T800-160H160Zm320-280L160-640v400h640v-400L480-440Zm0-80 320-200H160l320 200ZM160-640v-80 480-400Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M565-395q35-35 35-85t-35-85q-35-35-85-35t-85 35q-35 35-35 85t35 85q35 35 85 35t85-35ZM480-80q-83 0-156-31.5T197-197q-54-54-85.5-127T80-480q0-83 31.5-156T197-763q54-54 127-85.5T480-880q83 0 156 31.5T763-763q54 54 85.5 127T880-480q0 83-31.5 156T763-197q-54 54-127 85.5T480-80Zm0-80q134 0 227-93t93-227q0-134-93-227t-227-93q-134 0-227 93t-93 227q0 134 93 227t227 93Zm0-320Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M80-40v-80h800v80H80Zm80-120v-240q-33-54-51-114.5T91-638q0-61 15.5-120T143-874q8-21 26-33.5t40-12.5q31 0 53 21t18 50l-11 91q-6 48 8.5 91t43.5 75.5q29 32.5 70 52t89 19.5q60 0 120.5 12.5T706-472q45 23 69.5 58.5T800-326v166H160Zm80-80h480v-86q0-24-12-42.5T674-398q-41-20-95-31t-99-11q-66 0-122.5-27t-96-72.5Q222-585 202-644.5T190-768q-10 30-14.5 64t-4.5 66q0 58 20.5 111.5T240-422v182Zm127-367q-47-47-47-113t47-113q47-47 113-47t113 47q47 47 47 113t-47 113q-47 47-113 47t-113-47Zm169.5-56.5Q560-687 560-720t-23.5-56.5Q513-800 480-800t-56.5 23.5Q400-753 400-720t23.5 56.5Q447-640 480-640t56.5-23.5ZM320-160v-37q0-67 46.5-115T480-360h160v80H480q-34 0-57 24.5T400-197v37h-80Zm160-80Zm0-480Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M158-242q-37-50-57.5-110.5T80-480q0-67 20-127t57-110l58 57q-26 38-40.5 83.5T160-480q0 51 14.5 97t40.5 84l-57 57ZM480-80q-67 0-127-20t-110-57l57-58q38 26 83.5 40.5T480-160q51 0 96.5-14.5T660-215l57 58q-50 37-110 57T480-80Zm322-162-57-57q26-38 40.5-84t14.5-97q0-51-14.5-96.5T745-660l58-57q37 50 57 110t20 127q0 67-20.5 127.5T802-242ZM299-745l-57-57q50-37 110.5-57.5T480-880q68 0 128 20.5T718-802l-57 57q-38-26-84-40.5T480-800q-51 0-97 14.5T299-745Zm181 465q-83 0-141.5-58.5T280-480q0-83 58.5-141.5T480-680q83 0 141.5 58.5T680-480q0 83-58.5 141.5T480-280Z"/></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M680-560q-33 0-56.5-23T600-640v-160q0-34 23.5-57t56.5-23q34 0 57 23t23 57v160q0 34-23 57t-57 23ZM200-80q-33 0-56.5-23.5T120-160v-640q0-33 23.5-56.5T200-880h320v80H200v640h440v-80h80v80q0 33-23.5 56.5T640-80H200Zm80-160v-80h280v80H280Zm0-120v-80h200v80H280Zm440 40h-80v-104q-77-14-128.5-74.5T460-640h80q0 58 41 99t99 41q59 0 99.5-41t40.5-99h80q0 81-51 141.5T720-424v104Z"/></svg>
@@ -1,20 +1,14 @@
-import { silenceLiveKitLogs } from '@/utils/livekit'
 import { useConfig } from '@/api/useConfig'
 import { useAnalytics } from '@/features/analytics/hooks/useAnalytics'
 import { useSupport } from '@/features/support/hooks/useSupport'
-import { useSyncUserPreferencesWithBackend } from '@/features/auth'
+import { useSyncUserPreferencesWithBackend } from '@/features/auth/api/useSyncUserPreferencesWithBackend'
 import { useEffect } from 'react'

 export const AppInitialization = () => {
  const { data } = useConfig()
  useSyncUserPreferencesWithBackend()

-  const {
-    analytics = {},
-    support = {},
-    silence_livekit_debug_logs = false,
-    custom_css_url = '',
-  } = data ?? {}
+  const { analytics = {}, support = {}, custom_css_url = '' } = data ?? {}

  useAnalytics(analytics)
  useSupport(support)
@@ -29,7 +23,5 @@ export const AppInitialization = () => {
    }
  }, [custom_css_url])

-  silenceLiveKitLogs(silence_livekit_debug_logs)
-
  return null
 }
@@ -1,8 +1,8 @@
 import { LinkButton } from '@/primitives'
-import { authUrl } from '@/features/auth'
 import { useTranslation } from 'react-i18next'
 import { useConfig } from '@/api/useConfig'
 import { ProConnectButton } from './ProConnectButton'
+import { authUrl } from '@/features/auth/utils/authUrl'

 type LoginButtonProps = {
  proConnectHint?: boolean // Hide hint in layouts where space doesn't allow it.
@@ -1,17 +1,28 @@
 import { useEffect } from 'react'
 import { useLocation } from 'wouter'
-import posthog from 'posthog-js'
-import { ApiUser } from '@/features/auth/api/ApiUser'
+import { type PostHog } from 'posthog-js'
+import { type ApiUser } from '@/features/auth/api/ApiUser'
+import { useUser } from '@/features/auth/api/useUser'

-export const startAnalyticsSession = (data: ApiUser) => {
-  if (posthog._isIdentified()) return
-  const { id, email } = data
-  posthog.identify(id, { email })
+let posthog: PostHog | null = null
+
+const getPosthog = async () => {
+  if (!posthog) posthog = (await import('posthog-js')).default
+  return posthog
 }

-export const terminateAnalyticsSession = () => {
-  if (!posthog._isIdentified()) return
-  posthog.reset()
+export const startAnalyticsSession = (data: ApiUser) => {
+  getPosthog().then((ph) => {
+    if (ph._isIdentified()) return
+    const { id, email } = data
+    ph.identify(id, { email })
+  })
+}
+
+export const terminateAnalyticsSession = async () => {
+  const ph = await getPosthog()
+  if (!ph._isIdentified()) return
+  ph.reset()
 }

 export type useAnalyticsProps = {
@@ -22,18 +33,26 @@ export type useAnalyticsProps = {

 export const useAnalytics = ({ id, host, isDisabled }: useAnalyticsProps) => {
  const [location] = useLocation()
+  const { user } = useUser()
+
  useEffect(() => {
    if (!id || !host || isDisabled) return
-    if (posthog.__loaded) return
-    posthog.init(id, {
-      api_host: host,
-      person_profiles: 'always',
+    getPosthog().then((ph) => {
+      if (ph.__loaded) return
+      ph.init(id, { api_host: host, person_profiles: 'always' })
    })
  }, [id, host, isDisabled])

+  useEffect(() => {
+    if (!user) return
+    startAnalyticsSession(user)
+  }, [user])
+
  // From PostHog tutorial on PageView tracking in a Single Page Application (SPA) context.
  useEffect(() => {
-    posthog.capture('$pageview')
+    getPosthog().then((ph) => {
+      ph.capture('$pageview')
+    })
  }, [location])

  return null
@@ -2,16 +2,7 @@ import { useQuery } from '@tanstack/react-query'
 import { keys } from '@/api/queryKeys'
 import { fetchUser } from './fetchUser'
 import { type ApiUser } from './ApiUser'
-import { useEffect, useMemo } from 'react'
-import {
-  startAnalyticsSession,
-  terminateAnalyticsSession,
-} from '@/features/analytics/hooks/useAnalytics'
-import {
-  initializeSupportSession,
-  terminateSupportSession,
-} from '@/features/support/hooks/useSupport'
-import { logoutUrl } from '../utils/logoutUrl'
+import { useMemo } from 'react'
 import { useConfig } from '@/api/useConfig'

 /**
@@ -45,19 +36,6 @@ export const useUser = (
    enabled: !isConfigLoading,
  })

-  useEffect(() => {
-    if (query?.data) {
-      startAnalyticsSession(query.data)
-      initializeSupportSession(query.data)
-    }
-  }, [query.data])
-
-  const logout = () => {
-    terminateAnalyticsSession()
-    terminateSupportSession()
-    window.location.href = logoutUrl()
-  }
-
  const isLoggedIn =
    query.status === 'success' ? query.data !== false : undefined
  const isLoggedOut = isLoggedIn === false
@@ -67,6 +45,5 @@ export const useUser = (
    user: isLoggedOut ? undefined : (query.data as ApiUser | undefined),
    isLoggedIn,
    isLoading: query.isLoading,
-    logout,
  }
 }
@@ -1,4 +1,4 @@
-import { useUser } from '@/features/auth'
+import { useUser } from '../api/useUser'
 import { LoadingScreen } from '@/components/LoadingScreen'

 /**
@@ -1,4 +0,0 @@
-export { useUser } from './api/useUser'
-export { useSyncUserPreferencesWithBackend } from './api/useSyncUserPreferencesWithBackend'
-export { authUrl } from './utils/authUrl'
-export { UserAware } from './components/UserAware'
@@ -0,0 +1,13 @@
+import { apiUrl } from '@/api/apiUrl'
+import { terminateSupportSession } from '@/features/support/hooks/useSupport'
+import { terminateAnalyticsSession } from '@/features/analytics/hooks/useAnalytics'
+
+const logoutUrl = () => {
+  return apiUrl('/logout')
+}
+
+export const logout = async () => {
+  await terminateAnalyticsSession()
+  terminateSupportSession()
+  window.location.href = logoutUrl()
+}
@@ -1,5 +0,0 @@
-import { apiUrl } from '@/api/apiUrl'
-
-export const logoutUrl = () => {
-  return apiUrl('/logout')
-}
@@ -1,4 +1,4 @@
-import { authUrl } from '@/features/auth'
+import { authUrl } from './authUrl'

 const SILENT_LOGIN_RETRY_KEY = 'silent-login-retry'

@@ -6,7 +6,7 @@ import {
  ApiFileType,
  ApiFileUploadState,
 } from '@/features/files/api/types.ts'
-import { useUser } from '@/features/auth'
+import { useUser } from '@/features/auth/api/useUser'
 import { useConfig } from '@/api/useConfig.ts'

 type ListFilesResponse = {
@@ -0,0 +1,62 @@
+import { useTranslation } from 'react-i18next'
+import { MenuItem, Menu as RACMenu } from 'react-aria-components'
+import { Button, Menu } from '@/primitives'
+import { navigateTo } from '@/navigation/navigateTo'
+import { generateRoomId, useCreateRoom } from '@/features/rooms'
+import { RiAddLine, RiLink } from '@remixicon/react'
+import { LaterMeetingDialog } from '@/features/home/components/LaterMeetingDialog'
+import { useState } from 'react'
+
+import { menuRecipe } from '@/primitives/menuRecipe'
+import { ApiRoom } from '@/features/rooms/api/ApiRoom'
+import { loadUserChoices } from '@livekit/components-core'
+
+export const CreateMeetingMenu = () => {
+  const { username } = loadUserChoices()
+
+  const { t } = useTranslation('home')
+  const { mutateAsync: createRoom } = useCreateRoom()
+  const [laterRoom, setLaterRoom] = useState<null | ApiRoom>(null)
+
+  return (
+    <>
+      <Menu>
+        <Button variant="primary" data-attr="create-meeting">
+          {t('createMeeting')}
+        </Button>
+        <RACMenu>
+          <MenuItem
+            className={menuRecipe({ icon: true, variant: 'light' }).item}
+            onAction={() => {
+              const slug = generateRoomId()
+              createRoom({ slug, username }).then((data) =>
+                navigateTo('room', data.slug, {
+                  state: { create: true, initialRoomData: data },
+                })
+              )
+            }}
+            data-attr="create-option-instant"
+          >
+            <RiAddLine size={18} />
+            {t('createMenu.instantOption')}
+          </MenuItem>
+          <MenuItem
+            className={menuRecipe({ icon: true, variant: 'light' }).item}
+            onAction={() => {
+              const slug = generateRoomId()
+              createRoom({ slug, username }).then(setLaterRoom)
+            }}
+            data-attr="create-option-later"
+          >
+            <RiLink size={18} />
+            {t('createMenu.laterOption')}
+          </MenuItem>
+        </RACMenu>
+      </Menu>
+      <LaterMeetingDialog
+        room={laterRoom}
+        onOpenChange={() => setLaterRoom(null)}
+      />
+    </>
+  )
+}
@@ -1 +0,0 @@
-export { Home as HomeRoute } from './routes/Home'
@@ -1,24 +1,19 @@
 import { useTranslation } from 'react-i18next'
-import { DialogTrigger, MenuItem, Menu as RACMenu } from 'react-aria-components'
-import { Button, Menu } from '@/primitives'
+import { DialogTrigger } from 'react-aria-components'
+import { Button } from '@/primitives'
 import { styled } from '@/styled-system/jsx'
-import { navigateTo } from '@/navigation/navigateTo'
 import { Screen } from '@/layout/Screen'
-import { generateRoomId, useCreateRoom } from '@/features/rooms'
-import { useUser, UserAware } from '@/features/auth'
+import { UserAware } from '@/features/auth/components/UserAware'
+import { useUser } from '@/features/auth/api/useUser'
 import { JoinMeetingDialog } from '../components/JoinMeetingDialog'
-import { RiAddLine, RiLink } from '@remixicon/react'
-import { LaterMeetingDialog } from '@/features/home/components/LaterMeetingDialog'
-import { IntroSlider } from '@/features/home/components/IntroSlider'
-import { MoreLink } from '@/features/home/components/MoreLink'
+import { IntroSlider } from '../components/IntroSlider'
+import { MoreLink } from '../components/MoreLink'
+import { CreateMeetingMenu } from '../components/CreateMeetingMenu'
 import { ReactNode, useEffect, useState } from 'react'

 import { css } from '@/styled-system/css'
-import { menuRecipe } from '@/primitives/menuRecipe.ts'
-import { usePersistentUserChoices } from '@/features/rooms/livekit/hooks/usePersistentUserChoices'
 import { useConfig } from '@/api/useConfig'
 import { LoginButton } from '@/components/LoginButton'
-import { ApiRoom } from '@/features/rooms/api/ApiRoom'
 import { LoadingScreen } from '@/components/LoadingScreen'

 const Columns = ({ children }: { children?: ReactNode }) => {
@@ -146,18 +141,11 @@ const IntroText = styled('div', {
  },
 })

-export const Home = () => {
+const Home = () => {
  const { t } = useTranslation('home')
  const { isLoggedIn } = useUser()

-  const {
-    userChoices: { username },
-  } = usePersistentUserChoices()
-
-  const { mutateAsync: createRoom } = useCreateRoom()
-  const [laterRoom, setLaterRoom] = useState<null | ApiRoom>(null)
  const [redirectFailed, setRedirectFailed] = useState(false)
-
  const { data } = useConfig()

  useEffect(() => {
@@ -200,45 +188,7 @@ export const Home = () => {
              })}
            >
              {isLoggedIn ? (
-                <Menu>
-                  <Button variant="primary" data-attr="create-meeting">
-                    {t('createMeeting')}
-                  </Button>
-                  <RACMenu>
-                    <MenuItem
-                      className={
-                        menuRecipe({ icon: true, variant: 'light' }).item
-                      }
-                      onAction={async () => {
-                        const slug = generateRoomId()
-                        createRoom({ slug, username }).then((data) =>
-                          navigateTo('room', data.slug, {
-                            state: { create: true, initialRoomData: data },
-                          })
-                        )
-                      }}
-                      data-attr="create-option-instant"
-                    >
-                      <RiAddLine size={18} />
-                      {t('createMenu.instantOption')}
-                    </MenuItem>
-                    <MenuItem
-                      className={
-                        menuRecipe({ icon: true, variant: 'light' }).item
-                      }
-                      onAction={() => {
-                        const slug = generateRoomId()
-                        createRoom({ slug, username }).then((data) =>
-                          setLaterRoom(data)
-                        )
-                      }}
-                      data-attr="create-option-later"
-                    >
-                      <RiLink size={18} />
-                      {t('createMenu.laterOption')}
-                    </MenuItem>
-                  </RACMenu>
-                </Menu>
+                <CreateMeetingMenu />
              ) : (
                <LoginButton proConnectHint={false} />
              )}
@@ -264,11 +214,9 @@ export const Home = () => {
            <IntroSlider />
          </RightColumn>
        </Columns>
-        <LaterMeetingDialog
-          room={laterRoom}
-          onOpenChange={() => setLaterRoom(null)}
-        />
      </Screen>
    </UserAware>
  )
 }
+
+export default Home
@@ -3,7 +3,7 @@ import { H, P, A, Italic, Ul } from '@/primitives'
 import { HStack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'

-export const AccessibilityRoute = () => {
+const AccessibilityRoute = () => {
  const { t } = useTranslation('accessibility', { keyPrefix: 'accessibility' })

  return (
@@ -78,3 +78,5 @@ export const AccessibilityRoute = () => {
    </Screen>
  )
 }
+
+export default AccessibilityRoute
@@ -4,7 +4,7 @@ import { css } from '@/styled-system/css'
 import { HStack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'

-export const LegalTermsRoute = () => {
+const LegalTermsRoute = () => {
  const { t } = useTranslation('legals')

  const indentedStyle = css({
@@ -72,3 +72,5 @@ export const LegalTermsRoute = () => {
    </Screen>
  )
 }
+
+export default LegalTermsRoute
@@ -12,7 +12,7 @@ const ensureArray = (value: any) => {
 }
 /* eslint-enable @typescript-eslint/no-explicit-any */

-export const TermsOfServiceRoute = () => {
+const TermsOfServiceRoute = () => {
  const { t } = useTranslation('termsOfService')

  return (
@@ -199,3 +199,5 @@ export const TermsOfServiceRoute = () => {
    </Screen>
  )
 }
+
+export default TermsOfServiceRoute
@@ -1,7 +1,7 @@
 import { useCallback, useEffect } from 'react'
 import { useRoomContext } from '@livekit/components-react'
 import { Participant, RemoteParticipant, RoomEvent } from 'livekit-client'
-import { ChatMessage, isMobileBrowser } from '@livekit/components-core'
+import { type ChatMessage, isMobileBrowser } from '@livekit/components-core'
 import { useTranslation } from 'react-i18next'
 import { NotificationType } from './NotificationType'
 import { NotificationDuration } from './NotificationDuration'
@@ -1,4 +1,4 @@
-import { NotificationType } from './NotificationType'
+import type { NotificationType } from './NotificationType'

 export interface NotificationPayload {
  type: NotificationType
@@ -1,10 +1,10 @@
 import { useToast } from '@react-aria/toast'
 import { Button } from '@/primitives'
 import { RiCloseLine } from '@remixicon/react'
-import { ToastState } from '@react-stately/toast'
 import { styled } from '@/styled-system/jsx'
 import { useRef } from 'react'
-import { ToastData } from './ToastProvider'
+import type { ToastState } from '@react-stately/toast'
+import type { ToastData } from './ToastProvider'
 import type { QueuedToast } from '@react-stately/toast'

 export const StyledToastContainer = styled('div', {
@@ -1,7 +1,7 @@
 import { useToast } from '@react-aria/toast'
 import { useMemo, useRef } from 'react'

-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { HStack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'
 import { NotificationType } from '../NotificationType'
@@ -6,7 +6,7 @@ import Source = Track.Source

 import { useMaybeLayoutContext } from '@livekit/components-react'
 import { ParticipantTile } from '@/features/rooms/livekit/components/ParticipantTile'
-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { HStack, styled } from '@/styled-system/jsx'
 import { Div } from '@/primitives'
 import { useTranslation } from 'react-i18next'
@@ -1,7 +1,7 @@
 import { useToast } from '@react-aria/toast'
 import { useRef } from 'react'

-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { HStack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'
 import { Button } from '@/primitives'
@@ -1,7 +1,7 @@
 import { useToast } from '@react-aria/toast'
 import { useEffect, useRef } from 'react'

-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { Text } from '@/primitives'
 import { RiMessage2Line } from '@remixicon/react'
 import { useSidePanel } from '@/features/rooms/livekit/hooks/useSidePanel'
@@ -1,7 +1,7 @@
 import { useToast } from '@react-aria/toast'
 import { useRef } from 'react'

-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { HStack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'

@@ -1,7 +1,7 @@
 import { useToast } from '@react-aria/toast'
 import { useMemo, useRef } from 'react'

-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { HStack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'

@@ -2,7 +2,7 @@
 import { ToastQueue, useToastQueue } from '@react-stately/toast'
 import { ToastRegion } from './ToastRegion'
 import { Participant } from 'livekit-client'
-import { NotificationType } from '../NotificationType'
+import type { NotificationType } from '../NotificationType'

 export interface ToastData {
  participant?: Participant
@@ -1,7 +1,7 @@
 import { useToast } from '@react-aria/toast'
 import { useRef } from 'react'

-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { HStack } from '@/styled-system/jsx'
 import { Button, Div } from '@/primitives'
 import { useTranslation } from 'react-i18next'
@@ -1,7 +1,7 @@
 import { useToast } from '@react-aria/toast'
 import { useMemo, useRef } from 'react'

-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { HStack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'
 import { NotificationType } from '../NotificationType'
@@ -2,10 +2,10 @@ import { useToast } from '@react-aria/toast'
 import { useMemo, useRef } from 'react'
 import { Text } from '@/primitives'

-import { StyledToastContainer, ToastProps } from './Toast'
+import { StyledToastContainer, type ToastProps } from './Toast'
 import { HStack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'
-import { useUser } from '@/features/auth'
+import { useUser } from '@/features/auth/api/useUser'
 import { css } from '@/styled-system/css'
 import { RecordingMode } from '@/features/recording'

@@ -1,6 +1,6 @@
 import { useRoomContext } from '@livekit/components-react'
-import { NotificationType } from '../NotificationType'
-import { NotificationPayload } from '../NotificationPayload'
+import type { NotificationType } from '../NotificationType'
+import type { NotificationPayload } from '../NotificationPayload'

 export const useNotifyParticipants = () => {
  const room = useRoomContext()
@@ -1,7 +1,7 @@
 import useSound from 'use-sound'
 import { useSnapshot } from 'valtio'
 import { notificationsStore } from '@/stores/notifications'
-import { NotificationType } from '@/features/notifications/NotificationType'
+import type { NotificationType } from '@/features/notifications/NotificationType'

 // fixme - handle dynamic audio output changes
 export const useNotificationSound = () => {
@@ -1,9 +1,9 @@
 import { toastQueue } from './components/ToastProvider'
 import { NotificationType } from './NotificationType'
 import { NotificationDuration } from './NotificationDuration'
-import { Participant } from 'livekit-client'
-import { NotificationPayload } from './NotificationPayload'
-import { RecordingMode } from '@/features/recording'
+import type { Participant } from 'livekit-client'
+import type { NotificationPayload } from './NotificationPayload'
+import type { RecordingMode } from '@/features/recording'

 export const showLowerHandToast = (
  participant: Participant,
@@ -5,7 +5,7 @@ import { css } from '@/styled-system/css'
 import { useSnapshot } from 'valtio'
 import { reactionsStore } from '@/stores/reactions'
 import { useAnnounceReaction } from '../hooks/useAnnounceReaction'
-import { Reaction } from '../types'
+import type { Reaction } from '../types'
 import {
  ANIMATION_DISTANCE,
  ANIMATION_DURATION,
@@ -1,6 +1,6 @@
 import { useTranslation } from 'react-i18next'
 import { css } from '@/styled-system/css'
-import { Emoji } from '../../types'
+import type { Emoji } from '../../types'
 import { useReactions } from '../../hooks/useReactions'
 import { Button } from '@/primitives'

@@ -5,7 +5,7 @@ import { accessibilityStore } from '@/stores/accessibility'
 import { useScreenReaderAnnounce } from '@/hooks/useScreenReaderAnnounce'

 import { getEmojiLabel } from '../utils'
-import { Reaction } from '../types'
+import type { Reaction } from '../types'

 export const useAnnounceReaction = (latestReaction: Reaction | undefined) => {
  const { t } = useTranslation('rooms', { keyPrefix: 'controls.reactions' })
@@ -4,8 +4,8 @@ import { reactionsStore } from '@/stores/reactions'
 import { NotificationType } from '@/features/notifications/NotificationType'
 import { useNotifyParticipants } from '@/features/notifications'
 import useRateLimiter from '@/hooks/useRateLimiter'
-import { Participant } from 'livekit-client'
-import { Emoji } from '../types'
+import type { Participant } from 'livekit-client'
+import type { Emoji } from '../types'
 import { ANIMATION_DURATION } from '../constants'

 export const useReactions = () => {
@@ -1,5 +1,5 @@
 import { useTranslation } from 'react-i18next'
-import { Emoji } from './types'
+import type { Emoji } from './types'

 export const getEmojiLabel = (
  emoji: string | Emoji,
@@ -1,6 +1,6 @@
 import { fetchApi } from '@/api/fetchApi'
-import { ApiRoom } from '@/features/rooms/api/ApiRoom'
-import { RecordingMode, RecordingStatus } from '@/features/recording'
+import type { ApiRoom } from '@/features/rooms/api/ApiRoom'
+import type { RecordingMode, RecordingStatus } from '@/features/recording'

 export type RecordingApi = {
  id: string
@@ -1,7 +1,7 @@
 import { useMutation, UseMutationOptions } from '@tanstack/react-query'
 import { fetchApi } from '@/api/fetchApi'
-import { ApiError } from '@/api/ApiError'
-import { ApiRoom } from '@/features/rooms/api/ApiRoom'
+import type { ApiError } from '@/api/ApiError'
+import type { ApiRoom } from '@/features/rooms/api/ApiRoom'
 import { RecordingMode } from '../types'

 export interface StartRecordingParams {
@@ -1,7 +1,7 @@
 import { useMutation, UseMutationOptions } from '@tanstack/react-query'
 import { fetchApi } from '@/api/fetchApi'
-import { ApiError } from '@/api/ApiError'
-import { ApiRoom } from '@/features/rooms/api/ApiRoom'
+import type { ApiError } from '@/api/ApiError'
+import type { ApiRoom } from '@/features/rooms/api/ApiRoom'

 export interface StopRecordingParams {
  id: string
@@ -3,7 +3,7 @@ import { HStack } from '@/styled-system/jsx'
 import { Spinner } from '@/primitives/Spinner'
 import { Button, Icon, Text } from '@/primitives'
 import { useTranslation } from 'react-i18next'
-import { RecordingStatuses } from '../hooks/useRecordingStatuses'
+import type { RecordingStatuses } from '../hooks/useRecordingStatuses'
 import { ReactNode, useEffect, useRef, useState } from 'react'
 import { useRoomContext } from '@livekit/components-react'
 import { ConnectionState } from 'livekit-client'
@@ -0,0 +1,43 @@
+import { useTranslation } from 'react-i18next'
+
+import { A, Text } from '@/primitives'
+import { useConfig } from '@/api/useConfig'
+import { useHumanizeDuration } from '@/hooks/useHumanizeDuration'
+import { useMemo } from 'react'
+
+export const LimitDescription = ({
+  keyPrefix,
+  supportArticleLink,
+}: {
+  keyPrefix?: 'transcript' | 'screenRecording'
+  supportArticleLink?: string
+}) => {
+  const { data } = useConfig()
+  const { t } = useTranslation('rooms', { keyPrefix })
+
+  const formatter = useHumanizeDuration()
+
+  const maxRecordingDuration = useMemo(
+    () => formatter(data?.recording?.max_duration),
+    [data?.recording?.max_duration, formatter]
+  )
+
+  return (
+    <Text variant="body" fullWidth>
+      {maxRecordingDuration
+        ? t('body', { max_duration: maxRecordingDuration })
+        : t('bodyWithoutMaxDuration')}{' '}
+      {supportArticleLink && (
+        <A
+          href={supportArticleLink}
+          target="_blank"
+          rel="noopener noreferrer"
+          externalIcon
+          aria-label={t('linkAriaLabel')}
+        >
+          {t('linkMore')}
+        </A>
+      )}
+    </Text>
+  )
+}
@@ -1,64 +1,81 @@
 import { useTranslation } from 'react-i18next'
 import { Button, Dialog, P } from '@/primitives'
 import { HStack } from '@/styled-system/jsx'
-import { useHumanizeRecordingMaxDuration } from '@/features/recording'
-import { useEffect, useState } from 'react'
+import { useEffect, useMemo, useState } from 'react'
 import { NotificationType } from '@/features/notifications'
-import { useIsAdminOrOwner } from '@/features/rooms/livekit/hooks/useIsAdminOrOwner'
+import { AdminOrOwnerOnly } from '@/features/rooms/components/AdminOrOwnerOnly'
 import { RoomEvent } from 'livekit-client'
 import { decodeNotificationDataReceived } from '@/features/notifications/utils'
 import { useRoomContext } from '@livekit/components-react'
+import { useHumanizeDuration } from '@/hooks/useHumanizeDuration'
+import { useConfig } from '@/api/useConfig'

-export const LimitReachedAlertDialog = () => {
-  const [isAlertOpen, setIsAlertOpen] = useState(false)
-
+// Isolated into its own component so the `useHumanizeDuration` hook (and the
+// `humanize-duration` library it pulls in) is only loaded when the modal is
+// actually opened.
+const LimitDescription = () => {
+  const { data } = useConfig()
  const { t } = useTranslation('rooms', {
    keyPrefix: 'recordingStateToast.limitReachedAlert',
  })
+  const formatter = useHumanizeDuration()

+  const formattedDuration = useMemo(
+    () => formatter(data?.recording?.max_duration),
+    [formatter, data?.recording?.max_duration]
+  )
+
+  return (
+    <P>
+      {t('description', {
+        duration_message: formattedDuration
+          ? t('durationMessage', {
+              duration: formattedDuration,
+            })
+          : '',
+      })}
+    </P>
+  )
+}
+
+const LimitReachedAlertDialogContent = () => {
+  const [isOpen, setIsOpen] = useState(false)
+  const { t } = useTranslation('rooms', {
+    keyPrefix: 'recordingStateToast.limitReachedAlert',
+  })
  const room = useRoomContext()
-  const isAdminOrOwner = useIsAdminOrOwner()
-  const maxDuration = useHumanizeRecordingMaxDuration()

  useEffect(() => {
-    const handleDataReceived = (payload: Uint8Array) => {
-      if (!isAdminOrOwner) return
-
+    const handleLimitNotification = (payload: Uint8Array) => {
      const notification = decodeNotificationDataReceived(payload)
-
      if (
        notification?.type === NotificationType.TranscriptionLimitReached ||
        notification?.type === NotificationType.ScreenRecordingLimitReached
      ) {
-        setIsAlertOpen(true)
+        setIsOpen(true)
      }
    }
-
-    room.on(RoomEvent.DataReceived, handleDataReceived)
+    room.on(RoomEvent.DataReceived, handleLimitNotification)

    return () => {
-      room.off(RoomEvent.DataReceived, handleDataReceived)
+      room.off(RoomEvent.DataReceived, handleLimitNotification)
    }
-  }, [room, isAdminOrOwner])
-
-  if (!isAdminOrOwner) return null
+  }, [room])

  return (
-    <Dialog isOpen={isAlertOpen} role="alertdialog" title={t('title')}>
-      <P>
-        {t('description', {
-          duration_message: maxDuration
-            ? t('durationMessage', {
-                duration: maxDuration,
-              })
-            : '',
-        })}
-      </P>
+    <Dialog isOpen={isOpen} role="alertdialog" title={t('title')}>
+      <LimitDescription />
      <HStack gap={1}>
-        <Button variant="text" size="sm" onPress={() => setIsAlertOpen(false)}>
+        <Button variant="text" size="sm" onPress={() => setIsOpen(false)}>
          {t('button')}
        </Button>
      </HStack>
    </Dialog>
  )
 }
+
+export const LimitReachedAlertDialog = () => (
+  <AdminOrOwnerOnly>
+    <LimitReachedAlertDialogContent />
+  </AdminOrOwnerOnly>
+)
@@ -24,7 +24,7 @@ export const LoginPrompt = ({ heading, body }: LoginPromptProps) => {
      })}
    >
      <HStack justify="start" alignItems="center" marginBottom="0.5rem">
-        <Icon type="symbols" name="login" />
+        <Icon name="login" />
        <H lvl={3} margin={false} padding={false}>
          {heading}
        </H>
@@ -3,7 +3,7 @@ import { css } from '@/styled-system/css'
 import { useTranslation } from 'react-i18next'
 import { LoginPrompt } from './LoginPrompt'
 import { RequestRecording } from './RequestRecording'
-import { useUser } from '@/features/auth'
+import { useUser } from '@/features/auth/api/useUser'
 import { HStack, VStack } from '@/styled-system/jsx'

 const Divider = ({ label }: { label: string }) => (
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
lebaudantoine	b2fa7a64d9	wip for performance use a component instead of a hook to avoid render children	2026-06-01 15:22:01 +02:00
lebaudantoine	90c34dd06b	wip add endpoint to promote user	2026-06-01 15:13:02 +02:00
lebaudantoine	a4997e7431	🔖(minor) bump release to 1.17.0	2026-05-31 18:18:00 +02:00
snyk-bot	13c7b9ad40	fix: upgrade core-js from 3.48.0 to 3.49.0 Snyk has created this PR to upgrade core-js from 3.48.0 to 3.49.0. See this package in npm: core-js See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/af693e79-8c43-4c09-ab65-60580515c9e8?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-05-31 00:16:26 +02:00
Florent Chehab	ec688e728d	✨(summary) extended support for all video/audio files * Removed constraint on file extension * Infer audio/video streams from the media with ffmpeg * Infer the correct processed audio file extension based on actual codec to avoid ffmpeg errors We need to support more extensions and make audio extraction dynamic, as we shipped transcript in production and it led to user complaints requesting more formats.	2026-05-31 00:01:49 +02:00
lebaudantoine	bf69cbc14e	♻️(frontend) extract createMeetingMenu into a dedicated component Avoid stacking too many components in route/home. Keep only the responsibility of orchestration and layout in the home route, and move stateful components to their appropriate folder.	2026-05-30 23:39:05 +02:00
lebaudantoine	6378c1e384	⚡️(frontend) use a more direct read for the username from localStorage The homepage previously relied on the userChoices store, which loads the persisted user choices from localStorage. However, this store is widely used in the room feature, so code splitting ended up loading the chunk containing the userChoices store at the initial render. That chunk was bundled with unrelated parts that proved to be heavy. Switch to a more straightforward approach reading the cached username and verify the bundle output + intial loading. Saves a few hundred ko on the initial load, now bundled in another chunk that is loaded only when entering a room.	2026-05-30 23:39:05 +02:00
lebaudantoine	09b7a23f51	⚡️(frontend) switch Material icons strategy to per-icon SVG imports Material icons (and Symbols, the most recent ones from Google Material) were initially adopted to align with the UI kit. Before that, we relied on Remixicon, which loads only the icons used and totals 40ko for the whole library. To benefit from Material icons, the implementation matched the UI kit, which uses two fonts: 150ko and 750ko. Unlike the UI kit, the fonts were preloaded to prevent icon render blinks. On products using UI kit, the fonts are loaded the first time an icon renders, and because they are heavy, the icon swap is visible to the user. Icons are replaced by their text label in the meantime, which also caused screen-reader vocalization or i18n issues that had to be mitigated. Preloading the fonts was a quick win that worked fine on high-speed connections where fonts get loaded fast then cached. However, while optimizing LCP for users on poor connections (a separate concern that already affects videoconference joining), preloading proved harmful: it stole network bandwidth at the most critical moment, when the main JS chunk was loading. Switch to a frugal approach: import only the SVG icons actually needed from Material, treated as components so they are tree-shaken and customizable (color, etc.). Icons do not change often, so the DX remains good. The UI kit also supports custom icons not available in the font, so this approach lets us define them and works like a charm. Removal of Remixicon is planned in a follow-up PR. It save user loading almost 1Mo of assets for few icons.	2026-05-30 23:39:05 +02:00
lebaudantoine	c1d30f6923	⚡️(frontend) load PostHog dynamically posthog-js was bundled in the main chunk. Loading it dynamically saves 200ko on the initial load and around 4s of loading time on slow 4G connections. PostHog, and analytics in general, should not block the initial rendering. The risk is that some feature-flagged features may not be instantaneously available to the user, but for most users on high-speed connections this will be imperceptible. Other places in the code rely on a direct import from posthog, I only verified the delay import of posthog for the home page, and did not for the /room route. I'm pretty sure there is room for improvements on other parts of the app.	2026-05-30 23:39:05 +02:00
lebaudantoine	04ec967a99	⚡️(frontend) handle actions on userChoices store directly in the module The Valtio actions on the store were initially defined inside a hook, which was a bad idea: it does not follow Valtio's recommendation of defining actions at the module level, and the function definitions were re-created every time the hook re-rendered, which happened on every state update. These action has nothing related to React. Additionally, the snapshot should be used more directly so Valtio can understand and optimize which parts of the proxy are of interest to the snapshot being made.	2026-05-30 23:39:05 +02:00
lebaudantoine	7390673bfc	⚡️(frontend) backport phone number formatting to the backend Use the Python port of Google's phone number library on the backend instead of the JS one on the client. Saves 140Kb of unnecessary JS and avoids a complex dynamic import that would have been required to optimize loading. The transformation is static: the phone number lives in the Django settings, so the backend can format it once and pass the result to the client. This avoids every client loading the 140Kb library and re-computing the same information. Moreover, within a single client, the transformation was previously re-computed several times during a webapp lifecycle.	2026-05-30 23:39:05 +02:00
lebaudantoine	8984d863df	⚡️(frontend) isolate the creation menu in a dedicated component Avoid re-rendering the whole home page when interacting with the later meeting creation flow. Maintaining the modal open/close state at the parent level was causing the whole home page to re-render on every menu open/close state change.	2026-05-30 23:39:05 +02:00
lebaudantoine	995e6fa41d	⚡️(frontend) code split livekit-client from the main chunk livekit-client is a 400ko package that was wrongly bundled in the main index.js chunk. Every page was loading this enormeous vendor package only necessary to join and participate to a room. It made sense to set the LiveKit log level at app init, however the performance tradeoff forces us to move it as close as possible to where it is actually needed.	2026-05-30 23:39:05 +02:00
lebaudantoine	426e6258a8	⚡️(frontend) import LiveKit styles only in the room route LiveKit styles are not needed across the whole app, only in the room route. Import them locally there to avoid loading them globally.	2026-05-30 23:39:05 +02:00
lebaudantoine	ac520d8b34	⚡️(frontend) isolate humanize-duration in its own chunk The library is rarely used, so load it dynamically. It is only 50ko, which might not have been worth the effort, but these 50ko were bundled in the main chunk and are not needed on the homepage nor when launching a room. The static placeholder is good enough to be acceptable. On very slow connections, the 50ko might take a second to load, after which the text is updated with the right content. Also improves renders across the components touched, especially the idle modal with the countdown.	2026-05-30 23:39:05 +02:00
lebaudantoine	33ac849d3b	⚡️(frontend) add component to render children only for Admin or User Introduce a component that renders its children only if the logged-in user is considered Admin or User. This helps avoid mounting the hooks and logic of components that previously early-returned when the user was not admin or owner, but were still re-rendering whenever their internal logic updated.	2026-05-30 23:39:05 +02:00
lebaudantoine	07a1425fee	⚡️(frontend) lazy load routes to shrink the initial JS chunk One of the best ways to reduce the size of the initially loaded chunk (index.js, around 2Mo before optimization) is to lazy load routes and features so their JS gets isolated in dedicated chunks and is loaded only when needed. For example, most of the JS under the legal terms page is never consulted by users. Likewise, when loading the home page, there is no need for all the feature-related JS required to display a videoconference. After this lazy-loading optimization, the initial chunk is now around 1.2Mo, a significant improvement.	2026-05-30 23:39:05 +02:00
lebaudantoine	233bdce408	🩹(frontend) fix circular imports in Dialog and Form primitives While attempting to lazy-load routes, Vite/Rollup warnings revealed that the Dialog and Form primitives were causing circular imports through their use of the barrel file. Easy to address: when using primitive elements inside those primitives, rely on direct imports instead of the barrel file.	2026-05-30 23:39:05 +02:00
lebaudantoine	1b35e3acd9	⚡️(frontend) remove auth barrel file to improve code splitting Auth-related code is used across the codebase and imported by many different features. The barrel file, while convenient for importing utilities, was harming code splitting by pulling unrelated modules into shared chunks. Verified by running `npm run build:debug` before and after: chunking and code splitting are better without the barrel.	2026-05-30 23:39:05 +02:00
lebaudantoine	f8f2ce145b	🧑‍💻(frontend) add Rollup bundle visualizer for dev tooling Install tooling to visualize the Rollup bundle output. It helps understand precisely what composes our bundle and what is included in each chunk, which is a great help when trying to enhance code splitting. You can see its output running npm run build:debug. Note: the library is not compatible with Node 20, which is the build image we use in Docker to build the frontend, so it will raise a warning in CI. This does not matter much, as it is a dev-only dependency used locally without Docker.	2026-05-30 23:39:05 +02:00
lebaudantoine	bf6f7430e7	🎨(frontend) clarify type-only JS imports for better code splitting Mark JS imports as type-only when applicable so they are stripped at build time and ignored during chunk splitting, ensuring we take full advantage of Rollup's code-splitting optimizations.	2026-05-30 23:39:05 +02:00
lebaudantoine	7c4f66f91e	⚡️(frontend) avoid inlining ProConnect SVG assets and optimize SVG size Following the ProConnect documentation leads to inlining almost 40ko of SVG assets in the JS bundle. Moreover, each SVG asset (around 20ko) is not optimized in size. As the ProConnect button is loaded in the main index.js chunk at app launch, these few Ko are critical. Optimize index.js by 40ko and preload the hovered variant to avoid any blink on hover. Could be further optimized by handling the button background with CSS, but leaving that as an improvement for later.	2026-05-30 23:39:05 +02:00
lebaudantoine	4d27f217fc	♻️(backend) prefix Swagger routes with /api Inspired by commit eb23aef in suitenumerique/docs. The same base route path is used everywhere, which helps when the backend sits behind an ingress serving it with a regex like `api/*`.	2026-05-30 19:33:48 +02:00
Rahulchourasiya	88b722e741	🩹(backend) use path for redoc url matching	2026-05-30 19:33:48 +02:00
Rahulchourasiya	5ea5460b17	🩹(backend) fix swagger and redoc documentation urls Use canonical documentation routes and add a regression test.	2026-05-30 19:33:48 +02:00
lebaudantoine	1eefc49f8d	♻️(devx) skip rebuilds for createsuperuser and migrate jobs by default Ensure the meet-backend createsuperuser and migrate jobs run only once and do not rebuild the image by default. When the backend updates, resources should focus on updating the backend pod itself.	2026-05-30 17:59:44 +02:00
lebaudantoine	6cbb3520ee	♻️(devx) align mature features and reorganize backend env variables Align enabled/disabled mature features across the dev environments. Also reorganize backend env variables with a clearer scope and add comments that help understand the responsibility of each setting and why it exists.	2026-05-30 17:59:44 +02:00
lebaudantoine	b2d6d33cc8	♻️(devx) factorize backend env variables across dev stacks Share the backend environment variables between the Dinum and Keycloak dev stacks to avoid duplication and keep them in sync.	2026-05-30 17:59:44 +02:00
lebaudantoine	cd19dea09e	♻️(devx) extract common components into a single YAML file Maintaining the two dev stacks is a nightmare. Start factorizing them to make sure they stay updated easily, and to highlight differences between the two at a glance.	2026-05-30 17:59:44 +02:00
lebaudantoine	0ecc25bc74	📝(doc) update external API docs for room configuration support Document the changes introduced in #128333, which allows passing configuration to the external API when creating a room. Warning: this documentation was generated in a rush using an LLM and may contain minor errors. Plan to factorize these YAML files into a common and shared structure.	2026-05-30 16:11:48 +02:00
lebaudantoine	7f817e2c0a	🧑‍💻(devx) revert securityContext on dev Tilt stack The securityContext and podSecurityContext were harming hot reloading on the dev stack. The file permission system prevented source updates because the user running the image was not root.	2026-05-30 14:55:55 +02:00
lebaudantoine	fc17c410ae	♻️(tilt) update Tiltfile to track uv dependency files The Tiltfile was not updated when switching to uv. Make sure dependencies are refreshed when uv.lock or pyproject.toml change.	2026-05-30 14:55:55 +02:00
rahul	f490b095d8	✨(backend) support config and access level in external API room creation Allow passing configuration and access level when creating a room through the external API. Also add a few guardrails: * control whether public rooms are accepted on the external API * set the default access level when creating a new room Ensure the new room configuration and access level are returned by the serializer when listing rooms.	2026-05-29 20:15:59 +02:00
ilias	04dfb9922f	✨(backend) add core.recording.event.parsers.S3Parser Implementation was validated against Ceph Object Store by @agasurfer. Event payload matches the one from AWS S3 docs.	2026-05-28 19:54:23 +02:00
Bastien Ogier	7d9f282c2e	🚀(paas) remove buildpack requirements.txt to use the new uv.lock (paas) remove buildpack requirements.txt to use the new uv.lock	2026-05-26 23:28:00 +02:00
				`@@ -0,0 +1 @@`
				`<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M280-280h280v-80H280v80Zm0-160h400v-80H280v80Zm0-160h400v-80H280v80Zm-80 480q-33 0-56.5-23.5T120-200v-560q0-33 23.5-56.5T200-840h560q33 0 56.5 23.5T840-760v560q0 33-23.5 56.5T760-120H200Zm0-80h560v-560H200v560Zm0-560v560-560Z"/></svg>`
				`@@ -0,0 +1 @@`
				<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="#1f1f1f"><path d="M325-111.5q-73-31.5-127.5-86t-86-127.5Q80-398 80-480.5t31.5-155q31.5-72.5 86-127t127.5-86Q398-880 480.5-880t155 31.5q72.5 31.5 127 86t86 127Q880-563 880-480.5T848.5-325q-31.5 73-86 127.5t-127 86Q563-80 480.5-80T325-111.5ZM480-162q26-36 45-75t31-83H404q12 44 31 83t45 75Zm-104-16q-18-33-31.5-68.5T322-320H204q29 50 72.5 87t99.5 55Zm208 0q56-18 99.5-55t72.5-87H638q-9 38-22.5 73.5T584-178ZM170-400h136q-3-20-4.5-39.5T300-480q0-21 1.5-40.5T306-560H170q-5 20-7.5 39.5T160-480q0 21 2.5 40.5T170-400Zm216 0h188q3-20 4.5-39.5T580-480q0-21-1.5-40.5T574-560H386q-3 20-4.5 39.5T380-480q0 21 1.5 40.5T386-400Zm268 0h136q5-20 7.5-39.5T800-480q0-21-2.5-40.5T790-560H654q3 20 4.5 39.5T660-480q0 21-1.5 40.5T654-400Zm-16-240h118q-29-50-72.5-87T584-782q18 33 31.5 68.5T638-640Zm-234 0h152q-12-44-31-83t-45-75q-26 36-45 75t-31 83Zm-200 0h118q9-38 22.5-73.5T376-782q-56 18-99.5 55T204-640Z"/></svg>
				`@@ -1 +0,0 @@`
				`export { Home as HomeRoute } from './routes/Home'`