wip

✅(transcription) fix broken speaker assignment tests
Fix broken speaker assignement tests following #1522.
2026-07-27 04:09:26 +00:00 · 2026-07-22 18:30:49 +02:00 · 2026-07-22 14:23:10 +02:00 · 2026-07-21 19:00:04 +02:00 · 2026-07-21 18:41:15 +02:00 · 2026-07-21 18:34:52 +02:00
118 changed files with 6988 additions and 3856 deletions
@@ -82,7 +82,7 @@ jobs:
      - name: Install Node.js
        uses: actions/setup-node@v6
        with:
-          node-version: "18"
+          node-version: "22"

      - name: Restore the mail templates
        uses: actions/cache@v5
@@ -305,7 +305,6 @@ jobs:
        working-directory: src/summary

    env:
-      V1_TENANT_ID: 'test-tenant'
      AUTHORIZED_TENANTS: '[{"id": "test-tenant", "api_key": "test-api-token", "webhook_url": "https://example.com/webhook", "webhook_api_key": "test-webhook-api-key"}]'
      AWS_STORAGE_BUCKET_NAME: "http://meet-media-storage"
      AWS_S3_ENDPOINT_URL: "minio:9000"
@@ -8,9 +8,71 @@ and this project adheres to

 ## [Unreleased]

+## Fixed
+
+- 🐛(transcription) fix silent bug in speaker assignment
+
+### Changed
+
+- ⬆️(frontend) upgrade @mediapipe/tasks-vision from 0.10.14 to 0.10.35
+- ⬆️(frontend) upgrade i18next from 26.3.1 to 26.3.2
+- ⬆️(frontend) upgrade posthog-js from 1.391.2 to 1.395.0
+- ⬆️(frontend) upgrade @tanstack/react-query from 5.101.0 to 5.101.1
+- ⬆️(frontend) upgrade livekit-client from 2.19.2 to 2.20.0
+
+## [1.24.0] - 2026-07-21
+
+### Added
+
+- ✨(backend) allow searching the recording admin table by owner email
+- ✨(frontend) add participant color gradient when camera is off #1490
+- ✨(all) allow forcing SSO display name for authenticated users
+- ➕(frontend) install vite-plugin-static-copy for MediaPipe WASM assets
+- ✨(addon) show add-in tools when creating meetings in shared calendars
+
+### Changed
+
+- 🗑️(settings) deprecate SUMMARY_SERVICE_VERSION=1
+- ⬆️(mail) update mjml to v5 and @html-to/text-cli
+- 🚸(frontend) initialize the join input name with the persisted full name
+- ♻️(frontend) refactor background processors to use the new API
+- ♻️(frontend) inline model weights to avoid loading them from remote
+- ♻️(frontend) inline MediaPipe WASM modules to avoid loading from remote
+- ⬆️(frontend) upgrade posthog-js from 1.387.0 to 1.391.2
+- ⬆️(frontend) upgrade react-stately from 3.47.0 to 3.48.0
+- ⬆️(frontend) upgrade react-aria from 3.49.0 to 3.50.0
+- ⬆️(frontend) upgrade react-aria-components from 1.18.0 to 1.19.0
+
+### Fixed
+
+- 🩹(backend) identify externally provisioned users to PostHog
+- 🐛(backend) fix info panel crash for unregistered rooms
+- ♿️(frontend) focus side panel container on open #1452
+- 🐛(summary) whisper call error handling
+
+## [1.23.0] - 2026-07-08
+
+### Added
+
+- ✨(backend) extend analytics module to support feature flags
+- ✨(backend) implement feature flags in Posthog analytics backend
+- ✨(agents) report errors to Sentry for all LiveKit agents
+
 ### Changed

 - ⬆️(agents) upgrade to python 3.14 slim
+- ⬆️(dependencies) update python dependencies
+- 💥(summary) remove v1 related code #1362
+- ✨(meet) use compatible with summary v2 #1362
+- ♻️(backend) refactor analytics backend from Protocol to abstract class
+- 🔥(summary) remove call to summary enabled feature flag
+- ♻️(frontend) wrap MuteEveryoneButton with AdminOrOwnerOnly
+- ⬆️(frontend) upgrade livekit-client from 2.19.0 to 2.19.2
+- ⬆️(frontend) upgrade posthog-js from 1.386.5 to 1.387.0
+- ⬆️(frontend) upgrade @tanstack/react-query from 5.100.14 to 5.101.0
+- ⬆️(frontend) update the frontend build image to Node 22
+- 🔒️(frontend) update docker image to nginx-unprivileged:1.30.3-alpine3.23
+- ✨(summary) more precise analytics events

 ### Fixed

@@ -30,6 +92,7 @@ and this project adheres to
 - ✨(backend) add fallback to save recordings without S3/MinIO webhooks
 - 🩹(frontend) enable screen share button in PiP #1458
 - 🐛(backend) support unencoded S3 notification object keys #1455
+- ✨(frontend) prioritize screen share in picture-in-picture layout #1467

 ### Changed

@@ -37,7 +37,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
  uv sync --locked --no-dev

 # ---- mails ----
-FROM node:20 AS mail-builder
+FROM node:22 AS mail-builder

 COPY ./src/mail /mail/app

@@ -15,3 +15,15 @@ the following command inside your docker container:
 (Note : in your development environment, you can `make migrate`.)

 ## [Unreleased]
+
+## v1.23.0
+
+As part of the 1.23.0 release, the legacy `api/v1` implementation has been removed from the _experimental_ Summary service and Meet has been migrated to the new `api/v2`.
+
+**To avoid a breaking change, the Meet backend continues to use the Summary service's v1-compatible API format by default (`SUMMARY_SERVICE_VERSION` setting defaults to `1`).**
+
+If you are deploying both Meet and Summary from this repository, you must configure the Meet backend to use the v2 API by setting the following environment variable `SUMMARY_SERVICE_VERSION=2`.
+
+If you are upgrading only the Meet deployment while keeping an older Summary v1 compatible deployment, no action is required, as the v1-compatible API remains the default.
+
+Note that we plan on removing the legacy `v1` summary compatibility in a future major version. If you have your own implementation for the summary service, we recommend updating its API contract and setting `SUMMARY_SERVICE_VERSION=2`.
@@ -113,6 +113,12 @@ update_python_version "summary"
 # Update agents pyproject.toml
 update_python_version "agents"

+# Run uv lock in agents
+print_info "Running uv lock in agents..."
+cd "src/agents"
+uv lock
+cd -
+
 # Update CHANGELOG
 print_info "Updating CHANGELOG..."

@@ -158,6 +164,7 @@ echo "      - src/backend/pyproject.toml"
 echo "      - src/backend/uv.lock"
 echo "      - src/summary/pyproject.toml"
 echo "      - src/agents/pyproject.toml"
+echo "      - src/agents/uv.lock"
 echo "      - CHANGELOG.md"
 echo ""
 print_warning "Next steps:"
@@ -301,7 +301,7 @@ services:
      context: ./src/summary
      dockerfile: Dockerfile
      target: production
-    command: celery -A summary.core.celery_worker worker --pool=solo --loglevel=debug -Q transcribe-queue
+    command: celery -A summary.core.celery_worker worker --pool=solo --loglevel=debug -Q transcribe-queue-v2
    env_file:
      - env.d/development/summary
    volumes:
@@ -321,7 +321,7 @@ services:
      context: ./src/summary
      dockerfile: Dockerfile
      target: production
-    command: celery -A summary.core.celery_worker worker --pool=solo --loglevel=debug -Q summarize-queue
+    command: celery -A summary.core.celery_worker worker --pool=solo --loglevel=debug -Q summarize-queue-v2
    env_file:
      - env.d/development/summary
    volumes:
@@ -1,5 +1,5 @@
 # ---- Front-end image ----
-FROM node:20-alpine AS frontend-deps
+FROM node:22-alpine AS frontend-deps

 WORKDIR /home/frontend/

@@ -54,7 +54,7 @@ RUN npx webpack --mode production


 # ---- Front-end image ----
-FROM nginxinc/nginx-unprivileged:alpine3.23 AS frontend-production
+FROM nginxinc/nginx-unprivileged:1.30.3-alpine3.23 AS frontend-production

 USER root

@@ -11,14 +11,14 @@ There are two ways to customize LaSuite Meet:

 ### How to Use

-To use this feature, simply set the `FRONTEND_CSS_URL` environment variable to the URL of your custom CSS file. For example:
+To use this feature, simply set the `FRONTEND_CUSTOM_CSS_URL` environment variable (of the **backend** service) to the URL of your custom CSS file. For example:

 ```javascript
-FRONTEND_CSS_URL=https://example.com/custom-style.css
+FRONTEND_CUSTOM_CSS_URL=https://example.com/custom-style.css
 ```

 > [!TIP]
-> If you serve your CSS file on the same domain as LaSuite Meet, paths are supported, i.e. `FRONTEND_CSS_URL=/custom/style.css` will load `https://your-domain.com/custom/style.css`.
+> If you serve your CSS file on the same domain as LaSuite Meet, paths are supported, i.e. `FRONTEND_CUSTOM_CSS_URL=/custom/style.css` will load `https://your-domain.com/custom/style.css`.

 Setting this variable makes the app load your CSS at runtime, adding a `<link>` to `<head>` so you can override CSS variables and customize the frontend without rebuilding.

@@ -37,7 +37,7 @@ Let's say you want to change the font of our application to a custom font. You c
 }
 ```

-Then, set the `FRONTEND_CSS_URL` environment variable to the URL of your custom CSS file. Once you've done this, our application will load your custom CSS file and apply the styles, changing the default font to the one you specified.
+Then, set the `FRONTEND_CUSTOM_CSS_URL` environment variable to the URL of your custom CSS file. Once you've done this, our application will load your custom CSS file and apply the styles, changing the default font to the one you specified.

 > [!IMPORTANT]
 > You can override any CSS token—semantic or palette. See [panda.config.ts](../src/frontend/panda.config.ts) for all defined semantic tokens.
@@ -65,8 +65,9 @@ ALLOW_UNREGISTERED_ROOMS=False
 RECORDING_ENABLE=True
 RECORDING_STORAGE_EVENT_ENABLE=True
 RECORDING_STORAGE_EVENT_TOKEN=password
-SUMMARY_SERVICE_ENDPOINT=http://app-summary-dev:8000/api/v1/tasks/
+SUMMARY_SERVICE_ENDPOINT=http://app-summary-dev:8000/api/v2/async-jobs/transcribe/
 SUMMARY_SERVICE_API_TOKEN=password
+SUMMARY_SERVICE_WEBHOOK_API_TOKEN=webhook-password
 RECORDING_DOWNLOAD_BASE_URL=http://localhost:3000/recording

 # Recording encoding (LiveKit Egress advanced options).
@@ -9,3 +9,6 @@ DEEPGRAM_API_KEY=

 KYUTAI_STT_BASE_URL=
 KYUTAI_API_KEY=
+
+SENTRY_DSN=
+SENTRY_ENVIRONMENT=
@@ -30,3 +30,4 @@ POSTHOG_ENABLED="False"

 # Transcription
 TRANSCRIPTION_SATISFACTION_FORM_BASE_URL=
+AUTHORIZED_TENANTS='[{"id": "meet","api_key": "password","webhook_url": "https://configure-your-url.com/api/v1.0/recordings/external-process-hook/","webhook_api_key": "webhook-password","allowed_push_to_docs": true}]'
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:mailappor="http://schemas.microsoft.com/office/mailappversionoverrides/1.0" xsi:type="MailApp">
  <Id>a025f0f6-757a-4790-97f3-99c66c4a5795</Id>
-  <Version>0.0.2.0</Version>
+  <Version>1.0.0.0</Version>
  <ProviderName>__APP_NAME__</ProviderName>
  <DefaultLocale>fr-FR</DefaultLocale>
  <DisplayName DefaultValue="__APP_NAME__"/>
@@ -205,5 +205,174 @@
        </bt:String>
      </bt:LongStrings>
    </Resources>
+
+    <!-- ─── V1.1 override: required for shared folder / delegate support ─── -->
+    <VersionOverrides xmlns="http://schemas.microsoft.com/office/mailappversionoverrides/1.1" xsi:type="VersionOverridesV1_1">
+      <Requirements>
+        <bt:Sets DefaultMinVersion="1.8">
+          <bt:Set Name="Mailbox"/>
+        </bt:Sets>
+      </Requirements>
+      <Hosts>
+        <Host xsi:type="MailHost">
+          <DesktopFormFactor>
+            <FunctionFile resid="Commands.Url"/>
+            <SupportsSharedFolders>true</SupportsSharedFolders>
+
+            <!-- ─── Mail: Read ─────────────────────────────────────────── -->
+            <ExtensionPoint xsi:type="MessageReadCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="msgReadGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="msgReadOpenPaneButton">
+                    <Label resid="TaskpaneButton.Label"/>
+                    <Supertip>
+                      <Title resid="TaskpaneButton.Label"/>
+                      <Description resid="TaskpaneButton.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+            <!-- ─── Mail: Compose ─────────────────────────────────────── -->
+            <ExtensionPoint xsi:type="MessageComposeCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="msgComposeGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="msgComposeGenerateLinkButton">
+                    <Label resid="GenerateLink.Label"/>
+                    <Supertip>
+                      <Title resid="GenerateLink.Label"/>
+                      <Description resid="GenerateLink.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ExecuteFunction">
+                      <FunctionName>generateMeetingLinkFromMail</FunctionName>
+                    </Action>
+                  </Control>
+                  <Control xsi:type="Button" id="msgComposeOpenPaneButton">
+                    <Label resid="TaskpaneButton.Label"/>
+                    <Supertip>
+                      <Title resid="TaskpaneButton.Label"/>
+                      <Description resid="TaskpaneButton.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Settings.16x16"/>
+                      <bt:Image size="32" resid="Settings.32x32"/>
+                      <bt:Image size="80" resid="Settings.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+            <!-- ─── Calendar: Compose (New/Edit appointment) ──────────── -->
+            <ExtensionPoint xsi:type="AppointmentOrganizerCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="apptComposeGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="apptGenerateLinkButton">
+                    <Label resid="GenerateLink.Label"/>
+                    <Supertip>
+                      <Title resid="GenerateLink.Label"/>
+                      <Description resid="GenerateLink.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ExecuteFunction">
+                      <FunctionName>generateMeetingLinkFromCalendar</FunctionName>
+                    </Action>
+                  </Control>
+
+                  <Control xsi:type="Button" id="apptOpenSettingsButton">
+                    <Label resid="OpenSettings.Label"/>
+                    <Supertip>
+                      <Title resid="OpenSettings.Label"/>
+                      <Description resid="OpenSettings.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Settings.16x16"/>
+                      <bt:Image size="32" resid="Settings.32x32"/>
+                      <bt:Image size="80" resid="Settings.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+          </DesktopFormFactor>
+        </Host>
+      </Hosts>
+      <Resources>
+        <bt:Images>
+          <bt:Image id="Settings.16x16" DefaultValue="https://localhost:3000/addons/outlook/assets/settings-16.png"/>
+          <bt:Image id="Settings.32x32" DefaultValue="https://localhost:3000/addons/outlook/assets/settings-32.png"/>
+          <bt:Image id="Settings.80x80" DefaultValue="https://localhost:3000/addons/outlook/assets/settings-80.png"/>
+          <bt:Image id="Add.16x16" DefaultValue="https://localhost:3000/addons/outlook/assets/add-16.png"/>
+          <bt:Image id="Add.32x32" DefaultValue="https://localhost:3000/addons/outlook/assets/add-32.png"/>
+          <bt:Image id="Add.80x80" DefaultValue="https://localhost:3000/addons/outlook/assets/add-80.png"/>
+          <bt:Image id="Icon.16x16" DefaultValue="https://localhost:3000/addons/outlook/assets/icon-16.png"/>
+          <bt:Image id="Icon.32x32" DefaultValue="https://localhost:3000/addons/outlook/assets/icon-32.png"/>
+          <bt:Image id="Icon.80x80" DefaultValue="https://localhost:3000/addons/outlook/assets/icon-80.png"/>
+        </bt:Images>
+        <bt:Urls>
+          <bt:Url id="Commands.Url" DefaultValue="https://localhost:3000/addons/outlook/commands.html"/>
+          <bt:Url id="Taskpane.Url" DefaultValue="https://localhost:3000/addons/outlook/taskpane.html"/>
+        </bt:Urls>
+        <bt:ShortStrings>
+          <!-- Default (French) -->
+          <bt:String id="GroupLabel" DefaultValue="__APP_NAME__"/>
+          <bt:String id="GenerateLink.Label" DefaultValue="Ajouter un lien __APP_NAME__">
+            <bt:Override Locale="en-US" Value="Add a __APP_NAME__ link"/>
+            <bt:Override Locale="de-DE" Value="__APP_NAME__-Link hinzufügen"/>
+          </bt:String>
+          <bt:String id="TaskpaneButton.Label" DefaultValue="Ouvrir les paramètres">
+            <bt:Override Locale="en-US" Value="Open settings"/>
+            <bt:Override Locale="de-DE" Value="Einstellungen öffnen"/>
+          </bt:String>
+          <bt:String id="OpenSettings.Label" DefaultValue="Paramètres">
+            <bt:Override Locale="en-US" Value="Settings"/>
+            <bt:Override Locale="de-DE" Value="Einstellungen"/>
+          </bt:String>
+        </bt:ShortStrings>
+        <bt:LongStrings>
+          <bt:String id="GenerateLink.Tooltip" DefaultValue="Génère un lien de réunion __APP_NAME__ et l'insère dans l'événement.">
+            <bt:Override Locale="de-DE" Value="Generiert einen __APP_NAME__-Besprechungslink und fügt ihn in den Termin ein."/>
+            <bt:Override Locale="en-US" Value="Generates a __APP_NAME__ meeting link and inserts it into the item."/>
+          </bt:String>
+          <bt:String id="TaskpaneButton.Tooltip" DefaultValue="Ouvre les paramètres de connexion __APP_NAME__.">
+            <bt:Override Locale="de-DE" Value="Öffnet die __APP_NAME__-Verbindungseinstellungen."/>
+            <bt:Override Locale="en-US" Value="Opens the __APP_NAME__ connection settings."/>
+          </bt:String>
+          <bt:String id="OpenSettings.Tooltip" DefaultValue="Ouvre les paramètres de connexion __APP_NAME__.">
+            <bt:Override Locale="de-DE" Value="Öffnet die __APP_NAME__-Verbindungseinstellungen."/>
+            <bt:Override Locale="en-US" Value="Opens the __APP_NAME__ connection settings."/>
+          </bt:String>
+        </bt:LongStrings>
+      </Resources>
+    </VersionOverrides>
  </VersionOverrides>
 </OfficeApp>
@@ -10,7 +10,7 @@
      "license": "MIT",
      "dependencies": {
        "core-js": "3.49.0",
-        "i18next": "26.3.1",
+        "i18next": "^26.3.2",
        "i18next-browser-languagedetector": "8.2.1",
        "regenerator-runtime": "0.14.1"
      },
@@ -9364,9 +9364,9 @@
      }
    },
    "node_modules/i18next": {
-      "version": "26.3.1",
-      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.3.1.tgz",
-      "integrity": "sha512-txQqd5EULsqEh9OJqRH15aCaOuy/nLJyhw5EHCSKLKJE1aBbb3Zve2+uQIxgWhPm1QqUQoWyQBm2kfmmIrzkcQ==",
+      "version": "26.3.2",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.3.2.tgz",
+      "integrity": "sha512-QQkXAM1sPDHqhxMQuBeHVMUn6mJchF+wdpOoQerciLAFqO3ZYdxO0EUbeEhruyutnNwpUQIITDVzLjwnNL0T1w==",
      "funding": [
        {
          "type": "individual",
@@ -27,7 +27,7 @@
  },
  "dependencies": {
    "core-js": "3.49.0",
-    "i18next": "26.3.1",
+    "i18next": "26.3.2",
    "i18next-browser-languagedetector": "8.2.1",
    "regenerator-runtime": "0.14.1"
  },
@@ -57,8 +57,7 @@
       data-i18n="footer.feedback"
    ></a>
    <div id="footer-right">
-        <span class="version-badge">beta</span>
-        <span class="version-number">0.0.2</span>
+        <span class="version-number">1.0.0</span>
    </div>
 </footer>
 </body>
@@ -32,6 +32,8 @@ from minio import Minio
 from minio.error import S3Error

 from exceptions import MissingConfigError
+from observability import configure_sentry, set_job_context
+from tasks import done_callback

 load_dotenv()

@@ -42,6 +44,7 @@ AGENT_NAME = os.getenv("METADATA_COLLECTOR_AGENT_NAME", "metadata-collector")

 def prewarm(proc: JobProcess):
    """Preload voice activity detection model."""
+    configure_sentry(AGENT_NAME)
    proc.userdata["vad"] = silero.VAD.load()


@@ -174,7 +177,13 @@ class MetadataCollector:
            self.on_chat_message_received(reader, participant_identity)
        )
        self._tasks.add(task)
-        task.add_done_callback(lambda _: self._tasks.remove(task))
+        task.add_done_callback(
+            done_callback(
+                logger,
+                self._tasks,
+                f"process chat stream from {participant_identity}",
+            )
+        )

    def save(self):
        """Serialize collected events and upload as JSON to S3."""
@@ -270,16 +279,18 @@ class MetadataCollector:
        logger.info("Participant disconnected: %s", participant.identity)
        task = asyncio.create_task(self._close_session(session))
        self._tasks.add(task)
-
-        def on_close_done(_):
-            self._tasks.discard(task)
-            logger.info(
-                "VAD session closed for %s (remaining sessions: %d)",
-                participant.identity,
-                len(self._sessions),
+        task.add_done_callback(
+            done_callback(
+                logger,
+                self._tasks,
+                f"close VAD session for {participant.identity}",
+                on_success=lambda _: logger.info(
+                    "VAD session closed for %s (remaining sessions: %d)",
+                    participant.identity,
+                    len(self._sessions),
+                ),
            )
-
-        task.add_done_callback(on_close_done)
+        )

    def on_participant_name_changed(self, participant: rtc.RemoteParticipant):
        """Update stored participant name when it changes."""
@@ -360,6 +371,8 @@ async def handle_job_request(job_req: JobRequest) -> None:
@server.rtc_session(agent_name=AGENT_NAME, on_request=handle_job_request)
 async def entrypoint(ctx: JobContext):
    """Initialize and run the metadata collector."""
+    set_job_context(room=ctx.room.name, job_id=ctx.job.id)
+
    logger.info("Starting metadata agent in room: %s", ctx.room.name)
    recording_id = ctx.job.metadata
    metadata_collector = MetadataCollector(ctx, recording_id)
@@ -377,4 +390,7 @@ async def entrypoint(ctx: JobContext):


 if __name__ == "__main__":
+    # Initialize Sentry for the worker process. Each job runs in its own
+    # (forked) process and re-initializes Sentry via prewarm().
+    configure_sentry(AGENT_NAME)
    cli.run_app(server)
@@ -25,6 +25,9 @@ from livekit.agents import (
 )
 from livekit.plugins import deepgram, silero

+from observability import configure_sentry, set_job_context
+from tasks import done_callback
+
 load_dotenv()

 logger = logging.getLogger("transcriber")
@@ -99,24 +102,29 @@ class MultiUserTranscriber:
        logger.info(f"starting session for {participant.identity}")
        task = asyncio.create_task(self._start_session(participant))
        self._tasks.add(task)
-
-        def on_task_done(task: asyncio.Task):
-            try:
-                self._sessions[participant.identity] = task.result()
-            finally:
-                self._tasks.discard(task)
-
-        task.add_done_callback(on_task_done)
+        task.add_done_callback(
+            done_callback(
+                logger,
+                self._tasks,
+                f"start transcription session for {participant.identity}",
+            )
+        )

    def on_participant_disconnected(self, participant: rtc.RemoteParticipant):
        """Handle participant disconnection by closing transcription session."""
-        if (session := self._sessions.pop(participant.identity)) is None:
+        if (session := self._sessions.pop(participant.identity, None)) is None:
            return

        logger.info(f"closing session for {participant.identity}")
        task = asyncio.create_task(self._close_session(session))
        self._tasks.add(task)
-        task.add_done_callback(lambda _: self._tasks.discard(task))
+        task.add_done_callback(
+            done_callback(
+                logger,
+                self._tasks,
+                f"close transcription session for {participant.identity}",
+            )
+        )

    async def _start_session(self, participant: rtc.RemoteParticipant) -> AgentSession:
        """Create and start transcription session for participant."""
@@ -139,6 +147,7 @@ class MultiUserTranscriber:
                participant_identity=participant.identity,
            )
        )
+        self._sessions[participant.identity] = session
        return session

    async def _close_session(self, sess: AgentSession) -> None:
@@ -149,6 +158,8 @@ class MultiUserTranscriber:

 async def entrypoint(ctx: JobContext):
    """Initialize and run the multi-user transcriber."""
+    set_job_context(room=ctx.room.name, job_id=ctx.job.id)
+
    transcriber = MultiUserTranscriber(ctx)
    transcriber.start()

@@ -193,11 +204,15 @@ async def handle_transcriber_job_request(job_req: JobRequest) -> None:

 def prewarm(proc: JobProcess):
    """Preload voice activity detection model."""
+    configure_sentry(TRANSCRIBER_AGENT_NAME)
    if ENABLE_SILERO_VAD:
        proc.userdata["vad"] = silero.VAD.load()


 if __name__ == "__main__":
+    # Initialize Sentry for the worker process. Each job runs in its own
+    # (forked) process and re-initializes Sentry via prewarm().
+    configure_sentry(TRANSCRIBER_AGENT_NAME)
    cli.run_app(
        WorkerOptions(
            entrypoint_fnc=entrypoint,
@@ -0,0 +1,83 @@
+"""Sentry helpers for the LiveKit agents."""
+
+import logging
+import os
+import tomllib
+from os import path
+
+import sentry_sdk
+from sentry_sdk.integrations.logging import LoggingIntegration
+
+logger = logging.getLogger("observability")
+
+BASE_DIR = path.dirname(path.abspath(__file__))
+
+
+def get_release():
+    """Get the current release of the application.
+
+    By release, we mean the ``version`` declared in ``pyproject.toml``.
+    If the file cannot be read or declares no version, it defaults to "NA".
+    """
+    try:
+        with open(path.join(BASE_DIR, "pyproject.toml"), "rb") as pyproject:
+            return tomllib.load(pyproject)["project"]["version"]
+    except (FileNotFoundError, KeyError, tomllib.TOMLDecodeError):
+        return "NA"  # Default: not available
+
+
+def configure_sentry(agent_name: str) -> None:
+    """Initialize Sentry for the current agent process.
+
+    No-op if ``SENTRY_DSN`` is not configured. Otherwise (re)initializes Sentry
+    unconditionally so the calling process gets its own live transport.
+
+    Must be called once per process: in the worker entrypoint and again in the
+    per-job ``prewarm``/``setup_fnc`` hook, because LiveKit runs each job in a
+    forked process. A forked child inherits the parent's initialized Sentry
+    client but not its background transport thread (threads do not survive
+    ``fork()``), so it must re-init to get a working transport. For that reason,
+    do NOT guard this with ``sentry_sdk.is_initialized()``: the child inherits it
+    as ``True`` and would skip init, silently dropping every event.
+
+    Args:
+        agent_name: Identifier of the agent, attached as a tag to Sentry issues
+    """
+    # Read the DSN at call time so it picks up variables that load_dotenv()
+    # populated after this module was first imported.
+    sentry_dsn = os.getenv("SENTRY_DSN")
+    if not sentry_dsn:
+        logger.debug("SENTRY_DSN not defined for agent '%s'", agent_name)
+        return
+
+    sentry_sdk.init(
+        dsn=sentry_dsn,
+        environment=os.getenv("SENTRY_ENVIRONMENT"),
+        release=get_release(),
+        debug=False,
+        integrations=[
+            # Capture log records emitted at ERROR and above as Sentry events.
+            # This covers the agents' explicit logger.exception(...) calls as
+            # well as asyncio's "Exception in callback" / "Task exception was
+            # never retrieved" records, so unhandled task failures surface too.
+            LoggingIntegration(level=logging.INFO, event_level=logging.ERROR),
+        ],
+    )
+    sentry_sdk.set_tag("application", "agents")
+    sentry_sdk.set_tag("agent", agent_name)
+
+    logger.info("Sentry initialized for agent '%s' (pid %d)", agent_name, os.getpid())
+
+
+def set_job_context(*, room: str | None = None, job_id: str | None = None) -> None:
+    """Tag the current Sentry scope with the LiveKit job being handled.
+
+    Args:
+        room: Name of the room the job is serving.
+        job_id: LiveKit job identifier.
+    """
+    scope = sentry_sdk.get_current_scope()
+    if room is not None:
+        scope.set_tag("room", room)
+    if job_id is not None:
+        scope.set_tag("job_id", job_id)
@@ -1,21 +1,22 @@

 [project]
 name = "agents"
-version = "1.22.0"
+version = "1.24.0"
 requires-python = ">=3.12"
 dependencies = [
-    "livekit-agents==1.5.13",
-    "livekit-plugins-deepgram==1.5.13",
-    "livekit-plugins-silero==1.5.13",
+    "livekit-agents==1.6.4",
+    "livekit-plugins-deepgram==1.6.4",
+    "livekit-plugins-silero==1.6.4",
    "livekit-plugins-kyutai-lasuite==0.0.6",
    "python-dotenv==1.2.2",
    "protobuf==6.33.6",
-    "minio==7.2.20"
+    "minio==7.2.20",
+    "sentry-sdk==2.60.0",
 ]

 [project.optional-dependencies]
 dev = [
-    "ruff==0.15.14",
+    "ruff==0.15.19",
 ]

 [tool.uv]
@@ -0,0 +1,42 @@
+"""Helpers for managing asyncio tasks."""
+
+import asyncio
+import logging
+from collections.abc import Callable
+from typing import Any
+
+
+def done_callback(
+    logger: logging.Logger,
+    tasks: set[asyncio.Task],
+    description: str,
+    *,
+    on_success: Callable[[Any], None] | None = None,
+) -> Callable[[asyncio.Task], None]:
+    """Build a done-callback for a background task.
+
+    Meant to be passed to `asyncio.Task.add_done_callback`.
+
+    Args:
+        logger: Logger used to report failures, so records keep the caller's
+            logger name.
+        tasks: Set the task was registered in; the task is discarded from it.
+        description: Human-readable intended action
+        on_success: Optional callback invoked with the task's result when it
+            completes without error.
+
+    Returns:
+        A callback suitable for ``task.add_done_callback(...)``.
+    """
+
+    def _finalize(task: asyncio.Task) -> None:
+        tasks.discard(task)
+        if task.cancelled():
+            return
+        if (exc := task.exception()) is not None:
+            logger.exception("failed to %s", description, exc_info=exc)
+            return
+        if on_success is not None:
+            on_success(task.result())
+
+    return _finalize
@@ -11,7 +11,7 @@ from core.recording.event import notification

 from . import models
 from .tasks.file import process_file_deletion
-from .utils import generate_download_file_url
+from .utils import generate_download_s3_url


 def hard_delete_file(file):
@@ -242,7 +242,7 @@ class FileAdmin(admin.ModelAdmin):
        """Return a clickable preview URL for the file."""
        if not obj.is_ready:
            return "-"
-        url = generate_download_file_url(obj, expires_in=60 * 60)
+        url = generate_download_s3_url(obj.key, expires_in=60 * 60)

        return format_html(
            '<a href="{}" target="_blank" rel="noopener noreferrer">Open File</a>', url
@@ -402,7 +402,14 @@ class RecordingAdmin(admin.ModelAdmin):
    """Recording admin interface declaration."""

    inlines = (RecordingAccessInline,)
-    search_fields = ["status", "=id", "worker_id", "room__slug", "=room__id"]
+    search_fields = [
+        "status",
+        "=id",
+        "worker_id",
+        "room__slug",
+        "=room__id",
+        "accesses__user__email",
+    ]
    list_display = (
        "id",
        "status",
@@ -19,6 +19,7 @@ from django.utils.module_loading import import_string

 from .base import AnalyticsBackend, NoOpAnalytics
 from .events import AnalyticsEvent
+from .user_feature_flags import UserFeatureFlag

 __all__ = [
    "get_analytics",
@@ -26,6 +27,8 @@ __all__ = [
    "capture",
    "AnalyticsBackend",
    "AnalyticsEvent",
+    "is_user_feature_flag_enabled",
+    "UserFeatureFlag",
 ]


@@ -57,3 +60,8 @@ def capture(
 ) -> None:
    """Record an event performed by an identified user."""
    analytics_instance.capture(user, event, properties)
+
+
+def is_user_feature_flag_enabled(user, feature_name: UserFeatureFlag) -> bool:
+    """Check if a feature is enabled at the user level."""
+    return analytics_instance.is_user_feature_enabled(user, feature_name)
@@ -1,12 +1,14 @@
 """Analytics backend protocol and default no-op implementation."""

-from typing import Any, Protocol
+from abc import ABC, abstractmethod
+from typing import Any, Mapping

 from ..models import User
 from .events import AnalyticsEvent
+from .user_feature_flags import UserFeatureFlag


-class AnalyticsBackend(Protocol):
+class AnalyticsBackend(ABC):
    """
    Interface every analytics backend must implement.

@@ -17,11 +19,11 @@ class AnalyticsBackend(Protocol):
        ANALYTICS_BACKEND_SETTINGS = {"api_key": "...", "host": "..."}
    """

-    def __init__(self, **kwargs: Any) -> None: ...
-
+    @abstractmethod
    def identify(self, user: User, properties: dict[str, Any] | None = None) -> None:
        """Associate traits (email, name, ...) with an identified user."""

+    @abstractmethod
    def capture(
        self,
        user: User,
@@ -30,16 +32,29 @@ class AnalyticsBackend(Protocol):
    ) -> None:
        """Record an event performed by an identified user."""

+    @abstractmethod
    def shutdown(self) -> None:
        """Flush pending events. Called on process exit."""

+    def get_user_feature_flags(
+        self,
+        user: User,  # pylint: disable=unused-argument
+    ) -> Mapping[UserFeatureFlag, bool | str | None]:
+        """Return a dict of feature flags for the given user."""
+        # We return an empty dict here by default to avoid a breaking change
+        # By making this method abstract.
+        return {}

-class NoOpAnalytics:
+    def is_user_feature_enabled(
+        self, user: User, feature_name: UserFeatureFlag
+    ) -> bool:
+        """Check if a feature is enabled at the user level."""
+        return self.get_user_feature_flags(user).get(feature_name, False) is True
+
+
+class NoOpAnalytics(AnalyticsBackend):
    """Default backend: silently discards everything."""

-    def __init__(self, **kwargs: Any) -> None:
-        """No-op: accepts and ignores any backend settings kwargs."""
-
    def identify(self, user: User, properties=None) -> None:
        """No-op: discards identify calls."""

@@ -1,17 +1,21 @@
 """PostHog implementation of the analytics backend protocol."""

 import logging
-from typing import Any
+from typing import Any, Mapping
+
+from django.core.cache import cache

 from posthog import Posthog

 from ..models import User
+from .base import AnalyticsBackend
 from .events import AnalyticsEvent
+from .user_feature_flags import UserFeatureFlag

 logger = logging.getLogger(__name__)


-class PostHogAnalytics:
+class PostHogAnalytics(AnalyticsBackend):
    """Send events to PostHog, keyed on the user's primary key (UUID)."""

    def __init__(
@@ -19,6 +23,8 @@ class PostHogAnalytics:
        *,
        api_key: str,
        host: str = "https://eu.i.posthog.com",
+        feature_flags_cache_ttl: int = 60,
+        feature_flags_cache_prefix: str = "user_feature_flags:",
        **kwargs: Any,
    ) -> None:

@@ -29,6 +35,8 @@ class PostHogAnalytics:
            host=host,
            **kwargs,
        )
+        self._feature_flags_cache_ttl = feature_flags_cache_ttl
+        self._feature_flags_cache_prefix = feature_flags_cache_prefix

    @staticmethod
    def _distinct_id(user: User) -> str | None:
@@ -72,3 +80,37 @@ class PostHogAnalytics:
    def shutdown(self) -> None:
        """Flush pending events. Called on process exit."""
        self._client.shutdown()
+
+    def _fetch_user_feature_flags(
+        self, user: User
+    ) -> Mapping[UserFeatureFlag, bool | str | None]:
+        """Compute feature flags for a user."""
+
+        distinct_id = self._distinct_id(user)
+        if distinct_id is None:
+            return {}
+
+        flags = self._client.evaluate_flags(distinct_id)
+        out: dict[UserFeatureFlag, bool | str | None] = {}
+        for flag_key in UserFeatureFlag:
+            out[flag_key] = flags.get_flag(flag_key.value)
+
+        return out
+
+    def get_user_feature_flags(
+        self, user: User
+    ) -> Mapping[UserFeatureFlag, bool | str | None]:
+        """Get feature flags for a user. Caches the result for a short time."""
+        distinct_id = self._distinct_id(user)
+        if distinct_id is None:
+            return {}
+
+        try:
+            return cache.get_or_set(
+                f"{self._feature_flags_cache_prefix}{distinct_id}",
+                default=lambda: self._fetch_user_feature_flags(user),
+                timeout=self._feature_flags_cache_ttl,
+            )
+        except Exception:  # pylint: disable=broad-exception-caught
+            logger.exception("Failed to get feature flags for user %s", user.pk)
+            return {}
@@ -0,0 +1,9 @@
+"""Catalog of all analytics feature flags used by the backend."""
+
+from enum import StrEnum
+
+
+class UserFeatureFlag(StrEnum):
+    """All feature flags configured in the app."""
+
+    TRANSCRIPT_SUMMARY_ENABLED = "summary-enabled"
@@ -68,6 +68,9 @@ def get_frontend_configuration(request):
            "enable_firefox_proxy_workaround": settings.LIVEKIT_ENABLE_FIREFOX_PROXY_WORKAROUND,
            "default_sources": settings.LIVEKIT_DEFAULT_SOURCES,
        },
+        "authenticated_users_can_edit_display_name": (
+            settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME
+        ),
    }
    frontend_configuration.update(settings.FRONTEND_CONFIGURATION)
    return Response(frontend_configuration)
@@ -563,3 +563,13 @@ class RenameParticipantSerializer(BaseValidationOnlySerializer):
    """Serializer for renaming a participant in a room."""

    name = serializers.CharField(min_length=1, max_length=255, allow_blank=False)
+
+
+class ExternalProcessEventSerializer(BaseValidationOnlySerializer):
+    """Validate external process event data."""
+
+    job_id = serializers.CharField(required=True)
+    # We are not strict on purpose on those fields to avoid
+    # useless bad requests
+    type = serializers.CharField(required=False, allow_null=True, allow_blank=True)
+    status = serializers.CharField(required=False, allow_null=True, allow_blank=True)
@@ -39,7 +39,10 @@ from core import analytics, enums, models, utils
 from core.api.filters import ListFileFilter
 from core.enums import MEDIA_STORAGE_URL_PATTERN
 from core.recording.enums import FileExtension
-from core.recording.event.authentication import StorageEventAuthentication
+from core.recording.event.authentication import (
+    RecordingProcessWebhookAuthentication,
+    StorageEventAuthentication,
+)
 from core.recording.event.exceptions import (
    InvalidBucketError,
    InvalidFilepathError,
@@ -89,6 +92,7 @@ from core.services.subtitle import SubtitleException, SubtitleService
 from core.tasks.file import process_file_deletion

 from ..authentication.livekit import LiveKitTokenAuthentication
+from ..models import RoomAccessLevel
 from . import permissions, serializers, throttling
 from .feature_flag import FeatureFlag

@@ -264,6 +268,9 @@ class RoomViewSet(
            username = request.query_params.get("username", None)
            data = {
                "id": None,
+                "slug": slug,
+                "is_administrable": False,
+                "access_level": RoomAccessLevel.PUBLIC,
                "livekit": {
                    "url": settings.LIVEKIT_CONFIGURATION["url"],
                    "room": slug,
@@ -999,6 +1006,60 @@ class RecordingViewSet(
            {"message": "Event processed."},
        )

+    @decorators.action(
+        detail=False,
+        methods=["post"],
+        url_path="external-process-hook",
+        authentication_classes=[RecordingProcessWebhookAuthentication],
+        serializer_class=serializers.ExternalProcessEventSerializer,
+    )
+    def on_external_process_event_received(self, request, pk=None):  # pylint: disable=unused-argument
+        """Handle incoming external process events for recordings."""
+        logger.debug("Processing external process event %s", request.data)
+        serializer = self.get_serializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+
+        ok_response = drf_response.Response(
+            {"message": "Event processed."},
+        )
+
+        validated_data = serializer.validated_data
+        job_id = validated_data["job_id"]
+        try:
+            recording = models.Recording.objects.get(external_process_id=job_id)
+        except models.Recording.DoesNotExist as e:
+            logger.warning("No recording found for job_id %s: %s", job_id, e)
+            return ok_response
+
+        if validated_data.get("type") == "transcript":
+            if validated_data.get("status") == "success":
+                logger.info(
+                    "External process transcript success received for recording %s",
+                    job_id,
+                )
+                recording.status = (
+                    models.RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL
+                )
+                recording.save()
+                return ok_response
+
+            if validated_data.get("status") == "failure":
+                logger.info(
+                    "External process transcript failure received for recording %s",
+                    job_id,
+                )
+                recording.status = models.RecordingStatusChoices.EXTERNAL_PROCESS_FAILED
+                recording.save()
+                return ok_response
+
+        logger.info(
+            "No changes to save for external process id %s and payload %s",
+            job_id,
+            validated_data,
+        )
+
+        return ok_response
+
    def _auth_get_original_url(self, request):
        """
        Extracts and parses the original URL from the "HTTP_X_ORIGINAL_URL" header.
@@ -215,5 +215,6 @@ class RoomViewSet(
                "client_id": client_id,
                "external_api": True,
                "auth_method": auth_method,
+                "$set": {"email": self.request.user.email},
            },
        )
@@ -0,0 +1,23 @@
+# Generated by Django 5.2.14 on 2026-06-22 08:26
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('core', '0020_alter_file_upload_state'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='recording',
+            name='external_process_id',
+            field=models.CharField(blank=True, help_text='ID of the external process associated with the recording.', max_length=255, null=True, unique=True, verbose_name='External Process ID'),
+        ),
+        migrations.AlterField(
+            model_name='recording',
+            name='status',
+            field=models.CharField(choices=[('initiated', 'Initiated'), ('active', 'Active'), ('stopped', 'Stopped'), ('saved', 'Saved'), ('aborted', 'Aborted'), ('failed_to_start', 'Failed to Start'), ('failed_to_stop', 'Failed to Stop'), ('notification_succeeded', 'Notification succeeded'), ('external_process_successful', 'External process successful'), ('external_process_failed', 'External process failed')], default='initiated', max_length=50),
+        ),
+    ]
@@ -60,6 +60,11 @@ class RecordingStatusChoices(models.TextChoices):
    FAILED_TO_START = "failed_to_start", _("Failed to Start")
    FAILED_TO_STOP = "failed_to_stop", _("Failed to Stop")
    NOTIFICATION_SUCCEEDED = "notification_succeeded", _("Notification succeeded")
+    EXTERNAL_PROCESS_SUCCESSFUL = (
+        "external_process_successful",
+        _("External process successful"),
+    )
+    EXTERNAL_PROCESS_FAILED = "external_process_failed", _("External process failed")

    @classmethod
    def is_final(cls, status):
@@ -73,6 +78,8 @@ class RecordingStatusChoices(models.TextChoices):
            cls.STOPPED,
            cls.SAVED,
            cls.ABORTED,
+            cls.EXTERNAL_PROCESS_SUCCESSFUL,
+            cls.EXTERNAL_PROCESS_FAILED,
            cls.FAILED_TO_START,
            cls.FAILED_TO_STOP,
        }
@@ -598,6 +605,14 @@ class Recording(BaseModel):
        verbose_name=_("Recording options"),
        help_text=_("Recording options"),
    )
+    external_process_id = models.CharField(
+        max_length=255,
+        null=True,
+        blank=True,
+        unique=True,
+        verbose_name=_("External Process ID"),
+        help_text=_("ID of the external process associated with the recording."),
+    )

    class Meta:
        db_table = "meet_recording"
@@ -653,6 +668,8 @@ class Recording(BaseModel):
        return self.status in {
            RecordingStatusChoices.NOTIFICATION_SUCCEEDED,
            RecordingStatusChoices.SAVED,
+            RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL,
+            RecordingStatusChoices.EXTERNAL_PROCESS_FAILED,
        }

    @property
@@ -14,9 +14,9 @@ logger = logging.getLogger(__name__)
 class MachineUser:
    """Represent a non-interactive system user for automated storage operations."""

-    def __init__(self) -> None:
+    def __init__(self, username: str = "storage_event_user") -> None:
        self.pk = None
-        self.username = "storage_event_user"
+        self.username = username
        self.is_active = True

    @property
@@ -34,33 +34,33 @@ class MachineUser:
        return self.username


-class StorageEventAuthentication(BaseAuthentication):
-    """Authenticate requests using a Bearer token for storage event integration.
-    This class validates Bearer tokens for storage events that don't map to database users.
-    It's designed for S3-compatible storage integrations and similar use cases.
-    Events are submitted when a webhook is configured on some bucket's events.
-    """
+class HeaderBasedAuthentication(BaseAuthentication):
+    """Authenticate requests using a header with a secret key."""

    AUTH_HEADER = "Authorization"
    TOKEN_TYPE = "Bearer"  # noqa S105
+    REALM = ""
+
+    IS_ENFORCED_SETTINGS_KEY = None
+    EXPECTED_TOKEN_SETTINGS_KEY = None

    def authenticate(self, request):
        """Validate the Bearer token from the Authorization header."""

-        if not settings.RECORDING_ENABLE_STORAGE_EVENT_AUTH:
-            return MachineUser(), None
+        if self.IS_ENFORCED_SETTINGS_KEY is not None:
+            if not getattr(settings, self.IS_ENFORCED_SETTINGS_KEY):
+                return MachineUser(), None

-        required_token = settings.RECORDING_STORAGE_EVENT_TOKEN
-        if not required_token:
-            if settings.RECORDING_ENABLE_STORAGE_EVENT_AUTH:
-                raise AuthenticationFailed(
-                    "Authentication is enabled but token is not configured."
-                )
-
-            return MachineUser(), None
+        if (
+            self.EXPECTED_TOKEN_SETTINGS_KEY is None
+            or (required_token := getattr(settings, self.EXPECTED_TOKEN_SETTINGS_KEY))
+            is None
+        ):
+            raise AuthenticationFailed(
+                "Authentication is enabled but token is not configured."
+            )

        auth_header = request.headers.get(self.AUTH_HEADER)
-
        if not auth_header:
            logger.warning(
                "Authentication failed: Missing Authorization header (ip: %s)",
@@ -68,15 +68,10 @@ class StorageEventAuthentication(BaseAuthentication):
            )
            raise AuthenticationFailed("Authorization header is required")

-        auth_parts = auth_header.split(" ")
-        if len(auth_parts) != 2 or auth_parts[0] != self.TOKEN_TYPE:
-            logger.warning(
-                "Authentication failed: Invalid authorization header (ip: %s)",
-                request.META.get("REMOTE_ADDR"),
-            )
-            raise AuthenticationFailed("Invalid authorization header.")
-
-        token = auth_parts[1]
+        scheme, _, token = auth_header.partition(" ")
+        if scheme.lower() != self.TOKEN_TYPE.lower() or not token.strip():
+            raise AuthenticationFailed("Invalid authorization header format.")
+        token = token.strip()

        # Use constant-time comparison to prevent timing attacks
        if not secrets.compare_digest(token.encode(), required_token.encode()):
@@ -90,4 +85,26 @@ class StorageEventAuthentication(BaseAuthentication):

    def authenticate_header(self, request):
        """Return the WWW-Authenticate header value."""
-        return f"{self.TOKEN_TYPE} realm='Storage event API'"
+        return f"{self.TOKEN_TYPE} realm='{self.REALM}'"
+
+
+class StorageEventAuthentication(HeaderBasedAuthentication):
+    """Authenticate requests using a Bearer token for storage event integration.
+    This class validates Bearer tokens for storage events that don't map to database users.
+    It's designed for S3-compatible storage integrations and similar use cases.
+    Events are submitted when a webhook is configured on some bucket's events.
+    """
+
+    REALM = "Storage event API"
+    IS_ENFORCED_SETTINGS_KEY = "RECORDING_ENABLE_STORAGE_EVENT_AUTH"
+    EXPECTED_TOKEN_SETTINGS_KEY = "RECORDING_STORAGE_EVENT_TOKEN"  # noqa S105
+
+
+class RecordingProcessWebhookAuthentication(HeaderBasedAuthentication):
+    """
+    Custom authentication class for recording process webhook requests.
+    Validates the API key in the Authorization header.
+    """
+
+    REALM = "External process webhook API"
+    EXPECTED_TOKEN_SETTINGS_KEY = "SUMMARY_SERVICE_WEBHOOK_API_TOKEN"  # noqa S105
@@ -4,6 +4,7 @@ import asyncio
 import logging
 import smtplib
 from datetime import datetime, timezone
+from zoneinfo import ZoneInfo, ZoneInfoNotFoundError

 from django.conf import settings
 from django.core.mail import send_mail
@@ -17,6 +18,8 @@ from asgiref.sync import async_to_sync
 from livekit import api as livekit_api

 from core import models, utils
+from core.analytics import UserFeatureFlag, is_user_feature_flag_enabled
+from core.utils import generate_download_s3_url

 logger = logging.getLogger(__name__)

@@ -178,8 +181,49 @@ class NotificationService:

        return _ns_to_utc(file_result.started_at), _ns_to_utc(file_result.ended_at)

+    @staticmethod
+    def _generate_title(
+        *,
+        locale: str,
+        room: str,
+        recording_datetime: datetime | None,
+        owner_timezone: str | None,
+    ) -> str:
+        """Generate title from context or return default."""
+        if recording_datetime is None:
+            with override(locale):
+                return _("Transcription")
+
+        dt = recording_datetime
+        if owner_timezone:
+            try:
+                dt = recording_datetime.astimezone(ZoneInfo(owner_timezone))
+            except (KeyError, ZoneInfoNotFoundError):
+                pass  # Keep the original UTC datetime
+
+        with override(locale):
+            translated_template = _(
+                'Meeting "{room}" on {room_recording_date} at {room_recording_time}'
+            )
+            return translated_template.format(
+                room=room,
+                room_recording_date=dt.strftime("%Y-%m-%d"),
+                room_recording_time=dt.strftime("%H:%M"),
+            )
+
    @staticmethod
    def _notify_summary_service(recording: models.Recording):
+        if settings.SUMMARY_SERVICE_VERSION == 1:
+            return NotificationService._notify_summary_service_v1(recording)
+        if settings.SUMMARY_SERVICE_VERSION == 2:
+            return NotificationService._notify_summary_service_v2(recording)
+
+        raise NotImplementedError(
+            f"Unknown summary service version: {settings.SUMMARY_SERVICE_VERSION}"
+        )
+
+    @staticmethod
+    def _notify_summary_service_v1(recording: models.Recording):
        """Notify summary service about a new recording."""

        if (
@@ -253,5 +297,120 @@ class NotificationService:

        return True

+    @staticmethod
+    def _notify_summary_service_v2(recording: models.Recording):
+        """Notify summary service about a new recording."""
+
+        if (
+            not settings.SUMMARY_SERVICE_ENDPOINT
+            or not settings.SUMMARY_SERVICE_API_TOKEN
+        ):
+            logger.error("Summary service not configured")
+            return False
+
+        owner_access = (
+            models.RecordingAccess.objects.select_related("user")
+            .filter(
+                role=models.RoleChoices.OWNER,
+                recording_id=recording.id,
+            )
+            .first()
+        )
+        metadata_filename: None | str = None
+        if settings.METADATA_COLLECTOR_ENABLED and recording.options.get(
+            "collect_metadata", False
+        ):
+            output_folder = settings.METADATA_COLLECTOR_OUTPUT_FOLDER
+            metadata_filename = f"{output_folder}/{recording.id}-metadata.json"
+
+        if not owner_access:
+            logger.error("No owner found for recording %s", recording.id)
+            return False
+
+        started_at, ended_at = async_to_sync(
+            NotificationService._get_recording_timestamps
+        )(recording.worker_id)
+
+        form_base_url = settings.TRANSCRIPTION_SATISFACTION_FORM_BASE_URL
+        form_link = (
+            f"{form_base_url}?room_id={recording.room.id}"
+            if (form_base_url and metadata_filename is not None)
+            else None
+        )
+        metadata_payload = None
+        if started_at and ended_at and metadata_filename:
+            metadata_payload = {
+                "cloud_storage_url": generate_download_s3_url(
+                    metadata_filename,
+                    expires_in=settings.SUMMARY_SERVICE_CLOUD_STORAGE_SIGNED_URL_EXPIRY_SECONDS,
+                    override_domain=False,
+                ),
+                "started_at": started_at.isoformat(),
+                "ended_at": ended_at.isoformat(),
+            }
+
+        payload = {
+            "user_sub": owner_access.user.sub,
+            "user_email": owner_access.user.email,
+            "cloud_storage_url": generate_download_s3_url(
+                recording.key,
+                expires_in=settings.SUMMARY_SERVICE_CLOUD_STORAGE_SIGNED_URL_EXPIRY_SECONDS,
+                override_domain=False,
+            ),
+            "language": recording.options.get(
+                "language", get_language().split("-")[0].lower()
+            ),
+            "context_language": owner_access.user.language,
+            "push_to_docs_config": {
+                "user_email": owner_access.user.email,
+                "title": NotificationService._generate_title(
+                    locale=owner_access.user.language
+                    or recording.options.get("language", get_language()),
+                    room=recording.room.name,
+                    recording_datetime=started_at,
+                    owner_timezone=str(owner_access.user.timezone),
+                ),
+                "download_link": f"{get_recording_download_base_url()}/{recording.id}",
+                "form_link": form_link,
+                "auto_create_summary": is_user_feature_flag_enabled(
+                    owner_access.user, UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED
+                ),
+            },
+            "metadata": metadata_payload,
+        }
+
+        headers = {
+            "Content-Type": "application/json",
+            "Authorization": f"Bearer {settings.SUMMARY_SERVICE_API_TOKEN}",
+        }
+
+        try:
+            response = requests.post(
+                settings.SUMMARY_SERVICE_ENDPOINT,
+                json=payload,
+                headers=headers,
+                timeout=30,
+            )
+            response.raise_for_status()
+            response_json = response.json()
+            # We do not require a job_id to avoid a breaking change
+            job_id = response_json.get("job_id")
+            if not isinstance(job_id, str):
+                raise ValueError("job_id is not a string")
+
+            recording.external_process_id = job_id
+            recording.save()
+
+        except requests.RequestException as exc:
+            logger.exception(
+                "Summary service error for recording %s. URL: %s. Exception: %s",
+                recording.id,
+                settings.SUMMARY_SERVICE_ENDPOINT,
+                exc,
+            )
+            return False
+
+        return True
+

 notification_service = NotificationService()
@@ -12,6 +12,7 @@ import pytest

 from core.analytics.events import AnalyticsEvent
 from core.analytics.posthog import PostHogAnalytics
+from core.analytics.user_feature_flags import UserFeatureFlag
 from core.factories import UserFactory

 pytestmark = pytest.mark.django_db
@@ -248,6 +249,60 @@ def test_capture_logs_the_failing_event_name_on_exception(mock_posthog_cls, capl
    assert any("PostHog capture failed" in record.message for record in caplog.records)


+# ==============================
+# feature flags
+# ==============================
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_compute_feature_flags_returns_all_catalog_entries(mock_posthog_cls):
+    """Should map every declared feature flag key to the SDK evaluated value."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+
+    mock_posthog_cls.return_value.evaluate_flags.return_value.get_flag.return_value = (
+        True
+    )
+
+    flags = backend._fetch_user_feature_flags(user)
+
+    assert flags == {UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED: True}
+    mock_posthog_cls.return_value.evaluate_flags.assert_called_once_with(str(user.pk))
+    mock_posthog_cls.return_value.evaluate_flags.return_value.get_flag.assert_called_once_with(
+        UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED.value
+    )
+
+
+@patch("core.analytics.posthog.cache.get_or_set")
+@patch("core.analytics.posthog.Posthog")
+def test_get_feature_flags_uses_cache_get_or_set(
+    mock_posthog_cls, mock_cache_get_or_set
+):
+    """Should cache feature flags by user distinct id with configured TTL."""
+    cached_flags = {UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED: False}
+    mock_cache_get_or_set.return_value = cached_flags
+    backend = PostHogAnalytics(api_key="test-api-key", feature_flags_cache_ttl=120)
+    user = UserFactory()
+
+    flags = backend.get_user_feature_flags(user)
+
+    assert flags == cached_flags
+    mock_cache_get_or_set.assert_called_once()
+    args, kwargs = mock_cache_get_or_set.call_args
+    assert kwargs["timeout"] == 120
+    assert args[0] == f"user_feature_flags:{user.pk}"
+    assert callable(kwargs["default"])
+
+
+@patch("core.analytics.posthog.Posthog")
+def test_get_feature_flags_returns_empty_dict_on_exception(mock_posthog_cls):
+    """Should swallow failures and return an empty mapping."""
+    backend = PostHogAnalytics(api_key="test-api-key")
+    user = UserFactory()
+    with patch("core.analytics.posthog.cache.get_or_set", side_effect=RuntimeError):
+        assert backend.get_user_feature_flags(user) == {}
+
+
 # ==============================
 # shutdown
 # ==============================
@@ -136,10 +136,10 @@ def test_authenticate_header():


 def test_multiple_spaces_in_auth_header(settings):
-    """Test failure when Authorization header contains multiple spaces."""
+    """Test success when Authorization header contains multiple spaces."""
    settings.RECORDING_STORAGE_EVENT_TOKEN = "valid-test-token"
    request = RequestFactory().get("/")
    request.headers = {"Authorization": "Bearer   extra-spaces-token"}

-    with pytest.raises(AuthenticationFailed, match="Invalid authorization header"):
-        StorageEventAuthentication().authenticate(request)
+    header = StorageEventAuthentication().authenticate_header(request)
+    assert header == "Bearer realm='Storage event API'"
@@ -13,6 +13,7 @@ from django.contrib.sites.models import Site
 import pytest

 from core import factories, models
+from core.analytics import UserFeatureFlag
 from core.recording.event.notification import NotificationService, notification_service

 pytestmark = pytest.mark.django_db
@@ -243,3 +244,177 @@ def test_notify_user_by_email_smtp_exception(mocked_current_site, caplog):
        assert result is False
        assert mock_send_mail.call_count == 2
        assert "notification could not be sent:" in caplog.text
+
+
+@mock.patch("core.recording.event.notification.requests.post")
+@mock.patch("core.recording.event.notification.generate_download_s3_url")
+@mock.patch.object(
+    NotificationService, "_get_recording_timestamps", new_callable=mock.AsyncMock
+)
+def test_notify_summary_service_post_args_with_metadata(
+    mock_get_recording_timestamps,
+    mock_generate_download_s3_url,
+    mock_post,
+    settings,
+):
+    """Test summary notification computed request args when metadata is enabled."""
+    settings.SUMMARY_SERVICE_VERSION = 2
+    settings.SUMMARY_SERVICE_ENDPOINT = "https://summary.test/api/v2/tasks"
+    settings.SUMMARY_SERVICE_API_TOKEN = "summary-token"
+    settings.RECORDING_DOWNLOAD_BASE_URL = "https://app.test/recordings"
+    settings.SCREEN_RECORDING_BASE_URL = None
+    settings.METADATA_COLLECTOR_ENABLED = True
+    settings.METADATA_COLLECTOR_OUTPUT_FOLDER = "recordings-metadata"
+
+    recording = factories.RecordingFactory(
+        room__name="Engineering Sync",
+        worker_id="egress-1",
+        options={"collect_metadata": True, "language": "en-us"},
+    )
+    owner = factories.UserFactory(
+        email="owner@test.com",
+        sub="owner-sub",
+        language="fr-fr",
+        timezone="Europe/Paris",
+    )
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER, user=owner
+    )
+
+    started_at = datetime.datetime(2026, 1, 2, 10, 30, tzinfo=datetime.timezone.utc)
+    ended_at = datetime.datetime(2026, 1, 2, 11, 45, tzinfo=datetime.timezone.utc)
+    mock_get_recording_timestamps.return_value = (started_at, ended_at)
+    mock_generate_download_s3_url.side_effect = [
+        "https://storage.test/metadata.json",
+        "https://storage.test/recording.ogg",
+    ]
+
+    mock_response = mock.Mock()
+    mock_response.raise_for_status.return_value = None
+    mock_response.json.return_value = {"job_id": "job-42"}
+    mock_post.return_value = mock_response
+
+    result = NotificationService._notify_summary_service(recording)
+    recording.refresh_from_db()
+
+    assert result is True
+    assert recording.external_process_id == "job-42"
+
+    metadata_filename = (
+        f"{settings.METADATA_COLLECTOR_OUTPUT_FOLDER}/{recording.id}-metadata.json"
+    )
+    expected_payload = {
+        "user_sub": owner.sub,
+        "user_email": owner.email,
+        "cloud_storage_url": "https://storage.test/recording.ogg",
+        "language": "en-us",
+        "context_language": owner.language,
+        "push_to_docs_config": {
+            "user_email": owner.email,
+            "title": 'Réunion "Engineering Sync" du 2026-01-02 à 11:30',
+            "download_link": f"{settings.RECORDING_DOWNLOAD_BASE_URL}/{recording.id}",
+            "auto_create_summary": False,
+            "form_link": None,
+        },
+        "metadata": {
+            "cloud_storage_url": "https://storage.test/metadata.json",
+            "started_at": started_at.isoformat(),
+            "ended_at": ended_at.isoformat(),
+        },
+    }
+    expected_headers = {
+        "Content-Type": "application/json",
+        "Authorization": "Bearer summary-token",
+    }
+    mock_post.assert_called_once_with(
+        "https://summary.test/api/v2/tasks",
+        json=expected_payload,
+        headers=expected_headers,
+        timeout=30,
+    )
+    assert mock_generate_download_s3_url.call_args_list == [
+        mock.call(metadata_filename, expires_in=60 * 60 * 24, override_domain=False),
+        mock.call(recording.key, expires_in=60 * 60 * 24, override_domain=False),
+    ]
+    mock_get_recording_timestamps.assert_awaited_once_with("egress-1")
+
+
+@mock.patch("core.recording.event.notification.requests.post")
+@mock.patch("core.recording.event.notification.generate_download_s3_url")
+@mock.patch.object(
+    NotificationService, "_get_recording_timestamps", new_callable=mock.AsyncMock
+)
+@pytest.mark.parametrize("auto_create_summary_enabled", [False, True])
+def test_notify_summary_service_post_args_without_metadata(
+    mock_get_recording_timestamps,
+    mock_generate_download_s3_url,
+    mock_post,
+    auto_create_summary_enabled,
+    settings,
+):
+    """Test summary notification computed request args when metadata is not available."""
+    settings.SUMMARY_SERVICE_VERSION = 2
+    settings.SUMMARY_SERVICE_ENDPOINT = "https://summary.test/api/v2/tasks"
+    settings.SUMMARY_SERVICE_API_TOKEN = "summary-token"
+    settings.RECORDING_DOWNLOAD_BASE_URL = "https://app.test/recordings"
+    settings.SCREEN_RECORDING_BASE_URL = None
+    settings.METADATA_COLLECTOR_ENABLED = False
+
+    recording = factories.RecordingFactory(room__name="Daily")
+    owner = factories.UserFactory(
+        email="owner@test.com",
+        sub="owner-sub",
+        language="en-us",
+        timezone="UTC",
+    )
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER, user=owner
+    )
+
+    mock_get_recording_timestamps.return_value = (None, None)
+    mock_generate_download_s3_url.return_value = "https://storage.test/recording.mp4"
+
+    mock_response = mock.Mock()
+    mock_response.raise_for_status.return_value = None
+    mock_response.json.return_value = {"job_id": "job-51"}
+    mock_post.return_value = mock_response
+
+    with mock.patch(
+        "core.recording.event.notification.is_user_feature_flag_enabled",
+        return_value=auto_create_summary_enabled,
+    ) as mock_is_feature_flag_enabled:
+        result = NotificationService._notify_summary_service(recording)
+
+    assert result is True
+    expected_payload = {
+        "user_sub": owner.sub,
+        "user_email": owner.email,
+        "cloud_storage_url": "https://storage.test/recording.mp4",
+        "language": "en",
+        "context_language": owner.language,
+        "push_to_docs_config": {
+            "user_email": owner.email,
+            "title": "Transcription",
+            "download_link": f"{settings.RECORDING_DOWNLOAD_BASE_URL}/{recording.id}",
+            "auto_create_summary": auto_create_summary_enabled,
+            "form_link": None,
+        },
+        "metadata": None,
+    }
+    expected_headers = {
+        "Content-Type": "application/json",
+        "Authorization": "Bearer summary-token",
+    }
+    mock_post.assert_called_once_with(
+        "https://summary.test/api/v2/tasks",
+        json=expected_payload,
+        headers=expected_headers,
+        timeout=30,
+    )
+    mock_generate_download_s3_url.assert_called_once_with(
+        recording.key, expires_in=60 * 60 * 24, override_domain=False
+    )
+    mock_get_recording_timestamps.assert_awaited_once_with(recording.worker_id)
+    mock_is_feature_flag_enabled.assert_called_once_with(
+        owner, UserFeatureFlag.TRANSCRIPT_SUMMARY_ENABLED
+    )
@@ -0,0 +1,134 @@
+"""
+Test recordings API endpoints: external process hook.
+"""
+
+# pylint: disable=redefined-outer-name,unused-argument
+
+import pytest
+
+from ...factories import RecordingFactory
+from ...models import RecordingStatusChoices
+
+pytestmark = pytest.mark.django_db
+
+
+@pytest.fixture
+def external_process_settings(settings):
+    """Configure authentication token for the external process webhook."""
+    settings.SUMMARY_SERVICE_WEBHOOK_API_TOKEN = "testWebhookToken"
+    return settings
+
+
+def test_external_process_event_missing_authorization_header(
+    external_process_settings, client
+):
+    """Requests without authorization must be rejected."""
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-1", "type": "transcript", "status": "success"},
+    )
+
+    assert response.status_code == 401
+
+
+def test_external_process_event_wrong_bearer_token(external_process_settings, client):
+    """Requests with invalid bearer token must be rejected."""
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-1", "type": "transcript", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer wrongToken",
+    )
+
+    assert response.status_code == 401
+
+
+def test_external_process_event_missing_job_id(external_process_settings, client):
+    """Payload without job_id must fail validation."""
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"type": "transcript", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 400
+    assert response.json() == {"job_id": ["This field is required."]}
+
+
+def test_external_process_event_success_updates_recording_status(
+    external_process_settings, client
+):
+    """A successful transcript process should update recording status."""
+    recording = RecordingFactory(
+        status=RecordingStatusChoices.SAVED,
+        external_process_id="job-123",
+    )
+
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-123", "type": "transcript", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"message": "Event processed."}
+
+    recording.refresh_from_db()
+    assert recording.status == RecordingStatusChoices.EXTERNAL_PROCESS_SUCCESSFUL
+
+
+def test_external_process_event_failure_updates_recording_status(
+    external_process_settings, client
+):
+    """A failing transcript process should update recording status."""
+    recording = RecordingFactory(
+        status=RecordingStatusChoices.SAVED,
+        external_process_id="job-456",
+    )
+
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-456", "type": "transcript", "status": "failure"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"message": "Event processed."}
+
+    recording.refresh_from_db()
+    assert recording.status == RecordingStatusChoices.EXTERNAL_PROCESS_FAILED
+
+
+def test_external_process_event_unknown_recording_is_ignored(
+    external_process_settings, client
+):
+    """Unknown job_id should not fail the webhook processing."""
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "missing-job", "type": "transcript", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"message": "Event processed."}
+
+
+def test_external_process_event_non_transcript_event_does_not_change_status(
+    external_process_settings, client
+):
+    """Only transcript events should update recording status."""
+    recording = RecordingFactory(
+        status=RecordingStatusChoices.SAVED,
+        external_process_id="job-789",
+    )
+
+    response = client.post(
+        "/api/v1.0/recordings/external-process-hook/",
+        {"job_id": "job-789", "type": "thumbnail", "status": "success"},
+        HTTP_AUTHORIZATION="Bearer testWebhookToken",
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"message": "Event processed."}
+
+    recording.refresh_from_db()
+    assert recording.status == RecordingStatusChoices.SAVED
@@ -130,6 +130,9 @@ def test_api_rooms_retrieve_anonymous_unregistered_allowed(mock_token):
    assert response.status_code == 200
    assert response.json() == {
        "id": None,
+        "slug": "unregistered-room",
+        "access_level": "public",
+        "is_administrable": False,
        "livekit": {
            "url": "test_url_value",
            "room": "unregistered-room",
@@ -162,6 +165,9 @@ def test_api_rooms_retrieve_anonymous_unregistered_allowed_not_normalized(mock_t
    assert response.status_code == 200
    assert response.json() == {
        "id": None,
+        "slug": "reunion",
+        "access_level": "public",
+        "is_administrable": False,
        "livekit": {
            "url": "test_url_value",
            "room": "reunion",
@@ -2,13 +2,109 @@
 Test utils functions
 """

+# pylint: disable=W0621
 import json
 from unittest import mock

+from django.conf import settings
+from django.contrib.auth.models import AnonymousUser
+
+import jwt
 import pytest
 from livekit.api import TwirpError

-from core.utils import NotificationError, create_livekit_client, notify_participants
+from core.factories import UserFactory
+from core.utils import (
+    NotificationError,
+    create_livekit_client,
+    generate_token,
+    notify_participants,
+)
+
+pytestmark = pytest.mark.django_db
+
+
+def decode_token(token: str) -> dict:
+    """Decode a LiveKit JWT access token for inspection."""
+    return jwt.decode(
+        token,
+        settings.LIVEKIT_CONFIGURATION["api_secret"],
+        algorithms=["HS256"],
+    )
+
+
+def test_generate_token_authenticated_uses_full_name():
+    """The token's display name should default to the user's full name."""
+    user = UserFactory(full_name="Jane Doe")
+
+    token = generate_token(room="my-room", user=user)
+
+    claims = decode_token(token)
+    assert claims["name"] == "Jane Doe"
+    assert claims["sub"] == str(user.sub)
+
+
+def test_generate_token_authenticated_fallback_user_representation():
+    """
+    When the user has no full name, the token's display name should fall back
+    to the user's string representation.
+    """
+    user = UserFactory(full_name=None)
+
+    token = generate_token(room="my-room", user=user)
+
+    claims = decode_token(token)
+    assert claims["name"] == str(user)
+
+
+def test_generate_token_explicit_username_overrides_default():
+    """An explicitly provided username should take precedence over the full name."""
+    user = UserFactory(full_name="Jane Doe")
+
+    token = generate_token(room="my-room", user=user, username="Custom Name")
+
+    claims = decode_token(token)
+    assert claims["name"] == "Custom Name"
+
+
+def test_authenticated_username_ignored_when_editing_disabled(settings):
+    """With editing disabled, an authenticated user's username is ignored."""
+    settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME = False
+    user = UserFactory(full_name="Jane Doe")
+    token = generate_token(room="my-room", user=user, username="Custom Name")
+    claims = decode_token(token)
+    assert claims["name"] == "Jane Doe"
+
+
+def test_authenticated_default_name_unaffected_when_editing_disabled(settings):
+    """Disabling editing doesn't disturb the default full-name path."""
+    settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME = False
+    user = UserFactory(full_name="Jane Doe")
+    token = generate_token(room="my-room", user=user)
+    claims = decode_token(token)
+    assert claims["name"] == "Jane Doe"
+
+
+def test_anonymous_uses_username_when_provided():
+    """An anonymous user's provided username is used as the display name."""
+    token = generate_token(room="my-room", user=AnonymousUser(), username="Guest42")
+    claims = decode_token(token)
+    assert claims["name"] == "Guest42"
+
+
+def test_anonymous_username_used_even_when_editing_disabled(settings):
+    """The setting governs authenticated users only; anonymous can still set a name."""
+    settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME = False
+    token = generate_token(room="my-room", user=AnonymousUser(), username="Guest42")
+    claims = decode_token(token)
+    assert claims["name"] == "Guest42"
+
+
+def test_anonymous_falls_back_to_anonymous_label():
+    """With no username, an anonymous user is labelled 'Anonymous'."""
+    token = generate_token(room="my-room", user=AnonymousUser())
+    claims = decode_token(token)
+    assert claims["name"] == "Anonymous"


@mock.patch("asyncio.get_running_loop")
@@ -109,11 +109,16 @@ def generate_token(
        default_username = "Anonymous"
    else:
        identity = str(user.sub)
-        default_username = str(user)
+        default_username = user.full_name or str(user)

    if color is None:
        color = generate_color(identity)

+    can_edit = (
+        settings.AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME or user.is_anonymous
+    )
+    display_name = (username or default_username) if can_edit else default_username
+
    token = (
        AccessToken(
            api_key=settings.LIVEKIT_CONFIGURATION["api_key"],
@@ -121,7 +126,7 @@ def generate_token(
        )
        .with_grants(video_grants)
        .with_identity(identity)
-        .with_name(username or default_username)
+        .with_name(display_name)
        .with_attributes(
            {"color": color, "room_admin": "true" if is_admin_or_owner else "false"}
        )
@@ -418,6 +423,31 @@ def detect_mimetype(file_buffer: bytes, filename: str | None = None) -> str:
    return mimetype_from_content or "application/octet-stream"


+def _get_s3_client(*, override_domain: bool = True):
+    """Return an S3 client, honoring the AWS_S3_DOMAIN_REPLACE endpoint override.
+
+    AWS_S3_DOMAIN_REPLACE is used when the backend and frontend reach object
+    storage under different domains (this is the case in the docker compose stack
+    used in development: the frontend connects to the object storage on localhost
+    while the backend uses the object storage service name declared in the stack).
+    The domain name is used to compute the signature, so it can't be changed
+    dynamically by the frontend; we build a dedicated boto3 client pointed at that
+    endpoint. Otherwise we reuse the default storage client.
+    """
+    if settings.AWS_S3_DOMAIN_REPLACE and override_domain:
+        return boto3.client(
+            "s3",
+            aws_access_key_id=settings.AWS_S3_ACCESS_KEY_ID,
+            aws_secret_access_key=settings.AWS_S3_SECRET_ACCESS_KEY,
+            endpoint_url=settings.AWS_S3_DOMAIN_REPLACE,
+            config=botocore.client.Config(
+                region_name=settings.AWS_S3_REGION_NAME,
+                signature_version=settings.AWS_S3_SIGNATURE_VERSION,
+            ),
+        )
+    return default_storage.connection.meta.client
+
+
 def generate_upload_policy(file):
    """
    Generate a S3 upload policy for a given file.
@@ -428,26 +458,7 @@ def generate_upload_policy(file):

    key = file.temporary_file_key

-    # This settings should be used if the backend application and the frontend application
-    # can't connect to the object storage with the same domain. This is the case in the
-    # docker compose stack used in development. The frontend application will use localhost
-    # to connect to the object storage while the backend application will use the object storage
-    # service name declared in the docker compose stack.
-    # This is needed because the domain name is used to compute the signature. So it can't be
-    # changed dynamically by the frontend application.
-    if settings.AWS_S3_DOMAIN_REPLACE:
-        s3_client = boto3.client(
-            "s3",
-            aws_access_key_id=settings.AWS_S3_ACCESS_KEY_ID,
-            aws_secret_access_key=settings.AWS_S3_SECRET_ACCESS_KEY,
-            endpoint_url=settings.AWS_S3_DOMAIN_REPLACE,
-            config=botocore.client.Config(
-                region_name=settings.AWS_S3_REGION_NAME,
-                signature_version=settings.AWS_S3_SIGNATURE_VERSION,
-            ),
-        )
-    else:
-        s3_client = default_storage.connection.meta.client
+    s3_client = _get_s3_client()

    # Generate the policy
    policy = s3_client.generate_presigned_url(
@@ -459,33 +470,16 @@ def generate_upload_policy(file):
    return policy


-def generate_download_file_url(file, *, expires_in: int, override_domain: bool = True):
+def generate_download_s3_url(
+    key: str, *, expires_in: int, override_domain: bool = True
+):
    """
-    Generate a S3 signed download url for a given file.
+    Generate a S3 signed download url for a given key.
    """
+    if not key:
+        raise ValueError("key cannot be empty")

-    key = file.file_key
-
-    # This setting should be used if the backend application and the frontend application
-    # can't connect to the object storage with the same domain. This is the case in the
-    # docker compose stack used in development. The frontend application will use localhost
-    # to connect to the object storage while the backend application will use the object storage
-    # service name declared in the docker compose stack.
-    # This is needed because the domain name is used to compute the signature. So it can't be
-    # changed dynamically by the frontend application.
-    if settings.AWS_S3_DOMAIN_REPLACE and override_domain:
-        s3_client = boto3.client(
-            "s3",
-            aws_access_key_id=settings.AWS_S3_ACCESS_KEY_ID,
-            aws_secret_access_key=settings.AWS_S3_SECRET_ACCESS_KEY,
-            endpoint_url=settings.AWS_S3_DOMAIN_REPLACE,
-            config=botocore.client.Config(
-                region_name=settings.AWS_S3_REGION_NAME,
-                signature_version=settings.AWS_S3_SIGNATURE_VERSION,
-            ),
-        )
-    else:
-        s3_client = default_storage.connection.meta.client
+    s3_client = _get_s3_client(override_domain=override_domain)

    return s3_client.generate_presigned_url(
        ClientMethod="get_object",
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-21 14:09+0000\n"
+"POT-Creation-Date: 2026-07-02 10:47+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,70 +17,92 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:29
+#: core/admin.py:67
 msgid "Personal info"
 msgstr "Persönliche Informationen"

-#: core/admin.py:42
+#: core/admin.py:80
 msgid "Permissions"
 msgstr "Berechtigungen"

-#: core/admin.py:54
+#: core/admin.py:92
 msgid "Important dates"
 msgstr "Wichtige Daten"

-#: core/admin.py:132 core/admin.py:275
+#: core/admin.py:206
+msgid "Content"
+msgstr ""
+
+#: core/admin.py:217
+#, fuzzy
+#| msgid "Delete rooms"
+msgid "Deletion"
+msgstr "Räume löschen"
+
+#: core/admin.py:226
+msgid "Derived info"
+msgstr ""
+
+#: core/admin.py:237
+msgid "Timestamps"
+msgstr ""
+
+#: core/admin.py:240
+msgid "File preview"
+msgstr ""
+
+#: core/admin.py:300 core/admin.py:443
 msgid "No owner"
 msgstr "Kein Eigentümer"

-#: core/admin.py:135 core/admin.py:278
+#: core/admin.py:303 core/admin.py:446
 msgid "Multiple owners"
 msgstr "Mehrere Eigentümer"

-#: core/admin.py:148
+#: core/admin.py:316
 msgid "Resend notification to external service"
 msgstr "Benachrichtigung erneut an externen Dienst senden"

-#: core/admin.py:171
+#: core/admin.py:339
 #, python-format
 msgid "Failed to notify for recording %(id)s"
 msgstr "Benachrichtigung für Aufnahme %(id)s fehlgeschlagen"

-#: core/admin.py:179
+#: core/admin.py:347
 #, python-format
 msgid "Failed to notify for recording %(id)s: %(error)s"
 msgstr "Benachrichtigung für Aufnahme %(id)s fehlgeschlagen: %(error)s"

-#: core/admin.py:187
+#: core/admin.py:355
 #, python-format
 msgid "Successfully sent notifications for %(count)s recording(s)."
 msgstr "Benachrichtigungen für %(count)s Aufnahme(n) erfolgreich gesendet."

-#: core/admin.py:195
+#: core/admin.py:363
 #, python-format
 msgid "Skipped %(count)s expired recording(s)."
 msgstr "%(count)s abgelaufene Aufnahme(n) übersprungen."

-#: core/admin.py:200
+#: core/admin.py:368
 msgid "Mark selected recordings as 'Failed to Stop'"
 msgstr "Ausgewählte Aufnahmen als ‚Fehler beim Stoppen‘ markieren"

-#: core/admin.py:218
+#: core/admin.py:386
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgstr "%(count)s Aufnahme(n) erfolgreich als ‚Fehler beim Stoppen‘ markiert."

-#: core/admin.py:226
+#: core/admin.py:394
 #, fuzzy, python-format
 #| msgid "Skipped %(count)s expired recording(s)."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s abgelaufene Aufnahme(n) übersprungen."

-#: core/admin.py:342
+#: core/admin.py:510
 msgid "No scopes"
 msgstr "Keine Scopes"

-#: core/admin.py:344
+#: core/admin.py:512
 msgid "Scopes"
 msgstr "Scopes"

@@ -88,17 +110,17 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Ersteller bin ich"

-#: core/api/serializers.py:88
+#: core/api/serializers.py:89
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Sie müssen Administrator oder Eigentümer eines Raums sein, um Zugriffe "
 "hinzuzufügen."

-#: core/api/serializers.py:509
+#: core/api/serializers.py:534
 msgid "This file extension is not allowed."
 msgstr "Diese Dateiendung ist nicht erlaubt."

-#: core/api/viewsets.py:1090
+#: core/api/viewsets.py:1222
 msgid "You have reached the maximum number of files for this type."
 msgstr "Sie haben die maximale Anzahl an Dateien dieses Typs erreicht."

@@ -146,51 +168,59 @@ msgstr "Stopp fehlgeschlagen"
 msgid "Notification succeeded"
 msgstr "Benachrichtigung erfolgreich"

-#: core/models.py:89
+#: core/models.py:65
+msgid "External process successful"
+msgstr "Externer Prozess erfolgreich"
+
+#: core/models.py:67
+msgid "External process failed"
+msgstr "Externer Prozess fehlgeschlagen"
+
+#: core/models.py:96
 msgid "SCREEN_RECORDING"
 msgstr "BILDSCHIRMAUFZEICHNUNG"

-#: core/models.py:90
+#: core/models.py:97
 msgid "TRANSCRIPT"
 msgstr "TRANSKRIPT"

-#: core/models.py:96
+#: core/models.py:103
 msgid "Public Access"
 msgstr "Öffentlicher Zugriff"

-#: core/models.py:97
+#: core/models.py:104
 msgid "Trusted Access"
 msgstr "Vertrauenswürdiger Zugriff"

-#: core/models.py:98
+#: core/models.py:105
 msgid "Restricted Access"
 msgstr "Eingeschränkter Zugriff"

-#: core/models.py:110
+#: core/models.py:117
 msgid "id"
 msgstr "ID"

-#: core/models.py:111
+#: core/models.py:118
 msgid "primary key for the record as UUID"
 msgstr "Primärschlüssel des Eintrags als UUID"

-#: core/models.py:117
+#: core/models.py:124
 msgid "created on"
 msgstr "erstellt am"

-#: core/models.py:118
+#: core/models.py:125
 msgid "date and time at which a record was created"
 msgstr "Datum und Uhrzeit der Erstellung eines Eintrags"

-#: core/models.py:123
+#: core/models.py:130
 msgid "updated on"
 msgstr "aktualisiert am"

-#: core/models.py:124
+#: core/models.py:131
 msgid "date and time at which a record was last updated"
 msgstr "Datum und Uhrzeit der letzten Aktualisierung eines Eintrags"

-#: core/models.py:144
+#: core/models.py:151
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -198,11 +228,11 @@ msgstr ""
 "Geben Sie einen gültigen Sub ein. Dieser Wert darf nur Buchstaben, Zahlen "
 "und die Zeichen @/./+/-/_ enthalten."

-#: core/models.py:150
+#: core/models.py:157
 msgid "sub"
 msgstr "Sub"

-#: core/models.py:152
+#: core/models.py:159
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -210,55 +240,55 @@ msgstr ""
 "Optional für ausstehende Benutzer; erforderlich nach Kontoaktivierung. "
 "Maximal 255 Zeichen. Nur Buchstaben, Zahlen und @/./+/-/_ Zeichen erlaubt."

-#: core/models.py:161
+#: core/models.py:168
 msgid "identity email address"
 msgstr "Identitäts-E-Mail-Adresse"

-#: core/models.py:166
+#: core/models.py:173
 msgid "admin email address"
 msgstr "Administrator-E-Mail-Adresse"

-#: core/models.py:168
+#: core/models.py:175
 msgid "full name"
 msgstr "Vollständiger Name"

-#: core/models.py:170
+#: core/models.py:177
 msgid "short name"
 msgstr "Kurzname"

-#: core/models.py:176
+#: core/models.py:183
 msgid "language"
 msgstr "Sprache"

-#: core/models.py:177
+#: core/models.py:184
 msgid "The language in which the user wants to see the interface."
 msgstr "Die Sprache, in der der Benutzer die Oberfläche sehen möchte."

-#: core/models.py:183
+#: core/models.py:190
 msgid "The timezone in which the user wants to see times."
 msgstr "Die Zeitzone, in der der Benutzer die Zeiten sehen möchte."

-#: core/models.py:186
+#: core/models.py:193
 msgid "device"
 msgstr "Gerät"

-#: core/models.py:188
+#: core/models.py:195
 msgid "Whether the user is a device or a real user."
 msgstr "Ob es sich um ein Gerät oder einen echten Benutzer handelt."

-#: core/models.py:191
+#: core/models.py:198
 msgid "staff status"
 msgstr "Mitarbeiterstatus"

-#: core/models.py:193
+#: core/models.py:200
 msgid "Whether the user can log into this admin site."
 msgstr "Ob der Benutzer sich bei dieser Admin-Seite anmelden kann."

-#: core/models.py:196
+#: core/models.py:203
 msgid "active"
 msgstr "aktiv"

-#: core/models.py:199
+#: core/models.py:206
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -266,66 +296,66 @@ msgstr ""
 "Ob dieser Benutzer als aktiv behandelt werden soll. Deaktivieren Sie dies "
 "anstelle des Löschens des Kontos."

-#: core/models.py:212
+#: core/models.py:219
 msgid "user"
 msgstr "Benutzer"

-#: core/models.py:213
+#: core/models.py:220
 msgid "users"
 msgstr "Benutzer"

-#: core/models.py:272
+#: core/models.py:286
 msgid "Resource"
 msgstr "Ressource"

-#: core/models.py:273
+#: core/models.py:287
 msgid "Resources"
 msgstr "Ressourcen"

-#: core/models.py:331
+#: core/models.py:345
 msgid "Resource access"
 msgstr "Ressourcenzugriff"

-#: core/models.py:332
+#: core/models.py:346
 msgid "Resource accesses"
 msgstr "Ressourcenzugriffe"

-#: core/models.py:338
+#: core/models.py:352
 msgid "Resource access with this User and Resource already exists."
 msgstr ""
 "Ein Ressourcenzugriff mit diesem Benutzer und dieser Ressource existiert "
 "bereits."

-#: core/models.py:394
+#: core/models.py:409
 msgid "Visio room configuration"
 msgstr "Visio-Raumkonfiguration"

-#: core/models.py:395
+#: core/models.py:410
 msgid "Values for Visio parameters to configure the room."
 msgstr "Werte für Visio-Parameter zur Konfiguration des Raums."

-#: core/models.py:402
+#: core/models.py:417
 msgid "Room PIN code"
 msgstr "PIN-Code für den Raum"

-#: core/models.py:403
+#: core/models.py:418
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Eindeutiger n-stelliger Code, der diesen Raum im Telephonmodus identifiziert."

-#: core/models.py:409 core/models.py:563
+#: core/models.py:424 core/models.py:578
 msgid "Room"
 msgstr "Raum"

-#: core/models.py:410
+#: core/models.py:425
 msgid "Rooms"
 msgstr "Räume"

-#: core/models.py:574
+#: core/models.py:589
 msgid "Worker ID"
 msgstr "Worker-ID"

-#: core/models.py:576
+#: core/models.py:591
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -334,141 +364,153 @@ msgstr ""
 "erhalten, auch wenn der Worker stoppt, was ein einfaches Nachverfolgen "
 "ermöglicht."

-#: core/models.py:584
+#: core/models.py:599
 msgid "Recording mode"
 msgstr "Aufzeichnungsmodus"

-#: core/models.py:585
+#: core/models.py:600
 msgid "Defines the mode of recording being called."
 msgstr "Definiert den aufgerufenen Aufzeichnungsmodus."

-#: core/models.py:590 core/models.py:591
+#: core/models.py:605 core/models.py:606
 msgid "Recording options"
 msgstr "Aufnahmeoptionen"

-#: core/models.py:597
+#: core/models.py:613
+msgid "External Process ID"
+msgstr "External Process ID"
+
+#: core/models.py:614
+msgid "ID of the external process associated with the recording."
+msgstr "ID des externen Prozesses, der mit der Aufzeichnung verknüpft ist"
+
+#: core/models.py:620
 msgid "Recording"
 msgstr "Aufzeichnung"

-#: core/models.py:598
+#: core/models.py:621
 msgid "Recordings"
 msgstr "Aufzeichnungen"

-#: core/models.py:706
+#: core/models.py:731
 msgid "Recording/user relation"
 msgstr "Beziehung Aufzeichnung/Benutzer"

-#: core/models.py:707
+#: core/models.py:732
 msgid "Recording/user relations"
 msgstr "Beziehungen Aufzeichnung/Benutzer"

-#: core/models.py:713
+#: core/models.py:738
 msgid "This user is already in this recording."
 msgstr "Dieser Benutzer ist bereits Teil dieser Aufzeichnung."

-#: core/models.py:719
+#: core/models.py:744
 msgid "This team is already in this recording."
 msgstr "Dieses Team ist bereits Teil dieser Aufzeichnung."

-#: core/models.py:725
+#: core/models.py:750
 msgid "Either user or team must be set, not both."
 msgstr "Entweder Benutzer oder Team muss festgelegt werden, nicht beides."

-#: core/models.py:742
+#: core/models.py:767
 msgid "Create rooms"
 msgstr "Räume erstellen"

-#: core/models.py:743
+#: core/models.py:768
 msgid "List rooms"
 msgstr "Räume auflisten"

-#: core/models.py:744
+#: core/models.py:769
 msgid "Retrieve room details"
 msgstr "Raumdetails abrufen"

-#: core/models.py:745
+#: core/models.py:770
 msgid "Update rooms"
 msgstr "Räume aktualisieren"

-#: core/models.py:746
+#: core/models.py:771
 msgid "Delete rooms"
 msgstr "Räume löschen"

-#: core/models.py:759
+#: core/models.py:784
 msgid "Application name"
 msgstr "Anwendungsname"

-#: core/models.py:760
+#: core/models.py:785
 msgid "Descriptive name for this application."
 msgstr "Beschreibender Name für diese Anwendung."

-#: core/models.py:770
+#: core/models.py:795
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Beim Speichern gehasht. Jetzt kopieren, wenn dies ein neues Geheimnis ist."

-#: core/models.py:781
+#: core/models.py:806
 msgid "Application"
 msgstr "Anwendung"

-#: core/models.py:782
+#: core/models.py:807
 msgid "Applications"
 msgstr "Anwendungen"

-#: core/models.py:805
+#: core/models.py:830
 msgid "Enter a valid domain"
 msgstr "Geben Sie eine gültige Domain ein"

-#: core/models.py:808
+#: core/models.py:833
 msgid "Domain"
 msgstr "Domain"

-#: core/models.py:809
+#: core/models.py:834
 msgid "Email domain this application can act on behalf of."
 msgstr "E-Mail-Domain, im Namen der diese Anwendung handeln kann."

-#: core/models.py:821
+#: core/models.py:846
 msgid "Application domain"
 msgstr "Anwendungsdomain"

-#: core/models.py:822
+#: core/models.py:847
 msgid "Application domains"
 msgstr "Anwendungsdomains"

-#: core/models.py:840
+#: core/models.py:865
 msgid "Pending"
 msgstr "Ausstehend"

-#: core/models.py:848
+#: core/models.py:866
+msgid "Analyzing"
+msgstr ""
+
+#: core/models.py:873
 msgid "Ready"
 msgstr "Bereit"

-#: core/models.py:854
+#: core/models.py:879
 msgid "Background image"
 msgstr "Hintergrundbild"

-#: core/models.py:866
+#: core/models.py:891
 msgid "title"
 msgstr "Titel"

-#: core/models.py:890
+#: core/models.py:915
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr ""
 "Informationen zur Malware-Erkennung, wenn der Analyse-Status unsicher ist."

-#: core/models.py:895
+#: core/models.py:920
 msgid "File"
 msgstr "Datei"

-#: core/models.py:896
+#: core/models.py:921
 msgid "Files"
 msgstr "Dateien"

-#: core/models.py:1000
+#: core/models.py:1041
 msgid "This file is already hard deleted."
 msgstr "Diese Datei wurde bereits endgültig gelöscht."

-#: core/models.py:1010
+#: core/models.py:1051
 #, fuzzy
 #| msgid "To hard delete a file, it must first be soft deleted."
 msgid "To hard delete a file, it must first be soft deleted."
@@ -476,10 +518,20 @@ msgstr ""
 "Um eine Datei endgültig zu löschen, muss sie zuvor weich gelöscht worden "
 "sein."

-#: core/recording/event/notification.py:116
+#: core/recording/event/notification.py:123
 msgid "Your recording is ready"
 msgstr "Ihre Aufzeichnung ist bereit"

+#: core/recording/event/notification.py:194
+msgid "Transcription"
+msgstr "Transkription"
+
+#: core/recording/event/notification.py:204
+#, python-brace-format
+msgid "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+msgstr ""
+"Besprechung \"{room}\" am {room_recording_date} um {room_recording_time}"
+
 #: core/services/invitation.py:44
 #, python-brace-format
 msgid "Video call in progress: {sender.email} is waiting for you to connect"
@@ -575,7 +627,7 @@ msgid "To keep this recording permanently:"
 msgstr "So speichern Sie diese Aufzeichnung dauerhaft:"

 #: core/templates/mail/html/screen_recording.html:208
-#: core/templates/mail/text/screen_recording.txt:13
+#, python-format
 msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Klicken Sie auf den Link „<a href=\"%(link)s\">Öffnen</a>\" unten "

@@ -604,18 +656,24 @@ msgstr ""
 " Wenn Sie Fragen haben oder Unterstützung benötigen, wenden Sie sich bitte "
 "an unser Support-Team unter %(support_email)s. "

-#: meet/settings.py:223
+#: core/templates/mail/text/screen_recording.txt:13
+#, fuzzy, python-format
+#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+msgid "Click the \"Open [%(link)s]\" link below "
+msgstr "Klicken Sie auf den Link „<a href=\"%(link)s\">Öffnen</a>\" unten "
+
+#: meet/settings.py:228
 msgid "English"
 msgstr "Englisch"

-#: meet/settings.py:224
+#: meet/settings.py:229
 msgid "French"
 msgstr "Französisch"

-#: meet/settings.py:225
+#: meet/settings.py:230
 msgid "Dutch"
 msgstr "Niederländisch"

-#: meet/settings.py:226
+#: meet/settings.py:231
 msgid "German"
 msgstr "Deutsch"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-21 14:09+0000\n"
+"POT-Creation-Date: 2026-07-02 10:47+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,70 +17,92 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:29
+#: core/admin.py:67
 msgid "Personal info"
 msgstr "Personal info"

-#: core/admin.py:42
+#: core/admin.py:80
 msgid "Permissions"
 msgstr "Permissions"

-#: core/admin.py:54
+#: core/admin.py:92
 msgid "Important dates"
 msgstr "Important dates"

-#: core/admin.py:132 core/admin.py:275
+#: core/admin.py:206
+msgid "Content"
+msgstr ""
+
+#: core/admin.py:217
+#, fuzzy
+#| msgid "Delete rooms"
+msgid "Deletion"
+msgstr "Delete rooms"
+
+#: core/admin.py:226
+msgid "Derived info"
+msgstr ""
+
+#: core/admin.py:237
+msgid "Timestamps"
+msgstr ""
+
+#: core/admin.py:240
+msgid "File preview"
+msgstr ""
+
+#: core/admin.py:300 core/admin.py:443
 msgid "No owner"
 msgstr "No owner"

-#: core/admin.py:135 core/admin.py:278
+#: core/admin.py:303 core/admin.py:446
 msgid "Multiple owners"
 msgstr "Multiple owners"

-#: core/admin.py:148
+#: core/admin.py:316
 msgid "Resend notification to external service"
 msgstr "Resend notification to external service"

-#: core/admin.py:171
+#: core/admin.py:339
 #, python-format
 msgid "Failed to notify for recording %(id)s"
 msgstr "Failed to notify for recording %(id)s"

-#: core/admin.py:179
+#: core/admin.py:347
 #, python-format
 msgid "Failed to notify for recording %(id)s: %(error)s"
 msgstr "Failed to notify for recording %(id)s: %(error)s"

-#: core/admin.py:187
+#: core/admin.py:355
 #, python-format
 msgid "Successfully sent notifications for %(count)s recording(s)."
 msgstr "Successfully sent notifications for %(count)s recording(s)."

-#: core/admin.py:195
+#: core/admin.py:363
 #, python-format
 msgid "Skipped %(count)s expired recording(s)."
 msgstr "Skipped %(count)s expired recording(s)."

-#: core/admin.py:200
+#: core/admin.py:368
 msgid "Mark selected recordings as 'Failed to Stop'"
 msgstr "Mark selected recordings as 'Failed to Stop'"

-#: core/admin.py:218
+#: core/admin.py:386
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgstr "%(count)s recording(s) successfully marked as 'Failed to Stop'."

-#: core/admin.py:226
+#: core/admin.py:394
 #, fuzzy, python-format
 #| msgid "Skipped %(count)s expired recording(s)."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "Skipped %(count)s expired recording(s)."

-#: core/admin.py:342
+#: core/admin.py:510
 msgid "No scopes"
 msgstr "No scopes"

-#: core/admin.py:344
+#: core/admin.py:512
 msgid "Scopes"
 msgstr "Scopes"

@@ -88,15 +110,15 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Creator is me"

-#: core/api/serializers.py:88
+#: core/api/serializers.py:89
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr "You must be administrator or owner of a room to add accesses to it."

-#: core/api/serializers.py:509
+#: core/api/serializers.py:534
 msgid "This file extension is not allowed."
 msgstr "This file extension is not allowed."

-#: core/api/viewsets.py:1090
+#: core/api/viewsets.py:1222
 msgid "You have reached the maximum number of files for this type."
 msgstr "You have reached the maximum number of files for this type."

@@ -144,51 +166,59 @@ msgstr "Failed to Stop"
 msgid "Notification succeeded"
 msgstr "Notification succeeded"

-#: core/models.py:89
+#: core/models.py:65
+msgid "External process successful"
+msgstr "External process successful"
+
+#: core/models.py:67
+msgid "External process failed"
+msgstr "External process failed"
+
+#: core/models.py:96
 msgid "SCREEN_RECORDING"
 msgstr "SCREEN_RECORDING"

-#: core/models.py:90
+#: core/models.py:97
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPT"

-#: core/models.py:96
+#: core/models.py:103
 msgid "Public Access"
 msgstr "Public Access"

-#: core/models.py:97
+#: core/models.py:104
 msgid "Trusted Access"
 msgstr "Trusted Access"

-#: core/models.py:98
+#: core/models.py:105
 msgid "Restricted Access"
 msgstr "Restricted Access"

-#: core/models.py:110
+#: core/models.py:117
 msgid "id"
 msgstr "id"

-#: core/models.py:111
+#: core/models.py:118
 msgid "primary key for the record as UUID"
 msgstr "primary key for the record as UUID"

-#: core/models.py:117
+#: core/models.py:124
 msgid "created on"
 msgstr "created on"

-#: core/models.py:118
+#: core/models.py:125
 msgid "date and time at which a record was created"
 msgstr "date and time at which a record was created"

-#: core/models.py:123
+#: core/models.py:130
 msgid "updated on"
 msgstr "updated on"

-#: core/models.py:124
+#: core/models.py:131
 msgid "date and time at which a record was last updated"
 msgstr "date and time at which a record was last updated"

-#: core/models.py:144
+#: core/models.py:151
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -196,11 +226,11 @@ msgstr ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."

-#: core/models.py:150
+#: core/models.py:157
 msgid "sub"
 msgstr "sub"

-#: core/models.py:152
+#: core/models.py:159
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -208,55 +238,55 @@ msgstr ""
 "Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
 "characters only."

-#: core/models.py:161
+#: core/models.py:168
 msgid "identity email address"
 msgstr "identity email address"

-#: core/models.py:166
+#: core/models.py:173
 msgid "admin email address"
 msgstr "admin email address"

-#: core/models.py:168
+#: core/models.py:175
 msgid "full name"
 msgstr "full name"

-#: core/models.py:170
+#: core/models.py:177
 msgid "short name"
 msgstr "short name"

-#: core/models.py:176
+#: core/models.py:183
 msgid "language"
 msgstr "language"

-#: core/models.py:177
+#: core/models.py:184
 msgid "The language in which the user wants to see the interface."
 msgstr "The language in which the user wants to see the interface."

-#: core/models.py:183
+#: core/models.py:190
 msgid "The timezone in which the user wants to see times."
 msgstr "The timezone in which the user wants to see times."

-#: core/models.py:186
+#: core/models.py:193
 msgid "device"
 msgstr "device"

-#: core/models.py:188
+#: core/models.py:195
 msgid "Whether the user is a device or a real user."
 msgstr "Whether the user is a device or a real user."

-#: core/models.py:191
+#: core/models.py:198
 msgid "staff status"
 msgstr "staff status"

-#: core/models.py:193
+#: core/models.py:200
 msgid "Whether the user can log into this admin site."
 msgstr "Whether the user can log into this admin site."

-#: core/models.py:196
+#: core/models.py:203
 msgid "active"
 msgstr "active"

-#: core/models.py:199
+#: core/models.py:206
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -264,63 +294,63 @@ msgstr ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."

-#: core/models.py:212
+#: core/models.py:219
 msgid "user"
 msgstr "user"

-#: core/models.py:213
+#: core/models.py:220
 msgid "users"
 msgstr "users"

-#: core/models.py:272
+#: core/models.py:286
 msgid "Resource"
 msgstr "Resource"

-#: core/models.py:273
+#: core/models.py:287
 msgid "Resources"
 msgstr "Resources"

-#: core/models.py:331
+#: core/models.py:345
 msgid "Resource access"
 msgstr "Resource access"

-#: core/models.py:332
+#: core/models.py:346
 msgid "Resource accesses"
 msgstr "Resource accesses"

-#: core/models.py:338
+#: core/models.py:352
 msgid "Resource access with this User and Resource already exists."
 msgstr "Resource access with this User and Resource already exists."

-#: core/models.py:394
+#: core/models.py:409
 msgid "Visio room configuration"
 msgstr "Visio room configuration"

-#: core/models.py:395
+#: core/models.py:410
 msgid "Values for Visio parameters to configure the room."
 msgstr "Values for Visio parameters to configure the room."

-#: core/models.py:402
+#: core/models.py:417
 msgid "Room PIN code"
 msgstr "Room PIN code"

-#: core/models.py:403
+#: core/models.py:418
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr "Unique n-digit code that identifies this room in telephony mode."

-#: core/models.py:409 core/models.py:563
+#: core/models.py:424 core/models.py:578
 msgid "Room"
 msgstr "Room"

-#: core/models.py:410
+#: core/models.py:425
 msgid "Rooms"
 msgstr "Rooms"

-#: core/models.py:574
+#: core/models.py:589
 msgid "Worker ID"
 msgstr "Worker ID"

-#: core/models.py:576
+#: core/models.py:591
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -328,154 +358,175 @@ msgstr ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."

-#: core/models.py:584
+#: core/models.py:599
 msgid "Recording mode"
 msgstr "Recording mode"

-#: core/models.py:585
+#: core/models.py:600
 msgid "Defines the mode of recording being called."
 msgstr "Defines the mode of recording being called."

-#: core/models.py:590 core/models.py:591
+#: core/models.py:605 core/models.py:606
 msgid "Recording options"
 msgstr "Recording options"

-#: core/models.py:597
+#: core/models.py:613
+msgid "External Process ID"
+msgstr "External Process ID"
+
+#: core/models.py:614
+msgid "ID of the external process associated with the recording."
+msgstr "ID of the external process associated with the recording."
+
+#: core/models.py:620
 msgid "Recording"
 msgstr "Recording"

-#: core/models.py:598
+#: core/models.py:621
 msgid "Recordings"
 msgstr "Recordings"

-#: core/models.py:706
+#: core/models.py:731
 msgid "Recording/user relation"
 msgstr "Recording/user relation"

-#: core/models.py:707
+#: core/models.py:732
 msgid "Recording/user relations"
 msgstr "Recording/user relations"

-#: core/models.py:713
+#: core/models.py:738
 msgid "This user is already in this recording."
 msgstr "This user is already in this recording."

-#: core/models.py:719
+#: core/models.py:744
 msgid "This team is already in this recording."
 msgstr "This team is already in this recording."

-#: core/models.py:725
+#: core/models.py:750
 msgid "Either user or team must be set, not both."
 msgstr "Either user or team must be set, not both."

-#: core/models.py:742
+#: core/models.py:767
 #, fuzzy
 #| msgid "created on"
 msgid "Create rooms"
 msgstr "Create rooms"

-#: core/models.py:743
+#: core/models.py:768
 msgid "List rooms"
 msgstr "List rooms"

-#: core/models.py:744
+#: core/models.py:769
 msgid "Retrieve room details"
 msgstr "Retrieve room details"

-#: core/models.py:745
+#: core/models.py:770
 #, fuzzy
 #| msgid "updated on"
 msgid "Update rooms"
 msgstr "Update rooms"

-#: core/models.py:746
+#: core/models.py:771
 msgid "Delete rooms"
 msgstr "Delete rooms"

-#: core/models.py:759
+#: core/models.py:784
 msgid "Application name"
 msgstr "Application name"

-#: core/models.py:760
+#: core/models.py:785
 msgid "Descriptive name for this application."
 msgstr "Descriptive name for this application."

-#: core/models.py:770
+#: core/models.py:795
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr "Hashed on Save. Copy it now if this is a new secret."

-#: core/models.py:781
+#: core/models.py:806
 msgid "Application"
 msgstr "Application"

-#: core/models.py:782
+#: core/models.py:807
 msgid "Applications"
 msgstr "Applications"

-#: core/models.py:805
+#: core/models.py:830
 msgid "Enter a valid domain"
 msgstr "Enter a valid domain"

-#: core/models.py:808
+#: core/models.py:833
 msgid "Domain"
 msgstr "Domain"

-#: core/models.py:809
+#: core/models.py:834
 msgid "Email domain this application can act on behalf of."
 msgstr "Email domain this application can act on behalf of."

-#: core/models.py:821
+#: core/models.py:846
 msgid "Application domain"
 msgstr "Application domain"

-#: core/models.py:822
+#: core/models.py:847
 msgid "Application domains"
 msgstr "Application domains"

-#: core/models.py:840
+#: core/models.py:865
 #, fuzzy
 #| msgid "Recording"
 msgid "Pending"
 msgstr "Pending"

-#: core/models.py:848
+#: core/models.py:866
+msgid "Analyzing"
+msgstr ""
+
+#: core/models.py:873
 msgid "Ready"
 msgstr "Ready"

-#: core/models.py:854
+#: core/models.py:879
 msgid "Background image"
 msgstr "Background image"

-#: core/models.py:866
+#: core/models.py:891
 msgid "title"
 msgstr "title"

-#: core/models.py:890
+#: core/models.py:915
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr "Malware detection info when the analysis status is unsafe."

-#: core/models.py:895
+#: core/models.py:920
 msgid "File"
 msgstr "File"

-#: core/models.py:896
+#: core/models.py:921
 msgid "Files"
 msgstr "Files"

-#: core/models.py:1000
+#: core/models.py:1041
 #, fuzzy
 #| msgid "This user is already in this recording."
 msgid "This file is already hard deleted."
 msgstr "This file is already hard deleted."

-#: core/models.py:1010
+#: core/models.py:1051
 msgid "To hard delete a file, it must first be soft deleted."
 msgstr "To hard delete a file, it must first be soft deleted."

-#: core/recording/event/notification.py:116
+#: core/recording/event/notification.py:123
 msgid "Your recording is ready"
 msgstr "Your recording is ready"

+#: core/recording/event/notification.py:194
+msgid "Transcription"
+msgstr "Transcription"
+
+#: core/recording/event/notification.py:204
+#, python-brace-format
+msgid "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+msgstr "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+
 #: core/services/invitation.py:44
 #, python-brace-format
 msgid "Video call in progress: {sender.email} is waiting for you to connect"
@@ -571,7 +622,7 @@ msgid "To keep this recording permanently:"
 msgstr "To keep this recording permanently:"

 #: core/templates/mail/html/screen_recording.html:208
-#: core/templates/mail/text/screen_recording.txt:13
+#, python-format
 msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Click the \"<a href=\"%(link)s\">Open</a>\" link below "

@@ -600,18 +651,24 @@ msgstr ""
 " If you have any questions or need assistance, please contact our support "
 "team at %(support_email)s. "

-#: meet/settings.py:223
+#: core/templates/mail/text/screen_recording.txt:13
+#, fuzzy, python-format
+#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+msgid "Click the \"Open [%(link)s]\" link below "
+msgstr "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+
+#: meet/settings.py:228
 msgid "English"
 msgstr "English"

-#: meet/settings.py:224
+#: meet/settings.py:229
 msgid "French"
 msgstr "French"

-#: meet/settings.py:225
+#: meet/settings.py:230
 msgid "Dutch"
 msgstr "Dutch"

-#: meet/settings.py:226
+#: meet/settings.py:231
 msgid "German"
 msgstr "German"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-21 14:09+0000\n"
+"POT-Creation-Date: 2026-07-02 10:47+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: antoine.lebaud@mail.numerique.gouv.fr\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,71 +17,93 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:29
+#: core/admin.py:67
 msgid "Personal info"
 msgstr "Informations personnelles"

-#: core/admin.py:42
+#: core/admin.py:80
 msgid "Permissions"
 msgstr "Permissions"

-#: core/admin.py:54
+#: core/admin.py:92
 msgid "Important dates"
 msgstr "Dates importantes"

-#: core/admin.py:132 core/admin.py:275
+#: core/admin.py:206
+msgid "Content"
+msgstr ""
+
+#: core/admin.py:217
+#, fuzzy
+#| msgid "Delete rooms"
+msgid "Deletion"
+msgstr "Supprimer les salles"
+
+#: core/admin.py:226
+msgid "Derived info"
+msgstr ""
+
+#: core/admin.py:237
+msgid "Timestamps"
+msgstr ""
+
+#: core/admin.py:240
+msgid "File preview"
+msgstr ""
+
+#: core/admin.py:300 core/admin.py:443
 msgid "No owner"
 msgstr "Pas de propriétaire"

-#: core/admin.py:135 core/admin.py:278
+#: core/admin.py:303 core/admin.py:446
 msgid "Multiple owners"
 msgstr "Plusieurs propriétaires"

-#: core/admin.py:148
+#: core/admin.py:316
 msgid "Resend notification to external service"
 msgstr "Renvoyer la notification au service externe"

-#: core/admin.py:171
+#: core/admin.py:339
 #, python-format
 msgid "Failed to notify for recording %(id)s"
 msgstr "Échec de la notification pour l’enregistrement %(id)s"

-#: core/admin.py:179
+#: core/admin.py:347
 #, python-format
 msgid "Failed to notify for recording %(id)s: %(error)s"
 msgstr "Échec de la notification pour l’enregistrement %(id)s : %(error)s"

-#: core/admin.py:187
+#: core/admin.py:355
 #, python-format
 msgid "Successfully sent notifications for %(count)s recording(s)."
 msgstr "Notifications envoyées avec succès pour %(count)s enregistrement(s)."

-#: core/admin.py:195
+#: core/admin.py:363
 #, python-format
 msgid "Skipped %(count)s expired recording(s)."
 msgstr "%(count)s enregistrement(s) expiré(s) ignoré(s)."

-#: core/admin.py:200
+#: core/admin.py:368
 msgid "Mark selected recordings as 'Failed to Stop'"
 msgstr "Marquer les enregistrements sélectionnés comme « Échec d’arrêt »"

-#: core/admin.py:218
+#: core/admin.py:386
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgstr ""
 "%(count)s enregistrement(s) marqué(s) avec succès comme « Échec d’arrêt »."

-#: core/admin.py:226
+#: core/admin.py:394
 #, fuzzy, python-format
 #| msgid "Skipped %(count)s expired recording(s)."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s enregistrement(s) avec un statut inéligible ignoré(s)."

-#: core/admin.py:342
+#: core/admin.py:510
 msgid "No scopes"
 msgstr "Aucun scopes"

-#: core/admin.py:344
+#: core/admin.py:512
 msgid "Scopes"
 msgstr "Scopes"

@@ -89,17 +111,17 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Je suis le créateur"

-#: core/api/serializers.py:88
+#: core/api/serializers.py:89
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Vous devez être administrateur ou propriétaire d'une salle pour y ajouter "
 "des accès."

-#: core/api/serializers.py:509
+#: core/api/serializers.py:534
 msgid "This file extension is not allowed."
 msgstr "Cette extension n'est pas autorisée"

-#: core/api/viewsets.py:1090
+#: core/api/viewsets.py:1222
 msgid "You have reached the maximum number of files for this type."
 msgstr "Vous avez atteint le nombre maximum de fichiers de ce type"

@@ -147,53 +169,61 @@ msgstr "Échec à l'arrêt"
 msgid "Notification succeeded"
 msgstr "Notification réussie"

-#: core/models.py:89
+#: core/models.py:65
+msgid "External process successful"
+msgstr "Traitement externe : succès"
+
+#: core/models.py:67
+msgid "External process failed"
+msgstr "Traitement externe : erreur"
+
+#: core/models.py:96
 msgid "SCREEN_RECORDING"
 msgstr "ENREGISTREMENT_ÉCRAN"

-#: core/models.py:90
+#: core/models.py:97
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPTION"

-#: core/models.py:96
+#: core/models.py:103
 msgid "Public Access"
 msgstr "Accès public"

-#: core/models.py:97
+#: core/models.py:104
 msgid "Trusted Access"
 msgstr "Accès de confiance"

-#: core/models.py:98
+#: core/models.py:105
 msgid "Restricted Access"
 msgstr "Accès restreint"

-#: core/models.py:110
+#: core/models.py:117
 msgid "id"
 msgstr "id"

-#: core/models.py:111
+#: core/models.py:118
 msgid "primary key for the record as UUID"
 msgstr "clé primaire pour l'enregistrement sous forme d'UUID"

-#: core/models.py:117
+#: core/models.py:124
 msgid "created on"
 msgstr "créé le"

-#: core/models.py:118
+#: core/models.py:125
 msgid "date and time at which a record was created"
 msgstr "date et heure auxquelles un enregistrement a été créé"

-#: core/models.py:123
+#: core/models.py:130
 msgid "updated on"
 msgstr "mis à jour le"

-#: core/models.py:124
+#: core/models.py:131
 msgid "date and time at which a record was last updated"
 msgstr ""
 "date et heure auxquelles un enregistrement a été mis à jour pour la dernière "
 "fois"

-#: core/models.py:144
+#: core/models.py:151
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -201,11 +231,11 @@ msgstr ""
 "Entrez un sub valide. Cette valeur ne peut contenir que des lettres, des "
 "chiffres et les caractères @/./+/-/_."

-#: core/models.py:150
+#: core/models.py:157
 msgid "sub"
 msgstr "sub"

-#: core/models.py:152
+#: core/models.py:159
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -213,55 +243,55 @@ msgstr ""
 "Optionnel pour les utilisateurs en attente ; requis lors de l'activation du "
 "compte. 255 caractères maximum. Lettres, chiffres et @/./+/-/_ uniquement."

-#: core/models.py:161
+#: core/models.py:168
 msgid "identity email address"
 msgstr "adresse e-mail d'identité"

-#: core/models.py:166
+#: core/models.py:173
 msgid "admin email address"
 msgstr "adresse e-mail d'administrateur"

-#: core/models.py:168
+#: core/models.py:175
 msgid "full name"
 msgstr "nom complet"

-#: core/models.py:170
+#: core/models.py:177
 msgid "short name"
 msgstr "nom court"

-#: core/models.py:176
+#: core/models.py:183
 msgid "language"
 msgstr "langue"

-#: core/models.py:177
+#: core/models.py:184
 msgid "The language in which the user wants to see the interface."
 msgstr "La langue dans laquelle l'utilisateur souhaite voir l'interface."

-#: core/models.py:183
+#: core/models.py:190
 msgid "The timezone in which the user wants to see times."
 msgstr "Le fuseau horaire dans lequel l'utilisateur souhaite voir les heures."

-#: core/models.py:186
+#: core/models.py:193
 msgid "device"
 msgstr "appareil"

-#: core/models.py:188
+#: core/models.py:195
 msgid "Whether the user is a device or a real user."
 msgstr "Si l'utilisateur est un appareil ou un utilisateur réel."

-#: core/models.py:191
+#: core/models.py:198
 msgid "staff status"
 msgstr "statut du personnel"

-#: core/models.py:193
+#: core/models.py:200
 msgid "Whether the user can log into this admin site."
 msgstr "Si l'utilisateur peut se connecter à ce site d'administration."

-#: core/models.py:196
+#: core/models.py:203
 msgid "active"
 msgstr "actif"

-#: core/models.py:199
+#: core/models.py:206
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -269,65 +299,65 @@ msgstr ""
 "Si cet utilisateur doit être traité comme actif. Désélectionnez cette option "
 "au lieu de supprimer des comptes."

-#: core/models.py:212
+#: core/models.py:219
 msgid "user"
 msgstr "utilisateur"

-#: core/models.py:213
+#: core/models.py:220
 msgid "users"
 msgstr "utilisateurs"

-#: core/models.py:272
+#: core/models.py:286
 msgid "Resource"
 msgstr "Ressource"

-#: core/models.py:273
+#: core/models.py:287
 msgid "Resources"
 msgstr "Ressources"

-#: core/models.py:331
+#: core/models.py:345
 msgid "Resource access"
 msgstr "Accès aux ressources"

-#: core/models.py:332
+#: core/models.py:346
 msgid "Resource accesses"
 msgstr "Accès aux ressources"

-#: core/models.py:338
+#: core/models.py:352
 msgid "Resource access with this User and Resource already exists."
 msgstr ""
 "L'accès à la ressource avec cet utilisateur et cette ressource existe déjà."

-#: core/models.py:394
+#: core/models.py:409
 msgid "Visio room configuration"
 msgstr "Configuration de la salle de visioconférence"

-#: core/models.py:395
+#: core/models.py:410
 msgid "Values for Visio parameters to configure the room."
 msgstr "Valeurs des paramètres de visioconférence pour configurer la salle."

-#: core/models.py:402
+#: core/models.py:417
 msgid "Room PIN code"
 msgstr "Code PIN de la salle"

-#: core/models.py:403
+#: core/models.py:418
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Code unique à n chiffres qui identifie cette salle en mode téléphonique."

-#: core/models.py:409 core/models.py:563
+#: core/models.py:424 core/models.py:578
 msgid "Room"
 msgstr "Salle"

-#: core/models.py:410
+#: core/models.py:425
 msgid "Rooms"
 msgstr "Salles"

-#: core/models.py:574
+#: core/models.py:589
 msgid "Worker ID"
 msgstr "ID du Worker"

-#: core/models.py:576
+#: core/models.py:591
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -335,153 +365,174 @@ msgstr ""
 "Entrez un identifiant pour l'enregistrement du Worker. Cet identifiant est "
 "conservé même lorsque le Worker s'arrête, permettant un suivi facile."

-#: core/models.py:584
+#: core/models.py:599
 msgid "Recording mode"
 msgstr "Mode d'enregistrement"

-#: core/models.py:585
+#: core/models.py:600
 msgid "Defines the mode of recording being called."
 msgstr "Définit le mode d'enregistrement appelé."

-#: core/models.py:590 core/models.py:591
+#: core/models.py:605 core/models.py:606
 msgid "Recording options"
 msgstr "Options d'enregistrement"

-#: core/models.py:597
+#: core/models.py:613
+msgid "External Process ID"
+msgstr "ID Traitement externe"
+
+#: core/models.py:614
+msgid "ID of the external process associated with the recording."
+msgstr "ID du traitement externe associé avec l'enregistrement."
+
+#: core/models.py:620
 msgid "Recording"
 msgstr "Enregistrement"

-#: core/models.py:598
+#: core/models.py:621
 msgid "Recordings"
 msgstr "Enregistrements"

-#: core/models.py:706
+#: core/models.py:731
 msgid "Recording/user relation"
 msgstr "Relation enregistrement/utilisateur"

-#: core/models.py:707
+#: core/models.py:732
 msgid "Recording/user relations"
 msgstr "Relations enregistrement/utilisateur"

-#: core/models.py:713
+#: core/models.py:738
 msgid "This user is already in this recording."
 msgstr "Cet utilisateur est déjà dans cet enregistrement."

-#: core/models.py:719
+#: core/models.py:744
 msgid "This team is already in this recording."
 msgstr "Cette équipe est déjà dans cet enregistrement."

-#: core/models.py:725
+#: core/models.py:750
 msgid "Either user or team must be set, not both."
 msgstr "Soit l'utilisateur, soit l'équipe doit être défini, pas les deux."

-#: core/models.py:742
+#: core/models.py:767
 msgid "Create rooms"
 msgstr "Créer des salles"

-#: core/models.py:743
+#: core/models.py:768
 msgid "List rooms"
 msgstr "Lister les salles"

-#: core/models.py:744
+#: core/models.py:769
 msgid "Retrieve room details"
 msgstr "Afficher les détails d’une salle"

-#: core/models.py:745
+#: core/models.py:770
 msgid "Update rooms"
 msgstr "Mettre à jour les salles"

-#: core/models.py:746
+#: core/models.py:771
 msgid "Delete rooms"
 msgstr "Supprimer les salles"

-#: core/models.py:759
+#: core/models.py:784
 msgid "Application name"
 msgstr "Nom de l’application"

-#: core/models.py:760
+#: core/models.py:785
 msgid "Descriptive name for this application."
 msgstr "Nom descriptif de cette application."

-#: core/models.py:770
+#: core/models.py:795
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Haché lors de l’enregistrement. Copiez-le maintenant s’il s’agit d’un "
 "nouveau secret."

-#: core/models.py:781
+#: core/models.py:806
 msgid "Application"
 msgstr "Application"

-#: core/models.py:782
+#: core/models.py:807
 msgid "Applications"
 msgstr "Applications"

-#: core/models.py:805
+#: core/models.py:830
 msgid "Enter a valid domain"
 msgstr "Saisissez un domaine valide"

-#: core/models.py:808
+#: core/models.py:833
 msgid "Domain"
 msgstr "Domaine"

-#: core/models.py:809
+#: core/models.py:834
 msgid "Email domain this application can act on behalf of."
 msgstr "Domaine de messagerie au nom duquel cette application peut agir."

-#: core/models.py:821
+#: core/models.py:846
 msgid "Application domain"
 msgstr "Domaine d’application"

-#: core/models.py:822
+#: core/models.py:847
 msgid "Application domains"
 msgstr "Domaines d’application"

-#: core/models.py:840
+#: core/models.py:865
 msgid "Pending"
 msgstr "En attente"

-#: core/models.py:848
+#: core/models.py:866
+msgid "Analyzing"
+msgstr ""
+
+#: core/models.py:873
 msgid "Ready"
 msgstr "Prêt"

-#: core/models.py:854
+#: core/models.py:879
 msgid "Background image"
 msgstr "Image de fond"

-#: core/models.py:866
+#: core/models.py:891
 msgid "title"
 msgstr "Titre"

-#: core/models.py:890
+#: core/models.py:915
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr ""
 "Information concernant la détection de Malware cand le statut n'est pas sain"

-#: core/models.py:895
+#: core/models.py:920
 msgid "File"
 msgstr "Fichier"

-#: core/models.py:896
+#: core/models.py:921
 msgid "Files"
 msgstr "Fichiers"

-#: core/models.py:1000
+#: core/models.py:1041
 #, fuzzy
 #| msgid "This user is already in this recording."
 msgid "This file is already hard deleted."
 msgstr "Ce fichier a été supprimé."

-#: core/models.py:1010
+#: core/models.py:1051
 msgid "To hard delete a file, it must first be soft deleted."
 msgstr ""
 "Pour supprimer définitivement un fichier il doit d'abord avoir été marqué "
 "comme supprimé (soft delete)"

-#: core/recording/event/notification.py:116
+#: core/recording/event/notification.py:123
 msgid "Your recording is ready"
 msgstr "Votre enregistrement est prêt"

+#: core/recording/event/notification.py:194
+msgid "Transcription"
+msgstr "Transcription"
+
+#: core/recording/event/notification.py:204
+#, python-brace-format
+msgid "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+msgstr "Réunion \"{room}\" du {room_recording_date} à {room_recording_time}"
+
 #: core/services/invitation.py:44
 #, python-brace-format
 msgid "Video call in progress: {sender.email} is waiting for you to connect"
@@ -577,7 +628,7 @@ msgid "To keep this recording permanently:"
 msgstr "Pour conserver cet enregistrement de façon permanente :"

 #: core/templates/mail/html/screen_recording.html:208
-#: core/templates/mail/text/screen_recording.txt:13
+#, python-format
 msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Cliquez sur le lien \"<a href=\"%(link)s\">Ouvrir</a>\" ci-dessous "

@@ -606,18 +657,24 @@ msgstr ""
 " Si vous avez des questions ou besoin d'assistance, veuillez contacter notre "
 "équipe d'assistance à %(support_email)s. "

-#: meet/settings.py:223
+#: core/templates/mail/text/screen_recording.txt:13
+#, fuzzy, python-format
+#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+msgid "Click the \"Open [%(link)s]\" link below "
+msgstr "Cliquez sur le lien \"<a href=\"%(link)s\">Ouvrir</a>\" ci-dessous "
+
+#: meet/settings.py:228
 msgid "English"
 msgstr "Anglais"

-#: meet/settings.py:224
+#: meet/settings.py:229
 msgid "French"
 msgstr "Français"

-#: meet/settings.py:225
+#: meet/settings.py:230
 msgid "Dutch"
 msgstr "Néerlandais"

-#: meet/settings.py:226
+#: meet/settings.py:231
 msgid "German"
 msgstr "Allemand"
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-21 14:09+0000\n"
+"POT-Creation-Date: 2026-07-02 10:47+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,70 +17,92 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:29
+#: core/admin.py:67
 msgid "Personal info"
 msgstr "Persoonlijke informatie"

-#: core/admin.py:42
+#: core/admin.py:80
 msgid "Permissions"
 msgstr "Rechten"

-#: core/admin.py:54
+#: core/admin.py:92
 msgid "Important dates"
 msgstr "Belangrijke datums"

-#: core/admin.py:132 core/admin.py:275
+#: core/admin.py:206
+msgid "Content"
+msgstr ""
+
+#: core/admin.py:217
+#, fuzzy
+#| msgid "Delete rooms"
+msgid "Deletion"
+msgstr "Ruimtes verwijderen"
+
+#: core/admin.py:226
+msgid "Derived info"
+msgstr ""
+
+#: core/admin.py:237
+msgid "Timestamps"
+msgstr ""
+
+#: core/admin.py:240
+msgid "File preview"
+msgstr ""
+
+#: core/admin.py:300 core/admin.py:443
 msgid "No owner"
 msgstr "Geen eigenaar"

-#: core/admin.py:135 core/admin.py:278
+#: core/admin.py:303 core/admin.py:446
 msgid "Multiple owners"
 msgstr "Meerdere eigenaren"

-#: core/admin.py:148
+#: core/admin.py:316
 msgid "Resend notification to external service"
 msgstr "Melding opnieuw verzenden naar externe dienst"

-#: core/admin.py:171
+#: core/admin.py:339
 #, python-format
 msgid "Failed to notify for recording %(id)s"
 msgstr "Melding voor opname %(id)s mislukt"

-#: core/admin.py:179
+#: core/admin.py:347
 #, python-format
 msgid "Failed to notify for recording %(id)s: %(error)s"
 msgstr "Melding voor opname %(id)s mislukt: %(error)s"

-#: core/admin.py:187
+#: core/admin.py:355
 #, python-format
 msgid "Successfully sent notifications for %(count)s recording(s)."
 msgstr "Meldingen succesvol verzonden voor %(count)s opname(n)."

-#: core/admin.py:195
+#: core/admin.py:363
 #, python-format
 msgid "Skipped %(count)s expired recording(s)."
 msgstr "%(count)s verlopen opname(n) overgeslagen."

-#: core/admin.py:200
+#: core/admin.py:368
 msgid "Mark selected recordings as 'Failed to Stop'"
 msgstr "Geselecteerde opnames markeren als 'Mislukt bij stoppen'"

-#: core/admin.py:218
+#: core/admin.py:386
 #, python-format
 msgid "%(count)s recording(s) successfully marked as 'Failed to Stop'."
 msgstr "%(count)s opname(s) succesvol gemarkeerd als 'Mislukt bij stoppen'."

-#: core/admin.py:226
+#: core/admin.py:394
 #, fuzzy, python-format
 #| msgid "Skipped %(count)s expired recording(s)."
 msgid "Skipped %(count)s recording(s) with an ineligible status."
 msgstr "%(count)s opname(s) met een niet-toegestane status overgeslagen."

-#: core/admin.py:342
+#: core/admin.py:510
 msgid "No scopes"
 msgstr "Geen scopes"

-#: core/admin.py:344
+#: core/admin.py:512
 msgid "Scopes"
 msgstr "Scopes"

@@ -88,16 +110,16 @@ msgstr "Scopes"
 msgid "Creator is me"
 msgstr "Maker ben ik"

-#: core/api/serializers.py:88
+#: core/api/serializers.py:89
 msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""
 "Je moet beheerder of eigenaar van een ruimte zijn om toegang toe te voegen."

-#: core/api/serializers.py:509
+#: core/api/serializers.py:534
 msgid "This file extension is not allowed."
 msgstr "Deze bestandsextensie is niet toegestaan."

-#: core/api/viewsets.py:1090
+#: core/api/viewsets.py:1222
 msgid "You have reached the maximum number of files for this type."
 msgstr "Het maximale aantal bestanden voor dit type is bereikt."

@@ -145,51 +167,59 @@ msgstr "Stoppen mislukt"
 msgid "Notification succeeded"
 msgstr "Notificatie geslaagd"

-#: core/models.py:89
+#: core/models.py:65
+msgid "External process successful"
+msgstr "Externe procedure succesvol"
+
+#: core/models.py:67
+msgid "External process failed"
+msgstr "Het externe proces is mislukt."
+
+#: core/models.py:96
 msgid "SCREEN_RECORDING"
 msgstr "SCHERM_OPNAME"

-#: core/models.py:90
+#: core/models.py:97
 msgid "TRANSCRIPT"
 msgstr "TRANSCRIPT"

-#: core/models.py:96
+#: core/models.py:103
 msgid "Public Access"
 msgstr "Openbare toegang"

-#: core/models.py:97
+#: core/models.py:104
 msgid "Trusted Access"
 msgstr "Vertrouwde toegang"

-#: core/models.py:98
+#: core/models.py:105
 msgid "Restricted Access"
 msgstr "Beperkte toegang"

-#: core/models.py:110
+#: core/models.py:117
 msgid "id"
 msgstr "id"

-#: core/models.py:111
+#: core/models.py:118
 msgid "primary key for the record as UUID"
 msgstr "primaire sleutel voor het record als UUID"

-#: core/models.py:117
+#: core/models.py:124
 msgid "created on"
 msgstr "aangemaakt op"

-#: core/models.py:118
+#: core/models.py:125
 msgid "date and time at which a record was created"
 msgstr "datum en tijd waarop een record werd aangemaakt"

-#: core/models.py:123
+#: core/models.py:130
 msgid "updated on"
 msgstr "bijgewerkt op"

-#: core/models.py:124
+#: core/models.py:131
 msgid "date and time at which a record was last updated"
 msgstr "datum en tijd waarop een record voor het laatst werd bijgewerkt"

-#: core/models.py:144
+#: core/models.py:151
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
@@ -197,11 +227,11 @@ msgstr ""
 "Voer een geldige sub in. Deze waarde mag alleen letters, cijfers en @/./+/-/"
 "_ tekens bevatten."

-#: core/models.py:150
+#: core/models.py:157
 msgid "sub"
 msgstr "sub"

-#: core/models.py:152
+#: core/models.py:159
 msgid ""
 "Optional for pending users; required upon account activation. 255 characters "
 "or fewer. Letters, numbers, and @/./+/-/_ characters only."
@@ -209,55 +239,55 @@ msgstr ""
 "Optioneel voor gebruikers in afwachting; vereist bij accountactivering. "
 "Maximum 255 tekens. Alleen letters, cijfers en @/./+/-/_ toegestaan."

-#: core/models.py:161
+#: core/models.py:168
 msgid "identity email address"
 msgstr "identiteit e-mailadres"

-#: core/models.py:166
+#: core/models.py:173
 msgid "admin email address"
 msgstr "beheerder e-mailadres"

-#: core/models.py:168
+#: core/models.py:175
 msgid "full name"
 msgstr "volledige naam"

-#: core/models.py:170
+#: core/models.py:177
 msgid "short name"
 msgstr "korte naam"

-#: core/models.py:176
+#: core/models.py:183
 msgid "language"
 msgstr "taal"

-#: core/models.py:177
+#: core/models.py:184
 msgid "The language in which the user wants to see the interface."
 msgstr "De taal waarin de gebruiker de interface wil zien."

-#: core/models.py:183
+#: core/models.py:190
 msgid "The timezone in which the user wants to see times."
 msgstr "De tijdzone waarin de gebruiker tijden wil zien."

-#: core/models.py:186
+#: core/models.py:193
 msgid "device"
 msgstr "apparaat"

-#: core/models.py:188
+#: core/models.py:195
 msgid "Whether the user is a device or a real user."
 msgstr "Of de gebruiker een apparaat is of een echte gebruiker."

-#: core/models.py:191
+#: core/models.py:198
 msgid "staff status"
 msgstr "personeelsstatus"

-#: core/models.py:193
+#: core/models.py:200
 msgid "Whether the user can log into this admin site."
 msgstr "Of de gebruiker kan inloggen op deze beheersite."

-#: core/models.py:196
+#: core/models.py:203
 msgid "active"
 msgstr "actief"

-#: core/models.py:199
+#: core/models.py:206
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
@@ -265,64 +295,64 @@ msgstr ""
 "Of deze gebruiker als actief moet worden behandeld. Deselecteer dit in "
 "plaats van accounts te verwijderen."

-#: core/models.py:212
+#: core/models.py:219
 msgid "user"
 msgstr "gebruiker"

-#: core/models.py:213
+#: core/models.py:220
 msgid "users"
 msgstr "gebruikers"

-#: core/models.py:272
+#: core/models.py:286
 msgid "Resource"
 msgstr "Bron"

-#: core/models.py:273
+#: core/models.py:287
 msgid "Resources"
 msgstr "Bronnen"

-#: core/models.py:331
+#: core/models.py:345
 msgid "Resource access"
 msgstr "Brontoegang"

-#: core/models.py:332
+#: core/models.py:346
 msgid "Resource accesses"
 msgstr "Brontoegangsrechten"

-#: core/models.py:338
+#: core/models.py:352
 msgid "Resource access with this User and Resource already exists."
 msgstr "Brontoegang met deze gebruiker en bron bestaat al."

-#: core/models.py:394
+#: core/models.py:409
 msgid "Visio room configuration"
 msgstr "Visio-ruimteconfiguratie"

-#: core/models.py:395
+#: core/models.py:410
 msgid "Values for Visio parameters to configure the room."
 msgstr "Waarden voor Visio-parameters om de ruimte te configureren."

-#: core/models.py:402
+#: core/models.py:417
 msgid "Room PIN code"
 msgstr "Pincode van de kamer"

-#: core/models.py:403
+#: core/models.py:418
 msgid "Unique n-digit code that identifies this room in telephony mode."
 msgstr ""
 "Unieke n-cijferige code die deze kamer identificeert in telefonie-modus."

-#: core/models.py:409 core/models.py:563
+#: core/models.py:424 core/models.py:578
 msgid "Room"
 msgstr "Ruimte"

-#: core/models.py:410
+#: core/models.py:425
 msgid "Rooms"
 msgstr "Ruimtes"

-#: core/models.py:574
+#: core/models.py:589
 msgid "Worker ID"
 msgstr "Worker ID"

-#: core/models.py:576
+#: core/models.py:591
 msgid ""
 "Enter an identifier for the worker recording.This ID is retained even when "
 "the worker stops, allowing for easy tracking."
@@ -330,140 +360,152 @@ msgstr ""
 "Voer een identificatie in voor de worker-opname. Deze ID blijft behouden, "
 "zelfs wanneer de worker stopt, waardoor eenvoudige tracking mogelijk is."

-#: core/models.py:584
+#: core/models.py:599
 msgid "Recording mode"
 msgstr "Opnamemodus"

-#: core/models.py:585
+#: core/models.py:600
 msgid "Defines the mode of recording being called."
 msgstr "Definieert de modus van opname die wordt aangeroepen."

-#: core/models.py:590 core/models.py:591
+#: core/models.py:605 core/models.py:606
 msgid "Recording options"
 msgstr "Opnameopties"

-#: core/models.py:597
+#: core/models.py:613
+msgid "External Process ID"
+msgstr "Externe proces-ID"
+
+#: core/models.py:614
+msgid "ID of the external process associated with the recording."
+msgstr "ID van het externe proces dat aan de opname is gekoppeld."
+
+#: core/models.py:620
 msgid "Recording"
 msgstr "Opname"

-#: core/models.py:598
+#: core/models.py:621
 msgid "Recordings"
 msgstr "Opnames"

-#: core/models.py:706
+#: core/models.py:731
 msgid "Recording/user relation"
 msgstr "Opname/gebruiker-relatie"

-#: core/models.py:707
+#: core/models.py:732
 msgid "Recording/user relations"
 msgstr "Opname/gebruiker-relaties"

-#: core/models.py:713
+#: core/models.py:738
 msgid "This user is already in this recording."
 msgstr "Deze gebruiker is al in deze opname."

-#: core/models.py:719
+#: core/models.py:744
 msgid "This team is already in this recording."
 msgstr "Dit team is al in deze opname."

-#: core/models.py:725
+#: core/models.py:750
 msgid "Either user or team must be set, not both."
 msgstr "Ofwel gebruiker of team moet worden ingesteld, niet beide."

-#: core/models.py:742
+#: core/models.py:767
 msgid "Create rooms"
 msgstr "Ruimtes aanmaken"

-#: core/models.py:743
+#: core/models.py:768
 msgid "List rooms"
 msgstr "Ruimtes weergeven"

-#: core/models.py:744
+#: core/models.py:769
 msgid "Retrieve room details"
 msgstr "Details van een ruimte ophalen"

-#: core/models.py:745
+#: core/models.py:770
 msgid "Update rooms"
 msgstr "Ruimtes bijwerken"

-#: core/models.py:746
+#: core/models.py:771
 msgid "Delete rooms"
 msgstr "Ruimtes verwijderen"

-#: core/models.py:759
+#: core/models.py:784
 msgid "Application name"
 msgstr "Naam van de applicatie"

-#: core/models.py:760
+#: core/models.py:785
 msgid "Descriptive name for this application."
 msgstr "Beschrijvende naam voor deze applicatie."

-#: core/models.py:770
+#: core/models.py:795
 msgid "Hashed on Save. Copy it now if this is a new secret."
 msgstr ""
 "Wordt gehasht bij het opslaan. Kopieer het nu als dit een nieuw geheim is."

-#: core/models.py:781
+#: core/models.py:806
 msgid "Application"
 msgstr "Applicatie"

-#: core/models.py:782
+#: core/models.py:807
 msgid "Applications"
 msgstr "Applicaties"

-#: core/models.py:805
+#: core/models.py:830
 msgid "Enter a valid domain"
 msgstr "Voer een geldig domein in"

-#: core/models.py:808
+#: core/models.py:833
 msgid "Domain"
 msgstr "Domein"

-#: core/models.py:809
+#: core/models.py:834
 msgid "Email domain this application can act on behalf of."
 msgstr "E-maildomein namens welke deze applicatie kan handelen."

-#: core/models.py:821
+#: core/models.py:846
 msgid "Application domain"
 msgstr "Applicatiedomein"

-#: core/models.py:822
+#: core/models.py:847
 msgid "Application domains"
 msgstr "Applicatiedomeinen"

-#: core/models.py:840
+#: core/models.py:865
 msgid "Pending"
 msgstr "In afwachting"

-#: core/models.py:848
+#: core/models.py:866
+msgid "Analyzing"
+msgstr ""
+
+#: core/models.py:873
 msgid "Ready"
 msgstr "Klaar"

-#: core/models.py:854
+#: core/models.py:879
 msgid "Background image"
 msgstr "Achtergrondafbeelding"

-#: core/models.py:866
+#: core/models.py:891
 msgid "title"
 msgstr "Titel"

-#: core/models.py:890
+#: core/models.py:915
 msgid "Malware detection info when the analysis status is unsafe."
 msgstr "Informatie over malwaredetectie wanneer de analysestatus onveilig is."

-#: core/models.py:895
+#: core/models.py:920
 msgid "File"
 msgstr "Bestand"

-#: core/models.py:896
+#: core/models.py:921
 msgid "Files"
 msgstr "Bestanden"

-#: core/models.py:1000
+#: core/models.py:1041
 msgid "This file is already hard deleted."
 msgstr "Dit bestand is al definitief verwijderd."

-#: core/models.py:1010
+#: core/models.py:1051
 #, fuzzy
 #| msgid "To hard delete a file, it must first be soft deleted."
 msgid "To hard delete a file, it must first be soft deleted."
@@ -471,10 +513,20 @@ msgstr ""
 "Om een bestand definitief te verwijderen, moet het eerst zacht verwijderd "
 "zijn."

-#: core/recording/event/notification.py:116
+#: core/recording/event/notification.py:123
 msgid "Your recording is ready"
 msgstr "Je opname is klaar"

+#: core/recording/event/notification.py:194
+msgid "Transcription"
+msgstr "Transcriptie"
+
+#: core/recording/event/notification.py:204
+#, python-brace-format
+msgid "Meeting \"{room}\" on {room_recording_date} at {room_recording_time}"
+msgstr ""
+"Vergadering \"{room}\" op {room_recording_date} om {room_recording_time}"
+
 #: core/services/invitation.py:44
 #, python-brace-format
 msgid "Video call in progress: {sender.email} is waiting for you to connect"
@@ -570,7 +622,7 @@ msgid "To keep this recording permanently:"
 msgstr "Om deze opname permanent te bewaren:"

 #: core/templates/mail/html/screen_recording.html:208
-#: core/templates/mail/text/screen_recording.txt:13
+#, python-format
 msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
 msgstr "Klik op de \"<a href=\"%(link)s\">Openen</a>\"-link hieronder "

@@ -599,18 +651,24 @@ msgstr ""
 " Als je vragen hebt of hulp nodig hebt, neem dan contact op met ons support "
 "team via %(support_email)s. "

-#: meet/settings.py:223
+#: core/templates/mail/text/screen_recording.txt:13
+#, fuzzy, python-format
+#| msgid "Click the \"<a href=\"%(link)s\">Open</a>\" link below "
+msgid "Click the \"Open [%(link)s]\" link below "
+msgstr "Klik op de \"<a href=\"%(link)s\">Openen</a>\"-link hieronder "
+
+#: meet/settings.py:228
 msgid "English"
 msgstr "Engels"

-#: meet/settings.py:224
+#: meet/settings.py:229
 msgid "French"
 msgstr "Frans"

-#: meet/settings.py:225
+#: meet/settings.py:230
 msgid "Dutch"
 msgstr "Nederlands"

-#: meet/settings.py:226
+#: meet/settings.py:231
 msgid "German"
 msgstr "Duits"
@@ -13,6 +13,7 @@ https://docs.djangoproject.com/en/3.1/ref/settings/
 # pylint: disable=too-many-lines

 import json
+import warnings
 from os import path
 from socket import gethostbyname, gethostname

@@ -670,6 +671,11 @@ class Base(Configuration):
        environ_name="PARTICIPANT_FORBIDDEN_PERMISSION_FIELDS",
        environ_prefix=None,
    )
+    AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME = values.BooleanValue(
+        True,
+        environ_name="AUTHENTICATED_PARTICIPANTS_CAN_EDIT_DISPLAY_NAME",
+        environ_prefix=None,
+    )

    # Recording settings
    RECORDING_ENABLE = values.BooleanValue(
@@ -748,12 +754,30 @@ class Base(Configuration):
        environ_prefix=None,
    )

+    SUMMARY_SERVICE_VERSION = values.PositiveIntegerValue(
+        1, environ_name="SUMMARY_SERVICE_VERSION", environ_prefix=None
+    )
    SUMMARY_SERVICE_ENDPOINT = values.Value(
        None, environ_name="SUMMARY_SERVICE_ENDPOINT", environ_prefix=None
    )
    SUMMARY_SERVICE_API_TOKEN = SecretFileValue(
        None, environ_name="SUMMARY_SERVICE_API_TOKEN", environ_prefix=None
    )
+    SUMMARY_SERVICE_WEBHOOK_API_TOKEN = SecretFileValue(
+        None, environ_name="SUMMARY_SERVICE_WEBHOOK_API_TOKEN", environ_prefix=None
+    )
+    SUMMARY_SERVICE_CLOUD_STORAGE_SIGNED_URL_EXPIRY_SECONDS = (
+        values.PositiveIntegerValue(
+            60 * 60 * 24,
+            environ_name="SUMMARY_SERVICE_CLOUD_STORAGE_SIGNED_URL_EXPIRY_SECONDS",
+            environ_prefix=None,
+        )
+    )
+    TRANSCRIPTION_SATISFACTION_FORM_BASE_URL = values.Value(
+        None,
+        environ_name="TRANSCRIPTION_SATISFACTION_FORM_BASE_URL",
+        environ_prefix=None,
+    )
    SCREEN_RECORDING_BASE_URL = values.Value(
        None, environ_name="SCREEN_RECORDING_BASE_URL", environ_prefix=None
    )
@@ -1110,11 +1134,25 @@ class Base(Configuration):
                "FILE_UPLOAD_TMP_PATH cannot be the same as FILE_UPLOAD_PATH"
            )

+        if (
+            cls.SUMMARY_SERVICE_VERSION == 1
+            and cls.SUMMARY_SERVICE_ENDPOINT is not None
+        ):
+            warnings.warn(
+                "SUMMARY_SERVICE_VERSION=1 is deprecated. "
+                "The legacy v1 API has been removed from the experimental "
+                "Summary service. Please update your Summary service deployment to "
+                "the v2 API and set SUMMARY_SERVICE_VERSION=2.",
+                # We use UserWarning to make sure it shows up in production deployment
+                UserWarning,
+                stacklevel=2,
+            )
+
        # The SENTRY_DSN setting should be available to activate sentry for an environment
        if cls.SENTRY_DSN is not None:
            sentry_sdk.init(
                dsn=cls.SENTRY_DSN,
-                environment=cls.__name__.lower(),
+                environment=cls.__name__.lower(),  # build, test, development, production
                release=get_release(),
                integrations=[DjangoIntegration()],
            )
@@ -7,7 +7,7 @@ build-backend = "uv_build"

 [project]
 name = "meet"
-version = "1.22.0"
+version = "1.24.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
    "Development Status :: 5 - Production/Stable",
@@ -24,19 +24,19 @@ keywords = ["Django", "Contacts", "Templates", "RBAC"]
 license = "MIT"
 requires-python = ">=3.13"
 dependencies = [
-    "boto3==1.43.14",
+    "boto3==1.43.36",
    "Brotli==1.2.0",
    "brevo-python==1.2.0",
    "celery[redis]==5.6.3",
    "dj-database-url==3.1.2",
    "django-configurations==2.5.1",
    "django-cors-headers==4.9.0",
-    "django-countries==8.2.0",
+    "django-countries==9.0.0",
    "django-filter==25.2",
-    "django-lasuite[all]==0.0.26",
+    "django-lasuite[all]==0.0.27",
    "django-parler==2.4",
    "redis==5.2.1",
-    "django-redis==6.0.0",
+    "django-redis==7.0.0",
    "django-storages[s3]==1.14.6",
    "django-timezone-field>=5.1",
    "django-pydantic-field==0.5.4",
@@ -57,13 +57,13 @@ dependencies = [
    "python-frontmatter==1.3.0",
    "python-magic==0.4.27",
    "requests==2.34.2",
-    "sentry-sdk==2.60.0",
+    "sentry-sdk==2.63.0",
    "whitenoise==6.12.0",
    "mozilla-django-oidc==5.0.2",
-    "livekit-api==1.1.0",
-    "aiohttp==3.14.0",
+    "livekit-api==1.1.1",
+    "aiohttp==3.14.1",
    "urllib3==2.7.0",
-    "phonenumbers==9.0.31",
+    "phonenumbers==9.0.33",
 ]

 [project.urls]
@@ -75,20 +75,20 @@ dependencies = [
 [dependency-groups]
 dev = [
    "django-extensions==4.1",
-    "drf-spectacular-sidecar==2026.5.1",
+    "drf-spectacular-sidecar==2026.6.1",
    "freezegun==1.5.5",
    "ipdb==0.13.13",
-    "ipython==9.13.0",
+    "ipython==9.14.1",
    "pyfakefs==6.2.0",
    "pylint-django==2.7.0",
    "pylint<4.0.0",
    "pytest-cov==7.1.0",
    "pytest-django==4.12.0",
-    "pytest==9.0.3",
+    "pytest==9.1.1",
    "pytest-icdiff==0.9",
    "pytest-xdist==3.8.0",
    "responses==0.26.1",
-    "ruff==0.15.14",
+    "ruff==0.15.19",
    "types-requests==2.33.0.20260518",
 ]

@@ -1,4 +1,4 @@
-FROM node:20-alpine AS frontend-deps
+FROM node:22-alpine AS frontend-deps

 USER node

@@ -39,7 +39,7 @@ ENV VITE_API_BASE_URL=${VITE_API_BASE_URL}
 RUN npm run build

 # ---- Front-end image ----
-FROM nginxinc/nginx-unprivileged:alpine3.23 AS frontend-production
+FROM nginxinc/nginx-unprivileged:1.30.3-alpine3.23 AS frontend-production

 USER root

@@ -1,12 +1,12 @@
 {
  "name": "meet",
-  "version": "1.22.0",
+  "version": "1.24.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "meet",
-      "version": "1.22.0",
+      "version": "1.24.0",
      "dependencies": {
        "@fontsource-variable/atkinson-hyperlegible-next": "5.2.6",
        "@fontsource-variable/lexend": "5.2.11",
@@ -15,10 +15,11 @@
        "@livekit/components-react": "2.9.21",
        "@livekit/components-styles": "1.2.0",
        "@livekit/track-processors": "0.7.2",
+        "@mediapipe/tasks-vision": "0.10.35",
        "@pandacss/preset-panda": "1.11.3",
        "@react-types/overlays": "3.10.0",
        "@remixicon/react": "4.9.0",
-        "@tanstack/react-query": "5.100.14",
+        "@tanstack/react-query": "5.101.1",
        "@timephy/rnnoise-wasm": "1.0.0",
        "crisp-sdk-web": "1.1.2",
        "derive-valtio": "0.2.0",
@@ -28,14 +29,14 @@
        "i18next-browser-languagedetector": "8.2.1",
        "i18next-parser": "9.4.0",
        "i18next-resources-to-backend": "1.2.1",
-        "livekit-client": "2.19.0",
-        "posthog-js": "1.386.5",
+        "livekit-client": "2.20.0",
+        "posthog-js": "1.395.0",
        "react": "18.3.1",
-        "react-aria": "3.49.0",
-        "react-aria-components": "1.18.0",
+        "react-aria": "3.50.0",
+        "react-aria-components": "1.19.0",
        "react-dom": "18.3.1",
        "react-i18next": "17.0.8",
-        "react-stately": "3.47.0",
+        "react-stately": "3.48.0",
        "use-sound": "5.0.0",
        "valtio": "2.3.2",
        "wouter": "3.10.0"
@@ -63,6 +64,7 @@
        "typescript": "6.0.3",
        "typescript-eslint": "8.60.1",
        "vite": "8.0.14",
+        "vite-plugin-static-copy": "4.1.1",
        "vite-plugin-svgr": "5.2.0"
      }
    },
@@ -110,6 +112,62 @@
        "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0"
      }
    },
+    "node_modules/@adobe/react-spectrum/node_modules/react-aria": {
+      "version": "3.49.0",
+      "resolved": "https://registry.npmjs.org/react-aria/-/react-aria-3.49.0.tgz",
+      "integrity": "sha512-4+oK9FwJQWYhyA5zLfj/feOGY0zZbkE1muoF4gyxMroHVypjcYaRSTlJwvxph2zIlxt757KX6xIK2wJ5Aw1Kog==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@internationalized/date": "^3.12.2",
+        "@internationalized/number": "^3.6.7",
+        "@internationalized/string": "^3.2.9",
+        "@react-types/shared": "^3.35.0",
+        "@swc/helpers": "^0.5.0",
+        "aria-hidden": "^1.2.3",
+        "clsx": "^2.0.0",
+        "react-stately": "3.47.0",
+        "use-sync-external-store": "^1.6.0"
+      },
+      "peerDependencies": {
+        "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1",
+        "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1"
+      }
+    },
+    "node_modules/@adobe/react-spectrum/node_modules/react-aria-components": {
+      "version": "1.18.0",
+      "resolved": "https://registry.npmjs.org/react-aria-components/-/react-aria-components-1.18.0.tgz",
+      "integrity": "sha512-FhRQjuDkH4WhgFv+O2sYTzK3JzdZTGpBeaqfRlfTo+DcSZzD8elJEkytHe7SDpcexVKeire8NVd7OruZHfCVoA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@internationalized/date": "^3.12.2",
+        "@react-types/shared": "^3.35.0",
+        "@swc/helpers": "^0.5.0",
+        "client-only": "^0.0.1",
+        "react-aria": "3.49.0",
+        "react-stately": "3.47.0"
+      },
+      "peerDependencies": {
+        "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1",
+        "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1"
+      }
+    },
+    "node_modules/@adobe/react-spectrum/node_modules/react-stately": {
+      "version": "3.47.0",
+      "resolved": "https://registry.npmjs.org/react-stately/-/react-stately-3.47.0.tgz",
+      "integrity": "sha512-H3ar+SOWP920EbVg7qWfP3fZjZiwhlEJAEJQqjt+w8oKijCwFgr0+R4941PIHscOXRNRvEOjvWilitImC0DdBg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@internationalized/date": "^3.12.2",
+        "@internationalized/number": "^3.6.7",
+        "@internationalized/string": "^3.2.9",
+        "@react-types/shared": "^3.35.0",
+        "@swc/helpers": "^0.5.0",
+        "use-sync-external-store": "^1.6.0"
+      },
+      "peerDependencies": {
+        "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1"
+      }
+    },
    "node_modules/@babel/code-frame": {
      "version": "7.29.0",
      "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz",
@@ -970,9 +1028,9 @@
      "license": "Apache-2.0"
    },
    "node_modules/@livekit/protocol": {
-      "version": "1.45.8",
-      "resolved": "https://registry.npmjs.org/@livekit/protocol/-/protocol-1.45.8.tgz",
-      "integrity": "sha512-Q+l57E7w/xxOBFVWzdX5rkAZO7ffyF+rlDzNUYq2SU114+5aTyCq+PK4unaEVDNd4952Af7wteKr3sOgasGuaA==",
+      "version": "1.46.6",
+      "resolved": "https://registry.npmjs.org/@livekit/protocol/-/protocol-1.46.6.tgz",
+      "integrity": "sha512-upzlHP1vi/kZ/QqALZTFskQ0ifqc2f15RKucHYOsIHJsaXvEYanG75mAb7o+Yomfs4XhQ4BaRsdY+TFHXpaqrg==",
      "license": "Apache-2.0",
      "dependencies": {
        "@bufbuild/protobuf": "^1.10.0"
@@ -991,12 +1049,18 @@
        "livekit-client": "^1.12.0 || ^2.1.0"
      }
    },
-    "node_modules/@mediapipe/tasks-vision": {
+    "node_modules/@livekit/track-processors/node_modules/@mediapipe/tasks-vision": {
      "version": "0.10.14",
      "resolved": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.14.tgz",
      "integrity": "sha512-vOifgZhkndgybdvoRITzRkIueWWSiCKuEUXXK6Q4FaJsFvRJuwgg++vqFUMlL0Uox62U5aEXFhHxlhV7Ja5e3Q==",
      "license": "Apache-2.0"
    },
+    "node_modules/@mediapipe/tasks-vision": {
+      "version": "0.10.35",
+      "resolved": "https://registry.npmjs.org/@mediapipe/tasks-vision/-/tasks-vision-0.10.35.tgz",
+      "integrity": "sha512-HOvadwVRE6JC+45nyYhmnywnr5h/J8KZvOeUNVOG9q/0875pZgItznFB9bRTvLc264YSJqiZ1NsIpCStJw/egg==",
+      "license": "Apache-2.0"
+    },
    "node_modules/@modelcontextprotocol/sdk": {
      "version": "1.29.0",
      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.29.0.tgz",
@@ -1752,9 +1816,9 @@
      }
    },
    "node_modules/@react-types/shared": {
-      "version": "3.35.0",
-      "resolved": "https://registry.npmjs.org/@react-types/shared/-/shared-3.35.0.tgz",
-      "integrity": "sha512-iNWvuzEwANttpQpdlu8nPBtdHb0mcCMj1ZTH//iRB5E/14IAnyRlR25rxH7pNLyzHINsPGEKnWvpwDMCT6vziQ==",
+      "version": "3.36.0",
+      "resolved": "https://registry.npmjs.org/@react-types/shared/-/shared-3.36.0.tgz",
+      "integrity": "sha512-DkP/H0C2YjjS7gZWKNqOmU8a16qHPjQNdzMwmTq9SzplM6Iw0kVMTZ0OIoe6FOgGqa+FwMsE2QbPjh/n3g/jXQ==",
      "license": "Apache-2.0",
      "peerDependencies": {
        "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1"
@@ -2357,9 +2421,9 @@
      }
    },
    "node_modules/@tanstack/query-core": {
-      "version": "5.100.14",
-      "resolved": "https://registry.npmjs.org/@tanstack/query-core/-/query-core-5.100.14.tgz",
-      "integrity": "sha512-5X41dGpxgeaHISCRW2oYwcSycZeULZzAunaudXT9ov1KOTj9xwt0CH6hbwqP1/z74ZWF7rYFnDpyYH07XFcZew==",
+      "version": "5.101.1",
+      "resolved": "https://registry.npmjs.org/@tanstack/query-core/-/query-core-5.101.1.tgz",
+      "integrity": "sha512-Y6Y92dkXtNqx67m2pMSxUsA3zOCwv862JexZRP8/EPwvKXMPu9m8rv43spiXWzOUIggQ3SQApttALStzhA8B4g==",
      "license": "MIT",
      "funding": {
        "type": "github",
@@ -2378,12 +2442,12 @@
      }
    },
    "node_modules/@tanstack/react-query": {
-      "version": "5.100.14",
-      "resolved": "https://registry.npmjs.org/@tanstack/react-query/-/react-query-5.100.14.tgz",
-      "integrity": "sha512-oOr6aRdSFEwWhzxEkD/9ZcItM3+LjBSkeVmadWKwUssAHTsqd/7bOjWrX4AbvEkoEhgAxzN0Xk6H/aYzXiYBAw==",
+      "version": "5.101.1",
+      "resolved": "https://registry.npmjs.org/@tanstack/react-query/-/react-query-5.101.1.tgz",
+      "integrity": "sha512-ZnONUuQKJe1bJMStXUL1s5uKN9FcfC28j5cK+iDZcdSHtUv1wtin1cGc/Oewhf2Oc4eKY7lggtpvT/AbMmhHew==",
      "license": "MIT",
      "dependencies": {
-        "@tanstack/query-core": "5.100.14"
+        "@tanstack/query-core": "5.101.1"
      },
      "funding": {
        "type": "github",
@@ -3192,6 +3256,19 @@
        "node": ">=6.0.0"
      }
    },
+    "node_modules/binary-extensions": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz",
+      "integrity": "sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
    "node_modules/bl": {
      "version": "5.1.0",
      "resolved": "https://registry.npmjs.org/bl/-/bl-5.1.0.tgz",
@@ -7094,6 +7171,19 @@
        "url": "https://github.com/sponsors/ljharb"
      }
    },
+    "node_modules/is-binary-path": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz",
+      "integrity": "sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "binary-extensions": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
    "node_modules/is-boolean-object": {
      "version": "1.2.2",
      "resolved": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.2.2.tgz",
@@ -8035,13 +8125,13 @@
      "license": "MIT"
    },
    "node_modules/livekit-client": {
-      "version": "2.19.0",
-      "resolved": "https://registry.npmjs.org/livekit-client/-/livekit-client-2.19.0.tgz",
-      "integrity": "sha512-aolY1XDAtx0nHKBNm29W9OhzBnSz1CP5kq3phvRhFfi1NbvMXs8tcACjAkZTnIKgihkp+BiJScZZ3tZv0Gz8sA==",
+      "version": "2.20.0",
+      "resolved": "https://registry.npmjs.org/livekit-client/-/livekit-client-2.20.0.tgz",
+      "integrity": "sha512-RIJcpvBmOmwz3jTj3rmdY6Dzr55HrhcaJjMgY+HSmoEM+yIRyA40m7r8UKv0hnZWM3z/AYhP1q8C8ciz5UWFKQ==",
      "license": "Apache-2.0",
      "dependencies": {
        "@livekit/mutex": "1.1.1",
-        "@livekit/protocol": "1.45.8",
+        "@livekit/protocol": "1.46.6",
        "events": "^3.3.0",
        "jose": "^6.1.0",
        "loglevel": "^1.9.2",
@@ -8675,6 +8765,19 @@
        "url": "https://github.com/sponsors/sindresorhus"
      }
    },
+    "node_modules/p-map": {
+      "version": "7.0.5",
+      "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.0.5.tgz",
+      "integrity": "sha512-e8vJF4XdVkzqqSHguEMz41mQO1wKwxKm5ENrUJQUu9kLDCtn83cxbyHZcszr4QC5zEA7WffRRC4gsTecC7J9oA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
    "node_modules/package-manager-detector": {
      "version": "1.6.0",
      "resolved": "https://registry.npmjs.org/package-manager-detector/-/package-manager-detector-1.6.0.tgz",
@@ -9033,19 +9136,19 @@
      "license": "MIT"
    },
    "node_modules/posthog-js": {
-      "version": "1.386.5",
-      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.386.5.tgz",
-      "integrity": "sha512-ASejQQf5Xw0XolMwH/KCLZlZtoyLK6VsvORwGagAtfa8/ElIOF76BMQspkDsRTybEI+uzHqRDm2m/na1Dki2mA==",
+      "version": "1.395.0",
+      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.395.0.tgz",
+      "integrity": "sha512-5iTb00CGt2eQUUiBQysQiX89RAbCN6wK2sDNzvs9zv0alaY8mJ0ZySrUD3LQ+XyLhgM5pCpacBuUwChqiYDLDw==",
      "license": "SEE LICENSE IN LICENSE",
      "dependencies": {
-        "@posthog/core": "^1.32.3",
-        "@posthog/types": "^1.386.3",
+        "@posthog/core": "^1.38.0",
+        "@posthog/types": "^1.391.1",
        "core-js": "^3.38.1",
        "dompurify": "^3.3.2",
        "fflate": "^0.4.8",
-        "preact": "^10.28.2",
+        "preact": "^10.29.2",
        "query-selector-shadow-dom": "^1.0.1",
-        "web-vitals": "^5.1.0"
+        "web-vitals": "^5.3.0"
      }
    },
    "node_modules/powershell-utils": {
@@ -9062,13 +9165,21 @@
      }
    },
    "node_modules/preact": {
-      "version": "10.28.3",
-      "resolved": "https://registry.npmjs.org/preact/-/preact-10.28.3.tgz",
-      "integrity": "sha512-tCmoRkPQLpBeWzpmbhryairGnhW9tKV6c6gr/w+RhoRoKEJwsjzipwp//1oCpGPOchvSLaAPlpcJi9MwMmoPyA==",
+      "version": "10.29.7",
+      "resolved": "https://registry.npmjs.org/preact/-/preact-10.29.7.tgz",
+      "integrity": "sha512-DCHYrK/B10yUD3ZjLfhZ3WIE/9Vf9VFUODcRE2dRomTYDpJk6z6L9wecSfhfE6M9ZTHUdyQkoC46arIDhEV84Q==",
      "license": "MIT",
      "funding": {
        "type": "opencollective",
        "url": "https://opencollective.com/preact"
+      },
+      "peerDependencies": {
+        "preact-render-to-string": ">=5"
+      },
+      "peerDependenciesMeta": {
+        "preact-render-to-string": {
+          "optional": true
+        }
      }
    },
    "node_modules/prelude-ls": {
@@ -9275,19 +9386,19 @@
      }
    },
    "node_modules/react-aria": {
-      "version": "3.49.0",
-      "resolved": "https://registry.npmjs.org/react-aria/-/react-aria-3.49.0.tgz",
-      "integrity": "sha512-4+oK9FwJQWYhyA5zLfj/feOGY0zZbkE1muoF4gyxMroHVypjcYaRSTlJwvxph2zIlxt757KX6xIK2wJ5Aw1Kog==",
+      "version": "3.50.0",
+      "resolved": "https://registry.npmjs.org/react-aria/-/react-aria-3.50.0.tgz",
+      "integrity": "sha512-S0Os6QZk33fzUAKu1QLT9afoUaCBt1ZNdoiq0n2YMVgKIdNIQS8zxiZ8O9hYE6QyDkHKjD6q39LQZ+qaSAIgjw==",
      "license": "Apache-2.0",
      "dependencies": {
        "@internationalized/date": "^3.12.2",
        "@internationalized/number": "^3.6.7",
        "@internationalized/string": "^3.2.9",
-        "@react-types/shared": "^3.35.0",
+        "@react-types/shared": "^3.36.0",
        "@swc/helpers": "^0.5.0",
        "aria-hidden": "^1.2.3",
        "clsx": "^2.0.0",
-        "react-stately": "3.47.0",
+        "react-stately": "3.48.0",
        "use-sync-external-store": "^1.6.0"
      },
      "peerDependencies": {
@@ -9296,17 +9407,17 @@
      }
    },
    "node_modules/react-aria-components": {
-      "version": "1.18.0",
-      "resolved": "https://registry.npmjs.org/react-aria-components/-/react-aria-components-1.18.0.tgz",
-      "integrity": "sha512-FhRQjuDkH4WhgFv+O2sYTzK3JzdZTGpBeaqfRlfTo+DcSZzD8elJEkytHe7SDpcexVKeire8NVd7OruZHfCVoA==",
+      "version": "1.19.0",
+      "resolved": "https://registry.npmjs.org/react-aria-components/-/react-aria-components-1.19.0.tgz",
+      "integrity": "sha512-2smSS5nqJ8cGYMQezuUXveZm7eMyHCqTN6mDpylQBYLYbdF5dxCCuW1DHn1VKLe1DybSfPvX/cZtJlDmvFfn8A==",
      "license": "Apache-2.0",
      "dependencies": {
        "@internationalized/date": "^3.12.2",
-        "@react-types/shared": "^3.35.0",
+        "@react-types/shared": "^3.36.0",
        "@swc/helpers": "^0.5.0",
        "client-only": "^0.0.1",
-        "react-aria": "3.49.0",
-        "react-stately": "3.47.0"
+        "react-aria": "3.50.0",
+        "react-stately": "3.48.0"
      },
      "peerDependencies": {
        "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1",
@@ -9360,15 +9471,15 @@
      "license": "MIT"
    },
    "node_modules/react-stately": {
-      "version": "3.47.0",
-      "resolved": "https://registry.npmjs.org/react-stately/-/react-stately-3.47.0.tgz",
-      "integrity": "sha512-H3ar+SOWP920EbVg7qWfP3fZjZiwhlEJAEJQqjt+w8oKijCwFgr0+R4941PIHscOXRNRvEOjvWilitImC0DdBg==",
+      "version": "3.48.0",
+      "resolved": "https://registry.npmjs.org/react-stately/-/react-stately-3.48.0.tgz",
+      "integrity": "sha512-ImicSAG+lTotAe5izcs1fz49Zk48w7pDusqYg04WaPhCoej8BJ24soMu3iLXIrsi273s4P1gZrYGrqReMfgEEA==",
      "license": "Apache-2.0",
      "dependencies": {
        "@internationalized/date": "^3.12.2",
        "@internationalized/number": "^3.6.7",
        "@internationalized/string": "^3.2.9",
-        "@react-types/shared": "^3.35.0",
+        "@react-types/shared": "^3.36.0",
        "@swc/helpers": "^0.5.0",
        "use-sync-external-store": "^1.6.0"
      },
@@ -11137,6 +11248,80 @@
        }
      }
    },
+    "node_modules/vite-plugin-static-copy": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/vite-plugin-static-copy/-/vite-plugin-static-copy-4.1.1.tgz",
+      "integrity": "sha512-GrlA8YklrAfSyxJ4M3fdQLOo9oNkp56IM9FYgX/WtEgeIFkPwhu4wzpufBCIuNKCa6Fn77FkRdYxkHqV0FwjAw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "chokidar": "^3.6.0",
+        "p-map": "^7.0.4",
+        "picocolors": "^1.1.1",
+        "tinyglobby": "^0.2.17"
+      },
+      "engines": {
+        "node": "^22.0.0 || >=24.0.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/sapphi-red"
+      },
+      "peerDependencies": {
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+      }
+    },
+    "node_modules/vite-plugin-static-copy/node_modules/chokidar": {
+      "version": "3.6.0",
+      "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz",
+      "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "anymatch": "~3.1.2",
+        "braces": "~3.0.2",
+        "glob-parent": "~5.1.2",
+        "is-binary-path": "~2.1.0",
+        "is-glob": "~4.0.1",
+        "normalize-path": "~3.0.0",
+        "readdirp": "~3.6.0"
+      },
+      "engines": {
+        "node": ">= 8.10.0"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.2"
+      }
+    },
+    "node_modules/vite-plugin-static-copy/node_modules/glob-parent": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
+      "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "is-glob": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/vite-plugin-static-copy/node_modules/readdirp": {
+      "version": "3.6.0",
+      "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
+      "integrity": "sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "picomatch": "^2.2.1"
+      },
+      "engines": {
+        "node": ">=8.10.0"
+      }
+    },
    "node_modules/vite-plugin-svgr": {
      "version": "5.2.0",
      "resolved": "https://registry.npmjs.org/vite-plugin-svgr/-/vite-plugin-svgr-5.2.0.tgz",
@@ -11470,9 +11655,9 @@
      }
    },
    "node_modules/web-vitals": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/web-vitals/-/web-vitals-5.1.0.tgz",
-      "integrity": "sha512-ArI3kx5jI0atlTtmV0fWU3fjpLmq/nD3Zr1iFFlJLaqa5wLBkUSzINwBPySCX/8jRyjlmy1Volw1kz1g9XE4Jg==",
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/web-vitals/-/web-vitals-5.3.0.tgz",
+      "integrity": "sha512-q6LWsLatGYZp5VGBIOvbTj6JBV2nOmC8KvWztXBmwJcfFAzhwKwbOxhUH306XY3CcaZDUlSmSuNPBsCn0bFu+g==",
      "license": "Apache-2.0"
    },
    "node_modules/webrtc-adapter": {
@@ -1,7 +1,7 @@
 {
  "name": "meet",
  "private": true,
-  "version": "1.22.0",
+  "version": "1.24.0",
  "type": "module",
  "scripts": {
    "dev": "panda codegen && vite",
@@ -17,15 +17,16 @@
  "dependencies": {
    "@fontsource-variable/atkinson-hyperlegible-next": "5.2.6",
    "@fontsource-variable/lexend": "5.2.11",
-    "@libreaudio/la-call": "0.1.4",
    "@fontsource/opendyslexic": "5.2.5",
+    "@libreaudio/la-call": "0.1.4",
    "@livekit/components-react": "2.9.21",
    "@livekit/components-styles": "1.2.0",
    "@livekit/track-processors": "0.7.2",
+    "@mediapipe/tasks-vision": "0.10.35",
    "@pandacss/preset-panda": "1.11.3",
    "@react-types/overlays": "3.10.0",
    "@remixicon/react": "4.9.0",
-    "@tanstack/react-query": "5.100.14",
+    "@tanstack/react-query": "5.101.1",
    "@timephy/rnnoise-wasm": "1.0.0",
    "crisp-sdk-web": "1.1.2",
    "derive-valtio": "0.2.0",
@@ -35,14 +36,14 @@
    "i18next-browser-languagedetector": "8.2.1",
    "i18next-parser": "9.4.0",
    "i18next-resources-to-backend": "1.2.1",
-    "livekit-client": "2.19.0",
-    "posthog-js": "1.386.5",
+    "livekit-client": "2.20.0",
+    "posthog-js": "1.395.0",
    "react": "18.3.1",
-    "react-aria": "3.49.0",
-    "react-aria-components": "1.18.0",
+    "react-aria": "3.50.0",
+    "react-aria-components": "1.19.0",
    "react-dom": "18.3.1",
    "react-i18next": "17.0.8",
-    "react-stately": "3.47.0",
+    "react-stately": "3.48.0",
    "use-sound": "5.0.0",
    "valtio": "2.3.2",
    "wouter": "3.10.0"
@@ -70,6 +71,7 @@
    "typescript": "6.0.3",
    "typescript-eslint": "8.60.1",
    "vite": "8.0.14",
+    "vite-plugin-static-copy": "4.1.1",
    "vite-plugin-svgr": "5.2.0"
  }
 }
@@ -58,6 +58,7 @@ export interface ApiConfig {
  transcription_destination?: string
  max_participants_for_sound: number
  auto_mute_on_join_threshold: number
+  authenticated_users_can_edit_display_name: boolean
 }

 const fetchConfig = (): Promise<ApiConfig> => {
@@ -9,10 +9,11 @@ import { useState } from 'react'

 import { menuRecipe } from '@/primitives/menuRecipe'
 import { ApiRoom } from '@/features/rooms/api/ApiRoom'
-import { loadUserChoices } from '@livekit/components-core'
+import { useSnapshot } from 'valtio'
+import { userStore } from '@/stores/user'

 export const CreateMeetingMenu = () => {
-  const { username } = loadUserChoices()
+  const { username } = useSnapshot(userStore)

  const { t } = useTranslation('home')
  const { mutateAsync: createRoom } = useCreateRoom()
@@ -26,6 +26,7 @@ export const PipFocusLayout = memo(
            <ParticipantTile
              key={getTrackKey(mainTrack)}
              trackRef={mainTrack}
+              disableTileControls
            />
          </MainSlot>
        )}
@@ -34,6 +35,7 @@ export const PipFocusLayout = memo(
            <ParticipantTile
              key={getTrackKey(thumbnailTrack)}
              trackRef={thumbnailTrack}
+              disableTileControls
            />
          </Thumbnail>
        )}
@@ -48,9 +50,10 @@ const FocusContainer = styled('div', {
    position: 'relative',
    width: '100%',
    height: '100%',
-    borderRadius: '4px',
+    borderRadius: '8px',
    overflow: 'hidden',
    backgroundColor: 'primaryDark.100',
+    boxSizing: 'border-box',
  },
 })

@@ -58,6 +61,8 @@ const MainSlot = styled('div', {
  base: {
    width: '100%',
    height: '100%',
+    borderRadius: '8px',
+    overflow: 'hidden',
    '& .lk-participant-media-video': {
      objectFit: 'contain',
    },
@@ -67,13 +72,13 @@ const MainSlot = styled('div', {
 const Thumbnail = styled('div', {
  base: {
    position: 'absolute',
-    right: '1rem',
-    bottom: '1rem',
+    right: '1.25rem',
+    bottom: '1.25rem',
    width: '42%',
    maxWidth: '220px',
    minWidth: '140px',
    aspectRatio: '16 / 9',
-    borderRadius: '4px',
+    borderRadius: '8px',
    overflow: 'hidden',
    boxShadow: 'md',
    zIndex: 2,
@@ -41,7 +41,7 @@ export const PipGridLayout = memo(({ tracks }: PipGridLayoutProps) => {
    <GridContainer ref={containerRef} style={gridStyle}>
      {tracks.map((track, index) => (
        <GridCell key={getTrackKey(track)} style={placements[index]}>
-          <ParticipantTile trackRef={track} />
+          <ParticipantTile trackRef={track} disableTileControls />
        </GridCell>
      ))}
    </GridContainer>
@@ -54,7 +54,8 @@ const GridContainer = styled('div', {
    width: '100%',
    height: '100%',
    display: 'grid',
-    gap: '0.25rem',
+    gap: '0.5rem',
+    boxSizing: 'border-box',
  },
 })

@@ -63,7 +64,7 @@ const GridCell = styled('div', {
    position: 'relative',
    minWidth: 0,
    minHeight: 0,
-    borderRadius: '4px',
+    borderRadius: '8px',
    overflow: 'hidden',
    backgroundColor: 'primaryDark.100',
    // Paint on own layer so FLIP transforms don't trigger layout thrash.
@@ -0,0 +1,97 @@
+import { memo } from 'react'
+import type { TrackReferenceOrPlaceholder } from '@livekit/components-core'
+import { styled } from '@/styled-system/jsx'
+import { ParticipantTile } from '@/features/rooms/livekit/components/ParticipantTile'
+import { getTrackKey } from '../../utils/pipTrackSelection'
+
+type PipScreenShareLayoutProps = {
+  screenShareTrack: TrackReferenceOrPlaceholder
+  cameraTracks: TrackReferenceOrPlaceholder[]
+}
+
+/**
+ * Layout when a screen share is active.
+ * Camera tiles are shown as a compact row at the top; the screen share occupies
+ * the remaining space below, much larger than the camera tiles.
+ */
+export const PipScreenShareLayout = memo(
+  ({ screenShareTrack, cameraTracks }: PipScreenShareLayoutProps) => {
+    return (
+      <LayoutContainer>
+        {cameraTracks.length > 0 && (
+          <CameraTilesRow>
+            {cameraTracks.map((track) => (
+              <CameraTile key={getTrackKey(track)}>
+                <ParticipantTile trackRef={track} disableTileControls />
+              </CameraTile>
+            ))}
+          </CameraTilesRow>
+        )}
+        <ScreenShareSlot>
+          <ParticipantTile trackRef={screenShareTrack} disableTileControls />
+        </ScreenShareSlot>
+      </LayoutContainer>
+    )
+  }
+)
+PipScreenShareLayout.displayName = 'PipScreenShareLayout'
+
+const LayoutContainer = styled('div', {
+  base: {
+    width: '100%',
+    height: '100%',
+    display: 'flex',
+    flexDirection: 'column',
+    gap: '0.5rem',
+    boxSizing: 'border-box',
+    overflow: 'hidden',
+  },
+})
+
+const CameraTilesRow = styled('div', {
+  base: {
+    display: 'flex',
+    flexDirection: 'row',
+    justifyContent: 'center',
+    gap: '0.5rem',
+    flexShrink: 0,
+    height: '22%',
+    minHeight: '60px',
+    maxHeight: '120px',
+  },
+})
+
+const CameraTile = styled('div', {
+  base: {
+    position: 'relative',
+    flex: '0 1 auto',
+    height: '100%',
+    aspectRatio: '16 / 9',
+    minWidth: 0,
+    borderRadius: '8px',
+    overflow: 'hidden',
+    backgroundColor: 'primaryDark.100',
+    '& .lk-participant-tile': {
+      width: '100%',
+      height: '100%',
+    },
+  },
+})
+
+const ScreenShareSlot = styled('div', {
+  base: {
+    position: 'relative',
+    flex: 1,
+    minHeight: 0,
+    borderRadius: '8px',
+    overflow: 'hidden',
+    backgroundColor: 'primaryDark.100',
+    '& .lk-participant-tile': {
+      width: '100%',
+      height: '100%',
+    },
+    '& .lk-participant-media-video': {
+      objectFit: 'contain',
+    },
+  },
+})
@@ -1,10 +1,11 @@
-import { useMemo } from 'react'
+import React, { useMemo } from 'react'
 import { usePagination, useTracks } from '@livekit/components-react'
 import { RoomEvent, Track } from 'livekit-client'
 import { styled } from '@/styled-system/jsx'
 import { PipFocusLayout } from './PipFocusLayout'
 import { PipGridLayout } from './PipGridLayout'
 import { PipPagination } from './PipPagination'
+import { PipScreenShareLayout } from './PipScreenShareLayout'
 import { StageFrame } from './StageFrame'
 import { MAX_PIP_TILES } from '../../utils/pipGrid'
 import {
@@ -13,9 +14,12 @@ import {
 } from '@livekit/components-core'

 /**
- * PipStage picks between two layouts based on track count:
- *   - Focus mode (≤ 2 tracks): one main track + one thumbnail overlay.
- *   - Grid mode  (3+ tracks):  adaptive tiling.
+ * PipStage picks between three layouts:
+ *   - Screen share mode (any screen share active):
+ *     small camera tiles in a row at the top, large screen share below.
+ *   - Grid mode  (3+ camera tracks, no screen share): adaptive tiling.
+ *   - Focus mode (≤ 2 camera tracks, no screen share): one main track
+ *     + one thumbnail overlay.
 */
 export const PipStage = () => {
  const tracks = useTracks(
@@ -41,51 +45,55 @@ export const PipStage = () => {
    [tracks]
  )

-  // Grid mode order: screen share leads, then cameras (already ordered by
-  // active speaker via the `ActiveSpeakersChanged` update above).
-  const gridTracks = useMemo(
-    () =>
-      screenShareTrack ? [screenShareTrack, ...cameraTracks] : cameraTracks,
-    [screenShareTrack, cameraTracks]
-  )
+  // Cap camera tiles in screen-share mode. Called unconditionally for hook rules.
+  const paginatedCameraTracks = usePagination(MAX_PIP_TILES - 1, cameraTracks)

-  // Cap the grid at MAX_PIP_TILES per page. `usePagination` keeps the visible
-  // page visually stable (active/recent speakers stay put) via its internal
-  // `useVisualStableUpdate`. Called unconditionally to respect hook rules.
-  const pagination = usePagination(MAX_PIP_TILES, gridTracks)
+  // Cap the grid at MAX_PIP_TILES per page for the non-screenshare grid mode.
+  const pagination = usePagination(MAX_PIP_TILES, cameraTracks)

  if (tracks.length === 0) return null

-  /**
-   * The focus layout shows one main track with one thumbnail overlay,
-   * so it can only fit 2 tracks. Beyond that we switch to the grid.
-   */
-  if (gridTracks.length > 2) {
-    return (
-      <StageWrapper>
+  // Screen share active
+  if (screenShareTrack) {
+    // Solo presenter: screen share fills the area, camera as small thumbnail
+    if (cameraTracks.length <= 1) {
+      return (
        <StageFrame>
-          <PipGridLayout tracks={pagination.tracks} />
+          <PipFocusLayout
+            mainTrack={screenShareTrack}
+            thumbnailTrack={cameraTracks[0]}
+          />
        </StageFrame>
-        <PipPagination
-          totalPageCount={pagination.totalPageCount}
-          currentPage={pagination.currentPage}
-          nextPage={pagination.nextPage}
-          prevPage={pagination.prevPage}
+      )
+    }
+    // Multiple cameras: camera row at top, screen share below
+    return (
+      <PaginatedStage pagination={paginatedCameraTracks}>
+        <PipScreenShareLayout
+          screenShareTrack={screenShareTrack}
+          cameraTracks={paginatedCameraTracks.tracks}
        />
-      </StageWrapper>
+      </PaginatedStage>
    )
  }

+  // 3+ camera tracks → adaptive grid
+  if (cameraTracks.length > 2) {
+    return (
+      <PaginatedStage pagination={pagination}>
+        <PipGridLayout tracks={pagination.tracks} />
+      </PaginatedStage>
+    )
+  }
+
+  // ≤ 2 camera tracks → focus layout (main + optional thumbnail)
  const localCameraTrack = cameraTracks.find(
    (track) => track.participant?.isLocal
  )
-
  const remoteCameraTrack = cameraTracks.find(
    (track) => !track.participant?.isLocal
  )
-
-  const mainTrack = screenShareTrack ?? remoteCameraTrack ?? localCameraTrack
-
+  const mainTrack = remoteCameraTrack ?? localCameraTrack
  const thumbnailTrack =
    mainTrack === localCameraTrack ? undefined : localCameraTrack

@@ -96,6 +104,31 @@ export const PipStage = () => {
  )
 }

+type PaginationResult = {
+  totalPageCount: number
+  currentPage: number
+  nextPage: () => void
+  prevPage: () => void
+}
+
+const PaginatedStage = ({
+  pagination,
+  children,
+}: {
+  pagination: PaginationResult
+  children: React.ReactNode
+}) => (
+  <StageWrapper>
+    <StageFrame>{children}</StageFrame>
+    <PipPagination
+      totalPageCount={pagination.totalPageCount}
+      currentPage={pagination.currentPage}
+      nextPage={pagination.nextPage}
+      prevPage={pagination.prevPage}
+    />
+  </StageWrapper>
+)
+
 const StageWrapper = styled('div', {
  base: {
    display: 'flex',
@@ -25,8 +25,8 @@ const Container = styled('div', {
    flex: 1,
    minWidth: 0,
    minHeight: 0,
-    marginLeft: '0.5rem',
-    marginRight: '0.5rem',
+    padding: '0.5rem',
+    boxSizing: 'border-box',
    borderRadius: '4px',
    overflow: 'hidden',
  },
@@ -57,7 +57,9 @@ const RecordingDownload = () => {
  const isSaved =
    data?.status === RecordingStatus.Saved ||
    data?.status === RecordingStatus.NotificationSucceed ||
-    data?.status === RecordingStatus.FailedToStop
+    data?.status === RecordingStatus.FailedToStop ||
+    data?.status === RecordingStatus.ExternalProcessFailed ||
+    data?.status === RecordingStatus.ExternalProcessSuccessful

  const pageTitle = useMemo(() => {
    if (isError) return `${APP_TITLE} - ${t('error.title')}`
@@ -91,6 +93,8 @@ const RecordingDownload = () => {
  }

  if (
+    data.status !== RecordingStatus.ExternalProcessFailed &&
+    data.status !== RecordingStatus.ExternalProcessSuccessful &&
    data.status !== RecordingStatus.Saved &&
    data.status !== RecordingStatus.NotificationSucceed &&
    data.status !== RecordingStatus.FailedToStop
@@ -12,4 +12,6 @@ export enum RecordingStatus {
  FailedToStart = 'failedToStart',
  FailedToStop = 'failedToStop',
  NotificationSucceed = 'notification_succeeded',
+  ExternalProcessSuccessful = 'external_process_successful',
+  ExternalProcessFailed = 'external_process_failed',
 }
@@ -22,7 +22,7 @@ export type ApiRoom = {
  id: string
  name: string
  slug: string
-  pin_code: string
+  pin_code?: string
  is_administrable: boolean
  access_level: ApiAccessLevel
  livekit?: ApiLiveKit
@@ -36,6 +36,7 @@ import { PictureInPictureConference } from '@/features/pip/components/PictureInP
 import { notifyAutoMutedOnJoin } from '@/features/notifications/utils'
 import { useSnapshot } from 'valtio'
 import { userPreferencesStore } from '@/stores/userPreferences'
+import { userStore } from '@/stores/user'

 export const Conference = ({
  roomId,
@@ -53,6 +54,8 @@ export const Conference = ({
    userChoices: LocalUserChoices
  }

+  const { username } = useSnapshot(userStore)
+
  useEffect(() => {
    posthog.capture('visit-room', { slug: roomId })
  }, [roomId, posthog])
@@ -83,10 +86,10 @@ export const Conference = ({
    queryFn: () =>
      fetchRoom({
        roomId: roomId as string,
-        username: userConfig.username,
+        username: username,
      }).catch((error) => {
        if (error.statusCode == '404') {
-          createRoom({ slug: roomId, username: userConfig.username })
+          createRoom({ slug: roomId, username })
        }
      }),
    retry: false,
@@ -42,14 +42,17 @@ import {
  saveAudioInputDeviceId,
  saveAudioInputEnabled,
  saveAudioOutputDeviceId,
-  saveUsername,
  saveVideoInputDeviceId,
  saveVideoInputEnabled,
  userChoicesStore,
 } from '@/stores/userChoices'

+import { saveUsername, userStore } from '@/stores/user'
+
 import { useCannotUseDevice } from '../livekit/hooks/useCannotUseDevice'
 import { useSnapshot } from 'valtio'
+import { useUser } from '@/features/auth/api/useUser'
+import { useConfig } from '@/api/useConfig'

 const onError = (e: Error) => console.error('ERROR', e)

@@ -114,6 +117,9 @@ export const Join = ({
 }) => {
  const { t } = useTranslation('rooms', { keyPrefix: 'join' })

+  const { data: configData } = useConfig()
+  const { isLoggedIn, user } = useUser()
+
  const {
    audioEnabled,
    videoEnabled,
@@ -121,9 +127,10 @@ export const Join = ({
    audioOutputDeviceId,
    videoDeviceId,
    processorConfig,
-    username,
  } = useSnapshot(userChoicesStore)

+  const { username } = useSnapshot(userStore)
+
  const initialUserChoices = useRef<LocalUserChoices | null>(null)

  if (initialUserChoices.current === null) {
@@ -134,7 +141,6 @@ export const Join = ({
      audioOutputDeviceId,
      videoDeviceId,
      processorConfig,
-      username,
    }
  }

@@ -448,20 +454,23 @@ export const Join = ({
              <H lvl={1} margin="sm" centered>
                {t('heading')}
              </H>
-              <Field
-                type="text"
-                onChange={saveUsername}
-                label={t('usernameLabel')}
-                id="input-name"
-                defaultValue={username}
-                validate={(value) => !value && t('errors.usernameEmpty')}
-                wrapperProps={{
-                  noMargin: true,
-                  fullWidth: true,
-                }}
-                autoComplete="name"
-                maxLength={50}
-              />
+              {(!isLoggedIn ||
+                configData?.authenticated_users_can_edit_display_name) && (
+                <Field
+                  type="text"
+                  onChange={saveUsername}
+                  label={t('usernameLabel')}
+                  id="input-name"
+                  defaultValue={username || user?.full_name}
+                  validate={(value) => !value && t('errors.usernameEmpty')}
+                  wrapperProps={{
+                    noMargin: true,
+                    fullWidth: true,
+                  }}
+                  autoComplete="name"
+                  maxLength={50}
+                />
+              )}
            </VStack>
          </Form>
        )
@@ -2,6 +2,7 @@ import type { Participant } from 'livekit-client'
 import { styled } from '@/styled-system/jsx'
 import { Avatar } from '@/components/Avatar'
 import { useIsSpeaking } from '@livekit/components-react'
+import { getParticipantBackgroundGradient } from '@/features/rooms/utils/getParticipantBackgroundGradient'
 import { getParticipantColor } from '@/features/rooms/utils/getParticipantColor'
 import { useSize } from '@/features/rooms/livekit/hooks/useResizeObserver'
 import { useMemo, useRef } from 'react'
@@ -10,7 +11,6 @@ const StyledParticipantPlaceHolder = styled('div', {
  base: {
    width: '100%',
    height: '100%',
-    backgroundColor: 'primaryDark.100',
    display: 'flex',
    justifyContent: 'center',
    alignItems: 'center',
@@ -26,6 +26,10 @@ export const ParticipantPlaceholder = ({
 }: ParticipantPlaceholderProps) => {
  const isSpeaking = useIsSpeaking(participant)
  const participantColor = getParticipantColor(participant)
+  const backgroundGradient = useMemo(
+    () => getParticipantBackgroundGradient(participantColor),
+    [participantColor]
+  )

  const placeholderEl = useRef<HTMLDivElement>(null)
  const { width, height } = useSize(placeholderEl)
@@ -39,7 +43,13 @@ export const ParticipantPlaceholder = ({
  const initialSize = useMemo(() => Math.round(avatarSize * 0.3), [avatarSize])

  return (
-    <StyledParticipantPlaceHolder ref={placeholderEl}>
+    <StyledParticipantPlaceHolder
+      ref={placeholderEl}
+      style={{
+        backgroundColor: participantColor,
+        backgroundImage: backgroundGradient,
+      }}
+    >
      <div
        style={{
          borderRadius: '50%',
@@ -52,6 +52,7 @@ export function TrackRefContextIfNeeded(

 interface ParticipantTileExtendedProps extends ParticipantTileProps {
  disableMetadata?: boolean
+  disableTileControls?: boolean
 }

 export const ParticipantTile: (
@@ -66,6 +67,7 @@ export const ParticipantTile: (
    onParticipantClick,
    disableSpeakingIndicator,
    disableMetadata,
+    disableTileControls,
    ...htmlProps
  }: ParticipantTileExtendedProps,
  ref
@@ -231,7 +233,7 @@ export const ParticipantTile: (
              )}
            </>
          )}
-          {!disableMetadata && (
+          {!disableMetadata && !disableTileControls && (
            <ParticipantTileFocus
              trackRef={trackReference}
              hasKeyboardFocus={hasKeyboardFocus}
@@ -6,8 +6,8 @@ import { Button, Div } from '@/primitives'
 import { RiArrowLeftLine, RiCloseLine } from '@remixicon/react'
 import { useTranslation } from 'react-i18next'
 import { ParticipantsList } from './controls/Participants/ParticipantsList'
-import { useSidePanel } from '../hooks/useSidePanel'
-import { ReactNode } from 'react'
+import { PanelId, useSidePanel } from '../hooks/useSidePanel'
+import React, { ReactNode, useCallback, useRef } from 'react'
 import { Chat } from '../prefabs/Chat'
 import { Effects } from './effects/Effects'
 import { Admin } from './Admin'
@@ -15,6 +15,7 @@ import { Tools } from './Tools'
 import { Info } from './Info'
 import { HStack } from '@/styled-system/jsx'
 import { useReactionsToolbar } from '@/features/reactions/hooks/useReactionsToolbar'
+import { useRestoreFocus } from '@/hooks/useRestoreFocus'

 type StyledSidePanelProps = {
  title: string
@@ -29,103 +30,115 @@ type StyledSidePanelProps = {
  isReactionToolbarOpen?: boolean
 }

-const StyledSidePanel = ({
-  title,
-  ariaLabel,
-  children,
-  onClose,
-  isClosed,
-  isReactionToolbarOpen,
-  closeButtonTooltip,
-  isSubmenu = false,
-  onBack,
-  backButtonLabel,
-}: StyledSidePanelProps) => (
-  <aside
-    className={css({
-      borderWidth: '1px',
-      borderStyle: 'solid',
-      borderColor: 'box.border',
-      backgroundColor: 'box.bg',
-      color: 'box.text',
-      borderRadius: 8,
-      flex: 1,
-      position: 'absolute',
-      overflow: 'hidden',
-      display: 'flex',
-      flexDirection: 'column',
-      margin: 'var(--sizes-room-side-panel-margin)',
-      marginLeft: 0,
-      marginBottom: 0,
-      padding: 0,
-      gap: 0,
-      right: 0,
-      top: 0,
-      width: 'var(--sizes-room-side-panel)',
-      transition: '.5s cubic-bezier(.4,0,.2,1) 5ms',
-    })}
-    style={{
-      transform: isClosed
-        ? 'translateX(calc(var(--sizes-room-side-panel) + var(--sizes-room-side-panel-margin)))'
-        : 'none',
-      bottom: isReactionToolbarOpen
-        ? 'calc( var(--sizes-room-control-bar) + var(--sizes-room-reaction-toolbar-height) + calc(var(--lk-grid-gap) / 2))'
-        : 'var(--sizes-room-control-bar)',
-    }}
-    aria-hidden={isClosed}
-    aria-label={ariaLabel}
-  >
-    <HStack alignItems="center">
-      {isSubmenu && (
-        <Button
-          variant="secondaryText"
-          size="sm"
-          square
-          className={css({ marginRight: '0.5rem', marginLeft: '1rem' })}
-          aria-label={backButtonLabel}
-          onPress={onBack}
+const StyledSidePanel = React.forwardRef<HTMLElement, StyledSidePanelProps>(
+  (
+    {
+      title,
+      ariaLabel,
+      children,
+      onClose,
+      isClosed,
+      isReactionToolbarOpen,
+      closeButtonTooltip,
+      isSubmenu = false,
+      onBack,
+      backButtonLabel,
+    },
+    ref
+  ) => (
+    <aside
+      ref={ref}
+      tabIndex={-1}
+      className={css({
+        borderWidth: '1px',
+        borderStyle: 'solid',
+        borderColor: 'box.border',
+        backgroundColor: 'box.bg',
+        color: 'box.text',
+        borderRadius: 8,
+        flex: 1,
+        position: 'absolute',
+        overflow: 'hidden',
+        display: 'flex',
+        flexDirection: 'column',
+        margin: 'var(--sizes-room-side-panel-margin)',
+        marginLeft: 0,
+        marginBottom: 0,
+        padding: 0,
+        gap: 0,
+        right: 0,
+        top: 0,
+        width: 'var(--sizes-room-side-panel)',
+        transition: '.5s cubic-bezier(.4,0,.2,1) 5ms',
+        '&:focus': {
+          outline: 'none',
+        },
+      })}
+      style={{
+        transform: isClosed
+          ? 'translateX(calc(var(--sizes-room-side-panel) + var(--sizes-room-side-panel-margin)))'
+          : 'none',
+        bottom: isReactionToolbarOpen
+          ? 'calc( var(--sizes-room-control-bar) + var(--sizes-room-reaction-toolbar-height) + calc(var(--lk-grid-gap) / 2))'
+          : 'var(--sizes-room-control-bar)',
+      }}
+      aria-hidden={isClosed}
+      aria-label={ariaLabel}
+    >
+      <HStack alignItems="center">
+        {isSubmenu && (
+          <Button
+            variant="secondaryText"
+            size="sm"
+            square
+            className={css({ marginRight: '0.5rem', marginLeft: '1rem' })}
+            aria-label={backButtonLabel}
+            onPress={onBack}
+          >
+            <RiArrowLeftLine size={20} aria-hidden="true" />
+          </Button>
+        )}
+        <Heading
+          slot="title"
+          level={1}
+          className={text({ variant: 'h2' })}
+          style={{
+            paddingLeft: isSubmenu ? 0 : '1.5rem',
+            paddingTop: '1rem',
+            display: isClosed ? 'none' : 'flex',
+            justifyContent: 'start',
+            alignItems: 'center',
+          }}
        >
-          <RiArrowLeftLine size={20} aria-hidden="true" />
-        </Button>
-      )}
-      <Heading
-        slot="title"
-        level={1}
-        className={text({ variant: 'h2' })}
+          {title}
+        </Heading>
+      </HStack>
+      <Div
+        position="absolute"
+        top="5"
+        right="5"
        style={{
-          paddingLeft: isSubmenu ? 0 : '1.5rem',
-          paddingTop: '1rem',
-          display: isClosed ? 'none' : 'flex',
-          justifyContent: 'start',
-          alignItems: 'center',
+          display: isClosed ? 'none' : undefined,
        }}
      >
-        {title}
-      </Heading>
-    </HStack>
-    <Div
-      position="absolute"
-      top="5"
-      right="5"
-      style={{
-        display: isClosed ? 'none' : undefined,
-      }}
-    >
-      <Button
-        invisible
-        variant="tertiaryText"
-        size="xs"
-        onPress={onClose}
-        aria-label={closeButtonTooltip}
-        tooltip={closeButtonTooltip}
-      >
-        <RiCloseLine />
-      </Button>
-    </Div>
-    {children}
-  </aside>
+        <Button
+          invisible
+          variant="tertiaryText"
+          size="xs"
+          onPress={onClose}
+          aria-label={closeButtonTooltip}
+          tooltip={closeButtonTooltip}
+        >
+          <RiCloseLine />
+        </Button>
+      </Div>
+      {children}
+    </aside>
+  )
 )

+StyledSidePanel.displayName = 'StyledSidePanel'
+
 type PanelProps = {
  isOpen: boolean
  children: React.ReactNode
@@ -162,8 +175,28 @@ export const SidePanel = () => {

  const { isOpen: isReactionToolbarOpen } = useReactionsToolbar()

+  const asideRef = useRef<HTMLElement>(null)
+
+  const focusAside = useCallback(() => {
+    requestAnimationFrame(() => {
+      asideRef.current?.focus({ preventScroll: true })
+    })
+  }, [])
+
+  const handlePanelOpened = useCallback(() => {
+    if (activePanelId === PanelId.CHAT) return
+    focusAside()
+  }, [activePanelId, focusAside])
+
+  useRestoreFocus(isSidePanelOpen, {
+    onOpened: handlePanelOpened,
+    preventScroll: true,
+    activeKey: activePanelId,
+  })
+
  return (
    <StyledSidePanel
+      ref={asideRef}
      title={title}
      ariaLabel={t('ariaLabel', { title })}
      onClose={() => {
@@ -95,8 +95,13 @@ const ToolButton = ({

 export const Tools = () => {
  const { data } = useConfig()
-  const { openTranscript, openScreenRecording, activeSubPanelId, isToolsOpen } =
-    useSidePanel()
+  const {
+    openTranscript,
+    openScreenRecording,
+    activeSubPanelId,
+    isToolsOpen,
+    isSidePanelOpen,
+  } = useSidePanel()
  const { t } = useTranslation('rooms', { keyPrefix: 'moreTools' })

  // Restore focus to the element that opened the Tools panel
@@ -113,6 +118,7 @@ export const Tools = () => {
    },
    restoreFocusRaf: true,
    preventScroll: true,
+    shouldRestoreOnClose: () => !isSidePanelOpen,
  })

  const isTranscriptEnabled = useIsRecordingModeEnabled(
@@ -13,8 +13,10 @@ import {
 } from './TimerWorker'
 import {
  BackgroundProcessorInterface,
+  SELFIE_SEGMENTER_MODEL_PATH,
  type ProcessorConfig,
  type ProcessorType,
+  MEDIAPIPE_PATH_WASM,
 } from '.'

 const PROCESSING_WIDTH = 256
@@ -153,13 +155,10 @@ export class BackgroundCustomProcessor implements BackgroundProcessorInterface {
  }

  async initSegmenter() {
-    const vision = await FilesetResolver.forVisionTasks(
-      'https://cdn.jsdelivr.net/npm/@mediapipe/tasks-vision/wasm'
-    )
+    const vision = await FilesetResolver.forVisionTasks(MEDIAPIPE_PATH_WASM)
    this.imageSegmenter = await ImageSegmenter.createFromOptions(vision, {
      baseOptions: {
-        modelAssetPath:
-          'https://storage.googleapis.com/mediapipe-models/image_segmenter/selfie_segmenter_landscape/float16/latest/selfie_segmenter_landscape.tflite',
+        modelAssetPath: SELFIE_SEGMENTER_MODEL_PATH,
        delegate: 'CPU', // Use CPU for Firefox.
      },
      runningMode: 'VIDEO',
@@ -11,7 +11,11 @@ import {
  TIMEOUT_TICK,
  timerWorkerScript,
 } from './TimerWorker'
-import { ProcessorType } from '.'
+import {
+  FACE_LANDMARKS_MODEL_PATH,
+  ProcessorType,
+  MEDIAPIPE_PATH_WASM,
+} from '.'

 const PROCESSING_WIDTH = 256 * 3
 const PROCESSING_HEIGHT = 144 * 3
@@ -128,13 +132,10 @@ export class FaceLandmarksProcessor implements TrackProcessor<Track.Kind> {
  }

  async initFaceLandmarker() {
-    const vision = await FilesetResolver.forVisionTasks(
-      'https://cdn.jsdelivr.net/npm/@mediapipe/tasks-vision/wasm'
-    )
+    const vision = await FilesetResolver.forVisionTasks(MEDIAPIPE_PATH_WASM)
    this.faceLandmarker = await FaceLandmarker.createFromOptions(vision, {
      baseOptions: {
-        modelAssetPath:
-          'https://storage.googleapis.com/mediapipe-models/face_landmarker/face_landmarker/float16/latest/face_landmarker.task',
+        modelAssetPath: FACE_LANDMARKS_MODEL_PATH,
        delegate: 'GPU',
      },
      runningMode: 'VIDEO',
@@ -1,13 +1,14 @@
 import type { ProcessorOptions, Track } from 'livekit-client'
 import {
-  BackgroundBlur,
  ProcessorWrapper,
-  VirtualBackground,
+  BackgroundProcessor,
 } from '@livekit/track-processors'
 import {
  type ProcessorConfig,
  BackgroundProcessorInterface,
  ProcessorType,
+  MEDIAPIPE_PATH_WASM,
+  SELFIE_SEGMENTER_MODEL_PATH,
 } from '.'

 export class UnifiedBackgroundTrackProcessor implements BackgroundProcessorInterface {
@@ -20,10 +21,24 @@ export class UnifiedBackgroundTrackProcessor implements BackgroundProcessorInter

    if (opts.type === 'virtual') {
      this.processorType = ProcessorType.VIRTUAL
-      this.processor = VirtualBackground(opts.imagePath)
+      this.processor = BackgroundProcessor({
+        mode: 'virtual-background',
+        imagePath: opts.imagePath,
+        assetPaths: {
+          tasksVisionFileSet: MEDIAPIPE_PATH_WASM,
+          modelAssetPath: SELFIE_SEGMENTER_MODEL_PATH,
+        },
+      })
    } else if (opts.type === 'blur') {
      this.processorType = ProcessorType.BLUR
-      this.processor = BackgroundBlur(opts.blurRadius)
+      this.processor = BackgroundProcessor({
+        mode: 'background-blur',
+        blurRadius: opts.blurRadius,
+        assetPaths: {
+          tasksVisionFileSet: MEDIAPIPE_PATH_WASM,
+          modelAssetPath: SELFIE_SEGMENTER_MODEL_PATH,
+        },
+      })
    } else {
      throw new Error(
        'Must provide either imagePath for virtual background or blurRadius for blur'
@@ -4,6 +4,14 @@ import { BackgroundCustomProcessor } from './BackgroundCustomProcessor'
 import { UnifiedBackgroundTrackProcessor } from './UnifiedBackgroundTrackProcessor'
 import { FaceLandmarksOptions } from './FaceLandmarksProcessor'

+export const SELFIE_SEGMENTER_MODEL_PATH =
+  '/assets/mediapipe/models/selfie_segmenter_landscape.tflite'
+
+export const FACE_LANDMARKS_MODEL_PATH =
+  '/assets/mediapipe/models/face_landmarker.task'
+
+export const MEDIAPIPE_PATH_WASM = '/assets/mediapipe/wasm'
+
 export enum ProcessorType {
  BLUR = 'blur',
  VIRTUAL = 'virtual',
@@ -1,23 +1,20 @@
 import { Button } from '@/primitives'
 import { useTranslation } from 'react-i18next'
 import type { Participant } from 'livekit-client'
-import { useIsAdminOrOwner } from '@/features/rooms/livekit/hooks/useIsAdminOrOwner'
 import { useMuteParticipants } from '@/features/rooms/api/muteParticipants'
 import { RiMicOffLine } from '@remixicon/react'
 import { css } from '@/styled-system/css'
+import { AdminOrOwnerOnly } from '@/features/rooms/components/AdminOrOwnerOnly'

 type MuteEveryoneButtonProps = {
  participants: Array<Participant>
 }

-export const MuteEveryoneButton = ({
-  participants,
-}: MuteEveryoneButtonProps) => {
+const MuteEveryoneButtonInner = ({ participants }: MuteEveryoneButtonProps) => {
  const { muteParticipants } = useMuteParticipants()
  const { t } = useTranslation('rooms')

-  const isAdminOrOwner = useIsAdminOrOwner()
-  if (!isAdminOrOwner || !participants.length) return null
+  if (!participants.length) return null

  return (
    <Button
@@ -36,3 +33,13 @@ export const MuteEveryoneButton = ({
    </Button>
  )
 }
+
+export const MuteEveryoneButton = ({
+  participants,
+}: MuteEveryoneButtonProps) => {
+  return (
+    <AdminOrOwnerOnly>
+      <MuteEveryoneButtonInner participants={participants} />
+    </AdminOrOwnerOnly>
+  )
+}
@@ -37,7 +37,7 @@ export function Chat({ ...props }: ChatProps) {
  const room = useRoomContext()
  const { send, chatMessages, isSending } = useChat()

-  const { isChatOpen } = useSidePanel()
+  const { isChatOpen, isSidePanelOpen } = useSidePanel()
  const chatSnap = useSnapshot(chatStore)

  // Keep track of the element that opened the chat so we can restore focus
@@ -51,6 +51,7 @@ export function Chat({ ...props }: ChatProps) {
      })
    },
    preventScroll: true,
+    shouldRestoreOnClose: () => !isSidePanelOpen,
  })

  // Use useParticipants hook to trigger a re-render when the participant list changes.
@@ -0,0 +1,12 @@
+/**
+ * Builds a radial gradient from the participant's avatar color:
+ * brighter in the center (where the avatar sits), darker at the edges.
+ * Mixed in oklch so the color stays vivid as it darkens instead of greying out.
+ */
+export const getParticipantBackgroundGradient = (color: string): string =>
+  `radial-gradient(circle at 50% 45%,
+    color-mix(in oklch, ${color} 82%, white) 0%,
+    color-mix(in oklch, ${color} 90%, white) 8%,
+    ${color} 35%,
+    color-mix(in oklch, ${color} 85%, black) 65%,
+    color-mix(in oklch, ${color} 65%, black) 100%)`
@@ -8,8 +8,9 @@ import { HStack } from '@/styled-system/jsx'
 import { useState } from 'react'
 import { LoginButton } from '@/components/LoginButton'
 import { useRenameParticipant } from '@/features/rooms/api/renameParticipant'
-import { saveUsername } from '@/stores/userChoices'
+import { saveUsername } from '@/stores/user'
 import { logout } from '@/features/auth/utils/logout'
+import { useConfig } from '@/api/useConfig'

 export type AccountTabProps = Pick<DialogProps, 'onOpenChange'> &
  Pick<TabPanelProps, 'id'>
@@ -17,6 +18,7 @@ export type AccountTabProps = Pick<DialogProps, 'onOpenChange'> &
 export const AccountTab = ({ id, onOpenChange }: AccountTabProps) => {
  const { t } = useTranslation('settings')
  const room = useRoomContext()
+  const { data } = useConfig()
  const { user, isLoggedIn } = useUser()

  const { renameParticipant } = useRenameParticipant()
@@ -45,15 +47,17 @@ export const AccountTab = ({ id, onOpenChange }: AccountTabProps) => {
  return (
    <TabPanel padding={'md'} flex id={id}>
      <H lvl={2}>{t('account.heading')}</H>
-      <Field
-        type="text"
-        label={t('account.nameLabel')}
-        value={name}
-        onChange={setName}
-        validate={(value) => {
-          return !value ? <p>{t('account.nameError')}</p> : null
-        }}
-      />
+      {(!isLoggedIn || data?.authenticated_users_can_edit_display_name) && (
+        <Field
+          type="text"
+          label={t('account.nameLabel')}
+          value={name}
+          onChange={setName}
+          validate={(value) => {
+            return !value ? <p>{t('account.nameError')}</p> : null
+          }}
+        />
+      )}
      <H lvl={2}>{t('account.authentication')}</H>
      {isLoggedIn ? (
        <>
@@ -6,6 +6,10 @@ export type RestoreFocusOptions = {
  onClosed?: () => void
  restoreFocusRaf?: boolean
  preventScroll?: boolean
+  /** When the panel stays open but its content changes, update the restore target. */
+  activeKey?: string | null
+  /** Return false to skip restoring focus on close (e.g. when switching to another panel). */
+  shouldRestoreOnClose?: () => boolean
 }

 /**
@@ -22,9 +26,12 @@ export function useRestoreFocus(
    onClosed,
    restoreFocusRaf = false,
    preventScroll = true,
+    activeKey,
+    shouldRestoreOnClose,
  } = options

  const prevIsOpenRef = useRef(false)
+  const prevActiveKeyRef = useRef(activeKey)
  const triggerRef = useRef<HTMLElement | null>(null)

  useEffect(() => {
@@ -37,25 +44,41 @@ export function useRestoreFocus(
      onOpened?.()
    }

+    // Panel switched while staying open
+    if (wasOpen && isOpen && activeKey !== prevActiveKeyRef.current) {
+      const activeEl = document.activeElement as HTMLElement | null
+      triggerRef.current = resolveTrigger ? resolveTrigger(activeEl) : activeEl
+      onOpened?.()
+    }
+
    // Just closed
    if (wasOpen && !isOpen) {
      const trigger = triggerRef.current
-      if (trigger && document.contains(trigger)) {
+      const shouldRestore =
+        (shouldRestoreOnClose?.() ?? true) &&
+        trigger &&
+        document.contains(trigger)
+
+      if (shouldRestore) {
        const focus = () => trigger.focus({ preventScroll })
        if (restoreFocusRaf) requestAnimationFrame(focus)
        else focus()
      }
+
      triggerRef.current = null
      onClosed?.()
    }

    prevIsOpenRef.current = isOpen
+    prevActiveKeyRef.current = activeKey
  }, [
    isOpen,
+    activeKey,
    onClosed,
    onOpened,
    preventScroll,
    resolveTrigger,
    restoreFocusRaf,
+    shouldRestoreOnClose,
  ])
 }
@@ -0,0 +1,37 @@
+import { proxy, subscribe } from 'valtio'
+import { STORAGE_KEYS } from '@/utils/storageKeys'
+
+type State = {
+  username: string
+}
+
+const DEFAULT_STATE = {
+  username: '',
+}
+
+function getUserState(): State {
+  try {
+    const stored = localStorage.getItem(STORAGE_KEYS.USER)
+    if (!stored) return DEFAULT_STATE
+    const parsed = JSON.parse(stored)
+    return {
+      ...parsed,
+    }
+  } catch (error: unknown) {
+    console.error(
+      '[UserPreferencesStore] Failed to parse stored settings:',
+      error
+    )
+    return DEFAULT_STATE
+  }
+}
+
+export const userStore = proxy<State>(getUserState())
+
+subscribe(userStore, () => {
+  localStorage.setItem(STORAGE_KEYS.USER, JSON.stringify(userStore))
+})
+
+export const saveUsername = (username: string) => {
+  userStore.username = username
+}
@@ -12,7 +12,7 @@ import { VideoQuality } from 'livekit-client'

 export type VideoResolution = 'h720' | 'h360' | 'h180'

-export type LocalUserChoices = LocalUserChoicesLK & {
+export type LocalUserChoices = Omit<LocalUserChoicesLK, 'username'> & {
  processorConfig?: ProcessorConfig
  noiseReductionEnabled?: boolean
  audioOutputDeviceId?: string
@@ -32,7 +32,13 @@ function getUserChoicesState(): LocalUserChoices {

 export const userChoicesStore = proxy<LocalUserChoices>(getUserChoicesState())
 subscribe(userChoicesStore, () => {
-  saveUserChoices(userChoicesStore, false)
+  // TEMPORARY: cast needed because our store omits `username`, which we no
+  // longer persis in this store, while LiveKit's `saveUserChoices` still expects the full
+  // `LocalUserChoices` shape. `username` ends up `undefined` in the saved
+  // object, which `saveUserChoices` tolerates at runtime.
+  // We are migrating away from LiveKit's persistence logic to our own store
+  // handling for more control — this cast can be removed once that lands.
+  saveUserChoices(userChoicesStore as LocalUserChoicesLK, false)
 })

 // we run some logic on store loading to check if the processor config is still valid
@@ -90,10 +96,6 @@ export const saveVideoSubscribeQuality = (quality: VideoQuality) => {
  userChoicesStore.videoSubscribeQuality = quality
 }

-export const saveUsername = (username: string) => {
-  userChoicesStore.username = username
-}
-
 export const saveNoiseReductionEnabled = (enabled: boolean) => {
  userChoicesStore.noiseReductionEnabled = enabled
 }
@@ -4,5 +4,6 @@
 export const STORAGE_KEYS = {
  NOTIFICATIONS: 'app_notification_settings',
  USER_PREFERENCES: 'app_user_preferences',
+  USER: 'app_user',
  ACCESSIBILITY: 'app_accessibility_settings',
 } as const
@@ -2,6 +2,7 @@ import { defineConfig, loadEnv } from 'vite'
 import react from '@vitejs/plugin-react'
 import { visualizer } from 'rollup-plugin-visualizer'
 import svgr from 'vite-plugin-svgr'
+import { viteStaticCopy } from 'vite-plugin-static-copy'

 // https://vitejs.dev/config/
 export default defineConfig(({ mode }) => {
@@ -11,18 +12,32 @@ export default defineConfig(({ mode }) => {
      react(),
      svgr({
        svgrOptions: {
-          replaceAttrValues: { '#000': 'currentColor', '#000000': 'currentColor', '#1f1f1f': 'currentColor' },
+          replaceAttrValues: {
+            '#000': 'currentColor',
+            '#000000': 'currentColor',
+            '#1f1f1f': 'currentColor',
+          },
        },
      }),
-      env.VITE_ANALYZE === 'true' && visualizer({
-        open: true,
-        filename: 'rollup-plugin-visualizer/stats.html',
-        gzipSize: true,
-        brotliSize: true,
+      viteStaticCopy({
+        targets: [
+          {
+            src: 'node_modules/@mediapipe/tasks-vision/wasm/*',
+            dest: 'assets/mediapipe/wasm',
+            rename: { stripBase: 4 },
+          },
+        ],
      }),
+      env.VITE_ANALYZE === 'true' &&
+        visualizer({
+          open: true,
+          filename: 'rollup-plugin-visualizer/stats.html',
+          gzipSize: true,
+          brotliSize: true,
+        }),
    ],
    resolve: {
-      tsconfigPaths: true
+      tsconfigPaths: true,
    },
    build: {
      sourcemap: env.VITE_BUILD_SOURCEMAP === 'true',
@@ -28,7 +28,25 @@ _summaryEnvVars: &summaryEnvVars
  AWS_S3_ACCESS_KEY_ID: meet
  AWS_S3_SECRET_ACCESS_KEY: password
  AWS_S3_SECURE_ACCESS: False
-  AUTHORIZED_TENANTS: '[{"id": "dictaphone", "api_key": "dictaphone_token", "webhook_url": "http://dictaphone-backend.dictaphone.svc.cluster.local/api/v1.0/ai-jobs/webhook/", "webhook_api_key": "token_summary"}]'
+  AUTHORIZED_TENANTS: >
+    [
+      {
+        "id": "dictaphone",
+        "api_key": "dictaphone_token",
+        "webhook_url": "http://dictaphone-backend.dictaphone.svc.cluster.local/api/v1.0/ai-jobs/webhook/",
+        "webhook_api_key": "token_summary",
+        "allowed_push_to_docs": false
+      },
+      {
+        "id": "meet",
+        "api_key": "password",
+        "webhook_url": "https://meet.127.0.0.1.nip.io/api/v1.0/recordings/external-process-hook/",
+        "webhook_api_key": "webhook-password",
+        "allowed_push_to_docs": false
+      }
+    ]
+  SSL_CERT_FILE: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
+  IS_DOCS_INTEGRATION_ENABLED: false
  WHISPERX_API_KEY:
    secretKeyRef:
      name: secret-dev
@@ -169,9 +187,12 @@ backend:
    RECORDING_ENABLE: True
    RECORDING_STORAGE_EVENT_ENABLE: True
    RECORDING_STORAGE_EVENT_TOKEN: password
-    SUMMARY_SERVICE_ENDPOINT: http://meet-summary:80/api/v1/tasks/
+    SUMMARY_SERVICE_ENDPOINT: http://meet-summary:80/api/v2/async-jobs/transcribe/
    SUMMARY_SERVICE_API_TOKEN: password
+    SUMMARY_SERVICE_WEBHOOK_API_TOKEN: webhook-password
    RECORDING_DOWNLOAD_BASE_URL: https://meet.127.0.0.1.nip.io/recording
+    OIDC_USERINFO_FULLNAME_FIELDS: first_name, last_name
+    OIDC_USERINFO_SHORTNAME_FIELD: first_name

  migrate:
    command:
@@ -291,7 +312,7 @@ celeryTranscribe:
    - "--pool=solo"
    - "--loglevel=info"
    - "-Q"
-    - "transcribe-queue,transcribe-queue-v2"
+    - "transcribe-queue-v2"

 celerySummarize:
  replicas: 1
@@ -308,7 +329,7 @@ celerySummarize:
    - "--pool=solo"
    - "--loglevel=info"
    - "-Q"
-    - "summarize-queue,summarize-queue-v2"
+    - "summarize-queue-v2"

 celerySummaryBackend:
  replicas: 1
@@ -1,4 +1,4 @@
 apiVersion: v2
 type: application
 name: meet
-version: 0.0.26
+version: 0.0.27
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:mailappor="http://schemas.microsoft.com/office/mailappversionoverrides/1.0" xsi:type="MailApp">
  <Id>{{ .id }}</Id>
-  <Version>0.0.2.0</Version>
+  <Version>1.0.0.0</Version>
  <ProviderName>{{ .appName }}</ProviderName>
  <DefaultLocale>fr-FR</DefaultLocale>
  <DisplayName DefaultValue="{{ .appName }}"/>
@@ -205,5 +205,174 @@
        </bt:String>
      </bt:LongStrings>
    </Resources>
+
+    <!-- ─── V1.1 override: MUST be nested inside the V1.0 block, after Resources ─── -->
+    <VersionOverrides xmlns="http://schemas.microsoft.com/office/mailappversionoverrides/1.1" xsi:type="VersionOverridesV1_1">
+      <Requirements>
+        <bt:Sets DefaultMinVersion="1.8">
+          <bt:Set Name="Mailbox"/>
+        </bt:Sets>
+      </Requirements>
+      <Hosts>
+        <Host xsi:type="MailHost">
+          <DesktopFormFactor>
+            <SupportsSharedFolders>true</SupportsSharedFolders>
+            <FunctionFile resid="Commands.Url"/>
+
+            <!-- ─── Mail: Read ─────────────────────────────────────────── -->
+            <ExtensionPoint xsi:type="MessageReadCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="msgReadGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="msgReadOpenPaneButton">
+                    <Label resid="TaskpaneButton.Label"/>
+                    <Supertip>
+                      <Title resid="TaskpaneButton.Label"/>
+                      <Description resid="TaskpaneButton.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+            <!-- ─── Mail: Compose ─────────────────────────────────────── -->
+            <ExtensionPoint xsi:type="MessageComposeCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="msgComposeGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="msgComposeGenerateLinkButton">
+                    <Label resid="GenerateLink.Label"/>
+                    <Supertip>
+                      <Title resid="GenerateLink.Label"/>
+                      <Description resid="GenerateLink.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ExecuteFunction">
+                      <FunctionName>generateMeetingLinkFromMail</FunctionName>
+                    </Action>
+                  </Control>
+                  <Control xsi:type="Button" id="msgComposeOpenPaneButton">
+                    <Label resid="TaskpaneButton.Label"/>
+                    <Supertip>
+                      <Title resid="TaskpaneButton.Label"/>
+                      <Description resid="TaskpaneButton.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Settings.16x16"/>
+                      <bt:Image size="32" resid="Settings.32x32"/>
+                      <bt:Image size="80" resid="Settings.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+            <!-- ─── Calendar: Compose (New/Edit appointment) ──────────── -->
+            <ExtensionPoint xsi:type="AppointmentOrganizerCommandSurface">
+              <OfficeTab id="TabDefault">
+                <Group id="apptComposeGroup">
+                  <Label resid="GroupLabel"/>
+                  <Control xsi:type="Button" id="apptGenerateLinkButton">
+                    <Label resid="GenerateLink.Label"/>
+                    <Supertip>
+                      <Title resid="GenerateLink.Label"/>
+                      <Description resid="GenerateLink.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Icon.16x16"/>
+                      <bt:Image size="32" resid="Icon.32x32"/>
+                      <bt:Image size="80" resid="Icon.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ExecuteFunction">
+                      <FunctionName>generateMeetingLinkFromCalendar</FunctionName>
+                    </Action>
+                  </Control>
+
+                  <Control xsi:type="Button" id="apptOpenSettingsButton">
+                    <Label resid="OpenSettings.Label"/>
+                    <Supertip>
+                      <Title resid="OpenSettings.Label"/>
+                      <Description resid="OpenSettings.Tooltip"/>
+                    </Supertip>
+                    <Icon>
+                      <bt:Image size="16" resid="Settings.16x16"/>
+                      <bt:Image size="32" resid="Settings.32x32"/>
+                      <bt:Image size="80" resid="Settings.80x80"/>
+                    </Icon>
+                    <Action xsi:type="ShowTaskpane">
+                      <SourceLocation resid="Taskpane.Url"/>
+                    </Action>
+                  </Control>
+
+                </Group>
+              </OfficeTab>
+            </ExtensionPoint>
+
+          </DesktopFormFactor>
+        </Host>
+      </Hosts>
+      <Resources>
+        <bt:Images>
+          <bt:Image id="Settings.16x16" DefaultValue="{{ .baseUrl }}/assets/settings-16.png"/>
+          <bt:Image id="Settings.32x32" DefaultValue="{{ .baseUrl }}/assets/settings-32.png"/>
+          <bt:Image id="Settings.80x80" DefaultValue="{{ .baseUrl }}/assets/settings-80.png"/>
+          <bt:Image id="Add.16x16" DefaultValue="{{ .baseUrl }}/assets/add-16.png"/>
+          <bt:Image id="Add.32x32" DefaultValue="{{ .baseUrl }}/assets/add-32.png"/>
+          <bt:Image id="Add.80x80" DefaultValue="{{ .baseUrl }}/assets/add-80.png"/>
+          <bt:Image id="Icon.16x16" DefaultValue="{{ .baseUrl }}/assets/icon-16.png"/>
+          <bt:Image id="Icon.32x32" DefaultValue="{{ .baseUrl }}/assets/icon-32.png"/>
+          <bt:Image id="Icon.80x80" DefaultValue="{{ .baseUrl }}/assets/icon-80.png"/>
+        </bt:Images>
+        <bt:Urls>
+          <bt:Url id="Commands.Url" DefaultValue="{{ .baseUrl }}/commands.html"/>
+          <bt:Url id="Taskpane.Url" DefaultValue="{{ .baseUrl }}/taskpane.html"/>
+        </bt:Urls>
+        <bt:ShortStrings>
+          <!-- Default (French) -->
+          <bt:String id="GroupLabel" DefaultValue="{{ .appName }}"/>
+          <bt:String id="GenerateLink.Label" DefaultValue="Ajouter un lien {{ .appName }}">
+            <bt:Override Locale="en-US" Value="Add a {{ .appName }} link"/>
+            <bt:Override Locale="de-DE" Value="{{ .appName }}-Link hinzufügen"/>
+          </bt:String>
+          <bt:String id="TaskpaneButton.Label" DefaultValue="Ouvrir les paramètres">
+            <bt:Override Locale="en-US" Value="Open settings"/>
+            <bt:Override Locale="de-DE" Value="Einstellungen öffnen"/>
+          </bt:String>
+          <bt:String id="OpenSettings.Label" DefaultValue="Paramètres">
+            <bt:Override Locale="en-US" Value="Settings"/>
+            <bt:Override Locale="de-DE" Value="Einstellungen"/>
+          </bt:String>
+        </bt:ShortStrings>
+        <bt:LongStrings>
+          <bt:String id="GenerateLink.Tooltip" DefaultValue="Génère un lien de réunion {{ .appName }} et l'insère dans l'événement.">
+            <bt:Override Locale="de-DE" Value="Generiert einen {{ .appName }}-Besprechungslink und fügt ihn in den Termin ein."/>
+            <bt:Override Locale="en-US" Value="Generates a {{ .appName }} meeting link and inserts it into the item."/>
+          </bt:String>
+          <bt:String id="TaskpaneButton.Tooltip" DefaultValue="Ouvre les paramètres de connexion {{ .appName }}.">
+            <bt:Override Locale="de-DE" Value="Öffnet die {{ .appName }}-Verbindungseinstellungen."/>
+            <bt:Override Locale="en-US" Value="Opens the {{ .appName }} connection settings."/>
+          </bt:String>
+          <bt:String id="OpenSettings.Tooltip" DefaultValue="Ouvre les paramètres de connexion {{ .appName }}.">
+            <bt:Override Locale="de-DE" Value="Öffnet die {{ .appName }}-Verbindungseinstellungen."/>
+            <bt:Override Locale="en-US" Value="Opens the {{ .appName }} connection settings."/>
+          </bt:String>
+        </bt:LongStrings>
+      </Resources>
+    </VersionOverrides>
  </VersionOverrides>
 </OfficeApp>
@@ -1170,6 +1170,8 @@ agentMetadata:
  ## @extra agentMetadata.envVars.FROM_SECRET.secretKeyRef.key Key within a Secret when configuring env vars from a Secret
  ## @extra agentMetadata.envVars.DEEPGRAM_STT_MODEL Deepgram model to use for speech-to-text (default: nova-3)
  ## @extra agentMetadata.envVars.DEEPGRAM_STT_LANGUAGE Language code for transcription or 'multi' for automatic multilingual support with real-time code-switching (default: multi, supports: en, es, fr, de, hi, ru, pt, ja, it, nl)
+  ## @extra agentMetadata.envVars.SENTRY_DSN Sentry DSN to enable error reporting (disabled when unset)
+  ## @extra agentMetadata.envVars.SENTRY_ENVIRONMENT Environment name reported to Sentry (e.g. production, staging)
  ## @skip agentMetadata.envVars
  envVars:
    <<: *commonEnvVars
@@ -1249,6 +1251,8 @@ agentSubtitles:
  ## @extra agentSubtitles.envVars.FROM_SECRET.secretKeyRef.key Key within a Secret when configuring env vars from a Secret
  ## @extra agentSubtitles.envVars.DEEPGRAM_STT_MODEL Deepgram model to use for speech-to-text (default: nova-3)
  ## @extra agentSubtitles.envVars.DEEPGRAM_STT_LANGUAGE Language code for transcription or 'multi' for automatic multilingual support with real-time code-switching (default: multi, supports: en, es, fr, de, hi, ru, pt, ja, it, nl)
+  ## @extra agentSubtitles.envVars.SENTRY_DSN Sentry DSN to enable error reporting (disabled when unset)
+  ## @extra agentSubtitles.envVars.SENTRY_ENVIRONMENT Environment name reported to Sentry (e.g. production, staging)
  ## @skip agentSubtitles.envVars
  envVars:
    <<: *commonEnvVars
@@ -6,4 +6,4 @@ DIR_MAILS="../backend/core/templates/mail/html/"
 if [ ! -d "${DIR_MAILS}" ]; then
  mkdir -p "${DIR_MAILS}";
 fi
-mjml mjml/*.mjml -o "${DIR_MAILS}";
+mjml mjml/*.mjml -o "${DIR_MAILS}" --config.allowIncludes true;
@@ -2,6 +2,11 @@
  <mj-include path="./partial/header.mjml" />

  <mj-body mj-class="bg--blue-100">
+    <!--
+      We load django tags here so they appear in the body of the HTML output.
+      This ensures html-to-text also includes them in the plain text template.
+    -->
+    <mj-raw>{% load i18n static extra_tags %}</mj-raw>
    <mj-wrapper css-class="wrapper" padding="0 40px 40px 40px">
      <mj-section css-class="wrapper-logo">
        <mj-column>
@@ -59,7 +64,7 @@
        </mj-column>
      </mj-section>
    </mj-wrapper>
-  </mj-body>

-  <mj-include path="./partial/footer.mjml" />
+    <mj-include path="./partial/footer.mjml" />
+  </mj-body>
 </mjml>
@@ -1,21 +1,16 @@
 <mj-head>
    <mj-title>{{ title }}</mj-title>
-    <mj-preview>
-        <!--
-            We load django tags here, in this way there are put within the body in html output
-            so the html-to-text command includes it within its output
-        -->
-        {% load i18n static extra_tags %}
-        {{ title }}
-    </mj-preview>
+    <mj-preview>{{ title }}</mj-preview>
+    <mj-font name="Roboto" href="https://fonts.bunny.net/css?family=roboto:400,700,900" />
    <mj-attributes>
-        <mj-font name="Roboto" href="https://fonts.googleapis.com/css2?family=Roboto:wght@400;700;900&display=swap" />
        <mj-all
                font-family="Roboto, -apple-system, BlinkMacSystemFont, 'Segoe UI', Oxygen, Ubuntu, Cantarell, 'Helvetica Neue', sans-serif"
                font-size="16px"
                line-height="1.5em"
                color="#3A3A3A"
        />
+        <mj-text font-family="Roboto, sans-serif" />
+        <mj-button font-family="Roboto, sans-serif" />
    </mj-attributes>
    <mj-style>
        /* Reset */
@@ -2,6 +2,11 @@
  <mj-include path="./partial/header.mjml" />

  <mj-body mj-class="bg--blue-100">
+    <!--
+      We load django tags here so they appear in the body of the HTML output.
+      This ensures html-to-text also includes them in the plain text template.
+    -->
+    <mj-raw>{% load i18n static extra_tags %}</mj-raw>
    <mj-wrapper css-class="wrapper" padding="5px 25px 0px 25px">
      <mj-section css-class="wrapper-logo">
        <mj-column>
@@ -1,11 +1,11 @@
 {
  "name": "mail_mjml",
-  "version": "1.22.0",
+  "version": "1.24.0",
  "description": "An util to generate html and text django's templates from mjml templates",
  "type": "module",
  "dependencies": {
-    "@html-to/text-cli": "0.5.4",
-    "mjml": "4.18.0"
+    "@html-to/text-cli": "0.6.0",
+    "mjml": "5.4.0"
  },
  "private": true,
  "scripts": {
@@ -1,12 +1,12 @@
 {
  "name": "sdk",
-  "version": "1.22.0",
+  "version": "1.24.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "sdk",
-      "version": "1.22.0",
+      "version": "1.24.0",
      "license": "ISC",
      "workspaces": [
        "./library",
@@ -1,6 +1,6 @@
 {
  "name": "sdk",
-  "version": "1.22.0",
+  "version": "1.24.0",
  "author": "",
  "license": "ISC",
  "description": "",
@@ -1,7 +1,7 @@

 [project]
 name = "summary"
-version = "1.22.0"
+version = "1.24.0"
 dependencies = [
    "fastapi[standard]>=0.105.0",
    "uvicorn>=0.24.0",
@@ -10,17 +10,17 @@ dependencies = [
    "celery==5.6.3",
    "redis==5.2.1",
    "minio==7.2.20",
-    "openai==2.38.0",
-    "posthog==7.15.4",
+    "openai==2.44.0",
+    "posthog==7.20.5",
    "requests==2.34.2",
-    "sentry-sdk[fastapi, celery]==2.60.0",
-    "langfuse==4.6.1"
+    "sentry-sdk[fastapi, celery]==2.63.0",
+    "langfuse==4.11.0"
 ]

 [project.optional-dependencies]
 dev = [
-    "ruff==0.15.14",
-    "pytest==9.0.3",
+    "ruff==0.15.19",
+    "pytest==9.1.1",
    "responses>=0.25.8",
 ]

@@ -2,11 +2,8 @@

 from fastapi import APIRouter, Depends

-from summary.api.route import tasks, tasks_v2
+from summary.api.route import tasks_v2
 from summary.core.security import verify_tenant_api_key

-api_router_v1 = APIRouter(dependencies=[Depends(verify_tenant_api_key)])
-api_router_v1.include_router(tasks.router_tasks_v1, tags=["tasks"])
-
 api_router_v2 = APIRouter(dependencies=[Depends(verify_tenant_api_key)])
 api_router_v2.include_router(tasks_v2.router_tasks_v2, tags=["tasks"])
@@ -1,79 +0,0 @@
-"""API routes related to application tasks."""
-
-import time
-from typing import Optional
-
-from celery.result import AsyncResult
-from fastapi import APIRouter
-from pydantic import BaseModel, field_validator
-
-from summary.core.celery_worker import (
-    process_audio_transcribe_summarize_v2,
-)
-from summary.core.config import get_settings
-
-settings = get_settings()
-
-
-class TranscribeSummarizeTaskCreation(BaseModel):
-    """Transcription and summarization parameters."""
-
-    owner_id: str
-    recording_filename: str
-    metadata_filename: Optional[str] = None
-    email: str
-    sub: str
-    version: Optional[int] = 2
-    room: Optional[str]
-    owner_timezone: Optional[str]
-    language: Optional[str]
-    download_link: Optional[str]
-    context_language: Optional[str] = None
-    recording_start_at: Optional[str] = None
-    recording_end_at: Optional[str] = None
-
-    @field_validator("language")
-    @classmethod
-    def validate_language(cls, v):
-        """Validate 'language' parameter."""
-        if v is not None and v not in settings.whisperx_allowed_languages:
-            raise ValueError(
-                f"Language '{v}' is not allowed. "
-                f"Allowed languages: {', '.join(settings.whisperx_allowed_languages)}"
-            )
-        return v
-
-
-router_tasks_v1 = APIRouter(prefix="/tasks")
-
-
-@router_tasks_v1.post("/")
-async def create_transcribe_summarize_task(request: TranscribeSummarizeTaskCreation):
-    """Create a transcription and summarization task."""
-    task = process_audio_transcribe_summarize_v2.apply_async(
-        args=[
-            request.owner_id,
-            request.recording_filename,
-            request.metadata_filename,
-            request.email,
-            request.sub,
-            time.time(),
-            request.room,
-            request.owner_timezone,
-            request.language,
-            request.download_link,
-            request.context_language,
-            request.recording_start_at,
-            request.recording_end_at,
-        ],
-        queue=settings.transcribe_queue,
-    )
-
-    return {"id": task.id, "message": "Task created"}
-
-
-@router_tasks_v1.get("/{task_id}")
-async def get_task_status(task_id: str):
-    """Check task status by ID."""
-    task = AsyncResult(task_id)
-    return {"id": task_id, "status": task.status}
@@ -1,15 +1,19 @@
 """API routes related to application tasks (V2 / tenant friendly)."""

-from celery.result import AsyncResult
-from fastapi import APIRouter, Depends, HTTPException, Request
+import logging
+from datetime import datetime, timezone

+from celery.result import AsyncResult
+from fastapi import APIRouter, Depends, HTTPException, Request, status
+
+from summary.core.analytics import get_analytics
 from summary.core.celery_worker import (
    celery,
    process_audio_transcribe_v2_task,
    summarize_v2_task,
 )
-from summary.core.config import AuthorizedTenant
-from summary.core.models import SummarizeTaskV2Request, TranscribeTaskV2Request
+from summary.core.config import AuthorizedTenant, get_settings
+from summary.core.models import SummarizeTaskApiRequest, TranscribeTaskApiRequest
 from summary.core.security import verify_tenant_api_key_v2
 from summary.core.shared_models import (
    SummarizeWebhookFailurePayload,
@@ -20,17 +24,51 @@ from summary.core.shared_models import (
    TranscribeWebhookSuccessPayload,
 )

+logger = logging.getLogger(__name__)
 router_tasks_v2 = APIRouter()

+analytics = get_analytics()
+settings = get_settings()
+

@router_tasks_v2.post("/async-jobs/transcribe")
 async def create_transcribe_task_v2(
-    request: TranscribeTaskV2Request,
+    request: TranscribeTaskApiRequest,
    request_tenant: AuthorizedTenant = Depends(verify_tenant_api_key_v2),
 ):
    """Create a transcription task."""
+    if (
+        request.push_to_docs_config is not None
+        and not request_tenant.allowed_push_to_docs
+    ):
+        logger.warning(
+            "Push to docs is not allowed for this tenant (%s).", request_tenant.id
+        )
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Push to docs is not allowed for this tenant.",
+        )
+
    task = process_audio_transcribe_v2_task.apply_async(
-        args=[{**request.model_dump(), "tenant_id": request_tenant.id}]
+        args=[
+            {
+                **request.model_dump(),
+                "tenant_id": request_tenant.id,
+                "received_at": datetime.now(timezone.utc),
+            }
+        ]
+    )
+
+    properties = {}
+    if request.user_email:
+        properties["$set"] = {"email": request.user_email}
+
+    # We track the request, this also properly initializes the user in the
+    # analytics system, so that later feature flags work properly
+    analytics.capture(
+        settings.posthog_transcript_request,
+        request.user_sub,
+        properties=properties,
    )

    return TranscribeWebhookPendingPayload(job_id=task.id).model_dump()
@@ -38,14 +76,32 @@ async def create_transcribe_task_v2(

@router_tasks_v2.post("/async-jobs/summarize")
 async def create_summarize_task_v2(
-    request: SummarizeTaskV2Request,
+    request: SummarizeTaskApiRequest,
    request_tenant: AuthorizedTenant = Depends(verify_tenant_api_key_v2),
 ):
    """Create a summarization task."""
    task = summarize_v2_task.apply_async(
-        args=[{**request.model_dump(), "tenant_id": request_tenant.id}]
+        args=[
+            {
+                **request.model_dump(),
+                "tenant_id": request_tenant.id,
+                "received_at": datetime.now(timezone.utc),
+            }
+        ]
    )

+    # We track the request, this also properly initializes the user in the
+    # analytics system, so that later feature flags work properly
+
+    properties = {}
+    if request.user_email:
+        properties["$set"] = {"email": request.user_email}
+
+    analytics.capture(
+        settings.posthog_summary_request,
+        request.user_sub,
+        properties=properties,
+    )
    return SummarizeWebhookPendingPayload(job_id=task.id).model_dump()


@@ -4,12 +4,14 @@ import json
 import time
 from collections import Counter
 from functools import lru_cache
+from urllib.parse import urlsplit, urlunsplit

 import redis
 from celery.utils.log import get_task_logger
 from posthog import Posthog

 from summary.core.config import get_settings
+from summary.core.models import SummarizeTaskJob, TranscribeTaskJob

 logger = get_task_logger(__name__)
 settings = get_settings()
@@ -107,25 +109,31 @@ class MetadataManager:
        """Check if task_id exists in tasks metadata cache."""
        return self._redis.exists(self._get_redis_key(task_id))

-    def create(self, task_id, task_args):
+    def create(self, task_id: str, task_payload: TranscribeTaskJob | SummarizeTaskJob):
        """Create initial metadata entry for a new task."""
        if self._is_disabled or self.has_task_id(task_id):
            return

-        # Positional args mirror process_audio_transcribe_summarize_v2 signature:
-        # owner_id, recording_filename, metadata_filename, email, sub, received_at, ...
-        _, filename, _, email, _, received_at, *_ = task_args
-
        start_time = time.time()
        initial_metadata = {
            "start_time": start_time,
-            "asr_model": settings.whisperx_asr_model,
            "retries": 0,
-            "filename": filename,
-            "email": email,
-            "queuing_time": round(start_time - received_at, 2),
+            "sub": task_payload.user_sub,
+            # avoid None in redis, it shouldn't happen anyway in prod
+            "email": task_payload.user_email or "",
+            "tenant_id": task_payload.tenant_id,
+            "queuing_time": round(start_time - task_payload.received_at.timestamp(), 2),
        }

+        if isinstance(task_payload, TranscribeTaskJob):
+            parts = urlsplit(task_payload.cloud_storage_url)
+            clean_url = urlunsplit((parts.scheme, parts.netloc, parts.path, "", ""))
+            initial_metadata["source_url"] = clean_url
+            initial_metadata["asr_model"] = settings.whisperx_asr_model
+        elif isinstance(task_payload, SummarizeTaskJob):
+            initial_metadata["content_length"] = len(task_payload.content)
+            initial_metadata["llm_model"] = settings.llm_model
+
        self._save_metadata(task_id, initial_metadata)

    def retry(self, task_id):
@@ -210,6 +218,6 @@ class MetadataManager:
        self.clear(task_id)

        try:
-            self._analytics.capture(event_name, metadata.get("email"), metadata)
+            self._analytics.capture(event_name, metadata.get("sub"), metadata)
        except AnalyticsException:
            logger.exception("Failed to capture analytics event")
@@ -4,7 +4,7 @@

 import json
 import time
-from datetime import datetime
+from datetime import datetime, timezone
 from typing import Any
 from urllib.parse import urljoin

@@ -17,7 +17,9 @@ from requests import exceptions

 from summary.core.analytics import MetadataManager, get_analytics
 from summary.core.config import get_settings
+from summary.core.docs_service import create_document_in_lasuite_docs
 from summary.core.file_service import (
+    CorruptedAudioFile,
    FileService,
    FileServiceException,
    TranscribeError,
@@ -25,8 +27,10 @@ from summary.core.file_service import (
 from summary.core.llm_service import LLMException, LLMObservability, LLMService
 from summary.core.locales import get_locale
 from summary.core.models import (
-    SummarizeTaskV2Payload,
-    TranscribeTaskV2Payload,
+    PushToDocsBaseConfig,
+    RecordingMetadata,
+    SummarizeTaskJob,
+    TranscribeTaskJob,
 )
 from summary.core.prompt import (
    FORMAT_NEXT_STEPS,
@@ -50,7 +54,6 @@ from summary.core.transcript_formatter import TranscriptFormatter
 from summary.core.user_assign import resolve_speaker_identities
 from summary.core.webhook_service import (
    call_webhook_v2,
-    submit_content,
 )

 settings = get_settings()
@@ -86,29 +89,22 @@ file_service = FileService()
 def transcribe_audio(
    *,
    task_id: str,
-    recording_filename: str | None = None,
    language: str,
-    cloud_storage_url=None,
+    cloud_storage_url: str,
    raises: bool = False,
 ):
    """Transcribe an audio file using WhisperX.

-    Downloads the audio from MinIO or a cloud storage URL, sends it to
+    Downloads the audio from a cloud storage URL, sends it to
    WhisperX for transcription, and tracks metadata throughout the process.

    Returns the transcription object, or None if the file could not be retrieved.
    """
-    if bool(recording_filename) == bool(cloud_storage_url):
-        raise ValueError(
-            "Either filename or cloud_storage_url must be provided, but not both."
-        )
-
    logger.info("Initiating WhisperX client")

    # Transcription
    try:
        with file_service.prepare_audio_file(
-            remote_object_key=recording_filename,
            cloud_storage_url=cloud_storage_url,
        ) as (audio_file, metadata):
            metadata_manager.track(task_id, {"audio_length": metadata["duration"]})
@@ -156,10 +152,20 @@ def transcribe_audio(
                # Mimic OpenAI's timeout settings
                timeout=(60, 10 * 60),
            )
+            if res.status_code == 400:
+                logger.info(
+                    "WhisperX transcription failed, "
+                    "likely due to a corrupted audio file: %s",
+                    res.text,
+                )
+                raise CorruptedAudioFile("WhisperX coudln't decode the audio file.")
+
            try:
                res.raise_for_status()
-            except requests.exceptions.HTTPError as e:
-                raise RuntimeError("WhisperX transcription failed, %s", res.text) from e
+            except requests.exceptions.HTTPError:
+                logger.exception("WhisperX transcription failed")
+                # We reraise the error so that it can be retried by celery
+                raise

            transcription_json: dict[str, Any] = res.json()
            # We remove the "usage" key from the transcription_json dictionary
@@ -197,11 +203,7 @@ def transcribe_audio(
            cloud_storage_url.split("?", 1)[0] if cloud_storage_url else None
        )
        logger.exception(
-            (
-                "Unexpected error while preparing file | filename: %s "
-                "| cloud_storage_url: %s"
-            ),
-            recording_filename,
+            ("Unexpected error while preparing file %s "),
            redacted_cloud_storage_url,
        )
        return None
@@ -211,44 +213,34 @@ def transcribe_audio(


 def resolve_speaker_identities_and_apply_to(
-    transcription, recording_start_at, recording_end_at, metadata_filename, task_id
-):
+    *, transcription: WhisperXResponse, recording_metadata: RecordingMetadata, task_id
+) -> WhisperXResponse:
    """Assign users to detected speakers and rewrite the transcriptions.

    Args:
        transcription: output of meet-whisperx after transcription and diarization
-        recording_start_at: sourced from LiveKit FileInfo via the egress_ended webhook
-        recording_end_at: sourced from LiveKit FileInfo via the egress_ended webhook
-        metadata_filename: name of metadata file containing VAD information in S3
+        recording_metadata: Metadata of the recording
        task_id: current task id, for logging purposes
    """
-    recording_start_dt = (
-        datetime.fromisoformat(recording_start_at) if recording_start_at else None
-    )
-    recording_end_dt = (
-        datetime.fromisoformat(recording_end_at) if recording_end_at else None
-    )
-
    logger.debug(
        "recording_start_dt: %s ; recording_end_dt: %s",
-        recording_start_dt,
-        recording_end_dt,
+        recording_metadata.started_at,
+        recording_metadata.ended_at,
    )
-    if (recording_start_dt is None) or (recording_end_dt is None):
-        logger.debug("Skipping resolve_speaker_identities")
-        return transcription

    logger.debug("Running resolve_speaker_identities")
    try:
-        metadata = file_service.read_json(metadata_filename)
+        metadata = file_service.read_cloud_storage_json(
+            recording_metadata.cloud_storage_url
+        )
        speaker_mapping = resolve_speaker_identities(
            metadata,
-            transcription,
-            recording_start_dt,
-            recording_end_dt,
+            transcription.model_dump(),
+            recording_metadata.started_at,
+            recording_metadata.ended_at,
        )
        new_transcription = speaker_mapping.apply_to(transcription.model_dump())
-        return new_transcription
+        return WhisperXResponse.model_validate(new_transcription)

    except FileServiceException as exc:
        logger.error(
@@ -273,12 +265,9 @@ def format_transcript(
    transcription,
    context_language: str | None,
    language: str,
-    room: str | None,
-    recording_datetime: str | None,
-    owner_timezone: str | None,
    download_link: str | None,
    form_link: str | None,
-) -> tuple[str, str]:
+) -> str:
    """Format a transcription into readable content with a title.

    Resolves the locale from context_language / language, then uses
@@ -291,9 +280,6 @@ def format_transcript(

    return formatter.format(
        transcription,
-        room=room,
-        recording_datetime=recording_datetime,
-        owner_timezone=owner_timezone,
        download_link=download_link,
        form_link=form_link,
    )
@@ -317,138 +303,8 @@ def format_actions(llm_output: dict) -> str:
    return ""


-@celery.task(
-    bind=True,
-    autoretry_for=[exceptions.HTTPError],
-    max_retries=settings.celery_max_retries,
-    queue=settings.transcribe_queue,
-)
-def process_audio_transcribe_summarize_v2(
-    self,
-    owner_id: str,
-    recording_filename: str,
-    metadata_filename: str | None,
-    email: str,
-    sub: str,
-    received_at: float,
-    room: str | None,
-    owner_timezone: str | None,
-    language: str | None,
-    download_link: str | None,
-    context_language: str | None = None,
-    recording_start_at: str | None = None,
-    recording_end_at: str | None = None,
-):
-    """Process an audio file by transcribing it and generating a summary.
-
-    This Celery task orchestrates:
-    1. Audio transcription via WhisperX
-    2. Transcript formatting
-    3. Webhook submission
-    4. Conditional summarization queuing
-
-    Args:
-        self: Celery task instance (passed on with bind=True)
-        owner_id: Unique identifier of the recording owner.
-        recording_filename: Name of the audio file in MinIO storage.
-        metadata_filename: Name of the audio file in MinIO storage.
-        email: Email address of the recording owner.
-        sub: OIDC subject identifier of the recording owner.
-        received_at: Unix timestamp when the recording was received.
-        room: room name where the recording took place.
-        owner_timezone: IANA timezone of the recording owner (e.g. "Europe/Paris").
-        language: ISO 639-1 language code for transcription.
-        download_link: URL to download the original recording.
-        context_language: ISO 639-1 language code of the meeting summary context text.
-        recording_start_at: ISO 8601 timestamp of when file recording actually started
-            (from LiveKit FileInfo.started_at via the egress_ended webhook).
-        recording_end_at: ISO 8601 timestamp of when file recording ended
-            (from LiveKit FileInfo.ended_at via the egress_ended webhook).
-    """
-    logger.info(
-        "Notification received | Owner: %s | Room: %s",
-        owner_id,
-        room,
-    )
-
-    task_id = self.request.id
-
-    # Transcribe the audio
-    transcription = transcribe_audio(
-        task_id=task_id, recording_filename=recording_filename, language=language
-    )
-    if transcription is None:
-        return
-
-    # Assign speakers and rewrite transcription/diarization output
-    if settings.is_resolve_speaker_identities_enabled and (
-        metadata_filename is not None
-    ):
-        transcription = resolve_speaker_identities_and_apply_to(
-            transcription,
-            recording_start_at,
-            recording_end_at,
-            metadata_filename,
-            task_id,
-        )
-
-    form_base_url = settings.transcription_satisfaction_form_base_url
-    form_link = (
-        f"{form_base_url}?room_id={room}"
-        if (form_base_url and metadata_filename is not None)
-        else None
-    )
-
-    # Format output
-    content, title = format_transcript(
-        transcription,
-        context_language,
-        language,
-        room,
-        recording_start_at,
-        owner_timezone,
-        download_link,
-        form_link,
-    )
-
-    submit_content(content, title, email, sub)
-    metadata_manager.capture(task_id, settings.posthog_event_success)
-
-    # LLM Summarization
-    if (
-        analytics.is_feature_enabled("summary-enabled", distinct_id=owner_id)
-        and settings.is_summary_enabled
-    ):
-        logger.info("Queuing summary generation task.")
-        summarize_transcription.apply_async(
-            args=[owner_id, content, email, sub, title],
-            queue=settings.summarize_queue,
-        )
-    else:
-        logger.info("Summary generation not enabled for this user. Skipping.")
-
-
-@signals.task_prerun.connect(sender=process_audio_transcribe_summarize_v2)
-def task_started(task_id=None, task=None, args=None, **kwargs):
-    """Signal handler called before task execution begins."""
-    task_args = args or []
-    metadata_manager.create(task_id, task_args)
-
-
-@signals.task_retry.connect(sender=process_audio_transcribe_summarize_v2)
-def task_retry_handler(request=None, reason=None, einfo=None, **kwargs):
-    """Signal handler called when task execution retries."""
-    metadata_manager.retry(request.id)
-
-
-@signals.task_failure.connect(sender=process_audio_transcribe_summarize_v2)
-def task_failure_handler(task_id, exception=None, **kwargs):
-    """Signal handler called when task execution fails permanently."""
-    metadata_manager.capture(task_id, settings.posthog_event_failure)
-
-
 def summarize_transcription_internals(
-    *, owner_id: str, transcript: str, session_id: str
+    *, distinct_id: str, transcript: str, session_id: str
 ) -> str:
    """Generate a summary from the provided transcription text.

@@ -459,11 +315,11 @@ def summarize_transcription_internals(
    """
    logger.info(
        "Starting summarization task | Owner: %s",
-        owner_id,
+        distinct_id,
    )

    user_has_tracing_consent = analytics.is_feature_enabled(
-        "summary-tracing-consent", distinct_id=owner_id
+        "summary-tracing-consent", distinct_id=distinct_id
    )

    # NOTE: We must instantiate a new LLMObservability client for each task invocation
@@ -474,7 +330,7 @@ def summarize_transcription_internals(
    llm_observability = LLMObservability(
        user_has_tracing_consent=user_has_tracing_consent,
        session_id=session_id,
-        user_id=owner_id,
+        user_id=distinct_id,
    )
    llm_service = LLMService(llm_observability=llm_observability)

@@ -526,34 +382,52 @@ def summarize_transcription_internals(
    return summary


-@celery.task(
-    bind=True,
-    autoretry_for=[LLMException, Exception],
-    max_retries=settings.celery_max_retries,
-    queue=settings.summarize_queue,
-)
-def summarize_transcription(
-    self, owner_id: str, transcript: str, email: str, sub: str, title: str
-):
-    """Generate a summary from the provided transcription text.
-
-    This Celery task performs the following operations:
-    1. Run summary internals
-    2. Sends the final summary via webhook.
-    """
-    summary = summarize_transcription_internals(
-        owner_id=owner_id, transcript=transcript, session_id=self.request.id
-    )
-    summary_title = settings.summary_title_template.format(title=title)
-
-    submit_content(summary, summary_title, email, sub)
-
-
 ##################################################################################
 # Tasks v2
 ##################################################################################


+def _should_push_to_docs(
+    payload: TranscribeTaskJob | SummarizeTaskJob,
+) -> bool:
+    """Determines if the transcription should be pushed to docs.
+
+    Based on the payload and settings.
+    """
+    if not payload.push_to_docs_config:
+        reason = "Push to docs is not requested in the payload"
+    elif not settings.is_lasuite_docs_integration_enabled:
+        reason = "Docs integration is disabled"
+    elif not settings.get_authorized_tenant(
+        tenant_id=payload.tenant_id
+    ).allowed_push_to_docs:
+        reason = "Tenant is not allowed to push to docs"
+    else:
+        return True
+
+    logger.info("Push to docs is not requested: %s", reason)
+    return False
+
+
+def _should_auto_create_summary(payload: TranscribeTaskJob) -> bool:
+    """Determines if the transcription should have an auto-created summary.
+
+    Based on the payload and settings.
+    """
+    if (
+        payload.push_to_docs_config is None
+        or not payload.push_to_docs_config.auto_create_summary
+    ):
+        reason = "Auto create summary is not requested in the payload"
+    elif not settings.is_summary_enabled:
+        reason = "Summary feature is disabled"
+    else:
+        return True
+
+    logger.info("Auto create summary is not requested: %s", reason)
+    return False
+
+
@celery.task(
    max_retries=3,
    queue=settings.call_webhook_queue_v2,
@@ -590,7 +464,7 @@ def process_audio_transcribe_v2_task(
        self: Celery task instance (passed on with bind=True)
        payload: Serialized dictionary of TranscribeSummarizeTaskCreationV2
    """
-    payload = TranscribeTaskV2Payload.model_validate(payload)
+    payload = TranscribeTaskJob.model_validate(payload)
    logger.info(
        "Transcribing for object received | Owner: %s",
        payload.user_sub,
@@ -617,6 +491,60 @@ def process_audio_transcribe_v2_task(
        )
        return failure_payload.model_dump()

+    # Assign speakers and rewrite transcription/diarization output
+    if settings.is_resolve_speaker_identities_enabled and payload.metadata is not None:
+        try:
+            transcription_res = resolve_speaker_identities_and_apply_to(
+                transcription=transcription_res,
+                recording_metadata=payload.metadata,
+                task_id=job_id,
+            )
+        except Exception as e:
+            logger.error(f"Failed to resolve speaker identities, skipping: {e}")
+
+    should_push_to_docs = _should_push_to_docs(payload)
+    # We do it synchronously for now
+    if should_push_to_docs:
+        if payload.push_to_docs_config is None:
+            raise ValueError("Push to docs config is missing")
+
+        # Format output
+        content = format_transcript(
+            transcription_res.model_dump(),
+            payload.context_language,
+            payload.language,
+            payload.push_to_docs_config.download_link,
+            payload.push_to_docs_config.form_link,
+        )
+
+        create_document_in_lasuite_docs(
+            content=content,
+            title=payload.push_to_docs_config.title,
+            email=payload.push_to_docs_config.user_email,
+            sub=payload.user_sub,
+        )
+
+        if _should_auto_create_summary(payload):
+            locale = get_locale(payload.context_language, payload.language)
+
+            summarize_v2_task.apply_async(
+                args=[
+                    SummarizeTaskJob(
+                        received_at=datetime.now(timezone.utc),
+                        tenant_id=payload.tenant_id,
+                        user_sub=payload.user_sub,
+                        user_email=payload.user_email,
+                        push_to_docs_config=PushToDocsBaseConfig(
+                            user_email=payload.push_to_docs_config.user_email,
+                            title=locale.summary_title_template.format(
+                                title=payload.push_to_docs_config.title
+                            ),
+                        ),
+                        content=content,
+                    ).model_dump()
+                ],
+            )
+
    file_service.store_transcript(
        transcript=transcription_res,
        job_id=job_id,
@@ -629,9 +557,30 @@ def process_audio_transcribe_v2_task(
    call_webhook_v2_task.apply_async(
        args=[success_payload.model_dump(), payload.tenant_id]
    )
+    metadata_manager.capture(job_id, settings.posthog_transcript_success)
+
    return success_payload.model_dump()


+@signals.task_prerun.connect(sender=process_audio_transcribe_v2_task)
+def task_started_transcript(task_id=None, task=None, args=None, **kwargs):
+    """Signal handler called before task execution begins."""
+    if args:
+        metadata_manager.create(task_id, TranscribeTaskJob.model_validate(args[0]))
+
+
+@signals.task_retry.connect(sender=process_audio_transcribe_v2_task)
+def task_retry_handler_transcript(request=None, reason=None, einfo=None, **kwargs):
+    """Signal handler called when task execution retries."""
+    metadata_manager.retry(request.id)
+
+
+@signals.task_failure.connect(sender=process_audio_transcribe_v2_task)
+def task_failure_handler_transcript(task_id, exception=None, **kwargs):
+    """Signal handler called when task execution fails permanently."""
+    metadata_manager.capture(task_id, settings.posthog_transcript_failure)
+
+
@signals.task_failure.connect(sender=process_audio_transcribe_v2_task)
 def handle_transcribe_v2_failed(
    sender,
@@ -687,15 +636,26 @@ def summarize_v2_task(
    1. Run summary internals
    2. Sends the final summary via webhook.
    """
-    payload = SummarizeTaskV2Payload.model_validate(payload)
+    payload = SummarizeTaskJob.model_validate(payload)
    summary = summarize_transcription_internals(
-        owner_id=payload.user_sub,
+        distinct_id=payload.user_sub,
        transcript=payload.content,
        session_id=self.request.id,
    )
    job_id = self.request.id
    file_service.store_summary(summary=summary, job_id=job_id)

+    if _should_push_to_docs(payload):
+        if payload.push_to_docs_config is None:
+            raise ValueError("Push to docs config is missing")
+
+        create_document_in_lasuite_docs(
+            content=summary,
+            title=payload.push_to_docs_config.title,
+            email=payload.push_to_docs_config.user_email,
+            sub=payload.user_sub,
+        )
+
    success_payload = SummarizeWebhookSuccessPayload(
        job_id=job_id,
        summary_data_url=file_service.get_summary_signed_url(job_id),
@@ -703,9 +663,30 @@ def summarize_v2_task(
    call_webhook_v2_task.apply_async(
        args=[success_payload.model_dump(), payload.tenant_id]
    )
+    metadata_manager.capture(job_id, settings.posthog_summary_success)
+
    return success_payload.model_dump()


+@signals.task_prerun.connect(sender=summarize_v2_task)
+def task_started_summary(task_id=None, task=None, args=None, **kwargs):
+    """Signal handler called before task execution begins."""
+    if args:
+        metadata_manager.create(task_id, SummarizeTaskJob.model_validate(args[0]))
+
+
+@signals.task_retry.connect(sender=summarize_v2_task)
+def task_retry_handler_summary(request=None, reason=None, einfo=None, **kwargs):
+    """Signal handler called when task execution retries."""
+    metadata_manager.retry(request.id)
+
+
+@signals.task_failure.connect(sender=summarize_v2_task)
+def task_failure_handler_summary(task_id, exception=None, **kwargs):
+    """Signal handler called when task execution fails permanently."""
+    metadata_manager.capture(task_id, settings.posthog_summary_failure)
+
+
@signals.task_failure.connect(sender=summarize_v2_task)
 def handle_summarize_v2_failed(
    sender,
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
leo	85def1535e	wip	2026-07-22 18:30:49 +02:00
leo	5ba1885411	✅(transcription) fix broken speaker assignment tests Fix broken speaker assignement tests following #1522.	2026-07-22 14:23:10 +02:00
snyk-bot	273af221e6	⬆️(frontend) upgrade livekit-client from 2.19.2 to 2.20.0 Snyk has created this PR to upgrade livekit-client from 2.19.2 to 2.20.0. See this package in npm: livekit-client See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/96ea03d8-8d09-493d-86bf-363f274e129e?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-07-21 19:00:04 +02:00
snyk-bot	e8d6aba306	⬆️(frontend) upgrade @tanstack/react-query from 5.101.0 to 5.101.1 Snyk has created this PR to upgrade @tanstack/react-query from 5.101.0 to 5.101.1. See this package in npm: @tanstack/react-query See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/96ea03d8-8d09-493d-86bf-363f274e129e?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-07-21 18:41:15 +02:00
snyk-bot	449503208a	⬆️(frontend) upgrade posthog-js from 1.391.2 to 1.395.0 Snyk has created this PR to upgrade posthog-js from 1.391.2 to 1.395.0. See this package in npm: posthog-js See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/96ea03d8-8d09-493d-86bf-363f274e129e?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-07-21 18:34:52 +02:00
snyk-bot	7eb3553bea	⬆️(frontend) upgrade i18next from 26.3.1 to 26.3.2 Snyk has created this PR to upgrade i18next from 26.3.1 to 26.3.2. See this package in npm: i18next See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/af693e79-8c43-4c09-ab65-60580515c9e8?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-07-21 18:24:25 +02:00
snyk-bot	f0356af365	⬆️(frontend) upgrade @mediapipe/tasks-vision from 0.10.14 to 0.10.35 Snyk has created this PR to upgrade @mediapipe/tasks-vision from 0.10.14 to 0.10.35. See this package in npm: @mediapipe/tasks-vision See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/96ea03d8-8d09-493d-86bf-363f274e129e?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-07-21 18:19:26 +02:00
leo	9921ef9d09	🐛(transcription) fix silent fail of speaker assignment Fix bug introduced by #1362 which caused speaker assignment to silently fail. Bug was due to change in input variable type.	2026-07-21 18:16:23 +02:00
lebaudantoine	68e999a037	🔖(minor) bump release to 1.24.0	2026-07-21 18:01:20 +02:00
lebaudantoine	34103bf326	🩹(agents) announce the update of uv.lock via prepare-release script Announce it among the other files. Minor issue.	2026-07-21 18:01:20 +02:00
lebaudantoine	e273ac9e43	🔖(helm) release chart 0.0.27	2026-07-21 17:26:01 +02:00
Florent Chehab	adcdbc0695	🐛(summary) whisper call error handling * Consider that HTTP 400 errors are due to corrupted audio files by default. * Properly reraise the http error otherwise so that the retry mechanism actually works.	2026-07-21 12:05:06 +02:00
lebaudantoine	8f9008f1e0	🔖(addons) remove the beta tag Promote the addon to a stable v1 release.	2026-07-21 10:30:00 +02:00
lebaudantoine	9320a1af0c	✨(addon) show add-in tools when creating meetings in shared calendars The existing manifest was not exposing the add-in tools when creating a meeting in a shared calendar. Amend the manifest with the missing instructions so the add-in shows up in that context as well. Manifest changes generated with Claude's assistance.	2026-07-21 10:30:00 +02:00
David Wagner	e3827970c8	(docs) Fix CSS theming env var name While here, also mention where this env var should be set.	2026-07-20 12:38:07 +02:00
lebaudantoine	ab707d866f	🩹(backend) fix the mail-builder step in docker Upgrading mjml now requires node >=22. I forgot to update the step, responsible to build the mail template in the production image.	2026-07-13 11:32:46 +02:00
snyk-bot	dac0b9c000	⬆️(frontend) upgrade react-aria related dependencies Initiated by Snyk.	2026-07-13 11:32:46 +02:00
Cyril	53cc8642eb	♿️(frontend) fix focus restore when switching side panels restore trigger focus on panel switch while panel remains open	2026-07-11 16:08:57 +02:00
Cyril	c8d9d2fea8	♿️(frontend) focus side panel container on open Focus aside on side panel open so screen readers announce the aria-label	2026-07-11 16:08:57 +02:00
snyk-bot	e910b1f0b7	⬆️(frontend) upgrade posthog-js from 1.387.0 to 1.391.2 Snyk has created this PR to upgrade posthog-js from 1.387.0 to 1.391.2. See this package in npm: posthog-js See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/96ea03d8-8d09-493d-86bf-363f274e129e?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-07-11 16:06:18 +02:00
lebaudantoine	581e115c03	♻️(frontend) inline MediaPipe WASM modules to avoid loading from remote Copy the MediaPipe WASM modules into the frontend build output and serve them locally, instead of loading them from the Google CDN at runtime. Mediapipe was a transitive dependency, add it explicitly. Requested by some members of the community. It closes #1168	2026-07-11 15:57:59 +02:00
lebaudantoine	8118ef0612	🎨(frontend) format vite config file Apply the project's formatter to the Vite config file to align its style with the rest of the codebase.	2026-07-11 15:57:59 +02:00
lebaudantoine	85f886d9c5	➕(frontend) install vite-plugin-static-copy for MediaPipe WASM assets Add vite-plugin-static-copy as a dependency. It will be used to copy and serve the WASM modules shipped by the MediaPipe JS dependency from the frontend build output.	2026-07-11 15:57:59 +02:00
lebaudantoine	b66f82e4b7	♻️(frontend) reorganize JS packages in package.json Sort and regroup the entries in package.json that were not in the expected order.	2026-07-11 15:57:59 +02:00
lebaudantoine	aabb7d629c	♻️(frontend) inline model weights to avoid loading them from remote Inline the model weights instead of fetching them from a Google remote location at runtime. The weights do not update frequently, so inlining removes an external dependency.	2026-07-11 15:57:59 +02:00
lebaudantoine	1e5f5c4fe9	♻️(frontend) refactor background processors to use the new API Update the calls to the background processors imported from livekit-track-processor so they use the new instantiation method instead of the previous, now-deprecated one.	2026-07-11 15:57:59 +02:00
lebaudantoine	f55fa0c42b	🐛(backend) fix info panel crash for unregistered rooms The info panel was crashing when opening a room that was not registered in the database (with ALLOW_UNREGISTERED_ROOMS=true), because the API response did not include the room slug. Instead of adding frontend fallbacks, update the unregistered-room response to include the slug, keeping the API contract consistent with registered rooms. Note: this still relies on the unregistered-room response staying aligned with the registered-room schema. Any future divergence between the two responses could introduce similar issues. A refactoring on the backend side is needed. It closes #1441.	2026-07-10 19:45:56 +02:00
lebaudantoine	2bc5e47c75	🚸(frontend) initialize the join input name with the persisted full name Prefill the "name" field on the join screen with the full name persisted in the database, instead of leaving it empty by default.	2026-07-10 19:02:26 +02:00
lebaudantoine	0d5136206f	✨(all) allow forcing SSO display name for authenticated users Add a new setting that controls whether an authenticated user can rename or modify their display name, or if they must use the one returned by the SSO. When the setting is disabled, only anonymous users can set a display name freely; authenticated users always use their SSO display name. Requested by many self-hosters.	2026-07-10 19:02:26 +02:00
lebaudantoine	05a67320b1	🩹(backend) fix the LiveKit token to use full name as display name Use the user's full name as the display name in the emitted LiveKit token instead of the email. Requested by several self-hosters.	2026-07-10 19:02:26 +02:00
lebaudantoine	2fbaa49089	♻️(frontend) refactor the username storage Create a new dedicated store for user choices, starting with the username, to decouple this part from any LiveKit elements. This is better for tree-shaking, and depending on LiveKit for storing the username brings no real value. The refactoring will be continued later for the other user choices that can be persisted.	2026-07-10 19:02:26 +02:00
lebaudantoine	76542b2235	🔧(tilt) configure Tilt stack for full-name and short-name mapping Update the Tilt dev stack configuration so that the full-name and short-name claim mapping works correctly with the current Keycloak configuration.	2026-07-10 19:02:26 +02:00
lebaudantoine	10231b0333	🩹(backend) identify externally provisioned users to PostHog In the external API, applications authenticate with a client_id/secret and can provision users with only an email. In that flow, users are not identified to PostHog, so the user DB id alone is not enough to identify them in analytics afterwards. The issue does not exist in the public API, where users are authenticated and therefore already identified. Inspired by @flochehab's approach in summary.	2026-07-10 10:47:04 +02:00
Cyril	9b9e6578ee	✨(frontend) add participant color gradient when camera is off use participant color radial gradient for video-off placeholder	2026-07-10 10:46:46 +02:00
lebaudantoine	0c81d29ee7	✨(backend) allow searching the recording admin table by owner email Add the owner's email to the searchable fields of the recording admin table. This makes it much more convenient for the support team to look up recordings by user.	2026-07-10 10:15:57 +02:00
Cyril	839a8f1c71	💄(frontend) add consistent spacing to picture-in-picture tiles Add padding to StageFrame and bigger gaps so PiP tiles aren't flush with window.	2026-07-10 08:45:53 +02:00
Cyril	40ef420cda	✨(frontend) use focus layout for solo PiP screen sharing Solo cam in screen share PiP is now a BR thumbnail over shared screen	2026-07-10 08:45:51 +02:00
Cyril	d995bd9041	✨(frontend) prioritize screen share in picture-in-picture layout Show screen share large with cameras in a top row; match main room focus.	2026-07-10 08:45:51 +02:00
lebaudantoine	8ac4c2409d	💚(mail) update the node version for the mail building step Broken with the dependencies update.	2026-07-09 16:22:54 +02:00
lebaudantoine	e47ad42656	⬆️(mail) update mjml to v5 and @html-to/text-cli @html-to/text-cli was containing CVEs reported by the audit.	2026-07-09 16:22:54 +02:00
Florent Chehab	2509452c52	🗑️(settings) deprecate SUMMARY_SERVICE_VERSION=1 Add a deprecation warning when SUMMARY_SERVICE_VERSION=1 and an endpoint is configured meaning summary service is in use.	2026-07-09 16:14:23 +02:00
Florent Chehab	1022780027	📝(upgrade) add note related to summary v1 removal Add upgrade notes related to the summary changes in v1.23.0	2026-07-09 15:49:53 +02:00
Florent Chehab	4a1a04f86e	🔖(minor) bump release to 1.23.0	2026-07-08 10:07:09 +02:00
Florent Chehab	8702638cf3	✨(release) uv lock agents In release script also run uv lock for agents.	2026-07-08 10:06:53 +02:00
Florent Chehab	f88c0307ea	🐛(summary) do not save null emails in analytics In case the email is not provided we should not update the analytics email value.	2026-07-08 02:09:30 +02:00
Florent Chehab	e7f15b50ff	✨(summary) more precise analytics events * Specific transcript and summary events * Improve observability on summary tasks	2026-07-08 02:09:30 +02:00
snyk-bot	75ba2ff146	🔒️(frontend) update docker image to nginx-unprivileged:1.30.3-alpine3.23 The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675120 - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675112 - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675114 - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675124 - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675125	2026-07-08 01:48:59 +02:00
lebaudantoine	bbe2a32efc	⬆️(frontend) update the frontend build image to Node 22 Bump the Node.js version used in the frontend build image from Node 20 to Node 22.	2026-07-08 01:39:20 +02:00
snyk-bot	86fff16eed	⬆️(frontend) upgrade @tanstack/react-query from 5.100.14 to 5.101.0 Snyk has created this PR to upgrade @tanstack/react-query from 5.100.14 to 5.101.0.	2026-07-08 01:02:50 +02:00
snyk-bot	195d2b5006	⬆️(frontend) upgrade posthog-js from 1.386.5 to 1.387.0 Snyk has created this PR to upgrade posthog-js from 1.386.5 to 1.387.0.	2026-07-08 00:56:41 +02:00
snyk-bot	30cf264276	⬆️(frontend) upgrade livekit-client from 2.19.0 to 2.19.2 Snyk has created this PR to upgrade livekit-client from 2.19.0 to 2.19.2.	2026-07-08 00:48:27 +02:00
lebaudantoine	945d779b45	♻️(frontend) wrap MuteEveryoneButton with AdminOrOwnerOnly Avoids mounting the button's hooks and rendering its logic for users who are not admin or owner, which previously happened on every re-render of the parent.	2026-07-07 19:11:41 +02:00
leo	d43b335546	✨(agents) add Sentry instrumentation for agents Add Sentry observability to the `agents`. Introduce a dedicated `observability.py` module. Refactor both agents to use the shared observability layer and extract task helpers into a new `tasks.py` module, making task execution easier to instrument and maintain.	2026-07-07 14:56:21 +02:00
Florent Chehab	e6f0ff5112	🔥(summary) remove call to summary enabled feature flag We now rely only on the value coming from the API request. This feature flag should be handled by the caller.	2026-07-07 12:09:19 +02:00
Florent Chehab	224d6ce358	✨(backend) use feature flag in call to summary-v2 Summary enabled is now infered directly from the feature flag analytics backend.	2026-07-07 12:09:19 +02:00
Florent Chehab	20718f2d5a	✨(backend) implement feature flags in Posthog analytics backend Implement feature flags related functions in Posthog analytics backend. We cache the results in django cache to avoid too frequent calls to Posthog. Especially for when we are checking multiple features in the same user request.	2026-07-07 12:09:19 +02:00
Florent Chehab	8edcb6e973	✨(backend) extend analytics module to support feature flags Extend the AnalyticsBackend class to support user feature flags, without a breaking change to the current implementation. A flag value is considered to be a bool or a string.	2026-07-07 12:09:19 +02:00
lebaudantoine	b00c4e5d6d	♻️(backend) refactor analytics backend from Protocol to abstract class Switch the analytics backend interface from a typing Protocol to an abstract base class, so the contract that backends must implement is explicit and enforced at instantiation time.	2026-07-07 11:51:11 +02:00
Florent Chehab	3c0ba03976	♻️(backend) refactor Bearer Auth based authentification Created a shared class for handling Header based authentification. This avoid duplicating logic and helps with a maintaining a signle security related peace of code.	2026-07-06 20:53:29 +02:00
Florent Chehab	7fa172d100	✨(visio) use compatible with summary v2 This commit introduces the compatibility with summary v2. It tecnically doesn't break the compatibility with v1 as v1 params are still sent. But we advise people using the transcribe feature in their own deployments to adapt to the new v2 API, as this compatibility will be removed in a future major version. * RecordingStatusChoices now has EXTERNAL_PROCESS_SUCCESSFUL & EXTERNAL_PROCESS_FAILED Values, which are changed by a new webhook that can be called by the transcribe service. This webhook is protected by its own bearer token. * Title for the document is computed in visio, * Tests are added / updated accordingly	2026-07-06 20:53:29 +02:00
Florent Chehab	ecf8f0fe3f	✨(summary) extend v2 routes to support visio usecase * Update the v2 create transcribe payload to support publishing directly to docs and performing automatically a summary if requested * Note that title computation is to be handled by the caller now as it makes more sense and avoids throwing a bunch of parameters to the endpoint. * All files are send as signed URL now, we don't read directly from s3 anymore, * Docs integration is now explicit in summary settings * To make analytics work properly accross projects, we use the user sub as distinct id, this will require a new posthog project to be deployed to work properly. We create a post hog event at the creation request processing, to make sure feature flags work properly after that. * User email should now be provided to the API, it's not mandatory to avoid a breaking change. * Use a specific user agent for better tracking Finally note that existing helpers don't always make use of the pydantic models, so that's why there are model_dump in some places. To avoid bigger changes.	2026-07-06 20:53:29 +02:00
Florent Chehab	27da57aff5	💥(summary) remove v1 related code This commit cleans up most of the code related to v1 route that is used only by visio. This is first step before introducing an update to the v2 route.	2026-07-06 20:53:29 +02:00
leo	e327a5e35f	⬆️(dependencies) update python dependencies Update python dependencies.	2026-07-06 20:43:54 +02:00