🔖(addons) remove the beta tag

Promote the addon to a stable v1 release.
✨(addon) show add-in tools when creating meetings in shared calendars
2026-07-27 04:09:26 +00:00 · 2026-07-21 10:25:27 +02:00 · 2026-07-21 10:16:14 +02:00 · 2026-07-13 11:32:46 +02:00 · 2026-07-13 11:32:46 +02:00 · 2026-07-11 16:08:57 +02:00
144 changed files with 7673 additions and 5486 deletions
@@ -82,7 +82,7 @@ jobs:
      - name: Install Node.js
        uses: actions/setup-node@v6
        with:
-          node-version: "18"
+          node-version: "22"

      - name: Restore the mail templates
        uses: actions/cache@v5
@@ -305,7 +305,6 @@ jobs:
        working-directory: src/summary

    env:
-      V1_TENANT_ID: 'test-tenant'
      AUTHORIZED_TENANTS: '[{"id": "test-tenant", "api_key": "test-api-token", "webhook_url": "https://example.com/webhook", "webhook_api_key": "test-webhook-api-key"}]'
      AWS_STORAGE_BUCKET_NAME: "http://meet-media-storage"
      AWS_S3_ENDPOINT_URL: "minio:9000"
@@ -10,18 +10,87 @@ and this project adheres to

 ### Added

+- ✨(backend) allow searching the recording admin table by owner email
+- ✨(frontend) add participant color gradient when camera is off #1490
+- ✨(all) allow forcing SSO display name for authenticated users
+- ➕(frontend) install vite-plugin-static-copy for MediaPipe WASM assets
+- ✨(addon) show add-in tools when creating meetings in shared calendars
+
+### Changed
+
+- 🗑️(settings) deprecate SUMMARY_SERVICE_VERSION=1
+- ⬆️(mail) update mjml to v5 and @html-to/text-cli
+- 🚸(frontend) initialize the join input name with the persisted full name
+- ♻️(frontend) refactor background processors to use the new API
+- ♻️(frontend) inline model weights to avoid loading them from remote
+- ♻️(frontend) inline MediaPipe WASM modules to avoid loading from remote
+- ⬆️(frontend) upgrade posthog-js from 1.387.0 to 1.391.2
+- ⬆️(frontend) upgrade react-stately from 3.47.0 to 3.48.0
+- ⬆️(frontend) upgrade react-aria from 3.49.0 to 3.50.0
+- ⬆️(frontend) upgrade react-aria-components from 1.18.0 to 1.19.0
+
+### Fixed
+
+- 🩹(backend) identify externally provisioned users to PostHog
+- 🐛(backend) fix info panel crash for unregistered rooms
+- ♿️(frontend) focus side panel container on open #1452
+
+## [1.23.0] - 2026-07-08
+
+### Added
+
+- ✨(backend) extend analytics module to support feature flags
+- ✨(backend) implement feature flags in Posthog analytics backend
+- ✨(agents) report errors to Sentry for all LiveKit agents
+
+### Changed
+
+- ⬆️(agents) upgrade to python 3.14 slim
+- ⬆️(dependencies) update python dependencies
+- 💥(summary) remove v1 related code #1362
+- ✨(meet) use compatible with summary v2 #1362
+- ♻️(backend) refactor analytics backend from Protocol to abstract class
+- 🔥(summary) remove call to summary enabled feature flag
+- ♻️(frontend) wrap MuteEveryoneButton with AdminOrOwnerOnly
+- ⬆️(frontend) upgrade livekit-client from 2.19.0 to 2.19.2
+- ⬆️(frontend) upgrade posthog-js from 1.386.5 to 1.387.0
+- ⬆️(frontend) upgrade @tanstack/react-query from 5.100.14 to 5.101.0
+- ⬆️(frontend) update the frontend build image to Node 22
+- 🔒️(frontend) update docker image to nginx-unprivileged:1.30.3-alpine3.23
+- ✨(summary) more precise analytics events
+
+### Fixed
+
+- 🚀(front) fix frontend build failure
+- 🐛(makefile) fix args in make test
+- 🩹(backend) fix case-insensitive email deduplication in merge command
+- 🐛(summary) support media files with bad streams #1478
+
+## [1.22.0] - 2026-07-03
+
+### Added
+
 - ✨(frontend) cap and paginate tiles in picture-in-picture #1383
 - 📝(docs) document rebranding the favicon via a volume mount #1443
 - ✨(backend) add command to clean pending and deleted files
 - 🧱(helm) run clean files command as cronjob
 - ✨(backend) add fallback to save recordings without S3/MinIO webhooks
 - 🩹(frontend) enable screen share button in PiP #1458
+- 🐛(backend) support unencoded S3 notification object keys #1455
+- ✨(frontend) prioritize screen share in picture-in-picture layout #1467

 ### Changed

 - ✨(summary) generalized stt api call #1420
 - ♻️(env) refactor env variables handling
 - 🚸(frontend) use "Advanced" instead of "Premium" in the sidepanel
+- ♿️(frontend) make fullscreen share warning keyboard accessible #1459
+- ⬆️(summary) update docker alpine to 3.24 & ffmpeg to 8.1.2 #1471
+
+### Fixed
+
+- 🛂(backend) reject user access tokens on the API
+- 🩹(helm) fix Helm ingress rendering when passing multiple hosts

 ## [1.21.0] - 2026-06-15

@@ -37,7 +37,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
  uv sync --locked --no-dev

 # ---- mails ----
-FROM node:20 AS mail-builder
+FROM node:22 AS mail-builder

 COPY ./src/mail /mail/app

@@ -211,24 +211,25 @@ lint-pylint: ## lint back-end python sources with pylint only on changed files f
 	@$(COMPOSE_RUN_APP) pylint meet demo core
 .PHONY: lint-pylint

-test: ## run project tests
-	@$(MAKE) test-back-parallel
-	@$(MAKE) test-summary
+test: ## run project tests; pass extra pytest args via ARGS, e.g. `make test ARGS="-vv"`
+	@args="$(ARGS) $(filter-out $@,$(MAKECMDGOALS))" && \
+	$(MAKE) test-back-parallel ARGS="$${args}" && \
+	$(MAKE) test-summary ARGS="$${args}"
 .PHONY: test

-test-back: ## run back-end tests
-	@args="$(filter-out $@,$(MAKECMDGOALS))" && \
-	bin/pytest $${args:-${1}}
+test-back: ## run back-end tests (pass extra pytest args via ARGS)
+	@args="$(ARGS) $(filter-out $@,$(MAKECMDGOALS))" && \
+	bin/pytest $${args}
 .PHONY: test-back

-test-back-parallel: ## run all back-end tests in parallel
-	@args="$(filter-out $@,$(MAKECMDGOALS))" && \
-	bin/pytest -n auto $${args:-${1}}
+test-back-parallel: ## run all back-end tests in parallel (pass extra pytest args via ARGS)
+	@args="$(ARGS) $(filter-out $@,$(MAKECMDGOALS))" && \
+	bin/pytest -n auto $${args}
 .PHONY: test-back-parallel

-test-summary: ## run summary tests
-	@args="$(filter-out $@,$(MAKECMDGOALS))" && \
-	bin/pytest-summary $${args:-${1}}
+test-summary: ## run summary tests (pass extra pytest args via ARGS)
+	@args="$(ARGS) $(filter-out $@,$(MAKECMDGOALS))" && \
+	bin/pytest-summary $${args}
 .PHONY: test-summary

 makemigrations:  ## run django makemigrations for the Meet project.
@@ -15,3 +15,15 @@ the following command inside your docker container:
 (Note : in your development environment, you can `make migrate`.)

 ## [Unreleased]
+
+## v1.23.0
+
+As part of the 1.23.0 release, the legacy `api/v1` implementation has been removed from the _experimental_ Summary service and Meet has been migrated to the new `api/v2`.
+
+**To avoid a breaking change, the Meet backend continues to use the Summary service's v1-compatible API format by default (`SUMMARY_SERVICE_VERSION` setting defaults to `1`).**
+
+If you are deploying both Meet and Summary from this repository, you must configure the Meet backend to use the v2 API by setting the following environment variable `SUMMARY_SERVICE_VERSION=2`.
+
+If you are upgrading only the Meet deployment while keeping an older Summary v1 compatible deployment, no action is required, as the v1-compatible API remains the default.
+
+Note that we plan on removing the legacy `v1` summary compatibility in a future major version. If you have your own implementation for the summary service, we recommend updating its API contract and setting `SUMMARY_SERVICE_VERSION=2`.
@@ -113,6 +113,12 @@ update_python_version "summary"
 # Update agents pyproject.toml
 update_python_version "agents"

+# Run uv lock in agents
+print_info "Running uv lock in agents..."
+cd "src/agents"
+uv lock
+cd -
+
 # Update CHANGELOG
 print_info "Updating CHANGELOG..."

@@ -301,7 +301,7 @@ services:
      context: ./src/summary
      dockerfile: Dockerfile
      target: production
-    command: celery -A summary.core.celery_worker worker --pool=solo --loglevel=debug -Q transcribe-queue
+    command: celery -A summary.core.celery_worker worker --pool=solo --loglevel=debug -Q transcribe-queue-v2
    env_file:
      - env.d/development/summary
    volumes:
@@ -321,7 +321,7 @@ services:
      context: ./src/summary
      dockerfile: Dockerfile
      target: production
-    command: celery -A summary.core.celery_worker worker --pool=solo --loglevel=debug -Q summarize-queue
+    command: celery -A summary.core.celery_worker worker --pool=solo --loglevel=debug -Q summarize-queue-v2
    env_file:
      - env.d/development/summary
    volumes:
@@ -1,5 +1,5 @@
 # ---- Front-end image ----
-FROM node:20-alpine AS frontend-deps
+FROM node:22-alpine AS frontend-deps

 WORKDIR /home/frontend/

@@ -54,7 +54,7 @@ RUN npx webpack --mode production


 # ---- Front-end image ----
-FROM nginxinc/nginx-unprivileged:alpine3.23 AS frontend-production
+FROM nginxinc/nginx-unprivileged:1.30.3-alpine3.23 AS frontend-production

 USER root

@@ -65,8 +65,9 @@ ALLOW_UNREGISTERED_ROOMS=False
 RECORDING_ENABLE=True
 RECORDING_STORAGE_EVENT_ENABLE=True
 RECORDING_STORAGE_EVENT_TOKEN=password
-SUMMARY_SERVICE_ENDPOINT=http://app-summary-dev:8000/api/v1/tasks/
+SUMMARY_SERVICE_ENDPOINT=http://app-summary-dev:8000/api/v2/async-jobs/transcribe/
 SUMMARY_SERVICE_API_TOKEN=password
+SUMMARY_SERVICE_WEBHOOK_API_TOKEN=webhook-password
 RECORDING_DOWNLOAD_BASE_URL=http://localhost:3000/recording

 # Recording encoding (LiveKit Egress advanced options).
@@ -9,3 +9,6 @@ DEEPGRAM_API_KEY=

 KYUTAI_STT_BASE_URL=
 KYUTAI_API_KEY=
+
+SENTRY_DSN=
+SENTRY_ENVIRONMENT=
@@ -30,3 +30,4 @@ POSTHOG_ENABLED="False"

 # Transcription
 TRANSCRIPTION_SATISFACTION_FORM_BASE_URL=
+AUTHORIZED_TENANTS='[{"id": "meet","api_key": "password","webhook_url": "https://configure-your-url.com/api/v1.0/recordings/external-process-hook/","webhook_api_key": "webhook-password","allowed_push_to_docs": true}]'
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:mailappor="http://schemas.microsoft.com/office/mailappversionoverrides/1.0" xsi:type="MailApp">
  <Id>a025f0f6-757a-4790-97f3-99c66c4a5795</Id>
-  <Version>0.0.2.0</Version>
+  <Version>1.0.0.0</Version>
  <ProviderName>__APP_NAME__</ProviderName>
  <DefaultLocale>fr-FR</DefaultLocale>
  <DisplayName DefaultValue="__APP_NAME__"/>
@@ -205,5 +205,174 @@
        </bt:String>
      </bt:LongStrings>
    </Resources>
+
+    <!-- ─── V1.1 override: required for shared folder / delegate support ─── -->
+    <VersionOverrides xmlns="http://schemas.microsoft.com/office/mailappversionoverrides/1.1" xsi:type="VersionOverridesV1_1">
+      <Requirements>
+        <bt:Sets DefaultMinVersion="1.8">
+          <bt:Set Name="Mailbox"/>
+        </bt:Sets>
+      </Requirements>
+      <Hosts>
+        <Host xsi:type="MailHost">
+          <DesktopFormFactor>
+            <FunctionFile resid="Commands.Url"/>
+            <SupportsSharedFolders>true</SupportsSharedFolders>
+
+            <!-- ─── Mail: Read ─────────────────────────────────────────── -->
+            <ExtensionPoint xsi:type="MessageReadCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="msgReadGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="msgReadOpenPaneButton">
+                    <Label resid="TaskpaneButton.Label"/>
+                    <Supertip>
+                      <Title resid="TaskpaneButton.Label"/>
+                      <Description resid="TaskpaneButton.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+            <!-- ─── Mail: Compose ─────────────────────────────────────── -->
+            <ExtensionPoint xsi:type="MessageComposeCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="msgComposeGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="msgComposeGenerateLinkButton">
+                    <Label resid="GenerateLink.Label"/>
+                    <Supertip>
+                      <Title resid="GenerateLink.Label"/>
+                      <Description resid="GenerateLink.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ExecuteFunction">
+                      <FunctionName>generateMeetingLinkFromMail</FunctionName>
+                    </Action>
+                  </Control>
+                  <Control xsi:type="Button" id="msgComposeOpenPaneButton">
+                    <Label resid="TaskpaneButton.Label"/>
+                    <Supertip>
+                      <Title resid="TaskpaneButton.Label"/>
+                      <Description resid="TaskpaneButton.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Settings.16x16"/>
+                      <bt:Image size="32" resid="Settings.32x32"/>
+                      <bt:Image size="80" resid="Settings.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+            <!-- ─── Calendar: Compose (New/Edit appointment) ──────────── -->
+            <ExtensionPoint xsi:type="AppointmentOrganizerCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="apptComposeGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="apptGenerateLinkButton">
+                    <Label resid="GenerateLink.Label"/>
+                    <Supertip>
+                      <Title resid="GenerateLink.Label"/>
+                      <Description resid="GenerateLink.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ExecuteFunction">
+                      <FunctionName>generateMeetingLinkFromCalendar</FunctionName>
+                    </Action>
+                  </Control>
+
+                  <Control xsi:type="Button" id="apptOpenSettingsButton">
+                    <Label resid="OpenSettings.Label"/>
+                    <Supertip>
+                      <Title resid="OpenSettings.Label"/>
+                      <Description resid="OpenSettings.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Settings.16x16"/>
+                      <bt:Image size="32" resid="Settings.32x32"/>
+                      <bt:Image size="80" resid="Settings.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+          </DesktopFormFactor>
+        </Host>
+      </Hosts>
+      <Resources>
+        <bt:Images>
+          <bt:Image id="Settings.16x16" DefaultValue="https://localhost:3000/addons/outlook/assets/settings-16.png"/>
+          <bt:Image id="Settings.32x32" DefaultValue="https://localhost:3000/addons/outlook/assets/settings-32.png"/>
+          <bt:Image id="Settings.80x80" DefaultValue="https://localhost:3000/addons/outlook/assets/settings-80.png"/>
+          <bt:Image id="Add.16x16" DefaultValue="https://localhost:3000/addons/outlook/assets/add-16.png"/>
+          <bt:Image id="Add.32x32" DefaultValue="https://localhost:3000/addons/outlook/assets/add-32.png"/>
+          <bt:Image id="Add.80x80" DefaultValue="https://localhost:3000/addons/outlook/assets/add-80.png"/>
+          <bt:Image id="Icon.16x16" DefaultValue="https://localhost:3000/addons/outlook/assets/icon-16.png"/>
+          <bt:Image id="Icon.32x32" DefaultValue="https://localhost:3000/addons/outlook/assets/icon-32.png"/>
+          <bt:Image id="Icon.80x80" DefaultValue="https://localhost:3000/addons/outlook/assets/icon-80.png"/>
+        </bt:Images>
+        <bt:Urls>
+          <bt:Url id="Commands.Url" DefaultValue="https://localhost:3000/addons/outlook/commands.html"/>
+          <bt:Url id="Taskpane.Url" DefaultValue="https://localhost:3000/addons/outlook/taskpane.html"/>
+        </bt:Urls>
+        <bt:ShortStrings>
+          <!-- Default (French) -->
+          <bt:String id="GroupLabel" DefaultValue="__APP_NAME__"/>
+          <bt:String id="GenerateLink.Label" DefaultValue="Ajouter un lien __APP_NAME__">
+            <bt:Override Locale="en-US" Value="Add a __APP_NAME__ link"/>
+            <bt:Override Locale="de-DE" Value="__APP_NAME__-Link hinzufügen"/>
+          </bt:String>
+          <bt:String id="TaskpaneButton.Label" DefaultValue="Ouvrir les paramètres">
+            <bt:Override Locale="en-US" Value="Open settings"/>
+            <bt:Override Locale="de-DE" Value="Einstellungen öffnen"/>
+          </bt:String>
+          <bt:String id="OpenSettings.Label" DefaultValue="Paramètres">
+            <bt:Override Locale="en-US" Value="Settings"/>
+            <bt:Override Locale="de-DE" Value="Einstellungen"/>
+          </bt:String>
+        </bt:ShortStrings>
+        <bt:LongStrings>
+          <bt:String id="GenerateLink.Tooltip" DefaultValue="Génère un lien de réunion __APP_NAME__ et l'insère dans l'événement.">
+            <bt:Override Locale="de-DE" Value="Generiert einen __APP_NAME__-Besprechungslink und fügt ihn in den Termin ein."/>
+            <bt:Override Locale="en-US" Value="Generates a __APP_NAME__ meeting link and inserts it into the item."/>
+          </bt:String>
+          <bt:String id="TaskpaneButton.Tooltip" DefaultValue="Ouvre les paramètres de connexion __APP_NAME__.">
+            <bt:Override Locale="de-DE" Value="Öffnet die __APP_NAME__-Verbindungseinstellungen."/>
+            <bt:Override Locale="en-US" Value="Opens the __APP_NAME__ connection settings."/>
+          </bt:String>
+          <bt:String id="OpenSettings.Tooltip" DefaultValue="Ouvre les paramètres de connexion __APP_NAME__.">
+            <bt:Override Locale="de-DE" Value="Öffnet die __APP_NAME__-Verbindungseinstellungen."/>
+            <bt:Override Locale="en-US" Value="Opens the __APP_NAME__ connection settings."/>
+          </bt:String>
+        </bt:LongStrings>
+      </Resources>
+    </VersionOverrides>
  </VersionOverrides>
 </OfficeApp>
@@ -57,8 +57,7 @@
       data-i18n="footer.feedback"
    ></a>
    <div id="footer-right">
-        <span class="version-badge">beta</span>
-        <span class="version-number">0.0.2</span>
+        <span class="version-number">1.0.0</span>
    </div>
 </footer>
 </body>
@@ -1,4 +1,4 @@
-FROM python:3.13.13-slim AS base
+FROM python:3.14.6-slim AS base

 # Install system dependencies required by LiveKit
 RUN apt-get update && apt-get install -y \
@@ -32,6 +32,8 @@ from minio import Minio
 from minio.error import S3Error

 from exceptions import MissingConfigError
+from observability import configure_sentry, set_job_context
+from tasks import done_callback

 load_dotenv()

@@ -42,6 +44,7 @@ AGENT_NAME = os.getenv("METADATA_COLLECTOR_AGENT_NAME", "metadata-collector")

 def prewarm(proc: JobProcess):
    """Preload voice activity detection model."""
+    configure_sentry(AGENT_NAME)
    proc.userdata["vad"] = silero.VAD.load()


@@ -174,7 +177,13 @@ class MetadataCollector:
            self.on_chat_message_received(reader, participant_identity)
        )
        self._tasks.add(task)
-        task.add_done_callback(lambda _: self._tasks.remove(task))
+        task.add_done_callback(
+            done_callback(
+                logger,
+                self._tasks,
+                f"process chat stream from {participant_identity}",
+            )
+        )

    def save(self):
        """Serialize collected events and upload as JSON to S3."""
@@ -270,16 +279,18 @@ class MetadataCollector:
        logger.info("Participant disconnected: %s", participant.identity)
        task = asyncio.create_task(self._close_session(session))
        self._tasks.add(task)
-
-        def on_close_done(_):
-            self._tasks.discard(task)
-            logger.info(
-                "VAD session closed for %s (remaining sessions: %d)",
-                participant.identity,
-                len(self._sessions),
+        task.add_done_callback(
+            done_callback(
+                logger,
+                self._tasks,
+                f"close VAD session for {participant.identity}",
+                on_success=lambda _: logger.info(
+                    "VAD session closed for %s (remaining sessions: %d)",
+                    participant.identity,
+                    len(self._sessions),
+                ),
            )
-
-        task.add_done_callback(on_close_done)
+        )

    def on_participant_name_changed(self, participant: rtc.RemoteParticipant):
        """Update stored participant name when it changes."""
@@ -360,6 +371,8 @@ async def handle_job_request(job_req: JobRequest) -> None:
@server.rtc_session(agent_name=AGENT_NAME, on_request=handle_job_request)
 async def entrypoint(ctx: JobContext):
    """Initialize and run the metadata collector."""
+    set_job_context(room=ctx.room.name, job_id=ctx.job.id)
+
    logger.info("Starting metadata agent in room: %s", ctx.room.name)
    recording_id = ctx.job.metadata
    metadata_collector = MetadataCollector(ctx, recording_id)
@@ -377,4 +390,7 @@ async def entrypoint(ctx: JobContext):


 if __name__ == "__main__":
+    # Initialize Sentry for the worker process. Each job runs in its own
+    # (forked) process and re-initializes Sentry via prewarm().
+    configure_sentry(AGENT_NAME)
    cli.run_app(server)
@@ -25,6 +25,9 @@ from livekit.agents import (
 )
 from livekit.plugins import deepgram, silero

+from observability import configure_sentry, set_job_context
+from tasks import done_callback
+
 load_dotenv()

 logger = logging.getLogger("transcriber")
@@ -99,24 +102,29 @@ class MultiUserTranscriber:
        logger.info(f"starting session for {participant.identity}")
        task = asyncio.create_task(self._start_session(participant))
        self._tasks.add(task)
-
-        def on_task_done(task: asyncio.Task):
-            try:
-                self._sessions[participant.identity] = task.result()
-            finally:
-                self._tasks.discard(task)
-
-        task.add_done_callback(on_task_done)
+        task.add_done_callback(
+            done_callback(
+                logger,
+                self._tasks,
+                f"start transcription session for {participant.identity}",
+            )
+        )

    def on_participant_disconnected(self, participant: rtc.RemoteParticipant):
        """Handle participant disconnection by closing transcription session."""
-        if (session := self._sessions.pop(participant.identity)) is None:
+        if (session := self._sessions.pop(participant.identity, None)) is None:
            return

        logger.info(f"closing session for {participant.identity}")
        task = asyncio.create_task(self._close_session(session))
        self._tasks.add(task)
-        task.add_done_callback(lambda _: self._tasks.discard(task))
+        task.add_done_callback(
+            done_callback(
+                logger,
+                self._tasks,
+                f"close transcription session for {participant.identity}",
+            )
+        )

    async def _start_session(self, participant: rtc.RemoteParticipant) -> AgentSession:
        """Create and start transcription session for participant."""
@@ -139,6 +147,7 @@ class MultiUserTranscriber:
                participant_identity=participant.identity,
            )
        )
+        self._sessions[participant.identity] = session
        return session

    async def _close_session(self, sess: AgentSession) -> None:
@@ -149,6 +158,8 @@ class MultiUserTranscriber:

 async def entrypoint(ctx: JobContext):
    """Initialize and run the multi-user transcriber."""
+    set_job_context(room=ctx.room.name, job_id=ctx.job.id)
+
    transcriber = MultiUserTranscriber(ctx)
    transcriber.start()

@@ -193,11 +204,15 @@ async def handle_transcriber_job_request(job_req: JobRequest) -> None:

 def prewarm(proc: JobProcess):
    """Preload voice activity detection model."""
+    configure_sentry(TRANSCRIBER_AGENT_NAME)
    if ENABLE_SILERO_VAD:
        proc.userdata["vad"] = silero.VAD.load()


 if __name__ == "__main__":
+    # Initialize Sentry for the worker process. Each job runs in its own
+    # (forked) process and re-initializes Sentry via prewarm().
+    configure_sentry(TRANSCRIBER_AGENT_NAME)
    cli.run_app(
        WorkerOptions(
            entrypoint_fnc=entrypoint,
@@ -0,0 +1,83 @@
+"""Sentry helpers for the LiveKit agents."""
+
+import logging
+import os
+import tomllib
+from os import path
+
+import sentry_sdk
+from sentry_sdk.integrations.logging import LoggingIntegration
+
+logger = logging.getLogger("observability")
+
+BASE_DIR = path.dirname(path.abspath(__file__))
+
+
+def get_release():
+    """Get the current release of the application.
+
+    By release, we mean the ``version`` declared in ``pyproject.toml``.
+    If the file cannot be read or declares no version, it defaults to "NA".
+    """
+    try:
+        with open(path.join(BASE_DIR, "pyproject.toml"), "rb") as pyproject:
+            return tomllib.load(pyproject)["project"]["version"]
+    except (FileNotFoundError, KeyError, tomllib.TOMLDecodeError):
+        return "NA"  # Default: not available
+
+
+def configure_sentry(agent_name: str) -> None:
+    """Initialize Sentry for the current agent process.
+
+    No-op if ``SENTRY_DSN`` is not configured. Otherwise (re)initializes Sentry
+    unconditionally so the calling process gets its own live transport.
+
+    Must be called once per process: in the worker entrypoint and again in the
+    per-job ``prewarm``/``setup_fnc`` hook, because LiveKit runs each job in a
+    forked process. A forked child inherits the parent's initialized Sentry
+    client but not its background transport thread (threads do not survive
+    ``fork()``), so it must re-init to get a working transport. For that reason,
+    do NOT guard this with ``sentry_sdk.is_initialized()``: the child inherits it
+    as ``True`` and would skip init, silently dropping every event.
+
+    Args:
+        agent_name: Identifier of the agent, attached as a tag to Sentry issues
+    """
+    # Read the DSN at call time so it picks up variables that load_dotenv()
+    # populated after this module was first imported.
+    sentry_dsn = os.getenv("SENTRY_DSN")
+    if not sentry_dsn:
+        logger.debug("SENTRY_DSN not defined for agent '%s'", agent_name)
+        return
+
+    sentry_sdk.init(
+        dsn=sentry_dsn,
+        environment=os.getenv("SENTRY_ENVIRONMENT"),
+        release=get_release(),
+        debug=False,
+        integrations=[
+            # Capture log records emitted at ERROR and above as Sentry events.
+            # This covers the agents' explicit logger.exception(...) calls as
+            # well as asyncio's "Exception in callback" / "Task exception was
+            # never retrieved" records, so unhandled task failures surface too.
+            LoggingIntegration(level=logging.INFO, event_level=logging.ERROR),
+        ],
+    )
+    sentry_sdk.set_tag("application", "agents")
+    sentry_sdk.set_tag("agent", agent_name)
+
+    logger.info("Sentry initialized for agent '%s' (pid %d)", agent_name, os.getpid())
+
+
+def set_job_context(*, room: str | None = None, job_id: str | None = None) -> None:
+    """Tag the current Sentry scope with the LiveKit job being handled.
+
+    Args:
+        room: Name of the room the job is serving.
+        job_id: LiveKit job identifier.
+    """
+    scope = sentry_sdk.get_current_scope()
+    if room is not None:
+        scope.set_tag("room", room)
+    if job_id is not None:
+        scope.set_tag("job_id", job_id)
@@ -1,21 +1,22 @@

 [project]
 name = "agents"
-version = "1.21.0"
+version = "1.23.0"
 requires-python = ">=3.12"
 dependencies = [
-    "livekit-agents==1.5.13",
-    "livekit-plugins-deepgram==1.5.13",
-    "livekit-plugins-silero==1.5.13",
+    "livekit-agents==1.6.4",
+    "livekit-plugins-deepgram==1.6.4",
+    "livekit-plugins-silero==1.6.4",
    "livekit-plugins-kyutai-lasuite==0.0.6",
    "python-dotenv==1.2.2",
    "protobuf==6.33.6",
-    "minio==7.2.20"
+    "minio==7.2.20",
+    "sentry-sdk==2.60.0",
 ]

 [project.optional-dependencies]
 dev = [
-    "ruff==0.15.14",
+    "ruff==0.15.19",
 ]

 [tool.uv]
@@ -0,0 +1,42 @@
+"""Helpers for managing asyncio tasks."""
+
+import asyncio
+import logging
+from collections.abc import Callable
+from typing import Any
+
+
+def done_callback(
+    logger: logging.Logger,
+    tasks: set[asyncio.Task],
+    description: str,
+    *,
+    on_success: Callable[[Any], None] | None = None,
+) -> Callable[[asyncio.Task], None]:
+    """Build a done-callback for a background task.
+
+    Meant to be passed to `asyncio.Task.add_done_callback`.
+
+    Args:
+        logger: Logger used to report failures, so records keep the caller's
+            logger name.
+        tasks: Set the task was registered in; the task is discarded from it.
+        description: Human-readable intended action
+        on_success: Optional callback invoked with the task's result when it
+            completes without error.
+
+    Returns:
+        A callback suitable for ``task.add_done_callback(...)``.
+    """
+
+    def _finalize(task: asyncio.Task) -> None:
+        tasks.discard(task)
+        if task.cancelled():
+            return
+        if (exc := task.exception()) is not None:
+            logger.exception("failed to %s", description, exc_info=exc)
+            return
+        if on_success is not None:
+            on_success(task.result())
+
+    return _finalize
@@ -11,7 +11,7 @@ from core.recording.event import notification

 from . import models
 from .tasks.file import process_file_deletion
-from .utils import generate_download_file_url
+from .utils import generate_download_s3_url


 def hard_delete_file(file):
@@ -242,7 +242,7 @@ class FileAdmin(admin.ModelAdmin):
        """Return a clickable preview URL for the file."""
        if not obj.is_ready:
            return "-"
-        url = generate_download_file_url(obj, expires_in=60 * 60)
+        url = generate_download_s3_url(obj.key, expires_in=60 * 60)

        return format_html(
            '<a href="{}" target="_blank" rel="noopener noreferrer">Open File</a>', url
@@ -402,7 +402,14 @@ class RecordingAdmin(admin.ModelAdmin):
    """Recording admin interface declaration."""

    inlines = (RecordingAccessInline,)
-    search_fields = ["status", "=id", "worker_id", "room__slug", "=room__id"]
+    search_fields = [
+        "status",
+        "=id",
+        "worker_id",
+        "room__slug",
+        "=room__id",
+        "accesses__user__email",
+    ]
    list_display = (
        "id",
        "status",
@@ -0,0 +1,67 @@
+"""
+Pluggable analytics.
+
+Usage anywhere in the codebase:
+
+    from core import analytics
+
+    analytics.capture(request.user, "room_created", {"room_id": str(room.pk)})
+
+The concrete backend is resolved lazily from Django settings, so swapping
+PostHog for anything else is a configuration change, not a code change.
+"""
+
+from functools import lru_cache
+from typing import Any
+
+from django.conf import settings
+from django.utils.module_loading import import_string
+
+from .base import AnalyticsBackend, NoOpAnalytics
+from .events import AnalyticsEvent
+from .user_feature_flags import UserFeatureFlag
+
+__all__ = [
+    "get_analytics",
+    "identify",
+    "capture",
+    "AnalyticsBackend",
+    "AnalyticsEvent",
+    "is_user_feature_flag_enabled",
+    "UserFeatureFlag",
+]
+
+
+@lru_cache(maxsize=1)
+def get_analytics() -> AnalyticsBackend:
+    """Instantiate the configured backend once per process."""
+    dotted_path = getattr(settings, "ANALYTICS_BACKEND", None)
+    options = getattr(settings, "ANALYTICS_BACKEND_SETTINGS", {}) or {}
+
+    if not dotted_path:
+        return NoOpAnalytics()
+
+    backend_class = import_string(dotted_path)
+    return backend_class(**options)
+
+
+# Convenience module-level shortcuts
+
+analytics_instance = get_analytics()
+
+
+def identify(user, properties: dict[str, Any] | None = None) -> None:
+    """Associate traits with an identified user."""
+    analytics_instance.identify(user, properties)
+
+
+def capture(
+    user, event: AnalyticsEvent, properties: dict[str, Any] | None = None
+) -> None:
+    """Record an event performed by an identified user."""
+    analytics_instance.capture(user, event, properties)
+
+
+def is_user_feature_flag_enabled(user, feature_name: UserFeatureFlag) -> bool:
+    """Check if a feature is enabled at the user level."""
+    return analytics_instance.is_user_feature_enabled(user, feature_name)
@@ -0,0 +1,65 @@
+"""Analytics backend protocol and default no-op implementation."""
+
+from abc import ABC, abstractmethod
+from typing import Any, Mapping
+
+from ..models import User
+from .events import AnalyticsEvent
+from .user_feature_flags import UserFeatureFlag
+
+
+class AnalyticsBackend(ABC):
+    """
+    Interface every analytics backend must implement.
+
+    Backends are instantiated once (singleton) with the kwargs declared in
+    settings.ANALYTICS_BACKEND_SETTINGS, e.g.:
+
+        ANALYTICS_BACKEND = "core.analytics.posthog.PostHogAnalytics"
+        ANALYTICS_BACKEND_SETTINGS = {"api_key": "...", "host": "..."}
+    """
+
+    @abstractmethod
+    def identify(self, user: User, properties: dict[str, Any] | None = None) -> None:
+        """Associate traits (email, name, ...) with an identified user."""
+
+    @abstractmethod
+    def capture(
+        self,
+        user: User,
+        event: AnalyticsEvent,
+        properties: dict[str, Any] | None = None,
+    ) -> None:
+        """Record an event performed by an identified user."""
+
+    @abstractmethod
+    def shutdown(self) -> None:
+        """Flush pending events. Called on process exit."""
+
+    def get_user_feature_flags(
+        self,
+        user: User,  # pylint: disable=unused-argument
+    ) -> Mapping[UserFeatureFlag, bool | str | None]:
+        """Return a dict of feature flags for the given user."""
+        # We return an empty dict here by default to avoid a breaking change
+        # By making this method abstract.
+        return {}
+
+    def is_user_feature_enabled(
+        self, user: User, feature_name: UserFeatureFlag
+    ) -> bool:
+        """Check if a feature is enabled at the user level."""
+        return self.get_user_feature_flags(user).get(feature_name, False) is True
+
+
+class NoOpAnalytics(AnalyticsBackend):
+    """Default backend: silently discards everything."""
+
+    def identify(self, user: User, properties=None) -> None:
+        """No-op: discards identify calls."""
+
+    def capture(self, user, event, properties=None) -> None:
+        """No-op: discards captured events."""
+
+    def shutdown(self) -> None:
+        """No-op: nothing to flush."""
@@ -0,0 +1,10 @@
+"""Catalog of all analytics events emitted by the backend."""
+
+from enum import StrEnum
+
+
+class AnalyticsEvent(StrEnum):
+    """All trackable events. Values are the wire names sent to the provider."""
+
+    # Rooms
+    ROOM_CREATED = "room_created"
@@ -0,0 +1,116 @@
+"""PostHog implementation of the analytics backend protocol."""
+
+import logging
+from typing import Any, Mapping
+
+from django.core.cache import cache
+
+from posthog import Posthog
+
+from ..models import User
+from .base import AnalyticsBackend
+from .events import AnalyticsEvent
+from .user_feature_flags import UserFeatureFlag
+
+logger = logging.getLogger(__name__)
+
+
+class PostHogAnalytics(AnalyticsBackend):
+    """Send events to PostHog, keyed on the user's primary key (UUID)."""
+
+    def __init__(
+        self,
+        *,
+        api_key: str,
+        host: str = "https://eu.i.posthog.com",
+        feature_flags_cache_ttl: int = 60,
+        feature_flags_cache_prefix: str = "user_feature_flags:",
+        **kwargs: Any,
+    ) -> None:
+
+        # The SDK batches and sends in a background thread by default,
+        # so calls below never block the request/response cycle.
+        self._client = Posthog(
+            project_api_key=api_key,
+            host=host,
+            **kwargs,
+        )
+        self._feature_flags_cache_ttl = feature_flags_cache_ttl
+        self._feature_flags_cache_prefix = feature_flags_cache_prefix
+
+    @staticmethod
+    def _distinct_id(user: User) -> str | None:
+        """Return the PostHog distinct_id for a user, or None if anonymous."""
+        if user is None or not getattr(user, "is_authenticated", False):
+            return None
+        return str(user.pk)
+
+    def identify(self, user: User, properties: dict[str, Any] | None = None) -> None:
+        """Associate traits (email, name, ...) with an identified user."""
+        distinct_id = self._distinct_id(user)
+        if distinct_id is None:
+            return
+        try:
+            self._client.set(
+                distinct_id=distinct_id,
+                properties=properties or {},
+            )
+        except Exception:  # pylint: disable=broad-exception-caught
+            logger.exception("PostHog identify failed")
+
+    def capture(
+        self,
+        user: User,
+        event: AnalyticsEvent,
+        properties: dict[str, Any] | None = None,
+    ) -> None:
+        """Record an event performed by an identified user."""
+        distinct_id = self._distinct_id(user)
+        if distinct_id is None:
+            return
+        try:
+            self._client.capture(
+                distinct_id=distinct_id,
+                event=str(event),
+                properties=properties or {},
+            )
+        except Exception:  # pylint: disable=broad-exception-caught
+            logger.exception("PostHog capture failed for event %s", event)
+
+    def shutdown(self) -> None:
+        """Flush pending events. Called on process exit."""
+        self._client.shutdown()
+
+    def _fetch_user_feature_flags(
+        self, user: User
+    ) -> Mapping[UserFeatureFlag, bool | str | None]:
+        """Compute feature flags for a user."""
+
+        distinct_id = self._distinct_id(user)
+        if distinct_id is None:
+            return {}
+
+        flags = self._client.evaluate_flags(distinct_id)
+        out: dict[UserFeatureFlag, bool | str | None] = {}
+        for flag_key in UserFeatureFlag:
+            out[flag_key] = flags.get_flag(flag_key.value)
+
+        return out
+
+    def get_user_feature_flags(
+        self, user: User
+    ) -> Mapping[UserFeatureFlag, bool | str | None]:
+        """Get feature flags for a user. Caches the result for a short time."""
+        distinct_id = self._distinct_id(user)
+        if distinct_id is None:
+            return {}
+
+        try:
+            return cache.get_or_set(
+                f"{self._feature_flags_cache_prefix}{distinct_id}",
+                default=lambda: self._fetch_user_feature_flags(user),
+                timeout=self._feature_flags_cache_ttl,
+            )
+        except Exception:  # pylint: disable=broad-exception-caught
+            logger.exception("Failed to get feature flags for user %s", user.pk)
+            return {}
@@ -0,0 +1,9 @@
+"""Catalog of all analytics feature flags used by the backend."""
+
+from enum import StrEnum
+
+
+class UserFeatureFlag(StrEnum):
+    """All feature flags configured in the app."""
+
+    TRANSCRIPT_SUMMARY_ENABLED = "summary-enabled"
@@ -68,6 +68,9 @@ def get_frontend_configuration(request):
            "enable_firefox_proxy_workaround": settings.LIVEKIT_ENABLE_FIREFOX_PROXY_WORKAROUND,
            "default_sources": settings.LIVEKIT_DEFAULT_SOURCES,
        },
+        "authenticated_users_can_edit_display_name": (
+            settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME
+        ),
    }
    frontend_configuration.update(settings.FRONTEND_CONFIGURATION)
    return Response(frontend_configuration)
@@ -563,3 +563,13 @@ class RenameParticipantSerializer(BaseValidationOnlySerializer):
    """Serializer for renaming a participant in a room."""

    name = serializers.CharField(min_length=1, max_length=255, allow_blank=False)
+
+
+class ExternalProcessEventSerializer(BaseValidationOnlySerializer):
+    """Validate external process event data."""
+
+    job_id = serializers.CharField(required=True)
+    # We are not strict on purpose on those fields to avoid
+    # useless bad requests
+    type = serializers.CharField(required=False, allow_null=True, allow_blank=True)
+    status = serializers.CharField(required=False, allow_null=True, allow_blank=True)
@@ -35,11 +35,14 @@ from rest_framework import (
 )
 from rest_framework.settings import api_settings

-from core import enums, models, utils
+from core import analytics, enums, models, utils
 from core.api.filters import ListFileFilter
 from core.enums import MEDIA_STORAGE_URL_PATTERN
 from core.recording.enums import FileExtension
-from core.recording.event.authentication import StorageEventAuthentication
+from core.recording.event.authentication import (
+    RecordingProcessWebhookAuthentication,
+    StorageEventAuthentication,
+)
 from core.recording.event.exceptions import (
    InvalidBucketError,
    InvalidFilepathError,
@@ -89,6 +92,7 @@ from core.services.subtitle import SubtitleException, SubtitleService
 from core.tasks.file import process_file_deletion

 from ..authentication.livekit import LiveKitTokenAuthentication
+from ..models import RoomAccessLevel
 from . import permissions, serializers, throttling
 from .feature_flag import FeatureFlag

@@ -264,6 +268,9 @@ class RoomViewSet(
            username = request.query_params.get("username", None)
            data = {
                "id": None,
+                "slug": slug,
+                "is_administrable": False,
+                "access_level": RoomAccessLevel.PUBLIC,
                "livekit": {
                    "url": settings.LIVEKIT_CONFIGURATION["url"],
                    "room": slug,
@@ -308,6 +315,16 @@ class RoomViewSet(
        if callback_id := self.request.data.get("callback_id"):
            RoomCreation().persist_callback_state(callback_id, room)

+        analytics.capture(
+            self.request.user,
+            analytics.AnalyticsEvent.ROOM_CREATED,
+            {
+                "room_id": str(room.pk),
+                "access_level": room.access_level,
+                "from_callback": bool(self.request.data.get("callback_id")),
+            },
+        )
+
    def perform_update(self, serializer):
        """Persist the room update, then sync metadata to LiveKit."""

@@ -989,6 +1006,60 @@ class RecordingViewSet(
            {"message": "Event processed."},
        )

+    @decorators.action(
+        detail=False,
+        methods=["post"],
+        url_path="external-process-hook",
+        authentication_classes=[RecordingProcessWebhookAuthentication],
+        serializer_class=serializers.ExternalProcessEventSerializer,
+    )
+    def on_external_process_event_received(self, request, pk=None):  # pylint: disable=unused-argument
+        """Handle incoming external process events for recordings."""
+        logger.debug("Processing external process event %s", request.data)
+        serializer = self.get_serializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+
+        ok_response = drf_response.Response(
+            {"message": "Event processed."},
+        )
+
+        validated_data = serializer.validated_data
+        job_id = validated_data["job_id"]
+        try:
+            recording = models.Recording.objects.get(external_process_id=job_id)
+        except models.Recording.DoesNotExist as e:
+            logger.warning("No recording found for job_id %s: %s", job_id, e)
+            return ok_response
+
+        if validated_data.get("type") == "transcript":
+            if validated_data.get("status") == "success":
+                logger.info(
+                    "External process transcript success received for recording %s",
+                    job_id,
+                )
+                recording.status = (
+                    models.RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL
+                )
+                recording.save()
+                return ok_response
+
+            if validated_data.get("status") == "failure":
+                logger.info(
+                    "External process transcript failure received for recording %s",
+                    job_id,
+                )
+                recording.status = models.RecordingStatusChoices.EXTERNAL_PROCESS_FAILED
+                recording.save()
+                return ok_response
+
+        logger.info(
+            "No changes to save for external process id %s and payload %s",
+            job_id,
+            validated_data,
+        )
+
+        return ok_response
+
    def _auth_get_original_url(self, request):
        """
        Extracts and parses the original URL from the "HTTP_X_ORIGINAL_URL" header.
@@ -9,6 +9,7 @@ from django.utils.translation import gettext_lazy as _
 from lasuite.oidc_login.backends import (
    OIDCAuthenticationBackend as LaSuiteOIDCAuthenticationBackend,
 )
+from rest_framework.authentication import SessionAuthentication

 from core.models import User
 from core.services.marketing import (
@@ -96,3 +97,17 @@ class OIDCAuthenticationBackend(LaSuiteOIDCAuthenticationBackend):
                        "Multiple user accounts share a common email."
                    ) from e
        return None
+
+
+class SessionAuthenticationWith401(SessionAuthentication):
+    """
+    Identical to DRF's SessionAuthentication, but returns a WWW-Authenticate
+    header so unauthenticated requests get a 401 instead of a 403.
+
+    The scheme is deliberately NOT 'Basic' — that would trigger the browser's
+    native login popup. 'Session' is ignored by the browser's auth UI but is
+    still truthy, so DRF keeps the status at 401.
+    """
+
+    def authenticate_header(self, request):
+        return "Session"
@@ -19,7 +19,7 @@ from rest_framework import (
    status as drf_status,
 )

-from core import api, models
+from core import analytics, api, models
 from core.api.feature_flag import FeatureFlag
 from core.services.jwt_token import JwtTokenService

@@ -194,10 +194,27 @@ class RoomViewSet(
            role=models.RoleChoices.OWNER,
        )

+        auth_method = type(self.request.successful_authenticator).__name__
+        client_id = (self.request.auth or {}).get("client_id", "unknown")
+
        # Log for auditing
        logger.info(
-            "Room created via application: room_id=%s, user_id=%s, client_id=%s",
+            "Room created via application: room_id=%s, user_id=%s, client_id=%s, auth_method=%s",
            room.id,
            self.request.user.id,
-            getattr(self.request.auth, "client_id", "unknown"),
+            client_id,
+            auth_method,
+        )
+
+        analytics.capture(
+            self.request.user,
+            analytics.AnalyticsEvent.ROOM_CREATED,
+            {
+                "room_id": str(room.pk),
+                "access_level": room.access_level,
+                "client_id": client_id,
+                "external_api": True,
+                "auth_method": auth_method,
+                "$set": {"email": self.request.user.email},
+            },
        )
@@ -6,6 +6,7 @@ from django.contrib.auth import get_user_model
 from django.core.management.base import BaseCommand, CommandError
 from django.db import transaction
 from django.db.models import Count
+from django.db.models.functions import Lower

 from core.models import File, RecordingAccess, ResourceAccess, RoleChoices

@@ -20,11 +21,14 @@ ROLE_PRIORITY = {

 class Command(BaseCommand):
    """
-    Merge duplicate users sharing the same email into the most recently created one.
+    Merge duplicate users sharing the same email (case-insensitive) into the
+    most recently created one.

-    The KEPT user is the most recently created. All room memberships, recording
-    accesses and files are transferred to it. When a conflict exists, the
-    higher-privilege role wins. Stale users are then deleted.
+    Emails are compared case-insensitively, so 'John@Example.com' and
+    'john@example.com' are treated as duplicates. The KEPT user is the most
+    recently created. All room memberships, recording accesses and files are
+    transferred to it. When a conflict exists, the higher-privilege role wins.
+    Stale users are then deleted.
    Each email group is processed inside a single database transaction.
    """

@@ -56,13 +60,16 @@ class Command(BaseCommand):
            users_qs = users_qs.filter(email__icontains=email_filter)
            self.stdout.write(f"[INFO] Filtering emails containing '{email_filter}'.\n")

+        # Group emails case-insensitively so 'John@X.com' and 'john@x.com'
+        # are detected as duplicates of each other.
        duplicate_emails = (
            users_qs.exclude(email__isnull=True)
            .exclude(email="")
-            .values("email")
+            .annotate(email_lower=Lower("email"))
+            .values("email_lower")
            .annotate(cnt=Count("id"))
            .filter(cnt__gt=1)
-            .values_list("email", flat=True)
+            .values_list("email_lower", flat=True)
        )

        if not duplicate_emails:
@@ -78,9 +85,12 @@ class Command(BaseCommand):
        failed_emails = []

        for email in duplicate_emails:
+            # Case-insensitive lookup to fetch every casing variant of the email.
            # Secondary sort by id ensures a stable, deterministic order when
            # created_at timestamps are equal (common in tests and bulk imports).
-            users = list(User.objects.filter(email=email).order_by("created_at", "id"))
+            users = list(
+                User.objects.filter(email__iexact=email).order_by("created_at", "id")
+            )
            kept_user = users[-1]
            stale_users = users[:-1]

@@ -120,6 +130,10 @@ class Command(BaseCommand):
                failed_emails.append(email)
                self.stderr.write(f"[ERROR] Failed to merge '{email}': {exc}")

+            if not kept_user.email.islower():
+                kept_user.email = kept_user.email.lower()
+                kept_user.save(update_fields=["email"])
+
        if failed_emails:
            raise CommandError(
                f"Failed to merge {len(failed_emails)} email group(s): {', '.join(failed_emails)}"
@@ -0,0 +1,23 @@
+# Generated by Django 5.2.14 on 2026-06-22 08:26
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('core', '0020_alter_file_upload_state'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='recording',
+            name='external_process_id',
+            field=models.CharField(blank=True, help_text='ID of the external process associated with the recording.', max_length=255, null=True, unique=True, verbose_name='External Process ID'),
+        ),
+        migrations.AlterField(
+            model_name='recording',
+            name='status',
+            field=models.CharField(choices=[('initiated', 'Initiated'), ('active', 'Active'), ('stopped', 'Stopped'), ('saved', 'Saved'), ('aborted', 'Aborted'), ('failed_to_start', 'Failed to Start'), ('failed_to_stop', 'Failed to Stop'), ('notification_succeeded', 'Notification succeeded'), ('external_process_successful', 'External process successful'), ('external_process_failed', 'External process failed')], default='initiated', max_length=50),
+        ),
+    ]
@@ -60,6 +60,11 @@ class RecordingStatusChoices(models.TextChoices):
    FAILED_TO_START = "failed_to_start", _("Failed to Start")
    FAILED_TO_STOP = "failed_to_stop", _("Failed to Stop")
    NOTIFICATION_SUCCEEDED = "notification_succeeded", _("Notification succeeded")
+    EXTERNAL_PROCESS_SUCCESSFUL = (
+        "external_process_successful",
+        _("External process successful"),
+    )
+    EXTERNAL_PROCESS_FAILED = "external_process_failed", _("External process failed")

    @classmethod
    def is_final(cls, status):
@@ -73,6 +78,8 @@ class RecordingStatusChoices(models.TextChoices):
            cls.STOPPED,
            cls.SAVED,
            cls.ABORTED,
+            cls.EXTERNAL_PROCESS_SUCCESSFUL,
+            cls.EXTERNAL_PROCESS_FAILED,
            cls.FAILED_TO_START,
            cls.FAILED_TO_STOP,
        }
@@ -598,6 +605,14 @@ class Recording(BaseModel):
        verbose_name=_("Recording options"),
        help_text=_("Recording options"),
    )
+    external_process_id = models.CharField(
+        max_length=255,
+        null=True,
+        blank=True,
+        unique=True,
+        verbose_name=_("External Process ID"),
+        help_text=_("ID of the external process associated with the recording."),
+    )

    class Meta:
        db_table = "meet_recording"
@@ -653,6 +668,8 @@ class Recording(BaseModel):
        return self.status in {
            RecordingStatusChoices.NOTIFICATION_SUCCEEDED,
            RecordingStatusChoices.SAVED,
+            RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL,
+            RecordingStatusChoices.EXTERNAL_PROCESS_FAILED,
        }

    @property
@@ -14,9 +14,9 @@ logger = logging.getLogger(__name__)
 class MachineUser:
    """Represent a non-interactive system user for automated storage operations."""

-    def __init__(self) -> None:
+    def __init__(self, username: str = "storage_event_user") -> None:
        self.pk = None
-        self.username = "storage_event_user"
+        self.username = username
        self.is_active = True

    @property
@@ -34,33 +34,33 @@ class MachineUser:
        return self.username


-class StorageEventAuthentication(BaseAuthentication):
-    """Authenticate requests using a Bearer token for storage event integration.
-    This class validates Bearer tokens for storage events that don't map to database users.
-    It's designed for S3-compatible storage integrations and similar use cases.
-    Events are submitted when a webhook is configured on some bucket's events.
-    """
+class HeaderBasedAuthentication(BaseAuthentication):
+    """Authenticate requests using a header with a secret key."""

    AUTH_HEADER = "Authorization"
    TOKEN_TYPE = "Bearer"  # noqa S105
+    REALM = ""
+
+    IS_ENFORCED_SETTINGS_KEY = None
+    EXPECTED_TOKEN_SETTINGS_KEY = None

    def authenticate(self, request):
        """Validate the Bearer token from the Authorization header."""

-        if not settings.RECORDING_ENABLE_STORAGE_EVENT_AUTH:
-            return MachineUser(), None
+        if self.IS_ENFORCED_SETTINGS_KEY is not None:
+            if not getattr(settings, self.IS_ENFORCED_SETTINGS_KEY):
+                return MachineUser(), None

-        required_token = settings.RECORDING_STORAGE_EVENT_TOKEN
-        if not required_token:
-            if settings.RECORDING_ENABLE_STORAGE_EVENT_AUTH:
-                raise AuthenticationFailed(
-                    "Authentication is enabled but token is not configured."
-                )
-
-            return MachineUser(), None
+        if (
+            self.EXPECTED_TOKEN_SETTINGS_KEY is None
+            or (required_token := getattr(settings, self.EXPECTED_TOKEN_SETTINGS_KEY))
+            is None
+        ):
+            raise AuthenticationFailed(
+                "Authentication is enabled but token is not configured."
+            )

        auth_header = request.headers.get(self.AUTH_HEADER)
-
        if not auth_header:
            logger.warning(
                "Authentication failed: Missing Authorization header (ip: %s)",
@@ -68,15 +68,10 @@ class StorageEventAuthentication(BaseAuthentication):
            )
            raise AuthenticationFailed("Authorization header is required")

-        auth_parts = auth_header.split(" ")
-        if len(auth_parts) != 2 or auth_parts[0] != self.TOKEN_TYPE:
-            logger.warning(
-                "Authentication failed: Invalid authorization header (ip: %s)",
-                request.META.get("REMOTE_ADDR"),
-            )
-            raise AuthenticationFailed("Invalid authorization header.")
-
-        token = auth_parts[1]
+        scheme, _, token = auth_header.partition(" ")
+        if scheme.lower() != self.TOKEN_TYPE.lower() or not token.strip():
+            raise AuthenticationFailed("Invalid authorization header format.")
+        token = token.strip()

        # Use constant-time comparison to prevent timing attacks
        if not secrets.compare_digest(token.encode(), required_token.encode()):
@@ -90,4 +85,26 @@ class StorageEventAuthentication(BaseAuthentication):

    def authenticate_header(self, request):
        """Return the WWW-Authenticate header value."""
-        return f"{self.TOKEN_TYPE} realm='Storage event API'"
+        return f"{self.TOKEN_TYPE} realm='{self.REALM}'"
+
+
+class StorageEventAuthentication(HeaderBasedAuthentication):
+    """Authenticate requests using a Bearer token for storage event integration.
+    This class validates Bearer tokens for storage events that don't map to database users.
+    It's designed for S3-compatible storage integrations and similar use cases.
+    Events are submitted when a webhook is configured on some bucket's events.
+    """
+
+    REALM = "Storage event API"
+    IS_ENFORCED_SETTINGS_KEY = "RECORDING_ENABLE_STORAGE_EVENT_AUTH"
+    EXPECTED_TOKEN_SETTINGS_KEY = "RECORDING_STORAGE_EVENT_TOKEN"  # noqa S105
+
+
+class RecordingProcessWebhookAuthentication(HeaderBasedAuthentication):
+    """
+    Custom authentication class for recording process webhook requests.
+    Validates the API key in the Authorization header.
+    """
+
+    REALM = "External process webhook API"
+    EXPECTED_TOKEN_SETTINGS_KEY = "SUMMARY_SERVICE_WEBHOOK_API_TOKEN"  # noqa S105
@@ -4,6 +4,7 @@ import asyncio
 import logging
 import smtplib
 from datetime import datetime, timezone
+from zoneinfo import ZoneInfo, ZoneInfoNotFoundError

 from django.conf import settings
 from django.core.mail import send_mail
@@ -17,6 +18,8 @@ from asgiref.sync import async_to_sync
 from livekit import api as livekit_api

 from core import models, utils
+from core.analytics import UserFeatureFlag, is_user_feature_flag_enabled
+from core.utils import generate_download_s3_url

 logger = logging.getLogger(__name__)

@@ -178,8 +181,49 @@ class NotificationService:

        return _ns_to_utc(file_result.started_at), _ns_to_utc(file_result.ended_at)

+    @staticmethod
+    def _generate_title(
+        *,
+        locale: str,
+        room: str,
+        recording_datetime: datetime | None,
+        owner_timezone: str | None,
+    ) -> str:
+        """Generate title from context or return default."""
+        if recording_datetime is None:
+            with override(locale):
+                return _("Transcription")
+
+        dt = recording_datetime
+        if owner_timezone:
+            try:
+                dt = recording_datetime.astimezone(ZoneInfo(owner_timezone))
+            except (KeyError, ZoneInfoNotFoundError):
+                pass  # Keep the original UTC datetime
+
+        with override(locale):
+            translated_template = _(
+                'Meeting "{room}" on {room_recording_date} at {room_recording_time}'
+            )
+            return translated_template.format(
+                room=room,
+                room_recording_date=dt.strftime("%Y-%m-%d"),
+                room_recording_time=dt.strftime("%H:%M"),
+            )
+
    @staticmethod
    def _notify_summary_service(recording: models.Recording):
+        if settings.SUMMARY_SERVICE_VERSION == 1:
+            return NotificationService._notify_summary_service_v1(recording)
+        if settings.SUMMARY_SERVICE_VERSION == 2:
+            return NotificationService._notify_summary_service_v2(recording)
+
+        raise NotImplementedError(
+            f"Unknown summary service version: {settings.SUMMARY_SERVICE_VERSION}"
+        )
+
+    @staticmethod
+    def _notify_summary_service_v1(recording: models.Recording):
        """Notify summary service about a new recording."""

        if (
@@ -253,5 +297,120 @@ class NotificationService:

        return True

+    @staticmethod
+    def _notify_summary_service_v2(recording: models.Recording):
+        """Notify summary service about a new recording."""
+
+        if (
+            not settings.SUMMARY_SERVICE_ENDPOINT
+            or not settings.SUMMARY_SERVICE_API_TOKEN
+        ):
+            logger.error("Summary service not configured")
+            return False
+
+        owner_access = (
+            models.RecordingAccess.objects.select_related("user")
+            .filter(
+                role=models.RoleChoices.OWNER,
+                recording_id=recording.id,
+            )
+            .first()
+        )
+        metadata_filename: None | str = None
+        if settings.METADATA_COLLECTOR_ENABLED and recording.options.get(
+            "collect_metadata", False
+        ):
+            output_folder = settings.METADATA_COLLECTOR_OUTPUT_FOLDER
+            metadata_filename = f"{output_folder}/{recording.id}-metadata.json"
+
+        if not owner_access:
+            logger.error("No owner found for recording %s", recording.id)
+            return False
+
+        started_at, ended_at = async_to_sync(
+            NotificationService._get_recording_timestamps
+        )(recording.worker_id)
+
+        form_base_url = settings.TRANSCRIPTION_SATISFACTION_FORM_BASE_URL
+        form_link = (
+            f"{form_base_url}?room_id={recording.room.id}"
+            if (form_base_url and metadata_filename is not None)
+            else None
+        )
+        metadata_payload = None
+        if started_at and ended_at and metadata_filename:
+            metadata_payload = {
+                "cloud_storage_url": generate_download_s3_url(
+                    metadata_filename,
+                    expires_in=settings.SUMMARY_SERVICE_CLOUD_STORAGE_SIGNED_URL_EXPIRY_SECONDS,
+                    override_domain=False,
+                ),
+                "started_at": started_at.isoformat(),
+                "ended_at": ended_at.isoformat(),
+            }
+
+        payload = {
+            "user_sub": owner_access.user.sub,
+            "user_email": owner_access.user.email,
+            "cloud_storage_url": generate_download_s3_url(
+                recording.key,
+                expires_in=settings.SUMMARY_SERVICE_CLOUD_STORAGE_SIGNED_URL_EXPIRY_SECONDS,
+                override_domain=False,
+            ),
+            "language": recording.options.get(
+                "language", get_language().split("-")[0].lower()
+            ),
+            "context_language": owner_access.user.language,
+            "push_to_docs_config": {
+                "user_email": owner_access.user.email,
+                "title": NotificationService._generate_title(
+                    locale=owner_access.user.language
+                    or recording.options.get("language", get_language()),
+                    room=recording.room.name,
+                    recording_datetime=started_at,
+                    owner_timezone=str(owner_access.user.timezone),
+                ),
+                "download_link": f"{get_recording_download_base_url()}/{recording.id}",
+                "form_link": form_link,
+                "auto_create_summary": is_user_feature_flag_enabled(
+                    owner_access.user, UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED
+                ),
+            },
+            "metadata": metadata_payload,
+        }
+
+        headers = {
+            "Content-Type": "application/json",
+            "Authorization": f"Bearer {settings.SUMMARY_SERVICE_API_TOKEN}",
+        }
+
+        try:
+            response = requests.post(
+                settings.SUMMARY_SERVICE_ENDPOINT,
+                json=payload,
+                headers=headers,
+                timeout=30,
+            )
+            response.raise_for_status()
+            response_json = response.json()
+            # We do not require a job_id to avoid a breaking change
+            job_id = response_json.get("job_id")
+            if not isinstance(job_id, str):
+                raise ValueError("job_id is not a string")
+
+            recording.external_process_id = job_id
+            recording.save()
+
+        except requests.RequestException as exc:
+            logger.exception(
+                "Summary service error for recording %s. URL: %s. Exception: %s",
+                recording.id,
+                settings.SUMMARY_SERVICE_ENDPOINT,
+                exc,
+            )
+            return False
+
+        return True
+

 notification_service = NotificationService()
@@ -6,6 +6,7 @@ import re
 from dataclasses import dataclass
 from functools import lru_cache
 from typing import Any, Dict, Optional, Protocol
+from urllib.parse import quote

 from django.conf import settings
 from django.utils.module_loading import import_string
@@ -164,6 +165,9 @@ class S3Parser(BaseS3Parser):
            if not filepath:
                raise ParsingEventDataError("Missing object key name")
            filetype, _ = mimetypes.guess_type(filepath)
+            # Normalize raw S3-compatible object keys without re-encoding
+            # already encoded AWS S3 notification keys.
+            filepath = quote(filepath, safe="%+")
            return StorageEvent(
                filepath=filepath,
                filetype=filetype,
@@ -0,0 +1,318 @@
+"""
+Unit tests for PostHogAnalytics.
+"""
+
+# pylint: disable=redefined-outer-name,unused-argument,protected-access
+
+from unittest.mock import patch
+
+from django.contrib.auth.models import AnonymousUser
+
+import pytest
+
+from core.analytics.events import AnalyticsEvent
+from core.analytics.posthog import PostHogAnalytics
+from core.analytics.user_feature_flags import UserFeatureFlag
+from core.factories import UserFactory
+
+pytestmark = pytest.mark.django_db
+
+
+# ==============================
+# __init__
+# ==============================
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_init_constructs_posthog_client_with_api_key_and_host(mock_posthog_cls):
+    """Should forward api_key and host to the Posthog SDK constructor."""
+    PostHogAnalytics(api_key="my-key", host="https://custom.i.posthog.com")
+
+    mock_posthog_cls.assert_called_once_with(
+        project_api_key="my-key",
+        host="https://custom.i.posthog.com",
+    )
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_init_defaults_to_eu_host(mock_posthog_cls):
+    """Should default host to the EU PostHog cloud when not specified."""
+    PostHogAnalytics(api_key="my-key")
+
+    _, kwargs = mock_posthog_cls.call_args
+    assert kwargs["host"] == "https://eu.i.posthog.com"
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_init_forwards_extra_kwargs_to_client(mock_posthog_cls):
+    """Should pass through arbitrary extra kwargs (e.g. debug, disabled) to the SDK."""
+    PostHogAnalytics(api_key="my-key", debug=True, disabled=False)
+
+    _, kwargs = mock_posthog_cls.call_args
+    assert kwargs["debug"] is True
+    assert kwargs["disabled"] is False
+
+
+# ==============================
+# _distinct_id
+# ==============================
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_distinct_id_returns_none_for_none_user(mock_posthog_cls):
+    """Should return None when user is None."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+
+    assert backend._distinct_id(None) is None
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_distinct_id_returns_none_for_anonymous_user(mock_posthog_cls):
+    """Should return None when user.is_authenticated is falsy."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+
+    assert backend._distinct_id(AnonymousUser()) is None
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_distinct_id_returns_none_when_attribute_missing(mock_posthog_cls):
+    """Should return None when the user object has no is_authenticated attribute at all."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+
+    assert backend._distinct_id(object()) is None
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_distinct_id_returns_stringified_pk_for_authenticated_user(mock_posthog_cls):
+    """Should return str(user.pk) for an authenticated user."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    assert backend._distinct_id(user) == str(user.pk)
+
+
+# ==============================
+# identify
+# ==============================
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_identify_noop_for_anonymous_user(mock_posthog_cls):
+    """Should not call the SDK when the user is anonymous."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+
+    backend.identify(AnonymousUser(), {"email": "a@example.com"})
+
+    mock_posthog_cls.return_value.set.assert_not_called()
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_identify_noop_for_none_user(mock_posthog_cls):
+    """Should not call the SDK when user is None."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+
+    backend.identify(None, {"email": "a@example.com"})
+
+    mock_posthog_cls.return_value.set.assert_not_called()
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_identify_sends_set_properties_for_authenticated_user(mock_posthog_cls):
+    """Should call capture with event=$identify and properties wrapped in $set."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    backend.identify(user, {"email": "a@example.com", "name": "A"})
+
+    mock_posthog_cls.return_value.set.assert_called_once_with(
+        distinct_id=str(user.pk),
+        properties={"email": "a@example.com", "name": "A"},
+    )
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_identify_defaults_properties_to_empty_dict(mock_posthog_cls):
+    """Should send an empty $set payload when properties is None."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    backend.identify(user, None)
+
+    mock_posthog_cls.return_value.set.assert_called_once_with(
+        distinct_id=str(user.pk),
+        properties={},
+    )
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_identify_swallows_sdk_exceptions(mock_posthog_cls):
+    """Should log and not raise when the SDK call fails."""
+    mock_posthog_cls.return_value.set.side_effect = RuntimeError("network down")
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    # Must not propagate.
+    backend.identify(user, {"email": "a@example.com"})
+
+
+# ==============================
+# capture
+# ==============================
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_capture_noop_for_anonymous_user(mock_posthog_cls):
+    """Should not call the SDK when the user is anonymous."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+
+    backend.capture(AnonymousUser(), AnalyticsEvent.ROOM_CREATED, {"room_id": "1"})
+
+    mock_posthog_cls.return_value.capture.assert_not_called()
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_capture_noop_for_none_user(mock_posthog_cls):
+    """Should not call the SDK when user is None."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+
+    backend.capture(None, AnalyticsEvent.ROOM_CREATED, {"room_id": "1"})
+
+    mock_posthog_cls.return_value.capture.assert_not_called()
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_capture_sends_event_and_properties_for_authenticated_user(mock_posthog_cls):
+    """Should call capture with the distinct_id, event name, and properties."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    backend.capture(user, AnalyticsEvent.ROOM_CREATED, {"room_id": "room-1"})
+
+    mock_posthog_cls.return_value.capture.assert_called_once_with(
+        distinct_id=str(user.pk),
+        event="room_created",
+        properties={"room_id": "room-1"},
+    )
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_capture_serializes_event_enum_to_plain_string(mock_posthog_cls):
+    """Should send the wire string, not the AnalyticsEvent enum member, to the SDK."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    backend.capture(user, AnalyticsEvent.ROOM_CREATED)
+
+    _, kwargs = mock_posthog_cls.return_value.capture.call_args
+    assert kwargs["event"] == "room_created"
+    assert isinstance(
+        kwargs["event"], str
+    )  # not AnalyticsEvent, not StrEnum subclass leaking through
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_capture_defaults_properties_to_empty_dict(mock_posthog_cls):
+    """Should send an empty properties dict when properties is None."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    backend.capture(user, AnalyticsEvent.ROOM_CREATED, None)
+
+    mock_posthog_cls.return_value.capture.assert_called_once_with(
+        distinct_id=str(user.pk),
+        event="room_created",
+        properties={},
+    )
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_capture_swallows_sdk_exceptions(mock_posthog_cls):
+    """Should log and not raise when the SDK call fails."""
+    mock_posthog_cls.return_value.capture.side_effect = RuntimeError("network down")
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    # Must not propagate.
+    backend.capture(user, AnalyticsEvent.ROOM_CREATED, {"room_id": "1"})
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_capture_logs_the_failing_event_name_on_exception(mock_posthog_cls, caplog):
+    """Should log which event failed, to aid debugging without crashing the caller."""
+    mock_posthog_cls.return_value.capture.side_effect = RuntimeError("network down")
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    with caplog.at_level("ERROR"):
+        backend.capture(user, AnalyticsEvent.ROOM_CREATED)
+
+    assert any("PostHog capture failed" in record.message for record in caplog.records)
+
+
+# ==============================
+# feature flags
+# ==============================
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_compute_feature_flags_returns_all_catalog_entries(mock_posthog_cls):
+    """Should map every declared feature flag key to the SDK evaluated value."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    mock_posthog_cls.return_value.evaluate_flags.return_value.get_flag.return_value = (
+        True
+    )
+
+    flags = backend._fetch_user_feature_flags(user)
+
+    assert flags == {UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED: True}
+    mock_posthog_cls.return_value.evaluate_flags.assert_called_once_with(str(user.pk))
+    mock_posthog_cls.return_value.evaluate_flags.return_value.get_flag.assert_called_once_with(
+        UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED.value
+    )
+
+
+@patch("core.analytics.posthog.cache.get_or_set")
+@patch("core.analytics.posthog.Posthog")
+def test_get_feature_flags_uses_cache_get_or_set(
+    mock_posthog_cls, mock_cache_get_or_set
+):
+    """Should cache feature flags by user distinct id with configured TTL."""
+    cached_flags = {UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED: False}
+    mock_cache_get_or_set.return_value = cached_flags
+    backend = PostHogAnalytics(api_key="test-api-key", feature_flags_cache_ttl=120)
+    user = UserFactory()
+
+    flags = backend.get_user_feature_flags(user)
+
+    assert flags == cached_flags
+    mock_cache_get_or_set.assert_called_once()
+    args, kwargs = mock_cache_get_or_set.call_args
+    assert kwargs["timeout"] == 120
+    assert args[0] == f"user_feature_flags:{user.pk}"
+    assert callable(kwargs["default"])
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_get_feature_flags_returns_empty_dict_on_exception(mock_posthog_cls):
+    """Should swallow failures and return an empty mapping."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+    with patch("core.analytics.posthog.cache.get_or_set", side_effect=RuntimeError):
+        assert backend.get_user_feature_flags(user) == {}
+
+
+# ==============================
+# shutdown
+# ==============================
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_shutdown_flushes_the_client(mock_posthog_cls):
+    """Should delegate to the SDK's shutdown to flush pending events."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+
+    backend.shutdown()
+
+    mock_posthog_cls.return_value.shutdown.assert_called_once()
@@ -36,6 +36,26 @@ def test_merge_keeps_most_recently_created_user():
    assert User.objects.filter(id=user2.id).exists()


+def test_merge_user_case_insensitive():
+    """Emails differing only by case should be treated as duplicates and merged,
+    keeping the most recently created user."""
+    user1 = UserFactory(email="Dup@example.com")
+    user2 = UserFactory(email="dup@example.com")
+    call_command("merge_duplicate_users")
+
+    assert not User.objects.filter(id=user1.id).exists()
+    assert User.objects.filter(id=user2.id).exists()
+
+    user3 = UserFactory(email="joe@example.com")
+    user4 = UserFactory(email="Joe@example.com")
+    call_command("merge_duplicate_users")
+    assert not User.objects.filter(id=user3.id).exists()
+    assert User.objects.filter(id=user4.id).exists()
+
+    user4.refresh_from_db()
+    assert user4.email.islower()
+
+
 def test_merge_deletes_all_stale_users():
    """Command should delete all stale users and keep only the most recently created one."""
    email = "many@example.com"
@@ -457,4 +477,4 @@ def test_merge_email_filter_is_case_insensitive():
    UserFactory(email="user1@Example.com")
    UserFactory(email="user1@Example.com")
    call_command("merge_duplicate_users", email_filter="@example.com")
-    assert User.objects.filter(email="user1@Example.com").count() == 1
+    assert User.objects.filter(email="user1@example.com").count() == 1
@@ -136,10 +136,10 @@ def test_authenticate_header():


 def test_multiple_spaces_in_auth_header(settings):
-    """Test failure when Authorization header contains multiple spaces."""
+    """Test success when Authorization header contains multiple spaces."""
    settings.RECORDING_STORAGE_EVENT_TOKEN = "valid-test-token"
    request = RequestFactory().get("/")
    request.headers = {"Authorization": "Bearer   extra-spaces-token"}

-    with pytest.raises(AuthenticationFailed, match="Invalid authorization header"):
-        StorageEventAuthentication().authenticate(request)
+    header = StorageEventAuthentication().authenticate_header(request)
+    assert header == "Bearer realm='Storage event API'"
@@ -13,6 +13,7 @@ from django.contrib.sites.models import Site
 import pytest

 from core import factories, models
+from core.analytics import UserFeatureFlag
 from core.recording.event.notification import NotificationService, notification_service

 pytestmark = pytest.mark.django_db
@@ -243,3 +244,177 @@ def test_notify_user_by_email_smtp_exception(mocked_current_site, caplog):
        assert result is False
        assert mock_send_mail.call_count == 2
        assert "notification could not be sent:" in caplog.text
+
+
+@mock.patch("core.recording.event.notification.requests.post")
+@mock.patch("core.recording.event.notification.generate_download_s3_url")
+@mock.patch.object(
+    NotificationService, "_get_recording_timestamps", new_callable=mock.AsyncMock
+)
+def test_notify_summary_service_post_args_with_metadata(
+    mock_get_recording_timestamps,
+    mock_generate_download_s3_url,
+    mock_post,
+    settings,
+):
+    """Test summary notification computed request args when metadata is enabled."""
+    settings.SUMMARY_SERVICE_VERSION = 2
+    settings.SUMMARY_SERVICE_ENDPOINT = "https://summary.test/api/v2/tasks"
+    settings.SUMMARY_SERVICE_API_TOKEN = "summary-token"
+    settings.RECORDING_DOWNLOAD_BASE_URL = "https://app.test/recordings"
+    settings.SCREEN_RECORDING_BASE_URL = None
+    settings.METADATA_COLLECTOR_ENABLED = True
+    settings.METADATA_COLLECTOR_OUTPUT_FOLDER = "recordings-metadata"
+
+    recording = factories.RecordingFactory(
+        room__name="Engineering Sync",
+        worker_id="egress-1",
+        options={"collect_metadata": True, "language": "en-us"},
+    )
+    owner = factories.UserFactory(
+        email="owner@test.com",
+        sub="owner-sub",
+        language="fr-fr",
+        timezone="Europe/Paris",
+    )
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER, user=owner
+    )
+
+    started_at = datetime.datetime(2026, 1, 2, 10, 30, tzinfo=datetime.timezone.utc)
+    ended_at = datetime.datetime(2026, 1, 2, 11, 45, tzinfo=datetime.timezone.utc)
+    mock_get_recording_timestamps.return_value = (started_at, ended_at)
+    mock_generate_download_s3_url.side_effect = [
+        "https://storage.test/metadata.json",
+        "https://storage.test/recording.ogg",
+    ]
+
+    mock_response = mock.Mock()
+    mock_response.raise_for_status.return_value = None
+    mock_response.json.return_value = {"job_id": "job-42"}
+    mock_post.return_value = mock_response
+
+    result = NotificationService._notify_summary_service(recording)
+    recording.refresh_from_db()
+
+    assert result is True
+    assert recording.external_process_id == "job-42"
+
+    metadata_filename = (
+        f"{settings.METADATA_COLLECTOR_OUTPUT_FOLDER}/{recording.id}-metadata.json"
+    )
+    expected_payload = {
+        "user_sub": owner.sub,
+        "user_email": owner.email,
+        "cloud_storage_url": "https://storage.test/recording.ogg",
+        "language": "en-us",
+        "context_language": owner.language,
+        "push_to_docs_config": {
+            "user_email": owner.email,
+            "title": 'Réunion "Engineering Sync" du 2026-01-02 à 11:30',
+            "download_link": f"{settings.RECORDING_DOWNLOAD_BASE_URL}/{recording.id}",
+            "auto_create_summary": False,
+            "form_link": None,
+        },
+        "metadata": {
+            "cloud_storage_url": "https://storage.test/metadata.json",
+            "started_at": started_at.isoformat(),
+            "ended_at": ended_at.isoformat(),
+        },
+    }
+    expected_headers = {
+        "Content-Type": "application/json",
+        "Authorization": "Bearer summary-token",
+    }
+    mock_post.assert_called_once_with(
+        "https://summary.test/api/v2/tasks",
+        json=expected_payload,
+        headers=expected_headers,
+        timeout=30,
+    )
+    assert mock_generate_download_s3_url.call_args_list == [
+        mock.call(metadata_filename, expires_in=60 * 60 * 24, override_domain=False),
+        mock.call(recording.key, expires_in=60 * 60 * 24, override_domain=False),
+    ]
+    mock_get_recording_timestamps.assert_awaited_once_with("egress-1")
+
+
+@mock.patch("core.recording.event.notification.requests.post")
+@mock.patch("core.recording.event.notification.generate_download_s3_url")
+@mock.patch.object(
+    NotificationService, "_get_recording_timestamps", new_callable=mock.AsyncMock
+)
+@pytest.mark.parametrize("auto_create_summary_enabled", [False, True])
+def test_notify_summary_service_post_args_without_metadata(
+    mock_get_recording_timestamps,
+    mock_generate_download_s3_url,
+    mock_post,
+    auto_create_summary_enabled,
+    settings,
+):
+    """Test summary notification computed request args when metadata is not available."""
+    settings.SUMMARY_SERVICE_VERSION = 2
+    settings.SUMMARY_SERVICE_ENDPOINT = "https://summary.test/api/v2/tasks"
+    settings.SUMMARY_SERVICE_API_TOKEN = "summary-token"
+    settings.RECORDING_DOWNLOAD_BASE_URL = "https://app.test/recordings"
+    settings.SCREEN_RECORDING_BASE_URL = None
+    settings.METADATA_COLLECTOR_ENABLED = False
+
+    recording = factories.RecordingFactory(room__name="Daily")
+    owner = factories.UserFactory(
+        email="owner@test.com",
+        sub="owner-sub",
+        language="en-us",
+        timezone="UTC",
+    )
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER, user=owner
+    )
+
+    mock_get_recording_timestamps.return_value = (None, None)
+    mock_generate_download_s3_url.return_value = "https://storage.test/recording.mp4"
+
+    mock_response = mock.Mock()
+    mock_response.raise_for_status.return_value = None
+    mock_response.json.return_value = {"job_id": "job-51"}
+    mock_post.return_value = mock_response
+
+    with mock.patch(
+        "core.recording.event.notification.is_user_feature_flag_enabled",
+        return_value=auto_create_summary_enabled,
+    ) as mock_is_feature_flag_enabled:
+        result = NotificationService._notify_summary_service(recording)
+
+    assert result is True
+    expected_payload = {
+        "user_sub": owner.sub,
+        "user_email": owner.email,
+        "cloud_storage_url": "https://storage.test/recording.mp4",
+        "language": "en",
+        "context_language": owner.language,
+        "push_to_docs_config": {
+            "user_email": owner.email,
+            "title": "Transcription",
+            "download_link": f"{settings.RECORDING_DOWNLOAD_BASE_URL}/{recording.id}",
+            "auto_create_summary": auto_create_summary_enabled,
+            "form_link": None,
+        },
+        "metadata": None,
+    }
+    expected_headers = {
+        "Content-Type": "application/json",
+        "Authorization": "Bearer summary-token",
+    }
+    mock_post.assert_called_once_with(
+        "https://summary.test/api/v2/tasks",
+        json=expected_payload,
+        headers=expected_headers,
+        timeout=30,
+    )
+    mock_generate_download_s3_url.assert_called_once_with(
+        recording.key, expires_in=60 * 60 * 24, override_domain=False
+    )
+    mock_get_recording_timestamps.assert_awaited_once_with(recording.worker_id)
+    mock_is_feature_flag_enabled.assert_called_once_with(
+        owner, UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED
+    )
@@ -360,6 +360,75 @@ def test_s3_parse_unrecognized_extension(s3_parser):
        s3_parser.parse(event_with_unknown_ext)


+def test_s3_parser_keeps_encoded_filepath_compatible(settings):
+    """Test S3 parser keeps already encoded object keys compatible."""
+    settings.RECORDING_OUTPUT_FOLDER = "recordings"
+
+    recording_id = "80ae9fe5-639a-438b-b86e-9e3dd2d55f4d"
+    parser = S3Parser(bucket_name="recordings-bucket")
+
+    data = {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "recordings-bucket"},
+                    "object": {
+                        "key": f"recordings%2F{recording_id}.mp4",
+                    },
+                }
+            }
+        ]
+    }
+
+    assert parser.get_recording_id(data) == recording_id
+
+
+def test_s3_parser_accepts_unencoded_filepath(settings):
+    """Test S3 parser accepts raw object keys with slash separators."""
+    settings.RECORDING_OUTPUT_FOLDER = "recordings"
+
+    recording_id = "80ae9fe5-639a-438b-b86e-9e3dd2d55f4d"
+    parser = S3Parser(bucket_name="recordings-bucket")
+
+    data = {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "recordings-bucket"},
+                    "object": {
+                        "key": f"recordings/{recording_id}.mp4",
+                    },
+                }
+            }
+        ]
+    }
+
+    assert parser.get_recording_id(data) == recording_id
+
+
+def test_s3_parser_preserves_plus_signs_in_encoded_filepath(settings):
+    """Test S3 parser preserves plus signs in already encoded object keys."""
+    settings.RECORDING_OUTPUT_FOLDER = "recordings"
+
+    recording_id = "80ae9fe5-639a-438b-b86e-9e3dd2d55f4d"
+    parser = S3Parser(bucket_name="recordings-bucket")
+
+    data = {
+        "Records": [
+            {
+                "s3": {
+                    "bucket": {"name": "recordings-bucket"},
+                    "object": {
+                        "key": f"folder+name%2Frecordings%2F{recording_id}.mp4",
+                    },
+                }
+            }
+        ]
+    }
+
+    assert parser.get_recording_id(data) == recording_id
+
+
 def test_s3_get_recording_id_success(s3_parser, valid_s3_event):
    """Test successful extraction of recording ID from S3 event."""
    recording_id = s3_parser.get_recording_id(valid_s3_event)
@@ -0,0 +1,134 @@
+"""
+Test recordings API endpoints: external process hook.
+"""
+
+# pylint: disable=redefined-outer-name,unused-argument
+
+import pytest
+
+from ...factories import RecordingFactory
+from ...models import RecordingStatusChoices
+
+pytestmark = pytest.mark.django_db
+
+
+@pytest.fixture
+def external_process_settings(settings):
+    """Configure authentication token for the external process webhook."""
+    settings.SUMMARY_SERVICE_WEBHOOK_API_TOKEN = "testWebhookToken"
+    return settings
+
+
+def test_external_process_event_missing_authorization_header(
+    external_process_settings, client
+):
+    """Requests without authorization must be rejected."""
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-1", "type": "transcript", "status": "success"},
+    )
+
+    assert response.status_code == 401
+
+
+def test_external_process_event_wrong_bearer_token(external_process_settings, client):
+    """Requests with invalid bearer token must be rejected."""
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-1", "type": "transcript", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer wrongToken",
+    )
+
+    assert response.status_code == 401
+
+
+def test_external_process_event_missing_job_id(external_process_settings, client):
+    """Payload without job_id must fail validation."""
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"type": "transcript", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 400
+    assert response.json() == {"job_id": ["This field is required."]}
+
+
+def test_external_process_event_success_updates_recording_status(
+    external_process_settings, client
+):
+    """A successful transcript process should update recording status."""
+    recording = RecordingFactory(
+        status=RecordingStatusChoices.SAVED,
+        external_process_id="job-123",
+    )
+
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-123", "type": "transcript", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"message": "Event processed."}
+
+    recording.refresh_from_db()
+    assert recording.status == RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL
+
+
+def test_external_process_event_failure_updates_recording_status(
+    external_process_settings, client
+):
+    """A failing transcript process should update recording status."""
+    recording = RecordingFactory(
+        status=RecordingStatusChoices.SAVED,
+        external_process_id="job-456",
+    )
+
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-456", "type": "transcript", "status": "failure"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"message": "Event processed."}
+
+    recording.refresh_from_db()
+    assert recording.status == RecordingStatusChoices.EXTERNAL_PROCESS_FAILED
+
+
+def test_external_process_event_unknown_recording_is_ignored(
+    external_process_settings, client
+):
+    """Unknown job_id should not fail the webhook processing."""
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "missing-job", "type": "transcript", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"message": "Event processed."}
+
+
+def test_external_process_event_non_transcript_event_does_not_change_status(
+    external_process_settings, client
+):
+    """Only transcript events should update recording status."""
+    recording = RecordingFactory(
+        status=RecordingStatusChoices.SAVED,
+        external_process_id="job-789",
+    )
+
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-789", "type": "thumbnail", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"message": "Event processed."}
+
+    recording.refresh_from_db()
+    assert recording.status == RecordingStatusChoices.SAVED
@@ -130,6 +130,9 @@ def test_api_rooms_retrieve_anonymous_unregistered_allowed(mock_token):
    assert response.status_code == 200
    assert response.json() == {
        "id": None,
+        "slug": "unregistered-room",
+        "access_level": "public",
+        "is_administrable": False,
        "livekit": {
            "url": "test_url_value",
            "room": "unregistered-room",
@@ -162,6 +165,9 @@ def test_api_rooms_retrieve_anonymous_unregistered_allowed_not_normalized(mock_t
    assert response.status_code == 200
    assert response.json() == {
        "id": None,
+        "slug": "reunion",
+        "access_level": "public",
+        "is_administrable": False,
        "livekit": {
            "url": "test_url_value",
            "room": "reunion",
@@ -2,13 +2,109 @@
 Test utils functions
 """

+# pylint: disable=W0621
 import json
 from unittest import mock

+from django.conf import settings
+from django.contrib.auth.models import AnonymousUser
+
+import jwt
 import pytest
 from livekit.api import TwirpError

-from core.utils import NotificationError, create_livekit_client, notify_participants
+from core.factories import UserFactory
+from core.utils import (
+    NotificationError,
+    create_livekit_client,
+    generate_token,
+    notify_participants,
+)
+
+pytestmark = pytest.mark.django_db
+
+
+def decode_token(token: str) -> dict:
+    """Decode a LiveKit JWT access token for inspection."""
+    return jwt.decode(
+        token,
+        settings.LIVEKIT_CONFIGURATION["api_secret"],
+        algorithms=["HS256"],
+    )
+
+
+def test_generate_token_authenticated_uses_full_name():
+    """The token's display name should default to the user's full name."""
+    user = UserFactory(full_name="Jane Doe")
+
+    token = generate_token(room="my-room", user=user)
+
+    claims = decode_token(token)
+    assert claims["name"] == "Jane Doe"
+    assert claims["sub"] == str(user.sub)
+
+
+def test_generate_token_authenticated_fallback_user_representation():
+    """
+    When the user has no full name, the token's display name should fall back
+    to the user's string representation.
+    """
+    user = UserFactory(full_name=None)
+
+    token = generate_token(room="my-room", user=user)
+
+    claims = decode_token(token)
+    assert claims["name"] == str(user)
+
+
+def test_generate_token_explicit_username_overrides_default():
+    """An explicitly provided username should take precedence over the full name."""
+    user = UserFactory(full_name="Jane Doe")
+
+    token = generate_token(room="my-room", user=user, username="Custom Name")
+
+    claims = decode_token(token)
+    assert claims["name"] == "Custom Name"
+
+
+def test_authenticated_username_ignored_when_editing_disabled(settings):
+    """With editing disabled, an authenticated user's username is ignored."""
+    settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME = False
+    user = UserFactory(full_name="Jane Doe")
+    token = generate_token(room="my-room", user=user, username="Custom Name")
+    claims = decode_token(token)
+    assert claims["name"] == "Jane Doe"
+
+
+def test_authenticated_default_name_unaffected_when_editing_disabled(settings):
+    """Disabling editing doesn't disturb the default full-name path."""
+    settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME = False
+    user = UserFactory(full_name="Jane Doe")
+    token = generate_token(room="my-room", user=user)
+    claims = decode_token(token)
+    assert claims["name"] == "Jane Doe"
+
+
+def test_anonymous_uses_username_when_provided():
+    """An anonymous user's provided username is used as the display name."""
+    token = generate_token(room="my-room", user=AnonymousUser(), username="Guest42")
+    claims = decode_token(token)
+    assert claims["name"] == "Guest42"
+
+
+def test_anonymous_username_used_even_when_editing_disabled(settings):
+    """The setting governs authenticated users only; anonymous can still set a name."""
+    settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME = False
+    token = generate_token(room="my-room", user=AnonymousUser(), username="Guest42")
+    claims = decode_token(token)
+    assert claims["name"] == "Guest42"
+
+
+def test_anonymous_falls_back_to_anonymous_label():
+    """With no username, an anonymous user is labelled 'Anonymous'."""
+    token = generate_token(room="my-room", user=AnonymousUser())
+    claims = decode_token(token)
+    assert claims["name"] == "Anonymous"


@mock.patch("asyncio.get_running_loop")
@@ -109,11 +109,16 @@ def generate_token(
        default_username = "Anonymous"
    else:
        identity = str(user.sub)
-        default_username = str(user)
+        default_username = user.full_name or str(user)

    if color is None:
        color = generate_color(identity)

+    can_edit = (
+        settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME or user.is_anonymous
+    )
+    display_name = (username or default_username) if can_edit else default_username
+
    token = (
        AccessToken(
            api_key=settings.LIVEKIT_CONFIGURATION["api_key"],
@@ -121,7 +126,7 @@ def generate_token(
        )
        .with_grants(video_grants)
        .with_identity(identity)
-        .with_name(username or default_username)
+        .with_name(display_name)
        .with_attributes(
            {"color": color, "room_admin": "true" if is_admin_or_owner else "false"}
        )
@@ -459,12 +464,14 @@ def generate_upload_policy(file):
    return policy


-def generate_download_file_url(file, *, expires_in: int, override_domain: bool = True):
+def generate_download_s3_url(
+    key: str, *, expires_in: int, override_domain: bool = True
+):
    """
-    Generate a S3 signed download url for a given file.
+    Generate a S3 signed download url for a given key.
    """
-
-    key = file.file_key
+    if not key:
+        raise ValueError("key cannot be empty")

    # This setting should be used if the backend application and the frontend application
    # can't connect to the object storage with the same domain. This is the case in the
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-21 14:09+0000\n"
+"POT-Creation-Date: 2026-07-02 10:47+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,70 +17,92 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:29
+#: core/admin.py:67
 msgid "Personal info"
 msgstr "Persönliche Informationen"

-#: core/admin.py:42
+#: core/admin.py:80
 msgid "Permissions"
 msgstr "Berechtigungen"

-#: core/admin.py:54
+#: core/admin.py:92
 msgid "Important dates"
 msgstr "Wichtige Daten"

-#: core/admin.py:132 core/admin.py:275
+#: core/admin.py:206
+msgid "Content"
+msgstr ""
+
+#: core/admin.py:217
+#, fuzzy
+#| msgid "Delete rooms"
+msgid "Deletion"
+msgstr "Räume löschen"
+
+#: core/admin.py:226
+msgid "Derived info"
+msgstr ""
+
+#: core/admin.py:237
+msgid "Timestamps"
+msgstr ""
+
+#: core/admin.py:240
+msgid "File preview"
+msgstr ""
+
+#: core/admin.py:300 core/admin.py:443
 msgid "No owner"
 msgstr "Kein Eigentümer"

-#: core/admin.py:135 core/admin.py:278
+#: core/admin.py:303 core/admin.py:446
 msgid "Multiple owners"
 msgstr "Mehrere Eigentümer"

-#: core/admin.py:148
+#: core/admin.py:316
 msgid "Resend notification to external service"
 msgstr "Benachrichtigung erneut an externen Dienst senden"

-#: core/admin.py:171
+#: core/admin.py:339
 #, python-format
 msgid "Failed to notify for recording %(id)s"
 msgstr "Benachrichtigung für Aufnahme %(id)s fehlgeschlagen"

-#: core/admin.py:179
+#: core/admin.py:347
 #, python-format
 msgid "Failed to notify for recording %(id)s: %(error)s"
 msgstr "Benachrichtigung für Aufnahme %(id)s fehlgeschlagen: %(error)s"

-#: core/admin.py:187
+#: core/admin.py:355
 #, python-format
 msgid "Successfully sent notifications for %(count)s recording(s)."
 msgstr "Benachrichtigungen für %(count)s Aufnahme(n) erfolgreich gesendet."

-#: core/admin.py:195
+#: core/admin.py:363
 #, python-format
 msgid "Skipped %(count)s expired recording(s)."
 msgstr "%(count)s abgelaufene Aufnahme(n) übersprungen."

-#: core/admin.py:200
+#: core/admin.py:368
 msgid "Mark selected recordings as 'Failed to Stop'"
 msgstr "Ausgewählte Aufnahmen als ‚Fehler beim Stoppen‘ markieren"

-#: core/admin.py:218
+#: core/admin.py:386
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgstr "%(count)s Aufnahme(n) erfolgreich als ‚Fehler beim Stoppen‘ markiert."

-#: core/admin.py:226
+#: core/admin.py:394
 #, fuzzy, python-format
 #| msgid "Skipped %(count)s expired recording(s)."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s abgelaufene Aufnahme(n) übersprungen."

-#: core/admin.py:342
+#: core/admin.py:510
 msgid "No scopes"
 msgstr "Keine Scopes"

-#: core/admin.py:344
+#: core/admin.py:512
 msgid "Scopes"
 msgstr "Scopes"

@@ -88,17 +110,17 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Ersteller bin ich"

-#: core/api/serializers.py:88
+#: core/api/serializers.py:89
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Sie müssen Administrator oder Eigentümer eines Raums sein, um Zugriffe "
 "hinzuzufügen."

-#: core/api/serializers.py:509
+#: core/api/serializers.py:534
 msgid "This file extension is not allowed."
 msgstr "Diese Dateiendung ist nicht erlaubt."

-#: core/api/viewsets.py:1090
+#: core/api/viewsets.py:1222
 msgid "You have reached the maximum number of files for this type."
 msgstr "Sie haben die maximale Anzahl an Dateien dieses Typs erreicht."

@@ -146,51 +168,59 @@ msgstr "Stopp fehlgeschlagen"
 msgid "Notification succeeded"
 msgstr "Benachrichtigung erfolgreich"

-#: core/models.py:89
+#: core/models.py:65
+msgid "External process successful"
+msgstr "Externer Prozess erfolgreich"
+
+#: core/models.py:67
+msgid "External process failed"
+msgstr "Externer Prozess fehlgeschlagen"
+
+#: core/models.py:96
 msgid "SCREEN_RECORDING"
 msgstr "BILDSCHIRMAUFZEICHNUNG"

-#: core/models.py:90
+#: core/models.py:97
 msgid "TRANSCRIPT"
 msgstr "TRANSKRIPT"

-#: core/models.py:96
+#: core/models.py:103
 msgid "Public Access"
 msgstr "Öffentlicher Zugriff"

-#: core/models.py:97
+#: core/models.py:104
 msgid "Trusted Access"
 msgstr "Vertrauenswürdiger Zugriff"

-#: core/models.py:98
+#: core/models.py:105
 msgid "Restricted Access"
 msgstr "Eingeschränkter Zugriff"

-#: core/models.py:110
+#: core/models.py:117
 msgid "id"
 msgstr "ID"

-#: core/models.py:111
+#: core/models.py:118
 msgid "primary key for the record as UUID"
 msgstr "Primärschlüssel des Eintrags als UUID"

-#: core/models.py:117
+#: core/models.py:124
 msgid "created on"
 msgstr "erstellt am"

-#: core/models.py:118
+#: core/models.py:125
 msgid "date and time at which a record was created"
 msgstr "Datum und Uhrzeit der Erstellung eines Eintrags"

-#: core/models.py:123
+#: core/models.py:130
 msgid "updated on"
 msgstr "aktualisiert am"

-#: core/models.py:124
+#: core/models.py:131
 msgid "date and time at which a record was last updated"
 msgstr "Datum und Uhrzeit der letzten Aktualisierung eines Eintrags"

-#: core/models.py:144
+#: core/models.py:151
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -198,11 +228,11 @@ msgstr ""
 "Geben Sie einen gültigen Sub ein. Dieser Wert darf nur Buchstaben, Zahlen "
 "und die Zeichen @/./+/-/_ enthalten."

-#: core/models.py:150
+#: core/models.py:157
 msgid "sub"
 msgstr "Sub"

-#: core/models.py:152
+#: core/models.py:159
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -210,55 +240,55 @@ msgstr ""
 "Optional für ausstehende Benutzer; erforderlich nach Kontoaktivierung. "
 "Maximal 255 Zeichen. Nur Buchstaben, Zahlen und @/./+/-/_ Zeichen erlaubt."

-#: core/models.py:161
+#: core/models.py:168
 msgid "identity email address"
 msgstr "Identitäts-E-Mail-Adresse"

-#: core/models.py:166
+#: core/models.py:173
 msgid "admin email address"
 msgstr "Administrator-E-Mail-Adresse"

-#: core/models.py:168
+#: core/models.py:175
 msgid "full name"
 msgstr "Vollständiger Name"

-#: core/models.py:170
+#: core/models.py:177
 msgid "short name"
 msgstr "Kurzname"

-#: core/models.py:176
+#: core/models.py:183
 msgid "language"
 msgstr "Sprache"

-#: core/models.py:177
+#: core/models.py:184
 msgid "The language in which the user wants to see the interface."
 msgstr "Die Sprache, in der der Benutzer die Oberfläche sehen möchte."

-#: core/models.py:183
+#: core/models.py:190
 msgid "The timezone in which the user wants to see times."
 msgstr "Die Zeitzone, in der der Benutzer die Zeiten sehen möchte."

-#: core/models.py:186
+#: core/models.py:193
 msgid "device"
 msgstr "Gerät"

-#: core/models.py:188
+#: core/models.py:195
 msgid "Whether the user is a device or a real user."
 msgstr "Ob es sich um ein Gerät oder einen echten Benutzer handelt."

-#: core/models.py:191
+#: core/models.py:198
 msgid "staff status"
 msgstr "Mitarbeiterstatus"

-#: core/models.py:193
+#: core/models.py:200
 msgid "Whether the user can log into this admin site."
 msgstr "Ob der Benutzer sich bei dieser Admin-Seite anmelden kann."

-#: core/models.py:196
+#: core/models.py:203
 msgid "active"
 msgstr "aktiv"

-#: core/models.py:199
+#: core/models.py:206
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -266,66 +296,66 @@ msgstr ""
 "Ob dieser Benutzer als aktiv behandelt werden soll. Deaktivieren Sie dies "
 "anstelle des Löschens des Kontos."

-#: core/models.py:212
+#: core/models.py:219
 msgid "user"
 msgstr "Benutzer"

-#: core/models.py:213
+#: core/models.py:220
 msgid "users"
 msgstr "Benutzer"

-#: core/models.py:272
+#: core/models.py:286
 msgid "Resource"
 msgstr "Ressource"

-#: core/models.py:273
+#: core/models.py:287
 msgid "Resources"
 msgstr "Ressourcen"

-#: core/models.py:331
+#: core/models.py:345
 msgid "Resource access"
 msgstr "Ressourcenzugriff"

-#: core/models.py:332
+#: core/models.py:346
 msgid "Resource accesses"
 msgstr "Ressourcenzugriffe"

-#: core/models.py:338
+#: core/models.py:352
 msgid "Resource access with this User and Resource already exists."
 msgstr ""
 "Ein Ressourcenzugriff mit diesem Benutzer und dieser Ressource existiert "
 "bereits."

-#: core/models.py:394
+#: core/models.py:409
 msgid "Visio room configuration"
 msgstr "Visio-Raumkonfiguration"

-#: core/models.py:395
+#: core/models.py:410
 msgid "Values for Visio parameters to configure the room."
 msgstr "Werte für Visio-Parameter zur Konfiguration des Raums."

-#: core/models.py:402
+#: core/models.py:417
 msgid "Room PIN code"
 msgstr "PIN-Code für den Raum"

-#: core/models.py:403
+#: core/models.py:418
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Eindeutiger n-stelliger Code, der diesen Raum im Telephonmodus identifiziert."

-#: core/models.py:409 core/models.py:563
+#: core/models.py:424 core/models.py:578
 msgid "Room"
 msgstr "Raum"

-#: core/models.py:410
+#: core/models.py:425
 msgid "Rooms"
 msgstr "Räume"

-#: core/models.py:574
+#: core/models.py:589
 msgid "Worker ID"
 msgstr "Worker-ID"

-#: core/models.py:576
+#: core/models.py:591
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -334,141 +364,153 @@ msgstr ""
 "erhalten, auch wenn der Worker stoppt, was ein einfaches Nachverfolgen "
 "ermöglicht."

-#: core/models.py:584
+#: core/models.py:599
 msgid "Recording mode"
 msgstr "Aufzeichnungsmodus"

-#: core/models.py:585
+#: core/models.py:600
 msgid "Defines the mode of recording being called."
 msgstr "Definiert den aufgerufenen Aufzeichnungsmodus."

-#: core/models.py:590 core/models.py:591
+#: core/models.py:605 core/models.py:606
 msgid "Recording options"
 msgstr "Aufnahmeoptionen"

-#: core/models.py:597
+#: core/models.py:613
+msgid "External Process ID"
+msgstr "External Process ID"
+
+#: core/models.py:614
+msgid "ID of the external process associated with the recording."
+msgstr "ID des externen Prozesses, der mit der Aufzeichnung verknüpft ist"
+
+#: core/models.py:620
 msgid "Recording"
 msgstr "Aufzeichnung"

-#: core/models.py:598
+#: core/models.py:621
 msgid "Recordings"
 msgstr "Aufzeichnungen"

-#: core/models.py:706
+#: core/models.py:731
 msgid "Recording/user relation"
 msgstr "Beziehung Aufzeichnung/Benutzer"

-#: core/models.py:707
+#: core/models.py:732
 msgid "Recording/user relations"
 msgstr "Beziehungen Aufzeichnung/Benutzer"

-#: core/models.py:713
+#: core/models.py:738
 msgid "This user is already in this recording."
 msgstr "Dieser Benutzer ist bereits Teil dieser Aufzeichnung."

-#: core/models.py:719
+#: core/models.py:744
 msgid "This team is already in this recording."
 msgstr "Dieses Team ist bereits Teil dieser Aufzeichnung."

-#: core/models.py:725
+#: core/models.py:750
 msgid "Either user or team must be set, not both."
 msgstr "Entweder Benutzer oder Team muss festgelegt werden, nicht beides."

-#: core/models.py:742
+#: core/models.py:767
 msgid "Create rooms"
 msgstr "Räume erstellen"

-#: core/models.py:743
+#: core/models.py:768
 msgid "List rooms"
 msgstr "Räume auflisten"

-#: core/models.py:744
+#: core/models.py:769
 msgid "Retrieve room details"
 msgstr "Raumdetails abrufen"

-#: core/models.py:745
+#: core/models.py:770
 msgid "Update rooms"
 msgstr "Räume aktualisieren"

-#: core/models.py:746
+#: core/models.py:771
 msgid "Delete rooms"
 msgstr "Räume löschen"

-#: core/models.py:759
+#: core/models.py:784
 msgid "Application name"
 msgstr "Anwendungsname"

-#: core/models.py:760
+#: core/models.py:785
 msgid "Descriptive name for this application."
 msgstr "Beschreibender Name für diese Anwendung."

-#: core/models.py:770
+#: core/models.py:795
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Beim Speichern gehasht. Jetzt kopieren, wenn dies ein neues Geheimnis ist."

-#: core/models.py:781
+#: core/models.py:806
 msgid "Application"
 msgstr "Anwendung"

-#: core/models.py:782
+#: core/models.py:807
 msgid "Applications"
 msgstr "Anwendungen"

-#: core/models.py:805
+#: core/models.py:830
 msgid "Enter a valid domain"
 msgstr "Geben Sie eine gültige Domain ein"

-#: core/models.py:808
+#: core/models.py:833
 msgid "Domain"
 msgstr "Domain"

-#: core/models.py:809
+#: core/models.py:834
 msgid "Email domain this application can act on behalf of."
 msgstr "E-Mail-Domain, im Namen der diese Anwendung handeln kann."

-#: core/models.py:821
+#: core/models.py:846
 msgid "Application domain"
 msgstr "Anwendungsdomain"

-#: core/models.py:822
+#: core/models.py:847
 msgid "Application domains"
 msgstr "Anwendungsdomains"

-#: core/models.py:840
+#: core/models.py:865
 msgid "Pending"
 msgstr "Ausstehend"

-#: core/models.py:848
+#: core/models.py:866
+msgid "Analyzing"
+msgstr ""
+
+#: core/models.py:873
 msgid "Ready"
 msgstr "Bereit"

-#: core/models.py:854
+#: core/models.py:879
 msgid "Background image"
 msgstr "Hintergrundbild"

-#: core/models.py:866
+#: core/models.py:891
 msgid "title"
 msgstr "Titel"

-#: core/models.py:890
+#: core/models.py:915
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr ""
 "Informationen zur Malware-Erkennung, wenn der Analyse-Status unsicher ist."

-#: core/models.py:895
+#: core/models.py:920
 msgid "File"
 msgstr "Datei"

-#: core/models.py:896
+#: core/models.py:921
 msgid "Files"
 msgstr "Dateien"

-#: core/models.py:1000
+#: core/models.py:1041
 msgid "This file is already hard deleted."
 msgstr "Diese Datei wurde bereits endgültig gelöscht."

-#: core/models.py:1010
+#: core/models.py:1051
 #, fuzzy
 #| msgid "To hard delete a file, it must first be soft deleted."
 msgid "To hard delete a file, it must first be soft deleted."
@@ -476,10 +518,20 @@ msgstr ""
 "Um eine Datei endgültig zu löschen, muss sie zuvor weich gelöscht worden "
 "sein."

-#: core/recording/event/notification.py:116
+#: core/recording/event/notification.py:123
 msgid "Your recording is ready"
 msgstr "Ihre Aufzeichnung ist bereit"

+#: core/recording/event/notification.py:194
+msgid "Transcription"
+msgstr "Transkription"
+
+#: core/recording/event/notification.py:204
+#, python-brace-format
+msgid "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+msgstr ""
+"Besprechung \"{room}\" am {room_recording_date} um {room_recording_time}"
+
 #: core/services/invitation.py:44
 #, python-brace-format
 msgid "Video call in progress: {sender.email} is waiting for you to connect"
@@ -575,7 +627,7 @@ msgid "To keep this recording permanently:"
 msgstr "So speichern Sie diese Aufzeichnung dauerhaft:"

 #: core/templates/mail/html/screen_recording.html:208
-#: core/templates/mail/text/screen_recording.txt:13
+#, python-format
 msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Klicken Sie auf den Link „<a href=\"%(link)s\">Öffnen</a>\" unten "

@@ -604,18 +656,24 @@ msgstr ""
 " Wenn Sie Fragen haben oder Unterstützung benötigen, wenden Sie sich bitte "
 "an unser Support-Team unter %(support_email)s. "

-#: meet/settings.py:223
+#: core/templates/mail/text/screen_recording.txt:13
+#, fuzzy, python-format
+#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+msgid "Click the \"Open [%(link)s]\" link below "
+msgstr "Klicken Sie auf den Link „<a href=\"%(link)s\">Öffnen</a>\" unten "
+
+#: meet/settings.py:228
 msgid "English"
 msgstr "Englisch"

-#: meet/settings.py:224
+#: meet/settings.py:229
 msgid "French"
 msgstr "Französisch"

-#: meet/settings.py:225
+#: meet/settings.py:230
 msgid "Dutch"
 msgstr "Niederländisch"

-#: meet/settings.py:226
+#: meet/settings.py:231
 msgid "German"
 msgstr "Deutsch"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-21 14:09+0000\n"
+"POT-Creation-Date: 2026-07-02 10:47+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,70 +17,92 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:29
+#: core/admin.py:67
 msgid "Personal info"
 msgstr "Personal info"

-#: core/admin.py:42
+#: core/admin.py:80
 msgid "Permissions"
 msgstr "Permissions"

-#: core/admin.py:54
+#: core/admin.py:92
 msgid "Important dates"
 msgstr "Important dates"

-#: core/admin.py:132 core/admin.py:275
+#: core/admin.py:206
+msgid "Content"
+msgstr ""
+
+#: core/admin.py:217
+#, fuzzy
+#| msgid "Delete rooms"
+msgid "Deletion"
+msgstr "Delete rooms"
+
+#: core/admin.py:226
+msgid "Derived info"
+msgstr ""
+
+#: core/admin.py:237
+msgid "Timestamps"
+msgstr ""
+
+#: core/admin.py:240
+msgid "File preview"
+msgstr ""
+
+#: core/admin.py:300 core/admin.py:443
 msgid "No owner"
 msgstr "No owner"

-#: core/admin.py:135 core/admin.py:278
+#: core/admin.py:303 core/admin.py:446
 msgid "Multiple owners"
 msgstr "Multiple owners"

-#: core/admin.py:148
+#: core/admin.py:316
 msgid "Resend notification to external service"
 msgstr "Resend notification to external service"

-#: core/admin.py:171
+#: core/admin.py:339
 #, python-format
 msgid "Failed to notify for recording %(id)s"
 msgstr "Failed to notify for recording %(id)s"

-#: core/admin.py:179
+#: core/admin.py:347
 #, python-format
 msgid "Failed to notify for recording %(id)s: %(error)s"
 msgstr "Failed to notify for recording %(id)s: %(error)s"

-#: core/admin.py:187
+#: core/admin.py:355
 #, python-format
 msgid "Successfully sent notifications for %(count)s recording(s)."
 msgstr "Successfully sent notifications for %(count)s recording(s)."

-#: core/admin.py:195
+#: core/admin.py:363
 #, python-format
 msgid "Skipped %(count)s expired recording(s)."
 msgstr "Skipped %(count)s expired recording(s)."

-#: core/admin.py:200
+#: core/admin.py:368
 msgid "Mark selected recordings as 'Failed to Stop'"
 msgstr "Mark selected recordings as 'Failed to Stop'"

-#: core/admin.py:218
+#: core/admin.py:386
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgstr "%(count)s recording(s) successfully marked as 'Failed to Stop'."

-#: core/admin.py:226
+#: core/admin.py:394
 #, fuzzy, python-format
 #| msgid "Skipped %(count)s expired recording(s)."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "Skipped %(count)s expired recording(s)."

-#: core/admin.py:342
+#: core/admin.py:510
 msgid "No scopes"
 msgstr "No scopes"

-#: core/admin.py:344
+#: core/admin.py:512
 msgid "Scopes"
 msgstr "Scopes"

@@ -88,15 +110,15 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Creator is me"

-#: core/api/serializers.py:88
+#: core/api/serializers.py:89
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr "You must be administrator or owner of a room to add accesses to it."

-#: core/api/serializers.py:509
+#: core/api/serializers.py:534
 msgid "This file extension is not allowed."
 msgstr "This file extension is not allowed."

-#: core/api/viewsets.py:1090
+#: core/api/viewsets.py:1222
 msgid "You have reached the maximum number of files for this type."
 msgstr "You have reached the maximum number of files for this type."

@@ -144,51 +166,59 @@ msgstr "Failed to Stop"
 msgid "Notification succeeded"
 msgstr "Notification succeeded"

-#: core/models.py:89
+#: core/models.py:65
+msgid "External process successful"
+msgstr "External process successful"
+
+#: core/models.py:67
+msgid "External process failed"
+msgstr "External process failed"
+
+#: core/models.py:96
 msgid "SCREEN_RECORDING"
 msgstr "SCREEN_RECORDING"

-#: core/models.py:90
+#: core/models.py:97
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPT"

-#: core/models.py:96
+#: core/models.py:103
 msgid "Public Access"
 msgstr "Public Access"

-#: core/models.py:97
+#: core/models.py:104
 msgid "Trusted Access"
 msgstr "Trusted Access"

-#: core/models.py:98
+#: core/models.py:105
 msgid "Restricted Access"
 msgstr "Restricted Access"

-#: core/models.py:110
+#: core/models.py:117
 msgid "id"
 msgstr "id"

-#: core/models.py:111
+#: core/models.py:118
 msgid "primary key for the record as UUID"
 msgstr "primary key for the record as UUID"

-#: core/models.py:117
+#: core/models.py:124
 msgid "created on"
 msgstr "created on"

-#: core/models.py:118
+#: core/models.py:125
 msgid "date and time at which a record was created"
 msgstr "date and time at which a record was created"

-#: core/models.py:123
+#: core/models.py:130
 msgid "updated on"
 msgstr "updated on"

-#: core/models.py:124
+#: core/models.py:131
 msgid "date and time at which a record was last updated"
 msgstr "date and time at which a record was last updated"

-#: core/models.py:144
+#: core/models.py:151
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -196,11 +226,11 @@ msgstr ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."

-#: core/models.py:150
+#: core/models.py:157
 msgid "sub"
 msgstr "sub"

-#: core/models.py:152
+#: core/models.py:159
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -208,55 +238,55 @@ msgstr ""
 "Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
 "characters only."

-#: core/models.py:161
+#: core/models.py:168
 msgid "identity email address"
 msgstr "identity email address"

-#: core/models.py:166
+#: core/models.py:173
 msgid "admin email address"
 msgstr "admin email address"

-#: core/models.py:168
+#: core/models.py:175
 msgid "full name"
 msgstr "full name"

-#: core/models.py:170
+#: core/models.py:177
 msgid "short name"
 msgstr "short name"

-#: core/models.py:176
+#: core/models.py:183
 msgid "language"
 msgstr "language"

-#: core/models.py:177
+#: core/models.py:184
 msgid "The language in which the user wants to see the interface."
 msgstr "The language in which the user wants to see the interface."

-#: core/models.py:183
+#: core/models.py:190
 msgid "The timezone in which the user wants to see times."
 msgstr "The timezone in which the user wants to see times."

-#: core/models.py:186
+#: core/models.py:193
 msgid "device"
 msgstr "device"

-#: core/models.py:188
+#: core/models.py:195
 msgid "Whether the user is a device or a real user."
 msgstr "Whether the user is a device or a real user."

-#: core/models.py:191
+#: core/models.py:198
 msgid "staff status"
 msgstr "staff status"

-#: core/models.py:193
+#: core/models.py:200
 msgid "Whether the user can log into this admin site."
 msgstr "Whether the user can log into this admin site."

-#: core/models.py:196
+#: core/models.py:203
 msgid "active"
 msgstr "active"

-#: core/models.py:199
+#: core/models.py:206
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -264,63 +294,63 @@ msgstr ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."

-#: core/models.py:212
+#: core/models.py:219
 msgid "user"
 msgstr "user"

-#: core/models.py:213
+#: core/models.py:220
 msgid "users"
 msgstr "users"

-#: core/models.py:272
+#: core/models.py:286
 msgid "Resource"
 msgstr "Resource"

-#: core/models.py:273
+#: core/models.py:287
 msgid "Resources"
 msgstr "Resources"

-#: core/models.py:331
+#: core/models.py:345
 msgid "Resource access"
 msgstr "Resource access"

-#: core/models.py:332
+#: core/models.py:346
 msgid "Resource accesses"
 msgstr "Resource accesses"

-#: core/models.py:338
+#: core/models.py:352
 msgid "Resource access with this User and Resource already exists."
 msgstr "Resource access with this User and Resource already exists."

-#: core/models.py:394
+#: core/models.py:409
 msgid "Visio room configuration"
 msgstr "Visio room configuration"

-#: core/models.py:395
+#: core/models.py:410
 msgid "Values for Visio parameters to configure the room."
 msgstr "Values for Visio parameters to configure the room."

-#: core/models.py:402
+#: core/models.py:417
 msgid "Room PIN code"
 msgstr "Room PIN code"

-#: core/models.py:403
+#: core/models.py:418
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr "Unique n-digit code that identifies this room in telephony mode."

-#: core/models.py:409 core/models.py:563
+#: core/models.py:424 core/models.py:578
 msgid "Room"
 msgstr "Room"

-#: core/models.py:410
+#: core/models.py:425
 msgid "Rooms"
 msgstr "Rooms"

-#: core/models.py:574
+#: core/models.py:589
 msgid "Worker ID"
 msgstr "Worker ID"

-#: core/models.py:576
+#: core/models.py:591
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -328,154 +358,175 @@ msgstr ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."

-#: core/models.py:584
+#: core/models.py:599
 msgid "Recording mode"
 msgstr "Recording mode"

-#: core/models.py:585
+#: core/models.py:600
 msgid "Defines the mode of recording being called."
 msgstr "Defines the mode of recording being called."

-#: core/models.py:590 core/models.py:591
+#: core/models.py:605 core/models.py:606
 msgid "Recording options"
 msgstr "Recording options"

-#: core/models.py:597
+#: core/models.py:613
+msgid "External Process ID"
+msgstr "External Process ID"
+
+#: core/models.py:614
+msgid "ID of the external process associated with the recording."
+msgstr "ID of the external process associated with the recording."
+
+#: core/models.py:620
 msgid "Recording"
 msgstr "Recording"

-#: core/models.py:598
+#: core/models.py:621
 msgid "Recordings"
 msgstr "Recordings"

-#: core/models.py:706
+#: core/models.py:731
 msgid "Recording/user relation"
 msgstr "Recording/user relation"

-#: core/models.py:707
+#: core/models.py:732
 msgid "Recording/user relations"
 msgstr "Recording/user relations"

-#: core/models.py:713
+#: core/models.py:738
 msgid "This user is already in this recording."
 msgstr "This user is already in this recording."

-#: core/models.py:719
+#: core/models.py:744
 msgid "This team is already in this recording."
 msgstr "This team is already in this recording."

-#: core/models.py:725
+#: core/models.py:750
 msgid "Either user or team must be set, not both."
 msgstr "Either user or team must be set, not both."

-#: core/models.py:742
+#: core/models.py:767
 #, fuzzy
 #| msgid "created on"
 msgid "Create rooms"
 msgstr "Create rooms"

-#: core/models.py:743
+#: core/models.py:768
 msgid "List rooms"
 msgstr "List rooms"

-#: core/models.py:744
+#: core/models.py:769
 msgid "Retrieve room details"
 msgstr "Retrieve room details"

-#: core/models.py:745
+#: core/models.py:770
 #, fuzzy
 #| msgid "updated on"
 msgid "Update rooms"
 msgstr "Update rooms"

-#: core/models.py:746
+#: core/models.py:771
 msgid "Delete rooms"
 msgstr "Delete rooms"

-#: core/models.py:759
+#: core/models.py:784
 msgid "Application name"
 msgstr "Application name"

-#: core/models.py:760
+#: core/models.py:785
 msgid "Descriptive name for this application."
 msgstr "Descriptive name for this application."

-#: core/models.py:770
+#: core/models.py:795
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr "Hashed on Save. Copy it now if this is a new secret."

-#: core/models.py:781
+#: core/models.py:806
 msgid "Application"
 msgstr "Application"

-#: core/models.py:782
+#: core/models.py:807
 msgid "Applications"
 msgstr "Applications"

-#: core/models.py:805
+#: core/models.py:830
 msgid "Enter a valid domain"
 msgstr "Enter a valid domain"

-#: core/models.py:808
+#: core/models.py:833
 msgid "Domain"
 msgstr "Domain"

-#: core/models.py:809
+#: core/models.py:834
 msgid "Email domain this application can act on behalf of."
 msgstr "Email domain this application can act on behalf of."

-#: core/models.py:821
+#: core/models.py:846
 msgid "Application domain"
 msgstr "Application domain"

-#: core/models.py:822
+#: core/models.py:847
 msgid "Application domains"
 msgstr "Application domains"

-#: core/models.py:840
+#: core/models.py:865
 #, fuzzy
 #| msgid "Recording"
 msgid "Pending"
 msgstr "Pending"

-#: core/models.py:848
+#: core/models.py:866
+msgid "Analyzing"
+msgstr ""
+
+#: core/models.py:873
 msgid "Ready"
 msgstr "Ready"

-#: core/models.py:854
+#: core/models.py:879
 msgid "Background image"
 msgstr "Background image"

-#: core/models.py:866
+#: core/models.py:891
 msgid "title"
 msgstr "title"

-#: core/models.py:890
+#: core/models.py:915
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr "Malware detection info when the analysis status is unsafe."

-#: core/models.py:895
+#: core/models.py:920
 msgid "File"
 msgstr "File"

-#: core/models.py:896
+#: core/models.py:921
 msgid "Files"
 msgstr "Files"

-#: core/models.py:1000
+#: core/models.py:1041
 #, fuzzy
 #| msgid "This user is already in this recording."
 msgid "This file is already hard deleted."
 msgstr "This file is already hard deleted."

-#: core/models.py:1010
+#: core/models.py:1051
 msgid "To hard delete a file, it must first be soft deleted."
 msgstr "To hard delete a file, it must first be soft deleted."

-#: core/recording/event/notification.py:116
+#: core/recording/event/notification.py:123
 msgid "Your recording is ready"
 msgstr "Your recording is ready"

+#: core/recording/event/notification.py:194
+msgid "Transcription"
+msgstr "Transcription"
+
+#: core/recording/event/notification.py:204
+#, python-brace-format
+msgid "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+msgstr "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+
 #: core/services/invitation.py:44
 #, python-brace-format
 msgid "Video call in progress: {sender.email} is waiting for you to connect"
@@ -571,7 +622,7 @@ msgid "To keep this recording permanently:"
 msgstr "To keep this recording permanently:"

 #: core/templates/mail/html/screen_recording.html:208
-#: core/templates/mail/text/screen_recording.txt:13
+#, python-format
 msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Click the \"<a href=\"%(link)s\">Open</a>\" link below "

@@ -600,18 +651,24 @@ msgstr ""
 " If you have any questions or need assistance, please contact our support "
 "team at %(support_email)s. "

-#: meet/settings.py:223
+#: core/templates/mail/text/screen_recording.txt:13
+#, fuzzy, python-format
+#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+msgid "Click the \"Open [%(link)s]\" link below "
+msgstr "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+
+#: meet/settings.py:228
 msgid "English"
 msgstr "English"

-#: meet/settings.py:224
+#: meet/settings.py:229
 msgid "French"
 msgstr "French"

-#: meet/settings.py:225
+#: meet/settings.py:230
 msgid "Dutch"
 msgstr "Dutch"

-#: meet/settings.py:226
+#: meet/settings.py:231
 msgid "German"
 msgstr "German"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-21 14:09+0000\n"
+"POT-Creation-Date: 2026-07-02 10:47+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: antoine.lebaud@mail.numerique.gouv.fr\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,71 +17,93 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:29
+#: core/admin.py:67
 msgid "Personal info"
 msgstr "Informations personnelles"

-#: core/admin.py:42
+#: core/admin.py:80
 msgid "Permissions"
 msgstr "Permissions"

-#: core/admin.py:54
+#: core/admin.py:92
 msgid "Important dates"
 msgstr "Dates importantes"

-#: core/admin.py:132 core/admin.py:275
+#: core/admin.py:206
+msgid "Content"
+msgstr ""
+
+#: core/admin.py:217
+#, fuzzy
+#| msgid "Delete rooms"
+msgid "Deletion"
+msgstr "Supprimer les salles"
+
+#: core/admin.py:226
+msgid "Derived info"
+msgstr ""
+
+#: core/admin.py:237
+msgid "Timestamps"
+msgstr ""
+
+#: core/admin.py:240
+msgid "File preview"
+msgstr ""
+
+#: core/admin.py:300 core/admin.py:443
 msgid "No owner"
 msgstr "Pas de propriétaire"

-#: core/admin.py:135 core/admin.py:278
+#: core/admin.py:303 core/admin.py:446
 msgid "Multiple owners"
 msgstr "Plusieurs propriétaires"

-#: core/admin.py:148
+#: core/admin.py:316
 msgid "Resend notification to external service"
 msgstr "Renvoyer la notification au service externe"

-#: core/admin.py:171
+#: core/admin.py:339
 #, python-format
 msgid "Failed to notify for recording %(id)s"
 msgstr "Échec de la notification pour l’enregistrement %(id)s"

-#: core/admin.py:179
+#: core/admin.py:347
 #, python-format
 msgid "Failed to notify for recording %(id)s: %(error)s"
 msgstr "Échec de la notification pour l’enregistrement %(id)s : %(error)s"

-#: core/admin.py:187
+#: core/admin.py:355
 #, python-format
 msgid "Successfully sent notifications for %(count)s recording(s)."
 msgstr "Notifications envoyées avec succès pour %(count)s enregistrement(s)."

-#: core/admin.py:195
+#: core/admin.py:363
 #, python-format
 msgid "Skipped %(count)s expired recording(s)."
 msgstr "%(count)s enregistrement(s) expiré(s) ignoré(s)."

-#: core/admin.py:200
+#: core/admin.py:368
 msgid "Mark selected recordings as 'Failed to Stop'"
 msgstr "Marquer les enregistrements sélectionnés comme « Échec d’arrêt »"

-#: core/admin.py:218
+#: core/admin.py:386
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgstr ""
 "%(count)s enregistrement(s) marqué(s) avec succès comme « Échec d’arrêt »."

-#: core/admin.py:226
+#: core/admin.py:394
 #, fuzzy, python-format
 #| msgid "Skipped %(count)s expired recording(s)."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s enregistrement(s) avec un statut inéligible ignoré(s)."

-#: core/admin.py:342
+#: core/admin.py:510
 msgid "No scopes"
 msgstr "Aucun scopes"

-#: core/admin.py:344
+#: core/admin.py:512
 msgid "Scopes"
 msgstr "Scopes"

@@ -89,17 +111,17 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Je suis le créateur"

-#: core/api/serializers.py:88
+#: core/api/serializers.py:89
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Vous devez être administrateur ou propriétaire d'une salle pour y ajouter "
 "des accès."

-#: core/api/serializers.py:509
+#: core/api/serializers.py:534
 msgid "This file extension is not allowed."
 msgstr "Cette extension n'est pas autorisée"

-#: core/api/viewsets.py:1090
+#: core/api/viewsets.py:1222
 msgid "You have reached the maximum number of files for this type."
 msgstr "Vous avez atteint le nombre maximum de fichiers de ce type"

@@ -147,53 +169,61 @@ msgstr "Échec à l'arrêt"
 msgid "Notification succeeded"
 msgstr "Notification réussie"

-#: core/models.py:89
+#: core/models.py:65
+msgid "External process successful"
+msgstr "Traitement externe : succès"
+
+#: core/models.py:67
+msgid "External process failed"
+msgstr "Traitement externe : erreur"
+
+#: core/models.py:96
 msgid "SCREEN_RECORDING"
 msgstr "ENREGISTREMENT_ÉCRAN"

-#: core/models.py:90
+#: core/models.py:97
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPTION"

-#: core/models.py:96
+#: core/models.py:103
 msgid "Public Access"
 msgstr "Accès public"

-#: core/models.py:97
+#: core/models.py:104
 msgid "Trusted Access"
 msgstr "Accès de confiance"

-#: core/models.py:98
+#: core/models.py:105
 msgid "Restricted Access"
 msgstr "Accès restreint"

-#: core/models.py:110
+#: core/models.py:117
 msgid "id"
 msgstr "id"

-#: core/models.py:111
+#: core/models.py:118
 msgid "primary key for the record as UUID"
 msgstr "clé primaire pour l'enregistrement sous forme d'UUID"

-#: core/models.py:117
+#: core/models.py:124
 msgid "created on"
 msgstr "créé le"

-#: core/models.py:118
+#: core/models.py:125
 msgid "date and time at which a record was created"
 msgstr "date et heure auxquelles un enregistrement a été créé"

-#: core/models.py:123
+#: core/models.py:130
 msgid "updated on"
 msgstr "mis à jour le"

-#: core/models.py:124
+#: core/models.py:131
 msgid "date and time at which a record was last updated"
 msgstr ""
 "date et heure auxquelles un enregistrement a été mis à jour pour la dernière "
 "fois"

-#: core/models.py:144
+#: core/models.py:151
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -201,11 +231,11 @@ msgstr ""
 "Entrez un sub valide. Cette valeur ne peut contenir que des lettres, des "
 "chiffres et les caractères @/./+/-/_."

-#: core/models.py:150
+#: core/models.py:157
 msgid "sub"
 msgstr "sub"

-#: core/models.py:152
+#: core/models.py:159
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -213,55 +243,55 @@ msgstr ""
 "Optionnel pour les utilisateurs en attente ; requis lors de l'activation du "
 "compte. 255 caractères maximum. Lettres, chiffres et @/./+/-/_ uniquement."

-#: core/models.py:161
+#: core/models.py:168
 msgid "identity email address"
 msgstr "adresse e-mail d'identité"

-#: core/models.py:166
+#: core/models.py:173
 msgid "admin email address"
 msgstr "adresse e-mail d'administrateur"

-#: core/models.py:168
+#: core/models.py:175
 msgid "full name"
 msgstr "nom complet"

-#: core/models.py:170
+#: core/models.py:177
 msgid "short name"
 msgstr "nom court"

-#: core/models.py:176
+#: core/models.py:183
 msgid "language"
 msgstr "langue"

-#: core/models.py:177
+#: core/models.py:184
 msgid "The language in which the user wants to see the interface."
 msgstr "La langue dans laquelle l'utilisateur souhaite voir l'interface."

-#: core/models.py:183
+#: core/models.py:190
 msgid "The timezone in which the user wants to see times."
 msgstr "Le fuseau horaire dans lequel l'utilisateur souhaite voir les heures."

-#: core/models.py:186
+#: core/models.py:193
 msgid "device"
 msgstr "appareil"

-#: core/models.py:188
+#: core/models.py:195
 msgid "Whether the user is a device or a real user."
 msgstr "Si l'utilisateur est un appareil ou un utilisateur réel."

-#: core/models.py:191
+#: core/models.py:198
 msgid "staff status"
 msgstr "statut du personnel"

-#: core/models.py:193
+#: core/models.py:200
 msgid "Whether the user can log into this admin site."
 msgstr "Si l'utilisateur peut se connecter à ce site d'administration."

-#: core/models.py:196
+#: core/models.py:203
 msgid "active"
 msgstr "actif"

-#: core/models.py:199
+#: core/models.py:206
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -269,65 +299,65 @@ msgstr ""
 "Si cet utilisateur doit être traité comme actif. Désélectionnez cette option "
 "au lieu de supprimer des comptes."

-#: core/models.py:212
+#: core/models.py:219
 msgid "user"
 msgstr "utilisateur"

-#: core/models.py:213
+#: core/models.py:220
 msgid "users"
 msgstr "utilisateurs"

-#: core/models.py:272
+#: core/models.py:286
 msgid "Resource"
 msgstr "Ressource"

-#: core/models.py:273
+#: core/models.py:287
 msgid "Resources"
 msgstr "Ressources"

-#: core/models.py:331
+#: core/models.py:345
 msgid "Resource access"
 msgstr "Accès aux ressources"

-#: core/models.py:332
+#: core/models.py:346
 msgid "Resource accesses"
 msgstr "Accès aux ressources"

-#: core/models.py:338
+#: core/models.py:352
 msgid "Resource access with this User and Resource already exists."
 msgstr ""
 "L'accès à la ressource avec cet utilisateur et cette ressource existe déjà."

-#: core/models.py:394
+#: core/models.py:409
 msgid "Visio room configuration"
 msgstr "Configuration de la salle de visioconférence"

-#: core/models.py:395
+#: core/models.py:410
 msgid "Values for Visio parameters to configure the room."
 msgstr "Valeurs des paramètres de visioconférence pour configurer la salle."

-#: core/models.py:402
+#: core/models.py:417
 msgid "Room PIN code"
 msgstr "Code PIN de la salle"

-#: core/models.py:403
+#: core/models.py:418
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Code unique à n chiffres qui identifie cette salle en mode téléphonique."

-#: core/models.py:409 core/models.py:563
+#: core/models.py:424 core/models.py:578
 msgid "Room"
 msgstr "Salle"

-#: core/models.py:410
+#: core/models.py:425
 msgid "Rooms"
 msgstr "Salles"

-#: core/models.py:574
+#: core/models.py:589
 msgid "Worker ID"
 msgstr "ID du Worker"

-#: core/models.py:576
+#: core/models.py:591
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -335,153 +365,174 @@ msgstr ""
 "Entrez un identifiant pour l'enregistrement du Worker. Cet identifiant est "
 "conservé même lorsque le Worker s'arrête, permettant un suivi facile."

-#: core/models.py:584
+#: core/models.py:599
 msgid "Recording mode"
 msgstr "Mode d'enregistrement"

-#: core/models.py:585
+#: core/models.py:600
 msgid "Defines the mode of recording being called."
 msgstr "Définit le mode d'enregistrement appelé."

-#: core/models.py:590 core/models.py:591
+#: core/models.py:605 core/models.py:606
 msgid "Recording options"
 msgstr "Options d'enregistrement"

-#: core/models.py:597
+#: core/models.py:613
+msgid "External Process ID"
+msgstr "ID Traitement externe"
+
+#: core/models.py:614
+msgid "ID of the external process associated with the recording."
+msgstr "ID du traitement externe associé avec l'enregistrement."
+
+#: core/models.py:620
 msgid "Recording"
 msgstr "Enregistrement"

-#: core/models.py:598
+#: core/models.py:621
 msgid "Recordings"
 msgstr "Enregistrements"

-#: core/models.py:706
+#: core/models.py:731
 msgid "Recording/user relation"
 msgstr "Relation enregistrement/utilisateur"

-#: core/models.py:707
+#: core/models.py:732
 msgid "Recording/user relations"
 msgstr "Relations enregistrement/utilisateur"

-#: core/models.py:713
+#: core/models.py:738
 msgid "This user is already in this recording."
 msgstr "Cet utilisateur est déjà dans cet enregistrement."

-#: core/models.py:719
+#: core/models.py:744
 msgid "This team is already in this recording."
 msgstr "Cette équipe est déjà dans cet enregistrement."

-#: core/models.py:725
+#: core/models.py:750
 msgid "Either user or team must be set, not both."
 msgstr "Soit l'utilisateur, soit l'équipe doit être défini, pas les deux."

-#: core/models.py:742
+#: core/models.py:767
 msgid "Create rooms"
 msgstr "Créer des salles"

-#: core/models.py:743
+#: core/models.py:768
 msgid "List rooms"
 msgstr "Lister les salles"

-#: core/models.py:744
+#: core/models.py:769
 msgid "Retrieve room details"
 msgstr "Afficher les détails d’une salle"

-#: core/models.py:745
+#: core/models.py:770
 msgid "Update rooms"
 msgstr "Mettre à jour les salles"

-#: core/models.py:746
+#: core/models.py:771
 msgid "Delete rooms"
 msgstr "Supprimer les salles"

-#: core/models.py:759
+#: core/models.py:784
 msgid "Application name"
 msgstr "Nom de l’application"

-#: core/models.py:760
+#: core/models.py:785
 msgid "Descriptive name for this application."
 msgstr "Nom descriptif de cette application."

-#: core/models.py:770
+#: core/models.py:795
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Haché lors de l’enregistrement. Copiez-le maintenant s’il s’agit d’un "
 "nouveau secret."

-#: core/models.py:781
+#: core/models.py:806
 msgid "Application"
 msgstr "Application"

-#: core/models.py:782
+#: core/models.py:807
 msgid "Applications"
 msgstr "Applications"

-#: core/models.py:805
+#: core/models.py:830
 msgid "Enter a valid domain"
 msgstr "Saisissez un domaine valide"

-#: core/models.py:808
+#: core/models.py:833
 msgid "Domain"
 msgstr "Domaine"

-#: core/models.py:809
+#: core/models.py:834
 msgid "Email domain this application can act on behalf of."
 msgstr "Domaine de messagerie au nom duquel cette application peut agir."

-#: core/models.py:821
+#: core/models.py:846
 msgid "Application domain"
 msgstr "Domaine d’application"

-#: core/models.py:822
+#: core/models.py:847
 msgid "Application domains"
 msgstr "Domaines d’application"

-#: core/models.py:840
+#: core/models.py:865
 msgid "Pending"
 msgstr "En attente"

-#: core/models.py:848
+#: core/models.py:866
+msgid "Analyzing"
+msgstr ""
+
+#: core/models.py:873
 msgid "Ready"
 msgstr "Prêt"

-#: core/models.py:854
+#: core/models.py:879
 msgid "Background image"
 msgstr "Image de fond"

-#: core/models.py:866
+#: core/models.py:891
 msgid "title"
 msgstr "Titre"

-#: core/models.py:890
+#: core/models.py:915
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr ""
 "Information concernant la détection de Malware cand le statut n'est pas sain"

-#: core/models.py:895
+#: core/models.py:920
 msgid "File"
 msgstr "Fichier"

-#: core/models.py:896
+#: core/models.py:921
 msgid "Files"
 msgstr "Fichiers"

-#: core/models.py:1000
+#: core/models.py:1041
 #, fuzzy
 #| msgid "This user is already in this recording."
 msgid "This file is already hard deleted."
 msgstr "Ce fichier a été supprimé."

-#: core/models.py:1010
+#: core/models.py:1051
 msgid "To hard delete a file, it must first be soft deleted."
 msgstr ""
 "Pour supprimer définitivement un fichier il doit d'abord avoir été marqué "
 "comme supprimé (soft delete)"

-#: core/recording/event/notification.py:116
+#: core/recording/event/notification.py:123
 msgid "Your recording is ready"
 msgstr "Votre enregistrement est prêt"

+#: core/recording/event/notification.py:194
+msgid "Transcription"
+msgstr "Transcription"
+
+#: core/recording/event/notification.py:204
+#, python-brace-format
+msgid "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+msgstr "Réunion \"{room}\" du {room_recording_date} à {room_recording_time}"
+
 #: core/services/invitation.py:44
 #, python-brace-format
 msgid "Video call in progress: {sender.email} is waiting for you to connect"
@@ -577,7 +628,7 @@ msgid "To keep this recording permanently:"
 msgstr "Pour conserver cet enregistrement de façon permanente :"

 #: core/templates/mail/html/screen_recording.html:208
-#: core/templates/mail/text/screen_recording.txt:13
+#, python-format
 msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Cliquez sur le lien \"<a href=\"%(link)s\">Ouvrir</a>\" ci-dessous "

@@ -606,18 +657,24 @@ msgstr ""
 " Si vous avez des questions ou besoin d'assistance, veuillez contacter notre "
 "équipe d'assistance à %(support_email)s. "

-#: meet/settings.py:223
+#: core/templates/mail/text/screen_recording.txt:13
+#, fuzzy, python-format
+#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+msgid "Click the \"Open [%(link)s]\" link below "
+msgstr "Cliquez sur le lien \"<a href=\"%(link)s\">Ouvrir</a>\" ci-dessous "
+
+#: meet/settings.py:228
 msgid "English"
 msgstr "Anglais"

-#: meet/settings.py:224
+#: meet/settings.py:229
 msgid "French"
 msgstr "Français"

-#: meet/settings.py:225
+#: meet/settings.py:230
 msgid "Dutch"
 msgstr "Néerlandais"

-#: meet/settings.py:226
+#: meet/settings.py:231
 msgid "German"
 msgstr "Allemand"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-21 14:09+0000\n"
+"POT-Creation-Date: 2026-07-02 10:47+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,70 +17,92 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:29
+#: core/admin.py:67
 msgid "Personal info"
 msgstr "Persoonlijke informatie"

-#: core/admin.py:42
+#: core/admin.py:80
 msgid "Permissions"
 msgstr "Rechten"

-#: core/admin.py:54
+#: core/admin.py:92
 msgid "Important dates"
 msgstr "Belangrijke datums"

-#: core/admin.py:132 core/admin.py:275
+#: core/admin.py:206
+msgid "Content"
+msgstr ""
+
+#: core/admin.py:217
+#, fuzzy
+#| msgid "Delete rooms"
+msgid "Deletion"
+msgstr "Ruimtes verwijderen"
+
+#: core/admin.py:226
+msgid "Derived info"
+msgstr ""
+
+#: core/admin.py:237
+msgid "Timestamps"
+msgstr ""
+
+#: core/admin.py:240
+msgid "File preview"
+msgstr ""
+
+#: core/admin.py:300 core/admin.py:443
 msgid "No owner"
 msgstr "Geen eigenaar"

-#: core/admin.py:135 core/admin.py:278
+#: core/admin.py:303 core/admin.py:446
 msgid "Multiple owners"
 msgstr "Meerdere eigenaren"

-#: core/admin.py:148
+#: core/admin.py:316
 msgid "Resend notification to external service"
 msgstr "Melding opnieuw verzenden naar externe dienst"

-#: core/admin.py:171
+#: core/admin.py:339
 #, python-format
 msgid "Failed to notify for recording %(id)s"
 msgstr "Melding voor opname %(id)s mislukt"

-#: core/admin.py:179
+#: core/admin.py:347
 #, python-format
 msgid "Failed to notify for recording %(id)s: %(error)s"
 msgstr "Melding voor opname %(id)s mislukt: %(error)s"

-#: core/admin.py:187
+#: core/admin.py:355
 #, python-format
 msgid "Successfully sent notifications for %(count)s recording(s)."
 msgstr "Meldingen succesvol verzonden voor %(count)s opname(n)."

-#: core/admin.py:195
+#: core/admin.py:363
 #, python-format
 msgid "Skipped %(count)s expired recording(s)."
 msgstr "%(count)s verlopen opname(n) overgeslagen."

-#: core/admin.py:200
+#: core/admin.py:368
 msgid "Mark selected recordings as 'Failed to Stop'"
 msgstr "Geselecteerde opnames markeren als 'Mislukt bij stoppen'"

-#: core/admin.py:218
+#: core/admin.py:386
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgstr "%(count)s opname(s) succesvol gemarkeerd als 'Mislukt bij stoppen'."

-#: core/admin.py:226
+#: core/admin.py:394
 #, fuzzy, python-format
 #| msgid "Skipped %(count)s expired recording(s)."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s opname(s) met een niet-toegestane status overgeslagen."

-#: core/admin.py:342
+#: core/admin.py:510
 msgid "No scopes"
 msgstr "Geen scopes"

-#: core/admin.py:344
+#: core/admin.py:512
 msgid "Scopes"
 msgstr "Scopes"

@@ -88,16 +110,16 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Maker ben ik"

-#: core/api/serializers.py:88
+#: core/api/serializers.py:89
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Je moet beheerder of eigenaar van een ruimte zijn om toegang toe te voegen."

-#: core/api/serializers.py:509
+#: core/api/serializers.py:534
 msgid "This file extension is not allowed."
 msgstr "Deze bestandsextensie is niet toegestaan."

-#: core/api/viewsets.py:1090
+#: core/api/viewsets.py:1222
 msgid "You have reached the maximum number of files for this type."
 msgstr "Het maximale aantal bestanden voor dit type is bereikt."

@@ -145,51 +167,59 @@ msgstr "Stoppen mislukt"
 msgid "Notification succeeded"
 msgstr "Notificatie geslaagd"

-#: core/models.py:89
+#: core/models.py:65
+msgid "External process successful"
+msgstr "Externe procedure succesvol"
+
+#: core/models.py:67
+msgid "External process failed"
+msgstr "Het externe proces is mislukt."
+
+#: core/models.py:96
 msgid "SCREEN_RECORDING"
 msgstr "SCHERM_OPNAME"

-#: core/models.py:90
+#: core/models.py:97
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPT"

-#: core/models.py:96
+#: core/models.py:103
 msgid "Public Access"
 msgstr "Openbare toegang"

-#: core/models.py:97
+#: core/models.py:104
 msgid "Trusted Access"
 msgstr "Vertrouwde toegang"

-#: core/models.py:98
+#: core/models.py:105
 msgid "Restricted Access"
 msgstr "Beperkte toegang"

-#: core/models.py:110
+#: core/models.py:117
 msgid "id"
 msgstr "id"

-#: core/models.py:111
+#: core/models.py:118
 msgid "primary key for the record as UUID"
 msgstr "primaire sleutel voor het record als UUID"

-#: core/models.py:117
+#: core/models.py:124
 msgid "created on"
 msgstr "aangemaakt op"

-#: core/models.py:118
+#: core/models.py:125
 msgid "date and time at which a record was created"
 msgstr "datum en tijd waarop een record werd aangemaakt"

-#: core/models.py:123
+#: core/models.py:130
 msgid "updated on"
 msgstr "bijgewerkt op"

-#: core/models.py:124
+#: core/models.py:131
 msgid "date and time at which a record was last updated"
 msgstr "datum en tijd waarop een record voor het laatst werd bijgewerkt"

-#: core/models.py:144
+#: core/models.py:151
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -197,11 +227,11 @@ msgstr ""
 "Voer een geldige sub in. Deze waarde mag alleen letters, cijfers en @/./+/-/"
 "_ tekens bevatten."

-#: core/models.py:150
+#: core/models.py:157
 msgid "sub"
 msgstr "sub"

-#: core/models.py:152
+#: core/models.py:159
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -209,55 +239,55 @@ msgstr ""
 "Optioneel voor gebruikers in afwachting; vereist bij accountactivering. "
 "Maximum 255 tekens. Alleen letters, cijfers en @/./+/-/_ toegestaan."

-#: core/models.py:161
+#: core/models.py:168
 msgid "identity email address"
 msgstr "identiteit e-mailadres"

-#: core/models.py:166
+#: core/models.py:173
 msgid "admin email address"
 msgstr "beheerder e-mailadres"

-#: core/models.py:168
+#: core/models.py:175
 msgid "full name"
 msgstr "volledige naam"

-#: core/models.py:170
+#: core/models.py:177
 msgid "short name"
 msgstr "korte naam"

-#: core/models.py:176
+#: core/models.py:183
 msgid "language"
 msgstr "taal"

-#: core/models.py:177
+#: core/models.py:184
 msgid "The language in which the user wants to see the interface."
 msgstr "De taal waarin de gebruiker de interface wil zien."

-#: core/models.py:183
+#: core/models.py:190
 msgid "The timezone in which the user wants to see times."
 msgstr "De tijdzone waarin de gebruiker tijden wil zien."

-#: core/models.py:186
+#: core/models.py:193
 msgid "device"
 msgstr "apparaat"

-#: core/models.py:188
+#: core/models.py:195
 msgid "Whether the user is a device or a real user."
 msgstr "Of de gebruiker een apparaat is of een echte gebruiker."

-#: core/models.py:191
+#: core/models.py:198
 msgid "staff status"
 msgstr "personeelsstatus"

-#: core/models.py:193
+#: core/models.py:200
 msgid "Whether the user can log into this admin site."
 msgstr "Of de gebruiker kan inloggen op deze beheersite."

-#: core/models.py:196
+#: core/models.py:203
 msgid "active"
 msgstr "actief"

-#: core/models.py:199
+#: core/models.py:206
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -265,64 +295,64 @@ msgstr ""
 "Of deze gebruiker als actief moet worden behandeld. Deselecteer dit in "
 "plaats van accounts te verwijderen."

-#: core/models.py:212
+#: core/models.py:219
 msgid "user"
 msgstr "gebruiker"

-#: core/models.py:213
+#: core/models.py:220
 msgid "users"
 msgstr "gebruikers"

-#: core/models.py:272
+#: core/models.py:286
 msgid "Resource"
 msgstr "Bron"

-#: core/models.py:273
+#: core/models.py:287
 msgid "Resources"
 msgstr "Bronnen"

-#: core/models.py:331
+#: core/models.py:345
 msgid "Resource access"
 msgstr "Brontoegang"

-#: core/models.py:332
+#: core/models.py:346
 msgid "Resource accesses"
 msgstr "Brontoegangsrechten"

-#: core/models.py:338
+#: core/models.py:352
 msgid "Resource access with this User and Resource already exists."
 msgstr "Brontoegang met deze gebruiker en bron bestaat al."

-#: core/models.py:394
+#: core/models.py:409
 msgid "Visio room configuration"
 msgstr "Visio-ruimteconfiguratie"

-#: core/models.py:395
+#: core/models.py:410
 msgid "Values for Visio parameters to configure the room."
 msgstr "Waarden voor Visio-parameters om de ruimte te configureren."

-#: core/models.py:402
+#: core/models.py:417
 msgid "Room PIN code"
 msgstr "Pincode van de kamer"

-#: core/models.py:403
+#: core/models.py:418
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Unieke n-cijferige code die deze kamer identificeert in telefonie-modus."

-#: core/models.py:409 core/models.py:563
+#: core/models.py:424 core/models.py:578
 msgid "Room"
 msgstr "Ruimte"

-#: core/models.py:410
+#: core/models.py:425
 msgid "Rooms"
 msgstr "Ruimtes"

-#: core/models.py:574
+#: core/models.py:589
 msgid "Worker ID"
 msgstr "Worker ID"

-#: core/models.py:576
+#: core/models.py:591
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -330,140 +360,152 @@ msgstr ""
 "Voer een identificatie in voor de worker-opname. Deze ID blijft behouden, "
 "zelfs wanneer de worker stopt, waardoor eenvoudige tracking mogelijk is."

-#: core/models.py:584
+#: core/models.py:599
 msgid "Recording mode"
 msgstr "Opnamemodus"

-#: core/models.py:585
+#: core/models.py:600
 msgid "Defines the mode of recording being called."
 msgstr "Definieert de modus van opname die wordt aangeroepen."

-#: core/models.py:590 core/models.py:591
+#: core/models.py:605 core/models.py:606
 msgid "Recording options"
 msgstr "Opnameopties"

-#: core/models.py:597
+#: core/models.py:613
+msgid "External Process ID"
+msgstr "Externe proces-ID"
+
+#: core/models.py:614
+msgid "ID of the external process associated with the recording."
+msgstr "ID van het externe proces dat aan de opname is gekoppeld."
+
+#: core/models.py:620
 msgid "Recording"
 msgstr "Opname"

-#: core/models.py:598
+#: core/models.py:621
 msgid "Recordings"
 msgstr "Opnames"

-#: core/models.py:706
+#: core/models.py:731
 msgid "Recording/user relation"
 msgstr "Opname/gebruiker-relatie"

-#: core/models.py:707
+#: core/models.py:732
 msgid "Recording/user relations"
 msgstr "Opname/gebruiker-relaties"

-#: core/models.py:713
+#: core/models.py:738
 msgid "This user is already in this recording."
 msgstr "Deze gebruiker is al in deze opname."

-#: core/models.py:719
+#: core/models.py:744
 msgid "This team is already in this recording."
 msgstr "Dit team is al in deze opname."

-#: core/models.py:725
+#: core/models.py:750
 msgid "Either user or team must be set, not both."
 msgstr "Ofwel gebruiker of team moet worden ingesteld, niet beide."

-#: core/models.py:742
+#: core/models.py:767
 msgid "Create rooms"
 msgstr "Ruimtes aanmaken"

-#: core/models.py:743
+#: core/models.py:768
 msgid "List rooms"
 msgstr "Ruimtes weergeven"

-#: core/models.py:744
+#: core/models.py:769
 msgid "Retrieve room details"
 msgstr "Details van een ruimte ophalen"

-#: core/models.py:745
+#: core/models.py:770
 msgid "Update rooms"
 msgstr "Ruimtes bijwerken"

-#: core/models.py:746
+#: core/models.py:771
 msgid "Delete rooms"
 msgstr "Ruimtes verwijderen"

-#: core/models.py:759
+#: core/models.py:784
 msgid "Application name"
 msgstr "Naam van de applicatie"

-#: core/models.py:760
+#: core/models.py:785
 msgid "Descriptive name for this application."
 msgstr "Beschrijvende naam voor deze applicatie."

-#: core/models.py:770
+#: core/models.py:795
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Wordt gehasht bij het opslaan. Kopieer het nu als dit een nieuw geheim is."

-#: core/models.py:781
+#: core/models.py:806
 msgid "Application"
 msgstr "Applicatie"

-#: core/models.py:782
+#: core/models.py:807
 msgid "Applications"
 msgstr "Applicaties"

-#: core/models.py:805
+#: core/models.py:830
 msgid "Enter a valid domain"
 msgstr "Voer een geldig domein in"

-#: core/models.py:808
+#: core/models.py:833
 msgid "Domain"
 msgstr "Domein"

-#: core/models.py:809
+#: core/models.py:834
 msgid "Email domain this application can act on behalf of."
 msgstr "E-maildomein namens welke deze applicatie kan handelen."

-#: core/models.py:821
+#: core/models.py:846
 msgid "Application domain"
 msgstr "Applicatiedomein"

-#: core/models.py:822
+#: core/models.py:847
 msgid "Application domains"
 msgstr "Applicatiedomeinen"

-#: core/models.py:840
+#: core/models.py:865
 msgid "Pending"
 msgstr "In afwachting"

-#: core/models.py:848
+#: core/models.py:866
+msgid "Analyzing"
+msgstr ""
+
+#: core/models.py:873
 msgid "Ready"
 msgstr "Klaar"

-#: core/models.py:854
+#: core/models.py:879
 msgid "Background image"
 msgstr "Achtergrondafbeelding"

-#: core/models.py:866
+#: core/models.py:891
 msgid "title"
 msgstr "Titel"

-#: core/models.py:890
+#: core/models.py:915
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr "Informatie over malwaredetectie wanneer de analysestatus onveilig is."

-#: core/models.py:895
+#: core/models.py:920
 msgid "File"
 msgstr "Bestand"

-#: core/models.py:896
+#: core/models.py:921
 msgid "Files"
 msgstr "Bestanden"

-#: core/models.py:1000
+#: core/models.py:1041
 msgid "This file is already hard deleted."
 msgstr "Dit bestand is al definitief verwijderd."

-#: core/models.py:1010
+#: core/models.py:1051
 #, fuzzy
 #| msgid "To hard delete a file, it must first be soft deleted."
 msgid "To hard delete a file, it must first be soft deleted."
@@ -471,10 +513,20 @@ msgstr ""
 "Om een bestand definitief te verwijderen, moet het eerst zacht verwijderd "
 "zijn."

-#: core/recording/event/notification.py:116
+#: core/recording/event/notification.py:123
 msgid "Your recording is ready"
 msgstr "Je opname is klaar"

+#: core/recording/event/notification.py:194
+msgid "Transcription"
+msgstr "Transcriptie"
+
+#: core/recording/event/notification.py:204
+#, python-brace-format
+msgid "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+msgstr ""
+"Vergadering \"{room}\" op {room_recording_date} om {room_recording_time}"
+
 #: core/services/invitation.py:44
 #, python-brace-format
 msgid "Video call in progress: {sender.email} is waiting for you to connect"
@@ -570,7 +622,7 @@ msgid "To keep this recording permanently:"
 msgstr "Om deze opname permanent te bewaren:"

 #: core/templates/mail/html/screen_recording.html:208
-#: core/templates/mail/text/screen_recording.txt:13
+#, python-format
 msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Klik op de \"<a href=\"%(link)s\">Openen</a>\"-link hieronder "

@@ -599,18 +651,24 @@ msgstr ""
 " Als je vragen hebt of hulp nodig hebt, neem dan contact op met ons support "
 "team via %(support_email)s. "

-#: meet/settings.py:223
+#: core/templates/mail/text/screen_recording.txt:13
+#, fuzzy, python-format
+#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+msgid "Click the \"Open [%(link)s]\" link below "
+msgstr "Klik op de \"<a href=\"%(link)s\">Openen</a>\"-link hieronder "
+
+#: meet/settings.py:228
 msgid "English"
 msgstr "Engels"

-#: meet/settings.py:224
+#: meet/settings.py:229
 msgid "French"
 msgstr "Frans"

-#: meet/settings.py:225
+#: meet/settings.py:230
 msgid "Dutch"
 msgstr "Nederlands"

-#: meet/settings.py:226
+#: meet/settings.py:231
 msgid "German"
 msgstr "Duits"
@@ -13,6 +13,7 @@ https://docs.djangoproject.com/en/3.1/ref/settings/
 # pylint: disable=too-many-lines

 import json
+import warnings
 from os import path
 from socket import gethostbyname, gethostname

@@ -323,8 +324,7 @@ class Base(Configuration):

    REST_FRAMEWORK = {
        "DEFAULT_AUTHENTICATION_CLASSES": (
-            "mozilla_django_oidc.contrib.drf.OIDCAuthentication",
-            "rest_framework.authentication.SessionAuthentication",
+            "core.authentication.backends.SessionAuthenticationWith401",
        ),
        "DEFAULT_PARSER_CLASSES": [
            "rest_framework.parsers.JSONParser",
@@ -671,6 +671,11 @@ class Base(Configuration):
        environ_name="PARTICIPANT_FORBIDDEN_PERMISSION_FIELDS",
        environ_prefix=None,
    )
+    AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME = values.BooleanValue(
+        True,
+        environ_name="AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME",
+        environ_prefix=None,
+    )

    # Recording settings
    RECORDING_ENABLE = values.BooleanValue(
@@ -749,12 +754,30 @@ class Base(Configuration):
        environ_prefix=None,
    )

+    SUMMARY_SERVICE_VERSION = values.PositiveIntegerValue(
+        1, environ_name="SUMMARY_SERVICE_VERSION", environ_prefix=None
+    )
    SUMMARY_SERVICE_ENDPOINT = values.Value(
        None, environ_name="SUMMARY_SERVICE_ENDPOINT", environ_prefix=None
    )
    SUMMARY_SERVICE_API_TOKEN = SecretFileValue(
        None, environ_name="SUMMARY_SERVICE_API_TOKEN", environ_prefix=None
    )
+    SUMMARY_SERVICE_WEBHOOK_API_TOKEN = SecretFileValue(
+        None, environ_name="SUMMARY_SERVICE_WEBHOOK_API_TOKEN", environ_prefix=None
+    )
+    SUMMARY_SERVICE_CLOUD_STORAGE_SIGNED_URL_EXPIRY_SECONDS = (
+        values.PositiveIntegerValue(
+            60 * 60 * 24,
+            environ_name="SUMMARY_SERVICE_CLOUD_STORAGE_SIGNED_URL_EXPIRY_SECONDS",
+            environ_prefix=None,
+        )
+    )
+    TRANSCRIPTION_SATISFACTION_FORM_BASE_URL = values.Value(
+        None,
+        environ_name="TRANSCRIPTION_SATISFACTION_FORM_BASE_URL",
+        environ_prefix=None,
+    )
    SCREEN_RECORDING_BASE_URL = values.Value(
        None, environ_name="SCREEN_RECORDING_BASE_URL", environ_prefix=None
    )
@@ -762,6 +785,14 @@ class Base(Configuration):
        None, environ_name="RECORDING_DOWNLOAD_BASE_URL", environ_prefix=None
    )

+    # Analytics
+    ANALYTICS_BACKEND = values.Value(
+        None, environ_name="ANALYTICS_BACKEND", environ_prefix=None
+    )
+    ANALYTICS_BACKEND_SETTINGS = values.DictValue(
+        {}, environ_name="ANALYTICS_BACKEND_SETTINGS", environ_prefix=None
+    )
+
    # Marketing and communication settings
    SIGNUP_NEW_USER_TO_MARKETING_EMAIL = values.BooleanValue(
        False,  # When enabled, new users are automatically added to mailing list.
@@ -1103,11 +1134,25 @@ class Base(Configuration):
                "FILE_UPLOAD_TMP_PATH cannot be the same as FILE_UPLOAD_PATH"
            )

+        if (
+            cls.SUMMARY_SERVICE_VERSION == 1
+            and cls.SUMMARY_SERVICE_ENDPOINT is not None
+        ):
+            warnings.warn(
+                "SUMMARY_SERVICE_VERSION=1 is deprecated. "
+                "The legacy v1 API has been removed from the experimental "
+                "Summary service. Please update your Summary service deployment to "
+                "the v2 API and set SUMMARY_SERVICE_VERSION=2.",
+                # We use UserWarning to make sure it shows up in production deployment
+                UserWarning,
+                stacklevel=2,
+            )
+
        # The SENTRY_DSN setting should be available to activate sentry for an environment
        if cls.SENTRY_DSN is not None:
            sentry_sdk.init(
                dsn=cls.SENTRY_DSN,
-                environment=cls.__name__.lower(),
+                environment=cls.__name__.lower(),  # build, test, development, production
                release=get_release(),
                integrations=[DjangoIntegration()],
            )
@@ -7,7 +7,7 @@ build-backend = "uv_build"

 [project]
 name = "meet"
-version = "1.21.0"
+version = "1.23.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
    "Development Status :: 5 - Production/Stable",
@@ -24,19 +24,19 @@ keywords = ["Django", "Contacts", "Templates", "RBAC"]
 license = "MIT"
 requires-python = ">=3.13"
 dependencies = [
-    "boto3==1.43.14",
+    "boto3==1.43.36",
    "Brotli==1.2.0",
    "brevo-python==1.2.0",
    "celery[redis]==5.6.3",
    "dj-database-url==3.1.2",
    "django-configurations==2.5.1",
    "django-cors-headers==4.9.0",
-    "django-countries==8.2.0",
+    "django-countries==9.0.0",
    "django-filter==25.2",
-    "django-lasuite[all]==0.0.26",
+    "django-lasuite[all]==0.0.27",
    "django-parler==2.4",
    "redis==5.2.1",
-    "django-redis==6.0.0",
+    "django-redis==7.0.0",
    "django-storages[s3]==1.14.6",
    "django-timezone-field>=5.1",
    "django-pydantic-field==0.5.4",
@@ -50,19 +50,20 @@ dependencies = [
    "jsonschema==4.26.0",
    "markdown==3.10.2",
    "nested-multipart-parser==1.6.0",
+    "posthog==7.16.1",
    "psycopg[binary]==3.3.4",
    "pydantic==2.13.4",
    "PyJWT==2.13.0",
    "python-frontmatter==1.3.0",
    "python-magic==0.4.27",
    "requests==2.34.2",
-    "sentry-sdk==2.60.0",
+    "sentry-sdk==2.63.0",
    "whitenoise==6.12.0",
    "mozilla-django-oidc==5.0.2",
-    "livekit-api==1.1.0",
-    "aiohttp==3.14.0",
+    "livekit-api==1.1.1",
+    "aiohttp==3.14.1",
    "urllib3==2.7.0",
-    "phonenumbers==9.0.31",
+    "phonenumbers==9.0.33",
 ]

 [project.urls]
@@ -74,20 +75,20 @@ dependencies = [
 [dependency-groups]
 dev = [
    "django-extensions==4.1",
-    "drf-spectacular-sidecar==2026.5.1",
+    "drf-spectacular-sidecar==2026.6.1",
    "freezegun==1.5.5",
    "ipdb==0.13.13",
-    "ipython==9.13.0",
+    "ipython==9.14.1",
    "pyfakefs==6.2.0",
    "pylint-django==2.7.0",
    "pylint<4.0.0",
    "pytest-cov==7.1.0",
    "pytest-django==4.12.0",
-    "pytest==9.0.3",
+    "pytest==9.1.1",
    "pytest-icdiff==0.9",
    "pytest-xdist==3.8.0",
    "responses==0.26.1",
-    "ruff==0.15.14",
+    "ruff==0.15.19",
    "types-requests==2.33.0.20260518",
 ]

@@ -1,4 +1,4 @@
-FROM node:20-alpine AS frontend-deps
+FROM node:22-alpine AS frontend-deps

 USER node

@@ -39,7 +39,7 @@ ENV VITE_API_BASE_URL=${VITE_API_BASE_URL}
 RUN npm run build

 # ---- Front-end image ----
-FROM nginxinc/nginx-unprivileged:alpine3.23 AS frontend-production
+FROM nginxinc/nginx-unprivileged:1.30.3-alpine3.23 AS frontend-production

 USER root

@@ -1,7 +1,7 @@
 {
  "name": "meet",
  "private": true,
-  "version": "1.21.0",
+  "version": "1.23.0",
  "type": "module",
  "scripts": {
    "dev": "panda codegen && vite",
@@ -17,31 +17,33 @@
  "dependencies": {
    "@fontsource-variable/atkinson-hyperlegible-next": "5.2.6",
    "@fontsource-variable/lexend": "5.2.11",
-    "@libreaudio/la-call": "0.1.4",
    "@fontsource/opendyslexic": "5.2.5",
+    "@libreaudio/la-call": "0.1.4",
    "@livekit/components-react": "2.9.21",
    "@livekit/components-styles": "1.2.0",
    "@livekit/track-processors": "0.7.2",
+    "@mediapipe/tasks-vision": "0.10.14",
    "@pandacss/preset-panda": "1.11.3",
-    "@react-aria/toast": "3.0.10",
    "@react-types/overlays": "3.10.0",
    "@remixicon/react": "4.9.0",
-    "@tanstack/react-query": "5.100.14",
+    "@tanstack/react-query": "5.101.0",
    "@timephy/rnnoise-wasm": "1.0.0",
    "crisp-sdk-web": "1.1.2",
    "derive-valtio": "0.2.0",
    "hoofd": "1.7.3",
    "humanize-duration": "3.33.2",
-    "i18next": "26.2.0",
+    "i18next": "26.3.1",
    "i18next-browser-languagedetector": "8.2.1",
    "i18next-parser": "9.4.0",
    "i18next-resources-to-backend": "1.2.1",
-    "livekit-client": "2.19.0",
-    "posthog-js": "1.382.0",
+    "livekit-client": "2.19.2",
+    "posthog-js": "1.391.2",
    "react": "18.3.1",
-    "react-aria-components": "1.14.0",
+    "react-aria": "3.50.0",
+    "react-aria-components": "1.19.0",
    "react-dom": "18.3.1",
    "react-i18next": "17.0.8",
+    "react-stately": "3.48.0",
    "use-sound": "5.0.0",
    "valtio": "2.3.2",
    "wouter": "3.10.0"
@@ -52,6 +54,7 @@
    "@tanstack/eslint-plugin-query": "5.100.14",
    "@tanstack/react-query-devtools": "5.100.14",
    "@types/humanize-duration": "3.27.4",
+    "@types/node": "24.12.4",
    "@types/react": "18.3.12",
    "@types/react-dom": "18.3.1",
    "@vitejs/plugin-react": "6.0.2",
@@ -68,6 +71,7 @@
    "typescript": "6.0.3",
    "typescript-eslint": "8.60.1",
    "vite": "8.0.14",
+    "vite-plugin-static-copy": "4.1.1",
    "vite-plugin-svgr": "5.2.0"
  }
 }
@@ -9,6 +9,7 @@ export interface ApiConfig {
  analytics?: {
    id: string
    host: string
+    flags_api_host?: string
  }
  support?: {
    id: string
@@ -57,6 +58,7 @@ export interface ApiConfig {
  transcription_destination?: string
  max_participants_for_sound: number
  auto_mute_on_join_threshold: number
+  authenticated_users_can_edit_display_name: boolean
 }

 const fetchConfig = (): Promise<ApiConfig> => {
@@ -28,10 +28,16 @@ export const terminateAnalyticsSession = async () => {
 export type useAnalyticsProps = {
  id?: string
  host?: string
+  flags_api_host?: string
  isDisabled?: boolean
 }

-export const useAnalytics = ({ id, host, isDisabled }: useAnalyticsProps) => {
+export const useAnalytics = ({
+  id,
+  host,
+  flags_api_host,
+  isDisabled,
+}: useAnalyticsProps) => {
  const [location] = useLocation()
  const { user } = useUser()

@@ -39,9 +45,13 @@ export const useAnalytics = ({ id, host, isDisabled }: useAnalyticsProps) => {
    if (!id || !host || isDisabled) return
    getPosthog().then((ph) => {
      if (ph.__loaded) return
-      ph.init(id, { api_host: host, person_profiles: 'always' })
+      ph.init(id, {
+        api_host: host,
+        flags_api_host: flags_api_host,
+        person_profiles: 'always',
+      })
    })
-  }, [id, host, isDisabled])
+  }, [id, host, flags_api_host, isDisabled])

  useEffect(() => {
    if (!user) return
@@ -9,10 +9,11 @@ import { useState } from 'react'

 import { menuRecipe } from '@/primitives/menuRecipe'
 import { ApiRoom } from '@/features/rooms/api/ApiRoom'
-import { loadUserChoices } from '@livekit/components-core'
+import { useSnapshot } from 'valtio'
+import { userStore } from '@/stores/user'

 export const CreateMeetingMenu = () => {
-  const { username } = loadUserChoices()
+  const { username } = useSnapshot(userStore)

  const { t } = useTranslation('home')
  const { mutateAsync: createRoom } = useCreateRoom()
@@ -1,10 +1,10 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { Button } from '@/primitives'
 import { RiCloseLine } from '@remixicon/react'
 import { useRef } from 'react'
-import type { ToastState } from '@react-stately/toast'
+import type { ToastState } from 'react-stately'
 import type { ToastData } from './ToastProvider'
-import type { QueuedToast } from '@react-stately/toast'
+import type { QueuedToast } from 'react-stately'
 import { StyledToastContainer } from './StyledToastContainer'
 import { StyledToast } from './StyledToast'

@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useMemo, useRef } from 'react'

 import type { ToastProps } from './Toast'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useRef } from 'react'

 import { type ToastProps } from './Toast'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useRef } from 'react'
 import { Button as RACButton } from 'react-aria-components'
 import { Track } from 'livekit-client'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useRef } from 'react'

 import { type ToastProps } from './Toast'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useEffect, useRef } from 'react'

 import { type ToastProps } from './Toast'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useRef } from 'react'

 import { type ToastProps } from './Toast'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useMemo, useRef } from 'react'

 import { type ToastProps } from './Toast'
@@ -1,5 +1,5 @@
 /* eslint-disable react-refresh/only-export-components */
-import { ToastQueue, useToastQueue } from '@react-stately/toast'
+import { ToastQueue, useToastQueue } from 'react-stately'
 import { ToastRegion } from './ToastRegion'
 import { Participant } from 'livekit-client'
 import type { NotificationType } from '../NotificationType'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useRef } from 'react'

 import { type ToastProps } from './Toast'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useMemo, useRef } from 'react'

 import { type ToastProps } from './Toast'
@@ -1,4 +1,4 @@
-import { useToast } from '@react-aria/toast'
+import { useToast } from 'react-aria'
 import { useMemo, useRef } from 'react'
 import { Text } from '@/primitives'

@@ -1,5 +1,5 @@
-import { AriaToastRegionProps, useToastRegion } from '@react-aria/toast'
-import type { QueuedToast, ToastState } from '@react-stately/toast'
+import { AriaToastRegionProps, useToastRegion } from 'react-aria'
+import type { QueuedToast, ToastState } from 'react-stately'
 import { Toast } from './Toast'
 import { useRef } from 'react'
 import { NotificationType } from '../NotificationType'
@@ -1,6 +1,6 @@
 import { useEffect, useRef, useState } from 'react'
 import { RiMoreFill } from '@remixicon/react'
-import { FocusScope } from '@react-aria/focus'
+import { FocusScope } from 'react-aria'
 import { Box, Button } from '@/primitives'
 import { css } from '@/styled-system/css'
 import { useTranslation } from 'react-i18next'
@@ -26,6 +26,7 @@ export const PipFocusLayout = memo(
            <ParticipantTile
              key={getTrackKey(mainTrack)}
              trackRef={mainTrack}
+              disableTileControls
            />
          </MainSlot>
        )}
@@ -34,6 +35,7 @@ export const PipFocusLayout = memo(
            <ParticipantTile
              key={getTrackKey(thumbnailTrack)}
              trackRef={thumbnailTrack}
+              disableTileControls
            />
          </Thumbnail>
        )}
@@ -48,9 +50,10 @@ const FocusContainer = styled('div', {
    position: 'relative',
    width: '100%',
    height: '100%',
-    borderRadius: '4px',
+    borderRadius: '8px',
    overflow: 'hidden',
    backgroundColor: 'primaryDark.100',
+    boxSizing: 'border-box',
  },
 })

@@ -58,6 +61,8 @@ const MainSlot = styled('div', {
  base: {
    width: '100%',
    height: '100%',
+    borderRadius: '8px',
+    overflow: 'hidden',
    '& .lk-participant-media-video': {
      objectFit: 'contain',
    },
@@ -67,13 +72,13 @@ const MainSlot = styled('div', {
 const Thumbnail = styled('div', {
  base: {
    position: 'absolute',
-    right: '1rem',
-    bottom: '1rem',
+    right: '1.25rem',
+    bottom: '1.25rem',
    width: '42%',
    maxWidth: '220px',
    minWidth: '140px',
    aspectRatio: '16 / 9',
-    borderRadius: '4px',
+    borderRadius: '8px',
    overflow: 'hidden',
    boxShadow: 'md',
    zIndex: 2,
@@ -41,7 +41,7 @@ export const PipGridLayout = memo(({ tracks }: PipGridLayoutProps) => {
    <GridContainer ref={containerRef} style={gridStyle}>
      {tracks.map((track, index) => (
        <GridCell key={getTrackKey(track)} style={placements[index]}>
-          <ParticipantTile trackRef={track} />
+          <ParticipantTile trackRef={track} disableTileControls />
        </GridCell>
      ))}
    </GridContainer>
@@ -54,7 +54,8 @@ const GridContainer = styled('div', {
    width: '100%',
    height: '100%',
    display: 'grid',
-    gap: '0.25rem',
+    gap: '0.5rem',
+    boxSizing: 'border-box',
  },
 })

@@ -63,7 +64,7 @@ const GridCell = styled('div', {
    position: 'relative',
    minWidth: 0,
    minHeight: 0,
-    borderRadius: '4px',
+    borderRadius: '8px',
    overflow: 'hidden',
    backgroundColor: 'primaryDark.100',
    // Paint on own layer so FLIP transforms don't trigger layout thrash.
@@ -0,0 +1,97 @@
+import { memo } from 'react'
+import type { TrackReferenceOrPlaceholder } from '@livekit/components-core'
+import { styled } from '@/styled-system/jsx'
+import { ParticipantTile } from '@/features/rooms/livekit/components/ParticipantTile'
+import { getTrackKey } from '../../utils/pipTrackSelection'
+
+type PipScreenShareLayoutProps = {
+  screenShareTrack: TrackReferenceOrPlaceholder
+  cameraTracks: TrackReferenceOrPlaceholder[]
+}
+
+/**
+ * Layout when a screen share is active.
+ * Camera tiles are shown as a compact row at the top; the screen share occupies
+ * the remaining space below, much larger than the camera tiles.
+ */
+export const PipScreenShareLayout = memo(
+  ({ screenShareTrack, cameraTracks }: PipScreenShareLayoutProps) => {
+    return (
+      <LayoutContainer>
+        {cameraTracks.length > 0 && (
+          <CameraTilesRow>
+            {cameraTracks.map((track) => (
+              <CameraTile key={getTrackKey(track)}>
+                <ParticipantTile trackRef={track} disableTileControls />
+              </CameraTile>
+            ))}
+          </CameraTilesRow>
+        )}
+        <ScreenShareSlot>
+          <ParticipantTile trackRef={screenShareTrack} disableTileControls />
+        </ScreenShareSlot>
+      </LayoutContainer>
+    )
+  }
+)
+PipScreenShareLayout.displayName = 'PipScreenShareLayout'
+
+const LayoutContainer = styled('div', {
+  base: {
+    width: '100%',
+    height: '100%',
+    display: 'flex',
+    flexDirection: 'column',
+    gap: '0.5rem',
+    boxSizing: 'border-box',
+    overflow: 'hidden',
+  },
+})
+
+const CameraTilesRow = styled('div', {
+  base: {
+    display: 'flex',
+    flexDirection: 'row',
+    justifyContent: 'center',
+    gap: '0.5rem',
+    flexShrink: 0,
+    height: '22%',
+    minHeight: '60px',
+    maxHeight: '120px',
+  },
+})
+
+const CameraTile = styled('div', {
+  base: {
+    position: 'relative',
+    flex: '0 1 auto',
+    height: '100%',
+    aspectRatio: '16 / 9',
+    minWidth: 0,
+    borderRadius: '8px',
+    overflow: 'hidden',
+    backgroundColor: 'primaryDark.100',
+    '& .lk-participant-tile': {
+      width: '100%',
+      height: '100%',
+    },
+  },
+})
+
+const ScreenShareSlot = styled('div', {
+  base: {
+    position: 'relative',
+    flex: 1,
+    minHeight: 0,
+    borderRadius: '8px',
+    overflow: 'hidden',
+    backgroundColor: 'primaryDark.100',
+    '& .lk-participant-tile': {
+      width: '100%',
+      height: '100%',
+    },
+    '& .lk-participant-media-video': {
+      objectFit: 'contain',
+    },
+  },
+})
@@ -1,10 +1,11 @@
-import { useMemo } from 'react'
+import React, { useMemo } from 'react'
 import { usePagination, useTracks } from '@livekit/components-react'
 import { RoomEvent, Track } from 'livekit-client'
 import { styled } from '@/styled-system/jsx'
 import { PipFocusLayout } from './PipFocusLayout'
 import { PipGridLayout } from './PipGridLayout'
 import { PipPagination } from './PipPagination'
+import { PipScreenShareLayout } from './PipScreenShareLayout'
 import { StageFrame } from './StageFrame'
 import { MAX_PIP_TILES } from '../../utils/pipGrid'
 import {
@@ -13,9 +14,12 @@ import {
 } from '@livekit/components-core'

 /**
- * PipStage picks between two layouts based on track count:
- *   - Focus mode (≤ 2 tracks): one main track + one thumbnail overlay.
- *   - Grid mode  (3+ tracks):  adaptive tiling.
+ * PipStage picks between three layouts:
+ *   - Screen share mode (any screen share active):
+ *     small camera tiles in a row at the top, large screen share below.
+ *   - Grid mode  (3+ camera tracks, no screen share): adaptive tiling.
+ *   - Focus mode (≤ 2 camera tracks, no screen share): one main track
+ *     + one thumbnail overlay.
 */
 export const PipStage = () => {
  const tracks = useTracks(
@@ -41,51 +45,55 @@ export const PipStage = () => {
    [tracks]
  )

-  // Grid mode order: screen share leads, then cameras (already ordered by
-  // active speaker via the `ActiveSpeakersChanged` update above).
-  const gridTracks = useMemo(
-    () =>
-      screenShareTrack ? [screenShareTrack, ...cameraTracks] : cameraTracks,
-    [screenShareTrack, cameraTracks]
-  )
+  // Cap camera tiles in screen-share mode. Called unconditionally for hook rules.
+  const paginatedCameraTracks = usePagination(MAX_PIP_TILES - 1, cameraTracks)

-  // Cap the grid at MAX_PIP_TILES per page. `usePagination` keeps the visible
-  // page visually stable (active/recent speakers stay put) via its internal
-  // `useVisualStableUpdate`. Called unconditionally to respect hook rules.
-  const pagination = usePagination(MAX_PIP_TILES, gridTracks)
+  // Cap the grid at MAX_PIP_TILES per page for the non-screenshare grid mode.
+  const pagination = usePagination(MAX_PIP_TILES, cameraTracks)

  if (tracks.length === 0) return null

-  /**
-   * The focus layout shows one main track with one thumbnail overlay,
-   * so it can only fit 2 tracks. Beyond that we switch to the grid.
-   */
-  if (gridTracks.length > 2) {
-    return (
-      <StageWrapper>
+  // Screen share active
+  if (screenShareTrack) {
+    // Solo presenter: screen share fills the area, camera as small thumbnail
+    if (cameraTracks.length <= 1) {
+      return (
        <StageFrame>
-          <PipGridLayout tracks={pagination.tracks} />
+          <PipFocusLayout
+            mainTrack={screenShareTrack}
+            thumbnailTrack={cameraTracks[0]}
+          />
        </StageFrame>
-        <PipPagination
-          totalPageCount={pagination.totalPageCount}
-          currentPage={pagination.currentPage}
-          nextPage={pagination.nextPage}
-          prevPage={pagination.prevPage}
+      )
+    }
+    // Multiple cameras: camera row at top, screen share below
+    return (
+      <PaginatedStage pagination={paginatedCameraTracks}>
+        <PipScreenShareLayout
+          screenShareTrack={screenShareTrack}
+          cameraTracks={paginatedCameraTracks.tracks}
        />
-      </StageWrapper>
+      </PaginatedStage>
    )
  }

+  // 3+ camera tracks → adaptive grid
+  if (cameraTracks.length > 2) {
+    return (
+      <PaginatedStage pagination={pagination}>
+        <PipGridLayout tracks={pagination.tracks} />
+      </PaginatedStage>
+    )
+  }
+
+  // ≤ 2 camera tracks → focus layout (main + optional thumbnail)
  const localCameraTrack = cameraTracks.find(
    (track) => track.participant?.isLocal
  )
-
  const remoteCameraTrack = cameraTracks.find(
    (track) => !track.participant?.isLocal
  )
-
-  const mainTrack = screenShareTrack ?? remoteCameraTrack ?? localCameraTrack
-
+  const mainTrack = remoteCameraTrack ?? localCameraTrack
  const thumbnailTrack =
    mainTrack === localCameraTrack ? undefined : localCameraTrack

@@ -96,6 +104,31 @@ export const PipStage = () => {
  )
 }

+type PaginationResult = {
+  totalPageCount: number
+  currentPage: number
+  nextPage: () => void
+  prevPage: () => void
+}
+
+const PaginatedStage = ({
+  pagination,
+  children,
+}: {
+  pagination: PaginationResult
+  children: React.ReactNode
+}) => (
+  <StageWrapper>
+    <StageFrame>{children}</StageFrame>
+    <PipPagination
+      totalPageCount={pagination.totalPageCount}
+      currentPage={pagination.currentPage}
+      nextPage={pagination.nextPage}
+      prevPage={pagination.prevPage}
+    />
+  </StageWrapper>
+)
+
 const StageWrapper = styled('div', {
  base: {
    display: 'flex',
@@ -1,12 +1,19 @@
 import { useTranslation } from 'react-i18next'
 import { styled } from '@/styled-system/jsx'
+import { useLocalParticipant } from '@livekit/components-react'

 export const StageFrame = ({ children }: { children: React.ReactNode }) => {
  const { t } = useTranslation('rooms', {
    keyPrefix: 'pictureInPicture',
  })
+  const { localParticipant } = useLocalParticipant()
+
  return (
-    <Container role="region" aria-label={t('stage')} {...{ inert: '' }}>
+    <Container
+      role="region"
+      aria-label={t('stage')}
+      {...(!localParticipant.isScreenShareEnabled ? { inert: '' } : {})}
+    >
      {children}
    </Container>
  )
@@ -18,8 +25,8 @@ const Container = styled('div', {
    flex: 1,
    minWidth: 0,
    minHeight: 0,
-    marginLeft: '0.5rem',
-    marginRight: '0.5rem',
+    padding: '0.5rem',
+    boxSizing: 'border-box',
    borderRadius: '4px',
    overflow: 'hidden',
  },
@@ -12,7 +12,7 @@ import { useSize } from '@/features/rooms/livekit/hooks/useResizeObserver'
 import { RiArrowLeftSLine, RiArrowRightSLine } from '@remixicon/react'
 import { Button } from '@/primitives'
 import { ReactionsKeyboardNavigation } from './ReactionsKeyboardNavigation'
-import { FocusScope } from '@react-aria/focus'
+import { FocusScope } from 'react-aria'

 import { CONTROL_BAR_REGION_ID } from '@/features/layout/components/ControlBarRegion'
 import { REACTIONS_TOGGLE_ID } from '../ReactionsToggle'
@@ -1,5 +1,5 @@
 import { useTranslation } from 'react-i18next'
-import { useFocusManager } from '@react-aria/focus'
+import { useFocusManager } from 'react-aria'
 import { getFirstControlBarFocusable } from '@/utils/dom'
 import { REACTIONS_TOOLBAR_ID } from '../../constants'
 import { useReactionsToolbar } from '../../hooks/useReactionsToolbar'
@@ -57,7 +57,9 @@ const RecordingDownload = () => {
  const isSaved =
    data?.status === RecordingStatus.Saved ||
    data?.status === RecordingStatus.NotificationSucceed ||
-    data?.status === RecordingStatus.FailedToStop
+    data?.status === RecordingStatus.FailedToStop ||
+    data?.status === RecordingStatus.ExternalProcessFailed ||
+    data?.status === RecordingStatus.ExternalProcessSuccessful

  const pageTitle = useMemo(() => {
    if (isError) return `${APP_TITLE} - ${t('error.title')}`
@@ -91,6 +93,8 @@ const RecordingDownload = () => {
  }

  if (
+    data.status !== RecordingStatus.ExternalProcessFailed &&
+    data.status !== RecordingStatus.ExternalProcessSuccessful &&
    data.status !== RecordingStatus.Saved &&
    data.status !== RecordingStatus.NotificationSucceed &&
    data.status !== RecordingStatus.FailedToStop
@@ -12,4 +12,6 @@ export enum RecordingStatus {
  FailedToStart = 'failedToStart',
  FailedToStop = 'failedToStop',
  NotificationSucceed = 'notification_succeeded',
+  ExternalProcessSuccessful = 'external_process_successful',
+  ExternalProcessFailed = 'external_process_failed',
 }
@@ -22,7 +22,7 @@ export type ApiRoom = {
  id: string
  name: string
  slug: string
-  pin_code: string
+  pin_code?: string
  is_administrable: boolean
  access_level: ApiAccessLevel
  livekit?: ApiLiveKit
@@ -36,6 +36,7 @@ import { PictureInPictureConference } from '@/features/pip/components/PictureInP
 import { notifyAutoMutedOnJoin } from '@/features/notifications/utils'
 import { useSnapshot } from 'valtio'
 import { userPreferencesStore } from '@/stores/userPreferences'
+import { userStore } from '@/stores/user'

 export const Conference = ({
  roomId,
@@ -53,6 +54,8 @@ export const Conference = ({
    userChoices: LocalUserChoices
  }

+  const { username } = useSnapshot(userStore)
+
  useEffect(() => {
    posthog.capture('visit-room', { slug: roomId })
  }, [roomId, posthog])
@@ -83,10 +86,10 @@ export const Conference = ({
    queryFn: () =>
      fetchRoom({
        roomId: roomId as string,
-        username: userConfig.username,
+        username: username,
      }).catch((error) => {
        if (error.statusCode == '404') {
-          createRoom({ slug: roomId, username: userConfig.username })
+          createRoom({ slug: roomId, username })
        }
      }),
    retry: false,
@@ -42,14 +42,17 @@ import {
  saveAudioInputDeviceId,
  saveAudioInputEnabled,
  saveAudioOutputDeviceId,
-  saveUsername,
  saveVideoInputDeviceId,
  saveVideoInputEnabled,
  userChoicesStore,
 } from '@/stores/userChoices'

+import { saveUsername, userStore } from '@/stores/user'
+
 import { useCannotUseDevice } from '../livekit/hooks/useCannotUseDevice'
 import { useSnapshot } from 'valtio'
+import { useUser } from '@/features/auth/api/useUser'
+import { useConfig } from '@/api/useConfig'

 const onError = (e: Error) => console.error('ERROR', e)

@@ -114,6 +117,9 @@ export const Join = ({
 }) => {
  const { t } = useTranslation('rooms', { keyPrefix: 'join' })

+  const { data: configData } = useConfig()
+  const { isLoggedIn, user } = useUser()
+
  const {
    audioEnabled,
    videoEnabled,
@@ -121,9 +127,10 @@ export const Join = ({
    audioOutputDeviceId,
    videoDeviceId,
    processorConfig,
-    username,
  } = useSnapshot(userChoicesStore)

+  const { username } = useSnapshot(userStore)
+
  const initialUserChoices = useRef<LocalUserChoices | null>(null)

  if (initialUserChoices.current === null) {
@@ -134,7 +141,6 @@ export const Join = ({
      audioOutputDeviceId,
      videoDeviceId,
      processorConfig,
-      username,
    }
  }

@@ -448,20 +454,23 @@ export const Join = ({
              <H lvl={1} margin="sm" centered>
                {t('heading')}
              </H>
-              <Field
-                type="text"
-                onChange={saveUsername}
-                label={t('usernameLabel')}
-                id="input-name"
-                defaultValue={username}
-                validate={(value) => !value && t('errors.usernameEmpty')}
-                wrapperProps={{
-                  noMargin: true,
-                  fullWidth: true,
-                }}
-                autoComplete="name"
-                maxLength={50}
-              />
+              {(!isLoggedIn ||
+                configData?.authenticated_users_can_edit_display_name) && (
+                <Field
+                  type="text"
+                  onChange={saveUsername}
+                  label={t('usernameLabel')}
+                  id="input-name"
+                  defaultValue={username || user?.full_name}
+                  validate={(value) => !value && t('errors.usernameEmpty')}
+                  wrapperProps={{
+                    noMargin: true,
+                    fullWidth: true,
+                  }}
+                  autoComplete="name"
+                  maxLength={50}
+                />
+              )}
            </VStack>
          </Form>
        )
@@ -1,6 +1,6 @@
 import { css } from '@/styled-system/css'
 import { Button, Text } from '@/primitives'
-import { useMemo, useRef } from 'react'
+import { useCallback, useMemo, useRef } from 'react'
 import { screenSharePreferenceStore } from '@/stores/screenSharePreferences'
 import { useSnapshot } from 'valtio'
 import { useLocalParticipant } from '@livekit/components-react'
@@ -61,9 +61,19 @@ export const FullScreenShareWarning = ({
    await localParticipant.setScreenShareEnabled(false, {}, {})
  }

-  const handleDismissWarning = () => {
+  const handleDismissWarning = useCallback(() => {
    screenSharePreferenceStore.enabled = false
-  }
+  }, [])
+
+  const handleKeyDown = useCallback(
+    (e: React.KeyboardEvent) => {
+      if (e.key === 'Escape') {
+        e.stopPropagation()
+        handleDismissWarning()
+      }
+    },
+    [handleDismissWarning]
+  )

  if (!shouldShowWarning) return null

@@ -98,6 +108,7 @@ export const FullScreenShareWarning = ({
            })}
          >
            <Text
+              role="alert"
              style={{
                color: 'white',
                flexBasis: '55%',
@@ -117,11 +128,14 @@ export const FullScreenShareWarning = ({
              })}
            >
              <Button
+                // eslint-disable-next-line jsx-a11y/no-autofocus
+                autoFocus
                variant="tertiary"
                size="sm"
                style={{
                  height: 'fit-content',
                }}
+                onKeyDown={handleKeyDown}
                onPress={async () => {
                  await handleStopScreenShare()
                }}
@@ -134,6 +148,7 @@ export const FullScreenShareWarning = ({
                style={{
                  height: 'fit-content',
                }}
+                onKeyDown={handleKeyDown}
                onPress={() => handleDismissWarning()}
              >
                {t('ignore')}
@@ -2,6 +2,7 @@ import type { Participant } from 'livekit-client'
 import { styled } from '@/styled-system/jsx'
 import { Avatar } from '@/components/Avatar'
 import { useIsSpeaking } from '@livekit/components-react'
+import { getParticipantBackgroundGradient } from '@/features/rooms/utils/getParticipantBackgroundGradient'
 import { getParticipantColor } from '@/features/rooms/utils/getParticipantColor'
 import { useSize } from '@/features/rooms/livekit/hooks/useResizeObserver'
 import { useMemo, useRef } from 'react'
@@ -10,7 +11,6 @@ const StyledParticipantPlaceHolder = styled('div', {
  base: {
    width: '100%',
    height: '100%',
-    backgroundColor: 'primaryDark.100',
    display: 'flex',
    justifyContent: 'center',
    alignItems: 'center',
@@ -26,6 +26,10 @@ export const ParticipantPlaceholder = ({
 }: ParticipantPlaceholderProps) => {
  const isSpeaking = useIsSpeaking(participant)
  const participantColor = getParticipantColor(participant)
+  const backgroundGradient = useMemo(
+    () => getParticipantBackgroundGradient(participantColor),
+    [participantColor]
+  )

  const placeholderEl = useRef<HTMLDivElement>(null)
  const { width, height } = useSize(placeholderEl)
@@ -39,7 +43,13 @@ export const ParticipantPlaceholder = ({
  const initialSize = useMemo(() => Math.round(avatarSize * 0.3), [avatarSize])

  return (
-    <StyledParticipantPlaceHolder ref={placeholderEl}>
+    <StyledParticipantPlaceHolder
+      ref={placeholderEl}
+      style={{
+        backgroundColor: participantColor,
+        backgroundImage: backgroundGradient,
+      }}
+    >
      <div
        style={{
          borderRadius: '50%',
@@ -52,6 +52,7 @@ export function TrackRefContextIfNeeded(

 interface ParticipantTileExtendedProps extends ParticipantTileProps {
  disableMetadata?: boolean
+  disableTileControls?: boolean
 }

 export const ParticipantTile: (
@@ -66,6 +67,7 @@ export const ParticipantTile: (
    onParticipantClick,
    disableSpeakingIndicator,
    disableMetadata,
+    disableTileControls,
    ...htmlProps
  }: ParticipantTileExtendedProps,
  ref
@@ -231,7 +233,7 @@ export const ParticipantTile: (
              )}
            </>
          )}
-          {!disableMetadata && (
+          {!disableMetadata && !disableTileControls && (
            <ParticipantTileFocus
              trackRef={trackReference}
              hasKeyboardFocus={hasKeyboardFocus}
@@ -6,8 +6,8 @@ import { Button, Div } from '@/primitives'
 import { RiArrowLeftLine, RiCloseLine } from '@remixicon/react'
 import { useTranslation } from 'react-i18next'
 import { ParticipantsList } from './controls/Participants/ParticipantsList'
-import { useSidePanel } from '../hooks/useSidePanel'
-import { ReactNode } from 'react'
+import { PanelId, useSidePanel } from '../hooks/useSidePanel'
+import React, { ReactNode, useCallback, useRef } from 'react'
 import { Chat } from '../prefabs/Chat'
 import { Effects } from './effects/Effects'
 import { Admin } from './Admin'
@@ -15,6 +15,7 @@ import { Tools } from './Tools'
 import { Info } from './Info'
 import { HStack } from '@/styled-system/jsx'
 import { useReactionsToolbar } from '@/features/reactions/hooks/useReactionsToolbar'
+import { useRestoreFocus } from '@/hooks/useRestoreFocus'

 type StyledSidePanelProps = {
  title: string
@@ -29,103 +30,115 @@ type StyledSidePanelProps = {
  isReactionToolbarOpen?: boolean
 }

-const StyledSidePanel = ({
-  title,
-  ariaLabel,
-  children,
-  onClose,
-  isClosed,
-  isReactionToolbarOpen,
-  closeButtonTooltip,
-  isSubmenu = false,
-  onBack,
-  backButtonLabel,
-}: StyledSidePanelProps) => (
-  <aside
-    className={css({
-      borderWidth: '1px',
-      borderStyle: 'solid',
-      borderColor: 'box.border',
-      backgroundColor: 'box.bg',
-      color: 'box.text',
-      borderRadius: 8,
-      flex: 1,
-      position: 'absolute',
-      overflow: 'hidden',
-      display: 'flex',
-      flexDirection: 'column',
-      margin: 'var(--sizes-room-side-panel-margin)',
-      marginLeft: 0,
-      marginBottom: 0,
-      padding: 0,
-      gap: 0,
-      right: 0,
-      top: 0,
-      width: 'var(--sizes-room-side-panel)',
-      transition: '.5s cubic-bezier(.4,0,.2,1) 5ms',
-    })}
-    style={{
-      transform: isClosed
-        ? 'translateX(calc(var(--sizes-room-side-panel) + var(--sizes-room-side-panel-margin)))'
-        : 'none',
-      bottom: isReactionToolbarOpen
-        ? 'calc( var(--sizes-room-control-bar) + var(--sizes-room-reaction-toolbar-height) + calc(var(--lk-grid-gap) / 2))'
-        : 'var(--sizes-room-control-bar)',
-    }}
-    aria-hidden={isClosed}
-    aria-label={ariaLabel}
-  >
-    <HStack alignItems="center">
-      {isSubmenu && (
-        <Button
-          variant="secondaryText"
-          size="sm"
-          square
-          className={css({ marginRight: '0.5rem', marginLeft: '1rem' })}
-          aria-label={backButtonLabel}
-          onPress={onBack}
+const StyledSidePanel = React.forwardRef<HTMLElement, StyledSidePanelProps>(
+  (
+    {
+      title,
+      ariaLabel,
+      children,
+      onClose,
+      isClosed,
+      isReactionToolbarOpen,
+      closeButtonTooltip,
+      isSubmenu = false,
+      onBack,
+      backButtonLabel,
+    },
+    ref
+  ) => (
+    <aside
+      ref={ref}
+      tabIndex={-1}
+      className={css({
+        borderWidth: '1px',
+        borderStyle: 'solid',
+        borderColor: 'box.border',
+        backgroundColor: 'box.bg',
+        color: 'box.text',
+        borderRadius: 8,
+        flex: 1,
+        position: 'absolute',
+        overflow: 'hidden',
+        display: 'flex',
+        flexDirection: 'column',
+        margin: 'var(--sizes-room-side-panel-margin)',
+        marginLeft: 0,
+        marginBottom: 0,
+        padding: 0,
+        gap: 0,
+        right: 0,
+        top: 0,
+        width: 'var(--sizes-room-side-panel)',
+        transition: '.5s cubic-bezier(.4,0,.2,1) 5ms',
+        '&:focus': {
+          outline: 'none',
+        },
+      })}
+      style={{
+        transform: isClosed
+          ? 'translateX(calc(var(--sizes-room-side-panel) + var(--sizes-room-side-panel-margin)))'
+          : 'none',
+        bottom: isReactionToolbarOpen
+          ? 'calc( var(--sizes-room-control-bar) + var(--sizes-room-reaction-toolbar-height) + calc(var(--lk-grid-gap) / 2))'
+          : 'var(--sizes-room-control-bar)',
+      }}
+      aria-hidden={isClosed}
+      aria-label={ariaLabel}
+    >
+      <HStack alignItems="center">
+        {isSubmenu && (
+          <Button
+            variant="secondaryText"
+            size="sm"
+            square
+            className={css({ marginRight: '0.5rem', marginLeft: '1rem' })}
+            aria-label={backButtonLabel}
+            onPress={onBack}
+          >
+            <RiArrowLeftLine size={20} aria-hidden="true" />
+          </Button>
+        )}
+        <Heading
+          slot="title"
+          level={1}
+          className={text({ variant: 'h2' })}
+          style={{
+            paddingLeft: isSubmenu ? 0 : '1.5rem',
+            paddingTop: '1rem',
+            display: isClosed ? 'none' : 'flex',
+            justifyContent: 'start',
+            alignItems: 'center',
+          }}
        >
-          <RiArrowLeftLine size={20} aria-hidden="true" />
-        </Button>
-      )}
-      <Heading
-        slot="title"
-        level={1}
-        className={text({ variant: 'h2' })}
+          {title}
+        </Heading>
+      </HStack>
+      <Div
+        position="absolute"
+        top="5"
+        right="5"
        style={{
-          paddingLeft: isSubmenu ? 0 : '1.5rem',
-          paddingTop: '1rem',
-          display: isClosed ? 'none' : 'flex',
-          justifyContent: 'start',
-          alignItems: 'center',
+          display: isClosed ? 'none' : undefined,
        }}
      >
-        {title}
-      </Heading>
-    </HStack>
-    <Div
-      position="absolute"
-      top="5"
-      right="5"
-      style={{
-        display: isClosed ? 'none' : undefined,
-      }}
-    >
-      <Button
-        invisible
-        variant="tertiaryText"
-        size="xs"
-        onPress={onClose}
-        aria-label={closeButtonTooltip}
-        tooltip={closeButtonTooltip}
-      >
-        <RiCloseLine />
-      </Button>
-    </Div>
-    {children}
-  </aside>
+        <Button
+          invisible
+          variant="tertiaryText"
+          size="xs"
+          onPress={onClose}
+          aria-label={closeButtonTooltip}
+          tooltip={closeButtonTooltip}
+        >
+          <RiCloseLine />
+        </Button>
+      </Div>
+      {children}
+    </aside>
+  )
 )

+StyledSidePanel.displayName = 'StyledSidePanel'
+
 type PanelProps = {
  isOpen: boolean
  children: React.ReactNode
@@ -162,8 +175,28 @@ export const SidePanel = () => {

  const { isOpen: isReactionToolbarOpen } = useReactionsToolbar()

+  const asideRef = useRef<HTMLElement>(null)
+
+  const focusAside = useCallback(() => {
+    requestAnimationFrame(() => {
+      asideRef.current?.focus({ preventScroll: true })
+    })
+  }, [])
+
+  const handlePanelOpened = useCallback(() => {
+    if (activePanelId === PanelId.CHAT) return
+    focusAside()
+  }, [activePanelId, focusAside])
+
+  useRestoreFocus(isSidePanelOpen, {
+    onOpened: handlePanelOpened,
+    preventScroll: true,
+    activeKey: activePanelId,
+  })
+
  return (
    <StyledSidePanel
+      ref={asideRef}
      title={title}
      ariaLabel={t('ariaLabel', { title })}
      onClose={() => {
@@ -95,8 +95,13 @@ const ToolButton = ({

 export const Tools = () => {
  const { data } = useConfig()
-  const { openTranscript, openScreenRecording, activeSubPanelId, isToolsOpen } =
-    useSidePanel()
+  const {
+    openTranscript,
+    openScreenRecording,
+    activeSubPanelId,
+    isToolsOpen,
+    isSidePanelOpen,
+  } = useSidePanel()
  const { t } = useTranslation('rooms', { keyPrefix: 'moreTools' })

  // Restore focus to the element that opened the Tools panel
@@ -113,6 +118,7 @@ export const Tools = () => {
    },
    restoreFocusRaf: true,
    preventScroll: true,
+    shouldRestoreOnClose: () => !isSidePanelOpen,
  })

  const isTranscriptEnabled = useIsRecordingModeEnabled(
@@ -13,8 +13,10 @@ import {
 } from './TimerWorker'
 import {
  BackgroundProcessorInterface,
+  SELFIE_SEGMENTER_MODEL_PATH,
  type ProcessorConfig,
  type ProcessorType,
+  MEDIAPIPE_PATH_WASM,
 } from '.'

 const PROCESSING_WIDTH = 256
@@ -153,13 +155,10 @@ export class BackgroundCustomProcessor implements BackgroundProcessorInterface {
  }

  async initSegmenter() {
-    const vision = await FilesetResolver.forVisionTasks(
-      'https://cdn.jsdelivr.net/npm/@mediapipe/tasks-vision/wasm'
-    )
+    const vision = await FilesetResolver.forVisionTasks(MEDIAPIPE_PATH_WASM)
    this.imageSegmenter = await ImageSegmenter.createFromOptions(vision, {
      baseOptions: {
-        modelAssetPath:
-          'https://storage.googleapis.com/mediapipe-models/image_segmenter/selfie_segmenter_landscape/float16/latest/selfie_segmenter_landscape.tflite',
+        modelAssetPath: SELFIE_SEGMENTER_MODEL_PATH,
        delegate: 'CPU', // Use CPU for Firefox.
      },
      runningMode: 'VIDEO',
@@ -11,7 +11,11 @@ import {
  TIMEOUT_TICK,
  timerWorkerScript,
 } from './TimerWorker'
-import { ProcessorType } from '.'
+import {
+  FACE_LANDMARKS_MODEL_PATH,
+  ProcessorType,
+  MEDIAPIPE_PATH_WASM,
+} from '.'

 const PROCESSING_WIDTH = 256 * 3
 const PROCESSING_HEIGHT = 144 * 3
@@ -128,13 +132,10 @@ export class FaceLandmarksProcessor implements TrackProcessor<Track.Kind> {
  }

  async initFaceLandmarker() {
-    const vision = await FilesetResolver.forVisionTasks(
-      'https://cdn.jsdelivr.net/npm/@mediapipe/tasks-vision/wasm'
-    )
+    const vision = await FilesetResolver.forVisionTasks(MEDIAPIPE_PATH_WASM)
    this.faceLandmarker = await FaceLandmarker.createFromOptions(vision, {
      baseOptions: {
-        modelAssetPath:
-          'https://storage.googleapis.com/mediapipe-models/face_landmarker/face_landmarker/float16/latest/face_landmarker.task',
+        modelAssetPath: FACE_LANDMARKS_MODEL_PATH,
        delegate: 'GPU',
      },
      runningMode: 'VIDEO',
@@ -1,13 +1,14 @@
 import type { ProcessorOptions, Track } from 'livekit-client'
 import {
-  BackgroundBlur,
  ProcessorWrapper,
-  VirtualBackground,
+  BackgroundProcessor,
 } from '@livekit/track-processors'
 import {
  type ProcessorConfig,
  BackgroundProcessorInterface,
  ProcessorType,
+  MEDIAPIPE_PATH_WASM,
+  SELFIE_SEGMENTER_MODEL_PATH,
 } from '.'

 export class UnifiedBackgroundTrackProcessor implements BackgroundProcessorInterface {
@@ -20,10 +21,24 @@ export class UnifiedBackgroundTrackProcessor implements BackgroundProcessorInter

    if (opts.type === 'virtual') {
      this.processorType = ProcessorType.VIRTUAL
-      this.processor = VirtualBackground(opts.imagePath)
+      this.processor = BackgroundProcessor({
+        mode: 'virtual-background',
+        imagePath: opts.imagePath,
+        assetPaths: {
+          tasksVisionFileSet: MEDIAPIPE_PATH_WASM,
+          modelAssetPath: SELFIE_SEGMENTER_MODEL_PATH,
+        },
+      })
    } else if (opts.type === 'blur') {
      this.processorType = ProcessorType.BLUR
-      this.processor = BackgroundBlur(opts.blurRadius)
+      this.processor = BackgroundProcessor({
+        mode: 'background-blur',
+        blurRadius: opts.blurRadius,
+        assetPaths: {
+          tasksVisionFileSet: MEDIAPIPE_PATH_WASM,
+          modelAssetPath: SELFIE_SEGMENTER_MODEL_PATH,
+        },
+      })
    } else {
      throw new Error(
        'Must provide either imagePath for virtual background or blurRadius for blur'
@@ -4,6 +4,14 @@ import { BackgroundCustomProcessor } from './BackgroundCustomProcessor'
 import { UnifiedBackgroundTrackProcessor } from './UnifiedBackgroundTrackProcessor'
 import { FaceLandmarksOptions } from './FaceLandmarksProcessor'

+export const SELFIE_SEGMENTER_MODEL_PATH =
+  '/assets/mediapipe/models/selfie_segmenter_landscape.tflite'
+
+export const FACE_LANDMARKS_MODEL_PATH =
+  '/assets/mediapipe/models/face_landmarker.task'
+
+export const MEDIAPIPE_PATH_WASM = '/assets/mediapipe/wasm'
+
 export enum ProcessorType {
  BLUR = 'blur',
  VIRTUAL = 'virtual',
@@ -1,23 +1,20 @@
 import { Button } from '@/primitives'
 import { useTranslation } from 'react-i18next'
 import type { Participant } from 'livekit-client'
-import { useIsAdminOrOwner } from '@/features/rooms/livekit/hooks/useIsAdminOrOwner'
 import { useMuteParticipants } from '@/features/rooms/api/muteParticipants'
 import { RiMicOffLine } from '@remixicon/react'
 import { css } from '@/styled-system/css'
+import { AdminOrOwnerOnly } from '@/features/rooms/components/AdminOrOwnerOnly'

 type MuteEveryoneButtonProps = {
  participants: Array<Participant>
 }

-export const MuteEveryoneButton = ({
-  participants,
-}: MuteEveryoneButtonProps) => {
+const MuteEveryoneButtonInner = ({ participants }: MuteEveryoneButtonProps) => {
  const { muteParticipants } = useMuteParticipants()
  const { t } = useTranslation('rooms')

-  const isAdminOrOwner = useIsAdminOrOwner()
-  if (!isAdminOrOwner || !participants.length) return null
+  if (!participants.length) return null

  return (
    <Button
@@ -36,3 +33,13 @@ export const MuteEveryoneButton = ({
    </Button>
  )
 }
+
+export const MuteEveryoneButton = ({
+  participants,
+}: MuteEveryoneButtonProps) => {
+  return (
+    <AdminOrOwnerOnly>
+      <MuteEveryoneButtonInner participants={participants} />
+    </AdminOrOwnerOnly>
+  )
+}
@@ -37,7 +37,7 @@ export function Chat({ ...props }: ChatProps) {
  const room = useRoomContext()
  const { send, chatMessages, isSending } = useChat()

-  const { isChatOpen } = useSidePanel()
+  const { isChatOpen, isSidePanelOpen } = useSidePanel()
  const chatSnap = useSnapshot(chatStore)

  // Keep track of the element that opened the chat so we can restore focus
@@ -51,6 +51,7 @@ export function Chat({ ...props }: ChatProps) {
      })
    },
    preventScroll: true,
+    shouldRestoreOnClose: () => !isSidePanelOpen,
  })

  // Use useParticipants hook to trigger a re-render when the participant list changes.
@@ -0,0 +1,12 @@
+/**
+ * Builds a radial gradient from the participant's avatar color:
+ * brighter in the center (where the avatar sits), darker at the edges.
+ * Mixed in oklch so the color stays vivid as it darkens instead of greying out.
+ */
+export const getParticipantBackgroundGradient = (color: string): string =>
+  `radial-gradient(circle at 50% 45%,
+    color-mix(in oklch, ${color} 82%, white) 0%,
+    color-mix(in oklch, ${color} 90%, white) 8%,
+    ${color} 35%,
+    color-mix(in oklch, ${color} 85%, black) 65%,
+    color-mix(in oklch, ${color} 65%, black) 100%)`
--- a/Show More
+++ b/Show More