diff --git a/appinfo/routes.php b/appinfo/routes.php
index b7487b73..e0174e4f 100644
--- a/appinfo/routes.php
+++ b/appinfo/routes.php
@@ -10,10 +10,8 @@
         ['name' => 'settings#create', 'url' => '/api/settings', 'verb' => 'POST'],
         ['name' => 'settings#load',  'url' => '/api/settings/load', 'verb' => 'POST'],
 
-        // Prometheus metrics endpoint.
-        ['name' => 'metrics#index', 'url' => '/api/metrics', 'verb' => 'GET'],
-        // Health check endpoint.
-        ['name' => 'health#index', 'url' => '/api/health', 'verb' => 'GET'],
+        // Meeting lifecycle transitions.
+        ['name' => 'meeting#lifecycle', 'url' => '/api/meetings/{id}/lifecycle', 'verb' => 'POST'],
 
         // SPA catch-all — same controller as the index route; must use a distinct route name
         // (duplicate names replace the earlier route in Symfony, which breaks GET /).
diff --git a/lib/Controller/MeetingController.php b/lib/Controller/MeetingController.php
new file mode 100644
index 00000000..1bf2e6e7
--- /dev/null
+++ b/lib/Controller/MeetingController.php
@@ -0,0 +1,100 @@
+<?php
+
+/**
+ * Decidesk Meeting Controller
+ *
+ * Controller for meeting-specific operations, particularly lifecycle transitions.
+ *
+ * @category Controller
+ * @package  OCA\Decidesk\Controller
+ *
+ * @author    Conduction Development Team <dev@conductio.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git-id>
+ *
+ * @link https://conduction.nl
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-2.1
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Decidesk\Controller;
+
+use OCA\Decidesk\AppInfo\Application;
+use OCA\Decidesk\Service\MeetingService;
+use OCP\AppFramework\Controller;
+use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\Attribute\NoAdminRequired;
+use OCP\AppFramework\Http\JSONResponse;
+use OCP\IRequest;
+
+/**
+ * Controller for meeting lifecycle transitions.
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-2.1
+ */
+class MeetingController extends Controller
+{
+    /**
+     * Constructor for MeetingController.
+     *
+     * @param IRequest       $request        The HTTP request
+     * @param MeetingService $meetingService The meeting service
+     *
+     * @return void
+     */
+    public function __construct(
+        IRequest $request,
+        private readonly MeetingService $meetingService,
+    ) {
+        parent::__construct(appName: Application::APP_ID, request: $request);
+    }//end __construct()
+
+    /**
+     * Apply a lifecycle transition to a meeting.
+     *
+     * Any authenticated Nextcloud user may call this endpoint. Meeting-level
+     * permission is enforced by OpenRegister's ObjectService: find() returns null
+     * (→ 422) when the caller lacks read access, and updateFromArray() throws an
+     * exception (→ 422 generic) when the caller lacks write access on the specific
+     * meeting object. In Dutch local government the meeting clerk is not a Nextcloud
+     * system administrator, so this route must be available to all logged-in users.
+     *
+     * Expects JSON body: { "action": "<schedule|open|pause|resume|adjourn|close>" }
+     *
+     * @param string $id UUID of the meeting
+     *
+     * @NoAdminRequired
+     *
+     * @spec openspec/changes/p2-meeting-management/tasks.md#task-2.1
+     *
+     * @return JSONResponse HTTP 200 with updated meeting on success; 422 if transition is invalid
+     */
+    #[NoAdminRequired]
+    public function lifecycle(string $id): JSONResponse
+    {
+        $action = $this->request->getParam('action', '');
+
+        if (empty($action) === true) {
+            return new JSONResponse(
+                ['message' => "Missing required parameter 'action'."],
+                Http::STATUS_UNPROCESSABLE_ENTITY
+            );
+        }
+
+        $result = $this->meetingService->transition(meetingId: $id, action: $action);
+
+        if ($result['success'] === false) {
+            return new JSONResponse(
+                ['message' => $result['message']],
+                Http::STATUS_UNPROCESSABLE_ENTITY
+            );
+        }
+
+        return new JSONResponse($result);
+
+    }//end lifecycle()
+}//end class
diff --git a/lib/Service/MeetingService.php b/lib/Service/MeetingService.php
new file mode 100644
index 00000000..8f30799a
--- /dev/null
+++ b/lib/Service/MeetingService.php
@@ -0,0 +1,194 @@
+<?php
+
+/**
+ * Decidesk Meeting Service
+ *
+ * Service for managing meeting lifecycle state transitions.
+ *
+ * @category Service
+ * @package  OCA\Decidesk\Service
+ *
+ * @author    Conduction Development Team <dev@conductio.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git-id>
+ *
+ * @link https://conduction.nl
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-1.1
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Decidesk\Service;
+
+use OCP\AppFramework\Db\DoesNotExistException;
+use Psr\Container\ContainerInterface;
+use Psr\Log\LoggerInterface;
+
+/**
+ * Service for managing meeting lifecycle state transitions.
+ *
+ * Implements the state machine defined in design.md:
+ *   draft → scheduled → opened ↔ paused → adjourned → (re-)opened → closed
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-1.1
+ */
+class MeetingService
+{
+
+    /**
+     * Valid lifecycle transitions keyed by action name.
+     *
+     * Each entry defines:
+     * - `from`: the set of states from which this action is permitted
+     * - `to`:   the resulting state after the transition
+     *
+     * @var array<string, array{from: string[], to: string}>
+     */
+    private const TRANSITIONS = [
+        'schedule' => ['from' => ['draft'],                                        'to' => 'scheduled'],
+        'open'     => ['from' => ['scheduled', 'adjourned'],                       'to' => 'opened'],
+        'pause'    => ['from' => ['opened'],                                        'to' => 'paused'],
+        'resume'   => ['from' => ['paused'],                                        'to' => 'opened'],
+        'adjourn'  => ['from' => ['opened', 'paused'],                             'to' => 'adjourned'],
+        'close'    => ['from' => ['scheduled', 'opened', 'paused', 'adjourned'],   'to' => 'closed'],
+    ];
+
+    /**
+     * Constructor for MeetingService.
+     *
+     * @param ContainerInterface $container The DI container (used to retrieve ObjectService)
+     * @param LoggerInterface    $logger    The logger
+     *
+     * @spec openspec/changes/p2-meeting-management/tasks.md#task-1.1
+     */
+    public function __construct(
+        private readonly ContainerInterface $container,
+        private readonly LoggerInterface $logger,
+    ) {
+    }//end __construct()
+
+    /**
+     * Returns the list of valid action names for a given lifecycle state.
+     *
+     * @param string $currentLifecycle The current lifecycle value of the meeting
+     *
+     * @spec openspec/changes/p2-meeting-management/tasks.md#task-1.1
+     *
+     * @return string[] List of action names the caller may invoke
+     */
+    public function getAvailableActions(string $currentLifecycle): array
+    {
+        $available = [];
+        foreach (self::TRANSITIONS as $action => $transition) {
+            if (in_array($currentLifecycle, $transition['from'], true) === true) {
+                $available[] = $action;
+            }
+        }
+
+        return $available;
+
+    }//end getAvailableActions()
+
+    /**
+     * Apply a lifecycle transition to a meeting object.
+     *
+     * Validates that `$action` is a known transition and that the meeting's
+     * current lifecycle state permits the transition, then patches the object
+     * via OpenRegister's ObjectService.
+     *
+     * @param string $meetingId UUID of the meeting to transition
+     * @param string $action    Transition action: schedule|open|pause|resume|adjourn|close
+     *
+     * @spec openspec/changes/p2-meeting-management/tasks.md#task-1.1
+     *
+     * @return array{success: bool, meeting: array|null, message: string}
+     */
+    public function transition(string $meetingId, string $action): array
+    {
+        if (isset(self::TRANSITIONS[$action]) === false) {
+            return [
+                'success' => false,
+                'meeting' => null,
+                'message' => 'Unknown action. Valid actions: '.implode(', ', array_keys(self::TRANSITIONS)).'.',
+            ];
+        }
+
+        $transition = self::TRANSITIONS[$action];
+
+        try {
+            /*
+             * @var \OCA\OpenRegister\Service\ObjectService $objectService
+             */
+
+            $objectService = $this->container->get('OCA\OpenRegister\Service\ObjectService');
+
+            // Object-level read ACL: OpenRegister's ObjectService::find() resolves the
+            // current Nextcloud session user and returns null when the caller lacks read
+            // access to the requested object (same behaviour as a missing object).
+            // This prevents callers without read access from probing meeting UUIDs.
+            $entity = $objectService->find(id: $meetingId);
+
+            if ($entity === null) {
+                return [
+                    'success' => false,
+                    'meeting' => null,
+                    'message' => "Meeting '$meetingId' not found.",
+                ];
+            }
+
+            $currentLifecycle = $entity->getObject()['lifecycle'] ?? 'draft';
+
+            if (in_array($currentLifecycle, $transition['from'], true) === false) {
+                return [
+                    'success' => false,
+                    'meeting' => null,
+                    'message' => "Cannot '$action' a meeting in '$currentLifecycle' state. "
+                        ."Allowed from: ".implode(', ', $transition['from']).".",
+                ];
+            }
+
+            // Object-level write ACL: OpenRegister's ObjectService::updateFromArray()
+            // checks that the current Nextcloud session user has write access to this
+            // specific object before applying the patch. If the caller lacks write
+            // access an exception is thrown and caught by the \Throwable handler below,
+            // returning a generic error response without leaking object details.
+            $updated = $objectService->updateFromArray(
+                id: $meetingId,
+                object: ['lifecycle' => $transition['to']],
+                updateVersion: true,
+                patch: true,
+            );
+
+            $this->logger->info(
+                'Decidesk: meeting lifecycle transitioned',
+                ['id' => $meetingId, 'action' => $action, 'to' => $transition['to']]
+            );
+
+            return [
+                'success' => true,
+                'meeting' => $updated->jsonSerialize(),
+                'message' => "Meeting transitioned to '{$transition['to']}'.",
+            ];
+        } catch (DoesNotExistException) {
+            return [
+                'success' => false,
+                'meeting' => null,
+                'message' => "Meeting '$meetingId' not found.",
+            ];
+        } catch (\Throwable $e) {
+            $this->logger->error(
+                'Decidesk: meeting lifecycle transition failed',
+                ['id' => $meetingId, 'action' => $action, 'exception' => $e->getMessage()]
+            );
+            return [
+                'success' => false,
+                'meeting' => null,
+                'message' => 'Transition failed. See server log for details.',
+            ];
+        }//end try
+
+    }//end transition()
+}//end class
diff --git a/lib/Service/SettingsService.php b/lib/Service/SettingsService.php
index 1d6483bb..ae67be86 100644
--- a/lib/Service/SettingsService.php
+++ b/lib/Service/SettingsService.php
@@ -105,6 +105,10 @@ public function getSettings(): array
             $settings,
             [
                 'openregisters' => $this->isOpenRegisterAvailable(),
+                // UI-HINT ONLY: isAdmin is used exclusively to control frontend rendering
+                // (e.g. showing/hiding admin-only settings panels). It MUST NOT be used
+                // for server-side access control decisions. All admin-gated backend routes
+                // enforce the admin check independently via IGroupManager::isAdmin().
                 'isAdmin'       => $isAdmin,
             ]
         );
diff --git a/openspec/changes/p2-meeting-management/design.md b/openspec/changes/p2-meeting-management/design.md
new file mode 100644
index 00000000..7e6b8917
--- /dev/null
+++ b/openspec/changes/p2-meeting-management/design.md
@@ -0,0 +1,115 @@
+## Context
+
+Decidesk is a Nextcloud app built on the **thin-client** pattern with OpenRegister as the data layer. The `p1-crud-operations` change already delivered the Meeting entity schema, CRUD views, and basic detail pages. This change (p2) adds the domain-specific business logic for meeting management that cannot be expressed as generic CRUD:
+
+- **Meeting lifecycle** — a state machine governing valid state transitions (draft → scheduled → opened → paused → adjourned → closed). Business rules (e.g. you cannot open a closed meeting) must be enforced server-side, not just in the frontend.
+- **Lifecycle UI** — action buttons in `MeetingDetail.vue` that reflect the current state and call the lifecycle endpoint.
+
+Everything else (attendance lists, speaking time, document attachments, series linking) is covered by the OpenRegister platform's built-in file attachments, relations, and CRUD — no custom code is needed.
+
+## Goals / Non-Goals
+
+**Goals:**
+- Server-side lifecycle state machine for Meeting (`MeetingService::transition()`)
+- Thin `MeetingController` exposing `POST /api/meetings/{id}/lifecycle`
+- Vue component `MeetingLifecycle.vue` rendering valid action buttons from the current state
+- PHPUnit tests (≥3 test methods each) for `MeetingService` and `MeetingController`
+
+**Non-Goals:**
+- Attendance presence-list tracking beyond what OpenRegister relations provide (p3)
+- Speaking-time clock / timeboxing UI (p3)
+- Meeting template CRUD (relies on OpenRegister schema defaults — p3)
+- ORI/Open-RIS publication (p3)
+
+## Decisions
+
+### 1. Server-side state machine in MeetingService
+**Decision**: Lifecycle validation lives in `lib/Service/MeetingService.php` as a static transition table.
+**Rationale**: ADR-003 mandates all business logic in the Service layer. The frontend cannot be trusted to enforce state machine rules — a malicious client could send any lifecycle value via `objectStore.saveObject()`.
+**Alternative considered**: Frontend-only with schema validation — rejected because schema `enum` constraints allow any valid value, not only valid transitions from the current state.
+
+### 2. PATCH semantics for lifecycle update
+**Decision**: The lifecycle endpoint calls `ObjectService::updateFromArray($uuid, ['lifecycle' => $newState], updateVersion: true, patch: true)`.
+**Rationale**: Only the lifecycle field changes; patch mode preserves all other fields. `updateVersion: true` triggers OpenRegister's audit trail.
+
+### 3. Single POST endpoint with `action` body param
+**Decision**: `POST /api/meetings/{id}/lifecycle` with `{ "action": "open|pause|resume|adjourn|close|schedule" }`.
+**Rationale**: ADR-002 forbids custom HTTP methods/verbs. Using a single endpoint with an action parameter follows the NL API Design guidelines (7.2 — use POST for state transitions that cannot be expressed as a resource change).
+**Alternative considered**: PUT to `/api/meetings/{id}` with new lifecycle value — rejected because it bypasses server-side transition validation.
+
+### 4. MeetingLifecycle.vue renders available actions
+**Decision**: A dedicated `MeetingLifecycle.vue` component inside `MeetingDetail.vue` reads the current `lifecycle` value from the object and renders only the valid next-step action buttons.
+**Rationale**: ADR-004 single responsibility: the detail page should not contain transition logic. Centralising in a component makes it reusable for future meeting list bulk-actions.
+
+## Lifecycle State Machine
+
+```
+draft  ──schedule──►  scheduled
+                           │
+                          open
+                           │
+                           ▼
+            ◄──resume── opened ──pause──►  paused
+                │                              │
+               adjourn                      adjourn
+                │                              │
+                ▼                              ▼
+            adjourned  ◄─────────────── adjourned
+                │
+               open (re-open)
+                │
+                ▼
+             opened
+                │
+               close
+                ▼
+             closed  (terminal)
+```
+
+| Action   | Valid from states             | Result state |
+|----------|-------------------------------|--------------|
+| schedule | draft                         | scheduled    |
+| open     | scheduled, adjourned          | opened       |
+| pause    | opened                        | paused       |
+| resume   | paused                        | opened       |
+| adjourn  | opened, paused                | adjourned    |
+| close    | opened, paused, adjourned, scheduled | closed |
+
+## Reuse Analysis (ADR-012)
+
+- CRUD, pagination, filtering — OpenRegister `ObjectService` (no rebuild)
+- File attachments on meeting — OpenRegister `FileService` + `CnObjectSidebar` (no rebuild)
+- Audit trail for lifecycle changes — OpenRegister automatic (no rebuild)
+- Notifications — `NotificationService` available for future meeting-open notifications
+- Frontend list/detail pattern — `CnIndexPage` + `CnDetailPage` (already implemented in p1)
+
+## Seed Data (Dutch examples — lifecycle transitions)
+
+These objects supplement the seed data from `p1-crud-operations`. No schema changes needed.
+
+### Meeting (lifecycle examples)
+
+```json
+[
+  {
+    "@self": { "register": "decidesk", "schema": "Meeting", "slug": "raadsvergadering-2026-04-01" },
+    "title": "Raadsvergadering 1 april 2026",
+    "meetingType": "regular",
+    "scheduledDate": "2026-04-01T19:30:00Z",
+    "meetingMode": "in-person",
+    "lifecycle": "closed"
+  },
+  {
+    "@self": { "register": "decidesk", "schema": "Meeting", "slug": "commissie-sociaal-2026-04-15" },
+    "title": "Commissie Sociaal 15 april 2026",
+    "meetingType": "committee",
+    "scheduledDate": "2026-04-15T14:00:00Z",
+    "meetingMode": "hybrid",
+    "lifecycle": "scheduled"
+  }
+]
+```
+
+## Status
+
+`pr-created`
diff --git a/openspec/changes/p2-meeting-management/tasks.md b/openspec/changes/p2-meeting-management/tasks.md
new file mode 100644
index 00000000..1a4be80d
--- /dev/null
+++ b/openspec/changes/p2-meeting-management/tasks.md
@@ -0,0 +1,37 @@
+## 1. Backend — MeetingService
+
+- [x] 1.1 Create `lib/Service/MeetingService.php` — stateless service with `transition(string $meetingId, string $action): array`. Defines the state-machine transition table (`TRANSITIONS` constant). Validates the action name and current lifecycle state, then patches the lifecycle via `ObjectService::updateFromArray($id, ['lifecycle' => $newState], updateVersion: true, patch: true)`. Returns `['success' => bool, 'meeting' => array|null, 'message' => string]`.
+- [x] 1.2 Add `@spec openspec/changes/p2-meeting-management/tasks.md#task-1.1` to every class and public method in `MeetingService.php`.
+
+## 2. Backend — MeetingController
+
+- [x] 2.1 Create `lib/Controller/MeetingController.php` — thin controller with one method: `lifecycle(string $id): JSONResponse`. Reads `action` from request body, calls `MeetingService::transition($id, $action)`, returns the result. Returns HTTP 422 if transition invalid, 200 on success. Annotate with `@NoAdminRequired`.
+- [x] 2.2 Add `@spec openspec/changes/p2-meeting-management/tasks.md#task-2.1` to class and method.
+- [x] 2.3 Register route in `appinfo/routes.php`: `POST /api/meetings/{id}/lifecycle` → `meeting#lifecycle`.
+
+## 3. Tests — PHPUnit
+
+- [x] 3.1 Create `tests/Unit/Service/MeetingServiceTest.php` with ≥3 test methods covering:
+  - Valid transition (e.g. scheduled → opened via `open`) returns success
+  - Invalid transition (e.g. trying to `pause` a draft) returns failure with message
+  - Unknown action name returns failure with message
+- [x] 3.2 Create `tests/unit/Controller/MeetingControllerTest.php` with ≥3 test methods covering:
+  - Valid action returns HTTP 200 with meeting data
+  - Invalid transition returns HTTP 422
+  - Missing action returns HTTP 422
+
+## 4. Frontend — MeetingLifecycle Component
+
+- [x] 4.1 Create `src/components/MeetingLifecycle.vue` — receives `meeting` object as prop. Computes the list of valid actions for the current `lifecycle` value using the same transition table. Renders one `NcButton` per valid action. On click, sends `POST /api/meetings/{id}/lifecycle` and emits `lifecycle-updated` with the new meeting object.
+- [x] 4.2 Add `@spec openspec/changes/p2-meeting-management/tasks.md#task-4.1` JSDoc comment to the component.
+
+## 5. Frontend — MeetingDetail update
+
+- [x] 5.1 Import and render `MeetingLifecycle` inside `MeetingDetail.vue` in the `#properties` slot below the `CnDetailCard`. Pass `object` as the `meeting` prop. On `lifecycle-updated` event, call `objectStore.fetchObject('meeting', id)` to refresh the view.
+
+## 6. Verification
+
+- [x] 6.1 Run `composer check:strict` — all PHP quality checks pass
+- [x] 6.2 Run `npm run lint` — ESLint passes
+- [ ] 6.3 Verify lifecycle transition: schedule a draft meeting via UI, open it, pause it, resume it, close it — all state changes persist
+- [ ] 6.4 Verify invalid transition (e.g. closing an already-closed meeting) returns 422 and shows no UI button
diff --git a/src/components/MeetingLifecycle.vue b/src/components/MeetingLifecycle.vue
new file mode 100644
index 00000000..d2d6d4fd
--- /dev/null
+++ b/src/components/MeetingLifecycle.vue
@@ -0,0 +1,172 @@
+<!-- SPDX-License-Identifier: EUPL-1.2 -->
+<!-- Copyright (C) 2026 Conduction B.V. -->
+
+<!--
+ @spec openspec/changes/p2-meeting-management/tasks.md#task-4.1
+-->
+<template>
+	<div class="meeting-lifecycle">
+		<div class="meeting-lifecycle__state">
+			<span class="meeting-lifecycle__label">{{ t('decidesk', 'State') }}:</span>
+			<NcBadge :text="currentLifecycleLabel" :type="lifecycleBadgeType" />
+		</div>
+
+		<div v-if="availableActions.length > 0" class="meeting-lifecycle__actions">
+			<NcButton
+				v-for="action in availableActions"
+				:key="action.name"
+				:type="action.type"
+				:disabled="loading"
+				@click="applyTransition(action.name)">
+				{{ action.label }}
+			</NcButton>
+		</div>
+
+		<p v-else class="meeting-lifecycle__terminal">
+			{{ t('decidesk', 'This meeting has been closed.') }}
+		</p>
+	</div>
+</template>
+
+<script>
+import axios from '@nextcloud/axios'
+import { showError } from '@nextcloud/dialogs'
+import { generateUrl } from '@nextcloud/router'
+// NcButton and NcBadge are not re-exported by @conduction/nextcloud-vue (only Cn* components are);
+// imported directly from @nextcloud/vue until the wrapper layer adds them.
+import { NcButton, NcBadge } from '@nextcloud/vue'
+
+/**
+ * Meeting lifecycle component — renders valid transition buttons for the current state.
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-4.1
+ */
+export default {
+	name: 'MeetingLifecycle',
+	components: { NcButton, NcBadge },
+	props: {
+		/**
+		 * The meeting object (must contain `id` and `lifecycle` fields).
+		 */
+		meeting: {
+			type: Object,
+			required: true,
+		},
+	},
+	emits: ['lifecycle-updated'],
+	data() {
+		return {
+			loading: false,
+		}
+	},
+	computed: {
+		currentLifecycle() {
+			return this.meeting?.lifecycle ?? 'draft'
+		},
+		currentLifecycleLabel() {
+			const labels = {
+				draft: this.t('decidesk', 'Draft'),
+				scheduled: this.t('decidesk', 'Scheduled'),
+				opened: this.t('decidesk', 'Opened'),
+				paused: this.t('decidesk', 'Paused'),
+				adjourned: this.t('decidesk', 'Adjourned'),
+				closed: this.t('decidesk', 'Closed'),
+			}
+			return labels[this.currentLifecycle] ?? this.currentLifecycle
+		},
+		lifecycleBadgeType() {
+			const types = {
+				draft: 'default',
+				scheduled: 'primary',
+				opened: 'success',
+				paused: 'warning',
+				adjourned: 'warning',
+				closed: 'error',
+			}
+			return types[this.currentLifecycle] ?? 'default'
+		},
+		availableActions() {
+			// WARNING: This transition map is a client-side mirror of MeetingService::TRANSITIONS
+			// on the backend (lib/Service/MeetingService.php). If a state or action is added or
+			// removed on the backend, this map MUST be updated in the same PR to stay in sync.
+			// Divergence will cause buttons to appear/disappear incorrectly without any error.
+			const transitions = {
+				draft: [
+					{ name: 'schedule', label: this.t('decidesk', 'Schedule'), type: 'primary' },
+				],
+				scheduled: [
+					{ name: 'open', label: this.t('decidesk', 'Open Meeting'), type: 'primary' },
+					{ name: 'close', label: this.t('decidesk', 'Cancel'), type: 'error' },
+				],
+				opened: [
+					{ name: 'pause', label: this.t('decidesk', 'Pause'), type: 'secondary' },
+					{ name: 'adjourn', label: this.t('decidesk', 'Adjourn'), type: 'secondary' },
+					{ name: 'close', label: this.t('decidesk', 'Close Meeting'), type: 'error' },
+				],
+				paused: [
+					{ name: 'resume', label: this.t('decidesk', 'Resume'), type: 'primary' },
+					{ name: 'adjourn', label: this.t('decidesk', 'Adjourn'), type: 'secondary' },
+					{ name: 'close', label: this.t('decidesk', 'Close Meeting'), type: 'error' },
+				],
+				adjourned: [
+					{ name: 'open', label: this.t('decidesk', 'Re-open'), type: 'primary' },
+					{ name: 'close', label: this.t('decidesk', 'Close Meeting'), type: 'error' },
+				],
+				closed: [],
+			}
+			return transitions[this.currentLifecycle] ?? []
+		},
+	},
+	methods: {
+		async applyTransition(action) {
+			this.loading = true
+			try {
+				const meetingId = this.meeting['@self']?.id ?? this.meeting.id
+				const url = generateUrl(`/apps/decidesk/api/meetings/${meetingId}/lifecycle`)
+				const { data } = await axios.post(url, { action })
+				if (data.success) {
+					this.$emit('lifecycle-updated', data.meeting)
+				} else {
+					showError(data.message ?? this.t('decidesk', 'Lifecycle transition failed.'))
+				}
+			} catch (error) {
+				showError(error.response?.data?.message ?? this.t('decidesk', 'Lifecycle transition failed.'))
+			} finally {
+				this.loading = false
+			}
+		},
+	},
+}
+</script>
+
+<style scoped>
+.meeting-lifecycle {
+	display: flex;
+	flex-direction: column;
+	gap: calc(var(--default-grid-baseline) * 2);
+	padding: var(--default-grid-baseline) 0;
+}
+
+.meeting-lifecycle__state {
+	display: flex;
+	align-items: center;
+	gap: var(--default-grid-baseline);
+}
+
+.meeting-lifecycle__label {
+	color: var(--color-text-maxcontrast);
+	font-weight: bold;
+}
+
+.meeting-lifecycle__actions {
+	display: flex;
+	flex-wrap: wrap;
+	gap: var(--default-grid-baseline);
+}
+
+.meeting-lifecycle__terminal {
+	color: var(--color-text-maxcontrast);
+	margin: 0;
+	font-style: italic;
+}
+</style>
diff --git a/src/views/MeetingDetail.vue b/src/views/MeetingDetail.vue
index 27c3deb0..06d462e9 100644
--- a/src/views/MeetingDetail.vue
+++ b/src/views/MeetingDetail.vue
@@ -16,6 +16,11 @@
 			<CnDetailCard :title="t('decidesk', 'Properties')">
 				<CnDetailGrid :items="propertyItems" />
 			</CnDetailCard>
+			<CnDetailCard :title="t('decidesk', 'Lifecycle')">
+				<MeetingLifecycle
+					:meeting="object"
+					@lifecycle-updated="onLifecycleUpdated" />
+			</CnDetailCard>
 		</template>
 
 		<template #relations>
@@ -62,10 +67,11 @@
 <script>
 import { CnDetailPage, CnDetailCard, CnDetailGrid, CnObjectSidebar, CnSchemaFormDialog, CnDeleteDialog, useDetailView } from '@conduction/nextcloud-vue'
 import { useObjectStore } from '../store/store.js'
+import MeetingLifecycle from '../components/MeetingLifecycle.vue'
 
 export default {
 	name: 'MeetingDetail',
-	components: { CnDetailPage, CnDetailCard, CnDetailGrid, CnObjectSidebar, CnSchemaFormDialog, CnDeleteDialog },
+	components: { CnDetailPage, CnDetailCard, CnDetailGrid, CnObjectSidebar, CnSchemaFormDialog, CnDeleteDialog, MeetingLifecycle },
 	props: {
 		id: { type: String, required: true },
 	},
@@ -95,7 +101,6 @@ export default {
 				{ label: this.t('decidesk', 'End Date'), value: this.object.endDate },
 				{ label: this.t('decidesk', 'Location'), value: this.object.location },
 				{ label: this.t('decidesk', 'Mode'), value: this.object.meetingMode },
-				{ label: this.t('decidesk', 'Lifecycle'), value: this.object.lifecycle },
 				{ label: this.t('decidesk', 'Quorum Required'), value: this.object.quorumRequired },
 				{ label: this.t('decidesk', 'Series'), value: this.object.series },
 			]
@@ -106,6 +111,9 @@ export default {
 			this.editing = false
 			this.objectStore.fetchObject('meeting', this.id)
 		},
+		onLifecycleUpdated() {
+			this.objectStore.fetchObject('meeting', this.id)
+		},
 	},
 }
 </script>
diff --git a/src/views/settings/Settings.vue b/src/views/settings/Settings.vue
index 42c04118..7c57f7e4 100644
--- a/src/views/settings/Settings.vue
+++ b/src/views/settings/Settings.vue
@@ -58,7 +58,7 @@ export default {
 			const settingsStore = useSettingsStore()
 			const result = await settingsStore.saveSettings(this.form)
 			if (result) {
-				this.successMessage = t('decidesk', 'Settings saved successfully')
+				this.successMessage = this.t('decidesk', 'Settings saved successfully')
 			}
 			this.saving = false
 		},
diff --git a/tests/Unit/Service/MeetingServiceTest.php b/tests/Unit/Service/MeetingServiceTest.php
new file mode 100644
index 00000000..2f9702ff
--- /dev/null
+++ b/tests/Unit/Service/MeetingServiceTest.php
@@ -0,0 +1,285 @@
+<?php
+
+/**
+ * Unit tests for MeetingService.
+ *
+ * @category Test
+ * @package  OCA\Decidesk\Tests\Unit\Service
+ *
+ * @author    Conduction Development Team <dev@conductio.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git-id>
+ *
+ * @link https://conduction.nl
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-3.1
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Decidesk\Tests\Unit\Service;
+
+use OCA\Decidesk\Service\MeetingService;
+use OCA\OpenRegister\Db\ObjectEntity;
+use OCA\OpenRegister\Service\ObjectService;
+use OCP\AppFramework\Db\DoesNotExistException;
+use PHPUnit\Framework\MockObject\MockObject;
+use PHPUnit\Framework\TestCase;
+use Psr\Container\ContainerInterface;
+use Psr\Log\LoggerInterface;
+
+/**
+ * Tests for MeetingService lifecycle transitions.
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-3.1
+ */
+class MeetingServiceTest extends TestCase
+{
+
+    /**
+     * Service under test.
+     *
+     * @var MeetingService
+     */
+    private MeetingService $service;
+
+    /**
+     * Mock DI container.
+     *
+     * @var ContainerInterface&MockObject
+     */
+    private ContainerInterface&MockObject $container;
+
+    /**
+     * Mock logger.
+     *
+     * @var LoggerInterface&MockObject
+     */
+    private LoggerInterface&MockObject $logger;
+
+    /**
+     * Mock ObjectService from OpenRegister.
+     *
+     * @var ObjectService&MockObject
+     */
+    private ObjectService&MockObject $objectService;
+
+    /**
+     * Set up test fixtures.
+     *
+     * @return void
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        $this->objectService = $this->createMock(originalClassName: ObjectService::class);
+        $this->container     = $this->createMock(originalClassName: ContainerInterface::class);
+        $this->logger        = $this->createMock(originalClassName: LoggerInterface::class);
+
+        $this->container->method('get')
+            ->with('OCA\OpenRegister\Service\ObjectService')
+            ->willReturn($this->objectService);
+
+        $this->service = new MeetingService(
+            container: $this->container,
+            logger: $this->logger,
+        );
+
+    }//end setUp()
+
+    /**
+     * Helper to build a mock ObjectEntity with a given lifecycle value.
+     *
+     * @param string $lifecycle The lifecycle state to set on the mock entity
+     *
+     * @return ObjectEntity&MockObject
+     */
+    private function buildMockEntity(string $lifecycle): ObjectEntity&MockObject
+    {
+        $entity = $this->createMock(originalClassName: ObjectEntity::class);
+        $entity->method('getObject')->willReturn(['lifecycle' => $lifecycle]);
+        $entity->method('jsonSerialize')->willReturn(['lifecycle' => $lifecycle, 'id' => 'test-uuid']);
+        return $entity;
+
+    }//end buildMockEntity()
+
+    /**
+     * Test that a valid transition (scheduled → open → opened) returns success.
+     *
+     * @return void
+     */
+    public function testValidTransitionReturnsSuccess(): void
+    {
+        $uuid         = 'aaaaaaaa-0000-0000-0000-000000000001';
+        $currentState = 'scheduled';
+        $entity       = $this->buildMockEntity($currentState);
+        $updatedEntity = $this->buildMockEntity('opened');
+
+        $this->objectService->expects($this->once())
+            ->method('find')
+            ->with(id: $uuid)
+            ->willReturn($entity);
+
+        $this->objectService->expects($this->once())
+            ->method('updateFromArray')
+            ->with(
+                id: $uuid,
+                object: ['lifecycle' => 'opened'],
+                updateVersion: true,
+                patch: true,
+            )
+            ->willReturn($updatedEntity);
+
+        $result = $this->service->transition(meetingId: $uuid, action: 'open');
+
+        self::assertTrue(condition: $result['success']);
+        self::assertSame(expected: 'opened', actual: $result['meeting']['lifecycle']);
+
+    }//end testValidTransitionReturnsSuccess()
+
+    /**
+     * Test that trying to pause a draft meeting returns a failure with a descriptive message.
+     *
+     * @return void
+     */
+    public function testInvalidTransitionReturnsFailure(): void
+    {
+        $uuid   = 'aaaaaaaa-0000-0000-0000-000000000002';
+        $entity = $this->buildMockEntity('draft');
+
+        $this->objectService->expects($this->once())
+            ->method('find')
+            ->with(id: $uuid)
+            ->willReturn($entity);
+
+        $this->objectService->expects($this->never())
+            ->method('updateFromArray');
+
+        $result = $this->service->transition(meetingId: $uuid, action: 'pause');
+
+        self::assertFalse(condition: $result['success']);
+        self::assertNull(actual: $result['meeting']);
+        self::assertStringContainsString(needle: 'draft', haystack: $result['message']);
+
+    }//end testInvalidTransitionReturnsFailure()
+
+    /**
+     * Test that an unknown action name returns a failure with a list of valid actions.
+     *
+     * @return void
+     */
+    public function testUnknownActionReturnsFailure(): void
+    {
+        $this->objectService->expects($this->never())
+            ->method('find');
+
+        $result = $this->service->transition(meetingId: 'some-uuid', action: 'fly-to-the-moon');
+
+        self::assertFalse(condition: $result['success']);
+        self::assertNull(actual: $result['meeting']);
+        self::assertStringContainsString(needle: 'Unknown action', haystack: $result['message']);
+
+    }//end testUnknownActionReturnsFailure()
+
+    /**
+     * Test that transitioning a non-existent meeting returns a failure.
+     *
+     * @return void
+     */
+    public function testMeetingNotFoundReturnsFailure(): void
+    {
+        $uuid = 'aaaaaaaa-0000-0000-0000-000000000099';
+
+        $this->objectService->expects($this->once())
+            ->method('find')
+            ->with(id: $uuid)
+            ->willReturn(null);
+
+        $result = $this->service->transition(meetingId: $uuid, action: 'open');
+
+        self::assertFalse(condition: $result['success']);
+        self::assertNull(actual: $result['meeting']);
+        self::assertStringContainsString(needle: 'not found', haystack: $result['message']);
+
+    }//end testMeetingNotFoundReturnsFailure()
+
+    /**
+     * Test that a DoesNotExistException thrown by ObjectService is handled gracefully.
+     *
+     * Covers the catch (DoesNotExistException) path in MeetingService::transition().
+     *
+     * @spec openspec/changes/p2-meeting-management/tasks.md#task-3.1
+     *
+     * @return void
+     */
+    public function testDoesNotExistExceptionReturnsFailure(): void
+    {
+        $uuid = 'aaaaaaaa-0000-0000-0000-000000000098';
+
+        $this->objectService->expects($this->once())
+            ->method('find')
+            ->with(id: $uuid)
+            ->willThrowException(new DoesNotExistException('Meeting not found'));
+
+        $result = $this->service->transition(meetingId: $uuid, action: 'open');
+
+        self::assertFalse(condition: $result['success']);
+        self::assertNull(actual: $result['meeting']);
+        self::assertStringContainsString(needle: 'not found', haystack: $result['message']);
+
+    }//end testDoesNotExistExceptionReturnsFailure()
+
+    /**
+     * Test that the full close path (opened → close → closed) works correctly.
+     *
+     * @return void
+     */
+    public function testCloseFromOpenedReturnsSuccess(): void
+    {
+        $uuid          = 'aaaaaaaa-0000-0000-0000-000000000003';
+        $entity        = $this->buildMockEntity('opened');
+        $updatedEntity = $this->buildMockEntity('closed');
+
+        $this->objectService->method('find')->willReturn($entity);
+        $this->objectService->method('updateFromArray')->willReturn($updatedEntity);
+
+        $result = $this->service->transition(meetingId: $uuid, action: 'close');
+
+        self::assertTrue(condition: $result['success']);
+        self::assertSame(expected: 'closed', actual: $result['meeting']['lifecycle']);
+
+    }//end testCloseFromOpenedReturnsSuccess()
+
+    /**
+     * Test getAvailableActions returns only valid actions for a given state.
+     *
+     * @return void
+     */
+    public function testGetAvailableActionsForScheduled(): void
+    {
+        $actions = $this->service->getAvailableActions('scheduled');
+
+        self::assertContains(needle: 'open', haystack: $actions);
+        self::assertContains(needle: 'close', haystack: $actions);
+        self::assertNotContains(needle: 'pause', haystack: $actions);
+        self::assertNotContains(needle: 'resume', haystack: $actions);
+
+    }//end testGetAvailableActionsForScheduled()
+
+    /**
+     * Test getAvailableActions returns empty array for terminal 'closed' state.
+     *
+     * @return void
+     */
+    public function testGetAvailableActionsForClosedReturnsEmpty(): void
+    {
+        $actions = $this->service->getAvailableActions('closed');
+
+        self::assertEmpty(actual: $actions);
+
+    }//end testGetAvailableActionsForClosedReturnsEmpty()
+
+}//end class
diff --git a/tests/unit/Controller/MeetingControllerTest.php b/tests/unit/Controller/MeetingControllerTest.php
new file mode 100644
index 00000000..e7c34dee
--- /dev/null
+++ b/tests/unit/Controller/MeetingControllerTest.php
@@ -0,0 +1,190 @@
+<?php
+
+/**
+ * Unit tests for MeetingController.
+ *
+ * @category Test
+ * @package  OCA\Decidesk\Tests\Unit\Controller
+ *
+ * @author    Conduction Development Team <dev@conductio.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git-id>
+ *
+ * @link https://conduction.nl
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-3.2
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Decidesk\Tests\Unit\Controller;
+
+use OCA\Decidesk\Controller\MeetingController;
+use OCA\Decidesk\Service\MeetingService;
+use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\JSONResponse;
+use OCP\IRequest;
+use PHPUnit\Framework\MockObject\MockObject;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Tests for MeetingController.
+ *
+ * @spec openspec/changes/p2-meeting-management/tasks.md#task-3.2
+ */
+class MeetingControllerTest extends TestCase
+{
+
+    /**
+     * The controller under test.
+     *
+     * @var MeetingController
+     */
+    private MeetingController $controller;
+
+    /**
+     * Mock IRequest.
+     *
+     * @var IRequest&MockObject
+     */
+    private IRequest&MockObject $request;
+
+    /**
+     * Mock MeetingService.
+     *
+     * @var MeetingService&MockObject
+     */
+    private MeetingService&MockObject $meetingService;
+
+    /**
+     * Set up test fixtures.
+     *
+     * @return void
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        $this->request        = $this->createMock(originalClassName: IRequest::class);
+        $this->meetingService = $this->createMock(originalClassName: MeetingService::class);
+
+        $this->controller = new MeetingController(
+            request: $this->request,
+            meetingService: $this->meetingService,
+        );
+
+    }//end setUp()
+
+    /**
+     * Test that a valid action returns HTTP 200 with the updated meeting.
+     *
+     * @return void
+     */
+    public function testLifecycleReturnsOkOnSuccess(): void
+    {
+        $uuid    = 'aaaaaaaa-0000-0000-0000-000000000001';
+        $meeting = ['lifecycle' => 'opened', 'id' => $uuid];
+
+        $this->request->method('getParam')
+            ->with('action', '')
+            ->willReturn('open');
+
+        $this->meetingService->expects($this->once())
+            ->method('transition')
+            ->with(meetingId: $uuid, action: 'open')
+            ->willReturn(['success' => true, 'meeting' => $meeting, 'message' => "Meeting transitioned to 'opened'."]);
+
+        $result = $this->controller->lifecycle(id: $uuid);
+
+        self::assertInstanceOf(expected: JSONResponse::class, actual: $result);
+        self::assertSame(expected: Http::STATUS_OK, actual: $result->getStatus());
+        self::assertTrue(condition: $result->getData()['success']);
+
+    }//end testLifecycleReturnsOkOnSuccess()
+
+    /**
+     * Test that an invalid transition returns HTTP 422.
+     *
+     * @return void
+     */
+    public function testLifecycleReturnsUnprocessableOnInvalidTransition(): void
+    {
+        $uuid = 'aaaaaaaa-0000-0000-0000-000000000002';
+
+        $this->request->method('getParam')
+            ->with('action', '')
+            ->willReturn('pause');
+
+        $this->meetingService->expects($this->once())
+            ->method('transition')
+            ->with(meetingId: $uuid, action: 'pause')
+            ->willReturn([
+                'success' => false,
+                'meeting' => null,
+                'message' => "Cannot 'pause' a meeting in 'draft' state.",
+            ]);
+
+        $result = $this->controller->lifecycle(id: $uuid);
+
+        self::assertInstanceOf(expected: JSONResponse::class, actual: $result);
+        self::assertSame(expected: Http::STATUS_UNPROCESSABLE_ENTITY, actual: $result->getStatus());
+        self::assertArrayHasKey(key: 'message', array: $result->getData());
+
+    }//end testLifecycleReturnsUnprocessableOnInvalidTransition()
+
+    /**
+     * Test that a missing action parameter returns HTTP 422.
+     *
+     * @return void
+     */
+    public function testLifecycleReturnsBadRequestWhenActionMissing(): void
+    {
+        $this->request->method('getParam')
+            ->with('action', '')
+            ->willReturn('');
+
+        $this->meetingService->expects($this->never())
+            ->method('transition');
+
+        $result = $this->controller->lifecycle(id: 'some-uuid');
+
+        self::assertInstanceOf(expected: JSONResponse::class, actual: $result);
+        self::assertSame(expected: Http::STATUS_UNPROCESSABLE_ENTITY, actual: $result->getStatus());
+        self::assertArrayHasKey(key: 'message', array: $result->getData());
+
+    }//end testLifecycleReturnsBadRequestWhenActionMissing()
+
+    /**
+     * Test that meeting-not-found returns HTTP 422 (service returns failure).
+     *
+     * @return void
+     */
+    public function testLifecycleReturnsUnprocessableWhenMeetingNotFound(): void
+    {
+        $uuid = 'aaaaaaaa-0000-0000-0000-000099999999';
+
+        $this->request->method('getParam')
+            ->with('action', '')
+            ->willReturn('open');
+
+        $this->meetingService->expects($this->once())
+            ->method('transition')
+            ->willReturn([
+                'success' => false,
+                'meeting' => null,
+                'message' => "Meeting '$uuid' not found.",
+            ]);
+
+        $result = $this->controller->lifecycle(id: $uuid);
+
+        self::assertSame(expected: Http::STATUS_UNPROCESSABLE_ENTITY, actual: $result->getStatus());
+        self::assertStringContainsString(
+            needle: 'not found',
+            haystack: $result->getData()['message']
+        );
+
+    }//end testLifecycleReturnsUnprocessableWhenMeetingNotFound()
+
+}//end class