🔧(backend) add backend toggle for silent login feature

Implement configuration option in backend to enable or disable silent login functionality. Provides flexibility to control this authentication behavior through server settings. Requested by user self-hosting the project. Not all OIDC provider support prompt=none param.
⬆️ (dependencies) upgrade boto3 to more recent version
2025-04-16 20:52:59 +02:00 · 2025-04-16 12:13:42 +02:00 · 2025-04-16 12:13:42 +02:00 · 2025-04-16 12:13:42 +02:00 · 2025-04-16 12:13:42 +02:00 · 2025-04-16 12:13:42 +02:00
149 changed files with 6631 additions and 3153 deletions
@@ -119,12 +119,9 @@ jobs:
    runs-on: ubuntu-latest
    if: github.event_name != 'pull_request'
    steps:
-      -
-        name: Checkout repository
-        uses: actions/checkout@v4
-      -
-        name: Call argocd github webhook
-        run: |
-          data='{"ref": "'$GITHUB_REF'","repository": {"html_url":"'$GITHUB_SERVER_URL'/numerique-gouv/lasuite-deploiement"}}'
-          sig=$(echo -n ${data} | openssl dgst -sha1 -hmac "${{ secrets.ARGOCD_PREPROD_WEBHOOK_SECRET }}" | awk '{print "X-Hub-Signature: sha1="$2}')
-          curl -X POST -H 'X-GitHub-Event:push' -H "Content-Type: application/json" -H "${sig}" --data "${data}" ${{ vars.ARGOCD_PREPROD_WEBHOOK_URL }}
+      - uses: numerique-gouv/action-argocd-webhook-notification@main
+        id: notify
+        with:
+          deployment_repo_path: "${{ secrets.DEPLOYMENT_REPO_URL }}"
+          argocd_webhook_secret: "${{ secrets.ARGOCD_PREPROD_WEBHOOK_SECRET }}"
+          argocd_url: "${{ vars.ARGOCD_PREPROD_WEBHOOK_URL }}"
@@ -135,6 +135,9 @@ jobs:
      STORAGES_STATICFILES_BACKEND: django.contrib.staticfiles.storage.StaticFilesStorage
      LIVEKIT_API_SECRET: secret
      LIVEKIT_API_KEY: devkey
+      AWS_S3_ENDPOINT_URL: http://localhost:9000
+      AWS_S3_ACCESS_KEY_ID: meet
+      AWS_S3_SECRET_ACCESS_KEY: password

    steps:
      - name: Checkout repository
@@ -152,6 +155,33 @@ jobs:
          path: "src/backend/core/templates/mail"
          key: mail-templates-${{ hashFiles('src/mail/mjml') }}

+      - name: Start MinIO
+        run: |
+          docker pull minio/minio
+          docker run -d --name minio \
+            -p 9000:9000 \
+            -e "MINIO_ACCESS_KEY=meet" \
+            -e "MINIO_SECRET_KEY=password" \
+            -v /data/media:/data \
+            minio/minio server --console-address :9001 /data
+
+      # Tool to wait for a service to be ready
+      - name: Install Dockerize
+        run: |
+          curl -sSL https://github.com/jwilder/dockerize/releases/download/v0.8.0/dockerize-linux-amd64-v0.8.0.tar.gz | sudo tar -C /usr/local/bin -xzv
+
+      - name: Wait for MinIO to be ready
+        run: |
+          dockerize -wait tcp://localhost:9000 -timeout 10s
+
+      - name: Configure MinIO
+        run: |
+          MINIO=$(docker ps | grep minio/minio | sed -E 's/.*\s+([a-zA-Z0-9_-]+)$/\1/')
+          docker exec ${MINIO} sh -c \
+            "mc alias set meet http://localhost:9000 meet password && \
+            mc alias ls && \
+            mc mb meet/meet-media-storage"
+
      - name: Install Python
        uses: actions/setup-python@v5
        with:
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2025 DINUM/Etalab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -1,6 +1,6 @@
 MIT License

-Copyright (c) 2021-2023 DINUM/Etalab
+Copyright (c) 2024-2025 DINUM/Etalab

 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -1,5 +1,5 @@
 <p align="center">
-  <img alt="posthoglogo" src="./docs/assets/visio-logo.png" maxWidth="100%">
+  <img alt="meet logo" src="./docs/assets/banner-meet-fr.png" maxWidth="100%">
 </p>


@@ -21,13 +21,13 @@

 <p align="center">
  <a href="https://visio.numerique.gouv.fr/">
-    <img src="https://github.com/user-attachments/assets/09c1faa1-de88-4848-af3a-6fbe793999bf" alt="Visio Demonstration">
+    <img src="https://github.com/user-attachments/assets/09c1faa1-de88-4848-af3a-6fbe793999bf" alt="La Suite Meet Demonstration">
  </a>
 </p>

-## Visio: Simple Video Conferencing
+## La Suite Meet: Simple Video Conferencing

-Powered by [LiveKit](https://livekit.io/), Visio offers Zoom-level performance with high-quality video and audio. No installation required—simply join calls directly from your browser. Check out LiveKit's impressive optimizations in their [blog post](https://blog.livekit.io/livekit-one-dot-zero/).
+Powered by [LiveKit](https://livekit.io/), La Suite Meet offers Zoom-level performance with high-quality video and audio. No installation required—simply join calls directly from your browser. Check out LiveKit's impressive optimizations in their [blog post](https://blog.livekit.io/livekit-one-dot-zero/).
 ### Features
 - Optimized for stability in large meetings (+100 p.)
 - Support for multiple screen sharing streams
@@ -45,7 +45,7 @@ Powered by [LiveKit](https://livekit.io/), Visio offers Zoom-level performance w
  - SVC codecs (VP9, AV1)


-Visio is fully self-hostable and released under the MIT License, ensuring complete control and flexibility. It's simple to [get started](https://visio.numerique.gouv.fr/) or [request a demo](mailto:visio@numerique.gouv.fr). 
+La Suite Meet is fully self-hostable and released under the MIT License, ensuring complete control and flexibility. It's simple to [get started](https://visio.numerique.gouv.fr/) or [request a demo](mailto:visio@numerique.gouv.fr). 

 We’re continuously adding new features to enhance your experience, with the latest updates coming soon!

@@ -61,31 +61,31 @@ We’re continuously adding new features to enhance your experience, with the la

 ## Get started

-### Visio Cloud (Recommended)
-Sign up for Visio Cloud, designed for European public servants. Hosted on SecNumCloud-compliant providers and accessible via government SSO, [ProConnect](https://www.proconnect.gouv.fr/). The easiest way to try our product. Reach out if your entity isn't connected yet to our sso.
+### La Suite Meet Cloud (Recommended)
+Sign up for La Suite Meet Cloud, designed for french public servants. Hosted on SecNumCloud-compliant providers and accessible via government SSO, [ProConnect](https://www.proconnect.gouv.fr/). The easiest way to try our product. Reach out if your entity isn't connected yet to our sso.

 ### Open-source deployment (Advanced)

-Deploy Visio on your own infrastructure using [our self-hosting guide](https://github.com/suitenumerique/meet/blob/main/docs/installation.md). Our open-source deployment is optimized for Kubernetes, and we're working on supporting additional deployment options. Keycloak integration and any SSO are supported. We offer customer support for open-source setups—just reach out for assistance.  
+Deploy La Suite Meet on your own infrastructure using [our self-hosting guide](https://github.com/suitenumerique/meet/blob/main/docs/installation.md). Our open-source deployment is optimized for Kubernetes, and we're working on supporting additional deployment options. Keycloak integration and any SSO are supported. We offer customer support for open-source setups—just reach out for assistance.  

 ## Docs

-We're currently working on both technical and user documentation for Visio. In the meantime, many of the essential aspects are already well covered by the [LiveKit documentation](https://docs.livekit.io/home/) and their [self-hosting guide](https://docs.livekit.io/home/self-hosting/deployment/). Stay tuned for more updates!
+We're currently working on both technical and user documentation for La Suite Meet. In the meantime, many of the essential aspects are already well covered by the [LiveKit documentation](https://docs.livekit.io/home/) and their [self-hosting guide](https://docs.livekit.io/home/self-hosting/deployment/). Stay tuned for more updates!

 ## Contributing

 We <3 contributions of any kind, big and small:

 - Vote on features or get early access to beta functionality in our [roadmap](https://github.com/orgs/suitenumerique/projects/3/views/2)
- Open a PR (see our instructions on [developing Visio locally](https://github.com/suitenumerique/meet/blob/main/docs/developping_locally.md))
+- Open a PR (see our instructions on [developing La Suite Meet locally](https://github.com/suitenumerique/meet/blob/main/docs/developping_locally.md))
 - Submit a [feature request](https://github.com/suitenumerique/meet/issues/new?assignees=&labels=enhancement&template=Feature_request.md) or [bug report](https://github.com/suitenumerique/meet/issues/new?assignees=&labels=bug&template=Bug_report.md)


 ## Philosophy

-We’re relentlessly focused on building the best open-source video conferencing product—Visio. Growth comes from creating something people truly need, not just from chasing metrics.
+We’re relentlessly focused on building the best open-source video conferencing product—La Suite Meet. Growth comes from creating something people truly need, not just from chasing metrics.

-Our users come first. We’re committed to making Visio as accessible and easy to use as proprietary solutions, ensuring it meets the highest standards.
+Our users come first. We’re committed to making La Suite Meet as accessible and easy to use as proprietary solutions, ensuring it meets the highest standards.

 Most of the heavy engineering is handled by the incredible LiveKit team, allowing us to focus on delivering a top-tier product. We follow extreme programming practices, favoring pair programming and quick, iterative releases. Challenge our tech and architecture—simplicity is always our top priority.

@@ -99,7 +99,7 @@ To learn more, don't hesitate to [reach out](mailto:visio@numerique.gouv.fr).

 ### Help us!

-Come help us make Visio even better. We're growing fast and [would love some help](mailto:visio@numerique.gouv.fr).
+Come help us make La Suite Meet even better. We're growing fast and [would love some help](mailto:visio@numerique.gouv.fr).


 ## Contributors 🧞
@@ -15,6 +15,37 @@ services:
    ports:
      - "1081:1080"

+  minio:
+    user: ${DOCKER_USER:-1000}
+    image: minio/minio
+    environment:
+      - MINIO_ROOT_USER=meet
+      - MINIO_ROOT_PASSWORD=password
+    ports:
+      - '9000:9000'
+      - '9001:9001'
+    healthcheck:
+      test: [ "CMD", "mc", "ready", "local" ]
+      interval: 1s
+      timeout: 20s
+      retries: 300
+    entrypoint: ""
+    command: minio server --console-address :9001 /data
+    volumes:
+      - ./data/media:/data
+
+  createbuckets:
+    image: minio/mc
+    depends_on:
+      minio:
+        condition: service_healthy
+        restart: true
+    entrypoint: >
+      sh -c "
+      /usr/bin/mc alias set meet http://minio:9000 meet password && \
+      /usr/bin/mc mb meet/meet-media-storage && \
+      exit 0;"
+
  app-dev:
    build:
      context: .
@@ -40,6 +71,7 @@ services:
        - redis
        - nginx
        - livekit
+        - createbuckets
  
  celery-dev:
    user: ${DOCKER_USER:-1000}
@@ -73,6 +105,7 @@ services:
      - postgresql
      - redis
      - livekit
+      - minio

  celery:
    user: ${DOCKER_USER:-1000}
@@ -1,4 +1,4 @@
-FROM livekit/livekit-server:latest
+FROM livekit/livekit-server:v1.8.0

 # We inject the nip.io certificate manually because the livekit chart doesn't support volume mounting
 COPY rootCA.pem /etc/ssl/certs/
@@ -2,7 +2,6 @@

 This document is a step-by-step guide that describes how to install Visio on a k8s cluster without AI features.

-
 ## Prerequisites

 - k8s cluster with an nginx-ingress controller
@@ -43,11 +42,11 @@ It will expire on 23 March 2027 🗓
 2. Create kind cluster with containerd registry config dir enabled
 Creating cluster "visio" ...
 ✓ Ensuring node image (kindest/node:v1.27.3) 🖼
- ✓ Preparing nodes 📦  
- ✓ Writing configuration 📜 
- ✓ Starting control-plane 🕹️ 
- ✓ Installing CNI 🔌 
- ✓ Installing StorageClass 💾 
+ ✓ Preparing nodes 📦
+ ✓ Writing configuration 📜
+ ✓ Starting control-plane 🕹️
+ ✓ Installing CNI 🔌
+ ✓ Installing StorageClass 💾
 Set kubectl context to "kind-visio"
 You can now use your cluster with:

@@ -95,13 +94,14 @@ ingress-nginx-admission-create-jgnc9        0/1     Completed   0          2m44s
 ingress-nginx-admission-patch-wrt47         0/1     Completed   0          2m44s
 ingress-nginx-controller-57c548c4cd-9xwt6   1/1     Running     0          2m44s
 ```
-When your k8s cluster is ready, you can start the deployment. This cluster is special because it uses the *.127.0.0.1.nip.io domain and mkcert certificates to have full HTTPS support and easy domain name management.

-Please remember that *.127.0.0.1.nip.io will always resolve to 127.0.0.1, except in the k8s cluster where we configure CoreDNS to answer with the ingress-nginx service IP.
+When your k8s cluster is ready, you can start the deployment. This cluster is special because it uses the \*.127.0.0.1.nip.io domain and mkcert certificates to have full HTTPS support and easy domain name management.
+
+Please remember that \*.127.0.0.1.nip.io will always resolve to 127.0.0.1, except in the k8s cluster where we configure CoreDNS to answer with the ingress-nginx service IP.

 ## Preparation

-### What will you use to authenticate your users ? 
+### What will you use to authenticate your users ?

 Visio uses OIDC, so if you already have an OIDC provider, obtain the necessary information to use it. In the next step, we will see how to configure Django (and thus Visio) to use it. If you do not have a provider, we will show you how to deploy a local Keycloak instance (this is not a production deployment, just a demo).

@@ -153,6 +153,7 @@ keycloak-0              1/1     Running   0          26m
 keycloak-postgresql-0   1/1     Running   0          26m
 redis-master-0          1/1     Running   0          35s
 ```
+
 When the redis is ready we can deploy livekit-server.

 ```
@@ -194,6 +195,7 @@ livekit-livekit-server-5c5fb87f7f-ct6x5   1/1     Running   0          15m
 postgresql-0                              1/1     Running   0          50s
 redis-master-0                            1/1     Running   0          19
 ```
+
 From here important information you will need are :

 ```
@@ -231,3 +233,98 @@ meet-admin               <none>   meet.127.0.0.1.nip.io       localhost   80, 44
 ```

 You can use Visio on https://meet.127.0.0.1.nip.io. The provisioning user in keycloak is meet/meet.
+
+## All options
+
+These are the environmental options available on meet backend.
+
+| Option                                          | Description                              | default                                                                                                                                                       |
+| ----------------------------------------------- | ---------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| DJANGO_ALLOWED_HOSTS                            | Host that are allowed                    | []                                                                                                                                                            |
+| DJANGO_SECRET_KEY                               | Secret key used                          |                                                                                                                                                               |
+| DJANGO_SILENCED_SYSTEM_CHECKS                   | Silence system checks                    | []                                                                                                                                                            |
+| DJANGO_ALLOW_UNSECURE_USER_LISTING              |                                          | false                                                                                                                                                         |
+| DB_ENGINE                                       | Database engine used                     | django.db.backends.postgresql_psycopg2                                                                                                                        |
+| DB_NAME                                         | name of the database                     | meet                                                                                                                                                          |
+| DB_USER                                         | user used to connect to database         | dinum                                                                                                                                                         |
+| DB_PASSWORD                                     | password used to connect to the database | pass                                                                                                                                                          |
+| DB_HOST                                         | hostname of the database                 | localhost                                                                                                                                                     |
+| DB_PORT                                         | port to connect to database              | 5432                                                                                                                                                          |
+| STORAGES_STATICFILES_BACKEND                    | Static file serving engine               | whitenoise.storage.CompressedManifestStaticFilesStorage                                                                                                       |
+| AWS_S3_ENDPOINT_URL                             | S3 host endpoint                         |                                                                                                                                                               |
+| AWS_S3_ACCESS_KEY_ID                            | s3 access key                            |                                                                                                                                                               |
+| AWS_S3_SECRET_ACCESS_KEY                        | s3 secret key                            |                                                                                                                                                               |
+| AWS_S3_REGION_NAME                              | s3 region                                |                                                                                                                                                               |
+| AWS_STORAGE_BUCKET_NAME                         | s3 bucket name                           |                                                                                                                                                               |
+| DJANGO_LANGUAGE_CODE                            | Default language                         | en-us                                                                                                                                                         |
+| REDIS_URL                                       | redis endpoint                           | redis://redis:6379/1                                                                                                                                          |
+| REQUEST_ENTRY_THROTTLE_RATES                    | throttle rates                           | 150/minute                                                                                                                                                    |
+| SPECTACULAR_SETTINGS_ENABLE_DJANGO_DEPLOY_CHECK | deploy check                             | False                                                                                                                                                         |
+| FRONTEND_ANALYTICS                              | analytics information                    | {}                                                                                                                                                            |
+| FRONTEND_SUPPORT                                | crisp frontend support                   | {}                                                                                                                                                            |
+| FRONTEND_SILENCE_LIVEKIT_DEBUG                  | silence livekit debug                    | false                                                                                                                                                         |
+| DJANGO_EMAIL_BACKEND                            | email backend library                    | django.core.mail.backends.smtp.EmailBackend                                                                                                                   |
+| DJANGO_EMAIL_HOST                               | host of the email server                 |                                                                                                                                                               |
+| DJANGO_EMAIL_HOST_USER                          | user to connect to the email server      |                                                                                                                                                               |
+| DJANGO_EMAIL_HOST_PASSWORD                      | password to connect tto the email server |                                                                                                                                                               |
+| DJANGO_EMAIL_PORT                               | por tot connect to the email server      |                                                                                                                                                               |
+| DJANGO_EMAIL_USE_TLS                            | enable tls on email connection           | false                                                                                                                                                         |
+| DJANGO_EMAIL_USE_SSL                            | enable tls on email connection           | false                                                                                                                                                         |
+| DJANGO_EMAIL_FROM                               | email from account                       | from@example.com                                                                                                                                              |
+| DJANGO_CORS_ALLOW_ALL_ORIGINS                   | allow all cors origins                   | true                                                                                                                                                          |
+| DJANGO_CORS_ALLOWED_ORIGINS                     | origins to allow in string               | []                                                                                                                                                            |
+| DJANGO_CORS_ALLOWED_ORIGIN_REGEXES              | origins to allow in regex                | []                                                                                                                                                            |
+| SENTRY_DSN                                      | sentry server                            |                                                                                                                                                               |
+| DJANGO_CELERY_BROKER_URL                        | celery broker host                       | redis://redis:6379/0                                                                                                                                          |
+| DJANGO_CELERY_BROKER_TRANSPORT_OPTIONS          | celery broker options                    | {}                                                                                                                                                            |
+| OIDC_CREATE_USER                                | create oidc user if not exists           | false                                                                                                                                                         |
+| OIDC_VERIFY_SSL                                 | verify ssl for oidc                      | true                                                                                                                                                          |
+| OIDC_FALLBACK_TO_EMAIL_FOR_IDENTIFICATION       | fallback to email for identification     | false                                                                                                                                                         |
+| OIDC_RP_SIGN_ALGO                               | token verification algoritm used by oidc | RS256                                                                                                                                                         |
+| OIDC_RP_CLIENT_ID                               | oidc client                              | meet                                                                                                                                                          |
+| OIDC_RP_CLIENT_SECRET                           | oidc client secret                       |                                                                                                                                                               |
+| OIDC_OP_JWKS_ENDPOINT                           | oidc endpoint for JWKS                   |                                                                                                                                                               |
+| OIDC_OP_AUTHORIZATION_ENDPOINT                  | oidc endpoint for authorization          |                                                                                                                                                               |
+| OIDC_OP_TOKEN_ENDPOINT                          | oidc endpoint for token                  |                                                                                                                                                               |
+| OIDC_OP_USER_ENDPOINT                           | oidc endpoint for user                   |                                                                                                                                                               |
+| OIDC_OP_LOGOUT_ENDPOINT                         | oidc endpoint for logout                 |                                                                                                                                                               |
+| OIDC_AUTH_REQUEST_EXTRA_PARAMS                  | extra parameters for oidc request        |                                                                                                                                                               |
+| OIDC_RP_SCOPES                                  | oidc scopes                              | openid email                                                                                                                                                  |
+| LOGIN_REDIRECT_URL                              | login redirect url                       |                                                                                                                                                               |
+| LOGIN_REDIRECT_URL_FAILURE                      | login redurect url for failure           |                                                                                                                                                               |
+| LOGOUT_REDIRECT_URL                             | url to redirect to on logout             |                                                                                                                                                               |
+| OIDC_USE_NONCE                                  | use nonce for oidc                       | true                                                                                                                                                          |
+| OIDC_REDIRECT_REQUIRE_HTTPS                     | require https for oidc                   | false                                                                                                                                                         |
+| OIDC_REDIRECT_ALLOWED_HOSTS                     | allowed redirect hosts for oidc          | []                                                                                                                                                            |
+| OIDC_STORE_ID_TOKEN                             | store oidc ID token                      | true                                                                                                                                                          |
+| ALLOW_LOGOUT_GET_METHOD                         | allow logout through get method          | true                                                                                                                                                          |
+| OIDC_REDIRECT_FIELD_NAME                        | direct field for oidc                    | returnTo                                                                                                                                                      |
+| OIDC_USERINFO_FULLNAME_FIELDS                   | full name claim from OIDC token          | ["given_name", "usual_name"]                                                                                                                                  |
+| OIDC_USERINFO_SHORTNAME_FIELD                   | shortname claim from OIDC token          | given_name                                                                                                                                                    |
+| LIVEKIT_API_KEY                                 | livekit api key                          |                                                                                                                                                               |
+| LIVEKIT_API_SECRET                              | livekit api secret                       |                                                                                                                                                               |
+| LIVEKIT_API_URL                                 | livekit api url                          |                                                                                                                                                               |
+| RESOURCE_DEFAULT_ACCESS_LEVEL                   | default resource access level for rooms  | public                                                                                                                                                        |
+| ALLOW_UNREGISTERED_ROOMS                        | Allow usage of unregistered rooms        | true                                                                                                                                                          |
+| RECORDING_ENABLE                                | record meeting option                    | false                                                                                                                                                         |
+| RECORDING_OUTPUT_FOLDER                         | folder to store meetings                 | recordings                                                                                                                                                    |
+| RECORDING_VERIFY_SSL                            | verify ssl for recording storage         | true                                                                                                                                                          |
+| RECORDING_WORKER_CLASSES                        | worker classes for recording             | {"screen_recording": "core.recording.worker.services.VideoCompositeEgressService","transcript": "core.recording.worker.services.AudioCompositeEgressService"} |
+| RECORDING_EVENT_PARSER_CLASS                    | storage event engine for recording       | core.recording.event.parsers.MinioParser                                                                                                                      |
+| RECORDING_ENABLE_STORAGE_EVENT_AUTH             | enable storage event authorization       | true                                                                                                                                                          |
+| RECORDING_STORAGE_EVENT_ENABLE                  | enable recording storage events          | false                                                                                                                                                         |
+| RECORDING_STORAGE_EVENT_TOKEN                   | recording storage event token            |                                                                                                                                                               |
+| SUMMARY_SERVICE_ENDPOINT                        | summary service endpoint                 |                                                                                                                                                               |
+| SUMMARY_SERVICE_API_TOKEN                       | api token voor summary service           |                                                                                                                                                               |
+| SIGNUP_NEW_USER_TO_MARKETING_EMAIL              | signup users to marketing emails         | false                                                                                                                                                         |
+| MARKETING_SERVICE_CLASS                         | markering class                          | core.services.marketing.BrevoMarketingService                                                                                                                 |
+| BREVO_API_KEY                                   | breva api key for marketing emails       |                                                                                                                                                               |
+| BREVO_API_CONTACT_LIST_IDS                      | brevo api contact list ids               | []                                                                                                                                                            |
+| DJANGO_BREVO_API_CONTACT_ATTRIBUTES             | brevo contact attributes                 | {"VISIO_USER": True}                                                                                                                                          |
+| BREVO_API_TIMEOUT                               | brevo timeout                            | 1                                                                                                                                                             |
+| LOBBY_KEY_PREFIX                                | lobby prefix                             | room_lobby                                                                                                                                                    |
+| LOBBY_WAITING_TIMEOUT                           | lobby waiting tumeout                    | 3                                                                                                                                                             |
+| LOBBY_DENIED_TIMEOUT                            | lobby deny timeout                       | 5                                                                                                                                                             |
+| LOBBY_ACCEPTED_TIMEOUT                          | lobby accept timeout                     | 21600                                                                                                                                                         |
+| LOBBY_NOTIFICATION_TYPE                         | lobby notification types                 | participantWaiting                                                                                                                                            |
+| LOBBY_COOKIE_NAME                               | lobby cookie name                        | lobbyParticipantId                                                                                                                                            |
@@ -12,12 +12,19 @@ PYTHONPATH=/app
 # Mail
 DJANGO_EMAIL_HOST="mailcatcher"
 DJANGO_EMAIL_PORT=1025
+DJANGO_EMAIL_BRAND_NAME=La Suite Numérique
+DJANGO_EMAIL_SUPPORT_EMAIL=test@yopmail.com
+DJANGO_EMAIL_LOGO_IMG=http://localhost:3000/assets/logo-suite-numerique.png
+DJANGO_EMAIL_DOMAIN=http://localhost:3000/

 # Backend url
 MEET_BASE_URL="http://localhost:8072"

 # Media
 STORAGES_STATICFILES_BACKEND=django.contrib.staticfiles.storage.StaticFilesStorage
+AWS_S3_ENDPOINT_URL=http://minio:9000
+AWS_S3_ACCESS_KEY_ID=meet
+AWS_S3_SECRET_ACCESS_KEY=password

 # OIDC
 OIDC_OP_JWKS_ENDPOINT=http://nginx:8083/realms/meet/protocol/openid-connect/certs
@@ -42,3 +49,6 @@ LIVEKIT_API_SECRET=secret
 LIVEKIT_API_KEY=devkey
 LIVEKIT_API_URL=http://localhost:7880
 ALLOW_UNREGISTERED_ROOMS=False
+
+# Recording
+SCREEN_RECORDING_BASE_URL=http://localhost:3000/recordings
@@ -156,7 +156,7 @@ class RecordingSerializer(serializers.ModelSerializer):

    class Meta:
        model = models.Recording
-        fields = ["id", "room", "created_at", "updated_at", "status"]
+        fields = ["id", "room", "created_at", "updated_at", "status", "mode"]
        read_only_fields = fields


@@ -209,3 +209,17 @@ class ParticipantEntrySerializer(serializers.Serializer):
    def update(self, instance, validated_data):
        """Not implemented as this is a validation-only serializer."""
        raise NotImplementedError("StartRecordingSerializer is validation-only")
+
+
+class CreationCallbackSerializer(serializers.Serializer):
+    """Validate room creation callback data."""
+
+    callback_id = serializers.CharField(required=True)
+
+    def create(self, validated_data):
+        """Not implemented as this is a validation-only serializer."""
+        raise NotImplementedError("StartRecordingSerializer is validation-only")
+
+    def update(self, instance, validated_data):
+        """Not implemented as this is a validation-only serializer."""
+        raise NotImplementedError("StartRecordingSerializer is validation-only")
@@ -2,6 +2,7 @@

 import uuid
 from logging import getLogger
+from urllib.parse import urlparse

 from django.conf import settings
 from django.db.models import Q
@@ -20,7 +21,8 @@ from rest_framework import (
    status as drf_status,
 )

-from core import models, utils
+from core import enums, models, utils
+from core.recording.enums import FileExtension
 from core.recording.event.authentication import StorageEventAuthentication
 from core.recording.event.exceptions import (
    InvalidBucketError,
@@ -47,6 +49,7 @@ from core.services.lobby import (
    LobbyParticipantNotFound,
    LobbyService,
 )
+from core.services.room_creation import RoomCreation

 from . import permissions, serializers

@@ -186,6 +189,12 @@ class RequestEntryAnonRateThrottle(throttling.AnonRateThrottle):
    scope = "request_entry"


+class CreationCallbackAnonRateThrottle(throttling.AnonRateThrottle):
+    """Throttle Anonymous user requesting room generation callback"""
+
+    scope = "creation_callback"
+
+
 class RoomViewSet(
    mixins.CreateModelMixin,
    mixins.DestroyModelMixin,
@@ -268,6 +277,9 @@ class RoomViewSet(
            role=models.RoleChoices.OWNER,
        )

+        if callback_id := self.request.data.get("callback_id"):
+            RoomCreation().persist_callback_state(callback_id, room)
+
    @decorators.action(
        detail=True,
        methods=["post"],
@@ -460,6 +472,31 @@ class RoomViewSet(
                {"status": "error", "message": str(e)}, status=status_code
            )

+    @decorators.action(
+        detail=False,
+        methods=["POST"],
+        url_path="creation-callback",
+        permission_classes=[],
+        throttle_classes=[CreationCallbackAnonRateThrottle],
+    )
+    def creation_callback(self, request):
+        """Retrieve cached room data via an unauthenticated request with a unique ID.
+
+        Designed for interoperability across iframes, popups, and other contexts,
+        even on the same domain, bypassing browser security restrictions on direct communication.
+        """
+
+        serializer = serializers.CreationCallbackSerializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+
+        room = RoomCreation().get_callback_state(
+            callback_id=serializer.validated_data.get("callback_id")
+        )
+
+        return drf_response.Response(
+            {"status": "success", "room": room}, status=drf_status.HTTP_200_OK
+        )
+

 class ResourceAccessListModelMixin:
    """List mixin for resource access API."""
@@ -509,6 +546,7 @@ class ResourceAccessViewSet(
 class RecordingViewSet(
    mixins.DestroyModelMixin,
    mixins.ListModelMixin,
+    mixins.RetrieveModelMixin,
    viewsets.GenericViewSet,
 ):
    """
@@ -582,3 +620,85 @@ class RecordingViewSet(
        return drf_response.Response(
            {"message": "Event processed."},
        )
+
+    def _auth_get_original_url(self, request):
+        """
+        Extracts and parses the original URL from the "HTTP_X_ORIGINAL_URL" header.
+        Raises PermissionDenied if the header is missing.
+        The original url is passed by nginx in the "HTTP_X_ORIGINAL_URL" header.
+        See corresponding ingress configuration in Helm chart and read about the
+        nginx.ingress.kubernetes.io/auth-url annotation to understand how the Nginx ingress
+        is configured to do this.
+        Based on the original url and the logged-in user, we must decide if we authorize Nginx
+        to let this request go through (by returning a 200 code) or if we block it (by returning
+        a 403 error). Note that we return 403 errors without any further details for security
+        reasons.
+        """
+        # Extract the original URL from the request header
+        original_url = request.META.get("HTTP_X_ORIGINAL_URL")
+        if not original_url:
+            logger.debug("Missing HTTP_X_ORIGINAL_URL header in subrequest")
+            raise drf_exceptions.PermissionDenied()
+
+        logger.debug("Original url: '%s'", original_url)
+        return urlparse(original_url)
+
+    def _auth_get_url_params(self, pattern, fragment):
+        """
+        Extracts URL parameters from the given fragment using the specified regex pattern.
+        Raises PermissionDenied if parameters cannot be extracted.
+        """
+
+        match = pattern.search(fragment)
+
+        try:
+            return match.groupdict()
+        except (ValueError, AttributeError) as exc:
+            logger.debug("Failed to extract parameters from subrequest URL: %s", exc)
+            raise drf_exceptions.PermissionDenied() from exc
+
+    @decorators.action(detail=False, methods=["get"], url_path="media-auth")
+    def media_auth(self, request, *args, **kwargs):
+        """
+        This view is used by an Nginx subrequest to control access to a recording's
+        media file.
+        When we let the request go through, we compute authorization headers that will be added to
+        the request going through thanks to the nginx.ingress.kubernetes.io/auth-response-headers
+        annotation. The request will then be proxied to the object storage backend who will
+        respond with the file after checking the signature included in headers.
+        """
+
+        parsed_url = self._auth_get_original_url(request)
+
+        url_params = self._auth_get_url_params(
+            enums.RECORDING_STORAGE_URL_PATTERN, parsed_url.path
+        )
+
+        user = request.user
+        recording_id = url_params["recording_id"]
+
+        extension = url_params["extension"]
+        if extension not in [item.value for item in FileExtension]:
+            raise drf_exceptions.ValidationError({"detail": "Unsupported extension."})
+
+        try:
+            recording = models.Recording.objects.get(id=recording_id)
+        except models.Recording.DoesNotExist as e:
+            raise drf_exceptions.NotFound("No recording found for this event.") from e
+
+        if extension != recording.extension:
+            raise drf_exceptions.NotFound("No recording found with this extension.")
+
+        abilities = recording.get_abilities(user)
+
+        if not abilities["retrieve"]:
+            logger.debug("User '%s' lacks permission for attachment", user.id)
+            raise drf_exceptions.PermissionDenied()
+
+        if not recording.is_saved:
+            logger.debug("Recording '%s' has not been saved", recording)
+            raise drf_exceptions.PermissionDenied()
+
+        request = utils.generate_s3_authorization_headers(recording.key)
+
+        return drf_response.Response("authorized", headers=request.headers, status=200)
@@ -121,7 +121,9 @@ class OIDCAuthenticationBackend(MozillaOIDCAuthenticationBackend):
            contact_data = ContactData(
                email=email, attributes={"VISIO_SOURCE": ["SIGNIN"]}
            )
-            marketing_service.create_contact(contact_data, timeout=1)
+            marketing_service.create_contact(
+                contact_data, timeout=settings.BREVO_API_TIMEOUT
+            )
        except (ContactCreationError, ImproperlyConfigured, ImportError):
            pass

@@ -2,9 +2,21 @@
 Core application enums declaration
 """

+import re
+
 from django.conf import global_settings, settings
 from django.utils.translation import gettext_lazy as _

+UUID_REGEX = (
+    r"[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}"
+)
+FILE_EXT_REGEX = r"[a-zA-Z0-9]{1,10}"
+
+# pylint: disable=line-too-long
+RECORDING_STORAGE_URL_PATTERN = re.compile(
+    f"/media/{settings.RECORDING_OUTPUT_FOLDER}/(?P<recording_id>{UUID_REGEX:s}).(?P<extension>{FILE_EXT_REGEX:s})"
+)
+
 # Django sets `LANGUAGES` by default with all supported languages. We can use it for
 # the choice of languages which should not be limited to the few languages active in
 # the app.
@@ -18,6 +18,8 @@ from django.utils.translation import gettext_lazy as _

 from timezone_field import TimeZoneField

+from .recording.enums import FileExtension
+
 logger = getLogger(__name__)


@@ -576,6 +578,26 @@ class Recording(BaseModel):
            RecordingStatusChoices.STOPPED,
        }

+    @property
+    def is_saved(self) -> bool:
+        """Check if the recording is in a saved state."""
+        return self.status == RecordingStatusChoices.SAVED
+
+    @property
+    def extension(self):
+        """Get recording extension based on its mode."""
+        extensions = {
+            RecordingModeChoices.TRANSCRIPT: FileExtension.OGG.value,
+            RecordingModeChoices.SCREEN_RECORDING: FileExtension.MP4.value,
+        }
+        return extensions.get(self.mode, FileExtension.MP4.value)
+
+    @property
+    def key(self):
+        """Generate the file key based on recording mode."""
+
+        return f"{settings.RECORDING_OUTPUT_FOLDER}/{self.id}.{self.extension}"
+

 class RecordingAccess(BaseAccess):
    """Relation model to give access to a recording for a user or a team with a role."""
@@ -0,0 +1,10 @@
+"""Enums related to recordings."""
+
+from enum import Enum
+
+
+class FileExtension(Enum):
+    """Enum for file extensions used in recordings."""
+
+    OGG = "ogg"
+    MP4 = "mp4"
@@ -1,8 +1,13 @@
 """Service to notify external services when a new recording is ready."""

 import logging
+import smtplib

 from django.conf import settings
+from django.core.mail import send_mail
+from django.template.loader import render_to_string
+from django.utils.translation import get_language, override
+from django.utils.translation import gettext_lazy as _

 import requests

@@ -21,10 +26,7 @@ class NotificationService:
            return self._notify_summary_service(recording)

        if recording.mode == models.RecordingModeChoices.SCREEN_RECORDING:
-            logger.warning(
-                "Screen recording mode not implemented for recording %s", recording.id
-            )
-            return False
+            return self._notify_user_by_email(recording)

        logger.error(
            "Unknown recording mode %s for recording %s",
@@ -33,6 +35,59 @@ class NotificationService:
        )
        return False

+    @staticmethod
+    def _notify_user_by_email(recording) -> bool:
+        """
+        Send an email notification to recording owners when their recording is ready.
+
+        The email includes a direct link that redirects owners to a dedicated download
+        page in the frontend where they can access their specific recording.
+        """
+
+        owner_accesses = models.RecordingAccess.objects.select_related("user").filter(
+            role=models.RoleChoices.OWNER,
+            recording_id=recording.id,
+        )
+
+        if not owner_accesses:
+            logger.error("No owner found for recording %s", recording.id)
+            return False
+
+        language = get_language()
+
+        context = {
+            "brandname": settings.EMAIL_BRAND_NAME,
+            "support_email": settings.EMAIL_SUPPORT_EMAIL,
+            "logo_img": settings.EMAIL_LOGO_IMG,
+            "domain": settings.EMAIL_DOMAIN,
+            "room_name": recording.room.name,
+            "recording_date": recording.created_at.strftime("%A %d %B %Y"),
+            "recording_time": recording.created_at.strftime("%H:%M"),
+            "link": f"{settings.SCREEN_RECORDING_BASE_URL}/{recording.id}",
+        }
+
+        emails = [access.user.email for access in owner_accesses]
+
+        with override(language):
+            msg_html = render_to_string("mail/html/screen_recording.html", context)
+            msg_plain = render_to_string("mail/text/screen_recording.txt", context)
+            subject = str(_("Your recording is ready"))  # Force translation
+
+            try:
+                send_mail(
+                    subject.capitalize(),
+                    msg_plain,
+                    settings.EMAIL_FROM,
+                    emails,
+                    html_message=msg_html,
+                    fail_silently=False,
+                )
+            except smtplib.SMTPException as exception:
+                logger.error("notification to %s was not sent: %s", emails, exception)
+                return False
+
+        return True
+
    @staticmethod
    def _notify_summary_service(recording):
        """Notify summary service about a new recording."""
@@ -57,10 +112,8 @@ class NotificationService:
            logger.error("No owner found for recording %s", recording.id)
            return False

-        key = f"{settings.RECORDING_OUTPUT_FOLDER}/{recording.id}.ogg"
-
        payload = {
-            "filename": key,
+            "filename": recording.key,
            "email": owner_access.user.email,
            "sub": owner_access.user.sub,
        }
@@ -7,6 +7,7 @@ from asgiref.sync import async_to_sync
 from livekit import api as livekit_api
 from livekit.api.egress_service import EgressService

+from ..enums import FileExtension
 from .exceptions import WorkerConnectionError, WorkerResponseError
 from .factories import WorkerServiceConfig

@@ -89,7 +90,9 @@ class VideoCompositeEgressService(BaseEgressService):

        # Save room's recording as a mp4 video file.
        file_type = livekit_api.EncodedFileType.MP4
-        filepath = self._get_filepath(filename=recording_id, extension="mp4")
+        filepath = self._get_filepath(
+            filename=recording_id, extension=FileExtension.MP4.value
+        )

        file_output = livekit_api.EncodedFileOutput(
            file_type=file_type,
@@ -120,7 +123,9 @@ class AudioCompositeEgressService(BaseEgressService):

        # Save room's recording as an ogg audio file.
        file_type = livekit_api.EncodedFileType.OGG
-        filepath = self._get_filepath(filename=recording_id, extension="ogg")
+        filepath = self._get_filepath(
+            filename=recording_id, extension=FileExtension.OGG.value
+        )

        file_output = livekit_api.EncodedFileOutput(
            file_type=file_type,
@@ -12,7 +12,12 @@ from django.conf import settings
 from django.core.cache import cache

 from asgiref.sync import async_to_sync
-from livekit.api import LiveKitAPI, SendDataRequest, TwirpError  # pylint: disable=E0611
+from livekit.api import (  # pylint: disable=E0611
+    ListRoomsRequest,
+    LiveKitAPI,
+    SendDataRequest,
+    TwirpError,
+)

 from core import models, utils

@@ -221,6 +226,12 @@ class LobbyService:
            color=color,
        )

+        try:
+            self.notify_participants(room_id=room_id)
+        except LobbyNotificationError:
+            # If room not created yet, there is no participants to notify
+            pass
+
        cache_key = self._get_cache_key(room_id, participant_id)
        cache.set(
            cache_key,
@@ -228,12 +239,6 @@ class LobbyService:
            timeout=settings.LOBBY_WAITING_TIMEOUT,
        )

-        try:
-            self.notify_participants(room_id=room_id)
-        except LobbyNotificationError:
-            # If room not created yet, there is no participants to notify
-            pass
-
        return participant

    def _get_participant(
@@ -343,7 +348,18 @@ class LobbyService:
        }

        lkapi = LiveKitAPI(**settings.LIVEKIT_CONFIGURATION)
+
        try:
+            room_response = await lkapi.room.list_rooms(
+                ListRoomsRequest(
+                    names=[str(room_id)],
+                )
+            )
+
+            # Check if the room exists
+            if not room_response.rooms:
+                return
+
            await lkapi.room.send_data(
                SendDataRequest(
                    room=str(room_id),
@@ -0,0 +1,37 @@
+"""Room creation service."""
+
+from django.conf import settings
+from django.core.cache import cache
+
+
+class RoomCreation:
+    """Room creation related methods"""
+
+    @staticmethod
+    def _get_cache_key(callback_id):
+        """Generate a standardized cache key for room creation callbacks."""
+        return f"room-creation-callback_{callback_id}"
+
+    def persist_callback_state(self, callback_id: str, room) -> None:
+        """Store room data in cache using the callback ID as an identifier."""
+        data = {
+            "slug": room.slug,
+        }
+        cache.set(
+            self._get_cache_key(callback_id),
+            data,
+            timeout=settings.ROOM_CREATION_CALLBACK_CACHE_TIMEOUT,
+        )
+
+    def get_callback_state(self, callback_id: str) -> dict:
+        """Retrieve and clear cached room data for the given callback ID."""
+
+        cache_key = self._get_cache_key(callback_id)
+        data = cache.get(cache_key)
+
+        if not data:
+            return {}
+
+        cache.delete(cache_key)
+
+        return data
@@ -0,0 +1,167 @@
+"""
+Test event notification.
+"""
+
+# pylint: disable=E1128,W0621,W0613,W0212
+
+import smtplib
+from unittest import mock
+
+from django.contrib.sites.models import Site
+
+import pytest
+
+from core import factories, models
+from core.recording.event.notification import NotificationService, notification_service
+
+pytestmark = pytest.mark.django_db
+
+
+@pytest.fixture
+def mocked_current_site():
+    """Mocks the Site.objects.get_current()to return a controlled predefined domain."""
+
+    site_mock = mock.Mock()
+    site_mock.domain = "test-domain.com"
+
+    with mock.patch.object(
+        Site.objects, "get_current", return_value=site_mock
+    ) as patched:
+        yield patched
+
+
+@mock.patch.object(NotificationService, "_notify_summary_service", return_value=True)
+def test_notify_external_services_transcript_mode(mock_notify_summary):
+    """Test notification routing for transcript mode recordings."""
+
+    service = NotificationService()
+
+    recording = factories.RecordingFactory(mode=models.RecordingModeChoices.TRANSCRIPT)
+    result = service.notify_external_services(recording)
+
+    assert result is True
+    mock_notify_summary.assert_called_once_with(recording)
+
+
+@mock.patch.object(NotificationService, "_notify_user_by_email", return_value=True)
+def test_notify_external_services_screen_recording_mode(mock_notify_email):
+    """Test notification routing for screen recording mode."""
+
+    service = NotificationService()
+
+    recording = factories.RecordingFactory(
+        mode=models.RecordingModeChoices.SCREEN_RECORDING
+    )
+
+    result = service.notify_external_services(recording)
+
+    assert result is True
+    mock_notify_email.assert_called_once_with(recording)
+
+
+def test_notify_external_services_unknown_mode(caplog):
+    """Test notification for unknown recording mode."""
+    recording = factories.RecordingFactory()
+
+    # Bypass validation
+    recording.mode = "unknown"
+
+    service = NotificationService()
+
+    result = service.notify_external_services(recording)
+
+    assert result is False
+    assert f"Unknown recording mode unknown for recording {recording.id}" in caplog.text
+
+
+def test_notify_user_by_email_success(mocked_current_site, settings):
+    """Test successful email notification to recording owners."""
+    settings.EMAIL_BRAND_NAME = "ACME"
+    settings.EMAIL_SUPPORT_EMAIL = "support@acme.com"
+    settings.EMAIL_LOGO_IMG = "https://acme.com/logo"
+    settings.SCREEN_RECORDING_BASE_URL = "https://acme.com/recordings"
+    settings.EMAIL_FROM = "notifications@acme.com"
+
+    recording = factories.RecordingFactory(room__name="Conference Room A")
+
+    owners = [
+        factories.UserRecordingAccessFactory(
+            recording=recording, role=models.RoleChoices.OWNER
+        ).user,
+        factories.UserRecordingAccessFactory(
+            recording=recording, role=models.RoleChoices.OWNER
+        ).user,
+    ]
+    owner_emails = [owner.email for owner in owners]
+
+    # Create non-owner users to verify they don't receive emails
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.MEMBER
+    )
+    factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.ADMIN
+    )
+
+    notification_service = NotificationService()
+
+    with mock.patch("core.recording.event.notification.send_mail") as mock_send_mail:
+        result = notification_service._notify_user_by_email(recording)
+
+        assert result is True
+        mock_send_mail.assert_called_once()
+
+        subject, body, sender, recipients = mock_send_mail.call_args[0]
+
+        assert subject == "Your recording is ready"
+
+        # Verify email contains expected content
+        required_content = [
+            "ACME",  # Brand name
+            "support@acme.com",  # Support email
+            "https://acme.com/logo",  # Logo URL
+            f"https://acme.com/recordings/{recording.id}",  # Recording link
+            "Conference Room A",  # Room name
+            recording.created_at.strftime("%A %d %B %Y"),  # Formatted date
+            recording.created_at.strftime("%H:%M"),  # Formatted time
+        ]
+
+        for content in required_content:
+            assert content in body
+
+        assert sender == "notifications@acme.com"
+
+        # Verify all owners received the email (order-independent comparison)
+        assert sorted(recipients) == sorted(owner_emails)
+
+
+def test_notify_user_by_email_no_owners(mocked_current_site, caplog):
+    """Test email notification when no owners are found."""
+
+    # Recording with no access
+    recording = factories.RecordingFactory()
+
+    result = notification_service._notify_user_by_email(recording)
+
+    assert result is False
+    assert f"No owner found for recording {recording.id}" in caplog.text
+
+
+def test_notify_user_by_email_smtp_exception(mocked_current_site, caplog):
+    """Test email notification when an exception occurs."""
+
+    recording = factories.RecordingFactory(room__name="Conference Room A")
+    owner = factories.UserRecordingAccessFactory(
+        recording=recording, role=models.RoleChoices.OWNER
+    ).user
+
+    notification_service = NotificationService()
+
+    with mock.patch(
+        "core.recording.event.notification.send_mail",
+        side_effect=smtplib.SMTPException("SMTP Error"),
+    ) as mock_send_mail:
+        result = notification_service._notify_user_by_email(recording)
+
+        assert result is False
+        mock_send_mail.assert_called_once()
+        assert f"notification to ['{owner.email}'] was not sent" in caplog.text
@@ -22,6 +22,27 @@ def test_api_recordings_list_anonymous():
    assert response.status_code == 401


+def test_api_recordings_list_authenticated_no_recording():
+    """
+    Authenticated users listing recordings should only
+    see recordings to which they have access.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    other_user = factories.UserFactory()
+    factories.UserRecordingAccessFactory(user=other_user)
+
+    response = client.get(
+        "/api/v1.0/recordings/",
+    )
+
+    assert response.status_code == 200
+    results = response.json()["results"]
+    assert results == []
+
+
@pytest.mark.parametrize(
    "role",
    ["administrator", "member", "owner"],
@@ -58,6 +79,7 @@ def test_api_recordings_list_authenticated_direct(role):
    assert results[0] == {
        "id": str(recording.id),
        "created_at": recording.created_at.isoformat().replace("+00:00", "Z"),
+        "mode": recording.mode,
        "room": {
            "access_level": str(room.access_level),
            "id": str(room.id),
@@ -0,0 +1,284 @@
+"""
+Test media-auth authorization API endpoint in docs core app.
+"""
+
+from io import BytesIO
+from urllib.parse import urlparse
+from uuid import uuid4
+
+from django.conf import settings
+from django.core.files.storage import default_storage
+from django.utils import timezone
+
+import pytest
+import requests
+from rest_framework.test import APIClient
+
+from core import models
+from core.factories import RecordingFactory, UserFactory, UserRecordingAccessFactory
+
+pytestmark = pytest.mark.django_db
+
+
+def test_api_documents_media_auth_unauthenticated():
+    """
+    Test that unauthenticated requests to download media are rejected
+    """
+    original_url = f"http://localhost/media/recordings/{uuid4()!s}.mp4"
+
+    response = APIClient().get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 401
+
+
+def test_api_documents_media_auth_wrong_path():
+    """
+    Test that media URLs with incorrect path structures are rejected
+    """
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    original_url = f"http://localhost/media/wrong-path/{uuid4()!s}.mp4"
+
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 403
+
+
+def test_api_documents_media_auth_unknown_recording():
+    """
+    Test that requests for non-existent recordings are properly handled
+    """
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    original_url = f"http://localhost/media/recordings/{uuid4()!s}.mp4"
+
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 404
+
+
+def test_api_documents_media_auth_no_abilities():
+    """
+    Test that users without any access permissions cannot download recordings
+    """
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    recording = RecordingFactory(status=models.RecordingStatusChoices.SAVED)
+    original_url = f"http://localhost/media/recordings/{recording.id!s}.mp4"
+
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 403
+
+
+def test_api_documents_media_auth_wrong_abilities():
+    """
+    Test that users with insufficient role permissions cannot download recordings
+    """
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    recording = RecordingFactory(status=models.RecordingStatusChoices.SAVED)
+
+    UserRecordingAccessFactory(user=user, recording=recording, role="member")
+
+    original_url = f"http://localhost/media/recordings/{recording.id!s}.mp4"
+
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 403
+
+
+@pytest.mark.parametrize("wrong_status", ["initiated", "active", "failed_to_stop"])
+def test_api_documents_media_auth_unsaved(wrong_status):
+    """
+    Test that recordings that aren't in 'saved' status cannot be downloaded
+    """
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    recording = RecordingFactory(status=wrong_status)
+    UserRecordingAccessFactory(user=user, recording=recording, role="owner")
+
+    original_url = f"http://localhost/media/recordings/{recording.id!s}.mp4"
+
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 403
+
+
+def test_api_documents_media_auth_mismatched_extension():
+    """
+    Test that requests with mismatched file extensions are rejected
+    """
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    recording = RecordingFactory(
+        status=models.RecordingStatusChoices.SAVED,
+        mode=models.RecordingModeChoices.TRANSCRIPT,
+    )
+    UserRecordingAccessFactory(user=user, recording=recording, role="owner")
+
+    original_url = f"http://localhost/media/recordings/{recording.id!s}.mp4"
+
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 404
+    assert response.json() == {"detail": "No recording found with this extension."}
+
+
+@pytest.mark.parametrize(
+    "wrong_extension", ["jpg", "txt", "mp3"], ids=["image", "text", "audio"]
+)
+def test_api_documents_media_auth_wrong_extension(wrong_extension):
+    """
+    Trying to download a recording with an unsupported extension should return
+    a validation error (400) with details about allowed extensions.
+    """
+    user = UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    recording = RecordingFactory(status=models.RecordingStatusChoices.SAVED)
+    UserRecordingAccessFactory(user=user, recording=recording, role="owner")
+
+    original_url = (
+        f"http://localhost/media/recordings/{recording.id!s}.{wrong_extension}"
+    )
+
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 400
+    assert response.json() == {"detail": "Unsupported extension."}
+
+
+@pytest.mark.parametrize("mode", ["screen_recording", "transcript"])
+def test_api_documents_media_auth_success_owner(mode):
+    """
+    Test downloading a recording when logged in and authorized.
+    Verifies S3 authentication headers and successful file retrieval.
+    """
+    user = UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    recording = RecordingFactory(status=models.RecordingStatusChoices.SAVED, mode=mode)
+    UserRecordingAccessFactory(user=user, recording=recording, role="owner")
+
+    default_storage.connection.meta.client.put_object(
+        Bucket=default_storage.bucket_name,
+        Key=recording.key,
+        Body=BytesIO(b"my prose"),
+        ContentType="text/plain",
+    )
+
+    original_url = f"http://localhost/media/{recording.key:s}"
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 200
+
+    authorization = response["Authorization"]
+    assert "AWS4-HMAC-SHA256 Credential=" in authorization
+    assert (
+        "SignedHeaders=host;x-amz-content-sha256;x-amz-date, Signature="
+        in authorization
+    )
+    assert response["X-Amz-Date"] == timezone.now().strftime("%Y%m%dT%H%M%SZ")
+
+    s3_url = urlparse(settings.AWS_S3_ENDPOINT_URL)
+    file_url = f"{settings.AWS_S3_ENDPOINT_URL:s}/meet-media-storage/{recording.key:s}"
+    response = requests.get(
+        file_url,
+        headers={
+            "authorization": authorization,
+            "x-amz-date": response["x-amz-date"],
+            "x-amz-content-sha256": response["x-amz-content-sha256"],
+            "Host": f"{s3_url.hostname:s}:{s3_url.port:d}",
+        },
+        timeout=1,
+    )
+    assert response.content.decode("utf-8") == "my prose"
+
+
+@pytest.mark.parametrize("mode", ["screen_recording", "transcript"])
+def test_api_documents_media_auth_success_administrator(mode):
+    """
+    Test downloading a recording when logged in and authorized.
+    Verifies S3 authentication headers and successful file retrieval.
+    """
+    user = UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    recording = RecordingFactory(status=models.RecordingStatusChoices.SAVED, mode=mode)
+    UserRecordingAccessFactory(user=user, recording=recording, role="administrator")
+
+    default_storage.connection.meta.client.put_object(
+        Bucket=default_storage.bucket_name,
+        Key=recording.key,
+        Body=BytesIO(b"my prose"),
+        ContentType="text/plain",
+    )
+
+    original_url = f"http://localhost/media/{recording.key:s}"
+    response = client.get(
+        "/api/v1.0/recordings/media-auth/", HTTP_X_ORIGINAL_URL=original_url
+    )
+
+    assert response.status_code == 200
+
+    authorization = response["Authorization"]
+    assert "AWS4-HMAC-SHA256 Credential=" in authorization
+    assert (
+        "SignedHeaders=host;x-amz-content-sha256;x-amz-date, Signature="
+        in authorization
+    )
+    assert response["X-Amz-Date"] == timezone.now().strftime("%Y%m%dT%H%M%SZ")
+
+    s3_url = urlparse(settings.AWS_S3_ENDPOINT_URL)
+    file_url = f"{settings.AWS_S3_ENDPOINT_URL:s}/meet-media-storage/{recording.key:s}"
+    response = requests.get(
+        file_url,
+        headers={
+            "authorization": authorization,
+            "x-amz-date": response["x-amz-date"],
+            "x-amz-content-sha256": response["x-amz-content-sha256"],
+            "Host": f"{s3_url.hostname:s}:{s3_url.port:d}",
+        },
+        timeout=1,
+    )
+    assert response.content.decode("utf-8") == "my prose"
@@ -0,0 +1,153 @@
+"""
+Test recordings API endpoints in the Meet core app: retrieve.
+"""
+
+import pytest
+from rest_framework.test import APIClient
+
+from ...factories import RecordingFactory, UserFactory, UserRecordingAccessFactory
+from ...models import RecordingStatusChoices
+
+pytestmark = pytest.mark.django_db
+
+
+def test_api_recording_retrieve_anonymous():
+    """Anonymous users should not be able to retrieve recordings."""
+    recording = RecordingFactory()
+    client = APIClient()
+    response = client.get(f"/api/v1.0/recordings/{recording.id!s}/")
+
+    assert response.status_code == 401
+    assert response.json() == {
+        "detail": "Authentication credentials were not provided."
+    }
+
+
+def test_api_recording_retrieve_authenticated():
+    """Authenticated users without access receive 404 when requesting recordings.
+
+    The API returns 404 instead of 403 to avoid revealing the existence of
+    resources the user doesn't have permission to access.
+    """
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    other_user = UserFactory()
+    recording = UserRecordingAccessFactory(user=other_user).recording
+
+    response = client.get(f"/api/v1.0/recordings/{recording.id!s}/")
+    assert response.status_code == 404
+    assert response.json() == {"detail": "No Recording matches the given query."}
+
+
+def test_api_recording_retrieve_members():
+    """
+    A user who is a member of a recording should not be able to retrieve it.
+    """
+    user = UserFactory()
+    recording = RecordingFactory()
+
+    UserRecordingAccessFactory(recording=recording, user=user, role="member")
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/recordings/{recording.id!s}/")
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+
+
+def test_api_recording_retrieve_administrators():
+    """A user who is an administrator of a recording should be able to retrieve it."""
+
+    user = UserFactory()
+    recording = RecordingFactory()
+
+    UserRecordingAccessFactory(recording=recording, user=user, role="administrator")
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/recordings/{recording.id!s}/")
+
+    assert response.status_code == 200
+    content = response.json()
+    room = recording.room
+
+    assert content == {
+        "id": str(recording.id),
+        "room": {
+            "access_level": str(room.access_level),
+            "id": str(room.id),
+            "name": room.name,
+            "slug": room.slug,
+        },
+        "created_at": recording.created_at.isoformat().replace("+00:00", "Z"),
+        "updated_at": recording.updated_at.isoformat().replace("+00:00", "Z"),
+        "status": str(recording.status),
+        "mode": str(recording.mode),
+    }
+
+
+def test_api_recording_retrieve_owners():
+    """A user who is an owner of a recording should be able to retrieve it."""
+    user = UserFactory()
+    recording = RecordingFactory()
+
+    UserRecordingAccessFactory(recording=recording, user=user, role="owner")
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/recordings/{recording.id!s}/")
+
+    assert response.status_code == 200
+    content = response.json()
+    room = recording.room
+
+    assert content == {
+        "id": str(recording.id),
+        "room": {
+            "access_level": str(room.access_level),
+            "id": str(room.id),
+            "name": room.name,
+            "slug": room.slug,
+        },
+        "created_at": recording.created_at.isoformat().replace("+00:00", "Z"),
+        "updated_at": recording.updated_at.isoformat().replace("+00:00", "Z"),
+        "status": str(recording.status),
+        "mode": str(recording.mode),
+    }
+
+
+@pytest.mark.parametrize(
+    "status",
+    [
+        RecordingStatusChoices.INITIATED,
+        RecordingStatusChoices.ACTIVE,
+        RecordingStatusChoices.SAVED,
+        RecordingStatusChoices.FAILED_TO_START,
+        RecordingStatusChoices.FAILED_TO_STOP,
+        RecordingStatusChoices.ABORTED,
+    ],
+)
+def test_api_recording_retrieve_any_status(status):
+    """Test that recordings with any status can be retrieved."""
+    user = UserFactory()
+    recording = RecordingFactory(status=status)
+
+    UserRecordingAccessFactory(recording=recording, user=user, role="owner")
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/recordings/{recording.id!s}/")
+
+    assert response.status_code == 200
+    content = response.json()
+    assert content["id"] == str(recording.id)
+    assert content["status"] == status
@@ -2,6 +2,9 @@
 Test rooms API endpoints in the Meet core app: create.
 """

+# pylint: disable=W0621,W0613
+from django.core.cache import cache
+
 import pytest
 from rest_framework.test import APIClient

@@ -11,6 +14,15 @@ from ...models import Room
 pytestmark = pytest.mark.django_db


+@pytest.fixture
+def reset_cache():
+    """Provide cache cleanup after each test to maintain test isolation."""
+    yield
+    keys = cache.keys("room-creation-callback_*")
+    if keys:
+        cache.delete(*keys)
+
+
 def test_api_rooms_create_anonymous():
    """Anonymous users should not be allowed to create rooms."""
    client = APIClient()
@@ -26,7 +38,7 @@ def test_api_rooms_create_anonymous():
    assert Room.objects.exists() is False


-def test_api_rooms_create_authenticated():
+def test_api_rooms_create_authenticated(reset_cache):
    """
    Authenticated users should be able to create rooms and should automatically be declared
    as owner of the newly created room.
@@ -49,6 +61,33 @@ def test_api_rooms_create_authenticated():
    assert room.slug == "my-room"
    assert room.accesses.filter(role="owner", user=user).exists() is True

+    rooms_data = cache.keys("room-creation-callback_*")
+    assert not rooms_data
+
+
+def test_api_rooms_create_generation_cache(reset_cache):
+    """
+    Authenticated users creating a room with a callback ID should have room data stored in cache.
+    """
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.post(
+        "/api/v1.0/rooms/",
+        {"name": "my room", "callback_id": "1234"},
+    )
+
+    assert response.status_code == 201
+    room = Room.objects.get()
+    assert room.name == "my room"
+    assert room.slug == "my-room"
+    assert room.accesses.filter(role="owner", user=user).exists() is True
+
+    room_data = cache.get("room-creation-callback_1234")
+    assert room_data.get("slug") == "my-room"
+

 def test_api_rooms_create_authenticated_existing_slug():
    """
@@ -0,0 +1,98 @@
+"""
+Test rooms API endpoints in the Meet core app: creation callback functionality.
+"""
+
+# pylint: disable=W0621,W0613
+from django.core.cache import cache
+
+import pytest
+from rest_framework.test import APIClient
+
+from ...factories import UserFactory
+
+pytestmark = pytest.mark.django_db
+
+
+# Tests for creation_callback endpoint
+
+
+@pytest.fixture
+def reset_cache():
+    """Provide cache cleanup after each test to maintain test isolation."""
+    yield
+    keys = cache.keys("room-creation-callback_*")
+    if keys:
+        cache.delete(*keys)
+
+
+def test_api_rooms_create_anonymous(reset_cache):
+    """Anonymous user can retrieve room data once using a valid callback ID."""
+    client = APIClient()
+    cache.set("room-creation-callback_123", {"slug": "my room"})
+    response = client.post(
+        "/api/v1.0/rooms/creation-callback/",
+        {
+            "callback_id": "123",
+        },
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"status": "success", "room": {"slug": "my room"}}
+
+    # Data should be cleared after retrieval
+    response = client.post(
+        "/api/v1.0/rooms/creation-callback/",
+        {
+            "callback_id": "123",
+        },
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"status": "success", "room": {}}
+
+
+def test_api_rooms_create_empty_cache():
+    """Valid callback ID return empty room data when nothing is stored in the cache."""
+    client = APIClient()
+
+    response = client.post(
+        "/api/v1.0/rooms/creation-callback/",
+        {
+            "callback_id": "123",
+        },
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"status": "success", "room": {}}
+
+
+def test_api_rooms_create_missing_callback_id():
+    """Requests without a callback ID properly fail with a 400 status code."""
+    client = APIClient()
+
+    response = client.post(
+        "/api/v1.0/rooms/creation-callback/",
+        {},
+    )
+
+    assert response.status_code == 400
+
+
+def test_api_rooms_create_authenticated(reset_cache):
+    """Authenticated users can also successfully retrieve room data using a valid callback ID"""
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    cache.set("room-creation-callback_123", {"slug": "my room"})
+
+    response = client.post(
+        "/api/v1.0/rooms/creation-callback/",
+        {
+            "callback_id": "123",
+        },
+    )
+
+    assert response.status_code == 200
+    assert response.json() == {"status": "success", "room": {"slug": "my room"}}
@@ -776,6 +776,43 @@ def test_update_participant_status_success(mock_cache, lobby_service, participan
    lobby_service._get_cache_key.assert_called_once_with(room.id, participant_id)


+@mock.patch("core.services.lobby.LiveKitAPI")
+def test_notify_participants_success_no_room(mock_livekit_api, lobby_service):
+    """Test the notify_participants method when the LiveKit room doesn't exist yet."""
+    room = RoomFactory(access_level=RoomAccessLevel.RESTRICTED)
+
+    # Set up the mock LiveKitAPI and its behavior
+    mock_api_instance = mock.Mock()
+    mock_api_instance.room = mock.Mock()
+    mock_api_instance.room.send_data = mock.AsyncMock()
+
+    # Create a proper response object with an empty rooms list
+    class MockResponse:
+        """LiveKit API response mock with empty rooms list."""
+
+        rooms = []
+
+    mock_api_instance.room.list_rooms = mock.AsyncMock(return_value=MockResponse())
+    mock_api_instance.aclose = mock.AsyncMock()
+    mock_livekit_api.return_value = mock_api_instance
+
+    # Act
+    lobby_service.notify_participants(room.id)
+
+    # Assert
+    # Verify the API was initialized with correct configuration
+    mock_livekit_api.assert_called_once_with(**settings.LIVEKIT_CONFIGURATION)
+
+    # Verify that the service checked for existing rooms
+    mock_api_instance.room.list_rooms.assert_called_once()
+
+    # Verify the send_data method was not called since no room exists
+    mock_api_instance.room.send_data.assert_not_called()
+
+    # Verify the connection was properly closed
+    mock_api_instance.aclose.assert_called_once()
+
+
@mock.patch("core.services.lobby.LiveKitAPI")
 def test_notify_participants_success(mock_livekit_api, lobby_service):
    """Test successful participant notification."""
@@ -784,6 +821,14 @@ def test_notify_participants_success(mock_livekit_api, lobby_service):
    mock_api_instance = mock.Mock()
    mock_api_instance.room = mock.Mock()
    mock_api_instance.room.send_data = mock.AsyncMock()
+
+    class MockResponse:
+        """LiveKit API response mock with non-empty rooms list."""
+
+        rooms = ["room-1"]
+
+    mock_api_instance.room.list_rooms = mock.AsyncMock(return_value=MockResponse())
+
    mock_api_instance.aclose = mock.AsyncMock()
    mock_livekit_api.return_value = mock_api_instance

@@ -793,6 +838,9 @@ def test_notify_participants_success(mock_livekit_api, lobby_service):
    # Verify the API was called correctly
    mock_livekit_api.assert_called_once_with(**settings.LIVEKIT_CONFIGURATION)

+    # Verify that the service checked for existing rooms
+    mock_api_instance.room.list_rooms.assert_called_once()
+
    # Verify the send_data method was called
    mock_api_instance.room.send_data.assert_called_once()
    send_data_request = mock_api_instance.room.send_data.call_args[0][0]
@@ -817,6 +865,14 @@ def test_notify_participants_error(mock_livekit_api, lobby_service):
    mock_api_instance.room.send_data = mock.AsyncMock(
        side_effect=TwirpError(msg="test error", code=123)
    )
+
+    class MockResponse:
+        """LiveKit API response mock with non-empty rooms list."""
+
+        rooms = ["room-1"]
+
+    mock_api_instance.room.list_rooms = mock.AsyncMock(return_value=MockResponse())
+
    mock_api_instance.aclose = mock.AsyncMock()
    mock_livekit_api.return_value = mock_api_instance

@@ -829,6 +885,9 @@ def test_notify_participants_error(mock_livekit_api, lobby_service):
    # Verify the API was called correctly
    mock_livekit_api.assert_called_once_with(**settings.LIVEKIT_CONFIGURATION)

+    # Verify that the service checked for existing rooms
+    mock_api_instance.room.list_rooms.assert_called_once()
+
    # Verify send_data was called
    mock_api_instance.room.send_data.assert_called_once()

@@ -12,7 +12,8 @@ from core.factories import (
    UserFactory,
    UserRecordingAccessFactory,
 )
-from core.models import Recording, RecordingStatusChoices
+from core.models import Recording, RecordingModeChoices, RecordingStatusChoices
+from core.recording.enums import FileExtension

 pytestmark = pytest.mark.django_db

@@ -216,3 +217,71 @@ def test_models_recording_worker_id_very_long():
    too_long_id = "w" * 256
    with pytest.raises(ValidationError):
        RecordingFactory(worker_id=too_long_id)
+
+
+# Test key property method
+
+
+def test_models_recording_key_for_transcript(settings):
+    """Test key property returns correct path for transcript mode."""
+
+    settings.RECORDING_OUTPUT_FOLDER = "/custom/path"
+
+    recording = RecordingFactory(mode=RecordingModeChoices.TRANSCRIPT)
+    expected_path = f"/custom/path/{recording.id}.{FileExtension.OGG.value}"
+    assert recording.key == expected_path
+
+
+def test_models_recording_key_for_screen_recording(settings):
+    """Test key property returns correct path for screen recording mode."""
+    settings.RECORDING_OUTPUT_FOLDER = "/custom/path"
+
+    recording = RecordingFactory(mode=RecordingModeChoices.SCREEN_RECORDING)
+    expected_path = f"/custom/path/{recording.id}.{FileExtension.MP4.value}"
+    assert recording.key == expected_path
+
+
+def test_models_recording_key_for_unknown_mode(settings):
+    """Test key property uses default extension for unknown mode."""
+
+    settings.RECORDING_OUTPUT_FOLDER = "/custom/path"
+    recording = RecordingFactory()
+    # Directly set an invalid mode (bypassing validation)
+    recording.mode = "unknown_mode"
+    expected_path = f"/custom/path/{recording.id}.{FileExtension.MP4.value}"
+    assert recording.key == expected_path
+
+
+# Test is_saved method
+
+
+def test_models_recording_is_saved_true():
+    """Test is_saved property returns True for SAVED status."""
+    recording = RecordingFactory(status=RecordingStatusChoices.SAVED)
+    assert recording.is_saved is True
+
+
+def test_models_recording_is_saved_false_active():
+    """Test is_saved property returns False for ACTIVE status."""
+    recording = RecordingFactory(status=RecordingStatusChoices.ACTIVE)
+    assert recording.is_saved is False
+
+
+def test_models_recording_is_saved_false_initiated():
+    """Test is_saved property returns False for INITIATED status."""
+    recording = RecordingFactory(status=RecordingStatusChoices.INITIATED)
+    assert recording.is_saved is False
+
+
+@pytest.mark.parametrize(
+    "status",
+    [
+        RecordingStatusChoices.FAILED_TO_STOP,
+        RecordingStatusChoices.FAILED_TO_START,
+        RecordingStatusChoices.ABORTED,
+    ],
+)
+def test_models_recording_is_saved_false_error_states(status):
+    """Test is_saved property returns False for error statuses."""
+    recording = RecordingFactory(status=status)
+    assert recording.is_saved is False
@@ -11,7 +11,9 @@ from typing import Optional
 from uuid import uuid4

 from django.conf import settings
+from django.core.files.storage import default_storage

+import botocore
 from livekit.api import AccessToken, VideoGrants


@@ -110,3 +112,33 @@ def generate_livekit_config(
            room=room_id, user=user, username=username, color=color
        ),
    }
+
+
+def generate_s3_authorization_headers(key):
+    """
+    Generate authorization headers for an s3 object.
+    These headers can be used as an alternative to signed urls with many benefits:
+    - the urls of our files never expire and can be stored in our recording' metadata
+    - we don't leak authorized urls that could be shared (file access can only be done
+      with cookies)
+    - access control is truly realtime
+    - the object storage service does not need to be exposed on internet
+    """
+
+    url = default_storage.unsigned_connection.meta.client.generate_presigned_url(
+        "get_object",
+        ExpiresIn=0,
+        Params={"Bucket": default_storage.bucket_name, "Key": key},
+    )
+
+    request = botocore.awsrequest.AWSRequest(method="get", url=url)
+
+    s3_client = default_storage.connection.meta.client
+    # pylint: disable=protected-access
+    credentials = s3_client._request_signer._credentials  # noqa: SLF001
+    frozen_credentials = credentials.get_frozen_credentials()
+    region = s3_client.meta.region_name
+    auth = botocore.auth.S3SigV4Auth(frozen_credentials, "s3", region)
+    auth.add_auth(request)
+
+    return request
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2024-04-03 10:31+0000\n"
+"POT-Creation-Date: 2025-04-14 19:04+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,28 +17,32 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:31
+#: core/admin.py:26
 msgid "Personal info"
 msgstr ""

-#: core/admin.py:33
+#: core/admin.py:39
 msgid "Permissions"
 msgstr ""

-#: core/admin.py:45
+#: core/admin.py:51
 msgid "Important dates"
 msgstr ""

-#: core/api/serializers.py:128
-msgid "Markdown Body"
+#: core/api/serializers.py:60
+msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""

-#: core/authentication.py:71
+#: core/authentication/backends.py:77
 msgid "User info contained no recognizable user identification"
 msgstr ""

-#: core/authentication.py:91
-msgid "Claims contained no recognizable user identification"
+#: core/authentication/backends.py:102
+msgid "User account is disabled"
+msgstr ""
+
+#: core/authentication/backends.py:142
+msgid "Multiple user accounts share a common email."
 msgstr ""

 #: core/models.py:27
@@ -53,156 +57,412 @@ msgstr ""
 msgid "Owner"
 msgstr ""

-#: core/models.py:41
-msgid "id"
+#: core/models.py:45
+msgid "Initiated"
 msgstr ""

-#: core/models.py:42
-msgid "primary key for the record as UUID"
+#: core/models.py:46
+msgid "Active"
+msgstr ""
+
+#: core/models.py:47
+msgid "Stopped"
 msgstr ""

 #: core/models.py:48
-msgid "created on"
+msgid "Saved"
 msgstr ""

 #: core/models.py:49
+msgid "Aborted"
+msgstr ""
+
+#: core/models.py:50
+msgid "Failed to Start"
+msgstr ""
+
+#: core/models.py:51
+msgid "Failed to Stop"
+msgstr ""
+
+#: core/models.py:52
+msgid "Notification succeeded"
+msgstr ""
+
+#: core/models.py:79
+msgid "SCREEN_RECORDING"
+msgstr ""
+
+#: core/models.py:80
+msgid "TRANSCRIPT"
+msgstr ""
+
+#: core/models.py:86
+msgid "Public Access"
+msgstr ""
+
+#: core/models.py:87
+msgid "Trusted Access"
+msgstr ""
+
+#: core/models.py:88
+msgid "Restricted Access"
+msgstr ""
+
+#: core/models.py:100
+msgid "id"
+msgstr ""
+
+#: core/models.py:101
+msgid "primary key for the record as UUID"
+msgstr ""
+
+#: core/models.py:107
+msgid "created on"
+msgstr ""
+
+#: core/models.py:108
 msgid "date and time at which a record was created"
 msgstr ""

-#: core/models.py:54
+#: core/models.py:113
 msgid "updated on"
 msgstr ""

-#: core/models.py:55
+#: core/models.py:114
 msgid "date and time at which a record was last updated"
 msgstr ""

-#: core/models.py:75
+#: core/models.py:134
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
 msgstr ""

-#: core/models.py:81
+#: core/models.py:140
 msgid "sub"
 msgstr ""

-#: core/models.py:83
+#: core/models.py:142
 msgid ""
 "Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
 "characters only."
 msgstr ""

-#: core/models.py:91
+#: core/models.py:150
 msgid "identity email address"
 msgstr ""

-#: core/models.py:96
+#: core/models.py:155
 msgid "admin email address"
 msgstr ""

-#: core/models.py:103
+#: core/models.py:157
+msgid "full name"
+msgstr ""
+
+#: core/models.py:159
+msgid "short name"
+msgstr ""
+
+#: core/models.py:165
 msgid "language"
 msgstr ""

-#: core/models.py:104
+#: core/models.py:166
 msgid "The language in which the user wants to see the interface."
 msgstr ""

-#: core/models.py:110
+#: core/models.py:172
 msgid "The timezone in which the user wants to see times."
 msgstr ""

-#: core/models.py:113
+#: core/models.py:175
 msgid "device"
 msgstr ""

-#: core/models.py:115
+#: core/models.py:177
 msgid "Whether the user is a device or a real user."
 msgstr ""

-#: core/models.py:118
+#: core/models.py:180
 msgid "staff status"
 msgstr ""

-#: core/models.py:120
+#: core/models.py:182
 msgid "Whether the user can log into this admin site."
 msgstr ""

-#: core/models.py:123
+#: core/models.py:185
 msgid "active"
 msgstr ""

-#: core/models.py:126
+#: core/models.py:188
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
 msgstr ""

-#: core/models.py:138
+#: core/models.py:201
 msgid "user"
 msgstr ""

-#: core/models.py:139
+#: core/models.py:202
 msgid "users"
 msgstr ""

-#: core/models.py:161
-msgid "title"
+#: core/models.py:261
+msgid "Resource"
 msgstr ""

-#: core/models.py:162
-msgid "description"
+#: core/models.py:262
+msgid "Resources"
 msgstr ""

-#: core/models.py:163
-msgid "code"
+#: core/models.py:316
+msgid "Resource access"
 msgstr ""

-#: core/models.py:164
-msgid "css"
+#: core/models.py:317
+msgid "Resource accesses"
 msgstr ""

-#: core/models.py:166
-msgid "public"
+#: core/models.py:323
+msgid "Resource access with this User and Resource already exists."
 msgstr ""

-#: core/models.py:168
-msgid "Whether this template is public for anyone to use."
+#: core/models.py:379
+msgid "Visio room configuration"
 msgstr ""

-#: core/models.py:174
-msgid "Template"
+#: core/models.py:380
+msgid "Values for Visio parameters to configure the room."
 msgstr ""

-#: core/models.py:175
-msgid "Templates"
+#: core/models.py:386 core/models.py:506
+msgid "Room"
 msgstr ""

-#: core/models.py:256
-msgid "Template/user relation"
+#: core/models.py:387
+msgid "Rooms"
 msgstr ""

-#: core/models.py:257
-msgid "Template/user relations"
+#: core/models.py:517
+msgid "Worker ID"
 msgstr ""

-#: core/models.py:263
-msgid "This user is already in this template."
+#: core/models.py:519
+msgid ""
+"Enter an identifier for the worker recording.This ID is retained even when "
+"the worker stops, allowing for easy tracking."
 msgstr ""

-#: core/models.py:269
-msgid "This team is already in this template."
+#: core/models.py:527
+msgid "Recording mode"
 msgstr ""

-#: core/models.py:275
+#: core/models.py:528
+msgid "Defines the mode of recording being called."
+msgstr ""
+
+#: core/models.py:534
+msgid "Recording"
+msgstr ""
+
+#: core/models.py:535
+msgid "Recordings"
+msgstr ""
+
+#: core/models.py:592
+msgid "Recording/user relation"
+msgstr ""
+
+#: core/models.py:593
+msgid "Recording/user relations"
+msgstr ""
+
+#: core/models.py:599
+msgid "This user is already in this recording."
+msgstr ""
+
+#: core/models.py:605
+msgid "This team is already in this recording."
+msgstr ""
+
+#: core/models.py:611
 msgid "Either user or team must be set, not both."
 msgstr ""

-#: meet/settings.py:134
+#: core/recording/event/authentication.py:58
+msgid "Authentication is enabled but token is not configured."
+msgstr ""
+
+#: core/recording/event/authentication.py:70
+msgid "Authorization header is required"
+msgstr ""
+
+#: core/recording/event/authentication.py:78
+msgid "Invalid authorization header."
+msgstr ""
+
+#: core/recording/event/authentication.py:88
+msgid "Invalid token"
+msgstr ""
+
+#: core/recording/event/notification.py:81
+msgid "Your recording is ready"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:160
+#: core/templates/mail/text/invitation.txt:3
+msgid "La Suite Numérique"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:190
+#: core/templates/mail/text/invitation.txt:5
+msgid "Invitation to join a team"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:198
+msgid "Welcome to <strong>Meet</strong>"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:216
+#: core/templates/mail/text/invitation.txt:12
+msgid "Logo"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:226
+#: core/templates/mail/text/invitation.txt:14
+msgid ""
+"We are delighted to welcome you to our community on Meet, your new companion "
+"to collaborate on documents efficiently, intuitively, and securely."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:231
+#: core/templates/mail/text/invitation.txt:15
+msgid ""
+"Our application is designed to help you organize, collaborate, and manage "
+"permissions."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:236
+#: core/templates/mail/text/invitation.txt:16
+msgid "With Meet, you will be able to:"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:237
+#: core/templates/mail/text/invitation.txt:17
+msgid "Create documents."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:238
+#: core/templates/mail/text/invitation.txt:18
+msgid "Invite members of your document or community in just a few clicks."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:249
+#: core/templates/mail/text/invitation.txt:20
+msgid "Visit Meet"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:258
+#: core/templates/mail/text/invitation.txt:22
+msgid ""
+"We are confident that Meet will help you increase efficiency and "
+"productivity while strengthening the bond among members."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:263
+#: core/templates/mail/text/invitation.txt:23
+msgid ""
+"Feel free to explore all the features of the application and share your "
+"feedback and suggestions with us. Your feedback is valuable to us and will "
+"enable us to continually improve our service."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:268
+#: core/templates/mail/text/invitation.txt:24
+msgid ""
+"Once again, welcome aboard! We are eager to accompany you on you "
+"collaboration adventure."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:275
+#: core/templates/mail/text/invitation.txt:26
+msgid "Sincerely,"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:276
+#: core/templates/mail/text/invitation.txt:28
+msgid "The La Suite Numérique Team"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:159
+#: core/templates/mail/text/screen_recording.txt:3
+msgid "Logo email"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:188
+#: core/templates/mail/text/screen_recording.txt:6
+msgid "Your recording is ready!"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:195
+#: core/templates/mail/text/screen_recording.txt:8
+#, python-format
+msgid ""
+" Your recording of \"%(room_name)s\" on %(recording_date)s at "
+"%(recording_time)s is now ready to download. "
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:201
+#: core/templates/mail/text/screen_recording.txt:10
+msgid "To keep this recording permanently:"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:203
+#: core/templates/mail/text/screen_recording.txt:12
+msgid "Click the \\"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:204
+#: core/templates/mail/text/screen_recording.txt:13
+msgid "Use the \\"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:205
+#: core/templates/mail/text/screen_recording.txt:14
+msgid "Save the file to your preferred location"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:216
+#: core/templates/mail/text/screen_recording.txt:16
+msgid "Open"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:225
+#: core/templates/mail/text/screen_recording.txt:18
+#, python-format
+msgid ""
+" If you have any questions or need assistance, please contact our support "
+"team at %(support_email)s. "
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:240
+#: core/templates/mail/text/screen_recording.txt:22
+#, python-format
+msgid " Thank you for using %(brandname)s. "
+msgstr ""
+
+#: core/templates/mail/text/invitation.txt:8
+msgid "Welcome to Meet"
+msgstr ""
+
+#: meet/settings.py:161
 msgid "English"
 msgstr ""

-#: meet/settings.py:135
+#: meet/settings.py:162
 msgid "French"
 msgstr ""
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2024-04-03 10:31+0000\n"
+"POT-Creation-Date: 2025-04-14 19:04+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,28 +17,32 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"

-#: core/admin.py:31
+#: core/admin.py:26
 msgid "Personal info"
 msgstr ""

-#: core/admin.py:33
+#: core/admin.py:39
 msgid "Permissions"
 msgstr ""

-#: core/admin.py:45
+#: core/admin.py:51
 msgid "Important dates"
 msgstr ""

-#: core/api/serializers.py:128
-msgid "Markdown Body"
+#: core/api/serializers.py:60
+msgid "You must be administrator or owner of a room to add accesses to it."
 msgstr ""

-#: core/authentication.py:71
+#: core/authentication/backends.py:77
 msgid "User info contained no recognizable user identification"
 msgstr ""

-#: core/authentication.py:91
-msgid "Claims contained no recognizable user identification"
+#: core/authentication/backends.py:102
+msgid "User account is disabled"
+msgstr ""
+
+#: core/authentication/backends.py:142
+msgid "Multiple user accounts share a common email."
 msgstr ""

 #: core/models.py:27
@@ -53,156 +57,412 @@ msgstr ""
 msgid "Owner"
 msgstr ""

-#: core/models.py:41
-msgid "id"
+#: core/models.py:45
+msgid "Initiated"
 msgstr ""

-#: core/models.py:42
-msgid "primary key for the record as UUID"
+#: core/models.py:46
+msgid "Active"
+msgstr ""
+
+#: core/models.py:47
+msgid "Stopped"
 msgstr ""

 #: core/models.py:48
-msgid "created on"
+msgid "Saved"
 msgstr ""

 #: core/models.py:49
+msgid "Aborted"
+msgstr ""
+
+#: core/models.py:50
+msgid "Failed to Start"
+msgstr ""
+
+#: core/models.py:51
+msgid "Failed to Stop"
+msgstr ""
+
+#: core/models.py:52
+msgid "Notification succeeded"
+msgstr ""
+
+#: core/models.py:79
+msgid "SCREEN_RECORDING"
+msgstr ""
+
+#: core/models.py:80
+msgid "TRANSCRIPT"
+msgstr ""
+
+#: core/models.py:86
+msgid "Public Access"
+msgstr ""
+
+#: core/models.py:87
+msgid "Trusted Access"
+msgstr ""
+
+#: core/models.py:88
+msgid "Restricted Access"
+msgstr ""
+
+#: core/models.py:100
+msgid "id"
+msgstr ""
+
+#: core/models.py:101
+msgid "primary key for the record as UUID"
+msgstr ""
+
+#: core/models.py:107
+msgid "created on"
+msgstr ""
+
+#: core/models.py:108
 msgid "date and time at which a record was created"
 msgstr ""

-#: core/models.py:54
+#: core/models.py:113
 msgid "updated on"
 msgstr ""

-#: core/models.py:55
+#: core/models.py:114
 msgid "date and time at which a record was last updated"
 msgstr ""

-#: core/models.py:75
+#: core/models.py:134
 msgid ""
 "Enter a valid sub. This value may contain only letters, numbers, and @/./+/-/"
 "_ characters."
 msgstr ""

-#: core/models.py:81
+#: core/models.py:140
 msgid "sub"
 msgstr ""

-#: core/models.py:83
+#: core/models.py:142
 msgid ""
 "Required. 255 characters or fewer. Letters, numbers, and @/./+/-/_ "
 "characters only."
 msgstr ""

-#: core/models.py:91
+#: core/models.py:150
 msgid "identity email address"
 msgstr ""

-#: core/models.py:96
+#: core/models.py:155
 msgid "admin email address"
 msgstr ""

-#: core/models.py:103
+#: core/models.py:157
+msgid "full name"
+msgstr ""
+
+#: core/models.py:159
+msgid "short name"
+msgstr ""
+
+#: core/models.py:165
 msgid "language"
 msgstr ""

-#: core/models.py:104
+#: core/models.py:166
 msgid "The language in which the user wants to see the interface."
 msgstr ""

-#: core/models.py:110
+#: core/models.py:172
 msgid "The timezone in which the user wants to see times."
 msgstr ""

-#: core/models.py:113
+#: core/models.py:175
 msgid "device"
 msgstr ""

-#: core/models.py:115
+#: core/models.py:177
 msgid "Whether the user is a device or a real user."
 msgstr ""

-#: core/models.py:118
+#: core/models.py:180
 msgid "staff status"
 msgstr ""

-#: core/models.py:120
+#: core/models.py:182
 msgid "Whether the user can log into this admin site."
 msgstr ""

-#: core/models.py:123
+#: core/models.py:185
 msgid "active"
 msgstr ""

-#: core/models.py:126
+#: core/models.py:188
 msgid ""
 "Whether this user should be treated as active. Unselect this instead of "
 "deleting accounts."
 msgstr ""

-#: core/models.py:138
+#: core/models.py:201
 msgid "user"
 msgstr ""

-#: core/models.py:139
+#: core/models.py:202
 msgid "users"
 msgstr ""

-#: core/models.py:161
-msgid "title"
+#: core/models.py:261
+msgid "Resource"
 msgstr ""

-#: core/models.py:162
-msgid "description"
+#: core/models.py:262
+msgid "Resources"
 msgstr ""

-#: core/models.py:163
-msgid "code"
+#: core/models.py:316
+msgid "Resource access"
 msgstr ""

-#: core/models.py:164
-msgid "css"
+#: core/models.py:317
+msgid "Resource accesses"
 msgstr ""

-#: core/models.py:166
-msgid "public"
+#: core/models.py:323
+msgid "Resource access with this User and Resource already exists."
 msgstr ""

-#: core/models.py:168
-msgid "Whether this template is public for anyone to use."
+#: core/models.py:379
+msgid "Visio room configuration"
 msgstr ""

-#: core/models.py:174
-msgid "Template"
+#: core/models.py:380
+msgid "Values for Visio parameters to configure the room."
 msgstr ""

-#: core/models.py:175
-msgid "Templates"
+#: core/models.py:386 core/models.py:506
+msgid "Room"
 msgstr ""

-#: core/models.py:256
-msgid "Template/user relation"
+#: core/models.py:387
+msgid "Rooms"
 msgstr ""

-#: core/models.py:257
-msgid "Template/user relations"
+#: core/models.py:517
+msgid "Worker ID"
 msgstr ""

-#: core/models.py:263
-msgid "This user is already in this template."
+#: core/models.py:519
+msgid ""
+"Enter an identifier for the worker recording.This ID is retained even when "
+"the worker stops, allowing for easy tracking."
 msgstr ""

-#: core/models.py:269
-msgid "This team is already in this template."
+#: core/models.py:527
+msgid "Recording mode"
 msgstr ""

-#: core/models.py:275
+#: core/models.py:528
+msgid "Defines the mode of recording being called."
+msgstr ""
+
+#: core/models.py:534
+msgid "Recording"
+msgstr ""
+
+#: core/models.py:535
+msgid "Recordings"
+msgstr ""
+
+#: core/models.py:592
+msgid "Recording/user relation"
+msgstr ""
+
+#: core/models.py:593
+msgid "Recording/user relations"
+msgstr ""
+
+#: core/models.py:599
+msgid "This user is already in this recording."
+msgstr ""
+
+#: core/models.py:605
+msgid "This team is already in this recording."
+msgstr ""
+
+#: core/models.py:611
 msgid "Either user or team must be set, not both."
 msgstr ""

-#: meet/settings.py:134
+#: core/recording/event/authentication.py:58
+msgid "Authentication is enabled but token is not configured."
+msgstr ""
+
+#: core/recording/event/authentication.py:70
+msgid "Authorization header is required"
+msgstr ""
+
+#: core/recording/event/authentication.py:78
+msgid "Invalid authorization header."
+msgstr ""
+
+#: core/recording/event/authentication.py:88
+msgid "Invalid token"
+msgstr ""
+
+#: core/recording/event/notification.py:81
+msgid "Your recording is ready"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:160
+#: core/templates/mail/text/invitation.txt:3
+msgid "La Suite Numérique"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:190
+#: core/templates/mail/text/invitation.txt:5
+msgid "Invitation to join a team"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:198
+msgid "Welcome to <strong>Meet</strong>"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:216
+#: core/templates/mail/text/invitation.txt:12
+msgid "Logo"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:226
+#: core/templates/mail/text/invitation.txt:14
+msgid ""
+"We are delighted to welcome you to our community on Meet, your new companion "
+"to collaborate on documents efficiently, intuitively, and securely."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:231
+#: core/templates/mail/text/invitation.txt:15
+msgid ""
+"Our application is designed to help you organize, collaborate, and manage "
+"permissions."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:236
+#: core/templates/mail/text/invitation.txt:16
+msgid "With Meet, you will be able to:"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:237
+#: core/templates/mail/text/invitation.txt:17
+msgid "Create documents."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:238
+#: core/templates/mail/text/invitation.txt:18
+msgid "Invite members of your document or community in just a few clicks."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:249
+#: core/templates/mail/text/invitation.txt:20
+msgid "Visit Meet"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:258
+#: core/templates/mail/text/invitation.txt:22
+msgid ""
+"We are confident that Meet will help you increase efficiency and "
+"productivity while strengthening the bond among members."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:263
+#: core/templates/mail/text/invitation.txt:23
+msgid ""
+"Feel free to explore all the features of the application and share your "
+"feedback and suggestions with us. Your feedback is valuable to us and will "
+"enable us to continually improve our service."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:268
+#: core/templates/mail/text/invitation.txt:24
+msgid ""
+"Once again, welcome aboard! We are eager to accompany you on you "
+"collaboration adventure."
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:275
+#: core/templates/mail/text/invitation.txt:26
+msgid "Sincerely,"
+msgstr ""
+
+#: core/templates/mail/html/invitation.html:276
+#: core/templates/mail/text/invitation.txt:28
+msgid "The La Suite Numérique Team"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:159
+#: core/templates/mail/text/screen_recording.txt:3
+msgid "Logo email"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:188
+#: core/templates/mail/text/screen_recording.txt:6
+msgid "Your recording is ready!"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:195
+#: core/templates/mail/text/screen_recording.txt:8
+#, python-format
+msgid ""
+" Your recording of \"%(room_name)s\" on %(recording_date)s at "
+"%(recording_time)s is now ready to download. "
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:201
+#: core/templates/mail/text/screen_recording.txt:10
+msgid "To keep this recording permanently:"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:203
+#: core/templates/mail/text/screen_recording.txt:12
+msgid "Click the \\"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:204
+#: core/templates/mail/text/screen_recording.txt:13
+msgid "Use the \\"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:205
+#: core/templates/mail/text/screen_recording.txt:14
+msgid "Save the file to your preferred location"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:216
+#: core/templates/mail/text/screen_recording.txt:16
+msgid "Open"
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:225
+#: core/templates/mail/text/screen_recording.txt:18
+#, python-format
+msgid ""
+" If you have any questions or need assistance, please contact our support "
+"team at %(support_email)s. "
+msgstr ""
+
+#: core/templates/mail/html/screen_recording.html:240
+#: core/templates/mail/text/screen_recording.txt:22
+#, python-format
+msgid " Thank you for using %(brandname)s. "
+msgstr ""
+
+#: core/templates/mail/text/invitation.txt:8
+msgid "Welcome to Meet"
+msgstr ""
+
+#: meet/settings.py:161
 msgid "English"
 msgstr ""

-#: meet/settings.py:135
+#: meet/settings.py:162
 msgid "French"
 msgstr ""
@@ -19,6 +19,7 @@ from django.utils.translation import gettext_lazy as _
 import sentry_sdk
 from configurations import Configuration, values
 from sentry_sdk.integrations.django import DjangoIntegration
+from sentry_sdk.integrations.logging import ignore_logger

 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
@@ -271,6 +272,11 @@ class Base(Configuration):
                environ_name="REQUEST_ENTRY_THROTTLE_RATES",
                environ_prefix=None,
            ),
+            "creation_callback": values.Value(
+                default="600/minute",
+                environ_name="CREATION_CALLBACK_THROTTLE_RATES",
+                environ_prefix=None,
+            ),
        },
    }

@@ -301,6 +307,9 @@ class Base(Configuration):
        "silence_livekit_debug_logs": values.BooleanValue(
            False, environ_name="FRONTEND_SILENCE_LIVEKIT_DEBUG", environ_prefix=None
        ),
+        "is_silent_login_enabled": values.BooleanValue(
+            True, environ_name="FRONTEND_IS_SILENT_LOGING_ENABLED", environ_prefix=None
+        ),
    }

    # Mail
@@ -312,6 +321,10 @@ class Base(Configuration):
    EMAIL_USE_TLS = values.BooleanValue(False)
    EMAIL_USE_SSL = values.BooleanValue(False)
    EMAIL_FROM = values.Value("from@example.com")
+    EMAIL_BRAND_NAME = values.Value(None)
+    EMAIL_SUPPORT_EMAIL = values.Value(None)
+    EMAIL_LOGO_IMG = values.Value(None)
+    EMAIL_DOMAIN = values.Value(None)

    AUTH_USER_MODEL = "core.User"

@@ -475,6 +488,9 @@ class Base(Configuration):
    SUMMARY_SERVICE_API_TOKEN = values.Value(
        None, environ_name="SUMMARY_SERVICE_API_TOKEN", environ_prefix=None
    )
+    SCREEN_RECORDING_BASE_URL = values.Value(
+        None, environ_name="SUMMARY_SERVICE_API_TOKEN", environ_prefix=None
+    )

    # Marketing and communication settings
    SIGNUP_NEW_USER_TO_MARKETING_EMAIL = values.BooleanValue(
@@ -497,6 +513,9 @@ class Base(Configuration):
        converter=lambda x: int(x),  # pylint: disable=unnecessary-lambda
    )
    BREVO_API_CONTACT_ATTRIBUTES = values.DictValue({"VISIO_USER": True})
+    BREVO_API_TIMEOUT = values.PositiveIntegerValue(
+        1, environ_name="BREVO_API_TIMEOUT", environ_prefix=None
+    )

    # Lobby configurations
    LOBBY_KEY_PREFIX = values.Value(
@@ -524,6 +543,13 @@ class Base(Configuration):
        environ_prefix=None,
    )

+    # Calendar integrations
+    ROOM_CREATION_CALLBACK_CACHE_TIMEOUT = values.PositiveIntegerValue(
+        600,  # 10 minutes
+        environ_name="ROOM_CREATION_CALLBACK_CACHE_TIMEOUT",
+        environ_prefix=None,
+    )
+
    # pylint: disable=invalid-name
    @property
    def ENVIRONMENT(self):
@@ -575,6 +601,9 @@ class Base(Configuration):
            scope = sentry_sdk.get_global_scope()
            scope.set_tag("application", "backend")

+            # Ignore the logs added by the DockerflowMiddleware
+            ignore_logger("request.summary")
+

 class Build(Base):
    """Settings used when the application is built.
@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"

 [project]
 name = "meet"
-version = "0.1.15"
+version = "0.1.18"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
    "Development Status :: 5 - Production/Stable",
@@ -25,7 +25,7 @@ license = { file = "LICENSE" }
 readme = "README.md"
 requires-python = ">=3.10"
 dependencies = [
-    "boto3==1.37.4",
+    "boto3==1.37.24",
    "Brotli==1.1.0",
    "brevo-python==1.1.2",
    "celery[redis]==5.4.0",
@@ -37,7 +37,7 @@ dependencies = [
    "django-redis==5.4.0",
    "django-storages[s3]==1.14.5",
    "django-timezone-field>=5.1",
-    "django==5.1.7",
+    "django==5.1.8",
    "djangorestframework==3.15.2",
    "drf_spectacular==0.28.0",
    "dockerflow==2024.4.2",
@@ -48,16 +48,15 @@ dependencies = [
    "june-analytics-python==2.3.0",
    "markdown==3.7",
    "nested-multipart-parser==1.5.0",
-    "psycopg[binary]==3.2.5",
+    "psycopg[binary]==3.2.6",
    "PyJWT==2.10.1",
    "python-frontmatter==1.1.0",
    "requests==2.32.3",
-    "sentry-sdk==2.22.0",
-    "url-normalize==1.4.3",
+    "sentry-sdk==2.24.1",
    "whitenoise==6.9.0",
    "mozilla-django-oidc==4.0.1",
    "livekit-api==0.8.2",
-    "aiohttp==3.11.13",
+    "aiohttp==3.11.14",
 ]

 [project.urls]
@@ -72,18 +71,18 @@ dev = [
    "drf-spectacular-sidecar==2025.3.1",
    "freezegun==1.5.1",
    "ipdb==0.13.13",
-    "ipython==9.0.1",
-    "pyfakefs==5.7.4",
+    "ipython==9.0.2",
+    "pyfakefs==5.8.0",
    "pylint-django==2.6.1",
-    "pylint==3.3.4",
+    "pylint==3.3.6",
    "pytest-cov==6.0.0",
    "pytest-django==4.10.0",
    "pytest==8.3.5",
    "pytest-icdiff==0.9",
    "pytest-xdist==3.6.1",
-    "responses==0.25.6",
-    "ruff==0.9.9",
-    "types-requests==2.32.0.20250301",
+    "responses==0.25.7",
+    "ruff==0.11.2",
+    "types-requests==2.32.0.20250306",
 ]

 [tool.setuptools]
@@ -1,7 +1,7 @@
 {
  "name": "meet",
  "private": true,
-  "version": "0.1.15",
+  "version": "0.1.18",
  "type": "module",
  "scripts": {
    "dev": "panda codegen && vite",
@@ -16,45 +16,45 @@
    "@livekit/components-react": "2.8.1",
    "@livekit/components-styles": "1.1.4",
    "@livekit/track-processors": "0.3.3",
-    "@pandacss/preset-panda": "0.53.0",
-    "@react-aria/toast": "3.0.0-beta.19",
+    "@pandacss/preset-panda": "0.53.3",
+    "@react-aria/toast": "3.0.1",
    "@remixicon/react": "4.6.0",
-    "@tanstack/react-query": "5.67.1",
+    "@tanstack/react-query": "5.69.0",
    "crisp-sdk-web": "1.0.25",
    "hoofd": "1.7.3",
-    "i18next": "24.2.2",
+    "i18next": "24.2.3",
    "i18next-browser-languagedetector": "8.0.4",
    "i18next-parser": "9.3.0",
    "i18next-resources-to-backend": "1.2.1",
-    "livekit-client": "2.9.5",
-    "posthog-js": "1.225.1",
+    "livekit-client": "2.9.8",
+    "posthog-js": "1.232.6",
    "react": "18.3.1",
-    "react-aria-components": "1.6.0",
+    "react-aria-components": "1.7.1",
    "react-dom": "18.3.1",
    "react-i18next": "15.1.1",
    "use-sound": "5.0.0",
-    "valtio": "2.1.3",
+    "valtio": "2.1.4",
    "wouter": "3.6.0"
  },
  "devDependencies": {
-    "@pandacss/dev": "0.53.0",
-    "@tanstack/eslint-plugin-query": "5.66.1",
-    "@tanstack/react-query-devtools": "5.67.1",
-    "@types/node": "22.13.9",
+    "@pandacss/dev": "0.53.3",
+    "@tanstack/eslint-plugin-query": "5.68.0",
+    "@tanstack/react-query-devtools": "5.69.0",
+    "@types/node": "22.13.13",
    "@types/react": "18.3.12",
    "@types/react-dom": "18.3.1",
-    "@typescript-eslint/eslint-plugin": "8.26.0",
-    "@typescript-eslint/parser": "8.26.0",
+    "@typescript-eslint/eslint-plugin": "8.28.0",
+    "@typescript-eslint/parser": "8.28.0",
    "@vitejs/plugin-react": "4.3.4",
    "eslint": "8.57.0",
-    "eslint-config-prettier": "10.0.2",
+    "eslint-config-prettier": "10.1.1",
    "eslint-plugin-jsx-a11y": "6.10.2",
    "eslint-plugin-react-hooks": "5.2.0",
    "eslint-plugin-react-refresh": "0.4.19",
    "postcss": "8.5.3",
    "prettier": "3.5.3",
    "typescript": "5.8.2",
-    "vite": "6.2.0",
+    "vite": "6.2.4",
    "vite-tsconfig-paths": "5.1.4"
  }
 }
@@ -35,40 +35,7 @@ const config: Config = {
  exclude: [],
  jsxFramework: 'react',
  outdir: 'src/styled-system',
-  globalFontface: {
-    Marianne: [
-      {
-        src: 'url(/fonts/Marianne-Regular-subset.woff2) format("woff2")',
-        fontWeight: 400,
-        fontStyle: 'normal',
-        fontDisplay: 'swap',
-      },
-      {
-        path: 'url(/fonts/Marianne-Regular_Italic-subset.woff2) format("woff2")',
-        fontWeight: 400,
-        fontStyle: 'italic',
-        fontDisplay: 'swap',
-      },
-      {
-        path: 'url(/fonts/Marianne-Medium-subset.woff2) format("woff2")',
-        fontWeight: 500,
-        fontStyle: 'normal',
-        fontDisplay: 'swap',
-      },
-      {
-        path: 'url(/fonts/Marianne-Bold-subset.woff2) format("woff2")',
-        fontWeight: 700,
-        fontStyle: 'normal',
-        fontDisplay: 'swap',
-      },
-      {
-        path: 'url(/fonts/Marianne-ExtraBold-subset.woff2) format("woff2")',
-        fontWeight: 800,
-        fontStyle: 'normal',
-        fontDisplay: 'swap',
-      },
-    ],
-  },
+  globalFontface: {},
  theme: {
    ...pandaPreset.theme,
    // media queries are defined in em so that zooming with text-only mode triggers breakpoints
@@ -5,7 +5,7 @@ import { ReactQueryDevtools } from '@tanstack/react-query-devtools'
 import { QueryClientProvider } from '@tanstack/react-query'
 import { useTranslation } from 'react-i18next'
 import { useLang } from 'hoofd'
-import { Switch, Route, useLocation } from 'wouter'
+import { Switch, Route } from 'wouter'
 import { I18nProvider } from 'react-aria-components'
 import { Layout } from './layout/Layout'
 import { NotFoundScreen } from './components/NotFoundScreen'
@@ -13,35 +13,11 @@ import { routes } from './routes'
 import './i18n/init'
 import { queryClient } from '@/api/queryClient'
 import { AppInitialization } from '@/components/AppInitialization'
-import { SdkCreateButton } from './features/sdk/routes/CreateButton'
-
-const SDK_BASE_ROUTE = '/sdk'

 function App() {
  const { i18n } = useTranslation()
  useLang(i18n.language)

-  const [location] = useLocation()
-  const isSDKRoute = location.startsWith(SDK_BASE_ROUTE)
-
-  if (isSDKRoute) {
-    return (
-      <QueryClientProvider client={queryClient}>
-        <Suspense fallback={null}>
-          <I18nProvider locale={i18n.language}>
-            <Switch>
-              <Route path={SDK_BASE_ROUTE} nest>
-                <Route path="/create-button">
-                  <SdkCreateButton />
-                </Route>
-              </Route>
-            </Switch>
-          </I18nProvider>
-        </Suspense>
-      </QueryClientProvider>
-    )
-  }
-
  return (
    <QueryClientProvider client={queryClient}>
      <AppInitialization />
@@ -55,7 +31,10 @@ function App() {
              <Route component={NotFoundScreen} />
            </Switch>
          </Layout>
-          <ReactQueryDevtools initialIsOpen={false} buttonPosition="top-left" />
+          <ReactQueryDevtools
+            initialIsOpen={false}
+            buttonPosition="bottom-left"
+          />
        </I18nProvider>
      </Suspense>
    </QueryClientProvider>
@@ -4,4 +4,5 @@ export const keys = {
  config: 'config',
  requestEntry: 'requestEntry',
  waitingParticipants: 'waitingParticipants',
+  roomCreationCallback: 'roomCreationCallback',
 }
@@ -1,7 +1,7 @@
 import { fetchApi } from './fetchApi'
 import { keys } from './queryKeys'
 import { useQuery } from '@tanstack/react-query'
-import { RecordingMode } from '@/features/rooms/api/startRecording'
+import { RecordingMode } from '@/features/recording'

 export interface ApiConfig {
  analytics?: {
@@ -12,6 +12,7 @@ export interface ApiConfig {
    id: string
  }
  silence_livekit_debug_logs?: boolean
+  is_silent_login_enabled?: boolean
  recording?: {
    is_enabled?: boolean
    available_modes?: RecordingMode[]
@@ -2,9 +2,13 @@ import { silenceLiveKitLogs } from '@/utils/livekit'
 import { useConfig } from '@/api/useConfig'
 import { useAnalytics } from '@/features/analytics/hooks/useAnalytics'
 import { useSupport } from '@/features/support/hooks/useSupport'
+import { useLocation } from 'wouter'
+
+const SDK_BASE_ROUTE = '/sdk'

 export const AppInitialization = () => {
  const { data } = useConfig()
+  const [location] = useLocation()

  const {
    analytics = {},
@@ -12,8 +16,11 @@ export const AppInitialization = () => {
    silence_livekit_debug_logs = false,
  } = data || {}

-  useAnalytics(analytics)
-  useSupport(support)
+  const isSDKContext = location.includes(SDK_BASE_ROUTE)
+
+  useAnalytics({ ...analytics, isDisabled: isSDKContext })
+  useSupport({ ...support, isDisabled: isSDKContext })
+
  silenceLiveKitLogs(silence_livekit_debug_logs)

  return null
@@ -2,7 +2,7 @@ import { css } from '@/styled-system/css'
 import { RiErrorWarningLine, RiExternalLinkLine } from '@remixicon/react'
 import { useTranslation } from 'react-i18next'
 import { Text, A } from '@/primitives'
-import { GRIST_FORM } from '@/utils/constants'
+import { GRIST_FEEDBACKS_FORM } from '@/utils/constants'

 export const FeedbackBanner = () => {
  const { t } = useTranslation()
@@ -35,7 +35,7 @@ export const FeedbackBanner = () => {
            gap: 0.25,
          })}
        >
-          <A href={GRIST_FORM} target="_blank" size="sm">
+          <A href={GRIST_FEEDBACKS_FORM} target="_blank" size="sm">
            {t('feedback.cta')}
          </A>
          <RiExternalLinkLine size={16} aria-hidden="true" />
@@ -0,0 +1,5 @@
+export enum FeatureFlags {
+  Transcript = 'transcription-summary',
+  ScreenRecording = 'screen-recording',
+  faceLandmarks = 'face-landmarks',
+}
@@ -17,18 +17,19 @@ export const terminateAnalyticsSession = () => {
 export type useAnalyticsProps = {
  id?: string
  host?: string
+  isDisabled?: boolean
 }

-export const useAnalytics = ({ id, host }: useAnalyticsProps) => {
+export const useAnalytics = ({ id, host, isDisabled }: useAnalyticsProps) => {
  const [location] = useLocation()
  useEffect(() => {
-    if (!id || !host) return
+    if (!id || !host || isDisabled) return
    if (posthog.__loaded) return
    posthog.init(id, {
      api_host: host,
      person_profiles: 'always',
    })
-  }, [id, host])
+  }, [id, host, isDisabled])

  // From PostHog tutorial on PageView tracking in a Single Page Application (SPA) context.
  useEffect(() => {
@@ -2,7 +2,7 @@ import { useQuery } from '@tanstack/react-query'
 import { keys } from '@/api/queryKeys'
 import { fetchUser } from './fetchUser'
 import { type ApiUser } from './ApiUser'
-import { useEffect } from 'react'
+import { useEffect, useMemo } from 'react'
 import {
  startAnalyticsSession,
  terminateAnalyticsSession,
@@ -12,6 +12,7 @@ import {
  terminateSupportSession,
 } from '@/features/support/hooks/useSupport'
 import { logoutUrl } from '../utils/logoutUrl'
+import { useConfig } from '@/api/useConfig'

 /**
 * returns info about currently logged-in user
@@ -23,11 +24,24 @@ export const useUser = (
    fetchUserOptions?: Parameters<typeof fetchUser>[0]
  } = {}
 ) => {
+  const { data, isLoading } = useConfig()
+
+  const options = useMemo(() => {
+    if (!data || data?.is_silent_login_enabled !== true) {
+      return {
+        ...opts,
+        attemptSilent: false,
+      }
+    }
+    return opts.fetchUserOptions
+  }, [data, opts])
+
  const query = useQuery({
    // eslint-disable-next-line @tanstack/query/exhaustive-deps
    queryKey: [keys.user],
-    queryFn: () => fetchUser(opts.fetchUserOptions),
+    queryFn: () => fetchUser(options),
    staleTime: Infinity,
+    enabled: !isLoading,
  })

  useEffect(() => {
@@ -48,7 +62,7 @@ export const useUser = (
  const isLoggedOut = isLoggedIn === false

  return {
-    ...query,
+    refetch: query.refetch,
    user: isLoggedOut ? undefined : (query.data as ApiUser | undefined),
    isLoggedIn,
    logout,
@@ -8,19 +8,16 @@ import { Button, LinkButton } from '@/primitives'
 import { RiArrowLeftSLine, RiArrowRightSLine } from '@remixicon/react'
 import { useState } from 'react'
 import { useTranslation } from 'react-i18next'
-
-// todo - extract in a proper env variable
-const BETA_USERS_FORM_URL =
-  'https://grist.numerique.gouv.fr/o/docs/forms/3fFfvJoTBEQ6ZiMi8zsQwX/17'
+import { BETA_USERS_FORM_URL } from '@/utils/constants'

 const Heading = styled('h2', {
  base: {
    width: 'fit-content',
    marginBottom: 0,
    fontSize: '1.3rem',
-    fontWeight: '600',
+    fontWeight: '700',
    marginTop: '0.75rem',
-    lineHeight: '2rem',
+    lineHeight: '1.7rem',
    maxWidth: '23rem',
    textAlign: 'center',
    textWrap: 'balance',
@@ -207,6 +204,7 @@ export const IntroSlider = () => {
                {slide.isAvailableInBeta && (
                  <LinkButton
                    href={BETA_USERS_FORM_URL}
+                    target="_blank"
                    tooltip={t('beta.tooltip')}
                    variant={'primary'}
                    size={'sm'}
@@ -13,12 +13,11 @@ import { RiAddLine, RiLink } from '@remixicon/react'
 import { LaterMeetingDialog } from '@/features/home/components/LaterMeetingDialog'
 import { IntroSlider } from '@/features/home/components/IntroSlider'
 import { MoreLink } from '@/features/home/components/MoreLink'
-import { ReactNode, useEffect, useState } from 'react'
+import { ReactNode, useState } from 'react'

 import { css } from '@/styled-system/css'
 import { menuRecipe } from '@/primitives/menuRecipe.ts'
 import { usePersistentUserChoices } from '@/features/rooms/livekit/hooks/usePersistentUserChoices'
-import { SdkReverseClient } from '@/features/sdk/SdkReverseClient'

 const Columns = ({ children }: { children?: ReactNode }) => {
  return (
@@ -120,7 +119,7 @@ const Separator = styled('div', {

 const Heading = styled('h1', {
  base: {
-    fontWeight: '600',
+    fontWeight: '700',
    fontStyle: 'normal',
    fontStretch: 'normal',
    fontOpticalSizing: 'auto',
@@ -156,18 +155,6 @@ export const Home = () => {
  const { mutateAsync: createRoom } = useCreateRoom()
  const [laterRoomId, setLaterRoomId] = useState<null | string>(null)

-  const { user } = useUser()
-
-  /**
-   * Used for SDK popup to close automatically.
-   */
-  useEffect(() => {
-    if (!user) {
-      return
-    }
-    SdkReverseClient.broadcastAuthentication()
-  }, [user])
-
  return (
    <UserAware>
      <Screen>
@@ -88,6 +88,18 @@ export const MainNotificationToast = () => {
          if (notification.data?.emoji)
            handleEmoji(notification.data.emoji, participant)
          break
+        case NotificationType.TranscriptionStarted:
+        case NotificationType.TranscriptionStopped:
+        case NotificationType.ScreenRecordingStarted:
+        case NotificationType.ScreenRecordingStopped:
+          toastQueue.add(
+            {
+              participant,
+              type: notification.type,
+            },
+            { timeout: NotificationDuration.ALERT }
+          )
+          break
        default:
          return
      }
@@ -6,4 +6,8 @@ export enum NotificationType {
  LowerHand = 'lowerHand',
  ReactionReceived = 'reactionReceived',
  ParticipantWaiting = 'participantWaiting',
+  TranscriptionStarted = 'transcriptionStarted',
+  TranscriptionStopped = 'transcriptionStopped',
+  ScreenRecordingStarted = 'screenRecordingStarted',
+  ScreenRecordingStopped = 'screenRecordingStopped',
 }
@@ -48,7 +48,7 @@ export function Toast({ state, ...props }: ToastProps) {
  return (
    <StyledToastContainer {...toastProps} ref={ref}>
      <StyledToast>
-        <div {...contentProps}>{props.toast.content?.message} machine a</div>
+        <div {...contentProps}>{props.toast.content?.message}</div>
        <Button square size="sm" invisible {...closeButtonProps}>
          <RiCloseLine color="white" />
        </Button>
@@ -0,0 +1,48 @@
+import { useToast } from '@react-aria/toast'
+import { useMemo, useRef } from 'react'
+
+import { StyledToastContainer, ToastProps } from './Toast'
+import { HStack } from '@/styled-system/jsx'
+import { useTranslation } from 'react-i18next'
+import { NotificationType } from '../NotificationType'
+
+export function ToastAnyRecording({ state, ...props }: ToastProps) {
+  const { t } = useTranslation('notifications')
+  const ref = useRef(null)
+  const { toastProps, contentProps } = useToast(props, state, ref)
+  const participant = props.toast.content.participant
+  const type = props.toast.content.type
+
+  const key = useMemo(() => {
+    switch (type) {
+      case NotificationType.TranscriptionStarted:
+        return 'transcript.started'
+      case NotificationType.TranscriptionStopped:
+        return 'transcript.stopped'
+      case NotificationType.ScreenRecordingStarted:
+        return 'screenRecording.started'
+      case NotificationType.ScreenRecordingStopped:
+        return 'screenRecording.stopped'
+      default:
+        return
+    }
+  }, [type])
+
+  if (!key) return
+
+  return (
+    <StyledToastContainer {...toastProps} ref={ref}>
+      <HStack
+        justify="center"
+        alignItems="center"
+        {...contentProps}
+        padding={14}
+        gap={0}
+      >
+        {t(key, {
+          name: participant.name,
+        })}
+      </HStack>
+    </StyledToastContainer>
+  )
+}
@@ -9,6 +9,7 @@ import { ToastRaised } from './ToastRaised'
 import { ToastMuted } from './ToastMuted'
 import { ToastMessageReceived } from './ToastMessageReceived'
 import { ToastLowerHand } from './ToastLowerHand'
+import { ToastAnyRecording } from './ToastAnyRecording'

 interface ToastRegionProps extends AriaToastRegionProps {
  state: ToastState<ToastData>
@@ -36,6 +37,12 @@ const renderToast = (
    case NotificationType.LowerHand:
      return <ToastLowerHand key={toast.key} toast={toast} state={state} />

+    case NotificationType.TranscriptionStarted:
+    case NotificationType.TranscriptionStopped:
+    case NotificationType.ScreenRecordingStarted:
+    case NotificationType.ScreenRecordingStopped:
+      return <ToastAnyRecording key={toast.key} toast={toast} state={state} />
+
    default:
      return <Toast key={toast.key} toast={toast} state={state} />
  }
@@ -0,0 +1,37 @@
+import { useRoomContext } from '@livekit/components-react'
+import { NotificationType } from '../NotificationType'
+import { NotificationPayload } from '../NotificationPayload'
+
+export const useNotifyParticipants = () => {
+  const room = useRoomContext()
+
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const notifyParticipants = async <T extends Record<string, any>>(options: {
+    type: NotificationType
+    destinationIdentities?: string[]
+    additionalData?: T
+    reliable?: boolean
+  }): Promise<void> => {
+    const {
+      type,
+      destinationIdentities,
+      additionalData = {} as T,
+      reliable = true,
+    } = options
+
+    const payload: NotificationPayload & T = {
+      type,
+      ...additionalData,
+    }
+
+    const encoder = new TextEncoder()
+    const data = encoder.encode(JSON.stringify(payload))
+
+    await room.localParticipant.publishData(data, {
+      reliable,
+      destinationIdentities,
+    })
+  }
+
+  return { notifyParticipants }
+}
@@ -0,0 +1,2 @@
+export { useNotifyParticipants } from './hooks/useNotifyParticipants'
+export { NotificationType } from './NotificationType'
@@ -1,12 +1,8 @@
 import { useMutation, UseMutationOptions } from '@tanstack/react-query'
 import { fetchApi } from '@/api/fetchApi'
 import { ApiError } from '@/api/ApiError'
-import { ApiRoom } from './ApiRoom'
-
-export enum RecordingMode {
-  Transcript = 'transcript',
-  ScreenRecording = 'screen_recording',
-}
+import { ApiRoom } from '@/features/rooms/api/ApiRoom'
+import { RecordingMode } from '../types'

 export interface StartRecordingParams {
  id: string
@@ -1,7 +1,7 @@
 import { useMutation, UseMutationOptions } from '@tanstack/react-query'
 import { fetchApi } from '@/api/fetchApi'
 import { ApiError } from '@/api/ApiError'
-import { ApiRoom } from './ApiRoom'
+import { ApiRoom } from '@/features/rooms/api/ApiRoom'

 export interface StopRecordingParams {
  id: string
@@ -0,0 +1,129 @@
+import { css } from '@/styled-system/css'
+import { useTranslation } from 'react-i18next'
+import { useSnapshot } from 'valtio/index'
+import { useRoomContext } from '@livekit/components-react'
+import { Spinner } from '@/primitives/Spinner'
+import { useEffect, useMemo } from 'react'
+import { Text } from '@/primitives'
+import { RemoteParticipant, RoomEvent } from 'livekit-client'
+import { decodeNotificationDataReceived } from '@/features/notifications/utils'
+import { NotificationType } from '@/features/notifications/NotificationType'
+import { RecordingStatus, recordingStore } from '@/stores/recording'
+
+export const RecordingStateToast = () => {
+  const { t } = useTranslation('rooms', {
+    keyPrefix: 'recordingBadge',
+  })
+  const room = useRoomContext()
+
+  const recordingSnap = useSnapshot(recordingStore)
+
+  useEffect(() => {
+    if (room.isRecording && recordingSnap.status == RecordingStatus.STOPPED) {
+      recordingStore.status = RecordingStatus.ANY_STARTED
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [room.isRecording])
+
+  useEffect(() => {
+    const handleDataReceived = (
+      payload: Uint8Array,
+      participant?: RemoteParticipant
+    ) => {
+      const notification = decodeNotificationDataReceived(payload)
+
+      if (!participant || !notification) return
+
+      switch (notification.type) {
+        case NotificationType.TranscriptionStarted:
+          recordingStore.status = RecordingStatus.TRANSCRIPT_STARTING
+          break
+        case NotificationType.TranscriptionStopped:
+          recordingStore.status = RecordingStatus.TRANSCRIPT_STOPPING
+          break
+        case NotificationType.ScreenRecordingStarted:
+          recordingStore.status = RecordingStatus.SCREEN_RECORDING_STARTING
+          break
+        case NotificationType.ScreenRecordingStopped:
+          recordingStore.status = RecordingStatus.SCREEN_RECORDING_STOPPING
+          break
+        default:
+          return
+      }
+    }
+
+    const handleRecordingStatusChanged = (status: boolean) => {
+      if (!status) {
+        recordingStore.status = RecordingStatus.STOPPED
+      } else if (recordingSnap.status == RecordingStatus.TRANSCRIPT_STARTING) {
+        recordingStore.status = RecordingStatus.TRANSCRIPT_STARTED
+      } else if (
+        recordingSnap.status == RecordingStatus.SCREEN_RECORDING_STARTING
+      ) {
+        recordingStore.status = RecordingStatus.SCREEN_RECORDING_STARTED
+      } else {
+        recordingStore.status = RecordingStatus.ANY_STARTED
+      }
+    }
+
+    room.on(RoomEvent.DataReceived, handleDataReceived)
+    room.on(RoomEvent.RecordingStatusChanged, handleRecordingStatusChanged)
+
+    return () => {
+      room.off(RoomEvent.DataReceived, handleDataReceived)
+      room.off(RoomEvent.RecordingStatusChanged, handleRecordingStatusChanged)
+    }
+  }, [room, recordingSnap])
+
+  const key = useMemo(() => {
+    switch (recordingSnap.status) {
+      case RecordingStatus.TRANSCRIPT_STARTED:
+        return 'transcript.started'
+      case RecordingStatus.TRANSCRIPT_STOPPING:
+        return 'transcript.stopping'
+      case RecordingStatus.TRANSCRIPT_STARTING:
+        return 'transcript.starting'
+      case RecordingStatus.SCREEN_RECORDING_STARTED:
+        return 'screenRecording.started'
+      case RecordingStatus.SCREEN_RECORDING_STOPPING:
+        return 'screenRecording.stopping'
+      case RecordingStatus.SCREEN_RECORDING_STARTING:
+        return 'screenRecording.starting'
+      case RecordingStatus.ANY_STARTED:
+        return 'any.started'
+      default:
+        return
+    }
+  }, [recordingSnap])
+
+  if (!key) return
+
+  return (
+    <div
+      className={css({
+        display: 'flex',
+        position: 'fixed',
+        top: '10px',
+        left: '10px',
+        paddingY: '0.25rem',
+        paddingX: '0.75rem 0.75rem',
+        backgroundColor: 'primaryDark.100',
+        borderColor: 'white',
+        border: '1px solid',
+        color: 'white',
+        borderRadius: '4px',
+        gap: '0.5rem',
+      })}
+    >
+      <Spinner size={20} variant="dark" />
+      <Text
+        variant={'sm'}
+        className={css({
+          fontWeight: '500 !important',
+        })}
+      >
+        {t(key)}
+      </Text>
+    </div>
+  )
+}
@@ -0,0 +1,200 @@
+import { A, Button, Div, H, Text } from '@/primitives'
+
+import fourthSlide from '@/assets/intro-slider/4_record.png'
+import { css } from '@/styled-system/css'
+import { useRoomId } from '@/features/rooms/livekit/hooks/useRoomId'
+import { useRoomContext } from '@livekit/components-react'
+import {
+  RecordingMode,
+  useStartRecording,
+  useStopRecording,
+} from '@/features/recording'
+import { useEffect, useMemo, useState } from 'react'
+import { RoomEvent } from 'livekit-client'
+import { useTranslation } from 'react-i18next'
+import { RecordingStatus, recordingStore } from '@/stores/recording'
+import { CRISP_HELP_ARTICLE_RECORDING } from '@/utils/constants'
+import { useIsRecordingTransitioning } from '@/features/recording'
+
+import {
+  useNotifyParticipants,
+  NotificationType,
+} from '@/features/notifications'
+import posthog from 'posthog-js'
+import { useSnapshot } from 'valtio/index'
+
+export const ScreenRecordingSidePanel = () => {
+  const [isLoading, setIsLoading] = useState(false)
+  const recordingSnap = useSnapshot(recordingStore)
+  const { t } = useTranslation('rooms', { keyPrefix: 'screenRecording' })
+
+  const { notifyParticipants } = useNotifyParticipants()
+
+  const roomId = useRoomId()
+
+  const { mutateAsync: startRecordingRoom } = useStartRecording()
+  const { mutateAsync: stopRecordingRoom } = useStopRecording()
+
+  const statuses = useMemo(() => {
+    return {
+      isAnotherModeStarted:
+        recordingSnap.status == RecordingStatus.TRANSCRIPT_STARTED,
+      isStarted:
+        recordingSnap.status == RecordingStatus.SCREEN_RECORDING_STARTED,
+      isStopping:
+        recordingSnap.status == RecordingStatus.SCREEN_RECORDING_STOPPING,
+    }
+  }, [recordingSnap])
+
+  const room = useRoomContext()
+  const isRecordingTransitioning = useIsRecordingTransitioning()
+
+  useEffect(() => {
+    const handleRecordingStatusChanged = () => {
+      setIsLoading(false)
+    }
+    room.on(RoomEvent.RecordingStatusChanged, handleRecordingStatusChanged)
+    return () => {
+      room.off(RoomEvent.RecordingStatusChanged, handleRecordingStatusChanged)
+    }
+  }, [room])
+
+  const handleScreenRecording = async () => {
+    if (!roomId) {
+      console.warn('No room ID found')
+      return
+    }
+    try {
+      setIsLoading(true)
+      if (room.isRecording) {
+        await stopRecordingRoom({ id: roomId })
+        recordingStore.status = RecordingStatus.SCREEN_RECORDING_STOPPING
+        await notifyParticipants({
+          type: NotificationType.ScreenRecordingStopped,
+        })
+      } else {
+        await startRecordingRoom({
+          id: roomId,
+          mode: RecordingMode.ScreenRecording,
+        })
+        recordingStore.status = RecordingStatus.SCREEN_RECORDING_STARTING
+        await notifyParticipants({
+          type: NotificationType.ScreenRecordingStarted,
+        })
+        posthog.capture('screen-recording-started', {})
+      }
+    } catch (error) {
+      console.error('Failed to handle transcript:', error)
+      setIsLoading(false)
+    }
+  }
+
+  const isDisabled = useMemo(
+    () =>
+      isLoading || isRecordingTransitioning || statuses.isAnotherModeStarted,
+    [isLoading, isRecordingTransitioning, statuses]
+  )
+
+  return (
+    <Div
+      display="flex"
+      overflowY="scroll"
+      padding="0 1.5rem"
+      flexGrow={1}
+      flexDirection="column"
+      alignItems="center"
+    >
+      <img
+        src={fourthSlide}
+        alt={''}
+        className={css({
+          minHeight: '309px',
+          marginBottom: '1rem',
+        })}
+      />
+
+      {statuses.isStarted ? (
+        <>
+          <H lvl={3} margin={false}>
+            {t('stop.heading')}
+          </H>
+          <Text
+            variant="note"
+            wrap={'pretty'}
+            centered
+            className={css({
+              textStyle: 'sm',
+              marginBottom: '2.5rem',
+              marginTop: '0.25rem',
+            })}
+          >
+            {t('stop.body')}
+          </Text>
+          <Button
+            isDisabled={isDisabled}
+            onPress={() => handleScreenRecording()}
+            data-attr="stop-screen-recording"
+            size="sm"
+            variant="tertiary"
+          >
+            {t('stop.button')}
+          </Button>
+        </>
+      ) : (
+        <>
+          {statuses.isStopping ? (
+            <>
+              <H lvl={3} margin={false}>
+                {t('stopping.heading')}
+              </H>
+              <Text
+                variant="note"
+                wrap={'pretty'}
+                centered
+                className={css({
+                  textStyle: 'sm',
+                  maxWidth: '90%',
+                  marginBottom: '2.5rem',
+                  marginTop: '0.25rem',
+                })}
+              >
+                {t('stopping.body')}
+              </Text>
+            </>
+          ) : (
+            <>
+              <H lvl={3} margin={false}>
+                {t('start.heading')}
+              </H>
+              <Text
+                variant="note"
+                wrap={'pretty'}
+                centered
+                className={css({
+                  textStyle: 'sm',
+                  maxWidth: '90%',
+                  marginBottom: '2.5rem',
+                  marginTop: '0.25rem',
+                })}
+              >
+                {t('start.body')} <br />{' '}
+                <A href={CRISP_HELP_ARTICLE_RECORDING} target="_blank">
+                  {t('start.linkMore')}
+                </A>
+              </Text>
+              <Button
+                isDisabled={isDisabled}
+                onPress={() => handleScreenRecording()}
+                data-attr="start-screen-recording"
+                size="sm"
+                variant="tertiary"
+              >
+                {t('start.button')}
+              </Button>
+            </>
+          )}
+        </>
+      )}
+    </Div>
+  )
+}
@@ -0,0 +1,235 @@
+import { A, Button, Div, H, LinkButton, Text } from '@/primitives'
+
+import thirdSlide from '@/assets/intro-slider/3_resume.png'
+import { css } from '@/styled-system/css'
+import { useRoomId } from '@/features/rooms/livekit/hooks/useRoomId'
+import { useRoomContext } from '@livekit/components-react'
+import {
+  RecordingMode,
+  useHasRecordingAccess,
+  useIsRecordingTransitioning,
+  useStartRecording,
+  useStopRecording,
+} from '../index'
+import { useEffect, useMemo, useState } from 'react'
+import { RoomEvent } from 'livekit-client'
+import { useTranslation } from 'react-i18next'
+import { RecordingStatus, recordingStore } from '@/stores/recording'
+import {
+  BETA_USERS_FORM_URL,
+  CRISP_HELP_ARTICLE_TRANSCRIPT,
+} from '@/utils/constants'
+import { FeatureFlags } from '@/features/analytics/enums'
+import {
+  NotificationType,
+  useNotifyParticipants,
+} from '@/features/notifications'
+import posthog from 'posthog-js'
+import { useSnapshot } from 'valtio/index'
+
+export const TranscriptSidePanel = () => {
+  const [isLoading, setIsLoading] = useState(false)
+  const { t } = useTranslation('rooms', { keyPrefix: 'transcript' })
+
+  const recordingSnap = useSnapshot(recordingStore)
+
+  const { notifyParticipants } = useNotifyParticipants()
+
+  const hasTranscriptAccess = useHasRecordingAccess(
+    RecordingMode.Transcript,
+    FeatureFlags.Transcript
+  )
+  const roomId = useRoomId()
+
+  const { mutateAsync: startRecordingRoom } = useStartRecording()
+  const { mutateAsync: stopRecordingRoom } = useStopRecording()
+
+  const statuses = useMemo(() => {
+    return {
+      isAnotherModeStarted:
+        recordingSnap.status == RecordingStatus.SCREEN_RECORDING_STARTED,
+      isStarted: recordingSnap.status == RecordingStatus.TRANSCRIPT_STARTED,
+      isStopping: recordingSnap.status == RecordingStatus.TRANSCRIPT_STOPPING,
+    }
+  }, [recordingSnap])
+
+  const isRecordingTransitioning = useIsRecordingTransitioning()
+
+  const room = useRoomContext()
+
+  useEffect(() => {
+    const handleRecordingStatusChanged = () => {
+      setIsLoading(false)
+    }
+    room.on(RoomEvent.RecordingStatusChanged, handleRecordingStatusChanged)
+    return () => {
+      room.off(RoomEvent.RecordingStatusChanged, handleRecordingStatusChanged)
+    }
+  }, [room])
+
+  const handleTranscript = async () => {
+    if (!roomId) {
+      console.warn('No room ID found')
+      return
+    }
+    try {
+      setIsLoading(true)
+      if (room.isRecording) {
+        await stopRecordingRoom({ id: roomId })
+        recordingStore.status = RecordingStatus.TRANSCRIPT_STOPPING
+        await notifyParticipants({
+          type: NotificationType.TranscriptionStopped,
+        })
+      } else {
+        await startRecordingRoom({ id: roomId, mode: RecordingMode.Transcript })
+        recordingStore.status = RecordingStatus.TRANSCRIPT_STARTING
+        await notifyParticipants({
+          type: NotificationType.TranscriptionStarted,
+        })
+        posthog.capture('transcript-started', {})
+      }
+    } catch (error) {
+      console.error('Failed to handle transcript:', error)
+      setIsLoading(false)
+    }
+  }
+
+  const isDisabled = useMemo(
+    () =>
+      isLoading || isRecordingTransitioning || statuses.isAnotherModeStarted,
+    [isLoading, isRecordingTransitioning, statuses]
+  )
+
+  return (
+    <Div
+      display="flex"
+      overflowY="scroll"
+      padding="0 1.5rem"
+      flexGrow={1}
+      flexDirection="column"
+      alignItems="center"
+    >
+      <img
+        src={thirdSlide}
+        alt={''}
+        className={css({
+          minHeight: '309px',
+          marginBottom: '1rem',
+        })}
+      />
+      {!hasTranscriptAccess ? (
+        <>
+          <Text>{t('beta.heading')}</Text>
+          <Text
+            variant="note"
+            wrap={'pretty'}
+            centered
+            className={css({
+              textStyle: 'sm',
+              marginBottom: '2.5rem',
+              marginTop: '0.25rem',
+            })}
+          >
+            {t('beta.body')}{' '}
+            <A href={CRISP_HELP_ARTICLE_TRANSCRIPT} target="_blank">
+              {t('start.linkMore')}
+            </A>
+          </Text>
+          <LinkButton
+            size="sm"
+            variant="tertiary"
+            href={BETA_USERS_FORM_URL}
+            target="_blank"
+          >
+            {t('beta.button')}
+          </LinkButton>
+        </>
+      ) : (
+        <>
+          {statuses.isStarted ? (
+            <>
+              <H lvl={3} margin={false}>
+                {t('stop.heading')}
+              </H>
+              <Text
+                variant="note"
+                wrap={'pretty'}
+                centered
+                className={css({
+                  textStyle: 'sm',
+                  marginBottom: '2.5rem',
+                  marginTop: '0.25rem',
+                })}
+              >
+                {t('stop.body')}
+              </Text>
+              <Button
+                isDisabled={isDisabled}
+                onPress={() => handleTranscript()}
+                data-attr="stop-transcript"
+                size="sm"
+                variant="tertiary"
+              >
+                {t('stop.button')}
+              </Button>
+            </>
+          ) : (
+            <>
+              {statuses.isStopping ? (
+                <>
+                  <H lvl={3} margin={false}>
+                    {t('stopping.heading')}
+                  </H>
+                  <Text
+                    variant="note"
+                    wrap={'pretty'}
+                    centered
+                    className={css({
+                      textStyle: 'sm',
+                      maxWidth: '90%',
+                      marginBottom: '2.5rem',
+                      marginTop: '0.25rem',
+                    })}
+                  >
+                    {t('stopping.body')}
+                  </Text>
+                </>
+              ) : (
+                <>
+                  <H lvl={3} margin={false}>
+                    {t('start.heading')}
+                  </H>
+                  <Text
+                    variant="note"
+                    wrap={'pretty'}
+                    centered
+                    className={css({
+                      textStyle: 'sm',
+                      maxWidth: '90%',
+                      marginBottom: '2.5rem',
+                      marginTop: '0.25rem',
+                    })}
+                  >
+                    {t('start.body')} <br />{' '}
+                    <A href={CRISP_HELP_ARTICLE_TRANSCRIPT} target="_blank">
+                      {t('start.linkMore')}
+                    </A>
+                  </Text>
+                  <Button
+                    isDisabled={isDisabled}
+                    onPress={() => handleTranscript()}
+                    data-attr="start-transcript"
+                    size="sm"
+                    variant="tertiary"
+                  >
+                    {t('start.button')}
+                  </Button>
+                </>
+              )}
+            </>
+          )}
+        </>
+      )}
+    </Div>
+  )
+}
@@ -0,0 +1,22 @@
+import { useFeatureFlagEnabled } from 'posthog-js/react'
+import { useIsAnalyticsEnabled } from '@/features/analytics/hooks/useIsAnalyticsEnabled'
+import { RecordingMode } from '../types'
+import { useIsRecordingModeEnabled } from './useIsRecordingModeEnabled'
+import { useIsAdminOrOwner } from '@/features/rooms/livekit/hooks/useIsAdminOrOwner'
+import { FeatureFlags } from '@/features/analytics/enums'
+
+export const useHasRecordingAccess = (
+  mode: RecordingMode,
+  featureFlag: FeatureFlags
+) => {
+  const featureEnabled = useFeatureFlagEnabled(featureFlag)
+  const isAnalyticsEnabled = useIsAnalyticsEnabled()
+  const isRecordingModeEnabled = useIsRecordingModeEnabled(mode)
+  const isAdminOrOwner = useIsAdminOrOwner()
+
+  return (
+    (featureEnabled || !isAnalyticsEnabled) &&
+    isAdminOrOwner &&
+    isRecordingModeEnabled
+  )
+}
@@ -0,0 +1,11 @@
+import { RecordingMode } from '../types'
+import { useConfig } from '@/api/useConfig'
+
+export const useIsRecordingModeEnabled = (mode: RecordingMode) => {
+  const { data } = useConfig()
+
+  return (
+    data?.recording?.is_enabled &&
+    data?.recording?.available_modes?.includes(mode)
+  )
+}
@@ -0,0 +1,15 @@
+import { useSnapshot } from 'valtio'
+import { RecordingStatus, recordingStore } from '@/stores/recording'
+
+export const useIsRecordingTransitioning = () => {
+  const recordingSnap = useSnapshot(recordingStore)
+
+  const transitionalStates = [
+    RecordingStatus.TRANSCRIPT_STARTING,
+    RecordingStatus.TRANSCRIPT_STOPPING,
+    RecordingStatus.SCREEN_RECORDING_STARTING,
+    RecordingStatus.SCREEN_RECORDING_STOPPING,
+  ]
+
+  return transitionalStates.includes(recordingSnap.status)
+}
@@ -0,0 +1,14 @@
+// hooks
+export { useIsRecordingModeEnabled } from './hooks/useIsRecordingModeEnabled'
+export { useIsRecordingTransitioning } from './hooks/useIsRecordingTransitioning'
+export { useHasRecordingAccess } from './hooks/useHasRecordingAccess'
+
+// api
+export { useStartRecording } from './api/startRecording'
+export { useStopRecording } from './api/stopRecording'
+export { RecordingMode } from './types'
+
+// components
+export { RecordingStateToast } from './components/RecordingStateToast'
+export { TranscriptSidePanel } from './components/TranscriptSidePanel'
+export { ScreenRecordingSidePanel } from './components/ScreenRecordingSidePanel'
@@ -0,0 +1,4 @@
+export enum RecordingMode {
+  Transcript = 'transcript',
+  ScreenRecording = 'screen_recording',
+}
@@ -5,17 +5,20 @@ import { ApiRoom } from './ApiRoom'

 export interface CreateRoomParams {
  slug: string
+  callbackId?: string
  username?: string
 }

 const createRoom = ({
  slug,
+  callbackId,
  username = '',
 }: CreateRoomParams): Promise<ApiRoom> => {
  return fetchApi(`rooms/?username=${encodeURIComponent(username)}`, {
    method: 'POST',
    body: JSON.stringify({
      name: slug,
+      callback_id: callbackId,
    }),
  })
 }
@@ -298,7 +298,7 @@ export const Join = ({
      case ApiLobbyStatus.TIMEOUT:
        return (
          <VStack alignItems="center" textAlign="center">
-            <H lvl={1} margin={false}>
+            <H lvl={1} margin={false} centered>
              {t('timeoutInvite.title')}
            </H>
            <Text as="p" variant="note">
@@ -310,7 +310,7 @@ export const Join = ({
      case ApiLobbyStatus.DENIED:
        return (
          <VStack alignItems="center" textAlign="center">
-            <H lvl={1} margin={false}>
+            <H lvl={1} margin={false} centered>
              {t('denied.title')}
            </H>
            <Text as="p" variant="note">
@@ -322,7 +322,7 @@ export const Join = ({
      case ApiLobbyStatus.WAITING:
        return (
          <VStack alignItems="center" textAlign="center">
-            <H lvl={1} margin={false}>
+            <H lvl={1} margin={false} centered>
              {t('waiting.title')}
            </H>
            <Text
@@ -346,7 +346,7 @@ export const Join = ({
            }}
          >
            <VStack marginBottom={1}>
-              <H lvl={1} margin="sm">
+              <H lvl={1} margin="sm" centered>
                {t('heading')}
              </H>
              <Field
@@ -3,25 +3,15 @@ import Source = Track.Source
 import { fetchServerApi } from './fetchServerApi'
 import { buildServerApiUrl } from './buildServerApiUrl'
 import { useRoomData } from '../hooks/useRoomData'
-import { useRoomContext } from '@livekit/components-react'
-import { NotificationType } from '@/features/notifications/NotificationType'
-import { NotificationPayload } from '@/features/notifications/NotificationPayload'
+import {
+  useNotifyParticipants,
+  NotificationType,
+} from '@/features/notifications'

 export const useMuteParticipant = () => {
  const data = useRoomData()
-  const room = useRoomContext()

-  const notifyParticipant = async (participant: Participant) => {
-    const encoder = new TextEncoder()
-    const payload: NotificationPayload = {
-      type: NotificationType.ParticipantMuted,
-    }
-    const data = encoder.encode(JSON.stringify(payload))
-    await room.localParticipant.publishData(data, {
-      reliable: true,
-      destinationIdentities: [participant.identity],
-    })
-  }
+  const { notifyParticipants } = useNotifyParticipants()

  const muteParticipant = async (participant: Participant) => {
    if (!data || !data?.livekit) {
@@ -53,7 +43,10 @@ export const useMuteParticipant = () => {
        }
      )

-      await notifyParticipant(participant)
+      await notifyParticipants({
+        type: NotificationType.ParticipantMuted,
+        destinationIdentities: [participant.identity],
+      })

      return response
    } catch (error) {
@@ -37,7 +37,14 @@ export const Admin = () => {
      flexDirection="column"
      alignItems="start"
    >
-      <Text variant="note" wrap="pretty" margin="md">
+      <Text
+        variant="note"
+        wrap="pretty"
+        className={css({
+          textStyle: 'sm',
+        })}
+        margin={'md'}
+      >
        {t('description')}
      </Text>
      <RACSeparator
@@ -68,8 +75,8 @@ export const Admin = () => {
      </Text>
      <Field
        type="radioGroup"
-        label="Type d'accès à la réunion"
-        aria-label="Type d'accès à la réunion"
+        label={t('access.type')}
+        aria-label={t('access.type')}
        labelProps={{
          className: css({
            fontSize: '1rem',
@@ -75,7 +75,7 @@ export function FloatingReaction({
    >
      <span
        className={css({
-          lineHeight: '45px',
+          lineHeight: '57px',
        })}
      >
        {emoji}
@@ -89,9 +89,10 @@ export function FloatingReaction({
            textAlign: 'center',
            borderRadius: '20px',
            paddingX: '0.5rem',
-            paddingY: '0.15rem',
+            paddingBottom: '0.3125rem',
+            paddingTop: '0.15rem',
            boxShadow: '0 2px 4px rgba(0, 0, 0, 0.1)',
-            lineHeight: '14px',
+            lineHeight: '16px',
          })}
        >
          {name}
@@ -1,43 +0,0 @@
-import { css } from '@/styled-system/css'
-import { RiRecordCircleLine } from '@remixicon/react'
-import { Text } from '@/primitives'
-import { useTranslation } from 'react-i18next'
-import { useRoomContext } from '@livekit/components-react'
-
-export const RecordingStateToast = () => {
-  const { t } = useTranslation('rooms', { keyPrefix: 'recording' })
-
-  const room = useRoomContext()
-
-  if (!room?.isRecording) return
-
-  return (
-    <div
-      className={css({
-        display: 'flex',
-        position: 'fixed',
-        top: '10px',
-        left: '10px',
-        paddingY: '0.25rem',
-        paddingX: '0.25rem 0.35rem',
-        backgroundColor: 'primaryDark.200',
-        borderColor: 'primaryDark.400',
-        border: '1px solid',
-        color: 'white',
-        borderRadius: '4px',
-        gap: '0.5rem',
-      })}
-    >
-      <RiRecordCircleLine
-        size={20}
-        className={css({
-          color: 'white',
-          backgroundColor: 'danger.700',
-          padding: '3px',
-          borderRadius: '3px',
-        })}
-      />
-      <Text variant={'sm'}>{t('label')}</Text>
-    </div>
-  )
-}
@@ -3,15 +3,15 @@ import { css } from '@/styled-system/css'
 import { Heading } from 'react-aria-components'
 import { text } from '@/primitives/Text'
 import { Button, Div } from '@/primitives'
-import { RiCloseLine } from '@remixicon/react'
+import { RiArrowLeftLine, RiCloseLine } from '@remixicon/react'
 import { useTranslation } from 'react-i18next'
 import { ParticipantsList } from './controls/Participants/ParticipantsList'
 import { useSidePanel } from '../hooks/useSidePanel'
 import { ReactNode } from 'react'
 import { Chat } from '../prefabs/Chat'
-import { Transcript } from './Transcript'
 import { Effects } from './effects/Effects'
 import { Admin } from './Admin'
+import { Tools } from './Tools'

 type StyledSidePanelProps = {
  title: string
@@ -19,6 +19,8 @@ type StyledSidePanelProps = {
  onClose: () => void
  isClosed: boolean
  closeButtonTooltip: string
+  isSubmenu: boolean
+  onBack: () => void
 }

 const StyledSidePanel = ({
@@ -27,6 +29,8 @@ const StyledSidePanel = ({
  onClose,
  isClosed,
  closeButtonTooltip,
+  isSubmenu = false,
+  onBack,
 }: StyledSidePanelProps) => (
  <div
    className={css({
@@ -61,9 +65,22 @@ const StyledSidePanel = ({
      style={{
        paddingLeft: '1.5rem',
        paddingTop: '1rem',
-        display: isClosed ? 'none' : undefined,
+        display: isClosed ? 'none' : 'flex',
+        justifyContent: 'start',
+        alignItems: 'center',
      }}
    >
+      {isSubmenu && (
+        <Button
+          variant="secondaryText"
+          size={'sm'}
+          square
+          className={css({ marginRight: '0.5rem' })}
+          onPress={onBack}
+        >
+          <RiArrowLeftLine size={20} />
+        </Button>
+      )}
      {title}
    </Heading>
    <Div
@@ -114,19 +131,26 @@ export const SidePanel = () => {
    isEffectsOpen,
    isChatOpen,
    isSidePanelOpen,
-    isTranscriptOpen,
+    isToolsOpen,
    isAdminOpen,
+    isSubPanelOpen,
+    activeSubPanelId,
  } = useSidePanel()
  const { t } = useTranslation('rooms', { keyPrefix: 'sidePanel' })

  return (
    <StyledSidePanel
-      title={t(`heading.${activePanelId}`)}
-      onClose={() => (layoutStore.activePanelId = null)}
+      title={t(`heading.${activeSubPanelId || activePanelId}`)}
+      onClose={() => {
+        layoutStore.activePanelId = null
+        layoutStore.activeSubPanelId = null
+      }}
      closeButtonTooltip={t('closeButton', {
-        content: t(`content.${activePanelId}`),
+        content: t(`content.${activeSubPanelId || activePanelId}`),
      })}
      isClosed={!isSidePanelOpen}
+      isSubmenu={isSubPanelOpen}
+      onBack={() => (layoutStore.activeSubPanelId = null)}
    >
      <Panel isOpen={isParticipantsOpen}>
        <ParticipantsList />
@@ -137,8 +161,8 @@ export const SidePanel = () => {
      <Panel isOpen={isChatOpen}>
        <Chat />
      </Panel>
-      <Panel isOpen={isTranscriptOpen}>
-        <Transcript />
+      <Panel isOpen={isToolsOpen}>
+        <Tools />
      </Panel>
      <Panel isOpen={isAdminOpen}>
        <Admin />
@@ -0,0 +1,142 @@
+import { A, Div, Text } from '@/primitives'
+import { css } from '@/styled-system/css'
+import { Button as RACButton } from 'react-aria-components'
+import { useTranslation } from 'react-i18next'
+import { CRISP_HELP_ARTICLE_MORE_TOOLS } from '@/utils/constants'
+import { ReactNode } from 'react'
+import { RiFileTextFill, RiLiveFill } from '@remixicon/react'
+import { SubPanelId, useSidePanel } from '../hooks/useSidePanel'
+import {
+  useIsRecordingModeEnabled,
+  RecordingMode,
+  useHasRecordingAccess,
+} from '@/features/recording'
+import {
+  TranscriptSidePanel,
+  ScreenRecordingSidePanel,
+} from '@/features/recording'
+import { FeatureFlags } from '@/features/analytics/enums'
+
+export interface ToolsButtonProps {
+  icon: ReactNode
+  title: string
+  description: string
+  onPress: () => void
+}
+
+const ToolButton = ({
+  icon,
+  title,
+  description,
+  onPress,
+}: ToolsButtonProps) => {
+  return (
+    <RACButton
+      className={css({
+        display: 'flex',
+        flexDirection: 'row',
+        alignItems: 'center',
+        justifyContent: 'start',
+        paddingY: '0.5rem',
+        paddingX: '0.75rem 1.5rem',
+        borderRadius: '5px',
+        gap: '1.25rem',
+        width: 'full',
+        textAlign: 'start',
+        '&[data-hovered]': {
+          backgroundColor: 'primary.50',
+          cursor: 'pointer',
+        },
+      })}
+      onPress={onPress}
+    >
+      <div
+        className={css({
+          height: '50px',
+          minWidth: '50px',
+          borderRadius: '25px',
+          backgroundColor: 'primary.800',
+          display: 'flex',
+          justifyContent: 'center',
+          alignItems: 'center',
+        })}
+      >
+        {icon}
+      </div>
+      <div>
+        <Text margin={false} as="h3">
+          {title}
+        </Text>
+        <Text as="p" variant="smNote" wrap="pretty">
+          {description}
+        </Text>
+      </div>
+    </RACButton>
+  )
+}
+
+export const Tools = () => {
+  const { openTranscript, openScreenRecording, activeSubPanelId } =
+    useSidePanel()
+  const { t } = useTranslation('rooms', { keyPrefix: 'moreTools' })
+  const isTranscriptEnabled = useIsRecordingModeEnabled(
+    RecordingMode.Transcript
+  )
+
+  const hasScreenRecordingAccess = useHasRecordingAccess(
+    RecordingMode.ScreenRecording,
+    FeatureFlags.ScreenRecording
+  )
+
+  switch (activeSubPanelId) {
+    case SubPanelId.TRANSCRIPT:
+      return <TranscriptSidePanel />
+    case SubPanelId.SCREEN_RECORDING:
+      return <ScreenRecordingSidePanel />
+    default:
+      break
+  }
+
+  return (
+    <Div
+      display="flex"
+      overflowY="scroll"
+      padding="0 0.75rem"
+      flexGrow={1}
+      flexDirection="column"
+      alignItems="start"
+    >
+      <Text
+        variant="note"
+        wrap="balance"
+        className={css({
+          textStyle: 'sm',
+          paddingX: '0.75rem',
+        })}
+        margin="md"
+      >
+        {t('body')}{' '}
+        <A href={CRISP_HELP_ARTICLE_MORE_TOOLS} target="_blank">
+          {t('moreLink')}
+        </A>
+        .
+      </Text>
+      {isTranscriptEnabled && (
+        <ToolButton
+          icon={<RiFileTextFill size={24} color="white" />}
+          title={t('tools.transcript.title')}
+          description={t('tools.transcript.body')}
+          onPress={() => openTranscript()}
+        />
+      )}
+      {hasScreenRecordingAccess && (
+        <ToolButton
+          icon={<RiLiveFill size={24} color="white" />}
+          title={t('tools.screenRecording.title')}
+          description={t('tools.screenRecording.body')}
+          onPress={() => openScreenRecording()}
+        />
+      )}
+    </Div>
+  )
+}
@@ -1,108 +0,0 @@
-import { Button, Div, H, Text } from '@/primitives'
-
-import thirdSlide from '@/assets/intro-slider/3_resume.png'
-import { css } from '@/styled-system/css'
-
-import { useHasTranscriptAccess } from '../hooks/useHasTranscriptAccess'
-import { RiRecordCircleLine, RiStopCircleLine } from '@remixicon/react'
-import { useRoomId } from '@/features/rooms/livekit/hooks/useRoomId'
-import { useRoomContext } from '@livekit/components-react'
-import {
-  RecordingMode,
-  useStartRecording,
-} from '@/features/rooms/api/startRecording'
-import { useStopRecording } from '@/features/rooms/api/stopRecording'
-import { useEffect, useState } from 'react'
-import { RoomEvent } from 'livekit-client'
-import { useTranslation } from 'react-i18next'
-
-export const Transcript = () => {
-  const [isLoading, setIsLoading] = useState(false)
-
-  const { t } = useTranslation('rooms', { keyPrefix: 'transcript' })
-
-  const hasTranscriptAccess = useHasTranscriptAccess()
-
-  const roomId = useRoomId()
-
-  const { mutateAsync: startRecordingRoom } = useStartRecording()
-  const { mutateAsync: stopRecordingRoom } = useStopRecording()
-
-  const room = useRoomContext()
-
-  useEffect(() => {
-    const handleRecordingStatusChanged = () => {
-      setIsLoading(false)
-    }
-    room.on(RoomEvent.RecordingStatusChanged, handleRecordingStatusChanged)
-    return () => {
-      room.off(RoomEvent.RecordingStatusChanged, handleRecordingStatusChanged)
-    }
-  }, [room])
-
-  const handleTranscript = async () => {
-    if (!roomId) {
-      console.warn('No room ID found')
-      return
-    }
-    try {
-      setIsLoading(true)
-      if (room.isRecording) {
-        await stopRecordingRoom({ id: roomId })
-      } else {
-        await startRecordingRoom({ id: roomId, mode: RecordingMode.Transcript })
-      }
-    } catch (error) {
-      console.error('Failed to handle transcript:', error)
-      setIsLoading(false)
-    }
-  }
-
-  if (!hasTranscriptAccess) return
-
-  return (
-    <Div
-      display="flex"
-      overflowY="scroll"
-      padding="0 1.5rem"
-      flexGrow={1}
-      flexDirection="column"
-      alignItems="center"
-    >
-      <img src={thirdSlide} alt={'wip'} />
-      {room.isRecording ? (
-        <>
-          <H lvl={2}>{t('stop.heading')}</H>
-          <Text variant="sm" centered wrap="balance">
-            {t('stop.body')}
-          </Text>
-          <div className={css({ height: '2rem' })} />
-          <Button
-            isDisabled={isLoading}
-            onPress={() => handleTranscript()}
-            data-attr="stop-transcript"
-          >
-            <RiStopCircleLine style={{ marginRight: '0.5rem' }} />{' '}
-            {t('stop.button')}
-          </Button>
-        </>
-      ) : (
-        <>
-          <H lvl={2}>{t('start.heading')}</H>
-          <Text variant="sm" centered wrap="balance">
-            {t('start.body')}
-          </Text>
-          <div className={css({ height: '2rem' })} />
-          <Button
-            isDisabled={isLoading}
-            onPress={() => handleTranscript()}
-            data-attr="start-transcript"
-          >
-            <RiRecordCircleLine style={{ marginRight: '0.5rem' }} />{' '}
-            {t('start.button')}
-          </Button>
-        </>
-      )}
-    </Div>
-  )
-}
@@ -0,0 +1,345 @@
+import { ProcessorOptions, Track } from 'livekit-client'
+import posthog from 'posthog-js'
+import {
+  FilesetResolver,
+  FaceLandmarker,
+  FaceLandmarkerResult,
+} from '@mediapipe/tasks-vision'
+import {
+  CLEAR_TIMEOUT,
+  SET_TIMEOUT,
+  TIMEOUT_TICK,
+  timerWorkerScript,
+} from './TimerWorker'
+import {
+  BackgroundProcessorInterface,
+  BackgroundOptions,
+  ProcessorType,
+} from '.'
+
+const PROCESSING_WIDTH = 256 * 3
+const PROCESSING_HEIGHT = 144 * 3
+
+const FACE_LANDMARKS_CANVAS_ID = 'face-landmarks-local'
+
+export class FaceLandmarksProcessor implements BackgroundProcessorInterface {
+  options: BackgroundOptions
+  name: string
+  processedTrack?: MediaStreamTrack | undefined
+
+  source?: MediaStreamTrack
+  sourceSettings?: MediaTrackSettings
+  videoElement?: HTMLVideoElement
+  videoElementLoaded?: boolean
+
+  // Canvas containing the video processing result
+  outputCanvas?: HTMLCanvasElement
+  outputCanvasCtx?: CanvasRenderingContext2D
+
+  faceLandmarker?: FaceLandmarker
+  faceLandmarkerResult?: FaceLandmarkerResult
+
+  // The resized image of the video source
+  sourceImageData?: ImageData
+
+  timerWorker?: Worker
+
+  type: ProcessorType
+
+  // Effect images
+  glassesImage?: HTMLImageElement
+  mustacheImage?: HTMLImageElement
+  beretImage?: HTMLImageElement
+  constructor(opts: BackgroundOptions) {
+    this.name = 'face_landmarks'
+    this.options = opts
+    this.type = ProcessorType.FACE_LANDMARKS
+    this._initEffectImages()
+  }
+
+  private _initEffectImages() {
+    this.glassesImage = new Image()
+    this.glassesImage.src = '/assets/glasses.png'
+    this.glassesImage.crossOrigin = 'anonymous'
+
+    this.mustacheImage = new Image()
+    this.mustacheImage.src = '/assets/mustache.png'
+    this.mustacheImage.crossOrigin = 'anonymous'
+
+    this.beretImage = new Image()
+    this.beretImage.src = '/assets/beret.png'
+    this.beretImage.crossOrigin = 'anonymous'
+  }
+
+  static get isSupported() {
+    return true // Face landmarks should work in all modern browsers
+  }
+
+  async init(opts: ProcessorOptions<Track.Kind>) {
+    if (!opts.element) {
+      throw new Error('Element is required for processing')
+    }
+
+    this.source = opts.track as MediaStreamTrack
+    this.sourceSettings = this.source!.getSettings()
+    this.videoElement = opts.element as HTMLVideoElement
+
+    this._createMainCanvas()
+
+    const stream = this.outputCanvas!.captureStream()
+    const tracks = stream.getVideoTracks()
+    if (tracks.length == 0) {
+      throw new Error('No tracks found for processing')
+    }
+    this.processedTrack = tracks[0]
+
+    await this.initFaceLandmarker()
+    this._initWorker()
+
+    posthog.capture('face-landmarks-init')
+  }
+
+  _initWorker() {
+    this.timerWorker = new Worker(timerWorkerScript, {
+      name: 'FaceLandmarks',
+    })
+    this.timerWorker.onmessage = (data) => this.onTimerMessage(data)
+    if (this.videoElementLoaded) {
+      this.timerWorker!.postMessage({
+        id: SET_TIMEOUT,
+        timeMs: 1000 / 30,
+      })
+    } else {
+      this.videoElement!.onloadeddata = () => {
+        this.videoElementLoaded = true
+        this.timerWorker!.postMessage({
+          id: SET_TIMEOUT,
+          timeMs: 1000 / 30,
+        })
+      }
+    }
+  }
+
+  onTimerMessage(response: { data: { id: number } }) {
+    if (response.data.id === TIMEOUT_TICK) {
+      this.process()
+    }
+  }
+
+  async initFaceLandmarker() {
+    const vision = await FilesetResolver.forVisionTasks(
+      'https://cdn.jsdelivr.net/npm/@mediapipe/tasks-vision/wasm'
+    )
+    this.faceLandmarker = await FaceLandmarker.createFromOptions(vision, {
+      baseOptions: {
+        modelAssetPath:
+          'https://storage.googleapis.com/mediapipe-models/face_landmarker/face_landmarker/float16/latest/face_landmarker.task',
+        delegate: 'GPU',
+      },
+      runningMode: 'VIDEO',
+      outputFaceBlendshapes: true,
+      outputFacialTransformationMatrixes: true,
+    })
+  }
+
+  async sizeSource() {
+    this.outputCanvasCtx?.drawImage(
+      this.videoElement!,
+      0,
+      0,
+      this.videoElement!.videoWidth,
+      this.videoElement!.videoHeight,
+      0,
+      0,
+      PROCESSING_WIDTH,
+      PROCESSING_HEIGHT
+    )
+
+    this.sourceImageData = this.outputCanvasCtx?.getImageData(
+      0,
+      0,
+      PROCESSING_WIDTH,
+      PROCESSING_HEIGHT
+    )
+  }
+
+  async detectFaces() {
+    const startTimeMs = performance.now()
+    this.faceLandmarkerResult = this.faceLandmarker!.detectForVideo(
+      this.sourceImageData!,
+      startTimeMs
+    )
+  }
+
+  private drawEffect(
+    leftPoint: { x: number; y: number },
+    rightPoint: { x: number; y: number },
+    image: HTMLImageElement,
+    widthScale: number,
+    heightScale: number,
+    yOffset: number = 0
+  ) {
+    // Calculate distance between points
+    const distance = Math.sqrt(
+      Math.pow(rightPoint.x - leftPoint.x, 2) +
+        Math.pow(rightPoint.y - leftPoint.y, 2)
+    )
+
+    // Scale image based on distance
+    const width = distance * PROCESSING_WIDTH * widthScale
+    const height = width * heightScale
+
+    // Calculate center position between points
+    const centerX = (leftPoint.x + rightPoint.x) / 2
+    const centerY = (leftPoint.y + rightPoint.y) / 2 + yOffset
+
+    // Draw image
+    this.outputCanvasCtx!.save()
+    this.outputCanvasCtx!.translate(
+      centerX * PROCESSING_WIDTH,
+      centerY * PROCESSING_HEIGHT
+    )
+
+    // Calculate rotation angle based on point positions
+    const angle = Math.atan2(
+      rightPoint.y - leftPoint.y,
+      rightPoint.x - leftPoint.x
+    )
+    this.outputCanvasCtx!.rotate(angle)
+
+    // Draw image centered at the midpoint between points
+    this.outputCanvasCtx!.drawImage(
+      image,
+      -width / 2,
+      -height / 2,
+      width,
+      height
+    )
+
+    this.outputCanvasCtx!.restore()
+  }
+
+  async drawFaceLandmarks() {
+    // Draw the original video frame at the canvas size
+    this.outputCanvasCtx!.drawImage(
+      this.videoElement!,
+      0,
+      0,
+      this.videoElement!.videoWidth,
+      this.videoElement!.videoHeight,
+      0,
+      0,
+      PROCESSING_WIDTH,
+      PROCESSING_HEIGHT
+    )
+
+    if (!this.faceLandmarkerResult?.faceLandmarks) {
+      return
+    }
+
+    // Draw face landmarks (optional, for debugging)
+    this.outputCanvasCtx!.strokeStyle = '#00FF00'
+    this.outputCanvasCtx!.lineWidth = 2
+
+    for (const face of this.faceLandmarkerResult.faceLandmarks) {
+      // Find eye landmarks
+      const leftEye = face[468]
+      const rightEye = face[473]
+
+      // Find mouth landmarks for mustache
+      const leftMoustache = face[92]
+      const rightMoustache = face[322]
+
+      // Find forehead landmarks for beret
+      const leftForehead = face[103]
+      const rightForehead = face[332]
+
+      if (leftEye && rightEye && this.options.showGlasses) {
+        this.drawEffect(leftEye, rightEye, this.glassesImage!, 2.5, 0.7)
+      }
+
+      if (leftMoustache && rightMoustache && this.options.showFrench) {
+        this.drawEffect(
+          leftMoustache,
+          rightMoustache,
+          this.mustacheImage!,
+          1.5,
+          0.5
+        )
+      }
+
+      if (leftForehead && rightForehead && this.options.showFrench) {
+        this.drawEffect(
+          leftForehead,
+          rightForehead,
+          this.beretImage!,
+          2.1,
+          0.7,
+          -0.1
+        )
+      }
+    }
+  }
+
+  async process() {
+    await this.sizeSource()
+    await this.detectFaces()
+    await this.drawFaceLandmarks()
+
+    this.timerWorker!.postMessage({
+      id: SET_TIMEOUT,
+      timeMs: 1000 / 30,
+    })
+  }
+
+  _createMainCanvas() {
+    this.outputCanvas = document.querySelector(
+      `#${FACE_LANDMARKS_CANVAS_ID}`
+    ) as HTMLCanvasElement
+    if (!this.outputCanvas) {
+      this.outputCanvas = this._createCanvas(
+        FACE_LANDMARKS_CANVAS_ID,
+        PROCESSING_WIDTH,
+        PROCESSING_HEIGHT
+      )
+    }
+    this.outputCanvasCtx = this.outputCanvas.getContext('2d')!
+  }
+
+  _createCanvas(id: string, width: number, height: number) {
+    const element = document.createElement('canvas')
+    element.setAttribute('id', id)
+    element.setAttribute('width', '' + width)
+    element.setAttribute('height', '' + height)
+    return element
+  }
+
+  update(opts: BackgroundOptions): void {
+    this.options = opts
+  }
+
+  async restart(opts: ProcessorOptions<Track.Kind>) {
+    await this.destroy()
+    return this.init(opts)
+  }
+
+  async destroy() {
+    this.timerWorker?.postMessage({
+      id: CLEAR_TIMEOUT,
+    })
+
+    this.timerWorker?.terminate()
+    this.faceLandmarker?.close()
+  }
+
+  clone() {
+    return new FaceLandmarksProcessor(this.options)
+  }
+
+  serialize() {
+    return {
+      type: this.type,
+      options: this.options,
+    }
+  }
+}
@@ -3,10 +3,13 @@ import { Track, TrackProcessor } from 'livekit-client'
 import { BackgroundBlurTrackProcessorJsWrapper } from './BackgroundBlurTrackProcessorJsWrapper'
 import { BackgroundCustomProcessor } from './BackgroundCustomProcessor'
 import { BackgroundVirtualTrackProcessorJsWrapper } from './BackgroundVirtualTrackProcessorJsWrapper'
+import { FaceLandmarksProcessor } from './FaceLandmarksProcessor'

 export type BackgroundOptions = {
  blurRadius?: number
  imagePath?: string
+  showGlasses?: boolean
+  showFrench?: boolean
 }

 export interface ProcessorSerialized {
@@ -25,11 +28,16 @@ export interface BackgroundProcessorInterface
 export enum ProcessorType {
  BLUR = 'blur',
  VIRTUAL = 'virtual',
+  FACE_LANDMARKS = 'faceLandmarks',
 }

 export class BackgroundProcessorFactory {
  static isSupported() {
-    return ProcessorWrapper.isSupported || BackgroundCustomProcessor.isSupported
+    return (
+      ProcessorWrapper.isSupported ||
+      BackgroundCustomProcessor.isSupported ||
+      FaceLandmarksProcessor.isSupported
+    )
  }

  static getProcessor(
@@ -50,6 +58,10 @@ export class BackgroundProcessorFactory {
      if (BackgroundCustomProcessor.isSupported) {
        return new BackgroundCustomProcessor(opts)
      }
+    } else if (type === ProcessorType.FACE_LANDMARKS) {
+      if (FaceLandmarksProcessor.isSupported) {
+        return new FaceLandmarksProcessor(opts)
+      }
    }
    return undefined
  }
@@ -2,14 +2,14 @@ import { RiMegaphoneLine } from '@remixicon/react'
 import { MenuItem } from 'react-aria-components'
 import { useTranslation } from 'react-i18next'
 import { menuRecipe } from '@/primitives/menuRecipe'
-import { GRIST_FORM } from '@/utils/constants'
+import { GRIST_FEEDBACKS_FORM } from '@/utils/constants'

 export const FeedbackMenuItem = () => {
  const { t } = useTranslation('rooms', { keyPrefix: 'options.items' })

  return (
    <MenuItem
-      href={GRIST_FORM}
+      href={GRIST_FEEDBACKS_FORM}
      target="_blank"
      className={menuRecipe({ icon: true, variant: 'dark' }).item}
    >
@@ -4,6 +4,7 @@ import { FullScreenMenuItem } from './FullScreenMenuItem'
 import { SettingsMenuItem } from './SettingsMenuItem'
 import { FeedbackMenuItem } from './FeedbackMenuItem'
 import { EffectsMenuItem } from './EffectsMenuItem'
+import { SupportMenuItem } from './SupportMenuItem'

 // @todo try refactoring it to use MenuList component
 export const OptionsMenuItems = () => {
@@ -20,6 +21,7 @@ export const OptionsMenuItems = () => {
      </MenuSection>
      <Separator />
      <MenuSection>
+        <SupportMenuItem />
        <FeedbackMenuItem />
        <SettingsMenuItem />
      </MenuSection>
@@ -0,0 +1,27 @@
+import { RiQuestionLine } from '@remixicon/react'
+import { MenuItem } from 'react-aria-components'
+import { useTranslation } from 'react-i18next'
+import { menuRecipe } from '@/primitives/menuRecipe'
+import { Crisp } from 'crisp-sdk-web'
+import { useIsSupportEnabled } from '@/features/support/hooks/useSupport'
+
+export const SupportMenuItem = () => {
+  const { t } = useTranslation('rooms', { keyPrefix: 'options.items' })
+  const isSupportEnabled = useIsSupportEnabled()
+
+  if (!isSupportEnabled || !Crisp) {
+    return
+  }
+
+  return (
+    <MenuItem
+      className={menuRecipe({ icon: true, variant: 'dark' }).item}
+      onAction={() => {
+        Crisp?.chat.open()
+      }}
+    >
+      <RiQuestionLine size={20} />
+      {t('support')}
+    </MenuItem>
+  )
+}
@@ -1,60 +0,0 @@
-import { ToggleButton } from '@/primitives'
-import { RiQuestionLine } from '@remixicon/react'
-import { useTranslation } from 'react-i18next'
-import { Crisp } from 'crisp-sdk-web'
-import { useEffect, useState } from 'react'
-import { ToggleButtonProps } from '@/primitives/ToggleButton'
-import { useIsSupportEnabled } from '@/features/support/hooks/useSupport'
-
-export const SupportToggle = ({ onPress, ...props }: ToggleButtonProps) => {
-  const { t } = useTranslation('rooms', { keyPrefix: 'controls' })
-
-  const [isOpened, setIsOpened] = useState(() => {
-    return window?.$crisp?.is?.('chat:opened') || false
-  })
-
-  useEffect(() => {
-    if (!Crisp) {
-      return
-    }
-
-    Crisp.chat.onChatOpened(() => {
-      setIsOpened(true)
-    })
-    Crisp.chat.onChatClosed(() => {
-      setIsOpened(false)
-    })
-    return () => {
-      Crisp.chat.offChatOpened()
-      Crisp.chat.offChatClosed()
-    }
-  }, [])
-
-  const isSupportEnabled = useIsSupportEnabled()
-
-  if (!isSupportEnabled) {
-    return
-  }
-
-  return (
-    <ToggleButton
-      square
-      variant="primaryTextDark"
-      tooltip={t('support')}
-      aria-label={t('support')}
-      isSelected={isOpened}
-      onPress={(e) => {
-        if (isOpened) {
-          Crisp.chat.close()
-        } else {
-          Crisp.chat.open()
-        }
-        onPress?.(e)
-      }}
-      data-attr="controls-support"
-      {...props}
-    >
-      <RiQuestionLine />
-    </ToggleButton>
-  )
-}
@@ -1,24 +1,19 @@
 import { ToggleButton } from '@/primitives'
-import { RiBardLine } from '@remixicon/react'
+import { RiShapesLine } from '@remixicon/react'
 import { useTranslation } from 'react-i18next'
 import { useSidePanel } from '../../hooks/useSidePanel'
-import { useHasTranscriptAccess } from '../../hooks/useHasTranscriptAccess'
 import { css } from '@/styled-system/css'
 import { ToggleButtonProps } from '@/primitives/ToggleButton'

-export const TranscriptToggle = ({
+export const ToolsToggle = ({
  variant = 'primaryTextDark',
  onPress,
  ...props
 }: ToggleButtonProps) => {
-  const { t } = useTranslation('rooms', { keyPrefix: 'controls.transcript' })
+  const { t } = useTranslation('rooms', { keyPrefix: 'controls.tools' })

-  const { isTranscriptOpen, toggleTranscript } = useSidePanel()
-  const tooltipLabel = isTranscriptOpen ? 'open' : 'closed'
-
-  const hasTranscriptAccess = useHasTranscriptAccess()
-
-  if (!hasTranscriptAccess) return
+  const { isToolsOpen, toggleTools } = useSidePanel()
+  const tooltipLabel = isToolsOpen ? 'open' : 'closed'

  return (
    <div
@@ -32,15 +27,15 @@ export const TranscriptToggle = ({
        variant={variant}
        aria-label={t(tooltipLabel)}
        tooltip={t(tooltipLabel)}
-        isSelected={isTranscriptOpen}
+        isSelected={isToolsOpen}
        onPress={(e) => {
-          toggleTranscript()
+          toggleTools()
          onPress?.(e)
        }}
        {...props}
-        data-attr="toggle-transcript"
+        data-attr="toggle-tools"
      >
-        <RiBardLine />
+        <RiShapesLine />
      </ToggleButton>
    </div>
  )
@@ -13,6 +13,7 @@ export const Effects = () => {
    <div
      className={css({
        padding: '0 1.5rem',
+        overflowY: 'scroll',
      })}
    >
      <EffectsConfiguration
@@ -5,17 +5,22 @@ import {
  BackgroundProcessorFactory,
  BackgroundProcessorInterface,
  ProcessorType,
+  BackgroundOptions,
 } from '../blur'
 import { css } from '@/styled-system/css'
 import { Text, P, ToggleButton, H } from '@/primitives'
 import { styled } from '@/styled-system/jsx'
-import { BackgroundOptions } from '@livekit/track-processors'
 import { BlurOn } from '@/components/icons/BlurOn'
 import { BlurOnStrong } from '@/components/icons/BlurOnStrong'
 import { useTrackToggle } from '@livekit/components-react'
 import { Loader } from '@/primitives/Loader'
 import { useSyncAfterDelay } from '@/hooks/useSyncAfterDelay'
-import { RiProhibited2Line } from '@remixicon/react'
+import {
+  RiProhibited2Line,
+  RiGlassesLine,
+  RiGoblet2Fill,
+} from '@remixicon/react'
+import { useHasFaceLandmarksAccess } from '../../hooks/useHasFaceLandmarksAccess'

 enum BlurRadius {
  NONE = 0,
@@ -50,6 +55,7 @@ export const EffectsConfiguration = ({
  const { toggle, enabled } = useTrackToggle({ source: Track.Source.Camera })
  const [processorPending, setProcessorPending] = useState(false)
  const processorPendingReveal = useSyncAfterDelay(processorPending)
+  const hasFaceLandmarksAccess = useHasFaceLandmarksAccess()

  useEffect(() => {
    const videoElement = videoRef.current
@@ -139,9 +145,42 @@ export const EffectsConfiguration = ({
  }

  const tooltipLabel = (type: ProcessorType, options: BackgroundOptions) => {
+    if (type === ProcessorType.FACE_LANDMARKS) {
+      const effect = options.showGlasses ? 'glasses' : 'french'
+      return t(
+        `faceLandmarks.${effect}.${isSelected(type, options) ? 'clear' : 'apply'}`
+      )
+    }
    return t(`${type}.${isSelected(type, options) ? 'clear' : 'apply'}`)
  }

+  const getFaceLandmarksOptions = () => {
+    const processor = getProcessor()
+    if (processor?.serialize().type === ProcessorType.FACE_LANDMARKS) {
+      return processor.serialize().options as {
+        showGlasses?: boolean
+        showFrench?: boolean
+      }
+    }
+    return { showGlasses: false, showFrench: false }
+  }
+
+  const toggleFaceLandmarkEffect = async (effect: 'glasses' | 'french') => {
+    const currentOptions = getFaceLandmarksOptions()
+    const newOptions = {
+      ...currentOptions,
+      [effect === 'glasses' ? 'showGlasses' : 'showFrench']:
+        !currentOptions[effect === 'glasses' ? 'showGlasses' : 'showFrench'],
+    }
+
+    if (!newOptions.showGlasses && !newOptions.showFrench) {
+      // If both effects are off stop the processor
+      await clearEffect()
+    } else {
+      await toggleEffect(ProcessorType.FACE_LANDMARKS, newOptions)
+    }
+  }
+
  return (
    <div
      className={css(
@@ -302,6 +341,68 @@ export const EffectsConfiguration = ({
                  </ToggleButton>
                </div>
              </div>
+              {hasFaceLandmarksAccess && (
+                <div
+                  className={css({
+                    marginTop: '1.5rem',
+                  })}
+                >
+                  <H
+                    lvl={3}
+                    style={{
+                      marginBottom: '1rem',
+                    }}
+                    variant="bodyXsBold"
+                  >
+                    {t('faceLandmarks.title')}
+                  </H>
+                  <div
+                    className={css({
+                      display: 'flex',
+                      gap: '1.25rem',
+                    })}
+                  >
+                    <ToggleButton
+                      variant="bigSquare"
+                      aria-label={tooltipLabel(ProcessorType.FACE_LANDMARKS, {
+                        showGlasses: true,
+                        showFrench: false,
+                      })}
+                      tooltip={tooltipLabel(ProcessorType.FACE_LANDMARKS, {
+                        showGlasses: true,
+                        showFrench: false,
+                      })}
+                      isDisabled={processorPendingReveal}
+                      onChange={async () =>
+                        await toggleFaceLandmarkEffect('glasses')
+                      }
+                      isSelected={getFaceLandmarksOptions().showGlasses}
+                      data-attr="toggle-glasses"
+                    >
+                      <RiGlassesLine />
+                    </ToggleButton>
+                    <ToggleButton
+                      variant="bigSquare"
+                      aria-label={tooltipLabel(ProcessorType.FACE_LANDMARKS, {
+                        showGlasses: false,
+                        showFrench: true,
+                      })}
+                      tooltip={tooltipLabel(ProcessorType.FACE_LANDMARKS, {
+                        showGlasses: false,
+                        showFrench: true,
+                      })}
+                      isDisabled={processorPendingReveal}
+                      onChange={async () =>
+                        await toggleFaceLandmarkEffect('french')
+                      }
+                      isSelected={getFaceLandmarksOptions().showFrench}
+                      data-attr="toggle-french"
+                    >
+                      <RiGoblet2Fill />
+                    </ToggleButton>
+                  </div>
+                </div>
+              )}
              <div
                className={css({
                  marginTop: '1.5rem',
@@ -0,0 +1,10 @@
+import { useFeatureFlagEnabled } from 'posthog-js/react'
+import { useIsAnalyticsEnabled } from '@/features/analytics/hooks/useIsAnalyticsEnabled'
+import { FeatureFlags } from '@/features/analytics/enums'
+
+export const useHasFaceLandmarksAccess = () => {
+  const featureEnabled = useFeatureFlagEnabled(FeatureFlags.faceLandmarks)
+  const isAnalyticsEnabled = useIsAnalyticsEnabled()
+
+  return featureEnabled || !isAnalyticsEnabled
+}
@@ -1,17 +0,0 @@
-import { useFeatureFlagEnabled } from 'posthog-js/react'
-import { useIsAnalyticsEnabled } from '@/features/analytics/hooks/useIsAnalyticsEnabled'
-import { useIsTranscriptEnabled } from './useIsTranscriptEnabled'
-import { useIsAdminOrOwner } from './useIsAdminOrOwner'
-
-export const useHasTranscriptAccess = () => {
-  const featureEnabled = useFeatureFlagEnabled('transcription-summary')
-  const isAnalyticsEnabled = useIsAnalyticsEnabled()
-  const isTranscriptEnabled = useIsTranscriptEnabled()
-  const isAdminOrOwner = useIsAdminOrOwner()
-
-  return (
-    (featureEnabled || !isAnalyticsEnabled) &&
-    isAdminOrOwner &&
-    isTranscriptEnabled
-  )
-}
@@ -1,11 +0,0 @@
-import { RecordingMode } from '@/features/rooms/api/startRecording'
-import { useConfig } from '@/api/useConfig'
-
-export const useIsTranscriptEnabled = () => {
-  const { data } = useConfig()
-
-  return (
-    data?.recording?.is_enabled &&
-    data?.recording?.available_modes?.includes(RecordingMode.Transcript)
-  )
-}
@@ -5,53 +5,83 @@ export enum PanelId {
  PARTICIPANTS = 'participants',
  EFFECTS = 'effects',
  CHAT = 'chat',
-  TRANSCRIPT = 'transcript',
+  TOOLS = 'tools',
  ADMIN = 'admin',
 }

+export enum SubPanelId {
+  TRANSCRIPT = 'transcript',
+  SCREEN_RECORDING = 'screenRecording',
+}
+
 export const useSidePanel = () => {
  const layoutSnap = useSnapshot(layoutStore)
  const activePanelId = layoutSnap.activePanelId
+  const activeSubPanelId = layoutSnap.activeSubPanelId

  const isParticipantsOpen = activePanelId == PanelId.PARTICIPANTS
  const isEffectsOpen = activePanelId == PanelId.EFFECTS
  const isChatOpen = activePanelId == PanelId.CHAT
-  const isTranscriptOpen = activePanelId == PanelId.TRANSCRIPT
+  const isToolsOpen = activePanelId == PanelId.TOOLS
  const isAdminOpen = activePanelId == PanelId.ADMIN
+  const isTranscriptOpen = activeSubPanelId == SubPanelId.TRANSCRIPT
+  const isScreenRecordingOpen = activeSubPanelId == SubPanelId.SCREEN_RECORDING
  const isSidePanelOpen = !!activePanelId
+  const isSubPanelOpen = !!activeSubPanelId

  const toggleAdmin = () => {
    layoutStore.activePanelId = isAdminOpen ? null : PanelId.ADMIN
+    if (layoutSnap.activeSubPanelId) layoutStore.activeSubPanelId = null
  }

  const toggleParticipants = () => {
    layoutStore.activePanelId = isParticipantsOpen ? null : PanelId.PARTICIPANTS
+    if (layoutSnap.activeSubPanelId) layoutStore.activeSubPanelId = null
  }

  const toggleChat = () => {
    layoutStore.activePanelId = isChatOpen ? null : PanelId.CHAT
+    if (layoutSnap.activeSubPanelId) layoutStore.activeSubPanelId = null
  }

  const toggleEffects = () => {
    layoutStore.activePanelId = isEffectsOpen ? null : PanelId.EFFECTS
+    if (layoutSnap.activeSubPanelId) layoutStore.activeSubPanelId = null
  }

-  const toggleTranscript = () => {
-    layoutStore.activePanelId = isTranscriptOpen ? null : PanelId.TRANSCRIPT
+  const toggleTools = () => {
+    layoutStore.activePanelId = isToolsOpen ? null : PanelId.TOOLS
+    if (layoutSnap.activeSubPanelId) layoutStore.activeSubPanelId = null
+  }
+
+  const openTranscript = () => {
+    layoutStore.activeSubPanelId = SubPanelId.TRANSCRIPT
+    layoutStore.activePanelId = PanelId.TOOLS
+  }
+
+  const openScreenRecording = () => {
+    layoutStore.activeSubPanelId = SubPanelId.SCREEN_RECORDING
+    layoutStore.activePanelId = PanelId.TOOLS
  }

  return {
    activePanelId,
+    activeSubPanelId,
    toggleParticipants,
    toggleChat,
    toggleEffects,
-    toggleTranscript,
+    toggleTools,
    toggleAdmin,
+    openTranscript,
+    openScreenRecording,
+    isSubPanelOpen,
    isChatOpen,
    isParticipantsOpen,
    isEffectsOpen,
    isSidePanelOpen,
-    isTranscriptOpen,
+    isToolsOpen,
    isAdminOpen,
+    isTranscriptOpen,
+    isScreenRecordingOpen,
  }
 }
@@ -14,15 +14,15 @@ import {
  RiMore2Line,
  RiSettings3Line,
 } from '@remixicon/react'
+import { GRIST_FEEDBACKS_FORM } from '@/utils/constants'
 import { ScreenShareToggle } from '../../components/controls/ScreenShareToggle'
 import { ChatToggle } from '../../components/controls/ChatToggle'
 import { ParticipantsToggle } from '../../components/controls/Participants/ParticipantsToggle'
-import { SupportToggle } from '../../components/controls/SupportToggle'
 import { useSidePanel } from '../../hooks/useSidePanel'
 import { LinkButton } from '@/primitives'
 import { useSettingsDialog } from '../../components/controls/SettingsDialogContext'
 import { ResponsiveMenu } from './ResponsiveMenu'
-import { TranscriptToggle } from '../../components/controls/TranscriptToggle'
+import { ToolsToggle } from '../../components/controls/ToolsToggle'
 import { CameraSwitchButton } from '../../components/controls/CameraSwitchButton'

 export function MobileControlBar({
@@ -134,11 +134,7 @@ export function MobileControlBar({
              description={true}
              onPress={() => setIsMenuOpened(false)}
            />
-            <TranscriptToggle
-              description={true}
-              onPress={() => setIsMenuOpened(false)}
-            />
-            <SupportToggle
+            <ToolsToggle
              description={true}
              onPress={() => setIsMenuOpened(false)}
            />
@@ -155,7 +151,7 @@ export function MobileControlBar({
              <RiAccountBoxLine size={20} />
            </Button>
            <LinkButton
-              href="https://grist.incubateur.net/o/docs/forms/1YrfNP1QSSy8p2gCxMFnSf/4"
+              href={GRIST_FEEDBACKS_FORM}
              variant="primaryTextDark"
              tooltip={t('options.items.feedback')}
              aria-label={t('options.items.feedback')}
@@ -1,8 +1,7 @@
 import { css } from '@/styled-system/css'
 import { ChatToggle } from '../../components/controls/ChatToggle'
 import { ParticipantsToggle } from '../../components/controls/Participants/ParticipantsToggle'
-import { SupportToggle } from '../../components/controls/SupportToggle'
-import { TranscriptToggle } from '../../components/controls/TranscriptToggle'
+import { ToolsToggle } from '../../components/controls/ToolsToggle'
 import { AdminToggle } from '../../components/AdminToggle'
 import { useSize } from '../../hooks/useResizeObserver'
 import { useState, RefObject } from 'react'
@@ -14,13 +13,15 @@ import { useTranslation } from 'react-i18next'

 const CONTROL_BAR_BREAKPOINT = 1100

-const NavigationControls = ({ onPress }: Partial<ToggleButtonProps>) => (
+const NavigationControls = ({
+  onPress,
+  tooltipType = 'instant',
+}: Partial<ToggleButtonProps>) => (
  <>
-    <ChatToggle onPress={onPress} />
-    <ParticipantsToggle onPress={onPress} />
-    <TranscriptToggle onPress={onPress} />
-    <SupportToggle onPress={onPress} />
-    <AdminToggle onPress={onPress} />
+    <ChatToggle onPress={onPress} tooltipType={tooltipType} />
+    <ParticipantsToggle onPress={onPress} tooltipType={tooltipType} />
+    <ToolsToggle onPress={onPress} tooltipType={tooltipType} />
+    <AdminToggle onPress={onPress} tooltipType={tooltipType} />
  </>
 )

@@ -55,7 +56,7 @@ export const LateralMenu = () => {
            gap: '0.5rem',
          })}
        >
-          <NavigationControls onPress={handleClose} />
+          <NavigationControls onPress={handleClose} tooltipType="delayed" />
        </Dialog>
      </Popover>
    </DialogTrigger>
@@ -28,7 +28,7 @@ import { FocusLayout } from '../components/FocusLayout'
 import { ParticipantTile } from '../components/ParticipantTile'
 import { SidePanel } from '../components/SidePanel'
 import { useSidePanel } from '../hooks/useSidePanel'
-import { RecordingStateToast } from '../components/RecordingStateToast'
+import { RecordingStateToast } from '@/features/recording'
 import { ScreenShareErrorModal } from '../components/ScreenShareErrorModal'

 const LayoutWrapper = styled(
@@ -1,84 +0,0 @@
-import { authUrl, useUser } from '../auth'
-
-export enum ClientMessageType {
-  ROOM_CREATED = 'ROOM_CREATED',
-}
-
-export class SdkReverseClient {
-  /**
-   * IDEA: Use API Key. Must be based on some sort of credentials? No needs for now as there are no security
-   * plausible at the moment.
-   */
-  static getAllowTargetOrigin() {
-    return '*'
-  }
-
-  static post(type: ClientMessageType, data: unknown = {}) {
-    window.parent.postMessage(
-      {
-        type,
-        data,
-      },
-      SdkReverseClient.getAllowTargetOrigin()
-    )
-  }
-
-  static broadcastAuthentication() {
-    const bc = new BroadcastChannel('APP_CHANNEL')
-    bc.postMessage({ type: 'AUTHENTICATED' })
-
-    /**
-     * This means the parent window has authenticated has successfully refetched user, then we can close the popup.
-     */
-    bc.onmessage = (event) => {
-      if (event.data.type === 'AUTHENTICATED_ACK') {
-        window.close()
-      }
-    }
-  }
-
-  static waitForAuthenticationAck() {
-    return new Promise<void>((resolve) => {
-      const bc = new BroadcastChannel('APP_CHANNEL')
-      bc.onmessage = async (event) => {
-        if (event.data.type === 'AUTHENTICATED') {
-          resolve()
-          bc.postMessage({ type: 'AUTHENTICATED_ACK' })
-        }
-      }
-    })
-  }
-}
-
-/**
- * Returns a function to be awaited in order to make sure the user is logged in.
- * If not logged-in it opens a popup with the connection flow, the promise returned is resolved
- * once logged-in.
- *
- * To be used in SDK scope.
- */
-export function useEnsureAuth() {
-  const { isLoggedIn, ...other } = useUser({
-    fetchUserOptions: { attemptSilent: false },
-  })
-
-  const startSSO = () => {
-    return new Promise<void>((resolve) => {
-      SdkReverseClient.waitForAuthenticationAck().then(async () => {
-        await other.refetch()
-        resolve()
-      })
-      const params = `scrollbars=no,resizable=no,status=no,location=no,toolbar=no,menubar=no,
-  width=400,height=900,left=100,top=100`
-      window.open(new URL('authenticate/', authUrl()).href, '', params)
-    })
-  }
-
-  const ensureAuth = async () => {
-    if (!isLoggedIn) {
-      await startSSO()
-    }
-  }
-
-  return { ensureAuth }
-}
@@ -0,0 +1,35 @@
+import { fetchApi } from '@/api/fetchApi'
+import { useQuery } from '@tanstack/react-query'
+import { keys } from '@/api/queryKeys'
+import { CallbackCreationRoomData } from '../utils/types'
+
+export type CallbackResponse = {
+  status: string
+  room: CallbackCreationRoomData
+}
+
+export const fetchRoomGenerationState = async ({
+  callbackId,
+}: {
+  callbackId: string
+}) => {
+  return fetchApi<CallbackResponse>(`/rooms/creation-callback/`, {
+    method: 'POST',
+    body: JSON.stringify({
+      callback_id: callbackId,
+    }),
+  })
+}
+
+export const useRoomCreationCallback = ({
+  callbackId = '',
+}: {
+  callbackId?: string
+}) => {
+  return useQuery({
+    queryKey: [keys.roomCreationCallback, callbackId],
+    queryFn: () => fetchRoomGenerationState({ callbackId }),
+    enabled: !!callbackId,
+    refetchInterval: 1000,
+  })
+}
@@ -1,103 +0,0 @@
-import { Button } from '@/primitives/Button'
-import { useTranslation } from 'react-i18next'
-import { usePersistentUserChoices } from '@livekit/components-react'
-import { useState } from 'react'
-import { getRouteUrl } from '@/navigation/getRouteUrl'
-import { css } from '@/styled-system/css'
-import { RiCheckLine, RiFileCopyLine } from '@remixicon/react'
-import { VisioIcon } from '@/assets/VisioIcon'
-import { generateRoomId, useCreateRoom } from '../../rooms'
-import {
-  ClientMessageType,
-  SdkReverseClient,
-  useEnsureAuth,
-} from '../SdkReverseClient'
-
-export const SdkCreateButton = () => {
-  const { t } = useTranslation('sdk', { keyPrefix: 'createButton' })
-  const [roomUrl, setRoomUrl] = useState<string>()
-  const [isLoading, setIsLoading] = useState(false)
-  const {
-    userChoices: { username },
-  } = usePersistentUserChoices()
-
-  const { mutateAsync: createRoom } = useCreateRoom()
-  const { ensureAuth } = useEnsureAuth()
-
-  const submitCreateRoom = async () => {
-    setIsLoading(true)
-    const slug = generateRoomId()
-    const data = await createRoom({ slug, username })
-    const roomUrlTmp = getRouteUrl('room', data.slug)
-    setRoomUrl(roomUrlTmp)
-    setIsLoading(false)
-    SdkReverseClient.post(ClientMessageType.ROOM_CREATED, {
-      url: roomUrlTmp,
-    })
-  }
-
-  const submit = async () => {
-    await ensureAuth()
-    submitCreateRoom()
-  }
-
-  return (
-    <div
-      className={css({
-        paddingTop: '3px',
-        paddingLeft: '3px',
-      })}
-    >
-      {roomUrl ? (
-        <RoomUrl roomUrl={roomUrl} />
-      ) : (
-        <Button
-          variant="primaryDark"
-          aria-label={t('label')}
-          onPress={submit}
-          data-attr="sdk-create"
-          loading={isLoading}
-          icon={<VisioIcon />}
-        >
-          {t('label')}
-        </Button>
-      )}
-    </div>
-  )
-}
-
-const RoomUrl = ({ roomUrl }: { roomUrl: string }) => {
-  const [isCopied, setIsCopied] = useState(false)
-
-  const copy = () => {
-    navigator.clipboard.writeText(roomUrl!)
-    setIsCopied(true)
-    setTimeout(() => setIsCopied(false), 1000)
-  }
-
-  return (
-    <div
-      className={css({
-        display: 'flex',
-        alignItems: 'center',
-        gap: '0.5rem',
-      })}
-    >
-      <span
-        className={css({
-          color: 'greyscale.600',
-        })}
-      >
-        {roomUrl}
-      </span>
-      <Button
-        variant={isCopied ? 'success' : 'quaternaryText'}
-        data-attr="sdk-create-copy"
-        onPress={copy}
-        square
-      >
-        {isCopied ? <RiCheckLine /> : <RiFileCopyLine />}
-      </Button>
-    </div>
-  )
-}
@@ -0,0 +1,171 @@
+import { Button } from '@/primitives/Button'
+import { useEffect, useMemo, useState } from 'react'
+import { Link } from 'react-aria-components'
+import { useTranslation } from 'react-i18next'
+import { HStack, VStack } from '@/styled-system/jsx'
+import { css } from '@/styled-system/css'
+import { RiCloseLine, RiFileCopyLine } from '@remixicon/react'
+import { Text } from '@/primitives'
+import { Spinner } from '@/primitives/Spinner'
+import { buttonRecipe } from '@/primitives/buttonRecipe'
+import { VisioIcon } from '@/assets/VisioIcon'
+import { getRouteUrl } from '@/navigation/getRouteUrl'
+import { useRoomCreationCallback } from '../api/useRoomCreationCallback'
+import { PopupManager } from '../utils/PopupManager'
+import { CallbackCreationRoomData } from '../utils/types'
+import { useSearchParams } from 'wouter'
+
+const popupManager = new PopupManager()
+
+export const CreateMeetingButton = () => {
+  const { t } = useTranslation('sdk', { keyPrefix: 'createMeeting' })
+
+  const [searchParams] = useSearchParams()
+
+  const [callbackId, setCallbackId] = useState<string | undefined>(undefined)
+  const [isPending, setIsPending] = useState(false)
+
+  const initialRoom = useMemo(() => {
+    const roomSlug = searchParams.get('slug')
+    if (!roomSlug) return undefined
+    return {
+      slug: roomSlug.trim(), // Trim whitespace for safety
+    }
+  }, [searchParams])
+
+  const [room, setRoom] = useState<CallbackCreationRoomData | undefined>(
+    initialRoom
+  )
+
+  const { data } = useRoomCreationCallback({ callbackId })
+
+  const roomUrl = useMemo(() => {
+    if (room?.slug) return getRouteUrl('room', room.slug)
+  }, [room])
+
+  useEffect(() => {
+    if (!data?.room?.slug) return
+    setRoom(data.room)
+    setCallbackId(undefined)
+    setIsPending(false)
+    popupManager.sendRoomData({
+      room: {
+        url: getRouteUrl('room', data.room.slug),
+        ...data.room,
+      },
+    })
+  }, [data])
+
+  useEffect(() => {
+    popupManager.setupMessageListener(
+      (id) => setCallbackId(id),
+      (data) => {
+        setRoom(data)
+        setIsPending(false)
+      }
+    )
+
+    return () => popupManager.cleanup()
+  }, [])
+
+  const resetState = () => {
+    setRoom(undefined)
+    setCallbackId(undefined)
+    setIsPending(false)
+    popupManager.clearState()
+  }
+
+  if (isPending) {
+    return (
+      <div>
+        <Spinner size={34} />
+      </div>
+    )
+  }
+
+  return (
+    <div
+      className="p-6"
+      style={{
+        display: 'flex',
+        justifyContent: 'start',
+        alignItems: 'start',
+        border: 'none',
+      }}
+    >
+      {roomUrl && room?.slug ? (
+        <VStack justify={'start'} alignItems={'start'} gap={0.25}>
+          <HStack>
+            <Link
+              className={buttonRecipe({ size: 'sm' })}
+              href={roomUrl}
+              target="_blank"
+              style={{
+                textWrap: 'nowrap',
+              }}
+            >
+              <VisioIcon />
+              {t('joinButton')}
+            </Link>
+            <HStack gap={0}>
+              <Button
+                variant="quaternaryText"
+                square
+                icon={<RiFileCopyLine />}
+                tooltip={t('copyLinkTooltip')}
+                onPress={() => {
+                  navigator.clipboard.writeText(roomUrl)
+                }}
+              />
+              {searchParams.get('readOnly') === 'false' && (
+                <Button
+                  variant="quaternaryText"
+                  square
+                  icon={<RiCloseLine />}
+                  onPress={resetState}
+                  aria-label={t('resetLabel')}
+                />
+              )}
+            </HStack>
+          </HStack>
+          <VStack justify={'start'} alignItems="start" gap={0.25}>
+            <Text variant={'smNote'} margin={false} centered={false}>
+              {roomUrl.replace('https://', '')}
+            </Text>
+            <Text variant={'smNote'} margin={false} centered={false}>
+              {t('participantLimit')}
+            </Text>
+          </VStack>
+        </VStack>
+      ) : (
+        <div
+          className={css({
+            minHeight: '46px',
+            display: 'flex',
+            flexDirection: 'column',
+            justifyContent: 'center',
+          })}
+        >
+          {/*
+           * Using popup for Visio to access session cookies (blocked in iframes).
+           * If authenticated: Popup creates room and returns data directly.
+           * If not: Popup sends callbackId, redirects to login, then backend
+           * associates new room with callbackId after authentication.
+           */}
+          <Button
+            onPress={() => {
+              setIsPending(true)
+              popupManager.createPopupWindow(() => {
+                setIsPending(false)
+              })
+            }}
+            size="sm"
+          >
+            <VisioIcon />
+            {t('createButton')}
+          </Button>
+        </div>
+      )}
+    </div>
+  )
+}
@@ -0,0 +1,76 @@
+import { useEffect, useMemo } from 'react'
+import { css } from '@/styled-system/css'
+import { generateRoomId, useCreateRoom } from '../../rooms'
+import { useUser } from '@/features/auth'
+import { Spinner } from '@/primitives/Spinner'
+import { CallbackIdHandler } from '../utils/CallbackIdHandler'
+import { PopupWindow } from '../utils/PopupWindow'
+
+const callbackIdHandler = new CallbackIdHandler()
+const popupWindow = new PopupWindow()
+
+export const CreatePopup = () => {
+  const { isLoggedIn } = useUser({ fetchUserOptions: { attemptSilent: false } })
+  const { mutateAsync: createRoom } = useCreateRoom()
+
+  const callbackId = useMemo(() => callbackIdHandler.getOrCreate(), [])
+
+  /**
+   * Handle unauthenticated users by redirecting to login
+   *
+   * When redirecting to authentication, the window.location change breaks the connection
+   * between this popup and its parent window. We need to send the callbackId to the parent
+   * before redirecting so it can re-establish connection after authentication completes.
+   * This prevents the popup from becoming orphaned and ensures state consistency.
+   */
+  useEffect(() => {
+    if (isLoggedIn === false) {
+      // redirection loses the connection to the manager
+      // prevent it passing an async callback id
+      popupWindow.sendCallbackId(callbackId, () => {
+        popupWindow.navigateToAuthentication()
+      })
+    }
+  }, [isLoggedIn, callbackId])
+
+  /**
+   * Automatically create meeting room once user is authenticated
+   * This effect will trigger either immediately if the user is already logged in,
+   * or after successful authentication and return to this popup
+   */
+  useEffect(() => {
+    const createMeetingRoom = async () => {
+      try {
+        const slug = generateRoomId()
+        const roomData = await createRoom({
+          slug,
+          callbackId,
+        })
+        // Send room data back to parent window and clean up resources
+        popupWindow.sendRoomData(roomData, () => {
+          callbackIdHandler.clear()
+          popupWindow.close()
+        })
+      } catch (error) {
+        console.error('Failed to create meeting room:', error)
+      }
+    }
+    if (isLoggedIn && callbackId) {
+      createMeetingRoom()
+    }
+  }, [isLoggedIn, callbackId, createRoom])
+
+  return (
+    <div
+      className={css({
+        display: 'flex',
+        justifyContent: 'center',
+        alignItems: 'center',
+        height: '100%',
+        width: '100%',
+      })}
+    >
+      <Spinner />
+    </div>
+  )
+}
@@ -0,0 +1,45 @@
+export class CallbackIdHandler {
+  private storageKey = 'popup_callback_id'
+
+  private generateId(): string {
+    return (
+      Math.random().toString(36).substring(2, 15) +
+      Math.random().toString(36).substring(2, 15)
+    )
+  }
+
+  /**
+   * Gets an existing callback ID or creates a new one
+   */
+  public getOrCreate(): string {
+    const existingId = this.get()
+    if (existingId) {
+      return existingId
+    }
+
+    const newId = this.generateId()
+    this.set(newId)
+    return newId
+  }
+
+  /**
+   * Gets the current callback ID if one exists
+   */
+  public get(): string | null {
+    return sessionStorage.getItem(this.storageKey)
+  }
+
+  /**
+   * Sets a callback ID
+   */
+  private set(id: string): void {
+    sessionStorage.setItem(this.storageKey, id)
+  }
+
+  /**
+   * Removes the current callback ID
+   */
+  public clear(): void {
+    sessionStorage.removeItem(this.storageKey)
+  }
+}
--- a/Show More
+++ b/Show More