👷(ci) update trivyignore

The trivy scan fails on HIGH vulnerability CVE-2026-119373
found in the Debian 13 base images. As it has no fixed version,
add an exception to trivyignore. Also add expiry date for all
exceptions.

.github/.trivyignore

@@ -2,19 +2,22 @@
 # Review regularly and remove entries once Debian ships a fix.
 
 # util-linux
-CVE-2026-76642
-CVE-2026-78408
-CVE-2026-78409
-CVE-2026-78410
+CVE-2026-76642 exp:2026-12-05
+CVE-2026-78408 exp:2026-12-05
+CVE-2026-78409 exp:2026-12-05
+CVE-2026-78410 exp:2026-12-05
 
 # acl
-CVE-2026-54369
+CVE-2026-54369 exp:2026-12-05
 
 # ncurses
-CVE-2025-69720
+CVE-2025-69720 exp:2026-12-05
 
 # systemd
-CVE-2026-16742
+CVE-2026-16742 exp:2026-12-05
 
 # perl-base (fix deferred by Debian)
-CVE-2026-9538
+CVE-2026-9538 exp:2026-12-05
+
+# libsqlite3-0 (fixed in sid 3.54.1-1; trixie marked no-dsa / minor)
+CVE-2026-119373 exp:2026-12-05

CHANGELOG.md

@@ -8,16 +8,32 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Added
+
+- ✨(frontend) add jittered exponential backoff to LiveKit reconnections
+- ✨(frontend) tell participants when a recording is interrupted
+
 ### Changed
 
-- ⬆️(summary) update ffmpeg to 8.1.3-r0
+- ⬆️(frontend) upgrade livekit-client to 2.23.0
+- ✨(backend) expose LiveKit reconnection settings in the config
+- ✨(backend) keep recordings cut short by LiveKit egress
+- ⬆️(dev) upgrade LiveKit server to v1.13.11 and egress to v1.15.0
 
 ### Fixed
 
-- 🔒️(summary) protect signed URLs in models, source logs and analytics metadata
-- 🔒️(summary) mask secret validation inputs and sanitize upstream and task errors
-- 🔒️(summary) scrub sensitive Sentry event and breadcrumb content while retaining
-  redacted frame locals and application DEBUG diagnostics
+- 🐛(frontend) show a page when the connection ends unexpectedly
+- 🐛(frontend) show the transcript mic hint when every mic is muted
+
+## [1.37.0] - 2026-11-01
+
+### Changed
+
+- ⬆️(summary) update ffmpeg to 8.1.3-r0
+- ✨(frontend) replace the Crisp chat with the La Suite support form
+- 🔒️(frontend) keep rooms out of search engine and AI indexes
+- ⬆️(backend) upgrade django-lasuite to v1.0.0
+- ⚡️(docker) build frontend assets natively for arm64 images
 
 ## [1.36.3] - 2026-10-23
 

UPGRADE.md

@@ -16,6 +16,30 @@ the following command inside your docker container:
 
 ## [Unreleased]
 
+## v1.37.0
+
+### Crisp support chat replaced by the La Suite support form
+
+The Crisp chat is gone, the support button, now open the La Suite support form. They are hidden unless these `FRONTEND_SUPPORT` keys are all set.
+The former help links for recording/transcription are now redirecting to the adhoc page in the official documentation
+
+### Pages hidden from search engines
+
+Every page except `/` now carries a `noindex` tag and, with the provided nginx configurations, an `X-Robots-Tag` header to stay out of search indexes.
+A new `robots.txt` also blocks the main AI crawlers. If you maintain your own nginx configuration, copy the `location = /` and `location = /home.html` blocks from `src/frontend/default.conf`, and the `X-Robots-Tag` header from its `location /`.
+
+### LiveKit server v1.13.11 and egress v1.15.0
+
+The development stack now runs LiveKit server v1.13.11 and LiveKit Egress v1.15.0. When upgrading your own deployment:
+
+- Deploy this release of Meet first, then upgrade egress, then the server. Older Meet releases discard the partial recordings described below.
+- Transcripts no longer go through Chrome. Since egress v1.13, audio-only recordings always use the egress SDK pipeline.
+- A transcript now waits for actual audio: it stays "starting", and participants are asked to turn on their microphone, while every microphone is muted.
+- Recordings cut short are now kept. Since egress v1.14, a transcript that lost the room, or any recording drained because its egress host ran out of CPU, still uploads what it recorded, even though egress may report it as failed. Meet saves and processes it as usual, and tells participants the recording was interrupted. A screen recording that loses the room is still reported as complete, and saved without a warning.
+- Telephony: since server v1.13.8, a call that matches no dispatch rule, for example while no room is active, is rejected with a SIP 404 instead of being silently dropped.
+
+## [v1.35.0]
+
 ### Purging deleted rooms
 
 Deleting a room now only soft deletes it: it is hidden but keeps its slug and PIN code. The `purge_inactive_rooms` command also permanently deletes soft-deleted rooms. See [the room purge documentation](docs/features/room-purge.md).

compose.yml

@@ -218,7 +218,7 @@ services:
       - kc_postgresql
 
   livekit:
-    image: livekit/livekit-server:v1.13.6
+    image: livekit/livekit-server:v1.13.11
     entrypoint: /livekit-server --dev --bind 0.0.0.0 --config ./config.yaml
     ports:
       - "7880:7880"
@@ -233,7 +233,7 @@ services:
       - livekit-egress
 
   livekit-egress:
-    image: livekit/egress:v1.11.0
+    image: livekit/egress:v1.15.0
     environment:
       EGRESS_CONFIG_FILE: ./livekit-egress.yaml
     volumes:

deploy/paas/servers.conf.erb

@@ -38,6 +38,17 @@ server {
       add_header Cache-Control "public, max-age=2592000";
   }
 
+  location = / {
+      try_files /home.html /index.html;
+      add_header Cache-Control "no-cache, no-store, must-revalidate";
+      add_header Pragma "no-cache";
+      add_header Expires 0;
+  }
+
+  location = /home.html {
+      internal;
+  }
+
   # Serve static files
   location / {
       try_files $uri $uri/ /index.html;
@@ -45,6 +56,7 @@ server {
       add_header Cache-Control "no-cache, no-store, must-revalidate";
       add_header Pragma "no-cache";  # HTTP 1.0 header for backward compatibility
       add_header Expires 0;
+      add_header X-Robots-Tag "noindex, nofollow" always;
   }
 
   # Optionally, handle 404 errors by redirecting to index.html

docker/dinum-frontend/Dockerfile

@@ -1,5 +1,5 @@
 # ---- Front-end image ----
-FROM node:22.23.4-alpine AS frontend-deps
+FROM --platform=$BUILDPLATFORM node:22.23.4-alpine AS frontend-deps
 
 RUN apk upgrade --no-cache ca-certificates
 
@@ -41,7 +41,7 @@ COPY ./docker/dinum-frontend/fonts/ \
     ./dist/assets/fonts/
 
 # ---- Addons builder image ----
-FROM node:22.23.4-alpine AS addons-builder
+FROM --platform=$BUILDPLATFORM node:22.23.4-alpine AS addons-builder
 
 RUN apk upgrade --no-cache ca-certificates
 
@@ -65,7 +65,8 @@ RUN apk upgrade --no-cache libexpat && \
     apk add --no-cache --upgrade 'pcre2>=10.49-r0' 'tiff>=4.7.2-r0' \
         'libx11>=1.8.14-r0' 'ca-certificates>=20261020-r0' \
         'brotli-libs>=1.2.1-r0' && \
-    apk del curl
+    apk del curl && \
+    rm -f /usr/share/nginx/html/50x.html
 USER nginx
 
 USER nginx

docker/dinum-frontend/nginx/default.conf

@@ -43,6 +43,7 @@ server {
       add_header Cache-Control "no-cache, no-store, must-revalidate";
       add_header Pragma "no-cache" always;
       add_header Expires 0 always;
+      add_header X-Robots-Tag "noindex, nofollow" always;
 
       set $ms_domains "https://*.live.com https://*.office.com https://*.microsoft.com https://*.office365.com https://*.sharepoint.com";
 
@@ -76,6 +77,17 @@ server {
       add_header Cache-Control "public, max-age=2592000";
   }
 
+  location = / {
+      try_files /home.html /index.html;
+      add_header Cache-Control "no-cache, no-store, must-revalidate";
+      add_header Pragma "no-cache";
+      add_header Expires 0;
+  }
+
+  location = /home.html {
+      internal;
+  }
+
   # Serve static files
   location / {
       try_files $uri $uri/ /index.html;
@@ -83,6 +95,7 @@ server {
       add_header Cache-Control "no-cache, no-store, must-revalidate";
       add_header Pragma "no-cache";  # HTTP 1.0 header for backward compatibility
       add_header Expires 0;
+      add_header X-Robots-Tag "noindex, nofollow" always;
   }
 
   # Optionally, handle 404 errors by redirecting to index.html

docker/livekit/Dockerfile

@@ -1,4 +1,4 @@
-FROM livekit/livekit-server:v1.13.6
+FROM livekit/livekit-server:v1.13.11
 
 # We inject the nip.io certificate manually because the livekit chart doesn't support volume mounting
 COPY rootCA.pem /etc/ssl/certs/

docker/livekit/config/livekit-egress.yaml

@@ -1,4 +1,5 @@
-log_level: debug
+logging:
+  level: debug
 api_key: devkey
 api_secret: secret
 ws_url: "ws://livekit:7880"

docs/developping_locally.md

@@ -37,7 +37,7 @@ $ make help
 ---
 
 ## Need Help?
-If you need any assistance or have questions while getting started, feel free to reach out to @lebaudantoine anytime! Antoine is available to help you onboard and guide you through the process. Chat with him @antoine.lebaud:matrix.org, or from the [support hotline](https://go.crisp.chat/chat/embed/?website_id=58ea6697-8eba-4492-bc59-ad6562585041).
+If you need any assistance or have questions while getting started, feel free to reach out to @lebaudantoine anytime! Antoine is available to help you onboard and guide you through the process. Chat with him @antoine.lebaud:matrix.org, or by email at [support-visio@numerique.gouv.fr](mailto:support-visio@numerique.gouv.fr).
 
 ---
 

docs/features/signaling.md

@@ -11,14 +11,23 @@ We do not cover internal signaling behavior. For full reference, see the [LiveKi
 > [!IMPORTANT]
 > The WebSocket is the backbone of LiveKit signaling. All signaling messages rely on it, and without it, ICE candidate exchange and peer connection setup cannot occur. If the WebSocket connection is lost, the client automatically attempts to resume the RTC session once connectivity is restored.
 
+## Reconnection
 
+When the WebSocket drops, for instance after a LiveKit node crash or during a Redis outage, every client in every room loses it at the same time. To keep them from all reconnecting at once, each client waits a random delay before every attempt. The first delay is at most `LIVEKIT_RECONNECT_BASE_DELAY_MS`. That ceiling then doubles after each failed attempt, capped at `LIVEKIT_RECONNECT_MAX_DELAY_MS`, and each later delay falls between half the ceiling and the ceiling. The first attempt always starts within 5 seconds of the drop.
+
+A client gives up once its reconnection has lasted longer than `LIVEKIT_RECONNECT_GIVE_UP_AFTER_MS`, and then shows a "connection lost" page. While only signaling is down and its media still flows, it keeps trying instead. A client that loses the connection again less than `LIVEKIT_RECONNECT_BACKOFF_RESET_MS` after reconnecting resumes the backoff one step above where it stopped.
 
 ## Environment Variables
 
-| Variable                                  | Type    | Default | Purpose                                                                                                                                                   |
-| ----------------------------------------- | ------- | ------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `LIVEKIT_FORCE_WSS_PROTOCOL`              | Boolean | `True`  | Forces the WebSocket URL to use `wss://`. Required for legacy browsers (Firefox <124, Chrome <125, Edge <125) where HTTPS URLs in `WebSocket()` may fail. |
-| `LIVEKIT_ENABLE_FIREFOX_PROXY_WORKAROUND` | Boolean | `True`  | Workaround for Firefox clients behind proxies that fail to establish WebSocket connections. Pre-establishes a dummy connection to “prime” the WebSocket.  |
+| Variable                                  | Type    | Default  | Purpose                                                                                                                                                   |
+| ----------------------------------------- | ------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `LIVEKIT_FORCE_WSS_PROTOCOL`              | Boolean | `False`  | Forces the WebSocket URL to use `wss://`. Required for legacy browsers (Firefox <124, Chrome <125, Edge <125) where HTTPS URLs in `WebSocket()` may fail. |
+| `LIVEKIT_ENABLE_FIREFOX_PROXY_WORKAROUND` | Boolean | `False`  | Workaround for Firefox clients behind proxies that fail to establish WebSocket connections. Pre-establishes a dummy connection to “prime” the WebSocket.  |
+| `LIVEKIT_RECONNECT_BACKOFF_ENABLED`       | Boolean | `True`   | Enables the reconnection backoff described above. When `False`, clients use LiveKit's default reconnection policy.                                        |
+| `LIVEKIT_RECONNECT_BASE_DELAY_MS`         | Integer | `1000`   | Longest wait before the first reconnection attempt, in milliseconds. It doubles after each failed attempt. Must be greater than 0.                        |
+| `LIVEKIT_RECONNECT_MAX_DELAY_MS`          | Integer | `10000`  | Longest wait between two reconnection attempts, in milliseconds. Must be greater than 0.                                                                  |
+| `LIVEKIT_RECONNECT_GIVE_UP_AFTER_MS`      | Integer | `180000` | How long a client keeps trying to reconnect, in milliseconds. Not applied while its media still flows. Must be greater than 0.                            |
+| `LIVEKIT_RECONNECT_BACKOFF_RESET_MS`      | Integer | `120000` | How long a connection must stay up, in milliseconds, for the next reconnection to start from the shortest delay again. With `0`, every reconnection does. |
 
 > [!NOTE]
 > Questions? Open an issue on [GitHub](https://github.com/suitenumerique/meet/issues/new?assignees=&labels=bug&template=Bug_report.md) or join our [Matrix community](https://matrix.to/#/#meet-official:matrix.org).

docs/installation/kubernetes.md

@@ -348,7 +348,7 @@ These are the environmental options available on meet backend.
 | CSRF_TRUSTED_ORIGINS                            | CSRF trusted origins list                                                                                                                                    | []                                                                                                                                                           |
 | FRONTEND_CUSTOM_CSS_URL                         | URL of an additional CSS file to load in the frontend app. If set, a `<link>` tag with this URL as href is added to the `<head>` of the frontend app         |                                                                                                                                                              |
 | FRONTEND_ANALYTICS                              | Analytics information                                                                                                                                        | {}                                                                                                                                                           |
-| FRONTEND_SUPPORT                                | Crisp frontend support configuration, also you can pass help articles, with `help_article_transcript`, `help_article_recording`, `help_article_more_tools`   | {}                                                                                                                                                           |
+| FRONTEND_SUPPORT                                | La Suite support form (`widget_script_url`, `widget_api_url`, `widget_channel`) and help articles (`help_article_*`)                                         | {}                                                                                                                                                           |
 | FRONTEND_MANIFEST_LINK                          | Link to the "Learn more" button on the homepage                                                                                                              | {}                                                                                                                                                           |
 | FRONTEND_SILENCE_LIVEKIT_DEBUG                  | Silence LiveKit debug logs                                                                                                                                   | false                                                                                                                                                        |
 | FRONTEND_IS_SILENT_LOGIN_ENABLED                | Enable silent login feature                                                                                                                                  | true                                                                                                                                                         |
@@ -413,6 +413,11 @@ These are the environmental options available on meet backend.
 | LIVEKIT_API_TIMEOUT_SECONDS                     | Seconds before a call to the LiveKit API gives up                                                                                                            | 10                                                                                                                                                           |
 | LIVEKIT_FORCE_WSS_PROTOCOL                      | Enables WSS protocol conversion for legacy browser compatibility (Firefox <124, Chrome <125, Edge <125) where HTTPS URLs fail in WebSocket() constructor.    | false                                                                                                                                                        |
 | LIVEKIT_ENABLE_FIREFOX_PROXY_WORKAROUND         | Firefox-only connection warmup: pre-calls WebSocket endpoint (expecting 401) to initialize cache, resolving proxy/network connectivity issues.               | false                                                                                                                                                        |
+| LIVEKIT_RECONNECT_BACKOFF_ENABLED               | Spread client reconnections with a random exponential backoff. When false, clients use LiveKit's default reconnection policy                                 | true                                                                                                                                                         |
+| LIVEKIT_RECONNECT_BASE_DELAY_MS                 | Longest wait before the first reconnection attempt, in milliseconds. It doubles after each failed attempt. Must be greater than 0                            | 1000                                                                                                                                                         |
+| LIVEKIT_RECONNECT_MAX_DELAY_MS                  | Longest wait between two reconnection attempts, in milliseconds. Must be greater than 0                                                                      | 10000                                                                                                                                                        |
+| LIVEKIT_RECONNECT_GIVE_UP_AFTER_MS              | How long a client keeps trying to reconnect, in milliseconds. Not applied while its media still flows. Must be greater than 0                                | 180000                                                                                                                                                       |
+| LIVEKIT_RECONNECT_BACKOFF_RESET_MS              | How long a connection must stay up, in milliseconds, for the next reconnection to start from the shortest delay again. With 0, every reconnection does       | 120000                                                                                                                                                       |
 | RESOURCE_DEFAULT_ACCESS_LEVEL                   | Default resource access level for rooms                                                                                                                      | public                                                                                                                                                       |
 | ALLOW_UNREGISTERED_ROOMS                        | Allow usage of unregistered rooms                                                                                                                            | true                                                                                                                                                         |
 | ROOM_INACTIVITY_DELETION_DAYS                   | Days without being started after which a room is purged. Unset to never purge                                                                                |                                                                                                                                                              |

src/addons/outlook/src/commands/commands.html

@@ -2,6 +2,7 @@
 <html lang="fr">
 <head>
     <meta charset="UTF-8" />
+    <meta name="robots" content="noindex, nofollow" />
     <title data-app-name></title>
     <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
     <script nonce="NONCE_PLACEHOLDER" src="https://appsforoffice.microsoft.com/lib/1/hosted/office.js"></script>

src/addons/outlook/src/success/success.html

@@ -4,6 +4,7 @@
     <meta charset="UTF-8" />
     <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta name="robots" content="noindex, nofollow" />
     <title data-app-name></title>
     <link rel="stylesheet" href="../styles/spinner.css" />
     <script nonce="NONCE_PLACEHOLDER" src="/addons/outlook/config.js"></script>

src/addons/outlook/src/taskpane/taskpane.html

@@ -4,6 +4,7 @@
     <meta charset="UTF-8" />
     <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
     <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta name="robots" content="noindex, nofollow" />
     <title data-app-name></title>
     <link rel="stylesheet" href="taskpane.css" />
     <script nonce="NONCE_PLACEHOLDER" src="/addons/outlook/config.js"></script>

src/addons/outlook/src/transit/transit.html

@@ -4,6 +4,7 @@
         <meta charset="UTF-8" />
         <meta http-equiv="X-UA-Compatible" content="IE=Edge" />
         <meta name="viewport" content="width=device-width, initial-scale=1">
+        <meta name="robots" content="noindex, nofollow" />
         <title data-app-name></title>
         <link rel="stylesheet" href="../styles/spinner.css" />
         <script nonce="NONCE_PLACEHOLDER" src="/addons/outlook/config.js"></script>

src/agents/pyproject.toml

@@ -1,7 +1,7 @@
 
 [project]
 name = "agents"
-version = "1.36.3"
+version = "1.37.0"
 requires-python = ">=3.12"
 dependencies = [
     "livekit-agents==1.7.0",

src/agents/uv.lock

@@ -9,7 +9,7 @@ resolution-markers = [
 
 [[package]]
 name = "agents"
-version = "1.36.3"
+version = "1.37.0"
 source = { virtual = "." }
 dependencies = [
     { name = "boto3" },

src/backend/core/api/__init__.py

@@ -86,6 +86,13 @@ def get_frontend_configuration(request):
             "enable_firefox_proxy_workaround": settings.LIVEKIT_ENABLE_FIREFOX_PROXY_WORKAROUND,
             "default_sources": settings.LIVEKIT_DEFAULT_SOURCES,
             "default_video_codec": settings.LIVEKIT_DEFAULT_VIDEO_CODEC,
+            "reconnect": {
+                "backoff_enabled": settings.LIVEKIT_RECONNECT_BACKOFF_ENABLED,
+                "base_delay_ms": settings.LIVEKIT_RECONNECT_BASE_DELAY_MS,
+                "max_delay_ms": settings.LIVEKIT_RECONNECT_MAX_DELAY_MS,
+                "give_up_after_ms": settings.LIVEKIT_RECONNECT_GIVE_UP_AFTER_MS,
+                "backoff_reset_ms": settings.LIVEKIT_RECONNECT_BACKOFF_RESET_MS,
+            },
         },
         "allow_unregistered_rooms": settings.ALLOW_UNREGISTERED_ROOMS,
         "authenticated_users_can_edit_display_name": (

src/backend/core/recording/enums.py

@@ -27,6 +27,9 @@ class RecordingWorkerEvent(Enum):
     COMPLETED = "completed"
     # The recording ended on its configured limit, its media file is available.
     LIMIT_REACHED = "limit reached"
+    # The recording ended early without being stopped, its partial media file
+    # is available.
+    INTERRUPTED = "interrupted"
     # The worker stopped before it ever started recording, there is no media file.
     ABORTED = "aborted"
     # The worker hit a runtime error once recording had started; its media file
@@ -44,6 +47,7 @@ SUCCESSFUL_EVENTS = frozenset(
     {
         RecordingWorkerEvent.COMPLETED,
         RecordingWorkerEvent.LIMIT_REACHED,
+        RecordingWorkerEvent.INTERRUPTED,
     }
 )
 

src/backend/core/recording/services/recording_events.py

@@ -33,6 +33,7 @@ NOTIFICATION_PREFIXES = {
 }
 NOTIFICATION_SUFFIXES = {
     RecordingWorkerEvent.LIMIT_REACHED: "LimitReached",
+    RecordingWorkerEvent.INTERRUPTED: "Interrupted",
     RecordingWorkerEvent.FAILED: "Failed",
     RecordingWorkerEvent.ABORTED: "Aborted",
 }
@@ -61,24 +62,29 @@ class RecordingEventsService:
     """
 
     @staticmethod
-    def log_worker_error(recording, event, error=None, error_code=None):
-        """Log FAILED at error level and expected ABORTED outcomes at info level."""
+    def log_worker_error(recording, event, error=None, error_code=None, details=None):
+        """Log FAILED at error level, INTERRUPTED at warning level and expected
+        ABORTED outcomes at info level."""
 
         if event == RecordingWorkerEvent.FAILED:
             log = logger.error
+        elif event == RecordingWorkerEvent.INTERRUPTED:
+            log = logger.warning
         elif event == RecordingWorkerEvent.ABORTED:
             log = logger.info
         else:
             return
 
         log(
-            "Recording worker reported %s for recording %s (room=%s, mode=%s): %s (error_code=%s)",
+            "Recording worker reported %s for recording %s (room=%s, mode=%s): %s "
+            "(error_code=%s, details=%s)",
             event.value,
             recording.id,
             recording.room.id,
             recording.mode,
             error or "no error reported",
             error_code or "no error_code reported",
+            details or "no details reported",
         )
 
     @staticmethod
@@ -196,6 +202,13 @@ class RecordingEventsService:
         ):
             self._apply_outcome(recording, event, self._handle_limit_reached)
 
+        # Interrupted
+        if (
+            event == RecordingWorkerEvent.INTERRUPTED
+            and recording.status == models.RecordingStatusChoices.ACTIVE
+        ):
+            self._apply_outcome(recording, event, self._handle_interrupted)
+
         try:
             self._handle_successful(recording)
         except RecordingNotSavableError:
@@ -224,6 +237,20 @@ class RecordingEventsService:
 
         cls._notify_participants(recording, RecordingWorkerEvent.LIMIT_REACHED)
 
+    @classmethod
+    def _handle_interrupted(cls, recording: Recording):
+        """Stop recording and notify participants that only part of it is saved.
+
+        INTERRUPTED: used when the worker ended the recording early on its own
+        because it lost the room or ran out of resources but kept what it had
+        recorded so far
+        """
+
+        recording.status = models.RecordingStatusChoices.STOPPED
+        recording.save()
+
+        cls._notify_participants(recording, RecordingWorkerEvent.INTERRUPTED)
+
     @classmethod
     def _handle_failed(cls, recording: Recording):
         """Set recording status to failed, matching the worker event, and notify participants.

src/backend/core/services/livekit_events.py

@@ -96,6 +96,9 @@ EGRESS_STATUS_TO_RECORDING_EVENT = {
     api.EgressStatus.EGRESS_FAILED: RecordingWorkerEvent.FAILED,
 }
 
+EGRESS_ROOM_CONNECTION_FAILED_ERROR = "recording ended early: connection to room failed"
+EGRESS_CPU_EXHAUSTED_DETAILS = "End reason: CPU exhausted"
+
 
 def to_recording_event(egress_status):
     """Translate a LiveKit egress status into a recording worker event."""
@@ -109,6 +112,34 @@ def to_recording_event(egress_status):
     return event
 
 
+def to_ended_recording_event(egress_info):
+    """Translate an ended LiveKit egress into a recording worker event.
+
+    This handles partial media file upload where an egress was interrupted
+    which can happen when:
+    - an transcription egress that lost its room connection uploads an audio file, then ends
+      FAILED with the EGRESS_ROOM_CONNECTION_FAILED_ERROR
+    - an egress drained because its host ran out of CPU which can transition to COMPLETE state
+      with EGRESS_CPU_EXHAUSTED_DETAILS or FAILED state if the drain outlasted its grace period
+      and the egress got killed, possibly before the upload.
+    """
+
+    status = egress_info.status
+    is_cut_short = (
+        egress_info.error == EGRESS_ROOM_CONNECTION_FAILED_ERROR
+        or egress_info.details == EGRESS_CPU_EXHAUSTED_DETAILS
+    )
+    has_uploaded_file = any(file.location for file in egress_info.file_results)
+
+    if is_cut_short and (
+        status == api.EgressStatus.EGRESS_COMPLETE
+        or (status == api.EgressStatus.EGRESS_FAILED and has_uploaded_file)
+    ):
+        return RecordingWorkerEvent.INTERRUPTED
+
+    return to_recording_event(status)
+
+
 class LiveKitEventsService:
     """Service for processing and handling LiveKit webhook events and notifications."""
 
@@ -221,7 +252,7 @@ class LiveKitEventsService:
                 f"Recording with worker ID {data.egress_info.egress_id} does not exist"
             ) from err
 
-        event = to_recording_event(data.egress_info.status)
+        event = to_ended_recording_event(data.egress_info)
         self._audit_recording_end(recording, event, data.egress_info.error_code)
 
         # Log if/why the recording failed
@@ -230,6 +261,7 @@ class LiveKitEventsService:
             event,
             error=data.egress_info.error,
             error_code=data.egress_info.error_code,
+            details=data.egress_info.details,
         )
 
         # Update room

src/backend/core/tests/recording/service/test_recording_events.py

@@ -50,6 +50,26 @@ def test_handle_limit_reached_success(mock_notify, mode, notification_type, serv
     )
 
 
+@pytest.mark.parametrize(
+    ("mode", "notification_type"),
+    (
+        ("screen_recording", "screenRecordingInterrupted"),
+        ("transcript", "transcriptionInterrupted"),
+    ),
+)
+@mock.patch("core.utils.notify_participants")
+def test_handle_interrupted_success(mock_notify, mode, notification_type, service):
+    """Test _handle_interrupted stops recording and notifies participants."""
+
+    recording = RecordingFactory(status="active", mode=mode)
+    service._handle_interrupted(recording)
+
+    assert recording.status == "stopped"
+    mock_notify.assert_called_once_with(
+        room_name=str(recording.room.id), notification_data={"type": notification_type}
+    )
+
+
 @pytest.mark.parametrize(
     ("mode", "notification_type"),
     (
@@ -222,6 +242,7 @@ def test_handle_update_syncs_room_metadata(
         RecordingWorkerEvent.STARTING,
         RecordingWorkerEvent.COMPLETED,
         RecordingWorkerEvent.LIMIT_REACHED,
+        RecordingWorkerEvent.INTERRUPTED,
         RecordingWorkerEvent.ABORTED,
         RecordingWorkerEvent.FAILED,
     ),
@@ -244,6 +265,10 @@ def test_handle_update_ignores_events_without_a_metadata_status(
         (RecordingWorkerEvent.LIMIT_REACHED, "active", "saved", "LimitReached"),
         (RecordingWorkerEvent.LIMIT_REACHED, "stopped", "saved", None),
         (RecordingWorkerEvent.LIMIT_REACHED, "saved", "saved", None),
+        (RecordingWorkerEvent.INTERRUPTED, "active", "saved", "Interrupted"),
+        (RecordingWorkerEvent.INTERRUPTED, "stopped", "saved", None),
+        (RecordingWorkerEvent.INTERRUPTED, "saved", "saved", None),
+        (RecordingWorkerEvent.INTERRUPTED, "failed_to_stop", "failed_to_stop", None),
         (RecordingWorkerEvent.ABORTED, "active", "aborted", "Aborted"),
         (RecordingWorkerEvent.ABORTED, "failed_to_stop", "failed_to_stop", None),
         (RecordingWorkerEvent.FAILED, "active", "failed", "Failed"),
@@ -321,6 +346,7 @@ def test_handle_terminal_event_ignores_non_terminal_events(
     ("event", "expected_status"),
     (
         (RecordingWorkerEvent.LIMIT_REACHED, "saved"),
+        (RecordingWorkerEvent.INTERRUPTED, "saved"),
         (RecordingWorkerEvent.ABORTED, "aborted"),
         (RecordingWorkerEvent.FAILED, "failed"),
     ),
@@ -407,6 +433,7 @@ def test_handle_update_survives_a_metadata_failure(
     ("event", "expected_level"),
     (
         (RecordingWorkerEvent.ABORTED, logging.INFO),
+        (RecordingWorkerEvent.INTERRUPTED, logging.WARNING),
         (RecordingWorkerEvent.FAILED, logging.ERROR),
     ),
 )
@@ -419,7 +446,11 @@ def test_log_worker_error_reports_an_unsuccessful_event(
 
     with caplog.at_level(logging.INFO):
         service.log_worker_error(
-            recording, event, error="could not connect to the room", error_code=500
+            recording,
+            event,
+            error="could not connect to the room",
+            error_code=500,
+            details="End reason: Failure",
         )
 
     assert (
@@ -428,6 +459,7 @@ def test_log_worker_error_reports_an_unsuccessful_event(
     )
     assert "could not connect to the room" in caplog.text
     assert "error_code=500" in caplog.text
+    assert "details=End reason: Failure" in caplog.text
     worker_logs = [
         record
         for record in caplog.records
@@ -448,7 +480,7 @@ def test_log_worker_error_reports_an_unsuccessful_event(
     ),
 )
 def test_log_worker_error_stays_quiet_on_anything_else(event, service, caplog):
-    """Test log_worker_error ignores events other than FAILED and ABORTED."""
+    """Test log_worker_error ignores events other than FAILED, INTERRUPTED and ABORTED."""
 
     recording = RecordingFactory(status="active")
 

src/backend/core/tests/rooms/test_api_rooms_webhook.py

@@ -8,9 +8,12 @@ import hashlib
 import json
 from unittest import mock
 
+from django.utils import timezone
+
 import pytest
 from livekit import api
 
+from ...factories import RecordingFactory
 from ...services.livekit_events import ActionFailedError, LiveKitEventsService
 
 
@@ -184,3 +187,75 @@ def test_action_error(client, mock_livekit_config):
             content_type="application/json",
             HTTP_AUTHORIZATION=auth_token,
         )
+
+
+@pytest.mark.django_db
+@mock.patch(
+    "core.recording.services.recording_events.notification_service."
+    "notify_external_services",
+    return_value=False,
+)
+@mock.patch("core.utils.notify_participants")
+@mock.patch("core.services.room_management.RoomManagement.update_metadata")
+def test_egress_ended_keeps_a_partial_transcript(
+    mock_update_metadata,
+    mock_notify,
+    mock_notify_external_services,
+    client,
+    mock_livekit_config,
+):
+    """Should save a transcript whose egress lost the room but uploaded its file.
+
+    LiveKit Egress v1.14 reports it as failed. The payload mirrors the one it
+    sends, including a field unknown to the pinned livekit-protocol, which
+    must be ignored rather than rejected.
+    """
+    recording = RecordingFactory(
+        worker_id="EG_hycBMAjmt6Ub", mode="transcript", status="active"
+    )
+    event_data = json.dumps(
+        {
+            "event": "egress_ended",
+            "egressInfo": {
+                "egressId": "EG_hycBMAjmt6Ub",
+                "roomId": "RM_hycBMAjmt6Ub",
+                "roomName": str(recording.room.id),
+                "status": "EGRESS_FAILED",
+                "error": "recording ended early: connection to room failed",
+                "errorCode": 503,
+                "details": "End reason: Source closed",
+                "fileResults": [
+                    {
+                        "filename": f"recordings/{recording.id}.ogg",
+                        "location": f"https://s3.example.com/recordings/{recording.id}.ogg",
+                        "size": "123456",
+                    }
+                ],
+            },
+            "id": "EV_eugWmGhovZmm",
+            "createdAt": str(int(timezone.now().timestamp())),
+        }
+    )
+    hash64 = base64.b64encode(hashlib.sha256(event_data.encode()).digest()).decode()
+    token = api.AccessToken(
+        mock_livekit_config["api_key"], mock_livekit_config["api_secret"]
+    )
+    token.claims.sha256 = hash64
+
+    response = client.post(
+        "/api/v1.0/rooms/webhooks-livekit/",
+        data=event_data,
+        content_type="application/json",
+        HTTP_AUTHORIZATION=token.to_jwt(),
+    )
+
+    assert response.status_code == 200
+    mock_notify.assert_called_once_with(
+        room_name=str(recording.room.id),
+        notification_data={"type": "transcriptionInterrupted"},
+    )
+    mock_notify_external_services.assert_called_once_with(recording)
+
+    recording.refresh_from_db()
+
+    assert recording.status == "saved"

src/backend/core/tests/services/test_livekit_events.py

@@ -1,7 +1,7 @@
 """
 Test LiveKitEvents service.
 """
-# pylint: disable=W0621,W0613, W0212, E0611, C0302
+# pylint: disable=W0621,W0613, W0212, E0611, E1101, C0302
 
 import logging
 import uuid
@@ -11,6 +11,7 @@ from unittest import mock
 from django.utils import timezone
 
 import pytest
+from faker import Faker
 from livekit.api import EgressStatus
 
 from core.audit.testing import find_events
@@ -19,12 +20,15 @@ from core.models import Room
 from core.recording.enums import RecordingWorkerEvent
 from core.recording.services.recording_events import RecordingEventsService
 from core.services.livekit_events import (
+    EGRESS_CPU_EXHAUSTED_DETAILS,
+    EGRESS_ROOM_CONNECTION_FAILED_ERROR,
     EGRESS_STATUS_TO_RECORDING_EVENT,
     ActionFailedError,
     AuthenticationError,
     InvalidPayloadError,
     LiveKitEventsService,
     api,
+    to_ended_recording_event,
     to_recording_event,
 )
 from core.services.lobby import LobbyService
@@ -39,6 +43,7 @@ from core.services.sip_management import (
 from core.utils import NotificationError
 
 pytestmark = pytest.mark.django_db
+fake = Faker()
 
 
 @pytest.fixture
@@ -494,6 +499,228 @@ def test_to_recording_event_returns_none_on_unmapped_status(caplog):
     assert "Unmapped LiveKit egress status" in caplog.text
 
 
+recording_filename = f"recordings/{fake.file_name(extension='ogg')}"
+
+UPLOADED_FILE = api.FileInfo(
+    filename=recording_filename,
+    location=f"https://storage.example.com/{recording_filename}",
+    size=1048576,
+)
+NOT_UPLOADED_FILE = api.FileInfo(filename=recording_filename)
+
+ROOM_CONNECTION_FAILED = {
+    "status": EgressStatus.EGRESS_FAILED,
+    "error": EGRESS_ROOM_CONNECTION_FAILED_ERROR,
+    "error_code": 503,
+    "details": "End reason: Source closed",
+}
+CPU_EXHAUSTED_DRAINED = {
+    "status": EgressStatus.EGRESS_COMPLETE,
+    "details": EGRESS_CPU_EXHAUSTED_DETAILS,
+}
+CPU_EXHAUSTED_KILLED = {
+    "status": EgressStatus.EGRESS_FAILED,
+    "error": "CPU exhausted: 8.5 cores used",
+    "error_code": 403,
+    "details": EGRESS_CPU_EXHAUSTED_DETAILS,
+}
+
+
+@pytest.mark.parametrize(
+    ("egress_info", "expected_event"),
+    (
+        (
+            api.EgressInfo(**ROOM_CONNECTION_FAILED, file_results=[UPLOADED_FILE]),
+            RecordingWorkerEvent.INTERRUPTED,
+        ),
+        (
+            api.EgressInfo(**ROOM_CONNECTION_FAILED, file_results=[NOT_UPLOADED_FILE]),
+            RecordingWorkerEvent.FAILED,
+        ),
+        (
+            api.EgressInfo(**CPU_EXHAUSTED_DRAINED, file_results=[UPLOADED_FILE]),
+            RecordingWorkerEvent.INTERRUPTED,
+        ),
+        (
+            api.EgressInfo(**CPU_EXHAUSTED_KILLED, file_results=[UPLOADED_FILE]),
+            RecordingWorkerEvent.INTERRUPTED,
+        ),
+        (
+            api.EgressInfo(**CPU_EXHAUSTED_KILLED, file_results=[NOT_UPLOADED_FILE]),
+            RecordingWorkerEvent.FAILED,
+        ),
+        # Other failures stay failures, even with an uploaded file.
+        (
+            api.EgressInfo(
+                status=EgressStatus.EGRESS_FAILED,
+                error="pipeline frozen",
+                error_code=500,
+                details="End reason: Source closed",
+                file_results=[UPLOADED_FILE],
+            ),
+            RecordingWorkerEvent.FAILED,
+        ),
+        (
+            api.EgressInfo(
+                status=EgressStatus.EGRESS_COMPLETE,
+                details="End reason: StopEgress API",
+                file_results=[UPLOADED_FILE],
+            ),
+            RecordingWorkerEvent.COMPLETED,
+        ),
+        (
+            api.EgressInfo(
+                status=EgressStatus.EGRESS_ABORTED,
+                error="Stop called before pipeline could start",
+                error_code=412,
+                details="End reason: StopEgress API",
+            ),
+            RecordingWorkerEvent.ABORTED,
+        ),
+        (
+            api.EgressInfo(
+                status=EgressStatus.EGRESS_LIMIT_REACHED,
+                error="Session limit reached",
+                error_code=413,
+                details="End reason: Session limit reached",
+                file_results=[UPLOADED_FILE],
+            ),
+            RecordingWorkerEvent.LIMIT_REACHED,
+        ),
+    ),
+)
+def test_to_ended_recording_event_translates_egress_info(egress_info, expected_event):
+    """Should tell an egress cut short with a partial file apart from the others."""
+
+    assert to_ended_recording_event(egress_info) == expected_event
+
+
+@pytest.mark.parametrize(
+    ("mode", "egress_info_kwargs", "notification_type"),
+    (
+        ("transcript", ROOM_CONNECTION_FAILED, "transcriptionInterrupted"),
+        ("transcript", CPU_EXHAUSTED_DRAINED, "transcriptionInterrupted"),
+        ("screen_recording", CPU_EXHAUSTED_DRAINED, "screenRecordingInterrupted"),
+        ("screen_recording", CPU_EXHAUSTED_KILLED, "screenRecordingInterrupted"),
+    ),
+)
+@mock.patch(
+    "core.recording.services.recording_events.notification_service."
+    "notify_external_services"
+)
+@mock.patch("core.utils.notify_participants")
+@mock.patch("core.services.room_management.RoomManagement.update_metadata")
+def test_handle_egress_ended_interrupted_saves_partial_recording(  # noqa: PLR0913, PLR0917
+    mock_update_metadata,
+    mock_notify,
+    mock_notify_external_services,
+    mode,
+    egress_info_kwargs,
+    notification_type,
+    service,
+    caplog,
+):  # pylint: disable=too-many-arguments,too-many-positional-arguments
+    """Should save an interrupted recording and tell participants it is partial."""
+
+    mock_notify_external_services.return_value = True
+
+    recording = RecordingFactory(worker_id="worker-1", mode=mode, status="active")
+    data = api.WebhookEvent(
+        event="egress_ended",
+        egress_info=api.EgressInfo(
+            egress_id=recording.worker_id,
+            file_results=[UPLOADED_FILE],
+            **egress_info_kwargs,
+        ),
+    )
+
+    with caplog.at_level(logging.WARNING):
+        service._handle_egress_ended(data)
+
+    mock_notify.assert_called_once_with(
+        room_name=str(recording.room.id), notification_data={"type": notification_type}
+    )
+    mock_notify_external_services.assert_called_once_with(recording)
+    mock_update_metadata.assert_called_once_with(
+        str(recording.room.id), remove_keys=["recording_mode", "recording_status"]
+    )
+    assert (
+        f"Recording worker reported interrupted for recording {recording.id}"
+        in caplog.text
+    )
+
+    recording.refresh_from_db()
+
+    assert recording.status == "notification_succeeded"
+
+
+@mock.patch(
+    "core.recording.services.recording_events.notification_service."
+    "notify_external_services"
+)
+@mock.patch("core.utils.notify_participants")
+@mock.patch("core.services.room_management.RoomManagement.update_metadata")
+def test_handle_egress_ended_interrupted_after_stop_does_not_notify_participants(
+    mock_update_metadata, mock_notify, mock_notify_external_services, service
+):
+    """Shouldn't notify participants about a recording they already stopped."""
+
+    mock_notify_external_services.return_value = False
+
+    recording = RecordingFactory(worker_id="worker-1", status="stopped")
+    data = api.WebhookEvent(
+        event="egress_ended",
+        egress_info=api.EgressInfo(
+            egress_id=recording.worker_id,
+            file_results=[UPLOADED_FILE],
+            **CPU_EXHAUSTED_DRAINED,
+        ),
+    )
+
+    service._handle_egress_ended(data)
+
+    mock_notify.assert_not_called()
+    mock_notify_external_services.assert_called_once_with(recording)
+
+    recording.refresh_from_db()
+
+    assert recording.status == "saved"
+
+
+@mock.patch("core.utils.notify_participants")
+@mock.patch("core.services.room_management.RoomManagement.update_metadata")
+def test_handle_egress_ended_failed_on_another_error_discards_recording(
+    mock_update_metadata, mock_notify, service
+):
+    """Should still flag as failed an egress that failed for another reason."""
+
+    recording = RecordingFactory(
+        worker_id="worker-1", mode="transcript", status="active"
+    )
+    data = api.WebhookEvent(
+        event="egress_ended",
+        egress_info=api.EgressInfo(
+            egress_id=recording.worker_id,
+            status=EgressStatus.EGRESS_FAILED,
+            error="pipeline frozen",
+            error_code=500,
+            details="End reason: Source closed",
+            file_results=[UPLOADED_FILE],
+        ),
+    )
+
+    service._handle_egress_ended(data)
+
+    mock_notify.assert_called_once_with(
+        room_name=str(recording.room.id),
+        notification_data={"type": "transcriptionFailed"},
+    )
+
+    recording.refresh_from_db()
+
+    assert recording.status == "failed"
+
+
 @mock.patch("core.services.room_management.RoomManagement.update_metadata")
 def test_handle_egress_updated_ignores_unmapped_status(mock_update_metadata, service):
     """Shouldn't touch the room's metadata when the egress status is unknown."""

src/backend/core/tests/test_api_config_retrieve.py

@@ -0,0 +1,40 @@
+"""Test the LiveKit reconnection settings exposed by the config endpoint."""
+
+import pytest
+from rest_framework.test import APIClient
+
+pytestmark = pytest.mark.django_db
+
+
+def test_api_config_retrieve_livekit_reconnect_defaults():
+    """Without any override, the frontend gets the default backoff."""
+    response = APIClient().get("/api/v1.0/config/")
+
+    assert response.status_code == 200
+    assert response.json()["livekit"]["reconnect"] == {
+        "backoff_enabled": True,
+        "base_delay_ms": 1000,
+        "max_delay_ms": 10000,
+        "give_up_after_ms": 180000,
+        "backoff_reset_ms": 120000,
+    }
+
+
+def test_api_config_retrieve_livekit_reconnect_settings(settings):
+    """Each reconnection setting reaches the frontend unchanged."""
+    settings.LIVEKIT_RECONNECT_BACKOFF_ENABLED = False
+    settings.LIVEKIT_RECONNECT_BASE_DELAY_MS = 500
+    settings.LIVEKIT_RECONNECT_MAX_DELAY_MS = 30000
+    settings.LIVEKIT_RECONNECT_GIVE_UP_AFTER_MS = 600000
+    settings.LIVEKIT_RECONNECT_BACKOFF_RESET_MS = 60000
+
+    response = APIClient().get("/api/v1.0/config/")
+
+    assert response.status_code == 200
+    assert response.json()["livekit"]["reconnect"] == {
+        "backoff_enabled": False,
+        "base_delay_ms": 500,
+        "max_delay_ms": 30000,
+        "give_up_after_ms": 600000,
+        "backoff_reset_ms": 60000,
+    }

src/backend/core/tests/test_external_api_rooms.py

@@ -184,7 +184,7 @@ def test_api_rooms_list_with_application_disabled(mock_rs_authenticate, settings
 
 @responses.activate
 def test_api_rooms_list_with_invalid_rs_token(settings):
-    """Listing rooms with invalid resource server token should return 400."""
+    """Listing rooms with invalid resource server token should return 401."""
 
     settings.OIDC_OP_INTROSPECTION_ENDPOINT = "https://oidc.example.com/introspect"
     settings.OIDC_OP_URL = "https://oidc.example.com"
@@ -202,9 +202,8 @@ def test_api_rooms_list_with_invalid_rs_token(settings):
     client.credentials(HTTP_AUTHORIZATION="Bearer invalid-token-123")
     response = client.get("/external-api/v1.0/rooms/")
 
-    # Return 400 instead of 401 because ResourceServerAuthentication raises
-    # SuspiciousOperation when the introspected user is not active
-    assert response.status_code == 400
+    assert response.status_code == 401
+    assert "introspected user is not active" in str(response.data).lower()
 
 
 def test_api_rooms_list_missing_scope():
@@ -422,7 +421,7 @@ def test_api_rooms_retrieve_with_expired_token(settings):
 
 @responses.activate
 def test_api_rooms_retrieve_with_invalid_rs_token(settings):
-    """Retrieving rooms with invalid resource server token should return 400."""
+    """Retrieving rooms with invalid resource server token should return 401."""
 
     settings.OIDC_OP_INTROSPECTION_ENDPOINT = "https://oidc.example.com/introspect"
     settings.OIDC_OP_URL = "https://oidc.example.com"
@@ -443,9 +442,8 @@ def test_api_rooms_retrieve_with_invalid_rs_token(settings):
     client.credentials(HTTP_AUTHORIZATION="Bearer invalid-token-123")
     response = client.get(f"/external-api/v1.0/rooms/{room.id}/")
 
-    # Return 400 instead of 401 because ResourceServerAuthentication raises
-    # SuspiciousOperation when the introspected user is not active
-    assert response.status_code == 400
+    assert response.status_code == 401
+    assert "introspected user is not active" in str(response.data).lower()
 
 
 def test_api_rooms_retrieve_requires_scope():
@@ -647,7 +645,7 @@ def test_api_rooms_create_with_expired_token(settings):
 
 @responses.activate
 def test_api_rooms_create_with_invalid_rs_token(settings):
-    """Creating rooms with invalid resource server token should return 400."""
+    """Creating rooms with invalid resource server token should return 401."""
 
     settings.OIDC_OP_INTROSPECTION_ENDPOINT = "https://oidc.example.com/introspect"
     settings.OIDC_OP_URL = "https://oidc.example.com"
@@ -665,9 +663,8 @@ def test_api_rooms_create_with_invalid_rs_token(settings):
     client.credentials(HTTP_AUTHORIZATION="Bearer invalid-token-123")
     response = client.post("/external-api/v1.0/rooms/")
 
-    # Return 400 instead of 401 because ResourceServerAuthentication raises
-    # SuspiciousOperation when the introspected user is not active
-    assert response.status_code == 400
+    assert response.status_code == 401
+    assert "introspected user is not active" in str(response.data).lower()
 
 
 def test_api_rooms_create_inactive_user():
@@ -2971,6 +2968,36 @@ def test_api_rooms_missing_token_is_audited_as_denial(audit_events):
     assert event["url"]["path"] == "/external-api/v1.0/rooms/"
 
 
+@responses.activate
+def test_api_rooms_invalid_rs_token_is_audited_as_denial(audit_events, settings):
+    """A token refused by the identity provider is recorded as a denial."""
+    settings.OIDC_OP_INTROSPECTION_ENDPOINT = "https://oidc.example.com/introspect"
+    settings.OIDC_OP_URL = "https://oidc.example.com"
+
+    responses.add(
+        responses.POST,
+        "https://oidc.example.com/introspect",
+        json={"iss": "https://oidc.example.com", "active": False},
+    )
+
+    client = APIClient()
+    client.credentials(HTTP_AUTHORIZATION="Bearer invalid-token-123")
+    response = client.get("/external-api/v1.0/rooms/")
+
+    assert response.status_code == 401
+    assert response.headers["WWW-Authenticate"] == "Bearer"
+    responses.assert_call_count("https://oidc.example.com/introspect", 1)
+
+    [event] = find_events(audit_events, "room.list")
+
+    assert event["event"]["category"] == ["api", "authentication"]
+    assert event["event"]["reason"] == "authentication_failed"
+    assert event["lasuite"]["outcome"] == "denied"
+    assert event["lasuite"]["actor"] == {"type": "anonymous"}
+    assert event["http"]["response"] == {"status_code": 401}
+    assert event["error"]["message"] == response.json()["detail"]
+
+
 def test_api_rooms_missing_scope_is_audited_as_denial(audit_events):
     """A token without the required scope is a permission denial by the application."""
     user = UserFactory()

src/backend/core/tests/test_settings_livekit_reconnect.py

@@ -0,0 +1,24 @@
+"""Unit tests for the value of the LiveKit reconnection delay settings."""
+
+import pytest
+
+from meet.settings import StrictlyPositiveIntegerValue
+
+
+@pytest.mark.parametrize("raw,expected", [("1", 1), (" 15000 ", 15000)])
+def test_strictly_positive_integer_value_parses(raw, expected):
+    """A delay above 0 is read as an integer."""
+    assert StrictlyPositiveIntegerValue(environ=False).to_python(raw) == expected
+
+
+def test_strictly_positive_integer_value_rejects_zero():
+    """0 stops the settings module loading, unlike with PositiveIntegerValue."""
+    with pytest.raises(ValueError, match="greater than 0"):
+        StrictlyPositiveIntegerValue(environ=False).to_python("0")
+
+
+@pytest.mark.parametrize("raw", ["-1", "1e3", "1000ms", ""])
+def test_strictly_positive_integer_value_rejects_invalid(raw):
+    """A negative or non-integer value stops the settings module loading."""
+    with pytest.raises(ValueError):
+        StrictlyPositiveIntegerValue(environ=False).to_python(raw)

src/backend/meet/settings.py

@@ -68,6 +68,17 @@ class VideoCodecValue(values.Value):
         return codec
 
 
+class StrictlyPositiveIntegerValue(values.PositiveIntegerValue):
+    """An integer greater than 0"""
+
+    def to_python(self, value):
+        """Ensure the integer is greater than 0."""
+        int_value = super().to_python(value)
+        if int_value == 0:
+            raise ValueError(f"Expected an integer greater than 0, got {value!r}.")
+        return int_value
+
+
 class ResolutionSpec(BaseModel):
     """An value of RECORDING_ENCODING_AVAILABLE_RESOLUTIONS."""
 
@@ -787,6 +798,28 @@ class Base(Configuration):
     LIVEKIT_DEFAULT_VIDEO_CODEC = VideoCodecValue(
         "vp9", environ_name="LIVEKIT_DEFAULT_VIDEO_CODEC", environ_prefix=None
     )
+    # Livekit websocket reconnection exponential backoff config sent to the frontend.
+    # Before its first reconnection attempt, a client waits a random delay up to the base
+    # delay. That ceiling doubles after every failed attempt, capped at the max delay, and
+    # later delays fall between half the ceiling and the ceiling.
+    # It gives up after the give-up delay unless the media still flows.
+    # After a successful reconnection, a new disconnection starting sooner than the reset
+    # delay after the last one resumes the backoff one step above where that one stopped.
+    LIVEKIT_RECONNECT_BACKOFF_ENABLED = values.BooleanValue(
+        True, environ_name="LIVEKIT_RECONNECT_BACKOFF_ENABLED", environ_prefix=None
+    )
+    LIVEKIT_RECONNECT_BASE_DELAY_MS = StrictlyPositiveIntegerValue(
+        1000, environ_name="LIVEKIT_RECONNECT_BASE_DELAY_MS", environ_prefix=None
+    )
+    LIVEKIT_RECONNECT_MAX_DELAY_MS = StrictlyPositiveIntegerValue(
+        10000, environ_name="LIVEKIT_RECONNECT_MAX_DELAY_MS", environ_prefix=None
+    )
+    LIVEKIT_RECONNECT_GIVE_UP_AFTER_MS = StrictlyPositiveIntegerValue(
+        180000, environ_name="LIVEKIT_RECONNECT_GIVE_UP_AFTER_MS", environ_prefix=None
+    )
+    LIVEKIT_RECONNECT_BACKOFF_RESET_MS = values.PositiveIntegerValue(
+        120000, environ_name="LIVEKIT_RECONNECT_BACKOFF_RESET_MS", environ_prefix=None
+    )
     CONNECTION_TEST_ENABLED = values.BooleanValue(
         environ_name="CONNECTION_TEST_ENABLED",
         environ_prefix=None,

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "uv_build"
 
 [project]
 name = "meet"
-version = "1.36.3"
+version = "1.37.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
@@ -33,7 +33,7 @@ dependencies = [
     "django-cors-headers==4.9.0",
     "django-countries==9.0.0",
     "django-filter==26.1",
-    "django-lasuite[all]==0.0.29",
+    "django-lasuite[all]==1.0.0",
     "django-parler==2.4",
     "redis==5.2.1",
     "django-redis==7.0.0",

src/backend/uv.lock

@@ -837,26 +837,28 @@ wheels = [
 
 [[package]]
 name = "django-lasuite"
-version = "0.0.29"
+version = "1.0.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "django" },
-    { name = "djangorestframework" },
-    { name = "joserfc" },
-    { name = "mozilla-django-oidc" },
-    { name = "pyjwt" },
-    { name = "requests" },
-    { name = "requests-toolbelt" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/f4/ab/72a79b7133fb2d17835bef40f45f7e6d2b4343469c37fd00386122e9068d/django_lasuite-0.0.29.tar.gz", hash = "sha256:831cb859e45e33963c9d89168c2de14f9844e805000b0f0d1512ffd0b9731a39", size = 35248, upload-time = "2026-08-25T13:03:43.597Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/0f/cc/35335b826b039c43da68a0e624e154f60c3ac6c83f01f9b4ad6ce91faf03/django_lasuite-1.0.0.tar.gz", hash = "sha256:8921aaba5a78f1f9728cee2cc4596755478108f17146d4a2fccb393c043a05a3", size = 45815, upload-time = "2026-10-30T14:57:31.764Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/a1/cf/86648643221816f18ebd5a3e59b6d2a85ee85b38b19c7abe939f798a2845/django_lasuite-0.0.29-py3-none-any.whl", hash = "sha256:33bcff90ced2709190ef01241badb17ceed08a32725b9cdd3105650b36da303b", size = 54899, upload-time = "2026-08-25T13:03:42.212Z" },
+    { url = "https://files.pythonhosted.org/packages/a4/6f/d1df3f2881cda711e569b8e685ad3a846ca9c71226340597cee1c09beae0/django_lasuite-1.0.0-py3-none-any.whl", hash = "sha256:23d589be9496b1f484772b49f3c4c4a81e70affd537e3c50abf15303c84d7cb0", size = 68529, upload-time = "2026-10-30T14:57:30.416Z" },
 ]
 
 [package.optional-dependencies]
 all = [
     { name = "celery" },
+    { name = "cryptography" },
     { name = "django-configurations" },
+    { name = "djangorestframework" },
+    { name = "joserfc" },
+    { name = "mozilla-django-oidc" },
+    { name = "pyjwt" },
+    { name = "python-icap" },
+    { name = "requests" },
+    { name = "requests-toolbelt" },
 ]
 
 [[package]]
@@ -1358,7 +1360,7 @@ wheels = [
 
 [[package]]
 name = "meet"
-version = "1.36.3"
+version = "1.37.0"
 source = { editable = "." }
 dependencies = [
     { name = "aiohttp" },
@@ -1440,7 +1442,7 @@ requires-dist = [
     { name = "django-cors-headers", specifier = "==4.9.0" },
     { name = "django-countries", specifier = "==9.0.0" },
     { name = "django-filter", specifier = "==26.1" },
-    { name = "django-lasuite", extras = ["all"], specifier = "==0.0.29" },
+    { name = "django-lasuite", extras = ["all"], specifier = "==1.0.0" },
     { name = "django-parler", specifier = "==2.4" },
     { name = "django-pydantic-field", specifier = "==0.5.4" },
     { name = "django-redis", specifier = "==7.0.0" },
@@ -2258,6 +2260,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/a6/a3/17c284b4f4d8ad50f0f9ba70ad8fcc35c777aeafcdbbffdd91bbdc5ab379/python_frontmatter-1.3.0-py3-none-any.whl", hash = "sha256:9f7dd9260bec99044219159a329f64f039087f9d1a2124c9442556f2fe6f82ec", size = 10562, upload-time = "2026-05-20T19:21:43.323Z" },
 ]
 
+[[package]]
+name = "python-icap"
+version = "0.2.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/5c/0a/123c30f4041eabb94c587d35fb64aa9498435d028a8577340a4e5adc5224/python_icap-0.2.0.tar.gz", hash = "sha256:627869ac29119074542de6ae95370914854fdb35ee0a13c8ae4c55847cfcb80e", size = 684516, upload-time = "2026-07-08T22:21:58.842Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/d8/f2/b437a5e08b94dfc4cd8505cfc3e63922247e9ce3957707550ab08c514560/python_icap-0.2.0-py3-none-any.whl", hash = "sha256:b648d55b68abe387849a124d1b4a443801342a566afd2141f4515953ed4bd738", size = 70680, upload-time = "2026-07-08T22:21:57.307Z" },
+]
+
 [[package]]
 name = "python-magic"
 version = "0.4.27"

src/frontend/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:22.23.4-alpine AS frontend-deps
+FROM --platform=$BUILDPLATFORM node:22.23.4-alpine AS frontend-deps
 
 RUN apk upgrade --no-cache ca-certificates
 
@@ -54,7 +54,8 @@ RUN apk upgrade --no-cache libexpat && \
     apk add --no-cache --upgrade 'pcre2>=10.49-r0' 'tiff>=4.7.2-r0' \
         'libx11>=1.8.14-r0' 'ca-certificates>=20261020-r0' \
         'brotli-libs>=1.2.1-r0' && \
-    apk del curl
+    apk del curl && \
+    rm -f /usr/share/nginx/html/50x.html
 USER nginx
 
 # Un-privileged user running the application

src/frontend/default.conf

@@ -16,6 +16,17 @@ server {
       add_header Cache-Control "public, max-age=2592000";
   }
 
+  location = / {
+      try_files /home.html /index.html;
+      add_header Cache-Control "no-cache, no-store, must-revalidate";
+      add_header Pragma "no-cache";
+      add_header Expires 0;
+  }
+
+  location = /home.html {
+      internal;
+  }
+
   # Serve static files
   location / {
       try_files $uri $uri/ /index.html;
@@ -23,6 +34,7 @@ server {
       add_header Cache-Control "no-cache, no-store, must-revalidate";
       add_header Pragma "no-cache";  # HTTP 1.0 header for backward compatibility
       add_header Expires 0;
+      add_header X-Robots-Tag "noindex, nofollow" always;
   }
 
   # Optionally, handle 404 errors by redirecting to index.html

src/frontend/index.html

@@ -7,6 +7,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
     <link rel="manifest" href="/site.webmanifest">
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="robots" content="noindex, nofollow" />
     <title>%VITE_APP_TITLE%</title>
   </head>
   <body>

src/frontend/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "meet",
-  "version": "1.36.3",
+  "version": "1.37.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "meet",
-      "version": "1.36.3",
+      "version": "1.37.0",
       "dependencies": {
         "@fontsource-variable/atkinson-hyperlegible-next": "5.3.0",
         "@fontsource-variable/lexend": "5.3.0",
@@ -21,14 +21,13 @@
         "@remixicon/react": "4.9.0",
         "@tanstack/react-query": "5.101.4",
         "@timephy/rnnoise-wasm": "1.0.0",
-        "crisp-sdk-web": "1.1.2",
         "hoofd": "1.7.3",
         "humanize-duration": "3.34.1",
         "i18next": "26.3.6",
         "i18next-browser-languagedetector": "8.2.1",
         "i18next-parser": "9.4.0",
         "i18next-resources-to-backend": "1.2.3",
-        "livekit-client": "2.21.0",
+        "livekit-client": "2.23.0",
         "posthog-js": "1.418.10",
         "react": "18.3.1",
         "react-aria": "3.51.0",
@@ -1028,9 +1027,9 @@
       "license": "Apache-2.0"
     },
     "node_modules/@livekit/protocol": {
-      "version": "1.50.4",
-      "resolved": "https://registry.npmjs.org/@livekit/protocol/-/protocol-1.50.4.tgz",
-      "integrity": "sha512-L1uggNQAqyY21smQY8AllyOYbcv9Me9TaxwuLytL1R8ck9nbYPmQLNwEDi3pOFGAMa5F8I2nUi2Jc59W5awxlA==",
+      "version": "1.52.1",
+      "resolved": "https://registry.npmjs.org/@livekit/protocol/-/protocol-1.52.1.tgz",
+      "integrity": "sha512-X8DxKlNbzk6Lh+v630+mjdFHSotdAFwIyzxSRSUql2DbTxCnlpa7JsvFGc6Na3mXiex2OFh0iiQtWwOBP0rIYA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@bufbuild/protobuf": "^1.10.0"
@@ -4563,12 +4562,6 @@
         }
       }
     },
-    "node_modules/crisp-sdk-web": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/crisp-sdk-web/-/crisp-sdk-web-1.1.2.tgz",
-      "integrity": "sha512-qxSpiT4EGHnVEO6J/t1UURY6fg1ojgquLU0IIr7RNjZxXZs1R2e6AhAiFqxiGZ13Vb4o5VoUpATFU2TzX/ppOQ==",
-      "license": "MIT"
-    },
     "node_modules/cross-spawn": {
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -8235,16 +8228,17 @@
       "license": "MIT"
     },
     "node_modules/livekit-client": {
-      "version": "2.21.0",
-      "resolved": "https://registry.npmjs.org/livekit-client/-/livekit-client-2.21.0.tgz",
-      "integrity": "sha512-RBUhPkV/sl1nzl8lokVlK5uATPwn0AlsudCBZXissw/kDl9yz8ac4pNJ43iPpMVoHOeBYH/BZ3vUC1adqa/zFQ==",
+      "version": "2.23.0",
+      "resolved": "https://registry.npmjs.org/livekit-client/-/livekit-client-2.23.0.tgz",
+      "integrity": "sha512-j9Kg86nJjBjNFUD+ukp2jwMCGa0k+YD5gU//RzAM+ZY3pbG631QCte7fQjwqWMmtBzhDJL9nKYuOLMv/9IbAxg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@livekit/mutex": "1.1.1",
-        "@livekit/protocol": "1.50.4",
+        "@livekit/protocol": "1.52.1",
         "events": "^3.3.0",
         "jose": "^6.1.0",
         "loglevel": "^1.9.2",
+        "machina": "^7.0.0",
         "sdp-transform": "^2.15.0",
         "tslib": "2.8.1",
         "typed-emitter": "^2.1.0",
@@ -8353,6 +8347,15 @@
         "yallist": "^3.0.2"
       }
     },
+    "node_modules/machina": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/machina/-/machina-7.0.1.tgz",
+      "integrity": "sha512-0Xkgs8NeBvO2hW6bjJT8ewLWrMfh1haMPstaghpASWjXkLjRhtDiaJG1Kb7mslaOHxZYxpH7PIjpmirRVYbMMA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=22.22"
+      }
+    },
     "node_modules/magic-string": {
       "version": "0.30.21",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",

src/frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "meet",
   "private": true,
-  "version": "1.36.3",
+  "version": "1.37.0",
   "type": "module",
   "scripts": {
     "dev": "panda codegen && vite",
@@ -29,14 +29,13 @@
     "@remixicon/react": "4.9.0",
     "@tanstack/react-query": "5.101.4",
     "@timephy/rnnoise-wasm": "1.0.0",
-    "crisp-sdk-web": "1.1.2",
     "hoofd": "1.7.3",
     "humanize-duration": "3.34.1",
     "i18next": "26.3.6",
     "i18next-browser-languagedetector": "8.2.1",
     "i18next-parser": "9.4.0",
     "i18next-resources-to-backend": "1.2.3",
-    "livekit-client": "2.21.0",
+    "livekit-client": "2.23.0",
     "posthog-js": "1.418.10",
     "react": "18.3.1",
     "react-aria": "3.51.0",

src/frontend/public/robots.txt

@@ -0,0 +1,18 @@
+User-agent: GPTBot
+User-agent: OAI-SearchBot
+User-agent: ChatGPT-User
+User-agent: ClaudeBot
+User-agent: Claude-SearchBot
+User-agent: Claude-User
+User-agent: PerplexityBot
+User-agent: Perplexity-User
+User-agent: Google-Extended
+User-agent: Applebot-Extended
+User-agent: CCBot
+User-agent: Meta-ExternalAgent
+User-agent: Amazonbot
+User-agent: Bytespider
+Disallow: /
+
+User-agent: *
+Allow: /

src/frontend/src/api/useConfig.ts

@@ -13,7 +13,9 @@ export interface ApiConfig {
     flags_api_host?: string
   }
   support?: {
-    id: string
+    widget_script_url?: string
+    widget_api_url?: string
+    widget_channel?: string
     help_article_transcript: string
     help_article_recording: string
     help_article_more_tools: string
@@ -73,6 +75,13 @@ export interface ApiConfig {
     enable_firefox_proxy_workaround: boolean
     default_sources: Source[]
     default_video_codec: VideoCodec
+    reconnect?: {
+      backoff_enabled: boolean
+      base_delay_ms: number
+      max_delay_ms: number
+      give_up_after_ms: number
+      backoff_reset_ms: number
+    }
   }
   transcription_destination?: string
   max_participants_for_sound: number

src/frontend/src/components/AppInitialization.tsx

@@ -1,6 +1,5 @@
 import { useConfig } from '@/api/useConfig'
 import { useAnalytics } from '@/features/analytics/hooks/useAnalytics'
-import { useSupport } from '@/features/support/hooks/useSupport'
 import { useSyncUserPreferencesWithBackend } from '@/features/auth/api/useSyncUserPreferencesWithBackend'
 import { useEffect } from 'react'
 
@@ -8,10 +7,9 @@ export const AppInitialization = () => {
   const { data } = useConfig()
   useSyncUserPreferencesWithBackend()
 
-  const { analytics = {}, support = {}, custom_css_url = '' } = data ?? {}
+  const { analytics = {}, custom_css_url = '' } = data ?? {}
 
   useAnalytics(analytics)
-  useSupport(support)
 
   useEffect(() => {
     if (custom_css_url) {

src/frontend/src/features/analytics/exceptionFilters.ts

@@ -2,12 +2,6 @@ import type { CaptureResult } from 'posthog-js'
 
 const IGNORED_EXCEPTION_PATTERNS = [
   /ResizeObserver loop (completed with undelivered notifications|limit exceeded)/,
-  // livekit-client leaks the raw WebSocket error Event as an unhandled
-  // rejection when the signal ws errors after connect (Firefox-heavy,
-  // coincides with signal reconnects). Carries zero diagnostic content —
-  // the close reason is already logged by the SDK.
-  // See: https://github.com/livekit/client-sdk-js/issues/2062
-  /^Event captured as exception with keys: isTrusted$/,
 ]
 
 const shouldIgnoreException = (value: unknown): boolean =>

src/frontend/src/features/analytics/telemetry.ts

@@ -32,6 +32,7 @@ export type LogCode =
   | 'fullscreen_failure'
   | 'publish_sources_failure'
   | 'disconnect_failure'
+  | 'support_widget_failure'
   | 'generic_failure'
 
 export const reportError = (

src/frontend/src/features/auth/utils/logout.ts

@@ -1,5 +1,4 @@
 import { apiUrl } from '@/api/apiUrl'
-import { terminateSupportSession } from '@/features/support/hooks/useSupport'
 import { terminateAnalyticsSession } from '@/features/analytics/hooks/useAnalytics'
 
 const logoutUrl = () => {
@@ -8,6 +7,5 @@ const logoutUrl = () => {
 
 export const logout = async () => {
   await terminateAnalyticsSession()
-  terminateSupportSession()
   window.location.href = logoutUrl()
 }

src/frontend/src/features/notifications/MainNotificationToast.tsx

@@ -96,6 +96,8 @@ export const MainNotificationToast = () => {
         case NotificationType.ScreenRecordingStopped:
         case NotificationType.TranscriptionLimitReached:
         case NotificationType.ScreenRecordingLimitReached:
+        case NotificationType.TranscriptionInterrupted:
+        case NotificationType.ScreenRecordingInterrupted:
         case NotificationType.TranscriptionFailed:
         case NotificationType.ScreenRecordingFailed:
         case NotificationType.TranscriptionAborted:

src/frontend/src/features/notifications/NotificationType.ts

@@ -10,6 +10,7 @@ export enum NotificationType {
   TranscriptionStarted = 'transcriptionStarted',
   TranscriptionStopped = 'transcriptionStopped',
   TranscriptionLimitReached = 'transcriptionLimitReached',
+  TranscriptionInterrupted = 'transcriptionInterrupted',
   TranscriptionFailed = 'transcriptionFailed',
   TranscriptionAborted = 'transcriptionAborted',
   TranscriptionRequested = 'transcriptionRequested',
@@ -17,6 +18,7 @@ export enum NotificationType {
   ScreenRecordingStopped = 'screenRecordingStopped',
   ScreenRecordingRequested = 'screenRecordingRequested',
   ScreenRecordingLimitReached = 'screenRecordingLimitReached',
+  ScreenRecordingInterrupted = 'screenRecordingInterrupted',
   ScreenRecordingFailed = 'screenRecordingFailed',
   ScreenRecordingAborted = 'screenRecordingAborted',
   RecordingSaving = 'recordingSaving',

src/frontend/src/features/notifications/components/ToastAnyRecording.tsx

@@ -22,6 +22,8 @@ export function ToastAnyRecording({ state, ...props }: Readonly<ToastProps>) {
         return 'transcript.stopped'
       case NotificationType.TranscriptionLimitReached:
         return 'transcript.limitReached'
+      case NotificationType.TranscriptionInterrupted:
+        return 'transcript.interrupted'
       case NotificationType.TranscriptionFailed:
         return 'transcript.failed'
       case NotificationType.TranscriptionAborted:
@@ -32,6 +34,8 @@ export function ToastAnyRecording({ state, ...props }: Readonly<ToastProps>) {
         return 'screenRecording.stopped'
       case NotificationType.ScreenRecordingLimitReached:
         return 'screenRecording.limitReached'
+      case NotificationType.ScreenRecordingInterrupted:
+        return 'screenRecording.interrupted'
       case NotificationType.ScreenRecordingFailed:
         return 'screenRecording.failed'
       case NotificationType.ScreenRecordingAborted:

src/frontend/src/features/notifications/components/ToastRegion.tsx

@@ -58,6 +58,8 @@ const renderToast = (
     case NotificationType.ScreenRecordingStarted:
     case NotificationType.ScreenRecordingStopped:
     case NotificationType.ScreenRecordingLimitReached:
+    case NotificationType.TranscriptionInterrupted:
+    case NotificationType.ScreenRecordingInterrupted:
     case NotificationType.TranscriptionFailed:
     case NotificationType.ScreenRecordingFailed:
     case NotificationType.TranscriptionAborted:

src/frontend/src/features/recording/hooks/useRecordingWaitingForTracks.ts

@@ -12,6 +12,10 @@ export const useRecordingWaitingForTracks = (mode: RecordingMode) => {
     mode === RecordingMode.Transcript ? [Track.Source.Microphone] : undefined,
     { onlySubscribed: false }
   )
+  const hasTracks =
+    mode === RecordingMode.Transcript
+      ? tracks.some((track) => !track.publication.isMuted)
+      : tracks.length > 0
   const [delayElapsed, setDelayElapsed] = useState(false)
 
   useEffect(() => {
@@ -25,5 +29,5 @@ export const useRecordingWaitingForTracks = (mode: RecordingMode) => {
     return () => window.clearTimeout(timeout)
   }, [isStarting, mode])
 
-  return isStarting && delayElapsed && tracks.length === 0
+  return isStarting && delayElapsed && !hasTracks
 }

src/frontend/src/features/rooms/components/Conference.tsx

@@ -10,7 +10,6 @@ import {
   ConnectionErrorReason,
   DisconnectReason,
   MediaDeviceFailure,
-  Room,
   type RoomOptions,
   VideoPresets,
 } from 'livekit-client'
@@ -46,6 +45,26 @@ import { WatchMediaDeviceErrors } from './WatchMediaDeviceErrors'
 import { MeetDevtools } from '@/features/devtools'
 import { VOICE_AUDIO_CONSTRAINTS } from '@/features/rooms/livekit/utils/constants'
 import { resolveAudioOutputDeviceId } from '@/features/rooms/utils/resolveAudioOutputDeviceId'
+import { ConnectionEndReason } from '@/features/rooms/utils/connectionEndReason'
+import { createLiveKitRoom } from '@/features/rooms/livekit/utils/reconnectPolicy'
+
+const handleError = (e: Error) => {
+  const failure = getMediaDeviceFailure(e)
+  if (failure && failure !== MediaDeviceFailure.Other) return
+
+  // connect() was aborted by a disconnect() before the join completed
+  if (
+    e instanceof ConnectionError &&
+    e.reason === ConnectionErrorReason.Cancelled
+  ) {
+    void captureEvent('connection-cancelled')
+    return
+  }
+
+  reportError('livekit_room_error', e, {
+    path: 'connect_publish',
+  })
+}
 
 export const Conference = ({
   roomId,
@@ -136,7 +155,11 @@ export const Conference = ({
     apiConfig?.livekit.default_video_codec,
   ])
 
-  const room = useMemo(() => new Room(roomOptions), [roomOptions])
+  const reconnect = apiConfig?.livekit.reconnect
+  const room = useMemo(
+    () => createLiveKitRoom(roomOptions, reconnect),
+    [roomOptions, reconnect]
+  )
 
   useEffect(() => {
     /**
@@ -186,6 +209,7 @@ export const Conference = ({
   const isMobile = useIsMobile()
 
   const hasAutoMutedRef = useRef(false)
+  const hasConnectedRef = useRef(false)
 
   /*
    * Ensure stable WebSocket connection URL. This is critical for legacy browser compatibility
@@ -248,24 +272,9 @@ export const Conference = ({
           className={css({
             backgroundColor: 'primaryDark.50 !important',
           })}
-          onError={(e) => {
-            const failure = getMediaDeviceFailure(e)
-            if (failure && failure !== MediaDeviceFailure.Other) return
-
-            // connect() was aborted by a disconnect() before the join completed
-            if (
-              e instanceof ConnectionError &&
-              e.reason === ConnectionErrorReason.Cancelled
-            ) {
-              void captureEvent('connection-cancelled')
-              return
-            }
-
-            reportError('livekit_room_error', e, {
-              path: 'connect_publish',
-            })
-          }}
+          onError={handleError}
           onConnected={async () => {
+            hasConnectedRef.current = true
             if (!apiConfig) return
             if (
               userPreferencesSnap.is_auto_mute_large_room_enabled &&
@@ -307,6 +316,20 @@ export const Conference = ({
                   }
                 )
                 return
+              default:
+                // Reconnecting gave up, or the join itself failed
+                navigateTo(
+                  'feedback',
+                  {},
+                  {
+                    state: {
+                      reason: hasConnectedRef.current
+                        ? ConnectionEndReason.Lost
+                        : ConnectionEndReason.Failed,
+                      ...metadata,
+                    },
+                  }
+                )
             }
           }}
         >

src/frontend/src/features/rooms/livekit/components/ConnectionObserver.tsx

@@ -1,17 +1,29 @@
 import { useConfig } from '@/api/useConfig'
 import { useIsAnalyticsEnabled } from '@/features/analytics/hooks/useIsAnalyticsEnabled'
 import {
+  useConnectionState,
   useRemoteParticipants,
   useRoomContext,
 } from '@livekit/components-react'
 import { useEffect, useRef } from 'react'
 import { useSnapshot } from 'valtio'
-import { DisconnectReason, RoomEvent } from 'livekit-client'
+import {
+  ConnectionState,
+  DisconnectReason,
+  type Room,
+  RoomEvent,
+} from 'livekit-client'
 
 import { userPreferencesStore } from '@/stores/userPreferences'
 
 import { captureEvent, captureMediaEvent } from '@/features/analytics/telemetry'
 import { connectionObserverStore } from '@/stores/connectionObserver'
+import { BackoffReconnectPolicy } from '@/features/rooms/livekit/utils/reconnectPolicy'
+
+const getBackoffPolicy = (room: Room) => {
+  const policy = room.options.reconnectPolicy
+  return policy instanceof BackoffReconnectPolicy ? policy : undefined
+}
 
 export const ConnectionObserver = () => {
   const room = useRoomContext()
@@ -31,6 +43,7 @@ export const ConnectionObserver = () => {
       RoomEvent.ParticipantDisconnected,
     ],
   })
+  const connectionState = useConnectionState(room)
 
   useEffect(() => {
     // Always clear existing timer on dependency change
@@ -48,6 +61,10 @@ export const ConnectionObserver = () => {
       return
     }
 
+    // A full reconnection removes every remote participant until it
+    // succeeds: being alone then doesn't mean being idle
+    if (connectionState !== ConnectionState.Connected) return
+
     if (remoteParticipants.length === 0) {
       idleDisconnectModalTimeoutRef.current = setTimeout(() => {
         connectionObserverStore.isIdleDisconnectModalOpen = true
@@ -64,6 +81,7 @@ export const ConnectionObserver = () => {
     }
   }, [
     remoteParticipants.length,
+    connectionState,
     data?.idle_disconnect_warning_delay,
     userPreferencesSnap.is_idle_disconnect_modal_enabled,
   ])
@@ -89,11 +107,13 @@ export const ConnectionObserver = () => {
     }
 
     const handleReconnected = async () => {
+      const durationMs = getBackoffPolicy(room)?.lastReconnectionDurationMs
       const participantSid = room.localParticipant.sid
       const roomSid = await room.getSid().catch(() => undefined)
       captureEvent('reconnected-event', {
         livekit_room_sid: roomSid,
         livekit_participant_sid: participantSid,
+        durationMs,
       })
     }
 
@@ -116,9 +136,12 @@ export const ConnectionObserver = () => {
         sessionDuration: connectionStartTimeRef.current
           ? connectionEndTime - connectionStartTimeRef.current
           : -1,
-        reason: disconnectReason
-          ? DisconnectReason[disconnectReason]
-          : 'UNKNOWN',
+        // LiveKit reports no reason when the reconnect policy gives up
+        reason: getBackoffPolicy(room)?.gaveUp
+          ? 'RECONNECT_GAVE_UP'
+          : disconnectReason
+            ? DisconnectReason[disconnectReason]
+            : 'UNKNOWN',
       })
     }
 

src/frontend/src/features/rooms/livekit/components/controls/Options/SupportMenuItem.tsx

@@ -2,23 +2,18 @@ import { RiQuestionLine } from '@remixicon/react'
 import { MenuItem } from 'react-aria-components'
 import { useTranslation } from 'react-i18next'
 import { menuRecipe } from '@/primitives/menuRecipe'
-import {
-  useIsSupportEnabled,
-  openSupportChat,
-} from '@/features/support/hooks/useSupport'
+import { useSupportWidget } from '@/features/support/hooks/useSupportWidget'
 
 export const SupportMenuItem = () => {
   const { t } = useTranslation('rooms', { keyPrefix: 'options.items' })
-  const isSupportEnabled = useIsSupportEnabled()
+  const { isEnabled, open } = useSupportWidget()
 
-  if (!isSupportEnabled) {
-    return
-  }
+  if (!isEnabled) return
 
   return (
     <MenuItem
       className={menuRecipe({ icon: true, variant: 'dark' }).item}
-      onAction={openSupportChat}
+      onAction={open}
     >
       <RiQuestionLine size={20} />
       {t('support')}

src/frontend/src/features/rooms/livekit/utils/reconnectPolicy.test.ts

@@ -0,0 +1,273 @@
+import { ConnectionState, RoomEvent, type Room } from 'livekit-client'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import {
+  BackoffReconnectPolicy,
+  createLiveKitRoom,
+  MAX_FIRST_DELAY_MS,
+} from './reconnectPolicy'
+
+const CONFIG = {
+  backoff_enabled: true,
+  base_delay_ms: 1_000,
+  max_delay_ms: 15_000,
+  give_up_after_ms: 300_000,
+  backoff_reset_ms: 120_000,
+}
+
+const createRoom = () => {
+  const listeners = new Map<RoomEvent, Array<(...args: unknown[]) => void>>()
+  const room = {
+    on(event: RoomEvent, listener: (...args: unknown[]) => void) {
+      listeners.set(event, [...(listeners.get(event) ?? []), listener])
+      return room
+    },
+    emit(event: RoomEvent, ...args: unknown[]) {
+      listeners.get(event)?.forEach((listener) => listener(...args))
+    },
+    setState(state: ConnectionState, event?: RoomEvent) {
+      room.emit(RoomEvent.ConnectionStateChanged, state)
+      if (event) room.emit(event)
+    },
+  }
+  return room
+}
+
+const setup = ({ config = CONFIG, random = 0.5 } = {}) => {
+  const clock = { now: 0 }
+
+  vi.spyOn(Math, 'random').mockReturnValue(random)
+  vi.spyOn(performance, 'now').mockImplementation(() => clock.now)
+
+  const room = createRoom()
+  const policy = new BackoffReconnectPolicy(config)
+  policy.attach(room as unknown as Room)
+
+  const delay = (retryCount: number, elapsedMs = 0) =>
+    policy.nextRetryDelayInMs({ retryCount, elapsedMs })
+
+  return { clock, room, policy, delay }
+}
+
+afterEach(() => {
+  vi.restoreAllMocks()
+})
+
+describe('BackoffReconnectPolicy', () => {
+  it('doubles the delay ceiling after each failed attempt, up to the cap', () => {
+    const { delay } = setup()
+
+    expect([0, 1, 2, 3, 4, 10].map((retryCount) => delay(retryCount))).toEqual([
+      500, 1_500, 3_000, 6_000, 11_250, 11_250,
+    ])
+  })
+
+  it('draws the first delay anywhere below its ceiling (check two extremes)', () => {
+    expect(setup({ random: 0 }).delay(0)).toBe(0)
+    expect(setup({ random: 0.9999 }).delay(0)).toBe(999)
+  })
+
+  it('draws the next delays between half their ceiling and their ceiling (check two extremes)', () => {
+    expect(setup({ random: 0 }).delay(3)).toBe(4_000)
+    expect(setup({ random: 0.9999 }).delay(3)).toBe(7_999)
+  })
+
+  it('keeps the first delay of a reconnection under 5 s', () => {
+    const config = { ...CONFIG, base_delay_ms: 8_000 }
+    const { delay } = setup({ config, random: 0.9999 })
+
+    expect(delay(0)).toBeLessThan(MAX_FIRST_DELAY_MS)
+    expect(delay(1)).toBe(14_999)
+  })
+
+  it('starts the first attempt within 5 s of the drop', () => {
+    const config = { ...CONFIG, base_delay_ms: 8_000 }
+    const { clock, delay } = setup({ config })
+    expect(delay(0)).toBe(2_500)
+
+    clock.now = 4_000
+    expect(delay(0)).toBe(500)
+
+    clock.now = 6_000
+    expect(delay(0)).toBe(0)
+  })
+
+  it('never steps the backoff down within a reconnection', () => {
+    const { delay } = setup()
+
+    expect(delay(3)).toBe(6_000)
+    expect(delay(0)).toBe(6_000)
+  })
+
+  it('ignores the elapsed time reported by LiveKit', () => {
+    const { delay } = setup()
+
+    expect(delay(1, Date.now())).toBe(1_500)
+  })
+
+  it('picks up the backoff of a reconnection that ended shortly before', () => {
+    const { clock, room, delay } = setup()
+    delay(0)
+    delay(1)
+    delay(2)
+    room.emit(RoomEvent.Reconnected)
+
+    clock.now += 60_000
+    // One step above where the last reconnection ended (capped)
+    expect(delay(0)).toBe(2_500)
+    expect(delay(1)).toBe(11_250)
+  })
+
+  it('starts the backoff over once the connection held for the reset delay', () => {
+    const { clock, room, delay } = setup()
+    delay(0)
+    delay(1)
+    delay(2)
+    room.emit(RoomEvent.Reconnected)
+
+    clock.now += 120_000
+
+    expect(delay(0)).toBe(500)
+  })
+
+  it('gives up once the reconnection lasts longer than the give-up delay', () => {
+    const { clock, room, policy, delay } = setup()
+    delay(0)
+    room.setState(ConnectionState.Reconnecting, RoomEvent.Reconnecting)
+
+    clock.now = 299_999
+
+    expect(delay(20)).toBe(11_250)
+    expect(policy.gaveUp).toBe(false)
+
+    clock.now = 300_000
+
+    expect(delay(21)).toBeNull()
+    expect(policy.gaveUp).toBe(true)
+  })
+
+  it('keeps trying while only signaling is down', () => {
+    const { clock, room, policy, delay } = setup()
+    delay(0)
+    room.setState(
+      ConnectionState.SignalReconnecting,
+      RoomEvent.SignalReconnecting
+    )
+
+    clock.now = 600_000
+
+    expect(delay(40)).toBe(11_250)
+    expect(policy.gaveUp).toBe(false)
+
+    // The media connection failed as well
+    room.setState(ConnectionState.Reconnecting, RoomEvent.Reconnecting)
+
+    expect(delay(41)).toBeNull()
+    expect(policy.gaveUp).toBe(true)
+  })
+
+  it('gives up once the media connection failed, even back to resuming', () => {
+    const { clock, room, policy, delay } = setup()
+    delay(0)
+    room.setState(
+      ConnectionState.SignalReconnecting,
+      RoomEvent.SignalReconnecting
+    )
+    delay(1)
+
+    // The peer connections fail, then LiveKit tries to resume again
+    clock.now = 30_000
+    room.setState(ConnectionState.Reconnecting, RoomEvent.Reconnecting)
+    room.setState(
+      ConnectionState.SignalReconnecting,
+      RoomEvent.SignalReconnecting
+    )
+
+    clock.now = 299_999
+
+    expect(delay(20)).toBe(11_250)
+    expect(policy.gaveUp).toBe(false)
+
+    clock.now = 300_000
+
+    expect(delay(21)).toBeNull()
+    expect(policy.gaveUp).toBe(true)
+  })
+
+  it('starts a new reconnection once the room connects again', () => {
+    const { clock, room, policy, delay } = setup()
+    delay(0)
+    room.setState(ConnectionState.Reconnecting, RoomEvent.Reconnecting)
+    clock.now = 300_000
+
+    expect(delay(21)).toBeNull()
+
+    room.setState(ConnectionState.Disconnected, RoomEvent.Disconnected)
+    expect(policy.gaveUp).toBe(true)
+
+    room.setState(ConnectionState.Connecting)
+    room.setState(ConnectionState.Connected, RoomEvent.Connected)
+    expect(policy.gaveUp).toBe(false)
+
+    clock.now += 600_000
+
+    expect(delay(0)).toBe(500)
+
+    // The media connection of the previous reconnection is not lost anymore
+    room.setState(
+      ConnectionState.SignalReconnecting,
+      RoomEvent.SignalReconnecting
+    )
+    clock.now += 300_000
+
+    expect(delay(20)).toBe(11_250)
+  })
+
+  it('starts over when a new join replaces the reconnection', () => {
+    const { clock, room, policy, delay } = setup()
+    delay(0)
+    delay(3)
+    room.setState(ConnectionState.Reconnecting, RoomEvent.Reconnecting)
+
+    // LiveKitRoom calls room.connect() again in the middle of the reconnection
+    clock.now = 400_000
+    room.setState(ConnectionState.Connecting)
+
+    expect(delay(0)).toBe(500)
+    expect(policy.gaveUp).toBe(false)
+  })
+
+  it('reports how long a reconnection lasted, once', () => {
+    const { clock, room, policy, delay } = setup()
+    clock.now = 1_000
+    delay(0)
+
+    clock.now = 4_000
+    room.emit(RoomEvent.Reconnected)
+    expect(policy.lastReconnectionDurationMs).toBe(3_000)
+
+    // LiveKit can emit Reconnected several times for one recovery
+    room.emit(RoomEvent.Reconnected)
+    expect(policy.lastReconnectionDurationMs).toBeUndefined()
+  })
+})
+
+describe('createLiveKitRoom', () => {
+  it('builds the policy from the config endpoint values', () => {
+    vi.spyOn(Math, 'random').mockReturnValue(0.5)
+
+    const { reconnectPolicy } = createLiveKitRoom({}, CONFIG).options
+
+    expect(reconnectPolicy).toBeInstanceOf(BackoffReconnectPolicy)
+    expect(
+      reconnectPolicy.nextRetryDelayInMs({ retryCount: 2, elapsedMs: 0 })
+    ).toBe(3_000)
+  })
+
+  it('keeps the default policy when the backoff is missing or disabled', () => {
+    for (const config of [undefined, { ...CONFIG, backoff_enabled: false }]) {
+      expect(
+        createLiveKitRoom({}, config).options.reconnectPolicy
+      ).not.toBeInstanceOf(BackoffReconnectPolicy)
+    }
+  })
+})

src/frontend/src/features/rooms/livekit/utils/reconnectPolicy.ts

@@ -0,0 +1,146 @@
+import {
+  ConnectionState,
+  Room,
+  RoomEvent,
+  type ReconnectContext,
+  type ReconnectPolicy,
+  type RoomOptions,
+} from 'livekit-client'
+import type { ApiConfig } from '@/api/useConfig'
+
+/**
+ * Until the first attempt of a reconnection starts, the room still reports
+ * Connected and LiveKit keeps checking its transport for a while.
+ * Around 10s after the initial drop, it will try a full websocket reconnection.
+ * Hence, the first attempt should start well before that.
+ */
+export const MAX_FIRST_DELAY_MS = 5_000
+
+type ReconnectConfig = NonNullable<ApiConfig['livekit']['reconnect']>
+
+type Reconnection = {
+  startedAt: number
+  // Higher than 0 when the previous reconnection ended shortly before
+  firstStep: number
+  failedAttempts: number
+  isMediaLost: boolean
+  gaveUp: boolean
+}
+
+/**
+ * When a LiveKit node crashes or Redis stalls, every client loses its signal
+ * connection at the same time. This policy implements an exponential backoff
+ * with some randomness to spread the reconnections out.
+ *
+ * The policy keeps its own clock since LiveKit calls the policy again on every
+ * new disconnection trigger
+ */
+export class BackoffReconnectPolicy implements ReconnectPolicy {
+  lastReconnectionDurationMs: number | undefined
+  private readonly config: ReconnectConfig
+  private reconnection: Reconnection | undefined
+  private lastRecovery: { at: number; step: number } | undefined
+
+  constructor(config: ReconnectConfig) {
+    this.config = config
+  }
+
+  attach(room: Room) {
+    room.on(RoomEvent.Connected, this.handleRecovery)
+    room.on(RoomEvent.Reconnected, this.handleRecovery)
+    room.on(RoomEvent.Reconnecting, this.handleMediaLost)
+    room.on(RoomEvent.ConnectionStateChanged, this.handleStateChange)
+  }
+
+  get gaveUp() {
+    return this.reconnection?.gaveUp ?? false
+  }
+
+  nextRetryDelayInMs({ retryCount }: ReconnectContext): number | null {
+    const now = performance.now()
+    this.reconnection ??= this.startReconnection(now)
+    const reconnection = this.reconnection
+
+    reconnection.failedAttempts = Math.max(
+      reconnection.failedAttempts,
+      retryCount
+    )
+
+    if (
+      now - reconnection.startedAt >= this.config.give_up_after_ms &&
+      reconnection.isMediaLost
+    ) {
+      reconnection.gaveUp = true
+      return null
+    }
+
+    const ceiling = Math.min(
+      this.config.max_delay_ms,
+      this.config.base_delay_ms *
+        2 ** (reconnection.firstStep + reconnection.failedAttempts)
+    )
+
+    if (reconnection.failedAttempts === 0) {
+      // LiveKit re-arms its timer on each trigger: count from the first drop
+      const timeLeft = reconnection.startedAt + MAX_FIRST_DELAY_MS - now
+      return Math.floor(
+        Math.random() * Math.min(ceiling, Math.max(timeLeft, 0))
+      )
+    }
+    return Math.floor((ceiling / 2) * (1 + Math.random()))
+  }
+
+  private startReconnection(now: number): Reconnection {
+    const recovery = this.lastRecovery
+
+    const isLastDisconnectionRecent =
+      recovery !== undefined && now - recovery.at < this.config.backoff_reset_ms
+
+    return {
+      startedAt: now,
+      firstStep: isLastDisconnectionRecent ? recovery.step + 1 : 0,
+      failedAttempts: 0,
+      isMediaLost: false,
+      gaveUp: false,
+    }
+  }
+
+  private handleMediaLost = () => {
+    this.reconnection ??= this.startReconnection(performance.now())
+    this.reconnection.isMediaLost = true
+  }
+
+  private handleStateChange = (state: ConnectionState) => {
+    if (state === ConnectionState.Connecting) this.reconnection = undefined
+  }
+
+  private handleRecovery = () => {
+    const now = performance.now()
+    if (this.reconnection) {
+      const { startedAt, firstStep, failedAttempts } = this.reconnection
+      this.lastRecovery = { at: now, step: firstStep + failedAttempts }
+      this.lastReconnectionDurationMs = now - startedAt
+      this.reconnection = undefined
+    } else {
+      // LiveKit can emit Reconnected several times for a full reconnection
+      // We want to avoid duplicating the reconnection duration in PostHog
+      this.lastReconnectionDurationMs = undefined
+    }
+  }
+}
+
+/**
+ * Build a room with the reconnection policy from the config endpoint.
+ * Without it, the room keeps the LiveKit default policy
+ */
+export const createLiveKitRoom = (
+  options: RoomOptions,
+  config?: ReconnectConfig
+): Room => {
+  if (!config?.backoff_enabled) return new Room(options)
+
+  const reconnectPolicy = new BackoffReconnectPolicy(config)
+  const room = new Room({ ...options, reconnectPolicy })
+  reconnectPolicy.attach(room)
+  return room
+}

src/frontend/src/features/rooms/routes/Feedback.tsx

@@ -7,6 +7,7 @@ import { Rating } from '@/features/rooms/components/Rating.tsx'
 import { useLocation } from 'wouter'
 import { useMemo } from 'react'
 import { DisconnectReason } from 'livekit-client'
+import { ConnectionEndReason } from '@/features/rooms/utils/connectionEndReason'
 
 // fixme - duplicated with home, refactor in a proper style
 const Heading = styled('h1', {
@@ -32,6 +33,8 @@ enum DisconnectReasonKey {
   DuplicateIdentity = 'duplicateIdentity',
   ParticipantRemoved = 'participantRemoved',
   RoomDeleted = 'roomDeleted',
+  ConnectionLost = 'connectionLost',
+  ConnectionFailed = 'connectionFailed',
 }
 
 const FeedbackRoute = () => {
@@ -49,6 +52,10 @@ const FeedbackRoute = () => {
         return DisconnectReasonKey.ParticipantRemoved
       case DisconnectReason.ROOM_DELETED:
         return DisconnectReasonKey.RoomDeleted
+      case ConnectionEndReason.Lost:
+        return DisconnectReasonKey.ConnectionLost
+      case ConnectionEndReason.Failed:
+        return DisconnectReasonKey.ConnectionFailed
     }
   }, [])
 
@@ -91,7 +98,9 @@ const FeedbackRoute = () => {
               {t('feedback.home')}
             </Button>
           </Stack>
-          <Rating metadata={metadata} />
+          {reasonKey !== DisconnectReasonKey.ConnectionFailed && (
+            <Rating metadata={metadata} />
+          )}
         </VStack>
       </Center>
     </Screen>

src/frontend/src/features/rooms/utils/connectionEndReason.ts

@@ -0,0 +1,7 @@
+/**
+ * Why a room ended when no more specific reason applies
+ */
+export enum ConnectionEndReason {
+  Failed = 'connectionFailed',
+  Lost = 'connectionLost',
+}

src/frontend/src/features/support/components/SupportButton.tsx

@@ -0,0 +1,25 @@
+import { useTranslation } from 'react-i18next'
+import { RiQuestionLine } from '@remixicon/react'
+import { Button } from '@/primitives'
+import { Spinner } from '@/primitives/Spinner'
+import { useSupportWidget } from '../hooks/useSupportWidget'
+
+export const SupportButton = () => {
+  const { t } = useTranslation('global', { keyPrefix: 'support' })
+  const { isEnabled, isPending, open } = useSupportWidget()
+
+  if (!isEnabled) return null
+
+  return (
+    <Button
+      square
+      variant="secondaryText"
+      aria-label={t('buttonLabel')}
+      tooltip={t('buttonLabel')}
+      isPending={isPending}
+      onPress={open}
+    >
+      {isPending ? <Spinner size={24} /> : <RiQuestionLine />}
+    </Button>
+  )
+}

src/frontend/src/features/support/components/SupportWidget.tsx

@@ -0,0 +1,73 @@
+import { useEffect } from 'react'
+import { useTranslation } from 'react-i18next'
+import { useSnapshot } from 'valtio'
+import { useLocation } from 'wouter'
+import { RiCheckboxCircleFill, RiCloseLine } from '@remixicon/react'
+import { css } from '@/styled-system/css'
+import { Button, Text } from '@/primitives'
+import { announceToScreenReader } from '@/stores/screenReaderAnnouncer'
+import { supportStore } from '@/stores/support'
+import { subscribeToSupportWidget } from '../utils/supportWidget'
+import { ToastDuration } from '@/features/notifications/NotificationDuration'
+import { StyledToast } from '@/features/notifications/components/StyledToast'
+import { StyledToastContainer } from '@/features/notifications/components/StyledToastContainer'
+
+const hide = () => {
+  supportStore.showSentConfirmation = false
+}
+
+export const SupportWidget = () => {
+  const { t } = useTranslation('global', { keyPrefix: 'support.sent' })
+  const { showSentConfirmation } = useSnapshot(supportStore)
+  const [location] = useLocation()
+
+  useEffect(() => subscribeToSupportWidget(), [])
+
+  useEffect(hide, [location])
+
+  useEffect(() => {
+    if (!showSentConfirmation) return
+    announceToScreenReader(`${t('title')}. ${t('body')}`)
+    const timeout = window.setTimeout(hide, ToastDuration.EXTRA_LONG)
+    return () => window.clearTimeout(timeout)
+  }, [showSentConfirmation, t])
+
+  if (!showSentConfirmation) return null
+
+  return (
+    <div
+      className={css({
+        position: 'fixed',
+        top: '5rem',
+        left: '50%',
+        transform: 'translateX(-50%)',
+        zIndex: 1000,
+      })}
+    >
+      <StyledToastContainer>
+        <StyledToast>
+          <RiCheckboxCircleFill
+            size={24}
+            aria-hidden="true"
+            className={css({ color: 'success.300', flexShrink: 0 })}
+          />
+          <div>
+            <Text margin={false} bold>
+              {t('title')}
+            </Text>
+            <Text margin={false}>{t('body')}</Text>
+          </div>
+          <Button
+            square
+            size="sm"
+            invisible
+            aria-label={t('close')}
+            onPress={hide}
+          >
+            <RiCloseLine color="white" />
+          </Button>
+        </StyledToast>
+      </StyledToastContainer>
+    </div>
+  )
+}

src/frontend/src/features/support/hooks/useSupport.tsx

@@ -1,125 +0,0 @@
-import { useEffect, useState } from 'react'
-import { type ApiUser } from '@/features/auth/api/ApiUser'
-import { useUser } from '@/features/auth/api/useUser'
-import { useConfig } from '@/api/useConfig'
-
-type CrispSdk = (typeof import('crisp-sdk-web'))['Crisp']
-
-let crisp: CrispSdk | undefined
-let crispPromise: Promise<CrispSdk> | undefined
-
-const loadCrisp = (): Promise<CrispSdk> => {
-  crispPromise ??= import('crisp-sdk-web')
-    .then((module) => {
-      crisp = module.Crisp
-      return module.Crisp
-    })
-    .catch((error) => {
-      crispPromise = undefined
-      throw error
-    })
-
-  return crispPromise
-}
-
-export const openSupportChat = () => {
-  if (!crisp?.isCrispInjected()) return
-  crisp.chat.open()
-}
-
-export const initializeSupportSession = (user: ApiUser) => {
-  if (!crisp?.isCrispInjected()) return
-
-  const { id, email } = user
-  crisp.setTokenId(`meet-${id}`)
-  if (email) crisp.user.setEmail(email)
-}
-
-export const terminateSupportSession = () => {
-  if (!crisp?.isCrispInjected()) return
-
-  crisp.setTokenId()
-  crisp.session.reset()
-}
-
-export type useSupportProps = {
-  id?: string
-  isDisabled?: boolean
-}
-
-const IDLE_TIMEOUT_MS = 10_000
-
-const scheduleWhenIdle = (callback: () => void): (() => void) => {
-  if (typeof window.requestIdleCallback === 'function') {
-    const handle = window.requestIdleCallback(callback, {
-      timeout: IDLE_TIMEOUT_MS,
-    })
-    return () => window.cancelIdleCallback(handle)
-  }
-
-  const handle = window.setTimeout(callback, 1)
-  return () => window.clearTimeout(handle)
-}
-
-export const useSupport = ({ id, isDisabled }: useSupportProps) => {
-  const { user } = useUser()
-  const [isInjected, setIsInjected] = useState(
-    () => crisp?.isCrispInjected() ?? false
-  )
-
-  useEffect(() => {
-    if (!id || isDisabled) return
-
-    if (crisp?.isCrispInjected()) {
-      setIsInjected(true)
-      return
-    }
-
-    let cancelled = false
-
-    const cancelIdle = scheduleWhenIdle(() => {
-      void loadCrisp()
-        .then((sdk) => {
-          if (cancelled) return
-
-          if (!sdk.isCrispInjected()) {
-            sdk.configure(id)
-            sdk.setHideOnMobile(true)
-          }
-
-          setIsInjected(true)
-        })
-        .catch((error) => {
-          if (!cancelled) {
-            console.error('Failed to initialize support chat', error)
-          }
-        })
-    })
-
-    return () => {
-      cancelled = true
-      cancelIdle()
-    }
-  }, [id, isDisabled])
-
-  useEffect(() => {
-    if (!user || !isInjected || isDisabled) return
-    initializeSupportSession(user)
-  }, [user, isInjected, isDisabled])
-
-  return null
-}
-
-// Some users block the chat widget, so check its availability safely.
-const isCrispAvailable = () => {
-  try {
-    return !!window?.$crisp?.is
-  } catch {
-    return false
-  }
-}
-
-export const useIsSupportEnabled = () => {
-  const { data } = useConfig()
-  return !!data?.support?.id && isCrispAvailable()
-}

src/frontend/src/features/support/hooks/useSupportWidget.ts

@@ -0,0 +1,42 @@
+import { useTranslation } from 'react-i18next'
+import { useSnapshot } from 'valtio'
+import { useConfig } from '@/api/useConfig'
+import { useUser } from '@/features/auth/api/useUser'
+import { reportError } from '@/features/analytics/telemetry'
+import { announceToScreenReader } from '@/stores/screenReaderAnnouncer'
+import { supportStore } from '@/stores/support'
+import { openSupportWidget } from '../utils/supportWidget'
+
+export const useSupportWidget = () => {
+  const { t, i18n } = useTranslation('global', { keyPrefix: 'support' })
+  const { data } = useConfig()
+  const { user } = useUser()
+  const { status } = useSnapshot(supportStore)
+
+  const {
+    widget_script_url: scriptUrl,
+    widget_api_url: api,
+    widget_channel: channel,
+  } = data?.support ?? {}
+  const isEnabled = !!(scriptUrl && api && channel)
+
+  const open = () => {
+    if (!isEnabled) return
+
+    openSupportWidget(scriptUrl, {
+      api,
+      channel,
+      locale: i18n.language,
+      email: user?.email,
+    }).catch((error) => {
+      reportError('support_widget_failure', error)
+      announceToScreenReader(t('openError'), 'assertive')
+    })
+  }
+
+  return {
+    isEnabled,
+    isPending: status === 'pending',
+    open,
+  }
+}

src/frontend/src/features/support/utils/supportWidget.ts

@@ -0,0 +1,147 @@
+import { supportStore } from '@/stores/support'
+
+declare global {
+  interface Window {
+    _lasuite_widget?: unknown[]
+  }
+}
+
+type WidgetOptions = {
+  api: string
+  channel: string
+  locale: string
+  email?: string
+}
+
+const ROOT_ID = 'lasuite-widget-support-root'
+const OPENED_EVENT = 'lasuite-widget-support-opened'
+const SUCCESS_EVENT = 'lasuite-widget-support-success'
+const CLOSED_EVENT = 'lasuite-widget-support-closed'
+const TIMEOUT_MS = 10_000
+
+const WIDGET_CSS = `@media (min-width: 48em) {
+  [role='dialog'] {
+    top: 50%;
+    right: auto;
+    bottom: auto;
+    left: 50%;
+    transform: translate(-50%, -50%);
+  }
+}
+[role='status'] {
+  display: none;
+}`
+
+const styleWidget = () => {
+  const shadowRoot = document.getElementById(ROOT_ID)?.shadowRoot
+  if (!shadowRoot) return
+  const style = document.createElement('style')
+  style.textContent = WIDGET_CSS
+  shadowRoot.appendChild(style)
+}
+
+let returnFocusTo: HTMLElement | null = null
+
+// The widget removes the form without moving focus, which drops it on <body>.
+const restoreFocus = () => {
+  const activeEl = document.activeElement
+  const isFocusLost = activeEl === document.body || activeEl?.id === ROOT_ID
+  if (isFocusLost && returnFocusTo?.isConnected) {
+    returnFocusTo.focus({ preventScroll: true })
+  }
+}
+
+export const subscribeToSupportWidget = () => {
+  const onOpened = () => {
+    styleWidget()
+    supportStore.status = 'open'
+  }
+  const onSuccess = () => {
+    supportStore.showSentConfirmation = true
+    restoreFocus()
+  }
+  const onClosed = () => {
+    supportStore.status = 'closed'
+    restoreFocus()
+    returnFocusTo = null
+  }
+
+  document.addEventListener(OPENED_EVENT, onOpened)
+  document.addEventListener(SUCCESS_EVENT, onSuccess)
+  document.addEventListener(CLOSED_EVENT, onClosed)
+  return () => {
+    document.removeEventListener(OPENED_EVENT, onOpened)
+    document.removeEventListener(SUCCESS_EVENT, onSuccess)
+    document.removeEventListener(CLOSED_EVENT, onClosed)
+  }
+}
+
+const resolveTrigger = () => {
+  const activeEl = document.activeElement as HTMLElement | null
+  if (activeEl?.getAttribute('role') === 'menuitem') {
+    return document.querySelector<HTMLElement>('#room-options-trigger')
+  }
+  return activeEl
+}
+
+let scriptPromise: Promise<void> | undefined
+
+const loadScript = (src: string): Promise<void> => {
+  scriptPromise ??= new Promise<void>((resolve, reject) => {
+    const script = document.createElement('script')
+    const timeout = window.setTimeout(
+      () => fail(new Error(`Timed out loading ${src}`)),
+      TIMEOUT_MS
+    )
+    const fail = (error: Error) => {
+      window.clearTimeout(timeout)
+      script.remove()
+      scriptPromise = undefined
+      reject(error)
+    }
+
+    script.src = src
+    script.async = true
+    script.onload = () => {
+      window.clearTimeout(timeout)
+      resolve()
+    }
+    script.onerror = () => fail(new Error(`Failed to load ${src}`))
+    document.body.appendChild(script)
+  })
+
+  return scriptPromise
+}
+
+const initWidget = (options: WidgetOptions): Promise<void> =>
+  new Promise<void>((resolve, reject) => {
+    const onOpened = () => {
+      window.clearTimeout(timeout)
+      resolve()
+    }
+    const timeout = window.setTimeout(() => {
+      document.removeEventListener(OPENED_EVENT, onOpened)
+      reject(new Error('Support widget did not open'))
+    }, TIMEOUT_MS)
+
+    document.addEventListener(OPENED_EVENT, onOpened, { once: true })
+    window._lasuite_widget?.push(['support', 'init', options])
+  })
+
+export const openSupportWidget = async (
+  scriptUrl: string,
+  options: WidgetOptions
+) => {
+  if (supportStore.status !== 'closed') return
+
+  supportStore.status = 'pending'
+  returnFocusTo = resolveTrigger()
+  try {
+    await loadScript(scriptUrl)
+    await initWidget(options)
+  } catch (error) {
+    supportStore.status = 'closed'
+    returnFocusTo = null
+    throw error
+  }
+}

src/frontend/src/layout/Header.tsx

@@ -4,6 +4,7 @@ import { HStack, Stack } from '@/styled-system/jsx'
 import { useTranslation } from 'react-i18next'
 import { Button, Text } from '@/primitives'
 import { SettingsButton } from '@/features/settings'
+import { SupportButton } from '@/features/support/components/SupportButton'
 import { useUser } from '@/features/auth/api/useUser'
 import { useMatchesRoute } from '@/navigation/useMatchesRoute'
 import { FeedbackBanner } from '@/components/FeedbackBanner'
@@ -153,6 +154,7 @@ export const Header = () => {
           </header>
           <nav>
             <Stack gap={1} direction="row" align="center">
+              <SupportButton />
               {isLoggedIn === false &&
                 !isHome &&
                 !isLegalTerms &&

src/frontend/src/layout/Layout.tsx

@@ -6,6 +6,7 @@ import { useSnapshot } from 'valtio'
 import { Footer } from '@/layout/Footer'
 import { ScreenReaderAnnouncer } from '@/primitives'
 import { SkipLink, MAIN_CONTENT_ID } from './SkipLink'
+import { SupportWidget } from '@/features/support/components/SupportWidget'
 
 export type Layout = 'fullpage' | 'centered'
 
@@ -46,6 +47,7 @@ export const Layout = ({ children }: { children: ReactNode }) => {
           })}
         >
           <ScreenReaderAnnouncer />
+          <SupportWidget />
           {children}
         </main>
       </div>

src/frontend/src/locales/de/global.json

@@ -27,6 +27,15 @@
   },
   "selected": "ausgewählt",
   "submit": "OK",
+  "support": {
+    "buttonLabel": "Support kontaktieren",
+    "openError": "Das Kontaktformular konnte nicht geöffnet werden. Bitte versuchen Sie es später erneut.",
+    "sent": {
+      "title": "Nachricht gesendet",
+      "body": "Das Support-Team hat Ihre Nachricht erhalten.",
+      "close": "Schließen"
+    }
+  },
   "footer": {
     "links": {
       "legifrance": "legifrance.gouv.fr",

src/frontend/src/locales/de/notifications.json

@@ -37,6 +37,7 @@
     "started": "{{name}} hat die Meeting-Transkription gestartet.",
     "stopped": "{{name}} hat die Meeting-Transkription gestoppt.",
     "limitReached": "Die Transkription hat die maximal zulässige Dauer überschritten und wird automatisch gespeichert.",
+    "interrupted": "Die Transkription wurde unerwartet beendet, der bereits aufgezeichnete Teil wird gespeichert.",
     "failed": "Die Transkription wurde unerwartet beendet und konnte nicht gespeichert werden.",
     "aborted": "Die Transkription konnte nicht gestartet werden.",
     "requested": "{{name}} möchte die Meeting-Transkription starten."
@@ -46,6 +47,7 @@
     "started": "{{name}} hat die Meeting-Aufzeichnung gestartet.",
     "stopped": "{{name}} hat die Meeting-Aufzeichnung gestoppt.",
     "limitReached": "Die Aufzeichnung hat die maximal zulässige Dauer überschritten und wird automatisch gespeichert.",
+    "interrupted": "Die Aufzeichnung wurde unerwartet beendet, der bereits aufgezeichnete Teil wird gespeichert.",
     "failed": "Die Aufzeichnung wurde unerwartet beendet und konnte nicht gespeichert werden.",
     "aborted": "Die Aufzeichnung konnte nicht gestartet werden.",
     "requested": "{{name}} möchte die Meeting-Aufzeichnung starten."

src/frontend/src/locales/de/rooms.json

@@ -4,7 +4,9 @@
       "normal": "Du hast das Meeting verlassen",
       "duplicateIdentity": "Du bist dem Meeting von einem anderen Gerät aus beigetreten",
       "participantRemoved": "Du wurdest vom Host aus dem Meeting entfernt",
-      "roomDeleted": "Dieses Meeting wurde gelöscht"
+      "roomDeleted": "Dieses Meeting wurde gelöscht",
+      "connectionLost": "Die Verbindung zum Meeting wurde unterbrochen",
+      "connectionFailed": "Beitritt zum Meeting nicht möglich"
     },
     "home": "Zur Startseite zurückkehren",
     "back": "Dem Meeting erneut beitreten"

src/frontend/src/locales/en/global.json

@@ -27,6 +27,15 @@
   },
   "selected": "selected",
   "submit": "OK",
+  "support": {
+    "buttonLabel": "Contact support",
+    "openError": "The contact form could not be opened. Please try again later.",
+    "sent": {
+      "title": "Message sent",
+      "body": "The support team has received your message.",
+      "close": "Close"
+    }
+  },
   "footer": {
     "links": {
       "legifrance": "legifrance.gouv.fr",

src/frontend/src/locales/en/notifications.json

@@ -37,6 +37,7 @@
     "started": "{{name}} started the meeting transcription.",
     "stopped": "{{name}} stopped the meeting transcription.",
     "limitReached": "The transcription has exceeded the maximum allowed duration and will be automatically saved.",
+    "interrupted": "The transcription stopped unexpectedly, the part already recorded will be saved.",
     "failed": "The transcription stopped unexpectedly and could not be saved.",
     "aborted": "The transcription could not be started.",
     "requested": "{{name}} wants to start the meeting transcription."
@@ -46,6 +47,7 @@
     "started": "{{name}} started the meeting recording.",
     "stopped": "{{name}} stopped the meeting recording.",
     "limitReached": "The recording has exceeded the maximum allowed duration and will be automatically saved.",
+    "interrupted": "The recording stopped unexpectedly, the part already recorded will be saved.",
     "failed": "The recording stopped unexpectedly and could not be saved.",
     "aborted": "The recording could not be started.",
     "requested": "{{name}} wants to start the meeting recording."

src/frontend/src/locales/en/rooms.json

@@ -4,7 +4,9 @@
       "normal": "You have left the meeting",
       "duplicateIdentity": "You have joined the meeting from another device",
       "participantRemoved": "You have been removed from the meeting by a host",
-      "roomDeleted": "This meeting has been deleted"
+      "roomDeleted": "This meeting has been deleted",
+      "connectionLost": "The connection to the meeting was lost",
+      "connectionFailed": "Unable to join the meeting"
     },
     "home": "Return to home",
     "back": "Rejoin the meeting"

src/frontend/src/locales/es/global.json

@@ -27,6 +27,15 @@
   },
   "selected": "seleccionado",
   "submit": "Aceptar",
+  "support": {
+    "buttonLabel": "Contactar con el soporte",
+    "openError": "No se ha podido abrir el formulario de contacto. Inténtelo de nuevo más tarde.",
+    "sent": {
+      "title": "Mensaje enviado",
+      "body": "El equipo de soporte ha recibido su mensaje.",
+      "close": "Cerrar"
+    }
+  },
   "footer": {
     "links": {
       "legifrance": "legifrance.gouv.fr",

src/frontend/src/locales/es/notifications.json

@@ -37,6 +37,7 @@
     "started": "{{name}} ha iniciado la transcripción de la reunión.",
     "stopped": "{{name}} ha detenido la transcripción de la reunión.",
     "limitReached": "La transcripción ha superado la duración máxima permitida, se va a guardar automáticamente.",
+    "interrupted": "La transcripción se ha interrumpido de forma inesperada, se va a guardar la parte ya grabada.",
     "failed": "La transcripción se ha interrumpido de forma inesperada y no se ha podido guardar.",
     "aborted": "No se ha podido iniciar la transcripción.",
     "requested": "{{name}} ha solicitado iniciar la transcripción."
@@ -46,6 +47,7 @@
     "started": "{{name}} ha iniciado la grabación de la reunión.",
     "stopped": "{{name}} ha detenido la grabación de la reunión.",
     "limitReached": "La grabación ha superado la duración máxima permitida, se va a guardar automáticamente.",
+    "interrupted": "La grabación se ha interrumpido de forma inesperada, se va a guardar la parte ya grabada.",
     "failed": "La grabación se ha interrumpido de forma inesperada y no se ha podido guardar.",
     "aborted": "No se ha podido iniciar la grabación.",
     "requested": "{{name}} ha solicitado iniciar la grabación."

src/frontend/src/locales/es/rooms.json

@@ -4,7 +4,9 @@
       "normal": "Has salido de la reunión",
       "duplicateIdentity": "Te has unido a la reunión desde otro dispositivo",
       "participantRemoved": "Un administrador te ha expulsado de la llamada",
-      "roomDeleted": "Esta reunión ha sido eliminada"
+      "roomDeleted": "Esta reunión ha sido eliminada",
+      "connectionLost": "Se ha perdido la conexión con la reunión",
+      "connectionFailed": "No se ha podido acceder a la reunión"
     },
     "home": "Volver al inicio",
     "back": "Volver a la reunión"

src/frontend/src/locales/fr/global.json

@@ -27,6 +27,15 @@
   },
   "selected": "sélectionné",
   "submit": "OK",
+  "support": {
+    "buttonLabel": "Contacter l'aide",
+    "openError": "Impossible d'ouvrir le formulaire de contact. Réessayez plus tard.",
+    "sent": {
+      "title": "Message envoyé",
+      "body": "L'équipe support a bien reçu votre message.",
+      "close": "Fermer"
+    }
+  },
   "footer": {
     "links": {
       "legifrance": "legifrance.gouv.fr",

src/frontend/src/locales/fr/notifications.json

@@ -37,6 +37,7 @@
     "started": "{{name}} a démarré la transcription de la réunion.",
     "stopped": "{{name}} a arrêté la transcription de la réunion.",
     "limitReached": "La transcription a dépassé la durée maximale autorisée, elle va être automatiquement sauvegardée.",
+    "interrupted": "La transcription s'est interrompue de façon inattendue, la partie déjà enregistrée va être sauvegardée.",
     "failed": "La transcription s'est interrompue de façon inattendue et n'a pas pu être sauvegardée.",
     "aborted": "La transcription n'a pas pu être démarrée.",
     "requested": "{{name}} a demandé à démarrer la transcription."
@@ -46,6 +47,7 @@
     "started": "{{name}} a démarré l'enregistrement de la réunion.",
     "stopped": "{{name}} a arrêté l'enregistrement de la réunion.",
     "limitReached": "L'enregistrement a dépassé la durée maximale autorisée, il va être automatiquement sauvegardé.",
+    "interrupted": "L'enregistrement s'est interrompu de façon inattendue, la partie déjà enregistrée va être sauvegardée.",
     "failed": "L'enregistrement s'est interrompu de façon inattendue et n'a pas pu être sauvegardé.",
     "aborted": "L'enregistrement n'a pas pu être démarré.",
     "requested": "{{name}} a demandé à démarrer l'enregistrement."

src/frontend/src/locales/fr/rooms.json

@@ -4,7 +4,9 @@
       "normal": "Vous avez quitté la réunion",
       "duplicateIdentity": "Vous avez rejoint la réunion depuis un autre appareil",
       "participantRemoved": "Vous avez été exclu de l'appel par un administrateur",
-      "roomDeleted": "Cette réunion a été supprimée"
+      "roomDeleted": "Cette réunion a été supprimée",
+      "connectionLost": "La connexion à la réunion a été perdue",
+      "connectionFailed": "Impossible de rejoindre la réunion"
     },
     "home": "Retourner à l'accueil",
     "back": "Réintégrer la réunion"

src/frontend/src/locales/nl/global.json

@@ -26,6 +26,15 @@
   },
   "selected": "geselecteerd",
   "submit": "OK",
+  "support": {
+    "buttonLabel": "Contact ondersteuning",
+    "openError": "Het contactformulier kon niet worden geopend. Probeer het later opnieuw.",
+    "sent": {
+      "title": "Bericht verzonden",
+      "body": "Het supportteam heeft je bericht ontvangen.",
+      "close": "Sluiten"
+    }
+  },
   "footer": {
     "links": {
       "legifrance": "legifrance.gouv.fr",

src/frontend/src/locales/nl/notifications.json

@@ -37,6 +37,7 @@
     "started": "{{name}} is de transcriptie van de vergadering gestart.",
     "stopped": "{{name}} heeft de transcriptie van de vergadering gestopt.",
     "limitReached": "De transcriptie heeft de maximaal toegestane duur overschreden en wordt automatisch opgeslagen.",
+    "interrupted": "De transcriptie is onverwacht gestopt, het al opgenomen deel wordt opgeslagen.",
     "failed": "De transcriptie is onverwacht gestopt en kon niet worden opgeslagen.",
     "aborted": "De transcriptie kon niet worden gestart.",
     "requested": "{{name}} wil graag de transcriptie starten."
@@ -46,6 +47,7 @@
     "started": "{{name}} is begonnen met het opnemen van de vergadering.",
     "stopped": "{{name}} is gestopt met het opnemen van de vergadering.",
     "limitReached": "De opname heeft de maximaal toegestane duur overschreden en wordt automatisch opgeslagen.",
+    "interrupted": "De opname is onverwacht gestopt, het al opgenomen deel wordt opgeslagen.",
     "failed": "De opname is onverwacht gestopt en kon niet worden opgeslagen.",
     "aborted": "De opname kon niet worden gestart.",
     "requested": "{{name}} wil graag de opname starten."

src/frontend/src/locales/nl/rooms.json

@@ -4,7 +4,9 @@
       "normal": "Je hebt de vergadering verlaten",
       "duplicateIdentity": "U heeft de vergadering via een ander apparaat geopend",
       "participantRemoved": "U bent door een beheerder uit het gesprek verwijderd",
-      "roomDeleted": "Deze vergadering is verwijderd"
+      "roomDeleted": "Deze vergadering is verwijderd",
+      "connectionLost": "De verbinding met de vergadering is verbroken",
+      "connectionFailed": "Deelnemen aan de vergadering is niet gelukt"
     },
     "home": "Keer terug naar het hoofdscherm",
     "back": "Sluit weer bij de vergadering aan"

src/frontend/src/stores/support.ts

@@ -0,0 +1,13 @@
+import { proxy } from 'valtio'
+
+export type SupportWidgetStatus = 'closed' | 'pending' | 'open'
+
+type State = {
+  status: SupportWidgetStatus
+  showSentConfirmation: boolean
+}
+
+export const supportStore = proxy<State>({
+  status: 'closed',
+  showSentConfirmation: false,
+})

src/frontend/src/styles/index.css

@@ -72,14 +72,6 @@ main#main-content :is(h1, h2, h3)[tabindex='-1']:focus {
   }
 }
 
-body:has(.lk-video-conference) #crisp-chatbox-button {
-  display: none !important;
-}
-
-body:has(.lk-video-conference) #crisp-chatbox > * > div[role='button'] {
-  display: none !important;
-}
-
 html:has(.lk-video-conference) {
   scrollbar-gutter: auto !important;
 }

src/frontend/vite.config.ts

@@ -1,5 +1,6 @@
-import { readFileSync } from 'node:fs'
-import { defineConfig, loadEnv } from 'vite'
+import { readFileSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { defineConfig, loadEnv, type Plugin } from 'vite'
 import react from '@vitejs/plugin-react'
 import { visualizer } from 'rollup-plugin-visualizer'
 import svgr from 'vite-plugin-svgr'
@@ -25,6 +26,23 @@ if (mediapipeVersion !== livekitMediapipeVersion) {
   )
 }
 
+const NOINDEX_TAG = '<meta name="robots" content="noindex, nofollow" />'
+
+const homePage = (): Plugin => ({
+  name: 'home-page',
+  apply: 'build',
+  writeBundle({ dir = 'dist' }) {
+    const html = readFileSync(join(dir, 'index.html'), 'utf-8')
+    if (!html.includes(NOINDEX_TAG)) {
+      throw new Error(
+        `${dir}/index.html does not contain ${NOINDEX_TAG}, so home.html ` +
+          `cannot be generated from it. The two must stay in sync.`
+      )
+    }
+    writeFileSync(join(dir, 'home.html'), html.replace(NOINDEX_TAG, ''))
+  },
+})
+
 // https://vitejs.dev/config/
 export default defineConfig(({ mode }) => {
   const env = loadEnv(mode, process.cwd())
@@ -66,6 +84,7 @@ export default defineConfig(({ mode }) => {
           },
         ],
       }),
+      homePage(),
       env.VITE_ANALYZE === 'true' &&
         visualizer({
           open: true,

src/helm/env.d/common.yaml.gotmpl

@@ -163,7 +163,7 @@ backend:
     LIVEKIT_DEFAULT_VIDEO_CODEC: vp9
     FRONTEND_IDLE_DISCONNECT_WARNING_DELAY: 9000
     FRONTEND_SILENCE_LIVEKIT_DEBUG: False
-    FRONTEND_SUPPORT: "{'id': '58ea6697-8eba-4492-bc59-ad6562585041', 'help_article_transcript': 'https://lasuite.crisp.help/fr/article/visio-transcript-1sjq43x', 'help_article_recording': 'https://lasuite.crisp.help/fr/article/visio-enregistrement-wgc8o0', 'help_article_more_tools': 'https://lasuite.crisp.help/fr/article/visio-tools-bvxj23'}"
+    FRONTEND_SUPPORT: "{'help_article_transcript': 'https://docs.numerique.gouv.fr/docs/ba213749-2379-421c-b2ea-e4bd0840ea9b', 'help_article_recording': 'https://docs.numerique.gouv.fr/docs/a4e12e41-2974-472c-84a9-c00d12c10769', 'help_article_more_tools': 'https://docs.numerique.gouv.fr/docs/75fa98c7-5af1-433e-a611-e38143db26d0'}"
     FRONTEND_FEEDBACK: "{'url': 'https://grist.numerique.gouv.fr/o/docs/cbMv4G7pLY3Z/USER-RESEARCH-or-LA-SUITE/f/26'}"
     FRONTEND_DOCUMENTATION_URL: "https://docs.numerique.gouv.fr/docs/7c5bd65d-3c21-486f-bce1-26e0a921d642/"
     FRONTEND_TECHNICAL_DOCUMENTATION_URL: "https://docs.numerique.gouv.fr/docs/f2baa1b9-f29e-4d58-959d-65d4376fc6b8/"

src/helm/env.d/dev-dinum/values.egress.yaml.gotmpl

@@ -1,8 +1,12 @@
 replicaCount: 1
 terminationGracePeriodSeconds: 18000
 
+image:
+  tag: v1.15.0
+
 egress:
-  log_level: debug
+  logging:
+    level: debug
   ws_url: ws://livekit-livekit-server:80
   insecure: true
   enable_chrome_sandbox: true

src/helm/env.d/dev-keycloak/values.egress.yaml.gotmpl

@@ -2,10 +2,11 @@ replicaCount: 1
 terminationGracePeriodSeconds: 18000
 
 image:
-  tag: v1.11.0
+  tag: v1.15.0
 
 egress:
-  log_level: debug
+  logging:
+    level: debug
   ws_url: ws://livekit-livekit-server:80
   insecure: true
   enable_chrome_sandbox: true

src/helm/extra/templates/frontend_nginx_cm.yaml

@@ -51,6 +51,7 @@ data:
             add_header Cache-Control "no-cache, no-store, must-revalidate";
             add_header Pragma "no-cache" always;
             add_header Expires 0 always;
+            add_header X-Robots-Tag "noindex, nofollow" always;
 
             set $ms_domains "https://*.live.com https://*.office.com https://*.microsoft.com https://*.office365.com https://*.sharepoint.com";
 
@@ -84,6 +85,17 @@ data:
             add_header Cache-Control "public, max-age=2592000";
         }
 
+        location = / {
+            try_files /home.html /index.html;
+            add_header Cache-Control "no-cache, no-store, must-revalidate";
+            add_header Pragma "no-cache";
+            add_header Expires 0;
+        }
+
+        location = /home.html {
+            internal;
+        }
+
         # Serve static files
         location / {
             try_files $uri $uri/ /index.html;
@@ -91,6 +103,7 @@ data:
             add_header Cache-Control "no-cache, no-store, must-revalidate";
             add_header Pragma "no-cache";  # HTTP 1.0 header for backward compatibility
             add_header Expires 0;
+            add_header X-Robots-Tag "noindex, nofollow" always;
         }
 
         # Optionally, handle 404 errors by redirecting to index.html

src/mail/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "mail_mjml",
-  "version": "1.36.3",
+  "version": "1.37.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "mail_mjml",
-      "version": "1.36.3",
+      "version": "1.37.0",
       "license": "MIT",
       "dependencies": {
         "@html-to/text-cli": "0.6.1",

src/mail/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mail_mjml",
-  "version": "1.36.3",
+  "version": "1.37.0",
   "description": "An util to generate html and text django's templates from mjml templates",
   "type": "module",
   "dependencies": {

src/sdk/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "sdk",
-  "version": "1.36.3",
+  "version": "1.37.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "sdk",
-      "version": "1.36.3",
+      "version": "1.37.0",
       "license": "ISC",
       "workspaces": [
         "./library",

src/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sdk",
-  "version": "1.36.3",
+  "version": "1.37.0",
   "author": "",
   "license": "ISC",
   "description": "",

src/summary/pyproject.toml

@@ -1,7 +1,7 @@
 
 [project]
 name = "summary"
-version = "1.36.3"
+version = "1.37.0"
 requires-python = ">=3.13"
 dependencies = [
     "certifi>=2026.10.19",

src/summary/summary/api/route/tasks_v2.py

@@ -5,7 +5,6 @@ from datetime import datetime, timezone
 
 from celery.result import AsyncResult
 from fastapi import APIRouter, Depends, HTTPException, Request, status
-from pydantic import ValidationError
 
 from summary.core.analytics import get_analytics
 from summary.core.celery_worker import (
@@ -14,9 +13,7 @@ from summary.core.celery_worker import (
     summarize_v2_task,
 )
 from summary.core.config import AuthorizedTenant, get_settings
-from summary.core.exceptions import CleanedValidationError
 from summary.core.models import SummarizeTaskApiRequest, TranscribeTaskApiRequest
-from summary.core.privacy import dump_for_transport
 from summary.core.security import verify_tenant_api_key_v2
 from summary.core.shared_models import (
     SummarizeWebhookFailurePayload,
@@ -55,7 +52,7 @@ async def create_transcribe_task_v2(
     task = process_audio_transcribe_v2_task.apply_async(
         args=[
             {
-                **dump_for_transport(request),
+                **request.model_dump(),
                 "tenant_id": request_tenant.id,
                 "received_at": datetime.now(timezone.utc),
             }
@@ -128,11 +125,7 @@ async def get_transcribe_job_status(
 
     if task.status == "SUCCESS":
         result = task.result
-        try:
-            payload = TranscribeWebhookSuccessPayload.model_validate(result)
-        except ValidationError as exc:
-            raise CleanedValidationError(exc, secret_input=True) from None
-        return dump_for_transport(payload)
+        return TranscribeWebhookSuccessPayload.model_validate(result).model_dump()
 
     if task.status == "FAILURE":
         return TranscribeWebhookFailurePayload(
@@ -162,11 +155,7 @@ async def get_summarize_job_status(
 
     if task.status == "SUCCESS":
         result = task.result
-        try:
-            payload = SummarizeWebhookSuccessPayload.model_validate(result)
-        except ValidationError as exc:
-            raise CleanedValidationError(exc, secret_input=True) from None
-        return dump_for_transport(payload)
+        return SummarizeWebhookSuccessPayload.model_validate(result).model_dump()
 
     if task.status == "FAILURE":
         return SummarizeWebhookFailurePayload(

src/summary/summary/core/analytics.py

@@ -5,6 +5,7 @@ import socket
 import time
 from collections import Counter
 from functools import cached_property, lru_cache
+from urllib.parse import urlsplit, urlunsplit
 
 import redis
 from celery.utils.log import get_task_logger
@@ -12,7 +13,6 @@ from posthog import Posthog
 
 from summary.core.config import get_settings
 from summary.core.models import SummarizeTaskJob, TranscribeTaskJob
-from summary.core.privacy import redact_url
 
 logger = get_task_logger(__name__)
 settings = get_settings()
@@ -54,8 +54,8 @@ class Analytics:
             self._client.capture(
                 event_name, distinct_id=distinct_id, properties=properties
             )
-        except Exception:
-            raise AnalyticsException("Failed to capture analytics event") from None
+        except Exception as e:
+            raise AnalyticsException("Failed to capture analytics event") from e
 
     def is_feature_enabled(self, feature_name: str, distinct_id: str = None) -> bool:
         """Check if a feature flag is enabled for a user."""
@@ -64,8 +64,8 @@ class Analytics:
 
         try:
             return self._client.feature_enabled(feature_name, distinct_id)
-        except Exception:
-            logger.error("Error checking feature flag %s", feature_name)
+        except Exception as e:
+            logger.error("Error checking feature flag %s: %s", feature_name, e)
             return False
 
 
@@ -133,7 +133,8 @@ class MetadataManager:
         }
 
         if isinstance(task_payload, TranscribeTaskJob):
-            clean_url = redact_url(task_payload.cloud_storage_url.get_secret_value())
+            parts = urlsplit(task_payload.cloud_storage_url)
+            clean_url = urlunsplit((parts.scheme, parts.netloc, parts.path, "", ""))
             initial_metadata["source_url"] = clean_url
             initial_metadata["asr_model"] = settings.whisperx_asr_model
         elif isinstance(task_payload, SummarizeTaskJob):

src/summary/summary/core/celery_worker.py

@@ -3,23 +3,20 @@
 # ruff: noqa: PLR0913
 
 import json
-import logging
 import time
 from datetime import datetime, timezone
 from typing import Any
 from urllib.parse import urljoin
 
 import requests
-from celery import Celery, Task, signals
+from celery import Celery, signals
 from celery.utils.log import get_task_logger
 from openai.types.audio import Transcription
-from pydantic import SecretStr, ValidationError
 from requests import exceptions
 
 from summary.core.analytics import MetadataManager, get_analytics
 from summary.core.config import get_settings
 from summary.core.docs_service import create_document_in_lasuite_docs
-from summary.core.exceptions import CleanedValidationError
 from summary.core.file_service import (
     CorruptedAudioFile,
     FileService,
@@ -34,7 +31,6 @@ from summary.core.models import (
     SummarizeTaskJob,
     TranscribeTaskJob,
 )
-from summary.core.privacy import dump_for_transport, redact_url
 from summary.core.prompt import (
     FORMAT_NEXT_STEPS,
     FORMAT_PLAN,
@@ -67,24 +63,8 @@ metadata_manager = MetadataManager()
 
 logger = get_task_logger(__name__)
 
-
-def _reveal(secret: SecretStr | None) -> str | None:
-    """Return the underlying value of an optional secret."""
-    return secret.get_secret_value() if secret is not None else None
-
-
-class PrivateTask(Task):
-    """Hide task arguments in Celery logs and monitoring events."""
-
-    def apply_async(self, args=None, kwargs=None, **options):
-        """Publish with redacted display representations."""
-        options.update(argsrepr="[Filtered]", kwargsrepr="[Filtered]")
-        return super().apply_async(args=args, kwargs=kwargs, **options)
-
-
 celery = Celery(
     __name__,
-    task_cls=PrivateTask,
     broker=settings.celery_broker_url,
     backend=settings.celery_result_backend,
     broker_connection_retry_on_startup=True,
@@ -96,28 +76,10 @@ celery = Celery(
 celery.config_from_object("summary.core.celery_config")
 
 
-class CeleryLogPrivacyFilter(logging.Filter):
-    """Prevent Celery trace logs from serializing task results or exceptions."""
-
-    def filter(self, record):
-        """Keep task identity and state without upstream values."""
-        if record.levelno < logging.INFO:
-            return True
-        data = getattr(record, "data", None)
-        if isinstance(data, dict):
-            record.msg = "Task %s[%s] finished or retried (details omitted)"
-            record.args = (data.get("name", "unknown"), data.get("id", "unknown"))
-            record.data = {}
-            record.exc_info = None
-            record.exc_text = None
-        return True
-
-
 @signals.celeryd_init.connect
 def init_celery_sentry(**_kwargs):
     """Initialize Sentry in the Celery worker."""
     init_sentry()
-    logging.getLogger("celery.app.trace").addFilter(CeleryLogPrivacyFilter())
 
 
 file_service = FileService()
@@ -200,9 +162,9 @@ def transcribe_audio(
             try:
                 res.raise_for_status()
             except requests.exceptions.HTTPError:
-                logger.error("WhisperX transcription failed")
+                logger.exception("WhisperX transcription failed")
                 # We reraise the error so that it can be retried by celery
-                raise requests.exceptions.HTTPError("WhisperX request failed") from None
+                raise
 
             transcription_json: dict[str, Any] = res.json()
             # We remove the "usage" key from the transcription_json dictionary
@@ -213,16 +175,13 @@ def transcribe_audio(
             # We force the use of the Transcription model here
             # to avoid changing too much code for now.
             # Note that it should be WhisperXResponse instead.
-            try:
-                transcription = Transcription.model_validate(
-                    # We add a dummy "text" to make the model validate,
-                    # Some API responses lack the "text" key.
-                    {"text": "", **transcription_json},
-                    extra="allow",
-                    strict=False,
-                )
-            except ValidationError as exc:
-                raise CleanedValidationError(exc, secret_input=True) from None
+            transcription = Transcription.model_validate(
+                # We add a dummy "text" to make the model validate,
+                # Some API responses lack the "text" key.
+                {"text": "", **transcription_json},
+                extra="allow",
+                strict=False,
+            )
 
             # Logging
             transcription_duration = round(time.time() - transcription_start_time, 2)
@@ -240,9 +199,9 @@ def transcribe_audio(
         if raises:
             raise e
         redacted_cloud_storage_url = (
-            redact_url(cloud_storage_url) if cloud_storage_url else None
+            cloud_storage_url.split("?", 1)[0] if cloud_storage_url else None
         )
-        logger.error(
+        logger.exception(
             ("Unexpected error while preparing file %s "),
             redacted_cloud_storage_url,
         )
@@ -271,7 +230,7 @@ def resolve_speaker_identities_and_apply_to(
     logger.debug("Running resolve_speaker_identities")
     try:
         metadata = file_service.read_cloud_storage_json(
-            recording_metadata.cloud_storage_url.get_secret_value()
+            recording_metadata.cloud_storage_url
         )
         speaker_mapping = resolve_speaker_identities(
             metadata,
@@ -282,18 +241,21 @@ def resolve_speaker_identities_and_apply_to(
         new_transcription = speaker_mapping.apply_to(transcription.model_dump())
         return WhisperXResponse.model_validate(new_transcription)
 
-    except FileServiceException:
+    except FileServiceException as exc:
         logger.error(
-            "Error reading metadata for task %s; skipping speaker assignment.",
+            "Error reading metadata for task %s; skipping speaker assignment."
+            " Error: %s",
             task_id,
+            exc,
         )
         return transcription
 
-    except Exception:
-        logger.error(
+    except Exception as exc:
+        logger.exception(
             "resolve_speaker_identities failed for task %s; skipping"
-            " speaker assignment.",
+            " speaker assignment. Error: %s",
             task_id,
+            exc,
         )
         return transcription
 
@@ -340,17 +302,6 @@ def format_actions(llm_output: dict) -> str:
     return ""
 
 
-def parse_llm_json(value: str) -> dict:
-    """Parse an LLM response without exposing it in decoding errors."""
-    try:
-        result = json.loads(value)
-        if not isinstance(result, dict):
-            raise ValueError
-        return result
-    except (TypeError, ValueError):
-        raise LLMException("Invalid LLM response") from None
-
-
 def summarize_transcription_internals(
     *, distinct_id: str, transcript: str, session_id: str
 ) -> str:
@@ -391,13 +342,13 @@ def summarize_transcription_internals(
     )
     logger.info("Plan generated")
 
-    res = parse_llm_json(parts)
+    res = json.loads(parts)
     parts = res.get("titles", [])
-    logger.info("Parts to summarize: %s", len(parts))
+    logger.info("Parts to summarize: %s", parts)
     parts_summarized = []
-    for i, part in enumerate(parts):
+    for part in parts:
         prompt_user_part = PROMPT_USER_PART.format(part=part, transcript=transcript)
-        logger.info("Summarizing part %s", i + 1)
+        logger.info("Summarizing part: %s", part)
         parts_summarized.append(
             llm_service.call(PROMPT_SYSTEM_PART, prompt_user_part, name="part")
         )
@@ -413,7 +364,7 @@ def summarize_transcription_internals(
         response_format=FORMAT_NEXT_STEPS,
     )
 
-    next_steps = format_actions(parse_llm_json(next_steps))
+    next_steps = format_actions(json.loads(next_steps))
 
     logger.info("Next steps generated")
 
@@ -486,11 +437,9 @@ def call_webhook_v2_task(
     tenant_id: str,
 ):
     """Calls a webhook asynchrously (retry handled by celery)."""
-    try:
-        validated_payload = webhook_payload_adapter.validate_python(payload)
-    except ValidationError as exc:
-        raise CleanedValidationError(exc, secret_input=True) from None
-    call_webhook_v2(payload=validated_payload, tenant_id=tenant_id)
+    call_webhook_v2(
+        payload=webhook_payload_adapter.validate_python(payload), tenant_id=tenant_id
+    )
 
 
 @celery.task(
@@ -516,10 +465,7 @@ def process_audio_transcribe_v2_task(
         self: Celery task instance (passed on with bind=True)
         payload: Serialized dictionary of TranscribeSummarizeTaskCreationV2
     """
-    try:
-        payload = TranscribeTaskJob.model_validate(payload)
-    except ValidationError as exc:
-        raise CleanedValidationError(exc, secret_input=True) from None
+    payload = TranscribeTaskJob.model_validate(payload)
     logger.info(
         "Transcribing for object received | Owner: %s",
         payload.user_sub,
@@ -531,7 +477,7 @@ def process_audio_transcribe_v2_task(
         transcription_res = WhisperXResponse(
             **transcribe_audio(  # type: ignore
                 task_id=job_id,
-                cloud_storage_url=payload.cloud_storage_url.get_secret_value(),
+                cloud_storage_url=payload.cloud_storage_url,
                 language=payload.language,
                 raises=True,
             ).model_dump()
@@ -568,8 +514,8 @@ def process_audio_transcribe_v2_task(
             transcription_res.model_dump(),
             payload.context_language,
             payload.language,
-            _reveal(payload.push_to_docs_config.download_link),
-            _reveal(payload.push_to_docs_config.form_link),
+            payload.push_to_docs_config.download_link,
+            payload.push_to_docs_config.form_link,
         )
 
         create_document_in_lasuite_docs(
@@ -610,22 +556,18 @@ def process_audio_transcribe_v2_task(
         transcription_data_url=file_service.get_transcript_signed_url(job_id),
     )
     call_webhook_v2_task.apply_async(
-        args=[dump_for_transport(success_payload), payload.tenant_id]
+        args=[success_payload.model_dump(), payload.tenant_id]
     )
     metadata_manager.capture(job_id, settings.posthog_transcript_success)
 
-    return dump_for_transport(success_payload)
+    return success_payload.model_dump()
 
 
 @signals.task_prerun.connect(sender=process_audio_transcribe_v2_task)
 def task_started_transcript(task_id=None, task=None, args=None, **kwargs):
     """Signal handler called before task execution begins."""
     if args:
-        try:
-            payload = TranscribeTaskJob.model_validate(args[0])
-        except ValidationError as exc:
-            raise CleanedValidationError(exc, secret_input=True) from None
-        metadata_manager.create(task_id, payload)
+        metadata_manager.create(task_id, TranscribeTaskJob.model_validate(args[0]))
 
 
 @signals.task_retry.connect(sender=process_audio_transcribe_v2_task)
@@ -685,10 +627,7 @@ def summarize_v2_task(
     1. Run summary internals
     2. Sends the final summary via webhook.
     """
-    try:
-        payload = SummarizeTaskJob.model_validate(payload)
-    except ValidationError as exc:
-        raise CleanedValidationError(exc, secret_input=True) from None
+    payload = SummarizeTaskJob.model_validate(payload)
     summary = summarize_transcription_internals(
         distinct_id=payload.user_sub,
         transcript=payload.content,
@@ -713,22 +652,18 @@ def summarize_v2_task(
         summary_data_url=file_service.get_summary_signed_url(job_id),
     )
     call_webhook_v2_task.apply_async(
-        args=[dump_for_transport(success_payload), payload.tenant_id]
+        args=[success_payload.model_dump(), payload.tenant_id]
     )
     metadata_manager.capture(job_id, settings.posthog_summary_success)
 
-    return dump_for_transport(success_payload)
+    return success_payload.model_dump()
 
 
 @signals.task_prerun.connect(sender=summarize_v2_task)
 def task_started_summary(task_id=None, task=None, args=None, **kwargs):
     """Signal handler called before task execution begins."""
     if args:
-        try:
-            payload = SummarizeTaskJob.model_validate(args[0])
-        except ValidationError as exc:
-            raise CleanedValidationError(exc, secret_input=True) from None
-        metadata_manager.create(task_id, payload)
+        metadata_manager.create(task_id, SummarizeTaskJob.model_validate(args[0]))
 
 
 @signals.task_retry.connect(sender=summarize_v2_task)

src/summary/summary/core/docs_service.py

@@ -4,7 +4,7 @@ import json
 import logging
 from urllib.parse import urljoin
 
-from requests import RequestException, Session
+from requests import Session
 from requests.adapters import HTTPAdapter
 from urllib3.util import Retry
 
@@ -43,8 +43,6 @@ def _post_with_retries(*, url, data, api_key: str | None = None):
         response = session.post(url, json=data, timeout=(20, 3 * 60))
         response.raise_for_status()
         return response
-    except RequestException:
-        raise RequestException("Docs delivery failed") from None
     finally:
         session.close()
 

src/summary/summary/core/exceptions.py

@@ -1,62 +0,0 @@
-"""Validation errors suitable for logging and transport."""
-
-from typing import get_args
-
-from pydantic import SecretStr, ValidationError
-from pydantic_core import ErrorType, PydanticCustomError
-
-_BUILTIN_ERROR_TYPES = frozenset(get_args(ErrorType))
-
-
-def clean_validation_errors(errors: list[dict]) -> list[dict]:
-    """Mask SecretStr values, including those nested in validation input."""
-
-    def clean(value):
-        if isinstance(value, SecretStr):
-            return "[redacted]"
-        if isinstance(value, Exception):
-            # Do not retain validator exception objects, whose args may hold secrets.
-            return str(value)
-        if isinstance(value, dict):
-            return {key: clean(item) for key, item in value.items()}
-        if isinstance(value, list):
-            return [clean(item) for item in value]
-        if isinstance(value, tuple):
-            return tuple(clean(item) for item in value)
-        return value
-
-    return clean(errors)
-
-
-class CleanedValidationError(ValidationError):
-    """A new Pydantic exception with secret inputs replaced by a marker."""
-
-    def __init__(self, error, *args, secret_input=False, **kwargs):
-        """State is initialized by Pydantic during __new__."""
-
-    def __new__(cls, error, *args, secret_input=False, **kwargs):
-        """Accept an original error, or Pydantic's native construction arguments."""
-        if not isinstance(error, ValidationError):
-            # Pydantic uses this path when constructing or unpickling the error.
-            return super().__new__(cls, error, *args, **kwargs)
-
-        details = clean_validation_errors(error.errors(include_url=False))
-        for detail in details:
-            if secret_input:
-                # An adapter may have received the unwrapped value of a SecretStr.
-                detail["input"] = "[redacted]"
-        return cls._from_details(error.title, details)
-
-    @classmethod
-    def _from_details(cls, title, details):
-        """Reconstruct builtin and custom Pydantic error codes."""
-        for detail in details:
-            if detail["type"] not in _BUILTIN_ERROR_TYPES:
-                detail["type"] = PydanticCustomError(
-                    detail["type"], detail["msg"], detail.get("ctx")
-                )
-        return cls.from_exception_data(title, details, hide_input=True)
-
-    def __reduce__(self):
-        """Preserve custom error codes when Celery pickles the exception."""
-        return self._from_details, (self.title, self.errors(include_url=False))

src/summary/summary/core/file_service.py

@@ -17,7 +17,6 @@ import requests
 from botocore.config import Config
 
 from summary.core.config import get_settings
-from summary.core.privacy import redact_url
 from summary.core.shared_models import WhisperXResponse
 
 settings = get_settings()
@@ -315,7 +314,7 @@ class FileService:
         """Download file from a cloud storage URL to local temporary file."""
         logger.info(
             "Download recording from URL | cloud_storage_url: %s",
-            redact_url(cloud_storage_url),
+            cloud_storage_url,
         )
 
         if not cloud_storage_url:
@@ -353,10 +352,10 @@ class FileService:
                     logger.debug("Recording local file path: %s", local_path)
                     return local_path
 
-        except requests.RequestException:
+        except requests.RequestException as e:
             raise FileServiceException(
                 "Unexpected error while downloading object from cloud_storage_url."
-            ) from None
+            ) from e
 
     def _validate_duration(self, duration_seconds: float) -> None:
         """Validate audio file duration against configured maximum."""
@@ -377,7 +376,7 @@ class FileService:
 
     def read_cloud_storage_json(self, cloud_storage_url: str) -> dict:
         """Read and parse a JSON file from a url."""
-        logger.info("Reading JSON: %s", redact_url(cloud_storage_url))
+        logger.info("Reading JSON: %s", cloud_storage_url)
         res = requests.get(cloud_storage_url, timeout=(10, 100))
         res.raise_for_status()
         return res.json()

src/summary/summary/core/llm_service.py

@@ -140,6 +140,6 @@ class LLMService:
             response = self._client.chat.completions.create(**params)
             return response.choices[0].message.content
 
-        except Exception:
-            logger.error("LLM call failed")
-            raise LLMException("LLM call failed") from None
+        except Exception as e:
+            logger.exception("LLM call failed: %s", e)
+            raise LLMException(f"LLM call failed: {e}") from e

src/summary/summary/core/models.py

@@ -2,17 +2,10 @@
 
 from datetime import datetime
 
-from pydantic import (
-    AwareDatetime,
-    BaseModel,
-    ConfigDict,
-    EmailStr,
-    Field,
-    field_validator,
-)
+from pydantic import AwareDatetime, BaseModel, EmailStr, Field, field_validator
 
 from summary.core.config import get_settings
-from summary.core.types import SecretUrl
+from summary.core.types import Url
 
 settings = get_settings()
 
@@ -20,8 +13,6 @@ settings = get_settings()
 class SharedV2TaskCreation(BaseModel):
     """Model that holds basic information for task creation."""
 
-    model_config = ConfigDict(hide_input_in_errors=True)
-
     user_sub: str = Field(title="User Sub", description="The user's sub.")
     user_email: EmailStr | None = Field(
         default=None,
@@ -33,9 +24,7 @@ class SharedV2TaskCreation(BaseModel):
 class RecordingMetadata(BaseModel):
     """Model for recording metadata."""
 
-    model_config = ConfigDict(hide_input_in_errors=True)
-
-    cloud_storage_url: SecretUrl = Field(
+    cloud_storage_url: Url = Field(
         title="Cloud Storage URL",
         description="The URL of the metadata file for speaker assignment.",
     )
@@ -46,8 +35,6 @@ class RecordingMetadata(BaseModel):
 class PushToDocsBaseConfig(BaseModel):
     """Model containing information for pushing transcript and summaries to docs."""
 
-    model_config = ConfigDict(hide_input_in_errors=True)
-
     user_email: EmailStr = Field(
         title="User Email", description="The user's email, future owner of the docs."
     )
@@ -57,12 +44,12 @@ class PushToDocsBaseConfig(BaseModel):
 class PushToDocsTranscriptConfig(PushToDocsBaseConfig):
     """Model for push to docs information for transcripts."""
 
-    download_link: SecretUrl | None = Field(
+    download_link: Url | None = Field(
         default=None,
         title="Download Link",
         description="The link to download the recording.",
     )
-    form_link: SecretUrl | None = Field(
+    form_link: Url | None = Field(
         default=None,
         title="Form Link",
         description="The link to fill out a form for the recording.",
@@ -82,7 +69,7 @@ class PushToDocsSummaryConfig(PushToDocsBaseConfig):
 class TranscribeTaskApiRequest(SharedV2TaskCreation):
     """Model for creating a transcribe task (used for API request)."""
 
-    cloud_storage_url: SecretUrl = Field(
+    cloud_storage_url: Url = Field(
         title="Cloud storage URL",
         description="The URL of the audio file to transcribe.",
     )

src/summary/summary/core/privacy.py

@@ -1,36 +0,0 @@
-"""Privacy helpers for observability."""
-
-from urllib.parse import urlsplit, urlunsplit
-
-from pydantic import BaseModel, SecretStr
-
-
-def dump_for_transport(model: BaseModel) -> dict:
-    """Reveal secrets explicitly for task messages, HTTP bodies and API responses."""
-
-    def reveal(value):
-        if isinstance(value, SecretStr):
-            return value.get_secret_value()
-        if isinstance(value, dict):
-            return {key: reveal(item) for key, item in value.items()}
-        if isinstance(value, list):
-            return [reveal(item) for item in value]
-        return value
-
-    return reveal(model.model_dump())
-
-
-def redact_url(url):
-    """Keep the source identifiable without logging query or user credentials."""
-    if not isinstance(url, str):
-        return "[redacted]"
-    # Remove query and fragment before parsing, including for malformed URLs.
-    base, has_query, _ = url.partition("?")
-    base = base.partition("#")[0]
-    try:
-        parts = urlsplit(base)
-    except ValueError:
-        return "[redacted]"
-    authority = parts.netloc.rsplit("@", 1)[-1]
-    redacted = urlunsplit(parts._replace(netloc=authority))
-    return redacted + ("?[redacted]" if has_query else "")

src/summary/summary/core/sentry.py

@@ -1,12 +1,9 @@
 """Sentry configuration."""
 
-import re
-
 import sentry_sdk
 from sentry_sdk.scrubber import DEFAULT_DENYLIST, DEFAULT_PII_DENYLIST, EventScrubber
 
 from summary.core.config import get_settings
-from summary.core.privacy import redact_url
 
 # Exact names (case-insensitive) of variables and dict keys to redact.
 SENSITIVE_DATA_DENYLIST = [
@@ -93,45 +90,5 @@ def init_sentry() -> None:
         # Task creation requests carry the content to summarize.
         max_request_body_size="never",
         include_local_variables=True,
-        before_send=before_send,
-        before_send_transaction=before_send,
-        before_breadcrumb=before_breadcrumb,
         event_scrubber=build_event_scrubber(),
     )
-
-
-def _scrub_strings(value):
-    """Remove URL credentials, queries and fragments throughout an event."""
-    if isinstance(value, str):
-        return re.sub(
-            r"https?://[^\s\"'<>]+",
-            lambda m: redact_url(m.group()),
-            value,
-            flags=re.IGNORECASE,
-        )
-    if isinstance(value, dict):
-        return {key: _scrub_strings(item) for key, item in value.items()}
-    if isinstance(value, list):
-        return [_scrub_strings(item) for item in value]
-    return value
-
-
-def before_send(event, hint):
-    """Keep exception types and stacks, but discard untrusted message text."""
-    del hint
-    event.pop("message", None)
-    event.pop("logentry", None)
-    request = event.get("request", {})
-    request.pop("data", None)
-    request.pop("query_string", None)
-    for exception in event.get("exception", {}).get("values", []):
-        exception["value"] = "[Filtered]"
-    return _scrub_strings(event)
-
-
-def before_breadcrumb(crumb, hint):
-    """Drop arbitrary breadcrumb text and scrub URLs in structured data."""
-    del hint
-    crumb.pop("message", None)
-    crumb.pop("data", None)
-    return _scrub_strings(crumb)

src/summary/summary/core/shared_models.py

@@ -2,9 +2,7 @@
 
 from typing import Annotated, Literal, Union
 
-from pydantic import BaseModel, ConfigDict, Field, TypeAdapter
-
-from summary.core.types import SecretUrl
+from pydantic import BaseModel, Field, TypeAdapter
 
 
 class WordSegment(BaseModel):
@@ -67,8 +65,6 @@ class WhisperXResponse(BaseModel):
 class BaseWebhook(BaseModel):
     """Base webhook payload."""
 
-    model_config = ConfigDict(hide_input_in_errors=True)
-
     job_id: str = Field(
         title="Job ID",
         description="The ID of the job document in the receiver system.",
@@ -80,7 +76,7 @@ class TranscribeWebhookSuccessPayload(BaseWebhook):
 
     type: Literal["transcript"] = Field(default="transcript")
     status: Literal["success"] = Field(default="success")
-    transcription_data_url: SecretUrl = Field(
+    transcription_data_url: str = Field(
         title="Transcript", description="URL to the raw transcription data."
     )
 
@@ -125,7 +121,7 @@ class SummarizeWebhookSuccessPayload(BaseWebhook):
 
     type: Literal["summary"] = Field(default="summary")
     status: Literal["success"] = Field(default="success")
-    summary_data_url: SecretUrl = Field(
+    summary_data_url: str = Field(
         title="Summary", description="URL to the raw summary data."
     )
 

src/summary/summary/core/types.py

@@ -2,31 +2,9 @@
 
 from typing import Annotated
 
-from pydantic import (
-    AfterValidator,
-    BeforeValidator,
-    HttpUrl,
-    SecretStr,
-    TypeAdapter,
-    ValidationError,
-)
-
-from summary.core.exceptions import CleanedValidationError
+from pydantic import BeforeValidator, HttpUrl, TypeAdapter
 
 http_url_adapter = TypeAdapter(HttpUrl)
 Url = Annotated[
     str, BeforeValidator(lambda value: str(http_url_adapter.validate_python(value)))
 ]
-
-
-def _validate_secret_url(value: SecretStr) -> SecretStr:
-    """Validate and normalize a URL without echoing it in validator messages."""
-    try:
-        return SecretStr(
-            str(http_url_adapter.validate_python(value.get_secret_value()))
-        )
-    except ValidationError as exc:
-        raise CleanedValidationError(exc, secret_input=True) from None
-
-
-SecretUrl = Annotated[SecretStr, AfterValidator(_validate_secret_url)]